@syncular/tauri 0.30.12 → 0.30.13

package/README.md

@@ -103,6 +103,49 @@ Unchanged tables and their FTS projections stay untouched, so a catalogue's size
 does not add a full-table copy to an unrelated edit. A schema reset or restart
 can still rebuild the complete projection.
 
+## Local activation with transport closed
+
+Create with `transportEnabled: false` to open the replica without starting
+network work. Keep `SyncularConfig.auto_sync: true`; the native owner continues
+handling local reads and commits, and resumes its existing scheduler when the
+gate opens. The gate is independent of security preflight and encryption keys.
+
+```ts
+const client = await createTauriSyncClient({
+  schema,
+  securityPreflight: true,
+  transportEnabled: false,
+});
+
+// The app verifies its signed offline lease and device authentication first.
+await client.activateSecurity({ encryption: acceptedKeyring });
+// Authorized local queries and mutations now work; commits queue durably.
+
+// After online authentication returns a fresh bearer:
+await client.setHeaders({ authorization: `Bearer ${freshBearer}` });
+await client.setTransportEnabled(true);
+```
+
+`setTransportEnabled(false)` blocks new HTTP rounds, realtime connections,
+presence sends and uncached blob downloads with `sync.offline`. Cached blob
+reads and staged uploads remain local. `setOffline(true)` is the bridge's
+browser-parity alias. Automatic sync and retry intents stay suspended; reopening
+emits one interactive wake and queued commits flush in FIFO order with own pull.
+Header replacement and security activation never reopen the gate.
+
+An already-started round finishes its captured network exchange and atomic apply,
+including acknowledgement and revocation checks. Closure does not cancel its
+reply. The owner releases realtime after the round settles, drops unsent control
+frames and starts no follow-up round while closed. Local commands remain available
+while a delayed reply is pending. Security preflight still blocks protected local
+access and invalidates the old authorization context.
+
+The gate defaults open on each newly created client and is never stored in
+SQLite. Pass `transportEnabled: false` on every secure offline cold start.
+Repeated pause or resume calls are idempotent. The existing realtime supervisor
+owns reconnect after resume; a closed gate refuses its connect attempts without
+opening a socket.
+
 ## Secure preflight and native disposal
 
 Create with `securityPreflight: true` when authentication, signed device

package/dist/index.d.ts

@@ -76,6 +76,8 @@ export interface TauriSyncClientConfig {
     readonly encryption?: EncryptionKeyringConfig;
     /** Open the native replica behind the fail-closed security gate. */
     readonly securityPreflight?: boolean;
+    /** Open local storage with network transport closed until explicitly resumed. */
+    readonly transportEnabled?: boolean;
     /**
      * RFC 0005 previous-version context, forwarded to the native `create`. The
      * Rust create handler must read this key to enable capture; while it does
@@ -140,6 +142,10 @@ export declare class TauriSyncClient implements PromiseMethods<ClientSnapshotMet
         present: boolean;
         discarded: boolean;
     }>;
+    /** Suspend new network work while retaining local access and queued commits. */
+    setTransportEnabled(enabled: boolean): Promise<void>;
+    /** Browser offline-control parity; local reads and commits remain available. */
+    setOffline(offline: boolean): Promise<void>;
     /**
      * Replace the native transport's request headers at runtime — the auth
      * rotation path. Pass the FULL header set (it replaces,

package/dist/index.js

@@ -166,6 +166,7 @@ export class TauriSyncClient {
                 'securityLifecycle',
                 'beginSecurityPreflight',
                 'activateSecurity',
+                'setTransportEnabled',
                 'purgeLocalData',
                 'previousVersionDiscard',
                 'localRevision',
@@ -432,6 +433,14 @@ export class TauriSyncClient {
     async previousVersionDiscard() {
         return decodePreviousVersionDiscardResult(await this.#command('previousVersionDiscard', {}));
     }
+    /** Suspend new network work while retaining local access and queued commits. */
+    async setTransportEnabled(enabled) {
+        await this.#command('setTransportEnabled', { enabled });
+    }
+    /** Browser offline-control parity; local reads and commits remain available. */
+    async setOffline(offline) {
+        await this.setTransportEnabled(!offline);
+    }
     /**
      * Replace the native transport's request headers at runtime — the auth
      * rotation path. Pass the FULL header set (it replaces,
@@ -731,6 +740,9 @@ export async function createTauriSyncClient(config) {
                 ...(config.encryption !== undefined
                     ? { encryption: encodeEncryption(config.encryption) }
                     : {}),
+                ...(config.transportEnabled !== undefined
+                    ? { transportEnabled: config.transportEnabled }
+                    : {}),
                 ...(config.securityPreflight !== undefined
                     ? { securityPreflight: config.securityPreflight }
                     : {}),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@syncular/tauri",
-  "version": "0.30.12",
+  "version": "0.30.13",
   "description": "Tauri integration for the Syncular client",
   "license": "Apache-2.0",
   "author": "Benjamin Kniffler",
@@ -48,13 +48,13 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@syncular/client": "0.30.12"
+    "@syncular/client": "0.30.13"
   },
   "peerDependencies": {
     "@tauri-apps/api": ">=2.0.0"
   },
   "devDependencies": {
-    "@syncular/react": "0.30.12",
-    "@syncular/server": "0.30.12"
+    "@syncular/react": "0.30.13",
+    "@syncular/server": "0.30.13"
   }
 }

package/src/index.ts

@@ -141,6 +141,8 @@ export interface TauriSyncClientConfig {
   readonly encryption?: EncryptionKeyringConfig;
   /** Open the native replica behind the fail-closed security gate. */
   readonly securityPreflight?: boolean;
+  /** Open local storage with network transport closed until explicitly resumed. */
+  readonly transportEnabled?: boolean;
   /**
    * RFC 0005 previous-version context, forwarded to the native `create`. The
    * Rust create handler must read this key to enable capture; while it does
@@ -347,6 +349,7 @@ export class TauriSyncClient implements PromiseMethods<ClientSnapshotMethods> {
         'securityLifecycle',
         'beginSecurityPreflight',
         'activateSecurity',
+        'setTransportEnabled',
         'purgeLocalData',
         'previousVersionDiscard',
         'localRevision',
@@ -706,6 +709,16 @@ export class TauriSyncClient implements PromiseMethods<ClientSnapshotMethods> {
     );
   }
 
+  /** Suspend new network work while retaining local access and queued commits. */
+  async setTransportEnabled(enabled: boolean): Promise<void> {
+    await this.#command('setTransportEnabled', { enabled });
+  }
+
+  /** Browser offline-control parity; local reads and commits remain available. */
+  async setOffline(offline: boolean): Promise<void> {
+    await this.setTransportEnabled(!offline);
+  }
+
   /**
    * Replace the native transport's request headers at runtime — the auth
    * rotation path. Pass the FULL header set (it replaces,
@@ -1103,6 +1116,9 @@ export async function createTauriSyncClient(
         ...(config.encryption !== undefined
           ? { encryption: encodeEncryption(config.encryption) }
           : {}),
+        ...(config.transportEnabled !== undefined
+          ? { transportEnabled: config.transportEnabled }
+          : {}),
         ...(config.securityPreflight !== undefined
           ? { securityPreflight: config.securityPreflight }
           : {}),