@burdenoff/microfe-auth 2026.1102.1 → 2026.1107.1

package/dist/auth/pages/LoginPage.js

@@ -6,22 +6,23 @@ import { hostFragmentContinuation as i, sameOriginFragmentPath as a, sanitizePos
 import { useAuthStore as s } from "../store/authStore.js";
 import { useAuth as c } from "../providers/AuthProvider.js";
 import { AuthLayout as l } from "../components/AuthLayout.js";
-import { AlertIcon as u, EmailIcon as ee, EyeIcon as te, EyeOffIcon as ne, GoogleIcon as re, LockIcon as ie, MicrosoftIcon as d, SpinnerIcon as f } from "../components/AuthIcons.js";
-import { useCaptchaV3 as ae } from "../hooks/useCaptchaV3.js";
-import { MFA_REDIRECT as oe } from "../constants/sessionKeys.js";
-import { useCallback as se, useEffect as p, useRef as ce, useState as m } from "react";
-import { SSORedirectSpinner as le, getSSORedirectUrl as ue } from "@burdenoff/fe-libs/shared/components";
-import { useLocation as de, useNavigate as fe, useSearchParams as pe } from "react-router";
-import { useActiveContext as me } from "@burdenoff/fe-libs/shared/providers/shell";
-import { Fragment as h, jsx as g, jsxs as _ } from "react/jsx-runtime";
-import { beginSsoNavigation as he, buildSsoDepositUrl as ge, isSsoNavigationPending as _e, markSsoDepositPending as ve, mintSsoSessionTokens as ye } from "@burdenoff/fe-libs/shared/utils";
-import { resolveAuthBridgeConfig as be } from "@burdenoff/fe-libs/shared/config";
-import { resolveGatewayUrls as xe } from "@burdenoff/fe-libs/shared/config/gatewayUrls";
-import { Button as Se } from "@burdenoff/fe-libs/button";
-import { Checkbox as Ce, PagePurpose as we } from "@burdenoff/fe-libs/ui";
-import { getProfileTokens as v, getProfileUser as y, getProfileWorkspaceToken as Te, getProfiles as b, resolveActiveProfileId as Ee } from "@burdenoff/fe-libs/shared/providers/shell/ProfileStorageManager";
+import { AlertIcon as u, EmailIcon as ee, EyeIcon as te, EyeOffIcon as ne, GoogleIcon as d, LockIcon as re, MicrosoftIcon as ie, SpinnerIcon as ae } from "../components/AuthIcons.js";
+import { useCaptchaV3 as oe } from "../hooks/useCaptchaV3.js";
+import { MFA_REDIRECT as se } from "../constants/sessionKeys.js";
+import { authPathWithReturnTo as ce, sanitizeReturnPath as le } from "../utils/pendingReturnTo.js";
+import { useCallback as ue, useEffect as f, useRef as de, useState as p } from "react";
+import { SSORedirectSpinner as fe, getSSORedirectUrl as pe } from "@burdenoff/fe-libs/shared/components";
+import { useLocation as me, useNavigate as he, useSearchParams as ge } from "react-router";
+import { useActiveContext as _e } from "@burdenoff/fe-libs/shared/providers/shell";
+import { Fragment as m, jsx as h, jsxs as g } from "react/jsx-runtime";
+import { beginSsoNavigation as ve, buildSsoDepositUrl as ye, isSsoNavigationPending as be, markSsoDepositPending as xe, mintSsoSessionTokens as Se } from "@burdenoff/fe-libs/shared/utils";
+import { resolveAuthBridgeConfig as Ce } from "@burdenoff/fe-libs/shared/config";
+import { resolveGatewayUrls as we } from "@burdenoff/fe-libs/shared/config/gatewayUrls";
+import { Button as Te } from "@burdenoff/fe-libs/button";
+import { Checkbox as Ee, PagePurpose as De } from "@burdenoff/fe-libs/ui";
+import { getProfileTokens as Oe, getProfileUser as ke, getProfileWorkspaceToken as Ae, getProfiles as _, resolveActiveProfileId as v } from "@burdenoff/fe-libs/shared/providers/shell/ProfileStorageManager";
 // src/auth/pages/LoginPage.tsx
-function De() {
+function y() {
 	if (typeof window > "u") return !1;
 	let e = window;
 	if (typeof e.Capacitor?.isNativePlatform == "function") try {
@@ -29,7 +30,7 @@ function De() {
 	} catch {}
 	return !!(typeof navigator < "u" && /Electron/i.test(navigator.userAgent || ""));
 }
-function Oe(e) {
+function je(e) {
 	if (typeof window > "u") return e;
 	try {
 		let t = new URL(e, window.location.origin);
@@ -38,7 +39,7 @@ function Oe(e) {
 		return e;
 	}
 }
-function ke(e) {
+function Me(e) {
 	try {
 		let t = e.split(".")[1].replace(/-/g, "+").replace(/_/g, "/"), n = t.padEnd(Math.ceil(t.length / 4) * 4, "="), r = JSON.parse(atob(n));
 		return typeof r.exp == "number" && r.exp > Date.now() / 1e3;
@@ -46,16 +47,16 @@ function ke(e) {
 		return !1;
 	}
 }
-function Ae(e) {
+function Ne(e) {
 	if (!e) return null;
 	try {
 		let t = new URL(decodeURIComponent(e), window.location.origin);
-		return t.origin === window.location.origin ? x(t, { includeOrigin: !1 }) : null;
+		return t.origin === window.location.origin ? b(t, { includeOrigin: !1 }) : null;
 	} catch {
 		return null;
 	}
 }
-function x(e, t) {
+function b(e, t) {
 	for (let t of [
 		"sso_failed",
 		"sso-failed",
@@ -65,45 +66,45 @@ function x(e, t) {
 	let n = e.searchParams.toString();
 	return `${e.pathname}${n ? `?${n}` : ""}${e.hash}`;
 }
-function je(e) {
+function x(e) {
 	try {
 		let t = new URL(decodeURIComponent(e), window.location.origin);
-		return x(t, { includeOrigin: t.origin !== window.location.origin });
+		return b(t, { includeOrigin: t.origin !== window.location.origin });
 	} catch {
 		return e;
 	}
 }
 function S() {
-	let x = e(), S = fe(), Me = de(), [C] = pe(), { signIn: Ne, isLoading: Pe, error: w, errorCode: Fe, resendVerification: Ie } = t(), { completeAuthFlow: Le } = n(), { setWorkspace: Re, setOrganization: ze } = me(), { defaultPostLoginPath: T, navigate: Be } = c(), { initiateGoogleOAuth: Ve, initiateMicrosoftOAuth: He, isProviderConfigured: E } = r(), Ue = s((e) => e.mfaRequired), { executeRecaptcha: We } = ae(), [D, O] = m(!1), [Ge, Ke] = m(!1), k = se(async (e) => {
-		if (typeof window > "u" || De()) return e;
+	let b = e(), S = he(), C = me(), [w] = ge(), { signIn: Pe, isLoading: T, error: E, errorCode: Fe, resendVerification: Ie } = t(), { completeAuthFlow: Le } = n(), { setWorkspace: Re, setOrganization: ze } = _e(), { defaultPostLoginPath: D, navigate: Be } = c(), { initiateGoogleOAuth: Ve, initiateMicrosoftOAuth: He, isProviderConfigured: O } = r(), Ue = s((e) => e.mfaRequired), { executeRecaptcha: We } = oe(), [k, Ge] = p(!1), [Ke, qe] = p(!1), A = ue(async (e) => {
+		if (typeof window > "u" || y()) return e;
 		try {
-			let t = be(), n = new URL(t.url), r = window.location.origin;
+			let t = Ce(), n = new URL(t.url), r = window.location.origin;
 			if (n.origin === r) return e;
-			let i = new URL(e, r).href, a = Ee();
+			let i = new URL(e, r).href, a = v();
 			if (!a) return e;
-			let o = v(a), s = y(a);
+			let o = Oe(a), s = ke(a);
 			if (!o || !s) return e;
-			let c = Te(a), l = {
+			let c = Ae(a), l = {
 				...o,
 				workspaceToken: c
 			};
 			if (o.refreshToken) {
-				let { globalBaseUrl: e } = xe(), { tokens: t } = await ye(`${e}/global/graphql`, o.refreshToken);
+				let { globalBaseUrl: e } = we(), { tokens: t } = await Se(`${e}/global/graphql`, o.refreshToken);
 				t && (l = {
 					...t,
 					workspaceToken: c
 				});
 			}
-			return ve(a), ge(n.origin, i, {
+			return xe(a), ye(n.origin, i, {
 				profileId: a,
 				tokens: JSON.stringify(l),
 				user: JSON.stringify(s),
-				profiles: JSON.stringify(b())
+				profiles: JSON.stringify(_())
 			});
 		} catch {
 			return e;
 		}
-	}, []), A = ce(!1), j = se((e) => {
+	}, []), j = de(!1), M = ue((e) => {
 		let t = o(e);
 		if (typeof window > "u") {
 			S(t);
@@ -115,12 +116,12 @@ function S() {
 			try {
 				sessionStorage.setItem("bf-post-login-return-to", t);
 			} catch {}
-			De() ? S(Oe(t)) : (A.current = !0, (async () => {
-				let e = await Promise.race([k(t), new Promise((e) => {
+			y() ? S(je(t)) : (j.current = !0, (async () => {
+				let e = await Promise.race([A(t), new Promise((e) => {
 					window.setTimeout(() => e(t), 3e3);
 				})]);
-				e.includes("/auth/sso-deposit") ? (he(), window.location.assign(e), window.setTimeout(() => {
-					he(), window.location.replace(e);
+				e.includes("/auth/sso-deposit") ? (ve(), window.location.assign(e), window.setTimeout(() => {
+					ve(), window.location.replace(e);
 				}, 2500)) : window.location.assign(e), window.setTimeout(() => {
 					typeof window < "u" && window.location.pathname === "/auth/login" && S("/dashboard");
 				}, 3500);
@@ -129,40 +130,40 @@ function S() {
 	}, [
 		S,
 		Be,
-		k
-	]), [M, qe] = m(!1), [N, P] = m(!1), [Je, F] = m(!1), [Ye, I] = m(!1), [L, R] = m(!1), [z, B] = m(!1), [Xe, Ze] = m(!1), [Qe, V] = m(!1), [$e, H] = m(null), [et, U] = m(null), [W, G] = m({
+		A
+	]), [N, Je] = p(!1), [P, F] = p(!1), [Ye, I] = p(!1), [Xe, L] = p(!1), [R, z] = p(!1), [B, V] = p(!1), [Ze, Qe] = p(!1), [$e, H] = p(!1), [et, U] = p(null), [tt, W] = p(null), [G, K] = p({
 		email: "",
 		password: "",
 		rememberMe: !1
-	}), [K, q] = m(null), [tt, J] = m(!1), Y = C.get("mode") === "add-account", X = C.get("returnTo"), Z = ce(X), Q = C.get("reason");
-	p(() => {
-		Q === "session-expired" ? U(x("auth.login.sessionExpired", "Your session has expired. Please sign in again.")) : Q === "logout" && U(x("auth.login.signedOut", "You have been signed out."));
-	}, [Q, x]), p(() => {
-		!Z.current && X && (Z.current = X);
-	}, [X]), p(() => {
-		if (Y || D || A.current || _e()) return;
-		let e = Ee();
+	}), [q, J] = p(null), [nt, Y] = p(!1), X = w.get("mode") === "add-account", Z = w.get("returnTo"), Q = de(Z), $ = w.get("reason");
+	f(() => {
+		$ === "session-expired" ? W(b("auth.login.sessionExpired", "Your session has expired. Please sign in again.")) : $ === "logout" && W(b("auth.login.signedOut", "You have been signed out."));
+	}, [$, b]), f(() => {
+		!Q.current && Z && (Q.current = Z);
+	}, [Z]), f(() => {
+		if (X || k || j.current || be()) return;
+		let e = v();
 		if (e) {
-			let t = v(e), n = y(e);
-			if (t?.accessToken && n && ke(t.accessToken)) {
-				s.getState().loadFromProfile(e), j(Ae(X) ?? T ?? "/");
+			let t = Oe(e), n = ke(e);
+			if (t?.accessToken && n && Me(t.accessToken)) {
+				s.getState().loadFromProfile(e), M(Ne(Z) ?? D ?? "/");
 				return;
 			}
 		}
-		if (a(T ?? "", window.location.origin)) return;
-		let t = ue();
-		t && (Ke(!0), window.location.replace(t));
+		if (a(D ?? "", window.location.origin)) return;
+		let t = pe();
+		t && (qe(!0), window.location.replace(t));
 	}, [
-		Y,
-		D,
-		j,
 		X,
-		T
-	]), p(() => {
+		k,
+		M,
+		Z,
+		D
+	]), f(() => {
 		try {
 			localStorage.removeItem("remembered_password");
 			let e = localStorage.getItem("remembered_email");
-			e && G((t) => ({
+			e && K((t) => ({
 				...t,
 				email: e,
 				rememberMe: !0
@@ -170,14 +171,14 @@ function S() {
 		} catch (e) {
 			console.warn("[LoginPage] Failed to load remembered email:", e);
 		}
-	}, []), p(() => {
-		let e = Me.state;
-		e?.message && U(e.message), e?.email && G((t) => ({
+	}, []), f(() => {
+		let e = C.state;
+		e?.message && W(e.message), e?.email && K((t) => ({
 			...t,
 			email: e.email
 		})), e && window.history.replaceState({}, document.title);
-	}, [Me.state]);
-	let nt = (e, t) => {
+	}, [C.state]);
+	let rt = (e, t) => {
 		if (t) switch (t) {
 			case "ACCOUNT_DELETED": return "DELETED";
 			case "ACCOUNT_SUSPENDED": return "SUSPENDED";
@@ -189,39 +190,39 @@ function S() {
 		let n = e.toLowerCase();
 		return n.includes("deleted") || n.includes("permanently deleted") ? "DELETED" : n.includes("suspended") ? "SUSPENDED" : n.includes("oauth provider") || n.includes("oauth-only") || n.includes("oauth only") ? "OAUTH_ONLY" : n.includes("inactive") || n.includes("deactivated") || n.includes("not active") ? "INACTIVE" : n.includes("verify your email") || n.includes("email not verified") || n.includes("email_not_verified") ? "EMAIL_NOT_VERIFIED" : null;
 	};
-	p(() => {
-		let e = C.get("email");
-		if (e && G((t) => ({
+	f(() => {
+		let e = w.get("email");
+		if (e && K((t) => ({
 			...t,
 			email: e
-		})), C.get("expired") === "true") {
-			U(x("auth.login.sessionExpired", "Your session has expired. Please sign in again."));
+		})), w.get("expired") === "true") {
+			W(b("auth.login.sessionExpired", "Your session has expired. Please sign in again."));
 			let e = window.location.pathname;
 			window.history.replaceState({}, document.title, e);
 		}
-	}, [C, x]), p(() => {
+	}, [w, b]), f(() => {
 		Ue && S("/auth/mfa-verify");
 	}, [Ue, S]);
-	let rt = async (e) => {
-		e.preventDefault(), P(!1), F(!1), I(!1), R(!1), B(!1), J(!1), V(!1), q(null);
-		let t = (W.email ?? "").trim();
-		if (!t) q(x("auth.login.enterEmailOrUsername", "Please enter your email or username"));
-		else if (t.includes("@") && !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(t)) q(x("auth.login.invalidEmail", "Please enter a valid email address"));
-		else if (!W.password || W.password.length < 1) q(x("auth.login.enterPassword", "Please enter your password"));
-		else if (Y && b().some((e) => e.email.toLowerCase() === t.toLowerCase())) J(!0), q(null);
+	let it = async (e) => {
+		e.preventDefault(), F(!1), I(!1), L(!1), z(!1), V(!1), Y(!1), H(!1), J(null);
+		let t = (G.email ?? "").trim();
+		if (!t) J(b("auth.login.enterEmailOrUsername", "Please enter your email or username"));
+		else if (t.includes("@") && !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(t)) J(b("auth.login.invalidEmail", "Please enter a valid email address"));
+		else if (!G.password || G.password.length < 1) J(b("auth.login.enterPassword", "Please enter your password"));
+		else if (X && _().some((e) => e.email.toLowerCase() === t.toLowerCase())) Y(!0), J(null);
 		else {
-			J(!1);
+			Y(!1);
 			try {
-				let e = await We("login"), n = await Ne({
+				let e = await We("login"), n = await Pe({
 					email: t,
-					password: W.password,
-					rememberMe: W.rememberMe,
+					password: G.password,
+					rememberMe: G.rememberMe,
 					...e ? { recaptchaToken: e } : {}
 				});
 				if (n.requiresMFA) {
-					let e = je(Z.current || X || (T ?? "/dashboard"));
+					let e = x(Q.current || Z || (D ?? "/dashboard"));
 					try {
-						sessionStorage.setItem(oe, e);
+						sessionStorage.setItem(se, e);
 					} catch {}
 					return;
 				}
@@ -237,12 +238,12 @@ function S() {
 						}
 					} catch {}
 					try {
-						W.rememberMe ? localStorage.setItem("remembered_email", t) : localStorage.removeItem("remembered_email");
+						G.rememberMe ? localStorage.setItem("remembered_email", t) : localStorage.removeItem("remembered_email");
 					} catch (e) {
 						console.warn("[LoginPage] Failed to save/clear remembered email:", e);
 					}
-					O(!0);
-					let e = je(Z.current || X || (T ?? "/dashboard"));
+					Ge(!0);
+					let e = x(Q.current || Z || (D ?? "/dashboard"));
 					try {
 						let t = await Promise.race([Le(n.token), new Promise((e) => {
 							window.setTimeout(() => {
@@ -252,279 +253,279 @@ function S() {
 								});
 							}, 5e3);
 						})]);
-						t.success ? (t.workspace && (Re(t.workspace.id), t.workspace.organizationId && ze(t.workspace.organizationId)), j(e)) : t.error?.includes("No workspaces found") ? i(e, T, window.location.origin) ? j(e) : S("/onboarding/create-workspace") : (t.workspace && (Re(t.workspace.id), t.workspace.organizationId && ze(t.workspace.organizationId)), console.warn("Auth flow warning:", t.error), j(e));
+						t.success ? (t.workspace && (Re(t.workspace.id), t.workspace.organizationId && ze(t.workspace.organizationId)), M(e)) : t.error?.includes("No workspaces found") ? i(e, D, window.location.origin) ? M(e) : S("/onboarding/create-workspace") : (t.workspace && (Re(t.workspace.id), t.workspace.organizationId && ze(t.workspace.organizationId)), console.warn("Auth flow warning:", t.error), M(e));
 					} catch (t) {
-						console.error("Auth flow error (login succeeded):", t), j(e);
+						console.error("Auth flow error (login succeeded):", t), M(e);
 					} finally {
-						A.current || O(!1);
+						j.current || Ge(!1);
 					}
 				}
 			} catch (e) {
 				let t = e instanceof Error ? e.message : String(e);
-				t.includes("reCAPTCHA") && q(t);
-				let n = s.getState().errorCode, r = nt(t, n);
-				r === "DELETED" ? F(!0) : r === "SUSPENDED" ? I(!0) : r === "OAUTH_ONLY" ? R(!0) : r === "INACTIVE" ? P(!0) : r === "EMAIL_NOT_VERIFIED" && B(!0);
+				t.includes("reCAPTCHA") && J(t);
+				let n = s.getState().errorCode, r = rt(t, n);
+				r === "DELETED" ? I(!0) : r === "SUSPENDED" ? L(!0) : r === "OAUTH_ONLY" ? z(!0) : r === "INACTIVE" ? F(!0) : r === "EMAIL_NOT_VERIFIED" && V(!0);
 			}
 		}
 	};
-	p(() => {
-		if (w) {
-			let e = nt(w, Fe);
-			e === "DELETED" ? F(!0) : e === "SUSPENDED" ? I(!0) : e === "OAUTH_ONLY" ? R(!0) : e === "INACTIVE" ? P(!0) : e === "EMAIL_NOT_VERIFIED" && B(!0);
+	f(() => {
+		if (E) {
+			let e = rt(E, Fe);
+			e === "DELETED" ? I(!0) : e === "SUSPENDED" ? L(!0) : e === "OAUTH_ONLY" ? z(!0) : e === "INACTIVE" ? F(!0) : e === "EMAIL_NOT_VERIFIED" && V(!0);
 		}
-	}, [w, Fe]);
-	let it = () => {
-		H(null);
+	}, [E, Fe]);
+	let at = () => {
+		U(null);
 		try {
 			Ve();
 		} catch (e) {
-			H(e instanceof Error ? e.message : x("auth.login.googleSignInFailed", "Failed to initiate Google sign in"));
+			U(e instanceof Error ? e.message : b("auth.login.googleSignInFailed", "Failed to initiate Google sign in"));
 		}
-	}, at = () => {
-		H(null);
+	}, ot = () => {
+		U(null);
 		try {
 			He();
 		} catch (e) {
-			H(e instanceof Error ? e.message : x("auth.login.microsoftSignInFailed", "Failed to initiate Microsoft sign in"));
+			U(e instanceof Error ? e.message : b("auth.login.microsoftSignInFailed", "Failed to initiate Microsoft sign in"));
 		}
-	}, ot = async () => {
-		Ze(!0), V(!1);
+	}, st = async () => {
+		Qe(!0), H(!1);
 		try {
-			let e = (W.email ?? "").trim();
-			(await Ie(e)).success ? V(!0) : q(x("auth.login.resendFailed", "Failed to resend verification email. Please try again."));
+			let e = (G.email ?? "").trim();
+			(await Ie(e)).success ? H(!0) : J(b("auth.login.resendFailed", "Failed to resend verification email. Please try again."));
 		} catch (e) {
-			console.error("Failed to resend verification email:", e), q(e instanceof Error ? e.message : x("auth.login.resendFailed", "Failed to resend verification email. Please try again."));
+			console.error("Failed to resend verification email:", e), J(e instanceof Error ? e.message : b("auth.login.resendFailed", "Failed to resend verification email. Please try again."));
 		} finally {
-			Ze(!1);
+			Qe(!1);
 		}
-	}, st = E("google"), $ = E("microsoft"), ct = [{
+	}, ct = O("google"), lt = O("microsoft"), ut = [{
 		name: "Google",
-		icon: re,
-		onClick: it,
-		disabled: !st,
-		tooltip: st ? void 0 : x("auth.login.googleNotConfigured", "Google sign in is not configured")
-	}, {
-		name: "Microsoft",
 		icon: d,
 		onClick: at,
-		disabled: !$,
-		tooltip: $ ? void 0 : x("auth.login.microsoftNotConfigured", "Microsoft sign in is not configured")
+		disabled: !ct,
+		tooltip: ct ? void 0 : b("auth.login.googleNotConfigured", "Google sign in is not configured")
+	}, {
+		name: "Microsoft",
+		icon: ie,
+		onClick: ot,
+		disabled: !lt,
+		tooltip: lt ? void 0 : b("auth.login.microsoftNotConfigured", "Microsoft sign in is not configured")
 	}];
-	return Ge ? /* @__PURE__ */ g(le, {}) : /* @__PURE__ */ _(l, {
-		title: x("auth.login.welcomeBack", "Welcome back"),
-		subtitle: x("auth.login.enterCredentials", "Enter your credentials to continue"),
+	return Ke ? /* @__PURE__ */ h(fe, {}) : /* @__PURE__ */ g(l, {
+		title: b("auth.login.welcomeBack", "Welcome back"),
+		subtitle: b("auth.login.enterCredentials", "Enter your credentials to continue"),
 		children: [
-			/* @__PURE__ */ g(we, {
+			/* @__PURE__ */ h(De, {
 				className: "mb-5",
-				children: x("auth.login.purpose", "Sign in to reach your workspaces, agents, and settings. Use your email and password, a social provider, or a passwordless magic link.")
+				children: b("auth.login.purpose", "Sign in to reach your workspaces, agents, and settings. Use your email and password, a social provider, or a passwordless magic link.")
 			}),
-			/* @__PURE__ */ _("form", {
-				onSubmit: rt,
+			/* @__PURE__ */ g("form", {
+				onSubmit: it,
 				className: "space-y-5",
 				children: [
-					et && /* @__PURE__ */ _("div", {
+					tt && /* @__PURE__ */ g("div", {
 						className: "flex items-start gap-3 p-4 rounded-xl border bg-status-info-bg-subtle border-status-info-border",
-						children: [/* @__PURE__ */ g("svg", {
+						children: [/* @__PURE__ */ h("svg", {
 							className: "size-5 flex-shrink-0 mt-0.5 text-text-link",
 							fill: "none",
 							viewBox: "0 0 24 24",
 							stroke: "currentColor",
-							children: /* @__PURE__ */ g("path", {
+							children: /* @__PURE__ */ h("path", {
 								strokeLinecap: "round",
 								strokeLinejoin: "round",
 								strokeWidth: 2,
 								d: "M13 16h-1v-4h-1m1-4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z"
 							})
-						}), /* @__PURE__ */ g("p", {
+						}), /* @__PURE__ */ h("p", {
 							className: "text-sm text-status-info-text",
-							children: et
+							children: tt
 						})]
 					}),
-					K && /* @__PURE__ */ _("div", {
+					q && /* @__PURE__ */ g("div", {
 						className: "flex items-start gap-3 p-4 rounded-xl border bg-status-warning-bg-subtle border-status-warning-border",
-						children: [/* @__PURE__ */ g(u, { className: "size-5 flex-shrink-0 mt-0.5 text-status-warning-text" }), /* @__PURE__ */ g("p", {
+						children: [/* @__PURE__ */ h(u, { className: "size-5 flex-shrink-0 mt-0.5 text-status-warning-text" }), /* @__PURE__ */ h("p", {
 							className: "text-sm text-status-warning-text",
-							children: K
+							children: q
 						})]
 					}),
-					tt && /* @__PURE__ */ _("div", {
+					nt && /* @__PURE__ */ g("div", {
 						className: "flex items-start gap-3 p-4 rounded-xl border bg-status-warning-bg-subtle border-status-warning-border",
-						children: [/* @__PURE__ */ g(u, { className: "size-5 flex-shrink-0 mt-0.5 text-status-warning-text" }), /* @__PURE__ */ _("div", {
+						children: [/* @__PURE__ */ h(u, { className: "size-5 flex-shrink-0 mt-0.5 text-status-warning-text" }), /* @__PURE__ */ g("div", {
 							className: "flex-1",
 							children: [
-								/* @__PURE__ */ g("p", {
+								/* @__PURE__ */ h("p", {
 									className: "text-sm font-medium text-status-warning-text",
-									children: x("auth.login.duplicateAccount", "This account is already signed in.")
+									children: b("auth.login.duplicateAccount", "This account is already signed in.")
 								}),
-								/* @__PURE__ */ g("p", {
+								/* @__PURE__ */ h("p", {
 									className: "mt-1 text-sm text-status-warning-text/80",
-									children: x("auth.login.duplicateAccountHint", "Please use a different account, or go back and switch to this account from the profile menu.")
+									children: b("auth.login.duplicateAccountHint", "Please use a different account, or go back and switch to this account from the profile menu.")
 								}),
-								(Z.current || X) && /* @__PURE__ */ _("button", {
+								(Q.current || Z) && /* @__PURE__ */ g("button", {
 									type: "button",
-									onClick: () => S(decodeURIComponent(Z.current || X || "/dashboard")),
+									onClick: () => S(decodeURIComponent(Q.current || Z || "/dashboard")),
 									className: "mt-3 inline-flex items-center gap-2 px-4 py-2.5 rounded-xl border border-status-warning-border bg-bg-surface text-status-warning-text text-sm font-medium hover:bg-status-warning-bg-subtle hover:border-status-warning-border transition-all shadow-sm",
-									children: [/* @__PURE__ */ g("svg", {
+									children: [/* @__PURE__ */ h("svg", {
 										className: "size-4",
 										fill: "none",
 										viewBox: "0 0 24 24",
 										stroke: "currentColor",
-										children: /* @__PURE__ */ g("path", {
+										children: /* @__PURE__ */ h("path", {
 											strokeLinecap: "round",
 											strokeLinejoin: "round",
 											strokeWidth: 2,
 											d: "M10 19l-7-7m0 0l7-7m-7 7h18"
 										})
-									}), x("auth.login.goBackSwitchAccount", "Go back and switch account")]
+									}), b("auth.login.goBackSwitchAccount", "Go back and switch account")]
 								})
 							]
 						})]
 					}),
-					w && !K && !tt && /* @__PURE__ */ _("div", {
-						className: `flex items-start gap-3 p-4 rounded-xl border ${N || L || z ? "bg-status-warning-bg-subtle border-status-warning-border" : "bg-status-error-bg-subtle border-status-error-border"}`,
-						children: [/* @__PURE__ */ g(u, { className: `size-5 flex-shrink-0 mt-0.5 ${N || L || z ? "text-status-warning-text" : "text-status-error-text"}` }), /* @__PURE__ */ _("div", {
+					E && !q && !nt && /* @__PURE__ */ g("div", {
+						className: `flex items-start gap-3 p-4 rounded-xl border ${P || R || B ? "bg-status-warning-bg-subtle border-status-warning-border" : "bg-status-error-bg-subtle border-status-error-border"}`,
+						children: [/* @__PURE__ */ h(u, { className: `size-5 flex-shrink-0 mt-0.5 ${P || R || B ? "text-status-warning-text" : "text-status-error-text"}` }), /* @__PURE__ */ g("div", {
 							className: "flex-1",
 							children: [
-								/* @__PURE__ */ g("p", {
-									className: `text-sm ${N || L || z ? "text-status-warning-text" : "text-status-error-text"}`,
-									children: Je ? x("auth.login.accountDeleted", "This account has been permanently deleted and cannot be recovered.") : Ye ? x("auth.login.accountSuspended", "Your account has been suspended. Please contact support for assistance.") : N ? x("auth.login.accountDeactivated", "Your account has been deactivated.") : L ? x("auth.login.oauthOnly", "This account uses OAuth sign-in. Please use Google or Microsoft to sign in.") : z ? x("auth.login.emailNotVerified", "Please verify your email before signing in. Check your inbox for the verification link.") : w
+								/* @__PURE__ */ h("p", {
+									className: `text-sm ${P || R || B ? "text-status-warning-text" : "text-status-error-text"}`,
+									children: Ye ? b("auth.login.accountDeleted", "This account has been permanently deleted and cannot be recovered.") : Xe ? b("auth.login.accountSuspended", "Your account has been suspended. Please contact support for assistance.") : P ? b("auth.login.accountDeactivated", "Your account has been deactivated.") : R ? b("auth.login.oauthOnly", "This account uses OAuth sign-in. Please use Google or Microsoft to sign in.") : B ? b("auth.login.emailNotVerified", "Please verify your email before signing in. Check your inbox for the verification link.") : E
 								}),
-								N && /* @__PURE__ */ g("button", {
+								P && /* @__PURE__ */ h("button", {
 									type: "button",
-									onClick: () => S("/auth/reactivate", { state: { email: W.email } }),
+									onClick: () => S("/auth/reactivate", { state: { email: G.email } }),
 									className: "mt-2 text-sm font-semibold text-status-warning-text hover:text-status-warning-text underline underline-offset-2",
-									children: x("auth.login.clickReactivate", "Click here to reactivate your account")
+									children: b("auth.login.clickReactivate", "Click here to reactivate your account")
 								}),
-								z && /* @__PURE__ */ g("div", {
+								B && /* @__PURE__ */ h("div", {
 									className: "mt-3",
-									children: Qe ? /* @__PURE__ */ _("div", {
+									children: $e ? /* @__PURE__ */ g("div", {
 										className: "flex items-center gap-2 text-sm text-status-success-text",
-										children: [/* @__PURE__ */ g("svg", {
+										children: [/* @__PURE__ */ h("svg", {
 											className: "size-4",
 											fill: "none",
 											viewBox: "0 0 24 24",
 											stroke: "currentColor",
-											children: /* @__PURE__ */ g("path", {
+											children: /* @__PURE__ */ h("path", {
 												strokeLinecap: "round",
 												strokeLinejoin: "round",
 												strokeWidth: 2,
 												d: "M5 13l4 4L19 7"
 											})
-										}), x("auth.login.verificationSent", "Verification email sent! Please check your inbox.")]
-									}) : /* @__PURE__ */ g("button", {
+										}), b("auth.login.verificationSent", "Verification email sent! Please check your inbox.")]
+									}) : /* @__PURE__ */ h("button", {
 										type: "button",
-										onClick: ot,
-										disabled: Xe,
+										onClick: st,
+										disabled: Ze,
 										className: "inline-flex items-center gap-2 px-4 py-2.5 rounded-xl border border-status-warning-border bg-bg-surface text-status-warning-text text-sm font-medium hover:bg-status-warning-bg-subtle hover:border-status-warning-border transition-all shadow-sm disabled:opacity-50 disabled:cursor-not-allowed",
-										children: Xe ? /* @__PURE__ */ _(h, { children: [/* @__PURE__ */ g(f, { className: "size-4 animate-spin" }), x("auth.login.sending", "Sending...")] }) : /* @__PURE__ */ _(h, { children: [/* @__PURE__ */ g("svg", {
+										children: Ze ? /* @__PURE__ */ g(m, { children: [/* @__PURE__ */ h(ae, { className: "size-4 animate-spin" }), b("auth.login.sending", "Sending...")] }) : /* @__PURE__ */ g(m, { children: [/* @__PURE__ */ h("svg", {
 											className: "size-4",
 											fill: "none",
 											viewBox: "0 0 24 24",
 											stroke: "currentColor",
-											children: /* @__PURE__ */ g("path", {
+											children: /* @__PURE__ */ h("path", {
 												strokeLinecap: "round",
 												strokeLinejoin: "round",
 												strokeWidth: 2,
 												d: "M3 8l7.89 5.26a2 2 0 002.22 0L21 8M5 19h14a2 2 0 002-2V7a2 2 0 00-2-2H5a2 2 0 00-2 2v10a2 2 0 002 2z"
 											})
-										}), x("auth.login.resendVerification", "Resend verification email")] })
+										}), b("auth.login.resendVerification", "Resend verification email")] })
 									})
 								}),
-								L && /* @__PURE__ */ _("div", {
+								R && /* @__PURE__ */ g("div", {
 									className: "mt-3 flex flex-col gap-2",
-									children: [E("google") && /* @__PURE__ */ _("button", {
+									children: [O("google") && /* @__PURE__ */ g("button", {
 										type: "button",
-										onClick: it,
+										onClick: at,
 										className: "inline-flex items-center justify-center gap-2 px-4 py-2.5 rounded-xl border border-border-default bg-bg-surface text-text-primary text-sm font-medium hover:bg-bg-canvas hover:border-border-default transition-all shadow-sm",
-										children: [/* @__PURE__ */ g(re, { className: "size-5" }), x("auth.login.signInWithGoogle", "Sign in with Google")]
-									}), E("microsoft") && /* @__PURE__ */ _("button", {
+										children: [/* @__PURE__ */ h(d, { className: "size-5" }), b("auth.login.signInWithGoogle", "Sign in with Google")]
+									}), O("microsoft") && /* @__PURE__ */ g("button", {
 										type: "button",
-										onClick: at,
+										onClick: ot,
 										className: "inline-flex items-center justify-center gap-2 px-4 py-2.5 rounded-xl border border-border-default bg-bg-surface text-text-primary text-sm font-medium hover:bg-bg-canvas hover:border-border-default transition-all shadow-sm",
-										children: [/* @__PURE__ */ g(d, { className: "size-5" }), x("auth.login.signInWithMicrosoft", "Sign in with Microsoft")]
+										children: [/* @__PURE__ */ h(ie, { className: "size-5" }), b("auth.login.signInWithMicrosoft", "Sign in with Microsoft")]
 									})]
 								})
 							]
 						})]
 					}),
-					/* @__PURE__ */ _("div", {
+					/* @__PURE__ */ g("div", {
 						className: "space-y-2",
-						children: [/* @__PURE__ */ g("label", {
+						children: [/* @__PURE__ */ h("label", {
 							htmlFor: "email",
 							className: "block text-sm font-medium text-[var(--color-text-primary)]",
-							children: x("auth.login.emailLabel", "Email")
-						}), /* @__PURE__ */ _("div", {
+							children: b("auth.login.emailLabel", "Email")
+						}), /* @__PURE__ */ g("div", {
 							className: "relative",
-							children: [/* @__PURE__ */ g("div", {
+							children: [/* @__PURE__ */ h("div", {
 								className: "absolute inset-y-0 left-0 pl-3.5 flex items-center pointer-events-none",
-								children: /* @__PURE__ */ g(ee, { className: "size-5 text-[var(--color-text-tertiary)]" })
-							}), /* @__PURE__ */ g("input", {
+								children: /* @__PURE__ */ h(ee, { className: "size-5 text-[var(--color-text-tertiary)]" })
+							}), /* @__PURE__ */ h("input", {
 								id: "email",
 								type: "email",
 								autoComplete: "email",
 								required: !0,
 								"aria-required": "true",
-								"aria-label": x("auth.login.emailLabel", "Email"),
-								value: W.email,
-								onChange: (e) => G({
-									...W,
+								"aria-label": b("auth.login.emailLabel", "Email"),
+								value: G.email,
+								onChange: (e) => K({
+									...G,
 									email: e.target.value
 								}),
 								className: "block w-full pl-[3.5rem] pr-4 py-3 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] placeholder:text-[var(--color-text-tertiary)] focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all",
-								placeholder: x("auth.login.emailPlaceholder", "you@example.com")
+								placeholder: b("auth.login.emailPlaceholder", "you@example.com")
 							})]
 						})]
 					}),
-					/* @__PURE__ */ _("div", {
+					/* @__PURE__ */ g("div", {
 						className: "space-y-2",
-						children: [/* @__PURE__ */ g("label", {
+						children: [/* @__PURE__ */ h("label", {
 							htmlFor: "password",
 							className: "block text-sm font-medium text-[var(--color-text-primary)]",
-							children: x("auth.login.passwordLabel", "Password")
-						}), /* @__PURE__ */ _("div", {
+							children: b("auth.login.passwordLabel", "Password")
+						}), /* @__PURE__ */ g("div", {
 							className: "relative",
 							children: [
-								/* @__PURE__ */ g("div", {
+								/* @__PURE__ */ h("div", {
 									className: "absolute inset-y-0 left-0 pl-3.5 flex items-center pointer-events-none",
-									children: /* @__PURE__ */ g(ie, { className: "size-5 text-[var(--color-text-tertiary)]" })
+									children: /* @__PURE__ */ h(re, { className: "size-5 text-[var(--color-text-tertiary)]" })
 								}),
-								/* @__PURE__ */ g("input", {
+								/* @__PURE__ */ h("input", {
 									id: "password",
-									type: M ? "text" : "password",
+									type: N ? "text" : "password",
 									autoComplete: "current-password",
 									required: !0,
 									"aria-required": "true",
-									"aria-label": x("auth.login.passwordLabel", "Password"),
-									value: W.password,
-									onChange: (e) => G({
-										...W,
+									"aria-label": b("auth.login.passwordLabel", "Password"),
+									value: G.password,
+									onChange: (e) => K({
+										...G,
 										password: e.target.value
 									}),
 									className: "block w-full pl-[3.5rem] pr-12 py-3 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] placeholder:text-[var(--color-text-tertiary)] focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all",
-									placeholder: x("auth.login.passwordPlaceholder", "Enter your password")
+									placeholder: b("auth.login.passwordPlaceholder", "Enter your password")
 								}),
-								/* @__PURE__ */ g("button", {
+								/* @__PURE__ */ h("button", {
 									type: "button",
-									onClick: () => qe(!M),
-									"aria-label": M ? x("auth.login.hidePassword", "Hide password") : x("auth.login.showPassword", "Show password"),
+									onClick: () => Je(!N),
+									"aria-label": N ? b("auth.login.hidePassword", "Hide password") : b("auth.login.showPassword", "Show password"),
 									className: "absolute inset-y-0 right-0 pr-3.5 flex items-center text-[var(--color-text-tertiary)] hover:text-[var(--color-text-secondary)] transition-colors",
-									children: g(M ? ne : te, { className: "size-5" })
+									children: h(N ? ne : te, { className: "size-5" })
 								})
 							]
 						})]
 					}),
-					/* @__PURE__ */ _("div", {
+					/* @__PURE__ */ g("div", {
 						className: "flex items-center justify-between",
-						children: [/* @__PURE__ */ _("label", {
+						children: [/* @__PURE__ */ g("label", {
 							htmlFor: "remember-me",
 							className: "flex items-center gap-2 cursor-pointer group",
-							children: [/* @__PURE__ */ g(Ce, {
+							children: [/* @__PURE__ */ h(Ee, {
 								id: "remember-me",
-								checked: W.rememberMe,
+								checked: G.rememberMe,
 								onCheckedChange: (e) => {
 									let t = e === !0;
-									if (G({
-										...W,
+									if (K({
+										...G,
 										rememberMe: t
 									}), !t) try {
 										localStorage.removeItem("remembered_email");
@@ -532,89 +533,89 @@ function S() {
 										console.warn("[LoginPage] Failed to clear remembered email:", e);
 									}
 								},
-								"aria-label": x("auth.login.rememberMe", "Remember me")
-							}), /* @__PURE__ */ g("span", {
+								"aria-label": b("auth.login.rememberMe", "Remember me")
+							}), /* @__PURE__ */ h("span", {
 								className: "text-sm text-[var(--color-text-secondary)] group-hover:text-[var(--color-text-primary)] transition-colors",
-								children: x("auth.login.rememberMe", "Remember me")
+								children: b("auth.login.rememberMe", "Remember me")
 							})]
-						}), /* @__PURE__ */ g("button", {
+						}), /* @__PURE__ */ h("button", {
 							type: "button",
 							onClick: () => S("/auth/reset-password"),
 							className: "text-sm font-medium text-text-link hover:text-text-linkHover transition-colors",
-							children: x("auth.login.forgotPassword", "Forgot password?")
+							children: b("auth.login.forgotPassword", "Forgot password?")
 						})]
 					}),
-					/* @__PURE__ */ g(Se, {
+					/* @__PURE__ */ h(Te, {
 						type: "submit",
-						disabled: Pe || D,
+						disabled: T || k,
 						variant: "default",
 						size: "lg",
 						className: "w-full font-semibold",
-						children: Pe || D ? /* @__PURE__ */ _(h, { children: [/* @__PURE__ */ g(f, { className: "size-5 animate-spin" }), /* @__PURE__ */ g("span", { children: D ? x("auth.login.settingUpWorkspace", "Setting up workspace...") : x("auth.login.signingIn", "Signing in...") })] }) : x("auth.login.signIn", "Sign in")
+						children: T || k ? /* @__PURE__ */ g(m, { children: [/* @__PURE__ */ h(ae, { className: "size-5 animate-spin" }), /* @__PURE__ */ h("span", { children: k ? b("auth.login.settingUpWorkspace", "Setting up workspace...") : b("auth.login.signingIn", "Signing in...") })] }) : b("auth.login.signIn", "Sign in")
 					})
 				]
 			}),
-			/* @__PURE__ */ _("div", {
+			/* @__PURE__ */ g("div", {
 				className: "relative my-8",
-				children: [/* @__PURE__ */ g("div", {
+				children: [/* @__PURE__ */ h("div", {
 					className: "absolute inset-0 flex items-center",
-					children: /* @__PURE__ */ g("div", { className: "w-full border-t border-[var(--color-border-default)]" })
-				}), /* @__PURE__ */ g("div", {
+					children: /* @__PURE__ */ h("div", { className: "w-full border-t border-[var(--color-border-default)]" })
+				}), /* @__PURE__ */ h("div", {
 					className: "relative flex justify-center",
-					children: /* @__PURE__ */ g("span", {
+					children: /* @__PURE__ */ h("span", {
 						className: "px-4 bg-[var(--color-bg-canvas)] text-sm text-[var(--color-text-tertiary)]",
-						children: x("auth.login.orContinueWith", "or continue with")
+						children: b("auth.login.orContinueWith", "or continue with")
 					})
 				})]
 			}),
-			$e && /* @__PURE__ */ _("div", {
+			et && /* @__PURE__ */ g("div", {
 				className: "flex items-start gap-3 p-4 rounded-xl border bg-status-error-bg-subtle border-status-error-border",
-				children: [/* @__PURE__ */ g(u, { className: "size-5 flex-shrink-0 mt-0.5 text-status-error-text" }), /* @__PURE__ */ g("p", {
+				children: [/* @__PURE__ */ h(u, { className: "size-5 flex-shrink-0 mt-0.5 text-status-error-text" }), /* @__PURE__ */ h("p", {
 					className: "text-sm text-status-error-text",
-					children: $e
+					children: et
 				})]
 			}),
-			/* @__PURE__ */ g("div", {
+			/* @__PURE__ */ h("div", {
 				className: "grid grid-cols-3 gap-3",
-				children: ct.map((e) => /* @__PURE__ */ _("button", {
+				children: ut.map((e) => /* @__PURE__ */ g("button", {
 					type: "button",
 					onClick: e.onClick,
 					disabled: e.disabled,
 					title: e.tooltip,
 					"aria-label": e.name,
 					className: `flex items-center justify-center gap-2 px-4 py-3 rounded-xl border transition-all duration-200 group ${e.disabled ? "border-[var(--color-border-subtle)] bg-[var(--color-bg-disabled)] cursor-not-allowed opacity-50" : "border-[var(--color-border-default)] bg-[var(--color-bg-surface)] hover:bg-[var(--color-bg-sunken)] hover:border-[var(--color-border-strong)]"}`,
-					children: [/* @__PURE__ */ g(e.icon, { className: `size-5 ${e.disabled ? "opacity-50" : ""}` }), /* @__PURE__ */ g("span", {
+					children: [/* @__PURE__ */ h(e.icon, { className: `size-5 ${e.disabled ? "opacity-50" : ""}` }), /* @__PURE__ */ h("span", {
 						className: `sr-only sm:not-sr-only text-sm font-medium transition-colors ${e.disabled ? "text-[var(--color-text-disabled)]" : "text-[var(--color-text-secondary)] group-hover:text-[var(--color-text-primary)]"}`,
 						children: e.name
 					})]
 				}, e.name))
 			}),
-			/* @__PURE__ */ g("div", {
+			/* @__PURE__ */ h("div", {
 				className: "mt-4 text-center",
-				children: /* @__PURE__ */ _("button", {
+				children: /* @__PURE__ */ g("button", {
 					type: "button",
 					onClick: () => S("/auth/magic-link"),
 					className: "text-sm text-[var(--color-text-secondary)] hover:text-[var(--color-text-primary)] transition-colors",
 					children: [
-						x("auth.login.preferPasswordless", "Prefer passwordless login?"),
+						b("auth.login.preferPasswordless", "Prefer passwordless login?"),
 						" ",
-						/* @__PURE__ */ g("span", {
+						/* @__PURE__ */ h("span", {
 							className: "font-semibold text-text-link hover:text-text-linkHover",
-							children: x("auth.login.signInMagicLink", "Sign in with Magic Link")
+							children: b("auth.login.signInMagicLink", "Sign in with Magic Link")
 						})
 					]
 				})
 			}),
-			/* @__PURE__ */ _("p", {
+			/* @__PURE__ */ g("p", {
 				className: "mt-6 text-center text-sm text-[var(--color-text-secondary)]",
 				children: [
-					x("auth.login.dontHaveAccount", "Don't have an account?"),
+					b("auth.login.dontHaveAccount", "Don't have an account?"),
 					" ",
-					/* @__PURE__ */ g("button", {
+					/* @__PURE__ */ h("button", {
 						type: "button",
-						onClick: () => S("/auth/register"),
+						onClick: () => S(ce("/auth/register", le(Z))),
 						className: "font-semibold text-text-link hover:text-text-linkHover transition-colors",
-						children: x("auth.login.signUp", "Sign up")
+						children: b("auth.login.signUp", "Sign up")
 					})
 				]
 			})