@tinycloud/web-sdk 3.11.0 → 3.12.0-beta.1

package/README.md

@@ -54,9 +54,16 @@ changed its manifest (for example a new permission or prefix), the stored
 session is cleared and the user is asked again, automatically. The check is
 local: it reads the session's signed permissions (and any approved runtime
 grants), and the default browser storage does not restore a session past its
-expiry. It does not contact the node, so a session the node rejects (a 401
-after a revocation or a reset, for example) is still restored. With OpenKey,
-`prepareSignIn()` makes the same check.
+expiry. The permission check does not contact the node, so a session the node
+rejects (a 401 after a revocation or a reset, for example) is still restored.
+With OpenKey, `prepareSignIn()` makes the same check.
+
+Restoring a session makes one node read, capped at 5 seconds, to learn whether
+the session's primary space is hosted. It never prompts and never fails the
+restore. Read the answer from `tc.spaceHosting` (`"hosted"`, `"not-hosted"` or
+`"unknown"`). At sign-in the answer comes from the node's activation of the new
+session. `signIn()` on a restored session whose space is `"not-hosted"` returns
+the restored session.
 
 To force a fresh consent, sign out first. `signOut()` clears the stored session
 and blocks restoring until the next sign-in succeeds, so `signIn()` prompts:

package/dist/adapters/BrowserSessionStorage.d.ts

@@ -21,6 +21,14 @@ export declare class BrowserSessionStorage implements ISessionStorage {
     private defaultStorage;
     private key;
     private activeAddressKey;
+    private fenceKey;
+    /**
+     * Fences the session with `signature` stored for `address`, for when removing its record fails: a restore
+     * checks {@link isSignedOut} and refuses it. A successful `clear` lifts the fence, and so does saving a
+     * different session.
+     */
+    markSignedOut(address: string, signature: string): void;
+    isSignedOut(address: string, signature: string): boolean;
     private clearActiveAddress;
     private assertPersistable;
     save(address: string, data: PersistedSessionData): Promise<void>;