agentic-canvas 0.14.3 → 0.15.1

package/README.md

@@ -7,7 +7,7 @@
 
 A shared whiteboard for diagrams, drawn by people and agents.
 
-> Status: 0.14.3. The board model, the agent operations, the exports, the CLI, the
+> Status: 0.15.0. The board model, the agent operations, the exports, the CLI, the
 > MCP server, a small Worker API, and live co-editing work. The CLI, the MCP server,
 > and the SDK can join a live room. A remote client calls the Worker API. A small web UI, served by the Worker, is new in 0.4.0.
 > The package exports `agentic-canvas/ui`, a board view you can mount in your own app, new in 0.5.0.
@@ -247,6 +247,21 @@ const data = await canvasAccount.exportAccount({ kind: "human", id: "ada" }, { s
 const counts = await canvasAccount.eraseAccount({ kind: "human", id: "ada" }, { store, saveRoom, eraseRoom });
 ```
 
+Set `resourceType` (default `canvas`) and `collection` (default `boards`) to match the host. Board ids must still use 1 to 64 ASCII letters, digits, underscores, or hyphens, and must not start and end with two underscores. This rule also applies to custom resource types and external content sources. The output collection names stay the same. By default, rows without an `update` field are skipped. Give `isBoard(id, data)` to select rows by a host kind field. Rows of the configured resource type are always selected, so damaged personal data cannot be skipped. Selected rows that do not decode still fail with `INVALID`. Shared-board writes keep other row fields. Each scan reads the sharing resource for every stored row to check its type. An erase scans the collection, then reads stamped boards again inside transactions. Allow for these reads on large collections.
+
+```ts
+const deps = {
+  store,
+  resourceType: "drawing",
+  collection: "drawings",
+  isBoard: (_id: string, row: Readonly<Record<string, unknown>>) => row.kind === "drawing",
+};
+const data = await canvasAccount.exportAccount(subject, deps);
+await canvasAccount.eraseAccount(subject, deps);
+```
+
+For content held outside the Store, give `contentSource: { exportContent(id), eraseContent(id) }`. Both methods return promises. The export method returns JSON; each sole-owned board exports as `{ id, content }`. Content must use arrays and plain objects from the current realm (with `Object.prototype` or a null prototype). The export rejects `undefined` values, functions, symbols, class instances, and non-finite numbers, including nested values. A `toJSON()` method can return supported JSON, so dates export as strings. The erase method deletes its content before sharing records go. This mode ignores `collection` and `isBoard`, does not read or write the content collection, and does not call `saveRoom` or `eraseRoom`. It uses sharing records to find sole-owned boards. It still exports and erases grants, invites, and audit data for the configured resource type. It does not inspect or scrub stamps in shared-board content: the host must handle that data separately. For a room backend, the methods can export room history and delete the room. Methods must tolerate retries, including missing content. A rejected method rejects the account call; earlier changes can remain. Sharing records for a failed content delete stay so a retry can finish. Stop writes during the operation.
+
 The export is plain JSON in the collections `boards`, `grants`, `invites`, `authored_elements`, `edited_elements`, `titles`, and `audit`. It has no format or time. The erase returns a count for each name.
 
 - A board that the subject alone owns is deleted with its grants, invites, links, and audit entries. The erase calls `eraseRoom(boardId)` first, as the Worker does.

package/dist/account.d.ts

@@ -1,11 +1,28 @@
-import { Store, Json } from 'agentic-identity';
+import { Json, Store } from 'agentic-identity';
 import { P as Principal } from './principal-blhsFbdS.js';
 import 'zod';
 
+/** Host-owned whole-board content. Methods must tolerate retries. */
+interface CanvasContentSource {
+    readonly exportContent: (id: string) => Promise<Json>;
+    readonly eraseContent: (id: string) => Promise<void>;
+}
 interface CanvasAccountDeps {
+    /** Sharing resource type. Default: `canvas`. */
+    resourceType?: string;
+    /** Serialized board collection. Default: `boards`. */
+    collection?: string;
+    /** Select canvas rows before decoding or saving rooms. Default: rows with an `update` field. */
+    isBoard?: (id: string, data: Readonly<Record<string, unknown>>) => boolean;
+    /** Whole-board content for sole owners. Replaces collection access and room hooks.
+     * Shared-board stamps are outside this mode; the host must handle them separately.
+     * Both methods must tolerate retries, including a board already erased.
+     * Ignores collection, isBoard, saveRoom, and eraseRoom when supplied.
+     */
+    contentSource?: CanvasContentSource;
     /** The Store that holds the boards and the sharing records. */
     store: Store;
-    /** Saves the live room of a board to the Store, as the Worker does before it reads a board. Without it, edits that no request has saved yet are not seen, and an erase that resets a room drops them. The call runs for every stored board, so it must be cheap for a board with no room. A board with no room needs no work. Omit it when no room runs. */
+    /** Saves the live room of a board to the Store, as the Worker does before it reads a board. Without it, edits that no request has saved yet are not seen, and an erase that resets a room drops them. The call runs only for selected canvas rows, and never with contentSource. It must be cheap for a board with no room. A board with no room needs no work. Omit it when no room runs. */
     saveRoom?: (boardId: string) => Promise<void>;
     /** Erases the live room of a board, so it opens again from the Store. The erase calls it for every board that it changes or deletes. Omit it when no room runs. */
     eraseRoom?: (boardId: string) => Promise<void>;
@@ -30,4 +47,4 @@ interface CanvasAccount {
 }
 declare const canvasAccount: CanvasAccount;
 
-export { type CanvasAccount, type CanvasAccountDeps, type CanvasCollection, canvasAccount };
+export { type CanvasAccount, type CanvasAccountDeps, type CanvasCollection, type CanvasContentSource, canvasAccount };

package/dist/account.js

@@ -36,16 +36,19 @@ var plain = (value) => JSON.parse(JSON.stringify(value));
 function check(subject, deps) {
   if (typeof deps?.store?.query !== "function") throw new CanvasError("INVALID", "canvasAccount needs deps.store");
   for (const hook of [deps.saveRoom, deps.eraseRoom]) if (hook !== void 0 && typeof hook !== "function") throw new CanvasError("INVALID", "deps.saveRoom and deps.eraseRoom must be functions");
+  for (const value of [deps.resourceType, deps.collection]) if (value !== void 0 && (typeof value !== "string" || !value.trim())) throw new CanvasError("INVALID", "resourceType and collection must be nonempty strings");
+  if (deps.isBoard !== void 0 && typeof deps.isBoard !== "function") throw new CanvasError("INVALID", "isBoard must be a function");
+  if (deps.contentSource !== void 0 && (typeof deps.contentSource?.exportContent !== "function" || typeof deps.contentSource?.eraseContent !== "function")) throw new CanvasError("INVALID", "contentSource needs exportContent and eraseContent");
   if (!principalSchema.safeParse(subject).success) throw new CanvasError("INVALID", "subject needs an id and a known kind");
 }
-async function held(store, subject) {
+async function held(store, subject, resourceType) {
   const all = [];
   const sole = /* @__PURE__ */ new Set();
   for await (const { id: grantId, data } of pages(store, "grants", { subjectKind: subject.kind, subjectId: subject.id })) {
     const { resourceId: id, role } = data;
     if (typeof id !== "string" || typeof role !== "string" || !ROLES.includes(role)) throw new CanvasError("INVALID", `grant "${grantId}" of the subject is damaged`);
     const resource = await store.get("resources", id);
-    if (resource === null ? !isBoardId(id) : resource.type !== RESOURCE_TYPE) continue;
+    if (resource === null ? !isBoardId(id) : resource.type !== resourceType) continue;
     all.push({ grantId, resourceId: id, role });
     if (resource === null || role !== "owner") continue;
     const owners = await rows(store, "grants", { resourceId: id, role: "owner" });
@@ -54,16 +57,21 @@ async function held(store, subject) {
   }
   return { all, sole };
 }
-async function* boards(store, saveRoom) {
+async function* boards(store, deps) {
+  if (deps.contentSource) return;
+  const collection = deps.collection ?? "boards";
   let cursor;
   do {
-    const page = await store.query("boards", { limit: PAGE, ...cursor === void 0 ? {} : { cursor } });
+    const page = await store.query(collection, { limit: PAGE, ...cursor === void 0 ? {} : { cursor } });
     for (const item of page.items) {
       const { id } = item;
       let data = item.data;
-      if (saveRoom) {
-        await saveRoom(id);
-        data = await store.get("boards", id) ?? data;
+      const resource = await store.get("resources", id);
+      if (resource !== null && resource.type !== (deps.resourceType ?? RESOURCE_TYPE)) continue;
+      if (resource === null && !(deps.isBoard ? deps.isBoard(id, data) : Object.hasOwn(data, "update"))) continue;
+      if (deps.saveRoom) {
+        await deps.saveRoom(id);
+        data = await store.get(collection, id) ?? data;
       }
       try {
         yield { id, board: Board.open(fromBase64(String(data.update))) };
@@ -75,7 +83,7 @@ async function* boards(store, saveRoom) {
   } while (cursor !== void 0);
 }
 var isSubject = (value, subject) => typeof value === "object" && value !== null && value.kind === subject.kind && value.id === subject.id;
-async function auditOf(store, subject) {
+async function auditOf(store, subject, resourceType) {
   const found = /* @__PURE__ */ new Map();
   for (const field of ["principalId", "rootId", "targetId"]) for (const row of await rows(store, "audit", { [field]: subject.id })) found.set(row.id, row);
   const out = [];
@@ -84,7 +92,7 @@ async function auditOf(store, subject) {
     const { principalId, principalKind, chain, rootId, resourceId, targetKind, targetId } = row.data;
     if (typeof resourceId !== "string" || !isBoardId(resourceId)) continue;
     const resource = await store.get("resources", resourceId);
-    if (resource !== null && resource.type !== RESOURCE_TYPE) continue;
+    if (resource !== null && resource.type !== resourceType) continue;
     const first = Array.isArray(chain) ? chain[0] : null;
     const damaged = principalId === subject.id && !known(principalKind, ["anonymous"]) || targetId === subject.id && !known(targetKind, ["invite", "link", "person", "app", "key"]) || (first?.id === subject.id || first === null && rootId === subject.id) && !known(first?.kind);
     if (damaged) throw new CanvasError("INVALID", `audit entry "${row.id}" is damaged`);
@@ -92,14 +100,14 @@ async function auditOf(store, subject) {
   }
   return out;
 }
-async function invitesOf(store, subject) {
+async function invitesOf(store, subject, resourceType) {
   const out = [];
   for (const row of await rows(store, "invites", { createdBy: subject.id })) {
     const { resourceId } = row.data;
     if (typeof resourceId !== "string") throw new CanvasError("INVALID", `invite "${row.id}" of the subject is damaged`);
     if (!isBoardId(resourceId)) continue;
     const resource = await store.get("resources", resourceId);
-    if (resource === null || resource.type === RESOURCE_TYPE) out.push(row);
+    if (resource === null || resource.type === resourceType) out.push(row);
   }
   return out;
 }
@@ -118,10 +126,11 @@ var canvasAccount = {
   async exportAccount(subject, deps) {
     check(subject, deps);
     const { store } = deps;
+    const resourceType = deps.resourceType ?? RESOURCE_TYPE;
     const out = { boards: [], grants: [], invites: [], authored_elements: [], edited_elements: [], titles: [], audit: [] };
-    const mine = await held(store, subject);
+    const mine = await held(store, subject, resourceType);
     const owned = /* @__PURE__ */ new Map();
-    for await (const { id, board } of boards(store, deps.saveRoom)) {
+    for await (const { id, board } of boards(store, deps)) {
       if (mine.sole.has(id)) {
         owned.set(id, plain([{ id, title: board.title, elements: board.rawElements() }])[0]);
         continue;
@@ -134,23 +143,41 @@ var canvasAccount = {
     for (const g of mine.all) {
       out.grants.push(...plain([{ resourceId: g.resourceId, subjectKind: subject.kind, subjectId: subject.id, role: g.role }]));
     }
-    for (const id of mine.sole) if (owned.has(id)) out.boards.push(owned.get(id));
-    for (const { id, data } of await invitesOf(store, subject)) {
+    for (const id of mine.sole) {
+      if (deps.contentSource) {
+        const content = await deps.contentSource.exportContent(id);
+        let normalized;
+        try {
+          normalized = JSON.parse(JSON.stringify(content, (_key, value) => {
+            if (value === void 0 || typeof value === "function" || typeof value === "symbol" || typeof value === "number" && !Number.isFinite(value) || typeof value === "object" && value !== null && !Array.isArray(value) && Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null) {
+              throw new Error("not JSON content");
+            }
+            return value;
+          }));
+        } catch {
+          throw new CanvasError("INVALID", `content source returned invalid JSON for board "${id}"`);
+        }
+        out.boards.push({ id, content: normalized });
+      } else if (owned.has(id)) out.boards.push(owned.get(id));
+    }
+    for (const { id, data } of await invitesOf(store, subject, resourceType)) {
       const { resourceId, role, expiresAt, acceptedAt, revokedAt } = data;
       out.invites.push(...plain([{ id, resourceId, role, expiresAt, acceptedAt, revokedAt }]));
     }
-    out.audit.push(...plain((await auditOf(store, subject)).map((r) => r.data)));
+    out.audit.push(...plain((await auditOf(store, subject, resourceType)).map((r) => r.data)));
     return out;
   },
   async eraseAccount(subject, deps) {
     check(subject, deps);
     const { store } = deps;
+    const resourceType = deps.resourceType ?? RESOURCE_TYPE;
+    const collection = deps.collection ?? "boards";
     const sharing = createSharing(store);
     const total = { boards: 0, grants: 0, invites: 0, authored_elements: 0, edited_elements: 0, titles: 0, audit: 0 };
-    const ctx = { principalId: subject.id, kind: subject.kind, chain: [{ id: subject.id, kind: subject.kind }], scopes: [`${RESOURCE_TYPE}:admin`] };
-    const mine = await held(store, subject);
+    const ctx = { principalId: subject.id, kind: subject.kind, chain: [{ id: subject.id, kind: subject.kind }], scopes: [`${resourceType}:admin`] };
+    const mine = await held(store, subject, resourceType);
     const stamped = [];
-    for await (const { id, board } of boards(store, deps.saveRoom)) {
+    for await (const { id, board } of boards(store, deps)) {
       if (mine.sole.has(id)) continue;
       const found = board.stampedBy(subject);
       if (found.authored.length > 0 || found.edited.length > 0 || found.titleBy) stamped.push(id);
@@ -159,18 +186,22 @@ var canvasAccount = {
       if ((await rows(store, "resources", { parentId: id })).length > 0) throw new CanvasError("INVALID", `board "${id}" has child resources: remove them first`);
       if (!(await sharing.can(ctx, "admin", id)).allowed) throw new CanvasError("INVALID", `the owner grant on board "${id}" is not valid: an operator repairs it first`);
     }
-    for (const { id, data } of await auditOf(store, subject)) {
+    for (const { id, data } of await auditOf(store, subject, resourceType)) {
       await store.put("audit", id, scrub(data, subject));
       total.audit += 1;
     }
-    for (const { id } of await invitesOf(store, subject)) {
+    for (const { id } of await invitesOf(store, subject, resourceType)) {
       await store.delete("invites", id);
       total.invites += 1;
     }
     for (const id of mine.sole) {
-      await deps.eraseRoom?.(id);
-      await store.delete("boards", id);
-      await deps.eraseRoom?.(id);
+      if (deps.contentSource) await deps.contentSource.eraseContent(id);
+      else {
+        await deps.eraseRoom?.(id);
+        const row = await store.get(collection, id);
+        if (row) await store.delete(collection, id);
+        await deps.eraseRoom?.(id);
+      }
       await sharing.deleteResource(ctx, id).catch((e) => {
         if (e instanceof Error && (e.name === "EraseRefusedError" || e.message === "forbidden")) throw new CanvasError("INVALID", e.message);
         throw e;
@@ -179,7 +210,7 @@ var canvasAccount = {
     }
     for (const id of stamped) {
       const done = await store.transaction(async (tx) => {
-        const doc = await tx.get("boards", id);
+        const doc = await tx.get(collection, id);
         if (!doc) return null;
         let board;
         try {
@@ -188,7 +219,7 @@ var canvasAccount = {
           throw new CanvasError("INVALID", `stored board "${id}" is damaged`);
         }
         const counts = board.eraseStamps(subject, { kind: subject.kind, id: ERASED });
-        await tx.put("boards", id, { update: toBase64(board.encode()) });
+        await tx.put(collection, id, { ...doc, update: toBase64(board.encode()) });
         return counts;
       });
       await deps.eraseRoom?.(id);

package/dist/{chunk-BZZKCECH.js → chunk-LHQ2H4BF.js}

@@ -6,7 +6,7 @@ import {
 
 // src/version.ts
 import { createRequire } from "module";
-var VERSION = true ? "0.14.3" : readPackageVersion();
+var VERSION = true ? "0.15.1" : readPackageVersion();
 
 // src/brand.ts
 var BRAND = {

package/dist/cli.js

@@ -5,7 +5,7 @@ import {
   operatorActor,
   runMcp,
   svgToPng
-} from "./chunk-BZZKCECH.js";
+} from "./chunk-LHQ2H4BF.js";
 import {
   openLocalStore
 } from "./chunk-NRLF6MGR.js";

package/dist/index.js

@@ -6,7 +6,7 @@ import {
   operatorActor,
   runMcp,
   svgToPng
-} from "./chunk-BZZKCECH.js";
+} from "./chunk-LHQ2H4BF.js";
 import {
   createFileStore,
   openLocalStore

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-canvas",
-  "version": "0.14.3",
+  "version": "0.15.1",
   "description": "A shared whiteboard for diagrams, drawn by people and agents.",
   "keywords": [
     "whiteboard",
@@ -87,9 +87,9 @@
   "dependencies": {
     "@dagrejs/dagre": "^3.1.3",
     "@modelcontextprotocol/sdk": "^1.12.0",
-    "agentic-design": ">=0.8.0 <0.10.0",
-    "agentic-identity": ">=0.9.0 <0.11.0",
-    "agentic-realtime": ">=0.4.4 <0.6.0",
+    "agentic-design": ">=0.8.0 <0.11.0",
+    "agentic-identity": ">=0.9.0 <0.12.0",
+    "agentic-realtime": ">=0.4.4 <0.7.0",
     "yjs": "^13.6.0",
     "zod": "^4.6.7"
   },
@@ -127,7 +127,10 @@
     "typescript": "^5.6.0",
     "vite": "^7.3.7",
     "vitest": "^3.0.0",
-    "wrangler": "^4.155.0"
+    "wrangler": "^4.155.0",
+    "agentic-design-current": "npm:agentic-design@0.10.1",
+    "agentic-identity-current": "npm:agentic-identity@0.11.0",
+    "agentic-realtime-current": "npm:agentic-realtime@0.6.0"
   },
   "overrides": {
     "zod": "$zod"