@aperture-browser/live-session 0.0.0-init.0 → 0.0.0-nightly.100.78b4e7ef6edc

package/dist/index.js

@@ -1,12 +1,16 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
 import * as Effect from "effect/Effect";
 import * as Schema from "effect/Schema";
-import { Recording, resolveTenantHeader } from "@aperture-browser/api-client";
+import { BrowserStatus, Recording, contentDispositionFilename, resolveTenantHeader, toApiRequestError } from "@aperture-browser/api-client";
 import * as Data from "effect/Data";
 import * as Deferred from "effect/Deferred";
 import "effect/Fiber";
 import * as FiberSet from "effect/FiberSet";
 import * as Option from "effect/Option";
+import * as Redacted from "effect/Redacted";
+import * as HttpClient from "effect/http/HttpClient";
+import * as FetchHttpClient from "effect/http/FetchHttpClient";
+import * as HttpClientResponse from "effect/http/HttpClientResponse";
 //#region src/input-keycodes.ts
 const evdevKeycodeByCode = {
 	Escape: 1,
@@ -315,6 +319,8 @@ const Target = Schema.Struct({
 	title: Schema.String,
 	url: Schema.String,
 	loading: Schema.Boolean,
+	canGoBack: Schema.optionalKey(Schema.Boolean),
+	canGoForward: Schema.optionalKey(Schema.Boolean),
 	viewport: Schema.optionalKey(Schema.Struct({
 		width: positive,
 		height: positive,
@@ -357,7 +363,9 @@ const Snapshot = Schema.Struct({
 	targets: arrayOrEmpty(Target),
 	participants: arrayOrEmpty(Participant),
 	recordings: arrayOrEmpty(Recording),
-	presentation: Presentation
+	presentation: Presentation,
+	viewportOwnerClientId: Schema.optionalKey(Schema.String),
+	autoSize: Schema.optionalKey(Schema.Boolean)
 });
 const PresenceState = Schema.Struct({
 	type: Schema.Literal("presence.state"),
@@ -368,6 +376,11 @@ const InputState = Schema.Struct({
 	holderClientId: Schema.optionalKey(Schema.String),
 	mode: Schema.optionalKey(LeaseMode)
 });
+const ViewportState = Schema.Struct({
+	type: Schema.Literal("viewport.state"),
+	viewportOwnerClientId: Schema.optionalKey(Schema.String),
+	autoSize: Schema.Boolean
+});
 const Cursor = Schema.Struct({
 	type: Schema.Literal("presence.cursor"),
 	clientId: Schema.String,
@@ -429,8 +442,11 @@ const CommandResult = Schema.Struct({
 		"page.reload.result",
 		"page.stop-loading.result",
 		"viewport.set.result",
+		"viewport.auto-size.set.result",
+		"viewport.owner.claim.result",
 		"presentation.quality.set.result",
 		"presentation.cursor.set.result",
+		"automation.pacing.set.result",
 		"recording.start.result",
 		"recording.stop.result",
 		"recording.cancel.result"
@@ -447,6 +463,7 @@ const LiveSessionServerMessage = Schema.Union([
 	Snapshot,
 	PresenceState,
 	InputState,
+	ViewportState,
 	Cursor,
 	CursorClear,
 	Paint,
@@ -524,6 +541,73 @@ function mapClientToViewport(clientX, clientY, rect, viewportWidth, viewportHeig
 	};
 }
 //#endregion
+//#region src/access.ts
+/** Resolve a path under the access mount, including relative relay mounts. */
+function mountURL(access, path) {
+	const base = new URL(access.baseUrl ?? "/", window.location.href);
+	if (base.protocol !== "http:" && base.protocol !== "https:") throw new Error("session base URL must use HTTP or HTTPS");
+	if (access.kind === "relay" && base.origin !== window.location.origin) throw new Error("session relay must use the page's origin");
+	base.pathname = `${base.pathname.replace(/\/$/, "")}/${path}`;
+	base.search = "";
+	base.hash = "";
+	return base;
+}
+/** Resolve all session endpoints under the same mount. */
+function sessionURL(access, route) {
+	return mountURL(access, `sessions/${encodeURIComponent(access.sessionId)}/${route}`);
+}
+function sessionWebSocketURL(access, route) {
+	const url = sessionURL(access, route);
+	url.protocol = url.protocol === "https:" ? "wss:" : "ws:";
+	return url.toString();
+}
+/** Credentials the browser sends itself; relay access is authenticated by the consumer backend instead. */
+function directAuthorization(access) {
+	if (access.kind !== "direct") return {
+		token: void 0,
+		tenantId: void 0
+	};
+	const { credentials } = access;
+	return {
+		token: credentials.kind === "bearer" ? Redacted.value(credentials.token) : void 0,
+		tenantId: resolveTenantHeader(credentials, "tenant-scoped")
+	};
+}
+function sessionProtocols(access) {
+	const { token, tenantId } = directAuthorization(access);
+	const protocols = [LIVE_SESSION_PROTOCOL];
+	if (token !== void 0) protocols.push(`authorization.bearer.${token}`);
+	if (tenantId !== void 0) protocols.push(`x-aperture-tenant-id.${tenantId}`);
+	return protocols;
+}
+/** GETs a session route with the credentials this access sends itself. */
+function sessionGet(access, url) {
+	const { token, tenantId } = directAuthorization(access);
+	const headers = {};
+	if (token !== void 0) headers.Authorization = `Bearer ${token}`;
+	if (tenantId !== void 0) headers["X-Aperture-Tenant-Id"] = tenantId;
+	return Effect.flatMap(HttpClient.HttpClient, (http) => HttpClient.filterStatusOk(http).get(url.toString(), { headers })).pipe(Effect.provideService(FetchHttpClient.RequestInit, {
+		credentials: token === void 0 ? "same-origin" : "omit",
+		redirect: "error",
+		cache: "no-store"
+	}));
+}
+const getSessionStatus = Effect.fn("getSessionStatus")(function* (access) {
+	return yield* sessionGet(access, sessionURL(access, "browser/status")).pipe(Effect.flatMap(HttpClientResponse.schemaBodyJson(BrowserStatus)), toApiRequestError);
+});
+const downloadSessionRecording = Effect.fn("downloadSessionRecording")(function* (access, recordingId) {
+	return yield* sessionGet(access, sessionURL(access, `recordings/${encodeURIComponent(recordingId)}/content`)).pipe(Effect.flatMap((response) => Effect.map(response.arrayBuffer, (body) => ({
+		blob: new Blob([body], { type: response.headers["content-type"] ?? "" }),
+		filename: contentDispositionFilename(response.headers["content-disposition"])
+	}))), toApiRequestError);
+});
+/** A JPEG of one tab, authorized through the relay, session access, or account API. */
+const getTargetThumbnail = Effect.fn("getTargetThumbnail")(function* (access, targetId) {
+	const route = `targets/${encodeURIComponent(targetId)}/thumbnail`;
+	const token = directAuthorization(access).token;
+	return yield* sessionGet(access, access.kind === "relay" || token !== void 0 && (token.startsWith("aps_") || token.startsWith("ape_") || token.startsWith("apv_")) ? sessionURL(access, route) : mountURL(access, `api/sessions/${encodeURIComponent(access.sessionId)}/${route}`)).pipe(Effect.flatMap((response) => Effect.map(response.arrayBuffer, (body) => new Blob([body], { type: "image/jpeg" }))), toApiRequestError);
+});
+//#endregion
 //#region src/connection.ts
 var connection_exports = /* @__PURE__ */ __exportAll({
 	LiveSessionError: () => LiveSessionError,
@@ -577,6 +661,7 @@ const make = Effect.fnUntraced(function* (options) {
 	let preferredTransport = options.webrtcSupported ? "webrtc" : "websocket";
 	let transportRequest = null;
 	let disposed = false;
+	let terminalError = null;
 	let retryTimer = null;
 	let webrtcRetryMs = 1e3;
 	let nextRequestId = 0;
@@ -587,7 +672,8 @@ const make = Effect.fnUntraced(function* (options) {
 	const pendingCommands = /* @__PURE__ */ new Map();
 	const hello = () => ({
 		type: "session.hello",
-		...identity ?? options.identity
+		...identity ?? options.identity,
+		...options.autoSize === void 0 ? {} : { autoSize: options.autoSize() }
 	});
 	const transportCallbacks = {
 		hello,
@@ -625,14 +711,11 @@ const make = Effect.fnUntraced(function* (options) {
 		else startWebSocket();
 	};
 	const startWebRTC = () => {
-		if (disposed || candidate) return;
+		if (disposed || terminalError !== null || candidate) return;
 		let transport;
 		try {
 			transport = new WebRTCSessionTransport({
-				baseUrl: options.baseUrl,
-				sessionId: options.sessionId,
-				credentials: options.credentials,
-				sessionToken: options.sessionToken,
+				access: options.access,
 				iceServers: options.iceServers,
 				callbacks: transportCallbacks,
 				fork
@@ -652,14 +735,11 @@ const make = Effect.fnUntraced(function* (options) {
 		});
 	};
 	const startWebSocket = () => {
-		if (disposed || candidate) return;
+		if (disposed || terminalError !== null || candidate) return;
 		let transport;
 		try {
 			transport = new WebSocketSessionTransport({
-				baseUrl: options.baseUrl,
-				sessionId: options.sessionId,
-				credentials: options.credentials,
-				sessionToken: options.sessionToken,
+				access: options.access,
 				callbacks: transportCallbacks,
 				fork
 			});
@@ -709,8 +789,27 @@ const make = Effect.fnUntraced(function* (options) {
 		if (transport.kind === "websocket" && preferredTransport === "webrtc" && options.webrtcSupported) scheduleWebRTCRetry();
 		if (previous && previous !== transport) previous.close();
 	};
+	/** Closes every transport and clears what they presented; the connection itself stays usable. */
+	const stopTransports = (reason) => {
+		clearRetry();
+		dropCandidate();
+		active?.close();
+		active = null;
+		rejectTransportRequest(reason);
+		rejectPending(reason);
+		callbacks.onFrame(null);
+		callbacks.onStream(null);
+		callbacks.onTransport(null);
+	};
 	const transportFailed = (transport, error) => {
 		if (disposed) return;
+		if (error.terminalReason !== void 0 && (candidate === transport || active === transport)) {
+			terminalError = error;
+			stopTransports(error.message);
+			callbacks.onPhase("error");
+			callbacks.onError(error.message);
+			return;
+		}
 		if (candidate === transport) {
 			dropCandidate();
 			candidateFailed(transport.kind, error);
@@ -791,21 +890,14 @@ const make = Effect.fnUntraced(function* (options) {
 	};
 	const close = () => {
 		disposed = true;
-		clearRetry();
-		dropCandidate();
-		active?.close();
-		active = null;
-		rejectTransportRequest("live session connection closed");
-		rejectPending("live session connection closed");
-		callbacks.onFrame(null);
-		callbacks.onStream(null);
-		callbacks.onTransport(null);
+		stopTransports("live session connection closed");
 	};
 	yield* Effect.addFinalizer(() => Effect.sync(close));
 	callbacks.onPhase("connecting");
 	startPreferredTransport();
 	return {
 		reconnect: Effect.sync(() => {
+			terminalError = null;
 			clearRetry();
 			dropCandidate();
 			active?.close();
@@ -813,9 +905,10 @@ const make = Effect.fnUntraced(function* (options) {
 			rejectTransportRequest("live session transport replaced");
 			rejectPending("live session transport replaced");
 			callbacks.onPhase("connecting");
-			startPreferredTransport();
+			startWebSocket();
 		}),
 		selectTransport: (kind) => Effect.suspend(() => {
+			if (terminalError !== null) return Effect.fail(terminalError);
 			if (kind === "webrtc" && !options.webrtcSupported) return Effect.fail(new LiveSessionError({ message: "WebRTC presentation is unavailable" }));
 			preferredTransport = kind;
 			clearRetry();
@@ -867,7 +960,7 @@ var WebSocketSessionTransport = class {
 	constructor(options) {
 		this.callbacks = options.callbacks;
 		this.fork = options.fork;
-		this.socket = new WebSocket(sessionWebSocketURL(options.baseUrl, options.sessionId), sessionProtocols(options.credentials, options.sessionToken));
+		this.socket = new WebSocket(sessionWebSocketURL(options.access, "session"), sessionProtocols(options.access));
 		this.socket.binaryType = "blob";
 	}
 	connect() {
@@ -888,8 +981,8 @@ var WebSocketSessionTransport = class {
 				}
 			}
 		});
-		this.socket.addEventListener("close", () => {
-			if (!this.closed) this.callbacks.failed(this, new LiveSessionError({ message: "WebSocket session transport closed" }));
+		this.socket.addEventListener("close", (event) => {
+			if (!this.closed) this.callbacks.failed(this, transportError("WebSocket session transport closed", event.code));
 		});
 		this.socket.addEventListener("error", () => {
 			if (!this.closed) this.callbacks.failed(this, new LiveSessionError({ message: "WebSocket session transport failed" }));
@@ -969,8 +1062,9 @@ var WebRTCSessionTransport = class {
 		this.callbacks = options.callbacks;
 		this.fork = options.fork;
 		this.connection = new RTCPeerConnection({ iceServers: options.iceServers.map((server) => ({
-			...server,
-			urls: [...server.urls]
+			urls: [...server.urls],
+			username: server.username,
+			credential: server.credential === void 0 ? void 0 : Redacted.value(server.credential)
 		})) });
 		this.reliable = this.connection.createDataChannel("application", { ordered: true });
 		this.realtime = this.connection.createDataChannel("application-realtime", {
@@ -978,7 +1072,7 @@ var WebRTCSessionTransport = class {
 			maxRetransmits: 0
 		});
 		this.connection.addTransceiver("video", { direction: "recvonly" });
-		this.signal = new WebSocket(signalWebSocketURL(options.baseUrl, options.sessionId), sessionProtocols(options.credentials, options.sessionToken));
+		this.signal = new WebSocket(sessionWebSocketURL(options.access, "webrtc/signal"), sessionProtocols(options.access));
 	}
 	connect() {
 		this.reliable.addEventListener("open", () => {
@@ -1019,7 +1113,7 @@ var WebRTCSessionTransport = class {
 			this.fork(this.sendOffer().pipe(Effect.catchTag("LiveSessionError", (error) => Effect.sync(() => this.fail(error.message)))));
 		});
 		this.signal.addEventListener("message", (event) => this.handleSignal(event));
-		this.signal.addEventListener("close", () => this.fail("WebRTC signaling closed"));
+		this.signal.addEventListener("close", (event) => this.fail("WebRTC signaling closed", event.code));
 		this.signal.addEventListener("error", () => this.fail("WebRTC signaling failed"));
 	}
 	sendReliable(message) {
@@ -1106,10 +1200,21 @@ var WebRTCSessionTransport = class {
 	maybeReady() {
 		if (this.snapshotReceived && this.stream && this.streamReady) this.callbacks.ready(this);
 	}
-	fail(message) {
-		if (!this.closed) this.callbacks.failed(this, new LiveSessionError({ message }));
+	fail(message, closeCode = 0) {
+		if (!this.closed) this.callbacks.failed(this, transportError(message, closeCode));
 	}
 };
+function transportError(message, closeCode) {
+	if (closeCode === 4401 || closeCode === 4403) return new LiveSessionError({
+		message: "Session access denied. Sign in or request access before reconnecting.",
+		terminalReason: "access_denied"
+	});
+	if (closeCode === 4404 || closeCode === 4410) return new LiveSessionError({
+		message: "Session is no longer available.",
+		terminalReason: "session_unavailable"
+	});
+	return new LiveSessionError({ message });
+}
 function decodeRasterFrame(packet) {
 	return Effect.gen(function* () {
 		if (packet.size < 4) return Option.none();
@@ -1125,26 +1230,7 @@ function decodeRasterFrame(packet) {
 		}));
 	}).pipe(Effect.orElseSucceed(() => Option.none()));
 }
-function sessionWebSocketURL(baseUrl, sessionId) {
-	return webSocketURL(baseUrl, `/sessions/${encodeURIComponent(sessionId)}/session`);
-}
-function signalWebSocketURL(baseUrl, sessionId) {
-	return webSocketURL(baseUrl, `/sessions/${encodeURIComponent(sessionId)}/webrtc/signal`);
-}
-function webSocketURL(baseUrl, path) {
-	const url = new URL(path, baseUrl ?? window.location.href);
-	url.protocol = url.protocol === "https:" ? "wss:" : "ws:";
-	return url.toString();
-}
-function sessionProtocols(credentials, sessionToken) {
-	const protocols = [LIVE_SESSION_PROTOCOL];
-	if (sessionToken) protocols.push(`authorization.bearer.${sessionToken}`);
-	else if (credentials.kind === "bearer") protocols.push(`authorization.bearer.${credentials.token}`);
-	const tenantId = resolveTenantHeader(credentials, "tenant-scoped");
-	if (tenantId) protocols.push(`x-aperture-tenant-id.${tenantId}`);
-	return protocols;
-}
 //#endregion
-export { DEFAULT_VIEWPORT, LIVE_SESSION_PROTOCOL, connection_exports as LiveSessionConnection, LiveSessionError, LiveSessionServerMessage, RasterFrameHeader, STALE_FRAME_MS, VIEWPORT_DEVICE_SCALE_FACTORS, VIEWPORT_PRESETS, computeRenderMetrics, createViewportPreset, decodeServerMessage, evdevKeycodeByCode, formatViewportScale, isPrintableKey, keyboardInputMessage, keyboardModifiers, mapClientToViewport, shouldForwardBrowserShortcut, strictParseOptions, windowsVirtualKeyCodeForCodeOrKey };
+export { DEFAULT_VIEWPORT, LIVE_SESSION_PROTOCOL, connection_exports as LiveSessionConnection, LiveSessionError, LiveSessionServerMessage, RasterFrameHeader, STALE_FRAME_MS, VIEWPORT_DEVICE_SCALE_FACTORS, VIEWPORT_PRESETS, computeRenderMetrics, createViewportPreset, decodeServerMessage, downloadSessionRecording, evdevKeycodeByCode, formatViewportScale, getSessionStatus, getTargetThumbnail, isPrintableKey, keyboardInputMessage, keyboardModifiers, mapClientToViewport, sessionProtocols, sessionURL, sessionWebSocketURL, shouldForwardBrowserShortcut, strictParseOptions, windowsVirtualKeyCodeForCodeOrKey };
 
 //# sourceMappingURL=index.js.map