snapback4 0.0.3 → 0.0.4

package/README.md

@@ -122,7 +122,8 @@ mutation edit(messageId: messages, body: text <=4000):
   exist by the end of the mutation that inserted this one).
 - **Rules:** `read`, `insert`, `update`, `delete`, each `<-` one
   expression over the row (`.col`), `viewer`, and literals: `allow`,
-  `deny`, `public 'reason'`, `.col = viewer`, `.col != 'x'`,
+  `deny`, `public` (or the table line `public 'reason'`, which also
+  documents why), `.col = viewer`, `.col != 'x'`,
   `exists t[.a, viewer, 'literal']`, `created t[..]` (insert rules only:
   true when this mutation inserted the probed row), `and`, `or`, `not`.
   `update (old, next) <- old.x = next.x` names both images. An `exists`
@@ -320,8 +321,11 @@ seq, next }` or `{ denied }`; `POST /m/<op>` with `{ "id", "args",
 "failed", why }` (a client-minted `id` makes the write apply at most
 once); `GET /sync?from=W` streams the partition; `GET /changes?since=S`
 long-polls for commits; `GET /schema` is the compiled backend;
-`POST /auth/guest|signup|login|logout`. Authorization: `x-snapback-persona`
-(dev, same machine) or `Authorization: Bearer <token>`.
+`POST /auth/guest` (`{}`), `POST /auth/signup` and `/auth/login`
+(`{ "email", "password" }`) answer `{ "session": { principal, kind, token,
+expiresAt } }` or `{ "denied": Refusal }`; `POST /auth/logout` with the
+bearer token ends it. Authorization: `x-snapback-persona` (dev, same
+machine) or `Authorization: Bearer <token>`.
 
 ## 6. Release
 

package/bin/snapback4.js

@@ -1,8 +1,10 @@
 #!/usr/bin/env node
 // `npx snapback4 <verb>`: the Rust binary, found in the platform package
 // installed beside this one, or named by SNAPBACK4_BIN, or built in this
-// repository. The JavaScript here only finds and runs it.
-import { spawnSync } from "node:child_process";
+// repository. The JavaScript here only finds and runs it, and dies with it:
+// a signal to this wrapper reaches the binary, so a recorded PID of either
+// stops the server.
+import { spawn } from "node:child_process";
 import { existsSync } from "node:fs";
 import { createRequire } from "node:module";
 import { dirname, join, resolve } from "node:path";
@@ -20,5 +22,9 @@ if (!binary) {
   console.error(`snapback4: no binary for ${process.platform}-${process.arch}. Packages exist for darwin-arm64; elsewhere, build with \`cargo build --release -p snapback4\` and set SNAPBACK4_BIN.`);
   process.exit(2);
 }
-const result = spawnSync(binary, process.argv.slice(2), { stdio: "inherit" });
-process.exit(result.status ?? 1);
+const child = spawn(binary, process.argv.slice(2), { stdio: "inherit" });
+for (const signal of ["SIGINT", "SIGTERM", "SIGHUP"]) process.on(signal, () => { try { child.kill(signal); } catch { /* gone */ } });
+child.on("exit", (code, signal) => {
+  if (signal) { process.kill(process.pid, signal); return; }
+  process.exit(code ?? 1);
+});

package/dist/replica/replica.d.ts

@@ -54,5 +54,7 @@ export declare class Replica {
     /** Follow the stream until closed: sync, wait for the transport's next
      * change signal, sync again. */
     follow(wait: () => Promise<void>): void;
+    /** Stop following, let a sync in flight finish on the open store, then
+     * close it: nothing touches the store after this returns. */
     close(): Promise<void>;
 }

package/dist/replica/replica.js

@@ -44,6 +44,8 @@ export class Replica {
      * applies as one transaction. Returns the tables that changed. */
     async syncOnce() {
         const touched = new Set();
+        if (this.closed)
+            return { touched, ok: false };
         let { watermark, generation } = await this.state();
         if (generation !== this.generation) {
             // A new generation re-derives the partition: drop rows, keep the outbox.
@@ -53,6 +55,8 @@ export class Replica {
         }
         for (let pages = 0; pages < 1_000; pages++) {
             const page = await this.transport.sync(watermark, PAGE);
+            if (this.closed)
+                return { touched, ok: false };
             if ("denied" in page)
                 return { touched, ok: false };
             if (page.watermark < watermark)
@@ -130,7 +134,16 @@ export class Replica {
             return;
         this.following = (async () => {
             while (!this.closed) {
-                const { ok } = await this.syncOnce();
+                let ok = false;
+                try {
+                    ({ ok } = await this.syncOnce());
+                }
+                catch {
+                    // A store that closed under a sync, or a transport that threw:
+                    // nothing escapes the loop; the next round decides.
+                    if (this.closed)
+                        break;
+                }
                 if (this.closed)
                     break;
                 if (!ok)
@@ -140,8 +153,11 @@ export class Replica {
             }
         })();
     }
+    /** Stop following, let a sync in flight finish on the open store, then
+     * close it: nothing touches the store after this returns. */
     async close() {
         this.closed = true;
+        await this.following?.catch(() => { });
         await this.store.close();
     }
 }

package/dist/replica/store.js

@@ -235,6 +235,10 @@ class IndexedDbStore {
             transaction.onerror = () => reject(transaction.error);
             transaction.onabort = () => reject(transaction.error ?? new Error("aborted"));
         });
+        // A body that throws (a refused prediction) aborts the transaction on
+        // purpose; the abort must not surface a second time as an unhandled
+        // rejection in the page. The caller still sees the body's own error.
+        done.catch(() => { });
         const rows = transaction.objectStore("rows");
         const idx = transaction.objectStore("idx");
         const meta = transaction.objectStore("meta");
@@ -331,10 +335,19 @@ class IndexedDbStore {
         return { transaction, api, done };
     }
     async read(body) {
-        const { api, done } = this.tx("readonly");
-        const result = await body(api);
-        await done;
-        return result;
+        const { transaction, api, done } = this.tx("readonly");
+        try {
+            const result = await body(api);
+            await done;
+            return result;
+        }
+        catch (error) {
+            try {
+                transaction.abort();
+            }
+            catch { /* already done */ }
+            throw error;
+        }
     }
     async write(body) {
         const { transaction, api, done } = this.tx("readwrite");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "snapback4",
-  "version": "0.0.3",
+  "version": "0.0.4",
   "type": "module",
   "description": "Snapback 4: the card (contract), the online and local-first clients (IndexedDB, SQLite), React hooks, sign-in, a labelled mock, and the `snapback4` CLI. LLP 3000.",
   "bin": {
@@ -42,7 +42,7 @@
     "README.md"
   ],
   "optionalDependencies": {
-    "snapback4-darwin-arm64": "0.0.3"
+    "snapback4-darwin-arm64": "0.0.4"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",