@tinycloud/node-sdk 3.11.0-beta.2 → 3.11.1-beta.0

package/dist/{TinyCloudNode-BlNcvo1c.d.ts → TinyCloudNode-AUotFGzy.d.ts}

@@ -859,9 +859,10 @@ declare class NodeUserAuthorization implements IUserAuthorization {
     /** Validate a candidate without activating a network session, so paste retries reuse one preparation. */
     private verifyOpenKeyResult;
     /**
-     * Clear persisted session data.
+     * Clear persisted session data. With `ownSignature`, a stored session that provably has a different
+     * signature (a newer sign-in for the same address) is left alone.
      */
-    clearPersistedSession(address?: string): Promise<void>;
+    clearPersistedSession(address?: string, ownSignature?: string): Promise<void>;
     /**
      * Check if a session is persisted for an address.
      */

package/dist/{TinyCloudNode-CnVaWnAX.d.cts → TinyCloudNode-BmpjkpWR.d.cts}

@@ -859,9 +859,10 @@ declare class NodeUserAuthorization implements IUserAuthorization {
     /** Validate a candidate without activating a network session, so paste retries reuse one preparation. */
     private verifyOpenKeyResult;
     /**
-     * Clear persisted session data.
+     * Clear persisted session data. With `ownSignature`, a stored session that provably has a different
+     * signature (a newer sign-in for the same address) is left alone.
      */
-    clearPersistedSession(address?: string): Promise<void>;
+    clearPersistedSession(address?: string, ownSignature?: string): Promise<void>;
     /**
      * Check if a session is persisted for an address.
      */

package/dist/{WasmKeyProvider-BKCPRC-c.d.cts → WasmKeyProvider-OA0LqmTg.d.cts}

@@ -90,6 +90,8 @@ declare class FileSessionStorage implements ISessionStorage {
     save(address: string, session: PersistedSessionData): Promise<void>;
     /**
      * Load a session for an address.
+     *
+     * Rejects when the file exists but cannot be read or parsed; the file is left in place.
      */
     load(address: string): Promise<PersistedSessionData | null>;
     /**

package/dist/{WasmKeyProvider-BKCPRC-c.d.ts → WasmKeyProvider-OA0LqmTg.d.ts}

@@ -90,6 +90,8 @@ declare class FileSessionStorage implements ISessionStorage {
     save(address: string, session: PersistedSessionData): Promise<void>;
     /**
      * Load a session for an address.
+     *
+     * Rejects when the file exists but cannot be read or parsed; the file is left in place.
      */
     load(address: string): Promise<PersistedSessionData | null>;
     /**

package/dist/{authority-B2SLx27M.d.cts → authority-BYSEyjDI.d.cts}

@@ -1,7 +1,7 @@
 import { ReplicationOptions, PermissionEntry, TinyCloudSession, KVReplicaStorage, ServiceContext, IWasmBindings, WasmRecapEntry } from '@tinycloud/sdk-core';
 import { ReplicaConsentAnchor, AuthorityRefusal, ReplicationAuthority } from '@tinycloud/sdk-services';
 import { ReplicaLocalEraseOutcome, ReplicaPurgeLocalCopyResult, ReplicaPurgeTrigger, ReplicaPurgeFailedEvent, ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
-import { T as TinyCloudNode } from './TinyCloudNode-CnVaWnAX.cjs';
+import { T as TinyCloudNode } from './TinyCloudNode-BmpjkpWR.cjs';
 
 /** Constructor-time validation; the space-dependent secrets check runs at sign-in and open. */
 declare function assertValidReplicationConfig(replication: (ReplicationOptions & {

package/dist/{authority-DHIk5QvV.d.ts → authority-dRnJD4iL.d.ts}

@@ -1,7 +1,7 @@
 import { ReplicationOptions, PermissionEntry, TinyCloudSession, KVReplicaStorage, ServiceContext, IWasmBindings, WasmRecapEntry } from '@tinycloud/sdk-core';
 import { ReplicaConsentAnchor, AuthorityRefusal, ReplicationAuthority } from '@tinycloud/sdk-services';
 import { ReplicaLocalEraseOutcome, ReplicaPurgeLocalCopyResult, ReplicaPurgeTrigger, ReplicaPurgeFailedEvent, ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
-import { T as TinyCloudNode } from './TinyCloudNode-BlNcvo1c.js';
+import { T as TinyCloudNode } from './TinyCloudNode-AUotFGzy.js';
 
 /** Constructor-time validation; the space-dependent secrets check runs at sign-in and open. */
 declare function assertValidReplicationConfig(replication: (ReplicationOptions & {

package/dist/core.cjs

@@ -268,10 +268,22 @@ var FileSessionStorage = class {
   async save(address, session) {
     const filePath = this.getFilePath(address);
     const data = JSON.stringify(session, null, 2);
-    (0, import_fs.writeFileSync)(filePath, data, "utf-8");
+    const tempPath = `${filePath}.${process.pid}.${process.hrtime.bigint()}.tmp`;
+    try {
+      (0, import_fs.writeFileSync)(tempPath, data, { mode: 384, flag: "wx" });
+      (0, import_fs.renameSync)(tempPath, filePath);
+    } catch (error) {
+      try {
+        (0, import_fs.unlinkSync)(tempPath);
+      } catch {
+      }
+      throw error;
+    }
   }
   /**
    * Load a session for an address.
+   *
+   * Rejects when the file exists but cannot be read or parsed; the file is left in place.
    */
   async load(address) {
     const filePath = this.getFilePath(address);
@@ -295,11 +307,9 @@ var FileSessionStorage = class {
       }
       return session;
     } catch (error) {
-      try {
-        (0, import_fs.unlinkSync)(filePath);
-      } catch {
-      }
-      return null;
+      throw new Error(
+        `Could not read session file ${filePath}: ${error}`
+      );
     }
   }
   /**
@@ -453,6 +463,18 @@ function refuseCaveated(input) {
 var import_sdk_core4 = require("@tinycloud/sdk-core");
 var defaultSignStrategy = { type: "auto-sign" };
 
+// src/storage/clearPersistedSessionIfOwn.ts
+async function clearPersistedSessionIfOwn(storage, address, ownSignature) {
+  if (ownSignature !== void 0) {
+    try {
+      const stored = await storage.load(address);
+      if (stored !== null && stored.signature !== ownSignature) return;
+    } catch {
+    }
+  }
+  await storage.clear(address);
+}
+
 // src/authorization/NodeUserAuthorization.ts
 function assertMaxExpiresAt(value) {
   if (value === void 0 || typeof value === "function") return;
@@ -2269,12 +2291,13 @@ var NodeUserAuthorization = class {
     };
   }
   /**
-   * Clear persisted session data.
+   * Clear persisted session data. With `ownSignature`, a stored session that provably has a different
+   * signature (a newer sign-in for the same address) is left alone.
    */
-  async clearPersistedSession(address) {
+  async clearPersistedSession(address, ownSignature) {
     const targetAddress = address ?? this._address;
     if (targetAddress) {
-      await this.sessionStorage.clear(targetAddress);
+      await clearPersistedSessionIfOwn(this.sessionStorage, targetAddress, ownSignature);
     }
   }
   /**
@@ -4757,6 +4780,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     const leavingChainId = this._chainId;
     const leavingPrincipal = this.replicaSessionPrincipal ?? (leavingAddress ? (0, import_sdk_core11.pkhDid)(leavingAddress, leavingChainId) : void 0);
     const leavingAuth = this.auth;
+    const leavingSignature = leavingAuth?.tinyCloudSession?.signature ?? this._restoredTcSession?.signature;
     const leavingContext = this._serviceContext;
     let denied;
     let erased;
@@ -4773,7 +4797,7 @@ var _TinyCloudNode = class _TinyCloudNode {
           if (denied) erased = await this.eraseReplicaLocalCopy("sign_out", denied.status);
         } finally {
           if (leavingAddress) {
-            await (leavingAuth ? leavingAuth.clearPersistedSession(leavingAddress) : this.config.sessionStorage?.clear(leavingAddress));
+            await (leavingAuth ? leavingAuth.clearPersistedSession(leavingAddress, leavingSignature) : this.config.sessionStorage && clearPersistedSessionIfOwn(this.config.sessionStorage, leavingAddress, leavingSignature));
           }
         }
       }