@tinycloud/web-sdk 3.8.0-beta.8 → 3.8.0

package/README.md

@@ -71,6 +71,7 @@ Duplicate registration throws immediately; enabling replication without
 registration throws at construction. Replication off requires no plugin, and a
 refused local replica does not end an otherwise valid network session.
 Set `replication.syncScope: 'prefixes'` to request sign-in sync only on the declared prefixes.
+Set `replication.contentFetch: 'lazy'` to sync entry names without downloading values; reads of values the replica does not hold go to the network. The default is `'eager'`.
 
 Use the same module format for registration and the client: importing both
 ESM and CJS root bundles in one process creates independent module registries.
@@ -289,6 +290,7 @@ const tc = new TinyCloudWeb({
 });
 
 tc.ui.open();
+tc.ui.setButtonVisible(true); // show or hide the floating button at runtime
 tc.ui.close();
 tc.ui.toggle();
 tc.ui.isOpen;    // boolean
@@ -297,6 +299,8 @@ tc.ui.available; // false in iframes, opaque origins, SSR, or when ui is false
 
 `open()` also clears the user's hidden flag for the button. The hidden flag is stored per origin and app id under `tinycloud:ui:button-hidden:v1:`. The panel shows sections only for capabilities the client exposes.
 
+`ui.button` sets the initial state of the floating button, and `tc.ui.setButtonVisible(visible)` changes it at runtime: `true` shows the button now (even under `ui.button: false`) and clears the stored hidden flag, `false` hides it without writing that flag. The SDK does not store this choice; call it on load from your own setting. `open()`, `openPage()` and `toggle()` work whether the button is shown or not. On a phone the panel keeps its header inside the device safe areas, and a downward swipe on the header closes it.
+
 ### Storage section and storage-full toast
 
 When the client exposes `storage.status()`, the panel shows a Storage section with the account's usage: "Room left", "Nearly full", "Storage is full", or "No limit", plus a bar and a "Manage storage" link. The link uses the status `manageUrl` only when it is https; otherwise it falls back to `https://account.tinycloud.xyz/storage`. When the storage needs permission, the section shows a neutral note with no numbers.

package/dist/adapters/BrowserSessionStorage.d.ts

@@ -1,4 +1,5 @@
 import { ISessionStorage, PersistedSessionData } from "@tinycloud/sdk-core";
+import type { PortableDelegation } from "@tinycloud/node-sdk/core";
 export type BrowserSessionLoadStatus = "loaded" | "missing" | "expired" | "corrupt" | "storage-unavailable";
 export type BrowserSessionLoadResult = {
     status: "loaded";
@@ -29,6 +30,22 @@ export declare class BrowserSessionStorage implements ISessionStorage {
     private validateForNetworkRestore;
     loadWithStatus(address: string): Promise<BrowserSessionLoadResult>;
     clear(address: string): Promise<void>;
+    private grantsKey;
+    /**
+     * Stores `grants` (runtime delegations to the stored session's key) beside the session record, in the same storage.
+     * They are bearer proofs for that key, so they live and die with the session record: `save` of a new session,
+     * `clear` and sign-out remove them, and `loadRuntimeGrants` returns none once the session is missing or expired.
+     * An empty list removes the entry. A storage that refuses the write (quota, blocked) leaves the grants unsaved:
+     * the grant then lasts until the page reloads. Never rejects.
+     */
+    saveRuntimeGrants(address: string, grants: readonly PortableDelegation[]): Promise<void>;
+    private writeRuntimeGrants;
+    /**
+     * The unexpired, well-formed grants saved for `address` while its session record is valid. Expired or malformed ones
+     * are removed. Never rejects: an unreadable storage answers none.
+     */
+    loadRuntimeGrants(address: string): Promise<PortableDelegation[]>;
+    private readRuntimeGrants;
     exists(address: string): boolean;
     isAvailable(): boolean;
 }