@burdenoff/fe-libs 2026.717.6 → 2026.718.2

package/dist/shared/providers/shell/ActiveContextProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ActiveContextProvider.d.ts","sourceRoot":"","sources":["../../../../src/shared/providers/shell/ActiveContextProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,SAAS,EACf,MAAM,OAAO,CAAC;AAgBf;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,yCAAyC;IACzC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,sCAAsC;IACtC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,oCAAoC;IACpC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mCAAmC;IACnC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAExB,kCAAkC;IAClC,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAChD,+BAA+B;IAC/B,YAAY,EAAE,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACnD,6BAA6B;IAC7B,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC/C,4BAA4B;IAC5B,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAE7C,qCAAqC;IACrC,UAAU,EAAE,CACV,OAAO,EAAE,OAAO,CAAC;QACf,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB,CAAC,KACC,IAAI,CAAC;IAEV,+BAA+B;IAC/B,YAAY,EAAE,MAAM,IAAI,CAAC;IAEzB,kCAAkC;IAClC,cAAc,EAAE,OAAO,CAAC;CACzB;AAID,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,SAAS,CAAC;IACpB,8BAA8B;IAC9B,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,2BAA2B;IAC3B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,yBAAyB;IACzB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,wBAAwB;IACxB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,0CAA0C;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,sBAAsB;IACtB,SAAS,CAAC,EAAE;QACV,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAsBD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,QAAQ,EACR,qBAA4B,EAC5B,kBAAyB,EACzB,gBAAuB,EACvB,eAAsB,EACtB,UAAuC,EACvC,SAAiB,EACjB,SAA6C,GAC9C,EAAE,0BAA0B,2CAkS5B;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,uBAM/B"}
+{"version":3,"file":"ActiveContextProvider.d.ts","sourceRoot":"","sources":["../../../../src/shared/providers/shell/ActiveContextProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,SAAS,EACf,MAAM,OAAO,CAAC;AAiBf;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,yCAAyC;IACzC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,sCAAsC;IACtC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,oCAAoC;IACpC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mCAAmC;IACnC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAExB,kCAAkC;IAClC,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAChD,+BAA+B;IAC/B,YAAY,EAAE,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACnD,6BAA6B;IAC7B,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC/C,4BAA4B;IAC5B,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAE7C,qCAAqC;IACrC,UAAU,EAAE,CACV,OAAO,EAAE,OAAO,CAAC;QACf,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB,CAAC,KACC,IAAI,CAAC;IAEV,+BAA+B;IAC/B,YAAY,EAAE,MAAM,IAAI,CAAC;IAEzB,kCAAkC;IAClC,cAAc,EAAE,OAAO,CAAC;CACzB;AAID,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,SAAS,CAAC;IACpB,8BAA8B;IAC9B,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,2BAA2B;IAC3B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,yBAAyB;IACzB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,wBAAwB;IACxB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,0CAA0C;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,sBAAsB;IACtB,SAAS,CAAC,EAAE;QACV,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAiCD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,QAAQ,EACR,qBAA4B,EAC5B,kBAAyB,EACzB,gBAAuB,EACvB,eAAsB,EACtB,UAAuC,EACvC,SAAiB,EACjB,SAA6C,GAC9C,EAAE,0BAA0B,2CAkS5B;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,uBAM/B"}

package/dist/shared/providers/shell/ActiveContextProvider.js

@@ -1,31 +1,32 @@
 import { getProfileContext as e, resolveActiveProfileId as t, setProfileContext as n } from "./ProfileStorageManager.js";
 import { ACTIVE_CONTEXT_STORAGE_KEY as r, DEFAULT_ACTIVE_CONTEXT_URL_PARAMS as i, clearActiveContextStorage as a, getUrlParam as o, readActiveContextStorageValue as s, writeActiveContextFallback as c, writeActiveContextStorageValue as l } from "./ActiveContextStorage.js";
-import { createContext as u, use as d, useCallback as f, useEffect as p, useMemo as m, useState as h } from "react";
-import { jsx as g } from "react/jsx-runtime";
+import { isSsoNavigationPending as u } from "../../utils/ssoDeposit.js";
+import { createContext as d, use as f, useCallback as p, useEffect as m, useMemo as h, useState as g } from "react";
+import { jsx as _ } from "react/jsx-runtime";
 //#region src/shared/providers/shell/ActiveContextProvider.tsx
-var _ = u(null);
-function v(e) {
-	if (typeof window > "u") return;
+var v = d(null);
+function y(e) {
+	if (typeof window > "u" || u() || window.location.pathname.startsWith("/auth/")) return;
 	let t = new URL(window.location.href);
 	Object.entries(e).forEach(([e, n]) => {
 		n ? t.searchParams.set(e, n) : t.searchParams.delete(e);
 	}), window.history.replaceState({}, "", t.toString());
 }
-function y({ children: u, defaultOrganizationId: d = null, defaultWorkspaceId: y = null, defaultProjectId: b = null, defaultTenantId: x = null, storageKey: S = r, syncToUrl: C = !1, urlParams: w = i }) {
-	let [T, E] = h(() => {
+function b({ children: u, defaultOrganizationId: d = null, defaultWorkspaceId: f = null, defaultProjectId: b = null, defaultTenantId: x = null, storageKey: S = r, syncToUrl: C = !1, urlParams: w = i }) {
+	let [T, E] = g(() => {
 		if (typeof window > "u") return d;
 		if (C) {
 			let e = o(w.organization);
 			if (e) return e;
 		}
 		return s("organization", S) || d;
-	}), [D, O] = h(() => {
-		if (typeof window > "u") return y;
+	}), [D, O] = g(() => {
+		if (typeof window > "u") return f;
 		if (C) {
 			let e = o(w.workspace);
 			if (e) return e;
 		}
-		let r = s("workspace", S) || y;
+		let r = s("workspace", S) || f;
 		if (r) {
 			let i = t();
 			if (i) {
@@ -37,14 +38,14 @@ function y({ children: u, defaultOrganizationId: d = null, defaultWorkspaceId: y
 			}
 		}
 		return r;
-	}), [k, A] = h(() => {
+	}), [k, A] = g(() => {
 		if (typeof window > "u") return b;
 		if (C) {
 			let e = o(w.project);
 			if (e) return e;
 		}
 		return s("project", S) || b;
-	}), [j, M] = h(() => {
+	}), [j, M] = g(() => {
 		if (typeof window > "u") return x;
 		if (C) {
 			let e = o(w.tenant);
@@ -52,7 +53,7 @@ function y({ children: u, defaultOrganizationId: d = null, defaultWorkspaceId: y
 		}
 		return s("tenant", S) || x;
 	});
-	p(() => {
+	m(() => {
 		l("organization", T, S), l("workspace", D, S), l("project", k, S), l("tenant", j, S);
 	}, [
 		T,
@@ -60,7 +61,7 @@ function y({ children: u, defaultOrganizationId: d = null, defaultWorkspaceId: y
 		k,
 		j,
 		S
-	]), p(() => {
+	]), m(() => {
 		let r = t();
 		if (!r) return;
 		let i = e(r), a = {
@@ -76,8 +77,8 @@ function y({ children: u, defaultOrganizationId: d = null, defaultWorkspaceId: y
 		D,
 		k,
 		j
-	]), p(() => {
-		C && v({
+	]), m(() => {
+		C && y({
 			[w.organization]: T,
 			[w.workspace]: D,
 			[w.project]: k,
@@ -90,7 +91,7 @@ function y({ children: u, defaultOrganizationId: d = null, defaultWorkspaceId: y
 		j,
 		C,
 		w
-	]), p(() => {
+	]), m(() => {
 		if (!C) return;
 		let e = () => {
 			let e = o(w.organization), t = o(w.workspace), n = o(w.project), r = o(w.tenant);
@@ -105,14 +106,14 @@ function y({ children: u, defaultOrganizationId: d = null, defaultWorkspaceId: y
 		k,
 		j
 	]);
-	let N = f((r) => {
+	let N = p((r) => {
 		E(r);
 		let i = t();
 		i && n(i, {
 			...e(i),
 			organizationId: r
 		}), typeof window < "u" && window.dispatchEvent(new CustomEvent("burdenoff:organization-changed", { detail: { organizationId: r } }));
-	}, []), P = f((r, i) => {
+	}, []), P = p((r, i) => {
 		let a = {
 			organization: "organizationId",
 			workspace: "workspaceId",
@@ -125,24 +126,24 @@ function y({ children: u, defaultOrganizationId: d = null, defaultWorkspaceId: y
 			...e(o),
 			[a[r]]: i
 		}) : typeof window < "u" && c(r, i, S);
-	}, [S]), F = f((e) => {
+	}, [S]), F = p((e) => {
 		O(e), P("workspace", e), typeof window < "u" && window.dispatchEvent(new CustomEvent("burdenoff:workspace-changed", { detail: { workspaceId: e } }));
-	}, [P]), I = f((e) => {
+	}, [P]), I = p((e) => {
 		A(e), P("project", e), typeof window < "u" && window.dispatchEvent(new CustomEvent("burdenoff:project-changed", { detail: { projectId: e } }));
-	}, [P]), L = f((e) => {
+	}, [P]), L = p((e) => {
 		M(e), P("tenant", e);
-	}, [P]), R = f((e) => {
+	}, [P]), R = p((e) => {
 		e.organizationId !== void 0 && N(e.organizationId), e.workspaceId !== void 0 && F(e.workspaceId), e.projectId !== void 0 && I(e.projectId), e.tenantId !== void 0 && L(e.tenantId);
 	}, [
 		N,
 		F,
 		I,
 		L
-	]), z = f(() => {
+	]), z = p(() => {
 		E(null), O(null), A(null), M(null), a(S);
 		let e = t();
 		e && n(e, {});
-	}, [S]), B = m(() => ({
+	}, [S]), B = h(() => ({
 		organizationId: T,
 		workspaceId: D,
 		projectId: k,
@@ -167,15 +168,15 @@ function y({ children: u, defaultOrganizationId: d = null, defaultWorkspaceId: y
 		z,
 		C
 	]);
-	return /* @__PURE__ */ g(_.Provider, {
+	return /* @__PURE__ */ _(v.Provider, {
 		value: B,
 		children: u
 	});
 }
-function b() {
-	let e = d(_);
+function x() {
+	let e = f(v);
 	if (!e) throw Error("useActiveContext must be used within an ActiveContextProvider");
 	return e;
 }
 //#endregion
-export { y as ActiveContextProvider, b as useActiveContext };
+export { b as ActiveContextProvider, x as useActiveContext };

package/dist/shared/providers/shell/AuthProvider.d.ts

@@ -17,7 +17,9 @@ export interface AuthContextValue {
     isAuthenticated: boolean;
     isLoading: boolean;
     login: (user: ProfileUser, accessToken: string, refreshToken?: string) => void;
-    logout: () => void;
+    logout: (options?: {
+        authoritative?: boolean;
+    }) => void;
     updateUser: (user: Partial<ProfileUser>) => void;
     refreshAccessToken: () => Promise<void>;
     hasPermission: (permission: string) => boolean;

package/dist/shared/providers/shell/AuthProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthProvider.d.ts","sourceRoot":"","sources":["../../../../src/shared/providers/shell/AuthProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAA8D,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AACnG,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,WAAW,EAOjB,MAAM,yBAAyB,CAAC;AAQjC,YAAY,EAAE,WAAW,IAAI,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;AAE7D,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/E,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,UAAU,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;IACjD,kBAAkB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,aAAa,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;IAE/C,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAClD,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAE9B,WAAW,EAAE,OAAO,CAAC;IACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAEtE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,UAAU,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACpF,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,SAAS,EAAE,MAAM,IAAI,CAAC;IAEtB,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;CACjC;AAID,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,SAAS,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B,8FAA8F;IAC9F,qBAAqB,CAAC,EAAE,MAAM,IAAI,CAAC;IACnC,cAAc,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC;QACjD,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IACH,mGAAmG;IACnG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qGAAqG;IACrG,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,+CAA+C;IAC/C,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,qFAAqF;IACrF,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;CAC5B;AAED,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,SAAS,EACT,oBAAoB,EACpB,WAAW,EACX,aAAa,GACd,EAAE,iBAAiB,2CAkMnB;AAED,wBAAgB,OAAO,qBAMtB"}
+{"version":3,"file":"AuthProvider.d.ts","sourceRoot":"","sources":["../../../../src/shared/providers/shell/AuthProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAA8D,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AACnG,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,WAAW,EAOjB,MAAM,yBAAyB,CAAC;AASjC,YAAY,EAAE,WAAW,IAAI,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;AAE7D,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/E,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IACxD,UAAU,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;IACjD,kBAAkB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,aAAa,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;IAE/C,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAClD,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAE9B,WAAW,EAAE,OAAO,CAAC;IACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAEtE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,UAAU,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACpF,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,SAAS,EAAE,MAAM,IAAI,CAAC;IAEtB,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;CACjC;AAID,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,SAAS,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B,8FAA8F;IAC9F,qBAAqB,CAAC,EAAE,MAAM,IAAI,CAAC;IACnC,cAAc,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC;QACjD,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IACH,mGAAmG;IACnG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qGAAqG;IACrG,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,+CAA+C;IAC/C,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,qFAAqF;IACrF,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;CAC5B;AAED,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,SAAS,EACT,oBAAoB,EACpB,WAAW,EACX,aAAa,GACd,EAAE,iBAAiB,2CAuMnB;AAED,wBAAgB,OAAO,qBAMtB"}

package/dist/shared/providers/shell/AuthProvider.js

@@ -1,32 +1,33 @@
-import { getActiveProfileId as e, getProfileTokens as t, getProfileUser as n, getProfileWorkspaceToken as r, getProfiles as i, resolveActiveProfileId as ee } from "./ProfileStorageManager.js";
-import { readShellSsoCookie as a } from "../../utils/authCookie.js";
-import { useBridgeInitialization as o } from "./authProvider/useBridgeInitialization.js";
-import { useTokenExpiryTimer as s } from "./authProvider/useTokenExpiryTimer.js";
-import { useStorageSync as c } from "./authProvider/useStorageSync.js";
-import { useRemoteSLO as l } from "./authProvider/useRemoteSLO.js";
-import { useAuthActions as te } from "./authProvider/useAuthActions.js";
-import { createContext as u, use as d, useCallback as f, useMemo as p, useRef as m, useState as h } from "react";
-import { jsx as g } from "react/jsx-runtime";
+import { getActiveProfileId as e, getProfileTokens as t, getProfileUser as n, getProfileWorkspaceToken as r, getProfiles as i, resolveActiveProfileId as a } from "./ProfileStorageManager.js";
+import { readShellSsoCookie as o } from "../../utils/authCookie.js";
+import { useBridgeInitialization as ee } from "./authProvider/useBridgeInitialization.js";
+import { useTokenExpiryTimer as te } from "./authProvider/useTokenExpiryTimer.js";
+import { useStorageSync as s } from "./authProvider/useStorageSync.js";
+import { useRemoteSLO as c } from "./authProvider/useRemoteSLO.js";
+import { useAuthActions as l } from "./authProvider/useAuthActions.js";
+import { useSsoDepositBootGuard as u } from "./authProvider/useSsoDepositBootGuard.js";
+import { createContext as d, use as f, useCallback as p, useMemo as m, useRef as h, useState as g } from "react";
+import { jsx as _ } from "react/jsx-runtime";
 //#region src/shared/providers/shell/AuthProvider.tsx
-var _ = u(null);
-function v({ children: u, onTokenExpired: d, onSessionExpiringSoon: v, onRefreshToken: y, bridgeUrl: b, bridgeAllowedOrigins: x, bridgeDebug: S, onBridgeReady: C }) {
-	let w = m(!1), [T, E] = h(() => ee()), [D, O] = h(() => T ? n(T) : null), [k, A] = h(() => T ? t(T) : null), [j, M] = h(() => T ? r(T) : null), [N, P] = h(() => {
-		if (T && n(T)) return !1;
-		if (b) try {
-			let e = a()?.id ?? null;
+var v = d(null);
+function y({ children: d, onTokenExpired: f, onSessionExpiringSoon: y, onRefreshToken: b, bridgeUrl: x, bridgeAllowedOrigins: S, bridgeDebug: C, onBridgeReady: w }) {
+	let T = h(!1), [E, D] = g(() => a()), [O, k] = g(() => E ? n(E) : null), [A, j] = g(() => E ? t(E) : null), [M, N] = g(() => E ? r(E) : null), [P, F] = g(() => {
+		if (E && n(E)) return !1;
+		if (x) try {
+			let e = o()?.id ?? null;
 			if (e && localStorage.getItem(`bf-p-${e}-tokens`)) return !1;
 		} catch {}
-		return !!b;
-	}), [F, I] = h(!1), [L, ne] = h(null), [R, z] = h(() => i().map((e) => ({
+		return !!x;
+	}), [I, ne] = g(!1), [L, re] = g(null), [R, z] = g(() => i().map((e) => ({
 		id: e.id,
 		email: e.email,
 		name: e.name,
 		avatar: e.avatar,
-		isActive: e.id === T,
+		isActive: e.id === E,
 		lastLogin: e.lastLogin
-	}))), B = f(() => {
+	}))), B = p(() => {
 		z([]);
-	}, []), V = f(() => {
+	}, []), V = p(() => {
 		let t = e();
 		z(i().map((e) => ({
 			id: e.id,
@@ -37,117 +38,117 @@ function v({ children: u, onTokenExpired: d, onSessionExpiringSoon: v, onRefresh
 			lastLogin: e.lastLogin
 		})));
 	}, []);
-	o({
-		bridgeUrl: b,
-		bridgeAllowedOrigins: x,
-		bridgeDebug: S,
-		onBridgeReady: C,
-		bridgeSyncInProgress: w,
-		setIsLoading: P,
-		setActiveId: E,
-		setUser: O,
-		setTokens: A,
-		setWorkspaceTokenLocal: M,
+	ee({
+		bridgeUrl: x,
+		bridgeAllowedOrigins: S,
+		bridgeDebug: C,
+		onBridgeReady: w,
+		bridgeSyncInProgress: T,
+		setIsLoading: F,
+		setActiveId: D,
+		setUser: k,
+		setTokens: j,
+		setWorkspaceTokenLocal: N,
 		clearAccounts: B,
 		refreshAccounts: V
 	});
-	let { login: H, logout: U, logoutAll: W, updateUser: G, refreshAccessToken: K, hasPermission: q, setWorkspaceToken: J, setMfaState: Y, switchAccount: X, addAccount: Z, removeAccount: Q } = te({
-		user: D,
-		tokens: k,
-		activeId: T,
-		bridgeSyncInProgress: w,
-		onRefreshToken: y,
-		onTokenExpired: d,
-		setActiveId: E,
-		setUser: O,
-		setTokens: A,
-		setWorkspaceTokenLocal: M,
-		setMfaRequiredState: I,
-		setMfaChallengeIdState: ne,
-		setIsLoading: P,
+	let { login: H, logout: U, logoutAll: W, updateUser: G, refreshAccessToken: K, hasPermission: q, setWorkspaceToken: J, setMfaState: Y, switchAccount: X, addAccount: Z, removeAccount: Q } = l({
+		user: O,
+		tokens: A,
+		activeId: E,
+		bridgeSyncInProgress: T,
+		onRefreshToken: b,
+		onTokenExpired: f,
+		setActiveId: D,
+		setUser: k,
+		setTokens: j,
+		setWorkspaceTokenLocal: N,
+		setMfaRequiredState: ne,
+		setMfaChallengeIdState: re,
+		setIsLoading: F,
 		clearAccounts: B,
 		refreshAccounts: V
 	});
-	s({
-		tokens: k,
-		onRefreshToken: y,
-		onTokenExpired: d,
-		onSessionExpiringSoon: v,
+	te({
+		tokens: A,
+		onRefreshToken: b,
+		onTokenExpired: f,
+		onSessionExpiringSoon: y,
 		refreshAccessToken: K
-	}), c({
-		user: D,
-		tokens: k,
-		workspaceToken: j,
-		activeId: T,
-		setUser: O,
-		setTokens: A,
-		setWorkspaceTokenLocal: M,
-		setActiveId: E,
+	}), s({
+		user: O,
+		tokens: A,
+		workspaceToken: M,
+		activeId: E,
+		setUser: k,
+		setTokens: j,
+		setWorkspaceTokenLocal: N,
+		setActiveId: D,
 		clearAccounts: B,
 		refreshAccounts: V
-	}), l({
-		tokens: k,
-		bridgeUrl: b,
+	}), u(), c({
+		tokens: A,
+		bridgeUrl: x,
 		logout: U,
-		setActiveId: E,
-		setUser: O,
-		setTokens: A,
-		setWorkspaceTokenLocal: M,
+		setActiveId: D,
+		setUser: k,
+		setTokens: j,
+		setWorkspaceTokenLocal: N,
 		clearAccounts: B
 	});
-	let $ = p(() => !!D && !!k, [D, k]), re = p(() => ({
-		user: D,
-		tokens: k,
+	let $ = m(() => !!O && !!A, [O, A]), ie = m(() => ({
+		user: O,
+		tokens: A,
 		isAuthenticated: $,
-		isLoading: N,
+		isLoading: P,
 		login: H,
 		logout: U,
 		updateUser: G,
 		refreshAccessToken: K,
 		hasPermission: q,
 		setWorkspaceToken: J,
-		workspaceToken: j,
-		mfaRequired: F,
+		workspaceToken: M,
+		mfaRequired: I,
 		mfaChallengeId: L,
 		setMfaState: Y,
-		activeProfileId: T,
+		activeProfileId: E,
 		accounts: R,
 		switchAccount: X,
 		addAccount: Z,
 		removeAccount: Q,
 		logoutAll: W,
-		currentUser: D
+		currentUser: O
 	}), [
-		D,
-		k,
+		O,
+		A,
 		$,
-		N,
+		P,
 		H,
 		U,
 		G,
 		K,
 		q,
 		J,
-		j,
-		F,
+		M,
+		I,
 		L,
 		Y,
-		T,
+		E,
 		R,
 		X,
 		Z,
 		Q,
 		W
 	]);
-	return /* @__PURE__ */ g(_.Provider, {
-		value: re,
-		children: u
+	return /* @__PURE__ */ _(v.Provider, {
+		value: ie,
+		children: d
 	});
 }
-function y() {
-	let e = d(_);
+function b() {
+	let e = f(v);
 	if (!e) throw Error("useAuth must be used within an AuthProvider");
 	return e;
 }
 //#endregion
-export { v as AuthProvider, y as useAuth };
+export { y as AuthProvider, b as useAuth };

package/dist/shared/providers/shell/authProvider/useAuthActions.d.ts

@@ -21,9 +21,24 @@ export interface AuthActionsDeps {
     clearAccounts: () => void;
     refreshAccounts: () => void;
 }
+export interface LogoutOptions {
+    /**
+     * `true` (default) = an EXPLICIT user sign-out: revoke ALL server-side
+     * sessions (authoritative single-logout) and detour through the bridge
+     * host's /auth/sso-clear so its stored session is wiped too.
+     *
+     * `false` = a failure-driven local logout (expired session, failed token
+     * refresh, remote-SLO detection). Only THIS origin's state is cleared.
+     * BOFF-4463: these paths used to fire the authoritative signOut mutation,
+     * so one shell holding a stale relayed token would revoke the user's
+     * sessions platform-wide and cascade-logout every product within the 90s
+     * remote-SLO poll.
+     */
+    authoritative?: boolean;
+}
 export interface AuthActions {
     login: (user: ProfileUser, accessToken: string, refreshToken?: string) => void;
-    logout: () => void;
+    logout: (options?: LogoutOptions) => void;
     logoutAll: () => void;
     updateUser: (updates: Partial<ProfileUser>) => void;
     refreshAccessToken: () => Promise<void>;

package/dist/shared/providers/shell/authProvider/useAuthActions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useAuthActions.d.ts","sourceRoot":"","sources":["../../../../../src/shared/providers/shell/authProvider/useAuthActions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,gBAAgB,EAAE,MAAM,OAAO,CAAC;AAC3D,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,UAAU,EAchB,MAAM,0BAA0B,CAAC;AAqClC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,oBAAoB,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChD,cAAc,EACV,CAAC,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC;QACjC,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC,GACH,SAAS,CAAC;IACd,cAAc,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;IACzC,WAAW,EAAE,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACzC,OAAO,EAAE,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,KAAK,IAAI,CAAC;IAC5C,SAAS,EAAE,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,KAAK,IAAI,CAAC;IAC/C,sBAAsB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACvD,mBAAmB,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;IACjD,sBAAsB,EAAE,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACpD,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IACzC,aAAa,EAAE,MAAM,IAAI,CAAC;IAC1B,eAAe,EAAE,MAAM,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/E,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,SAAS,EAAE,MAAM,IAAI,CAAC;IACtB,UAAU,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;IACpD,kBAAkB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,aAAa,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;IAC/C,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAClD,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACtE,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,UAAU,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACpF,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5C;AAED,wBAAgB,cAAc,CAAC,EAC7B,IAAI,EACJ,MAAM,EACN,QAAQ,EACR,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,WAAW,EACX,OAAO,EACP,SAAS,EACT,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,YAAY,EACZ,aAAa,EACb,eAAe,GAChB,EAAE,eAAe,GAAG,WAAW,CAmT/B"}
+{"version":3,"file":"useAuthActions.d.ts","sourceRoot":"","sources":["../../../../../src/shared/providers/shell/authProvider/useAuthActions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,gBAAgB,EAAE,MAAM,OAAO,CAAC;AAC3D,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,UAAU,EAchB,MAAM,0BAA0B,CAAC;AAqClC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,oBAAoB,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChD,cAAc,EACV,CAAC,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC;QACjC,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC,GACH,SAAS,CAAC;IACd,cAAc,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;IACzC,WAAW,EAAE,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACzC,OAAO,EAAE,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,KAAK,IAAI,CAAC;IAC5C,SAAS,EAAE,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,KAAK,IAAI,CAAC;IAC/C,sBAAsB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACvD,mBAAmB,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;IACjD,sBAAsB,EAAE,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACpD,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IACzC,aAAa,EAAE,MAAM,IAAI,CAAC;IAC1B,eAAe,EAAE,MAAM,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/E,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,aAAa,KAAK,IAAI,CAAC;IAC1C,SAAS,EAAE,MAAM,IAAI,CAAC;IACtB,UAAU,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;IACpD,kBAAkB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,aAAa,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;IAC/C,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAClD,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACtE,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,UAAU,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACpF,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5C;AAED,wBAAgB,cAAc,CAAC,EAC7B,IAAI,EACJ,MAAM,EACN,QAAQ,EACR,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,WAAW,EACX,OAAO,EACP,SAAS,EACT,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,YAAY,EACZ,aAAa,EACb,eAAe,GAChB,EAAE,eAAe,GAAG,WAAW,CA+T/B"}

package/dist/shared/providers/shell/authProvider/useAuthActions.js

@@ -52,16 +52,17 @@ function x({ user: e, tokens: x, activeId: S, bridgeSyncInProgress: C, onRefresh
 		k,
 		A,
 		j
-	]), I = y(() => {
-		C.current || b(x?.accessToken ?? (S ? n(S)?.accessToken : void 0)), S && c(S);
-		let e = l();
-		e ? (E(e), D(r(e)), O(n(e)), k(i(e))) : (E(null), D(null), O(null), k(null)), A(!1), j(null), P();
+	]), I = y((e) => {
+		let t = e?.authoritative !== !1;
+		t && !C.current && b(x?.accessToken ?? (S ? n(S)?.accessToken : void 0)), S && c(S);
+		let a = l();
+		a ? (E(a), D(r(a)), O(n(a)), k(i(a))) : (E(null), D(null), O(null), k(null)), A(!1), j(null), P();
 		try {
 			m();
 		} catch {}
 		C.current || g()?.notifyLogout();
-		let t = _();
-		t && !C.current && window.location.replace(t);
+		let o = t ? _() : null;
+		o && !C.current && window.location.replace(o);
 	}, [
 		S,
 		x,
@@ -108,7 +109,7 @@ function x({ user: e, tokens: x, activeId: S, bridgeSyncInProgress: C, onRefresh
 					expiresAt: i.expiresAt
 				});
 			} catch (e) {
-				console.error("Failed to refresh token:", e), x?.expiresAt && x.expiresAt - Date.now() > 0 || (I(), T?.());
+				console.error("Failed to refresh token:", e), x?.expiresAt && x.expiresAt - Date.now() > 0 || (I({ authoritative: !1 }), T?.());
 			} finally {
 				M(!1);
 			}

package/dist/shared/providers/shell/authProvider/useRemoteSLO.d.ts

@@ -2,7 +2,9 @@ import { ProfileUser, AuthTokens } from '../ProfileStorageManager';
 export interface RemoteSLODeps {
     tokens: AuthTokens | null;
     bridgeUrl: string | undefined;
-    logout: () => void;
+    logout: (options?: {
+        authoritative?: boolean;
+    }) => void;
     setActiveId: (id: string | null) => void;
     setUser: (user: ProfileUser | null) => void;
     setTokens: (tokens: AuthTokens | null) => void;

package/dist/shared/providers/shell/authProvider/useRemoteSLO.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useRemoteSLO.d.ts","sourceRoot":"","sources":["../../../../../src/shared/providers/shell/authProvider/useRemoteSLO.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAK7E,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,WAAW,EAAE,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACzC,OAAO,EAAE,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,KAAK,IAAI,CAAC;IAC5C,SAAS,EAAE,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,KAAK,IAAI,CAAC;IAC/C,sBAAsB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACvD,aAAa,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED,wBAAgB,YAAY,CAAC,EAC3B,MAAM,EACN,SAAS,EACT,MAAM,EACN,WAAW,EACX,OAAO,EACP,SAAS,EACT,sBAAsB,EACtB,aAAa,GACd,EAAE,aAAa,GAAG,IAAI,CAqDtB"}
+{"version":3,"file":"useRemoteSLO.d.ts","sourceRoot":"","sources":["../../../../../src/shared/providers/shell/authProvider/useRemoteSLO.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAK7E,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IACxD,WAAW,EAAE,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACzC,OAAO,EAAE,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,KAAK,IAAI,CAAC;IAC5C,SAAS,EAAE,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,KAAK,IAAI,CAAC;IAC/C,sBAAsB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACvD,aAAa,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED,wBAAgB,YAAY,CAAC,EAC3B,MAAM,EACN,SAAS,EACT,MAAM,EACN,WAAW,EACX,OAAO,EACP,SAAS,EACT,sBAAsB,EACtB,aAAa,GACd,EAAE,aAAa,GAAG,IAAI,CA0DtB"}

package/dist/shared/providers/shell/authProvider/useRemoteSLO.js

@@ -13,7 +13,7 @@ function a({ tokens: a, bridgeUrl: o, logout: s, setActiveId: c, setUser: l, set
 					return;
 				}
 				if (t()) return;
-				await n(`${e().globalBaseUrl}/global/graphql`, a.accessToken) && s();
+				await n(`${e().globalBaseUrl}/global/graphql`, a.accessToken) && s({ authoritative: !1 });
 			} catch {}
 		};
 		document.addEventListener("visibilitychange", i);

package/dist/shared/providers/shell/authProvider/useSsoDepositBootGuard.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Boot-time SSO deposit safety net (BOFF-4463).
+ *
+ * Guarantees the central bridge host eventually receives this origin's
+ * session even when the post-login deposit hop was cancelled by a competing
+ * navigation, and heals sessions created while the deposit flow was broken:
+ * on app boot, if this profile has no recent successful deposit, mint a
+ * dedicated token lineage for the bridge (mintSsoSession) and perform the
+ * top-level deposit round-trip. Bounded by attempt caps + cooldowns in
+ * shouldAttemptSsoDeposit, and a marker param on the bounce-back records
+ * success.
+ */
+export declare function useSsoDepositBootGuard(): void;
+//# sourceMappingURL=useSsoDepositBootGuard.d.ts.map

package/dist/shared/providers/shell/authProvider/useSsoDepositBootGuard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useSsoDepositBootGuard.d.ts","sourceRoot":"","sources":["../../../../../src/shared/providers/shell/authProvider/useSsoDepositBootGuard.ts"],"names":[],"mappings":"AA+BA;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CA4E7C"}

package/dist/shared/providers/shell/authProvider/useSsoDepositBootGuard.js

@@ -0,0 +1,52 @@
+import { resolveGatewayUrls as e } from "../../../config/gatewayUrls.js";
+import { resolveAuthBridgeConfig as t } from "../../../config/authBridgeUrls.js";
+import { resolveActiveProfileId as n } from "../ProfileStorageManager.js";
+import { isLocalDevSsoHost as r, isSharedSsoCookieDomain as i } from "../../../utils/authCookie.js";
+import { beginSsoNavigation as a, buildSsoDepositUrl as o, consumeSsoDepositMarker as s, markSsoDepositPending as c, mintSsoSessionTokens as l, shouldAttemptSsoDeposit as u } from "../../../utils/ssoDeposit.js";
+import { useEffect as d } from "react";
+//#region src/shared/providers/shell/authProvider/useSsoDepositBootGuard.ts
+var f = 2500;
+function p() {
+	if (typeof window > "u") return !1;
+	try {
+		let e = window.Capacitor;
+		if (typeof e?.isNativePlatform == "function" && e.isNativePlatform()) return !0;
+	} catch {}
+	return typeof navigator < "u" && /Electron/i.test(navigator.userAgent || "");
+}
+function m() {
+	d(() => {
+		if (typeof window > "u") return;
+		let d = n();
+		if (s(d) || !d || p() || r() || i() || window.location.pathname.startsWith("/auth/")) return;
+		let m;
+		try {
+			let e = t();
+			m = new URL(e.url).origin;
+		} catch {
+			return;
+		}
+		if (m === window.location.origin || !u(d)) return;
+		let h = setTimeout(async () => {
+			try {
+				if (n() !== d || window.location.pathname.startsWith("/auth/")) return;
+				let t = localStorage.getItem(`bf-p-${d}-tokens`), r = localStorage.getItem(`bf-p-${d}-user`);
+				if (!t || !r) return;
+				let i = JSON.parse(t);
+				if (!(i.accessToken && typeof i.expiresAt == "number" && i.expiresAt - Date.now() > 6e4) || !i.refreshToken) return;
+				c(d);
+				let { globalBaseUrl: s } = e(), { tokens: u } = await l(`${s}/global/graphql`, i.refreshToken);
+				if (!u) return;
+				a(), window.location.replace(o(m, window.location.href, {
+					profileId: d,
+					tokens: JSON.stringify(u),
+					user: r,
+					profiles: localStorage.getItem("bf-profiles")
+				}));
+			} catch {}
+		}, f);
+		return () => clearTimeout(h);
+	}, []);
+}
+//#endregion
+export { m as useSsoDepositBootGuard };

package/dist/shared/utils/index.d.ts

@@ -22,6 +22,8 @@ export { initializeLogger, setUserContext, clearUserContext } from './loggerInit
 export type { InitLoggerOptions } from './loggerInit';
 export { setSSoCookie, getSSoCookie, clearSSoCookie, setShellSsoCookies, readShellSsoCookie, clearShellSsoCookies, isSharedSsoCookieDomain, isTrustedSsoOrigin, } from './authCookie';
 export type { ShellSsoCookieData } from './authCookie';
+export { SSO_DEPOSITED_PARAM, beginSsoNavigation, isSsoNavigationPending, clearSsoNavigation, readSsoDepositState, markSsoDepositPending, markSsoDepositDone, clearSsoDepositState, shouldAttemptSsoDeposit, mintSsoSessionTokens, buildSsoDepositUrl, consumeSsoDepositMarker, } from './ssoDeposit';
+export type { MintedSsoTokens, MintSsoSessionResult, SsoDepositPayload, SsoDepositState, } from './ssoDeposit';
 export { createProfileScopedStorage, getProfileScopedKey } from './profileScopedStorage';
 export { QUOTA_EXHAUSTED_CODE, RESOURCE_CAP_EXCEEDED_CODE, STORAGE_QUOTA_EXCEEDED_CODE, UPGRADE_ERROR_CODES, isQuotaExhaustedError, isUpgradeError, extractUpgradeErrorExtensions, extractQuotaExhaustedExtensions, buildQuotaExhaustedMessage, } from './quotaErrors';
 export type { QuotaExhaustedExtensions, UpgradeErrorCode, UpgradeErrorExtensions, } from './quotaErrors';

package/dist/shared/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/shared/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,UAAU,EAAQ,MAAM,MAAM,CAAC;AAG7C;;;GAGG;AACH,wBAAgB,EAAE,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,UAEzC;AAED,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC9C,YAAY,EAAE,yBAAyB,EAAE,MAAM,UAAU,CAAC;AAG1D,OAAO,EACL,YAAY,EACZ,WAAW,EACX,cAAc,EACd,cAAc,EACd,WAAW,EACX,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,GACf,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAG/C,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,mBAAmB,EACnB,aAAa,EACb,YAAY,EACZ,eAAe,EACf,eAAe,EACf,OAAO,EACP,WAAW,EACX,YAAY,EACZ,SAAS,EACT,UAAU,GACX,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGlE,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAG9E,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAGhF,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,EACzB,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACpF,YAAY,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGxD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAClF,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGtD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGvD,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAGzF,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,2BAA2B,EAC3B,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,6BAA6B,EAC7B,+BAA+B,EAC/B,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,wBAAwB,EACxB,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/shared/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,UAAU,EAAQ,MAAM,MAAM,CAAC;AAG7C;;;GAGG;AACH,wBAAgB,EAAE,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,UAEzC;AAED,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC9C,YAAY,EAAE,yBAAyB,EAAE,MAAM,UAAU,CAAC;AAG1D,OAAO,EACL,YAAY,EACZ,WAAW,EACX,cAAc,EACd,cAAc,EACd,WAAW,EACX,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,GACf,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAG/C,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,mBAAmB,EACnB,aAAa,EACb,YAAY,EACZ,eAAe,EACf,eAAe,EACf,OAAO,EACP,WAAW,EACX,YAAY,EACZ,SAAS,EACT,UAAU,GACX,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGlE,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAG9E,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAGhF,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,EACzB,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACpF,YAAY,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGxD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAClF,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGtD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGvD,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,eAAe,EACf,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,GAChB,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAGzF,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,2BAA2B,EAC3B,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,6BAA6B,EAC7B,+BAA+B,EAC/B,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,wBAAwB,EACxB,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,eAAe,CAAC"}

package/dist/shared/utils/ssoDeposit.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Cross-product SSO deposit helpers (BOFF-4463).
+ *
+ * The deposit hop is a TOP-LEVEL navigation from a product origin to the
+ * central bridge host (`app.burdenoff.com/auth/sso-deposit#sso=...`) so the
+ * bridge's first-party localStorage receives the session that later powers
+ * `/auth/sso-relay` for every other product. Two failure modes this module
+ * addresses:
+ *
+ * 1. The deposit navigation is provisional for a few hundred ms; ANY
+ *    same-document navigation fired by post-login React effects (URL param
+ *    sync via history.replaceState, router redirects) cancels it
+ *    (net::ERR_ABORTED) and the bridge silently never gets the session.
+ *    → `beginSsoNavigation()` marks a pending cross-document SSO navigation so
+ *    known same-document navigators (ActiveContextProvider URL sync) hold off,
+ *    and callers can schedule a retry.
+ *
+ * 2. Tokens copied verbatim to other origins share ONE rotating refresh-token
+ *    lineage — the first origin to refresh revokes the token every other copy
+ *    holds. → `mintSsoSessionTokens()` calls the public `mintSsoSession`
+ *    mutation to obtain a dedicated lineage for the bridge/target origin.
+ */
+/** Query param the deposit initiator embeds in returnTo; its presence on boot
+ *  proves the deposit hop committed and bounced back. */
+export declare const SSO_DEPOSITED_PARAM = "bf_sso_deposited";
+/** Mark that a cross-document SSO navigation (deposit/relay hop) was just
+ *  initiated. Same-document navigators should stay quiet until it commits. */
+export declare function beginSsoNavigation(): void;
+export declare function isSsoNavigationPending(): boolean;
+export declare function clearSsoNavigation(): void;
+export interface SsoDepositState {
+    profileId: string;
+    status: 'pending' | 'done';
+    at: number;
+    attempts: number;
+}
+export declare function readSsoDepositState(): SsoDepositState | null;
+export declare function writeSsoDepositState(state: SsoDepositState): void;
+export declare function markSsoDepositPending(profileId: string): void;
+export declare function markSsoDepositDone(profileId: string): void;
+export declare function clearSsoDepositState(): void;
+/**
+ * True when the app should attempt (or re-attempt) the deposit hop for this
+ * profile: nothing recorded yet (legacy session that never deposited), a
+ * pending attempt that evidently never committed, or a stale `done` record
+ * past its trust window. Bounded by attempt count + cooldown so a persistently
+ * failing bridge can never turn into a redirect loop.
+ */
+export declare function shouldAttemptSsoDeposit(profileId: string): boolean;
+export interface MintedSsoTokens {
+    accessToken: string;
+    refreshToken: string;
+    expiresAt: number;
+}
+export interface MintSsoSessionResult {
+    tokens: MintedSsoTokens | null;
+    /**
+     * True when the server EXPLICITLY rejected the source refresh token /
+     * session (revoked, rotated away, user inactive). Distinguishes a dead
+     * session (caller should treat the stored pair as unusable) from the
+     * mutation merely being unreachable (rollout gap, network) where a legacy
+     * fallback is still reasonable.
+     */
+    denied: boolean;
+}
+/**
+ * Mint a dedicated refresh-token lineage for another origin (bridge host or
+ * relay target) from this origin's valid refresh token.
+ */
+export declare function mintSsoSessionTokens(globalGraphqlUrl: string, refreshToken: string, options?: {
+    timeoutMs?: number;
+}): Promise<MintSsoSessionResult>;
+export interface SsoDepositPayload {
+    profileId: string;
+    tokens: string;
+    user: string;
+    profiles: string | null;
+}
+/**
+ * Build the full deposit URL: bridge-host /auth/sso-deposit with the payload in
+ * the fragment (never sent to servers) and the deposit-committed marker param
+ * embedded in returnTo so the bounce-back proves completion.
+ */
+export declare function buildSsoDepositUrl(bridgeOrigin: string, returnTo: string, payload: SsoDepositPayload): string;
+/**
+ * On boot: if the URL carries the deposit-committed marker, record success and
+ * strip the param (via history.replaceState — safe, no SSO navigation is
+ * pending during a fresh boot with the marker present).
+ * Returns true when the marker was found.
+ */
+export declare function consumeSsoDepositMarker(profileId: string | null): boolean;
+//# sourceMappingURL=ssoDeposit.d.ts.map

package/dist/shared/utils/ssoDeposit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssoDeposit.d.ts","sourceRoot":"","sources":["../../../src/shared/utils/ssoDeposit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH;yDACyD;AACzD,eAAO,MAAM,mBAAmB,qBAAqB,CAAC;AAWtD;8EAC8E;AAC9E,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED,wBAAgB,sBAAsB,IAAI,OAAO,CAShD;AAED,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,mBAAmB,IAAI,eAAe,GAAG,IAAI,CAiB5D;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAMjE;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAI7D;AAED,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAE1D;AAED,wBAAgB,oBAAoB,IAAI,IAAI,CAM3C;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CASlE;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;IAC/B;;;;;;OAMG;IACH,MAAM,EAAE,OAAO,CAAC;CACjB;AAoBD;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,gBAAgB,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/B,OAAO,CAAC,oBAAoB,CAAC,CAoD/B;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,iBAAiB,GACzB,MAAM,CAMR;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAazE"}

package/dist/shared/utils/ssoDeposit.js

@@ -0,0 +1,118 @@
+//#region src/shared/utils/ssoDeposit.ts
+var e = 15e3, t = "bf-sso-deposit-state", n = "bf_sso_deposited", r = 3, i = 600 * 1e3, a = 1440 * 60 * 1e3, o = null;
+function s() {
+	o = Date.now();
+}
+function c() {
+	return o === null ? !1 : Date.now() - o > e ? (o = null, !1) : !0;
+}
+function l() {
+	o = null;
+}
+function u() {
+	try {
+		let e = localStorage.getItem(t);
+		if (!e) return null;
+		let n = JSON.parse(e);
+		return typeof n.profileId != "string" || n.status !== "pending" && n.status !== "done" || typeof n.at != "number" || typeof n.attempts != "number" ? null : n;
+	} catch {
+		return null;
+	}
+}
+function d(e) {
+	try {
+		localStorage.setItem(t, JSON.stringify(e));
+	} catch {}
+}
+function f(e) {
+	let t = u(), n = t?.profileId === e ? t.attempts + 1 : 1;
+	d({
+		profileId: e,
+		status: "pending",
+		at: Date.now(),
+		attempts: n
+	});
+}
+function p(e) {
+	d({
+		profileId: e,
+		status: "done",
+		at: Date.now(),
+		attempts: 0
+	});
+}
+function m() {
+	try {
+		localStorage.removeItem(t);
+	} catch {}
+}
+function h(e) {
+	let t = u();
+	return !t || t.profileId !== e ? !0 : t.status === "done" ? Date.now() - t.at > a : t.attempts >= r ? !1 : Date.now() - t.at > i;
+}
+var g = new Set([
+	"UNAUTHENTICATED",
+	"INVALID_REFRESH_TOKEN",
+	"REFRESH_TOKEN_EXPIRED",
+	"INVALID_TOKEN",
+	"SESSION_REVOKED",
+	"FORBIDDEN",
+	"NOT_FOUND"
+]), _ = "mutation MintSsoSession($token: String!) { mintSsoSession(token: $token) { accessToken refreshToken expiresIn } }";
+async function v(e, t, n) {
+	try {
+		let r = new AbortController(), i = setTimeout(() => r.abort(), n?.timeoutMs ?? 6e3);
+		try {
+			let n = await fetch(e, {
+				method: "POST",
+				headers: { "content-type": "application/json" },
+				body: JSON.stringify({
+					query: _,
+					variables: { token: t }
+				}),
+				signal: r.signal
+			});
+			if (!n.ok) return {
+				tokens: null,
+				denied: n.status === 401
+			};
+			let i = await n.json(), a = i.data?.mintSsoSession;
+			if (!a?.accessToken || !a.refreshToken) return {
+				tokens: null,
+				denied: (i.errors ?? []).some((e) => g.has(e?.extensions?.code ?? ""))
+			};
+			let o = typeof a.expiresIn == "number" && a.expiresIn > 0 ? a.expiresIn * 1e3 : 1440 * 60 * 1e3;
+			return {
+				tokens: {
+					accessToken: a.accessToken,
+					refreshToken: a.refreshToken,
+					expiresAt: Date.now() + o
+				},
+				denied: !1
+			};
+		} finally {
+			clearTimeout(i);
+		}
+	} catch {
+		return {
+			tokens: null,
+			denied: !1
+		};
+	}
+}
+function y(e, t, r) {
+	let i = new URL(t);
+	i.searchParams.set(n, "1");
+	let a = new URL("/auth/sso-deposit", e);
+	return a.searchParams.set("returnTo", i.href), `${a.href}#sso=${btoa(JSON.stringify(r))}`;
+}
+function b(e) {
+	try {
+		let t = new URL(window.location.href);
+		return t.searchParams.get("bf_sso_deposited") === "1" ? (e && p(e), t.searchParams.delete(n), window.history.replaceState(window.history.state, "", t.toString()), !0) : !1;
+	} catch {
+		return !1;
+	}
+}
+//#endregion
+export { n as SSO_DEPOSITED_PARAM, s as beginSsoNavigation, y as buildSsoDepositUrl, m as clearSsoDepositState, l as clearSsoNavigation, b as consumeSsoDepositMarker, c as isSsoNavigationPending, p as markSsoDepositDone, f as markSsoDepositPending, v as mintSsoSessionTokens, u as readSsoDepositState, h as shouldAttemptSsoDeposit };

package/dist/shared-utils.js

@@ -6,15 +6,16 @@ import { installGatewayFetchRewrite as P, resolveGatewayBases as F, suppressCons
 import { BACKEND_ERROR_EVENT as L, CONNECTION_STATUS_EVENT as R, dispatchBackendErrorEvent as z, extractBackendError as B, isAbortError as V, isBackendErrorDisplay as H, isTransportError as U, markConnectionHealthy as W, shouldToastBackendError as G } from "./shared/utils/backendErrors.js";
 import { attemptTokenRefresh as K, clearAuthSessionStorage as q, hasAuthGraphQLErrors as J, isAuthGraphQLError as Y, isAuthNetworkError as X, redirectToLogin as Z } from "./shared/utils/authErrorHandling.js";
 import { clearSSoCookie as Q, clearShellSsoCookies as $, getSSoCookie as ee, isSharedSsoCookieDomain as te, isTrustedSsoOrigin as ne, readShellSsoCookie as re, setSSoCookie as ie, setShellSsoCookies as ae } from "./shared/utils/authCookie.js";
-import { AppInitializer as oe, useRegistryHelpers as se, useShellNavigate as ce } from "./shared/utils/appHelpers.js";
-import { clearUserContext as le, initializeLogger as ue, setUserContext as de } from "./shared/utils/loggerInit.js";
-import { createProfileScopedStorage as fe, getProfileScopedKey as pe } from "./shared/utils/profileScopedStorage.js";
-import { QUOTA_EXHAUSTED_CODE as me, RESOURCE_CAP_EXCEEDED_CODE as he, STORAGE_QUOTA_EXCEEDED_CODE as ge, UPGRADE_ERROR_CODES as _e, buildQuotaExhaustedMessage as ve, extractQuotaExhaustedExtensions as ye, extractUpgradeErrorExtensions as be, isQuotaExhaustedError as xe, isUpgradeError as Se } from "./shared/utils/quotaErrors.js";
-import { clsx as Ce } from "clsx";
-import { twMerge as we } from "tailwind-merge";
+import { SSO_DEPOSITED_PARAM as oe, beginSsoNavigation as se, buildSsoDepositUrl as ce, clearSsoDepositState as le, clearSsoNavigation as ue, consumeSsoDepositMarker as de, isSsoNavigationPending as fe, markSsoDepositDone as pe, markSsoDepositPending as me, mintSsoSessionTokens as he, readSsoDepositState as ge, shouldAttemptSsoDeposit as _e } from "./shared/utils/ssoDeposit.js";
+import { AppInitializer as ve, useRegistryHelpers as ye, useShellNavigate as be } from "./shared/utils/appHelpers.js";
+import { clearUserContext as xe, initializeLogger as Se, setUserContext as Ce } from "./shared/utils/loggerInit.js";
+import { createProfileScopedStorage as we, getProfileScopedKey as Te } from "./shared/utils/profileScopedStorage.js";
+import { QUOTA_EXHAUSTED_CODE as Ee, RESOURCE_CAP_EXCEEDED_CODE as De, STORAGE_QUOTA_EXCEEDED_CODE as Oe, UPGRADE_ERROR_CODES as ke, buildQuotaExhaustedMessage as Ae, extractQuotaExhaustedExtensions as je, extractUpgradeErrorExtensions as Me, isQuotaExhaustedError as Ne, isUpgradeError as Pe } from "./shared/utils/quotaErrors.js";
+import { clsx as Fe } from "clsx";
+import { twMerge as Ie } from "tailwind-merge";
 //#region src/shared/utils/index.ts
-function Te(...e) {
-	return we(Ce(e));
+function Le(...e) {
+	return Ie(Fe(e));
 }
 //#endregion
-export { oe as AppInitializer, L as BACKEND_ERROR_EVENT, R as CONNECTION_STATUS_EVENT, me as QUOTA_EXHAUSTED_CODE, he as RESOURCE_CAP_EXCEEDED_CODE, ge as STORAGE_QUOTA_EXCEEDED_CODE, _e as UPGRADE_ERROR_CODES, t as alertTokens, K as attemptTokenRefresh, ve as buildQuotaExhaustedMessage, f as capitalizeFirst, p as capitalizeWords, n as categoryTokens, q as clearAuthSessionStorage, Q as clearSSoCookie, $ as clearShellSsoCookies, le as clearUserContext, Te as cn, e as createApolloClient, fe as createProfileScopedStorage, z as dispatchBackendErrorEvent, B as extractBackendError, ye as extractQuotaExhaustedExtensions, be as extractUpgradeErrorExtensions, m as formatBytes, h as formatCompactNumber, g as formatCurrency, _ as formatCurrencyCompact, v as formatDate, y as formatDateTime, b as formatDuration, x as formatList, S as formatNumber, C as formatOrdinal, w as formatPercentage, T as formatRelativeTime, E as formatTime, r as getAlertTokens, i as getCategoryTokens, pe as getProfileScopedKey, a as getProgressTokens, ee as getSSoCookie, o as getStatusBadgeTokens, s as getStatusTokens, c as getTrendTokens, J as hasAuthGraphQLErrors, ue as initializeLogger, P as installGatewayFetchRewrite, V as isAbortError, Y as isAuthGraphQLError, X as isAuthNetworkError, H as isBackendErrorDisplay, M as isChunkLoadError, xe as isQuotaExhaustedError, te as isSharedSsoCookieDomain, U as isTransportError, ne as isTrustedSsoOrigin, Se as isUpgradeError, N as lazyWithRetry, W as markConnectionHealthy, D as pluralize, l as progressTokens, re as readShellSsoCookie, Z as redirectToLogin, F as resolveGatewayBases, ie as setSSoCookie, ae as setShellSsoCookies, de as setUserContext, G as shouldToastBackendError, O as slugify, u as statusTokens, I as suppressConsole, k as toCamelCase, A as toPascalCase, d as trendTokens, j as truncateText, se as useRegistryHelpers, ce as useShellNavigate };
+export { ve as AppInitializer, L as BACKEND_ERROR_EVENT, R as CONNECTION_STATUS_EVENT, Ee as QUOTA_EXHAUSTED_CODE, De as RESOURCE_CAP_EXCEEDED_CODE, oe as SSO_DEPOSITED_PARAM, Oe as STORAGE_QUOTA_EXCEEDED_CODE, ke as UPGRADE_ERROR_CODES, t as alertTokens, K as attemptTokenRefresh, se as beginSsoNavigation, Ae as buildQuotaExhaustedMessage, ce as buildSsoDepositUrl, f as capitalizeFirst, p as capitalizeWords, n as categoryTokens, q as clearAuthSessionStorage, Q as clearSSoCookie, $ as clearShellSsoCookies, le as clearSsoDepositState, ue as clearSsoNavigation, xe as clearUserContext, Le as cn, de as consumeSsoDepositMarker, e as createApolloClient, we as createProfileScopedStorage, z as dispatchBackendErrorEvent, B as extractBackendError, je as extractQuotaExhaustedExtensions, Me as extractUpgradeErrorExtensions, m as formatBytes, h as formatCompactNumber, g as formatCurrency, _ as formatCurrencyCompact, v as formatDate, y as formatDateTime, b as formatDuration, x as formatList, S as formatNumber, C as formatOrdinal, w as formatPercentage, T as formatRelativeTime, E as formatTime, r as getAlertTokens, i as getCategoryTokens, Te as getProfileScopedKey, a as getProgressTokens, ee as getSSoCookie, o as getStatusBadgeTokens, s as getStatusTokens, c as getTrendTokens, J as hasAuthGraphQLErrors, Se as initializeLogger, P as installGatewayFetchRewrite, V as isAbortError, Y as isAuthGraphQLError, X as isAuthNetworkError, H as isBackendErrorDisplay, M as isChunkLoadError, Ne as isQuotaExhaustedError, te as isSharedSsoCookieDomain, fe as isSsoNavigationPending, U as isTransportError, ne as isTrustedSsoOrigin, Pe as isUpgradeError, N as lazyWithRetry, W as markConnectionHealthy, pe as markSsoDepositDone, me as markSsoDepositPending, he as mintSsoSessionTokens, D as pluralize, l as progressTokens, re as readShellSsoCookie, ge as readSsoDepositState, Z as redirectToLogin, F as resolveGatewayBases, ie as setSSoCookie, ae as setShellSsoCookies, Ce as setUserContext, _e as shouldAttemptSsoDeposit, G as shouldToastBackendError, O as slugify, u as statusTokens, I as suppressConsole, k as toCamelCase, A as toPascalCase, d as trendTokens, j as truncateText, ye as useRegistryHelpers, be as useShellNavigate };

package/dist/shared.js

@@ -21,101 +21,102 @@ import { ApolloClient as Pe, ApolloProvider as Fe, InMemoryCache as Ie, gql as L
 import { attemptTokenRefresh as Ue, clearAuthSessionStorage as We, hasAuthGraphQLErrors as Ge, isAuthGraphQLError as Ke, isAuthNetworkError as qe, redirectToLogin as Je } from "./shared/utils/authErrorHandling.js";
 import { clearSSoCookie as Ye, clearShellSsoCookies as Xe, getSSoCookie as Ze, isSharedSsoCookieDomain as Qe, isTrustedSsoOrigin as $e, readShellSsoCookie as et, setSSoCookie as tt, setShellSsoCookies as nt } from "./shared/utils/authCookie.js";
 import { SSORedirectSpinner as rt, checkRemoteSLO as it, checkSLO as at, clearLocalAuthState as ot, getSSORedirectUrl as st } from "./shared/components/SSORedirectGuard.js";
-import { AppInitializer as ct, useRegistryHelpers as lt, useShellNavigate as ut } from "./shared/utils/appHelpers.js";
-import { LogLevel as dt } from "./shared/logger/types.js";
-import { Logger as ft } from "./shared/logger/Logger.js";
-import { LogManager as pt, logManager as mt } from "./shared/logger/LogManager.js";
-import { ConsoleTransport as ht } from "./shared/logger/ConsoleTransport.js";
-import { clearUserContext as gt, initializeLogger as _t, setUserContext as vt } from "./shared/utils/loggerInit.js";
-import { createProfileScopedStorage as yt, getProfileScopedKey as bt } from "./shared/utils/profileScopedStorage.js";
-import { QUOTA_EXHAUSTED_CODE as xt, RESOURCE_CAP_EXCEEDED_CODE as St, STORAGE_QUOTA_EXCEEDED_CODE as Ct, UPGRADE_ERROR_CODES as wt, buildQuotaExhaustedMessage as Tt, extractQuotaExhaustedExtensions as Et, extractUpgradeErrorExtensions as Dt, isQuotaExhaustedError as Ot, isUpgradeError as kt } from "./shared/utils/quotaErrors.js";
-import { cn as At } from "./shared-utils.js";
-import { ActorIdentity as jt } from "./shared/actors/ActorIdentity.js";
-import { buildActorFallback as Mt, useActorProfiles as Nt } from "./shared/actors/useActorProfiles.js";
-import { ErrorBoundary as Pt } from "./shared/components/ErrorBoundary.js";
-import { RequireAuth as Ft, RequireGuest as It } from "./shared/components/RequireAuth.js";
-import { PermissionButton as Lt, PermissionGate as Rt, PermissionLink as zt } from "./shared/components/PermissionGate.js";
-import { AccessDenied as Bt, PermissionDenied as Vt } from "./shared/components/AccessDenied.js";
-import { ErrorFallback as Ht } from "./shared/components/ErrorFallback.js";
-import { LoadingFallback as Ut, PageLoadingFallback as Wt, SectionLoadingFallback as Gt } from "./shared/components/LoadingFallback.js";
-import { MicrofrontendErrorBoundary as Kt } from "./shared/components/MicrofrontendErrorBoundary.js";
-import { ConditionalShell as qt } from "./shared/components/ConditionalShell.js";
-import { usePWA as Jt } from "./shared/hooks/usePWA.js";
-import { PWAInstallBanner as Yt } from "./shared/components/PWAInstallBanner.js";
-import { ErrorBoundary as Xt } from "./shared/components/AppErrorBoundary.js";
-import { FeatureFlagProvider as Zt, useFeatureFlags as Qt } from "./shared/feature-flags/FeatureFlagProvider.js";
-import { useFeatureFlag as $t, useFeatureFlagDetails as en, useFeatureFlagValue as tn } from "./shared/feature-flags/useFeatureFlag.js";
-import { FeatureGate as nn } from "./shared/feature-flags/FeatureGate.js";
+import { SSO_DEPOSITED_PARAM as ct, beginSsoNavigation as lt, buildSsoDepositUrl as ut, clearSsoDepositState as dt, clearSsoNavigation as ft, consumeSsoDepositMarker as pt, isSsoNavigationPending as mt, markSsoDepositDone as ht, markSsoDepositPending as gt, mintSsoSessionTokens as _t, readSsoDepositState as vt, shouldAttemptSsoDeposit as yt } from "./shared/utils/ssoDeposit.js";
+import { AppInitializer as bt, useRegistryHelpers as xt, useShellNavigate as St } from "./shared/utils/appHelpers.js";
+import { LogLevel as Ct } from "./shared/logger/types.js";
+import { Logger as wt } from "./shared/logger/Logger.js";
+import { LogManager as Tt, logManager as Et } from "./shared/logger/LogManager.js";
+import { ConsoleTransport as Dt } from "./shared/logger/ConsoleTransport.js";
+import { clearUserContext as Ot, initializeLogger as kt, setUserContext as At } from "./shared/utils/loggerInit.js";
+import { createProfileScopedStorage as jt, getProfileScopedKey as Mt } from "./shared/utils/profileScopedStorage.js";
+import { QUOTA_EXHAUSTED_CODE as Nt, RESOURCE_CAP_EXCEEDED_CODE as Pt, STORAGE_QUOTA_EXCEEDED_CODE as Ft, UPGRADE_ERROR_CODES as It, buildQuotaExhaustedMessage as Lt, extractQuotaExhaustedExtensions as Rt, extractUpgradeErrorExtensions as zt, isQuotaExhaustedError as Bt, isUpgradeError as Vt } from "./shared/utils/quotaErrors.js";
+import { cn as Ht } from "./shared-utils.js";
+import { ActorIdentity as Ut } from "./shared/actors/ActorIdentity.js";
+import { buildActorFallback as Wt, useActorProfiles as Gt } from "./shared/actors/useActorProfiles.js";
+import { ErrorBoundary as Kt } from "./shared/components/ErrorBoundary.js";
+import { RequireAuth as qt, RequireGuest as Jt } from "./shared/components/RequireAuth.js";
+import { PermissionButton as Yt, PermissionGate as Xt, PermissionLink as Zt } from "./shared/components/PermissionGate.js";
+import { AccessDenied as Qt, PermissionDenied as $t } from "./shared/components/AccessDenied.js";
+import { ErrorFallback as en } from "./shared/components/ErrorFallback.js";
+import { LoadingFallback as tn, PageLoadingFallback as nn, SectionLoadingFallback as rn } from "./shared/components/LoadingFallback.js";
+import { MicrofrontendErrorBoundary as an } from "./shared/components/MicrofrontendErrorBoundary.js";
+import { ConditionalShell as on } from "./shared/components/ConditionalShell.js";
+import { usePWA as sn } from "./shared/hooks/usePWA.js";
+import { PWAInstallBanner as cn } from "./shared/components/PWAInstallBanner.js";
+import { ErrorBoundary as ln } from "./shared/components/AppErrorBoundary.js";
+import { FeatureFlagProvider as un, useFeatureFlags as dn } from "./shared/feature-flags/FeatureFlagProvider.js";
+import { useFeatureFlag as fn, useFeatureFlagDetails as pn, useFeatureFlagValue as mn } from "./shared/feature-flags/useFeatureFlag.js";
+import { FeatureGate as hn } from "./shared/feature-flags/FeatureGate.js";
 import "./shared-feature-flags.js";
-import { ContextConversationWidget as rn } from "./shared/components/ContextConversationWidget.js";
-import { detectPlatform as an, formatKeyCombo as on, getDisplayKeysForPlatform as sn, getShortcutLabel as cn, isMac as ln, isMobileDevice as un, isTabletDevice as dn, matchesKeyCombo as fn, normalizeKey as pn, normalizePlatformCombo as mn, parseKeyCombo as hn, shouldEnableKeyboardShortcuts as gn, shouldIgnoreShortcut as _n } from "./shared/keyboard/utils.js";
-import { KeyboardHelpDialogWrapper as vn } from "./shared/components/KeyboardHelpDialogWrapper.js";
-import { QuotaMeter as yn } from "./shared/components/QuotaMeter.js";
-import { UPGRADE_PROMPT_EVENT as bn, UpgradePromptModal as xn, dispatchUpgradePrompt as Sn } from "./shared/components/UpgradePromptModal.js";
-import { UpgradeInlineBanner as Cn } from "./shared/components/UpgradeInlineBanner.js";
-import { useVoiceInput as wn } from "./shared/components/assistantWidget/useVoiceInput.js";
-import { ASSISTANT_WIDGET_TOGGLE_EVENT as Tn, AssistantWidget as En } from "./shared/components/assistantWidget/AssistantWidget.js";
+import { ContextConversationWidget as gn } from "./shared/components/ContextConversationWidget.js";
+import { detectPlatform as _n, formatKeyCombo as vn, getDisplayKeysForPlatform as yn, getShortcutLabel as bn, isMac as xn, isMobileDevice as Sn, isTabletDevice as Cn, matchesKeyCombo as wn, normalizeKey as Tn, normalizePlatformCombo as En, parseKeyCombo as Dn, shouldEnableKeyboardShortcuts as On, shouldIgnoreShortcut as kn } from "./shared/keyboard/utils.js";
+import { KeyboardHelpDialogWrapper as An } from "./shared/components/KeyboardHelpDialogWrapper.js";
+import { QuotaMeter as jn } from "./shared/components/QuotaMeter.js";
+import { UPGRADE_PROMPT_EVENT as Mn, UpgradePromptModal as Nn, dispatchUpgradePrompt as Pn } from "./shared/components/UpgradePromptModal.js";
+import { UpgradeInlineBanner as Fn } from "./shared/components/UpgradeInlineBanner.js";
+import { useVoiceInput as In } from "./shared/components/assistantWidget/useVoiceInput.js";
+import { ASSISTANT_WIDGET_TOGGLE_EVENT as Ln, AssistantWidget as Rn } from "./shared/components/assistantWidget/AssistantWidget.js";
 import "./shared-components.js";
-import { DevtoolsSink as Dn } from "./shared/events/sinks/DevtoolsSink.js";
-import { BroadcastChannelSink as On } from "./shared/events/sinks/BroadcastChannelSink.js";
-import { BackendAuditSink as kn } from "./shared/events/sinks/BackendAuditSink.js";
-import { RybbitSink as An } from "./shared/events/sinks/RybbitSink.js";
-import { OtelBrowserSink as jn } from "./shared/events/sinks/OtelBrowserSink.js";
-import { EventBusProvider as Mn, createEventBus as Nn, useEvent as Pn, useEventBus as Fn, useEventEmitter as In } from "./shared-events.js";
-import { useDebounce as Ln } from "./shared/hooks/useDebounce.js";
-import { useThrottle as Rn } from "./shared/hooks/useThrottle.js";
-import { BREAKPOINTS as zn, useBreakpoint as Bn, useMobileBreakpoint as Vn } from "./shared/hooks/useBreakpoint.js";
-import { useOnClickOutside as Hn, useOnClickOutsideWithRef as Un } from "./shared/hooks/useOnClickOutside.js";
-import { useKeyPress as Wn, useKeyboardShortcut as Gn } from "./shared/hooks/useKeyPress.js";
-import { useExclusiveMenu as Kn } from "./shared/hooks/useExclusiveMenu.js";
-import { useLocalStorage as qn } from "./shared/hooks/useLocalStorage.js";
-import { useSessionStorage as Jn } from "./shared/hooks/useSessionStorage.js";
-import { usePrevious as Yn, usePreviousDistinct as Xn, usePreviousHistory as Zn } from "./shared/hooks/usePrevious.js";
-import { useConditionalToggle as Qn, useToggle as $n, useToggleObject as er } from "./shared/hooks/useToggle.js";
-import { usePagination as tr } from "./shared/hooks/usePagination.js";
-import { useAsync as nr, useAsyncImmediate as rr } from "./shared/hooks/useAsync.js";
-import { MODIFIER_KEYS as ir, PLATFORM_TYPES as ar } from "./shared/keyboard/types.js";
-import { useKeyboardShortcuts as or } from "./shared/keyboard/useKeyboardShortcuts.js";
-import { useHotkeys as sr } from "./shared/keyboard/useHotkeys.js";
-import { useShortcutHelp as cr } from "./shared/keyboard/useShortcutHelp.js";
-import { GLOBAL_SHORTCUT_CATEGORIES as lr, createGlobalShortcuts as ur, getGlobalShortcutsByCategory as dr, mergeShortcuts as fr } from "./shared/keyboard/globalShortcuts.js";
-import { useLogger as pr } from "./shared/logger/useLogger.js";
-import { useHasAnimated as mr } from "./shared/hooks/useHasAnimated.js";
-import { useReferralAttribution as hr } from "./shared/hooks/useReferralAttribution.js";
-import { useRecordProductVisit as gr } from "./shared/hooks/useRecordProductVisit.js";
-import { QUOTA_EXHAUSTED_EVENT as _r, dispatchQuotaExhausted as vr, useQuotaErrorToast as yr } from "./shared/hooks/useQuotaErrorToast.js";
-import { PLAN_USAGE_SNAPSHOT_EVENT as br, publishPlanUsageSnapshot as xr, useUpgradePrompt as Sr } from "./shared/hooks/useUpgradePrompt.js";
-import { appendContextToPath as Cr, useCurrentContextSearchParams as wr } from "./shared/hooks/useCurrentContextSearchParams.js";
-import { MicrofrontendContext as Tr, useMicrofrontendContext as Er } from "./shared-hooks.js";
-import { detectDeviceType as Dr, getResponsiveSelector as Or } from "./shared/tours/types.js";
-import { useTourPlayer as kr } from "./shared/tours/useTourPlayer.js";
-import { TourSpotlight as Ar } from "./shared/tours/TourSpotlight.js";
-import { TourTooltip as jr } from "./shared/tours/TourTooltip.js";
-import { TourPlayerProvider as Mr, useIsTourPlaying as Nr, useStartTour as Pr, useStopTour as Fr, useTourPlayerContext as Ir } from "./shared/tours/TourPlayerProvider.js";
-import { TourPlayer as Lr, TourTriggerButton as Rr, usePlayTour as zr } from "./shared/tours/TourPlayer.js";
-import { getTourContextRank as Br, getTourRouteCatalog as Vr, getTourRouteModules as Hr, getTourRoutePages as Ur, isTourVisibleForContext as Wr, normalizeTourPath as Gr, registerTourRouteCatalog as Kr, resolveTourTargetPath as qr } from "./shared/tours/routeCatalog.js";
-import { withTourProgressStatus as Jr } from "./shared/tours/progress.js";
-import { ToursProvider as Yr, useAutoStartTour as Xr, useSafeToursContext as Zr, useTours as Qr, useToursContext as $r } from "./shared/tours/ToursContext.js";
-import { TourInitializer as ei } from "./shared/tours/TourInitializer.js";
-import { AppShellProvider as ti, resolveAppShellObservabilityConfig as ni } from "./shared/providers/AppShellProvider.js";
-import { MicrofrontendProvider as ri } from "./shared-providers.js";
-import { TourTrigger as ii } from "./shared/tours/TourTrigger.js";
+import { DevtoolsSink as zn } from "./shared/events/sinks/DevtoolsSink.js";
+import { BroadcastChannelSink as Bn } from "./shared/events/sinks/BroadcastChannelSink.js";
+import { BackendAuditSink as Vn } from "./shared/events/sinks/BackendAuditSink.js";
+import { RybbitSink as Hn } from "./shared/events/sinks/RybbitSink.js";
+import { OtelBrowserSink as Un } from "./shared/events/sinks/OtelBrowserSink.js";
+import { EventBusProvider as Wn, createEventBus as Gn, useEvent as Kn, useEventBus as qn, useEventEmitter as Jn } from "./shared-events.js";
+import { useDebounce as Yn } from "./shared/hooks/useDebounce.js";
+import { useThrottle as Xn } from "./shared/hooks/useThrottle.js";
+import { BREAKPOINTS as Zn, useBreakpoint as Qn, useMobileBreakpoint as $n } from "./shared/hooks/useBreakpoint.js";
+import { useOnClickOutside as er, useOnClickOutsideWithRef as tr } from "./shared/hooks/useOnClickOutside.js";
+import { useKeyPress as nr, useKeyboardShortcut as rr } from "./shared/hooks/useKeyPress.js";
+import { useExclusiveMenu as ir } from "./shared/hooks/useExclusiveMenu.js";
+import { useLocalStorage as ar } from "./shared/hooks/useLocalStorage.js";
+import { useSessionStorage as or } from "./shared/hooks/useSessionStorage.js";
+import { usePrevious as sr, usePreviousDistinct as cr, usePreviousHistory as lr } from "./shared/hooks/usePrevious.js";
+import { useConditionalToggle as ur, useToggle as dr, useToggleObject as fr } from "./shared/hooks/useToggle.js";
+import { usePagination as pr } from "./shared/hooks/usePagination.js";
+import { useAsync as mr, useAsyncImmediate as hr } from "./shared/hooks/useAsync.js";
+import { MODIFIER_KEYS as gr, PLATFORM_TYPES as _r } from "./shared/keyboard/types.js";
+import { useKeyboardShortcuts as vr } from "./shared/keyboard/useKeyboardShortcuts.js";
+import { useHotkeys as yr } from "./shared/keyboard/useHotkeys.js";
+import { useShortcutHelp as br } from "./shared/keyboard/useShortcutHelp.js";
+import { GLOBAL_SHORTCUT_CATEGORIES as xr, createGlobalShortcuts as Sr, getGlobalShortcutsByCategory as Cr, mergeShortcuts as wr } from "./shared/keyboard/globalShortcuts.js";
+import { useLogger as Tr } from "./shared/logger/useLogger.js";
+import { useHasAnimated as Er } from "./shared/hooks/useHasAnimated.js";
+import { useReferralAttribution as Dr } from "./shared/hooks/useReferralAttribution.js";
+import { useRecordProductVisit as Or } from "./shared/hooks/useRecordProductVisit.js";
+import { QUOTA_EXHAUSTED_EVENT as kr, dispatchQuotaExhausted as Ar, useQuotaErrorToast as jr } from "./shared/hooks/useQuotaErrorToast.js";
+import { PLAN_USAGE_SNAPSHOT_EVENT as Mr, publishPlanUsageSnapshot as Nr, useUpgradePrompt as Pr } from "./shared/hooks/useUpgradePrompt.js";
+import { appendContextToPath as Fr, useCurrentContextSearchParams as Ir } from "./shared/hooks/useCurrentContextSearchParams.js";
+import { MicrofrontendContext as Lr, useMicrofrontendContext as Rr } from "./shared-hooks.js";
+import { detectDeviceType as zr, getResponsiveSelector as Br } from "./shared/tours/types.js";
+import { useTourPlayer as Vr } from "./shared/tours/useTourPlayer.js";
+import { TourSpotlight as Hr } from "./shared/tours/TourSpotlight.js";
+import { TourTooltip as Ur } from "./shared/tours/TourTooltip.js";
+import { TourPlayerProvider as Wr, useIsTourPlaying as Gr, useStartTour as Kr, useStopTour as qr, useTourPlayerContext as Jr } from "./shared/tours/TourPlayerProvider.js";
+import { TourPlayer as Yr, TourTriggerButton as Xr, usePlayTour as Zr } from "./shared/tours/TourPlayer.js";
+import { getTourContextRank as Qr, getTourRouteCatalog as $r, getTourRouteModules as ei, getTourRoutePages as ti, isTourVisibleForContext as ni, normalizeTourPath as ri, registerTourRouteCatalog as ii, resolveTourTargetPath as ai } from "./shared/tours/routeCatalog.js";
+import { withTourProgressStatus as oi } from "./shared/tours/progress.js";
+import { ToursProvider as si, useAutoStartTour as ci, useSafeToursContext as li, useTours as ui, useToursContext as di } from "./shared/tours/ToursContext.js";
+import { TourInitializer as fi } from "./shared/tours/TourInitializer.js";
+import { AppShellProvider as pi, resolveAppShellObservabilityConfig as mi } from "./shared/providers/AppShellProvider.js";
+import { MicrofrontendProvider as hi } from "./shared-providers.js";
+import { TourTrigger as gi } from "./shared/tours/TourTrigger.js";
 import "./shared-tours.js";
-import { getNativeBridge as ai } from "./shared/native/bridge.js";
-import { getPlatform as oi, isAndroid as si, isElectron as ci, isIOS as li, isInstalledApp as ui, isNative as di, isStandalonePWA as fi, isWeb as pi, isWebBrowser as mi } from "./shared/native/platform.js";
-import { nativeConfirm as hi, nativeCopyText as gi, nativeImpact as _i, nativeNotify as vi, nativeOpenUrl as yi, nativeShare as bi, nativeToast as xi } from "./shared/native/consumers.js";
-import { SafeAreaView as Si } from "./shared/native/SafeAreaView.js";
-import { useNativePlatform as Ci } from "./shared/native/hooks/useNativePlatform.js";
-import { useSafeArea as wi } from "./shared/native/hooks/useSafeArea.js";
-import { useNativeKeyboard as Ti } from "./shared/native/hooks/useNativeKeyboard.js";
-import { useAppState as Ei } from "./shared/native/hooks/useAppState.js";
-import { useDeviceInfo as Di } from "./shared/native/hooks/useDeviceInfo.js";
-import { useHaptics as Oi } from "./shared/native/hooks/useHaptics.js";
-import { useStatusBar as ki } from "./shared/native/hooks/useStatusBar.js";
-import { acknowledgeNativePurchase as Ai, getNativeProducts as ji, getNativePurchases as Mi, installNativeIAP as Ni, isNativeIAPAvailable as Pi, purchaseNativeProduct as Fi, restoreNativePurchases as Ii } from "./shared/native/purchases.js";
+import { getNativeBridge as _i } from "./shared/native/bridge.js";
+import { getPlatform as vi, isAndroid as yi, isElectron as bi, isIOS as xi, isInstalledApp as Si, isNative as Ci, isStandalonePWA as wi, isWeb as Ti, isWebBrowser as Ei } from "./shared/native/platform.js";
+import { nativeConfirm as Di, nativeCopyText as Oi, nativeImpact as ki, nativeNotify as Ai, nativeOpenUrl as ji, nativeShare as Mi, nativeToast as Ni } from "./shared/native/consumers.js";
+import { SafeAreaView as Pi } from "./shared/native/SafeAreaView.js";
+import { useNativePlatform as Fi } from "./shared/native/hooks/useNativePlatform.js";
+import { useSafeArea as Ii } from "./shared/native/hooks/useSafeArea.js";
+import { useNativeKeyboard as Li } from "./shared/native/hooks/useNativeKeyboard.js";
+import { useAppState as Ri } from "./shared/native/hooks/useAppState.js";
+import { useDeviceInfo as zi } from "./shared/native/hooks/useDeviceInfo.js";
+import { useHaptics as Bi } from "./shared/native/hooks/useHaptics.js";
+import { useStatusBar as Vi } from "./shared/native/hooks/useStatusBar.js";
+import { acknowledgeNativePurchase as Hi, getNativeProducts as Ui, getNativePurchases as Wi, installNativeIAP as Gi, isNativeIAPAvailable as Ki, purchaseNativeProduct as qi, restoreNativePurchases as Ji } from "./shared/native/purchases.js";
 import "./shared-native.js";
 import "./shared/actors/index.js";
 //#region src/shared/index.ts
-var Li = "1.0.0";
+var Yi = "1.0.0";
 //#endregion
-export { Tn as ASSISTANT_WIDGET_TOGGLE_EVENT, Bt as AccessDenied, jt as ActorIdentity, Pe as ApolloClient, Fe as ApolloProvider, Xt as AppErrorBoundary, ct as AppInitializer, ti as AppShellProvider, En as AssistantWidget, ie as BACKEND_ERROR_EVENT, zn as BREAKPOINTS, kn as BackendAuditSink, On as BroadcastChannelSink, G as COMMON_SHELL_LESS_ROUTES, ae as CONNECTION_STATUS_EVENT, qt as ConditionalShell, ht as ConsoleTransport, rn as ContextConversationWidget, Z as DEFAULT_PAGE_SIZE, K as DEFAULT_SHELL_CONFIG, Dn as DevtoolsSink, Pt as ErrorBoundary, Ht as ErrorFallback, Mn as EventBusProvider, Li as FE_SHARED_VERSION, Zt as FeatureFlagProvider, nn as FeatureGate, Q as GATEWAYS, lr as GLOBAL_SHORTCUT_CATEGORIES, Oe as GatewayProvider, Ie as InMemoryCache, vn as KeyboardHelpDialogWrapper, Ut as LoadingFallback, dt as LogLevel, pt as LogManager, ft as Logger, ir as MODIFIER_KEYS, Tr as MicrofrontendContext, Kt as MicrofrontendErrorBoundary, ri as MicrofrontendProvider, jn as OtelBrowserSink, br as PLAN_USAGE_SNAPSHOT_EVENT, ar as PLATFORM_TYPES, V as PRODUCTS, H as PRODUCT_URLS, Yt as PWAInstallBanner, Wt as PageLoadingFallback, Lt as PermissionButton, Vt as PermissionDenied, Rt as PermissionGate, zt as PermissionLink, xt as QUOTA_EXHAUSTED_CODE, _r as QUOTA_EXHAUSTED_EVENT, yn as QuotaMeter, St as RESOURCE_CAP_EXCEEDED_CODE, Ft as RequireAuth, It as RequireGuest, An as RybbitSink, Se as SSELink, rt as SSORedirectSpinner, Ct as STORAGE_QUOTA_EXCEEDED_CODE, Si as SafeAreaView, Gt as SectionLoadingFallback, ei as TourInitializer, Lr as TourPlayer, Mr as TourPlayerProvider, Ar as TourSpotlight, jr as TourTooltip, ii as TourTrigger, Rr as TourTriggerButton, Yr as ToursProvider, wt as UPGRADE_ERROR_CODES, bn as UPGRADE_PROMPT_EVENT, Cn as UpgradeInlineBanner, xn as UpgradePromptModal, Ne as WsLink, Ai as acknowledgeNativePurchase, r as alertTokens, Cr as appendContextToPath, Ue as attemptTokenRefresh, Mt as buildActorFallback, Tt as buildQuotaExhaustedMessage, m as capitalizeFirst, h as capitalizeWords, i as categoryTokens, it as checkRemoteSLO, at as checkSLO, We as clearAuthSessionStorage, pe as clearGraphqlFetchResponseCache, ot as clearLocalAuthState, Ye as clearSSoCookie, Xe as clearShellSsoCookies, gt as clearUserContext, At as cn, n as createApolloClient, Nn as createEventBus, ur as createGlobalShortcuts, Ce as createGraphQLClient, yt as createProfileScopedStorage, Dr as detectDeviceType, an as detectPlatform, oe as dispatchBackendErrorEvent, vr as dispatchQuotaExhausted, Sn as dispatchUpgradePrompt, se as extractBackendError, Et as extractQuotaExhaustedExtensions, Dt as extractUpgradeErrorExtensions, g as formatBytes, _ as formatCompactNumber, v as formatCurrency, y as formatCurrencyCompact, b as formatDate, x as formatDateTime, S as formatDuration, on as formatKeyCombo, C as formatList, w as formatNumber, T as formatOrdinal, E as formatPercentage, D as formatRelativeTime, O as formatTime, a as getAlertTokens, o as getCategoryTokens, sn as getDisplayKeysForPlatform, $ as getGatewayConfig, ee as getGatewayUrl, we as getGlobalClient, dr as getGlobalShortcutsByCategory, te as getGraphQLEndpoint, ai as getNativeBridge, ji as getNativeProducts, Mi as getNativePurchases, oi as getPlatform, U as getProductUrl, W as getProductsWithUrls, bt as getProfileScopedKey, s as getProgressTokens, Or as getResponsiveSelector, st as getSSORedirectUrl, Ze as getSSoCookie, q as getShellConfig, cn as getShortcutLabel, c as getStatusBadgeTokens, l as getStatusTokens, me as getStoredAuthToken, he as getStoredLocale, ge as getStoredOrganizationId, _e as getStoredProjectId, ve as getStoredWorkspaceId, ye as getStoredWorkspaceToken, Br as getTourContextRank, Vr as getTourRouteCatalog, Hr as getTourRouteModules, Ur as getTourRoutePages, u as getTrendTokens, Te as getWorkspaceClient, ne as getWorkspaceTokenPayload, Le as gql, be as graphqlFetch, Ge as hasAuthGraphQLErrors, Ee as initializeAppClients, _t as initializeLogger, L as installGatewayFetchRewrite, Ni as installNativeIAP, ce as isAbortError, si as isAndroid, Ke as isAuthGraphQLError, qe as isAuthNetworkError, le as isBackendErrorDisplay, P as isChunkLoadError, ci as isElectron, li as isIOS, ui as isInstalledApp, ln as isMac, un as isMobileDevice, di as isNative, Pi as isNativeIAPAvailable, Ot as isQuotaExhaustedError, Qe as isSharedSsoCookieDomain, J as isShellLessRoute, fi as isStandalonePWA, dn as isTabletDevice, Wr as isTourVisibleForContext, ue as isTransportError, $e as isTrustedSsoOrigin, kt as isUpgradeError, pi as isWeb, mi as isWebBrowser, re as isWorkspaceTokenValidForContext, F as lazyWithRetry, mt as logManager, de as markConnectionHealthy, fn as matchesKeyCombo, fr as mergeShortcuts, hi as nativeConfirm, gi as nativeCopyText, _i as nativeImpact, vi as nativeNotify, yi as nativeOpenUrl, bi as nativeShare, xi as nativeToast, pn as normalizeKey, mn as normalizePlatformCombo, Gr as normalizeTourPath, hn as parseKeyCombo, k as pluralize, d as progressTokens, xr as publishPlanUsageSnapshot, Fi as purchaseNativeProduct, et as readShellSsoCookie, Je as redirectToLogin, Kr as registerTourRouteCatalog, De as resetAppClients, ni as resolveAppShellObservabilityConfig, B as resolveAuthBridgeConfig, R as resolveGatewayBases, xe as resolveGatewayUrl, I as resolveGatewayUrls, qr as resolveTourTargetPath, Ii as restoreNativePurchases, tt as setSSoCookie, nt as setShellSsoCookies, vt as setUserContext, gn as shouldEnableKeyboardShortcuts, _n as shouldIgnoreShortcut, Y as shouldShowBreadcrumb, X as shouldShowSidebar, fe as shouldToastBackendError, A as slugify, f as statusTokens, z as suppressConsole, j as toCamelCase, M as toPascalCase, p as trendTokens, N as truncateText, Nt as useActorProfiles, Re as useApolloClient, Ei as useAppState, nr as useAsync, rr as useAsyncImmediate, Xr as useAutoStartTour, Bn as useBreakpoint, Qn as useConditionalToggle, e as useCopyToClipboard, wr as useCurrentContextSearchParams, Ln as useDebounce, Di as useDeviceInfo, Pn as useEvent, Fn as useEventBus, In as useEventEmitter, Kn as useExclusiveMenu, $t as useFeatureFlag, en as useFeatureFlagDetails, tn as useFeatureFlagValue, Qt as useFeatureFlags, ke as useGateway, Ae as useGatewayClient, Oi as useHaptics, mr as useHasAnimated, sr as useHotkeys, Nr as useIsTourPlaying, Wn as useKeyPress, Gn as useKeyboardShortcut, or as useKeyboardShortcuts, ze as useLazyQuery, qn as useLocalStorage, pr as useLogger, t as useMediaQuery, Er as useMicrofrontendContext, Vn as useMobileBreakpoint, Be as useMutation, Ti as useNativeKeyboard, Ci as useNativePlatform, Hn as useOnClickOutside, Un as useOnClickOutsideWithRef, Jt as usePWA, tr as usePagination, zr as usePlayTour, Yn as usePrevious, Xn as usePreviousDistinct, Zn as usePreviousHistory, Ve as useQuery, yr as useQuotaErrorToast, gr as useRecordProductVisit, hr as useReferralAttribution, lt as useRegistryHelpers, wi as useSafeArea, je as useSafeGateway, Me as useSafeGatewayClient, Zr as useSafeToursContext, Jn as useSessionStorage, ut as useShellNavigate, cr as useShortcutHelp, Pr as useStartTour, ki as useStatusBar, Fr as useStopTour, He as useSubscription, Rn as useThrottle, $n as useToggle, er as useToggleObject, kr as useTourPlayer, Ir as useTourPlayerContext, Qr as useTours, $r as useToursContext, Sr as useUpgradePrompt, wn as useVoiceInput, Jr as withTourProgressStatus };
+export { Ln as ASSISTANT_WIDGET_TOGGLE_EVENT, Qt as AccessDenied, Ut as ActorIdentity, Pe as ApolloClient, Fe as ApolloProvider, ln as AppErrorBoundary, bt as AppInitializer, pi as AppShellProvider, Rn as AssistantWidget, ie as BACKEND_ERROR_EVENT, Zn as BREAKPOINTS, Vn as BackendAuditSink, Bn as BroadcastChannelSink, G as COMMON_SHELL_LESS_ROUTES, ae as CONNECTION_STATUS_EVENT, on as ConditionalShell, Dt as ConsoleTransport, gn as ContextConversationWidget, Z as DEFAULT_PAGE_SIZE, K as DEFAULT_SHELL_CONFIG, zn as DevtoolsSink, Kt as ErrorBoundary, en as ErrorFallback, Wn as EventBusProvider, Yi as FE_SHARED_VERSION, un as FeatureFlagProvider, hn as FeatureGate, Q as GATEWAYS, xr as GLOBAL_SHORTCUT_CATEGORIES, Oe as GatewayProvider, Ie as InMemoryCache, An as KeyboardHelpDialogWrapper, tn as LoadingFallback, Ct as LogLevel, Tt as LogManager, wt as Logger, gr as MODIFIER_KEYS, Lr as MicrofrontendContext, an as MicrofrontendErrorBoundary, hi as MicrofrontendProvider, Un as OtelBrowserSink, Mr as PLAN_USAGE_SNAPSHOT_EVENT, _r as PLATFORM_TYPES, V as PRODUCTS, H as PRODUCT_URLS, cn as PWAInstallBanner, nn as PageLoadingFallback, Yt as PermissionButton, $t as PermissionDenied, Xt as PermissionGate, Zt as PermissionLink, Nt as QUOTA_EXHAUSTED_CODE, kr as QUOTA_EXHAUSTED_EVENT, jn as QuotaMeter, Pt as RESOURCE_CAP_EXCEEDED_CODE, qt as RequireAuth, Jt as RequireGuest, Hn as RybbitSink, Se as SSELink, rt as SSORedirectSpinner, ct as SSO_DEPOSITED_PARAM, Ft as STORAGE_QUOTA_EXCEEDED_CODE, Pi as SafeAreaView, rn as SectionLoadingFallback, fi as TourInitializer, Yr as TourPlayer, Wr as TourPlayerProvider, Hr as TourSpotlight, Ur as TourTooltip, gi as TourTrigger, Xr as TourTriggerButton, si as ToursProvider, It as UPGRADE_ERROR_CODES, Mn as UPGRADE_PROMPT_EVENT, Fn as UpgradeInlineBanner, Nn as UpgradePromptModal, Ne as WsLink, Hi as acknowledgeNativePurchase, r as alertTokens, Fr as appendContextToPath, Ue as attemptTokenRefresh, lt as beginSsoNavigation, Wt as buildActorFallback, Lt as buildQuotaExhaustedMessage, ut as buildSsoDepositUrl, m as capitalizeFirst, h as capitalizeWords, i as categoryTokens, it as checkRemoteSLO, at as checkSLO, We as clearAuthSessionStorage, pe as clearGraphqlFetchResponseCache, ot as clearLocalAuthState, Ye as clearSSoCookie, Xe as clearShellSsoCookies, dt as clearSsoDepositState, ft as clearSsoNavigation, Ot as clearUserContext, Ht as cn, pt as consumeSsoDepositMarker, n as createApolloClient, Gn as createEventBus, Sr as createGlobalShortcuts, Ce as createGraphQLClient, jt as createProfileScopedStorage, zr as detectDeviceType, _n as detectPlatform, oe as dispatchBackendErrorEvent, Ar as dispatchQuotaExhausted, Pn as dispatchUpgradePrompt, se as extractBackendError, Rt as extractQuotaExhaustedExtensions, zt as extractUpgradeErrorExtensions, g as formatBytes, _ as formatCompactNumber, v as formatCurrency, y as formatCurrencyCompact, b as formatDate, x as formatDateTime, S as formatDuration, vn as formatKeyCombo, C as formatList, w as formatNumber, T as formatOrdinal, E as formatPercentage, D as formatRelativeTime, O as formatTime, a as getAlertTokens, o as getCategoryTokens, yn as getDisplayKeysForPlatform, $ as getGatewayConfig, ee as getGatewayUrl, we as getGlobalClient, Cr as getGlobalShortcutsByCategory, te as getGraphQLEndpoint, _i as getNativeBridge, Ui as getNativeProducts, Wi as getNativePurchases, vi as getPlatform, U as getProductUrl, W as getProductsWithUrls, Mt as getProfileScopedKey, s as getProgressTokens, Br as getResponsiveSelector, st as getSSORedirectUrl, Ze as getSSoCookie, q as getShellConfig, bn as getShortcutLabel, c as getStatusBadgeTokens, l as getStatusTokens, me as getStoredAuthToken, he as getStoredLocale, ge as getStoredOrganizationId, _e as getStoredProjectId, ve as getStoredWorkspaceId, ye as getStoredWorkspaceToken, Qr as getTourContextRank, $r as getTourRouteCatalog, ei as getTourRouteModules, ti as getTourRoutePages, u as getTrendTokens, Te as getWorkspaceClient, ne as getWorkspaceTokenPayload, Le as gql, be as graphqlFetch, Ge as hasAuthGraphQLErrors, Ee as initializeAppClients, kt as initializeLogger, L as installGatewayFetchRewrite, Gi as installNativeIAP, ce as isAbortError, yi as isAndroid, Ke as isAuthGraphQLError, qe as isAuthNetworkError, le as isBackendErrorDisplay, P as isChunkLoadError, bi as isElectron, xi as isIOS, Si as isInstalledApp, xn as isMac, Sn as isMobileDevice, Ci as isNative, Ki as isNativeIAPAvailable, Bt as isQuotaExhaustedError, Qe as isSharedSsoCookieDomain, J as isShellLessRoute, mt as isSsoNavigationPending, wi as isStandalonePWA, Cn as isTabletDevice, ni as isTourVisibleForContext, ue as isTransportError, $e as isTrustedSsoOrigin, Vt as isUpgradeError, Ti as isWeb, Ei as isWebBrowser, re as isWorkspaceTokenValidForContext, F as lazyWithRetry, Et as logManager, de as markConnectionHealthy, ht as markSsoDepositDone, gt as markSsoDepositPending, wn as matchesKeyCombo, wr as mergeShortcuts, _t as mintSsoSessionTokens, Di as nativeConfirm, Oi as nativeCopyText, ki as nativeImpact, Ai as nativeNotify, ji as nativeOpenUrl, Mi as nativeShare, Ni as nativeToast, Tn as normalizeKey, En as normalizePlatformCombo, ri as normalizeTourPath, Dn as parseKeyCombo, k as pluralize, d as progressTokens, Nr as publishPlanUsageSnapshot, qi as purchaseNativeProduct, et as readShellSsoCookie, vt as readSsoDepositState, Je as redirectToLogin, ii as registerTourRouteCatalog, De as resetAppClients, mi as resolveAppShellObservabilityConfig, B as resolveAuthBridgeConfig, R as resolveGatewayBases, xe as resolveGatewayUrl, I as resolveGatewayUrls, ai as resolveTourTargetPath, Ji as restoreNativePurchases, tt as setSSoCookie, nt as setShellSsoCookies, At as setUserContext, yt as shouldAttemptSsoDeposit, On as shouldEnableKeyboardShortcuts, kn as shouldIgnoreShortcut, Y as shouldShowBreadcrumb, X as shouldShowSidebar, fe as shouldToastBackendError, A as slugify, f as statusTokens, z as suppressConsole, j as toCamelCase, M as toPascalCase, p as trendTokens, N as truncateText, Gt as useActorProfiles, Re as useApolloClient, Ri as useAppState, mr as useAsync, hr as useAsyncImmediate, ci as useAutoStartTour, Qn as useBreakpoint, ur as useConditionalToggle, e as useCopyToClipboard, Ir as useCurrentContextSearchParams, Yn as useDebounce, zi as useDeviceInfo, Kn as useEvent, qn as useEventBus, Jn as useEventEmitter, ir as useExclusiveMenu, fn as useFeatureFlag, pn as useFeatureFlagDetails, mn as useFeatureFlagValue, dn as useFeatureFlags, ke as useGateway, Ae as useGatewayClient, Bi as useHaptics, Er as useHasAnimated, yr as useHotkeys, Gr as useIsTourPlaying, nr as useKeyPress, rr as useKeyboardShortcut, vr as useKeyboardShortcuts, ze as useLazyQuery, ar as useLocalStorage, Tr as useLogger, t as useMediaQuery, Rr as useMicrofrontendContext, $n as useMobileBreakpoint, Be as useMutation, Li as useNativeKeyboard, Fi as useNativePlatform, er as useOnClickOutside, tr as useOnClickOutsideWithRef, sn as usePWA, pr as usePagination, Zr as usePlayTour, sr as usePrevious, cr as usePreviousDistinct, lr as usePreviousHistory, Ve as useQuery, jr as useQuotaErrorToast, Or as useRecordProductVisit, Dr as useReferralAttribution, xt as useRegistryHelpers, Ii as useSafeArea, je as useSafeGateway, Me as useSafeGatewayClient, li as useSafeToursContext, or as useSessionStorage, St as useShellNavigate, br as useShortcutHelp, Kr as useStartTour, Vi as useStatusBar, qr as useStopTour, He as useSubscription, Xn as useThrottle, dr as useToggle, fr as useToggleObject, Vr as useTourPlayer, Jr as useTourPlayerContext, ui as useTours, di as useToursContext, Pr as useUpgradePrompt, In as useVoiceInput, oi as withTourProgressStatus };

package/dist/utils/index.js

@@ -6,6 +6,7 @@ import "../shared/utils/gatewayFetchRewrite.js";
 import "../shared/utils/backendErrors.js";
 import "../shared/utils/authErrorHandling.js";
 import "../shared/utils/authCookie.js";
+import "../shared/utils/ssoDeposit.js";
 import "../shared/utils/appHelpers.js";
 import "../shared/utils/loggerInit.js";
 import "../shared/utils/profileScopedStorage.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/fe-libs",
-  "version": "2026.717.6",
+  "version": "2026.718.2",
   "description": "Burdenoff frontend primitives and domain libraries",
   "type": "module",
   "imports": {