hf login button + sink routing

review.html

@@ -72,10 +72,30 @@ footer .sp { flex: 1; }
   <span class="sp"></span><span id="count"></span>
   <input id="hubtok" type="password" placeholder="HF token" title="write token for data-use-annotations; only needed on static hosting without the bundled server"
     style="font:inherit;color:var(--fg);background:var(--bg);border:1px solid var(--line);border-radius:8px;padding:8px 10px;max-width:130px">
-  <button id="pushBtn" onclick="pushAll()">push annotations</button>
+  <button id="hfBtn" onclick="hfLogin()" title="log in to push rulings to the Hub as yourself">log in with HF</button>
   <button id="hubBtn" onclick="exp()">export</button>
 </footer>
 <script>
+let SINK = null, HFFUSER = null;
+fetch('./sink.json').then(r => r.ok ? r.json() : null).then(async j => {
+  if (!j || !j.url) return;
+  SINK = j.url.replace(/\/$/, '');
+  paintLogin();
+  try {
+    const m = await fetch(SINK + '/me', {credentials: 'include'});
+    if (m.ok) { HFFUSER = (await m.json()).user; paintLogin(); }
+  } catch (e) {}
+});
+function paintLogin() {
+  const b = $('hfBtn');
+  if (!b) return;
+  b.textContent = HFFUSER ? 'HF: ' + HFFUSER : 'log in with HF';
+  b.title = HFFUSER ? 'logged in — rulings commit as you' : 'log in to push rulings to the Hub as yourself';
+}
+function hfLogin() {
+  if (!SINK) return;
+  location.href = SINK + '/login?next=' + encodeURIComponent(location.href.split('?')[0] + location.search);
+}
 const DS = { sample: './queue_annotate_sample.json', gold: './queue_review473.json',
   paddy: './queue_annotate_paddy.json', aj: './queue_annotate_aj.json',
   aivin: './queue_annotate_aivin.json', rafael: './queue_annotate_rafael.json' };
@@ -254,9 +274,9 @@ async function rule(v) {
     const r = await fetch('/api/rulings', {method: 'POST', headers: {'Content-Type': 'application/json'},
       body: JSON.stringify(entry)});
     if (r.ok) saved = (await r.json()).pushed ? 'server + Hub' : 'server';
-    else if (r.status === 404) saved = await hubCommit(entry);
+    else saved = await sinkCommit(entry);
   } catch (e) {
-    saved = await hubCommit(entry);
+    saved = await sinkCommit(entry);
   }
   lastSaved = saved;
   // next unruled span in passage, else next passage
@@ -266,6 +286,19 @@ async function rule(v) {
   else if (i < ITEMS.length - 1) show(i + 1, 0);
   else { light(); }
 }
+async function sinkCommit(entry) {
+  // shared sink (Cloudflare Worker) if configured, else the annotator's
+  // own token, else local-only. The sink holds no shared secret: with HF
+  // login it commits with the annotator's own OAuth token.
+  if (SINK) {
+    try {
+      const r = await fetch(SINK + '/rulings', {method: 'POST', credentials: 'include',
+        headers: {'Content-Type': 'application/json'}, body: JSON.stringify(entry)});
+      if (r.ok) return 'Hub (' + ((await r.json()).as || 'you') + ')';
+    } catch (e) {}
+  }
+  return hubCommit(entry);
+}
 async function hubCommit(entry) {
   // static hosting has no ruling sink: commit straight to the public
   // dataset with the annotator's own write token (stored locally only).