@burdenoff/microfe-devportal 2026.510.110

package/dist/devportal/constants/permissions.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Developer Portal Permission Constants
+ *
+ * All permission strings for DevPortal resources.
+ * Use with the usePermissions hook: hasPermission(DEVPORTAL_PERMISSIONS.APP_READ)
+ *
+ * Resource types match the @rbac directives in global-devportal-svc:
+ * - devportal-app:             read, create, update, delete, submit, publish, approve, reject
+ * - devportal-app-version:     create, update, publish, deprecate
+ * - devportal-webhook:         read, create, update, delete
+ * - devportal-webhook-delivery: read
+ * - devportal-profile:         read, create
+ * - devportal-audit-log:       read
+ * - devportal-org:             read, create, update, delete, verify
+ * - devportal-org-invitation:  read, create, update, send, delete
+ * - devportal-org-member:      read, update, activate, deactivate, delete
+ * - devportal-sale:            read
+ * - devportal-revenue:         read
+ * - devportal-payment-method:  read
+ * - devportal-payout:          read, delete, approve, execute
+ * - devportal-installation:    read, create
+ * - devportal-review:          read, update, delete, manage
+ * - devportal-review-report:   create
+ * - devportal-review-vote:     create
+ * - devportal-collection:      read, create
+ * - devportal-analytics:       read
+ * - devportal-subscription:    read
+ */
+export declare const DEVPORTAL_PERMISSIONS: {
+    readonly APP_READ: "devportal-app:read";
+    readonly APP_CREATE: "devportal-app:create";
+    readonly APP_UPDATE: "devportal-app:update";
+    readonly APP_DELETE: "devportal-app:delete";
+    readonly APP_SUBMIT: "devportal-app:submit";
+    readonly APP_PUBLISH: "devportal-app:publish";
+    readonly APP_APPROVE: "devportal-app:approve";
+    readonly APP_REJECT: "devportal-app:reject";
+    readonly APP_VERSION_CREATE: "devportal-app-version:create";
+    readonly APP_VERSION_UPDATE: "devportal-app-version:update";
+    readonly APP_VERSION_PUBLISH: "devportal-app-version:publish";
+    readonly APP_VERSION_DEPRECATE: "devportal-app-version:deprecate";
+    readonly WEBHOOK_READ: "devportal-webhook:read";
+    readonly WEBHOOK_CREATE: "devportal-webhook:create";
+    readonly WEBHOOK_UPDATE: "devportal-webhook:update";
+    readonly WEBHOOK_DELETE: "devportal-webhook:delete";
+    readonly WEBHOOK_DELIVERY_READ: "devportal-webhook-delivery:read";
+    readonly PROFILE_READ: "devportal-profile:read";
+    readonly PROFILE_CREATE: "devportal-profile:create";
+    readonly PROFILE_UPDATE: "devportal-profile:update";
+    readonly AUDIT_LOG_READ: "devportal-audit-log:read";
+    readonly ORG_READ: "devportal-org:read";
+    readonly ORG_CREATE: "devportal-org:create";
+    readonly ORG_UPDATE: "devportal-org:update";
+    readonly ORG_DELETE: "devportal-org:delete";
+    readonly ORG_VERIFY: "devportal-org:verify";
+    readonly ORG_INVITATION_READ: "devportal-org-invitation:read";
+    readonly ORG_INVITATION_CREATE: "devportal-org-invitation:create";
+    readonly ORG_INVITATION_UPDATE: "devportal-org-invitation:update";
+    readonly ORG_INVITATION_SEND: "devportal-org-invitation:send";
+    readonly ORG_INVITATION_DELETE: "devportal-org-invitation:delete";
+    readonly ORG_MEMBER_READ: "devportal-org-member:read";
+    readonly ORG_MEMBER_UPDATE: "devportal-org-member:update";
+    readonly ORG_MEMBER_ACTIVATE: "devportal-org-member:activate";
+    readonly ORG_MEMBER_DEACTIVATE: "devportal-org-member:deactivate";
+    readonly ORG_MEMBER_DELETE: "devportal-org-member:delete";
+    readonly DELEGATION_READ: "devportal-delegation:read";
+    readonly DELEGATION_REVOKE: "devportal-delegation:revoke";
+    readonly DELEGATION_DELETE: "devportal-delegation:delete";
+    readonly SALE_READ: "devportal-sale:read";
+    readonly REVENUE_READ: "devportal-revenue:read";
+    readonly PAYMENT_METHOD_READ: "devportal-payment-method:read";
+    readonly PAYOUT_READ: "devportal-payout:read";
+    readonly PAYOUT_APPROVE: "devportal-payout:approve";
+    readonly PAYOUT_DELETE: "devportal-payout:delete";
+    readonly PAYOUT_EXECUTE: "devportal-payout:execute";
+    readonly INSTALLATION_READ: "devportal-installation:read";
+    readonly INSTALLATION_CREATE: "devportal-installation:create";
+    readonly COLLECTION_READ: "devportal-collection:read";
+    readonly COLLECTION_CREATE: "devportal-collection:create";
+    readonly SUBSCRIPTION_READ: "devportal-subscription:read";
+    readonly REVIEW_READ: "devportal-review:read";
+    readonly REVIEW_UPDATE: "devportal-review:update";
+    readonly REVIEW_DELETE: "devportal-review:delete";
+    readonly REVIEW_MANAGE: "devportal-review:manage";
+    readonly REVIEW_REPORT_CREATE: "devportal-review-report:create";
+    readonly REVIEW_VOTE_CREATE: "devportal-review-vote:create";
+    readonly ANALYTICS_READ: "devportal-analytics:read";
+};
+export type DevportalPermission = (typeof DEVPORTAL_PERMISSIONS)[keyof typeof DEVPORTAL_PERMISSIONS];
+//# sourceMappingURL=permissions.d.ts.map

package/dist/devportal/constants/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../src/devportal/constants/permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoFxB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAC7B,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/devportal/constants/permissions.js

@@ -0,0 +1,65 @@
+//#region src/devportal/constants/permissions.ts
+var e = {
+	APP_READ: "devportal-app:read",
+	APP_CREATE: "devportal-app:create",
+	APP_UPDATE: "devportal-app:update",
+	APP_DELETE: "devportal-app:delete",
+	APP_SUBMIT: "devportal-app:submit",
+	APP_PUBLISH: "devportal-app:publish",
+	APP_APPROVE: "devportal-app:approve",
+	APP_REJECT: "devportal-app:reject",
+	APP_VERSION_CREATE: "devportal-app-version:create",
+	APP_VERSION_UPDATE: "devportal-app-version:update",
+	APP_VERSION_PUBLISH: "devportal-app-version:publish",
+	APP_VERSION_DEPRECATE: "devportal-app-version:deprecate",
+	WEBHOOK_READ: "devportal-webhook:read",
+	WEBHOOK_CREATE: "devportal-webhook:create",
+	WEBHOOK_UPDATE: "devportal-webhook:update",
+	WEBHOOK_DELETE: "devportal-webhook:delete",
+	WEBHOOK_DELIVERY_READ: "devportal-webhook-delivery:read",
+	PROFILE_READ: "devportal-profile:read",
+	PROFILE_CREATE: "devportal-profile:create",
+	PROFILE_UPDATE: "devportal-profile:update",
+	AUDIT_LOG_READ: "devportal-audit-log:read",
+	ORG_READ: "devportal-org:read",
+	ORG_CREATE: "devportal-org:create",
+	ORG_UPDATE: "devportal-org:update",
+	ORG_DELETE: "devportal-org:delete",
+	ORG_VERIFY: "devportal-org:verify",
+	ORG_INVITATION_READ: "devportal-org-invitation:read",
+	ORG_INVITATION_CREATE: "devportal-org-invitation:create",
+	ORG_INVITATION_UPDATE: "devportal-org-invitation:update",
+	ORG_INVITATION_SEND: "devportal-org-invitation:send",
+	ORG_INVITATION_DELETE: "devportal-org-invitation:delete",
+	ORG_MEMBER_READ: "devportal-org-member:read",
+	ORG_MEMBER_UPDATE: "devportal-org-member:update",
+	ORG_MEMBER_ACTIVATE: "devportal-org-member:activate",
+	ORG_MEMBER_DEACTIVATE: "devportal-org-member:deactivate",
+	ORG_MEMBER_DELETE: "devportal-org-member:delete",
+	DELEGATION_READ: "devportal-delegation:read",
+	DELEGATION_REVOKE: "devportal-delegation:revoke",
+	DELEGATION_DELETE: "devportal-delegation:delete",
+	SALE_READ: "devportal-sale:read",
+	REVENUE_READ: "devportal-revenue:read",
+	PAYMENT_METHOD_READ: "devportal-payment-method:read",
+	PAYOUT_READ: "devportal-payout:read",
+	PAYOUT_APPROVE: "devportal-payout:approve",
+	PAYOUT_DELETE: "devportal-payout:delete",
+	PAYOUT_EXECUTE: "devportal-payout:execute",
+	INSTALLATION_READ: "devportal-installation:read",
+	INSTALLATION_CREATE: "devportal-installation:create",
+	COLLECTION_READ: "devportal-collection:read",
+	COLLECTION_CREATE: "devportal-collection:create",
+	SUBSCRIPTION_READ: "devportal-subscription:read",
+	REVIEW_READ: "devportal-review:read",
+	REVIEW_UPDATE: "devportal-review:update",
+	REVIEW_DELETE: "devportal-review:delete",
+	REVIEW_MANAGE: "devportal-review:manage",
+	REVIEW_REPORT_CREATE: "devportal-review-report:create",
+	REVIEW_VOTE_CREATE: "devportal-review-vote:create",
+	ANALYTICS_READ: "devportal-analytics:read"
+};
+//#endregion
+export { e as DEVPORTAL_PERMISSIONS };
+
+//# sourceMappingURL=permissions.js.map

package/dist/devportal/constants/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","names":[],"sources":["../../../src/devportal/constants/permissions.ts"],"sourcesContent":["/**\n * Developer Portal Permission Constants\n *\n * All permission strings for DevPortal resources.\n * Use with the usePermissions hook: hasPermission(DEVPORTAL_PERMISSIONS.APP_READ)\n *\n * Resource types match the @rbac directives in global-devportal-svc:\n * - devportal-app:             read, create, update, delete, submit, publish, approve, reject\n * - devportal-app-version:     create, update, publish, deprecate\n * - devportal-webhook:         read, create, update, delete\n * - devportal-webhook-delivery: read\n * - devportal-profile:         read, create\n * - devportal-audit-log:       read\n * - devportal-org:             read, create, update, delete, verify\n * - devportal-org-invitation:  read, create, update, send, delete\n * - devportal-org-member:      read, update, activate, deactivate, delete\n * - devportal-sale:            read\n * - devportal-revenue:         read\n * - devportal-payment-method:  read\n * - devportal-payout:          read, delete, approve, execute\n * - devportal-installation:    read, create\n * - devportal-review:          read, update, delete, manage\n * - devportal-review-report:   create\n * - devportal-review-vote:     create\n * - devportal-collection:      read, create\n * - devportal-analytics:       read\n * - devportal-subscription:    read\n */\n\nexport const DEVPORTAL_PERMISSIONS = {\n  // Applications\n  APP_READ: \"devportal-app:read\",\n  APP_CREATE: \"devportal-app:create\",\n  APP_UPDATE: \"devportal-app:update\",\n  APP_DELETE: \"devportal-app:delete\",\n  APP_SUBMIT: \"devportal-app:submit\",\n  APP_PUBLISH: \"devportal-app:publish\",\n  APP_APPROVE: \"devportal-app:approve\",\n  APP_REJECT: \"devportal-app:reject\",\n\n  // App Versions\n  APP_VERSION_CREATE: \"devportal-app-version:create\",\n  APP_VERSION_UPDATE: \"devportal-app-version:update\",\n  APP_VERSION_PUBLISH: \"devportal-app-version:publish\",\n  APP_VERSION_DEPRECATE: \"devportal-app-version:deprecate\",\n\n  // Webhooks\n  WEBHOOK_READ: \"devportal-webhook:read\",\n  WEBHOOK_CREATE: \"devportal-webhook:create\",\n  WEBHOOK_UPDATE: \"devportal-webhook:update\",\n  WEBHOOK_DELETE: \"devportal-webhook:delete\",\n  WEBHOOK_DELIVERY_READ: \"devportal-webhook-delivery:read\",\n\n  // Profile\n  PROFILE_READ: \"devportal-profile:read\",\n  PROFILE_CREATE: \"devportal-profile:create\",\n  PROFILE_UPDATE: \"devportal-profile:update\",\n\n  // Audit Log\n  AUDIT_LOG_READ: \"devportal-audit-log:read\",\n\n  // Organizations\n  ORG_READ: \"devportal-org:read\",\n  ORG_CREATE: \"devportal-org:create\",\n  ORG_UPDATE: \"devportal-org:update\",\n  ORG_DELETE: \"devportal-org:delete\",\n  ORG_VERIFY: \"devportal-org:verify\",\n\n  // Org Invitations\n  ORG_INVITATION_READ: \"devportal-org-invitation:read\",\n  ORG_INVITATION_CREATE: \"devportal-org-invitation:create\",\n  ORG_INVITATION_UPDATE: \"devportal-org-invitation:update\",\n  ORG_INVITATION_SEND: \"devportal-org-invitation:send\",\n  ORG_INVITATION_DELETE: \"devportal-org-invitation:delete\",\n\n  // Org Members\n  ORG_MEMBER_READ: \"devportal-org-member:read\",\n  ORG_MEMBER_UPDATE: \"devportal-org-member:update\",\n  ORG_MEMBER_ACTIVATE: \"devportal-org-member:activate\",\n  ORG_MEMBER_DEACTIVATE: \"devportal-org-member:deactivate\",\n  ORG_MEMBER_DELETE: \"devportal-org-member:delete\",\n\n  // Delegations\n  DELEGATION_READ: \"devportal-delegation:read\",\n  DELEGATION_REVOKE: \"devportal-delegation:revoke\",\n  DELEGATION_DELETE: \"devportal-delegation:delete\",\n\n  // Revenue & Payments\n  SALE_READ: \"devportal-sale:read\",\n  REVENUE_READ: \"devportal-revenue:read\",\n  PAYMENT_METHOD_READ: \"devportal-payment-method:read\",\n  PAYOUT_READ: \"devportal-payout:read\",\n  PAYOUT_APPROVE: \"devportal-payout:approve\",\n  PAYOUT_DELETE: \"devportal-payout:delete\",\n  PAYOUT_EXECUTE: \"devportal-payout:execute\",\n\n  // Marketplace\n  INSTALLATION_READ: \"devportal-installation:read\",\n  INSTALLATION_CREATE: \"devportal-installation:create\",\n  COLLECTION_READ: \"devportal-collection:read\",\n  COLLECTION_CREATE: \"devportal-collection:create\",\n  SUBSCRIPTION_READ: \"devportal-subscription:read\",\n\n  // Reviews\n  REVIEW_READ: \"devportal-review:read\",\n  REVIEW_UPDATE: \"devportal-review:update\",\n  REVIEW_DELETE: \"devportal-review:delete\",\n  REVIEW_MANAGE: \"devportal-review:manage\",\n  REVIEW_REPORT_CREATE: \"devportal-review-report:create\",\n  REVIEW_VOTE_CREATE: \"devportal-review-vote:create\",\n\n  // Analytics\n  ANALYTICS_READ: \"devportal-analytics:read\",\n} as const;\n\nexport type DevportalPermission =\n  (typeof DEVPORTAL_PERMISSIONS)[keyof typeof DEVPORTAL_PERMISSIONS];\n"],"mappings":";AA6BA,IAAa,IAAwB;CAEnC,UAAU;CACV,YAAY;CACZ,YAAY;CACZ,YAAY;CACZ,YAAY;CACZ,aAAa;CACb,aAAa;CACb,YAAY;CAGZ,oBAAoB;CACpB,oBAAoB;CACpB,qBAAqB;CACrB,uBAAuB;CAGvB,cAAc;CACd,gBAAgB;CAChB,gBAAgB;CAChB,gBAAgB;CAChB,uBAAuB;CAGvB,cAAc;CACd,gBAAgB;CAChB,gBAAgB;CAGhB,gBAAgB;CAGhB,UAAU;CACV,YAAY;CACZ,YAAY;CACZ,YAAY;CACZ,YAAY;CAGZ,qBAAqB;CACrB,uBAAuB;CACvB,uBAAuB;CACvB,qBAAqB;CACrB,uBAAuB;CAGvB,iBAAiB;CACjB,mBAAmB;CACnB,qBAAqB;CACrB,uBAAuB;CACvB,mBAAmB;CAGnB,iBAAiB;CACjB,mBAAmB;CACnB,mBAAmB;CAGnB,WAAW;CACX,cAAc;CACd,qBAAqB;CACrB,aAAa;CACb,gBAAgB;CAChB,eAAe;CACf,gBAAgB;CAGhB,mBAAmB;CACnB,qBAAqB;CACrB,iBAAiB;CACjB,mBAAmB;CACnB,mBAAmB;CAGnB,aAAa;CACb,eAAe;CACf,eAAe;CACf,eAAe;CACf,sBAAsB;CACtB,oBAAoB;CAGpB,gBAAgB;CACjB"}

package/dist/devportal/events/index.d.ts

@@ -0,0 +1,19 @@
+export type DevportalEventName = "devportal.app.created" | "devportal.app.updated" | "devportal.app.deleted" | "devportal.app.published" | "devportal.app.submitted" | "devportal.app.review_status_changed" | "devportal.version.created" | "devportal.version.published" | "devportal.org.created" | "devportal.org.updated" | "devportal.org.member.added" | "devportal.org.member.removed" | "devportal.org.invitation.sent" | "devportal.org.invitation.accepted" | "devportal.webhook.created" | "devportal.webhook.updated" | "devportal.webhook.deleted" | "devportal.webhook.delivered" | "devportal.webhook.delivery_failed" | "devportal.oauth.client.created" | "devportal.oauth.client.deleted" | "devportal.apikey.generated" | "devportal.apikey.revoked" | "devportal.delegation.granted" | "devportal.delegation.revoked" | "devportal.revenue.updated" | "devportal.error.boundary" | "devportal.page.viewed";
+export interface DevportalEventPayload {
+    [key: string]: unknown;
+}
+export interface DevportalEventBus {
+    emit: (name: DevportalEventName, payload: DevportalEventPayload) => void;
+}
+/**
+ * Optional bridge: app shell (or DevportalRoot wrapper) may call this with
+ * the fe-libs `useEventBus()` value to forward all devportal events.
+ */
+export declare function setDevportalEventBusBridge(bus: {
+    emit: (name: string, payload: unknown) => void;
+} | null): void;
+/**
+ * Hook used by devportal pages to emit events. Always returns a working bus.
+ */
+export declare function useDevportalEventBus(): DevportalEventBus;
+//# sourceMappingURL=index.d.ts.map

package/dist/devportal/events/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/devportal/events/index.ts"],"names":[],"mappings":"AAsBA,MAAM,MAAM,kBAAkB,GAC1B,uBAAuB,GACvB,uBAAuB,GACvB,uBAAuB,GACvB,yBAAyB,GACzB,yBAAyB,GACzB,qCAAqC,GACrC,2BAA2B,GAC3B,6BAA6B,GAC7B,uBAAuB,GACvB,uBAAuB,GACvB,4BAA4B,GAC5B,8BAA8B,GAC9B,+BAA+B,GAC/B,mCAAmC,GACnC,2BAA2B,GAC3B,2BAA2B,GAC3B,2BAA2B,GAC3B,6BAA6B,GAC7B,mCAAmC,GACnC,gCAAgC,GAChC,gCAAgC,GAChC,4BAA4B,GAC5B,0BAA0B,GAC1B,8BAA8B,GAC9B,8BAA8B,GAC9B,2BAA2B,GAC3B,0BAA0B,GAC1B,uBAAuB,CAAC;AAE5B,MAAM,WAAW,qBAAqB;IAGpC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,KAAK,IAAI,CAAC;CAC1E;AA6BD;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE;IAAE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,CAAA;CAAE,GAAG,IAAI,GAC7D,IAAI,CAEN;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,iBAAiB,CAkBxD"}

package/dist/devportal/events/index.js

@@ -0,0 +1,28 @@
+import { useCallback as e } from "react";
+//#region src/devportal/events/index.ts
+var t = { emit: (e, t) => {} }, n = null;
+function r() {
+	if (n) return n;
+	try {
+		return null;
+	} catch {
+		return null;
+	}
+}
+function i(e) {
+	n = e;
+}
+function a() {
+	return { emit: e((e, i) => {
+		let a = r() ?? n;
+		if (a) try {
+			a.emit(e, i);
+			return;
+		} catch {}
+		t.emit(e, i);
+	}, []) };
+}
+//#endregion
+export { i as setDevportalEventBusBridge, a as useDevportalEventBus };
+
+//# sourceMappingURL=index.js.map

package/dist/devportal/events/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/devportal/events/index.ts"],"sourcesContent":["/**\n * Devportal frontend event bus\n *\n * Per spec `infra-specs/microfrontends/47-FRONTEND-EVENT-BUS.md`, MFEs emit\n * domain events through the central `@burdenoff/fe-libs/shared/events` bus\n * which the app shell wires to RybbitSink / BackendAuditSink / OtelBrowserSink.\n *\n * The fe-libs core registry is statically typed (`BurdenoffEventName`), so\n * extending it requires a fe-libs PR. To unblock devportal shipping today\n * we define a typed wrapper that:\n *   - degrades gracefully when no `EventBusProvider` is mounted\n *   - logs to a devtools sink in dev (`console.debug`)\n *   - tags every event with `name` + `payload` and forwards to fe-libs bus\n *     using a pass-through escape hatch (the bus accepts arbitrary string\n *     names at runtime; the type system is the only guard)\n *\n * Once fe-libs registry is updated with `devportal.*` entries, swap the\n * `EventBusFacade` for direct `useEventBus()` consumption — no caller-site\n * change required.\n */\nimport { useCallback } from \"react\";\n\nexport type DevportalEventName =\n  | \"devportal.app.created\"\n  | \"devportal.app.updated\"\n  | \"devportal.app.deleted\"\n  | \"devportal.app.published\"\n  | \"devportal.app.submitted\"\n  | \"devportal.app.review_status_changed\"\n  | \"devportal.version.created\"\n  | \"devportal.version.published\"\n  | \"devportal.org.created\"\n  | \"devportal.org.updated\"\n  | \"devportal.org.member.added\"\n  | \"devportal.org.member.removed\"\n  | \"devportal.org.invitation.sent\"\n  | \"devportal.org.invitation.accepted\"\n  | \"devportal.webhook.created\"\n  | \"devportal.webhook.updated\"\n  | \"devportal.webhook.deleted\"\n  | \"devportal.webhook.delivered\"\n  | \"devportal.webhook.delivery_failed\"\n  | \"devportal.oauth.client.created\"\n  | \"devportal.oauth.client.deleted\"\n  | \"devportal.apikey.generated\"\n  | \"devportal.apikey.revoked\"\n  | \"devportal.delegation.granted\"\n  | \"devportal.delegation.revoked\"\n  | \"devportal.revenue.updated\"\n  | \"devportal.error.boundary\"\n  | \"devportal.page.viewed\";\n\nexport interface DevportalEventPayload {\n  // common envelope; specific payloads are loose by design — fe-libs bus\n  // enforces structural typing once registry entry is added.\n  [key: string]: unknown;\n}\n\nexport interface DevportalEventBus {\n  emit: (name: DevportalEventName, payload: DevportalEventPayload) => void;\n}\n\nconst NOOP_BUS: DevportalEventBus = {\n  emit: (name, payload) => {\n    if (typeof window !== \"undefined\" && import.meta.env?.DEV) {\n      // dev fallback when shell didn't mount EventBusProvider\n      // eslint-disable-next-line no-console\n      console.debug(\"[devportal-event]\", name, payload);\n    }\n  },\n};\n\nlet cachedFeLibsBus: { emit: (name: string, payload: unknown) => void } | null =\n  null;\n\nfunction tryResolveFeLibsBus(): {\n  emit: (name: string, payload: unknown) => void;\n} | null {\n  if (cachedFeLibsBus) return cachedFeLibsBus;\n  try {\n    // Dynamic import via require is unavailable in ESM strict — instead we\n    // rely on the consumer (DevportalRoot) to optionally call setEventBusBridge\n    // at mount. Until then the noop bus catches calls.\n    return null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Optional bridge: app shell (or DevportalRoot wrapper) may call this with\n * the fe-libs `useEventBus()` value to forward all devportal events.\n */\nexport function setDevportalEventBusBridge(\n  bus: { emit: (name: string, payload: unknown) => void } | null,\n): void {\n  cachedFeLibsBus = bus;\n}\n\n/**\n * Hook used by devportal pages to emit events. Always returns a working bus.\n */\nexport function useDevportalEventBus(): DevportalEventBus {\n  const emit = useCallback(\n    (name: DevportalEventName, payload: DevportalEventPayload): void => {\n      const bridged = tryResolveFeLibsBus() ?? cachedFeLibsBus;\n      if (bridged) {\n        try {\n          bridged.emit(name, payload);\n          return;\n        } catch {\n          // fall through to noop\n        }\n      }\n      NOOP_BUS.emit(name, payload);\n    },\n    [],\n  );\n\n  return { emit };\n}\n"],"mappings":";;AA8DA,IAAM,IAA8B,EAClC,OAAO,GAAM,MAAY,IAO1B,EAEG,IACF;AAEF,SAAS,IAEA;AACP,KAAI,EAAiB,QAAO;AAC5B,KAAI;AAIF,SAAO;SACD;AACN,SAAO;;;AAQX,SAAgB,EACd,GACM;AACN,KAAkB;;AAMpB,SAAgB,IAA0C;AAiBxD,QAAO,EAAE,MAhBI,GACV,GAA0B,MAAyC;EAClE,IAAM,IAAU,GAAqB,IAAI;AACzC,MAAI,EACF,KAAI;AACF,KAAQ,KAAK,GAAM,EAAQ;AAC3B;UACM;AAIV,IAAS,KAAK,GAAM,EAAQ;IAE9B,EAAE,CACH,EAEc"}

package/dist/devportal/hooks/DevPortalProvider.d.ts

@@ -0,0 +1,18 @@
+import { ReactNode } from 'react';
+
+interface DevPortalProviderProps {
+    children: ReactNode;
+}
+/**
+ * DevPortalProvider - Wraps children with Apollo Client context
+ *
+ * Usage:
+ * ```tsx
+ * <DevPortalProvider>
+ *   <YourApp />
+ * </DevPortalProvider>
+ * ```
+ */
+export declare function DevPortalProvider({ children }: DevPortalProviderProps): import("react/jsx-runtime").JSX.Element;
+export default DevPortalProvider;
+//# sourceMappingURL=DevPortalProvider.d.ts.map

package/dist/devportal/hooks/DevPortalProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DevPortalProvider.d.ts","sourceRoot":"","sources":["../../../src/devportal/hooks/DevPortalProvider.tsx"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAGvC,UAAU,sBAAsB;IAC9B,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,QAAQ,EAAE,EAAE,sBAAsB,2CAErE;AAED,eAAe,iBAAiB,CAAC"}

package/dist/devportal/hooks/DevPortalProvider.js

@@ -0,0 +1,14 @@
+import { apolloClient as e } from "./useGraphQL.js";
+import { jsx as t } from "react/jsx-runtime";
+import { ApolloProvider as n } from "@apollo/client/react";
+//#region src/devportal/hooks/DevPortalProvider.tsx
+function r({ children: r }) {
+	return /* @__PURE__ */ t(n, {
+		client: e,
+		children: r
+	});
+}
+//#endregion
+export { r as default };
+
+//# sourceMappingURL=DevPortalProvider.js.map

package/dist/devportal/hooks/DevPortalProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DevPortalProvider.js","names":[],"sources":["../../../src/devportal/hooks/DevPortalProvider.tsx"],"sourcesContent":["/**\n * DevPortal Apollo Provider\n *\n * Wraps the application with Apollo Client context for GraphQL operations.\n * This provider should be used at the root of the DevPortal microfrontend.\n */\n\nimport { ApolloProvider } from \"@apollo/client/react\";\nimport { type ReactNode } from \"react\";\nimport { apolloClient } from \"./useGraphQL\";\n\ninterface DevPortalProviderProps {\n  children: ReactNode;\n}\n\n/**\n * DevPortalProvider - Wraps children with Apollo Client context\n *\n * Usage:\n * ```tsx\n * <DevPortalProvider>\n *   <YourApp />\n * </DevPortalProvider>\n * ```\n */\nexport function DevPortalProvider({ children }: DevPortalProviderProps) {\n  return <ApolloProvider client={apolloClient}>{children}</ApolloProvider>;\n}\n\nexport default DevPortalProvider;\n"],"mappings":";;;;AAyBA,SAAgB,EAAkB,EAAE,eAAoC;AACtE,QAAO,kBAAC,GAAD;EAAgB,QAAQ;EAAe;EAA0B,CAAA"}

package/dist/devportal/hooks/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * DevPortal Hooks
+ *
+ * Exports all GraphQL hooks and utilities for the Developer Portal.
+ */
+export { apolloClient, parseGraphQLError, getErrorMessage, isAuthError, isValidationError, clearApolloCache, resetApolloStore, type GraphQLErrorInfo, } from './useGraphQL';
+export { DevPortalProvider } from './DevPortalProvider';
+export { useDevportalPermission } from './usePermission';
+export * from '../../generated/global-operations';
+//# sourceMappingURL=index.d.ts.map

package/dist/devportal/hooks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/devportal/hooks/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,KAAK,gBAAgB,GACtB,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAGzD,cAAc,mCAAmC,CAAC"}

package/dist/devportal/hooks/index.js

@@ -0,0 +1,4 @@
+import "../../generated/global-operations.js";
+import "./useGraphQL.js";
+import "./DevPortalProvider.js";
+import "./usePermission.js";

package/dist/devportal/hooks/useGraphQL.d.ts

@@ -0,0 +1,56 @@
+import { ApolloClient } from '@apollo/client/core';
+
+export * from '../../generated/global-operations';
+declare global {
+    interface ImportMeta {
+        readonly env: {
+            readonly VITE_GRAPHQL_ENDPOINT?: string;
+            readonly VITE_AUTH_GRAPHQL_ENDPOINT?: string;
+            readonly VITE_DEV_ACTOR_ID?: string;
+            readonly VITE_DEV_ACTOR_TYPE?: string;
+            readonly DEV?: boolean;
+            [key: string]: string | boolean | undefined;
+        };
+    }
+}
+export declare const apolloClient: ApolloClient;
+/**
+ * Error handling utilities
+ */
+export interface GraphQLErrorInfo {
+    message: string;
+    code?: string;
+    path?: readonly (string | number)[];
+}
+export type ApolloErrorLike = Error & {
+    graphQLErrors?: readonly {
+        message: string;
+        extensions?: {
+            code?: string;
+        };
+        path?: readonly (string | number)[];
+    }[];
+    networkError?: Error | null;
+};
+export declare function parseGraphQLError(error: ApolloErrorLike): GraphQLErrorInfo[];
+/**
+ * Get a user-friendly error message from an Apollo error
+ */
+export declare function getErrorMessage(error: ApolloErrorLike): string;
+/**
+ * Check if an error is an authentication error
+ */
+export declare function isAuthError(error: ApolloErrorLike): boolean;
+/**
+ * Check if an error is a validation error
+ */
+export declare function isValidationError(error: ApolloErrorLike): boolean;
+/**
+ * Clear Apollo cache (useful for logout)
+ */
+export declare function clearApolloCache(): Promise<void>;
+/**
+ * Reset Apollo store and refetch queries
+ */
+export declare function resetApolloStore(): Promise<void>;
+//# sourceMappingURL=useGraphQL.d.ts.map

package/dist/devportal/hooks/useGraphQL.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useGraphQL.d.ts","sourceRoot":"","sources":["../../../src/devportal/hooks/useGraphQL.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,YAAY,EAKb,MAAM,qBAAqB,CAAC;AAuC7B,cAAc,mCAAmC,CAAC;AAGlD,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,UAAU;QAClB,QAAQ,CAAC,GAAG,EAAE;YACZ,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;YACxC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC;YAC7C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;YACpC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;YACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;YACvB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;SAC7C,CAAC;KACH;CACF;AA4HD,eAAO,MAAM,YAAY,cAuKvB,CAAC;AAEH;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;CACrC;AAGD,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG;IACpC,aAAa,CAAC,EAAE,SAAS;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/B,IAAI,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;KACrC,EAAE,CAAC;IACJ,YAAY,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;CAC7B,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,eAAe,GAAG,gBAAgB,EAAE,CAgC5E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAG9D;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAK3D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAKjE;AAED;;GAEG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAEtD;AAED;;GAEG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAEtD"}

package/dist/devportal/hooks/useGraphQL.js

@@ -0,0 +1,223 @@
+import "../../generated/global-operations.js";
+import { CombinedGraphQLErrors as e } from "../../node_modules/@apollo/client/errors/CombinedGraphQLErrors.js";
+import { ServerError as t } from "../../node_modules/@apollo/client/errors/ServerError.js";
+import { ApolloClient as n, InMemoryCache as r, createHttpLink as i, from as a, split as o } from "@apollo/client/core";
+import { setContext as s } from "@apollo/client/link/context";
+import { onError as c } from "@apollo/client/link/error";
+import { isAuthNetworkError as l, redirectToLogin as u } from "@burdenoff/fe-libs/shared/utils";
+//#region src/devportal/hooks/useGraphQL.ts
+function d(e = []) {
+	return e.some((e) => {
+		let t = typeof e.extensions?.code == "string" ? e.extensions.code : "", n = typeof e.extensions?.errorCode == "string" ? e.extensions.errorCode : "", r = (e.message ?? "").toLowerCase();
+		return t === "UNAUTHENTICATED" || n === "TOKEN_EXPIRED" || r.includes("token_expired") || r.includes("token expired") || r.includes("session expired") || r.includes("unauthorized") || r.includes("unauthenticated") || r.includes("authentication required") || r.includes("workspace context missing");
+	});
+}
+var f = !1, p = f ? "/devportal-graphql" : "http://localhost:4015/graphql", m = f ? "/auth-graphql" : "http://localhost:4011/graphql", h = new Set([
+	"CurrentUserApps",
+	"GetAuthApp",
+	"AppsActingAsCurrentUser",
+	"CreateAuthApp",
+	"UpdateAuthApp",
+	"DeactivateApp",
+	"RotateAppSecret",
+	"AuthenticateApp",
+	"GenerateAppToken",
+	"GenerateAppAsUserToken",
+	"ExchangeToken",
+	"CurrentUserDelegations",
+	"CurrentUserGrantedDelegations",
+	"GrantDelegation",
+	"RevokeDelegation",
+	"MyApiKeys",
+	"GenerateAPIKey",
+	"RevokeAPIKeyAuth",
+	"RotateAPIKeyAuth",
+	"AuthenticateAPIKey"
+]), g = "dev-user-001", _ = "user", v = i({ uri: p }), y = o(({ operationName: e }) => e ? h.has(e) : !1, i({ uri: m }), v), b = s((e, { headers: t }) => {
+	let n = typeof window < "u" ? localStorage.getItem("auth_token") : null, r = { ...t };
+	if (n && (r.authorization = `Bearer ${n}`), f) {
+		let e = typeof window < "u" && localStorage.getItem("dev_actor_id") || g, t = typeof window < "u" && localStorage.getItem("dev_actor_type") || _;
+		r["x-actor-id"] = e, r["x-actor-type"] = t;
+	}
+	return { headers: r };
+}), x = new n({
+	link: a([
+		c(({ error: e }) => {
+			if (e) {
+				if (d("errors" in e && Array.isArray(e.errors) ? e.errors : [])) {
+					u();
+					return;
+				}
+				e instanceof Error && l(e) && u();
+			}
+		}),
+		b,
+		y
+	]),
+	cache: new r({ typePolicies: {
+		Query: { fields: {
+			developerOrganizations: {
+				keyArgs: [
+					"tier",
+					"isVerified",
+					"isCertified",
+					"partnerTier"
+				],
+				merge(e, t, { args: n }) {
+					return !n?.offset || n.offset === 0 ? t : {
+						...t,
+						edges: [...e?.edges || [], ...t.edges]
+					};
+				}
+			},
+			applications: {
+				keyArgs: [
+					"status",
+					"visibility",
+					"developerId"
+				],
+				merge(e, t, { args: n }) {
+					return !n?.offset || n.offset === 0 ? t : {
+						...t,
+						edges: [...e?.edges || [], ...t.edges]
+					};
+				}
+			},
+			developerOrgSales: {
+				keyArgs: [
+					"organizationId",
+					"applicationId",
+					"status",
+					"pricingModel",
+					"isPaidOut"
+				],
+				merge(e, t, { args: n }) {
+					return !n?.offset || n.offset === 0 ? t : {
+						...t,
+						edges: [...e?.edges || [], ...t.edges]
+					};
+				}
+			},
+			developerOrgPayouts: {
+				keyArgs: ["organizationId", "status"],
+				merge(e, t, { args: n }) {
+					return !n?.offset || n.offset === 0 ? t : {
+						...t,
+						edges: [...e?.edges || [], ...t.edges]
+					};
+				}
+			},
+			developerOrgMembers: {
+				keyArgs: ["organizationId", "role"],
+				merge(e, t, { args: n }) {
+					return !n?.offset || n.offset === 0 ? t : {
+						...t,
+						edges: [...e?.edges || [], ...t.edges]
+					};
+				}
+			},
+			developerOrgInvitations: {
+				keyArgs: ["organizationId", "status"],
+				merge(e, t, { args: n }) {
+					return !n?.offset || n.offset === 0 ? t : {
+						...t,
+						edges: [...e?.edges || [], ...t.edges]
+					};
+				}
+			},
+			webhooks: {
+				keyArgs: ["applicationId", "status"],
+				merge(e, t, { args: n }) {
+					return !n?.offset || n.offset === 0 ? t : {
+						...t,
+						edges: [...e?.edges || [], ...t.edges]
+					};
+				}
+			},
+			webhookDeliveries: {
+				keyArgs: ["webhookId", "status"],
+				merge(e, t, { args: n }) {
+					return !n?.offset || n.offset === 0 ? t : {
+						...t,
+						edges: [...e?.edges || [], ...t.edges]
+					};
+				}
+			},
+			auditLogs: {
+				keyArgs: [
+					"resource",
+					"resourceId",
+					"actorId"
+				],
+				merge(e, t, { args: n }) {
+					return !n?.offset || n.offset === 0 ? t : {
+						...t,
+						edges: [...e?.edges || [], ...t.edges]
+					};
+				}
+			},
+			applicationVersions: {
+				keyArgs: ["applicationId"],
+				merge(e, t, { args: n }) {
+					return !n?.offset || n.offset === 0 ? t : Array.isArray(t) && Array.isArray(e) ? [...e, ...t] : t;
+				}
+			}
+		} },
+		WebhookDelivery: { keyFields: ["id"] },
+		ApplicationVersion: { keyFields: ["id"] },
+		DeveloperOrganization: { keyFields: ["id"] },
+		Application: { keyFields: ["id"] },
+		DeveloperOrgMember: { keyFields: ["id"] },
+		DeveloperOrgInvitation: { keyFields: ["id"] },
+		Webhook: { keyFields: ["id"] },
+		ApiKey: { keyFields: ["id"] },
+		OAuthClient: { keyFields: ["id"] }
+	} }),
+	defaultOptions: {
+		watchQuery: {
+			fetchPolicy: "cache-and-network",
+			errorPolicy: "all"
+		},
+		query: {
+			fetchPolicy: "cache-first",
+			errorPolicy: "all"
+		},
+		mutate: { errorPolicy: "all" }
+	}
+});
+function S(n) {
+	return n instanceof e ? n.errors.map((e) => ({
+		message: e.message,
+		code: e.extensions?.code,
+		path: e.path
+	})) : n.graphQLErrors && n.graphQLErrors.length > 0 ? n.graphQLErrors.map((e) => ({
+		message: e.message,
+		code: e.extensions?.code,
+		path: e.path
+	})) : n instanceof t || n.networkError ? [{
+		message: "Network error. Please check your connection and try again.",
+		code: "NETWORK_ERROR"
+	}] : [{
+		message: n.message || "An unexpected error occurred",
+		code: "UNKNOWN_ERROR"
+	}];
+}
+function C(e) {
+	return S(e).map((e) => e.message).join(", ");
+}
+function w(e) {
+	return S(e).some((e) => e.code === "UNAUTHENTICATED" || e.code === "FORBIDDEN");
+}
+function T(e) {
+	return S(e).some((e) => e.code === "BAD_USER_INPUT" || e.code === "VALIDATION_ERROR");
+}
+async function E() {
+	await x.clearStore();
+}
+async function D() {
+	await x.resetStore();
+}
+//#endregion
+export { x as apolloClient, E as clearApolloCache, C as getErrorMessage, w as isAuthError, T as isValidationError, S as parseGraphQLError, D as resetApolloStore };
+
+//# sourceMappingURL=useGraphQL.js.map

package/dist/devportal/hooks/useGraphQL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useGraphQL.js","names":[],"sources":["../../../src/devportal/hooks/useGraphQL.ts"],"sourcesContent":["/**\n * Apollo Client hooks and utilities for DevPortal\n *\n * This file provides the GraphQL client setup and custom hooks for the Developer Portal.\n * It wraps the generated Apollo hooks with additional functionality like error handling,\n * loading states, and authentication context.\n */\n\nimport {\n  ApolloClient,\n  InMemoryCache,\n  createHttpLink,\n  from,\n  split,\n} from \"@apollo/client/core\";\nimport { CombinedGraphQLErrors, ServerError } from \"@apollo/client/errors\";\nimport { setContext } from \"@apollo/client/link/context\";\nimport { onError } from \"@apollo/client/link/error\";\nimport {\n  isAuthNetworkError,\n  redirectToLogin,\n} from \"@burdenoff/fe-libs/shared/utils\";\n\nfunction hasSessionAuthErrors(\n  errors: ReadonlyArray<{\n    message?: string;\n    extensions?: Record<string, unknown>;\n  }> = [],\n): boolean {\n  return errors.some((error) => {\n    const code =\n      typeof error.extensions?.code === \"string\" ? error.extensions.code : \"\";\n    const errorCode =\n      typeof error.extensions?.errorCode === \"string\"\n        ? error.extensions.errorCode\n        : \"\";\n    const message = (error.message ?? \"\").toLowerCase();\n\n    return (\n      code === \"UNAUTHENTICATED\" ||\n      errorCode === \"TOKEN_EXPIRED\" ||\n      message.includes(\"token_expired\") ||\n      message.includes(\"token expired\") ||\n      message.includes(\"session expired\") ||\n      message.includes(\"unauthorized\") ||\n      message.includes(\"unauthenticated\") ||\n      message.includes(\"authentication required\") ||\n      message.includes(\"workspace context missing\")\n    );\n  });\n}\n\n// Re-export all generated hooks for direct use\nexport * from \"../../generated/global-operations\";\n\n// Vite environment variable declaration\ndeclare global {\n  interface ImportMeta {\n    readonly env: {\n      readonly VITE_GRAPHQL_ENDPOINT?: string;\n      readonly VITE_AUTH_GRAPHQL_ENDPOINT?: string;\n      readonly VITE_DEV_ACTOR_ID?: string;\n      readonly VITE_DEV_ACTOR_TYPE?: string;\n      readonly DEV?: boolean;\n      [key: string]: string | boolean | undefined;\n    };\n  }\n}\n\n// Development mode check\nconst isDevelopment =\n  typeof import.meta !== \"undefined\" && import.meta.env?.DEV === true;\n\n// Default GraphQL endpoints - can be overridden via environment.\n// In standalone dev mode we route through same-origin Vite proxies to avoid CORS.\nconst DEFAULT_GRAPHQL_ENDPOINT =\n  (typeof import.meta !== \"undefined\" &&\n    import.meta.env?.VITE_GRAPHQL_ENDPOINT) ||\n  (isDevelopment ? \"/devportal-graphql\" : \"http://localhost:4015/graphql\");\n\nconst DEFAULT_AUTH_GRAPHQL_ENDPOINT =\n  (typeof import.meta !== \"undefined\" &&\n    import.meta.env?.VITE_AUTH_GRAPHQL_ENDPOINT) ||\n  (isDevelopment ? \"/auth-graphql\" : \"http://localhost:4011/graphql\");\n\nconst AUTH_OPERATION_NAMES = new Set([\n  \"CurrentUserApps\",\n  \"GetAuthApp\",\n  \"AppsActingAsCurrentUser\",\n  \"CreateAuthApp\",\n  \"UpdateAuthApp\",\n  \"DeactivateApp\",\n  \"RotateAppSecret\",\n  \"AuthenticateApp\",\n  \"GenerateAppToken\",\n  \"GenerateAppAsUserToken\",\n  \"ExchangeToken\",\n  \"CurrentUserDelegations\",\n  \"CurrentUserGrantedDelegations\",\n  \"GrantDelegation\",\n  \"RevokeDelegation\",\n  \"MyApiKeys\",\n  \"GenerateAPIKey\",\n  \"RevokeAPIKeyAuth\",\n  \"RotateAPIKeyAuth\",\n  \"AuthenticateAPIKey\",\n]);\n\n// Development actor ID - simulates gateway-injected headers\n// In production, the gateway adds these after JWT verification\nconst DEV_ACTOR_ID =\n  (typeof import.meta !== \"undefined\" && import.meta.env?.VITE_DEV_ACTOR_ID) ||\n  \"dev-user-001\";\n\nconst DEV_ACTOR_TYPE =\n  (typeof import.meta !== \"undefined\" &&\n    import.meta.env?.VITE_DEV_ACTOR_TYPE) ||\n  \"user\";\n\n// Create the HTTP links\nconst devportalHttpLink = createHttpLink({\n  uri: DEFAULT_GRAPHQL_ENDPOINT,\n});\n\nconst authHttpLink = createHttpLink({\n  uri: DEFAULT_AUTH_GRAPHQL_ENDPOINT,\n});\n\nconst httpLink = split(\n  ({ operationName }) => {\n    if (!operationName) {\n      return false;\n    }\n\n    return AUTH_OPERATION_NAMES.has(operationName);\n  },\n  authHttpLink,\n  devportalHttpLink,\n);\n\n// Auth link to add authentication headers\nconst authLink = setContext((_, { headers }) => {\n  // Get auth token from storage or context\n  const token =\n    typeof window !== \"undefined\" ? localStorage.getItem(\"auth_token\") : null;\n\n  // Build headers\n  const authHeaders: Record<string, string> = {\n    ...headers,\n  };\n\n  if (token) {\n    authHeaders[\"authorization\"] = `Bearer ${token}`;\n  }\n\n  // In development mode, add actor headers to simulate gateway behavior\n  // In production, the API Gateway adds these headers after JWT verification\n  if (isDevelopment) {\n    // Use actor ID from localStorage (set by dev tools) or fall back to env/default\n    const actorId =\n      (typeof window !== \"undefined\" && localStorage.getItem(\"dev_actor_id\")) ||\n      DEV_ACTOR_ID;\n    const actorType =\n      (typeof window !== \"undefined\" &&\n        localStorage.getItem(\"dev_actor_type\")) ||\n      DEV_ACTOR_TYPE;\n\n    authHeaders[\"x-actor-id\"] = actorId;\n    authHeaders[\"x-actor-type\"] = actorType;\n  }\n\n  return { headers: authHeaders };\n});\n\nconst errorLink = onError(({ error }) => {\n  if (!error) return;\n\n  const graphQLErrors =\n    \"errors\" in error && Array.isArray(error.errors) ? error.errors : [];\n\n  if (hasSessionAuthErrors(graphQLErrors)) {\n    redirectToLogin();\n    return;\n  }\n\n  if (error instanceof Error && isAuthNetworkError(error)) {\n    redirectToLogin();\n  }\n});\n\n// Create the Apollo Client instance\nexport const apolloClient = new ApolloClient({\n  link: from([errorLink, authLink, httpLink]),\n  cache: new InMemoryCache({\n    typePolicies: {\n      Query: {\n        fields: {\n          // Pagination policies for connection types\n          developerOrganizations: {\n            keyArgs: [\"tier\", \"isVerified\", \"isCertified\", \"partnerTier\"],\n            merge(existing, incoming, { args }) {\n              if (!args?.offset || args.offset === 0) {\n                return incoming;\n              }\n              return {\n                ...incoming,\n                edges: [...(existing?.edges || []), ...incoming.edges],\n              };\n            },\n          },\n          applications: {\n            keyArgs: [\"status\", \"visibility\", \"developerId\"],\n            merge(existing, incoming, { args }) {\n              if (!args?.offset || args.offset === 0) {\n                return incoming;\n              }\n              return {\n                ...incoming,\n                edges: [...(existing?.edges || []), ...incoming.edges],\n              };\n            },\n          },\n          developerOrgSales: {\n            keyArgs: [\n              \"organizationId\",\n              \"applicationId\",\n              \"status\",\n              \"pricingModel\",\n              \"isPaidOut\",\n            ],\n            merge(existing, incoming, { args }) {\n              if (!args?.offset || args.offset === 0) {\n                return incoming;\n              }\n              return {\n                ...incoming,\n                edges: [...(existing?.edges || []), ...incoming.edges],\n              };\n            },\n          },\n          developerOrgPayouts: {\n            keyArgs: [\"organizationId\", \"status\"],\n            merge(existing, incoming, { args }) {\n              if (!args?.offset || args.offset === 0) {\n                return incoming;\n              }\n              return {\n                ...incoming,\n                edges: [...(existing?.edges || []), ...incoming.edges],\n              };\n            },\n          },\n          developerOrgMembers: {\n            keyArgs: [\"organizationId\", \"role\"],\n            merge(existing, incoming, { args }) {\n              if (!args?.offset || args.offset === 0) return incoming;\n              return {\n                ...incoming,\n                edges: [...(existing?.edges || []), ...incoming.edges],\n              };\n            },\n          },\n          developerOrgInvitations: {\n            keyArgs: [\"organizationId\", \"status\"],\n            merge(existing, incoming, { args }) {\n              if (!args?.offset || args.offset === 0) return incoming;\n              return {\n                ...incoming,\n                edges: [...(existing?.edges || []), ...incoming.edges],\n              };\n            },\n          },\n          webhooks: {\n            keyArgs: [\"applicationId\", \"status\"],\n            merge(existing, incoming, { args }) {\n              if (!args?.offset || args.offset === 0) return incoming;\n              return {\n                ...incoming,\n                edges: [...(existing?.edges || []), ...incoming.edges],\n              };\n            },\n          },\n          webhookDeliveries: {\n            keyArgs: [\"webhookId\", \"status\"],\n            merge(existing, incoming, { args }) {\n              if (!args?.offset || args.offset === 0) return incoming;\n              return {\n                ...incoming,\n                edges: [...(existing?.edges || []), ...incoming.edges],\n              };\n            },\n          },\n          auditLogs: {\n            keyArgs: [\"resource\", \"resourceId\", \"actorId\"],\n            merge(existing, incoming, { args }) {\n              if (!args?.offset || args.offset === 0) return incoming;\n              return {\n                ...incoming,\n                edges: [...(existing?.edges || []), ...incoming.edges],\n              };\n            },\n          },\n          applicationVersions: {\n            // TODO(phase1-backend): Switch to ApplicationVersionConnection cursor pagination\n            // once backend ships connection type. See stability tracker.\n            keyArgs: [\"applicationId\"],\n            merge(existing, incoming, { args }) {\n              if (!args?.offset || args.offset === 0) return incoming;\n              if (Array.isArray(incoming) && Array.isArray(existing)) {\n                return [...existing, ...incoming];\n              }\n              return incoming;\n            },\n          },\n        },\n      },\n      WebhookDelivery: {\n        keyFields: [\"id\"],\n      },\n      ApplicationVersion: {\n        keyFields: [\"id\"],\n      },\n      DeveloperOrganization: {\n        keyFields: [\"id\"],\n      },\n      Application: {\n        keyFields: [\"id\"],\n      },\n      DeveloperOrgMember: {\n        keyFields: [\"id\"],\n      },\n      DeveloperOrgInvitation: {\n        keyFields: [\"id\"],\n      },\n      Webhook: {\n        keyFields: [\"id\"],\n      },\n      ApiKey: {\n        keyFields: [\"id\"],\n      },\n      OAuthClient: {\n        keyFields: [\"id\"],\n      },\n    },\n  }),\n  defaultOptions: {\n    watchQuery: {\n      fetchPolicy: \"cache-and-network\",\n      errorPolicy: \"all\",\n    },\n    query: {\n      fetchPolicy: \"cache-first\",\n      errorPolicy: \"all\",\n    },\n    mutate: {\n      errorPolicy: \"all\",\n    },\n  },\n});\n\n/**\n * Error handling utilities\n */\nexport interface GraphQLErrorInfo {\n  message: string;\n  code?: string;\n  path?: readonly (string | number)[];\n}\n\n// Type for Apollo errors (can be CombinedGraphQLErrors, ServerError, or Error)\nexport type ApolloErrorLike = Error & {\n  graphQLErrors?: readonly {\n    message: string;\n    extensions?: { code?: string };\n    path?: readonly (string | number)[];\n  }[];\n  networkError?: Error | null;\n};\n\nexport function parseGraphQLError(error: ApolloErrorLike): GraphQLErrorInfo[] {\n  if (error instanceof CombinedGraphQLErrors) {\n    return error.errors.map((err) => ({\n      message: err.message,\n      code: err.extensions?.code as string | undefined,\n      path: err.path,\n    }));\n  }\n\n  if (error.graphQLErrors && error.graphQLErrors.length > 0) {\n    return error.graphQLErrors.map((err) => ({\n      message: err.message,\n      code: err.extensions?.code as string | undefined,\n      path: err.path,\n    }));\n  }\n\n  if (error instanceof ServerError || error.networkError) {\n    return [\n      {\n        message: \"Network error. Please check your connection and try again.\",\n        code: \"NETWORK_ERROR\",\n      },\n    ];\n  }\n\n  return [\n    {\n      message: error.message || \"An unexpected error occurred\",\n      code: \"UNKNOWN_ERROR\",\n    },\n  ];\n}\n\n/**\n * Get a user-friendly error message from an Apollo error\n */\nexport function getErrorMessage(error: ApolloErrorLike): string {\n  const errors = parseGraphQLError(error);\n  return errors.map((e) => e.message).join(\", \");\n}\n\n/**\n * Check if an error is an authentication error\n */\nexport function isAuthError(error: ApolloErrorLike): boolean {\n  const errors = parseGraphQLError(error);\n  return errors.some(\n    (e) => e.code === \"UNAUTHENTICATED\" || e.code === \"FORBIDDEN\",\n  );\n}\n\n/**\n * Check if an error is a validation error\n */\nexport function isValidationError(error: ApolloErrorLike): boolean {\n  const errors = parseGraphQLError(error);\n  return errors.some(\n    (e) => e.code === \"BAD_USER_INPUT\" || e.code === \"VALIDATION_ERROR\",\n  );\n}\n\n/**\n * Clear Apollo cache (useful for logout)\n */\nexport async function clearApolloCache(): Promise<void> {\n  await apolloClient.clearStore();\n}\n\n/**\n * Reset Apollo store and refetch queries\n */\nexport async function resetApolloStore(): Promise<void> {\n  await apolloClient.resetStore();\n}\n"],"mappings":";;;;;;;;AAuBA,SAAS,EACP,IAGK,EAAE,EACE;AACT,QAAO,EAAO,MAAM,MAAU;EAC5B,IAAM,IACJ,OAAO,EAAM,YAAY,QAAS,WAAW,EAAM,WAAW,OAAO,IACjE,IACJ,OAAO,EAAM,YAAY,aAAc,WACnC,EAAM,WAAW,YACjB,IACA,KAAW,EAAM,WAAW,IAAI,aAAa;AAEnD,SACE,MAAS,qBACT,MAAc,mBACd,EAAQ,SAAS,gBAAgB,IACjC,EAAQ,SAAS,gBAAgB,IACjC,EAAQ,SAAS,kBAAkB,IACnC,EAAQ,SAAS,eAAe,IAChC,EAAQ,SAAS,kBAAkB,IACnC,EAAQ,SAAS,0BAA0B,IAC3C,EAAQ,SAAS,4BAA4B;GAE/C;;AAqBJ,IAAM,IACkC,IAIlC,IAGH,IAAgB,uBAAuB,iCAEpC,IAGH,IAAgB,kBAAkB,iCAE/B,IAAuB,IAAI,IAAI;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC,EAII,IAEJ,gBAEI,IAGJ,QAGI,IAAoB,EAAe,EACvC,KAAK,GACN,CAAC,EAMI,IAAW,GACd,EAAE,uBACI,IAIE,EAAqB,IAAI,EAAc,GAHrC,IAPQ,EAAe,EAClC,KAAK,GACN,CAAC,EAWA,EACD,EAGK,IAAW,GAAY,GAAG,EAAE,iBAAc;CAE9C,IAAM,IACJ,OAAO,SAAW,MAAc,aAAa,QAAQ,aAAa,GAAG,MAGjE,IAAsC,EAC1C,GAAG,GACJ;AAQD,KANI,MACF,EAAY,gBAAmB,UAAU,MAKvC,GAAe;EAEjB,IAAM,IACH,OAAO,SAAW,OAAe,aAAa,QAAQ,eAAe,IACtE,GACI,IACH,OAAO,SAAW,OACjB,aAAa,QAAQ,iBAAiB,IACxC;AAGF,EADA,EAAY,gBAAgB,GAC5B,EAAY,kBAAkB;;AAGhC,QAAO,EAAE,SAAS,GAAa;EAC/B,EAmBW,IAAe,IAAI,EAAa;CAC3C,MAAM,EAAK;EAlBK,GAAS,EAAE,eAAY;AAClC,UAKL;QAAI,EAFF,YAAY,KAAS,MAAM,QAAQ,EAAM,OAAO,GAAG,EAAM,SAAS,EAAE,CAE/B,EAAE;AACvC,QAAiB;AACjB;;AAGF,IAAI,aAAiB,SAAS,EAAmB,EAAM,IACrD,GAAiB;;IAEnB;EAIuB;EAAU;EAAS,CAAC;CAC3C,OAAO,IAAI,EAAc,EACvB,cAAc;EACZ,OAAO,EACL,QAAQ;GAEN,wBAAwB;IACtB,SAAS;KAAC;KAAQ;KAAc;KAAe;KAAc;IAC7D,MAAM,GAAU,GAAU,EAAE,WAAQ;AAIlC,YAHI,CAAC,GAAM,UAAU,EAAK,WAAW,IAC5B,IAEF;MACL,GAAG;MACH,OAAO,CAAC,GAAI,GAAU,SAAS,EAAE,EAAG,GAAG,EAAS,MAAM;MACvD;;IAEJ;GACD,cAAc;IACZ,SAAS;KAAC;KAAU;KAAc;KAAc;IAChD,MAAM,GAAU,GAAU,EAAE,WAAQ;AAIlC,YAHI,CAAC,GAAM,UAAU,EAAK,WAAW,IAC5B,IAEF;MACL,GAAG;MACH,OAAO,CAAC,GAAI,GAAU,SAAS,EAAE,EAAG,GAAG,EAAS,MAAM;MACvD;;IAEJ;GACD,mBAAmB;IACjB,SAAS;KACP;KACA;KACA;KACA;KACA;KACD;IACD,MAAM,GAAU,GAAU,EAAE,WAAQ;AAIlC,YAHI,CAAC,GAAM,UAAU,EAAK,WAAW,IAC5B,IAEF;MACL,GAAG;MACH,OAAO,CAAC,GAAI,GAAU,SAAS,EAAE,EAAG,GAAG,EAAS,MAAM;MACvD;;IAEJ;GACD,qBAAqB;IACnB,SAAS,CAAC,kBAAkB,SAAS;IACrC,MAAM,GAAU,GAAU,EAAE,WAAQ;AAIlC,YAHI,CAAC,GAAM,UAAU,EAAK,WAAW,IAC5B,IAEF;MACL,GAAG;MACH,OAAO,CAAC,GAAI,GAAU,SAAS,EAAE,EAAG,GAAG,EAAS,MAAM;MACvD;;IAEJ;GACD,qBAAqB;IACnB,SAAS,CAAC,kBAAkB,OAAO;IACnC,MAAM,GAAU,GAAU,EAAE,WAAQ;AAElC,YADI,CAAC,GAAM,UAAU,EAAK,WAAW,IAAU,IACxC;MACL,GAAG;MACH,OAAO,CAAC,GAAI,GAAU,SAAS,EAAE,EAAG,GAAG,EAAS,MAAM;MACvD;;IAEJ;GACD,yBAAyB;IACvB,SAAS,CAAC,kBAAkB,SAAS;IACrC,MAAM,GAAU,GAAU,EAAE,WAAQ;AAElC,YADI,CAAC,GAAM,UAAU,EAAK,WAAW,IAAU,IACxC;MACL,GAAG;MACH,OAAO,CAAC,GAAI,GAAU,SAAS,EAAE,EAAG,GAAG,EAAS,MAAM;MACvD;;IAEJ;GACD,UAAU;IACR,SAAS,CAAC,iBAAiB,SAAS;IACpC,MAAM,GAAU,GAAU,EAAE,WAAQ;AAElC,YADI,CAAC,GAAM,UAAU,EAAK,WAAW,IAAU,IACxC;MACL,GAAG;MACH,OAAO,CAAC,GAAI,GAAU,SAAS,EAAE,EAAG,GAAG,EAAS,MAAM;MACvD;;IAEJ;GACD,mBAAmB;IACjB,SAAS,CAAC,aAAa,SAAS;IAChC,MAAM,GAAU,GAAU,EAAE,WAAQ;AAElC,YADI,CAAC,GAAM,UAAU,EAAK,WAAW,IAAU,IACxC;MACL,GAAG;MACH,OAAO,CAAC,GAAI,GAAU,SAAS,EAAE,EAAG,GAAG,EAAS,MAAM;MACvD;;IAEJ;GACD,WAAW;IACT,SAAS;KAAC;KAAY;KAAc;KAAU;IAC9C,MAAM,GAAU,GAAU,EAAE,WAAQ;AAElC,YADI,CAAC,GAAM,UAAU,EAAK,WAAW,IAAU,IACxC;MACL,GAAG;MACH,OAAO,CAAC,GAAI,GAAU,SAAS,EAAE,EAAG,GAAG,EAAS,MAAM;MACvD;;IAEJ;GACD,qBAAqB;IAGnB,SAAS,CAAC,gBAAgB;IAC1B,MAAM,GAAU,GAAU,EAAE,WAAQ;AAKlC,YAJI,CAAC,GAAM,UAAU,EAAK,WAAW,IAAU,IAC3C,MAAM,QAAQ,EAAS,IAAI,MAAM,QAAQ,EAAS,GAC7C,CAAC,GAAG,GAAU,GAAG,EAAS,GAE5B;;IAEV;GACF,EACF;EACD,iBAAiB,EACf,WAAW,CAAC,KAAK,EAClB;EACD,oBAAoB,EAClB,WAAW,CAAC,KAAK,EAClB;EACD,uBAAuB,EACrB,WAAW,CAAC,KAAK,EAClB;EACD,aAAa,EACX,WAAW,CAAC,KAAK,EAClB;EACD,oBAAoB,EAClB,WAAW,CAAC,KAAK,EAClB;EACD,wBAAwB,EACtB,WAAW,CAAC,KAAK,EAClB;EACD,SAAS,EACP,WAAW,CAAC,KAAK,EAClB;EACD,QAAQ,EACN,WAAW,CAAC,KAAK,EAClB;EACD,aAAa,EACX,WAAW,CAAC,KAAK,EAClB;EACF,EACF,CAAC;CACF,gBAAgB;EACd,YAAY;GACV,aAAa;GACb,aAAa;GACd;EACD,OAAO;GACL,aAAa;GACb,aAAa;GACd;EACD,QAAQ,EACN,aAAa,OACd;EACF;CACF,CAAC;AAqBF,SAAgB,EAAkB,GAA4C;AA0B5E,QAzBI,aAAiB,IACZ,EAAM,OAAO,KAAK,OAAS;EAChC,SAAS,EAAI;EACb,MAAM,EAAI,YAAY;EACtB,MAAM,EAAI;EACX,EAAE,GAGD,EAAM,iBAAiB,EAAM,cAAc,SAAS,IAC/C,EAAM,cAAc,KAAK,OAAS;EACvC,SAAS,EAAI;EACb,MAAM,EAAI,YAAY;EACtB,MAAM,EAAI;EACX,EAAE,GAGD,aAAiB,KAAe,EAAM,eACjC,CACL;EACE,SAAS;EACT,MAAM;EACP,CACF,GAGI,CACL;EACE,SAAS,EAAM,WAAW;EAC1B,MAAM;EACP,CACF;;AAMH,SAAgB,EAAgB,GAAgC;AAE9D,QADe,EAAkB,EAAM,CACzB,KAAK,MAAM,EAAE,QAAQ,CAAC,KAAK,KAAK;;AAMhD,SAAgB,EAAY,GAAiC;AAE3D,QADe,EAAkB,EAAM,CACzB,MACX,MAAM,EAAE,SAAS,qBAAqB,EAAE,SAAS,YACnD;;AAMH,SAAgB,EAAkB,GAAiC;AAEjE,QADe,EAAkB,EAAM,CACzB,MACX,MAAM,EAAE,SAAS,oBAAoB,EAAE,SAAS,mBAClD;;AAMH,eAAsB,IAAkC;AACtD,OAAM,EAAa,YAAY;;AAMjC,eAAsB,IAAkC;AACtD,OAAM,EAAa,YAAY"}