lattris 0.1.3 → 0.1.4

package/dist/build.json

@@ -1 +1 @@
-{"commit":"cecf7e60eb450bce092dc992155ff77002fc1379","builtAt":"2026-09-15T22:27:41Z"}
+{"commit":"92b27e26b7bbfb87059aec6ca19287eb8f2830f2","builtAt":"2026-09-15T23:11:21Z"}

package/dist/main.js

@@ -1019,16 +1019,14 @@ export const validAccessToken = async (cfg) => {
         throw new Error('not-logged-in');
     }
 };
-// An absent or unrefreshable session sends no Authorization header, since the
-// API refuses any present invalid bearer by its own rule.
+// A public read sends no Authorization header when obtaining an optional token
+// fails for any reason; the API refuses any present invalid bearer by its own rule.
 export const optionalAccessToken = async (cfg) => {
     try {
         return await validAccessToken(cfg);
     }
-    catch (error) {
-        if (error instanceof Error && error.message === 'not-logged-in')
-            return undefined;
-        throw error;
+    catch {
+        return undefined;
     }
 };
 // Render a door to STDERR (stdout stays clean for piped data):
@@ -1187,13 +1185,23 @@ export const edgeRefusal = (status, headers, bytes) => {
 // delete route's success) has no body to parse.
 const HTTP_NO_CONTENT = 204;
 export const apiFetch = async (accessToken, url, init = {}, addressKind = 'api') => {
-    const headers = { ...init.headers };
-    if (accessToken !== undefined)
-        headers.Authorization = `Bearer ${accessToken}`;
-    const res = await fetch(url, {
-        ...init,
-        headers
-    });
+    const { retryAnonymousOn401 = false, ...requestInit } = init;
+    const request = (token) => {
+        const headers = { ...requestInit.headers };
+        if (token !== undefined)
+            headers.Authorization = `Bearer ${token}`;
+        else if (retryAnonymousOn401)
+            delete headers.Authorization;
+        return fetch(url, { ...requestInit, headers });
+    };
+    let res = await request(accessToken);
+    const isRead = requestInit.method === undefined || requestInit.method.toUpperCase() === 'GET';
+    if (retryAnonymousOn401 && isRead && accessToken !== undefined && res.status === 401) {
+        // Suppress the rejected optional bearer’s login door; only the anonymous
+        // answer is rendered. Never retry a write or an already-anonymous call.
+        await res.body?.cancel().catch(() => { });
+        res = await request(undefined);
+    }
     if (!res.ok) {
         // Bytes, not text: the edge excerpt is cut by byte before decoding, and
         // the house-error parse below decodes the same bytes (BOM dropped, as
@@ -2621,7 +2629,8 @@ const getMemory = async (cfg, idOrAddress, flags, by) => {
     const url = buildGetMemoryUrl(cfg.webUrl, ownerHandle, address?.ref ?? idOrAddress, flags);
     const enveloped = url.search !== '';
     const result = await apiFetch(accessToken, url, {
-        headers: { Accept: 'application/json' }
+        headers: { Accept: 'application/json' },
+        retryAnonymousOn401: true
     }, 'web');
     if (!result.ok) {
         renderAmbiguousIfPresent(result.body);
@@ -2730,7 +2739,8 @@ const getWallMemories = async (cfg, ownerHandle, flags) => {
     if (flags.content !== undefined)
         url.searchParams.set('content', flags.content);
     const result = await apiFetch(accessToken, url, {
-        headers: { Accept: 'application/json' }
+        headers: { Accept: 'application/json' },
+        retryAnonymousOn401: true
     }, 'web');
     if (!result.ok) {
         process.exitCode = result.exit;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lattris",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "type": "module",
   "description": "First-party CLI for Lattris — sign in, capture notes and sessions, and read your own tree from the terminal.",
   "keywords": [