@datalayer/core 1.1.66 → 1.2.10

package/lib/models/contents/__fixtures__/v1-contracts.json

@@ -7,39 +7,165 @@
       "name": "User Folder",
       "principal_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ",
       "principal_kind": "user",
-      "configuration": {"kind": "files", "owning_user_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ", "storage_backend_id": "users", "quota_policy": "standard", "versioning_policy": "retained"},
+      "configuration": {
+        "kind": "files",
+        "owning_user_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ",
+        "storage_backend_id": "users",
+        "quota_policy": "standard",
+        "versioning_policy": "retained"
+      },
       "capabilities": ["browse", "transfer", "mount"],
       "status": "ready",
       "created_at": "2026-08-24T12:00:00Z",
       "updated_at": "2026-08-24T12:00:00Z"
     },
     {
-      "contract_version": "v1", "uid": "01ARZ3NDEKTSV4RRFFQ69G5FAV", "kind": "dataset", "name": "Dataset", "principal_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ", "principal_kind": "user",
-      "configuration": {"kind": "dataset", "tags": ["curated"], "publication_eligible": true}, "capabilities": ["browse", "materialize"], "status": "ready", "created_at": "2026-08-24T12:00:00Z", "updated_at": "2026-08-24T12:00:00Z"
+      "contract_version": "v1",
+      "uid": "01ARZ3NDEKTSV4RRFFQ69G5FAV",
+      "kind": "dataset",
+      "name": "Dataset",
+      "principal_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ",
+      "principal_kind": "user",
+      "configuration": {
+        "kind": "dataset",
+        "tags": ["curated"],
+        "publication_eligible": true
+      },
+      "capabilities": ["browse", "materialize"],
+      "status": "ready",
+      "created_at": "2026-08-24T12:00:00Z",
+      "updated_at": "2026-08-24T12:00:00Z"
     },
     {
-      "contract_version": "v1", "uid": "01ARZ3NDEKTSV4RRFFQ69G5FAV", "kind": "volume", "name": "Volume", "principal_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ", "principal_kind": "user",
-      "configuration": {"kind": "volume", "capacity_bytes": 1073741824, "scope": "user", "backing_resource_id": "pvc-1", "default_mount_path": "/home/jovyan/data", "access_modes": ["ro", "rw"], "concurrent_readers": true, "concurrent_writers": false}, "capabilities": ["browse", "mount"], "status": "ready", "created_at": "2026-08-24T12:00:00Z", "updated_at": "2026-08-24T12:00:00Z"
+      "contract_version": "v1",
+      "uid": "01ARZ3NDEKTSV4RRFFQ69G5FAV",
+      "kind": "volume",
+      "name": "Volume",
+      "principal_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ",
+      "principal_kind": "user",
+      "configuration": {
+        "kind": "volume",
+        "capacity_bytes": 1073741824,
+        "scope": "user",
+        "backing_resource_id": "pvc-1",
+        "default_mount_path": "/home/datalayer/data",
+        "access_modes": ["ro", "rw"],
+        "concurrent_readers": true,
+        "concurrent_writers": false
+      },
+      "capabilities": ["browse", "mount"],
+      "status": "ready",
+      "created_at": "2026-08-24T12:00:00Z",
+      "updated_at": "2026-08-24T12:00:00Z"
     },
     {
-      "contract_version": "v1", "uid": "01ARZ3NDEKTSV4RRFFQ69G5FAV", "kind": "cloud-storage", "name": "S3", "principal_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ", "principal_kind": "user",
-      "configuration": {"kind": "cloud-storage", "provider": "s3", "bucket_or_container": "research", "prefix": "inputs/", "region": "eu-west-1", "access_preference": "automatic"}, "capabilities": ["browse", "transfer"], "status": "ready", "created_at": "2026-08-24T12:00:00Z", "updated_at": "2026-08-24T12:00:00Z"
+      "contract_version": "v1",
+      "uid": "01ARZ3NDEKTSV4RRFFQ69G5FAV",
+      "kind": "cloud-storage",
+      "name": "S3",
+      "principal_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ",
+      "principal_kind": "user",
+      "configuration": {
+        "kind": "cloud-storage",
+        "provider": "s3",
+        "bucket_or_container": "research",
+        "prefix": "inputs/",
+        "region": "eu-west-1",
+        "access_preference": "automatic"
+      },
+      "capabilities": ["browse", "transfer"],
+      "status": "ready",
+      "created_at": "2026-08-24T12:00:00Z",
+      "updated_at": "2026-08-24T12:00:00Z"
     },
     {
-      "contract_version": "v1", "uid": "01ARZ3NDEKTSV4RRFFQ69G5FAV", "kind": "datasource", "name": "Warehouse", "principal_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ", "principal_kind": "user",
-      "configuration": {"kind": "datasource", "connector_type": "sql", "endpoint": "duckdb://", "credential_uid": "01HZY7WQ8XKJ4M2N5P6R7S8T9V", "database_or_project": "analytics", "allowed_operations": ["select"], "default_row_limit": 10000}, "capabilities": ["query"], "status": "ready", "created_at": "2026-08-24T12:00:00Z", "updated_at": "2026-08-24T12:00:00Z"
+      "contract_version": "v1",
+      "uid": "01ARZ3NDEKTSV4RRFFQ69G5FAV",
+      "kind": "datasource",
+      "name": "Warehouse",
+      "principal_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ",
+      "principal_kind": "user",
+      "configuration": {
+        "kind": "datasource",
+        "connector_type": "sql",
+        "endpoint": "duckdb://",
+        "credential_uid": "01HZY7WQ8XKJ4M2N5P6R7S8T9V",
+        "database_or_project": "analytics",
+        "allowed_operations": ["select"],
+        "default_row_limit": 10000
+      },
+      "capabilities": ["query"],
+      "status": "ready",
+      "created_at": "2026-08-24T12:00:00Z",
+      "updated_at": "2026-08-24T12:00:00Z"
     },
     {
-      "contract_version": "v1", "uid": "01ARZ3NDEKTSV4RRFFQ69G5FAV", "kind": "data-server", "name": "Private gateway", "principal_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ", "principal_kind": "organization",
-      "configuration": {"kind": "data-server", "registration_identity": "gateway-1", "mtls_issuer": "datalayer-contents-ca", "connectors": [{"connector_type": "sql", "operations": ["select"], "policy_version": "v1"}], "policy_version": "v1"}, "capabilities": ["query"], "status": "ready", "created_at": "2026-08-24T12:00:00Z", "updated_at": "2026-08-24T12:00:00Z"
+      "contract_version": "v1",
+      "uid": "01ARZ3NDEKTSV4RRFFQ69G5FAV",
+      "kind": "data-server",
+      "name": "Private gateway",
+      "principal_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ",
+      "principal_kind": "organization",
+      "configuration": {
+        "kind": "data-server",
+        "registration_identity": "gateway-1",
+        "mtls_issuer": "datalayer-contents-ca",
+        "connectors": [
+          {
+            "connector_type": "sql",
+            "operations": ["select"],
+            "policy_version": "v1"
+          }
+        ],
+        "policy_version": "v1"
+      },
+      "capabilities": ["query"],
+      "status": "ready",
+      "created_at": "2026-08-24T12:00:00Z",
+      "updated_at": "2026-08-24T12:00:00Z"
     },
     {
-      "contract_version": "v1", "uid": "01ARZ3NDEKTSV4RRFFQ69G5FAV", "kind": "mcp", "name": "Earthdata", "principal_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ", "principal_kind": "team",
-      "configuration": {"kind": "mcp", "transport": "streamable-http", "endpoint": "https://example.test/mcp", "allowed_tools": ["search_earthdata"], "allowed_domains": ["earthdata.nasa.gov"], "allowed_destinations": ["home-folder:///acquisitions/"], "approval_policy": "explicit", "destination_policy": "home-folder-only", "max_result_bytes": 67108864}, "capabilities": ["browse", "transfer"], "status": "ready", "created_at": "2026-08-24T12:00:00Z", "updated_at": "2026-08-24T12:00:00Z"
+      "contract_version": "v1",
+      "uid": "01ARZ3NDEKTSV4RRFFQ69G5FAV",
+      "kind": "mcp",
+      "name": "Earthdata",
+      "principal_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ",
+      "principal_kind": "team",
+      "configuration": {
+        "kind": "mcp",
+        "transport": "streamable-http",
+        "endpoint": "https://example.test/mcp",
+        "allowed_tools": ["search_earthdata"],
+        "allowed_domains": ["earthdata.nasa.gov"],
+        "allowed_destinations": ["home-folder:///acquisitions/"],
+        "approval_policy": "explicit",
+        "destination_policy": "home-folder-only",
+        "max_result_bytes": 67108864
+      },
+      "capabilities": ["browse", "transfer"],
+      "status": "ready",
+      "created_at": "2026-08-24T12:00:00Z",
+      "updated_at": "2026-08-24T12:00:00Z"
     },
     {
-      "contract_version": "v1", "uid": "01ARZ3NDEKTSV4RRFFQ69G5FAV", "kind": "environment", "name": "Environment content", "principal_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ", "principal_kind": "organization",
-      "configuration": {"kind": "environment", "environment_uid": "01ARZ3NDEKTSV4RRFFQ69G5FAV", "build_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ", "runtime_content_uids": [], "resolved_provider_paths": {}, "build_entries": []}, "capabilities": ["materialize"], "status": "ready", "created_at": "2026-08-24T12:00:00Z", "updated_at": "2026-08-24T12:00:00Z"
+      "contract_version": "v1",
+      "uid": "01ARZ3NDEKTSV4RRFFQ69G5FAV",
+      "kind": "environment",
+      "name": "Environment content",
+      "principal_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ",
+      "principal_kind": "organization",
+      "configuration": {
+        "kind": "environment",
+        "environment_uid": "01ARZ3NDEKTSV4RRFFQ69G5FAV",
+        "build_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ",
+        "runtime_content_uids": [],
+        "resolved_provider_paths": {},
+        "build_entries": []
+      },
+      "capabilities": ["materialize"],
+      "status": "ready",
+      "created_at": "2026-08-24T12:00:00Z",
+      "updated_at": "2026-08-24T12:00:00Z"
     }
   ],
   "attachment_manifest": {
@@ -47,20 +173,22 @@
     "sandbox_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ",
     "sandbox_provider": "daytona",
     "generated_at": "2026-08-24T12:00:00Z",
-    "attachments": [{
-      "uid": "01ARZ3NDEKTSV4RRFFQ69G5FAV",
-      "source_uid": "01ARZ3NDEKTSV4RRFFQ69G5FAV",
-      "sandbox_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ",
-      "sandbox_provider": "daytona",
-      "mode": "ro",
-      "mount_path": "/home/daytona/data",
-      "delivery": "materialize",
-      "required": true,
-      "capabilities": ["browse", "materialize"],
-      "status": "ready",
-      "limits": {"bytes": 1073741824},
-      "created_at": "2026-08-24T12:00:00Z",
-      "cleanup_policy": "remove-materialization"
-    }]
+    "attachments": [
+      {
+        "uid": "01ARZ3NDEKTSV4RRFFQ69G5FAV",
+        "source_uid": "01ARZ3NDEKTSV4RRFFQ69G5FAV",
+        "sandbox_uid": "01BX5ZZKBKACTAV9WEVGEMMVRZ",
+        "sandbox_provider": "daytona",
+        "mode": "ro",
+        "mount_path": "/home/daytona/data",
+        "delivery": "materialize",
+        "required": true,
+        "capabilities": ["browse", "materialize"],
+        "status": "ready",
+        "limits": { "bytes": 1073741824 },
+        "created_at": "2026-08-24T12:00:00Z",
+        "cleanup_policy": "remove-materialization"
+      }
+    ]
   }
 }

package/lib/navigation/components.js

@@ -15,10 +15,9 @@ export const NavigationLink = forwardRef(({ to, children, replace = false, state
         if (onClick) {
             onClick(e);
         }
-        // If not prevented, navigate
+        // If not prevented, navigate — or let a modifier click open a new tab.
         if (!e.defaultPrevented) {
-            e.preventDefault();
-            navigate(to, e, true, { replace, state });
+            navigate(to, e, { replace, state });
         }
     }, [to, replace, state, navigate, onClick]);
     return (_jsx("a", { ref: ref, href: to, onClick: handleClick, ...props, children: children }));

package/lib/routes/publicPaths.js

@@ -16,6 +16,10 @@ export const PUBLIC_PATH_PREFIXES = [
     '/about',
     '/agents',
     '/agentspecs',
+    // Where AWS Marketplace sends a customer who just subscribed, and the
+    // mailed link that confirms the account: reached signed out, and a 401 on
+    // them must not bounce the visitor to the sign-in page.
+    '/aws/marketplace',
     '/blog',
     '/careers',
     '/community',

package/lib/state/index.d.ts

@@ -1,3 +1,4 @@
 export * from './storage';
 export * from './State';
 export * from './substates';
+export * from './sessionEnd';

package/lib/state/index.js

@@ -5,3 +5,4 @@
 export * from './storage/index.js';
 export * from './State.js';
 export * from './substates/index.js';
+export * from './sessionEnd.js';

package/lib/state/sessionEnd.d.ts

@@ -0,0 +1,55 @@
+/**
+ * What a session leaves in the browser, forgotten when the session ends.
+ *
+ * Signing out used to reset the query cache and nothing else. The current
+ * space, the selected principal and the billing entity are persisted — in
+ * cookies the next page load restores, and in local storage — and they
+ * survived it: the next person to sign in on the browser opened on the
+ * previous one's space, under the previous one's principal.
+ *
+ * Two kinds of state, forgotten two ways:
+ *
+ * - what is persisted is removed **by name**, whether or not the module that
+ *   wrote it was loaded in this page — a store nobody imported still left its
+ *   key behind;
+ * - what is only in memory is reset by the store that holds it, which
+ *   registers how. Nothing here imports a store, so no import cycle can form.
+ *
+ * And a guard for the session that never ended — the tab closed without
+ * signing out: the browser remembers whose state it holds, and the next person
+ * to sign in forgets it first.
+ *
+ * @module state/sessionEnd
+ */
+/** Cookies a session writes. */
+export declare const SESSION_COOKIES: readonly string[];
+/** `localStorage` keys a session writes. */
+export declare const SESSION_LOCAL_STORAGE_KEYS: readonly string[];
+/** Whose state the browser holds: the uid of the person it belongs to. */
+export declare const SESSION_OWNER_KEY = "datalayer-session-owner";
+/** What a module keeps for a session. */
+export type SessionStateRegistration = {
+    /** Reset what the module holds in memory. */
+    forget?: () => void;
+    cookies?: readonly string[];
+    localStorageKeys?: readonly string[];
+    sessionStorageKeys?: readonly string[];
+};
+/**
+ * Say what a module keeps for a session, so the end of the session forgets it.
+ *
+ * @returns A function that withdraws the registration.
+ */
+export declare const registerSessionState: (registration: SessionStateRegistration) => (() => void);
+/** Forget everything a session left in this browser. */
+export declare const forgetSessionState: () => void;
+/**
+ * Claim the browser's session state for the person signing in.
+ *
+ * When it holds somebody else's — a session that ended without signing out —
+ * it is forgotten first. Somebody else's is known by the owner the browser
+ * remembers or, before it remembered one, by a personal principal naming
+ * another person. The state of an anonymous visitor belongs to nobody and is
+ * kept: whoever started as a visitor keeps what they started.
+ */
+export declare const claimSessionState: (userUid: string | null | undefined) => void;

package/lib/state/sessionEnd.js

@@ -0,0 +1,162 @@
+/*
+ * Copyright (c) 2023-2025 Datalayer, Inc.
+ * Distributed under the terms of the Modified BSD License.
+ */
+/**
+ * What a session leaves in the browser, forgotten when the session ends.
+ *
+ * Signing out used to reset the query cache and nothing else. The current
+ * space, the selected principal and the billing entity are persisted — in
+ * cookies the next page load restores, and in local storage — and they
+ * survived it: the next person to sign in on the browser opened on the
+ * previous one's space, under the previous one's principal.
+ *
+ * Two kinds of state, forgotten two ways:
+ *
+ * - what is persisted is removed **by name**, whether or not the module that
+ *   wrote it was loaded in this page — a store nobody imported still left its
+ *   key behind;
+ * - what is only in memory is reset by the store that holds it, which
+ *   registers how. Nothing here imports a store, so no import cycle can form.
+ *
+ * And a guard for the session that never ended — the tab closed without
+ * signing out: the browser remembers whose state it holds, and the next person
+ * to sign in forgets it first.
+ *
+ * @module state/sessionEnd
+ */
+/** Cookies a session writes. */
+export const SESSION_COOKIES = [
+    'datalayer-space-context',
+    'datalayer-principal-context',
+    'datalayer-billing-entity-uid',
+    'otel_sql_history',
+];
+/** `localStorage` keys a session writes. */
+export const SESSION_LOCAL_STORAGE_KEYS = [
+    'datalayer-principal',
+    'datalayer-billing-entity',
+    'datalayer-simple-auth',
+];
+/** Whose state the browser holds: the uid of the person it belongs to. */
+export const SESSION_OWNER_KEY = 'datalayer-session-owner';
+const registrations = new Set();
+/**
+ * Say what a module keeps for a session, so the end of the session forgets it.
+ *
+ * @returns A function that withdraws the registration.
+ */
+export const registerSessionState = (registration) => {
+    registrations.add(registration);
+    return () => {
+        registrations.delete(registration);
+    };
+};
+const storageOf = (kind) => {
+    try {
+        return typeof window === 'undefined' ? undefined : window[kind];
+    }
+    catch {
+        // A browser that refuses its storage has nothing in it to forget.
+        return undefined;
+    }
+};
+const removeFrom = (storage, key) => {
+    try {
+        storage?.removeItem(key);
+    }
+    catch {
+        // Nothing to forget.
+    }
+};
+const deleteCookie = (name) => {
+    if (typeof document === 'undefined') {
+        return;
+    }
+    document.cookie = `${name}=; path=/; max-age=0; SameSite=Lax`;
+};
+const readCookie = (name) => {
+    if (typeof document === 'undefined') {
+        return undefined;
+    }
+    const prefix = `${name}=`;
+    const entry = document.cookie
+        .split(';')
+        .map(part => part.trim())
+        .find(part => part.startsWith(prefix));
+    return entry ? entry.slice(prefix.length) : undefined;
+};
+/** Forget everything a session left in this browser. */
+export const forgetSessionState = () => {
+    const cookies = new Set(SESSION_COOKIES);
+    const local = new Set([
+        ...SESSION_LOCAL_STORAGE_KEYS,
+        SESSION_OWNER_KEY,
+    ]);
+    const session = new Set();
+    for (const registration of registrations) {
+        try {
+            registration.forget?.();
+        }
+        catch (error) {
+            console.warn('A session state could not be reset.', error);
+        }
+        registration.cookies?.forEach(name => cookies.add(name));
+        registration.localStorageKeys?.forEach(key => local.add(key));
+        registration.sessionStorageKeys?.forEach(key => session.add(key));
+    }
+    cookies.forEach(deleteCookie);
+    const localStorage = storageOf('localStorage');
+    local.forEach(key => removeFrom(localStorage, key));
+    const sessionStorage = storageOf('sessionStorage');
+    session.forEach(key => removeFrom(sessionStorage, key));
+};
+/** The personal principal the principal cookie names, when it names one. */
+const personalPrincipalInCookie = () => {
+    const raw = readCookie('datalayer-principal-context');
+    if (!raw) {
+        return undefined;
+    }
+    try {
+        const parsed = JSON.parse(decodeURIComponent(raw));
+        return parsed?.selectedPrincipalKind === 'personal'
+            ? String(parsed?.selectedPrincipalUid ?? '').trim() || undefined
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+};
+/**
+ * Claim the browser's session state for the person signing in.
+ *
+ * When it holds somebody else's — a session that ended without signing out —
+ * it is forgotten first. Somebody else's is known by the owner the browser
+ * remembers or, before it remembered one, by a personal principal naming
+ * another person. The state of an anonymous visitor belongs to nobody and is
+ * kept: whoever started as a visitor keeps what they started.
+ */
+export const claimSessionState = (userUid) => {
+    const uid = String(userUid ?? '').trim();
+    if (!uid) {
+        return;
+    }
+    const localStorage = storageOf('localStorage');
+    let owner = null;
+    try {
+        owner = localStorage?.getItem(SESSION_OWNER_KEY) ?? null;
+    }
+    catch {
+        owner = null;
+    }
+    const principal = personalPrincipalInCookie();
+    if ((owner && owner !== uid) || (!owner && principal && principal !== uid)) {
+        forgetSessionState();
+    }
+    try {
+        localStorage?.setItem(SESSION_OWNER_KEY, uid);
+    }
+    catch {
+        // Nothing to remember it in.
+    }
+};

package/lib/state/substates/CoreState.js

@@ -19,11 +19,11 @@ let initialConfiguration = {
     contentsUrl: 'https://r1.datalayer.run',
     managerUrl: 'https://prod1.datalayer.run',
     runtimesUrl: 'https://r1.datalayer.run',
-    schedulerUrl: 'https://prod1.datalayer.run',
+    schedulerUrl: 'https://r1.datalayer.run',
     libraryUrl: 'https://prod1.datalayer.run',
     spacerUrl: 'https://prod1.datalayer.run',
-    aiAgentsUrl: 'https://prod1.datalayer.run',
-    aiInferenceUrl: 'https://prod1.datalayer.run',
+    aiAgentsUrl: 'https://r1.datalayer.run',
+    aiInferenceUrl: 'https://r1.datalayer.run',
     jupyterMcpServerUrl: 'https://mcp.datalayer.run/mcp',
     otelUrl: 'https://prod1.datalayer.run',
     // Defaults to prod so telemetry is consumed from the production OTEL service

package/lib/state/substates/IAMState.js

@@ -12,6 +12,7 @@ import { requestDatalayerAPI, } from '../../api/DatalayerApi.js';
 import { getCookie, setCookie, deleteCookie } from '../../utils/index.js';
 import { coreStore } from './CoreState.js';
 import { profileStore } from './ProfileState.js';
+import { claimSessionState, forgetSessionState } from '../sessionEnd.js';
 /**
  * Limit to warn about low credits in milliseconds.
  */
@@ -69,6 +70,9 @@ export const iamStore = createStore((set, get) => {
             storeUser();
             storeToken();
             profileStore.getState().clearProfile();
+            // Everything else the session left in the browser goes with it: the
+            // current space, the principal, the billing entity, what apps registered.
+            forgetSessionState();
             set({
                 credits: undefined,
                 creditsReservations: [],
@@ -179,6 +183,8 @@ export const iamStore = createStore((set, get) => {
                     token,
                 });
                 const user = asUser(data.profile);
+                // State another person left in this browser is not this person's.
+                claimSessionState(user?.id ?? user?.uid);
                 storeUser(user);
                 storeToken(token);
                 set(() => ({ user, token }));
@@ -201,6 +207,7 @@ export const iamStore = createStore((set, get) => {
             return { externalToken };
         }),
         setLogin: (user, token) => set((state) => {
+            claimSessionState(user?.id ?? user?.uid);
             storeUser(user);
             storeToken(token);
             // The profile store is what the surfaces (user menu, sidebars,

package/lib/state/substates/LayoutState.js

@@ -4,6 +4,7 @@
  */
 import { createStore } from 'zustand/vanilla';
 import { useStore } from 'zustand';
+import { registerSessionState } from '../sessionEnd.js';
 /**
  * Name of the cookie holding the space last selected by the user.
  *
@@ -136,6 +137,17 @@ export const layoutStore = createStore((set, get) => ({
     setScreencapture: (screenCapture) => set((state) => ({ screenCapture })),
     reset: () => set((state) => ({ bootstrapped: false })),
 }));
+// The current space, organization, team and item are the session's own:
+// forgotten when it ends, cookie included.
+registerSessionState({
+    forget: () => {
+        const state = layoutStore.getState();
+        state.updateLayoutSpace(undefined);
+        state.updateLayoutOrganization(undefined);
+        state.updateLayoutTeam(undefined);
+        state.setItem(undefined);
+    },
+});
 export function useLayoutStore(selector) {
     return useStore(layoutStore, selector);
 }

package/lib/state/substates/ProfileState.d.ts

@@ -12,6 +12,7 @@ export type IProfile = {
     avatarUrl?: string;
     avatarIcon?: string;
     banner?: string;
+    showOrbits?: boolean;
     origin?: string;
     roles?: string[];
 };

package/lib/state/substates/ProfileState.js

@@ -34,6 +34,7 @@ const userToProfile = (user) => user
         avatarUrl: user.avatarUrl,
         avatarIcon: user.avatarIcon,
         banner: user.banner,
+        showOrbits: user.showOrbits,
         origin: user.origin,
         roles: user.roles,
     }

package/lib/utils/Lazy.d.ts

@@ -2,6 +2,26 @@ import { ComponentType } from 'react';
 export type PreloadableComponent<T extends ComponentType<any>> = T & {
     preload: () => Promise<void>;
 };
+/**
+ * `React.lazy`, with a `preload()` that fetches the module ahead of the
+ * first render.
+ *
+ * Two rules keep it honest:
+ *
+ * - **One fetch.** `preload()` and React's own first render share a single
+ *   call to `factory`. They used to call it separately, so a component that
+ *   was preloaded and then rendered imported its module twice.
+ * - **One element type per mounted instance.** The component renders the
+ *   loaded module directly when it was already loaded at mount — no fallback
+ *   flash — and the lazy wrapper otherwise, and it keeps that choice for its
+ *   lifetime. It used to switch from the wrapper to the loaded module on any
+ *   render after `preload()` resolved, and React remounts on a change of
+ *   element type: a component preloaded after it had mounted lost its state
+ *   and ran its effects again on its next render.
+ *
+ * A failed fetch is forgotten, so the next `preload()` tries again rather
+ * than replaying the failure.
+ */
 export declare function lazyWithPreload<T extends ComponentType<any>>(factory: () => Promise<{
     default: T;
 }>): PreloadableComponent<T>;

package/lib/utils/Lazy.js

@@ -2,22 +2,48 @@
  * Copyright (c) 2023-2025 Datalayer, Inc.
  * Distributed under the terms of the Modified BSD License.
  */
-import { createElement, forwardRef, lazy as reactLazy, } from 'react';
+import { createElement, forwardRef, lazy as reactLazy, useState, } from 'react';
+/**
+ * `React.lazy`, with a `preload()` that fetches the module ahead of the
+ * first render.
+ *
+ * Two rules keep it honest:
+ *
+ * - **One fetch.** `preload()` and React's own first render share a single
+ *   call to `factory`. They used to call it separately, so a component that
+ *   was preloaded and then rendered imported its module twice.
+ * - **One element type per mounted instance.** The component renders the
+ *   loaded module directly when it was already loaded at mount — no fallback
+ *   flash — and the lazy wrapper otherwise, and it keeps that choice for its
+ *   lifetime. It used to switch from the wrapper to the loaded module on any
+ *   render after `preload()` resolved, and React remounts on a change of
+ *   element type: a component preloaded after it had mounted lost its state
+ *   and ran its effects again on its next render.
+ *
+ * A failed fetch is forgotten, so the next `preload()` tries again rather
+ * than replaying the failure.
+ */
 export function lazyWithPreload(factory) {
-    const LazyComponent = reactLazy(factory);
     let factoryPromise;
     let LoadedComponent;
-    const Component = forwardRef(function LazyWithPreload(props, ref) {
-        return createElement(LoadedComponent ?? LazyComponent, Object.assign(ref ? { ref } : {}, props));
-    });
-    Component.preload = () => {
+    const load = () => {
         if (!factoryPromise) {
             factoryPromise = factory().then(module => {
                 LoadedComponent = module.default;
+                return module;
+            }, error => {
+                factoryPromise = undefined;
+                throw error;
             });
         }
         return factoryPromise;
     };
+    const LazyComponent = reactLazy(load);
+    const Component = forwardRef(function LazyWithPreload(props, ref) {
+        const [Resolved] = useState(() => LoadedComponent ?? LazyComponent);
+        return createElement(Resolved, Object.assign(ref ? { ref } : {}, props));
+    });
+    Component.preload = () => load().then(() => undefined);
     return Component;
 }
 export default lazyWithPreload;