@finos/legend-application-studio 28.21.14 → 28.21.16

package/lib/stores/LegendStudioBaseStore.js

@@ -24,22 +24,79 @@ import { LegendStudioEventHelper } from '../__lib__/LegendStudioEventHelper.js';
 import { LEGEND_STUDIO_SDLC_BYPASSED_ROUTE_PATTERN } from '../__lib__/LegendStudioNavigation.js';
 import { ShowcaseManagerState } from './ShowcaseManagerState.js';
 import { getCurrentUserIDFromEngineServer } from '@finos/legend-graph';
+/**
+ * Same-origin path of the static page that the SDLC OAuth flow redirects to
+ * when re-authenticating in a popup window. Shipped by the Studio deployment
+ * (see `assets/popup-callback.html`); deployments enabling the popup
+ * re-auth feature must register `<base-url>/popup-callback.html` on the
+ * SDLC server's OAuth client allow-list.
+ *
+ * The leading slash is required because `navigator.generateAddress` is
+ * `origin + baseUrl + location` and baseUrl has its trailing slash stripped.
+ */
+const SDLC_POPUP_REAUTH_CALLBACK_PATH = '/popup-callback.html';
 export class LegendStudioBaseStore {
     applicationStore;
     sdlcServerClient;
     depotServerClient;
     pluginManager;
     initState = ActionState.create();
+    popupReAuthState = ActionState.create();
     isSDLCAuthorized = false;
     isSDLCServerInitialized = false;
     SDLCServerTermsOfServicesUrlsToView = [];
+    /**
+     * Tracks whether an automatic popup re-auth has already been attempted for
+     * the current "failure episode". An episode is the window between two
+     * successful SDLC interactions: the flag is set on the first auto-attempt
+     * and cleared whenever a re-auth (auto or manual) succeeds. This is what
+     * prevents endless 401 → popup → 401 loops.
+     */
+    autoPopupReAuthAttempted = false;
+    /**
+     * Dedupes concurrent auto callers of `handleSDLCUnauthorized`. Wraps the
+     * raw popup promise with the auto-flow notification logic (manual-fallback
+     * warning on failure) so all concurrent 401-driven callers get the same
+     * resolution and only one warning fires per attempt.
+     */
+    inFlightAutoReAuth;
+    /**
+     * The raw popup promise, set by `reAuthorizeSDLCInPopup` for the duration
+     * of an on-screen popup REGARDLESS of who opened it (manual shield click
+     * OR auto-trigger). `handleSDLCUnauthorized` consults this before deciding
+     * to consume the episode and warn — without it, a 401 raised while the
+     * user is in a manually-opened popup would either stack a second popup or
+     * pop a "click the shield" warning at them while the shield's popup is in
+     * front of them.
+     */
+    inFlightReAuth;
+    /**
+     * Per-episode dedup flag for the "click the shield to retry" warning.
+     * `handleSDLCUnauthorized` can be re-entered many times within a single
+     * failure episode (every subsequent failing SDLC request in a burst lands
+     * in the loop-guard branch); without this flag, each one would stack an
+     * identical toast. Cleared alongside `autoPopupReAuthAttempted` on a
+     * successful re-auth so the next episode can warn again.
+     */
+    manualReAuthNotifiedForEpisode = false;
+    /**
+     * Re-entry guard for the network layer's 401 hook. Set to `true` while we
+     * are re-bootstrapping the SDLC session inside the popup-success path so
+     * that a 401 raised by the re-bootstrap requests themselves (e.g. the
+     * `isAuthorized` verification GET coming back 401 because cookies didn't
+     * actually land) cannot recurse into `handleSDLCUnauthorized` — that would
+     * return the still-in-flight outer promise and deadlock the whole chain.
+     */
+    suppressAutoReAuth = false;
     constructor(applicationStore) {
         makeObservable(this, {
             isSDLCAuthorized: observable,
             SDLCServerTermsOfServicesUrlsToView: observable,
             needsToAcceptSDLCServerTermsOfServices: computed,
+            isSDLCPopupReAuthEnabled: computed,
             initialize: flow,
             initializeSDLCServerClient: flow,
+            verifySDLCSessionAfterReAuth: flow,
             dismissSDLCServerTermsOfServicesAlert: action,
         });
         this.applicationStore = applicationStore;
@@ -55,6 +112,11 @@ export class LegendStudioBaseStore {
             serverUrl: this.applicationStore.config.sdlcServerUrl,
             baseHeaders: this.applicationStore.config.sdlcServerBaseHeaders,
             client: this.applicationStore.config.sdlcServerClient,
+            // On a mid-session 401, auto-launch the popup re-auth flow. The
+            // handler enforces a one-attempt-per-episode guard to prevent endless
+            // retry loops; when it gives up, the StatusBar manual button remains
+            // available.
+            autoReAuthenticate: () => this.handleSDLCUnauthorized(),
         });
         this.sdlcServerClient.setTracerService(this.applicationStore.tracerService);
     }
@@ -130,6 +192,322 @@ export class LegendStudioBaseStore {
     dismissSDLCServerTermsOfServicesAlert() {
         this.SDLCServerTermsOfServicesUrlsToView = [];
     }
+    /**
+     * Whether the popup-based SDLC re-authentication flow is available.
+     *
+     * The feature is opt-in via the `sdlc.enablePopupReAuth` config flag
+     * because the derived callback URL must be explicitly registered as an
+     * OAuth `redirect_uri` on the SDLC server. When `false` (or unset), only
+     * the legacy top-level redirect flow is available.
+     */
+    get isSDLCPopupReAuthEnabled() {
+        return this.applicationStore.config.sdlcEnablePopupReAuth;
+    }
+    /**
+     * 401 interception hook wired into the SDLC server client. Triggers the
+     * popup re-auth flow automatically — without any user action — but only
+     * once per failure episode to guard against retry loops.
+     *
+     * @returns a promise resolving to `true` if the SDLC server is now
+     * authorized (i.e. the underlying network layer should retry the original
+     * request), `false` otherwise.
+     */
+    handleSDLCUnauthorized() {
+        // Feature off → propagate the 401 to the caller as before.
+        if (!this.isSDLCPopupReAuthEnabled) {
+            return Promise.resolve(false);
+        }
+        // Re-entry guard: a 401 raised from inside the post-popup re-bootstrap
+        // (e.g. the verification `isAuthorized()` call itself coming back 401
+        // because cookies didn't actually land) MUST NOT recurse into the popup
+        // flow — that would return the in-flight outer promise and deadlock.
+        if (this.suppressAutoReAuth) {
+            return Promise.resolve(false);
+        }
+        // Coalesce concurrent auto callers onto the wrapped auto-flow promise so
+        // the manual-fallback warning only fires once per attempt.
+        if (this.inFlightAutoReAuth) {
+            return this.inFlightAutoReAuth;
+        }
+        // If a popup is already on screen — most commonly because the user just
+        // clicked the StatusBar shield, but also possibly because a prior auto-
+        // attempt's popup is still finalising — defer to its outcome instead of
+        // consuming this episode's one auto-attempt and warning at the user
+        // about a manual button that the popup is in the way of.
+        if (this.inFlightReAuth) {
+            return this.inFlightReAuth;
+        }
+        // Loop guard: we've already auto-attempted once this episode. Surface
+        // the manual fallback (deduped) and stop auto-retrying.
+        if (this.autoPopupReAuthAttempted) {
+            this.notifyManualReAuthAvailable();
+            return Promise.resolve(false);
+        }
+        this.autoPopupReAuthAttempted = true;
+        // NOTE: we deliberately don't fire an upfront "session expired" toast —
+        // the popup window itself is the user-visible signal that re-auth is
+        // happening. We only notify on completion (success or failure) so the
+        // toast stack stays clean.
+        this.inFlightAutoReAuth = this.reAuthorizeSDLCInPopup()
+            .then((ok) => {
+            this.inFlightAutoReAuth = undefined;
+            if (!ok) {
+                this.notifyManualReAuthAvailable();
+            }
+            // success path resets `autoPopupReAuthAttempted` inside
+            // `reAuthorizeSDLCInPopup` so the next episode can auto-attempt again
+            return ok;
+        })
+            .catch(() => {
+            this.inFlightAutoReAuth = undefined;
+            this.notifyManualReAuthAvailable();
+            return false;
+        });
+        return this.inFlightAutoReAuth;
+    }
+    /**
+     * Best-effort notification that nudges the user toward the manual
+     * re-authentication entry point (the StatusBar shield button) when the
+     * automatic flow could not complete (popup blocked, user dismissed, or
+     * the retry still 401'd).
+     *
+     * Deduped per failure episode: subsequent 401s within the same episode
+     * (a burst of editor requests after session expiry, for example) all hit
+     * the loop-guard branch and would otherwise each stack an identical
+     * warning toast. The flag is cleared when a re-auth attempt succeeds.
+     */
+    notifyManualReAuthAvailable() {
+        if (this.manualReAuthNotifiedForEpisode) {
+            return;
+        }
+        this.manualReAuthNotifiedForEpisode = true;
+        this.applicationStore.notificationService.notifyWarning(`Automatic SDLC re-authentication did not complete. Click the shield icon in the status bar to retry, or reload the page to start a fresh session.`);
+    }
+    /**
+     * Re-initiate the SDLC authorization step in a popup window so that the
+     * user can recover from an expired SDLC session without losing in-memory
+     * editor state (open tabs, unsaved buffers, etc.).
+     *
+     * The popup loads the SDLC server's `/auth/authorize?redirect_uri=...`
+     * endpoint with a same-origin callback page as the `redirect_uri`. That
+     * URL is derived at runtime via the navigator — the same way the
+     * boot-time auth flow derives its own `redirect_uri` — so deployments
+     * only need to declare intent (`sdlc.enablePopupReAuth: true`) and ship
+     * the static `popup-callback.html` page at their base URL.
+     *
+     * The callback page is expected to `postMessage` back to the opener with
+     * payload `{ type: 'SDLC_REAUTH_DONE' }` and then close itself.
+     *
+     * On success, the SDLC server client is re-checked and re-initialized in
+     * place — no top-level navigation, no state loss.
+     *
+     * @returns a promise that resolves to `true` if the SDLC server is
+     * authorized after the popup flow completes, `false` otherwise (popup
+     * blocked, user cancelled, authorization check still failing, ...).
+     */
+    async reAuthorizeSDLCInPopup() {
+        if (!this.isSDLCPopupReAuthEnabled) {
+            this.applicationStore.notificationService.notifyWarning(`Popup re-authentication is not enabled. Set 'sdlc.enablePopupReAuth' to true in the Studio config to enable it.`);
+            return false;
+        }
+        // Coalesce concurrent callers (manual shield click + auto 401 trigger)
+        // onto a single popup. Without this, a 401 raised while the user is in
+        // a manually-opened popup would either stack a second popup OR fire a
+        // confusing "click the shield" warning at the user while the shield's
+        // popup is literally on screen.
+        if (this.inFlightReAuth) {
+            return this.inFlightReAuth;
+        }
+        this.popupReAuthState.inProgress();
+        // Derive the callback URL the same way the boot-time SDLC auth flow
+        // derives its `redirect_uri` — via the navigator's same-origin address
+        // builder. The callback page is a constant static asset shipped with
+        // every Studio deployment.
+        const callbackUrl = this.applicationStore.navigationService.navigator.generateAddress(SDLC_POPUP_REAUTH_CALLBACK_PATH);
+        const callbackOrigin = new URL(callbackUrl).origin;
+        const authorizeUrl = SDLCServerClient.authorizeCallbackUrl(this.applicationStore.config.sdlcServerUrl, callbackUrl, this.applicationStore.config.sdlcServerClient);
+        const popup = window.open(authorizeUrl, 'legend-studio-sdlc-reauth', 'width=560,height=720,menubar=no,toolbar=no,location=no,status=no');
+        if (!popup) {
+            this.popupReAuthState.fail();
+            this.applicationStore.notificationService.notifyError(`Failed to open the re-authentication popup. Please allow popups for this site and try again.`);
+            return false;
+        }
+        const promise = new Promise((resolve) => {
+            let closedPoll;
+            let settled = false;
+            // `finalize` and `onMessage` form a small cycle:
+            //   onMessage -> finalize          (call on success postMessage)
+            //   finalize  -> onMessage         (removeEventListener on teardown)
+            // We declare `finalize` first so only the one forward reference to
+            // `onMessage` from inside `finalize`'s body needs to be excused.
+            const finalize = (signalled) => {
+                if (settled) {
+                    return;
+                }
+                settled = true;
+                // eslint-disable-next-line @typescript-eslint/no-use-before-define
+                window.removeEventListener('message', onMessage);
+                if (closedPoll !== undefined) {
+                    clearInterval(closedPoll);
+                    closedPoll = undefined;
+                }
+                try {
+                    popup.close();
+                }
+                catch {
+                    // ignored — popup may already be closed or cross-origin
+                }
+                // Always re-verify the SDLC session in place, whether the callback
+                // page managed to `postMessage` (`signalled === true`) or the popup
+                // simply closed (`signalled === false`). The popup-closed path used
+                // to fail outright, but that silently broke environments where the
+                // browser severs `window.opener` somewhere along the auth redirect
+                // chain (most commonly an IdP or the SDLC server sending
+                // `Cross-Origin-Opener-Policy: same-origin`): the callback page's
+                // `postMessage` becomes a no-op, the popup closes itself, and the
+                // only way to learn whether auth actually took is to ask the server.
+                // The cost is one cheap GET on user-cancel; the upside is robust
+                // recovery for COOP-severed deployments.
+                //
+                // We deliberately do NOT route through `initializeSDLCServerClient`
+                // here — that would do a top-level redirect on `!isAuthorized` and
+                // lose all the in-memory editor state this whole feature exists to
+                // protect. `suppressAutoReAuth` is set for the duration of the
+                // verify so that a 401 raised by the verify GET itself can't recurse
+                // back into `handleSDLCUnauthorized` (which would return the still-
+                // in-flight outer promise and deadlock).
+                this.isSDLCServerInitialized = false;
+                this.suppressAutoReAuth = true;
+                flowResult(this.verifySDLCSessionAfterReAuth())
+                    .then((ok) => {
+                    this.suppressAutoReAuth = false;
+                    if (ok) {
+                        // reset the per-episode flags so the next failure episode
+                        // can auto-attempt re-auth and warn the user again
+                        this.autoPopupReAuthAttempted = false;
+                        this.manualReAuthNotifiedForEpisode = false;
+                        this.popupReAuthState.pass();
+                        this.applicationStore.notificationService.notifySuccess(`Successfully re-authenticated with the SDLC server.`);
+                    }
+                    else {
+                        this.popupReAuthState.fail();
+                        if (signalled) {
+                            // The popup explicitly told us it completed, yet the SDLC
+                            // server still reports the session as unauthorized. That's
+                            // a real problem the user should know about (wrong identity
+                            // chosen in the popup, third-party-cookie / SameSite issue,
+                            // ToS race, etc.). Surface a loud error.
+                            this.applicationStore.notificationService.notifyError(`Re-authentication popup completed but the SDLC session is still not authorized. Please reload the page to start a fresh session.`);
+                        }
+                        // !signalled + verify failed is indistinguishable from a
+                        // deliberate user-cancel — stay quiet. The auto-trigger
+                        // caller (`handleSDLCUnauthorized`) will fire a single
+                        // "click the shield to retry" hint if this was an auto
+                        // attempt; the manual button caller simply gets `false` back.
+                    }
+                    resolve(ok);
+                })
+                    .catch((error) => {
+                    this.suppressAutoReAuth = false;
+                    assertErrorThrown(error);
+                    this.popupReAuthState.fail();
+                    this.applicationStore.logService.error(LogEvent.create(LEGEND_STUDIO_APP_EVENT.SDLC_MANAGER_FAILURE), error);
+                    this.applicationStore.notificationService.notifyError(error);
+                    resolve(false);
+                });
+            };
+            const onMessage = (event) => {
+                // strict origin + payload-shape check
+                if (event.origin !== callbackOrigin) {
+                    return;
+                }
+                const data = event.data;
+                if (!data || data.type !== 'SDLC_REAUTH_DONE') {
+                    return;
+                }
+                finalize(true);
+            };
+            window.addEventListener('message', onMessage);
+            // Fallback: if the user closes the popup without completing auth,
+            // we still want to release the in-progress state.
+            closedPoll = setInterval(() => {
+                if (popup.closed) {
+                    finalize(false);
+                }
+            }, 500);
+        });
+        this.inFlightReAuth = promise;
+        try {
+            return await promise;
+        }
+        finally {
+            // Clear the slot AFTER awaiting so all concurrent callers (which got
+            // `this.inFlightReAuth` back from the early-return branch) resolve
+            // against the same promise instance. Subsequent attempts then start
+            // a fresh popup.
+            this.inFlightReAuth = undefined;
+        }
+    }
+    /**
+     * Shared post-auth bootstrap: ToS gate, platforms, features. Plain
+     * generator (not a flow) — delegated to from both `initializeSDLCServerClient`
+     * (the boot-time flow) and `verifySDLCSessionAfterReAuth` (the popup-success
+     * flow) via `yield*`. Caller is responsible for asserting `isSDLCAuthorized`
+     * beforehand.
+     */
+    *bootstrapSDLCSessionAfterAuth() {
+        // check terms of service agreement status
+        this.SDLCServerTermsOfServicesUrlsToView =
+            (yield this.sdlcServerClient.hasAcceptedTermsOfService());
+        if (this.SDLCServerTermsOfServicesUrlsToView.length) {
+            this.applicationStore.alertService.setActionAlertInfo({
+                message: `Please read and accept the SDLC servers' terms of service`,
+                prompt: `Click 'Done' when you have accepted all the terms`,
+                type: ActionAlertType.CAUTION,
+                actions: [
+                    {
+                        label: 'See terms of services',
+                        default: true,
+                        handler: () => this.SDLCServerTermsOfServicesUrlsToView.forEach((url) => this.applicationStore.navigationService.navigator.visitAddress(url)),
+                        type: ActionAlertActionType.PROCEED,
+                    },
+                    {
+                        label: 'Done',
+                        type: ActionAlertActionType.PROCEED_WITH_CAUTION,
+                        handler: () => {
+                            this.dismissSDLCServerTermsOfServicesAlert();
+                            this.applicationStore.navigationService.navigator.reload();
+                        },
+                    },
+                ],
+            });
+        }
+        // fetch server features config and platforms
+        yield this.sdlcServerClient.fetchServerPlatforms();
+        yield this.sdlcServerClient.fetchServerFeaturesConfiguration();
+        // the sdlc server client is authorized and initialized
+        this.isSDLCServerInitialized = true;
+    }
+    /**
+     * Verify the SDLC session after a popup re-auth attempt completes, and
+     * re-bootstrap the session in place if it took. Returns `true` if the
+     * session is now usable, `false` if the SDLC server still reports the
+     * session as unauthorized (e.g. cookies didn't actually land, user authed
+     * against the wrong identity).
+     *
+     * Unlike `initializeSDLCServerClient`, this does NOT do a top-level
+     * redirect on `!isAuthorized` — preserving in-memory editor state is the
+     * entire reason the popup flow exists.
+     */
+    *verifySDLCSessionAfterReAuth() {
+        this.isSDLCAuthorized =
+            (yield this.sdlcServerClient.isAuthorized());
+        if (!this.isSDLCAuthorized) {
+            return false;
+        }
+        yield* this.bootstrapSDLCSessionAfterAuth();
+        return true;
+    }
     *initializeSDLCServerClient() {
         try {
             this.isSDLCAuthorized =
@@ -138,38 +516,8 @@ export class LegendStudioBaseStore {
                 this.applicationStore.navigationService.navigator.goToAddress(SDLCServerClient.authorizeCallbackUrl(this.applicationStore.config.sdlcServerUrl, this.applicationStore.navigationService.navigator.getCurrentAddress(), this.applicationStore.config.sdlcServerClient));
             }
             else {
-                // Only proceed intialization after passing authorization check
-                // check terms of service agreement status
-                this.SDLCServerTermsOfServicesUrlsToView =
-                    (yield this.sdlcServerClient.hasAcceptedTermsOfService());
-                if (this.SDLCServerTermsOfServicesUrlsToView.length) {
-                    this.applicationStore.alertService.setActionAlertInfo({
-                        message: `Please read and accept the SDLC servers' terms of service`,
-                        prompt: `Click 'Done' when you have accepted all the terms`,
-                        type: ActionAlertType.CAUTION,
-                        actions: [
-                            {
-                                label: 'See terms of services',
-                                default: true,
-                                handler: () => this.SDLCServerTermsOfServicesUrlsToView.forEach((url) => this.applicationStore.navigationService.navigator.visitAddress(url)),
-                                type: ActionAlertActionType.PROCEED,
-                            },
-                            {
-                                label: 'Done',
-                                type: ActionAlertActionType.PROCEED_WITH_CAUTION,
-                                handler: () => {
-                                    this.dismissSDLCServerTermsOfServicesAlert();
-                                    this.applicationStore.navigationService.navigator.reload();
-                                },
-                            },
-                        ],
-                    });
-                }
-                // fetch server features config and platforms
-                yield this.sdlcServerClient.fetchServerPlatforms();
-                yield this.sdlcServerClient.fetchServerFeaturesConfiguration();
-                // the sdlc server client is authorized and initialized
-                this.isSDLCServerInitialized = true;
+                // Only proceed initialization after passing authorization check
+                yield* this.bootstrapSDLCSessionAfterAuth();
             }
         }
         catch (error) {

package/lib/stores/LegendStudioBaseStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"LegendStudioBaseStore.js","sourceRoot":"","sources":["../../src/stores/LegendStudioBaseStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAGL,UAAU,EACV,kBAAkB,EAClB,WAAW,EACX,QAAQ,EACR,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,qBAAqB,EACrB,eAAe,EACf,gCAAgC,EAChC,iBAAiB,GAClB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAChE,OAAO,EACL,MAAM,EACN,QAAQ,EACR,IAAI,EACJ,UAAU,EACV,cAAc,EACd,UAAU,GACX,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAG/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,yCAAyC,EAAE,MAAM,sCAAsC,CAAC;AACjG,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AAOvE,MAAM,OAAO,qBAAqB;IACvB,gBAAgB,CAA+B;IAC/C,gBAAgB,CAAmB;IACnC,iBAAiB,CAAoB;IACrC,aAAa,CAA4B;IAEzC,SAAS,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC;IAE1C,gBAAgB,GAAwB,KAAK,CAAC;IACtC,uBAAuB,GAAG,KAAK,CAAC;IACxC,mCAAmC,GAAa,EAAE,CAAC;IAEnD,YAAY,gBAA8C;QACxD,cAAc,CAAsD,IAAI,EAAE;YACxE,gBAAgB,EAAE,UAAU;YAC5B,mCAAmC,EAAE,UAAU;YAC/C,sCAAsC,EAAE,QAAQ;YAChD,UAAU,EAAE,IAAI;YAChB,0BAA0B,EAAE,IAAI;YAChC,qCAAqC,EAAE,MAAM;SAC9C,CAAC,CAAC;QAEH,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,aAAa,GAAG,gBAAgB,CAAC,aAAa,CAAC;QAEpD,QAAQ;QACR,IAAI,CAAC,iBAAiB,GAAG,IAAI,iBAAiB,CAAC;YAC7C,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,cAAc;SACvD,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CACrC,IAAI,CAAC,gBAAgB,CAAC,aAAa,CACpC,CAAC;QAEF,OAAO;QACP,IAAI,CAAC,gBAAgB,GAAG,IAAI,gBAAgB,CAAC;YAC3C,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG;YACrC,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,aAAa;YACrD,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,qBAAqB;YAC/D,MAAM,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB;SACtD,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAC9E,CAAC;IAED,CAAC,UAAU;QACT,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;YACrC,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,kBAAkB,CAC1D,8BAA8B,CAC/B,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;QAE5B,2CAA2C;QAC3C,+DAA+D;QAC/D,wDAAwD;QACxD,OAAO,CAAC,GAAG,CAAC;YACV,oBAAoB,CAAC,qBAAqB,CACxC,IAAI,CAAC,gBAAgB,CACtB,EAAE,UAAU,EAAE;SAChB,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACjB,aAAa;QACf,CAAC,CAAC,CAAC;QAEH,0EAA0E;QAC1E,IACE,CAAC,WAAW,CACV;YACE,EAAE,IAAI,EAAE,yCAAyC,CAAC,WAAW,EAAE;YAC/D;gBACE,IAAI,EAAE,yCAAyC,CAAC,kBAAkB;aACnE;YACD;gBACE,IAAI,EAAE,yCAAyC,CAAC,qBAAqB;aACtE;YACD,EAAE,IAAI,EAAE,yCAAyC,CAAC,QAAQ,EAAE;YAC5D,EAAE,IAAI,EAAE,yCAAyC,CAAC,UAAU,EAAE;SAC/D,EACD,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,SAAS,CAAC,kBAAkB,EAAE,CACvE,EACD,CAAC;YACD,2BAA2B;YAC3B,MAAM,UAAU,CAAC,IAAI,CAAC,0BAA0B,EAAE,CAAC,CAAC;YAEpD,2FAA2F;YAC3F,+FAA+F;YAC/F,uDAAuD;YACvD,oDAAoD;YACpD,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC;gBAClC,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAC7C,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAsB,CACpE,CAAC;gBACF,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;gBAClD,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,cAAc,CAClD,WAAW,CAAC,MAAM,CACnB,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBACzB,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,KAAK,CACpC,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,EAC/D,KAAK,CACN,CAAC;gBACF,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;QACpC,CAAC;QAED,wDAAwD;QACxD,IAAI,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;YACtD,IAAI,CAAC;gBACH,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,cAAc,CAClD,CAAC,MAAM,gCAAgC,CACrC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,eAAe,CAC7C,CAAW,CACb,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBACzB,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,KAAK,CACpC,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,EAC/D,KAAK,CACN,CAAC;gBACF,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAE/C,gCAAgC,CAAC,2CAA2C,CAC1E,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EACtC,IAAI,CAAC,gBAAgB,CACtB,CAAC;QAEF,uBAAuB,CAAC,+BAA+B,CACrD,IAAI,CAAC,gBAAgB,CAAC,YAAY,CACnC,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,sCAAsC;QACxC,OAAO,OAAO,CAAC,IAAI,CAAC,mCAAmC,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC;IAED,qCAAqC;QACnC,IAAI,CAAC,mCAAmC,GAAG,EAAE,CAAC;IAChD,CAAC;IAEO,CAAC,0BAA0B;QACjC,IAAI,CAAC;YACH,IAAI,CAAC,gBAAgB;gBACnB,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,EAAE,CAAY,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC3B,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,SAAS,CAAC,WAAW,CAC3D,gBAAgB,CAAC,oBAAoB,CACnC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,aAAa,EAC1C,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,SAAS,CAAC,iBAAiB,EAAE,EACrE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAC9C,CACF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,+DAA+D;gBAE/D,0CAA0C;gBAC1C,IAAI,CAAC,mCAAmC;oBACtC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,yBAAyB,EAAE,CAAa,CAAC;gBACxE,IAAI,IAAI,CAAC,mCAAmC,CAAC,MAAM,EAAE,CAAC;oBACpD,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,kBAAkB,CAAC;wBACpD,OAAO,EAAE,2DAA2D;wBACpE,MAAM,EAAE,mDAAmD;wBAC3D,IAAI,EAAE,eAAe,CAAC,OAAO;wBAC7B,OAAO,EAAE;4BACP;gCACE,KAAK,EAAE,uBAAuB;gCAC9B,OAAO,EAAE,IAAI;gCACb,OAAO,EAAE,GAAS,EAAE,CAClB,IAAI,CAAC,mCAAmC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACvD,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,SAAS,CAAC,YAAY,CAC5D,GAAG,CACJ,CACF;gCACH,IAAI,EAAE,qBAAqB,CAAC,OAAO;6BACpC;4BACD;gCACE,KAAK,EAAE,MAAM;gCACb,IAAI,EAAE,qBAAqB,CAAC,oBAAoB;gCAChD,OAAO,EAAE,GAAS,EAAE;oCAClB,IAAI,CAAC,qCAAqC,EAAE,CAAC;oCAC7C,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;gCAC7D,CAAC;6BACF;yBACF;qBACF,CAAC,CAAC;gBACL,CAAC;gBAED,6CAA6C;gBAC7C,MAAM,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,EAAE,CAAC;gBACnD,MAAM,IAAI,CAAC,gBAAgB,CAAC,gCAAgC,EAAE,CAAC;gBAE/D,uDAAuD;gBACvD,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACzB;YACE,0CAA0C;YAC1C,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa;gBACtC,KAAK,YAAY,kBAAkB;gBACnC,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,YAAY,EACjD,CAAC;gBACD,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,kBAAkB,CAAC;oBACpD,OAAO,EACL,kKAAkK;oBACpK,IAAI,EAAE,eAAe,CAAC,QAAQ;oBAC9B,OAAO,EAAE;wBACP;4BACE,KAAK,EAAE,yBAAyB;4BAChC,IAAI,EAAE,qBAAqB,CAAC,OAAO;4BACnC,OAAO,EAAE,IAAI;4BACb,OAAO,EAAE,GAAS,EAAE;gCAClB,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,SAAS,CAAC,YAAY,CAC5D,IAAI,CAAC,gBAAgB,CAAC,cAAc,CACrC,CAAC;gCACF,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,gBAAgB,CAAC;oCAClD,OAAO,EACL,6DAA6D;oCAC/D,MAAM,EACJ,6DAA6D;iCAChE,CAAC,CAAC;4BACL,CAAC;yBACF;qBACF;iBACF,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,KAAK,CACpC,QAAQ,CAAC,MAAM,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,EAC7D,KAAK,CACN,CAAC;gBACF,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"LegendStudioBaseStore.js","sourceRoot":"","sources":["../../src/stores/LegendStudioBaseStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAGL,UAAU,EACV,kBAAkB,EAClB,WAAW,EACX,QAAQ,EACR,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,qBAAqB,EACrB,eAAe,EACf,gCAAgC,EAChC,iBAAiB,GAClB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAChE,OAAO,EACL,MAAM,EACN,QAAQ,EACR,IAAI,EACJ,UAAU,EACV,cAAc,EACd,UAAU,GACX,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAG/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,yCAAyC,EAAE,MAAM,sCAAsC,CAAC;AACjG,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AAOvE;;;;;;;;;GASG;AACH,MAAM,+BAA+B,GAAG,sBAAsB,CAAC;AAE/D,MAAM,OAAO,qBAAqB;IACvB,gBAAgB,CAA+B;IAC/C,gBAAgB,CAAmB;IACnC,iBAAiB,CAAoB;IACrC,aAAa,CAA4B;IAEzC,SAAS,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC;IACjC,gBAAgB,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC;IAEjD,gBAAgB,GAAwB,KAAK,CAAC;IACtC,uBAAuB,GAAG,KAAK,CAAC;IACxC,mCAAmC,GAAa,EAAE,CAAC;IAEnD;;;;;;OAMG;IACK,wBAAwB,GAAG,KAAK,CAAC;IAEzC;;;;;OAKG;IACK,kBAAkB,CAA+B;IAEzD;;;;;;;;OAQG;IACK,cAAc,CAA+B;IAErD;;;;;;;OAOG;IACK,8BAA8B,GAAG,KAAK,CAAC;IAE/C;;;;;;;OAOG;IACK,kBAAkB,GAAG,KAAK,CAAC;IAEnC,YAAY,gBAA8C;QACxD,cAAc,CAGZ,IAAI,EAAE;YACN,gBAAgB,EAAE,UAAU;YAC5B,mCAAmC,EAAE,UAAU;YAC/C,sCAAsC,EAAE,QAAQ;YAChD,wBAAwB,EAAE,QAAQ;YAClC,UAAU,EAAE,IAAI;YAChB,0BAA0B,EAAE,IAAI;YAChC,4BAA4B,EAAE,IAAI;YAClC,qCAAqC,EAAE,MAAM;SAC9C,CAAC,CAAC;QAEH,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,aAAa,GAAG,gBAAgB,CAAC,aAAa,CAAC;QAEpD,QAAQ;QACR,IAAI,CAAC,iBAAiB,GAAG,IAAI,iBAAiB,CAAC;YAC7C,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,cAAc;SACvD,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CACrC,IAAI,CAAC,gBAAgB,CAAC,aAAa,CACpC,CAAC;QAEF,OAAO;QACP,IAAI,CAAC,gBAAgB,GAAG,IAAI,gBAAgB,CAAC;YAC3C,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG;YACrC,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,aAAa;YACrD,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,qBAAqB;YAC/D,MAAM,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB;YACrD,gEAAgE;YAChE,sEAAsE;YACtE,qEAAqE;YACrE,aAAa;YACb,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE;SACxD,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAC9E,CAAC;IAED,CAAC,UAAU;QACT,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;YACrC,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,kBAAkB,CAC1D,8BAA8B,CAC/B,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;QAE5B,2CAA2C;QAC3C,+DAA+D;QAC/D,wDAAwD;QACxD,OAAO,CAAC,GAAG,CAAC;YACV,oBAAoB,CAAC,qBAAqB,CACxC,IAAI,CAAC,gBAAgB,CACtB,EAAE,UAAU,EAAE;SAChB,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACjB,aAAa;QACf,CAAC,CAAC,CAAC;QAEH,0EAA0E;QAC1E,IACE,CAAC,WAAW,CACV;YACE,EAAE,IAAI,EAAE,yCAAyC,CAAC,WAAW,EAAE;YAC/D;gBACE,IAAI,EAAE,yCAAyC,CAAC,kBAAkB;aACnE;YACD;gBACE,IAAI,EAAE,yCAAyC,CAAC,qBAAqB;aACtE;YACD,EAAE,IAAI,EAAE,yCAAyC,CAAC,QAAQ,EAAE;YAC5D,EAAE,IAAI,EAAE,yCAAyC,CAAC,UAAU,EAAE;SAC/D,EACD,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,SAAS,CAAC,kBAAkB,EAAE,CACvE,EACD,CAAC;YACD,2BAA2B;YAC3B,MAAM,UAAU,CAAC,IAAI,CAAC,0BAA0B,EAAE,CAAC,CAAC;YAEpD,2FAA2F;YAC3F,+FAA+F;YAC/F,uDAAuD;YACvD,oDAAoD;YACpD,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC;gBAClC,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAC7C,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAsB,CACpE,CAAC;gBACF,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;gBAClD,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,cAAc,CAClD,WAAW,CAAC,MAAM,CACnB,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBACzB,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,KAAK,CACpC,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,EAC/D,KAAK,CACN,CAAC;gBACF,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;QACpC,CAAC;QAED,wDAAwD;QACxD,IAAI,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;YACtD,IAAI,CAAC;gBACH,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,cAAc,CAClD,CAAC,MAAM,gCAAgC,CACrC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,eAAe,CAC7C,CAAW,CACb,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBACzB,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,KAAK,CACpC,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,EAC/D,KAAK,CACN,CAAC;gBACF,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAE/C,gCAAgC,CAAC,2CAA2C,CAC1E,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EACtC,IAAI,CAAC,gBAAgB,CACtB,CAAC;QAEF,uBAAuB,CAAC,+BAA+B,CACrD,IAAI,CAAC,gBAAgB,CAAC,YAAY,CACnC,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,sCAAsC;QACxC,OAAO,OAAO,CAAC,IAAI,CAAC,mCAAmC,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC;IAED,qCAAqC;QACnC,IAAI,CAAC,mCAAmC,GAAG,EAAE,CAAC;IAChD,CAAC;IAED;;;;;;;OAOG;IACH,IAAI,wBAAwB;QAC1B,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,qBAAqB,CAAC;IAC5D,CAAC;IAED;;;;;;;;OAQG;IACK,sBAAsB;QAC5B,2DAA2D;QAC3D,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;YACnC,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,uEAAuE;QACvE,sEAAsE;QACtE,wEAAwE;QACxE,qEAAqE;QACrE,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,yEAAyE;QACzE,2DAA2D;QAC3D,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,kBAAkB,CAAC;QACjC,CAAC;QACD,wEAAwE;QACxE,wEAAwE;QACxE,wEAAwE;QACxE,oEAAoE;QACpE,yDAAyD;QACzD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,cAAc,CAAC;QAC7B,CAAC;QACD,sEAAsE;QACtE,wDAAwD;QACxD,IAAI,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAClC,IAAI,CAAC,2BAA2B,EAAE,CAAC;YACnC,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC;QACrC,wEAAwE;QACxE,qEAAqE;QACrE,sEAAsE;QACtE,2BAA2B;QAC3B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,sBAAsB,EAAE;aACpD,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;YACX,IAAI,CAAC,kBAAkB,GAAG,SAAS,CAAC;YACpC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,IAAI,CAAC,2BAA2B,EAAE,CAAC;YACrC,CAAC;YACD,wDAAwD;YACxD,sEAAsE;YACtE,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE;YACV,IAAI,CAAC,kBAAkB,GAAG,SAAS,CAAC;YACpC,IAAI,CAAC,2BAA2B,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QACL,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED;;;;;;;;;;OAUG;IACK,2BAA2B;QACjC,IAAI,IAAI,CAAC,8BAA8B,EAAE,CAAC;YACxC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,8BAA8B,GAAG,IAAI,CAAC;QAC3C,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,aAAa,CACrD,mJAAmJ,CACpJ,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,KAAK,CAAC,sBAAsB;QAC1B,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;YACnC,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,aAAa,CACrD,iHAAiH,CAClH,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,uEAAuE;QACvE,uEAAuE;QACvE,sEAAsE;QACtE,sEAAsE;QACtE,gCAAgC;QAChC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,cAAc,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC;QAEnC,oEAAoE;QACpE,uEAAuE;QACvE,qEAAqE;QACrE,2BAA2B;QAC3B,MAAM,WAAW,GACf,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,SAAS,CAAC,eAAe,CAC/D,+BAA+B,CAChC,CAAC;QACJ,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;QAEnD,MAAM,YAAY,GAAG,gBAAgB,CAAC,oBAAoB,CACxD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,aAAa,EAC1C,WAAW,EACX,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAC9C,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,YAAY,EACZ,2BAA2B,EAC3B,kEAAkE,CACnE,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,WAAW,CACnD,8FAA8F,CAC/F,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YAC/C,IAAI,UAAsD,CAAC;YAC3D,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,iDAAiD;YACjD,iEAAiE;YACjE,qEAAqE;YACrE,mEAAmE;YACnE,iEAAiE;YACjE,MAAM,QAAQ,GAAG,CAAC,SAAkB,EAAQ,EAAE;gBAC5C,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO;gBACT,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;gBACf,mEAAmE;gBACnE,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBACjD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC7B,aAAa,CAAC,UAAU,CAAC,CAAC;oBAC1B,UAAU,GAAG,SAAS,CAAC;gBACzB,CAAC;gBACD,IAAI,CAAC;oBACH,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChB,CAAC;gBAAC,MAAM,CAAC;oBACP,wDAAwD;gBAC1D,CAAC;gBACD,mEAAmE;gBACnE,oEAAoE;gBACpE,oEAAoE;gBACpE,mEAAmE;gBACnE,mEAAmE;gBACnE,yDAAyD;gBACzD,kEAAkE;gBAClE,kEAAkE;gBAClE,qEAAqE;gBACrE,iEAAiE;gBACjE,yCAAyC;gBACzC,EAAE;gBACF,oEAAoE;gBACpE,mEAAmE;gBACnE,mEAAmE;gBACnE,+DAA+D;gBAC/D,qEAAqE;gBACrE,oEAAoE;gBACpE,yCAAyC;gBACzC,IAAI,CAAC,uBAAuB,GAAG,KAAK,CAAC;gBACrC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;gBAC/B,UAAU,CAAC,IAAI,CAAC,4BAA4B,EAAE,CAAC;qBAC5C,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;oBACX,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;oBAChC,IAAI,EAAE,EAAE,CAAC;wBACP,0DAA0D;wBAC1D,mDAAmD;wBACnD,IAAI,CAAC,wBAAwB,GAAG,KAAK,CAAC;wBACtC,IAAI,CAAC,8BAA8B,GAAG,KAAK,CAAC;wBAC5C,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;wBAC7B,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,aAAa,CACrD,qDAAqD,CACtD,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;wBAC7B,IAAI,SAAS,EAAE,CAAC;4BACd,0DAA0D;4BAC1D,2DAA2D;4BAC3D,4DAA4D;4BAC5D,4DAA4D;4BAC5D,yCAAyC;4BACzC,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,WAAW,CACnD,kIAAkI,CACnI,CAAC;wBACJ,CAAC;wBACD,yDAAyD;wBACzD,wDAAwD;wBACxD,uDAAuD;wBACvD,uDAAuD;wBACvD,8DAA8D;oBAChE,CAAC;oBACD,OAAO,CAAC,EAAE,CAAC,CAAC;gBACd,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;oBACxB,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;oBAChC,iBAAiB,CAAC,KAAK,CAAC,CAAC;oBACzB,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;oBAC7B,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,KAAK,CACpC,QAAQ,CAAC,MAAM,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,EAC7D,KAAK,CACN,CAAC;oBACF,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;oBAC7D,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC,CAAC,CAAC;YACP,CAAC,CAAC;YAEF,MAAM,SAAS,GAAG,CAAC,KAAmB,EAAQ,EAAE;gBAC9C,sCAAsC;gBACtC,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;oBACpC,OAAO;gBACT,CAAC;gBACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAiC,CAAC;gBACrD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;oBAC9C,OAAO;gBACT,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC,CAAC;YAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAE9C,kEAAkE;YAClE,kDAAkD;YAClD,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;gBAC5B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBACjB,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,qEAAqE;YACrE,mEAAmE;YACnE,oEAAoE;YACpE,iBAAiB;YACjB,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAClC,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,CAAC,6BAA6B;QACpC,0CAA0C;QAC1C,IAAI,CAAC,mCAAmC;YACtC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,yBAAyB,EAAE,CAAa,CAAC;QACxE,IAAI,IAAI,CAAC,mCAAmC,CAAC,MAAM,EAAE,CAAC;YACpD,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,kBAAkB,CAAC;gBACpD,OAAO,EAAE,2DAA2D;gBACpE,MAAM,EAAE,mDAAmD;gBAC3D,IAAI,EAAE,eAAe,CAAC,OAAO;gBAC7B,OAAO,EAAE;oBACP;wBACE,KAAK,EAAE,uBAAuB;wBAC9B,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,GAAS,EAAE,CAClB,IAAI,CAAC,mCAAmC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACvD,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,SAAS,CAAC,YAAY,CAC5D,GAAG,CACJ,CACF;wBACH,IAAI,EAAE,qBAAqB,CAAC,OAAO;qBACpC;oBACD;wBACE,KAAK,EAAE,MAAM;wBACb,IAAI,EAAE,qBAAqB,CAAC,oBAAoB;wBAChD,OAAO,EAAE,GAAS,EAAE;4BAClB,IAAI,CAAC,qCAAqC,EAAE,CAAC;4BAC7C,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;wBAC7D,CAAC;qBACF;iBACF;aACF,CAAC,CAAC;QACL,CAAC;QAED,6CAA6C;QAC7C,MAAM,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,EAAE,CAAC;QACnD,MAAM,IAAI,CAAC,gBAAgB,CAAC,gCAAgC,EAAE,CAAC;QAE/D,uDAAuD;QACvD,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC;IACtC,CAAC;IAED;;;;;;;;;;OAUG;IACK,CAAC,4BAA4B;QACnC,IAAI,CAAC,gBAAgB;YACnB,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,EAAE,CAAY,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,CAAC,CAAC,IAAI,CAAC,6BAA6B,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,CAAC,0BAA0B;QACjC,IAAI,CAAC;YACH,IAAI,CAAC,gBAAgB;gBACnB,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,EAAE,CAAY,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC3B,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,SAAS,CAAC,WAAW,CAC3D,gBAAgB,CAAC,oBAAoB,CACnC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,aAAa,EAC1C,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,SAAS,CAAC,iBAAiB,EAAE,EACrE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAC9C,CACF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,gEAAgE;gBAChE,KAAK,CAAC,CAAC,IAAI,CAAC,6BAA6B,EAAE,CAAC;YAC9C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACzB;YACE,0CAA0C;YAC1C,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa;gBACtC,KAAK,YAAY,kBAAkB;gBACnC,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,YAAY,EACjD,CAAC;gBACD,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,kBAAkB,CAAC;oBACpD,OAAO,EACL,kKAAkK;oBACpK,IAAI,EAAE,eAAe,CAAC,QAAQ;oBAC9B,OAAO,EAAE;wBACP;4BACE,KAAK,EAAE,yBAAyB;4BAChC,IAAI,EAAE,qBAAqB,CAAC,OAAO;4BACnC,OAAO,EAAE,IAAI;4BACb,OAAO,EAAE,GAAS,EAAE;gCAClB,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,SAAS,CAAC,YAAY,CAC5D,IAAI,CAAC,gBAAgB,CAAC,cAAc,CACrC,CAAC;gCACF,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,gBAAgB,CAAC;oCAClD,OAAO,EACL,6DAA6D;oCAC/D,MAAM,EACJ,6DAA6D;iCAChE,CAAC,CAAC;4BACL,CAAC;yBACF;qBACF;iBACF,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,KAAK,CACpC,QAAQ,CAAC,MAAM,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,EAC7D,KAAK,CACN,CAAC;gBACF,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@finos/legend-application-studio",
-  "version": "28.21.14",
+  "version": "28.21.16",
   "description": "Legend Studio application core",
   "keywords": [
     "legend",
@@ -47,21 +47,21 @@
   },
   "dependencies": {
     "@dagrejs/dagre": "1.1.4",
-    "@finos/legend-application": "16.0.112",
-    "@finos/legend-art": "7.1.153",
-    "@finos/legend-code-editor": "2.0.179",
-    "@finos/legend-data-cube": "0.3.96",
-    "@finos/legend-extension-dsl-data-product": "0.0.89",
-    "@finos/legend-extension-dsl-diagram": "8.1.243",
-    "@finos/legend-graph": "32.6.10",
-    "@finos/legend-lego": "2.0.199",
-    "@finos/legend-query-builder": "4.18.18",
-    "@finos/legend-server-depot": "6.1.13",
-    "@finos/legend-server-lakehouse": "0.3.59",
-    "@finos/legend-server-sdlc": "5.4.4",
-    "@finos/legend-server-showcase": "0.2.66",
-    "@finos/legend-shared": "11.0.25",
-    "@finos/legend-storage": "3.0.146",
+    "@finos/legend-application": "16.0.113",
+    "@finos/legend-art": "7.1.154",
+    "@finos/legend-code-editor": "2.0.181",
+    "@finos/legend-data-cube": "0.3.98",
+    "@finos/legend-extension-dsl-data-product": "0.0.91",
+    "@finos/legend-extension-dsl-diagram": "8.1.245",
+    "@finos/legend-graph": "32.6.12",
+    "@finos/legend-lego": "2.0.201",
+    "@finos/legend-query-builder": "4.18.20",
+    "@finos/legend-server-depot": "6.1.14",
+    "@finos/legend-server-lakehouse": "0.3.61",
+    "@finos/legend-server-sdlc": "5.4.5",
+    "@finos/legend-server-showcase": "0.2.67",
+    "@finos/legend-shared": "11.0.26",
+    "@finos/legend-storage": "3.0.147",
     "@testing-library/dom": "10.4.0",
     "@testing-library/react": "16.2.0",
     "@types/react": "19.0.10",

package/src/application/LegendStudioApplicationConfig.ts

@@ -182,7 +182,27 @@ class LegendStudioApplicationCoreOptions {
 
 export interface LegendStudioApplicationConfigurationData
   extends LegendApplicationConfigurationData {
-  sdlc: { url: string; baseHeaders?: RequestHeaders; client?: string };
+  sdlc: {
+    url: string;
+    baseHeaders?: RequestHeaders;
+    client?: string;
+    /**
+     * Enable the popup-based SDLC re-authentication flow.
+     *
+     * When `true`, Studio surfaces a "Re-authenticate with SDLC" action
+     * and (on a mid-session 401) automatically opens a popup that completes
+     * the OAuth dance against the SDLC server — preserving all in-memory
+     * editor state instead of doing a top-level navigation that wipes it.
+     *
+     * The popup uses a same-origin static page as its OAuth `redirect_uri`,
+     * derived at runtime from Studio's own origin + base URL (the same way
+     * the boot-time `/auth/authorize` flow constructs its `redirect_uri`).
+     * The deployment ships that page at `<base-url>/popup-callback.html`;
+     * deployments that enable this flag must register that derived URL on
+     * the SDLC server's OAuth client allow-list.
+     */
+    enablePopupReAuth?: boolean;
+  };
   depot: { url: string };
   engine: {
     url: string;
@@ -203,6 +223,7 @@ export class LegendStudioApplicationConfig extends LegendApplicationConfig {
   readonly sdlcServerUrl: string;
   readonly sdlcServerBaseHeaders?: RequestHeaders | undefined;
   readonly sdlcServerClient?: string | undefined;
+  readonly sdlcEnablePopupReAuth: boolean;
   readonly queryApplicationUrl?: string | undefined;
   readonly showcaseServerUrl?: string | undefined;
   readonly pctReportUrl?: string | undefined;
@@ -255,6 +276,9 @@ export class LegendStudioApplicationConfig extends LegendApplicationConfig {
     );
     this.sdlcServerBaseHeaders = input.configData.sdlc.baseHeaders;
     this.sdlcServerClient = input.configData.sdlc.client;
+    this.sdlcEnablePopupReAuth = Boolean(
+      input.configData.sdlc.enablePopupReAuth,
+    );
 
     // query
     if (input.configData.query?.url) {

package/src/components/editor/StatusBar.tsx

@@ -28,6 +28,7 @@ import {
   AssistantIcon,
   ErrorIcon,
   WarningIcon,
+  ShieldIcon,
 } from '@finos/legend-art';
 import { LEGEND_STUDIO_TEST_ID } from '../../__lib__/LegendStudioTesting.js';
 import {
@@ -42,7 +43,10 @@ import {
 import { flowResult } from 'mobx';
 import { useEditorStore } from './EditorStoreProvider.js';
 import { WorkspaceType } from '@finos/legend-server-sdlc';
-import { useLegendStudioApplicationStore } from '../LegendStudioFrameworkProvider.js';
+import {
+  useLegendStudioApplicationStore,
+  useLegendStudioBaseStore,
+} from '../LegendStudioFrameworkProvider.js';
 import { useParams } from '@finos/legend-application/browser';
 import { guaranteeNonNullable } from '@finos/legend-shared';
 
@@ -51,6 +55,7 @@ export const StatusBar = observer((props: { actionsDisabled: boolean }) => {
   const params = useParams<WorkspaceEditorPathParams>();
   const editorStore = useEditorStore();
   const applicationStore = useLegendStudioApplicationStore();
+  const baseStore = useLegendStudioBaseStore();
   const isInConflictResolutionMode = editorStore.isInConflictResolutionMode;
   // SDLC
   const projectId = params.projectId;
@@ -392,6 +397,21 @@ export const StatusBar = observer((props: { actionsDisabled: boolean }) => {
         >
           <HackerIcon />
         </button>
+        {baseStore.isSDLCPopupReAuthEnabled && (
+          <button
+            className="editor__status-bar__action"
+            disabled={baseStore.popupReAuthState.isInProgress}
+            onClick={(): void => {
+              baseStore
+                .reAuthorizeSDLCInPopup()
+                .catch(applicationStore.alertUnhandledError);
+            }}
+            tabIndex={-1}
+            title="Re-authenticate with SDLC (preserves local state)"
+          >
+            <ShieldIcon />
+          </button>
+        )}
         <button
           className={clsx(
             'editor__status-bar__action editor__status-bar__action__toggler',