@popgrids/embed 0.0.4 → 1.0.0

package/dist/lib/backoff.d.ts

@@ -0,0 +1,11 @@
+/**
+ * "Full jitter" exponential backoff (AWS's exponential-backoff-and-jitter
+ * recipe): the delay for a given attempt is a random value between 0 and the
+ * exponential ceiling, not the ceiling itself. Pure exponential backoff only
+ * bounds how hard one client retries — every client that disconnects at the
+ * same instant (a DO/Worker blip, a deploy) computes the identical delay
+ * sequence and retries in lockstep waves. Randomizing spreads a correlated
+ * mass-reconnect out over time instead of turning it into a thundering herd.
+ */
+export declare function reconnectDelayMs(attempt: number, baseMs: number, capMs: number): number;
+//# sourceMappingURL=backoff.d.ts.map

package/dist/lib/backoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backoff.d.ts","sourceRoot":"","sources":["../../src/lib/backoff.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGvF"}

package/dist/lib/popup-auth.d.ts

@@ -9,14 +9,20 @@ export declare const AUTH_TIMEOUT_MS: number;
 export declare class PopupAuthError extends Error {
     constructor(message: string);
 }
+export declare class PopupAuthCancelledError extends PopupAuthError {
+    constructor(message?: string);
+}
+export interface EmbedAuthSuccess {
+    user: AuthUser;
+    token: string;
+    expiresAt: number;
+}
 export declare const buildEmbedLoginUrl: (apiUrl: string, publicKey: string, returnOrigin: string) => string;
 export declare const openPopgridsLoginPopup: (apiUrl: string, publicKey: string) => Window;
 export declare const waitForPopgridsAuth: (apiUrl: string, popup: Window, options?: {
-    onAuthUser?: (user: AuthUser) => void;
-    verifySignedIn?: () => Promise<boolean>;
+    onAuthSuccess?: (result: EmbedAuthSuccess) => void;
 }) => Promise<void>;
 export declare const signInWithPopup: (apiUrl: string, publicKey: string, options?: {
-    onAuthUser?: (user: AuthUser) => void;
-    verifySignedIn?: () => Promise<boolean>;
+    onAuthSuccess?: (result: EmbedAuthSuccess) => void;
 }) => Promise<void>;
 //# sourceMappingURL=popup-auth.d.ts.map

package/dist/lib/popup-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"popup-auth.d.ts","sourceRoot":"","sources":["../../src/lib/popup-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnD,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AAClD,eAAO,MAAM,kBAAkB,0BAA0B,CAAC;AAC1D,eAAO,MAAM,gBAAgB,wBAAwB,CAAC;AAEtD,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AACzD,eAAO,MAAM,UAAU,kBAAkB,CAAC;AAC1C,eAAO,MAAM,cAAc,+BAA+B,CAAC;AAC3D,eAAO,MAAM,eAAe,QAAgB,CAAC;AAI7C,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAED,eAAO,MAAM,kBAAkB,GAC7B,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,cAAc,MAAM,WAMrB,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAAI,QAAQ,MAAM,EAAE,WAAW,MAAM,WAYvE,CAAC;AAuCF,eAAO,MAAM,mBAAmB,GAC9B,QAAQ,MAAM,EACd,OAAO,MAAM,EACb,UAAU;IACR,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,IAAI,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CACzC,kBA4FC,CAAC;AAEL,eAAO,MAAM,eAAe,GAC1B,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,UAAU;IACR,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,IAAI,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CACzC,kBAIF,CAAC"}
+{"version":3,"file":"popup-auth.d.ts","sourceRoot":"","sources":["../../src/lib/popup-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnD,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AAClD,eAAO,MAAM,kBAAkB,0BAA0B,CAAC;AAC1D,eAAO,MAAM,gBAAgB,wBAAwB,CAAC;AAEtD,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AACzD,eAAO,MAAM,UAAU,kBAAkB,CAAC;AAC1C,eAAO,MAAM,cAAc,+BAA+B,CAAC;AAC3D,eAAO,MAAM,eAAe,QAAgB,CAAC;AAS7C,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAGD,qBAAa,uBAAwB,SAAQ,cAAc;gBAC7C,OAAO,SAA0B;CAI9C;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,kBAAkB,GAAI,QAAQ,MAAM,EAAE,WAAW,MAAM,EAAE,cAAc,MAAM,WAKzF,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAAI,QAAQ,MAAM,EAAE,WAAW,MAAM,WAYvE,CAAC;AAiDF,eAAO,MAAM,mBAAmB,GAC9B,QAAQ,MAAM,EACd,OAAO,MAAM,EACb,UAAU;IACR,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,IAAI,CAAC;CACpD,kBA4EC,CAAC;AAEL,eAAO,MAAM,eAAe,GAC1B,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,UAAU;IACR,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,IAAI,CAAC;CACpD,kBAIF,CAAC"}

package/dist/store/embed-auth-store.d.ts

@@ -0,0 +1,201 @@
+import { AuthUser, OrgOption } from '../types/models.js';
+export type EmbedAuthView = "idle" | "email" | "code" | "no-code";
+/**
+ * Owns auth state for one `<pop-grid>` instance — registered per-element
+ * (see registry.ts) rather than as a page-global singleton, so multiple
+ * widgets with different publicKeys on the same page don't share identity.
+ */
+export declare class EmbedAuthStore {
+    readonly apiUrl: string;
+    readonly publicKey: string;
+    currentUser: import('@preact/signals-core').Signal<AuthUser | null>;
+    authError: import('@preact/signals-core').Signal<string | null>;
+    /** Label for the notice's button (it always just dismisses the notice). Set via showAuthError. */
+    authErrorAction: import('@preact/signals-core').Signal<string>;
+    /**
+     * Bumped each time the visitor dismisses the notice (vs. it clearing on its
+     * own, e.g. the panel closing) so the auth cards can hand focus back to
+     * their field — the notice made everything under it inert until now.
+     */
+    authNoticeDismissals: import('@preact/signals-core').Signal<number>;
+    /**
+     * When set, the notice is a rate-limit wait: its button becomes a
+     * countdown to this timestamp and the notice dismisses itself at zero.
+     */
+    authErrorRetryAt: import('@preact/signals-core').Signal<number | null>;
+    authPending: import('@preact/signals-core').Signal<boolean>;
+    /**
+     * Accounts the signed-in visitor can comment as (see switchOrganization) —
+     * populated after sign-in, independent of which one is currently active.
+     * The *active* account syncs across every same-browser tab (they share one
+     * token — see ADR 0011); this list itself doesn't need to, since it's the
+     * same accounts regardless of which is active.
+     */
+    organizations: import('@preact/signals-core').Signal<OrgOption[]>;
+    /** True while an organizations fetch is in flight — drives the switcher's spinner. */
+    organizationsLoading: import('@preact/signals-core').Signal<boolean>;
+    /**
+     * Inline email+OTP sign-in state (see pop-auth-panel.ts). Kept separate
+     * from authPending/authError above, which stay owned by the OAuth popup
+     * flow (requestSignIn) — the two flows can be mid-progress independently.
+     */
+    authView: import('@preact/signals-core').Signal<EmbedAuthView>;
+    otpEmail: import('@preact/signals-core').Signal<string>;
+    otpPending: import('@preact/signals-core').Signal<boolean>;
+    otpError: import('@preact/signals-core').Signal<string | null>;
+    otpExpiresAt: import('@preact/signals-core').Signal<number | null>;
+    private session;
+    private authSocket;
+    private authReconnectAttempt;
+    private authReconnectTimer;
+    private destroyed;
+    private onStorageEvent;
+    /**
+     * Every live store on this page. The `storage` event never fires in the
+     * document that made the write, so two grids with the same publicKey on
+     * one page (which share a localStorage key) would otherwise never hear
+     * about each other's sign-in or sign-out until reload — see notifySiblings.
+     */
+    private static instances;
+    private static syncing;
+    /** Applies a session change made elsewhere — another tab (storage event) or another grid on this page (notifySiblings). */
+    private applyExternalChange;
+    /** Pushes a local session change to other grids on this page sharing our publicKey. */
+    private notifySiblings;
+    constructor(opts: {
+        apiUrl: string;
+        publicKey: string;
+    });
+    /** Closes the auth channel, cancels any pending reconnect, and stops listening for cross-tab changes — call from the owning element's disconnectedCallback. */
+    destroy(): void;
+    private readStoredSession;
+    /**
+     * Just the storage write, no side effects — for keeping the persisted
+     * session in sync with a sliding-expiry renewal (checkSession) without
+     * redoing loadOrganizations/reconnecting the auth channel for what's
+     * still the same identity. writeStoredSession (below) is for an actual
+     * sign-in (new or adopted from another tab), where those side effects
+     * are the point.
+     */
+    private persistSession;
+    private writeStoredSession;
+    private clearStoredSession;
+    /**
+     * Current token, or null if missing/expired (clearing state — and, if we
+     * were signed in, showing the "you were signed out" message — as a side
+     * effect of expiry). This is a local-only check against the last
+     * `expiresAt` this tab persisted: if the credential was actually renewed
+     * from a *different*, still-open tab/device while this one sat closed
+     * past its own locally-known expiry, this can call it expired a little
+     * early rather than re-confirming with the server — an occasional,
+     * low-stakes extra sign-in prompt, traded for not hitting the server on
+     * every single token read just to double-check a locally-expired date.
+     */
+    private get token();
+    /**
+     * Attaches the stored token (if any) and returns the response as-is — no
+     * retry-via-popup. Use for reads that should silently show "signed out"
+     * on 401 rather than interrupting the visitor (grid/comments GET, session
+     * check, WS connect-ticket mint — the last of which must also work for
+     * anonymous/signed-out visitors).
+     */
+    fetchWithToken(path: string, init?: RequestInit): Promise<Response>;
+    /**
+     * Same as fetchWithToken, but on a 401 prompts sign-in inline (the
+     * visitor's already looking at the open panel, mid-action — that's
+     * exactly what triggered this) and retries once. Use only for actions the
+     * visitor just explicitly initiated (post/edit/delete/flag a comment) —
+     * never for passive/background reads, since this interrupts them with a
+     * prompt.
+     *
+     * The request being retried already has whatever the visitor typed baked
+     * into it (e.g. postComment captures the comment body into the request
+     * before this ever runs) — requestInlineSignIn() only has to get them
+     * back to a valid session; it doesn't need to preserve or restore
+     * anything itself for the retry to pick up right where they left off.
+     */
+    authorizedFetch(path: string, init?: RequestInit): Promise<Response>;
+    private readError;
+    /** Transitions from the idle "Join the Conversation" state into the inline email form. */
+    startEmailSignIn(): void;
+    backToIdle(): void;
+    backToEmail(): void;
+    /**
+     * The code can no longer be used: drop back to the email step to request a
+     * new one. otpEmail is kept (in memory only) so the email field can be
+     * prefilled rather than making the visitor retype it.
+     */
+    expireOtp(): void;
+    /** One step back from the no-code help card, to the code entry it was opened from. */
+    backToCode(): void;
+    showNoCode(): void;
+    /** Sends (or resends) a sign-in code to `email`. No token yet — the visitor isn't signed in. */
+    sendOtp(email: string): Promise<boolean>;
+    resendOtp(): Promise<boolean>;
+    /** Verifies `code` against the in-progress email and, on success, signs the visitor in. */
+    verifyOtp(code: string): Promise<boolean>;
+    requestSignIn(): Promise<boolean>;
+    /**
+     * Resolves the promise a pending requestInlineSignIn() call is awaiting —
+     * set while one's in progress, called from verifyOtp()'s success path
+     * (true) and backToIdle() (false, abandoned). Not a public method: it's
+     * the completion half of requestInlineSignIn(), nothing else should call it.
+     */
+    private resolveInlineSignIn;
+    private inlineSignInPromise;
+    /**
+     * Reactive re-auth for authorizedFetch(): puts the widget into the inline
+     * sign-in flow (the panel's already open — that's what triggered this,
+     * mid-write) and waits for it to resolve, rather than opening the OAuth
+     * popup the way the old checkSession-driven path did. Concurrent callers
+     * (e.g. two writes racing into a 401 around the same time) join the same
+     * pending prompt instead of each resetting it back to the email step.
+     */
+    requestInlineSignIn(): Promise<boolean>;
+    private showAuthError;
+    /** A 429: show the wait as a countdown (see authErrorRetryAt) instead of letting the visitor hammer the endpoint. */
+    private showRateLimited;
+    dismissAuthError(): void;
+    clearAuthError(): void;
+    /**
+     * Fetches the accounts the signed-in visitor can comment as (for the
+     * switcher UI) — lazily: called on demand when the switcher's dropdown
+     * opens (pop-account-switcher.ts), not proactively on sign-in or page
+     * load. Once populated, `organizations` acts as its own cache — callers
+     * should check `organizations.value.length === 0` before calling this
+     * rather than calling it unconditionally, which also means a prior
+     * failed attempt gets retried the next time the dropdown opens rather
+     * than being stuck empty forever.
+     */
+    loadOrganizations(): Promise<void>;
+    /**
+     * Switches which account this widget's comments post as. Doesn't touch or
+     * read the main app's active org — but the api key itself (and thus which
+     * account it's scoped to server-side) is the same one every same-browser
+     * tab shares via localStorage (see ADR 0009), so a switch here already
+     * changes every other tab's underlying identity whether we tell them or
+     * not. persistSession below keeps their displayed state honest via the
+     * same native `storage` event sign-in already propagates through — see
+     * ADR 0011, which corrects ADR 0008's original "switching stays local"
+     * framing now that the token itself is shared.
+     */
+    switchOrganization(organizationId: string): Promise<boolean>;
+    /** Signs this identity out everywhere (main app + every other widget), not just this one. */
+    signOutEverywhere(): Promise<boolean>;
+    /** Shared cleanup for every way this widget learns it's signed out: a pushed session.revoked, a 401 from an authed call, an expired remembered sign-in, or the visitor's own sign-out. */
+    private handleSignedOut;
+    /**
+     * Opens the auth-only push channel — and, as its one other job, the sole
+     * point that verifies the token server-side and applies the sliding
+     * renewal (see docs/adr/0009 and 0010). Not called on construction:
+     * pop-feed.ts calls this once the panel first opens, since that's the
+     * first moment the widget actually needs to know anything about auth
+     * beyond what's already cached locally (the collapsed pill shows other
+     * commenters, never the current visitor's own identity). Safe to call
+     * repeatedly — no-ops once a socket is already open.
+     */
+    connectAuthChannel(): Promise<void>;
+    private scheduleAuthReconnect;
+    private closeAuthChannel;
+}
+//# sourceMappingURL=embed-auth-store.d.ts.map

package/dist/store/embed-auth-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"embed-auth-store.d.ts","sourceRoot":"","sources":["../../src/store/embed-auth-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAgB,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAmC5E,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AAElE;;;;GAIG;AACH,qBAAa,cAAc;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,WAAW,yDAAiC;IAC5C,SAAS,uDAA+B;IACxC,kGAAkG;IAClG,eAAe,gDAAiC;IAChD;;;;OAIG;IACH,oBAAoB,gDAAa;IACjC;;;OAGG;IACH,gBAAgB,uDAA+B;IAC/C,WAAW,iDAAiB;IAE5B;;;;;;OAMG;IACH,aAAa,qDAA2B;IACxC,sFAAsF;IACtF,oBAAoB,iDAAiB;IAErC;;;;OAIG;IACH,QAAQ,uDAAiC;IACzC,QAAQ,gDAAsB;IAC9B,UAAU,iDAAiB;IAC3B,QAAQ,uDAA+B;IACvC,YAAY,uDAA+B;IAE3C,OAAO,CAAC,OAAO,CAAsB;IAQrC,OAAO,CAAC,UAAU,CAA0B;IAC5C,OAAO,CAAC,oBAAoB,CAAK;IACjC,OAAO,CAAC,kBAAkB,CAA8C;IACxE,OAAO,CAAC,SAAS,CAAS;IAK1B,OAAO,CAAC,cAAc,CAMpB;IAEF;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,SAAS,CAA6B;IACrD,OAAO,CAAC,MAAM,CAAC,OAAO,CAAS;IAE/B,2HAA2H;IAC3H,OAAO,CAAC,mBAAmB;IAsB3B,uFAAuF;IACvF,OAAO,CAAC,cAAc;gBAeV,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;IAcvD,+JAA+J;IAC/J,OAAO,IAAI,IAAI;IAOf,OAAO,CAAC,iBAAiB;IAqBzB;;;;;;;OAOG;IACH,OAAO,CAAC,cAAc;IAWtB,OAAO,CAAC,kBAAkB;IAsC1B,OAAO,CAAC,kBAAkB;IAY1B;;;;;;;;;;OAUG;IACH,OAAO,KAAK,KAAK,GAShB;IAED;;;;;;OAMG;IACG,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAS7E;;;;;;;;;;;;;OAaG;IACG,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC;YAchE,SAAS;IAmBvB,0FAA0F;IAC1F,gBAAgB,IAAI,IAAI;IAKxB,UAAU,IAAI,IAAI;IAWlB,WAAW,IAAI,IAAI;IAKnB;;;;OAIG;IACH,SAAS,IAAI,IAAI;IAMjB,sFAAsF;IACtF,UAAU,IAAI,IAAI;IAIlB,UAAU,IAAI,IAAI;IAIlB,gGAAgG;IAC1F,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAoCxC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAKnC,2FAA2F;IACrF,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAmDzC,aAAa,IAAI,OAAO,CAAC,OAAO,CAAC;IAsBvC;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB,CAA6C;IACxE,OAAO,CAAC,mBAAmB,CAAiC;IAE5D;;;;;;;OAOG;IACH,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC;IAgBvC,OAAO,CAAC,aAAa;IAWrB,qHAAqH;IACrH,OAAO,CAAC,eAAe;IAQvB,gBAAgB,IAAI,IAAI;IAKxB,cAAc,IAAI,IAAI;IAItB;;;;;;;;;OASG;IACG,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IA4BxC;;;;;;;;;;OAUG;IACG,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAqBlE,6FAA6F;IACvF,iBAAiB,IAAI,OAAO,CAAC,OAAO,CAAC;IAe3C,0LAA0L;IAC1L,OAAO,CAAC,eAAe;IAWvB;;;;;;;;;OASG;IACG,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IA0FzC,OAAO,CAAC,qBAAqB;IAc7B,OAAO,CAAC,gBAAgB;CAezB"}

package/dist/store/grid-store.d.ts

@@ -1,4 +1,5 @@
 import { Comment, CommentAuthor, Grid } from '../types/models.js';
+import { EmbedAuthStore } from './embed-auth-store.js';
 /**
  * The five visual settings a `<pop-grid>` can override live via
  * `data-align`/`data-layout`/`data-position`/`data-icon`/`data-preview-count`
@@ -14,6 +15,7 @@ export declare class GridStore {
     readonly pageUrl: string;
     readonly externalId: string | null;
     readonly previewCount = 3;
+    private readonly authStore;
     /** The grid last fetched from the API — never read directly outside this
      * class; `grid` (below) is the override-aware value every consumer uses. */
     private _fetchedGrid;
@@ -44,6 +46,7 @@ export declare class GridStore {
         publicKey: string;
         pageUrl: string;
         externalId?: string | null;
+        authStore: EmbedAuthStore;
     });
     /** Replaces the current override set wholesale (not a per-key merge) —
      * called with every override attribute `<pop-grid>` currently has set, so

package/dist/store/grid-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grid-store.d.ts","sourceRoot":"","sources":["../../src/store/grid-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAqBvE;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,CACjC,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,cAAc,CAAC,CACtE,CAAC;AAUF,qBAAa,SAAS;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,YAAY,KAAyB;IAE9C;gFAC4E;IAC5E,OAAO,CAAC,YAAY,CAA6B;IACjD,yEAAyE;IACzE,OAAO,CAAC,UAAU,CAA6B;IAE/C;;uCAEmC;IACnC,IAAI,6DAAkF;IACtF,QAAQ,mDAAyB;IACjC,OAAO,iDAAgB;IACvB,KAAK,uDAA+B;IACpC,IAAI,iDAAiB;IACrB,UAAU,uDAA+B;IACzC,gBAAgB,uDAA+B;IAC/C,kBAAkB,uDAA+B;IAEjD,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,cAAc,CAA8C;IACpE,OAAO,CAAC,QAAQ,CAAS;IAEzB,gBAAgB,2DAId;IAEF,iBAAiB,gEAId;IAEH,cAAc,gEAIX;IAEH,eAAe,2DAEb;IAEF,cAAc,iEAuBX;gBAES,IAAI,EAAE;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B;IAOD;;;sEAGkE;IAClE,YAAY,CAAC,SAAS,EAAE,aAAa,GAAG,IAAI;IAI5C,+EAA+E;IAC/E,OAAO,CAAC,cAAc;IAQtB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,EAAE;IAYjC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC;IAqCxB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IA2ClF,OAAO,IAAI,IAAI;IAkBf,OAAO,CAAC,eAAe;IA4DvB,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,aAAa;IAUf,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAgCrE,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IA6BzD,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAuBtD,OAAO,CAAC,mBAAmB;CAG5B"}
+{"version":3,"file":"grid-store.d.ts","sourceRoot":"","sources":["../../src/store/grid-store.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAoB5D;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,CACjC,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,cAAc,CAAC,CACtE,CAAC;AAUF,qBAAa,SAAS;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,YAAY,KAAyB;IAC9C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiB;IAE3C;gFAC4E;IAC5E,OAAO,CAAC,YAAY,CAA6B;IACjD,yEAAyE;IACzE,OAAO,CAAC,UAAU,CAA6B;IAE/C;;uCAEmC;IACnC,IAAI,6DAAkF;IACtF,QAAQ,mDAAyB;IACjC,OAAO,iDAAgB;IACvB,KAAK,uDAA+B;IACpC,IAAI,iDAAiB;IACrB,UAAU,uDAA+B;IACzC,gBAAgB,uDAA+B;IAC/C,kBAAkB,uDAA+B;IAEjD,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,cAAc,CAA8C;IACpE,OAAO,CAAC,QAAQ,CAAS;IAEzB,gBAAgB,2DAId;IAEF,iBAAiB,gEAId;IAEH,cAAc,gEAIX;IAEH,eAAe,2DAEb;IAEF,cAAc,iEAuBX;gBAES,IAAI,EAAE;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,SAAS,EAAE,cAAc,CAAC;KAC3B;IAQD;;;sEAGkE;IAClE,YAAY,CAAC,SAAS,EAAE,aAAa,GAAG,IAAI;IAI5C,+EAA+E;IAC/E,OAAO,CAAC,cAAc;IAQtB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,EAAE;IAYjC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC;IAoCxB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAkClF,OAAO,IAAI,IAAI;YAkBD,eAAe;IAoF7B,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,aAAa;IAUf,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAuBrE,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAezD,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAStD,OAAO,CAAC,mBAAmB;CAG5B"}

package/dist/types/models.d.ts

@@ -44,4 +44,16 @@ export interface AuthUser {
     email: string;
     image: string | null;
 }
+/** What's persisted to sessionStorage after a successful embed sign-in. */
+export interface EmbedSession {
+    token: string;
+    expiresAt: number;
+    user: AuthUser;
+}
+/** One account the signed-in visitor can comment as — see EmbedAuthStore.organizations. */
+export interface OrgOption {
+    id: string;
+    name: string;
+    image: string | null;
+}
 //# sourceMappingURL=models.d.ts.map

package/dist/types/models.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/types/models.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAClC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,GAAG,QAAQ,GAAG,KAAK,GAAG,IAAI,CAAC;IACzC,UAAU,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC7C,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACxC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB"}
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/types/models.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAClC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,GAAG,QAAQ,GAAG,KAAK,GAAG,IAAI,CAAC;IACzC,UAAU,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC7C,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACxC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,2FAA2F;AAC3F,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@popgrids/embed",
   "description": "PopGrids embeddable discussion widget",
-  "version": "0.0.4",
+  "version": "1.0.0",
   "type": "module",
   "license": "MIT",
   "author": "PopGrids",

package/dist/store/auth-store.d.ts

@@ -1,8 +0,0 @@
-import { AuthUser } from '../types/models.js';
-export declare const currentUser: import('@preact/signals-core').Signal<AuthUser | null>;
-export declare const authError: import('@preact/signals-core').Signal<string | null>;
-export declare const authPending: import('@preact/signals-core').Signal<boolean>;
-export declare function checkSession(apiUrl: string, publicKey: string, delays?: number[]): Promise<boolean>;
-export declare function requestSignIn(apiUrl: string, publicKey: string): Promise<boolean>;
-export declare function clearAuthError(): void;
-//# sourceMappingURL=auth-store.d.ts.map

package/dist/store/auth-store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-store.d.ts","sourceRoot":"","sources":["../../src/store/auth-store.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnD,eAAO,MAAM,WAAW,wDAAgC,CAAC;AACzD,eAAO,MAAM,SAAS,sDAA8B,CAAC;AACrD,eAAO,MAAM,WAAW,gDAAgB,CAAC;AAKzC,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,MAAM,EAA4B,GACzC,OAAO,CAAC,OAAO,CAAC,CAsClB;AAED,wBAAsB,aAAa,CACjC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CAwBlB;AAED,wBAAgB,cAAc,IAAI,IAAI,CAErC"}