@rixl/sdk 0.21.0 → 0.21.1

package/dist/index.d.ts

@@ -14839,6 +14839,11 @@ declare const hasPermission: (required: string) => boolean;
  * Called on sign-out so no grant outlives the session, and before an
  * organization switch so the previous organization's grants cannot be read as
  * the new one's while the fresh answer is in flight.
+ *
+ * Emptying the set is not enough on its own: a resolution issued before the
+ * clear can land after it and repopulate the store with the retired scope's
+ * grants. Retiring the epoch here makes any such answer be discarded, so
+ * sign-out cannot be undone by a request that was already in the air.
  */
 declare const clearPermissions: () => void;
 //#endregion
@@ -14848,7 +14853,8 @@ declare const clearPermissions: () => void;
  *
  * Call before switching the active organization: without it, a request issued
  * for the previous organization can land afterwards and repopulate the store
- * with permissions the user no longer holds.
+ * with permissions the user no longer holds. Sign-out needs no such call —
+ * `clearPermissions` retires the scope itself.
  */
 declare const invalidatePermissions: () => void;
 /**

package/dist/index.js

@@ -3370,6 +3370,25 @@ const matches = (held, required) => {
 	return (SUPERSETS[verb] ?? []).some((superset) => held.has(resource + superset));
 };
 
+//#endregion
+//#region src/auth/permissions/epoch.ts
+/**
+* Counts the identity scopes that have come and gone — an organization switch,
+* a sign-out. A response that started under an earlier scope answers a question
+* nobody is asking any more and must not be written into the store.
+*
+* It lives here rather than in `./resolve` so `permissionStore` can retire a
+* scope from `clearPermissions` without importing the resolver, whose module
+* graph reaches back into `authStore`.
+*/
+const state$1 = shared("permissionEpoch", () => ({ current: 0 }));
+/** The scope in effect right now. Compare against a value captured earlier. */
+const permissionEpoch = () => state$1.current;
+/** Retires the current scope, so answers already in flight for it are dropped. */
+const retirePermissionEpoch = () => {
+	state$1.current += 1;
+};
+
 //#endregion
 //#region src/auth/permissionStore.ts
 /**
@@ -3401,8 +3420,14 @@ const hasPermission = (required) => matches(permissions.get(), required);
 * Called on sign-out so no grant outlives the session, and before an
 * organization switch so the previous organization's grants cannot be read as
 * the new one's while the fresh answer is in flight.
+*
+* Emptying the set is not enough on its own: a resolution issued before the
+* clear can land after it and repopulate the store with the retired scope's
+* grants. Retiring the epoch here makes any such answer be discarded, so
+* sign-out cannot be undone by a request that was already in the air.
 */
 const clearPermissions = () => {
+	retirePermissionEpoch();
 	permissions.set(/* @__PURE__ */ new Set());
 	permissionsResolved.set(false);
 };
@@ -4962,23 +4987,20 @@ const verifyPasskeyForLogin = async (session_id, credential) => {
 
 //#endregion
 //#region src/auth/permissions/resolve.ts
-/**
-* Incremented whenever the identity's scope changes — an organization switch,
-* a sign-out. A response that started before the change belongs to the previous
-* scope and must not be written into the store.
-*/
-let epoch = 0;
 /** An `ensurePermissions` call already in flight, so concurrent guards share one request. */
 let pending = null;
+/** The scope `pending` was issued under; once retired, its answer is worthless. */
+let pendingEpoch = 0;
 /**
 * Invalidates any resolution already in flight.
 *
 * Call before switching the active organization: without it, a request issued
 * for the previous organization can land afterwards and repopulate the store
-* with permissions the user no longer holds.
+* with permissions the user no longer holds. Sign-out needs no such call —
+* `clearPermissions` retires the scope itself.
 */
 const invalidatePermissions = () => {
-	epoch += 1;
+	retirePermissionEpoch();
 	pending = null;
 };
 /**
@@ -4996,9 +5018,9 @@ const invalidatePermissions = () => {
 * than keeps stale grants.
 */
 const resolvePermissions = async () => {
-	const started = epoch;
+	const started = permissionEpoch();
 	const info = await getUserInfo();
-	if (started !== epoch) return;
+	if (started !== permissionEpoch()) return;
 	permissions.set(new Set(info.permissions));
 	permissionsResolved.set(true);
 };
@@ -5013,12 +5035,14 @@ const resolvePermissions = async () => {
 */
 const ensurePermissions = async () => {
 	if (permissionsResolved.get()) return;
-	if (pending) return pending;
-	const started = epoch;
-	pending = resolvePermissions().finally(() => {
-		if (started === epoch) pending = null;
+	const started = permissionEpoch();
+	if (pending && pendingEpoch === started) return pending;
+	pendingEpoch = started;
+	const request = resolvePermissions().finally(() => {
+		if (pending === request) pending = null;
 	});
-	return pending;
+	pending = request;
+	return request;
 };
 
 //#endregion