@burdenoff/fe-libs 2026.510.126

package/dist/shared/providers/shell/ActiveContextProvider.js

@@ -0,0 +1,181 @@
+import { getProfileContext as e, resolveActiveProfileId as t, setProfileContext as n } from "./ProfileStorageManager.js";
+import { ACTIVE_CONTEXT_STORAGE_KEY as r, DEFAULT_ACTIVE_CONTEXT_URL_PARAMS as i, clearActiveContextStorage as a, getUrlParam as o, readActiveContextStorageValue as s, writeActiveContextFallback as c, writeActiveContextStorageValue as l } from "./ActiveContextStorage.js";
+import { createContext as u, useCallback as d, useContext as f, useEffect as p, useMemo as m, useState as h } from "react";
+import { jsx as g } from "react/jsx-runtime";
+//#region src/shared/providers/shell/ActiveContextProvider.tsx
+var _ = u(null);
+function v(e) {
+	if (typeof window > "u") return;
+	let t = new URL(window.location.href);
+	Object.entries(e).forEach(([e, n]) => {
+		n ? t.searchParams.set(e, n) : t.searchParams.delete(e);
+	}), window.history.replaceState({}, "", t.toString());
+}
+function y({ children: u, defaultOrganizationId: f = null, defaultWorkspaceId: y = null, defaultProjectId: b = null, defaultTenantId: x = null, storageKey: S = r, syncToUrl: C = !1, urlParams: w = i }) {
+	let [T, E] = h(() => {
+		if (typeof window > "u") return f;
+		if (C) {
+			let e = o(w.organization);
+			if (e) return e;
+		}
+		return s("organization", S) || f;
+	}), [D, O] = h(() => {
+		if (typeof window > "u") return y;
+		if (C) {
+			let e = o(w.workspace);
+			if (e) return e;
+		}
+		let r = s("workspace", S) || y;
+		if (r) {
+			let i = t();
+			if (i) {
+				let t = e(i);
+				t?.workspaceId || n(i, {
+					...t,
+					workspaceId: r
+				});
+			}
+		}
+		return r;
+	}), [k, A] = h(() => {
+		if (typeof window > "u") return b;
+		if (C) {
+			let e = o(w.project);
+			if (e) return e;
+		}
+		return s("project", S) || b;
+	}), [j, M] = h(() => {
+		if (typeof window > "u") return x;
+		if (C) {
+			let e = o(w.tenant);
+			if (e) return e;
+		}
+		return s("tenant", S) || x;
+	});
+	p(() => {
+		l("organization", T, S), l("workspace", D, S), l("project", k, S), l("tenant", j, S);
+	}, [
+		T,
+		D,
+		k,
+		j,
+		S
+	]), p(() => {
+		let r = t();
+		if (!r) return;
+		let i = e(r), a = {
+			...i,
+			organizationId: T,
+			workspaceId: D,
+			projectId: k,
+			tenantId: j
+		};
+		i?.organizationId === a.organizationId && i?.workspaceId === a.workspaceId && i?.projectId === a.projectId && i?.tenantId === a.tenantId || n(r, a);
+	}, [
+		T,
+		D,
+		k,
+		j
+	]), p(() => {
+		C && v({
+			[w.organization]: T,
+			[w.workspace]: D,
+			[w.project]: k,
+			[w.tenant]: j
+		});
+	}, [
+		T,
+		D,
+		k,
+		j,
+		C,
+		w
+	]), p(() => {
+		if (!C) return;
+		let e = () => {
+			let e = o(w.organization), t = o(w.workspace), n = o(w.project), r = o(w.tenant);
+			e !== T && E(e), t !== D && O(t), n !== k && A(n), r !== j && M(r);
+		};
+		return window.addEventListener("popstate", e), () => window.removeEventListener("popstate", e);
+	}, [
+		C,
+		w,
+		T,
+		D,
+		k,
+		j
+	]);
+	let N = d((r) => {
+		E(r);
+		let i = t();
+		i && n(i, {
+			...e(i),
+			organizationId: r
+		}), typeof window < "u" && window.dispatchEvent(new CustomEvent("burdenoff:organization-changed", { detail: { organizationId: r } }));
+	}, []), P = d((r, i) => {
+		let a = {
+			organization: "organizationId",
+			workspace: "workspaceId",
+			project: "projectId",
+			tenant: "tenantId"
+		};
+		l(r, i, S);
+		let o = t();
+		o ? n(o, {
+			...e(o),
+			[a[r]]: i
+		}) : typeof window < "u" && c(r, i, S);
+	}, [S]), F = d((e) => {
+		O(e), P("workspace", e), typeof window < "u" && window.dispatchEvent(new CustomEvent("burdenoff:workspace-changed", { detail: { workspaceId: e } }));
+	}, [P]), I = d((e) => {
+		A(e), P("project", e), typeof window < "u" && window.dispatchEvent(new CustomEvent("burdenoff:project-changed", { detail: { projectId: e } }));
+	}, [P]), L = d((e) => {
+		M(e), P("tenant", e);
+	}, [P]), R = d((e) => {
+		e.organizationId !== void 0 && N(e.organizationId), e.workspaceId !== void 0 && F(e.workspaceId), e.projectId !== void 0 && I(e.projectId), e.tenantId !== void 0 && L(e.tenantId);
+	}, [
+		N,
+		F,
+		I,
+		L
+	]), z = d(() => {
+		E(null), O(null), A(null), M(null), a(S);
+		let e = t();
+		e && n(e, {});
+	}, [S]), B = m(() => ({
+		organizationId: T,
+		workspaceId: D,
+		projectId: k,
+		tenantId: j,
+		setOrganization: N,
+		setWorkspace: F,
+		setProject: I,
+		setTenant: L,
+		setContext: R,
+		clearContext: z,
+		urlSyncEnabled: C
+	}), [
+		T,
+		D,
+		k,
+		j,
+		N,
+		F,
+		I,
+		L,
+		R,
+		z,
+		C
+	]);
+	return /* @__PURE__ */ g(_.Provider, {
+		value: B,
+		children: u
+	});
+}
+function b() {
+	let e = f(_);
+	if (!e) throw Error("useActiveContext must be used within an ActiveContextProvider");
+	return e;
+}
+//#endregion
+export { y as ActiveContextProvider, b as useActiveContext };

package/dist/shared/providers/shell/ActiveContextStorage.d.ts

@@ -0,0 +1,45 @@
+export declare const ACTIVE_CONTEXT_STORAGE_KEY = "burdenoff-active-context";
+export type ActiveContextStorageField = "organization" | "workspace" | "project" | "tenant";
+export interface ActiveContextUrlParams {
+    organization?: string;
+    workspace?: string;
+    project?: string;
+    tenant?: string;
+}
+export declare const DEFAULT_ACTIVE_CONTEXT_URL_PARAMS: Required<ActiveContextUrlParams>;
+export interface ActiveContextSnapshot {
+    organizationId: string | null;
+    workspaceId: string | null;
+    projectId: string | null;
+    tenantId: string | null;
+}
+export declare function getUrlParam(paramName: string): string | null;
+export declare function readActiveContextStorageValue(field: ActiveContextStorageField, storageKey?: string): string | null;
+export declare function writeActiveContextStorageValue(field: ActiveContextStorageField, value: string | null, storageKey?: string): void;
+/**
+ * Writes a context value to localStorage as a fallback, bypassing the normal
+ * "write then remove" pattern in writeActiveContextStorageValue.
+ *
+ * Storage contract:
+ * - sessionStorage is the primary store for current tab context
+ * - localStorage is used in two ways:
+ *   1. As a legacy migration source (read by readActiveContextStorageValue,
+ *      then removed after migration to sessionStorage)
+ *   2. As a fallback when profile context isn't yet hydrated (profileId is null)
+ *
+ * When the profile context isn't available (profileId returns null), we need
+ * to persist to localStorage so that on full page reload (which clears
+ * sessionStorage), the context can be restored. The value will be picked up
+ * by readActiveContextStorageValue's profile context fallback.
+ *
+ * This helper does NOT clear localStorage afterwards, unlike the main write
+ * function, because we intentionally want to re-seed it for reload recovery.
+ */
+export declare function writeActiveContextFallback(field: ActiveContextStorageField, value: string | null, storageKey?: string): void;
+export declare function clearActiveContextStorage(storageKey?: string): void;
+export declare function readActiveContextValueWithUrlPrecedence(field: ActiveContextStorageField, options?: {
+    storageKey?: string;
+    urlParam?: string;
+}): string | null;
+export declare function readActiveContextSnapshot(storageKey?: string, urlParams?: ActiveContextUrlParams): ActiveContextSnapshot;
+//# sourceMappingURL=ActiveContextStorage.d.ts.map

package/dist/shared/providers/shell/ActiveContextStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActiveContextStorage.d.ts","sourceRoot":"","sources":["../../../../src/shared/providers/shell/ActiveContextStorage.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,0BAA0B,6BAA6B,CAAC;AAErE,MAAM,MAAM,yBAAyB,GACjC,cAAc,GACd,WAAW,GACX,SAAS,GACT,QAAQ,CAAC;AAEb,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,iCAAiC,EAAE,QAAQ,CAAC,sBAAsB,CAM5E,CAAC;AAEJ,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAkCD,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAO5D;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,yBAAyB,EAChC,UAAU,SAA6B,GACtC,MAAM,GAAG,IAAI,CAyBf;AAED,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,yBAAyB,EAChC,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,UAAU,SAA6B,GACtC,IAAI,CAaN;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,yBAAyB,EAChC,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,UAAU,SAA6B,GACtC,IAAI,CAWN;AAED,wBAAgB,yBAAyB,CACvC,UAAU,SAA6B,GACtC,IAAI,CAeN;AAED,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,yBAAyB,EAChC,OAAO,CAAC,EAAE;IACR,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACA,MAAM,GAAG,IAAI,CAYf;AAED,wBAAgB,yBAAyB,CACvC,UAAU,SAA6B,EACvC,SAAS,GAAE,sBAA0D,GACpE,qBAAqB,CAmBvB"}

package/dist/shared/providers/shell/ActiveContextStorage.js

@@ -0,0 +1,61 @@
+import { getProfileContext as e, resolveActiveProfileId as t } from "./ProfileStorageManager.js";
+//#region src/shared/providers/shell/ActiveContextStorage.ts
+var n = "burdenoff-active-context", r = {
+	organization: "org",
+	workspace: "workspace",
+	project: "project",
+	tenant: "tenant"
+};
+function i(e, t) {
+	return `${e}-${t}`;
+}
+function a(n) {
+	let r = t();
+	if (!r) return null;
+	let i = e(r);
+	if (!i) return null;
+	switch (n) {
+		case "organization": return i.organizationId ?? null;
+		case "workspace": return i.workspaceId ?? null;
+		case "project": return i.projectId ?? null;
+		case "tenant": return i.tenantId ?? null;
+	}
+}
+function o(e) {
+	return typeof window > "u" ? null : new URLSearchParams(window.location.search).get(e);
+}
+function s(e, t = n) {
+	if (typeof window > "u") return null;
+	let r = i(t, e), o = sessionStorage.getItem(r);
+	if (o) return o;
+	let s = localStorage.getItem(r);
+	if (s) return sessionStorage.setItem(r, s), localStorage.removeItem(r), s;
+	let c = a(e);
+	return c ? (sessionStorage.setItem(r, c), c) : null;
+}
+function c(e, t, r = n) {
+	if (typeof window > "u") return;
+	let a = i(r, e);
+	t ? sessionStorage.setItem(a, t) : sessionStorage.removeItem(a), localStorage.removeItem(a);
+}
+function l(e, t, r = n) {
+	if (typeof window > "u") return;
+	let a = i(r, e);
+	t ? localStorage.setItem(a, t) : localStorage.removeItem(a);
+}
+function u(e = n) {
+	if (!(typeof window > "u")) for (let t of [
+		"organization",
+		"workspace",
+		"project",
+		"tenant"
+	]) {
+		let n = i(e, t);
+		sessionStorage.removeItem(n), localStorage.removeItem(n);
+	}
+}
+function d(e, t) {
+	return o(t?.urlParam ?? r[e]) || s(e, t?.storageKey ?? "burdenoff-active-context");
+}
+//#endregion
+export { n as ACTIVE_CONTEXT_STORAGE_KEY, r as DEFAULT_ACTIVE_CONTEXT_URL_PARAMS, u as clearActiveContextStorage, o as getUrlParam, s as readActiveContextStorageValue, d as readActiveContextValueWithUrlPrecedence, l as writeActiveContextFallback, c as writeActiveContextStorageValue };

package/dist/shared/providers/shell/AppShellContext.d.ts

@@ -0,0 +1,19 @@
+import { ReactNode } from 'react';
+export interface AppShellContextValue {
+    /** Product display name (e.g., "VibeControls", "FluidGrids") */
+    productName: string;
+    /** Product slug (e.g., "vibecontrols", "fluidgrids") */
+    productSlug: string;
+    /** Brand initial for logos (e.g., "VC", "FG") */
+    brandInitial: string;
+    /** Product tagline */
+    tagline: string;
+    /** Product domain (e.g., "vibecontrols.com") */
+    domain?: string;
+}
+export declare function AppShellContextProvider({ value, children, }: {
+    value: AppShellContextValue;
+    children: ReactNode;
+}): import("react/jsx-runtime").JSX.Element;
+export declare function useAppShell(): AppShellContextValue;
+//# sourceMappingURL=AppShellContext.d.ts.map

package/dist/shared/providers/shell/AppShellContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AppShellContext.d.ts","sourceRoot":"","sources":["../../../../src/shared/providers/shell/AppShellContext.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAA6B,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAElE,MAAM,WAAW,oBAAoB;IACnC,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB,iDAAiD;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AASD,wBAAgB,uBAAuB,CAAC,EACtC,KAAK,EACL,QAAQ,GACT,EAAE;IACD,KAAK,EAAE,oBAAoB,CAAC;IAC5B,QAAQ,EAAE,SAAS,CAAC;CACrB,2CAMA;AAED,wBAAgB,WAAW,IAAI,oBAAoB,CAElD"}

package/dist/shared/providers/shell/AppShellContext.js

@@ -0,0 +1,20 @@
+import { createContext as e, useContext as t } from "react";
+import { jsx as n } from "react/jsx-runtime";
+//#region src/shared/providers/shell/AppShellContext.tsx
+var r = e({
+	productName: "Burdenoff",
+	productSlug: "workspaces",
+	brandInitial: "B",
+	tagline: "Enterprise platform"
+});
+function i({ value: e, children: t }) {
+	return /* @__PURE__ */ n(r.Provider, {
+		value: e,
+		children: t
+	});
+}
+function a() {
+	return t(r);
+}
+//#endregion
+export { i as AppShellContextProvider, a as useAppShell };

package/dist/shared/providers/shell/AuthBridgeClient.d.ts

@@ -0,0 +1,121 @@
+/**
+ * AuthBridgeClient - Cross-Domain Orchestrated Auth via Hidden iframe + postMessage
+ *
+ * This client manages a hidden iframe pointing to a session bridge page.
+ * The bridge page runs on the auth domain and stores/retrieves tokens in
+ * its own localStorage. Multiple app shells can embed this bridge to share
+ * auth state across different origins.
+ *
+ * Architecture:
+ * - Each app shell creates one AuthBridgeClient instance
+ * - The bridge iframe is loaded from a configurable URL (e.g., /auth/session-bridge)
+ * - Auth state changes are broadcast via postMessage to/from the bridge
+ * - The bridge's localStorage is scoped to ITS origin, enabling cross-domain sharing
+ *
+ * Protocol Messages:
+ * Parent -> Bridge: AUTH_INIT, AUTH_LOGIN, AUTH_LOGOUT, AUTH_LOGOUT_ALL,
+ *                   AUTH_TOKEN_REFRESH, AUTH_ACCOUNT_ADD, AUTH_ACCOUNT_SWITCH
+ * Bridge -> Parent: AUTH_STATE, AUTH_STATE_CHANGED
+ */
+export interface BridgeAuthState {
+    user: Record<string, unknown> | null;
+    tokens: {
+        accessToken: string;
+        refreshToken?: string;
+        expiresAt?: number;
+        workspaceToken?: string;
+    } | null;
+    accounts?: Array<Record<string, unknown>>;
+    activeAccountId?: string | null;
+    profiles?: Array<Record<string, unknown>>;
+    activeProfileId?: string | null;
+}
+export interface BridgeMessage {
+    type: "AUTH_INIT" | "AUTH_STATE" | "AUTH_LOGIN" | "AUTH_LOGOUT" | "AUTH_LOGOUT_ALL" | "AUTH_TOKEN_REFRESH" | "AUTH_ACCOUNT_ADD" | "AUTH_ACCOUNT_SWITCH" | "AUTH_STATE_CHANGED" | "AUTH_BRIDGE_READY";
+    payload?: BridgeAuthState & {
+        trigger?: string;
+        accountId?: string;
+    };
+    /** Unique message ID for request/response correlation */
+    messageId?: string;
+    /** Source identifier */
+    source?: string;
+}
+export type AuthBridgeListener = (state: BridgeAuthState) => void;
+export interface AuthBridgeClientOptions {
+    /** URL of the session bridge page */
+    bridgeUrl: string;
+    /** Allowed origins for postMessage (comma-separated or array) */
+    allowedOrigins?: string | string[];
+    /** Callback when auth state changes from another app shell */
+    onStateChanged?: AuthBridgeListener;
+    /** Enable debug logging */
+    debug?: boolean;
+}
+export declare class AuthBridgeClient {
+    private iframe;
+    private bridgeUrl;
+    private allowedOrigins;
+    private onStateChanged?;
+    private debug;
+    private ready;
+    private readyReceived;
+    private pendingMessages;
+    private messageHandler;
+    private destroyed;
+    constructor(options: AuthBridgeClientOptions);
+    /**
+     * Initialize the bridge by creating the hidden iframe and setting up listeners
+     */
+    init(): Promise<void>;
+    /**
+     * Read current auth state from localStorage to include in AUTH_INIT.
+     * This allows the bridge to store the parent's auth state for cross-domain SSO.
+     */
+    private getCurrentAuthState;
+    /**
+     * Destroy the bridge — remove iframe and listeners
+     * @param removeIframe - If false, keeps iframe in DOM for reuse (StrictMode compatibility)
+     */
+    destroy(removeIframe?: boolean): void;
+    /**
+     * Notify bridge of a login event
+     */
+    notifyLogin(state: BridgeAuthState): void;
+    /**
+     * Notify bridge of a logout event
+     */
+    notifyLogout(): void;
+    /**
+     * Notify bridge to logout all accounts
+     */
+    notifyLogoutAll(): void;
+    /**
+     * Notify bridge of a token refresh
+     */
+    notifyTokenRefresh(tokens: BridgeAuthState["tokens"]): void;
+    /**
+     * Notify bridge of an account switch
+     */
+    notifyAccountSwitch(accountId: string): void;
+    private handleMessage;
+    private sendToBridge;
+    private flushPendingMessages;
+    private log;
+}
+export declare function initAuthBridge(options: AuthBridgeClientOptions): AuthBridgeClient;
+export declare function getAuthBridge(): AuthBridgeClient | null;
+/**
+ * Check if the auth bridge has been initialized
+ */
+export declare function isAuthBridgeInitialized(): boolean;
+/**
+ * Destroy the auth bridge
+ *
+ * By default, this is a no-op to handle React StrictMode correctly.
+ * The bridge persists for the lifetime of the page.
+ *
+ * @param forceDestroy - If true, actually destroys the bridge (use on logout/app close)
+ */
+export declare function destroyAuthBridge(forceDestroy?: boolean): void;
+//# sourceMappingURL=AuthBridgeClient.d.ts.map

package/dist/shared/providers/shell/AuthBridgeClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthBridgeClient.d.ts","sourceRoot":"","sources":["../../../../src/shared/providers/shell/AuthBridgeClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAOH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACrC,MAAM,EAAE;QACN,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GAAG,IAAI,CAAC;IACT,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1C,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1C,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EACA,WAAW,GACX,YAAY,GACZ,YAAY,GACZ,aAAa,GACb,iBAAiB,GACjB,oBAAoB,GACpB,kBAAkB,GAClB,qBAAqB,GACrB,oBAAoB,GACpB,mBAAmB,CAAC;IACxB,OAAO,CAAC,EAAE,eAAe,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrE,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wBAAwB;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;AAKlE,MAAM,WAAW,uBAAuB;IACtC,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACnC,8DAA8D;IAC9D,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAkC;IAChD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,cAAc,CAAW;IACjC,OAAO,CAAC,cAAc,CAAC,CAAqB;IAC5C,OAAO,CAAC,KAAK,CAAU;IACvB,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,eAAe,CAAuB;IAC9C,OAAO,CAAC,cAAc,CAAgD;IACtE,OAAO,CAAC,SAAS,CAAS;gBAEd,OAAO,EAAE,uBAAuB;IAsB5C;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAsF3B;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAwB3B;;;OAGG;IACH,OAAO,CAAC,YAAY,UAAO,GAAG,IAAI;IAmBlC;;OAEG;IACH,WAAW,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAmDzC;;OAEG;IACH,YAAY,IAAI,IAAI;IAapB;;OAEG;IACH,eAAe,IAAI,IAAI;IAavB;;OAEG;IACH,kBAAkB,CAAC,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,GAAG,IAAI;IAQ3D;;OAEG;IACH,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAU5C,OAAO,CAAC,aAAa;IAsDrB,OAAO,CAAC,YAAY;IAkBpB,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,GAAG;CAKZ;AAeD,wBAAgB,cAAc,CAC5B,OAAO,EAAE,uBAAuB,GAC/B,gBAAgB,CAoClB;AAED,wBAAgB,aAAa,IAAI,gBAAgB,GAAG,IAAI,CAEvD;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,OAAO,CAEjD;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,UAAQ,GAAG,IAAI,CAW5D"}

package/dist/shared/providers/shell/AuthBridgeClient.js

@@ -0,0 +1,187 @@
+import { clearShellSsoCookies as e, setShellSsoCookies as t } from "../../utils/authCookie.js";
+//#region src/shared/providers/shell/AuthBridgeClient.ts
+var n = "burdenoff-auth-bridge", r = "burdenoff-auth-client", i = class {
+	iframe = null;
+	bridgeUrl;
+	allowedOrigins;
+	onStateChanged;
+	debug;
+	ready = !1;
+	readyReceived = !1;
+	pendingMessages = [];
+	messageHandler = null;
+	destroyed = !1;
+	constructor(e) {
+		this.bridgeUrl = e.bridgeUrl, this.debug = e.debug ?? !1, this.onStateChanged = e.onStateChanged, this.destroyed = !1, typeof e.allowedOrigins == "string" ? this.allowedOrigins = e.allowedOrigins.split(",").map((e) => e.trim()).filter(Boolean) : Array.isArray(e.allowedOrigins) ? this.allowedOrigins = e.allowedOrigins : this.allowedOrigins = [window.location.origin], this.log("AuthBridgeClient created", { bridgeUrl: this.bridgeUrl });
+	}
+	async init() {
+		if (this.iframe) {
+			this.log("Bridge already initialized");
+			return;
+		}
+		if (this.destroyed) {
+			this.log("Bridge was destroyed, skipping init");
+			return;
+		}
+		let e = document.getElementById("auth-session-bridge");
+		if (e) {
+			this.log("Reusing existing bridge iframe from DOM"), this.iframe = e, this.messageHandler = this.handleMessage.bind(this), window.addEventListener("message", this.messageHandler), e.contentWindow && this.sendToBridge({
+				type: "AUTH_INIT",
+				source: r
+			});
+			return;
+		}
+		try {
+			let e = new URL(this.bridgeUrl).origin;
+			!(window.location.hostname === "localhost" || window.location.hostname === "127.0.0.1") && e !== window.location.origin && "requestStorageAccessFor" in document && (await document.requestStorageAccessFor(e), this.log("requestStorageAccessFor() granted for", e));
+		} catch {
+			this.log("requestStorageAccessFor() not available or denied");
+		}
+		this.iframe = document.createElement("iframe"), this.iframe.src = this.bridgeUrl, this.iframe.style.display = "none", this.iframe.style.width = "0", this.iframe.style.height = "0", this.iframe.style.border = "none", this.iframe.setAttribute("aria-hidden", "true"), this.iframe.setAttribute("tabindex", "-1"), this.iframe.setAttribute("allow", "storage-access"), this.iframe.id = "auth-session-bridge", this.iframe.title = "Auth Session Bridge", this.messageHandler = this.handleMessage.bind(this), window.addEventListener("message", this.messageHandler), this.iframe.onload = () => {
+			if (this.destroyed) return;
+			this.log("Bridge iframe loaded");
+			let e = this.getCurrentAuthState();
+			this.sendToBridge({
+				type: "AUTH_INIT",
+				payload: e,
+				source: r
+			});
+		}, document.body.appendChild(this.iframe), this.log("Bridge iframe created and appended to body");
+	}
+	getCurrentAuthState() {
+		try {
+			let e = sessionStorage.getItem("bf-active-profile");
+			if (!e) return;
+			let t = localStorage.getItem(`bf-p-${e}-user`), n = localStorage.getItem(`bf-p-${e}-tokens`), r = localStorage.getItem("bf-profiles");
+			return !t || !n ? void 0 : {
+				user: JSON.parse(t),
+				tokens: JSON.parse(n),
+				profiles: r ? JSON.parse(r) : [],
+				activeProfileId: e
+			};
+		} catch {
+			return;
+		}
+	}
+	destroy(e = !0) {
+		this.destroyed = !0, this.messageHandler &&= (window.removeEventListener("message", this.messageHandler), null), this.iframe && e && this.iframe.remove(), this.iframe = null, this.ready = !1, this.readyReceived = !1, this.pendingMessages = [], this.log("Bridge destroyed", { removeIframe: e });
+	}
+	notifyLogin(e) {
+		if (this.sendToBridge({
+			type: "AUTH_LOGIN",
+			payload: {
+				...e,
+				trigger: "login"
+			},
+			source: r
+		}), e.activeProfileId) try {
+			t(e.activeProfileId, window.location.origin);
+		} catch {}
+		try {
+			if (new URL(this.bridgeUrl).origin === window.location.origin && e.activeProfileId && e.profiles) {
+				if (localStorage.setItem("bf-profiles", JSON.stringify(e.profiles)), e.user && localStorage.setItem(`bf-p-${e.activeProfileId}-user`, JSON.stringify(e.user)), e.tokens) {
+					let { workspaceToken: t, ...n } = e.tokens;
+					localStorage.setItem(`bf-p-${e.activeProfileId}-tokens`, JSON.stringify(n)), t && localStorage.setItem(`bf-p-${e.activeProfileId}-workspace-token`, t);
+				}
+				sessionStorage.setItem("bf-active-profile", e.activeProfileId);
+			}
+		} catch {}
+	}
+	notifyLogout() {
+		this.sendToBridge({
+			type: "AUTH_LOGOUT",
+			source: r
+		});
+		try {
+			e();
+		} catch {}
+	}
+	notifyLogoutAll() {
+		this.sendToBridge({
+			type: "AUTH_LOGOUT_ALL",
+			source: r
+		});
+		try {
+			e();
+		} catch {}
+	}
+	notifyTokenRefresh(e) {
+		this.sendToBridge({
+			type: "AUTH_TOKEN_REFRESH",
+			payload: {
+				user: null,
+				tokens: e,
+				trigger: "refresh"
+			},
+			source: r
+		});
+	}
+	notifyAccountSwitch(e) {
+		this.sendToBridge({
+			type: "AUTH_ACCOUNT_SWITCH",
+			payload: {
+				user: null,
+				tokens: null,
+				accountId: e,
+				trigger: "switch"
+			},
+			source: r
+		});
+	}
+	handleMessage(e) {
+		if (this.destroyed) return;
+		let t = new URL(this.bridgeUrl).origin;
+		if (e.origin !== t && !this.allowedOrigins.includes(e.origin)) return;
+		let r = e.data;
+		if (!(!r || !r.type || r.source !== n)) switch (this.log("Received bridge message:", r.type), r.type) {
+			case "AUTH_BRIDGE_READY":
+				if (this.readyReceived) {
+					this.log("AUTH_BRIDGE_READY already received, ignoring duplicate");
+					return;
+				}
+				this.readyReceived = !0, this.ready = !0, this.log("Bridge is ready, flushing pending messages"), this.flushPendingMessages();
+				break;
+			case "AUTH_STATE":
+				r.payload && this.onStateChanged && this.onStateChanged(r.payload);
+				break;
+			case "AUTH_STATE_CHANGED":
+				r.payload && this.onStateChanged && (this.log("State changed from another app shell", { trigger: r.payload.trigger }), this.onStateChanged(r.payload));
+				break;
+		}
+	}
+	sendToBridge(e) {
+		if (!this.iframe?.contentWindow) {
+			this.log("Bridge iframe not ready, queuing message:", e.type), this.pendingMessages.push(e);
+			return;
+		}
+		if (!this.ready && e.type !== "AUTH_INIT") {
+			this.log("Bridge not ready yet, queuing message:", e.type), this.pendingMessages.push(e);
+			return;
+		}
+		let t = new URL(this.bridgeUrl).origin;
+		this.iframe.contentWindow.postMessage(e, t), this.log("Sent message to bridge:", e.type);
+	}
+	flushPendingMessages() {
+		for (; this.pendingMessages.length > 0;) {
+			let e = this.pendingMessages.shift();
+			this.sendToBridge(e);
+		}
+	}
+	log(...e) {
+		this.debug && console.log("[AuthBridgeClient]", ...e);
+	}
+}, a = null, o = !1, s = !1;
+function c(e) {
+	return s && a ? (e.debug && console.log("[AuthBridgeClient] Returning existing instance"), a) : o && a ? (e.debug && console.log("[AuthBridgeClient] Initialization in progress, returning pending instance"), a) : (o && e.debug && console.log("[AuthBridgeClient] Concurrent init detected, waiting..."), o = !0, a = new i(e), a.init(), s = !0, o = !1, a);
+}
+function l() {
+	return a;
+}
+function u() {
+	return s && a !== null;
+}
+function d(e = !1) {
+	e && a && (a.destroy(!0), a = null, s = !1);
+}
+//#endregion
+export { i as AuthBridgeClient, d as destroyAuthBridge, l as getAuthBridge, c as initAuthBridge, u as isAuthBridgeInitialized };