@protobase/client 0.4.1 → 0.5.0

package/dist/assistant.d.ts

@@ -25,6 +25,12 @@ export type AssistantClient = {
   send: (text: string, page?: string) => Promise<void>;
   /** Sends a click on a card's button; the backend answers with events. Rejects with `ApiError`. */
   act: (partId: string, actionId: string) => Promise<void>;
+  /**
+   * Calls the backend beyond the protocol, such as a widget reading what it shows: `path` resolves against the
+   * backend's URL and is refused, before any request, when it lands on another origin, so the user's token goes only
+   * to the backend. Sends the token like every request; rejects with `ApiError` on an answer that is not 2xx.
+   */
+  fetch: (path: string, init?: RequestInit) => Promise<Response>;
 };
 /** A client of an assistant backend: the protocol's event stream and its two requests, with the user's token. */
 export declare const createAssistantClient: (options: AssistantClientOptions) => AssistantClient;

package/dist/assistant.js

@@ -9,6 +9,14 @@ const pause = (ms, signal) => new Promise((resolve) => {
 		resolve();
 	}, { once: true });
 });
+const sameOrigin = "http://same-origin.invalid";
+/** The URL `path` names on the backend at `base`, or an error when it is on another origin. */
+const backendUrl = (base, path) => {
+	const backend = new URL(base, sameOrigin);
+	const url = new URL(path, `${backend.href}/`);
+	if (url.origin !== backend.origin) throw new Error(`${path} is not on the assistant backend's origin`);
+	return backend.origin === sameOrigin ? `${url.pathname}${url.search}` : url.href;
+};
 /** A client of an assistant backend: the protocol's event stream and its two requests, with the user's token. */
 const createAssistantClient = (options) => {
 	const base = options.url.replace(/\/+$/, "");
@@ -76,6 +84,18 @@ const createAssistantClient = (options) => {
 					actionId
 				}
 			});
+		},
+		fetch: async (path, init = {}) => {
+			const url = backendUrl(base, path);
+			const token = await options.token();
+			const headers = new Headers(init.headers);
+			if (token) headers.set("authorization", `Bearer ${token}`);
+			const response = await doFetch(url, {
+				...init,
+				headers
+			});
+			if (!response.ok) throw await readProblem(response);
+			return response;
 		}
 	};
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/client",
-  "version": "0.4.1",
+  "version": "0.5.0",
   "description": "Typed fetch client for the Protobase REST API.",
   "license": "Apache-2.0",
   "repository": {
@@ -30,8 +30,8 @@
   },
   "dependencies": {
     "@better-auth/passkey": "^1.7.7",
-    "@protobase/layout": "0.4.1",
-    "@protobase/schema": "0.4.1",
+    "@protobase/layout": "0.5.0",
+    "@protobase/schema": "0.5.0",
     "better-auth": "^1.7.7"
   }
 }