@burdenoff/fe-libs 2026.1022.1 → 2026.1022.2

package/dist/shared/graphql/fetch.d.ts

@@ -163,6 +163,17 @@ export interface EnqueueGraphQLFetchOptions {
     /** Dispatch at once, outside any batch, with fetch `keepalive`. */
     keepalive?: boolean;
 }
+/**
+ * True when the promise returned by `enqueueGraphQLFetch` was served from
+ * the in-memory response cache without a network request. The marker is
+ * attached to the promise itself, so the caller must hold the promise
+ * reference (not just the awaited value) to inspect it:
+ *
+ *   const promise = enqueueGraphQLFetch(url, headers, body, signal);
+ *   const result = await promise;
+ *   if (!isGraphqlFetchCacheHit(promise)) markConnectionHealthy();
+ */
+export declare function isGraphqlFetchCacheHit(promise: Promise<unknown> | unknown): boolean;
 /**
  * Drop the short-lived GraphQL read caches so the next read of any operation
  * hits the network.

package/dist/shared/graphql/fetch.js

@@ -55,11 +55,11 @@ function C(e) {
 		return null;
 	}
 }
-function ee(e) {
+function w(e) {
 	let t = C(e)?.exp;
 	return typeof t == "number" ? t * 1e3 <= Date.now() + 3e4 : !1;
 }
-function te() {
+function ee() {
 	try {
 		let e = sessionStorage.getItem("bf-active-profile");
 		if (e) {
@@ -72,7 +72,7 @@ function te() {
 		return null;
 	}
 }
-function w() {
+function T() {
 	try {
 		let e = sessionStorage.getItem("bf-active-profile");
 		if (e) {
@@ -84,31 +84,31 @@ function w() {
 		return "en";
 	}
 }
-function T() {
+function E() {
 	return s("workspace");
 }
-function E() {
+function D() {
 	return s("organization");
 }
-function D() {
+function O() {
 	return s("tenant");
 }
-function O() {
+function k() {
 	return s("project");
 }
-function k() {
+function A() {
 	try {
 		return typeof window > "u" ? null : new URLSearchParams(window.location.search).get("org");
 	} catch {
 		return null;
 	}
 }
-function A(e) {
+function te(e) {
 	return {
-		workspaceId: typeof e.workspaceId == "string" ? e.workspaceId : T() || void 0,
-		organizationId: typeof e.organizationId == "string" ? e.organizationId : E() || k() || void 0,
-		tenantId: typeof e.tenantId == "string" ? e.tenantId : D() || void 0,
-		projectId: typeof e.projectId == "string" ? e.projectId : O() || void 0
+		workspaceId: typeof e.workspaceId == "string" ? e.workspaceId : E() || void 0,
+		organizationId: typeof e.organizationId == "string" ? e.organizationId : D() || A() || void 0,
+		tenantId: typeof e.tenantId == "string" ? e.tenantId : O() || void 0,
+		projectId: typeof e.projectId == "string" ? e.projectId : k() || void 0
 	};
 }
 function j(e, t, n) {
@@ -129,9 +129,9 @@ function M(e, t, n) {
 async function N(e) {
 	let { url: t, authToken: n, workspaceId: r, organizationId: i, projectId: a, locale: o, signal: s, currentQuery: c, issuanceGuard: l } = e;
 	if (!n || c.includes("issueWorkspaceToken") || l && !l.isCurrent()) return null;
-	let u = r || T();
+	let u = r || E();
 	if (!u) return null;
-	let d = b(), p = T(), m = i || E() || k();
+	let d = b(), p = E(), m = i || D() || A();
 	if (d && p === u && f(d, {
 		workspaceId: u,
 		organizationId: m,
@@ -198,33 +198,37 @@ function B() {
 	let e = L();
 	return e.__graphqlFetchPendingResponses ||= /* @__PURE__ */ new Map(), e.__graphqlFetchPendingResponses;
 }
-function V() {
+var V = Symbol.for("@burdenoff/fe-libs:graphql-fetch-cache-hit");
+function H(e) {
+	return !!(e && typeof e == "object" && e[V] === !0);
+}
+function ne() {
 	z().clear(), B().clear(), n();
 }
-var H = 10, ne = 600, U = 100, re = 1e4, W = 15e3, ie = new Set([
+var re = 10, ie = 600, U = 100, ae = 1e4, W = 15e3, oe = new Set([
 	"traceparent",
 	"tracestate",
 	"baggage"
 ]), G = "Apollo-Require-Preflight";
-function ae() {
+function se() {
 	if (typeof performance > "u") return U;
 	let e = L();
-	return e.__graphqlFetchBurstStartedAt ??= performance.now(), performance.now() - e.__graphqlFetchBurstStartedAt < re ? ne : U;
+	return e.__graphqlFetchBurstStartedAt ??= performance.now(), performance.now() - e.__graphqlFetchBurstStartedAt < ae ? ie : U;
 }
-function oe(e) {
+function ce(e) {
 	return typeof e.query == "string" ? /^\s*query\b/.test(e.query) : !1;
 }
-function se(e) {
+function le(e) {
 	return typeof e.operationName == "string" && e.operationName.length > 0 ? {
 		operationName: e.operationName,
 		variables: e.variables ?? null
 	} : e;
 }
-function ce(e) {
+function ue(e) {
 	let t = /* @__PURE__ */ new Map();
 	for (let [n, r] of Object.entries(e)) {
 		let e = n.toLowerCase();
-		ie.has(e) || t.set(e, r);
+		oe.has(e) || t.set(e, r);
 	}
 	return Object.fromEntries(Array.from(t.entries()).sort(([e], [t]) => e.localeCompare(t)));
 }
@@ -237,13 +241,13 @@ function K(t) {
 	};
 }
 function q(e) {
-	return le(e) && Array.isArray(e.errors);
+	return de(e) && Array.isArray(e.errors);
 }
 function J(e) {
 	let t = e.status;
 	return t === 401 ? "Invalid email or password." : t === 403 ? "You do not have permission to do that." : t === 404 ? "We could not find what you were looking for." : t === 408 || t === 504 ? "The server took too long to respond. Please try again." : t === 429 ? "Too many requests. Please wait a moment and try again." : t >= 500 && t < 600 ? "The server is having trouble right now. Please try again in a moment." : t >= 400 && t < 500 ? "The request could not be processed. Please refresh and try again." : "We could not reach the server. Please check your connection and try again.";
 }
-function le(e) {
+function de(e) {
 	return typeof e == "object" && !!e && !Array.isArray(e);
 }
 async function Y(e) {
@@ -302,12 +306,15 @@ async function X(e, t, n) {
 	}
 }
 function Z(e, t, n, r, i) {
-	let a = ce(t), o = i?.keepalive === !0, s = o ? 1 : Math.max(1, i?.batchMax ?? H), c = Math.max(0, i?.batchInterval ?? ae()), l = `${e}|${JSON.stringify(a)}`, u = oe(n) ? `${l}|${JSON.stringify(se(n))}` : void 0;
+	let a = ue(t), o = i?.keepalive === !0, s = o ? 1 : Math.max(1, i?.batchMax ?? re), c = Math.max(0, i?.batchInterval ?? se()), l = `${e}|${JSON.stringify(a)}`, u = ce(n) ? `${l}|${JSON.stringify(le(n))}` : void 0;
 	if (r?.aborted) return Promise.reject(F(r));
 	if (u) {
 		let e = z(), t = e.get(u);
 		if (t) {
-			if (t.expiresAt > Date.now()) return Promise.resolve(t.value);
+			if (t.expiresAt > Date.now()) {
+				let e = Promise.resolve(t.value);
+				return e[V] = !0, e;
+			}
 			e.delete(u);
 		}
 		let n = B().get(u);
@@ -357,9 +364,9 @@ function Q(e, t, n) {
 	i && (r.delete(n), i.timer &&= (clearTimeout(i.timer), null), X(e, t, i.requests));
 }
 async function $(e) {
-	let { gateway: n, query: r, variables: i, operationName: a, authToken: o, workspaceToken: s, workspaceId: c, organizationId: u, tenantId: h, projectId: _, locale: v, baseUrl: x, extraHeaders: C, signal: T, suppressGlobalErrorEvent: E, keepalive: O } = e;
-	I(T);
-	let k = d(P(n, x)), j = o && !ee(o) ? o : y();
+	let { gateway: n, query: r, variables: i, operationName: a, authToken: o, workspaceToken: s, workspaceId: c, organizationId: u, tenantId: h, projectId: _, locale: v, baseUrl: x, extraHeaders: C, signal: E, suppressGlobalErrorEvent: D, keepalive: k } = e;
+	I(E);
+	let A = d(P(n, x)), j = o && !w(o) ? o : y();
 	if (!j && !e.skipAuthRetry && typeof window < "u" && !window.location.pathname.startsWith("/auth/") && S()) {
 		let e = await import("../utils/authErrorHandling.js");
 		await e.attemptTokenRefresh({
@@ -368,9 +375,9 @@ async function $(e) {
 		}) ? j = y() : g({
 			operationName: a,
 			gateway: n
-		}), I(T);
+		}), I(E);
 	}
-	let M = v ?? w(), F = A({
+	let M = v ?? T(), F = te({
 		workspaceId: c,
 		organizationId: u,
 		tenantId: h,
@@ -380,19 +387,19 @@ async function $(e) {
 		[G]: "true"
 	};
 	j && (L.Authorization = `Bearer ${j}`), M && (L["Accept-Language"] = M);
-	let R = te();
+	let R = ee();
 	if (R?.country && (L["X-Geo-Country"] = R.country), R?.currency && (L["X-Geo-Currency"] = R.currency), R?.timezone && (L["X-Geo-Timezone"] = R.timezone), n === "workspace" ? s !== !1 : s) {
 		let e = typeof s == "string" ? s : b();
 		e && !f(e, F) && (e = null), !e && (s === !0 || n === "workspace" && s === void 0 || typeof s == "string") && (e = await N({
-			url: k,
+			url: A,
 			authToken: j,
 			workspaceId: F.workspaceId,
 			organizationId: F.organizationId,
 			projectId: F.projectId,
 			locale: M,
-			signal: T,
+			signal: E,
 			currentQuery: r
-		}), I(T)), e && (L["X-Workspace-Authorization"] = `Bearer ${e}`);
+		}), I(E)), e && (L["X-Workspace-Authorization"] = `Bearer ${e}`);
 	}
 	if (n === "workspace" || c) {
 		let e = F.workspaceId;
@@ -403,7 +410,7 @@ async function $(e) {
 		e && (L["x-org-id"] = e);
 	}
 	if (h) {
-		let e = typeof h == "string" ? h : D();
+		let e = typeof h == "string" ? h : O();
 		e && (L["x-tenant-id"] = e);
 	}
 	if (n === "workspace" || _) {
@@ -431,24 +438,24 @@ async function $(e) {
 		}), null) : null;
 	};
 	try {
-		let e = await Z(k, L, B, T, O ? { keepalive: !0 } : void 0);
-		if (m(), e.errors?.length) {
-			let t = await V(e.errors);
-			if (t) return t;
-			E || p({ errors: e.errors }, { operationName: a });
+		let e = Z(A, L, B, E, k ? { keepalive: !0 } : void 0), t = await e;
+		if (H(e) || m(), t.errors?.length) {
+			let e = await V(t.errors);
+			if (e) return e;
+			D || p({ errors: t.errors }, { operationName: a });
 		}
-		return e;
+		return t;
 	} catch (e) {
 		let t = e.errors;
 		if (t?.length) {
 			let e = await V(t);
 			if (e) return e;
 		}
-		throw E || p(e, {
+		throw D || p(e, {
 			operationName: a,
 			fallbackMessage: "We could not reach the server. Please check your connection and try again."
 		}), e;
 	}
 }
 //#endregion
-export { h as SESSION_EXPIRED_EVENT, V as clearGraphqlFetchResponseCache, Z as enqueueGraphQLFetch, N as ensureWorkspaceToken, y as getStoredAuthToken, w as getStoredLocale, E as getStoredOrganizationId, O as getStoredProjectId, D as getStoredTenantId, T as getStoredWorkspaceId, b as getStoredWorkspaceToken, $ as graphqlFetch, P as resolveGatewayUrl };
+export { h as SESSION_EXPIRED_EVENT, ne as clearGraphqlFetchResponseCache, Z as enqueueGraphQLFetch, N as ensureWorkspaceToken, y as getStoredAuthToken, T as getStoredLocale, D as getStoredOrganizationId, k as getStoredProjectId, O as getStoredTenantId, E as getStoredWorkspaceId, b as getStoredWorkspaceToken, $ as graphqlFetch, P as resolveGatewayUrl };

package/dist/shared/utils/backendErrors.d.ts

@@ -51,8 +51,21 @@ export declare function isAbortError(input: unknown): boolean;
 export declare function isTransportError(input: unknown): boolean;
 /**
  * Signal that connectivity is healthy again. Called from the GraphQL success
- * paths; clears the connection indicator exactly once on recovery. No-op when
- * the connection was never marked degraded.
+ * paths; clears the connection indicator exactly once on recovery.
+ *
+ * Always dispatches the `online: true` event (not only when the latch was
+ * previously set). The connection-status toast in `AppShellProvider` can be
+ * shown by either an `online: false` event *or* a browser `offline` event
+ * that did not correspond to an actual transport error (e.g. a transient
+ * navigator.onLine blip during a Cloudflare Access redirect — see BOFF-8081).
+ * In that second case the latch was never tripped, so a previous version that
+ * returned early here left a stale "Connection lost. Trying to reconnect…"
+ * toast stuck forever even though every subsequent request succeeded. By
+ * always announcing recovery we keep the listener's toast state in sync with
+ * the actual connectivity.
+ *
+ * The listener treats `online: true` as a no-op when no banner is shown, so
+ * the extra dispatch on every successful request is cheap.
  */
 export declare function markConnectionHealthy(): void;
 export declare function extractBackendError(input: unknown, options?: ExtractBackendErrorOptions): BackendErrorDisplay | null;

package/dist/shared/utils/backendErrors.js

@@ -111,7 +111,7 @@ function x(e, n) {
 	} })));
 }
 function S() {
-	typeof window > "u" || b && (b = !1, y = 0, window.dispatchEvent(new CustomEvent(t, { detail: {
+	typeof window > "u" || (b && (b = !1, y = 0), window.dispatchEvent(new CustomEvent(t, { detail: {
 		online: !0,
 		since: Date.now()
 	} })));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/fe-libs",
-  "version": "2026.1022.1",
+  "version": "2026.1022.2",
   "description": "Burdenoff frontend primitives and domain libraries",
   "type": "module",
   "bin": {
@@ -330,7 +330,7 @@
     "test:package-livekit-optional": "node scripts/validate-livekit-optional.mjs",
     "verify:package": "node scripts/verify-package-contents.mjs",
     "test:handsfree-browser": "node scripts/handsfree-browser-run.mjs",
-    "test": "bun test scripts/graphql-schema-drift/__tests__ scripts/a11y-audit/__tests__ scripts/i18n/__tests__ src/credentials src/connections src/storage src/shared/assistant src/shared/feature-flags src/platform-pages src/admin-overview src/shared/components src/shared/graphql/links/sse-link.test.ts src/shared/graphql/fetch.test.ts src/shared/graphql/prepareWorkspaceRequest.test.ts src/shared/graphql/client.test.ts src/shared/utils/apollo.test.ts src/shared/utils/canvasTokens.test.ts src/shared/graphql/tourWorkspaceAuth.test.ts src/shared/config/gatewayUrls.test.ts src/shared/config/authBridgeUrls.test.ts src/shared/config/shellRoutes.test.ts src/shared/config/gatewayFallback.test.ts scripts/__tests__ src/shared/config/products.test.ts src/shared/config/docsUrls.test.ts src/shared/config/productSlug.test.ts src/shared/hooks/shell/useProducts.test.ts src/shared/hooks/shell/useGlobalSearch.test.ts src/shared/providers/shell/brandAttribute.test.ts src/chrome/ProductSwitcher.test.ts src/shared/utils/gatewayFetchRewrite.test.ts src/shared/utils/authCookie.test.ts src/shared/utils/redirectAllowlist.test.ts src/shared/providers/shell/ProfileStorageManager.test.ts src/shared/providers/AppShellProvider.test.ts src/shared/providers/shell/interpolate.test.ts src/shared/providers/shell/resolveTranslation.test.ts src/shared/providers/shell/I18nProvider.render.test.tsx src/shared/providers/shell/I18nProvider.client.test.tsx src/shared/providers/shell/translationStore.test.ts src/shared/providers/shell/translationLayers.test.ts src/shared/providers/shell/directionMode.test.ts src/shared/providers/shell/authProvider/ssoRelay.test.ts src/shared/providers/shell/authProvider/useAuthActions.signOut.test.tsx src/shared/providers/shell/personaSurfaceRemote.test.ts src/shared/providers/shell/workspaceSwitch.client.test.tsx src/shared/events/sinks/RybbitSink.test.ts src/shared/events/sinks/RybbitSink.client.test.tsx src/shell-native src/shared/native src/shared/navigation src/shared/tours src/chrome/__tests__ src/ui/__tests__",
+    "test": "bun test scripts/graphql-schema-drift/__tests__ scripts/a11y-audit/__tests__ scripts/i18n/__tests__ src/credentials src/connections src/storage src/shared/assistant src/shared/feature-flags src/platform-pages src/admin-overview src/shared/components src/shared/graphql/links/sse-link.test.ts src/shared/graphql/fetch.test.ts src/shared/graphql/prepareWorkspaceRequest.test.ts src/shared/graphql/client.test.ts src/shared/utils/apollo.test.ts src/shared/utils/canvasTokens.test.ts src/shared/graphql/tourWorkspaceAuth.test.ts src/shared/config/gatewayUrls.test.ts src/shared/config/authBridgeUrls.test.ts src/shared/config/shellRoutes.test.ts src/shared/config/gatewayFallback.test.ts scripts/__tests__ src/shared/config/products.test.ts src/shared/config/docsUrls.test.ts src/shared/config/productSlug.test.ts src/shared/hooks/shell/useProducts.test.ts src/shared/hooks/shell/useGlobalSearch.test.ts src/shared/providers/shell/brandAttribute.test.ts src/chrome/ProductSwitcher.test.ts src/shared/utils/backendErrors.test.ts src/shared/utils/gatewayFetchRewrite.test.ts src/shared/utils/authCookie.test.ts src/shared/utils/redirectAllowlist.test.ts src/shared/providers/shell/ProfileStorageManager.test.ts src/shared/providers/AppShellProvider.test.ts src/shared/providers/shell/interpolate.test.ts src/shared/providers/shell/resolveTranslation.test.ts src/shared/providers/shell/I18nProvider.render.test.tsx src/shared/providers/shell/I18nProvider.client.test.tsx src/shared/providers/shell/translationStore.test.ts src/shared/providers/shell/translationLayers.test.ts src/shared/providers/shell/directionMode.test.ts src/shared/providers/shell/authProvider/ssoRelay.test.ts src/shared/providers/shell/authProvider/useAuthActions.signOut.test.tsx src/shared/providers/shell/personaSurfaceRemote.test.ts src/shared/providers/shell/workspaceSwitch.client.test.tsx src/shared/events/sinks/RybbitSink.test.ts src/shared/events/sinks/RybbitSink.client.test.tsx src/shell-native src/shared/native src/shared/navigation src/shared/tours src/chrome/__tests__ src/ui/__tests__",
     "sanity": "bash scripts/build-limits.sh --gate bash -c 'bun run lint:sanity && bun run format && bun run type:check && bun run test && bun run build && bun run verify:package'",
     "switch:status": "bun scripts/deps-mode.ts status",
     "switch:remote": "bun scripts/deps-mode.ts remote",