@cloudpdf/engine 3.0.0-next.3 → 3.0.0-next.4

package/dist/index.cjs

@@ -1956,20 +1956,114 @@ function awaitSignal(promise, signal) {
 	});
 }
 //#endregion
+//#region src/share.ts
+/**
+* Thrown on a non-OK exchange. `code` is the server's wire code:
+* `SharePasswordRequired` (prompt and retry with a password),
+* `OriginNotAllowed` / `OriginRequired`, `ShareExpired`, `NotFound`
+* (unknown or revoked — indistinguishable by design), or
+* `TooManyRequests`.
+*/
+var ShareExchangeError = class extends Error {
+	constructor(code, message, status) {
+		super(message);
+		this.code = code;
+		this.status = status;
+		this.name = "ShareExchangeError";
+	}
+};
+async function exchangeShareToken(baseUrl, shareToken, opts = {}) {
+	const res = await (opts.fetch ?? globalThis.fetch)(`${baseUrl.replace(/\/$/, "")}/v1/share-sessions`, {
+		method: "POST",
+		headers: { "content-type": "application/json" },
+		body: JSON.stringify({
+			shareToken,
+			...opts.password !== void 0 ? { password: opts.password } : {}
+		})
+	});
+	if (!res.ok) {
+		let code = "Unknown";
+		let message = `share exchange failed with status ${res.status}`;
+		try {
+			const payload = await res.json();
+			if (payload.error?.code) code = payload.error.code;
+			if (payload.error?.message) message = payload.error.message;
+		} catch {}
+		throw new ShareExchangeError(code, message, res.status);
+	}
+	return await res.json();
+}
+/**
+* Lift a {@link ShareExchangeError} into the engine's error taxonomy, so
+* `open({ kind: 'share' })` and every later renewal fail with the same
+* `EngineError` family as all other engine calls. The wire code and HTTP
+* status survive in `details`; the original error rides as `cause`.
+*
+* `SharePasswordRequired` gets its own engine code — it is the one outcome
+* callers branch on programmatically (prompt for the grant passphrase and
+* retry). Everything else maps by meaning, with the HTTP status as the
+* fallback discriminator.
+*/
+function engineErrorFromShareExchange(error) {
+	return new _embedpdf_engine_core_runtime.EngineError(error.code === "SharePasswordRequired" ? _embedpdf_engine_core_runtime.EngineErrorCode.SharePasswordRequired : error.code === "NotFound" ? _embedpdf_engine_core_runtime.EngineErrorCode.NotFound : error.code === "ShareExpired" || error.code === "OriginNotAllowed" || error.code === "OriginRequired" ? _embedpdf_engine_core_runtime.EngineErrorCode.Forbidden : error.status === 401 ? _embedpdf_engine_core_runtime.EngineErrorCode.Unauthenticated : error.status === 400 ? _embedpdf_engine_core_runtime.EngineErrorCode.InvalidArg : _embedpdf_engine_core_runtime.EngineErrorCode.Unknown, `share exchange failed: ${error.message}`, {
+		details: {
+			shareCode: error.code,
+			status: error.status
+		},
+		cause: error
+	});
+}
+/** Renew this many seconds before `expiresAt` so in-flight requests never race expiry. */
+const RENEW_MARGIN_SECONDS = 60;
+/**
+* A caching, self-renewing token source over the exchange — the callable
+* member of the engine's `TokenSource` union, assignable wherever one is
+* taken.
+* Concurrent callers share one in-flight exchange; a failed exchange
+* clears it so the next request retries rather than caching the error.
+*/
+function shareSessionSource(baseUrl, shareToken, opts = {}) {
+	let session = null;
+	let inflight = null;
+	return async () => {
+		if (session && session.expiresAt - Date.now() / 1e3 > RENEW_MARGIN_SECONDS) return session.token;
+		inflight ?? (inflight = exchangeShareToken(baseUrl, shareToken, opts).then((next) => {
+			session = next;
+			return next.token;
+		}).finally(() => {
+			inflight = null;
+		}));
+		return inflight;
+	};
+}
+//#endregion
 //#region src/transport/HttpClient.ts
 var HttpClient = class HttpClient {
 	constructor(opts) {
-		_defineProperty(this, "baseUrl", void 0);
+		_defineProperty(this, "base", void 0);
 		_defineProperty(this, "tokenFn", void 0);
 		_defineProperty(this, "fetchFn", void 0);
 		_defineProperty(this, "sessionId", void 0);
 		_defineProperty(this, "cdnBinding", null);
-		this.baseUrl = opts.baseUrl.replace(/\/$/, "");
+		this.base = opts.baseUrl.replace(/\/$/, "");
 		const token = opts.token;
 		this.tokenFn = token === void 0 ? null : typeof token === "function" ? token : () => token;
 		this.sessionId = opts.sessionId ?? null;
 		this.fetchFn = opts.fetch ?? globalThis.fetch.bind(globalThis);
 	}
+	/** Normalized server base URL (no trailing slash). */
+	get baseUrl() {
+		return this.base;
+	}
+	/**
+	* The fetch implementation this client sends requests through (injected
+	* or global). Exposed so sibling transports spawned per-open — the
+	* share-session exchange, most of all — ride the same fetch the engine
+	* was configured with (test doubles, SSR `Origin`-attaching wrappers).
+	*/
+	get fetchImpl() {
+		return this.fetchFn;
+	}
 	/**
 	* Return a clone of this client bound to a different bearer. Used
 	* by `CloudEngine.open` to mint a per-handle client carrying the
@@ -2341,6 +2435,24 @@ var CloudEngine = class CloudEngine {
 		options?.scope;
 		options?.identity;
 		const effectivePassword = options && "password" in options ? options.password ?? null : input.password ?? null;
+		if (input.kind === "share") {
+			const raw = shareSessionSource(this.http.baseUrl, input.shareToken, {
+				...input.sharePassword !== void 0 ? { password: input.sharePassword } : {},
+				fetch: this.http.fetchImpl
+			});
+			const token = async () => {
+				try {
+					return await raw();
+				} catch (error) {
+					throw error instanceof ShareExchangeError ? engineErrorFromShareExchange(error) : error;
+				}
+			};
+			return this.open({
+				kind: "token",
+				token,
+				password: input.password ?? null
+			}, options);
+		}
 		if (input.kind === "token") {
 			const tokenSource = input.token;
 			return _embedpdf_engine_core_runtime.AbortablePromise.run(async (signal) => {
@@ -2377,7 +2489,7 @@ var CloudEngine = class CloudEngine {
 				return handle;
 			});
 		}
-		return _embedpdf_engine_core_runtime.AbortablePromise.rejectReason(new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.InvalidArg, `cloud engine supports OpenInput.kind === 'token' or 'id' (got '${input.kind}')`));
+		return _embedpdf_engine_core_runtime.AbortablePromise.rejectReason(new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.InvalidArg, `cloud engine supports OpenInput.kind === 'token', 'id', or 'share' (got '${input.kind}')`));
 	}
 	destroy() {
 		if (this.destroyed) return _embedpdf_engine_core_runtime.AbortablePromise.resolveValue(void 0);
@@ -2444,65 +2556,6 @@ async function settleLinked(pending, signal) {
 	}
 }
 //#endregion
-//#region src/share.ts
-/**
-* Thrown on a non-OK exchange. `code` is the server's wire code:
-* `SharePasswordRequired` (prompt and retry with a password),
-* `OriginNotAllowed` / `OriginRequired`, `ShareExpired`, `NotFound`
-* (unknown or revoked — indistinguishable by design), or
-* `TooManyRequests`.
-*/
-var ShareExchangeError = class extends Error {
-	constructor(code, message, status) {
-		super(message);
-		this.code = code;
-		this.status = status;
-		this.name = "ShareExchangeError";
-	}
-};
-async function exchangeShareToken(baseUrl, shareToken, opts = {}) {
-	const res = await (opts.fetch ?? globalThis.fetch)(`${baseUrl.replace(/\/$/, "")}/v1/share-sessions`, {
-		method: "POST",
-		headers: { "content-type": "application/json" },
-		body: JSON.stringify({
-			shareToken,
-			...opts.password !== void 0 ? { password: opts.password } : {}
-		})
-	});
-	if (!res.ok) {
-		let code = "Unknown";
-		let message = `share exchange failed with status ${res.status}`;
-		try {
-			const payload = await res.json();
-			if (payload.error?.code) code = payload.error.code;
-			if (payload.error?.message) message = payload.error.message;
-		} catch {}
-		throw new ShareExchangeError(code, message, res.status);
-	}
-	return await res.json();
-}
-/** Renew this many seconds before `expiresAt` so in-flight requests never race expiry. */
-const RENEW_MARGIN_SECONDS = 60;
-/**
-* A caching, self-renewing {@link TokenSource} over the exchange.
-* Concurrent callers share one in-flight exchange; a failed exchange
-* clears it so the next request retries rather than caching the error.
-*/
-function shareSessionSource(baseUrl, shareToken, opts = {}) {
-	let session = null;
-	let inflight = null;
-	return async () => {
-		if (session && session.expiresAt - Date.now() / 1e3 > RENEW_MARGIN_SECONDS) return session.token;
-		inflight ?? (inflight = exchangeShareToken(baseUrl, shareToken, opts).then((next) => {
-			session = next;
-			return next.token;
-		}).finally(() => {
-			inflight = null;
-		}));
-		return inflight;
-	};
-}
-//#endregion
 //#region src/index.ts
 function createCloudEngine(opts) {
 	return CloudEngine.fromOptions(opts);
@@ -2569,6 +2622,7 @@ exports.ShareExchangeError = ShareExchangeError;
 exports.cloudEngine = cloudEngine;
 exports.createCloudEngine = createCloudEngine;
 exports.decodeUnverifiedClaims = decodeUnverifiedClaims;
+exports.engineErrorFromShareExchange = engineErrorFromShareExchange;
 exports.exchangeShareToken = exchangeShareToken;
 exports.shareSessionSource = shareSessionSource;