@paneui/core 0.0.10 → 0.0.12

package/dist/client.d.ts

@@ -81,6 +81,37 @@ export interface PatchArtifactMetadataRequest {
      *  `null` to clear it. */
     icon_attachment_id?: string | null;
 }
+/** One identity-share grant as returned by the grants endpoints. */
+export interface PaneGrant {
+    id: string;
+    /** Set once the invitee logs in and the grant binds; null while pending. */
+    human_id: string | null;
+    /** The invited email, or null for a grant created directly against a human. */
+    invite_email: string | null;
+    /** "participant" (read + emit) | "viewer" (read-only). */
+    role: string;
+    /** ISO timestamp the grant was bound to a human, or null while pending. */
+    accepted_at: string | null;
+}
+/**
+ * The pane-id (`/p/:paneId`) access mode. Governs ONLY the pane-id path; token
+ * (`/s/<token>`) links are unaffected and keep working in every mode.
+ *   - "invite_only" — only invited emails (after login) may open /p.
+ *   - "link"        — anyone with the /p URL opens it read-only, no login.
+ *   - "public"      — anyone opens it read-only, no login (discovery TBD).
+ */
+export type AccessMode = "invite_only" | "link" | "public";
+/** Response from GET /v1/panes/:id/grants. */
+export interface PaneGrantsList {
+    pane_id: string;
+    access_mode: AccessMode;
+    items: PaneGrant[];
+}
+/** Response from PATCH /v1/panes/:id/visibility. */
+export interface PaneVisibility {
+    pane_id: string;
+    access_mode: AccessMode;
+}
 /**
  * An error thrown by the typed operations when the relay returns a non-2xx
  * response (or the request fails outright). Carries the HTTP status and the
@@ -393,6 +424,33 @@ export declare class PaneClient {
      * actively kicked in v1; new HTTP and WS connections are refused.
      */
     revokeParticipant(paneId: string, participantId: string): Promise<void>;
+    /**
+     * GET /v1/panes/:id/grants — list the pane's identity-share grants plus
+     * its current `access_mode`. Owner/agent-scope only.
+     */
+    listGrants(paneId: string): Promise<PaneGrantsList>;
+    /**
+     * POST /v1/panes/:id/grants — invite a human by email. Upserts by email,
+     * so re-inviting the same address adjusts the role in place. Role defaults
+     * to "participant" (read + emit); pass "viewer" for read-only.
+     */
+    createGrant(paneId: string, opts: {
+        email: string;
+        role?: "participant" | "viewer";
+    }): Promise<PaneGrant>;
+    /**
+     * DELETE /v1/panes/:id/grants/:grantId — revoke one grant. Idempotent: a
+     * missing/already-removed grant returns 204.
+     */
+    revokeGrant(paneId: string, grantId: string): Promise<void>;
+    /**
+     * PATCH /v1/panes/:id/visibility — set the pane's /p access mode.
+     *   - "invite_only" — only invited emails (after login) may open /p.
+     *   - "link"        — anyone with the /p URL opens it READ-ONLY, no login.
+     *   - "public"      — anyone opens it READ-ONLY, no login (discovery TBD).
+     * Token (`/s/<token>`) links are independent of this and keep working.
+     */
+    setPaneVisibility(paneId: string, accessMode: AccessMode): Promise<PaneVisibility>;
     /**
      * DELETE /v1/panes/:id — close/delete a pane. Idempotent on the relay
      * side (an already-closed pane still returns 204 with no body).

package/dist/client.js

@@ -593,6 +593,51 @@ export class PaneClient {
         if (!r.ok)
             this.fail(r);
     }
+    /**
+     * GET /v1/panes/:id/grants — list the pane's identity-share grants plus
+     * its current `access_mode`. Owner/agent-scope only.
+     */
+    async listGrants(paneId) {
+        const r = await this.call("GET", `/v1/panes/${encodeURIComponent(paneId)}/grants`);
+        if (!r.ok)
+            this.fail(r);
+        return this.asObject(r);
+    }
+    /**
+     * POST /v1/panes/:id/grants — invite a human by email. Upserts by email,
+     * so re-inviting the same address adjusts the role in place. Role defaults
+     * to "participant" (read + emit); pass "viewer" for read-only.
+     */
+    async createGrant(paneId, opts) {
+        const r = await this.call("POST", `/v1/panes/${encodeURIComponent(paneId)}/grants`, opts.role
+            ? { email: opts.email, role: opts.role }
+            : { email: opts.email });
+        if (!r.ok)
+            this.fail(r);
+        return this.asObject(r);
+    }
+    /**
+     * DELETE /v1/panes/:id/grants/:grantId — revoke one grant. Idempotent: a
+     * missing/already-removed grant returns 204.
+     */
+    async revokeGrant(paneId, grantId) {
+        const r = await this.call("DELETE", `/v1/panes/${encodeURIComponent(paneId)}/grants/${encodeURIComponent(grantId)}`);
+        if (!r.ok)
+            this.fail(r);
+    }
+    /**
+     * PATCH /v1/panes/:id/visibility — set the pane's /p access mode.
+     *   - "invite_only" — only invited emails (after login) may open /p.
+     *   - "link"        — anyone with the /p URL opens it READ-ONLY, no login.
+     *   - "public"      — anyone opens it READ-ONLY, no login (discovery TBD).
+     * Token (`/s/<token>`) links are independent of this and keep working.
+     */
+    async setPaneVisibility(paneId, accessMode) {
+        const r = await this.call("PATCH", `/v1/panes/${encodeURIComponent(paneId)}/visibility`, { access_mode: accessMode });
+        if (!r.ok)
+            this.fail(r);
+        return this.asObject(r);
+    }
     /**
      * DELETE /v1/panes/:id — close/delete a pane. Idempotent on the relay
      * side (an already-closed pane still returns 204 with no body).

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 export { PaneClient, PaneApiError } from "./client.js";
-export type { ClientOptions, RelayResponse, CreateArtifactRequest, CreateArtifactVersionRequest, PatchArtifactMetadataRequest, AttachmentRef, UploadBlobOptions, PresignBlobOptions, AttachmentTokenMintResponse, ListBlobsOptions, AttachmentTokenAuditEntry, AttachmentTokenListResponse, QueryResponse, } from "./client.js";
+export type { ClientOptions, RelayResponse, CreateArtifactRequest, CreateArtifactVersionRequest, PatchArtifactMetadataRequest, AttachmentRef, UploadBlobOptions, PresignBlobOptions, AttachmentTokenMintResponse, ListBlobsOptions, AttachmentTokenAuditEntry, AttachmentTokenListResponse, QueryResponse, PaneGrant, PaneGrantsList, PaneVisibility, AccessMode, } from "./client.js";
 export { openStream } from "./stream.js";
 export type { OpenStreamOptions, StreamHandlers, StreamHandle, } from "./stream.js";
 export { registerAgent } from "./register.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paneui/core",
-  "version": "0.0.10",
+  "version": "0.0.12",
   "description": "Pane relay client: typed HTTP + WebSocket operations against a Pane relay. Framework-free.",
   "license": "MIT",
   "type": "module",
@@ -53,6 +53,6 @@
     "@types/node": "^25.9.1",
     "@types/ws": "^8.18.1",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.6"
+    "vitest": "^4.1.8"
   }
 }