@tinycloud/node-sdk 3.11.0-beta.2 → 3.11.1-beta.0

package/dist/encryption-keys.d.cts

@@ -1,6 +1,6 @@
 import { NamedKeyClient } from '@tinycloud/sdk-services/encryption/named-keys';
 export { DecryptManyResult, KeyCallOptions, KeyDescriptor, KeyEncryptOptions, NamedKeyClient, NamedKeyEnvelope, NamedKeyError, NamedKeyErrorCode, PublicKeyDescriptor, buildKeyAdminFacts, buildKeyDescribeFacts } from '@tinycloud/sdk-services/encryption/named-keys';
-import { T as TinyCloudNode } from './TinyCloudNode-CnVaWnAX.cjs';
+import { T as TinyCloudNode } from './TinyCloudNode-BmpjkpWR.cjs';
 import '@tinycloud/sdk-core';
 import '@tinycloud/sdk-services/kv/replication';
 import '@tinycloud/sdk-services';

package/dist/encryption-keys.d.ts

@@ -1,6 +1,6 @@
 import { NamedKeyClient } from '@tinycloud/sdk-services/encryption/named-keys';
 export { DecryptManyResult, KeyCallOptions, KeyDescriptor, KeyEncryptOptions, NamedKeyClient, NamedKeyEnvelope, NamedKeyError, NamedKeyErrorCode, PublicKeyDescriptor, buildKeyAdminFacts, buildKeyDescribeFacts } from '@tinycloud/sdk-services/encryption/named-keys';
-import { T as TinyCloudNode } from './TinyCloudNode-BlNcvo1c.js';
+import { T as TinyCloudNode } from './TinyCloudNode-AUotFGzy.js';
 import '@tinycloud/sdk-core';
 import '@tinycloud/sdk-services/kv/replication';
 import '@tinycloud/sdk-services';

package/dist/index.cjs

@@ -18968,6 +18968,18 @@ var MemorySessionStorage = class {
   }
 };
 
+// src/storage/clearPersistedSessionIfOwn.ts
+async function clearPersistedSessionIfOwn(storage, address, ownSignature) {
+  if (ownSignature !== void 0) {
+    try {
+      const stored = await storage.load(address);
+      if (stored !== null && stored.signature !== ownSignature) return;
+    } catch {
+    }
+  }
+  await storage.clear(address);
+}
+
 // src/authorization/NodeUserAuthorization.ts
 function assertMaxExpiresAt(value) {
   if (value === void 0 || typeof value === "function") return;
@@ -20784,12 +20796,13 @@ var NodeUserAuthorization = class {
     };
   }
   /**
-   * Clear persisted session data.
+   * Clear persisted session data. With `ownSignature`, a stored session that provably has a different
+   * signature (a newer sign-in for the same address) is left alone.
    */
-  async clearPersistedSession(address) {
+  async clearPersistedSession(address, ownSignature) {
     const targetAddress = address ?? this._address;
     if (targetAddress) {
-      await this.sessionStorage.clear(targetAddress);
+      await clearPersistedSessionIfOwn(this.sessionStorage, targetAddress, ownSignature);
     }
   }
   /**
@@ -22579,6 +22592,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     const leavingChainId = this._chainId;
     const leavingPrincipal = this.replicaSessionPrincipal ?? (leavingAddress ? (0, import_sdk_core10.pkhDid)(leavingAddress, leavingChainId) : void 0);
     const leavingAuth = this.auth;
+    const leavingSignature = leavingAuth?.tinyCloudSession?.signature ?? this._restoredTcSession?.signature;
     const leavingContext = this._serviceContext;
     let denied;
     let erased;
@@ -22595,7 +22609,7 @@ var _TinyCloudNode = class _TinyCloudNode {
           if (denied) erased = await this.eraseReplicaLocalCopy("sign_out", denied.status);
         } finally {
           if (leavingAddress) {
-            await (leavingAuth ? leavingAuth.clearPersistedSession(leavingAddress) : this.config.sessionStorage?.clear(leavingAddress));
+            await (leavingAuth ? leavingAuth.clearPersistedSession(leavingAddress, leavingSignature) : this.config.sessionStorage && clearPersistedSessionIfOwn(this.config.sessionStorage, leavingAddress, leavingSignature));
           }
         }
       }
@@ -28341,10 +28355,22 @@ var FileSessionStorage = class {
   async save(address, session) {
     const filePath = this.getFilePath(address);
     const data = JSON.stringify(session, null, 2);
-    (0, import_fs.writeFileSync)(filePath, data, "utf-8");
+    const tempPath = `${filePath}.${process.pid}.${process.hrtime.bigint()}.tmp`;
+    try {
+      (0, import_fs.writeFileSync)(tempPath, data, { mode: 384, flag: "wx" });
+      (0, import_fs.renameSync)(tempPath, filePath);
+    } catch (error) {
+      try {
+        (0, import_fs.unlinkSync)(tempPath);
+      } catch {
+      }
+      throw error;
+    }
   }
   /**
    * Load a session for an address.
+   *
+   * Rejects when the file exists but cannot be read or parsed; the file is left in place.
    */
   async load(address) {
     const filePath = this.getFilePath(address);
@@ -28368,11 +28394,9 @@ var FileSessionStorage = class {
       }
       return session;
     } catch (error) {
-      try {
-        (0, import_fs.unlinkSync)(filePath);
-      } catch {
-      }
-      return null;
+      throw new Error(
+        `Could not read session file ${filePath}: ${error}`
+      );
     }
   }
   /**