agentic-canvas 0.12.1 → 0.14.0

package/dist/live.js

@@ -1,12 +1,12 @@
 import {
   drawFlow,
   toSvg
-} from "./chunk-EDQNA2SU.js";
+} from "./chunk-BKG3FXX3.js";
 import {
   Board,
   CanvasError,
   readBoard
-} from "./chunk-MVWUIBGV.js";
+} from "./chunk-ZP6BLCB7.js";
 
 // src/live.ts
 import { parsePrincipal } from "agentic-identity";

package/dist/principal-blhsFbdS.d.ts

@@ -0,0 +1,23 @@
+import { PrincipalKind } from 'agentic-identity';
+import { z } from 'zod';
+
+/**
+ * The actor of a new write. The rule is the identity kernel's `parsePrincipal`: a known kind, and an id of 1 to 128
+ * characters from A-Z, a-z, 0-9, ".", "_" and "-". The Worker, the CLI and the SDK all use it.
+ */
+declare const principalSchema: z.ZodPipe<z.ZodObject<{
+    kind: z.ZodString;
+    id: z.ZodString;
+}, z.core.$strict>, z.ZodTransform<{
+    kind: PrincipalKind;
+    id: string;
+}, {
+    kind: string;
+    id: string;
+}>>;
+type Principal = {
+    kind: PrincipalKind;
+    id: string;
+};
+
+export { type Principal as P, principalSchema as p };

package/dist/{read-UIJlrkwx.d.ts → read-DeS2Zaz8.d.ts}

@@ -1,25 +1,5 @@
 import * as Y from 'yjs';
-import { PrincipalKind } from 'agentic-identity';
-import { z } from 'zod';
-
-/**
- * The actor of a new write. The rule is the identity kernel's `parsePrincipal`: a known kind, and an id of 1 to 128
- * characters from A-Z, a-z, 0-9, ".", "_" and "-". The Worker, the CLI and the SDK all use it.
- */
-declare const principalSchema: z.ZodPipe<z.ZodObject<{
-    kind: z.ZodString;
-    id: z.ZodString;
-}, z.core.$strict>, z.ZodTransform<{
-    kind: PrincipalKind;
-    id: string;
-}, {
-    kind: string;
-    id: string;
-}>>;
-type Principal = {
-    kind: PrincipalKind;
-    id: string;
-};
+import { P as Principal } from './principal-blhsFbdS.js';
 
 type ErrorCode = "INVALID" | "DUPLICATE_ID" | "NOT_FOUND" | "BAD_REFERENCE" | "LIMIT" | "UNAVAILABLE" | "FORBIDDEN";
 declare class CanvasError extends Error {
@@ -132,6 +112,28 @@ declare class Board {
     update(elementId: string, patch: unknown, actor: Principal): CanvasElement;
     /** Shift an element, or a whole group. Returns the ids that moved. Bound connector ends follow their shapes. */
     move(elementId: string, dx: number, dy: number, actor: Principal): string[];
+    /** Every stored entry as it is, valid or not, with its key as `id`. */
+    rawElements(): Record<string, unknown>[];
+    /**
+     * The raw stored elements that `who` made (`author`) and the ids of those that `who` last edited but did not make.
+     * It reads entries as they are, with no element checks, so a damaged entry still shows. Account export uses it.
+     */
+    stampedBy(who: Principal): {
+        authored: Record<string, unknown>[];
+        edited: string[];
+        titleBy: boolean;
+    };
+    /**
+     * Erase `who` from the board. An element they made is deleted alone: its members go to its parent group, and a
+     * connector of someone else that was bound to it goes too, because it would be hidden. An element they only edited
+     * keeps its content, and its editor becomes `(erased)`. A title they set is cleared. Idempotent. Returns the counts.
+     */
+    eraseStamps(who: Principal, erased: Principal): {
+        authored: number;
+        edited: number;
+        dangling: number;
+        title: boolean;
+    };
     /** Delete an element. A shape takes its connectors and a group takes its members. Returns the ids removed. */
     remove(elementId: string): string[];
     group(ids: string[], actor: Principal, groupId?: string): Group;
@@ -181,4 +183,4 @@ interface BoardData {
 /** The board as plain data for an agent. Reads only. Embedded image bytes are left out. */
 declare function readBoard(board: Board): BoardData;
 
-export { Board as B, type Connector as C, type Endpoint as E, type Group as G, MAX_ELEMENTS as M, type NodeData as N, type Principal as P, type Shape as S, type BoardData as a, type CanvasElement as b, type ShapeType as c, CanvasError as d, type EdgeData as e, type ErrorCode as f, MAX_TEXT as g, SHAPE_TYPES as h, principalSchema as p, readBoard as r };
+export { Board as B, type Connector as C, type Endpoint as E, type Group as G, MAX_ELEMENTS as M, type NodeData as N, type Shape as S, type BoardData as a, type CanvasElement as b, type ShapeType as c, CanvasError as d, type EdgeData as e, type ErrorCode as f, MAX_TEXT as g, SHAPE_TYPES as h, readBoard as r };

package/dist/{service-ojpxVNVl.d.ts → service-BNEH2Z12.d.ts}

@@ -1,5 +1,6 @@
-import { c as ShapeType, B as Board, P as Principal, a as BoardData, S as Shape, C as Connector, b as CanvasElement } from './read-UIJlrkwx.js';
+import { c as ShapeType, B as Board, a as BoardData, S as Shape, C as Connector, b as CanvasElement } from './read-DeS2Zaz8.js';
 import { Store } from 'agentic-identity';
+import { P as Principal } from './principal-blhsFbdS.js';
 
 declare const MAX_FLOW_NODES = 500;
 declare const MAX_FLOW_EDGES = 2000;

package/dist/worker.d.ts

@@ -1,12 +1,21 @@
-import { Store, PrincipalContext, Action, Grant, InviteSummary, Blobs } from 'agentic-identity';
+import { Store, PrincipalContext, Action, Grant, InviteSummary, Role as Role$1, Blobs } from 'agentic-identity';
 import { Realtime } from 'agentic-realtime';
 import { D1Like, R2Like } from 'agentic-identity/cloudflare';
 import { Hono } from 'hono';
-import { P as Principal } from './read-UIJlrkwx.js';
-import { C as CanvasService } from './service-ojpxVNVl.js';
-import 'yjs';
+import { P as Principal } from './principal-blhsFbdS.js';
+import { C as CanvasService } from './service-BNEH2Z12.js';
 import 'zod';
+import './read-DeS2Zaz8.js';
+import 'yjs';
 
+/** A share link without its token. `revokedAt` is set once the link is revoked. */
+interface LinkSummary {
+    id: string;
+    role: Exclude<Role$1, "owner">;
+    signedInOnly: boolean;
+    expiresAt?: number;
+    revokedAt?: number;
+}
 /**
  * Who may do what on a board. A board is an identity resource of type `canvas`. The roles, the grants, the invites,
  * and the links are those of agentic-identity: this class checks input and maps its failures to `CanvasError`.
@@ -50,7 +59,7 @@ declare class CanvasAccess {
     }): Promise<{
         ok: true;
     }>;
-    /** The grants and the invites on a board. An invite never shows its email. Links are not listed: a token shows once. */
+    /** The grants and the invites on a board. An invite never shows its email. `listLinks` lists the links, and never a token. */
     list(ctx: PrincipalContext, id: string): Promise<{
         grants: Grant[];
         invites: InviteSummary[];
@@ -76,6 +85,12 @@ declare class CanvasAccess {
         id: string;
         token: string;
     }>;
+    /** The links of a board. A summary never holds the token or its hash. Needs an owner. */
+    listLinks(ctx: PrincipalContext, id: string): Promise<{
+        links: LinkSummary[];
+        truncated?: true;
+        skipped?: number;
+    }>;
     /** Revoke a link of this board. A link of another board is NOT_FOUND here, even for an owner of both. */
     revokeLink(ctx: PrincipalContext, id: string, linkId: string): Promise<{
         ok: true;

package/dist/worker.js

@@ -5,11 +5,12 @@ import {
   identify,
   sniffImage,
   worker_default
-} from "./chunk-5II2WZIL.js";
-import "./chunk-Z6KLGAFP.js";
+} from "./chunk-5QUL3URJ.js";
+import "./chunk-A2F73EQJ.js";
+import "./chunk-GLNF43N4.js";
 import "./chunk-NWQED42L.js";
-import "./chunk-EDQNA2SU.js";
-import "./chunk-MVWUIBGV.js";
+import "./chunk-BKG3FXX3.js";
+import "./chunk-ZP6BLCB7.js";
 export {
   WS_PROTOCOL,
   authenticate,

package/llms.txt

@@ -6,11 +6,11 @@ Keywords: whiteboard,canvas,diagrams,drawing,collaboration,agents,mcp,cli.
 
 - SDK: import { Board, drawFlow, readBoard, toSvg } from "agentic-canvas".
 - Exports: the README "Exports" section lists every name of each entry point: agentic-canvas, /client, /file-store, /live, /worker and /live-worker.
-- CLI: agentic-canvas new|list|read|add|connect|update|move|rm|delete|flow|export, and with CANVAS_SERVER: access|grant|revoke|invite. MCP tools for sharing: list_access, grant_access, revoke_access, create_invite.
+- CLI: agentic-canvas new|list|read|add|connect|update|move|rm|delete|flow|export, and with CANVAS_SERVER: access|grant|revoke|invite|links|link|revoke-link. MCP tools for sharing: list_access, grant_access, revoke_access, create_invite, list_links, create_link, revoke_link.
 - UI: the Worker serves a web UI at its root (run `npm run build`, then `wrangler dev`). A person signs in with a bearer token: an agentic-identity credential (scope canvas:write or canvas:read). A static CANVAS_API_TOKENS list works only with CANVAS_UNSAFE_STATIC_TOKENS=1 (dev).
 - Live: set CANVAS_SERVER and CANVAS_TOKEN, and the CLI and `agentic-canvas mcp` edit the board in its live room.
 - SDK: import { LiveBoard, LiveService } from "agentic-canvas/live".
-- SDK: import { createClient, CanvasApiError } from "agentic-canvas/client". It calls the Worker API with fetch. Methods: me, listBoards, createBoard, readBoard, deleteBoard, exportSvg, addShape, addConnector, drawFlow, update, move, remove, access, grant, revoke, invite, uploadImage, getImage, state, checkpoint. A failure throws CanvasApiError with `code` and `status`. No retries.
+- SDK: import { createClient, CanvasApiError } from "agentic-canvas/client". It calls the Worker API with fetch. Methods: me, listBoards, createBoard, readBoard, deleteBoard, exportSvg, addShape, addConnector, drawFlow, update, move, remove, access, grant, revoke, invite, links, createLink, revokeLink, uploadImage, getImage, state, checkpoint. A failure throws CanvasApiError with `code` and `status`. No retries.
 - UI: import { mount } from "agentic-canvas/ui"; import "agentic-canvas/ui.css" (with agentic-design/styles.css). mount(element, { boardId, client, principal: { kind, name, role, id? }, readOnly?, room?: { baseUrl, token } }) (or host: { doc, presence?, status?, onStatus? } instead of client and room; in host mode id (default name) must be letters, digits, . _ -, to edit the app's own Yjs document with no HTTP call) renders the board and returns { update(options), unmount() }. BoardEditor is the same as a React component. React 19 is a peer dependency.
 
 ## Docs

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-canvas",
-  "version": "0.12.1",
+  "version": "0.14.0",
   "description": "A shared whiteboard for diagrams, drawn by people and agents.",
   "keywords": [
     "whiteboard",
@@ -44,6 +44,10 @@
       "types": "./dist/worker.d.ts",
       "import": "./dist/worker.js"
     },
+    "./account": {
+      "types": "./dist/account.d.ts",
+      "import": "./dist/account.js"
+    },
     "./live": {
       "types": "./dist/live.d.ts",
       "import": "./dist/live.js"