asma-core-helpers 0.9.0 → 0.11.0

package/lib/helpers/EnvironmentsUrls.d.ts

@@ -16,13 +16,14 @@ export declare const EnvironmentsUrls1: (adcuris_subdomains?: string[]) => {
     SRV_WOPI: string;
     BUNJS_EDITOR: string;
     SRV_AO_DIRECTORY: string;
+    /**@deprecated not used anywhere no such service */
     SRV_WRAPPER: string;
     SRV_AUTH: string;
     ONLYOFFICE_DOCUMENT_SERVER: string;
     /**Use this in stead  url is the same for all journal where relevant only use in api-assembly do not access those directly in code may be issues */
     /**@deprecated use SRV_WRAPPER instead */
     SRV_AO_WRAPPER_NEW: string;
-    SRV_AO_WRAPPER: string;
+    HSR_AO_WRAPPER: string;
     DEVELOPMENT: boolean;
     ENVIRONMENT_TO_OPERATE: "dev" | "test" | "stage" | "prod" | undefined;
     DEBUG_ADCURIS: boolean;

package/lib/helpers/EnvironmentsUrls.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EnvironmentsUrls.d.ts","sourceRoot":"","sources":["../../src/helpers/EnvironmentsUrls.ts"],"names":[],"mappings":"AACA,OAAO,EAYH,gBAAgB,EAGnB,MAAM,kCAAkC,CAAA;AAEzC,eAAO,MAAM,iBAAiB,wBAAyB,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;IA6BvD,mJAAmJ;IACnJ,yCAAyC;;;;;;;;;;;;;;;;;;;IAuBzC;;OAEG;;;;;CASV,CAAA"}
+{"version":3,"file":"EnvironmentsUrls.d.ts","sourceRoot":"","sources":["../../src/helpers/EnvironmentsUrls.ts"],"names":[],"mappings":"AACA,OAAO,EAYH,gBAAgB,EAGnB,MAAM,kCAAkC,CAAA;AAEzC,eAAO,MAAM,iBAAiB,wBAAyB,MAAM,EAAE;;;;;;;;;;;;;;;;;IAwBvD,mDAAmD;;;;IAMnD,mJAAmJ;IACnJ,yCAAyC;;;;;;;;;;;;;;;;;;;IAuBzC;;OAEG;;;;;CASV,CAAA"}

package/lib/helpers/EnvironmentsUrls.js

@@ -29,6 +29,7 @@ export const EnvironmentsUrls1 = (adcuris_subdomains) => {
         SRV_WOPI: `${ac_prefix}/wopi`,
         BUNJS_EDITOR: `${ac_prefix}/api/editor`,
         SRV_AO_DIRECTORY: `${ac_prefix}/api-ao/directory`,
+        /**@deprecated not used anywhere no such service */
         SRV_WRAPPER: `${ac_prefix}/api/wrapper`,
         SRV_AUTH: '/api/auth',
         // FIXME replace with dynamic url
@@ -36,7 +37,7 @@ export const EnvironmentsUrls1 = (adcuris_subdomains) => {
         /**Use this in stead  url is the same for all journal where relevant only use in api-assembly do not access those directly in code may be issues */
         /**@deprecated use SRV_WRAPPER instead */
         SRV_AO_WRAPPER_NEW: '/api/wrapper',
-        SRV_AO_WRAPPER: '',
+        HSR_AO_WRAPPER: '/api/hsr-wrapper',
         DEVELOPMENT: realWindow.location.hostname.includes('dev.') || realWindow.location.hostname.includes('localhost'),
         ENVIRONMENT_TO_OPERATE: env_to_operate,
         DEBUG_ADCURIS: false,

package/lib/helpers/EnvironmentsUrls.js.map

@@ -1 +1 @@
-{"version":3,"file":"EnvironmentsUrls.js","sourceRoot":"","sources":["../../src/helpers/EnvironmentsUrls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACxE,OAAO,EACH,YAAY,EACZ,GAAG,EACH,cAAc;AACd,WAAW;AACX,eAAe,EACf,UAAU,EACV,qBAAqB;AACrB,cAAc;AACd,wBAAwB;AACxB,QAAQ,EACR,0BAA0B,EAC1B,gBAAgB;AAChB,kBAAkB;AAClB,MAAM,GACT,MAAM,kCAAkC,CAAA;AAEzC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,kBAA6B,EAAE,EAAE;IAC/D,IAAI,SAAS,GAAG,EAAE,CAAA;IAElB,IAAI,MAAM,KAAK,QAAQ,IAAI,GAAG,KAAK,MAAM,IAAI,kBAAkB,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACnF,SAAS,GAAG,SAAS,GAAG,KAAK,CAAA;IACjC,CAAC;IAED,OAAO;QACH,aAAa,EAAE,GAAG,SAAS,gBAAgB;QAC3C,YAAY,EAAE,GAAG,SAAS,eAAe;QACzC,aAAa,EAAE,GAAG,SAAS,YAAY;QACvC,mBAAmB,EAAE,GAAG,SAAS,kBAAkB;QACnD,iBAAiB,EAAE,GAAG,SAAS,gBAAgB;QAC/C,WAAW,EAAE,GAAG,SAAS,cAAc;QACvC,QAAQ,EAAE,GAAG,SAAS,WAAW;QACjC,aAAa,EAAE,YAAY,CAAC,GAAG,EAAE,cAAc,CAAC;QAChD,YAAY,EAAE,EAAE;QAChB,UAAU,EAAE,GAAG,SAAS,cAAc;QACtC,SAAS,EAAE,GAAG,SAAS,eAAe;QACtC,gBAAgB,EAAE,GAAG,SAAS,mBAAmB;QACjD,cAAc,EAAE,GAAG,SAAS,iBAAiB;QAC7C,QAAQ,EAAE,GAAG,SAAS,OAAO;QAC7B,YAAY,EAAE,GAAG,SAAS,aAAa;QACvC,gBAAgB,EAAE,GAAG,SAAS,mBAAmB;QACjD,WAAW,EAAE,GAAG,SAAS,cAAc;QACvC,QAAQ,EAAE,WAAW;QACrB,iCAAiC;QACjC,0BAA0B,EACtB,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,oCAAoC;QAC1F,mJAAmJ;QACnJ,yCAAyC;QACzC,kBAAkB,EAAE,cAAc;QAElC,cAAc,EAAE,EAAE;QAClB,WAAW,EACP,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QACvG,sBAAsB,EAAE,cAAc;QACtC,aAAa,EAAE,KAAK;QACpB,2BAA2B;QAC3B,iBAAiB,EAAE,eAAe,CAAC,GAAG,EAAE,cAAc,CAAC;QACvD,gBAAgB,EAAE,qCAAqC;QACvD,wBAAwB,EAAE,0CAA0C;QACpE,WAAW,EAAE,6CAA6C;QAC1D,UAAU,EAAE,UAAU,CAAC,GAAG,EAAE,cAAc,CAAC;QAC3C,iBAAiB,EAAE,qBAAqB,EAAE;QAC1C,6BAA6B,EAAE,CAAC;QAChC,GAAG,EAAE,cAAc,IAAI,GAAG;QAE1B,eAAe,EAAE,yCAAyC;QAC1D,YAAY,EAAE,sCAAsC;QACpD,sBAAsB,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM;QAClD,sBAAsB,EAAE,gBAAgB;QACxC,iBAAiB,EAAE,MAAM;QACzB;;WAEG;QACH,wEAAwE;QACxE,iBAAiB,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,gBAAgB;QAChE,6CAA6C;QAC7C,iBAAiB,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM;QAC7C,sCAAsC;QACtC,QAAQ,EAAE,QAAQ;QAClB,uBAAuB,EAAE,0BAA0B,EAAE;KACxD,CAAA;AACL,CAAC,CAAA"}
+{"version":3,"file":"EnvironmentsUrls.js","sourceRoot":"","sources":["../../src/helpers/EnvironmentsUrls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACxE,OAAO,EACH,YAAY,EACZ,GAAG,EACH,cAAc;AACd,WAAW;AACX,eAAe,EACf,UAAU,EACV,qBAAqB;AACrB,cAAc;AACd,wBAAwB;AACxB,QAAQ,EACR,0BAA0B,EAC1B,gBAAgB;AAChB,kBAAkB;AAClB,MAAM,GACT,MAAM,kCAAkC,CAAA;AAEzC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,kBAA6B,EAAE,EAAE;IAC/D,IAAI,SAAS,GAAG,EAAE,CAAA;IAElB,IAAI,MAAM,KAAK,QAAQ,IAAI,GAAG,KAAK,MAAM,IAAI,kBAAkB,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACnF,SAAS,GAAG,SAAS,GAAG,KAAK,CAAA;IACjC,CAAC;IAED,OAAO;QACH,aAAa,EAAE,GAAG,SAAS,gBAAgB;QAC3C,YAAY,EAAE,GAAG,SAAS,eAAe;QACzC,aAAa,EAAE,GAAG,SAAS,YAAY;QACvC,mBAAmB,EAAE,GAAG,SAAS,kBAAkB;QACnD,iBAAiB,EAAE,GAAG,SAAS,gBAAgB;QAC/C,WAAW,EAAE,GAAG,SAAS,cAAc;QACvC,QAAQ,EAAE,GAAG,SAAS,WAAW;QACjC,aAAa,EAAE,YAAY,CAAC,GAAG,EAAE,cAAc,CAAC;QAChD,YAAY,EAAE,EAAE;QAChB,UAAU,EAAE,GAAG,SAAS,cAAc;QACtC,SAAS,EAAE,GAAG,SAAS,eAAe;QACtC,gBAAgB,EAAE,GAAG,SAAS,mBAAmB;QACjD,cAAc,EAAE,GAAG,SAAS,iBAAiB;QAC7C,QAAQ,EAAE,GAAG,SAAS,OAAO;QAC7B,YAAY,EAAE,GAAG,SAAS,aAAa;QACvC,gBAAgB,EAAE,GAAG,SAAS,mBAAmB;QACjD,mDAAmD;QACnD,WAAW,EAAE,GAAG,SAAS,cAAc;QACvC,QAAQ,EAAE,WAAW;QACrB,iCAAiC;QACjC,0BAA0B,EACtB,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,oCAAoC;QAC1F,mJAAmJ;QACnJ,yCAAyC;QACzC,kBAAkB,EAAE,cAAc;QAElC,cAAc,EAAE,kBAAkB;QAClC,WAAW,EACP,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QACvG,sBAAsB,EAAE,cAAc;QACtC,aAAa,EAAE,KAAK;QACpB,2BAA2B;QAC3B,iBAAiB,EAAE,eAAe,CAAC,GAAG,EAAE,cAAc,CAAC;QACvD,gBAAgB,EAAE,qCAAqC;QACvD,wBAAwB,EAAE,0CAA0C;QACpE,WAAW,EAAE,6CAA6C;QAC1D,UAAU,EAAE,UAAU,CAAC,GAAG,EAAE,cAAc,CAAC;QAC3C,iBAAiB,EAAE,qBAAqB,EAAE;QAC1C,6BAA6B,EAAE,CAAC;QAChC,GAAG,EAAE,cAAc,IAAI,GAAG;QAE1B,eAAe,EAAE,yCAAyC;QAC1D,YAAY,EAAE,sCAAsC;QACpD,sBAAsB,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM;QAClD,sBAAsB,EAAE,gBAAgB;QACxC,iBAAiB,EAAE,MAAM;QACzB;;WAEG;QACH,wEAAwE;QACxE,iBAAiB,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,gBAAgB;QAChE,6CAA6C;QAC7C,iBAAiB,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM;QAC7C,sCAAsC;QACtC,QAAQ,EAAE,QAAQ;QAClB,uBAAuB,EAAE,0BAA0B,EAAE;KACxD,CAAA;AACL,CAAC,CAAA"}

package/lib/helpers/adopusNamespaceExchange.d.ts

@@ -11,8 +11,8 @@
  *   5. response: strip the `<slug>_` prefix from `__typename` values
  *
  * `prefixedTypes` is the exact set of names the engine prefixes for the tenant source —
- * generated at codegen time by adopus-hsr-wrapper/scripts/unwrap_client_schema.mjs
- * (adopus-prefixed-types.json) so the runtime never guesses which names carry the prefix.
+ * generated at codegen time by the `asma-gql-unwrap` bin (asma-core-toolchain)
+ * (adopus-prefixed-types.ts) so the runtime never guesses which names carry the prefix.
  *
  * Install it only on the SRV_AO_WRAPPER client and only when the resolved endpoint is the
  * consolidated engine (`/api/hsr-wrapper/`) — the per-tenant `srv_urls.ao_wrapper` flip then

package/lib/helpers/createTadaBrowserClient.d.ts

@@ -0,0 +1,53 @@
+/**
+ * createTadaBrowserClient — shared urql client factory for ASMA frontend apps.
+ *
+ * Wraps the urql core (fetchExchange + optional service-specific exchanges) with
+ * an authExchange that attaches a JWT Bearer token and refreshes on 401.
+ *
+ * URL resolution stays in the app (imports EnvConfigs from asma-helpers);
+ * this factory accepts the resolved URL so it has zero dependency on asma-helpers.
+ *
+ * @see asma-modules/_docs/frontend/operations/2026-07-11-23-00-runbook-graphql-schema-generation-secrets.md
+ */
+import { type Client, type ClientOptions, type Exchange } from '@urql/core';
+/**
+ * Contributes service-specific exchanges (e.g. the Adopus per-tenant namespace
+ * rewrite) without baking that knowledge into the generic factory. Called once
+ * per client build with the resolved endpoint; returned exchanges are inserted
+ * just before `fetchExchange` (and after `authExchange`).
+ */
+export type ResolveExchanges = (ctx: {
+    /** The fully-resolved GraphQL endpoint URL. */
+    url: string;
+    /** Resolves the current JWT (may be stale — the auth exchange handles refresh). */
+    getJwt: () => Promise<string | undefined>;
+}) => Exchange[] | Promise<Exchange[]>;
+export interface CreateTadaBrowserClientOptions {
+    /** Fully-resolved GraphQL endpoint URL (caller resolves via EnvConfigs / srv_urls). */
+    url: string;
+    /** Resolves the current JWT. Typically `getCachedJwt` from asma-core-react. */
+    getJwt: () => Promise<string | undefined>;
+    /** Returns true when the cached JWT is still valid. Typically `isJwtValid` from asma-core-react. */
+    isJwtValid: () => boolean;
+    /** Optional service-specific exchanges injected before fetchExchange. */
+    resolveExchanges?: ResolveExchanges;
+    /** Passthrough to urql ClientOptions (url is overridden by the `url` param above). */
+    clientOptions?: Partial<ClientOptions>;
+}
+/**
+ * Creates a configured, authenticated urql Client for an ASMA frontend app.
+ *
+ * Exchange order (first = outermost):
+ *   1. authExchange       — attach Bearer token, refresh on 401
+ *   2. resolveExchanges   — optional service-specific transforms (e.g. namespace)
+ *   3. fetchExchange      — standard HTTP fetch
+ *   4. caller-provided    — appended via clientOptions.exchanges (end of pipeline)
+ */
+export declare function createTadaBrowserClient({ url, getJwt, isJwtValid, resolveExchanges, clientOptions, }: CreateTadaBrowserClientOptions): {
+    getClient: () => Promise<Client>;
+    createClient: (opts?: {
+        clientOptions?: Partial<ClientOptions>;
+        anonymous?: boolean;
+    }) => Promise<Client>;
+};
+//# sourceMappingURL=createTadaBrowserClient.d.ts.map

package/lib/helpers/createTadaBrowserClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createTadaBrowserClient.d.ts","sourceRoot":"","sources":["../../src/helpers/createTadaBrowserClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACH,KAAK,MAAM,EACX,KAAK,aAAa,EAElB,KAAK,QAAQ,EAEhB,MAAM,YAAY,CAAA;AAGnB;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE;IACjC,+CAA+C;IAC/C,GAAG,EAAE,MAAM,CAAA;IACX,mFAAmF;IACnF,MAAM,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;CAC5C,KAAK,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;AAEtC,MAAM,WAAW,8BAA8B;IAC3C,uFAAuF;IACvF,GAAG,EAAE,MAAM,CAAA;IACX,+EAA+E;IAC/E,MAAM,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IACzC,oGAAoG;IACpG,UAAU,EAAE,MAAM,OAAO,CAAA;IACzB,yEAAyE;IACzE,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC,sFAAsF;IACtF,aAAa,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAA;CACzC;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,EACpC,GAAG,EACH,MAAM,EACN,UAAU,EACV,gBAAgB,EAChB,aAAa,GAChB,EAAE,8BAA8B,GAAG;IAAE,SAAS,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAAC,YAAY,EAAE,CAAC,IAAI,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;CAAE,CAiElL"}

package/lib/helpers/createTadaBrowserClient.js

@@ -0,0 +1,76 @@
+/**
+ * createTadaBrowserClient — shared urql client factory for ASMA frontend apps.
+ *
+ * Wraps the urql core (fetchExchange + optional service-specific exchanges) with
+ * an authExchange that attaches a JWT Bearer token and refreshes on 401.
+ *
+ * URL resolution stays in the app (imports EnvConfigs from asma-helpers);
+ * this factory accepts the resolved URL so it has zero dependency on asma-helpers.
+ *
+ * @see asma-modules/_docs/frontend/operations/2026-07-11-23-00-runbook-graphql-schema-generation-secrets.md
+ */
+import { createClient, fetchExchange, } from '@urql/core';
+import { authExchange } from '@urql/exchange-auth';
+/**
+ * Creates a configured, authenticated urql Client for an ASMA frontend app.
+ *
+ * Exchange order (first = outermost):
+ *   1. authExchange       — attach Bearer token, refresh on 401
+ *   2. resolveExchanges   — optional service-specific transforms (e.g. namespace)
+ *   3. fetchExchange      — standard HTTP fetch
+ *   4. caller-provided    — appended via clientOptions.exchanges (end of pipeline)
+ */
+export function createTadaBrowserClient({ url, getJwt, isJwtValid, resolveExchanges, clientOptions, }) {
+    let tadaClient;
+    const getClient = async () => {
+        tadaClient = await buildClient({ clientOptions });
+        return tadaClient;
+    };
+    async function buildClient(opts) {
+        const _clientOptions = { ...(opts?.clientOptions ?? {}) };
+        const anonymous = opts?.anonymous;
+        _clientOptions.url = url;
+        _clientOptions.preferGetMethod = false;
+        _clientOptions.requestPolicy = 'cache-and-network';
+        // Start with fetchExchange + caller-provided exchanges
+        _clientOptions.exchanges = [
+            fetchExchange,
+            ...(_clientOptions.exchanges || []),
+        ];
+        // Inject service-specific exchanges before fetchExchange
+        if (resolveExchanges) {
+            const extra = await resolveExchanges({
+                getJwt,
+                url,
+            });
+            if (extra.length) {
+                _clientOptions.exchanges.unshift(...extra);
+            }
+        }
+        // authExchange is outermost (first to receive the operation)
+        if (!anonymous) {
+            _clientOptions.exchanges.unshift(authExchange(async (utils) => {
+                const token = await getJwt();
+                return {
+                    addAuthToOperation(operation) {
+                        return utils.appendHeaders(operation, {
+                            Authorization: `Bearer ${token}`,
+                        });
+                    },
+                    didAuthError(error) {
+                        return error.response.status === 401;
+                    },
+                    async refreshAuth() {
+                        tadaClient = await buildClient({ clientOptions: opts?.clientOptions });
+                    },
+                    willAuthError() {
+                        return !isJwtValid();
+                    },
+                };
+            }));
+        }
+        return createClient(_clientOptions);
+    }
+    return { getClient, createClient: buildClient };
+}
+//# sourceMappingURL=createTadaBrowserClient.js.map

package/lib/helpers/createTadaBrowserClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createTadaBrowserClient.js","sourceRoot":"","sources":["../../src/helpers/createTadaBrowserClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAGH,YAAY,EAEZ,aAAa,GAChB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AA4BlD;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,EACpC,GAAG,EACH,MAAM,EACN,UAAU,EACV,gBAAgB,EAChB,aAAa,GACgB;IAC7B,IAAI,UAA8B,CAAA;IAElC,MAAM,SAAS,GAAG,KAAK,IAAI,EAAE;QACzB,UAAU,GAAG,MAAM,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC,CAAA;QACjD,OAAO,UAAU,CAAA;IACrB,CAAC,CAAA;IAED,KAAK,UAAU,WAAW,CAAC,IAG1B;QACG,MAAM,cAAc,GAA2B,EAAE,GAAG,CAAC,IAAI,EAAE,aAAa,IAAI,EAAE,CAAC,EAAE,CAAA;QACjF,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,CAAA;QAEjC,cAAc,CAAC,GAAG,GAAG,GAAG,CAAA;QACxB,cAAc,CAAC,eAAe,GAAG,KAAK,CAAA;QACtC,cAAc,CAAC,aAAa,GAAG,mBAAmB,CAAA;QAElD,uDAAuD;QACvD,cAAc,CAAC,SAAS,GAAG;YACvB,aAAa;YACb,GAAG,CAAC,cAAc,CAAC,SAAS,IAAI,EAAE,CAAC;SACtC,CAAA;QAED,yDAAyD;QACzD,IAAI,gBAAgB,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC;gBACjC,MAAM;gBACN,GAAG;aACN,CAAC,CAAA;YACF,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACf,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAA;YAC9C,CAAC;QACL,CAAC;QAED,6DAA6D;QAC7D,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,cAAc,CAAC,SAAS,CAAC,OAAO,CAC5B,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBACzB,MAAM,KAAK,GAAG,MAAM,MAAM,EAAE,CAAA;gBAC5B,OAAO;oBACH,kBAAkB,CAAC,SAAS;wBACxB,OAAO,KAAK,CAAC,aAAa,CAAC,SAAS,EAAE;4BAClC,aAAa,EAAE,UAAU,KAAK,EAAE;yBACnC,CAAC,CAAA;oBACN,CAAC;oBACD,YAAY,CAAC,KAAK;wBACd,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAA;oBACxC,CAAC;oBACD,KAAK,CAAC,WAAW;wBACb,UAAU,GAAG,MAAM,WAAW,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAA;oBAC1E,CAAC;oBACD,aAAa;wBACT,OAAO,CAAC,UAAU,EAAE,CAAA;oBACxB,CAAC;iBACJ,CAAA;YACL,CAAC,CAAC,CACL,CAAA;QACL,CAAC;QAED,OAAO,YAAY,CAAC,cAA+B,CAAC,CAAA;IACxD,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,CAAA;AACnD,CAAC"}

package/lib/helpers/generateEnvConfigsBindings.d.ts

@@ -51,7 +51,7 @@ export declare function generateEnvConfigsBindings<T extends IBasicEnv, K extend
         SRV_AUTH: string;
         ONLYOFFICE_DOCUMENT_SERVER: string;
         SRV_AO_WRAPPER_NEW: string;
-        SRV_AO_WRAPPER: string;
+        HSR_AO_WRAPPER: string;
         DEVELOPMENT: boolean;
         ENVIRONMENT_TO_OPERATE: "dev" | "test" | "stage" | "prod" | undefined;
         DEBUG_ADCURIS: boolean;
@@ -72,7 +72,7 @@ export declare function generateEnvConfigsBindings<T extends IBasicEnv, K extend
         ADOPUS_ACCESS_URL: string;
         NBID_ENV: string | null;
         OPENREPLAY_INGEST_POINT: string;
-    }, K extends "SRV_DIRECTORY" | "SRV_CALENDAR" | "SRV_PROXY_OLD" | "SRV_PROXY_OLD_HELSE" | "SRV_PROXY_OLD_WEB" | "SRV_STORAGE" | "SRV_CHAT" | "SRV_CONNECTOR" | "SRV_ARTIFACT" | "SRV_ADVOCA" | "SRV_PROXY" | "SRV_NOTIFICATION" | "SRV_ACTIVITIES" | "SRV_WOPI" | "BUNJS_EDITOR" | "SRV_AO_DIRECTORY" | "SRV_WRAPPER" | "SRV_AUTH" | "ONLYOFFICE_DOCUMENT_SERVER" | "SRV_AO_WRAPPER_NEW" | "SRV_AO_WRAPPER" | "DEVELOPMENT" | "ENVIRONMENT_TO_OPERATE" | "DEBUG_ADCURIS" | "SIGNICAT_SIGN_URL" | "CRIIPTO_SIGN_URL" | "CRIIPTO_SIGN_URL_NONPROD" | "INFO_ADVOCA" | "DEVEXPRESS" | "ADVOCA_ACCESS_URL" | "AUTO_SAVE_INTERVAL_IN_MINUTES" | "ENV" | "API_KEY_GEOCODE" | "AZURE_APP_ID" | "AZURE_APP_REDIRECT_URI" | "OPENREPLAY_PROJECT_KEY" | "CDN_ASMA_BASE_URL" | "NBID_REDIRECT_URL" | "ADOPUS_ACCESS_URL" | "NBID_ENV" | "OPENREPLAY_INGEST_POINT" | (keyof T & string) ? K : never> & S;
+    }, K extends "SRV_DIRECTORY" | "SRV_CALENDAR" | "SRV_PROXY_OLD" | "SRV_PROXY_OLD_HELSE" | "SRV_PROXY_OLD_WEB" | "SRV_STORAGE" | "SRV_CHAT" | "SRV_CONNECTOR" | "SRV_ARTIFACT" | "SRV_ADVOCA" | "SRV_PROXY" | "SRV_NOTIFICATION" | "SRV_ACTIVITIES" | "SRV_WOPI" | "BUNJS_EDITOR" | "SRV_AO_DIRECTORY" | "SRV_WRAPPER" | "SRV_AUTH" | "ONLYOFFICE_DOCUMENT_SERVER" | "SRV_AO_WRAPPER_NEW" | "HSR_AO_WRAPPER" | "DEVELOPMENT" | "ENVIRONMENT_TO_OPERATE" | "DEBUG_ADCURIS" | "SIGNICAT_SIGN_URL" | "CRIIPTO_SIGN_URL" | "CRIIPTO_SIGN_URL_NONPROD" | "INFO_ADVOCA" | "DEVEXPRESS" | "ADVOCA_ACCESS_URL" | "AUTO_SAVE_INTERVAL_IN_MINUTES" | "ENV" | "API_KEY_GEOCODE" | "AZURE_APP_ID" | "AZURE_APP_REDIRECT_URI" | "OPENREPLAY_PROJECT_KEY" | "CDN_ASMA_BASE_URL" | "NBID_REDIRECT_URL" | "ADOPUS_ACCESS_URL" | "NBID_ENV" | "OPENREPLAY_INGEST_POINT" | (keyof T & string) ? K : never> & S;
 };
 export {};
 //# sourceMappingURL=generateEnvConfigsBindings.d.ts.map

package/lib/helpers/urql.d.ts

@@ -0,0 +1,4 @@
+export { adopusNamespaceExchange, adopusSlugFromJwt, denamespaceData, namespaceDocument } from './adopusNamespaceExchange.js';
+export { createTadaBrowserClient } from './createTadaBrowserClient.js';
+export type { CreateTadaBrowserClientOptions, ResolveExchanges } from './createTadaBrowserClient.js';
+//# sourceMappingURL=urql.d.ts.map

package/lib/helpers/urql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"urql.d.ts","sourceRoot":"","sources":["../../src/helpers/urql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAC7H,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAA;AACtE,YAAY,EAAE,8BAA8B,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA"}

package/lib/helpers/urql.js

@@ -0,0 +1,3 @@
+export { adopusNamespaceExchange, adopusSlugFromJwt, denamespaceData, namespaceDocument } from './adopusNamespaceExchange.js';
+export { createTadaBrowserClient } from './createTadaBrowserClient.js';
+//# sourceMappingURL=urql.js.map

package/lib/helpers/urql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"urql.js","sourceRoot":"","sources":["../../src/helpers/urql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAC7H,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAA"}

package/lib/index.d.ts

@@ -39,4 +39,6 @@ export * from './helpers/isUUID.js';
 export * from './helpers/JSONToBase64EncodeDecode.js';
 export * from './helpers/getActivityStatus.js';
 export * from './helpers/stringToKeyValueMap.js';
+export { createTadaBrowserClient } from './helpers/createTadaBrowserClient.js';
+export type { CreateTadaBrowserClientOptions, ResolveExchanges } from './helpers/createTadaBrowserClient.js';
 //# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kCAAkC,CAAA;AAChD,cAAc,oCAAoC,CAAA;AAClD,cAAc,mCAAmC,CAAA;AACjD,cAAc,mCAAmC,CAAA;AACjD,cAAc,wBAAwB,CAAA;AACtC,cAAc,uBAAuB,CAAA;AACrC,cAAc,yBAAyB,CAAA;AACvC,cAAc,qBAAqB,CAAA;AACnC,cAAc,mDAAmD,CAAA;AACjE,cAAc,iCAAiC,CAAA;AAE/C,cAAc,kCAAkC,CAAA;AAChD,cAAc,uBAAuB,CAAA;AACrC,cAAc,+BAA+B,CAAA;AAC7C,cAAc,wCAAwC,CAAA;AACtD,cAAc,sCAAsC,CAAA;AACpD,cAAc,4CAA4C,CAAA;AAC1D,cAAc,2BAA2B,CAAA;AACzC,cAAc,2CAA2C,CAAA;AACzD,cAAc,6BAA6B,CAAA;AAC3C,cAAc,yCAAyC,CAAA;AACvD,cAAc,+BAA+B,CAAA;AAC7C,cAAc,2BAA2B,CAAA;AACzC,cAAc,yBAAyB,CAAA;AACvC,cAAc,2CAA2C,CAAA;AACzD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,iCAAiC,CAAA;AAC/C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,+BAA+B,CAAA;AAE7C,cAAc,qBAAqB,CAAA;AACnC,cAAc,kCAAkC,CAAA;AAEhD,cAAc,oBAAoB,CAAA;AAElC,cAAc,sBAAsB,CAAA;AAEpC,cAAc,uBAAuB,CAAA;AAErC,cAAc,oBAAoB,CAAA;AAElC,cAAc,8CAA8C,CAAA;AAC5D,cAAc,+CAA+C,CAAA;AAC7D,cAAc,mCAAmC,CAAA;AACjD,cAAc,qBAAqB,CAAA;AACnC,cAAc,uCAAuC,CAAA;AACrD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,kCAAkC,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kCAAkC,CAAA;AAChD,cAAc,oCAAoC,CAAA;AAClD,cAAc,mCAAmC,CAAA;AACjD,cAAc,mCAAmC,CAAA;AACjD,cAAc,wBAAwB,CAAA;AACtC,cAAc,uBAAuB,CAAA;AACrC,cAAc,yBAAyB,CAAA;AACvC,cAAc,qBAAqB,CAAA;AACnC,cAAc,mDAAmD,CAAA;AACjE,cAAc,iCAAiC,CAAA;AAE/C,cAAc,kCAAkC,CAAA;AAChD,cAAc,uBAAuB,CAAA;AACrC,cAAc,+BAA+B,CAAA;AAC7C,cAAc,wCAAwC,CAAA;AACtD,cAAc,sCAAsC,CAAA;AACpD,cAAc,4CAA4C,CAAA;AAC1D,cAAc,2BAA2B,CAAA;AACzC,cAAc,2CAA2C,CAAA;AACzD,cAAc,6BAA6B,CAAA;AAC3C,cAAc,yCAAyC,CAAA;AACvD,cAAc,+BAA+B,CAAA;AAC7C,cAAc,2BAA2B,CAAA;AACzC,cAAc,yBAAyB,CAAA;AACvC,cAAc,2CAA2C,CAAA;AACzD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,iCAAiC,CAAA;AAC/C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,+BAA+B,CAAA;AAE7C,cAAc,qBAAqB,CAAA;AACnC,cAAc,kCAAkC,CAAA;AAEhD,cAAc,oBAAoB,CAAA;AAElC,cAAc,sBAAsB,CAAA;AAEpC,cAAc,uBAAuB,CAAA;AAErC,cAAc,oBAAoB,CAAA;AAElC,cAAc,8CAA8C,CAAA;AAC5D,cAAc,+CAA+C,CAAA;AAC7D,cAAc,mCAAmC,CAAA;AACjD,cAAc,qBAAqB,CAAA;AACnC,cAAc,uCAAuC,CAAA;AACrD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,kCAAkC,CAAA;AAEhD,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAA;AAC9E,YAAY,EAAE,8BAA8B,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAA"}

package/lib/index.js

@@ -40,4 +40,5 @@ export * from './helpers/isUUID.js';
 export * from './helpers/JSONToBase64EncodeDecode.js';
 export * from './helpers/getActivityStatus.js';
 export * from './helpers/stringToKeyValueMap.js';
+export { createTadaBrowserClient } from './helpers/createTadaBrowserClient.js';
 //# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kCAAkC,CAAA;AAChD,cAAc,oCAAoC,CAAA;AAClD,cAAc,mCAAmC,CAAA;AACjD,cAAc,mCAAmC,CAAA;AACjD,cAAc,wBAAwB,CAAA;AACtC,cAAc,uBAAuB,CAAA;AACrC,cAAc,yBAAyB,CAAA;AACvC,cAAc,qBAAqB,CAAA;AACnC,cAAc,mDAAmD,CAAA;AACjE,cAAc,iCAAiC,CAAA;AAE/C,cAAc,kCAAkC,CAAA;AAChD,cAAc,uBAAuB,CAAA;AACrC,cAAc,+BAA+B,CAAA;AAC7C,cAAc,wCAAwC,CAAA;AACtD,cAAc,sCAAsC,CAAA;AACpD,cAAc,4CAA4C,CAAA;AAC1D,cAAc,2BAA2B,CAAA;AACzC,cAAc,2CAA2C,CAAA;AACzD,cAAc,6BAA6B,CAAA;AAC3C,cAAc,yCAAyC,CAAA;AACvD,cAAc,+BAA+B,CAAA;AAC7C,cAAc,2BAA2B,CAAA;AACzC,cAAc,yBAAyB,CAAA;AACvC,cAAc,2CAA2C,CAAA;AACzD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,iCAAiC,CAAA;AAC/C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,+BAA+B,CAAA;AAC7C,gDAAgD;AAChD,cAAc,qBAAqB,CAAA;AACnC,cAAc,kCAAkC,CAAA;AAEhD,cAAc,oBAAoB,CAAA;AAElC,cAAc,sBAAsB,CAAA;AAEpC,cAAc,uBAAuB,CAAA;AAErC,cAAc,oBAAoB,CAAA;AAElC,cAAc,8CAA8C,CAAA;AAC5D,cAAc,+CAA+C,CAAA;AAC7D,cAAc,mCAAmC,CAAA;AACjD,cAAc,qBAAqB,CAAA;AACnC,cAAc,uCAAuC,CAAA;AACrD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,kCAAkC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kCAAkC,CAAA;AAChD,cAAc,oCAAoC,CAAA;AAClD,cAAc,mCAAmC,CAAA;AACjD,cAAc,mCAAmC,CAAA;AACjD,cAAc,wBAAwB,CAAA;AACtC,cAAc,uBAAuB,CAAA;AACrC,cAAc,yBAAyB,CAAA;AACvC,cAAc,qBAAqB,CAAA;AACnC,cAAc,mDAAmD,CAAA;AACjE,cAAc,iCAAiC,CAAA;AAE/C,cAAc,kCAAkC,CAAA;AAChD,cAAc,uBAAuB,CAAA;AACrC,cAAc,+BAA+B,CAAA;AAC7C,cAAc,wCAAwC,CAAA;AACtD,cAAc,sCAAsC,CAAA;AACpD,cAAc,4CAA4C,CAAA;AAC1D,cAAc,2BAA2B,CAAA;AACzC,cAAc,2CAA2C,CAAA;AACzD,cAAc,6BAA6B,CAAA;AAC3C,cAAc,yCAAyC,CAAA;AACvD,cAAc,+BAA+B,CAAA;AAC7C,cAAc,2BAA2B,CAAA;AACzC,cAAc,yBAAyB,CAAA;AACvC,cAAc,2CAA2C,CAAA;AACzD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,iCAAiC,CAAA;AAC/C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,+BAA+B,CAAA;AAC7C,gDAAgD;AAChD,cAAc,qBAAqB,CAAA;AACnC,cAAc,kCAAkC,CAAA;AAEhD,cAAc,oBAAoB,CAAA;AAElC,cAAc,sBAAsB,CAAA;AAEpC,cAAc,uBAAuB,CAAA;AAErC,cAAc,oBAAoB,CAAA;AAElC,cAAc,8CAA8C,CAAA;AAC5D,cAAc,+CAA+C,CAAA;AAC7D,cAAc,mCAAmC,CAAA;AACjD,cAAc,qBAAqB,CAAA;AACnC,cAAc,uCAAuC,CAAA;AACrD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,kCAAkC,CAAA;AAEhD,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "asma-core-helpers",
-    "version": "0.9.0",
+    "version": "0.11.0",
     "description": "Core helper utilities for ASMA applications",
     "files": [
         "lib/**/*",
@@ -12,8 +12,8 @@
         ".": "./lib/index.js",
         "./lib": "./lib/index.js",
         "./urql": {
-            "types": "./lib/helpers/adopusNamespaceExchange.d.ts",
-            "default": "./lib/helpers/adopusNamespaceExchange.js"
+            "types": "./lib/helpers/urql.d.ts",
+            "default": "./lib/helpers/urql.js"
         }
     },
     "scripts": {
@@ -29,12 +29,16 @@
     "license": "MIT",
     "peerDependencies": {
         "@urql/core": ">=4",
+        "@urql/exchange-auth": ">=3",
         "wonka": ">=6"
     },
     "peerDependenciesMeta": {
         "@urql/core": {
             "optional": true
         },
+        "@urql/exchange-auth": {
+            "optional": true
+        },
         "wonka": {
             "optional": true
         }
@@ -42,6 +46,7 @@
     "devDependencies": {
         "@openreplay/tracker": "^16.4.10",
         "@urql/core": "^6.0.3",
+        "@urql/exchange-auth": "^3.0.0",
         "asma-qiankun-react-loader": "^0.8.2",
         "asma-types": "^2.8.0",
         "history": "^5.3.0",

package/src/helpers/EnvironmentsUrls.ts

@@ -40,6 +40,7 @@ export const EnvironmentsUrls1 = (adcuris_subdomains?: string[]) => {
         SRV_WOPI: `${ac_prefix}/wopi`,
         BUNJS_EDITOR: `${ac_prefix}/api/editor`,
         SRV_AO_DIRECTORY: `${ac_prefix}/api-ao/directory`,
+        /**@deprecated not used anywhere no such service */
         SRV_WRAPPER: `${ac_prefix}/api/wrapper`,
         SRV_AUTH: '/api/auth',
         // FIXME replace with dynamic url
@@ -49,7 +50,7 @@ export const EnvironmentsUrls1 = (adcuris_subdomains?: string[]) => {
         /**@deprecated use SRV_WRAPPER instead */
         SRV_AO_WRAPPER_NEW: '/api/wrapper',
 
-        SRV_AO_WRAPPER: '',
+        HSR_AO_WRAPPER: '/api/hsr-wrapper',
         DEVELOPMENT:
             realWindow.location.hostname.includes('dev.') || realWindow.location.hostname.includes('localhost'),
         ENVIRONMENT_TO_OPERATE: env_to_operate,

package/src/helpers/adopusNamespaceExchange.ts

@@ -11,8 +11,8 @@
  *   5. response: strip the `<slug>_` prefix from `__typename` values
  *
  * `prefixedTypes` is the exact set of names the engine prefixes for the tenant source —
- * generated at codegen time by adopus-hsr-wrapper/scripts/unwrap_client_schema.mjs
- * (adopus-prefixed-types.json) so the runtime never guesses which names carry the prefix.
+ * generated at codegen time by the `asma-gql-unwrap` bin (asma-core-toolchain)
+ * (adopus-prefixed-types.ts) so the runtime never guesses which names carry the prefix.
  *
  * Install it only on the SRV_AO_WRAPPER client and only when the resolved endpoint is the
  * consolidated engine (`/api/hsr-wrapper/`) — the per-tenant `srv_urls.ao_wrapper` flip then

package/src/helpers/createTadaBrowserClient.ts

@@ -0,0 +1,127 @@
+/**
+ * createTadaBrowserClient — shared urql client factory for ASMA frontend apps.
+ *
+ * Wraps the urql core (fetchExchange + optional service-specific exchanges) with
+ * an authExchange that attaches a JWT Bearer token and refreshes on 401.
+ *
+ * URL resolution stays in the app (imports EnvConfigs from asma-helpers);
+ * this factory accepts the resolved URL so it has zero dependency on asma-helpers.
+ *
+ * @see asma-modules/_docs/frontend/operations/2026-07-11-23-00-runbook-graphql-schema-generation-secrets.md
+ */
+import {
+    type Client,
+    type ClientOptions,
+    createClient,
+    type Exchange,
+    fetchExchange,
+} from '@urql/core'
+import { authExchange } from '@urql/exchange-auth'
+
+/**
+ * Contributes service-specific exchanges (e.g. the Adopus per-tenant namespace
+ * rewrite) without baking that knowledge into the generic factory. Called once
+ * per client build with the resolved endpoint; returned exchanges are inserted
+ * just before `fetchExchange` (and after `authExchange`).
+ */
+export type ResolveExchanges = (ctx: {
+    /** The fully-resolved GraphQL endpoint URL. */
+    url: string
+    /** Resolves the current JWT (may be stale — the auth exchange handles refresh). */
+    getJwt: () => Promise<string | undefined>
+}) => Exchange[] | Promise<Exchange[]>
+
+export interface CreateTadaBrowserClientOptions {
+    /** Fully-resolved GraphQL endpoint URL (caller resolves via EnvConfigs / srv_urls). */
+    url: string
+    /** Resolves the current JWT. Typically `getCachedJwt` from asma-core-react. */
+    getJwt: () => Promise<string | undefined>
+    /** Returns true when the cached JWT is still valid. Typically `isJwtValid` from asma-core-react. */
+    isJwtValid: () => boolean
+    /** Optional service-specific exchanges injected before fetchExchange. */
+    resolveExchanges?: ResolveExchanges
+    /** Passthrough to urql ClientOptions (url is overridden by the `url` param above). */
+    clientOptions?: Partial<ClientOptions>
+}
+
+/**
+ * Creates a configured, authenticated urql Client for an ASMA frontend app.
+ *
+ * Exchange order (first = outermost):
+ *   1. authExchange       — attach Bearer token, refresh on 401
+ *   2. resolveExchanges   — optional service-specific transforms (e.g. namespace)
+ *   3. fetchExchange      — standard HTTP fetch
+ *   4. caller-provided    — appended via clientOptions.exchanges (end of pipeline)
+ */
+export function createTadaBrowserClient({
+    url,
+    getJwt,
+    isJwtValid,
+    resolveExchanges,
+    clientOptions,
+}: CreateTadaBrowserClientOptions): { getClient: () => Promise<Client>; createClient: (opts?: { clientOptions?: Partial<ClientOptions>; anonymous?: boolean }) => Promise<Client> } {
+    let tadaClient: Client | undefined
+
+    const getClient = async () => {
+        tadaClient = await buildClient({ clientOptions })
+        return tadaClient
+    }
+
+    async function buildClient(opts?: {
+        clientOptions?: Partial<ClientOptions>
+        anonymous?: boolean
+    }) {
+        const _clientOptions: Partial<ClientOptions> = { ...(opts?.clientOptions ?? {}) }
+        const anonymous = opts?.anonymous
+
+        _clientOptions.url = url
+        _clientOptions.preferGetMethod = false
+        _clientOptions.requestPolicy = 'cache-and-network'
+
+        // Start with fetchExchange + caller-provided exchanges
+        _clientOptions.exchanges = [
+            fetchExchange,
+            ...(_clientOptions.exchanges || []),
+        ]
+
+        // Inject service-specific exchanges before fetchExchange
+        if (resolveExchanges) {
+            const extra = await resolveExchanges({
+                getJwt,
+                url,
+            })
+            if (extra.length) {
+                _clientOptions.exchanges.unshift(...extra)
+            }
+        }
+
+        // authExchange is outermost (first to receive the operation)
+        if (!anonymous) {
+            _clientOptions.exchanges.unshift(
+                authExchange(async (utils) => {
+                    const token = await getJwt()
+                    return {
+                        addAuthToOperation(operation) {
+                            return utils.appendHeaders(operation, {
+                                Authorization: `Bearer ${token}`,
+                            })
+                        },
+                        didAuthError(error) {
+                            return error.response.status === 401
+                        },
+                        async refreshAuth() {
+                            tadaClient = await buildClient({ clientOptions: opts?.clientOptions })
+                        },
+                        willAuthError() {
+                            return !isJwtValid()
+                        },
+                    }
+                }),
+            )
+        }
+
+        return createClient(_clientOptions as ClientOptions)
+    }
+
+    return { getClient, createClient: buildClient }
+}

package/src/helpers/urql.ts

@@ -0,0 +1,3 @@
+export { adopusNamespaceExchange, adopusSlugFromJwt, denamespaceData, namespaceDocument } from './adopusNamespaceExchange.js'
+export { createTadaBrowserClient } from './createTadaBrowserClient.js'
+export type { CreateTadaBrowserClientOptions, ResolveExchanges } from './createTadaBrowserClient.js'

package/src/index.ts

@@ -46,3 +46,6 @@ export * from './helpers/isUUID.js'
 export * from './helpers/JSONToBase64EncodeDecode.js'
 export * from './helpers/getActivityStatus.js'
 export * from './helpers/stringToKeyValueMap.js'
+
+export { createTadaBrowserClient } from './helpers/createTadaBrowserClient.js'
+export type { CreateTadaBrowserClientOptions, ResolveExchanges } from './helpers/createTadaBrowserClient.js'