fix2 tokens

static/js/workspace.js

@@ -17,7 +17,6 @@ import { bindIdentityDialog, validateCurrentSession } from "@rustpad/auth-ui";
 import { askConfirm } from "@rustpad/modal";
 import { safeAppUrl } from "@rustpad/security";
 import { toast } from "@rustpad/toast";
-import { editorResourceUrl } from "@rustpad/url-state";
 
 const parts = location.pathname.split("/").filter(Boolean);
 const slug = parts[1];
@@ -71,9 +70,6 @@ function setNotesView(view) {
     button.setAttribute("aria-pressed", String(active));
   });
 }
-function noteEditorUrl(path) {
-  return safeAppUrl(editorResourceUrl(safeAppUrl(path), { shareToken }));
-}
 function deleteButton(note, inline = false) {
   const disabled = note.protected;
   const classes = `note-delete-button${inline ? " note-delete-button--inline" : ""}`;
@@ -90,7 +86,7 @@ function renderNotes(notes = notesCache) {
   if (notesView === "table") {
     notesList.innerHTML = `<div class="notes-table-scroll"><table><thead><tr><th>Name</th><th>Created by</th><th>Participants</th><th>Files</th><th>Revisions</th><th>Status</th><th>Updated</th><th class="notes-table-actions">Actions</th></tr></thead><tbody>${notes.map(note => `
       <tr>
-        <td><a class="note-table-link" href="${escapeHtml(noteEditorUrl(note.url))}">${escapeHtml(note.title)}</a></td>
+        <td><a class="note-table-link" href="${escapeHtml(safeAppUrl(`${note.url}?view=split&mode=markdown`))}">${escapeHtml(note.title)}</a></td>
         <td class="note-author">${escapeHtml(note.created_by || "Unknown")}</td>
         <td>${Number(note.participant_count) || 0}</td>
         <td>${Number(note.file_count) || 0} <span class="note-status">(${formatBytes(note.file_size_bytes)})</span></td>
@@ -103,7 +99,7 @@ function renderNotes(notes = notesCache) {
   }
   notesList.innerHTML = notes.map(note => `
     <article class="note-card-wrap">
-      <a class="note-card" href="${escapeHtml(noteEditorUrl(note.url))}">
+      <a class="note-card" href="${escapeHtml(safeAppUrl(`${note.url}?view=split&mode=markdown`))}">
         <div class="note-card-title"><h3>${escapeHtml(note.title)}</h3>${note.protected ? '<span class="protect-badge">Protected</span>' : ''}</div>
         <div class="note-card-meta"><span>Created by: ${escapeHtml(note.created_by || "Unknown")}</span>${noteStats(note)}<span>Updated: ${formatDate(note.updated_at)}</span></div>
       </a>
@@ -155,7 +151,7 @@ async function init() {
     info = await api(`/api/workspaces/${encodeURIComponent(slug)}`, { headers });
     document.querySelector("#workspace-title").textContent = info.title;
     document.querySelector("#workspace-url").textContent = location.pathname;
-    if (info.protected && !accessToken && !getAuthToken()) dialog.showModal(); else openWorkspace();
+    if (info.protected && info.access_level === "none") dialog.showModal(); else openWorkspace();
   } catch (e) {
     if (e.status === 403 || e.status === 404) await showSystemNotFound();
     else document.querySelector("#workspace-error").textContent = e.message;
@@ -183,7 +179,7 @@ document.querySelector("#note-form").addEventListener("submit", async e => {
       method: "POST",
       body: JSON.stringify({ name: document.querySelector("#note-name").value, access_token: accessToken || null, protect: document.querySelector("#note-protect").checked, created_by: nickname || null })
     });
-    location.assign(noteEditorUrl(note.url));
+    location.assign(safeAppUrl(`${note.url}?view=split&mode=markdown`));
   } catch (err) { error.textContent = err.message; }
 });
 notesList.addEventListener("click", async event => {