@openrails/contentkit-ui 0.90.3 → 0.92.1

package/README.md

@@ -78,7 +78,9 @@ operation. This does not change the operation's result or its authentication.
   `/media/upload`, `/codes`. A mount is a module's full base URL.
 - **`client.media`**: `upload`, `put` (upload, commit, wait), `commit`, `read`,
   `waitFor`, `editorView`, `getFrame`, `hlsBase(ref, dir)`, `discard`, and
-  `xhrSetup` for players (`<MediaGallery xhrSetup={contentkit.media.xhrSetup} />`).
+  `hls` for players (`<VideoPlayer loader={contentkit.media.hls} />`): playlists
+  load through the client's fetch, so they carry what its calls carry (an
+  `authFetch` adds DPoP proofs); segments carry only cookies.
   Uploads hash in a Web Worker, send one checksum-bound PUT up to 64 MiB and
   resumable multipart above (`onState`/`resume`). The bucket must allow CORS
   `PUT` from the app's origin with `Content-Type` and `x-amz-checksum-sha256`.
@@ -341,7 +343,7 @@ the starting shape and edit.
 
 `<MediaGallery item={post} prefix="low-res/" renderLocked={unlock} />` reads
 through the client: the read (refreshed, reloaded after commits), HLS bases,
-playlist auth and the grant refresh. Passing `read`, `hlsBase`, `xhrSetup`
+playlist auth and the grant refresh. Passing `read`, `hlsBase`, `loader`
 and `refresh` yourself still works. A locked read lists no files, so the
 lock is uncounted; its public teaser carries `renderLocked`, so the unlock is
 on the first slide;
@@ -388,7 +390,7 @@ fullscreen and a mini player.
 ```tsx
 <VideoPlayer
   base={contentkit.media.hlsBase(ref, "hls/")}
-  xhrSetup={contentkit.media.xhrSetup}
+  loader={contentkit.media.hls}
   refresh={reload} expires={read.expires}       // re-grant before the token expires
   width={video.w} height={video.h} duration={video.dur} poster={posterPreset}
   autoPlay startAt={resumePoint}                 // resume; never a muted autoplay
@@ -401,7 +403,7 @@ fullscreen and a mini player.
   renderDownloads={({ className, container }) => <Downloads className={className} container={container} />}
   menuItems={[{ label: "Version", value, options, onChange }, { label: "Report a problem", onSelect }]}
 />
-{handoff && <VideoMiniPlayer handoff={handoff} xhrSetup={contentkit.media.xhrSetup} onExpand={openWatchPage} onClose={() => setHandoff(null)} />}
+{handoff && <VideoMiniPlayer handoff={handoff} loader={contentkit.media.hls} onExpand={openWatchPage} onClose={() => setHandoff(null)} />}
 ```
 
 - **Shortcuts:** Space/K play, ←/→ 5 s, J/L 10 s, ↑/↓ volume, M mute, C

package/dist/client/client.d.ts

@@ -27,7 +27,7 @@ export interface ContentKitClientOptions extends HttpOptions {
  * over one shared transport (mounts, auth, language, errors, change events).
  */
 export interface ContentKitClient {
-    /** Uploads, multipart, commits, reads, frames, HLS bases, hls.js `xhrSetup` and inline images. */
+    /** Uploads, multipart, commits, reads, frames, HLS bases, the HLS loader and inline images. */
     readonly media: MediaClient;
     /** Content items: reads, and writes for their creators, owner-group editors and staff. */
     readonly contents: ContentsClient;

package/dist/client/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","names":[],"sources":["../../src/client/client.ts"],"sourcesContent":["import { CatalogClient } from \"./catalog.js\";\nimport { CodesClient } from \"./codes.js\";\nimport { ContentsClient } from \"./contents.js\";\nimport { BansClient } from \"./content/bans.js\";\nimport { CommentsClient } from \"./content/comments.js\";\nimport { FavoritesClient } from \"./content/favorites.js\";\nimport { ModerationClient } from \"./content/moderation.js\";\nimport { PollsClient } from \"./content/polls.js\";\nimport { ReactionsClient } from \"./content/reactions.js\";\nimport type { Batch, Config, ContentModel, RefBody, Result } from \"./generated/wire.js\";\nimport { DiscoveryClient } from \"./discovery.js\";\nimport { GroupsClient } from \"./groups.js\";\nimport { OffersClient } from \"./offers.js\";\nimport { StatsClient } from \"./stats.js\";\nimport { VersionsClient } from \"./versions.js\";\nimport { Http, type ContentKitChange, type ContentKitModule, type HttpOptions } from \"./http.js\";\nimport { MediaClient, type ContentFolders, type MediaOptions } from \"./media/client.js\";\nimport { call } from \"./route.js\";\nimport { NotificationsClient } from \"./notifications.js\";\n\nexport interface ContentKitClientOptions extends HttpOptions {\n  /** Upload tuning (transport, part concurrency, retries). */\n  media?: MediaOptions;\n  /** The media kind of poll folders, when the host renamed it (content.Media). */\n  folders?: ContentFolders;\n}\n\n/**\n * One ContentKit deployment as the browser sees it. Each module is a property\n * over one shared transport (mounts, auth, language, errors, change events).\n */\nexport interface ContentKitClient {\n  /** Uploads, multipart, commits, reads, frames, HLS bases, hls.js `xhrSetup` and inline images. */\n  readonly media: MediaClient;\n  /** Content items: reads, and writes for their creators, owner-group editors and staff. */\n  readonly contents: ContentsClient;\n  /** The catalog's totals by kind, language and audience. */\n  readonly catalog: CatalogClient;\n  /** Threads, replies, edits, tombstones, reactions, standing, the latest feed, moderation. */\n  readonly comments: CommentsClient;\n  /** Likes and dislikes of an item. */\n  readonly reactions: ReactionsClient;\n  /** The signed-in caller's favorites. */\n  readonly favorites: FavoritesClient;\n  /** Polls: votes, free-text answers and the staff editor. */\n  readonly polls: PollsClient;\n  /** Comment bans, owner and global. */\n  readonly bans: BansClient;\n  /** The review queue of held comments and content. */\n  readonly moderation: ModerationClient;\n  /** Groups: listings, pages, staff writes and memberships. */\n  readonly groups: GroupsClient;\n  /** Lists, search, typeahead, rails, release dates, content filters, history, signals and exposures. */\n  readonly discovery: DiscoveryClient;\n  /** Content versions: reader plans, reader metadata, forks and downloads. */\n  readonly versions: VersionsClient;\n  /** Offers on contents, versions and groups; group joins; the reader's library. */\n  readonly offers: OffersClient;\n  /** Content-code lookup. */\n  readonly codes: CodesClient;\n  /** Staff activity and rankings; the signed-in reader's own statistics. */\n  readonly stats: StatsClient;\n  /** The signed-in person's native and imported notifications. */\n  readonly notifications: NotificationsClient;\n\n  /** What the content module allows: which interactions signed-out visitors may make. */\n  config(signal?: AbortSignal): Promise<Config>;\n  /** The site's content model: languages, tiers, kinds, group kinds and content filters. */\n  kinds(signal?: AbortSignal): Promise<ContentModel>;\n  /** Staff bulk import (root:import:write): groups, contents, memberships, offers and aliases, idempotent per source. */\n  import(batch: Batch): Promise<Result>;\n  /** A module's base URL as configured (no trailing slash). */\n  url(module: ContentKitModule, ref?: RefBody): string;\n  /** Cache context only, not authentication. The React provider keeps this in sync. */\n  setReadScope(scope: string): void;\n  /** Every successful mutation; a null scope means its data predates a context change. */\n  subscribe(listener: (change: ContentKitChange, scope: string | null) => void): () => void;\n}\n\nexport function createContentKitClient(options: ContentKitClientOptions): ContentKitClient {\n  const { media: mediaOptions, folders, ...http } = options;\n  const h = new Http(http);\n  const media = new MediaClient(h, mediaOptions, folders);\n  return {\n    media,\n    contents: new ContentsClient(h),\n    catalog: new CatalogClient(h),\n    comments: new CommentsClient(h),\n    reactions: new ReactionsClient(h),\n    favorites: new FavoritesClient(h),\n    polls: new PollsClient(h, media),\n    bans: new BansClient(h),\n    moderation: new ModerationClient(h),\n    groups: new GroupsClient(h, media),\n    discovery: new DiscoveryClient(h),\n    versions: new VersionsClient(h),\n    offers: new OffersClient(h),\n    codes: new CodesClient(h),\n    stats: new StatsClient(h),\n    notifications: new NotificationsClient(h),\n    config: (signal) => call(h, \"GET\", \"/config\", { signal }),\n    kinds: (signal) => call(h, \"GET\", \"/kinds\", { signal }),\n    import: (batch) => call(h, \"POST\", \"/import\", { body: batch }),\n    url: (module, ref) => h.mount(module, ref),\n    setReadScope: (scope) => h.setReadScope(scope),\n    subscribe: (listener) => h.subscribe(listener),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA+EA,SAAgB,EAAuB,GAAoD;CACzF,IAAM,EAAE,OAAO,GAAc,YAAS,GAAG,MAAS,GAC5C,IAAI,IAAI,EAAK,CAAI,GACjB,IAAQ,IAAI,EAAY,GAAG,GAAc,CAAO;CACtD,OAAO;EACL;EACA,UAAU,IAAI,EAAe,CAAC;EAC9B,SAAS,IAAI,EAAc,CAAC;EAC5B,UAAU,IAAI,EAAe,CAAC;EAC9B,WAAW,IAAI,EAAgB,CAAC;EAChC,WAAW,IAAI,EAAgB,CAAC;EAChC,OAAO,IAAI,EAAY,GAAG,CAAK;EAC/B,MAAM,IAAI,EAAW,CAAC;EACtB,YAAY,IAAI,EAAiB,CAAC;EAClC,QAAQ,IAAI,EAAa,GAAG,CAAK;EACjC,WAAW,IAAI,EAAgB,CAAC;EAChC,UAAU,IAAI,EAAe,CAAC;EAC9B,QAAQ,IAAI,EAAa,CAAC;EAC1B,OAAO,IAAI,EAAY,CAAC;EACxB,OAAO,IAAI,EAAY,CAAC;EACxB,eAAe,IAAI,EAAoB,CAAC;EACxC,SAAS,MAAW,EAAK,GAAG,OAAO,WAAW,EAAE,UAAO,CAAC;EACxD,QAAQ,MAAW,EAAK,GAAG,OAAO,UAAU,EAAE,UAAO,CAAC;EACtD,SAAS,MAAU,EAAK,GAAG,QAAQ,WAAW,EAAE,MAAM,EAAM,CAAC;EAC7D,MAAM,GAAQ,MAAQ,EAAE,MAAM,GAAQ,CAAG;EACzC,eAAe,MAAU,EAAE,aAAa,CAAK;EAC7C,YAAY,MAAa,EAAE,UAAU,CAAQ;CAC/C;AACF"}
+{"version":3,"file":"client.js","names":[],"sources":["../../src/client/client.ts"],"sourcesContent":["import { CatalogClient } from \"./catalog.js\";\nimport { CodesClient } from \"./codes.js\";\nimport { ContentsClient } from \"./contents.js\";\nimport { BansClient } from \"./content/bans.js\";\nimport { CommentsClient } from \"./content/comments.js\";\nimport { FavoritesClient } from \"./content/favorites.js\";\nimport { ModerationClient } from \"./content/moderation.js\";\nimport { PollsClient } from \"./content/polls.js\";\nimport { ReactionsClient } from \"./content/reactions.js\";\nimport type { Batch, Config, ContentModel, RefBody, Result } from \"./generated/wire.js\";\nimport { DiscoveryClient } from \"./discovery.js\";\nimport { GroupsClient } from \"./groups.js\";\nimport { OffersClient } from \"./offers.js\";\nimport { StatsClient } from \"./stats.js\";\nimport { VersionsClient } from \"./versions.js\";\nimport { Http, type ContentKitChange, type ContentKitModule, type HttpOptions } from \"./http.js\";\nimport { MediaClient, type ContentFolders, type MediaOptions } from \"./media/client.js\";\nimport { call } from \"./route.js\";\nimport { NotificationsClient } from \"./notifications.js\";\n\nexport interface ContentKitClientOptions extends HttpOptions {\n  /** Upload tuning (transport, part concurrency, retries). */\n  media?: MediaOptions;\n  /** The media kind of poll folders, when the host renamed it (content.Media). */\n  folders?: ContentFolders;\n}\n\n/**\n * One ContentKit deployment as the browser sees it. Each module is a property\n * over one shared transport (mounts, auth, language, errors, change events).\n */\nexport interface ContentKitClient {\n  /** Uploads, multipart, commits, reads, frames, HLS bases, the HLS loader and inline images. */\n  readonly media: MediaClient;\n  /** Content items: reads, and writes for their creators, owner-group editors and staff. */\n  readonly contents: ContentsClient;\n  /** The catalog's totals by kind, language and audience. */\n  readonly catalog: CatalogClient;\n  /** Threads, replies, edits, tombstones, reactions, standing, the latest feed, moderation. */\n  readonly comments: CommentsClient;\n  /** Likes and dislikes of an item. */\n  readonly reactions: ReactionsClient;\n  /** The signed-in caller's favorites. */\n  readonly favorites: FavoritesClient;\n  /** Polls: votes, free-text answers and the staff editor. */\n  readonly polls: PollsClient;\n  /** Comment bans, owner and global. */\n  readonly bans: BansClient;\n  /** The review queue of held comments and content. */\n  readonly moderation: ModerationClient;\n  /** Groups: listings, pages, staff writes and memberships. */\n  readonly groups: GroupsClient;\n  /** Lists, search, typeahead, rails, release dates, content filters, history, signals and exposures. */\n  readonly discovery: DiscoveryClient;\n  /** Content versions: reader plans, reader metadata, forks and downloads. */\n  readonly versions: VersionsClient;\n  /** Offers on contents, versions and groups; group joins; the reader's library. */\n  readonly offers: OffersClient;\n  /** Content-code lookup. */\n  readonly codes: CodesClient;\n  /** Staff activity and rankings; the signed-in reader's own statistics. */\n  readonly stats: StatsClient;\n  /** The signed-in person's native and imported notifications. */\n  readonly notifications: NotificationsClient;\n\n  /** What the content module allows: which interactions signed-out visitors may make. */\n  config(signal?: AbortSignal): Promise<Config>;\n  /** The site's content model: languages, tiers, kinds, group kinds and content filters. */\n  kinds(signal?: AbortSignal): Promise<ContentModel>;\n  /** Staff bulk import (root:import:write): groups, contents, memberships, offers and aliases, idempotent per source. */\n  import(batch: Batch): Promise<Result>;\n  /** A module's base URL as configured (no trailing slash). */\n  url(module: ContentKitModule, ref?: RefBody): string;\n  /** Cache context only, not authentication. The React provider keeps this in sync. */\n  setReadScope(scope: string): void;\n  /** Every successful mutation; a null scope means its data predates a context change. */\n  subscribe(listener: (change: ContentKitChange, scope: string | null) => void): () => void;\n}\n\nexport function createContentKitClient(options: ContentKitClientOptions): ContentKitClient {\n  const { media: mediaOptions, folders, ...http } = options;\n  const h = new Http(http);\n  const media = new MediaClient(h, mediaOptions, folders);\n  return {\n    media,\n    contents: new ContentsClient(h),\n    catalog: new CatalogClient(h),\n    comments: new CommentsClient(h),\n    reactions: new ReactionsClient(h),\n    favorites: new FavoritesClient(h),\n    polls: new PollsClient(h, media),\n    bans: new BansClient(h),\n    moderation: new ModerationClient(h),\n    groups: new GroupsClient(h, media),\n    discovery: new DiscoveryClient(h),\n    versions: new VersionsClient(h),\n    offers: new OffersClient(h),\n    codes: new CodesClient(h),\n    stats: new StatsClient(h),\n    notifications: new NotificationsClient(h),\n    config: (signal) => call(h, \"GET\", \"/config\", { signal }),\n    kinds: (signal) => call(h, \"GET\", \"/kinds\", { signal }),\n    import: (batch) => call(h, \"POST\", \"/import\", { body: batch }),\n    url: (module, ref) => h.mount(module, ref),\n    setReadScope: (scope) => h.setReadScope(scope),\n    subscribe: (listener) => h.subscribe(listener),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA+EA,SAAgB,EAAuB,GAAoD;CACzF,IAAM,EAAE,OAAO,GAAc,YAAS,GAAG,MAAS,GAC5C,IAAI,IAAI,EAAK,CAAI,GACjB,IAAQ,IAAI,EAAY,GAAG,GAAc,CAAO;CACtD,OAAO;EACL;EACA,UAAU,IAAI,EAAe,CAAC;EAC9B,SAAS,IAAI,EAAc,CAAC;EAC5B,UAAU,IAAI,EAAe,CAAC;EAC9B,WAAW,IAAI,EAAgB,CAAC;EAChC,WAAW,IAAI,EAAgB,CAAC;EAChC,OAAO,IAAI,EAAY,GAAG,CAAK;EAC/B,MAAM,IAAI,EAAW,CAAC;EACtB,YAAY,IAAI,EAAiB,CAAC;EAClC,QAAQ,IAAI,EAAa,GAAG,CAAK;EACjC,WAAW,IAAI,EAAgB,CAAC;EAChC,UAAU,IAAI,EAAe,CAAC;EAC9B,QAAQ,IAAI,EAAa,CAAC;EAC1B,OAAO,IAAI,EAAY,CAAC;EACxB,OAAO,IAAI,EAAY,CAAC;EACxB,eAAe,IAAI,EAAoB,CAAC;EACxC,SAAS,MAAW,EAAK,GAAG,OAAO,WAAW,EAAE,UAAO,CAAC;EACxD,QAAQ,MAAW,EAAK,GAAG,OAAO,UAAU,EAAE,UAAO,CAAC;EACtD,SAAS,MAAU,EAAK,GAAG,QAAQ,WAAW,EAAE,MAAM,EAAM,CAAC;EAC7D,MAAM,GAAQ,MAAQ,EAAE,MAAM,GAAQ,CAAG;EACzC,eAAe,MAAU,EAAE,aAAa,CAAK;EAC7C,YAAY,MAAa,EAAE,UAAU,CAAQ;CAC/C;AACF"}

package/dist/client/generated/routes.d.ts

@@ -4,7 +4,7 @@ export type ContentKitRoute = {
     method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
     module: ContentKitModule;
     path: string;
-    auth: "open" | "public" | "user" | "staff" | "editor";
+    auth: "open" | "public" | "user" | "person" | "staff" | "editor";
     permission: string | null;
     query: readonly string[];
     request: string | null;
@@ -214,7 +214,7 @@ export declare const CONTENTKIT_ROUTES: readonly [{
     readonly method: "POST";
     readonly module: "content";
     readonly path: "/comments/{cid}/hold";
-    readonly auth: "user";
+    readonly auth: "person";
     readonly permission: null;
     readonly query: readonly [];
     readonly request: null;
@@ -227,7 +227,7 @@ export declare const CONTENTKIT_ROUTES: readonly [{
     readonly method: "POST";
     readonly module: "content";
     readonly path: "/comments/{cid}/release";
-    readonly auth: "user";
+    readonly auth: "person";
     readonly permission: null;
     readonly query: readonly [];
     readonly request: null;
@@ -682,7 +682,7 @@ export declare const CONTENTKIT_ROUTES: readonly [{
     readonly method: "GET";
     readonly module: "content";
     readonly path: "/groups/{id}/held-comments";
-    readonly auth: "user";
+    readonly auth: "person";
     readonly permission: null;
     readonly query: readonly ["cursor", "limit"];
     readonly request: null;
@@ -695,7 +695,7 @@ export declare const CONTENTKIT_ROUTES: readonly [{
     readonly method: "GET";
     readonly module: "content";
     readonly path: "/groups/{id}/comment-bans";
-    readonly auth: "user";
+    readonly auth: "person";
     readonly permission: null;
     readonly query: readonly ["limit", "offset"];
     readonly request: null;
@@ -708,7 +708,7 @@ export declare const CONTENTKIT_ROUTES: readonly [{
     readonly method: "PUT";
     readonly module: "content";
     readonly path: "/groups/{id}/comment-bans/{user}";
-    readonly auth: "user";
+    readonly auth: "person";
     readonly permission: null;
     readonly query: readonly [];
     readonly request: "BanInput";
@@ -721,7 +721,7 @@ export declare const CONTENTKIT_ROUTES: readonly [{
     readonly method: "DELETE";
     readonly module: "content";
     readonly path: "/groups/{id}/comment-bans/{user}";
-    readonly auth: "user";
+    readonly auth: "person";
     readonly permission: null;
     readonly query: readonly [];
     readonly request: null;

package/dist/client/generated/routes.js

@@ -328,7 +328,7 @@ var e = {
 		method: "POST",
 		module: "content",
 		path: "/comments/{cid}/hold",
-		auth: "user",
+		auth: "person",
 		permission: null,
 		query: [],
 		request: null,
@@ -348,7 +348,7 @@ var e = {
 		method: "POST",
 		module: "content",
 		path: "/comments/{cid}/release",
-		auth: "user",
+		auth: "person",
 		permission: null,
 		query: [],
 		request: null,
@@ -987,7 +987,7 @@ var e = {
 		method: "GET",
 		module: "content",
 		path: "/groups/{id}/held-comments",
-		auth: "user",
+		auth: "person",
 		permission: null,
 		query: ["cursor", "limit"],
 		request: null,
@@ -1003,7 +1003,7 @@ var e = {
 		method: "GET",
 		module: "content",
 		path: "/groups/{id}/comment-bans",
-		auth: "user",
+		auth: "person",
 		permission: null,
 		query: ["limit", "offset"],
 		request: null,
@@ -1019,7 +1019,7 @@ var e = {
 		method: "PUT",
 		module: "content",
 		path: "/groups/{id}/comment-bans/{user}",
-		auth: "user",
+		auth: "person",
 		permission: null,
 		query: [],
 		request: "BanInput",
@@ -1035,7 +1035,7 @@ var e = {
 		method: "DELETE",
 		module: "content",
 		path: "/groups/{id}/comment-bans/{user}",
-		auth: "user",
+		auth: "person",
 		permission: null,
 		query: [],
 		request: null,