@burdenoff/fe-libs 2026.1011.1 → 2026.1011.3

package/dist/shared/assistant/ui/assistantOverlayState.d.ts

@@ -184,7 +184,18 @@ export declare const ASSISTANT_SHEET_BASE_CLASS: string;
 export declare const ASSISTANT_SHEET_COMPACT_CLASS = "h-[60vh] max-h-[60vh]";
 /** Phone, expanded from the grab handle. */
 export declare const ASSISTANT_SHEET_EXPANDED_CLASS = "h-[88vh] max-h-[88vh]";
-/** Desktop floating window, rising from the launcher, clamped to the viewport. */
+/**
+ * Desktop floating window, rising from the launcher, clamped to the viewport.
+ *
+ * ★★ THE HEIGHT CLAMP LEAVES THE SHELL HEADER FREE (BOFF-9092). The window is
+ * anchored `bottom-24` (6rem) and is 680px tall, shrinking only to
+ * `max-h`. That used to be `100vh - 8rem`, which puts the top edge at 32px on
+ * any viewport shorter than ~808px, UNDER the 56px shell header (`z-[100]`):
+ * the header covered the window's own header, its History and Close controls.
+ * The clamp now subtracts the bottom anchor, the header (`--assistant-overlay-top`,
+ * which the overlay sets on the sheet for both layouts; 56px when absent) and a
+ * 0.5rem breathing gap, so the top edge never rises above `header + 8px`.
+ */
 export declare const ASSISTANT_FLOATING_DESKTOP_CLASS: string;
 /**
  * Desktop docked side panel, from below the shell header to the bottom edge.

package/dist/shared/assistant/ui/assistantOverlayState.js

@@ -41,7 +41,7 @@ var v = 520, y = 24, b = "--assistant-panel-inset";
 function x(e) {
 	return !e.isOpen || !e.isDesktop ? 0 : e.docked ? 440 : 544;
 }
-var S = "fixed z-50 flex flex-col overflow-hidden border border-border-default bg-bg-surface shadow-2xl inset-x-0 bottom-0 top-auto rounded-t-2xl animate-in slide-in-from-bottom-4 fade-in duration-200", C = "h-[60vh] max-h-[60vh]", w = "h-[88vh] max-h-[88vh]", T = "sm:inset-auto sm:top-auto sm:bottom-24 sm:right-6 sm:rounded-2xl sm:h-[680px] sm:max-h-[calc(100vh-8rem)] sm:w-[520px] sm:max-w-[calc(100vw-2rem)]", E = "sm:left-auto sm:right-0 sm:top-[var(--assistant-overlay-top)] sm:bottom-0 sm:rounded-none sm:h-auto sm:max-h-none sm:w-[440px] sm:max-w-[calc(100vw-2rem)]";
+var S = "fixed z-50 flex flex-col overflow-hidden border border-border-default bg-bg-surface shadow-2xl inset-x-0 bottom-0 top-auto rounded-t-2xl animate-in slide-in-from-bottom-4 fade-in duration-200", C = "h-[60vh] max-h-[60vh]", w = "h-[88vh] max-h-[88vh]", T = "sm:inset-auto sm:top-auto sm:bottom-24 sm:right-6 sm:rounded-2xl sm:h-[680px] sm:max-h-[calc(100vh-6rem-var(--assistant-overlay-top,56px)-0.5rem)] sm:w-[520px] sm:max-w-[calc(100vw-2rem)]", E = "sm:left-auto sm:right-0 sm:top-[var(--assistant-overlay-top)] sm:bottom-0 sm:rounded-none sm:h-auto sm:max-h-none sm:w-[440px] sm:max-w-[calc(100vw-2rem)]";
 function D(e) {
 	return [
 		S,

package/dist/shared/graphql/fetch.d.ts

@@ -148,6 +148,12 @@ export declare function ensureWorkspaceToken(options: {
      */
     signal?: AbortSignal;
     currentQuery: string;
+    /** Optional predispatch facade guard; legacy caller behavior remains unchanged. */
+    issuanceGuard?: {
+        identityKey: string;
+        isCurrent(): boolean;
+        accepts(token: string, workspaceId: string): boolean;
+    };
 }): Promise<string | null>;
 /** Resolve full gateway GraphQL URL */
 export declare function resolveGatewayUrl(gateway: Gateway, baseUrl?: string): string;

package/dist/shared/graphql/fetch.js

@@ -35,7 +35,7 @@ function x() {
 		return null;
 	}
 }
-function ee() {
+function S() {
 	try {
 		let e = sessionStorage.getItem("bf-active-profile");
 		if (!e) return !1;
@@ -45,7 +45,7 @@ function ee() {
 		return !1;
 	}
 }
-function S(e) {
+function C(e) {
 	try {
 		let [, t] = e.split(".");
 		if (!t || typeof globalThis.atob != "function") return null;
@@ -55,11 +55,11 @@ function S(e) {
 		return null;
 	}
 }
-function C(e) {
-	let t = S(e)?.exp;
+function ee(e) {
+	let t = C(e)?.exp;
 	return typeof t == "number" ? t * 1e3 <= Date.now() + 3e4 : !1;
 }
-function w() {
+function te() {
 	try {
 		let e = sessionStorage.getItem("bf-active-profile");
 		if (e) {
@@ -72,7 +72,7 @@ function w() {
 		return null;
 	}
 }
-function T() {
+function w() {
 	try {
 		let e = sessionStorage.getItem("bf-active-profile");
 		if (e) {
@@ -84,41 +84,41 @@ function T() {
 		return "en";
 	}
 }
-function E() {
+function T() {
 	return s("workspace");
 }
-function D() {
+function E() {
 	return s("organization");
 }
-function O() {
+function D() {
 	return s("tenant");
 }
-function k() {
+function O() {
 	return s("project");
 }
-function A() {
+function k() {
 	try {
 		return typeof window > "u" ? null : new URLSearchParams(window.location.search).get("org");
 	} catch {
 		return null;
 	}
 }
-function j(e) {
+function A(e) {
 	return {
-		workspaceId: typeof e.workspaceId == "string" ? e.workspaceId : E() || void 0,
-		organizationId: typeof e.organizationId == "string" ? e.organizationId : D() || A() || void 0,
-		tenantId: typeof e.tenantId == "string" ? e.tenantId : O() || void 0,
-		projectId: typeof e.projectId == "string" ? e.projectId : k() || void 0
+		workspaceId: typeof e.workspaceId == "string" ? e.workspaceId : T() || void 0,
+		organizationId: typeof e.organizationId == "string" ? e.organizationId : E() || k() || void 0,
+		tenantId: typeof e.tenantId == "string" ? e.tenantId : D() || void 0,
+		projectId: typeof e.projectId == "string" ? e.projectId : O() || void 0
 	};
 }
-function M(e, t, n) {
+function j(e, t, n) {
 	try {
 		let r = a() ?? x();
 		if (!r) return;
 		o(r, t), sessionStorage.setItem("burdenoff-active-context-workspace", e), n && sessionStorage.setItem("burdenoff-active-context-organization", n);
 	} catch {}
 }
-function N(e, t, n) {
+function M(e, t, n) {
 	return t ? t.aborted ? Promise.resolve(n) : new Promise((r) => {
 		let i = () => r(n);
 		t.addEventListener("abort", i, { once: !0 }), e.then(r, () => r(n)).finally(() => {
@@ -126,20 +126,29 @@ function N(e, t, n) {
 		});
 	}) : e;
 }
-async function P(e) {
-	let { url: t, authToken: n, workspaceId: r, organizationId: i, projectId: a, locale: o, signal: s, currentQuery: c } = e;
-	if (!n || c.includes("issueWorkspaceToken")) return null;
-	let l = r || E();
-	if (!l) return null;
-	let u = b(), d = E(), p = i || D() || A();
-	if (u && d === l && f(u, {
-		workspaceId: l,
-		organizationId: p,
+async function N(e) {
+	let { url: t, authToken: n, workspaceId: r, organizationId: i, projectId: a, locale: o, signal: s, currentQuery: c, issuanceGuard: l } = e;
+	if (!n || c.includes("issueWorkspaceToken") || l && !l.isCurrent()) return null;
+	let u = r || T();
+	if (!u) return null;
+	let d = b(), p = T(), m = i || E() || k();
+	if (d && p === u && f(d, {
+		workspaceId: u,
+		organizationId: m,
 		projectId: a
-	})) return u;
-	let m = `${p ?? ""}:${l}:${a ?? ""}`, h = v.get(m);
-	if (h) return N(h, s, null);
-	let g = fetch(t, {
+	}) && (!l || l.accepts(d, u))) return d;
+	let h = JSON.stringify([
+		m ?? "",
+		u,
+		a ?? "",
+		l ? [
+			t,
+			n,
+			l.identityKey
+		] : null
+	]), g = v.get(h);
+	if (g) return M(g, s, null);
+	let y = fetch(t, {
 		method: "POST",
 		headers: {
 			"Content-Type": "application/json",
@@ -150,55 +159,56 @@ async function P(e) {
 		body: JSON.stringify({
 			query: _,
 			variables: { input: {
-				workspaceId: l,
-				...p ? { organizationId: p } : {},
+				workspaceId: u,
+				...m ? { organizationId: m } : {},
 				...a ? { projectId: a } : {}
 			} }
 		})
 	}).then(async (e) => {
-		let t = (await e.json()).data?.issueWorkspaceToken;
-		return t?.success && t.token ? (M(t.workspaceId || l, t.token, p ?? void 0), t.token) : null;
+		if (l && !e.ok) return null;
+		let t = await e.json(), n = t.data?.issueWorkspaceToken;
+		return l && (t.errors !== void 0 && (!Array.isArray(t.errors) || t.errors.length !== 0) || n?.success !== !0 || typeof n.token != "string" || n.token.length === 0 || n.workspaceId !== u) ? null : n?.success && n.token ? l && (!l.isCurrent() || !l.accepts(n.token, n.workspaceId || u)) ? null : (j(n.workspaceId || u, n.token, m ?? void 0), n.token) : null;
 	}).catch(() => null).finally(() => {
-		v.delete(m);
+		v.delete(h);
 	});
-	return v.set(m, g), N(g, s, null);
+	return v.set(h, y), M(y, s, null);
 }
-function F(e, n) {
+function P(e, n) {
 	let i = r[e], a = t(), o = e === "global" ? a.globalBaseUrl : a.workspaceBaseUrl, s = n || o;
 	return `${s.endsWith("/") ? s.slice(0, -1) : s}${i.graphql}`;
 }
-function I(e) {
+function F(e) {
 	return e.reason ?? new DOMException("The operation was aborted.", "AbortError");
 }
-function L(e) {
-	if (e?.aborted) throw I(e);
+function I(e) {
+	if (e?.aborted) throw F(e);
 }
-function R() {
+function L() {
 	return globalThis;
 }
-function z() {
-	let e = R();
+function R() {
+	let e = L();
 	return e.__graphqlFetchQueues ||= /* @__PURE__ */ new Map(), e.__graphqlFetchQueues;
 }
-function B() {
-	let e = R();
+function z() {
+	let e = L();
 	return e.__graphqlFetchResponseCache ||= /* @__PURE__ */ new Map(), e.__graphqlFetchResponseCache;
 }
-function V() {
-	let e = R();
+function B() {
+	let e = L();
 	return e.__graphqlFetchPendingResponses ||= /* @__PURE__ */ new Map(), e.__graphqlFetchPendingResponses;
 }
-function H() {
-	B().clear(), V().clear(), n();
+function V() {
+	z().clear(), B().clear(), n();
 }
-var te = 10, ne = 600, U = 100, re = 1e4, W = 15e3, ie = new Set([
+var H = 10, ne = 600, U = 100, re = 1e4, W = 15e3, ie = new Set([
 	"traceparent",
 	"tracestate",
 	"baggage"
 ]), G = "Apollo-Require-Preflight";
 function ae() {
 	if (typeof performance > "u") return U;
-	let e = R();
+	let e = L();
 	return e.__graphqlFetchBurstStartedAt ??= performance.now(), performance.now() - e.__graphqlFetchBurstStartedAt < re ? ne : U;
 }
 function oe(e) {
@@ -258,7 +268,7 @@ async function X(e, t, n) {
 				...r.keepalive ? { keepalive: !0 } : {}
 			}), i = await Y(n);
 			if (!n.ok && !q(i)) throw Error(J(n));
-			r.cacheKey && !q(i) && B().set(r.cacheKey, {
+			r.cacheKey && !q(i) && z().set(r.cacheKey, {
 				value: i,
 				expiresAt: Date.now() + W
 			}), r.resolve(i);
@@ -278,7 +288,7 @@ async function X(e, t, n) {
 		if (!i.ok && !q(a)) throw Error(J(i));
 		if (Array.isArray(a)) a.forEach((e, t) => {
 			let r = n[t];
-			r && (r.cacheKey && !q(e) && B().set(r.cacheKey, {
+			r && (r.cacheKey && !q(e) && z().set(r.cacheKey, {
 				value: e,
 				expiresAt: Date.now() + W
 			}), r.resolve(e));
@@ -292,15 +302,15 @@ async function X(e, t, n) {
 	}
 }
 function Z(e, t, n, r, i) {
-	let a = ce(t), o = i?.keepalive === !0, s = o ? 1 : Math.max(1, i?.batchMax ?? te), c = Math.max(0, i?.batchInterval ?? ae()), l = `${e}|${JSON.stringify(a)}`, u = oe(n) ? `${l}|${JSON.stringify(se(n))}` : void 0;
-	if (r?.aborted) return Promise.reject(I(r));
+	let a = ce(t), o = i?.keepalive === !0, s = o ? 1 : Math.max(1, i?.batchMax ?? H), c = Math.max(0, i?.batchInterval ?? ae()), l = `${e}|${JSON.stringify(a)}`, u = oe(n) ? `${l}|${JSON.stringify(se(n))}` : void 0;
+	if (r?.aborted) return Promise.reject(F(r));
 	if (u) {
-		let e = B(), t = e.get(u);
+		let e = z(), t = e.get(u);
 		if (t) {
 			if (t.expiresAt > Date.now()) return Promise.resolve(t.value);
 			e.delete(u);
 		}
-		let n = V().get(u);
+		let n = B().get(u);
 		if (n) return n;
 	}
 	let d = new Promise((t, i) => {
@@ -315,7 +325,7 @@ function Z(e, t, n, r, i) {
 			}]);
 			return;
 		}
-		let d = z(), f = d.get(l);
+		let d = R(), f = d.get(l);
 		f || (f = {
 			requests: [],
 			timer: null,
@@ -330,82 +340,82 @@ function Z(e, t, n, r, i) {
 			cacheKey: u
 		};
 		if (f.requests.push(p), r && r.addEventListener("abort", () => {
-			let e = z().get(l), t = e ? e.requests.indexOf(p) : -1;
-			e && t >= 0 && (e.requests.splice(t, 1), e.requests.length === 0 && (e.timer && clearTimeout(e.timer), z().delete(l))), i(I(r));
+			let e = R().get(l), t = e ? e.requests.indexOf(p) : -1;
+			e && t >= 0 && (e.requests.splice(t, 1), e.requests.length === 0 && (e.timer && clearTimeout(e.timer), R().delete(l))), i(F(r));
 		}, { once: !0 }), f.requests.length >= f.batchMax) {
 			Q(e, a, l);
 			return;
 		}
 		f.timer ||= setTimeout(() => Q(e, a, l), f.batchInterval);
 	});
-	return u && !r && (V().set(u, d), d.finally(() => {
-		V().delete(u);
+	return u && !r && (B().set(u, d), d.finally(() => {
+		B().delete(u);
 	}).catch(() => {})), d;
 }
 function Q(e, t, n) {
-	let r = z(), i = r.get(n);
+	let r = R(), i = r.get(n);
 	i && (r.delete(n), i.timer &&= (clearTimeout(i.timer), null), X(e, t, i.requests));
 }
 async function $(e) {
-	let { gateway: n, query: r, variables: i, operationName: a, authToken: o, workspaceToken: s, workspaceId: c, organizationId: u, tenantId: h, projectId: _, locale: v, baseUrl: x, extraHeaders: S, signal: E, suppressGlobalErrorEvent: D, keepalive: k } = e;
-	L(E);
-	let A = d(F(n, x)), M = o && !C(o) ? o : y();
-	if (!M && !e.skipAuthRetry && typeof window < "u" && !window.location.pathname.startsWith("/auth/") && ee()) {
+	let { gateway: n, query: r, variables: i, operationName: a, authToken: o, workspaceToken: s, workspaceId: c, organizationId: u, tenantId: h, projectId: _, locale: v, baseUrl: x, extraHeaders: C, signal: T, suppressGlobalErrorEvent: E, keepalive: O } = e;
+	I(T);
+	let k = d(P(n, x)), j = o && !ee(o) ? o : y();
+	if (!j && !e.skipAuthRetry && typeof window < "u" && !window.location.pathname.startsWith("/auth/") && S()) {
 		let e = await import("../utils/authErrorHandling.js");
 		await e.attemptTokenRefresh({
 			globalBaseUrl: n === "global" && x ? x : t().globalBaseUrl,
 			...e.getSharedTokenRefreshRefs()
-		}) ? M = y() : g({
+		}) ? j = y() : g({
 			operationName: a,
 			gateway: n
-		}), L(E);
+		}), I(T);
 	}
-	let N = v ?? T(), I = j({
+	let M = v ?? w(), F = A({
 		workspaceId: c,
 		organizationId: u,
 		tenantId: h,
 		projectId: _
-	}), R = {
+	}), L = {
 		"Content-Type": "application/json",
 		[G]: "true"
 	};
-	M && (R.Authorization = `Bearer ${M}`), N && (R["Accept-Language"] = N);
-	let z = w();
-	if (z?.country && (R["X-Geo-Country"] = z.country), z?.currency && (R["X-Geo-Currency"] = z.currency), z?.timezone && (R["X-Geo-Timezone"] = z.timezone), n === "workspace" ? s !== !1 : s) {
+	j && (L.Authorization = `Bearer ${j}`), M && (L["Accept-Language"] = M);
+	let R = te();
+	if (R?.country && (L["X-Geo-Country"] = R.country), R?.currency && (L["X-Geo-Currency"] = R.currency), R?.timezone && (L["X-Geo-Timezone"] = R.timezone), n === "workspace" ? s !== !1 : s) {
 		let e = typeof s == "string" ? s : b();
-		e && !f(e, I) && (e = null), !e && (s === !0 || n === "workspace" && s === void 0 || typeof s == "string") && (e = await P({
-			url: A,
-			authToken: M,
-			workspaceId: I.workspaceId,
-			organizationId: I.organizationId,
-			projectId: I.projectId,
-			locale: N,
-			signal: E,
+		e && !f(e, F) && (e = null), !e && (s === !0 || n === "workspace" && s === void 0 || typeof s == "string") && (e = await N({
+			url: k,
+			authToken: j,
+			workspaceId: F.workspaceId,
+			organizationId: F.organizationId,
+			projectId: F.projectId,
+			locale: M,
+			signal: T,
 			currentQuery: r
-		}), L(E)), e && (R["X-Workspace-Authorization"] = `Bearer ${e}`);
+		}), I(T)), e && (L["X-Workspace-Authorization"] = `Bearer ${e}`);
 	}
 	if (n === "workspace" || c) {
-		let e = I.workspaceId;
-		e && (R["x-workspace-id"] = e);
+		let e = F.workspaceId;
+		e && (L["x-workspace-id"] = e);
 	}
 	if (n === "global" || u) {
-		let e = I.organizationId;
-		e && (R["x-org-id"] = e);
+		let e = F.organizationId;
+		e && (L["x-org-id"] = e);
 	}
 	if (h) {
-		let e = typeof h == "string" ? h : O();
-		e && (R["x-tenant-id"] = e);
+		let e = typeof h == "string" ? h : D();
+		e && (L["x-tenant-id"] = e);
 	}
 	if (n === "workspace" || _) {
-		let e = I.projectId;
-		e && (R["x-project-id"] = e);
+		let e = F.projectId;
+		e && (L["x-project-id"] = e);
 	}
-	let B = l(S);
-	B && Object.assign(R, B);
-	let V = { query: r };
-	i && (V.variables = i), a && (V.operationName = a);
-	let H = async (r) => {
-		if (e.skipAuthRetry || !M || typeof window > "u" || !r?.length) return null;
+	let z = l(C);
+	z && Object.assign(L, z);
+	let B = { query: r };
+	i && (B.variables = i), a && (B.operationName = a);
+	let V = async (r) => {
+		if (e.skipAuthRetry || !j || typeof window > "u" || !r?.length) return null;
 		let i = await import("../utils/authErrorHandling.js");
 		return i.hasAuthGraphQLErrors(r) ? await i.attemptTokenRefresh({
 			globalBaseUrl: n === "global" && x ? x : t().globalBaseUrl,
@@ -421,24 +431,24 @@ async function $(e) {
 		}), null) : null;
 	};
 	try {
-		let e = await Z(A, R, V, E, k ? { keepalive: !0 } : void 0);
+		let e = await Z(k, L, B, T, O ? { keepalive: !0 } : void 0);
 		if (m(), e.errors?.length) {
-			let t = await H(e.errors);
+			let t = await V(e.errors);
 			if (t) return t;
-			D || p({ errors: e.errors }, { operationName: a });
+			E || p({ errors: e.errors }, { operationName: a });
 		}
 		return e;
 	} catch (e) {
 		let t = e.errors;
 		if (t?.length) {
-			let e = await H(t);
+			let e = await V(t);
 			if (e) return e;
 		}
-		throw D || p(e, {
+		throw E || p(e, {
 			operationName: a,
 			fallbackMessage: "We could not reach the server. Please check your connection and try again."
 		}), e;
 	}
 }
 //#endregion
-export { h as SESSION_EXPIRED_EVENT, H as clearGraphqlFetchResponseCache, Z as enqueueGraphQLFetch, P as ensureWorkspaceToken, y as getStoredAuthToken, T as getStoredLocale, D as getStoredOrganizationId, k as getStoredProjectId, E as getStoredWorkspaceId, b as getStoredWorkspaceToken, $ as graphqlFetch, F as resolveGatewayUrl };
+export { h as SESSION_EXPIRED_EVENT, V as clearGraphqlFetchResponseCache, Z as enqueueGraphQLFetch, N as ensureWorkspaceToken, y as getStoredAuthToken, w as getStoredLocale, E as getStoredOrganizationId, O as getStoredProjectId, D as getStoredTenantId, T as getStoredWorkspaceId, b as getStoredWorkspaceToken, $ as graphqlFetch, P as resolveGatewayUrl };

package/dist/shared/graphql/index.d.ts

@@ -8,3 +8,4 @@ export { WsLink, type WsLinkOptions } from './links/ws-link';
 export { ApolloClient, InMemoryCache, type NormalizedCacheObject } from '@apollo/client/core';
 export { ApolloProvider, useQuery, useMutation, useLazyQuery, useSubscription, useApolloClient, } from '@apollo/client/react';
 export { gql } from '@apollo/client/core';
+export { prepareWorkspaceRequest, type WorkspaceRequestIntent } from './prepareWorkspaceRequest';

package/dist/shared/graphql/prepareWorkspaceRequest.d.ts

@@ -0,0 +1,15 @@
+export interface WorkspaceRequestIntent {
+    url: string;
+    authToken: string;
+    actorId: string;
+    workspaceId: string;
+    tenantId?: string;
+    workspaceToken?: string;
+    currentQuery: string;
+    signal?: AbortSignal;
+}
+/** Immutable authority check for transports that must not replay mutations. */
+export declare function prepareWorkspaceRequest(intent: WorkspaceRequestIntent): Promise<{
+    workspaceToken: string;
+    assertCurrent(): void;
+}>;

package/dist/shared/graphql/prepareWorkspaceRequest.js

@@ -0,0 +1,56 @@
+import { getActiveProfileId as e, getActiveUser as t } from "../providers/shell/ProfileStorageManager.js";
+import { validateGatewayBaseUrl as n } from "./security.js";
+import { getWorkspaceTokenPayload as r, isWorkspaceTokenValidForContext as i } from "./workspaceToken.js";
+import { ensureWorkspaceToken as a, getStoredAuthToken as o, getStoredOrganizationId as s, getStoredProjectId as c, getStoredTenantId as l, getStoredWorkspaceId as u, getStoredWorkspaceToken as d } from "./fetch.js";
+//#region src/shared/graphql/prepareWorkspaceRequest.ts
+async function f(f) {
+	let p = {
+		...f,
+		url: n(f.url)
+	};
+	if (p.signal?.aborted) throw new DOMException("The operation was aborted.", "AbortError");
+	let m = () => ({
+		profileId: e(),
+		authToken: o(),
+		actorId: t()?.id,
+		workspaceId: u(),
+		organizationId: s(),
+		tenantId: l(),
+		projectId: c()
+	}), h = m(), g = JSON.stringify(h), _ = () => JSON.stringify(m()) === g, v = () => {
+		if (!_()) throw Error("The active account or workspace changed. Review the action again.");
+	};
+	if (!h.profileId || !p.authToken || !p.actorId || !p.workspaceId || h.authToken !== p.authToken || h.actorId !== p.actorId || h.workspaceId !== p.workspaceId || (h.tenantId ?? void 0) !== p.tenantId) throw Error("The active account or workspace changed. Review the action again.");
+	let y = {
+		workspaceId: p.workspaceId,
+		organizationId: h.organizationId,
+		tenantId: h.tenantId,
+		projectId: h.projectId
+	}, b = (e, t) => {
+		let n = r(e);
+		return t === p.workspaceId && n !== null && n.tokenType === "WORKSPACE_ACCESS" && n.sub === p.actorId && typeof n.exp == "number" && Number.isFinite(n.exp) && n.exp * 1e3 > Date.now() + 3e4 && n.workspaceId === y.workspaceId && (n.organizationId ?? null) === y.organizationId && (n.tenantId ?? null) === y.tenantId && (n.projectId ?? null) === y.projectId && i(e, y);
+	}, x = d(), S = x && b(x, p.workspaceId) ? x : p.workspaceToken;
+	if ((!S || !b(S, p.workspaceId)) && (v(), S = await a({
+		url: p.url,
+		authToken: p.authToken,
+		workspaceId: p.workspaceId,
+		organizationId: h.organizationId ?? void 0,
+		projectId: h.projectId ?? void 0,
+		signal: p.signal,
+		currentQuery: p.currentQuery,
+		issuanceGuard: {
+			identityKey: g,
+			isCurrent: _,
+			accepts: b
+		}
+	}) ?? void 0), v(), !S || !b(S, p.workspaceId)) throw Error("Unable to renew workspace authority. No action was sent.");
+	let C = S;
+	return {
+		workspaceToken: C,
+		assertCurrent: () => {
+			if (v(), !b(C, p.workspaceId)) throw Error("Workspace authority expired. Review the action again.");
+		}
+	};
+}
+//#endregion
+export { f as prepareWorkspaceRequest };

package/dist/shared/graphql/workspaceToken.d.ts

@@ -6,6 +6,7 @@ export interface WorkspaceTokenContext {
     workspaceWide?: boolean;
 }
 export interface WorkspaceTokenPayload extends WorkspaceTokenContext {
+    sub?: string;
     exp?: number;
     tokenType?: string;
 }

package/dist/shared/graphql/workspaceToken.js

@@ -22,6 +22,7 @@ function r(e) {
 		tenantId: n(r, "tenantId"),
 		projectId: n(r, "projectId"),
 		tokenType: n(r, "tokenType"),
+		...typeof r.sub == "string" ? { sub: r.sub } : {},
 		exp: typeof r.exp == "number" ? r.exp : void 0
 	} : null;
 }

package/dist/shared-graphql.js

@@ -5,6 +5,7 @@ import { createGraphQLClient as f, getGlobalClient as p, getWorkspaceClient as m
 import { GatewayProvider as _, useGateway as v, useGatewayClient as y, useSafeGateway as b, useSafeGatewayClient as x } from "./shared/graphql/GatewayContext.js";
 import { useHasAuthToken as S } from "./shared/graphql/useHasAuthToken.js";
 import { WsLink as C } from "./shared/graphql/links/ws-link.js";
-import { ApolloClient as w, InMemoryCache as T, gql as E } from "@apollo/client/core";
-import { ApolloProvider as D, useApolloClient as O, useLazyQuery as k, useMutation as A, useQuery as j, useSubscription as M } from "@apollo/client/react";
-export { w as ApolloClient, D as ApolloProvider, _ as GatewayProvider, T as InMemoryCache, d as SSELink, C as WsLink, n as clearGraphqlFetchResponseCache, f as createGraphQLClient, p as getGlobalClient, r as getStoredAuthToken, i as getStoredLocale, a as getStoredOrganizationId, o as getStoredProjectId, s as getStoredWorkspaceId, c as getStoredWorkspaceToken, m as getWorkspaceClient, e as getWorkspaceTokenPayload, E as gql, l as graphqlFetch, h as initializeAppClients, t as isWorkspaceTokenValidForContext, g as resetAppClients, u as resolveGatewayUrl, O as useApolloClient, v as useGateway, y as useGatewayClient, S as useHasAuthToken, k as useLazyQuery, A as useMutation, j as useQuery, b as useSafeGateway, x as useSafeGatewayClient, M as useSubscription };
+import { prepareWorkspaceRequest as w } from "./shared/graphql/prepareWorkspaceRequest.js";
+import { ApolloClient as T, InMemoryCache as E, gql as D } from "@apollo/client/core";
+import { ApolloProvider as O, useApolloClient as k, useLazyQuery as A, useMutation as j, useQuery as M, useSubscription as N } from "@apollo/client/react";
+export { T as ApolloClient, O as ApolloProvider, _ as GatewayProvider, E as InMemoryCache, d as SSELink, C as WsLink, n as clearGraphqlFetchResponseCache, f as createGraphQLClient, p as getGlobalClient, r as getStoredAuthToken, i as getStoredLocale, a as getStoredOrganizationId, o as getStoredProjectId, s as getStoredWorkspaceId, c as getStoredWorkspaceToken, m as getWorkspaceClient, e as getWorkspaceTokenPayload, D as gql, l as graphqlFetch, h as initializeAppClients, t as isWorkspaceTokenValidForContext, w as prepareWorkspaceRequest, g as resetAppClients, u as resolveGatewayUrl, k as useApolloClient, v as useGateway, y as useGatewayClient, S as useHasAuthToken, A as useLazyQuery, j as useMutation, M as useQuery, b as useSafeGateway, x as useSafeGatewayClient, N as useSubscription };

package/dist/shared.js

@@ -21,121 +21,122 @@ import { createGraphQLClient as ot, getGlobalClient as st, getWorkspaceClient as
 import { GatewayProvider as dt, useGateway as ft, useGatewayClient as pt, useSafeGateway as mt, useSafeGatewayClient as ht } from "./shared/graphql/GatewayContext.js";
 import { useHasAuthToken as gt } from "./shared/graphql/useHasAuthToken.js";
 import { WsLink as _t } from "./shared/graphql/links/ws-link.js";
-import { ApolloClient as vt, ApolloProvider as yt, InMemoryCache as bt, gql as xt, useApolloClient as St, useLazyQuery as Ct, useMutation as wt, useQuery as Tt, useSubscription as Et } from "./shared-graphql.js";
-import { attemptTokenRefresh as Dt, clearAuthSessionStorage as Ot, hasAuthGraphQLErrors as kt, isAuthGraphQLError as At, isAuthNetworkError as jt, redirectToLogin as Mt } from "./shared/utils/authErrorHandling.js";
-import { clearSSoCookie as Nt, clearShellSsoCookies as Pt, getSSoCookie as Ft, isSharedSsoCookieDomain as It, isTrustedSsoOrigin as Lt, readShellSsoCookie as Rt, setSSoCookie as zt, setShellSsoCookies as Bt } from "./shared/utils/authCookie.js";
-import { getNativeBridge as Vt } from "./shared/native/bridge.js";
-import { getPlatform as Ht, isAndroid as Ut, isElectron as Wt, isIOS as Gt, isInstalledApp as Kt, isNative as qt, isStandalonePWA as Jt, isWeb as Yt, isWebBrowser as Xt } from "./shared/native/platform.js";
-import { SSORedirectSpinner as Zt, checkRemoteSLO as Qt, checkSLO as $t, clearLocalAuthState as en, getSSORedirectUrl as tn } from "./shared/components/SSORedirectGuard.js";
-import { SSO_DEPOSITED_PARAM as nn, beginSsoNavigation as rn, buildSsoDepositUrl as an, clearSsoDepositState as on, clearSsoNavigation as sn, consumeSsoDepositMarker as cn, isSsoNavigationPending as ln, markSsoDepositDone as un, markSsoDepositPending as dn, mintSsoSessionTokens as fn, readSsoDepositState as pn, shouldAttemptSsoDeposit as mn } from "./shared/utils/ssoDeposit.js";
-import { AppInitializer as hn, useRegistryHelpers as gn, useShellNavigate as _n } from "./shared/utils/appHelpers.js";
-import { LogLevel as vn } from "./shared/logger/types.js";
-import { Logger as yn } from "./shared/logger/Logger.js";
-import { LogManager as bn, logManager as xn } from "./shared/logger/LogManager.js";
-import { ConsoleTransport as Sn } from "./shared/logger/ConsoleTransport.js";
-import { clearUserContext as Cn, initializeLogger as wn, setUserContext as Tn } from "./shared/utils/loggerInit.js";
-import { createProfileScopedStorage as En, getProfileScopedKey as Dn } from "./shared/utils/profileScopedStorage.js";
-import { QUOTA_EXHAUSTED_CODE as On, RESOURCE_CAP_EXCEEDED_CODE as kn, STORAGE_QUOTA_EXCEEDED_CODE as An, UPGRADE_ERROR_CODES as jn, buildQuotaExhaustedMessage as Mn, extractQuotaExhaustedExtensions as Nn, extractUpgradeErrorExtensions as Pn, isQuotaExhaustedError as Fn, isUpgradeError as In } from "./shared/utils/quotaErrors.js";
-import { INLINE_ENCODE as Ln, downscaleImage as Rn, selectInlineBase64 as zn } from "./shared/utils/imageDownscale.js";
-import { cn as Bn } from "./shared-utils.js";
-import { nativeActionSheet as Vn, nativeConfirm as Hn, nativeCopyText as Un, nativeImpact as Wn, nativeNotify as Gn, nativeOpenUrl as Kn, nativeSelection as qn, nativeShare as Jn, nativeToast as Yn } from "./shared/native/consumers.js";
-import { SafeAreaView as Xn } from "./shared/native/SafeAreaView.js";
-import { readInitialNetworkStatus as Zn, reduceNetworkStatus as Qn, useNetworkStatus as $n } from "./shared/native/hooks/useNetworkStatus.js";
-import { PULL_TO_REFRESH_THRESHOLD as er, computePullOffset as tr, computePullProgress as nr, usePullToRefresh as rr } from "./shared/native/hooks/usePullToRefresh.js";
-import { useReturnFocus as ir } from "./shared/hooks/useReturnFocus.js";
-import { ActorIdentity as ar } from "./shared/actors/ActorIdentity.js";
-import { buildActorFallback as or, useActorProfiles as sr } from "./shared/actors/useActorProfiles.js";
-import { ErrorBoundary as cr } from "./shared/components/ErrorBoundary.js";
-import { RequireAuth as lr, RequireGuest as ur } from "./shared/components/RequireAuth.js";
-import { PermissionButton as dr, PermissionGate as fr, PermissionLink as pr } from "./shared/components/PermissionGate.js";
-import { AccessDenied as mr, PermissionDenied as hr } from "./shared/components/AccessDenied.js";
-import { ErrorFallback as gr } from "./shared/components/ErrorFallback.js";
-import { LoadingFallback as _r, PageLoadingFallback as vr, SectionLoadingFallback as yr } from "./shared/components/LoadingFallback.js";
-import { MicrofrontendErrorBoundary as br } from "./shared/components/MicrofrontendErrorBoundary.js";
-import { ConditionalShell as xr } from "./shared/components/ConditionalShell.js";
-import { usePWA as Sr } from "./shared/hooks/usePWA.js";
-import { PWAInstallBanner as Cr } from "./shared/components/PWAInstallBanner.js";
-import { ErrorBoundary as wr } from "./shared/components/AppErrorBoundary.js";
-import { FeatureFlagProvider as Tr, useFeatureFlags as Er } from "./shared/feature-flags/FeatureFlagProvider.js";
-import { useFeatureFlag as Dr, useFeatureFlagDetails as Or, useFeatureFlagValue as kr } from "./shared/feature-flags/useFeatureFlag.js";
-import { FeatureGate as Ar } from "./shared/feature-flags/FeatureGate.js";
+import { prepareWorkspaceRequest as vt } from "./shared/graphql/prepareWorkspaceRequest.js";
+import { ApolloClient as yt, ApolloProvider as bt, InMemoryCache as xt, gql as St, useApolloClient as Ct, useLazyQuery as wt, useMutation as Tt, useQuery as Et, useSubscription as Dt } from "./shared-graphql.js";
+import { attemptTokenRefresh as Ot, clearAuthSessionStorage as kt, hasAuthGraphQLErrors as At, isAuthGraphQLError as jt, isAuthNetworkError as Mt, redirectToLogin as Nt } from "./shared/utils/authErrorHandling.js";
+import { clearSSoCookie as Pt, clearShellSsoCookies as Ft, getSSoCookie as It, isSharedSsoCookieDomain as Lt, isTrustedSsoOrigin as Rt, readShellSsoCookie as zt, setSSoCookie as Bt, setShellSsoCookies as Vt } from "./shared/utils/authCookie.js";
+import { getNativeBridge as Ht } from "./shared/native/bridge.js";
+import { getPlatform as Ut, isAndroid as Wt, isElectron as Gt, isIOS as Kt, isInstalledApp as qt, isNative as Jt, isStandalonePWA as Yt, isWeb as Xt, isWebBrowser as Zt } from "./shared/native/platform.js";
+import { SSORedirectSpinner as Qt, checkRemoteSLO as $t, checkSLO as en, clearLocalAuthState as tn, getSSORedirectUrl as nn } from "./shared/components/SSORedirectGuard.js";
+import { SSO_DEPOSITED_PARAM as rn, beginSsoNavigation as an, buildSsoDepositUrl as on, clearSsoDepositState as sn, clearSsoNavigation as cn, consumeSsoDepositMarker as ln, isSsoNavigationPending as un, markSsoDepositDone as dn, markSsoDepositPending as fn, mintSsoSessionTokens as pn, readSsoDepositState as mn, shouldAttemptSsoDeposit as hn } from "./shared/utils/ssoDeposit.js";
+import { AppInitializer as gn, useRegistryHelpers as _n, useShellNavigate as vn } from "./shared/utils/appHelpers.js";
+import { LogLevel as yn } from "./shared/logger/types.js";
+import { Logger as bn } from "./shared/logger/Logger.js";
+import { LogManager as xn, logManager as Sn } from "./shared/logger/LogManager.js";
+import { ConsoleTransport as Cn } from "./shared/logger/ConsoleTransport.js";
+import { clearUserContext as wn, initializeLogger as Tn, setUserContext as En } from "./shared/utils/loggerInit.js";
+import { createProfileScopedStorage as Dn, getProfileScopedKey as On } from "./shared/utils/profileScopedStorage.js";
+import { QUOTA_EXHAUSTED_CODE as kn, RESOURCE_CAP_EXCEEDED_CODE as An, STORAGE_QUOTA_EXCEEDED_CODE as jn, UPGRADE_ERROR_CODES as Mn, buildQuotaExhaustedMessage as Nn, extractQuotaExhaustedExtensions as Pn, extractUpgradeErrorExtensions as Fn, isQuotaExhaustedError as In, isUpgradeError as Ln } from "./shared/utils/quotaErrors.js";
+import { INLINE_ENCODE as Rn, downscaleImage as zn, selectInlineBase64 as Bn } from "./shared/utils/imageDownscale.js";
+import { cn as Vn } from "./shared-utils.js";
+import { nativeActionSheet as Hn, nativeConfirm as Un, nativeCopyText as Wn, nativeImpact as Gn, nativeNotify as Kn, nativeOpenUrl as qn, nativeSelection as Jn, nativeShare as Yn, nativeToast as Xn } from "./shared/native/consumers.js";
+import { SafeAreaView as Zn } from "./shared/native/SafeAreaView.js";
+import { readInitialNetworkStatus as Qn, reduceNetworkStatus as $n, useNetworkStatus as er } from "./shared/native/hooks/useNetworkStatus.js";
+import { PULL_TO_REFRESH_THRESHOLD as tr, computePullOffset as nr, computePullProgress as rr, usePullToRefresh as ir } from "./shared/native/hooks/usePullToRefresh.js";
+import { useReturnFocus as ar } from "./shared/hooks/useReturnFocus.js";
+import { ActorIdentity as or } from "./shared/actors/ActorIdentity.js";
+import { buildActorFallback as sr, useActorProfiles as cr } from "./shared/actors/useActorProfiles.js";
+import { ErrorBoundary as lr } from "./shared/components/ErrorBoundary.js";
+import { RequireAuth as ur, RequireGuest as dr } from "./shared/components/RequireAuth.js";
+import { PermissionButton as fr, PermissionGate as pr, PermissionLink as mr } from "./shared/components/PermissionGate.js";
+import { AccessDenied as hr, PermissionDenied as gr } from "./shared/components/AccessDenied.js";
+import { ErrorFallback as _r } from "./shared/components/ErrorFallback.js";
+import { LoadingFallback as vr, PageLoadingFallback as yr, SectionLoadingFallback as br } from "./shared/components/LoadingFallback.js";
+import { MicrofrontendErrorBoundary as xr } from "./shared/components/MicrofrontendErrorBoundary.js";
+import { ConditionalShell as Sr } from "./shared/components/ConditionalShell.js";
+import { usePWA as Cr } from "./shared/hooks/usePWA.js";
+import { PWAInstallBanner as wr } from "./shared/components/PWAInstallBanner.js";
+import { ErrorBoundary as Tr } from "./shared/components/AppErrorBoundary.js";
+import { FeatureFlagProvider as Er, useFeatureFlags as Dr } from "./shared/feature-flags/FeatureFlagProvider.js";
+import { useFeatureFlag as Or, useFeatureFlagDetails as kr, useFeatureFlagValue as Ar } from "./shared/feature-flags/useFeatureFlag.js";
+import { FeatureGate as jr } from "./shared/feature-flags/FeatureGate.js";
 import "./shared-feature-flags.js";
-import { ContextConversationWidget as jr } from "./shared/components/ContextConversationWidget.js";
-import { detectPlatform as Mr, formatKeyCombo as Nr, getDisplayKeysForPlatform as Pr, getShortcutLabel as Fr, isMac as Ir, isMobileDevice as Lr, isTabletDevice as Rr, matchesKeyCombo as zr, normalizeKey as Br, normalizePlatformCombo as Vr, parseKeyCombo as Hr, shouldEnableKeyboardShortcuts as Ur, shouldIgnoreShortcut as Wr } from "./shared/keyboard/utils.js";
-import { KeyboardHelpDialogWrapper as Gr } from "./shared/components/KeyboardHelpDialogWrapper.js";
-import { QuotaMeter as Kr } from "./shared/components/QuotaMeter.js";
-import { UPGRADE_PROMPT_EVENT as qr, UpgradePromptModal as Jr, dispatchUpgradePrompt as Yr } from "./shared/components/UpgradePromptModal.js";
-import { UpgradeInlineBanner as Xr } from "./shared/components/UpgradeInlineBanner.js";
-import { useVoiceInput as Zr } from "./shared/components/assistantWidget/useVoiceInput.js";
-import { ASSISTANT_WIDGET_TOGGLE_EVENT as Qr, AssistantWidget as $r } from "./shared/components/assistantWidget/AssistantWidget.js";
-import { Markdown as ei } from "./shared/components/Markdown.js";
-import { useNativePlatform as ti } from "./shared/native/hooks/useNativePlatform.js";
-import { useSafeArea as ni } from "./shared/native/hooks/useSafeArea.js";
-import { useNativeKeyboard as ri } from "./shared/native/hooks/useNativeKeyboard.js";
-import { useAppState as ii } from "./shared/native/hooks/useAppState.js";
-import { useDeviceInfo as ai } from "./shared/native/hooks/useDeviceInfo.js";
-import { useHaptics as oi } from "./shared/native/hooks/useHaptics.js";
-import { useStatusBar as si } from "./shared/native/hooks/useStatusBar.js";
-import { resolveActionSheetOutcome as ci, useActionSheet as li } from "./shared/native/hooks/useActionSheet.js";
-import { useDesktop as ui } from "./shared/native/hooks/useDesktop.js";
-import { useDesktopUpdateState as di } from "./shared/native/hooks/useDesktopUpdateState.js";
-import { useDesktopWindowState as fi } from "./shared/native/hooks/useDesktopWindowState.js";
-import { DesktopUpdateToast as pi } from "./shared/components/DesktopUpdateToast.js";
+import { ContextConversationWidget as Mr } from "./shared/components/ContextConversationWidget.js";
+import { detectPlatform as Nr, formatKeyCombo as Pr, getDisplayKeysForPlatform as Fr, getShortcutLabel as Ir, isMac as Lr, isMobileDevice as Rr, isTabletDevice as zr, matchesKeyCombo as Br, normalizeKey as Vr, normalizePlatformCombo as Hr, parseKeyCombo as Ur, shouldEnableKeyboardShortcuts as Wr, shouldIgnoreShortcut as Gr } from "./shared/keyboard/utils.js";
+import { KeyboardHelpDialogWrapper as Kr } from "./shared/components/KeyboardHelpDialogWrapper.js";
+import { QuotaMeter as qr } from "./shared/components/QuotaMeter.js";
+import { UPGRADE_PROMPT_EVENT as Jr, UpgradePromptModal as Yr, dispatchUpgradePrompt as Xr } from "./shared/components/UpgradePromptModal.js";
+import { UpgradeInlineBanner as Zr } from "./shared/components/UpgradeInlineBanner.js";
+import { useVoiceInput as Qr } from "./shared/components/assistantWidget/useVoiceInput.js";
+import { ASSISTANT_WIDGET_TOGGLE_EVENT as $r, AssistantWidget as ei } from "./shared/components/assistantWidget/AssistantWidget.js";
+import { Markdown as ti } from "./shared/components/Markdown.js";
+import { useNativePlatform as ni } from "./shared/native/hooks/useNativePlatform.js";
+import { useSafeArea as ri } from "./shared/native/hooks/useSafeArea.js";
+import { useNativeKeyboard as ii } from "./shared/native/hooks/useNativeKeyboard.js";
+import { useAppState as ai } from "./shared/native/hooks/useAppState.js";
+import { useDeviceInfo as oi } from "./shared/native/hooks/useDeviceInfo.js";
+import { useHaptics as si } from "./shared/native/hooks/useHaptics.js";
+import { useStatusBar as ci } from "./shared/native/hooks/useStatusBar.js";
+import { resolveActionSheetOutcome as li, useActionSheet as ui } from "./shared/native/hooks/useActionSheet.js";
+import { useDesktop as di } from "./shared/native/hooks/useDesktop.js";
+import { useDesktopUpdateState as fi } from "./shared/native/hooks/useDesktopUpdateState.js";
+import { useDesktopWindowState as pi } from "./shared/native/hooks/useDesktopWindowState.js";
+import { DesktopUpdateToast as mi } from "./shared/components/DesktopUpdateToast.js";
 import "./shared-components.js";
-import { DevtoolsSink as mi } from "./shared/events/sinks/DevtoolsSink.js";
-import { BroadcastChannelSink as hi } from "./shared/events/sinks/BroadcastChannelSink.js";
-import { BackendAuditSink as gi } from "./shared/events/sinks/BackendAuditSink.js";
-import { AnalyticsConsentBanner as _i, RybbitSink as vi, readAnalyticsConsent as yi, readAnalyticsConsentChoice as bi, setAnalyticsConsent as xi } from "./shared/events/sinks/RybbitSink.js";
-import { OtelBrowserSink as Si } from "./shared/events/sinks/OtelBrowserSink.js";
-import { EventBusProvider as Ci, createEventBus as wi, useEvent as Ti, useEventBus as Ei, useEventEmitter as Di } from "./shared-events.js";
-import { useDebounce as Oi } from "./shared/hooks/useDebounce.js";
-import { useThrottle as ki } from "./shared/hooks/useThrottle.js";
-import { BREAKPOINTS as Ai, useBreakpoint as ji, useMobileBreakpoint as Mi } from "./shared/hooks/useBreakpoint.js";
-import { useOnClickOutside as Ni, useOnClickOutsideWithRef as Pi } from "./shared/hooks/useOnClickOutside.js";
-import { useKeyPress as Fi, useKeyboardShortcut as Ii } from "./shared/hooks/useKeyPress.js";
-import { useExclusiveMenu as Li } from "./shared/hooks/useExclusiveMenu.js";
-import { useLocalStorage as Ri } from "./shared/hooks/useLocalStorage.js";
-import { useSessionStorage as zi } from "./shared/hooks/useSessionStorage.js";
-import { usePrevious as Bi, usePreviousDistinct as Vi, usePreviousHistory as Hi } from "./shared/hooks/usePrevious.js";
-import { useConditionalToggle as Ui, useToggle as Wi, useToggleObject as Gi } from "./shared/hooks/useToggle.js";
-import { usePagination as Ki } from "./shared/hooks/usePagination.js";
-import { useAsync as qi, useAsyncImmediate as Ji } from "./shared/hooks/useAsync.js";
-import { MODIFIER_KEYS as Yi, PLATFORM_TYPES as Xi } from "./shared/keyboard/types.js";
-import { useKeyboardShortcuts as Zi } from "./shared/keyboard/useKeyboardShortcuts.js";
-import { useHotkeys as Qi } from "./shared/keyboard/useHotkeys.js";
-import { useShortcutHelp as $i } from "./shared/keyboard/useShortcutHelp.js";
-import { GLOBAL_SHORTCUT_CATEGORIES as ea, createGlobalShortcuts as ta, getGlobalShortcutsByCategory as na, mergeShortcuts as ra } from "./shared/keyboard/globalShortcuts.js";
-import { useLogger as ia } from "./shared/logger/useLogger.js";
-import { useHasAnimated as aa } from "./shared/hooks/useHasAnimated.js";
-import { useReferralAttribution as oa } from "./shared/hooks/useReferralAttribution.js";
-import { useRecordProductVisit as sa } from "./shared/hooks/useRecordProductVisit.js";
-import { PUSH_DEVICE_ID_STORAGE_KEY as ca, getOrCreatePushDeviceId as la, registerPushDevice as ua, unregisterPushDevice as da } from "./shared/native/push-registration.js";
-import { usePushDeviceRegistration as fa } from "./shared/hooks/usePushDeviceRegistration.js";
-import { QUOTA_EXHAUSTED_EVENT as pa, dispatchQuotaExhausted as ma, useQuotaErrorToast as ha } from "./shared/hooks/useQuotaErrorToast.js";
-import { PLAN_USAGE_SNAPSHOT_EVENT as ga, publishPlanUsageSnapshot as _a, useUpgradePrompt as va } from "./shared/hooks/useUpgradePrompt.js";
-import { appendContextToPath as ya, useCurrentContextSearchParams as ba } from "./shared/hooks/useCurrentContextSearchParams.js";
-import { UNSAVED_CHANGE_LABEL_MAX as xa, listUnsavedChanges as Sa, registerUnsavedChange as Ca, unsavedChangesBlocking as wa, useUnsavedChanges as Ta } from "./shared/navigation/unsavedChanges.js";
-import { MicrofrontendContext as Ea, useMicrofrontendContext as Da } from "./shared-hooks.js";
-import { withTourProgressStatus as Oa } from "./shared/tours/progress.js";
-import { detectDeviceType as ka, getResponsiveSelector as Aa } from "./shared/tours/types.js";
-import { useTourPlayer as ja } from "./shared/tours/useTourPlayer.js";
-import { TourSpotlight as Ma } from "./shared/tours/TourSpotlight.js";
-import { TourTooltip as Na } from "./shared/tours/TourTooltip.js";
-import { TourPlayerProvider as Pa, useIsTourPlaying as Fa, useStartTour as Ia, useStopTour as La, useTourPlayerContext as Ra } from "./shared/tours/TourPlayerProvider.js";
-import { TourPlayer as za, TourTriggerButton as Ba, usePlayTour as Va } from "./shared/tours/TourPlayer.js";
-import { getTourContextRank as Ha, getTourRouteCatalog as Ua, getTourRouteModules as Wa, getTourRoutePages as Ga, isTourVisibleForContext as Ka, normalizeTourPath as qa, registerTourRouteCatalog as Ja, resolveTourTargetPath as Ya } from "./shared/tours/routeCatalog.js";
-import { ToursProvider as Xa, useAutoStartTour as Za, useSafeToursContext as Qa, useTours as $a, useToursContext as eo } from "./shared/tours/ToursContext.js";
-import { TourInitializer as to } from "./shared/tours/TourInitializer.js";
-import { AppShellProvider as no, resolveAppShellObservabilityConfig as ro } from "./shared/providers/AppShellProvider.js";
-import { MicrofrontendProvider as io } from "./shared-providers.js";
-import { TourTrigger as ao } from "./shared/tours/TourTrigger.js";
+import { DevtoolsSink as hi } from "./shared/events/sinks/DevtoolsSink.js";
+import { BroadcastChannelSink as gi } from "./shared/events/sinks/BroadcastChannelSink.js";
+import { BackendAuditSink as _i } from "./shared/events/sinks/BackendAuditSink.js";
+import { AnalyticsConsentBanner as vi, RybbitSink as yi, readAnalyticsConsent as bi, readAnalyticsConsentChoice as xi, setAnalyticsConsent as Si } from "./shared/events/sinks/RybbitSink.js";
+import { OtelBrowserSink as Ci } from "./shared/events/sinks/OtelBrowserSink.js";
+import { EventBusProvider as wi, createEventBus as Ti, useEvent as Ei, useEventBus as Di, useEventEmitter as Oi } from "./shared-events.js";
+import { useDebounce as ki } from "./shared/hooks/useDebounce.js";
+import { useThrottle as Ai } from "./shared/hooks/useThrottle.js";
+import { BREAKPOINTS as ji, useBreakpoint as Mi, useMobileBreakpoint as Ni } from "./shared/hooks/useBreakpoint.js";
+import { useOnClickOutside as Pi, useOnClickOutsideWithRef as Fi } from "./shared/hooks/useOnClickOutside.js";
+import { useKeyPress as Ii, useKeyboardShortcut as Li } from "./shared/hooks/useKeyPress.js";
+import { useExclusiveMenu as Ri } from "./shared/hooks/useExclusiveMenu.js";
+import { useLocalStorage as zi } from "./shared/hooks/useLocalStorage.js";
+import { useSessionStorage as Bi } from "./shared/hooks/useSessionStorage.js";
+import { usePrevious as Vi, usePreviousDistinct as Hi, usePreviousHistory as Ui } from "./shared/hooks/usePrevious.js";
+import { useConditionalToggle as Wi, useToggle as Gi, useToggleObject as Ki } from "./shared/hooks/useToggle.js";
+import { usePagination as qi } from "./shared/hooks/usePagination.js";
+import { useAsync as Ji, useAsyncImmediate as Yi } from "./shared/hooks/useAsync.js";
+import { MODIFIER_KEYS as Xi, PLATFORM_TYPES as Zi } from "./shared/keyboard/types.js";
+import { useKeyboardShortcuts as Qi } from "./shared/keyboard/useKeyboardShortcuts.js";
+import { useHotkeys as $i } from "./shared/keyboard/useHotkeys.js";
+import { useShortcutHelp as ea } from "./shared/keyboard/useShortcutHelp.js";
+import { GLOBAL_SHORTCUT_CATEGORIES as ta, createGlobalShortcuts as na, getGlobalShortcutsByCategory as ra, mergeShortcuts as ia } from "./shared/keyboard/globalShortcuts.js";
+import { useLogger as aa } from "./shared/logger/useLogger.js";
+import { useHasAnimated as oa } from "./shared/hooks/useHasAnimated.js";
+import { useReferralAttribution as sa } from "./shared/hooks/useReferralAttribution.js";
+import { useRecordProductVisit as ca } from "./shared/hooks/useRecordProductVisit.js";
+import { PUSH_DEVICE_ID_STORAGE_KEY as la, getOrCreatePushDeviceId as ua, registerPushDevice as da, unregisterPushDevice as fa } from "./shared/native/push-registration.js";
+import { usePushDeviceRegistration as pa } from "./shared/hooks/usePushDeviceRegistration.js";
+import { QUOTA_EXHAUSTED_EVENT as ma, dispatchQuotaExhausted as ha, useQuotaErrorToast as ga } from "./shared/hooks/useQuotaErrorToast.js";
+import { PLAN_USAGE_SNAPSHOT_EVENT as _a, publishPlanUsageSnapshot as va, useUpgradePrompt as ya } from "./shared/hooks/useUpgradePrompt.js";
+import { appendContextToPath as ba, useCurrentContextSearchParams as xa } from "./shared/hooks/useCurrentContextSearchParams.js";
+import { UNSAVED_CHANGE_LABEL_MAX as Sa, listUnsavedChanges as Ca, registerUnsavedChange as wa, unsavedChangesBlocking as Ta, useUnsavedChanges as Ea } from "./shared/navigation/unsavedChanges.js";
+import { MicrofrontendContext as Da, useMicrofrontendContext as Oa } from "./shared-hooks.js";
+import { withTourProgressStatus as ka } from "./shared/tours/progress.js";
+import { detectDeviceType as Aa, getResponsiveSelector as ja } from "./shared/tours/types.js";
+import { useTourPlayer as Ma } from "./shared/tours/useTourPlayer.js";
+import { TourSpotlight as Na } from "./shared/tours/TourSpotlight.js";
+import { TourTooltip as Pa } from "./shared/tours/TourTooltip.js";
+import { TourPlayerProvider as Fa, useIsTourPlaying as Ia, useStartTour as La, useStopTour as Ra, useTourPlayerContext as za } from "./shared/tours/TourPlayerProvider.js";
+import { TourPlayer as Ba, TourTriggerButton as Va, usePlayTour as Ha } from "./shared/tours/TourPlayer.js";
+import { getTourContextRank as Ua, getTourRouteCatalog as Wa, getTourRouteModules as Ga, getTourRoutePages as Ka, isTourVisibleForContext as qa, normalizeTourPath as Ja, registerTourRouteCatalog as Ya, resolveTourTargetPath as Xa } from "./shared/tours/routeCatalog.js";
+import { ToursProvider as Za, useAutoStartTour as Qa, useSafeToursContext as $a, useTours as eo, useToursContext as to } from "./shared/tours/ToursContext.js";
+import { TourInitializer as no } from "./shared/tours/TourInitializer.js";
+import { AppShellProvider as ro, resolveAppShellObservabilityConfig as io } from "./shared/providers/AppShellProvider.js";
+import { MicrofrontendProvider as ao } from "./shared-providers.js";
+import { TourTrigger as oo } from "./shared/tours/TourTrigger.js";
 import "./shared-tours.js";
-import { acknowledgeNativePurchase as oo, getNativeProducts as so, getNativePurchases as co, installNativeIAP as lo, isNativeIAPAvailable as uo, purchaseNativeProduct as fo, restoreNativePurchases as po } from "./shared/native/purchases.js";
-import { getNativeEntryRoutes as mo, shouldShowNativeWelcome as ho } from "./shared/native/entry.js";
-import { getPushOptInController as go, registerPushOptInController as _o } from "./shared/native/push-optin.js";
+import { acknowledgeNativePurchase as so, getNativeProducts as co, getNativePurchases as lo, installNativeIAP as uo, isNativeIAPAvailable as fo, purchaseNativeProduct as po, restoreNativePurchases as mo } from "./shared/native/purchases.js";
+import { getNativeEntryRoutes as ho, shouldShowNativeWelcome as go } from "./shared/native/entry.js";
+import { getPushOptInController as _o, registerPushOptInController as vo } from "./shared/native/push-optin.js";
 import "./shared-native.js";
 import "./shared/actors/index.js";
 //#region src/shared/index.ts
-var vo = "1.0.0";
+var yo = "1.0.0";
 //#endregion
-export { Qr as ASSISTANT_WIDGET_TOGGLE_EVENT, mr as AccessDenied, ar as ActorIdentity, _i as AnalyticsConsentBanner, vt as ApolloClient, yt as ApolloProvider, wr as AppErrorBoundary, hn as AppInitializer, no as AppShellProvider, $r as AssistantWidget, Ve as BACKEND_ERROR_EVENT, Se as BOTMANOR_PRODUCT_SLUG, Ai as BREAKPOINTS, gi as BackendAuditSink, hi as BroadcastChannelSink, Oe as COMMON_SHELL_LESS_ROUTES, He as CONNECTION_STATUS_EVENT, xr as ConditionalShell, Sn as ConsoleTransport, jr as ContextConversationWidget, Pe as DEFAULT_PAGE_SIZE, ke as DEFAULT_SHELL_CONFIG, R as DESKTOP_UPDATE_UNSUPPORTED, z as DESKTOP_WINDOW_STATE_DEFAULT, pi as DesktopUpdateToast, mi as DevtoolsSink, cr as ErrorBoundary, gr as ErrorFallback, Ci as EventBusProvider, vo as FE_SHARED_VERSION, Tr as FeatureFlagProvider, Ar as FeatureGate, Fe as GATEWAYS, ea as GLOBAL_SHORTCUT_CATEGORIES, dt as GatewayProvider, Ln as INLINE_ENCODE, bt as InMemoryCache, Gr as KeyboardHelpDialogWrapper, _r as LoadingFallback, vn as LogLevel, bn as LogManager, yn as Logger, Yi as MODIFIER_KEYS, ei as Markdown, Ea as MicrofrontendContext, br as MicrofrontendErrorBoundary, io as MicrofrontendProvider, Si as OtelBrowserSink, ga as PLAN_USAGE_SNAPSHOT_EVENT, Xi as PLATFORM_TYPES, Ce as PRODUCTS, ge as PRODUCT_SLUG_EMIT, _e as PRODUCT_SLUG_RENAMES, we as PRODUCT_URLS, er as PULL_TO_REFRESH_THRESHOLD, ca as PUSH_DEVICE_ID_STORAGE_KEY, Cr as PWAInstallBanner, vr as PageLoadingFallback, dr as PermissionButton, hr as PermissionDenied, fr as PermissionGate, pr as PermissionLink, On as QUOTA_EXHAUSTED_CODE, pa as QUOTA_EXHAUSTED_EVENT, Kr as QuotaMeter, kn as RESOURCE_CAP_EXCEEDED_CODE, lr as RequireAuth, ur as RequireGuest, vi as RybbitSink, at as SSELink, Zt as SSORedirectSpinner, nn as SSO_DEPOSITED_PARAM, An as STORAGE_QUOTA_EXCEEDED_CODE, Xn as SafeAreaView, yr as SectionLoadingFallback, to as TourInitializer, za as TourPlayer, Pa as TourPlayerProvider, Ma as TourSpotlight, Na as TourTooltip, ao as TourTrigger, Ba as TourTriggerButton, Xa as ToursProvider, xa as UNSAVED_CHANGE_LABEL_MAX, jn as UPGRADE_ERROR_CODES, qr as UPGRADE_PROMPT_EVENT, Xr as UpgradeInlineBanner, Jr as UpgradePromptModal, _t as WsLink, oo as acknowledgeNativePurchase, r as alertTokens, ya as appendContextToPath, Dt as attemptTokenRefresh, rn as beginSsoNavigation, B as bootDesktopShell, or as buildActorFallback, Mn as buildQuotaExhaustedMessage, an as buildSsoDepositUrl, m as capitalizeFirst, h as capitalizeWords, i as categoryTokens, Qt as checkRemoteSLO, $t as checkSLO, Ot as clearAuthSessionStorage, Xe as clearGraphqlFetchResponseCache, en as clearLocalAuthState, Nt as clearSSoCookie, Pt as clearShellSsoCookies, on as clearSsoDepositState, sn as clearSsoNavigation, Cn as clearUserContext, Bn as cn, tr as computePullOffset, nr as computePullProgress, cn as consumeSsoDepositMarker, n as createApolloClient, wi as createEventBus, ta as createGlobalShortcuts, ot as createGraphQLClient, En as createProfileScopedStorage, V as desktopCheckForUpdates, H as desktopDeepLinkToPath, U as desktopInstallUpdate, W as desktopNotify, G as desktopOpenExternal, K as desktopSetBadgeCount, q as desktopSetLocale, J as desktopSetTheme, Y as desktopSetTrayQuickActions, ka as detectDeviceType, Mr as detectPlatform, Ue as dispatchBackendErrorEvent, ma as dispatchQuotaExhausted, Yr as dispatchUpgradePrompt, Rn as downscaleImage, ve as emitProductSlug, We as extractBackendError, Nn as extractQuotaExhaustedExtensions, Pn as extractUpgradeErrorExtensions, Te as findProductConfig, g as formatBytes, _ as formatCompactNumber, v as formatCurrency, y as formatCurrencyCompact, b as formatDate, x as formatDateTime, S as formatDuration, Nr as formatKeyCombo, C as formatList, w as formatNumber, T as formatOrdinal, E as formatPercentage, D as formatRelativeTime, O as formatTime, a as getAlertTokens, I as getCapacitorPlatform, o as getCategoryTokens, X as getDesktopAuthBridgeConfig, Z as getDesktopBridge, Q as getDesktopGatewayBases, $ as getDesktopGatewayUrls, ee as getDesktopRuntimeConfig, te as getDesktopUpdateState, ne as getDesktopWindowState, Pr as getDisplayKeysForPlatform, Ie as getGatewayConfig, Le as getGatewayUrl, st as getGlobalClient, na as getGlobalShortcutsByCategory, Re as getGraphQLEndpoint, re as getLegacyDesktopRuntime, Vt as getNativeBridge, mo as getNativeEntryRoutes, so as getNativeProducts, co as getNativePurchases, la as getOrCreatePushDeviceId, Ht as getPlatform, Ee as getProductUrl, De as getProductsWithUrls, Dn as getProfileScopedKey, s as getProgressTokens, go as getPushOptInController, Aa as getResponsiveSelector, tn as getSSORedirectUrl, Ft as getSSoCookie, Ae as getShellConfig, Fr as getShortcutLabel, c as getStatusBadgeTokens, l as getStatusTokens, Ze as getStoredAuthToken, Qe as getStoredLocale, $e as getStoredOrganizationId, et as getStoredProjectId, tt as getStoredWorkspaceId, nt as getStoredWorkspaceToken, Ha as getTourContextRank, Ua as getTourRouteCatalog, Wa as getTourRouteModules, Ga as getTourRoutePages, u as getTrendTokens, ct as getWorkspaceClient, ze as getWorkspaceTokenPayload, xt as gql, rt as graphqlFetch, kt as hasAuthGraphQLErrors, lt as initializeAppClients, wn as initializeLogger, ie as installDesktopDeepLinkHandler, ae as installDesktopNavigateHandler, de as installGatewayFetchRewrite, lo as installNativeIAP, Ge as isAbortError, Ut as isAndroid, At as isAuthGraphQLError, jt as isAuthNetworkError, Ke as isBackendErrorDisplay, L as isCapacitorNative, P as isChunkLoadError, oe as isDesktop, Wt as isElectron, Gt as isIOS, Kt as isInstalledApp, Ir as isMac, Lr as isMobileDevice, qt as isNative, uo as isNativeIAPAvailable, Fn as isQuotaExhaustedError, ye as isSameProductSlug, It as isSharedSsoCookieDomain, je as isShellLessRoute, ln as isSsoNavigationPending, Jt as isStandalonePWA, Rr as isTabletDevice, Ka as isTourVisibleForContext, qe as isTransportError, Lt as isTrustedSsoOrigin, In as isUpgradeError, Yt as isWeb, Xt as isWebBrowser, Be as isWorkspaceTokenValidForContext, F as lazyWithRetry, be as legacyProductSlug, Sa as listUnsavedChanges, xn as logManager, Je as markConnectionHealthy, un as markSsoDepositDone, dn as markSsoDepositPending, zr as matchesKeyCombo, ra as mergeShortcuts, fn as mintSsoSessionTokens, Vn as nativeActionSheet, Hn as nativeConfirm, Un as nativeCopyText, Wn as nativeImpact, Gn as nativeNotify, Kn as nativeOpenUrl, qn as nativeSelection, Jn as nativeShare, Yn as nativeToast, Br as normalizeKey, Vr as normalizePlatformCombo, xe as normalizeProductSlug, qa as normalizeTourPath, se as onDesktopUpdateState, ce as onDesktopWindowState, Hr as parseKeyCombo, k as pluralize, d as progressTokens, _a as publishPlanUsageSnapshot, fo as purchaseNativeProduct, yi as readAnalyticsConsent, bi as readAnalyticsConsentChoice, Zn as readInitialNetworkStatus, Rt as readShellSsoCookie, pn as readSsoDepositState, Mt as redirectToLogin, Qn as reduceNetworkStatus, le as registerDesktopNavigator, ua as registerPushDevice, _o as registerPushOptInController, Ja as registerTourRouteCatalog, Ca as registerUnsavedChange, ut as resetAppClients, ci as resolveActionSheetOutcome, ro as resolveAppShellObservabilityConfig, me as resolveAuthBridgeConfig, fe as resolveGatewayBases, it as resolveGatewayUrl, ue as resolveGatewayUrls, he as resolveShellAuthBridgeConfig, Ya as resolveTourTargetPath, po as restoreNativePurchases, zn as selectInlineBase64, xi as setAnalyticsConsent, zt as setSSoCookie, Bt as setShellSsoCookies, Tn as setUserContext, mn as shouldAttemptSsoDeposit, Ur as shouldEnableKeyboardShortcuts, Wr as shouldIgnoreShortcut, Me as shouldShowBreadcrumb, ho as shouldShowNativeWelcome, Ne as shouldShowSidebar, Ye as shouldToastBackendError, A as slugify, f as statusTokens, pe as suppressConsole, j as toCamelCase, M as toPascalCase, p as trendTokens, N as truncateText, da as unregisterPushDevice, wa as unsavedChangesBlocking, li as useActionSheet, sr as useActorProfiles, St as useApolloClient, ii as useAppState, qi as useAsync, Ji as useAsyncImmediate, Za as useAutoStartTour, ji as useBreakpoint, Ui as useConditionalToggle, e as useCopyToClipboard, ba as useCurrentContextSearchParams, Oi as useDebounce, ui as useDesktop, di as useDesktopUpdateState, fi as useDesktopWindowState, ai as useDeviceInfo, Ti as useEvent, Ei as useEventBus, Di as useEventEmitter, Li as useExclusiveMenu, Dr as useFeatureFlag, Or as useFeatureFlagDetails, kr as useFeatureFlagValue, Er as useFeatureFlags, ft as useGateway, pt as useGatewayClient, oi as useHaptics, aa as useHasAnimated, gt as useHasAuthToken, Qi as useHotkeys, Fa as useIsTourPlaying, Fi as useKeyPress, Ii as useKeyboardShortcut, Zi as useKeyboardShortcuts, Ct as useLazyQuery, Ri as useLocalStorage, ia as useLogger, t as useMediaQuery, Da as useMicrofrontendContext, Mi as useMobileBreakpoint, wt as useMutation, ri as useNativeKeyboard, ti as useNativePlatform, $n as useNetworkStatus, Ni as useOnClickOutside, Pi as useOnClickOutsideWithRef, Sr as usePWA, Ki as usePagination, Va as usePlayTour, Bi as usePrevious, Vi as usePreviousDistinct, Hi as usePreviousHistory, rr as usePullToRefresh, fa as usePushDeviceRegistration, Tt as useQuery, ha as useQuotaErrorToast, sa as useRecordProductVisit, oa as useReferralAttribution, gn as useRegistryHelpers, ir as useReturnFocus, ni as useSafeArea, mt as useSafeGateway, ht as useSafeGatewayClient, Qa as useSafeToursContext, zi as useSessionStorage, _n as useShellNavigate, $i as useShortcutHelp, Ia as useStartTour, si as useStatusBar, La as useStopTour, Et as useSubscription, ki as useThrottle, Wi as useToggle, Gi as useToggleObject, ja as useTourPlayer, Ra as useTourPlayerContext, $a as useTours, eo as useToursContext, Ta as useUnsavedChanges, va as useUpgradePrompt, Zr as useVoiceInput, Oa as withTourProgressStatus };
+export { $r as ASSISTANT_WIDGET_TOGGLE_EVENT, hr as AccessDenied, or as ActorIdentity, vi as AnalyticsConsentBanner, yt as ApolloClient, bt as ApolloProvider, Tr as AppErrorBoundary, gn as AppInitializer, ro as AppShellProvider, ei as AssistantWidget, Ve as BACKEND_ERROR_EVENT, Se as BOTMANOR_PRODUCT_SLUG, ji as BREAKPOINTS, _i as BackendAuditSink, gi as BroadcastChannelSink, Oe as COMMON_SHELL_LESS_ROUTES, He as CONNECTION_STATUS_EVENT, Sr as ConditionalShell, Cn as ConsoleTransport, Mr as ContextConversationWidget, Pe as DEFAULT_PAGE_SIZE, ke as DEFAULT_SHELL_CONFIG, R as DESKTOP_UPDATE_UNSUPPORTED, z as DESKTOP_WINDOW_STATE_DEFAULT, mi as DesktopUpdateToast, hi as DevtoolsSink, lr as ErrorBoundary, _r as ErrorFallback, wi as EventBusProvider, yo as FE_SHARED_VERSION, Er as FeatureFlagProvider, jr as FeatureGate, Fe as GATEWAYS, ta as GLOBAL_SHORTCUT_CATEGORIES, dt as GatewayProvider, Rn as INLINE_ENCODE, xt as InMemoryCache, Kr as KeyboardHelpDialogWrapper, vr as LoadingFallback, yn as LogLevel, xn as LogManager, bn as Logger, Xi as MODIFIER_KEYS, ti as Markdown, Da as MicrofrontendContext, xr as MicrofrontendErrorBoundary, ao as MicrofrontendProvider, Ci as OtelBrowserSink, _a as PLAN_USAGE_SNAPSHOT_EVENT, Zi as PLATFORM_TYPES, Ce as PRODUCTS, ge as PRODUCT_SLUG_EMIT, _e as PRODUCT_SLUG_RENAMES, we as PRODUCT_URLS, tr as PULL_TO_REFRESH_THRESHOLD, la as PUSH_DEVICE_ID_STORAGE_KEY, wr as PWAInstallBanner, yr as PageLoadingFallback, fr as PermissionButton, gr as PermissionDenied, pr as PermissionGate, mr as PermissionLink, kn as QUOTA_EXHAUSTED_CODE, ma as QUOTA_EXHAUSTED_EVENT, qr as QuotaMeter, An as RESOURCE_CAP_EXCEEDED_CODE, ur as RequireAuth, dr as RequireGuest, yi as RybbitSink, at as SSELink, Qt as SSORedirectSpinner, rn as SSO_DEPOSITED_PARAM, jn as STORAGE_QUOTA_EXCEEDED_CODE, Zn as SafeAreaView, br as SectionLoadingFallback, no as TourInitializer, Ba as TourPlayer, Fa as TourPlayerProvider, Na as TourSpotlight, Pa as TourTooltip, oo as TourTrigger, Va as TourTriggerButton, Za as ToursProvider, Sa as UNSAVED_CHANGE_LABEL_MAX, Mn as UPGRADE_ERROR_CODES, Jr as UPGRADE_PROMPT_EVENT, Zr as UpgradeInlineBanner, Yr as UpgradePromptModal, _t as WsLink, so as acknowledgeNativePurchase, r as alertTokens, ba as appendContextToPath, Ot as attemptTokenRefresh, an as beginSsoNavigation, B as bootDesktopShell, sr as buildActorFallback, Nn as buildQuotaExhaustedMessage, on as buildSsoDepositUrl, m as capitalizeFirst, h as capitalizeWords, i as categoryTokens, $t as checkRemoteSLO, en as checkSLO, kt as clearAuthSessionStorage, Xe as clearGraphqlFetchResponseCache, tn as clearLocalAuthState, Pt as clearSSoCookie, Ft as clearShellSsoCookies, sn as clearSsoDepositState, cn as clearSsoNavigation, wn as clearUserContext, Vn as cn, nr as computePullOffset, rr as computePullProgress, ln as consumeSsoDepositMarker, n as createApolloClient, Ti as createEventBus, na as createGlobalShortcuts, ot as createGraphQLClient, Dn as createProfileScopedStorage, V as desktopCheckForUpdates, H as desktopDeepLinkToPath, U as desktopInstallUpdate, W as desktopNotify, G as desktopOpenExternal, K as desktopSetBadgeCount, q as desktopSetLocale, J as desktopSetTheme, Y as desktopSetTrayQuickActions, Aa as detectDeviceType, Nr as detectPlatform, Ue as dispatchBackendErrorEvent, ha as dispatchQuotaExhausted, Xr as dispatchUpgradePrompt, zn as downscaleImage, ve as emitProductSlug, We as extractBackendError, Pn as extractQuotaExhaustedExtensions, Fn as extractUpgradeErrorExtensions, Te as findProductConfig, g as formatBytes, _ as formatCompactNumber, v as formatCurrency, y as formatCurrencyCompact, b as formatDate, x as formatDateTime, S as formatDuration, Pr as formatKeyCombo, C as formatList, w as formatNumber, T as formatOrdinal, E as formatPercentage, D as formatRelativeTime, O as formatTime, a as getAlertTokens, I as getCapacitorPlatform, o as getCategoryTokens, X as getDesktopAuthBridgeConfig, Z as getDesktopBridge, Q as getDesktopGatewayBases, $ as getDesktopGatewayUrls, ee as getDesktopRuntimeConfig, te as getDesktopUpdateState, ne as getDesktopWindowState, Fr as getDisplayKeysForPlatform, Ie as getGatewayConfig, Le as getGatewayUrl, st as getGlobalClient, ra as getGlobalShortcutsByCategory, Re as getGraphQLEndpoint, re as getLegacyDesktopRuntime, Ht as getNativeBridge, ho as getNativeEntryRoutes, co as getNativeProducts, lo as getNativePurchases, ua as getOrCreatePushDeviceId, Ut as getPlatform, Ee as getProductUrl, De as getProductsWithUrls, On as getProfileScopedKey, s as getProgressTokens, _o as getPushOptInController, ja as getResponsiveSelector, nn as getSSORedirectUrl, It as getSSoCookie, Ae as getShellConfig, Ir as getShortcutLabel, c as getStatusBadgeTokens, l as getStatusTokens, Ze as getStoredAuthToken, Qe as getStoredLocale, $e as getStoredOrganizationId, et as getStoredProjectId, tt as getStoredWorkspaceId, nt as getStoredWorkspaceToken, Ua as getTourContextRank, Wa as getTourRouteCatalog, Ga as getTourRouteModules, Ka as getTourRoutePages, u as getTrendTokens, ct as getWorkspaceClient, ze as getWorkspaceTokenPayload, St as gql, rt as graphqlFetch, At as hasAuthGraphQLErrors, lt as initializeAppClients, Tn as initializeLogger, ie as installDesktopDeepLinkHandler, ae as installDesktopNavigateHandler, de as installGatewayFetchRewrite, uo as installNativeIAP, Ge as isAbortError, Wt as isAndroid, jt as isAuthGraphQLError, Mt as isAuthNetworkError, Ke as isBackendErrorDisplay, L as isCapacitorNative, P as isChunkLoadError, oe as isDesktop, Gt as isElectron, Kt as isIOS, qt as isInstalledApp, Lr as isMac, Rr as isMobileDevice, Jt as isNative, fo as isNativeIAPAvailable, In as isQuotaExhaustedError, ye as isSameProductSlug, Lt as isSharedSsoCookieDomain, je as isShellLessRoute, un as isSsoNavigationPending, Yt as isStandalonePWA, zr as isTabletDevice, qa as isTourVisibleForContext, qe as isTransportError, Rt as isTrustedSsoOrigin, Ln as isUpgradeError, Xt as isWeb, Zt as isWebBrowser, Be as isWorkspaceTokenValidForContext, F as lazyWithRetry, be as legacyProductSlug, Ca as listUnsavedChanges, Sn as logManager, Je as markConnectionHealthy, dn as markSsoDepositDone, fn as markSsoDepositPending, Br as matchesKeyCombo, ia as mergeShortcuts, pn as mintSsoSessionTokens, Hn as nativeActionSheet, Un as nativeConfirm, Wn as nativeCopyText, Gn as nativeImpact, Kn as nativeNotify, qn as nativeOpenUrl, Jn as nativeSelection, Yn as nativeShare, Xn as nativeToast, Vr as normalizeKey, Hr as normalizePlatformCombo, xe as normalizeProductSlug, Ja as normalizeTourPath, se as onDesktopUpdateState, ce as onDesktopWindowState, Ur as parseKeyCombo, k as pluralize, vt as prepareWorkspaceRequest, d as progressTokens, va as publishPlanUsageSnapshot, po as purchaseNativeProduct, bi as readAnalyticsConsent, xi as readAnalyticsConsentChoice, Qn as readInitialNetworkStatus, zt as readShellSsoCookie, mn as readSsoDepositState, Nt as redirectToLogin, $n as reduceNetworkStatus, le as registerDesktopNavigator, da as registerPushDevice, vo as registerPushOptInController, Ya as registerTourRouteCatalog, wa as registerUnsavedChange, ut as resetAppClients, li as resolveActionSheetOutcome, io as resolveAppShellObservabilityConfig, me as resolveAuthBridgeConfig, fe as resolveGatewayBases, it as resolveGatewayUrl, ue as resolveGatewayUrls, he as resolveShellAuthBridgeConfig, Xa as resolveTourTargetPath, mo as restoreNativePurchases, Bn as selectInlineBase64, Si as setAnalyticsConsent, Bt as setSSoCookie, Vt as setShellSsoCookies, En as setUserContext, hn as shouldAttemptSsoDeposit, Wr as shouldEnableKeyboardShortcuts, Gr as shouldIgnoreShortcut, Me as shouldShowBreadcrumb, go as shouldShowNativeWelcome, Ne as shouldShowSidebar, Ye as shouldToastBackendError, A as slugify, f as statusTokens, pe as suppressConsole, j as toCamelCase, M as toPascalCase, p as trendTokens, N as truncateText, fa as unregisterPushDevice, Ta as unsavedChangesBlocking, ui as useActionSheet, cr as useActorProfiles, Ct as useApolloClient, ai as useAppState, Ji as useAsync, Yi as useAsyncImmediate, Qa as useAutoStartTour, Mi as useBreakpoint, Wi as useConditionalToggle, e as useCopyToClipboard, xa as useCurrentContextSearchParams, ki as useDebounce, di as useDesktop, fi as useDesktopUpdateState, pi as useDesktopWindowState, oi as useDeviceInfo, Ei as useEvent, Di as useEventBus, Oi as useEventEmitter, Ri as useExclusiveMenu, Or as useFeatureFlag, kr as useFeatureFlagDetails, Ar as useFeatureFlagValue, Dr as useFeatureFlags, ft as useGateway, pt as useGatewayClient, si as useHaptics, oa as useHasAnimated, gt as useHasAuthToken, $i as useHotkeys, Ia as useIsTourPlaying, Ii as useKeyPress, Li as useKeyboardShortcut, Qi as useKeyboardShortcuts, wt as useLazyQuery, zi as useLocalStorage, aa as useLogger, t as useMediaQuery, Oa as useMicrofrontendContext, Ni as useMobileBreakpoint, Tt as useMutation, ii as useNativeKeyboard, ni as useNativePlatform, er as useNetworkStatus, Pi as useOnClickOutside, Fi as useOnClickOutsideWithRef, Cr as usePWA, qi as usePagination, Ha as usePlayTour, Vi as usePrevious, Hi as usePreviousDistinct, Ui as usePreviousHistory, ir as usePullToRefresh, pa as usePushDeviceRegistration, Et as useQuery, ga as useQuotaErrorToast, ca as useRecordProductVisit, sa as useReferralAttribution, _n as useRegistryHelpers, ar as useReturnFocus, ri as useSafeArea, mt as useSafeGateway, ht as useSafeGatewayClient, $a as useSafeToursContext, Bi as useSessionStorage, vn as useShellNavigate, ea as useShortcutHelp, La as useStartTour, ci as useStatusBar, Ra as useStopTour, Dt as useSubscription, Ai as useThrottle, Gi as useToggle, Ki as useToggleObject, Ma as useTourPlayer, za as useTourPlayerContext, eo as useTours, to as useToursContext, Ea as useUnsavedChanges, ya as useUpgradePrompt, Qr as useVoiceInput, ka as withTourProgressStatus };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/fe-libs",
-  "version": "2026.1011.1",
+  "version": "2026.1011.3",
   "description": "Burdenoff frontend primitives and domain libraries",
   "type": "module",
   "bin": {
@@ -314,7 +314,7 @@
     "test:package-css-exports": "node scripts/validate-package-css-exports.mjs",
     "verify:package": "node scripts/verify-package-contents.mjs",
     "test:handsfree-browser": "node scripts/handsfree-browser-run.mjs",
-    "test": "bun test scripts/graphql-schema-drift/__tests__ scripts/a11y-audit/__tests__ src/credentials src/connections src/storage src/shared/assistant src/shared/components src/shared/graphql/links/sse-link.test.ts src/shared/graphql/fetch.test.ts src/shared/graphql/client.test.ts src/shared/utils/apollo.test.ts src/shared/graphql/tourWorkspaceAuth.test.ts src/shared/config/gatewayUrls.test.ts src/shared/config/authBridgeUrls.test.ts src/shared/config/gatewayFallback.test.ts scripts/__tests__ src/shared/config/products.test.ts src/shared/config/productSlug.test.ts src/shared/hooks/shell/useProducts.test.ts src/shared/providers/shell/brandAttribute.test.ts src/chrome/ProductSwitcher.test.ts src/shared/utils/gatewayFetchRewrite.test.ts src/shared/utils/authCookie.test.ts src/shared/providers/AppShellProvider.test.ts src/shared/providers/shell/interpolate.test.ts src/shared/providers/shell/resolveTranslation.test.ts src/shared/providers/shell/I18nProvider.render.test.tsx src/shared/providers/shell/I18nProvider.client.test.tsx src/shared/providers/shell/translationStore.test.ts src/shared/providers/shell/translationLayers.test.ts src/shared/providers/shell/directionMode.test.ts src/shared/providers/shell/authProvider/ssoRelay.test.ts src/shared/providers/shell/personaSurfaceRemote.test.ts src/shared/providers/shell/workspaceSwitch.client.test.tsx src/shared/events/sinks/RybbitSink.test.ts src/shell-native src/shared/native src/shared/navigation src/shared/tours src/chrome/__tests__ src/ui/__tests__",
+    "test": "bun test scripts/graphql-schema-drift/__tests__ scripts/a11y-audit/__tests__ src/credentials src/connections src/storage src/shared/assistant src/shared/components src/shared/graphql/links/sse-link.test.ts src/shared/graphql/fetch.test.ts src/shared/graphql/prepareWorkspaceRequest.test.ts src/shared/graphql/client.test.ts src/shared/utils/apollo.test.ts src/shared/graphql/tourWorkspaceAuth.test.ts src/shared/config/gatewayUrls.test.ts src/shared/config/authBridgeUrls.test.ts src/shared/config/gatewayFallback.test.ts scripts/__tests__ src/shared/config/products.test.ts src/shared/config/productSlug.test.ts src/shared/hooks/shell/useProducts.test.ts src/shared/providers/shell/brandAttribute.test.ts src/chrome/ProductSwitcher.test.ts src/shared/utils/gatewayFetchRewrite.test.ts src/shared/utils/authCookie.test.ts src/shared/providers/AppShellProvider.test.ts src/shared/providers/shell/interpolate.test.ts src/shared/providers/shell/resolveTranslation.test.ts src/shared/providers/shell/I18nProvider.render.test.tsx src/shared/providers/shell/I18nProvider.client.test.tsx src/shared/providers/shell/translationStore.test.ts src/shared/providers/shell/translationLayers.test.ts src/shared/providers/shell/directionMode.test.ts src/shared/providers/shell/authProvider/ssoRelay.test.ts src/shared/providers/shell/personaSurfaceRemote.test.ts src/shared/providers/shell/workspaceSwitch.client.test.tsx src/shared/events/sinks/RybbitSink.test.ts src/shell-native src/shared/native src/shared/navigation src/shared/tours src/chrome/__tests__ src/ui/__tests__",
     "sanity": "bash scripts/build-limits.sh --gate bash -c 'bun run lint:sanity && bun run format && bun run type:check && bun run test && bun run build && bun run verify:package'",
     "switch:status": "bun scripts/deps-mode.ts status",
     "switch:remote": "bun scripts/deps-mode.ts remote",