@burdenoff/fe-libs 2026.627.2 → 2026.627.3

package/dist/shared/providers/shell/MultiGatewayProvider.js

@@ -6,28 +6,28 @@ import { useCallback as i, useEffect as a, useMemo as o, useRef as s } from "rea
 import { jsx as c } from "react/jsx-runtime";
 import { ApolloProvider as l } from "@apollo/client/react";
 //#region src/shared/providers/shell/MultiGatewayProvider.tsx
-function u({ children: u, workspaceBaseUrl: d, globalBaseUrl: f, organizationId: p, defaultGateway: m = "workspace", debug: h = !1, enableSubscriptions: g = !1, onAuthError: _, onNetworkError: v, onRefreshToken: y }) {
-	let { getAccessToken: b, getWorkspaceToken: x, accessToken: S, workspaceToken: C } = r(), w = s({
+function u({ children: u, workspaceBaseUrl: d, globalBaseUrl: f, organizationId: p, productSlug: m, defaultGateway: h = "workspace", debug: g = !1, enableSubscriptions: _ = !1, onAuthError: v, onNetworkError: y, onRefreshToken: b }) {
+	let { getAccessToken: x, getWorkspaceToken: S, accessToken: C, workspaceToken: w } = r(), T = s({
 		workspaceClient: null,
 		globalClient: null
-	}), T = s(null), E = i(() => {
-		T.current ||= setTimeout(() => {
-			T.current = null;
-			let e = w.current, t = [];
+	}), E = s(null), D = i(() => {
+		E.current ||= setTimeout(() => {
+			E.current = null;
+			let e = T.current, t = [];
 			e.workspaceClient && t.push(e.workspaceClient.refetchQueries({ include: "active" })), e.globalClient && t.push(e.globalClient.refetchQueries({ include: "active" })), t.length !== 0 && Promise.allSettled(t).then((e) => {
-				if (!h) return;
+				if (!g) return;
 				let t = e.filter((e) => e.status === "rejected");
 				t.length > 0 && console.warn("[MultiGatewayProvider] Active query refresh failed after mutation", t);
 			});
 		}, 0);
-	}, [h]), D = i(() => {
+	}, [g]), O = i(() => {
 		let e = sessionStorage.getItem("bf-active-profile");
 		if (e) {
 			let t = localStorage.getItem(`bf-p-${e}-locale`);
 			if (t) return t;
 		}
 		return localStorage.getItem("burdenoff-locale") || "en";
-	}, []), O = i(() => {
+	}, []), k = i(() => {
 		let e = sessionStorage.getItem("bf-active-profile");
 		if (e) {
 			let t = localStorage.getItem(`bf-p-${e}-geography`);
@@ -40,110 +40,114 @@ function u({ children: u, workspaceBaseUrl: d, globalBaseUrl: f, organizationId:
 			return JSON.parse(t);
 		} catch {}
 		return null;
-	}, []), k = i(() => e("workspace"), []), A = i(() => e("project"), []), j = o(() => t({
+	}, []), A = i(() => e("workspace"), []), j = i(() => e("project"), []), M = o(() => t({
 		gateway: "workspace",
 		baseUrl: d,
-		authToken: b,
-		workspaceToken: x,
-		workspaceId: k,
-		projectId: A,
+		authToken: x,
+		workspaceToken: S,
+		workspaceId: A,
+		projectId: j,
 		organizationId: p,
-		locale: D,
-		geography: O,
-		enableSubscriptions: g,
-		debug: h,
-		onAuthError: _,
-		onRefreshToken: y,
-		onNetworkError: v,
-		onMutationSuccess: E
+		productSlug: m,
+		locale: O,
+		geography: k,
+		enableSubscriptions: _,
+		debug: g,
+		onAuthError: v,
+		onRefreshToken: b,
+		onNetworkError: y,
+		onMutationSuccess: D
 	}), [
 		d,
-		b,
 		x,
-		k,
+		S,
 		A,
+		j,
 		p,
-		D,
+		m,
 		O,
-		g,
-		h,
+		k,
 		_,
-		y,
+		g,
 		v,
-		E
-	]), M = o(() => t({
+		b,
+		y,
+		D
+	]), N = o(() => t({
 		gateway: "global",
 		baseUrl: f,
-		authToken: b,
+		authToken: x,
 		organizationId: p,
-		locale: D,
-		geography: O,
-		debug: h,
-		onAuthError: _,
-		onRefreshToken: y,
-		onNetworkError: v,
-		onMutationSuccess: E
+		productSlug: m,
+		locale: O,
+		geography: k,
+		debug: g,
+		onAuthError: v,
+		onRefreshToken: b,
+		onNetworkError: y,
+		onMutationSuccess: D
 	}), [
 		f,
-		b,
+		x,
 		p,
-		D,
+		m,
 		O,
-		h,
-		_,
-		y,
+		k,
+		g,
 		v,
-		E
+		b,
+		y,
+		D
 	]);
 	a(() => {
-		w.current = {
-			workspaceClient: j,
-			globalClient: M
+		T.current = {
+			workspaceClient: M,
+			globalClient: N
 		};
-	}, [j, M]), a(() => {
-		let e = T;
+	}, [M, N]), a(() => {
+		let e = E;
 		return () => {
 			e.current &&= (clearTimeout(e.current), null);
 		};
 	}, []);
-	let N = i((e) => e === "workspace" ? w.current.workspaceClient ?? j : w.current.globalClient ?? M, [j, M]);
+	let P = i((e) => e === "workspace" ? T.current.workspaceClient ?? M : T.current.globalClient ?? N, [M, N]);
 	return a(() => {
-		h && console.log("[MultiGatewayProvider] Tokens updated:", {
-			hasAccessToken: !!S,
-			hasWorkspaceToken: !!C
+		g && console.log("[MultiGatewayProvider] Tokens updated:", {
+			hasAccessToken: !!C,
+			hasWorkspaceToken: !!w
 		});
 	}, [
-		S,
 		C,
-		h
+		w,
+		g
 	]), a(() => {
 		if (typeof window > "u") return;
 		let e = async (e) => {
-			h && console.log("[MultiGatewayProvider] Context changed; evicting cache + refetching", e);
-			try {
-				j.cache.evict({ id: "ROOT_QUERY" }), j.cache.gc();
-			} catch {}
+			g && console.log("[MultiGatewayProvider] Context changed; evicting cache + refetching", e);
 			try {
 				M.cache.evict({ id: "ROOT_QUERY" }), M.cache.gc();
 			} catch {}
 			try {
-				await j.refetchQueries({ include: "active" });
+				N.cache.evict({ id: "ROOT_QUERY" }), N.cache.gc();
 			} catch {}
 			try {
 				await M.refetchQueries({ include: "active" });
 			} catch {}
+			try {
+				await N.refetchQueries({ include: "active" });
+			} catch {}
 		};
 		return window.addEventListener("burdenoff:workspace-changed", e), window.addEventListener("burdenoff:organization-changed", e), window.addEventListener("burdenoff:project-changed", e), () => {
 			window.removeEventListener("burdenoff:workspace-changed", e), window.removeEventListener("burdenoff:organization-changed", e), window.removeEventListener("burdenoff:project-changed", e);
 		};
 	}, [
-		j,
 		M,
-		h
+		N,
+		g
 	]), a(() => {
-		let e = j, t = M;
+		let e = M, t = N;
 		return () => {
-			if (h && console.log("[MultiGatewayProvider] Cleaning up Apollo clients"), !(typeof window < "u" && (window.location.hostname === "localhost" || window.location.hostname === "127.0.0.1" || window.location.hostname.endsWith(".local.burdenoff.com")))) {
+			if (g && console.log("[MultiGatewayProvider] Cleaning up Apollo clients"), !(typeof window < "u" && (window.location.hostname === "localhost" || window.location.hostname === "127.0.0.1" || window.location.hostname.endsWith(".local.burdenoff.com")))) {
 				try {
 					e.stop();
 				} catch {}
@@ -153,21 +157,21 @@ function u({ children: u, workspaceBaseUrl: d, globalBaseUrl: f, organizationId:
 			}
 		};
 	}, [
-		j,
 		M,
-		h
+		N,
+		g
 	]), /* @__PURE__ */ c(n, {
 		value: o(() => ({
-			workspaceClient: j,
-			globalClient: M,
-			getClient: N
+			workspaceClient: M,
+			globalClient: N,
+			getClient: P
 		}), [
-			j,
 			M,
-			N
+			N,
+			P
 		]),
 		children: /* @__PURE__ */ c(l, {
-			client: m === "workspace" ? j : M,
+			client: h === "workspace" ? M : N,
 			children: u
 		})
 	});

package/dist/shared/utils/gatewayFetchRewrite.d.ts

@@ -27,6 +27,7 @@ export interface GatewayBaseMapping {
     /** Gateway bases for this hostname */
     bases: GatewayBases;
 }
+export declare function clearGatewayGraphQLResponseCache(): void;
 /**
  * Resolve gateway base URLs from the current hostname.
  *
@@ -35,22 +36,17 @@ export interface GatewayBaseMapping {
  */
 export declare function resolveGatewayBases(extraMappings?: GatewayBaseMapping[], localDefaults?: GatewayBases): GatewayBases;
 /**
- * Attach Cloudflare Access service-token headers to a request iff a token is
- * provided AND the request targets one of the CF-protected gateway origins.
- * Pure + exported so it can be unit-tested without mocking `import.meta.env`.
+ * @deprecated Browser service-token headers are intentionally unsupported.
+ * Cloudflare Access client secrets must never be attached from app code.
  */
-export declare function maybeAttachCfAccessHeaders(request: Request, gatewayOrigins: ReadonlySet<string>, clientId?: string, clientSecret?: string): Request;
+export declare function maybeAttachCfAccessHeaders(request: Request, _gatewayOrigins: ReadonlySet<string>, _clientId?: string, _clientSecret?: string): Request;
 /**
  * Options for installGatewayFetchRewrite.
  */
 export interface GatewayFetchRewriteOptions {
     /**
-     * Cloudflare Access service-token. Vite only statically inlines custom VITE_
-     * env vars in APP source, not inside this bundled library, so the app reads
-     * `import.meta.env.VITE_CF_ACCESS_CLIENT_ID/_SECRET` in its own source and
-     * forwards them here. When both are present, CF-Access-Client-Id/Secret headers
-     * are attached to requests targeting a configured gateway origin. Omit on
-     * prod/local (gateways are not CF-gated).
+     * @deprecated Browser Cloudflare Access service-token forwarding is disabled.
+     * Client secrets must stay out of browser request headers.
      */
     cfAccess?: {
         clientId?: string;
@@ -65,9 +61,9 @@ export interface GatewayFetchRewriteOptions {
  * - `/workspaces/graphql` → workspaceBase
  *
  * @param bases - Gateway base URLs to rewrite to
- * @param options - Optional CF Access service-token for header injection
+ * @param options - Deprecated options retained for source compatibility; ignored
  */
-export declare function installGatewayFetchRewrite(bases: GatewayBases, options?: GatewayFetchRewriteOptions): void;
+export declare function installGatewayFetchRewrite(bases: GatewayBases, _options?: GatewayFetchRewriteOptions): void;
 /**
  * Suppress verbose console output in production/non-debug environments.
  *

package/dist/shared/utils/gatewayFetchRewrite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gatewayFetchRewrite.d.ts","sourceRoot":"","sources":["../../../src/shared/utils/gatewayFetchRewrite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,KAAK,EAAE,YAAY,CAAC;CACrB;AAmID;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,aAAa,CAAC,EAAE,kBAAkB,EAAE,EACpC,aAAa,CAAC,EAAE,YAAY,GAC3B,YAAY,CAad;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,OAAO,EAChB,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,EACnC,QAAQ,CAAC,EAAE,MAAM,EACjB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAaT;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACzD;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,YAAY,EACnB,OAAO,CAAC,EAAE,0BAA0B,GACnC,IAAI,CA6IN;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,SAAyB,GAAG,IAAI,CAQtE"}
+{"version":3,"file":"gatewayFetchRewrite.d.ts","sourceRoot":"","sources":["../../../src/shared/utils/gatewayFetchRewrite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,KAAK,EAAE,YAAY,CAAC;CACrB;AAmED,wBAAgB,gCAAgC,IAAI,IAAI,CAEvD;AAkED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,aAAa,CAAC,EAAE,kBAAkB,EAAE,EACpC,aAAa,CAAC,EAAE,YAAY,GAC3B,YAAY,CAad;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,OAAO,EAChB,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,EACpC,SAAS,CAAC,EAAE,MAAM,EAClB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAET;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;OAGG;IACH,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACzD;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,YAAY,EACnB,QAAQ,CAAC,EAAE,0BAA0B,GACpC,IAAI,CAqHN;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,SAAyB,GAAG,IAAI,CAQtE"}

package/dist/shared/utils/gatewayFetchRewrite.js

@@ -36,25 +36,28 @@ function l() {
 	let e = globalThis;
 	return e.__boffGraphQLResponseCache ||= /* @__PURE__ */ new Map(), e.__boffGraphQLResponseCache;
 }
-function u(e) {
-	return typeof e.query == "string" ? /\bquery\b/.test(e.query) && !/\bmutation\b|\bsubscription\b/.test(e.query) : !1;
+function u() {
+	l().clear();
 }
 function d(e) {
-	return typeof e.operationName == "string" && e.operationName ? e.operationName : typeof e.query == "string" ? e.query.match(/(?:query|mutation|subscription)\s+([A-Za-z0-9_]+)/)?.[1] ?? null : null;
+	return typeof e.query == "string" ? /\bquery\b/.test(e.query) && !/\bmutation\b|\bsubscription\b/.test(e.query) : !1;
 }
 function f(e) {
+	return typeof e.operationName == "string" && e.operationName ? e.operationName : typeof e.query == "string" ? e.query.match(/(?:query|mutation|subscription)\s+([A-Za-z0-9_]+)/)?.[1] ?? null : null;
+}
+function p(e) {
 	return Object.fromEntries(c.map((t) => [t, e.get(t) ?? ""]));
 }
-function p(e, t) {
-	let n = d(t);
-	return !n || !u(t) ? null : JSON.stringify({
+function m(e, t) {
+	let n = f(t);
+	return !n || !d(t) ? null : JSON.stringify({
 		url: e.url,
-		headers: f(e.headers),
+		headers: p(e.headers),
 		operationName: n,
 		variables: t.variables ?? null
 	});
 }
-function m(e) {
+function h(e) {
 	try {
 		let t = JSON.parse(e);
 		return Array.isArray(t) ? t : t && typeof t == "object" ? [t] : null;
@@ -62,58 +65,42 @@ function m(e) {
 		return null;
 	}
 }
-function h(e, t) {
+function g(e, t) {
 	return new Response(JSON.stringify(t ? e : e[0]), {
 		status: 200,
 		headers: { "content-type": "application/json" }
 	});
 }
-function g() {
+function _() {
 	return typeof performance < "u" && performance.now() < o;
 }
-function _(e) {
+function v(e) {
 	let t = new Headers(e.headers), n = !1;
 	for (let e of s) t.has(e) && (t.delete(e), n = !0);
 	return n ? new Request(e, { headers: t }) : e;
 }
-function v(e, t) {
+function y(e, t) {
 	let n = window.location.hostname.toLowerCase(), a = [...r, ...e ?? []];
 	for (let e of a) if (n === e.hostname) return e.bases;
 	return t ?? i;
 }
-function y(e, t, n, r) {
-	if (!n || !r) return e;
-	let i;
-	try {
-		i = new URL(e.url).origin;
-	} catch {
-		return e;
-	}
-	if (!t.has(i)) return e;
-	let a = new Headers(e.headers);
-	return a.set("CF-Access-Client-Id", n), a.set("CF-Access-Client-Secret", r), new Request(e, { headers: a });
-}
 function b(e, t) {
 	let { globalBase: n, workspaceBase: r } = e;
 	if (!n || !r) return;
-	let i = globalThis.fetch.bind(globalThis), o = window.location.origin, s = t?.cfAccess?.clientId, c = t?.cfAccess?.clientSecret, u = !!(s && c), d = /* @__PURE__ */ new Set();
-	if (u) for (let e of [n, r]) try {
-		d.add(new URL(e).origin);
-	} catch {}
-	let f = (e) => u ? y(e, d, s, c) : e, v = new Set([o, "https://gw-global.local.burdenoff.com"]), b = new Set([o, "https://gw-wspace.local.burdenoff.com"]), x = (e) => /(?:^|\/)global\/graphql$/.test(e) ? "/global/graphql" : /(?:^|\/)workspaces\/graphql$/.test(e) ? "/workspaces/graphql" : "", S = (e) => {
-		let t = new URL(e, window.location.origin), i = x(t.pathname);
-		return i === "/global/graphql" && v.has(t.origin) ? `${n}${i}${t.search}${t.hash}` : i === "/workspaces/graphql" && b.has(t.origin) ? `${r}${i}${t.search}${t.hash}` : e;
-	}, C = async (e) => {
+	let i = globalThis.fetch.bind(globalThis), o = window.location.origin, s = new Set([o, "https://gw-global.local.burdenoff.com"]), c = new Set([o, "https://gw-wspace.local.burdenoff.com"]), u = (e) => /(?:^|\/)global\/graphql$/.test(e) ? "/global/graphql" : /(?:^|\/)workspaces\/graphql$/.test(e) ? "/workspaces/graphql" : "", d = (e) => {
+		let t = new URL(e, window.location.origin), i = u(t.pathname);
+		return i === "/global/graphql" && s.has(t.origin) ? `${n}${i}${t.search}${t.hash}` : i === "/workspaces/graphql" && c.has(t.origin) ? `${r}${i}${t.search}${t.hash}` : e;
+	}, f = async (e) => {
 		if (!(e.method.toUpperCase() === "POST" && /(?:^|\/)graphql$/.test(new URL(e.url).pathname))) return i(e);
-		let t = await e.clone().text(), n = _(e.clone()), r = m(t);
+		let t = await e.clone().text(), n = v(e.clone()), r = h(t);
 		if (!r?.length) return i(e);
-		let o = t.trimStart().startsWith("["), s = r.map((e) => p(n, e));
-		if (g() && s.every(Boolean)) {
+		let o = t.trimStart().startsWith("["), s = r.map((e) => m(n, e));
+		if (_() && s.every(Boolean)) {
 			let e = l(), t = s.map((t) => e.get(t)), n = Date.now();
-			if (t.every((e) => e && e.expiresAt > n)) return h(t.map((e) => e.value), o);
+			if (t.every((e) => e && e.expiresAt > n)) return g(t.map((e) => e.value), o);
 		}
 		let c = await i(e);
-		if (!c.ok || !s.some(Boolean) || !g()) return c;
+		if (!c.ok || !s.some(Boolean) || !_()) return c;
 		try {
 			let e = await c.clone().json(), t = Array.isArray(e) ? e : [e], n = l();
 			t.forEach((e, t) => {
@@ -125,16 +112,16 @@ function b(e, t) {
 			});
 		} catch {}
 		return c;
-	}, w = i, T = ((e, t) => {
+	}, p = i, y = ((e, t) => {
 		if (e == null) return i(e, t);
 		if (e instanceof Request) {
-			let n = S(e.url), r = new Request(n, e);
-			return C(f(t ? new Request(r, t) : r));
+			let n = d(e.url), r = new Request(n, e);
+			return f(t ? new Request(r, t) : r);
 		}
 		let n = typeof e == "string" ? e : e.toString();
-		return C(f(new Request(S(n), t)));
+		return f(new Request(d(n), t));
 	});
-	w.preconnect && (T.preconnect = w.preconnect), globalThis.fetch = T;
+	p.preconnect && (y.preconnect = p.preconnect), globalThis.fetch = y;
 }
 function x(e = "VITE_VERBOSE_CONSOLE") {
 	({
@@ -146,4 +133,4 @@ function x(e = "VITE_VERBOSE_CONSOLE") {
 	})?.[e] !== "true" && (console.log = () => {}, console.info = () => {}, console.debug = () => {});
 }
 //#endregion
-export { b as installGatewayFetchRewrite, v as resolveGatewayBases, x as suppressConsole };
+export { u as clearGatewayGraphQLResponseCache, b as installGatewayFetchRewrite, y as resolveGatewayBases, x as suppressConsole };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/fe-libs",
-  "version": "2026.627.2",
+  "version": "2026.627.3",
   "description": "Burdenoff frontend primitives and domain libraries",
   "type": "module",
   "imports": {