@openlfcp/client 0.2.1 → 0.2.2

package/dist/invite.d.ts

@@ -77,7 +77,9 @@ export interface CreatedInvitation {
 /**
  * The inviter's side (§18, §73). The grant must validate on the stored
  * chain and the package must pass §25.2 at the grant's head, both checked
- * before anything is queued; the grant is queued before the package.
+ * before anything is queued, and so is the link. The grant and the package
+ * are queued in one atomic commit, the grant first: a refused or failed
+ * commit queues neither, and a retry starts afresh.
  * Share the link once both are ACKed: until then the grant is not on the
  * coordinator's chain.
  */

package/dist/invite.js

@@ -4,7 +4,7 @@ import { dekSecretRef } from "@openlfcp/storage";
 import { ABILITY, assembleInviteUri, createMessage, ERROR_CODE, invitationPrincipal, isGrantActive, parseControlRecord, parseInviteUri, parseKeyPackage, receiveKeyPackage, sealKeyPackage, signControlRecord, validateControlChain, verifyInvitationSecret, verifyKeyPackage, } from "@openlfcp/wire";
 import { clearClaimJournal, journaledDeks, readClaimJournal, writeClaimJournal, } from "./claim-journal.js";
 import { LfcpConnection } from "./connection.js";
-import { queueControlRecord, queueKeyPackage } from "./queue.js";
+import { controlRecordWrites, keyPackageWrites } from "./queue.js";
 import { loadControlChain, localControlChain, saveControlChain } from "./storage.js";
 /**
  * Link invitations and the one-time capability claim (LFCP-WIRE-01 §18,
@@ -94,7 +94,9 @@ function resolveInvitationGrant(state, linkGrantId, secret) {
 /**
  * The inviter's side (§18, §73). The grant must validate on the stored
  * chain and the package must pass §25.2 at the grant's head, both checked
- * before anything is queued; the grant is queued before the package.
+ * before anything is queued, and so is the link. The grant and the package
+ * are queued in one atomic commit, the grant first: a refused or failed
+ * commit queues neither, and a retry starts afresh.
  * Share the link once both are ACKed: until then the grant is not on the
  * coordinator's chain.
  */
@@ -141,16 +143,27 @@ export async function createInvitation(options) {
     const check = verifyKeyPackage(next, parseKeyPackage(sealed.bytes));
     if (check.kind !== "authorized")
         fail("AUTHORIZATION_FAILED", `the invitation Key Package is refused: ${check.message}`);
-    await queueControlRecord(options.storage, grant.bytes);
-    const keyPackageId = await queueKeyPackage(options.storage, sealed.bytes);
+    // The link is built (and its endpoints checked) before storage changes, so
+    // a refused link leaves nothing queued; then the grant and its Key Package
+    // go into ONE commit, grant first, so either both are queued, in sending
+    // order, or neither is (no grant without its package).
     const uri = assembleInviteUri({
         resourceId: R,
         endpoints: options.endpoints,
         grantId: grant.recordId,
         secret,
     });
+    const link = new InvitationLink(uri);
+    const keyPackageId = hash32(parseKeyPackage(sealed.bytes).signed.id);
+    const r = await options.storage.commit([
+        ...controlRecordWrites(grant.bytes),
+        ...keyPackageWrites(sealed.bytes),
+    ]);
+    // The same refusal as the queue helpers (queue.ts): a plain Error.
+    if (!r.ok)
+        throw new Error(`the object was not queued: ${r.reason}`);
     return Object.freeze({
-        link: new InvitationLink(uri),
+        link,
         grantId: grant.recordId,
         invitationPrincipal: invitee,
         keyPackageId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openlfcp/client",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "LFCP client: session, Control Plane and Data Plane synchronization.",
   "keywords": [
     "openlfcp",
@@ -42,9 +42,9 @@
     "tag": "latest"
   },
   "dependencies": {
-    "@openlfcp/core": "^0.2.1",
-    "@openlfcp/storage": "^0.2.1",
-    "@openlfcp/wire": "^0.2.1",
-    "@openlfcp/crypto": "^0.2.1"
+    "@openlfcp/crypto": "^0.2.2",
+    "@openlfcp/storage": "^0.2.2",
+    "@openlfcp/wire": "^0.2.2",
+    "@openlfcp/core": "^0.2.2"
   }
 }