@metaboliccode-dev/widget 0.2.87 → 0.2.89

package/dist/index.js

@@ -2523,7 +2523,7 @@ function rA({
     "button",
     {
       type: "button",
-      className: `mb-note-button ${p.can_manage ? "mb-note-pencil" : ""}`,
+      className: `mb-note-button ${p.can_manage ? "mb-note-trigger" : ""}`,
       "aria-label": `${p.can_manage ? "Add note" : "View notes"}: ${U.section_name}`,
       title: `${p.can_manage ? "Add note" : "View notes"}: ${U.section_name}`,
       onClick: (r) => {
@@ -2589,19 +2589,22 @@ function Ql({
   ] });
 }
 function UV() {
-  return /* @__PURE__ */ t(
+  return /* @__PURE__ */ a(
     "svg",
     {
-      width: "18",
-      height: "18",
+      width: "22",
+      height: "22",
       viewBox: "0 0 24 24",
       fill: "none",
       stroke: "currentColor",
-      strokeWidth: "1.8",
+      strokeWidth: "1.7",
       strokeLinecap: "round",
       strokeLinejoin: "round",
       "aria-hidden": "true",
-      children: /* @__PURE__ */ t("path", { d: "m16 3 5 5-12 12-6 1 1-6Z M14 5l5 5" })
+      children: [
+        /* @__PURE__ */ t("rect", { x: "5.5", y: "2.5", width: "13", height: "19", rx: "2" }),
+        /* @__PURE__ */ t("path", { d: "M9 8h6M9 12h6M9 16h4" })
+      ]
     }
   );
 }

package/dist/server.js

@@ -0,0 +1,98 @@
+class l extends Error {
+  constructor(n, s) {
+    super(`Metabolic Code ${s} failed with HTTP ${n}.`), this.status = n, this.operation = s, this.name = "MetabolicOAuthError";
+  }
+}
+function A(e) {
+  if (typeof window < "u")
+    throw new Error("The Metabolic Code OAuth client must run on a server.");
+  const n = y(e.baseUrl);
+  if (!e.clientId || !e.clientSecret)
+    throw new Error("Metabolic Code OAuth client credentials are required.");
+  const s = e.fetch ?? globalThis.fetch, d = /* @__PURE__ */ new Map(), a = /* @__PURE__ */ new Map();
+  async function g(o) {
+    const t = Date.now(), r = btoa(
+      `${encodeURIComponent(e.clientId)}:${encodeURIComponent(e.clientSecret)}`
+    ), i = await s(`${n}/oauth/token`, {
+      method: "POST",
+      headers: {
+        Authorization: `Basic ${r}`,
+        "Content-Type": "application/x-www-form-urlencoded",
+        Accept: "application/json"
+      },
+      body: new URLSearchParams({ grant_type: "client_credentials", scope: o }),
+      cache: "no-store",
+      signal: AbortSignal.timeout(15e3)
+    });
+    if (!i.ok) throw new l(i.status, "token issuance");
+    return w(await i.json(), t);
+  }
+  async function u(o) {
+    const t = [...new Set(o)].sort().join(" ");
+    if (!t) throw new Error("At least one Metabolic Code OAuth scope is required.");
+    const r = d.get(t);
+    if (r && r.expiresAt > Date.now() + 3e4) return r;
+    const i = a.get(t);
+    if (i) return i;
+    const c = g(t).then((p) => (d.set(t, p), p)).finally(() => a.delete(t));
+    return a.set(t, c), c;
+  }
+  async function h(o, t, r) {
+    const i = await u([t]), c = await s(`${n}${o}`, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${i.accessToken}`,
+        "Content-Type": "application/json",
+        Accept: "application/json"
+      },
+      body: JSON.stringify(r),
+      cache: "no-store",
+      signal: AbortSignal.timeout(15e3)
+    });
+    if (!c.ok) throw new l(c.status, "delegated authorization");
+    return c.json();
+  }
+  async function k(o) {
+    const t = Date.now(), r = await h(
+      "/api/v1/auth/delegated_tokens",
+      "tokens:delegate",
+      o
+    );
+    return w(r, t);
+  }
+  async function m(o) {
+    const t = await h("/api/v1/embed/launches", "embed:launch", {
+      embed: o
+    });
+    if (!f(t) || typeof t.embed_token != "string" || !b(t.expires_in))
+      throw new Error("Metabolic Code returned an invalid embed launch.");
+    return { embedToken: t.embed_token, expiresIn: t.expires_in };
+  }
+  return { getAccessToken: u, getDelegatedToken: k, createEmbedLaunch: m };
+}
+function y(e) {
+  const n = new URL(e), s = ["localhost", "127.0.0.1", "[::1]"].includes(n.hostname);
+  if (n.protocol !== "https:" && !(n.protocol === "http:" && s) || n.username || n.password || n.search || n.hash || n.pathname !== "/")
+    throw new Error("Metabolic Code OAuth requires an HTTPS origin or loopback HTTP origin.");
+  return n.origin;
+}
+function f(e) {
+  return typeof e == "object" && e !== null;
+}
+function b(e) {
+  return typeof e == "number" && Number.isInteger(e) && e > 0 && e <= 300;
+}
+function w(e, n) {
+  if (!f(e) || typeof e.access_token != "string" || !e.access_token || e.token_type !== "Bearer" || !b(e.expires_in) || typeof e.scope != "string")
+    throw new Error("Metabolic Code returned an invalid OAuth token response.");
+  return {
+    accessToken: e.access_token,
+    expiresIn: e.expires_in,
+    expiresAt: n + e.expires_in * 1e3,
+    scope: e.scope
+  };
+}
+export {
+  l as MetabolicOAuthError,
+  A as createMetabolicOAuthClient
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metaboliccode-dev/widget",
-  "version": "0.2.87",
+  "version": "0.2.89",
   "type": "module",
   "files": [
     "dist",
@@ -21,6 +21,11 @@
       "import": "./dist/api.js",
       "default": "./dist/api.js"
     },
+    "./server": {
+      "types": "./dist/entry-server.d.ts",
+      "import": "./dist/server.js",
+      "default": "./dist/server.js"
+    },
     "./ag-charts": {
       "types": "./dist/entry-ag-charts.d.ts",
       "import": "./dist/ag-charts.js",