@syncular/tauri 0.30.5 → 0.30.7

package/README.md

@@ -117,8 +117,11 @@ still owns OS secure-store deletion and any key buffers it supplied.
 
 Runtime `setHeaders()` is an active-session operation and is rejected during
 preflight at both the JavaScript and native command boundaries. Supply bootstrap
-headers through trusted plugin configuration; rotate them only after successful
-activation.
+headers through trusted plugin configuration or `activateSecurity({ headers })`;
+the latter installs the current bearer before the startup round. Rotate them
+with `setHeaders()` only after successful activation. Closed clients reject data
+and control calls with `client.closed` before testing preflight; listener
+registration and local progress reads throw that code. `close()` is idempotent.
 
 ## Privacy-safe diagnostics
 

package/dist/index.d.ts

@@ -184,7 +184,8 @@ export declare class TauriSyncClient implements PromiseMethods<ClientSnapshotMet
 /** The error a `{error}` reply surfaces (mirrors the web-client `ClientSyncError`). */
 export declare class TauriSyncError extends Error {
     readonly code: string;
-    constructor(code: string, message: string);
+    readonly details: Readonly<Record<string, unknown>> | undefined;
+    constructor(code: string, message: string, details?: Readonly<Record<string, unknown>>);
 }
 /**
  * Construct the bridge and issue the native `create` (opening/attaching the

package/dist/index.js

@@ -160,9 +160,7 @@ export class TauriSyncClient {
     }
     /** Dispatch a `syncular_command` and unwrap `{result}` / throw on `{error}`. */
     async #command(method, params) {
-        if (this.#closed) {
-            throw new TauriSyncError('client.closed', 'the Tauri sync client is closed');
-        }
+        this.#requireOpen();
         if (this.#securityLifecycle === 'preflight' &&
             ![
                 'securityLifecycle',
@@ -178,14 +176,20 @@ export class TauriSyncClient {
         }
         const reply = await this.#tauri.invoke(`${PLUGIN}syncular_command`, { command: { method, params } });
         if (reply.error !== undefined) {
-            throw new TauriSyncError(reply.error.code, reply.error.message);
+            throw new TauriSyncError(reply.error.code, reply.error.message, reply.error.details ?? undefined);
         }
         return reply.result;
     }
     #throwSecurityPreflight() {
         throw new TauriSyncError(SECURITY_PREFLIGHT_REQUIRED_CODE, 'the local replica is in security preflight; complete quarantine checks and call activateSecurity before accessing protected data');
     }
+    #requireOpen() {
+        if (this.#closed) {
+            throw new TauriSyncError('client.closed', 'the Tauri sync client is closed');
+        }
+    }
     #requireActive() {
+        this.#requireOpen();
         if (this.#securityLifecycle === 'preflight')
             this.#throwSecurityPreflight();
     }
@@ -254,7 +258,8 @@ export class TauriSyncClient {
         }
     }
     // -- SyncClientLike --------------------------------------------------------
-    securityLifecycle() {
+    async securityLifecycle() {
+        this.#requireOpen();
         return Promise.resolve(this.#securityLifecycle);
     }
     beginSecurityPreflight() {
@@ -284,6 +289,7 @@ export class TauriSyncClient {
      * credentials (the direct `setHeaders` path stays refused while gated).
      */
     async activateSecurity(options = {}) {
+        this.#requireOpen();
         if (this.#securityLifecycle === 'active') {
             throw new TauriSyncError('sync.invalid_request', 'activateSecurity requires the client to be in security preflight');
         }
@@ -297,20 +303,25 @@ export class TauriSyncClient {
         this.#securityLifecycle = 'active';
     }
     onInvalidate(listener) {
+        this.#requireOpen();
         this.#invalidationListeners.add(listener);
         return () => this.#invalidationListeners.delete(listener);
     }
     onProgress(listener) {
+        this.#requireOpen();
         return this.#progress.on(listener);
     }
     progressSnapshot() {
+        this.#requireOpen();
         return this.#progress.snapshot();
     }
     onChange(listener) {
+        this.#requireOpen();
         this.#changeListeners.add(listener);
         return () => this.#changeListeners.delete(listener);
     }
     onDiagnostics(listener) {
+        this.#requireOpen();
         this.#diagnosticsListeners.add(listener);
         this.#enableDiagnosticsPush();
         return () => this.#diagnosticsListeners.delete(listener);
@@ -339,6 +350,7 @@ export class TauriSyncClient {
         });
     }
     onPresence(listener) {
+        this.#requireOpen();
         this.#presenceListeners.add(listener);
         return () => this.#presenceListeners.delete(listener);
     }
@@ -346,7 +358,7 @@ export class TauriSyncClient {
         this.#requireActive();
         const reply = await this.#tauri.invoke(`${PLUGIN}syncular_query`, { sql, params: (params ?? []).map(encodeParam) });
         if (reply.error !== undefined) {
-            throw new TauriSyncError(reply.error.code, reply.error.message);
+            throw new TauriSyncError(reply.error.code, reply.error.message, reply.error.details ?? undefined);
         }
         const rows = reply.result.rows ?? [];
         return rows.map((r) => decodeRow(r));
@@ -360,7 +372,7 @@ export class TauriSyncClient {
             ...(spec.owner !== undefined ? { owner: spec.owner } : {}),
         });
         if (reply.error !== undefined) {
-            throw new TauriSyncError(reply.error.code, reply.error.message);
+            throw new TauriSyncError(reply.error.code, reply.error.message, reply.error.details ?? undefined);
         }
         const result = reply.result;
         return {
@@ -430,7 +442,7 @@ export class TauriSyncClient {
         this.#requireActive();
         const reply = await this.#tauri.invoke(`${PLUGIN}syncular_set_headers`, { headers });
         if (reply.error !== undefined) {
-            throw new TauriSyncError(reply.error.code, reply.error.message);
+            throw new TauriSyncError(reply.error.code, reply.error.message, reply.error.details ?? undefined);
         }
     }
     // -- Native CRDT (SPEC.md §5.10.5; needs the plugin `crdt-yjs` feature) ------
@@ -587,10 +599,12 @@ function decodeDiagnosticsSnapshot(value, kind) {
 /** The error a `{error}` reply surfaces (mirrors the web-client `ClientSyncError`). */
 export class TauriSyncError extends Error {
     code;
-    constructor(code, message) {
+    details;
+    constructor(code, message, details) {
         super(message);
         this.name = 'TauriSyncError';
         this.code = code;
+        this.details = details;
     }
 }
 function toStringSet(value) {
@@ -725,7 +739,7 @@ export async function createTauriSyncClient(config) {
     });
     if (reply.error !== undefined) {
         unlisten();
-        throw new TauriSyncError(reply.error.code, reply.error.message);
+        throw new TauriSyncError(reply.error.code, reply.error.message, reply.error.details ?? undefined);
     }
     return client;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@syncular/tauri",
-  "version": "0.30.5",
+  "version": "0.30.7",
   "description": "Tauri integration for the Syncular client",
   "license": "Apache-2.0",
   "author": "Benjamin Kniffler",
@@ -48,12 +48,12 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@syncular/client": "0.30.5"
+    "@syncular/client": "0.30.7"
   },
   "peerDependencies": {
     "@tauri-apps/api": ">=2.0.0"
   },
   "devDependencies": {
-    "@syncular/react": "0.30.5"
+    "@syncular/react": "0.30.7"
   }
 }

package/src/index.ts

@@ -81,7 +81,11 @@ import {
 /** A driver-protocol reply: `{result}` on success or `{error}` on failure. */
 interface CommandReply {
   readonly result?: unknown;
-  readonly error?: { readonly code: string; readonly message: string };
+  readonly error?: {
+    readonly code: string;
+    readonly message: string;
+    readonly details?: Readonly<Record<string, unknown>> | null;
+  };
 }
 
 /** One event pushed on `syncular://event` (the derived client-observable set). */
@@ -335,12 +339,7 @@ export class TauriSyncClient implements PromiseMethods<ClientSnapshotMethods> {
     method: string,
     params: Record<string, unknown>,
   ): Promise<unknown> {
-    if (this.#closed) {
-      throw new TauriSyncError(
-        'client.closed',
-        'the Tauri sync client is closed',
-      );
-    }
+    this.#requireOpen();
     if (
       this.#securityLifecycle === 'preflight' &&
       ![
@@ -361,7 +360,11 @@ export class TauriSyncClient implements PromiseMethods<ClientSnapshotMethods> {
       { command: { method, params } },
     );
     if (reply.error !== undefined) {
-      throw new TauriSyncError(reply.error.code, reply.error.message);
+      throw new TauriSyncError(
+        reply.error.code,
+        reply.error.message,
+        reply.error.details ?? undefined,
+      );
     }
     return reply.result;
   }
@@ -373,7 +376,17 @@ export class TauriSyncClient implements PromiseMethods<ClientSnapshotMethods> {
     );
   }
 
+  #requireOpen(): void {
+    if (this.#closed) {
+      throw new TauriSyncError(
+        'client.closed',
+        'the Tauri sync client is closed',
+      );
+    }
+  }
+
   #requireActive(): void {
+    this.#requireOpen();
     if (this.#securityLifecycle === 'preflight') this.#throwSecurityPreflight();
   }
 
@@ -438,7 +451,8 @@ export class TauriSyncClient implements PromiseMethods<ClientSnapshotMethods> {
 
   // -- SyncClientLike --------------------------------------------------------
 
-  securityLifecycle(): Promise<SecurityLifecycle> {
+  async securityLifecycle(): Promise<SecurityLifecycle> {
+    this.#requireOpen();
     return Promise.resolve(this.#securityLifecycle);
   }
 
@@ -479,6 +493,7 @@ export class TauriSyncClient implements PromiseMethods<ClientSnapshotMethods> {
       readonly headers?: Readonly<Record<string, string>>;
     } = {},
   ): Promise<void> {
+    this.#requireOpen();
     if (this.#securityLifecycle === 'active') {
       throw new TauriSyncError(
         'sync.invalid_request',
@@ -496,23 +511,28 @@ export class TauriSyncClient implements PromiseMethods<ClientSnapshotMethods> {
   }
 
   onInvalidate(listener: InvalidationListener): () => void {
+    this.#requireOpen();
     this.#invalidationListeners.add(listener);
     return () => this.#invalidationListeners.delete(listener);
   }
 
   onProgress(listener: SyncProgressListener): () => void {
+    this.#requireOpen();
     return this.#progress.on(listener);
   }
   progressSnapshot(): SyncProgress | undefined {
+    this.#requireOpen();
     return this.#progress.snapshot();
   }
 
   onChange(listener: ClientChangeListener): () => void {
+    this.#requireOpen();
     this.#changeListeners.add(listener);
     return () => this.#changeListeners.delete(listener);
   }
 
   onDiagnostics(listener: ClientDiagnosticsListener): () => void {
+    this.#requireOpen();
     this.#diagnosticsListeners.add(listener);
     this.#enableDiagnosticsPush();
     return () => this.#diagnosticsListeners.delete(listener);
@@ -542,6 +562,7 @@ export class TauriSyncClient implements PromiseMethods<ClientSnapshotMethods> {
   }
 
   onPresence(listener: (scopeKey: string) => void): () => void {
+    this.#requireOpen();
     this.#presenceListeners.add(listener);
     return () => this.#presenceListeners.delete(listener);
   }
@@ -553,7 +574,11 @@ export class TauriSyncClient implements PromiseMethods<ClientSnapshotMethods> {
       { sql, params: (params ?? []).map(encodeParam) },
     );
     if (reply.error !== undefined) {
-      throw new TauriSyncError(reply.error.code, reply.error.message);
+      throw new TauriSyncError(
+        reply.error.code,
+        reply.error.message,
+        reply.error.details ?? undefined,
+      );
     }
     const rows = (reply.result as { rows?: unknown[] }).rows ?? [];
     return rows.map((r) => decodeRow(r as Record<string, unknown>));
@@ -573,7 +598,11 @@ export class TauriSyncClient implements PromiseMethods<ClientSnapshotMethods> {
       },
     );
     if (reply.error !== undefined) {
-      throw new TauriSyncError(reply.error.code, reply.error.message);
+      throw new TauriSyncError(
+        reply.error.code,
+        reply.error.message,
+        reply.error.details ?? undefined,
+      );
     }
     const result = reply.result as {
       revision: string;
@@ -689,7 +718,11 @@ export class TauriSyncClient implements PromiseMethods<ClientSnapshotMethods> {
       { headers },
     );
     if (reply.error !== undefined) {
-      throw new TauriSyncError(reply.error.code, reply.error.message);
+      throw new TauriSyncError(
+        reply.error.code,
+        reply.error.message,
+        reply.error.details ?? undefined,
+      );
     }
   }
 
@@ -917,10 +950,16 @@ function decodeDiagnosticsSnapshot(
 /** The error a `{error}` reply surfaces (mirrors the web-client `ClientSyncError`). */
 export class TauriSyncError extends Error {
   readonly code: string;
-  constructor(code: string, message: string) {
+  readonly details: Readonly<Record<string, unknown>> | undefined;
+  constructor(
+    code: string,
+    message: string,
+    details?: Readonly<Record<string, unknown>>,
+  ) {
     super(message);
     this.name = 'TauriSyncError';
     this.code = code;
+    this.details = details;
   }
 }
 
@@ -1071,7 +1110,11 @@ export async function createTauriSyncClient(
   });
   if (reply.error !== undefined) {
     unlisten();
-    throw new TauriSyncError(reply.error.code, reply.error.message);
+    throw new TauriSyncError(
+      reply.error.code,
+      reply.error.message,
+      reply.error.details ?? undefined,
+    );
   }
 
   return client;