@burdenoff/microfe-auth 2026.520.2 → 2026.521.2

package/dist/auth/AuthRoot.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthRoot.d.ts","sourceRoot":"","sources":["../../src/auth/AuthRoot.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAQhC,OAAO,KAAK,EAAW,aAAa,EAAE,MAAM,SAAS,CAAC;AAGtD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,QAAQ,EAAE,EAAE,CAAC,aAAa,CA8ItC,CAAC"}
+{"version":3,"file":"AuthRoot.d.ts","sourceRoot":"","sources":["../../src/auth/AuthRoot.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAQhC,OAAO,KAAK,EAAW,aAAa,EAAE,MAAM,SAAS,CAAC;AAGtD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,QAAQ,EAAE,EAAE,CAAC,aAAa,CAgJtC,CAAC"}

package/dist/auth/AuthRoot.js

@@ -9,13 +9,13 @@ import { jsx as d } from "react/jsx-runtime";
 import { FeatureFlagProvider as f } from "@burdenoff/fe-libs/shared/feature-flags";
 //#region src/auth/AuthRoot.tsx
 var p = (p) => {
-	let { registerNavItems: m, registerFooterItems: h, basePath: g = "/", enableAdminRoutes: _ = !0 } = p, v = o(), y = i(() => g && g !== "/" ? g.endsWith("/") ? g.slice(0, -1) : g : "", [g]), b = (e, t) => (e.endsWith("/") ? e.slice(0, -1) : e) + (t.startsWith("/") ? t : `/${t}`);
+	let { registerNavItems: m, registerFooterItems: h, basePath: g = "/", enableAdminRoutes: _ = !0, bypassEnterprisePlanGate: v = !1 } = p, y = o(), b = i(() => g && g !== "/" ? g.endsWith("/") ? g.slice(0, -1) : g : "", [g]), x = (e, t) => (e.endsWith("/") ? e.slice(0, -1) : e) + (t.startsWith("/") ? t : `/${t}`);
 	return r(() => {
 		if (m) return m([
 			{
 				id: "auth-security",
 				label: "Security Settings",
-				path: b(g, "security"),
+				path: x(g, "security"),
 				icon: /* @__PURE__ */ d(u, { size: 20 }),
 				order: 10,
 				group: "auth"
@@ -23,7 +23,7 @@ var p = (p) => {
 			{
 				id: "auth-sessions",
 				label: "Active Sessions",
-				path: b(g, "sessions"),
+				path: x(g, "sessions"),
 				icon: /* @__PURE__ */ d(l, { size: 20 }),
 				order: 20,
 				group: "auth"
@@ -31,7 +31,7 @@ var p = (p) => {
 			{
 				id: "auth-mfa",
 				label: "Multi-Factor Auth",
-				path: b(g, "mfa"),
+				path: x(g, "mfa"),
 				icon: /* @__PURE__ */ d(c, { size: 20 }),
 				order: 30,
 				group: "auth"
@@ -39,7 +39,7 @@ var p = (p) => {
 			..._ ? [{
 				id: "auth-sso",
 				label: "SSO Configuration",
-				path: b(g, "sso"),
+				path: x(g, "sso"),
 				icon: /* @__PURE__ */ d(s, { size: 20 }),
 				order: 50,
 				group: "auth"
@@ -57,7 +57,7 @@ var p = (p) => {
 			order: 10,
 			section: "left"
 		}]);
-	}, [h]), i(() => y ? v.pathname === y || v.pathname.startsWith(y + "/") : !0, [y, v.pathname]) ? /* @__PURE__ */ d(a, {
+	}, [h]), i(() => b ? y.pathname === b || y.pathname.startsWith(b + "/") : !0, [b, y.pathname]) ? /* @__PURE__ */ d(a, {
 		fallback: /* @__PURE__ */ d("div", {
 			className: "p-6 text-center text-text-secondary",
 			children: "Something went wrong loading this module. Please refresh the page."
@@ -69,8 +69,9 @@ var p = (p) => {
 			children: /* @__PURE__ */ d(e, {
 				...p,
 				children: /* @__PURE__ */ d(t, { children: /* @__PURE__ */ d(n, {
-					basePath: y,
-					enableAdminRoutes: _
+					basePath: b,
+					enableAdminRoutes: _,
+					bypassEnterprisePlanGate: v
 				}) })
 			})
 		})

package/dist/auth/AuthRoot.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthRoot.js","names":[],"sources":["../../src/auth/AuthRoot.tsx"],"sourcesContent":["import type { FC } from \"react\";\nimport { useEffect, useMemo } from \"react\";\nimport { ErrorBoundary } from \"@burdenoff/fe-libs/shared/components\";\nimport { useLocation } from \"react-router-dom\";\nimport { ShieldCheck, Laptop, Key, /* Code, */ Building } from \"lucide-react\";\nimport { AuthProvider } from \"./providers/AuthProvider\";\nimport { FeatureFlagProvider } from \"@burdenoff/fe-libs/shared/feature-flags\";\nimport { CaptchaProvider } from \"./providers/CaptchaProvider\";\nimport type { NavItem, AuthRootProps } from \"./types\";\nimport { AuthRoutes } from \"./AuthRoutes\";\n\n/**\n * Root component for the Auth microfrontend.\n *\n * This is the main entry point that host applications import and render.\n * It sets up the necessary providers and renders the internal routing.\n * Automatically registers navigation items with the shell if registration functions are provided.\n *\n * @example\n * ```tsx\n * import { AuthRoot, type AuthRootProps } from '@burdenoff/microfe-auth';\n *\n * function App() {\n *   const props: AuthRootProps = {\n *     basePath: '/auth',\n *     navigate: (path) => router.push(path),\n *     apiGatewayUrl: 'http://localhost:4002',\n *     authToken: 'token',\n *     onAuthSuccess: (user) => shellLogin(user),\n *     onLogout: () => shellLogout(),\n *   };\n *\n *   return <AuthRoot {...props} />;\n * }\n * ```\n */\nexport const AuthRoot: FC<AuthRootProps> = (props) => {\n  const {\n    registerNavItems,\n    registerFooterItems,\n    basePath = \"/\",\n    enableAdminRoutes = true,\n  } = props;\n  const location = useLocation();\n\n  // Normalize basePath (remove trailing slash)\n  const normalizedBasePath = useMemo(\n    () =>\n      basePath && basePath !== \"/\"\n        ? basePath.endsWith(\"/\")\n          ? basePath.slice(0, -1)\n          : basePath\n        : \"\",\n    [basePath],\n  );\n\n  // Helper to join paths correctly, avoiding double slashes\n  const joinPath = (base: string, path: string): string => {\n    const cleanBase = base.endsWith(\"/\") ? base.slice(0, -1) : base;\n    const cleanPath = path.startsWith(\"/\") ? path : `/${path}`;\n    return cleanBase + cleanPath;\n  };\n\n  // Register navigation items with the shell\n  useEffect(() => {\n    if (!registerNavItems) return;\n\n    const navItems: NavItem[] = [\n      {\n        id: \"auth-security\",\n        label: \"Security Settings\",\n        path: joinPath(basePath, \"security\"),\n        icon: <ShieldCheck size={20} />,\n        order: 10,\n        group: \"auth\",\n      },\n      {\n        id: \"auth-sessions\",\n        label: \"Active Sessions\",\n        path: joinPath(basePath, \"sessions\"),\n        icon: <Laptop size={20} />,\n        order: 20,\n        group: \"auth\",\n      },\n      {\n        id: \"auth-mfa\",\n        label: \"Multi-Factor Auth\",\n        path: joinPath(basePath, \"mfa\"),\n        icon: <Key size={20} />,\n        order: 30,\n        group: \"auth\",\n      },\n      // Hidden — moved to Developer Portal\n      // {\n      //   id: \"auth-api-keys\",\n      //   label: \"API Keys\",\n      //   path: joinPath(basePath, \"api-keys\"),\n      //   icon: <Code size={20} />,\n      //   order: 40,\n      //   group: \"auth\",\n      // },\n      ...(enableAdminRoutes\n        ? [\n            {\n              id: \"auth-sso\",\n              label: \"SSO Configuration\",\n              path: joinPath(basePath, \"sso\"),\n              icon: <Building size={20} />,\n              order: 50,\n              group: \"auth\",\n            },\n          ]\n        : []),\n    ];\n\n    // Register and get cleanup function\n    const cleanup = registerNavItems(navItems);\n\n    // Return cleanup function to unregister on unmount\n    return cleanup;\n  }, [registerNavItems, basePath, enableAdminRoutes]);\n\n  // Register footer items (example: auth status indicator)\n  useEffect(() => {\n    if (!registerFooterItems) return;\n\n    const footerItems = [\n      {\n        id: \"auth-status\",\n        label: \"Auth Ready\",\n        type: \"status\" as const,\n        order: 10,\n        section: \"left\" as const,\n      },\n    ];\n\n    const cleanup = registerFooterItems(footerItems);\n    return cleanup;\n  }, [registerFooterItems]);\n\n  // Check if path matches - must be after all hooks\n  const pathMatches = useMemo(() => {\n    if (!normalizedBasePath) return true;\n    return (\n      location.pathname === normalizedBasePath ||\n      location.pathname.startsWith(normalizedBasePath + \"/\")\n    );\n  }, [normalizedBasePath, location.pathname]);\n\n  // Early return after all hooks are called\n  if (!pathMatches) {\n    return null;\n  }\n\n  return (\n    <ErrorBoundary\n      fallback={\n        <div className=\"p-6 text-center text-text-secondary\">\n          Something went wrong loading this module. Please refresh the page.\n        </div>\n      }\n    >\n      <FeatureFlagProvider\n        workspaceId={null}\n        gateway=\"global\"\n        defaultEnabled={true}\n      >\n        <AuthProvider {...props}>\n          <CaptchaProvider>\n            <AuthRoutes\n              basePath={normalizedBasePath}\n              enableAdminRoutes={enableAdminRoutes}\n            />\n          </CaptchaProvider>\n        </AuthProvider>\n      </FeatureFlagProvider>\n    </ErrorBoundary>\n  );\n};\n"],"mappings":";;;;;;;;;;AAoCA,IAAa,KAA+B,MAAU;CACpD,IAAM,EACJ,qBACA,wBACA,cAAW,KACX,uBAAoB,OAClB,GACE,IAAW,GAAa,EAGxB,IAAqB,QAEvB,KAAY,MAAa,MACrB,EAAS,SAAS,IAAI,GACpB,EAAS,MAAM,GAAG,GAAG,GACrB,IACF,IACN,CAAC,EAAS,CACX,EAGK,KAAY,GAAc,OACZ,EAAK,SAAS,IAAI,GAAG,EAAK,MAAM,GAAG,GAAG,GAAG,MACzC,EAAK,WAAW,IAAI,GAAG,IAAO,IAAI;AA+FtD,QA1FA,QAAgB;AACT,QAsDL,QAHgB,EAjDY;GAC1B;IACE,IAAI;IACJ,OAAO;IACP,MAAM,EAAS,GAAU,WAAW;IACpC,MAAM,kBAAC,GAAD,EAAa,MAAM,IAAM,CAAA;IAC/B,OAAO;IACP,OAAO;IACR;GACD;IACE,IAAI;IACJ,OAAO;IACP,MAAM,EAAS,GAAU,WAAW;IACpC,MAAM,kBAAC,GAAD,EAAQ,MAAM,IAAM,CAAA;IAC1B,OAAO;IACP,OAAO;IACR;GACD;IACE,IAAI;IACJ,OAAO;IACP,MAAM,EAAS,GAAU,MAAM;IAC/B,MAAM,kBAAC,GAAD,EAAK,MAAM,IAAM,CAAA;IACvB,OAAO;IACP,OAAO;IACR;GAUD,GAAI,IACA,CACE;IACE,IAAI;IACJ,OAAO;IACP,MAAM,EAAS,GAAU,MAAM;IAC/B,MAAM,kBAAC,GAAD,EAAU,MAAM,IAAM,CAAA;IAC5B,OAAO;IACP,OAAO;IACR,CACF,GACD,EAAE;GACP,CAGyC;IAIzC;EAAC;EAAkB;EAAU;EAAkB,CAAC,EAGnD,QAAgB;AACT,QAaL,QADgB,EAVI,CAClB;GACE,IAAI;GACJ,OAAO;GACP,MAAM;GACN,OAAO;GACP,SAAS;GACV,CACF,CAE+C;IAE/C,CAAC,EAAoB,CAAC,EAGL,QACb,IAEH,EAAS,aAAa,KACtB,EAAS,SAAS,WAAW,IAAqB,IAAI,GAHxB,IAK/B,CAAC,GAAoB,EAAS,SAAS,CAAC,GAQzC,kBAAC,GAAD;EACE,UACE,kBAAC,OAAD;GAAK,WAAU;aAAsC;GAE/C,CAAA;YAGR,kBAAC,GAAD;GACE,aAAa;GACb,SAAQ;GACR,gBAAgB;aAEhB,kBAAC,GAAD;IAAc,GAAI;cAChB,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;KACE,UAAU;KACS;KACnB,CAAA,EACc,CAAA;IACL,CAAA;GACK,CAAA;EACR,CAAA,GAzBT"}
+{"version":3,"file":"AuthRoot.js","names":[],"sources":["../../src/auth/AuthRoot.tsx"],"sourcesContent":["import type { FC } from \"react\";\nimport { useEffect, useMemo } from \"react\";\nimport { ErrorBoundary } from \"@burdenoff/fe-libs/shared/components\";\nimport { useLocation } from \"react-router-dom\";\nimport { ShieldCheck, Laptop, Key, /* Code, */ Building } from \"lucide-react\";\nimport { AuthProvider } from \"./providers/AuthProvider\";\nimport { FeatureFlagProvider } from \"@burdenoff/fe-libs/shared/feature-flags\";\nimport { CaptchaProvider } from \"./providers/CaptchaProvider\";\nimport type { NavItem, AuthRootProps } from \"./types\";\nimport { AuthRoutes } from \"./AuthRoutes\";\n\n/**\n * Root component for the Auth microfrontend.\n *\n * This is the main entry point that host applications import and render.\n * It sets up the necessary providers and renders the internal routing.\n * Automatically registers navigation items with the shell if registration functions are provided.\n *\n * @example\n * ```tsx\n * import { AuthRoot, type AuthRootProps } from '@burdenoff/microfe-auth';\n *\n * function App() {\n *   const props: AuthRootProps = {\n *     basePath: '/auth',\n *     navigate: (path) => router.push(path),\n *     apiGatewayUrl: 'http://localhost:4002',\n *     authToken: 'token',\n *     onAuthSuccess: (user) => shellLogin(user),\n *     onLogout: () => shellLogout(),\n *   };\n *\n *   return <AuthRoot {...props} />;\n * }\n * ```\n */\nexport const AuthRoot: FC<AuthRootProps> = (props) => {\n  const {\n    registerNavItems,\n    registerFooterItems,\n    basePath = \"/\",\n    enableAdminRoutes = true,\n    bypassEnterprisePlanGate = false,\n  } = props;\n  const location = useLocation();\n\n  // Normalize basePath (remove trailing slash)\n  const normalizedBasePath = useMemo(\n    () =>\n      basePath && basePath !== \"/\"\n        ? basePath.endsWith(\"/\")\n          ? basePath.slice(0, -1)\n          : basePath\n        : \"\",\n    [basePath],\n  );\n\n  // Helper to join paths correctly, avoiding double slashes\n  const joinPath = (base: string, path: string): string => {\n    const cleanBase = base.endsWith(\"/\") ? base.slice(0, -1) : base;\n    const cleanPath = path.startsWith(\"/\") ? path : `/${path}`;\n    return cleanBase + cleanPath;\n  };\n\n  // Register navigation items with the shell\n  useEffect(() => {\n    if (!registerNavItems) return;\n\n    const navItems: NavItem[] = [\n      {\n        id: \"auth-security\",\n        label: \"Security Settings\",\n        path: joinPath(basePath, \"security\"),\n        icon: <ShieldCheck size={20} />,\n        order: 10,\n        group: \"auth\",\n      },\n      {\n        id: \"auth-sessions\",\n        label: \"Active Sessions\",\n        path: joinPath(basePath, \"sessions\"),\n        icon: <Laptop size={20} />,\n        order: 20,\n        group: \"auth\",\n      },\n      {\n        id: \"auth-mfa\",\n        label: \"Multi-Factor Auth\",\n        path: joinPath(basePath, \"mfa\"),\n        icon: <Key size={20} />,\n        order: 30,\n        group: \"auth\",\n      },\n      // Hidden — moved to Developer Portal\n      // {\n      //   id: \"auth-api-keys\",\n      //   label: \"API Keys\",\n      //   path: joinPath(basePath, \"api-keys\"),\n      //   icon: <Code size={20} />,\n      //   order: 40,\n      //   group: \"auth\",\n      // },\n      ...(enableAdminRoutes\n        ? [\n            {\n              id: \"auth-sso\",\n              label: \"SSO Configuration\",\n              path: joinPath(basePath, \"sso\"),\n              icon: <Building size={20} />,\n              order: 50,\n              group: \"auth\",\n            },\n          ]\n        : []),\n    ];\n\n    // Register and get cleanup function\n    const cleanup = registerNavItems(navItems);\n\n    // Return cleanup function to unregister on unmount\n    return cleanup;\n  }, [registerNavItems, basePath, enableAdminRoutes]);\n\n  // Register footer items (example: auth status indicator)\n  useEffect(() => {\n    if (!registerFooterItems) return;\n\n    const footerItems = [\n      {\n        id: \"auth-status\",\n        label: \"Auth Ready\",\n        type: \"status\" as const,\n        order: 10,\n        section: \"left\" as const,\n      },\n    ];\n\n    const cleanup = registerFooterItems(footerItems);\n    return cleanup;\n  }, [registerFooterItems]);\n\n  // Check if path matches - must be after all hooks\n  const pathMatches = useMemo(() => {\n    if (!normalizedBasePath) return true;\n    return (\n      location.pathname === normalizedBasePath ||\n      location.pathname.startsWith(normalizedBasePath + \"/\")\n    );\n  }, [normalizedBasePath, location.pathname]);\n\n  // Early return after all hooks are called\n  if (!pathMatches) {\n    return null;\n  }\n\n  return (\n    <ErrorBoundary\n      fallback={\n        <div className=\"p-6 text-center text-text-secondary\">\n          Something went wrong loading this module. Please refresh the page.\n        </div>\n      }\n    >\n      <FeatureFlagProvider\n        workspaceId={null}\n        gateway=\"global\"\n        defaultEnabled={true}\n      >\n        <AuthProvider {...props}>\n          <CaptchaProvider>\n            <AuthRoutes\n              basePath={normalizedBasePath}\n              enableAdminRoutes={enableAdminRoutes}\n              bypassEnterprisePlanGate={bypassEnterprisePlanGate}\n            />\n          </CaptchaProvider>\n        </AuthProvider>\n      </FeatureFlagProvider>\n    </ErrorBoundary>\n  );\n};\n"],"mappings":";;;;;;;;;;AAoCA,IAAa,KAA+B,MAAU;CACpD,IAAM,EACJ,qBACA,wBACA,cAAW,KACX,uBAAoB,IACpB,8BAA2B,OACzB,GACE,IAAW,GAAa,EAGxB,IAAqB,QAEvB,KAAY,MAAa,MACrB,EAAS,SAAS,IAAI,GACpB,EAAS,MAAM,GAAG,GAAG,GACrB,IACF,IACN,CAAC,EAAS,CACX,EAGK,KAAY,GAAc,OACZ,EAAK,SAAS,IAAI,GAAG,EAAK,MAAM,GAAG,GAAG,GAAG,MACzC,EAAK,WAAW,IAAI,GAAG,IAAO,IAAI;AA+FtD,QA1FA,QAAgB;AACT,QAsDL,QAHgB,EAjDY;GAC1B;IACE,IAAI;IACJ,OAAO;IACP,MAAM,EAAS,GAAU,WAAW;IACpC,MAAM,kBAAC,GAAD,EAAa,MAAM,IAAM,CAAA;IAC/B,OAAO;IACP,OAAO;IACR;GACD;IACE,IAAI;IACJ,OAAO;IACP,MAAM,EAAS,GAAU,WAAW;IACpC,MAAM,kBAAC,GAAD,EAAQ,MAAM,IAAM,CAAA;IAC1B,OAAO;IACP,OAAO;IACR;GACD;IACE,IAAI;IACJ,OAAO;IACP,MAAM,EAAS,GAAU,MAAM;IAC/B,MAAM,kBAAC,GAAD,EAAK,MAAM,IAAM,CAAA;IACvB,OAAO;IACP,OAAO;IACR;GAUD,GAAI,IACA,CACE;IACE,IAAI;IACJ,OAAO;IACP,MAAM,EAAS,GAAU,MAAM;IAC/B,MAAM,kBAAC,GAAD,EAAU,MAAM,IAAM,CAAA;IAC5B,OAAO;IACP,OAAO;IACR,CACF,GACD,EAAE;GACP,CAGyC;IAIzC;EAAC;EAAkB;EAAU;EAAkB,CAAC,EAGnD,QAAgB;AACT,QAaL,QADgB,EAVI,CAClB;GACE,IAAI;GACJ,OAAO;GACP,MAAM;GACN,OAAO;GACP,SAAS;GACV,CACF,CAE+C;IAE/C,CAAC,EAAoB,CAAC,EAGL,QACb,IAEH,EAAS,aAAa,KACtB,EAAS,SAAS,WAAW,IAAqB,IAAI,GAHxB,IAK/B,CAAC,GAAoB,EAAS,SAAS,CAAC,GAQzC,kBAAC,GAAD;EACE,UACE,kBAAC,OAAD;GAAK,WAAU;aAAsC;GAE/C,CAAA;YAGR,kBAAC,GAAD;GACE,aAAa;GACb,SAAQ;GACR,gBAAgB;aAEhB,kBAAC,GAAD;IAAc,GAAI;cAChB,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;KACE,UAAU;KACS;KACO;KAC1B,CAAA,EACc,CAAA;IACL,CAAA;GACK,CAAA;EACR,CAAA,GA1BT"}

package/dist/auth/AuthRoutes.d.ts

@@ -22,8 +22,9 @@
  * - audit-log → Security audit log (protected, accessible at /auth/audit-log)
  * - sso → SSO configuration (protected, admin only, accessible at /auth/sso)
  */
-export declare function AuthRoutes({ basePath: _basePath, enableAdminRoutes, }: {
+export declare function AuthRoutes({ basePath: _basePath, enableAdminRoutes, bypassEnterprisePlanGate, }: {
     basePath?: string;
     enableAdminRoutes?: boolean;
+    bypassEnterprisePlanGate?: boolean;
 }): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=AuthRoutes.d.ts.map

package/dist/auth/AuthRoutes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthRoutes.d.ts","sourceRoot":"","sources":["../../src/auth/AuthRoutes.tsx"],"names":[],"mappings":"AAmMA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,UAAU,CAAC,EACzB,QAAQ,EAAE,SAAc,EACxB,iBAAwB,GACzB,EAAE;IACD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B,2CAgQA"}
+{"version":3,"file":"AuthRoutes.d.ts","sourceRoot":"","sources":["../../src/auth/AuthRoutes.tsx"],"names":[],"mappings":"AAmMA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,UAAU,CAAC,EACzB,QAAQ,EAAE,SAAc,EACxB,iBAAwB,EACxB,wBAAgC,GACjC,EAAE;IACD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC,2CAkQA"}

package/dist/auth/AuthRoutes.js

@@ -83,8 +83,8 @@ function z({ children: t }) {
 		replace: !0
 	});
 }
-function B({ basePath: e = "", enableAdminRoutes: c = !0 }) {
-	let l = v("auth.audit-log")?.value === !0;
+function B({ basePath: e = "", enableAdminRoutes: c = !0, bypassEnterprisePlanGate: l = !1 }) {
+	let u = v("auth.audit-log")?.value === !0;
 	return /* @__PURE__ */ g(p, { children: [
 		/* @__PURE__ */ h(f, {
 			path: "login",
@@ -177,7 +177,7 @@ function B({ basePath: e = "", enableAdminRoutes: c = !0 }) {
 			path: "security",
 			element: /* @__PURE__ */ h(z, { children: /* @__PURE__ */ h(_, {
 				flag: "auth.security",
-				defaultValue: !1,
+				defaultValue: !0,
 				children: /* @__PURE__ */ h(s, {
 					fallback: /* @__PURE__ */ h(I, {}),
 					children: /* @__PURE__ */ h(T, {})
@@ -188,7 +188,7 @@ function B({ basePath: e = "", enableAdminRoutes: c = !0 }) {
 			path: "sessions",
 			element: /* @__PURE__ */ h(z, { children: /* @__PURE__ */ h(_, {
 				flag: "auth.sessions",
-				defaultValue: !1,
+				defaultValue: !0,
 				children: /* @__PURE__ */ h(s, {
 					fallback: /* @__PURE__ */ h(I, {}),
 					children: /* @__PURE__ */ h(E, {})
@@ -199,7 +199,7 @@ function B({ basePath: e = "", enableAdminRoutes: c = !0 }) {
 			path: "mfa",
 			element: /* @__PURE__ */ h(z, { children: /* @__PURE__ */ h(_, {
 				flag: "auth.mfa",
-				defaultValue: !1,
+				defaultValue: !0,
 				children: /* @__PURE__ */ h(s, {
 					fallback: /* @__PURE__ */ h(I, {}),
 					children: /* @__PURE__ */ h(D, {})
@@ -213,7 +213,7 @@ function B({ basePath: e = "", enableAdminRoutes: c = !0 }) {
 				replace: !0
 			}) })
 		}),
-		c && l && /* @__PURE__ */ h(f, {
+		c && u && /* @__PURE__ */ h(f, {
 			path: "audit-log",
 			element: /* @__PURE__ */ h(z, { children: /* @__PURE__ */ h(_, {
 				flag: "auth.audit-log",
@@ -235,10 +235,10 @@ function B({ basePath: e = "", enableAdminRoutes: c = !0 }) {
 			path: "sso",
 			element: c ? /* @__PURE__ */ h(z, { children: /* @__PURE__ */ h(_, {
 				flag: "auth.sso",
-				defaultValue: !1,
+				defaultValue: !0,
 				children: /* @__PURE__ */ h(s, {
 					fallback: /* @__PURE__ */ h(I, {}),
-					children: /* @__PURE__ */ h(k, {})
+					children: /* @__PURE__ */ h(k, { bypassEnterprisePlanGate: l })
 				})
 			}) }) : /* @__PURE__ */ h(d, {
 				to: "/auth/login",
@@ -260,7 +260,7 @@ function B({ basePath: e = "", enableAdminRoutes: c = !0 }) {
 			path: "users",
 			element: c ? /* @__PURE__ */ h(z, { children: /* @__PURE__ */ h(_, {
 				flag: "auth.users",
-				defaultValue: !1,
+				defaultValue: !0,
 				children: /* @__PURE__ */ h(s, {
 					fallback: /* @__PURE__ */ h(I, {}),
 					children: /* @__PURE__ */ h(N, {})
@@ -274,7 +274,7 @@ function B({ basePath: e = "", enableAdminRoutes: c = !0 }) {
 			path: "users/:id",
 			element: c ? /* @__PURE__ */ h(z, { children: /* @__PURE__ */ h(_, {
 				flag: "auth.users",
-				defaultValue: !1,
+				defaultValue: !0,
 				children: /* @__PURE__ */ h(s, {
 					fallback: /* @__PURE__ */ h(I, {}),
 					children: /* @__PURE__ */ h(P, {})
@@ -288,7 +288,7 @@ function B({ basePath: e = "", enableAdminRoutes: c = !0 }) {
 			path: "profile",
 			element: /* @__PURE__ */ h(z, { children: /* @__PURE__ */ h(_, {
 				flag: "auth.profile",
-				defaultValue: !1,
+				defaultValue: !0,
 				children: /* @__PURE__ */ h(s, {
 					fallback: /* @__PURE__ */ h(I, {}),
 					children: /* @__PURE__ */ h(F, {})

package/dist/auth/AuthRoutes.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthRoutes.js","names":[],"sources":["../../src/auth/AuthRoutes.tsx"],"sourcesContent":["import { lazy, Suspense, useEffect, useState } from \"react\";\nimport {\n  useFeatureFlagDetails,\n  FeatureGate,\n} from \"@burdenoff/fe-libs/shared/feature-flags\";\nimport { Navigate, Route, Routes } from \"react-router-dom\";\nimport { useAuthStore } from \"./store/authStore\";\n\n// Eager imports - these are the most commonly accessed routes\nimport { LoginPage } from \"./pages/LoginPage\";\nimport { SessionBridgePage } from \"./pages/SessionBridgePage\";\nimport { SSORelayPage } from \"./pages/SSORelayPage\";\nimport { SSORelayCallbackPage } from \"./pages/SSORelayCallbackPage\";\nimport { SSODepositPage } from \"./pages/SSODepositPage\";\nimport { SSOClearPage } from \"./pages/SSOClearPage\";\n\n// Lazy-loaded pages - loaded on demand when their routes are accessed\nconst RegisterPage = lazy(() =>\n  import(\"./pages/RegisterPage\").then((m) => ({ default: m.RegisterPage })),\n);\nconst PasswordResetPage = lazy(() =>\n  import(\"./pages/PasswordResetPage\").then((m) => ({\n    default: m.PasswordResetPage,\n  })),\n);\nconst EmailVerifyPage = lazy(() =>\n  import(\"./pages/EmailVerifyPage\").then((m) => ({\n    default: m.EmailVerifyPage,\n  })),\n);\nconst MfaVerifyPage = lazy(() =>\n  import(\"./pages/MfaVerifyPage\").then((m) => ({ default: m.MfaVerifyPage })),\n);\nconst MagicLinkPage = lazy(() =>\n  import(\"./pages/MagicLinkPage\").then((m) => ({ default: m.MagicLinkPage })),\n);\nconst ReactivatePage = lazy(() =>\n  import(\"./pages/ReactivatePage\").then((m) => ({ default: m.ReactivatePage })),\n);\nconst SecurityPage = lazy(() =>\n  import(\"./pages/SecurityPage\").then((m) => ({ default: m.SecurityPage })),\n);\nconst SessionsPage = lazy(() =>\n  import(\"./pages/SessionsPage\").then((m) => ({ default: m.SessionsPage })),\n);\nconst MfaSetupPage = lazy(() =>\n  import(\"./pages/MfaSetupPage\").then((m) => ({ default: m.MfaSetupPage })),\n);\nconst AuditLogPage = lazy(() =>\n  import(\"./pages/AuditLogPage\").then((m) => ({ default: m.AuditLogPage })),\n);\nconst SsoConfigPage = lazy(() =>\n  import(\"./pages/SsoConfigPage\").then((m) => ({ default: m.SsoConfigPage })),\n);\nconst SsoLoginPage = lazy(() =>\n  import(\"./pages/SsoLoginPage\").then((m) => ({ default: m.SsoLoginPage })),\n);\nconst SsoCallbackPage = lazy(() =>\n  import(\"./pages/SsoCallbackPage\").then((m) => ({\n    default: m.SsoCallbackPage,\n  })),\n);\nconst OAuthCallbackPage = lazy(() =>\n  import(\"./pages/OAuthCallbackPage\").then((m) => ({\n    default: m.OAuthCallbackPage,\n  })),\n);\nconst UsersPage = lazy(() =>\n  import(\"./pages/UsersPage\").then((m) => ({ default: m.UsersPage })),\n);\nconst UserDetailsPage = lazy(() =>\n  import(\"./pages/UserDetailsPage\").then((m) => ({\n    default: m.UserDetailsPage,\n  })),\n);\nconst UserProfilePage = lazy(() =>\n  import(\"./pages/UserProfilePage\").then((m) => ({\n    default: m.UserProfilePage,\n  })),\n);\n/**\n * Simple loading fallback for lazy-loaded pages\n */\nfunction PageLoader() {\n  return (\n    <div className=\"flex min-h-[400px] items-center justify-center\">\n      <div className=\"h-8 w-8 animate-spin rounded-full border-4 border-primary border-t-transparent\" />\n    </div>\n  );\n}\n\nfunction decodeJwtExpiry(token: string): number | null {\n  try {\n    const payload = JSON.parse(\n      atob(token.split(\".\")[1].replace(/-/g, \"+\").replace(/_/g, \"/\")),\n    ) as { exp?: number };\n\n    return typeof payload.exp === \"number\" ? payload.exp * 1000 : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction getStoredSessionSnapshot(): {\n  hasValidSession: boolean;\n  expiresAt: number | null;\n} {\n  try {\n    const activeProfileId = sessionStorage.getItem(\"bf-active-profile\");\n    if (!activeProfileId) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    const tokensRaw = localStorage.getItem(`bf-p-${activeProfileId}-tokens`);\n    if (!tokensRaw) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    const tokens = JSON.parse(tokensRaw) as {\n      accessToken?: string;\n      expiresAt?: number;\n    };\n\n    if (!tokens.accessToken) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    const expiresAt =\n      typeof tokens.expiresAt === \"number\"\n        ? tokens.expiresAt\n        : decodeJwtExpiry(tokens.accessToken);\n\n    if (!expiresAt) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    return {\n      hasValidSession: expiresAt > Date.now(),\n      expiresAt,\n    };\n  } catch {\n    return { hasValidSession: false, expiresAt: null };\n  }\n}\n\n/**\n * Protected route wrapper\n */\nfunction ProtectedRoute({ children }: { children: React.ReactNode }) {\n  const isAuthenticated = useAuthStore((state) => state.isAuthenticated);\n  const clearAuth = useAuthStore((state) => state.clearAuth);\n  const [sessionCheckVersion, setSessionCheckVersion] = useState(0);\n  const sessionSnapshot = getStoredSessionSnapshot();\n\n  useEffect(() => {\n    const handleSessionUpdate = () => {\n      setSessionCheckVersion((value) => value + 1);\n    };\n\n    window.addEventListener(\"bf-profile-storage-change\", handleSessionUpdate);\n    window.addEventListener(\"storage\", handleSessionUpdate);\n\n    return () => {\n      window.removeEventListener(\n        \"bf-profile-storage-change\",\n        handleSessionUpdate,\n      );\n      window.removeEventListener(\"storage\", handleSessionUpdate);\n    };\n  }, []);\n\n  useEffect(() => {\n    if (!sessionSnapshot.expiresAt) return;\n\n    const timeoutMs = Math.max(sessionSnapshot.expiresAt - Date.now(), 0) + 50;\n    const timer = window.setTimeout(() => {\n      setSessionCheckVersion((value) => value + 1);\n    }, timeoutMs);\n\n    return () => window.clearTimeout(timer);\n  }, [sessionSnapshot.expiresAt, sessionCheckVersion]);\n\n  useEffect(() => {\n    if (isAuthenticated && !sessionSnapshot.hasValidSession) {\n      clearAuth();\n    }\n  }, [clearAuth, isAuthenticated, sessionSnapshot.hasValidSession]);\n\n  if (!sessionSnapshot.hasValidSession) {\n    return <Navigate to=\"/auth/login\" replace />;\n  }\n\n  return <>{children}</>;\n}\n\n/**\n * Internal router for the Auth microfrontend.\n * This component handles routing within the microfrontend using React Router v7.\n *\n * When used within a parent route (e.g., <Route path=\"/auth/*\">), all paths are relative:\n * - login → Login page (accessible at /auth/login)\n * - register → Registration page (accessible at /auth/register)\n * - reset-password → Password reset page (accessible at /auth/reset-password)\n * - verify-email → Email verification page (accessible at /auth/verify-email)\n * - mfa-verify → MFA verification page (accessible at /auth/mfa-verify)\n * - magic-link → Magic link authentication page (accessible at /auth/magic-link)\n * - sso/login → SSO login page (accessible at /auth/sso/login)\n * - sso/callback → SSO callback handler (accessible at /auth/sso/callback)\n * - oauth/callback → OAuth callback handler (accessible at /auth/oauth/callback)\n * - security → Security settings (protected, accessible at /auth/security)\n * - sessions → Active sessions (protected, accessible at /auth/sessions)\n * - mfa → MFA setup (protected, accessible at /auth/mfa)\n * - api-keys → API keys management (protected, accessible at /auth/api-keys)\n * - apps → Legacy redirect to Developer Portal app creation\n * - users → Users management (protected, admin only, accessible at /auth/users)\n * - profile → User profile page (protected, accessible at /auth/profile)\n * - audit-log → Security audit log (protected, accessible at /auth/audit-log)\n * - sso → SSO configuration (protected, admin only, accessible at /auth/sso)\n */\nexport function AuthRoutes({\n  basePath: _basePath = \"\",\n  enableAdminRoutes = true,\n}: {\n  basePath?: string;\n  enableAdminRoutes?: boolean;\n}) {\n  // Note: basePath is kept for backwards compatibility but not used in route paths\n  // since React Router v7 uses relative paths when nested inside a parent <Route>\n  const auditLogFlag = useFeatureFlagDetails(\"auth.audit-log\");\n  const showAuditLog = auditLogFlag?.value === true;\n  return (\n    <Routes>\n      {/* Public routes (no auth required) */}\n      {/* LoginPage is eager-loaded as it's the most common entry point */}\n      <Route path=\"login\" element={<LoginPage />} />\n      <Route\n        path=\"register\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <RegisterPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"reset-password\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <PasswordResetPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"verify-email\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <EmailVerifyPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"mfa-verify\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <MfaVerifyPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"magic-link\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <MagicLinkPage />\n          </Suspense>\n        }\n      />\n\n      {/* SSO routes (public) */}\n      <Route\n        path=\"sso/login\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <SsoLoginPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"sso/callback\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <SsoCallbackPage />\n          </Suspense>\n        }\n      />\n\n      {/* OAuth callback route (public) */}\n      <Route\n        path=\"oauth/callback\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <OAuthCallbackPage />\n          </Suspense>\n        }\n      />\n\n      {/* Account reactivation (public) */}\n      <Route\n        path=\"reactivate\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <ReactivatePage />\n          </Suspense>\n        }\n      />\n\n      {/* Session bridge (public - embedded as hidden iframe by other app shells) */}\n      <Route path=\"session-bridge\" element={<SessionBridgePage />} />\n\n      {/* Cross-domain SSO relay (reads local tokens, redirects with them to target) */}\n      <Route path=\"sso-relay\" element={<SSORelayPage />} />\n\n      {/* Cross-domain SSO callback (receives tokens from relay, stores locally) */}\n      <Route path=\"sso-callback\" element={<SSORelayCallbackPage />} />\n\n      {/* Cross-domain SSO deposit (bridge host receives tokens on top-level\n          redirect right after login on a product origin, writes first-party\n          localStorage on the bridge origin so other products can discover\n          the session). */}\n      <Route path=\"sso-deposit\" element={<SSODepositPage />} />\n\n      {/* Cross-domain SLO clear (bridge host clears its central session on\n          top-level redirect from a product origin's logout). */}\n      <Route path=\"sso-clear\" element={<SSOClearPage />} />\n\n      {/* Protected routes (auth required) */}\n      <Route\n        path=\"security\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.security\" defaultValue={false}>\n              <Suspense fallback={<PageLoader />}>\n                <SecurityPage />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      <Route\n        path=\"sessions\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.sessions\" defaultValue={false}>\n              <Suspense fallback={<PageLoader />}>\n                <SessionsPage />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      <Route\n        path=\"mfa\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.mfa\" defaultValue={false}>\n              <Suspense fallback={<PageLoader />}>\n                <MfaSetupPage />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      <Route\n        path=\"api-keys\"\n        element={\n          <ProtectedRoute>\n            <Navigate to=\"/devportal/api-keys\" replace />\n          </ProtectedRoute>\n        }\n      />\n      {enableAdminRoutes && showAuditLog && (\n        <Route\n          path=\"audit-log\"\n          element={\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.audit-log\" defaultValue={false}>\n                <Suspense fallback={<PageLoader />}>\n                  <AuditLogPage />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          }\n        />\n      )}\n      {!enableAdminRoutes && (\n        <Route\n          path=\"audit-log\"\n          element={<Navigate to=\"/auth/login\" replace />}\n        />\n      )}\n      <Route\n        path=\"sso\"\n        element={\n          enableAdminRoutes ? (\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.sso\" defaultValue={false}>\n                <Suspense fallback={<PageLoader />}>\n                  <SsoConfigPage />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          ) : (\n            <Navigate to=\"/auth/login\" replace />\n          )\n        }\n      />\n      <Route\n        path=\"apps\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.apps\" defaultValue={false}>\n              <Navigate to=\"/devportal/apps\" replace />\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      <Route\n        path=\"users\"\n        element={\n          enableAdminRoutes ? (\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.users\" defaultValue={false}>\n                <Suspense fallback={<PageLoader />}>\n                  <UsersPage />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          ) : (\n            <Navigate to=\"/auth/login\" replace />\n          )\n        }\n      />\n      <Route\n        path=\"users/:id\"\n        element={\n          enableAdminRoutes ? (\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.users\" defaultValue={false}>\n                <Suspense fallback={<PageLoader />}>\n                  <UserDetailsPage />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          ) : (\n            <Navigate to=\"/auth/login\" replace />\n          )\n        }\n      />\n      <Route\n        path=\"profile\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.profile\" defaultValue={false}>\n              <Suspense fallback={<PageLoader />}>\n                <UserProfilePage />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      <Route\n        path=\"delegations\"\n        element={\n          <ProtectedRoute>\n            <Navigate to=\"/devportal/delegations\" replace />\n          </ProtectedRoute>\n        }\n      />\n\n      {/* Default redirect - when visiting /auth or /auth/ with no subpath */}\n      <Route index element={<Navigate to=\"login\" replace />} />\n    </Routes>\n  );\n}\n"],"mappings":";;;;;;;;;;;;AAiBA,IAAM,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAoB,QACxB,OAAO,gCAA6B,MAAM,OAAO,EAC/C,SAAS,EAAE,mBACZ,EAAE,CACJ,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ,EACK,IAAgB,QACpB,OAAO,4BAAyB,MAAM,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAC5E,EACK,IAAgB,QACpB,OAAO,4BAAyB,MAAM,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAC5E,EACK,IAAiB,QACrB,OAAO,6BAA0B,MAAM,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAC9E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAgB,QACpB,OAAO,4BAAyB,MAAM,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAC5E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ,EACK,IAAoB,QACxB,OAAO,gCAA6B,MAAM,OAAO,EAC/C,SAAS,EAAE,mBACZ,EAAE,CACJ,EACK,IAAY,QAChB,OAAO,wBAAqB,MAAM,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CACpE,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ;AAID,SAAS,IAAa;AACpB,QACE,kBAAC,OAAD;EAAK,WAAU;YACb,kBAAC,OAAD,EAAK,WAAU,kFAAmF,CAAA;EAC9F,CAAA;;AAIV,SAAS,EAAgB,GAA8B;AACrD,KAAI;EACF,IAAM,IAAU,KAAK,MACnB,KAAK,EAAM,MAAM,IAAI,CAAC,GAAG,QAAQ,MAAM,IAAI,CAAC,QAAQ,MAAM,IAAI,CAAC,CAChE;AAED,SAAO,OAAO,EAAQ,OAAQ,WAAW,EAAQ,MAAM,MAAO;SACxD;AACN,SAAO;;;AAIX,SAAS,IAGP;AACA,KAAI;EACF,IAAM,IAAkB,eAAe,QAAQ,oBAAoB;AACnE,MAAI,CAAC,EACH,QAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;EAGpD,IAAM,IAAY,aAAa,QAAQ,QAAQ,EAAgB,SAAS;AACxE,MAAI,CAAC,EACH,QAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;EAGpD,IAAM,IAAS,KAAK,MAAM,EAAU;AAKpC,MAAI,CAAC,EAAO,YACV,QAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;EAGpD,IAAM,IACJ,OAAO,EAAO,aAAc,WACxB,EAAO,YACP,EAAgB,EAAO,YAAY;AAMzC,SAJK,IAIE;GACL,iBAAiB,IAAY,KAAK,KAAK;GACvC;GACD,GANQ;GAAE,iBAAiB;GAAO,WAAW;GAAM;SAO9C;AACN,SAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;;;AAOtD,SAAS,EAAe,EAAE,eAA2C;CACnE,IAAM,IAAkB,GAAc,MAAU,EAAM,gBAAgB,EAChE,IAAY,GAAc,MAAU,EAAM,UAAU,EACpD,CAAC,GAAqB,KAA0B,EAAS,EAAE,EAC3D,IAAkB,GAA0B;AAwClD,QAtCA,QAAgB;EACd,IAAM,UAA4B;AAChC,MAAwB,MAAU,IAAQ,EAAE;;AAM9C,SAHA,OAAO,iBAAiB,6BAA6B,EAAoB,EACzE,OAAO,iBAAiB,WAAW,EAAoB,QAE1C;AAKX,GAJA,OAAO,oBACL,6BACA,EACD,EACD,OAAO,oBAAoB,WAAW,EAAoB;;IAE3D,EAAE,CAAC,EAEN,QAAgB;AACd,MAAI,CAAC,EAAgB,UAAW;EAEhC,IAAM,IAAY,KAAK,IAAI,EAAgB,YAAY,KAAK,KAAK,EAAE,EAAE,GAAG,IAClE,IAAQ,OAAO,iBAAiB;AACpC,MAAwB,MAAU,IAAQ,EAAE;KAC3C,EAAU;AAEb,eAAa,OAAO,aAAa,EAAM;IACtC,CAAC,EAAgB,WAAW,EAAoB,CAAC,EAEpD,QAAgB;AACd,EAAI,KAAmB,CAAC,EAAgB,mBACtC,GAAW;IAEZ;EAAC;EAAW;EAAiB,EAAgB;EAAgB,CAAC,EAE5D,EAAgB,kBAId,kBAAA,GAAA,EAAG,aAAY,CAAA,GAHb,kBAAC,GAAD;EAAU,IAAG;EAAc,SAAA;EAAU,CAAA;;AA8BhD,SAAgB,EAAW,EACzB,UAAU,IAAY,IACtB,uBAAoB,MAInB;CAID,IAAM,IADe,EAAsB,iBAAiB,EACzB,UAAU;AAC7C,QACE,kBAAC,GAAD,EAAA,UAAA;EAGE,kBAAC,GAAD;GAAO,MAAK;GAAQ,SAAS,kBAAC,GAAD,EAAa,CAAA;GAAI,CAAA;EAC9C,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAgB,CAAA;IACP,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAqB,CAAA;IACZ,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAmB,CAAA;IACV,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAiB,CAAA;IACR,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAiB,CAAA;IACR,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAgB,CAAA;IACP,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAmB,CAAA;IACV,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAqB,CAAA;IACZ,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAkB,CAAA;IACT,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GAAO,MAAK;GAAiB,SAAS,kBAAC,GAAD,EAAqB,CAAA;GAAI,CAAA;EAG/D,kBAAC,GAAD;GAAO,MAAK;GAAY,SAAS,kBAAC,GAAD,EAAgB,CAAA;GAAI,CAAA;EAGrD,kBAAC,GAAD;GAAO,MAAK;GAAe,SAAS,kBAAC,GAAD,EAAwB,CAAA;GAAI,CAAA;EAMhE,kBAAC,GAAD;GAAO,MAAK;GAAc,SAAS,kBAAC,GAAD,EAAkB,CAAA;GAAI,CAAA;EAIzD,kBAAC,GAAD;GAAO,MAAK;GAAY,SAAS,kBAAC,GAAD,EAAgB,CAAA;GAAI,CAAA;EAGrD,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAgB,cAAc;cAC9C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAgB,CAAA;KACP,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAgB,cAAc;cAC9C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAgB,CAAA;KACP,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAW,cAAc;cACzC,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAgB,CAAA;KACP,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAU,IAAG;IAAsB,SAAA;IAAU,CAAA,EAC9B,CAAA;GAEnB,CAAA;EACD,KAAqB,KACpB,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAiB,cAAc;cAC/C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAgB,CAAA;KACP,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EAEH,CAAC,KACA,kBAAC,GAAD;GACE,MAAK;GACL,SAAS,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAC9C,CAAA;EAEJ,kBAAC,GAAD;GACE,MAAK;GACL,SACE,IACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAW,cAAc;cACzC,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAiB,CAAA;KACR,CAAA;IACC,CAAA,EACC,CAAA,GAEjB,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAGzC,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAY,cAAc;cAC1C,kBAAC,GAAD;KAAU,IAAG;KAAkB,SAAA;KAAU,CAAA;IAC7B,CAAA,EACC,CAAA;GAEnB,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,IACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAa,cAAc;cAC3C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAa,CAAA;KACJ,CAAA;IACC,CAAA,EACC,CAAA,GAEjB,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAGzC,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,IACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAa,cAAc;cAC3C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAmB,CAAA;KACV,CAAA;IACC,CAAA,EACC,CAAA,GAEjB,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAGzC,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAe,cAAc;cAC7C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAmB,CAAA;KACV,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAU,IAAG;IAAyB,SAAA;IAAU,CAAA,EACjC,CAAA;GAEnB,CAAA;EAGF,kBAAC,GAAD;GAAO,OAAA;GAAM,SAAS,kBAAC,GAAD;IAAU,IAAG;IAAQ,SAAA;IAAU,CAAA;GAAI,CAAA;EAClD,EAAA,CAAA"}
+{"version":3,"file":"AuthRoutes.js","names":[],"sources":["../../src/auth/AuthRoutes.tsx"],"sourcesContent":["import { lazy, Suspense, useEffect, useState } from \"react\";\nimport {\n  useFeatureFlagDetails,\n  FeatureGate,\n} from \"@burdenoff/fe-libs/shared/feature-flags\";\nimport { Navigate, Route, Routes } from \"react-router-dom\";\nimport { useAuthStore } from \"./store/authStore\";\n\n// Eager imports - these are the most commonly accessed routes\nimport { LoginPage } from \"./pages/LoginPage\";\nimport { SessionBridgePage } from \"./pages/SessionBridgePage\";\nimport { SSORelayPage } from \"./pages/SSORelayPage\";\nimport { SSORelayCallbackPage } from \"./pages/SSORelayCallbackPage\";\nimport { SSODepositPage } from \"./pages/SSODepositPage\";\nimport { SSOClearPage } from \"./pages/SSOClearPage\";\n\n// Lazy-loaded pages - loaded on demand when their routes are accessed\nconst RegisterPage = lazy(() =>\n  import(\"./pages/RegisterPage\").then((m) => ({ default: m.RegisterPage })),\n);\nconst PasswordResetPage = lazy(() =>\n  import(\"./pages/PasswordResetPage\").then((m) => ({\n    default: m.PasswordResetPage,\n  })),\n);\nconst EmailVerifyPage = lazy(() =>\n  import(\"./pages/EmailVerifyPage\").then((m) => ({\n    default: m.EmailVerifyPage,\n  })),\n);\nconst MfaVerifyPage = lazy(() =>\n  import(\"./pages/MfaVerifyPage\").then((m) => ({ default: m.MfaVerifyPage })),\n);\nconst MagicLinkPage = lazy(() =>\n  import(\"./pages/MagicLinkPage\").then((m) => ({ default: m.MagicLinkPage })),\n);\nconst ReactivatePage = lazy(() =>\n  import(\"./pages/ReactivatePage\").then((m) => ({ default: m.ReactivatePage })),\n);\nconst SecurityPage = lazy(() =>\n  import(\"./pages/SecurityPage\").then((m) => ({ default: m.SecurityPage })),\n);\nconst SessionsPage = lazy(() =>\n  import(\"./pages/SessionsPage\").then((m) => ({ default: m.SessionsPage })),\n);\nconst MfaSetupPage = lazy(() =>\n  import(\"./pages/MfaSetupPage\").then((m) => ({ default: m.MfaSetupPage })),\n);\nconst AuditLogPage = lazy(() =>\n  import(\"./pages/AuditLogPage\").then((m) => ({ default: m.AuditLogPage })),\n);\nconst SsoConfigPage = lazy(() =>\n  import(\"./pages/SsoConfigPage\").then((m) => ({ default: m.SsoConfigPage })),\n);\nconst SsoLoginPage = lazy(() =>\n  import(\"./pages/SsoLoginPage\").then((m) => ({ default: m.SsoLoginPage })),\n);\nconst SsoCallbackPage = lazy(() =>\n  import(\"./pages/SsoCallbackPage\").then((m) => ({\n    default: m.SsoCallbackPage,\n  })),\n);\nconst OAuthCallbackPage = lazy(() =>\n  import(\"./pages/OAuthCallbackPage\").then((m) => ({\n    default: m.OAuthCallbackPage,\n  })),\n);\nconst UsersPage = lazy(() =>\n  import(\"./pages/UsersPage\").then((m) => ({ default: m.UsersPage })),\n);\nconst UserDetailsPage = lazy(() =>\n  import(\"./pages/UserDetailsPage\").then((m) => ({\n    default: m.UserDetailsPage,\n  })),\n);\nconst UserProfilePage = lazy(() =>\n  import(\"./pages/UserProfilePage\").then((m) => ({\n    default: m.UserProfilePage,\n  })),\n);\n/**\n * Simple loading fallback for lazy-loaded pages\n */\nfunction PageLoader() {\n  return (\n    <div className=\"flex min-h-[400px] items-center justify-center\">\n      <div className=\"h-8 w-8 animate-spin rounded-full border-4 border-primary border-t-transparent\" />\n    </div>\n  );\n}\n\nfunction decodeJwtExpiry(token: string): number | null {\n  try {\n    const payload = JSON.parse(\n      atob(token.split(\".\")[1].replace(/-/g, \"+\").replace(/_/g, \"/\")),\n    ) as { exp?: number };\n\n    return typeof payload.exp === \"number\" ? payload.exp * 1000 : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction getStoredSessionSnapshot(): {\n  hasValidSession: boolean;\n  expiresAt: number | null;\n} {\n  try {\n    const activeProfileId = sessionStorage.getItem(\"bf-active-profile\");\n    if (!activeProfileId) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    const tokensRaw = localStorage.getItem(`bf-p-${activeProfileId}-tokens`);\n    if (!tokensRaw) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    const tokens = JSON.parse(tokensRaw) as {\n      accessToken?: string;\n      expiresAt?: number;\n    };\n\n    if (!tokens.accessToken) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    const expiresAt =\n      typeof tokens.expiresAt === \"number\"\n        ? tokens.expiresAt\n        : decodeJwtExpiry(tokens.accessToken);\n\n    if (!expiresAt) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    return {\n      hasValidSession: expiresAt > Date.now(),\n      expiresAt,\n    };\n  } catch {\n    return { hasValidSession: false, expiresAt: null };\n  }\n}\n\n/**\n * Protected route wrapper\n */\nfunction ProtectedRoute({ children }: { children: React.ReactNode }) {\n  const isAuthenticated = useAuthStore((state) => state.isAuthenticated);\n  const clearAuth = useAuthStore((state) => state.clearAuth);\n  const [sessionCheckVersion, setSessionCheckVersion] = useState(0);\n  const sessionSnapshot = getStoredSessionSnapshot();\n\n  useEffect(() => {\n    const handleSessionUpdate = () => {\n      setSessionCheckVersion((value) => value + 1);\n    };\n\n    window.addEventListener(\"bf-profile-storage-change\", handleSessionUpdate);\n    window.addEventListener(\"storage\", handleSessionUpdate);\n\n    return () => {\n      window.removeEventListener(\n        \"bf-profile-storage-change\",\n        handleSessionUpdate,\n      );\n      window.removeEventListener(\"storage\", handleSessionUpdate);\n    };\n  }, []);\n\n  useEffect(() => {\n    if (!sessionSnapshot.expiresAt) return;\n\n    const timeoutMs = Math.max(sessionSnapshot.expiresAt - Date.now(), 0) + 50;\n    const timer = window.setTimeout(() => {\n      setSessionCheckVersion((value) => value + 1);\n    }, timeoutMs);\n\n    return () => window.clearTimeout(timer);\n  }, [sessionSnapshot.expiresAt, sessionCheckVersion]);\n\n  useEffect(() => {\n    if (isAuthenticated && !sessionSnapshot.hasValidSession) {\n      clearAuth();\n    }\n  }, [clearAuth, isAuthenticated, sessionSnapshot.hasValidSession]);\n\n  if (!sessionSnapshot.hasValidSession) {\n    return <Navigate to=\"/auth/login\" replace />;\n  }\n\n  return <>{children}</>;\n}\n\n/**\n * Internal router for the Auth microfrontend.\n * This component handles routing within the microfrontend using React Router v7.\n *\n * When used within a parent route (e.g., <Route path=\"/auth/*\">), all paths are relative:\n * - login → Login page (accessible at /auth/login)\n * - register → Registration page (accessible at /auth/register)\n * - reset-password → Password reset page (accessible at /auth/reset-password)\n * - verify-email → Email verification page (accessible at /auth/verify-email)\n * - mfa-verify → MFA verification page (accessible at /auth/mfa-verify)\n * - magic-link → Magic link authentication page (accessible at /auth/magic-link)\n * - sso/login → SSO login page (accessible at /auth/sso/login)\n * - sso/callback → SSO callback handler (accessible at /auth/sso/callback)\n * - oauth/callback → OAuth callback handler (accessible at /auth/oauth/callback)\n * - security → Security settings (protected, accessible at /auth/security)\n * - sessions → Active sessions (protected, accessible at /auth/sessions)\n * - mfa → MFA setup (protected, accessible at /auth/mfa)\n * - api-keys → API keys management (protected, accessible at /auth/api-keys)\n * - apps → Legacy redirect to Developer Portal app creation\n * - users → Users management (protected, admin only, accessible at /auth/users)\n * - profile → User profile page (protected, accessible at /auth/profile)\n * - audit-log → Security audit log (protected, accessible at /auth/audit-log)\n * - sso → SSO configuration (protected, admin only, accessible at /auth/sso)\n */\nexport function AuthRoutes({\n  basePath: _basePath = \"\",\n  enableAdminRoutes = true,\n  bypassEnterprisePlanGate = false,\n}: {\n  basePath?: string;\n  enableAdminRoutes?: boolean;\n  bypassEnterprisePlanGate?: boolean;\n}) {\n  // Note: basePath is kept for backwards compatibility but not used in route paths\n  // since React Router v7 uses relative paths when nested inside a parent <Route>\n  const auditLogFlag = useFeatureFlagDetails(\"auth.audit-log\");\n  const showAuditLog = auditLogFlag?.value === true;\n  return (\n    <Routes>\n      {/* Public routes (no auth required) */}\n      {/* LoginPage is eager-loaded as it's the most common entry point */}\n      <Route path=\"login\" element={<LoginPage />} />\n      <Route\n        path=\"register\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <RegisterPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"reset-password\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <PasswordResetPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"verify-email\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <EmailVerifyPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"mfa-verify\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <MfaVerifyPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"magic-link\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <MagicLinkPage />\n          </Suspense>\n        }\n      />\n\n      {/* SSO routes (public) */}\n      <Route\n        path=\"sso/login\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <SsoLoginPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"sso/callback\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <SsoCallbackPage />\n          </Suspense>\n        }\n      />\n\n      {/* OAuth callback route (public) */}\n      <Route\n        path=\"oauth/callback\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <OAuthCallbackPage />\n          </Suspense>\n        }\n      />\n\n      {/* Account reactivation (public) */}\n      <Route\n        path=\"reactivate\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <ReactivatePage />\n          </Suspense>\n        }\n      />\n\n      {/* Session bridge (public - embedded as hidden iframe by other app shells) */}\n      <Route path=\"session-bridge\" element={<SessionBridgePage />} />\n\n      {/* Cross-domain SSO relay (reads local tokens, redirects with them to target) */}\n      <Route path=\"sso-relay\" element={<SSORelayPage />} />\n\n      {/* Cross-domain SSO callback (receives tokens from relay, stores locally) */}\n      <Route path=\"sso-callback\" element={<SSORelayCallbackPage />} />\n\n      {/* Cross-domain SSO deposit (bridge host receives tokens on top-level\n          redirect right after login on a product origin, writes first-party\n          localStorage on the bridge origin so other products can discover\n          the session). */}\n      <Route path=\"sso-deposit\" element={<SSODepositPage />} />\n\n      {/* Cross-domain SLO clear (bridge host clears its central session on\n          top-level redirect from a product origin's logout). */}\n      <Route path=\"sso-clear\" element={<SSOClearPage />} />\n\n      {/* Protected routes (auth required) */}\n      <Route\n        path=\"security\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.security\" defaultValue={true}>\n              <Suspense fallback={<PageLoader />}>\n                <SecurityPage />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      <Route\n        path=\"sessions\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.sessions\" defaultValue={true}>\n              <Suspense fallback={<PageLoader />}>\n                <SessionsPage />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      <Route\n        path=\"mfa\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.mfa\" defaultValue={true}>\n              <Suspense fallback={<PageLoader />}>\n                <MfaSetupPage />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      <Route\n        path=\"api-keys\"\n        element={\n          <ProtectedRoute>\n            <Navigate to=\"/devportal/api-keys\" replace />\n          </ProtectedRoute>\n        }\n      />\n      {enableAdminRoutes && showAuditLog && (\n        <Route\n          path=\"audit-log\"\n          element={\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.audit-log\" defaultValue={false}>\n                <Suspense fallback={<PageLoader />}>\n                  <AuditLogPage />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          }\n        />\n      )}\n      {!enableAdminRoutes && (\n        <Route\n          path=\"audit-log\"\n          element={<Navigate to=\"/auth/login\" replace />}\n        />\n      )}\n      <Route\n        path=\"sso\"\n        element={\n          enableAdminRoutes ? (\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.sso\" defaultValue={true}>\n                <Suspense fallback={<PageLoader />}>\n                  <SsoConfigPage\n                    bypassEnterprisePlanGate={bypassEnterprisePlanGate}\n                  />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          ) : (\n            <Navigate to=\"/auth/login\" replace />\n          )\n        }\n      />\n      <Route\n        path=\"apps\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.apps\" defaultValue={false}>\n              <Navigate to=\"/devportal/apps\" replace />\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      <Route\n        path=\"users\"\n        element={\n          enableAdminRoutes ? (\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.users\" defaultValue={true}>\n                <Suspense fallback={<PageLoader />}>\n                  <UsersPage />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          ) : (\n            <Navigate to=\"/auth/login\" replace />\n          )\n        }\n      />\n      <Route\n        path=\"users/:id\"\n        element={\n          enableAdminRoutes ? (\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.users\" defaultValue={true}>\n                <Suspense fallback={<PageLoader />}>\n                  <UserDetailsPage />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          ) : (\n            <Navigate to=\"/auth/login\" replace />\n          )\n        }\n      />\n      <Route\n        path=\"profile\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.profile\" defaultValue={true}>\n              <Suspense fallback={<PageLoader />}>\n                <UserProfilePage />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      <Route\n        path=\"delegations\"\n        element={\n          <ProtectedRoute>\n            <Navigate to=\"/devportal/delegations\" replace />\n          </ProtectedRoute>\n        }\n      />\n\n      {/* Default redirect - when visiting /auth or /auth/ with no subpath */}\n      <Route index element={<Navigate to=\"login\" replace />} />\n    </Routes>\n  );\n}\n"],"mappings":";;;;;;;;;;;;AAiBA,IAAM,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAoB,QACxB,OAAO,gCAA6B,MAAM,OAAO,EAC/C,SAAS,EAAE,mBACZ,EAAE,CACJ,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ,EACK,IAAgB,QACpB,OAAO,4BAAyB,MAAM,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAC5E,EACK,IAAgB,QACpB,OAAO,4BAAyB,MAAM,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAC5E,EACK,IAAiB,QACrB,OAAO,6BAA0B,MAAM,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAC9E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAgB,QACpB,OAAO,4BAAyB,MAAM,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAC5E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ,EACK,IAAoB,QACxB,OAAO,gCAA6B,MAAM,OAAO,EAC/C,SAAS,EAAE,mBACZ,EAAE,CACJ,EACK,IAAY,QAChB,OAAO,wBAAqB,MAAM,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CACpE,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ;AAID,SAAS,IAAa;AACpB,QACE,kBAAC,OAAD;EAAK,WAAU;YACb,kBAAC,OAAD,EAAK,WAAU,kFAAmF,CAAA;EAC9F,CAAA;;AAIV,SAAS,EAAgB,GAA8B;AACrD,KAAI;EACF,IAAM,IAAU,KAAK,MACnB,KAAK,EAAM,MAAM,IAAI,CAAC,GAAG,QAAQ,MAAM,IAAI,CAAC,QAAQ,MAAM,IAAI,CAAC,CAChE;AAED,SAAO,OAAO,EAAQ,OAAQ,WAAW,EAAQ,MAAM,MAAO;SACxD;AACN,SAAO;;;AAIX,SAAS,IAGP;AACA,KAAI;EACF,IAAM,IAAkB,eAAe,QAAQ,oBAAoB;AACnE,MAAI,CAAC,EACH,QAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;EAGpD,IAAM,IAAY,aAAa,QAAQ,QAAQ,EAAgB,SAAS;AACxE,MAAI,CAAC,EACH,QAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;EAGpD,IAAM,IAAS,KAAK,MAAM,EAAU;AAKpC,MAAI,CAAC,EAAO,YACV,QAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;EAGpD,IAAM,IACJ,OAAO,EAAO,aAAc,WACxB,EAAO,YACP,EAAgB,EAAO,YAAY;AAMzC,SAJK,IAIE;GACL,iBAAiB,IAAY,KAAK,KAAK;GACvC;GACD,GANQ;GAAE,iBAAiB;GAAO,WAAW;GAAM;SAO9C;AACN,SAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;;;AAOtD,SAAS,EAAe,EAAE,eAA2C;CACnE,IAAM,IAAkB,GAAc,MAAU,EAAM,gBAAgB,EAChE,IAAY,GAAc,MAAU,EAAM,UAAU,EACpD,CAAC,GAAqB,KAA0B,EAAS,EAAE,EAC3D,IAAkB,GAA0B;AAwClD,QAtCA,QAAgB;EACd,IAAM,UAA4B;AAChC,MAAwB,MAAU,IAAQ,EAAE;;AAM9C,SAHA,OAAO,iBAAiB,6BAA6B,EAAoB,EACzE,OAAO,iBAAiB,WAAW,EAAoB,QAE1C;AAKX,GAJA,OAAO,oBACL,6BACA,EACD,EACD,OAAO,oBAAoB,WAAW,EAAoB;;IAE3D,EAAE,CAAC,EAEN,QAAgB;AACd,MAAI,CAAC,EAAgB,UAAW;EAEhC,IAAM,IAAY,KAAK,IAAI,EAAgB,YAAY,KAAK,KAAK,EAAE,EAAE,GAAG,IAClE,IAAQ,OAAO,iBAAiB;AACpC,MAAwB,MAAU,IAAQ,EAAE;KAC3C,EAAU;AAEb,eAAa,OAAO,aAAa,EAAM;IACtC,CAAC,EAAgB,WAAW,EAAoB,CAAC,EAEpD,QAAgB;AACd,EAAI,KAAmB,CAAC,EAAgB,mBACtC,GAAW;IAEZ;EAAC;EAAW;EAAiB,EAAgB;EAAgB,CAAC,EAE5D,EAAgB,kBAId,kBAAA,GAAA,EAAG,aAAY,CAAA,GAHb,kBAAC,GAAD;EAAU,IAAG;EAAc,SAAA;EAAU,CAAA;;AA8BhD,SAAgB,EAAW,EACzB,UAAU,IAAY,IACtB,uBAAoB,IACpB,8BAA2B,MAK1B;CAID,IAAM,IADe,EAAsB,iBAAiB,EACzB,UAAU;AAC7C,QACE,kBAAC,GAAD,EAAA,UAAA;EAGE,kBAAC,GAAD;GAAO,MAAK;GAAQ,SAAS,kBAAC,GAAD,EAAa,CAAA;GAAI,CAAA;EAC9C,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAgB,CAAA;IACP,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAqB,CAAA;IACZ,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAmB,CAAA;IACV,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAiB,CAAA;IACR,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAiB,CAAA;IACR,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAgB,CAAA;IACP,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAmB,CAAA;IACV,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAqB,CAAA;IACZ,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAkB,CAAA;IACT,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GAAO,MAAK;GAAiB,SAAS,kBAAC,GAAD,EAAqB,CAAA;GAAI,CAAA;EAG/D,kBAAC,GAAD;GAAO,MAAK;GAAY,SAAS,kBAAC,GAAD,EAAgB,CAAA;GAAI,CAAA;EAGrD,kBAAC,GAAD;GAAO,MAAK;GAAe,SAAS,kBAAC,GAAD,EAAwB,CAAA;GAAI,CAAA;EAMhE,kBAAC,GAAD;GAAO,MAAK;GAAc,SAAS,kBAAC,GAAD,EAAkB,CAAA;GAAI,CAAA;EAIzD,kBAAC,GAAD;GAAO,MAAK;GAAY,SAAS,kBAAC,GAAD,EAAgB,CAAA;GAAI,CAAA;EAGrD,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAgB,cAAc;cAC9C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAgB,CAAA;KACP,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAgB,cAAc;cAC9C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAgB,CAAA;KACP,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAW,cAAc;cACzC,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAgB,CAAA;KACP,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAU,IAAG;IAAsB,SAAA;IAAU,CAAA,EAC9B,CAAA;GAEnB,CAAA;EACD,KAAqB,KACpB,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAiB,cAAc;cAC/C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAgB,CAAA;KACP,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EAEH,CAAC,KACA,kBAAC,GAAD;GACE,MAAK;GACL,SAAS,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAC9C,CAAA;EAEJ,kBAAC,GAAD;GACE,MAAK;GACL,SACE,IACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAW,cAAc;cACzC,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAC4B,6BAC1B,CAAA;KACO,CAAA;IACC,CAAA,EACC,CAAA,GAEjB,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAGzC,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAY,cAAc;cAC1C,kBAAC,GAAD;KAAU,IAAG;KAAkB,SAAA;KAAU,CAAA;IAC7B,CAAA,EACC,CAAA;GAEnB,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,IACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAa,cAAc;cAC3C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAa,CAAA;KACJ,CAAA;IACC,CAAA,EACC,CAAA,GAEjB,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAGzC,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,IACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAa,cAAc;cAC3C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAmB,CAAA;KACV,CAAA;IACC,CAAA,EACC,CAAA,GAEjB,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAGzC,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAe,cAAc;cAC7C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAmB,CAAA;KACV,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAU,IAAG;IAAyB,SAAA;IAAU,CAAA,EACjC,CAAA;GAEnB,CAAA;EAGF,kBAAC,GAAD;GAAO,OAAA;GAAM,SAAS,kBAAC,GAAD;IAAU,IAAG;IAAQ,SAAA;IAAU,CAAA;GAAI,CAAA;EAClD,EAAA,CAAA"}

package/dist/auth/pages/AuditLogPage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuditLogPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/AuditLogPage.tsx"],"names":[],"mappings":"AAaA;;;;;;;;;GASG;AACH,wBAAgB,YAAY,4CA2Q3B"}
+{"version":3,"file":"AuditLogPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/AuditLogPage.tsx"],"names":[],"mappings":"AAcA;;;;;;;;;GASG;AACH,wBAAgB,YAAY,4CA4Q3B"}

package/dist/auth/pages/AuditLogPage.js

@@ -6,23 +6,24 @@ import { useState as a } from "react";
 import { useI18n as o } from "@burdenoff/fe-libs/shared/providers/shell";
 import { Fragment as s, jsx as c, jsxs as l } from "react/jsx-runtime";
 import { useFeatureFlagDetails as u } from "@burdenoff/fe-libs/shared/feature-flags";
+import { useGatewayClient as d } from "@burdenoff/fe-libs/shared/graphql";
 //#region src/auth/pages/AuditLogPage.tsx
-var d = 20;
-function f() {
-	let { t: f } = o(), p = (e, t) => {
-		let n = f(e);
+var f = 20;
+function p() {
+	let { t: p } = o(), m = (e, t) => {
+		let n = p(e);
 		return n === e ? t : n;
-	}, [m, h] = a(1), g = (m - 1) * d, _ = u("auth.audit-log")?.value === !0, { data: v, loading: y, error: b } = e({
-		skip: !_,
+	}, [h, g] = a(1), _ = (h - 1) * f, v = u("auth.audit-log")?.value === !0, { data: y, loading: b, error: x } = e({
+		skip: !v,
 		fetchPolicy: "cache-and-network",
 		variables: { pagination: {
-			limit: d,
-			offset: g
+			limit: f,
+			offset: _
 		} }
-	}), x = v?.authAuditLogs ?? [], S = x.length === d, [C, { loading: w }] = i(), [T, E] = a(null), D = async () => {
-		E(null);
+	}), S = y?.authAuditLogs ?? [], C = S.length === f, [w, { loading: T }] = i({ client: d("workspace") }), [E, D] = a(null), O = async () => {
+		D(null);
 		try {
-			await C({ variables: { input: {
+			await w({ variables: { input: {
 				name: "Audit Log Export",
 				entityTypes: ["permission_audit_logs"],
 				format: "CSV",
@@ -30,9 +31,9 @@ function f() {
 				includeMetadata: !0
 			} } });
 		} catch (e) {
-			E(e instanceof Error ? e.message : "Failed to start export");
+			D(e instanceof Error ? e.message : "Failed to start export");
 		}
-	}, O = (e) => {
+	}, k = (e) => {
 		switch (e) {
 			case "LOGIN_SUCCESS": return "OK";
 			case "LOGIN_FAILURE": return "ER";
@@ -44,24 +45,24 @@ function f() {
 			default: return "AU";
 		}
 	};
-	return _ ? /* @__PURE__ */ l("div", {
+	return v ? /* @__PURE__ */ l("div", {
 		className: "max-w-4xl mx-auto p-6",
 		children: [
 			/* @__PURE__ */ l("div", {
 				className: "flex items-center justify-between mb-8",
 				children: [/* @__PURE__ */ c("h1", {
 					className: "text-3xl font-semibold text-text-primary",
-					children: p("auth.auditLog.title", "Security Audit Log")
+					children: m("auth.auditLog.title", "Security Audit Log")
 				}), /* @__PURE__ */ c("button", {
 					type: "button",
-					onClick: () => void D(),
-					disabled: w,
-					"aria-label": p("auth.auditLog.exportAriaLabel", "Export audit log"),
+					onClick: () => void O(),
+					disabled: T,
+					"aria-label": m("auth.auditLog.exportAriaLabel", "Export audit log"),
 					className: "flex items-center gap-2 px-4 py-2.5 rounded-xl border border-border-default text-text-primary bg-bg-surface hover:bg-bg-sunken disabled:opacity-50 disabled:cursor-not-allowed transition-colors font-medium",
-					children: w ? /* @__PURE__ */ l(s, { children: [/* @__PURE__ */ c(n, {
+					children: T ? /* @__PURE__ */ l(s, { children: [/* @__PURE__ */ c(n, {
 						className: "w-4 h-4 animate-spin",
 						"aria-hidden": "true"
-					}), p("auth.auditLog.exporting", "Exporting...")] }) : /* @__PURE__ */ l(s, { children: [/* @__PURE__ */ c("svg", {
+					}), m("auth.auditLog.exporting", "Exporting...")] }) : /* @__PURE__ */ l(s, { children: [/* @__PURE__ */ c("svg", {
 						className: "w-4 h-4",
 						fill: "none",
 						viewBox: "0 0 24 24",
@@ -73,10 +74,10 @@ function f() {
 							strokeWidth: 2,
 							d: "M4 16v1a3 3 0 003 3h10a3 3 0 003-3v-1m-4-4l-4 4m0 0l-4-4m4 4V4"
 						})
-					}), p("auth.auditLog.export", "Export")] })
+					}), m("auth.auditLog.export", "Export")] })
 				})]
 			}),
-			T && /* @__PURE__ */ l("div", {
+			E && /* @__PURE__ */ l("div", {
 				role: "alert",
 				className: "mb-6 flex items-start gap-3 p-4 rounded-xl bg-status-error-bg-subtle border border-status-error-border",
 				children: [/* @__PURE__ */ c(t, {
@@ -84,10 +85,10 @@ function f() {
 					"aria-hidden": "true"
 				}), /* @__PURE__ */ c("p", {
 					className: "text-sm text-status-error-text",
-					children: T
+					children: E
 				})]
 			}),
-			y ? /* @__PURE__ */ l("div", {
+			b ? /* @__PURE__ */ l("div", {
 				"aria-live": "polite",
 				"aria-busy": "true",
 				className: "text-center py-12",
@@ -96,27 +97,27 @@ function f() {
 					"aria-hidden": "true"
 				}), /* @__PURE__ */ c("p", {
 					className: "mt-3 text-text-secondary",
-					children: p("auth.auditLog.loading", "Loading audit events...")
+					children: m("auth.auditLog.loading", "Loading audit events...")
 				})]
-			}) : b ? /* @__PURE__ */ c("div", {
+			}) : x ? /* @__PURE__ */ c("div", {
 				role: "alert",
 				className: "text-center py-12 border border-status-error-border rounded-xl bg-status-error-bg-subtle",
 				children: /* @__PURE__ */ c("p", {
 					className: "text-status-error-text",
-					children: p("auth.auditLog.error", "Unable to load audit events")
+					children: m("auth.auditLog.error", "Unable to load audit events")
 				})
-			}) : x.length === 0 ? /* @__PURE__ */ c("div", {
+			}) : S.length === 0 ? /* @__PURE__ */ c("div", {
 				className: "text-center py-12",
 				role: "status",
 				children: /* @__PURE__ */ c("p", {
 					className: "text-text-secondary",
-					children: p("auth.auditLog.noEvents", "No security events recorded")
+					children: m("auth.auditLog.noEvents", "No security events recorded")
 				})
 			}) : /* @__PURE__ */ l(s, { children: [/* @__PURE__ */ c("div", {
 				className: "space-y-4",
 				"aria-live": "polite",
-				"aria-busy": y,
-				children: x.map((e) => /* @__PURE__ */ c("div", {
+				"aria-busy": b,
+				children: S.map((e) => /* @__PURE__ */ c("div", {
 					className: "p-6 rounded-xl border border-border-subtle bg-bg-surface shadow-sm",
 					children: /* @__PURE__ */ l("div", {
 						className: "flex items-start gap-4",
@@ -124,7 +125,7 @@ function f() {
 							/* @__PURE__ */ c("div", {
 								className: "flex h-10 w-10 shrink-0 items-center justify-center rounded-full bg-bg-muted text-xs font-semibold text-text-secondary",
 								"aria-hidden": "true",
-								children: O(e.action)
+								children: k(e.action)
 							}),
 							/* @__PURE__ */ l("div", {
 								className: "flex-1",
@@ -142,44 +143,44 @@ function f() {
 									}),
 									/* @__PURE__ */ l("p", {
 										className: "text-sm text-text-secondary",
-										children: [e.description ?? p("auth.auditLog.defaultDescription", "Authentication event"), e.ipAddress && ` • ${e.ipAddress}`]
+										children: [e.description ?? m("auth.auditLog.defaultDescription", "Authentication event"), e.ipAddress && ` • ${e.ipAddress}`]
 									})
 								]
 							}),
 							e.action.includes("FAILURE") && /* @__PURE__ */ c("span", {
 								role: "status",
 								className: "px-3 py-1 rounded-full bg-status-error-bg-subtle text-status-error-text text-sm font-medium",
-								children: p("auth.auditLog.failed", "Failed")
+								children: m("auth.auditLog.failed", "Failed")
 							})
 						]
 					})
 				}, e.id))
 			}), /* @__PURE__ */ l("nav", {
-				"aria-label": p("auth.auditLog.paginationAriaLabel", "Audit log pagination"),
+				"aria-label": m("auth.auditLog.paginationAriaLabel", "Audit log pagination"),
 				className: "mt-6 flex items-center justify-between",
 				children: [/* @__PURE__ */ l("p", {
 					className: "text-sm text-text-secondary",
 					children: [
-						p("auth.auditLog.page", "Page"),
+						m("auth.auditLog.page", "Page"),
 						" ",
-						m
+						h
 					]
 				}), /* @__PURE__ */ l("div", {
 					className: "flex gap-2",
 					children: [/* @__PURE__ */ c("button", {
 						type: "button",
-						onClick: () => h((e) => Math.max(1, e - 1)),
-						disabled: m === 1,
-						"aria-label": p("auth.auditLog.previousPageAriaLabel", "Go to previous page"),
+						onClick: () => g((e) => Math.max(1, e - 1)),
+						disabled: h === 1,
+						"aria-label": m("auth.auditLog.previousPageAriaLabel", "Go to previous page"),
 						className: "px-4 py-2 rounded-lg border border-border-default text-text-primary bg-bg-surface disabled:opacity-50 disabled:cursor-not-allowed hover:bg-bg-sunken transition-colors",
-						children: p("auth.auditLog.previous", "Previous")
+						children: m("auth.auditLog.previous", "Previous")
 					}), /* @__PURE__ */ c("button", {
 						type: "button",
-						onClick: () => h((e) => e + 1),
-						disabled: !S,
-						"aria-label": p("auth.auditLog.nextPageAriaLabel", "Go to next page"),
+						onClick: () => g((e) => e + 1),
+						disabled: !C,
+						"aria-label": m("auth.auditLog.nextPageAriaLabel", "Go to next page"),
 						className: "px-4 py-2 rounded-lg border border-border-default text-text-primary bg-bg-surface disabled:opacity-50 disabled:cursor-not-allowed hover:bg-bg-sunken transition-colors",
-						children: p("auth.auditLog.next", "Next")
+						children: m("auth.auditLog.next", "Next")
 					})]
 				})]
 			})] })
@@ -198,17 +199,17 @@ function f() {
 				}),
 				/* @__PURE__ */ c("h2", {
 					className: "text-xl font-semibold text-text-primary mb-2",
-					children: p("auth.auditLog.notAvailable", "Page Not Available")
+					children: m("auth.auditLog.notAvailable", "Page Not Available")
 				}),
 				/* @__PURE__ */ c("p", {
 					className: "text-text-secondary",
-					children: p("auth.auditLog.notEnabled", "The Security Audit Log is not enabled for your account.")
+					children: m("auth.auditLog.notEnabled", "The Security Audit Log is not enabled for your account.")
 				})
 			]
 		})
 	});
 }
 //#endregion
-export { f as AuditLogPage };
+export { p as AuditLogPage };
 
 //# sourceMappingURL=AuditLogPage.js.map