@syncular/tauri 0.15.33 → 0.15.35

package/README.md

@@ -35,7 +35,11 @@ outbox, and requests a fresh bootstrap while preserving device identity,
 lease state, outcomes, and protected bookkeeping. The result contains only
 `alreadyApplied`, `retainedCommits`, and `resetSubscriptions`. It is blocked
 during security preflight and an active schema-floor stop; it is not a sign-out
-or secure-erasure API.
+or secure-erasure API. The JavaScript bridge strictly validates the exact
+acknowledgement shape and non-negative safe-integer counts; version drift or a
+malformed native response fails with the sanitized, stable
+`client.invalid_host_response` code before application recovery state can
+persist it.
 
 ## Secure preflight and native disposal
 

package/dist/index.js

@@ -29,7 +29,7 @@
 // -- Types the bridge speaks (structurally the web-client's) -----------------
 // Most imports stay type-only; the stable preflight error code is shared at
 // runtime so every host surfaces byte-identical policy evidence.
-import { SECURITY_PREFLIGHT_REQUIRED_CODE, withClientDiagnosticsHost, } from '@syncular/client';
+import { decodeLocalDataRebootstrapResult, SECURITY_PREFLIGHT_REQUIRED_CODE, withClientDiagnosticsHost, } from '@syncular/client';
 /** The plugin's Tauri event name — mirror of `tauri-plugin-syncular`. */
 export const SYNCULAR_EVENT = 'syncular://event';
 const PLUGIN = 'plugin:syncular|';
@@ -371,14 +371,7 @@ export class TauriSyncClient {
         }));
     }
     async rebootstrapLocalData(input) {
-        const result = (await this.#command('rebootstrapLocalData', {
-            input,
-        }));
-        return {
-            alreadyApplied: result.alreadyApplied,
-            retainedCommits: result.retainedCommits,
-            resetSubscriptions: result.resetSubscriptions,
-        };
+        return decodeLocalDataRebootstrapResult(await this.#command('rebootstrapLocalData', { input }));
     }
     /**
      * Replace the native transport's request headers at runtime — the auth

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@syncular/tauri",
-  "version": "0.15.33",
+  "version": "0.15.35",
   "description": "Tauri integration for the Syncular client",
   "license": "Apache-2.0",
   "author": "Benjamin Kniffler",
@@ -48,12 +48,12 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@syncular/client": "0.15.33"
+    "@syncular/client": "0.15.35"
   },
   "peerDependencies": {
     "@tauri-apps/api": ">=2.0.0"
   },
   "devDependencies": {
-    "@syncular/react": "0.15.33"
+    "@syncular/react": "0.15.35"
   }
 }

package/src/index.ts

@@ -62,6 +62,7 @@ import type {
 // Most imports stay type-only; the stable preflight error code is shared at
 // runtime so every host surfaces byte-identical policy evidence.
 import {
+  decodeLocalDataRebootstrapResult,
   SECURITY_PREFLIGHT_REQUIRED_CODE,
   withClientDiagnosticsHost,
 } from '@syncular/client';
@@ -544,14 +545,9 @@ export class TauriSyncClient {
   async rebootstrapLocalData(
     input: LocalDataRebootstrapInput,
   ): Promise<LocalDataRebootstrapResult> {
-    const result = (await this.#command('rebootstrapLocalData', {
-      input,
-    })) as LocalDataRebootstrapResult;
-    return {
-      alreadyApplied: result.alreadyApplied,
-      retainedCommits: result.retainedCommits,
-      resetSubscriptions: result.resetSubscriptions,
-    };
+    return decodeLocalDataRebootstrapResult(
+      await this.#command('rebootstrapLocalData', { input }),
+    );
   }
 
   /**