@syncular/tauri 0.30.4 → 0.30.6

package/README.md

@@ -117,8 +117,11 @@ still owns OS secure-store deletion and any key buffers it supplied.
 
 Runtime `setHeaders()` is an active-session operation and is rejected during
 preflight at both the JavaScript and native command boundaries. Supply bootstrap
-headers through trusted plugin configuration; rotate them only after successful
-activation.
+headers through trusted plugin configuration or `activateSecurity({ headers })`;
+the latter installs the current bearer before the startup round. Rotate them
+with `setHeaders()` only after successful activation. Closed clients reject data
+and control calls with `client.closed` before testing preflight; listener
+registration and local progress reads throw that code. `close()` is idempotent.
 
 ## Privacy-safe diagnostics
 

package/dist/index.d.ts

@@ -53,6 +53,13 @@ export interface TauriSyncClientConfig {
      * an existing database fails with `client.identity_mismatch`.
      */
     readonly clientId?: string;
+    /**
+     * Name of the native database to open, for example one replica per
+     * signed-in actor. The plugin opens `<database_dir>/<database>.db` from its
+     * `SyncularConfig`; a name is 1 to 128 ASCII letters, digits, `-`, `_` or
+     * `.` and starts with a letter or digit. Absent ⇒ the plugin's `db_path`.
+     */
+    readonly database?: string;
     /** §4.2 client limits, forwarded to the native `create`. */
     readonly limits?: Record<string, unknown>;
     /**

package/dist/index.js

@@ -160,9 +160,7 @@ export class TauriSyncClient {
     }
     /** Dispatch a `syncular_command` and unwrap `{result}` / throw on `{error}`. */
     async #command(method, params) {
-        if (this.#closed) {
-            throw new TauriSyncError('client.closed', 'the Tauri sync client is closed');
-        }
+        this.#requireOpen();
         if (this.#securityLifecycle === 'preflight' &&
             ![
                 'securityLifecycle',
@@ -185,7 +183,13 @@ export class TauriSyncClient {
     #throwSecurityPreflight() {
         throw new TauriSyncError(SECURITY_PREFLIGHT_REQUIRED_CODE, 'the local replica is in security preflight; complete quarantine checks and call activateSecurity before accessing protected data');
     }
+    #requireOpen() {
+        if (this.#closed) {
+            throw new TauriSyncError('client.closed', 'the Tauri sync client is closed');
+        }
+    }
     #requireActive() {
+        this.#requireOpen();
         if (this.#securityLifecycle === 'preflight')
             this.#throwSecurityPreflight();
     }
@@ -254,7 +258,8 @@ export class TauriSyncClient {
         }
     }
     // -- SyncClientLike --------------------------------------------------------
-    securityLifecycle() {
+    async securityLifecycle() {
+        this.#requireOpen();
         return Promise.resolve(this.#securityLifecycle);
     }
     beginSecurityPreflight() {
@@ -284,6 +289,7 @@ export class TauriSyncClient {
      * credentials (the direct `setHeaders` path stays refused while gated).
      */
     async activateSecurity(options = {}) {
+        this.#requireOpen();
         if (this.#securityLifecycle === 'active') {
             throw new TauriSyncError('sync.invalid_request', 'activateSecurity requires the client to be in security preflight');
         }
@@ -297,20 +303,25 @@ export class TauriSyncClient {
         this.#securityLifecycle = 'active';
     }
     onInvalidate(listener) {
+        this.#requireOpen();
         this.#invalidationListeners.add(listener);
         return () => this.#invalidationListeners.delete(listener);
     }
     onProgress(listener) {
+        this.#requireOpen();
         return this.#progress.on(listener);
     }
     progressSnapshot() {
+        this.#requireOpen();
         return this.#progress.snapshot();
     }
     onChange(listener) {
+        this.#requireOpen();
         this.#changeListeners.add(listener);
         return () => this.#changeListeners.delete(listener);
     }
     onDiagnostics(listener) {
+        this.#requireOpen();
         this.#diagnosticsListeners.add(listener);
         this.#enableDiagnosticsPush();
         return () => this.#diagnosticsListeners.delete(listener);
@@ -339,6 +350,7 @@ export class TauriSyncClient {
         });
     }
     onPresence(listener) {
+        this.#requireOpen();
         this.#presenceListeners.add(listener);
         return () => this.#presenceListeners.delete(listener);
     }
@@ -698,13 +710,14 @@ export async function createTauriSyncClient(config) {
     }
     const client = new TauriSyncClient(tauri, unlisten, config.securityPreflight === true ? 'preflight' : 'active');
     clientRef.client = client;
-    // The native side owns the db path (plugin config); the JS side supplies the
-    // schema, clientId, and limits. `dbPath` is injected by the plugin.
+    // The native side owns every path (plugin config); the JS side names a
+    // database and supplies the schema, clientId, and limits.
     const reply = await tauri.invoke(`${PLUGIN}syncular_command`, {
         command: {
             method: 'create',
             params: {
                 ...(config.clientId !== undefined ? { clientId: config.clientId } : {}),
+                ...(config.database !== undefined ? { database: config.database } : {}),
                 schema: config.schema,
                 ...(config.limits !== undefined ? { limits: config.limits } : {}),
                 ...(config.realtimePolicy !== undefined

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@syncular/tauri",
-  "version": "0.30.4",
+  "version": "0.30.6",
   "description": "Tauri integration for the Syncular client",
   "license": "Apache-2.0",
   "author": "Benjamin Kniffler",
@@ -48,12 +48,12 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@syncular/client": "0.30.4"
+    "@syncular/client": "0.30.6"
   },
   "peerDependencies": {
     "@tauri-apps/api": ">=2.0.0"
   },
   "devDependencies": {
-    "@syncular/react": "0.30.4"
+    "@syncular/react": "0.30.6"
   }
 }

package/src/index.ts

@@ -114,6 +114,13 @@ export interface TauriSyncClientConfig {
    * an existing database fails with `client.identity_mismatch`.
    */
   readonly clientId?: string;
+  /**
+   * Name of the native database to open, for example one replica per
+   * signed-in actor. The plugin opens `<database_dir>/<database>.db` from its
+   * `SyncularConfig`; a name is 1 to 128 ASCII letters, digits, `-`, `_` or
+   * `.` and starts with a letter or digit. Absent ⇒ the plugin's `db_path`.
+   */
+  readonly database?: string;
   /** §4.2 client limits, forwarded to the native `create`. */
   readonly limits?: Record<string, unknown>;
   /**
@@ -328,12 +335,7 @@ export class TauriSyncClient implements PromiseMethods<ClientSnapshotMethods> {
     method: string,
     params: Record<string, unknown>,
   ): Promise<unknown> {
-    if (this.#closed) {
-      throw new TauriSyncError(
-        'client.closed',
-        'the Tauri sync client is closed',
-      );
-    }
+    this.#requireOpen();
     if (
       this.#securityLifecycle === 'preflight' &&
       ![
@@ -366,7 +368,17 @@ export class TauriSyncClient implements PromiseMethods<ClientSnapshotMethods> {
     );
   }
 
+  #requireOpen(): void {
+    if (this.#closed) {
+      throw new TauriSyncError(
+        'client.closed',
+        'the Tauri sync client is closed',
+      );
+    }
+  }
+
   #requireActive(): void {
+    this.#requireOpen();
     if (this.#securityLifecycle === 'preflight') this.#throwSecurityPreflight();
   }
 
@@ -431,7 +443,8 @@ export class TauriSyncClient implements PromiseMethods<ClientSnapshotMethods> {
 
   // -- SyncClientLike --------------------------------------------------------
 
-  securityLifecycle(): Promise<SecurityLifecycle> {
+  async securityLifecycle(): Promise<SecurityLifecycle> {
+    this.#requireOpen();
     return Promise.resolve(this.#securityLifecycle);
   }
 
@@ -472,6 +485,7 @@ export class TauriSyncClient implements PromiseMethods<ClientSnapshotMethods> {
       readonly headers?: Readonly<Record<string, string>>;
     } = {},
   ): Promise<void> {
+    this.#requireOpen();
     if (this.#securityLifecycle === 'active') {
       throw new TauriSyncError(
         'sync.invalid_request',
@@ -489,23 +503,28 @@ export class TauriSyncClient implements PromiseMethods<ClientSnapshotMethods> {
   }
 
   onInvalidate(listener: InvalidationListener): () => void {
+    this.#requireOpen();
     this.#invalidationListeners.add(listener);
     return () => this.#invalidationListeners.delete(listener);
   }
 
   onProgress(listener: SyncProgressListener): () => void {
+    this.#requireOpen();
     return this.#progress.on(listener);
   }
   progressSnapshot(): SyncProgress | undefined {
+    this.#requireOpen();
     return this.#progress.snapshot();
   }
 
   onChange(listener: ClientChangeListener): () => void {
+    this.#requireOpen();
     this.#changeListeners.add(listener);
     return () => this.#changeListeners.delete(listener);
   }
 
   onDiagnostics(listener: ClientDiagnosticsListener): () => void {
+    this.#requireOpen();
     this.#diagnosticsListeners.add(listener);
     this.#enableDiagnosticsPush();
     return () => this.#diagnosticsListeners.delete(listener);
@@ -535,6 +554,7 @@ export class TauriSyncClient implements PromiseMethods<ClientSnapshotMethods> {
   }
 
   onPresence(listener: (scopeKey: string) => void): () => void {
+    this.#requireOpen();
     this.#presenceListeners.add(listener);
     return () => this.#presenceListeners.delete(listener);
   }
@@ -1037,13 +1057,14 @@ export async function createTauriSyncClient(
   );
   clientRef.client = client;
 
-  // The native side owns the db path (plugin config); the JS side supplies the
-  // schema, clientId, and limits. `dbPath` is injected by the plugin.
+  // The native side owns every path (plugin config); the JS side names a
+  // database and supplies the schema, clientId, and limits.
   const reply = await tauri.invoke<CommandReply>(`${PLUGIN}syncular_command`, {
     command: {
       method: 'create',
       params: {
         ...(config.clientId !== undefined ? { clientId: config.clientId } : {}),
+        ...(config.database !== undefined ? { database: config.database } : {}),
         schema: config.schema,
         ...(config.limits !== undefined ? { limits: config.limits } : {}),
         ...(config.realtimePolicy !== undefined