@isomorph.ai/app-sdk 2.7.0 → 2.7.1

package/README.md

@@ -588,6 +588,14 @@ and no second GET is sent. When the refresh fails, `identity.current()`
 answers `null` and listeners hear `null`, as before. On the page's own origin
 the identity GET is never renewed (it is the renewal). (1.5.3)
 
+When the renewal cannot restore the sign-in — the refresh failed, or the
+resend was refused again — the session has ended (a platform operator's
+session never renews; any session ends at its lifetime). That refusal's
+message is `Your sign-in has ended. Reload the page to sign in again.`, which
+you can show as is; its `category` (`AUTH_REQUIRED`), `status` (401),
+`requestId` and `details` are unchanged, so branch on `category`. A 401 your
+own action or a connected service gave keeps its own message. (2.7.1)
+
 ## External OTP users
 
 Use `user.id` for ownership and database row rules. External users can sign in with a phone number and have no email. `user.name`, `user.phone`, `user.email` and the `emailVerified`/`phoneVerified` flags describe their profile; an optional contact is not verified automatically. `user.directory` identifies `company` or `external`. Database transactions also expose `current_setting('harbour.directory', true)` when a row rule needs that distinction.

package/dist/index.js

@@ -183,6 +183,18 @@ function renewableOnUnauthorized(path) {
         return false;
     return path.startsWith('/_harbour/') && path !== IDENTITY_PATH;
 }
+// A browser call still refused after the renewal could not restore the
+// identity (the API-host refresh failed, or the resend was refused again)
+// means the person's sign-in has ended: a platform operator's session never
+// renews (governance ADR 0178), and any session ends at its lifetime. The
+// gateway's wire message is for engineers, and apps showed it verbatim to
+// people mid-task (escplan, 2026-11-07), so that refusal reads as a plain
+// instruction instead; category, status, requestId and details are kept.
+// Only the identity refusal is reworded — the gateway's own sentence, or a
+// 401 with no Isomorph error at all (an edge refusal). A 401 an action or a
+// connected service gave keeps its own words.
+const IDENTITY_REFUSAL = 'signed Isomorph identity is required';
+const SIGN_IN_ENDED = 'Your sign-in has ended. Reload the page to sign in again.';
 class Transport {
     onUnauthorized;
     baseUrl;
@@ -207,7 +219,7 @@ class Transport {
     json(path, init = {}, onProgress) {
         return this.request(path, init, renewableOnUnauthorized(path) || (this.separateApiHost && path === IDENTITY_PATH), onProgress);
     }
-    async request(path, init, renewOnUnauthorized, onProgress) {
+    async request(path, init, renewOnUnauthorized, onProgress, renewalTried = false) {
         const sentAt = this.renewal?.renewals() ?? 0;
         const action = currentAction();
         // (headers with an undefined value are removed so a multipart body can
@@ -245,13 +257,17 @@ class Transport {
                     if (renewed && path === IDENTITY_PATH)
                         return renewed;
                     if (renewed !== false)
-                        return this.request(path, init, false, onProgress);
+                        return this.request(path, init, false, onProgress, true);
+                    renewalTried = true;
                 }
                 // Not before the resend: a page listening to identity.onChange would
                 // otherwise see the user flicker to null while the edge was healing.
                 this.onUnauthorized?.();
             }
-            throw new IsomorphError(body?.error?.category ?? (response.status === 401 ? 'AUTH_REQUIRED' : response.status === 403 ? 'FORBIDDEN' : 'INTERNAL'), body?.error?.message ?? `Isomorph request failed with ${response.status}`, body?.requestId ?? response.headers.get('x-request-id') ?? undefined, body?.error?.details, response.status);
+            const category = body?.error?.category ?? (response.status === 401 ? 'AUTH_REQUIRED' : response.status === 403 ? 'FORBIDDEN' : 'INTERNAL');
+            const signInEnded = renewalTried && response.status === 401 && category === 'AUTH_REQUIRED'
+                && (body?.error?.message === undefined || body.error.message === IDENTITY_REFUSAL);
+            throw new IsomorphError(category, signInEnded ? SIGN_IN_ENDED : body?.error?.message ?? `Isomorph request failed with ${response.status}`, body?.requestId ?? response.headers.get('x-request-id') ?? undefined, body?.error?.details, response.status);
         }
         return (body && Object.prototype.hasOwnProperty.call(body, 'data') ? body.data : body);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@isomorph.ai/app-sdk",
-  "version": "2.7.0",
+  "version": "2.7.1",
   "type": "module",
   "repository": {
     "type": "git",