@rapidmx/web-client 0.20.0 → 0.22.0

package/dist/apps/shared/components/calendar/layout/CalendarShell.d.ts

@@ -1,5 +1,5 @@
 import React, { PropsWithChildren } from "react";
-import { Folder, Mailbox } from "@rapidmx/react-shared/mail/mailApi.js";
+import { Folder, Mailbox } from "../../../../../lib/mail/mailApi.js";
 import { AppShellProps } from "../../layout/AppShell.js";
 export type CalendarShellProps = Omit<AppShellProps, "active">;
 /** One mailbox's own `calendar`-type folders. `error` is set (and `calendarFolders` left empty) when that

package/dist/apps/shared/components/calendar/layout/CalendarShell.js

@@ -4,11 +4,12 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
 import { createContext, useCallback, useContext, useEffect, useMemo, useState } from "react";
-import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import { accentColorForMailbox, colorForFolder } from "@rapidmx/react-shared/calendar/calendarColors.js";
-import { listFolders, listMailboxes } from "@rapidmx/react-shared/mail/mailApi.js";
-import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
-import Skeleton, { SkeletonList } from "@rapidmx/react-shared/components/feedback/Skeleton.js";
+import { ApiRequestError } from "../../../../../lib/util/api.js";
+import { useApiClient } from "../../../../../lib/util/apiClientContext.js";
+import { accentColorForMailbox, colorForFolder } from "../../../../../lib/calendar/calendarColors.js";
+import { listFolders, listMailboxes } from "../../../../../lib/mail/mailApi.js";
+import Alert from "../../../../../lib/components/feedback/Alert.js";
+import Skeleton, { SkeletonList } from "../../../../../lib/components/feedback/Skeleton.js";
 import AppShell from "../../layout/AppShell.js";
 import { useLocation } from "../../../navigation/index.js";
 import MailboxProvisioning from "../../layout/MailboxProvisioning.js";
@@ -32,6 +33,7 @@ export function useCalendarShell() {
  * views/dates must be instant (no full page reload) and this framework has no client-side router.
  */
 export default function CalendarShell({ userUid, authServerUrl, impersonating, impersonationBaseUrl, trusted, trustedRoles, pluginNav, children, }) {
+    const client = useApiClient();
     const [status, setStatus] = useState("checking");
     const [error, setError] = useState(null);
     const [mailboxes, setMailboxes] = useState([]);
@@ -48,7 +50,7 @@ export default function CalendarShell({ userUid, authServerUrl, impersonating, i
         if (!userUid) {
             return;
         }
-        listMailboxes({ limit: 100 })
+        listMailboxes({ limit: 100 }, client)
             .then((result) => {
             setMailboxes(orderMailboxes(result, userUid));
             setStatus("ready");
@@ -57,7 +59,7 @@ export default function CalendarShell({ userUid, authServerUrl, impersonating, i
             setError(err instanceof ApiRequestError ? err.message : "Could not load your mailboxes.");
             setStatus("error");
         });
-    }, [userUid]);
+    }, [userUid, client]);
     const ownMailboxUid = primaryMailboxUid(mailboxes, userUid);
     const mailboxUid = (requestedMailboxUid && mailboxes.some((mb) => mb.uid === requestedMailboxUid) ? requestedMailboxUid : undefined) ??
         ownMailboxUid;
@@ -67,7 +69,7 @@ export default function CalendarShell({ userUid, authServerUrl, impersonating, i
             return;
         }
         let cancelled = false;
-        void Promise.all(mailboxes.map((mailbox) => listFolders(mailbox.uid)
+        void Promise.all(mailboxes.map((mailbox) => listFolders(mailbox.uid, client)
             .then((folders) => ({ mailbox, calendarFolders: folders.filter((f) => f.type === "calendar") }))
             .catch((err) => ({
             mailbox,
@@ -81,7 +83,7 @@ export default function CalendarShell({ userUid, authServerUrl, impersonating, i
         return () => {
             cancelled = true;
         };
-    }, [mailboxes, folderRefreshToken]);
+    }, [mailboxes, folderRefreshToken, client]);
     const calendarFolders = useMemo(() => mailboxCalendars.flatMap((mc) => mc.calendarFolders), [mailboxCalendars]);
     const folderUid = calendarFolders.find((f) => f.mailboxUid === mailboxUid)?.uid;
     const colorFor = useCallback((folder) => colorForFolder(folder, folder.mailboxUid === ownMailboxUid ? undefined : accentColorForMailbox(folder.mailboxUid)), [ownMailboxUid]);

package/dist/apps/shared/components/contacts/ContactDetailPane.d.ts

@@ -1,5 +1,5 @@
 import React from "react";
-import { Contact } from "@rapidmx/react-shared/contacts/contactsApi.js";
+import { Contact } from "../../../../lib/contacts/contactsApi.js";
 export interface ContactDetailPaneProps {
     contact: Contact;
     onEdit: () => void;

package/dist/apps/shared/components/contacts/ContactDetailPane.js

@@ -4,8 +4,8 @@ import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
 import { useState } from "react";
-import Button from "@rapidmx/react-shared/components/buttons/Button.js";
-import ContactAvatar from "@rapidmx/react-shared/components/avatar/ContactAvatar.js";
+import Button from "../../../../lib/components/buttons/Button.js";
+import ContactAvatar from "../../../../lib/components/avatar/ContactAvatar.js";
 import KeyChangeReview from "./KeyChangeReview.js";
 import { KEY_CHANGE_STALE_MESSAGE, formatDate, keyPinnedSince, revocationLabel } from "./contactKeys.js";
 import { clearPinnedSignerCache } from "../mail/pinnedSigners.js";

package/dist/apps/shared/components/contacts/ContactForm.d.ts

@@ -1,6 +1,6 @@
 import React from "react";
-import { Contact } from "@rapidmx/react-shared/contacts/contactsApi.js";
-import { Mailbox } from "@rapidmx/react-shared/mail/mailApi.js";
+import { Contact } from "../../../../lib/contacts/contactsApi.js";
+import { Mailbox } from "../../../../lib/mail/mailApi.js";
 export interface ContactFormProps {
     contact?: Contact;
     /** Create mode: the default mailbox (and its Contacts folder) to create in. */

package/dist/apps/shared/components/contacts/ContactForm.js

@@ -4,11 +4,12 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
 import { useState } from "react";
-import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import { createContact, updateContact, } from "@rapidmx/react-shared/contacts/contactsApi.js";
-import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
-import Button from "@rapidmx/react-shared/components/buttons/Button.js";
-import FormField from "@rapidmx/react-shared/components/forms/FormField.js";
+import { ApiRequestError } from "../../../../lib/util/api.js";
+import { createContact, updateContact, } from "../../../../lib/contacts/contactsApi.js";
+import Alert from "../../../../lib/components/feedback/Alert.js";
+import Button from "../../../../lib/components/buttons/Button.js";
+import FormField from "../../../../lib/components/forms/FormField.js";
+import { useApiClient } from "../../../../lib/util/apiClientContext.js";
 import { findWellKnownFolderUid } from "../../mail/findWellKnownFolderUid.js";
 import { clearPinnedSignerCache } from "../mail/pinnedSigners.js";
 const INPUT_CLASS = "w-full text-sm py-2 px-3 border border-border rounded-sm bg-surface text-text focus:outline-none focus:border-primary";
@@ -20,6 +21,7 @@ const ADDRESS_KINDS = ["home", "work", "other"];
  * desktop-and-mobile-inline (see that route's own doc comment on why "new" never gets a dedicated route).
  */
 export default function ContactForm({ contact, mailboxUid, folderUid, mailboxes, onSaved, onCancel }) {
+    const client = useApiClient();
     const [targetMailboxUid, setTargetMailboxUid] = useState(mailboxUid);
     const [displayName, setDisplayName] = useState(contact?.displayName ?? "");
     const [givenName, setGivenName] = useState(contact?.givenName ?? "");
@@ -89,10 +91,12 @@ export default function ContactForm({ contact, mailboxUid, folderUid, mailboxes,
                     uid: contact.uid,
                     version: contact.version,
                     ...input,
-                });
+                }, client);
             }
             else {
-                const targetFolderUid = targetMailboxUid === mailboxUid ? folderUid : await findWellKnownFolderUid(targetMailboxUid, "contacts");
+                const targetFolderUid = targetMailboxUid === mailboxUid
+                    ? folderUid
+                    : await findWellKnownFolderUid(targetMailboxUid, "contacts", client);
                 if (!targetFolderUid) {
                     setError("That mailbox has no Contacts folder.");
                     return;
@@ -101,7 +105,7 @@ export default function ContactForm({ contact, mailboxUid, folderUid, mailboxes,
                     mailboxUid: targetMailboxUid,
                     folderUid: targetFolderUid,
                     ...input,
-                });
+                }, client);
             }
             // A message opened later in this page load must see the changed contact's signing keys.
             clearPinnedSignerCache();

package/dist/apps/shared/components/contacts/ContactsSidebar.d.ts

@@ -1,5 +1,5 @@
 import React from "react";
-import { Contact } from "@rapidmx/react-shared/contacts/contactsApi.js";
+import { Contact } from "../../../../lib/contacts/contactsApi.js";
 export type ContactsView = {
     type: "all";
 } | {

package/dist/apps/shared/components/contacts/ContactsSidebar.js

@@ -5,9 +5,10 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 ///////////////////////////////////////////////////////////////////////////////
 import { useEffect, useMemo, useState } from "react";
 import { HiOutlineBars3 } from "react-icons/hi2";
-import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import { createContactList, listContactLists } from "@rapidmx/react-shared/contacts/contactsApi.js";
-import Drawer from "@rapidmx/react-shared/components/overlays/Drawer.js";
+import { ApiRequestError } from "../../../../lib/util/api.js";
+import { createContactList, listContactLists } from "../../../../lib/contacts/contactsApi.js";
+import Drawer from "../../../../lib/components/overlays/Drawer.js";
+import { useApiClient } from "../../../../lib/util/apiClientContext.js";
 import { notifyApiError } from "../../notifications/apiErrors.js";
 export function contactsViewKey(view) {
     switch (view.type) {
@@ -45,6 +46,7 @@ function NavItem({ label, count, active, onClick, swatch, }) {
  * `ContactsShellContext` itself minimal (mailbox/folder resolution only).
  */
 export default function ContactsSidebar({ mailboxUid, contacts, active, onSelect, refreshToken, showDeleted = true }) {
+    const client = useApiClient();
     const [lists, setLists] = useState([]);
     const [listsError, setListsError] = useState(null);
     const [addingList, setAddingList] = useState(false);
@@ -56,7 +58,7 @@ export default function ContactsSidebar({ mailboxUid, contacts, active, onSelect
             return;
         }
         setListsError(null);
-        listContactLists(mailboxUid, { limit: 200 })
+        listContactLists(mailboxUid, { limit: 200 }, client)
             .then(setLists)
             .catch((err) => setListsError(err instanceof ApiRequestError ? err.message : "Could not load contact lists."));
     }, [mailboxUid, refreshToken]);
@@ -85,7 +87,7 @@ export default function ContactsSidebar({ mailboxUid, contacts, active, onSelect
             return;
         }
         try {
-            const created = await createContactList({ mailboxUid, name: newListName.trim() });
+            const created = await createContactList({ mailboxUid, name: newListName.trim() }, client);
             setLists((prev) => [...prev, created].sort((a, b) => a.name.localeCompare(b.name)));
             setNewListName("");
             setAddingList(false);

package/dist/apps/shared/components/contacts/KeyChangeReview.d.ts

@@ -1,5 +1,5 @@
 import React from "react";
-import { type KeyConflict } from "@rapidmx/react-shared/crypto/keyvaultApi.js";
+import { type KeyConflict } from "../../../../lib/crypto/keyvaultApi.js";
 export interface KeyChangeReviewProps {
     /** The mailbox whose contact holds the pinned key. */
     mailboxUid: string;

package/dist/apps/shared/components/contacts/KeyChangeReview.js

@@ -4,11 +4,11 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
 import { useState } from "react";
-import { PinnedKeyChangedError, resolveKeyConflict } from "@rapidmx/react-shared/crypto/keyvaultApi.js";
-import Modal from "@rapidmx/react-shared/components/overlays/Modal.js";
-import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
-import Button from "@rapidmx/react-shared/components/buttons/Button.js";
-import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
+import { PinnedKeyChangedError, resolveKeyConflict } from "../../../../lib/crypto/keyvaultApi.js";
+import Modal from "../../../../lib/components/overlays/Modal.js";
+import Alert from "../../../../lib/components/feedback/Alert.js";
+import Button from "../../../../lib/components/buttons/Button.js";
+import { ApiRequestError } from "../../../../lib/util/api.js";
 import { conflictSourceLabel, formatDate, groupFingerprint, keyChangeErrorMessage } from "./contactKeys.js";
 /**
  * The old-versus-new comparison for a changed contact key, with Accept new key (confirmed in a dialog) and Keep current

package/dist/apps/shared/components/contacts/contactKeys.d.ts

@@ -1,5 +1,5 @@
-import type { Contact } from "@rapidmx/react-shared/contacts/contactsApi.js";
-import { type KeyConflict, type PublicKey } from "@rapidmx/react-shared/crypto/keyvaultApi.js";
+import type { Contact } from "../../../../lib/contacts/contactsApi.js";
+import { type KeyConflict, type PublicKey } from "../../../../lib/crypto/keyvaultApi.js";
 export declare const KEY_CHANGE_STALE_MESSAGE = "This contact's keys changed while you were looking; reload to see the latest.";
 export declare const KEY_CHANGE_INVALID_MESSAGE = "The new key isn't a valid, current certificate for this address, so it can't be accepted. Nothing was changed.";
 export declare const KEY_CHANGE_FORBIDDEN_MESSAGE = "You don't have permission to change this contact's keys.";

package/dist/apps/shared/components/contacts/contactKeys.js

@@ -4,8 +4,8 @@
 ///////////////////////////////////////////////////////////////////////////////
 /** Display and error helpers for a contact's pinned keys and key changes (`KeyChangeReview`, `ContactDetailPane`,
  * `MessageDetailPane`). */
-import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import { PinnedKeyChangedError } from "@rapidmx/react-shared/crypto/keyvaultApi.js";
+import { ApiRequestError } from "../../../../lib/util/api.js";
+import { PinnedKeyChangedError } from "../../../../lib/crypto/keyvaultApi.js";
 export const KEY_CHANGE_STALE_MESSAGE = "This contact's keys changed while you were looking; reload to see the latest.";
 export const KEY_CHANGE_INVALID_MESSAGE = "The new key isn't a valid, current certificate for this address, so it can't be accepted. Nothing was changed.";
 export const KEY_CHANGE_FORBIDDEN_MESSAGE = "You don't have permission to change this contact's keys.";

package/dist/apps/shared/components/contacts/layout/ContactsShell.d.ts

@@ -1,5 +1,5 @@
 import React, { PropsWithChildren } from "react";
-import { Mailbox } from "@rapidmx/react-shared/mail/mailApi.js";
+import { Mailbox } from "../../../../../lib/mail/mailApi.js";
 import { AppShellProps } from "../../layout/AppShell.js";
 export type ContactsShellProps = Omit<AppShellProps, "active">;
 export interface ContactsShellContextValue {

package/dist/apps/shared/components/contacts/layout/ContactsShell.js

@@ -5,11 +5,12 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 ///////////////////////////////////////////////////////////////////////////////
 import { createContext, useContext, useEffect, useMemo, useState } from "react";
 import { HiOutlineBars3 } from "react-icons/hi2";
-import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import Drawer from "@rapidmx/react-shared/components/overlays/Drawer.js";
-import { listFolders, listMailboxes } from "@rapidmx/react-shared/mail/mailApi.js";
-import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
-import Skeleton, { SkeletonList } from "@rapidmx/react-shared/components/feedback/Skeleton.js";
+import { ApiRequestError } from "../../../../../lib/util/api.js";
+import Drawer from "../../../../../lib/components/overlays/Drawer.js";
+import { listFolders, listMailboxes } from "../../../../../lib/mail/mailApi.js";
+import { useApiClient } from "../../../../../lib/util/apiClientContext.js";
+import Alert from "../../../../../lib/components/feedback/Alert.js";
+import Skeleton, { SkeletonList } from "../../../../../lib/components/feedback/Skeleton.js";
 import AppShell from "../../layout/AppShell.js";
 import { useLocation, useNavigate } from "../../../navigation/index.js";
 import MailboxProvisioning from "../../layout/MailboxProvisioning.js";
@@ -27,6 +28,7 @@ export function useContactsShell() {
  * list/detail UI is `apps/www/contacts/index.tsx`'s own content, rendered as `children` here.
  */
 export default function ContactsShell({ userUid, authServerUrl, impersonating, impersonationBaseUrl, trusted, trustedRoles, pluginNav, children, }) {
+    const client = useApiClient();
     const [status, setStatus] = useState("checking");
     const [error, setError] = useState(null);
     const [mailboxes, setMailboxes] = useState([]);
@@ -50,7 +52,7 @@ export default function ContactsShell({ userUid, authServerUrl, impersonating, i
         if (!userUid) {
             return;
         }
-        listMailboxes({ limit: 100 })
+        listMailboxes({ limit: 100 }, client)
             .then((result) => {
             setMailboxes(orderMailboxes(result, userUid));
             setStatus("ready");
@@ -68,7 +70,7 @@ export default function ContactsShell({ userUid, authServerUrl, impersonating, i
             return;
         }
         setFolderError(null);
-        listFolders(mailboxUid)
+        listFolders(mailboxUid, client)
             .then(setFolders)
             .catch((err) => setFolderError(err instanceof ApiRequestError ? err.message : "Could not load this mailbox's contacts folder."));
     }, [mailboxUid]);

package/dist/apps/shared/components/escrow/layout/EscrowShell.js

@@ -6,12 +6,12 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import "../../../styles/app.css";
 import { useEffect, useState } from "react";
 import { HiOutlineClipboardDocumentList, HiOutlineFolderOpen } from "react-icons/hi2";
-import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import { listMatters } from "@rapidmx/react-shared/admin/mattersApi.js";
-import { useRedirectIfUnauthenticated } from "@rapidmx/react-shared/auth/session.js";
-import { getBranding } from "@rapidmx/react-shared/branding/brandingApi.js";
-import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
-import BottomTabBar from "@rapidmx/react-shared/components/navigation/BottomTabBar.js";
+import { ApiRequestError } from "../../../../../lib/util/api.js";
+import { listMatters } from "../../../../../lib/admin/mattersApi.js";
+import { useSessionRefresh } from "../../../../../lib/auth/session.js";
+import { getBranding } from "../../../../../lib/branding/brandingApi.js";
+import Alert from "../../../../../lib/components/feedback/Alert.js";
+import BottomTabBar from "../../../../../lib/components/navigation/BottomTabBar.js";
 import UserMenu from "../../layout/UserMenu.js";
 import RailIcon from "../../layout/RailIcon.js";
 import AppearanceProvider from "../../../appearance/AppearanceProvider.js";
@@ -41,7 +41,7 @@ export default function EscrowShell({ active, userUid, authServerUrl, children }
     const [status, setStatus] = useState("checking");
     const [error, setError] = useState(null);
     const [iconSrc, setIconSrc] = useState(DEFAULT_ICON_SRC);
-    useRedirectIfUnauthenticated(userUid, authServerUrl);
+    useSessionRefresh(userUid, authServerUrl);
     // Only the icon is taken from branding here. The escrow console deliberately skips `useBranding()`, which
     // would inject the custom stylesheet, and never renders the admin-configured header/footer HTML - this
     // console handles escrow key material, so no admin-supplied markup or CSS runs on it.

package/dist/apps/shared/components/forms/StringListField.js

@@ -4,7 +4,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
 import { useState } from "react";
-import Button from "@rapidmx/react-shared/components/buttons/Button.js";
+import Button from "../../../../lib/components/buttons/Button.js";
 /**
  * A plain, controlled add/remove list-of-strings editor — the same visual add-row/per-item-remove shape
  * `MemberListCard` already established for a `DistributionList`'s `memberAddresses`, but operating on a

package/dist/apps/shared/components/layout/AppShell.d.ts

@@ -1,8 +1,8 @@
 import "../../styles/app.css";
 import React, { PropsWithChildren } from "react";
 import type { IconType } from "react-icons";
-import { NavItem } from "@rapidmx/react-shared/components/navigation/BottomTabBar.js";
-import type { Branding } from "@rapidmx/react-shared/branding/brandingApi.js";
+import { NavItem } from "../../../../lib/components/navigation/BottomTabBar.js";
+import type { Branding } from "../../../../lib/branding/brandingApi.js";
 import { PluginNav, PluginNavProps } from "../../plugins/pluginNav.js";
 /** How long sign-out waits for auth-server's logout before navigating anyway. */
 export declare const LOGOUT_TIMEOUT_MS = 3000;

package/dist/apps/shared/components/layout/AppShell.js

@@ -7,14 +7,15 @@ import "../../styles/app.css";
 import { useEffect, useLayoutEffect, useRef, useState } from "react";
 import { HiOutlineCalendarDays, HiOutlineClipboardDocumentList, HiOutlineEnvelope, HiOutlinePuzzlePiece, HiOutlineUsers, } from "react-icons/hi2";
 import { useRouter } from "@rapidrest/react/client";
-import { useRedirectIfUnauthenticated } from "@rapidmx/react-shared/auth/session.js";
-import { getSetupStatus } from "@rapidmx/react-shared/admin/setupApi.js";
-import { stopImpersonating } from "@rapidmx/react-shared/mail/mailApi.js";
-import useBranding from "@rapidmx/react-shared/branding/useBranding.js";
-import { useIdleKeyTimeout } from "@rapidmx/react-shared/crypto/useIdleKeyTimeout.js";
+import { useSessionRefresh } from "../../../../lib/auth/session.js";
+import { getSetupStatus } from "../../../../lib/admin/setupApi.js";
+import { stopImpersonating } from "../../../../lib/mail/mailApi.js";
+import { useApiClient } from "../../../../lib/util/apiClientContext.js";
+import useBranding from "../../../../lib/branding/useBranding.js";
+import { useIdleKeyTimeout } from "../../../../lib/crypto/useIdleKeyTimeout.js";
 import ComposeProvider from "../mail/compose/ComposeContext.js";
 import { flushComposeDrafts, markSigningOut } from "../mail/compose/composeFlushRegistry.js";
-import BottomTabBar from "@rapidmx/react-shared/components/navigation/BottomTabBar.js";
+import BottomTabBar from "../../../../lib/components/navigation/BottomTabBar.js";
 import { FrameBrandingFooter, FrameBrandingHeader, useBrandingHtml } from "./BrandingChrome.js";
 import RailIcon from "./RailIcon.js";
 import AppearanceProvider from "../../appearance/AppearanceProvider.js";
@@ -22,8 +23,8 @@ import { clearAppearanceCache } from "../../appearance/appearanceCache.js";
 import UserMenu from "./UserMenu.js";
 import { UnlockPromptProvider } from "./UnlockPromptProvider.js";
 import { SIGN_OUT_CHANNEL, destroyAllLocalIndexes } from "../../search/localIndexRpcClient.js";
-import { authApiFetch, setApiUnauthorizedObserver } from "@rapidmx/react-shared/util/api.js";
-import { destroyUnlockedKeys } from "@rapidmx/react-shared/crypto/keySession.js";
+import { authApiFetch, setApiUnauthorizedObserver } from "../../../../lib/util/api.js";
+import { destroyUnlockedKeys } from "../../../../lib/crypto/keySession.js";
 import { clearPinnedSignerCache } from "../mail/pinnedSigners.js";
 import { mergePluginNavItems } from "../../plugins/pluginNav.js";
 import { useInAppFrame } from "../../navigation/frameContext.js";
@@ -89,6 +90,7 @@ export function appRailItems(pluginNav) {
  * page, so that moving between apps replaces only `children` - see `AppShell` below for what a page's own shell renders instead.
  */
 export function AppChrome({ active, userUid, authServerUrl, impersonating, impersonationBaseUrl, trusted, trustedRoles, branding: initialBranding, appearance, pluginNav, busy, hideChrome, children, }) {
+    const client = useApiClient();
     const [stoppingImpersonation, setStoppingImpersonation] = useState(false);
     // The keyboard shortcuts dialog: opened by `?`/Ctrl+/ (`GlobalShortcuts`) and by the account menu's item.
     const [shortcutsOpen, setShortcutsOpen] = useState(false);
@@ -118,7 +120,9 @@ export function AppChrome({ active, userUid, authServerUrl, impersonating, imper
     useSigningEnrollmentWatcher({ userUid, mailboxes: mail.mailboxes, enabled: inFrame });
     // A meeting reminder pops up on whichever page they are - see the hook.
     useCalendarReminders({ userUid, enabled: inFrame });
-    useRedirectIfUnauthenticated(userUid, authServerUrl);
+    // A refused refresh means the sign-in has ended: open compose windows save what they hold (the access token still works for a while) and the
+    // browser goes to sign-in. Not while viewing as another user - the refresh cookie is the admin's own, and refreshing would end the impersonation.
+    useSessionRefresh(userUid, authServerUrl, { paused: impersonating, beforeRedirect: () => flushComposeDrafts(LOGOUT_TIMEOUT_MS) });
     // Any request this app makes that the server answers with a 401 - the session ended - raises one "Your session expired" pop-up with a
     // Sign in action (see `notifySessionExpired()`), whichever request noticed first, a background refresh included.
     useEffect(() => {
@@ -139,7 +143,7 @@ export function AppChrome({ active, userUid, authServerUrl, impersonating, imper
         if (!userUid || impersonating || !trusted) {
             return;
         }
-        getSetupStatus()
+        getSetupStatus(client)
             .then((status) => {
             if (status.required) {
                 window.location.href = "/admin/setup";

package/dist/apps/shared/components/layout/BrandingChrome.d.ts

@@ -1,5 +1,5 @@
 import React, { ReactNode } from "react";
-import type { Branding } from "@rapidmx/react-shared/branding/brandingApi.js";
+import type { Branding } from "../../../../lib/branding/brandingApi.js";
 /** The attribute that marks the elements React fills in (`{USER_MENU}`, `{APP_TITLE}`). Stripped from the author's own HTML, so only
  * this module's placeholders can carry it. */
 export declare const SLOT_ATTRIBUTE = "data-rr-slot";

package/dist/apps/shared/components/layout/KeyEnrollmentGate.d.ts

@@ -1,5 +1,5 @@
 import React from "react";
-import { PublicKey } from "@rapidmx/react-shared/crypto/keyvaultApi.js";
+import { PublicKey } from "../../../../lib/crypto/keyvaultApi.js";
 export interface KeyEnrollmentGateProps {
     /** Undefined while the caller's mailbox hasn't resolved yet (or has none) - renders `children`
      * unchanged in that case, so this component can be mounted unconditionally at a stable tree

package/dist/apps/shared/components/layout/KeyEnrollmentGate.js

@@ -4,18 +4,18 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
 import { useEffect, useState } from "react";
-import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
-import Button from "@rapidmx/react-shared/components/buttons/Button.js";
-import FormField from "@rapidmx/react-shared/components/forms/FormField.js";
-import { enrollKey, getKeyVault, VaultAlreadyInitializedError } from "@rapidmx/react-shared/crypto/keyvaultApi.js";
+import { ApiRequestError } from "../../../../lib/util/api.js";
+import Alert from "../../../../lib/components/feedback/Alert.js";
+import Button from "../../../../lib/components/buttons/Button.js";
+import FormField from "../../../../lib/components/forms/FormField.js";
+import { enrollKey, getKeyVault, VaultAlreadyInitializedError } from "../../../../lib/crypto/keyvaultApi.js";
 import { UnopenableKeysNotice, unlockErrorMessage } from "./UnlockPromptProvider.js";
 import { FrameTakeover } from "../../navigation/frameContext.js";
 import { RecoveryFollowUpModal, UnlockModeToggle, startRecoveryUnlock } from "./RecoveryCodeUnlock.js";
-import { ENCRYPTION_PRIVATE_KEY_AAD_PURPOSE, getUnlockedKeys, unlockWithPassword, } from "@rapidmx/react-shared/crypto/keySession.js";
-import { buildAad, generateMasterKey, sealWithKey } from "@rapidmx/react-shared/crypto/masterKey.js";
-import { buildPasswordWrap, buildRecoveryWraps } from "@rapidmx/react-shared/crypto/masterKeyWraps.js";
-import { exportPrivateKeyPkcs8, generateKeyPairWithCsr } from "@rapidmx/react-shared/crypto/keys.js";
+import { ENCRYPTION_PRIVATE_KEY_AAD_PURPOSE, getUnlockedKeys, unlockWithPassword, } from "../../../../lib/crypto/keySession.js";
+import { buildAad, generateMasterKey, sealWithKey } from "../../../../lib/crypto/masterKey.js";
+import { buildPasswordWrap, buildRecoveryWraps } from "../../../../lib/crypto/masterKeyWraps.js";
+import { exportPrivateKeyPkcs8, generateKeyPairWithCsr } from "../../../../lib/crypto/keys.js";
 const MIN_PASSWORD_LENGTH = 8;
 async function provisionEncryptionKey(mailboxUid, mailboxAddress, password) {
     const mk = generateMasterKey();

package/dist/apps/shared/components/layout/MailboxProvisioning.js

@@ -4,10 +4,11 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
 import { useEffect, useState } from "react";
-import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import { autoProvisionMailbox } from "@rapidmx/react-shared/mail/mailApi.js";
-import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
-import Button from "@rapidmx/react-shared/components/buttons/Button.js";
+import { ApiRequestError } from "../../../../lib/util/api.js";
+import { autoProvisionMailbox } from "../../../../lib/mail/mailApi.js";
+import { useApiClient } from "../../../../lib/util/apiClientContext.js";
+import Alert from "../../../../lib/components/feedback/Alert.js";
+import Button from "../../../../lib/components/buttons/Button.js";
 import { FrameTakeover } from "../../navigation/frameContext.js";
 /** What the "Retry" screen says: the server couldn't read its provisioning policy (503) ... */
 const RETRY_POLICY_TEXT = "We couldn\u2019t check whether a mailbox can be set up for you. Please try again.";
@@ -43,6 +44,7 @@ function unavailableReason(err) {
  * administrator they ask can tell why - see `unavailableReason()`.
  */
 export default function MailboxProvisioning() {
+    const client = useApiClient();
     const [status, setStatus] = useState("checking");
     const [options, setOptions] = useState([]);
     const [selected, setSelected] = useState("");
@@ -54,7 +56,7 @@ export default function MailboxProvisioning() {
     const [attempt, setAttempt] = useState(0);
     useEffect(() => {
         setStatus("checking");
-        autoProvisionMailbox()
+        autoProvisionMailbox(undefined, client)
             .then((result) => {
             if (result.status === "needs_selection") {
                 // `autoProvision()` only ever returns this status with a non-empty cross product of
@@ -93,7 +95,7 @@ export default function MailboxProvisioning() {
         setStatus("creating");
         setError(null);
         try {
-            await autoProvisionMailbox({ alias: option.alias, domain: option.domain });
+            await autoProvisionMailbox({ alias: option.alias, domain: option.domain }, client);
             window.location.reload();
         }
         catch (err) {

package/dist/apps/shared/components/layout/RecoveryCodeUnlock.d.ts

@@ -8,7 +8,7 @@
  * on the unlock straight away, and then show `RecoveryFollowUpModal` for the follow-up steps.
  */
 import React from "react";
-import { type PublicKey } from "@rapidmx/react-shared/crypto/keyvaultApi.js";
+import { type PublicKey } from "../../../../lib/crypto/keyvaultApi.js";
 /** The same minimum every other "set an encryption password" form in this app uses. */
 export declare const MIN_PASSWORD_LENGTH = 8;
 /** Where recovery codes are regenerated. */

package/dist/apps/shared/components/layout/RecoveryCodeUnlock.js

@@ -13,15 +13,15 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
  * on the unlock straight away, and then show `RecoveryFollowUpModal` for the follow-up steps.
  */
 import { useState } from "react";
-import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import { getUnlockedKeys, unlockWithRecoveryCode } from "@rapidmx/react-shared/crypto/keySession.js";
-import { getKeyVault } from "@rapidmx/react-shared/crypto/keyvaultApi.js";
-import { KeysLockedError } from "@rapidmx/react-shared/crypto/masterKey.js";
-import { PasswordWrapReplaceError, consumeRecoveryCode, replacePasswordWrap, } from "@rapidmx/react-shared/crypto/masterKeyWraps.js";
-import Modal from "@rapidmx/react-shared/components/overlays/Modal.js";
-import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
-import Button from "@rapidmx/react-shared/components/buttons/Button.js";
-import FormField from "@rapidmx/react-shared/components/forms/FormField.js";
+import { ApiRequestError } from "../../../../lib/util/api.js";
+import { getUnlockedKeys, unlockWithRecoveryCode } from "../../../../lib/crypto/keySession.js";
+import { getKeyVault } from "../../../../lib/crypto/keyvaultApi.js";
+import { KeysLockedError } from "../../../../lib/crypto/masterKey.js";
+import { PasswordWrapReplaceError, consumeRecoveryCode, replacePasswordWrap, } from "../../../../lib/crypto/masterKeyWraps.js";
+import Modal from "../../../../lib/components/overlays/Modal.js";
+import Alert from "../../../../lib/components/feedback/Alert.js";
+import Button from "../../../../lib/components/buttons/Button.js";
+import FormField from "../../../../lib/components/forms/FormField.js";
 /** The same minimum every other "set an encryption password" form in this app uses. */
 export const MIN_PASSWORD_LENGTH = 8;
 /** Where recovery codes are regenerated. */

package/dist/apps/shared/components/layout/UnlockPromptProvider.d.ts

@@ -1,6 +1,6 @@
 import React from "react";
-import { UnlockedKeys } from "@rapidmx/react-shared/crypto/keySession.js";
-import type { PublicKey } from "@rapidmx/react-shared/crypto/keyvaultApi.js";
+import { UnlockedKeys } from "../../../../lib/crypto/keySession.js";
+import type { PublicKey } from "../../../../lib/crypto/keyvaultApi.js";
 /** Shown instead of "Incorrect password" when the password was right but the mailbox's encryption key itself
  * won't open (`UnopenableEncryptionKeyError`) - retrying can't fix that, so it must not read as a typo. */
 export declare const UNOPENABLE_ENCRYPTION_KEY_MESSAGE = "Your password is correct, but one of your keys couldn't be opened, so encrypted mail can't be read or sent from this mailbox. Trying again won't help - contact support.";

package/dist/apps/shared/components/layout/UnlockPromptProvider.js

@@ -4,11 +4,11 @@ import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
 import { createContext, useCallback, useContext, useRef, useState } from "react";
-import { getUnlockedKeys, unlockWithPassword, UnopenableEncryptionKeyError, } from "@rapidmx/react-shared/crypto/keySession.js";
-import Modal from "@rapidmx/react-shared/components/overlays/Modal.js";
-import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
-import Button from "@rapidmx/react-shared/components/buttons/Button.js";
-import FormField from "@rapidmx/react-shared/components/forms/FormField.js";
+import { getUnlockedKeys, unlockWithPassword, UnopenableEncryptionKeyError, } from "../../../../lib/crypto/keySession.js";
+import Modal from "../../../../lib/components/overlays/Modal.js";
+import Alert from "../../../../lib/components/feedback/Alert.js";
+import Button from "../../../../lib/components/buttons/Button.js";
+import FormField from "../../../../lib/components/forms/FormField.js";
 import { RECOVERY_CODE_ERROR, RecoveryFollowUpModal, UnlockModeToggle, startRecoveryUnlock, } from "./RecoveryCodeUnlock.js";
 /** Shown instead of "Incorrect password" when the password was right but the mailbox's encryption key itself
  * won't open (`UnopenableEncryptionKeyError`) - retrying can't fix that, so it must not read as a typo. */