@athenaintel/react 0.21.1 → 0.22.0

package/dist/collab/client.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"client.cjs","sources":["../../src/collab/client.ts"],"sourcesContent":["/**\n * Vanilla (framework-agnostic) live client for Generic Doc assets.\n *\n * `connectGenericDoc` owns the full connection lifecycle: mint a room-bound\n * token via the public API, open the Keryx WebSocket with the v14 provider\n * (`@y/websocket` + `@y/y`), re-mint before expiry, apply the close-code\n * policy (4401 → one fresh mint, other 44xx → permanent stop, everything\n * else → provider backoff), and expose presence from awareness. React apps\n * use `useGenericDoc` from `@athenaintel/react/collab` instead of calling\n * this directly.\n */\n\nimport { WebsocketProvider } from '@y/websocket';\nimport * as Y from '@y/y';\nimport { classifyClose } from './close-policy';\nimport {\n  type CollabAuth,\n  type CollabTokenResponse,\n  CollabTokenError,\n  mintCollabToken,\n} from './mint';\n\nexport type GenericDocStatus =\n  | 'connecting'\n  | 'connected'\n  | 'disconnected'\n  | 'closed'\n  | 'error';\n\nexport interface PresenceEntry {\n  clientId: number;\n  state: Record<string, unknown>;\n}\n\nexport interface GenericDocHandle {\n  /** The live shared document. Owned by the handle; destroyed with it. */\n  readonly doc: Y.Doc;\n  readonly status: GenericDocStatus;\n  /**\n   * Whether the initial server sync has completed for the current connection.\n   * `status === 'connected'` fires before the server state arrives, so a doc\n   * read immediately after connect can still be empty — gate first reads on\n   * this (or `waitForSync`).\n   */\n  readonly synced: boolean;\n  /** Granted access from the last successful mint. */\n  readonly accessType: 'r' | 'rw' | null;\n  /** Terminal error, when status is 'error' or 'closed'. */\n  readonly error: Error | null;\n  /** Monotonic change counter — bumps on every status/presence notification. */\n  readonly version: number;\n  /**\n   * Resolve once the initial server sync completes; reject on timeout, on a\n   * terminal connection state, or if the handle is destroyed first.\n   */\n  waitForSync: (timeoutMs?: number) => Promise<void>;\n  getPresence: () => PresenceEntry[];\n  /** Broadcast this client's presence state (requires a live connection). */\n  setPresence: (state: Record<string, unknown> | null) => void;\n  /**\n   * Force an early token refresh. Session-preserving: the live connection\n   * stays up until the fresh token is minted; a failed mint retries on a\n   * short timer instead of dropping the session.\n   */\n  refreshNow: () => Promise<void>;\n  onChange: (listener: () => void) => () => void;\n  destroy: () => void;\n}\n\n/** Re-mint this long before token expiry (clamped to a floor for short TTLs). */\nconst REFRESH_HEADROOM_MS = 5 * 60 * 1000;\nconst MIN_REFRESH_DELAY_MS = 30 * 1000;\n\n/** Consecutive 4401→mint cycles allowed without a successful connect between. */\nconst MAX_CONSECUTIVE_REMINTS = 2;\n\nexport function connectGenericDoc(args: {\n  assetId: string;\n  auth: CollabAuth;\n  access?: 'view' | 'edit';\n}): GenericDocHandle {\n  const access = args.access ?? 'view';\n  const doc = new Y.Doc();\n  const listeners = new Set<() => void>();\n\n  let provider: WebsocketProvider | null = null;\n  let refreshTimer: ReturnType<typeof setTimeout> | null = null;\n  let destroyed = false;\n  let status: GenericDocStatus = 'connecting';\n  let synced = false;\n  let accessType: 'r' | 'rw' | null = null;\n  let error: Error | null = null;\n  let lastPresence: Record<string, unknown> | null = null;\n  let version = 0;\n  let consecutiveRemints = 0;\n\n  const notify = () => {\n    version += 1;\n    for (const listener of listeners) listener();\n  };\n\n  const setStatus = (next: GenericDocStatus, err: Error | null = null) => {\n    if (destroyed && next !== 'closed') return;\n    status = next;\n    error = err;\n    notify();\n  };\n\n  const clearRefreshTimer = () => {\n    if (refreshTimer !== null) {\n      clearTimeout(refreshTimer);\n      refreshTimer = null;\n    }\n  };\n\n  const teardownProvider = () => {\n    clearRefreshTimer();\n    // A future provider must complete its own initial sync; the doc keeps its\n    // content either way. Subscribers must observe the flip immediately —\n    // waiting for the next provider event would let them act on synced=true\n    // across the replacement gap.\n    if (synced) {\n      synced = false;\n      notify();\n    }\n    if (provider) {\n      provider.destroy();\n      provider = null;\n    }\n  };\n\n  const scheduleRefresh = (grant: CollabTokenResponse) => {\n    clearRefreshTimer();\n    const delay = Math.max(\n      grant.expires_at_ms - Date.now() - REFRESH_HEADROOM_MS,\n      MIN_REFRESH_DELAY_MS\n    );\n    refreshTimer = setTimeout(() => {\n      void connect({ scheduledRefresh: true });\n    }, delay);\n  };\n\n  const connect = async (opts?: { scheduledRefresh?: boolean }): Promise<void> => {\n    if (destroyed) return;\n    const scheduledRefresh = opts?.scheduledRefresh === true;\n    // A scheduled refresh mints FIRST and keeps the live session up: the old\n    // token has ~5 minutes of headroom, so a transient mint failure retries\n    // on a short timer instead of dropping a healthy connection.\n    if (!scheduledRefresh) {\n      teardownProvider();\n    } else {\n      clearRefreshTimer();\n    }\n    let grant: CollabTokenResponse;\n    try {\n      grant = await mintCollabToken({ auth: args.auth, assetId: args.assetId, access });\n    } catch (err) {\n      if (scheduledRefresh && !destroyed) {\n        refreshTimer = setTimeout(() => {\n          void connect({ scheduledRefresh: true });\n        }, MIN_REFRESH_DELAY_MS);\n        return;\n      }\n      // A denied mint is authoritative (revoked / not shared / not eligible);\n      // anything else (network) is worth telling the caller about too — the\n      // handle stays usable via a later explicit reconnect-by-recreate.\n      setStatus('error', err instanceof Error ? err : new Error(String(err)));\n      return;\n    }\n    if (destroyed) return;\n    if (scheduledRefresh) {\n      teardownProvider();\n    }\n    accessType = grant.access_type;\n\n    const nextProvider = new WebsocketProvider(grant.ws_url, `${grant.org}/${grant.doc_id}`, doc, {\n      params: {\n        yauth: grant.token,\n        branch: grant.branch,\n        gc: 'true',\n      },\n      // BroadcastChannel would sync same-origin clients locally, bypassing the\n      // server's permission enforcement (a read-only tab could write into an\n      // editor tab's doc). Permissioned docs must round-trip the server.\n      disableBc: true,\n    });\n    provider = nextProvider;\n\n    nextProvider.on('status', (event: { status: 'connecting' | 'connected' | 'disconnected' }) => {\n      if (provider !== nextProvider) return;\n      if (event.status === 'connected') {\n        consecutiveRemints = 0;\n      }\n      setStatus(event.status);\n      if (event.status === 'connected' && lastPresence !== null) {\n        nextProvider.awareness.setLocalState(lastPresence);\n      }\n    });\n\n    nextProvider.on('sync', (state: boolean) => {\n      if (provider !== nextProvider) return;\n      if (synced !== state) {\n        synced = state;\n        notify();\n      }\n    });\n\n    nextProvider.on('connection-close', (event: CloseEvent | null) => {\n      if (provider !== nextProvider) return;\n      const action = classifyClose(event?.code);\n      if (action === 'remint') {\n        // Revoked mid-session: a fresh mint re-runs the server-side permission\n        // check. If access is truly gone the mint 403s and we land in 'error'.\n        // Bounded: repeated 4401s without an intervening successful connect\n        // mean the server keeps rejecting freshly minted tokens — stop rather\n        // than loop mint→connect→kick.\n        consecutiveRemints += 1;\n        teardownProvider();\n        if (consecutiveRemints > MAX_CONSECUTIVE_REMINTS) {\n          setStatus(\n            'closed',\n            new Error('Access repeatedly revoked mid-session (4401); giving up.')\n          );\n          return;\n        }\n        void connect();\n      } else if (action === 'stop') {\n        teardownProvider();\n        setStatus(\n          'closed',\n          new Error(`Connection closed permanently (code ${event?.code ?? 'unknown'})`)\n        );\n      }\n      // 'retry': the provider's exponential backoff handles it.\n    });\n\n    nextProvider.awareness.on('change', () => {\n      if (provider !== nextProvider) return;\n      notify();\n    });\n\n    scheduleRefresh(grant);\n  };\n\n  void connect();\n\n  const waitForSync = (timeoutMs = 15_000): Promise<void> =>\n    new Promise<void>((resolve, reject) => {\n      const terminal = (): Error | null => {\n        if (destroyed) return new Error('Handle destroyed before initial sync');\n        if (status === 'closed' || status === 'error') {\n          return error ?? new Error(`Connection ${status} before initial sync`);\n        }\n        return null;\n      };\n      if (synced) {\n        resolve();\n        return;\n      }\n      const immediate = terminal();\n      if (immediate) {\n        reject(immediate);\n        return;\n      }\n      const cleanup = () => {\n        clearTimeout(timer);\n        listeners.delete(listener);\n      };\n      const timer = setTimeout(() => {\n        cleanup();\n        reject(new Error(`Timed out after ${timeoutMs}ms waiting for initial sync`));\n      }, timeoutMs);\n      const listener = () => {\n        if (synced) {\n          cleanup();\n          resolve();\n          return;\n        }\n        const err = terminal();\n        if (err) {\n          cleanup();\n          reject(err);\n        }\n      };\n      listeners.add(listener);\n    });\n\n  return {\n    doc,\n    get status() {\n      return status;\n    },\n    get synced() {\n      return synced;\n    },\n    get accessType() {\n      return accessType;\n    },\n    get error() {\n      return error;\n    },\n    get version() {\n      return version;\n    },\n    waitForSync,\n    getPresence: () => {\n      if (!provider) return [];\n      const entries: PresenceEntry[] = [];\n      provider.awareness.getStates().forEach((state, clientId) => {\n        entries.push({ clientId, state: state as Record<string, unknown> });\n      });\n      return entries;\n    },\n    setPresence: (state) => {\n      lastPresence = state;\n      provider?.awareness.setLocalState(state);\n    },\n    refreshNow: () => connect({ scheduledRefresh: true }),\n    onChange: (listener) => {\n      listeners.add(listener);\n      return () => {\n        listeners.delete(listener);\n      };\n    },\n    destroy: () => {\n      if (destroyed) return;\n      destroyed = true;\n      teardownProvider();\n      status = 'closed';\n      // Final notification so pending waitForSync callers reject instead of\n      // hanging on listeners that are about to be dropped.\n      for (const listener of [...listeners]) listener();\n      listeners.clear();\n      doc.destroy();\n    },\n  };\n}\n\nexport { CollabTokenError };\nexport type { CollabAuth, CollabTokenResponse };\n"],"names":["Y","mintCollabToken","WebsocketProvider","classifyClose"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAsEA,MAAM,sBAAsB,IAAI,KAAK;AACrC,MAAM,uBAAuB,KAAK;AAGlC,MAAM,0BAA0B;AAEzB,SAAS,kBAAkB,MAIb;AACnB,QAAM,SAAS,KAAK,UAAU;AAC9B,QAAM,MAAM,IAAIA,aAAE,IAAA;AAClB,QAAM,gCAAgB,IAAA;AAEtB,MAAI,WAAqC;AACzC,MAAI,eAAqD;AACzD,MAAI,YAAY;AAChB,MAAI,SAA2B;AAC/B,MAAI,SAAS;AACb,MAAI,aAAgC;AACpC,MAAI,QAAsB;AAC1B,MAAI,eAA+C;AACnD,MAAI,UAAU;AACd,MAAI,qBAAqB;AAEzB,QAAM,SAAS,MAAM;AACnB,eAAW;AACX,eAAW,YAAY,UAAW,UAAA;AAAA,EACpC;AAEA,QAAM,YAAY,CAAC,MAAwB,MAAoB,SAAS;AACtE,QAAI,aAAa,SAAS,SAAU;AACpC,aAAS;AACT,YAAQ;AACR,WAAA;AAAA,EACF;AAEA,QAAM,oBAAoB,MAAM;AAC9B,QAAI,iBAAiB,MAAM;AACzB,mBAAa,YAAY;AACzB,qBAAe;AAAA,IACjB;AAAA,EACF;AAEA,QAAM,mBAAmB,MAAM;AAC7B,sBAAA;AAKA,QAAI,QAAQ;AACV,eAAS;AACT,aAAA;AAAA,IACF;AACA,QAAI,UAAU;AACZ,eAAS,QAAA;AACT,iBAAW;AAAA,IACb;AAAA,EACF;AAEA,QAAM,kBAAkB,CAAC,UAA+B;AACtD,sBAAA;AACA,UAAM,QAAQ,KAAK;AAAA,MACjB,MAAM,gBAAgB,KAAK,IAAA,IAAQ;AAAA,MACnC;AAAA,IAAA;AAEF,mBAAe,WAAW,MAAM;AAC9B,WAAK,QAAQ,EAAE,kBAAkB,MAAM;AAAA,IACzC,GAAG,KAAK;AAAA,EACV;AAEA,QAAM,UAAU,OAAO,SAAyD;AAC9E,QAAI,UAAW;AACf,UAAM,oBAAmB,6BAAM,sBAAqB;AAIpD,QAAI,CAAC,kBAAkB;AACrB,uBAAA;AAAA,IACF,OAAO;AACL,wBAAA;AAAA,IACF;AACA,QAAI;AACJ,QAAI;AACF,cAAQ,MAAMC,KAAAA,gBAAgB,EAAE,MAAM,KAAK,MAAM,SAAS,KAAK,SAAS,QAAQ;AAAA,IAClF,SAAS,KAAK;AACZ,UAAI,oBAAoB,CAAC,WAAW;AAClC,uBAAe,WAAW,MAAM;AAC9B,eAAK,QAAQ,EAAE,kBAAkB,MAAM;AAAA,QACzC,GAAG,oBAAoB;AACvB;AAAA,MACF;AAIA,gBAAU,SAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC,CAAC;AACtE;AAAA,IACF;AACA,QAAI,UAAW;AACf,QAAI,kBAAkB;AACpB,uBAAA;AAAA,IACF;AACA,iBAAa,MAAM;AAEnB,UAAM,eAAe,IAAIC,UAAAA,kBAAkB,MAAM,QAAQ,GAAG,MAAM,GAAG,IAAI,MAAM,MAAM,IAAI,KAAK;AAAA,MAC5F,QAAQ;AAAA,QACN,OAAO,MAAM;AAAA,QACb,QAAQ,MAAM;AAAA,QACd,IAAI;AAAA,MAAA;AAAA;AAAA;AAAA;AAAA,MAKN,WAAW;AAAA,IAAA,CACZ;AACD,eAAW;AAEX,iBAAa,GAAG,UAAU,CAAC,UAAmE;AAC5F,UAAI,aAAa,aAAc;AAC/B,UAAI,MAAM,WAAW,aAAa;AAChC,6BAAqB;AAAA,MACvB;AACA,gBAAU,MAAM,MAAM;AACtB,UAAI,MAAM,WAAW,eAAe,iBAAiB,MAAM;AACzD,qBAAa,UAAU,cAAc,YAAY;AAAA,MACnD;AAAA,IACF,CAAC;AAED,iBAAa,GAAG,QAAQ,CAAC,UAAmB;AAC1C,UAAI,aAAa,aAAc;AAC/B,UAAI,WAAW,OAAO;AACpB,iBAAS;AACT,eAAA;AAAA,MACF;AAAA,IACF,CAAC;AAED,iBAAa,GAAG,oBAAoB,CAAC,UAA6B;AAChE,UAAI,aAAa,aAAc;AAC/B,YAAM,SAASC,YAAAA,cAAc,+BAAO,IAAI;AACxC,UAAI,WAAW,UAAU;AAMvB,8BAAsB;AACtB,yBAAA;AACA,YAAI,qBAAqB,yBAAyB;AAChD;AAAA,YACE;AAAA,YACA,IAAI,MAAM,0DAA0D;AAAA,UAAA;AAEtE;AAAA,QACF;AACA,aAAK,QAAA;AAAA,MACP,WAAW,WAAW,QAAQ;AAC5B,yBAAA;AACA;AAAA,UACE;AAAA,UACA,IAAI,MAAM,wCAAuC,+BAAO,SAAQ,SAAS,GAAG;AAAA,QAAA;AAAA,MAEhF;AAAA,IAEF,CAAC;AAED,iBAAa,UAAU,GAAG,UAAU,MAAM;AACxC,UAAI,aAAa,aAAc;AAC/B,aAAA;AAAA,IACF,CAAC;AAED,oBAAgB,KAAK;AAAA,EACvB;AAEA,OAAK,QAAA;AAEL,QAAM,cAAc,CAAC,YAAY,SAC/B,IAAI,QAAc,CAAC,SAAS,WAAW;AACrC,UAAM,WAAW,MAAoB;AACnC,UAAI,UAAW,QAAO,IAAI,MAAM,sCAAsC;AACtE,UAAI,WAAW,YAAY,WAAW,SAAS;AAC7C,eAAO,SAAS,IAAI,MAAM,cAAc,MAAM,sBAAsB;AAAA,MACtE;AACA,aAAO;AAAA,IACT;AACA,QAAI,QAAQ;AACV,cAAA;AACA;AAAA,IACF;AACA,UAAM,YAAY,SAAA;AAClB,QAAI,WAAW;AACb,aAAO,SAAS;AAChB;AAAA,IACF;AACA,UAAM,UAAU,MAAM;AACpB,mBAAa,KAAK;AAClB,gBAAU,OAAO,QAAQ;AAAA,IAC3B;AACA,UAAM,QAAQ,WAAW,MAAM;AAC7B,cAAA;AACA,aAAO,IAAI,MAAM,mBAAmB,SAAS,6BAA6B,CAAC;AAAA,IAC7E,GAAG,SAAS;AACZ,UAAM,WAAW,MAAM;AACrB,UAAI,QAAQ;AACV,gBAAA;AACA,gBAAA;AACA;AAAA,MACF;AACA,YAAM,MAAM,SAAA;AACZ,UAAI,KAAK;AACP,gBAAA;AACA,eAAO,GAAG;AAAA,MACZ;AAAA,IACF;AACA,cAAU,IAAI,QAAQ;AAAA,EACxB,CAAC;AAEH,SAAO;AAAA,IACL;AAAA,IACA,IAAI,SAAS;AACX,aAAO;AAAA,IACT;AAAA,IACA,IAAI,SAAS;AACX,aAAO;AAAA,IACT;AAAA,IACA,IAAI,aAAa;AACf,aAAO;AAAA,IACT;AAAA,IACA,IAAI,QAAQ;AACV,aAAO;AAAA,IACT;AAAA,IACA,IAAI,UAAU;AACZ,aAAO;AAAA,IACT;AAAA,IACA;AAAA,IACA,aAAa,MAAM;AACjB,UAAI,CAAC,SAAU,QAAO,CAAA;AACtB,YAAM,UAA2B,CAAA;AACjC,eAAS,UAAU,UAAA,EAAY,QAAQ,CAAC,OAAO,aAAa;AAC1D,gBAAQ,KAAK,EAAE,UAAU,MAAA,CAAyC;AAAA,MACpE,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,aAAa,CAAC,UAAU;AACtB,qBAAe;AACf,2CAAU,UAAU,cAAc;AAAA,IACpC;AAAA,IACA,YAAY,MAAM,QAAQ,EAAE,kBAAkB,MAAM;AAAA,IACpD,UAAU,CAAC,aAAa;AACtB,gBAAU,IAAI,QAAQ;AACtB,aAAO,MAAM;AACX,kBAAU,OAAO,QAAQ;AAAA,MAC3B;AAAA,IACF;AAAA,IACA,SAAS,MAAM;AACb,UAAI,UAAW;AACf,kBAAY;AACZ,uBAAA;AACA,eAAS;AAGT,iBAAW,YAAY,CAAC,GAAG,SAAS,EAAG,UAAA;AACvC,gBAAU,MAAA;AACV,UAAI,QAAA;AAAA,IACN;AAAA,EAAA;AAEJ;;;"}
+{"version":3,"file":"client.cjs","sources":["../../src/collab/client.ts"],"sourcesContent":["/**\n * Vanilla (framework-agnostic) live client for Generic Doc assets.\n *\n * `connectGenericDoc` owns the full connection lifecycle: mint a room-bound\n * token via the public API, open the Keryx WebSocket with the v14 provider\n * (`@y/websocket` + `@y/y`), re-mint before expiry, apply the close-code\n * policy (4401 → one fresh mint, other 44xx → permanent stop, everything\n * else → provider backoff), and expose presence from awareness. React apps\n * use `useGenericDoc` from `@athenaintel/react/collab` instead of calling\n * this directly.\n */\n\nimport { WebsocketProvider } from '@y/websocket';\nimport * as Y from '@y/y';\nimport { classifyClose } from './close-policy';\nimport {\n  type CollabAuth,\n  type CollabTokenResponse,\n  CollabTokenError,\n  mintCollabToken,\n} from './mint';\nimport { MAX_CONSECUTIVE_REMINTS, MIN_REFRESH_DELAY_MS, refreshDelayMs } from './token-refresh';\n\nexport type GenericDocStatus =\n  | 'connecting'\n  | 'connected'\n  | 'disconnected'\n  | 'closed'\n  | 'error';\n\nexport interface PresenceEntry {\n  clientId: number;\n  state: Record<string, unknown>;\n}\n\nexport interface GenericDocHandle {\n  /** The live shared document. Owned by the handle; destroyed with it. */\n  readonly doc: Y.Doc;\n  readonly status: GenericDocStatus;\n  /**\n   * Whether the initial server sync has completed for the current connection.\n   * `status === 'connected'` fires before the server state arrives, so a doc\n   * read immediately after connect can still be empty — gate first reads on\n   * this (or `waitForSync`).\n   */\n  readonly synced: boolean;\n  /** Granted access from the last successful mint. */\n  readonly accessType: 'r' | 'rw' | null;\n  /** Terminal error, when status is 'error' or 'closed'. */\n  readonly error: Error | null;\n  /** Monotonic change counter — bumps on every status/presence notification. */\n  readonly version: number;\n  /**\n   * Resolve once the initial server sync completes; reject on timeout, on a\n   * terminal connection state, or if the handle is destroyed first.\n   */\n  waitForSync: (timeoutMs?: number) => Promise<void>;\n  getPresence: () => PresenceEntry[];\n  /** Broadcast this client's presence state (requires a live connection). */\n  setPresence: (state: Record<string, unknown> | null) => void;\n  /**\n   * Force an early token refresh. Session-preserving: the live connection\n   * stays up until the fresh token is minted; a failed mint retries on a\n   * short timer instead of dropping the session.\n   */\n  refreshNow: () => Promise<void>;\n  onChange: (listener: () => void) => () => void;\n  destroy: () => void;\n}\n\nexport function connectGenericDoc(args: {\n  assetId: string;\n  auth: CollabAuth;\n  access?: 'view' | 'edit';\n}): GenericDocHandle {\n  const access = args.access ?? 'view';\n  const doc = new Y.Doc();\n  const listeners = new Set<() => void>();\n\n  let provider: WebsocketProvider | null = null;\n  let refreshTimer: ReturnType<typeof setTimeout> | null = null;\n  let destroyed = false;\n  let status: GenericDocStatus = 'connecting';\n  let synced = false;\n  let accessType: 'r' | 'rw' | null = null;\n  let error: Error | null = null;\n  let lastPresence: Record<string, unknown> | null = null;\n  let version = 0;\n  let consecutiveRemints = 0;\n\n  const notify = () => {\n    version += 1;\n    for (const listener of listeners) listener();\n  };\n\n  const setStatus = (next: GenericDocStatus, err: Error | null = null) => {\n    if (destroyed && next !== 'closed') return;\n    status = next;\n    error = err;\n    notify();\n  };\n\n  const clearRefreshTimer = () => {\n    if (refreshTimer !== null) {\n      clearTimeout(refreshTimer);\n      refreshTimer = null;\n    }\n  };\n\n  const teardownProvider = () => {\n    clearRefreshTimer();\n    // A future provider must complete its own initial sync; the doc keeps its\n    // content either way. Subscribers must observe the flip immediately —\n    // waiting for the next provider event would let them act on synced=true\n    // across the replacement gap.\n    if (synced) {\n      synced = false;\n      notify();\n    }\n    if (provider) {\n      provider.destroy();\n      provider = null;\n    }\n  };\n\n  const scheduleRefresh = (grant: CollabTokenResponse) => {\n    clearRefreshTimer();\n    const delay = refreshDelayMs({ expiresAtMs: grant.expires_at_ms, now: Date.now() });\n    refreshTimer = setTimeout(() => {\n      void connect({ scheduledRefresh: true });\n    }, delay);\n  };\n\n  const connect = async (opts?: { scheduledRefresh?: boolean }): Promise<void> => {\n    if (destroyed) return;\n    const scheduledRefresh = opts?.scheduledRefresh === true;\n    // A scheduled refresh mints FIRST and keeps the live session up: the old\n    // token has ~5 minutes of headroom, so a transient mint failure retries\n    // on a short timer instead of dropping a healthy connection.\n    if (!scheduledRefresh) {\n      teardownProvider();\n    } else {\n      clearRefreshTimer();\n    }\n    let grant: CollabTokenResponse;\n    try {\n      grant = await mintCollabToken({ auth: args.auth, assetId: args.assetId, access });\n    } catch (err) {\n      if (scheduledRefresh && !destroyed) {\n        refreshTimer = setTimeout(() => {\n          void connect({ scheduledRefresh: true });\n        }, MIN_REFRESH_DELAY_MS);\n        return;\n      }\n      // A denied mint is authoritative (revoked / not shared / not eligible);\n      // anything else (network) is worth telling the caller about too — the\n      // handle stays usable via a later explicit reconnect-by-recreate.\n      setStatus('error', err instanceof Error ? err : new Error(String(err)));\n      return;\n    }\n    if (destroyed) return;\n    if (scheduledRefresh) {\n      teardownProvider();\n    }\n    accessType = grant.access_type;\n\n    const nextProvider = new WebsocketProvider(grant.ws_url, `${grant.org}/${grant.doc_id}`, doc, {\n      params: {\n        yauth: grant.token,\n        branch: grant.branch,\n        gc: 'true',\n      },\n      // BroadcastChannel would sync same-origin clients locally, bypassing the\n      // server's permission enforcement (a read-only tab could write into an\n      // editor tab's doc). Permissioned docs must round-trip the server.\n      disableBc: true,\n    });\n    provider = nextProvider;\n\n    nextProvider.on('status', (event: { status: 'connecting' | 'connected' | 'disconnected' }) => {\n      if (provider !== nextProvider) return;\n      if (event.status === 'connected') {\n        consecutiveRemints = 0;\n      }\n      setStatus(event.status);\n      if (event.status === 'connected' && lastPresence !== null) {\n        nextProvider.awareness.setLocalState(lastPresence);\n      }\n    });\n\n    nextProvider.on('sync', (state: boolean) => {\n      if (provider !== nextProvider) return;\n      if (synced !== state) {\n        synced = state;\n        notify();\n      }\n    });\n\n    nextProvider.on('connection-close', (event: CloseEvent | null) => {\n      if (provider !== nextProvider) return;\n      const action = classifyClose(event?.code);\n      if (action === 'remint') {\n        // Revoked mid-session: a fresh mint re-runs the server-side permission\n        // check. If access is truly gone the mint 403s and we land in 'error'.\n        // Bounded: repeated 4401s without an intervening successful connect\n        // mean the server keeps rejecting freshly minted tokens — stop rather\n        // than loop mint→connect→kick.\n        consecutiveRemints += 1;\n        teardownProvider();\n        if (consecutiveRemints > MAX_CONSECUTIVE_REMINTS) {\n          setStatus(\n            'closed',\n            new Error('Access repeatedly revoked mid-session (4401); giving up.')\n          );\n          return;\n        }\n        void connect();\n      } else if (action === 'stop') {\n        teardownProvider();\n        setStatus(\n          'closed',\n          new Error(`Connection closed permanently (code ${event?.code ?? 'unknown'})`)\n        );\n      }\n      // 'retry': the provider's exponential backoff handles it.\n    });\n\n    nextProvider.awareness.on('change', () => {\n      if (provider !== nextProvider) return;\n      notify();\n    });\n\n    scheduleRefresh(grant);\n  };\n\n  void connect();\n\n  const waitForSync = (timeoutMs = 15_000): Promise<void> =>\n    new Promise<void>((resolve, reject) => {\n      const terminal = (): Error | null => {\n        if (destroyed) return new Error('Handle destroyed before initial sync');\n        if (status === 'closed' || status === 'error') {\n          return error ?? new Error(`Connection ${status} before initial sync`);\n        }\n        return null;\n      };\n      if (synced) {\n        resolve();\n        return;\n      }\n      const immediate = terminal();\n      if (immediate) {\n        reject(immediate);\n        return;\n      }\n      const cleanup = () => {\n        clearTimeout(timer);\n        listeners.delete(listener);\n      };\n      const timer = setTimeout(() => {\n        cleanup();\n        reject(new Error(`Timed out after ${timeoutMs}ms waiting for initial sync`));\n      }, timeoutMs);\n      const listener = () => {\n        if (synced) {\n          cleanup();\n          resolve();\n          return;\n        }\n        const err = terminal();\n        if (err) {\n          cleanup();\n          reject(err);\n        }\n      };\n      listeners.add(listener);\n    });\n\n  return {\n    doc,\n    get status() {\n      return status;\n    },\n    get synced() {\n      return synced;\n    },\n    get accessType() {\n      return accessType;\n    },\n    get error() {\n      return error;\n    },\n    get version() {\n      return version;\n    },\n    waitForSync,\n    getPresence: () => {\n      if (!provider) return [];\n      const entries: PresenceEntry[] = [];\n      provider.awareness.getStates().forEach((state, clientId) => {\n        entries.push({ clientId, state: state as Record<string, unknown> });\n      });\n      return entries;\n    },\n    setPresence: (state) => {\n      lastPresence = state;\n      provider?.awareness.setLocalState(state);\n    },\n    refreshNow: () => connect({ scheduledRefresh: true }),\n    onChange: (listener) => {\n      listeners.add(listener);\n      return () => {\n        listeners.delete(listener);\n      };\n    },\n    destroy: () => {\n      if (destroyed) return;\n      destroyed = true;\n      teardownProvider();\n      status = 'closed';\n      // Final notification so pending waitForSync callers reject instead of\n      // hanging on listeners that are about to be dropped.\n      for (const listener of [...listeners]) listener();\n      listeners.clear();\n      doc.destroy();\n    },\n  };\n}\n\nexport { CollabTokenError };\nexport type { CollabAuth, CollabTokenResponse };\n"],"names":["Y","refreshDelayMs","mintCollabToken","MIN_REFRESH_DELAY_MS","WebsocketProvider","classifyClose","MAX_CONSECUTIVE_REMINTS"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAsEO,SAAS,kBAAkB,MAIb;AACnB,QAAM,SAAS,KAAK,UAAU;AAC9B,QAAM,MAAM,IAAIA,aAAE,IAAA;AAClB,QAAM,gCAAgB,IAAA;AAEtB,MAAI,WAAqC;AACzC,MAAI,eAAqD;AACzD,MAAI,YAAY;AAChB,MAAI,SAA2B;AAC/B,MAAI,SAAS;AACb,MAAI,aAAgC;AACpC,MAAI,QAAsB;AAC1B,MAAI,eAA+C;AACnD,MAAI,UAAU;AACd,MAAI,qBAAqB;AAEzB,QAAM,SAAS,MAAM;AACnB,eAAW;AACX,eAAW,YAAY,UAAW,UAAA;AAAA,EACpC;AAEA,QAAM,YAAY,CAAC,MAAwB,MAAoB,SAAS;AACtE,QAAI,aAAa,SAAS,SAAU;AACpC,aAAS;AACT,YAAQ;AACR,WAAA;AAAA,EACF;AAEA,QAAM,oBAAoB,MAAM;AAC9B,QAAI,iBAAiB,MAAM;AACzB,mBAAa,YAAY;AACzB,qBAAe;AAAA,IACjB;AAAA,EACF;AAEA,QAAM,mBAAmB,MAAM;AAC7B,sBAAA;AAKA,QAAI,QAAQ;AACV,eAAS;AACT,aAAA;AAAA,IACF;AACA,QAAI,UAAU;AACZ,eAAS,QAAA;AACT,iBAAW;AAAA,IACb;AAAA,EACF;AAEA,QAAM,kBAAkB,CAAC,UAA+B;AACtD,sBAAA;AACA,UAAM,QAAQC,4BAAe,EAAE,aAAa,MAAM,eAAe,KAAK,KAAK,IAAA,GAAO;AAClF,mBAAe,WAAW,MAAM;AAC9B,WAAK,QAAQ,EAAE,kBAAkB,MAAM;AAAA,IACzC,GAAG,KAAK;AAAA,EACV;AAEA,QAAM,UAAU,OAAO,SAAyD;AAC9E,QAAI,UAAW;AACf,UAAM,oBAAmB,6BAAM,sBAAqB;AAIpD,QAAI,CAAC,kBAAkB;AACrB,uBAAA;AAAA,IACF,OAAO;AACL,wBAAA;AAAA,IACF;AACA,QAAI;AACJ,QAAI;AACF,cAAQ,MAAMC,KAAAA,gBAAgB,EAAE,MAAM,KAAK,MAAM,SAAS,KAAK,SAAS,QAAQ;AAAA,IAClF,SAAS,KAAK;AACZ,UAAI,oBAAoB,CAAC,WAAW;AAClC,uBAAe,WAAW,MAAM;AAC9B,eAAK,QAAQ,EAAE,kBAAkB,MAAM;AAAA,QACzC,GAAGC,aAAAA,oBAAoB;AACvB;AAAA,MACF;AAIA,gBAAU,SAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC,CAAC;AACtE;AAAA,IACF;AACA,QAAI,UAAW;AACf,QAAI,kBAAkB;AACpB,uBAAA;AAAA,IACF;AACA,iBAAa,MAAM;AAEnB,UAAM,eAAe,IAAIC,UAAAA,kBAAkB,MAAM,QAAQ,GAAG,MAAM,GAAG,IAAI,MAAM,MAAM,IAAI,KAAK;AAAA,MAC5F,QAAQ;AAAA,QACN,OAAO,MAAM;AAAA,QACb,QAAQ,MAAM;AAAA,QACd,IAAI;AAAA,MAAA;AAAA;AAAA;AAAA;AAAA,MAKN,WAAW;AAAA,IAAA,CACZ;AACD,eAAW;AAEX,iBAAa,GAAG,UAAU,CAAC,UAAmE;AAC5F,UAAI,aAAa,aAAc;AAC/B,UAAI,MAAM,WAAW,aAAa;AAChC,6BAAqB;AAAA,MACvB;AACA,gBAAU,MAAM,MAAM;AACtB,UAAI,MAAM,WAAW,eAAe,iBAAiB,MAAM;AACzD,qBAAa,UAAU,cAAc,YAAY;AAAA,MACnD;AAAA,IACF,CAAC;AAED,iBAAa,GAAG,QAAQ,CAAC,UAAmB;AAC1C,UAAI,aAAa,aAAc;AAC/B,UAAI,WAAW,OAAO;AACpB,iBAAS;AACT,eAAA;AAAA,MACF;AAAA,IACF,CAAC;AAED,iBAAa,GAAG,oBAAoB,CAAC,UAA6B;AAChE,UAAI,aAAa,aAAc;AAC/B,YAAM,SAASC,YAAAA,cAAc,+BAAO,IAAI;AACxC,UAAI,WAAW,UAAU;AAMvB,8BAAsB;AACtB,yBAAA;AACA,YAAI,qBAAqBC,aAAAA,yBAAyB;AAChD;AAAA,YACE;AAAA,YACA,IAAI,MAAM,0DAA0D;AAAA,UAAA;AAEtE;AAAA,QACF;AACA,aAAK,QAAA;AAAA,MACP,WAAW,WAAW,QAAQ;AAC5B,yBAAA;AACA;AAAA,UACE;AAAA,UACA,IAAI,MAAM,wCAAuC,+BAAO,SAAQ,SAAS,GAAG;AAAA,QAAA;AAAA,MAEhF;AAAA,IAEF,CAAC;AAED,iBAAa,UAAU,GAAG,UAAU,MAAM;AACxC,UAAI,aAAa,aAAc;AAC/B,aAAA;AAAA,IACF,CAAC;AAED,oBAAgB,KAAK;AAAA,EACvB;AAEA,OAAK,QAAA;AAEL,QAAM,cAAc,CAAC,YAAY,SAC/B,IAAI,QAAc,CAAC,SAAS,WAAW;AACrC,UAAM,WAAW,MAAoB;AACnC,UAAI,UAAW,QAAO,IAAI,MAAM,sCAAsC;AACtE,UAAI,WAAW,YAAY,WAAW,SAAS;AAC7C,eAAO,SAAS,IAAI,MAAM,cAAc,MAAM,sBAAsB;AAAA,MACtE;AACA,aAAO;AAAA,IACT;AACA,QAAI,QAAQ;AACV,cAAA;AACA;AAAA,IACF;AACA,UAAM,YAAY,SAAA;AAClB,QAAI,WAAW;AACb,aAAO,SAAS;AAChB;AAAA,IACF;AACA,UAAM,UAAU,MAAM;AACpB,mBAAa,KAAK;AAClB,gBAAU,OAAO,QAAQ;AAAA,IAC3B;AACA,UAAM,QAAQ,WAAW,MAAM;AAC7B,cAAA;AACA,aAAO,IAAI,MAAM,mBAAmB,SAAS,6BAA6B,CAAC;AAAA,IAC7E,GAAG,SAAS;AACZ,UAAM,WAAW,MAAM;AACrB,UAAI,QAAQ;AACV,gBAAA;AACA,gBAAA;AACA;AAAA,MACF;AACA,YAAM,MAAM,SAAA;AACZ,UAAI,KAAK;AACP,gBAAA;AACA,eAAO,GAAG;AAAA,MACZ;AAAA,IACF;AACA,cAAU,IAAI,QAAQ;AAAA,EACxB,CAAC;AAEH,SAAO;AAAA,IACL;AAAA,IACA,IAAI,SAAS;AACX,aAAO;AAAA,IACT;AAAA,IACA,IAAI,SAAS;AACX,aAAO;AAAA,IACT;AAAA,IACA,IAAI,aAAa;AACf,aAAO;AAAA,IACT;AAAA,IACA,IAAI,QAAQ;AACV,aAAO;AAAA,IACT;AAAA,IACA,IAAI,UAAU;AACZ,aAAO;AAAA,IACT;AAAA,IACA;AAAA,IACA,aAAa,MAAM;AACjB,UAAI,CAAC,SAAU,QAAO,CAAA;AACtB,YAAM,UAA2B,CAAA;AACjC,eAAS,UAAU,UAAA,EAAY,QAAQ,CAAC,OAAO,aAAa;AAC1D,gBAAQ,KAAK,EAAE,UAAU,MAAA,CAAyC;AAAA,MACpE,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,aAAa,CAAC,UAAU;AACtB,qBAAe;AACf,2CAAU,UAAU,cAAc;AAAA,IACpC;AAAA,IACA,YAAY,MAAM,QAAQ,EAAE,kBAAkB,MAAM;AAAA,IACpD,UAAU,CAAC,aAAa;AACtB,gBAAU,IAAI,QAAQ;AACtB,aAAO,MAAM;AACX,kBAAU,OAAO,QAAQ;AAAA,MAC3B;AAAA,IACF;AAAA,IACA,SAAS,MAAM;AACb,UAAI,UAAW;AACf,kBAAY;AACZ,uBAAA;AACA,eAAS;AAGT,iBAAW,YAAY,CAAC,GAAG,SAAS,EAAG,UAAA;AACvC,gBAAU,MAAA;AACV,UAAI,QAAA;AAAA,IACN;AAAA,EAAA;AAEJ;;;"}

package/dist/collab/client.js

@@ -3,9 +3,7 @@ import * as Y from "@y/y";
 import { classifyClose } from "./close-policy.js";
 import { mintCollabToken } from "./mint.js";
 import { CollabTokenError } from "./mint.js";
-const REFRESH_HEADROOM_MS = 5 * 60 * 1e3;
-const MIN_REFRESH_DELAY_MS = 30 * 1e3;
-const MAX_CONSECUTIVE_REMINTS = 2;
+import { MIN_REFRESH_DELAY_MS, MAX_CONSECUTIVE_REMINTS, refreshDelayMs } from "./token-refresh.js";
 function connectGenericDoc(args) {
   const access = args.access ?? "view";
   const doc = new Y.Doc();
@@ -49,10 +47,7 @@ function connectGenericDoc(args) {
   };
   const scheduleRefresh = (grant) => {
     clearRefreshTimer();
-    const delay = Math.max(
-      grant.expires_at_ms - Date.now() - REFRESH_HEADROOM_MS,
-      MIN_REFRESH_DELAY_MS
-    );
+    const delay = refreshDelayMs({ expiresAtMs: grant.expires_at_ms, now: Date.now() });
     refreshTimer = setTimeout(() => {
       void connect({ scheduledRefresh: true });
     }, delay);

package/dist/collab/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sources":["../../src/collab/client.ts"],"sourcesContent":["/**\n * Vanilla (framework-agnostic) live client for Generic Doc assets.\n *\n * `connectGenericDoc` owns the full connection lifecycle: mint a room-bound\n * token via the public API, open the Keryx WebSocket with the v14 provider\n * (`@y/websocket` + `@y/y`), re-mint before expiry, apply the close-code\n * policy (4401 → one fresh mint, other 44xx → permanent stop, everything\n * else → provider backoff), and expose presence from awareness. React apps\n * use `useGenericDoc` from `@athenaintel/react/collab` instead of calling\n * this directly.\n */\n\nimport { WebsocketProvider } from '@y/websocket';\nimport * as Y from '@y/y';\nimport { classifyClose } from './close-policy';\nimport {\n  type CollabAuth,\n  type CollabTokenResponse,\n  CollabTokenError,\n  mintCollabToken,\n} from './mint';\n\nexport type GenericDocStatus =\n  | 'connecting'\n  | 'connected'\n  | 'disconnected'\n  | 'closed'\n  | 'error';\n\nexport interface PresenceEntry {\n  clientId: number;\n  state: Record<string, unknown>;\n}\n\nexport interface GenericDocHandle {\n  /** The live shared document. Owned by the handle; destroyed with it. */\n  readonly doc: Y.Doc;\n  readonly status: GenericDocStatus;\n  /**\n   * Whether the initial server sync has completed for the current connection.\n   * `status === 'connected'` fires before the server state arrives, so a doc\n   * read immediately after connect can still be empty — gate first reads on\n   * this (or `waitForSync`).\n   */\n  readonly synced: boolean;\n  /** Granted access from the last successful mint. */\n  readonly accessType: 'r' | 'rw' | null;\n  /** Terminal error, when status is 'error' or 'closed'. */\n  readonly error: Error | null;\n  /** Monotonic change counter — bumps on every status/presence notification. */\n  readonly version: number;\n  /**\n   * Resolve once the initial server sync completes; reject on timeout, on a\n   * terminal connection state, or if the handle is destroyed first.\n   */\n  waitForSync: (timeoutMs?: number) => Promise<void>;\n  getPresence: () => PresenceEntry[];\n  /** Broadcast this client's presence state (requires a live connection). */\n  setPresence: (state: Record<string, unknown> | null) => void;\n  /**\n   * Force an early token refresh. Session-preserving: the live connection\n   * stays up until the fresh token is minted; a failed mint retries on a\n   * short timer instead of dropping the session.\n   */\n  refreshNow: () => Promise<void>;\n  onChange: (listener: () => void) => () => void;\n  destroy: () => void;\n}\n\n/** Re-mint this long before token expiry (clamped to a floor for short TTLs). */\nconst REFRESH_HEADROOM_MS = 5 * 60 * 1000;\nconst MIN_REFRESH_DELAY_MS = 30 * 1000;\n\n/** Consecutive 4401→mint cycles allowed without a successful connect between. */\nconst MAX_CONSECUTIVE_REMINTS = 2;\n\nexport function connectGenericDoc(args: {\n  assetId: string;\n  auth: CollabAuth;\n  access?: 'view' | 'edit';\n}): GenericDocHandle {\n  const access = args.access ?? 'view';\n  const doc = new Y.Doc();\n  const listeners = new Set<() => void>();\n\n  let provider: WebsocketProvider | null = null;\n  let refreshTimer: ReturnType<typeof setTimeout> | null = null;\n  let destroyed = false;\n  let status: GenericDocStatus = 'connecting';\n  let synced = false;\n  let accessType: 'r' | 'rw' | null = null;\n  let error: Error | null = null;\n  let lastPresence: Record<string, unknown> | null = null;\n  let version = 0;\n  let consecutiveRemints = 0;\n\n  const notify = () => {\n    version += 1;\n    for (const listener of listeners) listener();\n  };\n\n  const setStatus = (next: GenericDocStatus, err: Error | null = null) => {\n    if (destroyed && next !== 'closed') return;\n    status = next;\n    error = err;\n    notify();\n  };\n\n  const clearRefreshTimer = () => {\n    if (refreshTimer !== null) {\n      clearTimeout(refreshTimer);\n      refreshTimer = null;\n    }\n  };\n\n  const teardownProvider = () => {\n    clearRefreshTimer();\n    // A future provider must complete its own initial sync; the doc keeps its\n    // content either way. Subscribers must observe the flip immediately —\n    // waiting for the next provider event would let them act on synced=true\n    // across the replacement gap.\n    if (synced) {\n      synced = false;\n      notify();\n    }\n    if (provider) {\n      provider.destroy();\n      provider = null;\n    }\n  };\n\n  const scheduleRefresh = (grant: CollabTokenResponse) => {\n    clearRefreshTimer();\n    const delay = Math.max(\n      grant.expires_at_ms - Date.now() - REFRESH_HEADROOM_MS,\n      MIN_REFRESH_DELAY_MS\n    );\n    refreshTimer = setTimeout(() => {\n      void connect({ scheduledRefresh: true });\n    }, delay);\n  };\n\n  const connect = async (opts?: { scheduledRefresh?: boolean }): Promise<void> => {\n    if (destroyed) return;\n    const scheduledRefresh = opts?.scheduledRefresh === true;\n    // A scheduled refresh mints FIRST and keeps the live session up: the old\n    // token has ~5 minutes of headroom, so a transient mint failure retries\n    // on a short timer instead of dropping a healthy connection.\n    if (!scheduledRefresh) {\n      teardownProvider();\n    } else {\n      clearRefreshTimer();\n    }\n    let grant: CollabTokenResponse;\n    try {\n      grant = await mintCollabToken({ auth: args.auth, assetId: args.assetId, access });\n    } catch (err) {\n      if (scheduledRefresh && !destroyed) {\n        refreshTimer = setTimeout(() => {\n          void connect({ scheduledRefresh: true });\n        }, MIN_REFRESH_DELAY_MS);\n        return;\n      }\n      // A denied mint is authoritative (revoked / not shared / not eligible);\n      // anything else (network) is worth telling the caller about too — the\n      // handle stays usable via a later explicit reconnect-by-recreate.\n      setStatus('error', err instanceof Error ? err : new Error(String(err)));\n      return;\n    }\n    if (destroyed) return;\n    if (scheduledRefresh) {\n      teardownProvider();\n    }\n    accessType = grant.access_type;\n\n    const nextProvider = new WebsocketProvider(grant.ws_url, `${grant.org}/${grant.doc_id}`, doc, {\n      params: {\n        yauth: grant.token,\n        branch: grant.branch,\n        gc: 'true',\n      },\n      // BroadcastChannel would sync same-origin clients locally, bypassing the\n      // server's permission enforcement (a read-only tab could write into an\n      // editor tab's doc). Permissioned docs must round-trip the server.\n      disableBc: true,\n    });\n    provider = nextProvider;\n\n    nextProvider.on('status', (event: { status: 'connecting' | 'connected' | 'disconnected' }) => {\n      if (provider !== nextProvider) return;\n      if (event.status === 'connected') {\n        consecutiveRemints = 0;\n      }\n      setStatus(event.status);\n      if (event.status === 'connected' && lastPresence !== null) {\n        nextProvider.awareness.setLocalState(lastPresence);\n      }\n    });\n\n    nextProvider.on('sync', (state: boolean) => {\n      if (provider !== nextProvider) return;\n      if (synced !== state) {\n        synced = state;\n        notify();\n      }\n    });\n\n    nextProvider.on('connection-close', (event: CloseEvent | null) => {\n      if (provider !== nextProvider) return;\n      const action = classifyClose(event?.code);\n      if (action === 'remint') {\n        // Revoked mid-session: a fresh mint re-runs the server-side permission\n        // check. If access is truly gone the mint 403s and we land in 'error'.\n        // Bounded: repeated 4401s without an intervening successful connect\n        // mean the server keeps rejecting freshly minted tokens — stop rather\n        // than loop mint→connect→kick.\n        consecutiveRemints += 1;\n        teardownProvider();\n        if (consecutiveRemints > MAX_CONSECUTIVE_REMINTS) {\n          setStatus(\n            'closed',\n            new Error('Access repeatedly revoked mid-session (4401); giving up.')\n          );\n          return;\n        }\n        void connect();\n      } else if (action === 'stop') {\n        teardownProvider();\n        setStatus(\n          'closed',\n          new Error(`Connection closed permanently (code ${event?.code ?? 'unknown'})`)\n        );\n      }\n      // 'retry': the provider's exponential backoff handles it.\n    });\n\n    nextProvider.awareness.on('change', () => {\n      if (provider !== nextProvider) return;\n      notify();\n    });\n\n    scheduleRefresh(grant);\n  };\n\n  void connect();\n\n  const waitForSync = (timeoutMs = 15_000): Promise<void> =>\n    new Promise<void>((resolve, reject) => {\n      const terminal = (): Error | null => {\n        if (destroyed) return new Error('Handle destroyed before initial sync');\n        if (status === 'closed' || status === 'error') {\n          return error ?? new Error(`Connection ${status} before initial sync`);\n        }\n        return null;\n      };\n      if (synced) {\n        resolve();\n        return;\n      }\n      const immediate = terminal();\n      if (immediate) {\n        reject(immediate);\n        return;\n      }\n      const cleanup = () => {\n        clearTimeout(timer);\n        listeners.delete(listener);\n      };\n      const timer = setTimeout(() => {\n        cleanup();\n        reject(new Error(`Timed out after ${timeoutMs}ms waiting for initial sync`));\n      }, timeoutMs);\n      const listener = () => {\n        if (synced) {\n          cleanup();\n          resolve();\n          return;\n        }\n        const err = terminal();\n        if (err) {\n          cleanup();\n          reject(err);\n        }\n      };\n      listeners.add(listener);\n    });\n\n  return {\n    doc,\n    get status() {\n      return status;\n    },\n    get synced() {\n      return synced;\n    },\n    get accessType() {\n      return accessType;\n    },\n    get error() {\n      return error;\n    },\n    get version() {\n      return version;\n    },\n    waitForSync,\n    getPresence: () => {\n      if (!provider) return [];\n      const entries: PresenceEntry[] = [];\n      provider.awareness.getStates().forEach((state, clientId) => {\n        entries.push({ clientId, state: state as Record<string, unknown> });\n      });\n      return entries;\n    },\n    setPresence: (state) => {\n      lastPresence = state;\n      provider?.awareness.setLocalState(state);\n    },\n    refreshNow: () => connect({ scheduledRefresh: true }),\n    onChange: (listener) => {\n      listeners.add(listener);\n      return () => {\n        listeners.delete(listener);\n      };\n    },\n    destroy: () => {\n      if (destroyed) return;\n      destroyed = true;\n      teardownProvider();\n      status = 'closed';\n      // Final notification so pending waitForSync callers reject instead of\n      // hanging on listeners that are about to be dropped.\n      for (const listener of [...listeners]) listener();\n      listeners.clear();\n      doc.destroy();\n    },\n  };\n}\n\nexport { CollabTokenError };\nexport type { CollabAuth, CollabTokenResponse };\n"],"names":[],"mappings":";;;;;AAsEA,MAAM,sBAAsB,IAAI,KAAK;AACrC,MAAM,uBAAuB,KAAK;AAGlC,MAAM,0BAA0B;AAEzB,SAAS,kBAAkB,MAIb;AACnB,QAAM,SAAS,KAAK,UAAU;AAC9B,QAAM,MAAM,IAAI,EAAE,IAAA;AAClB,QAAM,gCAAgB,IAAA;AAEtB,MAAI,WAAqC;AACzC,MAAI,eAAqD;AACzD,MAAI,YAAY;AAChB,MAAI,SAA2B;AAC/B,MAAI,SAAS;AACb,MAAI,aAAgC;AACpC,MAAI,QAAsB;AAC1B,MAAI,eAA+C;AACnD,MAAI,UAAU;AACd,MAAI,qBAAqB;AAEzB,QAAM,SAAS,MAAM;AACnB,eAAW;AACX,eAAW,YAAY,UAAW,UAAA;AAAA,EACpC;AAEA,QAAM,YAAY,CAAC,MAAwB,MAAoB,SAAS;AACtE,QAAI,aAAa,SAAS,SAAU;AACpC,aAAS;AACT,YAAQ;AACR,WAAA;AAAA,EACF;AAEA,QAAM,oBAAoB,MAAM;AAC9B,QAAI,iBAAiB,MAAM;AACzB,mBAAa,YAAY;AACzB,qBAAe;AAAA,IACjB;AAAA,EACF;AAEA,QAAM,mBAAmB,MAAM;AAC7B,sBAAA;AAKA,QAAI,QAAQ;AACV,eAAS;AACT,aAAA;AAAA,IACF;AACA,QAAI,UAAU;AACZ,eAAS,QAAA;AACT,iBAAW;AAAA,IACb;AAAA,EACF;AAEA,QAAM,kBAAkB,CAAC,UAA+B;AACtD,sBAAA;AACA,UAAM,QAAQ,KAAK;AAAA,MACjB,MAAM,gBAAgB,KAAK,IAAA,IAAQ;AAAA,MACnC;AAAA,IAAA;AAEF,mBAAe,WAAW,MAAM;AAC9B,WAAK,QAAQ,EAAE,kBAAkB,MAAM;AAAA,IACzC,GAAG,KAAK;AAAA,EACV;AAEA,QAAM,UAAU,OAAO,SAAyD;AAC9E,QAAI,UAAW;AACf,UAAM,oBAAmB,6BAAM,sBAAqB;AAIpD,QAAI,CAAC,kBAAkB;AACrB,uBAAA;AAAA,IACF,OAAO;AACL,wBAAA;AAAA,IACF;AACA,QAAI;AACJ,QAAI;AACF,cAAQ,MAAM,gBAAgB,EAAE,MAAM,KAAK,MAAM,SAAS,KAAK,SAAS,QAAQ;AAAA,IAClF,SAAS,KAAK;AACZ,UAAI,oBAAoB,CAAC,WAAW;AAClC,uBAAe,WAAW,MAAM;AAC9B,eAAK,QAAQ,EAAE,kBAAkB,MAAM;AAAA,QACzC,GAAG,oBAAoB;AACvB;AAAA,MACF;AAIA,gBAAU,SAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC,CAAC;AACtE;AAAA,IACF;AACA,QAAI,UAAW;AACf,QAAI,kBAAkB;AACpB,uBAAA;AAAA,IACF;AACA,iBAAa,MAAM;AAEnB,UAAM,eAAe,IAAI,kBAAkB,MAAM,QAAQ,GAAG,MAAM,GAAG,IAAI,MAAM,MAAM,IAAI,KAAK;AAAA,MAC5F,QAAQ;AAAA,QACN,OAAO,MAAM;AAAA,QACb,QAAQ,MAAM;AAAA,QACd,IAAI;AAAA,MAAA;AAAA;AAAA;AAAA;AAAA,MAKN,WAAW;AAAA,IAAA,CACZ;AACD,eAAW;AAEX,iBAAa,GAAG,UAAU,CAAC,UAAmE;AAC5F,UAAI,aAAa,aAAc;AAC/B,UAAI,MAAM,WAAW,aAAa;AAChC,6BAAqB;AAAA,MACvB;AACA,gBAAU,MAAM,MAAM;AACtB,UAAI,MAAM,WAAW,eAAe,iBAAiB,MAAM;AACzD,qBAAa,UAAU,cAAc,YAAY;AAAA,MACnD;AAAA,IACF,CAAC;AAED,iBAAa,GAAG,QAAQ,CAAC,UAAmB;AAC1C,UAAI,aAAa,aAAc;AAC/B,UAAI,WAAW,OAAO;AACpB,iBAAS;AACT,eAAA;AAAA,MACF;AAAA,IACF,CAAC;AAED,iBAAa,GAAG,oBAAoB,CAAC,UAA6B;AAChE,UAAI,aAAa,aAAc;AAC/B,YAAM,SAAS,cAAc,+BAAO,IAAI;AACxC,UAAI,WAAW,UAAU;AAMvB,8BAAsB;AACtB,yBAAA;AACA,YAAI,qBAAqB,yBAAyB;AAChD;AAAA,YACE;AAAA,YACA,IAAI,MAAM,0DAA0D;AAAA,UAAA;AAEtE;AAAA,QACF;AACA,aAAK,QAAA;AAAA,MACP,WAAW,WAAW,QAAQ;AAC5B,yBAAA;AACA;AAAA,UACE;AAAA,UACA,IAAI,MAAM,wCAAuC,+BAAO,SAAQ,SAAS,GAAG;AAAA,QAAA;AAAA,MAEhF;AAAA,IAEF,CAAC;AAED,iBAAa,UAAU,GAAG,UAAU,MAAM;AACxC,UAAI,aAAa,aAAc;AAC/B,aAAA;AAAA,IACF,CAAC;AAED,oBAAgB,KAAK;AAAA,EACvB;AAEA,OAAK,QAAA;AAEL,QAAM,cAAc,CAAC,YAAY,SAC/B,IAAI,QAAc,CAAC,SAAS,WAAW;AACrC,UAAM,WAAW,MAAoB;AACnC,UAAI,UAAW,QAAO,IAAI,MAAM,sCAAsC;AACtE,UAAI,WAAW,YAAY,WAAW,SAAS;AAC7C,eAAO,SAAS,IAAI,MAAM,cAAc,MAAM,sBAAsB;AAAA,MACtE;AACA,aAAO;AAAA,IACT;AACA,QAAI,QAAQ;AACV,cAAA;AACA;AAAA,IACF;AACA,UAAM,YAAY,SAAA;AAClB,QAAI,WAAW;AACb,aAAO,SAAS;AAChB;AAAA,IACF;AACA,UAAM,UAAU,MAAM;AACpB,mBAAa,KAAK;AAClB,gBAAU,OAAO,QAAQ;AAAA,IAC3B;AACA,UAAM,QAAQ,WAAW,MAAM;AAC7B,cAAA;AACA,aAAO,IAAI,MAAM,mBAAmB,SAAS,6BAA6B,CAAC;AAAA,IAC7E,GAAG,SAAS;AACZ,UAAM,WAAW,MAAM;AACrB,UAAI,QAAQ;AACV,gBAAA;AACA,gBAAA;AACA;AAAA,MACF;AACA,YAAM,MAAM,SAAA;AACZ,UAAI,KAAK;AACP,gBAAA;AACA,eAAO,GAAG;AAAA,MACZ;AAAA,IACF;AACA,cAAU,IAAI,QAAQ;AAAA,EACxB,CAAC;AAEH,SAAO;AAAA,IACL;AAAA,IACA,IAAI,SAAS;AACX,aAAO;AAAA,IACT;AAAA,IACA,IAAI,SAAS;AACX,aAAO;AAAA,IACT;AAAA,IACA,IAAI,aAAa;AACf,aAAO;AAAA,IACT;AAAA,IACA,IAAI,QAAQ;AACV,aAAO;AAAA,IACT;AAAA,IACA,IAAI,UAAU;AACZ,aAAO;AAAA,IACT;AAAA,IACA;AAAA,IACA,aAAa,MAAM;AACjB,UAAI,CAAC,SAAU,QAAO,CAAA;AACtB,YAAM,UAA2B,CAAA;AACjC,eAAS,UAAU,UAAA,EAAY,QAAQ,CAAC,OAAO,aAAa;AAC1D,gBAAQ,KAAK,EAAE,UAAU,MAAA,CAAyC;AAAA,MACpE,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,aAAa,CAAC,UAAU;AACtB,qBAAe;AACf,2CAAU,UAAU,cAAc;AAAA,IACpC;AAAA,IACA,YAAY,MAAM,QAAQ,EAAE,kBAAkB,MAAM;AAAA,IACpD,UAAU,CAAC,aAAa;AACtB,gBAAU,IAAI,QAAQ;AACtB,aAAO,MAAM;AACX,kBAAU,OAAO,QAAQ;AAAA,MAC3B;AAAA,IACF;AAAA,IACA,SAAS,MAAM;AACb,UAAI,UAAW;AACf,kBAAY;AACZ,uBAAA;AACA,eAAS;AAGT,iBAAW,YAAY,CAAC,GAAG,SAAS,EAAG,UAAA;AACvC,gBAAU,MAAA;AACV,UAAI,QAAA;AAAA,IACN;AAAA,EAAA;AAEJ;"}
+{"version":3,"file":"client.js","sources":["../../src/collab/client.ts"],"sourcesContent":["/**\n * Vanilla (framework-agnostic) live client for Generic Doc assets.\n *\n * `connectGenericDoc` owns the full connection lifecycle: mint a room-bound\n * token via the public API, open the Keryx WebSocket with the v14 provider\n * (`@y/websocket` + `@y/y`), re-mint before expiry, apply the close-code\n * policy (4401 → one fresh mint, other 44xx → permanent stop, everything\n * else → provider backoff), and expose presence from awareness. React apps\n * use `useGenericDoc` from `@athenaintel/react/collab` instead of calling\n * this directly.\n */\n\nimport { WebsocketProvider } from '@y/websocket';\nimport * as Y from '@y/y';\nimport { classifyClose } from './close-policy';\nimport {\n  type CollabAuth,\n  type CollabTokenResponse,\n  CollabTokenError,\n  mintCollabToken,\n} from './mint';\nimport { MAX_CONSECUTIVE_REMINTS, MIN_REFRESH_DELAY_MS, refreshDelayMs } from './token-refresh';\n\nexport type GenericDocStatus =\n  | 'connecting'\n  | 'connected'\n  | 'disconnected'\n  | 'closed'\n  | 'error';\n\nexport interface PresenceEntry {\n  clientId: number;\n  state: Record<string, unknown>;\n}\n\nexport interface GenericDocHandle {\n  /** The live shared document. Owned by the handle; destroyed with it. */\n  readonly doc: Y.Doc;\n  readonly status: GenericDocStatus;\n  /**\n   * Whether the initial server sync has completed for the current connection.\n   * `status === 'connected'` fires before the server state arrives, so a doc\n   * read immediately after connect can still be empty — gate first reads on\n   * this (or `waitForSync`).\n   */\n  readonly synced: boolean;\n  /** Granted access from the last successful mint. */\n  readonly accessType: 'r' | 'rw' | null;\n  /** Terminal error, when status is 'error' or 'closed'. */\n  readonly error: Error | null;\n  /** Monotonic change counter — bumps on every status/presence notification. */\n  readonly version: number;\n  /**\n   * Resolve once the initial server sync completes; reject on timeout, on a\n   * terminal connection state, or if the handle is destroyed first.\n   */\n  waitForSync: (timeoutMs?: number) => Promise<void>;\n  getPresence: () => PresenceEntry[];\n  /** Broadcast this client's presence state (requires a live connection). */\n  setPresence: (state: Record<string, unknown> | null) => void;\n  /**\n   * Force an early token refresh. Session-preserving: the live connection\n   * stays up until the fresh token is minted; a failed mint retries on a\n   * short timer instead of dropping the session.\n   */\n  refreshNow: () => Promise<void>;\n  onChange: (listener: () => void) => () => void;\n  destroy: () => void;\n}\n\nexport function connectGenericDoc(args: {\n  assetId: string;\n  auth: CollabAuth;\n  access?: 'view' | 'edit';\n}): GenericDocHandle {\n  const access = args.access ?? 'view';\n  const doc = new Y.Doc();\n  const listeners = new Set<() => void>();\n\n  let provider: WebsocketProvider | null = null;\n  let refreshTimer: ReturnType<typeof setTimeout> | null = null;\n  let destroyed = false;\n  let status: GenericDocStatus = 'connecting';\n  let synced = false;\n  let accessType: 'r' | 'rw' | null = null;\n  let error: Error | null = null;\n  let lastPresence: Record<string, unknown> | null = null;\n  let version = 0;\n  let consecutiveRemints = 0;\n\n  const notify = () => {\n    version += 1;\n    for (const listener of listeners) listener();\n  };\n\n  const setStatus = (next: GenericDocStatus, err: Error | null = null) => {\n    if (destroyed && next !== 'closed') return;\n    status = next;\n    error = err;\n    notify();\n  };\n\n  const clearRefreshTimer = () => {\n    if (refreshTimer !== null) {\n      clearTimeout(refreshTimer);\n      refreshTimer = null;\n    }\n  };\n\n  const teardownProvider = () => {\n    clearRefreshTimer();\n    // A future provider must complete its own initial sync; the doc keeps its\n    // content either way. Subscribers must observe the flip immediately —\n    // waiting for the next provider event would let them act on synced=true\n    // across the replacement gap.\n    if (synced) {\n      synced = false;\n      notify();\n    }\n    if (provider) {\n      provider.destroy();\n      provider = null;\n    }\n  };\n\n  const scheduleRefresh = (grant: CollabTokenResponse) => {\n    clearRefreshTimer();\n    const delay = refreshDelayMs({ expiresAtMs: grant.expires_at_ms, now: Date.now() });\n    refreshTimer = setTimeout(() => {\n      void connect({ scheduledRefresh: true });\n    }, delay);\n  };\n\n  const connect = async (opts?: { scheduledRefresh?: boolean }): Promise<void> => {\n    if (destroyed) return;\n    const scheduledRefresh = opts?.scheduledRefresh === true;\n    // A scheduled refresh mints FIRST and keeps the live session up: the old\n    // token has ~5 minutes of headroom, so a transient mint failure retries\n    // on a short timer instead of dropping a healthy connection.\n    if (!scheduledRefresh) {\n      teardownProvider();\n    } else {\n      clearRefreshTimer();\n    }\n    let grant: CollabTokenResponse;\n    try {\n      grant = await mintCollabToken({ auth: args.auth, assetId: args.assetId, access });\n    } catch (err) {\n      if (scheduledRefresh && !destroyed) {\n        refreshTimer = setTimeout(() => {\n          void connect({ scheduledRefresh: true });\n        }, MIN_REFRESH_DELAY_MS);\n        return;\n      }\n      // A denied mint is authoritative (revoked / not shared / not eligible);\n      // anything else (network) is worth telling the caller about too — the\n      // handle stays usable via a later explicit reconnect-by-recreate.\n      setStatus('error', err instanceof Error ? err : new Error(String(err)));\n      return;\n    }\n    if (destroyed) return;\n    if (scheduledRefresh) {\n      teardownProvider();\n    }\n    accessType = grant.access_type;\n\n    const nextProvider = new WebsocketProvider(grant.ws_url, `${grant.org}/${grant.doc_id}`, doc, {\n      params: {\n        yauth: grant.token,\n        branch: grant.branch,\n        gc: 'true',\n      },\n      // BroadcastChannel would sync same-origin clients locally, bypassing the\n      // server's permission enforcement (a read-only tab could write into an\n      // editor tab's doc). Permissioned docs must round-trip the server.\n      disableBc: true,\n    });\n    provider = nextProvider;\n\n    nextProvider.on('status', (event: { status: 'connecting' | 'connected' | 'disconnected' }) => {\n      if (provider !== nextProvider) return;\n      if (event.status === 'connected') {\n        consecutiveRemints = 0;\n      }\n      setStatus(event.status);\n      if (event.status === 'connected' && lastPresence !== null) {\n        nextProvider.awareness.setLocalState(lastPresence);\n      }\n    });\n\n    nextProvider.on('sync', (state: boolean) => {\n      if (provider !== nextProvider) return;\n      if (synced !== state) {\n        synced = state;\n        notify();\n      }\n    });\n\n    nextProvider.on('connection-close', (event: CloseEvent | null) => {\n      if (provider !== nextProvider) return;\n      const action = classifyClose(event?.code);\n      if (action === 'remint') {\n        // Revoked mid-session: a fresh mint re-runs the server-side permission\n        // check. If access is truly gone the mint 403s and we land in 'error'.\n        // Bounded: repeated 4401s without an intervening successful connect\n        // mean the server keeps rejecting freshly minted tokens — stop rather\n        // than loop mint→connect→kick.\n        consecutiveRemints += 1;\n        teardownProvider();\n        if (consecutiveRemints > MAX_CONSECUTIVE_REMINTS) {\n          setStatus(\n            'closed',\n            new Error('Access repeatedly revoked mid-session (4401); giving up.')\n          );\n          return;\n        }\n        void connect();\n      } else if (action === 'stop') {\n        teardownProvider();\n        setStatus(\n          'closed',\n          new Error(`Connection closed permanently (code ${event?.code ?? 'unknown'})`)\n        );\n      }\n      // 'retry': the provider's exponential backoff handles it.\n    });\n\n    nextProvider.awareness.on('change', () => {\n      if (provider !== nextProvider) return;\n      notify();\n    });\n\n    scheduleRefresh(grant);\n  };\n\n  void connect();\n\n  const waitForSync = (timeoutMs = 15_000): Promise<void> =>\n    new Promise<void>((resolve, reject) => {\n      const terminal = (): Error | null => {\n        if (destroyed) return new Error('Handle destroyed before initial sync');\n        if (status === 'closed' || status === 'error') {\n          return error ?? new Error(`Connection ${status} before initial sync`);\n        }\n        return null;\n      };\n      if (synced) {\n        resolve();\n        return;\n      }\n      const immediate = terminal();\n      if (immediate) {\n        reject(immediate);\n        return;\n      }\n      const cleanup = () => {\n        clearTimeout(timer);\n        listeners.delete(listener);\n      };\n      const timer = setTimeout(() => {\n        cleanup();\n        reject(new Error(`Timed out after ${timeoutMs}ms waiting for initial sync`));\n      }, timeoutMs);\n      const listener = () => {\n        if (synced) {\n          cleanup();\n          resolve();\n          return;\n        }\n        const err = terminal();\n        if (err) {\n          cleanup();\n          reject(err);\n        }\n      };\n      listeners.add(listener);\n    });\n\n  return {\n    doc,\n    get status() {\n      return status;\n    },\n    get synced() {\n      return synced;\n    },\n    get accessType() {\n      return accessType;\n    },\n    get error() {\n      return error;\n    },\n    get version() {\n      return version;\n    },\n    waitForSync,\n    getPresence: () => {\n      if (!provider) return [];\n      const entries: PresenceEntry[] = [];\n      provider.awareness.getStates().forEach((state, clientId) => {\n        entries.push({ clientId, state: state as Record<string, unknown> });\n      });\n      return entries;\n    },\n    setPresence: (state) => {\n      lastPresence = state;\n      provider?.awareness.setLocalState(state);\n    },\n    refreshNow: () => connect({ scheduledRefresh: true }),\n    onChange: (listener) => {\n      listeners.add(listener);\n      return () => {\n        listeners.delete(listener);\n      };\n    },\n    destroy: () => {\n      if (destroyed) return;\n      destroyed = true;\n      teardownProvider();\n      status = 'closed';\n      // Final notification so pending waitForSync callers reject instead of\n      // hanging on listeners that are about to be dropped.\n      for (const listener of [...listeners]) listener();\n      listeners.clear();\n      doc.destroy();\n    },\n  };\n}\n\nexport { CollabTokenError };\nexport type { CollabAuth, CollabTokenResponse };\n"],"names":[],"mappings":";;;;;;AAsEO,SAAS,kBAAkB,MAIb;AACnB,QAAM,SAAS,KAAK,UAAU;AAC9B,QAAM,MAAM,IAAI,EAAE,IAAA;AAClB,QAAM,gCAAgB,IAAA;AAEtB,MAAI,WAAqC;AACzC,MAAI,eAAqD;AACzD,MAAI,YAAY;AAChB,MAAI,SAA2B;AAC/B,MAAI,SAAS;AACb,MAAI,aAAgC;AACpC,MAAI,QAAsB;AAC1B,MAAI,eAA+C;AACnD,MAAI,UAAU;AACd,MAAI,qBAAqB;AAEzB,QAAM,SAAS,MAAM;AACnB,eAAW;AACX,eAAW,YAAY,UAAW,UAAA;AAAA,EACpC;AAEA,QAAM,YAAY,CAAC,MAAwB,MAAoB,SAAS;AACtE,QAAI,aAAa,SAAS,SAAU;AACpC,aAAS;AACT,YAAQ;AACR,WAAA;AAAA,EACF;AAEA,QAAM,oBAAoB,MAAM;AAC9B,QAAI,iBAAiB,MAAM;AACzB,mBAAa,YAAY;AACzB,qBAAe;AAAA,IACjB;AAAA,EACF;AAEA,QAAM,mBAAmB,MAAM;AAC7B,sBAAA;AAKA,QAAI,QAAQ;AACV,eAAS;AACT,aAAA;AAAA,IACF;AACA,QAAI,UAAU;AACZ,eAAS,QAAA;AACT,iBAAW;AAAA,IACb;AAAA,EACF;AAEA,QAAM,kBAAkB,CAAC,UAA+B;AACtD,sBAAA;AACA,UAAM,QAAQ,eAAe,EAAE,aAAa,MAAM,eAAe,KAAK,KAAK,IAAA,GAAO;AAClF,mBAAe,WAAW,MAAM;AAC9B,WAAK,QAAQ,EAAE,kBAAkB,MAAM;AAAA,IACzC,GAAG,KAAK;AAAA,EACV;AAEA,QAAM,UAAU,OAAO,SAAyD;AAC9E,QAAI,UAAW;AACf,UAAM,oBAAmB,6BAAM,sBAAqB;AAIpD,QAAI,CAAC,kBAAkB;AACrB,uBAAA;AAAA,IACF,OAAO;AACL,wBAAA;AAAA,IACF;AACA,QAAI;AACJ,QAAI;AACF,cAAQ,MAAM,gBAAgB,EAAE,MAAM,KAAK,MAAM,SAAS,KAAK,SAAS,QAAQ;AAAA,IAClF,SAAS,KAAK;AACZ,UAAI,oBAAoB,CAAC,WAAW;AAClC,uBAAe,WAAW,MAAM;AAC9B,eAAK,QAAQ,EAAE,kBAAkB,MAAM;AAAA,QACzC,GAAG,oBAAoB;AACvB;AAAA,MACF;AAIA,gBAAU,SAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC,CAAC;AACtE;AAAA,IACF;AACA,QAAI,UAAW;AACf,QAAI,kBAAkB;AACpB,uBAAA;AAAA,IACF;AACA,iBAAa,MAAM;AAEnB,UAAM,eAAe,IAAI,kBAAkB,MAAM,QAAQ,GAAG,MAAM,GAAG,IAAI,MAAM,MAAM,IAAI,KAAK;AAAA,MAC5F,QAAQ;AAAA,QACN,OAAO,MAAM;AAAA,QACb,QAAQ,MAAM;AAAA,QACd,IAAI;AAAA,MAAA;AAAA;AAAA;AAAA;AAAA,MAKN,WAAW;AAAA,IAAA,CACZ;AACD,eAAW;AAEX,iBAAa,GAAG,UAAU,CAAC,UAAmE;AAC5F,UAAI,aAAa,aAAc;AAC/B,UAAI,MAAM,WAAW,aAAa;AAChC,6BAAqB;AAAA,MACvB;AACA,gBAAU,MAAM,MAAM;AACtB,UAAI,MAAM,WAAW,eAAe,iBAAiB,MAAM;AACzD,qBAAa,UAAU,cAAc,YAAY;AAAA,MACnD;AAAA,IACF,CAAC;AAED,iBAAa,GAAG,QAAQ,CAAC,UAAmB;AAC1C,UAAI,aAAa,aAAc;AAC/B,UAAI,WAAW,OAAO;AACpB,iBAAS;AACT,eAAA;AAAA,MACF;AAAA,IACF,CAAC;AAED,iBAAa,GAAG,oBAAoB,CAAC,UAA6B;AAChE,UAAI,aAAa,aAAc;AAC/B,YAAM,SAAS,cAAc,+BAAO,IAAI;AACxC,UAAI,WAAW,UAAU;AAMvB,8BAAsB;AACtB,yBAAA;AACA,YAAI,qBAAqB,yBAAyB;AAChD;AAAA,YACE;AAAA,YACA,IAAI,MAAM,0DAA0D;AAAA,UAAA;AAEtE;AAAA,QACF;AACA,aAAK,QAAA;AAAA,MACP,WAAW,WAAW,QAAQ;AAC5B,yBAAA;AACA;AAAA,UACE;AAAA,UACA,IAAI,MAAM,wCAAuC,+BAAO,SAAQ,SAAS,GAAG;AAAA,QAAA;AAAA,MAEhF;AAAA,IAEF,CAAC;AAED,iBAAa,UAAU,GAAG,UAAU,MAAM;AACxC,UAAI,aAAa,aAAc;AAC/B,aAAA;AAAA,IACF,CAAC;AAED,oBAAgB,KAAK;AAAA,EACvB;AAEA,OAAK,QAAA;AAEL,QAAM,cAAc,CAAC,YAAY,SAC/B,IAAI,QAAc,CAAC,SAAS,WAAW;AACrC,UAAM,WAAW,MAAoB;AACnC,UAAI,UAAW,QAAO,IAAI,MAAM,sCAAsC;AACtE,UAAI,WAAW,YAAY,WAAW,SAAS;AAC7C,eAAO,SAAS,IAAI,MAAM,cAAc,MAAM,sBAAsB;AAAA,MACtE;AACA,aAAO;AAAA,IACT;AACA,QAAI,QAAQ;AACV,cAAA;AACA;AAAA,IACF;AACA,UAAM,YAAY,SAAA;AAClB,QAAI,WAAW;AACb,aAAO,SAAS;AAChB;AAAA,IACF;AACA,UAAM,UAAU,MAAM;AACpB,mBAAa,KAAK;AAClB,gBAAU,OAAO,QAAQ;AAAA,IAC3B;AACA,UAAM,QAAQ,WAAW,MAAM;AAC7B,cAAA;AACA,aAAO,IAAI,MAAM,mBAAmB,SAAS,6BAA6B,CAAC;AAAA,IAC7E,GAAG,SAAS;AACZ,UAAM,WAAW,MAAM;AACrB,UAAI,QAAQ;AACV,gBAAA;AACA,gBAAA;AACA;AAAA,MACF;AACA,YAAM,MAAM,SAAA;AACZ,UAAI,KAAK;AACP,gBAAA;AACA,eAAO,GAAG;AAAA,MACZ;AAAA,IACF;AACA,cAAU,IAAI,QAAQ;AAAA,EACxB,CAAC;AAEH,SAAO;AAAA,IACL;AAAA,IACA,IAAI,SAAS;AACX,aAAO;AAAA,IACT;AAAA,IACA,IAAI,SAAS;AACX,aAAO;AAAA,IACT;AAAA,IACA,IAAI,aAAa;AACf,aAAO;AAAA,IACT;AAAA,IACA,IAAI,QAAQ;AACV,aAAO;AAAA,IACT;AAAA,IACA,IAAI,UAAU;AACZ,aAAO;AAAA,IACT;AAAA,IACA;AAAA,IACA,aAAa,MAAM;AACjB,UAAI,CAAC,SAAU,QAAO,CAAA;AACtB,YAAM,UAA2B,CAAA;AACjC,eAAS,UAAU,UAAA,EAAY,QAAQ,CAAC,OAAO,aAAa;AAC1D,gBAAQ,KAAK,EAAE,UAAU,MAAA,CAAyC;AAAA,MACpE,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,aAAa,CAAC,UAAU;AACtB,qBAAe;AACf,2CAAU,UAAU,cAAc;AAAA,IACpC;AAAA,IACA,YAAY,MAAM,QAAQ,EAAE,kBAAkB,MAAM;AAAA,IACpD,UAAU,CAAC,aAAa;AACtB,gBAAU,IAAI,QAAQ;AACtB,aAAO,MAAM;AACX,kBAAU,OAAO,QAAQ;AAAA,MAC3B;AAAA,IACF;AAAA,IACA,SAAS,MAAM;AACb,UAAI,UAAW;AACf,kBAAY;AACZ,uBAAA;AACA,eAAS;AAGT,iBAAW,YAAY,CAAC,GAAG,SAAS,EAAG,UAAA;AACvC,gBAAU,MAAA;AACV,UAAI,QAAA;AAAA,IACN;AAAA,EAAA;AAEJ;"}

package/dist/collab/index.cjs

@@ -3,8 +3,13 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const closePolicy = require("./close-policy.cjs");
 const client = require("./client.cjs");
 const mint = require("./mint.cjs");
+const presenceClient = require("./presence-client.cjs");
+const presenceMint = require("./presence-mint.cjs");
+const presenceReact = require("./presence-react.cjs");
+const presenceSlots = require("./presence-slots.cjs");
 const react = require("./react.cjs");
 const shape = require("./shape.cjs");
+const tokenRefresh = require("./token-refresh.cjs");
 exports.WS_CLOSE_AUTH_REVOKED = closePolicy.WS_CLOSE_AUTH_REVOKED;
 exports.WS_CLOSE_DOC_DELETED = closePolicy.WS_CLOSE_DOC_DELETED;
 exports.classifyClose = closePolicy.classifyClose;
@@ -12,6 +17,24 @@ exports.connectGenericDoc = client.connectGenericDoc;
 exports.CollabTokenError = mint.CollabTokenError;
 exports.getAthenaApiBaseUrl = mint.getAthenaApiBaseUrl;
 exports.mintCollabToken = mint.mintCollabToken;
+exports.PRESENCE_SWEEP_INTERVAL_MS = presenceClient.PRESENCE_SWEEP_INTERVAL_MS;
+exports.connectWorkspacePresence = presenceClient.connectWorkspacePresence;
+exports.mintWorkspacePresenceToken = presenceMint.mintWorkspacePresenceToken;
+exports.resolveWorkspacePresence = presenceMint.resolveWorkspacePresence;
+exports.PRESENCE_DEFAULT_TICK_MS = presenceReact.PRESENCE_DEFAULT_TICK_MS;
+exports.useWorkspacePresence = presenceReact.useWorkspacePresence;
+exports.useWorkspacePresenceResolver = presenceReact.useWorkspacePresenceResolver;
+exports.MAX_PRESENCE_CONTEXTS_PER_SLOT = presenceSlots.MAX_PRESENCE_CONTEXTS_PER_SLOT;
+exports.MAX_PRESENCE_STRING_CHARS = presenceSlots.MAX_PRESENCE_STRING_CHARS;
+exports.PRESENCE_ACTIVE_WINDOW_MS = presenceSlots.PRESENCE_ACTIVE_WINDOW_MS;
+exports.PRESENCE_CONTEXT_TYPE = presenceSlots.PRESENCE_CONTEXT_TYPE;
+exports.PRESENCE_IDLE_WINDOW_MS = presenceSlots.PRESENCE_IDLE_WINDOW_MS;
+exports.derivePresenceState = presenceSlots.derivePresenceState;
+exports.mergePresenceStates = presenceSlots.mergePresenceStates;
 exports.useGenericDoc = react.useGenericDoc;
 exports.defineDocShape = shape.defineDocShape;
+exports.MAX_CONSECUTIVE_REMINTS = tokenRefresh.MAX_CONSECUTIVE_REMINTS;
+exports.MIN_REFRESH_DELAY_MS = tokenRefresh.MIN_REFRESH_DELAY_MS;
+exports.REFRESH_HEADROOM_MS = tokenRefresh.REFRESH_HEADROOM_MS;
+exports.refreshDelayMs = tokenRefresh.refreshDelayMs;
 //# sourceMappingURL=index.cjs.map

package/dist/collab/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;"}
+{"version":3,"file":"index.cjs","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/collab/index.d.ts

@@ -1,13 +1,28 @@
 /**
- * `@athenaintel/react/collab` — live collaboration for Generic Doc assets.
+ * `@athenaintel/react/collab` — live collaboration for Generic Doc assets and
+ * a read-only view of a workspace's presence feed.
  *
  * Built on yjs v14 (`@y/y`) and the v14-line WebSocket provider
- * (`@y/websocket`). Auth flows through the public collab-token mint
+ * (`@y/websocket`). Document auth flows through the public collab-token mint
  * (`POST /api/v0/assets/{id}/collab-token`), which is allowlisted server-side
  * to `generic_doc` assets and admin-only during the initial rollout.
+ *
+ * Workspace presence (`useWorkspacePresence` / `connectWorkspacePresence`)
+ * observes the Keryx workspace awareness room (`<workspaceId>/awareness`) —
+ * the same per-recipient-filtered feed the Olympus People page renders —
+ * through a read-only token from
+ * `POST /api/v0/workspaces/{id}/presence-token` (admin-only). The observer
+ * never publishes a slot and never writes to the room's document.
+ * `resolveWorkspacePresence` (`POST …/presence/resolve`) turns the ids carried
+ * in awareness contexts into titles the caller may see.
  */
 export { classifyClose, WS_CLOSE_AUTH_REVOKED, WS_CLOSE_DOC_DELETED } from './close-policy';
 export { CollabTokenError, connectGenericDoc, type CollabAuth, type CollabTokenResponse, type GenericDocHandle, type GenericDocStatus, type PresenceEntry, } from './client';
 export { getAthenaApiBaseUrl, mintCollabToken } from './mint';
+export { PRESENCE_SWEEP_INTERVAL_MS, connectWorkspacePresence, type WorkspacePresenceHandle, type WorkspacePresenceStatus, } from './presence-client';
+export { mintWorkspacePresenceToken, resolveWorkspacePresence, type WorkspacePresenceResolveRequest, type WorkspacePresenceResolveResponse, type WorkspacePresenceResolvedAsset, type WorkspacePresenceResolvedMember, type WorkspacePresenceResolvedProject, type WorkspacePresenceResolvedSession, type WorkspacePresenceTokenResponse, } from './presence-mint';
+export { PRESENCE_DEFAULT_TICK_MS, useWorkspacePresence, useWorkspacePresenceResolver, type PresenceHumanWithState, type UseWorkspacePresenceOptions, type UseWorkspacePresenceResult, type WorkspacePresenceResolver, } from './presence-react';
+export { MAX_PRESENCE_CONTEXTS_PER_SLOT, MAX_PRESENCE_STRING_CHARS, PRESENCE_ACTIVE_WINDOW_MS, PRESENCE_CONTEXT_TYPE, PRESENCE_IDLE_WINDOW_MS, derivePresenceState, mergePresenceStates, type PresenceAgent, type PresenceContext, type PresenceContextType, type PresenceHuman, type PresenceRoster, type PresenceState, } from './presence-slots';
 export { useGenericDoc, type UseGenericDocResult } from './react';
 export { defineDocShape, type BoundDocShape, type DocShapeKind } from './shape';
+export { MAX_CONSECUTIVE_REMINTS, MIN_REFRESH_DELAY_MS, REFRESH_HEADROOM_MS, refreshDelayMs, } from './token-refresh';

package/dist/collab/index.js

@@ -1,17 +1,40 @@
 import { WS_CLOSE_AUTH_REVOKED, WS_CLOSE_DOC_DELETED, classifyClose } from "./close-policy.js";
 import { connectGenericDoc } from "./client.js";
 import { CollabTokenError, getAthenaApiBaseUrl, mintCollabToken } from "./mint.js";
+import { PRESENCE_SWEEP_INTERVAL_MS, connectWorkspacePresence } from "./presence-client.js";
+import { mintWorkspacePresenceToken, resolveWorkspacePresence } from "./presence-mint.js";
+import { PRESENCE_DEFAULT_TICK_MS, useWorkspacePresence, useWorkspacePresenceResolver } from "./presence-react.js";
+import { MAX_PRESENCE_CONTEXTS_PER_SLOT, MAX_PRESENCE_STRING_CHARS, PRESENCE_ACTIVE_WINDOW_MS, PRESENCE_CONTEXT_TYPE, PRESENCE_IDLE_WINDOW_MS, derivePresenceState, mergePresenceStates } from "./presence-slots.js";
 import { useGenericDoc } from "./react.js";
 import { defineDocShape } from "./shape.js";
+import { MAX_CONSECUTIVE_REMINTS, MIN_REFRESH_DELAY_MS, REFRESH_HEADROOM_MS, refreshDelayMs } from "./token-refresh.js";
 export {
   CollabTokenError,
+  MAX_CONSECUTIVE_REMINTS,
+  MAX_PRESENCE_CONTEXTS_PER_SLOT,
+  MAX_PRESENCE_STRING_CHARS,
+  MIN_REFRESH_DELAY_MS,
+  PRESENCE_ACTIVE_WINDOW_MS,
+  PRESENCE_CONTEXT_TYPE,
+  PRESENCE_DEFAULT_TICK_MS,
+  PRESENCE_IDLE_WINDOW_MS,
+  PRESENCE_SWEEP_INTERVAL_MS,
+  REFRESH_HEADROOM_MS,
   WS_CLOSE_AUTH_REVOKED,
   WS_CLOSE_DOC_DELETED,
   classifyClose,
   connectGenericDoc,
+  connectWorkspacePresence,
   defineDocShape,
+  derivePresenceState,
   getAthenaApiBaseUrl,
+  mergePresenceStates,
   mintCollabToken,
-  useGenericDoc
+  mintWorkspacePresenceToken,
+  refreshDelayMs,
+  resolveWorkspacePresence,
+  useGenericDoc,
+  useWorkspacePresence,
+  useWorkspacePresenceResolver
 };
 //# sourceMappingURL=index.js.map

package/dist/collab/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;"}
+{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;"}

package/dist/collab/mint.cjs

@@ -11,7 +11,7 @@ class CollabTokenError extends Error {
     this.status = status;
   }
 }
-function getAuthHeaders(auth) {
+function getCollabAuthHeaders(auth) {
   if (auth.token) {
     return { Authorization: `Bearer ${auth.token}` };
   }
@@ -20,6 +20,17 @@ function getAuthHeaders(auth) {
   }
   return {};
 }
+async function collabErrorFromResponse(response, fallback) {
+  let detail = "";
+  try {
+    const body = await response.json();
+    if (body && typeof body === "object" && "detail" in body) {
+      detail = String(body.detail);
+    }
+  } catch {
+  }
+  return new CollabTokenError(response.status, detail || fallback);
+}
 function getAthenaApiBaseUrl(backendUrl) {
   return backendUrl.replace(/\/api\/assistant-ui\/?$/, "").replace(/\/api\/v0\/?$/, "").replace(/\/$/, "");
 }
@@ -31,29 +42,23 @@ async function mintCollabToken(args) {
       method: "POST",
       headers: {
         "Content-Type": "application/json",
-        ...getAuthHeaders(args.auth)
+        ...getCollabAuthHeaders(args.auth)
       },
       body: JSON.stringify({ access: args.access }),
       signal: args.signal
     }
   );
   if (!response.ok) {
-    let detail = "";
-    try {
-      const body = await response.json();
-      if (body && typeof body === "object" && "detail" in body) {
-        detail = String(body.detail);
-      }
-    } catch {
-    }
-    throw new CollabTokenError(
-      response.status,
-      detail || `Collab token mint failed with status ${response.status}`
+    throw await collabErrorFromResponse(
+      response,
+      `Collab token mint failed with status ${response.status}`
     );
   }
   return await response.json();
 }
 exports.CollabTokenError = CollabTokenError;
+exports.collabErrorFromResponse = collabErrorFromResponse;
 exports.getAthenaApiBaseUrl = getAthenaApiBaseUrl;
+exports.getCollabAuthHeaders = getCollabAuthHeaders;
 exports.mintCollabToken = mintCollabToken;
 //# sourceMappingURL=mint.cjs.map

package/dist/collab/mint.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"mint.cjs","sources":["../../src/collab/mint.ts"],"sourcesContent":["/**\n * Collab-token mint client for Generic Doc assets.\n *\n * Calls `POST /api/v0/assets/{assetId}/collab-token` — the only public surface\n * that issues Keryx capability tokens, allowlisted server-side to the\n * `generic_doc` asset type and admin-only during the initial rollout. Tokens\n * are room-bound and short-lived; `connectGenericDoc` re-mints automatically\n * before expiry.\n */\n\nexport interface CollabAuth {\n  /** Athena API base or any Athena backend URL (e.g. the AthenaProvider `backendUrl`). */\n  backendUrl: string;\n  /** Personal or sandbox API key. Used when no bearer token is provided. */\n  apiKey?: string;\n  /** Per-viewer bearer token. Takes precedence over the API key. */\n  token?: string | null;\n}\n\nexport interface CollabTokenResponse {\n  token: string;\n  access_type: 'r' | 'rw';\n  expires_at_ms: number;\n  ws_url: string;\n  rest_url: string;\n  org: string;\n  doc_id: string;\n  branch: string;\n}\n\nexport class CollabTokenError extends Error {\n  readonly status: number;\n\n  constructor(status: number, message: string) {\n    super(message);\n    this.name = 'CollabTokenError';\n    this.status = status;\n  }\n}\n\nfunction getAuthHeaders(auth: CollabAuth): Record<string, string> {\n  if (auth.token) {\n    return { Authorization: `Bearer ${auth.token}` };\n  }\n  if (auth.apiKey) {\n    return { 'X-API-KEY': auth.apiKey };\n  }\n  return {};\n}\n\n/**\n * Trim a nested Athena endpoint back to the API origin. Accepts the\n * AthenaProvider `backendUrl` (`…/api/assistant-ui`), the sandbox\n * `ATHENA_API_URL` convention (`…/api/v0`), or a bare origin.\n */\nexport function getAthenaApiBaseUrl(backendUrl: string): string {\n  return backendUrl\n    .replace(/\\/api\\/assistant-ui\\/?$/, '')\n    .replace(/\\/api\\/v0\\/?$/, '')\n    .replace(/\\/$/, '');\n}\n\nexport async function mintCollabToken(args: {\n  auth: CollabAuth;\n  assetId: string;\n  access: 'view' | 'edit';\n  signal?: AbortSignal;\n}): Promise<CollabTokenResponse> {\n  const base = getAthenaApiBaseUrl(args.auth.backendUrl);\n  const response = await fetch(\n    `${base}/api/v0/assets/${encodeURIComponent(args.assetId)}/collab-token`,\n    {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        ...getAuthHeaders(args.auth),\n      },\n      body: JSON.stringify({ access: args.access }),\n      signal: args.signal,\n    }\n  );\n  if (!response.ok) {\n    let detail = '';\n    try {\n      const body: unknown = await response.json();\n      if (body && typeof body === 'object' && 'detail' in body) {\n        detail = String((body as { detail: unknown }).detail);\n      }\n    } catch {\n      // non-JSON error body; status alone tells the story\n    }\n    throw new CollabTokenError(\n      response.status,\n      detail || `Collab token mint failed with status ${response.status}`\n    );\n  }\n  return (await response.json()) as CollabTokenResponse;\n}\n"],"names":[],"mappings":";;;;;AA8BO,MAAM,yBAAyB,MAAM;AAAA,EAG1C,YAAY,QAAgB,SAAiB;AAC3C,UAAM,OAAO;AAHN;AAIP,SAAK,OAAO;AACZ,SAAK,SAAS;AAAA,EAChB;AACF;AAEA,SAAS,eAAe,MAA0C;AAChE,MAAI,KAAK,OAAO;AACd,WAAO,EAAE,eAAe,UAAU,KAAK,KAAK,GAAA;AAAA,EAC9C;AACA,MAAI,KAAK,QAAQ;AACf,WAAO,EAAE,aAAa,KAAK,OAAA;AAAA,EAC7B;AACA,SAAO,CAAA;AACT;AAOO,SAAS,oBAAoB,YAA4B;AAC9D,SAAO,WACJ,QAAQ,2BAA2B,EAAE,EACrC,QAAQ,iBAAiB,EAAE,EAC3B,QAAQ,OAAO,EAAE;AACtB;AAEA,eAAsB,gBAAgB,MAKL;AAC/B,QAAM,OAAO,oBAAoB,KAAK,KAAK,UAAU;AACrD,QAAM,WAAW,MAAM;AAAA,IACrB,GAAG,IAAI,kBAAkB,mBAAmB,KAAK,OAAO,CAAC;AAAA,IACzD;AAAA,MACE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG,eAAe,KAAK,IAAI;AAAA,MAAA;AAAA,MAE7B,MAAM,KAAK,UAAU,EAAE,QAAQ,KAAK,QAAQ;AAAA,MAC5C,QAAQ,KAAK;AAAA,IAAA;AAAA,EACf;AAEF,MAAI,CAAC,SAAS,IAAI;AAChB,QAAI,SAAS;AACb,QAAI;AACF,YAAM,OAAgB,MAAM,SAAS,KAAA;AACrC,UAAI,QAAQ,OAAO,SAAS,YAAY,YAAY,MAAM;AACxD,iBAAS,OAAQ,KAA6B,MAAM;AAAA,MACtD;AAAA,IACF,QAAQ;AAAA,IAER;AACA,UAAM,IAAI;AAAA,MACR,SAAS;AAAA,MACT,UAAU,wCAAwC,SAAS,MAAM;AAAA,IAAA;AAAA,EAErE;AACA,SAAQ,MAAM,SAAS,KAAA;AACzB;;;;"}
+{"version":3,"file":"mint.cjs","sources":["../../src/collab/mint.ts"],"sourcesContent":["/**\n * Collab-token mint client for Generic Doc assets.\n *\n * Calls `POST /api/v0/assets/{assetId}/collab-token` — the only public surface\n * that issues Keryx capability tokens, allowlisted server-side to the\n * `generic_doc` asset type and admin-only during the initial rollout. Tokens\n * are room-bound and short-lived; `connectGenericDoc` re-mints automatically\n * before expiry.\n */\n\nexport interface CollabAuth {\n  /** Athena API base or any Athena backend URL (e.g. the AthenaProvider `backendUrl`). */\n  backendUrl: string;\n  /** Personal or sandbox API key. Used when no bearer token is provided. */\n  apiKey?: string;\n  /** Per-viewer bearer token. Takes precedence over the API key. */\n  token?: string | null;\n}\n\nexport interface CollabTokenResponse {\n  token: string;\n  access_type: 'r' | 'rw';\n  expires_at_ms: number;\n  ws_url: string;\n  rest_url: string;\n  org: string;\n  doc_id: string;\n  branch: string;\n}\n\nexport class CollabTokenError extends Error {\n  readonly status: number;\n\n  constructor(status: number, message: string) {\n    super(message);\n    this.name = 'CollabTokenError';\n    this.status = status;\n  }\n}\n\n/**\n * Credential headers for a public-API call. The per-viewer bearer token wins\n * over the API key so a viewer never acts with the app's own identity.\n */\nexport function getCollabAuthHeaders(auth: CollabAuth): Record<string, string> {\n  if (auth.token) {\n    return { Authorization: `Bearer ${auth.token}` };\n  }\n  if (auth.apiKey) {\n    return { 'X-API-KEY': auth.apiKey };\n  }\n  return {};\n}\n\n/**\n * Turn a non-2xx public-API response into a `CollabTokenError`, carrying the\n * FastAPI `detail` string when the body has one and the bare status otherwise.\n */\nexport async function collabErrorFromResponse(\n  response: Response,\n  fallback: string\n): Promise<CollabTokenError> {\n  let detail = '';\n  try {\n    const body: unknown = await response.json();\n    if (body && typeof body === 'object' && 'detail' in body) {\n      detail = String((body as { detail: unknown }).detail);\n    }\n  } catch {\n    // non-JSON error body; status alone tells the story\n  }\n  return new CollabTokenError(response.status, detail || fallback);\n}\n\n/**\n * Trim a nested Athena endpoint back to the API origin. Accepts the\n * AthenaProvider `backendUrl` (`…/api/assistant-ui`), the sandbox\n * `ATHENA_API_URL` convention (`…/api/v0`), or a bare origin.\n */\nexport function getAthenaApiBaseUrl(backendUrl: string): string {\n  return backendUrl\n    .replace(/\\/api\\/assistant-ui\\/?$/, '')\n    .replace(/\\/api\\/v0\\/?$/, '')\n    .replace(/\\/$/, '');\n}\n\nexport async function mintCollabToken(args: {\n  auth: CollabAuth;\n  assetId: string;\n  access: 'view' | 'edit';\n  signal?: AbortSignal;\n}): Promise<CollabTokenResponse> {\n  const base = getAthenaApiBaseUrl(args.auth.backendUrl);\n  const response = await fetch(\n    `${base}/api/v0/assets/${encodeURIComponent(args.assetId)}/collab-token`,\n    {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        ...getCollabAuthHeaders(args.auth),\n      },\n      body: JSON.stringify({ access: args.access }),\n      signal: args.signal,\n    }\n  );\n  if (!response.ok) {\n    throw await collabErrorFromResponse(\n      response,\n      `Collab token mint failed with status ${response.status}`\n    );\n  }\n  return (await response.json()) as CollabTokenResponse;\n}\n"],"names":[],"mappings":";;;;;AA8BO,MAAM,yBAAyB,MAAM;AAAA,EAG1C,YAAY,QAAgB,SAAiB;AAC3C,UAAM,OAAO;AAHN;AAIP,SAAK,OAAO;AACZ,SAAK,SAAS;AAAA,EAChB;AACF;AAMO,SAAS,qBAAqB,MAA0C;AAC7E,MAAI,KAAK,OAAO;AACd,WAAO,EAAE,eAAe,UAAU,KAAK,KAAK,GAAA;AAAA,EAC9C;AACA,MAAI,KAAK,QAAQ;AACf,WAAO,EAAE,aAAa,KAAK,OAAA;AAAA,EAC7B;AACA,SAAO,CAAA;AACT;AAMA,eAAsB,wBACpB,UACA,UAC2B;AAC3B,MAAI,SAAS;AACb,MAAI;AACF,UAAM,OAAgB,MAAM,SAAS,KAAA;AACrC,QAAI,QAAQ,OAAO,SAAS,YAAY,YAAY,MAAM;AACxD,eAAS,OAAQ,KAA6B,MAAM;AAAA,IACtD;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO,IAAI,iBAAiB,SAAS,QAAQ,UAAU,QAAQ;AACjE;AAOO,SAAS,oBAAoB,YAA4B;AAC9D,SAAO,WACJ,QAAQ,2BAA2B,EAAE,EACrC,QAAQ,iBAAiB,EAAE,EAC3B,QAAQ,OAAO,EAAE;AACtB;AAEA,eAAsB,gBAAgB,MAKL;AAC/B,QAAM,OAAO,oBAAoB,KAAK,KAAK,UAAU;AACrD,QAAM,WAAW,MAAM;AAAA,IACrB,GAAG,IAAI,kBAAkB,mBAAmB,KAAK,OAAO,CAAC;AAAA,IACzD;AAAA,MACE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG,qBAAqB,KAAK,IAAI;AAAA,MAAA;AAAA,MAEnC,MAAM,KAAK,UAAU,EAAE,QAAQ,KAAK,QAAQ;AAAA,MAC5C,QAAQ,KAAK;AAAA,IAAA;AAAA,EACf;AAEF,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,MAAM;AAAA,MACV;AAAA,MACA,wCAAwC,SAAS,MAAM;AAAA,IAAA;AAAA,EAE3D;AACA,SAAQ,MAAM,SAAS,KAAA;AACzB;;;;;;"}

package/dist/collab/mint.d.ts

@@ -29,6 +29,16 @@ export declare class CollabTokenError extends Error {
     readonly status: number;
     constructor(status: number, message: string);
 }
+/**
+ * Credential headers for a public-API call. The per-viewer bearer token wins
+ * over the API key so a viewer never acts with the app's own identity.
+ */
+export declare function getCollabAuthHeaders(auth: CollabAuth): Record<string, string>;
+/**
+ * Turn a non-2xx public-API response into a `CollabTokenError`, carrying the
+ * FastAPI `detail` string when the body has one and the bare status otherwise.
+ */
+export declare function collabErrorFromResponse(response: Response, fallback: string): Promise<CollabTokenError>;
 /**
  * Trim a nested Athena endpoint back to the API origin. Accepts the
  * AthenaProvider `backendUrl` (`…/api/assistant-ui`), the sandbox

package/dist/collab/mint.js

@@ -9,7 +9,7 @@ class CollabTokenError extends Error {
     this.status = status;
   }
 }
-function getAuthHeaders(auth) {
+function getCollabAuthHeaders(auth) {
   if (auth.token) {
     return { Authorization: `Bearer ${auth.token}` };
   }
@@ -18,6 +18,17 @@ function getAuthHeaders(auth) {
   }
   return {};
 }
+async function collabErrorFromResponse(response, fallback) {
+  let detail = "";
+  try {
+    const body = await response.json();
+    if (body && typeof body === "object" && "detail" in body) {
+      detail = String(body.detail);
+    }
+  } catch {
+  }
+  return new CollabTokenError(response.status, detail || fallback);
+}
 function getAthenaApiBaseUrl(backendUrl) {
   return backendUrl.replace(/\/api\/assistant-ui\/?$/, "").replace(/\/api\/v0\/?$/, "").replace(/\/$/, "");
 }
@@ -29,31 +40,25 @@ async function mintCollabToken(args) {
       method: "POST",
       headers: {
         "Content-Type": "application/json",
-        ...getAuthHeaders(args.auth)
+        ...getCollabAuthHeaders(args.auth)
       },
       body: JSON.stringify({ access: args.access }),
       signal: args.signal
     }
   );
   if (!response.ok) {
-    let detail = "";
-    try {
-      const body = await response.json();
-      if (body && typeof body === "object" && "detail" in body) {
-        detail = String(body.detail);
-      }
-    } catch {
-    }
-    throw new CollabTokenError(
-      response.status,
-      detail || `Collab token mint failed with status ${response.status}`
+    throw await collabErrorFromResponse(
+      response,
+      `Collab token mint failed with status ${response.status}`
     );
   }
   return await response.json();
 }
 export {
   CollabTokenError,
+  collabErrorFromResponse,
   getAthenaApiBaseUrl,
+  getCollabAuthHeaders,
   mintCollabToken
 };
 //# sourceMappingURL=mint.js.map

package/dist/collab/mint.js.map

@@ -1 +1 @@
-{"version":3,"file":"mint.js","sources":["../../src/collab/mint.ts"],"sourcesContent":["/**\n * Collab-token mint client for Generic Doc assets.\n *\n * Calls `POST /api/v0/assets/{assetId}/collab-token` — the only public surface\n * that issues Keryx capability tokens, allowlisted server-side to the\n * `generic_doc` asset type and admin-only during the initial rollout. Tokens\n * are room-bound and short-lived; `connectGenericDoc` re-mints automatically\n * before expiry.\n */\n\nexport interface CollabAuth {\n  /** Athena API base or any Athena backend URL (e.g. the AthenaProvider `backendUrl`). */\n  backendUrl: string;\n  /** Personal or sandbox API key. Used when no bearer token is provided. */\n  apiKey?: string;\n  /** Per-viewer bearer token. Takes precedence over the API key. */\n  token?: string | null;\n}\n\nexport interface CollabTokenResponse {\n  token: string;\n  access_type: 'r' | 'rw';\n  expires_at_ms: number;\n  ws_url: string;\n  rest_url: string;\n  org: string;\n  doc_id: string;\n  branch: string;\n}\n\nexport class CollabTokenError extends Error {\n  readonly status: number;\n\n  constructor(status: number, message: string) {\n    super(message);\n    this.name = 'CollabTokenError';\n    this.status = status;\n  }\n}\n\nfunction getAuthHeaders(auth: CollabAuth): Record<string, string> {\n  if (auth.token) {\n    return { Authorization: `Bearer ${auth.token}` };\n  }\n  if (auth.apiKey) {\n    return { 'X-API-KEY': auth.apiKey };\n  }\n  return {};\n}\n\n/**\n * Trim a nested Athena endpoint back to the API origin. Accepts the\n * AthenaProvider `backendUrl` (`…/api/assistant-ui`), the sandbox\n * `ATHENA_API_URL` convention (`…/api/v0`), or a bare origin.\n */\nexport function getAthenaApiBaseUrl(backendUrl: string): string {\n  return backendUrl\n    .replace(/\\/api\\/assistant-ui\\/?$/, '')\n    .replace(/\\/api\\/v0\\/?$/, '')\n    .replace(/\\/$/, '');\n}\n\nexport async function mintCollabToken(args: {\n  auth: CollabAuth;\n  assetId: string;\n  access: 'view' | 'edit';\n  signal?: AbortSignal;\n}): Promise<CollabTokenResponse> {\n  const base = getAthenaApiBaseUrl(args.auth.backendUrl);\n  const response = await fetch(\n    `${base}/api/v0/assets/${encodeURIComponent(args.assetId)}/collab-token`,\n    {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        ...getAuthHeaders(args.auth),\n      },\n      body: JSON.stringify({ access: args.access }),\n      signal: args.signal,\n    }\n  );\n  if (!response.ok) {\n    let detail = '';\n    try {\n      const body: unknown = await response.json();\n      if (body && typeof body === 'object' && 'detail' in body) {\n        detail = String((body as { detail: unknown }).detail);\n      }\n    } catch {\n      // non-JSON error body; status alone tells the story\n    }\n    throw new CollabTokenError(\n      response.status,\n      detail || `Collab token mint failed with status ${response.status}`\n    );\n  }\n  return (await response.json()) as CollabTokenResponse;\n}\n"],"names":[],"mappings":";;;AA8BO,MAAM,yBAAyB,MAAM;AAAA,EAG1C,YAAY,QAAgB,SAAiB;AAC3C,UAAM,OAAO;AAHN;AAIP,SAAK,OAAO;AACZ,SAAK,SAAS;AAAA,EAChB;AACF;AAEA,SAAS,eAAe,MAA0C;AAChE,MAAI,KAAK,OAAO;AACd,WAAO,EAAE,eAAe,UAAU,KAAK,KAAK,GAAA;AAAA,EAC9C;AACA,MAAI,KAAK,QAAQ;AACf,WAAO,EAAE,aAAa,KAAK,OAAA;AAAA,EAC7B;AACA,SAAO,CAAA;AACT;AAOO,SAAS,oBAAoB,YAA4B;AAC9D,SAAO,WACJ,QAAQ,2BAA2B,EAAE,EACrC,QAAQ,iBAAiB,EAAE,EAC3B,QAAQ,OAAO,EAAE;AACtB;AAEA,eAAsB,gBAAgB,MAKL;AAC/B,QAAM,OAAO,oBAAoB,KAAK,KAAK,UAAU;AACrD,QAAM,WAAW,MAAM;AAAA,IACrB,GAAG,IAAI,kBAAkB,mBAAmB,KAAK,OAAO,CAAC;AAAA,IACzD;AAAA,MACE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG,eAAe,KAAK,IAAI;AAAA,MAAA;AAAA,MAE7B,MAAM,KAAK,UAAU,EAAE,QAAQ,KAAK,QAAQ;AAAA,MAC5C,QAAQ,KAAK;AAAA,IAAA;AAAA,EACf;AAEF,MAAI,CAAC,SAAS,IAAI;AAChB,QAAI,SAAS;AACb,QAAI;AACF,YAAM,OAAgB,MAAM,SAAS,KAAA;AACrC,UAAI,QAAQ,OAAO,SAAS,YAAY,YAAY,MAAM;AACxD,iBAAS,OAAQ,KAA6B,MAAM;AAAA,MACtD;AAAA,IACF,QAAQ;AAAA,IAER;AACA,UAAM,IAAI;AAAA,MACR,SAAS;AAAA,MACT,UAAU,wCAAwC,SAAS,MAAM;AAAA,IAAA;AAAA,EAErE;AACA,SAAQ,MAAM,SAAS,KAAA;AACzB;"}
+{"version":3,"file":"mint.js","sources":["../../src/collab/mint.ts"],"sourcesContent":["/**\n * Collab-token mint client for Generic Doc assets.\n *\n * Calls `POST /api/v0/assets/{assetId}/collab-token` — the only public surface\n * that issues Keryx capability tokens, allowlisted server-side to the\n * `generic_doc` asset type and admin-only during the initial rollout. Tokens\n * are room-bound and short-lived; `connectGenericDoc` re-mints automatically\n * before expiry.\n */\n\nexport interface CollabAuth {\n  /** Athena API base or any Athena backend URL (e.g. the AthenaProvider `backendUrl`). */\n  backendUrl: string;\n  /** Personal or sandbox API key. Used when no bearer token is provided. */\n  apiKey?: string;\n  /** Per-viewer bearer token. Takes precedence over the API key. */\n  token?: string | null;\n}\n\nexport interface CollabTokenResponse {\n  token: string;\n  access_type: 'r' | 'rw';\n  expires_at_ms: number;\n  ws_url: string;\n  rest_url: string;\n  org: string;\n  doc_id: string;\n  branch: string;\n}\n\nexport class CollabTokenError extends Error {\n  readonly status: number;\n\n  constructor(status: number, message: string) {\n    super(message);\n    this.name = 'CollabTokenError';\n    this.status = status;\n  }\n}\n\n/**\n * Credential headers for a public-API call. The per-viewer bearer token wins\n * over the API key so a viewer never acts with the app's own identity.\n */\nexport function getCollabAuthHeaders(auth: CollabAuth): Record<string, string> {\n  if (auth.token) {\n    return { Authorization: `Bearer ${auth.token}` };\n  }\n  if (auth.apiKey) {\n    return { 'X-API-KEY': auth.apiKey };\n  }\n  return {};\n}\n\n/**\n * Turn a non-2xx public-API response into a `CollabTokenError`, carrying the\n * FastAPI `detail` string when the body has one and the bare status otherwise.\n */\nexport async function collabErrorFromResponse(\n  response: Response,\n  fallback: string\n): Promise<CollabTokenError> {\n  let detail = '';\n  try {\n    const body: unknown = await response.json();\n    if (body && typeof body === 'object' && 'detail' in body) {\n      detail = String((body as { detail: unknown }).detail);\n    }\n  } catch {\n    // non-JSON error body; status alone tells the story\n  }\n  return new CollabTokenError(response.status, detail || fallback);\n}\n\n/**\n * Trim a nested Athena endpoint back to the API origin. Accepts the\n * AthenaProvider `backendUrl` (`…/api/assistant-ui`), the sandbox\n * `ATHENA_API_URL` convention (`…/api/v0`), or a bare origin.\n */\nexport function getAthenaApiBaseUrl(backendUrl: string): string {\n  return backendUrl\n    .replace(/\\/api\\/assistant-ui\\/?$/, '')\n    .replace(/\\/api\\/v0\\/?$/, '')\n    .replace(/\\/$/, '');\n}\n\nexport async function mintCollabToken(args: {\n  auth: CollabAuth;\n  assetId: string;\n  access: 'view' | 'edit';\n  signal?: AbortSignal;\n}): Promise<CollabTokenResponse> {\n  const base = getAthenaApiBaseUrl(args.auth.backendUrl);\n  const response = await fetch(\n    `${base}/api/v0/assets/${encodeURIComponent(args.assetId)}/collab-token`,\n    {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        ...getCollabAuthHeaders(args.auth),\n      },\n      body: JSON.stringify({ access: args.access }),\n      signal: args.signal,\n    }\n  );\n  if (!response.ok) {\n    throw await collabErrorFromResponse(\n      response,\n      `Collab token mint failed with status ${response.status}`\n    );\n  }\n  return (await response.json()) as CollabTokenResponse;\n}\n"],"names":[],"mappings":";;;AA8BO,MAAM,yBAAyB,MAAM;AAAA,EAG1C,YAAY,QAAgB,SAAiB;AAC3C,UAAM,OAAO;AAHN;AAIP,SAAK,OAAO;AACZ,SAAK,SAAS;AAAA,EAChB;AACF;AAMO,SAAS,qBAAqB,MAA0C;AAC7E,MAAI,KAAK,OAAO;AACd,WAAO,EAAE,eAAe,UAAU,KAAK,KAAK,GAAA;AAAA,EAC9C;AACA,MAAI,KAAK,QAAQ;AACf,WAAO,EAAE,aAAa,KAAK,OAAA;AAAA,EAC7B;AACA,SAAO,CAAA;AACT;AAMA,eAAsB,wBACpB,UACA,UAC2B;AAC3B,MAAI,SAAS;AACb,MAAI;AACF,UAAM,OAAgB,MAAM,SAAS,KAAA;AACrC,QAAI,QAAQ,OAAO,SAAS,YAAY,YAAY,MAAM;AACxD,eAAS,OAAQ,KAA6B,MAAM;AAAA,IACtD;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO,IAAI,iBAAiB,SAAS,QAAQ,UAAU,QAAQ;AACjE;AAOO,SAAS,oBAAoB,YAA4B;AAC9D,SAAO,WACJ,QAAQ,2BAA2B,EAAE,EACrC,QAAQ,iBAAiB,EAAE,EAC3B,QAAQ,OAAO,EAAE;AACtB;AAEA,eAAsB,gBAAgB,MAKL;AAC/B,QAAM,OAAO,oBAAoB,KAAK,KAAK,UAAU;AACrD,QAAM,WAAW,MAAM;AAAA,IACrB,GAAG,IAAI,kBAAkB,mBAAmB,KAAK,OAAO,CAAC;AAAA,IACzD;AAAA,MACE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG,qBAAqB,KAAK,IAAI;AAAA,MAAA;AAAA,MAEnC,MAAM,KAAK,UAAU,EAAE,QAAQ,KAAK,QAAQ;AAAA,MAC5C,QAAQ,KAAK;AAAA,IAAA;AAAA,EACf;AAEF,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,MAAM;AAAA,MACV;AAAA,MACA,wCAAwC,SAAS,MAAM;AAAA,IAAA;AAAA,EAE3D;AACA,SAAQ,MAAM,SAAS,KAAA;AACzB;"}