@pmate/chat-sdk 0.12.0-next.67 → 0.12.0-next.69

package/lib/runtime/messageClient.js

@@ -100,6 +100,38 @@ export class MessageClient {
         const current = await this.storage.scopeAccess();
         return { version: current.version, allowed: !this.scopeDenied && !current.revoked && current.version === this.scopeVersion };
     }
+    authorizingScope;
+    /** Recovery belongs to the SDK; withdrawn instances never regain authority. */
+    authorizeScope() {
+        return this.authorizingScope ??= (async () => {
+            await this.ensureScope();
+            if (this.closed || this.closing || this.scopeDenied)
+                throw accessRevoked();
+            const access = await this.scopeAccess();
+            if (access.allowed)
+                return;
+            if (access.version !== this.scopeVersion) {
+                this.denyScope();
+                throw accessRevoked();
+            }
+            if (!this.options.transport.authorizeScope)
+                throw accessRevoked();
+            try {
+                await this.options.transport.authorizeScope(this.abort.signal);
+                if (this.closed || this.closing || this.scopeDenied)
+                    throw accessRevoked();
+                await this.storage.authorizeScope(this.scopeVersion);
+                if (this.closed || this.closing || this.scopeDenied)
+                    throw accessRevoked();
+                this.scopeAllowed = true;
+            }
+            catch (error) {
+                if ([401, 403].includes(error?.status ?? 0) || String(error).includes("MESSAGE_SCOPE_CHANGED"))
+                    this.denyScope();
+                throw error;
+            }
+        })().finally(() => { this.authorizingScope = undefined; });
+    }
     getSnapshot(thread) { return this.watches.get(thread)?.snapshot; }
     /** Exact authoritative row only; migration-only rows never prove delivery. */
     async cachedMessage(thread, id) {

package/lib/runtime/messageStore.d.ts

@@ -82,6 +82,8 @@ export declare class IndexedDbMessageStore<T extends StoredMessage> {
     private finishPage;
     windows(): Promise<CoverageRow[]>;
     scopeAccess(): Promise<MessageScopeAccess>;
+    /** Only fresh, server-confirmed authorization may lift this durable tombstone. */
+    authorizeScope(expectedVersion: number): Promise<void>;
     private scopedCoverage;
     private clearScopeRows;
     /** Persist the denial first; failed cleanup must never make cached rows readable. */

package/lib/runtime/messageStore.js

@@ -230,6 +230,18 @@ export class IndexedDbMessageStore {
             throw new Error("INVALID_MESSAGE_SCOPE_ACCESS");
         return access;
     }
+    /** Only fresh, server-confirmed authorization may lift this durable tombstone. */
+    async authorizeScope(expectedVersion) {
+        await this.db.transaction("rw", [this.rows, this.legacy, this.coverage, this.accessRows, this.controls], async () => {
+            const access = await this.scopeAccess();
+            if (access.version !== expectedVersion)
+                throw new Error("MESSAGE_SCOPE_CHANGED");
+            if (!access.revoked)
+                return;
+            await this.clearScopeRows();
+            await this.accessRows.put({ ...access, revoked: false });
+        });
+    }
     scopedCoverage(coverage, access) {
         return access.version ? { ...coverage, complete: coverage?.complete ?? false, scopeVersion: access.version } : coverage;
     }

package/lib/runtime/readCounts.js

@@ -51,7 +51,7 @@ export class ReadCountsClient {
         const scopeVersion = this.options.access ? await assertResponseCacheAccess(this.options.access) : undefined;
         const response = await (this.options.fetch ?? fetch)(`${this.options.hubHttpUrl.replace(/\/$/, "")}${path}`, { method: "POST", headers: { authorization: `Bearer ${this.options.token}`, "content-type": "application/json" }, body: JSON.stringify(body), signal: signal ? AbortSignal.any([signal, AbortSignal.timeout(8000)]) : AbortSignal.timeout(8000), redirect: "error" });
         if (!response.ok)
-            throw new Error(`READ_COUNTS_HTTP_${response.status}`);
+            throw Object.assign(new Error(`READ_COUNTS_HTTP_${response.status}`), { status: response.status });
         const envelope = await response.json();
         if (envelope.success !== true)
             throw new Error("INVALID_READ_COUNTS_RESPONSE");

package/lib/runtime/readSync.js

@@ -40,7 +40,7 @@ export class ReadSyncClient {
                 ...init, signal: timeout.signal, headers: { ...init.headers, authorization: `Bearer ${this.options.sessionToken}` },
             });
             if (!response.ok)
-                throw new Error(`READ_SYNC_HTTP_${response.status}`);
+                throw Object.assign(new Error(`READ_SYNC_HTTP_${response.status}`), { status: response.status });
             const envelope = await response.json();
             if (envelope.success !== true || envelope.data === undefined)
                 throw new Error("INVALID_READ_SYNC_RESPONSE");

package/lib/runtime/socialReadClient.d.ts

@@ -46,7 +46,7 @@ export declare class SocialReadClient {
     private readonly options;
     constructor(options: SocialReadClientOptions);
     /** Without teamId includes current Teams and unassigned contact metadata for migration. */
-    contacts(teamId?: string): Promise<ChatReaderContact[]>;
+    contacts(teamId?: string, signal?: AbortSignal): Promise<ChatReaderContact[]>;
     unread(teamId?: string): Promise<ChatReaderUnread[]>;
     messages(input: {
         threadId: string;

package/lib/runtime/socialReadClient.js

@@ -14,8 +14,8 @@ export class SocialReadClient {
     options;
     constructor(options) { this.options = { ...options }; }
     /** Without teamId includes current Teams and unassigned contact metadata for migration. */
-    contacts(teamId) {
-        return this.list("contacts", this.teamQuery(teamId));
+    contacts(teamId, signal) {
+        return this.list("contacts", this.teamQuery(teamId), signal);
     }
     unread(teamId) {
         return this.list("unread", this.teamQuery(teamId));
@@ -58,8 +58,8 @@ export class SocialReadClient {
         if (this.options.appId === "pmate:merry" && !teamId)
             throw new SocialReadError(400, "TEAM_ID_REQUIRED");
     }
-    async list(action, query) {
-        const value = await this.request(action, query);
+    async list(action, query, signal) {
+        const value = await this.request(action, query, signal);
         if (!Array.isArray(value))
             throw new SocialReadError(502, "INVALID_SOCIAL_READ_RESPONSE");
         return value;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pmate/chat-sdk",
-  "version": "0.12.0-next.67",
+  "version": "0.12.0-next.69",
   "description": "Local-first chat SDK, message subscriptions, reading state, and shared chat UI primitives",
   "type": "module",
   "main": "./lib/index.js",
@@ -33,6 +33,21 @@
       "types": "./lib/chat.d.ts",
       "import": "./lib/chat.js",
       "default": "./lib/chat.js"
+    },
+    "./advanced": {
+      "types": "./lib/advanced.d.ts",
+      "import": "./lib/advanced.js",
+      "default": "./lib/advanced.js"
+    },
+    "./framework": {
+      "types": "./lib/framework.d.ts",
+      "import": "./lib/framework.js",
+      "default": "./lib/framework.js"
+    },
+    "./history": {
+      "types": "./lib/history.d.ts",
+      "import": "./lib/history.js",
+      "default": "./lib/history.js"
     }
   },
   "publishConfig": {