@burdenoff/fe-libs 2026.1013.14 → 2026.1014.2

package/dist/shared/providers/shell/AuthProvider.js

@@ -1,152 +1,147 @@
-import { getActiveProfileId as e, getProfileTokens as t, getProfileUser as n, getProfileWorkspaceToken as r, getProfiles as i, resolveActiveProfileId as a } from "./ProfileStorageManager.js";
-import { readShellSsoCookie as o } from "../../utils/authCookie.js";
-import { useBridgeInitialization as ee } from "./authProvider/useBridgeInitialization.js";
-import { useTokenExpiryTimer as te } from "./authProvider/useTokenExpiryTimer.js";
-import { useStorageSync as s } from "./authProvider/useStorageSync.js";
-import { useRemoteSLO as c } from "./authProvider/useRemoteSLO.js";
-import { useAuthActions as l } from "./authProvider/useAuthActions.js";
-import { useSsoDepositBootGuard as u } from "./authProvider/useSsoDepositBootGuard.js";
-import { createContext as d, use as f, useCallback as p, useMemo as m, useRef as h, useState as g } from "react";
-import { jsx as _ } from "react/jsx-runtime";
+import { getActiveProfileId as e, getProfileTokens as t, getProfileUser as n, getProfileWorkspaceToken as ee, getSwitchableProfiles as r, resolveActiveProfileId as te } from "./ProfileStorageManager.js";
+import { readShellSsoCookie as i } from "../../utils/authCookie.js";
+import { useBridgeInitialization as a } from "./authProvider/useBridgeInitialization.js";
+import { useTokenExpiryTimer as o } from "./authProvider/useTokenExpiryTimer.js";
+import { useStorageSync as ne } from "./authProvider/useStorageSync.js";
+import { useRemoteSLO as s } from "./authProvider/useRemoteSLO.js";
+import { useAuthActions as c } from "./authProvider/useAuthActions.js";
+import { useSsoDepositBootGuard as l } from "./authProvider/useSsoDepositBootGuard.js";
+import { createContext as u, use as d, useCallback as f, useMemo as p, useRef as m, useState as h } from "react";
+import { jsx as g } from "react/jsx-runtime";
 //#region src/shared/providers/shell/AuthProvider.tsx
-var v = d(null);
-function y({ children: d, onTokenExpired: f, onSessionExpiringSoon: y, onRefreshToken: b, bridgeUrl: x, bridgeAllowedOrigins: S, bridgeDebug: C, onBridgeReady: w }) {
-	let T = h(!1), [E, D] = g(() => a()), [O, k] = g(() => E ? n(E) : null), [A, j] = g(() => E ? t(E) : null), [M, N] = g(() => E ? r(E) : null), [P, F] = g(() => {
-		if (E && n(E)) return !1;
-		if (x) try {
-			let e = o()?.id ?? null;
+var _ = u(null);
+function v(e) {
+	return r(e).map((t) => ({
+		id: t.id,
+		email: t.email,
+		name: t.name,
+		avatar: t.avatar,
+		isActive: t.id === e,
+		lastLogin: t.lastLogin
+	}));
+}
+function y({ children: r, onTokenExpired: u, onSessionExpiringSoon: d, onRefreshToken: y, bridgeUrl: b, bridgeAllowedOrigins: x, bridgeDebug: S, onBridgeReady: C }) {
+	let w = m(!1), [T, E] = h(() => te()), [D, O] = h(() => T ? n(T) : null), [k, A] = h(() => T ? t(T) : null), [j, M] = h(() => T ? ee(T) : null), [N, P] = h(() => {
+		if (T && n(T)) return !1;
+		if (b) try {
+			let e = i()?.id ?? null;
 			if (e && localStorage.getItem(`bf-p-${e}-tokens`)) return !1;
 		} catch {}
-		return !!x;
-	}), [I, ne] = g(!1), [L, re] = g(null), [R, z] = g(() => i().map((e) => ({
-		id: e.id,
-		email: e.email,
-		name: e.name,
-		avatar: e.avatar,
-		isActive: e.id === E,
-		lastLogin: e.lastLogin
-	}))), B = p(() => {
+		return !!b;
+	}), [F, I] = h(!1), [L, re] = h(null), [R, z] = h(() => v(T)), B = f(() => {
 		z([]);
-	}, []), V = p(() => {
-		let t = e();
-		z(i().map((e) => ({
-			id: e.id,
-			email: e.email,
-			name: e.name,
-			avatar: e.avatar,
-			isActive: e.id === t,
-			lastLogin: e.lastLogin
-		})));
+	}, []), V = f(() => {
+		z(v(e()));
 	}, []);
-	ee({
-		bridgeUrl: x,
-		bridgeAllowedOrigins: S,
-		bridgeDebug: C,
-		onBridgeReady: w,
-		bridgeSyncInProgress: T,
-		setIsLoading: F,
-		setActiveId: D,
-		setUser: k,
-		setTokens: j,
-		setWorkspaceTokenLocal: N,
+	a({
+		bridgeUrl: b,
+		bridgeAllowedOrigins: x,
+		bridgeDebug: S,
+		onBridgeReady: C,
+		bridgeSyncInProgress: w,
+		setIsLoading: P,
+		setActiveId: E,
+		setUser: O,
+		setTokens: A,
+		setWorkspaceTokenLocal: M,
 		clearAccounts: B,
 		refreshAccounts: V
 	});
-	let { login: H, logout: U, logoutAll: W, updateUser: G, refreshAccessToken: K, hasPermission: q, setWorkspaceToken: J, setMfaState: Y, switchAccount: X, addAccount: Z, removeAccount: Q } = l({
-		user: O,
-		tokens: A,
-		activeId: E,
-		bridgeSyncInProgress: T,
-		onRefreshToken: b,
-		onTokenExpired: f,
-		setActiveId: D,
-		setUser: k,
-		setTokens: j,
-		setWorkspaceTokenLocal: N,
-		setMfaRequiredState: ne,
+	let { login: H, logout: U, logoutAll: W, updateUser: G, refreshAccessToken: K, hasPermission: q, setWorkspaceToken: J, setMfaState: Y, switchAccount: X, addAccount: Z, removeAccount: Q } = c({
+		user: D,
+		tokens: k,
+		activeId: T,
+		bridgeSyncInProgress: w,
+		onRefreshToken: y,
+		onTokenExpired: u,
+		setActiveId: E,
+		setUser: O,
+		setTokens: A,
+		setWorkspaceTokenLocal: M,
+		setMfaRequiredState: I,
 		setMfaChallengeIdState: re,
-		setIsLoading: F,
+		setIsLoading: P,
 		clearAccounts: B,
 		refreshAccounts: V
 	});
-	te({
-		tokens: A,
-		onRefreshToken: b,
-		onTokenExpired: f,
-		onSessionExpiringSoon: y,
+	o({
+		tokens: k,
+		onRefreshToken: y,
+		onTokenExpired: u,
+		onSessionExpiringSoon: d,
 		refreshAccessToken: K
-	}), s({
-		user: O,
-		tokens: A,
-		workspaceToken: M,
-		activeId: E,
-		setUser: k,
-		setTokens: j,
-		setWorkspaceTokenLocal: N,
-		setActiveId: D,
+	}), ne({
+		user: D,
+		tokens: k,
+		workspaceToken: j,
+		activeId: T,
+		setUser: O,
+		setTokens: A,
+		setWorkspaceTokenLocal: M,
+		setActiveId: E,
 		clearAccounts: B,
 		refreshAccounts: V
-	}), u(), c({
-		tokens: A,
-		bridgeUrl: x,
+	}), l(), s({
+		tokens: k,
+		bridgeUrl: b,
 		logout: U,
-		setActiveId: D,
-		setUser: k,
-		setTokens: j,
-		setWorkspaceTokenLocal: N,
+		setActiveId: E,
+		setUser: O,
+		setTokens: A,
+		setWorkspaceTokenLocal: M,
 		clearAccounts: B
 	});
-	let $ = m(() => !!O && !!A, [O, A]), ie = m(() => ({
-		user: O,
-		tokens: A,
+	let $ = p(() => !!D && !!k, [D, k]), ie = p(() => ({
+		user: D,
+		tokens: k,
 		isAuthenticated: $,
-		isLoading: P,
+		isLoading: N,
 		login: H,
 		logout: U,
 		updateUser: G,
 		refreshAccessToken: K,
 		hasPermission: q,
 		setWorkspaceToken: J,
-		workspaceToken: M,
-		mfaRequired: I,
+		workspaceToken: j,
+		mfaRequired: F,
 		mfaChallengeId: L,
 		setMfaState: Y,
-		activeProfileId: E,
+		activeProfileId: T,
 		accounts: R,
 		switchAccount: X,
 		addAccount: Z,
 		removeAccount: Q,
 		logoutAll: W,
-		currentUser: O
+		currentUser: D
 	}), [
-		O,
-		A,
+		D,
+		k,
 		$,
-		P,
+		N,
 		H,
 		U,
 		G,
 		K,
 		q,
 		J,
-		M,
-		I,
+		j,
+		F,
 		L,
 		Y,
-		E,
+		T,
 		R,
 		X,
 		Z,
 		Q,
 		W
 	]);
-	return /* @__PURE__ */ _(v.Provider, {
+	return /* @__PURE__ */ g(_.Provider, {
 		value: ie,
-		children: d
+		children: r
 	});
 }
 function b() {
-	let e = f(v);
+	let e = d(_);
 	if (!e) throw Error("useAuth must be used within an AuthProvider");
 	return e;
 }

package/dist/shared/providers/shell/ProfileStorageManager.d.ts

@@ -58,6 +58,26 @@ export interface ProfileUser {
  */
 export declare const PROFILE_STORAGE_CHANGE_EVENT = "bf-profile-storage-change";
 export declare function getProfiles(): ProfileMeta[];
+/**
+ * True when the stored user for a profile is an account whose email was never
+ * verified. Such an account can't sign in (the backend rejects it with
+ * EMAIL_NOT_VERIFIED), so it is never a valid active or switchable profile —
+ * older auth builds wrote one to the list on signup alone (BOFF-7215).
+ */
+export declare function isPendingVerificationProfile(profileId: string): boolean;
+/** True when a profile holds credentials from a completed sign-in. */
+export declare function hasProfileCredentials(profileId: string): boolean;
+/**
+ * Profiles that may become the active profile. Excludes pending-verification
+ * accounts only: a verified profile may briefly lack tokens mid-sign-in (user
+ * is written before tokens), and must still resolve as active then.
+ */
+export declare function getSelectableProfiles(): ProfileMeta[];
+/**
+ * Profiles to list in the account switcher: selectable profiles that hold
+ * credentials, plus the active profile (whose tokens may be mid-write).
+ */
+export declare function getSwitchableProfiles(activeProfileId: string | null): ProfileMeta[];
 export declare function setProfiles(profiles: ProfileMeta[]): void;
 export declare function addProfile(meta: ProfileMeta): void;
 export declare function removeProfile(profileId: string): void;

package/dist/shared/providers/shell/ProfileStorageManager.js

@@ -2,33 +2,37 @@ import { __exportAll as e } from "../../../_virtual/_rolldown/runtime.js";
 //#region src/shared/providers/shell/ProfileStorageManager.ts
 var t = /* @__PURE__ */ e({
 	PROFILE_STORAGE_CHANGE_EVENT: () => s,
-	addProfile: () => h,
-	clearActiveProfileId: () => b,
-	getActiveContext: () => F,
-	getActiveProfileId: () => v,
-	getActiveTokens: () => N,
-	getActiveUser: () => M,
-	getActiveWorkspaceToken: () => P,
-	getProfileContext: () => O,
-	getProfileLocale: () => A,
-	getProfileTokens: () => w,
-	getProfileUser: () => S,
-	getProfileWorkspaceToken: () => E,
+	addProfile: () => y,
+	clearActiveProfileId: () => w,
+	getActiveContext: () => z,
+	getActiveProfileId: () => S,
+	getActiveTokens: () => L,
+	getActiveUser: () => I,
+	getActiveWorkspaceToken: () => R,
+	getProfileContext: () => M,
+	getProfileLocale: () => P,
+	getProfileTokens: () => O,
+	getProfileUser: () => E,
+	getProfileWorkspaceToken: () => A,
 	getProfiles: () => p,
-	loginProfile: () => I,
-	logoutActiveProfile: () => L,
-	logoutAllProfiles: () => R,
-	removeAllProfiles: () => _,
-	removeProfile: () => g,
-	resolveActiveProfileId: () => x,
-	setActiveProfileId: () => y,
-	setProfileContext: () => k,
-	setProfileLocale: () => j,
-	setProfileTokens: () => T,
-	setProfileUser: () => C,
-	setProfileWorkspaceToken: () => D,
-	setProfiles: () => m,
-	switchProfile: () => z
+	getSelectableProfiles: () => g,
+	getSwitchableProfiles: () => _,
+	hasProfileCredentials: () => h,
+	isPendingVerificationProfile: () => m,
+	loginProfile: () => B,
+	logoutActiveProfile: () => V,
+	logoutAllProfiles: () => H,
+	removeAllProfiles: () => x,
+	removeProfile: () => b,
+	resolveActiveProfileId: () => T,
+	setActiveProfileId: () => C,
+	setProfileContext: () => N,
+	setProfileLocale: () => F,
+	setProfileTokens: () => k,
+	setProfileUser: () => D,
+	setProfileWorkspaceToken: () => j,
+	setProfiles: () => v,
+	switchProfile: () => U
 }), n = "bf-profiles", r = "bf-active-profile", i = "bf-last-active-profile", a = "bf-p", o = "session", s = "bf-profile-storage-change";
 function c() {
 	typeof window < "u" && window.dispatchEvent(new Event(s));
@@ -54,14 +58,27 @@ function p() {
 	return d(n) ?? [];
 }
 function m(e) {
-	f(n, e);
+	return E(e)?.emailVerified === !1;
 }
 function h(e) {
+	let t = O(e);
+	return !!(t?.accessToken || t?.refreshToken);
+}
+function g() {
+	return p().filter((e) => !m(e.id));
+}
+function _(e) {
+	return g().filter((t) => t.id === e || h(t.id));
+}
+function v(e) {
+	f(n, e);
+}
+function y(e) {
 	let t = p().filter((t) => t.id !== e.id);
-	t.push(e), m(t);
+	t.push(e), v(t);
 }
-function g(e) {
-	m(p().filter((t) => t.id !== e));
+function b(e) {
+	v(p().filter((t) => t.id !== e));
 	for (let t of [
 		"user",
 		"tokens",
@@ -76,25 +93,25 @@ function g(e) {
 		"sidebar-collapsed"
 	]) localStorage.removeItem(l(e, t)), sessionStorage.removeItem(u(e, t));
 }
-function _() {
+function x() {
 	let e = p();
-	for (let t of e) g(t.id);
+	for (let t of e) b(t.id);
 	localStorage.removeItem(n), sessionStorage.removeItem(r);
 }
-function v() {
+function S() {
 	return sessionStorage.getItem(r);
 }
-function y(e) {
+function C(e) {
 	sessionStorage.setItem(r, e);
 	try {
 		localStorage.setItem(i, e);
 	} catch {}
 }
-function b() {
+function w() {
 	sessionStorage.removeItem(r);
 }
-function x() {
-	let e = p(), t = v();
+function T() {
+	let e = g(), t = S();
 	if (t && e.some((e) => e.id === t)) return t;
 	let n = null;
 	try {
@@ -102,30 +119,30 @@ function x() {
 	} catch {
 		n = null;
 	}
-	return n && e.some((e) => e.id === n) ? (y(n), n) : e.length > 0 ? (y(e[0].id), e[0].id) : null;
+	return n && e.some((e) => e.id === n) ? (C(n), n) : e.length > 0 ? (C(e[0].id), e[0].id) : null;
 }
-function S(e) {
+function E(e) {
 	return d(l(e, "user"));
 }
-function C(e, t) {
+function D(e, t) {
 	let n = l(e, "user");
 	t ? f(n, t) : localStorage.removeItem(n);
 }
-function w(e) {
+function O(e) {
 	return d(l(e, "tokens"));
 }
-function T(e, t) {
+function k(e, t) {
 	let n = l(e, "tokens");
 	t ? f(n, t) : localStorage.removeItem(n);
 }
-function E(e) {
+function A(e) {
 	try {
 		let t = sessionStorage.getItem(u(e, "workspace-token"));
 		if (t) return t;
 	} catch {}
 	return localStorage.getItem(l(e, "workspace-token"));
 }
-function D(e, t) {
+function j(e, t) {
 	let n = l(e, "workspace-token"), r = u(e, "workspace-token");
 	if (t) {
 		try {
@@ -140,53 +157,53 @@ function D(e, t) {
 	}
 	c();
 }
-function O(e) {
+function M(e) {
 	return d(l(e, "context"));
 }
-function k(e, t) {
+function N(e, t) {
 	f(l(e, "context"), t);
 }
-function A(e) {
+function P(e) {
 	return localStorage.getItem(l(e, "locale"));
 }
-function j(e, t) {
+function F(e, t) {
 	localStorage.setItem(l(e, "locale"), t);
 }
-function M() {
-	let e = x();
-	return e ? S(e) : null;
-}
-function N() {
-	let e = x();
-	return e ? w(e) : null;
-}
-function P() {
-	let e = x();
+function I() {
+	let e = T();
 	return e ? E(e) : null;
 }
-function F() {
-	let e = x();
+function L() {
+	let e = T();
 	return e ? O(e) : null;
 }
-function I(e, t) {
+function R() {
+	let e = T();
+	return e ? A(e) : null;
+}
+function z() {
+	let e = T();
+	return e ? M(e) : null;
+}
+function B(e, t) {
 	let n = e.id;
-	return h({
+	return y({
 		id: n,
 		email: e.email,
 		name: e.name ?? `${e.firstName ?? ""} ${e.lastName ?? ""}`.trim(),
 		avatar: e.avatar,
 		lastLogin: (/* @__PURE__ */ new Date()).toISOString()
-	}), C(n, e), T(n, t), y(n), c(), n;
+	}), D(n, e), k(n, t), C(n), c(), n;
 }
-function L() {
-	let e = v();
-	e && (g(e), b(), x(), c());
+function V() {
+	let e = S();
+	e && (b(e), w(), T(), c());
 }
-function R() {
-	_(), c();
+function H() {
+	x(), c();
 }
-function z(e) {
-	return p().some((t) => t.id === e) ? (y(e), !0) : !1;
+function U(e) {
+	return g().some((t) => t.id === e) ? (C(e), !0) : !1;
 }
 //#endregion
-export { s as PROFILE_STORAGE_CHANGE_EVENT, t as ProfileStorageManager_exports, h as addProfile, b as clearActiveProfileId, F as getActiveContext, v as getActiveProfileId, N as getActiveTokens, M as getActiveUser, P as getActiveWorkspaceToken, O as getProfileContext, A as getProfileLocale, w as getProfileTokens, S as getProfileUser, E as getProfileWorkspaceToken, p as getProfiles, I as loginProfile, L as logoutActiveProfile, R as logoutAllProfiles, _ as removeAllProfiles, g as removeProfile, x as resolveActiveProfileId, y as setActiveProfileId, k as setProfileContext, j as setProfileLocale, T as setProfileTokens, C as setProfileUser, D as setProfileWorkspaceToken, m as setProfiles, z as switchProfile };
+export { s as PROFILE_STORAGE_CHANGE_EVENT, t as ProfileStorageManager_exports, y as addProfile, w as clearActiveProfileId, z as getActiveContext, S as getActiveProfileId, L as getActiveTokens, I as getActiveUser, R as getActiveWorkspaceToken, M as getProfileContext, P as getProfileLocale, O as getProfileTokens, E as getProfileUser, A as getProfileWorkspaceToken, p as getProfiles, _ as getSwitchableProfiles, B as loginProfile, V as logoutActiveProfile, H as logoutAllProfiles, x as removeAllProfiles, b as removeProfile, T as resolveActiveProfileId, C as setActiveProfileId, N as setProfileContext, F as setProfileLocale, k as setProfileTokens, D as setProfileUser, j as setProfileWorkspaceToken, v as setProfiles, U as switchProfile };