@unhingged/vizu-core 0.1.0 → 0.1.1

package/dist/index.cjs

@@ -1724,10 +1724,28 @@ var CloudStorageAdapter = class {
     this.cachedToken = null;
     /** Single-flight: at most one popup at a time. Subsequent requests await this. */
     this.pendingAuth = null;
+    /** Whether we've already fired onAuthChanged for the current token. */
+    this.lastNotifiedTokenId = null;
     this.workspace = opts.workspace;
     this.apiUrl = (opts.apiUrl ?? DEFAULT_API_URL).replace(/\/$/, "");
     this.autoSignIn = opts.autoSignIn !== false;
+    this.onAuthChanged = opts.onAuthChanged;
     this.cachedToken = this.readStoredToken();
+    if (this.cachedToken && !this.isExpired(this.cachedToken)) {
+      this.fireAuthChanged(this.cachedToken);
+    }
+  }
+  /**
+   * Open the sign-in popup right now (or no-op if a valid token is
+   * cached). Vizu calls this on enable() so the user signs in BEFORE
+   * trying to leave a comment — no surprise modal mid-comment.
+   *
+   * Throws auth_canceled if the user closes the popup. Caller can
+   * decide whether to disable the surface or leave it in a read-only
+   * state.
+   */
+  async preflightAuth() {
+    await this.resolveToken();
   }
   /* ─── StorageAdapter v2 ───────────────────────────────────────────── */
   async load(_namespace) {
@@ -1916,6 +1934,7 @@ var CloudStorageAdapter = class {
     const fresh = this.readStoredToken();
     if (fresh) {
       this.cachedToken = fresh;
+      this.fireAuthChanged(fresh);
       return fresh;
     }
     if (!this.autoSignIn) {
@@ -1924,6 +1943,7 @@ var CloudStorageAdapter = class {
     if (!this.pendingAuth) {
       this.pendingAuth = this.openSignInPopup().then((t) => {
         this.writeStoredToken(t);
+        this.fireAuthChanged(t);
         return t;
       }).finally(() => {
         this.pendingAuth = null;
@@ -1931,6 +1951,22 @@ var CloudStorageAdapter = class {
     }
     return this.pendingAuth;
   }
+  /**
+   * Notify the host that the authenticated identity changed. De-duped
+   * via the token string so multiple resolveToken() hits with the same
+   * cached token don't re-call setUser on every fetch.
+   */
+  fireAuthChanged(token) {
+    if (this.lastNotifiedTokenId === token.token) return;
+    this.lastNotifiedTokenId = token.token;
+    try {
+      this.onAuthChanged?.({ userId: token.userId, user: token.user });
+    } catch (err) {
+      if (typeof console !== "undefined") {
+        console.warn("[vizu/cloud] onAuthChanged callback threw", err);
+      }
+    }
+  }
   openSignInPopup() {
     return new Promise((resolve, reject) => {
       if (typeof window === "undefined") {
@@ -1963,7 +1999,13 @@ var CloudStorageAdapter = class {
         if (typeof data.token !== "string" || typeof data.expiresAt !== "string" || typeof data.userId !== "string") return;
         resolved = true;
         cleanup();
-        resolve({ token: data.token, expiresAt: data.expiresAt, userId: data.userId });
+        const userPayload = data.user;
+        const user = userPayload && typeof userPayload.name === "string" ? {
+          id: typeof userPayload.id === "string" ? userPayload.id : data.userId,
+          name: userPayload.name,
+          avatarUrl: typeof userPayload.avatarUrl === "string" ? userPayload.avatarUrl : void 0
+        } : null;
+        resolve({ token: data.token, expiresAt: data.expiresAt, userId: data.userId, user });
       };
       const onPoll = window.setInterval(() => {
         if (popup.closed) {
@@ -4064,7 +4106,7 @@ var DEFAULTS = {
   namespace: "default",
   accent: "#FF6647"
 };
-function resolveStorage(storage, cloud, defaultMode) {
+function resolveStorage(storage, cloud, defaultMode, onAuthChanged) {
   if (cloud) {
     if (storage && typeof console !== "undefined") {
       console.warn("[vizu] Both `cloud` and `storage` set; `cloud` wins. Drop `storage` to silence this.");
@@ -4072,7 +4114,8 @@ function resolveStorage(storage, cloud, defaultMode) {
     return new CloudStorageAdapter({
       workspace: cloud.workspace,
       apiUrl: cloud.apiUrl,
-      autoSignIn: cloud.autoSignIn
+      autoSignIn: cloud.autoSignIn,
+      onAuthChanged
     });
   }
   if (!storage) return defaultMode === "local" ? new LocalStorageAdapter() : new InMemoryStorageAdapter();
@@ -4178,7 +4221,14 @@ var Vizu = class {
     this.opts.namespace = options.namespace ?? DEFAULTS.namespace;
     this.opts.accent = options.accent ?? DEFAULTS.accent;
     this.parsedShortcut = parseShortcut(this.opts.shortcut);
-    this.storage = resolveStorage(options.storage, options.cloud, _defaultStorage);
+    this.storage = resolveStorage(
+      options.storage,
+      options.cloud,
+      _defaultStorage,
+      (info) => {
+        if (info.user) this.setUser(info.user);
+      }
+    );
     this.user = options.user ?? null;
     if (options.actions) this.actions = [...options.actions];
     if (options.onCommentAdded) this.bus.on("comment:added", (p) => options.onCommentAdded(p.comment));
@@ -4224,6 +4274,14 @@ var Vizu = class {
     this.enabled = true;
     this.bus.emit("enabled", {});
     this.deferred(() => this.mount());
+    if (this.storage instanceof CloudStorageAdapter) {
+      void this.storage.preflightAuth().catch((err) => {
+        if (err?.code === "auth_canceled" || err?.code === "popup_blocked") return;
+        if (typeof console !== "undefined") {
+          console.warn("[vizu] preflight auth failed:", err);
+        }
+      });
+    }
   }
   disable() {
     if (!this.enabled) return;