@neta-art/cohub 12.5.0 → 12.6.0

package/dist/chunks/http.js

@@ -1,5 +1,5 @@
 import { S as getRealtimeSpaceRoom, c as HttpError, l as HttpTransport, s as isHttpErrorCode, x as getRealtimeBoardRoom, z as isUuid } from "./http-error.js";
-import { l as resolveExecutionToken, o as resolveApiBaseUrl } from "./environment.js";
+import { s as resolveApiBaseUrl, u as resolveExecutionToken } from "./environment.js";
 import { z } from "zod";
 //#region ../protocol/dist/board-constants.js
 const BOARD_ARROW_STROKE_SIZE = 2.5;
@@ -1447,7 +1447,7 @@ var CronJobsApi = class {
 //#region src/apis/generations.ts
 const DEFAULT_INTERVAL_MS = 1500;
 const DEFAULT_TIMEOUT_MS = 18e5;
-function sleep$1(ms, signal) {
+function sleep$2(ms, signal) {
 	if (signal?.aborted) return Promise.reject(signal.reason ?? /* @__PURE__ */ new Error("Generation wait aborted"));
 	return new Promise((resolve, reject) => {
 		const cleanup = () => signal?.removeEventListener("abort", onAbort);
@@ -1512,7 +1512,7 @@ var GenerationsApi = class {
 			}
 			const remainingMs = timeoutMs - (Date.now() - startedAt);
 			if (remainingMs <= 0) throw new Error(`Generation task timed out after ${timeoutMs}ms`);
-			await sleep$1(Math.min(intervalMs, remainingMs), options.signal);
+			await sleep$2(Math.min(intervalMs, remainingMs), options.signal);
 		}
 	}
 	async createAndWait(request, options) {
@@ -1895,7 +1895,7 @@ var BoardRealtimeClient = class {
 		if (!this.websocketClient) throw new Error("realtime transport is not configured for this client");
 		ensureRealtimeConnected(this.websocketClient);
 		const room = getRealtimeBoardRoom(this.boardId);
-		const releaseRoom = this.websocketClient.retainRooms([getRealtimeSpaceRoom(this.spaceId), room]);
+		const releaseRoom = this.websocketClient.retainRooms([room]);
 		const unsubscribe = this.websocketClient.on("event", (event) => {
 			if (event.spaceId !== this.spaceId) return;
 			if (event.type === "board.changed" && event.payload.boardId === this.boardId) {
@@ -1917,12 +1917,14 @@ var BoardRealtimeClient = class {
 			}
 		});
 		const resync = handlers.resync;
-		const stopResync = resync ? this.websocketClient.on("subscribed", ({ rooms }) => {
+		const stopResync = resync ? [this.websocketClient.on("subscribed", ({ rooms }) => {
 			if (rooms.includes(room)) resync();
-		}) : null;
+		}), this.websocketClient.on("subscribeError", ({ rejected }) => {
+			if (rejected.some((entry) => entry.room === room && entry.code !== "UNAVAILABLE")) resync();
+		})] : [];
 		return () => {
 			unsubscribe();
-			stopResync?.();
+			for (const stop of stopResync) stop();
 			releaseRoom();
 		};
 	}
@@ -1951,7 +1953,7 @@ var BoardClient = class {
 	/** Read the Board, or part of it. Every value is complete, defaults included. */
 	get(input = {}, customFetch) {
 		const params = new URLSearchParams();
-		if (input.only?.length) params.set("only", input.only.join(","));
+		if (input.only) params.set("only", input.only.join(","));
 		if (input.rect) params.set("rect", [
 			input.rect.x,
 			input.rect.y,
@@ -2088,6 +2090,19 @@ var SpaceBoardsApi = class {
 			boardId
 		});
 	}
+	assetSource() {
+		return {
+			resolveFileUrl: (path, options) => this.files.resolveUrl(path, {
+				purpose: "preview",
+				fresh: options?.fresh
+			}),
+			resolvePlaybackUrl: (path, options) => this.files.resolveUrl(path, {
+				purpose: "playback",
+				fresh: options?.fresh
+			}),
+			subscribe: (listener) => this.files.onUrlChange(listener)
+		};
+	}
 	async open(target, customFetch) {
 		return this.byId(isBoardPath(target) ? await this.resolveId(target, customFetch) : target);
 	}
@@ -3000,7 +3015,7 @@ function getPatchMessageIdentity(event) {
 		messageOrdinal: typeof event.payload.messageOrdinal === "number" ? event.payload.messageOrdinal : null
 	};
 }
-async function withTimeout(promise, timeoutMs) {
+async function withTimeout$1(promise, timeoutMs) {
 	let timeout = null;
 	try {
 		return await Promise.race([promise, new Promise((_, reject) => {
@@ -3169,7 +3184,7 @@ var SessionGenerationStreamClient = class SessionGenerationStreamClient {
 	async loadSnapshot() {
 		if (!this.fetchStreamSnapshot) return null;
 		try {
-			return (await withTimeout(this.fetchStreamSnapshot(), SNAPSHOT_RECOVERY_TIMEOUT_MS)).snapshot;
+			return (await withTimeout$1(this.fetchStreamSnapshot(), SNAPSHOT_RECOVERY_TIMEOUT_MS)).snapshot;
 		} catch (error) {
 			console.warn("[SessionGenerationStreamClient] Failed to recover stream snapshot:", error);
 			return null;
@@ -3543,6 +3558,631 @@ function buildSpaceInvitePath(input) {
 	return `${buildSpacePath(input)}/join/${inviteCode}`;
 }
 //#endregion
+//#region src/apis/space-file-reads.ts
+const BATCH_SIZE = 32;
+const BATCH_CONCURRENCY = 2;
+const SINGLE_CONCURRENCY = 4;
+const BACKGROUND_DELAY_MS = 1500;
+const READ_TIMEOUT_MS = 3e4;
+function createLimiter(limit) {
+	let active = 0;
+	const lanes = [[], []];
+	function pump() {
+		while (active < limit) {
+			const job = lanes[0].shift() ?? lanes[1].shift();
+			if (!job) return;
+			active += 1;
+			job();
+		}
+	}
+	return (run, background = false) => new Promise((resolve, reject) => {
+		lanes[background ? 1 : 0].push(() => {
+			run().then(resolve, reject).finally(() => {
+				active -= 1;
+				pump();
+			});
+		});
+		pump();
+	});
+}
+const fileReadPath = (spaceId, path) => `/api/spaces/${spaceId}/fs/file?${new URLSearchParams({ path })}`;
+function createSpaceFileReads(transport) {
+	const queues = [/* @__PURE__ */ new Map(), /* @__PURE__ */ new Map()];
+	const timers = [null, null];
+	const inFlight = /* @__PURE__ */ new Map();
+	const batches = createLimiter(BATCH_CONCURRENCY);
+	const singles = createLimiter(SINGLE_CONCURRENCY);
+	const readOne = (spaceId, path, init = {}) => withTimeout((signal) => transport.requestRevalidated(fileReadPath(spaceId, path), {
+		...init,
+		signal
+	}));
+	function schedule(lane) {
+		timers[lane] ??= setTimeout(() => {
+			timers[lane] = null;
+			flush(lane);
+		}, lane ? BACKGROUND_DELAY_MS : 0);
+	}
+	function settle(pending, outcome) {
+		if (inFlight.get(pending.key) === pending) inFlight.delete(pending.key);
+		if ("file" in outcome) pending.resolve(outcome.file);
+		else pending.reject(outcome.error);
+	}
+	function flush(lane) {
+		const groups = /* @__PURE__ */ new Map();
+		for (const pending of queues[lane].values()) {
+			inFlight.set(pending.key, pending);
+			const id = `${pending.token}\u0000${pending.spaceId}`;
+			const group = groups.get(id);
+			if (group) group.push(pending);
+			else groups.set(id, [pending]);
+		}
+		queues[lane].clear();
+		for (const group of groups.values()) {
+			if (group.length === 1) {
+				readSingle(group[0], lane === 1);
+				continue;
+			}
+			for (let index = 0; index < group.length; index += BATCH_SIZE) batches(() => readBatch(group.slice(index, index + BATCH_SIZE)), lane === 1);
+		}
+	}
+	async function readSingle(pending, background = false) {
+		const { spaceId, path, token } = pending;
+		try {
+			settle(pending, { file: await singles(() => readOne(spaceId, path, { accessToken: token }), background) });
+		} catch (error) {
+			settle(pending, { error });
+		}
+	}
+	async function readBatch(chunk) {
+		const { spaceId, token } = chunk[0];
+		let response;
+		try {
+			response = await withTimeout((signal) => transport.request(`/api/spaces/${spaceId}/fs/files`, {
+				method: "POST",
+				headers: { "Content-Type": "application/json" },
+				body: JSON.stringify({ paths: chunk.map((pending) => pending.path) }),
+				accessToken: token,
+				signal
+			}));
+		} catch {
+			await Promise.all(chunk.map((pending) => readSingle(pending)));
+			return;
+		}
+		const byPath = new Map(chunk.map((pending) => [pending.path, pending]));
+		const take = (path) => {
+			const pending = byPath.get(path);
+			byPath.delete(path);
+			return pending;
+		};
+		for (const file of [...response.files, ...response.preparing ?? []]) {
+			const pending = take(file.path);
+			if (pending) settle(pending, { file });
+		}
+		for (const { path, status, code, message } of response.errors) {
+			const pending = take(path);
+			if (pending) settle(pending, { error: new HttpError(message, status, {
+				code,
+				message
+			}) });
+		}
+		await Promise.all([...byPath.values()].map((pending) => readSingle(pending)));
+	}
+	function share(token, spaceId, path, background) {
+		const key = `${spaceId}\u0000${path}\u0000${token}`;
+		let pending = inFlight.get(key) ?? queues[0].get(key);
+		const deferred = queues[1].get(key);
+		if (!pending && deferred && !background) {
+			queues[1].delete(key);
+			queues[0].set(key, deferred);
+			schedule(0);
+		}
+		pending ??= deferred;
+		if (!pending) {
+			let resolve;
+			let reject;
+			const promise = new Promise((done, fail) => {
+				resolve = done;
+				reject = fail;
+			});
+			const lane = background ? 1 : 0;
+			pending = {
+				key,
+				token,
+				spaceId,
+				path,
+				promise,
+				resolve,
+				reject
+			};
+			queues[lane].set(key, pending);
+			schedule(lane);
+		}
+		return pending.promise;
+	}
+	return {
+		async read(spaceId, path, options = {}) {
+			const own = options.token === void 0;
+			const token = own ? await transport.credential() : options.token ?? null;
+			try {
+				return await abortable(share(token, spaceId, path, options.background === true), options.signal);
+			} catch (error) {
+				if (!own || !isUnauthorized(error)) throw error;
+				return abortable(readOne(spaceId, path), options.signal);
+			}
+		},
+		invalidate(spaceId, paths) {
+			const stale = new Set([...paths].map((path) => `${spaceId}\u0000${path}`));
+			for (const key of inFlight.keys()) if (stale.has(key.slice(0, key.lastIndexOf("\0")))) inFlight.delete(key);
+		}
+	};
+}
+const isUnauthorized = (error) => error instanceof HttpError && error.status === 401;
+async function withTimeout(run) {
+	const controller = new AbortController();
+	const timer = setTimeout(() => controller.abort(new DOMException("Space file read timed out", "TimeoutError")), READ_TIMEOUT_MS);
+	try {
+		return await run(controller.signal);
+	} finally {
+		clearTimeout(timer);
+	}
+}
+function abortable(promise, signal) {
+	if (!signal) return promise;
+	if (signal.aborted) return Promise.reject(signal.reason);
+	return new Promise((resolve, reject) => {
+		const abort = () => reject(signal.reason);
+		signal.addEventListener("abort", abort, { once: true });
+		promise.then(resolve, reject).finally(() => signal.removeEventListener("abort", abort));
+	});
+}
+//#endregion
+//#region src/indexeddb.ts
+const OPEN_TIMEOUT_MS = 3e3;
+const connections = /* @__PURE__ */ new Map();
+function open(name, version, upgrade) {
+	const existing = connections.get(name);
+	if (existing) return existing;
+	const opening = new Promise((resolve, reject) => {
+		const factory = globalThis.indexedDB;
+		if (!factory) {
+			reject(/* @__PURE__ */ new Error("IndexedDB is unavailable."));
+			return;
+		}
+		let late = false;
+		const timer = setTimeout(() => {
+			late = true;
+			reject(/* @__PURE__ */ new Error("IndexedDB did not open in time."));
+		}, OPEN_TIMEOUT_MS);
+		const request = factory.open(name, version);
+		request.onupgradeneeded = () => upgrade(request.result);
+		request.onsuccess = () => {
+			clearTimeout(timer);
+			const db = request.result;
+			if (late) {
+				db.close();
+				return;
+			}
+			const forget = () => {
+				if (connections.get(name) === opening) connections.delete(name);
+			};
+			db.onversionchange = () => {
+				db.close();
+				forget();
+			};
+			db.onclose = forget;
+			resolve(db);
+		};
+		request.onerror = () => {
+			clearTimeout(timer);
+			reject(request.error ?? /* @__PURE__ */ new Error("IndexedDB failed to open."));
+		};
+	});
+	connections.set(name, opening);
+	opening.catch(() => {
+		if (connections.get(name) === opening) connections.delete(name);
+	});
+	return opening;
+}
+function indexedDb(name, version, upgrade) {
+	async function transact(stores, mode, work, retry = true) {
+		const db = await open(name, version, upgrade);
+		let tx;
+		try {
+			tx = db.transaction(stores, mode);
+		} catch (error) {
+			if (!retry) throw error;
+			db.close();
+			connections.delete(name);
+			return transact(stores, mode, work, false);
+		}
+		return new Promise((resolve, reject) => {
+			const result = work(tx);
+			tx.oncomplete = () => resolve(result());
+			tx.onerror = () => reject(tx.error ?? /* @__PURE__ */ new Error("IndexedDB transaction failed."));
+			tx.onabort = () => reject(tx.error ?? /* @__PURE__ */ new Error("IndexedDB transaction aborted."));
+		});
+	}
+	return { transact: (stores, mode, work) => transact(stores, mode, work) };
+}
+function deleteByIndex(store, index, key) {
+	const request = store.index(index).openKeyCursor(IDBKeyRange.only(key));
+	request.onsuccess = () => {
+		const cursor = request.result;
+		if (!cursor) return;
+		store.delete(cursor.primaryKey);
+		cursor.continue();
+	};
+}
+//#endregion
+//#region src/apis/space-file-url-store.ts
+const DATABASE = "cohub-file-urls";
+const STORE = "urls";
+const MAX_ENTRIES = 2e4;
+const TRIM_TO = 18e3;
+const TRIM_EVERY_WRITES = 500;
+const database = indexedDb(DATABASE, 1, (db) => {
+	const store = db.createObjectStore(STORE, { keyPath: "key" });
+	store.createIndex("scope", "scope");
+	store.createIndex("verifiedAt", "verifiedAt");
+});
+const recordKey = (scope, spaceId, path) => `${scope}\u0000${spaceId}\u0000${path}`;
+let writes = 0;
+const fileUrlStore = {
+	read(scope, spaceId, paths) {
+		return database.transact([STORE], "readonly", (tx) => {
+			const store = tx.objectStore(STORE);
+			const requests = paths.map((path) => [path, store.get(recordKey(scope, spaceId, path))]);
+			return () => {
+				const found = /* @__PURE__ */ new Map();
+				for (const [path, request] of requests) {
+					const record = request.result;
+					if (record) found.set(path, {
+						url: record.url,
+						verifiedAt: record.verifiedAt
+					});
+				}
+				return found;
+			};
+		});
+	},
+	async write(scope, spaceId, changes) {
+		await database.transact([STORE], "readwrite", (tx) => {
+			const store = tx.objectStore(STORE);
+			for (const [path, { url, verifiedAt }] of changes.put) store.put({
+				key: recordKey(scope, spaceId, path),
+				scope,
+				url,
+				verifiedAt
+			});
+			for (const path of changes.remove) store.delete(recordKey(scope, spaceId, path));
+			return () => void 0;
+		});
+		writes += changes.put.size;
+		if (writes < TRIM_EVERY_WRITES) return;
+		writes = 0;
+		await trim();
+	}
+};
+function trim() {
+	return database.transact([STORE], "readwrite", (tx) => {
+		const store = tx.objectStore(STORE);
+		const count = store.count();
+		count.onsuccess = () => {
+			let excess = count.result > MAX_ENTRIES ? count.result - TRIM_TO : 0;
+			if (excess === 0) return;
+			const cursor = store.index("verifiedAt").openKeyCursor();
+			cursor.onsuccess = () => {
+				const current = cursor.result;
+				if (!current || excess-- <= 0) return;
+				store.delete(current.primaryKey);
+				current.continue();
+			};
+		};
+		return () => void 0;
+	});
+}
+async function clearFileUrlCache(options = {}) {
+	if (!globalThis.indexedDB) return;
+	await database.transact([STORE], "readwrite", (tx) => {
+		const store = tx.objectStore(STORE);
+		if (options.scope === void 0) store.clear();
+		else deleteByIndex(store, "scope", options.scope);
+		return () => void 0;
+	});
+}
+//#endregion
+//#region src/apis/space-file-urls.ts
+const MEMORY_LIMIT = 4096;
+const INLINE_MEMORY_MAX_CHARS = 262144;
+const PREPARING_CONCURRENCY = 4;
+const PREPARING_TIMEOUT_MS = 15e3;
+/** Well inside the fs CDN manifest's 6.5 days; CDN URLs carry the file version and are not signed. */
+const STORED_MAX_AGE_MS = 2592e5;
+const UNWATCHED_TRUST_MS = 6e4;
+function inlineFileDataUrl(file) {
+	const mimeType = file.mimeType ?? "application/octet-stream";
+	return file.encoding === "base64" ? `data:${mimeType};base64,${file.content}` : `data:${mimeType};charset=utf-8,${encodeURIComponent(file.content)}`;
+}
+function resolvedOf(file) {
+	if (file.delivery === "url" && file.url) return {
+		url: file.url,
+		inline: false
+	};
+	return {
+		url: inlineFileDataUrl(file),
+		inline: true
+	};
+}
+const isGone = (error) => error instanceof HttpError && (error.status === 404 || error.status === 410);
+const sleep$1 = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+function remember(map, key, value) {
+	map.delete(key);
+	map.set(key, value);
+	if (map.size > MEMORY_LIMIT) map.delete(map.keys().next().value);
+}
+function createSpaceFileUrls(options) {
+	const { reads, cache } = options;
+	const now = options.now ?? Date.now;
+	const memory = /* @__PURE__ */ new Map();
+	const invalidatedAt = /* @__PURE__ */ new Map();
+	const epochs = /* @__PURE__ */ new Map();
+	const serverReads = /* @__PURE__ */ new Map();
+	const localReads = /* @__PURE__ */ new Map();
+	const listeners = /* @__PURE__ */ new Set();
+	const preparing = createLimiter(PREPARING_CONCURRENCY);
+	let localBatch = null;
+	let writes = null;
+	let lastScope = null;
+	const keyOf = (spaceId, path) => `${spaceId}\u0000${path}`;
+	const epochOf = (spaceId) => epochs.get(spaceId) ?? 0;
+	const persists = (scope) => cache && scope !== null && Boolean(globalThis.indexedDB);
+	function persist(scope, spaceId, path, url) {
+		if (!writes) {
+			const batch = /* @__PURE__ */ new Map();
+			writes = batch;
+			setTimeout(() => {
+				writes = null;
+				for (const [id, { put, remove }] of batch) {
+					const [batchScope, batchSpace] = id.split("\0");
+					fileUrlStore.write(batchScope, batchSpace, {
+						put,
+						remove
+					}).catch(() => void 0);
+				}
+			}, 0);
+		}
+		const id = `${scope}\u0000${spaceId}`;
+		const pending = writes.get(id) ?? {
+			put: /* @__PURE__ */ new Map(),
+			remove: /* @__PURE__ */ new Set()
+		};
+		writes.set(id, pending);
+		if (url) {
+			pending.remove.delete(path);
+			pending.put.set(path, {
+				url,
+				verifiedAt: now()
+			});
+		} else {
+			pending.put.delete(path);
+			pending.remove.add(path);
+		}
+	}
+	async function load(token, spaceId, path, background) {
+		const first = await reads.read(spaceId, path, {
+			background,
+			token
+		});
+		if ("content" in first) return resolvedOf(first);
+		return preparing(async () => {
+			const deadline = now() + PREPARING_TIMEOUT_MS;
+			let file = first;
+			while (!("content" in file)) {
+				const wait = Math.min(Math.max(250, Math.min(file.retryAfterMs, 2e3)), deadline - now());
+				if (wait <= 0) return null;
+				await sleep$1(wait);
+				file = await reads.read(spaceId, path, { token });
+			}
+			return resolvedOf(file);
+		}, background);
+	}
+	function server(token, scope, spaceId, path, background) {
+		const key = keyOf(spaceId, path);
+		const readKey = `${key}\u0000${token}`;
+		const running = serverReads.get(readKey);
+		if (running) {
+			if (!background) reads.read(spaceId, path, { token }).catch(() => void 0);
+			return running;
+		}
+		const epoch = epochOf(spaceId);
+		const read = load(token, spaceId, path, background).then((resolved) => {
+			const current = serverReads.get(readKey) === read;
+			if (current) serverReads.delete(readKey);
+			if (!resolved) return null;
+			const entry = {
+				...resolved,
+				scope,
+				epoch,
+				verifiedAt: now()
+			};
+			if (current && cache) adopt(key, spaceId, path, entry);
+			return entry;
+		}, (error) => {
+			const current = serverReads.get(readKey) === read;
+			if (current) serverReads.delete(readKey);
+			if (current && cache && isGone(error)) {
+				memory.delete(key);
+				if (persists(scope)) persist(scope, spaceId, path, null);
+			}
+			throw error;
+		});
+		serverReads.set(readKey, read);
+		return read;
+	}
+	function adopt(key, spaceId, path, entry) {
+		const previous = memory.get(key);
+		if (!entry.inline || entry.url.length <= INLINE_MEMORY_MAX_CHARS) remember(memory, key, entry);
+		if (!entry.inline && persists(entry.scope)) persist(entry.scope, spaceId, path, entry.url);
+		if (previous && previous.url !== entry.url) emit(spaceId, path);
+	}
+	function revalidate(token, scope, spaceId, path) {
+		server(token, scope, spaceId, path, true).catch(() => void 0);
+	}
+	function readLocal(token, scope, spaceId, path) {
+		const key = keyOf(spaceId, path);
+		const running = localReads.get(key);
+		if (running) return running;
+		let resolve;
+		const read = new Promise((done) => {
+			resolve = done;
+		});
+		const forget = () => {
+			if (localReads.get(key) === read) localReads.delete(key);
+		};
+		read.then(forget, forget);
+		localReads.set(key, read);
+		if (!localBatch) {
+			const batch = [];
+			localBatch = batch;
+			queueMicrotask(() => {
+				localBatch = null;
+				const groups = /* @__PURE__ */ new Map();
+				for (const item of batch) {
+					const id = `${item.scope}\u0000${item.spaceId}`;
+					const group = groups.get(id);
+					if (group) group.push(item);
+					else groups.set(id, [item]);
+				}
+				for (const group of groups.values()) readStored(group);
+			});
+		}
+		localBatch.push({
+			key,
+			token,
+			scope,
+			spaceId,
+			path,
+			resolve
+		});
+		return read;
+	}
+	async function readStored(group) {
+		const { scope, spaceId } = group[0];
+		const records = await fileUrlStore.read(scope, spaceId, group.map((item) => item.path)).catch(() => /* @__PURE__ */ new Map());
+		for (const { key, token, path, resolve } of group) {
+			const record = records.get(path);
+			if (!(record && now() - record.verifiedAt <= STORED_MAX_AGE_MS && (invalidatedAt.get(key) ?? -1) < record.verifiedAt)) {
+				resolve(server(token, scope, spaceId, path, false));
+				continue;
+			}
+			const entry = {
+				url: record.url,
+				inline: false,
+				scope,
+				epoch: -1,
+				verifiedAt: record.verifiedAt
+			};
+			if (!memory.has(key)) remember(memory, key, entry);
+			revalidate(token, scope, spaceId, path);
+			resolve(Promise.resolve(entry));
+		}
+	}
+	function emit(spaceId, path) {
+		for (const listener of listeners) listener(spaceId, path);
+	}
+	function invalidate(spaceId, paths) {
+		const stale = [...new Set(paths)];
+		if (stale.length === 0) return;
+		reads.invalidate(spaceId, stale);
+		const at = now();
+		const buffered = lastScope === null ? void 0 : writes?.get(`${lastScope}\u0000${spaceId}`);
+		const keys = /* @__PURE__ */ new Set();
+		for (const path of stale) {
+			const key = keyOf(spaceId, path);
+			keys.add(key);
+			memory.delete(key);
+			localReads.delete(key);
+			remember(invalidatedAt, key, at);
+			buffered?.put.delete(path);
+		}
+		for (const readKey of serverReads.keys()) if (keys.has(readKey.slice(0, readKey.lastIndexOf("\0")))) serverReads.delete(readKey);
+		if (persists(lastScope)) fileUrlStore.write(lastScope, spaceId, {
+			put: /* @__PURE__ */ new Map(),
+			remove: stale
+		}).catch(() => void 0);
+	}
+	return {
+		async resolve(spaceId, path, request = {}) {
+			const purpose = request.purpose ?? "preview";
+			const token = await options.credential();
+			const scope = cache ? await options.scope().catch(() => null) : null;
+			if (scope !== null) lastScope = scope;
+			const key = keyOf(spaceId, path);
+			const hit = cache && !request.fresh ? memory.get(key) : void 0;
+			let entry;
+			if (hit && hit.scope === scope) {
+				remember(memory, key, hit);
+				const unwatched = !options.watched(spaceId) && now() - hit.verifiedAt > UNWATCHED_TRUST_MS;
+				if (hit.epoch !== epochOf(spaceId) || unwatched) revalidate(token, scope, spaceId, path);
+				entry = hit;
+			} else entry = await settle((persists(scope) && !request.fresh ? readLocal(token, scope, spaceId, path) : server(token, scope, spaceId, path, false)).catch(async (error) => {
+				if (!isUnauthorized(error)) throw error;
+				await reads.read(spaceId, path, { signal: request.signal });
+				request.signal?.throwIfAborted();
+				return server(await options.credential(), scope, spaceId, path, false);
+			}), request);
+			return !entry || purpose === "playback" && entry.inline ? null : entry.url;
+		},
+		applyFsChange(spaceId, payload) {
+			if (payload.resync) epochs.set(spaceId, epochOf(spaceId) + 1);
+			const paths = /* @__PURE__ */ new Set();
+			for (const change of payload.changes ?? []) {
+				if (change.path) paths.add(change.path);
+				if (change.oldPath) paths.add(change.oldPath);
+			}
+			invalidate(spaceId, paths);
+			for (const path of paths) emit(spaceId, path);
+		},
+		subscribe(listener) {
+			listeners.add(listener);
+			return () => {
+				listeners.delete(listener);
+			};
+		}
+	};
+}
+function createSpaceFileServices(transport, websocket) {
+	const reads = createSpaceFileReads(transport);
+	const urls = createSpaceFileUrls({
+		reads,
+		credential: () => transport.credential(),
+		scope: () => transport.cacheScope(),
+		watched: (spaceId) => websocket?.isRoomLive(getRealtimeSpaceRoom(spaceId)) ?? false,
+		cache: websocket !== null && typeof window !== "undefined"
+	});
+	websocket?.on("event", (event) => {
+		if (event.type === "space.fs.changed" && event.spaceId) urls.applyFsChange(event.spaceId, event.payload);
+	});
+	return {
+		reads,
+		urls
+	};
+}
+function settle(read, { timeoutMs = PREPARING_TIMEOUT_MS, signal }) {
+	if (signal?.aborted) return Promise.reject(signal.reason);
+	return new Promise((resolve, reject) => {
+		const timer = setTimeout(() => finish(() => resolve(null)), Math.max(0, timeoutMs));
+		const abort = () => finish(() => reject(signal?.reason));
+		signal?.addEventListener("abort", abort, { once: true });
+		function finish(done) {
+			clearTimeout(timer);
+			signal?.removeEventListener("abort", abort);
+			done();
+		}
+		read.then((value) => finish(() => resolve(value)), (error) => finish(() => reject(error)));
+	});
+}
+//#endregion
 //#region src/apis/spaces.ts
 async function fetchTurnObject(url, fetchImpl = globalThis.fetch, signal) {
 	const response = await fetchImpl(url, { signal });
@@ -3671,10 +4311,6 @@ var SpacesApi = class {
 		});
 	}
 };
-function inlineFileDataUrl(file) {
-	const mimeType = file.mimeType ?? "application/octet-stream";
-	return file.encoding === "base64" ? `data:${mimeType};base64,${file.content}` : `data:${mimeType};charset=utf-8,${encodeURIComponent(file.content)}`;
-}
 function spaceFileAbortReason(signal) {
 	return signal.reason ?? new DOMException("The operation was aborted", "AbortError");
 }
@@ -3748,22 +4384,34 @@ var SpacePublicFilesApi = class {
 var SpaceFilesApi = class {
 	transport;
 	spaceId;
-	constructor(transport, spaceId) {
+	services;
+	constructor(transport, spaceId, services) {
 		this.transport = transport;
 		this.spaceId = spaceId;
+		this.services = services;
 	}
 	list(path = "", options) {
 		return listDirectory(this.transport, `/api/spaces/${this.spaceId}/fs/tree`, path, options);
 	}
 	read(path, customFetch, signal) {
-		const params = new URLSearchParams({ path });
-		return this.transport.requestRevalidated(`/api/spaces/${this.spaceId}/fs/file?${params.toString()}`, {
+		if (customFetch) return this.transport.requestRevalidated(fileReadPath(this.spaceId, path), {
 			fetch: customFetch,
 			signal
 		});
+		return this.services.reads.read(this.spaceId, path, { signal });
 	}
 	/** Resolve a browser-ready file URL, waiting for CDN delivery when necessary. */
-	async resolveUrl(path, options = {}) {
+	resolveUrl(path, options = {}) {
+		const { fetch: customFetch, ...request } = options;
+		if (customFetch) return this.resolveUrlThrough(path, customFetch, options);
+		return this.services.urls.resolve(this.spaceId, path, request);
+	}
+	onUrlChange(listener) {
+		return this.services.urls.subscribe((spaceId, path) => {
+			if (spaceId === this.spaceId) listener(path);
+		});
+	}
+	async resolveUrlThrough(path, customFetch, options) {
 		const purpose = options.purpose ?? "preview";
 		const requestedTimeoutMs = options.timeoutMs ?? 15e3;
 		const timeoutMs = Number.isFinite(requestedTimeoutMs) ? Math.max(0, requestedTimeoutMs) : 15e3;
@@ -3771,7 +4419,7 @@ var SpaceFilesApi = class {
 		const deadline = createSpaceFileDeadlineSignal(options.signal, timeoutMs);
 		try {
 			while (true) {
-				const file = await this.read(path, options.fetch, deadline.signal);
+				const file = await this.read(path, customFetch, deadline.signal);
 				if (deadline.timedOut()) return null;
 				if ("content" in file) {
 					if (file.delivery === "url" && file.url) return file.url;
@@ -4049,14 +4697,9 @@ var SessionTurnsClient = class {
 		});
 	}
 };
-/**
-* Routes a rejected subscription for `room` (for example a missing
-* `space.view` permission) to `onRejected`. Without this an unauthorized
-* subscriber would simply never receive events, with no way to tell.
-*/
 const onRoomRejected = (websocketClient, room, onRejected) => websocketClient.on("event", (event) => {
 	if (event.type !== "system.subscribe.error") return;
-	if (event.payload.rejected?.some((entry) => entry.room === room)) onRejected(event);
+	if (event.payload.rejected?.some((entry) => entry.room === room && entry.code !== "UNAVAILABLE")) onRejected(event);
 });
 var SessionRealtimeClient = class {
 	websocketClient;
@@ -4314,14 +4957,6 @@ var SpaceEventsApi = class {
 				handler(event);
 				return;
 			}
-			if (type === "board.changed" && event.type === "board.changed") {
-				handler(event);
-				return;
-			}
-			if (type === "board.playback.changed" && event.type === "board.playback.changed") {
-				handler(event);
-				return;
-			}
 			if (type === "app.version.published" && event.type === "app.version.published") {
 				handler(event);
 				return;
@@ -4844,11 +5479,11 @@ var SpaceClient = class {
 	boards;
 	wallet;
 	commerce;
-	constructor(id, transport, websocketClient) {
+	constructor(id, transport, websocketClient, fileServices) {
 		this.id = id;
 		this.transport = transport;
 		this.websocketClient = websocketClient;
-		this.files = new SpaceFilesApi(transport, id);
+		this.files = new SpaceFilesApi(transport, id, fileServices);
 		this.publicFiles = new SpacePublicFilesApi(transport, id);
 		this.sessions = new SpaceSessionsApi(transport, id, websocketClient);
 		this.turns = new SpaceTurnsApi(transport, id);
@@ -5812,6 +6447,7 @@ var CohubHttpClient = class {
 		return this.desktop;
 	}
 	transport;
+	fileServices;
 	constructor(options = {}) {
 		const apiBaseUrl = resolveApiBaseUrl(options);
 		const executionToken = resolveExecutionToken();
@@ -5820,6 +6456,7 @@ var CohubHttpClient = class {
 			getAccessToken: () => executionToken
 		};
 		this.transport = new HttpTransport(resolvedOptions);
+		this.fileServices = createSpaceFileServices(this.transport, null);
 		this.spaces = new SpacesApi(this.transport);
 		this.channels = new ChannelsApi(this.transport);
 		this.user = new UserApi(this.transport, apiBaseUrl, options.setStoredAuthToken, options.clearStoredAuthToken);
@@ -5842,9 +6479,9 @@ var CohubHttpClient = class {
 		this.desktop = new DesktopCommandsApi(this.transport);
 	}
 	space(spaceId) {
-		return new SpaceClient(spaceId, this.transport, null);
+		return new SpaceClient(spaceId, this.transport, null, this.fileServices);
 	}
 };
 const createHttpClient = (options) => new CohubHttpClient(options);
 //#endregion
-export { isTerminalDesktopCommandStatus as $, BoardClient as A, CronJobsApi as B, SessionPatchReducer as C, isBuiltinItemType as Ct, connectDisplay as D, boardDefaultSize as Dt, DisplayConnection as E, BOARD_ARROW_STROKE_SIZE as Et, PublicAssetsApi as F, DESKTOP_COMMAND_OPEN_TIMEOUT_MS as G, DESKTOP_COMMAND_ACCEPT_TIMEOUT_MS as H, SkillsApi as I, DESKTOP_COMMAND_SETTLEMENT_GRACE_SECONDS as J, DESKTOP_COMMAND_PAYLOAD_MAX_BYTES as K, PromptsApi as L, SessionAccessApi as M, ReferencesApi as N, readRtcTransportStats as O, SearchApi as P, isDesktopCallMethod as Q, ModelsApi as R, parseAssistantMessageCommit as S, boardItemSchema as St, SpaceDisplaysApi as T, normalizeBoardRemoteUrl as Tt, DESKTOP_COMMAND_DEFAULT_TIMEOUT_MS as U, ChannelsApi as V, DESKTOP_COMMAND_MAX_TIMEOUT_MS as W, DESKTOP_COMMAND_VERSION as X, DESKTOP_COMMAND_TERMINAL_TTL_SECONDS as Y, defaultDesktopCommandTimeoutMs as Z, PublicInviteApi as _, BoardColorSchema as _t, WorkCommerceApi as a, DISPLAY_INPUT_MAX_SCHEDULE_MS as at, SessionGenerationStreamClient as b, BoardTrackSchema as bt, AppsApi as c, normalizeDisplayPoint as ct, UserApi as d, BOARD_MIME_TYPE as dt, parseDesktopCommand as et, TasksApi as f, BOARD_CAMERA_TARGET as ft, SpacesApi as g, BoardAnimationSchema as gt, SpaceWebhooksApi as h, BoardAnimationHeaderSchema as ht, AppCommerceApi as i, DISPLAY_ELEMENT_REF_PATTERN as it, ensureRealtimeConnected as j, waitForIceGathering as k, ReferralsApi as l, splitDisplayText as lt, SpacePublicFilesApi as m, BOARD_ITEM_TYPES as mt, createHttpClient as n, resolveOpenSurface as nt, DesktopCommandsApi as o, DISPLAY_INPUT_MAX_TEXT as ot, SpaceClient as p, BOARD_COLOR_TOKENS as pt, DESKTOP_COMMAND_PENDING_TTL_SECONDS as q, RoomsApi as r, NAVIGATION_ERROR_MESSAGE_MAX_LENGTH as rt, UiCommandsApi as s, DISPLAY_SYSTEM_ACTIONS as st, CohubHttpClient as t, parseDesktopCommandId as tt, UsersApi as u, BOARD_EXTENSION as ut, buildSpaceInvitePath as v, BoardPatchSchema as vt, createSessionPatchReducer as w, parseBoardItem as wt, createSessionGenerationStreamClient as x, BoardVec2Schema as xt, buildSpacePath as y, BoardSettingsSchema as yt, GenerationsApi as z };
+export { defaultDesktopCommandTimeoutMs as $, readRtcTransportStats as A, ModelsApi as B, createSessionGenerationStreamClient as C, BoardVec2Schema as Ct, SpaceDisplaysApi as D, normalizeBoardRemoteUrl as Dt, createSessionPatchReducer as E, parseBoardItem as Et, ReferencesApi as F, DESKTOP_COMMAND_DEFAULT_TIMEOUT_MS as G, CronJobsApi as H, SearchApi as I, DESKTOP_COMMAND_PAYLOAD_MAX_BYTES as J, DESKTOP_COMMAND_MAX_TIMEOUT_MS as K, PublicAssetsApi as L, BoardClient as M, ensureRealtimeConnected as N, DisplayConnection as O, BOARD_ARROW_STROKE_SIZE as Ot, SessionAccessApi as P, DESKTOP_COMMAND_VERSION as Q, SkillsApi as R, SessionGenerationStreamClient as S, BoardTrackSchema as St, SessionPatchReducer as T, isBuiltinItemType as Tt, ChannelsApi as U, GenerationsApi as V, DESKTOP_COMMAND_ACCEPT_TIMEOUT_MS as W, DESKTOP_COMMAND_SETTLEMENT_GRACE_SECONDS as X, DESKTOP_COMMAND_PENDING_TTL_SECONDS as Y, DESKTOP_COMMAND_TERMINAL_TTL_SECONDS as Z, createSpaceFileServices as _, BoardAnimationHeaderSchema as _t, WorkCommerceApi as a, NAVIGATION_ERROR_MESSAGE_MAX_LENGTH as at, buildSpaceInvitePath as b, BoardPatchSchema as bt, AppsApi as c, DISPLAY_INPUT_MAX_TEXT as ct, UserApi as d, splitDisplayText as dt, isDesktopCallMethod as et, TasksApi as f, BOARD_EXTENSION as ft, SpacesApi as g, BOARD_ITEM_TYPES as gt, SpaceWebhooksApi as h, BOARD_COLOR_TOKENS as ht, AppCommerceApi as i, resolveOpenSurface as it, waitForIceGathering as j, connectDisplay as k, boardDefaultSize as kt, ReferralsApi as l, DISPLAY_SYSTEM_ACTIONS as lt, SpacePublicFilesApi as m, BOARD_CAMERA_TARGET as mt, createHttpClient as n, parseDesktopCommand as nt, DesktopCommandsApi as o, DISPLAY_ELEMENT_REF_PATTERN as ot, SpaceClient as p, BOARD_MIME_TYPE as pt, DESKTOP_COMMAND_OPEN_TIMEOUT_MS as q, RoomsApi as r, parseDesktopCommandId as rt, UiCommandsApi as s, DISPLAY_INPUT_MAX_SCHEDULE_MS as st, CohubHttpClient as t, isTerminalDesktopCommandStatus as tt, UsersApi as u, normalizeDisplayPoint as ut, clearFileUrlCache as v, BoardAnimationSchema as vt, parseAssistantMessageCommit as w, boardItemSchema as wt, buildSpacePath as x, BoardSettingsSchema as xt, PublicInviteApi as y, BoardColorSchema as yt, PromptsApi as z };