@burdenoff/fe-libs 2026.627.2 → 2026.628.1

package/dist/shared/graphql/fetch.js

@@ -1,36 +1,37 @@
 import { createBrowserTraceContext as e } from "../events/metadata.js";
 import { resolveGatewayUrls as t } from "../config/gatewayUrls.js";
-import { GATEWAYS as n } from "../../shared-config.js";
-import { getActiveWorkspaceToken as r, resolveActiveProfileId as i, setProfileWorkspaceToken as a } from "../providers/shell/ProfileStorageManager.js";
-import { readActiveContextValueWithUrlPrecedence as o } from "../providers/shell/ActiveContextStorage.js";
-import { getValidAccessTokenFromStorage as s, sanitizeExtraHeaders as c, sanitizeGeography as l, validateGatewayBaseUrl as u } from "./security.js";
-import { isWorkspaceTokenValidForContext as d } from "./workspaceToken.js";
-import { dispatchBackendErrorEvent as f, markConnectionHealthy as p } from "../utils/backendErrors.js";
+import { clearGatewayGraphQLResponseCache as n } from "../utils/gatewayFetchRewrite.js";
+import { GATEWAYS as r } from "../../shared-config.js";
+import { getActiveWorkspaceToken as i, resolveActiveProfileId as a, setProfileWorkspaceToken as o } from "../providers/shell/ProfileStorageManager.js";
+import { readActiveContextValueWithUrlPrecedence as s } from "../providers/shell/ActiveContextStorage.js";
+import { getValidAccessTokenFromStorage as c, sanitizeExtraHeaders as l, sanitizeGeography as u, validateGatewayBaseUrl as d } from "./security.js";
+import { isWorkspaceTokenValidForContext as f } from "./workspaceToken.js";
+import { dispatchBackendErrorEvent as p, markConnectionHealthy as m } from "../utils/backendErrors.js";
 //#region src/shared/graphql/fetch.ts
-var m = "\n  mutation IssueWorkspaceToken($input: IssueWorkspaceTokenInput!) {\n    issueWorkspaceToken(input: $input) {\n      success\n      token\n      workspaceId\n      error {\n        message\n      }\n    }\n  }\n", h = /* @__PURE__ */ new Map();
-function g() {
+var h = "\n  mutation IssueWorkspaceToken($input: IssueWorkspaceTokenInput!) {\n    issueWorkspaceToken(input: $input) {\n      success\n      token\n      workspaceId\n      error {\n        message\n      }\n    }\n  }\n", g = /* @__PURE__ */ new Map();
+function _() {
 	try {
 		let e = sessionStorage.getItem("bf-active-profile");
-		return e ? s(localStorage.getItem(`bf-p-${e}-tokens`)) : null;
+		return e ? c(localStorage.getItem(`bf-p-${e}-tokens`)) : null;
 	} catch {
 		return null;
 	}
 }
-function _() {
+function v() {
 	try {
-		return r();
+		return i();
 	} catch {
 		return null;
 	}
 }
-function v() {
+function y() {
 	try {
 		return sessionStorage.getItem("bf-active-profile");
 	} catch {
 		return null;
 	}
 }
-function y(e) {
+function b(e) {
 	try {
 		let [, t] = e.split(".");
 		if (!t || typeof globalThis.atob != "function") return null;
@@ -40,24 +41,24 @@ function y(e) {
 		return null;
 	}
 }
-function b(e) {
-	let t = y(e)?.exp;
+function x(e) {
+	let t = b(e)?.exp;
 	return typeof t == "number" ? t * 1e3 <= Date.now() + 3e4 : !1;
 }
-function x() {
+function S() {
 	try {
 		let e = sessionStorage.getItem("bf-active-profile");
 		if (e) {
 			let t = localStorage.getItem(`bf-p-${e}-geography`);
-			if (t) return l(JSON.parse(t));
+			if (t) return u(JSON.parse(t));
 		}
 		let t = localStorage.getItem("burdenoff-geography");
-		return t ? l(JSON.parse(t)) : null;
+		return t ? u(JSON.parse(t)) : null;
 	} catch {
 		return null;
 	}
 }
-function S() {
+function C() {
 	try {
 		let e = sessionStorage.getItem("bf-active-profile");
 		if (e) {
@@ -69,63 +70,64 @@ function S() {
 		return "en";
 	}
 }
-function C() {
-	return o("workspace");
-}
 function w() {
-	return o("organization");
+	return s("workspace");
 }
 function T() {
-	return o("tenant");
+	return s("organization");
 }
 function E() {
-	return o("project");
+	return s("tenant");
 }
 function D() {
+	return s("project");
+}
+function O() {
 	try {
 		return typeof window > "u" ? null : new URLSearchParams(window.location.search).get("org");
 	} catch {
 		return null;
 	}
 }
-function O(e) {
+function k(e) {
 	return {
-		workspaceId: typeof e.workspaceId == "string" ? e.workspaceId : C() || void 0,
-		organizationId: typeof e.organizationId == "string" ? e.organizationId : w() || D() || void 0,
-		tenantId: typeof e.tenantId == "string" ? e.tenantId : T() || void 0,
-		projectId: typeof e.projectId == "string" ? e.projectId : E() || void 0
+		workspaceId: typeof e.workspaceId == "string" ? e.workspaceId : w() || void 0,
+		organizationId: typeof e.organizationId == "string" ? e.organizationId : T() || O() || void 0,
+		tenantId: typeof e.tenantId == "string" ? e.tenantId : E() || void 0,
+		projectId: typeof e.projectId == "string" ? e.projectId : D() || void 0
 	};
 }
-function k(e, t, n) {
+function A(e, t, n) {
 	try {
-		let r = i() ?? v();
+		let r = a() ?? y();
 		if (!r) return;
-		a(r, t), sessionStorage.setItem("burdenoff-active-context-workspace", e), n && sessionStorage.setItem("burdenoff-active-context-organization", n);
+		o(r, t), sessionStorage.setItem("burdenoff-active-context-workspace", e), n && sessionStorage.setItem("burdenoff-active-context-organization", n);
 	} catch {}
 }
-async function A(e) {
+async function j(e) {
 	let { url: t, authToken: n, workspaceId: r, organizationId: i, projectId: a, locale: o, signal: s, currentQuery: c } = e;
 	if (!n || c.includes("issueWorkspaceToken")) return null;
-	let l = r || C();
+	let l = r || w();
 	if (!l) return null;
-	let u = _(), f = C(), p = i || w() || D();
-	if (u && f === l && d(u, {
+	let u = v(), d = w(), p = i || T() || O();
+	if (u && d === l && f(u, {
 		workspaceId: l,
 		organizationId: p,
 		projectId: a
 	})) return u;
 	if (!p) return null;
-	let g = `${p}:${l}:${a ?? ""}`, v = h.get(g);
-	if (v) return v;
+	let m = `${p}:${l}:${a ?? ""}`, _ = g.get(m);
+	if (_) return _;
 	let y = fetch(t, {
 		method: "POST",
 		headers: {
 			"Content-Type": "application/json",
+			[W]: "true",
 			Authorization: `Bearer ${n}`,
 			...o ? { "Accept-Language": o } : {}
 		},
 		body: JSON.stringify({
-			query: m,
+			query: h,
 			variables: { input: {
 				organizationId: p,
 				workspaceId: l,
@@ -135,58 +137,58 @@ async function A(e) {
 		signal: s
 	}).then(async (e) => {
 		let t = (await e.json()).data?.issueWorkspaceToken;
-		return t?.success && t.token ? (k(t.workspaceId || l, t.token, p), t.token) : null;
+		return t?.success && t.token ? (A(t.workspaceId || l, t.token, p), t.token) : null;
 	}).catch(() => null).finally(() => {
-		h.delete(g);
+		g.delete(m);
 	});
-	return h.set(g, y), y;
+	return g.set(m, y), y;
 }
-function j(e, r) {
-	let i = n[e], a = t(), o = e === "global" ? a.globalBaseUrl : a.workspaceBaseUrl, s = r || o;
+function M(e, n) {
+	let i = r[e], a = t(), o = e === "global" ? a.globalBaseUrl : a.workspaceBaseUrl, s = n || o;
 	return `${s.endsWith("/") ? s.slice(0, -1) : s}${i.graphql}`;
 }
-function M() {
+function N() {
 	return globalThis;
 }
-function N() {
-	let e = M();
+function P() {
+	let e = N();
 	return e.__graphqlFetchQueues ||= /* @__PURE__ */ new Map(), e.__graphqlFetchQueues;
 }
-function P() {
-	let e = M();
+function F() {
+	let e = N();
 	return e.__graphqlFetchResponseCache ||= /* @__PURE__ */ new Map(), e.__graphqlFetchResponseCache;
 }
-function F() {
-	let e = M();
+function I() {
+	let e = N();
 	return e.__graphqlFetchPendingResponses ||= /* @__PURE__ */ new Map(), e.__graphqlFetchPendingResponses;
 }
-function I() {
-	P().clear(), F().clear();
+function L() {
+	F().clear(), I().clear(), n();
 }
-var L = 10, R = 600, z = 100, B = 1e4, V = 15e3, H = new Set([
+var R = 10, z = 600, B = 100, V = 1e4, H = 15e3, U = new Set([
 	"traceparent",
 	"tracestate",
 	"baggage"
-]);
-function U() {
-	if (typeof performance > "u") return z;
-	let e = M();
-	return e.__graphqlFetchBurstStartedAt ??= performance.now(), performance.now() - e.__graphqlFetchBurstStartedAt < B ? R : z;
+]), W = "Apollo-Require-Preflight";
+function G() {
+	if (typeof performance > "u") return B;
+	let e = N();
+	return e.__graphqlFetchBurstStartedAt ??= performance.now(), performance.now() - e.__graphqlFetchBurstStartedAt < V ? z : B;
 }
-function W(e) {
+function K(e) {
 	return typeof e.query == "string" ? /^\s*query\b/.test(e.query) : !1;
 }
-function G(e) {
+function ee(e) {
 	return typeof e.operationName == "string" && e.operationName.length > 0 ? {
 		operationName: e.operationName,
 		variables: e.variables ?? null
 	} : e;
 }
-function K(e) {
+function te(e) {
 	let t = /* @__PURE__ */ new Map();
 	for (let [n, r] of Object.entries(e)) {
 		let e = n.toLowerCase();
-		H.has(e) || t.set(e, r);
+		U.has(e) || t.set(e, r);
 	}
 	return Object.fromEntries(Array.from(t.entries()).sort(([e], [t]) => e.localeCompare(t)));
 }
@@ -194,17 +196,18 @@ function q(t) {
 	let n = e();
 	return {
 		...t,
+		[W]: "true",
 		traceparent: n.traceparent
 	};
 }
 function J(e) {
-	return ee(e) && Array.isArray(e.errors);
+	return ne(e) && Array.isArray(e.errors);
 }
 function Y(e) {
 	let t = e.status;
 	return t === 401 ? "Invalid email or password." : t === 403 ? "You do not have permission to do that." : t === 404 ? "We could not find what you were looking for." : t === 408 || t === 504 ? "The server took too long to respond. Please try again." : t === 429 ? "Too many requests. Please wait a moment and try again." : t >= 500 && t < 600 ? "The server is having trouble right now. Please try again in a moment." : t >= 400 && t < 500 ? "The request could not be processed. Please refresh and try again." : "We could not reach the server. Please check your connection and try again.";
 }
-function ee(e) {
+function ne(e) {
 	return typeof e == "object" && !!e && !Array.isArray(e);
 }
 async function X(e) {
@@ -228,9 +231,9 @@ async function Z(e, t, n) {
 				signal: r.signal
 			}), i = await X(n);
 			if (!n.ok && !J(i)) throw Error(Y(n));
-			r.cacheKey && P().set(r.cacheKey, {
+			r.cacheKey && F().set(r.cacheKey, {
 				value: i,
-				expiresAt: Date.now() + V
+				expiresAt: Date.now() + H
 			}), r.resolve(i);
 		} catch (e) {
 			r.reject(e);
@@ -248,9 +251,9 @@ async function Z(e, t, n) {
 		if (!i.ok && !J(a)) throw Error(Y(i));
 		if (Array.isArray(a)) a.forEach((e, t) => {
 			let r = n[t];
-			r && (r.cacheKey && P().set(r.cacheKey, {
+			r && (r.cacheKey && F().set(r.cacheKey, {
 				value: e,
-				expiresAt: Date.now() + V
+				expiresAt: Date.now() + H
 			}), r.resolve(e));
 		});
 		else {
@@ -262,14 +265,14 @@ async function Z(e, t, n) {
 	}
 }
 function Q(e, t, n, r, i) {
-	let a = K(t), o = Math.max(1, i?.batchMax ?? L), s = Math.max(0, i?.batchInterval ?? U()), c = `${e}|${JSON.stringify(a)}`, l = W(n) ? `${c}|${JSON.stringify(G(n))}` : void 0;
+	let a = te(t), o = Math.max(1, i?.batchMax ?? R), s = Math.max(0, i?.batchInterval ?? G()), c = `${e}|${JSON.stringify(a)}`, l = K(n) ? `${c}|${JSON.stringify(ee(n))}` : void 0;
 	if (l) {
-		let e = P(), t = e.get(l);
+		let e = F(), t = e.get(l);
 		if (t) {
 			if (t.expiresAt > Date.now()) return Promise.resolve(t.value);
 			e.delete(l);
 		}
-		let n = F().get(l);
+		let n = I().get(l);
 		if (n) return n;
 	}
 	let u = new Promise((t, i) => {
@@ -283,7 +286,7 @@ function Q(e, t, n, r, i) {
 			}]);
 			return;
 		}
-		let u = N(), d = u.get(c);
+		let u = P(), d = u.get(c);
 		if (d || (d = {
 			requests: [],
 			timer: null,
@@ -301,32 +304,35 @@ function Q(e, t, n, r, i) {
 		}
 		d.timer ||= setTimeout(() => $(e, a, c), d.batchInterval);
 	});
-	return l && (F().set(l, u), u.finally(() => {
-		F().delete(l);
+	return l && (I().set(l, u), u.finally(() => {
+		I().delete(l);
 	}).catch(() => {})), u;
 }
 function $(e, t, n) {
-	let r = N(), i = r.get(n);
+	let r = P(), i = r.get(n);
 	i && (r.delete(n), i.timer &&= (clearTimeout(i.timer), null), Z(e, t, i.requests));
 }
-async function te(e) {
-	let { gateway: t, query: n, variables: r, operationName: i, authToken: a, workspaceToken: o, workspaceId: s, organizationId: l, tenantId: m, projectId: h, locale: v, baseUrl: y, extraHeaders: C, signal: w, suppressGlobalErrorEvent: E } = e, D = u(j(t, y)), k = a && !b(a) ? a : g(), M = v ?? S(), N = O({
+async function re(e) {
+	let { gateway: t, query: n, variables: r, operationName: i, authToken: a, workspaceToken: o, workspaceId: s, organizationId: c, tenantId: u, projectId: h, locale: g, baseUrl: y, extraHeaders: b, signal: w, suppressGlobalErrorEvent: T } = e, D = d(M(t, y)), O = a && !x(a) ? a : _(), A = g ?? C(), N = k({
 		workspaceId: s,
-		organizationId: l,
-		tenantId: m,
+		organizationId: c,
+		tenantId: u,
 		projectId: h
-	}), P = { "Content-Type": "application/json" };
-	k && (P.Authorization = `Bearer ${k}`), M && (P["Accept-Language"] = M);
-	let F = x();
+	}), P = {
+		"Content-Type": "application/json",
+		[W]: "true"
+	};
+	O && (P.Authorization = `Bearer ${O}`), A && (P["Accept-Language"] = A);
+	let F = S();
 	if (F?.country && (P["X-Geo-Country"] = F.country), F?.currency && (P["X-Geo-Currency"] = F.currency), F?.timezone && (P["X-Geo-Timezone"] = F.timezone), t === "workspace" ? o !== !1 : o) {
-		let e = typeof o == "string" ? o : _();
-		e && !d(e, N) && (e = null), !e && o === !0 && (e = await A({
+		let e = typeof o == "string" ? o : v();
+		e && !f(e, N) && (e = null), !e && o === !0 && (e = await j({
 			url: D,
-			authToken: k,
+			authToken: O,
 			workspaceId: N.workspaceId,
 			organizationId: N.organizationId,
 			projectId: N.projectId,
-			locale: M,
+			locale: A,
 			signal: w,
 			currentQuery: n
 		})), e && (P["X-Workspace-Authorization"] = `Bearer ${e}`);
@@ -335,31 +341,31 @@ async function te(e) {
 		let e = N.workspaceId;
 		e && (P["x-workspace-id"] = e);
 	}
-	if (t === "global" || l) {
+	if (t === "global" || c) {
 		let e = N.organizationId;
 		e && (P["x-org-id"] = e);
 	}
-	if (m) {
-		let e = typeof m == "string" ? m : T();
+	if (u) {
+		let e = typeof u == "string" ? u : E();
 		e && (P["x-tenant-id"] = e);
 	}
 	if (t === "workspace" || h) {
 		let e = N.projectId;
 		e && (P["x-project-id"] = e);
 	}
-	let I = c(C);
+	let I = l(b);
 	I && Object.assign(P, I);
 	let L = { query: n };
 	r && (L.variables = r), i && (L.operationName = i);
 	try {
 		let e = await Q(D, P, L, w);
-		return p(), e.errors?.length && !E && f({ errors: e.errors }, { operationName: i }), e;
+		return m(), e.errors?.length && !T && p({ errors: e.errors }, { operationName: i }), e;
 	} catch (e) {
-		throw E || f(e, {
+		throw T || p(e, {
 			operationName: i,
 			fallbackMessage: "We could not reach the server. Please check your connection and try again."
 		}), e;
 	}
 }
 //#endregion
-export { I as clearGraphqlFetchResponseCache, Q as enqueueGraphQLFetch, g as getStoredAuthToken, S as getStoredLocale, w as getStoredOrganizationId, E as getStoredProjectId, C as getStoredWorkspaceId, _ as getStoredWorkspaceToken, te as graphqlFetch, j as resolveGatewayUrl };
+export { L as clearGraphqlFetchResponseCache, Q as enqueueGraphQLFetch, _ as getStoredAuthToken, C as getStoredLocale, T as getStoredOrganizationId, D as getStoredProjectId, w as getStoredWorkspaceId, v as getStoredWorkspaceToken, re as graphqlFetch, M as resolveGatewayUrl };

package/dist/shared/providers/AppShellProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AppShellProvider.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/AppShellProvider.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAqD,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAa1F,OAAO,EAEL,KAAK,KAAK,EACV,KAAK,SAAS,EACd,KAAK,OAAO,EACZ,KAAK,UAAU,EACf,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAC;AAY/B,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAQL,KAAK,kBAAkB,EACxB,MAAM,WAAW,CAAC;AAyBnB,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC;IAEpB,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,sBAAsB;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,+CAA+C;IAC/C,aAAa,EAAE,MAAM,CAAC;IAEtB,4BAA4B;IAC5B,WAAW,EAAE;QACX,gBAAgB,EAAE,MAAM,CAAC;QACzB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IAEF,gCAAgC;IAChC,UAAU,CAAC,EAAE;QACX,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,CAAC;IAEF,+CAA+C;IAC/C,YAAY,CAAC,EAAE,KAAK,CAAC;IACrB,oFAAoF;IACpF,WAAW,CAAC,EAAE,SAAS,CAAC;IACxB,mCAAmC;IACnC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,4CAA4C;IAC5C,iBAAiB,CAAC,EAAE,UAAU,CAAC;IAC/B,2CAA2C;IAC3C,YAAY,CAAC,EAAE,cAAc,CAAC;IAE9B,gCAAgC;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,wCAAwC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,mDAAmD;IACnD,cAAc,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC;IAExC,mCAAmC;IACnC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B,qDAAqD;IACrD,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAE7D,mCAAmC;IACnC,kBAAkB,CAAC,EAAE;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;QACvB,oBAAoB,CAAC,EAAE,OAAO,CAAC;KAChC,CAAC;IAEF,uBAAuB;IACvB,eAAe,CAAC,EACZ,UAAU,GACV,YAAY,GACZ,WAAW,GACX,aAAa,GACb,eAAe,GACf,cAAc,CAAC;IAEnB,uEAAuE;IACvE,aAAa,CAAC,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,KAAK,GAAG,OAAO,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,kBAAkB,EAAE,CAAC;QACjC,UAAU,CAAC,EAAE,kBAAkB,CAAC;QAChC,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;KACtD,CAAC;IACF,IAAI,CAAC,EAAE;QACL,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,YAAY,CAAC,EAAE;QACb,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,wBAAwB;IACvC,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,2BAA2B,CAAC,EAAE,MAAM,CAAC;CACtC;AA2FD,wBAAgB,kCAAkC,CAChD,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,wBAAwB,GAC5B,2BAA2B,CAiC7B;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,SAAS,CAAC;IACpB,2FAA2F;IAC3F,cAAc,CAAC,EAAE,MAAM,IAAI,CAAC;CAC7B;AA4eD,wBAAgB,gBAAgB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,qBAAqB,2CA4S3F"}
+{"version":3,"file":"AppShellProvider.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/AppShellProvider.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAqD,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAa1F,OAAO,EAEL,KAAK,KAAK,EACV,KAAK,SAAS,EACd,KAAK,OAAO,EACZ,KAAK,UAAU,EACf,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAC;AAY/B,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAQL,KAAK,kBAAkB,EACxB,MAAM,WAAW,CAAC;AAyBnB,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC;IAEpB,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,sBAAsB;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,+CAA+C;IAC/C,aAAa,EAAE,MAAM,CAAC;IAEtB,4BAA4B;IAC5B,WAAW,EAAE;QACX,gBAAgB,EAAE,MAAM,CAAC;QACzB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IAEF,gCAAgC;IAChC,UAAU,CAAC,EAAE;QACX,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,CAAC;IAEF,+CAA+C;IAC/C,YAAY,CAAC,EAAE,KAAK,CAAC;IACrB,oFAAoF;IACpF,WAAW,CAAC,EAAE,SAAS,CAAC;IACxB,mCAAmC;IACnC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,4CAA4C;IAC5C,iBAAiB,CAAC,EAAE,UAAU,CAAC;IAC/B,2CAA2C;IAC3C,YAAY,CAAC,EAAE,cAAc,CAAC;IAE9B,gCAAgC;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,wCAAwC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,mDAAmD;IACnD,cAAc,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC;IAExC,mCAAmC;IACnC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B,qDAAqD;IACrD,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAE7D,mCAAmC;IACnC,kBAAkB,CAAC,EAAE;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;QACvB,oBAAoB,CAAC,EAAE,OAAO,CAAC;KAChC,CAAC;IAEF,uBAAuB;IACvB,eAAe,CAAC,EACZ,UAAU,GACV,YAAY,GACZ,WAAW,GACX,aAAa,GACb,eAAe,GACf,cAAc,CAAC;IAEnB,uEAAuE;IACvE,aAAa,CAAC,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,KAAK,GAAG,OAAO,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,kBAAkB,EAAE,CAAC;QACjC,UAAU,CAAC,EAAE,kBAAkB,CAAC;QAChC,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;KACtD,CAAC;IACF,IAAI,CAAC,EAAE;QACL,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,YAAY,CAAC,EAAE;QACb,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,wBAAwB;IACvC,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,2BAA2B,CAAC,EAAE,MAAM,CAAC;CACtC;AA2FD,wBAAgB,kCAAkC,CAChD,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,wBAAwB,GAC5B,2BAA2B,CAiC7B;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,SAAS,CAAC;IACpB,2FAA2F;IAC3F,cAAc,CAAC,EAAE,MAAM,IAAI,CAAC;CAC7B;AA4eD,wBAAgB,gBAAgB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,qBAAqB,2CA6S3F"}

package/dist/shared/providers/AppShellProvider.js

@@ -448,6 +448,7 @@ function we({ config: n, children: r, clearAuthStore: a }) {
 						workspaceBaseUrl: y.workspaceBaseUrl,
 						globalBaseUrl: y.globalBaseUrl,
 						organizationId: X,
+						productSlug: m,
 						defaultGateway: E,
 						enableSubscriptions: D,
 						onAuthError: q,

package/dist/shared/providers/shell/AuthBridgeClient.d.ts

@@ -38,6 +38,8 @@ export interface BridgeMessage {
     };
     /** Unique message ID for request/response correlation */
     messageId?: string;
+    /** Per-client handshake nonce that bridge replies must echo */
+    nonce?: string;
     /** Source identifier */
     source?: string;
 }
@@ -45,7 +47,7 @@ export type AuthBridgeListener = (state: BridgeAuthState) => void;
 export interface AuthBridgeClientOptions {
     /** URL of the session bridge page */
     bridgeUrl: string;
-    /** Allowed origins for postMessage (comma-separated or array) */
+    /** @deprecated Parent accepts bridge replies only from bridgeUrl origin/source. */
     allowedOrigins?: string | string[];
     /** Callback when auth state changes from another app shell */
     onStateChanged?: AuthBridgeListener;
@@ -55,9 +57,9 @@ export interface AuthBridgeClientOptions {
 export declare class AuthBridgeClient {
     private iframe;
     private bridgeUrl;
-    private allowedOrigins;
     private onStateChanged?;
     private debug;
+    private nonce;
     private ready;
     private readyReceived;
     private pendingMessages;

package/dist/shared/providers/shell/AuthBridgeClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthBridgeClient.d.ts","sourceRoot":"","sources":["../../../../src/shared/providers/shell/AuthBridgeClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACrC,MAAM,EAAE;QACN,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GAAG,IAAI,CAAC;IACT,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1C,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1C,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EACA,WAAW,GACX,YAAY,GACZ,YAAY,GACZ,aAAa,GACb,iBAAiB,GACjB,oBAAoB,GACpB,kBAAkB,GAClB,qBAAqB,GACrB,oBAAoB,GACpB,mBAAmB,CAAC;IACxB,OAAO,CAAC,EAAE,eAAe,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrE,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wBAAwB;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;AAKlE,MAAM,WAAW,uBAAuB;IACtC,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACnC,8DAA8D;IAC9D,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAkC;IAChD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,cAAc,CAAW;IACjC,OAAO,CAAC,cAAc,CAAC,CAAqB;IAC5C,OAAO,CAAC,KAAK,CAAU;IACvB,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,eAAe,CAAuB;IAC9C,OAAO,CAAC,cAAc,CAAgD;IACtE,OAAO,CAAC,SAAS,CAAS;gBAEd,OAAO,EAAE,uBAAuB;IAsB5C;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAyE3B;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAsB3B;;;OAGG;IACH,OAAO,CAAC,YAAY,UAAO,GAAG,IAAI;IAmBlC;;OAEG;IACH,WAAW,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAsCzC;;OAEG;IACH,YAAY,IAAI,IAAI;IAapB;;OAEG;IACH,eAAe,IAAI,IAAI;IAavB;;OAEG;IACH,kBAAkB,CAAC,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,GAAG,IAAI;IAQ3D;;OAEG;IACH,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAqB5C,OAAO,CAAC,aAAa;IAmDrB,OAAO,CAAC,YAAY;IAkBpB,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,GAAG;CAKZ;AAeD,wBAAgB,cAAc,CAAC,OAAO,EAAE,uBAAuB,GAAG,gBAAgB,CAkCjF;AAED,wBAAgB,aAAa,IAAI,gBAAgB,GAAG,IAAI,CAEvD;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,OAAO,CAEjD;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,UAAQ,GAAG,IAAI,CAW5D"}
+{"version":3,"file":"AuthBridgeClient.d.ts","sourceRoot":"","sources":["../../../../src/shared/providers/shell/AuthBridgeClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACrC,MAAM,EAAE;QACN,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GAAG,IAAI,CAAC;IACT,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1C,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1C,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EACA,WAAW,GACX,YAAY,GACZ,YAAY,GACZ,aAAa,GACb,iBAAiB,GACjB,oBAAoB,GACpB,kBAAkB,GAClB,qBAAqB,GACrB,oBAAoB,GACpB,mBAAmB,CAAC;IACxB,OAAO,CAAC,EAAE,eAAe,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrE,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wBAAwB;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;AAgBlE,MAAM,WAAW,uBAAuB;IACtC,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,mFAAmF;IACnF,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACnC,8DAA8D;IAC9D,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAkC;IAChD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,cAAc,CAAC,CAAqB;IAC5C,OAAO,CAAC,KAAK,CAAU;IACvB,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,eAAe,CAAuB;IAC9C,OAAO,CAAC,cAAc,CAAgD;IACtE,OAAO,CAAC,SAAS,CAAS;gBAEd,OAAO,EAAE,uBAAuB;IAU5C;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAyE3B;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAsB3B;;;OAGG;IACH,OAAO,CAAC,YAAY,UAAO,GAAG,IAAI;IAmBlC;;OAEG;IACH,WAAW,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAsCzC;;OAEG;IACH,YAAY,IAAI,IAAI;IAapB;;OAEG;IACH,eAAe,IAAI,IAAI;IAavB;;OAEG;IACH,kBAAkB,CAAC,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,GAAG,IAAI;IAQ3D;;OAEG;IACH,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAqB5C,OAAO,CAAC,aAAa;IA6DrB,OAAO,CAAC,YAAY;IAyBpB,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,GAAG;CAKZ;AAeD,wBAAgB,cAAc,CAAC,OAAO,EAAE,uBAAuB,GAAG,gBAAgB,CAkCjF;AAED,wBAAgB,aAAa,IAAI,gBAAgB,GAAG,IAAI,CAEvD;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,OAAO,CAEjD;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,UAAQ,GAAG,IAAI,CAW5D"}

package/dist/shared/providers/shell/AuthBridgeClient.js

@@ -1,18 +1,25 @@
 import { clearShellSsoCookies as e, setShellSsoCookies as t } from "../../utils/authCookie.js";
 //#region src/shared/providers/shell/AuthBridgeClient.ts
-var n = "burdenoff-auth-bridge", r = "burdenoff-auth-client", i = class {
+var n = "burdenoff-auth-bridge", r = "burdenoff-auth-client";
+function i() {
+	let e = globalThis.crypto;
+	if (typeof e.randomUUID == "function") return e.randomUUID();
+	let t = new Uint8Array(32);
+	return e.getRandomValues(t), Array.from(t, (e) => e.toString(16).padStart(2, "0")).join("");
+}
+var a = class {
 	iframe = null;
 	bridgeUrl;
-	allowedOrigins;
 	onStateChanged;
 	debug;
+	nonce;
 	ready = !1;
 	readyReceived = !1;
 	pendingMessages = [];
 	messageHandler = null;
 	destroyed = !1;
 	constructor(e) {
-		this.bridgeUrl = e.bridgeUrl, this.debug = e.debug ?? !1, this.onStateChanged = e.onStateChanged, this.destroyed = !1, typeof e.allowedOrigins == "string" ? this.allowedOrigins = e.allowedOrigins.split(",").map((e) => e.trim()).filter(Boolean) : Array.isArray(e.allowedOrigins) ? this.allowedOrigins = e.allowedOrigins : this.allowedOrigins = [window.location.origin], this.log("AuthBridgeClient created", { bridgeUrl: this.bridgeUrl });
+		this.bridgeUrl = e.bridgeUrl, this.debug = e.debug ?? !1, this.onStateChanged = e.onStateChanged, this.destroyed = !1, this.nonce = i(), this.log("AuthBridgeClient created", { bridgeUrl: this.bridgeUrl });
 	}
 	async init() {
 		if (this.iframe) {
@@ -126,9 +133,9 @@ var n = "burdenoff-auth-bridge", r = "burdenoff-auth-client", i = class {
 	handleMessage(e) {
 		if (this.destroyed) return;
 		let t = new URL(this.bridgeUrl).origin;
-		if (e.origin !== t && !this.allowedOrigins.includes(e.origin)) return;
+		if (e.origin !== t || e.source !== this.iframe?.contentWindow) return;
 		let r = e.data;
-		if (!(!r || !r.type || r.source !== n)) switch (this.log("Received bridge message:", r.type), r.type) {
+		if (!(!r || !r.type || r.source !== n) && !((r.type === "AUTH_STATE" || r.type === "AUTH_STATE_CHANGED" || r.type === "AUTH_BRIDGE_READY") && r.nonce !== this.nonce)) switch (this.log("Received bridge message:", r.type), r.type) {
 			case "AUTH_BRIDGE_READY":
 				if (this.readyReceived) {
 					this.log("AUTH_BRIDGE_READY already received, ignoring duplicate");
@@ -154,7 +161,11 @@ var n = "burdenoff-auth-bridge", r = "burdenoff-auth-client", i = class {
 			return;
 		}
 		let t = new URL(this.bridgeUrl).origin;
-		this.iframe.contentWindow.postMessage(e, t), this.log("Sent message to bridge:", e.type);
+		this.iframe.contentWindow.postMessage({
+			...e,
+			source: e.source ?? r,
+			nonce: this.nonce
+		}, t), this.log("Sent message to bridge:", e.type);
 	}
 	flushPendingMessages() {
 		for (; this.pendingMessages.length > 0;) {
@@ -165,18 +176,18 @@ var n = "burdenoff-auth-bridge", r = "burdenoff-auth-client", i = class {
 	log(...e) {
 		this.debug && console.log("[AuthBridgeClient]", ...e);
 	}
-}, a = null, o = !1, s = !1;
-function c(e) {
-	return s && a ? (e.debug && console.log("[AuthBridgeClient] Returning existing instance"), a) : o && a ? (e.debug && console.log("[AuthBridgeClient] Initialization in progress, returning pending instance"), a) : (o && e.debug && console.log("[AuthBridgeClient] Concurrent init detected, waiting..."), o = !0, a = new i(e), a.init(), s = !0, o = !1, a);
-}
-function l() {
-	return a;
+}, o = null, s = !1, c = !1;
+function l(e) {
+	return c && o ? (e.debug && console.log("[AuthBridgeClient] Returning existing instance"), o) : s && o ? (e.debug && console.log("[AuthBridgeClient] Initialization in progress, returning pending instance"), o) : (s && e.debug && console.log("[AuthBridgeClient] Concurrent init detected, waiting..."), s = !0, o = new a(e), o.init(), c = !0, s = !1, o);
 }
 function u() {
-	return s && a !== null;
+	return o;
+}
+function d() {
+	return c && o !== null;
 }
-function d(e = !1) {
-	e && a && (a.destroy(!0), a = null, s = !1);
+function f(e = !1) {
+	e && o && (o.destroy(!0), o = null, c = !1);
 }
 //#endregion
-export { i as AuthBridgeClient, d as destroyAuthBridge, l as getAuthBridge, c as initAuthBridge, u as isAuthBridgeInitialized };
+export { a as AuthBridgeClient, f as destroyAuthBridge, u as getAuthBridge, l as initAuthBridge, d as isAuthBridgeInitialized };

package/dist/shared/providers/shell/MultiGatewayProvider.d.ts

@@ -8,6 +8,8 @@ export interface MultiGatewayProviderProps {
     globalBaseUrl?: string;
     /** Organization ID getter for x-org-id header (global gateway) */
     organizationId?: () => string | null;
+    /** Product slug for x-product-slug propagation */
+    productSlug?: string;
     /** Default gateway for the app (used by top-level ApolloProvider) */
     defaultGateway?: Gateway;
     /** Enable debug logging */
@@ -21,5 +23,5 @@ export interface MultiGatewayProviderProps {
     /** Callback to attempt token refresh on 401 */
     onRefreshToken?: () => Promise<boolean>;
 }
-export declare function MultiGatewayProvider({ children, workspaceBaseUrl, globalBaseUrl, organizationId, defaultGateway, debug, enableSubscriptions, onAuthError, onNetworkError, onRefreshToken, }: MultiGatewayProviderProps): import("react/jsx-runtime").JSX.Element;
+export declare function MultiGatewayProvider({ children, workspaceBaseUrl, globalBaseUrl, organizationId, productSlug, defaultGateway, debug, enableSubscriptions, onAuthError, onNetworkError, onRefreshToken, }: MultiGatewayProviderProps): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=MultiGatewayProvider.d.ts.map

package/dist/shared/providers/shell/MultiGatewayProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MultiGatewayProvider.d.ts","sourceRoot":"","sources":["../../../../src/shared/providers/shell/MultiGatewayProvider.tsx"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAA2C,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAIhF,OAAO,EAAuB,KAAK,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAKzE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,SAAS,CAAC;IACpB,qCAAqC;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kCAAkC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACrC,qEAAqE;IACrE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,2BAA2B;IAC3B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,gDAAgD;IAChD,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;IACzB,yCAAyC;IACzC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACxC,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CACzC;AAED,wBAAgB,oBAAoB,CAAC,EACnC,QAAQ,EACR,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,cAA4B,EAC5B,KAAa,EACb,mBAA2B,EAC3B,WAAW,EACX,cAAc,EACd,cAAc,GACf,EAAE,yBAAyB,2CAoR3B"}
+{"version":3,"file":"MultiGatewayProvider.d.ts","sourceRoot":"","sources":["../../../../src/shared/providers/shell/MultiGatewayProvider.tsx"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAA2C,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAIhF,OAAO,EAAuB,KAAK,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAKzE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,SAAS,CAAC;IACpB,qCAAqC;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kCAAkC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACrC,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qEAAqE;IACrE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,2BAA2B;IAC3B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,gDAAgD;IAChD,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;IACzB,yCAAyC;IACzC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACxC,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CACzC;AAED,wBAAgB,oBAAoB,CAAC,EACnC,QAAQ,EACR,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,WAAW,EACX,cAA4B,EAC5B,KAAa,EACb,mBAA2B,EAC3B,WAAW,EACX,cAAc,EACd,cAAc,GACf,EAAE,yBAAyB,2CAwR3B"}