asma-core-helpers 0.7.2 → 0.9.0

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kCAAkC,CAAA;AAChD,cAAc,oCAAoC,CAAA;AAClD,cAAc,mCAAmC,CAAA;AACjD,cAAc,mCAAmC,CAAA;AACjD,cAAc,wBAAwB,CAAA;AACtC,cAAc,uBAAuB,CAAA;AACrC,cAAc,yBAAyB,CAAA;AACvC,cAAc,qBAAqB,CAAA;AACnC,cAAc,mDAAmD,CAAA;AACjE,cAAc,iCAAiC,CAAA;AAE/C,cAAc,kCAAkC,CAAA;AAChD,cAAc,uBAAuB,CAAA;AACrC,cAAc,+BAA+B,CAAA;AAC7C,cAAc,wCAAwC,CAAA;AACtD,cAAc,sCAAsC,CAAA;AACpD,cAAc,4CAA4C,CAAA;AAC1D,cAAc,2BAA2B,CAAA;AACzC,cAAc,2CAA2C,CAAA;AACzD,cAAc,6BAA6B,CAAA;AAC3C,cAAc,kCAAkC,CAAA;AAChD,cAAc,yCAAyC,CAAA;AACvD,cAAc,+BAA+B,CAAA;AAC7C,cAAc,2BAA2B,CAAA;AACzC,cAAc,yBAAyB,CAAA;AACvC,cAAc,2CAA2C,CAAA;AACzD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,iCAAiC,CAAA;AAC/C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,+BAA+B,CAAA;AAE7C,cAAc,qBAAqB,CAAA;AACnC,cAAc,kCAAkC,CAAA;AAEhD,cAAc,oBAAoB,CAAA;AAElC,cAAc,sBAAsB,CAAA;AAEpC,cAAc,uBAAuB,CAAA;AAErC,cAAc,oBAAoB,CAAA;AAElC,cAAc,8CAA8C,CAAA;AAC5D,cAAc,+CAA+C,CAAA;AAC7D,cAAc,mCAAmC,CAAA;AACjD,cAAc,qBAAqB,CAAA;AACnC,cAAc,uCAAuC,CAAA;AACrD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,kCAAkC,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kCAAkC,CAAA;AAChD,cAAc,oCAAoC,CAAA;AAClD,cAAc,mCAAmC,CAAA;AACjD,cAAc,mCAAmC,CAAA;AACjD,cAAc,wBAAwB,CAAA;AACtC,cAAc,uBAAuB,CAAA;AACrC,cAAc,yBAAyB,CAAA;AACvC,cAAc,qBAAqB,CAAA;AACnC,cAAc,mDAAmD,CAAA;AACjE,cAAc,iCAAiC,CAAA;AAE/C,cAAc,kCAAkC,CAAA;AAChD,cAAc,uBAAuB,CAAA;AACrC,cAAc,+BAA+B,CAAA;AAC7C,cAAc,wCAAwC,CAAA;AACtD,cAAc,sCAAsC,CAAA;AACpD,cAAc,4CAA4C,CAAA;AAC1D,cAAc,2BAA2B,CAAA;AACzC,cAAc,2CAA2C,CAAA;AACzD,cAAc,6BAA6B,CAAA;AAC3C,cAAc,yCAAyC,CAAA;AACvD,cAAc,+BAA+B,CAAA;AAC7C,cAAc,2BAA2B,CAAA;AACzC,cAAc,yBAAyB,CAAA;AACvC,cAAc,2CAA2C,CAAA;AACzD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,iCAAiC,CAAA;AAC/C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,+BAA+B,CAAA;AAE7C,cAAc,qBAAqB,CAAA;AACnC,cAAc,kCAAkC,CAAA;AAEhD,cAAc,oBAAoB,CAAA;AAElC,cAAc,sBAAsB,CAAA;AAEpC,cAAc,uBAAuB,CAAA;AAErC,cAAc,oBAAoB,CAAA;AAElC,cAAc,8CAA8C,CAAA;AAC5D,cAAc,+CAA+C,CAAA;AAC7D,cAAc,mCAAmC,CAAA;AACjD,cAAc,qBAAqB,CAAA;AACnC,cAAc,uCAAuC,CAAA;AACrD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,kCAAkC,CAAA"}

package/lib/index.js

@@ -17,7 +17,6 @@ export * from './helpers/generateSrvAuthBindings.types.js';
 export * from './helpers/getSubdomain.js';
 export * from './helpers/checkForRegisteredSubdomains.js';
 export * from './helpers/clearCacheData.js';
-export * from './helpers/generateGenqlClient.js';
 export * from './helpers/generateEnvConfigsBindings.js';
 export * from './helpers/userTypingSignal.js';
 export * from './helpers/base64ToFile.js';

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kCAAkC,CAAA;AAChD,cAAc,oCAAoC,CAAA;AAClD,cAAc,mCAAmC,CAAA;AACjD,cAAc,mCAAmC,CAAA;AACjD,cAAc,wBAAwB,CAAA;AACtC,cAAc,uBAAuB,CAAA;AACrC,cAAc,yBAAyB,CAAA;AACvC,cAAc,qBAAqB,CAAA;AACnC,cAAc,mDAAmD,CAAA;AACjE,cAAc,iCAAiC,CAAA;AAE/C,cAAc,kCAAkC,CAAA;AAChD,cAAc,uBAAuB,CAAA;AACrC,cAAc,+BAA+B,CAAA;AAC7C,cAAc,wCAAwC,CAAA;AACtD,cAAc,sCAAsC,CAAA;AACpD,cAAc,4CAA4C,CAAA;AAC1D,cAAc,2BAA2B,CAAA;AACzC,cAAc,2CAA2C,CAAA;AACzD,cAAc,6BAA6B,CAAA;AAC3C,cAAc,kCAAkC,CAAA;AAChD,cAAc,yCAAyC,CAAA;AACvD,cAAc,+BAA+B,CAAA;AAC7C,cAAc,2BAA2B,CAAA;AACzC,cAAc,yBAAyB,CAAA;AACvC,cAAc,2CAA2C,CAAA;AACzD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,iCAAiC,CAAA;AAC/C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,+BAA+B,CAAA;AAC7C,gDAAgD;AAChD,cAAc,qBAAqB,CAAA;AACnC,cAAc,kCAAkC,CAAA;AAEhD,cAAc,oBAAoB,CAAA;AAElC,cAAc,sBAAsB,CAAA;AAEpC,cAAc,uBAAuB,CAAA;AAErC,cAAc,oBAAoB,CAAA;AAElC,cAAc,8CAA8C,CAAA;AAC5D,cAAc,+CAA+C,CAAA;AAC7D,cAAc,mCAAmC,CAAA;AACjD,cAAc,qBAAqB,CAAA;AACnC,cAAc,uCAAuC,CAAA;AACrD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,kCAAkC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kCAAkC,CAAA;AAChD,cAAc,oCAAoC,CAAA;AAClD,cAAc,mCAAmC,CAAA;AACjD,cAAc,mCAAmC,CAAA;AACjD,cAAc,wBAAwB,CAAA;AACtC,cAAc,uBAAuB,CAAA;AACrC,cAAc,yBAAyB,CAAA;AACvC,cAAc,qBAAqB,CAAA;AACnC,cAAc,mDAAmD,CAAA;AACjE,cAAc,iCAAiC,CAAA;AAE/C,cAAc,kCAAkC,CAAA;AAChD,cAAc,uBAAuB,CAAA;AACrC,cAAc,+BAA+B,CAAA;AAC7C,cAAc,wCAAwC,CAAA;AACtD,cAAc,sCAAsC,CAAA;AACpD,cAAc,4CAA4C,CAAA;AAC1D,cAAc,2BAA2B,CAAA;AACzC,cAAc,2CAA2C,CAAA;AACzD,cAAc,6BAA6B,CAAA;AAC3C,cAAc,yCAAyC,CAAA;AACvD,cAAc,+BAA+B,CAAA;AAC7C,cAAc,2BAA2B,CAAA;AACzC,cAAc,yBAAyB,CAAA;AACvC,cAAc,2CAA2C,CAAA;AACzD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,iCAAiC,CAAA;AAC/C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,+BAA+B,CAAA;AAC7C,gDAAgD;AAChD,cAAc,qBAAqB,CAAA;AACnC,cAAc,kCAAkC,CAAA;AAEhD,cAAc,oBAAoB,CAAA;AAElC,cAAc,sBAAsB,CAAA;AAEpC,cAAc,uBAAuB,CAAA;AAErC,cAAc,oBAAoB,CAAA;AAElC,cAAc,8CAA8C,CAAA;AAC5D,cAAc,+CAA+C,CAAA;AAC7D,cAAc,mCAAmC,CAAA;AACjD,cAAc,qBAAqB,CAAA;AACnC,cAAc,uCAAuC,CAAA;AACrD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,kCAAkC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "asma-core-helpers",
-    "version": "0.7.2",
+    "version": "0.9.0",
     "description": "Core helper utilities for ASMA applications",
     "files": [
         "lib/**/*",
@@ -10,10 +10,15 @@
     "type": "module",
     "exports": {
         ".": "./lib/index.js",
-        "./lib": "./lib/index.js"
+        "./lib": "./lib/index.js",
+        "./urql": {
+            "types": "./lib/helpers/adopusNamespaceExchange.d.ts",
+            "default": "./lib/helpers/adopusNamespaceExchange.js"
+        }
     },
     "scripts": {
-        "build": "npx tsc && npx tsc -p ."
+        "build": "npx tsc && npx tsc -p .",
+        "test": "node --import tsx --test \"src/**/*.test.ts\""
     },
     "repository": {
         "type": "git",
@@ -22,16 +27,31 @@
     "keywords": [],
     "author": "",
     "license": "MIT",
+    "peerDependencies": {
+        "@urql/core": ">=4",
+        "wonka": ">=6"
+    },
+    "peerDependenciesMeta": {
+        "@urql/core": {
+            "optional": true
+        },
+        "wonka": {
+            "optional": true
+        }
+    },
     "devDependencies": {
-        "@genql/runtime": "^2.10.0",
         "@openreplay/tracker": "^16.4.10",
+        "@urql/core": "^6.0.3",
         "asma-qiankun-react-loader": "^0.8.2",
         "asma-types": "^2.8.0",
         "history": "^5.3.0",
         "lefthook": "^2.1.1",
-        "typescript": "^5.6.3"
+        "tsx": "^4.23.0",
+        "typescript": "^5.6.3",
+        "wonka": "^6.3.4"
     },
     "dependencies": {
+        "@0no-co/graphql.web": "^1.0.9",
         "asma-event-bus": "^0.7.27",
         "buffer": "^6.0.3",
         "idb-keyval": "^6.2.1",

package/src/g-definitions.ts

@@ -7,7 +7,7 @@ import type {
 import type { IGlobalOpenReplay } from './helpers/openReplayObject.js'
 import { realWindow } from './helpers/getSubdomain.js'
 import type { ICheckSigninOptions, ICheckSigninTransformedOptions } from './helpers/generateSrvAuthBindings.types.js'
-import type { IBaseJwtClaims } from 'asma-types/lib'
+import type { IBaseJwtClaims } from 'asma-types'
 import type { ActivityStatus } from './helpers/getActivityStatus.js'
 //import type { IGenerateSRVAuthBindings } from './helpers/generateSrvAuthBindings'
 //import type { IGenerateSRVAuthBindings } from './helpers/generateSrvAuthBindings'
@@ -115,6 +115,15 @@ declare global {
             setTheme: (theme: string) => void
         }
         rawWindow?: typeof window
+        /**
+         * Server-injected (first-hit) per-user platform payload — see asma-static-server ASMA-7544.
+         * Present when `ESM_PLATFORM_INJECTION` is on; the seed both the old (qiankun) and the new
+         * (ESM) architecture read their app versions/bases from.
+         */
+        __ASMA_PLATFORM__?: {
+            default_app_versions?: Record<string, string>
+            apps?: Record<string, { version: string; base: string }>
+        }
         __ENV?: Record<string, string>
         __ENV_MICRO: {
             [key: string]: Record<string, string>

package/src/helpers/adopusNamespaceExchange.test.ts

@@ -0,0 +1,117 @@
+import assert from 'node:assert/strict'
+import { describe, it } from 'node:test'
+
+import { parse, print } from '@0no-co/graphql.web'
+
+import { adopusSlugFromJwt, denamespaceData, namespaceDocument } from './adopusNamespaceExchange.js'
+
+const PREFIXED = new Set(['Actor', 'Actor_bool_exp', 'Int_comparison_exp', 'uniqueidentifier'])
+
+const normalize = (sdl: string) => print(parse(sdl))
+
+describe('namespaceDocument (transforms 1-3)', () => {
+    it('wraps the operation, prefixes variable definition types, leaves builtins alone', () => {
+        const doc = parse(`
+            query fetchActors($where: Actor_bool_exp, $limit: Int, $id: uniqueidentifier) {
+                Actor(where: $where, limit: $limit) { ActorNo Navn }
+            }
+        `)
+        const out = print(namespaceDocument(doc, 'avansas', PREFIXED))
+        assert.equal(
+            out,
+            normalize(`
+                query fetchActors($where: avansas_Actor_bool_exp, $limit: Int, $id: avansas_uniqueidentifier) {
+                    avansas {
+                        Actor(where: $where, limit: $limit) { ActorNo Navn }
+                    }
+                }
+            `),
+        )
+    })
+
+    it('prefixes wrapped list/non-null variable types', () => {
+        const doc = parse(`query q($ids: [Int_comparison_exp!]!) { Actor { ActorNo } }`)
+        const out = print(namespaceDocument(doc, 'avansas', PREFIXED))
+        assert.match(out, /\$ids: \[avansas_Int_comparison_exp!\]!/)
+    })
+
+    it('prefixes inline and named fragment type conditions, at any depth', () => {
+        const doc = parse(`
+            query q {
+                Actor {
+                    ... on Actor { ActorNo }
+                    ActorActor_Overordnet { ... on Actor { Navn } }
+                    ...actorFields
+                }
+            }
+            fragment actorFields on Actor { Navn }
+        `)
+        const out = print(namespaceDocument(doc, 'avansas', PREFIXED))
+        assert.equal((out.match(/on avansas_Actor/g) ?? []).length, 3)
+        assert.doesNotMatch(out, /on Actor\b/)
+    })
+
+    it('wraps mutations too', () => {
+        const doc = parse(`mutation m($w: Actor_bool_exp!) { update_Actor(where: $w) { affected_rows } }`)
+        const out = print(namespaceDocument(doc, 'genesisdev', PREFIXED))
+        assert.equal(
+            out,
+            normalize(`
+                mutation m($w: genesisdev_Actor_bool_exp!) {
+                    genesisdev { update_Actor(where: $w) { affected_rows } }
+                }
+            `),
+        )
+    })
+})
+
+describe('denamespaceData (transforms 4-5)', () => {
+    it('unwraps the namespace and strips __typename prefixes deeply', () => {
+        const wire = {
+            avansas: {
+                Actor: [
+                    {
+                        __typename: 'avansas_Actor',
+                        ActorNo: 1,
+                        ActorActor_Overordnet: [{ __typename: 'avansas_Actor', ActorNo: 2 }],
+                    },
+                ],
+            },
+        }
+        assert.deepEqual(denamespaceData(wire, 'avansas'), {
+            Actor: [
+                {
+                    __typename: 'Actor',
+                    ActorNo: 1,
+                    ActorActor_Overordnet: [{ __typename: 'Actor', ActorNo: 2 }],
+                },
+            ],
+        })
+    })
+
+    it('leaves unprefixed __typename values and non-typename fields untouched', () => {
+        const wire = { avansas: { Actor: [{ __typename: 'Actor', Navn: 'avansas_not_a_typename' }] } }
+        assert.deepEqual(denamespaceData(wire, 'avansas'), {
+            Actor: [{ __typename: 'Actor', Navn: 'avansas_not_a_typename' }],
+        })
+    })
+
+    it('passes data through when the namespace key is absent', () => {
+        assert.deepEqual(denamespaceData({ Actor: [] }, 'avansas'), { Actor: [] })
+    })
+})
+
+describe('adopusSlugFromJwt', () => {
+    const jwtWith = (claims: object) =>
+        `x.${Buffer.from(JSON.stringify(claims)).toString('base64url')}.y`
+
+    it('reads and sanitizes the subdomain claim', () => {
+        assert.equal(adopusSlugFromJwt(jwtWith({ subdomain: 'Fretex-Dev' })), 'fretex_dev')
+    })
+
+    it('returns undefined for missing token, missing claim, or unsanitizable subdomain', () => {
+        assert.equal(adopusSlugFromJwt(undefined), undefined)
+        assert.equal(adopusSlugFromJwt(jwtWith({})), undefined)
+        assert.equal(adopusSlugFromJwt(jwtWith({ subdomain: '1-bad!' })), undefined)
+    })
+})

package/src/helpers/adopusNamespaceExchange.ts

@@ -0,0 +1,215 @@
+/**
+ * adopusNamespaceExchange — urql exchange that maps unprefixed gql.tada operations onto the
+ * consolidated Adopus Hasura engine's per-tenant namespace, at the wire level only.
+ *
+ * Compile-time types stay the unprefixed avansas/AdOpusTest schema (DEC-004/DEC-011); this
+ * exchange rewrites the parsed document + JSON per request/response:
+ *   1. request:  wrap each operation's selection set in the `<slug>` root field
+ *   2. request:  prefix schema type names in variable definitions (`Actor_bool_exp` -> `<slug>_Actor_bool_exp`)
+ *   3. request:  prefix fragment type conditions (inline + named)
+ *   4. response: unwrap `data[<slug>]` -> `data`
+ *   5. response: strip the `<slug>_` prefix from `__typename` values
+ *
+ * `prefixedTypes` is the exact set of names the engine prefixes for the tenant source —
+ * generated at codegen time by adopus-hsr-wrapper/scripts/unwrap_client_schema.mjs
+ * (adopus-prefixed-types.json) so the runtime never guesses which names carry the prefix.
+ *
+ * Install it only on the SRV_AO_WRAPPER client and only when the resolved endpoint is the
+ * consolidated engine (`/api/hsr-wrapper/`) — the per-tenant `srv_urls.ao_wrapper` flip then
+ * switches endpoint and namespace mode atomically.
+ *
+ * @see asma-modules/_docs/adopus-graphql/plans/2026-07-11-00-14-plan-adopus-hasura2-consolidation.md:184 — §2.4.3 (DEC-004/DEC-015)
+ */
+import type { DocumentNode } from '@0no-co/graphql.web'
+import { makeOperation, type Exchange, type Operation, type OperationResult } from '@urql/core'
+import { map, pipe } from 'wonka'
+
+// Minimal structural AST model for exactly the nodes the transforms touch — graphql.web's
+// published types carry `kind: any`, which defeats discriminant narrowing; these mirror the
+// spec shape and the public API still speaks graphql.web's DocumentNode.
+interface NameNode {
+    kind: 'Name'
+    value: string
+}
+interface NamedTypeNode {
+    kind: 'NamedType'
+    name: NameNode
+}
+type AstTypeNode = NamedTypeNode | { kind: 'ListType' | 'NonNullType'; type: AstTypeNode }
+interface AstFieldNode {
+    kind: 'Field'
+    name: NameNode
+    selectionSet?: AstSelectionSetNode
+}
+interface AstInlineFragmentNode {
+    kind: 'InlineFragment'
+    typeCondition?: NamedTypeNode
+    selectionSet: AstSelectionSetNode
+}
+type AstSelectionNode = AstFieldNode | AstInlineFragmentNode | { kind: 'FragmentSpread'; name: NameNode }
+interface AstSelectionSetNode {
+    kind: 'SelectionSet'
+    selections: readonly AstSelectionNode[]
+}
+interface AstVariableDefinitionNode {
+    kind: 'VariableDefinition'
+    type: AstTypeNode
+}
+interface AstOperationDefinitionNode {
+    kind: 'OperationDefinition'
+    variableDefinitions?: readonly AstVariableDefinitionNode[]
+    selectionSet: AstSelectionSetNode
+}
+interface AstFragmentDefinitionNode {
+    kind: 'FragmentDefinition'
+    typeCondition: NamedTypeNode
+    selectionSet: AstSelectionSetNode
+}
+type AstDefinitionNode = AstOperationDefinitionNode | AstFragmentDefinitionNode | { kind: string }
+interface AstDocumentNode {
+    kind: 'Document'
+    definitions: readonly AstDefinitionNode[]
+}
+
+const SLUG_PATTERN = /^[a-z][a-z0-9_]{1,30}$/
+
+// not parseJwt.js — that module touches `window` at import time; this subpath stays environment-neutral
+function decodeJwtClaims(jwt: string): { subdomain?: string } | undefined {
+    const payload = jwt.split('.')[1]
+    if (!payload) return undefined
+    try {
+        const base64 = payload.replace(/-/g, '+').replace(/_/g, '/')
+        return JSON.parse(new TextDecoder().decode(Uint8Array.from(atob(base64), (c) => c.charCodeAt(0))))
+    } catch {
+        return undefined
+    }
+}
+
+/**
+ * Derive the tenant namespace slug from the main ASMA JWT's `subdomain` claim (DEC-015),
+ * sanitized per plan §1.1 (lowercase, hyphens -> underscores). Returns undefined when the
+ * token is missing or the claim does not sanitize to a valid slug — callers skip the
+ * exchange in that case.
+ */
+export function adopusSlugFromJwt(jwt: string | undefined): string | undefined {
+    if (!jwt) return undefined
+    const claims = decodeJwtClaims(jwt)
+    const slug = claims?.subdomain?.toLowerCase().replace(/-/g, '_')
+    if (!slug || !SLUG_PATTERN.test(slug)) {
+        console.error(`adopusSlugFromJwt: subdomain claim '${claims?.subdomain}' is not a valid namespace slug`)
+        return undefined
+    }
+    return slug
+}
+
+/** Transforms 1–3 on the parsed operation document. Pure; exported for tests. */
+export function namespaceDocument(document: DocumentNode, slug: string, prefixed: ReadonlySet<string>): DocumentNode {
+    const doc = document as unknown as AstDocumentNode
+
+    const prefixName = (name: NameNode): NameNode =>
+        prefixed.has(name.value) ? { ...name, value: `${slug}_${name.value}` } : name
+
+    const prefixType = (type: AstTypeNode): AstTypeNode =>
+        type.kind === 'NamedType' ? { ...type, name: prefixName(type.name) } : { ...type, type: prefixType(type.type) }
+
+    const prefixFragmentConditions = (selectionSet: AstSelectionSetNode): AstSelectionSetNode => ({
+        ...selectionSet,
+        selections: selectionSet.selections.map((sel): AstSelectionNode => {
+            if (sel.kind === 'InlineFragment') {
+                return {
+                    ...sel,
+                    typeCondition: sel.typeCondition && { ...sel.typeCondition, name: prefixName(sel.typeCondition.name) },
+                    selectionSet: prefixFragmentConditions(sel.selectionSet),
+                }
+            }
+            if (sel.kind === 'Field' && sel.selectionSet) {
+                return { ...sel, selectionSet: prefixFragmentConditions(sel.selectionSet) }
+            }
+            return sel
+        }),
+    })
+
+    const out: AstDocumentNode = {
+        ...doc,
+        definitions: doc.definitions.map((def): AstDefinitionNode => {
+            if (def.kind === 'OperationDefinition') {
+                const op = def as AstOperationDefinitionNode
+                const namespaceField: AstFieldNode = {
+                    kind: 'Field',
+                    name: { kind: 'Name', value: slug },
+                    selectionSet: prefixFragmentConditions(op.selectionSet),
+                }
+                return {
+                    ...op,
+                    variableDefinitions: op.variableDefinitions?.map((v) => ({ ...v, type: prefixType(v.type) })),
+                    selectionSet: { kind: 'SelectionSet', selections: [namespaceField] },
+                }
+            }
+            if (def.kind === 'FragmentDefinition') {
+                const frag = def as AstFragmentDefinitionNode
+                return {
+                    ...frag,
+                    typeCondition: { ...frag.typeCondition, name: prefixName(frag.typeCondition.name) },
+                    selectionSet: prefixFragmentConditions(frag.selectionSet),
+                }
+            }
+            return def
+        }),
+    }
+    return out as unknown as DocumentNode
+}
+
+/** Transforms 4–5 on the response payload. Pure (returns new objects); exported for tests. */
+export function denamespaceData<T>(data: T, slug: string): T {
+    const unwrapped =
+        data && typeof data === 'object' && !Array.isArray(data) && slug in (data as Record<string, unknown>)
+            ? (data as Record<string, unknown>)[slug]
+            : data
+    return stripTypenamePrefix(unwrapped, `${slug}_`) as T
+}
+
+function stripTypenamePrefix(value: unknown, prefix: string): unknown {
+    if (Array.isArray(value)) return value.map((v) => stripTypenamePrefix(v, prefix))
+    if (!value || typeof value !== 'object') return value
+    const out: Record<string, unknown> = {}
+    for (const [key, v] of Object.entries(value)) {
+        out[key] = key === '__typename' && typeof v === 'string' && v.startsWith(prefix) ? v.slice(prefix.length) : stripTypenamePrefix(v, prefix)
+    }
+    return out
+}
+
+/**
+ * @param slug tenant namespace — derive with `adopusSlugFromJwt(await getCachedJwt())`
+ * @param prefixedTypes contents of the codegen-emitted `adopus-prefixed-types.json`
+ */
+export function adopusNamespaceExchange({
+    slug,
+    prefixedTypes,
+}: {
+    slug: string
+    prefixedTypes: readonly string[]
+}): Exchange {
+    const prefixed: ReadonlySet<string> = new Set(prefixedTypes)
+    // documents are module-level gql.tada constants — stable references, so WeakMap memoizes
+    // the rewrite once per document (NOT per operation.key, which varies with variables)
+    const rewritten = new WeakMap<DocumentNode, DocumentNode>()
+
+    const rewriteOperation = (op: Operation): Operation => {
+        if (op.kind === 'teardown') return op
+        let query = rewritten.get(op.query)
+        if (!query) {
+            query = namespaceDocument(op.query, slug, prefixed)
+            rewritten.set(op.query, query)
+        }
+        return makeOperation(op.kind, { ...op, query }, op.context)
+    }
+
+    const rewriteResult = (result: OperationResult): OperationResult =>
+        result.operation.kind === 'teardown' || result.data == null
+            ? result // ponytail: error paths keep the <slug> segment — cosmetic, fix if it ever confuses anyone
+            : { ...result, data: denamespaceData(result.data, slug) }
+
+    return ({ forward }) =>
+        (ops$) =>
+            pipe(forward(pipe(ops$, map(rewriteOperation))), map(rewriteResult))
+}

package/src/helpers/generateSrvAuthBindings.ts

@@ -1,6 +1,7 @@
 import { asmaOverridesEventBus, EventBus } from 'asma-event-bus'
 import { EnvConfigsFnInternal } from './generateEnvConfigsBindings.js'
 import { realWindow } from './getSubdomain.js'
+import { getInjectedPlatform } from './getDefaultAppVersions.js'
 import { get as _ } from 'idb-keyval'
 import type { ICheckSigninOptions, ICheckSigninTransformedOptions } from './generateSrvAuthBindings.types.js'
 import { domain, type ActivityStatus, type IAuthBindings } from '../index.js'
@@ -22,8 +23,8 @@ function dispatchJwtChangedEvent(jwt?: ICheckSigninOptions<any>) {
     dispatchSrvAuthEvents('jwt_changed', jwt, false)
 }
 /**
- * @generic FeatureEnums - feature_names_enums from asma-genql-directory
- * @generic SrvUrlsEnums - srv_names_enums from asma-genql-directory
+ * @generic FeatureEnums - feature_names_enums from directory introspection
+ * @generic SrvUrlsEnums - srv_names_enums from directory introspection
  */
 //type EnvConfigsFn = () => { SRV_AUTH: string; DEVELOPMENT: boolean; ENVIRONMENT_TO_OPERATE: string }
 
@@ -664,6 +665,10 @@ export function generateSrvAuthBindings<FE extends string>(logout?: () => void)
 
     realWindow.__ASMA__SHELL__.auth_bindings = auth_bindings
 
+    // Seed the overrides bus from the server-injected first-hit versions so the map is available
+    // before any auth response arrives (later responses still dispatch updates). ASMA-7544.
+    dispatchCustomerUserRelatedAppVersions(getInjectedPlatform()?.default_app_versions)
+
     return auth_bindings
 }
 /**

package/src/helpers/generateSrvAuthBindings.types.ts

@@ -1,4 +1,4 @@
-import type { ITherapistOrSuperUserJwtClaims } from 'asma-types/lib'
+import type { ITherapistOrSuperUserJwtClaims } from 'asma-types'
 type IOpenreplay = {
     enable: boolean
     block: boolean

package/src/helpers/getDefaultAppVersions.test.ts

@@ -0,0 +1,48 @@
+import assert from 'node:assert/strict'
+import { afterEach, describe, it } from 'node:test'
+
+import { getDefaultAppVersions, getInjectedPlatform } from './getDefaultAppVersions.ts'
+
+const globalWithWindow = globalThis as { window?: unknown }
+
+afterEach(() => {
+    delete globalWithWindow.window
+})
+
+describe('getInjectedPlatform', () => {
+    it('returns undefined when there is no window (node/SSR)', () => {
+        assert.equal(getInjectedPlatform(), undefined)
+    })
+
+    it('reads window.__ASMA_PLATFORM__', () => {
+        globalWithWindow.window = { __ASMA_PLATFORM__: { default_app_versions: { 'asma-app-shell': '0.75.5' } } }
+        assert.deepEqual(getInjectedPlatform()?.default_app_versions, { 'asma-app-shell': '0.75.5' })
+    })
+
+    it('prefers window.rawWindow when present (qiankun child app)', () => {
+        globalWithWindow.window = {
+            rawWindow: { __ASMA_PLATFORM__: { default_app_versions: { 'asma-app-calendar': '1.2.3' } } },
+        }
+        assert.deepEqual(getInjectedPlatform()?.default_app_versions, { 'asma-app-calendar': '1.2.3' })
+    })
+})
+
+describe('getDefaultAppVersions', () => {
+    it('prefers the injected map over the fallback (first-hit wins)', () => {
+        globalWithWindow.window = { __ASMA_PLATFORM__: { default_app_versions: { a: '1.0.0' } } }
+        assert.deepEqual(getDefaultAppVersions({ a: '0.0.1' }), { a: '1.0.0' })
+    })
+
+    it('falls back to the auth-response value when nothing is injected', () => {
+        assert.deepEqual(getDefaultAppVersions({ a: '0.0.1' }), { a: '0.0.1' })
+    })
+
+    it('falls back when the injected map is empty (treated as absent)', () => {
+        globalWithWindow.window = { __ASMA_PLATFORM__: { default_app_versions: {} } }
+        assert.deepEqual(getDefaultAppVersions({ a: '0.0.1' }), { a: '0.0.1' })
+    })
+
+    it('returns undefined when neither injected nor fallback is present', () => {
+        assert.equal(getDefaultAppVersions(), undefined)
+    })
+})

package/src/helpers/getDefaultAppVersions.ts

@@ -0,0 +1,42 @@
+/**
+ * First-hit platform accessor.
+ *
+ * The server injects `window.__ASMA_PLATFORM__` at first hit (asma-static-server, ASMA-7544).
+ * Both the old (qiankun) and the new (ESM) architecture read their per-user app versions through
+ * this one accessor: the injected value is preferred, the auth-response value is the fallback — so
+ * versions no longer depend on the `checkForRegisteredSubdomain`/signin round-trip timing. Absent
+ * injection (flag off / old HTML), the fallback IS today's behaviour.
+ *
+ * @see _docs/frontend/plans/2026-07-02-14-25-plan-asma-static-server-esm-first-hit-compatibility.md:? — REQ-008, TASK-014
+ */
+
+export interface InjectedPlatformApp {
+    version: string
+    base: string
+}
+
+export interface InjectedPlatform {
+    default_app_versions?: Record<string, string>
+    apps?: Record<string, InjectedPlatformApp>
+}
+
+/** Read the server-injected platform payload (qiankun-aware via `rawWindow`); undefined outside a browser. */
+export function getInjectedPlatform(): InjectedPlatform | undefined {
+    if (typeof window === 'undefined') {
+        return undefined
+    }
+    const realWindow = (window as Window).rawWindow || window
+    return realWindow.__ASMA_PLATFORM__
+}
+
+/**
+ * The per-user `service -> version` map, preferring the server-injected first-hit value and
+ * falling back to a provided auth-response value.
+ */
+export function getDefaultAppVersions(fallback?: Record<string, string>): Record<string, string> | undefined {
+    const injected = getInjectedPlatform()?.default_app_versions
+    if (injected && Object.keys(injected).length > 0) {
+        return injected
+    }
+    return fallback
+}

package/src/helpers/initASMAAppVitals.ts

@@ -5,6 +5,7 @@ import {
     type IResWithSubdomainOnError,
 } from './checkForRegisteredSubdomains.js'
 import { clearCacheData } from './clearCacheData.js'
+import { getDefaultAppVersions } from './getDefaultAppVersions.js'
 import { EnvConfigsFnInternal } from './generateEnvConfigsBindings.js'
 import { getCachedJwtInternal, isJwtValidInternal, registerCallbackOnSrvAuthEvents } from './generateSrvAuthBindings.js'
 import { isNotEmptyObjArr } from './IsNotEmpty.js'
@@ -93,16 +94,21 @@ export async function initASMAAppVitals({
 
     let registry_urls: (typeof _registry_envs)['local'] | undefined = undefined
 
-    if (
-        resRegisteredSubdomain &&
-        'props' in resRegisteredSubdomain &&
-        isNotEmptyObjArr(resRegisteredSubdomain.props.default_app_versions)
-    ) {
-        const default_app_versions = resRegisteredSubdomain.props!.default_app_versions!
+    // Prefer the server-injected first-hit versions (window.__ASMA_PLATFORM__); fall back to the
+    // signin/subdomain response value — same source of truth, no dependency on its round-trip timing.
+    const propsDefaultAppVersions =
+        resRegisteredSubdomain && 'props' in resRegisteredSubdomain
+            ? resRegisteredSubdomain.props.default_app_versions
+            : undefined
 
-        registry_urls = Object.keys(default_app_versions).reduce(
+    const default_app_versions = getDefaultAppVersions(propsDefaultAppVersions)
+
+    if (default_app_versions && isNotEmptyObjArr(default_app_versions)) {
+        const resolved_versions = default_app_versions
+
+        registry_urls = Object.keys(resolved_versions).reduce(
             (acc, key) => {
-                const app_version = default_app_versions[key]
+                const app_version = resolved_versions[key]
 
                 const base_url = EnvConfigsFnInternal().CDN_ASMA_BASE_URL || '/cdn'
 

package/src/helpers/isUUID.ts

@@ -1,4 +1,4 @@
-import type { IUUID } from 'asma-types/lib'
+import type { IUUID } from 'asma-types'
 
 const STRICT_UUID_REGEX: RegExp = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i
 const ASMA_UUID_REGEX: RegExp = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i

package/src/index.ts

@@ -18,7 +18,6 @@ export * from './helpers/generateSrvAuthBindings.types.js'
 export * from './helpers/getSubdomain.js'
 export * from './helpers/checkForRegisteredSubdomains.js'
 export * from './helpers/clearCacheData.js'
-export * from './helpers/generateGenqlClient.js'
 export * from './helpers/generateEnvConfigsBindings.js'
 export * from './helpers/userTypingSignal.js'
 export * from './helpers/base64ToFile.js'

package/lib/helpers/generateGenqlClient.d.ts

@@ -1,21 +0,0 @@
-import type { ClientOptions } from '@genql/runtime';
-import { type IEnvironmentUrlsGenQLOnly } from './generateEnvConfigsBindings.js';
-export interface CliOptions extends Omit<ClientOptions, 'url' | 'signal'> {
-    anonymous?: boolean;
-}
-export declare function generateGenqlClient<T extends ReturnType<typeof createClient>>({ setReqConfig, createClient, service, path, }: {
-    setReqConfig?: () => Promise<{
-        headers: Record<string, string>;
-    }>;
-    createClient: (options?: ClientOptions | undefined) => T;
-    service: keyof IEnvironmentUrlsGenQLOnly;
-    path?: string;
-}): {
-    getGenqlClient: () => Promise<T>;
-    resetGenqlClient: () => void;
-    genqlClient: (options?: CliOptions & {
-        abortController?: AbortController;
-    }) => Promise<T>;
-    genqlClientWs: () => Promise<T>;
-};
-//# sourceMappingURL=generateGenqlClient.d.ts.map

package/lib/helpers/generateGenqlClient.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"generateGenqlClient.d.ts","sourceRoot":"","sources":["../../src/helpers/generateGenqlClient.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAEnD,OAAO,EAEH,KAAK,yBAAyB,EAGjC,MAAM,iCAAiC,CAAA;AAIxC,MAAM,WAAW,UAAW,SAAQ,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,QAAQ,CAAC;IACrE,SAAS,CAAC,EAAE,OAAO,CAAA;CACtB;AAED,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,UAAU,CAAC,OAAO,YAAY,CAAC,EAAE,EAC3E,YAAY,EACZ,YAAY,EACZ,OAAO,EAEP,IAAoB,GACvB,EAAE;IACC,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC,CAAA;IACjE,YAAY,EAAE,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,SAAS,KAAK,CAAC,CAAA;IAExD,OAAO,EAAE,MAAM,yBAAyB,CAAA;IACxC,IAAI,CAAC,EAAE,MAAM,CAAA;CAChB;;;4BA+DuC,UAAU,GAAG;QAAE,eAAe,CAAC,EAAE,eAAe,CAAA;KAAE,KAAQ,OAAO,CAAC,CAAC,CAAC;;EAqD3G"}