@burdenoff/microfe-devportal 2026.1112.2 → 2026.1113.1

package/dist/devportal/components/StoreImage.js

@@ -0,0 +1,30 @@
+import { cn as e } from "../utils/cn.js";
+import { useState as t } from "react";
+import { ImageOff as n } from "lucide-react";
+import { Fragment as r, jsx as i } from "react/jsx-runtime";
+// src/devportal/components/StoreImage.tsx
+var a = /^(?:https?:\/\/|data:image\/|blob:|\/(?!\/))/i;
+function o(e) {
+	return typeof e == "string" && a.test(e.trim());
+}
+var s = ({ src: e, alt: n, fallback: a = null, ...s }) => {
+	let [c, l] = t(null);
+	return !o(e) || c === e ? /* @__PURE__ */ i(r, { children: a }) : /* @__PURE__ */ i("img", {
+		...s,
+		src: e,
+		alt: n,
+		onError: () => l(e)
+	});
+}, c = ({ className: t, iconSize: r = 18 }) => /* @__PURE__ */ i("div", {
+	role: "img",
+	"aria-label": "Image unavailable",
+	className: e("flex shrink-0 items-center justify-center rounded-input border border-border-subtle bg-bg-sunken", t),
+	children: /* @__PURE__ */ i(n, {
+		size: r,
+		className: "text-text-muted",
+		"aria-hidden": "true"
+	})
+});
+export { s as StoreImage, c as StoreImagePlaceholder, o as isRenderableImageSrc };
+
+//# sourceMappingURL=StoreImage.js.map

package/dist/devportal/components/StoreImage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StoreImage.js","names":["_Fragment","RENDERABLE_SRC","isRenderableImageSrc","src","StoreImage","imgProps","failedSrc","setFailedSrc","useState","Fragment","fallback","StoreImagePlaceholder","cn","className","ImageOff","iconSize"],"sources":["../../../src/devportal/components/StoreImage.tsx"],"sourcesContent":["import type { FC, ImgHTMLAttributes, ReactNode } from \"react\";\nimport { useState } from \"react\";\nimport { ImageOff } from \"lucide-react\";\nimport { cn } from \"../utils/cn\";\n\n// =============================================================================\n// STORE IMAGE\n//\n// Renders a store listing image (app/item icon, banner, screenshot) and swaps\n// in a fallback when the value can't be shown: empty, not a browser-loadable\n// URL (e.g. a bare Iconify name like \"mdi:robot\"), or the request fails (an\n// expired presigned link, a 404, a rate-limited third-party host).\n// fe-libs has no image-with-fallback primitive, so this lives here.\n// =============================================================================\n\nconst RENDERABLE_SRC = /^(?:https?:\\/\\/|data:image\\/|blob:|\\/(?!\\/))/i;\n\n/** True when `src` is a value the browser can load as an image. */\nexport function isRenderableImageSrc(\n  src: string | null | undefined,\n): src is string {\n  return typeof src === \"string\" && RENDERABLE_SRC.test(src.trim());\n}\n\nexport interface StoreImageProps extends Omit<\n  ImgHTMLAttributes<HTMLImageElement>,\n  \"src\" | \"onError\"\n> {\n  src: string | null | undefined;\n  alt: string;\n  /** Shown instead of the image when it is missing or fails to load. */\n  fallback?: ReactNode;\n}\n\nexport const StoreImage: FC<StoreImageProps> = ({\n  src,\n  alt,\n  fallback = null,\n  ...imgProps\n}) => {\n  // Remember which src failed rather than a boolean, so a new src (e.g.\n  // after a re-upload) gets a fresh attempt without an effect.\n  const [failedSrc, setFailedSrc] = useState<string | null>(null);\n\n  if (!isRenderableImageSrc(src) || failedSrc === src) {\n    return <>{fallback}</>;\n  }\n\n  return (\n    <img {...imgProps} src={src} alt={alt} onError={() => setFailedSrc(src)} />\n  );\n};\n\n/** Neutral tile for a store image that can't be shown. Size it via className. */\nexport const StoreImagePlaceholder: FC<{\n  className?: string;\n  iconSize?: number;\n}> = ({ className, iconSize = 18 }) => (\n  <div\n    role=\"img\"\n    aria-label=\"Image unavailable\"\n    className={cn(\n      \"flex shrink-0 items-center justify-center rounded-input border border-border-subtle bg-bg-sunken\",\n      className,\n    )}\n  >\n    <ImageOff size={iconSize} className=\"text-text-muted\" aria-hidden=\"true\" />\n  </div>\n);\n"],"mappings":";;;;;AAeA,IAAMC,IAAiB;AAGvB,SAAgBC,EACd,GACe;CACf,OAAO,OAAOC,KAAQ,YAAYF,EAAe,KAAKE,EAAI,KAAK,CAAC;AAClE;AAYA,IAAaC,KAAmC,EAC9C,QACA,QACA,cAAW,MACX,GAAGC,QACC;CAGJ,IAAM,CAACC,GAAWC,KAAgBC,EAAwB,IAAI;CAM9D,OAJI,CAACN,EAAqBC,CAAG,KAAKG,MAAcH,IACvC,kBAAAH,GAAA,EAAA,UAAGU,EAAW,CAAA,IAIrB,kBAAC,OAAD;EAAK,GAAIL;EAAe;EAAU;EAAK,eAAeE,EAAaJ,CAAG;CAAI,CAAA;AAE9E,GAGaQ,KAGP,EAAE,cAAW,cAAW,SAC5B,kBAAC,OAAD;CACE,MAAK;CACL,cAAW;CACX,WAAWC,EACT,oGACAC,CACF;CAEA,UAAA,kBAACC,GAAD;EAAU,MAAMC;EAAU,WAAU;EAAkB,eAAY;CAAQ,CAAA;AACvE,CAAA"}

package/dist/devportal/components/index.d.ts

@@ -9,6 +9,7 @@ export * from './PageLayout';
 export * from './StatCard';
 export * from './StatusBadge';
 export * from './AppCard';
+export * from './StoreImage';
 export * from './SecretDisplay';
 export * from './DataTable';
 export * from './FormField';

package/dist/devportal/components/index.js

@@ -4,19 +4,20 @@ import { PageLayout as r, PageSection as i } from "./PageLayout.js";
 import { StatCard as a, StatCardGrid as o } from "./StatCard.js";
 import { ActiveIndicator as s, FeaturedBadge as c, StatusBadge as l, VerifiedBadge as u } from "./StatusBadge.js";
 import { AppCard as d, AppListItem as f } from "./AppCard.js";
-import { NewSecretAlert as p, SecretDisplay as m } from "./SecretDisplay.js";
-import { DataTable as h, DetailList as g } from "./DataTable.js";
-import { CheckboxField as _, InputField as v, SelectField as y, TagInput as b, TextareaField as x } from "./FormField.js";
-import { Alert as S, ConfirmDialog as C } from "./ConfirmDialog.js";
-import { GrantDelegationModal as w } from "./GrantDelegationModal.js";
-import { ReportOrderIssueModal as T } from "./ReportOrderIssueModal.js";
-import { RegisterPickupLocationModal as E } from "./RegisterPickupLocationModal.js";
-import { PermissionGuard as D } from "./PermissionGuard.js";
-import { FeatureFlaggedRoute as O } from "./FeatureFlaggedRoute.js";
-import { TelemetryErrorBoundary as k } from "./TelemetryErrorBoundary.js";
-import { OrgSwitcher as A } from "./SectionNav.js";
-import { MarkdownEditor as j } from "./MarkdownEditor.js";
-import { ManifestViewer as M } from "./ManifestViewer.js";
-import { PackageValidationPanel as N, readPackageValidationState as P } from "./PackageValidationPanel.js";
-import { NodeSmokePanel as F, readNodeSmokeState as I } from "./NodeSmokePanel.js";
-export { s as ActiveIndicator, S as Alert, d as AppCard, f as AppListItem, _ as CheckboxField, C as ConfirmDialog, h as DataTable, g as DetailList, n as EmptyState, O as FeatureFlaggedRoute, c as FeaturedBadge, w as GrantDelegationModal, v as InputField, e as LoadingState, M as ManifestViewer, j as MarkdownEditor, p as NewSecretAlert, F as NodeSmokePanel, A as OrgSwitcher, N as PackageValidationPanel, r as PageLayout, t as PageLoadingState, i as PageSection, D as PermissionGuard, E as RegisterPickupLocationModal, T as ReportOrderIssueModal, m as SecretDisplay, y as SelectField, a as StatCard, o as StatCardGrid, l as StatusBadge, b as TagInput, k as TelemetryErrorBoundary, x as TextareaField, u as VerifiedBadge, I as readNodeSmokeState, P as readPackageValidationState };
+import { StoreImage as p, StoreImagePlaceholder as m, isRenderableImageSrc as h } from "./StoreImage.js";
+import { NewSecretAlert as g, SecretDisplay as _ } from "./SecretDisplay.js";
+import { DataTable as v, DetailList as y } from "./DataTable.js";
+import { CheckboxField as b, InputField as x, SelectField as S, TagInput as C, TextareaField as w } from "./FormField.js";
+import { Alert as T, ConfirmDialog as E } from "./ConfirmDialog.js";
+import { GrantDelegationModal as D } from "./GrantDelegationModal.js";
+import { ReportOrderIssueModal as O } from "./ReportOrderIssueModal.js";
+import { RegisterPickupLocationModal as k } from "./RegisterPickupLocationModal.js";
+import { PermissionGuard as A } from "./PermissionGuard.js";
+import { FeatureFlaggedRoute as j } from "./FeatureFlaggedRoute.js";
+import { TelemetryErrorBoundary as M } from "./TelemetryErrorBoundary.js";
+import { OrgSwitcher as N } from "./SectionNav.js";
+import { MarkdownEditor as P } from "./MarkdownEditor.js";
+import { ManifestViewer as F } from "./ManifestViewer.js";
+import { PackageValidationPanel as I, readPackageValidationState as L } from "./PackageValidationPanel.js";
+import { NodeSmokePanel as R, readNodeSmokeState as z } from "./NodeSmokePanel.js";
+export { s as ActiveIndicator, T as Alert, d as AppCard, f as AppListItem, b as CheckboxField, E as ConfirmDialog, v as DataTable, y as DetailList, n as EmptyState, j as FeatureFlaggedRoute, c as FeaturedBadge, D as GrantDelegationModal, x as InputField, e as LoadingState, F as ManifestViewer, P as MarkdownEditor, g as NewSecretAlert, R as NodeSmokePanel, N as OrgSwitcher, I as PackageValidationPanel, r as PageLayout, t as PageLoadingState, i as PageSection, A as PermissionGuard, k as RegisterPickupLocationModal, O as ReportOrderIssueModal, _ as SecretDisplay, S as SelectField, a as StatCard, o as StatCardGrid, l as StatusBadge, p as StoreImage, m as StoreImagePlaceholder, C as TagInput, M as TelemetryErrorBoundary, w as TextareaField, u as VerifiedBadge, h as isRenderableImageSrc, z as readNodeSmokeState, L as readPackageValidationState };

package/dist/devportal/hooks/usePackageUpload.d.ts

@@ -1,10 +1,27 @@
 export interface PackageUploadResult {
     fileId: string;
-    /** The permanent publicUrl when available, else the presigned downloadUrl
-     * (field name kept as `downloadUrl` so existing callers don't need to
-     * change — see the module doc comment above). */
+    /** The permanent publicUrl when available, else (package uploads only) the
+     * presigned downloadUrl. Field name kept as `downloadUrl` so existing
+     * callers don't need to change — see the module doc comment above. */
     downloadUrl: string;
 }
+export interface PackageUploadOptions {
+    /** Fail instead of falling back to the presigned downloadUrl when the
+     * file has no permanent publicUrl. Set for anything rendered later as an
+     * image (icons, banners, screenshots). */
+    requirePublicUrl?: boolean;
+    /** Delays between publicUrl re-reads when `requirePublicUrl` is set. */
+    publicUrlRetryDelaysMs?: readonly number[];
+}
+/** Folder for store listing images (icons, banners, screenshots). */
+export declare const ASSET_UPLOAD_FOLDER = "/DevPortal/Assets";
+/** Default folder for package (zip) uploads. */
+export declare const PACKAGE_UPLOAD_FOLDER = "/DevPortal/Packages";
+/** Backoff used to re-read a file's publicUrl after completeUpload. */
+export declare const DEFAULT_PUBLIC_URL_RETRY_DELAYS_MS: readonly number[];
+/** Shown when an image upload succeeded but has no permanent link yet. */
+export declare const PUBLIC_URL_NOT_READY_MESSAGE = "The image was uploaded but its public link is not ready yet. Please try again.";
+type Sleep = (ms: number) => Promise<void>;
 export interface PackageUploadState {
     uploading: boolean;
     progress: number;
@@ -12,7 +29,32 @@ export interface PackageUploadState {
 }
 type GqlFetcher = (query: string, variables: Record<string, unknown>) => Promise<Record<string, unknown>>;
 export declare function makeFetcher(workspacesGatewayUrl: string, authToken: string | undefined, workspaceId: string | undefined, workspaceToken: string | undefined): GqlFetcher;
-export declare function usePackageUpload(workspacesGatewayUrl: string | undefined, authToken: string | undefined, workspaceId: string | undefined, getWorkspaceToken: (() => Promise<string | null>) | undefined, folderPath?: string): {
+interface UploadedFile {
+    id: string;
+    downloadUrl?: string;
+    publicUrl?: string | null;
+}
+export declare function completeUpload(gql: GqlFetcher, sessionId: string, folderId: string, fileSize: number): Promise<UploadedFile>;
+/** Re-reads the file's permanent publicUrl (null while the mirror is pending). */
+export declare function fetchPublicUrl(gql: GqlFetcher, fileId: string): Promise<string | undefined>;
+/**
+ * Picks the URL to persist for a completed upload. Package uploads fall back
+ * to the presigned downloadUrl; asset uploads (`requirePublicUrl`) retry the
+ * publicUrl and throw PUBLIC_URL_NOT_READY_MESSAGE rather than return a
+ * presigned URL that expires.
+ */
+export declare function resolvePersistableUrl(gql: GqlFetcher, file: UploadedFile, options?: PackageUploadOptions, sleep?: Sleep): Promise<PackageUploadResult>;
+export declare function usePackageUpload(workspacesGatewayUrl: string | undefined, authToken: string | undefined, workspaceId: string | undefined, getWorkspaceToken: (() => Promise<string | null>) | undefined, folderPath?: string, options?: PackageUploadOptions): {
+    uploading: boolean;
+    progress: number;
+    error: string | null;
+    upload: (file: File) => Promise<PackageUploadResult>;
+};
+/**
+ * Upload hook for store listing images (icons, banners, screenshots). Stores
+ * under ASSET_UPLOAD_FOLDER and only ever returns the permanent publicUrl.
+ */
+export declare function useAssetUpload(workspacesGatewayUrl: string | undefined, authToken: string | undefined, workspaceId: string | undefined, getWorkspaceToken: (() => Promise<string | null>) | undefined): {
     uploading: boolean;
     progress: number;
     error: string | null;

package/dist/devportal/hooks/usePackageUpload.js

@@ -1,26 +1,32 @@
 import { graphQLErrorFrom as e, httpErrorFrom as t } from "../utils/uploadErrors.js";
-import { useCallback as n, useState as r } from "react";
+import { useCallback as n, useMemo as r, useState as i } from "react";
 // src/devportal/hooks/usePackageUpload.ts
-async function i(e) {
+var a = "/DevPortal/Assets", o = "/DevPortal/Packages", s = [
+	500,
+	1e3,
+	2e3,
+	4e3
+], c = "The image was uploaded but its public link is not ready yet. Please try again.", l = (e) => new Promise((t) => setTimeout(t, e));
+async function u(e) {
 	try {
 		return await e.json();
 	} catch {
 		return;
 	}
 }
-function a(n, r, a, o) {
-	return async (s, c) => {
-		let l = { "Content-Type": "application/json" };
-		r && (l.Authorization = `Bearer ${r}`), o && (l["X-Workspace-Authorization"] = `Bearer ${o}`), a && (l["x-workspace-id"] = a);
-		let u = n.endsWith("/graphql") ? n : `${n}/workspaces/graphql`, d = await fetch(u, {
+function d(n, r, i, a) {
+	return async (o, s) => {
+		let c = { "Content-Type": "application/json" };
+		r && (c.Authorization = `Bearer ${r}`), a && (c["X-Workspace-Authorization"] = `Bearer ${a}`), i && (c["x-workspace-id"] = i);
+		let l = n.endsWith("/graphql") ? n : `${n}/workspaces/graphql`, d = await fetch(l, {
 			method: "POST",
-			headers: l,
+			headers: c,
 			credentials: "include",
 			body: JSON.stringify({
-				query: s,
-				variables: c
+				query: o,
+				variables: s
 			})
-		}), f = await i(d);
+		}), f = await u(d);
 		if (!d.ok) throw t(d.status, d.statusText, f);
 		let p = e(f);
 		if (p) throw p;
@@ -28,12 +34,12 @@ function a(n, r, a, o) {
 		return typeof m == "object" && m ? m : {};
 	};
 }
-async function o(e, t) {
+async function f(e, t) {
 	let n = (await e("mutation DevPortal_EnsureFolder($path: String!) {\n       ensureFolderByPath(path: $path) { id }\n     }", { path: t })).ensureFolderByPath?.id;
 	if (!n) throw Error("ensureFolderByPath returned no id");
 	return n;
 }
-async function s(e, t, n) {
+async function p(e, t, n) {
 	let r = t.name.includes(".") ? t.name.substring(t.name.lastIndexOf(".") + 1) : "zip", i = (await e("mutation DevPortal_InitiateUpload($input: InitiateUploadInput!) {\n       initiateUpload(input: $input) {\n         uploadUrl\n         session { id }\n       }\n     }", { input: {
 		fileName: t.name,
 		fileSize: String(t.size),
@@ -48,7 +54,7 @@ async function s(e, t, n) {
 		uploadUrl: o
 	};
 }
-async function c(e, t, n) {
+async function m(e, t, n) {
 	await new Promise((r, i) => {
 		let a = new XMLHttpRequest();
 		a.upload.addEventListener("progress", (e) => {
@@ -58,20 +64,58 @@ async function c(e, t, n) {
 		}), a.addEventListener("error", () => i(/* @__PURE__ */ Error("S3 PUT network error"))), a.addEventListener("abort", () => i(/* @__PURE__ */ Error("S3 PUT aborted"))), a.open("PUT", t), a.setRequestHeader("Content-Type", e.type || "application/zip"), a.send(e);
 	});
 }
-async function l(e, t, n, r) {
+function h(e) {
+	return typeof e == "string" && e.length > 0 ? e : void 0;
+}
+async function g(e, t, n, r) {
 	let i = (await e("mutation DevPortal_CompleteUpload($input: CompleteUploadInput!) {\n       completeUpload(input: $input) {\n         file { id downloadUrl publicUrl }\n       }\n     }", { input: {
 		sessionId: t,
 		folderId: n,
 		fileSize: String(r)
-	} })).completeUpload?.file, a = i?.publicUrl || i?.downloadUrl;
-	if (!i?.id || !a) throw Error("completeUpload did not return file id or a usable URL");
+	} })).completeUpload?.file, a = h(i?.id);
+	if (!a) throw Error("completeUpload did not return a file id");
 	return {
-		fileId: i.id,
-		downloadUrl: a
+		id: a,
+		downloadUrl: i?.downloadUrl,
+		publicUrl: i?.publicUrl
 	};
 }
-function u(e, t, i, u, d = "/DevPortal/Packages") {
-	let [f, p] = r({
+async function _(e, t) {
+	let n = (await e("query DevPortal_FilePublicUrl($id: ID!) {\n       getFile(id: $id) { id publicUrl }\n     }", { id: t })).getFile;
+	return h(n?.publicUrl);
+}
+async function v(e, t, n = {}, r = l) {
+	let i = h(t.publicUrl);
+	if (i) return {
+		fileId: t.id,
+		downloadUrl: i
+	};
+	if (!n.requirePublicUrl) {
+		let e = h(t.downloadUrl);
+		if (!e) throw Error("completeUpload did not return a usable URL");
+		return {
+			fileId: t.id,
+			downloadUrl: e
+		};
+	}
+	let a = n.publicUrlRetryDelaysMs ?? s;
+	for (let n of a) {
+		await r(n);
+		let i;
+		try {
+			i = await _(e, t.id);
+		} catch {
+			i = void 0;
+		}
+		if (i) return {
+			fileId: t.id,
+			downloadUrl: i
+		};
+	}
+	throw Error(c);
+}
+function y(e, t, a, s, c = o, l = {}) {
+	let { requirePublicUrl: u = !1, publicUrlRetryDelaysMs: h } = l, _ = h?.join(","), y = r(() => _ === void 0 ? void 0 : _.split(",").filter((e) => e !== "").map(Number), [_]), [b, x] = i({
 		uploading: !1,
 		progress: 0,
 		error: null
@@ -79,38 +123,41 @@ function u(e, t, i, u, d = "/DevPortal/Packages") {
 	return {
 		upload: n(async (n) => {
 			if (!e) throw Error("workspacesGatewayUrl is not configured. Pass it as a prop to DevportalRoot.");
-			let r = a(e, t, i, (u ? await u() : void 0) ?? void 0);
-			p({
+			let r = d(e, t, a, (s ? await s() : void 0) ?? void 0);
+			x({
 				uploading: !0,
 				progress: 0,
 				error: null
 			});
 			try {
-				let e = await o(r, d);
-				p((e) => ({
+				let e = await f(r, c);
+				x((e) => ({
 					...e,
 					progress: 5
 				}));
-				let { sessionId: t, uploadUrl: i } = await s(r, n, e);
-				p((e) => ({
+				let { sessionId: t, uploadUrl: i } = await p(r, n, e);
+				x((e) => ({
 					...e,
 					progress: 10
-				})), await c(n, i, (e) => p((t) => ({
+				})), await m(n, i, (e) => x((t) => ({
 					...t,
 					progress: e
-				}))), p((e) => ({
+				}))), x((e) => ({
 					...e,
 					progress: 90
 				}));
-				let a = await l(r, t, e, n.size);
-				return p({
+				let a = await v(r, await g(r, t, e, n.size), {
+					requirePublicUrl: u,
+					publicUrlRetryDelaysMs: y
+				});
+				return x({
 					uploading: !1,
 					progress: 100,
 					error: null
 				}), a;
 			} catch (e) {
 				let t = e instanceof Error ? e.message : "Upload failed";
-				throw p({
+				throw x({
 					uploading: !1,
 					progress: 0,
 					error: t
@@ -119,12 +166,19 @@ function u(e, t, i, u, d = "/DevPortal/Packages") {
 		}, [
 			e,
 			t,
-			i,
-			u
+			a,
+			s,
+			c,
+			u,
+			y
 		]),
-		...f
+		...b
 	};
 }
-export { a as makeFetcher, u as usePackageUpload };
+var b = { requirePublicUrl: !0 };
+function x(e, t, n, r) {
+	return y(e, t, n, r, a, b);
+}
+export { a as ASSET_UPLOAD_FOLDER, s as DEFAULT_PUBLIC_URL_RETRY_DELAYS_MS, o as PACKAGE_UPLOAD_FOLDER, c as PUBLIC_URL_NOT_READY_MESSAGE, g as completeUpload, _ as fetchPublicUrl, d as makeFetcher, v as resolvePersistableUrl, x as useAssetUpload, y as usePackageUpload };
 
 //# sourceMappingURL=usePackageUpload.js.map

package/dist/devportal/hooks/usePackageUpload.js.map

@@ -1 +1 @@
-{"version":3,"file":"usePackageUpload.js","names":["readJsonBody","res","makeFetcher","headers","authToken","\"Authorization\"","workspaceToken","workspaceId","endpoint","workspacesGatewayUrl","body","httpErrorFrom","inBand","graphQLErrorFrom","data","ensureFolder","id","gql","initiateUpload","ext","file","result","sessionId","uploadUrl","putToPresignedUrl","xhr","evt","onProgress","resolve","reject","completeUpload","fileSize","url","usePackageUpload","state","setState","useState","useCallback","getWorkspaceToken","folderId","folderPath","s","pct","err","message"],"sources":["../../../src/devportal/hooks/usePackageUpload.ts"],"sourcesContent":["/**\n * usePackageUpload — uploads a file to wspace-files-svc and returns a URL to\n * persist (ApplicationVersion.packageUrl, a physical item's image, an app\n * icon — this hook is generic despite its name; folderPath picks the\n * destination). Every upload here is visibility: PUBLIC (see\n * initiateUpload below), so the returned URL prefers the permanent CDN\n * publicUrl over the presigned downloadUrl (~1 hour TTL, wrong for anything\n * persisted and displayed later — see wspace-files-svc's FieldResolvers.ts\n * doc comment on `downloadUrl`). Falls back to downloadUrl when publicUrl\n * is null (the public-assets CDN infra isn't provisioned in every\n * environment yet), so this keeps working exactly as before until it is.\n *\n * Flow (mirrors uploadBlobToFiles in @burdenoff/fe-libs/storage):\n *   1. ensureFolderByPath(folderPath) → folderId\n *   2. initiateUpload → { sessionId, presignedUrl }\n *   3. PUT blob to presignedUrl (progress tracked via XHR)\n *   4. completeUpload → { file.publicUrl ?? file.downloadUrl }\n *\n * Uses raw fetch for GraphQL mutations so we can target the workspace gateway\n * without a second ApolloProvider.\n */\nimport { useCallback, useState } from \"react\";\nimport { graphQLErrorFrom, httpErrorFrom } from \"../utils/uploadErrors\";\n\nexport interface PackageUploadResult {\n  fileId: string;\n  /** The permanent publicUrl when available, else the presigned downloadUrl\n   * (field name kept as `downloadUrl` so existing callers don't need to\n   * change — see the module doc comment above). */\n  downloadUrl: string;\n}\n\nexport interface PackageUploadState {\n  uploading: boolean;\n  progress: number;\n  error: string | null;\n}\n\ntype GqlFetcher = (\n  query: string,\n  variables: Record<string, unknown>,\n) => Promise<Record<string, unknown>>;\n\n/** The parsed JSON body, or undefined when it is missing or not JSON. */\nasync function readJsonBody(res: Response): Promise<unknown> {\n  try {\n    return await res.json();\n  } catch {\n    return undefined;\n  }\n}\n\nexport function makeFetcher(\n  workspacesGatewayUrl: string,\n  authToken: string | undefined,\n  workspaceId: string | undefined,\n  workspaceToken: string | undefined,\n): GqlFetcher {\n  return async (query, variables) => {\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/json\",\n    };\n    if (authToken) headers[\"Authorization\"] = `Bearer ${authToken}`;\n    if (workspaceToken)\n      headers[\"X-Workspace-Authorization\"] = `Bearer ${workspaceToken}`;\n    if (workspaceId) headers[\"x-workspace-id\"] = workspaceId;\n\n    const endpoint = workspacesGatewayUrl.endsWith(\"/graphql\")\n      ? workspacesGatewayUrl\n      : `${workspacesGatewayUrl}/workspaces/graphql`;\n\n    const res = await fetch(endpoint, {\n      method: \"POST\",\n      headers,\n      credentials: \"include\",\n      body: JSON.stringify({ query, variables }),\n    });\n    // Read the body even on a non-2xx status: the gateway explains a quota\n    // refusal (HTTP 429) in the GraphQL errors, and the status alone reads as\n    // rate limiting (BOFF-10676).\n    const body = await readJsonBody(res);\n    if (!res.ok) {\n      throw httpErrorFrom(res.status, res.statusText, body);\n    }\n    const inBand = graphQLErrorFrom(body);\n    if (inBand) throw inBand;\n    // Cast: `body` is untrusted JSON; only `data` is read, and its shape is checked below.\n    const data = (body as { data?: unknown } | undefined)?.data;\n    return typeof data === \"object\" && data !== null\n      ? // A GraphQL `data` member is always an object keyed by root field.\n        (data as Record<string, unknown>)\n      : {};\n  };\n}\n\nasync function ensureFolder(gql: GqlFetcher, path: string): Promise<string> {\n  const data = await gql(\n    `mutation DevPortal_EnsureFolder($path: String!) {\n       ensureFolderByPath(path: $path) { id }\n     }`,\n    { path },\n  );\n  const id = (data.ensureFolderByPath as { id?: string } | undefined)?.id;\n  if (!id) throw new Error(\"ensureFolderByPath returned no id\");\n  return id;\n}\n\nasync function initiateUpload(\n  gql: GqlFetcher,\n  file: File,\n  folderId: string,\n): Promise<{ sessionId: string; uploadUrl: string }> {\n  const ext = file.name.includes(\".\")\n    ? file.name.substring(file.name.lastIndexOf(\".\") + 1)\n    : \"zip\";\n  const data = await gql(\n    `mutation DevPortal_InitiateUpload($input: InitiateUploadInput!) {\n       initiateUpload(input: $input) {\n         uploadUrl\n         session { id }\n       }\n     }`,\n    {\n      input: {\n        fileName: file.name,\n        fileSize: String(file.size),\n        mimeType: file.type || \"application/zip\",\n        extension: ext,\n        folderId,\n        visibility: \"PUBLIC\",\n      },\n    },\n  );\n  const result = data.initiateUpload as\n    { uploadUrl?: string; session?: { id?: string } } | undefined;\n  const sessionId = result?.session?.id;\n  const uploadUrl = result?.uploadUrl;\n  if (!sessionId || !uploadUrl) {\n    throw new Error(\"initiateUpload did not return sessionId or uploadUrl\");\n  }\n  return { sessionId, uploadUrl };\n}\n\nasync function putToPresignedUrl(\n  file: File,\n  uploadUrl: string,\n  onProgress: (pct: number) => void,\n): Promise<void> {\n  await new Promise<void>((resolve, reject) => {\n    const xhr = new XMLHttpRequest();\n    xhr.upload.addEventListener(\"progress\", (evt) => {\n      if (evt.lengthComputable) {\n        onProgress(10 + Math.round((evt.loaded / evt.total) * 80));\n      }\n    });\n    xhr.addEventListener(\"load\", () => {\n      if (xhr.status >= 200 && xhr.status < 300) {\n        resolve();\n      } else {\n        reject(new Error(`S3 PUT failed: ${xhr.status}`));\n      }\n    });\n    xhr.addEventListener(\"error\", () =>\n      reject(new Error(\"S3 PUT network error\")),\n    );\n    xhr.addEventListener(\"abort\", () => reject(new Error(\"S3 PUT aborted\")));\n    xhr.open(\"PUT\", uploadUrl);\n    xhr.setRequestHeader(\"Content-Type\", file.type || \"application/zip\");\n    xhr.send(file);\n  });\n}\n\nasync function completeUpload(\n  gql: GqlFetcher,\n  sessionId: string,\n  folderId: string,\n  fileSize: number,\n): Promise<PackageUploadResult> {\n  const data = await gql(\n    `mutation DevPortal_CompleteUpload($input: CompleteUploadInput!) {\n       completeUpload(input: $input) {\n         file { id downloadUrl publicUrl }\n       }\n     }`,\n    {\n      input: {\n        sessionId,\n        folderId,\n        fileSize: String(fileSize),\n      },\n    },\n  );\n  const file = (\n    data.completeUpload as\n      | {\n          file?: {\n            id?: string;\n            downloadUrl?: string;\n            publicUrl?: string | null;\n          };\n        }\n      | undefined\n  )?.file;\n  const url = file?.publicUrl || file?.downloadUrl;\n  if (!file?.id || !url) {\n    throw new Error(\"completeUpload did not return file id or a usable URL\");\n  }\n  return { fileId: file.id, downloadUrl: url };\n}\n\nexport function usePackageUpload(\n  workspacesGatewayUrl: string | undefined,\n  authToken: string | undefined,\n  workspaceId: string | undefined,\n  getWorkspaceToken: (() => Promise<string | null>) | undefined,\n  folderPath = \"/DevPortal/Packages\",\n) {\n  const [state, setState] = useState<PackageUploadState>({\n    uploading: false,\n    progress: 0,\n    error: null,\n  });\n\n  const upload = useCallback(\n    async (file: File): Promise<PackageUploadResult> => {\n      if (!workspacesGatewayUrl) {\n        throw new Error(\n          \"workspacesGatewayUrl is not configured. Pass it as a prop to DevportalRoot.\",\n        );\n      }\n\n      const freshToken = getWorkspaceToken\n        ? await getWorkspaceToken()\n        : undefined;\n      const gql = makeFetcher(\n        workspacesGatewayUrl,\n        authToken,\n        workspaceId,\n        freshToken ?? undefined,\n      );\n\n      setState({ uploading: true, progress: 0, error: null });\n      try {\n        const folderId = await ensureFolder(gql, folderPath);\n        setState((s) => ({ ...s, progress: 5 }));\n\n        const { sessionId, uploadUrl } = await initiateUpload(\n          gql,\n          file,\n          folderId,\n        );\n        setState((s) => ({ ...s, progress: 10 }));\n\n        await putToPresignedUrl(file, uploadUrl, (pct) =>\n          setState((s) => ({ ...s, progress: pct })),\n        );\n        setState((s) => ({ ...s, progress: 90 }));\n\n        const result = await completeUpload(\n          gql,\n          sessionId,\n          folderId,\n          file.size,\n        );\n        setState({ uploading: false, progress: 100, error: null });\n        return result;\n      } catch (err) {\n        const message = err instanceof Error ? err.message : \"Upload failed\";\n        setState({ uploading: false, progress: 0, error: message });\n        throw err;\n      }\n    },\n    [workspacesGatewayUrl, authToken, workspaceId, getWorkspaceToken],\n  );\n\n  return { upload, ...state };\n}\n"],"mappings":";;;AA4CA,eAAeA,EAAa,GAAiC;CAC3D,IAAI;EACF,OAAO,MAAMC,EAAI,KAAK;CACxB,QAAQ;EACN;CACF;AACF;AAEA,SAAgBC,EACd,GACA,GACA,GACA,GACY;CACZ,OAAO,OAAO,GAAO,MAAc;EACjC,IAAMC,IAAkC,EACtC,gBAAgB,mBAClB;EAIA,AAHIC,MAAW,EAAQC,gBAAmB,UAAUD,MAChDE,MACF,EAAQ,+BAA+B,UAAUA,MAC/CC,MAAa,EAAQ,oBAAoBA;EAE7C,IAAMC,IAAWC,EAAqB,SAAS,UAAU,IACrDA,IACA,GAAGA,EAAqB,sBAEtBR,IAAM,MAAM,MAAMO,GAAU;GAChC,QAAQ;GACR;GACA,aAAa;GACb,MAAM,KAAK,UAAU;IAAE;IAAO;GAAU,CAAC;EAC3C,CAAC,GAIKE,IAAO,MAAMV,EAAaC,CAAG;EACnC,IAAI,CAACA,EAAI,IACP,MAAMU,EAAcV,EAAI,QAAQA,EAAI,YAAYS,CAAI;EAEtD,IAAME,IAASC,EAAiBH,CAAI;EACpC,IAAIE,GAAQ,MAAMA;EAElB,IAAME,IAAQJ,GAAyC;EACvD,OAAO,OAAOI,KAAS,YAAYA,IAE9BA,IACD,CAAC;CACP;AACF;AAEA,eAAeC,EAAa,GAAiB,GAA+B;CAO1E,IAAMC,KAAM,MANOC,EACjB,4GAGA,EAAE,QAAK,CACT,EAAA,CACiB,oBAAoD;CACrE,IAAI,CAACD,GAAI,MAAU,MAAM,mCAAmC;CAC5D,OAAOA;AACT;AAEA,eAAeE,EACb,GACA,GACA,GACmD;CACnD,IAAMC,IAAMC,EAAK,KAAK,SAAS,GAAG,IAC9BA,EAAK,KAAK,UAAUA,EAAK,KAAK,YAAY,GAAG,IAAI,CAAC,IAClD,OAmBEC,KAAS,MAlBIJ,EACjB,4KAMA,EACE,OAAO;EACL,UAAUG,EAAK;EACf,UAAU,OAAOA,EAAK,IAAI;EAC1B,UAAUA,EAAK,QAAQ;EACvB,WAAWD;EACX;EACA,YAAY;CACd,EACF,CACF,EAAA,CACoB,gBAEdG,IAAYD,GAAQ,SAAS,IAC7BE,IAAYF,GAAQ;CAC1B,IAAI,CAACC,KAAa,CAACC,GACjB,MAAU,MAAM,sDAAsD;CAExE,OAAO;EAAE;EAAW;CAAU;AAChC;AAEA,eAAeC,EACb,GACA,GACA,GACe;CACf,MAAM,IAAI,SAAe,GAAS,MAAW;EAC3C,IAAMC,IAAM,IAAI,eAAe;EAmB/B,AAlBAA,EAAI,OAAO,iBAAiB,aAAa,MAAQ;GAC/C,AAAIC,EAAI,oBACNC,EAAW,KAAK,KAAK,MAAOD,EAAI,SAASA,EAAI,QAAS,EAAE,CAAC;EAE7D,CAAC,GACDD,EAAI,iBAAiB,cAAc;GACjC,AAAIA,EAAI,UAAU,OAAOA,EAAI,SAAS,MACpCG,EAAQ,IAERC,EAAO,gBAAI,MAAM,kBAAkBJ,EAAI,QAAQ,CAAC;EAEpD,CAAC,GACDA,EAAI,iBAAiB,eACnBI,EAAO,gBAAI,MAAM,sBAAsB,CAAC,CAC1C,GACAJ,EAAI,iBAAiB,eAAeI,EAAO,gBAAI,MAAM,gBAAgB,CAAC,CAAC,GACvEJ,EAAI,KAAK,OAAOF,CAAS,GACzBE,EAAI,iBAAiB,gBAAgBL,EAAK,QAAQ,iBAAiB,GACnEK,EAAI,KAAKL,CAAI;CACf,CAAC;AACH;AAEA,eAAeU,EACb,GACA,GACA,GACA,GAC8B;CAe9B,IAAMV,KACJ,MAfiBH,EACjB,2KAKA,EACE,OAAO;EACL;EACA;EACA,UAAU,OAAOc,CAAQ;CAC3B,EACF,CACF,EAAA,CAEO,gBASJ,MACGC,IAAMZ,GAAM,aAAaA,GAAM;CACrC,IAAI,CAACA,GAAM,MAAM,CAACY,GAChB,MAAU,MAAM,uDAAuD;CAEzE,OAAO;EAAE,QAAQZ,EAAK;EAAI,aAAaY;CAAI;AAC7C;AAEA,SAAgBC,EACd,GACA,GACA,GACA,GACA,IAAa,uBACb;CACA,IAAM,CAACC,GAAOC,KAAYC,EAA6B;EACrD,WAAW;EACX,UAAU;EACV,OAAO;CACT,CAAC;CAsDD,OAAO;EAAE,QApDMC,EACb,OAAO,MAA6C;GAClD,IAAI,CAAC5B,GACH,MAAU,MACR,6EACF;GAMF,IAAMQ,IAAMf,EACVO,GACAL,GACAG,IANiB+B,IACf,MAAMA,EAAkB,IACxB,KAAA,MAKY,KAAA,CAChB;GAEA,EAAS;IAAE,WAAW;IAAM,UAAU;IAAG,OAAO;GAAK,CAAC;GACtD,IAAI;IACF,IAAMC,IAAW,MAAMxB,EAAaE,GAAKuB,CAAU;IACnD,GAAU,OAAO;KAAE,GAAGC;KAAG,UAAU;IAAE,EAAE;IAEvC,IAAM,EAAE,cAAW,iBAAc,MAAMvB,EACrCD,GACAG,GACAmB,CACF;IAMA,AALAJ,GAAU,OAAO;KAAE,GAAGM;KAAG,UAAU;IAAG,EAAE,GAExC,MAAMjB,EAAkBJ,GAAMG,IAAY,MACxCY,GAAU,OAAO;KAAE,GAAGM;KAAG,UAAUC;IAAI,EAAE,CAC3C,GACAP,GAAU,OAAO;KAAE,GAAGM;KAAG,UAAU;IAAG,EAAE;IAExC,IAAMpB,IAAS,MAAMS,EACnBb,GACAK,GACAiB,GACAnB,EAAK,IACP;IAEA,OADAe,EAAS;KAAE,WAAW;KAAO,UAAU;KAAK,OAAO;IAAK,CAAC,GAClDd;GACT,SAASsB,GAAK;IACZ,IAAMC,IAAUD,aAAe,QAAQA,EAAI,UAAU;IAErD,MADAR,EAAS;KAAE,WAAW;KAAO,UAAU;KAAG,OAAOS;IAAQ,CAAC,GACpDD;GACR;EACF,GACA;GAAClC;GAAsBL;GAAWG;GAAa+B;EAAiB,CAGzD;EAAQ,GAAGJ;CAAM;AAC5B"}
+{"version":3,"file":"usePackageUpload.js","names":["ASSET_UPLOAD_FOLDER","PACKAGE_UPLOAD_FOLDER","DEFAULT_PUBLIC_URL_RETRY_DELAYS_MS","PUBLIC_URL_NOT_READY_MESSAGE","defaultSleep","resolve","ms","readJsonBody","res","makeFetcher","headers","authToken","\"Authorization\"","workspaceToken","workspaceId","endpoint","workspacesGatewayUrl","body","httpErrorFrom","inBand","graphQLErrorFrom","data","ensureFolder","id","gql","initiateUpload","ext","file","result","sessionId","uploadUrl","putToPresignedUrl","xhr","evt","onProgress","reject","nonEmpty","value","completeUpload","fileSize","fetchPublicUrl","fileId","resolvePersistableUrl","publicUrl","options","downloadUrl","delays","delay","sleep","retried","usePackageUpload","retryDelaysKey","publicUrlRetryDelaysMs","retryDelays","useMemo","part","state","setState","useState","useCallback","getWorkspaceToken","folderId","folderPath","s","pct","err","message","requirePublicUrl","ASSET_UPLOAD_OPTIONS","useAssetUpload"],"sources":["../../../src/devportal/hooks/usePackageUpload.ts"],"sourcesContent":["/**\n * usePackageUpload — uploads a file to wspace-files-svc and returns a URL to\n * persist (ApplicationVersion.packageUrl, a physical item's image, an app\n * icon — this hook is generic despite its name; folderPath picks the\n * destination). Every upload here is visibility: PUBLIC (see\n * initiateUpload below), so the returned URL prefers the permanent CDN\n * publicUrl over the presigned downloadUrl (~1 hour TTL, wrong for anything\n * persisted and displayed later — see wspace-files-svc's FieldResolvers.ts\n * doc comment on `downloadUrl`).\n *\n * Two kinds of upload go through this hook:\n *   - Packages (the default, `/DevPortal/Packages`): when publicUrl is null\n *     the presigned downloadUrl is still returned. global-devportal-svc\n *     re-signs package URLs from their S3 key, so a short-lived URL is fine.\n *   - Display assets (icons, banners, screenshots — use `useAssetUpload`,\n *     which sets `requirePublicUrl`): a presigned URL must never be\n *     persisted, because nothing re-signs it and it breaks an hour later in\n *     the store. The files-svc public mirror is best-effort, so when\n *     completeUpload returns no publicUrl the file is re-read a few times\n *     with a short backoff; if publicUrl is still null the upload fails with\n *     a user-visible error instead of returning the presigned URL.\n *\n * Flow (mirrors uploadBlobToFiles in @burdenoff/fe-libs/storage):\n *   1. ensureFolderByPath(folderPath) → folderId\n *   2. initiateUpload → { sessionId, presignedUrl }\n *   3. PUT blob to presignedUrl (progress tracked via XHR)\n *   4. completeUpload → { file.publicUrl ?? file.downloadUrl }\n *   5. (assets only) getFile(id).publicUrl retries when step 4 had none\n *\n * Uses raw fetch for GraphQL mutations so we can target the workspace gateway\n * without a second ApolloProvider.\n */\nimport { useCallback, useMemo, useState } from \"react\";\nimport { graphQLErrorFrom, httpErrorFrom } from \"../utils/uploadErrors\";\n\nexport interface PackageUploadResult {\n  fileId: string;\n  /** The permanent publicUrl when available, else (package uploads only) the\n   * presigned downloadUrl. Field name kept as `downloadUrl` so existing\n   * callers don't need to change — see the module doc comment above. */\n  downloadUrl: string;\n}\n\nexport interface PackageUploadOptions {\n  /** Fail instead of falling back to the presigned downloadUrl when the\n   * file has no permanent publicUrl. Set for anything rendered later as an\n   * image (icons, banners, screenshots). */\n  requirePublicUrl?: boolean;\n  /** Delays between publicUrl re-reads when `requirePublicUrl` is set. */\n  publicUrlRetryDelaysMs?: readonly number[];\n}\n\n/** Folder for store listing images (icons, banners, screenshots). */\nexport const ASSET_UPLOAD_FOLDER = \"/DevPortal/Assets\";\n\n/** Default folder for package (zip) uploads. */\nexport const PACKAGE_UPLOAD_FOLDER = \"/DevPortal/Packages\";\n\n/** Backoff used to re-read a file's publicUrl after completeUpload. */\nexport const DEFAULT_PUBLIC_URL_RETRY_DELAYS_MS: readonly number[] = [\n  500, 1000, 2000, 4000,\n];\n\n/** Shown when an image upload succeeded but has no permanent link yet. */\nexport const PUBLIC_URL_NOT_READY_MESSAGE =\n  \"The image was uploaded but its public link is not ready yet. Please try again.\";\n\ntype Sleep = (ms: number) => Promise<void>;\n\nconst defaultSleep: Sleep = (ms) =>\n  new Promise((resolve) => setTimeout(resolve, ms));\n\nexport interface PackageUploadState {\n  uploading: boolean;\n  progress: number;\n  error: string | null;\n}\n\ntype GqlFetcher = (\n  query: string,\n  variables: Record<string, unknown>,\n) => Promise<Record<string, unknown>>;\n\n/** The parsed JSON body, or undefined when it is missing or not JSON. */\nasync function readJsonBody(res: Response): Promise<unknown> {\n  try {\n    return await res.json();\n  } catch {\n    return undefined;\n  }\n}\n\nexport function makeFetcher(\n  workspacesGatewayUrl: string,\n  authToken: string | undefined,\n  workspaceId: string | undefined,\n  workspaceToken: string | undefined,\n): GqlFetcher {\n  return async (query, variables) => {\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/json\",\n    };\n    if (authToken) headers[\"Authorization\"] = `Bearer ${authToken}`;\n    if (workspaceToken)\n      headers[\"X-Workspace-Authorization\"] = `Bearer ${workspaceToken}`;\n    if (workspaceId) headers[\"x-workspace-id\"] = workspaceId;\n\n    const endpoint = workspacesGatewayUrl.endsWith(\"/graphql\")\n      ? workspacesGatewayUrl\n      : `${workspacesGatewayUrl}/workspaces/graphql`;\n\n    const res = await fetch(endpoint, {\n      method: \"POST\",\n      headers,\n      credentials: \"include\",\n      body: JSON.stringify({ query, variables }),\n    });\n    // Read the body even on a non-2xx status: the gateway explains a quota\n    // refusal (HTTP 429) in the GraphQL errors, and the status alone reads as\n    // rate limiting (BOFF-10676).\n    const body = await readJsonBody(res);\n    if (!res.ok) {\n      throw httpErrorFrom(res.status, res.statusText, body);\n    }\n    const inBand = graphQLErrorFrom(body);\n    if (inBand) throw inBand;\n    // Cast: `body` is untrusted JSON; only `data` is read, and its shape is checked below.\n    const data = (body as { data?: unknown } | undefined)?.data;\n    return typeof data === \"object\" && data !== null\n      ? // A GraphQL `data` member is always an object keyed by root field.\n        (data as Record<string, unknown>)\n      : {};\n  };\n}\n\nasync function ensureFolder(gql: GqlFetcher, path: string): Promise<string> {\n  const data = await gql(\n    `mutation DevPortal_EnsureFolder($path: String!) {\n       ensureFolderByPath(path: $path) { id }\n     }`,\n    { path },\n  );\n  const id = (data.ensureFolderByPath as { id?: string } | undefined)?.id;\n  if (!id) throw new Error(\"ensureFolderByPath returned no id\");\n  return id;\n}\n\nasync function initiateUpload(\n  gql: GqlFetcher,\n  file: File,\n  folderId: string,\n): Promise<{ sessionId: string; uploadUrl: string }> {\n  const ext = file.name.includes(\".\")\n    ? file.name.substring(file.name.lastIndexOf(\".\") + 1)\n    : \"zip\";\n  const data = await gql(\n    `mutation DevPortal_InitiateUpload($input: InitiateUploadInput!) {\n       initiateUpload(input: $input) {\n         uploadUrl\n         session { id }\n       }\n     }`,\n    {\n      input: {\n        fileName: file.name,\n        fileSize: String(file.size),\n        mimeType: file.type || \"application/zip\",\n        extension: ext,\n        folderId,\n        visibility: \"PUBLIC\",\n      },\n    },\n  );\n  const result = data.initiateUpload as\n    { uploadUrl?: string; session?: { id?: string } } | undefined;\n  const sessionId = result?.session?.id;\n  const uploadUrl = result?.uploadUrl;\n  if (!sessionId || !uploadUrl) {\n    throw new Error(\"initiateUpload did not return sessionId or uploadUrl\");\n  }\n  return { sessionId, uploadUrl };\n}\n\nasync function putToPresignedUrl(\n  file: File,\n  uploadUrl: string,\n  onProgress: (pct: number) => void,\n): Promise<void> {\n  await new Promise<void>((resolve, reject) => {\n    const xhr = new XMLHttpRequest();\n    xhr.upload.addEventListener(\"progress\", (evt) => {\n      if (evt.lengthComputable) {\n        onProgress(10 + Math.round((evt.loaded / evt.total) * 80));\n      }\n    });\n    xhr.addEventListener(\"load\", () => {\n      if (xhr.status >= 200 && xhr.status < 300) {\n        resolve();\n      } else {\n        reject(new Error(`S3 PUT failed: ${xhr.status}`));\n      }\n    });\n    xhr.addEventListener(\"error\", () =>\n      reject(new Error(\"S3 PUT network error\")),\n    );\n    xhr.addEventListener(\"abort\", () => reject(new Error(\"S3 PUT aborted\")));\n    xhr.open(\"PUT\", uploadUrl);\n    xhr.setRequestHeader(\"Content-Type\", file.type || \"application/zip\");\n    xhr.send(file);\n  });\n}\n\ninterface UploadedFile {\n  id: string;\n  downloadUrl?: string;\n  publicUrl?: string | null;\n}\n\n/** A non-empty string, else undefined. */\nfunction nonEmpty(value: unknown): string | undefined {\n  return typeof value === \"string\" && value.length > 0 ? value : undefined;\n}\n\nexport async function completeUpload(\n  gql: GqlFetcher,\n  sessionId: string,\n  folderId: string,\n  fileSize: number,\n): Promise<UploadedFile> {\n  const data = await gql(\n    `mutation DevPortal_CompleteUpload($input: CompleteUploadInput!) {\n       completeUpload(input: $input) {\n         file { id downloadUrl publicUrl }\n       }\n     }`,\n    {\n      input: {\n        sessionId,\n        folderId,\n        fileSize: String(fileSize),\n      },\n    },\n  );\n  const file = (\n    data.completeUpload as\n      | {\n          file?: {\n            id?: string;\n            downloadUrl?: string;\n            publicUrl?: string | null;\n          };\n        }\n      | undefined\n  )?.file;\n  const id = nonEmpty(file?.id);\n  if (!id) {\n    throw new Error(\"completeUpload did not return a file id\");\n  }\n  return { id, downloadUrl: file?.downloadUrl, publicUrl: file?.publicUrl };\n}\n\n/** Re-reads the file's permanent publicUrl (null while the mirror is pending). */\nexport async function fetchPublicUrl(\n  gql: GqlFetcher,\n  fileId: string,\n): Promise<string | undefined> {\n  const data = await gql(\n    `query DevPortal_FilePublicUrl($id: ID!) {\n       getFile(id: $id) { id publicUrl }\n     }`,\n    { id: fileId },\n  );\n  const file = data.getFile as { publicUrl?: string | null } | undefined;\n  return nonEmpty(file?.publicUrl);\n}\n\n/**\n * Picks the URL to persist for a completed upload. Package uploads fall back\n * to the presigned downloadUrl; asset uploads (`requirePublicUrl`) retry the\n * publicUrl and throw PUBLIC_URL_NOT_READY_MESSAGE rather than return a\n * presigned URL that expires.\n */\nexport async function resolvePersistableUrl(\n  gql: GqlFetcher,\n  file: UploadedFile,\n  options: PackageUploadOptions = {},\n  sleep: Sleep = defaultSleep,\n): Promise<PackageUploadResult> {\n  const publicUrl = nonEmpty(file.publicUrl);\n  if (publicUrl) return { fileId: file.id, downloadUrl: publicUrl };\n\n  if (!options.requirePublicUrl) {\n    const downloadUrl = nonEmpty(file.downloadUrl);\n    if (!downloadUrl) {\n      throw new Error(\"completeUpload did not return a usable URL\");\n    }\n    return { fileId: file.id, downloadUrl };\n  }\n\n  const delays =\n    options.publicUrlRetryDelaysMs ?? DEFAULT_PUBLIC_URL_RETRY_DELAYS_MS;\n  for (const delay of delays) {\n    await sleep(delay);\n    let retried: string | undefined;\n    try {\n      retried = await fetchPublicUrl(gql, file.id);\n    } catch {\n      // A failed re-read is treated like \"not ready yet\"; the next attempt\n      // (or the final error below) covers it.\n      retried = undefined;\n    }\n    if (retried) return { fileId: file.id, downloadUrl: retried };\n  }\n  throw new Error(PUBLIC_URL_NOT_READY_MESSAGE);\n}\n\nexport function usePackageUpload(\n  workspacesGatewayUrl: string | undefined,\n  authToken: string | undefined,\n  workspaceId: string | undefined,\n  getWorkspaceToken: (() => Promise<string | null>) | undefined,\n  folderPath = PACKAGE_UPLOAD_FOLDER,\n  options: PackageUploadOptions = {},\n) {\n  const { requirePublicUrl = false, publicUrlRetryDelaysMs } = options;\n  // Key the retry schedule by value, not identity, so a caller passing an\n  // inline array literal does not recreate `upload` on every render.\n  const retryDelaysKey = publicUrlRetryDelaysMs?.join(\",\");\n  const retryDelays = useMemo<readonly number[] | undefined>(\n    () =>\n      retryDelaysKey === undefined\n        ? undefined\n        : retryDelaysKey\n            .split(\",\")\n            .filter((part) => part !== \"\")\n            .map(Number),\n    [retryDelaysKey],\n  );\n  const [state, setState] = useState<PackageUploadState>({\n    uploading: false,\n    progress: 0,\n    error: null,\n  });\n\n  const upload = useCallback(\n    async (file: File): Promise<PackageUploadResult> => {\n      if (!workspacesGatewayUrl) {\n        throw new Error(\n          \"workspacesGatewayUrl is not configured. Pass it as a prop to DevportalRoot.\",\n        );\n      }\n\n      const freshToken = getWorkspaceToken\n        ? await getWorkspaceToken()\n        : undefined;\n      const gql = makeFetcher(\n        workspacesGatewayUrl,\n        authToken,\n        workspaceId,\n        freshToken ?? undefined,\n      );\n\n      setState({ uploading: true, progress: 0, error: null });\n      try {\n        const folderId = await ensureFolder(gql, folderPath);\n        setState((s) => ({ ...s, progress: 5 }));\n\n        const { sessionId, uploadUrl } = await initiateUpload(\n          gql,\n          file,\n          folderId,\n        );\n        setState((s) => ({ ...s, progress: 10 }));\n\n        await putToPresignedUrl(file, uploadUrl, (pct) =>\n          setState((s) => ({ ...s, progress: pct })),\n        );\n        setState((s) => ({ ...s, progress: 90 }));\n\n        const uploaded = await completeUpload(\n          gql,\n          sessionId,\n          folderId,\n          file.size,\n        );\n        const result = await resolvePersistableUrl(gql, uploaded, {\n          requirePublicUrl,\n          publicUrlRetryDelaysMs: retryDelays,\n        });\n        setState({ uploading: false, progress: 100, error: null });\n        return result;\n      } catch (err) {\n        const message = err instanceof Error ? err.message : \"Upload failed\";\n        setState({ uploading: false, progress: 0, error: message });\n        throw err;\n      }\n    },\n    [\n      workspacesGatewayUrl,\n      authToken,\n      workspaceId,\n      getWorkspaceToken,\n      folderPath,\n      requirePublicUrl,\n      retryDelays,\n    ],\n  );\n\n  return { upload, ...state };\n}\n\nconst ASSET_UPLOAD_OPTIONS: PackageUploadOptions = { requirePublicUrl: true };\n\n/**\n * Upload hook for store listing images (icons, banners, screenshots). Stores\n * under ASSET_UPLOAD_FOLDER and only ever returns the permanent publicUrl.\n */\nexport function useAssetUpload(\n  workspacesGatewayUrl: string | undefined,\n  authToken: string | undefined,\n  workspaceId: string | undefined,\n  getWorkspaceToken: (() => Promise<string | null>) | undefined,\n) {\n  return usePackageUpload(\n    workspacesGatewayUrl,\n    authToken,\n    workspaceId,\n    getWorkspaceToken,\n    ASSET_UPLOAD_FOLDER,\n    ASSET_UPLOAD_OPTIONS,\n  );\n}\n"],"mappings":";;;AAqDA,IAAaA,IAAsB,qBAGtBC,IAAwB,uBAGxBC,IAAwD;CACnE;CAAK;CAAM;CAAM;AACnB,GAGaC,IACX,kFAIIC,KAAuB,MAC3B,IAAI,SAAS,MAAY,WAAWC,GAASC,CAAE,CAAC;AAclD,eAAeC,EAAa,GAAiC;CAC3D,IAAI;EACF,OAAO,MAAMC,EAAI,KAAK;CACxB,QAAQ;EACN;CACF;AACF;AAEA,SAAgBC,EACd,GACA,GACA,GACA,GACY;CACZ,OAAO,OAAO,GAAO,MAAc;EACjC,IAAMC,IAAkC,EACtC,gBAAgB,mBAClB;EAIA,AAHIC,MAAW,EAAQC,gBAAmB,UAAUD,MAChDE,MACF,EAAQ,+BAA+B,UAAUA,MAC/CC,MAAa,EAAQ,oBAAoBA;EAE7C,IAAMC,IAAWC,EAAqB,SAAS,UAAU,IACrDA,IACA,GAAGA,EAAqB,sBAEtBR,IAAM,MAAM,MAAMO,GAAU;GAChC,QAAQ;GACR;GACA,aAAa;GACb,MAAM,KAAK,UAAU;IAAE;IAAO;GAAU,CAAC;EAC3C,CAAC,GAIKE,IAAO,MAAMV,EAAaC,CAAG;EACnC,IAAI,CAACA,EAAI,IACP,MAAMU,EAAcV,EAAI,QAAQA,EAAI,YAAYS,CAAI;EAEtD,IAAME,IAASC,EAAiBH,CAAI;EACpC,IAAIE,GAAQ,MAAMA;EAElB,IAAME,IAAQJ,GAAyC;EACvD,OAAO,OAAOI,KAAS,YAAYA,IAE9BA,IACD,CAAC;CACP;AACF;AAEA,eAAeC,EAAa,GAAiB,GAA+B;CAO1E,IAAMC,KAAM,MANOC,EACjB,4GAGA,EAAE,QAAK,CACT,EAAA,CACiB,oBAAoD;CACrE,IAAI,CAACD,GAAI,MAAU,MAAM,mCAAmC;CAC5D,OAAOA;AACT;AAEA,eAAeE,EACb,GACA,GACA,GACmD;CACnD,IAAMC,IAAMC,EAAK,KAAK,SAAS,GAAG,IAC9BA,EAAK,KAAK,UAAUA,EAAK,KAAK,YAAY,GAAG,IAAI,CAAC,IAClD,OAmBEC,KAAS,MAlBIJ,EACjB,4KAMA,EACE,OAAO;EACL,UAAUG,EAAK;EACf,UAAU,OAAOA,EAAK,IAAI;EAC1B,UAAUA,EAAK,QAAQ;EACvB,WAAWD;EACX;EACA,YAAY;CACd,EACF,CACF,EAAA,CACoB,gBAEdG,IAAYD,GAAQ,SAAS,IAC7BE,IAAYF,GAAQ;CAC1B,IAAI,CAACC,KAAa,CAACC,GACjB,MAAU,MAAM,sDAAsD;CAExE,OAAO;EAAE;EAAW;CAAU;AAChC;AAEA,eAAeC,EACb,GACA,GACA,GACe;CACf,MAAM,IAAI,SAAe,GAAS,MAAW;EAC3C,IAAMC,IAAM,IAAI,eAAe;EAmB/B,AAlBAA,EAAI,OAAO,iBAAiB,aAAa,MAAQ;GAC/C,AAAIC,EAAI,oBACNC,EAAW,KAAK,KAAK,MAAOD,EAAI,SAASA,EAAI,QAAS,EAAE,CAAC;EAE7D,CAAC,GACDD,EAAI,iBAAiB,cAAc;GACjC,AAAIA,EAAI,UAAU,OAAOA,EAAI,SAAS,MACpC3B,EAAQ,IAER8B,EAAO,gBAAI,MAAM,kBAAkBH,EAAI,QAAQ,CAAC;EAEpD,CAAC,GACDA,EAAI,iBAAiB,eACnBG,EAAO,gBAAI,MAAM,sBAAsB,CAAC,CAC1C,GACAH,EAAI,iBAAiB,eAAeG,EAAO,gBAAI,MAAM,gBAAgB,CAAC,CAAC,GACvEH,EAAI,KAAK,OAAOF,CAAS,GACzBE,EAAI,iBAAiB,gBAAgBL,EAAK,QAAQ,iBAAiB,GACnEK,EAAI,KAAKL,CAAI;CACf,CAAC;AACH;AASA,SAASS,EAAS,GAAoC;CACpD,OAAO,OAAOC,KAAU,YAAYA,EAAM,SAAS,IAAIA,IAAQ,KAAA;AACjE;AAEA,eAAsBC,EACpB,GACA,GACA,GACA,GACuB;CAevB,IAAMX,KACJ,MAfiBH,EACjB,2KAKA,EACE,OAAO;EACL;EACA;EACA,UAAU,OAAOe,CAAQ;CAC3B,EACF,CACF,EAAA,CAEO,gBASJ,MACGhB,IAAKa,EAAST,GAAM,EAAE;CAC5B,IAAI,CAACJ,GACH,MAAU,MAAM,yCAAyC;CAE3D,OAAO;EAAE;EAAI,aAAaI,GAAM;EAAa,WAAWA,GAAM;CAAU;AAC1E;AAGA,eAAsBa,EACpB,GACA,GAC6B;CAO7B,IAAMb,KAAO,MANMH,EACjB,+FAGA,EAAE,IAAIiB,EAAO,CACf,EAAA,CACkB;CAClB,OAAOL,EAAST,GAAM,SAAS;AACjC;AAQA,eAAsBe,EACpB,GACA,GACA,IAAgC,CAAC,GACjC,IAAetC,GACe;CAC9B,IAAMuC,IAAYP,EAAST,EAAK,SAAS;CACzC,IAAIgB,GAAW,OAAO;EAAE,QAAQhB,EAAK;EAAI,aAAagB;CAAU;CAEhE,IAAI,CAACC,EAAQ,kBAAkB;EAC7B,IAAMC,IAAcT,EAAST,EAAK,WAAW;EAC7C,IAAI,CAACkB,GACH,MAAU,MAAM,4CAA4C;EAE9D,OAAO;GAAE,QAAQlB,EAAK;GAAI;EAAY;CACxC;CAEA,IAAMmB,IACJF,EAAQ,0BAA0B1C;CACpC,KAAK,IAAM6C,KAASD,GAAQ;EAC1B,MAAME,EAAMD,CAAK;EACjB,IAAIE;EACJ,IAAI;GACF,IAAU,MAAMT,EAAehB,GAAKG,EAAK,EAAE;EAC7C,QAAQ;GAGN,IAAU,KAAA;EACZ;EACA,IAAIsB,GAAS,OAAO;GAAE,QAAQtB,EAAK;GAAI,aAAasB;EAAQ;CAC9D;CACA,MAAU,MAAM9C,CAA4B;AAC9C;AAEA,SAAgB+C,EACd,GACA,GACA,GACA,GACA,IAAajD,GACb,IAAgC,CAAC,GACjC;CACA,IAAM,EAAE,sBAAmB,IAAO,8BAA2B2C,GAGvDO,IAAiBC,GAAwB,KAAK,GAAG,GACjDC,IAAcC,QAEhBH,MAAmB,KAAA,IACf,KAAA,IACAA,EACG,MAAM,GAAG,CAAC,CACV,QAAQ,MAASI,MAAS,EAAE,CAAC,CAC7B,IAAI,MAAM,GACnB,CAACJ,CAAc,CACjB,GACM,CAACK,GAAOC,KAAYC,EAA6B;EACrD,WAAW;EACX,UAAU;EACV,OAAO;CACT,CAAC;CAkED,OAAO;EAAE,QAhEMC,EACb,OAAO,MAA6C;GAClD,IAAI,CAAC3C,GACH,MAAU,MACR,6EACF;GAMF,IAAMQ,IAAMf,EACVO,GACAL,GACAG,IANiB8C,IACf,MAAMA,EAAkB,IACxB,KAAA,MAKY,KAAA,CAChB;GAEA,EAAS;IAAE,WAAW;IAAM,UAAU;IAAG,OAAO;GAAK,CAAC;GACtD,IAAI;IACF,IAAMC,IAAW,MAAMvC,EAAaE,GAAKsC,CAAU;IACnD,GAAU,OAAO;KAAE,GAAGC;KAAG,UAAU;IAAE,EAAE;IAEvC,IAAM,EAAE,cAAW,iBAAc,MAAMtC,EACrCD,GACAG,GACAkC,CACF;IAMA,AALAJ,GAAU,OAAO;KAAE,GAAGM;KAAG,UAAU;IAAG,EAAE,GAExC,MAAMhC,EAAkBJ,GAAMG,IAAY,MACxC2B,GAAU,OAAO;KAAE,GAAGM;KAAG,UAAUC;IAAI,EAAE,CAC3C,GACAP,GAAU,OAAO;KAAE,GAAGM;KAAG,UAAU;IAAG,EAAE;IAQxC,IAAMnC,IAAS,MAAMc,EAAsBlB,GAAK,MANzBc,EACrBd,GACAK,GACAgC,GACAlC,EAAK,IACP,GAC0D;KACxD;KACA,wBAAwB0B;IAC1B,CAAC;IAED,OADAI,EAAS;KAAE,WAAW;KAAO,UAAU;KAAK,OAAO;IAAK,CAAC,GAClD7B;GACT,SAASqC,GAAK;IACZ,IAAMC,IAAUD,aAAe,QAAQA,EAAI,UAAU;IAErD,MADAR,EAAS;KAAE,WAAW;KAAO,UAAU;KAAG,OAAOS;IAAQ,CAAC,GACpDD;GACR;EACF,GACA;GACEjD;GACAL;GACAG;GACA8C;GACAE;GACAK;GACAd;EACF,CAGO;EAAQ,GAAGG;CAAM;AAC5B;AAEA,IAAMY,IAA6C,EAAE,kBAAkB,GAAK;AAM5E,SAAgBC,EACd,GACA,GACA,GACA,GACA;CACA,OAAOnB,EACLlC,GACAL,GACAG,GACA8C,GACA5D,GACAoE,CACF;AACF"}