@crystaltech/hsms-shared-ui 0.7.26 → 0.7.28

package/dist/hooks/useNetworkStatus.d.ts

@@ -11,6 +11,19 @@
 export type NetworkStatus = "checking" | "online" | "offline" | "unreachable";
 /** How often the server is asked while the browser says it is online. */
 export declare const NETWORK_PROBE_INTERVAL_MS = 30000;
+/**
+ * What is asked: the API's public `/ping` when an API has been configured, else the site the app
+ * was served from. Any answer at all - an error page or a 401 included - means the server is
+ * there; only a failed request means it is not. `no-cors` keeps a cross-origin API from turning a
+ * reachable server into a CORS failure.
+ *
+ * It used to ask the API's bare root. That needs a session, so every open workstation logged a
+ * red `401 Unauthorized` every 30 seconds and the service logged "Unauthorized access: Not
+ * Authenticated" for each one (OPD on skh-proxmox, 2026-10-12). The services answer `/ping`
+ * without a session and without touching their database; one that has no `/ping` still answers
+ * something, which is all this asks.
+ */
+export declare const probeUrl: (now?: number) => string;
 export declare function probeServer(): Promise<boolean>;
 /**
  * The workstation's network status, kept current: the browser's online/offline events answer at

package/dist/index.es.js

@@ -29677,9 +29677,9 @@ const kQ = (e) => {
       )
     }
   );
-}, jQ = 3e4, VQ = 5e3, YQ = () => {
-  const e = rr() || window.location.origin, t = e.includes("?") ? "&" : "?";
-  return `${e}${t}_hsms_ping=${Date.now()}`;
+}, jQ = 3e4, VQ = 5e3, YQ = (e = Date.now()) => {
+  const t = rr(), n = t ? `${t.replace(/\/+$/, "")}/ping` : window.location.origin, r = n.includes("?") ? "&" : "?";
+  return `${n}${r}_hsms_ping=${e}`;
 };
 async function qQ() {
   const e = new AbortController(), t = window.setTimeout(() => e.abort(), VQ);