@burdenoff/microfe-auth 2026.624.2 → 2026.624.3

package/dist/auth/hooks/index.js

@@ -9,6 +9,7 @@ import "./useApiKeyOperations.js";
 import "./useAppOperations.js";
 import "./useWorkspaceOperations.js";
 import "./useContextSwitcherData.js";
+import "./useActiveContextBootstrapMirror.js";
 import "./useDelegationOperations.js";
 import "./useUserOperations.js";
 import "./useSsoOperations.js";

package/dist/auth/hooks/useActiveContextBootstrapMirror.js

@@ -0,0 +1,27 @@
+import { useEffect as e } from "react";
+//#region src/auth/hooks/useActiveContextBootstrapMirror.ts
+function t({ storeOrganizationId: t, storeWorkspaceId: n, storeProjectId: r, activeOrganizationId: i, activeWorkspaceId: a, activeProjectId: o, storeWorkspaces: s, storeProjects: c, setOrganization: l, setWorkspace: u, setProject: d }) {
+	e(() => {
+		t && !i && l(t);
+		let e = i || t, f = !!n && !!e && !!s?.some((t) => t.id === n && t.organizationId === e);
+		n && !a && f && u(n);
+		let p = a || (f ? n : null), m = !!r && !!p && !!c?.some((e) => e.id === r && e.workspaceId === p);
+		r && !o && m && d(r);
+	}, [
+		t,
+		n,
+		r,
+		i,
+		a,
+		o,
+		s,
+		c,
+		l,
+		u,
+		d
+	]);
+}
+//#endregion
+export { t as useActiveContextBootstrapMirror };
+
+//# sourceMappingURL=useActiveContextBootstrapMirror.js.map

package/dist/auth/hooks/useActiveContextBootstrapMirror.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useActiveContextBootstrapMirror.js","names":[],"sources":["../../../src/auth/hooks/useActiveContextBootstrapMirror.ts"],"sourcesContent":["import { useEffect } from \"react\";\n\ntype ContextId = string | null | undefined;\n\ninterface MirrorWorkspace {\n  id: string;\n  organizationId?: string | null;\n}\n\ninterface MirrorProject {\n  id: string;\n  workspaceId?: string | null;\n}\n\nexport interface ActiveContextBootstrapMirrorArgs {\n  /** Auth-store `currentOrganizationId` */\n  storeOrganizationId: ContextId;\n  /** Auth-store `currentWorkspaceId` */\n  storeWorkspaceId: ContextId;\n  /** Auth-store `currentProjectId` */\n  storeProjectId: ContextId;\n  /** ActiveContext `organizationId` */\n  activeOrganizationId: ContextId;\n  /** ActiveContext `workspaceId` */\n  activeWorkspaceId: ContextId;\n  /** ActiveContext `projectId` */\n  activeProjectId: ContextId;\n  /**\n   * The auth store's loaded `workspaces`. Used to verify that\n   * `storeWorkspaceId` actually belongs to the organization being mirrored\n   * before it is filled. If omitted, the workspace axis is never mirrored\n   * (safe default — better no workspace than one from the wrong org).\n   */\n  storeWorkspaces?: ReadonlyArray<MirrorWorkspace>;\n  /**\n   * The auth store's loaded `projects`. Used to verify that `storeProjectId`\n   * actually belongs to the workspace being mirrored before it is filled. If\n   * omitted, the project axis is never mirrored.\n   */\n  storeProjects?: ReadonlyArray<MirrorProject>;\n  /**\n   * ActiveContext setters. Must be **stable references** (they are, coming\n   * from `ActiveContextProvider`'s memoized value) — passing inline arrows\n   * makes this effect re-run every render. Likewise prefer stable references\n   * for `storeWorkspaces` / `storeProjects` (e.g. a shallow-equal Zustand\n   * selector or `useMemo`); a new array reference each render re-runs the\n   * effect. Re-runs are harmless (the fills are idempotent), just wasted work.\n   */\n  setOrganization: (organizationId: string | null) => void;\n  setWorkspace: (workspaceId: string | null) => void;\n  setProject: (projectId: string | null) => void;\n}\n\n/**\n * One-way, **fill-only** mirror of the auth store's org / workspace / project\n * ids into ActiveContext, for app-shell headers / context switchers.\n *\n * Some context ids are derived programmatically in the Zustand auth store\n * without a paired ActiveContext write:\n * - the bootstrap in `useContextSwitcherData` auto-selects an organization\n *   (`setCurrentOrganizationId`) and, on the persisted-workspace path, a\n *   workspace (`setCurrentWorkspaceId`) without calling `setActiveContext`;\n * - `useProjectSyncEffect` / `selectWorkspace` auto-select a project.\n *\n * ActiveContext is the source of truth for the URL + storage + the props passed\n * to workspace MFEs and the workspace-token context, so those store-only ids\n * must reach it — otherwise e.g. a fresh `defaultWorkspaceId` login leaves\n * `organizationId` undefined and the token / MFE context break until the user\n * reselects.\n *\n * The rule is **fill, never override**: copy a store id into ActiveContext only\n * when ActiveContext has no value for that axis yet. We must NOT overwrite a\n * non-null ActiveContext value, because:\n *  1. it would clobber an explicit selection — a switch handler's write, or a\n *     deep-link / browser-back `?workspace=`/`?project=` that the router already\n *     applied; and\n *  2. overriding is exactly what turns this into a two-store ping-pong — the\n *     store→AC and AC→store effects each read the other's pre-commit value and\n *     swap the ids every commit until React throws \"Maximum update depth\n *     exceeded\" (error #185). Filling only nulls is self-terminating: once the\n *     axis is set the guard is false forever, so it can never alternate.\n *\n * Cross-context safety: a value is filled only when it provably belongs to the\n * parent context being mirrored, validated against the loaded store metadata —\n * the **workspace** must belong to the target organization (`storeWorkspaces`),\n * and the **project** must belong to the target workspace (`storeProjects`).\n * The store can transiently hold a stale child id after its parent advanced\n * (e.g. `useContextSwitcherData` copies a new org into the store before the new\n * org's — unpersisted — workspace list loads, leaving `currentWorkspaceId`\n * pointing at the previous org; or the workspace advances to B while the\n * project still points at A). Gating on loaded metadata means such a stale id\n * isn't in the list yet, so it is not mirrored until it is genuinely valid.\n *\n * See BOFF-2805.\n */\nexport function useActiveContextBootstrapMirror({\n  storeOrganizationId,\n  storeWorkspaceId,\n  storeProjectId,\n  activeOrganizationId,\n  activeWorkspaceId,\n  activeProjectId,\n  storeWorkspaces,\n  storeProjects,\n  setOrganization,\n  setWorkspace,\n  setProject,\n}: ActiveContextBootstrapMirrorArgs): void {\n  useEffect(() => {\n    if (storeOrganizationId && !activeOrganizationId) {\n      setOrganization(storeOrganizationId);\n    }\n\n    // Fill the workspace only when it provably belongs to the organization\n    // ActiveContext is on (or is being filled this pass). Guards against\n    // publishing a (org, workspace) pair from two different orgs while the\n    // store's org has advanced but its (unpersisted) workspace list / current\n    // workspace id has not caught up.\n    const targetOrganizationId = activeOrganizationId || storeOrganizationId;\n    const workspaceBelongsToTargetOrganization =\n      !!storeWorkspaceId &&\n      !!targetOrganizationId &&\n      !!storeWorkspaces?.some(\n        (workspace) =>\n          workspace.id === storeWorkspaceId &&\n          workspace.organizationId === targetOrganizationId,\n      );\n\n    if (\n      storeWorkspaceId &&\n      !activeWorkspaceId &&\n      workspaceBelongsToTargetOrganization\n    ) {\n      setWorkspace(storeWorkspaceId);\n    }\n\n    // Fill the project only when it provably belongs to the workspace\n    // ActiveContext is on (or is being filled this pass). Prevents a stale\n    // project from a previously-selected workspace leaking across a switch.\n    // Fall back to the store workspace only when it is being filled this pass;\n    // otherwise (e.g. workspace fill skipped because its metadata hasn't\n    // loaded) we'd let a project fill without its parent workspace present,\n    // an inconsistent (org, null, project) state.\n    const targetWorkspaceId =\n      activeWorkspaceId ||\n      (workspaceBelongsToTargetOrganization ? storeWorkspaceId : null);\n    const projectBelongsToTargetWorkspace =\n      !!storeProjectId &&\n      !!targetWorkspaceId &&\n      !!storeProjects?.some(\n        (project) =>\n          project.id === storeProjectId &&\n          project.workspaceId === targetWorkspaceId,\n      );\n\n    if (storeProjectId && !activeProjectId && projectBelongsToTargetWorkspace) {\n      setProject(storeProjectId);\n    }\n  }, [\n    storeOrganizationId,\n    storeWorkspaceId,\n    storeProjectId,\n    activeOrganizationId,\n    activeWorkspaceId,\n    activeProjectId,\n    storeWorkspaces,\n    storeProjects,\n    setOrganization,\n    setWorkspace,\n    setProject,\n  ]);\n}\n"],"mappings":";;AA+FA,SAAgB,EAAgC,EAC9C,wBACA,qBACA,mBACA,yBACA,sBACA,oBACA,oBACA,kBACA,oBACA,iBACA,iBACyC;AACzC,SAAgB;AACd,EAAI,KAAuB,CAAC,KAC1B,EAAgB,EAAoB;EAQtC,IAAM,IAAuB,KAAwB,GAC/C,IACJ,CAAC,CAAC,KACF,CAAC,CAAC,KACF,CAAC,CAAC,GAAiB,MAChB,MACC,EAAU,OAAO,KACjB,EAAU,mBAAmB,EAChC;AAEH,EACE,KACA,CAAC,KACD,KAEA,EAAa,EAAiB;EAUhC,IAAM,IACJ,MACC,IAAuC,IAAmB,OACvD,IACJ,CAAC,CAAC,KACF,CAAC,CAAC,KACF,CAAC,CAAC,GAAe,MACd,MACC,EAAQ,OAAO,KACf,EAAQ,gBAAgB,EAC3B;AAEH,EAAI,KAAkB,CAAC,KAAmB,KACxC,EAAW,EAAe;IAE3B;EACD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC"}

package/dist/auth/index.js

@@ -10,6 +10,7 @@ import "./hooks/usePasswordOperations.js";
 import "./hooks/useSessionOperations.js";
 import "./hooks/useWorkspaceOperations.js";
 import "./hooks/useContextSwitcherData.js";
+import "./hooks/useActiveContextBootstrapMirror.js";
 import "./hooks/useUserOperations.js";
 import "./hooks/index.js";
 import "./hooks/useWorkspaceToken.js";

package/dist/index.js

@@ -11,10 +11,11 @@ import { usePasswordOperations as c } from "./auth/hooks/usePasswordOperations.j
 import { useSessionOperations as l } from "./auth/hooks/useSessionOperations.js";
 import { useWorkspaceOperations as u } from "./auth/hooks/useWorkspaceOperations.js";
 import { useContextSwitcherData as d, useProjectSyncEffect as f, useWorkspaceSyncEffect as p } from "./auth/hooks/useContextSwitcherData.js";
-import { useUserOperations as m } from "./auth/hooks/useUserOperations.js";
-import { useWorkspaceToken as h } from "./auth/hooks/useWorkspaceToken.js";
-import { useTokenRefresh as g } from "./auth/hooks/useTokenRefresh.js";
-import { WorkspaceSelector as _ } from "./auth/components/workspace/WorkspaceSelector.js";
-import { UserProfileMenu as v } from "./auth/components/profile/UserProfileMenu.js";
+import { useActiveContextBootstrapMirror as m } from "./auth/hooks/useActiveContextBootstrapMirror.js";
+import { useUserOperations as h } from "./auth/hooks/useUserOperations.js";
+import { useWorkspaceToken as g } from "./auth/hooks/useWorkspaceToken.js";
+import { useTokenRefresh as _ } from "./auth/hooks/useTokenRefresh.js";
+import { WorkspaceSelector as v } from "./auth/components/workspace/WorkspaceSelector.js";
+import { UserProfileMenu as y } from "./auth/components/profile/UserProfileMenu.js";
 import "./auth/index.js";
-export { o as AuthRoot, a as SSORelayCallbackPage, i as SSORelayPage, v as UserProfileMenu, _ as WorkspaceSelector, e as useAuth, n as useAuthOperations, t as useAuthStore, d as useContextSwitcherData, s as useMfaOperations, r as useMyWorkspaces, c as usePasswordOperations, f as useProjectSyncEffect, l as useSessionOperations, g as useTokenRefresh, m as useUserOperations, u as useWorkspaceOperations, p as useWorkspaceSyncEffect, h as useWorkspaceToken };
+export { o as AuthRoot, a as SSORelayCallbackPage, i as SSORelayPage, y as UserProfileMenu, v as WorkspaceSelector, m as useActiveContextBootstrapMirror, e as useAuth, n as useAuthOperations, t as useAuthStore, d as useContextSwitcherData, s as useMfaOperations, r as useMyWorkspaces, c as usePasswordOperations, f as useProjectSyncEffect, l as useSessionOperations, _ as useTokenRefresh, h as useUserOperations, u as useWorkspaceOperations, p as useWorkspaceSyncEffect, g as useWorkspaceToken };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/microfe-auth",
-  "version": "2026.624.2",
+  "version": "2026.624.3",
   "description": "Auth microfrontend for Burdenoff products",
   "type": "module",
   "imports": {