@parhelia/core 0.4.12818 → 0.4.12871

package/dist/editor/services/renderingsService.d.ts

@@ -0,0 +1,117 @@
+import { type ExecutionResult } from "./serviceHelper";
+/**
+ * Approval of dynamic renderings (agent-written components and the tenant's
+ * theme). Published pages show a rendering only once an administrator approved
+ * its exact current code; the CM answers these endpoints for the signed-in
+ * editor.
+ */
+export declare const RENDERINGS_ENDPOINT = "/parhelia/renderings";
+export type RenderingState = {
+    id: string;
+    name: string;
+    kind: "component" | "theme";
+    path: string;
+    hasClientCode: boolean;
+    hash: string;
+    approved: boolean;
+    changedSinceApproval: boolean;
+    approvedBy?: string | null;
+    /** ISO 8601, UTC. */
+    approvedAt?: string | null;
+    sandbox: boolean;
+};
+export type RenderingPageState = {
+    /**
+     * An administrator, or on a sandbox page its owner: may open the review
+     * (code, AI check, client code in a sealed frame). Everyone else sees client
+     * code run only once approved.
+     */
+    canReview: boolean;
+    /** An administrator on a page outside a sandbox. */
+    canApprove: boolean;
+    /** The listed renderings plus the page tenant's theme. */
+    renderings: RenderingState[];
+};
+export type RenderingSource = RenderingState & {
+    code: string;
+    clientCode: string | null;
+};
+export type PageVersion = {
+    id: string;
+    language: string;
+    version: number;
+};
+export type RenderingsResult<T> = {
+    ok: true;
+    data: T;
+} | {
+    ok: false;
+    status?: number;
+    message: string;
+};
+/**
+ * The server's own message for a failed request. Parhelia errors are JSON
+ * `{ summary, details }`; some statuses reach the helper's generic branch with
+ * that JSON as raw text, so it is parsed here rather than shown verbatim.
+ */
+export declare function getServerMessage(result: ExecutionResult<unknown>, fallback: string): string;
+/** A rendering state from the server, or undefined when it is not one. */
+export declare function toRenderingState(value: unknown): RenderingState | undefined;
+export declare function buildPageStateUrl(page: PageVersion, renderingIds: readonly string[]): string;
+/** Approval state of the listed renderings and the page tenant's theme. */
+export declare function fetchRenderingPageState(page: PageVersion, renderingIds: readonly string[], signal?: AbortSignal): Promise<RenderingsResult<RenderingPageState>>;
+/** A rendering's code and client code with its approval state. */
+export declare function fetchRenderingSource(id: string, signal?: AbortSignal): Promise<RenderingsResult<RenderingSource>>;
+/**
+ * Approves exactly the code the administrator looked at: the CM refuses (409)
+ * when `hash` is no longer the rendering's current one, and (422) while the AI
+ * check reports a high finding and no `overrideReason` is given. The reason is
+ * recorded with the findings it overrides.
+ */
+export declare function approveRendering(id: string, hash: string, overrideReason?: string): Promise<RenderingsResult<RenderingState | undefined>>;
+export type RenderingCheckSeverity = "high" | "medium" | "low";
+export type RenderingCheckFinding = {
+    severity: RenderingCheckSeverity;
+    title: string;
+    detail: string | null;
+    /** Which code the finding is about; null for the rendering as a whole. */
+    source: "code" | "clientCode" | null;
+    line: number | null;
+    excerpt: string | null;
+};
+export type RenderingCheckOverride = {
+    by: string;
+    /** ISO 8601, UTC. */
+    at: string;
+    reason: string;
+};
+/**
+ * The AI check of a rendering's current code. `blocks` is set while it
+ * reports a high finding, and when the code could not be checked (`failed`:
+ * a content filter, an unreadable answer, a timeout, code too large).
+ */
+export type RenderingCheck = {
+    status: "checked" | "unavailable" | "failed";
+    /** The approval hash the check is about. */
+    hash: string;
+    blocks: boolean;
+    /** Why there is no result (unavailable, failed). */
+    message: string | null;
+    summary: string | null;
+    findings: RenderingCheckFinding[];
+    model: string | null;
+    checkedAt: string | null;
+    overrides: RenderingCheckOverride[];
+};
+/** An AI check from the server, or undefined when it is not one. */
+export declare function toRenderingCheck(value: unknown): RenderingCheck | undefined;
+/**
+ * The AI check of the rendering's current code: the cached one, or a new one
+ * (which can take a minute). `rerun` checks again (administrators only).
+ */
+export declare function checkRendering(id: string, options?: {
+    rerun?: boolean;
+    signal?: AbortSignal;
+}): Promise<RenderingsResult<RenderingCheck>>;
+/** Ends the approval; published pages stop showing the rendering at once. */
+export declare function revokeRendering(id: string): Promise<RenderingsResult<RenderingState | undefined>>;

package/dist/editor/services/renderingsService.js

@@ -0,0 +1,245 @@
+import { get, post, PARHELIA_REQUEST_HEADER, PARHELIA_REQUEST_HEADER_VALUE, } from "./serviceHelper";
+/**
+ * Approval of dynamic renderings (agent-written components and the tenant's
+ * theme). Published pages show a rendering only once an administrator approved
+ * its exact current code; the CM answers these endpoints for the signed-in
+ * editor.
+ */
+export const RENDERINGS_ENDPOINT = "/parhelia/renderings";
+/**
+ * The server's own message for a failed request. Parhelia errors are JSON
+ * `{ summary, details }`; some statuses reach the helper's generic branch with
+ * that JSON as raw text, so it is parsed here rather than shown verbatim.
+ */
+export function getServerMessage(result, fallback) {
+    const raw = result.rawDetails ?? result.details;
+    if (raw) {
+        try {
+            const parsed = JSON.parse(raw);
+            const parts = [parsed.summary, parsed.details, parsed.error].filter((part) => typeof part === "string" && !!part.trim());
+            if (parts.length > 0)
+                return parts.join(": ");
+        }
+        catch {
+            // Not JSON: fall through to the helper's own summary/details.
+        }
+    }
+    return ([result.summary, result.details]
+        .filter((part) => typeof part === "string" && !!part)
+        .join(": ") || fallback);
+}
+function optionalString(value) {
+    return typeof value === "string" && value.trim() ? value : null;
+}
+/** A rendering state from the server, or undefined when it is not one. */
+export function toRenderingState(value) {
+    if (!value || typeof value !== "object")
+        return undefined;
+    const candidate = value;
+    if (typeof candidate.id !== "string" || !candidate.id)
+        return undefined;
+    return {
+        id: candidate.id,
+        name: typeof candidate.name === "string" ? candidate.name : "",
+        kind: candidate.kind === "theme" ? "theme" : "component",
+        path: typeof candidate.path === "string" ? candidate.path : "",
+        hasClientCode: candidate.hasClientCode === true,
+        hash: typeof candidate.hash === "string" ? candidate.hash : "",
+        approved: candidate.approved === true,
+        changedSinceApproval: candidate.changedSinceApproval === true,
+        approvedBy: optionalString(candidate.approvedBy),
+        approvedAt: optionalString(candidate.approvedAt),
+        sandbox: candidate.sandbox === true,
+    };
+}
+function toRenderingSource(value) {
+    const state = toRenderingState(value);
+    if (!state)
+        return undefined;
+    const candidate = value;
+    if (typeof candidate.code !== "string")
+        return undefined;
+    return {
+        ...state,
+        code: candidate.code,
+        clientCode: typeof candidate.clientCode === "string" ? candidate.clientCode : null,
+    };
+}
+function toPageState(value) {
+    if (!value || typeof value !== "object")
+        return undefined;
+    const candidate = value;
+    if (!Array.isArray(candidate.renderings))
+        return undefined;
+    return {
+        canReview: candidate.canReview === true,
+        canApprove: candidate.canApprove === true,
+        renderings: candidate.renderings
+            .map(toRenderingState)
+            .filter((state) => !!state),
+    };
+}
+const requestHeaders = {
+    [PARHELIA_REQUEST_HEADER]: PARHELIA_REQUEST_HEADER_VALUE,
+};
+function failure(result, fallback) {
+    return {
+        ok: false,
+        status: result.response?.status,
+        message: getServerMessage(result, fallback),
+    };
+}
+function thrown(error, fallback) {
+    return {
+        ok: false,
+        message: error instanceof Error ? error.message : fallback,
+    };
+}
+export function buildPageStateUrl(page, renderingIds) {
+    const params = new URLSearchParams({
+        item: page.id,
+        language: page.language,
+        version: String(page.version),
+        renderings: renderingIds.join(","),
+    });
+    return `${RENDERINGS_ENDPOINT}/pageState?${params.toString()}`;
+}
+/** Approval state of the listed renderings and the page tenant's theme. */
+export async function fetchRenderingPageState(page, renderingIds, signal) {
+    const fallback = "The approval state of the renderings could not be loaded.";
+    try {
+        const result = await get(buildPageStateUrl(page, renderingIds), undefined, signal, requestHeaders);
+        if (result.type !== "success")
+            return failure(result, fallback);
+        const state = toPageState(result.data);
+        return state
+            ? { ok: true, data: state }
+            : { ok: false, message: "The server returned an unexpected answer." };
+    }
+    catch (error) {
+        return thrown(error, fallback);
+    }
+}
+/** A rendering's code and client code with its approval state. */
+export async function fetchRenderingSource(id, signal) {
+    const fallback = "The code of the rendering could not be loaded.";
+    try {
+        const result = await get(`${RENDERINGS_ENDPOINT}/source?${new URLSearchParams({ id }).toString()}`, undefined, signal, requestHeaders);
+        if (result.type !== "success")
+            return failure(result, fallback);
+        const source = toRenderingSource(result.data);
+        return source
+            ? { ok: true, data: source }
+            : { ok: false, message: "The server returned an unexpected answer." };
+    }
+    catch (error) {
+        return thrown(error, fallback);
+    }
+}
+async function postApproval(action, body, fallback) {
+    try {
+        // post() sends the Parhelia request header; the installed fetch wrapper
+        // adds the CSRF token.
+        const result = await post(`${RENDERINGS_ENDPOINT}/${action}`, body);
+        if (result.type !== "success")
+            return failure(result, fallback);
+        const data = result.data;
+        return { ok: true, data: toRenderingState(data?.state) };
+    }
+    catch (error) {
+        return thrown(error, fallback);
+    }
+}
+/**
+ * Approves exactly the code the administrator looked at: the CM refuses (409)
+ * when `hash` is no longer the rendering's current one, and (422) while the AI
+ * check reports a high finding and no `overrideReason` is given. The reason is
+ * recorded with the findings it overrides.
+ */
+export function approveRendering(id, hash, overrideReason) {
+    return postApproval("approve", overrideReason ? { id, hash, overrideReason } : { id, hash }, "The rendering could not be approved.");
+}
+function toFinding(value) {
+    if (!value || typeof value !== "object")
+        return undefined;
+    const candidate = value;
+    const title = optionalString(candidate.title);
+    if (!title)
+        return undefined;
+    return {
+        severity: candidate.severity === "high" || candidate.severity === "low"
+            ? candidate.severity
+            : "medium",
+        title,
+        detail: optionalString(candidate.detail),
+        source: candidate.source === "code" || candidate.source === "clientCode"
+            ? candidate.source
+            : null,
+        line: typeof candidate.line === "number" && candidate.line > 0
+            ? candidate.line
+            : null,
+        excerpt: optionalString(candidate.excerpt),
+    };
+}
+function toOverride(value) {
+    if (!value || typeof value !== "object")
+        return undefined;
+    const candidate = value;
+    const by = optionalString(candidate.by);
+    const at = optionalString(candidate.at);
+    const reason = optionalString(candidate.reason);
+    return by && at && reason ? { by, at, reason } : undefined;
+}
+/** An AI check from the server, or undefined when it is not one. */
+export function toRenderingCheck(value) {
+    if (!value || typeof value !== "object")
+        return undefined;
+    const candidate = value;
+    const status = candidate.status;
+    if (status !== "checked" && status !== "unavailable" && status !== "failed")
+        return undefined;
+    return {
+        status,
+        hash: typeof candidate.hash === "string" ? candidate.hash : "",
+        // "unavailable" (no Reviewer Model) never blocks; a failed check does.
+        blocks: status !== "unavailable" && candidate.blocks === true,
+        message: optionalString(candidate.message),
+        summary: optionalString(candidate.summary),
+        findings: Array.isArray(candidate.findings)
+            ? candidate.findings
+                .map(toFinding)
+                .filter((finding) => !!finding)
+            : [],
+        model: optionalString(candidate.model),
+        checkedAt: optionalString(candidate.checkedAt),
+        overrides: Array.isArray(candidate.overrides)
+            ? candidate.overrides
+                .map(toOverride)
+                .filter((entry) => !!entry)
+            : [],
+    };
+}
+/**
+ * The AI check of the rendering's current code: the cached one, or a new one
+ * (which can take a minute). `rerun` checks again (administrators only).
+ */
+export async function checkRendering(id, options = {}) {
+    const fallback = "The AI check could not be run.";
+    try {
+        const result = await post(`${RENDERINGS_ENDPOINT}/check`, options.rerun ? { id, rerun: true } : { id }, undefined, options.signal);
+        if (result.type !== "success")
+            return failure(result, fallback);
+        const check = toRenderingCheck(result.data);
+        return check
+            ? { ok: true, data: check }
+            : { ok: false, message: "The server returned an unexpected answer." };
+    }
+    catch (error) {
+        return thrown(error, fallback);
+    }
+}
+/** Ends the approval; published pages stop showing the rendering at once. */
+export function revokeRendering(id) {
+    return postApproval("revoke", { id }, "The approval could not be revoked.");
+}
+//# sourceMappingURL=renderingsService.js.map

package/dist/editor/services/renderingsService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderingsService.js","sourceRoot":"","sources":["../../../src/editor/services/renderingsService.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,GAAG,EACH,IAAI,EACJ,uBAAuB,EACvB,6BAA6B,GAE9B,MAAM,iBAAiB,CAAC;AAEzB;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AA4C1D;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAgC,EAChC,QAAgB;IAEhB,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,CAAC;IAChD,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAI5B,CAAC;YACF,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CACjE,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CACpE,CAAC;YACF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;QAChE,CAAC;IACH,CAAC;IACD,OAAO,CACL,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;SAC7B,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC;SACpE,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAC1B,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,IAAI,OAAO,SAAS,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IACxE,OAAO;QACL,EAAE,EAAE,SAAS,CAAC,EAAE;QAChB,IAAI,EAAE,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QAC9D,IAAI,EAAE,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;QACxD,IAAI,EAAE,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QAC9D,aAAa,EAAE,SAAS,CAAC,aAAa,KAAK,IAAI;QAC/C,IAAI,EAAE,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QAC9D,QAAQ,EAAE,SAAS,CAAC,QAAQ,KAAK,IAAI;QACrC,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,KAAK,IAAI;QAC7D,UAAU,EAAE,cAAc,CAAC,SAAS,CAAC,UAAU,CAAC;QAChD,UAAU,EAAE,cAAc,CAAC,SAAS,CAAC,UAAU,CAAC;QAChD,OAAO,EAAE,SAAS,CAAC,OAAO,KAAK,IAAI;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACzD,OAAO;QACL,GAAG,KAAK;QACR,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,UAAU,EACR,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;KACzE,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3D,OAAO;QACL,SAAS,EAAE,SAAS,CAAC,SAAS,KAAK,IAAI;QACvC,UAAU,EAAE,SAAS,CAAC,UAAU,KAAK,IAAI;QACzC,UAAU,EAAE,SAAS,CAAC,UAAU;aAC7B,GAAG,CAAC,gBAAgB,CAAC;aACrB,MAAM,CAAC,CAAC,KAAK,EAA2B,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAAG;IACrB,CAAC,uBAAuB,CAAC,EAAE,6BAA6B;CACzD,CAAC;AAEF,SAAS,OAAO,CACd,MAAgC,EAChC,QAAgB;IAEhB,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM;QAC/B,OAAO,EAAE,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,QAAgB;IAC9C,OAAO;QACL,EAAE,EAAE,KAAc;QAClB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;KAC3D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAiB,EACjB,YAA+B;IAE/B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,IAAI,EAAE,IAAI,CAAC,EAAE;QACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QAC7B,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;KACnC,CAAC,CAAC;IACH,OAAO,GAAG,mBAAmB,cAAc,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AACjE,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAiB,EACjB,YAA+B,EAC/B,MAAoB;IAEpB,MAAM,QAAQ,GAAG,2DAA2D,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,iBAAiB,CAAC,IAAI,EAAE,YAAY,CAAC,EACrC,SAAS,EACT,MAAM,EACN,cAAc,CACf,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,KAAK;YACV,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE;YAC3B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,EAAU,EACV,MAAoB;IAEpB,MAAM,QAAQ,GAAG,gDAAgD,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,GAAG,mBAAmB,WAAW,IAAI,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,EACzE,SAAS,EACT,MAAM,EACN,cAAc,CACf,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,MAAM;YACX,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YAC5B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,MAA4B,EAC5B,IAA4B,EAC5B,QAAgB;IAEhB,IAAI,CAAC;QACH,wEAAwE;QACxE,uBAAuB;QACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,GAAG,mBAAmB,IAAI,MAAM,EAAE,EAClC,IAAI,CACL,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAuC,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,EAAU,EACV,IAAY,EACZ,cAAuB;IAEvB,OAAO,YAAY,CACjB,SAAS,EACT,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAC5D,sCAAsC,CACvC,CAAC;AACJ,CAAC;AAwCD,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO;QACL,QAAQ,EACN,SAAS,CAAC,QAAQ,KAAK,MAAM,IAAI,SAAS,CAAC,QAAQ,KAAK,KAAK;YAC3D,CAAC,CAAC,SAAS,CAAC,QAAQ;YACpB,CAAC,CAAC,QAAQ;QACd,KAAK;QACL,MAAM,EAAE,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC;QACxC,MAAM,EACJ,SAAS,CAAC,MAAM,KAAK,MAAM,IAAI,SAAS,CAAC,MAAM,KAAK,YAAY;YAC9D,CAAC,CAAC,SAAS,CAAC,MAAM;YAClB,CAAC,CAAC,IAAI;QACV,IAAI,EACF,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC;YACtD,CAAC,CAAC,SAAS,CAAC,IAAI;YAChB,CAAC,CAAC,IAAI;QACV,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,MAAM,EAAE,GAAG,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChD,OAAO,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IAChC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,QAAQ;QACzE,OAAO,SAAS,CAAC;IACnB,OAAO;QACL,MAAM;QACN,IAAI,EAAE,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QAC9D,uEAAuE;QACvE,MAAM,EAAE,MAAM,KAAK,aAAa,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI;QAC7D,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC;QAC1C,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC;QAC1C,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC;YACzC,CAAC,CAAC,SAAS,CAAC,QAAQ;iBACf,GAAG,CAAC,SAAS,CAAC;iBACd,MAAM,CAAC,CAAC,OAAO,EAAoC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACrE,CAAC,CAAC,EAAE;QACN,KAAK,EAAE,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC;QACtC,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC;QAC9C,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC;YAC3C,CAAC,CAAC,SAAS,CAAC,SAAS;iBAChB,GAAG,CAAC,UAAU,CAAC;iBACf,MAAM,CAAC,CAAC,KAAK,EAAmC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;YAChE,CAAC,CAAC,EAAE;KACP,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAU,EACV,OAAO,GAA8C,EAAE;IAEvD,MAAM,QAAQ,GAAG,gCAAgC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,GAAG,mBAAmB,QAAQ,EAC9B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAC5C,SAAS,EACT,OAAO,CAAC,MAAM,CACf,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5C,OAAO,KAAK;YACV,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE;YAC3B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,OAAO,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,oCAAoC,CAAC,CAAC;AAC9E,CAAC"}

package/dist/editor/services/reviewsService.d.ts

@@ -1,8 +1,9 @@
 import { Comment, CommentTag, CreateReviewRequest, ReviewListItem, ReviewWithPages, ReviewAssignment, ReviewerInfo, ItemWithSubtree, ReviewWithAssignments, SendInvitationsResponse } from "../../types";
 import { ItemDescriptor } from "../pageModel";
-export declare function createOrUpdateComment(comment: Comment, reviewId?: string): Promise<import("./serviceHelper").ExecutionResult<unknown>>;
+export declare function createOrUpdateComment(comment: Comment): Promise<import("./serviceHelper").ExecutionResult<unknown>>;
 export declare function getComments(itemId: string, language: string, version: number, reviewId?: string): Promise<import("./serviceHelper").ExecutionResult<Comment[]>>;
 export declare function getLatestComments(take?: number, language?: string): Promise<import("./serviceHelper").ExecutionResult<Comment[]>>;
+export declare function getSubtreeComments(rootItemId: string, language: string): Promise<import("./serviceHelper").ExecutionResult<Comment[]>>;
 export declare function resolveComment(comment: Comment): Promise<import("./serviceHelper").ExecutionResult<Comment>>;
 export declare function unresolveComment(comment: Comment): Promise<import("./serviceHelper").ExecutionResult<Comment>>;
 export declare function deleteComment(comment: Comment): Promise<import("./serviceHelper").ExecutionResult<unknown>>;
@@ -12,6 +13,10 @@ export declare function rejectReview(itemDescriptor: ItemDescriptor): Promise<im
 export declare function createReview(request: CreateReviewRequest): Promise<import("./serviceHelper").ExecutionResult<{
     reviewId: string;
 }>>;
+export declare function getInvitationSenderStatus(): Promise<import("./serviceHelper").ExecutionResult<{
+    configured: boolean;
+    message?: string;
+}>>;
 export declare function suggestReviewName(req: {
     itemIds: string[];
     languages: string[];

package/dist/editor/services/reviewsService.js

@@ -1,10 +1,6 @@
 import { get, post } from "./serviceHelper";
-export function createOrUpdateComment(comment, reviewId) {
-    const params = new URLSearchParams();
-    if (reviewId)
-        params.set("reviewId", reviewId);
-    const query = params.toString();
-    return post(`/parhelia/comments/save${query ? `?${query}` : ""}`, comment);
+export function createOrUpdateComment(comment) {
+    return post(`/parhelia/comments/save`, comment);
 }
 export function getComments(itemId, language, version, reviewId) {
     const params = new URLSearchParams({
@@ -27,6 +23,13 @@ export function getLatestComments(take, language) {
     const query = params.toString();
     return get(`/parhelia/comments/latest${query ? `?${query}` : ""}`);
 }
+// Comments on an item and every item beneath it (latest version per item, one
+// language), already filtered by the backend for user access. Backs the
+// feedback sidebar.
+export function getSubtreeComments(rootItemId, language) {
+    const params = new URLSearchParams({ rootItemId, language });
+    return get(`/parhelia/comments/subtree?${params.toString()}`);
+}
 export function resolveComment(comment) {
     return post(`/parhelia/comments/resolve?commentId=${comment.id}`, {});
 }
@@ -49,6 +52,11 @@ export function rejectReview(itemDescriptor) {
 export function createReview(request) {
     return post(`/parhelia/reviews/create`, request);
 }
+// Whether invitation emails can be sent (a valid sender address is configured).
+// The create-review wizard checks this up front instead of failing on submit.
+export function getInvitationSenderStatus() {
+    return get(`/parhelia/reviews/invitationSenderStatus`);
+}
 // Ask the backend to generate a short, descriptive review name from the
 // selected items and languages. Returns null on any failure so callers can
 // silently fall back to an empty/placeholder name.

package/dist/editor/services/reviewsService.js.map

@@ -1 +1 @@
-{"version":3,"file":"reviewsService.js","sourceRoot":"","sources":["../../../src/editor/services/reviewsService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAe5C,MAAM,UAAU,qBAAqB,CAAC,OAAgB,EAAE,QAAiB;IACvE,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,QAAQ;QAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,OAAO,IAAI,CAAC,0BAA0B,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,QAAgB,EAChB,OAAe,EACf,QAAiB;IAEjB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,UAAU,EAAE,MAAM;QAClB,QAAQ;QACR,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;KAC5B,CAAC,CAAC;IACH,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,GAAG,CAAY,4BAA4B,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,iBAAiB,CAAC,IAAa,EAAE,QAAiB;IAChE,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,IAAI,IAAI,IAAI,GAAG,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1D,IAAI,QAAQ;QAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,OAAO,GAAG,CAAY,4BAA4B,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC7C,OAAO,IAAI,CAAU,wCAAwC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,OAAO,IAAI,CACT,0CAA0C,OAAO,CAAC,EAAE,EAAE,EACtD,EAAE,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,OAAO,IAAI,CAAC,uCAAuC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,QAAgB,EAAE,OAAe;IAC1E,OAAO,GAAG,CACR,kCAAkC,MAAM,aAAa,QAAQ,YAAY,OAAO,EAAE,CACnF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,cAA8B;IAC1D,OAAO,IAAI,CAAC,2BAA2B,EAAE,cAAc,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,cAA8B;IACzD,OAAO,IAAI,CAAC,0BAA0B,EAAE,cAAc,CAAC,CAAC;AAC1D,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD,OAAO,IAAI,CAAuB,0BAA0B,EAAE,OAAO,CAAC,CAAC;AACzE,CAAC;AAED,wEAAwE;AACxE,2EAA2E;AAC3E,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAKvC;IACC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAC/B,qCAAqC,EACrC;QACE,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,CAAC;QACrC,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,eAAe;KACvC,CACF,CAAC;IACF,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAChC,OAAO,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,kEAAkE;IAClE,OAAO,GAAG,CAAmB,uBAAuB,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAuC;IAClE,MAAM,eAAe,GAAG,OAAO,EAAE,eAAe,KAAK,KAAK,CAAC;IAC3D,OAAO,GAAG,CACR,0CAA0C,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAC/E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO,GAAG,CAOP,qCAAqC,QAAQ,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,SAAyB;IACtE,OAAO,IAAI,CAAC,gCAAgC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,YAAoB;IACjD,OAAO,IAAI,CAAC,kCAAkC,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,aAAuB;IACrD,OAAO,IAAI,CAA0B,0BAA0B,EAAE;QAC/D,aAAa;KACd,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,YAAoB,EACpB,MAAc,EACd,YAAoB,EACpB,WAA+B,EAC/B,QAAiC;IAEjC,OAAO,IAAI,CAAC,mCAAmC,EAAE;QAC/C,YAAY;QACZ,MAAM;QACN,YAAY;QACZ,WAAW;QACX,QAAQ;KACT,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,QAAiC;IAEjC,OAAO,IAAI,CAAC,oCAAoC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,KAAwB;IACzE,OAAO,IAAI,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,KAAuB;IAEvB,OAAO,IAAI,CAAC,+BAA+B,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,MAAc;IAC3D,OAAO,IAAI,CAIR,0BAA0B,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,OAAO,IAAI,CAAuB,gCAAgC,EAAE;QAClE,QAAQ;KACT,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,SAAmB,EACnB,MAAe,EACf,0BAAoC,EACpC,iBAA0B,EAC1B,YAAsB,EACtB,2BAAqC;IAErC,OAAO,IAAI,CAAuB,kCAAkC,EAAE;QACpE,QAAQ;QACR,SAAS;QACT,MAAM;QACN,YAAY;QACZ,0BAA0B;QAC1B,iBAAiB;QACjB,2BAA2B;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAiB,EACjB,QAAQ,GAAW,IAAI;IAEvB,OAAO,IAAI,CAAiB,6CAA6C,EAAE;QACzE,OAAO;QACP,QAAQ;KACT,CAAC,CAAC;AACL,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,OAAO,GAAG,CACR,sDAAsD,MAAM,EAAE,CAC/D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,SAAiB,EAAE,MAAc;IACvE,OAAO,IAAI,CACT,+CAA+C,SAAS,WAAW,MAAM,EAAE,EAC3E,EAAE,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,SAAiB,EACjB,MAAc;IAEd,OAAO,IAAI,CACT,kDAAkD,SAAS,WAAW,MAAM,EAAE,EAC9E,EAAE,CACH,CAAC;AACJ,CAAC;AAED,OAAO;AACP,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,UAA0B;IACtE,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,qCAAqC,EACrC,UAAU,CACX,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAiB,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"reviewsService.js","sourceRoot":"","sources":["../../../src/editor/services/reviewsService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAe5C,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO,IAAI,CAAC,yBAAyB,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,QAAgB,EAChB,OAAe,EACf,QAAiB;IAEjB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,UAAU,EAAE,MAAM;QAClB,QAAQ;QACR,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;KAC5B,CAAC,CAAC;IACH,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,GAAG,CAAY,4BAA4B,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,iBAAiB,CAAC,IAAa,EAAE,QAAiB;IAChE,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,IAAI,IAAI,IAAI,GAAG,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1D,IAAI,QAAQ;QAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,OAAO,GAAG,CAAY,4BAA4B,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,8EAA8E;AAC9E,wEAAwE;AACxE,oBAAoB;AACpB,MAAM,UAAU,kBAAkB,CAAC,UAAkB,EAAE,QAAgB;IACrE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7D,OAAO,GAAG,CAAY,8BAA8B,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC7C,OAAO,IAAI,CAAU,wCAAwC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,OAAO,IAAI,CACT,0CAA0C,OAAO,CAAC,EAAE,EAAE,EACtD,EAAE,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,OAAO,IAAI,CAAC,uCAAuC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,QAAgB,EAAE,OAAe;IAC1E,OAAO,GAAG,CACR,kCAAkC,MAAM,aAAa,QAAQ,YAAY,OAAO,EAAE,CACnF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,cAA8B;IAC1D,OAAO,IAAI,CAAC,2BAA2B,EAAE,cAAc,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,cAA8B;IACzD,OAAO,IAAI,CAAC,0BAA0B,EAAE,cAAc,CAAC,CAAC;AAC1D,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD,OAAO,IAAI,CAAuB,0BAA0B,EAAE,OAAO,CAAC,CAAC;AACzE,CAAC;AAED,gFAAgF;AAChF,8EAA8E;AAC9E,MAAM,UAAU,yBAAyB;IACvC,OAAO,GAAG,CACR,0CAA0C,CAC3C,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,2EAA2E;AAC3E,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAKvC;IACC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAC/B,qCAAqC,EACrC;QACE,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,CAAC;QACrC,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,eAAe;KACvC,CACF,CAAC;IACF,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAChC,OAAO,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,kEAAkE;IAClE,OAAO,GAAG,CAAmB,uBAAuB,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAuC;IAClE,MAAM,eAAe,GAAG,OAAO,EAAE,eAAe,KAAK,KAAK,CAAC;IAC3D,OAAO,GAAG,CACR,0CAA0C,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAC/E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO,GAAG,CAOP,qCAAqC,QAAQ,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,SAAyB;IACtE,OAAO,IAAI,CAAC,gCAAgC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,YAAoB;IACjD,OAAO,IAAI,CAAC,kCAAkC,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,aAAuB;IACrD,OAAO,IAAI,CAA0B,0BAA0B,EAAE;QAC/D,aAAa;KACd,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,YAAoB,EACpB,MAAc,EACd,YAAoB,EACpB,WAA+B,EAC/B,QAAiC;IAEjC,OAAO,IAAI,CAAC,mCAAmC,EAAE;QAC/C,YAAY;QACZ,MAAM;QACN,YAAY;QACZ,WAAW;QACX,QAAQ;KACT,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,QAAiC;IAEjC,OAAO,IAAI,CAAC,oCAAoC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,KAAwB;IACzE,OAAO,IAAI,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,KAAuB;IAEvB,OAAO,IAAI,CAAC,+BAA+B,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,MAAc;IAC3D,OAAO,IAAI,CAIR,0BAA0B,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,OAAO,IAAI,CAAuB,gCAAgC,EAAE;QAClE,QAAQ;KACT,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,SAAmB,EACnB,MAAe,EACf,0BAAoC,EACpC,iBAA0B,EAC1B,YAAsB,EACtB,2BAAqC;IAErC,OAAO,IAAI,CAAuB,kCAAkC,EAAE;QACpE,QAAQ;QACR,SAAS;QACT,MAAM;QACN,YAAY;QACZ,0BAA0B;QAC1B,iBAAiB;QACjB,2BAA2B;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAiB,EACjB,QAAQ,GAAW,IAAI;IAEvB,OAAO,IAAI,CAAiB,6CAA6C,EAAE;QACzE,OAAO;QACP,QAAQ;KACT,CAAC,CAAC;AACL,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,OAAO,GAAG,CACR,sDAAsD,MAAM,EAAE,CAC/D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,SAAiB,EAAE,MAAc;IACvE,OAAO,IAAI,CACT,+CAA+C,SAAS,WAAW,MAAM,EAAE,EAC3E,EAAE,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,SAAiB,EACjB,MAAc;IAEd,OAAO,IAAI,CACT,kDAAkD,SAAS,WAAW,MAAM,EAAE,EAC9E,EAAE,CACH,CAAC;AACJ,CAAC;AAED,OAAO;AACP,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,UAA0B;IACtE,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,qCAAqC,EACrC,UAAU,CACX,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAiB,CAAC;AAC7C,CAAC"}

package/dist/editor/services/serviceHelper.d.ts

@@ -17,6 +17,22 @@ declare global {
     }
 }
 export declare function withParheliaRequestHeader(headers?: HeadersInit): Headers;
+/** Plain-text body of the server's CSRF rejection for a stale or foreign token pair. */
+export declare const ANTI_FORGERY_REJECTION = "Invalid anti-forgery token";
+/**
+ * Any GET to a Parhelia controller replaces an invalid anti-forgery pair
+ * (see BaseController.IssueAntiForgeryTokens); the health check is the
+ * cheapest one and needs no session.
+ */
+export declare const ANTI_FORGERY_REFRESH_URL = "/parhelia/health";
+/**
+ * Wraps fetch so unsafe same-origin Parhelia requests carry the CSRF headers.
+ * A tab that outlives its token pair (app pool recycle, deploy, re-login as
+ * the same or another user) gets "Invalid anti-forgery token" on every POST
+ * until something refreshes the cookies, so such a rejection triggers one
+ * token refresh and a single retry.
+ */
+export declare function createParheliaFetch(baseFetch: typeof fetch): typeof fetch;
 export declare function post<T>(url: string, body: any, session?: string, signal?: AbortSignal): Promise<ExecutionResult<T>>;
-export declare function get<T>(url: string, session?: string, signal?: AbortSignal): Promise<ExecutionResult<T>>;
+export declare function get<T>(url: string, session?: string, signal?: AbortSignal, headers?: Record<string, string>): Promise<ExecutionResult<T>>;
 export declare function del<T>(url: string, session?: string, signal?: AbortSignal): Promise<ExecutionResult<T>>;

package/dist/editor/services/serviceHelper.js

@@ -61,25 +61,79 @@ function isSameOriginParheliaUrl(input) {
         return false;
     }
 }
-function installParheliaFetchHeader() {
-    if (typeof window === "undefined" || window.__parheliaFetchHeaderInstalled) {
-        return;
+/** Plain-text body of the server's CSRF rejection for a stale or foreign token pair. */
+export const ANTI_FORGERY_REJECTION = "Invalid anti-forgery token";
+/**
+ * Any GET to a Parhelia controller replaces an invalid anti-forgery pair
+ * (see BaseController.IssueAntiForgeryTokens); the health check is the
+ * cheapest one and needs no session.
+ */
+export const ANTI_FORGERY_REFRESH_URL = "/parhelia/health";
+async function isAntiForgeryRejection(response) {
+    if (response.status !== 403)
+        return false;
+    const contentType = response.headers.get("content-type") ?? "";
+    if (!contentType.toLowerCase().startsWith("text/plain"))
+        return false;
+    try {
+        return (await response.clone().text()).trim() === ANTI_FORGERY_REJECTION;
+    }
+    catch {
+        return false;
     }
-    const originalFetch = window.fetch.bind(window);
-    window.fetch = (input, init) => {
+}
+function canReplayBody(body) {
+    return (typeof ReadableStream === "undefined" || !(body instanceof ReadableStream));
+}
+/**
+ * Wraps fetch so unsafe same-origin Parhelia requests carry the CSRF headers.
+ * A tab that outlives its token pair (app pool recycle, deploy, re-login as
+ * the same or another user) gets "Invalid anti-forgery token" on every POST
+ * until something refreshes the cookies, so such a rejection triggers one
+ * token refresh and a single retry.
+ */
+export function createParheliaFetch(baseFetch) {
+    let tokenRefresh = null;
+    const refreshTokens = () => {
+        tokenRefresh ??= baseFetch(ANTI_FORGERY_REFRESH_URL, {
+            method: "GET",
+            credentials: "include",
+            cache: "no-store",
+        })
+            .then(() => undefined, () => undefined)
+            .finally(() => {
+            tokenRefresh = null;
+        });
+        return tokenRefresh;
+    };
+    return async (input, init) => {
         const method = getRequestMethod(input, init);
         if (!isUnsafeMethod(method) || !isSameOriginParheliaUrl(input)) {
-            return originalFetch(input, init);
+            return baseFetch(input, init);
         }
-        const requestHeaders = init?.headers ??
-            (typeof Request !== "undefined" && input instanceof Request
-                ? input.headers
-                : undefined);
-        return originalFetch(input, {
+        const isRequestInput = typeof Request !== "undefined" && input instanceof Request;
+        const requestHeaders = init?.headers ?? (isRequestInput ? input.headers : undefined);
+        // A Request's body can be read only once; keep a copy for the retry.
+        const retryInput = isRequestInput && !input.bodyUsed ? input.clone() : input;
+        const send = (target) => baseFetch(target, {
             ...init,
             headers: withParheliaRequestHeader(requestHeaders),
         });
+        const response = await send(input);
+        if (init?.signal?.aborted ||
+            !canReplayBody(init?.body) ||
+            !(await isAntiForgeryRejection(response))) {
+            return response;
+        }
+        await refreshTokens();
+        return send(retryInput);
     };
+}
+function installParheliaFetchHeader() {
+    if (typeof window === "undefined" || window.__parheliaFetchHeaderInstalled) {
+        return;
+    }
+    window.fetch = createParheliaFetch(window.fetch.bind(window));
     window.__parheliaFetchHeaderInstalled = true;
 }
 installParheliaFetchHeader();
@@ -193,7 +247,7 @@ export async function post(url, body, session, signal) {
     }
     return handleResponse(response);
 }
-export async function get(url, session, signal) {
+export async function get(url, session, signal, headers) {
     if (session)
         url += "?sessionId=" + session;
     let response;
@@ -204,6 +258,7 @@ export async function get(url, session, signal) {
             headers: {
                 "Content-Type": "application/json",
                 "Cache-Control": "no-cache",
+                ...headers,
             },
             signal,
         });