npm - @burdenoff/microfe-devportal - Versions diffs - 2026.1110.2 → 2026.1112.1 - Mend

@burdenoff/microfe-devportal 2026.1110.2 → 2026.1112.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (11) hide show

package/dist/devportal/hooks/permissionRules.d.ts ADDED Viewed

	@@ -0,0 +1 @@
1	+ export declare function isStrictPermission(permission: string): boolean;

package/dist/devportal/hooks/permissionRules.js ADDED Viewed

@@ -0,0 +1,13 @@
+// src/devportal/hooks/permissionRules.ts
+var e = /* @__PURE__ */ new Set([
+	"devportal-revenue",
+	"devportal-payout",
+	"devportal-analytics",
+	"devportal-audit-log"
+]);
+function t(t) {
+	return e.has(t.split(":")[0] ?? "");
+}
+export { t as isStrictPermission };
+//# sourceMappingURL=permissionRules.js.map

package/dist/devportal/hooks/permissionRules.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"permissionRules.js","names":["STRICT_RESOURCES","isStrictPermission","permission"],"sources":["../../../src/devportal/hooks/permissionRules.ts"],"sourcesContent":["/**\n * Resource types whose actions must never fall back to \"allowed\" in the\n * FluidGrids variant: revenue, payouts, analytics and the audit log.\n */\nconst STRICT_RESOURCES: ReadonlySet<string> = new Set([\n \"devportal-revenue\",\n \"devportal-payout\",\n \"devportal-analytics\",\n \"devportal-audit-log\",\n]);\n\nexport function isStrictPermission(permission: string): boolean {\n return STRICT_RESOURCES.has(permission.split(\":\")[0] ?? \"\");\n}\n"],"mappings":";AAIA,IAAMA,oBAAwC,IAAI,IAAI;CACpD;CACA;CACA;CACA;AACF,CAAC;AAED,SAAgBC,EAAmB,GAA6B;CAC9D,OAAOD,EAAiB,IAAIE,EAAW,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE;AAC5D"}

package/dist/devportal/hooks/usePermission.js CHANGED Viewed

@@ -1,11 +1,14 @@
-import { usePermissions as e } from "@burdenoff/fe-libs/shared/providers/shell";
+import { useIsFluidgridsVariant as e } from "../providers/DevportalProvider.js";
+import { isStrictPermission as t } from "./permissionRules.js";
+import { usePermissions as n } from "@burdenoff/fe-libs/shared/providers/shell";
 // src/devportal/hooks/usePermission.ts
-var t = (t) => {
+var r = (r) => {
+	let i = e();
 	try {
-		let n = e(), r = n.isLoading, i = n.permissions?.permissions?.some((e) => e.resourceType === "rbac" && e.level === "ADMIN") ?? !1, a = t.split(":")[0], o = n.permissions?.permissions?.some((e) => e.resourceType === a && e.level === "ADMIN") ?? !1, s = n.hasPermission, c = n.permissions?.permissions?.some((e) => e.resourceType.startsWith("devportal-")) ?? !1, l = !r && !!n.permissions && !c;
+		let e = n(), a = e.isLoading, o = e.permissions?.permissions?.some((e) => e.resourceType === "rbac" && e.level === "ADMIN") ?? !1, s = r.split(":")[0], c = e.permissions?.permissions?.some((e) => e.resourceType === s && e.level === "ADMIN") ?? !1, l = e.hasPermission, u = e.permissions?.permissions?.some((e) => e.resourceType.startsWith("devportal-")) ?? !1, d = !a && !!e.permissions && !u;
 		return {
-			allowed: i || o || !s || s(t) || l,
-			loading: r
+			allowed: i && t(r) ? !a && (o || c || (l ? l(r) : !1)) : o || c || !l || l(r) || d,
+			loading: a
 		};
 	} catch {
 		return {
@@ -14,6 +17,6 @@ var t = (t) => {
 		};
 	}
 };
-export { t as useDevportalPermission };
+export { r as useDevportalPermission };
 //# sourceMappingURL=usePermission.js.map

package/dist/devportal/hooks/usePermission.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"usePermission.js","names":["useDevportalPermission","ctx","usePermissions","isLoading","isRbacAdmin","entry","resourceType","permission","hasResourceAdmin","has","hasAnyDevportalPermission","noDevportalInfoYet"],"sources":["../../../src/devportal/hooks/usePermission.ts"],"sourcesContent":["import { usePermissions } from \"@burdenoff/fe-libs/shared/providers/shell\";\nimport type { DevportalPermission } from \"../constants/permissions\";\n\ninterface PermissionResult {\n /** True when the actor has the permission (or is RBAC admin / standalone). /\n allowed: boolean;\n /* True while the permissions request is still in flight. /\n loading: boolean;\n}\n\n/\n Button-level permission gate for devportal mutations.\n \n Wraps the shell `usePermissions` hook with the same standalone /\n * admin-bypass semantics as `PermissionGuard`. Use to gate individual\n * mutation buttons (Create / Edit / Delete / Publish / Submit / Approve /\n * Reject / Generate) so disabled state is server-driven, not just\n * page-level.\n \n Standalone mode (no shell provider) -> `allowed: true` so dev mode\n * stays usable. The page-level `PermissionGuard` is the coarse-grained\n * gate; this hook is the fine-grained one.\n */\nexport const useDevportalPermission = (\n permission: DevportalPermission,\n): PermissionResult => {\n try {\n const ctx = usePermissions();\n const isLoading = ctx.isLoading;\n const isRbacAdmin =\n ctx.permissions?.permissions?.some(\n (entry) => entry.resourceType === \"rbac\" && entry.level === \"ADMIN\",\n ) ?? false;\n\n // Extract the resource type from the permission string (e.g. \"devportal-app:submit\" → \"devportal-app\")\n const resourceType = permission.split(\":\")[0];\n const hasResourceAdmin =\n ctx.permissions?.permissions?.some(\n (entry) =>\n entry.resourceType === resourceType && entry.level === \"ADMIN\",\n ) ?? false;\n\n const has = ctx.hasPermission as (p: DevportalPermission) => boolean;\n\n // If the user is authenticated but the permissions API returned nothing about devportal\n // resources at all, fall back to true — the backend enforces real auth.\n const hasAnyDevportalPermission =\n ctx.permissions?.permissions?.some((entry) =>\n entry.resourceType.startsWith(\"devportal-\"),\n ) ?? false;\n const isAuthenticated = !isLoading && !!ctx.permissions;\n const noDevportalInfoYet = isAuthenticated && !hasAnyDevportalPermission;\n\n return {\n allowed:\n isRbacAdmin \|\|\n hasResourceAdmin \|\|\n (has ? has(permission) : true) \|\|\n noDevportalInfoYet,\n loading: isLoading,\n };\n } catch {\n // Standalone / dev mode: no shell provider mounted.\n return { allowed: true, loading: false };\n }\n};\n"],"mappings":"~~;;AAuBA~~,IAAaA,KACX,MACqB;CACrB,IAAI;EACF,IAAMC,IAAMC,EAAe,GACrBC,IAAYF,EAAI,WAChBG,IACJH,EAAI,aAAa,aAAa,MAC3B,MAAUI,EAAM,iBAAiB,UAAUA,EAAM,UAAU,OAC9D,KAAK,IAGDC,IAAeC,EAAW,MAAM,GAAG,CAAC,CAAC,IACrCC,IACJP,EAAI,aAAa,aAAa,MAC3B,MACCI,EAAM,iBAAiBC,KAAgBD,EAAM,UAAU,OAC3D,KAAK,IAEDI,IAAMR,EAAI,eAIVS,IACJT,EAAI,aAAa,aAAa,MAAM,MAClCI,EAAM,aAAa,WAAW,YAAY,CAC5C,KAAK,IAEDM,IADkB,CAACR,KAAa,CAAC,CAACF,EAAI,eACE,CAACS;~~EAE~~/C,OAAO;GACL,~~SACEN~~,KACAI,KACC,MAAMC,EAAIF,CAAU,KACrBI;~~GACF~~,SAASR;EACX;CACF,QAAQ;EAEN,OAAO;GAAE,SAAS;GAAM,SAAS;EAAM;CACzC;AACF"}
1	+ {"version":3,"file":"usePermission.js","names":["useDevportalPermission","isFluidgrids","useIsFluidgridsVariant","ctx","usePermissions","isLoading","isRbacAdmin","entry","resourceType","permission","hasResourceAdmin","has","hasAnyDevportalPermission","noDevportalInfoYet","isStrictPermission"],"sources":["../../../src/devportal/hooks/usePermission.ts"],"sourcesContent":["import { usePermissions } from \"@burdenoff/fe-libs/shared/providers/shell\";\nimport type { DevportalPermission } from \"../constants/permissions\";\nimport { useIsFluidgridsVariant } from \"../providers/DevportalProvider\";\nimport { isStrictPermission } from \"./permissionRules\";\n\ninterface PermissionResult {\n /** True when the actor has the permission (or is RBAC admin / standalone). /\n allowed: boolean;\n /* True while the permissions request is still in flight. /\n loading: boolean;\n}\n\n/\n Button-level permission gate for devportal mutations.\n \n Wraps the shell `usePermissions` hook with the same standalone /\n * admin-bypass semantics as `PermissionGuard`. Use to gate individual\n * mutation buttons (Create / Edit / Delete / Publish / Submit / Approve /\n * Reject / Generate) so disabled state is server-driven, not just\n * page-level.\n \n Standalone mode (no shell provider) -> `allowed: true` so dev mode\n * stays usable. The page-level `PermissionGuard` is the coarse-grained\n * gate; this hook is the fine-grained one.\n */\nexport const useDevportalPermission = (\n permission: DevportalPermission,\n): PermissionResult => {\n const isFluidgrids = useIsFluidgridsVariant();\n try {\n const ctx = usePermissions();\n const isLoading = ctx.isLoading;\n const isRbacAdmin =\n ctx.permissions?.permissions?.some(\n (entry) => entry.resourceType === \"rbac\" && entry.level === \"ADMIN\",\n ) ?? false;\n\n // Extract the resource type from the permission string (e.g. \"devportal-app:submit\" → \"devportal-app\")\n const resourceType = permission.split(\":\")[0];\n const hasResourceAdmin =\n ctx.permissions?.permissions?.some(\n (entry) =>\n entry.resourceType === resourceType && entry.level === \"ADMIN\",\n ) ?? false;\n\n const has = ctx.hasPermission as (p: DevportalPermission) => boolean;\n\n // If the user is authenticated but the permissions API returned nothing about devportal\n // resources at all, fall back to true — the backend enforces real auth.\n const hasAnyDevportalPermission =\n ctx.permissions?.permissions?.some((entry) =>\n entry.resourceType.startsWith(\"devportal-\"),\n ) ?? false;\n const isAuthenticated = !isLoading && !!ctx.permissions;\n const noDevportalInfoYet = isAuthenticated && !hasAnyDevportalPermission;\n\n // FluidGrids: money, analytics and audit-log actions check the permission the\n // backend defines instead of defaulting to allowed when it cannot tell (BOFF-11863).\n const strict = isFluidgrids && isStrictPermission(permission);\n\n return {\n allowed: strict\n ? !isLoading &&\n (isRbacAdmin \|\| hasResourceAdmin \|\| (has ? has(permission) : false))\n : isRbacAdmin \|\|\n hasResourceAdmin \|\|\n (has ? has(permission) : true) \|\|\n noDevportalInfoYet,\n loading: isLoading,\n };\n } catch {\n // Standalone / dev mode: no shell provider mounted.\n return { allowed: true, loading: false };\n }\n};\n"],"mappings":";;;;AAyBA,IAAaA,KACX,MACqB;CACrB,IAAMC,IAAeC,EAAuB;CAC5C,IAAI;EACF,IAAMC,IAAMC,EAAe,GACrBC,IAAYF,EAAI,WAChBG,IACJH,EAAI,aAAa,aAAa,MAC3B,MAAUI,EAAM,iBAAiB,UAAUA,EAAM,UAAU,OAC9D,KAAK,IAGDC,IAAeC,EAAW,MAAM,GAAG,CAAC,CAAC,IACrCC,IACJP,EAAI,aAAa,aAAa,MAC3B,MACCI,EAAM,iBAAiBC,KAAgBD,EAAM,UAAU,OAC3D,KAAK,IAEDI,IAAMR,EAAI,eAIVS,IACJT,EAAI,aAAa,aAAa,MAAM,MAClCI,EAAM,aAAa,WAAW,YAAY,CAC5C,KAAK,IAEDM,IADkB,CAACR,KAAa,CAAC,CAACF,EAAI,eACE,CAACS;EAM/C,OAAO;GACL,SAHaX,KAAgBa,EAAmBL,CAAU,IAItD,CAACJ,MACAC,KAAeI,MAAqBC,IAAMA,EAAIF,CAAU,IAAI,OAC7DH,KACAI,KACC,MAAMC,EAAIF,CAAU,KACrBI;GACJ,SAASR;EACX;CACF,QAAQ;EAEN,OAAO;GAAE,SAAS;GAAM,SAAS;EAAM;CACzC;AACF"}

package/dist/devportal/providers/DevportalProvider.d.ts CHANGED Viewed

@@ -16,6 +16,11 @@ type DevportalContextValue = DevportalRootProps & {
     activePhysicalOrgId: string | null;
     setActivePhysicalOrgId: (id: string | null) => void;
 };
+/**
+ * True when the host opted into the FluidGrids variant. Safe outside a provider
+ * (standalone/tests): returns false instead of throwing.
+ */
+export declare const useIsFluidgridsVariant: () => boolean;
 /**
  * Hook to access Developer Portal context
  */

package/dist/devportal/providers/DevportalProvider.js CHANGED Viewed

@@ -4,54 +4,55 @@ import { MutationCache as a, QueryClient as o, QueryClientProvider as s } from "
 import { PermissionProvider as c } from "@burdenoff/fe-libs/shared/providers/shell";
 import { jsx as l } from "react/jsx-runtime";
 // src/devportal/providers/DevportalProvider.tsx
-var u = "devportal_active_org_v1", d = "devportal_active_physical_org_v1", f = e(null), p = () => {
+var u = "devportal_active_org_v1", d = "devportal_active_physical_org_v1", f = e(null), p = () => t(f)?.variant === "fluidgrids", m = () => {
 	let e = t(f);
 	if (!e) throw Error("useDevportal must be used within DevportalProvider");
 	return e;
-}, m = ({ children: e, basePath: t, productId: p, navigate: m, currentUser: h, tenantId: g, workspaceId: _, apiGatewayUrl: v, workspacesGatewayUrl: y, authToken: b, workspaceToken: x, getWorkspaceToken: S, registerNavItems: C, registerFooterItems: w, onApplicationSelect: T, onOrganizationSelect: E }) => {
-	let [D, O] = r(() => {
+}, h = ({ children: e, basePath: t, productId: p, variant: m, navigate: h, currentUser: g, tenantId: _, workspaceId: v, apiGatewayUrl: y, workspacesGatewayUrl: b, authToken: x, workspaceToken: S, getWorkspaceToken: C, registerNavItems: w, registerFooterItems: T, onApplicationSelect: E, onOrganizationSelect: D }) => {
+	let [O, k] = r(() => {
 		try {
 			return localStorage.getItem(u) ?? null;
 		} catch {
 			return null;
 		}
-	}), k = (e) => {
-		O(e);
+	}), A = (e) => {
+		k(e);
 		try {
 			e ? localStorage.setItem(u, e) : localStorage.removeItem(u);
 		} catch {}
-	}, [A, j] = r(() => {
+	}, [j, M] = r(() => {
 		try {
 			return localStorage.getItem(d) ?? null;
 		} catch {
 			return null;
 		}
-	}), M = {
+	}), N = {
 		basePath: t,
 		productId: p,
-		navigate: m,
-		currentUser: h,
-		tenantId: g,
-		workspaceId: _,
-		apiGatewayUrl: v,
-		workspacesGatewayUrl: y,
-		authToken: b,
-		workspaceToken: x,
-		getWorkspaceToken: S,
-		registerNavItems: C,
-		registerFooterItems: w,
-		onApplicationSelect: T,
-		onOrganizationSelect: E,
-		activeOrgId: D,
-		setActiveOrgId: k,
-		activePhysicalOrgId: A,
+		variant: m,
+		navigate: h,
+		currentUser: g,
+		tenantId: _,
+		workspaceId: v,
+		apiGatewayUrl: y,
+		workspacesGatewayUrl: b,
+		authToken: x,
+		workspaceToken: S,
+		getWorkspaceToken: C,
+		registerNavItems: w,
+		registerFooterItems: T,
+		onApplicationSelect: E,
+		onOrganizationSelect: D,
+		activeOrgId: O,
+		setActiveOrgId: A,
+		activePhysicalOrgId: j,
 		setActivePhysicalOrgId: (e) => {
-			j(e);
+			M(e);
 			try {
 				e ? localStorage.setItem(d, e) : localStorage.removeItem(d);
 			} catch {}
 		}
-	}, N = n(() => {
+	}, P = n(() => {
 		let e = new o({
 			mutationCache: new a({ onSuccess: () => {
 				e.invalidateQueries();
@@ -63,19 +64,19 @@ var u = "devportal_active_org_v1", d = "devportal_active_physical_org_v1", f = e
 			} }
 		});
 		return e;
-	}, []), P = !!t, F = /* @__PURE__ */ l(s, {
-		client: N,
+	}, []), F = !!t, I = /* @__PURE__ */ l(s, {
+		client: P,
 		children: /* @__PURE__ */ l(f.Provider, {
-			value: M,
-			children: P ? /* @__PURE__ */ l(c, {
-				scopeId: g ?? null,
+			value: N,
+			children: F ? /* @__PURE__ */ l(c, {
+				scopeId: _ ?? null,
 				gateway: "global",
 				children: e
 			}) : e
 		})
 	});
-	return P ? F : /* @__PURE__ */ l(i, { children: F });
+	return F ? I : /* @__PURE__ */ l(i, { children: I });
 };
-export { m as DevportalProvider, p as useDevportal };
+export { h as DevportalProvider, m as useDevportal, p as useIsFluidgridsVariant };
 //# sourceMappingURL=DevportalProvider.js.map

package/dist/devportal/providers/DevportalProvider.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"DevportalProvider.js","names":["ORG_STORAGE_KEY","PHYSICAL_ORG_STORAGE_KEY","DevportalContext","createContext","~~useDevportal~~","~~context~~","~~useContext~~","DevportalProvider","activeOrgId","setActiveOrgIdState","useState","setActiveOrgId","id","activePhysicalOrgId","setActivePhysicalOrgIdState","contextValue","queryClient","useMemo","client","QueryClient","MutationCache","isIntegrated","basePath","content","QueryClientProvider","PermissionProvider","tenantId","children","BrowserRouter"],"sources":["../../../src/devportal/providers/DevportalProvider.tsx"],"sourcesContent":["import type { FC, PropsWithChildren } from \"react\";\nimport { createContext, useContext, useMemo, useState } from \"react\";\nimport { BrowserRouter } from \"react-router\";\nimport {\n MutationCache,\n QueryClient,\n QueryClientProvider,\n} from \"@tanstack/react-query\";\nimport { PermissionProvider } from \"@burdenoff/fe-libs/shared/providers/shell\";\nimport type { DevportalRootProps } from \"../types\";\n\nconst ORG_STORAGE_KEY = \"devportal_active_org_v1\";\nconst PHYSICAL_ORG_STORAGE_KEY = \"devportal_active_physical_org_v1\";\n\n/*\n Context value for Developer Portal microfrontend.\n * Extends root props with org-scoping state shared across all devportal pages.\n /\ntype DevportalContextValue = DevportalRootProps & {\n activeOrgId: string \| null;\n setActiveOrgId: (id: string \| null) => void;\n /\n The seller portal's currently-selected PHYSICAL-kind org. Kept separate\n * from activeOrgId (which the rest of devportal treats as DIGITAL) so\n * switching between the seller portal and the regular devportal never\n * mixes up which kind of org is \"active\" — see DeveloperOrgKind (BOFF-7285).\n /\n activePhysicalOrgId: string \| null;\n setActivePhysicalOrgId: (id: string \| null) => void;\n};\n\nconst DevportalContext = createContext<DevportalContextValue \| null>(null);\n\n/\n Hook to access Developer Portal context\n /\nexport const useDevportal = () => {\n const context = useContext(DevportalContext);\n if (!context) {\n throw new Error(\"useDevportal must be used within DevportalProvider\");\n }\n return context;\n};\n\n/\n Provider component for Developer Portal microfrontend\n * Sets up routing, context, and React Query client\n /\nexport const DevportalProvider: FC<PropsWithChildren<DevportalRootProps>> = ({\n children,\n basePath,\n productId,\n navigate,\n currentUser,\n tenantId,\n workspaceId,\n apiGatewayUrl,\n workspacesGatewayUrl,\n authToken,\n workspaceToken,\n getWorkspaceToken,\n registerNavItems,\n registerFooterItems,\n onApplicationSelect,\n onOrganizationSelect,\n}) => {\n const [activeOrgId, setActiveOrgIdState] = useState<string \| null>(() => {\n try {\n return localStorage.getItem(ORG_STORAGE_KEY) ?? null;\n } catch {\n return null;\n }\n });\n\n const setActiveOrgId = (id: string \| null) => {\n setActiveOrgIdState(id);\n try {\n if (id) {\n localStorage.setItem(ORG_STORAGE_KEY, id);\n } else {\n localStorage.removeItem(ORG_STORAGE_KEY);\n }\n } catch {\n // ignore storage errors\n }\n };\n\n const [activePhysicalOrgId, setActivePhysicalOrgIdState] = useState<\n string \| null\n >(() => {\n try {\n return localStorage.getItem(PHYSICAL_ORG_STORAGE_KEY) ?? null;\n } catch {\n return null;\n }\n });\n\n const setActivePhysicalOrgId = (id: string \| null) => {\n setActivePhysicalOrgIdState(id);\n try {\n if (id) {\n localStorage.setItem(PHYSICAL_ORG_STORAGE_KEY, id);\n } else {\n localStorage.removeItem(PHYSICAL_ORG_STORAGE_KEY);\n }\n } catch {\n // ignore storage errors\n }\n };\n\n const contextValue: DevportalContextValue = {\n basePath,\n productId,\n navigate,\n currentUser,\n tenantId,\n workspaceId,\n apiGatewayUrl,\n workspacesGatewayUrl,\n authToken,\n workspaceToken,\n getWorkspaceToken,\n registerNavItems,\n registerFooterItems,\n onApplicationSelect,\n onOrganizationSelect,\n activeOrgId,\n setActiveOrgId,\n activePhysicalOrgId,\n setActivePhysicalOrgId,\n };\n\n // Create QueryClient instance (memoized to avoid recreation on re-renders)\n const queryClient = useMemo(() => {\n const client = new QueryClient({\n mutationCache: new MutationCache({\n onSuccess: () => {\n void client.invalidateQueries();\n },\n }),\n defaultOptions: {\n queries: {\n retry: 1,\n refetchOnWindowFocus: false,\n staleTime: 5 60 * 1000, // 5 minutes\n },\n },\n });\n return client;\n }, []);\n\n // PermissionProvider requires the shell's AuthProvider — only mount it in integrated mode.\n // In standalone/dev mode (MemoryRouter path), there's no AuthProvider, so we skip it\n // and pages will use a fallback that allows access (dev-only behaviour).\n const isIntegrated = !!basePath;\n\n // Wrap content with QueryClientProvider\n const content = (\n <QueryClientProvider client={queryClient}>\n <DevportalContext.Provider value={contextValue}>\n {isIntegrated ? (\n <PermissionProvider scopeId={tenantId ?? null} gateway=\"global\">\n {children}\n </PermissionProvider>\n ) : (\n children\n )}\n </DevportalContext.Provider>\n </QueryClientProvider>\n );\n\n // When integrated into a shell (basePath provided), the shell already has a router\n // so we don't create another one. When standalone (no basePath), use BrowserRouter.\n if (isIntegrated) {\n return content;\n }\n\n // Standalone mode: create BrowserRouter for independent operation\n return <BrowserRouter>{content}</BrowserRouter>;\n};\n"],"mappings":";;;;;;AAWA,IAAMA,IAAkB,2BAClBC,IAA2B,oCAmB3BC,IAAmBC,EAA4C,IAAI,~~GAK5DC~~,UAAqB;CAChC,IAAMC,~~IAAUC~~,~~EAAWJ~~,CAAgB;CAC3C,IAAI,~~CAACG~~,GACH,MAAU,MAAM,oDAAoD;CAEtE,OAAOA;AACT,~~GAMaE~~,KAAgE,EAC3E,aACA,aACA,cACA,aACA,gBACA,aACA,gBACA,kBACA,yBACA,cACA,mBACA,sBACA,qBACA,wBACA,wBACA,8BACI;CACJ,IAAM,CAACC,GAAaC,KAAuBC,QAA8B;EACvE,IAAI;GACF,OAAO,aAAa,~~QAAQV~~,CAAe,KAAK;EAClD,QAAQ;GACN,OAAO;EACT;CACF,CAAC,~~GAEKW~~,KAAkB,MAAsB;EAC5C,EAAoBC,CAAE;EACtB,IAAI;GACF,AAAIA,IACF,aAAa,~~QAAQZ~~,~~GAAiBY~~,CAAE,IAExC,aAAa,~~WAAWZ~~,CAAe;EAE3C,QAAQ,CAER;CACF,GAEM,~~CAACa~~,GAAqBC,KAA+BJ,QAEnD;EACN,IAAI;GACF,OAAO,aAAa,~~QAAQT~~,CAAwB,KAAK;EAC3D,QAAQ;GACN,OAAO;EACT;CACF,CAAC,~~GAeKc~~,IAAsC;EAC1C;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,~~yBAhC8B~~,MAAsB;GACpD,EAA4BH,CAAE;GAC9B,IAAI;IACF,AAAIA,IACF,aAAa,~~QAAQX~~,~~GAA0BW~~,CAAE,IAEjD,aAAa,~~WAAWX~~,CAAwB;GAEpD,QAAQ,CAER;EACF;~~CAsBA~~,~~GAGMe~~,IAAcC,QAAc;EAChC,IAAMC,IAAS,IAAIC,EAAY;GAC7B,eAAe,IAAIC,EAAc,EAC/B,iBAAiB;IACf,EAAY,kBAAkB;GAChC,EACF,CAAC;GACD,gBAAgB,EACd,SAAS;IACP,OAAO;IACP,sBAAsB;IACtB,WAAW;GACb,EACF;EACF,CAAC;EACD,OAAOF;CACT,GAAG,CAAC,CAAC,GAKCG,IAAe,CAAC,CAACC,GAGjBC,IACJ,kBAACC,GAAD;EAAqB,QAAQR;EAC3B,UAAA,~~kBAACd~~,EAAiB,UAAlB;GAA2B,~~OAAOa~~;GAC/B,UAAAM,IACC,kBAACI,GAAD;IAAoB,SAASC,KAAY;IAAM,SAAQ;IACpD;GACiB,CAAA,IAEpBC;EAEuB,CAAA;CACR,CAAA;CAUvB,OALIN,IACKE,IAIF,kBAACK,GAAD,EAAA,UAAgBL,EAAuB,CAAA;AAChD"}
1	+ {"version":3,"file":"DevportalProvider.js","names":["ORG_STORAGE_KEY","PHYSICAL_ORG_STORAGE_KEY","DevportalContext","createContext","useIsFluidgridsVariant","useContext","useDevportal","context","DevportalProvider","activeOrgId","setActiveOrgIdState","useState","setActiveOrgId","id","activePhysicalOrgId","setActivePhysicalOrgIdState","contextValue","queryClient","useMemo","client","QueryClient","MutationCache","isIntegrated","basePath","content","QueryClientProvider","PermissionProvider","tenantId","children","BrowserRouter"],"sources":["../../../src/devportal/providers/DevportalProvider.tsx"],"sourcesContent":["import type { FC, PropsWithChildren } from \"react\";\nimport { createContext, useContext, useMemo, useState } from \"react\";\nimport { BrowserRouter } from \"react-router\";\nimport {\n MutationCache,\n QueryClient,\n QueryClientProvider,\n} from \"@tanstack/react-query\";\nimport { PermissionProvider } from \"@burdenoff/fe-libs/shared/providers/shell\";\nimport type { DevportalRootProps } from \"../types\";\n\nconst ORG_STORAGE_KEY = \"devportal_active_org_v1\";\nconst PHYSICAL_ORG_STORAGE_KEY = \"devportal_active_physical_org_v1\";\n\n/*\n Context value for Developer Portal microfrontend.\n * Extends root props with org-scoping state shared across all devportal pages.\n /\ntype DevportalContextValue = DevportalRootProps & {\n activeOrgId: string \| null;\n setActiveOrgId: (id: string \| null) => void;\n /\n The seller portal's currently-selected PHYSICAL-kind org. Kept separate\n * from activeOrgId (which the rest of devportal treats as DIGITAL) so\n * switching between the seller portal and the regular devportal never\n * mixes up which kind of org is \"active\" — see DeveloperOrgKind (BOFF-7285).\n /\n activePhysicalOrgId: string \| null;\n setActivePhysicalOrgId: (id: string \| null) => void;\n};\n\nconst DevportalContext = createContext<DevportalContextValue \| null>(null);\n\n/\n True when the host opted into the FluidGrids variant. Safe outside a provider\n * (standalone/tests): returns false instead of throwing.\n /\nexport const useIsFluidgridsVariant = (): boolean =>\n useContext(DevportalContext)?.variant === \"fluidgrids\";\n\n/\n Hook to access Developer Portal context\n /\nexport const useDevportal = () => {\n const context = useContext(DevportalContext);\n if (!context) {\n throw new Error(\"useDevportal must be used within DevportalProvider\");\n }\n return context;\n};\n\n/\n Provider component for Developer Portal microfrontend\n * Sets up routing, context, and React Query client\n /\nexport const DevportalProvider: FC<PropsWithChildren<DevportalRootProps>> = ({\n children,\n basePath,\n productId,\n variant,\n navigate,\n currentUser,\n tenantId,\n workspaceId,\n apiGatewayUrl,\n workspacesGatewayUrl,\n authToken,\n workspaceToken,\n getWorkspaceToken,\n registerNavItems,\n registerFooterItems,\n onApplicationSelect,\n onOrganizationSelect,\n}) => {\n const [activeOrgId, setActiveOrgIdState] = useState<string \| null>(() => {\n try {\n return localStorage.getItem(ORG_STORAGE_KEY) ?? null;\n } catch {\n return null;\n }\n });\n\n const setActiveOrgId = (id: string \| null) => {\n setActiveOrgIdState(id);\n try {\n if (id) {\n localStorage.setItem(ORG_STORAGE_KEY, id);\n } else {\n localStorage.removeItem(ORG_STORAGE_KEY);\n }\n } catch {\n // ignore storage errors\n }\n };\n\n const [activePhysicalOrgId, setActivePhysicalOrgIdState] = useState<\n string \| null\n >(() => {\n try {\n return localStorage.getItem(PHYSICAL_ORG_STORAGE_KEY) ?? null;\n } catch {\n return null;\n }\n });\n\n const setActivePhysicalOrgId = (id: string \| null) => {\n setActivePhysicalOrgIdState(id);\n try {\n if (id) {\n localStorage.setItem(PHYSICAL_ORG_STORAGE_KEY, id);\n } else {\n localStorage.removeItem(PHYSICAL_ORG_STORAGE_KEY);\n }\n } catch {\n // ignore storage errors\n }\n };\n\n const contextValue: DevportalContextValue = {\n basePath,\n productId,\n variant,\n navigate,\n currentUser,\n tenantId,\n workspaceId,\n apiGatewayUrl,\n workspacesGatewayUrl,\n authToken,\n workspaceToken,\n getWorkspaceToken,\n registerNavItems,\n registerFooterItems,\n onApplicationSelect,\n onOrganizationSelect,\n activeOrgId,\n setActiveOrgId,\n activePhysicalOrgId,\n setActivePhysicalOrgId,\n };\n\n // Create QueryClient instance (memoized to avoid recreation on re-renders)\n const queryClient = useMemo(() => {\n const client = new QueryClient({\n mutationCache: new MutationCache({\n onSuccess: () => {\n void client.invalidateQueries();\n },\n }),\n defaultOptions: {\n queries: {\n retry: 1,\n refetchOnWindowFocus: false,\n staleTime: 5 60 * 1000, // 5 minutes\n },\n },\n });\n return client;\n }, []);\n\n // PermissionProvider requires the shell's AuthProvider — only mount it in integrated mode.\n // In standalone/dev mode (MemoryRouter path), there's no AuthProvider, so we skip it\n // and pages will use a fallback that allows access (dev-only behaviour).\n const isIntegrated = !!basePath;\n\n // Wrap content with QueryClientProvider\n const content = (\n <QueryClientProvider client={queryClient}>\n <DevportalContext.Provider value={contextValue}>\n {isIntegrated ? (\n <PermissionProvider scopeId={tenantId ?? null} gateway=\"global\">\n {children}\n </PermissionProvider>\n ) : (\n children\n )}\n </DevportalContext.Provider>\n </QueryClientProvider>\n );\n\n // When integrated into a shell (basePath provided), the shell already has a router\n // so we don't create another one. When standalone (no basePath), use BrowserRouter.\n if (isIntegrated) {\n return content;\n }\n\n // Standalone mode: create BrowserRouter for independent operation\n return <BrowserRouter>{content}</BrowserRouter>;\n};\n"],"mappings":";;;;;;AAWA,IAAMA,IAAkB,2BAClBC,IAA2B,oCAmB3BC,IAAmBC,EAA4C,IAAI,GAM5DC,UACXC,EAAWH,CAAgB,CAAC,EAAE,YAAY,cAK/BI,UAAqB;CAChC,IAAMC,IAAUF,EAAWH,CAAgB;CAC3C,IAAI,CAACK,GACH,MAAU,MAAM,oDAAoD;CAEtE,OAAOA;AACT,GAMaC,KAAgE,EAC3E,aACA,aACA,cACA,YACA,aACA,gBACA,aACA,gBACA,kBACA,yBACA,cACA,mBACA,sBACA,qBACA,wBACA,wBACA,8BACI;CACJ,IAAM,CAACC,GAAaC,KAAuBC,QAA8B;EACvE,IAAI;GACF,OAAO,aAAa,QAAQX,CAAe,KAAK;EAClD,QAAQ;GACN,OAAO;EACT;CACF,CAAC,GAEKY,KAAkB,MAAsB;EAC5C,EAAoBC,CAAE;EACtB,IAAI;GACF,AAAIA,IACF,aAAa,QAAQb,GAAiBa,CAAE,IAExC,aAAa,WAAWb,CAAe;EAE3C,QAAQ,CAER;CACF,GAEM,CAACc,GAAqBC,KAA+BJ,QAEnD;EACN,IAAI;GACF,OAAO,aAAa,QAAQV,CAAwB,KAAK;EAC3D,QAAQ;GACN,OAAO;EACT;CACF,CAAC,GAeKe,IAAsC;EAC1C;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,yBAjC8B,MAAsB;GACpD,EAA4BH,CAAE;GAC9B,IAAI;IACF,AAAIA,IACF,aAAa,QAAQZ,GAA0BY,CAAE,IAEjD,aAAa,WAAWZ,CAAwB;GAEpD,QAAQ,CAER;EACF;CAuBA,GAGMgB,IAAcC,QAAc;EAChC,IAAMC,IAAS,IAAIC,EAAY;GAC7B,eAAe,IAAIC,EAAc,EAC/B,iBAAiB;IACf,EAAY,kBAAkB;GAChC,EACF,CAAC;GACD,gBAAgB,EACd,SAAS;IACP,OAAO;IACP,sBAAsB;IACtB,WAAW;GACb,EACF;EACF,CAAC;EACD,OAAOF;CACT,GAAG,CAAC,CAAC,GAKCG,IAAe,CAAC,CAACC,GAGjBC,IACJ,kBAACC,GAAD;EAAqB,QAAQR;EAC3B,UAAA,kBAACf,EAAiB,UAAlB;GAA2B,OAAOc;GAC/B,UAAAM,IACC,kBAACI,GAAD;IAAoB,SAASC,KAAY;IAAM,SAAQ;IACpD;GACiB,CAAA,IAEpBC;EAEuB,CAAA;CACR,CAAA;CAUvB,OALIN,IACKE,IAIF,kBAACK,GAAD,EAAA,UAAgBL,EAAuB,CAAA;AAChD"}

package/dist/devportal/types/index.d.ts CHANGED Viewed

@@ -40,6 +40,12 @@ export interface DevportalRootProps {
      * package; read it from this prop instead.
      */
     productId?: string;
+    /**
+     * Opt-in design variant. Only `fluidgrids-app` passes `"fluidgrids"`, which
+     * switches on the Navigation v2 developer-portal changes (BOFF-11862/11863).
+     * When unset the module looks and behaves exactly as it always has.
+     */
+    variant?: "fluidgrids";
     /**
      * Tenant ID for scoping operations
      */

package/dist/devportal/types/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.js","names":["WEBHOOK_EVENTS","AVAILABLE_SCOPES"],"sources":["../../../src/devportal/types/index.ts"],"sourcesContent":["/*\n Developer Portal Types\n \n Core type definitions for the Developer Portal microfrontend\n /\n\nimport type { ReactNode } from \"react\";\n\n// =============================================================================\n// NAVIGATION TYPES\n// =============================================================================\n\n/\n Navigation item for shell integration\n /\nexport interface NavItem {\n id: string;\n label: string;\n path: string;\n icon?: ReactNode;\n badge?: number;\n order?: number;\n group?: string;\n visible?: boolean;\n children?: NavItem[];\n}\n\n/\n Footer item for shell integration\n /\nexport interface FooterItem {\n id: string;\n label: string;\n type: \"status\" \| \"action\";\n order?: number;\n section: \"left\" \| \"center\" \| \"right\";\n}\n\n// =============================================================================\n// ROOT PROPS\n// =============================================================================\n\n/\n Props for the DevportalRoot component\n /\nexport interface DevportalRootProps {\n /\n Base path for the devportal microfrontend\n /\n basePath?: string;\n\n /\n Slug of the platform product hosting this devportal instance (e.g.\n * \"healthybowl\", \"vibecontrols\"). Optional — when a host shell doesn't\n * pass it, product-scoped behavior (like tagging a seller-portal physical\n * item's compatibleProducts) simply stays inert for that shell, matching\n * today's behavior. Never hardcode a specific product's slug in this\n * package; read it from this prop instead.\n /\n productId?: string;\n\n /\n Tenant ID for scoping operations\n /\n tenantId?: string;\n\n /\n Workspace ID (optional, for workspace-scoped features)\n /\n workspaceId?: string;\n\n /\n API Gateway URL for GraphQL requests (global gateway)\n /\n apiGatewayUrl?: string;\n\n /\n Workspace gateway URL for workspace-layer operations (e.g. wspace-files-svc uploads)\n * e.g. \"https://graphqlworkspaces.burdenoff.com\" or \"http://localhost:4003\"\n /\n workspacesGatewayUrl?: string;\n\n /\n Authentication token for API requests\n /\n authToken?: string;\n\n /\n Workspace authentication token for workspace-gateway requests (X-Workspace-Authorization).\n * May be a cached/stale value — use getWorkspaceToken() for upload flows that need a fresh token.\n /\n workspaceToken?: string;\n\n /\n Async getter that always returns a valid (non-expired) workspace token.\n * Call this instead of reading workspaceToken directly for workspace-layer mutations.\n /\n getWorkspaceToken?: () => Promise<string \| null>;\n\n /\n Navigation function provided by the shell\n /\n navigate?: (path: string) => void;\n\n /\n Current user information\n /\n currentUser?: {\n id: string;\n email: string;\n firstName?: string;\n lastName?: string;\n avatar?: string;\n };\n\n /\n Optional function to register navigation items with the shell\n /\n registerNavItems?: (items: NavItem \| NavItem[]) => () => void;\n\n /\n Optional function to register footer items with the shell\n /\n registerFooterItems?: (items: FooterItem \| FooterItem[]) => () => void;\n\n /\n Optional callback when an application is selected\n /\n onApplicationSelect?: (app: Application) => void;\n\n /\n Optional callback when an organization is selected\n */\n onOrganizationSelect?: (org: DeveloperOrganization) => void;\n}\n\n// =============================================================================\n// APPLICATION TYPES\n// =============================================================================\n\nexport type AppType =\n \| \"WEB_APP\"\n \| \"MOBILE_APP\"\n \| \"DESKTOP_APP\"\n \| \"CLI_TOOL\"\n \| \"API_INTEGRATION\"\n \| \"WORKFLOW\"\n \| \"AUTOMATION\"\n \| \"WIDGET\"\n \| \"BOT\"\n \| \"SERVICE\"\n \| \"INTEGRATION\"\n \| \"ANALYST\"\n \| \"ASSISTANT\"\n \| \"SPECIALIST\"\n \| \"NODE\"\n \| \"VIBEMODULE\"\n \| \"CONSOLE\"\n \| \"DASHBOARD\"\n \| \"PARSER\"\n \| \"DATASINK\";\n\nexport type AppStatus =\n \| \"DRAFT\"\n \| \"SUBMITTED\"\n \| \"IN_REVIEW\"\n \| \"APPROVED\"\n \| \"PUBLISHED\"\n \| \"UNLISTED\"\n \| \"REJECTED\"\n \| \"SUSPENDED\"\n \| \"DEPRECATED\"\n \| \"ACTIVE\"\n \| \"INACTIVE\"\n \| \"REVOKED\";\n\nexport type AppVisibility = \"PUBLIC\" \| \"PRIVATE\" \| \"UNLISTED\" \| \"INTERNAL\";\n\nexport type AppSubmissionReviewStatus =\n \"PENDING\" \| \"IN_PROGRESS\" \| \"APPROVED\" \| \"REJECTED\" \| \"CHANGES_REQUESTED\";\n\nexport interface Application {\n id: string;\n name: string;\n slug: string;\n shortDescription?: string;\n description?: string;\n appType: AppType;\n status: AppStatus;\n visibility: AppVisibility;\n tenantId: string;\n developerId: string;\n developerOrganizationId?: string;\n developerOrganization?: DeveloperOrganization;\n category?: string;\n tags: string[];\n keywords: string[];\n iconUrl?: string;\n bannerUrl?: string;\n videoUrl?: string;\n screenshots?: Record<string, unknown>;\n websiteUrl?: string;\n documentationUrl?: string;\n supportUrl?: string;\n privacyPolicyUrl?: string;\n termsOfServiceUrl?: string;\n githubUrl?: string;\n pricingType?: string;\n pricingDetails?: Record<string, unknown>;\n installCount: number;\n activeInstallCount: number;\n averageRating?: number;\n reviewCount: number;\n submittedAt?: string;\n publishedAt?: string;\n lastReviewedAt?: string;\n reviewStatus: AppSubmissionReviewStatus;\n reviewNotes?: string;\n reviewedBy?: string;\n isFeatured: boolean;\n isVerified: boolean;\n requiresApproval: boolean;\n manifest?: Record<string, unknown>;\n config?: Record<string, unknown>;\n metadata?: Record<string, unknown>;\n appId?: string;\n oauthAuthUrl?: string;\n oauthRevokeUrl?: string;\n createdAt: string;\n updatedAt: string;\n versions?: ApplicationVersion[];\n oauthClients?: OAuthClient[];\n apiKeys?: ApiKey[];\n webhooks?: Webhook[];\n scopes?: ApplicationScope[];\n}\n\nexport interface ApplicationVersion {\n id: string;\n applicationId: string;\n version: string;\n releaseNotes?: string;\n changelog?: string;\n status: string;\n isLatest: boolean;\n isStable: boolean;\n packageUrl?: string;\n packageSize?: string;\n packageHash?: string;\n manifest?: Record<string, unknown>;\n minPlatformVersion?: string;\n maxPlatformVersion?: string;\n requiredScopes: string[];\n publishedAt?: string;\n deprecatedAt?: string;\n createdAt: string;\n updatedAt: string;\n}\n\nexport interface ApplicationScope {\n id: string;\n applicationId: string;\n scope: string;\n description?: string;\n isRequired: boolean;\n createdAt: string;\n}\n\n// =============================================================================\n// OAUTH TYPES\n// =============================================================================\n\nexport type OAuthClientType = \"PUBLIC\" \| \"CONFIDENTIAL\";\n\nexport type OAuthGrantType =\n \| \"AUTHORIZATION_CODE\"\n \| \"REFRESH_TOKEN\"\n \| \"CLIENT_CREDENTIALS\"\n \| \"IMPLICIT\"\n \| \"PASSWORD\";\n\nexport interface OAuthClient {\n id: string;\n applicationId: string;\n name: string;\n clientId: string;\n clientSecret: string;\n clientType: OAuthClientType;\n redirectUris: string[];\n allowedGrantTypes: OAuthGrantType[];\n allowedScopes: string[];\n accessTokenLifetime: number;\n refreshTokenLifetime: number;\n isActive: boolean;\n requirePKCE: boolean;\n requireConsent: boolean;\n metadata?: Record<string, unknown>;\n createdAt: string;\n updatedAt: string;\n}\n\nexport interface OAuthToken {\n id: string;\n clientId: string;\n userId: string;\n tenantId: string;\n workspaceId?: string;\n accessToken: string;\n refreshToken?: string;\n tokenType: string;\n scopes: string[];\n expiresAt: string;\n refreshExpiresAt?: string;\n isRevoked: boolean;\n revokedAt?: string;\n createdAt: string;\n lastUsedAt?: string;\n}\n\n// =============================================================================\n// API KEY TYPES\n// =============================================================================\n\nexport type ApiKeyType = \"PUBLISHABLE\" \| \"SECRET\" \| \"RESTRICTED\";\n\nexport interface ApiKey {\n id: string;\n applicationId: string;\n name: string;\n description?: string;\n keyId: string;\n keyHash?: string; // Hash is not always returned by API for security\n keyPrefix: string;\n keyType: ApiKeyType;\n scopes: string[];\n permissions?: Record<string, unknown>;\n rateLimit?: number;\n quotaLimit?: number;\n quotaUsed: number;\n quotaResetAt?: string;\n allowedIps: string[];\n allowedDomains: string[];\n environment?: string;\n isActive: boolean;\n isRevoked: boolean;\n createdAt: string;\n lastUsedAt?: string;\n expiresAt?: string;\n revokedAt?: string;\n}\n\nexport interface ApiKeyPayload {\n apiKey: ApiKey;\n plainTextKey: string;\n}\n\n// =============================================================================\n// WEBHOOK TYPES\n// =============================================================================\n\nexport type WebhookStatus = \"ACTIVE\" \| \"PAUSED\" \| \"FAILED\" \| \"DISABLED\";\n\nexport type WebhookDeliveryStatus =\n \"PENDING\" \| \"DELIVERING\" \| \"DELIVERED\" \| \"FAILED\" \| \"RETRYING\";\n\nexport interface Webhook {\n id: string;\n applicationId: string;\n name: string;\n description?: string;\n url: string;\n secret?: string;\n events: string[];\n filters?: Record<string, unknown>;\n retryEnabled: boolean;\n maxRetries: number;\n retryDelay: number;\n status: WebhookStatus;\n isActive: boolean;\n successCount: number;\n failureCount: number;\n lastTriggeredAt?: string;\n lastSuccessAt?: string;\n lastFailureAt?: string;\n lastFailureReason?: string;\n createdAt: string;\n updatedAt: string;\n deliveries?: WebhookDelivery[];\n}\n\nexport interface WebhookDelivery {\n id: string;\n webhookId: string;\n eventType: string;\n eventId: string;\n payload: Record<string, unknown>;\n attemptNumber: number;\n status: WebhookDeliveryStatus;\n requestHeaders?: Record<string, unknown>;\n requestBody?: Record<string, unknown>;\n responseStatus?: number;\n responseHeaders?: Record<string, unknown>;\n responseBody?: string;\n deliveredAt?: string;\n failedAt?: string;\n nextRetryAt?: string;\n errorMessage?: string;\n errorCode?: string;\n createdAt: string;\n updatedAt: string;\n}\n\nexport interface WebhookTestResult {\n success: boolean;\n statusCode?: number;\n response?: string;\n error?: string;\n}\n\n// =============================================================================\n// DEVELOPER ORGANIZATION TYPES\n// =============================================================================\n\nexport type DeveloperOrgRole = \"OWNER\" \| \"ADMIN\" \| \"DEVELOPER\" \| \"VIEWER\";\n\nexport type DeveloperOrgTier =\n \"FREE\" \| \"DEVELOPER\" \| \"PROFESSIONAL\" \| \"ENTERPRISE\";\n\nexport type PartnerTier = \"REGISTERED\" \| \"SELECT\" \| \"PREMIER\";\n\nexport type InvitationStatus =\n \"PENDING\" \| \"ACCEPTED\" \| \"REJECTED\" \| \"EXPIRED\" \| \"CANCELLED\";\n\nexport interface DeveloperOrganization {\n id: string;\n name: string;\n slug: string;\n kind?: \"DIGITAL\" \| \"PHYSICAL\";\n description?: string;\n logoUrl?: string;\n bannerUrl?: string;\n websiteUrl?: string;\n contactEmail?: string;\n supportEmail?: string;\n tier: DeveloperOrgTier;\n partnerTier?: PartnerTier;\n partnerSince?: string;\n isVerified: boolean;\n verifiedAt?: string;\n verificationMethod?: string;\n verificationRequestedAt?: string;\n verificationStatus?: \"UNVERIFIED\" \| \"PENDING\" \| \"VERIFIED\" \| \"REJECTED\";\n verificationRequestNotes?: string;\n verificationEvidenceUrl?: string;\n verificationDomain?: string;\n verificationRequestedBy?: string;\n verificationReviewedAt?: string;\n verificationReviewedBy?: string;\n verificationReviewNotes?: string;\n verificationRejectedReason?: string;\n isCertified: boolean;\n certifiedAt?: string;\n certificationExpiry?: string;\n totalApps: number;\n publishedApps: number;\n totalInstalls: number;\n activeInstalls: number;\n totalApiCalls: string;\n averageRating?: number;\n totalRevenue: number;\n totalPlatformFees: number;\n totalPayouts: number;\n pendingBalance: number;\n lifetimeRevenue: number;\n platformFeeRate: number;\n apiCallsLimit: number;\n storageLimit: string;\n apiCallsUsed: string;\n storageUsed: string;\n quotaResetAt?: string;\n taxId?: string;\n taxCountry?: string;\n taxFormType?: string;\n taxFormVerified: boolean;\n legalEntityName?: string;\n legalEntityType?: string;\n legalAddress?: Record<string, unknown>;\n settings?: Record<string, unknown>;\n billingAccountId?: string;\n billingLinkedAt?: string;\n pickupPostalCode?: string;\n createdAt: string;\n updatedAt: string;\n members?: DeveloperOrgMember[];\n invitations?: DeveloperOrgInvitation[];\n applications?: Application[];\n}\n\nexport interface DeveloperOrgMember {\n id: string;\n organizationId: string;\n userId: string;\n email?: string;\n role: DeveloperOrgRole;\n permissions?: Record<string, unknown>;\n invitedBy?: string;\n invitationId?: string;\n isActive: boolean;\n isSuspended: boolean;\n suspendedAt?: string;\n suspendedReason?: string;\n joinedAt: string;\n createdAt: string;\n updatedAt: string;\n}\n\nexport interface DeveloperOrgInvitation {\n id: string;\n organizationId: string;\n invitedUserId?: string;\n invitedEmail: string;\n role: DeveloperOrgRole;\n permissions?: Record<string, unknown>;\n invitedBy: string;\n message?: string;\n token: string;\n status: InvitationStatus;\n expiresAt: string;\n respondedAt?: string;\n memberId?: string;\n createdAt: string;\n updatedAt: string;\n}\n\n// =============================================================================\n// ANALYTICS TYPES (MOCKED)\n// =============================================================================\n\nexport interface ApplicationAnalytics {\n id: string;\n applicationId: string;\n date: string;\n period: string;\n activeUsers: number;\n newUsers: number;\n apiCalls: number;\n errors: number;\n avgResponseTime?: number;\n sessions: number;\n avgSessionDuration?: number;\n createdAt: string;\n}\n\nexport interface DeveloperOrgRevenueAnalytics {\n id: string;\n organizationId: string;\n period: string;\n periodStart: string;\n periodEnd: string;\n grossRevenue: number;\n platformFees: number;\n netRevenue: number;\n salesCount: number;\n refundsCount: number;\n refundsAmount: number;\n newSubscribers: number;\n churnedSubscribers: number;\n activeSubscribers: number;\n avgRevenuePerUser: number;\n topApps?: Array<{ appId: string; revenue: number }>;\n createdAt: string;\n}\n\n// =============================================================================\n// MONETIZATION TYPES (MOCKED)\n// =============================================================================\n\nexport type DevPortalPricingModel =\n \| \"FREE\"\n \| \"FREEMIUM\"\n \| \"SUBSCRIPTION\"\n \| \"ONE_TIME\"\n \| \"USAGE_BASED\"\n \| \"ENTERPRISE\";\n\nexport type SaleStatus =\n \| \"PENDING\"\n \| \"COMPLETED\"\n \| \"REFUNDED\"\n \| \"PARTIAL_REFUND\"\n \| \"DISPUTED\"\n \| \"CHARGEBACK\"\n \| \"CANCELLED\";\n\nexport type PayoutStatus =\n \"PENDING\" \| \"PROCESSING\" \| \"COMPLETED\" \| \"FAILED\" \| \"CANCELLED\";\n\nexport interface DeveloperOrgSale {\n id: string;\n organizationId: string;\n applicationId: string;\n buyerUserId: string;\n buyerTenantId?: string;\n installationScope: string;\n pricingModel: DevPortalPricingModel;\n planName?: string;\n grossAmount: number;\n platformFeeRate: number;\n platformFee: number;\n netAmount: number;\n currency: string;\n taxAmount?: number;\n discountAmount?: number;\n status: SaleStatus;\n createdAt: string;\n}\n\nexport interface DeveloperOrgPayout {\n id: string;\n organizationId: string;\n periodStart: string;\n periodEnd: string;\n grossAmount: number;\n platformFees: number;\n netAmount: number;\n currency: string;\n status: PayoutStatus;\n processedAt?: string;\n failedAt?: string;\n failureReason?: string;\n createdAt: string;\n}\n\n// =============================================================================\n// APP INSTALLATION TYPES\n// =============================================================================\n\nexport type AppInstallationStatus =\n \"ACTIVE\" \| \"SUSPENDED\" \| \"TRIAL\" \| \"EXPIRED\" \| \"UNINSTALLED\";\n\nexport interface AppInstallation {\n id: string;\n applicationId: string;\n userId: string;\n tenantId?: string;\n workspaceId?: string;\n organizationId?: string;\n scope: string;\n installedVersion: string;\n status: AppInstallationStatus;\n grantedScopes: string[];\n settings?: Record<string, unknown>;\n installedAt: string;\n updatedAt: string;\n}\n\n// =============================================================================\n// REVIEW TYPES\n// =============================================================================\n\nexport type ReviewStatus =\n \"PENDING\" \| \"PUBLISHED\" \| \"HIDDEN\" \| \"FLAGGED\" \| \"REMOVED\";\n\nexport interface AppReview {\n id: string;\n applicationId: string;\n userId: string;\n rating: number;\n title?: string;\n body?: string;\n status: ReviewStatus;\n isFeatured: boolean;\n helpfulCount: number;\n notHelpfulCount: number;\n developerResponse?: string;\n developerResponseAt?: string;\n createdAt: string;\n updatedAt: string;\n}\n\n// =============================================================================\n// DELEGATION TYPES\n// =============================================================================\n\nexport type DelegationStatus = \"ACTIVE\" \| \"REVOKED\" \| \"EXPIRED\";\n\nexport interface AppUserDelegation {\n id: string;\n appId: string;\n app?: {\n id: string;\n name: string;\n description?: string;\n type: string;\n status: string;\n };\n userId: string;\n scopes: string[];\n workspaceIds: string[];\n status: DelegationStatus;\n grantedAt: string;\n grantedBy: string;\n expiresAt?: string;\n revokedAt?: string;\n revokedBy?: string;\n}\n\nexport interface GrantDelegationInput {\n appId: string;\n userId?: string;\n workspaceIds: string[];\n scopes: string[];\n expiresAt?: string;\n}\n\n// =============================================================================\n// AUTH APP TYPES (from auth-svc layer)\n// =============================================================================\n\nexport type AuthAppType =\n \| \"ANALYST\"\n \| \"API_INTEGRATION\"\n \| \"ASSISTANT\"\n \| \"AUTOMATION\"\n \| \"BOT\"\n \| \"CLI_TOOL\"\n \| \"DESKTOP_APP\"\n \| \"INTEGRATION\"\n \| \"MOBILE_APP\"\n \| \"SERVICE\"\n \| \"SPECIALIST\"\n \| \"WEB_APP\"\n \| \"WIDGET\"\n \| \"WORKFLOW\";\nexport type AuthAppStatus = \"ACTIVE\" \| \"INACTIVE\" \| \"REVOKED\";\n\nexport interface AuthApp {\n id: string;\n name: string;\n description?: string;\n clientId: string;\n type: AuthAppType;\n status: AuthAppStatus;\n scopes: string[];\n redirectUris: string[];\n ownerUserId: string;\n tenantId: string;\n delegations?: AppUserDelegation[];\n createdAt: string;\n updatedAt: string;\n}\n\nexport interface AuthAppCreateResponse {\n app: AuthApp;\n clientSecret: string;\n}\n\nexport interface CreateAuthAppInput {\n name: string;\n description?: string;\n type: AuthAppType;\n scopes: string[];\n redirectUris?: string[];\n tenantId?: string;\n}\n\nexport interface UpdateAuthAppInput {\n name?: string;\n description?: string;\n scopes?: string[];\n redirectUris?: string[];\n}\n\n// =============================================================================\n// AUTH API KEY TYPES (from auth-svc layer)\n// =============================================================================\n\nexport interface AuthApiKey {\n id: string;\n name: string;\n prefix: string;\n scopes: string[];\n appId: string;\n appName?: string;\n createdAt: string;\n expiresAt?: string;\n lastUsedAt?: string;\n}\n\nexport interface AuthApiKeyResult {\n apiKey: string;\n apiSecret: string;\n keyId: string;\n}\n\nexport interface AuthApiKeyRotateResult {\n apiSecret: string;\n}\n\nexport interface GenerateAuthApiKeyInput {\n appId: string;\n name: string;\n scope: string[];\n expiresAt?: string;\n}\n\n// =============================================================================\n// AUDIT LOG TYPES\n// =============================================================================\n\nexport interface AuditLog {\n id: string;\n actorId: string;\n actorType: string;\n tenantId: string;\n action: string;\n resource: string;\n resourceId?: string;\n changes?: Record<string, unknown>;\n ipAddress?: string;\n userAgent?: string;\n createdAt: string;\n}\n\n// =============================================================================\n// VIEW TYPES\n// =============================================================================\n\nexport type DevportalView =\n \| \"dashboard\"\n \| \"organizations\"\n \| \"apps\"\n \| \"oauth\"\n \| \"api-keys\"\n \| \"webhooks\"\n \| \"delegations\"\n \| \"analytics\"\n \| \"revenue\"\n \| \"docs\"\n \| \"profile\"\n \| \"settings\";\n\n// =============================================================================\n// FILTER TYPES\n// =============================================================================\n\nexport interface ApplicationFilter {\n search?: string;\n status?: AppStatus;\n visibility?: AppVisibility;\n appType?: AppType;\n organizationId?: string;\n isFeatured?: boolean;\n}\n\nexport interface WebhookFilter {\n status?: WebhookStatus;\n event?: string;\n}\n\n// =============================================================================\n// WEBHOOK EVENT TYPES\n// =============================================================================\n\nexport const WEBHOOK_EVENTS = [\n // Application events\n \"application.created\",\n \"application.updated\",\n \"application.deleted\",\n \"application.published\",\n \"application.unpublished\",\n \"application.suspended\",\n // Installation events\n \"installation.created\",\n \"installation.updated\",\n \"installation.deleted\",\n // User events\n \"user.created\",\n \"user.updated\",\n \"user.deleted\",\n // Workspace events\n \"workspace.created\",\n \"workspace.updated\",\n \"workspace.deleted\",\n // Project events\n \"project.created\",\n \"project.updated\",\n \"project.deleted\",\n // Task events\n \"task.created\",\n \"task.updated\",\n \"task.deleted\",\n \"task.completed\",\n // Comment events\n \"comment.created\",\n \"comment.updated\",\n \"comment.deleted\",\n // File events\n \"file.uploaded\",\n \"file.deleted\",\n // Member events\n \"member.added\",\n \"member.removed\",\n \"member.role_changed\",\n] as const;\n\nexport type WebhookEvent = (typeof WEBHOOK_EVENTS)[number];\n\n// =============================================================================\n// SCOPE DEFINITIONS\n// =============================================================================\n\nexport const AVAILABLE_SCOPES = [\n // User scopes\n {\n scope: \"user:read\",\n description: \"Read user profile information\",\n category: \"User\",\n },\n {\n scope: \"user:write\",\n description: \"Modify user profile information\",\n category: \"User\",\n },\n {\n scope: \"user:email\",\n description: \"Access user email address\",\n category: \"User\",\n },\n // Workspace scopes\n {\n scope: \"workspace:read\",\n description: \"Read workspace information\",\n category: \"Workspace\",\n },\n {\n scope: \"workspace:write\",\n description: \"Create and modify workspaces\",\n category: \"Workspace\",\n },\n {\n scope: \"workspace:delete\",\n description: \"Delete workspaces\",\n category: \"Workspace\",\n },\n {\n scope: \"workspace:members\",\n description: \"Manage workspace members\",\n category: \"Workspace\",\n },\n // Project scopes\n {\n scope: \"project:read\",\n description: \"Read project information\",\n category: \"Project\",\n },\n {\n scope: \"project:write\",\n description: \"Create and modify projects\",\n category: \"Project\",\n },\n {\n scope: \"project:delete\",\n description: \"Delete projects\",\n category: \"Project\",\n },\n // Task scopes\n { scope: \"task:read\", description: \"Read tasks\", category: \"Task\" },\n {\n scope: \"task:write\",\n description: \"Create and modify tasks\",\n category: \"Task\",\n },\n { scope: \"task:delete\", description: \"Delete tasks\", category: \"Task\" },\n // File scopes\n { scope: \"file:read\", description: \"Read files\", category: \"File\" },\n {\n scope: \"file:write\",\n description: \"Upload and modify files\",\n category: \"File\",\n },\n { scope: \"file:delete\", description: \"Delete files\", category: \"File\" },\n // Comment scopes\n { scope: \"comment:read\", description: \"Read comments\", category: \"Comment\" },\n {\n scope: \"comment:write\",\n description: \"Create and modify comments\",\n category: \"Comment\",\n },\n {\n scope: \"comment:delete\",\n description: \"Delete comments\",\n category: \"Comment\",\n },\n // Offline access\n {\n scope: \"offline_access\",\n description: \"Access data while user is offline\",\n category: \"Access\",\n },\n] as const;\n\nexport type AvailableScope = (typeof AVAILABLE_SCOPES)[number][\"scope\"];\n"],"mappings":";AAg2BA,IAAaA,IAAiB,whBAwC9B,GAQaC,IAAmB;CAE9B;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CACA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CACA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CAEA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CACA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CACA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CACA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CAEA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CACA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CACA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CAEA;EAAE,OAAO;EAAa,aAAa;EAAc,UAAU;CAAO;CAClE;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CACA;EAAE,OAAO;EAAe,aAAa;EAAgB,UAAU;CAAO;CAEtE;EAAE,OAAO;EAAa,aAAa;EAAc,UAAU;CAAO;CAClE;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CACA;EAAE,OAAO;EAAe,aAAa;EAAgB,UAAU;CAAO;CAEtE;EAAE,OAAO;EAAgB,aAAa;EAAiB,UAAU;CAAU;CAC3E;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CACA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CAEA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;AACF"}
1	+ {"version":3,"file":"index.js","names":["WEBHOOK_EVENTS","AVAILABLE_SCOPES"],"sources":["../../../src/devportal/types/index.ts"],"sourcesContent":["/*\n Developer Portal Types\n \n Core type definitions for the Developer Portal microfrontend\n /\n\nimport type { ReactNode } from \"react\";\n\n// =============================================================================\n// NAVIGATION TYPES\n// =============================================================================\n\n/\n Navigation item for shell integration\n /\nexport interface NavItem {\n id: string;\n label: string;\n path: string;\n icon?: ReactNode;\n badge?: number;\n order?: number;\n group?: string;\n visible?: boolean;\n children?: NavItem[];\n}\n\n/\n Footer item for shell integration\n /\nexport interface FooterItem {\n id: string;\n label: string;\n type: \"status\" \| \"action\";\n order?: number;\n section: \"left\" \| \"center\" \| \"right\";\n}\n\n// =============================================================================\n// ROOT PROPS\n// =============================================================================\n\n/\n Props for the DevportalRoot component\n /\nexport interface DevportalRootProps {\n /\n Base path for the devportal microfrontend\n /\n basePath?: string;\n\n /\n Slug of the platform product hosting this devportal instance (e.g.\n * \"healthybowl\", \"vibecontrols\"). Optional — when a host shell doesn't\n * pass it, product-scoped behavior (like tagging a seller-portal physical\n * item's compatibleProducts) simply stays inert for that shell, matching\n * today's behavior. Never hardcode a specific product's slug in this\n * package; read it from this prop instead.\n /\n productId?: string;\n\n /\n Opt-in design variant. Only `fluidgrids-app` passes `\"fluidgrids\"`, which\n * switches on the Navigation v2 developer-portal changes (BOFF-11862/11863).\n * When unset the module looks and behaves exactly as it always has.\n /\n variant?: \"fluidgrids\";\n\n /\n Tenant ID for scoping operations\n /\n tenantId?: string;\n\n /\n Workspace ID (optional, for workspace-scoped features)\n /\n workspaceId?: string;\n\n /\n API Gateway URL for GraphQL requests (global gateway)\n /\n apiGatewayUrl?: string;\n\n /\n Workspace gateway URL for workspace-layer operations (e.g. wspace-files-svc uploads)\n * e.g. \"https://graphqlworkspaces.burdenoff.com\" or \"http://localhost:4003\"\n /\n workspacesGatewayUrl?: string;\n\n /\n Authentication token for API requests\n /\n authToken?: string;\n\n /\n Workspace authentication token for workspace-gateway requests (X-Workspace-Authorization).\n * May be a cached/stale value — use getWorkspaceToken() for upload flows that need a fresh token.\n /\n workspaceToken?: string;\n\n /\n Async getter that always returns a valid (non-expired) workspace token.\n * Call this instead of reading workspaceToken directly for workspace-layer mutations.\n /\n getWorkspaceToken?: () => Promise<string \| null>;\n\n /\n Navigation function provided by the shell\n /\n navigate?: (path: string) => void;\n\n /\n Current user information\n /\n currentUser?: {\n id: string;\n email: string;\n firstName?: string;\n lastName?: string;\n avatar?: string;\n };\n\n /\n Optional function to register navigation items with the shell\n /\n registerNavItems?: (items: NavItem \| NavItem[]) => () => void;\n\n /\n Optional function to register footer items with the shell\n /\n registerFooterItems?: (items: FooterItem \| FooterItem[]) => () => void;\n\n /\n Optional callback when an application is selected\n /\n onApplicationSelect?: (app: Application) => void;\n\n /\n Optional callback when an organization is selected\n */\n onOrganizationSelect?: (org: DeveloperOrganization) => void;\n}\n\n// =============================================================================\n// APPLICATION TYPES\n// =============================================================================\n\nexport type AppType =\n \| \"WEB_APP\"\n \| \"MOBILE_APP\"\n \| \"DESKTOP_APP\"\n \| \"CLI_TOOL\"\n \| \"API_INTEGRATION\"\n \| \"WORKFLOW\"\n \| \"AUTOMATION\"\n \| \"WIDGET\"\n \| \"BOT\"\n \| \"SERVICE\"\n \| \"INTEGRATION\"\n \| \"ANALYST\"\n \| \"ASSISTANT\"\n \| \"SPECIALIST\"\n \| \"NODE\"\n \| \"VIBEMODULE\"\n \| \"CONSOLE\"\n \| \"DASHBOARD\"\n \| \"PARSER\"\n \| \"DATASINK\";\n\nexport type AppStatus =\n \| \"DRAFT\"\n \| \"SUBMITTED\"\n \| \"IN_REVIEW\"\n \| \"APPROVED\"\n \| \"PUBLISHED\"\n \| \"UNLISTED\"\n \| \"REJECTED\"\n \| \"SUSPENDED\"\n \| \"DEPRECATED\"\n \| \"ACTIVE\"\n \| \"INACTIVE\"\n \| \"REVOKED\";\n\nexport type AppVisibility = \"PUBLIC\" \| \"PRIVATE\" \| \"UNLISTED\" \| \"INTERNAL\";\n\nexport type AppSubmissionReviewStatus =\n \"PENDING\" \| \"IN_PROGRESS\" \| \"APPROVED\" \| \"REJECTED\" \| \"CHANGES_REQUESTED\";\n\nexport interface Application {\n id: string;\n name: string;\n slug: string;\n shortDescription?: string;\n description?: string;\n appType: AppType;\n status: AppStatus;\n visibility: AppVisibility;\n tenantId: string;\n developerId: string;\n developerOrganizationId?: string;\n developerOrganization?: DeveloperOrganization;\n category?: string;\n tags: string[];\n keywords: string[];\n iconUrl?: string;\n bannerUrl?: string;\n videoUrl?: string;\n screenshots?: Record<string, unknown>;\n websiteUrl?: string;\n documentationUrl?: string;\n supportUrl?: string;\n privacyPolicyUrl?: string;\n termsOfServiceUrl?: string;\n githubUrl?: string;\n pricingType?: string;\n pricingDetails?: Record<string, unknown>;\n installCount: number;\n activeInstallCount: number;\n averageRating?: number;\n reviewCount: number;\n submittedAt?: string;\n publishedAt?: string;\n lastReviewedAt?: string;\n reviewStatus: AppSubmissionReviewStatus;\n reviewNotes?: string;\n reviewedBy?: string;\n isFeatured: boolean;\n isVerified: boolean;\n requiresApproval: boolean;\n manifest?: Record<string, unknown>;\n config?: Record<string, unknown>;\n metadata?: Record<string, unknown>;\n appId?: string;\n oauthAuthUrl?: string;\n oauthRevokeUrl?: string;\n createdAt: string;\n updatedAt: string;\n versions?: ApplicationVersion[];\n oauthClients?: OAuthClient[];\n apiKeys?: ApiKey[];\n webhooks?: Webhook[];\n scopes?: ApplicationScope[];\n}\n\nexport interface ApplicationVersion {\n id: string;\n applicationId: string;\n version: string;\n releaseNotes?: string;\n changelog?: string;\n status: string;\n isLatest: boolean;\n isStable: boolean;\n packageUrl?: string;\n packageSize?: string;\n packageHash?: string;\n manifest?: Record<string, unknown>;\n minPlatformVersion?: string;\n maxPlatformVersion?: string;\n requiredScopes: string[];\n publishedAt?: string;\n deprecatedAt?: string;\n createdAt: string;\n updatedAt: string;\n}\n\nexport interface ApplicationScope {\n id: string;\n applicationId: string;\n scope: string;\n description?: string;\n isRequired: boolean;\n createdAt: string;\n}\n\n// =============================================================================\n// OAUTH TYPES\n// =============================================================================\n\nexport type OAuthClientType = \"PUBLIC\" \| \"CONFIDENTIAL\";\n\nexport type OAuthGrantType =\n \| \"AUTHORIZATION_CODE\"\n \| \"REFRESH_TOKEN\"\n \| \"CLIENT_CREDENTIALS\"\n \| \"IMPLICIT\"\n \| \"PASSWORD\";\n\nexport interface OAuthClient {\n id: string;\n applicationId: string;\n name: string;\n clientId: string;\n clientSecret: string;\n clientType: OAuthClientType;\n redirectUris: string[];\n allowedGrantTypes: OAuthGrantType[];\n allowedScopes: string[];\n accessTokenLifetime: number;\n refreshTokenLifetime: number;\n isActive: boolean;\n requirePKCE: boolean;\n requireConsent: boolean;\n metadata?: Record<string, unknown>;\n createdAt: string;\n updatedAt: string;\n}\n\nexport interface OAuthToken {\n id: string;\n clientId: string;\n userId: string;\n tenantId: string;\n workspaceId?: string;\n accessToken: string;\n refreshToken?: string;\n tokenType: string;\n scopes: string[];\n expiresAt: string;\n refreshExpiresAt?: string;\n isRevoked: boolean;\n revokedAt?: string;\n createdAt: string;\n lastUsedAt?: string;\n}\n\n// =============================================================================\n// API KEY TYPES\n// =============================================================================\n\nexport type ApiKeyType = \"PUBLISHABLE\" \| \"SECRET\" \| \"RESTRICTED\";\n\nexport interface ApiKey {\n id: string;\n applicationId: string;\n name: string;\n description?: string;\n keyId: string;\n keyHash?: string; // Hash is not always returned by API for security\n keyPrefix: string;\n keyType: ApiKeyType;\n scopes: string[];\n permissions?: Record<string, unknown>;\n rateLimit?: number;\n quotaLimit?: number;\n quotaUsed: number;\n quotaResetAt?: string;\n allowedIps: string[];\n allowedDomains: string[];\n environment?: string;\n isActive: boolean;\n isRevoked: boolean;\n createdAt: string;\n lastUsedAt?: string;\n expiresAt?: string;\n revokedAt?: string;\n}\n\nexport interface ApiKeyPayload {\n apiKey: ApiKey;\n plainTextKey: string;\n}\n\n// =============================================================================\n// WEBHOOK TYPES\n// =============================================================================\n\nexport type WebhookStatus = \"ACTIVE\" \| \"PAUSED\" \| \"FAILED\" \| \"DISABLED\";\n\nexport type WebhookDeliveryStatus =\n \"PENDING\" \| \"DELIVERING\" \| \"DELIVERED\" \| \"FAILED\" \| \"RETRYING\";\n\nexport interface Webhook {\n id: string;\n applicationId: string;\n name: string;\n description?: string;\n url: string;\n secret?: string;\n events: string[];\n filters?: Record<string, unknown>;\n retryEnabled: boolean;\n maxRetries: number;\n retryDelay: number;\n status: WebhookStatus;\n isActive: boolean;\n successCount: number;\n failureCount: number;\n lastTriggeredAt?: string;\n lastSuccessAt?: string;\n lastFailureAt?: string;\n lastFailureReason?: string;\n createdAt: string;\n updatedAt: string;\n deliveries?: WebhookDelivery[];\n}\n\nexport interface WebhookDelivery {\n id: string;\n webhookId: string;\n eventType: string;\n eventId: string;\n payload: Record<string, unknown>;\n attemptNumber: number;\n status: WebhookDeliveryStatus;\n requestHeaders?: Record<string, unknown>;\n requestBody?: Record<string, unknown>;\n responseStatus?: number;\n responseHeaders?: Record<string, unknown>;\n responseBody?: string;\n deliveredAt?: string;\n failedAt?: string;\n nextRetryAt?: string;\n errorMessage?: string;\n errorCode?: string;\n createdAt: string;\n updatedAt: string;\n}\n\nexport interface WebhookTestResult {\n success: boolean;\n statusCode?: number;\n response?: string;\n error?: string;\n}\n\n// =============================================================================\n// DEVELOPER ORGANIZATION TYPES\n// =============================================================================\n\nexport type DeveloperOrgRole = \"OWNER\" \| \"ADMIN\" \| \"DEVELOPER\" \| \"VIEWER\";\n\nexport type DeveloperOrgTier =\n \"FREE\" \| \"DEVELOPER\" \| \"PROFESSIONAL\" \| \"ENTERPRISE\";\n\nexport type PartnerTier = \"REGISTERED\" \| \"SELECT\" \| \"PREMIER\";\n\nexport type InvitationStatus =\n \"PENDING\" \| \"ACCEPTED\" \| \"REJECTED\" \| \"EXPIRED\" \| \"CANCELLED\";\n\nexport interface DeveloperOrganization {\n id: string;\n name: string;\n slug: string;\n kind?: \"DIGITAL\" \| \"PHYSICAL\";\n description?: string;\n logoUrl?: string;\n bannerUrl?: string;\n websiteUrl?: string;\n contactEmail?: string;\n supportEmail?: string;\n tier: DeveloperOrgTier;\n partnerTier?: PartnerTier;\n partnerSince?: string;\n isVerified: boolean;\n verifiedAt?: string;\n verificationMethod?: string;\n verificationRequestedAt?: string;\n verificationStatus?: \"UNVERIFIED\" \| \"PENDING\" \| \"VERIFIED\" \| \"REJECTED\";\n verificationRequestNotes?: string;\n verificationEvidenceUrl?: string;\n verificationDomain?: string;\n verificationRequestedBy?: string;\n verificationReviewedAt?: string;\n verificationReviewedBy?: string;\n verificationReviewNotes?: string;\n verificationRejectedReason?: string;\n isCertified: boolean;\n certifiedAt?: string;\n certificationExpiry?: string;\n totalApps: number;\n publishedApps: number;\n totalInstalls: number;\n activeInstalls: number;\n totalApiCalls: string;\n averageRating?: number;\n totalRevenue: number;\n totalPlatformFees: number;\n totalPayouts: number;\n pendingBalance: number;\n lifetimeRevenue: number;\n platformFeeRate: number;\n apiCallsLimit: number;\n storageLimit: string;\n apiCallsUsed: string;\n storageUsed: string;\n quotaResetAt?: string;\n taxId?: string;\n taxCountry?: string;\n taxFormType?: string;\n taxFormVerified: boolean;\n legalEntityName?: string;\n legalEntityType?: string;\n legalAddress?: Record<string, unknown>;\n settings?: Record<string, unknown>;\n billingAccountId?: string;\n billingLinkedAt?: string;\n pickupPostalCode?: string;\n createdAt: string;\n updatedAt: string;\n members?: DeveloperOrgMember[];\n invitations?: DeveloperOrgInvitation[];\n applications?: Application[];\n}\n\nexport interface DeveloperOrgMember {\n id: string;\n organizationId: string;\n userId: string;\n email?: string;\n role: DeveloperOrgRole;\n permissions?: Record<string, unknown>;\n invitedBy?: string;\n invitationId?: string;\n isActive: boolean;\n isSuspended: boolean;\n suspendedAt?: string;\n suspendedReason?: string;\n joinedAt: string;\n createdAt: string;\n updatedAt: string;\n}\n\nexport interface DeveloperOrgInvitation {\n id: string;\n organizationId: string;\n invitedUserId?: string;\n invitedEmail: string;\n role: DeveloperOrgRole;\n permissions?: Record<string, unknown>;\n invitedBy: string;\n message?: string;\n token: string;\n status: InvitationStatus;\n expiresAt: string;\n respondedAt?: string;\n memberId?: string;\n createdAt: string;\n updatedAt: string;\n}\n\n// =============================================================================\n// ANALYTICS TYPES (MOCKED)\n// =============================================================================\n\nexport interface ApplicationAnalytics {\n id: string;\n applicationId: string;\n date: string;\n period: string;\n activeUsers: number;\n newUsers: number;\n apiCalls: number;\n errors: number;\n avgResponseTime?: number;\n sessions: number;\n avgSessionDuration?: number;\n createdAt: string;\n}\n\nexport interface DeveloperOrgRevenueAnalytics {\n id: string;\n organizationId: string;\n period: string;\n periodStart: string;\n periodEnd: string;\n grossRevenue: number;\n platformFees: number;\n netRevenue: number;\n salesCount: number;\n refundsCount: number;\n refundsAmount: number;\n newSubscribers: number;\n churnedSubscribers: number;\n activeSubscribers: number;\n avgRevenuePerUser: number;\n topApps?: Array<{ appId: string; revenue: number }>;\n createdAt: string;\n}\n\n// =============================================================================\n// MONETIZATION TYPES (MOCKED)\n// =============================================================================\n\nexport type DevPortalPricingModel =\n \| \"FREE\"\n \| \"FREEMIUM\"\n \| \"SUBSCRIPTION\"\n \| \"ONE_TIME\"\n \| \"USAGE_BASED\"\n \| \"ENTERPRISE\";\n\nexport type SaleStatus =\n \| \"PENDING\"\n \| \"COMPLETED\"\n \| \"REFUNDED\"\n \| \"PARTIAL_REFUND\"\n \| \"DISPUTED\"\n \| \"CHARGEBACK\"\n \| \"CANCELLED\";\n\nexport type PayoutStatus =\n \"PENDING\" \| \"PROCESSING\" \| \"COMPLETED\" \| \"FAILED\" \| \"CANCELLED\";\n\nexport interface DeveloperOrgSale {\n id: string;\n organizationId: string;\n applicationId: string;\n buyerUserId: string;\n buyerTenantId?: string;\n installationScope: string;\n pricingModel: DevPortalPricingModel;\n planName?: string;\n grossAmount: number;\n platformFeeRate: number;\n platformFee: number;\n netAmount: number;\n currency: string;\n taxAmount?: number;\n discountAmount?: number;\n status: SaleStatus;\n createdAt: string;\n}\n\nexport interface DeveloperOrgPayout {\n id: string;\n organizationId: string;\n periodStart: string;\n periodEnd: string;\n grossAmount: number;\n platformFees: number;\n netAmount: number;\n currency: string;\n status: PayoutStatus;\n processedAt?: string;\n failedAt?: string;\n failureReason?: string;\n createdAt: string;\n}\n\n// =============================================================================\n// APP INSTALLATION TYPES\n// =============================================================================\n\nexport type AppInstallationStatus =\n \"ACTIVE\" \| \"SUSPENDED\" \| \"TRIAL\" \| \"EXPIRED\" \| \"UNINSTALLED\";\n\nexport interface AppInstallation {\n id: string;\n applicationId: string;\n userId: string;\n tenantId?: string;\n workspaceId?: string;\n organizationId?: string;\n scope: string;\n installedVersion: string;\n status: AppInstallationStatus;\n grantedScopes: string[];\n settings?: Record<string, unknown>;\n installedAt: string;\n updatedAt: string;\n}\n\n// =============================================================================\n// REVIEW TYPES\n// =============================================================================\n\nexport type ReviewStatus =\n \"PENDING\" \| \"PUBLISHED\" \| \"HIDDEN\" \| \"FLAGGED\" \| \"REMOVED\";\n\nexport interface AppReview {\n id: string;\n applicationId: string;\n userId: string;\n rating: number;\n title?: string;\n body?: string;\n status: ReviewStatus;\n isFeatured: boolean;\n helpfulCount: number;\n notHelpfulCount: number;\n developerResponse?: string;\n developerResponseAt?: string;\n createdAt: string;\n updatedAt: string;\n}\n\n// =============================================================================\n// DELEGATION TYPES\n// =============================================================================\n\nexport type DelegationStatus = \"ACTIVE\" \| \"REVOKED\" \| \"EXPIRED\";\n\nexport interface AppUserDelegation {\n id: string;\n appId: string;\n app?: {\n id: string;\n name: string;\n description?: string;\n type: string;\n status: string;\n };\n userId: string;\n scopes: string[];\n workspaceIds: string[];\n status: DelegationStatus;\n grantedAt: string;\n grantedBy: string;\n expiresAt?: string;\n revokedAt?: string;\n revokedBy?: string;\n}\n\nexport interface GrantDelegationInput {\n appId: string;\n userId?: string;\n workspaceIds: string[];\n scopes: string[];\n expiresAt?: string;\n}\n\n// =============================================================================\n// AUTH APP TYPES (from auth-svc layer)\n// =============================================================================\n\nexport type AuthAppType =\n \| \"ANALYST\"\n \| \"API_INTEGRATION\"\n \| \"ASSISTANT\"\n \| \"AUTOMATION\"\n \| \"BOT\"\n \| \"CLI_TOOL\"\n \| \"DESKTOP_APP\"\n \| \"INTEGRATION\"\n \| \"MOBILE_APP\"\n \| \"SERVICE\"\n \| \"SPECIALIST\"\n \| \"WEB_APP\"\n \| \"WIDGET\"\n \| \"WORKFLOW\";\nexport type AuthAppStatus = \"ACTIVE\" \| \"INACTIVE\" \| \"REVOKED\";\n\nexport interface AuthApp {\n id: string;\n name: string;\n description?: string;\n clientId: string;\n type: AuthAppType;\n status: AuthAppStatus;\n scopes: string[];\n redirectUris: string[];\n ownerUserId: string;\n tenantId: string;\n delegations?: AppUserDelegation[];\n createdAt: string;\n updatedAt: string;\n}\n\nexport interface AuthAppCreateResponse {\n app: AuthApp;\n clientSecret: string;\n}\n\nexport interface CreateAuthAppInput {\n name: string;\n description?: string;\n type: AuthAppType;\n scopes: string[];\n redirectUris?: string[];\n tenantId?: string;\n}\n\nexport interface UpdateAuthAppInput {\n name?: string;\n description?: string;\n scopes?: string[];\n redirectUris?: string[];\n}\n\n// =============================================================================\n// AUTH API KEY TYPES (from auth-svc layer)\n// =============================================================================\n\nexport interface AuthApiKey {\n id: string;\n name: string;\n prefix: string;\n scopes: string[];\n appId: string;\n appName?: string;\n createdAt: string;\n expiresAt?: string;\n lastUsedAt?: string;\n}\n\nexport interface AuthApiKeyResult {\n apiKey: string;\n apiSecret: string;\n keyId: string;\n}\n\nexport interface AuthApiKeyRotateResult {\n apiSecret: string;\n}\n\nexport interface GenerateAuthApiKeyInput {\n appId: string;\n name: string;\n scope: string[];\n expiresAt?: string;\n}\n\n// =============================================================================\n// AUDIT LOG TYPES\n// =============================================================================\n\nexport interface AuditLog {\n id: string;\n actorId: string;\n actorType: string;\n tenantId: string;\n action: string;\n resource: string;\n resourceId?: string;\n changes?: Record<string, unknown>;\n ipAddress?: string;\n userAgent?: string;\n createdAt: string;\n}\n\n// =============================================================================\n// VIEW TYPES\n// =============================================================================\n\nexport type DevportalView =\n \| \"dashboard\"\n \| \"organizations\"\n \| \"apps\"\n \| \"oauth\"\n \| \"api-keys\"\n \| \"webhooks\"\n \| \"delegations\"\n \| \"analytics\"\n \| \"revenue\"\n \| \"docs\"\n \| \"profile\"\n \| \"settings\";\n\n// =============================================================================\n// FILTER TYPES\n// =============================================================================\n\nexport interface ApplicationFilter {\n search?: string;\n status?: AppStatus;\n visibility?: AppVisibility;\n appType?: AppType;\n organizationId?: string;\n isFeatured?: boolean;\n}\n\nexport interface WebhookFilter {\n status?: WebhookStatus;\n event?: string;\n}\n\n// =============================================================================\n// WEBHOOK EVENT TYPES\n// =============================================================================\n\nexport const WEBHOOK_EVENTS = [\n // Application events\n \"application.created\",\n \"application.updated\",\n \"application.deleted\",\n \"application.published\",\n \"application.unpublished\",\n \"application.suspended\",\n // Installation events\n \"installation.created\",\n \"installation.updated\",\n \"installation.deleted\",\n // User events\n \"user.created\",\n \"user.updated\",\n \"user.deleted\",\n // Workspace events\n \"workspace.created\",\n \"workspace.updated\",\n \"workspace.deleted\",\n // Project events\n \"project.created\",\n \"project.updated\",\n \"project.deleted\",\n // Task events\n \"task.created\",\n \"task.updated\",\n \"task.deleted\",\n \"task.completed\",\n // Comment events\n \"comment.created\",\n \"comment.updated\",\n \"comment.deleted\",\n // File events\n \"file.uploaded\",\n \"file.deleted\",\n // Member events\n \"member.added\",\n \"member.removed\",\n \"member.role_changed\",\n] as const;\n\nexport type WebhookEvent = (typeof WEBHOOK_EVENTS)[number];\n\n// =============================================================================\n// SCOPE DEFINITIONS\n// =============================================================================\n\nexport const AVAILABLE_SCOPES = [\n // User scopes\n {\n scope: \"user:read\",\n description: \"Read user profile information\",\n category: \"User\",\n },\n {\n scope: \"user:write\",\n description: \"Modify user profile information\",\n category: \"User\",\n },\n {\n scope: \"user:email\",\n description: \"Access user email address\",\n category: \"User\",\n },\n // Workspace scopes\n {\n scope: \"workspace:read\",\n description: \"Read workspace information\",\n category: \"Workspace\",\n },\n {\n scope: \"workspace:write\",\n description: \"Create and modify workspaces\",\n category: \"Workspace\",\n },\n {\n scope: \"workspace:delete\",\n description: \"Delete workspaces\",\n category: \"Workspace\",\n },\n {\n scope: \"workspace:members\",\n description: \"Manage workspace members\",\n category: \"Workspace\",\n },\n // Project scopes\n {\n scope: \"project:read\",\n description: \"Read project information\",\n category: \"Project\",\n },\n {\n scope: \"project:write\",\n description: \"Create and modify projects\",\n category: \"Project\",\n },\n {\n scope: \"project:delete\",\n description: \"Delete projects\",\n category: \"Project\",\n },\n // Task scopes\n { scope: \"task:read\", description: \"Read tasks\", category: \"Task\" },\n {\n scope: \"task:write\",\n description: \"Create and modify tasks\",\n category: \"Task\",\n },\n { scope: \"task:delete\", description: \"Delete tasks\", category: \"Task\" },\n // File scopes\n { scope: \"file:read\", description: \"Read files\", category: \"File\" },\n {\n scope: \"file:write\",\n description: \"Upload and modify files\",\n category: \"File\",\n },\n { scope: \"file:delete\", description: \"Delete files\", category: \"File\" },\n // Comment scopes\n { scope: \"comment:read\", description: \"Read comments\", category: \"Comment\" },\n {\n scope: \"comment:write\",\n description: \"Create and modify comments\",\n category: \"Comment\",\n },\n {\n scope: \"comment:delete\",\n description: \"Delete comments\",\n category: \"Comment\",\n },\n // Offline access\n {\n scope: \"offline_access\",\n description: \"Access data while user is offline\",\n category: \"Access\",\n },\n] as const;\n\nexport type AvailableScope = (typeof AVAILABLE_SCOPES)[number][\"scope\"];\n"],"mappings":";AAu2BA,IAAaA,IAAiB,whBAwC9B,GAQaC,IAAmB;CAE9B;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CACA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CACA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CAEA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CACA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CACA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CACA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CAEA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CACA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CACA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CAEA;EAAE,OAAO;EAAa,aAAa;EAAc,UAAU;CAAO;CAClE;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CACA;EAAE,OAAO;EAAe,aAAa;EAAgB,UAAU;CAAO;CAEtE;EAAE,OAAO;EAAa,aAAa;EAAc,UAAU;CAAO;CAClE;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CACA;EAAE,OAAO;EAAe,aAAa;EAAgB,UAAU;CAAO;CAEtE;EAAE,OAAO;EAAgB,aAAa;EAAiB,UAAU;CAAU;CAC3E;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CACA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;CAEA;EACE,OAAO;EACP,aAAa;EACb,UAAU;CACZ;AACF"}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/microfe-devportal",
-  "version": "2026.1110.2",
+  "version": "2026.1112.1",
   "description": "Burdenoff Developer Portal Microfrontend - Complete developer operations interface",
   "type": "module",
   "files": [