@phpsandbox/sdk 0.6.0-canary.5 → 0.6.0-canary.6

package/README.md

@@ -563,3 +563,23 @@ for await (const event of readPublicationStream(response)) {
 ```
 
 `readPublicationStream` also accepts a `ReadableStream<Uint8Array>`. By default, it rejects EOF without a final result (including empty streams). Use `{ requireResult: false }` only when deliberately consuming a stream fragment. It validates recognized event payloads, throws for server error events, and ignores unknown event names and heartbeat comments. Ending iteration early cancels the stream; aborting the fetch interrupts a pending read. Disconnecting observation does not cancel the server-side deployment. `PublicationRun.events()` uses this same parser.
+
+### App access
+
+Configure preview access and inherited access for apps published through the managed edge:
+
+```ts
+await notebook.preview.configure({ mode: 'password', password: 'a-long-private-password' });
+await notebook.preview.configure({
+  mode: 'email',
+  allowedEmails: ['person@example.com', '*@company.test'],
+});
+await notebook.preview.configure({ mode: 'external', authorizationUrl: 'https://auth.example.com/access' });
+await notebook.preview.configure({ mode: 'public' });
+```
+
+Email mode presents email and code forms on the app's domain. Supply between 1 and 100 exact email addresses or domain rules such as `*@company.test`. Domain rules match that exact domain, excluding subdomains. The platform sends and verifies the codes; no custom verification service or callback configuration is required. Protected mode changes rotate the access version, invalidating previous grants and pending codes. `preview.get()` includes the current mode and email rules.
+
+External mode redirects visitors to the configured HTTPS URL with the app URL in `returnTo`. Your service decides whether to grant access, obtains an access URL through the authenticated API, and returns the visitor using that opaque URL. Keep API credentials on your server and validate return targets. `preview.get(url)` returns both a clean `url` and a credentialed `accessUrl`; open `accessUrl` without reconstructing it.
+
+**Breaking change:** Use `configure({ mode: 'password', password })` instead of `setPassword()` and `configure({ mode: 'public' })` instead of `disable()`; the two older methods and `SetNotebookPreviewInput` have been removed. Access responses now require `mode`, with email rules or an authorization URL required for the corresponding mode. Publication password updates also require `password`.

package/dist/browser/phpsandbox-sdk.esm.js

@@ -15234,7 +15234,7 @@ var PublicationReleaseStatusSchema = external_exports.enum(["created", "ready",
 var PublicationSizeSchema = external_exports.enum(["nano", "small", "medium", "large", "lite", "basic", "standard-1", "standard-2"]);
 var PublicationRegionSchema = external_exports.enum(["ENAM", "WNAM", "EEUR", "WEUR", "APAC", "SAM", "ME", "OC", "AFR"]);
 var PublicationJurisdictionSchema = external_exports.enum(["eu", "fedramp"]);
-var PublicationProtectionModeSchema = external_exports.enum(["none", "password"]);
+var PublicationProtectionModeSchema = external_exports.enum(["none", "password", "email", "external"]);
 var PublicationLogStreamSchema = external_exports.enum(["build", "runtime"]);
 var PublishStreamLogStreamSchema = external_exports.enum(["build", "publish", "runtime"]);
 var PublicationEventPayloadSchema = external_exports.preprocess(
@@ -21404,12 +21404,12 @@ var NotebookPreview = class {
     const response = await this.client.get(`/notebook/${this.notebookId}/preview${query}`);
     return response.data;
   }
-  async setPassword(input) {
-    const response = await this.client.put(`/notebook/${this.notebookId}/preview`, input);
-    return response.data;
-  }
-  async disable() {
-    await this.client.delete(`/notebook/${this.notebookId}/preview`);
+  async configure(input) {
+    if (input.mode === "public") {
+      await this.client.delete(`/notebook/${this.notebookId}/preview`);
+      return;
+    }
+    await this.client.put(`/notebook/${this.notebookId}/preview`, input);
   }
   async createSession(input) {
     const response = await this.client.post(`/notebook/${this.notebookId}/preview/session`, input);