@pmate/chat-sdk 0.12.0-next.67 → 0.12.0-next.68

package/lib/messageView.js

@@ -4,7 +4,7 @@ function media(value) {
     if (typeof value !== "string" || !value)
         return undefined;
     try {
-        const url = new URL(value);
+        const url = new URL(value, "https://chat.invalid");
         return ["https:", "http:"].includes(url.protocol) && !url.username && !url.password ? value : undefined;
     }
     catch {

package/lib/runtime/chatSession.js

@@ -415,7 +415,19 @@ export class ChatSession {
         return (delivered ? this.sender.send(threadId, wire) : this.sender.enqueue(threadId, wire)).then(next => { if (this.withdrawn)
             throw new Error("CHAT_ACCESS_REVOKED"); return next; });
     }
-    getConversation(target) { this.assertOpen(); return this.conversations.create(target); }
+    async getConversation(target) {
+        this.assertOpen();
+        try {
+            return await this.conversations.create(target);
+        }
+        catch (error) {
+            if (error?.message !== "CHAT_ACCESS_REVOKED")
+                throw error;
+            await this.messages.authorizeScope();
+            this.assertOpen();
+            return this.conversations.create(target);
+        }
+    }
     async sendContent(target, input, delivered) {
         let thread = typeof target === "string" ? await this.resolveConversation(target) : target;
         validateConversation(this.options.messages.scope, thread);

package/lib/runtime/createChat.js

@@ -34,7 +34,7 @@ export function createChat(options) {
         },
         loadGroup: (groupId, signal) => reader.group({ groupId, teamId }, signal),
         activeThreadId: options.threadId,
-        messages: { scope: { appId, accountId, profileId, teamId }, transport: { load: (thread, signal) => page(thread, signal), changes: (thread, after, signal) => page(thread, signal, { after }), older: (thread, before, signal) => page(thread, signal, { before }) }, onError },
+        messages: { scope: { appId, accountId, profileId, teamId }, transport: { authorizeScope: async (signal) => { await reader.contacts(teamId, signal); }, load: (thread, signal) => page(thread, signal), changes: (thread, after, signal) => page(thread, signal, { after }), older: (thread, before, signal) => page(thread, signal, { before }) }, onError },
         reading: { appId, profileId, sessionToken: token, hubHttpUrl: http, fetch: options.fetch, onError },
         connection: { appId, profileId, teamId, hubUrl: ws, clientInstanceId: options.clientInstanceId, fetchImpl: options.fetch,
             session: { token, identity: { accountId, app: appId, profileId } }, onNotification: options.onNotification, onReach: options.onReach },

package/lib/runtime/messageClient.d.ts

@@ -7,6 +7,8 @@ export type MessagePage<T> = {
     resetRequired?: boolean;
 };
 export type MessageTransport<T> = {
+    /** Optional team-scoped authorization for fresh instances recovering a revoked cache. */
+    authorizeScope?: (signal: AbortSignal) => Promise<void>;
     /** Authoritative history. Must include control state needed to merge old rows. */
     load: (threadId: string, signal: AbortSignal) => Promise<MessagePage<T>>;
     changes?: (threadId: string, after: string, signal: AbortSignal) => Promise<MessagePage<T>>;
@@ -72,6 +74,9 @@ export declare class MessageClient<T extends StoredMessage> {
         version: number;
         allowed: boolean;
     }>;
+    private authorizingScope?;
+    /** Recovery belongs to the SDK; withdrawn instances never regain authority. */
+    authorizeScope(): Promise<void>;
     getSnapshot(thread: string): MessageSnapshot<T> | undefined;
     /** Exact authoritative row only; migration-only rows never prove delivery. */
     cachedMessage(thread: string, id: string): Promise<T>;

package/lib/runtime/messageClient.js

@@ -100,6 +100,38 @@ export class MessageClient {
         const current = await this.storage.scopeAccess();
         return { version: current.version, allowed: !this.scopeDenied && !current.revoked && current.version === this.scopeVersion };
     }
+    authorizingScope;
+    /** Recovery belongs to the SDK; withdrawn instances never regain authority. */
+    authorizeScope() {
+        return this.authorizingScope ??= (async () => {
+            await this.ensureScope();
+            if (this.closed || this.closing || this.scopeDenied)
+                throw accessRevoked();
+            const access = await this.scopeAccess();
+            if (access.allowed)
+                return;
+            if (access.version !== this.scopeVersion) {
+                this.denyScope();
+                throw accessRevoked();
+            }
+            if (!this.options.transport.authorizeScope)
+                throw accessRevoked();
+            try {
+                await this.options.transport.authorizeScope(this.abort.signal);
+                if (this.closed || this.closing || this.scopeDenied)
+                    throw accessRevoked();
+                await this.storage.authorizeScope(this.scopeVersion);
+                if (this.closed || this.closing || this.scopeDenied)
+                    throw accessRevoked();
+                this.scopeAllowed = true;
+            }
+            catch (error) {
+                if ([401, 403].includes(error?.status ?? 0) || String(error).includes("MESSAGE_SCOPE_CHANGED"))
+                    this.denyScope();
+                throw error;
+            }
+        })().finally(() => { this.authorizingScope = undefined; });
+    }
     getSnapshot(thread) { return this.watches.get(thread)?.snapshot; }
     /** Exact authoritative row only; migration-only rows never prove delivery. */
     async cachedMessage(thread, id) {

package/lib/runtime/messageStore.d.ts

@@ -82,6 +82,8 @@ export declare class IndexedDbMessageStore<T extends StoredMessage> {
     private finishPage;
     windows(): Promise<CoverageRow[]>;
     scopeAccess(): Promise<MessageScopeAccess>;
+    /** Only fresh, server-confirmed authorization may lift this durable tombstone. */
+    authorizeScope(expectedVersion: number): Promise<void>;
     private scopedCoverage;
     private clearScopeRows;
     /** Persist the denial first; failed cleanup must never make cached rows readable. */

package/lib/runtime/messageStore.js

@@ -230,6 +230,18 @@ export class IndexedDbMessageStore {
             throw new Error("INVALID_MESSAGE_SCOPE_ACCESS");
         return access;
     }
+    /** Only fresh, server-confirmed authorization may lift this durable tombstone. */
+    async authorizeScope(expectedVersion) {
+        await this.db.transaction("rw", [this.rows, this.legacy, this.coverage, this.accessRows, this.controls], async () => {
+            const access = await this.scopeAccess();
+            if (access.version !== expectedVersion)
+                throw new Error("MESSAGE_SCOPE_CHANGED");
+            if (!access.revoked)
+                return;
+            await this.clearScopeRows();
+            await this.accessRows.put({ ...access, revoked: false });
+        });
+    }
     scopedCoverage(coverage, access) {
         return access.version ? { ...coverage, complete: coverage?.complete ?? false, scopeVersion: access.version } : coverage;
     }

package/lib/runtime/socialReadClient.d.ts

@@ -46,7 +46,7 @@ export declare class SocialReadClient {
     private readonly options;
     constructor(options: SocialReadClientOptions);
     /** Without teamId includes current Teams and unassigned contact metadata for migration. */
-    contacts(teamId?: string): Promise<ChatReaderContact[]>;
+    contacts(teamId?: string, signal?: AbortSignal): Promise<ChatReaderContact[]>;
     unread(teamId?: string): Promise<ChatReaderUnread[]>;
     messages(input: {
         threadId: string;

package/lib/runtime/socialReadClient.js

@@ -14,8 +14,8 @@ export class SocialReadClient {
     options;
     constructor(options) { this.options = { ...options }; }
     /** Without teamId includes current Teams and unassigned contact metadata for migration. */
-    contacts(teamId) {
-        return this.list("contacts", this.teamQuery(teamId));
+    contacts(teamId, signal) {
+        return this.list("contacts", this.teamQuery(teamId), signal);
     }
     unread(teamId) {
         return this.list("unread", this.teamQuery(teamId));
@@ -58,8 +58,8 @@ export class SocialReadClient {
         if (this.options.appId === "pmate:merry" && !teamId)
             throw new SocialReadError(400, "TEAM_ID_REQUIRED");
     }
-    async list(action, query) {
-        const value = await this.request(action, query);
+    async list(action, query, signal) {
+        const value = await this.request(action, query, signal);
         if (!Array.isArray(value))
             throw new SocialReadError(502, "INVALID_SOCIAL_READ_RESPONSE");
         return value;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pmate/chat-sdk",
-  "version": "0.12.0-next.67",
+  "version": "0.12.0-next.68",
   "description": "Local-first chat SDK, message subscriptions, reading state, and shared chat UI primitives",
   "type": "module",
   "main": "./lib/index.js",