@honua/app-platform 0.0.20-alpha.0

package/share/embed-token.js

@@ -0,0 +1,99 @@
+/**
+ * Fragment-only embed-token parsing.
+ *
+ * Embed bearer tokens MUST travel in the URL fragment (`#...`), never the query
+ * string. The fragment is not sent to the origin server, is not written to
+ * server access logs or the `Referer` header, and is not captured by most
+ * proxy/CDN request logging — so a fragment-borne bearer token has a much
+ * smaller disclosure surface than a query-string one. This helper extracts a
+ * token from the fragment and *rejects* query-string bearer patterns outright
+ * so a generated app or embed never silently accepts a leak-prone placement.
+ *
+ * @module
+ */
+/** Default fragment parameter name an embed token is read from. */
+export const HONUA_EMBED_TOKEN_FRAGMENT_PARAM = "embed_token";
+function normalizeParams(param) {
+    if (param === undefined)
+        return [HONUA_EMBED_TOKEN_FRAGMENT_PARAM];
+    const list = typeof param === "string" ? [param] : param;
+    const names = list.map((name) => name.trim()).filter((name) => name.length > 0);
+    return names.length > 0 ? names : [HONUA_EMBED_TOKEN_FRAGMENT_PARAM];
+}
+/**
+ * Splits an arbitrary URL or location-like string into its query and fragment
+ * components without requiring an absolute base. Accepts a full URL
+ * (`https://host/path?q#frag`), a relative URL (`/path?q#frag`), a bare query
+ * (`?q`), or a bare fragment (`#frag`).
+ */
+function splitLocation(input) {
+    if (typeof input !== "string")
+        return null;
+    const hashIndex = input.indexOf("#");
+    const fragment = hashIndex >= 0 ? input.slice(hashIndex + 1) : "";
+    const beforeFragment = hashIndex >= 0 ? input.slice(0, hashIndex) : input;
+    const queryIndex = beforeFragment.indexOf("?");
+    const query = queryIndex >= 0 ? beforeFragment.slice(queryIndex + 1) : "";
+    return { query, fragment };
+}
+/**
+ * Reads a named parameter out of a `&`/`=` encoded component (query or
+ * fragment). Returns the first match's decoded value, or `null` if absent. A
+ * present-but-empty parameter (`embed_token=`) returns an empty string so the
+ * caller can distinguish "absent" from "blank".
+ */
+function readParam(component, names) {
+    if (component.length === 0)
+        return null;
+    const params = new URLSearchParams(component);
+    for (const name of names) {
+        if (params.has(name))
+            return params.get(name) ?? "";
+    }
+    return null;
+}
+/**
+ * Extracts an embed bearer token from a URL/location fragment, rejecting any
+ * token placed in the query string.
+ *
+ * Resolution order:
+ * 1. If a token parameter is present in the **query string**, reject with
+ *    `query-string-token` — even if a fragment token also exists — so a
+ *    leak-prone placement is never silently tolerated.
+ * 2. Otherwise read the token from the **fragment**. A blank fragment token
+ *    rejects with `empty`; a missing one rejects with `missing`.
+ *
+ * @param input A full or relative URL, a bare query, or a bare fragment. In a
+ *   browser, pass `window.location.href` (or `location.search + location.hash`).
+ */
+export function parseEmbedTokenFromFragment(input, options = {}) {
+    const names = normalizeParams(options.param);
+    const parts = splitLocation(input);
+    if (parts === null)
+        return { ok: false, reason: "malformed" };
+    // (1) Reject query-string bearer tokens unconditionally.
+    const queryToken = readParam(parts.query, names);
+    if (queryToken !== null) {
+        return { ok: false, reason: "query-string-token" };
+    }
+    // (2) Read from the fragment.
+    const fragmentToken = readParam(parts.fragment, names);
+    if (fragmentToken === null)
+        return { ok: false, reason: "missing" };
+    const trimmed = fragmentToken.trim();
+    if (trimmed.length === 0)
+        return { ok: false, reason: "empty" };
+    return { ok: true, token: trimmed, param: names[0] };
+}
+/**
+ * Convenience guard: `true` when `input` carries an embed-token parameter in the
+ * query string (any leak-prone placement). Useful for asserting a redirect
+ * stripped the token before it reached a logged surface.
+ */
+export function hasQueryStringEmbedToken(input, options = {}) {
+    const names = normalizeParams(options.param);
+    const parts = splitLocation(input);
+    if (parts === null)
+        return false;
+    return readParam(parts.query, names) !== null;
+}

package/share/index.d.ts

@@ -0,0 +1,35 @@
+/**
+ * `@honua/sdk-js/share` — browser-safe Share, embed-token, public-link, and
+ * open-data contract types and helpers.
+ *
+ * The long-term Console runtime is .NET/Blazor, but generated apps and
+ * embeddable map surfaces need browser-safe contracts that match honua-server
+ * and `honua-sdk-dotnet`. This subpath projects that shared vocabulary into
+ * TypeScript so browser code consumes Share/embed/open-data state without
+ * inventing a second contract:
+ *
+ * - Contract types mirror the server JSON wire names exactly (a parsed `fetch`
+ *   body assigns straight into them).
+ * - {@link parseEmbedTokenFromFragment} enforces fragment-only embed bearer
+ *   tokens and rejects query-string placements.
+ * - Denial helpers model anonymous-safe access state without leaking item
+ *   identity or private titles.
+ * - Open-data helpers project a held read model into DCAT / Schema.org output.
+ *
+ * This entrypoint owns no transport: it consumes server responses that are
+ * already available. Admin/write share operations live on
+ * `@honua/sdk-js/control-plane`.
+ *
+ * @experimental This entrypoint is not yet covered by the SDK's semver contract
+ *   — the surface may change in any minor release prior to `1.0.0`.
+ * @module
+ */
+export { HONUA_EMBED_AUDIENCES, HONUA_SHARE_ACCESS_TIERS, } from "./types.js";
+export type { HonuaEmbedAudience, HonuaEmbedRedemption, HonuaEmbedToken, HonuaPublicLinkResolution, HonuaPublicLinkToken, HonuaShareAccessTier, HonuaShareDependencyConflict, HonuaShareItemType, HonuaShareProjection, } from "./types.js";
+export { HONUA_SHARE_DENIAL_MESSAGES, denialFromHttpStatus, denyShareAccess, grantShareAccess, isShareAccessDenied, isShareAccessGranted, } from "./denial.js";
+export type { HonuaEmbedAccessState, HonuaPublicLinkAccessState, HonuaShareAccessDenied, HonuaShareAccessGranted, HonuaShareAccessKind, HonuaShareAccessState, HonuaShareDenialReason, } from "./denial.js";
+export { HONUA_EMBED_TOKEN_FRAGMENT_PARAM, hasQueryStringEmbedToken, parseEmbedTokenFromFragment, } from "./embed-token.js";
+export type { HonuaEmbedTokenParseOk, HonuaEmbedTokenParseRejected, HonuaEmbedTokenParseResult, HonuaEmbedTokenRejectionReason, ParseEmbedTokenOptions, } from "./embed-token.js";
+export { toDcatDataset, toSchemaOrgDataset, } from "./open-data.js";
+export type { DcatDataset, DcatDistribution, HonuaOpenDataDistribution, HonuaOpenDataReadProjection, SchemaOrgDataDownload, SchemaOrgDataset, } from "./open-data.js";
+//# sourceMappingURL=index.d.ts.map

package/share/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/share/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,yBAAyB,EACzB,oBAAoB,EACpB,oBAAoB,EACpB,4BAA4B,EAC5B,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,2BAA2B,EAC3B,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,qBAAqB,EACrB,0BAA0B,EAC1B,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,gCAAgC,EAChC,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,sBAAsB,EACtB,4BAA4B,EAC5B,0BAA0B,EAC1B,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,aAAa,EACb,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,WAAW,EACX,gBAAgB,EAChB,yBAAyB,EACzB,2BAA2B,EAC3B,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,gBAAgB,CAAC"}

package/share/index.js

@@ -0,0 +1,30 @@
+/**
+ * `@honua/sdk-js/share` — browser-safe Share, embed-token, public-link, and
+ * open-data contract types and helpers.
+ *
+ * The long-term Console runtime is .NET/Blazor, but generated apps and
+ * embeddable map surfaces need browser-safe contracts that match honua-server
+ * and `honua-sdk-dotnet`. This subpath projects that shared vocabulary into
+ * TypeScript so browser code consumes Share/embed/open-data state without
+ * inventing a second contract:
+ *
+ * - Contract types mirror the server JSON wire names exactly (a parsed `fetch`
+ *   body assigns straight into them).
+ * - {@link parseEmbedTokenFromFragment} enforces fragment-only embed bearer
+ *   tokens and rejects query-string placements.
+ * - Denial helpers model anonymous-safe access state without leaking item
+ *   identity or private titles.
+ * - Open-data helpers project a held read model into DCAT / Schema.org output.
+ *
+ * This entrypoint owns no transport: it consumes server responses that are
+ * already available. Admin/write share operations live on
+ * `@honua/sdk-js/control-plane`.
+ *
+ * @experimental This entrypoint is not yet covered by the SDK's semver contract
+ *   — the surface may change in any minor release prior to `1.0.0`.
+ * @module
+ */
+export { HONUA_EMBED_AUDIENCES, HONUA_SHARE_ACCESS_TIERS, } from "./types.js";
+export { HONUA_SHARE_DENIAL_MESSAGES, denialFromHttpStatus, denyShareAccess, grantShareAccess, isShareAccessDenied, isShareAccessGranted, } from "./denial.js";
+export { HONUA_EMBED_TOKEN_FRAGMENT_PARAM, hasQueryStringEmbedToken, parseEmbedTokenFromFragment, } from "./embed-token.js";
+export { toDcatDataset, toSchemaOrgDataset, } from "./open-data.js";

package/share/open-data.d.ts

@@ -0,0 +1,114 @@
+/**
+ * Browser-safe open-data read projections and DCAT / Schema.org helper shapes.
+ *
+ * Generated apps and embeds frequently render an open-data landing card for a
+ * public-indexed item and need a stable, anonymous-safe shape plus a way to
+ * emit standards-aligned metadata (DCAT distributions, a Schema.org `Dataset`
+ * JSON-LD block) from an already-fetched server response. These helpers do not
+ * fetch or publish — they project a presentation read model the browser already
+ * holds into the shared vocabulary, so Console JS interop and generated apps
+ * agree on field names.
+ *
+ * The DCAT / Schema.org output follows the public DCAT (W3C / DCAT-AP) and
+ * Schema.org `Dataset` vocabularies. When honua-server's open-data publication
+ * API lands its own projection, prefer the server-emitted document; this helper
+ * remains the browser fallback for responses that only carry the read model.
+ *
+ * @module
+ */
+import type { HonuaShareItemType } from "./types.js";
+/** A downloadable/queryable distribution of an open-data item. */
+export interface HonuaOpenDataDistribution {
+    /** Stable id of the distribution within the item. */
+    readonly id?: string;
+    /** Human title of the distribution (e.g. "GeoJSON download"). */
+    readonly title?: string;
+    /** IANA media type (e.g. `application/geo+json`). */
+    readonly mediaType?: string;
+    /** Short format label (e.g. `GeoJSON`, `CSV`, `OGC API - Features`). */
+    readonly format?: string;
+    /** Direct download URL, when the distribution is a file. */
+    readonly downloadUrl?: string;
+    /** Access URL for service/API distributions (non-file). */
+    readonly accessUrl?: string;
+}
+/**
+ * Anonymous-safe open-data read projection for a public-indexed item. Presents
+ * only fields safe to expose on an open-data landing surface.
+ */
+export interface HonuaOpenDataReadProjection {
+    readonly itemId: string;
+    readonly itemType: HonuaShareItemType;
+    readonly title: string;
+    readonly summary?: string;
+    /** Keyword/theme tags. */
+    readonly keywords?: readonly string[];
+    /** License identifier or URL, when published. */
+    readonly license?: string;
+    /** Publishing organization/attribution, when set. */
+    readonly publisher?: string;
+    /** ISO-8601 timestamp the item was last modified, when known. */
+    readonly modified?: string;
+    /** Landing-page URL for the item on the open-data surface. */
+    readonly landingPageUrl?: string;
+    /** Distributions the item is available through. */
+    readonly distributions?: readonly HonuaOpenDataDistribution[];
+}
+/** A DCAT distribution object (`dcat:Distribution`). */
+export interface DcatDistribution {
+    readonly "@type": "dcat:Distribution";
+    readonly title?: string;
+    readonly mediaType?: string;
+    readonly format?: string;
+    readonly downloadURL?: string;
+    readonly accessURL?: string;
+}
+/** A DCAT dataset object (`dcat:Dataset`) for an open-data item. */
+export interface DcatDataset {
+    readonly "@type": "dcat:Dataset";
+    readonly identifier: string;
+    readonly title: string;
+    readonly description?: string;
+    readonly keyword?: readonly string[];
+    readonly license?: string;
+    readonly publisher?: string;
+    readonly modified?: string;
+    readonly landingPage?: string;
+    readonly distribution?: readonly DcatDistribution[];
+}
+/** A Schema.org `DataDownload` node. */
+export interface SchemaOrgDataDownload {
+    readonly "@type": "DataDownload";
+    readonly name?: string;
+    readonly encodingFormat?: string;
+    readonly contentUrl?: string;
+}
+/** A Schema.org `Dataset` JSON-LD node for an open-data item. */
+export interface SchemaOrgDataset {
+    readonly "@context": "https://schema.org";
+    readonly "@type": "Dataset";
+    readonly identifier: string;
+    readonly name: string;
+    readonly description?: string;
+    readonly keywords?: readonly string[];
+    readonly license?: string;
+    readonly publisher?: {
+        readonly "@type": "Organization";
+        readonly name: string;
+    };
+    readonly dateModified?: string;
+    readonly url?: string;
+    readonly distribution?: readonly SchemaOrgDataDownload[];
+}
+/**
+ * Projects a browser-held open-data read projection into a `dcat:Dataset`
+ * object. Omits unset/empty fields so the emitted document is minimal.
+ */
+export declare function toDcatDataset(projection: HonuaOpenDataReadProjection): DcatDataset;
+/**
+ * Projects a browser-held open-data read projection into a Schema.org `Dataset`
+ * JSON-LD node, suitable for injection into a `<script type="application/ld+json">`
+ * block on an open-data landing page. Omits unset/empty fields.
+ */
+export declare function toSchemaOrgDataset(projection: HonuaOpenDataReadProjection): SchemaOrgDataset;
+//# sourceMappingURL=open-data.d.ts.map

package/share/open-data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-data.d.ts","sourceRoot":"","sources":["../../../src/share/open-data.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,kEAAkE;AAClE,MAAM,WAAW,yBAAyB;IACxC,qDAAqD;IACrD,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,2DAA2D;IAC3D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,0BAA0B;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,iDAAiD;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,qDAAqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,8DAA8D;IAC9D,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,mDAAmD;IACnD,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,yBAAyB,EAAE,CAAC;CAC/D;AAED,wDAAwD;AACxD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,oEAAoE;AACpE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACrD;AAED,wCAAwC;AACxC,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,iEAAiE;AACjE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACjF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;CAC1D;AAYD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,2BAA2B,GAAG,WAAW,CAuBlF;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,2BAA2B,GAAG,gBAAgB,CAsB5F"}

package/share/open-data.js

@@ -0,0 +1,81 @@
+/**
+ * Browser-safe open-data read projections and DCAT / Schema.org helper shapes.
+ *
+ * Generated apps and embeds frequently render an open-data landing card for a
+ * public-indexed item and need a stable, anonymous-safe shape plus a way to
+ * emit standards-aligned metadata (DCAT distributions, a Schema.org `Dataset`
+ * JSON-LD block) from an already-fetched server response. These helpers do not
+ * fetch or publish — they project a presentation read model the browser already
+ * holds into the shared vocabulary, so Console JS interop and generated apps
+ * agree on field names.
+ *
+ * The DCAT / Schema.org output follows the public DCAT (W3C / DCAT-AP) and
+ * Schema.org `Dataset` vocabularies. When honua-server's open-data publication
+ * API lands its own projection, prefer the server-emitted document; this helper
+ * remains the browser fallback for responses that only carry the read model.
+ *
+ * @module
+ */
+function compact(value) {
+    const out = {};
+    for (const [key, val] of Object.entries(value)) {
+        if (val === undefined)
+            continue;
+        if (Array.isArray(val) && val.length === 0)
+            continue;
+        out[key] = val;
+    }
+    return out;
+}
+/**
+ * Projects a browser-held open-data read projection into a `dcat:Dataset`
+ * object. Omits unset/empty fields so the emitted document is minimal.
+ */
+export function toDcatDataset(projection) {
+    const distribution = projection.distributions?.map((d) => compact({
+        "@type": "dcat:Distribution",
+        title: d.title,
+        mediaType: d.mediaType,
+        format: d.format,
+        downloadURL: d.downloadUrl,
+        accessURL: d.accessUrl,
+    }));
+    return compact({
+        "@type": "dcat:Dataset",
+        identifier: projection.itemId,
+        title: projection.title,
+        description: projection.summary,
+        keyword: projection.keywords,
+        license: projection.license,
+        publisher: projection.publisher,
+        modified: projection.modified,
+        landingPage: projection.landingPageUrl,
+        distribution,
+    });
+}
+/**
+ * Projects a browser-held open-data read projection into a Schema.org `Dataset`
+ * JSON-LD node, suitable for injection into a `<script type="application/ld+json">`
+ * block on an open-data landing page. Omits unset/empty fields.
+ */
+export function toSchemaOrgDataset(projection) {
+    const distribution = projection.distributions?.map((d) => compact({
+        "@type": "DataDownload",
+        name: d.title,
+        encodingFormat: d.mediaType ?? d.format,
+        contentUrl: d.downloadUrl ?? d.accessUrl,
+    }));
+    return compact({
+        "@context": "https://schema.org",
+        "@type": "Dataset",
+        identifier: projection.itemId,
+        name: projection.title,
+        description: projection.summary,
+        keywords: projection.keywords,
+        license: projection.license,
+        publisher: projection.publisher ? { "@type": "Organization", name: projection.publisher } : undefined,
+        dateModified: projection.modified,
+        url: projection.landingPageUrl,
+        distribution,
+    });
+}

package/share/types.d.ts

@@ -0,0 +1,163 @@
+/**
+ * Browser-safe Share, embed, public-link, and open-data contract types.
+ *
+ * These mirror the canonical honua-server Console Share contracts
+ * (`ConsoleShareAccessTier`, `ConsoleEmbedAudience`, `ConsoleShareProjection`,
+ * `ConsolePublicLinkResolutionResponse`, `ConsoleEmbedRedeemResponse`, …) and
+ * the `honua-sdk-dotnet` console clients so generated apps, embeds, and Console
+ * JS interop consume one vocabulary instead of inventing a second one. Field
+ * names match the server JSON wire names exactly so a parsed `fetch` body is
+ * assignable to these types without remapping.
+ *
+ * @module
+ */
+/**
+ * Effective Share access tier for a content item. The share facet of an item,
+ * distinct from membership visibility: `public-link` exposes opaque-token
+ * access without changing membership; `public-indexed` implies the item is
+ * publicly readable and eligible for catalog indexing / open-data distribution.
+ *
+ * Mirrors `ConsoleShareAccessTier` (`private` | `organization` | `public-link`
+ * | `public-indexed`). The trailing `(string & {})` keeps the union open so a
+ * future server tier round-trips without a type error while preserving
+ * autocomplete on the known members.
+ */
+export type HonuaShareAccessTier = "private" | "organization" | "public-link" | "public-indexed" | (string & {});
+/** Known {@link HonuaShareAccessTier} members, for validation/iteration. */
+export declare const HONUA_SHARE_ACCESS_TIERS: readonly ["private", "organization", "public-link", "public-indexed"];
+/**
+ * Scope an embed authorization permits the redeeming surface to render.
+ * Mirrors `ConsoleEmbedAudience` (`map` | `content`).
+ */
+export type HonuaEmbedAudience = "map" | "content" | (string & {});
+/** Known {@link HonuaEmbedAudience} members. */
+export declare const HONUA_EMBED_AUDIENCES: readonly ["map", "content"];
+/**
+ * Console content item category. Mirrors `ConsoleContentItemType`.
+ */
+export type HonuaShareItemType = "service" | "layer" | "saved-map" | "dashboard" | "report" | "generated-app" | "open-data" | (string & {});
+/**
+ * A public-link token granting opaque, membership-independent read access.
+ * Mirrors `ConsolePublicLinkToken`.
+ *
+ * The opaque {@link token} value is disclosed only in the mint response and is
+ * `null`/absent on every subsequent read; callers reference a token thereafter
+ * by its stable {@link tokenId}.
+ */
+export interface HonuaPublicLinkToken {
+    /** Stable identifier (safe to surface in lists/audit; carries no capability). */
+    readonly tokenId: string;
+    /** Opaque token value — populated only in the mint response, else `null`. */
+    readonly token?: string | null;
+    /** Content item this token grants access to. */
+    readonly itemId: string;
+    /** ISO-8601 timestamp the token was minted. */
+    readonly createdAt: string;
+    /** ISO-8601 expiry; `null`/absent means it never self-expires. */
+    readonly expiresAt?: string | null;
+    /** Principal that minted the token (audit attribution). */
+    readonly createdById?: string | null;
+    /** True when the token can no longer resolve (revoked or past expiry). */
+    readonly isExpired: boolean;
+}
+/**
+ * An embed token authorizing an external surface to render an item for a
+ * bounded audience and TTL. Mirrors `ConsoleEmbedToken`. Embed tokens always
+ * carry a hard {@link expiresAt}.
+ */
+export interface HonuaEmbedToken {
+    /** Stable identifier (audit/listing). */
+    readonly tokenId: string;
+    /** Opaque token value — populated only in the mint response. */
+    readonly token?: string | null;
+    /** Content item this token authorizes embedding for. */
+    readonly itemId: string;
+    /** Audience/scope the embed may render. */
+    readonly audience: HonuaEmbedAudience;
+    /** ISO-8601 timestamp the token was minted. */
+    readonly createdAt: string;
+    /** ISO-8601 hard expiry (always present for embed tokens). */
+    readonly expiresAt: string;
+    /** Principal that minted the token (audit attribution). */
+    readonly createdById?: string | null;
+    /** True when past expiry or embedding has been disabled on the item. */
+    readonly isExpired: boolean;
+}
+/**
+ * Server-owned Share access projection — the read model the Share panel renders
+ * without resolving share state client-side. Mirrors `ConsoleShareProjection`.
+ */
+export interface HonuaShareProjection {
+    /** Content item id. */
+    readonly itemId: string;
+    /** Machine-friendly item name. */
+    readonly itemName: string;
+    /** Human-readable title, when set. */
+    readonly itemTitle?: string | null;
+    /** Item category. */
+    readonly itemType: HonuaShareItemType;
+    /** Owner principal id, when set. */
+    readonly ownerId?: string | null;
+    /** Effective Share access tier. */
+    readonly accessTier: HonuaShareAccessTier;
+    /** True when at least one non-expired public-link token exists. */
+    readonly publicLinkEnabled: boolean;
+    /** Active and historical public-link tokens (token value always absent here). */
+    readonly publicLinkTokens?: readonly HonuaPublicLinkToken[];
+    /** True when embedding is enabled for the item. */
+    readonly embedEnabled: boolean;
+    /** Configured embed audience when {@link embedEnabled} is true. */
+    readonly embedAudience?: HonuaEmbedAudience | null;
+    /** Whether the item is currently eligible for open-data distribution. */
+    readonly openDataEligible: boolean;
+    /** Console verbs the requesting principal may perform on the item. */
+    readonly callerPermissions?: readonly string[];
+    /** True when an anonymous caller could read the item through any share mechanism. */
+    readonly anonymousEligible: boolean;
+    /** Logical access endpoints keyed by relation (e.g. `self`). */
+    readonly endpoints?: Readonly<Record<string, string>>;
+    /** ISO-8601 timestamp the share state was last updated, when state exists. */
+    readonly updatedAt?: string | null;
+    /** Principal that last updated the share state, when state exists. */
+    readonly updatedById?: string | null;
+}
+/**
+ * A dependency that blocks a public-sharing or embed-enablement request because
+ * it is not shareable by the requested audience. Mirrors
+ * `ConsoleShareDependencyConflict`.
+ *
+ * `itemName` is populated for authenticated callers and omitted on anonymous
+ * surfaces so private titles are never leaked.
+ */
+export interface HonuaShareDependencyConflict {
+    readonly itemId: string;
+    readonly itemType?: HonuaShareItemType | null;
+    readonly itemName?: string | null;
+    readonly blockingReason: string;
+}
+/**
+ * Anonymous-safe public-link / public-content resolution response. Mirrors
+ * `ConsolePublicLinkResolutionResponse`. Carries only presentation metadata —
+ * owner, provenance, and caller permissions are never present on this surface.
+ */
+export interface HonuaPublicLinkResolution {
+    readonly itemId: string;
+    readonly itemType: HonuaShareItemType;
+    readonly title?: string | null;
+    readonly summary?: string | null;
+    readonly accessTier: HonuaShareAccessTier;
+    readonly endpoints: Readonly<Record<string, string>>;
+}
+/**
+ * Anonymous-safe embed redemption response. Mirrors `ConsoleEmbedRedeemResponse`.
+ */
+export interface HonuaEmbedRedemption {
+    readonly itemId: string;
+    readonly itemType: HonuaShareItemType;
+    readonly title?: string | null;
+    readonly audience: HonuaEmbedAudience;
+    /** ISO-8601 hard expiry of the redeemed token. */
+    readonly expiresAt: string;
+    readonly endpoints: Readonly<Record<string, string>>;
+}
+//# sourceMappingURL=types.d.ts.map

package/share/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/share/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,cAAc,GAAG,aAAa,GAAG,gBAAgB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEjH,4EAA4E;AAC5E,eAAO,MAAM,wBAAwB,uEAAwE,CAAC;AAE9G;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,SAAS,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEnE,gDAAgD;AAChD,eAAO,MAAM,qBAAqB,6BAA8B,CAAC;AAEjE;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAC1B,SAAS,GACT,OAAO,GACP,WAAW,GACX,WAAW,GACX,QAAQ,GACR,eAAe,GACf,WAAW,GACX,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACnC,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,6EAA6E;IAC7E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,gDAAgD;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+CAA+C;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,2DAA2D;IAC3D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,yCAAyC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,wDAAwD;IACxD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,2CAA2C;IAC3C,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,+CAA+C;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,2DAA2D;IAC3D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,uBAAuB;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kCAAkC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,sCAAsC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,qBAAqB;IACrB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,oCAAoC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,mCAAmC;IACnC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,mEAAmE;IACnE,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,iFAAiF;IACjF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC5D,mDAAmD;IACnD,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,mEAAmE;IACnE,QAAQ,CAAC,aAAa,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACnD,yEAAyE;IACzE,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,sEAAsE;IACtE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,qFAAqF;IACrF,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,gEAAgE;IAChE,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,sEAAsE;IACtE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACtD;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,kDAAkD;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACtD"}

package/share/types.js

@@ -0,0 +1,17 @@
+/**
+ * Browser-safe Share, embed, public-link, and open-data contract types.
+ *
+ * These mirror the canonical honua-server Console Share contracts
+ * (`ConsoleShareAccessTier`, `ConsoleEmbedAudience`, `ConsoleShareProjection`,
+ * `ConsolePublicLinkResolutionResponse`, `ConsoleEmbedRedeemResponse`, …) and
+ * the `honua-sdk-dotnet` console clients so generated apps, embeds, and Console
+ * JS interop consume one vocabulary instead of inventing a second one. Field
+ * names match the server JSON wire names exactly so a parsed `fetch` body is
+ * assignable to these types without remapping.
+ *
+ * @module
+ */
+/** Known {@link HonuaShareAccessTier} members, for validation/iteration. */
+export const HONUA_SHARE_ACCESS_TIERS = ["private", "organization", "public-link", "public-indexed"];
+/** Known {@link HonuaEmbedAudience} members. */
+export const HONUA_EMBED_AUDIENCES = ["map", "content"];