npm - @wildo-ai/saas-frontend-lib - Versions diffs - 1.1.5 → 1.1.7 - Mend

@wildo-ai/saas-frontend-lib 1.1.5 → 1.1.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2312) hide show

package/dist/esm/core/scope/scope.utils.frontend.service.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"scope.utils.frontend.service.js","sourceRoot":"","sources":["../../../../../src/core/scope/scope.utils.frontend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,oBAAoB,EAEpB,gBAAgB,EAChB,+BAA+B,GAChC,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,8BAA8B,EAAE,MAAM,wDAAwD,CAAC;AACxG,OAAO,EAAE,wBAAwB,EAAE,MAAM,6DAA6D,CAAC;AACvG,OAAO,EAAE,8BAA8B,EAAgC,MAAM,wDAAwD,CAAC;AACtI,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,iEAAiE,CAAC;AAQzE,OAAO,EAAE,qBAAqB,EAA0B,MAAM,wDAAwD,CAAC;AAEvH,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAE5G;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IAE5B,8DAA8D;IAE9D;;;OAGG;IACH,MAAM,CAAU,qBAAqB,GAAyB,oBAAoB,CAAC,aAAa,CAAC;IAEjG,8DAA8D;IAE9D;;;;;;;;OAQG;IACH,MAAM,CAAC,uBAAuB,CAAC,OAA4B;QACzD,OAAO;YACL,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;YAC9C,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;YAC9B,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;YAC5C,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,IAAI;SACjD,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,iBAAiB,CAAC,MAKxB;QACC,MAAM,GAAG,GAAkC,EAAE,CAAC;QAE9C,IAAI,MAAM,CAAC,MAAM;YAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9C,IAAI,MAAM,CAAC,cAAc;YAAE,GAAG,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;QACtE,IAAI,MAAM,CAAC,aAAa;YAAE,GAAG,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QACnE,IAAI,MAAM,CAAC,eAAe;YAAE,GAAG,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QACzE,2FAA2F;QAC3F,kDAAkD;QAElD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAED,6DAA6D;IAE7D;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,gCAAgC,CACrC,YAAkD,EAClD,YAAkC;QAElC,IAAI,CAAC,YAAY;YAAE,OAAO,EAAE,CAAC;QAE7B,+DAA+D;QAC/D,MAAM,WAAW,GAAiD;YAChE,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,YAAY,CAAC,cAAc;YAC7D,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,MAAM;YAC7C,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,YAAY,CAAC,aAAa;YAC1D,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAAE,YAAY,CAAC,eAAe;SACjB,CAAC;QAElD,MAAM,MAAM,GAA2B,EAAE,CAAC;QAE1C,yDAAyD;QACzD,MAAM,qBAAqB,GAAG,+BAA+B,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAElF,wDAAwD;QACxD,KAAK,MAAM,YAAY,IAAI,qBAAqB,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;YACxC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,wCAAwC,CAAC,MAQ/C;QACC,MAAM,wBAAwB,GAAG,iBAAiB,CAAC,iBAAiB,CAAC;YACnE,MAAM,EAAE,MAAM,CAAC,aAAa;YAC5B,cAAc,EAAE,MAAM,CAAC,qBAAqB;YAC5C,aAAa,EAAE,MAAM,CAAC,oBAAoB;YAC1C,eAAe,EAAE,MAAM,CAAC,sBAAsB;SAC/C,CAAC,CAAC;QAEH,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,gCAAgC,CAC5E,wBAAwB,EACxB,MAAM,CAAC,YAAY,IAAI,iBAAiB,CAAC,qBAAqB,CAC/D,CAAC;QAEF,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,2CAA2C,CACtF,MAAM,CAAC,sCAAsC,CAC9C,CAAC;QAEF,OAAO;YACL,GAAG,mBAAmB;YACtB,GAAG,kBAAkB;YACrB,GAAG,CAAC,MAAM,CAAC,kCAAkC,IAAI,EAAE,CAAC;SACrD,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,+BAA+B,CACpC,GAAG,OAAkD;QAErD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAyB,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE;YAC5E,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,WAAW,CAAC;YACrB,CAAC;YAED,OAAO;gBACL,GAAG,WAAW;gBACd,GAAG,MAAM;aACV,CAAC;QACJ,CAAC,EAAE,EAAE,CAAC,CAAC;QAEP,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,2CAA2C,CAChD,0BAAmD;QAEnD,IAAI,CAAC,0BAA0B,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,MAAM,CAC/C,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,4BAA4B,CAAC,GAAG,CAAC,YAAY,CAAC,CACpE,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,yBAAyB,CAAC,MAIhC;QACC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,+BAA+B,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;QAChG,MAAM,oBAAoB,GAAG;YAC3B,GAAG,CAAC,MAAM,CAAC,2BAA2B,IAAI,EAAE,CAAC;YAC7C,GAAG,CAAC,MAAM,CAAC,8BAA8B,IAAI,EAAE,CAAC;SACjD,CAAC;QAEF,KAAK,MAAM,WAAW,IAAI,oBAAoB,EAAE,CAAC;YAC/C,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;YAC1C,IAAI,WAAW,CAAC,eAAe,EAAE,CAAC;gBAChC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,MAAM,CAAC,6BAA6B,CAClC,OAA2C,EAC3C,kBAA+B;QAE/B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAC/B,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CACrF,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,qCAAqC,CAAC,MAS5C;QACC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,MAAM,CAAC,kCAAkC,EAAE,CAAC;YACvF,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,yBAAyB,CAAC;gBACrE,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,2BAA2B,EAAE,MAAM,CAAC,2BAA2B;gBAC/D,8BAA8B,EAAE,MAAM,CAAC,8BAA8B;aACtE,CAAC,CAAC;YACH,MAAM,sBAAsB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,kCAAkC,CAAC;iBAClF,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;iBACzD,IAAI,EAAE,CAAC;YAEV,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,OAAO,CAAC,IAAI,CAAC,2FAA2F,EAAE;oBACxG,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,sBAAsB;oBACtB,kBAAkB,EAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE;oBACzD,kCAAkC,EAAE,MAAM,CAAC,kCAAkC;iBAC9E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,iBAAiB,CAAC,+BAA+B,CACtD,MAAM,CAAC,mBAAmB,EAC1B,MAAM,CAAC,kBAAkB,EACzB,MAAM,CAAC,kCAAkC,CAC1C,CAAC;IACJ,CAAC;IAED,6DAA6D;IAE7D;;;;OAIG;IACK,MAAM,CAAC,oBAAoB,CACjC,OAA2B,EAC3B,eAA6E;QAE7E,IAAI,CAAC,OAAO,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QAC9C,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;QAC7D,OAAO,OAAO,EAAE,YAAY,IAAI,IAAI,CAAC;IACvC,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,8BAA8B,CACnC,OAA0B,EAC1B,QAAoC,EACpC,cAA4E,EAC5E,eAA6E,EAC7E,gBAA8E;QAE9E,QAAQ,OAAO,CAAC,WAAW,EAAE,CAAC;YAC5B,KAAK,qBAAqB,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBAC9C,2DAA2D;gBAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,EAAE,YAAY,CAAC;gBAC3D,IAAI,YAAY,IAAI,QAAQ,EAAE,sBAAsB,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;oBACrE,MAAM,cAAc,GAAG,QAAQ,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;oBACrE,OAAO,cAAc,CAAC,oBAAoB,IAAI,iBAAiB,CAAC,qBAAqB,CAAC;gBACxF,CAAC;gBACD,0DAA0D;gBAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,eAAe,EAAE,SAAS,CAAC;gBACrD,IAAI,SAAS,EAAE,oBAAoB,EAAE,CAAC;oBACpC,OAAO,SAAS,CAAC,oBAAoB,CAAC;gBACxC,CAAC;gBACD,OAAO,iBAAiB,CAAC,qBAAqB,CAAC;YACjD,CAAC;YAED,KAAK,qBAAqB,CAAC,cAAc;gBACvC,OAAO,8BAA8B,CAAC;oBACpC,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,cAAc,EAAE,cAAuD;oBACvE,QAAQ;iBACT,CAAC,EAAE,YAAY;uBACX,iBAAiB,CAAC,qBAAqB,CAAC;YAE/C,KAAK,qBAAqB,CAAC,UAAU;gBACnC,IAAI,OAAO,CAAC,cAAc,EAAE,YAAY,EAAE,CAAC;oBACzC,OAAO,OAAO,CAAC,cAAc,CAAC,YAAY,CAAC;gBAC7C,CAAC;gBACD,IAAI,OAAO,CAAC,iBAAiB,IAAI,QAAQ,EAAE,CAAC;oBAC1C,OAAO,wBAAwB,CAAC;wBAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,QAAQ;qBACT,CAAC,EAAE,SAAS,CAAC,YAAY;2BACrB,iBAAiB,CAAC,qBAAqB,CAAC;gBAC/C,CAAC;gBACD,OAAO,iBAAiB,CAAC,qBAAqB,CAAC;YAEjD,KAAK,qBAAqB,CAAC,gBAAgB;gBACzC,OAAO,iBAAiB,CAAC,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,CAAC;uBAC1E,iBAAiB,CAAC,qBAAqB,CAAC;YAE/C,KAAK,qBAAqB,CAAC,iBAAiB;gBAC1C,OAAO,iBAAiB,CAAC,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC;uBAC3E,iBAAiB,CAAC,qBAAqB,CAAC;YAE/C,KAAK,qBAAqB,CAAC,cAAc;gBACvC,OAAO,8BAA8B,CAAC;oBACpC,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,QAAQ;iBACT,CAAC,EAAE,YAAY;uBACX,iBAAiB,CAAC,qBAAqB,CAAC;YAE/C,KAAK,qBAAqB,CAAC,gBAAgB,CAAC;YAC5C,KAAK,qBAAqB,CAAC,WAAW,CAAC;YACvC,KAAK,qBAAqB,CAAC,aAAa,CAAC;YACzC,KAAK,qBAAqB,CAAC,WAAW;gBACpC,OAAO,iBAAiB,CAAC,qBAAqB,CAAC;QACnD,CAAC;IACH,CAAC;IAED,+DAA+D;IAE/D;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,eAAe,CAAC,MAAkC;QACvD,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;IAClH,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,oBAAoB,CACzB,oBAA0C,EAC1C,OAA4B;QAE5B,QAAQ,oBAAoB,EAAE,CAAC;YAC7B,KAAK,oBAAoB,CAAC,aAAa;gBACrC,OAAO,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC;YACxC,KAAK,oBAAoB,CAAC,SAAS;gBACjC,OAAO,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC;YAChC,KAAK,oBAAoB,CAAC,WAAW;gBACnC,OAAO,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC;YACvC,KAAK,oBAAoB,CAAC,SAAS;gBACjC,OAAO,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC;YACzC;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAED,+DAA+D;IAE/D;;OAEG;IACH,MAAM,CAAC,OAAO;QACZ,MAAM,YAAY,GAAG,mBAAmB,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAE1E,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACxC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAClD,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAC7D,CAAC;YACD,OAAO,MAA8B,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC7D,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,OAAO,CAAC,MAA4B;QACzC,MAAM,OAAO,GAAyB;YACpC,GAAG,MAAM;YACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,mBAAmB,CAAC,kBAAkB,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,CAAC,SAAqC;QACnD,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,iBAAiB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QACzD,OAAO,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,CAAC,SAAqC,EAAE,KAAoB;QACzE,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,iBAAiB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAEzD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAChC,CAAC;QAED,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,eAAe,CACpB,OAAe,EACf,oBAA0C,EAC1C,iBAAyB;QAEzB,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,GAAG,OAAO,IAAI,oBAAoB,IAAI,iBAAiB,GAAG,CAAC;QAE1E,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,OAAO,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,cAAc,CACnB,OAAe,EACf,OAA4B,EAC5B,WAA2F;QAE3F,MAAM,MAAM,GAAkC,EAAE,CAAC;QAEjD,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;YAChC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,oBAAoB,CAAC,KAAK,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;YAEtG,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvB,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC;gBACrC,SAAS;YACX,CAAC;YAED,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC;gBACvC,OAAO;gBACP,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;gBAChD,iBAAiB;gBACjB,eAAe,EAAE,KAAK,CAAC,eAAe;aACvC,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC;QACxC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC","sourcesContent":["/*\n ScopeUtilsService\n * \n * Centralized service for all primary scope operations:\n * - Scope value derivation (buildPrimaryScopeValues, getPrimaryScopeValue)\n * - Scope identifier conversion (primaryScopeToContextIdentifiers)\n * - Scope extraction from content metadata (extractPrimaryScopeFromContent)\n * - InitiatorIds construction (buildInitiatorIds)\n * - localStorage persistence for custom scope fields\n * \n * Values are keyed by the resource's primary scope to prevent cross-scope leakage.\n * \n * IMPORTANT: Primary scope storage/commit ownership now belongs to AppScope.\n * This service remains a shared utility layer for primary-scope helpers and\n * custom scope field persistence. Custom fields are declared in top-level\n * `appScope.fields`.\n /\n\nimport { \n ResourcePrimaryScope, \n ExecutionContext_InitiatorIds,\n CoreResourceType,\n PRIMARY_SCOPE_TO_RESOURCE_TYPES,\n} from '@wildo-ai/saas-models';\nimport type { FrontendResourcesRegistry } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport type { FrontendResource_ParentResourceRequirement } from '~wildo-frontend-lib/core/resources/resource-path.frontend.schemas';\nimport { resolveExecutionViewDefinition } from '~wildo-frontend-lib/core/config/execution-view.schemas';\nimport { resolveInsertedChartView } from '~wildo-frontend-lib/core/config/chart-view.frontend.schemas';\nimport { resolveCompositeViewDefinition, type CompositeViewDefinition } from '~wildo-frontend-lib/core/config/composite-view.schemas';\nimport { \n getLocalStorageItem, \n setLocalStorageItem,\n LOCAL_STORAGE_KEYS,\n} from '~wildo-frontend-lib/core/commons/local-storage.frontend.schemas';\nimport type {\n AppScopeValue,\n PersistedScopeValues,\n ScopeFieldStorageKeyParams,\n PrimaryScopeContext,\n AppScopePrimaryValues,\n} from './scope.frontend.schemas';\nimport { NavigationContentType, type NavigationContent } from '~wildo-frontend-lib/core/navigation/navigation.schemas';\n\nconst PRIMARY_SCOPE_RESOURCE_TYPES = new Set<string>(Object.values(PRIMARY_SCOPE_TO_RESOURCE_TYPES).flat());\n\n/\n Centralized service for scope utilities and persistence.\n * All methods are static - no instantiation needed.\n /\nexport class ScopeUtilsService {\n\n // ─── Default Primary Scope ─────────────────────────────────\n \n /\n The default primary scope when none can be determined.\n * Used as a fallback across navigation, content areas, and scope extraction.\n /\n static readonly DEFAULT_PRIMARY_SCOPE: ResourcePrimaryScope = ResourcePrimaryScope.ORGANIZATIONS;\n\n // ─── Scope Value Builders ──────────────────────────────────\n \n /\n Builds a complete primary scope values record from a PrimaryScopeContext.\n * \n * This is the canonical way to build the resolved primary-scope snapshot\n * record from context values, avoiding hardcoded inline mappings across consumers.\n * \n * @param context - Current primary scope context values\n * @returns Record keyed by field identifier with scope values (or null)\n /\n static buildPrimaryScopeValues(context: PrimaryScopeContext): AppScopePrimaryValues {\n return {\n organizationId: context.organizationId ?? null,\n userId: context.userId ?? null,\n applicationId: context.applicationId ?? null,\n anonymousUserId: context.anonymousUserId ?? null,\n };\n }\n\n /\n Builds a clean ExecutionContext_InitiatorIds from individual scope values.\n * \n * This avoids the pattern of inline `{ userId: user?._id, organizationId: currentOrganizationId ?? undefined, ... }`\n * scattered across multiple hooks and contexts.\n * \n * Only includes fields that have truthy values (no undefined/null entries).\n * Returns null if no initiator IDs are available.\n * \n * @param params - Individual scope values to include\n * @returns ExecutionContext_InitiatorIds or null if empty\n /\n static buildInitiatorIds(params: {\n userId?: string \| null;\n organizationId?: string \| null;\n applicationId?: string \| null;\n anonymousUserId?: string \| null;\n }): ExecutionContext_InitiatorIds \| null {\n const ids: ExecutionContext_InitiatorIds = {};\n\n if (params.userId) ids.userId = params.userId;\n if (params.organizationId) ids.organizationId = params.organizationId;\n if (params.applicationId) ids.applicationId = params.applicationId;\n if (params.anonymousUserId) ids.anonymousUserId = params.anonymousUserId;\n // Machine-credential ids never exist on a browser session (USER_REQUEST / ANONYMOUS only),\n // so no machine-credential mapping is built here.\n\n return Object.keys(ids).length > 0 ? ids : null;\n }\n\n // ─── Scope Identifier Conversion ──────────────────────────\n \n /\n Convert ExecutionContext_InitiatorIds to contextResourceIdentifiers Record,\n * filtered by the target content's primaryScope.\n * \n * This prevents border effects in the navigation chain by only injecting\n * context identifiers that are relevant to the target content's scope.\n * \n * IMPORTANT: contextResourceIdentifiers uses resourceType as keys (e.g., 'organizations'),\n * not fieldIdentifiers (e.g., 'organizationId'). This function maps from InitiatorIds\n * (which use fieldIdentifiers) to the resourceType-keyed format.\n * \n * @param initiatorIds - The initiator IDs from execution context (primaryScopeInitiatorIds)\n * @param primaryScope - The primary scope of the target content (determines which identifiers to inject)\n * @returns Map with resourceType keys filtered to match the primaryScope (e.g., { organizations: 'org-123' })\n /\n static primaryScopeToContextIdentifiers(\n initiatorIds: ExecutionContext_InitiatorIds \| null,\n primaryScope: ResourcePrimaryScope\n ): Record<string, string> {\n if (!initiatorIds) return {};\n \n // Build the full mapping from InitiatorIds to CoreResourceType\n const fullMapping: Record<CoreResourceType, string \| undefined> = {\n [CoreResourceType.ORGANIZATIONS]: initiatorIds.organizationId,\n [CoreResourceType.USERS]: initiatorIds.userId,\n [CoreResourceType.APPLICATION]: initiatorIds.applicationId,\n [CoreResourceType.ANONYMOUS_USERS]: initiatorIds.anonymousUserId,\n } as Record<CoreResourceType, string \| undefined>;\n \n const result: Record<string, string> = {};\n \n // Get the relevant resource types for this primary scope\n const relevantResourceTypes = PRIMARY_SCOPE_TO_RESOURCE_TYPES[primaryScope] \|\| [];\n \n // Only include identifiers that match the primary scope\n for (const resourceType of relevantResourceTypes) {\n const value = fullMapping[resourceType];\n if (value) {\n result[resourceType] = value;\n }\n }\n \n return result;\n }\n\n /\n Build routed/navigation resource context identifiers from live AppScope plus\n * explicit URL/resource identifiers.\n \n This keeps direct routed pages and URL-sync navigation on the same merge\n * contract: primary-scope defaults first, then explicit identifiers override.\n /\n static buildResourceOperationContextIdentifiers(params: {\n currentUserId?: string \| null;\n currentOrganizationId?: string \| null;\n currentApplicationId?: string \| null;\n currentAnonymousUserId?: string \| null;\n primaryScope?: ResourcePrimaryScope \| null;\n liveAppScopeContextResourceIdentifiers?: Record<string, string>;\n explicitContextResourceIdentifiers?: Record<string, string \| { fieldIdentifier: string; resourceId: string }>;\n }): Record<string, string \| { fieldIdentifier: string; resourceId: string }> {\n const primaryScopeInitiatorIds = ScopeUtilsService.buildInitiatorIds({\n userId: params.currentUserId,\n organizationId: params.currentOrganizationId,\n applicationId: params.currentApplicationId,\n anonymousUserId: params.currentAnonymousUserId,\n });\n\n const primaryScopeContext = ScopeUtilsService.primaryScopeToContextIdentifiers(\n primaryScopeInitiatorIds,\n params.primaryScope ?? ScopeUtilsService.DEFAULT_PRIMARY_SCOPE,\n );\n\n const customScopeContext = ScopeUtilsService.filterCustomScopeContextResourceIdentifiers(\n params.liveAppScopeContextResourceIdentifiers,\n );\n\n return {\n ...primaryScopeContext,\n ...customScopeContext,\n ...(params.explicitContextResourceIdentifiers ?? {}),\n };\n }\n\n /\n Merges multiple `contextResourceIdentifiers` sources for a view render.\n \n Merge order matters:\n * 1. primary-scope-derived identifiers establish the default scope\n * 2. live app-scope identifiers enrich that default with the current global scope\n * 3. explicit identifiers passed through navigation win last, so a concrete\n * navigation target can override the ambient app scope intentionally\n /\n static mergeContextResourceIdentifiers(\n ...sources: Array<Record<string, string> \| undefined>\n ): Record<string, string> \| undefined {\n const merged = sources.reduce<Record<string, string>>((accumulator, source) => {\n if (!source) {\n return accumulator;\n }\n\n return {\n ...accumulator,\n ...source,\n };\n }, {});\n\n return Object.keys(merged).length > 0 ? merged : undefined;\n }\n\n /\n Keep only custom-scope identifiers from a live AppScope identifier map.\n \n Primary-scope resource types are filtered out so view-level merge order remains explicit:\n * primary defaults first, then custom scope, then explicit navigation-time overrides.\n /\n static filterCustomScopeContextResourceIdentifiers(\n contextResourceIdentifiers?: Record<string, string>,\n ): Record<string, string> {\n if (!contextResourceIdentifiers) {\n return {};\n }\n\n return Object.fromEntries(\n Object.entries(contextResourceIdentifiers).filter(\n ([resourceType]) => !PRIMARY_SCOPE_RESOURCE_TYPES.has(resourceType),\n ),\n );\n }\n\n /\n Compute the explicit binding keys a view is allowed to accept.\n \n A view may bind:\n * - ambient primary-scope resource identifiers implied by its `primaryScope`\n * - explicitly declared parent/additional resource requirements\n * - FK-keyed requirement aliases for self-referential or edge-specific cases\n \n `contextResourceIdentifiers` are bindable only by resource key (`resourceType`) or,\n * when a requirement needs a more specific edge alias, by `foreignKeyField`.\n * Requirement metadata like `childResourceType` and `relationshipEdgeKey` informs\n * relationship resolution but is not itself a context binding key.\n /\n static getAllowedViewBindingKeys(params: {\n primaryScope: ResourcePrimaryScope;\n parentResourcesRequirements?: FrontendResource_ParentResourceRequirement[];\n additionalResourceRequirements?: FrontendResource_ParentResourceRequirement[];\n }): Set<string> {\n const allowedKeys = new Set<string>(PRIMARY_SCOPE_TO_RESOURCE_TYPES[params.primaryScope] ?? []);\n const declaredRequirements = [\n ...(params.parentResourcesRequirements ?? []),\n ...(params.additionalResourceRequirements ?? []),\n ];\n\n for (const requirement of declaredRequirements) {\n allowedKeys.add(requirement.resourceType);\n if (requirement.foreignKeyField) {\n allowedKeys.add(requirement.foreignKeyField);\n }\n }\n\n return allowedKeys;\n }\n\n /\n Restrict an inherited context-identifier map to a view's declared binding\n * contract (the keys produced by {@link getAllowedViewBindingKeys}).\n \n A view embedded under a nested route inherits that route's FULL ancestor\n * scope chain — e.g. a todo opened via `/todo-lists/{list}/todos/{todo}` hands\n * its workspace `organizations` + `todoLists` + `todos`, and a tasks chart\n * embedded in that workspace inherits the same. A view only ever scopes by\n * what it DECLARES (its primaryScope + parent/additional requirements), so\n * undeclared ancestor keys (`todoLists` here) are dead weight: they bloat the\n * request body and trip the dev-only \"context bindings outside its declared\n * contract\" warning.\n \n Pre-filtering the EXPLICIT bindings with this helper before calling\n * {@link resolveViewContextResourceIdentifiers} both silences that warning and\n * keeps the resolved context honest. Custom app-scope keys merged separately\n * inside the resolver are unaffected (they flow through by design). Returns\n * `undefined` when nothing remains, so callers can treat \"no context\"\n * uniformly. Safe wherever a view's behaviour is fully determined by its\n * declared contract (charts, resource-owned composite workspaces).\n /\n static scopeContextToBindingContract(\n context: Record<string, string> \| undefined,\n allowedBindingKeys: Set<string>,\n ): Record<string, string> \| undefined {\n if (!context) {\n return undefined;\n }\n const scoped = Object.fromEntries(\n Object.entries(context).filter(([bindingKey]) => allowedBindingKeys.has(bindingKey)),\n );\n return Object.keys(scoped).length > 0 ? scoped : undefined;\n }\n\n /\n Resolve a view's context identifiers from ambient AppScope plus explicit navigation-time overrides.\n \n In development/test, explicit bindings outside the view contract still flow through so the\n * current runtime remains non-breaking, but a warning is emitted to make the undeclared binding visible.\n /\n static resolveViewContextResourceIdentifiers(params: {\n surfaceName: string;\n surfaceRef?: string;\n primaryScope: ResourcePrimaryScope;\n parentResourcesRequirements?: FrontendResource_ParentResourceRequirement[];\n additionalResourceRequirements?: FrontendResource_ParentResourceRequirement[];\n primaryScopeContext?: Record<string, string>;\n customScopeContext?: Record<string, string>;\n explicitContextResourceIdentifiers?: Record<string, string>;\n }): Record<string, string> \| undefined {\n if (process.env.NODE_ENV !== 'production' && params.explicitContextResourceIdentifiers) {\n const allowedBindingKeys = ScopeUtilsService.getAllowedViewBindingKeys({\n primaryScope: params.primaryScope,\n parentResourcesRequirements: params.parentResourcesRequirements,\n additionalResourceRequirements: params.additionalResourceRequirements,\n });\n const unsupportedBindingKeys = Object.keys(params.explicitContextResourceIdentifiers)\n .filter(bindingKey => !allowedBindingKeys.has(bindingKey))\n .sort();\n\n if (unsupportedBindingKeys.length > 0) {\n console.warn('[ScopeUtilsService] View received explicit context bindings outside its declared contract', {\n surfaceName: params.surfaceName,\n surfaceRef: params.surfaceRef,\n primaryScope: params.primaryScope,\n unsupportedBindingKeys,\n allowedBindingKeys: Array.from(allowedBindingKeys).sort(),\n explicitContextResourceIdentifiers: params.explicitContextResourceIdentifiers,\n });\n }\n }\n\n return ScopeUtilsService.mergeContextResourceIdentifiers(\n params.primaryScopeContext,\n params.customScopeContext,\n params.explicitContextResourceIdentifiers,\n );\n }\n\n // ─── Scope Extraction from Content ────────────────────────\n \n /\n Minimal view definition shape needed for primaryScope lookup by viewRef.\n * All view definition types (CompositeView, ChartView, FullCustomView, FlowsActorsView)\n * satisfy this interface.\n /\n private static findViewPrimaryScope(\n viewRef: string \| undefined,\n viewDefinitions?: Array<{ ref: string; primaryScope?: ResourcePrimaryScope }>\n ): ResourcePrimaryScope \| null {\n if (!viewRef \|\| !viewDefinitions) return null;\n const viewDef = viewDefinitions.find(v => v.ref === viewRef);\n return viewDef?.primaryScope ?? null;\n }\n\n /\n Extract primaryScope from navigation content metadata.\n * \n * - For RESOURCE_OPERATION: retrieves from the resource configuration (resourcePrimaryScope)\n * - For COMPOSITE_VIEW: retrieves from the composite view definition (primaryScope)\n * - For CHART_VIEW: retrieves from the chart view definition (primaryScope)\n * - For FULL_CUSTOM_VIEW: retrieves from the full custom view definition (primaryScope)\n * - For FLOWS_ACTORS_VIEW: retrieves from the flows actors view definition (primaryScope)\n * - For ENGINE_PAGE / INLINE_CREATE / ERROR_MODAL: defaults to DEFAULT_PRIMARY_SCOPE\n * \n * @param content - The navigation content (typed union from navigation.schemas)\n * @param registry - The frontend resources registry (needed for resource lookup)\n * @param compositeViews - Available composite view definitions\n * @param chartViews - Available chart view definitions\n * @param fullCustomViews - Available full custom view definitions\n * @param flowsActorsViews - Available flows actors view definitions\n * @returns The primary scope for the content, defaults to DEFAULT_PRIMARY_SCOPE if not found\n /\n static extractPrimaryScopeFromContent(\n content: NavigationContent,\n registry?: FrontendResourcesRegistry,\n compositeViews?: Array<{ ref: string; primaryScope?: ResourcePrimaryScope }>,\n fullCustomViews?: Array<{ ref: string; primaryScope?: ResourcePrimaryScope }>,\n flowsActorsViews?: Array<{ ref: string; primaryScope?: ResourcePrimaryScope }>,\n ): ResourcePrimaryScope {\n switch (content.contentType) {\n case NavigationContentType.RESOURCE_OPERATION: {\n // Get resourcePrimaryScope from the resource configuration\n const resourceType = content.resourceContext?.resourceType;\n if (resourceType && registry?.resourceConfigurations?.[resourceType]) {\n const resourceConfig = registry.resourceConfigurations[resourceType];\n return resourceConfig.resourcePrimaryScope \|\| ScopeUtilsService.DEFAULT_PRIMARY_SCOPE;\n }\n // Fallback: try to get it from the operation if available\n const operation = content.resourceContext?.operation;\n if (operation?.resourcePrimaryScope) {\n return operation.resourcePrimaryScope;\n }\n return ScopeUtilsService.DEFAULT_PRIMARY_SCOPE;\n }\n \n case NavigationContentType.COMPOSITE_VIEW:\n return resolveCompositeViewDefinition({\n viewRef: content.viewRef,\n compositeViews: compositeViews as CompositeViewDefinition[] \| undefined,\n registry,\n })?.primaryScope\n ?? ScopeUtilsService.DEFAULT_PRIMARY_SCOPE;\n \n case NavigationContentType.CHART_VIEW:\n if (content.viewDefinition?.primaryScope) {\n return content.viewDefinition.primaryScope;\n }\n if (content.runtimeDescriptor \|\| registry) {\n return resolveInsertedChartView({\n viewRef: content.viewRef,\n registry,\n })?.chartView.primaryScope\n ?? ScopeUtilsService.DEFAULT_PRIMARY_SCOPE;\n }\n return ScopeUtilsService.DEFAULT_PRIMARY_SCOPE;\n \n case NavigationContentType.FULL_CUSTOM_VIEW:\n return ScopeUtilsService.findViewPrimaryScope(content.viewRef, fullCustomViews)\n ?? ScopeUtilsService.DEFAULT_PRIMARY_SCOPE;\n \n case NavigationContentType.FLOWS_ACTORS_VIEW:\n return ScopeUtilsService.findViewPrimaryScope(content.viewRef, flowsActorsViews)\n ?? ScopeUtilsService.DEFAULT_PRIMARY_SCOPE;\n\n case NavigationContentType.EXECUTION_VIEW:\n return resolveExecutionViewDefinition({\n viewRef: content.viewRef,\n registry,\n })?.primaryScope\n ?? ScopeUtilsService.DEFAULT_PRIMARY_SCOPE;\n \n case NavigationContentType.CUSTOM_COMPONENT:\n case NavigationContentType.ENGINE_PAGE:\n case NavigationContentType.INLINE_CREATE:\n case NavigationContentType.ERROR_MODAL:\n return ScopeUtilsService.DEFAULT_PRIMARY_SCOPE;\n }\n }\n \n // ─── Key Builders ───────────────────────────────────────────\n \n /\n Builds a unique storage key for a scope field value.\n * \n * The key structure ensures that scope values are isolated by:\n * - App type (different apps may have different scope selections)\n * - Primary scope level (e.g., org-scoped vs user-scoped resources)\n * - Primary scope value (e.g., different orgs have different workspaces)\n * - Field identifier (the actual scope field)\n * \n * @example\n * ScopeUtilsService.buildStorageKey({\n * appType: 'MAIN_APP',\n * resourcePrimaryScope: ResourcePrimaryScope.ORGANIZATIONS,\n * primaryScopeValue: 'org-123',\n * fieldIdentifier: 'workspaceId'\n * })\n * // Returns: \"MAIN_APP\|ORGANIZATIONS\|org-123\|workspaceId\"\n /\n static buildStorageKey(params: ScopeFieldStorageKeyParams): string {\n return `${params.appType}\|${params.resourcePrimaryScope}\|${params.primaryScopeValue}\|${params.fieldIdentifier}`;\n }\n \n /\n Gets the current primary scope value for a given resource primary scope level.\n * \n * @param resourcePrimaryScope - The primary scope level of the resource\n * @param context - Current primary scope context values\n * @returns The primary scope value, or null if not available\n /\n static getPrimaryScopeValue(\n resourcePrimaryScope: ResourcePrimaryScope,\n context: PrimaryScopeContext\n ): string \| null {\n switch (resourcePrimaryScope) {\n case ResourcePrimaryScope.ORGANIZATIONS:\n return context.organizationId ?? null;\n case ResourcePrimaryScope.USER_SELF:\n return context.userId ?? null;\n case ResourcePrimaryScope.APPLICATION:\n return context.applicationId ?? null;\n case ResourcePrimaryScope.ANONYMOUS:\n return context.anonymousUserId ?? null;\n default:\n return null;\n }\n }\n \n // ─── Storage Operations ─────────────────────────────────────\n \n /\n Loads all persisted scope values from localStorage.\n /\n static loadAll(): PersistedScopeValues {\n const storedString = getLocalStorageItem(LOCAL_STORAGE_KEYS.SCOPE_VALUES);\n \n if (!storedString) {\n return { updatedAt: new Date().toISOString(), fields: {} };\n }\n \n try {\n const parsed = JSON.parse(storedString);\n if (typeof parsed !== 'object' \|\| parsed === null) {\n return { updatedAt: new Date().toISOString(), fields: {} };\n }\n return parsed as PersistedScopeValues;\n } catch {\n return { updatedAt: new Date().toISOString(), fields: {} };\n }\n }\n \n /\n Saves all persisted scope values to localStorage.\n /\n static saveAll(values: PersistedScopeValues): void {\n const toStore: PersistedScopeValues = {\n ...values,\n updatedAt: new Date().toISOString(),\n };\n setLocalStorageItem(LOCAL_STORAGE_KEYS.SCOPE_VALUES, JSON.stringify(toStore));\n }\n \n /\n Gets a specific persisted scope value.\n * \n * @param keyParams - Parameters to build the storage key\n * @returns The persisted value, or null if not found\n /\n static getValue(keyParams: ScopeFieldStorageKeyParams): AppScopeValue {\n const persisted = ScopeUtilsService.loadAll();\n const key = ScopeUtilsService.buildStorageKey(keyParams);\n return persisted.fields[key] ?? null;\n }\n \n /\n Sets a persisted scope value.\n * \n * @param keyParams - Parameters to build the storage key\n * @param value - The value to persist (null to clear)\n /\n static setValue(keyParams: ScopeFieldStorageKeyParams, value: AppScopeValue): void {\n const persisted = ScopeUtilsService.loadAll();\n const key = ScopeUtilsService.buildStorageKey(keyParams);\n \n if (value === null) {\n delete persisted.fields[key];\n } else {\n persisted.fields[key] = value;\n }\n \n ScopeUtilsService.saveAll(persisted);\n }\n \n /\n Clears all persisted scope values for a specific primary scope context.\n * \n * Useful when switching organizations - clears all org-scoped values for the old org.\n * \n * @param appType - Application type\n * @param resourcePrimaryScope - The primary scope level to clear\n * @param primaryScopeValue - The specific primary scope value to clear\n /\n static clearForContext(\n appType: string,\n resourcePrimaryScope: ResourcePrimaryScope,\n primaryScopeValue: string\n ): void {\n const persisted = ScopeUtilsService.loadAll();\n const prefix = `${appType}\|${resourcePrimaryScope}\|${primaryScopeValue}\|`;\n \n for (const key of Object.keys(persisted.fields)) {\n if (key.startsWith(prefix)) {\n delete persisted.fields[key];\n }\n }\n \n ScopeUtilsService.saveAll(persisted);\n }\n \n /\n Loads all persisted scope values for the current context.\n * \n * @param appType - Application type\n * @param context - Current primary scope context\n * @param scopeFields - List of scope field configurations to load\n * @returns Map of field identifier to persisted value\n */\n static loadForContext(\n appType: string,\n context: PrimaryScopeContext,\n scopeFields: Array<{ fieldIdentifier: string; resourcePrimaryScope: ResourcePrimaryScope }>\n ): Record<string, AppScopeValue> {\n const result: Record<string, AppScopeValue> = {};\n \n for (const field of scopeFields) {\n const primaryScopeValue = ScopeUtilsService.getPrimaryScopeValue(field.resourcePrimaryScope, context);\n \n if (!primaryScopeValue) {\n result[field.fieldIdentifier] = null;\n continue;\n }\n \n const value = ScopeUtilsService.getValue({\n appType,\n resourcePrimaryScope: field.resourcePrimaryScope,\n primaryScopeValue,\n fieldIdentifier: field.fieldIdentifier,\n });\n \n result[field.fieldIdentifier] = value;\n }\n \n return result;\n }\n}\n"]}
1	+ {"version":3,"file":"scope.utils.frontend.service.js","sourceRoot":"","sources":["../../../../src/core/scope/scope.utils.frontend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,oBAAoB,EAEpB,gBAAgB,EAChB,+BAA+B,GAChC,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,8BAA8B,EAAE,MAAM,wDAAwD,CAAC;AACxG,OAAO,EAAE,wBAAwB,EAAE,MAAM,6DAA6D,CAAC;AACvG,OAAO,EAAE,8BAA8B,EAAgC,MAAM,wDAAwD,CAAC;AACtI,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,iEAAiE,CAAC;AAQzE,OAAO,EAAE,qBAAqB,EAA0B,MAAM,wDAAwD,CAAC;AAEvH,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAE5G;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IAE5B,8DAA8D;IAE9D;;;OAGG;IACH,MAAM,CAAU,qBAAqB,GAAyB,oBAAoB,CAAC,aAAa,CAAC;IAEjG,8DAA8D;IAE9D;;;;;;;;OAQG;IACH,MAAM,CAAC,uBAAuB,CAAC,OAA4B;QACzD,OAAO;YACL,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;YAC9C,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;YAC9B,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;YAC5C,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,IAAI;SACjD,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,iBAAiB,CAAC,MAKxB;QACC,MAAM,GAAG,GAAkC,EAAE,CAAC;QAE9C,IAAI,MAAM,CAAC,MAAM;YAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9C,IAAI,MAAM,CAAC,cAAc;YAAE,GAAG,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;QACtE,IAAI,MAAM,CAAC,aAAa;YAAE,GAAG,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QACnE,IAAI,MAAM,CAAC,eAAe;YAAE,GAAG,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QACzE,2FAA2F;QAC3F,kDAAkD;QAElD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAED,6DAA6D;IAE7D;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,gCAAgC,CACrC,YAAkD,EAClD,YAAkC;QAElC,IAAI,CAAC,YAAY;YAAE,OAAO,EAAE,CAAC;QAE7B,+DAA+D;QAC/D,MAAM,WAAW,GAAiD;YAChE,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,YAAY,CAAC,cAAc;YAC7D,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,MAAM;YAC7C,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,YAAY,CAAC,aAAa;YAC1D,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAAE,YAAY,CAAC,eAAe;SACjB,CAAC;QAElD,MAAM,MAAM,GAA2B,EAAE,CAAC;QAE1C,yDAAyD;QACzD,MAAM,qBAAqB,GAAG,+BAA+B,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAElF,wDAAwD;QACxD,KAAK,MAAM,YAAY,IAAI,qBAAqB,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;YACxC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,wCAAwC,CAAC,MAQ/C;QACC,MAAM,wBAAwB,GAAG,iBAAiB,CAAC,iBAAiB,CAAC;YACnE,MAAM,EAAE,MAAM,CAAC,aAAa;YAC5B,cAAc,EAAE,MAAM,CAAC,qBAAqB;YAC5C,aAAa,EAAE,MAAM,CAAC,oBAAoB;YAC1C,eAAe,EAAE,MAAM,CAAC,sBAAsB;SAC/C,CAAC,CAAC;QAEH,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,gCAAgC,CAC5E,wBAAwB,EACxB,MAAM,CAAC,YAAY,IAAI,iBAAiB,CAAC,qBAAqB,CAC/D,CAAC;QAEF,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,2CAA2C,CACtF,MAAM,CAAC,sCAAsC,CAC9C,CAAC;QAEF,OAAO;YACL,GAAG,mBAAmB;YACtB,GAAG,kBAAkB;YACrB,GAAG,CAAC,MAAM,CAAC,kCAAkC,IAAI,EAAE,CAAC;SACrD,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,+BAA+B,CACpC,GAAG,OAAkD;QAErD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAyB,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE;YAC5E,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,WAAW,CAAC;YACrB,CAAC;YAED,OAAO;gBACL,GAAG,WAAW;gBACd,GAAG,MAAM;aACV,CAAC;QACJ,CAAC,EAAE,EAAE,CAAC,CAAC;QAEP,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,2CAA2C,CAChD,0BAAmD;QAEnD,IAAI,CAAC,0BAA0B,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,MAAM,CAC/C,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,4BAA4B,CAAC,GAAG,CAAC,YAAY,CAAC,CACpE,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,yBAAyB,CAAC,MAIhC;QACC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,+BAA+B,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;QAChG,MAAM,oBAAoB,GAAG;YAC3B,GAAG,CAAC,MAAM,CAAC,2BAA2B,IAAI,EAAE,CAAC;YAC7C,GAAG,CAAC,MAAM,CAAC,8BAA8B,IAAI,EAAE,CAAC;SACjD,CAAC;QAEF,KAAK,MAAM,WAAW,IAAI,oBAAoB,EAAE,CAAC;YAC/C,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;YAC1C,IAAI,WAAW,CAAC,eAAe,EAAE,CAAC;gBAChC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,MAAM,CAAC,6BAA6B,CAClC,OAA2C,EAC3C,kBAA+B;QAE/B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAC/B,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CACrF,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,qCAAqC,CAAC,MAS5C;QACC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,MAAM,CAAC,kCAAkC,EAAE,CAAC;YACvF,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,yBAAyB,CAAC;gBACrE,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,2BAA2B,EAAE,MAAM,CAAC,2BAA2B;gBAC/D,8BAA8B,EAAE,MAAM,CAAC,8BAA8B;aACtE,CAAC,CAAC;YACH,MAAM,sBAAsB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,kCAAkC,CAAC;iBAClF,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;iBACzD,IAAI,EAAE,CAAC;YAEV,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,OAAO,CAAC,IAAI,CAAC,2FAA2F,EAAE;oBACxG,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,sBAAsB;oBACtB,kBAAkB,EAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE;oBACzD,kCAAkC,EAAE,MAAM,CAAC,kCAAkC;iBAC9E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,iBAAiB,CAAC,+BAA+B,CACtD,MAAM,CAAC,mBAAmB,EAC1B,MAAM,CAAC,kBAAkB,EACzB,MAAM,CAAC,kCAAkC,CAC1C,CAAC;IACJ,CAAC;IAED,6DAA6D;IAE7D;;;;OAIG;IACK,MAAM,CAAC,oBAAoB,CACjC,OAA2B,EAC3B,eAA6E;QAE7E,IAAI,CAAC,OAAO,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QAC9C,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;QAC7D,OAAO,OAAO,EAAE,YAAY,IAAI,IAAI,CAAC;IACvC,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,8BAA8B,CACnC,OAA0B,EAC1B,QAAoC,EACpC,cAA4E,EAC5E,eAA6E,EAC7E,gBAA8E;QAE9E,QAAQ,OAAO,CAAC,WAAW,EAAE,CAAC;YAC5B,KAAK,qBAAqB,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBAC9C,2DAA2D;gBAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,EAAE,YAAY,CAAC;gBAC3D,IAAI,YAAY,IAAI,QAAQ,EAAE,sBAAsB,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;oBACrE,MAAM,cAAc,GAAG,QAAQ,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;oBACrE,OAAO,cAAc,CAAC,oBAAoB,IAAI,iBAAiB,CAAC,qBAAqB,CAAC;gBACxF,CAAC;gBACD,0DAA0D;gBAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,eAAe,EAAE,SAAS,CAAC;gBACrD,IAAI,SAAS,EAAE,oBAAoB,EAAE,CAAC;oBACpC,OAAO,SAAS,CAAC,oBAAoB,CAAC;gBACxC,CAAC;gBACD,OAAO,iBAAiB,CAAC,qBAAqB,CAAC;YACjD,CAAC;YAED,KAAK,qBAAqB,CAAC,cAAc;gBACvC,OAAO,8BAA8B,CAAC;oBACpC,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,cAAc,EAAE,cAAuD;oBACvE,QAAQ;iBACT,CAAC,EAAE,YAAY;uBACX,iBAAiB,CAAC,qBAAqB,CAAC;YAE/C,KAAK,qBAAqB,CAAC,UAAU;gBACnC,IAAI,OAAO,CAAC,cAAc,EAAE,YAAY,EAAE,CAAC;oBACzC,OAAO,OAAO,CAAC,cAAc,CAAC,YAAY,CAAC;gBAC7C,CAAC;gBACD,IAAI,OAAO,CAAC,iBAAiB,IAAI,QAAQ,EAAE,CAAC;oBAC1C,OAAO,wBAAwB,CAAC;wBAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,QAAQ;qBACT,CAAC,EAAE,SAAS,CAAC,YAAY;2BACrB,iBAAiB,CAAC,qBAAqB,CAAC;gBAC/C,CAAC;gBACD,OAAO,iBAAiB,CAAC,qBAAqB,CAAC;YAEjD,KAAK,qBAAqB,CAAC,gBAAgB;gBACzC,OAAO,iBAAiB,CAAC,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,CAAC;uBAC1E,iBAAiB,CAAC,qBAAqB,CAAC;YAE/C,KAAK,qBAAqB,CAAC,iBAAiB;gBAC1C,OAAO,iBAAiB,CAAC,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC;uBAC3E,iBAAiB,CAAC,qBAAqB,CAAC;YAE/C,KAAK,qBAAqB,CAAC,cAAc;gBACvC,OAAO,8BAA8B,CAAC;oBACpC,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,QAAQ;iBACT,CAAC,EAAE,YAAY;uBACX,iBAAiB,CAAC,qBAAqB,CAAC;YAE/C,KAAK,qBAAqB,CAAC,gBAAgB,CAAC;YAC5C,KAAK,qBAAqB,CAAC,WAAW,CAAC;YACvC,KAAK,qBAAqB,CAAC,aAAa,CAAC;YACzC,KAAK,qBAAqB,CAAC,WAAW;gBACpC,OAAO,iBAAiB,CAAC,qBAAqB,CAAC;QACnD,CAAC;IACH,CAAC;IAED,+DAA+D;IAE/D;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,eAAe,CAAC,MAAkC;QACvD,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;IAClH,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,oBAAoB,CACzB,oBAA0C,EAC1C,OAA4B;QAE5B,QAAQ,oBAAoB,EAAE,CAAC;YAC7B,KAAK,oBAAoB,CAAC,aAAa;gBACrC,OAAO,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC;YACxC,KAAK,oBAAoB,CAAC,SAAS;gBACjC,OAAO,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC;YAChC,KAAK,oBAAoB,CAAC,WAAW;gBACnC,OAAO,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC;YACvC,KAAK,oBAAoB,CAAC,SAAS;gBACjC,OAAO,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC;YACzC;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAED,+DAA+D;IAE/D;;OAEG;IACH,MAAM,CAAC,OAAO;QACZ,MAAM,YAAY,GAAG,mBAAmB,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAE1E,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACxC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAClD,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAC7D,CAAC;YACD,OAAO,MAA8B,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC7D,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,OAAO,CAAC,MAA4B;QACzC,MAAM,OAAO,GAAyB;YACpC,GAAG,MAAM;YACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,mBAAmB,CAAC,kBAAkB,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,CAAC,SAAqC;QACnD,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,iBAAiB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QACzD,OAAO,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,CAAC,SAAqC,EAAE,KAAoB;QACzE,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,iBAAiB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAEzD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAChC,CAAC;QAED,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,eAAe,CACpB,OAAe,EACf,oBAA0C,EAC1C,iBAAyB;QAEzB,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,GAAG,OAAO,IAAI,oBAAoB,IAAI,iBAAiB,GAAG,CAAC;QAE1E,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,OAAO,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,cAAc,CACnB,OAAe,EACf,OAA4B,EAC5B,WAA2F;QAE3F,MAAM,MAAM,GAAkC,EAAE,CAAC;QAEjD,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;YAChC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,oBAAoB,CAAC,KAAK,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;YAEtG,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvB,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC;gBACrC,SAAS;YACX,CAAC;YAED,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC;gBACvC,OAAO;gBACP,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;gBAChD,iBAAiB;gBACjB,eAAe,EAAE,KAAK,CAAC,eAAe;aACvC,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC;QACxC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC","sourcesContent":["/*\n ScopeUtilsService\n * \n * Centralized service for all primary scope operations:\n * - Scope value derivation (buildPrimaryScopeValues, getPrimaryScopeValue)\n * - Scope identifier conversion (primaryScopeToContextIdentifiers)\n * - Scope extraction from content metadata (extractPrimaryScopeFromContent)\n * - InitiatorIds construction (buildInitiatorIds)\n * - localStorage persistence for custom scope fields\n * \n * Values are keyed by the resource's primary scope to prevent cross-scope leakage.\n * \n * IMPORTANT: Primary scope storage/commit ownership now belongs to AppScope.\n * This service remains a shared utility layer for primary-scope helpers and\n * custom scope field persistence. Custom fields are declared in top-level\n * `appScope.fields`.\n /\n\nimport { \n ResourcePrimaryScope, \n ExecutionContext_InitiatorIds,\n CoreResourceType,\n PRIMARY_SCOPE_TO_RESOURCE_TYPES,\n} from '@wildo-ai/saas-models';\nimport type { FrontendResourcesRegistry } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport type { FrontendResource_ParentResourceRequirement } from '~wildo-frontend-lib/core/resources/resource-path.frontend.schemas';\nimport { resolveExecutionViewDefinition } from '~wildo-frontend-lib/core/config/execution-view.schemas';\nimport { resolveInsertedChartView } from '~wildo-frontend-lib/core/config/chart-view.frontend.schemas';\nimport { resolveCompositeViewDefinition, type CompositeViewDefinition } from '~wildo-frontend-lib/core/config/composite-view.schemas';\nimport { \n getLocalStorageItem, \n setLocalStorageItem,\n LOCAL_STORAGE_KEYS,\n} from '~wildo-frontend-lib/core/commons/local-storage.frontend.schemas';\nimport type {\n AppScopeValue,\n PersistedScopeValues,\n ScopeFieldStorageKeyParams,\n PrimaryScopeContext,\n AppScopePrimaryValues,\n} from './scope.frontend.schemas';\nimport { NavigationContentType, type NavigationContent } from '~wildo-frontend-lib/core/navigation/navigation.schemas';\n\nconst PRIMARY_SCOPE_RESOURCE_TYPES = new Set<string>(Object.values(PRIMARY_SCOPE_TO_RESOURCE_TYPES).flat());\n\n/\n Centralized service for scope utilities and persistence.\n * All methods are static - no instantiation needed.\n /\nexport class ScopeUtilsService {\n\n // ─── Default Primary Scope ─────────────────────────────────\n \n /\n The default primary scope when none can be determined.\n * Used as a fallback across navigation, content areas, and scope extraction.\n /\n static readonly DEFAULT_PRIMARY_SCOPE: ResourcePrimaryScope = ResourcePrimaryScope.ORGANIZATIONS;\n\n // ─── Scope Value Builders ──────────────────────────────────\n \n /\n Builds a complete primary scope values record from a PrimaryScopeContext.\n * \n * This is the canonical way to build the resolved primary-scope snapshot\n * record from context values, avoiding hardcoded inline mappings across consumers.\n * \n * @param context - Current primary scope context values\n * @returns Record keyed by field identifier with scope values (or null)\n /\n static buildPrimaryScopeValues(context: PrimaryScopeContext): AppScopePrimaryValues {\n return {\n organizationId: context.organizationId ?? null,\n userId: context.userId ?? null,\n applicationId: context.applicationId ?? null,\n anonymousUserId: context.anonymousUserId ?? null,\n };\n }\n\n /\n Builds a clean ExecutionContext_InitiatorIds from individual scope values.\n * \n * This avoids the pattern of inline `{ userId: user?._id, organizationId: currentOrganizationId ?? undefined, ... }`\n * scattered across multiple hooks and contexts.\n * \n * Only includes fields that have truthy values (no undefined/null entries).\n * Returns null if no initiator IDs are available.\n * \n * @param params - Individual scope values to include\n * @returns ExecutionContext_InitiatorIds or null if empty\n /\n static buildInitiatorIds(params: {\n userId?: string \| null;\n organizationId?: string \| null;\n applicationId?: string \| null;\n anonymousUserId?: string \| null;\n }): ExecutionContext_InitiatorIds \| null {\n const ids: ExecutionContext_InitiatorIds = {};\n\n if (params.userId) ids.userId = params.userId;\n if (params.organizationId) ids.organizationId = params.organizationId;\n if (params.applicationId) ids.applicationId = params.applicationId;\n if (params.anonymousUserId) ids.anonymousUserId = params.anonymousUserId;\n // Machine-credential ids never exist on a browser session (USER_REQUEST / ANONYMOUS only),\n // so no machine-credential mapping is built here.\n\n return Object.keys(ids).length > 0 ? ids : null;\n }\n\n // ─── Scope Identifier Conversion ──────────────────────────\n \n /\n Convert ExecutionContext_InitiatorIds to contextResourceIdentifiers Record,\n * filtered by the target content's primaryScope.\n * \n * This prevents border effects in the navigation chain by only injecting\n * context identifiers that are relevant to the target content's scope.\n * \n * IMPORTANT: contextResourceIdentifiers uses resourceType as keys (e.g., 'organizations'),\n * not fieldIdentifiers (e.g., 'organizationId'). This function maps from InitiatorIds\n * (which use fieldIdentifiers) to the resourceType-keyed format.\n * \n * @param initiatorIds - The initiator IDs from execution context (primaryScopeInitiatorIds)\n * @param primaryScope - The primary scope of the target content (determines which identifiers to inject)\n * @returns Map with resourceType keys filtered to match the primaryScope (e.g., { organizations: 'org-123' })\n /\n static primaryScopeToContextIdentifiers(\n initiatorIds: ExecutionContext_InitiatorIds \| null,\n primaryScope: ResourcePrimaryScope\n ): Record<string, string> {\n if (!initiatorIds) return {};\n \n // Build the full mapping from InitiatorIds to CoreResourceType\n const fullMapping: Record<CoreResourceType, string \| undefined> = {\n [CoreResourceType.ORGANIZATIONS]: initiatorIds.organizationId,\n [CoreResourceType.USERS]: initiatorIds.userId,\n [CoreResourceType.APPLICATION]: initiatorIds.applicationId,\n [CoreResourceType.ANONYMOUS_USERS]: initiatorIds.anonymousUserId,\n } as Record<CoreResourceType, string \| undefined>;\n \n const result: Record<string, string> = {};\n \n // Get the relevant resource types for this primary scope\n const relevantResourceTypes = PRIMARY_SCOPE_TO_RESOURCE_TYPES[primaryScope] \|\| [];\n \n // Only include identifiers that match the primary scope\n for (const resourceType of relevantResourceTypes) {\n const value = fullMapping[resourceType];\n if (value) {\n result[resourceType] = value;\n }\n }\n \n return result;\n }\n\n /\n Build routed/navigation resource context identifiers from live AppScope plus\n * explicit URL/resource identifiers.\n \n This keeps direct routed pages and URL-sync navigation on the same merge\n * contract: primary-scope defaults first, then explicit identifiers override.\n /\n static buildResourceOperationContextIdentifiers(params: {\n currentUserId?: string \| null;\n currentOrganizationId?: string \| null;\n currentApplicationId?: string \| null;\n currentAnonymousUserId?: string \| null;\n primaryScope?: ResourcePrimaryScope \| null;\n liveAppScopeContextResourceIdentifiers?: Record<string, string>;\n explicitContextResourceIdentifiers?: Record<string, string \| { fieldIdentifier: string; resourceId: string }>;\n }): Record<string, string \| { fieldIdentifier: string; resourceId: string }> {\n const primaryScopeInitiatorIds = ScopeUtilsService.buildInitiatorIds({\n userId: params.currentUserId,\n organizationId: params.currentOrganizationId,\n applicationId: params.currentApplicationId,\n anonymousUserId: params.currentAnonymousUserId,\n });\n\n const primaryScopeContext = ScopeUtilsService.primaryScopeToContextIdentifiers(\n primaryScopeInitiatorIds,\n params.primaryScope ?? ScopeUtilsService.DEFAULT_PRIMARY_SCOPE,\n );\n\n const customScopeContext = ScopeUtilsService.filterCustomScopeContextResourceIdentifiers(\n params.liveAppScopeContextResourceIdentifiers,\n );\n\n return {\n ...primaryScopeContext,\n ...customScopeContext,\n ...(params.explicitContextResourceIdentifiers ?? {}),\n };\n }\n\n /\n Merges multiple `contextResourceIdentifiers` sources for a view render.\n \n Merge order matters:\n * 1. primary-scope-derived identifiers establish the default scope\n * 2. live app-scope identifiers enrich that default with the current global scope\n * 3. explicit identifiers passed through navigation win last, so a concrete\n * navigation target can override the ambient app scope intentionally\n /\n static mergeContextResourceIdentifiers(\n ...sources: Array<Record<string, string> \| undefined>\n ): Record<string, string> \| undefined {\n const merged = sources.reduce<Record<string, string>>((accumulator, source) => {\n if (!source) {\n return accumulator;\n }\n\n return {\n ...accumulator,\n ...source,\n };\n }, {});\n\n return Object.keys(merged).length > 0 ? merged : undefined;\n }\n\n /\n Keep only custom-scope identifiers from a live AppScope identifier map.\n \n Primary-scope resource types are filtered out so view-level merge order remains explicit:\n * primary defaults first, then custom scope, then explicit navigation-time overrides.\n /\n static filterCustomScopeContextResourceIdentifiers(\n contextResourceIdentifiers?: Record<string, string>,\n ): Record<string, string> {\n if (!contextResourceIdentifiers) {\n return {};\n }\n\n return Object.fromEntries(\n Object.entries(contextResourceIdentifiers).filter(\n ([resourceType]) => !PRIMARY_SCOPE_RESOURCE_TYPES.has(resourceType),\n ),\n );\n }\n\n /\n Compute the explicit binding keys a view is allowed to accept.\n \n A view may bind:\n * - ambient primary-scope resource identifiers implied by its `primaryScope`\n * - explicitly declared parent/additional resource requirements\n * - FK-keyed requirement aliases for self-referential or edge-specific cases\n \n `contextResourceIdentifiers` are bindable only by resource key (`resourceType`) or,\n * when a requirement needs a more specific edge alias, by `foreignKeyField`.\n * Requirement metadata like `childResourceType` and `relationshipEdgeKey` informs\n * relationship resolution but is not itself a context binding key.\n /\n static getAllowedViewBindingKeys(params: {\n primaryScope: ResourcePrimaryScope;\n parentResourcesRequirements?: FrontendResource_ParentResourceRequirement[];\n additionalResourceRequirements?: FrontendResource_ParentResourceRequirement[];\n }): Set<string> {\n const allowedKeys = new Set<string>(PRIMARY_SCOPE_TO_RESOURCE_TYPES[params.primaryScope] ?? []);\n const declaredRequirements = [\n ...(params.parentResourcesRequirements ?? []),\n ...(params.additionalResourceRequirements ?? []),\n ];\n\n for (const requirement of declaredRequirements) {\n allowedKeys.add(requirement.resourceType);\n if (requirement.foreignKeyField) {\n allowedKeys.add(requirement.foreignKeyField);\n }\n }\n\n return allowedKeys;\n }\n\n /\n Restrict an inherited context-identifier map to a view's declared binding\n * contract (the keys produced by {@link getAllowedViewBindingKeys}).\n \n A view embedded under a nested route inherits that route's FULL ancestor\n * scope chain — e.g. a todo opened via `/todo-lists/{list}/todos/{todo}` hands\n * its workspace `organizations` + `todoLists` + `todos`, and a tasks chart\n * embedded in that workspace inherits the same. A view only ever scopes by\n * what it DECLARES (its primaryScope + parent/additional requirements), so\n * undeclared ancestor keys (`todoLists` here) are dead weight: they bloat the\n * request body and trip the dev-only \"context bindings outside its declared\n * contract\" warning.\n \n Pre-filtering the EXPLICIT bindings with this helper before calling\n * {@link resolveViewContextResourceIdentifiers} both silences that warning and\n * keeps the resolved context honest. Custom app-scope keys merged separately\n * inside the resolver are unaffected (they flow through by design). Returns\n * `undefined` when nothing remains, so callers can treat \"no context\"\n * uniformly. Safe wherever a view's behaviour is fully determined by its\n * declared contract (charts, resource-owned composite workspaces).\n /\n static scopeContextToBindingContract(\n context: Record<string, string> \| undefined,\n allowedBindingKeys: Set<string>,\n ): Record<string, string> \| undefined {\n if (!context) {\n return undefined;\n }\n const scoped = Object.fromEntries(\n Object.entries(context).filter(([bindingKey]) => allowedBindingKeys.has(bindingKey)),\n );\n return Object.keys(scoped).length > 0 ? scoped : undefined;\n }\n\n /\n Resolve a view's context identifiers from ambient AppScope plus explicit navigation-time overrides.\n \n In development/test, explicit bindings outside the view contract still flow through so the\n * current runtime remains non-breaking, but a warning is emitted to make the undeclared binding visible.\n /\n static resolveViewContextResourceIdentifiers(params: {\n surfaceName: string;\n surfaceRef?: string;\n primaryScope: ResourcePrimaryScope;\n parentResourcesRequirements?: FrontendResource_ParentResourceRequirement[];\n additionalResourceRequirements?: FrontendResource_ParentResourceRequirement[];\n primaryScopeContext?: Record<string, string>;\n customScopeContext?: Record<string, string>;\n explicitContextResourceIdentifiers?: Record<string, string>;\n }): Record<string, string> \| undefined {\n if (process.env.NODE_ENV !== 'production' && params.explicitContextResourceIdentifiers) {\n const allowedBindingKeys = ScopeUtilsService.getAllowedViewBindingKeys({\n primaryScope: params.primaryScope,\n parentResourcesRequirements: params.parentResourcesRequirements,\n additionalResourceRequirements: params.additionalResourceRequirements,\n });\n const unsupportedBindingKeys = Object.keys(params.explicitContextResourceIdentifiers)\n .filter(bindingKey => !allowedBindingKeys.has(bindingKey))\n .sort();\n\n if (unsupportedBindingKeys.length > 0) {\n console.warn('[ScopeUtilsService] View received explicit context bindings outside its declared contract', {\n surfaceName: params.surfaceName,\n surfaceRef: params.surfaceRef,\n primaryScope: params.primaryScope,\n unsupportedBindingKeys,\n allowedBindingKeys: Array.from(allowedBindingKeys).sort(),\n explicitContextResourceIdentifiers: params.explicitContextResourceIdentifiers,\n });\n }\n }\n\n return ScopeUtilsService.mergeContextResourceIdentifiers(\n params.primaryScopeContext,\n params.customScopeContext,\n params.explicitContextResourceIdentifiers,\n );\n }\n\n // ─── Scope Extraction from Content ────────────────────────\n \n /\n Minimal view definition shape needed for primaryScope lookup by viewRef.\n * All view definition types (CompositeView, ChartView, FullCustomView, FlowsActorsView)\n * satisfy this interface.\n /\n private static findViewPrimaryScope(\n viewRef: string \| undefined,\n viewDefinitions?: Array<{ ref: string; primaryScope?: ResourcePrimaryScope }>\n ): ResourcePrimaryScope \| null {\n if (!viewRef \|\| !viewDefinitions) return null;\n const viewDef = viewDefinitions.find(v => v.ref === viewRef);\n return viewDef?.primaryScope ?? null;\n }\n\n /\n Extract primaryScope from navigation content metadata.\n * \n * - For RESOURCE_OPERATION: retrieves from the resource configuration (resourcePrimaryScope)\n * - For COMPOSITE_VIEW: retrieves from the composite view definition (primaryScope)\n * - For CHART_VIEW: retrieves from the chart view definition (primaryScope)\n * - For FULL_CUSTOM_VIEW: retrieves from the full custom view definition (primaryScope)\n * - For FLOWS_ACTORS_VIEW: retrieves from the flows actors view definition (primaryScope)\n * - For ENGINE_PAGE / INLINE_CREATE / ERROR_MODAL: defaults to DEFAULT_PRIMARY_SCOPE\n * \n * @param content - The navigation content (typed union from navigation.schemas)\n * @param registry - The frontend resources registry (needed for resource lookup)\n * @param compositeViews - Available composite view definitions\n * @param chartViews - Available chart view definitions\n * @param fullCustomViews - Available full custom view definitions\n * @param flowsActorsViews - Available flows actors view definitions\n * @returns The primary scope for the content, defaults to DEFAULT_PRIMARY_SCOPE if not found\n /\n static extractPrimaryScopeFromContent(\n content: NavigationContent,\n registry?: FrontendResourcesRegistry,\n compositeViews?: Array<{ ref: string; primaryScope?: ResourcePrimaryScope }>,\n fullCustomViews?: Array<{ ref: string; primaryScope?: ResourcePrimaryScope }>,\n flowsActorsViews?: Array<{ ref: string; primaryScope?: ResourcePrimaryScope }>,\n ): ResourcePrimaryScope {\n switch (content.contentType) {\n case NavigationContentType.RESOURCE_OPERATION: {\n // Get resourcePrimaryScope from the resource configuration\n const resourceType = content.resourceContext?.resourceType;\n if (resourceType && registry?.resourceConfigurations?.[resourceType]) {\n const resourceConfig = registry.resourceConfigurations[resourceType];\n return resourceConfig.resourcePrimaryScope \|\| ScopeUtilsService.DEFAULT_PRIMARY_SCOPE;\n }\n // Fallback: try to get it from the operation if available\n const operation = content.resourceContext?.operation;\n if (operation?.resourcePrimaryScope) {\n return operation.resourcePrimaryScope;\n }\n return ScopeUtilsService.DEFAULT_PRIMARY_SCOPE;\n }\n \n case NavigationContentType.COMPOSITE_VIEW:\n return resolveCompositeViewDefinition({\n viewRef: content.viewRef,\n compositeViews: compositeViews as CompositeViewDefinition[] \| undefined,\n registry,\n })?.primaryScope\n ?? ScopeUtilsService.DEFAULT_PRIMARY_SCOPE;\n \n case NavigationContentType.CHART_VIEW:\n if (content.viewDefinition?.primaryScope) {\n return content.viewDefinition.primaryScope;\n }\n if (content.runtimeDescriptor \|\| registry) {\n return resolveInsertedChartView({\n viewRef: content.viewRef,\n registry,\n })?.chartView.primaryScope\n ?? ScopeUtilsService.DEFAULT_PRIMARY_SCOPE;\n }\n return ScopeUtilsService.DEFAULT_PRIMARY_SCOPE;\n \n case NavigationContentType.FULL_CUSTOM_VIEW:\n return ScopeUtilsService.findViewPrimaryScope(content.viewRef, fullCustomViews)\n ?? ScopeUtilsService.DEFAULT_PRIMARY_SCOPE;\n \n case NavigationContentType.FLOWS_ACTORS_VIEW:\n return ScopeUtilsService.findViewPrimaryScope(content.viewRef, flowsActorsViews)\n ?? ScopeUtilsService.DEFAULT_PRIMARY_SCOPE;\n\n case NavigationContentType.EXECUTION_VIEW:\n return resolveExecutionViewDefinition({\n viewRef: content.viewRef,\n registry,\n })?.primaryScope\n ?? ScopeUtilsService.DEFAULT_PRIMARY_SCOPE;\n \n case NavigationContentType.CUSTOM_COMPONENT:\n case NavigationContentType.ENGINE_PAGE:\n case NavigationContentType.INLINE_CREATE:\n case NavigationContentType.ERROR_MODAL:\n return ScopeUtilsService.DEFAULT_PRIMARY_SCOPE;\n }\n }\n \n // ─── Key Builders ───────────────────────────────────────────\n \n /\n Builds a unique storage key for a scope field value.\n * \n * The key structure ensures that scope values are isolated by:\n * - App type (different apps may have different scope selections)\n * - Primary scope level (e.g., org-scoped vs user-scoped resources)\n * - Primary scope value (e.g., different orgs have different workspaces)\n * - Field identifier (the actual scope field)\n * \n * @example\n * ScopeUtilsService.buildStorageKey({\n * appType: 'MAIN_APP',\n * resourcePrimaryScope: ResourcePrimaryScope.ORGANIZATIONS,\n * primaryScopeValue: 'org-123',\n * fieldIdentifier: 'workspaceId'\n * })\n * // Returns: \"MAIN_APP\|ORGANIZATIONS\|org-123\|workspaceId\"\n /\n static buildStorageKey(params: ScopeFieldStorageKeyParams): string {\n return `${params.appType}\|${params.resourcePrimaryScope}\|${params.primaryScopeValue}\|${params.fieldIdentifier}`;\n }\n \n /\n Gets the current primary scope value for a given resource primary scope level.\n * \n * @param resourcePrimaryScope - The primary scope level of the resource\n * @param context - Current primary scope context values\n * @returns The primary scope value, or null if not available\n /\n static getPrimaryScopeValue(\n resourcePrimaryScope: ResourcePrimaryScope,\n context: PrimaryScopeContext\n ): string \| null {\n switch (resourcePrimaryScope) {\n case ResourcePrimaryScope.ORGANIZATIONS:\n return context.organizationId ?? null;\n case ResourcePrimaryScope.USER_SELF:\n return context.userId ?? null;\n case ResourcePrimaryScope.APPLICATION:\n return context.applicationId ?? null;\n case ResourcePrimaryScope.ANONYMOUS:\n return context.anonymousUserId ?? null;\n default:\n return null;\n }\n }\n \n // ─── Storage Operations ─────────────────────────────────────\n \n /\n Loads all persisted scope values from localStorage.\n /\n static loadAll(): PersistedScopeValues {\n const storedString = getLocalStorageItem(LOCAL_STORAGE_KEYS.SCOPE_VALUES);\n \n if (!storedString) {\n return { updatedAt: new Date().toISOString(), fields: {} };\n }\n \n try {\n const parsed = JSON.parse(storedString);\n if (typeof parsed !== 'object' \|\| parsed === null) {\n return { updatedAt: new Date().toISOString(), fields: {} };\n }\n return parsed as PersistedScopeValues;\n } catch {\n return { updatedAt: new Date().toISOString(), fields: {} };\n }\n }\n \n /\n Saves all persisted scope values to localStorage.\n /\n static saveAll(values: PersistedScopeValues): void {\n const toStore: PersistedScopeValues = {\n ...values,\n updatedAt: new Date().toISOString(),\n };\n setLocalStorageItem(LOCAL_STORAGE_KEYS.SCOPE_VALUES, JSON.stringify(toStore));\n }\n \n /\n Gets a specific persisted scope value.\n * \n * @param keyParams - Parameters to build the storage key\n * @returns The persisted value, or null if not found\n /\n static getValue(keyParams: ScopeFieldStorageKeyParams): AppScopeValue {\n const persisted = ScopeUtilsService.loadAll();\n const key = ScopeUtilsService.buildStorageKey(keyParams);\n return persisted.fields[key] ?? null;\n }\n \n /\n Sets a persisted scope value.\n * \n * @param keyParams - Parameters to build the storage key\n * @param value - The value to persist (null to clear)\n /\n static setValue(keyParams: ScopeFieldStorageKeyParams, value: AppScopeValue): void {\n const persisted = ScopeUtilsService.loadAll();\n const key = ScopeUtilsService.buildStorageKey(keyParams);\n \n if (value === null) {\n delete persisted.fields[key];\n } else {\n persisted.fields[key] = value;\n }\n \n ScopeUtilsService.saveAll(persisted);\n }\n \n /\n Clears all persisted scope values for a specific primary scope context.\n * \n * Useful when switching organizations - clears all org-scoped values for the old org.\n * \n * @param appType - Application type\n * @param resourcePrimaryScope - The primary scope level to clear\n * @param primaryScopeValue - The specific primary scope value to clear\n /\n static clearForContext(\n appType: string,\n resourcePrimaryScope: ResourcePrimaryScope,\n primaryScopeValue: string\n ): void {\n const persisted = ScopeUtilsService.loadAll();\n const prefix = `${appType}\|${resourcePrimaryScope}\|${primaryScopeValue}\|`;\n \n for (const key of Object.keys(persisted.fields)) {\n if (key.startsWith(prefix)) {\n delete persisted.fields[key];\n }\n }\n \n ScopeUtilsService.saveAll(persisted);\n }\n \n /\n Loads all persisted scope values for the current context.\n * \n * @param appType - Application type\n * @param context - Current primary scope context\n * @param scopeFields - List of scope field configurations to load\n * @returns Map of field identifier to persisted value\n */\n static loadForContext(\n appType: string,\n context: PrimaryScopeContext,\n scopeFields: Array<{ fieldIdentifier: string; resourcePrimaryScope: ResourcePrimaryScope }>\n ): Record<string, AppScopeValue> {\n const result: Record<string, AppScopeValue> = {};\n \n for (const field of scopeFields) {\n const primaryScopeValue = ScopeUtilsService.getPrimaryScopeValue(field.resourcePrimaryScope, context);\n \n if (!primaryScopeValue) {\n result[field.fieldIdentifier] = null;\n continue;\n }\n \n const value = ScopeUtilsService.getValue({\n appType,\n resourcePrimaryScope: field.resourcePrimaryScope,\n primaryScopeValue,\n fieldIdentifier: field.fieldIdentifier,\n });\n \n result[field.fieldIdentifier] = value;\n }\n \n return result;\n }\n}\n"]}

package/dist/esm/core/scope/useAppScope.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"useAppScope.d.ts","sourceRoot":"","sources":["~~../../../../../~~src/core/scope/useAppScope.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,WAAW,IAAI,oBAAoB,CAWlD;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,oBAAoB,GAAG,SAAS,CAElE"}
1	+ {"version":3,"file":"useAppScope.d.ts","sourceRoot":"","sources":["../../../../src/core/scope/useAppScope.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,WAAW,IAAI,oBAAoB,CAWlD;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,oBAAoB,GAAG,SAAS,CAElE"}

package/dist/esm/core/scope/useAppScope.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"useAppScope.js","sourceRoot":"","sources":["~~../../../../../~~src/core/scope/useAppScope.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,OAAO,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IAE5C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,uDAAuD;YACvD,sHAAsH,CACvH,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,UAAU,CAAC,eAAe,CAAC,CAAC;AACrC,CAAC","sourcesContent":["/*\n useAppScope Hook\n * \n * Primary hook for accessing the AppScopeContext.\n /\n\nimport { useContext } from 'react';\nimport { AppScopeContext } from './AppScopeContext';\nimport type { AppScopeContextValue } from './AppScopeContext';\n\n/\n Hook to access the AppScopeContext.\n * \n * Provides access to:\n * - Primary and custom scope values\n * - Scope field definitions\n * - Methods to set/clear scope values\n * - Dependency information\n * - Context building for navigation and API calls\n * - Quick Switcher support methods\n * \n * @throws Error if used outside of AppScopeProvider\n * \n * @example\n * ```tsx\n * function MyComponent() {\n * const { \n * allScopeValues,\n * setScopeValue,\n * buildContextualParameters \n * } = useAppScope();\n * \n * const handleWorkspaceChange = (workspaceId: string) => {\n * setScopeValue('workspaceId', workspaceId, { initiator: ScopeChangeInitiator.USER_SELECTION });\n * };\n * \n * // Use for API calls\n * const params = buildContextualParameters();\n * // { organizationId: '...', workspaceId: '...', ... }\n * }\n * ```\n /\nexport function useAppScope(): AppScopeContextValue {\n const context = useContext(AppScopeContext);\n \n if (!context) {\n throw new Error(\n 'useAppScope must be used within an AppScopeProvider. ' +\n 'Ensure AppScopeProvider is included in your provider hierarchy after AuthSessionProvider and above UserOrgsProvider.'\n );\n }\n \n return context;\n}\n\n/\n Hook to access the AppScopeContext safely (returns undefined if not available).\n * Useful for components that may render before the provider is mounted.\n */\nexport function useAppScopeSafe(): AppScopeContextValue \| undefined {\n return useContext(AppScopeContext);\n}\n"]}
1	+ {"version":3,"file":"useAppScope.js","sourceRoot":"","sources":["../../../../src/core/scope/useAppScope.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,OAAO,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IAE5C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,uDAAuD;YACvD,sHAAsH,CACvH,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,UAAU,CAAC,eAAe,CAAC,CAAC;AACrC,CAAC","sourcesContent":["/*\n useAppScope Hook\n * \n * Primary hook for accessing the AppScopeContext.\n /\n\nimport { useContext } from 'react';\nimport { AppScopeContext } from './AppScopeContext';\nimport type { AppScopeContextValue } from './AppScopeContext';\n\n/\n Hook to access the AppScopeContext.\n * \n * Provides access to:\n * - Primary and custom scope values\n * - Scope field definitions\n * - Methods to set/clear scope values\n * - Dependency information\n * - Context building for navigation and API calls\n * - Quick Switcher support methods\n * \n * @throws Error if used outside of AppScopeProvider\n * \n * @example\n * ```tsx\n * function MyComponent() {\n * const { \n * allScopeValues,\n * setScopeValue,\n * buildContextualParameters \n * } = useAppScope();\n * \n * const handleWorkspaceChange = (workspaceId: string) => {\n * setScopeValue('workspaceId', workspaceId, { initiator: ScopeChangeInitiator.USER_SELECTION });\n * };\n * \n * // Use for API calls\n * const params = buildContextualParameters();\n * // { organizationId: '...', workspaceId: '...', ... }\n * }\n * ```\n /\nexport function useAppScope(): AppScopeContextValue {\n const context = useContext(AppScopeContext);\n \n if (!context) {\n throw new Error(\n 'useAppScope must be used within an AppScopeProvider. ' +\n 'Ensure AppScopeProvider is included in your provider hierarchy after AuthSessionProvider and above UserOrgsProvider.'\n );\n }\n \n return context;\n}\n\n/\n Hook to access the AppScopeContext safely (returns undefined if not available).\n * Useful for components that may render before the provider is mounted.\n */\nexport function useAppScopeSafe(): AppScopeContextValue \| undefined {\n return useContext(AppScopeContext);\n}\n"]}

package/dist/esm/core/security/AnonymousSessionContext.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"AnonymousSessionContext.d.ts","sourceRoot":"","sources":["~~../../../../../~~src/core/security/AnonymousSessionContext.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAc,EAAkF,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAC9H,OAAO,EAAE,sCAAsC,EAAE,MAAM,uBAAuB,CAAC;AAK/E;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,+CAAyC,CAAC;AAC7E,MAAM,MAAM,sBAAsB,GAAG,sCAAsC,CAAC;AA8C5E,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,sBAAsB,CAAC;IAC/B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,oBAAoB,EAAE,MAAM,MAAM,CAAC;IACnC,sBAAsB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,kBAAkB,EAAE,MAAM,IAAI,CAAC;IAC/B,qBAAqB,EAAE,MAAM,IAAI,CAAC;CACnC;AAID,wBAAgB,wBAAwB,CAAC,EAAE,QAAQ,EAAE,EAAE;IAAE,QAAQ,EAAE,SAAS,CAAA;CAAE,2CAoJ7E;AAED,wBAAgB,mBAAmB,IAAI,4BAA4B,CAMlE"}
1	+ {"version":3,"file":"AnonymousSessionContext.d.ts","sourceRoot":"","sources":["../../../../src/core/security/AnonymousSessionContext.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAc,EAAkF,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAC9H,OAAO,EAAE,sCAAsC,EAAE,MAAM,uBAAuB,CAAC;AAK/E;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,+CAAyC,CAAC;AAC7E,MAAM,MAAM,sBAAsB,GAAG,sCAAsC,CAAC;AA8C5E,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,sBAAsB,CAAC;IAC/B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,oBAAoB,EAAE,MAAM,MAAM,CAAC;IACnC,sBAAsB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,kBAAkB,EAAE,MAAM,IAAI,CAAC;IAC/B,qBAAqB,EAAE,MAAM,IAAI,CAAC;CACnC;AAID,wBAAgB,wBAAwB,CAAC,EAAE,QAAQ,EAAE,EAAE;IAAE,QAAQ,EAAE,SAAS,CAAA;CAAE,2CAoJ7E;AAED,wBAAgB,mBAAmB,IAAI,4BAA4B,CAMlE"}

package/dist/esm/core/security/AnonymousSessionContext.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"AnonymousSessionContext.js","sourceRoot":"","sources":["../../../../../src/core/security/AnonymousSessionContext.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAc,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAkB,MAAM,OAAO,CAAC;AAC9H,OAAO,EAAE,sCAAsC,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,iEAAiE,CAAC;AAEvK;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,sCAAsC,CAAC;AAgB7E,SAAS,uBAAuB,CAAC,KAA4B,EAAE,MAA8B;IAC3F,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,cAAc;YACjB,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC;YAC/D,OAAO,EAAE,MAAM,EAAE,sBAAsB,CAAC,YAAY,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAEtH,KAAK,wBAAwB;YAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB,CAAC,YAAY,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YACzH,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,sBAAsB,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;QAEhG,KAAK,iBAAiB;YACpB,OAAO,EAAE,MAAM,EAAE,sBAAsB,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;QAE/H,KAAK,qBAAqB;YACxB,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YACjE,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,sBAAsB,CAAC,WAAW,EAAE,CAAC;QAElE,KAAK,OAAO;YACV,OAAO,EAAE,MAAM,EAAE,sBAAsB,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAE/F;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,aAAa,GAA0B;IAC3C,MAAM,EAAE,sBAAsB,CAAC,IAAI;IACnC,eAAe,EAAE,IAAI;IACrB,YAAY,EAAE,IAAI;CACnB,CAAC;AAaF,MAAM,uBAAuB,GAAG,aAAa,CAA2C,SAAS,CAAC,CAAC;AAEnG,MAAM,UAAU,wBAAwB,CAAC,EAAE,QAAQ,EAA2B;IAC5E,MAAM,EAAE,UAAU,EAAE,GAAG,cAAc,EAAE,CAAC;IACxC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,uBAAuB,EAAE,aAAa,CAAC,CAAC;IAE7E,+EAA+E;IAC/E,iFAAiF;IACjF,mFAAmF;IACnF,kFAAkF;IAClF,kFAAkF;IAClF,kFAAkF;IAClF,2CAA2C;IAC3C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,UAAU,EAAE,wBAAwB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1F,MAAM,4BAA4B,GAAG,WAAW,CAAC,CAAC,MAAc,EAAE,KAAoB,EAAE,EAAE;QACxF,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAClB,MAAM,8BAA8B,GAAG,WAAW,CAAC,GAAG,EAAE;QACtD,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACxD,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAClB,MAAM,6BAA6B,GAAG,WAAW,CAAC,CAAC,KAAa,EAAE,EAAE;QAClE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAElB,wEAAwE;IACxE,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,YAAY,GAAG,mBAAmB,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;QAC/E,MAAM,WAAW,GAAG,mBAAmB,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;QAEpF,IAAI,YAAY,IAAI,WAAW,EAAE,CAAC;YAChC,QAAQ,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;YAChG,4BAA4B,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QAC1D,CAAC;QAED,2EAA2E;QAC3E,gFAAgF;QAChF,kFAAkF;QAClF,8EAA8E;QAC9E,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,EAAE;YACrC,QAAQ,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,CAAC,CAAC;QACF,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,+BAA+B,CAAC,YAAY,CAAC,CAAC,CAAC;QAE5E,OAAO,GAAG,EAAE;YACV,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC;QACtE,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAC,CAAC;IAEhD,qDAAqD;IACrD,SAAS,CAAC,GAAG,EAAE;QACb,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;YACrB,KAAK,sBAAsB,CAAC,YAAY;gBACtC,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;oBAC1B,mBAAmB,CAAC,kBAAkB,CAAC,iBAAiB,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;oBACjF,4BAA4B,CAAC,KAAK,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;gBAC5D,CAAC;gBACD,MAAM;YAER,KAAK,sBAAsB,CAAC,MAAM;gBAChC,IAAI,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;oBAChD,mBAAmB,CAAC,kBAAkB,CAAC,iBAAiB,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;oBACjF,mBAAmB,CAAC,kBAAkB,CAAC,uBAAuB,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;oBACpF,4BAA4B,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;gBAC1E,CAAC;gBACD,MAAM;YAER,KAAK,sBAAsB,CAAC,OAAO;gBACjC,sBAAsB,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;gBAC7D,sBAAsB,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;gBACnE,8BAA8B,EAAE,CAAC;gBACjC,MAAM;QACV,CAAC;IACH,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,EAAE,4BAA4B,EAAE,8BAA8B,CAAC,CAAC,CAAC;IAE5H,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,SAAS,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAExD,4FAA4F;IAC5F,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,mBAAmB,GAAG,CAAC,CAAe,EAAE,EAAE;YAC9C,IAAI,CAAC,CAAC,GAAG,KAAK,kBAAkB,CAAC,iBAAiB,EAAE,CAAC;gBACnD,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;oBAChB,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC5B,8BAA8B,EAAE,CAAC;gBACnC,CAAC;qBAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;oBAC3D,MAAM,KAAK,GAAG,mBAAmB,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;oBAC9E,IAAI,KAAK,EAAE,CAAC;wBACV,QAAQ,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;wBACxF,4BAA4B,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;oBAClD,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,CAAC,CAAC,GAAG,KAAK,kBAAkB,CAAC,uBAAuB,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;gBACvH,QAAQ,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACvE,6BAA6B,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACxD,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC1E,CAAC,EAAE,CAAC,4BAA4B,EAAE,8BAA8B,EAAE,6BAA6B,CAAC,CAAC,CAAC;IAElG,MAAM,oBAAoB,GAAG,WAAW,CAAC,GAAW,EAAE;QACpD,IAAI,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB,CAAC,OAAO,EAAE,CAAC;YAC7H,OAAO,KAAK,CAAC,eAAe,CAAC;QAC/B,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,gFAAgF;QAChF,iFAAiF;QACjF,iFAAiF;QACjF,gFAAgF;QAChF,8EAA8E;QAC9E,qCAAqC;QACrC,4BAA4B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC,CAAC;IAExE,MAAM,sBAAsB,GAAG,WAAW,CAAC,CAAC,KAAa,EAAE,EAAE;QAC3D,QAAQ,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAEpC,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC1C,QAAQ,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC5C,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,qBAAqB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7C,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9B,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,KAAK,GAAiC;QAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,iBAAiB,EAAE,KAAK,CAAC,MAAM,KAAK,sBAAsB,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB,CAAC,YAAY;QACzH,oBAAoB;QACpB,sBAAsB;QACtB,kBAAkB;QAClB,qBAAqB;KACtB,CAAC;IAEF,OAAO,CACL,KAAC,uBAAuB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAC3C,QAAQ,GACwB,CACpC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,MAAM,OAAO,GAAG,UAAU,CAAC,uBAAuB,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["/*\n W7.3a: Anonymous Session Context\n \n Manages the anonymous session lifecycle via a state machine:\n * IDLE → INITIALIZING → ACTIVE → TRANSPOSING → CLEARED\n \n - IDLE: No anonymous session (no localStorage data)\n * - INITIALIZING: UUID generated, first API call in-flight (x-anonymous-session-init)\n * - ACTIVE: JWT stored, subsequent calls use x-anonymous-session\n * - TRANSPOSING: User is logging in, anonymous API calls blocked\n * - CLEARED: Transition to authenticated state complete\n \n The HTTP client reads anonymous session data from its own setters (set via this context).\n * On login, AuthSessionProvider should call clearAnonymousSession() to transition to CLEARED.\n /\n\nimport React, { createContext, useContext, useReducer, useEffect, useCallback, useRef, useMemo, type ReactNode } from 'react';\nimport { AnonymousSessionStateMachineStatesEnum } from '@wildo-ai/saas-models';\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { LOCAL_STORAGE_KEYS, getLocalStorageItem, setLocalStorageItem, removeLocalStorageItem } from '~wildo-frontend-lib/core/commons/local-storage.frontend.schemas';\n\n/\n Public alias for the canonical state-machine vocabulary.\n \n The enum itself lives in `@wildo-ai/saas-models`\n * (`AnonymousSessionStateMachineStatesEnum`) so the SaaS app and the\n * marketing site share one definition. This local re-export keeps the\n * existing `AnonymousSessionStatus` import path stable for any\n * consumer that already references it.\n /\nexport const AnonymousSessionStatus = AnonymousSessionStateMachineStatesEnum;\nexport type AnonymousSessionStatus = AnonymousSessionStateMachineStatesEnum;\n\ninterface AnonymousSessionState {\n status: AnonymousSessionStatus;\n anonymousUserId: string \| null;\n sessionToken: string \| null;\n}\n\ntype AnonymousSessionAction =\n \| { type: 'INIT_SESSION'; anonymousUserId: string }\n \| { type: 'SESSION_TOKEN_RECEIVED'; sessionToken: string }\n \| { type: 'RESTORE_SESSION'; anonymousUserId: string; sessionToken: string }\n \| { type: 'START_TRANSPOSITION' }\n \| { type: 'CLEAR' };\n\nfunction anonymousSessionReducer(state: AnonymousSessionState, action: AnonymousSessionAction): AnonymousSessionState {\n switch (action.type) {\n case 'INIT_SESSION':\n if (state.status !== AnonymousSessionStatus.IDLE) return state;\n return { status: AnonymousSessionStatus.INITIALIZING, anonymousUserId: action.anonymousUserId, sessionToken: null };\n\n case 'SESSION_TOKEN_RECEIVED':\n if (state.status !== AnonymousSessionStatus.INITIALIZING && state.status !== AnonymousSessionStatus.ACTIVE) return state;\n return { ...state, status: AnonymousSessionStatus.ACTIVE, sessionToken: action.sessionToken };\n\n case 'RESTORE_SESSION':\n return { status: AnonymousSessionStatus.ACTIVE, anonymousUserId: action.anonymousUserId, sessionToken: action.sessionToken };\n\n case 'START_TRANSPOSITION':\n if (state.status !== AnonymousSessionStatus.ACTIVE) return state;\n return { ...state, status: AnonymousSessionStatus.TRANSPOSING };\n\n case 'CLEAR':\n return { status: AnonymousSessionStatus.CLEARED, anonymousUserId: null, sessionToken: null };\n\n default:\n return state;\n }\n}\n\nconst INITIAL_STATE: AnonymousSessionState = {\n status: AnonymousSessionStatus.IDLE,\n anonymousUserId: null,\n sessionToken: null,\n};\n\nexport interface AnonymousSessionContextValue {\n status: AnonymousSessionStatus;\n anonymousUserId: string \| null;\n sessionToken: string \| null;\n isAnonymousActive: boolean;\n initAnonymousSession: () => string;\n onSessionTokenReceived: (token: string) => void;\n startTransposition: () => void;\n clearAnonymousSession: () => void;\n}\n\nconst AnonymousSessionContext = createContext<AnonymousSessionContextValue \| undefined>(undefined);\n\nexport function AnonymousSessionProvider({ children }: { children: ReactNode }) {\n const { httpClient } = useApplication();\n const [state, dispatch] = useReducer(anonymousSessionReducer, INITIAL_STATE);\n\n // Fan the anonymous session to EVERY client instance that carries it, not just\n // the base application client. The auth flow (login / register / verify) runs on\n // the module-level manual-calls singleton — a DIFFERENT instance — so without this\n // fan-out the `x-anonymous-session` header is never attached to auth requests and\n // the backend has nothing to transpose on signup/login. (The anonymous session is\n // one-per-tab; every instance must see the same handle.) Mirrors the auth-token /\n // consumable-token fan-out done elsewhere.\n const syncClients = useMemo(() => [httpClient, getManualCallsHttpClient()], [httpClient]);\n const setAnonymousSessionOnClients = useCallback((userId: string, token: string \| null) => {\n syncClients.forEach((c) => c.setAnonymousSession(userId, token));\n }, [syncClients]);\n const clearAnonymousSessionOnClients = useCallback(() => {\n syncClients.forEach((c) => c.clearAnonymousSession());\n }, [syncClients]);\n const updateAnonymousTokenOnClients = useCallback((token: string) => {\n syncClients.forEach((c) => c.updateAnonymousSessionToken(token));\n }, [syncClients]);\n\n // Restore from localStorage on mount + register response header handler\n useEffect(() => {\n const storedUserId = getLocalStorageItem(LOCAL_STORAGE_KEYS.ANONYMOUS_USER_ID);\n const storedToken = getLocalStorageItem(LOCAL_STORAGE_KEYS.ANONYMOUS_SESSION_TOKEN);\n\n if (storedUserId && storedToken) {\n dispatch({ type: 'RESTORE_SESSION', anonymousUserId: storedUserId, sessionToken: storedToken });\n setAnonymousSessionOnClients(storedUserId, storedToken);\n }\n\n // Register the response-header handler on EVERY client — the init response\n // (carrying `x-anonymous-session-token`) may come back on whichever client sent\n // the first anonymous request (an auth call on the manual-calls client, or an app\n // call on the base client), and the token must be captured wherever it lands.\n const tokenHandler = (token: string) => {\n dispatch({ type: 'SESSION_TOKEN_RECEIVED', sessionToken: token });\n };\n syncClients.forEach((c) => c.setAnonymousSessionTokenHandler(tokenHandler));\n\n return () => {\n syncClients.forEach((c) => c.setAnonymousSessionTokenHandler(null));\n };\n }, [syncClients, setAnonymousSessionOnClients]);\n\n // Sync state changes to localStorage and HTTP client\n useEffect(() => {\n switch (state.status) {\n case AnonymousSessionStatus.INITIALIZING:\n if (state.anonymousUserId) {\n setLocalStorageItem(LOCAL_STORAGE_KEYS.ANONYMOUS_USER_ID, state.anonymousUserId);\n setAnonymousSessionOnClients(state.anonymousUserId, null);\n }\n break;\n\n case AnonymousSessionStatus.ACTIVE:\n if (state.anonymousUserId && state.sessionToken) {\n setLocalStorageItem(LOCAL_STORAGE_KEYS.ANONYMOUS_USER_ID, state.anonymousUserId);\n setLocalStorageItem(LOCAL_STORAGE_KEYS.ANONYMOUS_SESSION_TOKEN, state.sessionToken);\n setAnonymousSessionOnClients(state.anonymousUserId, state.sessionToken);\n }\n break;\n\n case AnonymousSessionStatus.CLEARED:\n removeLocalStorageItem(LOCAL_STORAGE_KEYS.ANONYMOUS_USER_ID);\n removeLocalStorageItem(LOCAL_STORAGE_KEYS.ANONYMOUS_SESSION_TOKEN);\n clearAnonymousSessionOnClients();\n break;\n }\n }, [state.status, state.anonymousUserId, state.sessionToken, setAnonymousSessionOnClients, clearAnonymousSessionOnClients]);\n\n // Refs for cross-tab sync handler to avoid stale closures and re-registrations\n const stateRef = useRef(state);\n useEffect(() => { stateRef.current = state; }, [state]);\n\n // Cross-tab sync: the `storage` event fires only in other* tabs when localStorage changes.\n useEffect(() => {\n const handleStorageChange = (e: StorageEvent) => {\n if (e.key === LOCAL_STORAGE_KEYS.ANONYMOUS_USER_ID) {\n if (!e.newValue) {\n dispatch({ type: 'CLEAR' });\n clearAnonymousSessionOnClients();\n } else if (e.newValue !== stateRef.current.anonymousUserId) {\n const token = getLocalStorageItem(LOCAL_STORAGE_KEYS.ANONYMOUS_SESSION_TOKEN);\n if (token) {\n dispatch({ type: 'RESTORE_SESSION', anonymousUserId: e.newValue, sessionToken: token });\n setAnonymousSessionOnClients(e.newValue, token);\n }\n }\n }\n\n if (e.key === LOCAL_STORAGE_KEYS.ANONYMOUS_SESSION_TOKEN && e.newValue && e.newValue !== stateRef.current.sessionToken) {\n dispatch({ type: 'SESSION_TOKEN_RECEIVED', sessionToken: e.newValue });\n updateAnonymousTokenOnClients(e.newValue);\n }\n };\n\n window.addEventListener('storage', handleStorageChange);\n return () => window.removeEventListener('storage', handleStorageChange);\n }, [setAnonymousSessionOnClients, clearAnonymousSessionOnClients, updateAnonymousTokenOnClients]);\n\n const initAnonymousSession = useCallback((): string => {\n if (state.anonymousUserId && state.status !== AnonymousSessionStatus.IDLE && state.status !== AnonymousSessionStatus.CLEARED) {\n return state.anonymousUserId;\n }\n\n const newId = crypto.randomUUID();\n dispatch({ type: 'INIT_SESSION', anonymousUserId: newId });\n // Set the clients SYNCHRONOUSLY (not only via the state-sync effect, which runs\n // after the next render): the caller is an anonymous action (e.g. submitting the\n // contact form or creating a draft note) that fires its request immediately, and\n // that first request must carry `x-anonymous-session-init` to mint the session.\n // A no-token session flags `anonymousSessionInitPending` on the client so the\n // interceptor sends the init header.\n setAnonymousSessionOnClients(newId, null);\n return newId;\n }, [state.anonymousUserId, state.status, setAnonymousSessionOnClients]);\n\n const onSessionTokenReceived = useCallback((token: string) => {\n dispatch({ type: 'SESSION_TOKEN_RECEIVED', sessionToken: token });\n updateAnonymousTokenOnClients(token);\n }, [updateAnonymousTokenOnClients]);\n\n const startTransposition = useCallback(() => {\n dispatch({ type: 'START_TRANSPOSITION' });\n }, []);\n\n const clearAnonymousSession = useCallback(() => {\n dispatch({ type: 'CLEAR' });\n }, []);\n\n const value: AnonymousSessionContextValue = {\n status: state.status,\n anonymousUserId: state.anonymousUserId,\n sessionToken: state.sessionToken,\n isAnonymousActive: state.status === AnonymousSessionStatus.ACTIVE \|\| state.status === AnonymousSessionStatus.INITIALIZING,\n initAnonymousSession,\n onSessionTokenReceived,\n startTransposition,\n clearAnonymousSession,\n };\n\n return (\n <AnonymousSessionContext.Provider value={value}>\n {children}\n </AnonymousSessionContext.Provider>\n );\n}\n\nexport function useAnonymousSession(): AnonymousSessionContextValue {\n const context = useContext(AnonymousSessionContext);\n if (!context) {\n throw new Error('useAnonymousSession must be used within AnonymousSessionProvider');\n }\n return context;\n}\n"]}
1	+ {"version":3,"file":"AnonymousSessionContext.js","sourceRoot":"","sources":["../../../../src/core/security/AnonymousSessionContext.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAc,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAkB,MAAM,OAAO,CAAC;AAC9H,OAAO,EAAE,sCAAsC,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,iEAAiE,CAAC;AAEvK;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,sCAAsC,CAAC;AAgB7E,SAAS,uBAAuB,CAAC,KAA4B,EAAE,MAA8B;IAC3F,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,cAAc;YACjB,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC;YAC/D,OAAO,EAAE,MAAM,EAAE,sBAAsB,CAAC,YAAY,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAEtH,KAAK,wBAAwB;YAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB,CAAC,YAAY,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YACzH,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,sBAAsB,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;QAEhG,KAAK,iBAAiB;YACpB,OAAO,EAAE,MAAM,EAAE,sBAAsB,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;QAE/H,KAAK,qBAAqB;YACxB,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YACjE,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,sBAAsB,CAAC,WAAW,EAAE,CAAC;QAElE,KAAK,OAAO;YACV,OAAO,EAAE,MAAM,EAAE,sBAAsB,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAE/F;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,aAAa,GAA0B;IAC3C,MAAM,EAAE,sBAAsB,CAAC,IAAI;IACnC,eAAe,EAAE,IAAI;IACrB,YAAY,EAAE,IAAI;CACnB,CAAC;AAaF,MAAM,uBAAuB,GAAG,aAAa,CAA2C,SAAS,CAAC,CAAC;AAEnG,MAAM,UAAU,wBAAwB,CAAC,EAAE,QAAQ,EAA2B;IAC5E,MAAM,EAAE,UAAU,EAAE,GAAG,cAAc,EAAE,CAAC;IACxC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,uBAAuB,EAAE,aAAa,CAAC,CAAC;IAE7E,+EAA+E;IAC/E,iFAAiF;IACjF,mFAAmF;IACnF,kFAAkF;IAClF,kFAAkF;IAClF,kFAAkF;IAClF,2CAA2C;IAC3C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,UAAU,EAAE,wBAAwB,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1F,MAAM,4BAA4B,GAAG,WAAW,CAAC,CAAC,MAAc,EAAE,KAAoB,EAAE,EAAE;QACxF,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAClB,MAAM,8BAA8B,GAAG,WAAW,CAAC,GAAG,EAAE;QACtD,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACxD,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAClB,MAAM,6BAA6B,GAAG,WAAW,CAAC,CAAC,KAAa,EAAE,EAAE;QAClE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAElB,wEAAwE;IACxE,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,YAAY,GAAG,mBAAmB,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;QAC/E,MAAM,WAAW,GAAG,mBAAmB,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;QAEpF,IAAI,YAAY,IAAI,WAAW,EAAE,CAAC;YAChC,QAAQ,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;YAChG,4BAA4B,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QAC1D,CAAC;QAED,2EAA2E;QAC3E,gFAAgF;QAChF,kFAAkF;QAClF,8EAA8E;QAC9E,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,EAAE;YACrC,QAAQ,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,CAAC,CAAC;QACF,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,+BAA+B,CAAC,YAAY,CAAC,CAAC,CAAC;QAE5E,OAAO,GAAG,EAAE;YACV,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC;QACtE,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAC,CAAC;IAEhD,qDAAqD;IACrD,SAAS,CAAC,GAAG,EAAE;QACb,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;YACrB,KAAK,sBAAsB,CAAC,YAAY;gBACtC,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;oBAC1B,mBAAmB,CAAC,kBAAkB,CAAC,iBAAiB,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;oBACjF,4BAA4B,CAAC,KAAK,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;gBAC5D,CAAC;gBACD,MAAM;YAER,KAAK,sBAAsB,CAAC,MAAM;gBAChC,IAAI,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;oBAChD,mBAAmB,CAAC,kBAAkB,CAAC,iBAAiB,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;oBACjF,mBAAmB,CAAC,kBAAkB,CAAC,uBAAuB,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;oBACpF,4BAA4B,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;gBAC1E,CAAC;gBACD,MAAM;YAER,KAAK,sBAAsB,CAAC,OAAO;gBACjC,sBAAsB,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;gBAC7D,sBAAsB,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;gBACnE,8BAA8B,EAAE,CAAC;gBACjC,MAAM;QACV,CAAC;IACH,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,EAAE,4BAA4B,EAAE,8BAA8B,CAAC,CAAC,CAAC;IAE5H,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,SAAS,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAExD,4FAA4F;IAC5F,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,mBAAmB,GAAG,CAAC,CAAe,EAAE,EAAE;YAC9C,IAAI,CAAC,CAAC,GAAG,KAAK,kBAAkB,CAAC,iBAAiB,EAAE,CAAC;gBACnD,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;oBAChB,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC5B,8BAA8B,EAAE,CAAC;gBACnC,CAAC;qBAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;oBAC3D,MAAM,KAAK,GAAG,mBAAmB,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;oBAC9E,IAAI,KAAK,EAAE,CAAC;wBACV,QAAQ,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;wBACxF,4BAA4B,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;oBAClD,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,CAAC,CAAC,GAAG,KAAK,kBAAkB,CAAC,uBAAuB,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;gBACvH,QAAQ,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACvE,6BAA6B,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACxD,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC1E,CAAC,EAAE,CAAC,4BAA4B,EAAE,8BAA8B,EAAE,6BAA6B,CAAC,CAAC,CAAC;IAElG,MAAM,oBAAoB,GAAG,WAAW,CAAC,GAAW,EAAE;QACpD,IAAI,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB,CAAC,OAAO,EAAE,CAAC;YAC7H,OAAO,KAAK,CAAC,eAAe,CAAC;QAC/B,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,gFAAgF;QAChF,iFAAiF;QACjF,iFAAiF;QACjF,gFAAgF;QAChF,8EAA8E;QAC9E,qCAAqC;QACrC,4BAA4B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC,CAAC;IAExE,MAAM,sBAAsB,GAAG,WAAW,CAAC,CAAC,KAAa,EAAE,EAAE;QAC3D,QAAQ,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAEpC,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC1C,QAAQ,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC5C,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,qBAAqB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7C,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9B,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,KAAK,GAAiC;QAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,iBAAiB,EAAE,KAAK,CAAC,MAAM,KAAK,sBAAsB,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB,CAAC,YAAY;QACzH,oBAAoB;QACpB,sBAAsB;QACtB,kBAAkB;QAClB,qBAAqB;KACtB,CAAC;IAEF,OAAO,CACL,KAAC,uBAAuB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAC3C,QAAQ,GACwB,CACpC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,MAAM,OAAO,GAAG,UAAU,CAAC,uBAAuB,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["/*\n W7.3a: Anonymous Session Context\n \n Manages the anonymous session lifecycle via a state machine:\n * IDLE → INITIALIZING → ACTIVE → TRANSPOSING → CLEARED\n \n - IDLE: No anonymous session (no localStorage data)\n * - INITIALIZING: UUID generated, first API call in-flight (x-anonymous-session-init)\n * - ACTIVE: JWT stored, subsequent calls use x-anonymous-session\n * - TRANSPOSING: User is logging in, anonymous API calls blocked\n * - CLEARED: Transition to authenticated state complete\n \n The HTTP client reads anonymous session data from its own setters (set via this context).\n * On login, AuthSessionProvider should call clearAnonymousSession() to transition to CLEARED.\n /\n\nimport React, { createContext, useContext, useReducer, useEffect, useCallback, useRef, useMemo, type ReactNode } from 'react';\nimport { AnonymousSessionStateMachineStatesEnum } from '@wildo-ai/saas-models';\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { LOCAL_STORAGE_KEYS, getLocalStorageItem, setLocalStorageItem, removeLocalStorageItem } from '~wildo-frontend-lib/core/commons/local-storage.frontend.schemas';\n\n/\n Public alias for the canonical state-machine vocabulary.\n \n The enum itself lives in `@wildo-ai/saas-models`\n * (`AnonymousSessionStateMachineStatesEnum`) so the SaaS app and the\n * marketing site share one definition. This local re-export keeps the\n * existing `AnonymousSessionStatus` import path stable for any\n * consumer that already references it.\n /\nexport const AnonymousSessionStatus = AnonymousSessionStateMachineStatesEnum;\nexport type AnonymousSessionStatus = AnonymousSessionStateMachineStatesEnum;\n\ninterface AnonymousSessionState {\n status: AnonymousSessionStatus;\n anonymousUserId: string \| null;\n sessionToken: string \| null;\n}\n\ntype AnonymousSessionAction =\n \| { type: 'INIT_SESSION'; anonymousUserId: string }\n \| { type: 'SESSION_TOKEN_RECEIVED'; sessionToken: string }\n \| { type: 'RESTORE_SESSION'; anonymousUserId: string; sessionToken: string }\n \| { type: 'START_TRANSPOSITION' }\n \| { type: 'CLEAR' };\n\nfunction anonymousSessionReducer(state: AnonymousSessionState, action: AnonymousSessionAction): AnonymousSessionState {\n switch (action.type) {\n case 'INIT_SESSION':\n if (state.status !== AnonymousSessionStatus.IDLE) return state;\n return { status: AnonymousSessionStatus.INITIALIZING, anonymousUserId: action.anonymousUserId, sessionToken: null };\n\n case 'SESSION_TOKEN_RECEIVED':\n if (state.status !== AnonymousSessionStatus.INITIALIZING && state.status !== AnonymousSessionStatus.ACTIVE) return state;\n return { ...state, status: AnonymousSessionStatus.ACTIVE, sessionToken: action.sessionToken };\n\n case 'RESTORE_SESSION':\n return { status: AnonymousSessionStatus.ACTIVE, anonymousUserId: action.anonymousUserId, sessionToken: action.sessionToken };\n\n case 'START_TRANSPOSITION':\n if (state.status !== AnonymousSessionStatus.ACTIVE) return state;\n return { ...state, status: AnonymousSessionStatus.TRANSPOSING };\n\n case 'CLEAR':\n return { status: AnonymousSessionStatus.CLEARED, anonymousUserId: null, sessionToken: null };\n\n default:\n return state;\n }\n}\n\nconst INITIAL_STATE: AnonymousSessionState = {\n status: AnonymousSessionStatus.IDLE,\n anonymousUserId: null,\n sessionToken: null,\n};\n\nexport interface AnonymousSessionContextValue {\n status: AnonymousSessionStatus;\n anonymousUserId: string \| null;\n sessionToken: string \| null;\n isAnonymousActive: boolean;\n initAnonymousSession: () => string;\n onSessionTokenReceived: (token: string) => void;\n startTransposition: () => void;\n clearAnonymousSession: () => void;\n}\n\nconst AnonymousSessionContext = createContext<AnonymousSessionContextValue \| undefined>(undefined);\n\nexport function AnonymousSessionProvider({ children }: { children: ReactNode }) {\n const { httpClient } = useApplication();\n const [state, dispatch] = useReducer(anonymousSessionReducer, INITIAL_STATE);\n\n // Fan the anonymous session to EVERY client instance that carries it, not just\n // the base application client. The auth flow (login / register / verify) runs on\n // the module-level manual-calls singleton — a DIFFERENT instance — so without this\n // fan-out the `x-anonymous-session` header is never attached to auth requests and\n // the backend has nothing to transpose on signup/login. (The anonymous session is\n // one-per-tab; every instance must see the same handle.) Mirrors the auth-token /\n // consumable-token fan-out done elsewhere.\n const syncClients = useMemo(() => [httpClient, getManualCallsHttpClient()], [httpClient]);\n const setAnonymousSessionOnClients = useCallback((userId: string, token: string \| null) => {\n syncClients.forEach((c) => c.setAnonymousSession(userId, token));\n }, [syncClients]);\n const clearAnonymousSessionOnClients = useCallback(() => {\n syncClients.forEach((c) => c.clearAnonymousSession());\n }, [syncClients]);\n const updateAnonymousTokenOnClients = useCallback((token: string) => {\n syncClients.forEach((c) => c.updateAnonymousSessionToken(token));\n }, [syncClients]);\n\n // Restore from localStorage on mount + register response header handler\n useEffect(() => {\n const storedUserId = getLocalStorageItem(LOCAL_STORAGE_KEYS.ANONYMOUS_USER_ID);\n const storedToken = getLocalStorageItem(LOCAL_STORAGE_KEYS.ANONYMOUS_SESSION_TOKEN);\n\n if (storedUserId && storedToken) {\n dispatch({ type: 'RESTORE_SESSION', anonymousUserId: storedUserId, sessionToken: storedToken });\n setAnonymousSessionOnClients(storedUserId, storedToken);\n }\n\n // Register the response-header handler on EVERY client — the init response\n // (carrying `x-anonymous-session-token`) may come back on whichever client sent\n // the first anonymous request (an auth call on the manual-calls client, or an app\n // call on the base client), and the token must be captured wherever it lands.\n const tokenHandler = (token: string) => {\n dispatch({ type: 'SESSION_TOKEN_RECEIVED', sessionToken: token });\n };\n syncClients.forEach((c) => c.setAnonymousSessionTokenHandler(tokenHandler));\n\n return () => {\n syncClients.forEach((c) => c.setAnonymousSessionTokenHandler(null));\n };\n }, [syncClients, setAnonymousSessionOnClients]);\n\n // Sync state changes to localStorage and HTTP client\n useEffect(() => {\n switch (state.status) {\n case AnonymousSessionStatus.INITIALIZING:\n if (state.anonymousUserId) {\n setLocalStorageItem(LOCAL_STORAGE_KEYS.ANONYMOUS_USER_ID, state.anonymousUserId);\n setAnonymousSessionOnClients(state.anonymousUserId, null);\n }\n break;\n\n case AnonymousSessionStatus.ACTIVE:\n if (state.anonymousUserId && state.sessionToken) {\n setLocalStorageItem(LOCAL_STORAGE_KEYS.ANONYMOUS_USER_ID, state.anonymousUserId);\n setLocalStorageItem(LOCAL_STORAGE_KEYS.ANONYMOUS_SESSION_TOKEN, state.sessionToken);\n setAnonymousSessionOnClients(state.anonymousUserId, state.sessionToken);\n }\n break;\n\n case AnonymousSessionStatus.CLEARED:\n removeLocalStorageItem(LOCAL_STORAGE_KEYS.ANONYMOUS_USER_ID);\n removeLocalStorageItem(LOCAL_STORAGE_KEYS.ANONYMOUS_SESSION_TOKEN);\n clearAnonymousSessionOnClients();\n break;\n }\n }, [state.status, state.anonymousUserId, state.sessionToken, setAnonymousSessionOnClients, clearAnonymousSessionOnClients]);\n\n // Refs for cross-tab sync handler to avoid stale closures and re-registrations\n const stateRef = useRef(state);\n useEffect(() => { stateRef.current = state; }, [state]);\n\n // Cross-tab sync: the `storage` event fires only in other* tabs when localStorage changes.\n useEffect(() => {\n const handleStorageChange = (e: StorageEvent) => {\n if (e.key === LOCAL_STORAGE_KEYS.ANONYMOUS_USER_ID) {\n if (!e.newValue) {\n dispatch({ type: 'CLEAR' });\n clearAnonymousSessionOnClients();\n } else if (e.newValue !== stateRef.current.anonymousUserId) {\n const token = getLocalStorageItem(LOCAL_STORAGE_KEYS.ANONYMOUS_SESSION_TOKEN);\n if (token) {\n dispatch({ type: 'RESTORE_SESSION', anonymousUserId: e.newValue, sessionToken: token });\n setAnonymousSessionOnClients(e.newValue, token);\n }\n }\n }\n\n if (e.key === LOCAL_STORAGE_KEYS.ANONYMOUS_SESSION_TOKEN && e.newValue && e.newValue !== stateRef.current.sessionToken) {\n dispatch({ type: 'SESSION_TOKEN_RECEIVED', sessionToken: e.newValue });\n updateAnonymousTokenOnClients(e.newValue);\n }\n };\n\n window.addEventListener('storage', handleStorageChange);\n return () => window.removeEventListener('storage', handleStorageChange);\n }, [setAnonymousSessionOnClients, clearAnonymousSessionOnClients, updateAnonymousTokenOnClients]);\n\n const initAnonymousSession = useCallback((): string => {\n if (state.anonymousUserId && state.status !== AnonymousSessionStatus.IDLE && state.status !== AnonymousSessionStatus.CLEARED) {\n return state.anonymousUserId;\n }\n\n const newId = crypto.randomUUID();\n dispatch({ type: 'INIT_SESSION', anonymousUserId: newId });\n // Set the clients SYNCHRONOUSLY (not only via the state-sync effect, which runs\n // after the next render): the caller is an anonymous action (e.g. submitting the\n // contact form or creating a draft note) that fires its request immediately, and\n // that first request must carry `x-anonymous-session-init` to mint the session.\n // A no-token session flags `anonymousSessionInitPending` on the client so the\n // interceptor sends the init header.\n setAnonymousSessionOnClients(newId, null);\n return newId;\n }, [state.anonymousUserId, state.status, setAnonymousSessionOnClients]);\n\n const onSessionTokenReceived = useCallback((token: string) => {\n dispatch({ type: 'SESSION_TOKEN_RECEIVED', sessionToken: token });\n updateAnonymousTokenOnClients(token);\n }, [updateAnonymousTokenOnClients]);\n\n const startTransposition = useCallback(() => {\n dispatch({ type: 'START_TRANSPOSITION' });\n }, []);\n\n const clearAnonymousSession = useCallback(() => {\n dispatch({ type: 'CLEAR' });\n }, []);\n\n const value: AnonymousSessionContextValue = {\n status: state.status,\n anonymousUserId: state.anonymousUserId,\n sessionToken: state.sessionToken,\n isAnonymousActive: state.status === AnonymousSessionStatus.ACTIVE \|\| state.status === AnonymousSessionStatus.INITIALIZING,\n initAnonymousSession,\n onSessionTokenReceived,\n startTransposition,\n clearAnonymousSession,\n };\n\n return (\n <AnonymousSessionContext.Provider value={value}>\n {children}\n </AnonymousSessionContext.Provider>\n );\n}\n\nexport function useAnonymousSession(): AnonymousSessionContextValue {\n const context = useContext(AnonymousSessionContext);\n if (!context) {\n throw new Error('useAnonymousSession must be used within AnonymousSessionProvider');\n }\n return context;\n}\n"]}

package/dist/esm/core/security/AuthSessionContext.d.ts CHANGED Viewed

@@ -12,6 +12,7 @@ import { type EnrollmentSessionSettlementResponse, type RegisterAccountRequest }
 import { RegistrationOutcome } from '../../core/security/registration-outcome.frontend.utils';
 import { AuthState, type UIFactorLevel, PasskeySignInMediation } from './security.frontend.schemas';
 import { type SessionTokenStorage } from './session-token-storage.frontend.service';
+import { SessionEndReason, SessionEstablishment } from '../../core/events/events.frontend.schemas';
 /**
  * The fields of `GET /auth/session/:sessionId` that describe a session still owing a second factor: its
  * state, which decides adoption, and the four method lists an MFA-required authentication RESPONSE
@@ -36,7 +37,17 @@ export interface AuthSessionContextType {
     authenticate: (request: AuthenticationRequest) => Promise<AuthenticationResponse>;
     getSessionState: (sessionId: string) => Promise<any>;
     isAuthenticated: () => boolean;
+    /** The person signs out of this tab — {@link SessionEndReason.SIGNED_OUT}. */
     logout: () => void;
+    /**
+     * End this tab's session for a reason other than the person's own sign-out (#1977) — the backend
+     * refused it, it could not be restored, an error forced it. `USER_LOGOUT` carries the reason.
+     */
+    endSession: (reason: SessionEndReason) => void;
+    /** How the session this tab holds was established — read when `USER_LOGIN` is announced (#1977). */
+    getSessionEstablishment: () => SessionEstablishment;
+    /** Why this tab's last session ended — read when `USER_LOGOUT` is announced (#1977). */
+    getSessionEndReason: () => SessionEndReason;
     /**
      * Begin a federated sign-in, carrying any governed-document releases the person accepted first.
      *

package/dist/esm/core/security/AuthSessionContext.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"AuthSessionContext.d.ts","sourceRoot":"","sources":["~~../../../../../~~src/core/security/AuthSessionContext.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAA2B,SAAS,EAA2C,MAAM,OAAO,CAAC;AAG3G,OAAO,EAEL,sBAAsB,EACtB,0BAA0B,EAC1B,qBAAqB,EACrB,UAAU,EAGV,0BAA0B,EAG1B,KAAK,oBAAoB,EAC1B,MAAM,uBAAuB,CAAC;AAE/B;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,OAAO,CAAC;IAClB,kBAAkB,EAAE,oBAAoB,EAAE,CAAC;CAC5C;AACD,OAAO,EAEL,KAAK,mCAAmC,EAExC,KAAK,sBAAsB,EAC5B,MAAM,mFAAmF,CAAC;AAC3F,OAAO,EAA+B,mBAAmB,EAAE,MAAM,uEAAuE,CAAC;AAazI,OAAO,EACL,SAAS,EAET,KAAK,aAAa,EAGlB,sBAAsB,EACvB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,0CAA0C,CAAC;~~AAiBlD~~;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,EAAE,0BAA0B,CAAC;IACnC,4BAA4B,CAAC,EAAE,SAAS,CAAC,qBAAqB,CAAC,CAAC;IAChE,0BAA0B,CAAC,EAAE,SAAS,CAAC,4BAA4B,CAAC,CAAC;IACrE,2BAA2B,CAAC,EAAE,SAAS,CAAC,6BAA6B,CAAC,CAAC;IACvE,yBAAyB,CAAC,EAAE,SAAS,CAAC,2BAA2B,CAAC,CAAC;CACpE;AAED;;;GAGG;AAEH,MAAM,WAAW,sBAAsB;IAErC,IAAI,EAAE,SAAS,CAAC;IAGhB,YAAY,EAAE,mBAAmB,CAAC;IAGlC,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACxE,wBAAwB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC/F,YAAY,EAAE,CAAC,OAAO,EAAE,qBAAqB,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAClF,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACrD,eAAe,EAAE,MAAM,OAAO,CAAC;IAC/B,MAAM,EAAE,MAAM,IAAI,CAAC;~~IAGnB~~;;;;;;;OAOG;IACH,mBAAmB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,kCAAkC,CAAC,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxI,sBAAsB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAGxD,uBAAuB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAKzE,gBAAgB,EAAE,CAAC,MAAM,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,UAAU,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,0BAA0B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAEhP;;;;;;OAMG;IACH,eAAe,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAGlF,qBAAqB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAGzF,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAE1G;;;;;;;OAOG;IACH,yBAAyB,EAAE,CAAC,UAAU,EAAE,mCAAmC,GAAG,SAAS,KAAK,OAAO,CAAC;IAEpG;;;;;;;OAOG;IACH,sBAAsB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,KAAK,OAAO,CAAC;IAEhH;;;;;;;OAOG;IACH,8BAA8B,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAEnG;;;;OAIG;IACH,yBAAyB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAEzG;;;;;OAKG;IACH,6BAA6B,EAAE,MAAM,IAAI,CAAC;IAG1C,iBAAiB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,aAAa,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACvG;;;;OAIG;IACH,iBAAiB,EAAE,CAAC,SAAS,CAAC,EAAE,sBAAsB,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAG3F,yBAAyB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAG5D;;;;;;;;;;OAUG;IACH,gCAAgC,EAAE,MAAM,IAAI,CAAC;IAG7C,mBAAmB,EAAE,MAAM,IAAI,CAAC;IAChC,mBAAmB,EAAE,CAAC,WAAW,EAAE,OAAO,KAAK,IAAI,CAAC;IAGpD,gBAAgB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC3G,wBAAwB,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7E;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAgE,CAAC;AAwBlJ,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC,EAAE,CAAC;IACzC,QAAQ,EAAE,SAAS,CAAC;IACpB,YAAY,CAAC,EAAE,mBAAmB,CAAC;CACpC,~~CAurDA~~,CAAC"}
1	+ {"version":3,"file":"AuthSessionContext.d.ts","sourceRoot":"","sources":["../../../../src/core/security/AuthSessionContext.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAA2B,SAAS,EAA2C,MAAM,OAAO,CAAC;AAG3G,OAAO,EAEL,sBAAsB,EACtB,0BAA0B,EAC1B,qBAAqB,EACrB,UAAU,EAGV,0BAA0B,EAG1B,KAAK,oBAAoB,EAC1B,MAAM,uBAAuB,CAAC;AAE/B;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,OAAO,CAAC;IAClB,kBAAkB,EAAE,oBAAoB,EAAE,CAAC;CAC5C;AACD,OAAO,EAEL,KAAK,mCAAmC,EAExC,KAAK,sBAAsB,EAC5B,MAAM,mFAAmF,CAAC;AAC3F,OAAO,EAA+B,mBAAmB,EAAE,MAAM,uEAAuE,CAAC;AAazI,OAAO,EACL,SAAS,EAET,KAAK,aAAa,EAGlB,sBAAsB,EACvB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,0CAA0C,CAAC;AAElD,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,yDAAyD,CAAC;AAgBjH;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,EAAE,0BAA0B,CAAC;IACnC,4BAA4B,CAAC,EAAE,SAAS,CAAC,qBAAqB,CAAC,CAAC;IAChE,0BAA0B,CAAC,EAAE,SAAS,CAAC,4BAA4B,CAAC,CAAC;IACrE,2BAA2B,CAAC,EAAE,SAAS,CAAC,6BAA6B,CAAC,CAAC;IACvE,yBAAyB,CAAC,EAAE,SAAS,CAAC,2BAA2B,CAAC,CAAC;CACpE;AAED;;;GAGG;AAEH,MAAM,WAAW,sBAAsB;IAErC,IAAI,EAAE,SAAS,CAAC;IAGhB,YAAY,EAAE,mBAAmB,CAAC;IAGlC,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACxE,wBAAwB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC/F,YAAY,EAAE,CAAC,OAAO,EAAE,qBAAqB,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAClF,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACrD,eAAe,EAAE,MAAM,OAAO,CAAC;IAC/B,8EAA8E;IAC9E,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB;;;OAGG;IACH,UAAU,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAC/C,oGAAoG;IACpG,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;IACpD,wFAAwF;IACxF,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;IAG5C;;;;;;;OAOG;IACH,mBAAmB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,kCAAkC,CAAC,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxI,sBAAsB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAGxD,uBAAuB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAKzE,gBAAgB,EAAE,CAAC,MAAM,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,UAAU,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,0BAA0B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAEhP;;;;;;OAMG;IACH,eAAe,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAGlF,qBAAqB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAGzF,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAE1G;;;;;;;OAOG;IACH,yBAAyB,EAAE,CAAC,UAAU,EAAE,mCAAmC,GAAG,SAAS,KAAK,OAAO,CAAC;IAEpG;;;;;;;OAOG;IACH,sBAAsB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,KAAK,OAAO,CAAC;IAEhH;;;;;;;OAOG;IACH,8BAA8B,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAEnG;;;;OAIG;IACH,yBAAyB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAEzG;;;;;OAKG;IACH,6BAA6B,EAAE,MAAM,IAAI,CAAC;IAG1C,iBAAiB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,aAAa,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACvG;;;;OAIG;IACH,iBAAiB,EAAE,CAAC,SAAS,CAAC,EAAE,sBAAsB,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAG3F,yBAAyB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAG5D;;;;;;;;;;OAUG;IACH,gCAAgC,EAAE,MAAM,IAAI,CAAC;IAG7C,mBAAmB,EAAE,MAAM,IAAI,CAAC;IAChC,mBAAmB,EAAE,CAAC,WAAW,EAAE,OAAO,KAAK,IAAI,CAAC;IAGpD,gBAAgB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC3G,wBAAwB,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7E;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAgE,CAAC;AAwBlJ,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC,EAAE,CAAC;IACzC,QAAQ,EAAE,SAAS,CAAC;IACpB,YAAY,CAAC,EAAE,mBAAmB,CAAC;CACpC,CAyuDA,CAAC"}

package/dist/esm/core/security/AuthSessionContext.js CHANGED Viewed

@@ -19,6 +19,7 @@ import { useAnonymousSession } from '../../core/security/AnonymousSessionContext
 import { EMPTY_AUTH_STATE, authFactorLevelForUiLevel, PasskeyAutofillExpiredError, PasskeyAutofillSupersededError, PasskeySignInMediation, } from './security.frontend.schemas.js';
 import { PersistentSessionTokenStorage, } from './session-token-storage.frontend.service.js';
 import { FrontendComponentType, MfaChallengeLabel, UserAuthLabel } from '@wildo-ai/presets-components-models';
+import { SessionEndReason, SessionEstablishment } from '../../core/events/events.frontend.schemas.js';
 const logger = LoggerFrontendService.getLogger();
 const logDebug = logger.debugByType('AuthSessionContext');
 logger.setDebugTypeLogging('AuthSessionContext', false);
@@ -100,6 +101,21 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
         // mirrors it into React state — the cookie is the sole source of
         // truth for the rotation channel.
     });
+    /**
+     * How the session this tab holds was established, and why the last one ended (#1977). Read by
+     * `UserOrgsProvider` when it announces `USER_LOGIN` / `USER_LOGOUT`, which happens a render AFTER the
+     * token changes — when the user's context has loaded, or has been cleared — so the facts are kept
+     * here, beside the only code that knows them, and read through `getSessionEstablishment` /
+     * `getSessionEndReason`.
+     *
+     * `RESUMED` is the initial value because the only token a tab can hold before any call here is the one
+     * it found in storage on load. `SESSION_ENDED` is the initial end reason because a session that ends
+     * with nobody recording why was not ended by the person.
+     */
+    const sessionEstablishmentRef = useRef(SessionEstablishment.RESUMED);
+    const sessionEndReasonRef = useRef(SessionEndReason.SESSION_ENDED);
+    const getSessionEstablishment = useCallback(() => sessionEstablishmentRef.current, []);
+    const getSessionEndReason = useCallback(() => sessionEndReasonRef.current, []);
     /**
      * Auth-hardening Slice A Step 3 (2026-04-13) — `storeAuthTokens` now only
      * carries the access token. The refresh token travels via the
@@ -109,11 +125,20 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
      * pre-migration session is wiped on the next call (and `EphemeralSessionTokenStorage`
      * stops accumulating an in-memory value that nothing reads).
      */
-    const storeAuthTokens = (accessToken) => {
+    const storeAuthTokens = (accessToken, establishment) => {
         tokenStorage.storeTokens(accessToken, null);
-        if (accessToken) {
-            clearAnonymousSession();
-        }
+        sessionEstablishmentRef.current = establishment;
+        clearAnonymousSession();
+    };
+    /**
+     * Store a ROTATED access token — a refresh, or a token another tab rotated or minted. Unlike
+     * {@link storeAuthTokens} it says nothing about how the session was established (#1977): a rotation
+     * continues the session it belongs to, so the establishment recorded when that session began stands,
+     * and a signed-out tab that adopts another tab's token has resumed a session rather than signed in.
+     */
+    const storeRotatedAccessToken = (accessToken) => {
+        tokenStorage.storeTokens(accessToken, null);
+        clearAnonymousSession();
     };
     /**
      * An answer parked the account at organization onboarding (#1090): remember the session the onboarding step
@@ -285,7 +310,7 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
                 : { ...a, isLoading: false, sessionId: resp.success ? null : sessionId }));
             return;
         }
-        storeAuthTokens(accessToken);
+        storeAuthTokens(accessToken, SessionEstablishment.SIGNED_IN);
         getManualCallsHttpClient().setAuthToken(accessToken);
         setResourcesAuthToken(accessToken);
         if (resp.success) {
@@ -495,7 +520,10 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
                 throw new Error('The code exchange answered with neither a sign-in nor a parked onboarding session.');
             }
             const { accessToken, returnPath, sourceFrontendServiceName, targetServiceKey } = response;
-            storeAuthTokens(accessToken);
+            // A cross-frontend handoff carries a session the person signed in to on the frontend that issued
+            // it, so here it is RESUMED; an OAuth or SSO callback is the sign-in itself (#1977). `returnPath`
+            // is the discriminator — see the invariant below.
+            storeAuthTokens(accessToken, typeof returnPath === 'string' ? SessionEstablishment.RESUMED : SessionEstablishment.SIGNED_IN);
             getManualCallsHttpClient().setAuthToken(accessToken);
             setResourcesAuthToken(accessToken);
             // Cross-frontend-handoff signal: the issuer (cross-app-jwt-propagation
@@ -563,7 +591,7 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
         try {
             const response = await getManualCallsHttpClient().verifyEmail(token, email);
             if (response.accessToken) {
-                storeAuthTokens(response.accessToken);
+                storeAuthTokens(response.accessToken, SessionEstablishment.SIGNED_IN);
                 getManualCallsHttpClient().setAuthToken(response.accessToken);
                 setResourcesAuthToken(response.accessToken);
                 logDebug('Email verification successful, tokens stored');
@@ -613,7 +641,7 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
         try {
             const response = await getManualCallsHttpClient().acceptInvitation(params);
             if (response.accessToken) {
-                storeAuthTokens(response.accessToken);
+                storeAuthTokens(response.accessToken, SessionEstablishment.SIGNED_IN);
                 getManualCallsHttpClient().setAuthToken(response.accessToken);
                 setResourcesAuthToken(response.accessToken);
                 logDebug('Invitation acceptance successful, tokens stored');
@@ -686,7 +714,7 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
         const outcome = classifyRegistrationOutcome(response);
         if (outcome === RegistrationOutcome.SIGNED_IN) {
             const accessToken = response.accessToken;
-            storeAuthTokens(accessToken);
+            storeAuthTokens(accessToken, SessionEstablishment.SIGNED_IN);
             getManualCallsHttpClient().setAuthToken(accessToken);
             setResourcesAuthToken(accessToken);
             logDebug('Registration signed the registrant in, tokens stored', { state: response.state });
@@ -771,7 +799,7 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
             // __wildo_refresh=…` response header (HttpOnly, JS-invisible).
             // Gate on `success && accessToken` only.
             if (response.success && response.accessToken) {
-                storeAuthTokens(response.accessToken);
+                storeAuthTokens(response.accessToken, SessionEstablishment.SIGNED_IN);
                 getManualCallsHttpClient().setAuthToken(response.accessToken);
                 setResourcesAuthToken(response.accessToken);
                 logDebug('Magic link verification successful, tokens stored');
@@ -824,7 +852,7 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
             // Auth-hardening Slice A Step 6 (2026-04-13): cookie-only contract
             // — see the magic-link gate above for the full rationale.
             if (response.success && response.accessToken) {
-                storeAuthTokens(response.accessToken);
+                storeAuthTokens(response.accessToken, SessionEstablishment.SIGNED_IN);
                 client.setAuthToken(response.accessToken);
                 setResourcesAuthToken(response.accessToken);
                 logDebug('MFA verification successful, tokens stored');
@@ -903,7 +931,7 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
             return false;
         }
         const client = getManualCallsHttpClient();
-        storeAuthTokens(settlement.accessToken);
+        storeAuthTokens(settlement.accessToken, SessionEstablishment.SIGNED_IN);
         client.setAuthToken(settlement.accessToken);
         setResourcesAuthToken(settlement.accessToken);
         logDebug('Enrollment completed the registration session, tokens stored');
@@ -952,7 +980,7 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
                 logDebug('Onboarding obligation completed; the session stays parked on the rest', { pendingObligations: response.pendingObligations });
                 return { signedIn: false, pendingObligations: response.pendingObligations ?? [] };
             }
-            storeAuthTokens(response.accessToken);
+            storeAuthTokens(response.accessToken, SessionEstablishment.SIGNED_IN);
             client.setAuthToken(response.accessToken);
             setResourcesAuthToken(response.accessToken);
             logDebug('Onboarding completed, tokens stored', { organizationId: response.organizationId });
@@ -1129,7 +1157,7 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
             // Auth-hardening Slice A Step 6 (2026-04-13): cookie-only contract
             // — see the magic-link gate above for the full rationale.
             if (response.success && response.accessToken) {
-                storeAuthTokens(response.accessToken);
+                storeAuthTokens(response.accessToken, SessionEstablishment.SIGNED_IN);
                 client.setAuthToken(response.accessToken);
                 setResourcesAuthToken(response.accessToken);
                 logDebug('Passkey authentication successful, tokens stored');
@@ -1198,7 +1226,9 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
             const client = getManualCallsHttpClient();
             const response = await client.exchangeOneOffToken(token);
             const { accessToken, consumableTokenValue, tokenExpiresAt, context } = response;
-            storeAuthTokens(accessToken);
+            // A one-off session is scoped to one task and time-limited: it identifies the person but is not a
+            // sign-in to the application, so it is not counted as one (#1977) — see `SessionEstablishment.ONE_OFF`.
+            storeAuthTokens(accessToken, SessionEstablishment.ONE_OFF);
             client.setAuthToken(accessToken);
             setResourcesAuthToken(accessToken);
             if (consumableTokenValue) {
@@ -1261,9 +1291,17 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
             rememberedPendingMfaSessionIdRef.current = null;
         }
     }, [auth.mfaRequired, auth.mfaSessionId, auth.accessToken, auth.identification?.email]);
-    const logout = useCallback(() => {
-        logDebug('Logging out user');
+    /**
+     * End this tab's session, recording WHY (#1977): `UserOrgsProvider` reads the reason when it announces
+     * `USER_LOGOUT`, and a listener that counts sign-outs must not count a session the backend ended.
+     * `logout` is the person's own sign-out; the refresh handler, session restore and the forced-logout
+     * error path end the session with {@link SessionEndReason.SESSION_ENDED}.
+     */
+    const endSession = useCallback((reason) => {
+        logDebug('Ending session', { reason });
         identificationGenerationRef.current += 1;
+        sessionEndReasonRef.current = reason;
+        sessionEstablishmentRef.current = SessionEstablishment.RESUMED;
         // Auth-hardening Slice A Step 3 (2026-04-13) — refresh token now travels
         // via the `__wildo_refresh` `HttpOnly` cookie. JS can't read it (and
         // doesn't need to): the cookie auto-attaches via `withCredentials: true`
@@ -1293,6 +1331,8 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
         hasInitializedRef.current = false;
         logger.info('User logged out successfully');
     }, [disconnect, tokenStorage, setResourcesAuthToken, setResourcesConsumableToken]);
+    /** The person signs out of this tab. */
+    const logout = useCallback(() => endSession(SessionEndReason.SIGNED_OUT), [endSession]);
     /**
      * Single-use clear for the cross-frontend-handoff context.
      *
@@ -1375,7 +1415,7 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
             // Persist the rotated access token. The rotated refresh token landed in
             // the `__wildo_refresh` cookie via `Set-Cookie` on the same response —
             // the browser cookie store updated automatically; no JS plumbing needed.
-            storeAuthTokens(result.accessToken);
+            storeRotatedAccessToken(result.accessToken);
             getManualCallsHttpClient().setAuthToken(result.accessToken);
             setResourcesAuthToken(result.accessToken);
             // Update React state — only the access token surfaces here.
@@ -1443,7 +1483,7 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
                         ? error.customMessageReference
                         : (error instanceof Error ? error.message : 'Unknown error'),
                 });
-                logout();
+                endSession(SessionEndReason.SESSION_ENDED);
             }
             else {
                 logger.warn('Auth token renewal failed but session is preserved (will retry on the next request)', {
@@ -1456,7 +1496,7 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
             }
             throw error;
         }
-    }, [setResourcesAuthToken, logout, refreshWebSocketAuth, tokenStorage]);
+    }, [setResourcesAuthToken, endSession, refreshWebSocketAuth, tokenStorage]);
     // Register the token renewal handler on both HTTP clients + expose it via ref
     // so the WebSocket `onAuthenticationError` callback (wired in `connectWebSocket`
     // above) always invokes the current handler.
@@ -1485,7 +1525,7 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
                 // long since aged out (A-Step 6 ships well after the dual-read
                 // window closed); the destructuring above doesn't pick it up.
                 logger.debug('Auth token renewal received from another tab; frontend clients updated');
-                storeAuthTokens(accessToken);
+                storeRotatedAccessToken(accessToken);
                 getManualCallsHttpClient().setAuthToken(accessToken);
                 setResourcesAuthToken(accessToken);
                 setAuth(a => ({ ...a, accessToken }));
@@ -1494,11 +1534,13 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
             if (type === 'LOGOUT') {
                 logDebug('Received logout signal from another tab');
                 identificationGenerationRef.current += 1;
+                sessionEndReasonRef.current = SessionEndReason.SIGNED_OUT_IN_ANOTHER_TAB;
+                sessionEstablishmentRef.current = SessionEstablishment.RESUMED;
                 disconnect();
                 tokenStorage.clear();
                 getManualCallsHttpClient().setConsumableToken(null);
                 setResourcesConsumableToken(null);
-                storeAuthTokens(null);
+                tokenStorage.storeTokens(null, null);
                 getManualCallsHttpClient().setAuthToken(null);
                 setResourcesAuthToken(null);
                 setAuth(EMPTY_AUTH_STATE);
@@ -1548,6 +1590,9 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
         getSessionState,
         isAuthenticated,
         logout,
+        endSession,
+        getSessionEstablishment,
+        getSessionEndReason,
         // OAuth2 + cross-frontend-handoff (shared AUTH_CODE_EXCHANGE primitive)
         initiateOAuth2Login,
         handleAuthCodeExchange,
@@ -1580,6 +1625,9 @@ export const AuthSessionProvider = ({ children, tokenStorage: tokenStorageProp }
         auth,
         tokenStorage,
         logout,
+        endSession,
+        getSessionEstablishment,
+        getSessionEndReason,
         initiateOAuth2Login,
         handleAuthCodeExchange,
         handleEmailVerification,