@neta-art/cohub 2.4.0 → 2.6.0

package/dist/chunks/http.d.ts

@@ -3,7 +3,14 @@ import { C as ContentBlock, S as Usage, _ as SessionForkRecord, a as WebsocketCl
 import { a as VoiceInputCreateOptions } from "./voice-input.js";
 
 //#region ../protocol/src/gateway/types.d.ts
-type DiscordChannelConfig = {
+type ChannelModelConfig = {
+  provider: string;
+  id: string;
+};
+type BaseChannelConfig = {
+  model?: ChannelModelConfig | null;
+};
+type DiscordChannelConfig = BaseChannelConfig & {
   inbound?: {
     requireMentionInGuild?: boolean;
   };
@@ -12,7 +19,7 @@ type DiscordChannelConfig = {
     showToolCalls?: boolean;
   };
 };
-type FeishuChannelConfig = {
+type FeishuChannelConfig = BaseChannelConfig & {
   brand?: "feishu" | "lark";
   inbound?: {
     requireMentionInGroup?: boolean;
@@ -23,12 +30,12 @@ type FeishuChannelConfig = {
     showToolCalls?: boolean;
   };
 };
-type WeChatChannelConfig = {
+type WeChatChannelConfig = BaseChannelConfig & {
   outbound?: {
     showIntermediateStatus?: boolean;
   };
 };
-type ChannelConfig = DiscordChannelConfig | FeishuChannelConfig | WeChatChannelConfig | Record<string, unknown>;
+type ChannelConfig = DiscordChannelConfig | FeishuChannelConfig | WeChatChannelConfig | (BaseChannelConfig & Record<string, unknown>);
 //#endregion
 //#region ../../node_modules/.pnpm/@neta-art+generation@0.1.10/node_modules/@neta-art/generation/dist/builtins-CWEB_GK4.d.ts
 //#region src/types.d.ts
@@ -1467,9 +1474,16 @@ declare class WorkRuntimeApi {
   private token;
   private readonly transport;
   private readonly tokenStorageKey;
+  private readonly scopesStorageKey;
+  /** Scopes previously granted via requestAuthorization, retained so token
+   * refreshes can re-authorize (preserving viewerScopes) instead of falling
+   * back to a base session token that only carries workScopes. */
+  private authorizedScopes;
   constructor(transport?: WorkRuntimeTransport, workId?: string);
   private readStoredToken;
   private writeStoredToken;
+  private readStoredScopes;
+  private writeStoredScopes;
   context(): Promise<WorkRuntimeContext | null>;
   getAccessToken(options?: {
     forceRefresh?: boolean;
@@ -2010,6 +2024,10 @@ declare class SpaceFilesApi {
    * SDK can attach authorization headers.
    */
   getDownloadUrl(path: string): string;
+  createPreviewSession(customFetch?: Fetch): Promise<{
+    token: string;
+    expiresIn: number;
+  }>;
   download(path: string, customFetch?: Fetch): Promise<{
     blob: Blob;
     filename: string;
@@ -2190,7 +2208,7 @@ type SpaceChannelBindingRecord = {
   id: string;
   spaceId: string;
   channelId: string;
-  config: Record<string, unknown> | null;
+  config: ChannelConfig | null;
   createdAt: string;
   channel: {
     id: string;
@@ -2207,7 +2225,8 @@ declare class SpaceChannelsApi {
   private readonly spaceId;
   constructor(transport: HttpTransport, spaceId: string);
   list(): Promise<SpaceChannelBindingRecord[]>;
-  bind(channelId: string, config?: Record<string, unknown> | null): Promise<SpaceChannelBindingRecord>;
+  bind(channelId: string, config?: ChannelConfig | null): Promise<SpaceChannelBindingRecord>;
+  updateConfig(channelId: string, config?: ChannelConfig | null): Promise<SpaceChannelBindingRecord>;
   unbind(channelId: string): Promise<{
     ok: true;
   }>;

package/dist/chunks/http.js

@@ -1471,6 +1471,12 @@ var SpaceFilesApi = class {
 		const params = new URLSearchParams({ path });
 		return `/api/spaces/${this.spaceId}/fs/download?${params.toString()}`;
 	}
+	createPreviewSession(customFetch) {
+		return this.transport.request(`/api/spaces/${this.spaceId}/preview-session`, {
+			method: "POST",
+			fetch: customFetch
+		});
+	}
 	async download(path, customFetch) {
 		const params = new URLSearchParams({ path });
 		const raw = await this.transport.raw(`/api/spaces/${this.spaceId}/fs/download?${params.toString()}`, { fetch: customFetch });
@@ -1923,6 +1929,13 @@ var SpaceChannelsApi = class {
 			body: JSON.stringify({ config: config ?? null })
 		});
 	}
+	updateConfig(channelId, config) {
+		return this.transport.request(`/api/spaces/${this.spaceId}/channels/${channelId}`, {
+			method: "PATCH",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify({ config: config ?? null })
+		});
+	}
 	unbind(channelId) {
 		return this.transport.request(`/api/spaces/${this.spaceId}/channels/${channelId}`, { method: "DELETE" });
 	}

package/dist/index.d.ts

@@ -136,9 +136,119 @@ declare class CohubClient {
 }
 declare const createCohubClient: (options?: CohubClientOptions) => CohubClient;
 //#endregion
+//#region src/work-bridge-core.d.ts
+/**
+ * The subset of a work record the bridge host needs to answer bridge messages.
+ * Matches what the iframe host (WorkSurface) and the broker page both have on
+ * hand after loading the work.
+ */
+type WorkBridgeCoreWork = Pick<WorkRecord, "id" | "spaceId" | "slug" | "userUuid" | "workScopes" | "allowedViewerScopes">;
+/**
+ * A pending authorize request surfaced to the UI as a consent dialog.
+ */
+type WorkAuthorizeRequest = {
+  requestId: string;
+  scopes: Permission[];
+  reason?: string;
+};
+/**
+ * A pending purchase request surfaced to the UI as a checkout confirmation.
+ */
+type WorkPurchaseRequest = {
+  requestId: string;
+  productKey: string;
+};
+/**
+ * Reactive dialog state managed by the core. The host (Svelte or React)
+ * subscribes via {@link WorkBridgeCoreConfig.onStateChange} and mirrors these
+ * fields into its own reactive primitives.
+ */
+type WorkBridgeDialogState = {
+  authOpen: boolean;
+  pendingAuth: WorkAuthorizeRequest | null;
+  authError: string | null;
+  authSaving: boolean;
+  purchaseOpen: boolean;
+  pendingPurchase: WorkPurchaseRequest | null;
+  purchaseError: string | null;
+  purchaseSaving: boolean;
+};
+/**
+ * Resolves the current user's Cohub API access token. The core uses this to
+ * mint work session / authorization tokens via the Cohub API.
+ */
+type WorkBridgeGetAccessToken = (options?: {
+  forceRefresh?: boolean;
+}) => Promise<string | null>;
+/**
+ * Resolves the current viewer's user UUID (or null when unauthenticated).
+ * Used for ownership checks and silent re-authorization cache lookups.
+ */
+type WorkBridgeGetViewerUuid = () => Promise<string | null>;
+/**
+ * Requests the host to start a sign-in flow, redirecting back to the given
+ * path afterward. The core calls this when an API request fails due to missing
+ * authentication.
+ */
+type WorkBridgeRequestSignIn = (redirectPath: string) => Promise<void>;
+/**
+ * Configuration injected by the caller. The core is transport-agnostic: how a
+ * reply is delivered back to the work (iframe postMessage vs opener
+ * postMessage) and how the current checkout state is read (page URL) are the
+ * caller's responsibility, so the same core serves both bridge and broker
+ * hosts. Auth dependencies (token resolution, viewer identity, sign-in) are
+ * also injected so the core stays free of any framework's store/auth plumbing.
+ */
+type WorkBridgeCoreConfig = {
+  work: WorkBridgeCoreWork; /** True when running as a background chat surface (owner auto-authorizes). */
+  isBackground?: boolean; /** Base origin for Cohub API requests (e.g. "https://cohub.run"). */
+  apiOrigin: string; /** Sends a reply payload back to the work runtime. */
+  reply: (requestId: string, payload: Record<string, unknown>) => void; /** Reads the current checkout state (typically derived from the page URL). */
+  getCheckoutState: () => WorkRuntimeCheckoutState; /** Resolves the current user's Cohub access token. */
+  getAccessToken: WorkBridgeGetAccessToken; /** Resolves the current viewer's user UUID. */
+  getViewerUuid: WorkBridgeGetViewerUuid; /** Starts a sign-in flow with a post-login redirect path. */
+  requestSignIn: WorkBridgeRequestSignIn; /** Called whenever the dialog state changes, for reactive UI binding. */
+  onStateChange?: (state: WorkBridgeDialogState) => void;
+};
+type WorkBridgeCore = {
+  /** Returns a snapshot of the current dialog state. */getState: () => WorkBridgeDialogState; /** Processes an inbound bridge message (already source/origin-validated). */
+  handleMessage: (event: MessageEvent) => Promise<void>; /** Confirm/cancel handlers for the authorize dialog. */
+  confirmAuth: () => Promise<void>;
+  cancelAuth: () => void; /** Confirm/cancel handlers for the purchase dialog. */
+  confirmPurchase: () => Promise<void>;
+  cancelPurchase: () => void;
+};
+/**
+ * Framework-agnostic work bridge host core — message handling, work session
+ * token minting, authorization (with silent re-grant cache), and
+ * purchase/checkout flow — without any rendering or reactive primitives.
+ *
+ * Both the Cohub iframe host (WorkSurface, Svelte) and the standalone broker
+ * page compose this with their own transport-specific reply and auth
+ * dependencies. External hosts (e.g. Neta-Studio in React) can do the same.
+ */
+declare function createWorkBridgeCore(config: WorkBridgeCoreConfig): WorkBridgeCore;
+//#endregion
+//#region src/work-grant-cache.d.ts
+/**
+ * Returns true when the viewer has previously granted every requested scope
+ * for this work, allowing a silent re-authorization.
+ */
+declare function hasGrantedWorkScopes(userUuid: string | null | undefined, workId: string, scopes: readonly Permission[]): boolean;
+/**
+ * Records the granted scopes for a work, merged with any previously granted
+ * scopes so a growing permission set stays covered.
+ */
+declare function setGrantedWorkScopes(userUuid: string | null | undefined, workId: string, scopes: readonly Permission[]): void;
+/**
+ * Clears cached grants. Pass a workId to clear a single work, or omit it to
+ * clear every cached grant for the user (used on sign-out).
+ */
+declare function clearGrantedWorkScopes(userUuid: string | null | undefined, workId?: string): void;
+//#endregion
 //#region src/http-error.d.ts
 declare function isHttpErrorCode(error: unknown, code: string): error is HttpError & {
   code: string;
 };
 //#endregion
-export { AcceptInvitationResponse, ApiError, type AssistantMessageCommit, BatchUserProfilesResponse, BillingAccessWarning, BillingApi, BillingBalanceActivity, BillingBalanceActivityKind, BillingBalanceActivityList, BillingBalanceActivityStatus, BillingCatalog, BillingCatalogProduct, BillingCheckoutActionState, BillingCheckoutResult, BillingConversionIntent, BillingCreditExpiryGroup, BillingCreditGrantStatus, BillingCreditStatus, BillingCreditUnit, BillingHistoryPagination, BillingPaymentStatus, BillingPluginStatus, BillingProductBillingInterval, BillingProductCreditBenefit, BillingProductDisplay, BillingProductKind, BillingProductPricing, BillingRedemptionResult, BillingSubscriptionHistoryList, BillingSubscriptionHistoryStatus, BillingSubscriptionSummary, COHUB_ENVIRONMENTS, CanvasBootstrapResponse, CanvasCreateInput, CanvasDocumentRecord, CanvasNodeInput, CanvasNodeRecord, CanvasSemanticOp, CanvasTransactionInput, Channel, type ChannelConfig, type ChannelEnvelope, CheckpointRecord, CohubClient, type CohubClientOptions, type CohubEnvironment, CohubHttpClient, type ContentBlock, type CreateGenerationTaskRequest, type CreateGenerationTaskResponse, CreateInvitationInput, CreateInvitationResponse, type CreatePublicAssetUploadInput, type CreatePublicAssetUploadResponse, CreateSpaceInput, CreateSpaceModInput, CreateSpacePromptInput, CreateSpacePromptResponse, CreateSpaceSessionInput, CronJobPayload, CronJobRecord, CronJobUpdatePatch, CursorPageInfo, type DiscordChannelConfig, ExploreSection, ExploreSpaceItem, ExploreSpacesResponse, type Fetch, type GenerationContentBlock, type GenerationModelPolicy, type GenerationParameterConstraint, type GenerationPolicy, GenerationPolicyError, type GenerationStreamCommitEvent, type GenerationStreamErrorEvent, type GenerationStreamEvent, type GenerationStreamFinalizedEvent, type GenerationStreamIntermediateMessage, type GenerationStreamLifecycleEvent, type GenerationStreamOutOfSyncEvent, type GenerationStreamStateEvent, type GenerationStreamSubscribeOptions, type GenerationStreamSubscriptionHandlers, type GenerationStreamTurnUpdatedEvent, type GenerationTaskResult, GlobalSearchResponse, GlobalSearchResult, GlobalSearchType, HttpError, InvitationDetail, JsonObject, JsonPrimitive, JsonValue, LabelAssignmentListItem, LabelAssignmentPageInfo, LabelAssignmentRecord, type LabelAssignmentsUpdatedEvent, LabelListItem, LabelRecord, LabelResourceType, LabelScopeType, LabelSource, type ListGenerationModelsResponse, MeResponse, type MessageRecord, ModelCatalogEntry, ParentBridgeTransport, PatchResourceLabelsInput, PatchResourceLabelsResponse, Permission, PopupBrokerTransport, PromptAccessMode, PromptTemplateCatalogEntry, PromptTemplateCatalogResponse, type PublicAssetMimeType, type PublicAssetPurpose, type PublicGenerationDeclaration, PublicUserProfile, type RawHttpResponse, type RealtimeServerEvent, ReferenceAggregateGroup, ReferenceAggregateGroupBy, ReferenceAggregateResponse, ReferenceDirection, ReferenceKind, ReferenceQueryResponse, ReferenceQueryableType, ReferenceRecord, type ReferenceResourceSelector, ReferenceResourceType, ReferencesApi, ResourceLabelsResponse, SendMessageCronJobPayload, SessionBindingRecord, type SessionEventName, type SessionForkRecord, SessionGenerationStreamClient, SessionMessageResponse, SessionMessagesPaginatedResponse, SessionMessagesResponse, type SessionPatchApplyInput, type SessionPatchApplyResult, SessionPatchReducer, type SessionPatchState, type SessionPatchStatus, SessionRecord, type SessionSubscriptionHandlers, type SessionTurnIndexItem, SessionTurnIndexResponse, type SessionTurnRecord, SessionTurnResponse, type SessionTurnSegmentRecord, SessionTurnSignedUrlsResponse, SessionTurnStreamSnapshotResponse, SessionTurnWindowResponse, SessionTurnsPaginatedResponse, SpaceAccess, SpaceAccessPolicy, SpaceBootstrapSource, SpaceChannelBindingInput, type SpaceChannelBindingRecord, SpaceCheckpointDetailResponse, SpaceCommerceBenefit, SpaceCommerceBuyerProfile, SpaceCommerceCreditsBenefit, SpaceCommerceFeatureBenefit, SpaceCommerceOrder, SpaceCommerceProduct, SpaceCommerceProductBenefitBinding, SpaceCommerceProductCreditBenefit, SpaceConfig, SpaceConfigInput, SpaceConfigResponse, SpaceCreateResponse, SpaceDefaultResponse, SpaceEnvInput, type SpaceEventName, SpaceFsCompleteUploadInput, SpaceFsCompleteUploadResponse, SpaceFsCreateUploadInput, SpaceFsCreateUploadResponse, SpaceFsEncoding, SpaceFsEntry, SpaceFsFileKind, SpaceFsFileResponse, SpaceFsMoveInput, SpaceFsPreparingFile, SpaceFsReadFilesError, SpaceFsReadFilesInput, SpaceFsReadFilesResponse, SpaceFsTreeResponse, SpaceFsUploadDestination, SpaceFsUploadEntry, SpaceFsUploadError, SpaceFsUploadPlanEntry, SpaceFsUploadPlanEntryInput, SpaceFsUploadProgress, SpaceFsUploadResponse, SpaceFsWriteFileInput, SpaceInvitation, SpaceListItem, SpaceMember, SpaceMeta, SpaceModListItem, SpacePresenceSnapshot, SpacePresenceUser, SpacePublicProfile, SpaceRecord, SpaceRole, SpaceSandboxAutoDestroyPolicy, SpaceSandboxConfig, SpaceSandboxProvider, SpaceSessionsResponse, SpaceUsageHourlyStat, SpaceUsageResponse, SpaceUsageSummary, TaskRunDetailResponse, TaskRunRecord, type UploadChatImageAttachmentInput, type UploadPublicAssetInput, UserProfile, UserRulesResponse, UsersApi, VoiceApi, type VoiceInputCallbacks, VoiceInputClient, type VoiceInputClientOptions, type VoiceInputCreateOptions, type VoiceInputEvent, type WebSocketConnectionState, WebsocketClient, type WorkAuthorizeResponse, WorkCommerceApi, type WorkCommerceCheckoutStatus, type WorkCommerceCreditConsumeResponse, type WorkCommerceCreditConsumeStatus, type WorkCommerceEntitlement, type WorkCommerceEntitlementsResponse, type WorkCommerceOrder, type WorkCommerceProductResolveResponse, type WorkCommercePurchaseResponse, type WorkCreateInput, type WorkDetailResponse, type WorkGetResponse, type WorkMeta, type WorkPresentationMeta, type WorkPublicOwnerRecord, type WorkPublicSpaceRecord, type WorkRecord, type WorkResolveResponse, WorkRuntimeApi, type WorkRuntimeCheckoutState, type WorkRuntimeCheckoutStatus, type WorkRuntimeContext, type WorkRuntimeModeConfig, type WorkRuntimeRequestOptions, type WorkRuntimeTransport, type WorkSessionResponse, type WorkStatus, type WorkTargetType, type WorkUpdateInput, type WorkVersionRecord, type WorkVisibility, WorksApi, assertGenerationRequestAllowedByPolicy, createCohubClient, createHttpClient, createSessionGenerationStreamClient, createSessionPatchReducer, createVoiceInputClient, createWebsocketClient, createWorkRuntime, decodeGenerationPolicy, encodeGenerationPolicy, filterGenerationDeclarationsByPolicy, findGenerationModelPolicy, getAllowedGenerationModelIds, isHttpErrorCode, normalizeBaseUrl, normalizeGenerationPolicy, normalizeVoiceInputWebsocketUrl, normalizeWebsocketUrl, parseAssistantMessageCommit, parseGenerationPolicyFromEnv, resolveApiBaseUrl, resolveCohubEnvironment, resolveVoiceInputWebsocketUrl, resolveWebsocketUrl, resolveWorkTransport };
+export { AcceptInvitationResponse, ApiError, type AssistantMessageCommit, BatchUserProfilesResponse, BillingAccessWarning, BillingApi, BillingBalanceActivity, BillingBalanceActivityKind, BillingBalanceActivityList, BillingBalanceActivityStatus, BillingCatalog, BillingCatalogProduct, BillingCheckoutActionState, BillingCheckoutResult, BillingConversionIntent, BillingCreditExpiryGroup, BillingCreditGrantStatus, BillingCreditStatus, BillingCreditUnit, BillingHistoryPagination, BillingPaymentStatus, BillingPluginStatus, BillingProductBillingInterval, BillingProductCreditBenefit, BillingProductDisplay, BillingProductKind, BillingProductPricing, BillingRedemptionResult, BillingSubscriptionHistoryList, BillingSubscriptionHistoryStatus, BillingSubscriptionSummary, COHUB_ENVIRONMENTS, CanvasBootstrapResponse, CanvasCreateInput, CanvasDocumentRecord, CanvasNodeInput, CanvasNodeRecord, CanvasSemanticOp, CanvasTransactionInput, Channel, type ChannelConfig, type ChannelEnvelope, CheckpointRecord, CohubClient, type CohubClientOptions, type CohubEnvironment, CohubHttpClient, type ContentBlock, type CreateGenerationTaskRequest, type CreateGenerationTaskResponse, CreateInvitationInput, CreateInvitationResponse, type CreatePublicAssetUploadInput, type CreatePublicAssetUploadResponse, CreateSpaceInput, CreateSpaceModInput, CreateSpacePromptInput, CreateSpacePromptResponse, CreateSpaceSessionInput, CronJobPayload, CronJobRecord, CronJobUpdatePatch, CursorPageInfo, type DiscordChannelConfig, ExploreSection, ExploreSpaceItem, ExploreSpacesResponse, type Fetch, type GenerationContentBlock, type GenerationModelPolicy, type GenerationParameterConstraint, type GenerationPolicy, GenerationPolicyError, type GenerationStreamCommitEvent, type GenerationStreamErrorEvent, type GenerationStreamEvent, type GenerationStreamFinalizedEvent, type GenerationStreamIntermediateMessage, type GenerationStreamLifecycleEvent, type GenerationStreamOutOfSyncEvent, type GenerationStreamStateEvent, type GenerationStreamSubscribeOptions, type GenerationStreamSubscriptionHandlers, type GenerationStreamTurnUpdatedEvent, type GenerationTaskResult, GlobalSearchResponse, GlobalSearchResult, GlobalSearchType, HttpError, InvitationDetail, JsonObject, JsonPrimitive, JsonValue, LabelAssignmentListItem, LabelAssignmentPageInfo, LabelAssignmentRecord, type LabelAssignmentsUpdatedEvent, LabelListItem, LabelRecord, LabelResourceType, LabelScopeType, LabelSource, type ListGenerationModelsResponse, MeResponse, type MessageRecord, ModelCatalogEntry, ParentBridgeTransport, PatchResourceLabelsInput, PatchResourceLabelsResponse, Permission, PopupBrokerTransport, PromptAccessMode, PromptTemplateCatalogEntry, PromptTemplateCatalogResponse, type PublicAssetMimeType, type PublicAssetPurpose, type PublicGenerationDeclaration, PublicUserProfile, type RawHttpResponse, type RealtimeServerEvent, ReferenceAggregateGroup, ReferenceAggregateGroupBy, ReferenceAggregateResponse, ReferenceDirection, ReferenceKind, ReferenceQueryResponse, ReferenceQueryableType, ReferenceRecord, type ReferenceResourceSelector, ReferenceResourceType, ReferencesApi, ResourceLabelsResponse, SendMessageCronJobPayload, SessionBindingRecord, type SessionEventName, type SessionForkRecord, SessionGenerationStreamClient, SessionMessageResponse, SessionMessagesPaginatedResponse, SessionMessagesResponse, type SessionPatchApplyInput, type SessionPatchApplyResult, SessionPatchReducer, type SessionPatchState, type SessionPatchStatus, SessionRecord, type SessionSubscriptionHandlers, type SessionTurnIndexItem, SessionTurnIndexResponse, type SessionTurnRecord, SessionTurnResponse, type SessionTurnSegmentRecord, SessionTurnSignedUrlsResponse, SessionTurnStreamSnapshotResponse, SessionTurnWindowResponse, SessionTurnsPaginatedResponse, SpaceAccess, SpaceAccessPolicy, SpaceBootstrapSource, SpaceChannelBindingInput, type SpaceChannelBindingRecord, SpaceCheckpointDetailResponse, SpaceCommerceBenefit, SpaceCommerceBuyerProfile, SpaceCommerceCreditsBenefit, SpaceCommerceFeatureBenefit, SpaceCommerceOrder, SpaceCommerceProduct, SpaceCommerceProductBenefitBinding, SpaceCommerceProductCreditBenefit, SpaceConfig, SpaceConfigInput, SpaceConfigResponse, SpaceCreateResponse, SpaceDefaultResponse, SpaceEnvInput, type SpaceEventName, SpaceFsCompleteUploadInput, SpaceFsCompleteUploadResponse, SpaceFsCreateUploadInput, SpaceFsCreateUploadResponse, SpaceFsEncoding, SpaceFsEntry, SpaceFsFileKind, SpaceFsFileResponse, SpaceFsMoveInput, SpaceFsPreparingFile, SpaceFsReadFilesError, SpaceFsReadFilesInput, SpaceFsReadFilesResponse, SpaceFsTreeResponse, SpaceFsUploadDestination, SpaceFsUploadEntry, SpaceFsUploadError, SpaceFsUploadPlanEntry, SpaceFsUploadPlanEntryInput, SpaceFsUploadProgress, SpaceFsUploadResponse, SpaceFsWriteFileInput, SpaceInvitation, SpaceListItem, SpaceMember, SpaceMeta, SpaceModListItem, SpacePresenceSnapshot, SpacePresenceUser, SpacePublicProfile, SpaceRecord, SpaceRole, SpaceSandboxAutoDestroyPolicy, SpaceSandboxConfig, SpaceSandboxProvider, SpaceSessionsResponse, SpaceUsageHourlyStat, SpaceUsageResponse, SpaceUsageSummary, TaskRunDetailResponse, TaskRunRecord, type UploadChatImageAttachmentInput, type UploadPublicAssetInput, UserProfile, UserRulesResponse, UsersApi, VoiceApi, type VoiceInputCallbacks, VoiceInputClient, type VoiceInputClientOptions, type VoiceInputCreateOptions, type VoiceInputEvent, type WebSocketConnectionState, WebsocketClient, type WorkAuthorizeRequest, type WorkAuthorizeResponse, type WorkBridgeCore, type WorkBridgeCoreConfig, type WorkBridgeCoreWork, type WorkBridgeDialogState, type WorkBridgeGetAccessToken, type WorkBridgeGetViewerUuid, type WorkBridgeRequestSignIn, WorkCommerceApi, type WorkCommerceCheckoutStatus, type WorkCommerceCreditConsumeResponse, type WorkCommerceCreditConsumeStatus, type WorkCommerceEntitlement, type WorkCommerceEntitlementsResponse, type WorkCommerceOrder, type WorkCommerceProductResolveResponse, type WorkCommercePurchaseResponse, type WorkCreateInput, type WorkDetailResponse, type WorkGetResponse, type WorkMeta, type WorkPresentationMeta, type WorkPublicOwnerRecord, type WorkPublicSpaceRecord, type WorkPurchaseRequest, type WorkRecord, type WorkResolveResponse, WorkRuntimeApi, type WorkRuntimeCheckoutState, type WorkRuntimeCheckoutStatus, type WorkRuntimeContext, type WorkRuntimeModeConfig, type WorkRuntimeRequestOptions, type WorkRuntimeTransport, type WorkSessionResponse, type WorkStatus, type WorkTargetType, type WorkUpdateInput, type WorkVersionRecord, type WorkVisibility, WorksApi, assertGenerationRequestAllowedByPolicy, clearGrantedWorkScopes, createCohubClient, createHttpClient, createSessionGenerationStreamClient, createSessionPatchReducer, createVoiceInputClient, createWebsocketClient, createWorkBridgeCore, createWorkRuntime, decodeGenerationPolicy, encodeGenerationPolicy, filterGenerationDeclarationsByPolicy, findGenerationModelPolicy, getAllowedGenerationModelIds, hasGrantedWorkScopes, isHttpErrorCode, normalizeBaseUrl, normalizeGenerationPolicy, normalizeVoiceInputWebsocketUrl, normalizeWebsocketUrl, parseAssistantMessageCommit, parseGenerationPolicyFromEnv, resolveApiBaseUrl, resolveCohubEnvironment, resolveVoiceInputWebsocketUrl, resolveWebsocketUrl, resolveWorkTransport, setGrantedWorkScopes };

package/dist/index.js

@@ -97,10 +97,10 @@ var UsersApi = class {
 };
 //#endregion
 //#region src/work-runtime.ts
-const isBrowser = () => typeof window !== "undefined" && typeof window.parent !== "undefined";
-const hasParent = () => isBrowser() && window.parent !== window;
+const isBrowser$1 = () => typeof window !== "undefined" && typeof window.parent !== "undefined";
+const hasParent = () => isBrowser$1() && window.parent !== window;
 const getParentOrigin = () => {
-	if (!isBrowser()) return null;
+	if (!isBrowser$1()) return null;
 	const ancestorOrigin = window.location.ancestorOrigins?.[0];
 	if (typeof ancestorOrigin === "string" && ancestorOrigin) return ancestorOrigin;
 	try {
@@ -274,14 +274,22 @@ var PopupBrokerTransport = class {
 	}
 };
 const TOKEN_STORAGE_PREFIX = "cohub:work-token";
+const AUTHORIZED_SCOPES_STORAGE_PREFIX = "cohub:work-auth-scopes";
 var WorkRuntimeApi = class {
 	token = null;
 	transport;
 	tokenStorageKey;
+	scopesStorageKey;
+	/** Scopes previously granted via requestAuthorization, retained so token
+	* refreshes can re-authorize (preserving viewerScopes) instead of falling
+	* back to a base session token that only carries workScopes. */
+	authorizedScopes = null;
 	constructor(transport = new ParentBridgeTransport(), workId) {
 		this.transport = transport;
 		this.tokenStorageKey = workId ? `${TOKEN_STORAGE_PREFIX}:${workId}` : null;
+		this.scopesStorageKey = workId ? `${AUTHORIZED_SCOPES_STORAGE_PREFIX}:${workId}` : null;
 		this.token = this.readStoredToken();
+		this.authorizedScopes = this.readStoredScopes();
 	}
 	readStoredToken() {
 		if (!this.tokenStorageKey || typeof localStorage === "undefined") return null;
@@ -298,6 +306,24 @@ var WorkRuntimeApi = class {
 			else localStorage.removeItem(this.tokenStorageKey);
 		} catch {}
 	}
+	readStoredScopes() {
+		if (!this.scopesStorageKey || typeof localStorage === "undefined") return null;
+		try {
+			const raw = localStorage.getItem(this.scopesStorageKey);
+			if (!raw) return null;
+			const parsed = JSON.parse(raw);
+			return Array.isArray(parsed) && parsed.every((s) => typeof s === "string") ? parsed : null;
+		} catch {
+			return null;
+		}
+	}
+	writeStoredScopes(scopes) {
+		if (!this.scopesStorageKey || typeof localStorage === "undefined") return;
+		try {
+			if (scopes && scopes.length > 0) localStorage.setItem(this.scopesStorageKey, JSON.stringify(scopes));
+			else localStorage.removeItem(this.scopesStorageKey);
+		} catch {}
+	}
 	async context() {
 		return (await this.transport.request({ type: "cohub.work.context" }, {
 			timeoutMs: 8e3,
@@ -310,6 +336,15 @@ var WorkRuntimeApi = class {
 			this.token = null;
 			this.writeStoredToken(null);
 		}
+		if (options?.forceRefresh && this.authorizedScopes && this.authorizedScopes.length > 0) {
+			const response = await this.transport.request({
+				type: "cohub.work.authorize",
+				scopes: this.authorizedScopes
+			}, { timeoutMs: 12e4 });
+			this.token = response?.token ?? null;
+			this.writeStoredToken(this.token);
+			return this.token;
+		}
 		const response = await this.transport.request({
 			type: "cohub.work.token",
 			forceRefresh: Boolean(options?.forceRefresh)
@@ -326,6 +361,10 @@ var WorkRuntimeApi = class {
 		}, { timeoutMs: 12e4 });
 		this.token = response?.token ?? null;
 		this.writeStoredToken(this.token);
+		if (this.token) {
+			this.authorizedScopes = input.scopes;
+			this.writeStoredScopes(input.scopes);
+		}
 		return Boolean(this.token);
 	}
 	async purchase(input) {
@@ -515,6 +554,414 @@ var CohubClient = class {
 };
 const createCohubClient = (options) => new CohubClient(options);
 //#endregion
+//#region src/work-grant-cache.ts
+const STORAGE_PREFIX = "cohub:work-grants";
+const CACHE_VERSION = 1;
+const MAX_AGE_MS = 336 * 60 * 60 * 1e3;
+function isBrowser() {
+	return typeof localStorage !== "undefined";
+}
+function storageKey(userUuid, workId) {
+	return `${STORAGE_PREFIX}:${encodeURIComponent(userUuid)}:${encodeURIComponent(workId)}:v${CACHE_VERSION}`;
+}
+function userPrefix(userUuid) {
+	return `${STORAGE_PREFIX}:${encodeURIComponent(userUuid)}:`;
+}
+function isPermissionArray(value) {
+	return Array.isArray(value) && value.every((v) => typeof v === "string");
+}
+function isCachedWorkGrant(value) {
+	if (!value || typeof value !== "object") return false;
+	const record = value;
+	return record.version === CACHE_VERSION && typeof record.userUuid === "string" && typeof record.workId === "string" && isPermissionArray(record.scopes) && typeof record.updatedAt === "number";
+}
+function readEntry(userUuid, workId) {
+	if (!isBrowser()) return null;
+	const key = storageKey(userUuid, workId);
+	try {
+		const raw = localStorage.getItem(key);
+		if (!raw) return null;
+		const parsed = JSON.parse(raw);
+		if (!isCachedWorkGrant(parsed) || parsed.userUuid !== userUuid || parsed.workId !== workId) {
+			localStorage.removeItem(key);
+			return null;
+		}
+		if (Date.now() - parsed.updatedAt > MAX_AGE_MS) {
+			localStorage.removeItem(key);
+			return null;
+		}
+		return parsed;
+	} catch {
+		try {
+			localStorage.removeItem(key);
+		} catch {}
+		return null;
+	}
+}
+/**
+* Returns true when the viewer has previously granted every requested scope
+* for this work, allowing a silent re-authorization.
+*/
+function hasGrantedWorkScopes(userUuid, workId, scopes) {
+	if (!userUuid || !workId || scopes.length === 0) return false;
+	const entry = readEntry(userUuid, workId);
+	if (!entry) return false;
+	const granted = new Set(entry.scopes);
+	return scopes.every((scope) => granted.has(scope));
+}
+/**
+* Records the granted scopes for a work, merged with any previously granted
+* scopes so a growing permission set stays covered.
+*/
+function setGrantedWorkScopes(userUuid, workId, scopes) {
+	if (!userUuid || !workId || scopes.length === 0) return;
+	const existing = readEntry(userUuid, workId);
+	const entry = {
+		version: CACHE_VERSION,
+		userUuid,
+		workId,
+		scopes: Array.from(new Set([...existing?.scopes ?? [], ...scopes])),
+		updatedAt: Date.now()
+	};
+	if (!isBrowser()) return;
+	try {
+		localStorage.setItem(storageKey(userUuid, workId), JSON.stringify(entry));
+	} catch {}
+}
+/**
+* Clears cached grants. Pass a workId to clear a single work, or omit it to
+* clear every cached grant for the user (used on sign-out).
+*/
+function clearGrantedWorkScopes(userUuid, workId) {
+	if (!isBrowser() || !userUuid) return;
+	try {
+		if (workId) {
+			localStorage.removeItem(storageKey(userUuid, workId));
+			return;
+		}
+		const prefix = userPrefix(userUuid);
+		for (let i = localStorage.length - 1; i >= 0; i -= 1) {
+			const key = localStorage.key(i);
+			if (key?.startsWith(prefix)) localStorage.removeItem(key);
+		}
+	} catch {}
+}
+//#endregion
+//#region src/work-bridge-core.ts
+function readTokenResponse(value) {
+	if (!value || typeof value !== "object") return null;
+	const token = value.token;
+	return typeof token === "string" && token ? token : null;
+}
+function clonePermissionScopes(scopes) {
+	return Array.from(scopes ?? []).filter((scope) => typeof scope === "string");
+}
+/**
+* Framework-agnostic work bridge host core — message handling, work session
+* token minting, authorization (with silent re-grant cache), and
+* purchase/checkout flow — without any rendering or reactive primitives.
+*
+* Both the Cohub iframe host (WorkSurface, Svelte) and the standalone broker
+* page compose this with their own transport-specific reply and auth
+* dependencies. External hosts (e.g. Neta-Studio in React) can do the same.
+*/
+function createWorkBridgeCore(config) {
+	const { work, reply, getCheckoutState, getAccessToken, getViewerUuid } = config;
+	const apiOrigin = config.apiOrigin;
+	const isBackground = config.isBackground ?? false;
+	const onStateChange = config.onStateChange;
+	let workToken = null;
+	const state = {
+		authOpen: false,
+		pendingAuth: null,
+		authError: null,
+		authSaving: false,
+		purchaseOpen: false,
+		pendingPurchase: null,
+		purchaseError: null,
+		purchaseSaving: false
+	};
+	function notify() {
+		onStateChange?.({ ...state });
+	}
+	const pendingPurchaseStorageKey = `cohub-work-purchase:${work.id}`;
+	async function isCurrentViewerWorkOwner() {
+		const viewerUuid = await getViewerUuid();
+		return Boolean(viewerUuid && viewerUuid === work.userUuid);
+	}
+	async function ensureBaseToken(forceRefresh = false) {
+		if (workToken && !forceRefresh) return workToken;
+		const userToken = await getAccessToken({ forceRefresh });
+		if (!userToken) {
+			await config.requestSignIn(typeof location !== "undefined" ? location.pathname : "/");
+			return null;
+		}
+		const response = await fetch(`${apiOrigin}/api/works/${work.id}/session`, {
+			method: "POST",
+			headers: { Authorization: `Bearer ${userToken}` }
+		});
+		if (!response.ok) throw new Error("Failed to create work session.");
+		const token = readTokenResponse(await response.json());
+		if (!token) throw new Error("Invalid work session response.");
+		workToken = token;
+		return workToken;
+	}
+	async function authorize(scopes) {
+		const userToken = await getAccessToken();
+		if (!userToken) {
+			await config.requestSignIn(typeof location !== "undefined" ? location.pathname : "/");
+			return null;
+		}
+		const response = await fetch(`${apiOrigin}/api/works/${work.id}/authorize`, {
+			method: "POST",
+			headers: {
+				Authorization: `Bearer ${userToken}`,
+				"Content-Type": "application/json"
+			},
+			body: JSON.stringify({ scopes })
+		});
+		if (!response.ok) throw new Error((await response.json().catch(() => null))?.message ?? "Authorization failed.");
+		const token = readTokenResponse(await response.json());
+		if (!token) throw new Error("Invalid work authorization response.");
+		workToken = token;
+		return workToken;
+	}
+	function writePendingPurchase(input) {
+		if (typeof sessionStorage === "undefined") return;
+		try {
+			sessionStorage.setItem(pendingPurchaseStorageKey, JSON.stringify({
+				...input,
+				at: Date.now()
+			}));
+		} catch {}
+	}
+	function readPendingPurchase() {
+		if (typeof sessionStorage === "undefined") return null;
+		try {
+			const raw = sessionStorage.getItem(pendingPurchaseStorageKey);
+			if (!raw) return null;
+			const parsed = JSON.parse(raw);
+			return typeof parsed.orderId === "string" && typeof parsed.productKey === "string" && typeof parsed.at === "number" ? {
+				orderId: parsed.orderId,
+				productKey: parsed.productKey,
+				at: parsed.at
+			} : null;
+		} catch {
+			return null;
+		}
+	}
+	function clearPendingPurchase() {
+		if (typeof sessionStorage === "undefined") return;
+		try {
+			sessionStorage.removeItem(pendingPurchaseStorageKey);
+		} catch {}
+	}
+	async function createPurchase(productKey) {
+		const userToken = await getAccessToken();
+		if (!userToken) {
+			await config.requestSignIn(typeof location !== "undefined" ? location.pathname + location.search + location.hash : "/");
+			return null;
+		}
+		const response = await fetch(`${apiOrigin}/api/works/${work.id}/commerce/purchase`, {
+			method: "POST",
+			headers: {
+				Authorization: `Bearer ${userToken}`,
+				"Content-Type": "application/json"
+			},
+			body: JSON.stringify({ productKey })
+		});
+		if (!response.ok) throw new Error((await response.json().catch(() => null))?.message ?? "Purchase failed.");
+		return (await response.json()).checkout ?? null;
+	}
+	async function handleMessage(event) {
+		const data = event.data;
+		if (!data?.requestId) return;
+		try {
+			if (data.type === "cohub.work.context") {
+				const workScopes = clonePermissionScopes(work.workScopes);
+				reply(data.requestId, {
+					type: "cohub.work.context.result",
+					context: {
+						work: {
+							id: work.id,
+							slug: work.slug,
+							url: typeof location !== "undefined" ? location.href : ""
+						},
+						space: { id: work.spaceId },
+						permissions: {
+							scopes: workScopes,
+							workScopes,
+							viewerScopes: []
+						}
+					}
+				});
+			}
+			if (data.type === "cohub.work.token") {
+				const token = await ensureBaseToken(Boolean(data.forceRefresh));
+				reply(data.requestId, {
+					type: "cohub.work.token.result",
+					token
+				});
+			}
+			if (data.type === "cohub.work.checkout-state") {
+				const pending = readPendingPurchase();
+				const checkoutState = getCheckoutState();
+				const orderId = checkoutState.orderId ?? pending?.orderId ?? null;
+				if (checkoutState.status && checkoutState.orderId) clearPendingPurchase();
+				reply(data.requestId, {
+					type: "cohub.work.checkout-state.result",
+					status: checkoutState.status,
+					orderId
+				});
+			}
+			if (data.type === "cohub.work.purchase") {
+				const productKey = typeof data.productKey === "string" ? data.productKey.trim() : "";
+				if (!productKey) {
+					reply(data.requestId, {
+						type: "cohub.work.error",
+						message: "Product key is required."
+					});
+					return;
+				}
+				state.pendingPurchase = {
+					requestId: data.requestId,
+					productKey
+				};
+				state.purchaseError = null;
+				state.purchaseOpen = true;
+				notify();
+			}
+			if (data.type === "cohub.work.authorize") {
+				const allowedViewerScopes = clonePermissionScopes(work.allowedViewerScopes);
+				const scopes = clonePermissionScopes(data.scopes).filter((scope) => allowedViewerScopes.includes(scope));
+				if (scopes.length === 0) {
+					reply(data.requestId, {
+						type: "cohub.work.error",
+						message: "No allowed scopes requested."
+					});
+					return;
+				}
+				if (isBackground && await isCurrentViewerWorkOwner()) {
+					const token = await authorize(scopes);
+					reply(data.requestId, {
+						type: "cohub.work.authorize.result",
+						token
+					});
+					return;
+				}
+				const viewerUuid = await getViewerUuid();
+				if (viewerUuid && hasGrantedWorkScopes(viewerUuid, work.id, scopes)) try {
+					const token = await authorize(scopes);
+					reply(data.requestId, {
+						type: "cohub.work.authorize.result",
+						token
+					});
+					return;
+				} catch {
+					clearGrantedWorkScopes(viewerUuid, work.id);
+				}
+				state.pendingAuth = {
+					requestId: data.requestId,
+					scopes,
+					reason: data.reason
+				};
+				state.authError = null;
+				state.authOpen = true;
+				notify();
+			}
+		} catch (error) {
+			reply(data.requestId, {
+				type: "cohub.work.error",
+				message: error instanceof Error ? error.message : "Request failed."
+			});
+		}
+	}
+	function cancelAuth() {
+		if (state.authSaving) return;
+		if (!state.pendingAuth) return;
+		reply(state.pendingAuth.requestId, {
+			type: "cohub.work.authorize.result",
+			token: null
+		});
+		state.authOpen = false;
+		state.pendingAuth = null;
+		state.authError = null;
+		state.authSaving = false;
+		notify();
+	}
+	function cancelPurchase() {
+		if (state.purchaseSaving) return;
+		if (!state.pendingPurchase) return;
+		reply(state.pendingPurchase.requestId, {
+			type: "cohub.work.purchase.result",
+			checkout: null
+		});
+		state.purchaseOpen = false;
+		state.purchaseError = null;
+		state.pendingPurchase = null;
+		state.purchaseSaving = false;
+		notify();
+	}
+	async function confirmPurchase() {
+		if (!state.pendingPurchase || state.purchaseSaving) return;
+		state.purchaseSaving = true;
+		state.purchaseError = null;
+		notify();
+		try {
+			const checkout = await createPurchase(state.pendingPurchase.productKey);
+			reply(state.pendingPurchase.requestId, {
+				type: "cohub.work.purchase.result",
+				checkout
+			});
+			if (checkout && typeof checkout === "object") {
+				const next = checkout;
+				if (typeof next.orderId === "string" && typeof next.productKey === "string") writePendingPurchase({
+					orderId: next.orderId,
+					productKey: next.productKey
+				});
+				const url = next.checkoutUrl;
+				if (next.checkoutUsable === true && typeof url === "string" && url) window.location.href = url;
+			}
+			state.purchaseOpen = false;
+			state.pendingPurchase = null;
+		} catch (error) {
+			state.purchaseError = error instanceof Error ? error.message : "Purchase failed.";
+		} finally {
+			state.purchaseSaving = false;
+			notify();
+		}
+	}
+	async function confirmAuth() {
+		if (!state.pendingAuth || state.authSaving) return;
+		state.authError = null;
+		state.authSaving = true;
+		notify();
+		try {
+			const token = await authorize(state.pendingAuth.scopes);
+			setGrantedWorkScopes(await getViewerUuid(), work.id, state.pendingAuth.scopes);
+			reply(state.pendingAuth.requestId, {
+				type: "cohub.work.authorize.result",
+				token
+			});
+			state.authOpen = false;
+			state.pendingAuth = null;
+		} catch (error) {
+			state.authError = error instanceof Error ? error.message : "Authorization failed.";
+		} finally {
+			state.authSaving = false;
+			notify();
+		}
+	}
+	return {
+		getState: () => ({ ...state }),
+		handleMessage,
+		confirmAuth,
+		cancelAuth,
+		confirmPurchase,
+		cancelPurchase
+	};
+}
+//#endregion
 //#region src/http-error.ts
 function isHttpErrorCode(error, code) {
 	return error instanceof HttpError && error.code === code;
@@ -751,4 +1198,4 @@ function filterGenerationDeclarationsByPolicy(declarations, policy) {
 	});
 }
 //#endregion
-export { BillingApi, COHUB_ENVIRONMENTS, CohubClient, CohubHttpClient, GenerationPolicyError, HttpError, ParentBridgeTransport, PopupBrokerTransport, ReferencesApi, SessionGenerationStreamClient, SessionPatchReducer, UsersApi, VoiceApi, VoiceInputClient, WebsocketClient, WorkCommerceApi, WorkRuntimeApi, WorksApi, assertGenerationRequestAllowedByPolicy, createCohubClient, createHttpClient, createSessionGenerationStreamClient, createSessionPatchReducer, createVoiceInputClient, createWebsocketClient, createWorkRuntime, decodeGenerationPolicy, encodeGenerationPolicy, filterGenerationDeclarationsByPolicy, findGenerationModelPolicy, getAllowedGenerationModelIds, isHttpErrorCode, normalizeBaseUrl, normalizeGenerationPolicy, normalizeVoiceInputWebsocketUrl, normalizeWebsocketUrl, parseAssistantMessageCommit, parseGenerationPolicyFromEnv, resolveApiBaseUrl, resolveCohubEnvironment, resolveVoiceInputWebsocketUrl, resolveWebsocketUrl, resolveWorkTransport };
+export { BillingApi, COHUB_ENVIRONMENTS, CohubClient, CohubHttpClient, GenerationPolicyError, HttpError, ParentBridgeTransport, PopupBrokerTransport, ReferencesApi, SessionGenerationStreamClient, SessionPatchReducer, UsersApi, VoiceApi, VoiceInputClient, WebsocketClient, WorkCommerceApi, WorkRuntimeApi, WorksApi, assertGenerationRequestAllowedByPolicy, clearGrantedWorkScopes, createCohubClient, createHttpClient, createSessionGenerationStreamClient, createSessionPatchReducer, createVoiceInputClient, createWebsocketClient, createWorkBridgeCore, createWorkRuntime, decodeGenerationPolicy, encodeGenerationPolicy, filterGenerationDeclarationsByPolicy, findGenerationModelPolicy, getAllowedGenerationModelIds, hasGrantedWorkScopes, isHttpErrorCode, normalizeBaseUrl, normalizeGenerationPolicy, normalizeVoiceInputWebsocketUrl, normalizeWebsocketUrl, parseAssistantMessageCommit, parseGenerationPolicyFromEnv, resolveApiBaseUrl, resolveCohubEnvironment, resolveVoiceInputWebsocketUrl, resolveWebsocketUrl, resolveWorkTransport, setGrantedWorkScopes };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neta-art/cohub",
-  "version": "2.4.0",
+  "version": "2.6.0",
   "description": "Cohub SDK for spaces, sessions, checkpoints, and realtime agent collaboration.",
   "license": "UNLICENSED",
   "private": false,