@the-portland-company/shell 0.75.1 → 0.76.0

package/dist/app-chrome.d.cts

@@ -188,6 +188,8 @@ type PolitogyFrameData = {
     devNotes?: ChromeDevNotesConfig;
     /** Controlled org state for apps that own active-org + switching. */
     org?: ControlledOrgState;
+    /** Auth-owned active org from verified token claims (v2). Wins over `org`. */
+    tokenOrg?: TokenOrgState;
     /**
      * App-owned children for a standard nav entry this app owns (Contacts).
      * `count` is the live contact total, pre-formatted ("31.9K"), drawn
@@ -393,6 +395,34 @@ type ControlledOrgState = {
      */
     onExternalSwitch?: (id: string) => void;
 };
+/**
+ * Auth-owned active org (Global-Rules v38, UI-Platform v46). The app server
+ * passes the VERIFIED token claims; the shell never resolves the org itself.
+ */
+type TokenOrgState = {
+    /** `org_id` claim from the app's verified token (full uuid). */
+    orgId: string | null;
+    /** `org_role` claim (raw VRM Core role). */
+    orgRole?: string | null;
+    /**
+     * The switcher list from the app server (names for the pill). When given,
+     * the chrome `/api/orgs` call is skipped. When absent it is the fallback.
+     */
+    orgs?: (NavOrgOption & {
+        rawRole?: string | null;
+    })[];
+    /**
+     * Server action that re-exchanges for tokens on `orgId`. Called after the
+     * IdP accepted the switch (shared) or for a per-tab override (`perTab`).
+     */
+    onReexchange: (orgId: string, opts: {
+        perTab: boolean;
+    }) => void | Promise<void>;
+    /** IdP base override (default: auth / auth-staging by host). */
+    authBaseUrl?: string;
+    /** Called when the IdP refuses a switch (403 not a member, 401 no session). */
+    onSwitchError?: (err: unknown) => void;
+};
 type ChromeDevNotesConfig = {
     /** Override the DevNotes API base (default: `${proxyBasePath}/devnotes`). */
     basePath?: string;
@@ -417,7 +447,7 @@ type ChromeDevNotesConfig = {
  *     <ShellFrame …/>
  *   </PolitogyAppChrome>
  */
-declare function PolitogyAppChrome({ storagePrefix, proxyBasePath, fetchJson: fetchJsonOverride, devNotes, org, identity, children, }: {
+declare function PolitogyAppChrome({ storagePrefix, proxyBasePath, fetchJson: fetchJsonOverride, devNotes, org, tokenOrg, identity, children, }: {
     storagePrefix: string;
     proxyBasePath?: string;
     /**
@@ -430,6 +460,8 @@ declare function PolitogyAppChrome({ storagePrefix, proxyBasePath, fetchJson: fe
     devNotes?: ChromeDevNotesConfig;
     /** Controlled org state — the app owns active-org + switching (Contacts). */
     org?: ControlledOrgState;
+    /** Auth-owned active org from verified token claims (v2). Wins over `org`. */
+    tokenOrg?: TokenOrgState;
     identity: ChromeIdentity;
     children: ReactNode;
 }): react_jsx_runtime.JSX.Element;
@@ -502,4 +534,4 @@ type UseChromeModeArg = ModeId | {
  */
 declare function useChromeMode(arg?: UseChromeModeArg): NavMode;
 
-export { type BootPhase, type BootProgress, type BootStageId, type ChromeDevNotesConfig, type ChromeIdentity, ChromeTopBarActions, type ControlledOrgState, LoadingScreen, POLITOGY_APPS, PolitogyAppChrome, PolitogyAppFrame, type PolitogyAppKey, type PolitogyAppMode, type PolitogyAppSession, type PolitogyBuildMeta, type PolitogyFrameData, type PolitogyFrameGrant, type PolitogyGrantedFrame, type ResolvedIdentity, deriveBreadcrumbs, looksLikeEmail, resolveIdentity, standardNavIcons, useChromeFooter, useChromeIdentity, useChromeMode, useChromeState, useChromeUserMenu, useIsSuperAdmin };
+export { type BootPhase, type BootProgress, type BootStageId, type ChromeDevNotesConfig, type ChromeIdentity, ChromeTopBarActions, type ControlledOrgState, LoadingScreen, POLITOGY_APPS, PolitogyAppChrome, PolitogyAppFrame, type PolitogyAppKey, type PolitogyAppMode, type PolitogyAppSession, type PolitogyBuildMeta, type PolitogyFrameData, type PolitogyFrameGrant, type PolitogyGrantedFrame, type ResolvedIdentity, type TokenOrgState, deriveBreadcrumbs, looksLikeEmail, resolveIdentity, standardNavIcons, useChromeFooter, useChromeIdentity, useChromeMode, useChromeState, useChromeUserMenu, useIsSuperAdmin };

package/dist/app-chrome.d.ts

@@ -188,6 +188,8 @@ type PolitogyFrameData = {
     devNotes?: ChromeDevNotesConfig;
     /** Controlled org state for apps that own active-org + switching. */
     org?: ControlledOrgState;
+    /** Auth-owned active org from verified token claims (v2). Wins over `org`. */
+    tokenOrg?: TokenOrgState;
     /**
      * App-owned children for a standard nav entry this app owns (Contacts).
      * `count` is the live contact total, pre-formatted ("31.9K"), drawn
@@ -393,6 +395,34 @@ type ControlledOrgState = {
      */
     onExternalSwitch?: (id: string) => void;
 };
+/**
+ * Auth-owned active org (Global-Rules v38, UI-Platform v46). The app server
+ * passes the VERIFIED token claims; the shell never resolves the org itself.
+ */
+type TokenOrgState = {
+    /** `org_id` claim from the app's verified token (full uuid). */
+    orgId: string | null;
+    /** `org_role` claim (raw VRM Core role). */
+    orgRole?: string | null;
+    /**
+     * The switcher list from the app server (names for the pill). When given,
+     * the chrome `/api/orgs` call is skipped. When absent it is the fallback.
+     */
+    orgs?: (NavOrgOption & {
+        rawRole?: string | null;
+    })[];
+    /**
+     * Server action that re-exchanges for tokens on `orgId`. Called after the
+     * IdP accepted the switch (shared) or for a per-tab override (`perTab`).
+     */
+    onReexchange: (orgId: string, opts: {
+        perTab: boolean;
+    }) => void | Promise<void>;
+    /** IdP base override (default: auth / auth-staging by host). */
+    authBaseUrl?: string;
+    /** Called when the IdP refuses a switch (403 not a member, 401 no session). */
+    onSwitchError?: (err: unknown) => void;
+};
 type ChromeDevNotesConfig = {
     /** Override the DevNotes API base (default: `${proxyBasePath}/devnotes`). */
     basePath?: string;
@@ -417,7 +447,7 @@ type ChromeDevNotesConfig = {
  *     <ShellFrame …/>
  *   </PolitogyAppChrome>
  */
-declare function PolitogyAppChrome({ storagePrefix, proxyBasePath, fetchJson: fetchJsonOverride, devNotes, org, identity, children, }: {
+declare function PolitogyAppChrome({ storagePrefix, proxyBasePath, fetchJson: fetchJsonOverride, devNotes, org, tokenOrg, identity, children, }: {
     storagePrefix: string;
     proxyBasePath?: string;
     /**
@@ -430,6 +460,8 @@ declare function PolitogyAppChrome({ storagePrefix, proxyBasePath, fetchJson: fe
     devNotes?: ChromeDevNotesConfig;
     /** Controlled org state — the app owns active-org + switching (Contacts). */
     org?: ControlledOrgState;
+    /** Auth-owned active org from verified token claims (v2). Wins over `org`. */
+    tokenOrg?: TokenOrgState;
     identity: ChromeIdentity;
     children: ReactNode;
 }): react_jsx_runtime.JSX.Element;
@@ -502,4 +534,4 @@ type UseChromeModeArg = ModeId | {
  */
 declare function useChromeMode(arg?: UseChromeModeArg): NavMode;
 
-export { type BootPhase, type BootProgress, type BootStageId, type ChromeDevNotesConfig, type ChromeIdentity, ChromeTopBarActions, type ControlledOrgState, LoadingScreen, POLITOGY_APPS, PolitogyAppChrome, PolitogyAppFrame, type PolitogyAppKey, type PolitogyAppMode, type PolitogyAppSession, type PolitogyBuildMeta, type PolitogyFrameData, type PolitogyFrameGrant, type PolitogyGrantedFrame, type ResolvedIdentity, deriveBreadcrumbs, looksLikeEmail, resolveIdentity, standardNavIcons, useChromeFooter, useChromeIdentity, useChromeMode, useChromeState, useChromeUserMenu, useIsSuperAdmin };
+export { type BootPhase, type BootProgress, type BootStageId, type ChromeDevNotesConfig, type ChromeIdentity, ChromeTopBarActions, type ControlledOrgState, LoadingScreen, POLITOGY_APPS, PolitogyAppChrome, PolitogyAppFrame, type PolitogyAppKey, type PolitogyAppMode, type PolitogyAppSession, type PolitogyBuildMeta, type PolitogyFrameData, type PolitogyFrameGrant, type PolitogyGrantedFrame, type ResolvedIdentity, type TokenOrgState, deriveBreadcrumbs, looksLikeEmail, resolveIdentity, standardNavIcons, useChromeFooter, useChromeIdentity, useChromeMode, useChromeState, useChromeUserMenu, useIsSuperAdmin };

package/dist/app-chrome.js

@@ -1,11 +1,11 @@
 "use client";
 import { broadcastLogout, watchLogout } from './chunk-LL6LSJAH.js';
-import { clearBetaBannerDismissal, standardPolitogyNav, standardNavIcons, isNavItemActive, NavAppShell, NavChromeProvider, TopBarWidgetSlot, FuelAction, SpecOverlayAction, NotificationsAction, SupportAction, useChromeMe, useThemePreference, useNavChromeFetcher, useChromeOrgs } from './chunk-AQMSMAK2.js';
-export { standardNavIcons } from './chunk-AQMSMAK2.js';
+import { clearBetaBannerDismissal, standardPolitogyNav, standardNavIcons, isNavItemActive, NavAppShell, NavChromeProvider, TopBarWidgetSlot, FuelAction, SpecOverlayAction, NotificationsAction, SupportAction, useChromeMe, useThemePreference, useNavChromeFetcher, useChromeOrgs } from './chunk-WHF6YW27.js';
+export { standardNavIcons } from './chunk-WHF6YW27.js';
 import { warnDeprecated } from './chunk-MY6G3LMN.js';
 import './chunk-BHRVZPZ7.js';
-import { NAV_DISPLAY_DEFAULT, resolveNavDisplay, isNavDisplayPreference, writeNavDisplayCookie, writeNavDisplayLocal, NAV_DISPLAY_STORAGE_KEY, readNavDisplayCookie } from './chunk-7YVJ7HQG.js';
-import { resolveActiveOrg, isOrgId, writeActiveOrgCookie, ACTIVE_ORG_QUERY_PARAM, readActiveOrgCookie } from './chunk-W2HITMV5.js';
+import { NAV_DISPLAY_DEFAULT, resolveNavDisplay, writeNavDisplayLocal, writeNavDisplayCookie, isNavDisplayPreference, NAV_DISPLAY_STORAGE_KEY, readNavDisplayCookie } from './chunk-7YVJ7HQG.js';
+import { readOrgSelectorFromUrl, matchOrgSelector, isOrgId, switchActiveOrg, ACTIVE_ORG_QUERY_PARAM, ORG_ID_QUERY_PARAM, orgIdTail, writeActiveOrgCookie, resolveActiveOrg, readActiveOrgCookie } from './chunk-BWV52AT6.js';
 import { createContext, useMemo, useRef, useEffect, useState, useCallback, useContext } from 'react';
 import { DevNotesMenu, createDevNotesClient, DevNotesProvider, DevNotesTaskListModal, DevNotesOverlay } from '@the-portland-company/devnotes';
 import { LuNotebookPen, LuContactRound, LuMegaphone, LuFilePenLine } from 'react-icons/lu';
@@ -427,7 +427,9 @@ function LoadingScreen({
                       padding: 0,
                       border: "none",
                       background: "transparent",
-                      color: "rgba(255,255,255,0.38)",
+                      // 0.38 alpha was 3.51:1 on the ink-900 loading background —
+                      // below WCAG 2.2 AA 4.5:1. 0.72 clears it.
+                      color: "rgba(255,255,255,0.72)",
                       fontFamily: "var(--font-family, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, 'Noto Sans', sans-serif)",
                       fontSize: "12.5px",
                       textDecoration: "underline",
@@ -454,7 +456,9 @@ function LoadingScreen({
               padding: "0 32px 30px",
               fontFamily: "var(--font-family, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, 'Noto Sans', sans-serif)",
               fontSize: "12.5px",
-              color: "rgba(255,255,255,0.38)"
+              // 0.38 alpha was 3.51:1 on the ink-900 loading background — below
+              // WCAG 2.2 AA 4.5:1. 0.72 clears it.
+              color: "rgba(255,255,255,0.72)"
             },
             children: [
               /* @__PURE__ */ jsx("span", { children: "Politogy VRM. Built for the long game." }),
@@ -522,11 +526,17 @@ var POLITOGY_APPS = {
     storagePrefix: "contacts",
     pageTitle: false
   },
-  forms: { title: "Forms", origin: "https://forms.politogyvrm.com", storagePrefix: "forms" },
-  surveys: { title: "Surveys", origin: "https://surveys.politogyvrm.com", storagePrefix: "surveys" },
+  // 'title' for forms/surveys/polls/ctas for the same reason as petitions
+  // below: their pages have real names ("Volunteer Signup", "Q3 Satisfaction"),
+  // where the registry can only say the app's own name. Without the grant the
+  // page header falls back to the static registry title forever, so the
+  // designed "<mode> mode" eyebrow + H2 + subtitle block never gets the real
+  // per-page title an app passes it (UI-Platform → Page header).
+  forms: { title: "Forms", origin: "https://forms.politogyvrm.com", storagePrefix: "forms", grants: ["title"] },
+  surveys: { title: "Surveys", origin: "https://surveys.politogyvrm.com", storagePrefix: "surveys", grants: ["title"] },
   // Specs/Left-Navigation §9.2: Polling is a Campaign row (Research).
-  polls: { title: "Polls", origin: "https://polls.politogyvrm.com", storagePrefix: "polls", mode: "campaign" },
-  ctas: { title: "CTAs", origin: "https://ctas.politogyvrm.com", storagePrefix: "ctas" },
+  polls: { title: "Polls", origin: "https://polls.politogyvrm.com", storagePrefix: "polls", mode: "campaign", grants: ["title"] },
+  ctas: { title: "CTAs", origin: "https://ctas.politogyvrm.com", storagePrefix: "ctas", grants: ["title"] },
   // V2 apps that replace retired app.politogyvrm.com pages (Reference/
   // UI-Platform v42 "Retirement of app.politogyvrm.com"). Dashboard hosts the
   // Relationship Dashboard + Campaign Battleground/District data/Campaigns
@@ -550,7 +560,7 @@ var POLITOGY_APPS = {
   },
   // Relationship Mode Email Engine (Specs/Email-Engine) — the V2 standalone
   // app, running in parallel to VRM core's V1 Email Broadcast.
-  email: { title: "Email", origin: "https://email.politogyvrm.com", storagePrefix: "email", mode: "relationship" },
+  email: { title: "Email", origin: "https://email.politogyvrm.com", storagePrefix: "email", mode: "relationship", grants: ["title"] },
   // Campaign Mode apps — each scoped to Campaign, so they render the Campaign
   // tree and a static Campaign pill. Not yet deployed; hidden from the Campaign
   // nav by CAMPAIGN_FEATURE_AVAILABILITY until their launch flips the flag.
@@ -563,11 +573,12 @@ var POLITOGY_APPS = {
     origin: "https://a2p.politogyvrm.com",
     storagePrefix: "a2p",
     mode: "campaign",
-    dual: { modes: ["relationship", "campaign"], defaultMode: "campaign" }
+    dual: { modes: ["relationship", "campaign"], defaultMode: "campaign" },
+    grants: ["title"]
   },
-  phonebank: { title: "Phone Banking", origin: "https://phonebank.politogyvrm.com", storagePrefix: "phonebank", mode: "campaign" },
-  canvass: { title: "Field Canvassing", origin: "https://canvass.politogyvrm.com", storagePrefix: "canvass", mode: "campaign" },
-  signs: { title: "Sign Mapping", origin: "https://signs.politogyvrm.com", storagePrefix: "signs", mode: "campaign" }
+  phonebank: { title: "Phone Banking", origin: "https://phonebank.politogyvrm.com", storagePrefix: "phonebank", mode: "campaign", grants: ["title"] },
+  canvass: { title: "Field Canvassing", origin: "https://canvass.politogyvrm.com", storagePrefix: "canvass", mode: "campaign", grants: ["title"] },
+  signs: { title: "Sign Mapping", origin: "https://signs.politogyvrm.com", storagePrefix: "signs", mode: "campaign", grants: ["title"] }
 };
 var DEFAULT_SEARCH_PLACEHOLDER = {
   contacts: "Search contacts, segments, forms"
@@ -594,6 +605,7 @@ function PolitogyAppFrame({
       fetchJson: data?.fetchJson,
       devNotes: data?.devNotes,
       org: data?.org,
+      tokenOrg: data?.tokenOrg,
       identity: {
         userId: session.userId,
         userName: session.userName ?? null,
@@ -874,6 +886,107 @@ var ChromeStateContext = createContext(null);
 function useChromeState() {
   return useContext(ChromeStateContext);
 }
+function TokenChromeStateProvider({
+  tokenOrg,
+  children
+}) {
+  const { orgs: fetchedOrgs, loading: orgsFetching, error: orgsError } = useChromeOrgs({
+    enabled: !tokenOrg.orgs
+  });
+  const [navDisplay, setNavDisplayState] = useState(NAV_DISPLAY_DEFAULT);
+  const [pendingOrg, setPendingOrg] = useState(null);
+  const tokenOrgRef = useRef(tokenOrg);
+  tokenOrgRef.current = tokenOrg;
+  useEffect(() => {
+    setNavDisplayState(resolveNavDisplay());
+  }, []);
+  const orgs = useMemo(
+    () => tokenOrg.orgs ?? (fetchedOrgs ?? []).map((o) => ({
+      id: o.id,
+      name: o.name,
+      logoUrl: o.logoUrl,
+      brandColor: o.brandColor,
+      role: o.role,
+      rawRole: o.rawRole ?? null
+    })),
+    [tokenOrg.orgs, fetchedOrgs]
+  );
+  const [urlSelector] = useState(
+    () => typeof window === "undefined" ? null : readOrgSelectorFromUrl(window.location.search)
+  );
+  const overrideOrg = useMemo(
+    () => urlSelector ? matchOrgSelector(urlSelector, orgs)?.id ?? null : null,
+    [urlSelector, orgs]
+  );
+  const orgId = pendingOrg ?? (tokenOrg.orgId && overrideOrg ? overrideOrg : tokenOrg.orgId);
+  const reexchangedFor = useRef(null);
+  useEffect(() => {
+    if (!overrideOrg || !tokenOrg.orgId || overrideOrg === tokenOrg.orgId) return;
+    if (reexchangedFor.current === overrideOrg) return;
+    reexchangedFor.current = overrideOrg;
+    void Promise.resolve(tokenOrgRef.current.onReexchange(overrideOrg, { perTab: true })).catch(
+      () => {
+      }
+    );
+  }, [overrideOrg, tokenOrg.orgId]);
+  useEffect(() => {
+    if (pendingOrg && tokenOrg.orgId === pendingOrg) setPendingOrg(null);
+  }, [pendingOrg, tokenOrg.orgId]);
+  const setOrgId = useCallback((id) => {
+    const current = tokenOrgRef.current;
+    if (!isOrgId(id) || id === (current.orgId ?? null)) return;
+    setPendingOrg(id);
+    void (async () => {
+      try {
+        const claims = await switchActiveOrg(id, { authBaseUrl: current.authBaseUrl });
+        try {
+          const url = new URL(window.location.href);
+          url.searchParams.delete(ACTIVE_ORG_QUERY_PARAM);
+          url.searchParams.set(ORG_ID_QUERY_PARAM, orgIdTail(claims.orgId));
+          window.history.replaceState(window.history.state, "", url.toString());
+        } catch {
+        }
+        await tokenOrgRef.current.onReexchange(claims.orgId, { perTab: false });
+      } catch (err) {
+        setPendingOrg(null);
+        tokenOrgRef.current.onSwitchError?.(err);
+      }
+    })();
+  }, []);
+  const setNavDisplay = useCallback((m) => {
+    setNavDisplayState(m);
+    writeNavDisplayLocal(m);
+    writeNavDisplayCookie(m);
+  }, []);
+  useEffect(() => {
+    if (!isOrgId(orgId)) return;
+    try {
+      const url = new URL(window.location.href);
+      const tail = orgIdTail(orgId);
+      if (url.searchParams.has(ACTIVE_ORG_QUERY_PARAM) || url.searchParams.get(ORG_ID_QUERY_PARAM) !== tail) {
+        url.searchParams.delete(ACTIVE_ORG_QUERY_PARAM);
+        url.searchParams.set(ORG_ID_QUERY_PARAM, tail);
+        window.history.replaceState(window.history.state, "", url.toString());
+      }
+    } catch {
+    }
+  }, [orgId]);
+  useEffect(() => {
+    if (isOrgId(tokenOrg.orgId) && !pendingOrg) writeActiveOrgCookie(tokenOrg.orgId);
+  }, [tokenOrg.orgId, pendingOrg]);
+  const value = useMemo(
+    () => ({
+      orgId,
+      setOrgId,
+      orgs,
+      orgsLoading: !tokenOrg.orgs && orgsFetching && !orgsError && !fetchedOrgs,
+      navDisplay,
+      setNavDisplay
+    }),
+    [orgId, setOrgId, orgs, tokenOrg.orgs, orgsFetching, orgsError, fetchedOrgs, navDisplay, setNavDisplay]
+  );
+  return /* @__PURE__ */ jsx(ChromeStateContext.Provider, { value, children });
+}
 function ChromeStateProvider({
   controlledOrg,
   children
@@ -1177,6 +1290,7 @@ function PolitogyAppChrome({
   fetchJson: fetchJsonOverride,
   devNotes,
   org,
+  tokenOrg,
   identity,
   children
 }) {
@@ -1195,7 +1309,7 @@ function PolitogyAppChrome({
     [proxyBasePath]
   );
   const fetchJson = fetchJsonOverride ?? proxyFetchJson;
-  return /* @__PURE__ */ jsx(NavChromeProvider, { fetchJson, children: /* @__PURE__ */ jsx(ChromeStateProvider, { controlledOrg: org, children: /* @__PURE__ */ jsx(
+  const devNotesTree = /* @__PURE__ */ jsx(
     AppDevNotes,
     {
       storagePrefix,
@@ -1204,7 +1318,8 @@ function PolitogyAppChrome({
       identity,
       children
     }
-  ) }) });
+  );
+  return /* @__PURE__ */ jsx(NavChromeProvider, { fetchJson, children: tokenOrg ? /* @__PURE__ */ jsx(TokenChromeStateProvider, { tokenOrg, children: devNotesTree }) : /* @__PURE__ */ jsx(ChromeStateProvider, { controlledOrg: org, children: devNotesTree }) });
 }
 function ChromeTopBarActions() {
   const state = useChromeState();
@@ -1221,7 +1336,7 @@ function ChromeTopBarActions() {
     /* @__PURE__ */ jsx(FuelAction, { orgId: state.orgId }),
     /* @__PURE__ */ jsx(SpecOverlayAction, { orgId: state.orgId, orgName: state.orgs.find((o) => o.id === state.orgId)?.name ?? null }),
     /* @__PURE__ */ jsx(NotificationsAction, { orgId: state.orgId }),
-    /* @__PURE__ */ jsx(SupportAction, { orgId: state.orgId })
+    /* @__PURE__ */ jsx(SupportAction, { orgId: state.orgId, orgs: state.orgs.length ? state.orgs : void 0 })
   ] });
 }
 function ChromeDevNotesMenu() {