@goflowstate/widget-sdk 0.1.0

package/README.md

@@ -0,0 +1,104 @@
+# @goflowstate/widget-sdk
+
+SDK for building widgets that run inside the Flowstate Canvas.
+
+## Installation
+
+```bash
+npm install @goflowstate/widget-sdk
+```
+
+Or via CDN (no bundler required):
+
+```html
+<script src="https://unpkg.com/@goflowstate/widget-sdk/dist/canvas-widget-sdk.js"></script>
+```
+
+## Quick Start
+
+### ESM (bundler / TypeScript)
+
+```ts
+import { CanvasWidget } from '@goflowstate/widget-sdk';
+
+const widget = await CanvasWidget.init();
+
+// React to display state changes
+widget.onStateChange((state) => {
+  console.log('Widget state:', state); // 'collapsed' | 'expanding' | 'expanded' | 'collapsing'
+});
+
+// Expand into modal view
+document.getElementById('open-btn')?.addEventListener('click', () => {
+  widget.requestExpand();
+});
+```
+
+### Script tag (no bundler)
+
+```html
+<script src="canvas-widget-sdk.js"></script>
+<script>
+  CanvasWidget.init().then((widget) => {
+    widget.onStateChange((state) => console.log(state));
+  });
+</script>
+```
+
+## Emitting and Subscribing to Events
+
+```ts
+const widget = await CanvasWidget.init();
+
+// Broadcast to other widgets on the same canvas
+widget.emit('timer:tick', { remaining: 60 });
+
+// Listen for events from other widgets
+const unsub = widget.subscribe('timer:tick', (event) => {
+  console.log(event.topic, event.payload);
+});
+
+// Stop listening
+unsub();
+```
+
+## Persistent Storage
+
+```ts
+const widget = await CanvasWidget.init();
+
+// Store a value (scoped to this widget installation)
+await widget.storage.set('count', 42);
+
+// Retrieve a value
+const count = await widget.storage.get('count');
+
+// Remove a value
+await widget.storage.delete('count');
+```
+
+## User Context and Consent
+
+```ts
+const widget = await CanvasWidget.init();
+
+// Request access to user data
+const result = await widget.requestConsent('user:profile', 'Needed to personalise your experience');
+if (result.granted) {
+  console.log('User:', widget.user?.displayName);
+}
+```
+
+## Notifications
+
+```ts
+widget.notify('Saved!', { level: 'info', duration: 3000 });
+```
+
+## Full API Reference
+
+See [`docs/widget-development/`](../../docs/widget-development/) for the complete API reference, manifest format, and hosting guide.
+
+## License
+
+MIT

package/dist/canvas-widget-sdk.js

@@ -0,0 +1,477 @@
+// @goflowstate/widget-sdk v0.1.0
+// https://github.com/starteryllp/goflowstate-sdk
+
+"use strict";
+var CanvasWidgetSDK = (() => {
+  var __defProp = Object.defineProperty;
+  var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+  var __getOwnPropNames = Object.getOwnPropertyNames;
+  var __hasOwnProp = Object.prototype.hasOwnProperty;
+  var __export = (target, all) => {
+    for (var name in all)
+      __defProp(target, name, { get: all[name], enumerable: true });
+  };
+  var __copyProps = (to, from, except, desc) => {
+    if (from && typeof from === "object" || typeof from === "function") {
+      for (let key of __getOwnPropNames(from))
+        if (!__hasOwnProp.call(to, key) && key !== except)
+          __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+    }
+    return to;
+  };
+  var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+  // src/sdk.ts
+  var sdk_exports = {};
+  __export(sdk_exports, {
+    CanvasWidget: () => CanvasWidget,
+    CanvasWidgetSDKImpl: () => CanvasWidgetSDKImpl
+  });
+
+  // src/service.ts
+  function createServiceClient(opts) {
+    const fetchImpl = opts.fetchImpl ?? globalThis.fetch.bind(globalThis);
+    const baseUrl = opts.baseUrl.replace(/\/+$/, "");
+    async function call(path, init, token) {
+      const url = `${baseUrl}${path.startsWith("/") ? path : `/${path}`}`;
+      const headers = new Headers(init.headers);
+      headers.set("authorization", `Bearer ${token}`);
+      if (init.body && !headers.has("content-type")) {
+        headers.set("content-type", "application/json");
+      }
+      return fetchImpl(url, { ...init, headers });
+    }
+    return {
+      async fetch(path, init = {}) {
+        let token = await opts.getJwt(false);
+        let res = await call(path, init, token);
+        if (res.status === 401) {
+          token = await opts.getJwt(true);
+          res = await call(path, init, token);
+        }
+        if (!res.ok) {
+          let body = {};
+          try {
+            body = await res.json();
+          } catch {
+          }
+          throw new Error(`Widget service request failed (${res.status}): ${body.message ?? ""}`);
+        }
+        return await res.json();
+      }
+    };
+  }
+
+  // src/sdk.ts
+  var PROTOCOL = "canvas-widget-v1";
+  var DEV_MODE_TOKEN = "dev-mode-skip";
+  var INIT_TIMEOUT_MS = 5e3;
+  var cachedKey = null;
+  async function getHmacKey(secret) {
+    if (cachedKey && cachedKey.secret === secret) return cachedKey.key;
+    const encoded = new TextEncoder().encode(secret);
+    const buf = new ArrayBuffer(encoded.byteLength);
+    new Uint8Array(buf).set(encoded);
+    const key = await crypto.subtle.importKey("raw", buf, { name: "HMAC", hash: "SHA-256" }, false, [
+      "sign"
+    ]);
+    cachedKey = { secret, key };
+    return key;
+  }
+  async function signToken(secret, type, widgetId, nonce, timestamp) {
+    const key = await getHmacKey(secret);
+    const data = new TextEncoder().encode(`${type}:${widgetId}:${nonce}:${timestamp}`);
+    const buf = new ArrayBuffer(data.byteLength);
+    new Uint8Array(buf).set(data);
+    const sig = await crypto.subtle.sign("HMAC", key, buf);
+    return Array.from(new Uint8Array(sig)).map((b) => b.toString(16).padStart(2, "0")).join("");
+  }
+  var CanvasWidgetSDKImpl = class {
+    _widgetId;
+    _state;
+    _hmacSecret;
+    _user;
+    _widgetApiUrl;
+    _widgetApiToken;
+    _installationId;
+    _pendingConsents = /* @__PURE__ */ new Map();
+    _cachedJwt = null;
+    _stateListeners = [];
+    _displayState = "collapsed";
+    _displayStateCallbacks = [];
+    _focused = false;
+    _focusCallbacks = [];
+    _settingsRemoteListeners = [];
+    _eventListeners = /* @__PURE__ */ new Map();
+    _settings;
+    _messageHandler;
+    /** Authenticated HTTP client scoped to the widget's declared service URL. Undefined when no service is declared. */
+    service;
+    constructor(init) {
+      this._widgetId = init.widgetId;
+      this._state = init.state;
+      this._hmacSecret = init.hmacSecret;
+      this._user = init.user;
+      this._widgetApiUrl = init.widgetApiUrl;
+      this._widgetApiToken = init.widgetApiToken ?? null;
+      this._installationId = init.installationId;
+      this._settings = init.settings ?? {};
+      if (init.serviceUrl) {
+        this.service = createServiceClient({
+          baseUrl: init.serviceUrl,
+          getJwt: (forceRefresh) => this.getJwt(forceRefresh)
+        });
+      }
+      this._messageHandler = this.handleMessage.bind(this);
+      window.addEventListener("message", this._messageHandler);
+    }
+    /** The unique identifier for this widget instance on the canvas. */
+    get widgetId() {
+      return this._widgetId;
+    }
+    /** The current display state of the widget (collapsed, expanding, expanded, collapsing). */
+    get state() {
+      return this._state;
+    }
+    /** The authenticated user context, or null when user data access has not been granted. */
+    get user() {
+      return this._user;
+    }
+    /** Subscribe to display state changes; returns an unsubscribe function. */
+    onStateChange(cb) {
+      this._stateListeners.push(cb);
+      return () => {
+        const idx = this._stateListeners.indexOf(cb);
+        if (idx !== -1) this._stateListeners.splice(idx, 1);
+      };
+    }
+    /** Ask the canvas host to expand this widget into its modal view. */
+    requestExpand() {
+      this.send("EXPAND_REQUEST", {});
+    }
+    /** Ask the canvas host to collapse this widget back to its tile view. */
+    requestCollapse() {
+      this.send("COLLAPSE_REQUEST", {});
+    }
+    /** Get the current display state */
+    getDisplayState() {
+      return this._displayState;
+    }
+    /** Register a callback for display state changes */
+    onDisplayStateChange(callback) {
+      this._displayStateCallbacks.push(callback);
+      return () => {
+        this._displayStateCallbacks = this._displayStateCallbacks.filter((cb) => cb !== callback);
+      };
+    }
+    /** Is this widget the user's current focus? Updates via FOCUS_CHANGE. */
+    isFocused() {
+      return this._focused;
+    }
+    /** Subscribe to focus transitions. Returns an unsubscribe function. */
+    onFocusChange(callback) {
+      this._focusCallbacks.push(callback);
+      return () => {
+        this._focusCallbacks = this._focusCallbacks.filter((cb) => cb !== callback);
+      };
+    }
+    /** Request promotion to fullscreen from partial */
+    requestFullscreen() {
+      this.send("FULLSCREEN_REQUEST", {});
+    }
+    /** Broadcast an event on the given topic to all subscribed widgets on the canvas. */
+    emit(topic, payload) {
+      this.send("EVENT_EMIT", { topic, payload });
+    }
+    /** Subscribe to events on the given topic; returns an unsubscribe function. */
+    subscribe(topic, cb) {
+      const list = this._eventListeners.get(topic) ?? [];
+      list.push(cb);
+      this._eventListeners.set(topic, list);
+      return () => {
+        const current = this._eventListeners.get(topic);
+        if (!current) return;
+        const idx = current.indexOf(cb);
+        if (idx !== -1) current.splice(idx, 1);
+      };
+    }
+    /** Send a structured log entry to the canvas host for centralized debugging. */
+    log(level, message, data) {
+      this.send("LOG", { level, message, data: data ?? null });
+    }
+    /** Request user consent for a named data scope; resolves with the consent decision. */
+    async requestConsent(scope, reason) {
+      return new Promise((resolve, reject) => {
+        const timeout = setTimeout(() => {
+          this._pendingConsents.delete(scope);
+          reject(new Error("Consent request timed out"));
+        }, 6e4);
+        this._pendingConsents.set(scope, {
+          resolve: (r) => {
+            clearTimeout(timeout);
+            resolve(r);
+          },
+          reject: (e) => {
+            clearTimeout(timeout);
+            reject(e);
+          }
+        });
+        this.send("CONSENT_REQUEST", { scope, reason });
+      });
+    }
+    /** Return the cached JWT for authenticating requests to external APIs; throws if no token is available. Pass forceRefresh=true to bypass the cache. */
+    async getJwt(forceRefresh) {
+      if (!forceRefresh && this._cachedJwt && Date.now() < this._cachedJwt.expiresAt - 3e4) {
+        return this._cachedJwt.token;
+      }
+      throw new Error("No cached JWT \u2014 widget must use OAuth flow for token refresh");
+    }
+    /** Persistent key-value storage scoped to this widget installation. */
+    get storage() {
+      return {
+        get: (key) => this.storageRequest("GET", key),
+        set: (key, value) => this.storageRequest("PUT", key, value).then(() => {
+        }),
+        delete: (key) => this.storageRequest("DELETE", key).then(() => {
+        })
+      };
+    }
+    /** Ad-hoc collections/records backend scoped to the canvas/room. */
+    get db() {
+      const req = (path, method, body) => this.widgetApiRequest(path, method, body);
+      return {
+        collection(name) {
+          const base = `/widget-api/db/${encodeURIComponent(name)}`;
+          return {
+            create: (data) => req(base, "POST", data),
+            get: (id) => req(`${base}/${encodeURIComponent(id)}`, "GET"),
+            list: (opts) => {
+              const qs = new URLSearchParams();
+              if (opts?.limit != null) qs.set("limit", String(opts.limit));
+              if (opts?.cursor) qs.set("cursor", opts.cursor);
+              if (opts?.sort) qs.set("sort", opts.sort);
+              if (opts?.mine) qs.set("mine", "true");
+              const suffix = qs.toString() ? `?${qs.toString()}` : "";
+              return req(`${base}${suffix}`, "GET");
+            },
+            update: (id, patch) => req(`${base}/${encodeURIComponent(id)}`, "PATCH", patch),
+            delete: (id) => req(`${base}/${encodeURIComponent(id)}`, "DELETE").then(() => {
+            })
+          };
+        }
+      };
+    }
+    /** Widget configuration settings persisted by the canvas host. */
+    get settings() {
+      return {
+        get: () => ({ ...this._settings }),
+        set: (newSettings) => {
+          this._settings = { ...this._settings, ...newSettings };
+          this.send("SETTINGS_WRITE", { settings: this._settings });
+        },
+        onRemoteChange: (cb) => {
+          this._settingsRemoteListeners.push(cb);
+          return () => {
+            this._settingsRemoteListeners = this._settingsRemoteListeners.filter((fn) => fn !== cb);
+          };
+        }
+      };
+    }
+    /** Display a toast notification in the canvas host UI. */
+    async notify(message, opts) {
+      this.send("NOTIFICATION", {
+        message,
+        level: opts?.level ?? "info",
+        duration: opts?.duration ?? 5e3
+      });
+    }
+    // ── Private ─────────────────────────────────────────────────
+    async widgetApiRequest(path, method, body) {
+      if (!this._widgetApiUrl) {
+        throw new Error("Widget API Gateway URL not available");
+      }
+      const url = `${this._widgetApiUrl}${path}`;
+      const headers = { "Content-Type": "application/json" };
+      if (this._widgetApiToken) {
+        headers["Authorization"] = `Bearer ${this._widgetApiToken}`;
+      }
+      const opts = { method, headers };
+      if (body !== void 0 && method !== "GET" && method !== "DELETE") {
+        opts.body = JSON.stringify(body);
+      }
+      const response = await fetch(url, opts);
+      if (!response.ok) {
+        const err = await response.json().catch(() => ({}));
+        throw new Error(err.message ?? `Request ${method} ${path} failed`);
+      }
+      if (method === "GET" || method === "POST" || method === "PATCH") {
+        const result = await response.json();
+        return result.data;
+      }
+      return void 0;
+    }
+    storageRequest(method, key, value) {
+      return this.widgetApiRequest(`/widget-api/storage/${encodeURIComponent(key)}`, method, value);
+    }
+    handleMessage(event) {
+      const msg = event.data;
+      if (!msg || typeof msg !== "object" || msg.protocol !== PROTOCOL) return;
+      switch (msg.type) {
+        case "STATE_CHANGE": {
+          const payload = msg.payload;
+          this._state = payload.state;
+          for (const listener of this._stateListeners) {
+            listener(payload.state);
+          }
+          break;
+        }
+        case "EVENT_BROADCAST": {
+          const payload = msg.payload;
+          const listeners = this._eventListeners.get(payload.topic);
+          if (listeners) {
+            const evt = {
+              topic: payload.topic,
+              payload: payload.payload,
+              emittedAt: payload.emittedAt
+            };
+            for (const listener of listeners) {
+              listener(evt);
+            }
+          }
+          break;
+        }
+        case "CONSENT_RESULT": {
+          const payload = msg.payload;
+          const pending = this._pendingConsents.get(payload.scope);
+          if (pending) {
+            this._pendingConsents.delete(payload.scope);
+            pending.resolve({
+              scope: payload.scope,
+              granted: payload.granted,
+              grantToken: payload.grantToken,
+              expiresIn: payload.expiresIn
+            });
+          }
+          break;
+        }
+        case "AUTH_TOKEN_REFRESH": {
+          const payload = msg.payload;
+          this._cachedJwt = {
+            token: payload.token,
+            expiresAt: Date.now() + payload.expiresIn * 1e3
+          };
+          break;
+        }
+        case "DISPLAY_STATE_CHANGE": {
+          const newState = msg.payload?.displayState;
+          if (newState) {
+            this._displayState = newState;
+            this._displayStateCallbacks.forEach((cb) => cb(newState));
+          }
+          break;
+        }
+        case "FOCUS_CHANGE": {
+          const next = !!msg.payload?.focused;
+          if (next !== this._focused) {
+            this._focused = next;
+            this._focusCallbacks.forEach((cb) => cb(next));
+          }
+          break;
+        }
+        case "SETTINGS_REMOTE_UPDATE": {
+          const p = msg.payload;
+          this._settings = { ...p.settings };
+          for (const fn of this._settingsRemoteListeners) {
+            try {
+              fn({ ...this._settings });
+            } catch {
+            }
+          }
+          break;
+        }
+        case "USER_CONTEXT":
+        case "CANVAS_CONTEXT":
+          break;
+      }
+    }
+    send(type, payload) {
+      this.buildMessage(type, payload).then((msg) => {
+        window.parent.postMessage(msg, "*");
+      });
+    }
+    async buildMessage(type, payload) {
+      const nonce = crypto.randomUUID();
+      const timestamp = Date.now();
+      let token;
+      if (this._hmacSecret) {
+        token = await signToken(this._hmacSecret, type, this._widgetId, nonce, timestamp);
+      } else {
+        token = DEV_MODE_TOKEN;
+      }
+      return {
+        protocol: PROTOCOL,
+        type,
+        widgetId: this._widgetId,
+        nonce,
+        timestamp,
+        token,
+        payload
+      };
+    }
+    /** Tear down the SDK instance, remove all listeners, and reject pending consent requests. */
+    destroy() {
+      window.removeEventListener("message", this._messageHandler);
+      this._stateListeners.length = 0;
+      this._eventListeners.clear();
+      for (const [, pending] of this._pendingConsents) {
+        pending.reject(new Error("Widget destroyed"));
+      }
+      this._pendingConsents.clear();
+    }
+  };
+  var CanvasWidget = {
+    /**
+     * Initialize the SDK and establish communication with the canvas host.
+     *
+     * Sends a READY message to the host and waits for an INIT response.
+     * Resolves with a fully initialized {@link CanvasWidgetSDK} instance.
+     * Rejects after 5 seconds if no INIT is received from the host.
+     */
+    init() {
+      return new Promise((resolve, reject) => {
+        const timeout = setTimeout(() => {
+          window.removeEventListener("message", handler);
+          reject(new Error("CanvasWidget.init() timed out \u2014 no INIT received from host within 5s"));
+        }, INIT_TIMEOUT_MS);
+        const handler = (event) => {
+          const msg = event.data;
+          if (!msg || typeof msg !== "object" || msg.protocol !== PROTOCOL) return;
+          if (msg.type !== "INIT") return;
+          clearTimeout(timeout);
+          window.removeEventListener("message", handler);
+          const payload = msg.payload;
+          const sdk = new CanvasWidgetSDKImpl(payload);
+          resolve(sdk);
+        };
+        window.addEventListener("message", handler);
+        const readyMsg = {
+          protocol: PROTOCOL,
+          type: "READY",
+          widgetId: "",
+          // Not yet known — host identifies us by iframe source
+          nonce: crypto.randomUUID(),
+          timestamp: Date.now(),
+          token: DEV_MODE_TOKEN,
+          // READY is always allowed, token doesn't matter
+          payload: { manifestVersion: "1" }
+        };
+        window.parent.postMessage(readyMsg, "*");
+      });
+    }
+  };
+  return __toCommonJS(sdk_exports);
+})();
+
+// Expose CanvasWidget on the global scope
+if (typeof window !== "undefined") { window.CanvasWidget = CanvasWidgetSDK.CanvasWidget; }
+//# sourceMappingURL=canvas-widget-sdk.js.map

package/dist/canvas-widget-sdk.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/sdk.ts", "../src/service.ts"],
+  "sourcesContent": ["// ============================================\n// Canvas Widget SDK \u2014 runs inside widget iframes\n// ============================================\n//\n// Usage in a widget:\n//   <script src=\"canvas-widget-sdk.js\"></script>\n//   <script>\n//     const widget = await CanvasWidget.init();\n//     widget.onStateChange(state => { ... });\n//   </script>\n\nimport type {\n  CanvasWidgetSDK,\n  WidgetDisplayState,\n  WidgetEvent,\n  InitPayload,\n  StateChangePayload,\n  EventBroadcastPayload,\n  ConsentResult,\n  ConsentResultPayload,\n  UserContext,\n  StorageAPI,\n  SettingsAPI,\n  WidgetServiceClient,\n  DbAPI,\n  DbCollection,\n  DbRecord,\n  DbListOptions,\n} from './types';\nimport { createServiceClient } from './service';\n\nconst PROTOCOL = 'canvas-widget-v1';\nconst DEV_MODE_TOKEN = 'dev-mode-skip';\nconst INIT_TIMEOUT_MS = 5000;\n\ninterface CanvasMessage {\n  protocol: string;\n  type: string;\n  widgetId: string;\n  nonce: string;\n  timestamp: number;\n  token: string;\n  payload: Record<string, unknown>;\n}\n\n// ============================================\n// HMAC utilities (mirrored from host side)\n// ============================================\n\nlet cachedKey: { secret: string; key: CryptoKey } | null = null;\n\nasync function getHmacKey(secret: string): Promise<CryptoKey> {\n  if (cachedKey && cachedKey.secret === secret) return cachedKey.key;\n\n  const encoded = new TextEncoder().encode(secret);\n  const buf = new ArrayBuffer(encoded.byteLength);\n  new Uint8Array(buf).set(encoded);\n\n  const key = await crypto.subtle.importKey('raw', buf, { name: 'HMAC', hash: 'SHA-256' }, false, [\n    'sign',\n  ]);\n\n  cachedKey = { secret, key };\n  return key;\n}\n\nasync function signToken(\n  secret: string,\n  type: string,\n  widgetId: string,\n  nonce: string,\n  timestamp: number\n): Promise<string> {\n  const key = await getHmacKey(secret);\n  const data = new TextEncoder().encode(`${type}:${widgetId}:${nonce}:${timestamp}`);\n  const buf = new ArrayBuffer(data.byteLength);\n  new Uint8Array(buf).set(data);\n  const sig = await crypto.subtle.sign('HMAC', key, buf);\n  return Array.from(new Uint8Array(sig))\n    .map((b) => b.toString(16).padStart(2, '0'))\n    .join('');\n}\n\n// ============================================\n// SDK Implementation\n// ============================================\n\n/** Internal SDK implementation \u2014 not exposed directly to widget authors. */\nexport class CanvasWidgetSDKImpl implements CanvasWidgetSDK {\n  private _widgetId: string;\n  private _state: WidgetDisplayState;\n  private _hmacSecret: string | null;\n  private _user: UserContext | null;\n  private _widgetApiUrl: string | null;\n  private _widgetApiToken: string | null;\n  private _installationId: string;\n  private _pendingConsents = new Map<\n    string,\n    { resolve: (r: ConsentResult) => void; reject: (e: Error) => void }\n  >();\n  private _cachedJwt: { token: string; expiresAt: number } | null = null;\n  private _stateListeners: Array<(state: WidgetDisplayState) => void> = [];\n  private _displayState: WidgetDisplayState = 'collapsed';\n  private _displayStateCallbacks: Array<(state: WidgetDisplayState) => void> = [];\n  private _focused = false;\n  private _focusCallbacks: Array<(focused: boolean) => void> = [];\n  private _settingsRemoteListeners: Array<(settings: Record<string, unknown>) => void> = [];\n  private _eventListeners = new Map<string, Array<(event: WidgetEvent) => void>>();\n  private _settings: Record<string, unknown>;\n  private _messageHandler: (event: MessageEvent) => void;\n\n  /** Authenticated HTTP client scoped to the widget's declared service URL. Undefined when no service is declared. */\n  readonly service: WidgetServiceClient | undefined;\n\n  constructor(init: InitPayload) {\n    this._widgetId = init.widgetId;\n    this._state = init.state;\n    this._hmacSecret = init.hmacSecret;\n    this._user = init.user;\n    this._widgetApiUrl = init.widgetApiUrl;\n    this._widgetApiToken = init.widgetApiToken ?? null;\n    this._installationId = init.installationId;\n    this._settings = init.settings ?? {};\n\n    // Wire sdk.service when the host provides a service URL from the manifest\n    if (init.serviceUrl) {\n      this.service = createServiceClient({\n        baseUrl: init.serviceUrl,\n        getJwt: (forceRefresh?: boolean) => this.getJwt(forceRefresh),\n      });\n    }\n\n    this._messageHandler = this.handleMessage.bind(this);\n    window.addEventListener('message', this._messageHandler);\n  }\n\n  /** The unique identifier for this widget instance on the canvas. */\n  get widgetId(): string {\n    return this._widgetId;\n  }\n\n  /** The current display state of the widget (collapsed, expanding, expanded, collapsing). */\n  get state(): WidgetDisplayState {\n    return this._state;\n  }\n\n  /** The authenticated user context, or null when user data access has not been granted. */\n  get user(): UserContext | null {\n    return this._user;\n  }\n\n  /** Subscribe to display state changes; returns an unsubscribe function. */\n  onStateChange(cb: (state: WidgetDisplayState) => void): () => void {\n    this._stateListeners.push(cb);\n    return () => {\n      const idx = this._stateListeners.indexOf(cb);\n      if (idx !== -1) this._stateListeners.splice(idx, 1);\n    };\n  }\n\n  /** Ask the canvas host to expand this widget into its modal view. */\n  requestExpand(): void {\n    this.send('EXPAND_REQUEST', {});\n  }\n\n  /** Ask the canvas host to collapse this widget back to its tile view. */\n  requestCollapse(): void {\n    this.send('COLLAPSE_REQUEST', {});\n  }\n\n  /** Get the current display state */\n  getDisplayState(): WidgetDisplayState {\n    return this._displayState;\n  }\n\n  /** Register a callback for display state changes */\n  onDisplayStateChange(callback: (state: WidgetDisplayState) => void): () => void {\n    this._displayStateCallbacks.push(callback);\n    return () => {\n      this._displayStateCallbacks = this._displayStateCallbacks.filter((cb) => cb !== callback);\n    };\n  }\n\n  /** Is this widget the user's current focus? Updates via FOCUS_CHANGE. */\n  isFocused(): boolean {\n    return this._focused;\n  }\n\n  /** Subscribe to focus transitions. Returns an unsubscribe function. */\n  onFocusChange(callback: (focused: boolean) => void): () => void {\n    this._focusCallbacks.push(callback);\n    return () => {\n      this._focusCallbacks = this._focusCallbacks.filter((cb) => cb !== callback);\n    };\n  }\n\n  /** Request promotion to fullscreen from partial */\n  requestFullscreen(): void {\n    this.send('FULLSCREEN_REQUEST', {});\n  }\n\n  /** Broadcast an event on the given topic to all subscribed widgets on the canvas. */\n  emit(topic: string, payload: unknown): void {\n    this.send('EVENT_EMIT', { topic, payload });\n  }\n\n  /** Subscribe to events on the given topic; returns an unsubscribe function. */\n  subscribe(topic: string, cb: (event: WidgetEvent) => void): () => void {\n    const list = this._eventListeners.get(topic) ?? [];\n    list.push(cb);\n    this._eventListeners.set(topic, list);\n    return () => {\n      const current = this._eventListeners.get(topic);\n      if (!current) return;\n      const idx = current.indexOf(cb);\n      if (idx !== -1) current.splice(idx, 1);\n    };\n  }\n\n  /** Send a structured log entry to the canvas host for centralized debugging. */\n  log(level: 'info' | 'warn' | 'error', message: string, data?: unknown): void {\n    this.send('LOG', { level, message, data: data ?? null });\n  }\n\n  /** Request user consent for a named data scope; resolves with the consent decision. */\n  async requestConsent(scope: string, reason: string): Promise<ConsentResult> {\n    return new Promise<ConsentResult>((resolve, reject) => {\n      const timeout = setTimeout(() => {\n        this._pendingConsents.delete(scope);\n        reject(new Error('Consent request timed out'));\n      }, 60000);\n\n      this._pendingConsents.set(scope, {\n        resolve: (r: ConsentResult) => {\n          clearTimeout(timeout);\n          resolve(r);\n        },\n        reject: (e: Error) => {\n          clearTimeout(timeout);\n          reject(e);\n        },\n      });\n\n      this.send('CONSENT_REQUEST', { scope, reason });\n    });\n  }\n\n  /** Return the cached JWT for authenticating requests to external APIs; throws if no token is available. Pass forceRefresh=true to bypass the cache. */\n  async getJwt(forceRefresh?: boolean): Promise<string> {\n    if (!forceRefresh && this._cachedJwt && Date.now() < this._cachedJwt.expiresAt - 30000) {\n      return this._cachedJwt.token;\n    }\n    throw new Error('No cached JWT \u2014 widget must use OAuth flow for token refresh');\n  }\n\n  /** Persistent key-value storage scoped to this widget installation. */\n  get storage(): StorageAPI {\n    return {\n      get: (key: string) => this.storageRequest('GET', key),\n      set: (key: string, value: unknown) => this.storageRequest('PUT', key, value).then(() => {}),\n      delete: (key: string) => this.storageRequest('DELETE', key).then(() => {}),\n    };\n  }\n\n  /** Ad-hoc collections/records backend scoped to the canvas/room. */\n  get db(): DbAPI {\n    const req = (path: string, method: string, body?: unknown) => this.widgetApiRequest(path, method, body);\n    return {\n      collection(name: string): DbCollection {\n        const base = `/widget-api/db/${encodeURIComponent(name)}`;\n        return {\n          create: (data) => req(base, 'POST', data) as Promise<DbRecord>,\n          get: (id) => req(`${base}/${encodeURIComponent(id)}`, 'GET') as Promise<DbRecord>,\n          list: (opts?: DbListOptions) => {\n            const qs = new URLSearchParams();\n            if (opts?.limit != null) qs.set('limit', String(opts.limit));\n            if (opts?.cursor) qs.set('cursor', opts.cursor);\n            if (opts?.sort) qs.set('sort', opts.sort);\n            if (opts?.mine) qs.set('mine', 'true');\n            const suffix = qs.toString() ? `?${qs.toString()}` : '';\n            return req(`${base}${suffix}`, 'GET') as Promise<DbRecord[]>;\n          },\n          update: (id, patch) => req(`${base}/${encodeURIComponent(id)}`, 'PATCH', patch) as Promise<DbRecord>,\n          delete: (id) => (req(`${base}/${encodeURIComponent(id)}`, 'DELETE') as Promise<unknown>).then(() => {}),\n        };\n      },\n    };\n  }\n\n  /** Widget configuration settings persisted by the canvas host. */\n  get settings(): SettingsAPI {\n    return {\n      get: () => ({ ...this._settings }),\n      set: (newSettings: Record<string, unknown>) => {\n        this._settings = { ...this._settings, ...newSettings };\n        this.send('SETTINGS_WRITE', { settings: this._settings });\n      },\n      onRemoteChange: (cb: (settings: Record<string, unknown>) => void) => {\n        this._settingsRemoteListeners.push(cb);\n        return () => {\n          this._settingsRemoteListeners = this._settingsRemoteListeners.filter((fn) => fn !== cb);\n        };\n      },\n    };\n  }\n\n  /** Display a toast notification in the canvas host UI. */\n  async notify(message: string, opts?: { level?: string; duration?: number }): Promise<void> {\n    this.send('NOTIFICATION', {\n      message,\n      level: opts?.level ?? 'info',\n      duration: opts?.duration ?? 5000,\n    });\n  }\n\n  // \u2500\u2500 Private \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n  private async widgetApiRequest(path: string, method: string, body?: unknown): Promise<unknown> {\n    if (!this._widgetApiUrl) {\n      throw new Error('Widget API Gateway URL not available');\n    }\n    const url = `${this._widgetApiUrl}${path}`;\n    const headers: Record<string, string> = { 'Content-Type': 'application/json' };\n    if (this._widgetApiToken) {\n      headers['Authorization'] = `Bearer ${this._widgetApiToken}`;\n    }\n    const opts: RequestInit = { method, headers };\n    if (body !== undefined && method !== 'GET' && method !== 'DELETE') {\n      opts.body = JSON.stringify(body);\n    }\n    const response = await fetch(url, opts);\n    if (!response.ok) {\n      const err = await response.json().catch(() => ({}));\n      throw new Error((err as Record<string, string>).message ?? `Request ${method} ${path} failed`);\n    }\n    if (method === 'GET' || method === 'POST' || method === 'PATCH') {\n      const result = await response.json();\n      return (result as Record<string, unknown>).data;\n    }\n    return undefined;\n  }\n\n  private storageRequest(method: string, key: string, value?: unknown): Promise<unknown> {\n    return this.widgetApiRequest(`/widget-api/storage/${encodeURIComponent(key)}`, method, value);\n  }\n\n  private handleMessage(event: MessageEvent): void {\n    const msg = event.data;\n    if (!msg || typeof msg !== 'object' || msg.protocol !== PROTOCOL) return;\n\n    switch (msg.type) {\n      case 'STATE_CHANGE': {\n        const payload = msg.payload as StateChangePayload;\n        this._state = payload.state;\n        for (const listener of this._stateListeners) {\n          listener(payload.state);\n        }\n        break;\n      }\n      case 'EVENT_BROADCAST': {\n        const payload = msg.payload as EventBroadcastPayload;\n        const listeners = this._eventListeners.get(payload.topic);\n        if (listeners) {\n          const evt: WidgetEvent = {\n            topic: payload.topic,\n            payload: payload.payload,\n            emittedAt: payload.emittedAt,\n          };\n          for (const listener of listeners) {\n            listener(evt);\n          }\n        }\n        break;\n      }\n      case 'CONSENT_RESULT': {\n        const payload = msg.payload as ConsentResultPayload;\n        const pending = this._pendingConsents.get(payload.scope);\n        if (pending) {\n          this._pendingConsents.delete(payload.scope);\n          pending.resolve({\n            scope: payload.scope,\n            granted: payload.granted,\n            grantToken: payload.grantToken,\n            expiresIn: payload.expiresIn,\n          });\n        }\n        break;\n      }\n      case 'AUTH_TOKEN_REFRESH': {\n        const payload = msg.payload as { token: string; expiresIn: number };\n        this._cachedJwt = {\n          token: payload.token,\n          expiresAt: Date.now() + payload.expiresIn * 1000,\n        };\n        break;\n      }\n      case 'DISPLAY_STATE_CHANGE': {\n        const newState = msg.payload?.displayState as WidgetDisplayState;\n        if (newState) {\n          this._displayState = newState;\n          this._displayStateCallbacks.forEach((cb) => cb(newState));\n        }\n        break;\n      }\n      case 'FOCUS_CHANGE': {\n        const next = !!msg.payload?.focused;\n        if (next !== this._focused) {\n          this._focused = next;\n          this._focusCallbacks.forEach((cb) => cb(next));\n        }\n        break;\n      }\n      case 'SETTINGS_REMOTE_UPDATE': {\n        const p = msg.payload as { settings: Record<string, unknown> };\n        this._settings = { ...p.settings };\n        for (const fn of this._settingsRemoteListeners) {\n          try {\n            fn({ ...this._settings });\n          } catch {\n            // a listener throwing must not break message handling\n          }\n        }\n        break;\n      }\n      case 'USER_CONTEXT':\n      case 'CANVAS_CONTEXT':\n        // Phase 3+ \u2014 reserved for future use\n        break;\n    }\n  }\n\n  private send(type: string, payload: Record<string, unknown>): void {\n    // Fire and forget \u2014 sign is async but we don't need to await delivery\n    this.buildMessage(type, payload).then((msg) => {\n      window.parent.postMessage(msg, '*');\n    });\n  }\n\n  private async buildMessage(\n    type: string,\n    payload: Record<string, unknown>\n  ): Promise<CanvasMessage> {\n    const nonce = crypto.randomUUID();\n    const timestamp = Date.now();\n\n    let token: string;\n    if (this._hmacSecret) {\n      token = await signToken(this._hmacSecret, type, this._widgetId, nonce, timestamp);\n    } else {\n      token = DEV_MODE_TOKEN;\n    }\n\n    return {\n      protocol: PROTOCOL,\n      type,\n      widgetId: this._widgetId,\n      nonce,\n      timestamp,\n      token,\n      payload,\n    };\n  }\n\n  /** Tear down the SDK instance, remove all listeners, and reject pending consent requests. */\n  destroy(): void {\n    window.removeEventListener('message', this._messageHandler);\n    this._stateListeners.length = 0;\n    this._eventListeners.clear();\n    for (const [, pending] of this._pendingConsents) {\n      pending.reject(new Error('Widget destroyed'));\n    }\n    this._pendingConsents.clear();\n  }\n}\n\n// ============================================\n// Public API: CanvasWidget.init()\n// ============================================\n\n/**\n * Entry point for the Flowstate Canvas Widget SDK.\n *\n * Usage:\n * ```ts\n * import { CanvasWidget } from '@goflowstate/widget-sdk';\n * const widget = await CanvasWidget.init();\n * ```\n */\nexport const CanvasWidget = {\n  /**\n   * Initialize the SDK and establish communication with the canvas host.\n   *\n   * Sends a READY message to the host and waits for an INIT response.\n   * Resolves with a fully initialized {@link CanvasWidgetSDK} instance.\n   * Rejects after 5 seconds if no INIT is received from the host.\n   */\n  init(): Promise<CanvasWidgetSDK> {\n    return new Promise<CanvasWidgetSDK>((resolve, reject) => {\n      const timeout = setTimeout(() => {\n        window.removeEventListener('message', handler);\n        reject(new Error('CanvasWidget.init() timed out \u2014 no INIT received from host within 5s'));\n      }, INIT_TIMEOUT_MS);\n\n      const handler = (event: MessageEvent) => {\n        const msg = event.data;\n        if (!msg || typeof msg !== 'object' || msg.protocol !== PROTOCOL) return;\n        if (msg.type !== 'INIT') return;\n\n        clearTimeout(timeout);\n        window.removeEventListener('message', handler);\n\n        const payload = msg.payload as InitPayload;\n        const sdk = new CanvasWidgetSDKImpl(payload);\n        resolve(sdk);\n      };\n\n      window.addEventListener('message', handler);\n\n      // Send READY to host \u2014 the host will respond with INIT\n      const readyMsg: CanvasMessage = {\n        protocol: PROTOCOL,\n        type: 'READY',\n        widgetId: '', // Not yet known \u2014 host identifies us by iframe source\n        nonce: crypto.randomUUID(),\n        timestamp: Date.now(),\n        token: DEV_MODE_TOKEN, // READY is always allowed, token doesn't matter\n        payload: { manifestVersion: '1' },\n      };\n\n      window.parent.postMessage(readyMsg, '*');\n    });\n  },\n};\n", "// packages/widget-sdk/src/service.ts\n\nimport type { WidgetServiceClient } from './types';\n\nexport interface CreateServiceClientOptions {\n  baseUrl: string;\n  getJwt: (forceRefresh?: boolean) => Promise<string>;\n  fetchImpl?: typeof fetch;\n}\n\nexport function createServiceClient(opts: CreateServiceClientOptions): WidgetServiceClient {\n  const fetchImpl = opts.fetchImpl ?? globalThis.fetch.bind(globalThis);\n  const baseUrl = opts.baseUrl.replace(/\\/+$/, '');\n\n  async function call(path: string, init: RequestInit, token: string): Promise<Response> {\n    const url = `${baseUrl}${path.startsWith('/') ? path : `/${path}`}`;\n    const headers = new Headers(init.headers);\n    headers.set('authorization', `Bearer ${token}`);\n    if (init.body && !headers.has('content-type')) {\n      headers.set('content-type', 'application/json');\n    }\n    return fetchImpl(url, { ...init, headers });\n  }\n\n  return {\n    async fetch<T = unknown>(path: string, init: RequestInit = {}): Promise<T> {\n      let token = await opts.getJwt(false);\n      let res = await call(path, init, token);\n\n      if (res.status === 401) {\n        token = await opts.getJwt(true);\n        res = await call(path, init, token);\n      }\n\n      if (!res.ok) {\n        let body: { message?: string } = {};\n        try {\n          body = (await res.json()) as { message?: string };\n        } catch {\n          // non-JSON body \u2014 ignore\n        }\n        throw new Error(`Widget service request failed (${res.status}): ${body.message ?? ''}`);\n      }\n      return (await res.json()) as T;\n    },\n  };\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACUO,WAAS,oBAAoB,MAAuD;AACzF,UAAM,YAAY,KAAK,aAAa,WAAW,MAAM,KAAK,UAAU;AACpE,UAAM,UAAU,KAAK,QAAQ,QAAQ,QAAQ,EAAE;AAE/C,mBAAe,KAAK,MAAc,MAAmB,OAAkC;AACrF,YAAM,MAAM,GAAG,OAAO,GAAG,KAAK,WAAW,GAAG,IAAI,OAAO,IAAI,IAAI,EAAE;AACjE,YAAM,UAAU,IAAI,QAAQ,KAAK,OAAO;AACxC,cAAQ,IAAI,iBAAiB,UAAU,KAAK,EAAE;AAC9C,UAAI,KAAK,QAAQ,CAAC,QAAQ,IAAI,cAAc,GAAG;AAC7C,gBAAQ,IAAI,gBAAgB,kBAAkB;AAAA,MAChD;AACA,aAAO,UAAU,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC;AAAA,IAC5C;AAEA,WAAO;AAAA,MACL,MAAM,MAAmB,MAAc,OAAoB,CAAC,GAAe;AACzE,YAAI,QAAQ,MAAM,KAAK,OAAO,KAAK;AACnC,YAAI,MAAM,MAAM,KAAK,MAAM,MAAM,KAAK;AAEtC,YAAI,IAAI,WAAW,KAAK;AACtB,kBAAQ,MAAM,KAAK,OAAO,IAAI;AAC9B,gBAAM,MAAM,KAAK,MAAM,MAAM,KAAK;AAAA,QACpC;AAEA,YAAI,CAAC,IAAI,IAAI;AACX,cAAI,OAA6B,CAAC;AAClC,cAAI;AACF,mBAAQ,MAAM,IAAI,KAAK;AAAA,UACzB,QAAQ;AAAA,UAER;AACA,gBAAM,IAAI,MAAM,kCAAkC,IAAI,MAAM,MAAM,KAAK,WAAW,EAAE,EAAE;AAAA,QACxF;AACA,eAAQ,MAAM,IAAI,KAAK;AAAA,MACzB;AAAA,IACF;AAAA,EACF;;;ADfA,MAAM,WAAW;AACjB,MAAM,iBAAiB;AACvB,MAAM,kBAAkB;AAgBxB,MAAI,YAAuD;AAE3D,iBAAe,WAAW,QAAoC;AAC5D,QAAI,aAAa,UAAU,WAAW,OAAQ,QAAO,UAAU;AAE/D,UAAM,UAAU,IAAI,YAAY,EAAE,OAAO,MAAM;AAC/C,UAAM,MAAM,IAAI,YAAY,QAAQ,UAAU;AAC9C,QAAI,WAAW,GAAG,EAAE,IAAI,OAAO;AAE/B,UAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,GAAG,OAAO;AAAA,MAC9F;AAAA,IACF,CAAC;AAED,gBAAY,EAAE,QAAQ,IAAI;AAC1B,WAAO;AAAA,EACT;AAEA,iBAAe,UACb,QACA,MACA,UACA,OACA,WACiB;AACjB,UAAM,MAAM,MAAM,WAAW,MAAM;AACnC,UAAM,OAAO,IAAI,YAAY,EAAE,OAAO,GAAG,IAAI,IAAI,QAAQ,IAAI,KAAK,IAAI,SAAS,EAAE;AACjF,UAAM,MAAM,IAAI,YAAY,KAAK,UAAU;AAC3C,QAAI,WAAW,GAAG,EAAE,IAAI,IAAI;AAC5B,UAAM,MAAM,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,GAAG;AACrD,WAAO,MAAM,KAAK,IAAI,WAAW,GAAG,CAAC,EAClC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AAAA,EACZ;AAOO,MAAM,sBAAN,MAAqD;AAAA,IAClD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,mBAAmB,oBAAI,IAG7B;AAAA,IACM,aAA0D;AAAA,IAC1D,kBAA8D,CAAC;AAAA,IAC/D,gBAAoC;AAAA,IACpC,yBAAqE,CAAC;AAAA,IACtE,WAAW;AAAA,IACX,kBAAqD,CAAC;AAAA,IACtD,2BAA+E,CAAC;AAAA,IAChF,kBAAkB,oBAAI,IAAiD;AAAA,IACvE;AAAA,IACA;AAAA;AAAA,IAGC;AAAA,IAET,YAAY,MAAmB;AAC7B,WAAK,YAAY,KAAK;AACtB,WAAK,SAAS,KAAK;AACnB,WAAK,cAAc,KAAK;AACxB,WAAK,QAAQ,KAAK;AAClB,WAAK,gBAAgB,KAAK;AAC1B,WAAK,kBAAkB,KAAK,kBAAkB;AAC9C,WAAK,kBAAkB,KAAK;AAC5B,WAAK,YAAY,KAAK,YAAY,CAAC;AAGnC,UAAI,KAAK,YAAY;AACnB,aAAK,UAAU,oBAAoB;AAAA,UACjC,SAAS,KAAK;AAAA,UACd,QAAQ,CAAC,iBAA2B,KAAK,OAAO,YAAY;AAAA,QAC9D,CAAC;AAAA,MACH;AAEA,WAAK,kBAAkB,KAAK,cAAc,KAAK,IAAI;AACnD,aAAO,iBAAiB,WAAW,KAAK,eAAe;AAAA,IACzD;AAAA;AAAA,IAGA,IAAI,WAAmB;AACrB,aAAO,KAAK;AAAA,IACd;AAAA;AAAA,IAGA,IAAI,QAA4B;AAC9B,aAAO,KAAK;AAAA,IACd;AAAA;AAAA,IAGA,IAAI,OAA2B;AAC7B,aAAO,KAAK;AAAA,IACd;AAAA;AAAA,IAGA,cAAc,IAAqD;AACjE,WAAK,gBAAgB,KAAK,EAAE;AAC5B,aAAO,MAAM;AACX,cAAM,MAAM,KAAK,gBAAgB,QAAQ,EAAE;AAC3C,YAAI,QAAQ,GAAI,MAAK,gBAAgB,OAAO,KAAK,CAAC;AAAA,MACpD;AAAA,IACF;AAAA;AAAA,IAGA,gBAAsB;AACpB,WAAK,KAAK,kBAAkB,CAAC,CAAC;AAAA,IAChC;AAAA;AAAA,IAGA,kBAAwB;AACtB,WAAK,KAAK,oBAAoB,CAAC,CAAC;AAAA,IAClC;AAAA;AAAA,IAGA,kBAAsC;AACpC,aAAO,KAAK;AAAA,IACd;AAAA;AAAA,IAGA,qBAAqB,UAA2D;AAC9E,WAAK,uBAAuB,KAAK,QAAQ;AACzC,aAAO,MAAM;AACX,aAAK,yBAAyB,KAAK,uBAAuB,OAAO,CAAC,OAAO,OAAO,QAAQ;AAAA,MAC1F;AAAA,IACF;AAAA;AAAA,IAGA,YAAqB;AACnB,aAAO,KAAK;AAAA,IACd;AAAA;AAAA,IAGA,cAAc,UAAkD;AAC9D,WAAK,gBAAgB,KAAK,QAAQ;AAClC,aAAO,MAAM;AACX,aAAK,kBAAkB,KAAK,gBAAgB,OAAO,CAAC,OAAO,OAAO,QAAQ;AAAA,MAC5E;AAAA,IACF;AAAA;AAAA,IAGA,oBAA0B;AACxB,WAAK,KAAK,sBAAsB,CAAC,CAAC;AAAA,IACpC;AAAA;AAAA,IAGA,KAAK,OAAe,SAAwB;AAC1C,WAAK,KAAK,cAAc,EAAE,OAAO,QAAQ,CAAC;AAAA,IAC5C;AAAA;AAAA,IAGA,UAAU,OAAe,IAA8C;AACrE,YAAM,OAAO,KAAK,gBAAgB,IAAI,KAAK,KAAK,CAAC;AACjD,WAAK,KAAK,EAAE;AACZ,WAAK,gBAAgB,IAAI,OAAO,IAAI;AACpC,aAAO,MAAM;AACX,cAAM,UAAU,KAAK,gBAAgB,IAAI,KAAK;AAC9C,YAAI,CAAC,QAAS;AACd,cAAM,MAAM,QAAQ,QAAQ,EAAE;AAC9B,YAAI,QAAQ,GAAI,SAAQ,OAAO,KAAK,CAAC;AAAA,MACvC;AAAA,IACF;AAAA;AAAA,IAGA,IAAI,OAAkC,SAAiB,MAAsB;AAC3E,WAAK,KAAK,OAAO,EAAE,OAAO,SAAS,MAAM,QAAQ,KAAK,CAAC;AAAA,IACzD;AAAA;AAAA,IAGA,MAAM,eAAe,OAAe,QAAwC;AAC1E,aAAO,IAAI,QAAuB,CAAC,SAAS,WAAW;AACrD,cAAM,UAAU,WAAW,MAAM;AAC/B,eAAK,iBAAiB,OAAO,KAAK;AAClC,iBAAO,IAAI,MAAM,2BAA2B,CAAC;AAAA,QAC/C,GAAG,GAAK;AAER,aAAK,iBAAiB,IAAI,OAAO;AAAA,UAC/B,SAAS,CAAC,MAAqB;AAC7B,yBAAa,OAAO;AACpB,oBAAQ,CAAC;AAAA,UACX;AAAA,UACA,QAAQ,CAAC,MAAa;AACpB,yBAAa,OAAO;AACpB,mBAAO,CAAC;AAAA,UACV;AAAA,QACF,CAAC;AAED,aAAK,KAAK,mBAAmB,EAAE,OAAO,OAAO,CAAC;AAAA,MAChD,CAAC;AAAA,IACH;AAAA;AAAA,IAGA,MAAM,OAAO,cAAyC;AACpD,UAAI,CAAC,gBAAgB,KAAK,cAAc,KAAK,IAAI,IAAI,KAAK,WAAW,YAAY,KAAO;AACtF,eAAO,KAAK,WAAW;AAAA,MACzB;AACA,YAAM,IAAI,MAAM,mEAA8D;AAAA,IAChF;AAAA;AAAA,IAGA,IAAI,UAAsB;AACxB,aAAO;AAAA,QACL,KAAK,CAAC,QAAgB,KAAK,eAAe,OAAO,GAAG;AAAA,QACpD,KAAK,CAAC,KAAa,UAAmB,KAAK,eAAe,OAAO,KAAK,KAAK,EAAE,KAAK,MAAM;AAAA,QAAC,CAAC;AAAA,QAC1F,QAAQ,CAAC,QAAgB,KAAK,eAAe,UAAU,GAAG,EAAE,KAAK,MAAM;AAAA,QAAC,CAAC;AAAA,MAC3E;AAAA,IACF;AAAA;AAAA,IAGA,IAAI,KAAY;AACd,YAAM,MAAM,CAAC,MAAc,QAAgB,SAAmB,KAAK,iBAAiB,MAAM,QAAQ,IAAI;AACtG,aAAO;AAAA,QACL,WAAW,MAA4B;AACrC,gBAAM,OAAO,kBAAkB,mBAAmB,IAAI,CAAC;AACvD,iBAAO;AAAA,YACL,QAAQ,CAAC,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,YACxC,KAAK,CAAC,OAAO,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,KAAK;AAAA,YAC3D,MAAM,CAAC,SAAyB;AAC9B,oBAAM,KAAK,IAAI,gBAAgB;AAC/B,kBAAI,MAAM,SAAS,KAAM,IAAG,IAAI,SAAS,OAAO,KAAK,KAAK,CAAC;AAC3D,kBAAI,MAAM,OAAQ,IAAG,IAAI,UAAU,KAAK,MAAM;AAC9C,kBAAI,MAAM,KAAM,IAAG,IAAI,QAAQ,KAAK,IAAI;AACxC,kBAAI,MAAM,KAAM,IAAG,IAAI,QAAQ,MAAM;AACrC,oBAAM,SAAS,GAAG,SAAS,IAAI,IAAI,GAAG,SAAS,CAAC,KAAK;AACrD,qBAAO,IAAI,GAAG,IAAI,GAAG,MAAM,IAAI,KAAK;AAAA,YACtC;AAAA,YACA,QAAQ,CAAC,IAAI,UAAU,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,SAAS,KAAK;AAAA,YAC9E,QAAQ,CAAC,OAAQ,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,QAAQ,EAAuB,KAAK,MAAM;AAAA,YAAC,CAAC;AAAA,UACxG;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA,IAGA,IAAI,WAAwB;AAC1B,aAAO;AAAA,QACL,KAAK,OAAO,EAAE,GAAG,KAAK,UAAU;AAAA,QAChC,KAAK,CAAC,gBAAyC;AAC7C,eAAK,YAAY,EAAE,GAAG,KAAK,WAAW,GAAG,YAAY;AACrD,eAAK,KAAK,kBAAkB,EAAE,UAAU,KAAK,UAAU,CAAC;AAAA,QAC1D;AAAA,QACA,gBAAgB,CAAC,OAAoD;AACnE,eAAK,yBAAyB,KAAK,EAAE;AACrC,iBAAO,MAAM;AACX,iBAAK,2BAA2B,KAAK,yBAAyB,OAAO,CAAC,OAAO,OAAO,EAAE;AAAA,UACxF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA,IAGA,MAAM,OAAO,SAAiB,MAA6D;AACzF,WAAK,KAAK,gBAAgB;AAAA,QACxB;AAAA,QACA,OAAO,MAAM,SAAS;AAAA,QACtB,UAAU,MAAM,YAAY;AAAA,MAC9B,CAAC;AAAA,IACH;AAAA;AAAA,IAIA,MAAc,iBAAiB,MAAc,QAAgB,MAAkC;AAC7F,UAAI,CAAC,KAAK,eAAe;AACvB,cAAM,IAAI,MAAM,sCAAsC;AAAA,MACxD;AACA,YAAM,MAAM,GAAG,KAAK,aAAa,GAAG,IAAI;AACxC,YAAM,UAAkC,EAAE,gBAAgB,mBAAmB;AAC7E,UAAI,KAAK,iBAAiB;AACxB,gBAAQ,eAAe,IAAI,UAAU,KAAK,eAAe;AAAA,MAC3D;AACA,YAAM,OAAoB,EAAE,QAAQ,QAAQ;AAC5C,UAAI,SAAS,UAAa,WAAW,SAAS,WAAW,UAAU;AACjE,aAAK,OAAO,KAAK,UAAU,IAAI;AAAA,MACjC;AACA,YAAM,WAAW,MAAM,MAAM,KAAK,IAAI;AACtC,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,MAAM,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,cAAM,IAAI,MAAO,IAA+B,WAAW,WAAW,MAAM,IAAI,IAAI,SAAS;AAAA,MAC/F;AACA,UAAI,WAAW,SAAS,WAAW,UAAU,WAAW,SAAS;AAC/D,cAAM,SAAS,MAAM,SAAS,KAAK;AACnC,eAAQ,OAAmC;AAAA,MAC7C;AACA,aAAO;AAAA,IACT;AAAA,IAEQ,eAAe,QAAgB,KAAa,OAAmC;AACrF,aAAO,KAAK,iBAAiB,uBAAuB,mBAAmB,GAAG,CAAC,IAAI,QAAQ,KAAK;AAAA,IAC9F;AAAA,IAEQ,cAAc,OAA2B;AAC/C,YAAM,MAAM,MAAM;AAClB,UAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,IAAI,aAAa,SAAU;AAElE,cAAQ,IAAI,MAAM;AAAA,QAChB,KAAK,gBAAgB;AACnB,gBAAM,UAAU,IAAI;AACpB,eAAK,SAAS,QAAQ;AACtB,qBAAW,YAAY,KAAK,iBAAiB;AAC3C,qBAAS,QAAQ,KAAK;AAAA,UACxB;AACA;AAAA,QACF;AAAA,QACA,KAAK,mBAAmB;AACtB,gBAAM,UAAU,IAAI;AACpB,gBAAM,YAAY,KAAK,gBAAgB,IAAI,QAAQ,KAAK;AACxD,cAAI,WAAW;AACb,kBAAM,MAAmB;AAAA,cACvB,OAAO,QAAQ;AAAA,cACf,SAAS,QAAQ;AAAA,cACjB,WAAW,QAAQ;AAAA,YACrB;AACA,uBAAW,YAAY,WAAW;AAChC,uBAAS,GAAG;AAAA,YACd;AAAA,UACF;AACA;AAAA,QACF;AAAA,QACA,KAAK,kBAAkB;AACrB,gBAAM,UAAU,IAAI;AACpB,gBAAM,UAAU,KAAK,iBAAiB,IAAI,QAAQ,KAAK;AACvD,cAAI,SAAS;AACX,iBAAK,iBAAiB,OAAO,QAAQ,KAAK;AAC1C,oBAAQ,QAAQ;AAAA,cACd,OAAO,QAAQ;AAAA,cACf,SAAS,QAAQ;AAAA,cACjB,YAAY,QAAQ;AAAA,cACpB,WAAW,QAAQ;AAAA,YACrB,CAAC;AAAA,UACH;AACA;AAAA,QACF;AAAA,QACA,KAAK,sBAAsB;AACzB,gBAAM,UAAU,IAAI;AACpB,eAAK,aAAa;AAAA,YAChB,OAAO,QAAQ;AAAA,YACf,WAAW,KAAK,IAAI,IAAI,QAAQ,YAAY;AAAA,UAC9C;AACA;AAAA,QACF;AAAA,QACA,KAAK,wBAAwB;AAC3B,gBAAM,WAAW,IAAI,SAAS;AAC9B,cAAI,UAAU;AACZ,iBAAK,gBAAgB;AACrB,iBAAK,uBAAuB,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC;AAAA,UAC1D;AACA;AAAA,QACF;AAAA,QACA,KAAK,gBAAgB;AACnB,gBAAM,OAAO,CAAC,CAAC,IAAI,SAAS;AAC5B,cAAI,SAAS,KAAK,UAAU;AAC1B,iBAAK,WAAW;AAChB,iBAAK,gBAAgB,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;AAAA,UAC/C;AACA;AAAA,QACF;AAAA,QACA,KAAK,0BAA0B;AAC7B,gBAAM,IAAI,IAAI;AACd,eAAK,YAAY,EAAE,GAAG,EAAE,SAAS;AACjC,qBAAW,MAAM,KAAK,0BAA0B;AAC9C,gBAAI;AACF,iBAAG,EAAE,GAAG,KAAK,UAAU,CAAC;AAAA,YAC1B,QAAQ;AAAA,YAER;AAAA,UACF;AACA;AAAA,QACF;AAAA,QACA,KAAK;AAAA,QACL,KAAK;AAEH;AAAA,MACJ;AAAA,IACF;AAAA,IAEQ,KAAK,MAAc,SAAwC;AAEjE,WAAK,aAAa,MAAM,OAAO,EAAE,KAAK,CAAC,QAAQ;AAC7C,eAAO,OAAO,YAAY,KAAK,GAAG;AAAA,MACpC,CAAC;AAAA,IACH;AAAA,IAEA,MAAc,aACZ,MACA,SACwB;AACxB,YAAM,QAAQ,OAAO,WAAW;AAChC,YAAM,YAAY,KAAK,IAAI;AAE3B,UAAI;AACJ,UAAI,KAAK,aAAa;AACpB,gBAAQ,MAAM,UAAU,KAAK,aAAa,MAAM,KAAK,WAAW,OAAO,SAAS;AAAA,MAClF,OAAO;AACL,gBAAQ;AAAA,MACV;AAEA,aAAO;AAAA,QACL,UAAU;AAAA,QACV;AAAA,QACA,UAAU,KAAK;AAAA,QACf;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA;AAAA,IAGA,UAAgB;AACd,aAAO,oBAAoB,WAAW,KAAK,eAAe;AAC1D,WAAK,gBAAgB,SAAS;AAC9B,WAAK,gBAAgB,MAAM;AAC3B,iBAAW,CAAC,EAAE,OAAO,KAAK,KAAK,kBAAkB;AAC/C,gBAAQ,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA,MAC9C;AACA,WAAK,iBAAiB,MAAM;AAAA,IAC9B;AAAA,EACF;AAeO,MAAM,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQ1B,OAAiC;AAC/B,aAAO,IAAI,QAAyB,CAAC,SAAS,WAAW;AACvD,cAAM,UAAU,WAAW,MAAM;AAC/B,iBAAO,oBAAoB,WAAW,OAAO;AAC7C,iBAAO,IAAI,MAAM,2EAAsE,CAAC;AAAA,QAC1F,GAAG,eAAe;AAElB,cAAM,UAAU,CAAC,UAAwB;AACvC,gBAAM,MAAM,MAAM;AAClB,cAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,IAAI,aAAa,SAAU;AAClE,cAAI,IAAI,SAAS,OAAQ;AAEzB,uBAAa,OAAO;AACpB,iBAAO,oBAAoB,WAAW,OAAO;AAE7C,gBAAM,UAAU,IAAI;AACpB,gBAAM,MAAM,IAAI,oBAAoB,OAAO;AAC3C,kBAAQ,GAAG;AAAA,QACb;AAEA,eAAO,iBAAiB,WAAW,OAAO;AAG1C,cAAM,WAA0B;AAAA,UAC9B,UAAU;AAAA,UACV,MAAM;AAAA,UACN,UAAU;AAAA;AAAA,UACV,OAAO,OAAO,WAAW;AAAA,UACzB,WAAW,KAAK,IAAI;AAAA,UACpB,OAAO;AAAA;AAAA,UACP,SAAS,EAAE,iBAAiB,IAAI;AAAA,QAClC;AAEA,eAAO,OAAO,YAAY,UAAU,GAAG;AAAA,MACzC,CAAC;AAAA,IACH;AAAA,EACF;",
+  "names": []
+}

package/dist/db.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=db.test.d.ts.map

package/dist/db.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.test.d.ts","sourceRoot":"","sources":["../src/db.test.ts"],"names":[],"mappings":""}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { CanvasWidget } from './sdk';
+export type { CanvasWidgetSDK, WidgetDisplayState, WidgetEvent, SettingsAPI } from './types';
+export { createServiceClient } from './service';
+export type { WidgetManifestServiceBlock, WidgetManifestServiceScope, WidgetServiceClient, DbRecord, DbCollection, DbAPI, DbListOptions, } from './types';
+export type { CreateServiceClientOptions } from './service';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AACrC,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,YAAY,EACV,0BAA0B,EAC1B,0BAA0B,EAC1B,mBAAmB,EACnB,QAAQ,EACR,YAAY,EACZ,KAAK,EACL,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,YAAY,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC"}