@sparkvault/sdk-mobile 5.2.0 → 5.2.2

package/dist/notify.d.ts

@@ -16,8 +16,10 @@ export interface NotificationRow {
     created_at: number;
     title: string;
     /**
-     * The short cleartext body of a plaintext send, shown natively. Absent on a
-     * sealed row (its content lives behind the pointer).
+     * The row's visible cleartext line, shown natively: a plaintext send's inline
+     * body, or a SEALED send's non-secret `instructions`. A sealed row can and
+     * normally should carry one — it is the readable line above the reveal. Never
+     * the sealed content itself. Absent when the sender set neither.
      */
     body?: string;
     category: string;
@@ -26,13 +28,26 @@ export interface NotificationRow {
     read_at: number | null;
     archived_at: number | null;
     /**
-     * The grant to open. Present only for a SEALED (secure) send — a cleartext send
-     * delivers its content inline in the channel and mints no grant, so its row has
-     * no pointer. Guard before building a URL from it.
+     * The grant to open. Present only while a live reveal stands behind it — a
+     * SEALED (secure) send that has not been recalled. A cleartext send delivers its
+     * content inline in the channel and mints no grant; a recalled row's grant is
+     * revoked and the pointer is withheld rather than echoed. Guard before building
+     * a URL from it.
      */
     sparklink_code?: string;
-    /** True only when there is a secure part to reveal (i.e. `sparklink_code` is set). */
+    /**
+     * True only when there is a secure part left to reveal — exactly when
+     * `sparklink_code` is present. `false` does NOT mean "cleartext row": a recalled
+     * row is unlocked too, with nothing behind it. Branch on `recalled` before
+     * treating an unlocked row as plain text.
+     */
     locked: boolean;
+    /**
+     * The sender took this notification back. The grant is revoked and
+     * `sparklink_code` is withheld, so render "no longer available" rather than a
+     * tap-to-reveal that opens nothing.
+     */
+    recalled: boolean;
     thread_id?: string;
 }
 export interface ListNotificationsOptions {

package/dist/notify.js.map

@@ -1 +1 @@
-{"version":3,"file":"notify.js","sourceRoot":"","sources":["../src/notify.ts"],"names":[],"mappings":"AAmHA;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B;;;;;GAKG;AACH,MAAM,OAAO,kBAAkB;IAG7B,YAAY,IAAsB;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,QAAQ,CAAC,UAAoC,EAAE;QACnD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,OAAO,CAAC,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAEzD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAClC,KAAK,CAAC,CAAC,CAAC,qBAAqB,KAAK,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAC3D,CAAC;QACF,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,cAAc;QAClB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAsB,gCAAgC,CAAC,CAAC;QAC5F,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CACb,cAAsB,EACtB,OAAqC;QAErC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CACnC,qBAAqB,kBAAkB,CAAC,cAAc,CAAC,QAAQ,EAC/D,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CACxD,CAAC;QACF,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAChB,OAAyC;QAEzC,MAAM,IAAI,GAA0D,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAC7F,IAAI,OAAO,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAEjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CACnC,yBAAyB,EACzB,IAAI,CACL,CAAC;QACF,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,MAA0B,CAAC;QAC/B,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,kBAAkB,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;YACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/F,OAAO,IAAI,MAAM,EAAE,OAAO,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM,EAAE,MAAM;gBAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACxD,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QACzB,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,cAAc,CAAC,SAAiB;QACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAyB,2BAA2B,EAAE;YACzF,UAAU,EAAE,SAAS;SACtB,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,qBAAqB,CAAC,SAAiB;QAC3C,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CAAC,SAAiB;QACtC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,6BAA6B,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;CACF"}
+{"version":3,"file":"notify.js","sourceRoot":"","sources":["../src/notify.ts"],"names":[],"mappings":"AAkIA;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B;;;;;GAKG;AACH,MAAM,OAAO,kBAAkB;IAG7B,YAAY,IAAsB;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,QAAQ,CAAC,UAAoC,EAAE;QACnD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,OAAO,CAAC,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAEzD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAClC,KAAK,CAAC,CAAC,CAAC,qBAAqB,KAAK,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAC3D,CAAC;QACF,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,cAAc;QAClB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAsB,gCAAgC,CAAC,CAAC;QAC5F,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CACb,cAAsB,EACtB,OAAqC;QAErC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CACnC,qBAAqB,kBAAkB,CAAC,cAAc,CAAC,QAAQ,EAC/D,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CACxD,CAAC;QACF,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAChB,OAAyC;QAEzC,MAAM,IAAI,GAA0D,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAC7F,IAAI,OAAO,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAEjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CACnC,yBAAyB,EACzB,IAAI,CACL,CAAC;QACF,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,MAA0B,CAAC;QAC/B,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,kBAAkB,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;YACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/F,OAAO,IAAI,MAAM,EAAE,OAAO,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM,EAAE,MAAM;gBAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACxD,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QACzB,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,cAAc,CAAC,SAAiB;QACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAyB,2BAA2B,EAAE;YACzF,UAAU,EAAE,SAAS;SACtB,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,qBAAqB,CAAC,SAAiB;QAC3C,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CAAC,SAAiB;QACtC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,6BAA6B,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;CACF"}

package/dist/notify.test-d.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Notify wire-contract assertions — COMPILE-TIME ONLY.
+ *
+ * `NotificationRow` has no runtime, so a unit test can never catch it drifting
+ * from the server: the transpiler strips it and every assertion passes. This file
+ * is the gate instead — `tsc --noEmit` (`pnpm typecheck`, which CI runs on every
+ * push and again on every SDK publish) fails the moment the published row stops
+ * matching what `apps/api` actually emits.
+ *
+ * It is deliberately NOT a `*.test.ts`: that suffix is excluded from `tsconfig`,
+ * which would put these assertions exactly where the compiler cannot see them.
+ *
+ * The row shape is shared verbatim with `@sparkvault/sdk-js`, whose own contract
+ * file asserts the same three members — both must move together, and the mirrored
+ * server source is `apps/api/src/notify/inbox.js` (`projectRow`).
+ */
+import type { NotificationRow } from './notify.js';
+/** Fails to compile unless `T` resolves to exactly `true`. */
+type Assert<T extends true> = T;
+/**
+ * Invariant type equality — `A` and `B` must be the SAME type, not merely mutually
+ * assignable. Assignability would accept an optional member where the wire always
+ * carries one, which is the precise drift these assertions exist to catch.
+ */
+type Equals<A, B> = (<T>() => T extends A ? 1 : 2) extends <T>() => T extends B ? 1 : 2 ? true : false;
+export type NotifyWireContract = [
+    Assert<Equals<NotificationRow['recalled'], boolean>>,
+    Assert<Equals<NotificationRow['locked'], boolean>>,
+    Assert<Equals<NotificationRow['sparklink_code'], string | undefined>>
+];
+export {};

package/dist/notify.test-d.js

@@ -0,0 +1,18 @@
+/**
+ * Notify wire-contract assertions — COMPILE-TIME ONLY.
+ *
+ * `NotificationRow` has no runtime, so a unit test can never catch it drifting
+ * from the server: the transpiler strips it and every assertion passes. This file
+ * is the gate instead — `tsc --noEmit` (`pnpm typecheck`, which CI runs on every
+ * push and again on every SDK publish) fails the moment the published row stops
+ * matching what `apps/api` actually emits.
+ *
+ * It is deliberately NOT a `*.test.ts`: that suffix is excluded from `tsconfig`,
+ * which would put these assertions exactly where the compiler cannot see them.
+ *
+ * The row shape is shared verbatim with `@sparkvault/sdk-js`, whose own contract
+ * file asserts the same three members — both must move together, and the mirrored
+ * server source is `apps/api/src/notify/inbox.js` (`projectRow`).
+ */
+export {};
+//# sourceMappingURL=notify.test-d.js.map

package/dist/notify.test-d.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify.test-d.js","sourceRoot":"","sources":["../src/notify.test-d.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sparkvault/sdk-mobile",
-  "version": "5.2.0",
+  "version": "5.2.2",
   "description": "Mobile SDK for SparkVault Identity, vault, folder, and ingot workflows",
   "type": "module",
   "main": "./dist/index.js",

package/src/notify.test-d.ts

@@ -0,0 +1,42 @@
+/**
+ * Notify wire-contract assertions — COMPILE-TIME ONLY.
+ *
+ * `NotificationRow` has no runtime, so a unit test can never catch it drifting
+ * from the server: the transpiler strips it and every assertion passes. This file
+ * is the gate instead — `tsc --noEmit` (`pnpm typecheck`, which CI runs on every
+ * push and again on every SDK publish) fails the moment the published row stops
+ * matching what `apps/api` actually emits.
+ *
+ * It is deliberately NOT a `*.test.ts`: that suffix is excluded from `tsconfig`,
+ * which would put these assertions exactly where the compiler cannot see them.
+ *
+ * The row shape is shared verbatim with `@sparkvault/sdk-js`, whose own contract
+ * file asserts the same three members — both must move together, and the mirrored
+ * server source is `apps/api/src/notify/inbox.js` (`projectRow`).
+ */
+
+import type { NotificationRow } from './notify.js';
+
+/** Fails to compile unless `T` resolves to exactly `true`. */
+type Assert<T extends true> = T;
+
+/**
+ * Invariant type equality — `A` and `B` must be the SAME type, not merely mutually
+ * assignable. Assignability would accept an optional member where the wire always
+ * carries one, which is the precise drift these assertions exist to catch.
+ */
+type Equals<A, B> = (<T>() => T extends A ? 1 : 2) extends <T>() => T extends B ? 1 : 2
+  ? true
+  : false;
+
+export type NotifyWireContract = [
+  // `recalled` is `Boolean(row.recalled_at)`, so it is always on the wire: typing
+  // it optional would let the app skip the "no longer available" branch and fall
+  // through to a reveal that opens nothing.
+  Assert<Equals<NotificationRow['recalled'], boolean>>,
+  // `locked` is `!recalled && Boolean(row.sparklink_code)` — always present.
+  Assert<Equals<NotificationRow['locked'], boolean>>,
+  // The pointer is withheld on a recalled row and absent on a cleartext one, so
+  // it is optional in both directions and must be guarded before use.
+  Assert<Equals<NotificationRow['sparklink_code'], string | undefined>>,
+];

package/src/notify.ts

@@ -19,8 +19,10 @@ export interface NotificationRow {
   created_at: number;
   title: string;
   /**
-   * The short cleartext body of a plaintext send, shown natively. Absent on a
-   * sealed row (its content lives behind the pointer).
+   * The row's visible cleartext line, shown natively: a plaintext send's inline
+   * body, or a SEALED send's non-secret `instructions`. A sealed row can and
+   * normally should carry one — it is the readable line above the reveal. Never
+   * the sealed content itself. Absent when the sender set neither.
    */
   body?: string;
   category: string;
@@ -29,13 +31,26 @@ export interface NotificationRow {
   read_at: number | null;
   archived_at: number | null;
   /**
-   * The grant to open. Present only for a SEALED (secure) send — a cleartext send
-   * delivers its content inline in the channel and mints no grant, so its row has
-   * no pointer. Guard before building a URL from it.
+   * The grant to open. Present only while a live reveal stands behind it — a
+   * SEALED (secure) send that has not been recalled. A cleartext send delivers its
+   * content inline in the channel and mints no grant; a recalled row's grant is
+   * revoked and the pointer is withheld rather than echoed. Guard before building
+   * a URL from it.
    */
   sparklink_code?: string;
-  /** True only when there is a secure part to reveal (i.e. `sparklink_code` is set). */
+  /**
+   * True only when there is a secure part left to reveal — exactly when
+   * `sparklink_code` is present. `false` does NOT mean "cleartext row": a recalled
+   * row is unlocked too, with nothing behind it. Branch on `recalled` before
+   * treating an unlocked row as plain text.
+   */
   locked: boolean;
+  /**
+   * The sender took this notification back. The grant is revoked and
+   * `sparklink_code` is withheld, so render "no longer available" rather than a
+   * tap-to-reveal that opens nothing.
+   */
+  recalled: boolean;
   thread_id?: string;
 }