@burdenoff/microfe-devportal 2026.716.2 → 2026.720.1

package/dist/devportal/components/PermissionGuard.d.ts

@@ -2,7 +2,20 @@ import { FC, ReactNode } from 'react';
 import { DevportalPermission } from '../constants/permissions';
 
 interface PermissionGuardProps {
-    permission: DevportalPermission;
+    /**
+     * Required RBAC permission. Optional when `authOnly` is set — self-scoped
+     * developer surfaces gate on authentication only (see `authOnly`).
+     */
+    permission?: DevportalPermission;
+    /**
+     * Self-scoped mode. The corresponding backend fields are gated with
+     * `@rbac(scopeType: "self")` — an authentication gate whose resolvers filter
+     * strictly to the caller's own resources. Such fields carry no RBAC
+     * permission in `myPermissions`, so a permission check would wrongly deny
+     * every normal member. In this mode we render for any authenticated user and
+     * let the backend self-enforce per resource.
+     */
+    authOnly?: boolean;
     children: ReactNode;
 }
 /**

package/dist/devportal/components/PermissionGuard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PermissionGuard.d.ts","sourceRoot":"","sources":["../../../src/devportal/components/PermissionGuard.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAM3C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,UAAU,oBAAoB;IAC5B,UAAU,EAAE,mBAAmB,CAAC;IAChC,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CAwEpD,CAAC"}
+{"version":3,"file":"PermissionGuard.d.ts","sourceRoot":"","sources":["../../../src/devportal/components/PermissionGuard.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAM3C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,UAAU,oBAAoB;IAC5B;;;OAGG;IACH,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CA6FpD,CAAC"}

package/dist/devportal/components/PermissionGuard.js

@@ -5,30 +5,33 @@ import { usePermissions as r } from "@burdenoff/fe-libs/shared/providers/shell";
 import { Fragment as i, jsx as a } from "react/jsx-runtime";
 import { useAuth as o } from "@burdenoff/fe-libs/shared/providers/shell/AuthProvider";
 //#region src/devportal/components/PermissionGuard.tsx
-var s = ({ permission: s, children: c }) => {
-	let l = null, u = !1, d = !1, f = !1;
+var s = ({ permission: s, authOnly: c = !1, children: l }) => {
+	let u = null, d = !1, f = !1, p = !1;
 	try {
 		let e = r();
-		l = e.hasPermission, u = e.isLoading, d = e.permissions?.permissions?.some((e) => e.resourceType === "rbac" && e.level === "ADMIN") ?? !1;
+		u = e.hasPermission, d = e.isLoading, f = e.permissions?.permissions?.some((e) => e.resourceType === "rbac" && e.level === "ADMIN") ?? !1;
 	} catch {
-		l = null, u = !1, d = !1;
+		u = null, d = !1, f = !1;
 	}
 	try {
-		f = o().isAuthenticated;
+		p = o().isAuthenticated;
 	} catch {
-		f = !1;
+		p = !1;
 	}
-	let p = typeof window < "u" && (window.location.hostname === "localhost" || window.location.hostname.endsWith(".local.burdenoff.com")) && f, { t: m } = n(), h = (e, t) => {
-		let n = m(e);
+	let m = typeof window < "u" && (window.location.hostname === "localhost" || window.location.hostname.endsWith(".local.burdenoff.com")) && p, { t: h } = n(), g = (e, t) => {
+		let n = h(e);
 		return n === e ? t : n;
 	};
-	return u ? /* @__PURE__ */ a("div", {
+	return d ? /* @__PURE__ */ a("div", {
 		className: "flex min-h-screen items-center justify-center bg-bg-canvas",
 		children: /* @__PURE__ */ a(e, {})
-	}) : l && !l(s) && !d && !p ? /* @__PURE__ */ a(t, {
-		title: h("devportal.accessDenied", "Access Denied"),
-		description: h("devportal.noPermissionView", "You don't have permission to view this page.")
-	}) : /* @__PURE__ */ a(i, { children: c });
+	}) : c ? u !== null && !p && !m ? /* @__PURE__ */ a(t, {
+		title: g("devportal.accessDenied", "Access Denied"),
+		description: g("devportal.noPermissionView", "You don't have permission to view this page.")
+	}) : /* @__PURE__ */ a(i, { children: l }) : s && u && !u(s) && !f && !m ? /* @__PURE__ */ a(t, {
+		title: g("devportal.accessDenied", "Access Denied"),
+		description: g("devportal.noPermissionView", "You don't have permission to view this page.")
+	}) : /* @__PURE__ */ a(i, { children: l });
 };
 //#endregion
 export { s as PermissionGuard };

package/dist/devportal/components/PermissionGuard.js.map

@@ -1 +1 @@
-{"version":3,"file":"PermissionGuard.js","names":[],"sources":["../../../src/devportal/components/PermissionGuard.tsx"],"sourcesContent":["import type { FC, ReactNode } from \"react\";\nimport { usePermissions } from \"@burdenoff/fe-libs/shared/providers/shell\";\nimport { useAuth } from \"@burdenoff/fe-libs/shared/providers/shell/AuthProvider\";\nimport { AccessDenied } from \"@burdenoff/fe-libs/shared/components\";\nimport { useI18n } from \"@burdenoff/fe-libs/shared/providers/shell/I18nProvider\";\nimport { PageLoadingState } from \"./LoadingState\";\nimport type { DevportalPermission } from \"../constants/permissions\";\n\ninterface PermissionGuardProps {\n  permission: DevportalPermission;\n  children: ReactNode;\n}\n\n/**\n * Wraps page content with a permission check.\n * Shows a loading state while permissions resolve, then either\n * renders children (if permitted) or an AccessDenied screen.\n */\nexport const PermissionGuard: FC<PermissionGuardProps> = ({\n  permission,\n  children,\n}) => {\n  let hasPermission: ((permission: DevportalPermission) => boolean) | null =\n    null;\n  let isLoading = false;\n  let isRbacAdmin = false;\n  let isAuthenticated = false;\n\n  try {\n    const permissions = usePermissions();\n    hasPermission = permissions.hasPermission as (\n      permission: DevportalPermission,\n    ) => boolean;\n    isLoading = permissions.isLoading;\n    isRbacAdmin =\n      permissions.permissions?.permissions?.some(\n        (entry) => entry.resourceType === \"rbac\" && entry.level === \"ADMIN\",\n      ) ?? false;\n  } catch {\n    // Standalone/dev mode intentionally allows rendering without shell RBAC context.\n    hasPermission = null;\n    isLoading = false;\n    isRbacAdmin = false;\n  }\n\n  try {\n    const auth = useAuth();\n    isAuthenticated = auth.isAuthenticated;\n  } catch {\n    isAuthenticated = false;\n  }\n\n  const isLocalShellDev =\n    typeof window !== \"undefined\" &&\n    (window.location.hostname === \"localhost\" ||\n      window.location.hostname.endsWith(\".local.burdenoff.com\"));\n\n  const allowLocalShellBypass = isLocalShellDev && isAuthenticated;\n  const { t } = useI18n();\n  const tr = (key: string, fallback: string): string => {\n    const value = t(key);\n    return value === key ? fallback : value;\n  };\n\n  if (isLoading) {\n    return (\n      <div className=\"flex min-h-screen items-center justify-center bg-bg-canvas\">\n        <PageLoadingState />\n      </div>\n    );\n  }\n\n  if (\n    hasPermission &&\n    !hasPermission(permission) &&\n    !isRbacAdmin &&\n    !allowLocalShellBypass\n  ) {\n    return (\n      <AccessDenied\n        title={tr(\"devportal.accessDenied\", \"Access Denied\")}\n        description={tr(\n          \"devportal.noPermissionView\",\n          \"You don't have permission to view this page.\",\n        )}\n      />\n    );\n  }\n\n  return <>{children}</>;\n};\n"],"mappings":";;;;;;;AAkBA,IAAa,KAA6C,EACxD,eACA,kBACI;CACJ,IAAI,IACF,MACE,IAAY,IACZ,IAAc,IACd,IAAkB;AAEtB,KAAI;EACF,IAAM,IAAc,GAAgB;AAKpC,EAJA,IAAgB,EAAY,eAG5B,IAAY,EAAY,WACxB,IACE,EAAY,aAAa,aAAa,MACnC,MAAU,EAAM,iBAAiB,UAAU,EAAM,UAAU,QAC7D,IAAI;SACD;AAIN,EAFA,IAAgB,MAChB,IAAY,IACZ,IAAc;;AAGhB,KAAI;AAEF,MADa,GAAS,CACC;SACjB;AACN,MAAkB;;CAQpB,IAAM,IAJJ,OAAO,SAAW,QACjB,OAAO,SAAS,aAAa,eAC5B,OAAO,SAAS,SAAS,SAAS,uBAAuB,KAEZ,GAC3C,EAAE,SAAM,GAAS,EACjB,KAAM,GAAa,MAA6B;EACpD,IAAM,IAAQ,EAAE,EAAI;AACpB,SAAO,MAAU,IAAM,IAAW;;AA4BpC,QAzBI,IAEA,kBAAC,OAAD;EAAK,WAAU;YACb,kBAAC,GAAD,EAAoB,CAAA;EAChB,CAAA,GAKR,KACA,CAAC,EAAc,EAAW,IAC1B,CAAC,KACD,CAAC,IAGC,kBAAC,GAAD;EACE,OAAO,EAAG,0BAA0B,gBAAgB;EACpD,aAAa,EACX,8BACA,+CACD;EACD,CAAA,GAIC,kBAAA,GAAA,EAAG,aAAY,CAAA"}
+{"version":3,"file":"PermissionGuard.js","names":[],"sources":["../../../src/devportal/components/PermissionGuard.tsx"],"sourcesContent":["import type { FC, ReactNode } from \"react\";\nimport { usePermissions } from \"@burdenoff/fe-libs/shared/providers/shell\";\nimport { useAuth } from \"@burdenoff/fe-libs/shared/providers/shell/AuthProvider\";\nimport { AccessDenied } from \"@burdenoff/fe-libs/shared/components\";\nimport { useI18n } from \"@burdenoff/fe-libs/shared/providers/shell/I18nProvider\";\nimport { PageLoadingState } from \"./LoadingState\";\nimport type { DevportalPermission } from \"../constants/permissions\";\n\ninterface PermissionGuardProps {\n  /**\n   * Required RBAC permission. Optional when `authOnly` is set — self-scoped\n   * developer surfaces gate on authentication only (see `authOnly`).\n   */\n  permission?: DevportalPermission;\n  /**\n   * Self-scoped mode. The corresponding backend fields are gated with\n   * `@rbac(scopeType: \"self\")` — an authentication gate whose resolvers filter\n   * strictly to the caller's own resources. Such fields carry no RBAC\n   * permission in `myPermissions`, so a permission check would wrongly deny\n   * every normal member. In this mode we render for any authenticated user and\n   * let the backend self-enforce per resource.\n   */\n  authOnly?: boolean;\n  children: ReactNode;\n}\n\n/**\n * Wraps page content with a permission check.\n * Shows a loading state while permissions resolve, then either\n * renders children (if permitted) or an AccessDenied screen.\n */\nexport const PermissionGuard: FC<PermissionGuardProps> = ({\n  permission,\n  authOnly = false,\n  children,\n}) => {\n  let hasPermission: ((permission: DevportalPermission) => boolean) | null =\n    null;\n  let isLoading = false;\n  let isRbacAdmin = false;\n  let isAuthenticated = false;\n\n  try {\n    const permissions = usePermissions();\n    hasPermission = permissions.hasPermission as (\n      permission: DevportalPermission,\n    ) => boolean;\n    isLoading = permissions.isLoading;\n    isRbacAdmin =\n      permissions.permissions?.permissions?.some(\n        (entry) => entry.resourceType === \"rbac\" && entry.level === \"ADMIN\",\n      ) ?? false;\n  } catch {\n    // Standalone/dev mode intentionally allows rendering without shell RBAC context.\n    hasPermission = null;\n    isLoading = false;\n    isRbacAdmin = false;\n  }\n\n  try {\n    const auth = useAuth();\n    isAuthenticated = auth.isAuthenticated;\n  } catch {\n    isAuthenticated = false;\n  }\n\n  const isLocalShellDev =\n    typeof window !== \"undefined\" &&\n    (window.location.hostname === \"localhost\" ||\n      window.location.hostname.endsWith(\".local.burdenoff.com\"));\n\n  const allowLocalShellBypass = isLocalShellDev && isAuthenticated;\n  const { t } = useI18n();\n  const tr = (key: string, fallback: string): string => {\n    const value = t(key);\n    return value === key ? fallback : value;\n  };\n\n  if (isLoading) {\n    return (\n      <div className=\"flex min-h-screen items-center justify-center bg-bg-canvas\">\n        <PageLoadingState />\n      </div>\n    );\n  }\n\n  // Self-scoped surface: gate on authentication only. The backend\n  // (@rbac scopeType: \"self\") filters to the caller's own resources, so we\n  // must not require an RBAC permission the member legitimately lacks.\n  if (authOnly) {\n    // When the shell RBAC context is unavailable (standalone/dev), render.\n    if (hasPermission !== null && !isAuthenticated && !allowLocalShellBypass) {\n      return (\n        <AccessDenied\n          title={tr(\"devportal.accessDenied\", \"Access Denied\")}\n          description={tr(\n            \"devportal.noPermissionView\",\n            \"You don't have permission to view this page.\",\n          )}\n        />\n      );\n    }\n    return <>{children}</>;\n  }\n\n  if (\n    permission &&\n    hasPermission &&\n    !hasPermission(permission) &&\n    !isRbacAdmin &&\n    !allowLocalShellBypass\n  ) {\n    return (\n      <AccessDenied\n        title={tr(\"devportal.accessDenied\", \"Access Denied\")}\n        description={tr(\n          \"devportal.noPermissionView\",\n          \"You don't have permission to view this page.\",\n        )}\n      />\n    );\n  }\n\n  return <>{children}</>;\n};\n"],"mappings":";;;;;;;AA+BA,IAAa,KAA6C,EACxD,eACA,cAAW,IACX,kBACI;CACJ,IAAI,IACF,MACE,IAAY,IACZ,IAAc,IACd,IAAkB;AAEtB,KAAI;EACF,IAAM,IAAc,GAAgB;AAKpC,EAJA,IAAgB,EAAY,eAG5B,IAAY,EAAY,WACxB,IACE,EAAY,aAAa,aAAa,MACnC,MAAU,EAAM,iBAAiB,UAAU,EAAM,UAAU,QAC7D,IAAI;SACD;AAIN,EAFA,IAAgB,MAChB,IAAY,IACZ,IAAc;;AAGhB,KAAI;AAEF,MADa,GAAS,CACC;SACjB;AACN,MAAkB;;CAQpB,IAAM,IAJJ,OAAO,SAAW,QACjB,OAAO,SAAS,aAAa,eAC5B,OAAO,SAAS,SAAS,SAAS,uBAAuB,KAEZ,GAC3C,EAAE,SAAM,GAAS,EACjB,KAAM,GAAa,MAA6B;EACpD,IAAM,IAAQ,EAAE,EAAI;AACpB,SAAO,MAAU,IAAM,IAAW;;AAgDpC,QA7CI,IAEA,kBAAC,OAAD;EAAK,WAAU;YACb,kBAAC,GAAD,EAAoB,CAAA;EAChB,CAAA,GAON,IAEE,MAAkB,QAAQ,CAAC,KAAmB,CAAC,IAE/C,kBAAC,GAAD;EACE,OAAO,EAAG,0BAA0B,gBAAgB;EACpD,aAAa,EACX,8BACA,+CACD;EACD,CAAA,GAGC,kBAAA,GAAA,EAAG,aAAY,CAAA,GAItB,KACA,KACA,CAAC,EAAc,EAAW,IAC1B,CAAC,KACD,CAAC,IAGC,kBAAC,GAAD;EACE,OAAO,EAAG,0BAA0B,gBAAgB;EACpD,aAAa,EACX,8BACA,+CACD;EACD,CAAA,GAIC,kBAAA,GAAA,EAAG,aAAY,CAAA"}

package/dist/devportal/hooks/usePackageUpload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"usePackageUpload.d.ts","sourceRoot":"","sources":["../../../src/devportal/hooks/usePackageUpload.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AA2JD,wBAAgB,gBAAgB,CAC9B,oBAAoB,EAAE,MAAM,GAAG,SAAS,EACxC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,iBAAiB,EAAE,CAAC,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,SAAS,EAC7D,UAAU,SAAwB;eAnKvB,OAAO;cACR,MAAM;WACT,MAAM,GAAG,IAAI;mBA0KL,IAAI,KAAG,OAAO,CAAC,mBAAmB,CAAC;EAoDnD"}
+{"version":3,"file":"usePackageUpload.d.ts","sourceRoot":"","sources":["../../../src/devportal/hooks/usePackageUpload.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AA6JD,wBAAgB,gBAAgB,CAC9B,oBAAoB,EAAE,MAAM,GAAG,SAAS,EACxC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,iBAAiB,EAAE,CAAC,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,SAAS,EAC7D,UAAU,SAAwB;eArKvB,OAAO;cACR,MAAM;WACT,MAAM,GAAG,IAAI;mBA4KL,IAAI,KAAG,OAAO,CAAC,mBAAmB,CAAC;EAoDnD"}

package/dist/devportal/hooks/usePackageUpload.js.map

@@ -1 +1 @@
-{"version":3,"file":"usePackageUpload.js","names":[],"sources":["../../../src/devportal/hooks/usePackageUpload.ts"],"sourcesContent":["/**\n * usePackageUpload — uploads a zip package to wspace-files-svc and returns a\n * stable downloadUrl to store as ApplicationVersion.packageUrl.\n *\n * Flow (mirrors uploadBlobToFiles in @burdenoff/fe-libs/storage):\n *   1. ensureFolderByPath(\"/DevPortal/Packages\") → folderId\n *   2. initiateUpload → { sessionId, presignedUrl }\n *   3. PUT blob to presignedUrl (progress tracked via XHR)\n *   4. completeUpload → { file.downloadUrl }\n *\n * Uses raw fetch for GraphQL mutations so we can target the workspace gateway\n * without a second ApolloProvider.\n */\nimport { useCallback, useState } from \"react\";\n\nexport interface PackageUploadResult {\n  fileId: string;\n  downloadUrl: string;\n}\n\nexport interface PackageUploadState {\n  uploading: boolean;\n  progress: number;\n  error: string | null;\n}\n\ntype GqlFetcher = (\n  query: string,\n  variables: Record<string, unknown>,\n) => Promise<Record<string, unknown>>;\n\nfunction makeFetcher(\n  workspacesGatewayUrl: string,\n  authToken: string | undefined,\n  workspaceId: string | undefined,\n  workspaceToken: string | undefined,\n): GqlFetcher {\n  return async (query, variables) => {\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/json\",\n    };\n    if (authToken) headers[\"Authorization\"] = `Bearer ${authToken}`;\n    if (workspaceToken)\n      headers[\"X-Workspace-Authorization\"] = `Bearer ${workspaceToken}`;\n    if (workspaceId) headers[\"x-workspace-id\"] = workspaceId;\n\n    const endpoint = workspacesGatewayUrl.endsWith(\"/graphql\")\n      ? workspacesGatewayUrl\n      : `${workspacesGatewayUrl}/workspaces/graphql`;\n\n    const res = await fetch(endpoint, {\n      method: \"POST\",\n      headers,\n      credentials: \"include\",\n      body: JSON.stringify({ query, variables }),\n    });\n    if (!res.ok) {\n      throw new Error(\n        `GraphQL request failed: ${res.status} ${res.statusText}`,\n      );\n    }\n    const json = (await res.json()) as {\n      data?: Record<string, unknown>;\n      errors?: Array<{ message: string }>;\n    };\n    if (json.errors?.length) {\n      throw new Error(json.errors.map((e) => e.message).join(\"; \"));\n    }\n    return json.data ?? {};\n  };\n}\n\nasync function ensureFolder(gql: GqlFetcher, path: string): Promise<string> {\n  const data = await gql(\n    `mutation DevPortal_EnsureFolder($path: String!) {\n       ensureFolderByPath(path: $path) { id }\n     }`,\n    { path },\n  );\n  const id = (data.ensureFolderByPath as { id?: string } | undefined)?.id;\n  if (!id) throw new Error(\"ensureFolderByPath returned no id\");\n  return id;\n}\n\nasync function initiateUpload(\n  gql: GqlFetcher,\n  file: File,\n  folderId: string,\n): Promise<{ sessionId: string; uploadUrl: string }> {\n  const ext = file.name.includes(\".\")\n    ? file.name.substring(file.name.lastIndexOf(\".\") + 1)\n    : \"zip\";\n  const data = await gql(\n    `mutation DevPortal_InitiateUpload($input: InitiateUploadInput!) {\n       initiateUpload(input: $input) {\n         uploadUrl\n         session { id }\n       }\n     }`,\n    {\n      input: {\n        fileName: file.name,\n        fileSize: String(file.size),\n        mimeType: file.type || \"application/zip\",\n        extension: ext,\n        folderId,\n        visibility: \"PUBLIC\",\n      },\n    },\n  );\n  const result = data.initiateUpload as\n    { uploadUrl?: string; session?: { id?: string } } | undefined;\n  const sessionId = result?.session?.id;\n  const uploadUrl = result?.uploadUrl;\n  if (!sessionId || !uploadUrl) {\n    throw new Error(\"initiateUpload did not return sessionId or uploadUrl\");\n  }\n  return { sessionId, uploadUrl };\n}\n\nasync function putToPresignedUrl(\n  file: File,\n  uploadUrl: string,\n  onProgress: (pct: number) => void,\n): Promise<void> {\n  await new Promise<void>((resolve, reject) => {\n    const xhr = new XMLHttpRequest();\n    xhr.upload.addEventListener(\"progress\", (evt) => {\n      if (evt.lengthComputable) {\n        onProgress(10 + Math.round((evt.loaded / evt.total) * 80));\n      }\n    });\n    xhr.addEventListener(\"load\", () => {\n      if (xhr.status >= 200 && xhr.status < 300) {\n        resolve();\n      } else {\n        reject(new Error(`S3 PUT failed: ${xhr.status}`));\n      }\n    });\n    xhr.addEventListener(\"error\", () =>\n      reject(new Error(\"S3 PUT network error\")),\n    );\n    xhr.addEventListener(\"abort\", () => reject(new Error(\"S3 PUT aborted\")));\n    xhr.open(\"PUT\", uploadUrl);\n    xhr.setRequestHeader(\"Content-Type\", file.type || \"application/zip\");\n    xhr.send(file);\n  });\n}\n\nasync function completeUpload(\n  gql: GqlFetcher,\n  sessionId: string,\n  folderId: string,\n  fileSize: number,\n): Promise<PackageUploadResult> {\n  const data = await gql(\n    `mutation DevPortal_CompleteUpload($input: CompleteUploadInput!) {\n       completeUpload(input: $input) {\n         file { id downloadUrl }\n       }\n     }`,\n    {\n      input: {\n        sessionId,\n        folderId,\n        fileSize: String(fileSize),\n      },\n    },\n  );\n  const file = (\n    data.completeUpload as\n      { file?: { id?: string; downloadUrl?: string } } | undefined\n  )?.file;\n  if (!file?.id || !file.downloadUrl) {\n    throw new Error(\"completeUpload did not return file id or downloadUrl\");\n  }\n  return { fileId: file.id, downloadUrl: file.downloadUrl };\n}\n\nexport function usePackageUpload(\n  workspacesGatewayUrl: string | undefined,\n  authToken: string | undefined,\n  workspaceId: string | undefined,\n  getWorkspaceToken: (() => Promise<string | null>) | undefined,\n  folderPath = \"/DevPortal/Packages\",\n) {\n  const [state, setState] = useState<PackageUploadState>({\n    uploading: false,\n    progress: 0,\n    error: null,\n  });\n\n  const upload = useCallback(\n    async (file: File): Promise<PackageUploadResult> => {\n      if (!workspacesGatewayUrl) {\n        throw new Error(\n          \"workspacesGatewayUrl is not configured. Pass it as a prop to DevportalRoot.\",\n        );\n      }\n\n      const freshToken = getWorkspaceToken\n        ? await getWorkspaceToken()\n        : undefined;\n      const gql = makeFetcher(\n        workspacesGatewayUrl,\n        authToken,\n        workspaceId,\n        freshToken ?? undefined,\n      );\n\n      setState({ uploading: true, progress: 0, error: null });\n      try {\n        const folderId = await ensureFolder(gql, folderPath);\n        setState((s) => ({ ...s, progress: 5 }));\n\n        const { sessionId, uploadUrl } = await initiateUpload(\n          gql,\n          file,\n          folderId,\n        );\n        setState((s) => ({ ...s, progress: 10 }));\n\n        await putToPresignedUrl(file, uploadUrl, (pct) =>\n          setState((s) => ({ ...s, progress: pct })),\n        );\n        setState((s) => ({ ...s, progress: 90 }));\n\n        const result = await completeUpload(\n          gql,\n          sessionId,\n          folderId,\n          file.size,\n        );\n        setState({ uploading: false, progress: 100, error: null });\n        return result;\n      } catch (err) {\n        const message = err instanceof Error ? err.message : \"Upload failed\";\n        setState({ uploading: false, progress: 0, error: message });\n        throw err;\n      }\n    },\n    [workspacesGatewayUrl, authToken, workspaceId, getWorkspaceToken],\n  );\n\n  return { upload, ...state };\n}\n"],"mappings":";;AA+BA,SAAS,EACP,GACA,GACA,GACA,GACY;AACZ,QAAO,OAAO,GAAO,MAAc;EACjC,IAAM,IAAkC,EACtC,gBAAgB,oBACjB;AAID,EAHI,MAAW,EAAQ,gBAAmB,UAAU,MAChD,MACF,EAAQ,+BAA+B,UAAU,MAC/C,MAAa,EAAQ,oBAAoB;EAE7C,IAAM,IAAW,EAAqB,SAAS,WAAW,GACtD,IACA,GAAG,EAAqB,sBAEtB,IAAM,MAAM,MAAM,GAAU;GAChC,QAAQ;GACR;GACA,aAAa;GACb,MAAM,KAAK,UAAU;IAAE;IAAO;IAAW,CAAC;GAC3C,CAAC;AACF,MAAI,CAAC,EAAI,GACP,OAAU,MACR,2BAA2B,EAAI,OAAO,GAAG,EAAI,aAC9C;EAEH,IAAM,IAAQ,MAAM,EAAI,MAAM;AAI9B,MAAI,EAAK,QAAQ,OACf,OAAU,MAAM,EAAK,OAAO,KAAK,MAAM,EAAE,QAAQ,CAAC,KAAK,KAAK,CAAC;AAE/D,SAAO,EAAK,QAAQ,EAAE;;;AAI1B,eAAe,EAAa,GAAiB,GAA+B;CAO1E,IAAM,KANO,MAAM,EACjB,4GAGA,EAAE,SAAM,CACT,EACgB,oBAAoD;AACrE,KAAI,CAAC,EAAI,OAAU,MAAM,oCAAoC;AAC7D,QAAO;;AAGT,eAAe,EACb,GACA,GACA,GACmD;CACnD,IAAM,IAAM,EAAK,KAAK,SAAS,IAAI,GAC/B,EAAK,KAAK,UAAU,EAAK,KAAK,YAAY,IAAI,GAAG,EAAE,GACnD,OAmBE,KAlBO,MAAM,EACjB,4KAMA,EACE,OAAO;EACL,UAAU,EAAK;EACf,UAAU,OAAO,EAAK,KAAK;EAC3B,UAAU,EAAK,QAAQ;EACvB,WAAW;EACX;EACA,YAAY;EACb,EACF,CACF,EACmB,gBAEd,IAAY,GAAQ,SAAS,IAC7B,IAAY,GAAQ;AAC1B,KAAI,CAAC,KAAa,CAAC,EACjB,OAAU,MAAM,uDAAuD;AAEzE,QAAO;EAAE;EAAW;EAAW;;AAGjC,eAAe,EACb,GACA,GACA,GACe;AACf,OAAM,IAAI,SAAe,GAAS,MAAW;EAC3C,IAAM,IAAM,IAAI,gBAAgB;AAmBhC,EAlBA,EAAI,OAAO,iBAAiB,aAAa,MAAQ;AAC/C,GAAI,EAAI,oBACN,EAAW,KAAK,KAAK,MAAO,EAAI,SAAS,EAAI,QAAS,GAAG,CAAC;IAE5D,EACF,EAAI,iBAAiB,cAAc;AACjC,GAAI,EAAI,UAAU,OAAO,EAAI,SAAS,MACpC,GAAS,GAET,EAAO,gBAAI,MAAM,kBAAkB,EAAI,SAAS,CAAC;IAEnD,EACF,EAAI,iBAAiB,eACnB,EAAO,gBAAI,MAAM,uBAAuB,CAAC,CAC1C,EACD,EAAI,iBAAiB,eAAe,EAAO,gBAAI,MAAM,iBAAiB,CAAC,CAAC,EACxE,EAAI,KAAK,OAAO,EAAU,EAC1B,EAAI,iBAAiB,gBAAgB,EAAK,QAAQ,kBAAkB,EACpE,EAAI,KAAK,EAAK;GACd;;AAGJ,eAAe,EACb,GACA,GACA,GACA,GAC8B;CAe9B,IAAM,KAdO,MAAM,EACjB,iKAKA,EACE,OAAO;EACL;EACA;EACA,UAAU,OAAO,EAAS;EAC3B,EACF,CACF,EAEM,gBAEJ;AACH,KAAI,CAAC,GAAM,MAAM,CAAC,EAAK,YACrB,OAAU,MAAM,uDAAuD;AAEzE,QAAO;EAAE,QAAQ,EAAK;EAAI,aAAa,EAAK;EAAa;;AAG3D,SAAgB,EACd,GACA,GACA,GACA,GACA,IAAa,uBACb;CACA,IAAM,CAAC,GAAO,KAAY,EAA6B;EACrD,WAAW;EACX,UAAU;EACV,OAAO;EACR,CAAC;AAsDF,QAAO;EAAE,QApDM,EACb,OAAO,MAA6C;AAClD,OAAI,CAAC,EACH,OAAU,MACR,8EACD;GAMH,IAAM,IAAM,EACV,GACA,GACA,IANiB,IACf,MAAM,GAAmB,GACzB,KAAA,MAKY,KAAA,EACf;AAED,KAAS;IAAE,WAAW;IAAM,UAAU;IAAG,OAAO;IAAM,CAAC;AACvD,OAAI;IACF,IAAM,IAAW,MAAM,EAAa,GAAK,EAAW;AACpD,OAAU,OAAO;KAAE,GAAG;KAAG,UAAU;KAAG,EAAE;IAExC,IAAM,EAAE,cAAW,iBAAc,MAAM,EACrC,GACA,GACA,EACD;AAMD,IALA,GAAU,OAAO;KAAE,GAAG;KAAG,UAAU;KAAI,EAAE,EAEzC,MAAM,EAAkB,GAAM,IAAY,MACxC,GAAU,OAAO;KAAE,GAAG;KAAG,UAAU;KAAK,EAAE,CAC3C,EACD,GAAU,OAAO;KAAE,GAAG;KAAG,UAAU;KAAI,EAAE;IAEzC,IAAM,IAAS,MAAM,EACnB,GACA,GACA,GACA,EAAK,KACN;AAED,WADA,EAAS;KAAE,WAAW;KAAO,UAAU;KAAK,OAAO;KAAM,CAAC,EACnD;YACA,GAAK;AAGZ,UADA,EAAS;KAAE,WAAW;KAAO,UAAU;KAAG,OAD1B,aAAe,QAAQ,EAAI,UAAU;KACK,CAAC,EACrD;;KAGV;GAAC;GAAsB;GAAW;GAAa;GAAkB,CAClE;EAEgB,GAAG;EAAO"}
+{"version":3,"file":"usePackageUpload.js","names":[],"sources":["../../../src/devportal/hooks/usePackageUpload.ts"],"sourcesContent":["/**\n * usePackageUpload — uploads a zip package to wspace-files-svc and returns a\n * stable downloadUrl to store as ApplicationVersion.packageUrl.\n *\n * Flow (mirrors uploadBlobToFiles in @burdenoff/fe-libs/storage):\n *   1. ensureFolderByPath(\"/DevPortal/Packages\") → folderId\n *   2. initiateUpload → { sessionId, presignedUrl }\n *   3. PUT blob to presignedUrl (progress tracked via XHR)\n *   4. completeUpload → { file.downloadUrl }\n *\n * Uses raw fetch for GraphQL mutations so we can target the workspace gateway\n * without a second ApolloProvider.\n */\nimport { useCallback, useState } from \"react\";\n\nexport interface PackageUploadResult {\n  fileId: string;\n  downloadUrl: string;\n}\n\nexport interface PackageUploadState {\n  uploading: boolean;\n  progress: number;\n  error: string | null;\n}\n\ntype GqlFetcher = (\n  query: string,\n  variables: Record<string, unknown>,\n) => Promise<Record<string, unknown>>;\n\nfunction makeFetcher(\n  workspacesGatewayUrl: string,\n  authToken: string | undefined,\n  workspaceId: string | undefined,\n  workspaceToken: string | undefined,\n): GqlFetcher {\n  return async (query, variables) => {\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/json\",\n    };\n    if (authToken) headers[\"Authorization\"] = `Bearer ${authToken}`;\n    if (workspaceToken)\n      headers[\"X-Workspace-Authorization\"] = `Bearer ${workspaceToken}`;\n    if (workspaceId) headers[\"x-workspace-id\"] = workspaceId;\n\n    const endpoint = workspacesGatewayUrl.endsWith(\"/graphql\")\n      ? workspacesGatewayUrl\n      : `${workspacesGatewayUrl}/workspaces/graphql`;\n\n    const res = await fetch(endpoint, {\n      method: \"POST\",\n      headers,\n      credentials: \"include\",\n      body: JSON.stringify({ query, variables }),\n    });\n    if (!res.ok) {\n      throw new Error(\n        `GraphQL request failed: ${res.status} ${res.statusText}`,\n      );\n    }\n    const json = (await res.json()) as {\n      data?: Record<string, unknown>;\n      errors?: Array<{ message: string }>;\n    };\n    if (json.errors?.length) {\n      throw new Error(json.errors.map((e) => e.message).join(\"; \"));\n    }\n    return json.data ?? {};\n  };\n}\n\nasync function ensureFolder(gql: GqlFetcher, path: string): Promise<string> {\n  const data = await gql(\n    `mutation DevPortal_EnsureFolder($path: String!) {\n       ensureFolderByPath(path: $path) { id }\n     }`,\n    { path },\n  );\n  const id = (data.ensureFolderByPath as { id?: string } | undefined)?.id;\n  if (!id) throw new Error(\"ensureFolderByPath returned no id\");\n  return id;\n}\n\nasync function initiateUpload(\n  gql: GqlFetcher,\n  file: File,\n  folderId: string,\n): Promise<{ sessionId: string; uploadUrl: string }> {\n  const ext = file.name.includes(\".\")\n    ? file.name.substring(file.name.lastIndexOf(\".\") + 1)\n    : \"zip\";\n  const data = await gql(\n    `mutation DevPortal_InitiateUpload($input: InitiateUploadInput!) {\n       initiateUpload(input: $input) {\n         uploadUrl\n         session { id }\n       }\n     }`,\n    {\n      input: {\n        fileName: file.name,\n        fileSize: String(file.size),\n        mimeType: file.type || \"application/zip\",\n        extension: ext,\n        folderId,\n        visibility: \"PUBLIC\",\n      },\n    },\n  );\n  const result = data.initiateUpload as\n    | { uploadUrl?: string; session?: { id?: string } }\n    | undefined;\n  const sessionId = result?.session?.id;\n  const uploadUrl = result?.uploadUrl;\n  if (!sessionId || !uploadUrl) {\n    throw new Error(\"initiateUpload did not return sessionId or uploadUrl\");\n  }\n  return { sessionId, uploadUrl };\n}\n\nasync function putToPresignedUrl(\n  file: File,\n  uploadUrl: string,\n  onProgress: (pct: number) => void,\n): Promise<void> {\n  await new Promise<void>((resolve, reject) => {\n    const xhr = new XMLHttpRequest();\n    xhr.upload.addEventListener(\"progress\", (evt) => {\n      if (evt.lengthComputable) {\n        onProgress(10 + Math.round((evt.loaded / evt.total) * 80));\n      }\n    });\n    xhr.addEventListener(\"load\", () => {\n      if (xhr.status >= 200 && xhr.status < 300) {\n        resolve();\n      } else {\n        reject(new Error(`S3 PUT failed: ${xhr.status}`));\n      }\n    });\n    xhr.addEventListener(\"error\", () =>\n      reject(new Error(\"S3 PUT network error\")),\n    );\n    xhr.addEventListener(\"abort\", () => reject(new Error(\"S3 PUT aborted\")));\n    xhr.open(\"PUT\", uploadUrl);\n    xhr.setRequestHeader(\"Content-Type\", file.type || \"application/zip\");\n    xhr.send(file);\n  });\n}\n\nasync function completeUpload(\n  gql: GqlFetcher,\n  sessionId: string,\n  folderId: string,\n  fileSize: number,\n): Promise<PackageUploadResult> {\n  const data = await gql(\n    `mutation DevPortal_CompleteUpload($input: CompleteUploadInput!) {\n       completeUpload(input: $input) {\n         file { id downloadUrl }\n       }\n     }`,\n    {\n      input: {\n        sessionId,\n        folderId,\n        fileSize: String(fileSize),\n      },\n    },\n  );\n  const file = (\n    data.completeUpload as\n      | { file?: { id?: string; downloadUrl?: string } }\n      | undefined\n  )?.file;\n  if (!file?.id || !file.downloadUrl) {\n    throw new Error(\"completeUpload did not return file id or downloadUrl\");\n  }\n  return { fileId: file.id, downloadUrl: file.downloadUrl };\n}\n\nexport function usePackageUpload(\n  workspacesGatewayUrl: string | undefined,\n  authToken: string | undefined,\n  workspaceId: string | undefined,\n  getWorkspaceToken: (() => Promise<string | null>) | undefined,\n  folderPath = \"/DevPortal/Packages\",\n) {\n  const [state, setState] = useState<PackageUploadState>({\n    uploading: false,\n    progress: 0,\n    error: null,\n  });\n\n  const upload = useCallback(\n    async (file: File): Promise<PackageUploadResult> => {\n      if (!workspacesGatewayUrl) {\n        throw new Error(\n          \"workspacesGatewayUrl is not configured. Pass it as a prop to DevportalRoot.\",\n        );\n      }\n\n      const freshToken = getWorkspaceToken\n        ? await getWorkspaceToken()\n        : undefined;\n      const gql = makeFetcher(\n        workspacesGatewayUrl,\n        authToken,\n        workspaceId,\n        freshToken ?? undefined,\n      );\n\n      setState({ uploading: true, progress: 0, error: null });\n      try {\n        const folderId = await ensureFolder(gql, folderPath);\n        setState((s) => ({ ...s, progress: 5 }));\n\n        const { sessionId, uploadUrl } = await initiateUpload(\n          gql,\n          file,\n          folderId,\n        );\n        setState((s) => ({ ...s, progress: 10 }));\n\n        await putToPresignedUrl(file, uploadUrl, (pct) =>\n          setState((s) => ({ ...s, progress: pct })),\n        );\n        setState((s) => ({ ...s, progress: 90 }));\n\n        const result = await completeUpload(\n          gql,\n          sessionId,\n          folderId,\n          file.size,\n        );\n        setState({ uploading: false, progress: 100, error: null });\n        return result;\n      } catch (err) {\n        const message = err instanceof Error ? err.message : \"Upload failed\";\n        setState({ uploading: false, progress: 0, error: message });\n        throw err;\n      }\n    },\n    [workspacesGatewayUrl, authToken, workspaceId, getWorkspaceToken],\n  );\n\n  return { upload, ...state };\n}\n"],"mappings":";;AA+BA,SAAS,EACP,GACA,GACA,GACA,GACY;AACZ,QAAO,OAAO,GAAO,MAAc;EACjC,IAAM,IAAkC,EACtC,gBAAgB,oBACjB;AAID,EAHI,MAAW,EAAQ,gBAAmB,UAAU,MAChD,MACF,EAAQ,+BAA+B,UAAU,MAC/C,MAAa,EAAQ,oBAAoB;EAE7C,IAAM,IAAW,EAAqB,SAAS,WAAW,GACtD,IACA,GAAG,EAAqB,sBAEtB,IAAM,MAAM,MAAM,GAAU;GAChC,QAAQ;GACR;GACA,aAAa;GACb,MAAM,KAAK,UAAU;IAAE;IAAO;IAAW,CAAC;GAC3C,CAAC;AACF,MAAI,CAAC,EAAI,GACP,OAAU,MACR,2BAA2B,EAAI,OAAO,GAAG,EAAI,aAC9C;EAEH,IAAM,IAAQ,MAAM,EAAI,MAAM;AAI9B,MAAI,EAAK,QAAQ,OACf,OAAU,MAAM,EAAK,OAAO,KAAK,MAAM,EAAE,QAAQ,CAAC,KAAK,KAAK,CAAC;AAE/D,SAAO,EAAK,QAAQ,EAAE;;;AAI1B,eAAe,EAAa,GAAiB,GAA+B;CAO1E,IAAM,KANO,MAAM,EACjB,4GAGA,EAAE,SAAM,CACT,EACgB,oBAAoD;AACrE,KAAI,CAAC,EAAI,OAAU,MAAM,oCAAoC;AAC7D,QAAO;;AAGT,eAAe,EACb,GACA,GACA,GACmD;CACnD,IAAM,IAAM,EAAK,KAAK,SAAS,IAAI,GAC/B,EAAK,KAAK,UAAU,EAAK,KAAK,YAAY,IAAI,GAAG,EAAE,GACnD,OAmBE,KAlBO,MAAM,EACjB,4KAMA,EACE,OAAO;EACL,UAAU,EAAK;EACf,UAAU,OAAO,EAAK,KAAK;EAC3B,UAAU,EAAK,QAAQ;EACvB,WAAW;EACX;EACA,YAAY;EACb,EACF,CACF,EACmB,gBAGd,IAAY,GAAQ,SAAS,IAC7B,IAAY,GAAQ;AAC1B,KAAI,CAAC,KAAa,CAAC,EACjB,OAAU,MAAM,uDAAuD;AAEzE,QAAO;EAAE;EAAW;EAAW;;AAGjC,eAAe,EACb,GACA,GACA,GACe;AACf,OAAM,IAAI,SAAe,GAAS,MAAW;EAC3C,IAAM,IAAM,IAAI,gBAAgB;AAmBhC,EAlBA,EAAI,OAAO,iBAAiB,aAAa,MAAQ;AAC/C,GAAI,EAAI,oBACN,EAAW,KAAK,KAAK,MAAO,EAAI,SAAS,EAAI,QAAS,GAAG,CAAC;IAE5D,EACF,EAAI,iBAAiB,cAAc;AACjC,GAAI,EAAI,UAAU,OAAO,EAAI,SAAS,MACpC,GAAS,GAET,EAAO,gBAAI,MAAM,kBAAkB,EAAI,SAAS,CAAC;IAEnD,EACF,EAAI,iBAAiB,eACnB,EAAO,gBAAI,MAAM,uBAAuB,CAAC,CAC1C,EACD,EAAI,iBAAiB,eAAe,EAAO,gBAAI,MAAM,iBAAiB,CAAC,CAAC,EACxE,EAAI,KAAK,OAAO,EAAU,EAC1B,EAAI,iBAAiB,gBAAgB,EAAK,QAAQ,kBAAkB,EACpE,EAAI,KAAK,EAAK;GACd;;AAGJ,eAAe,EACb,GACA,GACA,GACA,GAC8B;CAe9B,IAAM,KAdO,MAAM,EACjB,iKAKA,EACE,OAAO;EACL;EACA;EACA,UAAU,OAAO,EAAS;EAC3B,EACF,CACF,EAEM,gBAGJ;AACH,KAAI,CAAC,GAAM,MAAM,CAAC,EAAK,YACrB,OAAU,MAAM,uDAAuD;AAEzE,QAAO;EAAE,QAAQ,EAAK;EAAI,aAAa,EAAK;EAAa;;AAG3D,SAAgB,EACd,GACA,GACA,GACA,GACA,IAAa,uBACb;CACA,IAAM,CAAC,GAAO,KAAY,EAA6B;EACrD,WAAW;EACX,UAAU;EACV,OAAO;EACR,CAAC;AAsDF,QAAO;EAAE,QApDM,EACb,OAAO,MAA6C;AAClD,OAAI,CAAC,EACH,OAAU,MACR,8EACD;GAMH,IAAM,IAAM,EACV,GACA,GACA,IANiB,IACf,MAAM,GAAmB,GACzB,KAAA,MAKY,KAAA,EACf;AAED,KAAS;IAAE,WAAW;IAAM,UAAU;IAAG,OAAO;IAAM,CAAC;AACvD,OAAI;IACF,IAAM,IAAW,MAAM,EAAa,GAAK,EAAW;AACpD,OAAU,OAAO;KAAE,GAAG;KAAG,UAAU;KAAG,EAAE;IAExC,IAAM,EAAE,cAAW,iBAAc,MAAM,EACrC,GACA,GACA,EACD;AAMD,IALA,GAAU,OAAO;KAAE,GAAG;KAAG,UAAU;KAAI,EAAE,EAEzC,MAAM,EAAkB,GAAM,IAAY,MACxC,GAAU,OAAO;KAAE,GAAG;KAAG,UAAU;KAAK,EAAE,CAC3C,EACD,GAAU,OAAO;KAAE,GAAG;KAAG,UAAU;KAAI,EAAE;IAEzC,IAAM,IAAS,MAAM,EACnB,GACA,GACA,GACA,EAAK,KACN;AAED,WADA,EAAS;KAAE,WAAW;KAAO,UAAU;KAAK,OAAO;KAAM,CAAC,EACnD;YACA,GAAK;AAGZ,UADA,EAAS;KAAE,WAAW;KAAO,UAAU;KAAG,OAD1B,aAAe,QAAQ,EAAI,UAAU;KACK,CAAC,EACrD;;KAGV;GAAC;GAAsB;GAAW;GAAa;GAAkB,CAClE;EAEgB,GAAG;EAAO"}

package/dist/devportal/pages/AdminReviewPage.js

@@ -5,9 +5,9 @@ import { getErrorMessage as l } from "../hooks/useGraphQL.js";
 import { PageLayout as u, PageSection as d } from "../components/PageLayout.js";
 import { PermissionGuard as f } from "../components/PermissionGuard.js";
 import "../components/index.js";
-import { DEVPORTAL_PERMISSIONS as p } from "../constants/permissions.js";
-import { useDevportalPermission as m } from "../hooks/usePermission.js";
+import { useDevportalPermission as p } from "../hooks/usePermission.js";
 import "../hooks/index.js";
+import { DEVPORTAL_PERMISSIONS as m } from "../constants/permissions.js";
 import { useState as h } from "react";
 import { useI18n as g } from "@burdenoff/fe-libs/shared/providers/shell/I18nProvider";
 import { AlertCircle as _, CheckCircle as v, ChevronDown as y, ChevronUp as b, Clock as x, Download as S, Eye as C, FileJson as w, GitBranch as T, Loader2 as E, Package as D, Search as O, XCircle as k } from "lucide-react";
@@ -66,7 +66,7 @@ var M = ({ manifest: e, tr: t }) => {
 	let { navigate: s, basePath: c } = e(), { t: l } = g(), u = (e, t) => {
 		let n = l(e);
 		return n === e ? t : n;
-	}, [d, f] = h(!1), [_, x] = h(""), w = m(p.APP_APPROVE), D = m(p.APP_REJECT), { data: O } = i({
+	}, [d, f] = h(!1), [_, x] = h(""), w = p(m.APP_APPROVE), D = p(m.APP_REJECT), { data: O } = i({
 		variables: { id: t.id },
 		skip: !d,
 		fetchPolicy: "cache-first"
@@ -380,7 +380,7 @@ var M = ({ manifest: e, tr: t }) => {
 		})]
 	});
 }, L = ({ version: e, appId: t, appType: n, onApprove: r, onReject: i, processing: a, tr: o }) => {
-	let [s, c] = h(""), l = m(p.APP_APPROVE), u = m(p.APP_REJECT);
+	let [s, c] = h(""), l = p(m.APP_APPROVE), u = p(m.APP_REJECT);
 	return /* @__PURE__ */ j("div", {
 		className: "rounded-md border bg-bg-surface p-4 space-y-3",
 		children: [
@@ -487,7 +487,7 @@ var M = ({ manifest: e, tr: t }) => {
 	let { t: e } = g(), i = (t, n) => {
 		let r = e(t);
 		return r === t ? n : r;
-	}, [m, y] = h(""), [b, S] = h(/* @__PURE__ */ new Set()), [C, w] = h(/* @__PURE__ */ new Set()), [D, k] = h(null), [M, N] = h(null), P = (e) => S((t) => new Set(t).add(e)), L = (e) => S((t) => {
+	}, [p, y] = h(""), [b, S] = h(/* @__PURE__ */ new Set()), [C, w] = h(/* @__PURE__ */ new Set()), [D, k] = h(null), [M, N] = h(null), P = (e) => S((t) => new Set(t).add(e)), L = (e) => S((t) => {
 		let n = new Set(t);
 		return n.delete(e), n;
 	}), R = (e) => w((t) => new Set(t).add(e)), z = (e) => w((t) => {
@@ -502,7 +502,7 @@ var M = ({ manifest: e, tr: t }) => {
 	}), { data: W, refetch: G } = o({
 		variables: { limit: 100 },
 		fetchPolicy: "cache-and-network"
-	}), [K] = n(), [q] = s(), [J] = r(), [Y] = c(), X = B?.applications?.edges?.map((e) => e.node) ?? [], Z = W?.applicationsWithPendingVersions?.edges?.map((e) => e.node) ?? [], Q = new Set(Z.map((e) => e.id)), $ = m ? X.filter((e) => e.name.toLowerCase().includes(m.toLowerCase()) || (e.shortDescription ?? "").toLowerCase().includes(m.toLowerCase())) : X, ee = async (e, t) => {
+	}), [K] = n(), [q] = s(), [J] = r(), [Y] = c(), X = B?.applications?.edges?.map((e) => e.node) ?? [], Z = W?.applicationsWithPendingVersions?.edges?.map((e) => e.node) ?? [], Q = new Set(Z.map((e) => e.id)), $ = p ? X.filter((e) => e.name.toLowerCase().includes(p.toLowerCase()) || (e.shortDescription ?? "").toLowerCase().includes(p.toLowerCase())) : X, ee = async (e, t) => {
 		P(e), k(null), N(null);
 		try {
 			let n = await K({ variables: {
@@ -589,7 +589,7 @@ var M = ({ manifest: e, tr: t }) => {
 			]
 		})
 	}) : /* @__PURE__ */ A(f, {
-		permission: p.REVIEW_MANAGE,
+		permission: m.REVIEW_MANAGE,
 		children: /* @__PURE__ */ j(u, {
 			title: i("devportal.appReviewQueue", "App Review Queue"),
 			description: i("devportal.appReviewQueueFullDescription", "Review submitted applications for approval or rejection"),
@@ -658,7 +658,7 @@ var M = ({ manifest: e, tr: t }) => {
 					}), /* @__PURE__ */ A("input", {
 						type: "text",
 						placeholder: i("devportal.searchSubmittedApps", "Search submitted apps..."),
-						value: m,
+						value: p,
 						onChange: (e) => y(e.target.value),
 						className: "w-full rounded-md border bg-bg-surface pl-9 pr-4 py-2 text-sm focus:outline-none focus:ring-2 focus:ring-primary"
 					})]
@@ -669,7 +669,7 @@ var M = ({ manifest: e, tr: t }) => {
 						illustration: "empty-data",
 						icon: /* @__PURE__ */ A(v, { size: 32 }),
 						title: i("devportal.noAppsPendingReview", "No apps pending review"),
-						description: m ? i("devportal.noAppsMatchSearch", "No apps match your search") : i("devportal.allApplicationsReviewed", "All submitted applications have been reviewed")
+						description: p ? i("devportal.noAppsMatchSearch", "No apps match your search") : i("devportal.allApplicationsReviewed", "All submitted applications have been reviewed")
 					}) : /* @__PURE__ */ A("div", {
 						className: "space-y-3",
 						children: $.map((e) => /* @__PURE__ */ A(F, {