chat drin

public/js/hyprcrd.js

@@ -117,8 +117,13 @@
                 '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;'
             }[c]));
         },
-        // CSRF: core calls setCsrf() after auth so plugins can read it
-        setCsrf(token) { csrfToken = String(token || ''); },
+        // CSRF: core calls setCsrf() after auth so plugins can read it.
+        // Emits 'csrf.ready' so plugins that need to make state-changing
+        // requests on init can defer until auth has happened.
+        setCsrf(token) {
+            csrfToken = String(token || '');
+            if (csrfToken) hooks.emit('csrf.ready', csrfToken);
+        },
         csrf() { return csrfToken; },
     };