@neta-art/cohub 3.2.0 → 4.0.1

package/dist/protocol/dist/board-document.d.ts

@@ -110,38 +110,6 @@ declare const BoardTextItemSchema: z.ZodObject<{
   color: z.ZodDefault<z.ZodString>;
   fontSize: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strip>;
-declare const BoardNoteItemSchema: z.ZodObject<{
-  id: z.ZodString;
-  frame: z.ZodObject<{
-    x: z.ZodNumber;
-    y: z.ZodNumber;
-    width: z.ZodNumber;
-    height: z.ZodNumber;
-    rotation: z.ZodDefault<z.ZodNumber>;
-  }, z.core.$strip>;
-  locked: z.ZodOptional<z.ZodBoolean>;
-  style: z.ZodOptional<z.ZodObject<{
-    variant: z.ZodDefault<z.ZodString>;
-    theme: z.ZodOptional<z.ZodString>;
-    accentColor: z.ZodOptional<z.ZodString>;
-    size: z.ZodDefault<z.ZodEnum<{
-      lg: "lg";
-      md: "md";
-      sm: "sm";
-    }>>;
-    emphasis: z.ZodDefault<z.ZodEnum<{
-      epic: "epic";
-      legendary: "legendary";
-      normal: "normal";
-      rare: "rare";
-    }>>;
-    effects: z.ZodDefault<z.ZodArray<z.ZodString>>;
-  }, z.core.$strip>>;
-  metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-  type: z.ZodLiteral<"note">;
-  text: z.ZodDefault<z.ZodString>;
-  color: z.ZodDefault<z.ZodString>;
-}, z.core.$strip>;
 declare const BoardGeoItemSchema: z.ZodObject<{
   id: z.ZodString;
   frame: z.ZodObject<{
@@ -490,7 +458,7 @@ declare const BoardFileItemSchema: z.ZodObject<{
  * authored by newer clients round-trip losslessly — data is never dropped or
  * silently downgraded just because this client predates a shape type.
  */
-declare const KNOWN_BOARD_ITEM_TYPES: readonly ["image", "video", "file", "text", "note", "geo", "draw", "arrow", "frame"];
+declare const KNOWN_BOARD_ITEM_TYPES: readonly ["image", "video", "file", "text", "geo", "draw", "arrow", "frame"];
 type KnownBoardItemType = (typeof KNOWN_BOARD_ITEM_TYPES)[number];
 /**
  * A forward-compatible carrier for shape types this client does not recognise.
@@ -637,28 +605,6 @@ declare const BoardItemSchema: z.ZodPipe<z.ZodAny, z.ZodTransform<BoardUnknownIt
   text: string;
   color: string;
   fontSize: number;
-} | {
-  id: string;
-  frame: {
-    x: number;
-    y: number;
-    width: number;
-    height: number;
-    rotation: number;
-  };
-  locked?: boolean | undefined;
-  style?: {
-    variant: string;
-    theme?: string | undefined;
-    accentColor?: string | undefined;
-    size: "lg" | "md" | "sm";
-    emphasis: "epic" | "legendary" | "normal" | "rare";
-    effects: string[];
-  } | undefined;
-  metadata?: Record<string, unknown> | undefined;
-  type: "note";
-  text: string;
-  color: string;
 } | {
   id: string;
   frame: {
@@ -948,28 +894,6 @@ declare const BoardDocumentSchema: z.ZodObject<{
     text: string;
     color: string;
     fontSize: number;
-  } | {
-    id: string;
-    frame: {
-      x: number;
-      y: number;
-      width: number;
-      height: number;
-      rotation: number;
-    };
-    locked?: boolean | undefined;
-    style?: {
-      variant: string;
-      theme?: string | undefined;
-      accentColor?: string | undefined;
-      size: "lg" | "md" | "sm";
-      emphasis: "epic" | "legendary" | "normal" | "rare";
-      effects: string[];
-    } | undefined;
-    metadata?: Record<string, unknown> | undefined;
-    type: "note";
-    text: string;
-    color: string;
   } | {
     id: string;
     frame: {
@@ -1100,7 +1024,6 @@ type BoardItemStyle = z.infer<typeof BoardItemStyleSchema>;
 type SpaceFileRef = z.infer<typeof SpaceFileRefSchema>;
 type BoardMediaSnapshot = z.infer<typeof BoardMediaSnapshotSchema>;
 type BoardTextItem = z.infer<typeof BoardTextItemSchema>;
-type BoardNoteItem = z.infer<typeof BoardNoteItemSchema>;
 type BoardGeoItem = z.infer<typeof BoardGeoItemSchema>;
 type DrawPoint = z.infer<typeof DrawPointSchema>;
 type BoardDrawItem = z.infer<typeof BoardDrawItemSchema>;
@@ -1112,7 +1035,7 @@ type BoardVideoItem = z.infer<typeof BoardVideoItemSchema>;
 type BoardFileSnapshot = z.infer<typeof BoardFileSnapshotSchema>;
 type BoardFileItem = z.infer<typeof BoardFileItemSchema>;
 /** Known (natively handled) item variants. */
-type BoardKnownItem = BoardImageItem | BoardVideoItem | BoardFileItem | BoardTextItem | BoardNoteItem | BoardGeoItem | BoardDrawItem | BoardArrowItem | BoardFrameItem;
+type BoardKnownItem = BoardImageItem | BoardVideoItem | BoardFileItem | BoardTextItem | BoardGeoItem | BoardDrawItem | BoardArrowItem | BoardFrameItem;
 /** Any item, including forward-compatible unknown types. */
 type BoardItem = BoardKnownItem | BoardUnknownItem;
 type BoardDocument = z.infer<typeof BoardDocumentSchema>;
@@ -1121,4 +1044,4 @@ declare function isMediaItem(item: BoardItem): item is BoardImageItem | BoardVid
 /** Whether an item references a workspace file (image, video or file card). */
 declare function isFileBackedItem(item: BoardItem): item is BoardImageItem | BoardVideoItem | BoardFileItem;
 //#endregion
-export { ArrowEndpoint, ArrowEndpointSchema, BOARD_DOCUMENT_KIND, BOARD_EXTENSION, BoardAppearance, BoardAppearanceSchema, BoardArrowItem, BoardArrowItemSchema, BoardDocument, BoardDocumentSchema, BoardDrawItem, BoardDrawItemSchema, BoardFileItem, BoardFileItemSchema, BoardFileSnapshot, BoardFileSnapshotSchema, BoardFrame, BoardFrameItem, BoardFrameItemSchema, BoardFrameSchema, BoardGeoItem, BoardGeoItemSchema, BoardImageItem, BoardImageItemSchema, BoardItem, BoardItemSchema, BoardItemStyle, BoardItemStyleSchema, BoardKnownItem, BoardMediaSnapshot, BoardMediaSnapshotSchema, BoardNoteItem, BoardNoteItemSchema, BoardTextItem, BoardTextItemSchema, BoardUnknownItem, BoardVideoItem, BoardVideoItemSchema, BoardViewport, BoardViewportSchema, DrawPoint, DrawPointSchema, KNOWN_BOARD_ITEM_TYPES, KnownBoardItemType, SpaceFileRef, SpaceFileRefSchema, UNKNOWN_BOARD_ITEM_TYPE, isFileBackedItem, isMediaItem, isUnknownItem, parseBoardItemLoose, unknownRealType };
+export { ArrowEndpoint, ArrowEndpointSchema, BOARD_DOCUMENT_KIND, BOARD_EXTENSION, BoardAppearance, BoardAppearanceSchema, BoardArrowItem, BoardArrowItemSchema, BoardDocument, BoardDocumentSchema, BoardDrawItem, BoardDrawItemSchema, BoardFileItem, BoardFileItemSchema, BoardFileSnapshot, BoardFileSnapshotSchema, BoardFrame, BoardFrameItem, BoardFrameItemSchema, BoardFrameSchema, BoardGeoItem, BoardGeoItemSchema, BoardImageItem, BoardImageItemSchema, BoardItem, BoardItemSchema, BoardItemStyle, BoardItemStyleSchema, BoardKnownItem, BoardMediaSnapshot, BoardMediaSnapshotSchema, BoardTextItem, BoardTextItemSchema, BoardUnknownItem, BoardVideoItem, BoardVideoItemSchema, BoardViewport, BoardViewportSchema, DrawPoint, DrawPointSchema, KNOWN_BOARD_ITEM_TYPES, KnownBoardItemType, SpaceFileRef, SpaceFileRefSchema, UNKNOWN_BOARD_ITEM_TYPE, isFileBackedItem, isMediaItem, isUnknownItem, parseBoardItemLoose, unknownRealType };

package/dist/protocol/dist/board-document.js

@@ -1,4 +1,4 @@
-import "./board-constants.js";
+import { BOARD_ARROW_STROKE_SIZE } from "./board-constants.js";
 import { BOARD_DOCUMENT_KIND, BOARD_EXTENSION } from "./board.js";
 import { z } from "zod";
 //#region ../protocol/dist/board-document.js
@@ -95,12 +95,7 @@ const BoardTextItemSchema = BoardItemBaseSchema.extend({
 	type: z.literal("text"),
 	text: z.string().default(""),
 	color: z.string().min(1).default("neutral"),
-	fontSize: z.number().finite().min(2).max(512).default(18)
-});
-const BoardNoteItemSchema = BoardItemBaseSchema.extend({
-	type: z.literal("note"),
-	text: z.string().default(""),
-	color: z.string().min(1).default("amber")
+	fontSize: z.number().finite().min(2).max(512).default(24)
 });
 const BoardGeoItemSchema = BoardItemBaseSchema.extend({
 	type: z.literal("geo"),
@@ -139,7 +134,7 @@ const BoardArrowItemSchema = BoardItemBaseSchema.extend({
 	end: ArrowEndpointSchema,
 	bend: z.number().finite().default(0),
 	color: z.string().min(1).default("brand"),
-	size: z.number().finite().positive().default(2.5),
+	size: z.number().finite().positive().default(BOARD_ARROW_STROKE_SIZE),
 	arrowStart: z.boolean().default(false),
 	arrowEnd: z.boolean().default(true),
 	label: z.string().default("")
@@ -215,7 +210,6 @@ const KNOWN_BOARD_ITEM_TYPES = [
 	"video",
 	"file",
 	"text",
-	"note",
 	"geo",
 	"draw",
 	"arrow",
@@ -258,10 +252,6 @@ function parseBoardItemLoose(raw) {
 			const parsed = BoardTextItemSchema.safeParse(raw);
 			return parsed.success ? parsed.data : makeUnknownItem(raw);
 		}
-		case "note": {
-			const parsed = BoardNoteItemSchema.safeParse(raw);
-			return parsed.success ? parsed.data : makeUnknownItem(raw);
-		}
 		case "geo": {
 			const parsed = BoardGeoItemSchema.safeParse(raw);
 			return parsed.success ? parsed.data : makeUnknownItem(raw);
@@ -328,4 +318,4 @@ function isFileBackedItem(item) {
 	return item.type === "image" || item.type === "video" || item.type === "file";
 }
 //#endregion
-export { ArrowEndpointSchema, BOARD_DOCUMENT_KIND, BOARD_EXTENSION, BoardAppearanceSchema, BoardArrowItemSchema, BoardDocumentSchema, BoardDrawItemSchema, BoardFileItemSchema, BoardFileSnapshotSchema, BoardFrameItemSchema, BoardFrameSchema, BoardGeoItemSchema, BoardImageItemSchema, BoardItemSchema, BoardItemStyleSchema, BoardMediaSnapshotSchema, BoardNoteItemSchema, BoardTextItemSchema, BoardVideoItemSchema, BoardViewportSchema, DrawPointSchema, KNOWN_BOARD_ITEM_TYPES, SpaceFileRefSchema, UNKNOWN_BOARD_ITEM_TYPE, isFileBackedItem, isMediaItem, isUnknownItem, parseBoardItemLoose, unknownRealType };
+export { ArrowEndpointSchema, BOARD_DOCUMENT_KIND, BOARD_EXTENSION, BoardAppearanceSchema, BoardArrowItemSchema, BoardDocumentSchema, BoardDrawItemSchema, BoardFileItemSchema, BoardFileSnapshotSchema, BoardFrameItemSchema, BoardFrameSchema, BoardGeoItemSchema, BoardImageItemSchema, BoardItemSchema, BoardItemStyleSchema, BoardMediaSnapshotSchema, BoardTextItemSchema, BoardVideoItemSchema, BoardViewportSchema, DrawPointSchema, KNOWN_BOARD_ITEM_TYPES, SpaceFileRefSchema, UNKNOWN_BOARD_ITEM_TYPE, isFileBackedItem, isMediaItem, isUnknownItem, parseBoardItemLoose, unknownRealType };

package/dist/protocol/dist/realtime/board-awareness.js

@@ -1,3 +1,4 @@
+import { BOARD_ARROW_STROKE_SIZE } from "../board-constants.js";
 import { z } from "zod";
 //#region ../protocol/dist/realtime/board-awareness.js
 const idSchema = z.string().min(1).max(160);
@@ -66,7 +67,8 @@ const BoardAwarenessGestureSchema = z.discriminatedUnion("kind", [
 		nodeId: idSchema,
 		start: BoardAwarenessPointSchema,
 		current: BoardAwarenessPointSchema,
-		color: z.string().min(1).max(64)
+		color: z.string().min(1).max(64),
+		size: finiteSchema.positive().max(256).default(BOARD_ARROW_STROKE_SIZE)
 	}),
 	z.object({
 		kind: z.literal("box"),

package/docs/work-runtime-guide.md

@@ -205,7 +205,8 @@ result needs `taskrun.view` (a work scope).
 |---|---|---|---|
 | Read space config | `space.get()` / `space.getConfig()` | `space.view` | work |
 | List models | `client.models.list()` / `listMultimodal()` | *(none — just authenticated)* | — |
-| Send a prompt | `space.prompt({ content, ... })` | `session.prompt.fullaccess` (or `.readonly`) | viewer |
+| Send a prompt (full) | `space.prompt({ accessMode: "full_access", content, ... })` | `session.prompt.fullaccess` | viewer |
+| Send a prompt (read-only) | `space.prompt({ accessMode: "read_only", content, ... })` | `session.prompt.readonly` | viewer |
 | Read turn result | `session.turns.get(turnId)` | `session.view` | work |
 | Stream generation | `session.subscribeGeneration({ state, finalized })` | `session.view` | work |
 | Read file tree | `space.files.tree()` | `file.view` | work |
@@ -385,14 +386,23 @@ Assume `client` and `space` are already initialized per [§4](#4-initialization-
 ### LLM chat (`space.prompt` + `subscribeGeneration`)
 
 **Scopes:** viewer `session.prompt.fullaccess` (to send) + work `session.view` (to read/stream).
+For a read-only prompt (no side effects), use viewer `session.prompt.readonly`
+instead — but you **must** pass `accessMode: "read_only"` in the call (see the
+read-only recipe below).
+
+> **`accessMode` defaults to `full_access`.** If you omit it, the backend
+treats the call as full-access and requires `session.prompt.fullaccess`. This
+is the #1 cause of "I requested `session.prompt.readonly` but still got 403".
+Always set `accessMode` explicitly to match the scope you requested.
 
 `space.prompt()` is **asynchronous** — it returns immediately with a turn
 whose `assistantText` is `null`. You must either stream the reply via
 `subscribeGeneration` or poll `turns.get()`.
 
 ```js
-// Send a prompt (creates or continues a session)
+// Send a prompt (creates or continues a session) — full access
 const result = await space.prompt({
+  accessMode: "full_access", // default; needs session.prompt.fullaccess
   content: [{ type: "text", text: "Describe a shiba inu on Mars." }],
   sessionId: null,        // null → creates a new session; pass an id to continue
   model: "gpt-5.5",       // optional; omit for default
@@ -449,6 +459,58 @@ const reply = turn.assistantText;
 ignore it, your code silently degrades to polling — which will also 403.
 Surface the error so you can diagnose the missing scope.
 
+#### Read-only prompt (`accessMode: "read_only"`)
+
+Use this when your Work only needs to **generate** a reply without persisting
+any side effects (no new session is written, no turn stored on the space's
+history). It requires the lighter viewer scope `session.prompt.readonly`
+instead of `session.prompt.fullaccess`.
+
+The critical detail: you **must** pass `accessMode: "read_only"` explicitly
+in the `space.prompt()` call. The scope you request via `auth.request` and
+the `accessMode` you send must match — the backend picks the permission check
+based on `accessMode`, defaulting to `full_access` when omitted.
+
+```js
+// 1. Request ONLY the read-only scope from a user gesture
+await client.auth.request({
+  scopes: ["session.prompt.readonly"],
+  reason: "Generate a one-off character reply (read-only).",
+});
+
+// 2. Send the prompt with accessMode matching the granted scope
+const result = await space.prompt({
+  accessMode: "read_only",   // ← required; omitting it → full_access → 403
+  sessionId: null,           // read-only prompts use a throwaway session
+  content: [{ type: "text", text: prompt }],
+});
+const sessionId = result.session.id;
+const turnId = result.turn.id;
+
+// 3. Read the reply — still needs the work scope: session.view
+const stop = space.session(sessionId).subscribeGeneration({
+  finalized: (event) => {
+    const reply = event.turn.assistantText
+      ?? (event.turn.assistantContent ?? [])
+          .filter(b => b.type === "text").map(b => b.text).join("");
+    console.log("reply:", reply);
+    stop();
+  },
+  error: (event) => console.error("stream error:", event),
+});
+```
+
+Publish the Work with:
+- workScopes: `["space.view", "session.view"]` (still needed to read the reply)
+- allowedViewerScopes: `["session.prompt.readonly"]`
+
+> **Scope/accessMode mismatch → 403.** Requesting `session.prompt.readonly`
+but calling `space.prompt({ content })` (no `accessMode`) fails because the
+backend defaults to `full_access` and checks `session.prompt.fullaccess`.
+Symmetrically, requesting `session.prompt.fullaccess` while passing
+`accessMode: "read_only"` also works only if `session.prompt.readonly` is
+additionally granted — otherwise 403. Always keep them in sync.
+
 ### Image / media generation (`generations.createAndWait`)
 
 **Scopes:** viewer `generation.create` (to create) + work `taskrun.view` (to poll).
@@ -895,6 +957,10 @@ Before publishing your Work, verify each item:
   (for file reads). Missing any of these → 403 on reads.
 - [ ] **Viewer scopes include all action operations**: `session.prompt.fullaccess`
   (or `.readonly`) for prompts, `generation.create` for generation.
+- [ ] **`session.prompt.*` scope matches `space.prompt({ accessMode })`.**
+  Omitting `accessMode` defaults to `full_access`, so requesting only
+  `session.prompt.readonly` and then calling `space.prompt({ content })` → 403.
+  Set `accessMode: "read_only"` explicitly when using the readonly scope.
 - [ ] **`session.prompt.fullaccess` does NOT include `session.view`** — they
   are separate. Sending a prompt succeeds but reading the reply 403s without
   `session.view`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neta-art/cohub",
-  "version": "3.2.0",
+  "version": "4.0.1",
   "description": "Cohub SDK for spaces, sessions, boards, and realtime agent collaboration.",
   "license": "Apache-2.0",
   "private": false,
@@ -71,6 +71,7 @@
     "NOTICE"
   ],
   "dependencies": {
+    "perfect-freehand": "1.2.3",
     "zod": "^4.4.3"
   },
   "devDependencies": {
@@ -99,7 +100,7 @@
     "build": "tsdown",
     "lint": "biome lint .",
     "lint:fix": "biome lint --write .",
-    "test": "tsx --test 'src/**/*.test.ts' 'tests/**/*.test.ts'",
+    "test": "node ../../scripts/test/run.mjs 'src/**/*.test.ts' 'tests/**/*.test.ts'",
     "typecheck": "tsc -p tsconfig.json --noEmit"
   }
 }

package/dist/board/render/renderers/note-card-renderer.d.ts

@@ -1,5 +0,0 @@
-import { BoardCardRenderer } from "./board-renderer-registry.js";
-//#region src/board/render/renderers/note-card-renderer.d.ts
-declare const noteCardRenderer: BoardCardRenderer;
-//#endregion
-export { noteCardRenderer };

package/dist/board/render/renderers/note-card-renderer.js

@@ -1,112 +0,0 @@
-import { BOARD_FONT_STACK } from "../../../protocol/dist/board-constants.js";
-import { pickBoardColor } from "../../core/palette.js";
-import { syncTextResolution, syncTextWrapWidth, textResolutionForZoom } from "../text-resolution.js";
-import { drawFarPlate } from "./far-plate.js";
-import { positionShell } from "./base-card-renderer.js";
-import { Container, Graphics, Text } from "pixi.js";
-//#region src/board/render/renderers/note-card-renderer.ts
-const RADIUS = 8;
-const PADDING = 12;
-const partsByContainer = /* @__PURE__ */ new WeakMap();
-function sync(container, item, context) {
-	const parts = partsByContainer.get(container);
-	if (!parts) return;
-	positionShell(parts.root, item);
-	const { width, height } = item.frame;
-	const selected = context.selectedIds.has(item.id);
-	const hovered = context.hoveredId === item.id;
-	const color = pickBoardColor(context.colors, item.color, context.colorScheme);
-	syncTextResolution(parts.body, parts, context.zoom);
-	const resizing = context.resizingIds.has(item.id);
-	const visualSig = [
-		width,
-		height,
-		selected,
-		hovered,
-		color.fill,
-		color.stroke,
-		context.palette.surface,
-		context.palette.muted,
-		context.palette.border
-	].join("|");
-	if (visualSig !== parts.visualSig) {
-		parts.visualSig = visualSig;
-		parts.background.clear();
-		parts.background.roundRect(0, 0, width, height, RADIUS).fill({
-			color: color.fill,
-			alpha: .16
-		}).roundRect(0, 0, width, height, RADIUS).fill({
-			color: context.palette.surface,
-			alpha: .6
-		}).rect(1, 1, width - 2, 4).fill({
-			color: color.stroke,
-			alpha: .95
-		});
-		parts.background.roundRect(0, 0, width, height, RADIUS).stroke({
-			color: selected ? color.stroke : hovered ? context.palette.muted : context.palette.border,
-			width: selected ? 2 : 1,
-			alpha: selected ? .95 : .8
-		});
-	}
-	const textSig = [item.text, color.label].join("|");
-	if (textSig !== parts.textSig) {
-		parts.textSig = textSig;
-		parts.body.text = item.text;
-		parts.body.style.fill = color.label;
-	}
-	syncTextWrapWidth(parts.body, parts, Math.max(1, width - PADDING * 2), resizing);
-	parts.body.position.set(PADDING, 16);
-}
-const noteCardRenderer = {
-	id: "note-card",
-	canRender: (item) => item.type === "note",
-	create: (item, context) => {
-		const root = new Container();
-		const background = new Graphics();
-		const resolution = textResolutionForZoom(context.zoom);
-		const body = new Text({
-			text: "",
-			style: {
-				fill: 16777215,
-				fontFamily: BOARD_FONT_STACK,
-				fontSize: 14,
-				fontWeight: "500",
-				wordWrap: true,
-				lineHeight: 20
-			},
-			resolution,
-			roundPixels: true
-		});
-		root.addChild(background, body);
-		partsByContainer.set(root, {
-			root,
-			background,
-			body,
-			visualSig: "",
-			textSig: "",
-			wrapWidth: 0,
-			resolution
-		});
-		if (item.type === "note") sync(root, item, context);
-		return root;
-	},
-	update: (container, item, context) => {
-		if (item.type === "note") sync(container, item, context);
-	},
-	renderFar: (graphics, item, context) => {
-		if (item.type !== "note") return;
-		const color = pickBoardColor(context.colors, item.color, context.colorScheme);
-		drawFarPlate(graphics, item.frame, {
-			fill: color.fill,
-			fillAlpha: .28,
-			accent: color.stroke,
-			accentAlpha: .95
-		});
-	},
-	destroy: (container) => {
-		partsByContainer.get(container)?.root.destroy({ children: true });
-		partsByContainer.delete(container);
-	}
-};
-//#endregion
-export { noteCardRenderer };