@verentis/sdk 0.2.5 → 0.2.6

package/dist/index.cjs

@@ -171,6 +171,7 @@ var ContextModule = class {
   _apiUrl = null;
   _application = null;
   _installation = null;
+  _grants = null;
   /** The current workspace */
   get workspace() {
     if (!this._workspace) {
@@ -217,6 +218,21 @@ var ContextModule = class {
   get installation() {
     return this._installation ? { ...this._installation } : null;
   }
+  /**
+   * The boundaries of a brokered token (canvas documents), as the host sent them with the token; `null` when the
+   * token is not boundary-confined by a broker (or in standalone mode).
+   */
+  get grants() {
+    return this._grants ? this._grants.map((grant) => ({ ...grant })) : null;
+  }
+  /** Update the token's grants from the host's init or token refresh message */
+  setGrants(grants) {
+    if (!Array.isArray(grants)) {
+      this._grants = null;
+      return;
+    }
+    this._grants = grants.filter((grant) => typeof grant === "object" && grant !== null && typeof grant.type === "string" && typeof grant.identifier === "string" && typeof grant.path === "string" && grant.path.startsWith("/") && (grant.mode === "read" || grant.mode === "write") && typeof grant.source === "string").map((grant) => ({ type: grant.type, identifier: grant.identifier, path: grant.path, mode: grant.mode, source: grant.source }));
+  }
   /** Update context from the host's init message */
   setFromAppContext(ctx) {
     if (ctx.application !== void 0 && (typeof ctx.application !== "object" || ctx.application === null || typeof ctx.application.manifestPath !== "string" || !ctx.application.manifestPath.startsWith("/") || typeof ctx.application.manifestNodeId !== "string" || !ctx.application.manifestNodeId.trim() || typeof ctx.application.branch !== "string" || !ctx.application.branch || ctx.application.branch !== ctx.application.branch.trim().toLowerCase() || /[\u0000-\u001f\u007f]/.test(ctx.application.branch))) {
@@ -1744,6 +1760,10 @@ var VerentisClient = class {
     bridgeAuth.setHostOrigin(hostOrigin);
     bridgeAuth.setToken(token);
     this.context.setFromAppContext(context);
+    this.context.setGrants(token.grants);
+    this.bridge.on("verentis:token:refreshed", (message) => {
+      if (message.type === "verentis:token:refreshed") this.context.setGrants(message.token?.grants);
+    });
     const http = new HttpTransport(
       context.apiUrl,
       bridgeAuth,