orcheo-studio 0.23.0 → 0.23.2

package/src/features/workflow/pages/workflow-gallery/workflow-gallery-tabs.tsx

@@ -9,6 +9,7 @@ import {
 } from "@/design-system/ui/tabs";
 import { Loader2, Search, Upload, Zap } from "lucide-react";
 import { type Workflow } from "@features/workflow/data/workflow-data";
+import { formatCandidateGroupName } from "@features/workflow/data/templates/candidate-badges";
 import { type ApiTeam } from "@features/workflow/lib/workflow-storage-api";
 import { UploadWorkflowDialog } from "@features/workflow/components/dialogs/upload-workflow-dialog";
 import { useUploadsAllowed } from "@/hooks/use-uploads-allowed";
@@ -84,11 +85,55 @@ export const WorkflowGalleryTabs = ({
     </div>
   );
 
-  // Group colleagues into vertical, collapsible team sections. Candidate
-  // (template) view stays flat since candidates are not yet assigned a team.
+  // Group candidates into vertical, collapsible sections that mirror the
+  // grouping of the colleague-candidates repository (one level under
+  // `colleagues/`). Independent candidates — those that live directly under
+  // `colleagues/` — stay in a flat grid above the grouped sections.
+  const renderCandidates = () => {
+    const independents: Workflow[] = [];
+    const byGroup = new Map<string, Workflow[]>();
+    for (const workflow of sortedWorkflows) {
+      const group = workflow.candidateGroup;
+      if (!group) {
+        independents.push(workflow);
+        continue;
+      }
+      const bucket = byGroup.get(group);
+      if (bucket) {
+        bucket.push(workflow);
+      } else {
+        byGroup.set(group, [workflow]);
+      }
+    }
+
+    // Nothing is grouped — keep the flat grid.
+    if (byGroup.size === 0) {
+      return renderGrid(sortedWorkflows);
+    }
+
+    return (
+      <div className="flex flex-col gap-1 pb-6">
+        {independents.length > 0 ? renderGrid(independents) : null}
+        {[...byGroup.entries()]
+          .sort(([left], [right]) => left.localeCompare(right))
+          .map(([slug, items]) => (
+            <TeamSection
+              key={slug}
+              name={formatCandidateGroupName(slug)}
+              count={items.length}
+            >
+              {renderGrid(items)}
+            </TeamSection>
+          ))}
+      </div>
+    );
+  };
+
+  // Group colleagues into vertical, collapsible team sections. Candidates are
+  // grouped to mirror the colleague-candidates repository layout instead.
   const renderColleagues = () => {
     if (isTemplateView) {
-      return renderGrid(sortedWorkflows);
+      return renderCandidates();
     }
 
     // No teams yet — fall back to flat grid (e.g. during first load).

package/src/lib/auth-fetch.ts

@@ -1,35 +1,101 @@
 import {
   getAccessToken,
+  getAuthTokens,
   getDevAuthSessionHeaderValue,
 } from "@features/auth/lib/auth-session";
+import { refreshSession } from "@features/auth/lib/auth-api";
 import { getWorkspaceSelectionHeaders } from "./workspace-session";
 
-export const authFetch = async (
-  input: RequestInfo | URL,
-  init: RequestInit = {},
-  options: { includeWorkspaceHeaders?: boolean } = {},
-): Promise<Response> => {
-  const headers = new Headers(init.headers ?? {});
+const buildAuthHeaders = (
+  headers: Headers,
+  shouldAttachAuth: boolean,
+): string | null => {
   const token = getAccessToken();
-  if (token && !headers.has("Authorization")) {
+  if (token && shouldAttachAuth) {
     headers.set("Authorization", `Bearer ${token}`);
   }
   const devSession = getDevAuthSessionHeaderValue();
   if (devSession && !headers.has("X-Orcheo-Dev-Session")) {
     headers.set("X-Orcheo-Dev-Session", devSession);
   }
-  if (options.includeWorkspaceHeaders ?? true) {
-    for (const [name, value] of Object.entries(
-      getWorkspaceSelectionHeaders(),
-    )) {
-      if (!headers.has(name)) {
-        headers.set(name, value);
-      }
+  return shouldAttachAuth ? token : null;
+};
+
+const attachWorkspaceHeaders = (headers: Headers): void => {
+  for (const [name, value] of Object.entries(getWorkspaceSelectionHeaders())) {
+    if (!headers.has(name)) {
+      headers.set(name, value);
     }
   }
-  return globalThis.fetch(input, {
+};
+
+const fetchWithHeaders = (
+  input: RequestInfo | URL,
+  init: RequestInit,
+  headers: Headers,
+): Promise<Response> =>
+  globalThis.fetch(input, {
     ...init,
     credentials: init.credentials ?? "include",
     headers,
   });
+
+const buildRequestHeaders = (
+  init: RequestInit,
+  shouldAttachAuth: boolean,
+  includeWorkspaceHeaders: boolean,
+  headers = new Headers(init.headers ?? {}),
+): { headers: Headers; accessToken: string | null } => {
+  const accessToken = buildAuthHeaders(headers, shouldAttachAuth);
+  if (includeWorkspaceHeaders) {
+    attachWorkspaceHeaders(headers);
+  }
+  return { headers, accessToken };
+};
+
+export const authFetch = async (
+  input: RequestInfo | URL,
+  init: RequestInit = {},
+  options: { includeWorkspaceHeaders?: boolean } = {},
+): Promise<Response> => {
+  const originalHeaders = new Headers(init.headers ?? {});
+  const shouldAttachAuth = !originalHeaders.has("Authorization");
+  // getAccessToken includes the shared 60-second expiry skew, so nearly expired
+  // tokens are treated as missing and refreshed before protected requests.
+  if (shouldAttachAuth && !getAccessToken() && getAuthTokens()?.refreshToken) {
+    await refreshSession();
+  }
+
+  const includeWorkspaceHeaders = options.includeWorkspaceHeaders ?? true;
+  const { headers, accessToken: requestAccessToken } = buildRequestHeaders(
+    init,
+    shouldAttachAuth,
+    includeWorkspaceHeaders,
+    originalHeaders,
+  );
+  const response = await fetchWithHeaders(input, init, headers);
+  if (response.status !== 401 || !shouldAttachAuth) {
+    return response;
+  }
+
+  const currentAccessToken = getAccessToken();
+  if (currentAccessToken && currentAccessToken !== requestAccessToken) {
+    const { headers: retryHeaders } = buildRequestHeaders(
+      init,
+      shouldAttachAuth,
+      includeWorkspaceHeaders,
+    );
+    return fetchWithHeaders(input, init, retryHeaders);
+  }
+
+  if (!getAuthTokens()?.refreshToken || !(await refreshSession())) {
+    return response;
+  }
+
+  const { headers: retryHeaders } = buildRequestHeaders(
+    init,
+    shouldAttachAuth,
+    includeWorkspaceHeaders,
+  );
+  return fetchWithHeaders(input, init, retryHeaders);
 };

package/dist/assets/channel-BbjHmdR-.js

@@ -1 +0,0 @@
-import{ap as o,aq as n}from"./index-CD3NusgQ.js";const t=(a,r)=>o.lang.round(n.parse(a)[r]);export{t as c};

package/dist/assets/classDiagram-2ON5EDUG-B3gA5-gj.js

@@ -1 +0,0 @@
-import{s as a,c as s,a as e,C as t}from"./chunk-B4BG7PRW-9UuoCVI1.js";import{_ as i}from"./index-CD3NusgQ.js";import"./chunk-FMBD7UC4-DZoCKsqW.js";import"./chunk-55IACEB6-BtkroFP3.js";import"./chunk-QN33PNHL-CGFY-glY.js";var p={parser:e,get db(){return new t},renderer:s,styles:a,init:i(r=>{r.class||(r.class={}),r.class.arrowMarkerAbsolute=r.arrowMarkerAbsolute},"init")};export{p as diagram};

package/dist/assets/classDiagram-v2-WZHVMYZB-B3gA5-gj.js

@@ -1 +0,0 @@
-import{s as a,c as s,a as e,C as t}from"./chunk-B4BG7PRW-9UuoCVI1.js";import{_ as i}from"./index-CD3NusgQ.js";import"./chunk-FMBD7UC4-DZoCKsqW.js";import"./chunk-55IACEB6-BtkroFP3.js";import"./chunk-QN33PNHL-CGFY-glY.js";var p={parser:e,get db(){return new t},renderer:s,styles:a,init:i(r=>{r.class||(r.class={}),r.class.arrowMarkerAbsolute=r.arrowMarkerAbsolute},"init")};export{p as diagram};

package/dist/assets/clone-Ctw1pu1z.js

@@ -1 +0,0 @@
-import{ay as r}from"./index-CD3NusgQ.js";var a=4;function n(o){return r(o,a)}export{n as c};

package/dist/assets/stateDiagram-v2-4FDKWEC3-C81OVjQ3.js

@@ -1 +0,0 @@
-import{s as t,b as r,a,S as s}from"./chunk-DI55MBZ5-DFossSVg.js";import{_ as i}from"./index-CD3NusgQ.js";import"./chunk-55IACEB6-BtkroFP3.js";import"./chunk-QN33PNHL-CGFY-glY.js";var l={parser:a,get db(){return new s(2)},renderer:r,styles:t,init:i(e=>{e.state||(e.state={}),e.state.arrowMarkerAbsolute=e.arrowMarkerAbsolute},"init")};export{l as diagram};