woodsportal-client-sdk 4.0.7-dev.4 → 4.0.7-dev.5

package/dist/{chunk-YNOZWRK3.js → chunk-XANZNL46.js}

@@ -1,4 +1,4 @@
-import { WP_STORAGE_KEYS, CLIENT_COOKIE_MIGRATIONS, CLIENT_SESSION_STORAGE_MIGRATIONS, LEGACY_CLIENT_AUTH_COOKIES, LEGACY_CLIENT_SESSION_EXACT, wpClientIframeRefreshKey, wpClientIframeRefreshExpKey, WP_UI_THEME } from './chunk-BKT4MFQM.js';
+import { WP_STORAGE_KEYS, CLIENT_COOKIE_MIGRATIONS, CLIENT_SESSION_STORAGE_MIGRATIONS, LEGACY_CLIENT_AUTH_COOKIES, LEGACY_CLIENT_SESSION_EXACT, wpClientIframeRefreshKey, wpClientIframeRefreshExpKey, WP_UI_THEME } from './chunk-7JHBCIR5.js';
 import Cookies from 'js-cookie';
 
 // src/main/core/utils/storage-keys.ts
@@ -302,5 +302,5 @@ function clearStaleIframeRefreshForOtherHubs(activeHubId) {
 }
 
 export { clearClientAuthCookies, clearClientIframeRefreshLocalKeys, clearClientSessionStorageKeys, clearStaleIframeRefreshForOtherHubs, configureStorageKeys, getClientAuthCookieNamesToClear, getCookie, getStorageKeys, isCookieExpired, isCorruptCookieRawValue, migrateLegacyStorageKeys, parseCookieJson, resetStorageKeysForTests, setCookie, stringifyCookieValue };
-//# sourceMappingURL=chunk-YNOZWRK3.js.map
-//# sourceMappingURL=chunk-YNOZWRK3.js.map
+//# sourceMappingURL=chunk-XANZNL46.js.map
+//# sourceMappingURL=chunk-XANZNL46.js.map

package/dist/{chunk-YNOZWRK3.js.map → chunk-XANZNL46.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/main/core/utils/storage-keys.ts","../src/main/core/utils/cookie.ts","../src/main/core/utils/storage-migration.ts"],"names":["Cookies"],"mappings":";;;;AAcA,IAAM,QAAA,GAAuC;AAAA,EACzC,YAAA,EAAc,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,KAAA;AAAA,EACrC,YAAA,EAAc,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,OAAA;AAAA,EACrC,MAAA,EAAQ,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,MAAA;AAAA,EAC/B,gBAAA,EAAkB,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,GAAA;AAAA,EACzC,QAAA,EAAU,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,KAAA;AAAA,EACjC,UAAA,EAAY,eAAA,CAAgB,CAAA,CAAE,EAAA,CAAG,GAAA;AAAA,EACjC,SAAA,EAAW,eAAA,CAAgB,CAAA,CAAE,EAAA,CAAG,IAAA;AAAA,EAChC,eAAA,EAAiB,eAAA,CAAgB,CAAA,CAAE,EAAA,CAAG,KAAA;AAAA,EACtC,aAAA,EAAe,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK;AAC1C,CAAA;AAEA,IAAI,WAAA,GAA0C,EAAE,GAAG,QAAA,EAAS;AAErD,SAAS,oBAAA,CAAqB,SAAA,GAA8B,EAAC,EAAS;AACzE,EAAA,WAAA,GAAc,EAAE,GAAG,QAAA,EAAU,GAAG,WAAA,EAAa,GAAG,SAAA,EAAU;AAC1D,EAAA,IAAI,SAAA,CAAU,aAAa,MAAA,EAAW;AAClC,IAAA,WAAA,CAAY,WAAW,WAAA,CAAY,YAAA;AAAA,EACvC;AACJ;AAGO,SAAS,wBAAA,GAAiC;AAC7C,EAAA,WAAA,GAAc,EAAE,GAAG,QAAA,EAAS;AAChC;AAEO,SAAS,cAAA,GAAuD;AACnE,EAAA,OAAO,WAAA;AACX;ACvCA,SAAS,gBAAA,GAA4B;AACjC,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,IAAA;AAC1C,EAAA,OAAO,MAAA,CAAO,SAAS,QAAA,KAAa,QAAA;AACxC;AAGO,SAAS,wBAAwB,GAAA,EAAyC;AAC7E,EAAA,OAAO,OAAO,IAAA,IAAQ,GAAA,KAAQ,EAAA,IAAM,GAAA,KAAQ,eAAe,GAAA,KAAQ,MAAA;AACvE;AAGO,SAAS,qBAAqB,KAAA,EAA+B;AAChE,EAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,IAAA,EAAM;AACvC,IAAA,OAAO,IAAA;AAAA,EACX;AACA,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC3B,IAAA,OAAO,uBAAA,CAAwB,KAAK,CAAA,GAAI,IAAA,GAAO,KAAA;AAAA,EACnD;AACA,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA;AACvC,EAAA,IAAI,UAAA,KAAe,MAAA,IAAa,uBAAA,CAAwB,UAAU,CAAA,EAAG;AACjE,IAAA,OAAO,IAAA;AAAA,EACX;AACA,EAAA,OAAO,UAAA;AACX;AAEO,IAAM,SAAA,GAAY,CAAC,GAAA,EAAa,KAAA,EAAe,MAAA,KAA2B;AAC7E,EAAA,IAAI,CAAC,GAAA,IAAO,uBAAA,CAAwB,KAAK,CAAA,EAAG;AACxC,IAAA,OAAO,MAAA;AAAA,EACX;AACA,EAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAA,EAAO;AAAA,IAC3B,OAAA,EAAS,MAAA;AAAA,IACT,QAAA,EAAU,gBAAA,EAAiB,GAAI,MAAA,GAAS,KAAA;AAAA,IACxC,QAAQ,gBAAA;AAAiB,GAC5B,CAAA;AACL;AAEO,IAAM,SAAA,GAAiB,CAAC,GAAA,KAAa;AACxC,EAAA,OAAO,OAAA,CAAQ,IAAI,GAAG,CAAA;AAC1B;AAGO,SAAS,gBAA6B,GAAA,EAA0C;AACnF,EAAA,IAAI,GAAA,IAAO,IAAA,IAAQ,GAAA,KAAQ,EAAA,EAAI;AAC3B,IAAA,OAAO,IAAA;AAAA,EACX;AACA,EAAA,MAAM,GAAA,GAAM,UAAU,GAAG,CAAA;AACzB,EAAA,IAAI,uBAAA,CAAwB,GAAG,CAAA,EAAG;AAC9B,IAAA,IAAI,GAAA,KAAQ,WAAA,IAAe,GAAA,KAAQ,MAAA,EAAQ;AACvC,MAAA,OAAA,CAAQ,OAAO,GAAG,CAAA;AAAA,IACtB;AACA,IAAA,OAAO,IAAA;AAAA,EACX;AACA,EAAA,IAAI;AACA,IAAA,OAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,EACzB,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAA,CAAQ,OAAO,GAAG,CAAA;AAClB,IAAA,OAAO,IAAA;AAAA,EACX;AACJ;AAOO,IAAM,yBAAyB,MAAM;AACxC,EAAA,+BAAA,GAAkC,OAAA,CAAQ,CAAC,SAAS,OAAA,CAAQ,MAAA,CAAO,IAAI,CAAC,CAAA;AACxE,EAAA,KAAA,MAAW,YAAA,IAAgB,CAAC,0BAAA,EAA4B,WAAW,CAAA,EAAG;AAClE,IAAA,OAAA,CAAQ,OAAO,YAAY,CAAA;AAAA,EAC/B;AACJ;AAKO,IAAM,eAAA,GAAkB,CAAC,GAAA,KAAyB;AACrD,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA;AAC7B,EAAA,IAAI,UAAU,MAAA,EAAW;AACrB,IAAA,OAAO,IAAA;AAAA,EACX;AACA,EAAA,IAAI;AACA,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA;AAC/B,IAAA,IAAI,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,IAAY,eAAe,MAAA,EAAQ;AAC/D,MAAA,MAAM,YAAa,MAAA,CAAkC,SAAA;AACrD,MAAA,OAAO,OAAO,SAAA,KAAc,QAAA,IAAY,IAAA,CAAK,KAAI,GAAI,SAAA;AAAA,IACzD;AACA,IAAA,OAAO,KAAA;AAAA,EACX,CAAA,CAAA,MAAQ;AAEJ,IAAA,OAAO,KAAA;AAAA,EACX;AACJ;;;AChFA,SAAS,iBAAA,CAAkB,QAAgB,SAAA,EAAyB;AAChE,EAAA,MAAM,KAAA,GAAQA,OAAAA,CAAQ,GAAA,CAAI,MAAM,CAAA;AAChC,EAAA,IAAI,UAAU,MAAA,EAAW;AACrB,IAAA;AAAA,EACJ;AACA,EAAA,IAAI,uBAAA,CAAwB,KAAK,CAAA,EAAG;AAChC,IAAAA,OAAAA,CAAQ,OAAO,MAAM,CAAA;AACrB,IAAA;AAAA,EACJ;AACA,EAAA,IAAI,CAACA,OAAAA,CAAQ,GAAA,CAAI,SAAS,CAAA,EAAG;AACzB,IAAAA,OAAAA,CAAQ,GAAA,CAAI,SAAA,EAAW,KAAK,CAAA;AAAA,EAChC;AACA,EAAAA,OAAAA,CAAQ,OAAO,MAAM,CAAA;AACzB;AAEA,SAAS,uBAAA,CAAwB,QAAgB,SAAA,EAAyB;AACtE,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,YAAA,EAAc;AACvD,IAAA;AAAA,EACJ;AACA,EAAA,IAAI;AACA,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,MAAM,CAAA;AAChD,IAAA,IAAI,SAAS,IAAA,EAAM;AACf,MAAA;AAAA,IACJ;AACA,IAAA,IAAI,CAAC,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,SAAS,CAAA,EAAG;AACzC,MAAA,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,SAAA,EAAW,KAAK,CAAA;AAAA,IAChD;AACA,IAAA,MAAA,CAAO,YAAA,CAAa,WAAW,MAAM,CAAA;AAAA,EACzC,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;AAEA,SAAS,yBAAA,CAA0B,QAAgB,SAAA,EAAyB;AACxE,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,cAAA,EAAgB;AACzD,IAAA;AAAA,EACJ;AACA,EAAA,IAAI;AACA,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,cAAA,CAAe,OAAA,CAAQ,MAAM,CAAA;AAClD,IAAA,IAAI,SAAS,IAAA,EAAM;AACf,MAAA;AAAA,IACJ;AACA,IAAA,IAAI,CAAC,MAAA,CAAO,cAAA,CAAe,OAAA,CAAQ,SAAS,CAAA,EAAG;AAC3C,MAAA,MAAA,CAAO,cAAA,CAAe,OAAA,CAAQ,SAAA,EAAW,KAAK,CAAA;AAAA,IAClD;AACA,IAAA,MAAA,CAAO,cAAA,CAAe,WAAW,MAAM,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;AAEA,SAAS,wBAAA,GAAiC;AACtC,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,YAAA,EAAc;AACvD,IAAA;AAAA,EACJ;AACA,EAAA,IAAI;AACA,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,YAAY,CAAA,CAAE,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,eAAe,CAAC,CAAA;AACzF,IAAA,KAAA,MAAW,aAAa,IAAA,EAAM;AAC1B,MAAA,MAAM,MAAA,GAAS,SAAA,CAAU,KAAA,CAAM,eAAA,CAAgB,MAAM,CAAA;AACrD,MAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG;AACzB,QAAA;AAAA,MACJ;AACA,MAAA,MAAM,KAAA,GAAQ,MAAA;AACd,MAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,SAAS,CAAA;AACnD,MAAA,MAAM,MAAM,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,CAAA,EAAG,SAAS,CAAA,IAAA,CAAM,CAAA;AAC1D,MAAA,MAAM,MAAA,GAAS,yBAAyB,KAAK,CAAA;AAC7C,MAAA,MAAM,SAAA,GAAY,4BAA4B,KAAK,CAAA;AACnD,MAAA,IAAI,SAAS,IAAA,IAAQ,CAAC,OAAO,YAAA,CAAa,OAAA,CAAQ,MAAM,CAAA,EAAG;AACvD,QAAA,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,MAAA,EAAQ,KAAK,CAAA;AAAA,MAC7C;AACA,MAAA,IAAI,OAAO,IAAA,IAAQ,CAAC,OAAO,YAAA,CAAa,OAAA,CAAQ,SAAS,CAAA,EAAG;AACxD,QAAA,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,SAAA,EAAW,GAAG,CAAA;AAAA,MAC9C;AACA,MAAA,MAAA,CAAO,YAAA,CAAa,WAAW,SAAS,CAAA;AACxC,MAAA,MAAA,CAAO,YAAA,CAAa,UAAA,CAAW,CAAA,EAAG,SAAS,CAAA,IAAA,CAAM,CAAA;AAAA,IACrD;AAAA,EACJ,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;AAEA,SAAS,8BAAA,GAAuC;AAC5C,EAAA,MAAM,OAAO,cAAA,EAAe;AAC5B,EAAA,MAAM,YAAA,GAAe,CAAC,0BAAA,EAA4B,WAAW,CAAA;AAC7D,EAAA,KAAA,MAAW,QAAQ,YAAA,EAAc;AAC7B,IAAAA,OAAAA,CAAQ,OAAO,IAAI,CAAA;AAAA,EACvB;AACA,EAAA,IAAI,IAAA,CAAK,QAAA,IAAY,IAAA,CAAK,QAAA,KAAa,KAAK,YAAA,EAAc;AAEtD,IAAAA,OAAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA;AAAA,EAChC;AACJ;AAMO,SAAS,wBAAA,GAAiC;AAC7C,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAC/B,IAAA;AAAA,EACJ;AAEA,EAAA,KAAA,MAAW,CAAC,MAAA,EAAQ,SAAS,CAAA,IAAK,wBAAA,EAA0B;AACxD,IAAA,iBAAA,CAAkB,QAAQ,SAAS,CAAA;AAAA,EACvC;AAEA,EAAA,uBAAA,CAAwB,aAAA,EAAe,eAAA,CAAgB,CAAA,CAAE,GAAG,CAAA;AAC5D,EAAA,uBAAA,CAAwB,SAAS,WAAW,CAAA;AAE5C,EAAA,KAAA,MAAW,CAAC,MAAA,EAAQ,SAAS,CAAA,IAAK,iCAAA,EAAmC;AACjE,IAAA,yBAAA,CAA0B,QAAQ,SAAS,CAAA;AAAA,EAC/C;AAEA,EAAA,wBAAA,EAAyB;AACzB,EAAA,8BAAA,EAA+B;AAG/B,EAAA,IAAI;AACA,IAAA,MAAA,CAAO,cAAA,EAAgB,WAAW,aAAa,CAAA;AAAA,EACnD,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;AAGO,SAAS,+BAAA,GAA4C;AACxD,EAAA,MAAM,OAAO,cAAA,EAAe;AAC5B,EAAA,MAAM,UAAA,GAAa;AAAA,IACf,IAAA,CAAK,YAAA;AAAA,IACL,IAAA,CAAK,YAAA;AAAA,IACL,IAAA,CAAK,MAAA;AAAA,IACL,IAAA,CAAK,gBAAA;AAAA,IACL,IAAA,CAAK,QAAA;AAAA,IACL,IAAA,CAAK,UAAA;AAAA,IACL,IAAA,CAAK,SAAA;AAAA,IACL,IAAA,CAAK,eAAA;AAAA,IACL,IAAA,CAAK;AAAA,IACP,MAAA,CAAO,CAAC,IAAA,KAAyB,OAAA,CAAQ,IAAI,CAAC,CAAA;AAEhD,EAAA,MAAM,SAAA,GAAY;AAAA,IACd,eAAA,CAAgB,EAAE,IAAA,CAAK,KAAA;AAAA,IACvB,eAAA,CAAgB,EAAE,IAAA,CAAK,OAAA;AAAA,IACvB,eAAA,CAAgB,EAAE,IAAA,CAAK,MAAA;AAAA,IACvB,eAAA,CAAgB,EAAE,IAAA,CAAK,GAAA;AAAA,IACvB,eAAA,CAAgB,EAAE,IAAA,CAAK,OAAA;AAAA,IACvB,eAAA,CAAgB,EAAE,EAAA,CAAG,GAAA;AAAA,IACrB,eAAA,CAAgB,EAAE,EAAA,CAAG,IAAA;AAAA,IACrB,eAAA,CAAgB,EAAE,EAAA,CAAG;AAAA,GACzB;AAEA,EAAA,OAAO,CAAC,mBAAG,IAAI,GAAA,CAAI,CAAC,GAAG,UAAA,EAAY,GAAG,SAAA,EAAW,GAAG,0BAA0B,CAAC,CAAC,CAAA;AACpF;AAEO,SAAS,6BAAA,GAAsC;AAClD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,cAAA,EAAgB;AACzD,IAAA;AAAA,EACJ;AACA,EAAA,IAAI;AACA,IAAA,KAAA,MAAW,CAAC,MAAA,EAAQ,SAAS,CAAA,IAAK,iCAAA,EAAmC;AACjE,MAAA,IACI,cAAc,eAAA,CAAgB,CAAA,CAAE,MAAM,KAAA,IACtC,SAAA,KAAc,gBAAgB,CAAA,CAAE,KAAA,CAAM,SACtC,SAAA,KAAc,eAAA,CAAgB,EAAE,KAAA,CAAM,OAAA,IACtC,cAAc,eAAA,CAAgB,CAAA,CAAE,MAAM,IAAA,EACxC;AACE,QAAA;AAAA,MACJ;AACA,MAAA,MAAA,CAAO,cAAA,CAAe,WAAW,MAAM,CAAA;AACvC,MAAA,MAAA,CAAO,cAAA,CAAe,WAAW,SAAS,CAAA;AAAA,IAC9C;AACA,IAAA,KAAA,MAAW,OAAO,2BAAA,EAA6B;AAC3C,MAAA,IAAI,QAAQ,aAAA,EAAe;AACvB,QAAA,MAAA,CAAO,cAAA,CAAe,WAAW,GAAG,CAAA;AAAA,MACxC;AAAA,IACJ;AACA,IAAA,MAAM,kBAAA,uBAAyB,GAAA,CAAI;AAAA,MAC/B,eAAA,CAAgB,EAAE,KAAA,CAAM,KAAA;AAAA,MACxB,eAAA,CAAgB,EAAE,KAAA,CAAM,KAAA;AAAA,MACxB,eAAA,CAAgB,EAAE,KAAA,CAAM,OAAA;AAAA,MACxB,eAAA,CAAgB,EAAE,KAAA,CAAM,IAAA;AAAA,MACxB,yBAAA;AAAA,MACA,iCAAA;AAAA,MACA,0CAAA;AAAA,MACA;AAAA,KACH,CAAA;AACD,IAAA,MAAM,eAAyB,EAAC;AAChC,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,MAAA,CAAO,cAAA,CAAe,QAAQ,CAAA,EAAA,EAAK;AACnD,MAAA,MAAM,GAAA,GAAM,MAAA,CAAO,cAAA,CAAe,GAAA,CAAI,CAAC,CAAA;AACvC,MAAA,IAAI,CAAC,GAAA,IAAO,kBAAA,CAAmB,GAAA,CAAI,GAAG,CAAA,EAAG;AACzC,MAAA,IAAI,IAAI,UAAA,CAAW,kBAAkB,KAAK,GAAA,CAAI,UAAA,CAAW,WAAW,CAAA,EAAG;AACnE,QAAA,YAAA,CAAa,KAAK,GAAG,CAAA;AAAA,MACzB;AACA,MAAA,IAAI,GAAA,KAAQ,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,GAAA,IAAO,GAAA,KAAQ,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,gBAAA,IAAoB,GAAA,KAAQ,WAAA,EAAa;AAC9G,QAAA,YAAA,CAAa,KAAK,GAAG,CAAA;AAAA,MACzB;AACA,MAAA,IAAI,QAAQ,eAAA,CAAgB,CAAA,CAAE,GAAA,CAAI,EAAA,IAAM,QAAQ,wBAAA,EAA0B;AACtE,QAAA,YAAA,CAAa,KAAK,GAAG,CAAA;AAAA,MACzB;AAAA,IACJ;AACA,IAAA,YAAA,CAAa,QAAQ,CAAC,CAAA,KAAM,OAAO,cAAA,CAAe,UAAA,CAAW,CAAC,CAAC,CAAA;AAAA,EACnE,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;AAEO,SAAS,iCAAA,GAA0C;AACtD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,YAAA,EAAc;AACvD,IAAA;AAAA,EACJ;AACA,EAAA,IAAI;AACA,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,YAAY,CAAA,CAAE,MAAA;AAAA,MAC1C,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,eAAe,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,cAAc;AAAA,KAC9F;AACA,IAAA,IAAA,CAAK,QAAQ,CAAC,CAAA,KAAM,OAAO,YAAA,CAAa,UAAA,CAAW,CAAC,CAAC,CAAA;AAAA,EACzD,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;AAEO,SAAS,oCAAoC,WAAA,EAAgD;AAChG,EAAA,IAAI,eAAe,IAAA,IAAQ,OAAO,WAAW,WAAA,IAAe,CAAC,OAAO,YAAA,EAAc;AAC9E,IAAA;AAAA,EACJ;AACA,EAAA,MAAM,YAAA,GAAe,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,cAAA;AAC5C,EAAA,MAAM,SAAA,GAAY,yBAAyB,WAAW,CAAA;AACtD,EAAA,IAAI;AACA,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,YAAY,CAAA,CAAE,MAAA;AAAA,MAC1C,CAAC,CAAA,KAAA,CAAO,CAAA,CAAE,UAAA,CAAW,eAAe,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,YAAY,CAAA,KAAM,CAAA,KAAM,SAAA,IAAa,CAAA,KAAM,4BAA4B,WAAW;AAAA,KAC5I;AACA,IAAA,IAAA,CAAK,QAAQ,CAAC,CAAA,KAAM,OAAO,YAAA,CAAa,UAAA,CAAW,CAAC,CAAC,CAAA;AAAA,EACzD,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ","file":"chunk-YNOZWRK3.js","sourcesContent":["import { WP_STORAGE_KEYS } from './wp-storage-keys'\n\nexport interface StorageKeyConfig {\n    loginDetails?: string\n    refreshToken?: string\n    portal?: string\n    subscriptionType?: string\n    authUser?: string\n    pagination?: string\n    routeMenu?: string\n    associationView?: string\n    emailVerified?: string\n}\n\nconst defaults: Required<StorageKeyConfig> = {\n    loginDetails: WP_STORAGE_KEYS.c.auth.login,\n    refreshToken: WP_STORAGE_KEYS.c.auth.refresh,\n    portal: WP_STORAGE_KEYS.c.auth.portal,\n    subscriptionType: WP_STORAGE_KEYS.c.auth.sub,\n    authUser: WP_STORAGE_KEYS.c.auth.login,\n    pagination: WP_STORAGE_KEYS.c.ui.pag,\n    routeMenu: WP_STORAGE_KEYS.c.ui.menu,\n    associationView: WP_STORAGE_KEYS.c.ui.assoc,\n    emailVerified: WP_STORAGE_KEYS.c.auth.emailOk\n}\n\nlet runtimeKeys: Required<StorageKeyConfig> = { ...defaults }\n\nexport function configureStorageKeys(overrides: StorageKeyConfig = {}): void {\n    runtimeKeys = { ...defaults, ...runtimeKeys, ...overrides }\n    if (overrides.authUser === undefined) {\n        runtimeKeys.authUser = runtimeKeys.loginDetails\n    }\n}\n\n/** Test helper — restore default cookie key names. */\nexport function resetStorageKeysForTests(): void {\n    runtimeKeys = { ...defaults }\n}\n\nexport function getStorageKeys(): Readonly<Required<StorageKeyConfig>> {\n    return runtimeKeys\n}\n\nexport { WP_STORAGE_KEYS } from './wp-storage-keys'\n","import Cookies from 'js-cookie'\nimport { getClientAuthCookieNamesToClear } from './storage-migration'\n\nfunction cookieSecureFlag(): boolean {\n    if (typeof window === 'undefined') return true\n    return window.location.protocol === 'https:'\n}\n\n/** Values that must never be persisted in readable cookies. */\nexport function isCorruptCookieRawValue(raw: string | null | undefined): boolean {\n    return raw == null || raw === '' || raw === 'undefined' || raw === 'null'\n}\n\n/** Serialize a value for cookie storage; returns null when write should be skipped. */\nexport function stringifyCookieValue(value: unknown): string | null {\n    if (value === undefined || value === null) {\n        return null\n    }\n    if (typeof value === 'string') {\n        return isCorruptCookieRawValue(value) ? null : value\n    }\n    const serialized = JSON.stringify(value)\n    if (serialized === undefined || isCorruptCookieRawValue(serialized)) {\n        return null\n    }\n    return serialized\n}\n\nexport const setCookie = (key: string, value: string, expire?: number | Date) => {\n    if (!key || isCorruptCookieRawValue(value)) {\n        return undefined\n    }\n    return Cookies.set(key, value, {\n        expires: expire,\n        sameSite: cookieSecureFlag() ? 'none' : 'lax',\n        secure: cookieSecureFlag()\n    })\n}\n\nexport const getCookie: any = (key: any) => {\n    return Cookies.get(key)\n}\n\n/** Parse JSON stored in a cookie; removes corrupt values on read (self-heal). */\nexport function parseCookieJson<T = unknown>(key: string | null | undefined): T | null {\n    if (key == null || key === '') {\n        return null\n    }\n    const raw = getCookie(key)\n    if (isCorruptCookieRawValue(raw)) {\n        if (raw === 'undefined' || raw === 'null') {\n            Cookies.remove(key)\n        }\n        return null\n    }\n    try {\n        return JSON.parse(raw) as T\n    } catch {\n        Cookies.remove(key)\n        return null\n    }\n}\n\nexport const removeCookie = (key: any) => {\n    return Cookies.remove(key)\n}\n\n/** Clears client-portal session cookies only (does not wipe admin cookies on shared localhost). */\nexport const clearClientAuthCookies = () => {\n    getClientAuthCookieNamesToClear().forEach((name) => Cookies.remove(name))\n    for (const legacyAccess of ['woodsportal_access_token', 'AUTH_CRED']) {\n        Cookies.remove(legacyAccess)\n    }\n}\n\n/** @deprecated Prefer {@link clearClientAuthCookies} */\nexport const removeAllCookie = clearClientAuthCookies\n\nexport const isCookieExpired = (key: string): boolean => {\n    const value = Cookies.get(key)\n    if (value === undefined) {\n        return true\n    }\n    try {\n        const parsed = JSON.parse(value)\n        if (parsed && typeof parsed === 'object' && 'expiresAt' in parsed) {\n            const expiresAt = (parsed as { expiresAt?: number }).expiresAt\n            return typeof expiresAt === 'number' && Date.now() > expiresAt\n        }\n        return false\n    } catch {\n        // Plain string values (e.g. refresh token) rely on browser cookie expiry.\n        return false\n    }\n}\n","import Cookies from 'js-cookie'\nimport {\n    CLIENT_COOKIE_MIGRATIONS,\n    CLIENT_SESSION_STORAGE_MIGRATIONS,\n    LEGACY_CLIENT_AUTH_COOKIES,\n    LEGACY_CLIENT_SESSION_EXACT,\n    WP_STORAGE_KEYS,\n    WP_UI_THEME,\n    wpClientIframeRefreshKey,\n    wpClientIframeRefreshExpKey\n} from './wp-storage-keys'\nimport { getStorageKeys } from './storage-keys'\nimport { isCorruptCookieRawValue } from './cookie'\n\nfunction migrateCookiePair(legacy: string, canonical: string): void {\n    const value = Cookies.get(legacy)\n    if (value === undefined) {\n        return\n    }\n    if (isCorruptCookieRawValue(value)) {\n        Cookies.remove(legacy)\n        return\n    }\n    if (!Cookies.get(canonical)) {\n        Cookies.set(canonical, value)\n    }\n    Cookies.remove(legacy)\n}\n\nfunction migrateLocalStoragePair(legacy: string, canonical: string): void {\n    if (typeof window === 'undefined' || !window.localStorage) {\n        return\n    }\n    try {\n        const value = window.localStorage.getItem(legacy)\n        if (value == null) {\n            return\n        }\n        if (!window.localStorage.getItem(canonical)) {\n            window.localStorage.setItem(canonical, value)\n        }\n        window.localStorage.removeItem(legacy)\n    } catch {\n        // private mode\n    }\n}\n\nfunction migrateSessionStoragePair(legacy: string, canonical: string): void {\n    if (typeof window === 'undefined' || !window.sessionStorage) {\n        return\n    }\n    try {\n        const value = window.sessionStorage.getItem(legacy)\n        if (value == null) {\n            return\n        }\n        if (!window.sessionStorage.getItem(canonical)) {\n            window.sessionStorage.setItem(canonical, value)\n        }\n        window.sessionStorage.removeItem(legacy)\n    } catch {\n        // ignore\n    }\n}\n\nfunction migrateIframeRefreshKeys(): void {\n    if (typeof window === 'undefined' || !window.localStorage) {\n        return\n    }\n    try {\n        const keys = Object.keys(window.localStorage).filter((k) => k.startsWith('wp_iframe_rt_'))\n        for (const legacyKey of keys) {\n            const suffix = legacyKey.slice('wp_iframe_rt_'.length)\n            if (suffix.endsWith('_exp')) {\n                continue\n            }\n            const hubId = suffix\n            const token = window.localStorage.getItem(legacyKey)\n            const exp = window.localStorage.getItem(`${legacyKey}_exp`)\n            const newKey = wpClientIframeRefreshKey(hubId)\n            const newExpKey = wpClientIframeRefreshExpKey(hubId)\n            if (token != null && !window.localStorage.getItem(newKey)) {\n                window.localStorage.setItem(newKey, token)\n            }\n            if (exp != null && !window.localStorage.getItem(newExpKey)) {\n                window.localStorage.setItem(newExpKey, exp)\n            }\n            window.localStorage.removeItem(legacyKey)\n            window.localStorage.removeItem(`${legacyKey}_exp`)\n        }\n    } catch {\n        // ignore\n    }\n}\n\nfunction removeLegacyAccessTokenCookies(): void {\n    const keys = getStorageKeys()\n    const legacyAccess = ['woodsportal_access_token', 'AUTH_CRED']\n    for (const name of legacyAccess) {\n        Cookies.remove(name)\n    }\n    if (keys.authUser && keys.authUser !== keys.loginDetails) {\n        // legacy duplicate profile mirror — uplift handled by migration; drop separate user cookie\n        Cookies.remove(keys.authUser)\n    }\n}\n\n/**\n * One-time uplift: read legacy browser keys, write canonical `wp.*` keys, delete legacy.\n * Safe to call on every boot (idempotent).\n */\nexport function migrateLegacyStorageKeys(): void {\n    if (typeof window === 'undefined') {\n        return\n    }\n\n    for (const [legacy, canonical] of CLIENT_COOKIE_MIGRATIONS) {\n        migrateCookiePair(legacy, canonical)\n    }\n\n    migrateLocalStoragePair('hubSpotData', WP_STORAGE_KEYS.c.hub)\n    migrateLocalStoragePair('theme', WP_UI_THEME)\n\n    for (const [legacy, canonical] of CLIENT_SESSION_STORAGE_MIGRATIONS) {\n        migrateSessionStoragePair(legacy, canonical)\n    }\n\n    migrateIframeRefreshKeys()\n    removeLegacyAccessTokenCookies()\n\n    // Drop dead forget-password key\n    try {\n        window.sessionStorage?.removeItem('entredEmail')\n    } catch {\n        // ignore\n    }\n}\n\n/** All client auth cookie names to remove on logout (canonical + legacy + configured). */\nexport function getClientAuthCookieNamesToClear(): string[] {\n    const keys = getStorageKeys()\n    const configured = [\n        keys.loginDetails,\n        keys.refreshToken,\n        keys.portal,\n        keys.subscriptionType,\n        keys.authUser,\n        keys.pagination,\n        keys.routeMenu,\n        keys.associationView,\n        keys.emailVerified\n    ].filter((name): name is string => Boolean(name))\n\n    const canonical = [\n        WP_STORAGE_KEYS.c.auth.login,\n        WP_STORAGE_KEYS.c.auth.refresh,\n        WP_STORAGE_KEYS.c.auth.portal,\n        WP_STORAGE_KEYS.c.auth.sub,\n        WP_STORAGE_KEYS.c.auth.emailOk,\n        WP_STORAGE_KEYS.c.ui.pag,\n        WP_STORAGE_KEYS.c.ui.menu,\n        WP_STORAGE_KEYS.c.ui.assoc\n    ]\n\n    return [...new Set([...configured, ...canonical, ...LEGACY_CLIENT_AUTH_COOKIES])]\n}\n\nexport function clearClientSessionStorageKeys(): void {\n    if (typeof window === 'undefined' || !window.sessionStorage) {\n        return\n    }\n    try {\n        for (const [legacy, canonical] of CLIENT_SESSION_STORAGE_MIGRATIONS) {\n            if (\n                canonical === WP_STORAGE_KEYS.c.login.email ||\n                canonical === WP_STORAGE_KEYS.c.login.force ||\n                canonical === WP_STORAGE_KEYS.c.login.passkey ||\n                canonical === WP_STORAGE_KEYS.c.login.done\n            ) {\n                continue\n            }\n            window.sessionStorage.removeItem(legacy)\n            window.sessionStorage.removeItem(canonical)\n        }\n        for (const key of LEGACY_CLIENT_SESSION_EXACT) {\n            if (key === 'entredEmail') {\n                window.sessionStorage.removeItem(key)\n            }\n        }\n        const preservedLoginKeys = new Set([\n            WP_STORAGE_KEYS.c.login.email,\n            WP_STORAGE_KEYS.c.login.force,\n            WP_STORAGE_KEYS.c.login.passkey,\n            WP_STORAGE_KEYS.c.login.done,\n            'woodsportal.login.email',\n            'woodsportal.login.forcePreLogin',\n            'woodsportal.login.passkeyPrimaryEnrolled',\n            'woodsportal.login.preLoginCompletedKey'\n        ])\n        const keysToRemove: string[] = []\n        for (let i = 0; i < window.sessionStorage.length; i++) {\n            const key = window.sessionStorage.key(i)\n            if (!key || preservedLoginKeys.has(key)) continue\n            if (key.startsWith('woodsportal.mfa.') || key.startsWith('wp.c.mfa.')) {\n                keysToRemove.push(key)\n            }\n            if (key === WP_STORAGE_KEYS.c.auth.err || key === WP_STORAGE_KEYS.c.auth.refreshExhausted || key === 'authError') {\n                keysToRemove.push(key)\n            }\n            if (key === WP_STORAGE_KEYS.c.sso.cb || key === 'sso_callback_processed') {\n                keysToRemove.push(key)\n            }\n        }\n        keysToRemove.forEach((k) => window.sessionStorage.removeItem(k))\n    } catch {\n        // ignore\n    }\n}\n\nexport function clearClientIframeRefreshLocalKeys(): void {\n    if (typeof window === 'undefined' || !window.localStorage) {\n        return\n    }\n    try {\n        const keys = Object.keys(window.localStorage).filter(\n            (k) => k.startsWith('wp_iframe_rt_') || k.startsWith(WP_STORAGE_KEYS.c.auth.iframeRtPrefix)\n        )\n        keys.forEach((k) => window.localStorage.removeItem(k))\n    } catch {\n        // ignore\n    }\n}\n\nexport function clearStaleIframeRefreshForOtherHubs(activeHubId: string | number | undefined): void {\n    if (activeHubId == null || typeof window === 'undefined' || !window.localStorage) {\n        return\n    }\n    const activePrefix = WP_STORAGE_KEYS.c.auth.iframeRtPrefix\n    const activeKey = wpClientIframeRefreshKey(activeHubId)\n    try {\n        const keys = Object.keys(window.localStorage).filter(\n            (k) => (k.startsWith('wp_iframe_rt_') || k.startsWith(activePrefix)) && k !== activeKey && k !== wpClientIframeRefreshExpKey(activeHubId)\n        )\n        keys.forEach((k) => window.localStorage.removeItem(k))\n    } catch {\n        // ignore\n    }\n}\n"]}
+{"version":3,"sources":["../src/main/core/utils/storage-keys.ts","../src/main/core/utils/cookie.ts","../src/main/core/utils/storage-migration.ts"],"names":["Cookies"],"mappings":";;;;AAcA,IAAM,QAAA,GAAuC;AAAA,EACzC,YAAA,EAAc,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,KAAA;AAAA,EACrC,YAAA,EAAc,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,OAAA;AAAA,EACrC,MAAA,EAAQ,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,MAAA;AAAA,EAC/B,gBAAA,EAAkB,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,GAAA;AAAA,EACzC,QAAA,EAAU,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,KAAA;AAAA,EACjC,UAAA,EAAY,eAAA,CAAgB,CAAA,CAAE,EAAA,CAAG,GAAA;AAAA,EACjC,SAAA,EAAW,eAAA,CAAgB,CAAA,CAAE,EAAA,CAAG,IAAA;AAAA,EAChC,eAAA,EAAiB,eAAA,CAAgB,CAAA,CAAE,EAAA,CAAG,KAAA;AAAA,EACtC,aAAA,EAAe,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK;AAC1C,CAAA;AAEA,IAAI,WAAA,GAA0C,EAAE,GAAG,QAAA,EAAS;AAErD,SAAS,oBAAA,CAAqB,SAAA,GAA8B,EAAC,EAAS;AACzE,EAAA,WAAA,GAAc,EAAE,GAAG,QAAA,EAAU,GAAG,WAAA,EAAa,GAAG,SAAA,EAAU;AAC1D,EAAA,IAAI,SAAA,CAAU,aAAa,MAAA,EAAW;AAClC,IAAA,WAAA,CAAY,WAAW,WAAA,CAAY,YAAA;AAAA,EACvC;AACJ;AAGO,SAAS,wBAAA,GAAiC;AAC7C,EAAA,WAAA,GAAc,EAAE,GAAG,QAAA,EAAS;AAChC;AAEO,SAAS,cAAA,GAAuD;AACnE,EAAA,OAAO,WAAA;AACX;ACvCA,SAAS,gBAAA,GAA4B;AACjC,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,IAAA;AAC1C,EAAA,OAAO,MAAA,CAAO,SAAS,QAAA,KAAa,QAAA;AACxC;AAGO,SAAS,wBAAwB,GAAA,EAAyC;AAC7E,EAAA,OAAO,OAAO,IAAA,IAAQ,GAAA,KAAQ,EAAA,IAAM,GAAA,KAAQ,eAAe,GAAA,KAAQ,MAAA;AACvE;AAGO,SAAS,qBAAqB,KAAA,EAA+B;AAChE,EAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,IAAA,EAAM;AACvC,IAAA,OAAO,IAAA;AAAA,EACX;AACA,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC3B,IAAA,OAAO,uBAAA,CAAwB,KAAK,CAAA,GAAI,IAAA,GAAO,KAAA;AAAA,EACnD;AACA,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA;AACvC,EAAA,IAAI,UAAA,KAAe,MAAA,IAAa,uBAAA,CAAwB,UAAU,CAAA,EAAG;AACjE,IAAA,OAAO,IAAA;AAAA,EACX;AACA,EAAA,OAAO,UAAA;AACX;AAEO,IAAM,SAAA,GAAY,CAAC,GAAA,EAAa,KAAA,EAAe,MAAA,KAA2B;AAC7E,EAAA,IAAI,CAAC,GAAA,IAAO,uBAAA,CAAwB,KAAK,CAAA,EAAG;AACxC,IAAA,OAAO,MAAA;AAAA,EACX;AACA,EAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAA,EAAO;AAAA,IAC3B,OAAA,EAAS,MAAA;AAAA,IACT,QAAA,EAAU,gBAAA,EAAiB,GAAI,MAAA,GAAS,KAAA;AAAA,IACxC,QAAQ,gBAAA;AAAiB,GAC5B,CAAA;AACL;AAEO,IAAM,SAAA,GAAiB,CAAC,GAAA,KAAa;AACxC,EAAA,OAAO,OAAA,CAAQ,IAAI,GAAG,CAAA;AAC1B;AAGO,SAAS,gBAA6B,GAAA,EAA0C;AACnF,EAAA,IAAI,GAAA,IAAO,IAAA,IAAQ,GAAA,KAAQ,EAAA,EAAI;AAC3B,IAAA,OAAO,IAAA;AAAA,EACX;AACA,EAAA,MAAM,GAAA,GAAM,UAAU,GAAG,CAAA;AACzB,EAAA,IAAI,uBAAA,CAAwB,GAAG,CAAA,EAAG;AAC9B,IAAA,IAAI,GAAA,KAAQ,WAAA,IAAe,GAAA,KAAQ,MAAA,EAAQ;AACvC,MAAA,OAAA,CAAQ,OAAO,GAAG,CAAA;AAAA,IACtB;AACA,IAAA,OAAO,IAAA;AAAA,EACX;AACA,EAAA,IAAI;AACA,IAAA,OAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,EACzB,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAA,CAAQ,OAAO,GAAG,CAAA;AAClB,IAAA,OAAO,IAAA;AAAA,EACX;AACJ;AAOO,IAAM,yBAAyB,MAAM;AACxC,EAAA,+BAAA,GAAkC,OAAA,CAAQ,CAAC,SAAS,OAAA,CAAQ,MAAA,CAAO,IAAI,CAAC,CAAA;AACxE,EAAA,KAAA,MAAW,YAAA,IAAgB,CAAC,0BAAA,EAA4B,WAAW,CAAA,EAAG;AAClE,IAAA,OAAA,CAAQ,OAAO,YAAY,CAAA;AAAA,EAC/B;AACJ;AAKO,IAAM,eAAA,GAAkB,CAAC,GAAA,KAAyB;AACrD,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA;AAC7B,EAAA,IAAI,UAAU,MAAA,EAAW;AACrB,IAAA,OAAO,IAAA;AAAA,EACX;AACA,EAAA,IAAI;AACA,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA;AAC/B,IAAA,IAAI,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,IAAY,eAAe,MAAA,EAAQ;AAC/D,MAAA,MAAM,YAAa,MAAA,CAAkC,SAAA;AACrD,MAAA,OAAO,OAAO,SAAA,KAAc,QAAA,IAAY,IAAA,CAAK,KAAI,GAAI,SAAA;AAAA,IACzD;AACA,IAAA,OAAO,KAAA;AAAA,EACX,CAAA,CAAA,MAAQ;AAEJ,IAAA,OAAO,KAAA;AAAA,EACX;AACJ;;;AChFA,SAAS,iBAAA,CAAkB,QAAgB,SAAA,EAAyB;AAChE,EAAA,MAAM,KAAA,GAAQA,OAAAA,CAAQ,GAAA,CAAI,MAAM,CAAA;AAChC,EAAA,IAAI,UAAU,MAAA,EAAW;AACrB,IAAA;AAAA,EACJ;AACA,EAAA,IAAI,uBAAA,CAAwB,KAAK,CAAA,EAAG;AAChC,IAAAA,OAAAA,CAAQ,OAAO,MAAM,CAAA;AACrB,IAAA;AAAA,EACJ;AACA,EAAA,IAAI,CAACA,OAAAA,CAAQ,GAAA,CAAI,SAAS,CAAA,EAAG;AACzB,IAAAA,OAAAA,CAAQ,GAAA,CAAI,SAAA,EAAW,KAAK,CAAA;AAAA,EAChC;AACA,EAAAA,OAAAA,CAAQ,OAAO,MAAM,CAAA;AACzB;AAEA,SAAS,uBAAA,CAAwB,QAAgB,SAAA,EAAyB;AACtE,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,YAAA,EAAc;AACvD,IAAA;AAAA,EACJ;AACA,EAAA,IAAI;AACA,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,MAAM,CAAA;AAChD,IAAA,IAAI,SAAS,IAAA,EAAM;AACf,MAAA;AAAA,IACJ;AACA,IAAA,IAAI,CAAC,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,SAAS,CAAA,EAAG;AACzC,MAAA,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,SAAA,EAAW,KAAK,CAAA;AAAA,IAChD;AACA,IAAA,MAAA,CAAO,YAAA,CAAa,WAAW,MAAM,CAAA;AAAA,EACzC,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;AAEA,SAAS,yBAAA,CAA0B,QAAgB,SAAA,EAAyB;AACxE,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,cAAA,EAAgB;AACzD,IAAA;AAAA,EACJ;AACA,EAAA,IAAI;AACA,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,cAAA,CAAe,OAAA,CAAQ,MAAM,CAAA;AAClD,IAAA,IAAI,SAAS,IAAA,EAAM;AACf,MAAA;AAAA,IACJ;AACA,IAAA,IAAI,CAAC,MAAA,CAAO,cAAA,CAAe,OAAA,CAAQ,SAAS,CAAA,EAAG;AAC3C,MAAA,MAAA,CAAO,cAAA,CAAe,OAAA,CAAQ,SAAA,EAAW,KAAK,CAAA;AAAA,IAClD;AACA,IAAA,MAAA,CAAO,cAAA,CAAe,WAAW,MAAM,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;AAEA,SAAS,wBAAA,GAAiC;AACtC,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,YAAA,EAAc;AACvD,IAAA;AAAA,EACJ;AACA,EAAA,IAAI;AACA,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,YAAY,CAAA,CAAE,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,eAAe,CAAC,CAAA;AACzF,IAAA,KAAA,MAAW,aAAa,IAAA,EAAM;AAC1B,MAAA,MAAM,MAAA,GAAS,SAAA,CAAU,KAAA,CAAM,eAAA,CAAgB,MAAM,CAAA;AACrD,MAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG;AACzB,QAAA;AAAA,MACJ;AACA,MAAA,MAAM,KAAA,GAAQ,MAAA;AACd,MAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,SAAS,CAAA;AACnD,MAAA,MAAM,MAAM,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,CAAA,EAAG,SAAS,CAAA,IAAA,CAAM,CAAA;AAC1D,MAAA,MAAM,MAAA,GAAS,yBAAyB,KAAK,CAAA;AAC7C,MAAA,MAAM,SAAA,GAAY,4BAA4B,KAAK,CAAA;AACnD,MAAA,IAAI,SAAS,IAAA,IAAQ,CAAC,OAAO,YAAA,CAAa,OAAA,CAAQ,MAAM,CAAA,EAAG;AACvD,QAAA,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,MAAA,EAAQ,KAAK,CAAA;AAAA,MAC7C;AACA,MAAA,IAAI,OAAO,IAAA,IAAQ,CAAC,OAAO,YAAA,CAAa,OAAA,CAAQ,SAAS,CAAA,EAAG;AACxD,QAAA,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,SAAA,EAAW,GAAG,CAAA;AAAA,MAC9C;AACA,MAAA,MAAA,CAAO,YAAA,CAAa,WAAW,SAAS,CAAA;AACxC,MAAA,MAAA,CAAO,YAAA,CAAa,UAAA,CAAW,CAAA,EAAG,SAAS,CAAA,IAAA,CAAM,CAAA;AAAA,IACrD;AAAA,EACJ,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;AAEA,SAAS,8BAAA,GAAuC;AAC5C,EAAA,MAAM,OAAO,cAAA,EAAe;AAC5B,EAAA,MAAM,YAAA,GAAe,CAAC,0BAAA,EAA4B,WAAW,CAAA;AAC7D,EAAA,KAAA,MAAW,QAAQ,YAAA,EAAc;AAC7B,IAAAA,OAAAA,CAAQ,OAAO,IAAI,CAAA;AAAA,EACvB;AACA,EAAA,IAAI,IAAA,CAAK,QAAA,IAAY,IAAA,CAAK,QAAA,KAAa,KAAK,YAAA,EAAc;AAEtD,IAAAA,OAAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA;AAAA,EAChC;AACJ;AAMO,SAAS,wBAAA,GAAiC;AAC7C,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAC/B,IAAA;AAAA,EACJ;AAEA,EAAA,KAAA,MAAW,CAAC,MAAA,EAAQ,SAAS,CAAA,IAAK,wBAAA,EAA0B;AACxD,IAAA,iBAAA,CAAkB,QAAQ,SAAS,CAAA;AAAA,EACvC;AAEA,EAAA,uBAAA,CAAwB,aAAA,EAAe,eAAA,CAAgB,CAAA,CAAE,GAAG,CAAA;AAC5D,EAAA,uBAAA,CAAwB,SAAS,WAAW,CAAA;AAE5C,EAAA,KAAA,MAAW,CAAC,MAAA,EAAQ,SAAS,CAAA,IAAK,iCAAA,EAAmC;AACjE,IAAA,yBAAA,CAA0B,QAAQ,SAAS,CAAA;AAAA,EAC/C;AAEA,EAAA,wBAAA,EAAyB;AACzB,EAAA,8BAAA,EAA+B;AAG/B,EAAA,IAAI;AACA,IAAA,MAAA,CAAO,cAAA,EAAgB,WAAW,aAAa,CAAA;AAAA,EACnD,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;AAGO,SAAS,+BAAA,GAA4C;AACxD,EAAA,MAAM,OAAO,cAAA,EAAe;AAC5B,EAAA,MAAM,UAAA,GAAa;AAAA,IACf,IAAA,CAAK,YAAA;AAAA,IACL,IAAA,CAAK,YAAA;AAAA,IACL,IAAA,CAAK,MAAA;AAAA,IACL,IAAA,CAAK,gBAAA;AAAA,IACL,IAAA,CAAK,QAAA;AAAA,IACL,IAAA,CAAK,UAAA;AAAA,IACL,IAAA,CAAK,SAAA;AAAA,IACL,IAAA,CAAK,eAAA;AAAA,IACL,IAAA,CAAK;AAAA,IACP,MAAA,CAAO,CAAC,IAAA,KAAyB,OAAA,CAAQ,IAAI,CAAC,CAAA;AAEhD,EAAA,MAAM,SAAA,GAAY;AAAA,IACd,eAAA,CAAgB,EAAE,IAAA,CAAK,KAAA;AAAA,IACvB,eAAA,CAAgB,EAAE,IAAA,CAAK,OAAA;AAAA,IACvB,eAAA,CAAgB,EAAE,IAAA,CAAK,MAAA;AAAA,IACvB,eAAA,CAAgB,EAAE,IAAA,CAAK,GAAA;AAAA,IACvB,eAAA,CAAgB,EAAE,IAAA,CAAK,OAAA;AAAA,IACvB,eAAA,CAAgB,EAAE,EAAA,CAAG,GAAA;AAAA,IACrB,eAAA,CAAgB,EAAE,EAAA,CAAG,IAAA;AAAA,IACrB,eAAA,CAAgB,EAAE,EAAA,CAAG;AAAA,GACzB;AAEA,EAAA,OAAO,CAAC,mBAAG,IAAI,GAAA,CAAI,CAAC,GAAG,UAAA,EAAY,GAAG,SAAA,EAAW,GAAG,0BAA0B,CAAC,CAAC,CAAA;AACpF;AAEO,SAAS,6BAAA,GAAsC;AAClD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,cAAA,EAAgB;AACzD,IAAA;AAAA,EACJ;AACA,EAAA,IAAI;AACA,IAAA,KAAA,MAAW,CAAC,MAAA,EAAQ,SAAS,CAAA,IAAK,iCAAA,EAAmC;AACjE,MAAA,IACI,cAAc,eAAA,CAAgB,CAAA,CAAE,MAAM,KAAA,IACtC,SAAA,KAAc,gBAAgB,CAAA,CAAE,KAAA,CAAM,SACtC,SAAA,KAAc,eAAA,CAAgB,EAAE,KAAA,CAAM,OAAA,IACtC,cAAc,eAAA,CAAgB,CAAA,CAAE,MAAM,IAAA,EACxC;AACE,QAAA;AAAA,MACJ;AACA,MAAA,MAAA,CAAO,cAAA,CAAe,WAAW,MAAM,CAAA;AACvC,MAAA,MAAA,CAAO,cAAA,CAAe,WAAW,SAAS,CAAA;AAAA,IAC9C;AACA,IAAA,KAAA,MAAW,OAAO,2BAAA,EAA6B;AAC3C,MAAA,IAAI,QAAQ,aAAA,EAAe;AACvB,QAAA,MAAA,CAAO,cAAA,CAAe,WAAW,GAAG,CAAA;AAAA,MACxC;AAAA,IACJ;AACA,IAAA,MAAM,kBAAA,uBAAyB,GAAA,CAAI;AAAA,MAC/B,eAAA,CAAgB,EAAE,KAAA,CAAM,KAAA;AAAA,MACxB,eAAA,CAAgB,EAAE,KAAA,CAAM,KAAA;AAAA,MACxB,eAAA,CAAgB,EAAE,KAAA,CAAM,OAAA;AAAA,MACxB,eAAA,CAAgB,EAAE,KAAA,CAAM,IAAA;AAAA,MACxB,yBAAA;AAAA,MACA,iCAAA;AAAA,MACA,0CAAA;AAAA,MACA;AAAA,KACH,CAAA;AACD,IAAA,MAAM,eAAyB,EAAC;AAChC,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,MAAA,CAAO,cAAA,CAAe,QAAQ,CAAA,EAAA,EAAK;AACnD,MAAA,MAAM,GAAA,GAAM,MAAA,CAAO,cAAA,CAAe,GAAA,CAAI,CAAC,CAAA;AACvC,MAAA,IAAI,CAAC,GAAA,IAAO,kBAAA,CAAmB,GAAA,CAAI,GAAG,CAAA,EAAG;AACzC,MAAA,IAAI,IAAI,UAAA,CAAW,kBAAkB,KAAK,GAAA,CAAI,UAAA,CAAW,WAAW,CAAA,EAAG;AACnE,QAAA,YAAA,CAAa,KAAK,GAAG,CAAA;AAAA,MACzB;AACA,MAAA,IAAI,GAAA,KAAQ,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,GAAA,IAAO,GAAA,KAAQ,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,gBAAA,IAAoB,GAAA,KAAQ,WAAA,EAAa;AAC9G,QAAA,YAAA,CAAa,KAAK,GAAG,CAAA;AAAA,MACzB;AACA,MAAA,IAAI,QAAQ,eAAA,CAAgB,CAAA,CAAE,GAAA,CAAI,EAAA,IAAM,QAAQ,wBAAA,EAA0B;AACtE,QAAA,YAAA,CAAa,KAAK,GAAG,CAAA;AAAA,MACzB;AAAA,IACJ;AACA,IAAA,YAAA,CAAa,QAAQ,CAAC,CAAA,KAAM,OAAO,cAAA,CAAe,UAAA,CAAW,CAAC,CAAC,CAAA;AAAA,EACnE,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;AAEO,SAAS,iCAAA,GAA0C;AACtD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,YAAA,EAAc;AACvD,IAAA;AAAA,EACJ;AACA,EAAA,IAAI;AACA,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,YAAY,CAAA,CAAE,MAAA;AAAA,MAC1C,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,eAAe,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,cAAc;AAAA,KAC9F;AACA,IAAA,IAAA,CAAK,QAAQ,CAAC,CAAA,KAAM,OAAO,YAAA,CAAa,UAAA,CAAW,CAAC,CAAC,CAAA;AAAA,EACzD,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;AAEO,SAAS,oCAAoC,WAAA,EAAgD;AAChG,EAAA,IAAI,eAAe,IAAA,IAAQ,OAAO,WAAW,WAAA,IAAe,CAAC,OAAO,YAAA,EAAc;AAC9E,IAAA;AAAA,EACJ;AACA,EAAA,MAAM,YAAA,GAAe,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,cAAA;AAC5C,EAAA,MAAM,SAAA,GAAY,yBAAyB,WAAW,CAAA;AACtD,EAAA,IAAI;AACA,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,YAAY,CAAA,CAAE,MAAA;AAAA,MAC1C,CAAC,CAAA,KAAA,CAAO,CAAA,CAAE,UAAA,CAAW,eAAe,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,YAAY,CAAA,KAAM,CAAA,KAAM,SAAA,IAAa,CAAA,KAAM,4BAA4B,WAAW;AAAA,KAC5I;AACA,IAAA,IAAA,CAAK,QAAQ,CAAC,CAAA,KAAM,OAAO,YAAA,CAAa,UAAA,CAAW,CAAC,CAAC,CAAA;AAAA,EACzD,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ","file":"chunk-XANZNL46.js","sourcesContent":["import { WP_STORAGE_KEYS } from './wp-storage-keys'\n\nexport interface StorageKeyConfig {\n    loginDetails?: string\n    refreshToken?: string\n    portal?: string\n    subscriptionType?: string\n    authUser?: string\n    pagination?: string\n    routeMenu?: string\n    associationView?: string\n    emailVerified?: string\n}\n\nconst defaults: Required<StorageKeyConfig> = {\n    loginDetails: WP_STORAGE_KEYS.c.auth.login,\n    refreshToken: WP_STORAGE_KEYS.c.auth.refresh,\n    portal: WP_STORAGE_KEYS.c.auth.portal,\n    subscriptionType: WP_STORAGE_KEYS.c.auth.sub,\n    authUser: WP_STORAGE_KEYS.c.auth.login,\n    pagination: WP_STORAGE_KEYS.c.ui.pag,\n    routeMenu: WP_STORAGE_KEYS.c.ui.menu,\n    associationView: WP_STORAGE_KEYS.c.ui.assoc,\n    emailVerified: WP_STORAGE_KEYS.c.auth.emailOk\n}\n\nlet runtimeKeys: Required<StorageKeyConfig> = { ...defaults }\n\nexport function configureStorageKeys(overrides: StorageKeyConfig = {}): void {\n    runtimeKeys = { ...defaults, ...runtimeKeys, ...overrides }\n    if (overrides.authUser === undefined) {\n        runtimeKeys.authUser = runtimeKeys.loginDetails\n    }\n}\n\n/** Test helper — restore default cookie key names. */\nexport function resetStorageKeysForTests(): void {\n    runtimeKeys = { ...defaults }\n}\n\nexport function getStorageKeys(): Readonly<Required<StorageKeyConfig>> {\n    return runtimeKeys\n}\n\nexport { WP_STORAGE_KEYS } from './wp-storage-keys'\n","import Cookies from 'js-cookie'\nimport { getClientAuthCookieNamesToClear } from './storage-migration'\n\nfunction cookieSecureFlag(): boolean {\n    if (typeof window === 'undefined') return true\n    return window.location.protocol === 'https:'\n}\n\n/** Values that must never be persisted in readable cookies. */\nexport function isCorruptCookieRawValue(raw: string | null | undefined): boolean {\n    return raw == null || raw === '' || raw === 'undefined' || raw === 'null'\n}\n\n/** Serialize a value for cookie storage; returns null when write should be skipped. */\nexport function stringifyCookieValue(value: unknown): string | null {\n    if (value === undefined || value === null) {\n        return null\n    }\n    if (typeof value === 'string') {\n        return isCorruptCookieRawValue(value) ? null : value\n    }\n    const serialized = JSON.stringify(value)\n    if (serialized === undefined || isCorruptCookieRawValue(serialized)) {\n        return null\n    }\n    return serialized\n}\n\nexport const setCookie = (key: string, value: string, expire?: number | Date) => {\n    if (!key || isCorruptCookieRawValue(value)) {\n        return undefined\n    }\n    return Cookies.set(key, value, {\n        expires: expire,\n        sameSite: cookieSecureFlag() ? 'none' : 'lax',\n        secure: cookieSecureFlag()\n    })\n}\n\nexport const getCookie: any = (key: any) => {\n    return Cookies.get(key)\n}\n\n/** Parse JSON stored in a cookie; removes corrupt values on read (self-heal). */\nexport function parseCookieJson<T = unknown>(key: string | null | undefined): T | null {\n    if (key == null || key === '') {\n        return null\n    }\n    const raw = getCookie(key)\n    if (isCorruptCookieRawValue(raw)) {\n        if (raw === 'undefined' || raw === 'null') {\n            Cookies.remove(key)\n        }\n        return null\n    }\n    try {\n        return JSON.parse(raw) as T\n    } catch {\n        Cookies.remove(key)\n        return null\n    }\n}\n\nexport const removeCookie = (key: any) => {\n    return Cookies.remove(key)\n}\n\n/** Clears client-portal session cookies only (does not wipe admin cookies on shared localhost). */\nexport const clearClientAuthCookies = () => {\n    getClientAuthCookieNamesToClear().forEach((name) => Cookies.remove(name))\n    for (const legacyAccess of ['woodsportal_access_token', 'AUTH_CRED']) {\n        Cookies.remove(legacyAccess)\n    }\n}\n\n/** @deprecated Prefer {@link clearClientAuthCookies} */\nexport const removeAllCookie = clearClientAuthCookies\n\nexport const isCookieExpired = (key: string): boolean => {\n    const value = Cookies.get(key)\n    if (value === undefined) {\n        return true\n    }\n    try {\n        const parsed = JSON.parse(value)\n        if (parsed && typeof parsed === 'object' && 'expiresAt' in parsed) {\n            const expiresAt = (parsed as { expiresAt?: number }).expiresAt\n            return typeof expiresAt === 'number' && Date.now() > expiresAt\n        }\n        return false\n    } catch {\n        // Plain string values (e.g. refresh token) rely on browser cookie expiry.\n        return false\n    }\n}\n","import Cookies from 'js-cookie'\nimport {\n    CLIENT_COOKIE_MIGRATIONS,\n    CLIENT_SESSION_STORAGE_MIGRATIONS,\n    LEGACY_CLIENT_AUTH_COOKIES,\n    LEGACY_CLIENT_SESSION_EXACT,\n    WP_STORAGE_KEYS,\n    WP_UI_THEME,\n    wpClientIframeRefreshKey,\n    wpClientIframeRefreshExpKey\n} from './wp-storage-keys'\nimport { getStorageKeys } from './storage-keys'\nimport { isCorruptCookieRawValue } from './cookie'\n\nfunction migrateCookiePair(legacy: string, canonical: string): void {\n    const value = Cookies.get(legacy)\n    if (value === undefined) {\n        return\n    }\n    if (isCorruptCookieRawValue(value)) {\n        Cookies.remove(legacy)\n        return\n    }\n    if (!Cookies.get(canonical)) {\n        Cookies.set(canonical, value)\n    }\n    Cookies.remove(legacy)\n}\n\nfunction migrateLocalStoragePair(legacy: string, canonical: string): void {\n    if (typeof window === 'undefined' || !window.localStorage) {\n        return\n    }\n    try {\n        const value = window.localStorage.getItem(legacy)\n        if (value == null) {\n            return\n        }\n        if (!window.localStorage.getItem(canonical)) {\n            window.localStorage.setItem(canonical, value)\n        }\n        window.localStorage.removeItem(legacy)\n    } catch {\n        // private mode\n    }\n}\n\nfunction migrateSessionStoragePair(legacy: string, canonical: string): void {\n    if (typeof window === 'undefined' || !window.sessionStorage) {\n        return\n    }\n    try {\n        const value = window.sessionStorage.getItem(legacy)\n        if (value == null) {\n            return\n        }\n        if (!window.sessionStorage.getItem(canonical)) {\n            window.sessionStorage.setItem(canonical, value)\n        }\n        window.sessionStorage.removeItem(legacy)\n    } catch {\n        // ignore\n    }\n}\n\nfunction migrateIframeRefreshKeys(): void {\n    if (typeof window === 'undefined' || !window.localStorage) {\n        return\n    }\n    try {\n        const keys = Object.keys(window.localStorage).filter((k) => k.startsWith('wp_iframe_rt_'))\n        for (const legacyKey of keys) {\n            const suffix = legacyKey.slice('wp_iframe_rt_'.length)\n            if (suffix.endsWith('_exp')) {\n                continue\n            }\n            const hubId = suffix\n            const token = window.localStorage.getItem(legacyKey)\n            const exp = window.localStorage.getItem(`${legacyKey}_exp`)\n            const newKey = wpClientIframeRefreshKey(hubId)\n            const newExpKey = wpClientIframeRefreshExpKey(hubId)\n            if (token != null && !window.localStorage.getItem(newKey)) {\n                window.localStorage.setItem(newKey, token)\n            }\n            if (exp != null && !window.localStorage.getItem(newExpKey)) {\n                window.localStorage.setItem(newExpKey, exp)\n            }\n            window.localStorage.removeItem(legacyKey)\n            window.localStorage.removeItem(`${legacyKey}_exp`)\n        }\n    } catch {\n        // ignore\n    }\n}\n\nfunction removeLegacyAccessTokenCookies(): void {\n    const keys = getStorageKeys()\n    const legacyAccess = ['woodsportal_access_token', 'AUTH_CRED']\n    for (const name of legacyAccess) {\n        Cookies.remove(name)\n    }\n    if (keys.authUser && keys.authUser !== keys.loginDetails) {\n        // legacy duplicate profile mirror — uplift handled by migration; drop separate user cookie\n        Cookies.remove(keys.authUser)\n    }\n}\n\n/**\n * One-time uplift: read legacy browser keys, write canonical `wp.*` keys, delete legacy.\n * Safe to call on every boot (idempotent).\n */\nexport function migrateLegacyStorageKeys(): void {\n    if (typeof window === 'undefined') {\n        return\n    }\n\n    for (const [legacy, canonical] of CLIENT_COOKIE_MIGRATIONS) {\n        migrateCookiePair(legacy, canonical)\n    }\n\n    migrateLocalStoragePair('hubSpotData', WP_STORAGE_KEYS.c.hub)\n    migrateLocalStoragePair('theme', WP_UI_THEME)\n\n    for (const [legacy, canonical] of CLIENT_SESSION_STORAGE_MIGRATIONS) {\n        migrateSessionStoragePair(legacy, canonical)\n    }\n\n    migrateIframeRefreshKeys()\n    removeLegacyAccessTokenCookies()\n\n    // Drop dead forget-password key\n    try {\n        window.sessionStorage?.removeItem('entredEmail')\n    } catch {\n        // ignore\n    }\n}\n\n/** All client auth cookie names to remove on logout (canonical + legacy + configured). */\nexport function getClientAuthCookieNamesToClear(): string[] {\n    const keys = getStorageKeys()\n    const configured = [\n        keys.loginDetails,\n        keys.refreshToken,\n        keys.portal,\n        keys.subscriptionType,\n        keys.authUser,\n        keys.pagination,\n        keys.routeMenu,\n        keys.associationView,\n        keys.emailVerified\n    ].filter((name): name is string => Boolean(name))\n\n    const canonical = [\n        WP_STORAGE_KEYS.c.auth.login,\n        WP_STORAGE_KEYS.c.auth.refresh,\n        WP_STORAGE_KEYS.c.auth.portal,\n        WP_STORAGE_KEYS.c.auth.sub,\n        WP_STORAGE_KEYS.c.auth.emailOk,\n        WP_STORAGE_KEYS.c.ui.pag,\n        WP_STORAGE_KEYS.c.ui.menu,\n        WP_STORAGE_KEYS.c.ui.assoc\n    ]\n\n    return [...new Set([...configured, ...canonical, ...LEGACY_CLIENT_AUTH_COOKIES])]\n}\n\nexport function clearClientSessionStorageKeys(): void {\n    if (typeof window === 'undefined' || !window.sessionStorage) {\n        return\n    }\n    try {\n        for (const [legacy, canonical] of CLIENT_SESSION_STORAGE_MIGRATIONS) {\n            if (\n                canonical === WP_STORAGE_KEYS.c.login.email ||\n                canonical === WP_STORAGE_KEYS.c.login.force ||\n                canonical === WP_STORAGE_KEYS.c.login.passkey ||\n                canonical === WP_STORAGE_KEYS.c.login.done\n            ) {\n                continue\n            }\n            window.sessionStorage.removeItem(legacy)\n            window.sessionStorage.removeItem(canonical)\n        }\n        for (const key of LEGACY_CLIENT_SESSION_EXACT) {\n            if (key === 'entredEmail') {\n                window.sessionStorage.removeItem(key)\n            }\n        }\n        const preservedLoginKeys = new Set([\n            WP_STORAGE_KEYS.c.login.email,\n            WP_STORAGE_KEYS.c.login.force,\n            WP_STORAGE_KEYS.c.login.passkey,\n            WP_STORAGE_KEYS.c.login.done,\n            'woodsportal.login.email',\n            'woodsportal.login.forcePreLogin',\n            'woodsportal.login.passkeyPrimaryEnrolled',\n            'woodsportal.login.preLoginCompletedKey'\n        ])\n        const keysToRemove: string[] = []\n        for (let i = 0; i < window.sessionStorage.length; i++) {\n            const key = window.sessionStorage.key(i)\n            if (!key || preservedLoginKeys.has(key)) continue\n            if (key.startsWith('woodsportal.mfa.') || key.startsWith('wp.c.mfa.')) {\n                keysToRemove.push(key)\n            }\n            if (key === WP_STORAGE_KEYS.c.auth.err || key === WP_STORAGE_KEYS.c.auth.refreshExhausted || key === 'authError') {\n                keysToRemove.push(key)\n            }\n            if (key === WP_STORAGE_KEYS.c.sso.cb || key === 'sso_callback_processed') {\n                keysToRemove.push(key)\n            }\n        }\n        keysToRemove.forEach((k) => window.sessionStorage.removeItem(k))\n    } catch {\n        // ignore\n    }\n}\n\nexport function clearClientIframeRefreshLocalKeys(): void {\n    if (typeof window === 'undefined' || !window.localStorage) {\n        return\n    }\n    try {\n        const keys = Object.keys(window.localStorage).filter(\n            (k) => k.startsWith('wp_iframe_rt_') || k.startsWith(WP_STORAGE_KEYS.c.auth.iframeRtPrefix)\n        )\n        keys.forEach((k) => window.localStorage.removeItem(k))\n    } catch {\n        // ignore\n    }\n}\n\nexport function clearStaleIframeRefreshForOtherHubs(activeHubId: string | number | undefined): void {\n    if (activeHubId == null || typeof window === 'undefined' || !window.localStorage) {\n        return\n    }\n    const activePrefix = WP_STORAGE_KEYS.c.auth.iframeRtPrefix\n    const activeKey = wpClientIframeRefreshKey(activeHubId)\n    try {\n        const keys = Object.keys(window.localStorage).filter(\n            (k) => (k.startsWith('wp_iframe_rt_') || k.startsWith(activePrefix)) && k !== activeKey && k !== wpClientIframeRefreshExpKey(activeHubId)\n        )\n        keys.forEach((k) => window.localStorage.removeItem(k))\n    } catch {\n        // ignore\n    }\n}\n"]}

package/dist/cross-tab-session-NJCGCGJM.js

@@ -0,0 +1,9 @@
+export { applyCrossTabSessionRevocation, installCrossTabSessionListener, resetCrossTabSessionSyncForTests, signalSessionChanged } from './chunk-CJZF3RTE.js';
+import './chunk-55MIERLJ.js';
+import './chunk-AL3JKMCX.js';
+import './chunk-2SZ2WQGG.js';
+import './chunk-KYZRYIB3.js';
+import './chunk-XANZNL46.js';
+import './chunk-7JHBCIR5.js';
+//# sourceMappingURL=cross-tab-session-NJCGCGJM.js.map
+//# sourceMappingURL=cross-tab-session-NJCGCGJM.js.map

package/dist/{cross-tab-session-BDROO3UR.js.map → cross-tab-session-NJCGCGJM.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"cross-tab-session-BDROO3UR.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"cross-tab-session-NJCGCGJM.js"}

package/dist/entries/auth.d.ts

@@ -1,5 +1,5 @@
-import { p as preLogin, l as login, c as clientSession, h as handoff, a as logout, r as register, v as verifyEmail, b as registerExistingUser, f as forgetPassword, d as resetPassword, e as resetPasswordVerifyToken, g as verifyEmailResend, i as resendEmail, j as changePassword, m as me, k as profile, n as profileUpdate, o as verifyOtp, s as sendMfaOtp, q as pendingPasskeyOptions, t as pendingPasskeyVerify, u as getMfaStatus, w as setMfaPreferences, x as startPhoneVerify, y as confirmPhoneVerify, z as totpEnrollStart, A as totpEnrollVerify, B as totpDisable, C as phoneUnverify, D as backupCodesRegenerate, E as mfaOptOut, F as webauthnRegisterOptions, G as webauthnRegisterVerify, H as webauthnAuthOptions, I as webauthnAuthVerify, J as listWebauthnCredentials, K as deleteWebauthnCredential, L as passkeyLoginOptions, M as passkeyLoginVerify, N as getSecurityOverview, O as getSecurityLoginActivity, P as getSecuritySessions, Q as revokeSecuritySession, R as revokeOtherSecuritySessions, S as getLoginBootstrap, T as getSsoDetails, U as generateSsoUrl, V as ssoCallback, W as getRefreshToken, X as refreshSession, Y as getAuthRefreshToken, Z as getAccessToken, _ as clearAccessToken, $ as isAuthenticated, a0 as isAuthenticateApp, a1 as isAccessTokenExpired, a2 as isExpiresAccessToken, a3 as hasRefreshSession, a4 as hasValidAccessToken, a5 as didLastRefreshFail, a6 as isSessionRefreshExhausted, a7 as isRefreshInFlight, a8 as resetSessionAuthState, a9 as clearSessionRefreshExhaustedState, aa as hydrateSessionRefreshState, ab as SessionContractInput } from '../http-errors-Bwhj6cfB.js';
-export { ay as ActiveSession, az as ApiErrorPayload, aA as AuthErrorAction, aB as AuthErrorCode, aC as AuthErrorCodeValue, aD as AuthFunnelState, aE as AuthInterceptorPolicyConfig, aF as AuthPolicyRoutes, aG as AuthRouteAction, bl as EditorPreviewMockHandler, bm as EditorPreviewMockResult, aH as HttpClientConfig, aI as HttpErrorKind, bn as LoginBootstrapMfaPolicy, bo as LoginBootstrapPortal, bp as LoginBootstrapResponse, bq as LoginBootstrapSsoProvider, aK as LoginHistoryRow, aL as LoginResponseData, aM as MfaBootRecoveryResult, aN as MfaEnrollmentStatus, aO as MfaMethod, aP as MfaMethodOption, aQ as MfaPortalScopeContext, aR as PaginationResponse, aS as SERVICE_UNAVAILABLE_MESSAGE, aT as SecurityOverview, aV as StoredAuthError, ad as TwoFaVerificationRequest, aW as UnauthorizedPageCopy, aX as WoodsportalRequestConfig, aY as classifyHttpError, a_ as getFieldErrors, a$ as getFormErrors, b0 as getHttpErrorMessage, b2 as getUnauthorizedPageCopy, b3 as hasAuthenticatedAccess, b4 as hasValidAccess, b5 as initializeHttpClient, b6 as isFullyAuthenticated, b7 as isMfaPendingSession, b8 as isOptionalAuthFailureUrl, b9 as isServiceUnavailableError, ba as isSessionProbeUrl, bb as parseApiErrorPayload, bc as persistAuthError, bd as readPersistedAuthError, be as recoverMfaGateOnBoot, bg as resolveAuthErrorAction, bh as resolveAuthRouteAction, br as setEditorPreviewMockHandler, bi as setSessionLifecycleListener, bj as startVisibilityRefreshScheduler, bk as stopVisibilityRefreshScheduler } from '../http-errors-Bwhj6cfB.js';
+import { p as preLogin, l as login, c as clientSession, h as handoff, a as logout, r as register, v as verifyEmail, b as registerExistingUser, f as forgetPassword, d as resetPassword, e as resetPasswordVerifyToken, g as verifyEmailResend, i as resendEmail, j as changePassword, m as me, k as profile, n as profileUpdate, o as verifyOtp, s as sendMfaOtp, q as pendingPasskeyOptions, t as pendingPasskeyVerify, u as getMfaStatus, w as setMfaPreferences, x as startPhoneVerify, y as confirmPhoneVerify, z as totpEnrollStart, A as totpEnrollVerify, B as totpDisable, C as phoneUnverify, D as backupCodesRegenerate, E as mfaOptOut, F as webauthnRegisterOptions, G as webauthnRegisterVerify, H as webauthnAuthOptions, I as webauthnAuthVerify, J as listWebauthnCredentials, K as deleteWebauthnCredential, L as passkeyLoginOptions, M as passkeyLoginVerify, N as getSecurityOverview, O as getSecurityLoginActivity, P as getSecuritySessions, Q as revokeSecuritySession, R as revokeOtherSecuritySessions, S as getLoginBootstrap, T as getSsoDetails, U as generateSsoUrl, V as ssoCallback, W as getRefreshToken, X as refreshSession, Y as getAuthRefreshToken, Z as getAccessToken, _ as setAccessToken, $ as clearAccessToken, a0 as isAuthenticated, a1 as isAuthenticateApp, a2 as isAccessTokenExpired, a3 as isExpiresAccessToken, a4 as hasRefreshSession, a5 as hasValidAccessToken, a6 as didLastRefreshFail, a7 as isSessionRefreshExhausted, a8 as isRefreshInFlight, a9 as resetSessionAuthState, aa as clearSessionRefreshExhaustedState, ab as hydrateSessionRefreshState, ac as SessionContractInput } from '../http-errors-OKY0E5C5.js';
+export { az as ActiveSession, aA as ApiErrorPayload, aB as AuthErrorAction, aC as AuthErrorCode, aD as AuthErrorCodeValue, aE as AuthFunnelState, aF as AuthInterceptorPolicyConfig, aG as AuthPolicyRoutes, aH as AuthRouteAction, bt as EditorPreviewMockHandler, bu as EditorPreviewMockResult, aI as HttpClientConfig, aJ as HttpErrorKind, aK as HydrateMfaPendingAccessTokenInput, bv as LoginBootstrapMfaPolicy, bw as LoginBootstrapPortal, bx as LoginBootstrapResponse, by as LoginBootstrapSsoProvider, aM as LoginHistoryRow, aN as LoginResponseData, aO as MfaBootRecoveryResult, aP as MfaEnrollmentStatus, aQ as MfaMethod, aR as MfaMethodOption, aS as MfaPendingAccessToken, aT as MfaPortalScopeContext, aU as MfaStorageLane, aV as PaginationResponse, aW as SERVICE_UNAVAILABLE_MESSAGE, aX as SecurityOverview, aZ as StoredAuthError, ae as TwoFaVerificationRequest, a_ as UnauthorizedPageCopy, a$ as WoodsportalRequestConfig, b0 as classifyHttpError, b1 as clearMfaPendingAccessToken, b3 as getFieldErrors, b4 as getFormErrors, b5 as getHttpErrorMessage, b7 as getUnauthorizedPageCopy, b8 as hasAuthenticatedAccess, b9 as hasValidAccess, ba as hydrateMfaPendingAccessToken, bb as initializeHttpClient, bc as isFullyAuthenticated, bd as isMfaPendingSession, be as isOptionalAuthFailureUrl, bf as isServiceUnavailableError, bg as isSessionProbeUrl, bh as parseApiErrorPayload, bi as persistAuthError, bj as readMfaPendingAccessToken, bk as readPersistedAuthError, bl as recoverMfaGateOnBoot, bn as resolveAuthErrorAction, bo as resolveAuthRouteAction, bz as setEditorPreviewMockHandler, bp as setSessionLifecycleListener, bq as startVisibilityRefreshScheduler, br as stopVisibilityRefreshScheduler, bs as storeMfaPendingAccessToken } from '../http-errors-OKY0E5C5.js';
 export { C as ChangePasswordPayload, F as ForgetPasswordPayload, L as LoginPayload, P as PreLoginPayload, a as ResetPasswordPayload, R as ResetPasswordVerifyTokenPayload, V as VerifyEmailPayload } from '../index-Bh9eY8sA.js';
 import 'axios';
 
@@ -65,6 +65,7 @@ declare const api: {
             refreshSession: typeof refreshSession;
             refreshAccessToken: typeof getAuthRefreshToken;
             getAccessToken: typeof getAccessToken;
+            setAccessToken: typeof setAccessToken;
             clearAccessToken: typeof clearAccessToken;
             isAuthenticated: typeof isAuthenticated;
             isAuthenticateApp: typeof isAuthenticateApp;

package/dist/entries/auth.js

@@ -1,12 +1,12 @@
-import { authApi } from '../chunk-MRDVLALR.js';
-export { hasAuthenticatedAccess, hasValidAccess, isFullyAuthenticated, isMfaPendingSession, recoverMfaGateOnBoot, resolveAuthRouteAction } from '../chunk-MRDVLALR.js';
-export { isOptionalAuthFailureUrl, isSessionProbeUrl, persistAuthError, readPersistedAuthError, resolveAuthErrorAction } from '../chunk-GUYIJ4ZE.js';
-export { SERVICE_UNAVAILABLE_MESSAGE, classifyHttpError, getFieldErrors, getFormErrors, getHttpErrorMessage, initializeHttpClient, isServiceUnavailableError, setEditorPreviewMockHandler, startVisibilityRefreshScheduler, stopVisibilityRefreshScheduler } from '../chunk-4LGYRTTV.js';
-import '../chunk-XSV63VCR.js';
-export { setSessionLifecycleListener } from '../chunk-B2OVKOJU.js';
+import { authApi } from '../chunk-FZYOTYDA.js';
+export { clearMfaPendingAccessToken, hasAuthenticatedAccess, hasValidAccess, hydrateMfaPendingAccessToken, isFullyAuthenticated, isMfaPendingSession, readMfaPendingAccessToken, recoverMfaGateOnBoot, resolveAuthRouteAction, storeMfaPendingAccessToken } from '../chunk-FZYOTYDA.js';
+export { isOptionalAuthFailureUrl, isSessionProbeUrl, persistAuthError, readPersistedAuthError, resolveAuthErrorAction } from '../chunk-AHRT7SME.js';
+export { SERVICE_UNAVAILABLE_MESSAGE, classifyHttpError, getFieldErrors, getFormErrors, getHttpErrorMessage, initializeHttpClient, isServiceUnavailableError, setEditorPreviewMockHandler, startVisibilityRefreshScheduler, stopVisibilityRefreshScheduler } from '../chunk-2EFT76XX.js';
+import '../chunk-2SZ2WQGG.js';
+export { setSessionLifecycleListener } from '../chunk-KYZRYIB3.js';
 export { AuthErrorCode, getUnauthorizedPageCopy, parseApiErrorPayload } from '../chunk-COHBSTHF.js';
-import '../chunk-YNOZWRK3.js';
-import '../chunk-BKT4MFQM.js';
+import '../chunk-XANZNL46.js';
+import '../chunk-7JHBCIR5.js';
 
 // src/main/entries/auth.ts
 var api = {

package/dist/entries/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/main/entries/auth.ts"],"names":[],"mappings":";;;;;;;;;;;AAsEO,IAAM,GAAA,GAAM;AAAA,EACf,IAAA,EAAM;AACV","file":"auth.js","sourcesContent":["/**\n * Auth-only subpath export — login, MFA, security, SSO, token helpers.\n * Does not import CRM feature modules.\n */\nimport { authApi } from '../api/nested-auth-api'\n\nexport { initializeHttpClient, getFormErrors, getFieldErrors, setEditorPreviewMockHandler } from '../core/http/http-client'\nexport { setSessionLifecycleListener } from '../core/http/token-store'\nexport type { HttpClientConfig, EditorPreviewMockHandler, EditorPreviewMockResult } from '../core/http/http-client'\n\nexport { classifyHttpError, getHttpErrorMessage, isServiceUnavailableError, SERVICE_UNAVAILABLE_MESSAGE } from '../core/http/http-errors'\nexport type { HttpErrorKind } from '../core/http/http-errors'\n\nexport {\n    AuthErrorCode,\n    parseApiErrorPayload,\n    getUnauthorizedPageCopy,\n    resolveAuthErrorAction,\n    isOptionalAuthFailureUrl,\n    isSessionProbeUrl,\n    persistAuthError,\n    readPersistedAuthError,\n    hasValidAccess,\n    isFullyAuthenticated,\n    isMfaPendingSession,\n    hasAuthenticatedAccess,\n    recoverMfaGateOnBoot,\n    startVisibilityRefreshScheduler,\n    stopVisibilityRefreshScheduler,\n    resolveAuthRouteAction\n} from '../core/auth/index.js'\nexport type {\n    ApiErrorPayload,\n    StoredAuthError,\n    AuthErrorCodeValue,\n    UnauthorizedPageCopy,\n    AuthErrorAction,\n    AuthPolicyRoutes,\n    AuthInterceptorPolicyConfig,\n    WoodsportalRequestConfig,\n    SessionContractInput,\n    MfaBootRecoveryResult,\n    AuthRouteAction,\n    AuthFunnelState\n} from '../core/auth/index.js'\n\nexport type {\n    PreLoginPayload,\n    LoginPayload,\n    VerifyEmailPayload,\n    ResetPasswordVerifyTokenPayload,\n    ResetPasswordPayload,\n    ForgetPasswordPayload,\n    ChangePasswordPayload,\n    MfaMethod,\n    MfaMethodOption,\n    MfaPortalScopeContext,\n    LoginBootstrapResponse,\n    LoginBootstrapMfaPolicy,\n    LoginBootstrapPortal,\n    LoginBootstrapSsoProvider,\n    LoginResponseData,\n    TwoFaVerificationRequest,\n    MfaEnrollmentStatus,\n    SecurityOverview,\n    LoginHistoryRow,\n    ActiveSession,\n    PaginationResponse\n} from '../core/types'\n\nexport const api = {\n    auth: authApi\n}\n"]}
+{"version":3,"sources":["../../src/main/entries/auth.ts"],"names":[],"mappings":";;;;;;;;;;;AA6EO,IAAM,GAAA,GAAM;AAAA,EACf,IAAA,EAAM;AACV","file":"auth.js","sourcesContent":["/**\n * Auth-only subpath export — login, MFA, security, SSO, token helpers.\n * Does not import CRM feature modules.\n */\nimport { authApi } from '../api/nested-auth-api'\n\nexport { initializeHttpClient, getFormErrors, getFieldErrors, setEditorPreviewMockHandler } from '../core/http/http-client'\nexport { setSessionLifecycleListener } from '../core/http/token-store'\nexport type { HttpClientConfig, EditorPreviewMockHandler, EditorPreviewMockResult } from '../core/http/http-client'\n\nexport { classifyHttpError, getHttpErrorMessage, isServiceUnavailableError, SERVICE_UNAVAILABLE_MESSAGE } from '../core/http/http-errors'\nexport type { HttpErrorKind } from '../core/http/http-errors'\n\nexport {\n    AuthErrorCode,\n    parseApiErrorPayload,\n    getUnauthorizedPageCopy,\n    resolveAuthErrorAction,\n    isOptionalAuthFailureUrl,\n    isSessionProbeUrl,\n    persistAuthError,\n    readPersistedAuthError,\n    hasValidAccess,\n    isFullyAuthenticated,\n    isMfaPendingSession,\n    hasAuthenticatedAccess,\n    recoverMfaGateOnBoot,\n    startVisibilityRefreshScheduler,\n    stopVisibilityRefreshScheduler,\n    resolveAuthRouteAction,\n    storeMfaPendingAccessToken,\n    readMfaPendingAccessToken,\n    clearMfaPendingAccessToken,\n    hydrateMfaPendingAccessToken\n} from '../core/auth/index.js'\nexport type {\n    ApiErrorPayload,\n    StoredAuthError,\n    AuthErrorCodeValue,\n    UnauthorizedPageCopy,\n    AuthErrorAction,\n    AuthPolicyRoutes,\n    AuthInterceptorPolicyConfig,\n    WoodsportalRequestConfig,\n    SessionContractInput,\n    MfaBootRecoveryResult,\n    AuthRouteAction,\n    AuthFunnelState,\n    MfaStorageLane,\n    MfaPendingAccessToken,\n    HydrateMfaPendingAccessTokenInput\n} from '../core/auth/index.js'\n\nexport type {\n    PreLoginPayload,\n    LoginPayload,\n    VerifyEmailPayload,\n    ResetPasswordVerifyTokenPayload,\n    ResetPasswordPayload,\n    ForgetPasswordPayload,\n    ChangePasswordPayload,\n    MfaMethod,\n    MfaMethodOption,\n    MfaPortalScopeContext,\n    LoginBootstrapResponse,\n    LoginBootstrapMfaPolicy,\n    LoginBootstrapPortal,\n    LoginBootstrapSsoProvider,\n    LoginResponseData,\n    TwoFaVerificationRequest,\n    MfaEnrollmentStatus,\n    SecurityOverview,\n    LoginHistoryRow,\n    ActiveSession,\n    PaginationResponse\n} from '../core/types'\n\nexport const api = {\n    auth: authApi\n}\n"]}

package/dist/entries/crm.js

@@ -1,14 +1,14 @@
-import { crmApi } from '../chunk-D6QI2ISO.js';
-export { isPipelineBoardObjectType, shouldShowPipelineSelector, supportsBoardView } from '../chunk-D6QI2ISO.js';
+import { crmApi } from '../chunk-6IGCVIVV.js';
+export { isPipelineBoardObjectType, shouldShowPipelineSelector, supportsBoardView } from '../chunk-6IGCVIVV.js';
 import '../chunk-55MIERLJ.js';
-import { navigationApi } from '../chunk-4LGYRTTV.js';
-import '../chunk-GNXTGOGZ.js';
-import { actions8, syncStore, actions5, emailStore, actions4, noteStore, actions6, userStore, actions2, tableStore, tableUiActions, tableUiStore } from '../chunk-XSV63VCR.js';
-export { HUBSPOT_DEALS_OBJECT_TYPE_ID, HUBSPOT_TICKETS_OBJECT_TYPE_ID, PIPELINE_BOARD_OBJECT_TYPE_IDS, PIPELINE_REQUIRED_MANAGED_OBJECT_TYPE_IDS, isPipelineBoardObjectTypeId } from '../chunk-XSV63VCR.js';
-import { storage } from '../chunk-B2OVKOJU.js';
+import { navigationApi } from '../chunk-2EFT76XX.js';
+import '../chunk-AL3JKMCX.js';
+import { actions8, syncStore, actions5, emailStore, actions4, noteStore, actions6, userStore, actions2, tableStore, tableUiActions, tableUiStore } from '../chunk-2SZ2WQGG.js';
+export { HUBSPOT_DEALS_OBJECT_TYPE_ID, HUBSPOT_TICKETS_OBJECT_TYPE_ID, PIPELINE_BOARD_OBJECT_TYPE_IDS, PIPELINE_REQUIRED_MANAGED_OBJECT_TYPE_IDS, isPipelineBoardObjectTypeId } from '../chunk-2SZ2WQGG.js';
+import { storage } from '../chunk-KYZRYIB3.js';
 import '../chunk-COHBSTHF.js';
-import '../chunk-YNOZWRK3.js';
-import '../chunk-BKT4MFQM.js';
+import '../chunk-XANZNL46.js';
+import '../chunk-7JHBCIR5.js';
 
 // src/main/entries/crm.ts
 var api = {

package/dist/{http-errors-Bwhj6cfB.d.ts → http-errors-OKY0E5C5.d.ts}

@@ -402,6 +402,7 @@ declare function isAccessTokenExpired(): boolean;
 declare function hasRefreshSession(): boolean;
 declare function hasValidAccessToken(): boolean;
 
+declare function setAccessToken(token: string, expiresIn?: number): Promise<unknown>;
 declare function getRefreshToken(): string | null;
 
 declare function getSsoDetails(options?: MutationOptions<any, any>): {
@@ -716,8 +717,23 @@ type MfaBootRecoveryInput = {
     hasRefreshToken: () => boolean;
     clearMfaOrphan: () => void;
     clearStaleAccessToken: () => void;
+    tryHydrateMfaAccessToken?: () => boolean | Promise<boolean>;
 };
-declare function recoverMfaGateOnBoot(input: MfaBootRecoveryInput): MfaBootRecoveryResult;
+declare function recoverMfaGateOnBoot(input: MfaBootRecoveryInput): Promise<MfaBootRecoveryResult>;
+
+type MfaStorageLane = 'c' | 'a';
+type MfaPendingAccessToken = {
+    token: string;
+    expiresAt: number;
+};
+declare function storeMfaPendingAccessToken(token: string, expiresInSeconds: number | undefined, lane?: MfaStorageLane): void;
+declare function readMfaPendingAccessToken(lane?: MfaStorageLane): MfaPendingAccessToken | null;
+declare function clearMfaPendingAccessToken(lane?: MfaStorageLane): void;
+type HydrateMfaPendingAccessTokenInput = {
+    lane?: MfaStorageLane;
+    setAccessToken: (token: string, expiresInSeconds?: number) => void | Promise<void>;
+};
+declare function hydrateMfaPendingAccessToken(input: HydrateMfaPendingAccessTokenInput): Promise<boolean>;
 
 type AuthRouteAction = {
     kind: 'allow';
@@ -755,4 +771,4 @@ declare function classifyHttpError(error: unknown): HttpErrorKind;
 declare function isServiceUnavailableError(error: unknown): boolean;
 declare function getHttpErrorMessage(error: unknown): string;
 
-export { isAuthenticated as $, totpEnrollVerify as A, totpDisable as B, phoneUnverify as C, backupCodesRegenerate as D, mfaOptOut as E, webauthnRegisterOptions as F, webauthnRegisterVerify as G, webauthnAuthOptions as H, webauthnAuthVerify as I, listWebauthnCredentials as J, deleteWebauthnCredential as K, passkeyLoginOptions as L, passkeyLoginVerify as M, getSecurityOverview as N, getSecurityLoginActivity as O, getSecuritySessions as P, revokeSecuritySession as Q, revokeOtherSecuritySessions as R, getLoginBootstrap as S, getSsoDetails as T, generateSsoUrl as U, ssoCallback as V, getRefreshToken as W, refreshSession as X, getAuthRefreshToken as Y, getAccessToken as Z, clearAccessToken as _, logout as a, getFormErrors as a$, isAuthenticateApp as a0, isAccessTokenExpired as a1, isExpiresAccessToken as a2, hasRefreshSession as a3, hasValidAccessToken as a4, didLastRefreshFail as a5, isSessionRefreshExhausted as a6, isRefreshInFlight as a7, resetSessionAuthState as a8, clearSessionRefreshExhaustedState as a9, type AuthErrorAction as aA, AuthErrorCode as aB, type AuthErrorCodeValue as aC, type AuthFunnelState as aD, type AuthInterceptorPolicyConfig as aE, type AuthPolicyRoutes as aF, type AuthRouteAction as aG, type HttpClientConfig as aH, type HttpErrorKind as aI, type LogLevel as aJ, type LoginHistoryRow as aK, type LoginResponseData as aL, type MfaBootRecoveryResult as aM, type MfaEnrollmentStatus as aN, type MfaMethod as aO, type MfaMethodOption as aP, type MfaPortalScopeContext as aQ, type PaginationResponse as aR, SERVICE_UNAVAILABLE_MESSAGE as aS, type SecurityOverview as aT, type StorageKeyConfig as aU, type StoredAuthError as aV, type UnauthorizedPageCopy as aW, type WoodsportalRequestConfig as aX, classifyHttpError as aY, configureStorageKeys as aZ, getFieldErrors as a_, hydrateSessionRefreshState as aa, type SessionContractInput as ab, type LoggerConfig as ac, type TwoFaVerificationRequest as ad, type MfaOtpSendRequest as ae, type MfaPendingPasskeyOptionsRequest as af, type MfaPendingPasskeyVerifyRequest as ag, type MfaStatusQuery as ah, type MfaPreferenceRequest as ai, type PhoneVerifyStartRequest as aj, type PhoneVerifyConfirmRequest as ak, type TotpEnrollVerifyRequest as al, type TotpDisableRequest as am, type PhoneUnverifyRequest as an, type BackupCodesRegenerateRequest as ao, type MfaBackupCodesResponse as ap, type MfaOptOutRequest as aq, type WebAuthnVerifyRequest as ar, type PasskeyLoginOptionsRequest as as, type PasskeyLoginVerifyRequest as at, type SecurityOverviewQuery as au, type SecurityLoginActivityQuery as av, type SecuritySessionsQuery as aw, type RevokeSecuritySessionPayload as ax, type ActiveSession as ay, type ApiErrorPayload as az, registerExistingUser as b, getHttpErrorMessage as b0, getStorageKeys as b1, getUnauthorizedPageCopy as b2, hasAuthenticatedAccess as b3, hasValidAccess as b4, initializeHttpClient as b5, isFullyAuthenticated as b6, isMfaPendingSession as b7, isOptionalAuthFailureUrl as b8, isServiceUnavailableError as b9, isSessionProbeUrl as ba, parseApiErrorPayload as bb, persistAuthError as bc, readPersistedAuthError as bd, recoverMfaGateOnBoot as be, resetStorageKeysForTests as bf, resolveAuthErrorAction as bg, resolveAuthRouteAction as bh, setSessionLifecycleListener as bi, startVisibilityRefreshScheduler as bj, stopVisibilityRefreshScheduler as bk, type EditorPreviewMockHandler as bl, type EditorPreviewMockResult as bm, type LoginBootstrapMfaPolicy as bn, type LoginBootstrapPortal as bo, type LoginBootstrapResponse as bp, type LoginBootstrapSsoProvider as bq, setEditorPreviewMockHandler as br, clientSession as c, resetPassword as d, resetPasswordVerifyToken as e, forgetPassword as f, verifyEmailResend as g, handoff as h, resendEmail as i, changePassword as j, profile as k, login as l, me as m, profileUpdate as n, verifyOtp as o, preLogin as p, pendingPasskeyOptions as q, register as r, sendMfaOtp as s, pendingPasskeyVerify as t, getMfaStatus as u, verifyEmail as v, setMfaPreferences as w, startPhoneVerify as x, confirmPhoneVerify as y, totpEnrollStart as z };
+export { clearAccessToken as $, totpEnrollVerify as A, totpDisable as B, phoneUnverify as C, backupCodesRegenerate as D, mfaOptOut as E, webauthnRegisterOptions as F, webauthnRegisterVerify as G, webauthnAuthOptions as H, webauthnAuthVerify as I, listWebauthnCredentials as J, deleteWebauthnCredential as K, passkeyLoginOptions as L, passkeyLoginVerify as M, getSecurityOverview as N, getSecurityLoginActivity as O, getSecuritySessions as P, revokeSecuritySession as Q, revokeOtherSecuritySessions as R, getLoginBootstrap as S, getSsoDetails as T, generateSsoUrl as U, ssoCallback as V, getRefreshToken as W, refreshSession as X, getAuthRefreshToken as Y, getAccessToken as Z, setAccessToken as _, logout as a, type WoodsportalRequestConfig as a$, isAuthenticated as a0, isAuthenticateApp as a1, isAccessTokenExpired as a2, isExpiresAccessToken as a3, hasRefreshSession as a4, hasValidAccessToken as a5, didLastRefreshFail as a6, isSessionRefreshExhausted as a7, isRefreshInFlight as a8, resetSessionAuthState as a9, type ApiErrorPayload as aA, type AuthErrorAction as aB, AuthErrorCode as aC, type AuthErrorCodeValue as aD, type AuthFunnelState as aE, type AuthInterceptorPolicyConfig as aF, type AuthPolicyRoutes as aG, type AuthRouteAction as aH, type HttpClientConfig as aI, type HttpErrorKind as aJ, type HydrateMfaPendingAccessTokenInput as aK, type LogLevel as aL, type LoginHistoryRow as aM, type LoginResponseData as aN, type MfaBootRecoveryResult as aO, type MfaEnrollmentStatus as aP, type MfaMethod as aQ, type MfaMethodOption as aR, type MfaPendingAccessToken as aS, type MfaPortalScopeContext as aT, type MfaStorageLane as aU, type PaginationResponse as aV, SERVICE_UNAVAILABLE_MESSAGE as aW, type SecurityOverview as aX, type StorageKeyConfig as aY, type StoredAuthError as aZ, type UnauthorizedPageCopy as a_, clearSessionRefreshExhaustedState as aa, hydrateSessionRefreshState as ab, type SessionContractInput as ac, type LoggerConfig as ad, type TwoFaVerificationRequest as ae, type MfaOtpSendRequest as af, type MfaPendingPasskeyOptionsRequest as ag, type MfaPendingPasskeyVerifyRequest as ah, type MfaStatusQuery as ai, type MfaPreferenceRequest as aj, type PhoneVerifyStartRequest as ak, type PhoneVerifyConfirmRequest as al, type TotpEnrollVerifyRequest as am, type TotpDisableRequest as an, type PhoneUnverifyRequest as ao, type BackupCodesRegenerateRequest as ap, type MfaBackupCodesResponse as aq, type MfaOptOutRequest as ar, type WebAuthnVerifyRequest as as, type PasskeyLoginOptionsRequest as at, type PasskeyLoginVerifyRequest as au, type SecurityOverviewQuery as av, type SecurityLoginActivityQuery as aw, type SecuritySessionsQuery as ax, type RevokeSecuritySessionPayload as ay, type ActiveSession as az, registerExistingUser as b, classifyHttpError as b0, clearMfaPendingAccessToken as b1, configureStorageKeys as b2, getFieldErrors as b3, getFormErrors as b4, getHttpErrorMessage as b5, getStorageKeys as b6, getUnauthorizedPageCopy as b7, hasAuthenticatedAccess as b8, hasValidAccess as b9, hydrateMfaPendingAccessToken as ba, initializeHttpClient as bb, isFullyAuthenticated as bc, isMfaPendingSession as bd, isOptionalAuthFailureUrl as be, isServiceUnavailableError as bf, isSessionProbeUrl as bg, parseApiErrorPayload as bh, persistAuthError as bi, readMfaPendingAccessToken as bj, readPersistedAuthError as bk, recoverMfaGateOnBoot as bl, resetStorageKeysForTests as bm, resolveAuthErrorAction as bn, resolveAuthRouteAction as bo, setSessionLifecycleListener as bp, startVisibilityRefreshScheduler as bq, stopVisibilityRefreshScheduler as br, storeMfaPendingAccessToken as bs, type EditorPreviewMockHandler as bt, type EditorPreviewMockResult as bu, type LoginBootstrapMfaPolicy as bv, type LoginBootstrapPortal as bw, type LoginBootstrapResponse as bx, type LoginBootstrapSsoProvider as by, setEditorPreviewMockHandler as bz, clientSession as c, resetPassword as d, resetPasswordVerifyToken as e, forgetPassword as f, verifyEmailResend as g, handoff as h, resendEmail as i, changePassword as j, profile as k, login as l, me as m, profileUpdate as n, verifyOtp as o, preLogin as p, pendingPasskeyOptions as q, register as r, sendMfaOtp as s, pendingPasskeyVerify as t, getMfaStatus as u, verifyEmail as v, setMfaPreferences as w, startPhoneVerify as x, confirmPhoneVerify as y, totpEnrollStart as z };

package/dist/index.d.ts

@@ -1,8 +1,8 @@
 import { T as TableUiState, a as TableState, U as UserState, N as NoteState, E as EmailState, S as SyncState } from './use-sync-DpazhM4d.js';
 import { l as list, a as list$1, b as list$2, s as sideBarList, f as form, o as objectFormOptions, d as details, u as update, c as create, e as createExisting, r as removeExisting, g as list$3, h as create$1, i as update$1, j as list$4, k as create$2, m as update$2, n as list$5, p as details$1, q as download, t as addFolder, v as addFile, w as imageUpload, x as attachmentUpload, y as purge, z as purgeStatus, C as CachePurgeTarget, A as CachePurgeRequest, B as CachePurgeListQuery, D as CachePurgeView, E as CreateCachePurgeJobOptions, P as PurgeResult, F as CrmCachePurgeOptions } from './pipeline-ui-DbEzI_v1.js';
 export { G as CachePurgeDomain, H as CachePurgeMode, I as HUBSPOT_DEALS_OBJECT_TYPE_ID, J as HUBSPOT_TICKETS_OBJECT_TYPE_ID, K as PIPELINE_BOARD_OBJECT_TYPE_IDS, L as PIPELINE_REQUIRED_MANAGED_OBJECT_TYPE_IDS, M as isPipelineBoardObjectType, N as isPipelineBoardObjectTypeId, O as shouldShowPipelineSelector, Q as supportsBoardView } from './pipeline-ui-DbEzI_v1.js';
-import { p as preLogin, l as login, c as clientSession, h as handoff, a as logout, r as register, v as verifyEmail, b as registerExistingUser, f as forgetPassword, d as resetPassword, e as resetPasswordVerifyToken, g as verifyEmailResend, i as resendEmail, j as changePassword, m as me, k as profile, n as profileUpdate, o as verifyOtp, s as sendMfaOtp, q as pendingPasskeyOptions, t as pendingPasskeyVerify, u as getMfaStatus, w as setMfaPreferences, x as startPhoneVerify, y as confirmPhoneVerify, z as totpEnrollStart, A as totpEnrollVerify, B as totpDisable, C as phoneUnverify, D as backupCodesRegenerate, E as mfaOptOut, F as webauthnRegisterOptions, G as webauthnRegisterVerify, H as webauthnAuthOptions, I as webauthnAuthVerify, J as listWebauthnCredentials, K as deleteWebauthnCredential, L as passkeyLoginOptions, M as passkeyLoginVerify, N as getSecurityOverview, O as getSecurityLoginActivity, P as getSecuritySessions, Q as revokeSecuritySession, R as revokeOtherSecuritySessions, S as getLoginBootstrap, T as getSsoDetails, U as generateSsoUrl, V as ssoCallback, W as getRefreshToken, X as refreshSession, Y as getAuthRefreshToken, Z as getAccessToken, _ as clearAccessToken, $ as isAuthenticated, a0 as isAuthenticateApp, a1 as isAccessTokenExpired, a2 as isExpiresAccessToken, a3 as hasRefreshSession, a4 as hasValidAccessToken, a5 as didLastRefreshFail, a6 as isSessionRefreshExhausted, a7 as isRefreshInFlight, a8 as resetSessionAuthState, a9 as clearSessionRefreshExhaustedState, aa as hydrateSessionRefreshState, ab as SessionContractInput, ac as LoggerConfig, ad as TwoFaVerificationRequest, ae as MfaOtpSendRequest, af as MfaPendingPasskeyOptionsRequest, ag as MfaPendingPasskeyVerifyRequest, ah as MfaStatusQuery, ai as MfaPreferenceRequest, aj as PhoneVerifyStartRequest, ak as PhoneVerifyConfirmRequest, al as TotpEnrollVerifyRequest, am as TotpDisableRequest, an as PhoneUnverifyRequest, ao as BackupCodesRegenerateRequest, ap as MfaBackupCodesResponse, aq as MfaOptOutRequest, ar as WebAuthnVerifyRequest, as as PasskeyLoginOptionsRequest, at as PasskeyLoginVerifyRequest, au as SecurityOverviewQuery, av as SecurityLoginActivityQuery, aw as SecuritySessionsQuery, ax as RevokeSecuritySessionPayload } from './http-errors-Bwhj6cfB.js';
-export { ay as ActiveSession, az as ApiErrorPayload, aA as AuthErrorAction, aB as AuthErrorCode, aC as AuthErrorCodeValue, aD as AuthFunnelState, aE as AuthInterceptorPolicyConfig, aF as AuthPolicyRoutes, aG as AuthRouteAction, aH as HttpClientConfig, aI as HttpErrorKind, aJ as LogLevel, aK as LoginHistoryRow, aL as LoginResponseData, aM as MfaBootRecoveryResult, aN as MfaEnrollmentStatus, aO as MfaMethod, aP as MfaMethodOption, aQ as MfaPortalScopeContext, aR as PaginationResponse, aS as SERVICE_UNAVAILABLE_MESSAGE, aT as SecurityOverview, aU as StorageKeyConfig, aV as StoredAuthError, aW as UnauthorizedPageCopy, aX as WoodsportalRequestConfig, aY as classifyHttpError, aZ as configureStorageKeys, a_ as getFieldErrors, a$ as getFormErrors, b0 as getHttpErrorMessage, b1 as getStorageKeys, b2 as getUnauthorizedPageCopy, b3 as hasAuthenticatedAccess, b4 as hasValidAccess, b5 as initializeHttpClient, b6 as isFullyAuthenticated, b7 as isMfaPendingSession, b8 as isOptionalAuthFailureUrl, b9 as isServiceUnavailableError, ba as isSessionProbeUrl, bb as parseApiErrorPayload, bc as persistAuthError, bd as readPersistedAuthError, be as recoverMfaGateOnBoot, bf as resetStorageKeysForTests, bg as resolveAuthErrorAction, bh as resolveAuthRouteAction, bi as setSessionLifecycleListener, bj as startVisibilityRefreshScheduler, bk as stopVisibilityRefreshScheduler } from './http-errors-Bwhj6cfB.js';
+import { p as preLogin, l as login, c as clientSession, h as handoff, a as logout, r as register, v as verifyEmail, b as registerExistingUser, f as forgetPassword, d as resetPassword, e as resetPasswordVerifyToken, g as verifyEmailResend, i as resendEmail, j as changePassword, m as me, k as profile, n as profileUpdate, o as verifyOtp, s as sendMfaOtp, q as pendingPasskeyOptions, t as pendingPasskeyVerify, u as getMfaStatus, w as setMfaPreferences, x as startPhoneVerify, y as confirmPhoneVerify, z as totpEnrollStart, A as totpEnrollVerify, B as totpDisable, C as phoneUnverify, D as backupCodesRegenerate, E as mfaOptOut, F as webauthnRegisterOptions, G as webauthnRegisterVerify, H as webauthnAuthOptions, I as webauthnAuthVerify, J as listWebauthnCredentials, K as deleteWebauthnCredential, L as passkeyLoginOptions, M as passkeyLoginVerify, N as getSecurityOverview, O as getSecurityLoginActivity, P as getSecuritySessions, Q as revokeSecuritySession, R as revokeOtherSecuritySessions, S as getLoginBootstrap, T as getSsoDetails, U as generateSsoUrl, V as ssoCallback, W as getRefreshToken, X as refreshSession, Y as getAuthRefreshToken, Z as getAccessToken, _ as setAccessToken, $ as clearAccessToken, a0 as isAuthenticated, a1 as isAuthenticateApp, a2 as isAccessTokenExpired, a3 as isExpiresAccessToken, a4 as hasRefreshSession, a5 as hasValidAccessToken, a6 as didLastRefreshFail, a7 as isSessionRefreshExhausted, a8 as isRefreshInFlight, a9 as resetSessionAuthState, aa as clearSessionRefreshExhaustedState, ab as hydrateSessionRefreshState, ac as SessionContractInput, ad as LoggerConfig, ae as TwoFaVerificationRequest, af as MfaOtpSendRequest, ag as MfaPendingPasskeyOptionsRequest, ah as MfaPendingPasskeyVerifyRequest, ai as MfaStatusQuery, aj as MfaPreferenceRequest, ak as PhoneVerifyStartRequest, al as PhoneVerifyConfirmRequest, am as TotpEnrollVerifyRequest, an as TotpDisableRequest, ao as PhoneUnverifyRequest, ap as BackupCodesRegenerateRequest, aq as MfaBackupCodesResponse, ar as MfaOptOutRequest, as as WebAuthnVerifyRequest, at as PasskeyLoginOptionsRequest, au as PasskeyLoginVerifyRequest, av as SecurityOverviewQuery, aw as SecurityLoginActivityQuery, ax as SecuritySessionsQuery, ay as RevokeSecuritySessionPayload } from './http-errors-OKY0E5C5.js';
+export { az as ActiveSession, aA as ApiErrorPayload, aB as AuthErrorAction, aC as AuthErrorCode, aD as AuthErrorCodeValue, aE as AuthFunnelState, aF as AuthInterceptorPolicyConfig, aG as AuthPolicyRoutes, aH as AuthRouteAction, aI as HttpClientConfig, aJ as HttpErrorKind, aK as HydrateMfaPendingAccessTokenInput, aL as LogLevel, aM as LoginHistoryRow, aN as LoginResponseData, aO as MfaBootRecoveryResult, aP as MfaEnrollmentStatus, aQ as MfaMethod, aR as MfaMethodOption, aS as MfaPendingAccessToken, aT as MfaPortalScopeContext, aU as MfaStorageLane, aV as PaginationResponse, aW as SERVICE_UNAVAILABLE_MESSAGE, aX as SecurityOverview, aY as StorageKeyConfig, aZ as StoredAuthError, a_ as UnauthorizedPageCopy, a$ as WoodsportalRequestConfig, b0 as classifyHttpError, b1 as clearMfaPendingAccessToken, b2 as configureStorageKeys, b3 as getFieldErrors, b4 as getFormErrors, b5 as getHttpErrorMessage, b6 as getStorageKeys, b7 as getUnauthorizedPageCopy, b8 as hasAuthenticatedAccess, b9 as hasValidAccess, ba as hydrateMfaPendingAccessToken, bb as initializeHttpClient, bc as isFullyAuthenticated, bd as isMfaPendingSession, be as isOptionalAuthFailureUrl, bf as isServiceUnavailableError, bg as isSessionProbeUrl, bh as parseApiErrorPayload, bi as persistAuthError, bj as readMfaPendingAccessToken, bk as readPersistedAuthError, bl as recoverMfaGateOnBoot, bm as resetStorageKeysForTests, bn as resolveAuthErrorAction, bo as resolveAuthRouteAction, bp as setSessionLifecycleListener, bq as startVisibilityRefreshScheduler, br as stopVisibilityRefreshScheduler, bs as storeMfaPendingAccessToken } from './http-errors-OKY0E5C5.js';
 import { P as PreLoginPayload, L as LoginPayload, V as VerifyEmailPayload, R as ResetPasswordVerifyTokenPayload, a as ResetPasswordPayload, F as ForgetPasswordPayload, C as ChangePasswordPayload } from './index-Bh9eY8sA.js';
 export { b as Config, M as MutationOptions } from './index-Bh9eY8sA.js';
 import 'axios';
@@ -33,6 +33,8 @@ declare const WP_STORAGE_KEYS: {
             readonly force: "wp.c.login.force";
             readonly passkey: "wp.c.login.passkey";
             readonly done: "wp.c.login.done";
+            readonly outcome: "wp.c.login.outcome";
+            readonly registerPayload: "wp.c.login.registerPayload";
         };
         readonly mfa: {
             readonly methods: "wp.c.mfa.methods";
@@ -45,6 +47,9 @@ declare const WP_STORAGE_KEYS: {
             readonly enrolled: "wp.c.mfa.enrolled";
             readonly emailOk: "wp.c.mfa.emailOk";
             readonly phoneOk: "wp.c.mfa.phoneOk";
+            readonly pendingToken: "wp.c.mfa.pendingToken";
+            readonly pendingTokenExp: "wp.c.mfa.pendingTokenExp";
+            readonly otpSend: "wp.c.mfa.otpSend";
         };
         readonly sso: {
             readonly cb: "wp.c.sso.cb";
@@ -90,6 +95,9 @@ declare const WP_STORAGE_KEYS: {
             readonly enrolled: "wp.a.mfa.enrolled";
             readonly emailOk: "wp.a.mfa.emailOk";
             readonly phoneOk: "wp.a.mfa.phoneOk";
+            readonly pendingToken: "wp.a.mfa.pendingToken";
+            readonly pendingTokenExp: "wp.a.mfa.pendingTokenExp";
+            readonly otpSend: "wp.a.mfa.otpSend";
         };
         readonly sso: {
             readonly cbPrefix: "wp.a.sso.cb.";
@@ -171,6 +179,7 @@ declare const api: {
             refreshSession: typeof refreshSession;
             refreshAccessToken: typeof getAuthRefreshToken;
             getAccessToken: typeof getAccessToken;
+            setAccessToken: typeof setAccessToken;
             clearAccessToken: typeof clearAccessToken;
             isAuthenticated: typeof isAuthenticated;
             isAuthenticateApp: typeof isAuthenticateApp;

package/dist/index.js

@@ -1,20 +1,20 @@
-export { applyCrossTabSessionRevocation, clearClientSdkSession, installCrossTabSessionListener, resetSessionStores, signalSessionChanged } from './chunk-O7MH4VSK.js';
-import { authApi } from './chunk-MRDVLALR.js';
-export { hasAuthenticatedAccess, hasValidAccess, isFullyAuthenticated, isMfaPendingSession, recoverMfaGateOnBoot, resolveAuthRouteAction } from './chunk-MRDVLALR.js';
-export { isOptionalAuthFailureUrl, isSessionProbeUrl, persistAuthError, readPersistedAuthError, resolveAuthErrorAction } from './chunk-GUYIJ4ZE.js';
-import { crmApi } from './chunk-D6QI2ISO.js';
-export { isPipelineBoardObjectType, shouldShowPipelineSelector, supportsBoardView } from './chunk-D6QI2ISO.js';
+export { applyCrossTabSessionRevocation, clearClientSdkSession, installCrossTabSessionListener, resetSessionStores, signalSessionChanged } from './chunk-CJZF3RTE.js';
+import { authApi } from './chunk-FZYOTYDA.js';
+export { clearMfaPendingAccessToken, hasAuthenticatedAccess, hasValidAccess, hydrateMfaPendingAccessToken, isFullyAuthenticated, isMfaPendingSession, readMfaPendingAccessToken, recoverMfaGateOnBoot, resolveAuthRouteAction, storeMfaPendingAccessToken } from './chunk-FZYOTYDA.js';
+export { isOptionalAuthFailureUrl, isSessionProbeUrl, persistAuthError, readPersistedAuthError, resolveAuthErrorAction } from './chunk-AHRT7SME.js';
+import { crmApi } from './chunk-6IGCVIVV.js';
+export { isPipelineBoardObjectType, shouldShowPipelineSelector, supportsBoardView } from './chunk-6IGCVIVV.js';
 import './chunk-55MIERLJ.js';
-import { navigationApi } from './chunk-4LGYRTTV.js';
-export { Client, SERVICE_UNAVAILABLE_MESSAGE, buildCachePurgeRequest, buildCrmListPurgeTarget, buildCrmSinglePurgeTarget, buildEngagementPurgeTarget, buildPortalConfigPurgeTarget, buildUserSessionPurgeTarget, classifyHttpError, createCachePurgeJob, extractEngagementItemIdFromWriteResponse, extractHubspotRecordIdFromWriteResponse, getFieldErrors, getFormErrors, getHttpErrorMessage, initializeHttpClient, isServiceUnavailableError, mergePurgeTargets, purgeCrmCombined, purgeCrmDetailAndListAfterCrmWrite, purgeCrmListCache, purgeCrmListCacheAfterCrmWrite, purgeCrmObjectDataCache, purgeCrmRecordCache, purgeEngagementCaches, purgeEngagementCachesAfterCrmWrite, resolveCrmListPurgeQuery, startVisibilityRefreshScheduler, stopVisibilityRefreshScheduler, toCachePurgeListQuery } from './chunk-4LGYRTTV.js';
-import './chunk-GNXTGOGZ.js';
-import { actions8, syncStore, actions5, emailStore, actions4, noteStore, actions6, userStore, actions2, tableStore, tableUiActions, tableUiStore } from './chunk-XSV63VCR.js';
-export { HUBSPOT_DEALS_OBJECT_TYPE_ID, HUBSPOT_TICKETS_OBJECT_TYPE_ID, PIPELINE_BOARD_OBJECT_TYPE_IDS, PIPELINE_REQUIRED_MANAGED_OBJECT_TYPE_IDS, isPipelineBoardObjectTypeId } from './chunk-XSV63VCR.js';
-import { storage } from './chunk-B2OVKOJU.js';
-export { configureLogger, config as hubContext, setConfig as setHubContext, setSessionLifecycleListener } from './chunk-B2OVKOJU.js';
+import { navigationApi } from './chunk-2EFT76XX.js';
+export { Client, SERVICE_UNAVAILABLE_MESSAGE, buildCachePurgeRequest, buildCrmListPurgeTarget, buildCrmSinglePurgeTarget, buildEngagementPurgeTarget, buildPortalConfigPurgeTarget, buildUserSessionPurgeTarget, classifyHttpError, createCachePurgeJob, extractEngagementItemIdFromWriteResponse, extractHubspotRecordIdFromWriteResponse, getFieldErrors, getFormErrors, getHttpErrorMessage, initializeHttpClient, isServiceUnavailableError, mergePurgeTargets, purgeCrmCombined, purgeCrmDetailAndListAfterCrmWrite, purgeCrmListCache, purgeCrmListCacheAfterCrmWrite, purgeCrmObjectDataCache, purgeCrmRecordCache, purgeEngagementCaches, purgeEngagementCachesAfterCrmWrite, resolveCrmListPurgeQuery, startVisibilityRefreshScheduler, stopVisibilityRefreshScheduler, toCachePurgeListQuery } from './chunk-2EFT76XX.js';
+import './chunk-AL3JKMCX.js';
+import { actions8, syncStore, actions5, emailStore, actions4, noteStore, actions6, userStore, actions2, tableStore, tableUiActions, tableUiStore } from './chunk-2SZ2WQGG.js';
+export { HUBSPOT_DEALS_OBJECT_TYPE_ID, HUBSPOT_TICKETS_OBJECT_TYPE_ID, PIPELINE_BOARD_OBJECT_TYPE_IDS, PIPELINE_REQUIRED_MANAGED_OBJECT_TYPE_IDS, isPipelineBoardObjectTypeId } from './chunk-2SZ2WQGG.js';
+import { storage } from './chunk-KYZRYIB3.js';
+export { configureLogger, config as hubContext, setConfig as setHubContext, setSessionLifecycleListener } from './chunk-KYZRYIB3.js';
 export { AuthErrorCode, getUnauthorizedPageCopy, parseApiErrorPayload } from './chunk-COHBSTHF.js';
-export { clearClientAuthCookies, clearClientIframeRefreshLocalKeys, clearClientSessionStorageKeys, clearStaleIframeRefreshForOtherHubs, configureStorageKeys, getClientAuthCookieNamesToClear, getStorageKeys, migrateLegacyStorageKeys, resetStorageKeysForTests } from './chunk-YNOZWRK3.js';
-export { WP_STORAGE_KEYS, WP_UI_THEME, wpClientIframeRefreshExpKey, wpClientIframeRefreshKey } from './chunk-BKT4MFQM.js';
+export { clearClientAuthCookies, clearClientIframeRefreshLocalKeys, clearClientSessionStorageKeys, clearStaleIframeRefreshForOtherHubs, configureStorageKeys, getClientAuthCookieNamesToClear, getStorageKeys, migrateLegacyStorageKeys, resetStorageKeysForTests } from './chunk-XANZNL46.js';
+export { WP_STORAGE_KEYS, WP_UI_THEME, wpClientIframeRefreshExpKey, wpClientIframeRefreshKey } from './chunk-7JHBCIR5.js';
 
 // src/main/api/compose-api.ts
 var api = {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/main/api/compose-api.ts","../src/main/core/utils/datetime.ts","../src/main/index.ts"],"names":["actions"],"mappings":";;;;;;;;;;;;;;;;;;;AAKO,IAAM,GAAA,GAAM;AAAA,EACf,IAAA,EAAM,OAAA;AAAA,EACN,GAAA,EAAK,MAAA;AAAA,EACL,UAAA,EAAY;AAChB;;;ACRO,IAAM,wBAAA,GAA2B;AAMjC,SAAS,kBAAA,GAA6B;AACzC,EAAA,IAAI;AACA,IAAA,OAAO,IAAA,CAAK,cAAA,EAAe,CAAE,eAAA,GAAkB,QAAA,IAAY,wBAAA;AAAA,EAC/D,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,wBAAA;AAAA,EACX;AACJ;AAKO,SAAS,qBAAqB,KAAA,EAA+B;AAChE,EAAA,IAAI,KAAA,IAAS,IAAA,IAAQ,KAAA,KAAU,EAAA,EAAI,OAAO,IAAA;AAE1C,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC3B,IAAA,OAAO,KAAA,GAAQ,OAAkB,KAAA,GAAQ,IAAA;AAAA,EAC7C;AAEA,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAA,EAAG;AAClD,IAAA,MAAM,CAAA,GAAI,OAAO,KAAK,CAAA;AACtB,IAAA,OAAO,CAAA,GAAI,OAAkB,CAAA,GAAI,IAAA;AAAA,EACrC;AAEA,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,YAAiB,IAAA,EAAM;AACpD,IAAA,MAAM,IAAA,GAAO,IAAI,IAAA,CAAK,KAAK,CAAA;AAC3B,IAAA,OAAO,MAAA,CAAO,MAAM,IAAA,CAAK,OAAA,EAAS,CAAA,GAAI,IAAA,GAAO,KAAK,OAAA,EAAQ;AAAA,EAC9D;AAEA,EAAA,OAAO,IAAA;AACX;AAKO,SAAS,gBAAgB,QAAA,GAAmB,kBAAA,IAAsB,IAAA,mBAAa,IAAI,MAAK,EAAW;AACtG,EAAA,MAAM,GAAA,GAAM,IAAI,IAAA,CAAK,cAAA,CAAe,OAAA,EAAS;AAAA,IACzC,QAAA;AAAA,IACA,YAAA,EAAc;AAAA,GACjB,CAAA,CACI,aAAA,CAAc,IAAI,CAAA,CAClB,IAAA,CAAK,CAAC,IAAA,KAAS,IAAA,CAAK,IAAA,KAAS,cAAc,CAAA,EAAG,KAAA;AAEnD,EAAA,IAAI,CAAC,KAAK,OAAO,EAAA;AAGjB,EAAA,OAAO,GAAA,CAAI,OAAA,CAAQ,qBAAA,EAAuB,SAAS,CAAA;AACvD;AAaO,SAAS,kCAAA,CAAmC,SAAA,EAAoB,QAAA,GAAmB,kBAAA,EAAmB,EAAwC;AACjJ,EAAA,MAAM,EAAA,GAAK,qBAAqB,SAAS,CAAA;AACzC,EAAA,IAAI,EAAA,IAAM,MAAM,OAAO,IAAA;AAEvB,EAAA,MAAM,IAAA,GAAO,IAAI,IAAA,CAAK,EAAE,CAAA;AACxB,EAAA,MAAM,QAAA,GAAW,IAAI,IAAA,CAAK,cAAA,CAAe,OAAA,EAAS;AAAA,IAC9C,QAAA;AAAA,IACA,KAAA,EAAO,MAAA;AAAA,IACP,GAAA,EAAK,SAAA;AAAA,IACL,IAAA,EAAM;AAAA,GACT,CAAA,CAAE,MAAA,CAAO,IAAI,CAAA;AACd,EAAA,MAAM,QAAA,GAAW,IAAI,IAAA,CAAK,cAAA,CAAe,OAAA,EAAS;AAAA,IAC9C,QAAA;AAAA,IACA,IAAA,EAAM,SAAA;AAAA,IACN,MAAA,EAAQ,SAAA;AAAA,IACR,MAAA,EAAQ;AAAA,GACX,CAAA,CAAE,MAAA,CAAO,IAAI,CAAA;AACd,EAAA,MAAM,SAAA,GAAY,eAAA,CAAgB,QAAA,EAAU,IAAI,CAAA;AAEhD,EAAA,OAAO;AAAA,IACH,IAAA,EAAM,QAAA;AAAA,IACN,IAAA,EAAM,QAAA;AAAA,IACN,SAAA;AAAA,IACA,SAAA,EAAW,GAAG,QAAQ,CAAA,IAAA,EAAO,QAAQ,CAAA,CAAA,EAAI,SAAS,GAAG,IAAA;AAAK,GAC9D;AACJ;AAKO,SAAS,6BAAA,CAA8B,SAAA,EAAoB,QAAA,GAAmB,kBAAA,EAAmB,EAAW;AAC/G,EAAA,OAAO,kCAAA,CAAmC,SAAA,EAAW,QAAQ,CAAA,EAAG,SAAA,IAAa,EAAA;AACjF;;;AC8DO,IAAM,KAAA,GAAQ;AAAA,EACjB,OAAA;AAAA,EACA,OAAA,EAAS,EAAE,KAAA,EAAO,YAAA,EAAc,SAAS,cAAA,EAAe;AAAA,EACxD,KAAA,EAAO,EAAE,KAAA,EAAO,UAAA,WAAYA,QAAA,EAAsB;AAAA,EAClD,IAAA,EAAM,EAAE,KAAA,EAAO,SAAA,EAAW,SAASA,QAAAA,EAAY;AAAA,EAC/C,IAAA,EAAM,EAAE,KAAA,EAAO,SAAA,EAAW,SAASA,QAAAA,EAAY;AAAA,EAC/C,KAAA,EAAO,EAAE,KAAA,EAAO,UAAA,EAAY,SAASA,QAAAA,EAAa;AAAA,EAClD,IAAA,EAAM,EAAE,KAAA,EAAO,SAAA,EAAW,SAASA,QAAAA;AACvC","file":"index.js","sourcesContent":["import { authApi } from './nested-auth-api'\nimport { crmApi } from './nested-crm-api'\nimport { navigationApi } from './navigation-api'\n\n/** Public API — nested domains only (SDK 4.0). */\nexport const api = {\n    auth: authApi,\n    crm: crmApi,\n    navigation: navigationApi\n}\n","/** HubSpot portal default; override when portal timezone is available from config. */\nexport const DEFAULT_HUBSPOT_TIMEZONE = 'Asia/Kolkata'\n\n/**\n * Detect the runtime/browser IANA timezone (e.g. `Asia/Kolkata`).\n * Falls back to the WoodsPortal default timezone when unavailable.\n */\nexport function getCurrentTimeZone(): string {\n    try {\n        return Intl.DateTimeFormat().resolvedOptions().timeZone || DEFAULT_HUBSPOT_TIMEZONE\n    } catch {\n        return DEFAULT_HUBSPOT_TIMEZONE\n    }\n}\n\n/**\n * Coerce HubSpot-style timestamps (ms string/number) to epoch milliseconds.\n */\nexport function normalizeToTimestamp(value: unknown): number | null {\n    if (value == null || value === '') return null\n\n    if (typeof value === 'number') {\n        return value > 100_000_000_000 ? value : null\n    }\n\n    if (typeof value === 'string' && /^\\d+$/.test(value)) {\n        const n = Number(value)\n        return n > 100_000_000_000 ? n : null\n    }\n\n    if (typeof value === 'string' || value instanceof Date) {\n        const date = new Date(value)\n        return Number.isNaN(date.getTime()) ? null : date.getTime()\n    }\n\n    return null\n}\n\n/**\n * GMT offset label aligned with HubSpot activity timeline (e.g. `GMT+5:30`).\n */\nexport function formatGmtOffset(timeZone: string = getCurrentTimeZone(), date: Date = new Date()): string {\n    const raw = new Intl.DateTimeFormat('en-US', {\n        timeZone,\n        timeZoneName: 'longOffset'\n    })\n        .formatToParts(date)\n        .find((part) => part.type === 'timeZoneName')?.value\n\n    if (!raw) return ''\n\n    // Intl may emit GMT+05:30; HubSpot uses GMT+5:30.\n    return raw.replace(/GMT([+-])0(\\d)(?=:)/, 'GMT$1$2')\n}\n\nexport type HubSpotActivityDateTimeParts = {\n    date: string\n    time: string\n    gmtOffset: string\n    /** Full HubSpot-style label, e.g. `May 27, 2026 at 11:31 PM GMT+5:30`. */\n    formatted: string\n}\n\n/**\n * Format a HubSpot epoch-ms timestamp like the CRM activity timeline.\n */\nexport function formatHubSpotActivityDateTimeParts(timestamp: unknown, timeZone: string = getCurrentTimeZone()): HubSpotActivityDateTimeParts | null {\n    const ms = normalizeToTimestamp(timestamp)\n    if (ms == null) return null\n\n    const date = new Date(ms)\n    const datePart = new Intl.DateTimeFormat('en-US', {\n        timeZone,\n        month: 'long',\n        day: 'numeric',\n        year: 'numeric'\n    }).format(date)\n    const timePart = new Intl.DateTimeFormat('en-US', {\n        timeZone,\n        hour: 'numeric',\n        minute: '2-digit',\n        hour12: true\n    }).format(date)\n    const gmtOffset = formatGmtOffset(timeZone, date)\n\n    return {\n        date: datePart,\n        time: timePart,\n        gmtOffset,\n        formatted: `${datePart} at ${timePart} ${gmtOffset}`.trim()\n    }\n}\n\n/**\n * @returns HubSpot activity string, e.g. `May 27, 2026 at 11:31 PM GMT+5:30`, or empty string.\n */\nexport function formatHubSpotActivityDateTime(timestamp: unknown, timeZone: string = getCurrentTimeZone()): string {\n    return formatHubSpotActivityDateTimeParts(timestamp, timeZone)?.formatted ?? ''\n}\n","/**\n * WoodsPortal client SDK — public entry module.\n *\n * Configure HTTP once with {@link initializeHttpClient} in production, then use\n * {@link api}, {@link store}, and {@link api.navigation}.\n */\nimport { api } from './api/compose-api'\nimport {\n    tableStore,\n    tableActions,\n    tableUiStore,\n    tableUiActions,\n    userStore,\n    userActions,\n    noteStore,\n    noteActions,\n    emailStore,\n    emailActions,\n    syncStore,\n    syncActions\n} from './state'\nimport { storage } from './core/utils/localStorage'\n\nexport {\n    DEFAULT_HUBSPOT_TIMEZONE,\n    getCurrentTimeZone,\n    formatGmtOffset,\n    formatHubSpotActivityDateTime,\n    formatHubSpotActivityDateTimeParts,\n    normalizeToTimestamp\n} from './core/utils/datetime'\nexport type { HubSpotActivityDateTimeParts } from './core/utils/datetime'\nexport {\n    purgeCrmObjectDataCache,\n    purgeCrmListCache,\n    purgeCrmListCacheAfterCrmWrite,\n    purgeCrmDetailAndListAfterCrmWrite,\n    purgeCrmRecordCache,\n    purgeEngagementCaches,\n    purgeEngagementCachesAfterCrmWrite,\n    purgeCrmCombined,\n    buildCachePurgeRequest,\n    buildCrmListPurgeTarget,\n    buildCrmSinglePurgeTarget,\n    buildEngagementPurgeTarget,\n    buildPortalConfigPurgeTarget,\n    buildUserSessionPurgeTarget,\n    mergePurgeTargets,\n    createCachePurgeJob,\n    extractHubspotRecordIdFromWriteResponse,\n    extractEngagementItemIdFromWriteResponse,\n    resolveCrmListPurgeQuery,\n    toCachePurgeListQuery\n} from './core/utils/cache'\nexport type { CrmCachePurgeOptions } from './core/types/cache-purge'\nexport type {\n    CachePurgeRequest,\n    CachePurgeTarget,\n    CachePurgeListQuery,\n    CachePurgeView,\n    CachePurgeDomain,\n    CachePurgeMode,\n    PurgeResult,\n    CreateCachePurgeJobOptions\n} from './core/types/cache-purge'\n\n/** Axios setup, error helpers, and {@link HttpClientConfig}. */\nexport { initializeHttpClient, getFormErrors, getFieldErrors } from './core/http/http-client'\nexport type { HttpClientConfig, StorageKeyConfig } from './core/http/http-client'\n\n/** Shared auth contract (client + admin consistency). */\nexport {\n    AuthErrorCode,\n    parseApiErrorPayload,\n    getUnauthorizedPageCopy,\n    resolveAuthErrorAction,\n    isOptionalAuthFailureUrl,\n    isSessionProbeUrl,\n    persistAuthError,\n    readPersistedAuthError,\n    hasValidAccess,\n    isFullyAuthenticated,\n    isMfaPendingSession,\n    hasAuthenticatedAccess,\n    recoverMfaGateOnBoot,\n    startVisibilityRefreshScheduler,\n    stopVisibilityRefreshScheduler,\n    resolveAuthRouteAction\n} from './core/auth/index.js'\nexport type {\n    ApiErrorPayload,\n    StoredAuthError,\n    AuthErrorCodeValue,\n    UnauthorizedPageCopy,\n    AuthErrorAction,\n    AuthPolicyRoutes,\n    AuthInterceptorPolicyConfig,\n    WoodsportalRequestConfig,\n    SessionContractInput,\n    MfaBootRecoveryResult,\n    AuthRouteAction,\n    AuthFunnelState\n} from './core/auth/index.js'\nexport { classifyHttpError, getHttpErrorMessage, isServiceUnavailableError, SERVICE_UNAVAILABLE_MESSAGE } from './core/http/http-errors'\nexport type { HttpErrorKind } from './core/http/http-errors'\n\nexport { configureLogger } from './core/logging/logger'\nexport type { LogLevel, LoggerConfig } from './core/logging/logger-types'\n\nexport { Client } from './core/http/client-assembler'\nexport { config as hubContext, setConfig as setHubContext } from './core/utils/hub-context'\n\nexport { WP_STORAGE_KEYS, WP_UI_THEME, wpClientIframeRefreshKey, wpClientIframeRefreshExpKey } from './core/utils/wp-storage-keys'\nexport {\n    migrateLegacyStorageKeys,\n    getClientAuthCookieNamesToClear,\n    clearClientSessionStorageKeys,\n    clearClientIframeRefreshLocalKeys,\n    clearStaleIframeRefreshForOtherHubs\n} from './core/utils/storage-migration'\nexport { clearClientAuthCookies } from './core/utils/cookie'\nexport { clearClientSdkSession, resetSessionStores } from './core/http/session-teardown'\nexport { setSessionLifecycleListener } from './core/http/token-store'\nexport { signalSessionChanged, installCrossTabSessionListener, applyCrossTabSessionRevocation } from './core/http/cross-tab-session'\nexport { configureStorageKeys, getStorageKeys, resetStorageKeysForTests } from './core/utils/storage-keys'\n\nexport {\n    HUBSPOT_DEALS_OBJECT_TYPE_ID,\n    HUBSPOT_TICKETS_OBJECT_TYPE_ID,\n    PIPELINE_REQUIRED_MANAGED_OBJECT_TYPE_IDS,\n    PIPELINE_BOARD_OBJECT_TYPE_IDS,\n    isPipelineBoardObjectTypeId\n} from './core/constants/hubspot-object-type-ids'\nexport { isPipelineBoardObjectType, supportsBoardView, shouldShowPipelineSelector } from './core/constants/pipeline-ui'\n\nexport type {\n    Config,\n    MutationOptions,\n    PreLoginPayload,\n    LoginPayload,\n    VerifyEmailPayload,\n    ResetPasswordVerifyTokenPayload,\n    ResetPasswordPayload,\n    ForgetPasswordPayload,\n    ChangePasswordPayload,\n    MfaMethod,\n    MfaMethodOption,\n    MfaPortalScopeContext,\n    LoginResponseData,\n    TwoFaVerificationRequest,\n    MfaEnrollmentStatus,\n    SecurityOverview,\n    LoginHistoryRow,\n    ActiveSession,\n    PaginationResponse\n} from './core/types'\n\nexport { api }\n\n/** Storage helpers and CRM stores. */\nexport const store = {\n    storage,\n    tableUi: { store: tableUiStore, actions: tableUiActions },\n    table: { store: tableStore, actions: tableActions },\n    user: { store: userStore, actions: userActions },\n    note: { store: noteStore, actions: noteActions },\n    email: { store: emailStore, actions: emailActions },\n    sync: { store: syncStore, actions: syncActions }\n}\n"]}
+{"version":3,"sources":["../src/main/api/compose-api.ts","../src/main/core/utils/datetime.ts","../src/main/index.ts"],"names":["actions"],"mappings":";;;;;;;;;;;;;;;;;;;AAKO,IAAM,GAAA,GAAM;AAAA,EACf,IAAA,EAAM,OAAA;AAAA,EACN,GAAA,EAAK,MAAA;AAAA,EACL,UAAA,EAAY;AAChB;;;ACRO,IAAM,wBAAA,GAA2B;AAMjC,SAAS,kBAAA,GAA6B;AACzC,EAAA,IAAI;AACA,IAAA,OAAO,IAAA,CAAK,cAAA,EAAe,CAAE,eAAA,GAAkB,QAAA,IAAY,wBAAA;AAAA,EAC/D,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,wBAAA;AAAA,EACX;AACJ;AAKO,SAAS,qBAAqB,KAAA,EAA+B;AAChE,EAAA,IAAI,KAAA,IAAS,IAAA,IAAQ,KAAA,KAAU,EAAA,EAAI,OAAO,IAAA;AAE1C,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC3B,IAAA,OAAO,KAAA,GAAQ,OAAkB,KAAA,GAAQ,IAAA;AAAA,EAC7C;AAEA,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAA,EAAG;AAClD,IAAA,MAAM,CAAA,GAAI,OAAO,KAAK,CAAA;AACtB,IAAA,OAAO,CAAA,GAAI,OAAkB,CAAA,GAAI,IAAA;AAAA,EACrC;AAEA,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,YAAiB,IAAA,EAAM;AACpD,IAAA,MAAM,IAAA,GAAO,IAAI,IAAA,CAAK,KAAK,CAAA;AAC3B,IAAA,OAAO,MAAA,CAAO,MAAM,IAAA,CAAK,OAAA,EAAS,CAAA,GAAI,IAAA,GAAO,KAAK,OAAA,EAAQ;AAAA,EAC9D;AAEA,EAAA,OAAO,IAAA;AACX;AAKO,SAAS,gBAAgB,QAAA,GAAmB,kBAAA,IAAsB,IAAA,mBAAa,IAAI,MAAK,EAAW;AACtG,EAAA,MAAM,GAAA,GAAM,IAAI,IAAA,CAAK,cAAA,CAAe,OAAA,EAAS;AAAA,IACzC,QAAA;AAAA,IACA,YAAA,EAAc;AAAA,GACjB,CAAA,CACI,aAAA,CAAc,IAAI,CAAA,CAClB,IAAA,CAAK,CAAC,IAAA,KAAS,IAAA,CAAK,IAAA,KAAS,cAAc,CAAA,EAAG,KAAA;AAEnD,EAAA,IAAI,CAAC,KAAK,OAAO,EAAA;AAGjB,EAAA,OAAO,GAAA,CAAI,OAAA,CAAQ,qBAAA,EAAuB,SAAS,CAAA;AACvD;AAaO,SAAS,kCAAA,CAAmC,SAAA,EAAoB,QAAA,GAAmB,kBAAA,EAAmB,EAAwC;AACjJ,EAAA,MAAM,EAAA,GAAK,qBAAqB,SAAS,CAAA;AACzC,EAAA,IAAI,EAAA,IAAM,MAAM,OAAO,IAAA;AAEvB,EAAA,MAAM,IAAA,GAAO,IAAI,IAAA,CAAK,EAAE,CAAA;AACxB,EAAA,MAAM,QAAA,GAAW,IAAI,IAAA,CAAK,cAAA,CAAe,OAAA,EAAS;AAAA,IAC9C,QAAA;AAAA,IACA,KAAA,EAAO,MAAA;AAAA,IACP,GAAA,EAAK,SAAA;AAAA,IACL,IAAA,EAAM;AAAA,GACT,CAAA,CAAE,MAAA,CAAO,IAAI,CAAA;AACd,EAAA,MAAM,QAAA,GAAW,IAAI,IAAA,CAAK,cAAA,CAAe,OAAA,EAAS;AAAA,IAC9C,QAAA;AAAA,IACA,IAAA,EAAM,SAAA;AAAA,IACN,MAAA,EAAQ,SAAA;AAAA,IACR,MAAA,EAAQ;AAAA,GACX,CAAA,CAAE,MAAA,CAAO,IAAI,CAAA;AACd,EAAA,MAAM,SAAA,GAAY,eAAA,CAAgB,QAAA,EAAU,IAAI,CAAA;AAEhD,EAAA,OAAO;AAAA,IACH,IAAA,EAAM,QAAA;AAAA,IACN,IAAA,EAAM,QAAA;AAAA,IACN,SAAA;AAAA,IACA,SAAA,EAAW,GAAG,QAAQ,CAAA,IAAA,EAAO,QAAQ,CAAA,CAAA,EAAI,SAAS,GAAG,IAAA;AAAK,GAC9D;AACJ;AAKO,SAAS,6BAAA,CAA8B,SAAA,EAAoB,QAAA,GAAmB,kBAAA,EAAmB,EAAW;AAC/G,EAAA,OAAO,kCAAA,CAAmC,SAAA,EAAW,QAAQ,CAAA,EAAG,SAAA,IAAa,EAAA;AACjF;;;ACqEO,IAAM,KAAA,GAAQ;AAAA,EACjB,OAAA;AAAA,EACA,OAAA,EAAS,EAAE,KAAA,EAAO,YAAA,EAAc,SAAS,cAAA,EAAe;AAAA,EACxD,KAAA,EAAO,EAAE,KAAA,EAAO,UAAA,WAAYA,QAAA,EAAsB;AAAA,EAClD,IAAA,EAAM,EAAE,KAAA,EAAO,SAAA,EAAW,SAASA,QAAAA,EAAY;AAAA,EAC/C,IAAA,EAAM,EAAE,KAAA,EAAO,SAAA,EAAW,SAASA,QAAAA,EAAY;AAAA,EAC/C,KAAA,EAAO,EAAE,KAAA,EAAO,UAAA,EAAY,SAASA,QAAAA,EAAa;AAAA,EAClD,IAAA,EAAM,EAAE,KAAA,EAAO,SAAA,EAAW,SAASA,QAAAA;AACvC","file":"index.js","sourcesContent":["import { authApi } from './nested-auth-api'\nimport { crmApi } from './nested-crm-api'\nimport { navigationApi } from './navigation-api'\n\n/** Public API — nested domains only (SDK 4.0). */\nexport const api = {\n    auth: authApi,\n    crm: crmApi,\n    navigation: navigationApi\n}\n","/** HubSpot portal default; override when portal timezone is available from config. */\nexport const DEFAULT_HUBSPOT_TIMEZONE = 'Asia/Kolkata'\n\n/**\n * Detect the runtime/browser IANA timezone (e.g. `Asia/Kolkata`).\n * Falls back to the WoodsPortal default timezone when unavailable.\n */\nexport function getCurrentTimeZone(): string {\n    try {\n        return Intl.DateTimeFormat().resolvedOptions().timeZone || DEFAULT_HUBSPOT_TIMEZONE\n    } catch {\n        return DEFAULT_HUBSPOT_TIMEZONE\n    }\n}\n\n/**\n * Coerce HubSpot-style timestamps (ms string/number) to epoch milliseconds.\n */\nexport function normalizeToTimestamp(value: unknown): number | null {\n    if (value == null || value === '') return null\n\n    if (typeof value === 'number') {\n        return value > 100_000_000_000 ? value : null\n    }\n\n    if (typeof value === 'string' && /^\\d+$/.test(value)) {\n        const n = Number(value)\n        return n > 100_000_000_000 ? n : null\n    }\n\n    if (typeof value === 'string' || value instanceof Date) {\n        const date = new Date(value)\n        return Number.isNaN(date.getTime()) ? null : date.getTime()\n    }\n\n    return null\n}\n\n/**\n * GMT offset label aligned with HubSpot activity timeline (e.g. `GMT+5:30`).\n */\nexport function formatGmtOffset(timeZone: string = getCurrentTimeZone(), date: Date = new Date()): string {\n    const raw = new Intl.DateTimeFormat('en-US', {\n        timeZone,\n        timeZoneName: 'longOffset'\n    })\n        .formatToParts(date)\n        .find((part) => part.type === 'timeZoneName')?.value\n\n    if (!raw) return ''\n\n    // Intl may emit GMT+05:30; HubSpot uses GMT+5:30.\n    return raw.replace(/GMT([+-])0(\\d)(?=:)/, 'GMT$1$2')\n}\n\nexport type HubSpotActivityDateTimeParts = {\n    date: string\n    time: string\n    gmtOffset: string\n    /** Full HubSpot-style label, e.g. `May 27, 2026 at 11:31 PM GMT+5:30`. */\n    formatted: string\n}\n\n/**\n * Format a HubSpot epoch-ms timestamp like the CRM activity timeline.\n */\nexport function formatHubSpotActivityDateTimeParts(timestamp: unknown, timeZone: string = getCurrentTimeZone()): HubSpotActivityDateTimeParts | null {\n    const ms = normalizeToTimestamp(timestamp)\n    if (ms == null) return null\n\n    const date = new Date(ms)\n    const datePart = new Intl.DateTimeFormat('en-US', {\n        timeZone,\n        month: 'long',\n        day: 'numeric',\n        year: 'numeric'\n    }).format(date)\n    const timePart = new Intl.DateTimeFormat('en-US', {\n        timeZone,\n        hour: 'numeric',\n        minute: '2-digit',\n        hour12: true\n    }).format(date)\n    const gmtOffset = formatGmtOffset(timeZone, date)\n\n    return {\n        date: datePart,\n        time: timePart,\n        gmtOffset,\n        formatted: `${datePart} at ${timePart} ${gmtOffset}`.trim()\n    }\n}\n\n/**\n * @returns HubSpot activity string, e.g. `May 27, 2026 at 11:31 PM GMT+5:30`, or empty string.\n */\nexport function formatHubSpotActivityDateTime(timestamp: unknown, timeZone: string = getCurrentTimeZone()): string {\n    return formatHubSpotActivityDateTimeParts(timestamp, timeZone)?.formatted ?? ''\n}\n","/**\n * WoodsPortal client SDK — public entry module.\n *\n * Configure HTTP once with {@link initializeHttpClient} in production, then use\n * {@link api}, {@link store}, and {@link api.navigation}.\n */\nimport { api } from './api/compose-api'\nimport {\n    tableStore,\n    tableActions,\n    tableUiStore,\n    tableUiActions,\n    userStore,\n    userActions,\n    noteStore,\n    noteActions,\n    emailStore,\n    emailActions,\n    syncStore,\n    syncActions\n} from './state'\nimport { storage } from './core/utils/localStorage'\n\nexport {\n    DEFAULT_HUBSPOT_TIMEZONE,\n    getCurrentTimeZone,\n    formatGmtOffset,\n    formatHubSpotActivityDateTime,\n    formatHubSpotActivityDateTimeParts,\n    normalizeToTimestamp\n} from './core/utils/datetime'\nexport type { HubSpotActivityDateTimeParts } from './core/utils/datetime'\nexport {\n    purgeCrmObjectDataCache,\n    purgeCrmListCache,\n    purgeCrmListCacheAfterCrmWrite,\n    purgeCrmDetailAndListAfterCrmWrite,\n    purgeCrmRecordCache,\n    purgeEngagementCaches,\n    purgeEngagementCachesAfterCrmWrite,\n    purgeCrmCombined,\n    buildCachePurgeRequest,\n    buildCrmListPurgeTarget,\n    buildCrmSinglePurgeTarget,\n    buildEngagementPurgeTarget,\n    buildPortalConfigPurgeTarget,\n    buildUserSessionPurgeTarget,\n    mergePurgeTargets,\n    createCachePurgeJob,\n    extractHubspotRecordIdFromWriteResponse,\n    extractEngagementItemIdFromWriteResponse,\n    resolveCrmListPurgeQuery,\n    toCachePurgeListQuery\n} from './core/utils/cache'\nexport type { CrmCachePurgeOptions } from './core/types/cache-purge'\nexport type {\n    CachePurgeRequest,\n    CachePurgeTarget,\n    CachePurgeListQuery,\n    CachePurgeView,\n    CachePurgeDomain,\n    CachePurgeMode,\n    PurgeResult,\n    CreateCachePurgeJobOptions\n} from './core/types/cache-purge'\n\n/** Axios setup, error helpers, and {@link HttpClientConfig}. */\nexport { initializeHttpClient, getFormErrors, getFieldErrors } from './core/http/http-client'\nexport type { HttpClientConfig, StorageKeyConfig } from './core/http/http-client'\n\n/** Shared auth contract (client + admin consistency). */\nexport {\n    AuthErrorCode,\n    parseApiErrorPayload,\n    getUnauthorizedPageCopy,\n    resolveAuthErrorAction,\n    isOptionalAuthFailureUrl,\n    isSessionProbeUrl,\n    persistAuthError,\n    readPersistedAuthError,\n    hasValidAccess,\n    isFullyAuthenticated,\n    isMfaPendingSession,\n    hasAuthenticatedAccess,\n    recoverMfaGateOnBoot,\n    startVisibilityRefreshScheduler,\n    stopVisibilityRefreshScheduler,\n    resolveAuthRouteAction,\n    storeMfaPendingAccessToken,\n    readMfaPendingAccessToken,\n    clearMfaPendingAccessToken,\n    hydrateMfaPendingAccessToken\n} from './core/auth/index.js'\nexport type {\n    ApiErrorPayload,\n    StoredAuthError,\n    AuthErrorCodeValue,\n    UnauthorizedPageCopy,\n    AuthErrorAction,\n    AuthPolicyRoutes,\n    AuthInterceptorPolicyConfig,\n    WoodsportalRequestConfig,\n    SessionContractInput,\n    MfaBootRecoveryResult,\n    AuthRouteAction,\n    AuthFunnelState,\n    MfaStorageLane,\n    MfaPendingAccessToken,\n    HydrateMfaPendingAccessTokenInput\n} from './core/auth/index.js'\nexport { classifyHttpError, getHttpErrorMessage, isServiceUnavailableError, SERVICE_UNAVAILABLE_MESSAGE } from './core/http/http-errors'\nexport type { HttpErrorKind } from './core/http/http-errors'\n\nexport { configureLogger } from './core/logging/logger'\nexport type { LogLevel, LoggerConfig } from './core/logging/logger-types'\n\nexport { Client } from './core/http/client-assembler'\nexport { config as hubContext, setConfig as setHubContext } from './core/utils/hub-context'\n\nexport { WP_STORAGE_KEYS, WP_UI_THEME, wpClientIframeRefreshKey, wpClientIframeRefreshExpKey } from './core/utils/wp-storage-keys'\nexport {\n    migrateLegacyStorageKeys,\n    getClientAuthCookieNamesToClear,\n    clearClientSessionStorageKeys,\n    clearClientIframeRefreshLocalKeys,\n    clearStaleIframeRefreshForOtherHubs\n} from './core/utils/storage-migration'\nexport { clearClientAuthCookies } from './core/utils/cookie'\nexport { clearClientSdkSession, resetSessionStores } from './core/http/session-teardown'\nexport { setSessionLifecycleListener } from './core/http/token-store'\nexport { signalSessionChanged, installCrossTabSessionListener, applyCrossTabSessionRevocation } from './core/http/cross-tab-session'\nexport { configureStorageKeys, getStorageKeys, resetStorageKeysForTests } from './core/utils/storage-keys'\n\nexport {\n    HUBSPOT_DEALS_OBJECT_TYPE_ID,\n    HUBSPOT_TICKETS_OBJECT_TYPE_ID,\n    PIPELINE_REQUIRED_MANAGED_OBJECT_TYPE_IDS,\n    PIPELINE_BOARD_OBJECT_TYPE_IDS,\n    isPipelineBoardObjectTypeId\n} from './core/constants/hubspot-object-type-ids'\nexport { isPipelineBoardObjectType, supportsBoardView, shouldShowPipelineSelector } from './core/constants/pipeline-ui'\n\nexport type {\n    Config,\n    MutationOptions,\n    PreLoginPayload,\n    LoginPayload,\n    VerifyEmailPayload,\n    ResetPasswordVerifyTokenPayload,\n    ResetPasswordPayload,\n    ForgetPasswordPayload,\n    ChangePasswordPayload,\n    MfaMethod,\n    MfaMethodOption,\n    MfaPortalScopeContext,\n    LoginResponseData,\n    TwoFaVerificationRequest,\n    MfaEnrollmentStatus,\n    SecurityOverview,\n    LoginHistoryRow,\n    ActiveSession,\n    PaginationResponse\n} from './core/types'\n\nexport { api }\n\n/** Storage helpers and CRM stores. */\nexport const store = {\n    storage,\n    tableUi: { store: tableUiStore, actions: tableUiActions },\n    table: { store: tableStore, actions: tableActions },\n    user: { store: userStore, actions: userActions },\n    note: { store: noteStore, actions: noteActions },\n    email: { store: emailStore, actions: emailActions },\n    sync: { store: syncStore, actions: syncActions }\n}\n"]}

package/dist/{refresh-lock-JQVP4YOS.js → refresh-lock-H6P2SXGP.js}

@@ -1,4 +1,4 @@
-import { WP_STORAGE_KEYS } from './chunk-BKT4MFQM.js';
+import { WP_STORAGE_KEYS } from './chunk-7JHBCIR5.js';
 
 // src/main/core/http/refresh-lock.ts
 var LOCK_NAME = "wp.client.auth.refresh";
@@ -68,5 +68,5 @@ function clearRefreshLockForTests() {
 }
 
 export { clearRefreshLockForTests, withRefreshLock };
-//# sourceMappingURL=refresh-lock-JQVP4YOS.js.map
-//# sourceMappingURL=refresh-lock-JQVP4YOS.js.map
+//# sourceMappingURL=refresh-lock-H6P2SXGP.js.map
+//# sourceMappingURL=refresh-lock-H6P2SXGP.js.map

package/dist/{refresh-lock-JQVP4YOS.js.map → refresh-lock-H6P2SXGP.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/main/core/http/refresh-lock.ts"],"names":[],"mappings":";;;AAEA,IAAM,SAAA,GAAY,wBAAA;AAClB,IAAM,gBAAA,GAAmB,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,WAAA;AAChD,IAAM,WAAA,GAAc,GAAA;AAEpB,eAAe,kBAAqB,EAAA,EAAkC;AAClE,EAAA,IAAI,OAAO,SAAA,KAAc,WAAA,IAAe,SAAA,CAAU,OAAO,OAAA,EAAS;AAC9D,IAAA,OAAO,SAAA,CAAU,KAAA,CAAM,OAAA,CAAQ,SAAA,EAAW,EAAE,CAAA;AAAA,EAChD;AACA,EAAA,OAAO,EAAA,EAAG;AACd;AAEA,SAAS,qBAAA,GAAiC;AACtC,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,YAAA,EAAc;AACvD,IAAA,OAAO,IAAA;AAAA,EACX;AACA,EAAA,IAAI;AACA,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,gBAAgB,CAAA;AACxD,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,IAAI,GAAA,EAAK;AACL,MAAA,MAAM,EAAA,GAAK,OAAO,GAAG,CAAA;AACrB,MAAA,IAAI,OAAO,QAAA,CAAS,EAAE,CAAA,IAAK,GAAA,GAAM,KAAK,WAAA,EAAa;AAC/C,QAAA,OAAO,KAAA;AAAA,MACX;AAAA,IACJ;AACA,IAAA,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,gBAAA,EAAkB,MAAA,CAAO,GAAG,CAAC,CAAA;AACzD,IAAA,OAAO,IAAA;AAAA,EACX,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,IAAA;AAAA,EACX;AACJ;AAEA,SAAS,kBAAA,GAA2B;AAChC,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,YAAA,EAAc;AACvD,IAAA;AAAA,EACJ;AACA,EAAA,IAAI;AACA,IAAA,MAAA,CAAO,YAAA,CAAa,WAAW,gBAAgB,CAAA;AAAA,EACnD,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;AAEA,eAAe,kBAAA,CAAmB,YAAY,WAAA,EAA4B;AACtE,EAAA,MAAM,KAAA,GAAQ,KAAK,GAAA,EAAI;AACvB,EAAA,OAAO,IAAA,CAAK,GAAA,EAAI,GAAI,KAAA,GAAQ,SAAA,EAAW;AACnC,IAAA,IAAI,uBAAsB,EAAG;AACzB,MAAA;AAAA,IACJ;AACA,IAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,GAAG,CAAC,CAAA;AAAA,EAC/C;AACJ;AAKA,eAAsB,gBAAmB,EAAA,EAAkC;AACvE,EAAA,OAAO,kBAAkB,YAAY;AACjC,IAAA,MAAM,kBAAA,EAAmB;AACzB,IAAA,IAAI;AACA,MAAA,OAAO,MAAM,EAAA,EAAG;AAAA,IACpB,CAAA,SAAE;AACE,MAAA,kBAAA,EAAmB;AAAA,IACvB;AAAA,EACJ,CAAC,CAAA;AACL;AAGO,SAAS,wBAAA,GAAiC;AAC7C,EAAA,IAAI;AACA,IAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,YAAA,EAAc;AACvD,MAAA;AAAA,IACJ;AACA,IAAA,MAAA,CAAO,YAAA,CAAa,WAAW,gBAAgB,CAAA;AAAA,EACnD,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ","file":"refresh-lock-JQVP4YOS.js","sourcesContent":["import { WP_STORAGE_KEYS } from '../utils/wp-storage-keys'\n\nconst LOCK_NAME = 'wp.client.auth.refresh'\nconst STORAGE_LOCK_KEY = WP_STORAGE_KEYS.c.auth.refreshLock\nconst LOCK_TTL_MS = 30_000\n\nasync function withNavigatorLock<T>(fn: () => Promise<T>): Promise<T> {\n    if (typeof navigator !== 'undefined' && navigator.locks?.request) {\n        return navigator.locks.request(LOCK_NAME, fn)\n    }\n    return fn()\n}\n\nfunction tryAcquireStorageLock(): boolean {\n    if (typeof window === 'undefined' || !window.localStorage) {\n        return true\n    }\n    try {\n        const raw = window.localStorage.getItem(STORAGE_LOCK_KEY)\n        const now = Date.now()\n        if (raw) {\n            const ts = Number(raw)\n            if (Number.isFinite(ts) && now - ts < LOCK_TTL_MS) {\n                return false\n            }\n        }\n        window.localStorage.setItem(STORAGE_LOCK_KEY, String(now))\n        return true\n    } catch {\n        return true\n    }\n}\n\nfunction releaseStorageLock(): void {\n    if (typeof window === 'undefined' || !window.localStorage) {\n        return\n    }\n    try {\n        window.localStorage.removeItem(STORAGE_LOCK_KEY)\n    } catch {\n        // ignore\n    }\n}\n\nasync function waitForStorageLock(maxWaitMs = LOCK_TTL_MS): Promise<void> {\n    const start = Date.now()\n    while (Date.now() - start < maxWaitMs) {\n        if (tryAcquireStorageLock()) {\n            return\n        }\n        await new Promise((r) => setTimeout(r, 200))\n    }\n}\n\n/**\n * Cross-tab singleflight around refresh token rotation.\n */\nexport async function withRefreshLock<T>(fn: () => Promise<T>): Promise<T> {\n    return withNavigatorLock(async () => {\n        await waitForStorageLock()\n        try {\n            return await fn()\n        } finally {\n            releaseStorageLock()\n        }\n    })\n}\n\n/** Test-only: drop stale cross-tab refresh lock from localStorage. */\nexport function clearRefreshLockForTests(): void {\n    try {\n        if (typeof window === 'undefined' || !window.localStorage) {\n            return\n        }\n        window.localStorage.removeItem(STORAGE_LOCK_KEY)\n    } catch {\n        // ignore — jsdom may be torn down between files\n    }\n}\n"]}
+{"version":3,"sources":["../src/main/core/http/refresh-lock.ts"],"names":[],"mappings":";;;AAEA,IAAM,SAAA,GAAY,wBAAA;AAClB,IAAM,gBAAA,GAAmB,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,WAAA;AAChD,IAAM,WAAA,GAAc,GAAA;AAEpB,eAAe,kBAAqB,EAAA,EAAkC;AAClE,EAAA,IAAI,OAAO,SAAA,KAAc,WAAA,IAAe,SAAA,CAAU,OAAO,OAAA,EAAS;AAC9D,IAAA,OAAO,SAAA,CAAU,KAAA,CAAM,OAAA,CAAQ,SAAA,EAAW,EAAE,CAAA;AAAA,EAChD;AACA,EAAA,OAAO,EAAA,EAAG;AACd;AAEA,SAAS,qBAAA,GAAiC;AACtC,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,YAAA,EAAc;AACvD,IAAA,OAAO,IAAA;AAAA,EACX;AACA,EAAA,IAAI;AACA,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,gBAAgB,CAAA;AACxD,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,IAAI,GAAA,EAAK;AACL,MAAA,MAAM,EAAA,GAAK,OAAO,GAAG,CAAA;AACrB,MAAA,IAAI,OAAO,QAAA,CAAS,EAAE,CAAA,IAAK,GAAA,GAAM,KAAK,WAAA,EAAa;AAC/C,QAAA,OAAO,KAAA;AAAA,MACX;AAAA,IACJ;AACA,IAAA,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,gBAAA,EAAkB,MAAA,CAAO,GAAG,CAAC,CAAA;AACzD,IAAA,OAAO,IAAA;AAAA,EACX,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,IAAA;AAAA,EACX;AACJ;AAEA,SAAS,kBAAA,GAA2B;AAChC,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,YAAA,EAAc;AACvD,IAAA;AAAA,EACJ;AACA,EAAA,IAAI;AACA,IAAA,MAAA,CAAO,YAAA,CAAa,WAAW,gBAAgB,CAAA;AAAA,EACnD,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;AAEA,eAAe,kBAAA,CAAmB,YAAY,WAAA,EAA4B;AACtE,EAAA,MAAM,KAAA,GAAQ,KAAK,GAAA,EAAI;AACvB,EAAA,OAAO,IAAA,CAAK,GAAA,EAAI,GAAI,KAAA,GAAQ,SAAA,EAAW;AACnC,IAAA,IAAI,uBAAsB,EAAG;AACzB,MAAA;AAAA,IACJ;AACA,IAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,GAAG,CAAC,CAAA;AAAA,EAC/C;AACJ;AAKA,eAAsB,gBAAmB,EAAA,EAAkC;AACvE,EAAA,OAAO,kBAAkB,YAAY;AACjC,IAAA,MAAM,kBAAA,EAAmB;AACzB,IAAA,IAAI;AACA,MAAA,OAAO,MAAM,EAAA,EAAG;AAAA,IACpB,CAAA,SAAE;AACE,MAAA,kBAAA,EAAmB;AAAA,IACvB;AAAA,EACJ,CAAC,CAAA;AACL;AAGO,SAAS,wBAAA,GAAiC;AAC7C,EAAA,IAAI;AACA,IAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,YAAA,EAAc;AACvD,MAAA;AAAA,IACJ;AACA,IAAA,MAAA,CAAO,YAAA,CAAa,WAAW,gBAAgB,CAAA;AAAA,EACnD,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ","file":"refresh-lock-H6P2SXGP.js","sourcesContent":["import { WP_STORAGE_KEYS } from '../utils/wp-storage-keys'\n\nconst LOCK_NAME = 'wp.client.auth.refresh'\nconst STORAGE_LOCK_KEY = WP_STORAGE_KEYS.c.auth.refreshLock\nconst LOCK_TTL_MS = 30_000\n\nasync function withNavigatorLock<T>(fn: () => Promise<T>): Promise<T> {\n    if (typeof navigator !== 'undefined' && navigator.locks?.request) {\n        return navigator.locks.request(LOCK_NAME, fn)\n    }\n    return fn()\n}\n\nfunction tryAcquireStorageLock(): boolean {\n    if (typeof window === 'undefined' || !window.localStorage) {\n        return true\n    }\n    try {\n        const raw = window.localStorage.getItem(STORAGE_LOCK_KEY)\n        const now = Date.now()\n        if (raw) {\n            const ts = Number(raw)\n            if (Number.isFinite(ts) && now - ts < LOCK_TTL_MS) {\n                return false\n            }\n        }\n        window.localStorage.setItem(STORAGE_LOCK_KEY, String(now))\n        return true\n    } catch {\n        return true\n    }\n}\n\nfunction releaseStorageLock(): void {\n    if (typeof window === 'undefined' || !window.localStorage) {\n        return\n    }\n    try {\n        window.localStorage.removeItem(STORAGE_LOCK_KEY)\n    } catch {\n        // ignore\n    }\n}\n\nasync function waitForStorageLock(maxWaitMs = LOCK_TTL_MS): Promise<void> {\n    const start = Date.now()\n    while (Date.now() - start < maxWaitMs) {\n        if (tryAcquireStorageLock()) {\n            return\n        }\n        await new Promise((r) => setTimeout(r, 200))\n    }\n}\n\n/**\n * Cross-tab singleflight around refresh token rotation.\n */\nexport async function withRefreshLock<T>(fn: () => Promise<T>): Promise<T> {\n    return withNavigatorLock(async () => {\n        await waitForStorageLock()\n        try {\n            return await fn()\n        } finally {\n            releaseStorageLock()\n        }\n    })\n}\n\n/** Test-only: drop stale cross-tab refresh lock from localStorage. */\nexport function clearRefreshLockForTests(): void {\n    try {\n        if (typeof window === 'undefined' || !window.localStorage) {\n            return\n        }\n        window.localStorage.removeItem(STORAGE_LOCK_KEY)\n    } catch {\n        // ignore — jsdom may be torn down between files\n    }\n}\n"]}

package/dist/storage-migration-TFF6IQTD.js

@@ -0,0 +1,4 @@
+export { clearClientIframeRefreshLocalKeys, clearClientSessionStorageKeys, clearStaleIframeRefreshForOtherHubs, getClientAuthCookieNamesToClear, migrateLegacyStorageKeys } from './chunk-XANZNL46.js';
+import './chunk-7JHBCIR5.js';
+//# sourceMappingURL=storage-migration-TFF6IQTD.js.map
+//# sourceMappingURL=storage-migration-TFF6IQTD.js.map

package/dist/{storage-migration-BY2QL6YD.js.map → storage-migration-TFF6IQTD.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"storage-migration-BY2QL6YD.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"storage-migration-TFF6IQTD.js"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "woodsportal-client-sdk",
-    "version": "4.0.7-dev.4",
+    "version": "4.0.7-dev.5",
     "description": "Official TypeScript/JavaScript SDK for WoodsPortal API - Authentication, user management, pipelines, and more",
     "type": "module",
     "main": "./dist/index.js",

package/dist/auth-interceptor-policy-LU2L5NJM.js

@@ -1,5 +0,0 @@
-export { isOptionalAuthFailureUrl, isRefreshEndpointUrl, isSessionProbeUrl, persistAuthError, readPersistedAuthError, resolveAuthErrorAction } from './chunk-GUYIJ4ZE.js';
-import './chunk-COHBSTHF.js';
-import './chunk-BKT4MFQM.js';
-//# sourceMappingURL=auth-interceptor-policy-LU2L5NJM.js.map
-//# sourceMappingURL=auth-interceptor-policy-LU2L5NJM.js.map

package/dist/auth-utils-Z5P6SMLJ.js

@@ -1,5 +0,0 @@
-export { getPortal, getProfile, getRefreshToken, getSubscriptionType, setAccessToken, setLoggedInDetails, setPortal, setProfileDetails, setRefreshToken, setSubscriptionType } from './chunk-B2OVKOJU.js';
-import './chunk-YNOZWRK3.js';
-import './chunk-BKT4MFQM.js';
-//# sourceMappingURL=auth-utils-Z5P6SMLJ.js.map
-//# sourceMappingURL=auth-utils-Z5P6SMLJ.js.map

package/dist/chunk-BKT4MFQM.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/main/core/utils/wp-storage-keys.ts"],"names":[],"mappings":";AAKO,IAAM,WAAA,GAAc;AAEpB,IAAM,eAAA,GAAkB;AAAA,EAC3B,CAAA,EAAG;AAAA,IACC,GAAA,EAAK,UAAA;AAAA,IACL,IAAA,EAAM;AAAA,MACF,KAAA,EAAO,iBAAA;AAAA,MACP,OAAA,EAAS,mBAAA;AAAA,MACT,MAAA,EAAQ,kBAAA;AAAA,MACR,GAAA,EAAK,eAAA;AAAA,MACL,OAAA,EAAS,mBAAA;AAAA,MACT,GAAA,EAAK,eAAA;AAAA,MACL,gBAAA,EAAkB,4BAAA;AAAA,MAClB,GAAA,EAAK,eAAA;AAAA,MACL,WAAA,EAAa,uBAAA;AAAA,MACb,cAAA,EAAgB;AAAA,KACpB;AAAA,IACA,EAAA,EAAI;AAAA,MACA,GAAA,EAAK,aAAA;AAAA,MACL,IAAA,EAAM,cAAA;AAAA,MACN,KAAA,EAAO;AAAA,KACX;AAAA,IACA,KAAA,EAAO;AAAA,MACH,KAAA,EAAO,kBAAA;AAAA,MACP,KAAA,EAAO,kBAAA;AAAA,MACP,OAAA,EAAS,oBAAA;AAAA,MACT,IAAA,EAAM;AAAA,KACV;AAAA,IACA,GAAA,EAAK;AAAA,MACD,OAAA,EAAS,kBAAA;AAAA,MACT,OAAA,EAAS,kBAAA;AAAA,MACT,GAAA,EAAK,cAAA;AAAA,MACL,KAAA,EAAO,gBAAA;AAAA,MACP,QAAA,EAAU,mBAAA;AAAA,MACV,UAAA,EAAY,qBAAA;AAAA,MACZ,SAAA,EAAW,oBAAA;AAAA,MACX,QAAA,EAAU,mBAAA;AAAA,MACV,OAAA,EAAS,kBAAA;AAAA,MACT,OAAA,EAAS;AAAA,KACb;AAAA,IACA,GAAA,EAAK;AAAA,MACD,EAAA,EAAI;AAAA;AACR,GACJ;AAAA,EACA,CAAA,EAAG;AAAA,IACC,IAAA,EAAM;AAAA,MACF,KAAA,EAAO,iBAAA;AAAA,MACP,OAAA,EAAS,mBAAA;AAAA,MACT,GAAA,EAAK,eAAA;AAAA,MACL,QAAA,EAAU,oBAAA;AAAA,MACV,MAAA,EAAQ,kBAAA;AAAA,MACR,IAAA,EAAM,gBAAA;AAAA,MACN,IAAA,EAAM,gBAAA;AAAA,MACN,GAAA,EAAK,eAAA;AAAA,MACL,MAAA,EAAQ,kBAAA;AAAA,MACR,WAAA,EAAa,uBAAA;AAAA,MACb,GAAA,EAAK;AAAA,KACT;AAAA,IACA,GAAA,EAAK;AAAA,MACD,EAAA,EAAI,aAAA;AAAA,MACJ,IAAA,EAAM,eAAA;AAAA,MACN,GAAA,EAAK;AAAA,KACT;AAAA,IACA,IAAA,EAAM;AAAA,MACF,MAAA,EAAQ,kBAAA;AAAA,MACR,KAAA,EAAO,iBAAA;AAAA,MACP,KAAA,EAAO,iBAAA;AAAA,MACP,OAAA,EAAS;AAAA,KACb;AAAA,IACA,EAAA,EAAI;AAAA,MACA,OAAA,EAAS,iBAAA;AAAA,MACT,YAAA,EAAc;AAAA,KAClB;AAAA,IACA,GAAA,EAAK;AAAA,MACD,OAAA,EAAS,kBAAA;AAAA,MACT,OAAA,EAAS,kBAAA;AAAA,MACT,GAAA,EAAK,cAAA;AAAA,MACL,KAAA,EAAO,gBAAA;AAAA,MACP,QAAA,EAAU,mBAAA;AAAA,MACV,UAAA,EAAY,qBAAA;AAAA,MACZ,SAAA,EAAW,oBAAA;AAAA,MACX,QAAA,EAAU,mBAAA;AAAA,MACV,OAAA,EAAS,kBAAA;AAAA,MACT,OAAA,EAAS;AAAA,KACb;AAAA,IACA,GAAA,EAAK;AAAA,MACD,QAAA,EAAU;AAAA,KACd;AAAA,IACA,IAAA,EAAM;AAAA,MACF,MAAA,EAAQ;AAAA;AACZ,GACJ;AAAA,EACA,CAAA,EAAG;AAAA,IACC,GAAA,EAAK,UAAA;AAAA,IACL,GAAA,EAAK;AAAA,MACD,KAAA,EAAO,gBAAA;AAAA,MACP,IAAA,EAAM;AAAA;AACV;AAER;AAGO,SAAS,yBAAyB,KAAA,EAAgC;AACrE,EAAA,OAAO,GAAG,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,cAAc,GAAG,KAAK,CAAA,CAAA;AAC3D;AAEO,SAAS,4BAA4B,KAAA,EAAgC;AACxE,EAAA,OAAO,CAAA,EAAG,wBAAA,CAAyB,KAAK,CAAC,CAAA,IAAA,CAAA;AAC7C;AAWO,IAAM,0BAAA,GAA6B;AAAA,EACtC,mBAAA;AAAA,EACA,kBAAA;AAAA,EACA,qBAAA;AAAA,EACA,oBAAA;AAAA,EACA,0BAAA;AAAA,EACA,wBAAA;AAAA,EACA,wBAAA;AAAA,EACA,8BAAA;AAAA,EACA,0BAAA;AAAA,EACA,iBAAA;AAAA,EACA,cAAA;AAAA,EACA,cAAA;AAAA,EACA,QAAA;AAAA,EACA;AACJ;AAMO,IAAM,2BAAA,GAA8B,CAAC,WAAA,EAAa,wBAAA,EAA0B,aAAa;AAKzF,IAAM,iCAAA,GAA8E;AAAA,EACvF,CAAC,yBAAA,EAA2B,eAAA,CAAgB,CAAA,CAAE,MAAM,KAAK,CAAA;AAAA,EACzD,CAAC,iCAAA,EAAmC,eAAA,CAAgB,CAAA,CAAE,MAAM,KAAK,CAAA;AAAA,EACjE,CAAC,0CAAA,EAA4C,eAAA,CAAgB,CAAA,CAAE,MAAM,OAAO,CAAA;AAAA,EAC5E,CAAC,wCAAA,EAA0C,eAAA,CAAgB,CAAA,CAAE,MAAM,IAAI,CAAA;AAAA,EACvE,CAAC,WAAA,EAAa,eAAA,CAAgB,CAAA,CAAE,KAAK,GAAG,CAAA;AAAA,EACxC,CAAC,wBAAA,EAA0B,eAAA,CAAgB,CAAA,CAAE,IAAI,EAAE,CAAA;AAAA,EACnD,CAAC,yBAAA,EAA2B,eAAA,CAAgB,CAAA,CAAE,IAAI,OAAO,CAAA;AAAA,EACzD,CAAC,+BAAA,EAAiC,eAAA,CAAgB,CAAA,CAAE,IAAI,OAAO,CAAA;AAAA,EAC/D,CAAC,6BAAA,EAA+B,eAAA,CAAgB,CAAA,CAAE,IAAI,GAAG,CAAA;AAAA,EACzD,CAAC,sCAAA,EAAwC,eAAA,CAAgB,CAAA,CAAE,IAAI,GAAG,CAAA;AAAA,EAClE,CAAC,0BAAA,EAA4B,eAAA,CAAgB,CAAA,CAAE,IAAI,KAAK,CAAA;AAAA,EACxD,CAAC,0BAAA,EAA4B,eAAA,CAAgB,CAAA,CAAE,IAAI,QAAQ,CAAA;AAAA,EAC3D,CAAC,4BAAA,EAA8B,eAAA,CAAgB,CAAA,CAAE,IAAI,UAAU,CAAA;AAAA,EAC/D,CAAC,2BAAA,EAA6B,eAAA,CAAgB,CAAA,CAAE,IAAI,SAAS,CAAA;AAAA,EAC7D,CAAC,uCAAA,EAAyC,eAAA,CAAgB,CAAA,CAAE,IAAI,QAAQ,CAAA;AAAA,EACxE,CAAC,4CAAA,EAA8C,eAAA,CAAgB,CAAA,CAAE,IAAI,OAAO,CAAA;AAAA,EAC5E,CAAC,4CAAA,EAA8C,eAAA,CAAgB,CAAA,CAAE,IAAI,OAAO;AAChF;AAGO,IAAM,wBAAA,GAAqE;AAAA,EAC9E,CAAC,mBAAA,EAAqB,eAAA,CAAgB,CAAA,CAAE,KAAK,KAAK,CAAA;AAAA,EAClD,CAAC,cAAA,EAAgB,eAAA,CAAgB,CAAA,CAAE,KAAK,KAAK,CAAA;AAAA,EAC7C,CAAC,kBAAA,EAAoB,eAAA,CAAgB,CAAA,CAAE,KAAK,KAAK,CAAA;AAAA,EACjD,CAAC,qBAAA,EAAuB,eAAA,CAAgB,CAAA,CAAE,KAAK,OAAO,CAAA;AAAA,EACtD,CAAC,cAAA,EAAgB,eAAA,CAAgB,CAAA,CAAE,KAAK,OAAO,CAAA;AAAA,EAC/C,CAAC,oBAAA,EAAsB,eAAA,CAAgB,CAAA,CAAE,KAAK,MAAM,CAAA;AAAA,EACpD,CAAC,QAAA,EAAU,eAAA,CAAgB,CAAA,CAAE,KAAK,MAAM,CAAA;AAAA,EACxC,CAAC,0BAAA,EAA4B,eAAA,CAAgB,CAAA,CAAE,KAAK,GAAG,CAAA;AAAA,EACvD,CAAC,kBAAA,EAAoB,eAAA,CAAgB,CAAA,CAAE,KAAK,GAAG,CAAA;AAAA,EAC/C,CAAC,wBAAA,EAA0B,eAAA,CAAgB,CAAA,CAAE,GAAG,GAAG,CAAA;AAAA,EACnD,CAAC,wBAAA,EAA0B,eAAA,CAAgB,CAAA,CAAE,GAAG,IAAI,CAAA;AAAA,EACpD,CAAC,8BAAA,EAAgC,eAAA,CAAgB,CAAA,CAAE,GAAG,KAAK,CAAA;AAAA,EAC3D,CAAC,iBAAA,EAAmB,eAAA,CAAgB,CAAA,CAAE,KAAK,OAAO;AACtD","file":"chunk-BKT4MFQM.js","sourcesContent":["/**\n * Canonical WoodsPortal browser storage key names (`wp.{lane}.{domain}.{name}`).\n * Import from here — do not scatter string literals in app code.\n */\n\nexport const WP_UI_THEME = 'wp.ui.theme'\n\nexport const WP_STORAGE_KEYS = {\n    c: {\n        hub: 'wp.c.hub',\n        auth: {\n            login: 'wp.c.auth.login',\n            refresh: 'wp.c.auth.refresh',\n            portal: 'wp.c.auth.portal',\n            sub: 'wp.c.auth.sub',\n            emailOk: 'wp.c.auth.emailOk',\n            err: 'wp.c.auth.err',\n            refreshExhausted: 'wp.c.auth.refreshExhausted',\n            rev: 'wp.c.auth.rev',\n            refreshLock: 'wp.c.auth.refreshLock',\n            iframeRtPrefix: 'wp.c.auth.rt.'\n        },\n        ui: {\n            pag: 'wp.c.ui.pag',\n            menu: 'wp.c.ui.menu',\n            assoc: 'wp.c.ui.assoc'\n        },\n        login: {\n            email: 'wp.c.login.email',\n            force: 'wp.c.login.force',\n            passkey: 'wp.c.login.passkey',\n            done: 'wp.c.login.done'\n        },\n        mfa: {\n            methods: 'wp.c.mfa.methods',\n            default: 'wp.c.mfa.default',\n            otp: 'wp.c.mfa.otp',\n            scope: 'wp.c.mfa.scope',\n            portalId: 'wp.c.mfa.portalId',\n            portalName: 'wp.c.mfa.portalName',\n            portalUrl: 'wp.c.mfa.portalUrl',\n            enrolled: 'wp.c.mfa.enrolled',\n            emailOk: 'wp.c.mfa.emailOk',\n            phoneOk: 'wp.c.mfa.phoneOk'\n        },\n        sso: {\n            cb: 'wp.c.sso.cb'\n        }\n    },\n    a: {\n        auth: {\n            login: 'wp.a.auth.login',\n            emailOk: 'wp.a.auth.emailOk',\n            mfa: 'wp.a.auth.mfa',\n            portalId: 'wp.a.auth.portalId',\n            portal: 'wp.a.auth.portal',\n            accT: 'wp.a.auth.accT',\n            sesT: 'wp.a.auth.sesT',\n            err: 'wp.a.auth.err',\n            noBoot: 'wp.a.auth.noBoot',\n            refreshLock: 'wp.a.auth.refreshLock',\n            rev: 'wp.a.auth.rev'\n        },\n        hub: {\n            id: 'wp.a.hub.id',\n            acct: 'wp.a.hub.acct',\n            cfg: 'wp.a.hub.cfg'\n        },\n        sync: {\n            create: 'wp.a.sync.create',\n            state: 'wp.a.sync.state',\n            jobId: 'wp.a.sync.jobId',\n            jobType: 'wp.a.sync.jobType'\n        },\n        ui: {\n            loading: 'wp.a.ui.loading',\n            intTabPrefix: 'wp.a.ui.intTab.'\n        },\n        mfa: {\n            methods: 'wp.a.mfa.methods',\n            default: 'wp.a.mfa.default',\n            otp: 'wp.a.mfa.otp',\n            scope: 'wp.a.mfa.scope',\n            portalId: 'wp.a.mfa.portalId',\n            portalName: 'wp.a.mfa.portalName',\n            portalUrl: 'wp.a.mfa.portalUrl',\n            enrolled: 'wp.a.mfa.enrolled',\n            emailOk: 'wp.a.mfa.emailOk',\n            phoneOk: 'wp.a.mfa.phoneOk'\n        },\n        sso: {\n            cbPrefix: 'wp.a.sso.cb.'\n        },\n        bill: {\n            result: 'wp.a.bill.result'\n        }\n    },\n    d: {\n        log: 'wp.d.log',\n        cfg: {\n            theme: 'wp.d.cfg.theme',\n            side: 'wp.d.cfg.side'\n        }\n    }\n} as const\n\n/** Dynamic iframe refresh localStorage key for a hub. */\nexport function wpClientIframeRefreshKey(hubId: string | number): string {\n    return `${WP_STORAGE_KEYS.c.auth.iframeRtPrefix}${hubId}`\n}\n\nexport function wpClientIframeRefreshExpKey(hubId: string | number): string {\n    return `${wpClientIframeRefreshKey(hubId)}.exp`\n}\n\nexport function wpAdminIntegrationTabKey(hubId: string | number, portalId: string | number): string {\n    return `${WP_STORAGE_KEYS.a.ui.intTabPrefix}${hubId}.${portalId}`\n}\n\nexport function wpAdminSsoCallbackKey(code: string, state: string): string {\n    return `${WP_STORAGE_KEYS.a.sso.cbPrefix}${code}.${state}`\n}\n\n/** Legacy client cookie names cleared during logout (two release cycles). */\nexport const LEGACY_CLIENT_AUTH_COOKIES = [\n    'woodsportal_login',\n    'woodsportal_user',\n    'woodsportal_refresh',\n    'woodsportal_portal',\n    'woodsportal_subscription',\n    'woodsportal_pagination',\n    'woodsportal_route_menu',\n    'woodsportal_association_view',\n    'woodsportal_access_token',\n    'IS_EMAIL_VERIFY',\n    'loginDetails',\n    'refreshToken',\n    'portal',\n    'subscriptionType'\n] as const\n\n/** Legacy client localStorage keys. */\nexport const LEGACY_CLIENT_LOCAL_KEYS = ['hubSpotData', 'theme', 'wp_iframe_rt_'] as const\n\n/** Legacy client sessionStorage key prefixes / exact names. */\nexport const LEGACY_CLIENT_SESSION_EXACT = ['authError', 'sso_callback_processed', 'entredEmail'] as const\n\nexport const LEGACY_CLIENT_SESSION_PREFIXES = ['woodsportal.login.', 'woodsportal.mfa.'] as const\n\n/** Pairs of [legacy, canonical] for exact sessionStorage keys. */\nexport const CLIENT_SESSION_STORAGE_MIGRATIONS: ReadonlyArray<readonly [string, string]> = [\n    ['woodsportal.login.email', WP_STORAGE_KEYS.c.login.email],\n    ['woodsportal.login.forcePreLogin', WP_STORAGE_KEYS.c.login.force],\n    ['woodsportal.login.passkeyPrimaryEnrolled', WP_STORAGE_KEYS.c.login.passkey],\n    ['woodsportal.login.preLoginCompletedKey', WP_STORAGE_KEYS.c.login.done],\n    ['authError', WP_STORAGE_KEYS.c.auth.err],\n    ['sso_callback_processed', WP_STORAGE_KEYS.c.sso.cb],\n    ['woodsportal.mfa.methods', WP_STORAGE_KEYS.c.mfa.methods],\n    ['woodsportal.mfa.defaultMethod', WP_STORAGE_KEYS.c.mfa.default],\n    ['woodsportal.mfa.otpDelivery', WP_STORAGE_KEYS.c.mfa.otp],\n    ['woodsportal.mfa.otpDestinationMasked', WP_STORAGE_KEYS.c.mfa.otp],\n    ['woodsportal.mfa.scopeKey', WP_STORAGE_KEYS.c.mfa.scope],\n    ['woodsportal.mfa.portalId', WP_STORAGE_KEYS.c.mfa.portalId],\n    ['woodsportal.mfa.portalName', WP_STORAGE_KEYS.c.mfa.portalName],\n    ['woodsportal.mfa.portalUrl', WP_STORAGE_KEYS.c.mfa.portalUrl],\n    ['woodsportal.mfa.enrolledForThisPortal', WP_STORAGE_KEYS.c.mfa.enrolled],\n    ['woodsportal.mfa.emailVerifiedForThisPortal', WP_STORAGE_KEYS.c.mfa.emailOk],\n    ['woodsportal.mfa.phoneVerifiedForThisPortal', WP_STORAGE_KEYS.c.mfa.phoneOk]\n]\n\n/** Cookie migration pairs [legacy, canonical]. */\nexport const CLIENT_COOKIE_MIGRATIONS: ReadonlyArray<readonly [string, string]> = [\n    ['woodsportal_login', WP_STORAGE_KEYS.c.auth.login],\n    ['loginDetails', WP_STORAGE_KEYS.c.auth.login],\n    ['woodsportal_user', WP_STORAGE_KEYS.c.auth.login],\n    ['woodsportal_refresh', WP_STORAGE_KEYS.c.auth.refresh],\n    ['refreshToken', WP_STORAGE_KEYS.c.auth.refresh],\n    ['woodsportal_portal', WP_STORAGE_KEYS.c.auth.portal],\n    ['portal', WP_STORAGE_KEYS.c.auth.portal],\n    ['woodsportal_subscription', WP_STORAGE_KEYS.c.auth.sub],\n    ['subscriptionType', WP_STORAGE_KEYS.c.auth.sub],\n    ['woodsportal_pagination', WP_STORAGE_KEYS.c.ui.pag],\n    ['woodsportal_route_menu', WP_STORAGE_KEYS.c.ui.menu],\n    ['woodsportal_association_view', WP_STORAGE_KEYS.c.ui.assoc],\n    ['IS_EMAIL_VERIFY', WP_STORAGE_KEYS.c.auth.emailOk]\n]\n"]}