@roj-ai/client 0.1.3 → 0.1.5

package/dist/api/client.d.ts

@@ -16,3 +16,4 @@ export declare function configureProjectId(projectId: string | null): void;
 export declare function createApiClient(baseUrl?: string): ApiClient;
 export declare const api: ApiClient;
 export declare function useApiError(error: unknown): string | null;
+//# sourceMappingURL=client.d.ts.map

package/dist/api/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAElG,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAA;AAC9B,YAAY,EAAE,YAAY,EAAE,CAAA;AAE5B,MAAM,WAAW,SAAS;IACzB,IAAI,CAAC,CAAC,SAAS,aAAa,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAA;IACzG,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC/H;AAkCD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAMrD;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAEjE;AAED,wBAAgB,eAAe,CAAC,OAAO,GAAE,MAAW,GAAG,SAAS,CAG/D;AAED,eAAO,MAAM,GAAG,EAAE,SAAmD,CAAA;AAErE,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAQzD"}

package/dist/api/client.js

@@ -0,0 +1,57 @@
+import { RpcClient, RpcError } from '@roj-ai/shared/rpc';
+export { RpcClient, RpcError };
+function createApiClientFromRpc(getClient) {
+    return {
+        call: (method, input) => getClient().call(method, input),
+        async uploadFile(sessionId, file) {
+            const formData = new FormData();
+            formData.append('file', file);
+            const client = getClient();
+            const baseUrl = client.getBaseUrl();
+            const projectId = client.getProjectId();
+            let url = `${baseUrl}/sessions/${sessionId}/upload`;
+            if (projectId) {
+                url += `?project=${encodeURIComponent(projectId)}`;
+            }
+            const response = await fetch(url, {
+                method: 'POST',
+                body: formData,
+                credentials: 'include',
+            });
+            if (!response.ok) {
+                const error = await response.json();
+                throw new Error(error.error?.message || 'Upload failed');
+            }
+            return response.json();
+        },
+    };
+}
+let rpcClient = new RpcClient('');
+export function configureApiBaseUrl(url) {
+    const projectId = rpcClient.getProjectId();
+    rpcClient = new RpcClient(url);
+    if (projectId) {
+        rpcClient.setProjectId(projectId);
+    }
+}
+export function getApiBaseUrl() {
+    return rpcClient.getBaseUrl();
+}
+export function configureProjectId(projectId) {
+    rpcClient.setProjectId(projectId);
+}
+export function createApiClient(baseUrl = '') {
+    const client = new RpcClient(baseUrl);
+    return createApiClientFromRpc(() => client);
+}
+export const api = createApiClientFromRpc(() => rpcClient);
+export function useApiError(error) {
+    if (error instanceof RpcError) {
+        return error.error.message;
+    }
+    if (error instanceof Error) {
+        return error.message;
+    }
+    return null;
+}
+//# sourceMappingURL=client.js.map

package/dist/api/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAGxD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAA;AAQ9B,SAAS,sBAAsB,CAAC,SAA0B;IACzD,OAAO;QACN,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;QACxD,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI;YAC/B,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAA;YAC/B,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAE7B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;YAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;YACnC,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,EAAE,CAAA;YACvC,IAAI,GAAG,GAAG,GAAG,OAAO,aAAa,SAAS,SAAS,CAAA;YACnD,IAAI,SAAS,EAAE,CAAC;gBACf,GAAG,IAAI,YAAY,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAA;YACnD,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBACjC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,SAAS;aACtB,CAAC,CAAA;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAsC,CAAA;gBACvE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,CAAC,CAAA;YACzD,CAAC;YAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAA;QACvB,CAAC;KACD,CAAA;AACF,CAAC;AAED,IAAI,SAAS,GAAG,IAAI,SAAS,CAAC,EAAE,CAAC,CAAA;AAEjC,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC9C,MAAM,SAAS,GAAG,SAAS,CAAC,YAAY,EAAE,CAAA;IAC1C,SAAS,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,CAAA;IAC9B,IAAI,SAAS,EAAE,CAAC;QACf,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;IAClC,CAAC;AACF,CAAC;AAED,MAAM,UAAU,aAAa;IAC5B,OAAO,SAAS,CAAC,UAAU,EAAE,CAAA;AAC9B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,SAAwB;IAC1D,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;AAClC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,UAAkB,EAAE;IACnD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,CAAA;IACrC,OAAO,sBAAsB,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAA;AAC5C,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAc,sBAAsB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;AAErE,MAAM,UAAU,WAAW,CAAC,KAAc;IACzC,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAA;IAC3B,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,OAAO,CAAA;IACrB,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC"}

package/dist/api/unwrap.d.ts

@@ -1,2 +1,3 @@
 import type { Result, RpcErrorInfo } from '@roj-ai/shared/rpc';
 export declare function unwrap<T>(result: Result<T, RpcErrorInfo>): T;
+//# sourceMappingURL=unwrap.d.ts.map

package/dist/api/unwrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unwrap.d.ts","sourceRoot":"","sources":["../../src/api/unwrap.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAE9D,wBAAgB,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAG5D"}

package/dist/api/unwrap.js

@@ -0,0 +1,7 @@
+import { RpcError } from '@roj-ai/shared/rpc';
+export function unwrap(result) {
+    if (result.ok)
+        return result.value;
+    throw new RpcError(0, result.error);
+}
+//# sourceMappingURL=unwrap.js.map

package/dist/api/unwrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unwrap.js","sourceRoot":"","sources":["../../src/api/unwrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAG7C,MAAM,UAAU,MAAM,CAAI,MAA+B;IACxD,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,KAAK,CAAA;IAClC,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;AACpC,CAAC"}

package/dist/index.d.ts

@@ -7,3 +7,4 @@
 export { api, configureApiBaseUrl, createApiClient, getApiBaseUrl, configureProjectId, RpcClient, RpcError, useApiError, } from './api/client';
 export type { ApiClient } from './api/client';
 export { unwrap } from './api/unwrap';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACN,GAAG,EACH,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,SAAS,EACT,QAAQ,EACR,WAAW,GACX,MAAM,cAAc,CAAA;AACrB,YAAY,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA"}

package/dist/index.js

@@ -0,0 +1,9 @@
+/**
+ * @roj-ai/client
+ *
+ * Vanilla TypeScript client for the roj agent server. No React — React hooks
+ * and chat components live in `@roj-ai/client-react`.
+ */
+export { api, configureApiBaseUrl, createApiClient, getApiBaseUrl, configureProjectId, RpcClient, RpcError, useApiError, } from './api/client';
+export { unwrap } from './api/unwrap';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACN,GAAG,EACH,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,SAAS,EACT,QAAQ,EACR,WAAW,GACX,MAAM,cAAc,CAAA;AAErB,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA"}

package/dist/platform/errors.d.ts

@@ -4,3 +4,4 @@ export declare class RojApiError extends Error {
     readonly type: string;
     constructor(error: RpcError);
 }
+//# sourceMappingURL=errors.d.ts.map

package/dist/platform/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/platform/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAEhD,qBAAa,WAAY,SAAQ,KAAK;aAGT,KAAK,EAAE,QAAQ;IAF3C,SAAgB,IAAI,EAAE,MAAM,CAAA;gBAEA,KAAK,EAAE,QAAQ;CAK3C"}

package/dist/platform/errors.js

@@ -0,0 +1,20 @@
+export class RojApiError extends Error {
+    constructor(error) {
+        super(error.message);
+        Object.defineProperty(this, "error", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: error
+        });
+        Object.defineProperty(this, "type", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        this.name = 'RojApiError';
+        this.type = error.type;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/platform/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/platform/errors.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,WAAY,SAAQ,KAAK;IAGrC,YAA4B,KAAe;QAC1C,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QADT;;;;mBAAgB,KAAK;WAAU;QAF3B;;;;;WAAY;QAI3B,IAAI,CAAC,IAAI,GAAG,aAAa,CAAA;QACzB,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;IACvB,CAAC;CACD"}

package/dist/platform/index.d.ts

@@ -20,5 +20,6 @@ export type { SandboxState } from './sandbox-state';
 export { buildPreviewUrl, buildWsUrl, buildApiBaseUrl, instanceIdToHex } from './urls';
 export type { BuildPreviewUrlOptions, BuildWsUrlOptions } from './urls';
 export { createRojClient } from './rest-client';
-export type { RojClient, RojClientOptions } from './rest-client';
+export type { RojClient, RojClientOptions, SessionRpcInput } from './rest-client';
 export { RojApiError } from './errors';
+//# sourceMappingURL=index.d.ts.map

package/dist/platform/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/platform/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACxD,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC/G,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAG5E,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AACpE,mBAAmB,WAAW,CAAA;AAE9B,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAC7E,mBAAmB,oBAAoB,CAAA;AAGvC,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAGnD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAA;AACtF,YAAY,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,QAAQ,CAAA;AAGvE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAGjF,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA"}

package/dist/platform/index.js

@@ -0,0 +1,20 @@
+/**
+ * @roj-ai/client/platform
+ *
+ * Client SDK for the roj platform REST API. Works against both the full
+ * platform (Cloudflare worker) and the standalone server.
+ */
+// Generic RPC framework
+export { defineMethods, method } from './rpc-definition';
+export { createRpcClient } from './rpc-client';
+export { createRpcRouter } from './rpc-server';
+// Platform method contracts
+export { platformMethods } from './methods';
+export { instanceMethods } from './instance-methods';
+// URL builders
+export { buildPreviewUrl, buildWsUrl, buildApiBaseUrl, instanceIdToHex } from './urls';
+// REST client
+export { createRojClient } from './rest-client';
+// Errors
+export { RojApiError } from './errors';
+//# sourceMappingURL=index.js.map

package/dist/platform/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/platform/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,wBAAwB;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAExD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE9C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAG9C,4BAA4B;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAI3C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAOpD,eAAe;AACf,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAA;AAGtF,cAAc;AACd,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAG/C,SAAS;AACT,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA"}

package/dist/platform/instance-methods.d.ts

@@ -92,3 +92,4 @@ export declare const instanceMethods: {
 };
 export type InstanceMethods = typeof instanceMethods;
 export type InstanceMethodName = keyof InstanceMethods;
+//# sourceMappingURL=instance-methods.d.ts.map

package/dist/platform/instance-methods.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance-methods.d.ts","sourceRoot":"","sources":["../../src/platform/instance-methods.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAMzE,MAAM,MAAM,0BAA0B,GAAG,EAAE,CAAA;AAC3C,MAAM,WAAW,2BAA2B;IAC3C,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,yBAAyB;IACzC,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,MAAM,0BAA0B,GAAG,EAAE,CAAA;AAE3C,MAAM,WAAW,6BAA6B;IAC7C,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,yBAAyB;IACzC,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,yBAAyB;IACzC,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,0BAA0B;IAC1C,OAAO,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,2BAA2B;IAC3C,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,iCAAiC;IACjD,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,kCAAkC;IAClD,KAAK,EAAE,OAAO,CAAA;CACd;AAMD,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,2BAA2B;IAC3C,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,MAAM,yBAAyB,GAAG,EAAE,CAAA;AAC1C,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,EAAE,KAAK,CAAC;QACf,EAAE,EAAE,MAAM,CAAA;QACV,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;QACvB,MAAM,EAAE,MAAM,CAAA;QACd,SAAS,EAAE,MAAM,CAAA;KACjB,CAAC,CAAA;CACF;AAED,MAAM,WAAW,2BAA2B;IAC3C,SAAS,EAAE,MAAM,CAAA;CACjB;AAMD,MAAM,WAAW,0BAA0B;IAC1C,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,2BAA2B;IAC3C,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAClB;AAED,MAAM,WAAW,2BAA2B;IAC3C,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,EAAE,KAAK,CAAC;QACf,WAAW,EAAE,MAAM,CAAA;QACnB,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,MAAM,CAAA;KACZ,CAAC,CAAA;CACF;AAED,MAAM,WAAW,2BAA2B;IAC3C,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;CACb;AAMD,MAAM,WAAW,gBAAgB;IAChC,EAAE,EAAE,OAAO,CAAA;CACX;AAMD,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;CAsB1B,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAA;AACpD,MAAM,MAAM,kBAAkB,GAAG,MAAM,eAAe,CAAA"}

package/dist/platform/instance-methods.js

@@ -0,0 +1,34 @@
+/**
+ * Instance-scoped RPC method definitions.
+ *
+ * These methods are called from the SPA via POST /api/v1/instances/:id/rpc
+ * with instance token or cookie auth. The instance is already resolved by the route,
+ * so inputs do NOT contain instanceId.
+ *
+ * Shared between worker (server) and client SDK.
+ */
+import { defineMethods, method } from './rpc-definition';
+// ============================================================================
+// Method registry
+// ============================================================================
+export const instanceMethods = defineMethods({
+    // Sandbox
+    createSandbox: method(),
+    pauseSandbox: method(),
+    resumeSandbox: method(),
+    terminateSandbox: method(),
+    restartAgent: method(),
+    getAgentLogs: method(),
+    execInSandbox: method(),
+    validateSandboxToken: method(),
+    // Sessions
+    createSession: method(),
+    listSessions: method(),
+    publishSession: method(),
+    // Services
+    getServiceUrl: method(),
+    getServiceUrls: method(),
+    // Idempotent sandbox access
+    ensureSandbox: method(),
+});
+//# sourceMappingURL=instance-methods.js.map

package/dist/platform/instance-methods.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance-methods.js","sourceRoot":"","sources":["../../src/platform/instance-methods.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAkHxD,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,eAAe,GAAG,aAAa,CAAC;IAC5C,UAAU;IACV,aAAa,EAAE,MAAM,EAA2D;IAChF,YAAY,EAAE,MAAM,EAA+C;IACnE,aAAa,EAAE,MAAM,EAAgD;IACrE,gBAAgB,EAAE,MAAM,EAAmD;IAC3E,YAAY,EAAE,MAAM,EAA+C;IACnE,YAAY,EAAE,MAAM,EAAiD;IACrE,aAAa,EAAE,MAAM,EAA2D;IAChF,oBAAoB,EAAE,MAAM,EAAyE;IAErG,WAAW;IACX,aAAa,EAAE,MAAM,EAA2D;IAChF,YAAY,EAAE,MAAM,EAAyD;IAC7E,cAAc,EAAE,MAAM,EAAqD;IAE3E,WAAW;IACX,aAAa,EAAE,MAAM,EAA2D;IAChF,cAAc,EAAE,MAAM,EAA6D;IAEnF,4BAA4B;IAC5B,aAAa,EAAE,MAAM,EAAmC;CACxD,CAAC,CAAA"}

package/dist/platform/methods.d.ts

@@ -115,10 +115,22 @@ export interface CreateInstanceTokenInput {
     origin?: string;
     expiresIn?: number;
     meta?: Record<string, unknown>;
+    /**
+     * Service codes (e.g. ['dev']) for which the platform should also build a
+     * ready-to-use preview URL with the freshly minted token baked in.
+     * Saves callers from having to know `baseDomain` or compose the URL.
+     */
+    previewServiceCodes?: string[];
 }
 export interface CreateInstanceTokenOutput {
     token: string;
     expiresAt: string;
+    /**
+     * Preview URLs keyed by service code, populated when `previewServiceCodes`
+     * was set on the request. Each URL carries the token in `?token=` and is
+     * suitable for direct use as an iframe `src`.
+     */
+    previewUrls?: Record<string, string>;
 }
 export interface ListBundlesInput {
     limit?: number;
@@ -237,6 +249,27 @@ export interface GetServiceUrlInput {
 export interface GetServiceUrlOutput {
     url: string | null;
 }
+/**
+ * Which file namespace inside the session to read from.
+ * - `workspace` — the user-facing workspace dir produced by session plugins (e.g. `dist/Course.zip`).
+ * - `session` — internal session storage under the SDK's `dataPath/sessions/{sessionId}`.
+ */
+export type SessionFileScope = 'workspace' | 'session';
+export interface CreateSessionFileDownloadUrlInput {
+    instanceId: string;
+    sessionId: string;
+    scope: SessionFileScope;
+    /** Scope-relative path (no leading slash). Path traversal (`..`) is rejected. */
+    path: string;
+    /** TTL in seconds. Default 300, max 3600. */
+    ttlSeconds?: number;
+}
+export interface CreateSessionFileDownloadUrlOutput {
+    /** Signed, time-limited URL serving the file's bytes. */
+    url: string;
+    /** ISO 8601 expiry of the signed URL. */
+    expiresAt: string;
+}
 export declare const platformMethods: {
     'instances.create': import("./rpc-definition").MethodDef<CreateInstanceInput, CreateInstanceOutput>;
     'instances.get': import("./rpc-definition").MethodDef<GetInstanceInput, GetInstanceOutput>;
@@ -248,6 +281,7 @@ export declare const platformMethods: {
     'sessions.publish': import("./rpc-definition").MethodDef<PublishSessionInput, PublishSessionOutput>;
     'tokens.create': import("./rpc-definition").MethodDef<CreateInstanceTokenInput, CreateInstanceTokenOutput>;
     'services.getUrl': import("./rpc-definition").MethodDef<GetServiceUrlInput, GetServiceUrlOutput>;
+    'sessionFiles.createDownloadUrl': import("./rpc-definition").MethodDef<CreateSessionFileDownloadUrlInput, CreateSessionFileDownloadUrlOutput>;
     'bundles.list': import("./rpc-definition").MethodDef<ListBundlesInput, ListBundlesOutput>;
     'bundles.delete': import("./rpc-definition").MethodDef<DeleteBundleInput, DeleteBundleOutput>;
     'resources.create': import("./rpc-definition").MethodDef<CreateResourceInput, CreateResourceOutput>;
@@ -258,3 +292,4 @@ export declare const platformMethods: {
 };
 export type PlatformMethods = typeof platformMethods;
 export type PlatformMethodName = keyof PlatformMethods;
+//# sourceMappingURL=methods.d.ts.map

package/dist/platform/methods.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"methods.d.ts","sourceRoot":"","sources":["../../src/platform/methods.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAMnD,MAAM,WAAW,mBAAmB;IACnC,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,MAAM,CAAA;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,iBAAiB,CAAC,EAAE;QACnB,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;QAClB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;QACtB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;KAClB,CAAA;CACD;AAED,MAAM,WAAW,oBAAoB;IACpC,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,SAAS,GAAG,cAAc,GAAG,OAAO,CAAA;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,gBAAgB;IAChC,UAAU,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,iBAAiB;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,gBAAgB,EAAE,MAAM,CAAA;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACxC,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,sBAAsB;IACtC,UAAU,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,uBAAuB;IACvC,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE;QACR,KAAK,EAAE,YAAY,CAAA;QACnB,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,cAAc,CAAC,EAAE,MAAM,CAAA;KACvB,GAAG,IAAI,CAAA;IACR,QAAQ,EAAE,KAAK,CAAC;QACf,EAAE,EAAE,MAAM,CAAA;QACV,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;QACvB,MAAM,EAAE,MAAM,CAAA;QACd,SAAS,EAAE,MAAM,CAAA;KACjB,CAAC,CAAA;IACF,eAAe,EAAE,KAAK,CAAC;QACtB,KAAK,EAAE,MAAM,CAAA;QACb,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,SAAS,EAAE,MAAM,CAAA;KACjB,CAAC,CAAA;IACF,WAAW,EAAE,KAAK,CAAC;QAClB,IAAI,EAAE,MAAM,CAAA;QACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;QACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;QAC1B,IAAI,EAAE,MAAM,CAAA;KACZ,CAAC,CAAA;CACF;AAED,MAAM,WAAW,oBAAoB;IACpC,UAAU,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,qBAAqB;IACrC,EAAE,EAAE,OAAO,CAAA;CACX;AAED,MAAM,WAAW,kBAAkB;IAClC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,mBAAmB;IACnC,SAAS,EAAE,iBAAiB,EAAE,CAAA;IAC9B,KAAK,EAAE,MAAM,CAAA;CACb;AAMD,MAAM,WAAW,kBAAkB;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,mBAAmB;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,UAAU,GAAG,QAAQ,CAAA;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,iBAAiB;IACjC,UAAU,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,EAAE,KAAK,CAAC;QACf,EAAE,EAAE,MAAM,CAAA;QACV,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;QACvB,MAAM,EAAE,MAAM,CAAA;QACd,SAAS,EAAE,MAAM,CAAA;KACjB,CAAC,CAAA;CACF;AAED,MAAM,WAAW,mBAAmB;IACnC,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,oBAAoB;IACpC,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,OAAO,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;CACd;AAMD,MAAM,WAAW,wBAAwB;IACxC,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAA;CAC9B;AAED,MAAM,WAAW,yBAAyB;IACzC,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACpC;AAMD,MAAM,WAAW,gBAAgB;IAChC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,iBAAiB;IACjC,OAAO,EAAE,KAAK,CAAC;QACd,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;QACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;QAC1B,cAAc,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;QAC/F,SAAS,EAAE,MAAM,CAAA;KACjB,CAAC,CAAA;CACF;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,kBAAkB;IAClC,EAAE,EAAE,OAAO,CAAA;CACX;AAMD,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,oBAAoB;IACpC,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,wBAAwB;IACxC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,yBAAyB;IACzC,UAAU,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,gBAAgB;IAChC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,iBAAiB;IACjC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,cAAc,EAAE;QACf,EAAE,EAAE,MAAM,CAAA;QACV,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;QACpB,IAAI,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;QACtE,SAAS,EAAE,MAAM,CAAA;KACjB,GAAG,IAAI,CAAA;IACR,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,kBAAkB;IAClC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,mBAAmB;IACnC,SAAS,EAAE,iBAAiB,EAAE,CAAA;CAC9B;AAED,MAAM,WAAW,mBAAmB;IACnC,UAAU,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,oBAAoB;IACpC,EAAE,EAAE,OAAO,CAAA;CACX;AAMD,MAAM,WAAW,iBAAiB;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,kBAAkB;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,qBAAqB;IACrC,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,iBAAiB;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,iBAAiB;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,mBAAmB;IACnC,EAAE,EAAE,OAAO,CAAA;CACX;AAMD,MAAM,WAAW,kBAAkB;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,mBAAmB;IACnC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAClB;AAMD;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,SAAS,CAAA;AAEtD,MAAM,WAAW,iCAAiC;IACjD,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,gBAAgB,CAAA;IACvB,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAA;IACZ,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,kCAAkC;IAClD,yDAAyD;IACzD,GAAG,EAAE,MAAM,CAAA;IACX,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAA;CACjB;AAMD,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;CAgC1B,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAA;AACpD,MAAM,MAAM,kBAAkB,GAAG,MAAM,eAAe,CAAA"}

package/dist/platform/methods.js

@@ -0,0 +1,38 @@
+/**
+ * Platform RPC method definitions.
+ *
+ * Single source of truth for all platform API method types.
+ * Shared between worker (server) and client SDK.
+ */
+import { defineMethods, method } from './rpc-definition';
+// ============================================================================
+// Method registry
+// ============================================================================
+export const platformMethods = defineMethods({
+    // Instances
+    'instances.create': method(),
+    'instances.get': method(),
+    'instances.list': method(),
+    'instances.status': method(),
+    'instances.archive': method(),
+    // Sessions
+    'sessions.create': method(),
+    'sessions.list': method(),
+    'sessions.publish': method(),
+    // Tokens
+    'tokens.create': method(),
+    // Services
+    'services.getUrl': method(),
+    // Session files (signed-URL gateway in front of SDK's session/workspace + session/files routes)
+    'sessionFiles.createDownloadUrl': method(),
+    // Bundles
+    'bundles.list': method(),
+    'bundles.delete': method(),
+    // Resources
+    'resources.create': method(),
+    'resources.addRevision': method(),
+    'resources.get': method(),
+    'resources.list': method(),
+    'resources.delete': method(),
+});
+//# sourceMappingURL=methods.js.map

package/dist/platform/methods.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"methods.js","sourceRoot":"","sources":["../../src/platform/methods.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAoVxD,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,eAAe,GAAG,aAAa,CAAC;IAC5C,YAAY;IACZ,kBAAkB,EAAE,MAAM,EAA6C;IACvE,eAAe,EAAE,MAAM,EAAuC;IAC9D,gBAAgB,EAAE,MAAM,EAA2C;IACnE,kBAAkB,EAAE,MAAM,EAAmD;IAC7E,mBAAmB,EAAE,MAAM,EAA+C;IAE1E,WAAW;IACX,iBAAiB,EAAE,MAAM,EAA2C;IACpE,eAAe,EAAE,MAAM,EAAyC;IAChE,kBAAkB,EAAE,MAAM,EAA6C;IAEvE,SAAS;IACT,eAAe,EAAE,MAAM,EAAuD;IAE9E,WAAW;IACX,iBAAiB,EAAE,MAAM,EAA2C;IAEpE,gGAAgG;IAChG,gCAAgC,EAAE,MAAM,EAAyE;IAEjH,UAAU;IACV,cAAc,EAAE,MAAM,EAAuC;IAC7D,gBAAgB,EAAE,MAAM,EAAyC;IAEjE,YAAY;IACZ,kBAAkB,EAAE,MAAM,EAA6C;IACvE,uBAAuB,EAAE,MAAM,EAAuD;IACtF,eAAe,EAAE,MAAM,EAAuC;IAC9D,gBAAgB,EAAE,MAAM,EAA2C;IACnE,kBAAkB,EAAE,MAAM,EAA6C;CACvE,CAAC,CAAA"}

package/dist/platform/rest-client.d.ts

@@ -1,10 +1,16 @@
-import type { CreateInstanceInput, CreateInstanceOutput, GetInstanceOutput, GetInstanceStatusOutput, ListInstancesInput, ListInstancesOutput, ArchiveInstanceOutput, CreateSessionInput, CreateSessionOutput, ListSessionsOutput, PublishSessionInput, PublishSessionOutput, CreateInstanceTokenInput, CreateInstanceTokenOutput, ListBundlesInput, ListBundlesOutput, DeleteBundleOutput, CreateResourceInput, CreateResourceOutput, AddResourceRevisionInput, AddResourceRevisionOutput, GetResourceInput, GetResourceOutput, ListResourcesInput, ListResourcesOutput, DeleteResourceOutput } from './methods';
+import type { CreateInstanceInput, CreateInstanceOutput, GetInstanceOutput, GetInstanceStatusOutput, ListInstancesInput, ListInstancesOutput, ArchiveInstanceOutput, CreateSessionInput, CreateSessionOutput, ListSessionsOutput, PublishSessionInput, PublishSessionOutput, CreateInstanceTokenInput, CreateInstanceTokenOutput, CreateSessionFileDownloadUrlInput, CreateSessionFileDownloadUrlOutput, ListBundlesInput, ListBundlesOutput, DeleteBundleOutput, CreateResourceInput, CreateResourceOutput, AddResourceRevisionInput, AddResourceRevisionOutput, GetResourceInput, GetResourceOutput, ListResourcesInput, ListResourcesOutput, DeleteResourceOutput } from './methods';
 export interface RojClientOptions {
     /** Platform URL (e.g. https://roj.example.com) */
     url: string;
     /** Platform API key */
     apiKey: string;
 }
+export interface SessionRpcInput {
+    instanceId: string;
+    sessionId: string;
+    method: string;
+    input?: Record<string, unknown>;
+}
 export interface RojClient {
     instances: {
         create(input: CreateInstanceInput): Promise<CreateInstanceOutput>;
@@ -17,10 +23,28 @@ export interface RojClient {
         create(input: CreateSessionInput): Promise<CreateSessionOutput>;
         list(instanceId: string): Promise<ListSessionsOutput>;
         publish(input: PublishSessionInput): Promise<PublishSessionOutput>;
+        /**
+         * Call a plugin/session RPC method on a running session.
+         *
+         * Auto-mints and caches an instance token; the cached token is reused until
+         * its expiry minus a small leeway. Suitable for server-to-server callers
+         * that don't have a browser cookie or pre-existing instance token.
+         */
+        rpc<T = unknown>(input: SessionRpcInput): Promise<T>;
     };
     tokens: {
         create(input: CreateInstanceTokenInput): Promise<CreateInstanceTokenOutput>;
     };
+    sessionFiles: {
+        /**
+         * Mint a short-lived signed URL that streams the bytes of a session-bound file
+         * back to the caller. Use after a session plugin has produced an artifact
+         * (e.g. workspace `dist/Course.zip`) and the caller wants to fetch it without
+         * routing through the dev preview proxy. `scope` selects between the workspace
+         * dir and the SDK's session storage.
+         */
+        createDownloadUrl(input: CreateSessionFileDownloadUrlInput): Promise<CreateSessionFileDownloadUrlOutput>;
+    };
     bundles: {
         list(input?: ListBundlesInput): Promise<ListBundlesOutput>;
         delete(input: {
@@ -47,3 +71,4 @@ export interface RojClient {
     };
 }
 export declare function createRojClient(options: RojClientOptions): RojClient;
+//# sourceMappingURL=rest-client.d.ts.map

package/dist/platform/rest-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest-client.d.ts","sourceRoot":"","sources":["../../src/platform/rest-client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACX,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,wBAAwB,EACxB,yBAAyB,EACzB,iCAAiC,EACjC,kCAAkC,EAClC,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,wBAAwB,EACxB,yBAAyB,EACzB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,MAAM,WAAW,CAAA;AAGlB,MAAM,WAAW,gBAAgB;IAChC,kDAAkD;IAClD,GAAG,EAAE,MAAM,CAAA;IACX,uBAAuB;IACvB,MAAM,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,eAAe;IAC/B,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC/B;AAED,MAAM,WAAW,SAAS;IACzB,SAAS,EAAE;QACV,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;QACjE,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;QACnD,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;QAC/D,IAAI,CAAC,KAAK,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;QAC9D,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAA;KAC3D,CAAA;IACD,QAAQ,EAAE;QACT,MAAM,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;QAC/D,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;QACrD,OAAO,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;QAClE;;;;;;WAMG;QACH,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;KACpD,CAAA;IACD,MAAM,EAAE;QACP,MAAM,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAA;KAC3E,CAAA;IACD,YAAY,EAAE;QACb;;;;;;WAMG;QACH,iBAAiB,CAAC,KAAK,EAAE,iCAAiC,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAA;KACxG,CAAA;IACD,OAAO,EAAE;QACR,IAAI,CAAC,KAAK,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAC1D,MAAM,CAAC,KAAK,EAAE;YAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;KACtF,CAAA;IACD,KAAK,EAAE;QACN,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,EAAE,EAAE,IAAI,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KACpJ,CAAA;IACD,SAAS,EAAE;QACV,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;QACjE,WAAW,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAA;QAChF,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;QACxD,IAAI,CAAC,KAAK,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;QAC9D,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;KACzD,CAAA;CACD;AAYD,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,SAAS,CAgHpE"}

package/dist/platform/rest-client.js

@@ -0,0 +1,116 @@
+import { createRpcClient } from './rpc-client';
+import { RojApiError } from './errors';
+// Re-mint instance tokens this many milliseconds before their server-stated expiry.
+// Covers both clock skew between client and server and the latency of an in-flight
+// session RPC that started just before expiry.
+const TOKEN_REFRESH_LEEWAY_MS = 30000;
+export function createRojClient(options) {
+    const rpc = createRpcClient(`${options.url}/api/v1`, {
+        headers: { Authorization: `Bearer ${options.apiKey}` },
+    });
+    async function call(method, input) {
+        const result = await rpc.call(method, input);
+        if (!result.ok)
+            throw new RojApiError(result.error);
+        return result.value;
+    }
+    const instanceTokenCache = new Map();
+    const inflightTokenMint = new Map();
+    async function getInstanceToken(instanceId) {
+        const cached = instanceTokenCache.get(instanceId);
+        if (cached && cached.expiresAtMs - TOKEN_REFRESH_LEEWAY_MS > Date.now()) {
+            return cached.token;
+        }
+        const inflight = inflightTokenMint.get(instanceId);
+        if (inflight)
+            return inflight;
+        const promise = (async () => {
+            try {
+                const fresh = await call('tokens.create', { instanceId });
+                instanceTokenCache.set(instanceId, {
+                    token: fresh.token,
+                    expiresAtMs: new Date(fresh.expiresAt).getTime(),
+                });
+                return fresh.token;
+            }
+            finally {
+                inflightTokenMint.delete(instanceId);
+            }
+        })();
+        inflightTokenMint.set(instanceId, promise);
+        return promise;
+    }
+    async function callSessionRpc(input, retriedAfter401 = false) {
+        const token = await getInstanceToken(input.instanceId);
+        const url = `${options.url}/api/v1/instances/${input.instanceId}/sessions/${input.sessionId}/rpc`;
+        const response = await fetch(url, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                Authorization: `Bearer ${token}`,
+            },
+            body: JSON.stringify({ method: input.method, input: input.input ?? {} }),
+        });
+        // Token may have been revoked or rotated server-side before its stated `expiresAt`.
+        // Evict the cache and retry once with a freshly minted token.
+        if (response.status === 401 && !retriedAfter401) {
+            instanceTokenCache.delete(input.instanceId);
+            return callSessionRpc(input, true);
+        }
+        const body = await response.json().catch(() => null);
+        if (!response.ok || !body || body.ok === false) {
+            const error = body?.error ?? { type: 'transport_error', message: `HTTP ${response.status}` };
+            throw new RojApiError(error);
+        }
+        return body.value;
+    }
+    return {
+        instances: {
+            create: (input) => call('instances.create', input),
+            get: (instanceId) => call('instances.get', { instanceId }),
+            getStatus: (instanceId) => call('instances.status', { instanceId }),
+            list: (input) => call('instances.list', input ?? {}),
+            archive: (instanceId) => call('instances.archive', { instanceId }),
+        },
+        sessions: {
+            create: (input) => call('sessions.create', input),
+            list: (instanceId) => call('sessions.list', { instanceId }),
+            publish: (input) => call('sessions.publish', input),
+            rpc: (input) => callSessionRpc(input),
+        },
+        tokens: {
+            create: (input) => call('tokens.create', input),
+        },
+        sessionFiles: {
+            createDownloadUrl: (input) => call('sessionFiles.createDownloadUrl', input),
+        },
+        bundles: {
+            list: (input) => call('bundles.list', input ?? {}),
+            delete: (input) => call('bundles.delete', input),
+        },
+        files: {
+            upload: async (file, filename) => {
+                const formData = new FormData();
+                formData.append('file', file, filename);
+                const response = await fetch(`${options.url}/api/v1/files/upload`, {
+                    method: 'POST',
+                    headers: { Authorization: `Bearer ${options.apiKey}` },
+                    body: formData,
+                });
+                if (!response.ok) {
+                    const body = await response.json().catch(() => ({ message: response.statusText }));
+                    throw new RojApiError({ type: 'http_error', message: body.error ?? body.message ?? response.statusText });
+                }
+                return response.json();
+            },
+        },
+        resources: {
+            create: (input) => call('resources.create', input),
+            addRevision: (input) => call('resources.addRevision', input),
+            get: (input) => call('resources.get', input),
+            list: (input) => call('resources.list', input ?? {}),
+            delete: (resourceId) => call('resources.delete', { resourceId }),
+        },
+    };
+}
+//# sourceMappingURL=rest-client.js.map

package/dist/platform/rest-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest-client.js","sourceRoot":"","sources":["../../src/platform/rest-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAiC9C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAkEtC,oFAAoF;AACpF,mFAAmF;AACnF,+CAA+C;AAC/C,MAAM,uBAAuB,GAAG,KAAM,CAAA;AAOtC,MAAM,UAAU,eAAe,CAAC,OAAyB;IACxD,MAAM,GAAG,GAAG,eAAe,CAAkB,GAAG,OAAO,CAAC,GAAG,SAAS,EAAE;QACrE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,MAAM,EAAE,EAAE;KACtD,CAAC,CAAA;IAEF,KAAK,UAAU,IAAI,CAClB,MAAS,EACT,KAAsC;QAEtC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAC5C,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACnD,OAAO,MAAM,CAAC,KAAK,CAAA;IACpB,CAAC;IAED,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAuB,CAAA;IACzD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA2B,CAAA;IAC5D,KAAK,UAAU,gBAAgB,CAAC,UAAkB;QACjD,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACjD,IAAI,MAAM,IAAI,MAAM,CAAC,WAAW,GAAG,uBAAuB,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACzE,OAAO,MAAM,CAAC,KAAK,CAAA;QACpB,CAAC;QACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAClD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAA;QAC7B,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC3B,IAAI,CAAC;gBACJ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,EAAE,UAAU,EAAE,CAAC,CAAA;gBACzD,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE;oBAClC,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,WAAW,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;iBAChD,CAAC,CAAA;gBACF,OAAO,KAAK,CAAC,KAAK,CAAA;YACnB,CAAC;oBAAS,CAAC;gBACV,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;YACrC,CAAC;QACF,CAAC,CAAC,EAAE,CAAA;QACJ,iBAAiB,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QAC1C,OAAO,OAAO,CAAA;IACf,CAAC;IAED,KAAK,UAAU,cAAc,CAAI,KAAsB,EAAE,eAAe,GAAG,KAAK;QAC/E,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QACtD,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,GAAG,qBAAqB,KAAK,CAAC,UAAU,aAAa,KAAK,CAAC,SAAS,MAAM,CAAA;QACjG,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACjC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACR,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,EAAE;aAChC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;SACxE,CAAC,CAAA;QACF,oFAAoF;QACpF,8DAA8D;QAC9D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YACjD,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;YAC3C,OAAO,cAAc,CAAI,KAAK,EAAE,IAAI,CAAC,CAAA;QACtC,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAwF,CAAA;QAC3I,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAA;YAC5F,MAAM,IAAI,WAAW,CAAC,KAAK,CAAC,CAAA;QAC7B,CAAC;QACD,OAAO,IAAI,CAAC,KAAU,CAAA;IACvB,CAAC;IAED,OAAO;QACN,SAAS,EAAE;YACV,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC;YAClD,GAAG,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,UAAU,EAAE,CAAC;YAC1D,SAAS,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,UAAU,EAAE,CAAC;YACnE,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC;YACpD,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,UAAU,EAAE,CAAC;SAClE;QACD,QAAQ,EAAE;YACT,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC;YACjD,IAAI,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,UAAU,EAAE,CAAC;YAC3D,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC;YACnD,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC;SACrC;QACD,MAAM,EAAE;YACP,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC;SAC/C;QACD,YAAY,EAAE;YACb,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,gCAAgC,EAAE,KAAK,CAAC;SAC3E;QACD,OAAO,EAAE;YACR,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC;SAChD;QACD,KAAK,EAAE;YACN,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;gBAChC,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAA;gBAC/B,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;gBACvC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,GAAG,sBAAsB,EAAE;oBAClE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,MAAM,EAAE,EAAE;oBACtD,IAAI,EAAE,QAAQ;iBACd,CAAC,CAAA;gBACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAClB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAA;oBAClF,MAAM,IAAI,WAAW,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;gBAC1G,CAAC;gBACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAA;YACvB,CAAC;SACD;QACD,SAAS,EAAE;YACV,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC;YAClD,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,KAAK,CAAC;YAC5D,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC;YAC5C,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC;YACpD,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,UAAU,EAAE,CAAC;SAChE;KACD,CAAA;AACF,CAAC"}

package/dist/platform/rpc-client.d.ts

@@ -24,3 +24,4 @@ export type RpcResult<T> = {
     error: RpcError;
 };
 export declare function createRpcClient<Methods extends Record<string, MethodDef>>(baseUrl: string, options?: RpcClientOptions): RpcClient<Methods>;
+//# sourceMappingURL=rpc-client.d.ts.map

package/dist/platform/rpc-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-client.d.ts","sourceRoot":"","sources":["../../src/platform/rpc-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAe,MAAM,kBAAkB,CAAA;AAEnG,MAAM,WAAW,gBAAgB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,WAAW,CAAC,EAAE,kBAAkB,CAAA;CAChC;AAED,MAAM,WAAW,SAAS,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC;IACnE,IAAI,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,OAAO,EACpC,MAAM,EAAE,CAAC,EACT,KAAK,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,GAC5B,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;CAC/C;AAED,MAAM,MAAM,SAAS,CAAC,CAAC,IACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACtB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAA;CAAE,CAAA;AAEjC,wBAAgB,eAAe,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EACxE,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,gBAAgB,GACxB,SAAS,CAAC,OAAO,CAAC,CAmCpB"}

package/dist/platform/rpc-client.js

@@ -0,0 +1,30 @@
+export function createRpcClient(baseUrl, options) {
+    return {
+        async call(method, input) {
+            const response = await fetch(`${baseUrl}/rpc`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    ...options?.headers,
+                },
+                credentials: options?.credentials,
+                body: JSON.stringify({ method, input }),
+            });
+            const data = (await response.json());
+            if (!response.ok) {
+                return {
+                    ok: false,
+                    error: data.error ?? { type: 'transport_error', message: `HTTP ${response.status}` },
+                };
+            }
+            if (data.ok) {
+                return { ok: true, value: data.value };
+            }
+            return {
+                ok: false,
+                error: data.error ?? { type: 'unknown_error', message: 'Unknown error' },
+            };
+        },
+    };
+}
+//# sourceMappingURL=rpc-client.js.map

package/dist/platform/rpc-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-client.js","sourceRoot":"","sources":["../../src/platform/rpc-client.ts"],"names":[],"mappings":"AA4BA,MAAM,UAAU,eAAe,CAC9B,OAAe,EACf,OAA0B;IAE1B,OAAO;QACN,KAAK,CAAC,IAAI,CACT,MAAS,EACT,KAA8B;YAE9B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,MAAM,EAAE;gBAC9C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACR,cAAc,EAAE,kBAAkB;oBAClC,GAAG,OAAO,EAAE,OAAO;iBACnB;gBACD,WAAW,EAAE,OAAO,EAAE,WAAW;gBACjC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;aACvC,CAAC,CAAA;YAEF,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAgB,CAAA;YAEnD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,OAAO;oBACN,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE;iBACpF,CAAA;YACF,CAAC;YAED,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAiC,EAAE,CAAA;YACnE,CAAC;YAED,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,eAAe,EAAE;aACxE,CAAA;QACF,CAAC;KACD,CAAA;AACF,CAAC"}

package/dist/platform/rpc-definition.d.ts

@@ -37,3 +37,4 @@ export interface RpcError {
     message: string;
     details?: unknown;
 }
+//# sourceMappingURL=rpc-definition.d.ts.map

package/dist/platform/rpc-definition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-definition.d.ts","sourceRoot":"","sources":["../../src/platform/rpc-definition.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,4DAA4D;AAC5D,MAAM,WAAW,SAAS,CAAC,CAAC,GAAG,OAAO,EAAE,CAAC,GAAG,OAAO;IAClD,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IAClB,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;CACnB;AAED,oEAAoE;AACpE,wBAAgB,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAE9C;AAED,4EAA4E;AAC5E,wBAAgB,aAAa,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAEhF;AAED,6CAA6C;AAC7C,MAAM,MAAM,WAAW,CACtB,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EACzC,CAAC,SAAS,MAAM,OAAO,IACpB,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;AAExB,8CAA8C;AAC9C,MAAM,MAAM,YAAY,CACvB,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EACzC,CAAC,SAAS,MAAM,OAAO,IACpB,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;AAEzB,4BAA4B;AAC5B,MAAM,WAAW,UAAU,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM;IACpD,MAAM,EAAE,CAAC,CAAA;IACT,KAAK,EAAE,OAAO,CAAA;CACd;AAED,6BAA6B;AAC7B,MAAM,WAAW,WAAW,CAAC,CAAC,GAAG,OAAO;IACvC,EAAE,EAAE,OAAO,CAAA;IACX,KAAK,CAAC,EAAE,CAAC,CAAA;IACT,KAAK,CAAC,EAAE,QAAQ,CAAA;CAChB;AAED,MAAM,WAAW,QAAQ;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,OAAO,CAAA;CACjB"}

package/dist/platform/rpc-definition.js

@@ -0,0 +1,19 @@
+/**
+ * Type-safe RPC definition system.
+ * No external dependencies — just TypeScript types + minimal runtime.
+ *
+ * Usage:
+ *   const methods = defineMethods({
+ *     'instances.create': method<CreateInput, CreateOutput>(),
+ *     'sessions.list': method<ListInput, ListOutput>(),
+ *   })
+ */
+/** Define a method type. Zero runtime cost — just a type marker. */
+export function method() {
+    return {};
+}
+/** Define a set of methods. Returns the definition object as-is (typed). */
+export function defineMethods(methods) {
+    return methods;
+}
+//# sourceMappingURL=rpc-definition.js.map

package/dist/platform/rpc-definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-definition.js","sourceRoot":"","sources":["../../src/platform/rpc-definition.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAQH,oEAAoE;AACpE,MAAM,UAAU,MAAM;IACrB,OAAO,EAAqB,CAAA;AAC7B,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,aAAa,CAAsC,OAAU;IAC5E,OAAO,OAAO,CAAA;AACf,CAAC"}

package/dist/platform/rpc-server.d.ts

@@ -19,3 +19,4 @@ export interface RpcRouter<Ctx> {
     handle(request: RpcRequest, ctx: Ctx): Promise<RpcResponse>;
 }
 export declare function createRpcRouter<Methods extends Record<string, MethodDef>, Ctx>(_methods: Methods, handlers: MethodHandlers<Methods, Ctx>): RpcRouter<Ctx>;
+//# sourceMappingURL=rpc-server.d.ts.map

package/dist/platform/rpc-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-server.d.ts","sourceRoot":"","sources":["../../src/platform/rpc-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAY,UAAU,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAE/G,MAAM,MAAM,aAAa,CACxB,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EACzC,CAAC,SAAS,MAAM,OAAO,EACvB,GAAG,IACA,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;AAEnF,MAAM,MAAM,cAAc,CACzB,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EACzC,GAAG,IACA;KACF,CAAC,IAAI,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC;CACpD,CAAA;AAED,MAAM,WAAW,SAAS,CAAC,GAAG;IAC7B,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;CAC3D;AAED,wBAAgB,eAAe,CAC9B,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EACzC,GAAG,EAEH,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,GACpC,SAAS,CAAC,GAAG,CAAC,CAsBhB"}

package/dist/platform/rpc-server.js

@@ -0,0 +1,24 @@
+export function createRpcRouter(_methods, handlers) {
+    return {
+        async handle(request, ctx) {
+            const handler = handlers[request.method];
+            if (!handler) {
+                return {
+                    ok: false,
+                    error: { type: 'method_not_found', message: `Unknown method: ${request.method}` },
+                };
+            }
+            try {
+                const result = await handler(request.input, ctx);
+                return { ok: true, value: result };
+            }
+            catch (error) {
+                const rpcError = error instanceof Error
+                    ? { type: 'handler_error', message: error.message }
+                    : { type: 'unknown_error', message: String(error) };
+                return { ok: false, error: rpcError };
+            }
+        },
+    };
+}
+//# sourceMappingURL=rpc-server.js.map

package/dist/platform/rpc-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-server.js","sourceRoot":"","sources":["../../src/platform/rpc-server.ts"],"names":[],"mappings":"AA+BA,MAAM,UAAU,eAAe,CAI9B,QAAiB,EACjB,QAAsC;IAEtC,OAAO;QACN,KAAK,CAAC,MAAM,CAAC,OAAmB,EAAE,GAAQ;YACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAuB,CAAC,CAAA;YACzD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;oBACN,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,mBAAmB,OAAO,CAAC,MAAM,EAAE,EAAE;iBACjF,CAAA;YACF,CAAC;YAED,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,KAAY,EAAE,GAAG,CAAC,CAAA;gBACvD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,QAAQ,GAAa,KAAK,YAAY,KAAK;oBAChD,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;oBACnD,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;gBACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAA;YACtC,CAAC;QACF,CAAC;KACD,CAAA;AACF,CAAC"}

package/dist/platform/sandbox-state.d.ts

@@ -1 +1,2 @@
 export type SandboxState = 'stopped' | 'starting' | 'running' | 'pausing' | 'paused' | 'failed';
+//# sourceMappingURL=sandbox-state.d.ts.map

package/dist/platform/sandbox-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-state.d.ts","sourceRoot":"","sources":["../../src/platform/sandbox-state.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAA"}

package/dist/platform/sandbox-state.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sandbox-state.js.map

package/dist/platform/sandbox-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-state.js","sourceRoot":"","sources":["../../src/platform/sandbox-state.ts"],"names":[],"mappings":""}

package/dist/platform/urls.d.ts

@@ -32,3 +32,4 @@ export declare function buildWsUrl({ platformUrl, instanceId, sessionId, token }
  * Build the RPC base URL for a roj instance.
  */
 export declare function buildApiBaseUrl(platformUrl: string, instanceId: string): string;
+//# sourceMappingURL=urls.d.ts.map

package/dist/platform/urls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"urls.d.ts","sourceRoot":"","sources":["../../src/platform/urls.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,MAAM,WAAW,sBAAsB;IACtC,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,CAAA;IAClB,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,sBAAsB,GAAG,MAAM,CAapH;AAED,MAAM,WAAW,iBAAiB;IACjC,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;CACb;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,iBAAiB,GAAG,MAAM,CAMnG;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAE/E"}

package/dist/platform/urls.js

@@ -0,0 +1,42 @@
+/**
+ * Convert an instance UUID to its full 32-char hex representation (no hyphens, lowercase).
+ */
+export function instanceIdToHex(instanceId) {
+    return instanceId.replace(/-/g, '').toLowerCase();
+}
+/**
+ * Build a dev preview URL for a service running in a roj sandbox.
+ *
+ * Production: https://dev-{slug}-{code}.{baseDomain}/
+ * Local dev:  {platformUrl}/api/v1/instances/{id}/preview/{code}/
+ */
+export function buildPreviewUrl({ instanceId, code, baseDomain, token, platformUrl }) {
+    // Cloudflare quick tunnels are already subdomains — can't nest further
+    if (baseDomain.includes('trycloudflare.com') && platformUrl) {
+        const base = `${platformUrl}/api/v1/instances/${instanceId}/preview/${code}`;
+        return token ? `${base}/?token=${encodeURIComponent(token)}` : base;
+    }
+    // Subdomain-based: dev-{hex}-{code}.{baseDomain}
+    // Works on localhost (*.localhost resolves to 127.0.0.1) and production
+    const hex = instanceIdToHex(instanceId);
+    const protocol = baseDomain.includes('localhost') ? 'http' : 'https';
+    const base = `${protocol}://dev-${hex}-${code}.${baseDomain}`;
+    return token ? `${base}/?token=${encodeURIComponent(token)}` : base;
+}
+/**
+ * Build a WebSocket URL for connecting to a roj instance.
+ */
+export function buildWsUrl({ platformUrl, instanceId, sessionId, token }) {
+    const url = new URL(`/api/v1/instances/${instanceId}/ws`, platformUrl);
+    url.protocol = url.protocol === 'https:' ? 'wss:' : 'ws:';
+    url.searchParams.set('token', token);
+    url.searchParams.set('sessionId', sessionId);
+    return url.toString();
+}
+/**
+ * Build the RPC base URL for a roj instance.
+ */
+export function buildApiBaseUrl(platformUrl, instanceId) {
+    return `${platformUrl}/api/v1/instances/${instanceId}`;
+}
+//# sourceMappingURL=urls.js.map

package/dist/platform/urls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"urls.js","sourceRoot":"","sources":["../../src/platform/urls.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkB;IACjD,OAAO,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;AAClD,CAAC;AAYD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAA0B;IAC3G,uEAAuE;IACvE,IAAI,UAAU,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,WAAW,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,GAAG,WAAW,qBAAqB,UAAU,YAAY,IAAI,EAAE,CAAA;QAC5E,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,WAAW,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IACpE,CAAC;IAED,iDAAiD;IACjD,wEAAwE;IACxE,MAAM,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;IACpE,MAAM,IAAI,GAAG,GAAG,QAAQ,UAAU,GAAG,IAAI,IAAI,IAAI,UAAU,EAAE,CAAA;IAC7D,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,WAAW,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AACpE,CAAC;AASD;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAqB;IAC1F,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,qBAAqB,UAAU,KAAK,EAAE,WAAW,CAAC,CAAA;IACtE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAA;IACzD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACpC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;IAC5C,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAA;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,WAAmB,EAAE,UAAkB;IACtE,OAAO,GAAG,WAAW,qBAAqB,UAAU,EAAE,CAAA;AACvD,CAAC"}

package/package.json

@@ -1,23 +1,23 @@
 {
 	"name": "@roj-ai/client",
-	"version": "0.1.3",
+	"version": "0.1.5",
 	"type": "module",
-	"main": "./src/index.ts",
+	"main": "./dist/index.js",
 	"exports": {
 		".": {
 			"types": "./dist/index.d.ts",
-			"import": "./src/index.ts",
-			"default": "./src/index.ts"
+			"import": "./dist/index.js",
+			"default": "./dist/index.js"
 		},
 		"./api": {
 			"types": "./dist/api/client.d.ts",
-			"import": "./src/api/client.ts",
-			"default": "./src/api/client.ts"
+			"import": "./dist/api/client.js",
+			"default": "./dist/api/client.js"
 		},
 		"./platform": {
 			"types": "./dist/platform/index.d.ts",
-			"import": "./src/platform/index.ts",
-			"default": "./src/platform/index.ts"
+			"import": "./dist/platform/index.js",
+			"default": "./dist/platform/index.js"
 		}
 	},
 	"files": [
@@ -40,7 +40,7 @@
 		"type-check": "tsc --noEmit"
 	},
 	"dependencies": {
-		"@roj-ai/shared": "^0.1.3"
+		"@roj-ai/shared": "^0.1.5"
 	},
 	"devDependencies": {
 		"typescript": "5.9.3"

package/src/platform/index.ts

@@ -31,7 +31,7 @@ export type { BuildPreviewUrlOptions, BuildWsUrlOptions } from './urls'
 
 // REST client
 export { createRojClient } from './rest-client'
-export type { RojClient, RojClientOptions } from './rest-client'
+export type { RojClient, RojClientOptions, SessionRpcInput } from './rest-client'
 
 // Errors
 export { RojApiError } from './errors'

package/src/platform/methods.ts

@@ -151,11 +151,23 @@ export interface CreateInstanceTokenInput {
 	origin?: string
 	expiresIn?: number // token TTL in seconds (default 24h, max 7d)
 	meta?: Record<string, unknown> // custom claims propagated to plugin method caller context
+	/**
+	 * Service codes (e.g. ['dev']) for which the platform should also build a
+	 * ready-to-use preview URL with the freshly minted token baked in.
+	 * Saves callers from having to know `baseDomain` or compose the URL.
+	 */
+	previewServiceCodes?: string[]
 }
 
 export interface CreateInstanceTokenOutput {
 	token: string
 	expiresAt: string
+	/**
+	 * Preview URLs keyed by service code, populated when `previewServiceCodes`
+	 * was set on the request. Each URL carries the token in `?token=` and is
+	 * suitable for direct use as an iframe `src`.
+	 */
+	previewUrls?: Record<string, string>
 }
 
 // ============================================================================
@@ -304,6 +316,34 @@ export interface GetServiceUrlOutput {
 	url: string | null
 }
 
+// ============================================================================
+// Session files
+// ============================================================================
+
+/**
+ * Which file namespace inside the session to read from.
+ * - `workspace` — the user-facing workspace dir produced by session plugins (e.g. `dist/Course.zip`).
+ * - `session` — internal session storage under the SDK's `dataPath/sessions/{sessionId}`.
+ */
+export type SessionFileScope = 'workspace' | 'session'
+
+export interface CreateSessionFileDownloadUrlInput {
+	instanceId: string
+	sessionId: string
+	scope: SessionFileScope
+	/** Scope-relative path (no leading slash). Path traversal (`..`) is rejected. */
+	path: string
+	/** TTL in seconds. Default 300, max 3600. */
+	ttlSeconds?: number
+}
+
+export interface CreateSessionFileDownloadUrlOutput {
+	/** Signed, time-limited URL serving the file's bytes. */
+	url: string
+	/** ISO 8601 expiry of the signed URL. */
+	expiresAt: string
+}
+
 // ============================================================================
 // Method registry
 // ============================================================================
@@ -327,6 +367,9 @@ export const platformMethods = defineMethods({
 	// Services
 	'services.getUrl': method<GetServiceUrlInput, GetServiceUrlOutput>(),
 
+	// Session files (signed-URL gateway in front of SDK's session/workspace + session/files routes)
+	'sessionFiles.createDownloadUrl': method<CreateSessionFileDownloadUrlInput, CreateSessionFileDownloadUrlOutput>(),
+
 	// Bundles
 	'bundles.list': method<ListBundlesInput, ListBundlesOutput>(),
 	'bundles.delete': method<DeleteBundleInput, DeleteBundleOutput>(),

package/src/platform/rest-client.ts

@@ -16,6 +16,8 @@ import type {
 	PublishSessionOutput,
 	CreateInstanceTokenInput,
 	CreateInstanceTokenOutput,
+	CreateSessionFileDownloadUrlInput,
+	CreateSessionFileDownloadUrlOutput,
 	ListBundlesInput,
 	ListBundlesOutput,
 	DeleteBundleOutput,
@@ -38,6 +40,13 @@ export interface RojClientOptions {
 	apiKey: string
 }
 
+export interface SessionRpcInput {
+	instanceId: string
+	sessionId: string
+	method: string
+	input?: Record<string, unknown>
+}
+
 export interface RojClient {
 	instances: {
 		create(input: CreateInstanceInput): Promise<CreateInstanceOutput>
@@ -50,10 +59,28 @@ export interface RojClient {
 		create(input: CreateSessionInput): Promise<CreateSessionOutput>
 		list(instanceId: string): Promise<ListSessionsOutput>
 		publish(input: PublishSessionInput): Promise<PublishSessionOutput>
+		/**
+		 * Call a plugin/session RPC method on a running session.
+		 *
+		 * Auto-mints and caches an instance token; the cached token is reused until
+		 * its expiry minus a small leeway. Suitable for server-to-server callers
+		 * that don't have a browser cookie or pre-existing instance token.
+		 */
+		rpc<T = unknown>(input: SessionRpcInput): Promise<T>
 	}
 	tokens: {
 		create(input: CreateInstanceTokenInput): Promise<CreateInstanceTokenOutput>
 	}
+	sessionFiles: {
+		/**
+		 * Mint a short-lived signed URL that streams the bytes of a session-bound file
+		 * back to the caller. Use after a session plugin has produced an artifact
+		 * (e.g. workspace `dist/Course.zip`) and the caller wants to fetch it without
+		 * routing through the dev preview proxy. `scope` selects between the workspace
+		 * dir and the SDK's session storage.
+		 */
+		createDownloadUrl(input: CreateSessionFileDownloadUrlInput): Promise<CreateSessionFileDownloadUrlOutput>
+	}
 	bundles: {
 		list(input?: ListBundlesInput): Promise<ListBundlesOutput>
 		delete(input: { bundleId?: string; bundleSlug?: string }): Promise<DeleteBundleOutput>
@@ -70,6 +97,16 @@ export interface RojClient {
 	}
 }
 
+// Re-mint instance tokens this many milliseconds before their server-stated expiry.
+// Covers both clock skew between client and server and the latency of an in-flight
+// session RPC that started just before expiry.
+const TOKEN_REFRESH_LEEWAY_MS = 30_000
+
+interface CachedToken {
+	token: string
+	expiresAtMs: number
+}
+
 export function createRojClient(options: RojClientOptions): RojClient {
 	const rpc = createRpcClient<PlatformMethods>(`${options.url}/api/v1`, {
 		headers: { Authorization: `Bearer ${options.apiKey}` },
@@ -84,6 +121,56 @@ export function createRojClient(options: RojClientOptions): RojClient {
 		return result.value
 	}
 
+	const instanceTokenCache = new Map<string, CachedToken>()
+	const inflightTokenMint = new Map<string, Promise<string>>()
+	async function getInstanceToken(instanceId: string): Promise<string> {
+		const cached = instanceTokenCache.get(instanceId)
+		if (cached && cached.expiresAtMs - TOKEN_REFRESH_LEEWAY_MS > Date.now()) {
+			return cached.token
+		}
+		const inflight = inflightTokenMint.get(instanceId)
+		if (inflight) return inflight
+		const promise = (async () => {
+			try {
+				const fresh = await call('tokens.create', { instanceId })
+				instanceTokenCache.set(instanceId, {
+					token: fresh.token,
+					expiresAtMs: new Date(fresh.expiresAt).getTime(),
+				})
+				return fresh.token
+			} finally {
+				inflightTokenMint.delete(instanceId)
+			}
+		})()
+		inflightTokenMint.set(instanceId, promise)
+		return promise
+	}
+
+	async function callSessionRpc<T>(input: SessionRpcInput, retriedAfter401 = false): Promise<T> {
+		const token = await getInstanceToken(input.instanceId)
+		const url = `${options.url}/api/v1/instances/${input.instanceId}/sessions/${input.sessionId}/rpc`
+		const response = await fetch(url, {
+			method: 'POST',
+			headers: {
+				'Content-Type': 'application/json',
+				Authorization: `Bearer ${token}`,
+			},
+			body: JSON.stringify({ method: input.method, input: input.input ?? {} }),
+		})
+		// Token may have been revoked or rotated server-side before its stated `expiresAt`.
+		// Evict the cache and retry once with a freshly minted token.
+		if (response.status === 401 && !retriedAfter401) {
+			instanceTokenCache.delete(input.instanceId)
+			return callSessionRpc<T>(input, true)
+		}
+		const body = await response.json().catch(() => null) as { ok?: boolean; value?: unknown; error?: { type: string; message: string } } | null
+		if (!response.ok || !body || body.ok === false) {
+			const error = body?.error ?? { type: 'transport_error', message: `HTTP ${response.status}` }
+			throw new RojApiError(error)
+		}
+		return body.value as T
+	}
+
 	return {
 		instances: {
 			create: (input) => call('instances.create', input),
@@ -96,10 +183,14 @@ export function createRojClient(options: RojClientOptions): RojClient {
 			create: (input) => call('sessions.create', input),
 			list: (instanceId) => call('sessions.list', { instanceId }),
 			publish: (input) => call('sessions.publish', input),
+			rpc: (input) => callSessionRpc(input),
 		},
 		tokens: {
 			create: (input) => call('tokens.create', input),
 		},
+		sessionFiles: {
+			createDownloadUrl: (input) => call('sessionFiles.createDownloadUrl', input),
+		},
 		bundles: {
 			list: (input) => call('bundles.list', input ?? {}),
 			delete: (input) => call('bundles.delete', input),