@burdenoff/fe-libs 2026.1021.1 → 2026.1021.2

package/dist/shared/components/LandingOrDashboardRedirect.d.ts

@@ -0,0 +1,45 @@
+import { ReactNode } from 'react';
+/** What the `/` route renders. */
+export type LandingGateDecision = 'loading' | 'home' | 'native-welcome' | 'landing';
+export interface LandingGateInput {
+    /** The auth provider is still settling (bridge handshake, hydration). */
+    isLoading: boolean;
+    /** A usable session exists (in-memory or persisted for the active profile). */
+    hasSession: boolean;
+    /** The shell runs as an installed app (see `shouldShowNativeWelcome`). */
+    isInstalledApp: boolean;
+    /** Whether the shell supplied a native welcome page. */
+    hasNativeWelcome: boolean;
+}
+/**
+ * Pure decision for the `/` route. There is intentionally no "sso" outcome:
+ * the landing gate never relays an anonymous visitor to the auth bridge.
+ */
+export declare function resolveLandingGate(input: LandingGateInput): LandingGateDecision;
+/**
+ * Whether the active profile has an unexpired access token persisted in
+ * storage — the profile token slot first, then microfe-auth's per-profile
+ * persisted store. Covers the window right after sign-in, before the
+ * AuthProvider has picked the new tokens up. Never throws.
+ */
+export declare function hasStoredValidSession(now?: number): boolean;
+export interface LandingGateViewProps {
+    decision: LandingGateDecision;
+    /** Product home for signed-in visitors, e.g. `/dashboard` or `/vibecontrols`. */
+    homePath: string;
+    /** Public marketing landing for anonymous browser visitors. */
+    landing: ReactNode;
+    /** Installed-app welcome; when omitted installed apps get `landing`. */
+    nativeWelcome?: ReactNode;
+    /** Rendered while auth settles. Defaults to the branded splash. */
+    loadingFallback?: ReactNode;
+    /** Suspense message while a lazy landing / welcome page loads. */
+    loadingMessage?: string;
+}
+/** Renders a `LandingGateDecision`. Exported for shells and tests. */
+export declare function LandingGateView({ decision, homePath, landing, nativeWelcome, loadingFallback, loadingMessage, }: LandingGateViewProps): import('react/jsx-runtime').JSX.Element;
+export type LandingOrDashboardRedirectProps = Omit<LandingGateViewProps, 'decision'>;
+/**
+ * The `/` route element. Must render inside `AuthProvider` and a router.
+ */
+export declare function LandingOrDashboardRedirect(props: LandingOrDashboardRedirectProps): import('react/jsx-runtime').JSX.Element;

package/dist/shared/components/LandingOrDashboardRedirect.js

@@ -0,0 +1,63 @@
+import { getProfileTokens as e, resolveActiveProfileId as t } from "../providers/shell/ProfileStorageManager.js";
+import { BrandedSplash as n } from "../../ui/branded-splash.js";
+import { getJwtExpiry as r } from "../providers/shell/authProvider/jwt.js";
+import { useAuth as i } from "../providers/shell/AuthProvider.js";
+import { MicrofrontendErrorBoundary as a } from "./MicrofrontendErrorBoundary.js";
+import { shouldShowNativeWelcome as o } from "../native/entry.js";
+import { Fragment as s, jsx as c } from "react/jsx-runtime";
+import { Navigate as l } from "react-router";
+//#region src/shared/components/LandingOrDashboardRedirect.tsx
+function u(e) {
+	return e.isLoading ? "loading" : e.hasSession ? "home" : e.isInstalledApp && e.hasNativeWelcome ? "native-welcome" : "landing";
+}
+function d(e, t) {
+	if (!e) return !1;
+	let n = r(e);
+	return n !== null && n > t;
+}
+function f(e) {
+	let t = localStorage.getItem(e ? `bf-p-${e}-auth-storage` : "auth-storage");
+	if (!t) return null;
+	let n = JSON.parse(t)?.state?.accessToken;
+	return typeof n == "string" && n ? n : null;
+}
+function p(n = Date.now()) {
+	if (typeof window > "u") return !1;
+	try {
+		let r = t();
+		return d(r ? e(r)?.accessToken : null, n) ? !0 : d(f(r), n);
+	} catch {
+		return !1;
+	}
+}
+function m({ decision: e, homePath: t, landing: r, nativeWelcome: i, loadingFallback: o, loadingMessage: u }) {
+	switch (e) {
+		case "loading": return /* @__PURE__ */ c(s, { children: o ?? /* @__PURE__ */ c(n, {}) });
+		case "home": return /* @__PURE__ */ c(l, {
+			to: t,
+			replace: !0
+		});
+		case "native-welcome": return /* @__PURE__ */ c(a, {
+			loadingMessage: u,
+			children: i
+		});
+		case "landing": return /* @__PURE__ */ c(a, {
+			loadingMessage: u,
+			children: r
+		});
+	}
+}
+function h(e) {
+	let t = i();
+	return /* @__PURE__ */ c(m, {
+		decision: u({
+			isLoading: t.isLoading,
+			hasSession: !t.isLoading && (!!t.tokens?.accessToken || p()),
+			isInstalledApp: o(),
+			hasNativeWelcome: e.nativeWelcome !== void 0
+		}),
+		...e
+	});
+}
+//#endregion
+export { m as LandingGateView, h as LandingOrDashboardRedirect, p as hasStoredValidSession, u as resolveLandingGate };

package/dist/shared/components/SSORedirectGuard.d.ts

@@ -2,8 +2,12 @@
  * SSORedirectGuard — Checks for SSO cookie and redirects to login origin
  * for token relay if the current origin doesn't have local tokens.
  *
- * This component should be rendered in route guards (ProtectedRoute,
- * LandingOrDashboardRedirect) to enable cross-domain SSO.
+ * SSO discovery belongs ONLY where a session is genuinely required: a
+ * ProtectedRoute guard, and explicit "Sign in" CTAs. Never call it from the
+ * public landing gate (`/`): bouncing an anonymous visitor into the relay means
+ * nobody ever sees the landing page, and when no central session exists the
+ * bridge sends them back to `/?sso_failed=1` (BOFF-6457 / 6482 / 6494). Use
+ * `LandingOrDashboardRedirect` from this package for the `/` route instead.
  *
  * Works in all environments (local dev, alpha, production):
  * - Local dev: cookie on .local.burdenoff.com shared domain
@@ -19,8 +23,13 @@ export declare function markSSORedirectAttempt(relayOrigin: string, returnTo: st
  * Check if an SSO redirect should be initiated.
  * Returns the redirect URL if SSO should happen, null otherwise.
  *
- * Call this from ProtectedRoute or LandingOrDashboardRedirect
- * before showing login page.
+ * Call this from ProtectedRoute (before falling back to the login page) or
+ * from an explicit sign-in CTA — never from the public landing gate. Prefer
+ * `redirectToSSO()`, which also performs the allowlisted navigation.
+ *
+ * The returned URL always passes `isAllowedRedirectUrl`; a relay target that
+ * would not (a misconfigured bridge, say) yields `null` and leaves no relay
+ * attempt marker behind.
  *
  * Cross-eTLD+1 product shells always start at the central bridge
  * (alphaapp/app.burdenoff.com): product cookies are first-party only and must
@@ -31,6 +40,17 @@ export declare function markSSORedirectAttempt(relayOrigin: string, returnTo: st
  * `isAutoSSOSuppressed` keeps the user on the login screen.
  */
 export declare function getSSORedirectUrl(returnPath?: string): string | null;
+/**
+ * Start SSO discovery: resolve the relay URL with `getSSORedirectUrl()` and
+ * navigate to it through the cross-origin allowlist.
+ *
+ * Returns `true` when the navigation was started (render
+ * `<SSORedirectSpinner />` meanwhile) and `false` when there is nothing to
+ * relay to, so the caller can fall back to the in-app login route.
+ *
+ * For ProtectedRoute and sign-in CTAs only — never the public landing gate.
+ */
+export declare function redirectToSSO(returnPath?: string): boolean;
 /**
  * Check if Single Logout (SLO) has occurred on another shell.
  *
@@ -59,6 +79,6 @@ export declare function checkRemoteSLO(gatewayUrl: string, accessToken: string):
 export declare function clearLocalAuthState(): void;
 /**
  * React component that renders a spinner while redirecting.
- * Use this as the return value when getSSORedirectUrl() returns a URL.
+ * Use this as the return value when `redirectToSSO()` returns true.
  */
 export declare function SSORedirectSpinner(): import('react/jsx-runtime').JSX.Element;

package/dist/shared/components/SSORedirectGuard.js

@@ -3,14 +3,15 @@ import { clearActiveContextStorage as t } from "../providers/shell/ActiveContext
 import { clearShellSsoCookies as n, isLocalDevSsoHost as r, isSharedSsoCookieDomain as i, isTrustedSsoOrigin as a, readShellSsoCookie as o } from "../utils/authCookie.js";
 import { isRealNativeOrDesktopShell as s } from "../native/platform.js";
 import { BrandedSplash as c } from "../../ui/branded-splash.js";
-import { jsx as l } from "react/jsx-runtime";
+import { isAllowedRedirectUrl as l, replaceLocationWithAllowlist as u } from "../utils/redirectAllowlist.js";
+import { jsx as d } from "react/jsx-runtime";
 //#region src/shared/components/SSORedirectGuard.tsx
-var u = "bf-sso-relay-attempt", d = 120 * 1e3, f = [
+var f = "bf-sso-relay-attempt", p = 120 * 1e3, m = [
 	"sso_failed",
 	"sso-failed",
 	"sso-attempted"
 ];
-function p(e) {
+function h(e) {
 	if (typeof window > "u") return null;
 	try {
 		let t = `${window.location.pathname}${window.location.search}${window.location.hash}`, n = new URL(e ?? t, window.location.origin);
@@ -19,70 +20,74 @@ function p(e) {
 		return null;
 	}
 }
-function m(e) {
+function g(e) {
 	return e === "/auth" || e.startsWith("/auth/");
 }
-function h(e) {
-	return f.some((t) => e.searchParams.has(t));
+function _(e) {
+	return m.some((t) => e.searchParams.has(t));
 }
-function g(e) {
-	if (h(e)) return n(), !0;
-	if (m(e.pathname)) return !0;
+function v(e) {
+	if (_(e)) return n(), !0;
+	if (g(e.pathname)) return !0;
 	let t = e.searchParams.get("reason");
 	return t === "session-expired" || t === "logout";
 }
-function _() {
+function y() {
 	try {
-		sessionStorage.removeItem(u);
+		sessionStorage.removeItem(f);
 	} catch {}
 }
-function v() {
+function b() {
 	if (typeof window > "u") return null;
 	try {
-		let e = sessionStorage.getItem(u);
+		let e = sessionStorage.getItem(f);
 		if (!e) return null;
 		let t = JSON.parse(e);
-		return typeof t.relayOrigin != "string" || typeof t.returnTo != "string" || typeof t.startedAt != "number" || Date.now() - t.startedAt > d ? (_(), null) : {
+		return typeof t.relayOrigin != "string" || typeof t.returnTo != "string" || typeof t.startedAt != "number" || Date.now() - t.startedAt > p ? (y(), null) : {
 			relayOrigin: t.relayOrigin,
 			returnTo: t.returnTo,
 			startedAt: t.startedAt
 		};
 	} catch {
-		return _(), null;
+		return y(), null;
 	}
 }
-function y(e) {
+function x(e) {
 	try {
 		return new URL(e).origin;
 	} catch {
 		return null;
 	}
 }
-function b(e) {
-	let t = p(e);
-	return !t || g(t);
+function S(e) {
+	let t = h(e);
+	return !t || v(t);
 }
-function x(e, t) {
-	let n = y(e), r = p(t), i = v();
+function C(e, t) {
+	let n = x(e), r = h(t), i = b();
 	return !!(n && r && i?.returnTo === r.href);
 }
-function S(e, t) {
+function w(e, t) {
 	if (typeof window > "u") return;
-	let n = y(e), r = p(t);
+	let n = x(e), r = h(t);
 	if (!(!n || !r)) try {
 		let e = {
 			relayOrigin: n,
 			returnTo: r.href,
 			startedAt: Date.now()
 		};
-		sessionStorage.setItem(u, JSON.stringify(e));
+		sessionStorage.setItem(f, JSON.stringify(e));
 	} catch {}
 }
-function C(t) {
+function T(e, t) {
+	let n = `${e}/auth/sso-relay?returnTo=${encodeURIComponent(t.href)}`;
+	return l(n) ? n : null;
+}
+function E(t) {
 	if (s()) return null;
 	try {
-		let n = p(t);
-		if (!n || g(n) || r()) return null;
+		let n = h(t);
+		if (!n || v(n) || r()) return null;
 		let i = window.location.origin, s = null;
 		try {
 			s = new URL(e().url).origin;
@@ -90,23 +95,34 @@ function C(t) {
 		let c = o();
 		if (s === i && c?.origin && a(c.origin)) {
 			let e = new URL(c.origin).origin;
-			if (e && e !== i && !x(e, n.href)) return S(e, n.href), `${e}/auth/sso-relay?returnTo=${encodeURIComponent(n.href)}`;
+			if (e && e !== i) {
+				let t = T(e, n);
+				if (t && !C(e, n.href)) return w(e, n.href), t;
+			}
+		}
+		if (s && s !== i) {
+			let e = T(s, n);
+			if (e && !C(s, n.href)) return w(s, n.href), e;
 		}
-		return s && s !== i && !x(s, n.href) ? (S(s, n.href), `${s}/auth/sso-relay?returnTo=${encodeURIComponent(n.href)}`) : null;
+		return null;
 	} catch {
 		return null;
 	}
 }
-function w() {
+function D(e) {
+	let t = E(e);
+	return t ? u(t) : !1;
+}
+function O() {
 	try {
 		if (o()) return !1;
 		let e = sessionStorage.getItem("bf-active-profile");
-		return !e || !localStorage.getItem(`bf-p-${e}-tokens`) || !i() ? !1 : (E(), !0);
+		return !e || !localStorage.getItem(`bf-p-${e}-tokens`) || !i() ? !1 : (A(), !0);
 	} catch {
 		return !1;
 	}
 }
-async function T(e, t) {
+async function k(e, t) {
 	try {
 		let n = await fetch(e, {
 			method: "POST",
@@ -123,7 +139,7 @@ async function T(e, t) {
 		return !1;
 	}
 }
-function E() {
+function A() {
 	try {
 		let e = localStorage.getItem("bf-profiles");
 		if (e) {
@@ -134,8 +150,8 @@ function E() {
 		localStorage.removeItem("bf-profiles"), localStorage.removeItem("auth-storage"), sessionStorage.removeItem("bf-active-profile"), t(), n(), window.dispatchEvent(new Event("bf-auth-state-cleared")), window.dispatchEvent(new Event("bf-profile-storage-change"));
 	} catch {}
 }
-function D() {
-	return /* @__PURE__ */ l(c, { label: "Signing you in…" });
+function j() {
+	return /* @__PURE__ */ d(c, { label: "Signing you in…" });
 }
 //#endregion
-export { D as SSORedirectSpinner, T as checkRemoteSLO, w as checkSLO, E as clearLocalAuthState, _ as clearSSORelayAttempt, C as getSSORedirectUrl, x as hasRecentSSORedirectAttempt, S as markSSORedirectAttempt, b as shouldSkipSSORedirect };
+export { j as SSORedirectSpinner, k as checkRemoteSLO, O as checkSLO, A as clearLocalAuthState, y as clearSSORelayAttempt, E as getSSORedirectUrl, C as hasRecentSSORedirectAttempt, w as markSSORedirectAttempt, D as redirectToSSO, S as shouldSkipSSORedirect };

package/dist/shared/components/index.d.ts

@@ -25,7 +25,9 @@ export { UpgradePromptModal, dispatchUpgradePrompt, UPGRADE_PROMPT_EVENT, } from
 export type { UpgradePromptModalProps, UpgradePromptDetail } from './UpgradePromptModal';
 export { UpgradeInlineBanner } from './UpgradeInlineBanner';
 export type { UpgradeInlineBannerProps } from './UpgradeInlineBanner';
-export { getSSORedirectUrl, SSORedirectSpinner, checkSLO, checkRemoteSLO, clearLocalAuthState, } from './SSORedirectGuard';
+export { getSSORedirectUrl, redirectToSSO, SSORedirectSpinner, checkSLO, checkRemoteSLO, clearLocalAuthState, } from './SSORedirectGuard';
+export { LandingOrDashboardRedirect, LandingGateView, resolveLandingGate, hasStoredValidSession, } from './LandingOrDashboardRedirect';
+export type { LandingOrDashboardRedirectProps, LandingGateViewProps, LandingGateDecision, LandingGateInput, } from './LandingOrDashboardRedirect';
 export { AssistantWidget, ASSISTANT_WIDGET_TOGGLE_EVENT } from './assistantWidget/AssistantWidget';
 export type { AssistantWidgetProps, AssistantModeOption } from './assistantWidget/AssistantWidget';
 export { useVoiceInput } from './assistantWidget/useVoiceInput';

package/dist/shared/utils/index.d.ts

@@ -22,6 +22,8 @@ export { initializeLogger, setUserContext, clearUserContext, } from './loggerIni
 export type { InitLoggerOptions } from './loggerInit';
 export { setSSoCookie, getSSoCookie, clearSSoCookie, setShellSsoCookies, readShellSsoCookie, clearShellSsoCookies, isSharedSsoCookieDomain, isTrustedSsoOrigin, } from './authCookie';
 export type { ShellSsoCookieData } from './authCookie';
+export { isAllowedRedirectUrl, replaceLocationWithAllowlist, assignLocationWithAllowlist, openUrlInNewTabWithAllowlist, } from './redirectAllowlist';
+export type { RedirectAllowlistOptions } from './redirectAllowlist';
 export { SSO_DEPOSITED_PARAM, beginSsoNavigation, isSsoNavigationPending, clearSsoNavigation, readSsoDepositState, markSsoDepositPending, markSsoDepositDone, clearSsoDepositState, shouldAttemptSsoDeposit, mintSsoSessionTokens, buildSsoDepositUrl, consumeSsoDepositMarker, } from './ssoDeposit';
 export type { MintedSsoTokens, MintSsoSessionResult, SsoDepositPayload, SsoDepositState, } from './ssoDeposit';
 export { createProfileScopedStorage, getProfileScopedKey, } from './profileScopedStorage';

package/dist/shared/utils/redirectAllowlist.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Hostname allowlist for full-page navigations that may leave the current
+ * origin: the cross-eTLD+1 SSO relay, product-switcher hops between product
+ * shells, and similar first-party links.
+ *
+ * `isSafeRedirectTarget` / `redirectToSafeLocation` in `../graphql/security`
+ * are deliberately same-origin only, so they cannot carry a visitor to the
+ * central auth bridge (app.burdenoff.com) from a product shell. This module is
+ * the cross-origin counterpart: a target is allowed when it stays on the
+ * current hostname, or when its hostname is (a subdomain of) one of the
+ * Burdenoff product domains in `ALL_PRODUCT_DOMAINS` — the same single list
+ * that already drives the bridge host resolution and `isTrustedSsoOrigin`, so
+ * a new product never needs another hardcoded copy here.
+ *
+ * Ported from fluidgrids-app `src/utils/security.ts` (`isAllowedRedirectUrl`
+ * and friends), which shipped this check first.
+ *
+ * @module @burdenoff/fe-libs/shared/utils/redirectAllowlist
+ */
+export interface RedirectAllowlistOptions {
+    /**
+     * Origin the target is resolved against and compared with. Defaults to
+     * `window.location.origin`.
+     */
+    baseOrigin?: string;
+    /**
+     * Additional host suffixes to trust on top of the Burdenoff product
+     * domains (for example a shell's `VITE_ALLOWED_REDIRECT_HOSTS`, split on
+     * commas). Each entry matches the host itself and any subdomain of it.
+     */
+    extraHostSuffixes?: readonly string[];
+}
+/**
+ * Whether `target` may be navigated to from `baseOrigin`.
+ *
+ * Allowed:
+ * - relative paths and absolute URLs on the current hostname;
+ * - `https:` URLs whose hostname is a Burdenoff product domain or one of its
+ *   subdomains (`app.`, `alphaapp.`, `www.`, `docs.` …), or an
+ *   `extraHostSuffixes` entry;
+ * - local development hosts (`localhost`, `127.0.0.1` …, over `http:` or
+ *   `https:`) only when the current origin is itself local development.
+ *
+ * Everything else — other schemes (`javascript:`, `data:` …), unparsable
+ * input, protocol-relative or absolute URLs to any other host — is refused.
+ */
+export declare function isAllowedRedirectUrl(target: string, options?: RedirectAllowlistOptions): boolean;
+/**
+ * `window.location.replace(target)` when the target passes the allowlist.
+ * Returns whether the navigation was started, so callers can fall back
+ * (e.g. to the in-app login route) when it was refused.
+ */
+export declare function replaceLocationWithAllowlist(target: string, options?: RedirectAllowlistOptions): boolean;
+/** `window.location.assign(target)` when the target passes the allowlist. */
+export declare function assignLocationWithAllowlist(target: string, options?: RedirectAllowlistOptions): boolean;
+/**
+ * Open the target in a new tab (`noopener,noreferrer`) when it passes the
+ * allowlist.
+ */
+export declare function openUrlInNewTabWithAllowlist(target: string, options?: RedirectAllowlistOptions): boolean;

package/dist/shared/utils/redirectAllowlist.js

@@ -0,0 +1,47 @@
+import { ALL_PRODUCT_DOMAINS as e } from "../config/gatewayUrls.js";
+//#region src/shared/utils/redirectAllowlist.ts
+var t = new Set([
+	"localhost",
+	"127.0.0.1",
+	"::1",
+	"[::1]",
+	"host.docker.internal"
+]);
+function n(e) {
+	return e.trim().toLowerCase();
+}
+function r(e, t) {
+	let r = n(t);
+	return r ? e === r || e.endsWith(`.${r}`) : !1;
+}
+function i(e) {
+	return t.has(e) || r(e, "local.burdenoff.com");
+}
+function a(e) {
+	return e || (typeof window > "u" ? null : window.location.origin);
+}
+function o(o, s = {}) {
+	if (!o.trim()) return !1;
+	let c = a(s.baseOrigin);
+	if (!c) return !1;
+	let l, u;
+	try {
+		u = new URL(c), l = new URL(o, c);
+	} catch {
+		return !1;
+	}
+	if (l.protocol !== "https:" && l.protocol !== "http:") return !1;
+	let d = n(l.hostname), f = n(u.hostname);
+	return d === f ? !0 : t.has(d) ? i(f) : l.protocol === "http:" ? !1 : [...e, ...s.extraHostSuffixes ?? []].some((e) => r(d, e));
+}
+function s(e, t) {
+	return typeof window > "u" || !o(e, t) ? !1 : (window.location.replace(e), !0);
+}
+function c(e, t) {
+	return typeof window > "u" || !o(e, t) ? !1 : (window.location.assign(e), !0);
+}
+function l(e, t) {
+	return typeof window > "u" || !o(e, t) ? !1 : (window.open(e, "_blank", "noopener,noreferrer"), !0);
+}
+//#endregion
+export { c as assignLocationWithAllowlist, o as isAllowedRedirectUrl, l as openUrlInNewTabWithAllowlist, s as replaceLocationWithAllowlist };

package/dist/shared-components.js

@@ -1,21 +1,22 @@
-import { SSORedirectSpinner as e, checkRemoteSLO as t, checkSLO as n, clearLocalAuthState as r, getSSORedirectUrl as i } from "./shared/components/SSORedirectGuard.js";
-import { ErrorBoundary as a } from "./shared/components/ErrorBoundary.js";
-import { RequireAuth as o, RequireGuest as s } from "./shared/components/RequireAuth.js";
-import { PermissionButton as c, PermissionGate as l, PermissionLink as u } from "./shared/components/PermissionGate.js";
-import { AccessDenied as d, PermissionDenied as f } from "./shared/components/AccessDenied.js";
-import { ErrorFallback as p } from "./shared/components/ErrorFallback.js";
-import { LoadingFallback as m, PageLoadingFallback as h, SectionLoadingFallback as g } from "./shared/components/LoadingFallback.js";
-import { MicrofrontendErrorBoundary as _ } from "./shared/components/MicrofrontendErrorBoundary.js";
-import { ConditionalShell as v } from "./shared/components/ConditionalShell.js";
-import { PWAInstallBanner as y } from "./shared/components/PWAInstallBanner.js";
-import { ErrorBoundary as b } from "./shared/components/AppErrorBoundary.js";
-import { ContextConversationWidget as x } from "./shared/components/ContextConversationWidget.js";
-import { KeyboardHelpDialogWrapper as S } from "./shared/components/KeyboardHelpDialogWrapper.js";
-import { QuotaMeter as C } from "./shared/components/QuotaMeter.js";
-import { UPGRADE_PROMPT_EVENT as w, UpgradePromptModal as T, dispatchUpgradePrompt as E } from "./shared/components/UpgradePromptModal.js";
-import { UpgradeInlineBanner as D } from "./shared/components/UpgradeInlineBanner.js";
-import { useVoiceInput as O } from "./shared/components/assistantWidget/useVoiceInput.js";
-import { ASSISTANT_WIDGET_TOGGLE_EVENT as k, AssistantWidget as A } from "./shared/components/assistantWidget/AssistantWidget.js";
-import { Markdown as j } from "./shared/components/Markdown.js";
-import { DesktopUpdateToast as M } from "./shared/components/DesktopUpdateToast.js";
-export { k as ASSISTANT_WIDGET_TOGGLE_EVENT, d as AccessDenied, b as AppErrorBoundary, A as AssistantWidget, v as ConditionalShell, x as ContextConversationWidget, M as DesktopUpdateToast, a as ErrorBoundary, p as ErrorFallback, S as KeyboardHelpDialogWrapper, m as LoadingFallback, j as Markdown, _ as MicrofrontendErrorBoundary, y as PWAInstallBanner, h as PageLoadingFallback, c as PermissionButton, f as PermissionDenied, l as PermissionGate, u as PermissionLink, C as QuotaMeter, o as RequireAuth, s as RequireGuest, e as SSORedirectSpinner, g as SectionLoadingFallback, w as UPGRADE_PROMPT_EVENT, D as UpgradeInlineBanner, T as UpgradePromptModal, t as checkRemoteSLO, n as checkSLO, r as clearLocalAuthState, E as dispatchUpgradePrompt, i as getSSORedirectUrl, O as useVoiceInput };
+import { SSORedirectSpinner as e, checkRemoteSLO as t, checkSLO as n, clearLocalAuthState as r, getSSORedirectUrl as i, redirectToSSO as a } from "./shared/components/SSORedirectGuard.js";
+import { ErrorBoundary as o } from "./shared/components/ErrorBoundary.js";
+import { RequireAuth as s, RequireGuest as c } from "./shared/components/RequireAuth.js";
+import { PermissionButton as l, PermissionGate as u, PermissionLink as d } from "./shared/components/PermissionGate.js";
+import { AccessDenied as f, PermissionDenied as p } from "./shared/components/AccessDenied.js";
+import { ErrorFallback as m } from "./shared/components/ErrorFallback.js";
+import { LoadingFallback as h, PageLoadingFallback as g, SectionLoadingFallback as _ } from "./shared/components/LoadingFallback.js";
+import { MicrofrontendErrorBoundary as v } from "./shared/components/MicrofrontendErrorBoundary.js";
+import { ConditionalShell as y } from "./shared/components/ConditionalShell.js";
+import { PWAInstallBanner as b } from "./shared/components/PWAInstallBanner.js";
+import { ErrorBoundary as x } from "./shared/components/AppErrorBoundary.js";
+import { ContextConversationWidget as S } from "./shared/components/ContextConversationWidget.js";
+import { KeyboardHelpDialogWrapper as C } from "./shared/components/KeyboardHelpDialogWrapper.js";
+import { QuotaMeter as w } from "./shared/components/QuotaMeter.js";
+import { UPGRADE_PROMPT_EVENT as T, UpgradePromptModal as E, dispatchUpgradePrompt as D } from "./shared/components/UpgradePromptModal.js";
+import { UpgradeInlineBanner as O } from "./shared/components/UpgradeInlineBanner.js";
+import { LandingGateView as k, LandingOrDashboardRedirect as A, hasStoredValidSession as j, resolveLandingGate as M } from "./shared/components/LandingOrDashboardRedirect.js";
+import { useVoiceInput as N } from "./shared/components/assistantWidget/useVoiceInput.js";
+import { ASSISTANT_WIDGET_TOGGLE_EVENT as P, AssistantWidget as F } from "./shared/components/assistantWidget/AssistantWidget.js";
+import { Markdown as I } from "./shared/components/Markdown.js";
+import { DesktopUpdateToast as L } from "./shared/components/DesktopUpdateToast.js";
+export { P as ASSISTANT_WIDGET_TOGGLE_EVENT, f as AccessDenied, x as AppErrorBoundary, F as AssistantWidget, y as ConditionalShell, S as ContextConversationWidget, L as DesktopUpdateToast, o as ErrorBoundary, m as ErrorFallback, C as KeyboardHelpDialogWrapper, k as LandingGateView, A as LandingOrDashboardRedirect, h as LoadingFallback, I as Markdown, v as MicrofrontendErrorBoundary, b as PWAInstallBanner, g as PageLoadingFallback, l as PermissionButton, p as PermissionDenied, u as PermissionGate, d as PermissionLink, w as QuotaMeter, s as RequireAuth, c as RequireGuest, e as SSORedirectSpinner, _ as SectionLoadingFallback, T as UPGRADE_PROMPT_EVENT, O as UpgradeInlineBanner, E as UpgradePromptModal, t as checkRemoteSLO, n as checkSLO, r as clearLocalAuthState, D as dispatchUpgradePrompt, i as getSSORedirectUrl, j as hasStoredValidSession, a as redirectToSSO, M as resolveLandingGate, N as useVoiceInput };

package/dist/shared-native.js

@@ -6,19 +6,19 @@ import { nativeActionSheet as R, nativeConfirm as z, nativeCopyText as B, native
 import { SafeAreaView as q } from "./shared/native/SafeAreaView.js";
 import { readInitialNetworkStatus as J, reduceNetworkStatus as Y, useNetworkStatus as X } from "./shared/native/hooks/useNetworkStatus.js";
 import { PULL_TO_REFRESH_THRESHOLD as Z, computePullOffset as Q, computePullProgress as $, usePullToRefresh as ee } from "./shared/native/hooks/usePullToRefresh.js";
-import { useNativePlatform as te } from "./shared/native/hooks/useNativePlatform.js";
-import { useSafeArea as ne } from "./shared/native/hooks/useSafeArea.js";
-import { useNativeKeyboard as re } from "./shared/native/hooks/useNativeKeyboard.js";
-import { useAppState as ie } from "./shared/native/hooks/useAppState.js";
-import { useDeviceInfo as ae } from "./shared/native/hooks/useDeviceInfo.js";
-import { useHaptics as oe } from "./shared/native/hooks/useHaptics.js";
-import { useStatusBar as se } from "./shared/native/hooks/useStatusBar.js";
-import { resolveActionSheetOutcome as ce, useActionSheet as le } from "./shared/native/hooks/useActionSheet.js";
-import { useDesktop as ue } from "./shared/native/hooks/useDesktop.js";
-import { useDesktopUpdateState as de } from "./shared/native/hooks/useDesktopUpdateState.js";
-import { useDesktopWindowState as fe } from "./shared/native/hooks/useDesktopWindowState.js";
+import { getNativeEntryRoutes as te, shouldShowNativeWelcome as ne } from "./shared/native/entry.js";
+import { useNativePlatform as re } from "./shared/native/hooks/useNativePlatform.js";
+import { useSafeArea as ie } from "./shared/native/hooks/useSafeArea.js";
+import { useNativeKeyboard as ae } from "./shared/native/hooks/useNativeKeyboard.js";
+import { useAppState as oe } from "./shared/native/hooks/useAppState.js";
+import { useDeviceInfo as se } from "./shared/native/hooks/useDeviceInfo.js";
+import { useHaptics as ce } from "./shared/native/hooks/useHaptics.js";
+import { useStatusBar as le } from "./shared/native/hooks/useStatusBar.js";
+import { resolveActionSheetOutcome as ue, useActionSheet as de } from "./shared/native/hooks/useActionSheet.js";
+import { useDesktop as fe } from "./shared/native/hooks/useDesktop.js";
+import { useDesktopUpdateState as pe } from "./shared/native/hooks/useDesktopUpdateState.js";
+import { useDesktopWindowState as me } from "./shared/native/hooks/useDesktopWindowState.js";
 import "./shared/native/hooks/index.js";
-import { acknowledgeNativePurchase as pe, getNativeProducts as me, getNativePurchases as he, installNativeIAP as ge, isNativeIAPAvailable as _e, purchaseNativeProduct as ve, restoreNativePurchases as ye } from "./shared/native/purchases.js";
-import { getNativeEntryRoutes as be, shouldShowNativeWelcome as xe } from "./shared/native/entry.js";
+import { acknowledgeNativePurchase as he, getNativeProducts as ge, getNativePurchases as _e, installNativeIAP as ve, isNativeIAPAvailable as ye, purchaseNativeProduct as be, restoreNativePurchases as xe } from "./shared/native/purchases.js";
 import { getPushOptInController as Se, recordPushPermissionPromptDismissed as Ce, registerPushOptInController as we, shouldPromptForPushPermission as Te } from "./shared/native/push-optin.js";
-export { n as DESKTOP_UPDATE_UNSUPPORTED, r as DESKTOP_WINDOW_STATE_DEFAULT, Z as PULL_TO_REFRESH_THRESHOLD, q as SafeAreaView, pe as acknowledgeNativePurchase, i as bootDesktopShell, Q as computePullOffset, $ as computePullProgress, a as desktopCheckForUpdates, o as desktopDeepLinkToPath, s as desktopInstallUpdate, c as desktopNotify, l as desktopOpenExternal, u as desktopSetBadgeCount, d as desktopSetLocale, f as desktopSetTheme, p as desktopSetTrayQuickActions, e as getCapacitorPlatform, m as getDesktopAuthBridgeConfig, h as getDesktopBridge, g as getDesktopGatewayBases, _ as getDesktopGatewayUrls, v as getDesktopRuntimeConfig, y as getDesktopUpdateState, b as getDesktopWindowState, x as getLegacyDesktopRuntime, O as getNativeBridge, be as getNativeEntryRoutes, me as getNativeProducts, he as getNativePurchases, k as getPlatform, Se as getPushOptInController, S as installDesktopDeepLinkHandler, C as installDesktopNavigateHandler, ge as installNativeIAP, A as isAndroid, t as isCapacitorNative, w as isDesktop, j as isElectron, M as isIOS, N as isInstalledApp, P as isNative, _e as isNativeIAPAvailable, F as isStandalonePWA, I as isWeb, L as isWebBrowser, R as nativeActionSheet, z as nativeConfirm, B as nativeCopyText, V as nativeImpact, H as nativeNotify, U as nativeOpenUrl, W as nativeSelection, G as nativeShare, K as nativeToast, T as onDesktopUpdateState, E as onDesktopWindowState, ve as purchaseNativeProduct, J as readInitialNetworkStatus, Ce as recordPushPermissionPromptDismissed, Y as reduceNetworkStatus, D as registerDesktopNavigator, we as registerPushOptInController, ce as resolveActionSheetOutcome, ye as restoreNativePurchases, Te as shouldPromptForPushPermission, xe as shouldShowNativeWelcome, le as useActionSheet, ie as useAppState, ue as useDesktop, de as useDesktopUpdateState, fe as useDesktopWindowState, ae as useDeviceInfo, oe as useHaptics, re as useNativeKeyboard, te as useNativePlatform, X as useNetworkStatus, ee as usePullToRefresh, ne as useSafeArea, se as useStatusBar };
+export { n as DESKTOP_UPDATE_UNSUPPORTED, r as DESKTOP_WINDOW_STATE_DEFAULT, Z as PULL_TO_REFRESH_THRESHOLD, q as SafeAreaView, he as acknowledgeNativePurchase, i as bootDesktopShell, Q as computePullOffset, $ as computePullProgress, a as desktopCheckForUpdates, o as desktopDeepLinkToPath, s as desktopInstallUpdate, c as desktopNotify, l as desktopOpenExternal, u as desktopSetBadgeCount, d as desktopSetLocale, f as desktopSetTheme, p as desktopSetTrayQuickActions, e as getCapacitorPlatform, m as getDesktopAuthBridgeConfig, h as getDesktopBridge, g as getDesktopGatewayBases, _ as getDesktopGatewayUrls, v as getDesktopRuntimeConfig, y as getDesktopUpdateState, b as getDesktopWindowState, x as getLegacyDesktopRuntime, O as getNativeBridge, te as getNativeEntryRoutes, ge as getNativeProducts, _e as getNativePurchases, k as getPlatform, Se as getPushOptInController, S as installDesktopDeepLinkHandler, C as installDesktopNavigateHandler, ve as installNativeIAP, A as isAndroid, t as isCapacitorNative, w as isDesktop, j as isElectron, M as isIOS, N as isInstalledApp, P as isNative, ye as isNativeIAPAvailable, F as isStandalonePWA, I as isWeb, L as isWebBrowser, R as nativeActionSheet, z as nativeConfirm, B as nativeCopyText, V as nativeImpact, H as nativeNotify, U as nativeOpenUrl, W as nativeSelection, G as nativeShare, K as nativeToast, T as onDesktopUpdateState, E as onDesktopWindowState, be as purchaseNativeProduct, J as readInitialNetworkStatus, Ce as recordPushPermissionPromptDismissed, Y as reduceNetworkStatus, D as registerDesktopNavigator, we as registerPushOptInController, ue as resolveActionSheetOutcome, xe as restoreNativePurchases, Te as shouldPromptForPushPermission, ne as shouldShowNativeWelcome, de as useActionSheet, oe as useAppState, fe as useDesktop, pe as useDesktopUpdateState, me as useDesktopWindowState, se as useDeviceInfo, ce as useHaptics, ae as useNativeKeyboard, re as useNativePlatform, X as useNetworkStatus, ee as usePullToRefresh, ie as useSafeArea, le as useStatusBar };

package/dist/shared-utils.js

@@ -6,17 +6,18 @@ import { installGatewayFetchRewrite as P, resolveGatewayBases as F, suppressCons
 import { BACKEND_ERROR_EVENT as L, CONNECTION_STATUS_EVENT as R, dispatchBackendErrorEvent as z, extractBackendError as B, isAbortError as V, isBackendErrorDisplay as H, isTransportError as U, markConnectionHealthy as W, shouldToastBackendError as G } from "./shared/utils/backendErrors.js";
 import { attemptTokenRefresh as K, clearAuthSessionStorage as q, hasAuthGraphQLErrors as J, isAuthGraphQLError as Y, isAuthNetworkError as X, redirectToLogin as Z } from "./shared/utils/authErrorHandling.js";
 import { clearSSoCookie as Q, clearShellSsoCookies as $, getSSoCookie as ee, isSharedSsoCookieDomain as te, isTrustedSsoOrigin as ne, readShellSsoCookie as re, setSSoCookie as ie, setShellSsoCookies as ae } from "./shared/utils/authCookie.js";
-import { SSO_DEPOSITED_PARAM as oe, beginSsoNavigation as se, buildSsoDepositUrl as ce, clearSsoDepositState as le, clearSsoNavigation as ue, consumeSsoDepositMarker as de, isSsoNavigationPending as fe, markSsoDepositDone as pe, markSsoDepositPending as me, mintSsoSessionTokens as he, readSsoDepositState as ge, shouldAttemptSsoDeposit as _e } from "./shared/utils/ssoDeposit.js";
-import { AppInitializer as ve, useRegistryHelpers as ye, useShellNavigate as be } from "./shared/utils/appHelpers.js";
-import { clearUserContext as xe, initializeLogger as Se, setUserContext as Ce } from "./shared/utils/loggerInit.js";
-import { createProfileScopedStorage as we, getProfileScopedKey as Te } from "./shared/utils/profileScopedStorage.js";
-import { QUOTA_EXHAUSTED_CODE as Ee, RESOURCE_CAP_EXCEEDED_CODE as De, STORAGE_QUOTA_EXCEEDED_CODE as Oe, UPGRADE_ERROR_CODES as ke, buildQuotaExhaustedMessage as Ae, extractQuotaExhaustedExtensions as je, extractUpgradeErrorExtensions as Me, isQuotaExhaustedError as Ne, isUpgradeError as Pe } from "./shared/utils/quotaErrors.js";
-import { INLINE_ENCODE as Fe, downscaleImage as Ie, selectInlineBase64 as Le } from "./shared/utils/imageDownscale.js";
-import { clsx as Re } from "clsx";
-import { twMerge as ze } from "tailwind-merge";
+import { assignLocationWithAllowlist as oe, isAllowedRedirectUrl as se, openUrlInNewTabWithAllowlist as ce, replaceLocationWithAllowlist as le } from "./shared/utils/redirectAllowlist.js";
+import { SSO_DEPOSITED_PARAM as ue, beginSsoNavigation as de, buildSsoDepositUrl as fe, clearSsoDepositState as pe, clearSsoNavigation as me, consumeSsoDepositMarker as he, isSsoNavigationPending as ge, markSsoDepositDone as _e, markSsoDepositPending as ve, mintSsoSessionTokens as ye, readSsoDepositState as be, shouldAttemptSsoDeposit as xe } from "./shared/utils/ssoDeposit.js";
+import { AppInitializer as Se, useRegistryHelpers as Ce, useShellNavigate as we } from "./shared/utils/appHelpers.js";
+import { clearUserContext as Te, initializeLogger as Ee, setUserContext as De } from "./shared/utils/loggerInit.js";
+import { createProfileScopedStorage as Oe, getProfileScopedKey as ke } from "./shared/utils/profileScopedStorage.js";
+import { QUOTA_EXHAUSTED_CODE as Ae, RESOURCE_CAP_EXCEEDED_CODE as je, STORAGE_QUOTA_EXCEEDED_CODE as Me, UPGRADE_ERROR_CODES as Ne, buildQuotaExhaustedMessage as Pe, extractQuotaExhaustedExtensions as Fe, extractUpgradeErrorExtensions as Ie, isQuotaExhaustedError as Le, isUpgradeError as Re } from "./shared/utils/quotaErrors.js";
+import { INLINE_ENCODE as ze, downscaleImage as Be, selectInlineBase64 as Ve } from "./shared/utils/imageDownscale.js";
+import { clsx as He } from "clsx";
+import { twMerge as Ue } from "tailwind-merge";
 //#region src/shared/utils/index.ts
-function Be(...e) {
-	return ze(Re(e));
+function We(...e) {
+	return Ue(He(e));
 }
 //#endregion
-export { ve as AppInitializer, L as BACKEND_ERROR_EVENT, R as CONNECTION_STATUS_EVENT, Fe as INLINE_ENCODE, Ee as QUOTA_EXHAUSTED_CODE, De as RESOURCE_CAP_EXCEEDED_CODE, oe as SSO_DEPOSITED_PARAM, Oe as STORAGE_QUOTA_EXCEEDED_CODE, ke as UPGRADE_ERROR_CODES, t as alertTokens, K as attemptTokenRefresh, se as beginSsoNavigation, Ae as buildQuotaExhaustedMessage, ce as buildSsoDepositUrl, f as capitalizeFirst, p as capitalizeWords, n as categoryTokens, q as clearAuthSessionStorage, Q as clearSSoCookie, $ as clearShellSsoCookies, le as clearSsoDepositState, ue as clearSsoNavigation, xe as clearUserContext, Be as cn, de as consumeSsoDepositMarker, e as createApolloClient, we as createProfileScopedStorage, z as dispatchBackendErrorEvent, Ie as downscaleImage, B as extractBackendError, je as extractQuotaExhaustedExtensions, Me as extractUpgradeErrorExtensions, m as formatBytes, h as formatCompactNumber, g as formatCurrency, _ as formatCurrencyCompact, v as formatDate, y as formatDateTime, b as formatDuration, x as formatList, S as formatNumber, C as formatOrdinal, w as formatPercentage, T as formatRelativeTime, E as formatTime, r as getAlertTokens, i as getCategoryTokens, Te as getProfileScopedKey, a as getProgressTokens, ee as getSSoCookie, o as getStatusBadgeTokens, s as getStatusTokens, c as getTrendTokens, J as hasAuthGraphQLErrors, Se as initializeLogger, P as installGatewayFetchRewrite, V as isAbortError, Y as isAuthGraphQLError, X as isAuthNetworkError, H as isBackendErrorDisplay, M as isChunkLoadError, Ne as isQuotaExhaustedError, te as isSharedSsoCookieDomain, fe as isSsoNavigationPending, U as isTransportError, ne as isTrustedSsoOrigin, Pe as isUpgradeError, N as lazyWithRetry, W as markConnectionHealthy, pe as markSsoDepositDone, me as markSsoDepositPending, he as mintSsoSessionTokens, D as pluralize, l as progressTokens, re as readShellSsoCookie, ge as readSsoDepositState, Z as redirectToLogin, F as resolveGatewayBases, Le as selectInlineBase64, ie as setSSoCookie, ae as setShellSsoCookies, Ce as setUserContext, _e as shouldAttemptSsoDeposit, G as shouldToastBackendError, O as slugify, u as statusTokens, I as suppressConsole, k as toCamelCase, A as toPascalCase, d as trendTokens, j as truncateText, ye as useRegistryHelpers, be as useShellNavigate };
+export { Se as AppInitializer, L as BACKEND_ERROR_EVENT, R as CONNECTION_STATUS_EVENT, ze as INLINE_ENCODE, Ae as QUOTA_EXHAUSTED_CODE, je as RESOURCE_CAP_EXCEEDED_CODE, ue as SSO_DEPOSITED_PARAM, Me as STORAGE_QUOTA_EXCEEDED_CODE, Ne as UPGRADE_ERROR_CODES, t as alertTokens, oe as assignLocationWithAllowlist, K as attemptTokenRefresh, de as beginSsoNavigation, Pe as buildQuotaExhaustedMessage, fe as buildSsoDepositUrl, f as capitalizeFirst, p as capitalizeWords, n as categoryTokens, q as clearAuthSessionStorage, Q as clearSSoCookie, $ as clearShellSsoCookies, pe as clearSsoDepositState, me as clearSsoNavigation, Te as clearUserContext, We as cn, he as consumeSsoDepositMarker, e as createApolloClient, Oe as createProfileScopedStorage, z as dispatchBackendErrorEvent, Be as downscaleImage, B as extractBackendError, Fe as extractQuotaExhaustedExtensions, Ie as extractUpgradeErrorExtensions, m as formatBytes, h as formatCompactNumber, g as formatCurrency, _ as formatCurrencyCompact, v as formatDate, y as formatDateTime, b as formatDuration, x as formatList, S as formatNumber, C as formatOrdinal, w as formatPercentage, T as formatRelativeTime, E as formatTime, r as getAlertTokens, i as getCategoryTokens, ke as getProfileScopedKey, a as getProgressTokens, ee as getSSoCookie, o as getStatusBadgeTokens, s as getStatusTokens, c as getTrendTokens, J as hasAuthGraphQLErrors, Ee as initializeLogger, P as installGatewayFetchRewrite, V as isAbortError, se as isAllowedRedirectUrl, Y as isAuthGraphQLError, X as isAuthNetworkError, H as isBackendErrorDisplay, M as isChunkLoadError, Le as isQuotaExhaustedError, te as isSharedSsoCookieDomain, ge as isSsoNavigationPending, U as isTransportError, ne as isTrustedSsoOrigin, Re as isUpgradeError, N as lazyWithRetry, W as markConnectionHealthy, _e as markSsoDepositDone, ve as markSsoDepositPending, ye as mintSsoSessionTokens, ce as openUrlInNewTabWithAllowlist, D as pluralize, l as progressTokens, re as readShellSsoCookie, be as readSsoDepositState, Z as redirectToLogin, le as replaceLocationWithAllowlist, F as resolveGatewayBases, Ve as selectInlineBase64, ie as setSSoCookie, ae as setShellSsoCookies, De as setUserContext, xe as shouldAttemptSsoDeposit, G as shouldToastBackendError, O as slugify, u as statusTokens, I as suppressConsole, k as toCamelCase, A as toPascalCase, d as trendTokens, j as truncateText, Ce as useRegistryHelpers, we as useShellNavigate };

package/dist/shared.js

@@ -27,116 +27,118 @@ import { attemptTokenRefresh as Ot, clearAuthSessionStorage as kt, hasAuthGraphQ
 import { clearSSoCookie as Pt, clearShellSsoCookies as Ft, getSSoCookie as It, isSharedSsoCookieDomain as Lt, isTrustedSsoOrigin as Rt, readShellSsoCookie as zt, setSSoCookie as Bt, setShellSsoCookies as Vt } from "./shared/utils/authCookie.js";
 import { getNativeBridge as Ht } from "./shared/native/bridge.js";
 import { getPlatform as Ut, isAndroid as Wt, isElectron as Gt, isIOS as Kt, isInstalledApp as qt, isNative as Jt, isStandalonePWA as Yt, isWeb as Xt, isWebBrowser as Zt } from "./shared/native/platform.js";
-import { SSORedirectSpinner as Qt, checkRemoteSLO as $t, checkSLO as en, clearLocalAuthState as tn, getSSORedirectUrl as nn } from "./shared/components/SSORedirectGuard.js";
-import { SSO_DEPOSITED_PARAM as rn, beginSsoNavigation as an, buildSsoDepositUrl as on, clearSsoDepositState as sn, clearSsoNavigation as cn, consumeSsoDepositMarker as ln, isSsoNavigationPending as un, markSsoDepositDone as dn, markSsoDepositPending as fn, mintSsoSessionTokens as pn, readSsoDepositState as mn, shouldAttemptSsoDeposit as hn } from "./shared/utils/ssoDeposit.js";
-import { AppInitializer as gn, useRegistryHelpers as _n, useShellNavigate as vn } from "./shared/utils/appHelpers.js";
-import { LogLevel as yn } from "./shared/logger/types.js";
-import { Logger as bn } from "./shared/logger/Logger.js";
-import { LogManager as xn, logManager as Sn } from "./shared/logger/LogManager.js";
-import { ConsoleTransport as Cn } from "./shared/logger/ConsoleTransport.js";
-import { clearUserContext as wn, initializeLogger as Tn, setUserContext as En } from "./shared/utils/loggerInit.js";
-import { createProfileScopedStorage as Dn, getProfileScopedKey as On } from "./shared/utils/profileScopedStorage.js";
-import { QUOTA_EXHAUSTED_CODE as kn, RESOURCE_CAP_EXCEEDED_CODE as An, STORAGE_QUOTA_EXCEEDED_CODE as jn, UPGRADE_ERROR_CODES as Mn, buildQuotaExhaustedMessage as Nn, extractQuotaExhaustedExtensions as Pn, extractUpgradeErrorExtensions as Fn, isQuotaExhaustedError as In, isUpgradeError as Ln } from "./shared/utils/quotaErrors.js";
-import { INLINE_ENCODE as Rn, downscaleImage as zn, selectInlineBase64 as Bn } from "./shared/utils/imageDownscale.js";
-import { cn as Vn } from "./shared-utils.js";
-import { nativeActionSheet as Hn, nativeConfirm as Un, nativeCopyText as Wn, nativeImpact as Gn, nativeNotify as Kn, nativeOpenUrl as qn, nativeSelection as Jn, nativeShare as Yn, nativeToast as Xn } from "./shared/native/consumers.js";
-import { SafeAreaView as Zn } from "./shared/native/SafeAreaView.js";
-import { readInitialNetworkStatus as Qn, reduceNetworkStatus as $n, useNetworkStatus as er } from "./shared/native/hooks/useNetworkStatus.js";
-import { PULL_TO_REFRESH_THRESHOLD as tr, computePullOffset as nr, computePullProgress as rr, usePullToRefresh as ir } from "./shared/native/hooks/usePullToRefresh.js";
-import { useReturnFocus as ar } from "./shared/hooks/useReturnFocus.js";
-import { ActorIdentity as or } from "./shared/actors/ActorIdentity.js";
-import { buildActorFallback as sr, useActorProfiles as cr } from "./shared/actors/useActorProfiles.js";
-import { ErrorBoundary as lr } from "./shared/components/ErrorBoundary.js";
-import { RequireAuth as ur, RequireGuest as dr } from "./shared/components/RequireAuth.js";
-import { PermissionButton as fr, PermissionGate as pr, PermissionLink as mr } from "./shared/components/PermissionGate.js";
-import { AccessDenied as hr, PermissionDenied as gr } from "./shared/components/AccessDenied.js";
-import { ErrorFallback as _r } from "./shared/components/ErrorFallback.js";
-import { LoadingFallback as vr, PageLoadingFallback as yr, SectionLoadingFallback as br } from "./shared/components/LoadingFallback.js";
-import { MicrofrontendErrorBoundary as xr } from "./shared/components/MicrofrontendErrorBoundary.js";
-import { ConditionalShell as Sr } from "./shared/components/ConditionalShell.js";
-import { usePWA as Cr } from "./shared/hooks/usePWA.js";
-import { PWAInstallBanner as wr } from "./shared/components/PWAInstallBanner.js";
-import { ErrorBoundary as Tr } from "./shared/components/AppErrorBoundary.js";
-import { FeatureFlagProvider as Er, useFeatureFlags as Dr } from "./shared/feature-flags/FeatureFlagProvider.js";
-import { useFeatureFlag as Or, useFeatureFlagDetails as kr, useFeatureFlagValue as Ar } from "./shared/feature-flags/useFeatureFlag.js";
-import { FeatureGate as jr } from "./shared/feature-flags/FeatureGate.js";
+import { assignLocationWithAllowlist as Qt, isAllowedRedirectUrl as $t, openUrlInNewTabWithAllowlist as en, replaceLocationWithAllowlist as tn } from "./shared/utils/redirectAllowlist.js";
+import { SSORedirectSpinner as nn, checkRemoteSLO as rn, checkSLO as an, clearLocalAuthState as on, getSSORedirectUrl as sn, redirectToSSO as cn } from "./shared/components/SSORedirectGuard.js";
+import { SSO_DEPOSITED_PARAM as ln, beginSsoNavigation as un, buildSsoDepositUrl as dn, clearSsoDepositState as fn, clearSsoNavigation as pn, consumeSsoDepositMarker as mn, isSsoNavigationPending as hn, markSsoDepositDone as gn, markSsoDepositPending as _n, mintSsoSessionTokens as vn, readSsoDepositState as yn, shouldAttemptSsoDeposit as bn } from "./shared/utils/ssoDeposit.js";
+import { AppInitializer as xn, useRegistryHelpers as Sn, useShellNavigate as Cn } from "./shared/utils/appHelpers.js";
+import { LogLevel as wn } from "./shared/logger/types.js";
+import { Logger as Tn } from "./shared/logger/Logger.js";
+import { LogManager as En, logManager as Dn } from "./shared/logger/LogManager.js";
+import { ConsoleTransport as On } from "./shared/logger/ConsoleTransport.js";
+import { clearUserContext as kn, initializeLogger as An, setUserContext as jn } from "./shared/utils/loggerInit.js";
+import { createProfileScopedStorage as Mn, getProfileScopedKey as Nn } from "./shared/utils/profileScopedStorage.js";
+import { QUOTA_EXHAUSTED_CODE as Pn, RESOURCE_CAP_EXCEEDED_CODE as Fn, STORAGE_QUOTA_EXCEEDED_CODE as In, UPGRADE_ERROR_CODES as Ln, buildQuotaExhaustedMessage as Rn, extractQuotaExhaustedExtensions as zn, extractUpgradeErrorExtensions as Bn, isQuotaExhaustedError as Vn, isUpgradeError as Hn } from "./shared/utils/quotaErrors.js";
+import { INLINE_ENCODE as Un, downscaleImage as Wn, selectInlineBase64 as Gn } from "./shared/utils/imageDownscale.js";
+import { cn as Kn } from "./shared-utils.js";
+import { nativeActionSheet as qn, nativeConfirm as Jn, nativeCopyText as Yn, nativeImpact as Xn, nativeNotify as Zn, nativeOpenUrl as Qn, nativeSelection as $n, nativeShare as er, nativeToast as tr } from "./shared/native/consumers.js";
+import { SafeAreaView as nr } from "./shared/native/SafeAreaView.js";
+import { readInitialNetworkStatus as rr, reduceNetworkStatus as ir, useNetworkStatus as ar } from "./shared/native/hooks/useNetworkStatus.js";
+import { PULL_TO_REFRESH_THRESHOLD as or, computePullOffset as sr, computePullProgress as cr, usePullToRefresh as lr } from "./shared/native/hooks/usePullToRefresh.js";
+import { useReturnFocus as ur } from "./shared/hooks/useReturnFocus.js";
+import { ActorIdentity as dr } from "./shared/actors/ActorIdentity.js";
+import { buildActorFallback as fr, useActorProfiles as pr } from "./shared/actors/useActorProfiles.js";
+import { ErrorBoundary as mr } from "./shared/components/ErrorBoundary.js";
+import { RequireAuth as hr, RequireGuest as gr } from "./shared/components/RequireAuth.js";
+import { PermissionButton as _r, PermissionGate as vr, PermissionLink as yr } from "./shared/components/PermissionGate.js";
+import { AccessDenied as br, PermissionDenied as xr } from "./shared/components/AccessDenied.js";
+import { ErrorFallback as Sr } from "./shared/components/ErrorFallback.js";
+import { LoadingFallback as Cr, PageLoadingFallback as wr, SectionLoadingFallback as Tr } from "./shared/components/LoadingFallback.js";
+import { MicrofrontendErrorBoundary as Er } from "./shared/components/MicrofrontendErrorBoundary.js";
+import { ConditionalShell as Dr } from "./shared/components/ConditionalShell.js";
+import { usePWA as Or } from "./shared/hooks/usePWA.js";
+import { PWAInstallBanner as kr } from "./shared/components/PWAInstallBanner.js";
+import { ErrorBoundary as Ar } from "./shared/components/AppErrorBoundary.js";
+import { FeatureFlagProvider as jr, useFeatureFlags as Mr } from "./shared/feature-flags/FeatureFlagProvider.js";
+import { useFeatureFlag as Nr, useFeatureFlagDetails as Pr, useFeatureFlagValue as Fr } from "./shared/feature-flags/useFeatureFlag.js";
+import { FeatureGate as Ir } from "./shared/feature-flags/FeatureGate.js";
 import "./shared-feature-flags.js";
-import { ContextConversationWidget as Mr } from "./shared/components/ContextConversationWidget.js";
-import { detectPlatform as Nr, formatKeyCombo as Pr, getDisplayKeysForPlatform as Fr, getShortcutLabel as Ir, isMac as Lr, isMobileDevice as Rr, isTabletDevice as zr, matchesKeyCombo as Br, normalizeKey as Vr, normalizePlatformCombo as Hr, parseKeyCombo as Ur, shouldEnableKeyboardShortcuts as Wr, shouldIgnoreShortcut as Gr } from "./shared/keyboard/utils.js";
-import { KeyboardHelpDialogWrapper as Kr } from "./shared/components/KeyboardHelpDialogWrapper.js";
-import { QuotaMeter as qr } from "./shared/components/QuotaMeter.js";
-import { UPGRADE_PROMPT_EVENT as Jr, UpgradePromptModal as Yr, dispatchUpgradePrompt as Xr } from "./shared/components/UpgradePromptModal.js";
-import { UpgradeInlineBanner as Zr } from "./shared/components/UpgradeInlineBanner.js";
-import { useVoiceInput as Qr } from "./shared/components/assistantWidget/useVoiceInput.js";
-import { ASSISTANT_WIDGET_TOGGLE_EVENT as $r, AssistantWidget as ei } from "./shared/components/assistantWidget/AssistantWidget.js";
-import { Markdown as ti } from "./shared/components/Markdown.js";
-import { useNativePlatform as ni } from "./shared/native/hooks/useNativePlatform.js";
-import { useSafeArea as ri } from "./shared/native/hooks/useSafeArea.js";
-import { useNativeKeyboard as ii } from "./shared/native/hooks/useNativeKeyboard.js";
-import { useAppState as ai } from "./shared/native/hooks/useAppState.js";
-import { useDeviceInfo as oi } from "./shared/native/hooks/useDeviceInfo.js";
-import { useHaptics as si } from "./shared/native/hooks/useHaptics.js";
-import { useStatusBar as ci } from "./shared/native/hooks/useStatusBar.js";
-import { resolveActionSheetOutcome as li, useActionSheet as ui } from "./shared/native/hooks/useActionSheet.js";
-import { useDesktop as di } from "./shared/native/hooks/useDesktop.js";
-import { useDesktopUpdateState as fi } from "./shared/native/hooks/useDesktopUpdateState.js";
-import { useDesktopWindowState as pi } from "./shared/native/hooks/useDesktopWindowState.js";
-import { DesktopUpdateToast as mi } from "./shared/components/DesktopUpdateToast.js";
+import { ContextConversationWidget as Lr } from "./shared/components/ContextConversationWidget.js";
+import { detectPlatform as Rr, formatKeyCombo as zr, getDisplayKeysForPlatform as Br, getShortcutLabel as Vr, isMac as Hr, isMobileDevice as Ur, isTabletDevice as Wr, matchesKeyCombo as Gr, normalizeKey as Kr, normalizePlatformCombo as qr, parseKeyCombo as Jr, shouldEnableKeyboardShortcuts as Yr, shouldIgnoreShortcut as Xr } from "./shared/keyboard/utils.js";
+import { KeyboardHelpDialogWrapper as Zr } from "./shared/components/KeyboardHelpDialogWrapper.js";
+import { QuotaMeter as Qr } from "./shared/components/QuotaMeter.js";
+import { UPGRADE_PROMPT_EVENT as $r, UpgradePromptModal as ei, dispatchUpgradePrompt as ti } from "./shared/components/UpgradePromptModal.js";
+import { UpgradeInlineBanner as ni } from "./shared/components/UpgradeInlineBanner.js";
+import { getNativeEntryRoutes as ri, shouldShowNativeWelcome as ii } from "./shared/native/entry.js";
+import { LandingGateView as ai, LandingOrDashboardRedirect as oi, hasStoredValidSession as si, resolveLandingGate as ci } from "./shared/components/LandingOrDashboardRedirect.js";
+import { useVoiceInput as li } from "./shared/components/assistantWidget/useVoiceInput.js";
+import { ASSISTANT_WIDGET_TOGGLE_EVENT as ui, AssistantWidget as di } from "./shared/components/assistantWidget/AssistantWidget.js";
+import { Markdown as fi } from "./shared/components/Markdown.js";
+import { useNativePlatform as pi } from "./shared/native/hooks/useNativePlatform.js";
+import { useSafeArea as mi } from "./shared/native/hooks/useSafeArea.js";
+import { useNativeKeyboard as hi } from "./shared/native/hooks/useNativeKeyboard.js";
+import { useAppState as gi } from "./shared/native/hooks/useAppState.js";
+import { useDeviceInfo as _i } from "./shared/native/hooks/useDeviceInfo.js";
+import { useHaptics as vi } from "./shared/native/hooks/useHaptics.js";
+import { useStatusBar as yi } from "./shared/native/hooks/useStatusBar.js";
+import { resolveActionSheetOutcome as bi, useActionSheet as xi } from "./shared/native/hooks/useActionSheet.js";
+import { useDesktop as Si } from "./shared/native/hooks/useDesktop.js";
+import { useDesktopUpdateState as Ci } from "./shared/native/hooks/useDesktopUpdateState.js";
+import { useDesktopWindowState as wi } from "./shared/native/hooks/useDesktopWindowState.js";
+import { DesktopUpdateToast as Ti } from "./shared/components/DesktopUpdateToast.js";
 import "./shared-components.js";
-import { DevtoolsSink as hi } from "./shared/events/sinks/DevtoolsSink.js";
-import { BroadcastChannelSink as gi } from "./shared/events/sinks/BroadcastChannelSink.js";
-import { BackendAuditSink as _i } from "./shared/events/sinks/BackendAuditSink.js";
-import { AnalyticsConsentBanner as vi, RybbitSink as yi, readAnalyticsConsent as bi, readAnalyticsConsentChoice as xi, setAnalyticsConsent as Si } from "./shared/events/sinks/RybbitSink.js";
-import { OtelBrowserSink as Ci } from "./shared/events/sinks/OtelBrowserSink.js";
-import { EventBusProvider as wi, createEventBus as Ti, useEvent as Ei, useEventBus as Di, useEventEmitter as Oi } from "./shared-events.js";
-import { useDebounce as ki } from "./shared/hooks/useDebounce.js";
-import { useThrottle as Ai } from "./shared/hooks/useThrottle.js";
-import { BREAKPOINTS as ji, useBreakpoint as Mi, useMobileBreakpoint as Ni } from "./shared/hooks/useBreakpoint.js";
-import { useOnClickOutside as Pi, useOnClickOutsideWithRef as Fi } from "./shared/hooks/useOnClickOutside.js";
-import { useKeyPress as Ii, useKeyboardShortcut as Li } from "./shared/hooks/useKeyPress.js";
-import { useExclusiveMenu as Ri } from "./shared/hooks/useExclusiveMenu.js";
-import { useLocalStorage as zi } from "./shared/hooks/useLocalStorage.js";
-import { useSessionStorage as Bi } from "./shared/hooks/useSessionStorage.js";
-import { usePrevious as Vi, usePreviousDistinct as Hi, usePreviousHistory as Ui } from "./shared/hooks/usePrevious.js";
-import { useConditionalToggle as Wi, useToggle as Gi, useToggleObject as Ki } from "./shared/hooks/useToggle.js";
-import { usePagination as qi } from "./shared/hooks/usePagination.js";
-import { useAsync as Ji, useAsyncImmediate as Yi } from "./shared/hooks/useAsync.js";
-import { MODIFIER_KEYS as Xi, PLATFORM_TYPES as Zi } from "./shared/keyboard/types.js";
-import { useKeyboardShortcuts as Qi } from "./shared/keyboard/useKeyboardShortcuts.js";
-import { useHotkeys as $i } from "./shared/keyboard/useHotkeys.js";
-import { useShortcutHelp as ea } from "./shared/keyboard/useShortcutHelp.js";
-import { GLOBAL_SHORTCUT_CATEGORIES as ta, createGlobalShortcuts as na, getGlobalShortcutsByCategory as ra, mergeShortcuts as ia } from "./shared/keyboard/globalShortcuts.js";
-import { useLogger as aa } from "./shared/logger/useLogger.js";
-import { useHasAnimated as oa } from "./shared/hooks/useHasAnimated.js";
-import { useReferralAttribution as sa } from "./shared/hooks/useReferralAttribution.js";
-import { useRecordProductVisit as ca } from "./shared/hooks/useRecordProductVisit.js";
-import { PUSH_DEVICE_ID_STORAGE_KEY as la, getOrCreatePushDeviceId as ua, registerPushDevice as da, unregisterPushDevice as fa } from "./shared/native/push-registration.js";
-import { usePushDeviceRegistration as pa } from "./shared/hooks/usePushDeviceRegistration.js";
-import { QUOTA_EXHAUSTED_EVENT as ma, dispatchQuotaExhausted as ha, useQuotaErrorToast as ga } from "./shared/hooks/useQuotaErrorToast.js";
-import { PLAN_USAGE_SNAPSHOT_EVENT as _a, publishPlanUsageSnapshot as va, useUpgradePrompt as ya } from "./shared/hooks/useUpgradePrompt.js";
-import { appendContextToPath as ba, useCurrentContextSearchParams as xa } from "./shared/hooks/useCurrentContextSearchParams.js";
-import { UNSAVED_CHANGE_LABEL_MAX as Sa, listUnsavedChanges as Ca, registerUnsavedChange as wa, unsavedChangesBlocking as Ta, useUnsavedChanges as Ea } from "./shared/navigation/unsavedChanges.js";
-import { MicrofrontendContext as Da, useMicrofrontendContext as Oa } from "./shared-hooks.js";
-import { withTourProgressStatus as ka } from "./shared/tours/progress.js";
-import { detectDeviceType as Aa, getResponsiveSelector as ja } from "./shared/tours/types.js";
-import { useTourPlayer as Ma } from "./shared/tours/useTourPlayer.js";
-import { TourSpotlight as Na } from "./shared/tours/TourSpotlight.js";
-import { TourTooltip as Pa } from "./shared/tours/TourTooltip.js";
-import { TourPlayerProvider as Fa, useIsTourPlaying as Ia, useStartTour as La, useStopTour as Ra, useTourPlayerContext as za } from "./shared/tours/TourPlayerProvider.js";
-import { TourPlayer as Ba, TourTriggerButton as Va, usePlayTour as Ha } from "./shared/tours/TourPlayer.js";
-import { getTourContextRank as Ua, getTourRouteCatalog as Wa, getTourRouteModules as Ga, getTourRoutePages as Ka, isTourVisibleForContext as qa, normalizeTourPath as Ja, registerTourRouteCatalog as Ya, resolveTourTargetPath as Xa } from "./shared/tours/routeCatalog.js";
-import { ToursProvider as Za, useAutoStartTour as Qa, useSafeToursContext as $a, useTours as eo, useToursContext as to } from "./shared/tours/ToursContext.js";
-import { TourInitializer as no } from "./shared/tours/TourInitializer.js";
-import { AppShellProvider as ro, resolveAppShellObservabilityConfig as io } from "./shared/providers/AppShellProvider.js";
-import { MicrofrontendProvider as ao } from "./shared-providers.js";
-import { TourTrigger as oo } from "./shared/tours/TourTrigger.js";
+import { DevtoolsSink as Ei } from "./shared/events/sinks/DevtoolsSink.js";
+import { BroadcastChannelSink as Di } from "./shared/events/sinks/BroadcastChannelSink.js";
+import { BackendAuditSink as Oi } from "./shared/events/sinks/BackendAuditSink.js";
+import { AnalyticsConsentBanner as ki, RybbitSink as Ai, readAnalyticsConsent as ji, readAnalyticsConsentChoice as Mi, setAnalyticsConsent as Ni } from "./shared/events/sinks/RybbitSink.js";
+import { OtelBrowserSink as Pi } from "./shared/events/sinks/OtelBrowserSink.js";
+import { EventBusProvider as Fi, createEventBus as Ii, useEvent as Li, useEventBus as Ri, useEventEmitter as zi } from "./shared-events.js";
+import { useDebounce as Bi } from "./shared/hooks/useDebounce.js";
+import { useThrottle as Vi } from "./shared/hooks/useThrottle.js";
+import { BREAKPOINTS as Hi, useBreakpoint as Ui, useMobileBreakpoint as Wi } from "./shared/hooks/useBreakpoint.js";
+import { useOnClickOutside as Gi, useOnClickOutsideWithRef as Ki } from "./shared/hooks/useOnClickOutside.js";
+import { useKeyPress as qi, useKeyboardShortcut as Ji } from "./shared/hooks/useKeyPress.js";
+import { useExclusiveMenu as Yi } from "./shared/hooks/useExclusiveMenu.js";
+import { useLocalStorage as Xi } from "./shared/hooks/useLocalStorage.js";
+import { useSessionStorage as Zi } from "./shared/hooks/useSessionStorage.js";
+import { usePrevious as Qi, usePreviousDistinct as $i, usePreviousHistory as ea } from "./shared/hooks/usePrevious.js";
+import { useConditionalToggle as ta, useToggle as na, useToggleObject as ra } from "./shared/hooks/useToggle.js";
+import { usePagination as ia } from "./shared/hooks/usePagination.js";
+import { useAsync as aa, useAsyncImmediate as oa } from "./shared/hooks/useAsync.js";
+import { MODIFIER_KEYS as sa, PLATFORM_TYPES as ca } from "./shared/keyboard/types.js";
+import { useKeyboardShortcuts as la } from "./shared/keyboard/useKeyboardShortcuts.js";
+import { useHotkeys as ua } from "./shared/keyboard/useHotkeys.js";
+import { useShortcutHelp as da } from "./shared/keyboard/useShortcutHelp.js";
+import { GLOBAL_SHORTCUT_CATEGORIES as fa, createGlobalShortcuts as pa, getGlobalShortcutsByCategory as ma, mergeShortcuts as ha } from "./shared/keyboard/globalShortcuts.js";
+import { useLogger as ga } from "./shared/logger/useLogger.js";
+import { useHasAnimated as _a } from "./shared/hooks/useHasAnimated.js";
+import { useReferralAttribution as va } from "./shared/hooks/useReferralAttribution.js";
+import { useRecordProductVisit as ya } from "./shared/hooks/useRecordProductVisit.js";
+import { PUSH_DEVICE_ID_STORAGE_KEY as ba, getOrCreatePushDeviceId as xa, registerPushDevice as Sa, unregisterPushDevice as Ca } from "./shared/native/push-registration.js";
+import { usePushDeviceRegistration as wa } from "./shared/hooks/usePushDeviceRegistration.js";
+import { QUOTA_EXHAUSTED_EVENT as Ta, dispatchQuotaExhausted as Ea, useQuotaErrorToast as Da } from "./shared/hooks/useQuotaErrorToast.js";
+import { PLAN_USAGE_SNAPSHOT_EVENT as Oa, publishPlanUsageSnapshot as ka, useUpgradePrompt as Aa } from "./shared/hooks/useUpgradePrompt.js";
+import { appendContextToPath as ja, useCurrentContextSearchParams as Ma } from "./shared/hooks/useCurrentContextSearchParams.js";
+import { UNSAVED_CHANGE_LABEL_MAX as Na, listUnsavedChanges as Pa, registerUnsavedChange as Fa, unsavedChangesBlocking as Ia, useUnsavedChanges as La } from "./shared/navigation/unsavedChanges.js";
+import { MicrofrontendContext as Ra, useMicrofrontendContext as za } from "./shared-hooks.js";
+import { withTourProgressStatus as Ba } from "./shared/tours/progress.js";
+import { detectDeviceType as Va, getResponsiveSelector as Ha } from "./shared/tours/types.js";
+import { useTourPlayer as Ua } from "./shared/tours/useTourPlayer.js";
+import { TourSpotlight as Wa } from "./shared/tours/TourSpotlight.js";
+import { TourTooltip as Ga } from "./shared/tours/TourTooltip.js";
+import { TourPlayerProvider as Ka, useIsTourPlaying as qa, useStartTour as Ja, useStopTour as Ya, useTourPlayerContext as Xa } from "./shared/tours/TourPlayerProvider.js";
+import { TourPlayer as Za, TourTriggerButton as Qa, usePlayTour as $a } from "./shared/tours/TourPlayer.js";
+import { getTourContextRank as eo, getTourRouteCatalog as to, getTourRouteModules as no, getTourRoutePages as ro, isTourVisibleForContext as io, normalizeTourPath as ao, registerTourRouteCatalog as oo, resolveTourTargetPath as so } from "./shared/tours/routeCatalog.js";
+import { ToursProvider as co, useAutoStartTour as lo, useSafeToursContext as uo, useTours as fo, useToursContext as po } from "./shared/tours/ToursContext.js";
+import { TourInitializer as mo } from "./shared/tours/TourInitializer.js";
+import { AppShellProvider as ho, resolveAppShellObservabilityConfig as go } from "./shared/providers/AppShellProvider.js";
+import { MicrofrontendProvider as _o } from "./shared-providers.js";
+import { TourTrigger as vo } from "./shared/tours/TourTrigger.js";
 import "./shared-tours.js";
-import { acknowledgeNativePurchase as so, getNativeProducts as co, getNativePurchases as lo, installNativeIAP as uo, isNativeIAPAvailable as fo, purchaseNativeProduct as po, restoreNativePurchases as mo } from "./shared/native/purchases.js";
-import { getNativeEntryRoutes as ho, shouldShowNativeWelcome as go } from "./shared/native/entry.js";
-import { getPushOptInController as _o, recordPushPermissionPromptDismissed as vo, registerPushOptInController as yo, shouldPromptForPushPermission as bo } from "./shared/native/push-optin.js";
+import { acknowledgeNativePurchase as yo, getNativeProducts as bo, getNativePurchases as xo, installNativeIAP as So, isNativeIAPAvailable as Co, purchaseNativeProduct as wo, restoreNativePurchases as To } from "./shared/native/purchases.js";
+import { getPushOptInController as Eo, recordPushPermissionPromptDismissed as Do, registerPushOptInController as Oo, shouldPromptForPushPermission as ko } from "./shared/native/push-optin.js";
 import "./shared-native.js";
 import "./shared/actors/index.js";
 //#region src/shared/index.ts
-var xo = "1.0.0";
+var Ao = "1.0.0";
 //#endregion
-export { $r as ASSISTANT_WIDGET_TOGGLE_EVENT, hr as AccessDenied, or as ActorIdentity, vi as AnalyticsConsentBanner, yt as ApolloClient, bt as ApolloProvider, Tr as AppErrorBoundary, gn as AppInitializer, ro as AppShellProvider, ei as AssistantWidget, Ve as BACKEND_ERROR_EVENT, Se as BOTMANOR_PRODUCT_SLUG, ji as BREAKPOINTS, _i as BackendAuditSink, gi as BroadcastChannelSink, Oe as COMMON_SHELL_LESS_ROUTES, He as CONNECTION_STATUS_EVENT, Sr as ConditionalShell, Cn as ConsoleTransport, Mr as ContextConversationWidget, Pe as DEFAULT_PAGE_SIZE, ke as DEFAULT_SHELL_CONFIG, R as DESKTOP_UPDATE_UNSUPPORTED, z as DESKTOP_WINDOW_STATE_DEFAULT, mi as DesktopUpdateToast, hi as DevtoolsSink, lr as ErrorBoundary, _r as ErrorFallback, wi as EventBusProvider, xo as FE_SHARED_VERSION, Er as FeatureFlagProvider, jr as FeatureGate, Fe as GATEWAYS, ta as GLOBAL_SHORTCUT_CATEGORIES, dt as GatewayProvider, Rn as INLINE_ENCODE, xt as InMemoryCache, Kr as KeyboardHelpDialogWrapper, vr as LoadingFallback, yn as LogLevel, xn as LogManager, bn as Logger, Xi as MODIFIER_KEYS, ti as Markdown, Da as MicrofrontendContext, xr as MicrofrontendErrorBoundary, ao as MicrofrontendProvider, Ci as OtelBrowserSink, _a as PLAN_USAGE_SNAPSHOT_EVENT, Zi as PLATFORM_TYPES, Ce as PRODUCTS, ge as PRODUCT_SLUG_EMIT, _e as PRODUCT_SLUG_RENAMES, we as PRODUCT_URLS, tr as PULL_TO_REFRESH_THRESHOLD, la as PUSH_DEVICE_ID_STORAGE_KEY, wr as PWAInstallBanner, yr as PageLoadingFallback, fr as PermissionButton, gr as PermissionDenied, pr as PermissionGate, mr as PermissionLink, kn as QUOTA_EXHAUSTED_CODE, ma as QUOTA_EXHAUSTED_EVENT, qr as QuotaMeter, An as RESOURCE_CAP_EXCEEDED_CODE, ur as RequireAuth, dr as RequireGuest, yi as RybbitSink, at as SSELink, Qt as SSORedirectSpinner, rn as SSO_DEPOSITED_PARAM, jn as STORAGE_QUOTA_EXCEEDED_CODE, Zn as SafeAreaView, br as SectionLoadingFallback, no as TourInitializer, Ba as TourPlayer, Fa as TourPlayerProvider, Na as TourSpotlight, Pa as TourTooltip, oo as TourTrigger, Va as TourTriggerButton, Za as ToursProvider, Sa as UNSAVED_CHANGE_LABEL_MAX, Mn as UPGRADE_ERROR_CODES, Jr as UPGRADE_PROMPT_EVENT, Zr as UpgradeInlineBanner, Yr as UpgradePromptModal, _t as WsLink, so as acknowledgeNativePurchase, r as alertTokens, ba as appendContextToPath, Ot as attemptTokenRefresh, an as beginSsoNavigation, B as bootDesktopShell, sr as buildActorFallback, Nn as buildQuotaExhaustedMessage, on as buildSsoDepositUrl, m as capitalizeFirst, h as capitalizeWords, i as categoryTokens, $t as checkRemoteSLO, en as checkSLO, kt as clearAuthSessionStorage, Xe as clearGraphqlFetchResponseCache, tn as clearLocalAuthState, Pt as clearSSoCookie, Ft as clearShellSsoCookies, sn as clearSsoDepositState, cn as clearSsoNavigation, wn as clearUserContext, Vn as cn, nr as computePullOffset, rr as computePullProgress, ln as consumeSsoDepositMarker, n as createApolloClient, Ti as createEventBus, na as createGlobalShortcuts, ot as createGraphQLClient, Dn as createProfileScopedStorage, V as desktopCheckForUpdates, H as desktopDeepLinkToPath, U as desktopInstallUpdate, W as desktopNotify, G as desktopOpenExternal, K as desktopSetBadgeCount, q as desktopSetLocale, J as desktopSetTheme, Y as desktopSetTrayQuickActions, Aa as detectDeviceType, Nr as detectPlatform, Ue as dispatchBackendErrorEvent, ha as dispatchQuotaExhausted, Xr as dispatchUpgradePrompt, zn as downscaleImage, ve as emitProductSlug, We as extractBackendError, Pn as extractQuotaExhaustedExtensions, Fn as extractUpgradeErrorExtensions, Te as findProductConfig, g as formatBytes, _ as formatCompactNumber, v as formatCurrency, y as formatCurrencyCompact, b as formatDate, x as formatDateTime, S as formatDuration, Pr as formatKeyCombo, C as formatList, w as formatNumber, T as formatOrdinal, E as formatPercentage, D as formatRelativeTime, O as formatTime, a as getAlertTokens, I as getCapacitorPlatform, o as getCategoryTokens, X as getDesktopAuthBridgeConfig, Z as getDesktopBridge, Q as getDesktopGatewayBases, $ as getDesktopGatewayUrls, ee as getDesktopRuntimeConfig, te as getDesktopUpdateState, ne as getDesktopWindowState, Fr as getDisplayKeysForPlatform, Ie as getGatewayConfig, Le as getGatewayUrl, st as getGlobalClient, ra as getGlobalShortcutsByCategory, Re as getGraphQLEndpoint, re as getLegacyDesktopRuntime, Ht as getNativeBridge, ho as getNativeEntryRoutes, co as getNativeProducts, lo as getNativePurchases, ua as getOrCreatePushDeviceId, Ut as getPlatform, Ee as getProductUrl, De as getProductsWithUrls, On as getProfileScopedKey, s as getProgressTokens, _o as getPushOptInController, ja as getResponsiveSelector, nn as getSSORedirectUrl, It as getSSoCookie, Ae as getShellConfig, Ir as getShortcutLabel, c as getStatusBadgeTokens, l as getStatusTokens, Ze as getStoredAuthToken, Qe as getStoredLocale, $e as getStoredOrganizationId, et as getStoredProjectId, tt as getStoredWorkspaceId, nt as getStoredWorkspaceToken, Ua as getTourContextRank, Wa as getTourRouteCatalog, Ga as getTourRouteModules, Ka as getTourRoutePages, u as getTrendTokens, ct as getWorkspaceClient, ze as getWorkspaceTokenPayload, St as gql, rt as graphqlFetch, At as hasAuthGraphQLErrors, lt as initializeAppClients, Tn as initializeLogger, ie as installDesktopDeepLinkHandler, ae as installDesktopNavigateHandler, de as installGatewayFetchRewrite, uo as installNativeIAP, Ge as isAbortError, Wt as isAndroid, jt as isAuthGraphQLError, Mt as isAuthNetworkError, Ke as isBackendErrorDisplay, L as isCapacitorNative, P as isChunkLoadError, oe as isDesktop, Gt as isElectron, Kt as isIOS, qt as isInstalledApp, Lr as isMac, Rr as isMobileDevice, Jt as isNative, fo as isNativeIAPAvailable, In as isQuotaExhaustedError, ye as isSameProductSlug, Lt as isSharedSsoCookieDomain, je as isShellLessRoute, un as isSsoNavigationPending, Yt as isStandalonePWA, zr as isTabletDevice, qa as isTourVisibleForContext, qe as isTransportError, Rt as isTrustedSsoOrigin, Ln as isUpgradeError, Xt as isWeb, Zt as isWebBrowser, Be as isWorkspaceTokenValidForContext, F as lazyWithRetry, be as legacyProductSlug, Ca as listUnsavedChanges, Sn as logManager, Je as markConnectionHealthy, dn as markSsoDepositDone, fn as markSsoDepositPending, Br as matchesKeyCombo, ia as mergeShortcuts, pn as mintSsoSessionTokens, Hn as nativeActionSheet, Un as nativeConfirm, Wn as nativeCopyText, Gn as nativeImpact, Kn as nativeNotify, qn as nativeOpenUrl, Jn as nativeSelection, Yn as nativeShare, Xn as nativeToast, Vr as normalizeKey, Hr as normalizePlatformCombo, xe as normalizeProductSlug, Ja as normalizeTourPath, se as onDesktopUpdateState, ce as onDesktopWindowState, Ur as parseKeyCombo, k as pluralize, vt as prepareWorkspaceRequest, d as progressTokens, va as publishPlanUsageSnapshot, po as purchaseNativeProduct, bi as readAnalyticsConsent, xi as readAnalyticsConsentChoice, Qn as readInitialNetworkStatus, zt as readShellSsoCookie, mn as readSsoDepositState, vo as recordPushPermissionPromptDismissed, Nt as redirectToLogin, $n as reduceNetworkStatus, le as registerDesktopNavigator, da as registerPushDevice, yo as registerPushOptInController, Ya as registerTourRouteCatalog, wa as registerUnsavedChange, ut as resetAppClients, li as resolveActionSheetOutcome, io as resolveAppShellObservabilityConfig, me as resolveAuthBridgeConfig, fe as resolveGatewayBases, it as resolveGatewayUrl, ue as resolveGatewayUrls, he as resolveShellAuthBridgeConfig, Xa as resolveTourTargetPath, mo as restoreNativePurchases, Bn as selectInlineBase64, Si as setAnalyticsConsent, Bt as setSSoCookie, Vt as setShellSsoCookies, En as setUserContext, hn as shouldAttemptSsoDeposit, Wr as shouldEnableKeyboardShortcuts, Gr as shouldIgnoreShortcut, bo as shouldPromptForPushPermission, Me as shouldShowBreadcrumb, go as shouldShowNativeWelcome, Ne as shouldShowSidebar, Ye as shouldToastBackendError, A as slugify, f as statusTokens, pe as suppressConsole, j as toCamelCase, M as toPascalCase, p as trendTokens, N as truncateText, fa as unregisterPushDevice, Ta as unsavedChangesBlocking, ui as useActionSheet, cr as useActorProfiles, Ct as useApolloClient, ai as useAppState, Ji as useAsync, Yi as useAsyncImmediate, Qa as useAutoStartTour, Mi as useBreakpoint, Wi as useConditionalToggle, e as useCopyToClipboard, xa as useCurrentContextSearchParams, ki as useDebounce, di as useDesktop, fi as useDesktopUpdateState, pi as useDesktopWindowState, oi as useDeviceInfo, Ei as useEvent, Di as useEventBus, Oi as useEventEmitter, Ri as useExclusiveMenu, Or as useFeatureFlag, kr as useFeatureFlagDetails, Ar as useFeatureFlagValue, Dr as useFeatureFlags, ft as useGateway, pt as useGatewayClient, si as useHaptics, oa as useHasAnimated, gt as useHasAuthToken, $i as useHotkeys, Ia as useIsTourPlaying, Ii as useKeyPress, Li as useKeyboardShortcut, Qi as useKeyboardShortcuts, wt as useLazyQuery, zi as useLocalStorage, aa as useLogger, t as useMediaQuery, Oa as useMicrofrontendContext, Ni as useMobileBreakpoint, Tt as useMutation, ii as useNativeKeyboard, ni as useNativePlatform, er as useNetworkStatus, Pi as useOnClickOutside, Fi as useOnClickOutsideWithRef, Cr as usePWA, qi as usePagination, Ha as usePlayTour, Vi as usePrevious, Hi as usePreviousDistinct, Ui as usePreviousHistory, ir as usePullToRefresh, pa as usePushDeviceRegistration, Et as useQuery, ga as useQuotaErrorToast, ca as useRecordProductVisit, sa as useReferralAttribution, _n as useRegistryHelpers, ar as useReturnFocus, ri as useSafeArea, mt as useSafeGateway, ht as useSafeGatewayClient, $a as useSafeToursContext, Bi as useSessionStorage, vn as useShellNavigate, ea as useShortcutHelp, La as useStartTour, ci as useStatusBar, Ra as useStopTour, Dt as useSubscription, Ai as useThrottle, Gi as useToggle, Ki as useToggleObject, Ma as useTourPlayer, za as useTourPlayerContext, eo as useTours, to as useToursContext, Ea as useUnsavedChanges, ya as useUpgradePrompt, Qr as useVoiceInput, ka as withTourProgressStatus };
+export { ui as ASSISTANT_WIDGET_TOGGLE_EVENT, br as AccessDenied, dr as ActorIdentity, ki as AnalyticsConsentBanner, yt as ApolloClient, bt as ApolloProvider, Ar as AppErrorBoundary, xn as AppInitializer, ho as AppShellProvider, di as AssistantWidget, Ve as BACKEND_ERROR_EVENT, Se as BOTMANOR_PRODUCT_SLUG, Hi as BREAKPOINTS, Oi as BackendAuditSink, Di as BroadcastChannelSink, Oe as COMMON_SHELL_LESS_ROUTES, He as CONNECTION_STATUS_EVENT, Dr as ConditionalShell, On as ConsoleTransport, Lr as ContextConversationWidget, Pe as DEFAULT_PAGE_SIZE, ke as DEFAULT_SHELL_CONFIG, R as DESKTOP_UPDATE_UNSUPPORTED, z as DESKTOP_WINDOW_STATE_DEFAULT, Ti as DesktopUpdateToast, Ei as DevtoolsSink, mr as ErrorBoundary, Sr as ErrorFallback, Fi as EventBusProvider, Ao as FE_SHARED_VERSION, jr as FeatureFlagProvider, Ir as FeatureGate, Fe as GATEWAYS, fa as GLOBAL_SHORTCUT_CATEGORIES, dt as GatewayProvider, Un as INLINE_ENCODE, xt as InMemoryCache, Zr as KeyboardHelpDialogWrapper, ai as LandingGateView, oi as LandingOrDashboardRedirect, Cr as LoadingFallback, wn as LogLevel, En as LogManager, Tn as Logger, sa as MODIFIER_KEYS, fi as Markdown, Ra as MicrofrontendContext, Er as MicrofrontendErrorBoundary, _o as MicrofrontendProvider, Pi as OtelBrowserSink, Oa as PLAN_USAGE_SNAPSHOT_EVENT, ca as PLATFORM_TYPES, Ce as PRODUCTS, ge as PRODUCT_SLUG_EMIT, _e as PRODUCT_SLUG_RENAMES, we as PRODUCT_URLS, or as PULL_TO_REFRESH_THRESHOLD, ba as PUSH_DEVICE_ID_STORAGE_KEY, kr as PWAInstallBanner, wr as PageLoadingFallback, _r as PermissionButton, xr as PermissionDenied, vr as PermissionGate, yr as PermissionLink, Pn as QUOTA_EXHAUSTED_CODE, Ta as QUOTA_EXHAUSTED_EVENT, Qr as QuotaMeter, Fn as RESOURCE_CAP_EXCEEDED_CODE, hr as RequireAuth, gr as RequireGuest, Ai as RybbitSink, at as SSELink, nn as SSORedirectSpinner, ln as SSO_DEPOSITED_PARAM, In as STORAGE_QUOTA_EXCEEDED_CODE, nr as SafeAreaView, Tr as SectionLoadingFallback, mo as TourInitializer, Za as TourPlayer, Ka as TourPlayerProvider, Wa as TourSpotlight, Ga as TourTooltip, vo as TourTrigger, Qa as TourTriggerButton, co as ToursProvider, Na as UNSAVED_CHANGE_LABEL_MAX, Ln as UPGRADE_ERROR_CODES, $r as UPGRADE_PROMPT_EVENT, ni as UpgradeInlineBanner, ei as UpgradePromptModal, _t as WsLink, yo as acknowledgeNativePurchase, r as alertTokens, ja as appendContextToPath, Qt as assignLocationWithAllowlist, Ot as attemptTokenRefresh, un as beginSsoNavigation, B as bootDesktopShell, fr as buildActorFallback, Rn as buildQuotaExhaustedMessage, dn as buildSsoDepositUrl, m as capitalizeFirst, h as capitalizeWords, i as categoryTokens, rn as checkRemoteSLO, an as checkSLO, kt as clearAuthSessionStorage, Xe as clearGraphqlFetchResponseCache, on as clearLocalAuthState, Pt as clearSSoCookie, Ft as clearShellSsoCookies, fn as clearSsoDepositState, pn as clearSsoNavigation, kn as clearUserContext, Kn as cn, sr as computePullOffset, cr as computePullProgress, mn as consumeSsoDepositMarker, n as createApolloClient, Ii as createEventBus, pa as createGlobalShortcuts, ot as createGraphQLClient, Mn as createProfileScopedStorage, V as desktopCheckForUpdates, H as desktopDeepLinkToPath, U as desktopInstallUpdate, W as desktopNotify, G as desktopOpenExternal, K as desktopSetBadgeCount, q as desktopSetLocale, J as desktopSetTheme, Y as desktopSetTrayQuickActions, Va as detectDeviceType, Rr as detectPlatform, Ue as dispatchBackendErrorEvent, Ea as dispatchQuotaExhausted, ti as dispatchUpgradePrompt, Wn as downscaleImage, ve as emitProductSlug, We as extractBackendError, zn as extractQuotaExhaustedExtensions, Bn as extractUpgradeErrorExtensions, Te as findProductConfig, g as formatBytes, _ as formatCompactNumber, v as formatCurrency, y as formatCurrencyCompact, b as formatDate, x as formatDateTime, S as formatDuration, zr as formatKeyCombo, C as formatList, w as formatNumber, T as formatOrdinal, E as formatPercentage, D as formatRelativeTime, O as formatTime, a as getAlertTokens, I as getCapacitorPlatform, o as getCategoryTokens, X as getDesktopAuthBridgeConfig, Z as getDesktopBridge, Q as getDesktopGatewayBases, $ as getDesktopGatewayUrls, ee as getDesktopRuntimeConfig, te as getDesktopUpdateState, ne as getDesktopWindowState, Br as getDisplayKeysForPlatform, Ie as getGatewayConfig, Le as getGatewayUrl, st as getGlobalClient, ma as getGlobalShortcutsByCategory, Re as getGraphQLEndpoint, re as getLegacyDesktopRuntime, Ht as getNativeBridge, ri as getNativeEntryRoutes, bo as getNativeProducts, xo as getNativePurchases, xa as getOrCreatePushDeviceId, Ut as getPlatform, Ee as getProductUrl, De as getProductsWithUrls, Nn as getProfileScopedKey, s as getProgressTokens, Eo as getPushOptInController, Ha as getResponsiveSelector, sn as getSSORedirectUrl, It as getSSoCookie, Ae as getShellConfig, Vr as getShortcutLabel, c as getStatusBadgeTokens, l as getStatusTokens, Ze as getStoredAuthToken, Qe as getStoredLocale, $e as getStoredOrganizationId, et as getStoredProjectId, tt as getStoredWorkspaceId, nt as getStoredWorkspaceToken, eo as getTourContextRank, to as getTourRouteCatalog, no as getTourRouteModules, ro as getTourRoutePages, u as getTrendTokens, ct as getWorkspaceClient, ze as getWorkspaceTokenPayload, St as gql, rt as graphqlFetch, At as hasAuthGraphQLErrors, si as hasStoredValidSession, lt as initializeAppClients, An as initializeLogger, ie as installDesktopDeepLinkHandler, ae as installDesktopNavigateHandler, de as installGatewayFetchRewrite, So as installNativeIAP, Ge as isAbortError, $t as isAllowedRedirectUrl, Wt as isAndroid, jt as isAuthGraphQLError, Mt as isAuthNetworkError, Ke as isBackendErrorDisplay, L as isCapacitorNative, P as isChunkLoadError, oe as isDesktop, Gt as isElectron, Kt as isIOS, qt as isInstalledApp, Hr as isMac, Ur as isMobileDevice, Jt as isNative, Co as isNativeIAPAvailable, Vn as isQuotaExhaustedError, ye as isSameProductSlug, Lt as isSharedSsoCookieDomain, je as isShellLessRoute, hn as isSsoNavigationPending, Yt as isStandalonePWA, Wr as isTabletDevice, io as isTourVisibleForContext, qe as isTransportError, Rt as isTrustedSsoOrigin, Hn as isUpgradeError, Xt as isWeb, Zt as isWebBrowser, Be as isWorkspaceTokenValidForContext, F as lazyWithRetry, be as legacyProductSlug, Pa as listUnsavedChanges, Dn as logManager, Je as markConnectionHealthy, gn as markSsoDepositDone, _n as markSsoDepositPending, Gr as matchesKeyCombo, ha as mergeShortcuts, vn as mintSsoSessionTokens, qn as nativeActionSheet, Jn as nativeConfirm, Yn as nativeCopyText, Xn as nativeImpact, Zn as nativeNotify, Qn as nativeOpenUrl, $n as nativeSelection, er as nativeShare, tr as nativeToast, Kr as normalizeKey, qr as normalizePlatformCombo, xe as normalizeProductSlug, ao as normalizeTourPath, se as onDesktopUpdateState, ce as onDesktopWindowState, en as openUrlInNewTabWithAllowlist, Jr as parseKeyCombo, k as pluralize, vt as prepareWorkspaceRequest, d as progressTokens, ka as publishPlanUsageSnapshot, wo as purchaseNativeProduct, ji as readAnalyticsConsent, Mi as readAnalyticsConsentChoice, rr as readInitialNetworkStatus, zt as readShellSsoCookie, yn as readSsoDepositState, Do as recordPushPermissionPromptDismissed, Nt as redirectToLogin, cn as redirectToSSO, ir as reduceNetworkStatus, le as registerDesktopNavigator, Sa as registerPushDevice, Oo as registerPushOptInController, oo as registerTourRouteCatalog, Fa as registerUnsavedChange, tn as replaceLocationWithAllowlist, ut as resetAppClients, bi as resolveActionSheetOutcome, go as resolveAppShellObservabilityConfig, me as resolveAuthBridgeConfig, fe as resolveGatewayBases, it as resolveGatewayUrl, ue as resolveGatewayUrls, ci as resolveLandingGate, he as resolveShellAuthBridgeConfig, so as resolveTourTargetPath, To as restoreNativePurchases, Gn as selectInlineBase64, Ni as setAnalyticsConsent, Bt as setSSoCookie, Vt as setShellSsoCookies, jn as setUserContext, bn as shouldAttemptSsoDeposit, Yr as shouldEnableKeyboardShortcuts, Xr as shouldIgnoreShortcut, ko as shouldPromptForPushPermission, Me as shouldShowBreadcrumb, ii as shouldShowNativeWelcome, Ne as shouldShowSidebar, Ye as shouldToastBackendError, A as slugify, f as statusTokens, pe as suppressConsole, j as toCamelCase, M as toPascalCase, p as trendTokens, N as truncateText, Ca as unregisterPushDevice, Ia as unsavedChangesBlocking, xi as useActionSheet, pr as useActorProfiles, Ct as useApolloClient, gi as useAppState, aa as useAsync, oa as useAsyncImmediate, lo as useAutoStartTour, Ui as useBreakpoint, ta as useConditionalToggle, e as useCopyToClipboard, Ma as useCurrentContextSearchParams, Bi as useDebounce, Si as useDesktop, Ci as useDesktopUpdateState, wi as useDesktopWindowState, _i as useDeviceInfo, Li as useEvent, Ri as useEventBus, zi as useEventEmitter, Yi as useExclusiveMenu, Nr as useFeatureFlag, Pr as useFeatureFlagDetails, Fr as useFeatureFlagValue, Mr as useFeatureFlags, ft as useGateway, pt as useGatewayClient, vi as useHaptics, _a as useHasAnimated, gt as useHasAuthToken, ua as useHotkeys, qa as useIsTourPlaying, qi as useKeyPress, Ji as useKeyboardShortcut, la as useKeyboardShortcuts, wt as useLazyQuery, Xi as useLocalStorage, ga as useLogger, t as useMediaQuery, za as useMicrofrontendContext, Wi as useMobileBreakpoint, Tt as useMutation, hi as useNativeKeyboard, pi as useNativePlatform, ar as useNetworkStatus, Gi as useOnClickOutside, Ki as useOnClickOutsideWithRef, Or as usePWA, ia as usePagination, $a as usePlayTour, Qi as usePrevious, $i as usePreviousDistinct, ea as usePreviousHistory, lr as usePullToRefresh, wa as usePushDeviceRegistration, Et as useQuery, Da as useQuotaErrorToast, ya as useRecordProductVisit, va as useReferralAttribution, Sn as useRegistryHelpers, ur as useReturnFocus, mi as useSafeArea, mt as useSafeGateway, ht as useSafeGatewayClient, uo as useSafeToursContext, Zi as useSessionStorage, Cn as useShellNavigate, da as useShortcutHelp, Ja as useStartTour, yi as useStatusBar, Ya as useStopTour, Dt as useSubscription, Vi as useThrottle, na as useToggle, ra as useToggleObject, Ua as useTourPlayer, Xa as useTourPlayerContext, fo as useTours, po as useToursContext, La as useUnsavedChanges, Aa as useUpgradePrompt, li as useVoiceInput, Ba as withTourProgressStatus };

package/dist/utils/index.js

@@ -6,6 +6,7 @@ import "../shared/utils/gatewayFetchRewrite.js";
 import "../shared/utils/backendErrors.js";
 import "../shared/utils/authErrorHandling.js";
 import "../shared/utils/authCookie.js";
+import "../shared/utils/redirectAllowlist.js";
 import "../shared/utils/ssoDeposit.js";
 import "../shared/utils/appHelpers.js";
 import "../shared/utils/loggerInit.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/fe-libs",
-  "version": "2026.1021.1",
+  "version": "2026.1021.2",
   "description": "Burdenoff frontend primitives and domain libraries",
   "type": "module",
   "bin": {
@@ -311,7 +311,7 @@
     "test:package-livekit-optional": "node scripts/validate-livekit-optional.mjs",
     "verify:package": "node scripts/verify-package-contents.mjs",
     "test:handsfree-browser": "node scripts/handsfree-browser-run.mjs",
-    "test": "bun test scripts/graphql-schema-drift/__tests__ scripts/a11y-audit/__tests__ src/credentials src/connections src/storage src/shared/assistant src/shared/components src/shared/graphql/links/sse-link.test.ts src/shared/graphql/fetch.test.ts src/shared/graphql/prepareWorkspaceRequest.test.ts src/shared/graphql/client.test.ts src/shared/utils/apollo.test.ts src/shared/graphql/tourWorkspaceAuth.test.ts src/shared/config/gatewayUrls.test.ts src/shared/config/authBridgeUrls.test.ts src/shared/config/shellRoutes.test.ts src/shared/config/gatewayFallback.test.ts scripts/__tests__ src/shared/config/products.test.ts src/shared/config/productSlug.test.ts src/shared/hooks/shell/useProducts.test.ts src/shared/providers/shell/brandAttribute.test.ts src/chrome/ProductSwitcher.test.ts src/shared/utils/gatewayFetchRewrite.test.ts src/shared/utils/authCookie.test.ts src/shared/providers/shell/ProfileStorageManager.test.ts src/shared/providers/AppShellProvider.test.ts src/shared/providers/shell/interpolate.test.ts src/shared/providers/shell/resolveTranslation.test.ts src/shared/providers/shell/I18nProvider.render.test.tsx src/shared/providers/shell/I18nProvider.client.test.tsx src/shared/providers/shell/translationStore.test.ts src/shared/providers/shell/translationLayers.test.ts src/shared/providers/shell/directionMode.test.ts src/shared/providers/shell/authProvider/ssoRelay.test.ts src/shared/providers/shell/authProvider/useAuthActions.signOut.test.tsx src/shared/providers/shell/personaSurfaceRemote.test.ts src/shared/providers/shell/workspaceSwitch.client.test.tsx src/shared/events/sinks/RybbitSink.test.ts src/shell-native src/shared/native src/shared/navigation src/shared/tours src/chrome/__tests__ src/ui/__tests__",
+    "test": "bun test scripts/graphql-schema-drift/__tests__ scripts/a11y-audit/__tests__ src/credentials src/connections src/storage src/shared/assistant src/shared/components src/shared/graphql/links/sse-link.test.ts src/shared/graphql/fetch.test.ts src/shared/graphql/prepareWorkspaceRequest.test.ts src/shared/graphql/client.test.ts src/shared/utils/apollo.test.ts src/shared/graphql/tourWorkspaceAuth.test.ts src/shared/config/gatewayUrls.test.ts src/shared/config/authBridgeUrls.test.ts src/shared/config/shellRoutes.test.ts src/shared/config/gatewayFallback.test.ts scripts/__tests__ src/shared/config/products.test.ts src/shared/config/productSlug.test.ts src/shared/hooks/shell/useProducts.test.ts src/shared/providers/shell/brandAttribute.test.ts src/chrome/ProductSwitcher.test.ts src/shared/utils/gatewayFetchRewrite.test.ts src/shared/utils/authCookie.test.ts src/shared/utils/redirectAllowlist.test.ts src/shared/providers/shell/ProfileStorageManager.test.ts src/shared/providers/AppShellProvider.test.ts src/shared/providers/shell/interpolate.test.ts src/shared/providers/shell/resolveTranslation.test.ts src/shared/providers/shell/I18nProvider.render.test.tsx src/shared/providers/shell/I18nProvider.client.test.tsx src/shared/providers/shell/translationStore.test.ts src/shared/providers/shell/translationLayers.test.ts src/shared/providers/shell/directionMode.test.ts src/shared/providers/shell/authProvider/ssoRelay.test.ts src/shared/providers/shell/authProvider/useAuthActions.signOut.test.tsx src/shared/providers/shell/personaSurfaceRemote.test.ts src/shared/providers/shell/workspaceSwitch.client.test.tsx src/shared/events/sinks/RybbitSink.test.ts src/shell-native src/shared/native src/shared/navigation src/shared/tours src/chrome/__tests__ src/ui/__tests__",
     "sanity": "bash scripts/build-limits.sh --gate bash -c 'bun run lint:sanity && bun run format && bun run type:check && bun run test && bun run build && bun run verify:package'",
     "switch:status": "bun scripts/deps-mode.ts status",
     "switch:remote": "bun scripts/deps-mode.ts remote",