@burdenoff/fe-libs 2026.510.126

package/dist/shared/geography/index.d.ts

@@ -0,0 +1,5 @@
+export { COUNTRIES, COUNTRY_MAP, REGIONS, TIMEZONE_TO_COUNTRY, getCountryByCode, getCountriesByRegion, } from './countries';
+export type { CountryData } from './countries';
+export { GeographyProvider, useGeography } from './GeographyProvider';
+export type { GeographyContextValue, GeographyProviderProps, } from './GeographyProvider';
+//# sourceMappingURL=index.d.ts.map

package/dist/shared/geography/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/shared/geography/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,WAAW,EACX,OAAO,EACP,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACtE,YAAY,EACV,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC"}

package/dist/shared/graphql/GatewayContext.d.ts

@@ -0,0 +1,55 @@
+import { ReactNode } from 'react';
+import { ApolloClient } from '@apollo/client/core';
+import { Gateway } from '../config';
+export interface GatewayContextValue {
+    /** Apollo client for the workspace gateway (port 4003) */
+    workspaceClient: ApolloClient;
+    /** Apollo client for the global gateway (port 4000) */
+    globalClient: ApolloClient;
+    /** Get client by gateway type */
+    getClient: (gateway: Gateway) => ApolloClient;
+}
+export interface GatewayProviderProps {
+    children: ReactNode;
+    value: GatewayContextValue;
+}
+/**
+ * GatewayProvider — wraps the React tree with gateway client access.
+ *
+ * This is called ONCE by the app shell's MultiGatewayProvider.
+ * Microfrontends should never render this directly.
+ */
+export declare function GatewayProvider({ children, value }: GatewayProviderProps): import("react/jsx-runtime").JSX.Element;
+/**
+ * Access both gateway clients.
+ *
+ * @example
+ * ```ts
+ * const { workspaceClient, globalClient } = useGateway();
+ * ```
+ */
+export declare function useGateway(): GatewayContextValue;
+/**
+ * Get a specific gateway's Apollo client.
+ *
+ * @example
+ * ```ts
+ * const globalClient = useGatewayClient('global');
+ * const { data } = useQuery(MY_QUERY, { client: globalClient });
+ * ```
+ */
+export declare function useGatewayClient(gateway: Gateway): ApolloClient;
+/**
+ * Same as `useGateway` but returns `null` instead of throwing when no
+ * `GatewayProvider` is mounted. Used by cross-cutting components (tour
+ * triggers, shell chrome) that may render in trees where the provider is
+ * intentionally absent — tests, standalone previews, or embed hosts.
+ */
+export declare function useSafeGateway(): GatewayContextValue | null;
+/**
+ * Same as `useGatewayClient` but returns `null` instead of throwing when no
+ * `GatewayProvider` is mounted. Callers should short-circuit their data
+ * fetching when this returns null.
+ */
+export declare function useSafeGatewayClient(gateway: Gateway): ApolloClient | null;
+//# sourceMappingURL=GatewayContext.d.ts.map

package/dist/shared/graphql/GatewayContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GatewayContext.d.ts","sourceRoot":"","sources":["../../../src/shared/graphql/GatewayContext.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAA6B,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,WAAW,mBAAmB;IAClC,0DAA0D;IAC1D,eAAe,EAAE,YAAY,CAAC;IAC9B,uDAAuD;IACvD,YAAY,EAAE,YAAY,CAAC;IAC3B,iCAAiC;IACjC,SAAS,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,YAAY,CAAC;CAC/C;AAID,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,SAAS,CAAC;IACpB,KAAK,EAAE,mBAAmB,CAAC;CAC5B;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,oBAAoB,2CAIxE;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,IAAI,mBAAmB,CAQhD;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,YAAY,CAG/D;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,IAAI,mBAAmB,GAAG,IAAI,CAE3D;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,YAAY,GAAG,IAAI,CAG1E"}

package/dist/shared/graphql/GatewayContext.js

@@ -0,0 +1,28 @@
+import { createContext as e, useContext as t } from "react";
+import { jsx as n } from "react/jsx-runtime";
+//#region src/shared/graphql/GatewayContext.tsx
+var r = e(null);
+function i({ children: e, value: t }) {
+	return /* @__PURE__ */ n(r.Provider, {
+		value: t,
+		children: e
+	});
+}
+function a() {
+	let e = t(r);
+	if (!e) throw Error("useGateway must be used within a GatewayProvider (provided by the app shell's MultiGatewayProvider).");
+	return e;
+}
+function o(e) {
+	let { getClient: t } = a();
+	return t(e);
+}
+function s() {
+	return t(r);
+}
+function c(e) {
+	let n = t(r);
+	return n ? n.getClient(e) : null;
+}
+//#endregion
+export { i as GatewayProvider, a as useGateway, o as useGatewayClient, s as useSafeGateway, c as useSafeGatewayClient };

package/dist/shared/graphql/client.d.ts

@@ -0,0 +1,122 @@
+import { ApolloClient, InMemoryCache } from '@apollo/client/core';
+import { Gateway } from '../config';
+/**
+ * Check if the network circuit breaker is currently open (backend unreachable).
+ * Useful for showing "backend offline" banners in the UI.
+ */
+export declare function isNetworkCircuitOpen(): boolean;
+export type { Gateway } from '../config';
+export interface CreateClientOptions {
+    /** Gateway type: 'workspace' or 'global' */
+    gateway: Gateway;
+    /** Optional base URL override (defaults to gateway's defaultBaseUrl) */
+    baseUrl?: string;
+    /** Authorization token or token getter function */
+    authToken?: string | (() => string | null);
+    /** Workspace token or getter for X-Workspace-Authorization header (workspace gateway only) */
+    workspaceToken?: string | (() => string | null);
+    /** Locale code or getter function for Accept-Language header */
+    locale?: string | (() => string | null);
+    /** Geography getter for x-geo-* headers (country, currency, timezone) */
+    geography?: () => {
+        country?: string;
+        currency?: string;
+        timezone?: string;
+    } | null;
+    /** Organization ID or getter function for x-org-id header (global gateway) */
+    organizationId?: string | (() => string | null);
+    /** Product ID or getter function for x-product-id header (for product-level isolation) */
+    productId?: string | (() => string | null);
+    /** Workspace ID or getter function for x-workspace-id header (workspace context) */
+    workspaceId?: string | (() => string | null);
+    /** Tenant ID or getter function for x-tenant-id header (tenant context) */
+    tenantId?: string | (() => string | null);
+    /** Optional cache instance for sharing between clients */
+    cache?: InMemoryCache;
+    /** Enable SSE subscriptions */
+    enableSubscriptions?: boolean;
+    /** SSE endpoint URL override (defaults to gateway's sse path) */
+    sseUrl?: string;
+    /** Callback when authentication error occurs */
+    onAuthError?: () => void;
+    /**
+     * Callback to attempt token refresh when a 401/UNAUTHENTICATED error occurs.
+     * If provided, the ErrorLink will call this before invoking onAuthError,
+     * and will retry the failed operation with the new token on success.
+     * Should return `true` if refresh succeeded (token updated in storage),
+     * or `false` if refresh failed (triggers onAuthError).
+     */
+    onRefreshToken?: () => Promise<boolean>;
+    /** Callback when network error occurs */
+    onNetworkError?: (error: Error) => void;
+    /** Callback when network status changes (circuit breaker open/closed) */
+    onNetworkStatusChange?: (isOffline: boolean) => void;
+    /** Maximum retry attempts for failed requests (default: 3) */
+    maxRetryAttempts?: number;
+    /**
+     * Maximum number of operations to batch together (default: 10).
+     * Set to 1 to disable batching.
+     */
+    batchMax?: number;
+    /**
+     * Time window (ms) to collect operations before sending a batch.
+     * Defaults to a longer page-load burst window and a shorter steady-state window.
+     */
+    batchInterval?: number;
+    /** Enable debug logging */
+    debug?: boolean;
+}
+/**
+ * Creates an Apollo Client configured for a Burdenoff gateway
+ *
+ * @example Basic usage
+ * ```ts
+ * // Workspace gateway client
+ * const workspaceClient = createGraphQLClient({
+ *   gateway: 'workspace',
+ *   authToken: 'your-jwt-token',
+ * });
+ *
+ * // Global gateway client
+ * const globalClient = createGraphQLClient({
+ *   gateway: 'global',
+ *   authToken: () => localStorage.getItem('token'),
+ * });
+ * ```
+ *
+ * @example With subscriptions
+ * ```ts
+ * const client = createGraphQLClient({
+ *   gateway: 'workspace',
+ *   authToken: token,
+ *   enableSubscriptions: true,
+ * });
+ * ```
+ */
+export declare function createGraphQLClient(options: CreateClientOptions): ApolloClient;
+export interface AppClientConfig {
+    workspaceBaseUrl?: string;
+    globalBaseUrl?: string;
+    authToken?: string | (() => string | null);
+    enableSubscriptions?: boolean;
+    onAuthError?: () => void;
+    debug?: boolean;
+}
+/**
+ * Initialize app-level Apollo clients
+ * Call this once during app initialization
+ */
+export declare function initializeAppClients(config: AppClientConfig): void;
+/**
+ * Get the workspace gateway Apollo client
+ */
+export declare function getWorkspaceClient(): ApolloClient;
+/**
+ * Get the global gateway Apollo client
+ */
+export declare function getGlobalClient(): ApolloClient;
+/**
+ * Reset all singleton clients (useful for logout or testing)
+ */
+export declare function resetAppClients(): void;
+//# sourceMappingURL=client.d.ts.map

package/dist/shared/graphql/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/shared/graphql/client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EAGZ,aAAa,EAId,MAAM,qBAAqB,CAAC;AAO7B,OAAO,EAAiB,KAAK,OAAO,EAAY,MAAM,WAAW,CAAC;AAqDlE;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,OAAO,CAE9C;AAYD,YAAY,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,WAAW,mBAAmB;IAClC,4CAA4C;IAC5C,OAAO,EAAE,OAAO,CAAC;IACjB,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3C,8FAA8F;IAC9F,cAAc,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC;IAChD,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC;IACxC,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,IAAI,CAAC;IACT,8EAA8E;IAC9E,cAAc,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC;IAChD,0FAA0F;IAC1F,SAAS,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3C,oFAAoF;IACpF,WAAW,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7C,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1C,0DAA0D;IAC1D,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,+BAA+B;IAC/B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;IACzB;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,yCAAyC;IACzC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACxC,yEAAyE;IACzE,qBAAqB,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,KAAK,IAAI,CAAC;IACrD,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AA2FD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,mBAAmB,gBAse/D;AASD,MAAM,WAAW,eAAe;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3C,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CA0BlE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,YAAY,CAOjD;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,YAAY,CAO9C;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAStC"}

package/dist/shared/graphql/client.js

@@ -0,0 +1,308 @@
+import { GATEWAYS as e, getGatewayUrl as t } from "../../shared-config.js";
+import { validateGatewayBaseUrl as n } from "./security.js";
+import { isWorkspaceTokenValidForContext as r } from "./workspaceToken.js";
+import { enqueueGraphQLFetch as i } from "./fetch.js";
+import { SSELink as a } from "./links/sse-link.js";
+import { onError as o } from "@apollo/client/link/error";
+import { RetryLink as s } from "@apollo/client/link/retry";
+import { setContext as c } from "@apollo/client/link/context";
+import { ApolloClient as l, ApolloLink as u, InMemoryCache as ee, Observable as d, from as f, split as p } from "@apollo/client/core";
+import { getMainDefinition as m } from "@apollo/client/utilities";
+import { print as h } from "graphql";
+//#region src/shared/graphql/client.ts
+var g = {
+	consecutiveFailures: 0,
+	lastFailureTime: 0,
+	isOpen: !1
+}, _ = 5, v = 3e4;
+function te() {
+	return g.consecutiveFailures++, g.lastFailureTime = Date.now(), g.consecutiveFailures >= _ && (g.isOpen = !0), g.isOpen;
+}
+function y() {
+	g.consecutiveFailures = 0, g.isOpen = !1;
+}
+function b() {
+	return g.isOpen ? Date.now() - g.lastFailureTime > v ? (g.isOpen = !1, g.consecutiveFailures = 0, !1) : !0 : !1;
+}
+function x(e) {
+	if (!e || typeof e != "object") return null;
+	let t = e.workspaceId;
+	return typeof t == "string" && t.trim() ? t : null;
+}
+function S(e) {
+	let t = e.headers;
+	if (!t || typeof t != "object" || Array.isArray(t)) return {};
+	let n = {};
+	for (let [e, r] of Object.entries(t)) typeof r == "string" && (n[e] = r);
+	return n;
+}
+function C(e) {
+	let t = e.fetchOptions;
+	if (!t || typeof t != "object" || !("signal" in t)) return;
+	let n = t.signal;
+	return n instanceof AbortSignal ? n : void 0;
+}
+function ne({ uri: e, batchMax: t, batchInterval: n }) {
+	return new u((r) => new d((a) => {
+		let o = r.getContext(), s = { query: h(r.query) };
+		r.operationName && (s.operationName = r.operationName);
+		let c = r.variables ?? {}, l = r.extensions ?? {};
+		Object.keys(c).length > 0 && (s.variables = c), Object.keys(l).length > 0 && (s.extensions = l);
+		let u = !1;
+		return i(e, {
+			"content-type": "application/json",
+			...S(o)
+		}, s, C(o), {
+			batchMax: t,
+			batchInterval: n
+		}).then((e) => {
+			u || (a.next(e), a.complete());
+		}).catch((e) => {
+			u || a.error(e);
+		}), () => {
+			u = !0;
+		};
+	}));
+}
+function w(i) {
+	let { gateway: h, baseUrl: _, authToken: v, workspaceToken: S, locale: C, geography: w, organizationId: T, productId: E, workspaceId: D, tenantId: O, cache: k, enableSubscriptions: A = !1, sseUrl: j, onAuthError: M, onRefreshToken: N, onNetworkError: P, onNetworkStatusChange: F, maxRetryAttempts: re = 3, batchMax: ie = 10, batchInterval: ae, debug: I = !1 } = i, L = e[h], R = ne({
+		uri: n(t(_, h)),
+		batchMax: ie,
+		batchInterval: ae
+	}), z = c((e, t) => {
+		let n = t.headers ?? {}, r = typeof v == "function" ? v() : v;
+		return { headers: {
+			...n,
+			...r ? { authorization: `Bearer ${r}` } : {}
+		} };
+	}), B = c((e, t) => {
+		let n = t.headers ?? {}, r = typeof C == "function" ? C() : C;
+		return { headers: {
+			...n,
+			...r ? { "accept-language": r } : {}
+		} };
+	}), V = c((e, t) => {
+		let n = t.headers ?? {}, r = typeof w == "function" ? w() : null;
+		return { headers: {
+			...n,
+			...r?.country ? { "x-geo-country": r.country } : {},
+			...r?.currency ? { "x-geo-currency": r.currency } : {},
+			...r?.timezone ? { "x-geo-timezone": r.timezone } : {}
+		} };
+	}), H = c((e, t) => {
+		let n = t.headers ?? {}, r = typeof T == "function" ? T() : T;
+		return { headers: {
+			...n,
+			...r ? { "x-org-id": r } : {}
+		} };
+	}), U = c((e, t) => {
+		let n = t.headers ?? {}, r = typeof E == "function" ? E() : E;
+		return { headers: {
+			...n,
+			...r ? { "x-product-id": r } : {}
+		} };
+	}), W = c((e, t) => {
+		let n = t.headers ?? {}, r = (typeof D == "function" ? D() : D) || x(e.variables);
+		return { headers: {
+			...n,
+			...r ? { "x-workspace-id": r } : {}
+		} };
+	}), G = c((e, t) => {
+		let n = t.headers ?? {}, r = typeof O == "function" ? O() : O;
+		return { headers: {
+			...n,
+			...r ? { "x-tenant-id": r } : {}
+		} };
+	}), K = c((e, t) => {
+		let n = t.headers ?? {}, i = typeof S == "function" ? S() : S, a = r(i, { workspaceId: typeof D == "function" ? D() : D }) ? i : null;
+		return { headers: {
+			...n,
+			...a ? { "x-workspace-authorization": `Bearer ${a}` } : {}
+		} };
+	}), q = new s({
+		delay: {
+			initial: 1e3,
+			max: 8e3,
+			jitter: !0
+		},
+		attempts: {
+			max: re,
+			retryIf: (e) => {
+				if (b() || !e) return !1;
+				let t = e.message?.toLowerCase?.() ?? "";
+				return !(t.includes("401") || t.includes("403") || t.includes("unauthorized") || t.includes("forbidden") || t.includes("unauthenticated"));
+			}
+		}
+	}), J = new u((e, t) => {
+		if (b()) {
+			I && console.warn("[CircuitBreaker] Circuit is open, blocking request:", e.operationName);
+			let t = /* @__PURE__ */ Error("Network circuit breaker is open — backend appears unreachable. Retrying in 30 seconds.");
+			return P?.(t), new d((e) => {
+				e.error(t);
+			});
+		}
+		return new d((n) => {
+			let r = t(e).subscribe({
+				next: (e) => {
+					y(), g.consecutiveFailures === 0 && F?.(!1), n.next(e);
+				},
+				error: (e) => {
+					n.error(e);
+				},
+				complete: () => {
+					n.complete();
+				}
+			});
+			return () => {
+				r.unsubscribe();
+			};
+		});
+	}), Y = !1, X = [];
+	function Z(e) {
+		X.forEach(({ resolve: t }) => t(e)), X = [];
+	}
+	let Q = o(({ error: e, operation: t, forward: n }) => {
+		let r = e.errors;
+		if (r) {
+			let i = r.some((e) => e.extensions?.code === "UNAUTHENTICATED" || e.message.includes("Unauthorized") || e.message.includes("Unauthenticated"));
+			for (let e of r) I && console.error("[GraphQL Error]:", e.message);
+			if (i && N) return new d((r) => {
+				(async () => {
+					if (Y) if (await new Promise((e) => {
+						X.push({ resolve: e });
+					})) {
+						let e = n(t).subscribe(r);
+						return () => e.unsubscribe();
+					} else return M?.(), r.error(e), () => {};
+					Y = !0;
+					try {
+						let i = await N();
+						if (Y = !1, i) {
+							Z(!0);
+							let e = n(t).subscribe(r);
+							return () => e.unsubscribe();
+						} else return Z(!1), M?.(), r.error(e), () => {};
+					} catch {
+						return Y = !1, Z(!1), M?.(), r.error(e), () => {};
+					}
+				})();
+			});
+			i && M?.(), y();
+		} else I && console.error("[Network Error]:", e), te() && F?.(!0), e instanceof Error ? P?.(e) : P?.(Error(String(e)));
+	}), $ = f([
+		q,
+		J,
+		Q,
+		z,
+		K,
+		H,
+		U,
+		W,
+		G,
+		B,
+		V,
+		R
+	]);
+	if (A) {
+		let e = j || n(_ || L.defaultBaseUrl) + L.sse;
+		e && ($ = f([
+			q,
+			J,
+			Q,
+			z,
+			K,
+			H,
+			U,
+			W,
+			G,
+			B,
+			V,
+			p(({ query: e }) => {
+				let t = m(e);
+				return t.kind === "OperationDefinition" && t.operation === "subscription";
+			}, new a({
+				url: e,
+				headers: {},
+				debug: I
+			}), R)
+		]));
+	}
+	let oe = new ee({ typePolicies: {
+		File: { keyFields: ["id"] },
+		Folder: { keyFields: ["id"] },
+		Tag: { keyFields: ["id"] },
+		Category: { keyFields: ["id"] },
+		Taxonomy: { keyFields: ["id"] },
+		Group: { keyFields: ["id"] },
+		CalendarEvent: { keyFields: ["id"] },
+		Workflow: { keyFields: ["id"] },
+		WorkflowRun: { keyFields: ["id"] },
+		Project: { keyFields: ["id"] },
+		Workspace: { keyFields: ["id"] },
+		User: { keyFields: ["id"] },
+		Organization: { keyFields: ["id"] },
+		Application: { keyFields: ["id"] },
+		Webhook: { keyFields: ["id"] },
+		OAuthClient: { keyFields: ["id"] },
+		APIKey: { keyFields: ["id"] },
+		Notification: { keyFields: ["id"] },
+		Newsletter: { keyFields: ["id"] },
+		Tour: { keyFields: ["id"] },
+		Ticket: { keyFields: ["id"] },
+		Tenant: { keyFields: ["id"] },
+		Share: { keyFields: ["id"] },
+		FolderShare: { keyFields: ["id"] },
+		Permission: { keyFields: ["id"] },
+		Role: { keyFields: ["id"] },
+		Subscription: { keyFields: ["id"] },
+		Invoice: { keyFields: ["id"] },
+		Session: { keyFields: ["id"] },
+		DeveloperOrganization: { keyFields: ["id"] }
+	} });
+	return new l({
+		link: $,
+		cache: k ?? oe,
+		defaultOptions: {
+			watchQuery: {
+				fetchPolicy: "cache-and-network",
+				errorPolicy: "all"
+			},
+			query: {
+				fetchPolicy: "cache-first",
+				errorPolicy: "all"
+			},
+			mutate: { errorPolicy: "all" }
+		}
+	});
+}
+var T = null, E = null;
+function D(e) {
+	let { workspaceBaseUrl: t, globalBaseUrl: n, authToken: r, enableSubscriptions: i = !1, onAuthError: a, debug: o = !1 } = e;
+	T = w({
+		gateway: "workspace",
+		baseUrl: t,
+		authToken: r,
+		enableSubscriptions: i,
+		onAuthError: a,
+		debug: o
+	}), E = w({
+		gateway: "global",
+		baseUrl: n,
+		authToken: r,
+		onAuthError: a,
+		debug: o
+	});
+}
+function O() {
+	if (!T) throw Error("Workspace client not initialized. Call initializeAppClients first.");
+	return T;
+}
+function k() {
+	if (!E) throw Error("Global client not initialized. Call initializeAppClients first.");
+	return E;
+}
+function A() {
+	T &&= (T.clearStore(), null), E &&= (E.clearStore(), null);
+}
+//#endregion
+export { w as createGraphQLClient, k as getGlobalClient, O as getWorkspaceClient, D as initializeAppClients, A as resetAppClients };

package/dist/shared/graphql/fetch.d.ts

@@ -0,0 +1,133 @@
+import { Gateway } from '../config';
+export interface GraphQLFetchOptions {
+    /** Gateway to target */
+    gateway: Gateway;
+    /** GraphQL query / mutation string */
+    query: string;
+    /** Variables for the operation */
+    variables?: Record<string, unknown>;
+    /** Operation name (optional, helps with debugging) */
+    operationName?: string;
+    /** Override auth token (if not provided, reads from profile storage) */
+    authToken?: string;
+    /**
+     * Include workspace token in X-Workspace-Authorization header.
+     * For `gateway: "workspace"`, this defaults to `true` (auto-attach) unless explicitly set to `false`.
+     * Pass `true` to auto-read from profile storage, or pass the token string directly.
+     */
+    workspaceToken?: boolean | string;
+    /**
+     * Include workspace ID in x-workspace-id header.
+     * Pass `true` to auto-read from profile context storage, or pass the workspace ID string directly.
+     * This is the "context workspace" - the user's current working context.
+     * For "target workspace" (e.g., viewing a specific workspace), use GraphQL arguments instead.
+     */
+    workspaceId?: boolean | string;
+    /**
+     * Include organization ID in x-org-id header.
+     * Pass `true` to auto-read from profile context storage, or pass the org ID string directly.
+     */
+    organizationId?: boolean | string;
+    /**
+     * Include tenant ID in x-tenant-id header.
+     * Pass `true` to auto-read from profile context storage, or pass the tenant ID string directly.
+     */
+    tenantId?: boolean | string;
+    /** Override locale (if not provided, reads from profile storage) */
+    locale?: string;
+    /** Override base URL (if not provided, reads from GATEWAYS config) */
+    baseUrl?: string;
+    /** Additional headers to merge (overrides auto-detected values) */
+    extraHeaders?: Record<string, string>;
+    /** AbortSignal for cancellation */
+    signal?: AbortSignal;
+}
+export interface GraphQLResponse<T = unknown> {
+    data: T | null;
+    errors?: Array<{
+        message: string;
+        locations?: Array<{
+            line: number;
+            column: number;
+        }>;
+        path?: Array<string | number>;
+        extensions?: Record<string, unknown>;
+    }>;
+}
+/** Read the active profile's access token from profile-scoped storage */
+export declare function getStoredAuthToken(): string | null;
+/** Read the active profile's workspace token from profile-scoped storage */
+export declare function getStoredWorkspaceToken(): string | null;
+/** Read the active profile's geography from profile-scoped storage */
+export declare function getStoredGeography(): {
+    country?: string;
+    currency?: string;
+    timezone?: string;
+} | null;
+/** Read the active profile's locale from profile-scoped storage */
+export declare function getStoredLocale(): string;
+/** Read the active profile's context (workspaceId, organizationId, tenantId, projectId) from profile-scoped storage */
+export declare function getStoredContext(): {
+    workspaceId?: string;
+    organizationId?: string;
+    tenantId?: string;
+    projectId?: string;
+} | null;
+/** Read the active profile's workspace ID.
+ * Reads from profile-scoped context (bf-p-{profileId}-context) which
+ * ActiveContextProvider now writes to on every setWorkspace() call and on init.
+ * Falls back to the ?workspace= URL param for page loads where the context
+ * hasn't been hydrated yet (mirrors MultiGatewayProvider.getWorkspaceId). */
+export declare function getStoredWorkspaceId(): string | null;
+/** Read the active profile's organization ID from profile context storage */
+export declare function getStoredOrganizationId(): string | null;
+/** Read the active profile's tenant ID from profile context storage */
+export declare function getStoredTenantId(): string | null;
+/** Resolve full gateway GraphQL URL */
+export declare function resolveGatewayUrl(gateway: Gateway, baseUrl?: string): string;
+export interface EnqueueGraphQLFetchOptions {
+    batchMax?: number;
+    batchInterval?: number;
+}
+export declare function enqueueGraphQLFetch(url: string, headers: Record<string, string>, body: Record<string, unknown>, signal?: AbortSignal, options?: EnqueueGraphQLFetchOptions): Promise<unknown>;
+/**
+ * Make a GraphQL request with automatic auth + locale headers.
+ *
+ * @example Basic query (global gateway)
+ * ```ts
+ * const result = await graphqlFetch<{ myWorkspaces: Workspace[] }>({
+ *   gateway: 'global',
+ *   query: `query { myWorkspaces { id name } }`,
+ * });
+ * ```
+ *
+ * @example Workspace query with context headers (auto-read from storage)
+ * ```ts
+ * const result = await graphqlFetch<{ workspaceResources: Resource[] }>({
+ *   gateway: 'workspace',
+ *   query: WORKSPACE_RESOURCES_QUERY,
+ *   workspaceId: true, // auto-reads from profile context storage -> x-workspace-id header
+ * });
+ * ```
+ *
+ * @example Workspace query with explicit workspace ID
+ * ```ts
+ * const result = await graphqlFetch<{ workspaceMembers: MemberList }>({
+ *   gateway: 'workspace',
+ *   query: WORKSPACE_MEMBERS_QUERY,
+ *   variables: { workspaceId: targetWorkspaceId }, // Target workspace in arguments
+ *   workspaceId: contextWorkspaceId, // Context workspace in header (for RBAC)
+ * });
+ * ```
+ *
+ * @example With explicit tokens (e.g. right after login, before storage is updated)
+ * ```ts
+ * const result = await graphqlFetch({
+ *   gateway: 'global',
+ *   query: MY_WORKSPACES_QUERY,
+ *   authToken: freshAccessToken,
+ * });
+ * ```
+ */
+export declare function graphqlFetch<T = unknown>(options: GraphQLFetchOptions): Promise<GraphQLResponse<T>>;
+//# sourceMappingURL=fetch.d.ts.map

package/dist/shared/graphql/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../../src/shared/graphql/fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAY,KAAK,OAAO,EAAE,MAAM,WAAW,CAAC;AAqBnD,MAAM,WAAW,mBAAmB;IAClC,wBAAwB;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,sDAAsD;IACtD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAClC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC/B;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC5B,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,mCAAmC;IACnC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC1C,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IACf,MAAM,CAAC,EAAE,KAAK,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;QAC9B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACtC,CAAC,CAAC;CACJ;AAmBD,yEAAyE;AACzE,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAWlD;AAED,4EAA4E;AAC5E,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAMvD;AAkCD,sEAAsE;AACtE,wBAAgB,kBAAkB,IAAI;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,IAAI,CAaP;AAED,mEAAmE;AACnE,wBAAgB,eAAe,IAAI,MAAM,CAaxC;AAED,uHAAuH;AACvH,wBAAgB,gBAAgB,IAAI;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,IAAI,CAYP;AAED;;;;6EAI6E;AAC7E,wBAAgB,oBAAoB,IAAI,MAAM,GAAG,IAAI,CAEpD;AAED,6EAA6E;AAC7E,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAEvD;AAED,uEAAuE;AACvE,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,IAAI,CAEjD;AAyKD,uCAAuC;AACvC,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAK5E;AAmBD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAqMD,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,CAAC,EAAE,0BAA0B,GACnC,OAAO,CAAC,OAAO,CAAC,CA8ElB;AAoBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAsB,YAAY,CAAC,CAAC,GAAG,OAAO,EAC5C,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAiH7B"}