wkhandClaude Opus 5.5
7fce972fdc
All editors now work on a server document at the same time instead of taking turns behind an edit lock. - The document's content is a sequence of Yjs updates (document_updates); DocumentChannel stores and relays them immediately, checks access on subscribe and again whenever links or memberships change. - app/frontend/collab/: the store stays position-based; a binding maps it to a Yjs form with stable row/column ids, so a row inserted by one person doesn't misplace what another is typing. Remote changes are applied only after pending local ones went into Yjs. - Per-person undo (Y.UndoManager), presence via awareness: the others' selections as coloured boxes with names, avatars in the toolbar. - Existing JSON documents convert on first open, deterministically, so two people opening one at once end up with the same Yjs state. - Editors compact the stored updates after 200 and keep a JSON snapshot current for export and duplicating. Edit lock and polling are gone. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
22 lines
774 B
Ruby
22 lines
774 B
Ruby
module Api
|
|
class BaseController < ApplicationController
|
|
# the app sends the CSRF token from the page's meta tag as X-CSRF-Token
|
|
protect_from_forgery with: :exception
|
|
|
|
rescue_from ActiveRecord::RecordNotFound do
|
|
render json: { error: "not_found" }, status: :not_found
|
|
end
|
|
rescue_from ActiveRecord::RecordInvalid do |e|
|
|
render json: { error: "invalid", messages: e.record.errors.full_messages }, status: :unprocessable_entity
|
|
end
|
|
rescue_from ActionController::InvalidAuthenticityToken do
|
|
render json: { error: "csrf" }, status: :unprocessable_entity
|
|
end
|
|
|
|
private
|
|
|
|
# a share link token, for visitors (with or without account) who got the link
|
|
def share_token = request.headers["X-Share-Token"].presence
|
|
end
|
|
end
|