@burdenoff/fe-libs 2026.1005.3 → 2026.1005.4

package/dist/shared/components/SSORedirectGuard.d.ts

@@ -15,6 +15,21 @@ export declare function clearSSORelayAttempt(): void;
 export declare function shouldSkipSSORedirect(returnPath?: string): boolean;
 export declare function hasRecentSSORedirectAttempt(relayOrigin: string, returnTo: string): boolean;
 export declare function markSSORedirectAttempt(relayOrigin: string, returnTo: string): void;
+/**
+ * Check if an SSO redirect should be initiated.
+ * Returns the redirect URL if SSO should happen, null otherwise.
+ *
+ * Call this from ProtectedRoute or LandingOrDashboardRedirect
+ * before showing login page.
+ *
+ * Cross-eTLD+1 product shells always start at the central bridge
+ * (alphaapp/app.burdenoff.com): product cookies are first-party only and must
+ * not route a visitor through a different product origin. The bridge reads its
+ * own first-party session state — including its profile-origin hint — then
+ * returns to the original product origin through `/auth/sso-callback#sso=...`.
+ * On no central session the bridge bounces back with `?sso_failed=1` and
+ * `isAutoSSOSuppressed` keeps the user on the login screen.
+ */
 export declare function getSSORedirectUrl(returnPath?: string): string | null;
 /**
  * Check if Single Logout (SLO) has occurred on another shell.

package/dist/shared/components/SSORedirectGuard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SSORedirectGuard.d.ts","sourceRoot":"","sources":["../../../src/shared/components/SSORedirectGuard.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAuDH,wBAAgB,oBAAoB,IAAI,IAAI,CAM3C;AA2CD,wBAAgB,qBAAqB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAGlE;AAED,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAM1F;AAED,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAiBlF;AA+BD,wBAAgB,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAqDpE;AAED;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,IAAI,OAAO,CA6BlC;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAyC9F;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CA6B1C;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,4CAEjC"}
+{"version":3,"file":"SSORedirectGuard.d.ts","sourceRoot":"","sources":["../../../src/shared/components/SSORedirectGuard.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAuDH,wBAAgB,oBAAoB,IAAI,IAAI,CAM3C;AA2CD,wBAAgB,qBAAqB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAGlE;AAED,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAM1F;AAED,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAiBlF;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAqDpE;AAED;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,IAAI,OAAO,CA6BlC;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAyC9F;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CA6B1C;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,4CAEjC"}

package/dist/shared/components/SSORedirectGuard.js

@@ -1,16 +1,16 @@
 import { resolveAuthBridgeConfig as e } from "../config/authBridgeUrls.js";
 import { clearActiveContextStorage as t } from "../providers/shell/ActiveContextStorage.js";
 import { clearShellSsoCookies as n, isLocalDevSsoHost as r, isSharedSsoCookieDomain as i, isTrustedSsoOrigin as a, readShellSsoCookie as o } from "../utils/authCookie.js";
-import { isElectron as s, isNative as c } from "../native/platform.js";
-import { BrandedSplash as l } from "../../ui/branded-splash.js";
-import { jsx as u } from "react/jsx-runtime";
+import { isRealNativeOrDesktopShell as s } from "../native/platform.js";
+import { BrandedSplash as c } from "../../ui/branded-splash.js";
+import { jsx as l } from "react/jsx-runtime";
 //#region src/shared/components/SSORedirectGuard.tsx
-var d = "bf-sso-relay-attempt", f = 120 * 1e3, p = [
+var u = "bf-sso-relay-attempt", d = 120 * 1e3, f = [
 	"sso_failed",
 	"sso-failed",
 	"sso-attempted"
 ];
-function m(e) {
+function p(e) {
 	if (typeof window > "u") return null;
 	try {
 		let t = `${window.location.pathname}${window.location.search}${window.location.hash}`, n = new URL(e ?? t, window.location.origin);
@@ -19,73 +19,70 @@ function m(e) {
 		return null;
 	}
 }
-function h(e) {
+function m(e) {
 	return e === "/auth" || e.startsWith("/auth/");
 }
-function g(e) {
-	return p.some((t) => e.searchParams.has(t));
+function h(e) {
+	return f.some((t) => e.searchParams.has(t));
 }
-function _(e) {
-	if (g(e)) return n(), !0;
-	if (h(e.pathname)) return !0;
+function g(e) {
+	if (h(e)) return n(), !0;
+	if (m(e.pathname)) return !0;
 	let t = e.searchParams.get("reason");
 	return t === "session-expired" || t === "logout";
 }
-function v() {
+function _() {
 	try {
-		sessionStorage.removeItem(d);
+		sessionStorage.removeItem(u);
 	} catch {}
 }
-function y() {
+function v() {
 	if (typeof window > "u") return null;
 	try {
-		let e = sessionStorage.getItem(d);
+		let e = sessionStorage.getItem(u);
 		if (!e) return null;
 		let t = JSON.parse(e);
-		return typeof t.relayOrigin != "string" || typeof t.returnTo != "string" || typeof t.startedAt != "number" || Date.now() - t.startedAt > f ? (v(), null) : {
+		return typeof t.relayOrigin != "string" || typeof t.returnTo != "string" || typeof t.startedAt != "number" || Date.now() - t.startedAt > d ? (_(), null) : {
 			relayOrigin: t.relayOrigin,
 			returnTo: t.returnTo,
 			startedAt: t.startedAt
 		};
 	} catch {
-		return v(), null;
+		return _(), null;
 	}
 }
-function b(e) {
+function y(e) {
 	try {
 		return new URL(e).origin;
 	} catch {
 		return null;
 	}
 }
-function x(e) {
-	let t = m(e);
-	return !t || _(t);
+function b(e) {
+	let t = p(e);
+	return !t || g(t);
 }
-function S(e, t) {
-	let n = b(e), r = m(t), i = y();
+function x(e, t) {
+	let n = y(e), r = p(t), i = v();
 	return !!(n && r && i?.returnTo === r.href);
 }
-function C(e, t) {
+function S(e, t) {
 	if (typeof window > "u") return;
-	let n = b(e), r = m(t);
+	let n = y(e), r = p(t);
 	if (!(!n || !r)) try {
 		let e = {
 			relayOrigin: n,
 			returnTo: r.href,
 			startedAt: Date.now()
 		};
-		sessionStorage.setItem(d, JSON.stringify(e));
+		sessionStorage.setItem(u, JSON.stringify(e));
 	} catch {}
 }
-function w() {
-	return c() || s();
-}
-function T(t) {
-	if (w()) return null;
+function C(t) {
+	if (s()) return null;
 	try {
-		let n = m(t);
-		if (!n || _(n) || r()) return null;
+		let n = p(t);
+		if (!n || g(n) || r()) return null;
 		let i = window.location.origin, s = null;
 		try {
 			s = new URL(e().url).origin;
@@ -93,23 +90,23 @@ function T(t) {
 		let c = o();
 		if (s === i && c?.origin && a(c.origin)) {
 			let e = new URL(c.origin).origin;
-			if (e && e !== i && !S(e, n.href)) return C(e, n.href), `${e}/auth/sso-relay?returnTo=${encodeURIComponent(n.href)}`;
+			if (e && e !== i && !x(e, n.href)) return S(e, n.href), `${e}/auth/sso-relay?returnTo=${encodeURIComponent(n.href)}`;
 		}
-		return s && s !== i && !S(s, n.href) ? (C(s, n.href), `${s}/auth/sso-relay?returnTo=${encodeURIComponent(n.href)}`) : null;
+		return s && s !== i && !x(s, n.href) ? (S(s, n.href), `${s}/auth/sso-relay?returnTo=${encodeURIComponent(n.href)}`) : null;
 	} catch {
 		return null;
 	}
 }
-function E() {
+function w() {
 	try {
 		if (o()) return !1;
 		let e = sessionStorage.getItem("bf-active-profile");
-		return !e || !localStorage.getItem(`bf-p-${e}-tokens`) || !i() ? !1 : (O(), !0);
+		return !e || !localStorage.getItem(`bf-p-${e}-tokens`) || !i() ? !1 : (E(), !0);
 	} catch {
 		return !1;
 	}
 }
-async function D(e, t) {
+async function T(e, t) {
 	try {
 		let n = await fetch(e, {
 			method: "POST",
@@ -126,7 +123,7 @@ async function D(e, t) {
 		return !1;
 	}
 }
-function O() {
+function E() {
 	try {
 		let e = localStorage.getItem("bf-profiles");
 		if (e) {
@@ -137,8 +134,8 @@ function O() {
 		localStorage.removeItem("bf-profiles"), localStorage.removeItem("auth-storage"), sessionStorage.removeItem("bf-active-profile"), t(), n(), window.dispatchEvent(new Event("bf-auth-state-cleared")), window.dispatchEvent(new Event("bf-profile-storage-change"));
 	} catch {}
 }
-function k() {
-	return /* @__PURE__ */ u(l, { label: "Signing you in…" });
+function D() {
+	return /* @__PURE__ */ l(c, { label: "Signing you in…" });
 }
 //#endregion
-export { k as SSORedirectSpinner, D as checkRemoteSLO, E as checkSLO, O as clearLocalAuthState, v as clearSSORelayAttempt, T as getSSORedirectUrl, S as hasRecentSSORedirectAttempt, C as markSSORedirectAttempt, x as shouldSkipSSORedirect };
+export { D as SSORedirectSpinner, T as checkRemoteSLO, w as checkSLO, E as clearLocalAuthState, _ as clearSSORelayAttempt, C as getSSORedirectUrl, x as hasRecentSSORedirectAttempt, S as markSSORedirectAttempt, b as shouldSkipSSORedirect };

package/dist/shared/native/platform.d.ts

@@ -6,6 +6,12 @@ export declare function isAndroid(): boolean;
 export declare function isWeb(): boolean;
 /** Running inside an Electron desktop shell. */
 export declare function isElectron(): boolean;
+/**
+ * Whether cross-origin session hops should stay inside the current product origin.
+ * Capacitor is detected independently of boot order; presentation previews remain
+ * ordinary browser tabs so their bridge-host session maintenance still runs.
+ */
+export declare function isRealNativeOrDesktopShell(): boolean;
 /** Running as an installed / standalone PWA (added to home screen / installed). */
 export declare function isStandalonePWA(): boolean;
 /**

package/dist/shared/native/platform.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../../../src/shared/native/platform.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAEvD,wBAAgB,WAAW,IAAI,uBAAuB,CAIrD;AAED,wBAAgB,QAAQ,IAAI,OAAO,CAElC;AAED,wBAAgB,KAAK,IAAI,OAAO,CAE/B;AAED,wBAAgB,SAAS,IAAI,OAAO,CAEnC;AAED,wBAAgB,KAAK,IAAI,OAAO,CAE/B;AAED,gDAAgD;AAChD,wBAAgB,UAAU,IAAI,OAAO,CAapC;AAED,mFAAmF;AACnF,wBAAgB,eAAe,IAAI,OAAO,CAQzC;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,OAAO,CAExC;AAED,6EAA6E;AAC7E,wBAAgB,YAAY,IAAI,OAAO,CAEtC"}
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../../../src/shared/native/platform.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAEvD,wBAAgB,WAAW,IAAI,uBAAuB,CAIrD;AAED,wBAAgB,QAAQ,IAAI,OAAO,CAElC;AAED,wBAAgB,KAAK,IAAI,OAAO,CAE/B;AAED,wBAAgB,SAAS,IAAI,OAAO,CAEnC;AAED,wBAAgB,KAAK,IAAI,OAAO,CAE/B;AAED,gDAAgD;AAChD,wBAAgB,UAAU,IAAI,OAAO,CAapC;AAYD;;;;GAIG;AACH,wBAAgB,0BAA0B,IAAI,OAAO,CAIpD;AAED,mFAAmF;AACnF,wBAAgB,eAAe,IAAI,OAAO,CAQzC;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,OAAO,CAExC;AAED,6EAA6E;AAC7E,wBAAgB,YAAY,IAAI,OAAO,CAEtC"}

package/dist/shared/native/platform.js

@@ -1,35 +1,42 @@
-import { getNativeBridge as e } from "./bridge.js";
+import { isCapacitorNative as e } from "./capacitor.js";
+import { getNativeBridge as t } from "./bridge.js";
 //#region src/shared/native/platform.ts
-function t() {
-	let t = e();
-	return t ? t.getPlatform() : "web";
-}
 function n() {
-	return e()?.isNativePlatform() ?? !1;
+	let e = t();
+	return e ? e.getPlatform() : "web";
 }
 function r() {
-	return t() === "ios";
+	return t()?.isNativePlatform() ?? !1;
 }
 function i() {
-	return t() === "android";
+	return n() === "ios";
 }
 function a() {
-	return t() === "web";
+	return n() === "android";
 }
 function o() {
-	return typeof window > "u" ? !1 : !!(window.__burdenoffDesktop?.isElectron || typeof navigator < "u" && /electron/i.test(navigator.userAgent) || typeof window < "u" && window.process?.type === "renderer");
+	return n() === "web";
 }
 function s() {
+	return typeof window > "u" ? !1 : !!(window.__burdenoffDesktop?.isElectron || typeof navigator < "u" && /electron/i.test(navigator.userAgent) || typeof window < "u" && window.process?.type === "renderer");
+}
+function c() {
+	return typeof document < "u" && !!document.documentElement?.dataset?.nativePreview;
+}
+function l() {
+	return e() ? !0 : c() ? !1 : r() || s();
+}
+function u() {
 	if (typeof window > "u") return !1;
 	if (document?.documentElement?.dataset?.nativePreview === "pwa") return !0;
 	let e = window.matchMedia?.("(display-mode: standalone)")?.matches ?? !1, t = window.navigator.standalone === !0;
 	return e || t;
 }
-function c() {
-	return n() || o() || s();
+function d() {
+	return r() || s() || u();
 }
-function l() {
-	return !c();
+function f() {
+	return !d();
 }
 //#endregion
-export { t as getPlatform, i as isAndroid, o as isElectron, r as isIOS, c as isInstalledApp, n as isNative, s as isStandalonePWA, a as isWeb, l as isWebBrowser };
+export { n as getPlatform, a as isAndroid, s as isElectron, i as isIOS, d as isInstalledApp, r as isNative, l as isRealNativeOrDesktopShell, u as isStandalonePWA, o as isWeb, f as isWebBrowser };

package/dist/shared/providers/shell/authProvider/ssoRelay.d.ts

@@ -7,9 +7,9 @@
  * getSSORedirectUrl would relay the stale session back on the next visit
  * and the user would silently stay logged in.
  *
- * Returns null when no detour is needed (already on the bridge host, or
- * unable to resolve a bridge URL — caller should just stay/navigate on its
- * own origin).
+ * Returns null when no detour is needed (already on the bridge host, inside a
+ * native or desktop shell, or unable to resolve a bridge URL — caller should
+ * just stay/navigate on its own origin).
  */
 export declare function getCrossOriginLogoutUrl(): string | null;
 export declare function hasLocalProfileSession(profileId: string | null): boolean;

package/dist/shared/providers/shell/authProvider/ssoRelay.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ssoRelay.d.ts","sourceRoot":"","sources":["../../../../../src/shared/providers/shell/authProvider/ssoRelay.ts"],"names":[],"mappings":"AAYA;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAWvD;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAWxE;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA0BrE"}
+{"version":3,"file":"ssoRelay.d.ts","sourceRoot":"","sources":["../../../../../src/shared/providers/shell/authProvider/ssoRelay.ts"],"names":[],"mappings":"AAaA;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAYvD;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAWxE;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA2BrE"}

package/dist/shared/providers/shell/authProvider/ssoRelay.js

@@ -1,9 +1,10 @@
 import { resolveAuthBridgeConfig as e } from "../../../config/authBridgeUrls.js";
 import { isLocalDevSsoHost as t, isTrustedSsoOrigin as n, readShellSsoCookie as r } from "../../../utils/authCookie.js";
-import { hasRecentSSORedirectAttempt as i, markSSORedirectAttempt as a, shouldSkipSSORedirect as o } from "../../../components/SSORedirectGuard.js";
+import { isRealNativeOrDesktopShell as i } from "../../../native/platform.js";
+import { hasRecentSSORedirectAttempt as a, markSSORedirectAttempt as o, shouldSkipSSORedirect as s } from "../../../components/SSORedirectGuard.js";
 //#region src/shared/providers/shell/authProvider/ssoRelay.ts
-function s() {
-	if (typeof window > "u") return null;
+function c() {
+	if (typeof window > "u" || i()) return null;
 	try {
 		let t = e(), n = new URL(t.url).origin;
 		if (n === window.location.origin) return null;
@@ -13,7 +14,7 @@ function s() {
 		return null;
 	}
 }
-function c(e) {
+function l(e) {
 	if (!e) return !1;
 	try {
 		return !!(localStorage.getItem(`bf-p-${e}-tokens`) && localStorage.getItem(`bf-p-${e}-user`));
@@ -21,18 +22,18 @@ function c(e) {
 		return !1;
 	}
 }
-function l(e) {
+function u(e) {
 	try {
-		if (o() || t()) return null;
-		let s = r();
-		if (!s?.origin || !n(s.origin)) return null;
-		let l = new URL(s.origin).origin, u = new URL(e).origin;
-		if (l === window.location.origin || l === u || c(s.id)) return null;
-		let d = window.location.href;
-		return i(l, d) ? null : (a(l, d), `${l}/auth/sso-relay?returnTo=${encodeURIComponent(d)}`);
+		if (i() || s() || t()) return null;
+		let c = r();
+		if (!c?.origin || !n(c.origin)) return null;
+		let u = new URL(c.origin).origin, d = new URL(e).origin;
+		if (u === window.location.origin || u === d || l(c.id)) return null;
+		let f = window.location.href;
+		return a(u, f) ? null : (o(u, f), `${u}/auth/sso-relay?returnTo=${encodeURIComponent(f)}`);
 	} catch {
 		return null;
 	}
 }
 //#endregion
-export { l as getCookieSsoRelayUrl, s as getCrossOriginLogoutUrl };
+export { u as getCookieSsoRelayUrl, c as getCrossOriginLogoutUrl };

package/dist/shared/providers/shell/authProvider/useBridgeInitialization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useBridgeInitialization.d.ts","sourceRoot":"","sources":["../../../../../src/shared/providers/shell/authProvider/useBridgeInitialization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,gBAAgB,EAAE,MAAM,OAAO,CAAC;AACzD,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,UAAU,EAKhB,MAAM,0BAA0B,CAAC;AAUlC,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,WAAW,EAAE,OAAO,GAAG,SAAS,CAAC;IACjC,aAAa,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;IACxC,oBAAoB,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChD,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IACzC,WAAW,EAAE,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACzC,OAAO,EAAE,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,KAAK,IAAI,CAAC;IAC5C,SAAS,EAAE,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,KAAK,IAAI,CAAC;IAC/C,sBAAsB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACvD,aAAa,EAAE,MAAM,IAAI,CAAC;IAC1B,eAAe,EAAE,MAAM,IAAI,CAAC;CAC7B;AAED,wBAAgB,uBAAuB,CAAC,EACtC,SAAS,EACT,oBAAoB,EACpB,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,YAAY,EACZ,WAAW,EACX,OAAO,EACP,SAAS,EACT,sBAAsB,EACtB,aAAa,EACb,eAAe,GAChB,EAAE,wBAAwB,GAAG,IAAI,CAsHjC"}
+{"version":3,"file":"useBridgeInitialization.d.ts","sourceRoot":"","sources":["../../../../../src/shared/providers/shell/authProvider/useBridgeInitialization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,gBAAgB,EAAE,MAAM,OAAO,CAAC;AACzD,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,UAAU,EAKhB,MAAM,0BAA0B,CAAC;AAWlC,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,WAAW,EAAE,OAAO,GAAG,SAAS,CAAC;IACjC,aAAa,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;IACxC,oBAAoB,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChD,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IACzC,WAAW,EAAE,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACzC,OAAO,EAAE,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,KAAK,IAAI,CAAC;IAC5C,SAAS,EAAE,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,KAAK,IAAI,CAAC;IAC/C,sBAAsB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACvD,aAAa,EAAE,MAAM,IAAI,CAAC;IAC1B,eAAe,EAAE,MAAM,IAAI,CAAC;CAC7B;AAED,wBAAgB,uBAAuB,CAAC,EACtC,SAAS,EACT,oBAAoB,EACpB,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,YAAY,EACZ,WAAW,EACX,OAAO,EACP,SAAS,EACT,sBAAsB,EACtB,aAAa,EACb,eAAe,GAChB,EAAE,wBAAwB,GAAG,IAAI,CA0HjC"}

package/dist/shared/providers/shell/authProvider/useBridgeInitialization.js

@@ -1,86 +1,87 @@
 import { getProfileTokens as e, getProfileUser as t, getProfileWorkspaceToken as n, resolveActiveProfileId as r } from "../ProfileStorageManager.js";
 import { initAuthBridge as i, isAuthBridgeInitialized as a } from "../AuthBridgeClient.js";
-import { hasRecentSSORedirectAttempt as o, markSSORedirectAttempt as s, shouldSkipSSORedirect as c } from "../../../components/SSORedirectGuard.js";
-import { getCookieSsoRelayUrl as l } from "./ssoRelay.js";
-import { syncBridgeStateToProfileStorage as u } from "./bridgeStateSync.js";
-import { useEffect as d } from "react";
+import { isRealNativeOrDesktopShell as o } from "../../../native/platform.js";
+import { hasRecentSSORedirectAttempt as s, markSSORedirectAttempt as c, shouldSkipSSORedirect as l } from "../../../components/SSORedirectGuard.js";
+import { getCookieSsoRelayUrl as u } from "./ssoRelay.js";
+import { syncBridgeStateToProfileStorage as d } from "./bridgeStateSync.js";
+import { useEffect as f } from "react";
 //#region src/shared/providers/shell/authProvider/useBridgeInitialization.ts
-function f({ bridgeUrl: f, bridgeAllowedOrigins: p, bridgeDebug: m, onBridgeReady: h, bridgeSyncInProgress: g, setIsLoading: _, setActiveId: v, setUser: y, setTokens: b, setWorkspaceTokenLocal: x, clearAccounts: S, refreshAccounts: C }) {
-	d(() => {
-		if (!f) return;
+function p({ bridgeUrl: p, bridgeAllowedOrigins: m, bridgeDebug: h, onBridgeReady: g, bridgeSyncInProgress: _, setIsLoading: v, setActiveId: y, setUser: b, setTokens: x, setWorkspaceTokenLocal: S, clearAccounts: C, refreshAccounts: w }) {
+	f(() => {
+		if (!p) return;
 		try {
-			let e = new URL(f).pathname;
+			let e = new URL(p).pathname;
 			if (window.location.pathname === e) {
-				_(!1), h?.();
+				v(!1), g?.();
 				return;
 			}
 		} catch {
-			_(!1), h?.();
+			v(!1), g?.();
 			return;
 		}
 		if (a()) {
-			_(!1), h?.();
+			v(!1), g?.();
 			return;
 		}
-		let d = () => {
-			_(!1), h?.();
-		}, w = (i) => {
-			g.current = !0;
+		let f = () => {
+			v(!1), g?.();
+		}, T = (i) => {
+			_.current = !0;
 			try {
-				if (f) {
-					let e = l(f);
+				if (p) {
+					let e = u(p);
 					if (e) {
 						window.location.replace(e);
 						return;
 					}
 				}
-				u(i);
+				d(i);
 				let a = r();
-				if (a) v(a), y(t(a)), b(e(a)), x(n(a)), C();
+				if (a) y(a), b(t(a)), x(e(a)), S(n(a)), w();
 				else {
-					if (f && !i.user && !i.tokens) try {
-						let e = new URL(f).origin, t = window.location.origin, n = l(f);
+					if (p && !i.user && !i.tokens) try {
+						let e = new URL(p).origin, t = window.location.origin, n = u(p);
 						if (n) {
 							window.location.replace(n);
 							return;
 						}
-						if (e !== t && !c()) {
+						if (e !== t && !l() && !o()) {
 							let t = window.location.href;
-							if (o(e, t)) return;
-							s(e, t), window.location.replace(`${e}/auth/sso-relay?returnTo=${encodeURIComponent(t)}`);
+							if (s(e, t)) return;
+							c(e, t), window.location.replace(`${e}/auth/sso-relay?returnTo=${encodeURIComponent(t)}`);
 							return;
 						}
 					} catch {}
-					v(null), y(null), b(null), x(null), S();
+					y(null), b(null), x(null), S(null), C();
 				}
 			} finally {
-				g.current = !1, d();
+				_.current = !1, f();
 			}
-		}, T = setTimeout(() => {
-			d();
+		}, E = setTimeout(() => {
+			f();
 		}, 5e3);
 		return i({
-			bridgeUrl: f,
-			allowedOrigins: p,
-			onStateChanged: w,
-			debug: m ?? !1
+			bridgeUrl: p,
+			allowedOrigins: m,
+			onStateChanged: T,
+			debug: h ?? !1
 		}), () => {
-			clearTimeout(T);
+			clearTimeout(E);
 		};
 	}, [
-		f,
 		p,
 		m,
 		h,
-		C,
 		g,
+		w,
 		_,
 		v,
 		y,
 		b,
 		x,
-		S
+		S,
+		C
 	]);
 }
 //#endregion
-export { f as useBridgeInitialization };
+export { p as useBridgeInitialization };

package/dist/shared/providers/shell/authProvider/useSsoDepositBootGuard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useSsoDepositBootGuard.d.ts","sourceRoot":"","sources":["../../../../../src/shared/providers/shell/authProvider/useSsoDepositBootGuard.ts"],"names":[],"mappings":"AA8BA;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CA4E7C"}
+{"version":3,"file":"useSsoDepositBootGuard.d.ts","sourceRoot":"","sources":["../../../../../src/shared/providers/shell/authProvider/useSsoDepositBootGuard.ts"],"names":[],"mappings":"AAoBA;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CA4E7C"}

package/dist/shared/providers/shell/authProvider/useSsoDepositBootGuard.js

@@ -2,47 +2,44 @@ import { resolveGatewayUrls as e } from "../../../config/gatewayUrls.js";
 import { resolveAuthBridgeConfig as t } from "../../../config/authBridgeUrls.js";
 import { resolveActiveProfileId as n } from "../ProfileStorageManager.js";
 import { isLocalDevSsoHost as r, isSharedSsoCookieDomain as i } from "../../../utils/authCookie.js";
-import { isElectron as a, isNative as o } from "../../../native/platform.js";
-import { beginSsoNavigation as s, buildSsoDepositUrl as c, consumeSsoDepositMarker as l, markSsoDepositPending as u, mintSsoSessionTokens as d, shouldAttemptSsoDeposit as f } from "../../../utils/ssoDeposit.js";
-import { useEffect as p } from "react";
+import { isRealNativeOrDesktopShell as a } from "../../../native/platform.js";
+import { beginSsoNavigation as o, buildSsoDepositUrl as s, consumeSsoDepositMarker as c, markSsoDepositPending as l, mintSsoSessionTokens as u, shouldAttemptSsoDeposit as d } from "../../../utils/ssoDeposit.js";
+import { useEffect as f } from "react";
 //#region src/shared/providers/shell/authProvider/useSsoDepositBootGuard.ts
-var m = 2500;
-function h() {
-	return o() || a();
-}
-function g() {
-	p(() => {
+var p = 2500;
+function m() {
+	f(() => {
 		if (typeof window > "u") return;
-		let a = n();
-		if (l(a) || !a || h() || r() || i() || window.location.pathname.startsWith("/auth/")) return;
-		let o;
+		let f = n();
+		if (c(f) || !f || a() || r() || i() || window.location.pathname.startsWith("/auth/")) return;
+		let m;
 		try {
 			let e = t();
-			o = new URL(e.url).origin;
+			m = new URL(e.url).origin;
 		} catch {
 			return;
 		}
-		if (o === window.location.origin || !f(a)) return;
-		let p = setTimeout(async () => {
+		if (m === window.location.origin || !d(f)) return;
+		let h = setTimeout(async () => {
 			try {
-				if (n() !== a || window.location.pathname.startsWith("/auth/")) return;
-				let t = localStorage.getItem(`bf-p-${a}-tokens`), r = localStorage.getItem(`bf-p-${a}-user`);
+				if (n() !== f || window.location.pathname.startsWith("/auth/")) return;
+				let t = localStorage.getItem(`bf-p-${f}-tokens`), r = localStorage.getItem(`bf-p-${f}-user`);
 				if (!t || !r) return;
 				let i = JSON.parse(t);
 				if (!(i.accessToken && typeof i.expiresAt == "number" && i.expiresAt - Date.now() > 6e4) || !i.refreshToken) return;
-				u(a);
-				let { globalBaseUrl: l } = e(), { tokens: f } = await d(`${l}/global/graphql`, i.refreshToken);
-				if (!f) return;
-				s(), window.location.replace(c(o, window.location.href, {
-					profileId: a,
-					tokens: JSON.stringify(f),
+				l(f);
+				let { globalBaseUrl: a } = e(), { tokens: c } = await u(`${a}/global/graphql`, i.refreshToken);
+				if (!c) return;
+				o(), window.location.replace(s(m, window.location.href, {
+					profileId: f,
+					tokens: JSON.stringify(c),
 					user: r,
 					profiles: localStorage.getItem("bf-profiles")
 				}));
 			} catch {}
-		}, m);
-		return () => clearTimeout(p);
+		}, p);
+		return () => clearTimeout(h);
 	}, []);
 }
 //#endregion
-export { g as useSsoDepositBootGuard };
+export { m as useSsoDepositBootGuard };

package/dist/shell-native/capacitor-config.d.ts

@@ -17,5 +17,7 @@ export interface CapacitorConfigLike {
     experimental?: Record<string, unknown>;
     [key: string]: unknown;
 }
+/** Valid WebView origin grammar: a hostname with at most one leading `*.` label. */
+export declare function isValidAllowNavigationRule(rule: string): boolean;
 export declare function defineCapacitorConfig(cfg: NativeConfig, overrides?: Partial<CapacitorConfigLike>): CapacitorConfigLike;
 //# sourceMappingURL=capacitor-config.d.ts.map

package/dist/shell-native/capacitor-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capacitor-config.d.ts","sourceRoot":"","sources":["../../src/shell-native/capacitor-config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5C,oEAAoE;AACpE,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE;QACP,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAuBD,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,YAAY,EACjB,SAAS,GAAE,OAAO,CAAC,mBAAmB,CAAM,GAC3C,mBAAmB,CAiHrB"}
+{"version":3,"file":"capacitor-config.d.ts","sourceRoot":"","sources":["../../src/shell-native/capacitor-config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5C,oEAAoE;AACpE,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE;QACP,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAqBD,oFAAoF;AACpF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGhE;AA6BD,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,YAAY,EACjB,SAAS,GAAE,OAAO,CAAC,mBAAmB,CAAM,GAC3C,mBAAmB,CAqHrB"}

package/dist/shell-native/capacitor-config.js

@@ -2,47 +2,53 @@
 function e(e) {
 	return [...new Set(e.filter((e) => e.length > 0))];
 }
-function t(e) {
+var t = "[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?", n = RegExp(`^(?:\\*\\.)?${t}(?:\\.${t})+$`, "i"), r = 253;
+function i(e) {
+	return (e.startsWith("*.") ? e.slice(2) : e).length <= r && n.test(e);
+}
+function a(e) {
+	let t = e.filter((e) => !i(e));
+	if (t.length !== 0) throw Error(`defineCapacitorConfig: server.allowNavigation entries must be host names with at most one leading "*." label (no scheme, port or path). Invalid: ${t.map((e) => JSON.stringify(e)).join(", ")}`);
+}
+function o(e) {
 	return globalThis.process?.env?.[e] === "1";
 }
-function n(n, r = {}) {
-	let i = {
-		appId: n.appId,
-		appName: n.displayName,
+function s(t, n = {}) {
+	let r = {
+		appId: t.appId,
+		appName: t.displayName,
 		webDir: "dist",
 		server: {
 			androidScheme: "https",
 			iosScheme: "https",
 			allowNavigation: e([
-				n.domains.prodApp,
-				n.domains.alphaApp,
-				n.domains.website,
-				...n.domains.docs ? [n.domains.docs] : [],
-				"*.burdenoff.com",
-				"*.*.burdenoff.com",
-				"*.*.*.burdenoff.com"
+				t.domains.prodApp,
+				t.domains.alphaApp,
+				t.domains.website,
+				...t.domains.docs ? [t.domains.docs] : [],
+				"*.burdenoff.com"
 			])
 		},
 		ios: {
 			contentInset: "automatic",
 			allowsLinkPreview: !1,
 			preferredContentMode: "mobile",
-			backgroundColor: n.brandColor,
+			backgroundColor: t.brandColor,
 			scrollEnabled: !0
 		},
 		android: {
 			allowMixedContent: !1,
 			overScrollMode: "never",
-			webContentsDebuggingEnabled: t("CAP_DEBUG"),
+			webContentsDebuggingEnabled: o("CAP_DEBUG"),
 			minWebViewVersion: "80.0.0",
-			backgroundColor: n.brandColor
+			backgroundColor: t.brandColor
 		},
 		plugins: {
 			CapacitorUpdater: {
 				autoUpdate: !0,
 				appReadyTimeout: 1e4,
 				directUpdate: !1,
-				...n.ota?.channel ? { defaultChannel: n.ota.channel } : {}
+				...t.ota?.channel ? { defaultChannel: t.ota.channel } : {}
 			},
 			SystemBars: {
 				insetsHandling: "css",
@@ -50,7 +56,7 @@ function n(n, r = {}) {
 			},
 			SplashScreen: {
 				launchAutoHide: !1,
-				backgroundColor: n.brandColor,
+				backgroundColor: t.brandColor,
 				androidScaleType: "CENTER_CROP",
 				showSpinner: !1,
 				splashFullScreen: !0,
@@ -65,38 +71,38 @@ function n(n, r = {}) {
 				resize: "body",
 				resizeOnFullScreen: !0
 			},
-			...n.push ? { PushNotifications: { presentationOptions: [
+			...t.push ? { PushNotifications: { presentationOptions: [
 				"badge",
 				"sound",
 				"alert"
 			] } } : {}
 		},
 		experimental: { ios: { spm: { swiftToolsVersion: "5.9" } } }
-	};
-	return {
-		...i,
+	}, i = {
 		...r,
+		...n,
 		server: {
-			...i.server,
-			...r.server
+			...r.server,
+			...n.server
 		},
 		ios: {
-			...i.ios,
-			...r.ios
+			...r.ios,
+			...n.ios
 		},
 		android: {
-			...i.android,
-			...r.android
+			...r.android,
+			...n.android
 		},
 		plugins: {
-			...i.plugins,
-			...r.plugins
+			...r.plugins,
+			...n.plugins
 		},
 		experimental: {
-			...i.experimental,
-			...r.experimental
+			...r.experimental,
+			...n.experimental
 		}
 	};
+	return a(i.server?.allowNavigation ?? []), i;
 }
 //#endregion
-export { n as defineCapacitorConfig };
+export { s as defineCapacitorConfig, i as isValidAllowNavigationRule };

package/dist/shell-native/index.d.ts

@@ -48,7 +48,7 @@ export { emitPushToken, installPushNotifications, requestPushPermission, PUSH_TO
 export { getWebPushManifestConfig, getWebPushSubscription, installWebPushMessageBridge, isWebPushSupported, requestWebPushPermission, resetWebPushForTests, resolveVapidPublicKey, serializeWebPushSubscription, subscribeWebPush, unsubscribeWebPush, urlBase64ToUint8Array, SW_NOTIFICATION_CLICK_MESSAGE, SW_PUSH_SUBSCRIPTION_CHANGE_MESSAGE, WEB_PUSH_MANIFEST_KEY, type WebPushManifestConfig, type WebPushSubscribeOptions, } from './web-push';
 export { installPwa, installPwaPrompt, isPwaEligibleHost, resetPwaForTests, PWA_INSTALLED_EVENT, PWA_INSTALL_AVAILABLE_EVENT, PWA_UPDATE_READY_EVENT, } from './pwa';
 export { configureElectronGlobalKey, getDesktopBridge, getElectronGlobalKey, getLegacyElectronBridge, isDesktopShell, } from './desktop-bridge';
-export { defineCapacitorConfig, type CapacitorConfigLike } from './capacitor-config';
+export { defineCapacitorConfig, isValidAllowNavigationRule, type CapacitorConfigLike, } from './capacitor-config';
 export { defineWebManifest, type WebManifestIcon, type WebManifestLike, type WebManifestPushConfig, type WebManifestShortcut, } from './web-manifest';
 export { renderServiceWorker, SERVICE_WORKER_TEMPLATE } from './service-worker';
 export type { AuthInterceptOptions, BackButtonHandlers, BeforeInstallPromptEventLike, BootNativeShellOptions, CapacitorListenerHandleLike, CapacitorUpdaterLike, DeepLinkDetail, LegacyElectronBridge, MobileRuntimeHooks, NativeConfig, NativePreviewMode, NativeShellHandle, NativeShellPlatform, NetworkHooks, NetworkStatusDetail, OptionalPluginLoaders, PushActionPerformedLike, PushNotificationSchemaLike, PushNotificationsLike, PushNotificationsLoader, PushOptions, PushPermissionStateLike, PushTokenLike, PwaOptions, SplashOptions, UpdaterLoader, } from './types';

package/dist/shell-native/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/shell-native/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAGH,OAAO,EAAE,eAAe,EAAE,4BAA4B,EAAE,MAAM,QAAQ,CAAC;AAGvE,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,UAAU,EACV,YAAY,EACZ,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,EACtB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EACL,wBAAwB,EACxB,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,eAAe,EACf,oBAAoB,GACrB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACpB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAG9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EACL,+BAA+B,EAC/B,oCAAoC,GACrC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,+BAA+B,EAC/B,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAC/F,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,6BAA6B,EAC7B,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,EACL,aAAa,EACb,wBAAwB,EACxB,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,QAAQ,CAAC;AAGhB,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,2BAA2B,EAC3B,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,qBAAqB,EACrB,4BAA4B,EAC5B,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,6BAA6B,EAC7B,mCAAmC,EACnC,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,GAC7B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,OAAO,CAAC;AAGf,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,oBAAoB,EACpB,uBAAuB,EACvB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,qBAAqB,EAAE,KAAK,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,EACL,iBAAiB,EACjB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAGhF,YAAY,EACV,oBAAoB,EACpB,kBAAkB,EAClB,4BAA4B,EAC5B,sBAAsB,EACtB,2BAA2B,EAC3B,oBAAoB,EACpB,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,EAC1B,qBAAqB,EACrB,uBAAuB,EACvB,WAAW,EACX,uBAAuB,EACvB,aAAa,EACb,UAAU,EACV,aAAa,EACb,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/shell-native/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAGH,OAAO,EAAE,eAAe,EAAE,4BAA4B,EAAE,MAAM,QAAQ,CAAC;AAGvE,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,UAAU,EACV,YAAY,EACZ,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,EACtB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EACL,wBAAwB,EACxB,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,eAAe,EACf,oBAAoB,GACrB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACpB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAG9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EACL,+BAA+B,EAC/B,oCAAoC,GACrC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,+BAA+B,EAC/B,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAC/F,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,6BAA6B,EAC7B,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,EACL,aAAa,EACb,wBAAwB,EACxB,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,QAAQ,CAAC;AAGhB,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,2BAA2B,EAC3B,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,qBAAqB,EACrB,4BAA4B,EAC5B,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,6BAA6B,EAC7B,mCAAmC,EACnC,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,GAC7B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,OAAO,CAAC;AAGf,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,oBAAoB,EACpB,uBAAuB,EACvB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,mBAAmB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,iBAAiB,EACjB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAGhF,YAAY,EACV,oBAAoB,EACpB,kBAAkB,EAClB,4BAA4B,EAC5B,sBAAsB,EACtB,2BAA2B,EAC3B,oBAAoB,EACpB,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,EAC1B,qBAAqB,EACrB,uBAAuB,EACvB,WAAW,EACX,uBAAuB,EACvB,aAAa,EACb,UAAU,EACV,aAAa,EACb,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC"}

package/dist/shell-native.js

@@ -25,7 +25,7 @@ import { PWA_INSTALLED_EVENT as pe, PWA_INSTALL_AVAILABLE_EVENT as me, PWA_UPDAT
 import { APP_READY_EVENT as be, armSplashSafetyTimer as xe, isAppReady as Se, markAppReady as Ce, resetAppReadyForTests as we } from "./shell-native/splash.js";
 import { DARK_FAMILY_THEMES as Te, applyStatusBarTheme as Ee, installStatusBarThemeListener as De, isDarkThemeName as Oe, resolveDocumentIsDark as ke, statusBarDetailIsDark as Ae } from "./shell-native/system-bars.js";
 import { bootNativeShell as je, resetNativeShellBootForTests as Me } from "./shell-native/boot.js";
-import { defineCapacitorConfig as Ne } from "./shell-native/capacitor-config.js";
-import { defineWebManifest as Pe } from "./shell-native/web-manifest.js";
-import { SERVICE_WORKER_TEMPLATE as Fe, renderServiceWorker as Ie } from "./shell-native/service-worker.js";
-export { be as APP_READY_EVENT, Te as DARK_FAMILY_THEMES, _ as DEFAULT_AUTH_INTERCEPT_PREFIXES, z as KEYBOARD_HEIGHT_CSS_VAR, B as KEYBOARD_OPEN_CLASS, t as NATIVE_PREVIEW_QUERY_PARAM, n as NATIVE_PREVIEW_STORAGE_KEY, U as NETWORK_STATUS_EVENT, q as PUSH_TOKEN_EVENT, pe as PWA_INSTALLED_EVENT, me as PWA_INSTALL_AVAILABLE_EVENT, he as PWA_UPDATE_READY_EVENT, Fe as SERVICE_WORKER_TEMPLATE, Z as SW_NOTIFICATION_CLICK_MESSAGE, Q as SW_PUSH_SUBSCRIPTION_CHANGE_MESSAGE, $ as WEB_PUSH_MANIFEST_KEY, o as applyNativePlatformClass, r as applyNativePreview, Ee as applyStatusBarTheme, xe as armSplashSafetyTimer, je as bootNativeShell, N as clearDeepLinkNavigator, p as configureElectronGlobalKey, V as configureKeyboard, b as createDefaultBackButtonHandlers, P as deepLinkUrlToPath, Ne as defineCapacitorConfig, Pe as defineWebManifest, J as emitPushToken, i as getActiveNativePreview, e as getDesktopBridge, m as getElectronGlobalKey, W as getLastNetworkStatus, h as getLegacyElectronBridge, s as getNativePlatform, ee as getWebPushManifestConfig, te as getWebPushSubscription, D as impactFeedback, x as installBackButtonHandler, F as installDeepLinkHandler, w as installExternalUrlOpener, f as installMobileRuntimeHooks, v as installNativeAuthNavigationIntercept, M as installNativeBridge, G as installNetworkListener, Y as installPushNotifications, de as installPushOptIn, ge as installPwa, _e as installPwaPrompt, De as installStatusBarThemeListener, ne as installWebPushMessageBridge, Se as isAppReady, Oe as isDarkThemeName, g as isDesktopShell, c as isNativePlatform, l as isNativePluginAvailable, u as isNativePreview, ve as isPwaEligibleHost, d as isRealNativePlatform, re as isWebPushSupported, H as keyboardHandlers, Ce as markAppReady, I as navigateDeepLinkPath, O as notificationFeedback, K as notifyOtaReady, T as openExternalUrl, R as populateDeviceInfo, L as registerDeepLinkNavigator, Ie as renderServiceWorker, X as requestPushPermission, ie as requestWebPushPermission, we as resetAppReadyForTests, Me as resetNativeShellBootForTests, fe as resetPushOptInForTests, ye as resetPwaForTests, ae as resetWebPushForTests, ke as resolveDocumentIsDark, a as resolveNativePreview, oe as resolveVapidPublicKey, S as runBackButtonPrecedence, k as selectionFeedback, se as serializeWebPushSubscription, j as shareContent, C as showNativeActionSheet, y as showNativeConfirm, A as showNativeToast, Ae as statusBarDetailIsDark, ce as subscribeWebPush, le as unsubscribeWebPush, ue as urlBase64ToUint8Array, E as writeClipboardText };
+import { defineCapacitorConfig as Ne, isValidAllowNavigationRule as Pe } from "./shell-native/capacitor-config.js";
+import { defineWebManifest as Fe } from "./shell-native/web-manifest.js";
+import { SERVICE_WORKER_TEMPLATE as Ie, renderServiceWorker as Le } from "./shell-native/service-worker.js";
+export { be as APP_READY_EVENT, Te as DARK_FAMILY_THEMES, _ as DEFAULT_AUTH_INTERCEPT_PREFIXES, z as KEYBOARD_HEIGHT_CSS_VAR, B as KEYBOARD_OPEN_CLASS, t as NATIVE_PREVIEW_QUERY_PARAM, n as NATIVE_PREVIEW_STORAGE_KEY, U as NETWORK_STATUS_EVENT, q as PUSH_TOKEN_EVENT, pe as PWA_INSTALLED_EVENT, me as PWA_INSTALL_AVAILABLE_EVENT, he as PWA_UPDATE_READY_EVENT, Ie as SERVICE_WORKER_TEMPLATE, Z as SW_NOTIFICATION_CLICK_MESSAGE, Q as SW_PUSH_SUBSCRIPTION_CHANGE_MESSAGE, $ as WEB_PUSH_MANIFEST_KEY, o as applyNativePlatformClass, r as applyNativePreview, Ee as applyStatusBarTheme, xe as armSplashSafetyTimer, je as bootNativeShell, N as clearDeepLinkNavigator, p as configureElectronGlobalKey, V as configureKeyboard, b as createDefaultBackButtonHandlers, P as deepLinkUrlToPath, Ne as defineCapacitorConfig, Fe as defineWebManifest, J as emitPushToken, i as getActiveNativePreview, e as getDesktopBridge, m as getElectronGlobalKey, W as getLastNetworkStatus, h as getLegacyElectronBridge, s as getNativePlatform, ee as getWebPushManifestConfig, te as getWebPushSubscription, D as impactFeedback, x as installBackButtonHandler, F as installDeepLinkHandler, w as installExternalUrlOpener, f as installMobileRuntimeHooks, v as installNativeAuthNavigationIntercept, M as installNativeBridge, G as installNetworkListener, Y as installPushNotifications, de as installPushOptIn, ge as installPwa, _e as installPwaPrompt, De as installStatusBarThemeListener, ne as installWebPushMessageBridge, Se as isAppReady, Oe as isDarkThemeName, g as isDesktopShell, c as isNativePlatform, l as isNativePluginAvailable, u as isNativePreview, ve as isPwaEligibleHost, d as isRealNativePlatform, Pe as isValidAllowNavigationRule, re as isWebPushSupported, H as keyboardHandlers, Ce as markAppReady, I as navigateDeepLinkPath, O as notificationFeedback, K as notifyOtaReady, T as openExternalUrl, R as populateDeviceInfo, L as registerDeepLinkNavigator, Le as renderServiceWorker, X as requestPushPermission, ie as requestWebPushPermission, we as resetAppReadyForTests, Me as resetNativeShellBootForTests, fe as resetPushOptInForTests, ye as resetPwaForTests, ae as resetWebPushForTests, ke as resolveDocumentIsDark, a as resolveNativePreview, oe as resolveVapidPublicKey, S as runBackButtonPrecedence, k as selectionFeedback, se as serializeWebPushSubscription, j as shareContent, C as showNativeActionSheet, y as showNativeConfirm, A as showNativeToast, Ae as statusBarDetailIsDark, ce as subscribeWebPush, le as unsubscribeWebPush, ue as urlBase64ToUint8Array, E as writeClipboardText };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/fe-libs",
-  "version": "2026.1005.3",
+  "version": "2026.1005.4",
   "description": "Burdenoff frontend primitives and domain libraries",
   "type": "module",
   "bin": {
@@ -312,7 +312,7 @@
     "type:check": "bash scripts/build-limits.sh tsc --noEmit",
     "test:package-css-exports": "node scripts/validate-package-css-exports.mjs",
     "test:handsfree-browser": "node scripts/handsfree-browser-run.mjs",
-    "test": "bun test scripts/graphql-schema-drift/__tests__ scripts/a11y-audit/__tests__ src/credentials src/connections src/storage src/shared/assistant src/shared/components src/shared/graphql/links/sse-link.test.ts src/shared/graphql/fetch.test.ts src/shared/graphql/tourWorkspaceAuth.test.ts src/shared/config/gatewayUrls.test.ts src/shared/config/authBridgeUrls.test.ts src/shared/config/gatewayFallback.test.ts src/shared/config/products.test.ts src/shared/config/productSlug.test.ts src/shared/hooks/shell/useProducts.test.ts src/shared/providers/shell/brandAttribute.test.ts src/chrome/ProductSwitcher.test.ts src/shared/utils/gatewayFetchRewrite.test.ts src/shared/utils/authCookie.test.ts src/shared/providers/AppShellProvider.test.ts src/shared/providers/shell/interpolate.test.ts src/shared/providers/shell/resolveTranslation.test.ts src/shared/providers/shell/I18nProvider.render.test.tsx src/shared/providers/shell/personaSurfaceRemote.test.ts src/shared/providers/shell/workspaceSwitch.client.test.tsx src/shared/events/sinks/RybbitSink.test.ts src/shell-native src/shared/native src/shared/navigation src/shared/tours src/chrome/__tests__ src/ui/__tests__",
+    "test": "bun test scripts/graphql-schema-drift/__tests__ scripts/a11y-audit/__tests__ src/credentials src/connections src/storage src/shared/assistant src/shared/components src/shared/graphql/links/sse-link.test.ts src/shared/graphql/fetch.test.ts src/shared/graphql/tourWorkspaceAuth.test.ts src/shared/config/gatewayUrls.test.ts src/shared/config/authBridgeUrls.test.ts src/shared/config/gatewayFallback.test.ts src/shared/config/products.test.ts src/shared/config/productSlug.test.ts src/shared/hooks/shell/useProducts.test.ts src/shared/providers/shell/brandAttribute.test.ts src/chrome/ProductSwitcher.test.ts src/shared/utils/gatewayFetchRewrite.test.ts src/shared/utils/authCookie.test.ts src/shared/providers/AppShellProvider.test.ts src/shared/providers/shell/interpolate.test.ts src/shared/providers/shell/resolveTranslation.test.ts src/shared/providers/shell/I18nProvider.render.test.tsx src/shared/providers/shell/authProvider/ssoRelay.test.ts src/shared/providers/shell/personaSurfaceRemote.test.ts src/shared/providers/shell/workspaceSwitch.client.test.tsx src/shared/events/sinks/RybbitSink.test.ts src/shell-native src/shared/native src/shared/navigation src/shared/tours src/chrome/__tests__ src/ui/__tests__",
     "sanity": "bash scripts/build-limits.sh --gate bash -c 'bun run lint:sanity && bun run format && bun run type:check && bun run test && bun run build'",
     "switch:status": "bun scripts/deps-mode.ts status",
     "switch:remote": "bun scripts/deps-mode.ts remote",