@cloudpdf/engine 3.0.0-next.3 → 3.0.0-next.4

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { AbortError, AbortablePromise, AbortablePromise as AbortablePromise$1, AnnotationAppearanceImageOptions, AnnotationAppearanceImagesResult, AnnotationAppearanceRenderOptions, AnnotationAppearancesResult, AnnotationCreateResult, AnnotationDeleteResult, AnnotationDraft, AnnotationListPageSnapshot, AnnotationListSnapshotAllPages, AnnotationMoveResult, AnnotationPatch, AnnotationRef, AnnotationUpdateResult, AttachmentContent, AttachmentsCache, DocumentAccessInfo, DocumentActionsService, DocumentAnnotationsService, DocumentAnnotationsService as DocumentAnnotationsService$1, DocumentAttachmentsService, DocumentCapabilities, DocumentEventStream, DocumentFormsService, DocumentHandle, DocumentHandle as DocumentHandle$1, DocumentIdentity, DocumentMetadata, DocumentPagesService, DocumentPagesService as DocumentPagesService$1, DocumentRedactionService, DocumentRenderService, DocumentSearchService, DocumentSecurityService, DocumentSecurityService as DocumentSecurityService$1, DocumentSecurityState, DocumentUnlockInput, DocumentUnlockResult, Engine, Engine as Engine$1, EngineError, EngineErrorCode, EngineFactory, MetadataCache, MetadataPatch, MetadataService, MetadataService as MetadataService$1, MetadataUpdateResult, MutationMeta, OpenInput, OpenInput as OpenInput$1, OpenOptions, OpenOptions as OpenOptions$1, PageAnnotationsService, PageAnnotationsService as PageAnnotationsService$1, PageDeleteResult, PageFlattenResult, PageFlattenUsage, PageGeometryService, PageGeometryService as PageGeometryService$1, PageGeometrySnapshot, PageHandle, PageHandle as PageHandle$1, PageImageHandle, PageImageOptions, PageListSnapshot, PageMoveResult, PageObjectNumber, PageRaster, PageRenderOptions, PageRenderService, PageRenderService as PageRenderService$1, PageRotateResult, PageRotation, PageStructureCache, PageTextService, PageTextService as PageTextService$1, PageTextSnapshot, PdfSaveMode, PdfSaveMode as PdfSaveMode$1, SearchRequest, SearchSlice, TokenSource, TokenSource as TokenSource$1, WeakAnnotationEditSession } from "@embedpdf/engine-core/runtime";
+import { AbortError, AbortablePromise, AbortablePromise as AbortablePromise$1, AnnotationAppearanceImageOptions, AnnotationAppearanceImagesResult, AnnotationAppearanceRenderOptions, AnnotationAppearancesResult, AnnotationCreateResult, AnnotationDeleteResult, AnnotationDraft, AnnotationListPageSnapshot, AnnotationListSnapshotAllPages, AnnotationMoveResult, AnnotationPatch, AnnotationRef, AnnotationUpdateResult, AttachmentContent, AttachmentsCache, DocumentAccessInfo, DocumentActionsService, DocumentAnnotationsService, DocumentAnnotationsService as DocumentAnnotationsService$1, DocumentAttachmentsService, DocumentCapabilities, DocumentEventStream, DocumentFormsService, DocumentHandle, DocumentHandle as DocumentHandle$1, DocumentIdentity, DocumentMetadata, DocumentPagesService, DocumentPagesService as DocumentPagesService$1, DocumentRedactionService, DocumentRenderService, DocumentSearchService, DocumentSecurityService, DocumentSecurityService as DocumentSecurityService$1, DocumentSecurityState, DocumentUnlockInput, DocumentUnlockResult, Engine, Engine as Engine$1, EngineError, EngineError as EngineError$1, EngineErrorCode, EngineFactory, MetadataCache, MetadataPatch, MetadataService, MetadataService as MetadataService$1, MetadataUpdateResult, MutationMeta, OpenInput, OpenInput as OpenInput$1, OpenInputShare, OpenOptions, OpenOptions as OpenOptions$1, PageAnnotationsService, PageAnnotationsService as PageAnnotationsService$1, PageDeleteResult, PageFlattenResult, PageFlattenUsage, PageGeometryService, PageGeometryService as PageGeometryService$1, PageGeometrySnapshot, PageHandle, PageHandle as PageHandle$1, PageImageHandle, PageImageOptions, PageListSnapshot, PageMoveResult, PageObjectNumber, PageRaster, PageRenderOptions, PageRenderService, PageRenderService as PageRenderService$1, PageRotateResult, PageRotation, PageStructureCache, PageTextService, PageTextService as PageTextService$1, PageTextSnapshot, PdfSaveMode, PdfSaveMode as PdfSaveMode$1, SearchRequest, SearchSlice, TokenSource, WeakAnnotationEditSession } from "@embedpdf/engine-core/runtime";
 import { CdnAccessInfoForApply, DocumentHead, DocumentManifest, LayerScopePlane } from "@embedpdf/engine-core/wire";
 import { SessionEventPublisher } from "@embedpdf/engine-services";
 //#region src/transport/HttpClient.d.ts
@@ -48,12 +48,21 @@ interface HttpFileResponse {
   headers: Headers;
 }
 declare class HttpClient {
-  private readonly baseUrl;
+  private readonly base;
   private readonly tokenFn;
   private readonly fetchFn;
   private readonly sessionId;
   private cdnBinding;
   constructor(opts: HttpClientOptions);
+  /** Normalized server base URL (no trailing slash). */
+  get baseUrl(): string;
+  /**
+   * The fetch implementation this client sends requests through (injected
+   * or global). Exposed so sibling transports spawned per-open — the
+   * share-session exchange, most of all — ride the same fetch the engine
+   * was configured with (test doubles, SSR `Origin`-attaching wrappers).
+   */
+  get fetchImpl(): typeof globalThis.fetch;
   /**
    * Return a clone of this client bound to a different bearer. Used
    * by `CloudEngine.open` to mint a per-handle client carrying the
@@ -579,7 +588,7 @@ declare function decodeUnverifiedClaims(token: string): UnverifiedClaims;
  * A share token (`shr_…`) is a REFERENCE to a stored grant on the
  * server, not a credential — `exchangeShareToken` trades it for an
  * ordinary short-lived doc JWT, and `shareSessionSource` wraps that in
- * a self-renewing {@link TokenSource}. Because the engine's transport
+ * a self-renewing token source. Because the engine's transport
  * invokes its token source on every request (and SSE reconnects call
  * it again), renewal is nothing more than "exchange again when the
  * cached session is nearly out" — no timers, no listeners.
@@ -615,11 +624,25 @@ declare class ShareExchangeError extends Error {
 }
 declare function exchangeShareToken(baseUrl: string, shareToken: string, opts?: ShareExchangeOptions): Promise<ShareSession>;
 /**
- * A caching, self-renewing {@link TokenSource} over the exchange.
+ * Lift a {@link ShareExchangeError} into the engine's error taxonomy, so
+ * `open({ kind: 'share' })` and every later renewal fail with the same
+ * `EngineError` family as all other engine calls. The wire code and HTTP
+ * status survive in `details`; the original error rides as `cause`.
+ *
+ * `SharePasswordRequired` gets its own engine code — it is the one outcome
+ * callers branch on programmatically (prompt for the grant passphrase and
+ * retry). Everything else maps by meaning, with the HTTP status as the
+ * fallback discriminator.
+ */
+declare function engineErrorFromShareExchange(error: ShareExchangeError): EngineError$1;
+/**
+ * A caching, self-renewing token source over the exchange — the callable
+ * member of the engine's `TokenSource` union, assignable wherever one is
+ * taken.
  * Concurrent callers share one in-flight exchange; a failed exchange
  * clears it so the next request retries rather than caching the error.
  */
-declare function shareSessionSource(baseUrl: string, shareToken: string, opts?: ShareExchangeOptions): TokenSource$1;
+declare function shareSessionSource(baseUrl: string, shareToken: string, opts?: ShareExchangeOptions): () => Promise<string>;
 //#endregion
 //#region src/index.d.ts
 declare function createCloudEngine(opts: CloudEngineOptions): CloudEngine;
@@ -645,5 +668,5 @@ declare function createCloudEngine(opts: CloudEngineOptions): CloudEngine;
  */
 declare function cloudEngine(opts: CloudEngineOptions): CloudEngine;
 //#endregion
-export { AbortError, AbortablePromise, CloudDocumentAnnotationsService, CloudDocumentHandle, CloudDocumentPagesService, CloudEngine, type CloudEngineOptions, CloudMetadataService, CloudPageAnnotationsService, CloudPageGeometryService, CloudPageHandle, CloudPageRenderService, type DocumentAccessInfo, type DocumentAnnotationsService, type DocumentCapabilities, type DocumentHandle, type DocumentIdentity, type DocumentPagesService, type DocumentSecurityService, type DocumentSecurityState, type DocumentUnlockInput, type DocumentUnlockResult, type Engine, EngineError, EngineErrorCode, type EngineFactory, HttpClient, type HttpClientOptions, type MetadataService, type OpenInput, type OpenOptions, type PageAnnotationsService, type PageGeometryService, type PageHandle, type PageRenderService, type PageTextService, type PdfSaveMode, ShareExchangeError, type ShareExchangeOptions, type ShareSession, type TokenSource, type UnverifiedClaims, cloudEngine, createCloudEngine, decodeUnverifiedClaims, exchangeShareToken, shareSessionSource };
+export { AbortError, AbortablePromise, CloudDocumentAnnotationsService, CloudDocumentHandle, CloudDocumentPagesService, CloudEngine, type CloudEngineOptions, CloudMetadataService, CloudPageAnnotationsService, CloudPageGeometryService, CloudPageHandle, CloudPageRenderService, type DocumentAccessInfo, type DocumentAnnotationsService, type DocumentCapabilities, type DocumentHandle, type DocumentIdentity, type DocumentPagesService, type DocumentSecurityService, type DocumentSecurityState, type DocumentUnlockInput, type DocumentUnlockResult, type Engine, EngineError, EngineErrorCode, type EngineFactory, HttpClient, type HttpClientOptions, type MetadataService, type OpenInput, type OpenInputShare, type OpenOptions, type PageAnnotationsService, type PageGeometryService, type PageHandle, type PageRenderService, type PageTextService, type PdfSaveMode, ShareExchangeError, type ShareExchangeOptions, type ShareSession, type TokenSource, type UnverifiedClaims, cloudEngine, createCloudEngine, decodeUnverifiedClaims, engineErrorFromShareExchange, exchangeShareToken, shareSessionSource };
 //# sourceMappingURL=index.d.cts.map

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { AbortError, AbortablePromise, AbortablePromise as AbortablePromise$1, AnnotationAppearanceImageOptions, AnnotationAppearanceImagesResult, AnnotationAppearanceRenderOptions, AnnotationAppearancesResult, AnnotationCreateResult, AnnotationDeleteResult, AnnotationDraft, AnnotationListPageSnapshot, AnnotationListSnapshotAllPages, AnnotationMoveResult, AnnotationPatch, AnnotationRef, AnnotationUpdateResult, AttachmentContent, AttachmentsCache, DocumentAccessInfo, DocumentActionsService, DocumentAnnotationsService, DocumentAnnotationsService as DocumentAnnotationsService$1, DocumentAttachmentsService, DocumentCapabilities, DocumentEventStream, DocumentFormsService, DocumentHandle, DocumentHandle as DocumentHandle$1, DocumentIdentity, DocumentMetadata, DocumentPagesService, DocumentPagesService as DocumentPagesService$1, DocumentRedactionService, DocumentRenderService, DocumentSearchService, DocumentSecurityService, DocumentSecurityService as DocumentSecurityService$1, DocumentSecurityState, DocumentUnlockInput, DocumentUnlockResult, Engine, Engine as Engine$1, EngineError, EngineErrorCode, EngineFactory, MetadataCache, MetadataPatch, MetadataService, MetadataService as MetadataService$1, MetadataUpdateResult, MutationMeta, OpenInput, OpenInput as OpenInput$1, OpenOptions, OpenOptions as OpenOptions$1, PageAnnotationsService, PageAnnotationsService as PageAnnotationsService$1, PageDeleteResult, PageFlattenResult, PageFlattenUsage, PageGeometryService, PageGeometryService as PageGeometryService$1, PageGeometrySnapshot, PageHandle, PageHandle as PageHandle$1, PageImageHandle, PageImageOptions, PageListSnapshot, PageMoveResult, PageObjectNumber, PageRaster, PageRenderOptions, PageRenderService, PageRenderService as PageRenderService$1, PageRotateResult, PageRotation, PageStructureCache, PageTextService, PageTextService as PageTextService$1, PageTextSnapshot, PdfSaveMode, PdfSaveMode as PdfSaveMode$1, SearchRequest, SearchSlice, TokenSource, TokenSource as TokenSource$1, WeakAnnotationEditSession } from "@embedpdf/engine-core/runtime";
+import { AbortError, AbortablePromise, AbortablePromise as AbortablePromise$1, AnnotationAppearanceImageOptions, AnnotationAppearanceImagesResult, AnnotationAppearanceRenderOptions, AnnotationAppearancesResult, AnnotationCreateResult, AnnotationDeleteResult, AnnotationDraft, AnnotationListPageSnapshot, AnnotationListSnapshotAllPages, AnnotationMoveResult, AnnotationPatch, AnnotationRef, AnnotationUpdateResult, AttachmentContent, AttachmentsCache, DocumentAccessInfo, DocumentActionsService, DocumentAnnotationsService, DocumentAnnotationsService as DocumentAnnotationsService$1, DocumentAttachmentsService, DocumentCapabilities, DocumentEventStream, DocumentFormsService, DocumentHandle, DocumentHandle as DocumentHandle$1, DocumentIdentity, DocumentMetadata, DocumentPagesService, DocumentPagesService as DocumentPagesService$1, DocumentRedactionService, DocumentRenderService, DocumentSearchService, DocumentSecurityService, DocumentSecurityService as DocumentSecurityService$1, DocumentSecurityState, DocumentUnlockInput, DocumentUnlockResult, Engine, Engine as Engine$1, EngineError, EngineError as EngineError$1, EngineErrorCode, EngineFactory, MetadataCache, MetadataPatch, MetadataService, MetadataService as MetadataService$1, MetadataUpdateResult, MutationMeta, OpenInput, OpenInput as OpenInput$1, OpenInputShare, OpenOptions, OpenOptions as OpenOptions$1, PageAnnotationsService, PageAnnotationsService as PageAnnotationsService$1, PageDeleteResult, PageFlattenResult, PageFlattenUsage, PageGeometryService, PageGeometryService as PageGeometryService$1, PageGeometrySnapshot, PageHandle, PageHandle as PageHandle$1, PageImageHandle, PageImageOptions, PageListSnapshot, PageMoveResult, PageObjectNumber, PageRaster, PageRenderOptions, PageRenderService, PageRenderService as PageRenderService$1, PageRotateResult, PageRotation, PageStructureCache, PageTextService, PageTextService as PageTextService$1, PageTextSnapshot, PdfSaveMode, PdfSaveMode as PdfSaveMode$1, SearchRequest, SearchSlice, TokenSource, WeakAnnotationEditSession } from "@embedpdf/engine-core/runtime";
 import { CdnAccessInfoForApply, DocumentHead, DocumentManifest, LayerScopePlane } from "@embedpdf/engine-core/wire";
 import { SessionEventPublisher } from "@embedpdf/engine-services";
 //#region src/transport/HttpClient.d.ts
@@ -48,12 +48,21 @@ interface HttpFileResponse {
   headers: Headers;
 }
 declare class HttpClient {
-  private readonly baseUrl;
+  private readonly base;
   private readonly tokenFn;
   private readonly fetchFn;
   private readonly sessionId;
   private cdnBinding;
   constructor(opts: HttpClientOptions);
+  /** Normalized server base URL (no trailing slash). */
+  get baseUrl(): string;
+  /**
+   * The fetch implementation this client sends requests through (injected
+   * or global). Exposed so sibling transports spawned per-open — the
+   * share-session exchange, most of all — ride the same fetch the engine
+   * was configured with (test doubles, SSR `Origin`-attaching wrappers).
+   */
+  get fetchImpl(): typeof globalThis.fetch;
   /**
    * Return a clone of this client bound to a different bearer. Used
    * by `CloudEngine.open` to mint a per-handle client carrying the
@@ -579,7 +588,7 @@ declare function decodeUnverifiedClaims(token: string): UnverifiedClaims;
  * A share token (`shr_…`) is a REFERENCE to a stored grant on the
  * server, not a credential — `exchangeShareToken` trades it for an
  * ordinary short-lived doc JWT, and `shareSessionSource` wraps that in
- * a self-renewing {@link TokenSource}. Because the engine's transport
+ * a self-renewing token source. Because the engine's transport
  * invokes its token source on every request (and SSE reconnects call
  * it again), renewal is nothing more than "exchange again when the
  * cached session is nearly out" — no timers, no listeners.
@@ -615,11 +624,25 @@ declare class ShareExchangeError extends Error {
 }
 declare function exchangeShareToken(baseUrl: string, shareToken: string, opts?: ShareExchangeOptions): Promise<ShareSession>;
 /**
- * A caching, self-renewing {@link TokenSource} over the exchange.
+ * Lift a {@link ShareExchangeError} into the engine's error taxonomy, so
+ * `open({ kind: 'share' })` and every later renewal fail with the same
+ * `EngineError` family as all other engine calls. The wire code and HTTP
+ * status survive in `details`; the original error rides as `cause`.
+ *
+ * `SharePasswordRequired` gets its own engine code — it is the one outcome
+ * callers branch on programmatically (prompt for the grant passphrase and
+ * retry). Everything else maps by meaning, with the HTTP status as the
+ * fallback discriminator.
+ */
+declare function engineErrorFromShareExchange(error: ShareExchangeError): EngineError$1;
+/**
+ * A caching, self-renewing token source over the exchange — the callable
+ * member of the engine's `TokenSource` union, assignable wherever one is
+ * taken.
  * Concurrent callers share one in-flight exchange; a failed exchange
  * clears it so the next request retries rather than caching the error.
  */
-declare function shareSessionSource(baseUrl: string, shareToken: string, opts?: ShareExchangeOptions): TokenSource$1;
+declare function shareSessionSource(baseUrl: string, shareToken: string, opts?: ShareExchangeOptions): () => Promise<string>;
 //#endregion
 //#region src/index.d.ts
 declare function createCloudEngine(opts: CloudEngineOptions): CloudEngine;
@@ -645,5 +668,5 @@ declare function createCloudEngine(opts: CloudEngineOptions): CloudEngine;
  */
 declare function cloudEngine(opts: CloudEngineOptions): CloudEngine;
 //#endregion
-export { AbortError, AbortablePromise, CloudDocumentAnnotationsService, CloudDocumentHandle, CloudDocumentPagesService, CloudEngine, type CloudEngineOptions, CloudMetadataService, CloudPageAnnotationsService, CloudPageGeometryService, CloudPageHandle, CloudPageRenderService, type DocumentAccessInfo, type DocumentAnnotationsService, type DocumentCapabilities, type DocumentHandle, type DocumentIdentity, type DocumentPagesService, type DocumentSecurityService, type DocumentSecurityState, type DocumentUnlockInput, type DocumentUnlockResult, type Engine, EngineError, EngineErrorCode, type EngineFactory, HttpClient, type HttpClientOptions, type MetadataService, type OpenInput, type OpenOptions, type PageAnnotationsService, type PageGeometryService, type PageHandle, type PageRenderService, type PageTextService, type PdfSaveMode, ShareExchangeError, type ShareExchangeOptions, type ShareSession, type TokenSource, type UnverifiedClaims, cloudEngine, createCloudEngine, decodeUnverifiedClaims, exchangeShareToken, shareSessionSource };
+export { AbortError, AbortablePromise, CloudDocumentAnnotationsService, CloudDocumentHandle, CloudDocumentPagesService, CloudEngine, type CloudEngineOptions, CloudMetadataService, CloudPageAnnotationsService, CloudPageGeometryService, CloudPageHandle, CloudPageRenderService, type DocumentAccessInfo, type DocumentAnnotationsService, type DocumentCapabilities, type DocumentHandle, type DocumentIdentity, type DocumentPagesService, type DocumentSecurityService, type DocumentSecurityState, type DocumentUnlockInput, type DocumentUnlockResult, type Engine, EngineError, EngineErrorCode, type EngineFactory, HttpClient, type HttpClientOptions, type MetadataService, type OpenInput, type OpenInputShare, type OpenOptions, type PageAnnotationsService, type PageGeometryService, type PageHandle, type PageRenderService, type PageTextService, type PdfSaveMode, ShareExchangeError, type ShareExchangeOptions, type ShareSession, type TokenSource, type UnverifiedClaims, cloudEngine, createCloudEngine, decodeUnverifiedClaims, engineErrorFromShareExchange, exchangeShareToken, shareSessionSource };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1955,20 +1955,114 @@ function awaitSignal(promise, signal) {
 	});
 }
 //#endregion
+//#region src/share.ts
+/**
+* Thrown on a non-OK exchange. `code` is the server's wire code:
+* `SharePasswordRequired` (prompt and retry with a password),
+* `OriginNotAllowed` / `OriginRequired`, `ShareExpired`, `NotFound`
+* (unknown or revoked — indistinguishable by design), or
+* `TooManyRequests`.
+*/
+var ShareExchangeError = class extends Error {
+	constructor(code, message, status) {
+		super(message);
+		this.code = code;
+		this.status = status;
+		this.name = "ShareExchangeError";
+	}
+};
+async function exchangeShareToken(baseUrl, shareToken, opts = {}) {
+	const res = await (opts.fetch ?? globalThis.fetch)(`${baseUrl.replace(/\/$/, "")}/v1/share-sessions`, {
+		method: "POST",
+		headers: { "content-type": "application/json" },
+		body: JSON.stringify({
+			shareToken,
+			...opts.password !== void 0 ? { password: opts.password } : {}
+		})
+	});
+	if (!res.ok) {
+		let code = "Unknown";
+		let message = `share exchange failed with status ${res.status}`;
+		try {
+			const payload = await res.json();
+			if (payload.error?.code) code = payload.error.code;
+			if (payload.error?.message) message = payload.error.message;
+		} catch {}
+		throw new ShareExchangeError(code, message, res.status);
+	}
+	return await res.json();
+}
+/**
+* Lift a {@link ShareExchangeError} into the engine's error taxonomy, so
+* `open({ kind: 'share' })` and every later renewal fail with the same
+* `EngineError` family as all other engine calls. The wire code and HTTP
+* status survive in `details`; the original error rides as `cause`.
+*
+* `SharePasswordRequired` gets its own engine code — it is the one outcome
+* callers branch on programmatically (prompt for the grant passphrase and
+* retry). Everything else maps by meaning, with the HTTP status as the
+* fallback discriminator.
+*/
+function engineErrorFromShareExchange(error) {
+	return new EngineError$1(error.code === "SharePasswordRequired" ? EngineErrorCode$1.SharePasswordRequired : error.code === "NotFound" ? EngineErrorCode$1.NotFound : error.code === "ShareExpired" || error.code === "OriginNotAllowed" || error.code === "OriginRequired" ? EngineErrorCode$1.Forbidden : error.status === 401 ? EngineErrorCode$1.Unauthenticated : error.status === 400 ? EngineErrorCode$1.InvalidArg : EngineErrorCode$1.Unknown, `share exchange failed: ${error.message}`, {
+		details: {
+			shareCode: error.code,
+			status: error.status
+		},
+		cause: error
+	});
+}
+/** Renew this many seconds before `expiresAt` so in-flight requests never race expiry. */
+const RENEW_MARGIN_SECONDS = 60;
+/**
+* A caching, self-renewing token source over the exchange — the callable
+* member of the engine's `TokenSource` union, assignable wherever one is
+* taken.
+* Concurrent callers share one in-flight exchange; a failed exchange
+* clears it so the next request retries rather than caching the error.
+*/
+function shareSessionSource(baseUrl, shareToken, opts = {}) {
+	let session = null;
+	let inflight = null;
+	return async () => {
+		if (session && session.expiresAt - Date.now() / 1e3 > RENEW_MARGIN_SECONDS) return session.token;
+		inflight ?? (inflight = exchangeShareToken(baseUrl, shareToken, opts).then((next) => {
+			session = next;
+			return next.token;
+		}).finally(() => {
+			inflight = null;
+		}));
+		return inflight;
+	};
+}
+//#endregion
 //#region src/transport/HttpClient.ts
 var HttpClient = class HttpClient {
 	constructor(opts) {
-		_defineProperty(this, "baseUrl", void 0);
+		_defineProperty(this, "base", void 0);
 		_defineProperty(this, "tokenFn", void 0);
 		_defineProperty(this, "fetchFn", void 0);
 		_defineProperty(this, "sessionId", void 0);
 		_defineProperty(this, "cdnBinding", null);
-		this.baseUrl = opts.baseUrl.replace(/\/$/, "");
+		this.base = opts.baseUrl.replace(/\/$/, "");
 		const token = opts.token;
 		this.tokenFn = token === void 0 ? null : typeof token === "function" ? token : () => token;
 		this.sessionId = opts.sessionId ?? null;
 		this.fetchFn = opts.fetch ?? globalThis.fetch.bind(globalThis);
 	}
+	/** Normalized server base URL (no trailing slash). */
+	get baseUrl() {
+		return this.base;
+	}
+	/**
+	* The fetch implementation this client sends requests through (injected
+	* or global). Exposed so sibling transports spawned per-open — the
+	* share-session exchange, most of all — ride the same fetch the engine
+	* was configured with (test doubles, SSR `Origin`-attaching wrappers).
+	*/
+	get fetchImpl() {
+		return this.fetchFn;
+	}
 	/**
 	* Return a clone of this client bound to a different bearer. Used
 	* by `CloudEngine.open` to mint a per-handle client carrying the
@@ -2340,6 +2434,24 @@ var CloudEngine = class CloudEngine {
 		options?.scope;
 		options?.identity;
 		const effectivePassword = options && "password" in options ? options.password ?? null : input.password ?? null;
+		if (input.kind === "share") {
+			const raw = shareSessionSource(this.http.baseUrl, input.shareToken, {
+				...input.sharePassword !== void 0 ? { password: input.sharePassword } : {},
+				fetch: this.http.fetchImpl
+			});
+			const token = async () => {
+				try {
+					return await raw();
+				} catch (error) {
+					throw error instanceof ShareExchangeError ? engineErrorFromShareExchange(error) : error;
+				}
+			};
+			return this.open({
+				kind: "token",
+				token,
+				password: input.password ?? null
+			}, options);
+		}
 		if (input.kind === "token") {
 			const tokenSource = input.token;
 			return AbortablePromise$1.run(async (signal) => {
@@ -2376,7 +2488,7 @@ var CloudEngine = class CloudEngine {
 				return handle;
 			});
 		}
-		return AbortablePromise$1.rejectReason(new EngineError$1(EngineErrorCode$1.InvalidArg, `cloud engine supports OpenInput.kind === 'token' or 'id' (got '${input.kind}')`));
+		return AbortablePromise$1.rejectReason(new EngineError$1(EngineErrorCode$1.InvalidArg, `cloud engine supports OpenInput.kind === 'token', 'id', or 'share' (got '${input.kind}')`));
 	}
 	destroy() {
 		if (this.destroyed) return AbortablePromise$1.resolveValue(void 0);
@@ -2443,65 +2555,6 @@ async function settleLinked(pending, signal) {
 	}
 }
 //#endregion
-//#region src/share.ts
-/**
-* Thrown on a non-OK exchange. `code` is the server's wire code:
-* `SharePasswordRequired` (prompt and retry with a password),
-* `OriginNotAllowed` / `OriginRequired`, `ShareExpired`, `NotFound`
-* (unknown or revoked — indistinguishable by design), or
-* `TooManyRequests`.
-*/
-var ShareExchangeError = class extends Error {
-	constructor(code, message, status) {
-		super(message);
-		this.code = code;
-		this.status = status;
-		this.name = "ShareExchangeError";
-	}
-};
-async function exchangeShareToken(baseUrl, shareToken, opts = {}) {
-	const res = await (opts.fetch ?? globalThis.fetch)(`${baseUrl.replace(/\/$/, "")}/v1/share-sessions`, {
-		method: "POST",
-		headers: { "content-type": "application/json" },
-		body: JSON.stringify({
-			shareToken,
-			...opts.password !== void 0 ? { password: opts.password } : {}
-		})
-	});
-	if (!res.ok) {
-		let code = "Unknown";
-		let message = `share exchange failed with status ${res.status}`;
-		try {
-			const payload = await res.json();
-			if (payload.error?.code) code = payload.error.code;
-			if (payload.error?.message) message = payload.error.message;
-		} catch {}
-		throw new ShareExchangeError(code, message, res.status);
-	}
-	return await res.json();
-}
-/** Renew this many seconds before `expiresAt` so in-flight requests never race expiry. */
-const RENEW_MARGIN_SECONDS = 60;
-/**
-* A caching, self-renewing {@link TokenSource} over the exchange.
-* Concurrent callers share one in-flight exchange; a failed exchange
-* clears it so the next request retries rather than caching the error.
-*/
-function shareSessionSource(baseUrl, shareToken, opts = {}) {
-	let session = null;
-	let inflight = null;
-	return async () => {
-		if (session && session.expiresAt - Date.now() / 1e3 > RENEW_MARGIN_SECONDS) return session.token;
-		inflight ?? (inflight = exchangeShareToken(baseUrl, shareToken, opts).then((next) => {
-			session = next;
-			return next.token;
-		}).finally(() => {
-			inflight = null;
-		}));
-		return inflight;
-	};
-}
-//#endregion
 //#region src/index.ts
 function createCloudEngine(opts) {
 	return CloudEngine.fromOptions(opts);
@@ -2530,6 +2583,6 @@ function cloudEngine(opts) {
 	return CloudEngine.fromOptions(opts);
 }
 //#endregion
-export { AbortError, AbortablePromise, CloudDocumentAnnotationsService, CloudDocumentHandle, CloudDocumentPagesService, CloudEngine, CloudMetadataService, CloudPageAnnotationsService, CloudPageGeometryService, CloudPageHandle, CloudPageRenderService, EngineError, EngineErrorCode, HttpClient, ShareExchangeError, cloudEngine, createCloudEngine, decodeUnverifiedClaims, exchangeShareToken, shareSessionSource };
+export { AbortError, AbortablePromise, CloudDocumentAnnotationsService, CloudDocumentHandle, CloudDocumentPagesService, CloudEngine, CloudMetadataService, CloudPageAnnotationsService, CloudPageGeometryService, CloudPageHandle, CloudPageRenderService, EngineError, EngineErrorCode, HttpClient, ShareExchangeError, cloudEngine, createCloudEngine, decodeUnverifiedClaims, engineErrorFromShareExchange, exchangeShareToken, shareSessionSource };
 
 //# sourceMappingURL=index.js.map