@neta-art/cohub 2.5.0 → 2.6.0

package/dist/chunks/http.d.ts

@@ -1474,9 +1474,16 @@ declare class WorkRuntimeApi {
   private token;
   private readonly transport;
   private readonly tokenStorageKey;
+  private readonly scopesStorageKey;
+  /** Scopes previously granted via requestAuthorization, retained so token
+   * refreshes can re-authorize (preserving viewerScopes) instead of falling
+   * back to a base session token that only carries workScopes. */
+  private authorizedScopes;
   constructor(transport?: WorkRuntimeTransport, workId?: string);
   private readStoredToken;
   private writeStoredToken;
+  private readStoredScopes;
+  private writeStoredScopes;
   context(): Promise<WorkRuntimeContext | null>;
   getAccessToken(options?: {
     forceRefresh?: boolean;
@@ -2017,6 +2024,10 @@ declare class SpaceFilesApi {
    * SDK can attach authorization headers.
    */
   getDownloadUrl(path: string): string;
+  createPreviewSession(customFetch?: Fetch): Promise<{
+    token: string;
+    expiresIn: number;
+  }>;
   download(path: string, customFetch?: Fetch): Promise<{
     blob: Blob;
     filename: string;

package/dist/chunks/http.js

@@ -1471,6 +1471,12 @@ var SpaceFilesApi = class {
 		const params = new URLSearchParams({ path });
 		return `/api/spaces/${this.spaceId}/fs/download?${params.toString()}`;
 	}
+	createPreviewSession(customFetch) {
+		return this.transport.request(`/api/spaces/${this.spaceId}/preview-session`, {
+			method: "POST",
+			fetch: customFetch
+		});
+	}
 	async download(path, customFetch) {
 		const params = new URLSearchParams({ path });
 		const raw = await this.transport.raw(`/api/spaces/${this.spaceId}/fs/download?${params.toString()}`, { fetch: customFetch });

package/dist/index.js

@@ -274,14 +274,22 @@ var PopupBrokerTransport = class {
 	}
 };
 const TOKEN_STORAGE_PREFIX = "cohub:work-token";
+const AUTHORIZED_SCOPES_STORAGE_PREFIX = "cohub:work-auth-scopes";
 var WorkRuntimeApi = class {
 	token = null;
 	transport;
 	tokenStorageKey;
+	scopesStorageKey;
+	/** Scopes previously granted via requestAuthorization, retained so token
+	* refreshes can re-authorize (preserving viewerScopes) instead of falling
+	* back to a base session token that only carries workScopes. */
+	authorizedScopes = null;
 	constructor(transport = new ParentBridgeTransport(), workId) {
 		this.transport = transport;
 		this.tokenStorageKey = workId ? `${TOKEN_STORAGE_PREFIX}:${workId}` : null;
+		this.scopesStorageKey = workId ? `${AUTHORIZED_SCOPES_STORAGE_PREFIX}:${workId}` : null;
 		this.token = this.readStoredToken();
+		this.authorizedScopes = this.readStoredScopes();
 	}
 	readStoredToken() {
 		if (!this.tokenStorageKey || typeof localStorage === "undefined") return null;
@@ -298,6 +306,24 @@ var WorkRuntimeApi = class {
 			else localStorage.removeItem(this.tokenStorageKey);
 		} catch {}
 	}
+	readStoredScopes() {
+		if (!this.scopesStorageKey || typeof localStorage === "undefined") return null;
+		try {
+			const raw = localStorage.getItem(this.scopesStorageKey);
+			if (!raw) return null;
+			const parsed = JSON.parse(raw);
+			return Array.isArray(parsed) && parsed.every((s) => typeof s === "string") ? parsed : null;
+		} catch {
+			return null;
+		}
+	}
+	writeStoredScopes(scopes) {
+		if (!this.scopesStorageKey || typeof localStorage === "undefined") return;
+		try {
+			if (scopes && scopes.length > 0) localStorage.setItem(this.scopesStorageKey, JSON.stringify(scopes));
+			else localStorage.removeItem(this.scopesStorageKey);
+		} catch {}
+	}
 	async context() {
 		return (await this.transport.request({ type: "cohub.work.context" }, {
 			timeoutMs: 8e3,
@@ -310,6 +336,15 @@ var WorkRuntimeApi = class {
 			this.token = null;
 			this.writeStoredToken(null);
 		}
+		if (options?.forceRefresh && this.authorizedScopes && this.authorizedScopes.length > 0) {
+			const response = await this.transport.request({
+				type: "cohub.work.authorize",
+				scopes: this.authorizedScopes
+			}, { timeoutMs: 12e4 });
+			this.token = response?.token ?? null;
+			this.writeStoredToken(this.token);
+			return this.token;
+		}
 		const response = await this.transport.request({
 			type: "cohub.work.token",
 			forceRefresh: Boolean(options?.forceRefresh)
@@ -326,6 +361,10 @@ var WorkRuntimeApi = class {
 		}, { timeoutMs: 12e4 });
 		this.token = response?.token ?? null;
 		this.writeStoredToken(this.token);
+		if (this.token) {
+			this.authorizedScopes = input.scopes;
+			this.writeStoredScopes(input.scopes);
+		}
 		return Boolean(this.token);
 	}
 	async purchase(input) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neta-art/cohub",
-  "version": "2.5.0",
+  "version": "2.6.0",
   "description": "Cohub SDK for spaces, sessions, checkpoints, and realtime agent collaboration.",
   "license": "UNLICENSED",
   "private": false,