@neta-art/cohub 2.11.1 → 2.12.0

package/NOTICE

@@ -0,0 +1,4 @@
+Cohub
+Copyright 2026 Viscept Limited
+
+This product includes software developed by Viscept Limited and contributors.

package/dist/chunks/http.d.ts

@@ -293,6 +293,8 @@ declare const createWorkRuntime: (transport?: WorkRuntimeTransport, workId?: str
 type Fetch = typeof globalThis.fetch;
 type RequestInitWithFetch = RequestInit & {
   fetch?: Fetch;
+  /** When true, 401 responses throw without invoking onUnauthorized (e.g. session bootstrap). */
+  skipUnauthorizedHandler?: boolean;
 };
 type RawHttpResponse = {
   response: Response;
@@ -566,6 +568,7 @@ declare class ReferencesApi {
     groupBy?: ReferenceAggregateGroupBy;
     kinds?: ReferenceKind[];
     days?: number;
+    limit?: number;
   }, customFetch?: Fetch): Promise<ReferenceAggregateResponse>;
 }
 //#endregion
@@ -815,6 +818,11 @@ declare class SpacesApi {
   private readonly transport;
   constructor(transport: HttpTransport);
   list(customFetch?: Fetch): Promise<SpaceRecord[]>;
+  /**
+   * Resolve the user's default space (owned/member home, else most recent).
+   * When the account has no accessible space, the API creates a blank Home
+   * space (`slug=home`) and returns it.
+   */
   getDefault(customFetch?: Fetch): Promise<SpaceDefaultResponse>;
   get(spaceId: string, customFetch?: Fetch): Promise<SpaceRecord>;
   getBySlug(username: string, slug: string, customFetch?: Fetch): Promise<SpaceRecord>;
@@ -1420,7 +1428,10 @@ declare class UserApi {
   private readonly setStoredAuthToken?;
   private readonly clearStoredAuthToken?;
   constructor(transport: HttpTransport, transportBaseUrl: string, setStoredAuthToken?: ((token: string) => void) | undefined, clearStoredAuthToken?: (() => void) | undefined);
-  getMe(customFetch?: Fetch): Promise<MeResponse>;
+  getMe(options?: Fetch | {
+    fetch?: Fetch;
+    skipUnauthorizedHandler?: boolean;
+  }): Promise<MeResponse>;
   updateProfile(input: {
     displayName?: string;
     avatarUrl?: string | null;

package/dist/chunks/http.js

@@ -311,6 +311,7 @@ var ReferencesApi = class {
 		if (input.groupBy) params.set("groupBy", input.groupBy);
 		if (input.kinds && input.kinds.length > 0) params.set("kinds", input.kinds.join(","));
 		if (input.days !== void 0) params.set("days", String(input.days));
+		if (input.limit !== void 0) params.set("limit", String(input.limit));
 		return this.transport.request(`/api/references/aggregate?${params.toString()}`, { fetch: customFetch });
 	}
 };
@@ -1357,6 +1358,11 @@ var SpacesApi = class {
 			fetch: customFetch
 		});
 	}
+	/**
+	* Resolve the user's default space (owned/member home, else most recent).
+	* When the account has no accessible space, the API creates a blank Home
+	* space (`slug=home`) and returns it.
+	*/
 	getDefault(customFetch) {
 		return this.transport.request("/api/spaces/default", {
 			method: "GET",
@@ -2564,8 +2570,9 @@ var UserApi = class {
 		this.setStoredAuthToken = setStoredAuthToken;
 		this.clearStoredAuthToken = clearStoredAuthToken;
 	}
-	getMe(customFetch) {
-		return this.transport.request("/api/me", { fetch: customFetch });
+	getMe(options) {
+		const init = typeof options === "function" ? { fetch: options } : options;
+		return this.transport.request("/api/me", init);
 	}
 	updateProfile(input) {
 		return this.transport.request("/api/me/profile", {

package/dist/chunks/transport.js

@@ -102,18 +102,20 @@ var HttpTransport = class {
 		this.onUnauthorized = options.onUnauthorized;
 	}
 	async withAuthorization(init, tokenOverride) {
-		const headers = new Headers(init?.headers);
+		const { fetch: _fetch, skipUnauthorizedHandler: _skip, ...requestInit } = init ?? {};
+		const headers = new Headers(requestInit.headers);
 		const token = sanitizeAccessToken(tokenOverride !== void 0 ? tokenOverride : this.getAccessToken ? await this.getAccessToken() : null);
 		if (token) headers.set("Authorization", `Bearer ${token}`);
 		else headers.delete("Authorization");
 		return {
-			...init,
+			...requestInit,
 			headers
 		};
 	}
 	async send(path, init) {
 		const fetcher = init?.fetch ?? this.fetcher;
 		const url = joinApiUrl(this.baseUrl, path);
+		const skipUnauthorizedHandler = Boolean(init?.skipUnauthorizedHandler);
 		let response;
 		try {
 			response = await fetcher(url, await this.withAuthorization(init));
@@ -148,7 +150,7 @@ var HttpTransport = class {
 			}
 		}
 		if (response.status === 401) {
-			await this.onUnauthorized?.();
+			if (!skipUnauthorizedHandler) await this.onUnauthorized?.();
 			throw new HttpError("unauthorized", 401, null);
 		}
 		if (!response.ok) {

package/dist/chunks/websocket.d.ts

@@ -2205,7 +2205,7 @@ type ExploreSpacesResponse = {
   sections: ExploreSection[];
   spaces: ExploreSpaceItem[];
 };
-type Permission = "space.view" | "space.edit" | "space.label.view" | "space.label.manage" | "space.label.assign" | "session.view" | "session.edit" | "session.prompt.readonly" | "session.prompt.fullaccess" | "generation.create" | "file.view" | "file.view.filtered" | "file.edit" | "checkpoint.view" | "checkpoint.edit" | "member.view" | "member.manage" | "channel.view" | "channel.manage" | "cronjob.view" | "cronjob.manage" | "taskrun.view" | "sandbox.view" | "sandbox.manage" | "mod.view" | "mod.manage" | "user.space.list" | "user.session.list" | "user.usage.read";
+type Permission = "space.view" | "space.edit" | "space.label.view" | "space.label.manage" | "space.label.assign" | "session.view" | "session.edit" | "session.prompt.readonly" | "session.prompt.fullaccess" | "generation.create" | "file.view" | "file.view.filtered" | "file.edit" | "checkpoint.view" | "checkpoint.edit" | "member.view" | "member.manage" | "references.view" | "channel.view" | "channel.manage" | "cronjob.view" | "cronjob.manage" | "taskrun.view" | "sandbox.view" | "sandbox.manage" | "mod.view" | "mod.manage" | "user.space.list" | "user.session.list" | "user.usage.read";
 type SpaceAccess = {
   role: SpaceRole | null;
   permissions: Permission[];
@@ -2339,23 +2339,23 @@ type AcceptInvitationResponse = {
   spaceName: string;
   role: SpaceRole;
 };
-type ReferenceResourceType = "space" | "session" | "checkpoint" | "user" | "file" | "tool";
+type ReferenceResourceType = "turn" | "session" | "space" | "checkpoint" | "file";
 /**
- * Resource types usable as a query `source`. Only these have an owning space to
- * authorize against; user/file/tool appear only as reference targets.
+ * Resource types usable as a query `source`: they resolve to an owning space to
+ * authorize against. `turn` gives the finest precision; session/space roll up.
+ * `file` appears only as an edge target, never as a queryable source.
  */
-type ReferenceQueryableType = "space" | "session" | "checkpoint";
-type ReferenceKind = "session_fork" | "space_fork" | "checkpoint_fork" | "mention" | "tool_call" | "mod" | "participant";
+type ReferenceQueryableType = "turn" | "session" | "space" | "checkpoint";
+type ReferenceKind = "session_fork" | "space_fork" | "checkpoint_fork" | "mod" | "mention" | "tool_call" | "agent_tool_file_read" | "agent_tool_file_write" | "agent_tool_file_edit" | "agent_tool_file_ls" | "agent_tool_file_find" | "agent_tool_file_grep";
 type ReferenceDirection = "out" | "in" | "both";
 type ReferenceRecord = {
   kind: ReferenceKind;
   sourceType: ReferenceResourceType;
   sourceId: string;
-  sourceTurnId: string | null;
   targetType: ReferenceResourceType;
   targetId: string;
-  spaceId: string;
-  sessionId: string | null;
+  sourceSpaceId: string;
+  sourceSessionId: string | null;
   count: number;
   createdAt: string;
   updatedAt: string;
@@ -2366,7 +2366,7 @@ type ReferenceQueryResponse = {
   direction: ReferenceDirection;
   references: ReferenceRecord[];
 };
-type ReferenceAggregateGroupBy = "kind" | "targetType" | "sourceType" | "day";
+type ReferenceAggregateGroupBy = "kind" | "targetType" | "target" | "sourceType" | "day";
 type ReferenceAggregateGroup = {
   group: string;
   references: number;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neta-art/cohub",
-  "version": "2.11.1",
+  "version": "2.12.0",
   "description": "Cohub SDK for spaces, sessions, checkpoints, and realtime agent collaboration.",
   "license": "Apache-2.0",
   "private": false,
@@ -50,7 +50,9 @@
   "files": [
     "dist",
     "README.md",
-    "docs"
+    "docs",
+    "LICENSE",
+    "NOTICE"
   ],
   "devDependencies": {
     "tsdown": "^0.22.7",