create-syncular-app 0.15.42 → 0.15.43

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-syncular-app",
-  "version": "0.15.42",
+  "version": "0.15.43",
   "description": "Scaffold a new Syncular app: `create-syncular-app`",
   "license": "Apache-2.0",
   "author": "Benjamin Kniffler",
@@ -49,6 +49,6 @@
     "!dist/**/*.test.d.ts"
   ],
   "devDependencies": {
-    "@syncular/typegen": "0.15.42"
+    "@syncular/typegen": "0.15.43"
   }
 }

package/template/minimal/README.md

@@ -32,9 +32,10 @@ bun run clients           # terminal 2 — prints "✓ converged"
 1. **`src/server.ts` → `resolveScopes`** — the whole authorization story. It
    runs in your backend next to your auth. The starter returns `['*']` (see
    everything); a real one returns the scope values the authenticated actor may
-   see. Multiple variables are independent, not correlated parent/child tuples:
-   test isolation with at least two parents and child IDs, and carry the parent
-   scope on every child table before using a child wildcard. See
+   see. Multiple variables are independent dimensions, so every combination of
+   allowed values is authorized: test isolation with at least two parents and
+   child IDs, and carry the parent scope on every child table before using a
+   child wildcard. See
    [Scopes & authorization](https://syncular.dev/concepts-scopes/).
 2. **`src/server.ts` → `authenticate`** — plug in your real session/token
    check; return `{ actorId, partition }` or `null` for a 401.

package/template/tauri/README.md

@@ -77,10 +77,10 @@ On desktop, the plugin owns the database path and the transport — see
 
 1. **`src/server.ts` → `resolveScopes`** — the whole authorization story. The
    starter returns `['*']`; a real one returns the scope values the
-   authenticated actor may see. Multiple variables are independent, not
-   correlated parent/child tuples: test isolation with at least two parents and
-   child IDs, and carry the parent scope on every child table before using a
-   child wildcard. See
+   authenticated actor may see. Multiple variables are independent dimensions,
+   so every combination of allowed values is authorized: test isolation with at
+   least two parents and child IDs, and carry the parent scope on every child
+   table before using a child wildcard. See
    [Scopes & authorization](https://syncular.dev/concepts-scopes/).
 2. **`src/server.ts` → `authenticate`** — plug in your real session/token
    check; return `{ actorId, partition }` or `null` for a 401.

package/template/tauri/src/frontend/engine.ts

@@ -42,10 +42,15 @@ export interface Engine extends SyncClientLike {
 const isTauri = () => '__TAURI_INTERNALS__' in window;
 
 export async function createEngine(): Promise<Engine> {
+  // Both hosts hand this view a shared transport — the Tauri core lives in
+  // the host process behind every webview, and the browser handle is
+  // multi-tab (followers proxy to one leader socket) — so `sharedTransport`
+  // keeps a hidden view from tearing down realtime for a visible sibling.
   const supervise = <Client extends Engine>(client: Client): Client =>
     installRealtimeSupervisor(client, {
       connectivity: browserConnectivitySignal(),
       lifecycle: documentLifecycleSignal(),
+      sharedTransport: true,
     });
   if (isTauri()) {
     // Desktop: the native Rust core in the Tauri process.

package/template/tauri/src-tauri/Cargo.toml

@@ -21,7 +21,7 @@ tauri = { version = "2", features = [] }
 # The syncular plugin from crates.io. `native-transport` gives the core its
 # real HTTP + WebSocket transport (ureq + tungstenite) inside the host
 # process — the webview never talks to the sync server directly.
-tauri-plugin-syncular = { version = "0.15.42", features = ["native-transport"] }
+tauri-plugin-syncular = { version = "0.15.43", features = ["native-transport"] }
 
 [features]
 default = []

package/template/web/README.md

@@ -43,9 +43,10 @@ covered by `tsc`).
 1. **`src/server.ts` → `resolveScopes`** — the whole authorization story. It
    runs in your backend next to your auth. The starter returns `['*']`; a real
    one returns the scope values the authenticated actor may see. Multiple
-   variables are independent, not correlated parent/child tuples: test
-   isolation with at least two parents and child IDs, and carry the parent scope
-   on every child table before using a child wildcard. See
+   variables are independent dimensions, so every combination of allowed values
+   is authorized: test isolation with at least two parents and child IDs, and
+   carry the parent scope on every child table before using a child wildcard.
+   See
    [Scopes & authorization](https://syncular.dev/concepts-scopes/).
 2. **`src/server.ts` → `authenticate`** — plug in your real session/token
    check; return `{ actorId, partition }` or `null` for a 401.

package/template/web/src/frontend/main.ts

@@ -69,11 +69,15 @@ async function main(): Promise<void> {
   });
 
   // The supported host policy owns connect + catch-up, retries transient
-  // startup/socket loss, and suspends while this page is offline or hidden.
+  // startup/socket loss, and suspends while this page is offline.
   // Rendering remains local-first: no network promise blocks app startup.
+  // The handle is multi-tab (followers proxy to one leader socket), so
+  // `sharedTransport` keeps a hidden tab from tearing down realtime for a
+  // sibling tab that is still visible.
   installRealtimeSupervisor(handle, {
     connectivity: browserConnectivitySignal(),
     lifecycle: documentLifecycleSignal(),
+    sharedTransport: true,
   });
   const renderRealtimeStatus = () => {
     const phase = realtimeSupervisorSnapshot(handle).phase;