@betterportal/theme-bootstrap1 10.1.40 → 10.1.42

package/lib/plugins/service-betterportal-theme-bootstrap1/assets.js

@@ -1,14 +1,11 @@
-/** @jsxImportSource jsx-htmx */
 import { readFile } from "node:fs/promises";
 import { createRequire } from "node:module";
 import { fileURLToPath } from "node:url";
-import { js } from "jsx-htmx";
+import { BETTERPORTAL_BROWSER_SOURCE_PREAMBLE, betterPortalShellRuntimeSource, buildBetterPortalThemeRuntimeAsset, loadThemeRuntimeVendorAsset } from "@betterportal/theme-runtime";
+import { Bootstrap1AdapterSource } from "./adapter.js";
 const require = createRequire(import.meta.url);
 const BootstrapCssPath = require.resolve("bootstrap/dist/css/bootstrap.min.css");
 const BootstrapBundlePath = require.resolve("bootstrap/dist/js/bootstrap.bundle.min.js");
-const HtmxPath = require.resolve("htmx.org/dist/htmx.min.js");
-const HtmxSsePath = require.resolve("htmx.org/dist/ext/hx-sse.min.js");
-const HtmxPreloadPath = require.resolve("htmx.org/dist/ext/hx-preload.min.js");
 const AssetCache = new Map();
 function readTextAsset(filePath, contentType) {
     return readFile(filePath, "utf8").then((body) => ({ body, contentType }));
@@ -19,2262 +16,42 @@ function readBinaryAsset(filePath, contentType) {
 function readLocalPluginAsset(assetName, contentType) {
     return readBinaryAsset(fileURLToPath(new URL(`./${assetName}`, import.meta.url)), contentType);
 }
-function shellRuntimeSource() {
-    // esbuild/tsx wraps functions with __name() for .name preservation;
-    // shim it for the browser where that helper doesn't exist
-    const body = js(() => {
-        (() => {
-            htmx.config.sse = {
-                reconnect: true, // Auto-reconnect on stream end (default: true for hx-sse:connect, false for hx-get)
-                reconnectDelay: 500, // Initial reconnect delay in ms (default: 500)
-                reconnectMaxDelay: 60000, // Maximum reconnect delay in ms (default: 60000)
-                reconnectMaxAttempts: Infinity, // Maximum reconnection attempts (default: Infinity)
-                reconnectJitter: 0.3, // Jitter factor 0-1 for delay randomization (default: 0.3)
-                pauseOnBackground: true // Disconnect when tab is backgrounded (default: true for hx-sse:connect, false for hx-get)
-            };
-            const HX_METHODS = ["hx-get", "hx-post", "hx-put", "hx-delete", "hx-patch"];
-            const DOWNLOAD_ATTR = "hx-download";
-            // -- DOM helpers --
-            const shellRoot = () => document.querySelector("[data-bp-shell-root]");
-            const routeLinks = () => Array.from(document.querySelectorAll("[data-bp-route-link]"));
-            const titleNode = () => document.querySelector("[data-bp-current-title]");
-            const breadcrumbNode = () => document.querySelector("[data-bp-current-breadcrumb]");
-            const navGroups = () => Array.from(document.querySelectorAll("[data-bp-nav-group]"));
-            const mainOutlet = () => document.querySelector("#bp-main");
-            const contentFrame = () => document.querySelector(".bp-admin__content-frame");
-            const topbarProgress = () => document.querySelector("#bp-topbar-progress");
-            const errorNode = () => document.querySelector("#bp-content-error");
-            const profileSlot = () => document.querySelector("[data-bp-slot='nav-profile']");
-            const profileMirror = () => document.querySelector("[data-bp-profile-mirror]");
-            const syncProfileMirror = () => {
-                const slot = profileSlot();
-                const mirror = profileMirror();
-                if (!slot || !mirror)
-                    return;
-                // Clone content, strip data-bp-shell-route to avoid double-processing
-                mirror.innerHTML = slot.innerHTML;
-                // Re-init bootstrap components on cloned content (dropdowns etc.)
-                initBootstrapComponents(mirror);
-            };
-            const isMainTarget = (target) => !!target && (target === "#bp-main" // htmx.ajax target selectors stay strings in ctx
-                || target.id === "bp-main"
-                || target === mainOutlet());
-            const normalizePath = (path) => {
-                const normalized = (path || "/").replace(/\/+$/, "");
-                return normalized === "" ? "/" : normalized;
-            };
-            const requestTargetsMain = (detail) => {
-                const ctx = detail && (detail.ctx || detail);
-                if (!ctx)
-                    return false;
-                if (isMainTarget(ctx.target) || isMainTarget(detail?.target))
-                    return true;
-                const source = ctx.sourceElement || detail?.elt;
-                const sel = source && source.getAttribute ? source.getAttribute("hx-target") : null;
-                return sel === "#bp-main";
-            };
-            const camelChromeKey = (key) => key.replace(/-([a-z0-9])/g, (_m, ch) => String(ch).toUpperCase());
-            const parseChromeFromContentType = (contentType) => {
-                const chrome = {};
-                const re = /(?:^|;)\s*bp-chrome-([a-z][a-z0-9-]*)=([^;]*)/g;
-                let match;
-                while ((match = re.exec(contentType)) !== null) {
-                    const key = camelChromeKey(match[1]);
-                    const raw = decodeURIComponent((match[2] || "").trim().replace(/^"|"$/g, ""));
-                    chrome[key] =
-                        raw === "true" ? true :
-                            raw === "false" ? false :
-                                raw !== "" && Number.isFinite(Number(raw)) ? Number(raw) :
-                                    raw;
-                }
-                return Object.keys(chrome).length ? chrome : null;
-            };
-            const setChromeFullScreen = (fullScreen) => {
-                const root = shellRoot();
-                if (!root)
-                    return;
-                root.setAttribute("data-bp-chrome-full-screen", fullScreen ? "true" : "false");
-            };
-            const applyChromeFromResponse = (detail) => {
-                if (!requestTargetsMain(detail))
-                    return;
-                const response = detail?.ctx?.response;
-                const contentType = response?.headers?.get?.("content-type") || "";
-                if (!contentType.includes("text/html"))
-                    return;
-                const chrome = parseChromeFromContentType(contentType);
-                setChromeFullScreen(chrome?.fullScreen === true);
-            };
-            // -- Bootstrap component lifecycle --
-            const teleportedModals = new Set();
-            const teleportedOffcanvas = new Set();
-            const bootstrap = window.bootstrap;
-            let overlaySyncQueued = false;
-            const cleanupTeleportedModals = () => {
-                teleportedModals.forEach((el) => {
-                    try {
-                        const inst = bootstrap && bootstrap.Modal.getInstance(el);
-                        if (inst) {
-                            inst.hide();
-                            inst.dispose();
-                        }
-                    }
-                    catch { /* already disposed */ }
-                    el.remove();
-                });
-                teleportedModals.clear();
-            };
-            const cleanupTeleportedOffcanvas = () => {
-                teleportedOffcanvas.forEach((el) => {
-                    const remove = () => {
-                        try {
-                            bootstrap?.Offcanvas.getInstance(el)?.dispose();
-                        }
-                        catch { /* already disposed */ }
-                        el.remove();
-                        teleportedOffcanvas.delete(el);
-                    };
-                    try {
-                        const inst = bootstrap && bootstrap.Offcanvas.getInstance(el);
-                        const transitioning = el.classList.contains("show") || el.classList.contains("showing") || el.classList.contains("hiding");
-                        if (inst && transitioning) {
-                            el.addEventListener("hidden.bs.offcanvas", remove, { once: true });
-                            inst.hide();
-                            return;
-                        }
-                    }
-                    catch { /* already disposed */ }
-                    remove();
-                });
-            };
-            const syncBootstrapOverlays = () => {
-                overlaySyncQueued = false;
-                if (!bootstrap)
-                    return;
-                const hasVisibleOverlay = !!document.querySelector(".modal.show, .modal.showing, .offcanvas.show, .offcanvas.showing");
-                const hasActiveOverlay = Array.from(document.querySelectorAll(".modal, .offcanvas")).some((el) => {
-                    const bs = bootstrap;
-                    const instance = bs.Modal?.getInstance(el) ?? bs.Offcanvas?.getInstance(el);
-                    const state = instance;
-                    return Boolean(state?._isShown || state?._isTransitioning);
-                });
-                if (hasActiveOverlay)
-                    return;
-                if (hasVisibleOverlay)
-                    return;
-                document.querySelectorAll(".modal-backdrop, .offcanvas-backdrop").forEach((el) => el.remove());
-                document.body.classList.remove("modal-open");
-                document.body.style.removeProperty("overflow");
-                document.body.style.removeProperty("padding-right");
-            };
-            const scheduleBootstrapOverlaySync = () => {
-                if (overlaySyncQueued)
-                    return;
-                overlaySyncQueued = true;
-                requestAnimationFrame(syncBootstrapOverlays);
-            };
-            const overlayObserver = new MutationObserver(scheduleBootstrapOverlaySync);
-            overlayObserver.observe(document.body, {
-                childList: true,
-                subtree: true,
-                attributes: true,
-                attributeFilter: ["class", "style"]
-            });
-            scheduleBootstrapOverlaySync();
-            const closeContainingOffcanvas = (source) => {
-                const panel = source?.closest?.(".offcanvas.show, .offcanvas.showing, .offcanvas.hiding");
-                if (!panel || !bootstrap)
-                    return;
-                try {
-                    (bootstrap.Offcanvas.getInstance(panel) || new bootstrap.Offcanvas(panel)).hide();
-                }
-                catch { /* non-fatal */ }
-            };
-            const contentServiceIdFor = (root) => {
-                return serviceIdAttr(root) || serviceIdAttr(mainOutlet()) || currentServiceId();
-            };
-            const teleportModals = (root) => {
-                if (!root)
-                    return;
-                const ownerServiceId = contentServiceIdFor(root);
-                root.querySelectorAll(".modal").forEach((modal) => {
-                    modal.setAttribute("data-bp-content-owned", "true");
-                    if (ownerServiceId && !serviceIdAttr(modal))
-                        modal.setAttribute("data-bp-service", ownerServiceId);
-                    document.body.appendChild(modal);
-                    teleportedModals.add(modal);
-                });
-            };
-            const teleportOffcanvas = (root) => {
-                if (!root)
-                    return;
-                const ownerServiceId = contentServiceIdFor(root);
-                root.querySelectorAll(".offcanvas").forEach((panel) => {
-                    panel.setAttribute("data-bp-content-owned", "true");
-                    if (ownerServiceId && !serviceIdAttr(panel))
-                        panel.setAttribute("data-bp-service", ownerServiceId);
-                    document.body.appendChild(panel);
-                    teleportedOffcanvas.add(panel);
-                });
-            };
-            // Convert <div data-bp-sidebar="id"> wrappers into Bootstrap offcanvas markup.
-            // Falls back gracefully if JS fails - content shows inline.
-            const convertSidebars = (root) => {
-                if (!root)
-                    return;
-                const scope = root.querySelectorAll
-                    ? root.querySelectorAll('[data-bp-sidebar]:not([data-bp-sidebar-ready])')
-                    : [];
-                scope.forEach((el) => {
-                    if (el.hasAttribute('data-bp-sidebar-ready'))
-                        return;
-                    const id = el.getAttribute('data-bp-sidebar') || ('bp-sidebar-' + Math.random().toString(36).slice(2));
-                    const title = el.getAttribute('data-bp-sidebar-title') || '';
-                    const position = el.getAttribute('data-bp-sidebar-position') || 'end';
-                    const width = el.getAttribute('data-bp-sidebar-width');
-                    const innerHtml = el.innerHTML;
-                    el.setAttribute('id', id);
-                    el.setAttribute('data-bp-sidebar-ready', '');
-                    el.className = ('offcanvas offcanvas-' + position + ' ' + (el.className || '')).trim();
-                    el.setAttribute('tabindex', '-1');
-                    if (width)
-                        el.style.width = width;
-                    el.innerHTML =
-                        '<div class="offcanvas-header">' +
-                            (title ? '<h5 class="offcanvas-title">' + title + '</h5>' : '<span></span>') +
-                            '<button type="button" class="btn-close" data-bs-dismiss="offcanvas" aria-label="Close"></button>' +
-                            '</div>' +
-                            '<div class="offcanvas-body">' + innerHtml + '</div>';
-                });
-                // Wire up open triggers
-                const triggers = root.querySelectorAll
-                    ? root.querySelectorAll('[data-bp-sidebar-open]:not([data-bp-trigger-ready])')
-                    : [];
-                triggers.forEach((btn) => {
-                    btn.setAttribute('data-bp-trigger-ready', '');
-                    btn.setAttribute('data-bs-toggle', 'offcanvas');
-                    btn.setAttribute('data-bs-target', '#' + btn.getAttribute('data-bp-sidebar-open'));
-                });
-            };
-            const initBootstrapComponents = (root) => {
-                if (!root || !bootstrap)
-                    return;
-                convertSidebars(root);
-                root.querySelectorAll('[data-bs-toggle="tooltip"]').forEach((el) => {
-                    if (!bootstrap.Tooltip.getInstance(el))
-                        new bootstrap.Tooltip(el);
-                });
-                root.querySelectorAll('[data-bs-toggle="popover"]').forEach((el) => {
-                    if (!bootstrap.Popover.getInstance(el))
-                        new bootstrap.Popover(el);
-                });
-            };
-            const disposeBootstrapComponents = (root) => {
-                if (!root || !bootstrap)
-                    return;
-                root.querySelectorAll('[data-bs-toggle="tooltip"]').forEach((el) => {
-                    const inst = bootstrap.Tooltip.getInstance(el);
-                    if (inst)
-                        inst.dispose();
-                });
-                root.querySelectorAll('[data-bs-toggle="popover"]').forEach((el) => {
-                    const inst = bootstrap.Popover.getInstance(el);
-                    if (inst)
-                        inst.dispose();
-                });
-            };
-            const scrollPageToTop = () => {
-                const workspace = document.querySelector(".bp-admin__workspace");
-                const frame = contentFrame();
-                const main = document.querySelector(".bp-shell__main");
-                [workspace, frame, main, document.scrollingElement, document.documentElement, document.body].forEach((el) => {
-                    if (el && typeof el.scrollTo === "function") {
-                        el.scrollTo({ top: 0, left: 0, behavior: "auto" });
-                    }
-                    else if (el) {
-                        el.scrollTop = 0;
-                        el.scrollLeft = 0;
-                    }
-                });
-                window.scrollTo({ top: 0, left: 0, behavior: "auto" });
-            };
-            const shouldScrollMainSwap = (detail) => {
-                const request = detail?.ctx?.request;
-                if (!request)
-                    return false;
-                const method = String(request.method || "GET").toUpperCase();
-                const action = String(request.action || "");
-                if (!action)
-                    return false;
-                const current = window.location.pathname + window.location.search;
-                const tenantUrl = tenantUrlForServiceUrl(action);
-                try {
-                    const resolved = new URL(tenantUrl, window.location.origin);
-                    const next = resolved.pathname + resolved.search;
-                    if (next !== current)
-                        return true;
-                }
-                catch { /* fall through */ }
-                const hxLocation = detail?.ctx?.hx?.location;
-                if (typeof hxLocation === "string" && hxLocation)
-                    return true;
-                return method === "GET" && Boolean(detail?.ctx?.sourceElement?.getAttribute?.("hx-push-url"));
-            };
-            // -- Loading / error UI --
-            const markLoaded = () => { mainOutlet()?.setAttribute("data-bp-loaded", "yes"); };
-            const hasLoaded = () => mainOutlet()?.getAttribute("data-bp-loaded") === "yes";
-            const disableInitialMainLoad = () => {
-                const outlet = mainOutlet();
-                if (!outlet)
-                    return;
-                if ((outlet.getAttribute("hx-trigger") || "").trim() === "load") {
-                    outlet.removeAttribute("hx-trigger");
-                }
-            };
-            const setLoading = (loading) => {
-                contentFrame()?.classList.toggle("is-loading", loading);
-                topbarProgress()?.classList.toggle("is-active", loading);
-            };
-            const clearError = () => {
-                const node = errorNode();
-                if (!node)
-                    return;
-                node.innerHTML = "";
-                node.classList.remove("is-visible");
-            };
-            const showRequestErrorModal = (status, content) => {
-                if (!bootstrap) {
-                    const text = document.createElement("div");
-                    text.innerHTML = content;
-                    window.alert(text.textContent || errorMessage(status));
-                    return;
-                }
-                let modal = document.querySelector("#bp-request-error-modal");
-                if (!modal) {
-                    modal = document.createElement("div");
-                    modal.id = "bp-request-error-modal";
-                    modal.className = "modal fade";
-                    modal.tabIndex = -1;
-                    modal.setAttribute("role", "dialog");
-                    modal.setAttribute("aria-modal", "true");
-                    modal.setAttribute("aria-labelledby", "bp-request-error-modal-title");
-                    modal.innerHTML =
-                        '<div class="modal-dialog modal-dialog-centered">' +
-                            '<div class="modal-content">' +
-                            '<div class="modal-header">' +
-                            '<h5 class="modal-title" id="bp-request-error-modal-title">Request failed</h5>' +
-                            '<button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>' +
-                            '</div>' +
-                            '<div class="modal-body" data-bp-request-error-body></div>' +
-                            '<div class="modal-footer"><button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Dismiss</button></div>' +
-                            '</div></div>';
-                    document.body.appendChild(modal);
-                }
-                const body = modal.querySelector("[data-bp-request-error-body]");
-                if (body) {
-                    body.innerHTML = content || `<div class="alert alert-danger mb-0">${errorMessage(status)}</div>`;
-                    htmx.process(body);
-                }
-                bootstrap.Modal.getOrCreateInstance(modal).show();
-            };
-            const renderErrorAction = (action) => {
-                if (!action)
-                    return "";
-                return `<button type="button" class="btn btn-sm btn-outline-danger" data-bp-error-action="${action.kind}">${action.label}</button>`;
-            };
-            const bannerActionForStatus = (status) => {
-                if (status === 401) {
-                    const loginUrl = shellRoot()?.getAttribute("data-bp-login-url");
-                    if (loginUrl)
-                        return { kind: "login", label: "Sign in" };
-                    return { kind: "reload", label: "Reload" };
-                }
-                return { kind: "reload", label: "Reload" };
-            };
-            const replaceMainWithError = (title, message, action, context) => {
-                const outlet = mainOutlet();
-                if (!outlet)
-                    return;
-                outlet.innerHTML =
-                    `<div class="bp-shell__empty-state">` +
-                        `<div class="bp-shell__empty-card">` +
-                        `<div class="bp-shell__empty-title">${title}</div>` +
-                        (context ? `<div class="bp-shell__empty-copy"><code>${context}</code></div>` : "") +
-                        `<div class="bp-shell__empty-copy">${message}</div>` +
-                        `<div class="bp-shell__empty-actions">${renderErrorAction(action)}</div>` +
-                        `</div>` +
-                        `</div>`;
-            };
-            const errorMessage = (status) => {
-                switch (status) {
-                    case 401: return "Session expired. Sign in again to continue.";
-                    case 403: return "Access denied for this view.";
-                    case 404: return "View not found.";
-                    case 502:
-                    case 503: return "Service unavailable. Try again shortly.";
-                    default: return "Request failed. Try again.";
-                }
-            };
-            const isThemeOriginUrl = (url) => {
-                try {
-                    return new URL(url, window.location.origin).host === window.location.host;
-                }
-                catch {
-                    return false;
-                }
-            };
-            const serviceOrigins = (() => {
-                try {
-                    return JSON.parse(shellRoot()?.getAttribute("data-bp-services") || "{}");
-                }
-                catch {
-                    return {};
-                }
-            })();
-            const unresolvedServiceOrigin = "https://betterportal.invalid";
-            const loadBackgroundFragments = async () => {
-                const outlet = document.querySelector("[data-bp-background-fragments]");
-                if (!(outlet instanceof HTMLElement) || outlet.dataset.bpLoaded === "1")
-                    return;
-                outlet.dataset.bpLoaded = "1";
-                const byService = new Map();
-                for (const route of buildServiceRouteMap()) {
-                    if (route.serviceId && route.serviceOrigin && !byService.has(route.serviceId)) {
-                        byService.set(route.serviceId, { serviceId: route.serviceId, origin: route.serviceOrigin });
-                    }
-                }
-                const escapeAttr = (value) => value.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;");
-                const nodes = [];
-                await Promise.all(Array.from(byService.values()).map(async (service) => {
-                    try {
-                        const base = service.origin.replace(/\/+$/, "");
-                        const response = await fetch(base + "/.well-known/bp/schema.json", { headers: { Accept: "application/json" }, cache: "default", mode: "cors" });
-                        if (!response.ok)
-                            return;
-                        const schema = await response.json();
-                        for (const route of schema.routes || []) {
-                            for (const fragment of route.fragments || []) {
-                                if (fragment.fragmentLocation !== "background" || !fragment.fragmentId)
-                                    continue;
-                                const key = "background." + fragment.fragmentId;
-                                const url = base + route.path + (route.path.includes("?") ? "&" : "?") + "_f=" + encodeURIComponent(key);
-                                nodes.push('<div data-bp-fragment="' + escapeAttr(fragment.fragmentId) + '" data-bp-fragment-location="background" data-bp-service="' + escapeAttr(service.serviceId) + '" hx-get="' + escapeAttr(url) + '" hx-trigger="load" hx-target="this" hx-swap="innerHTML"></div>');
-                            }
-                        }
-                    }
-                    catch { /* service unavailable; skip background fragments */ }
-                }));
-                outlet.innerHTML = nodes.join("");
-                if (typeof htmx.process === "function")
-                    htmx.process(outlet);
-            };
-            const serviceIdByOrigin = (() => {
-                const map = {};
-                for (const [id, origin] of Object.entries(serviceOrigins)) {
-                    try {
-                        map[new URL(origin).origin] = id;
-                    }
-                    catch { /* skip invalid */ }
-                }
-                return map;
-            })();
-            const BP_HEADERS_KEY = "bp.headers";
-            const DEFAULT_HEADER_REFRESH_BEFORE_SECONDS = 60;
-            const HEADER_REFRESH_RETRY_MS = 30_000;
-            const headerRefreshTimers = new Map();
-            const headerRefreshRetryAt = new Map();
-            let headerRefreshInFlight = null;
-            const readBpHeaders = () => {
-                try {
-                    return JSON.parse(localStorage.getItem(BP_HEADERS_KEY) || "{}");
-                }
-                catch {
-                    return {};
-                }
-            };
-            const writeBpHeaders = (headers) => {
-                try {
-                    localStorage.setItem(BP_HEADERS_KEY, JSON.stringify(headers));
-                }
-                catch { /* storage unavailable - headers just won't persist */ }
-            };
-            const triggerBodyEvent = (name, detail) => {
-                if (typeof htmx.trigger === "function")
-                    htmx.trigger(document.body, name, detail);
-            };
-            /** Drop expired entries; returns the live set. */
-            const liveBpHeaders = () => {
-                const stored = readBpHeaders();
-                const now = Math.floor(Date.now() / 1000);
-                let changed = false;
-                for (const [name, entry] of Object.entries(stored)) {
-                    if (entry && typeof entry.expires === "number" && entry.expires <= now) {
-                        delete stored[name];
-                        changed = true;
-                    }
-                }
-                if (changed)
-                    writeBpHeaders(stored);
-                return stored;
-            };
-            const serviceIdForUrl = (url) => {
-                try {
-                    return serviceIdByOrigin[new URL(url, window.location.origin).origin] || "";
-                }
-                catch {
-                    return "";
-                }
-            };
-            const originForServiceId = (id) => id ? (serviceOrigins[id] || unresolvedServiceOrigin) : "";
-            const originFromAbsoluteUrl = (value) => {
-                try {
-                    return value ? new URL(value).origin : "";
-                }
-                catch {
-                    return "";
-                }
-            };
-            const refreshUrlForHeader = (entry) => {
-                if (!entry.refresh)
-                    return "";
-                const base = serviceOrigins[entry.owner]
-                    || originFromAbsoluteUrl(entry.owner)
-                    || (entry.scope ? serviceOrigins[entry.scope] : "")
-                    || window.location.origin;
-                try {
-                    return new URL(entry.refresh, base).href;
-                }
-                catch {
-                    return "";
-                }
-            };
-            const headerRefreshDue = (entry, force) => {
-                if (!entry.refresh)
-                    return false;
-                if (force)
-                    return true;
-                if (typeof entry.expires !== "number")
-                    return false;
-                const before = typeof entry.refreshBefore === "number"
-                    ? entry.refreshBefore
-                    : DEFAULT_HEADER_REFRESH_BEFORE_SECONDS;
-                return entry.expires - Math.floor(Date.now() / 1000) <= before;
-            };
-            const refreshStoredHeader = async (name, entry) => {
-                const refreshUrl = refreshUrlForHeader(entry);
-                if (!refreshUrl)
-                    return false;
-                const previous = liveBpHeaders()[name] ?? entry;
-                const headers = {
-                    "accept": "application/json",
-                    "content-type": "application/json"
-                };
-                attachBpHeaders(headers, refreshUrl, entry.owner);
-                let response;
-                try {
-                    response = await fetch(refreshUrl, {
-                        method: "POST",
-                        mode: "cors",
-                        cache: "no-store",
-                        headers,
-                        body: "{}"
-                    });
-                }
-                catch {
-                    return false;
-                }
-                applyBpHeaderDirectives(response, refreshUrl);
-                const current = liveBpHeaders()[name];
-                return response.ok
-                    && !!current
-                    && (current.value !== previous.value || current.expires !== previous.expires);
-            };
-            const refreshStoredHeaders = async (force = false) => {
-                const entries = Object.entries(liveBpHeaders()).filter(([, entry]) => headerRefreshDue(entry, force));
-                if (entries.length === 0)
-                    return false;
-                let refreshed = false;
-                for (const [name, entry] of entries) {
-                    refreshed = await refreshStoredHeader(name, entry) || refreshed;
-                }
-                return refreshed;
-            };
-            const refreshStoredHeadersOnce = (force = false) => {
-                if (!headerRefreshInFlight) {
-                    headerRefreshInFlight = refreshStoredHeaders(force).finally(() => {
-                        headerRefreshInFlight = null;
-                    });
-                }
-                return headerRefreshInFlight;
-            };
-            const scheduleHeaderRefreshes = () => {
-                headerRefreshTimers.forEach((timer) => window.clearTimeout(timer));
-                headerRefreshTimers.clear();
-                const nowMs = Date.now();
-                for (const [name, entry] of Object.entries(readBpHeaders())) {
-                    if (!entry?.refresh || typeof entry.expires !== "number")
-                        continue;
-                    const before = typeof entry.refreshBefore === "number"
-                        ? entry.refreshBefore
-                        : DEFAULT_HEADER_REFRESH_BEFORE_SECONDS;
-                    const dueMs = (entry.expires - before) * 1000;
-                    const delay = Math.max(0, dueMs - nowMs, (headerRefreshRetryAt.get(name) ?? 0) - nowMs);
-                    headerRefreshTimers.set(name, window.setTimeout(() => {
-                        void refreshStoredHeader(name, entry)
-                            .then((refreshed) => {
-                            if (refreshed)
-                                headerRefreshRetryAt.delete(name);
-                            else
-                                headerRefreshRetryAt.set(name, Date.now() + HEADER_REFRESH_RETRY_MS);
-                        })
-                            .finally(scheduleHeaderRefreshes);
-                    }, delay));
-                }
-            };
-            /** Attach stored headers to an outgoing request's header map. */
-            const attachBpHeaders = (requestHeaders, requestUrl, explicitServiceId = "") => {
-                const targetServiceId = explicitServiceId || serviceIdForUrl(requestUrl);
-                for (const [name, entry] of Object.entries(liveBpHeaders())) {
-                    if (!entry || typeof entry.value !== "string")
-                        continue;
-                    if (entry.scope && entry.scope !== targetServiceId)
-                        continue;
-                    if (requestHeaders[name] !== undefined)
-                        continue; // explicit wins
-                    requestHeaders[name] = entry.value;
-                }
-            };
-            /**
-             * Process BP-SetHeader / BP-RemoveHeader response headers.
-             * Wire format: "Name=value; locked=true; expires=1735689600; scope=true"
-             * Owner = the service that sent the response (locked headers can only be
-             * overwritten or removed by their owner).
-             */
-            const applyBpHeaderDirectives = (response, requestUrl) => {
-                const setRaw = response?.headers?.get?.("bp-setheader");
-                const removeRaw = response?.headers?.get?.("bp-removeheader");
-                if (!setRaw && !removeRaw)
-                    return;
-                // A responder is known by its service id AND its origin - owner checks
-                // accept either, so entries stored before the service map knew this
-                // service (owner = origin fallback) stay controllable by their owner.
-                const responderOrigin = (() => {
-                    try {
-                        return new URL(requestUrl, window.location.origin).origin;
-                    }
-                    catch {
-                        return "";
-                    }
-                })();
-                const responderId = serviceIdForUrl(requestUrl);
-                const responder = responderId || responderOrigin;
-                const ownerMatches = (owner) => (!!responderId && owner === responderId) || (!!responderOrigin && owner === responderOrigin);
-                const stored = liveBpHeaders();
-                let changed = false;
-                if (setRaw) {
-                    // Multiple BP-SetHeader values arrive comma-joined via Headers.get().
-                    // Values (JWTs, etc.) contain no commas, so a comma followed by a
-                    // token= prefix is a safe directive boundary.
-                    for (const directive of setRaw.split(/,(?=\s*[^;,=]+=)/)) {
-                        const [pair, ...attrParts] = directive.split(";");
-                        const eq = (pair || "").indexOf("=");
-                        if (eq <= 0)
-                            continue;
-                        const name = pair.slice(0, eq).trim();
-                        const value = pair.slice(eq + 1).trim();
-                        if (!name)
-                            continue;
-                        const existing = stored[name];
-                        if (existing && existing.locked && !ownerMatches(existing.owner))
-                            continue;
-                        const attrs = {};
-                        for (const part of attrParts) {
-                            const aEq = part.indexOf("=");
-                            if (aEq <= 0)
-                                continue;
-                            attrs[part.slice(0, aEq).trim().toLowerCase()] = part.slice(aEq + 1).trim();
-                        }
-                        const rawScope = (attrs["scope"] || "").toLowerCase();
-                        const scope = rawScope === "true" ? responder
-                            : rawScope === "false" ? null
-                                : attrs["scope"] || null;
-                        stored[name] = {
-                            value,
-                            owner: responder,
-                            locked: attrs["locked"] === "true",
-                            expires: attrs["expires"] ? Number(attrs["expires"]) || null : null,
-                            scope,
-                            refresh: attrs["refresh"] || null,
-                            refreshBefore: attrs["refreshbefore"] ? Number(attrs["refreshbefore"]) || null : null
-                        };
-                        changed = true;
-                    }
-                }
-                if (removeRaw) {
-                    for (const rawName of removeRaw.split(",")) {
-                        const name = rawName.trim();
-                        const existing = stored[name];
-                        if (!existing)
-                            continue;
-                        if (existing.locked && !ownerMatches(existing.owner))
-                            continue;
-                        delete stored[name];
-                        changed = true;
-                    }
-                }
-                if (changed) {
-                    writeBpHeaders(stored);
-                    scheduleHeaderRefreshes();
-                    triggerBodyEvent("bp:fragments-changed");
-                }
-            };
-            const contentDispositionFilename = (value) => {
-                if (!value)
-                    return "";
-                const utf8 = /filename\*=UTF-8''([^;]+)/i.exec(value);
-                if (utf8?.[1]) {
-                    try {
-                        return decodeURIComponent(utf8[1].trim().replace(/^"|"$/g, ""));
-                    }
-                    catch {
-                        return utf8[1].trim();
-                    }
-                }
-                const simple = /filename=([^;]+)/i.exec(value);
-                return simple?.[1]?.trim().replace(/^"|"$/g, "") || "";
-            };
-            const fallbackDownloadName = (url) => {
-                try {
-                    const name = new URL(url, window.location.origin).pathname.split("/").filter(Boolean).pop();
-                    return name || "download";
-                }
-                catch {
-                    return "download";
-                }
-            };
-            const resolveDownloadUrl = (el) => {
-                const context = serviceContextFor(el);
-                const rawAttr = el.getAttribute(DOWNLOAD_ATTR);
-                const rawHref = el.tagName === "A" ? (el.getAttribute("href") || "") : "";
-                const raw = ((rawAttr ?? "").trim() || rawHref).trim();
-                if (!raw)
-                    return "";
-                if (isThisReference(raw))
-                    return resolveThisServiceUrl(el, context);
-                if (isRelativeServicePath(raw))
-                    return context.origin ? context.origin + raw : raw;
-                try {
-                    return new URL(raw, window.location.origin).href;
-                }
-                catch {
-                    return "";
-                }
-            };
-            const downloadBlob = async (el) => {
-                if (el.getAttribute("data-bp-download-loading") === "true")
-                    return;
-                const url = resolveDownloadUrl(el);
-                if (!url)
-                    return;
-                el.setAttribute("data-bp-download-loading", "true");
-                const headers = {
-                    Accept: el.getAttribute("hx-accept") || "application/octet-stream"
-                };
-                attachBpHeaders(headers, url);
-                try {
-                    const response = await fetch(url, {
-                        method: "GET",
-                        mode: "cors",
-                        cache: "no-store",
-                        headers
-                    });
-                    applyBpHeaderDirectives(response, url);
-                    if (!response.ok) {
-                        renderRouteError("Download Failed", `The download request failed with HTTP ${response.status}.`, { kind: "reload", label: "Reload" }, el);
-                        return;
-                    }
-                    const blob = await response.blob();
-                    const objectUrl = URL.createObjectURL(blob);
-                    const anchor = document.createElement("a");
-                    anchor.href = objectUrl;
-                    anchor.download =
-                        contentDispositionFilename(response.headers.get("content-disposition"))
-                            || el.getAttribute("download")
-                            || fallbackDownloadName(url);
-                    document.body.appendChild(anchor);
-                    anchor.click();
-                    anchor.remove();
-                    window.setTimeout(() => URL.revokeObjectURL(objectUrl), 1000);
-                }
-                catch {
-                    renderRouteError("Download Failed", "The download request could not be completed.", { kind: "reload", label: "Reload" }, el);
-                }
-                finally {
-                    el.removeAttribute("data-bp-download-loading");
-                }
-            };
-            const bindDownload = (el) => {
-                if (!el.hasAttribute(DOWNLOAD_ATTR) || el.getAttribute("data-bp-download-bound") === "true")
-                    return;
-                el.setAttribute("data-bp-download-bound", "true");
-                el.addEventListener("click", (event) => {
-                    event.preventDefault();
-                    event.stopPropagation();
-                    void downloadBlob(el);
-                });
-                const trigger = (el.getAttribute("hx-trigger") || "").toLowerCase();
-                if (trigger.split(/[,\s]+/).includes("load")) {
-                    window.setTimeout(() => void downloadBlob(el), 0);
-                }
-            };
-            const clearAuthorizationHeader = () => {
-                const stored = liveBpHeaders();
-                if (!stored.Authorization)
-                    return;
-                delete stored.Authorization;
-                writeBpHeaders(stored);
-                scheduleHeaderRefreshes();
-                triggerBodyEvent("bp:fragments-changed");
-            };
-            scheduleHeaderRefreshes();
-            const isLocalDevHost = () => {
-                const host = window.location.hostname;
-                return host === "localhost" || host === "127.0.0.1" || host === "::1";
-            };
-            const devReloadEnabled = () => {
-                const raw = (shellRoot()?.getAttribute("data-bp-dev-reload") || "auto").toLowerCase();
-                if (["false", "0", "no", "off"].includes(raw))
-                    return false;
-                if (["true", "1", "yes", "on"].includes(raw))
-                    return true;
-                return isLocalDevHost();
-            };
-            const activeRouteLink = () => {
-                const path = normalizePath(window.location.pathname);
-                return routeLinks().find((link) => normalizePath(link.getAttribute("href") || "/") === path) || null;
-            };
-            const currentServiceId = () => mainOutlet()?.getAttribute("data-bp-service") || activeRouteLink()?.getAttribute("data-bp-service") || "";
-            const currentRouteRequestUrl = () => activeRouteLink()?.getAttribute("data-bp-route-request") || mainOutlet()?.getAttribute("hx-get") || "";
-            const reloadCurrentRoute = (requestUrl, source) => {
-                const action = requestUrl || currentRouteRequestUrl();
-                const outlet = mainOutlet();
-                if (!action || !outlet)
-                    return;
-                clearError();
-                setLoading(hasLoaded());
-                const routePath = source?.closest?.("[data-bp-route-link]")?.getAttribute("href")
-                    || activeRouteLink()?.getAttribute("href")
-                    || window.location.pathname + window.location.search;
-                triggerShellLink(routePath, action, true);
-            };
-            const serviceHealthUrl = (serviceId) => {
-                const origin = serviceId ? serviceOrigins[serviceId] : "";
-                return origin ? origin.replace(/\/+$/, "") + "/.well-known/bp/health" : "";
-            };
-            const checkServiceHealth = async (serviceId) => {
-                const url = serviceHealthUrl(serviceId);
-                if (!url)
-                    return false;
-                try {
-                    const response = await fetch(url, {
-                        method: "GET",
-                        cache: "no-store",
-                        headers: { Accept: "application/json" }
-                    });
-                    return response.ok;
-                }
-                catch {
-                    return false;
-                }
-            };
-            const devHealthState = new Map();
-            const scheduleDevServiceRecovery = (serviceId, requestUrl, source, path = window.location.pathname) => {
-                if (!devReloadEnabled() || !serviceId)
-                    return;
-                const state = devHealthState.get(serviceId) || { wasDown: true, polling: false };
-                state.wasDown = true;
-                if (state.polling) {
-                    devHealthState.set(serviceId, state);
-                    return;
-                }
-                state.polling = true;
-                devHealthState.set(serviceId, state);
-                let attempts = 0;
-                let sawUnhealthy = false;
-                const poll = async () => {
-                    attempts += 1;
-                    const healthy = await checkServiceHealth(serviceId);
-                    if (healthy) {
-                        state.polling = false;
-                        state.wasDown = false;
-                        devHealthState.set(serviceId, state);
-                        if (sawUnhealthy && normalizePath(window.location.pathname) === normalizePath(path)) {
-                            reloadCurrentRoute(requestUrl, source);
-                        }
-                        return;
-                    }
-                    sawUnhealthy = true;
-                    if (attempts < 60) {
-                        window.setTimeout(poll, 750);
-                    }
-                    else {
-                        state.polling = false;
-                        devHealthState.set(serviceId, state);
-                    }
-                };
-                window.setTimeout(poll, 750);
-            };
-            const buildServiceRouteMap = () => {
-                const routes = [];
-                const addRoute = (tenantPathRaw, requestUrl, serviceId, kind) => {
-                    if (!requestUrl || !serviceId)
-                        return;
-                    const origin = serviceOrigins[serviceId];
-                    if (!origin)
-                        return;
-                    try {
-                        const tenantPath = normalizePath(tenantPathRaw || "/");
-                        const servicePath = normalizePath(new URL(requestUrl).pathname);
-                        routes.push({ tenantPath, servicePath, serviceOrigin: origin, serviceId, kind });
-                    }
-                    catch { /* skip invalid */ }
-                };
-                try {
-                    const allRoutes = JSON.parse(shellRoot()?.getAttribute("data-bp-routes") || "[]");
-                    allRoutes.forEach((route) => addRoute(route.href || "/", route.requestUrl || "", route.serviceId || "", route.kind));
-                }
-                catch { /* fallback to DOM links */ }
-                routeLinks().forEach((link) => {
-                    addRoute(link.getAttribute("href") || "/", link.getAttribute("data-bp-route-request") || "", link.getAttribute("data-bp-service") || "", "page");
-                });
-                // Sort by service path length descending for longest-prefix-first matching
-                routes.sort((a, b) => b.servicePath.length - a.servicePath.length);
-                return routes;
-            };
-            const matchServiceRoute = (serviceId, path) => {
-                const routes = buildServiceRouteMap();
-                const normalPath = normalizePath(path);
-                const tryMatch = (filterServiceId) => {
-                    for (const route of routes) {
-                        if (filterServiceId && route.serviceId !== filterServiceId)
-                            continue;
-                        if (route.kind === "api" || route.tenantPath.startsWith("/_bp/"))
-                            continue;
-                        if (normalPath === route.servicePath) {
-                            return { route, suffix: "" };
-                        }
-                        if (normalPath.startsWith(route.servicePath + "/")) {
-                            return { route, suffix: normalPath.slice(route.servicePath.length) };
-                        }
-                    }
-                    return null;
-                };
-                // Try current service first, then fallback to any service (cross-service links)
-                return tryMatch(serviceId) || tryMatch(null);
-            };
-            // Reverse of matchServiceRoute: resolve a TENANT path (what the URL bar /
-            // an HX-Location shows) to its owning route. Authoritative across services,
-            // so it works for programmatic navigations where the DOM has no owning
-            // element context (e.g. post-login HX-Location to a tenant path).
-            const matchTenantRoute = (path) => {
-                const routes = buildServiceRouteMap()
-                    .slice()
-                    .sort((a, b) => b.tenantPath.length - a.tenantPath.length);
-                const normalPath = normalizePath(path);
-                for (const route of routes) {
-                    if (normalPath === route.tenantPath)
-                        return { route, suffix: "" };
-                    if (normalPath.startsWith(route.tenantPath + "/")) {
-                        return { route, suffix: normalPath.slice(route.tenantPath.length) };
-                    }
-                }
-                return null;
-            };
-            const tenantUrlForServiceUrl = (value) => {
-                try {
-                    const url = new URL(value, window.location.origin);
-                    const serviceId = serviceIdByOrigin[url.origin] || "";
-                    const match = matchServiceRoute(serviceId, url.pathname);
-                    if (!match)
-                        return value;
-                    return normalizePath(match.route.tenantPath + match.suffix) + url.search + url.hash;
-                }
-                catch {
-                    return value;
-                }
-            };
-            const serviceUrlForTenantUrl = (value) => {
-                try {
-                    const url = new URL(value, window.location.origin);
-                    const match = matchTenantRoute(url.pathname);
-                    if (!match)
-                        return value;
-                    return match.route.serviceOrigin + normalizePath(match.route.servicePath + match.suffix) + url.search + url.hash;
-                }
-                catch {
-                    return value;
-                }
-            };
-            const triggerShellLink = (tenantUrl, serviceUrl = serviceUrlForTenantUrl(tenantUrl), replace = false) => {
-                const link = document.createElement("a");
-                link.href = tenantUrl;
-                link.setAttribute("hx-get", serviceUrl);
-                link.setAttribute("hx-trigger", "load");
-                link.setAttribute("hx-target", "#bp-main");
-                link.setAttribute("hx-swap", "innerHTML");
-                link.setAttribute(replace ? "hx-replace-url" : "hx-push-url", tenantUrl);
-                link.setAttribute("data-bp-no-route", "");
-                link.hidden = true;
-                const cleanup = () => link.remove();
-                link.addEventListener("htmx:afterRequest", cleanup, { once: true });
-                document.body.appendChild(link);
-                htmx.process(link);
-                window.setTimeout(cleanup, 30000);
-            };
-            const applyConfigToken = (cfg, token) => {
-                const trimmed = token.trim();
-                if (!trimmed)
-                    return;
-                const eqIdx = trimmed.indexOf("=");
-                const rawKey = eqIdx === -1 ? trimmed : trimmed.slice(0, eqIdx).trim();
-                const rawValue = eqIdx === -1 ? "" : trimmed.slice(eqIdx + 1).trim();
-                if (!rawKey)
-                    return;
-                if (rawKey === "ignore") {
-                    cfg.ignore = true;
-                    return;
-                }
-                const negative = rawKey.startsWith("no-");
-                const key = negative ? rawKey.slice(3) : rawKey;
-                const value = negative
-                    ? false
-                    : eqIdx === -1
-                        ? true
-                        : !["false", "0", "no", "off"].includes(rawValue.toLowerCase());
-                if (key === "preload")
-                    cfg.preload = Boolean(value);
-                else if (key === "rewrite")
-                    cfg.rewrite = Boolean(value);
-                else if (key === "service" && eqIdx !== -1 && rawValue)
-                    cfg.service = rawValue;
-            };
-            const parseConfigAttr = (cfg, raw) => {
-                if (!raw)
-                    return;
-                raw.split(";").forEach((token) => applyConfigToken(cfg, token));
-            };
-            const bpConfigFor = (el) => {
-                const chain = [];
-                let current = el;
-                while (current) {
-                    chain.unshift(current);
-                    current = current.parentElement;
-                }
-                const cfg = {};
-                for (const node of chain) {
-                    parseConfigAttr(cfg, node.getAttribute("data-bp-config"));
-                    parseConfigAttr(cfg, node.getAttribute("bp-config"));
-                }
-                return cfg;
-            };
-            const serviceIdAttr = (el) => {
-                if (!el)
-                    return "";
-                return (el.getAttribute("bp-service-id") ||
-                    el.getAttribute("data-bp-service-id") ||
-                    el.getAttribute("data-bp-service") ||
-                    "");
-            };
-            const serviceContextFor = (el, fallbackServiceId = "") => {
-                const cfgServiceId = el ? bpConfigFor(el).service || "" : "";
-                const ownerEl = el?.closest?.("[bp-service-id], [data-bp-service-id], [data-bp-service]") || null;
-                const id = cfgServiceId || serviceIdAttr(ownerEl) || fallbackServiceId;
-                return { id, origin: id ? originForServiceId(id) : "" };
-            };
-            const explicitServiceContextFor = (el) => {
-                const cfgServiceId = el ? bpConfigFor(el).service || "" : "";
-                const explicitEl = el?.closest?.("[bp-service-id], [data-bp-service-id]") || null;
-                const id = cfgServiceId || serviceIdAttr(explicitEl);
-                return { id, origin: id ? originForServiceId(id) : "" };
-            };
-            const isPreloadableAnchor = (el) => {
-                if (el.tagName !== "A")
-                    return false;
-                const href = el.getAttribute("href") || "";
-                if (!href || href.startsWith("#"))
-                    return false;
-                if (href.startsWith("mailto:") || href.startsWith("tel:") || href.startsWith("javascript:"))
-                    return false;
-                const target = el.getAttribute("target");
-                if (target && target !== "_self")
-                    return false;
-                return !el.hasAttribute("download");
-            };
-            const isRelativeServicePath = (value) => {
-                const trimmed = (value || "").trim();
-                return trimmed.startsWith("/") && !trimmed.startsWith("//");
-            };
-            const isThisReference = (value) => (value || "").trim().toLowerCase() === "this";
-            const resolveThisServiceUrl = (el, context) => {
-                const explicitContext = explicitServiceContextFor(el);
-                if (explicitContext.origin) {
-                    return explicitContext.origin + window.location.pathname + window.location.search;
-                }
-                const routeMatch = matchTenantRoute(window.location.pathname);
-                if (routeMatch) {
-                    return routeMatch.route.serviceOrigin + normalizePath(routeMatch.route.servicePath + routeMatch.suffix) + window.location.search;
-                }
-                const serviceOrigin = context.origin;
-                if (serviceOrigin) {
-                    return serviceOrigin + window.location.pathname + window.location.search;
-                }
-                const requestUrl = currentRouteRequestUrl();
-                if (requestUrl) {
-                    try {
-                        const resolved = new URL(requestUrl, serviceOrigin || window.location.origin);
-                        if (resolved.origin !== window.location.origin || !serviceOrigin)
-                            return resolved.href;
-                        return serviceOrigin + resolved.pathname + resolved.search;
-                    }
-                    catch {
-                        if (isRelativeServicePath(requestUrl) && serviceOrigin)
-                            return serviceOrigin + requestUrl.trim();
-                    }
-                }
-                return "";
-            };
-            window.bpLoginSubmit = async (event) => {
-                event.preventDefault();
-                event.stopImmediatePropagation();
-                const form = event.currentTarget;
-                if (!form)
-                    return false;
-                const errEl = document.getElementById("bp-login-error");
-                if (errEl)
-                    errEl.classList.add("d-none");
-                const fd = new FormData(form);
-                const queryNext = new URLSearchParams(window.location.search).get("next");
-                if (!fd.get("next") && queryNext)
-                    fd.set("next", queryNext);
-                const context = serviceContextFor(form);
-                const rawAction = form.getAttribute("hx-post") || form.getAttribute("action") || "this";
-                const action = isThisReference(rawAction)
-                    ? resolveThisServiceUrl(form, context)
-                    : new URL(rawAction, context.origin || window.location.origin).href;
-                try {
-                    const response = await fetch(action, {
-                        method: "POST",
-                        mode: "cors",
-                        credentials: "include",
-                        headers: {
-                            Accept: "application/json",
-                            "Content-Type": "application/x-www-form-urlencoded"
-                        },
-                        body: new URLSearchParams(fd)
-                    });
-                    applyBpHeaderDirectives(response, action);
-                    const hxTrigger = response.headers.get("HX-Trigger");
-                    if (hxTrigger) {
-                        try {
-                            const parsed = JSON.parse(hxTrigger);
-                            for (const name of Object.keys(parsed))
-                                htmx.trigger(document.body, name, parsed[name]);
-                        }
-                        catch {
-                            for (const name of hxTrigger.split(",").map((value) => value.trim()).filter(Boolean)) {
-                                htmx.trigger(document.body, name);
-                            }
-                        }
-                    }
-                    let body = null;
-                    try {
-                        body = await response.json();
-                    }
-                    catch { /* non-JSON */ }
-                    if (!response.ok || !body || body.status !== "ok") {
-                        if (errEl) {
-                            errEl.textContent = (body && body.message) || ("Login failed (HTTP " + response.status + ")");
-                            errEl.classList.remove("d-none");
-                        }
-                        return false;
-                    }
-                    triggerShellLink(String(fd.get("next") || "/"), undefined, true);
-                }
-                catch {
-                    if (errEl) {
-                        errEl.textContent = "Login failed. Service unavailable.";
-                        errEl.classList.remove("d-none");
-                    }
-                }
-                return false;
-            };
-            const applyPreloadConfig = (el, cfg) => {
-                if (!isPreloadableAnchor(el))
-                    return false;
-                if (cfg.preload === false) {
-                    if (!el.hasAttribute("hx-preload"))
-                        return false;
-                    el.removeAttribute("hx-preload");
-                    return true;
-                }
-                if (!el.hasAttribute("hx-preload")) {
-                    el.setAttribute("hx-preload", "mouseover");
-                    return true;
-                }
-                return false;
-            };
-            const bindBpPreload = (el) => {
-                if (!isPreloadableAnchor(el))
-                    return;
-                if (!el.hasAttribute("hx-preload"))
-                    return;
-                if (el.hasAttribute("data-bp-preload-bound"))
-                    return;
-                const preload = () => {
-                    if (!el.hasAttribute("hx-preload"))
-                        return;
-                    const hxGet = el.getAttribute("hx-get");
-                    if (!hxGet)
-                        return;
-                    const action = hxGet.replace(/#.*$/, "");
-                    const state = el._htmx ?? (el._htmx = {});
-                    if (state.preload)
-                        return;
-                    const headers = { Accept: "text/html; theme=bootstrap1; mode=page" };
-                    attachBpHeaders(headers, action);
-                    const serviceId = serviceContextFor(el).id;
-                    state.preload = {
-                        prefetch: fetch(hxGet, {
-                            method: "GET",
-                            mode: "cors",
-                            cache: "no-store",
-                            headers
-                        }).then((response) => {
-                            if (response.ok && serviceId) {
-                                setMenuServiceAvailability(serviceId, true);
-                                syncMenuVisibility();
-                            }
-                            return response;
-                        }),
-                        action,
-                        expiresAt: Date.now() + 5000
-                    };
-                    state.preload.prefetch.catch(() => {
-                        if (state.preload?.action === action)
-                            delete state.preload;
-                    });
-                };
-                el.addEventListener("mouseover", preload, { passive: true });
-                el.addEventListener("focusin", preload, { passive: true });
-                el.setAttribute("data-bp-preload-bound", "");
-            };
-            // -- Service link resolution --
-            // Keep service-rendered HTMX requests in their lane. Content may replace
-            // #bp-main or content-owned overlays; fragments may only replace themselves
-            // or descendants inside their own fragment container.
-            const sourceLaneRoot = (el) => {
-                if (!el)
-                    return null;
-                return el.closest("[data-bp-fragment]") || el.closest("#bp-main");
-            };
-            const isContentOwnedTarget = (target) => !!target.closest("[data-bp-content-owned='true']");
-            const targetWithinLane = (source, target) => {
-                if (!source || !target)
-                    return false;
-                const lane = sourceLaneRoot(source);
-                if (!lane)
-                    return true;
-                if (lane.hasAttribute("data-bp-fragment")) {
-                    return target === lane || lane.contains(target);
-                }
-                if (lane.id === "bp-main") {
-                    return target === lane || lane.contains(target) || isContentOwnedTarget(target);
-                }
-                return false;
-            };
-            const resolvePolicyTarget = (source, targetSpec, ctxTarget) => {
-                if (ctxTarget instanceof Element)
-                    return ctxTarget;
-                const spec = (targetSpec || "").trim();
-                if (!spec || spec === "this")
-                    return source;
-                if (spec === "#bp-main")
-                    return mainOutlet();
-                if (spec === "body")
-                    return document.body;
-                if (spec === "html")
-                    return document.documentElement;
-                if (spec.startsWith("closest "))
-                    return source.closest(spec.slice("closest ".length).trim());
-                if (spec.startsWith("find "))
-                    return source.querySelector(spec.slice("find ".length).trim());
-                try {
-                    return document.querySelector(spec);
-                }
-                catch {
-                    return null;
-                }
-            };
-            const sanitizeHtmxTarget = (el) => {
-                if (el.hasAttribute("data-bp-no-route") || el.hasAttribute("data-bp-route-link"))
-                    return false;
-                if (!el.hasAttribute("data-bp-explicit-target"))
-                    return false;
-                const lane = sourceLaneRoot(el);
-                if (!lane)
-                    return false;
-                const targetSpec = el.getAttribute("hx-target");
-                if (!targetSpec)
-                    return false;
-                const target = resolvePolicyTarget(el, targetSpec);
-                if (target && targetWithinLane(el, target))
-                    return false;
-                if (lane.hasAttribute("data-bp-fragment")) {
-                    el.setAttribute("hx-target", "closest [data-bp-fragment]");
-                    if (!el.hasAttribute("hx-swap"))
-                        el.setAttribute("hx-swap", "innerHTML");
-                }
-                else {
-                    el.setAttribute("hx-target", "#bp-main");
-                    if (!el.hasAttribute("hx-swap"))
-                        el.setAttribute("hx-swap", "innerHTML");
-                }
-                return true;
-            };
-            const requestTargetEscapesLane = (detail) => {
-                const source = detail?.ctx?.sourceElement instanceof Element
-                    ? detail.ctx.sourceElement
-                    : null;
-                if (!source || source.hasAttribute("data-bp-no-route") || source.hasAttribute("data-bp-route-link"))
-                    return false;
-                const lane = sourceLaneRoot(source);
-                if (!lane)
-                    return false;
-                if (!source.hasAttribute("data-bp-explicit-target"))
-                    return false;
-                const target = resolvePolicyTarget(source, source.getAttribute("hx-target"), detail?.ctx?.target);
-                return !!target && !targetWithinLane(source, target);
-            };
-            const resolveServiceLinks = (root, reprocess = true) => {
-                if (!root)
-                    return;
-                // Determine service context for this content
-                const rootService = serviceContextFor(root);
-                const serviceId = rootService.id;
-                const serviceOrigin = rootService.origin;
-                // Collect all elements. hx-sse:connect contains a colon which CSS
-                // selectors can't express portably; query it with a separate pass.
-                const selector = 'a[href], form, [hx-download], [hx-get], [hx-post], [hx-put], [hx-patch], [hx-delete], script[src], img[src], link[href][rel="stylesheet"], [sse-connect]';
-                const elements = root.matches?.(selector) ? [root] : [];
-                root.querySelectorAll(selector).forEach((el) => elements.push(el));
-                if (root.hasAttribute?.("hx-sse:connect"))
-                    elements.push(root);
-                root.querySelectorAll("*").forEach((el) => {
-                    if (el.hasAttribute("hx-sse:connect") && !elements.includes(el))
-                        elements.push(el);
-                });
-                let changed = false;
-                const newlyHtmxedForms = [];
-                for (const el of elements) {
-                    const bpCfg = bpConfigFor(el);
-                    if (bpCfg.ignore)
-                        continue;
-                    if (applyPreloadConfig(el, bpCfg))
-                        changed = true;
-                    if (sanitizeHtmxTarget(el))
-                        changed = true;
-                    // Skip already-processed or shell-owned route links after config/preload handling
-                    if (el.hasAttribute("data-bp-shell-route")) {
-                        bindBpPreload(el);
-                        continue;
-                    }
-                    if (el.hasAttribute("data-bp-route-link")) {
-                        bindBpPreload(el);
-                        continue;
-                    }
-                    if (el.hasAttribute("data-bp-no-route"))
-                        continue;
-                    if (bpCfg.rewrite === false)
-                        continue;
-                    const tag = el.tagName;
-                    if (el.hasAttribute(DOWNLOAD_ATTR)) {
-                        const elContext = serviceContextFor(el, serviceId);
-                        const rawDownload = (el.getAttribute(DOWNLOAD_ATTR) || "").trim();
-                        const rawHref = tag === "A" ? (el.getAttribute("href") || "") : "";
-                        const raw = rawDownload || rawHref;
-                        const resolved = isThisReference(raw)
-                            ? resolveThisServiceUrl(el, elContext)
-                            : isRelativeServicePath(raw) && elContext.origin
-                                ? elContext.origin + raw
-                                : raw;
-                        if (resolved)
-                            el.setAttribute(DOWNLOAD_ATTR, resolved);
-                        if (elContext.id)
-                            el.setAttribute("data-bp-service", elContext.id);
-                        el.setAttribute("data-bp-shell-route", "download");
-                        bindDownload(el);
-                        changed = true;
-                        continue;
-                    }
-                    // -- Static assets: just rewrite to absolute --
-                    if ((tag === "SCRIPT" || tag === "IMG") && el.hasAttribute("src")) {
-                        const src = el.getAttribute("src") || "";
-                        const assetContext = serviceContextFor(el, serviceId);
-                        const assetOrigin = assetContext.origin || serviceOrigin;
-                        if (isRelativeServicePath(src) && assetOrigin) {
-                            el.setAttribute("src", assetOrigin + src);
-                            el.setAttribute("data-bp-shell-route", "asset");
-                        }
-                        continue;
-                    }
-                    if (tag === "LINK" && el.hasAttribute("href")) {
-                        const href = el.getAttribute("href") || "";
-                        const assetContext = serviceContextFor(el, serviceId);
-                        const assetOrigin = assetContext.origin || serviceOrigin;
-                        if (isRelativeServicePath(href) && assetOrigin) {
-                            el.setAttribute("href", assetOrigin + href);
-                            el.setAttribute("data-bp-shell-route", "asset");
-                        }
-                        continue;
-                    }
-                    // -- SSE: rewrite hx-sse:connect / sse-connect to absolute service origin --
-                    const sseAttr = el.hasAttribute("hx-sse:connect")
-                        ? "hx-sse:connect"
-                        : el.hasAttribute("sse-connect")
-                            ? "sse-connect"
-                            : null;
-                    if (sseAttr) {
-                        const sseUrl = el.getAttribute(sseAttr) || "";
-                        if (isRelativeServicePath(sseUrl)) {
-                            const elContext = serviceContextFor(el, serviceId);
-                            const elServiceOrigin = elContext.origin || serviceOrigin;
-                            if (elServiceOrigin) {
-                                el.setAttribute(sseAttr, elServiceOrigin + sseUrl);
-                                el.setAttribute("data-bp-shell-route", "sse");
-                            }
-                        }
-                        continue;
-                    }
-                    // -- Determine what type of element --
-                    // Find hx-method attr if present
-                    let hxMethodAttr = null;
-                    let hxMethodVal = null;
-                    for (const attr of HX_METHODS) {
-                        const val = el.getAttribute(attr);
-                        if (val !== null) {
-                            hxMethodAttr = attr;
-                            hxMethodVal = val;
-                            break;
-                        }
-                    }
-                    // -- Form default action --
-                    // A <form> with no hx-method and no native action posts back to the
-                    // view that rendered it ("this") - a bare <form> in any BP view is a
-                    // working form with zero wiring. Native `action` or an explicit
-                    // hx-method opts out of the default.
-                    if (tag === "FORM" && !hxMethodAttr && !el.hasAttribute("action")) {
-                        el.setAttribute("hx-post", "this");
-                        hxMethodAttr = "hx-post";
-                        hxMethodVal = "this";
-                        newlyHtmxedForms.push(el);
-                        changed = true;
-                    }
-                    // Anchor href
-                    const isAnchor = tag === "A";
-                    const rawHref = isAnchor ? (el.getAttribute("href") || "") : "";
-                    const hasHref = isAnchor && isRelativeServicePath(rawHref);
-                    // Skip anchors with target="_blank" etc. or non-navigable hrefs
-                    if (isAnchor) {
-                        const linkTarget = el.getAttribute("target");
-                        if (linkTarget && linkTarget !== "_self")
-                            continue;
-                        if (el.hasAttribute("download"))
-                            continue;
-                        if (!hasHref && !hxMethodAttr)
-                            continue;
-                        if (rawHref.startsWith("#") || rawHref.startsWith("mailto:") || rawHref.startsWith("tel:") || rawHref.startsWith("javascript:"))
-                            continue;
-                    }
-                    // Nothing to resolve
-                    if (!hasHref && !hxMethodAttr)
-                        continue;
-                    const hadExplicitTarget = el.hasAttribute("hx-target");
-                    if (hadExplicitTarget)
-                        el.setAttribute("data-bp-explicit-target", "");
-                    // -- Shell default targeting --
-                    // Any hx-action element that doesn't declare its own target swaps the
-                    // main content panel with innerHTML. Applied at parse time for EVERY
-                    // method element (relative, absolute, or "this") so views never have
-                    // to hand-wire hx-target/hx-swap. Opt out with an explicit hx-target
-                    // (e.g. "this") or data-bp="rewrite:false".
-                    if (hxMethodAttr && !hadExplicitTarget) {
-                        el.setAttribute("hx-target", "#bp-main");
-                        if (!el.hasAttribute("hx-swap"))
-                            el.setAttribute("hx-swap", "innerHTML");
-                        changed = true;
-                    }
-                    // Element-level service override
-                    const elContext = serviceContextFor(el, serviceId);
-                    const elServiceId = elContext.id;
-                    const elServiceOrigin = elContext.origin || serviceOrigin || unresolvedServiceOrigin;
-                    // Path to resolve (prefer hx-method value, fallback to href)
-                    const hxThisUrl = hxMethodAttr && isThisReference(hxMethodVal)
-                        ? resolveThisServiceUrl(el, { id: elServiceId, origin: elServiceOrigin })
-                        : "";
-                    const hxMethodPath = isRelativeServicePath(hxMethodVal) ? (hxMethodVal || "").trim() : "";
-                    if (hxMethodAttr && !hxMethodPath && !hxThisUrl)
-                        continue;
-                    const resolvePath = hxMethodPath || rawHref;
-                    if (!hxThisUrl && !isRelativeServicePath(resolvePath))
-                        continue;
-                    // Had an explicit hx-target BEFORE shell default targeting -> the
-                    // element knows its own context; don't apply page-nav semantics.
-                    if (hadExplicitTarget) {
-                        // -- Contextual request: just rewrite URL to absolute --
-                        if (hxMethodAttr && (hxThisUrl || hxMethodPath) && elServiceOrigin) {
-                            el.setAttribute(hxMethodAttr, hxThisUrl || (elServiceOrigin + hxMethodPath));
-                            el.setAttribute("data-bp-shell-route", "ctx");
-                        }
-                    }
-                    else {
-                        if (hxMethodAttr && hxThisUrl) {
-                            el.setAttribute(hxMethodAttr, hxThisUrl);
-                            el.setAttribute("data-bp-shell-route", "ctx");
-                            changed = true;
-                            continue;
-                        }
-                        // -- Full page navigation: resolve service path -> tenant path --
-                        const pathParts = resolvePath.split("?");
-                        const pathOnly = normalizePath(pathParts[0] || "/");
-                        const query = pathParts[1] ? "?" + pathParts[1] : "";
-                        const match = elServiceId ? matchServiceRoute(elServiceId, pathOnly) : null;
-                        if (match) {
-                            // Known route - rewrite to tenant path and add htmx attrs
-                            const tenantUrl = normalizePath(match.route.tenantPath + match.suffix) + query;
-                            const absoluteServiceUrl = match.route.serviceOrigin + pathOnly + query;
-                            if (isAnchor)
-                                el.setAttribute("href", tenantUrl);
-                            if (hxMethodAttr) {
-                                el.setAttribute(hxMethodAttr, absoluteServiceUrl);
-                            }
-                            else {
-                                el.setAttribute("hx-get", absoluteServiceUrl);
-                            }
-                            el.setAttribute("hx-target", "#bp-main");
-                            el.setAttribute("hx-swap", "innerHTML");
-                            if (!hxMethodAttr || hxMethodAttr === "hx-get")
-                                el.setAttribute("hx-push-url", tenantUrl);
-                            el.setAttribute("data-bp-shell-route", "page");
-                        }
-                        else if (elServiceOrigin && hxMethodAttr && hxMethodPath) {
-                            // Unknown route but has hx-method - at minimum make URL absolute
-                            // and treat as full-page since no target
-                            el.setAttribute(hxMethodAttr, elServiceOrigin + hxMethodPath);
-                            el.setAttribute("hx-target", "#bp-main");
-                            el.setAttribute("hx-swap", "innerHTML");
-                            el.setAttribute("data-bp-shell-route", "page");
-                        }
-                        else if (hasHref && !hxMethodAttr && elServiceOrigin) {
-                            // Anchor with unknown service path - still make absolute + page nav
-                            const absoluteUrl = elServiceOrigin + resolvePath;
-                            el.setAttribute("hx-get", absoluteUrl);
-                            el.setAttribute("hx-target", "#bp-main");
-                            el.setAttribute("hx-swap", "innerHTML");
-                            el.setAttribute("hx-push-url", resolvePath);
-                            el.setAttribute("data-bp-shell-route", "page");
-                        }
-                    }
-                    changed = true;
-                    bindBpPreload(el);
-                }
-                if (changed && reprocess && htmx && typeof htmx.process === "function") {
-                    htmx.process(root);
-                }
-                else if (newlyHtmxedForms.length > 0 && htmx && typeof htmx.process === "function") {
-                    // Forms that gained hx-post AFTER htmx processed the swap have no
-                    // submit binding yet. Process just those forms - never the whole
-                    // root, which would re-fire hx-trigger="load" requests.
-                    for (const form of newlyHtmxedForms)
-                        htmx.process(form);
-                }
-            };
-            // -- Active route management --
-            const setActiveRoute = (path) => {
-                let activeLink = null;
-                routeLinks().forEach((link) => {
-                    const isActive = link.getAttribute("href") === path;
-                    link.classList.toggle("active", isActive);
-                    link.setAttribute("aria-current", isActive ? "page" : "false");
-                    if (isActive) {
-                        activeLink = link;
-                        const title = link.getAttribute("data-bp-route-title") || link.textContent || path;
-                        const tn = titleNode();
-                        if (tn)
-                            tn.textContent = title;
-                        const svcId = link.getAttribute("data-bp-service");
-                        if (svcId)
-                            mainOutlet()?.setAttribute("data-bp-service", svcId);
-                    }
-                });
-                navGroups().forEach((group) => {
-                    if (group.querySelector("[data-bp-route-link].active"))
-                        group.open = true;
-                });
-                const bcNode = breadcrumbNode();
-                if (bcNode) {
-                    const breadcrumb = activeLink ? (activeLink.getAttribute("data-bp-route-breadcrumb") || "") : "";
-                    bcNode.textContent = breadcrumb;
-                    bcNode.toggleAttribute("hidden", !breadcrumb);
-                }
-            };
-            // -- Click handler: error actions --
-            const routeContextFromSource = (source, fallbackPath = window.location.pathname) => {
-                const link = source?.closest?.("[data-bp-route-link]") || activeRouteLink();
-                return {
-                    path: link?.getAttribute("href") || fallbackPath,
-                    title: link?.getAttribute("data-bp-route-title") || link?.textContent?.trim() || fallbackPath,
-                    breadcrumb: link?.getAttribute("data-bp-route-breadcrumb") || "",
-                    serviceId: link?.getAttribute("data-bp-service") || currentServiceId()
-                };
-            };
-            const renderRouteError = (title, message, action, source) => {
-                const route = routeContextFromSource(source);
-                setActiveRoute(route.path);
-                const tn = titleNode();
-                if (tn)
-                    tn.textContent = route.title;
-                const bcNode = breadcrumbNode();
-                if (bcNode) {
-                    bcNode.textContent = route.breadcrumb;
-                    bcNode.toggleAttribute("hidden", !route.breadcrumb);
-                }
-                if (route.serviceId)
-                    mainOutlet()?.setAttribute("data-bp-service", route.serviceId);
-                replaceMainWithError(title, message, action, route.path);
-                markLoaded();
-                setLoading(false);
-                scrollPageToTop();
-            };
-            const handleErrorAction = (event) => {
-                const trigger = event.target?.closest?.("[data-bp-error-action]");
-                if (!trigger)
-                    return;
-                const action = trigger.getAttribute("data-bp-error-action");
-                if (action === "login") {
-                    const loginUrl = shellRoot()?.getAttribute("data-bp-login-url");
-                    if (loginUrl)
-                        loadLoginIntoShell(loginUrl);
-                    return;
-                }
-                if (action === "reload")
-                    triggerShellLink(window.location.pathname + window.location.search, undefined, true);
-            };
-            const loadLoginIntoShell = (loginUrl) => {
-                if (!loginUrl)
-                    return;
-                try {
-                    const u = new URL(loginUrl, window.location.origin);
-                    const current = window.location.pathname + window.location.search;
-                    const nextPath = window.location.pathname === u.pathname ? "/" : current;
-                    u.searchParams.set("next", nextPath);
-                    const serviceLoginUrl = u.href;
-                    const tenantLoginUrl = tenantUrlForServiceUrl(serviceLoginUrl);
-                    triggerShellLink(tenantLoginUrl, serviceLoginUrl);
-                }
-                catch { /* ignore */ }
-            };
-            let lastAuthRefreshRetryUrl = "";
-            const retryMainRequest = (ctx) => {
-                const action = ctx?.request?.action;
-                if (!action)
-                    return false;
-                const method = String(ctx?.request?.verb || ctx?.request?.method || "GET").toUpperCase();
-                if (method !== "GET")
-                    return false;
-                triggerShellLink(window.location.pathname + window.location.search, action, true);
-                return true;
-            };
-            const handleShellRouteClick = (event) => {
-                if (event.defaultPrevented)
-                    return;
-                if (event.button !== 0 || event.metaKey || event.ctrlKey || event.shiftKey || event.altKey)
-                    return;
-                const anchor = event.target?.closest?.("a[href][hx-get]");
-                if (!anchor)
-                    return;
-                if (anchor.hasAttribute("download"))
-                    return;
-                const targetAttr = anchor.getAttribute("target");
-                if (targetAttr && targetAttr !== "_self")
-                    return;
-                const hxGet = anchor.getAttribute("hx-get");
-                const hxTarget = anchor.getAttribute("hx-target") || "#bp-main";
-                if (!hxGet || hxTarget !== "#bp-main")
-                    return;
-                closeContainingOffcanvas(anchor);
-            };
-            // -- DOM setup --
-            document.addEventListener("DOMContentLoaded", () => {
-                scheduleBootstrapOverlaySync();
-                setActiveRoute(window.location.pathname);
-                resolveServiceLinks(document.body);
-                initBootstrapComponents(document.body);
-                void loadBackgroundFragments();
-                if (!hasLoaded())
-                    topbarProgress()?.classList.add("is-active");
-                // P14: kick off menu service health checks for the admin shell only.
-                if (shellRoot()?.getAttribute("data-bp-auth-mode") !== "true") {
-                    runMenuHealthChecks();
-                    setInterval(runMenuHealthChecks, 60 * 60 * 1000);
-                    syncMenuVisibility();
-                }
-            });
-            const syncMenuVisibility = () => {
-                const hasAuth = Object.keys(liveBpHeaders()).some((name) => name.toLowerCase() === "authorization");
-                document.querySelectorAll("[data-bp-route-link][data-bp-service]").forEach((el) => {
-                    const policy = el.getAttribute("data-bp-auth-status");
-                    const authHidden = policy === "hide-unauthenticated"
-                        ? !hasAuth
-                        : policy === "hide-unauthorized" && el.hasAttribute("data-bp-auth-denied");
-                    const serviceHidden = el.classList.contains("bp-service-down") && el.getAttribute("data-bp-service-status") === "hide";
-                    el.toggleAttribute("hidden", authHidden || serviceHidden);
-                });
-                document.querySelectorAll("[data-bp-nav-group]").forEach((group) => {
-                    const visible = Array.from(group.querySelectorAll("[data-bp-route-link]")).some((link) => !link.hidden);
-                    group.toggleAttribute("hidden", !visible);
-                });
-            };
-            const setMenuServiceAvailability = (serviceId, available) => {
-                document.querySelectorAll("[data-bp-route-link][data-bp-service]").forEach((el) => {
-                    if (el.getAttribute("data-bp-service") !== serviceId)
-                        return;
-                    el.classList.toggle("bp-service-down", !available);
-                    el.toggleAttribute("aria-disabled", !available);
-                });
-            };
-            // -- Menu health check (P14) --
-            // Pings /.well-known/bp/health on each service in serviceOrigins.
-            // Adds .bp-service-down to anchors whose service is unreachable.
-            // Clicking a downed link triggers a force re-check and clears state on success.
-            const runMenuHealthChecks = async () => {
-                const origins = (() => { try {
-                    return JSON.parse(shellRoot()?.getAttribute("data-bp-services") || "{}");
-                }
-                catch {
-                    return {};
-                } })();
-                const entries = Object.entries(origins);
-                const results = {};
-                await Promise.all(entries.map(async ([sid, origin]) => {
-                    try {
-                        const r = await fetch(`${origin.replace(/\/+$/, "")}/.well-known/bp/health`, { method: "GET", mode: "cors", cache: "no-store" });
-                        results[sid] = r.ok;
-                    }
-                    catch {
-                        results[sid] = false;
-                    }
-                }));
-                Object.entries(results).forEach(([serviceId, available]) => {
-                    setMenuServiceAvailability(serviceId, available);
-                });
-                syncMenuVisibility();
-            };
-            // Force-recheck on click of disabled menu link; if back up, allow nav.
-            document.body.addEventListener("click", async (event) => {
-                const target = event.target?.closest?.(".bp-service-down");
-                if (!target)
-                    return;
-                event.preventDefault();
-                event.stopPropagation();
-                await runMenuHealthChecks();
-                if (!target.classList.contains("bp-service-down")) {
-                    // Recovered - replay click as a normal navigation.
-                    target.click();
-                }
-            }, true);
-            document.body.addEventListener("click", handleErrorAction);
-            document.body.addEventListener("click", handleShellRouteClick);
-            document.addEventListener("htmx:before:history:update", (event) => {
-                const detail = event.detail;
-                if (detail?.history?.path) {
-                    detail.history.path = tenantUrlForServiceUrl(detail.history.path);
-                }
-            });
-            document.body.addEventListener("click", (event) => {
-                const el = event.target;
-                const toggleBtn = el?.closest?.("[data-bp-toggle-detail]");
-                if (toggleBtn) {
-                    const pane = toggleBtn.closest(".bp-split-pane");
-                    if (pane) {
-                        const open = pane.getAttribute("data-bp-detail-open") === "true";
-                        pane.setAttribute("data-bp-detail-open", open ? "false" : "true");
-                    }
-                    return;
-                }
-                const closeBtn = el?.closest?.("[data-bp-close-detail]");
-                if (closeBtn) {
-                    const pane = closeBtn.closest(".bp-split-pane");
-                    if (pane)
-                        pane.setAttribute("data-bp-detail-open", "false");
-                }
-            });
-            // -- HTMX extension: bp-shell --
-            htmx.registerExtension("bp-shell", {
-                // Resolve relative service URLs before htmx processes the element.
-                // This catches elements with existing hx-methods that resolveServiceLinks
-                // already rewrote, PLUS any that were missed (dynamically added, etc.)
-                htmx_before_init(elt) {
-                    if (!elt || !elt.getAttribute)
-                        return;
-                    if (elt instanceof Element && elt.closest("[data-bp-no-route]"))
-                        return;
-                    if (elt instanceof Element)
-                        resolveServiceLinks(elt, false);
-                    if (elt instanceof Element && elt.hasAttribute(DOWNLOAD_ATTR))
-                        bindDownload(elt);
-                    for (const attr of HX_METHODS) {
-                        const val = elt.getAttribute(attr);
-                        if (isThisReference(val)) {
-                            const context = elt instanceof Element ? serviceContextFor(elt) : { id: "", origin: "" };
-                            const action = elt instanceof Element ? resolveThisServiceUrl(elt, context) : "";
-                            if (action)
-                                elt.setAttribute(attr, action);
-                        }
-                        else if (isRelativeServicePath(val)) {
-                            const { origin } = elt instanceof Element ? serviceContextFor(elt) : { origin: "" };
-                            if (origin)
-                                elt.setAttribute(attr, origin + (val || "").trim());
-                        }
-                    }
-                    // Also rewrite SSE connect URL so hx-sse ext captures absolute URL
-                    // when it reads the attribute during htmx_after_process.
-                    if (elt.hasAttribute?.("hx-sse:connect")) {
-                        const sseVal = elt.getAttribute("hx-sse:connect");
-                        if (sseVal && sseVal.startsWith("/")) {
-                            const { origin } = elt instanceof Element ? serviceContextFor(elt) : { origin: "" };
-                            if (origin)
-                                elt.setAttribute("hx-sse:connect", origin + sseVal);
-                        }
-                    }
-                },
-                htmx_after_process(elt) {
-                    if (elt instanceof Element)
-                        resolveServiceLinks(elt, false);
-                },
-                htmx_config_request(elt, detail) {
-                    const ctx = detail.ctx;
-                    if (!ctx || !ctx.request)
-                        return;
-                    const source = ctx.sourceElement instanceof Element
-                        ? ctx.sourceElement
-                        : elt instanceof Element
-                            ? elt
-                            : null;
-                    // Preserve the SSE extension's Accept header, but still run the
-                    // shared URL rewrite and BP header attachment below.
-                    const isSseConnect = source?.hasAttribute?.("hx-sse:connect") || source?.hasAttribute?.("sse-connect");
-                    if (!isSseConnect) {
-                        const mode = isMainTarget(ctx.target) ? "page" : "fragment";
-                        const hasAcceptHeader = Object.keys(ctx.request.headers).some((key) => key.toLowerCase() === "accept");
-                        if (!hasAcceptHeader) {
-                            ctx.request.headers["Accept"] = "text/html; theme=bootstrap1; mode=" + mode;
-                        }
-                    }
-                    // Attach stored BP headers (Authorization etc.) to every BP request -
-                    // this is what carries the login token to services after sign-in.
-                    // Rewrite same-origin action URLs (e.g. hx-post="" -> current path on theme origin)
-                    // to the owning service origin. Without this, a form rendered by a service-owned
-                    // route would POST back to the theme - which has no such route. Service inferred
-                    // from the element's nearest data-bp-service ancestor, falling back to bp-main's.
-                    try {
-                        const action = ctx.request?.action || "";
-                        if (!action)
-                            return;
-                        if (source?.closest?.("[data-bp-no-route]")) {
-                            attachBpHeaders(ctx.request.headers, action);
-                            return;
-                        }
-                        const themeOrigin = window.location.origin;
-                        const url = new URL(action, themeOrigin);
-                        if (url.origin === themeOrigin) {
-                            const explicitContext = explicitServiceContextFor(source);
-                            if (explicitContext.origin) {
-                                ctx.request.action = explicitContext.origin + url.pathname + url.search;
-                            }
-                            else {
-                                // Authoritative fallback: if the path matches a known route's TENANT path,
-                                // rewrite to that route's service origin + service path. Correct even
-                                // for programmatic navigations (e.g. a post-login HX-Location to a
-                                // tenant path) where the DOM owning-element context belongs to a
-                                // different service (the auth service that rendered the login form).
-                                const routeMatch = matchTenantRoute(url.pathname);
-                                if (routeMatch) {
-                                    ctx.request.action =
-                                        routeMatch.route.serviceOrigin
-                                            + normalizePath(routeMatch.route.servicePath + routeMatch.suffix)
-                                            + url.search;
-                                }
-                                else {
-                                    // Fallback: infer the service from the element's data-bp-service
-                                    // ancestor (or #bp-main). Used for in-context requests like a form
-                                    // POSTing back to the service-owned route that rendered it.
-                                    const ownerContext = serviceContextFor(source || mainOutlet());
-                                    const origin = ownerContext.origin || unresolvedServiceOrigin;
-                                    ctx.request.action = origin + url.pathname + url.search;
-                                }
-                            }
-                        }
-                    }
-                    catch { /* non-fatal */ }
-                    // Scope checks must use the final action after any service-origin rewrite.
-                    attachBpHeaders(ctx.request.headers, ctx.request?.action || "");
-                },
-                // Show loading state: main panel gets glaze, fragments get overlay
-                htmx_before_request(_elt, detail) {
-                    const source = detail.ctx?.sourceElement;
-                    const preload = source?._htmx?.preload;
-                    if (preload && preload.action === detail.ctx?.request?.action && Date.now() < preload.expiresAt) {
-                        detail.ctx.fetch = () => preload.prefetch;
-                        delete source._htmx.preload;
-                    }
-                    if (requestTargetEscapesLane(detail)) {
-                        if (source instanceof Element && sanitizeHtmxTarget(source)) {
-                            htmx.process(source);
-                        }
-                        return false;
-                    }
-                    const target = detail.ctx?.target;
-                    if (requestTargetsMain(detail)) {
-                        closeContainingOffcanvas(detail.ctx?.sourceElement);
-                        if (isMainTarget(detail.ctx?.sourceElement))
-                            disableInitialMainLoad();
-                        const action = detail.ctx?.request?.action || "";
-                        if (action && isThemeOriginUrl(action)) {
-                            const message = "Invalid BetterPortal route: content service resolves to the theme origin.";
-                            disableInitialMainLoad();
-                            renderRouteError("Route Configuration Error", message, { kind: "reload", label: "Reload" }, detail.ctx?.sourceElement);
-                            return false;
-                        }
-                        clearError();
-                        if (hasLoaded())
-                            setLoading(true);
-                    }
-                    else if (target instanceof Element) {
-                        target.classList.add("bp-fragment-loading");
-                    }
-                },
-                // Let htmx v4 swap HTTP error HTML by default. Only block data
-                // responses and handle BP's auth-refresh/login escape hatch here.
-                htmx_before_swap(_elt, detail) {
-                    const ctx = detail.ctx;
-                    const status = ctx?.response?.status;
-                    const target = ctx?.target;
-                    const source = ctx?.sourceElement;
-                    if (source instanceof Element && (status === 401 || status === 403)) {
-                        const policy = source.getAttribute("data-bp-auth-status");
-                        if ((status === 401 && policy === "hide-unauthenticated") || (status === 403 && policy === "hide-unauthorized")) {
-                            source.hidden = true;
-                            syncMenuVisibility();
-                        }
-                    }
-                    applyChromeFromResponse(detail);
-                    // JSON is data, never markup - block it from swapping into ANY target
-                    // regardless of status. Scripts that want the body (login) read it via
-                    // htmx:afterRequest; error states surface via htmx:error / 401 flow.
-                    const swapContentType = ctx?.response?.headers?.get?.("content-type") || "";
-                    const isJson = swapContentType.includes("application/json");
-                    if (status && status >= 400 && source instanceof Element && source.closest("[data-bp-error-modal]") && !isMainTarget(target)) {
-                        if (target instanceof Element)
-                            target.classList.remove("bp-fragment-loading");
-                        showRequestErrorModal(status, isJson ? "" : (ctx?.text || ""));
-                        return false;
-                    }
-                    if (isJson) {
-                        if (status && status >= 400 && isMainTarget(target)) {
-                            // fall through to the error handling below (401->login etc.)
-                        }
-                        else {
-                            return false;
-                        }
-                    }
-                    if (status && status >= 400 && isMainTarget(target)) {
-                        if (status === 403 && ctx?.sourceElement instanceof Element) {
-                            const menuLink = ctx.sourceElement.closest("[data-bp-route-link]");
-                            if (menuLink) {
-                                menuLink.setAttribute("data-bp-auth-denied", "");
-                                syncMenuVisibility();
-                            }
-                        }
-                        // Themed status views (adapter content-type "...; mode=status") are
-                        // real server-rendered error states - let them swap like any view
-                        // (e.g. register POST 400 re-rendering its form with the message).
-                        const source = ctx?.sourceElement;
-                        if (status === 401 && source instanceof Element && source.closest("#bp-login-form")) {
-                            return false;
-                        }
-                        // On 401, load the login view INTO the shell (#bp-main) - the user
-                        // never leaves the theme origin. Services render in-shell via HTMX;
-                        // a full-page navigation to the auth service origin is wrong (and
-                        // such services may only be reachable from a browser with the shell
-                        // open). We use the login URL the THEME resolved from app.auth config,
-                        // never a service-supplied HX-Location (a content service has no
-                        // reliable knowledge of where the auth provider lives).
-                        setLoading(false);
-                        if (status === 401) {
-                            const loginUrl = shellRoot()?.getAttribute("data-bp-login-url");
-                            const action = ctx?.request?.action || "";
-                            if (loginUrl && action !== lastAuthRefreshRetryUrl) {
-                                void refreshStoredHeadersOnce(true).then((refreshed) => {
-                                    if (refreshed) {
-                                        lastAuthRefreshRetryUrl = action;
-                                        if (retryMainRequest(ctx))
-                                            return;
-                                    }
-                                    lastAuthRefreshRetryUrl = "";
-                                    clearAuthorizationHeader();
-                                    loadLoginIntoShell(loginUrl);
-                                });
-                            }
-                            else if (loginUrl) {
-                                lastAuthRefreshRetryUrl = "";
-                                clearAuthorizationHeader();
-                                loadLoginIntoShell(loginUrl);
-                            }
-                            else {
-                                const source = ctx?.sourceElement instanceof Element ? ctx.sourceElement : activeRouteLink();
-                                renderRouteError("Session Expired", errorMessage(status), bannerActionForStatus(status), source);
-                            }
-                            return false;
-                        }
-                        if (!isJson) {
-                            disposeBootstrapComponents(target);
-                            return;
-                        }
-                        return false; // cancel swap - htmx:error handles the UI
-                    }
-                    if (isMainTarget(target)) {
-                        disposeBootstrapComponents(target);
-                    }
-                },
-                // Rewrite SSE connect URLs in the response body before the swap
-                // pipeline builds task fragments, so hx-sse ext reads the absolute
-                // service-origin URL once the new content is processed.
-                htmx_after_request(_elt, detail) {
-                    scheduleBootstrapOverlaySync();
-                    applyChromeFromResponse(detail);
-                    // Apply BP-SetHeader / BP-RemoveHeader directives from EVERY response
-                    // (success or error) before anything else - e.g. login's Authorization.
-                    try {
-                        applyBpHeaderDirectives(detail.ctx?.response, detail.ctx?.request?.action || "");
-                    }
-                    catch { /* non-fatal */ }
-                    // HX-Location with a bare path has no target in htmx4 - the follow-up
-                    // ajax would swap document.body and blow away the shell. Rewrite it
-                    // into a config object that swaps the main outlet and pushes the
-                    // tenant path (config_request later maps the path to its service).
-                    try {
-                        const loc = detail.ctx?.hx?.location;
-                        if (typeof loc === "string" && loc && loc[0] !== "{" && !/[\s,]/.test(loc)) {
-                            detail.ctx.hx.location = JSON.stringify({
-                                path: loc,
-                                target: "#bp-main",
-                                swap: "innerHTML",
-                                push: tenantUrlForServiceUrl(loc)
-                            });
-                        }
-                        else if (typeof loc === "string" && loc.trim().startsWith("{")) {
-                            const parsed = JSON.parse(loc);
-                            detail.ctx.hx.location = JSON.stringify({
-                                ...parsed,
-                                target: "#bp-main",
-                                swap: parsed.swap || "innerHTML",
-                                push: typeof parsed.push === "string"
-                                    ? tenantUrlForServiceUrl(parsed.push)
-                                    : typeof parsed.path === "string"
-                                        ? tenantUrlForServiceUrl(parsed.path)
-                                        : parsed.push
-                            });
-                        }
-                    }
-                    catch { /* non-fatal */ }
-                    try {
-                        const ctx = detail.ctx;
-                        const text = ctx?.text;
-                        const requestUrl = ctx?.request?.action;
-                        if (!text || !requestUrl)
-                            return;
-                        if (!/hx-sse:connect="\/|sse-connect="\//.test(text))
-                            return;
-                        const origin = new URL(requestUrl, window.location.origin).origin;
-                        ctx.text = text
-                            .replace(/(hx-sse:connect=")\//g, "$1" + origin + "/")
-                            .replace(/(sse-connect=")\//g, "$1" + origin + "/");
-                    }
-                    catch { /* non-fatal */ }
-                },
-                // After successful swap: clear loading, resolve service links, reload Bootstrap
-                htmx_after_swap(_elt, detail) {
-                    let target = detail.ctx?.target;
-                    if (!target)
-                        return;
-                    if (target instanceof Element && !target.isConnected && target.id) {
-                        target = document.getElementById(target.id) || target;
-                    }
-                    if (isMainTarget(target)) {
-                        disableInitialMainLoad();
-                        markLoaded();
-                        setLoading(false);
-                        clearError();
-                        cleanupTeleportedModals();
-                        cleanupTeleportedOffcanvas();
-                        teleportModals(target);
-                        teleportOffcanvas(target);
-                        if (shouldScrollMainSwap(detail))
-                            scrollPageToTop();
-                        scheduleBootstrapOverlaySync();
-                    }
-                    else if (target instanceof Element) {
-                        target.classList.remove("bp-fragment-loading");
-                    }
-                    if (target instanceof Element && (target.id === "bp-nav-mobile" || target.id === "bp-nav-desktop")) {
-                        void runMenuHealthChecks();
-                    }
-                    // Resolve links after swaps without re-processing the swap target.
-                    // Re-processing #bp-main can re-fire its hx-trigger="load" request.
-                    resolveServiceLinks(target, false);
-                    initBootstrapComponents(target);
-                    // Sync profile mirror for mobile offcanvas
-                    if (target === profileSlot())
-                        syncProfileMirror();
-                },
-                // Belt-and-suspenders: clear loading after settle
-                htmx_after_settle(elt) {
-                    if (isMainTarget(elt))
-                        setLoading(false);
-                    else if (elt instanceof Element)
-                        elt.classList.remove("bp-fragment-loading");
-                    scheduleBootstrapOverlaySync();
-                },
-                // Update sidebar active state on history navigation
-                htmx_after_history_push() { setActiveRoute(window.location.pathname); },
-                htmx_after_history_replace() { setActiveRoute(window.location.pathname); },
-                htmx_response_error(_elt, detail) {
-                    const ctx = detail?.ctx;
-                    if (!requestTargetsMain(detail))
-                        return;
-                    setLoading(false);
-                    const status = ctx?.response?.status || 0;
-                    if ([502, 503, 504].includes(status)) {
-                        const source = ctx.sourceElement instanceof Element ? ctx.sourceElement : activeRouteLink();
-                        const serviceId = source?.getAttribute("data-bp-service") ||
-                            currentServiceId();
-                        scheduleDevServiceRecovery(serviceId, ctx.request?.action, source, window.location.pathname);
-                    }
-                },
-                // htmx v4 reports network, timeout, target, and swap failures here.
-                htmx_error(_elt, detail) {
-                    const ctx = detail?.ctx;
-                    const target = ctx?.target;
-                    // Clear fragment loading on error
-                    if (target instanceof Element && !isMainTarget(target)) {
-                        target.classList.remove("bp-fragment-loading");
-                    }
-                    if (!requestTargetsMain(detail))
-                        return;
-                    // Themed status views already swapped meaningful content - no banner.
-                    setLoading(false);
-                    const source = ctx?.sourceElement instanceof Element ? ctx.sourceElement : activeRouteLink();
-                    const serviceId = source?.getAttribute("data-bp-service") ||
-                        currentServiceId();
-                    scheduleDevServiceRecovery(serviceId, ctx?.request?.action, source, window.location.pathname);
-                    renderRouteError("Connection Error", "Service unavailable or blocked by network policy.", { kind: "reload", label: "Reload" }, source);
-                },
-            });
-        })();
-    }).toString();
-    return `const __name=function(f){return f};${body}`;
+function cachedAsset(key, load) {
+    if (!AssetCache.has(key))
+        AssetCache.set(key, load());
+    return AssetCache.get(key);
 }
 export async function loadBootstrap1Asset(assetPath) {
     const normalized = assetPath.replace(/^\/+/, "");
     if (normalized === "bootstrap.min.css") {
-        const cacheKey = normalized;
-        if (!AssetCache.has(cacheKey)) {
-            AssetCache.set(cacheKey, readTextAsset(BootstrapCssPath, "text/css; charset=utf-8"));
-        }
-        return AssetCache.get(cacheKey) ?? null;
+        return cachedAsset(normalized, () => readTextAsset(BootstrapCssPath, "text/css; charset=utf-8"));
     }
     if (normalized === "bootstrap.bundle.min.js") {
-        const cacheKey = normalized;
-        if (!AssetCache.has(cacheKey)) {
-            AssetCache.set(cacheKey, readTextAsset(BootstrapBundlePath, "application/javascript; charset=utf-8"));
-        }
-        return AssetCache.get(cacheKey) ?? null;
-    }
-    if (normalized === "htmx.min.js") {
-        const cacheKey = normalized;
-        if (!AssetCache.has(cacheKey)) {
-            AssetCache.set(cacheKey, readTextAsset(HtmxPath, "application/javascript; charset=utf-8"));
-        }
-        return AssetCache.get(cacheKey) ?? null;
-    }
-    if (normalized === "hx-sse.min.js") {
-        const cacheKey = normalized;
-        if (!AssetCache.has(cacheKey)) {
-            AssetCache.set(cacheKey, readTextAsset(HtmxSsePath, "application/javascript; charset=utf-8"));
-        }
-        return AssetCache.get(cacheKey) ?? null;
-    }
-    if (normalized === "hx-preload.min.js") {
-        const cacheKey = normalized;
-        if (!AssetCache.has(cacheKey)) {
-            AssetCache.set(cacheKey, readTextAsset(HtmxPreloadPath, "application/javascript; charset=utf-8"));
-        }
-        return AssetCache.get(cacheKey) ?? null;
+        return cachedAsset(normalized, () => readTextAsset(BootstrapBundlePath, "application/javascript; charset=utf-8"));
     }
+    const vendor = await loadThemeRuntimeVendorAsset(normalized);
+    if (vendor)
+        return vendor;
     if (normalized === "betterportal-logo.png") {
-        const cacheKey = normalized;
-        if (!AssetCache.has(cacheKey)) {
-            AssetCache.set(cacheKey, readLocalPluginAsset("betterportal-logo.png", "image/png"));
-        }
-        return AssetCache.get(cacheKey) ?? null;
+        return cachedAsset(normalized, () => readLocalPluginAsset("betterportal-logo.png", "image/png"));
     }
     if (normalized === "betterportal-favicon-32.png") {
-        const cacheKey = normalized;
-        if (!AssetCache.has(cacheKey)) {
-            AssetCache.set(cacheKey, readLocalPluginAsset("betterportal-favicon-32.png", "image/png"));
-        }
-        return AssetCache.get(cacheKey) ?? null;
+        return cachedAsset(normalized, () => readLocalPluginAsset("betterportal-favicon-32.png", "image/png"));
     }
     if (normalized === "betterportal-favicon-16.png") {
-        const cacheKey = normalized;
-        if (!AssetCache.has(cacheKey)) {
-            AssetCache.set(cacheKey, readLocalPluginAsset("betterportal-favicon-16.png", "image/png"));
-        }
-        return AssetCache.get(cacheKey) ?? null;
+        return cachedAsset(normalized, () => readLocalPluginAsset("betterportal-favicon-16.png", "image/png"));
     }
     if (normalized === "bootstrap1-shell.js") {
         return {
-            body: shellRuntimeSource(),
+            body: [BETTERPORTAL_BROWSER_SOURCE_PREAMBLE, Bootstrap1AdapterSource, betterPortalShellRuntimeSource("bootstrap1")].join("\n;\n"),
             contentType: "application/javascript; charset=utf-8"
         };
     }
-    // Single-request core bundle: htmx MUST execute before the shell runtime and
-    // extensions register against it.
     if (normalized === "bootstrap1-core.js") {
-        const read = (filePath) => {
-            if (!AssetCache.has(filePath)) {
-                AssetCache.set(filePath, readTextAsset(filePath, "application/javascript; charset=utf-8"));
-            }
-            return AssetCache.get(filePath).then((asset) => asset.body);
-        };
-        const [htmx, sse] = await Promise.all([
-            read(HtmxPath),
-            read(HtmxSsePath)
-        ]);
-        return {
-            body: [htmx, shellRuntimeSource(), sse].join("\n;\n"),
-            contentType: "application/javascript; charset=utf-8"
-        };
+        return cachedAsset(normalized, () => buildBetterPortalThemeRuntimeAsset({
+            themeId: "bootstrap1",
+            adapterSource: Bootstrap1AdapterSource
+        }));
     }
     return null;
 }