@brass-build/client 0.1.0

package/dist/api-fetch.d.ts

@@ -0,0 +1,16 @@
+import { BrassError } from './errors.js';
+export interface ApiRequest {
+    method?: 'GET' | 'POST' | 'PATCH' | 'DELETE';
+    path: string;
+    body?: unknown;
+}
+interface ApiFetchOptions {
+    apiBaseUrl: string;
+    getAccessToken: () => Promise<string | null>;
+    getAppAssertion?: () => Promise<string | null>;
+}
+export type ApiFetch = <T>(req: ApiRequest) => Promise<T>;
+export declare function createApiFetch(opts: ApiFetchOptions): ApiFetch;
+export declare function brassErrorFromBody(status: number, parsed: unknown): BrassError;
+export {};
+//# sourceMappingURL=api-fetch.d.ts.map

package/dist/api-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-fetch.d.ts","sourceRoot":"","sources":["../src/api-fetch.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,WAAW,UAAU;IAEzB,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC7C,IAAI,EAAE,MAAM,CAAC;IAEb,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,UAAU,eAAe;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7C,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAChD;AAED,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;AAE1D,wBAAgB,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,QAAQ,CA4C9D;AAeD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,UAAU,CAkB9E"}

package/dist/api-fetch.js

@@ -0,0 +1,97 @@
+// The shared HTTP request wrapper: resolve token → 401 if missing →
+// auth header → app-assertion → fetch → parse → throw `BrassError` on
+// non-2xx → return parsed. Read paths that need the raw status without
+// throwing stay hand-written but still throw `BrassError`.
+import { applyAppAssertionHeader, applyClientVersionHeader } from './api-headers.js';
+import { BrassError } from './errors.js';
+import { fetchWithRetry } from './fetch-retry.js';
+export function createApiFetch(opts) {
+    const baseUrl = opts.apiBaseUrl.replace(/\/$/, '');
+    return async function apiFetch(req) {
+        const token = await opts.getAccessToken();
+        if (!token) {
+            // Reject before fetch: a deterministic 401, no network round-trip.
+            throw new BrassError('Not signed in', { status: 401 });
+        }
+        const headers = { authorization: `Bearer ${token}` };
+        if (req.body !== undefined)
+            headers['content-type'] = 'application/json';
+        applyClientVersionHeader(headers);
+        await applyAppAssertionHeader(headers, opts.getAppAssertion);
+        const method = req.method ?? 'GET';
+        const init = { method, headers };
+        if (req.body !== undefined)
+            init.body = JSON.stringify(req.body);
+        const url = `${baseUrl}${req.path}`;
+        // A GET is idempotent, so ride out a cold-API transient 5xx / 429
+        // (e.g. a 503 while the API scales into a concurrent read burst)
+        // rather than surfacing it as a hard failure; a write is never
+        // replayed here.
+        const response = method === 'GET'
+            ? await fetchWithRetry(() => fetch(url, init))
+            : await fetch(url, init);
+        if (response.status === 204)
+            return undefined;
+        const text = await response.text();
+        let parsed = undefined;
+        if (text) {
+            try {
+                parsed = JSON.parse(text);
+            }
+            catch {
+                // Leave `parsed` undefined; a non-2xx falls back to the generic
+                // message, a 2xx surfaces as the caller's own malformed-body guard.
+            }
+        }
+        if (!response.ok) {
+            throw brassErrorFromBody(response.status, parsed);
+        }
+        return parsed;
+    };
+}
+function isErrorBody(body) {
+    return (typeof body === 'object' &&
+        body !== null &&
+        typeof body.error === 'string');
+}
+// Build the BrassError for a non-2xx response body. Every SDK fetch
+// (apiFetch and the hand-written document open / create paths) throws
+// through here so the server's machine-readable denials, in particular
+// `code: "app_not_installed"`, survive into the error the caller (and
+// the SDK's own install-consent offer) can branch on.
+export function brassErrorFromBody(status, parsed) {
+    const message = isErrorBody(parsed) ? parsed.error : 'Request failed';
+    if (isNotInstalledBody(parsed)) {
+        return new BrassError(message, {
+            status,
+            code: 'app_not_installed',
+            organizationId: parsed.organization_id,
+        });
+    }
+    if (isSchemaConflictBody(parsed)) {
+        const title = parsed['title'];
+        return new BrassError(message, {
+            status,
+            code: 'schema_conflict',
+            ...(typeof title === 'string' ? { title } : {}),
+        });
+    }
+    return new BrassError(message, { status });
+}
+// The platform refuses to join a document this app's declared schema cannot
+// read, so a bookmark or a reload does not silently open one. The message is
+// the server's own line, which the client's dialog renders verbatim rather
+// than composing a reason of its own out of a shape it would have to keep in
+// step with the platform's.
+function isSchemaConflictBody(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        value.code === 'schema_conflict');
+}
+function isNotInstalledBody(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        value.code === 'app_not_installed' &&
+        typeof value.organization_id === 'string');
+}
+//# sourceMappingURL=api-fetch.js.map

package/dist/api-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-fetch.js","sourceRoot":"","sources":["../src/api-fetch.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,sEAAsE;AACtE,uEAAuE;AACvE,2DAA2D;AAE3D,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAkBlD,MAAM,UAAU,cAAc,CAAC,IAAqB;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAEnD,OAAO,KAAK,UAAU,QAAQ,CAAI,GAAe;QAC/C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,mEAAmE;YACnE,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,OAAO,GAA2B,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;QAC7E,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QACzE,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAE7D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QACnC,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC9C,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEjE,MAAM,GAAG,GAAG,GAAG,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACpC,kEAAkE;QAClE,iEAAiE;QACjE,+DAA+D;QAC/D,iBAAiB;QACjB,MAAM,QAAQ,GACZ,MAAM,KAAK,KAAK;YACd,CAAC,CAAC,MAAM,cAAc,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC9C,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAEnD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,MAAM,GAAY,SAAS,CAAC;QAChC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;gBAChE,oEAAoE;YACtE,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,kBAAkB,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,MAAW,CAAC;IACrB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAa;IAChC,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,OAAQ,IAA4B,CAAC,KAAK,KAAK,QAAQ,CACxD,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,sEAAsE;AACtE,uEAAuE;AACvE,sEAAsE;AACtE,sDAAsD;AACtD,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,MAAe;IAChE,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC;IACtE,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,UAAU,CAAC,OAAO,EAAE;YAC7B,MAAM;YACN,IAAI,EAAE,mBAAmB;YACzB,cAAc,EAAE,MAAM,CAAC,eAAe;SACvC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,KAAK,GAAI,MAAkC,CAAC,OAAO,CAAC,CAAC;QAC3D,OAAO,IAAI,UAAU,CAAC,OAAO,EAAE;YAC7B,MAAM;YACN,IAAI,EAAE,iBAAiB;YACvB,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,2EAA2E;AAC3E,6EAA6E;AAC7E,4BAA4B;AAC5B,SAAS,oBAAoB,CAAC,KAAc;IAC1C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACb,KAA4B,CAAC,IAAI,KAAK,iBAAiB,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAc;IAEd,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACb,KAA4B,CAAC,IAAI,KAAK,mBAAmB;QAC1D,OAAQ,KAAuC,CAAC,eAAe,KAAK,QAAQ,CAC7E,CAAC;AACJ,CAAC"}

package/dist/api-headers.d.ts

@@ -0,0 +1,3 @@
+export declare function applyAppAssertionHeader(headers: Record<string, string>, getAppAssertion?: () => Promise<string | null>): Promise<void>;
+export declare function applyClientVersionHeader(headers: Record<string, string>): void;
+//# sourceMappingURL=api-headers.d.ts.map

package/dist/api-headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-headers.d.ts","sourceRoot":"","sources":["../src/api-headers.ts"],"names":[],"mappings":"AAUA,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAC7C,OAAO,CAAC,IAAI,CAAC,CAGf;AASD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAE9E"}

package/dist/api-headers.js

@@ -0,0 +1,25 @@
+import { SDK_CLIENT_ID } from './version.js';
+// Attaches the acting-app assertion as `X-Brass-App-Assertion` when one
+// is available; a no-op when the caller has none.
+//
+// MUST only be applied to requests to the Brass data API. Never attach
+// it to other origins, in particular the presigned snapshot/upload
+// URLs the document path fetches, which must carry no Brass headers (a
+// stray header would also break the presigned signature's allowed-header
+// set).
+export async function applyAppAssertionHeader(headers, getAppAssertion) {
+    const assertion = await getAppAssertion?.();
+    if (assertion)
+        headers['x-brass-app-assertion'] = assertion;
+}
+// Attaches the SDK's version as `x-brass-client` (`sdk/<version>`), the same
+// value reported on /refresh and the WS connect URL, so the server sees the
+// deployed SDK version at the data-API surface too. The minimum-version gate
+// reads it at document open to serve a too-old client an upgrade message
+// (rendered verbatim through `session.error`). Same boundary as the
+// app-assertion header: data API only, never a presigned URL. Unconditional, so the
+// version distribution covers read-only apps that never refresh.
+export function applyClientVersionHeader(headers) {
+    headers['x-brass-client'] = SDK_CLIENT_ID;
+}
+//# sourceMappingURL=api-headers.js.map

package/dist/api-headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-headers.js","sourceRoot":"","sources":["../src/api-headers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,wEAAwE;AACxE,kDAAkD;AAClD,EAAE;AACF,uEAAuE;AACvE,mEAAmE;AACnE,uEAAuE;AACvE,yEAAyE;AACzE,QAAQ;AACR,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAA+B,EAC/B,eAA8C;IAE9C,MAAM,SAAS,GAAG,MAAM,eAAe,EAAE,EAAE,CAAC;IAC5C,IAAI,SAAS;QAAE,OAAO,CAAC,uBAAuB,CAAC,GAAG,SAAS,CAAC;AAC9D,CAAC;AAED,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,yEAAyE;AACzE,oEAAoE;AACpE,oFAAoF;AACpF,iEAAiE;AACjE,MAAM,UAAU,wBAAwB,CAAC,OAA+B;IACtE,OAAO,CAAC,gBAAgB,CAAC,GAAG,aAAa,CAAC;AAC5C,CAAC"}

package/dist/auth-flow.d.ts

@@ -0,0 +1,23 @@
+export interface TokenSet {
+    accessToken: string;
+    idToken: string;
+    expiresAt: number;
+    appAssertion?: string;
+}
+export type RefreshCredential = {
+    kind: 'cookie';
+} | {
+    kind: 'code';
+    code: string;
+} | {
+    kind: 'sessionToken';
+    sessionToken: string;
+};
+export interface RefreshResult {
+    tokens: TokenSet;
+    sessionToken?: string;
+}
+export declare function buildSignInUrl(authBaseUrl: string, appId: string, returnTo: string): string;
+export declare function buildSignedOutOfAppUrl(authBaseUrl: string, appId: string, returnTo: string): string;
+export declare function refreshTokens(authBaseUrl: string, appId: string, credential?: RefreshCredential): Promise<RefreshResult | null>;
+//# sourceMappingURL=auth-flow.d.ts.map

package/dist/auth-flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-flow.d.ts","sourceRoot":"","sources":["../src/auth-flow.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,QAAQ;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAIlB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAsBD,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,QAAQ,CAAC;IAIjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAK3F;AAED,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf,MAAM,CAKR;AAED,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,UAAU,GAAE,iBAAsC,GACjD,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAgD/B"}

package/dist/auth-flow.js

@@ -0,0 +1,76 @@
+import { SDK_CLIENT_ID } from './version.js';
+import { fetchWithRetry, RETRY_READ, RETRY_WRITE_503 } from './fetch-retry.js';
+// Fallback token lifetime if a /refresh response omits `expires_in`. The
+// server always sends it (so this is forward-compat robustness), but without a
+// fallback `Date.now() + undefined * 1000` is NaN, and the client's freshness
+// check `expiresAt - leeway > Date.now()` is then always false, so every
+// getAccessToken() would fire a fresh /refresh round-trip. Mirrors the CLI's
+// same guard.
+const DEFAULT_TOKEN_TTL_SECONDS = 3600;
+export function buildSignInUrl(authBaseUrl, appId, returnTo) {
+    const url = new URL(`${authBaseUrl}/sign-in`);
+    url.searchParams.set('app_id', appId);
+    url.searchParams.set('return_to', returnTo);
+    return url.toString();
+}
+export function buildSignedOutOfAppUrl(authBaseUrl, appId, returnTo) {
+    const url = new URL(`${authBaseUrl}/signed-out-of-app`);
+    url.searchParams.set('app_id', appId);
+    url.searchParams.set('return_to', returnTo);
+    return url.toString();
+}
+export async function refreshTokens(authBaseUrl, appId, credential = { kind: 'cookie' }) {
+    // `client` rides a query param, not a header: /refresh is deliberately
+    // a CORS simple request (no preflight), and any custom header would
+    // trip one. The server folds it into the token_refresh audit so the
+    // deployed SDK version distribution is measurable.
+    const url = `${authBaseUrl}/refresh?${new URLSearchParams({
+        app_id: appId,
+        client: SDK_CLIENT_ID,
+    }).toString()}`;
+    const init = { method: 'POST', credentials: 'include' };
+    if (credential.kind !== 'cookie') {
+        // A URLSearchParams body sends `Content-Type:
+        // application/x-www-form-urlencoded`, which keeps this a CORS
+        // "simple request" with no preflight OPTIONS, which the auth API
+        // does not serve. A JSON content-type would trip preflight.
+        const body = new URLSearchParams();
+        if (credential.kind === 'code')
+            body.set('brass_code', credential.code);
+        else
+            body.set('sid', credential.sessionToken);
+        init.body = body;
+    }
+    // Retry a transient failure (a cold-start 5xx / 429, or a network blip)
+    // rather than collapsing it into the same `null` a definitive 401 returns:
+    // `null` signs the user out and clears the login hint, so without a retry one
+    // hourly-refresh blip tears down a live session that was fine server-side. A
+    // definitive 401/403 is not in either replay set, so it still returns fast.
+    // The one-time `brass_code` exchange is single-use server-side, so its
+    // channel replays ONLY a pre-handler 503 (never a network throw, which might
+    // mean the code was already consumed); the cookie / sid channels are
+    // idempotent and replay the full transient set.
+    const policy = credential.kind === 'code' ? RETRY_WRITE_503 : RETRY_READ;
+    let response;
+    try {
+        response = await fetchWithRetry(() => fetch(url, init), { policy });
+    }
+    catch {
+        return null;
+    }
+    if (!response.ok)
+        return null;
+    const json = (await response.json());
+    const result = {
+        tokens: {
+            accessToken: json.access_token,
+            idToken: json.id_token,
+            expiresAt: Date.now() + (json.expires_in ?? DEFAULT_TOKEN_TTL_SECONDS) * 1000,
+            ...(json.app_assertion ? { appAssertion: json.app_assertion } : {}),
+        },
+    };
+    if (json.session_token)
+        result.sessionToken = json.session_token;
+    return result;
+}
+//# sourceMappingURL=auth-flow.js.map

package/dist/auth-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-flow.js","sourceRoot":"","sources":["../src/auth-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAE/E,yEAAyE;AACzE,+EAA+E;AAC/E,8EAA8E;AAC9E,yEAAyE;AACzE,6EAA6E;AAC7E,cAAc;AACd,MAAM,yBAAyB,GAAG,IAAI,CAAC;AA6CvC,MAAM,UAAU,cAAc,CAAC,WAAmB,EAAE,KAAa,EAAE,QAAgB;IACjF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,WAAW,UAAU,CAAC,CAAC;IAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACtC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC5C,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,KAAa,EACb,QAAgB;IAEhB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,WAAW,oBAAoB,CAAC,CAAC;IACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACtC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC5C,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAmB,EACnB,KAAa,EACb,aAAgC,EAAE,IAAI,EAAE,QAAQ,EAAE;IAElD,uEAAuE;IACvE,oEAAoE;IACpE,oEAAoE;IACpE,mDAAmD;IACnD,MAAM,GAAG,GAAG,GAAG,WAAW,YAAY,IAAI,eAAe,CAAC;QACxD,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;IAChB,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;IACrE,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACjC,8CAA8C;QAC9C,8DAA8D;QAC9D,iEAAiE;QACjE,4DAA4D;QAC5D,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM;YAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;;YACnE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IACD,wEAAwE;IACxE,2EAA2E;IAC3E,8EAA8E;IAC9E,6EAA6E;IAC7E,4EAA4E;IAC5E,uEAAuE;IACvE,6EAA6E;IAC7E,qEAAqE;IACrE,gDAAgD;IAChD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC;IACzE,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAoB,CAAC;IACxD,MAAM,MAAM,GAAkB;QAC5B,MAAM,EAAE;YACN,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,yBAAyB,CAAC,GAAG,IAAI;YAC7E,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE;KACF,CAAC;IACF,IAAI,IAAI,CAAC,aAAa;QAAE,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC;IACjE,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,106 @@
+import { type CreateDocumentOptions, type OpenDocumentByIdOptions, type OpenedDocument } from './open-document.js';
+import { type DocumentHistoryResult, type SelectDocumentResult } from './hosted-ui.js';
+import type { DocumentSerializer } from './serializer.js';
+import { type DocumentImporter } from './importer.js';
+import { type DocumentsNamespace } from './documents-namespace.js';
+import { type DocumentSession } from './session.js';
+import { type SessionToolbarHandle, type SessionHeaderHandle, type SessionToolbarOptions, type MountedPiece } from './session-toolbar.js';
+import type { AuthStatus, ErrorListener, BrassInitOptions, BrassUser, UserChangeListener } from './types.js';
+export interface ResolvedBaseUrls {
+    authBaseUrl: string;
+    apiBaseUrl: string;
+    apiBaseUrlConfigured: boolean;
+    wsBaseUrl: string | null;
+    dashboardBaseUrl: string;
+}
+export declare function resolveBaseUrls(options: BrassInitOptions): ResolvedBaseUrls;
+export declare class BrassClient {
+    private appId;
+    private authBaseUrl;
+    private apiBaseUrl;
+    private apiBaseUrlConfigured;
+    private wsBaseUrl;
+    private _dashboardBaseUrl;
+    private hostedUiTheme;
+    private openIncompatibleDocuments;
+    private syncDocToUrl;
+    private docUrlParam;
+    private branchUrlParam;
+    private syncDocToTitle;
+    private originalPageTitle;
+    private tokens;
+    private user;
+    private bootstrapped;
+    private listeners;
+    private readonly errorListeners;
+    private inflightRefresh;
+    private initialized;
+    private pendingAuthCode;
+    private sessionToken;
+    private documentsNamespace;
+    private documentSession;
+    private hostedUiLauncher;
+    private documentFactory;
+    private guestLinkTokenValue;
+    private launchOrganizationId;
+    private serializer;
+    private exportGuest;
+    private openDocuments;
+    private readonly importRunner;
+    private docWsClient;
+    init(appId?: string, options?: BrassInitOptions): Promise<void>;
+    signIn(): void;
+    signOut(): void;
+    get currentUser(): BrassUser | null;
+    get authStatus(): AuthStatus;
+    get isGuest(): boolean;
+    onUserChange(listener: UserChangeListener): () => void;
+    onError(listener: ErrorListener): () => void;
+    private fireError;
+    get documents(): DocumentsNamespace;
+    private docsInternal;
+    get session(): DocumentSession;
+    mountToolbar(container: HTMLElement, options?: SessionToolbarOptions): SessionToolbarHandle;
+    mountHeader(container: HTMLElement): SessionHeaderHandle;
+    mountFileMenu(container: HTMLElement): MountedPiece;
+    mountDocumentTitle(container: HTMLElement): MountedPiece;
+    mountUndoRedo(container: HTMLElement): MountedPiece;
+    mountPresenceRoster(container: HTMLElement): MountedPiece;
+    mountDriveSync(container: HTMLElement): MountedPiece;
+    mountAccountMenu(container: HTMLElement): MountedPiece;
+    mountVersionPreview(container: HTMLElement): MountedPiece;
+    private toolbarDeps;
+    selectDocument(): Promise<SelectDocumentResult | null>;
+    private selectDocumentInternal;
+    private lastSelectedDocument;
+    shareDocument(docId: string): Promise<void>;
+    documentHistory(docId: string, options?: {
+        branch?: string;
+    }): Promise<DocumentHistoryResult | null>;
+    private getHostedUiLauncher;
+    openDocumentById(docId: string, options?: OpenDocumentByIdOptions): Promise<OpenedDocument>;
+    private openByLinkInternal;
+    private openDocumentInternal;
+    createDocument(options?: CreateDocumentOptions): Promise<OpenedDocument>;
+    private createDocumentInternal;
+    private createDocumentIdWithConsent;
+    private offerInstallConsent;
+    registerSerializer(serializer: DocumentSerializer): void;
+    registerImporter(importer: DocumentImporter): void;
+    private trackOpenDocument;
+    private serializeForExport;
+    private maybeWriteDocIdToUrl;
+    private applyPageTitle;
+    private getDocumentFactory;
+    private getDocWsClient;
+    getAccessToken(): Promise<string | null>;
+    getAppAssertion(): Promise<string | null>;
+    private bootstrap;
+    private refresh;
+    private runRefresh;
+    private setTokens;
+    private hydrateProfile;
+    private requireInit;
+    private requireAppId;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AASA,OAAO,EAGL,KAAK,qBAAqB,EAG1B,KAAK,uBAAuB,EAC5B,KAAK,cAAc,EACpB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAGL,KAAK,qBAAqB,EAI1B,KAAK,oBAAoB,EAC1B,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAEL,KAAK,gBAAgB,EAEtB,MAAM,eAAe,CAAC;AAoCvB,OAAO,EAEL,KAAK,kBAAkB,EAExB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAWL,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,YAAY,EAClB,MAAM,sBAAsB,CAAC;AAS9B,OAAO,KAAK,EACV,UAAU,EACV,aAAa,EACb,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAwBpB,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IAKnB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AASD,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,gBAAgB,CAmB3E;AASD,qBAAa,WAAW;IACtB,OAAO,CAAC,KAAK,CAAuB;IACpC,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,oBAAoB,CAAS;IAIrC,OAAO,CAAC,SAAS,CAAuB;IAIxC,OAAO,CAAC,iBAAiB,CAA8B;IAIvD,OAAO,CAAC,aAAa,CAA0B;IAG/C,OAAO,CAAC,yBAAyB,CAAS;IAI1C,OAAO,CAAC,YAAY,CAAQ;IAC5B,OAAO,CAAC,WAAW,CAAiC;IACpD,OAAO,CAAC,cAAc,CAAoC;IAI1D,OAAO,CAAC,cAAc,CAAQ;IAC9B,OAAO,CAAC,iBAAiB,CAAuB;IAChD,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,IAAI,CAA0B;IActC,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,SAAS,CAAiC;IAGlD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA+C;IAC9E,OAAO,CAAC,eAAe,CAAyC;IAChE,OAAO,CAAC,WAAW,CAAS;IAW5B,OAAO,CAAC,eAAe,CAAuB;IAC9C,OAAO,CAAC,YAAY,CAAuB;IAG3C,OAAO,CAAC,kBAAkB,CAEV;IAGhB,OAAO,CAAC,eAAe,CAAgC;IACvD,OAAO,CAAC,gBAAgB,CAAiC;IACzD,OAAO,CAAC,eAAe,CAAgC;IAGvD,OAAO,CAAC,mBAAmB,CAAuB;IAIlD,OAAO,CAAC,oBAAoB,CAAuB;IAInD,OAAO,CAAC,UAAU,CAAmC;IAIrD,OAAO,CAAC,WAAW,CAAsC;IAGzD,OAAO,CAAC,aAAa,CAA+B;IAIpD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAI1B;IAGH,OAAO,CAAC,WAAW,CAA8B;IAQ3C,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IA4JzE,MAAM,IAAI,IAAI;IAwBd,OAAO,IAAI,IAAI;IAkCf,IAAI,WAAW,IAAI,SAAS,GAAG,IAAI,CAElC;IAQD,IAAI,UAAU,IAAI,UAAU,CAI3B;IAKD,IAAI,OAAO,IAAI,OAAO,CAErB;IAUD,YAAY,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM,IAAI;IAoBtD,OAAO,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,IAAI;IAI5C,OAAO,CAAC,SAAS;IAQjB,IAAI,SAAS,IAAI,kBAAkB,CAElC;IAID,OAAO,CAAC,YAAY;IAgBpB,IAAI,OAAO,IAAI,eAAe,CA6D7B;IAMD,YAAY,CACV,SAAS,EAAE,WAAW,EACtB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,oBAAoB;IAQvB,WAAW,CAAC,SAAS,EAAE,WAAW,GAAG,mBAAmB;IAQxD,aAAa,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAGnD,kBAAkB,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAGxD,aAAa,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAGnD,mBAAmB,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAGzD,cAAc,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAGpD,gBAAgB,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAOtD,mBAAmB,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY;IAMzD,OAAO,CAAC,WAAW;IAwBb,cAAc,IAAI,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;YAS9C,sBAAsB;IAWpC,OAAO,CAAC,oBAAoB;IAQ5B,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAW3C,eAAe,CACb,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5B,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAIxC,OAAO,CAAC,mBAAmB;IA2DrB,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,cAAc,CAAC;YAWZ,kBAAkB;YAelB,oBAAoB;IA2E5B,cAAc,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC;YAQhE,sBAAsB;YAuBtB,2BAA2B;YAoB3B,mBAAmB;IAoBjC,kBAAkB,CAAC,UAAU,EAAE,kBAAkB,GAAG,IAAI;IAaxD,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI;IAUlD,OAAO,CAAC,iBAAiB;YAoBX,kBAAkB;IAuBhC,OAAO,CAAC,oBAAoB;IAW5B,OAAO,CAAC,cAAc;IAStB,OAAO,CAAC,kBAAkB;IAwF1B,OAAO,CAAC,cAAc;IAmBhB,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAexC,eAAe,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;YAUjC,SAAS;YA2ET,OAAO;YAyCP,UAAU;IA2BxB,OAAO,CAAC,SAAS;YAgBH,cAAc;IAwB5B,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,YAAY;CAKrB"}