@burdenoff/fe-libs 2026.601.4 → 2026.601.5

package/dist/shared/components/SSORedirectGuard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SSORedirectGuard.d.ts","sourceRoot":"","sources":["../../../src/shared/components/SSORedirectGuard.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAqGH,wBAAgB,qBAAqB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAGlE;AAED,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAM1F;AAED,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAiBlF;AAmDD,wBAAgB,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAsCpE;AAED;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,IAAI,OAAO,CA6BlC;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAyC9F;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CA6B1C;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,4CAMjC"}
+{"version":3,"file":"SSORedirectGuard.d.ts","sourceRoot":"","sources":["../../../src/shared/components/SSORedirectGuard.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAsGH,wBAAgB,qBAAqB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAGlE;AAED,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAM1F;AAED,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAiBlF;AAmDD,wBAAgB,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA4CpE;AAED;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,IAAI,OAAO,CA6BlC;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAyC9F;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CA6B1C;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,4CAMjC"}

package/dist/shared/components/SSORedirectGuard.js

@@ -1,14 +1,14 @@
 import { resolveAuthBridgeConfig as e } from "../config/authBridgeUrls.js";
 import { clearActiveContextStorage as t } from "../providers/shell/ActiveContextStorage.js";
-import { clearShellSsoCookies as n, isSharedSsoCookieDomain as r, isTrustedSsoOrigin as i, readShellSsoCookie as a } from "../utils/authCookie.js";
-import { jsx as o } from "react/jsx-runtime";
+import { clearShellSsoCookies as n, isLocalDevSsoHost as r, isSharedSsoCookieDomain as i, isTrustedSsoOrigin as a, readShellSsoCookie as o } from "../utils/authCookie.js";
+import { jsx as s } from "react/jsx-runtime";
 //#region src/shared/components/SSORedirectGuard.tsx
-var s = "bf-sso-relay-attempt", c = 120 * 1e3, l = [
+var c = "bf-sso-relay-attempt", l = 120 * 1e3, u = [
 	"sso_failed",
 	"sso-failed",
 	"sso-attempted"
 ];
-function u(e) {
+function d(e) {
 	if (typeof window > "u") return null;
 	try {
 		let t = `${window.location.pathname}${window.location.search}${window.location.hash}`, n = new URL(e ?? t, window.location.origin);
@@ -17,66 +17,66 @@ function u(e) {
 		return null;
 	}
 }
-function d(e) {
-	return e === "/auth" || e.startsWith("/auth/");
-}
 function f(e) {
-	return l.some((t) => e.searchParams.has(t));
+	return e === "/auth" || e.startsWith("/auth/");
 }
 function p(e) {
-	if (f(e)) return n(), !0;
-	if (d(e.pathname)) return !0;
+	return u.some((t) => e.searchParams.has(t));
+}
+function m(e) {
+	if (p(e)) return n(), !0;
+	if (f(e.pathname)) return !0;
 	let t = e.searchParams.get("reason");
 	return t === "session-expired" || t === "logout";
 }
-function m() {
+function h() {
 	try {
-		sessionStorage.removeItem(s);
+		sessionStorage.removeItem(c);
 	} catch {}
 }
-function h() {
+function g() {
 	if (typeof window > "u") return null;
 	try {
-		let e = sessionStorage.getItem(s);
+		let e = sessionStorage.getItem(c);
 		if (!e) return null;
 		let t = JSON.parse(e);
-		return typeof t.relayOrigin != "string" || typeof t.returnTo != "string" || typeof t.startedAt != "number" || Date.now() - t.startedAt > c ? (m(), null) : {
+		return typeof t.relayOrigin != "string" || typeof t.returnTo != "string" || typeof t.startedAt != "number" || Date.now() - t.startedAt > l ? (h(), null) : {
 			relayOrigin: t.relayOrigin,
 			returnTo: t.returnTo,
 			startedAt: t.startedAt
 		};
 	} catch {
-		return m(), null;
+		return h(), null;
 	}
 }
-function g(e) {
+function _(e) {
 	try {
 		return new URL(e).origin;
 	} catch {
 		return null;
 	}
 }
-function _(e) {
-	let t = u(e);
-	return !t || p(t);
+function v(e) {
+	let t = d(e);
+	return !t || m(t);
 }
-function v(e, t) {
-	let n = g(e), r = u(t), i = h();
+function y(e, t) {
+	let n = _(e), r = d(t), i = g();
 	return !!(n && r && i?.returnTo === r.href);
 }
-function y(e, t) {
+function b(e, t) {
 	if (typeof window > "u") return;
-	let n = g(e), r = u(t);
+	let n = _(e), r = d(t);
 	if (!(!n || !r)) try {
 		let e = {
 			relayOrigin: n,
 			returnTo: r.href,
 			startedAt: Date.now()
 		};
-		sessionStorage.setItem(s, JSON.stringify(e));
+		sessionStorage.setItem(c, JSON.stringify(e));
 	} catch {}
 }
-function b() {
+function x() {
 	if (typeof window > "u") return !1;
 	try {
 		let e = window.Capacitor;
@@ -84,35 +84,35 @@ function b() {
 	} catch {}
 	return !!(typeof navigator < "u" && /Electron/i.test(navigator.userAgent || ""));
 }
-function x(t) {
-	if (b()) return null;
+function S(t) {
+	if (x()) return null;
 	try {
-		let n = u(t);
-		if (!n || p(n)) return null;
-		let r = window.location.origin, o = a();
-		if (o?.origin && i(o.origin)) {
-			let e = new URL(o.origin).origin;
-			if (e && e !== r && !v(e, n.href)) return y(e, n.href), `${e}/auth/sso-relay?returnTo=${encodeURIComponent(n.href)}`;
+		let n = d(t);
+		if (!n || m(n) || r()) return null;
+		let i = window.location.origin, s = o();
+		if (s?.origin && a(s.origin)) {
+			let e = new URL(s.origin).origin;
+			if (e && e !== i && !y(e, n.href)) return b(e, n.href), `${e}/auth/sso-relay?returnTo=${encodeURIComponent(n.href)}`;
 		}
 		try {
-			let t = e(), i = new URL(t.url).origin;
-			if (i && i !== r && !v(i, n.href)) return y(i, n.href), `${i}/auth/sso-relay?returnTo=${encodeURIComponent(n.href)}`;
+			let t = e(), r = new URL(t.url).origin;
+			if (r && r !== i && !y(r, n.href)) return b(r, n.href), `${r}/auth/sso-relay?returnTo=${encodeURIComponent(n.href)}`;
 		} catch {}
 		return null;
 	} catch {
 		return null;
 	}
 }
-function S() {
+function C() {
 	try {
-		if (a()) return !1;
+		if (o()) return !1;
 		let e = sessionStorage.getItem("bf-active-profile");
-		return !e || !localStorage.getItem(`bf-p-${e}-tokens`) || !r() ? !1 : (w(), !0);
+		return !e || !localStorage.getItem(`bf-p-${e}-tokens`) || !i() ? !1 : (T(), !0);
 	} catch {
 		return !1;
 	}
 }
-async function C(e, t) {
+async function w(e, t) {
 	try {
 		let n = await fetch(e, {
 			method: "POST",
@@ -129,7 +129,7 @@ async function C(e, t) {
 		return !1;
 	}
 }
-function w() {
+function T() {
 	try {
 		let e = localStorage.getItem("bf-profiles");
 		if (e) {
@@ -140,11 +140,11 @@ function w() {
 		localStorage.removeItem("bf-profiles"), localStorage.removeItem("auth-storage"), sessionStorage.removeItem("bf-active-profile"), t(), n(), window.dispatchEvent(new Event("bf-auth-state-cleared")), window.dispatchEvent(new Event("bf-profile-storage-change"));
 	} catch {}
 }
-function T() {
-	return /* @__PURE__ */ o("div", {
+function E() {
+	return /* @__PURE__ */ s("div", {
 		className: "flex items-center justify-center min-h-screen",
-		children: /* @__PURE__ */ o("div", { className: "animate-spin rounded-full size-8 border-2 border-action-primary-bg border-t-transparent" })
+		children: /* @__PURE__ */ s("div", { className: "animate-spin rounded-full size-8 border-2 border-action-primary-bg border-t-transparent" })
 	});
 }
 //#endregion
-export { T as SSORedirectSpinner, C as checkRemoteSLO, S as checkSLO, w as clearLocalAuthState, x as getSSORedirectUrl, v as hasRecentSSORedirectAttempt, y as markSSORedirectAttempt, _ as shouldSkipSSORedirect };
+export { E as SSORedirectSpinner, w as checkRemoteSLO, C as checkSLO, T as clearLocalAuthState, S as getSSORedirectUrl, y as hasRecentSSORedirectAttempt, b as markSSORedirectAttempt, v as shouldSkipSSORedirect };

package/dist/shared/config/authBridgeUrls.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authBridgeUrls.d.ts","sourceRoot":"","sources":["../../../src/shared/config/authBridgeUrls.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;CAChB;AAoBD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,IAAI,uBAAuB,CAOjE"}
+{"version":3,"file":"authBridgeUrls.d.ts","sourceRoot":"","sources":["../../../src/shared/config/authBridgeUrls.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;CAChB;AAyCD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,IAAI,uBAAuB,CAcjE"}

package/dist/shared/config/authBridgeUrls.js

@@ -13,9 +13,19 @@ var i = {
 	allowedOrigins: "*",
 	debug: !0
 };
-function s() {
+function s(e) {
+	return e ? e === "localhost" || e === "127.0.0.1" || e === "0.0.0.0" || e === "[::1]" || e === "::1" || e.endsWith(".localhost") : !1;
+}
+function c() {
+	return {
+		url: `${typeof window > "u" ? "" : window.location.origin}/auth/session-bridge`,
+		allowedOrigins: "*",
+		debug: !0
+	};
+}
+function l() {
 	let e = r();
-	return n.has(e) ? i : t.has(e) ? a : o;
+	return n.has(e) ? i : t.has(e) ? a : s(e) ? c() : o;
 }
 //#endregion
-export { s as resolveAuthBridgeConfig };
+export { l as resolveAuthBridgeConfig };

package/dist/shared/providers/shell/authProvider/ssoRelay.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ssoRelay.d.ts","sourceRoot":"","sources":["../../../../../src/shared/providers/shell/authProvider/ssoRelay.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAWvD;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAWxE;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAyBrE"}
+{"version":3,"file":"ssoRelay.d.ts","sourceRoot":"","sources":["../../../../../src/shared/providers/shell/authProvider/ssoRelay.ts"],"names":[],"mappings":"AAYA;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAWvD;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAWxE;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA0BrE"}

package/dist/shared/providers/shell/authProvider/ssoRelay.js

@@ -1,8 +1,8 @@
 import { resolveAuthBridgeConfig as e } from "../../../config/authBridgeUrls.js";
-import { isTrustedSsoOrigin as t, readShellSsoCookie as n } from "../../../utils/authCookie.js";
-import { hasRecentSSORedirectAttempt as r, markSSORedirectAttempt as i, shouldSkipSSORedirect as a } from "../../../components/SSORedirectGuard.js";
+import { isLocalDevSsoHost as t, isTrustedSsoOrigin as n, readShellSsoCookie as r } from "../../../utils/authCookie.js";
+import { hasRecentSSORedirectAttempt as i, markSSORedirectAttempt as a, shouldSkipSSORedirect as o } from "../../../components/SSORedirectGuard.js";
 //#region src/shared/providers/shell/authProvider/ssoRelay.ts
-function o() {
+function s() {
 	if (typeof window > "u") return null;
 	try {
 		let t = e(), n = new URL(t.url).origin;
@@ -13,7 +13,7 @@ function o() {
 		return null;
 	}
 }
-function s(e) {
+function c(e) {
 	if (!e) return !1;
 	try {
 		return !!(localStorage.getItem(`bf-p-${e}-tokens`) && localStorage.getItem(`bf-p-${e}-user`));
@@ -21,18 +21,18 @@ function s(e) {
 		return !1;
 	}
 }
-function c(e) {
+function l(e) {
 	try {
-		if (a()) return null;
-		let o = n();
-		if (!o?.origin || !t(o.origin)) return null;
-		let c = new URL(o.origin).origin, l = new URL(e).origin;
-		if (c === window.location.origin || c === l || s(o.id)) return null;
-		let u = window.location.href;
-		return r(c, u) ? null : (i(c, u), `${c}/auth/sso-relay?returnTo=${encodeURIComponent(u)}`);
+		if (o() || t()) return null;
+		let s = r();
+		if (!s?.origin || !n(s.origin)) return null;
+		let l = new URL(s.origin).origin, u = new URL(e).origin;
+		if (l === window.location.origin || l === u || c(s.id)) return null;
+		let d = window.location.href;
+		return i(l, d) ? null : (a(l, d), `${l}/auth/sso-relay?returnTo=${encodeURIComponent(d)}`);
 	} catch {
 		return null;
 	}
 }
 //#endregion
-export { c as getCookieSsoRelayUrl, o as getCrossOriginLogoutUrl };
+export { l as getCookieSsoRelayUrl, s as getCrossOriginLogoutUrl };

package/dist/shared/utils/authCookie.d.ts

@@ -13,6 +13,7 @@ export interface ShellSsoCookieData {
     origin: string | null;
 }
 export declare function isSharedSsoCookieDomain(): boolean;
+export declare function isLocalDevSsoHost(hostname?: string): boolean;
 export declare function isTrustedSsoOrigin(origin: string | null | undefined): boolean;
 export declare function setShellSsoCookies(profileId: string, origin?: string): void;
 export declare function readShellSsoCookie(): ShellSsoCookieData | null;

package/dist/shared/utils/authCookie.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authCookie.d.ts","sourceRoot":"","sources":["../../../src/shared/utils/authCookie.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AA4DD,wBAAgB,uBAAuB,IAAI,OAAO,CAQjD;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CA4B7E;AAED,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,SAAyB,GAAG,IAAI,CAU3F;AAED,wBAAgB,kBAAkB,IAAI,kBAAkB,GAAG,IAAI,CAS9D;AAED,wBAAgB,oBAAoB,IAAI,IAAI,CAQ3C;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAEpD;AAED;;;GAGG;AACH,wBAAgB,YAAY,IAAI,MAAM,GAAG,IAAI,CAI5C;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,IAAI,CAErC"}
+{"version":3,"file":"authCookie.d.ts","sourceRoot":"","sources":["../../../src/shared/utils/authCookie.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AA4DD,wBAAgB,uBAAuB,IAAI,OAAO,CAQjD;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,SAA2B,GAAG,OAAO,CAU9E;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CA4B7E;AAED,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,SAAyB,GAAG,IAAI,CAU3F;AAED,wBAAgB,kBAAkB,IAAI,kBAAkB,GAAG,IAAI,CAS9D;AAED,wBAAgB,oBAAoB,IAAI,IAAI,CAQ3C;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAEpD;AAED;;;GAGG;AACH,wBAAgB,YAAY,IAAI,MAAM,GAAG,IAAI,CAI5C;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,IAAI,CAErC"}

package/dist/shared/utils/authCookie.js

@@ -37,7 +37,10 @@ function s() {
 	let e = window.location.hostname;
 	return e.endsWith(".local.burdenoff.com") || e === "localhost" || e === "127.0.0.1";
 }
-function c(t) {
+function c(e = window.location.hostname) {
+	return e === "localhost" || e === "127.0.0.1" || e === "0.0.0.0" || e === "[::1]" || e === "::1" || e.endsWith(".localhost") || e.endsWith(".local.burdenoff.com");
+}
+function l(t) {
 	if (!t) return !1;
 	try {
 		let n = new URL(t);
@@ -49,13 +52,13 @@ function c(t) {
 		return !1;
 	}
 }
-function l(e, n = window.location.origin) {
+function u(e, n = window.location.origin) {
 	if (typeof document > "u") return;
-	d();
+	f();
 	let i = a(), o = i ? `; domain=${i}` : "", s = window.location.protocol === "https:" ? "; secure" : "", c = r(e, n);
 	for (let e of t) document.cookie = `${e}=${c}${o}; path=/; samesite=lax${s}; max-age=86400`;
 }
-function u() {
+function d() {
 	if (typeof document > "u") return null;
 	for (let e of t) {
 		let t = document.cookie.match(RegExp(`(?:^|;\\s*)${e}=([^;]*)`));
@@ -65,22 +68,22 @@ function u() {
 	}
 	return null;
 }
-function d() {
+function f() {
 	if (!(typeof document > "u")) for (let e of t) {
 		document.cookie = `${e}=; path=/; max-age=0`;
 		for (let t of o()) document.cookie = `${e}=; path=/; domain=${t}; max-age=0`;
 	}
 }
-function f(e) {
-	l(e);
+function p(e) {
+	u(e);
 }
-function p() {
+function m() {
 	if (typeof document > "u") return null;
 	let e = document.cookie.match(RegExp(`(?:^|;\\s*)${n}=([^;]*)`));
 	return e ? i(e[1])?.id ?? null : null;
 }
-function m() {
-	d();
+function h() {
+	f();
 }
 //#endregion
-export { m as clearSSoCookie, d as clearShellSsoCookies, p as getSSoCookie, s as isSharedSsoCookieDomain, c as isTrustedSsoOrigin, u as readShellSsoCookie, f as setSSoCookie, l as setShellSsoCookies };
+export { h as clearSSoCookie, f as clearShellSsoCookies, m as getSSoCookie, c as isLocalDevSsoHost, s as isSharedSsoCookieDomain, l as isTrustedSsoOrigin, d as readShellSsoCookie, p as setSSoCookie, u as setShellSsoCookies };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/fe-libs",
-  "version": "2026.601.4",
+  "version": "2026.601.5",
   "description": "Burdenoff frontend primitives and domain libraries",
   "type": "module",
   "imports": {