@awesomate/sdk 0.2.0 → 0.4.0

package/README.md

@@ -77,6 +77,37 @@ Every failure is an `AwesomateError` with a `code`: `unauthenticated`, `forbidde
 ## Keep the token on a server
 
 The token is your account's hosting token. Use it in a server, a script or a scheduled job, never
-in a browser. Sign-in for your own app's users comes in a later version.
+in a browser. For a browser, sign your app's own users in (below).
+
+## Your app's users sign in (Pro and above)
+
+Set the app up first (Claude Code: `awesomate_crm_apps`): its name, the origins it runs on, and
+whether anyone may sign up or only people you add. That gives you a publishable key, which is not a
+secret. Then say who may read and change each kind (`awesomate_crm_kinds`, `set_access`), for
+example members read jobs whose customer is them and the memos on those jobs.
+
+```ts
+import { createAppClient } from '@awesomate/sdk';
+
+const app = createAppClient({ publishableKey: 'pk_...' });
+
+// The sign-in page: an email link, no password. The answer is the same for any address.
+await app.auth.signInWithLink(email, { redirectTo: `${location.origin}/signed-in` });
+
+// /signed-in: exchanges the link for a session and clears it from the address bar.
+const user = await app.auth.completeSignIn();
+
+// Everywhere else: the same calls as the server client, as this person.
+const { rows } = await app.query('job', { orderBy: ['created_at', 'desc'] });
+await app.write('forum_post', { body: 'Booked for Tuesday' }, { links: { job: rows[0].id } });
+app.auth.onChange((u) => render(u));
+await app.auth.signOut();
+```
+
+The rules are kept in your own database, which applies them to every read and write, so a mistake
+in the app cannot show anyone more than their role allows. A disabled person is refused on their
+next call. Sessions are kept in `localStorage`; in a Capacitor app pass `storage` (Preferences) and
+call `completeSignIn(url)` from the deep link that opened the app. Your own server can verify
+`await app.auth.accessToken()` against `https://hub.awesomate.ai/api/sdk/v1/jwks.json`.
 
 MIT licence.

package/dist/index.d.ts

@@ -6,16 +6,44 @@
  *   const db = createClient({ token: process.env.AWESOMATE_TOKEN! });
  *   const { rows, next } = await db.query('contact', { where: { created_at: { gte: '$YEAR_BEGIN' } }, limit: 50 });
  *
+ *   const open = await db.run('open_jobs_in', { suburb: 'Carindale' }); // a saved query, by name
+ *   await db.call('log_visit', { customer, title: 'Possum in the roof' }); // a write recipe, one transaction
+ *
+ * In the browser, an app's own users sign in by email link and read only what the account's
+ * access rules let them (Pro and above):
+ *   const app = createAppClient({ publishableKey: 'pk_...' });
+ *   await app.auth.signInWithLink(email, { redirectTo: `${location.origin}/signed-in` });
+ *   await app.auth.completeSignIn();               // on /signed-in
+ *   const { rows } = await app.query('job', {});    // their jobs only
+ *
  * The account's token (a hosting PAT with crm:read) is a secret: use it on a server, never in a
- * browser. End-user sign-in for browser apps comes in a later version. Writing app data (kinds and
- * their records) needs crm:write, Support Plus and above.
+ * browser. End-user sign-in for browser apps comes in a later version. Reading and running saved
+ * queries works on every plan; writing app data (kinds, records, saved queries, recipes) needs
+ * crm:write, Support Plus and above.
  */
-export declare const VERSION = "0.2.0";
+export declare const VERSION = "0.4.0";
 /** Augmented by the generated awesomate.d.ts, so each kind's rows are typed. */
 export interface Kinds {
 }
 export type KindName = [keyof Kinds] extends [never] ? string : Extract<keyof Kinds, string>;
 export type RowOf<K> = K extends keyof Kinds ? Kinds[K] : Record<string, unknown>;
+/** Augmented by the generated awesomate.d.ts: each saved query's params and row. */
+export interface Queries {
+}
+/** Augmented by the generated awesomate.d.ts: each write recipe's args. */
+export interface Recipes {
+}
+export type QueryName = [keyof Queries] extends [never] ? string : Extract<keyof Queries, string>;
+export type ParamsOf<Q> = Q extends keyof Queries ? (Queries[Q] extends {
+    params: infer P;
+} ? P : never) : Record<string, unknown>;
+export type QueryRowOf<Q> = Q extends keyof Queries ? (Queries[Q] extends {
+    row: infer R;
+} ? R : never) : Record<string, unknown>;
+export type RecipeName = [keyof Recipes] extends [never] ? string : Extract<keyof Recipes, string>;
+export type ArgsOf<R> = R extends keyof Recipes ? (Recipes[R] extends {
+    args: infer A;
+} ? A : never) : Record<string, unknown>;
 type TextOps<V extends string> = {
     eq?: V | null;
     neq?: V | null;
@@ -123,7 +151,7 @@ export declare class AwesomateClient {
     private readonly base;
     private readonly doFetch;
     constructor(opts: ClientOptions);
-    private call;
+    private request;
     /** The kinds this token can read, their columns, operators and examples. */
     schema(): Promise<{
         kinds: Array<{
@@ -160,6 +188,34 @@ export declare class AwesomateClient {
     write<K extends KindName>(kind: K, data: Partial<RowOf<K>> | Record<string, unknown>, options?: WriteOptions): Promise<string>;
     /** Archive a record: it leaves every read and is kept for a restore. */
     archive<K extends KindName>(kind: K, id: string): Promise<void>;
+    /** The saved queries on this account. */
+    queries(): Promise<SavedQueryDescription[]>;
+    /**
+     * Save a query by name (saving a name again replaces it). The spec is the query() grammar on one
+     * kind, with {"$param": "<name>"} where a caller's value goes; it is compiled before it is
+     * stored, so a column it cannot read is refused now rather than when it runs.
+     */
+    saveQuery(spec: SavedQuerySpec): Promise<SavedQueryDescription>;
+    archiveQuery(key: string): Promise<void>;
+    /** Run a saved query with its params. An optional param left out drops its condition. */
+    run<Q extends QueryName>(query: Q, params?: ParamsOf<Q>, options?: {
+        limit?: number;
+        after?: string;
+        tz?: string;
+    }): Promise<Page<QueryRowOf<Q>>>;
+    /** The write recipes on this account. */
+    recipes(): Promise<RecipeDescription[]>;
+    /**
+     * Save a write recipe: up to 10 write_record / archive_record steps run in one transaction.
+     * {"$param": "<name>"} takes a caller's value, {"$step": "<as>"} the id an earlier step wrote.
+     */
+    saveRecipe(spec: RecipeSpec): Promise<RecipeDescription>;
+    archiveRecipe(key: string): Promise<void>;
+    /**
+     * Run a write recipe. Every step commits or none does; a refusal names the step and the field.
+     * Never retried: a write that may have landed is not safe to send twice.
+     */
+    call<R extends RecipeName>(recipe: R, args?: ArgsOf<R>): Promise<RecipeResult>;
     /** Grouped numbers (counts, sums) in the Business Data API's shape. */
     aggregate(request: {
         measures: Array<{
@@ -227,5 +283,150 @@ export interface WriteOptions {
     /** Set a link by its key ('<id>'), or end it (null). */
     links?: Record<string, string | null>;
 }
+export type ParamType = 'text' | 'number' | 'date' | 'datetime' | 'boolean' | 'uuid' | 'text_list' | 'number_list';
+export interface ParamSpec {
+    name: string;
+    /** Default text. */
+    type?: ParamType;
+    required?: boolean;
+    default?: unknown;
+    label?: string;
+}
+/** Where a caller's value goes in a saved query or a recipe. */
+export type Param = {
+    $param: string;
+};
+export interface SavedQuerySpec {
+    key: string;
+    label: string;
+    description?: string;
+    /** 'contact' or an app kind. */
+    kind: string;
+    spec: {
+        where?: Record<string, unknown>;
+        orderBy?: Array<[string, 'asc' | 'desc']>;
+        select?: string[];
+        limit?: number;
+    };
+    params?: ParamSpec[];
+}
+export interface SavedQueryDescription extends Required<Omit<SavedQuerySpec, 'description' | 'params'>> {
+    description: string | null;
+    params: ParamSpec[];
+    updated_at: string;
+}
+export type RecipeStep = {
+    op: 'write_record';
+    kind: string;
+    id?: Param | {
+        $step: string;
+    };
+    as?: string;
+    data?: Record<string, unknown>;
+    links?: Record<string, unknown>;
+} | {
+    op: 'archive_record';
+    kind: string;
+    id: Param | {
+        $step: string;
+    };
+};
+export interface RecipeSpec {
+    key: string;
+    label: string;
+    description?: string;
+    params?: ParamSpec[];
+    steps: RecipeStep[];
+}
+export interface RecipeDescription extends Required<Omit<RecipeSpec, 'description' | 'params'>> {
+    description: string | null;
+    params: ParamSpec[];
+    updated_at: string;
+}
+export interface RecipeResult {
+    /** The id each step named with `as` wrote. */
+    ids: Record<string, string>;
+    /** Every record the recipe wrote or archived, in step order. */
+    records: string[];
+}
+/** Where a session is kept: localStorage, Capacitor Preferences, or anything with these three. */
+export interface SessionStorageLike {
+    getItem(key: string): string | null | Promise<string | null>;
+    setItem(key: string, value: string): void | Promise<void>;
+    removeItem(key: string): void | Promise<void>;
+}
+export interface AppUser {
+    id: string;
+    email: string;
+    /** owner, staff, member or one of the account's own; the database re-reads it on every call */
+    role: string;
+    contact_id: string | null;
+}
+export interface AppClientOptions {
+    /** The app's publishable key (pk_...). Not a secret: it belongs in browser code. */
+    publishableKey: string;
+    baseUrl?: string;
+    fetch?: typeof fetch;
+    /** Default: localStorage in a browser, memory elsewhere. In Capacitor, pass Preferences. */
+    storage?: SessionStorageLike;
+    /** Default: one per publishable key. */
+    storageKey?: string;
+}
+/** The sign-in token a link carries, from a URL's fragment (#awesomate_token=...), or null. */
+export declare function signInTokenFrom(url: string): string | null;
+export declare class AwesomateAppClient {
+    private readonly opts;
+    private readonly base;
+    private readonly doFetch;
+    private readonly storage;
+    private readonly key;
+    private session;
+    private refreshing;
+    private readonly listeners;
+    constructor(opts: AppClientOptions);
+    readonly auth: {
+        /** Email a sign-in link. The answer is the same whether or not the address can sign in. */
+        signInWithLink: (email: string, options: {
+            redirectTo: string;
+        }) => Promise<{
+            sent: boolean;
+            message: string;
+        }>;
+        /**
+         * Finish signing in from the link: the current page's address by default, or a URL a deep link
+         * opened (Capacitor). Returns the user, or null when the address carries no sign-in. The
+         * token is removed from the browser's address bar.
+         */
+        completeSignIn: (url?: string) => Promise<AppUser | null>;
+        /** The signed-in user, or null. */
+        user: () => Promise<AppUser | null>;
+        /** Called with the user on sign-in and null on sign-out (including a refresh that was refused). */
+        onChange: (listener: (user: AppUser | null) => void) => (() => void);
+        signOut: () => Promise<void>;
+        /** A current access token, for the app's own server to verify against the JWKS. */
+        accessToken: () => Promise<string | null>;
+    };
+    private request;
+    private read;
+    private load;
+    private save;
+    private clear;
+    /** A session whose access token has at least half a minute left, refreshing if not. */
+    private current;
+    /** One refresh at a time per client; a refresh another tab already did is picked up from storage. */
+    private refresh;
+    /** A data call as the signed-in user: refused once (a disable, a key change), it refreshes and tries again; refused twice, it signs out. */
+    private data;
+    query<K extends KindName, S extends keyof RowOf<K> = keyof RowOf<K>>(kind: K, options?: QueryOptions<RowOf<K>, S>): Promise<Omit<Page<Pick<RowOf<K>, S>>, 'hidden'>>;
+    queryAll<K extends KindName, S extends keyof RowOf<K> = keyof RowOf<K>>(kind: K, options?: Omit<QueryOptions<RowOf<K>, S>, 'after'> & {
+        maxRows?: number;
+    }): AsyncGenerator<Pick<RowOf<K>, S>>;
+    /** One record by id, or null when there is none this user may read. */
+    get<K extends KindName>(kind: K, id: string): Promise<RowOf<K> | null>;
+    /** Create a record (returns its id) or change one with options.id, inside the kind's write rule for this user. */
+    write<K extends KindName>(kind: K, data: Partial<RowOf<K>> | Record<string, unknown>, options?: WriteOptions): Promise<string>;
+    archive<K extends KindName>(kind: K, id: string): Promise<void>;
+}
+export declare function createAppClient(options: AppClientOptions): AwesomateAppClient;
 export declare function createClient(options: ClientOptions): AwesomateClient;
 export {};

package/dist/index.js

@@ -6,11 +6,22 @@
  *   const db = createClient({ token: process.env.AWESOMATE_TOKEN! });
  *   const { rows, next } = await db.query('contact', { where: { created_at: { gte: '$YEAR_BEGIN' } }, limit: 50 });
  *
+ *   const open = await db.run('open_jobs_in', { suburb: 'Carindale' }); // a saved query, by name
+ *   await db.call('log_visit', { customer, title: 'Possum in the roof' }); // a write recipe, one transaction
+ *
+ * In the browser, an app's own users sign in by email link and read only what the account's
+ * access rules let them (Pro and above):
+ *   const app = createAppClient({ publishableKey: 'pk_...' });
+ *   await app.auth.signInWithLink(email, { redirectTo: `${location.origin}/signed-in` });
+ *   await app.auth.completeSignIn();               // on /signed-in
+ *   const { rows } = await app.query('job', {});    // their jobs only
+ *
  * The account's token (a hosting PAT with crm:read) is a secret: use it on a server, never in a
- * browser. End-user sign-in for browser apps comes in a later version. Writing app data (kinds and
- * their records) needs crm:write, Support Plus and above.
+ * browser. End-user sign-in for browser apps comes in a later version. Reading and running saved
+ * queries works on every plan; writing app data (kinds, records, saved queries, recipes) needs
+ * crm:write, Support Plus and above.
  */
-export const VERSION = '0.2.0';
+export const VERSION = '0.4.0';
 const DEFAULT_BASE = 'https://hub.awesomate.ai';
 export class AwesomateError extends Error {
     code;
@@ -58,7 +69,7 @@ export class AwesomateClient {
         if (!this.doFetch)
             throw new Error('No fetch available: use Node 18 or later, or pass fetch.');
     }
-    async call(method, path, body, retry = true) {
+    async request(method, path, body, retry = true) {
         const res = await this.doFetch(`${this.base}${path}`, {
             method,
             headers: {
@@ -81,20 +92,20 @@ export class AwesomateClient {
         // The field list changed while the read ran (the view is rebuilt on every field edit): a read
         // is safe to run again, once.
         if (code === 'conflict' && retry)
-            return this.call(method, path, body, false);
+            return this.request(method, path, body, false);
         const message = typeof json.error === 'string' ? json.error : `The hub answered ${res.status}.`;
         throw new AwesomateError(code, message, res.status, typeof json.field === 'string' ? json.field : undefined, server);
     }
     /** The kinds this token can read, their columns, operators and examples. */
     schema() {
-        return this.call('GET', '/api/my-crm/v1/rows/schema');
+        return this.request('GET', '/api/my-crm/v1/rows/schema');
     }
     /** The readable kinds as a TypeScript file (what the types command writes). */
     types() {
-        return this.call('GET', '/api/my-crm/v1/rows/types');
+        return this.request('GET', '/api/my-crm/v1/rows/types');
     }
     async query(kind, options = {}) {
-        const r = await this.call('POST', '/api/my-crm/v1/rows/query', { kind, ...options });
+        const r = await this.request('POST', '/api/my-crm/v1/rows/query', { kind, ...options });
         return { rows: r.rows, next: r.next, count: r.count, applied: r.applied, hidden: r.hidden, asAt: r.as_at };
     }
     /** Every matching row, a page at a time. maxRows guards against reading a whole list by accident. */
@@ -116,7 +127,7 @@ export class AwesomateClient {
     async get(kind, id, options = {}) {
         try {
             const qs = options.tz ? `?tz=${encodeURIComponent(options.tz)}` : '';
-            const r = await this.call('GET', `/api/my-crm/v1/rows/${encodeURIComponent(kind)}/${encodeURIComponent(id)}${qs}`);
+            const r = await this.request('GET', `/api/my-crm/v1/rows/${encodeURIComponent(kind)}/${encodeURIComponent(id)}${qs}`);
             return r.row;
         }
         catch (err) {
@@ -127,27 +138,294 @@ export class AwesomateClient {
     }
     /** The app kinds this account has defined. */
     async kinds() {
-        return (await this.call('GET', '/api/my-crm/v1/kinds')).kinds;
+        return (await this.request('GET', '/api/my-crm/v1/kinds')).kinds;
     }
     /** Define an app kind (a table an app keeps). No migration: registry rows and generated views. */
     async defineKind(spec) {
-        return (await this.call('POST', '/api/my-crm/v1/kinds', spec)).kind;
+        return (await this.request('POST', '/api/my-crm/v1/kinds', spec)).kind;
     }
     /** Create a record (returns its id), or change one with options.id. Every value is checked against the kind. */
     async write(kind, data, options = {}) {
-        const r = await this.call('POST', '/api/my-crm/v1/call', {
+        const r = await this.request('POST', '/api/my-crm/v1/call', {
             fn: 'write_record', args: { kind, data, links: options.links ?? {}, ...(options.id ? { id: options.id } : {}) },
         }, false);
         return r.result.id;
     }
     /** Archive a record: it leaves every read and is kept for a restore. */
     async archive(kind, id) {
-        await this.call('POST', '/api/my-crm/v1/call', { fn: 'archive_record', args: { kind, id } }, false);
+        await this.request('POST', '/api/my-crm/v1/call', { fn: 'archive_record', args: { kind, id } }, false);
+    }
+    /** The saved queries on this account. */
+    async queries() {
+        return (await this.request('GET', '/api/my-crm/v1/queries')).queries;
+    }
+    /**
+     * Save a query by name (saving a name again replaces it). The spec is the query() grammar on one
+     * kind, with {"$param": "<name>"} where a caller's value goes; it is compiled before it is
+     * stored, so a column it cannot read is refused now rather than when it runs.
+     */
+    async saveQuery(spec) {
+        return (await this.request('POST', '/api/my-crm/v1/queries', spec, false)).query;
+    }
+    async archiveQuery(key) {
+        await this.request('DELETE', `/api/my-crm/v1/queries/${encodeURIComponent(key)}`, undefined, false);
+    }
+    /** Run a saved query with its params. An optional param left out drops its condition. */
+    async run(query, params = {}, options = {}) {
+        const r = await this.request('POST', `/api/my-crm/v1/queries/${encodeURIComponent(query)}/run`, { params, ...options });
+        return { rows: r.rows, next: r.next, count: r.count, applied: r.applied, hidden: r.hidden, asAt: r.as_at };
+    }
+    /** The write recipes on this account. */
+    async recipes() {
+        return (await this.request('GET', '/api/my-crm/v1/recipes')).recipes;
+    }
+    /**
+     * Save a write recipe: up to 10 write_record / archive_record steps run in one transaction.
+     * {"$param": "<name>"} takes a caller's value, {"$step": "<as>"} the id an earlier step wrote.
+     */
+    async saveRecipe(spec) {
+        return (await this.request('POST', '/api/my-crm/v1/recipes', spec, false)).recipe;
+    }
+    async archiveRecipe(key) {
+        await this.request('DELETE', `/api/my-crm/v1/recipes/${encodeURIComponent(key)}`, undefined, false);
+    }
+    /**
+     * Run a write recipe. Every step commits or none does; a refusal names the step and the field.
+     * Never retried: a write that may have landed is not safe to send twice.
+     */
+    async call(recipe, args = {}) {
+        return (await this.request('POST', '/api/my-crm/v1/call', { fn: recipe, args }, false)).result;
     }
     /** Grouped numbers (counts, sums) in the Business Data API's shape. */
     aggregate(request) {
-        return this.call('POST', '/api/my-crm/v1/data/query', request);
+        return this.request('POST', '/api/my-crm/v1/data/query', request);
+    }
+}
+function memoryStorage() {
+    const m = new Map();
+    return { getItem: (k) => m.get(k) ?? null, setItem: (k, v) => { m.set(k, v); }, removeItem: (k) => { m.delete(k); } };
+}
+function browserStorage() {
+    try {
+        if (typeof localStorage !== 'undefined') {
+            localStorage.getItem('awesomate.probe');
+            return localStorage;
+        }
+    }
+    catch { /* storage blocked: a private window, a sandboxed frame */ }
+    return memoryStorage();
+}
+/** The sign-in token a link carries, from a URL's fragment (#awesomate_token=...), or null. */
+export function signInTokenFrom(url) {
+    const hash = url.includes('#') ? url.slice(url.indexOf('#') + 1) : '';
+    const v = new URLSearchParams(hash).get('awesomate_token');
+    return v && v.length >= 20 ? v : null;
+}
+const REFRESH_EARLY_MS = 30_000;
+export class AwesomateAppClient {
+    opts;
+    base;
+    doFetch;
+    storage;
+    key;
+    session;
+    refreshing = null;
+    listeners = new Set();
+    constructor(opts) {
+        this.opts = opts;
+        if (!opts?.publishableKey?.startsWith('pk_'))
+            throw new Error('createAppClient needs the app\'s publishable key (pk_...).');
+        if (/^amt_(pat|bs)_/.test(opts.publishableKey))
+            throw new Error('That is the account\'s own token. Never put it in browser code; use the app\'s publishable key.');
+        this.base = (opts.baseUrl ?? DEFAULT_BASE).replace(/\/+$/, '');
+        this.doFetch = opts.fetch ?? globalThis.fetch?.bind(globalThis);
+        if (!this.doFetch)
+            throw new Error('No fetch available.');
+        this.storage = opts.storage ?? browserStorage();
+        this.key = opts.storageKey ?? `awesomate.session.${opts.publishableKey.slice(-10)}`;
+    }
+    auth = {
+        /** Email a sign-in link. The answer is the same whether or not the address can sign in. */
+        signInWithLink: (email, options) => this.request('POST', '/auth/magic-link', { email, redirect_to: options.redirectTo }),
+        /**
+         * Finish signing in from the link: the current page's address by default, or a URL a deep link
+         * opened (Capacitor). Returns the user, or null when the address carries no sign-in. The
+         * token is removed from the browser's address bar.
+         */
+        completeSignIn: async (url) => {
+            const here = typeof location !== 'undefined' ? location.href : '';
+            const token = signInTokenFrom(url ?? here);
+            if (!token)
+                return null;
+            if (!url && typeof history !== 'undefined' && typeof location !== 'undefined') {
+                history.replaceState(history.state, '', location.pathname + location.search);
+            }
+            return (await this.save(await this.request('POST', '/auth/verify', { token }))).user;
+        },
+        /** The signed-in user, or null. */
+        user: async () => (await this.load())?.user ?? null,
+        /** Called with the user on sign-in and null on sign-out (including a refresh that was refused). */
+        onChange: (listener) => {
+            this.listeners.add(listener);
+            return () => { this.listeners.delete(listener); };
+        },
+        signOut: async () => {
+            const s = await this.load();
+            await this.clear();
+            if (s)
+                await this.request('POST', '/auth/sign-out', { refresh_token: s.refresh_token }).catch(() => undefined);
+        },
+        /** A current access token, for the app's own server to verify against the JWKS. */
+        accessToken: async () => (await this.current())?.access_token ?? null,
+    };
+    async request(method, path, body, token) {
+        const res = await this.doFetch(`${this.base}/api/sdk/v1${path}`, {
+            method,
+            headers: {
+                'x-awesomate-key': this.opts.publishableKey,
+                ...(token ? { authorization: `Bearer ${token}` } : {}),
+                ...(body === undefined ? {} : { 'content-type': 'application/json' }),
+            },
+            body: body === undefined ? undefined : JSON.stringify(body),
+        });
+        if (res.status === 204)
+            return undefined;
+        const text = await res.text();
+        let json = {};
+        try {
+            json = text ? JSON.parse(text) : {};
+        }
+        catch { /* a proxy's error page */ }
+        if (res.ok)
+            return json;
+        const server = typeof json.code === 'string' ? json.code : undefined;
+        const message = typeof json.error === 'string' ? json.error : `The hub answered ${res.status}.`;
+        throw new AwesomateError(errorCode(res.status, server), message, res.status, typeof json.field === 'string' ? json.field : undefined, server);
+    }
+    async read() {
+        try {
+            const raw = await this.storage.getItem(this.key);
+            const s = raw ? JSON.parse(raw) : null;
+            return s?.access_token && s.refresh_token && s.user ? s : null;
+        }
+        catch {
+            return null;
+        }
     }
+    async load() {
+        if (this.session === undefined)
+            this.session = await this.read();
+        return this.session;
+    }
+    async save(r) {
+        const s = { access_token: r.access_token, refresh_token: r.refresh_token, expires_at: Date.now() + r.expires_in * 1000, user: r.user };
+        this.session = s;
+        await this.storage.setItem(this.key, JSON.stringify(s));
+        for (const l of this.listeners)
+            l(s.user);
+        return s;
+    }
+    async clear() {
+        const had = this.session !== null;
+        this.session = null;
+        await this.storage.removeItem(this.key);
+        if (had)
+            for (const l of this.listeners)
+                l(null);
+    }
+    /** A session whose access token has at least half a minute left, refreshing if not. */
+    async current() {
+        const s = await this.load();
+        if (!s)
+            return null;
+        return s.expires_at - Date.now() > REFRESH_EARLY_MS ? s : this.refresh(s);
+    }
+    /** One refresh at a time per client; a refresh another tab already did is picked up from storage. */
+    refresh(s) {
+        if (this.refreshing)
+            return this.refreshing;
+        this.refreshing = (async () => {
+            const stored = await this.read();
+            if (stored && stored.refresh_token !== s.refresh_token && stored.expires_at - Date.now() > REFRESH_EARLY_MS) {
+                this.session = stored;
+                return stored;
+            }
+            try {
+                return await this.save(await this.request('POST', '/auth/refresh', { refresh_token: s.refresh_token }));
+            }
+            catch (err) {
+                if (!(err instanceof AwesomateError) || err.code !== 'unauthenticated')
+                    throw err;
+                const after = await this.read();
+                if (after && after.refresh_token !== s.refresh_token) {
+                    this.session = after;
+                    return after;
+                }
+                await this.clear();
+                return null;
+            }
+        })().finally(() => { this.refreshing = null; });
+        return this.refreshing;
+    }
+    /** A data call as the signed-in user: refused once (a disable, a key change), it refreshes and tries again; refused twice, it signs out. */
+    async data(method, path, body) {
+        let s = await this.current();
+        if (!s)
+            throw new AwesomateError('unauthenticated', 'Sign in first.', 401);
+        try {
+            return await this.request(method, path, body, s.access_token);
+        }
+        catch (err) {
+            if (!(err instanceof AwesomateError) || err.code !== 'unauthenticated')
+                throw err;
+            s = await this.refresh(s);
+            if (!s)
+                throw err;
+            return this.request(method, path, body, s.access_token);
+        }
+    }
+    async query(kind, options = {}) {
+        const r = await this.data('POST', '/rows/query', { kind, ...options });
+        return { rows: r.rows, next: r.next, count: r.count, applied: r.applied, asAt: r.as_at };
+    }
+    async *queryAll(kind, options = {}) {
+        const { maxRows = 10_000, ...rest } = options;
+        let after;
+        let seen = 0;
+        do {
+            const page = await this.query(kind, { limit: 1000, ...rest, ...(after ? { after } : {}) });
+            for (const row of page.rows) {
+                if (seen++ >= maxRows)
+                    return;
+                yield row;
+            }
+            after = page.next ?? undefined;
+        } while (after);
+    }
+    /** One record by id, or null when there is none this user may read. */
+    async get(kind, id) {
+        try {
+            return (await this.data('GET', `/rows/${encodeURIComponent(kind)}/${encodeURIComponent(id)}`)).row;
+        }
+        catch (err) {
+            if (err instanceof AwesomateError && err.code === 'not_found')
+                return null;
+            throw err;
+        }
+    }
+    /** Create a record (returns its id) or change one with options.id, inside the kind's write rule for this user. */
+    async write(kind, data, options = {}) {
+        const r = await this.data('POST', '/call', {
+            fn: 'write_record', args: { kind, data, links: options.links ?? {}, ...(options.id ? { id: options.id } : {}) },
+        });
+        return r.result.id;
+    }
+    async archive(kind, id) {
+        await this.data('POST', '/call', { fn: 'archive_record', args: { kind, id } });
+    }
+}
+export function createAppClient(options) {
+    return new AwesomateAppClient(options);
 }
 export function createClient(options) {
     return new AwesomateClient(options);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@awesomate/sdk",
-  "version": "0.2.0",
-  "description": "Read your own Awesomate data from Node: query and page through your contact list with types generated from your fields",
+  "version": "0.4.0",
+  "description": "Your own Awesomate data from Node and the browser: query contacts and app data with generated types, and sign your app's own users in",
   "license": "MIT",
   "type": "module",
   "publishConfig": {