@liveblocks/core 1.3.1 → 1.3.3

package/dist/index.d.mts

@@ -655,7 +655,7 @@ declare type AuthValue = {
 declare type BaseMetadata = Record<string, string | boolean | number>;
 
 declare type CommentBodyBlockElement = CommentBodyParagraph;
-declare type CommentBodyInlineElement = CommentBodyText | CommentBodyMention;
+declare type CommentBodyInlineElement = CommentBodyText | CommentBodyMention | CommentBodyLink;
 declare type CommentBodyElement = CommentBodyBlockElement | CommentBodyInlineElement;
 declare type CommentBodyParagraph = {
     type: "paragraph";
@@ -665,6 +665,10 @@ declare type CommentBodyMention = {
     type: "mention";
     id: string;
 };
+declare type CommentBodyLink = {
+    type: "link";
+    url: string;
+};
 declare type CommentBodyText = {
     bold?: boolean;
     italic?: boolean;
@@ -1103,7 +1107,8 @@ declare type YDocUpdate = {
 declare type BroadcastedEventServerMsg<TRoomEvent extends Json> = {
     readonly type: ServerMsgCode.BROADCASTED_EVENT;
     /**
-     * The User who broadcasted the Event.
+     * The User who broadcast the Event. Absent when this event is broadcast from
+     * the REST API in the backend.
      */
     readonly actor: number;
     /**
@@ -1223,6 +1228,11 @@ declare type OthersEvent<TPresence extends JsonObject, TUserMeta extends BaseUse
 };
 
 declare type CustomEvent<TRoomEvent extends Json> = {
+    /**
+     * The connection ID of the client that sent the event.
+     * If this message was broadcast from the server (via the REST API), then
+     * this value will be -1.
+     */
     connectionId: number;
     event: TRoomEvent;
 };
@@ -2282,4 +2292,4 @@ declare type EnsureJson<T> = [
     [K in keyof T]: EnsureJson<T[K]>;
 };
 
-export { AckOp, AsyncCache, AsyncState, AsyncStateError, AsyncStateInitial, AsyncStateLoading, AsyncStateResolved, AsyncStateSuccess, BaseAuthResult, BaseMetadata, BaseUserMeta, BroadcastEventClientMsg, BroadcastOptions, BroadcastedEventServerMsg, Client, ClientMsg, ClientMsgCode, CommentBody, CommentBodyElement, CommentBodyMention, CommentBodyParagraph, CommentData, CommentsApi, CrdtType, CreateChildOp, CreateListOp, CreateMapOp, CreateObjectOp, CreateOp, CreateRegisterOp, CreateRootObjectOp, CustomAuthenticationResult, Delegates, DeleteCrdtOp, DeleteObjectKeyOp, DevToolsTreeNode as DevTools, protocol as DevToolsMsg, EnsureJson, EventSource, FetchStorageClientMsg, FetchYDocClientMsg, History, IWebSocket, IWebSocketCloseEvent, IWebSocketEvent, IWebSocketInstance, IWebSocketMessageEvent, IdTuple, Immutable, InitialDocumentStateServerMsg, Json, JsonArray, JsonObject, JsonScalar, LegacyConnectionStatus, LiveList, LiveListUpdate, LiveMap, LiveMapUpdate, LiveNode, LiveObject, LiveObjectUpdate, LiveStructure, LostConnectionEvent, Lson, LsonObject, NodeMap, Op, OpCode, Others, ParentToChildNodeMap, PlainLson, PlainLsonFields, PlainLsonList, PlainLsonMap, PlainLsonObject, RejectedStorageOpServerMsg, Resolve, Room, RoomInitializers, RoomStateServerMsg, SerializedChild, SerializedCrdt, SerializedList, SerializedMap, SerializedObject, SerializedRegister, SerializedRootObject, ServerMsg, ServerMsgCode, SetParentKeyOp, Status, StorageStatus, StorageUpdate, ThreadData, ToImmutable, ToJson, UnsubscribeCallback, UpdateObjectOp, UpdatePresenceClientMsg, UpdatePresenceServerMsg, UpdateStorageClientMsg, UpdateStorageServerMsg, UpdateYDocClientMsg, User, UserJoinServerMsg, UserLeftServerMsg, WebsocketCloseCodes, asPos, assert, assertNever, b64decode, fancyConsole as console, createAsyncCache, createClient, createCommentsApi, deprecate, deprecateIf, detectDupes, errorIf, freeze, isChildCrdt, isJsonArray, isJsonObject, isJsonScalar, isPlainObject, isRootCrdt, legacy_patchImmutableObject, lsonToJson, makeEventSource, makePoller, makePosition, nn, patchLiveObjectKey, shallow, throwUsageError, toPlainLson, tryParseJson, withTimeout };
+export { AckOp, AsyncCache, AsyncState, AsyncStateError, AsyncStateInitial, AsyncStateLoading, AsyncStateResolved, AsyncStateSuccess, BaseAuthResult, BaseMetadata, BaseUserMeta, BroadcastEventClientMsg, BroadcastOptions, BroadcastedEventServerMsg, Client, ClientMsg, ClientMsgCode, CommentBody, CommentBodyElement, CommentBodyLink, CommentBodyMention, CommentBodyParagraph, CommentData, CommentsApi, CrdtType, CreateChildOp, CreateListOp, CreateMapOp, CreateObjectOp, CreateOp, CreateRegisterOp, CreateRootObjectOp, CustomAuthenticationResult, Delegates, DeleteCrdtOp, DeleteObjectKeyOp, DevToolsTreeNode as DevTools, protocol as DevToolsMsg, EnsureJson, EventSource, FetchStorageClientMsg, FetchYDocClientMsg, History, IWebSocket, IWebSocketCloseEvent, IWebSocketEvent, IWebSocketInstance, IWebSocketMessageEvent, IdTuple, Immutable, InitialDocumentStateServerMsg, Json, JsonArray, JsonObject, JsonScalar, LegacyConnectionStatus, LiveList, LiveListUpdate, LiveMap, LiveMapUpdate, LiveNode, LiveObject, LiveObjectUpdate, LiveStructure, LostConnectionEvent, Lson, LsonObject, NodeMap, Op, OpCode, Others, ParentToChildNodeMap, PlainLson, PlainLsonFields, PlainLsonList, PlainLsonMap, PlainLsonObject, RejectedStorageOpServerMsg, Resolve, Room, RoomInitializers, RoomStateServerMsg, SerializedChild, SerializedCrdt, SerializedList, SerializedMap, SerializedObject, SerializedRegister, SerializedRootObject, ServerMsg, ServerMsgCode, SetParentKeyOp, Status, StorageStatus, StorageUpdate, ThreadData, ToImmutable, ToJson, UnsubscribeCallback, UpdateObjectOp, UpdatePresenceClientMsg, UpdatePresenceServerMsg, UpdateStorageClientMsg, UpdateStorageServerMsg, UpdateYDocClientMsg, User, UserJoinServerMsg, UserLeftServerMsg, WebsocketCloseCodes, asPos, assert, assertNever, b64decode, fancyConsole as console, createAsyncCache, createClient, createCommentsApi, deprecate, deprecateIf, detectDupes, errorIf, freeze, isChildCrdt, isJsonArray, isJsonObject, isJsonScalar, isPlainObject, isRootCrdt, legacy_patchImmutableObject, lsonToJson, makeEventSource, makePoller, makePosition, nn, patchLiveObjectKey, shallow, throwUsageError, toPlainLson, tryParseJson, withTimeout };

package/dist/index.d.ts

@@ -655,7 +655,7 @@ declare type AuthValue = {
 declare type BaseMetadata = Record<string, string | boolean | number>;
 
 declare type CommentBodyBlockElement = CommentBodyParagraph;
-declare type CommentBodyInlineElement = CommentBodyText | CommentBodyMention;
+declare type CommentBodyInlineElement = CommentBodyText | CommentBodyMention | CommentBodyLink;
 declare type CommentBodyElement = CommentBodyBlockElement | CommentBodyInlineElement;
 declare type CommentBodyParagraph = {
     type: "paragraph";
@@ -665,6 +665,10 @@ declare type CommentBodyMention = {
     type: "mention";
     id: string;
 };
+declare type CommentBodyLink = {
+    type: "link";
+    url: string;
+};
 declare type CommentBodyText = {
     bold?: boolean;
     italic?: boolean;
@@ -1103,7 +1107,8 @@ declare type YDocUpdate = {
 declare type BroadcastedEventServerMsg<TRoomEvent extends Json> = {
     readonly type: ServerMsgCode.BROADCASTED_EVENT;
     /**
-     * The User who broadcasted the Event.
+     * The User who broadcast the Event. Absent when this event is broadcast from
+     * the REST API in the backend.
      */
     readonly actor: number;
     /**
@@ -1223,6 +1228,11 @@ declare type OthersEvent<TPresence extends JsonObject, TUserMeta extends BaseUse
 };
 
 declare type CustomEvent<TRoomEvent extends Json> = {
+    /**
+     * The connection ID of the client that sent the event.
+     * If this message was broadcast from the server (via the REST API), then
+     * this value will be -1.
+     */
     connectionId: number;
     event: TRoomEvent;
 };
@@ -2282,4 +2292,4 @@ declare type EnsureJson<T> = [
     [K in keyof T]: EnsureJson<T[K]>;
 };
 
-export { AckOp, AsyncCache, AsyncState, AsyncStateError, AsyncStateInitial, AsyncStateLoading, AsyncStateResolved, AsyncStateSuccess, BaseAuthResult, BaseMetadata, BaseUserMeta, BroadcastEventClientMsg, BroadcastOptions, BroadcastedEventServerMsg, Client, ClientMsg, ClientMsgCode, CommentBody, CommentBodyElement, CommentBodyMention, CommentBodyParagraph, CommentData, CommentsApi, CrdtType, CreateChildOp, CreateListOp, CreateMapOp, CreateObjectOp, CreateOp, CreateRegisterOp, CreateRootObjectOp, CustomAuthenticationResult, Delegates, DeleteCrdtOp, DeleteObjectKeyOp, DevToolsTreeNode as DevTools, protocol as DevToolsMsg, EnsureJson, EventSource, FetchStorageClientMsg, FetchYDocClientMsg, History, IWebSocket, IWebSocketCloseEvent, IWebSocketEvent, IWebSocketInstance, IWebSocketMessageEvent, IdTuple, Immutable, InitialDocumentStateServerMsg, Json, JsonArray, JsonObject, JsonScalar, LegacyConnectionStatus, LiveList, LiveListUpdate, LiveMap, LiveMapUpdate, LiveNode, LiveObject, LiveObjectUpdate, LiveStructure, LostConnectionEvent, Lson, LsonObject, NodeMap, Op, OpCode, Others, ParentToChildNodeMap, PlainLson, PlainLsonFields, PlainLsonList, PlainLsonMap, PlainLsonObject, RejectedStorageOpServerMsg, Resolve, Room, RoomInitializers, RoomStateServerMsg, SerializedChild, SerializedCrdt, SerializedList, SerializedMap, SerializedObject, SerializedRegister, SerializedRootObject, ServerMsg, ServerMsgCode, SetParentKeyOp, Status, StorageStatus, StorageUpdate, ThreadData, ToImmutable, ToJson, UnsubscribeCallback, UpdateObjectOp, UpdatePresenceClientMsg, UpdatePresenceServerMsg, UpdateStorageClientMsg, UpdateStorageServerMsg, UpdateYDocClientMsg, User, UserJoinServerMsg, UserLeftServerMsg, WebsocketCloseCodes, asPos, assert, assertNever, b64decode, fancyConsole as console, createAsyncCache, createClient, createCommentsApi, deprecate, deprecateIf, detectDupes, errorIf, freeze, isChildCrdt, isJsonArray, isJsonObject, isJsonScalar, isPlainObject, isRootCrdt, legacy_patchImmutableObject, lsonToJson, makeEventSource, makePoller, makePosition, nn, patchLiveObjectKey, shallow, throwUsageError, toPlainLson, tryParseJson, withTimeout };
+export { AckOp, AsyncCache, AsyncState, AsyncStateError, AsyncStateInitial, AsyncStateLoading, AsyncStateResolved, AsyncStateSuccess, BaseAuthResult, BaseMetadata, BaseUserMeta, BroadcastEventClientMsg, BroadcastOptions, BroadcastedEventServerMsg, Client, ClientMsg, ClientMsgCode, CommentBody, CommentBodyElement, CommentBodyLink, CommentBodyMention, CommentBodyParagraph, CommentData, CommentsApi, CrdtType, CreateChildOp, CreateListOp, CreateMapOp, CreateObjectOp, CreateOp, CreateRegisterOp, CreateRootObjectOp, CustomAuthenticationResult, Delegates, DeleteCrdtOp, DeleteObjectKeyOp, DevToolsTreeNode as DevTools, protocol as DevToolsMsg, EnsureJson, EventSource, FetchStorageClientMsg, FetchYDocClientMsg, History, IWebSocket, IWebSocketCloseEvent, IWebSocketEvent, IWebSocketInstance, IWebSocketMessageEvent, IdTuple, Immutable, InitialDocumentStateServerMsg, Json, JsonArray, JsonObject, JsonScalar, LegacyConnectionStatus, LiveList, LiveListUpdate, LiveMap, LiveMapUpdate, LiveNode, LiveObject, LiveObjectUpdate, LiveStructure, LostConnectionEvent, Lson, LsonObject, NodeMap, Op, OpCode, Others, ParentToChildNodeMap, PlainLson, PlainLsonFields, PlainLsonList, PlainLsonMap, PlainLsonObject, RejectedStorageOpServerMsg, Resolve, Room, RoomInitializers, RoomStateServerMsg, SerializedChild, SerializedCrdt, SerializedList, SerializedMap, SerializedObject, SerializedRegister, SerializedRootObject, ServerMsg, ServerMsgCode, SetParentKeyOp, Status, StorageStatus, StorageUpdate, ThreadData, ToImmutable, ToJson, UnsubscribeCallback, UpdateObjectOp, UpdatePresenceClientMsg, UpdatePresenceServerMsg, UpdateStorageClientMsg, UpdateStorageServerMsg, UpdateYDocClientMsg, User, UserJoinServerMsg, UserLeftServerMsg, WebsocketCloseCodes, asPos, assert, assertNever, b64decode, fancyConsole as console, createAsyncCache, createClient, createCommentsApi, deprecate, deprecateIf, detectDupes, errorIf, freeze, isChildCrdt, isJsonArray, isJsonObject, isJsonScalar, isPlainObject, isRootCrdt, legacy_patchImmutableObject, lsonToJson, makeEventSource, makePoller, makePosition, nn, patchLiveObjectKey, shallow, throwUsageError, toPlainLson, tryParseJson, withTimeout };

package/dist/index.js

@@ -6,7 +6,7 @@ var __export = (target, all) => {
 
 // src/version.ts
 var PKG_NAME = "@liveblocks/core";
-var PKG_VERSION = "1.3.1";
+var PKG_VERSION = "1.3.3";
 var PKG_FORMAT = "cjs";
 
 // src/dupe-detection.ts
@@ -1281,6 +1281,7 @@ function parseAuthToken(rawTokenString) {
 // src/auth-manager.ts
 function createAuthManager(authOptions) {
   const authentication = prepareAuthentication(authOptions);
+  const seenTokens = /* @__PURE__ */ new Set();
   const tokens = [];
   const expiryTimes = [];
   const requestPromises = /* @__PURE__ */ new Map();
@@ -1304,8 +1305,6 @@ function createAuthManager(authOptions) {
       }
       if (token.parsed.k === "id" /* ID_TOKEN */) {
         return token;
-      } else if (token.parsed.k === "sec-legacy" /* SECRET_LEGACY */) {
-        return void 0;
       } else if (token.parsed.k === "acc" /* ACCESS_TOKEN */) {
         for (const [resource, scopes] of Object.entries(token.parsed.perms)) {
           if (resource.includes("*") && roomId.startsWith(resource.replace("*", "")) || roomId === resource && hasCorrespondingScopes(requestedScope, scopes)) {
@@ -1327,7 +1326,13 @@ function createAuthManager(authOptions) {
       const response = await fetchAuthEndpoint(fetcher, authentication.url, {
         room: roomId
       });
-      return parseAuthToken(response.token);
+      const parsed = parseAuthToken(response.token);
+      if (seenTokens.has(parsed.raw)) {
+        throw new StopRetrying(
+          "The same Liveblocks auth token was issued from the backend before. Caching Liveblocks tokens is not supported."
+        );
+      }
+      return parsed;
     }
     if (authentication.type === "custom") {
       const response = await authentication.callback(roomId);
@@ -1368,8 +1373,11 @@ function createAuthManager(authOptions) {
       const token = await currentPromise;
       const BUFFER = 30;
       const expiresAt = Math.floor(Date.now() / 1e3) + (token.parsed.exp - token.parsed.iat) - BUFFER;
-      tokens.push(token);
-      expiryTimes.push(expiresAt);
+      seenTokens.add(token.raw);
+      if (token.parsed.k !== "sec-legacy" /* SECRET_LEGACY */) {
+        tokens.push(token);
+        expiryTimes.push(expiresAt);
+      }
       return { type: "secret", token };
     } finally {
       requestPromises.delete(roomId);
@@ -1703,7 +1711,9 @@ function createCommentsApi(roomId, getAuthValue, { serverEndpoint }) {
   }
   async function fetchApi(roomId2, endpoint, options) {
     const authValue = await getAuthValue();
-    const url = `${serverEndpoint}/c/rooms/${roomId2}${endpoint}`;
+    const url = `${serverEndpoint}/c/rooms/${encodeURIComponent(
+      roomId2
+    )}${endpoint}`;
     return await fetch(url, {
       ...options,
       headers: {
@@ -1749,7 +1759,7 @@ function createCommentsApi(roomId, getAuthValue, { serverEndpoint }) {
     threadId
   }) {
     return fetchJson(
-      `/threads/${threadId}/metadata`,
+      `/threads/${encodeURIComponent(threadId)}/metadata`,
       {
         method: "POST",
         headers: {
@@ -1764,16 +1774,19 @@ function createCommentsApi(roomId, getAuthValue, { serverEndpoint }) {
     commentId,
     body
   }) {
-    return fetchJson(`/threads/${threadId}/comments`, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json"
-      },
-      body: JSON.stringify({
-        id: commentId,
-        body
-      })
-    });
+    return fetchJson(
+      `/threads/${encodeURIComponent(threadId)}/comments`,
+      {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify({
+          id: commentId,
+          body
+        })
+      }
+    );
   }
   function editComment({
     threadId,
@@ -1781,7 +1794,9 @@ function createCommentsApi(roomId, getAuthValue, { serverEndpoint }) {
     body
   }) {
     return fetchJson(
-      `/threads/${threadId}/comments/${commentId}`,
+      `/threads/${encodeURIComponent(threadId)}/comments/${encodeURIComponent(
+        commentId
+      )}`,
       {
         method: "POST",
         headers: {
@@ -1797,9 +1812,14 @@ function createCommentsApi(roomId, getAuthValue, { serverEndpoint }) {
     threadId,
     commentId
   }) {
-    await fetchJson(`/threads/${threadId}/comments/${commentId}`, {
-      method: "DELETE"
-    });
+    await fetchJson(
+      `/threads/${encodeURIComponent(threadId)}/comments/${encodeURIComponent(
+        commentId
+      )}`,
+      {
+        method: "DELETE"
+      }
+    );
   }
   return {
     getThreads,