agentic-canvas 0.7.0 → 0.9.0

package/dist/chunk-NRLF6MGR.js

@@ -0,0 +1,130 @@
+import {
+  FileStoreError
+} from "./chunk-NWQED42L.js";
+
+// src/store-file.ts
+import { randomUUID } from "crypto";
+import { closeSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync, writeSync } from "fs";
+import { join } from "path";
+import { createFileStore as createIdentityFileStore } from "agentic-identity/file";
+import { StoreConflictError } from "agentic-identity";
+var RETRY_FOR_MS = 1e4;
+var LOCK_STALE_MS = 3e3;
+var LOCK_WAIT_MS = 5e3;
+var HELD = /locked by another process/;
+var NOT_A_STORE_FILE = /is not an agentic-identity store file/;
+async function retried(run) {
+  const deadline = Date.now() + RETRY_FOR_MS;
+  for (; ; ) {
+    try {
+      return await run();
+    } catch (error) {
+      const clash = error instanceof StoreConflictError && !HELD.test(error.message);
+      if (!clash || Date.now() > deadline) throw error;
+      await new Promise((resolve) => setTimeout(resolve, 5 + Math.random() * 20));
+    }
+  }
+}
+var isDoc = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var sleep = (ms) => void Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+function legacyCollections(path) {
+  try {
+    const data = JSON.parse(readFileSync(path, "utf8"));
+    const current = isDoc(data) && data.format === 1 && isDoc(data.collections);
+    const old = isDoc(data) && !current && Object.values(data).every((docs) => isDoc(docs) && Object.values(docs).every(isDoc));
+    return old ? data : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function withLock(path, fn) {
+  const lock = `${path}.lock`;
+  const mine = `${process.pid}:${randomUUID()}`;
+  for (const start = Date.now(); ; ) {
+    try {
+      writeFileSync(lock, mine, { flag: "wx", mode: 384 });
+      break;
+    } catch (error) {
+      if (error.code !== "EEXIST") return false;
+      try {
+        if (Date.now() - statSync(lock).mtimeMs > LOCK_STALE_MS) unlinkSync(lock);
+      } catch {
+      }
+      if (Date.now() - start > LOCK_WAIT_MS) return false;
+      sleep(10);
+    }
+  }
+  const owned = () => {
+    try {
+      return readFileSync(lock, "utf8") === mine;
+    } catch {
+      return false;
+    }
+  };
+  try {
+    fn(owned);
+  } finally {
+    if (owned()) rmSync(lock, { force: true });
+  }
+  return true;
+}
+function upgradeLegacyFile(path) {
+  if (legacyCollections(path) === void 0) return true;
+  try {
+    withLock(path, (owned) => {
+      const data = legacyCollections(path);
+      if (data === void 0) return;
+      const temp = `${path}.${process.pid}.upgrade`;
+      try {
+        const fd = openSync(temp, "w", 384);
+        try {
+          writeSync(fd, JSON.stringify({ format: 1, collections: data }));
+          fsyncSync(fd);
+        } finally {
+          closeSync(fd);
+        }
+        if (owned()) renameSync(temp, path);
+      } finally {
+        rmSync(temp, { force: true });
+      }
+    });
+  } catch {
+  }
+  return legacyCollections(path) === void 0;
+}
+function createFileStore(path, options = {}) {
+  upgradeLegacyFile(path);
+  const inner = createIdentityFileStore({ ...options, path });
+  const guard = async (run) => {
+    for (let upgraded = false; ; upgraded = true) {
+      try {
+        return await retried(run);
+      } catch (error) {
+        if (!(error instanceof Error)) throw error;
+        if (HELD.test(error.message)) throw new FileStoreError("LOCKED", "the database file is locked. If no agentic-canvas process runs, remove the .lock file next to it");
+        if (!NOT_A_STORE_FILE.test(error.message)) throw error;
+        if (legacyCollections(path) === void 0) throw new FileStoreError("DAMAGED", "the database file is not valid JSON. Repair or remove it");
+        if (upgraded || !upgradeLegacyFile(path)) throw new FileStoreError("DAMAGED", "the database file is in the older layout and could not be upgraded. Try again, and check that its folder is writable");
+      }
+    }
+  };
+  return {
+    region: inner.region,
+    get: (collection, id) => guard(() => inner.get(collection, id)),
+    query: (collection, query) => guard(() => inner.query(collection, query)),
+    put: (collection, id, doc) => guard(() => inner.put(collection, id, doc)),
+    delete: (collection, id) => guard(() => inner.delete(collection, id)),
+    transaction: (fn) => guard(() => inner.transaction(fn))
+  };
+}
+function openLocalStore(dir) {
+  mkdirSync(dir, { recursive: true });
+  return createFileStore(join(dir, STORE_FILE));
+}
+var STORE_FILE = "canvas.json";
+
+export {
+  createFileStore,
+  openLocalStore,
+  STORE_FILE
+};

package/dist/cli.js

@@ -5,13 +5,13 @@ import {
   operatorActor,
   runMcp,
   svgToPng
-} from "./chunk-3QW4UF2R.js";
+} from "./chunk-33ANMQEY.js";
 import {
   openLocalStore
-} from "./chunk-UKST5A57.js";
+} from "./chunk-NRLF6MGR.js";
 import {
   CanvasService
-} from "./chunk-GPSOLW2Y.js";
+} from "./chunk-M74ENUWR.js";
 import "./chunk-NWQED42L.js";
 import {
   CanvasError

package/dist/client.d.ts

@@ -1,4 +1,4 @@
-import { E as ErrorCode, a as BoardData, c as ShapeType, S as Shape, d as Endpoint, C as Connector } from './read-CeWoSAAy.js';
+import { E as ErrorCode, a as BoardData, c as ShapeType, S as Shape, d as Endpoint, C as Connector } from './read--Jd3kE13.js';
 import { PrincipalKind } from 'agentic-identity';
 import 'yjs';
 import 'zod';

package/dist/embed.d.ts

@@ -1,7 +1,7 @@
 import * as react from 'react';
 import { CanvasClient } from './client.js';
 import { PrincipalKind } from 'agentic-identity';
-import './read-CeWoSAAy.js';
+import './read--Jd3kE13.js';
 import 'yjs';
 import 'zod';
 

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-import { B as Board, P as Principal } from './read-CeWoSAAy.js';
-export { a as BoardData, b as CanvasElement, e as CanvasError, C as Connector, f as EdgeData, d as Endpoint, E as ErrorCode, G as Group, M as MAX_ELEMENTS, g as MAX_TEXT, N as NodeData, h as SHAPE_TYPES, S as Shape, c as ShapeType, p as principalSchema, r as readBoard } from './read-CeWoSAAy.js';
-import { B as BoardAccess } from './service-D9WzMLH1.js';
-export { C as CanvasService, D as DrawOptions, F as FlowEdge, a as FlowGraph, b as FlowNode, M as MAX_FLOW_EDGES, c as MAX_FLOW_NODES, P as Placement, d as drawFlow, l as layoutFlow, p as parseFlow } from './service-D9WzMLH1.js';
+import { B as Board, P as Principal } from './read--Jd3kE13.js';
+export { a as BoardData, b as CanvasElement, e as CanvasError, C as Connector, f as EdgeData, d as Endpoint, E as ErrorCode, G as Group, M as MAX_ELEMENTS, g as MAX_TEXT, N as NodeData, h as SHAPE_TYPES, S as Shape, c as ShapeType, p as principalSchema, r as readBoard } from './read--Jd3kE13.js';
+import { B as BoardAccess } from './service-OiTtNadu.js';
+export { C as CanvasService, D as DrawOptions, F as FlowEdge, a as FlowGraph, b as FlowNode, M as MAX_FLOW_EDGES, c as MAX_FLOW_NODES, P as Placement, d as drawFlow, l as layoutFlow, p as parseFlow } from './service-OiTtNadu.js';
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 export { FileStoreOptions, createFileStore, openLocalStore } from './store-file.js';
 export { PRINCIPAL_KINDS, PrincipalKind, isMachineMade } from 'agentic-identity';

package/dist/index.js

@@ -6,14 +6,14 @@ import {
   operatorActor,
   runMcp,
   svgToPng
-} from "./chunk-3QW4UF2R.js";
+} from "./chunk-33ANMQEY.js";
 import {
   createFileStore,
   openLocalStore
-} from "./chunk-UKST5A57.js";
+} from "./chunk-NRLF6MGR.js";
 import {
   CanvasService
-} from "./chunk-GPSOLW2Y.js";
+} from "./chunk-M74ENUWR.js";
 import "./chunk-NWQED42L.js";
 import {
   Board,

package/dist/live-worker.d.ts

@@ -5,10 +5,10 @@ import 'agentic-identity';
 import 'agentic-realtime';
 import 'agentic-identity/cloudflare';
 import 'hono';
-import './read-CeWoSAAy.js';
+import './read--Jd3kE13.js';
 import 'yjs';
 import 'zod';
-import './service-D9WzMLH1.js';
+import './service-OiTtNadu.js';
 
 type Namespace = Parameters<typeof createDurableObjectRealtime>[0];
 interface LiveEnv extends WorkerEnv {

package/dist/live-worker.js

@@ -1,7 +1,7 @@
 import {
   createApp
-} from "./chunk-EH7WCMK6.js";
-import "./chunk-GPSOLW2Y.js";
+} from "./chunk-JQCUVXXD.js";
+import "./chunk-M74ENUWR.js";
 import "./chunk-NWQED42L.js";
 import {
   CanvasError

package/dist/live.d.ts

@@ -1,6 +1,6 @@
-import { B as Board, P as Principal, a as BoardData, S as Shape, C as Connector, b as CanvasElement } from './read-CeWoSAAy.js';
+import { B as Board, P as Principal, a as BoardData, S as Shape, C as Connector, b as CanvasElement } from './read--Jd3kE13.js';
 import { Peer } from 'agentic-realtime/client';
-import { B as BoardAccess, D as DrawOptions } from './service-D9WzMLH1.js';
+import { B as BoardAccess, D as DrawOptions } from './service-OiTtNadu.js';
 import 'yjs';
 import 'agentic-identity';
 import 'zod';

package/dist/{read-CeWoSAAy.d.ts → read--Jd3kE13.d.ts}

@@ -6,22 +6,16 @@ import { z } from 'zod';
  * The actor of a new write. The rule is the identity kernel's `parsePrincipal`: a known kind, and an id of 1 to 128
  * characters from A-Z, a-z, 0-9, ".", "_" and "-". The Worker, the CLI and the SDK all use it.
  */
-declare const principalSchema: z.ZodEffects<z.ZodObject<{
+declare const principalSchema: z.ZodPipe<z.ZodObject<{
     kind: z.ZodString;
     id: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    kind: string;
-    id: string;
-}, {
-    kind: string;
-    id: string;
-}>, {
+}, z.core.$strict>, z.ZodTransform<{
     kind: PrincipalKind;
     id: string;
 }, {
     kind: string;
     id: string;
-}>;
+}>>;
 type Principal = {
     kind: PrincipalKind;
     id: string;

package/dist/{service-D9WzMLH1.d.ts → service-OiTtNadu.d.ts}

@@ -1,4 +1,4 @@
-import { c as ShapeType, B as Board, P as Principal, a as BoardData, S as Shape, C as Connector, b as CanvasElement } from './read-CeWoSAAy.js';
+import { c as ShapeType, B as Board, P as Principal, a as BoardData, S as Shape, C as Connector, b as CanvasElement } from './read--Jd3kE13.js';
 import { Store } from 'agentic-identity';
 
 declare const MAX_FLOW_NODES = 500;
@@ -68,6 +68,11 @@ declare class CanvasService {
         id: string;
         title: string;
     }[]>;
+    /** The listed boards that exist, with titles, in the order given. */
+    summaries(ids: string[]): Promise<{
+        id: string;
+        title: string;
+    }[]>;
     /** Delete a board and everything on it. Throws NOT_FOUND unless the board exists. The Worker erases the live room too. */
     delete(id: string): Promise<{
         deleted: string;

package/dist/store-file.d.ts

@@ -7,19 +7,8 @@ declare class FileStoreError extends Error {
 }
 
 interface FileStoreOptions extends AdapterOptions {
-    /** How long a write waits for the lock before it fails. Defaults to 10000. */
-    lockTimeoutMs?: number;
-    /** A lock older than this is stale, if its owner is alive. Defaults to 30000. */
-    staleAfterMs?: number;
 }
-/**
- * A Store kept in one JSON file. Node only. It is an adapter of the shared Store port and passes `runStoreContract`. Many processes may share the file, for example the CLI
- * and the MCP server. Each write takes a lock file, reads the file again, applies the change, and
- * replaces the file by an atomic rename. A read sees the last renamed file, so it takes no lock.
- * Each call reads the whole file and loads the docs it needs into the shared memory adapter, which runs the
- * queries and the transaction rules. Cost grows with the file. Use it for local work, not for scale.
- * The lock needs one machine: the process check and the clock do not work across hosts.
- */
+/** A Store kept in one JSON file. Node only. It is the file adapter of agentic-identity, with a retry on a write clash. */
 declare function createFileStore(path: string, options?: FileStoreOptions): Store;
 /** The store the CLI and the MCP server share: one file in `dir`, which is made if it is missing. */
 declare function openLocalStore(dir: string): Store;

package/dist/store-file.js

@@ -2,7 +2,7 @@ import {
   STORE_FILE,
   createFileStore,
   openLocalStore
-} from "./chunk-UKST5A57.js";
+} from "./chunk-NRLF6MGR.js";
 import {
   FileStoreError
 } from "./chunk-NWQED42L.js";

package/dist/ui.css

@@ -1,38 +1,38 @@
 /* Every rule is nested under .cv-root, so the styles do not reach the host page. */
 .cv-root {
-  .row { display: flex; align-items: center; justify-content: space-between; gap: var(--ad-space-4); flex-wrap: wrap; }
-  .failure { border: 1px solid var(--ad-color-danger); border-radius: var(--ad-radius-md); padding: var(--ad-space-4); color: var(--ad-color-danger-text); background: var(--ad-color-danger-subtle); display: grid; gap: var(--ad-space-3); justify-items: start; }
-  .note { color: var(--ad-color-text-muted); }
+  .row { display: flex; align-items: center; justify-content: space-between; gap: var(--agd-space-4); flex-wrap: wrap; }
+  .failure { border: 1px solid var(--agd-color-danger); border-radius: var(--agd-radius-md); padding: var(--agd-space-4); color: var(--agd-color-danger-text); background: var(--agd-color-danger-subtle); display: grid; gap: var(--agd-space-3); justify-items: start; }
+  .note { color: var(--agd-color-text-muted); }
   .sr-only { position: absolute; width: 1px; height: 1px; overflow: hidden; clip: rect(0 0 0 0); white-space: nowrap; }
 
-  .board { display: grid; gap: var(--ad-space-3); }
-  .stage { position: relative; display: grid; grid-template-columns: minmax(0, 1fr) 16rem; gap: var(--ad-space-3); height: 65vh; min-height: 22rem; }
+  .board { display: grid; gap: var(--agd-space-3); }
+  .stage { position: relative; display: grid; grid-template-columns: minmax(0, 1fr) 16rem; gap: var(--agd-space-3); height: 65vh; min-height: 22rem; }
   @media (max-width: 48rem) { .stage { grid-template-columns: 1fr; height: auto; } .canvas { height: 55vh; } }
-  .canvas { background: var(--ad-color-surface-sunken); border: 1px solid var(--ad-color-border); border-radius: var(--ad-radius-md); overflow: hidden; touch-action: none; min-height: 18rem; }
-  .canvas:focus-visible { outline: 3px solid var(--ad-color-focus); outline-offset: 2px; }
-  .canvas svg { display: block; cursor: grab; font-family: var(--ad-font-family-sans); font-size: 14px; }
+  .canvas { background: var(--agd-color-surface-sunken); border: 1px solid var(--agd-color-border); border-radius: var(--agd-radius-md); overflow: hidden; touch-action: none; min-height: 18rem; }
+  .canvas:focus-visible { outline: 3px solid var(--agd-color-focus); outline-offset: 2px; }
+  .canvas svg { display: block; cursor: grab; font-family: var(--agd-font-family-sans); font-size: 14px; }
   .item { outline: none; cursor: pointer; }
-  .shape { fill: var(--ad-color-surface-raised); stroke: var(--ad-color-border-strong); stroke-width: 1.5; }
+  .shape { fill: var(--agd-color-surface-raised); stroke: var(--agd-color-border-strong); stroke-width: 1.5; }
   .shape.text { fill: transparent; stroke: none; }
   .shape.frame, .shape.image { fill: none; stroke-dasharray: 6 4; pointer-events: visiblePainted; }
-  .shape.sticky { fill: var(--ad-color-warning-subtle); stroke: var(--ad-color-warning); }
-  .label { fill: var(--ad-color-text); pointer-events: none; }
-  .sticky-label { fill: var(--ad-color-warning-text); }
-  .edge { stroke: var(--ad-color-text-muted); stroke-width: 2; fill: none; pointer-events: none; }
+  .shape.sticky { fill: var(--agd-color-warning-subtle); stroke: var(--agd-color-warning); }
+  .label { fill: var(--agd-color-text); pointer-events: none; }
+  .sticky-label { fill: var(--agd-color-warning-text); }
+  .edge { stroke: var(--agd-color-text-muted); stroke-width: 2; fill: none; pointer-events: none; }
   .hit { stroke: transparent; stroke-width: 14; }
-  .arrowhead { fill: var(--ad-color-text-muted); }
-  .edge-text { fill: var(--ad-color-text); paint-order: stroke; stroke: var(--ad-color-surface-sunken); stroke-width: 4px; pointer-events: none; }
+  .arrowhead { fill: var(--agd-color-text-muted); }
+  .edge-text { fill: var(--agd-color-text); paint-order: stroke; stroke: var(--agd-color-surface-sunken); stroke-width: 4px; pointer-events: none; }
   .ring, .ring-line { fill: none; stroke: none; stroke-width: 3; pointer-events: none; }
-  .item.selected .ring, .item.selected .ring-line, .item:focus-visible .ring, .item:focus-visible .ring-line { stroke: var(--ad-color-focus); }
+  .item.selected .ring, .item.selected .ring-line, .item:focus-visible .ring, .item:focus-visible .ring-line { stroke: var(--agd-color-focus); }
   .item:focus-visible .ring, .item:focus-visible .ring-line { stroke-width: 4; }
-  .handle { fill: var(--ad-color-focus); stroke: var(--ad-color-bg); stroke-width: 2; cursor: nwse-resize; }
-  .agent-badge rect { fill: var(--ad-color-agent-subtle); stroke: var(--ad-color-agent); }
-  .agent-badge text { fill: var(--ad-color-agent-text); font-size: 11px; font-weight: 600; pointer-events: none; }
+  .handle { fill: var(--agd-color-focus); stroke: var(--agd-color-bg); stroke-width: 2; cursor: nwse-resize; }
+  .agent-badge rect { fill: var(--agd-color-agent-subtle); stroke: var(--agd-color-agent); }
+  .agent-badge text { fill: var(--agd-color-agent-text); font-size: 11px; font-weight: 600; pointer-events: none; }
   .empty-overlay { position: absolute; inset: 0 16rem 0 0; display: grid; place-items: center; pointer-events: none; }
   @media (max-width: 48rem) { .empty-overlay { inset: 0; bottom: auto; height: 55vh; } }
-  .inspector { border: 1px solid var(--ad-color-border); border-radius: var(--ad-radius-md); padding: var(--ad-space-3); background: var(--ad-color-surface); display: grid; gap: var(--ad-space-3); align-content: start; overflow: auto; }
-  .inspector h2 { margin: 0; font-size: var(--ad-font-size-lg); }
-  .inspector form { display: grid; gap: var(--ad-space-3); }
-  .inspector .by { margin: 0; color: var(--ad-color-text-muted); font-size: var(--ad-font-size-sm); }
-  .sizes { display: grid; grid-template-columns: 1fr 1fr; gap: var(--ad-space-2); }
+  .inspector { border: 1px solid var(--agd-color-border); border-radius: var(--agd-radius-md); padding: var(--agd-space-3); background: var(--agd-color-surface); display: grid; gap: var(--agd-space-3); align-content: start; overflow: auto; }
+  .inspector h2 { margin: 0; font-size: var(--agd-font-size-lg); }
+  .inspector form { display: grid; gap: var(--agd-space-3); }
+  .inspector .by { margin: 0; color: var(--agd-color-text-muted); font-size: var(--agd-font-size-sm); }
+  .sizes { display: grid; grid-template-columns: 1fr 1fr; gap: var(--agd-space-2); }
 }

package/dist/worker.d.ts

@@ -1,12 +1,87 @@
-import { Store, Blobs } from 'agentic-identity';
+import { Store, PrincipalContext, Action, Grant, InviteSummary, Blobs } from 'agentic-identity';
 import { Realtime } from 'agentic-realtime';
 import { D1Like, R2Like } from 'agentic-identity/cloudflare';
 import { Hono } from 'hono';
-import { P as Principal } from './read-CeWoSAAy.js';
-import { C as CanvasService } from './service-D9WzMLH1.js';
+import { P as Principal } from './read--Jd3kE13.js';
+import { C as CanvasService } from './service-OiTtNadu.js';
 import 'yjs';
 import 'zod';
 
+/**
+ * Who may do what on a board. A board is an identity resource of type `canvas`. The roles, the grants, the invites,
+ * and the links are those of agentic-identity: this class checks input and maps its failures to `CanvasError`.
+ * A caller who cannot read a board gets NOT_FOUND, so a board id tells a stranger nothing. A caller who can read
+ * it and lacks the role for the action gets FORBIDDEN.
+ */
+declare class CanvasAccess {
+    private readonly store;
+    private readonly sharing;
+    private readonly now;
+    constructor(store: Store, options?: {
+        now?: () => number;
+    });
+    /** A board id that the Store refuses names no board. The gate checks this for a role holder: a token of the dev list skips the gate. */
+    private known;
+    /** Make the actor the owner of a new board. */
+    register(ctx: PrincipalContext, id: string): Promise<void>;
+    /** Remove the sharing records of a board. Needs an owner. */
+    unregister(ctx: PrincipalContext, id: string): Promise<void>;
+    /** True if the board has sharing records: it was made by an identity credential. */
+    registered(id: string): Promise<boolean>;
+    /**
+     * True if the caller may do `action` on the board. A link token adds the role of its link. It writes an audit entry.
+     * An id that belongs to a resource of another type, in a Store shared with another app, is no board: it is denied.
+     */
+    allowed(ctx: PrincipalContext | null, action: Action, id: string, linkToken?: string): Promise<boolean>;
+    /** Throw NOT_FOUND for a caller who cannot read the board, and FORBIDDEN for one who can read it but not do `action`. */
+    require(ctx: PrincipalContext | null, action: Action, id: string, linkToken?: string): Promise<void>;
+    /** The ids of the boards a person or agent holds a role on, the first 100. A credential without `canvas:read` gets none. */
+    readable(ctx: PrincipalContext): Promise<string[]>;
+    grant(ctx: PrincipalContext, id: string, input: {
+        subjectKind?: unknown;
+        subjectId?: unknown;
+        role?: unknown;
+    }): Promise<{
+        ok: true;
+    }>;
+    revoke(ctx: PrincipalContext, id: string, input: {
+        subjectKind?: unknown;
+        subjectId?: unknown;
+    }): Promise<{
+        ok: true;
+    }>;
+    /** The grants and the invites on a board. An invite never shows its email. Links are not listed: a token shows once. */
+    list(ctx: PrincipalContext, id: string): Promise<{
+        grants: Grant[];
+        invites: InviteSummary[];
+    }>;
+    invite(ctx: PrincipalContext, id: string, input: {
+        role?: unknown;
+        email?: unknown;
+        handle?: unknown;
+        expiresInMs?: unknown;
+    }): Promise<{
+        id: string;
+    }>;
+    /** The email comes from a verified sign-in and the handle from the agent's own record, never from the request. */
+    accept(ctx: PrincipalContext, inviteId: string): Promise<{
+        ok: true;
+    }>;
+    /** The token shows once. Only its hash is stored. */
+    createLink(ctx: PrincipalContext, id: string, input: {
+        role?: unknown;
+        signedInOnly?: unknown;
+        expiresInMs?: unknown;
+    }): Promise<{
+        id: string;
+        token: string;
+    }>;
+    /** Revoke a link of this board. A link of another board is NOT_FOUND here, even for an owner of both. */
+    revokeLink(ctx: PrincipalContext, id: string, linkId: string): Promise<{
+        ok: true;
+    }>;
+}
+
 interface WorkerEnv {
     DB: D1Like;
     IMAGES: R2Like;
@@ -33,13 +108,22 @@ interface WorkerEnv {
     CANVAS_MAX_IMAGE_BYTES?: string;
 }
 type Role = "editor" | "viewer";
+/** The caller. `dev` is true for a token of the static list: it holds no board roles and reaches every board. */
+interface Caller {
+    actor: Principal;
+    role: Role;
+    principal: PrincipalContext;
+    dev: boolean;
+}
 type App = {
     Bindings: WorkerEnv;
     Variables: {
         service: CanvasService;
+        access: CanvasAccess;
         blobs: Blobs;
         actor: Principal;
         role: Role;
+        caller: Caller;
     };
 };
 interface AppOptions {
@@ -58,6 +142,8 @@ declare function authenticate(request: Request, env: WorkerEnv, store?: Store):
     actor: Principal;
     role: Role;
 } | null>;
+/** Like `authenticate`, with the whole principal context that board roles are checked against. */
+declare function identify(request: Request, env: WorkerEnv, store?: Store): Promise<Caller | null>;
 /** The image types we accept, found by their first bytes. The client's claim of a type is not trusted. */
 declare function sniffImage(bytes: Uint8Array): string | null;
 declare function createApp(options?: AppOptions): Hono<App>;
@@ -65,4 +151,4 @@ declare const _default: {
     fetch: (request: Request, env: WorkerEnv, ctx: unknown) => Response | Promise<Response>;
 };
 
-export { type AppOptions, type Role, WS_PROTOCOL, type WorkerEnv, authenticate, createApp, _default as default, sniffImage };
+export { type AppOptions, type Caller, type Role, WS_PROTOCOL, type WorkerEnv, authenticate, createApp, _default as default, identify, sniffImage };

package/dist/worker.js

@@ -2,10 +2,11 @@ import {
   WS_PROTOCOL,
   authenticate,
   createApp,
+  identify,
   sniffImage,
   worker_default
-} from "./chunk-EH7WCMK6.js";
-import "./chunk-GPSOLW2Y.js";
+} from "./chunk-JQCUVXXD.js";
+import "./chunk-M74ENUWR.js";
 import "./chunk-NWQED42L.js";
 import "./chunk-ZSPZMGHG.js";
 import "./chunk-JOBTIAFJ.js";
@@ -14,5 +15,6 @@ export {
   authenticate,
   createApp,
   worker_default as default,
+  identify,
   sniffImage
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-canvas",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "description": "A shared whiteboard for diagrams, drawn by people and agents.",
   "keywords": [
     "whiteboard",
@@ -25,6 +25,7 @@
   },
   "files": [
     "dist",
+    "LICENSE",
     "llms.txt",
     "SKILL.md"
   ],
@@ -80,11 +81,11 @@
   "dependencies": {
     "@dagrejs/dagre": "^3.1.3",
     "@modelcontextprotocol/sdk": "^1.12.0",
-    "agentic-design": "^0.2.0",
-    "agentic-identity": "^0.6.0",
+    "agentic-design": "^0.4.0",
+    "agentic-identity": "^0.7.0",
     "agentic-realtime": "^0.4.2",
     "yjs": "^13.6.0",
-    "zod": "^3.25.0"
+    "zod": "^4.6.7"
   },
   "peerDependencies": {
     "playwright-core": ">=1.40.0",
@@ -121,5 +122,8 @@
     "vite": "^7.3.7",
     "vitest": "^3.0.0",
     "wrangler": "^4.155.0"
+  },
+  "overrides": {
+    "zod": "$zod"
   }
 }