@burdenoff/microfe-auth 2026.925.1 → 2026.1009.1

package/dist/auth/hooks/useContextSwitcherData.js

@@ -1,23 +1,15 @@
 import { useAuthStore as e } from "../store/authStore.js";
 import { resolveGatewayBaseUrls as t } from "../utils/gatewayBaseUrls.js";
 import { useCallback as n, useEffect as r, useRef as i, useState as a } from "react";
-import { useEventBus as o } from "@burdenoff/fe-libs/shared/events";
-import { getStoredAuthToken as s, graphqlFetch as c } from "@burdenoff/fe-libs/shared/graphql";
-import { useActiveContext as l } from "@burdenoff/fe-libs/shared/providers/shell/ActiveContextProvider";
+import { resolveActiveProfileId as o } from "@burdenoff/fe-libs/shared/providers/shell/ProfileStorageManager";
+import { useEventBus as s } from "@burdenoff/fe-libs/shared/events";
+import { getStoredAuthToken as c, graphqlFetch as l } from "@burdenoff/fe-libs/shared/graphql";
+import { clearWorkspaceWideSelection as u, isWorkspaceWideSelection as d, selectWorkspaceWide as f } from "@burdenoff/fe-libs/shared/providers/shell/WorkspaceWideSelection";
+import { getUrlParam as p } from "@burdenoff/fe-libs/shared/providers/shell/ActiveContextStorage";
+import { useActiveContext as m } from "@burdenoff/fe-libs/shared/providers/shell/ActiveContextProvider";
 //#region src/auth/hooks/useContextSwitcherData.ts
-var u = "\n  query MyOrganizations {\n    myOrganizations {\n      total\n      items {\n        id\n        name\n        slug\n        tenantId\n        description\n        logo\n        website\n        status\n        type\n        createdAt\n        updatedAt\n      }\n    }\n  }\n", d = "\n  query WorkspacesByOrg {\n    workspaces: myWorkspaces(limit: 100) {\n      total\n      items {\n        id\n        name\n        slug\n        tenantId\n        organizationId\n        type\n        status\n        region\n        createdAt\n        updatedAt\n      }\n    }\n  }\n", f = "\n  mutation IssueWorkspaceToken($input: IssueWorkspaceTokenInput!) {\n    issueWorkspaceToken(input: $input) {\n      success\n      token\n      expiresAt\n      organizationId\n      workspaceId\n      projectId\n      scopes\n      error {\n        code\n        message\n      }\n    }\n  }\n", ee = "\n  query MyProjectsForContext {\n    projects: myProjects {\n      total\n      items {\n        id\n        name\n        key\n        workspaceId\n        status\n        archived\n        createdAt\n        updatedAt\n      }\n    }\n  }\n", p = "\n  mutation CreateDefaultProject($input: CreateProjectInput!) {\n    createProject(input: $input) {\n      id\n      name\n      key\n      workspaceId\n      status\n      archived\n      createdAt\n      updatedAt\n    }\n  }\n";
-async function m({ authToken: e, workspaceBaseUrl: t, workspaceToken: n }) {
-	let r = await c({
-		gateway: "workspace",
-		query: p,
-		variables: { input: { name: "Default Project" } },
-		authToken: e,
-		workspaceToken: n,
-		baseUrl: t
-	});
-	return r.errors?.length ? (console.warn("Failed to create default project:", r.errors), null) : r.data?.createProject ?? null;
-}
-function h(e, t = 3e4) {
+var h = "\n  query MyOrganizations {\n    myOrganizations {\n      total\n      items {\n        id\n        name\n        slug\n        tenantId\n        description\n        logo\n        website\n        status\n        type\n        createdAt\n        updatedAt\n      }\n    }\n  }\n", g = "\n  query WorkspacesByOrg {\n    workspaces: myWorkspaces(limit: 100) {\n      total\n      items {\n        id\n        name\n        slug\n        tenantId\n        organizationId\n        type\n        status\n        region\n        createdAt\n        updatedAt\n      }\n    }\n  }\n", _ = "\n  mutation IssueWorkspaceToken($input: IssueWorkspaceTokenInput!) {\n    issueWorkspaceToken(input: $input) {\n      success\n      token\n      expiresAt\n      organizationId\n      workspaceId\n      projectId\n      scopes\n      error {\n        code\n        message\n      }\n    }\n  }\n", v = "\n  query MyProjectsForContext {\n    projects: myProjects {\n      total\n      items {\n        id\n        name\n        key\n        workspaceId\n        status\n        archived\n        createdAt\n        updatedAt\n      }\n    }\n  }\n";
+function y(e, t = 3e4) {
 	try {
 		let n = JSON.parse(atob(e.split(".")[1]));
 		return n.exp ? n.exp * 1e3 < Date.now() + t : !1;
@@ -25,7 +17,7 @@ function h(e, t = 3e4) {
 		return !0;
 	}
 }
-function g(e) {
+function b(e) {
 	try {
 		let t = JSON.parse(atob(e.split(".")[1]));
 		return {
@@ -38,26 +30,26 @@ function g(e) {
 		return null;
 	}
 }
-function _(e, t) {
-	if (!e || h(e)) return !1;
-	let n = g(e);
-	return !(!n || t.workspaceId && n.workspaceId !== t.workspaceId || t.organizationId && n.organizationId !== t.organizationId || t.projectId && n.projectId !== t.projectId);
+function x(e, t) {
+	if (!e || y(e)) return !1;
+	let n = b(e);
+	return !(!n || t.workspaceId && n.workspaceId !== t.workspaceId || t.organizationId && n.organizationId !== t.organizationId || t.workspaceWide && n.projectId || t.projectId && n.projectId !== t.projectId);
 }
-var v = class extends Error {
+var S = class extends Error {
 	constructor(e) {
 		super(e), this.name = "AuthError";
 	}
 };
-function y(e) {
+function C(e) {
 	return e.some((e) => e.extensions?.code === "UNAUTHENTICATED" || e.message?.toLowerCase().includes("unauthorized") || e.message?.toLowerCase().includes("not authenticated"));
 }
-function b() {
+function w() {
 	let t = e.getState().accessToken;
-	if (t && !h(t)) return t;
-	let n = s();
-	return n && !h(n) ? n : t;
+	if (t && !y(t)) return t;
+	let n = c();
+	return n && !y(n) ? n : t;
 }
-function x(e) {
+function T(e) {
 	return Array.from(new Set(e.flatMap((e) => e.organizationId ? [e.organizationId] : []))).map((t, n) => ({
 		id: t,
 		name: e.find((e) => e.organizationId === t)?.name || `Organization ${n + 1}`,
@@ -65,62 +57,69 @@ function x(e) {
 		tenantId: e.find((e) => e.organizationId === t)?.tenantId || ""
 	}));
 }
-var S = new Set([
+var E = new Set([
 	"project.created",
 	"project.updated",
 	"project.deleted",
 	"project.archived",
 	"project.unarchived"
-]), C = new Set([
+]), D = new Set([
 	"workspace.created",
 	"workspace.updated",
 	"workspace.deleted",
 	"workspace.archived",
 	"workspace.reactivated"
 ]);
-function w(e) {
+function ee(e) {
 	if (e && typeof e == "object" && "workspaceId" in e) {
 		let t = e.workspaceId;
 		return typeof t == "string" ? t : void 0;
 	}
 }
-function T(s) {
-	let { organizationId: p, workspaceId: h, projectId: g, setContext: T } = l(), E = o(), D = e((e) => e.organizations), O = e((e) => e.currentOrganizationId), k = e((e) => e.isLoadingOrganizations), A = e((e) => e.workspaces), j = e((e) => e.currentWorkspaceId), te = e((e) => e.workspaceToken), M = e((e) => e.isLoadingWorkspaces), N = e((e) => e.projects), P = e((e) => e.currentProjectId), ne = e((e) => e.isLoadingProjects), [re, F] = a(null), [I, L] = a(0), R = i(0), z = i(null), B = i(/* @__PURE__ */ new Map()), V = i(h), H = i(p);
+function O(c) {
+	let { organizationId: p, workspaceId: y, projectId: b, setContext: O } = m(), k = s(), A = e((e) => e.organizations), j = e((e) => e.currentOrganizationId), M = e((e) => e.isLoadingOrganizations), N = e((e) => e.workspaces), P = e((e) => e.currentWorkspaceId), F = e((e) => e.workspaceToken), I = e((e) => e.isLoadingWorkspaces), L = e((e) => e.projects), R = e((e) => e.currentProjectId), z = e((e) => e.isLoadingProjects), [te, B] = a(null), [V, H] = a(0), U = i(0), W = i(null), G = i(/* @__PURE__ */ new Map()), K = i(y), q = i(p);
 	r(() => {
-		V.current = h, H.current = p;
+		K.current = y, q.current = p;
 	});
-	let U = t(), W = s?.globalBaseUrl ?? U.globalBaseUrl, G = s?.workspaceBaseUrl ?? U.workspaceBaseUrl, K = i(null), q = i(null), J = i(null), Y = i(null);
+	let ne = t(), J = c?.globalBaseUrl ?? ne.globalBaseUrl, Y = c?.workspaceBaseUrl ?? ne.workspaceBaseUrl, re = i(null), ie = i(null), ae = i(null), oe = i(null);
 	r(() => {
 		let t = e.getState();
-		if (p && p !== t.currentOrganizationId && p !== K.current && (K.current = p, t.setCurrentOrganizationId(p), t.workspaces.length > 0 && !t.workspaces.some((e) => e.organizationId === p) && t.setWorkspaces([])), h && h !== t.currentWorkspaceId && h !== q.current && (q.current = h, t.setCurrentWorkspaceId(h), t.projects.length > 0 && !t.projects.some((e) => e.workspaceId === h) && (t.setProjects([]), t.setCurrentProjectId(null))), g && g !== t.currentProjectId && g !== J.current && (J.current = g, t.setCurrentProjectId(g)), t.workspaceToken && !_(t.workspaceToken, {
-			workspaceId: h,
+		if (p && p !== t.currentOrganizationId && p !== re.current && (re.current = p, t.setCurrentOrganizationId(p), t.workspaces.length > 0 && !t.workspaces.some((e) => e.organizationId === p) && t.setWorkspaces([])), y && y !== t.currentWorkspaceId && y !== ie.current && (ie.current = y, t.setCurrentWorkspaceId(y), t.projects.length > 0 && !t.projects.some((e) => e.workspaceId === y) && (t.setProjects([]), t.setCurrentProjectId(null))), d({
+			organizationId: p,
+			workspaceId: y
+		}) && !b && t.currentProjectId && (t.setCurrentProjectId(null), t.setWorkspaceToken(null)), b && b !== t.currentProjectId && b !== ae.current && (ae.current = b, t.setCurrentProjectId(b)), t.workspaceToken && !x(t.workspaceToken, {
+			workspaceId: y,
 			organizationId: p,
-			projectId: g
+			projectId: b,
+			workspaceWide: !b && d({
+				organizationId: p,
+				workspaceId: y
+			})
 		})) {
-			let e = `${p ?? ""}|${h ?? ""}|${g ?? ""}`;
-			Y.current !== e && (Y.current = e, t.setWorkspaceToken(null));
+			let e = `${p ?? ""}|${y ?? ""}|${b ?? ""}`;
+			oe.current !== e && (oe.current = e, t.setWorkspaceToken(null));
 		}
 	}, [
 		p,
-		h,
-		g
+		y,
+		b
 	]);
 	let X = n(async () => {
-		if (z.current) return z.current;
-		let t = e.getState(), n = b();
-		return n ? (t.setLoadingOrganizations(!0), F(null), z.current = (async () => {
+		if (W.current) return W.current;
+		let t = e.getState(), n = w();
+		return n ? (t.setLoadingOrganizations(!0), B(null), W.current = (async () => {
 			try {
-				let r = H.current ?? t.currentOrganizationId, i = r ? await (async () => {
-					let [e, t] = await Promise.all([c({
+				let r = q.current ?? t.currentOrganizationId, i = r ? await (async () => {
+					let [e, t] = await Promise.all([l({
 						gateway: "global",
-						query: u,
+						query: h,
 						authToken: n,
-						baseUrl: W
-					}), c({
+						baseUrl: J
+					}), l({
 						gateway: "global",
-						query: d,
+						query: g,
 						authToken: n,
-						baseUrl: W
+						baseUrl: J
 					})]);
 					return {
 						data: e.data?.myOrganizations ? {
@@ -129,28 +128,28 @@ function T(s) {
 						} : null,
 						errors: [...e.errors ?? [], ...t.errors ?? []]
 					};
-				})() : await c({
+				})() : await l({
 					gateway: "global",
-					query: u,
+					query: h,
 					authToken: n,
-					baseUrl: W
+					baseUrl: J
 				});
-				if (r && i.errors?.length && i.errors.some((e) => e?.extensions?.code === "FORBIDDEN" || /not a member of this organization/i.test(e?.message ?? "") || /Cannot return null for non-nullable field Query\.myOrganizations/i.test(e?.message ?? "")) && (i = await c({
+				if (r && i.errors?.length && i.errors.some((e) => e?.extensions?.code === "FORBIDDEN" || /not a member of this organization/i.test(e?.message ?? "") || /Cannot return null for non-nullable field Query\.myOrganizations/i.test(e?.message ?? "")) && (i = await l({
 					gateway: "global",
 					query: "\n              query ContextSwitcherRecover {\n                myOrganizations {\n                  total\n                  items { id name slug tenantId description logo website status type createdAt updatedAt }\n                }\n                workspaces: myWorkspaces {\n                  total\n                  items { id name slug tenantId organizationId type status region createdAt updatedAt }\n                }\n              }\n            ",
 					authToken: n,
-					baseUrl: W
+					baseUrl: J
 				})), i.errors?.length) {
 					let e = i.errors[0]?.message ?? "GraphQL error";
-					throw y(i.errors) ? new v(e) : (t.workspaces.length === 0 && console.error("Failed to fetch organizations:", i.errors), Error(e));
+					throw C(i.errors) ? new S(e) : (t.workspaces.length === 0 && console.error("Failed to fetch organizations:", i.errors), Error(e));
 				}
 				let a = i.data?.myOrganizations?.items ?? [];
 				if (r && a.length === 0 && t.workspaces.length === 0) {
-					let e = await c({
+					let e = await l({
 						gateway: "global",
-						query: u,
+						query: h,
 						authToken: n,
-						baseUrl: W
+						baseUrl: J
 					});
 					if (!e.errors?.length) a = e.data?.myOrganizations?.items ?? [], i = {
 						...e,
@@ -162,182 +161,225 @@ function T(s) {
 					else {
 						console.warn("[ContextSwitcher] Stale-context recovery failed:", e.errors);
 						let t = e.errors?.[0]?.message ?? "Failed to fetch organizations";
-						throw y(e.errors ?? []) ? new v(t) : Error(t);
+						throw C(e.errors ?? []) ? new S(t) : Error(t);
 					}
 				}
-				let o = a.length === 0 && t.workspaces.length > 0 ? x(t.workspaces) : [], s = o.length > 0 ? o : a;
+				let o = a.length === 0 && t.workspaces.length > 0 ? T(t.workspaces) : [], s = o.length > 0 ? o : a;
 				t.setOrganizations(s);
-				let l = r, f = l && a.some((e) => e.id === l);
-				if (l && !f && a.length > 0 && (l = a[0].id, T({
-					organizationId: l,
+				let c = r, u = c && a.some((e) => e.id === c);
+				if (c && !u && a.length > 0 && (c = a[0].id, O({
+					organizationId: c,
 					workspaceId: null,
 					tenantId: null,
 					projectId: null
-				}), t.setWorkspaces([]), t.setProjects([]), t.setCurrentWorkspaceId(null), t.setCurrentProjectId(null), t.setWorkspaceToken(null)), l && l !== t.currentOrganizationId && t.setCurrentOrganizationId(l), s.length > 0 && !l && (t.setCurrentOrganizationId(s[0].id), l = s[0].id), l && e.getState().workspaces.length === 0) {
+				}), t.setWorkspaces([]), t.setProjects([]), t.setCurrentWorkspaceId(null), t.setCurrentProjectId(null), t.setWorkspaceToken(null)), c && c !== t.currentOrganizationId && t.setCurrentOrganizationId(c), s.length > 0 && !c && (t.setCurrentOrganizationId(s[0].id), c = s[0].id), c && e.getState().workspaces.length === 0) {
 					t.setLoadingWorkspaces(!0);
 					try {
-						let e = (r === l ? i.data?.workspaces?.items?.filter((e) => e.organizationId === l) : void 0) || await c({
+						let e = (r === c ? i.data?.workspaces?.items?.filter((e) => e.organizationId === c) : void 0) || await l({
 							gateway: "global",
-							query: d,
+							query: g,
 							authToken: n,
-							baseUrl: W
-						}).then((e) => e.errors?.length ? null : (e.data?.workspaces?.items ?? []).filter((e) => e.organizationId === l));
-						if (e || L((e) => e + 1), e) {
+							baseUrl: J
+						}).then((e) => e.errors?.length ? null : (e.data?.workspaces?.items ?? []).filter((e) => e.organizationId === c));
+						if (e || H((e) => e + 1), e) {
 							t.setWorkspaces(e);
-							let n = V.current ? e.find((e) => e.id === V.current) : null;
+							let n = K.current ? e.find((e) => e.id === K.current) : null;
 							if (n) t.setCurrentWorkspaceId(n.id);
 							else if (e.length > 0) {
 								let n = {
-									organizationId: l,
+									organizationId: c,
 									workspaceId: e[0].id,
 									tenantId: e[0].tenantId,
 									projectId: null
 								};
-								V.current ? (t.setCurrentWorkspaceId(e[0].id), t.setWorkspaceToken(null), T(n)) : t.currentWorkspaceId || (t.setCurrentWorkspaceId(e[0].id), T(n));
+								K.current ? (t.setCurrentWorkspaceId(e[0].id), t.setWorkspaceToken(null), O(n)) : t.currentWorkspaceId || (t.setCurrentWorkspaceId(e[0].id), O(n));
 							}
 						}
 					} catch {
-						L((e) => e + 1);
+						H((e) => e + 1);
 					} finally {
 						t.setLoadingWorkspaces(!1);
 					}
 				}
-				return R.current = 0, s;
+				return U.current = 0, s;
 			} catch (e) {
-				if (e instanceof v) return [];
+				if (e instanceof S) return [];
 				let n = e instanceof Error ? e.message : "Failed to fetch organizations";
-				if (t.workspaces.length === 0 && console.error("Failed to fetch organizations:", e), F(n), L((e) => e + 1), t.workspaces.length > 0) {
-					let e = x(t.workspaces);
+				if (t.workspaces.length === 0 && console.error("Failed to fetch organizations:", e), B(n), H((e) => e + 1), t.workspaces.length > 0) {
+					let e = T(t.workspaces);
 					if (e.length > 0) return t.setOrganizations(e), t.currentOrganizationId || t.setCurrentOrganizationId(e[0].id), e;
 				}
 				return [];
 			} finally {
-				t.setLoadingOrganizations(!1), z.current = null;
+				t.setLoadingOrganizations(!1), W.current = null;
 			}
-		})(), z.current) : [];
-	}, [W, T]);
+		})(), W.current) : [];
+	}, [J, O]);
 	r(() => {
-		if (I === 0 || R.current >= 5 || !b()) return;
-		R.current += 1;
-		let e = Math.min(1500 * 2 ** (R.current - 1), 12e3), t = window.setTimeout(() => {
+		if (V === 0 || U.current >= 5 || !w()) return;
+		U.current += 1;
+		let e = Math.min(1500 * 2 ** (U.current - 1), 12e3), t = window.setTimeout(() => {
 			X();
 		}, e);
 		return () => {
 			window.clearTimeout(t);
 		};
-	}, [I, X]), r(() => {
+	}, [V, X]), r(() => {
 		let t = () => {
-			e.getState().organizations.length === 0 && b() && (R.current = 0, X());
+			e.getState().organizations.length === 0 && w() && (U.current = 0, X());
 		};
 		return window.addEventListener("online", t), () => {
 			window.removeEventListener("online", t);
 		};
 	}, [X]);
 	let Z = n(async (t) => {
-		let n = B.current.get(t);
-		if (n) return n;
-		let r = e.getState(), i = b();
-		if (!i) return [];
-		r.setLoadingWorkspaces(!0), F(null);
-		let a = (async () => {
+		let n = e.getState(), r = w(), i = o(), a = n.user?.id, s = JSON.stringify([
+			i,
+			a,
+			r,
+			t
+		]), c = G.current.get(s);
+		if (c) return c;
+		let u = () => {
+			let n = e.getState();
+			return o() === i && n.user?.id === a && w() === r && n.currentOrganizationId === t;
+		};
+		if (!r) return [];
+		n.setLoadingWorkspaces(!0), B(null);
+		let d = (async () => {
 			try {
-				let e = await c({
+				let e = await l({
 					gateway: "global",
-					query: d,
-					authToken: i,
-					baseUrl: W
+					query: g,
+					authToken: r,
+					baseUrl: J
 				});
+				if (!u()) return [];
 				if (e.data?.workspaces?.items && (e.data.workspaces.items = e.data.workspaces.items.filter((e) => e.organizationId === t)), e.errors?.length) {
 					let t = e.errors[0]?.message ?? "GraphQL error";
-					throw y(e.errors) ? new v(t) : (console.error("Failed to fetch workspaces:", e.errors), Error(t));
+					throw C(e.errors) ? new S(t) : (console.error("Failed to fetch workspaces:", e.errors), Error(t));
 				}
-				let n = (e.data?.workspaces?.items ?? []).filter((e) => e.organizationId === t);
-				return r.setWorkspaces(n), n;
+				let i = (e.data?.workspaces?.items ?? []).filter((e) => e.organizationId === t);
+				return n.setWorkspaces(i), i;
 			} catch (e) {
-				if (e instanceof v) return [];
+				if (!u() || e instanceof S) return [];
 				let t = e instanceof Error ? e.message : "Failed to fetch workspaces";
-				return console.error("Failed to fetch workspaces:", e), F(t), [];
+				return console.error("Failed to fetch workspaces:", e), B(t), [];
 			} finally {
-				r.setLoadingWorkspaces(!1), B.current.delete(t);
+				u() && n.setLoadingWorkspaces(!1), G.current.delete(s);
 			}
 		})();
-		return B.current.set(t, a), a;
-	}, [W]), Q = n(async (t, n, r, i) => {
-		let a = e.getState(), o = b();
-		if (!o) return {
+		return G.current.set(s, d), d;
+	}, [J]), Q = n(async (t, n, r, i) => {
+		let a = e.getState(), s = [
+			a.currentOrganizationId,
+			a.currentWorkspaceId,
+			a.currentProjectId
+		], c = d({
+			organizationId: t,
+			workspaceId: n ?? null
+		}), u = w(), f = o(), p = a.user?.id;
+		if (!u) return {
 			success: !1,
 			error: "No valid access token available"
 		};
-		F(null);
+		B(null);
 		try {
-			let e = await c({
+			let m = await l({
 				gateway: "workspace",
-				query: f,
+				query: _,
 				variables: { input: {
 					organizationId: t,
 					...n && { workspaceId: n },
 					...r && { projectId: r }
 				} },
-				authToken: o,
-				baseUrl: G,
+				authToken: u,
+				baseUrl: Y,
 				tenantId: i
 			});
-			if (e.errors?.length) {
-				let t = e.errors[0]?.message ?? "GraphQL error";
-				return y(e.errors) || console.error("Failed to issue workspace token:", e.errors), {
+			if (m.errors?.length) {
+				let e = m.errors[0]?.message ?? "GraphQL error";
+				return C(m.errors) || console.error("Failed to issue workspace token:", m.errors), {
 					success: !1,
-					error: t
+					error: e
 				};
 			}
-			let s = e.data?.issueWorkspaceToken;
-			if (s?.success && s.token) {
-				let e = s.workspaceId || n;
-				return e && a.setCurrentWorkspaceId(e), a.setWorkspaceToken(s.token), {
+			let h = m.data?.issueWorkspaceToken;
+			if (h?.success && h.token) {
+				let i = e.getState();
+				if (o() !== f || e.getState().user?.id !== p || w() !== u || s.some((e, t) => e !== [
+					i.currentOrganizationId,
+					i.currentWorkspaceId,
+					i.currentProjectId
+				][t]) || d({
+					organizationId: t,
+					workspaceId: n ?? null
+				}) !== c || !x(h.token, {
+					organizationId: t,
+					workspaceId: n,
+					projectId: r,
+					workspaceWide: c
+				})) return {
+					success: !1,
+					error: "Workspace context changed during token issuance"
+				};
+				let l = h.workspaceId || n;
+				return l && a.setCurrentWorkspaceId(l), a.setWorkspaceToken(h.token), {
 					success: !0,
-					token: s.token,
-					resolvedWorkspaceId: e || void 0
+					token: h.token,
+					resolvedWorkspaceId: l || void 0
 				};
 			}
 			return {
 				success: !1,
-				error: s?.error?.message ?? "Failed to issue workspace token"
+				error: h?.error?.message ?? "Failed to issue workspace token"
 			};
 		} catch (e) {
 			let t = e instanceof Error ? e.message : "Failed to issue workspace token";
-			return console.error("Failed to issue workspace token:", e), F(t), {
+			return console.error("Failed to issue workspace token:", e), B(t), {
 				success: !1,
 				error: t
 			};
 		}
-	}, [G]), $ = n(async () => {
-		let t = e.getState(), n = b(), r = t.workspaceToken, i = t.currentWorkspaceId;
+	}, [Y]), $ = n(async () => {
+		let t = e.getState(), n = w(), r = t.workspaceToken, i = t.currentWorkspaceId, a = o(), s = t.user?.id, c = t.currentOrganizationId, u = t.currentProjectId, f = d({
+			organizationId: c,
+			workspaceId: i
+		}), p = () => {
+			let t = e.getState();
+			return o() === a && t.user?.id === s && w() === n && t.workspaceToken === r && t.currentOrganizationId === c && t.currentWorkspaceId === i && t.currentProjectId === u && d({
+				organizationId: c,
+				workspaceId: i
+			}) === f;
+		};
 		if (!n || !r || !i) return [];
-		t.setLoadingProjects(!0), F(null);
+		t.setLoadingProjects(!0), B(null);
 		try {
-			let e = await c({
+			let e = await l({
 				gateway: "workspace",
-				query: ee,
+				query: v,
 				authToken: n,
 				workspaceToken: r,
-				baseUrl: G
+				baseUrl: Y
 			});
+			if (!p()) return [];
 			if (e.errors?.length) {
 				let t = e.errors[0]?.message ?? "GraphQL error";
-				throw y(e.errors) ? new v(t) : (console.error("Failed to fetch projects:", e.errors), Error(t));
+				throw C(e.errors) ? new S(t) : (console.error("Failed to fetch projects:", e.errors), Error(t));
 			}
 			let i = e.data?.projects?.items ?? [];
 			return t.setProjects(i), i;
 		} catch (e) {
-			if (e instanceof v) return [];
+			if (e instanceof S) return [];
 			let t = e instanceof Error ? e.message : "Failed to fetch projects";
-			return console.error("Failed to fetch projects:", e), F(t), [];
+			return console.error("Failed to fetch projects:", e), B(t), [];
 		} finally {
 			t.setLoadingProjects(!1);
 		}
-	}, [G]), ie = n(async (t) => {
+	}, [Y]), se = n(async (t) => {
 		let n = e.getState();
 		return n.setCurrentWorkspaceId(null), n.setWorkspaceToken(null), n.setProjects([]), n.setCurrentProjectId(null), n.setCurrentOrganizationId(t.id), await Z(t.id);
-	}, [Z]), ae = n(async (t) => {
+	}, [Z]), ce = n(async (t) => {
 		let n = e.getState();
 		if (n.setCurrentProjectId(null), n.setProjects([]), !t.organizationId) return console.error("Workspace missing organizationId:", t), {
 			success: !1,
@@ -348,34 +390,45 @@ function T(s) {
 			success: !1,
 			error: r.error
 		};
-		let i = await $();
-		if (i.length === 0) {
-			let t = b(), r = e.getState().workspaceToken;
-			if (t && r) {
-				let e = await m({
-					authToken: t,
-					workspaceBaseUrl: G,
-					workspaceToken: r
-				});
-				e && (i = [e], n.setProjects(i));
-			}
-		}
-		return i.length > 0 && n.setCurrentProjectId(i[0].id), {
+		let i = e.getState(), a = o(), s = i.user?.id, c = w(), l = i.workspaceToken, u = i.currentProjectId, f = d({
+			organizationId: t.organizationId,
+			workspaceId: t.id
+		}), p = () => {
+			let n = e.getState();
+			return o() === a && n.user?.id === s && w() === c && n.workspaceToken === l && n.currentOrganizationId === t.organizationId && n.currentWorkspaceId === t.id && n.currentProjectId === u && d({
+				organizationId: t.organizationId,
+				workspaceId: t.id
+			}) === f;
+		}, m = await $();
+		return p() ? (m.length > 0 && !d({
+			organizationId: t.organizationId,
+			workspaceId: t.id
+		}) && n.setCurrentProjectId(m[0].id), {
 			success: !0,
-			projects: i
+			projects: m
+		}) : {
+			success: !1,
+			error: "Context changed during selection"
 		};
-	}, [
-		Q,
-		$,
-		G
-	]), oe = n((t) => {
+	}, [Q, $]), le = n((t) => {
 		let n = e.getState();
-		n.setCurrentProjectId(t.id), n.workspaceToken && !_(n.workspaceToken, {
+		u({
+			organizationId: n.currentOrganizationId,
+			workspaceId: n.currentWorkspaceId
+		}), n.setCurrentProjectId(t.id), n.workspaceToken && !x(n.workspaceToken, {
 			workspaceId: n.currentWorkspaceId,
 			organizationId: n.currentOrganizationId,
 			projectId: t.id
 		}) && n.setWorkspaceToken(null);
-	}, []);
+	}, []), ue = n(() => {
+		let t = e.getState(), n = {
+			organizationId: q.current,
+			workspaceId: K.current
+		};
+		if (!n.organizationId || !n.workspaceId || t.currentOrganizationId !== n.organizationId || t.currentWorkspaceId !== n.workspaceId) throw Error("Current workspace context required");
+		if (!f(n)) throw Error("Workspace-wide preference could not be saved");
+		t.setCurrentProjectId(null), t.setWorkspaceToken(null), O({ projectId: null });
+	}, [O]);
 	return r(() => {
 		let t = !1, n = (e) => {
 			let n = !1, r = !1, i = () => {
@@ -393,58 +446,59 @@ function T(s) {
 		}, r = n(() => $()), i = n(() => {
 			let t = e.getState().currentOrganizationId;
 			return t ? Z(t) : Promise.resolve();
-		}), a = E.onAny((t) => {
+		}), a = k.onAny((t) => {
 			let n = t.name;
-			if (S.has(n)) {
-				let n = w(t.payload), { currentWorkspaceId: i } = e.getState();
+			if (E.has(n)) {
+				let n = ee(t.payload), { currentWorkspaceId: i } = e.getState();
 				if (n && i && n !== i) return;
 				r();
 				return;
 			}
-			C.has(n) && i();
+			D.has(n) && i();
 		});
 		return () => {
 			t = !0, a();
 		};
 	}, [
-		E,
+		k,
 		$,
 		Z
 	]), {
-		organizations: D,
-		workspaces: A,
-		projects: N,
-		currentOrganizationId: O,
-		currentWorkspaceId: j,
-		currentProjectId: P,
-		currentOrganization: D.find((e) => e.id === O),
-		currentWorkspace: A.find((e) => e.id === j),
-		currentProject: N.find((e) => e.id === P),
-		workspaceToken: te,
-		isLoadingOrganizations: k,
-		isLoadingWorkspaces: M,
-		isLoadingProjects: ne,
-		isLoading: k || M || ne,
-		error: re,
+		organizations: A,
+		workspaces: N,
+		projects: L,
+		currentOrganizationId: j,
+		currentWorkspaceId: P,
+		currentProjectId: R,
+		currentOrganization: A.find((e) => e.id === j),
+		currentWorkspace: N.find((e) => e.id === P),
+		currentProject: L.find((e) => e.id === R),
+		workspaceToken: F,
+		isLoadingOrganizations: M,
+		isLoadingWorkspaces: I,
+		isLoadingProjects: z,
+		isLoading: M || I || z,
+		error: te,
 		fetchOrganizations: X,
 		fetchWorkspacesForOrg: Z,
 		issueWorkspaceToken: Q,
 		fetchProjects: $,
-		selectOrganization: ie,
-		selectWorkspace: ae,
-		selectProject: oe
+		selectOrganization: se,
+		selectWorkspace: ce,
+		selectProject: le,
+		selectWorkspaceWide: ue
 	};
 }
-function E(n) {
-	let i = e((e) => e.currentOrganizationId), a = e((e) => e.workspaces), o = e((e) => e.accessToken), s = e((e) => e.isLoadingWorkspaces), l = t(), u = n?.globalBaseUrl ?? l.globalBaseUrl, f = n?.disableWorkspaceSync ?? !1;
+function k(n) {
+	let i = e((e) => e.currentOrganizationId), a = e((e) => e.workspaces), o = e((e) => e.accessToken), s = e((e) => e.isLoadingWorkspaces), c = t(), u = n?.globalBaseUrl ?? c.globalBaseUrl, d = n?.disableWorkspaceSync ?? !1;
 	r(() => {
-		if (f || !i || !o || s) return;
+		if (d || !i || !o || s) return;
 		let t = a.some((e) => e.organizationId === i);
 		if (a.length > 0 && !t) {
 			let t = e.getState();
-			t.setLoadingWorkspaces(!0), c({
+			t.setLoadingWorkspaces(!0), l({
 				gateway: "global",
-				query: d,
+				query: g,
 				authToken: o,
 				baseUrl: u
 			}).then((e) => {
@@ -462,120 +516,153 @@ function E(n) {
 		o,
 		s,
 		u,
-		f
+		d
 	]);
 }
-function D(n) {
-	let a = e((e) => e.currentWorkspaceId), o = e((e) => e.currentOrganizationId), s = e((e) => e.workspaces), l = e((e) => e.projects), u = e((e) => e.currentProjectId), d = e((e) => e.workspaceToken), p = e((e) => e.accessToken), g = t(), v = n?.workspaceBaseUrl ?? g.workspaceBaseUrl, y = n?.disableProjectSync ?? !1, b = n?.skipProjectFetch ?? !1, x = i(!1), S = i(/* @__PURE__ */ new Map()), C = i(/* @__PURE__ */ new Map()), w = 3e4;
+function A(n) {
+	let s = e((e) => e.currentWorkspaceId), c = e((e) => e.currentOrganizationId), f = e((e) => e.workspaces), m = e((e) => e.projects), h = e((e) => e.currentProjectId), g = e((e) => e.workspaceToken), b = e((e) => e.accessToken), S = t(), C = n?.workspaceBaseUrl ?? S.workspaceBaseUrl, w = n?.disableProjectSync ?? !1, T = n?.skipProjectFetch ?? !1, E = i(!1), [D, ee] = a(0), O = i(null), k = i(/* @__PURE__ */ new Map()), A = i(/* @__PURE__ */ new Map()), j = 3e4;
 	r(() => {
-		if (y || !a || !p || x.current) return;
-		let t = C.current.get(a);
-		if (t && t.count >= 8 && Date.now() - t.lastFailureAt < w) return;
-		t && Date.now() - t.lastFailureAt >= w && C.current.delete(a);
-		let n = s.find((e) => e.id === a);
-		if (n && o && n.organizationId !== o) return;
-		let r = n?.organizationId ?? o;
+		if (w || !s || !b || E.current) return;
+		let t = A.current.get(s);
+		if (t && t.count >= 8 && Date.now() - t.lastFailureAt < j) return;
+		t && Date.now() - t.lastFailureAt >= j && A.current.delete(s);
+		let n = f.find((e) => e.id === s);
+		if (n && c && n.organizationId !== c) return;
+		let r = n?.organizationId ?? c;
 		if (!r) return;
-		let i = e.getState(), g = !d || h(d) || !_(d, {
-			workspaceId: a,
-			organizationId: o,
-			projectId: u
-		}), T = l.some((e) => e.workspaceId === a);
-		if (T && !g) {
-			if (!i.currentProjectId) {
-				let e = l.find((e) => e.workspaceId === a);
+		let i = e.getState();
+		h && p("project") === h && p("workspace") === s && p("org") === r && u({
+			organizationId: r,
+			workspaceId: s
+		});
+		let a = o(), S = i.user?.id, D = d({
+			organizationId: r,
+			workspaceId: s
+		});
+		if (D && i.currentProjectId) {
+			i.setCurrentProjectId(null), i.setWorkspaceToken(null);
+			return;
+		}
+		let M = !g || y(g) || !x(g, {
+			workspaceId: s,
+			organizationId: c,
+			projectId: h,
+			workspaceWide: D
+		}), N = JSON.stringify([
+			a,
+			S,
+			b,
+			r,
+			s
+		]), P = m.some((e) => e.workspaceId === s) || O.current?.scopeKey === N && O.current.projects === m;
+		if (P && !M) {
+			if (!i.currentProjectId && !D) {
+				let e = m.find((e) => e.workspaceId === s);
 				e && i.setCurrentProjectId(e.id);
 			}
 			return;
 		}
-		let E = async () => {
-			x.current = !0, i.setLoadingProjects(!0);
+		let F = () => {
+			let t = e.getState();
+			return t.accessToken === b && t.user?.id === S && o() === a && t.currentOrganizationId === r && t.currentWorkspaceId === s && t.currentProjectId === h && d({
+				organizationId: r,
+				workspaceId: s
+			}) === D;
+		}, I = async () => {
+			E.current = !0, i.setLoadingProjects(!0);
 			let t = !1;
 			try {
-				let e = d;
-				if (g) {
-					let t = await c({
+				let n = g;
+				if (M) {
+					let e = await l({
 						gateway: "workspace",
-						query: f,
+						query: _,
 						variables: { input: {
 							organizationId: r,
-							workspaceId: a,
-							...u ? { projectId: u } : {}
+							workspaceId: s,
+							...h ? { projectId: h } : {}
 						} },
-						authToken: p,
-						baseUrl: v,
-						tenantId: s.find((e) => e.id === a)?.tenantId
+						authToken: b,
+						baseUrl: C,
+						tenantId: f.find((e) => e.id === s)?.tenantId
 					});
-					if (t.data?.issueWorkspaceToken?.success && t.data.issueWorkspaceToken.token) e = t.data.issueWorkspaceToken.token, i.setWorkspaceToken(e);
-					else return;
+					if (e.data?.issueWorkspaceToken?.success && e.data.issueWorkspaceToken.token) {
+						if (n = e.data.issueWorkspaceToken.token, !F() || !x(n, {
+							workspaceId: s,
+							organizationId: r,
+							projectId: h,
+							workspaceWide: D
+						})) return;
+						i.setWorkspaceToken(n);
+					} else return;
 				}
-				if (e && !T && !b) {
-					let t = await c({
+				if (n && !P && !T) {
+					let t = await l({
 						gateway: "workspace",
-						query: ee,
-						authToken: p,
-						workspaceToken: e,
-						baseUrl: v
+						query: v,
+						authToken: b,
+						workspaceToken: n,
+						baseUrl: C
 					});
-					if (t.errors?.length) return;
-					let n = t.data?.projects?.items ?? [];
-					if (n.length === 0) {
-						let t = await m({
-							authToken: p,
-							workspaceBaseUrl: v,
-							workspaceToken: e
-						});
-						if (t) n = [t];
-						else return;
-					}
-					i.setProjects(n), n.length > 0 && !i.currentProjectId && i.setCurrentProjectId(n[0].id);
+					if (!F() || t.errors?.length) return;
+					let a = t.data?.projects?.items ?? [];
+					O.current = a.length === 0 ? {
+						scopeKey: N,
+						projects: a
+					} : null, i.setProjects(a), h && !a.some((e) => e.id === h) && (i.setCurrentProjectId(null), i.setWorkspaceToken(null)), a.length > 0 && !e.getState().currentProjectId && !d({
+						organizationId: r,
+						workspaceId: s
+					}) && i.setCurrentProjectId(a[0].id);
 				}
 				t = !0;
 			} catch {} finally {
-				i.setLoadingProjects(!1), x.current = !1;
-				let n = C.current;
-				if (t) {
-					n.delete(a);
-					let e = S.current.get(a);
-					e && (clearTimeout(e), S.current.delete(a));
-				} else {
-					let t = (n.get(a)?.count ?? 0) + 1;
-					if (n.set(a, {
+				i.setLoadingProjects(!1), E.current = !1;
+				let n = F();
+				n || ee((e) => e + 1);
+				let r = A.current;
+				if (n && t) {
+					r.delete(s);
+					let e = k.current.get(s);
+					e && (clearTimeout(e), k.current.delete(s));
+				} else if (n) {
+					let t = (r.get(s)?.count ?? 0) + 1;
+					if (r.set(s, {
 						count: t,
 						lastFailureAt: Date.now()
 					}), t < 8) {
-						let n = S.current.get(a);
+						let n = k.current.get(s);
 						n && clearTimeout(n);
 						let r = Math.min(1e3 * 2 ** (t - 1), 8e3), i = setTimeout(() => {
-							S.current.delete(a);
+							k.current.delete(s);
 							let t = e.getState();
-							t.currentWorkspaceId === a && !t.projects.some((e) => e.workspaceId === a) && !x.current && E();
+							F() && t.currentWorkspaceId === s && !t.projects.some((e) => e.workspaceId === s) && !E.current && I();
 						}, r);
-						S.current.set(a, i);
+						k.current.set(s, i);
 					}
 				}
 			}
 		};
-		E();
+		I();
 	}, [
-		a,
-		o,
+		D,
 		s,
-		l,
-		u,
-		d,
-		p,
-		v,
-		y,
-		b
+		c,
+		f,
+		m,
+		h,
+		g,
+		b,
+		C,
+		w,
+		T
 	]), r(() => {
-		let e = S.current;
+		let e = k.current;
 		return () => {
 			e.forEach((e) => clearTimeout(e)), e.clear();
 		};
 	}, []);
 }
 //#endregion
-export { T as useContextSwitcherData, D as useProjectSyncEffect, E as useWorkspaceSyncEffect };
+export { O as useContextSwitcherData, A as useProjectSyncEffect, k as useWorkspaceSyncEffect };
 
 //# sourceMappingURL=useContextSwitcherData.js.map