@elevasis/ui 2.38.2 → 2.39.0

package/dist/{CoreAuthKitInner-QC62UHTZ.js → CoreAuthKitInner-PSTKG4B3.js}

@@ -1,3 +1,5 @@
+import { brandWorkOsOrgId } from './chunk-MQZE7SUI.js';
+import './chunk-TVTSASST.js';
 import { AuthProvider } from './chunk-BRJ3QZ4E.js';
 import './chunk-I2KLQ2HA.js';
 import { AuthKitProvider, useAuth } from '@workos-inc/authkit-react';
@@ -32,7 +34,7 @@ function WorkOSAuthAdapter({ children }) {
       user: adaptedUser,
       isLoading,
       getAccessToken,
-      organizationId: organizationId ?? null,
+      organizationId: brandWorkOsOrgId(organizationId ?? null),
       signIn,
       canRecover: hasWorkOSRefreshToken
     }),

package/dist/api/index.js

@@ -1,7 +1,9 @@
 export { createElevasisQueryClient } from '../chunk-73EWE2EW.js';
-export { ApiClientProvider, useApiClient, useApiClientContext } from '../chunk-Y3JQBSKQ.js';
-import '../chunk-X66MVMZT.js';
+export { ApiClientProvider, useApiClient, useApiClientContext } from '../chunk-FAO7SWSL.js';
+import '../chunk-ZJ3FG7FE.js';
 import '../chunk-KRWALB24.js';
 import '../chunk-DD3CCMCZ.js';
 import '../chunk-6ROXVZ3L.js';
+import '../chunk-43ZU647H.js';
+import '../chunk-TVTSASST.js';
 import '../chunk-I2KLQ2HA.js';

package/dist/app/index.d.ts

@@ -3411,6 +3411,17 @@ declare const OntologyScopeSchema: z$1.ZodDefault<z$1.ZodObject<{
 }, z$1.core.$strip>>;
 type OntologyScope = z$1.infer<typeof OntologyScopeSchema>;
 
+declare const SystemApiInterfaceSchema: z$1.ZodObject<{
+    lifecycle: z$1.ZodDefault<z$1.ZodEnum<{
+        active: "active";
+        deprecated: "deprecated";
+        draft: "draft";
+        archived: "archived";
+        disabled: "disabled";
+    }>>;
+    readinessProfile: z$1.ZodOptional<z$1.ZodString>;
+    resourceIds: z$1.ZodOptional<z$1.ZodDefault<z$1.ZodArray<z$1.ZodString>>>;
+}, z$1.core.$strict>;
 type JsonPrimitive = string | number | boolean | null;
 type JsonValue = JsonPrimitive | JsonValue[] | {
     [key: string]: JsonValue;
@@ -3439,6 +3450,7 @@ interface SystemEntry {
     }[];
     policies?: string[];
     drivesGoals?: string[];
+    apiInterface?: z$1.infer<typeof SystemApiInterfaceSchema>;
     /** @deprecated Use lifecycle. Accepted for one publish cycle. */
     status?: 'active' | 'deprecated' | 'archived';
     path?: string;

package/dist/app/index.js

@@ -1,35 +1,38 @@
 import { AppErrorBoundary } from '../chunk-SHZT7ULK.js';
-import '../chunk-JBWJ6WHZ.js';
+import '../chunk-SJHM4WDG.js';
 import { SidebarProvider, AppShellContainer, Sidebar, AppShellRightSideContainer, AppShellRightSideOuterContainer } from '../chunk-DA6I5VEY.js';
 import '../chunk-X4WBGKJQ.js';
 import '../chunk-IIMU5YAJ.js';
 import '../chunk-RNP5R5I3.js';
-import { ElevasisUIProvider } from '../chunk-AUB3T7OY.js';
+import { ElevasisUIProvider } from '../chunk-CXLDZSAQ.js';
 import '../chunk-5JYKCULK.js';
 import '../chunk-6D4LCJ52.js';
 import '../chunk-WF7CONXF.js';
 import '../chunk-WLOQ4IBG.js';
-import { SystemShell } from '../chunk-BEVGBPHW.js';
-import '../chunk-I53EX4VU.js';
+import { SystemShell } from '../chunk-L2H5CIQF.js';
+import '../chunk-RG2S6NIU.js';
 import '../chunk-3KMDHCAR.js';
 import '../chunk-S3XR4II4.js';
 import '../chunk-A7IG36LB.js';
 import '../chunk-NYBEU5TE.js';
-import '../chunk-Y3JQBSKQ.js';
+import '../chunk-FAO7SWSL.js';
 import '../chunk-DT3QYZVU.js';
 import { TanStackRouterBridge, ScrollToTop } from '../chunk-2IFYDILW.js';
 import '../chunk-Q7DJKLEN.js';
-import '../chunk-X66MVMZT.js';
+import '../chunk-ZJ3FG7FE.js';
 import '../chunk-KRWALB24.js';
-import { useSessionCheck } from '../chunk-4UCAUBOL.js';
-import '../chunk-YGUNUIME.js';
-import { ElevasisSystemsProvider, useElevasisSystems } from '../chunk-C6BDBZRO.js';
-import { useInitialization } from '../chunk-533DUEQY.js';
-import { listAllSystems } from '../chunk-566XWGPP.js';
+import { useSessionCheck } from '../chunk-5GZVSTVH.js';
+import '../chunk-ZRZYRDXX.js';
+import { ElevasisSystemsProvider, useElevasisSystems } from '../chunk-23YQ2WH5.js';
+import { useInitialization } from '../chunk-6DO4PE3O.js';
+import '../chunk-GLBPGEDD.js';
 import '../chunk-DD3CCMCZ.js';
-import '../chunk-2Q2JQSQO.js';
+import '../chunk-W2SFTXMT.js';
 import '../chunk-6ROXVZ3L.js';
-import '../chunk-KJ3QUBNU.js';
+import { listAllSystems } from '../chunk-43ZU647H.js';
+import '../chunk-2FTX4WO2.js';
+import '../chunk-MQZE7SUI.js';
+import '../chunk-TVTSASST.js';
 import '../chunk-BRJ3QZ4E.js';
 import '../chunk-I2KLQ2HA.js';
 import { useMemo, useCallback, useEffect } from 'react';

package/dist/auth/context.d.ts

@@ -1,13 +1,19 @@
 import * as react from 'react';
 import { ReactNode } from 'react';
 
+declare const workOsOrgIdBrand: unique symbol;
+/** A WorkOS organization id (`org_...`) -- the auth identity for API/SSE/query keys. */
+type WorkOsOrgId = string & {
+    readonly [workOsOrgIdBrand]: true;
+};
+
 interface AuthContextValue {
     user: {
         id: string;
     } | null;
     isLoading: boolean;
     getAccessToken: () => Promise<string>;
-    organizationId?: string | null;
+    organizationId?: WorkOsOrgId | null;
     /**
      * Trigger WorkOS AuthKit's sign-in flow (redirect to WorkOS hosted auth page).
      * Used by ProtectedRoute for auto-recovery when `canRecover()` returns true.

package/dist/auth/index.d.ts

@@ -3,80 +3,11 @@ import { ReactNode } from 'react';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { z } from 'zod';
 
-interface AuthContextValue {
-    user: {
-        id: string;
-    } | null;
-    isLoading: boolean;
-    getAccessToken: () => Promise<string>;
-    organizationId?: string | null;
-    /**
-     * Trigger WorkOS AuthKit's sign-in flow (redirect to WorkOS hosted auth page).
-     * Used by ProtectedRoute for auto-recovery when `canRecover()` returns true.
-     */
-    signIn: (options?: {
-        state?: {
-            returnTo?: string;
-        };
-    }) => void;
-    /**
-     * Returns true when a previous session can be recovered (refresh token
-     * exists in storage). ProtectedRoute calls `signIn()` only when this returns
-     * true; otherwise it navigates to the login page.
-     *
-     * Explicit logout clears the stored token, so canRecover() returns false
-     * and the user sees the login page as expected.
-     */
-    canRecover: () => boolean;
-}
-declare function useAuthContext(): AuthContextValue;
-declare function AuthProvider({ value, children }: {
-    value: AuthContextValue;
-    children: ReactNode;
-}): react.FunctionComponentElement<react.ProviderProps<AuthContextValue | null>>;
-
-/**
- * Returns a stable reference to getAccessToken that won't change between renders
- *
- * This prevents SSE connections from reconnecting unnecessarily when the
- * WorkOS useAuth hook returns a new getAccessToken function reference
- *
- * @example
- * ```tsx
- * const getAccessToken = useStableAccessToken()
- *
- * useEffect(() => {
- *   fetchEventSourceWithTokenRefresh({
- *     getToken: getAccessToken,
- *     // ...
- *   })
- * }, [getAccessToken]) // Won't re-run on every render
- * ```
- */
-declare function useStableAccessToken(): () => Promise<string>;
-
-/**
- * Checks WorkOS session validity when window/tab regains focus
- *
- * When window or tab becomes visible after inactivity, validates session
- * by attempting to get access token. If session expired (WorkOS inactivity
- * timeout exceeded), signs out user and redirects to login.
- *
- * How it works:
- * 1. Window/tab regains focus after inactivity
- * 2. Cancel all pending queries to prevent 401 error cascade
- * 3. Attempt to get access token from WorkOS
- * 4. If successful: Resume queries with fresh token
- * 5. If failed (session expired): Sign out and redirect to login
- *
- * @example
- * // In __root.tsx
- * export function RootLayoutComponent() {
- *   useSessionCheck()
- *   return <YourApp />
- * }
- */
-declare function useSessionCheck(): void;
+declare const workOsOrgIdBrand: unique symbol;
+/** A WorkOS organization id (`org_...`) -- the auth identity for API/SSE/query keys. */
+type WorkOsOrgId = string & {
+    readonly [workOsOrgIdBrand]: true;
+};
 
 declare const AccessKeyInputSchema: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
     systemPath: z.ZodString;
@@ -157,6 +88,81 @@ interface AccessAnswer {
     reason: AccessReason;
 }
 
+interface AuthContextValue {
+    user: {
+        id: string;
+    } | null;
+    isLoading: boolean;
+    getAccessToken: () => Promise<string>;
+    organizationId?: WorkOsOrgId | null;
+    /**
+     * Trigger WorkOS AuthKit's sign-in flow (redirect to WorkOS hosted auth page).
+     * Used by ProtectedRoute for auto-recovery when `canRecover()` returns true.
+     */
+    signIn: (options?: {
+        state?: {
+            returnTo?: string;
+        };
+    }) => void;
+    /**
+     * Returns true when a previous session can be recovered (refresh token
+     * exists in storage). ProtectedRoute calls `signIn()` only when this returns
+     * true; otherwise it navigates to the login page.
+     *
+     * Explicit logout clears the stored token, so canRecover() returns false
+     * and the user sees the login page as expected.
+     */
+    canRecover: () => boolean;
+}
+declare function useAuthContext(): AuthContextValue;
+declare function AuthProvider({ value, children }: {
+    value: AuthContextValue;
+    children: ReactNode;
+}): react.FunctionComponentElement<react.ProviderProps<AuthContextValue | null>>;
+
+/**
+ * Returns a stable reference to getAccessToken that won't change between renders
+ *
+ * This prevents SSE connections from reconnecting unnecessarily when the
+ * WorkOS useAuth hook returns a new getAccessToken function reference
+ *
+ * @example
+ * ```tsx
+ * const getAccessToken = useStableAccessToken()
+ *
+ * useEffect(() => {
+ *   fetchEventSourceWithTokenRefresh({
+ *     getToken: getAccessToken,
+ *     // ...
+ *   })
+ * }, [getAccessToken]) // Won't re-run on every render
+ * ```
+ */
+declare function useStableAccessToken(): () => Promise<string>;
+
+/**
+ * Checks WorkOS session validity when window/tab regains focus
+ *
+ * When window or tab becomes visible after inactivity, validates session
+ * by attempting to get access token. If session expired (WorkOS inactivity
+ * timeout exceeded), signs out user and redirects to login.
+ *
+ * How it works:
+ * 1. Window/tab regains focus after inactivity
+ * 2. Cancel all pending queries to prevent 401 error cascade
+ * 3. Attempt to get access token from WorkOS
+ * 4. If successful: Resume queries with fresh token
+ * 5. If failed (session expired): Sign out and redirect to login
+ *
+ * @example
+ * // In __root.tsx
+ * export function RootLayoutComponent() {
+ *   useSessionCheck()
+ *   return <YourApp />
+ * }
+ */
+declare function useSessionCheck(): void;
+
 interface InitializationError {
     layer: 'auth' | 'profile' | 'organization';
     message: string;

package/dist/auth/index.js

@@ -1,11 +1,14 @@
-export { AccessGuard, ProtectedRoute, useSessionCheck as useRefocusSessionCheck, useSessionCheck, useStableAccessToken } from '../chunk-4UCAUBOL.js';
-export { AccessKeys } from '../chunk-YGUNUIME.js';
-import '../chunk-C6BDBZRO.js';
-import '../chunk-533DUEQY.js';
-import '../chunk-566XWGPP.js';
+export { AccessGuard, ProtectedRoute, useSessionCheck as useRefocusSessionCheck, useSessionCheck, useStableAccessToken } from '../chunk-5GZVSTVH.js';
+export { AccessKeys } from '../chunk-ZRZYRDXX.js';
+import '../chunk-23YQ2WH5.js';
+import '../chunk-6DO4PE3O.js';
+import '../chunk-GLBPGEDD.js';
 import '../chunk-DD3CCMCZ.js';
-import '../chunk-2Q2JQSQO.js';
+import '../chunk-W2SFTXMT.js';
 import '../chunk-6ROXVZ3L.js';
-import '../chunk-KJ3QUBNU.js';
+import '../chunk-43ZU647H.js';
+import '../chunk-2FTX4WO2.js';
+import '../chunk-MQZE7SUI.js';
+import '../chunk-TVTSASST.js';
 export { AuthProvider, useAuthContext } from '../chunk-BRJ3QZ4E.js';
 import '../chunk-I2KLQ2HA.js';

package/dist/charts/index.js

@@ -1,21 +1,24 @@
-export { ActivityTrendChart, ChartFrame, CombinedTrendChart, CostTrendChart, CyberAreaChart, CyberDonut, CyberDonutTooltip, CyberLegendItem, HeroStatsRow, getSeriesColor, useCyberColors } from '../chunk-7GQFIWP4.js';
-import '../chunk-I53EX4VU.js';
+export { ActivityTrendChart, ChartFrame, CombinedTrendChart, CostTrendChart, CyberAreaChart, CyberDonut, CyberDonutTooltip, CyberLegendItem, HeroStatsRow, getSeriesColor, useCyberColors } from '../chunk-O53S32QR.js';
+import '../chunk-RG2S6NIU.js';
 import '../chunk-3KMDHCAR.js';
 import '../chunk-S3XR4II4.js';
 import '../chunk-NYBEU5TE.js';
 import '../chunk-DT3QYZVU.js';
 import '../chunk-2IFYDILW.js';
 import '../chunk-Q7DJKLEN.js';
-import '../chunk-X66MVMZT.js';
+import '../chunk-ZJ3FG7FE.js';
 import '../chunk-KRWALB24.js';
-import '../chunk-4UCAUBOL.js';
-import '../chunk-YGUNUIME.js';
-import '../chunk-C6BDBZRO.js';
-import '../chunk-533DUEQY.js';
-import '../chunk-566XWGPP.js';
+import '../chunk-5GZVSTVH.js';
+import '../chunk-ZRZYRDXX.js';
+import '../chunk-23YQ2WH5.js';
+import '../chunk-6DO4PE3O.js';
+import '../chunk-GLBPGEDD.js';
 import '../chunk-DD3CCMCZ.js';
-import '../chunk-2Q2JQSQO.js';
+import '../chunk-W2SFTXMT.js';
 import '../chunk-6ROXVZ3L.js';
-import '../chunk-KJ3QUBNU.js';
+import '../chunk-43ZU647H.js';
+import '../chunk-2FTX4WO2.js';
+import '../chunk-MQZE7SUI.js';
+import '../chunk-TVTSASST.js';
 import '../chunk-BRJ3QZ4E.js';
 import '../chunk-I2KLQ2HA.js';

package/dist/{chunk-C6BDBZRO.js → chunk-23YQ2WH5.js}

@@ -1,4 +1,5 @@
-import { devOnlyFor, requiresAdminFor, topLevel, parentOf, ancestorsOf, childrenOf, findById, findByPath, listAllSystems, defaultPathFor, getSortedSidebarEntries, getSemanticIconComponent } from './chunk-566XWGPP.js';
+import { getSortedSidebarEntries, getSemanticIconComponent } from './chunk-GLBPGEDD.js';
+import { devOnlyFor, requiresAdminFor, topLevel, parentOf, ancestorsOf, childrenOf, findById, findByPath, listAllSystems, defaultPathFor } from './chunk-43ZU647H.js';
 import { createContext, useContext, useMemo, useCallback } from 'react';
 import { jsx } from 'react/jsx-runtime';
 

package/dist/{chunk-KJ3QUBNU.js → chunk-2FTX4WO2.js}

@@ -1,7 +1,7 @@
+import { brandWorkOsOrgId } from './chunk-MQZE7SUI.js';
 import { createContext, useContext, useMemo } from 'react';
 import { jsx } from 'react/jsx-runtime';
 
-// src/provider/ElevasisServiceContext.tsx
 var ElevasisServiceContext = createContext(null);
 function useElevasisServices() {
   const ctx = useContext(ElevasisServiceContext);
@@ -19,7 +19,7 @@ function ElevasisServiceProvider({
   isReady,
   children
 }) {
-  const resolvedOrganizationId = workOSOrganizationId ?? organizationId ?? null;
+  const resolvedOrganizationId = brandWorkOsOrgId(workOSOrganizationId ?? organizationId ?? null);
   const value = useMemo(
     () => ({
       apiRequest,