@neta-art/cohub 8.17.0 → 8.18.0

package/dist/protocol/dist/app-authorization.d.ts

@@ -0,0 +1 @@
+import { z } from "zod";

package/dist/protocol/dist/index.d.ts

@@ -1,3 +1,4 @@
+import "./app-authorization.js";
 import { BOARD_STROKE_MAX_SIZE, BOARD_STROKE_MIN_SIZE, BoardCapability, BoardCoordinateSpace, BoardRenderCost, clampBoardStrokeSize } from "./board-constants.js";
 import { AUTO_BOARD_CONNECTION_ANCHOR, BOARD_CONNECTION_DIRECTIONS, BOARD_CONNECTION_LINES, BOARD_CONNECTION_ROUTINGS, BOARD_CONNECTION_SIDES, BoardConnection, BoardConnectionAnchor, BoardConnectionAnchorSchema, BoardConnectionDirection, BoardConnectionEndpoint, BoardConnectionEndpointSchema, BoardConnectionInput, BoardConnectionLine, BoardConnectionPatch, BoardConnectionPatchSchema, BoardConnectionRecord, BoardConnectionRouting, BoardConnectionRoutingConfig, BoardConnectionRoutingSchema, BoardConnectionSchema, BoardConnectionSide, BoardConnectionStyle, BoardConnectionStyleSchema, BoardConnectionWaypointSchema, BoardRelationSchema, DEFAULT_BOARD_CONNECTION_ROUTING, DEFAULT_BOARD_CONNECTION_STYLE, DEFAULT_BOARD_RELATION, connectionItemIds, connectionOtherItemId, connectionTouchesItem, createBoardConnection, flipBoardConnection, normalizeBoardConnectionStyle } from "./board-connection.js";
 import { BoardAnimationTarget, BoardAnimationTargetSchema, BoardComposition, BoardCompositionInput, BoardCompositionInputSchema, BoardCompositionSchema, BoardEasing, BoardEasingSchema, BoardProceduralClip, BoardProceduralClipSchema, BoardTimelineMarker, BoardTimelineMarkerSchema, BoardTrack, BoardTrackInterpolation, BoardTrackSchema } from "./board-composition.js";
@@ -11,6 +12,9 @@ import { BOARD_COLOR_IDS, BOARD_GEO_KINDS, BoardColorId, BoardGeoKind } from "./
 import "./board-codec.js";
 import "./board-content.js";
 import { BoardArrowGeometryInput, boardArrowFrame, boardDrawBounds, boardDrawSampleRadius } from "./board-geometry.js";
+import "./runtime/index.js";
+import "./model/turn.js";
+import "./model/session.js";
 import "./realtime/board-awareness.js";
 import "./app.js";
 import "./realtime/types.js";

package/dist/protocol/dist/model/session.d.ts

@@ -0,0 +1 @@
+import "./turn.js";

package/dist/protocol/dist/model/turn.d.ts

@@ -0,0 +1 @@
+import "../runtime/index.js";

package/dist/protocol/dist/realtime/types.d.ts

@@ -1,5 +1,7 @@
 import "../board-composition.js";
 import "../board-effect.js";
 import "../board.js";
+import "../model/turn.js";
+import "../model/session.js";
 import "./board-awareness.js";
 import "../app.js";

package/dist/protocol/dist/runtime/archive.d.ts

@@ -0,0 +1 @@
+import { z } from "zod";

package/dist/protocol/dist/runtime/context.d.ts

@@ -0,0 +1 @@
+import "./index.js";

package/dist/protocol/dist/runtime/index.d.ts

@@ -0,0 +1,3 @@
+import "./archive.js";
+import "./context.js";
+import { z } from "zod";

package/dist/types.d.ts

@@ -3,6 +3,7 @@ import { BoardAnimationTarget, BoardComposition, BoardEasing, BoardProceduralCli
 import { BoardAssetRef, BoardEffect, BoardEffectInput } from "./protocol/dist/board-effect.js";
 import { BoardAuthoringItem, BoardAuthoringSnapshot, BoardSemanticCommand } from "./protocol/dist/board-authoring.js";
 import { BoardCameraFocus, BoardCameraFocusParams, BoardCameraState, BoardDiagnostic, BoardManifest, BoardMutationReceipt, BoardPlaybackSnapshot, BoardRecord, BoardTransactionOperation, BoardTransactionRecord, BoardTransactionsPage, BoardValidationResult } from "./protocol/dist/board.js";
+import "./protocol/dist/model/session.js";
 import "./protocol/dist/index.js";
 //#region src/types.d.ts
 type UserProfile = {

package/docs/app-runtime-guide.md

@@ -1,8 +1,9 @@
 # Cohub App Runtime Guide
 
-This guide explains how to use the Cohub SDK **inside a published App** — the
-only environment where runtime APIs (`context()`, `auth.request`,
-`app.commerce.*`, `app.realtime.*`) function. Read this before building any
+This guide explains the Cohub SDK in a published App iframe or an explicitly
+configured standalone broker. New Apps should use `auth.authorize()`; see the
+[authorization contract](../../../docs/app-authorization.md). Legacy APIs below
+retain their original return types. Read this before building any
 App that calls Cohub capabilities from browser-side JavaScript.
 
 It is written to be self-contained: an agent or developer who reads only this
@@ -72,10 +73,9 @@ These runtime-only APIs form the foundation; everything else is standard SDK:
 | `client.context().permissions.viewerGrants` | Render the viewer's current per-space grants | `{ spaceId, scopes }[]` |
 | `client.app.commerce.*` / `client.app.realtime.*` | Commerce and realtime, bound to the app's runtime identity | (see below) |
 
-> **Runtime-only constraint.** These APIs only work inside a **published**
-> App. Outside that context (a static asset URL, a local `file://` preview,
-> a plain Node script) `context()` returns `null` and the other runtime APIs
-> fail. Always develop against a published App.
+> **Runtime requirement.** Use a published App iframe or explicitly configure
+> a broker. A standalone page without broker configuration has no runtime.
+> Initialize `context()` before using APIs to discover Host capabilities.
 
 `client.app.onContextChanged(listener)` pushes a fresh context whenever the
 host's state changes (sign-in, invocation, grants), so an App can render its
@@ -134,14 +134,14 @@ a direct static-asset URL not wrapped in the Cohub iframe. The SDK opens a
 
 ```js
 const ctx = await client.context();
-const isBroker = !ctx?.space?.id; // bridge has a real id; broker is ""
+const isBroker = ctx?.mode === "broker";
 ```
 
 In broker mode you cannot get a spaceId from `context()`. Resolve it via the
 public by-slug App API (anonymous, no token needed):
 
 ```js
-const isBroker = !ctx?.space?.id;
+const isBroker = ctx?.mode === "broker";
 let spaceId;
 if (isBroker) {
   const detail = await client.apps.getBySlug(ownerUsername, spaceSlug, appSlug);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neta-art/cohub",
-  "version": "8.17.0",
+  "version": "8.18.0",
   "description": "Cohub SDK for spaces, sessions, boards, and realtime agent collaboration.",
   "license": "Apache-2.0",
   "private": false,