@unhingged/vizu-core 0.1.3 → 0.1.5

package/dist/index.cjs

@@ -372,6 +372,19 @@ var CloudStorageAdapter = class {
     this.pendingAuth = null;
     /** Whether we've already fired onAuthChanged for the current token. */
     this.lastNotifiedTokenId = null;
+    /**
+     * Sticky flag set when /connect tells us this workspace is inaccessible
+     * to the signed-in user (no role, origin not allowed, workspace gone).
+     * Future resolveToken calls reject immediately instead of reopening the
+     * popup — the answer won't change without a Clerk account switch, which
+     * a page reload covers. Cleared only by reload (or future explicit API).
+     */
+    this.accessDenied = false;
+    /**
+     * Last denial reason from /connect's postMessage — useful for hosts that
+     * want to render a workspace-level "no access" banner. Null until denied.
+     */
+    this.accessDeniedReason = null;
     this.workspace = opts.workspace;
     this.apiUrl = (opts.apiUrl ?? DEFAULT_API_URL).replace(/\/$/, "");
     this.autoSignIn = opts.autoSignIn !== false;
@@ -393,6 +406,20 @@ var CloudStorageAdapter = class {
   async preflightAuth() {
     await this.resolveToken();
   }
+  /**
+   * Whether /connect has already told us the user can't access this
+   * workspace. Vizu's write gate checks this before reopening the popup —
+   * a denied state means clicking again will yield the same "No access"
+   * page, so we suppress the retry until a page reload (or explicit API
+   * call in the future).
+   */
+  isAccessDenied() {
+    return this.accessDenied;
+  }
+  /** Last denial reason; null when not denied. */
+  accessDenialReason() {
+    return this.accessDeniedReason;
+  }
   /* ─── StorageAdapter v2 ───────────────────────────────────────────── */
   async load(_namespace) {
     const out = [];
@@ -583,6 +610,12 @@ var CloudStorageAdapter = class {
       this.fireAuthChanged(fresh);
       return fresh;
     }
+    if (this.accessDenied) {
+      throw makeAuthError(
+        "access_denied",
+        `No access to workspace "${this.workspace}" (${this.accessDeniedReason ?? "no_access"}).`
+      );
+    }
     if (!this.autoSignIn) {
       throw makeAuthError("auth_required", "Sign-in required; autoSignIn is disabled.");
     }
@@ -640,7 +673,21 @@ var CloudStorageAdapter = class {
       const onMessage = (e) => {
         if (e.origin !== apiOrigin) return;
         const data = e.data;
-        if (!data || data.type !== "vizu:auth") return;
+        if (!data) return;
+        if (data.type === "vizu:auth-denied" && data.workspace === this.workspace) {
+          resolved = true;
+          cleanup();
+          this.accessDenied = true;
+          this.accessDeniedReason = typeof data.reason === "string" ? data.reason : "no_access";
+          reject(
+            makeAuthError(
+              "access_denied",
+              `No access to workspace "${this.workspace}" (${this.accessDeniedReason}).`
+            )
+          );
+          return;
+        }
+        if (data.type !== "vizu:auth") return;
         if (data.workspace !== this.workspace) return;
         if (typeof data.token !== "string" || typeof data.expiresAt !== "string" || typeof data.userId !== "string") return;
         resolved = true;
@@ -3179,6 +3226,24 @@ var Vizu = class {
   getUser() {
     return this.user;
   }
+  /**
+   * Cloud-mode write gate. Every entry point that creates or modifies a
+   * comment first checks that we have a known user. Without one, the
+   * write would land as Anonymous (or 401 on the backend) — neither is
+   * the right UX. So we re-trigger the sign-in popup and refuse the
+   * action. The user signs in, this.user gets set via onAuthChanged,
+   * then they can retry the click themselves.
+   *
+   * Returns true when the caller may proceed.
+   */
+  requireUserOrAuth() {
+    if (!(this.storage instanceof CloudStorageAdapter)) return true;
+    if (this.user) return true;
+    if (this.storage.isAccessDenied()) return false;
+    void this.storage.preflightAuth().catch(() => {
+    });
+    return false;
+  }
   /* ===== Lifecycle ===== */
   enable() {
     if (this.enabled) return;
@@ -3347,6 +3412,7 @@ var Vizu = class {
    * patch for adapters that don't implement reply ops.
    */
   async addReply(commentId, text, mentions) {
+    if (!this.requireUserOrAuth()) return null;
     const idx = this.comments.findIndex((c) => c.id === commentId);
     if (idx === -1) return null;
     const reply = {
@@ -3413,6 +3479,7 @@ var Vizu = class {
   /* ===== Multi-select API ===== */
   /** Toggle multi-select mode. When on, plain clicks accumulate into the selection. */
   toggleMultiSelectMode() {
+    if (!this.requireUserOrAuth()) return;
     this.multiSelectMode = !this.multiSelectMode;
     if (!this.multiSelectMode) this.clearSelection();
     this.pill?.setMultiSelectState(this.multiSelectMode, this.pendingFingerprints.length);
@@ -3574,6 +3641,7 @@ var Vizu = class {
       p.onSelect(fp2);
       return;
     }
+    if (!this.requireUserOrAuth()) return;
     const fp = fingerprint(el);
     if (this.popover?.isOpen() && e.shiftKey) {
       this.popover.addAnchor(fp, el);
@@ -3621,6 +3689,7 @@ var Vizu = class {
     );
   }
   async addCommentFromPopover(text, fps, references, mentions, attachments) {
+    if (!this.requireUserOrAuth()) return;
     if (fps.length === 0) return;
     const pageUrl = typeof location !== "undefined" ? location.href : void 0;
     const c = {