@burdenoff/microfe-auth 2026.523.1 → 2026.525.1

package/dist/auth/constants/permissions.d.ts

@@ -1,30 +0,0 @@
-/**
- * Auth Permission Constants
- *
- * Permission strings matching the @rbac directives on global-auth-svc.
- * Only covers admin-facing operations — public auth flows (login, signup,
- * password reset, MFA verify, OAuth, SSO) don't need RBAC.
- * Self-service operations (own profile, sessions, API keys) are identity-scoped.
- *
- * Resource types and actions from global-rbac-svc seed:
- *   user:       read, update, delete
- *   app:        read, create, update
- *   sso-config: manage, delete
- *   oidc-config: manage, delete
- *   auth-method: update
- */
-export declare const AUTH_PERMISSIONS: {
-    readonly USER_READ: "user:read";
-    readonly USER_UPDATE: "user:update";
-    readonly USER_DELETE: "user:delete";
-    readonly APP_READ: "app:read";
-    readonly APP_CREATE: "app:create";
-    readonly APP_UPDATE: "app:update";
-    readonly SSO_CONFIG_MANAGE: "sso-config:manage";
-    readonly SSO_CONFIG_DELETE: "sso-config:delete";
-    readonly OIDC_CONFIG_MANAGE: "oidc-config:manage";
-    readonly OIDC_CONFIG_DELETE: "oidc-config:delete";
-    readonly AUTH_METHOD_UPDATE: "auth-method:update";
-};
-export type AuthPermission = (typeof AUTH_PERMISSIONS)[keyof typeof AUTH_PERMISSIONS];
-//# sourceMappingURL=permissions.d.ts.map

package/dist/auth/constants/permissions.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../src/auth/constants/permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;CAqBnB,CAAC;AAEX,MAAM,MAAM,cAAc,GACxB,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/auth/constants/sessionKeys.d.ts

@@ -1,18 +0,0 @@
-/**
- * sessionStorage key constants for auth flows.
- * Centralizing these avoids silent key mismatches across files.
- */
-export declare const MFA_CHALLENGE_ID = "mfa_challenge_id";
-export declare const MFA_PENDING_TOKEN = "mfa_pending_token";
-export declare const MFA_PENDING_REFRESH = "mfa_pending_refresh";
-export declare const MFA_REDIRECT = "mfa_redirect";
-export declare const OIDC_CODE_VERIFIER = "oidc_code_verifier";
-export declare const OIDC_STATE = "oidc_state";
-export declare const OIDC_NONCE = "oidc_nonce";
-export declare const OIDC_TENANT_ID = "oidc_tenant_id";
-export declare const OIDC_FLOW = "oidc_flow";
-export declare const OIDC_REDIRECT = "oidc_redirect";
-export declare const OIDC_CLIENT_ID = "oidc_client_id";
-export declare const MFA_SESSION_KEYS: readonly ["mfa_challenge_id", "mfa_pending_token", "mfa_pending_refresh", "mfa_redirect"];
-export declare const OIDC_SESSION_KEYS: readonly ["oidc_code_verifier", "oidc_state", "oidc_nonce", "oidc_tenant_id", "oidc_flow", "oidc_redirect"];
-//# sourceMappingURL=sessionKeys.d.ts.map

package/dist/auth/constants/sessionKeys.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sessionKeys.d.ts","sourceRoot":"","sources":["../../../src/auth/constants/sessionKeys.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AACnD,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AACrD,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AACzD,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAG3C,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,eAAO,MAAM,UAAU,eAAe,CAAC;AACvC,eAAO,MAAM,UAAU,eAAe,CAAC;AACvC,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAC/C,eAAO,MAAM,SAAS,cAAc,CAAC;AACrC,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAC7C,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAG/C,eAAO,MAAM,gBAAgB,2FAKnB,CAAC;AAEX,eAAO,MAAM,iBAAiB,6GAOpB,CAAC"}

package/dist/auth/hooks/index.d.ts

@@ -1,18 +0,0 @@
-export { useAuthOperations } from './useAuthOperations';
-export { useMfaOperations } from './useMfaOperations';
-export { usePasswordOperations } from './usePasswordOperations';
-export { useSessionOperations } from './useSessionOperations';
-export { useApiKeyOperations } from './useApiKeyOperations';
-export { useAppOperations } from './useAppOperations';
-export { useWorkspaceOperations } from './useWorkspaceOperations';
-export { useMyWorkspaces } from './useMyWorkspaces';
-export { useContextSwitcherData, useWorkspaceSyncEffect, useProjectSyncEffect, } from './useContextSwitcherData';
-export type { UseContextSwitcherDataOptions } from './useContextSwitcherData';
-export { useDelegationOperations } from './useDelegationOperations';
-export { useUserOperations } from './useUserOperations';
-export { useSsoOperations } from './useSsoOperations';
-export { useOAuthOperations } from './useOAuthOperations';
-export { useAccountOperations } from './useAccountOperations';
-export { useAuthPermissions } from './useAuthPermissions';
-export { useAuthStore } from '../store/authStore';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/hooks/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAG9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAG5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGpD,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAG9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAGpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAG9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/auth/hooks/useAccountOperations.d.ts

@@ -1,19 +0,0 @@
-import { AuthResult } from '../types';
-
-export interface AccountActionResult {
-    success: boolean;
-    message: string;
-}
-/**
- * Hook for account management operations (deactivate, delete, reactivate)
- */
-export declare function useAccountOperations(): {
-    deactivateAccount: (password: string) => Promise<AccountActionResult>;
-    deleteAccount: (password: string, confirmPhrase: string) => Promise<AccountActionResult>;
-    reactivateAccount: (email: string, password: string) => Promise<AuthResult>;
-    isDeactivating: boolean;
-    isDeleting: boolean;
-    isReactivating: boolean;
-    isLoading: boolean;
-};
-//# sourceMappingURL=useAccountOperations.d.ts.map

package/dist/auth/hooks/useAccountOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useAccountOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useAccountOperations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAqC3C,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD;;GAEG;AACH,wBAAgB,oBAAoB;kCAqBtB,MAAM,KACf,OAAO,CAAC,mBAAmB,CAAC;8BAyBnB,MAAM,iBACD,MAAM,KACpB,OAAO,CAAC,mBAAmB,CAAC;+BA8BtB,MAAM,YACH,MAAM,KACf,OAAO,CAAC,UAAU,CAAC;;;;;EAuCvB"}

package/dist/auth/hooks/useApiKeyOperations.d.ts

@@ -1,26 +0,0 @@
-import { GenerateAPIKeyInput, APIKeyResult, APIKeyRotateResult, AuthResult, ApiKey } from '../types';
-
-interface MyApiKeysResponse {
-    myApiKeys: {
-        apiKeys: ApiKey[];
-        hasMore: boolean;
-        totalCount: number;
-    };
-}
-/**
- * Hook for API key operations
- */
-export declare function useApiKeyOperations(): {
-    generateAPIKey: (input: GenerateAPIKeyInput) => Promise<APIKeyResult>;
-    revokeAPIKey: (keyId: string) => Promise<boolean>;
-    rotateAPIKey: (keyId: string) => Promise<APIKeyRotateResult>;
-    authenticateAPIKey: (apiKey: string, apiSecret: string) => Promise<AuthResult>;
-    refetchApiKeys: () => Promise<void> | import("@apollo/client").ObservableQuery.ResultPromise<import("@apollo/client").ApolloClient.QueryResult<MyApiKeysResponse>>;
-    createApiKey: (input: GenerateAPIKeyInput) => Promise<APIKeyResult>;
-    revokeApiKey: (keyId: string) => Promise<boolean>;
-    apiKeys: ApiKey[];
-    isLoading: boolean;
-    error: import('@apollo/client').ErrorLike | undefined;
-};
-export {};
-//# sourceMappingURL=useApiKeyOperations.d.ts.map

package/dist/auth/hooks/useApiKeyOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useApiKeyOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useApiKeyOperations.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,mBAAmB,EACnB,YAAY,EACZ,kBAAkB,EAClB,UAAU,EACV,MAAM,EACP,MAAM,UAAU,CAAC;AAGlB,UAAU,iBAAiB;IACzB,SAAS,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CACxE;AAoBD;;GAEG;AACH,wBAAgB,mBAAmB;4BAwDxB,mBAAmB,KACzB,OAAO,CAAC,YAAY,CAAC;0BAuBW,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;0BAgBzB,MAAM,KAAG,OAAO,CAAC,kBAAkB,CAAC;iCAqB7D,MAAM,aACH,MAAM,KAChB,OAAO,CAAC,UAAU,CAAC;;0BA/Db,mBAAmB,KACzB,OAAO,CAAC,YAAY,CAAC;0BAuBW,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;;;;EA0E7D"}

package/dist/auth/hooks/useAppOperations.d.ts

@@ -1,30 +0,0 @@
-import { App, AppCreateResponse, CreateAppInput, UpdateAppInput, AppTokenResponse, AppAsUserTokenResponse } from '../types';
-
-interface CurrentUserAppsResponse {
-    currentUserApps: {
-        apps: App[];
-        hasMore: boolean;
-        totalCount: number;
-    };
-}
-/**
- * Hook for app management operations
- */
-export declare function useAppOperations(): {
-    getApp: (id: string) => Promise<App | null>;
-    refetchApps: () => Promise<void> | import("@apollo/client").ObservableQuery.ResultPromise<import("@apollo/client").ApolloClient.QueryResult<CurrentUserAppsResponse>>;
-    createApp: (input: CreateAppInput) => Promise<AppCreateResponse>;
-    updateApp: (id: string, input: UpdateAppInput) => Promise<App>;
-    deactivateApp: (id: string) => Promise<boolean>;
-    rotateAppSecret: (id: string) => Promise<AppCreateResponse>;
-    authenticateApp: (clientId: string, clientSecret: string, scopes?: string[]) => Promise<AppTokenResponse>;
-    generateAppToken: (clientId: string, clientSecret: string, scopes?: string[]) => Promise<AppTokenResponse>;
-    generateAppAsUserToken: (targetUserId: string, scopes?: string[]) => Promise<AppAsUserTokenResponse>;
-    exchangeToken: (appId: string, userId: string, scopes?: string[]) => Promise<AppAsUserTokenResponse>;
-    apps: App[];
-    currentApp: App | null;
-    isLoading: boolean;
-    error: import('@apollo/client').ErrorLike | undefined;
-};
-export {};
-//# sourceMappingURL=useAppOperations.d.ts.map

package/dist/auth/hooks/useAppOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useAppOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useAppOperations.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,GAAG,EACH,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,UAAU,CAAC;AAMlB,UAAU,uBAAuB;IAC/B,eAAe,EAAE;QAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CACxE;AAoCD;;GAEG;AACH,wBAAgB,gBAAgB;iBA4EJ,MAAM,KAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;;uBAU7C,cAAc,KACpB,OAAO,CAAC,iBAAiB,CAAC;oBA2BA,MAAM,SAAS,cAAc,KAAG,OAAO,CAAC,GAAG,CAAC;wBA2BxC,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;0BAuBvB,MAAM,KAAG,OAAO,CAAC,iBAAiB,CAAC;gCAwB1D,MAAM,gBACF,MAAM,WACX,MAAM,EAAE,KAChB,OAAO,CAAC,gBAAgB,CAAC;iCAwBhB,MAAM,gBACF,MAAM,WACX,MAAM,EAAE,KAChB,OAAO,CAAC,gBAAgB,CAAC;2CAwBZ,MAAM,WACX,MAAM,EAAE,KAChB,OAAO,CAAC,sBAAsB,CAAC;2BAwBzB,MAAM,UACL,MAAM,WACL,MAAM,EAAE,KAChB,OAAO,CAAC,sBAAsB,CAAC;;;;;EAuCnC"}

package/dist/auth/hooks/useAuthOperations.d.ts

@@ -1,57 +0,0 @@
-import { SignInInput, SignUpInput, User, AuthPayload, AuthResult } from '../types';
-
-interface CurrentUserResponse {
-    currentUser: User | null;
-}
-interface UseAuthOperationsOptions {
-    disableCurrentUserQuery?: boolean;
-}
-/**
- * Hook for authentication operations
- * Uses Zustand v5 pattern: selectors for state, getState() for actions
- */
-export declare function useAuthOperations(options?: UseAuthOperationsOptions): {
-    signIn: (input: SignInInput) => Promise<AuthResult>;
-    signUp: (input: SignUpInput) => Promise<AuthPayload | {
-        requiresEmailVerification: boolean;
-        user: User | null;
-        accessToken: string | null;
-        refreshToken: string | null;
-        expiresIn: number | null;
-        requiresMFA?: boolean;
-        mfaChallengeId?: string;
-        mfaMethod?: import('..').MFAMethod;
-    }>;
-    signOut: () => Promise<void>;
-    refreshToken: () => Promise<AuthPayload>;
-    verifyEmail: (token: string) => Promise<{
-        success: boolean;
-        message: string;
-        email?: string;
-    }>;
-    resendVerification: (email: string) => Promise<{
-        success: boolean;
-        message: string;
-    }>;
-    refetchCurrentUser: (variables?: Partial<import('@apollo/client').OperationVariables> | undefined) => Promise<import("@apollo/client").ApolloClient.QueryResult<CurrentUserResponse>>;
-    login: (input: SignInInput) => Promise<AuthResult>;
-    register: (input: SignUpInput) => Promise<AuthPayload | {
-        requiresEmailVerification: boolean;
-        user: User | null;
-        accessToken: string | null;
-        refreshToken: string | null;
-        expiresIn: number | null;
-        requiresMFA?: boolean;
-        mfaChallengeId?: string;
-        mfaMethod?: import('..').MFAMethod;
-    }>;
-    logout: () => Promise<void>;
-    isLoading: boolean;
-    error: string | null;
-    errorCode: string | null;
-    isAuthenticated: boolean;
-    user: User | null;
-    accessToken: string | null;
-};
-export {};
-//# sourceMappingURL=useAuthOperations.d.ts.map

package/dist/auth/hooks/useAuthOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useAuthOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useAuthOperations.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EACX,IAAI,EACJ,WAAW,EACX,UAAU,EACX,MAAM,UAAU,CAAC;AA6IlB,UAAU,mBAAmB;IAC3B,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;CAC1B;AAED,UAAU,wBAAwB;IAChC,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AA4BD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,wBAA6B;oBAyCzC,WAAW,KAAG,OAAO,CAAC,UAAU,CAAC;oBAkJjC,WAAW;;;;;;;;;;;;yBAsP/B,MAAM,KACZ,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;gCAyBxB,MAAM;iBA5dpC,OAAO;iBACP,MAAM;;;mBAyDY,WAAW,KAAG,OAAO,CAAC,UAAU,CAAC;sBAkJjC,WAAW;;;;;;;;;;;;;;;;;EAsTzC"}

package/dist/auth/hooks/useAuthPermissions.d.ts

@@ -1,20 +0,0 @@
-/**
- * Hook for auth admin RBAC permissions.
- *
- * Only covers admin-facing operations. Public auth flows and self-service
- * operations don't need RBAC checks — they're either @rbac(public: true)
- * or scoped to the current user's own data.
- */
-export declare function useAuthPermissions(): {
-    canViewUsers: boolean;
-    canUpdateUsers: boolean;
-    canDeleteUsers: boolean;
-    canViewApps: boolean;
-    canCreateApps: boolean;
-    canUpdateApps: boolean;
-    canManageSsoConfig: boolean;
-    canManageOidcConfig: boolean;
-    canManageAuthMethods: boolean;
-    isLoading: boolean;
-};
-//# sourceMappingURL=useAuthPermissions.d.ts.map

package/dist/auth/hooks/useAuthPermissions.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useAuthPermissions.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useAuthPermissions.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,wBAAgB,kBAAkB;;;;;;;;;;;EAuBjC"}

package/dist/auth/hooks/useCaptchaV3.d.ts

@@ -1,13 +0,0 @@
-/**
- * Hook for reCAPTCHA v3 invisible verification.
- * Returns a no-op when VITE_CAPTCHA_ENABLED is not "true".
- *
- * When enabled, dynamically imports `react-google-recaptcha-v3` and uses
- * the `useGoogleReCaptcha` hook from the `GoogleReCaptchaProvider` context.
- * The provider must be mounted above this hook in the component tree
- * (handled by CaptchaProvider in AuthRoot).
- */
-export declare function useCaptchaV3(): {
-    executeRecaptcha: (action: string) => Promise<string | undefined>;
-};
-//# sourceMappingURL=useCaptchaV3.d.ts.map

package/dist/auth/hooks/useCaptchaV3.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useCaptchaV3.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useCaptchaV3.ts"],"names":[],"mappings":"AAMA;;;;;;;;GAQG;AACH,wBAAgB,YAAY;+BAaT,MAAM,KAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;EA8BtD"}

package/dist/auth/hooks/useContextSwitcherData.d.ts

@@ -1,106 +0,0 @@
-import { Organization, Workspace, Project } from '../types';
-
-export interface UseContextSwitcherDataOptions {
-    /**
-     * Optional Global API Gateway base URL override.
-     * If not provided, uses GATEWAYS config from fe-libs.
-     */
-    globalBaseUrl?: string;
-    /**
-     * Optional Workspaces API Gateway base URL override.
-     * If not provided, uses GATEWAYS config from fe-libs.
-     */
-    workspaceBaseUrl?: string;
-    /** Disable initial organization/workspace bootstrap fetches */
-    disableBootstrap?: boolean;
-    /** Disable the workspace sync effect */
-    disableWorkspaceSync?: boolean;
-    /** Disable the project sync effect */
-    disableProjectSync?: boolean;
-    /** Only hydrate the workspace token; do not eagerly fetch projects */
-    skipProjectFetch?: boolean;
-}
-/**
- * Hook for managing the context switcher data (organizations, workspaces, projects)
- *
- * Data flow:
- * 1. fetchOrganizations() - Get all orgs user has access to (Global Gateway)
- * 2. selectOrganization(org) - Set current org & fetch workspaces for that org
- * 3. selectWorkspace(ws) - Issue workspace token & fetch projects
- * 4. selectProject(proj) - Set current project
- *
- * All GraphQL calls go through graphqlFetch from fe-libs which automatically
- * resolves gateway URLs and injects auth + locale headers.
- *
- * @param options - Optional configuration (gateway base URL overrides)
- */
-export declare function useContextSwitcherData(options?: UseContextSwitcherDataOptions): {
-    organizations: Organization[];
-    workspaces: Workspace[];
-    projects: Project[];
-    currentOrganizationId: string | null;
-    currentWorkspaceId: string | null;
-    currentProjectId: string | null;
-    currentOrganization: Organization | undefined;
-    currentWorkspace: Workspace | undefined;
-    currentProject: Project | undefined;
-    workspaceToken: string | null;
-    isLoadingOrganizations: boolean;
-    isLoadingWorkspaces: boolean;
-    isLoadingProjects: boolean;
-    isLoading: boolean;
-    error: string | null;
-    fetchOrganizations: () => Promise<Organization[]>;
-    fetchWorkspacesForOrg: (organizationId: string) => Promise<Workspace[]>;
-    issueWorkspaceToken: (organizationId: string, workspaceId?: string) => Promise<{
-        success: boolean;
-        token?: string;
-        resolvedWorkspaceId?: string;
-        error?: string;
-    }>;
-    fetchProjects: () => Promise<Project[]>;
-    selectOrganization: (org: Organization) => Promise<Workspace[]>;
-    selectWorkspace: (workspace: Workspace) => Promise<{
-        success: boolean;
-        projects?: Project[];
-        error?: string;
-    }>;
-    selectProject: (project: Project) => void;
-};
-/**
- * Hook to reactively ensure workspaces are synced with the current organization.
- *
- * This handles edge cases where the organization changes but workspaces
- * from a different org are still in the store (e.g., stale data, race conditions).
- *
- * Usage:
- * ```tsx
- * import { useWorkspaceSyncEffect } from '@burdenoff/microfe-auth';
- *
- * function MyComponent() {
- *   useWorkspaceSyncEffect(); // Ensures workspaces stay in sync
- *   // ...
- * }
- * ```
- */
-export declare function useWorkspaceSyncEffect(options?: UseContextSwitcherDataOptions): void;
-/**
- * Hook to reactively ensure projects are loaded when a workspace is selected.
- *
- * This handles the case where a workspace is auto-selected (from URL/localStorage)
- * but projects haven't been fetched yet. It will:
- * 1. Issue a workspace token if not present
- * 2. Fetch projects for the selected workspace
- *
- * Usage:
- * ```tsx
- * import { useProjectSyncEffect } from '@burdenoff/microfe-auth';
- *
- * function MyComponent() {
- *   useProjectSyncEffect(); // Ensures projects are loaded for selected workspace
- *   // ...
- * }
- * ```
- */
-export declare function useProjectSyncEffect(options?: UseContextSwitcherDataOptions): void;
-//# sourceMappingURL=useContextSwitcherData.d.ts.map

package/dist/auth/hooks/useContextSwitcherData.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useContextSwitcherData.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useContextSwitcherData.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAOjE,MAAM,WAAW,6BAA6B;IAC5C;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,+DAA+D;IAC/D,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,wCAAwC;IACxC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,sCAAsC;IACtC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,sEAAsE;IACtE,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAiWD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,CAAC,EAAE,6BAA6B;;;;;;;;;;;;;;;;8BA4IU,OAAO,CAAC,YAAY,EAAE,CAAC;4CAmT/C,MAAM,KAAG,OAAO,CAAC,SAAS,EAAE,CAAC;0CAoElC,MAAM,gBACR,MAAM,KACnB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;yBAuEwC,OAAO,CAAC,OAAO,EAAE,CAAC;8BA8DhD,YAAY,KAAG,OAAO,CAAC,SAAS,EAAE,CAAC;iCAiBlC,SAAS,KACnB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;6BAiDwC,OAAO,KAAG,IAAI;EAqD3D;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,CAAC,EAAE,6BAA6B,QA4DxC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,CAAC,EAAE,6BAA6B,QAoR3E"}

package/dist/auth/hooks/useDelegationOperations.d.ts

@@ -1,33 +0,0 @@
-import { AppUserDelegation, GrantDelegationInput } from '../types';
-
-interface CurrentUserDelegationsResponse {
-    currentUserDelegations: {
-        delegations: AppUserDelegation[];
-        hasMore: boolean;
-        totalCount: number;
-    };
-}
-interface CurrentUserGrantedDelegationsResponse {
-    currentUserGrantedDelegations: {
-        delegations: AppUserDelegation[];
-        hasMore: boolean;
-        totalCount: number;
-    };
-}
-/**
- * Hook for app-user delegation operations
- */
-export declare function useDelegationOperations(): {
-    grantDelegation: (input: GrantDelegationInput) => Promise<AppUserDelegation>;
-    revokeDelegation: (id: string, reason?: string) => Promise<boolean>;
-    getDelegationsForApp: (appId: string) => AppUserDelegation[];
-    hasWorkspaceDelegation: (appId: string, workspaceId: string) => boolean;
-    refetchDelegations: (variables?: Partial<import('@apollo/client').OperationVariables> | undefined) => Promise<import("@apollo/client").ApolloClient.QueryResult<CurrentUserDelegationsResponse>>;
-    refetchGrantedDelegations: (variables?: Partial<import('@apollo/client').OperationVariables> | undefined) => Promise<import("@apollo/client").ApolloClient.QueryResult<CurrentUserGrantedDelegationsResponse>>;
-    delegations: AppUserDelegation[];
-    grantedDelegations: AppUserDelegation[];
-    isLoading: boolean;
-    error: string | null;
-};
-export {};
-//# sourceMappingURL=useDelegationOperations.d.ts.map

package/dist/auth/hooks/useDelegationOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useDelegationOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useDelegationOperations.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAYxE,UAAU,8BAA8B;IACtC,sBAAsB,EAAE;QACtB,WAAW,EAAE,iBAAiB,EAAE,CAAC;QACjC,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAED,UAAU,qCAAqC;IAC7C,6BAA6B,EAAE;QAC7B,WAAW,EAAE,iBAAiB,EAAE,CAAC;QACjC,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAuBD;;GAEG;AACH,wBAAgB,uBAAuB;6BAsF5B,oBAAoB,KAC1B,OAAO,CAAC,iBAAiB,CAAC;2BA0BvB,MAAM,WACD,MAAM,KACd,OAAO,CAAC,OAAO,CAAC;kCAsBkB,MAAM,KAAG,iBAAiB,EAAE;oCAUxD,MAAM,eACA,MAAM,KAClB,OAAO;;;;;;;EAgCX"}

package/dist/auth/hooks/useMfaOperations.d.ts

@@ -1,18 +0,0 @@
-import { MFAMethod, MFASetupResult, MFAVerifyInput, AuthResult } from '../types';
-
-/**
- * Hook for MFA operations
- */
-export declare function useMfaOperations(): {
-    setupMFA: (method: MFAMethod) => Promise<MFASetupResult>;
-    enableMFA: (code: string) => Promise<boolean>;
-    verifyMFA: (input: MFAVerifyInput) => Promise<AuthResult>;
-    disableMFA: () => Promise<boolean>;
-    enableMfa: (code: string) => Promise<boolean>;
-    verifyMfa: (input: MFAVerifyInput) => Promise<AuthResult>;
-    disableMfa: () => Promise<boolean>;
-    mfaRequired: boolean;
-    mfaChallengeId: string | null;
-    isLoading: boolean;
-};
-//# sourceMappingURL=useMfaOperations.d.ts.map

package/dist/auth/hooks/useMfaOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useMfaOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useMfaOperations.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,SAAS,EACT,cAAc,EACd,cAAc,EACd,UAAU,EAEX,MAAM,UAAU,CAAC;AA2DlB;;GAEG;AACH,wBAAgB,gBAAgB;uBAqBE,SAAS,KAAG,OAAO,CAAC,cAAc,CAAC;sBAsBpC,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;uBA0BxB,cAAc,KAAG,OAAO,CAAC,UAAU,CAAC;sBAgEvC,OAAO,CAAC,OAAO,CAAC;sBA1Fd,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;uBA0BxB,cAAc,KAAG,OAAO,CAAC,UAAU,CAAC;sBAgEvC,OAAO,CAAC,OAAO,CAAC;;;;EAwC9C"}

package/dist/auth/hooks/useMyWorkspaces.d.ts

@@ -1,45 +0,0 @@
-import { Workspace } from '../types';
-
-interface MyWorkspacesResponse {
-    myWorkspaces: {
-        total: number;
-        items: Workspace[];
-    };
-}
-/**
- * Hook for fetching user's workspaces and issuing workspace tokens
- *
- * This hook provides:
- * - Fetch workspaces: Query to get all workspaces the user has access to
- * - Issue workspace token: Get a workspace-scoped token for API access
- * - Complete auth flow: Fetch workspaces + auto-select + issue token
- *
- * Uses the shell's Apollo client (via GatewayRoute) for useQuery, and
- * graphqlFetch from fe-libs for imperative calls that need explicit tokens.
- */
-export declare function useMyWorkspaces(): {
-    workspaces: Workspace[];
-    totalWorkspaces: number;
-    currentWorkspaceId: string | null;
-    workspaceToken: string | null;
-    isLoading: boolean;
-    error: string | null;
-    fetchWorkspaces: (accessToken?: string) => Promise<Workspace[]>;
-    issueWorkspaceToken: (workspaceId: string, organizationId: string, accessToken?: string) => Promise<{
-        success: boolean;
-        token?: string;
-        error?: string;
-    }>;
-    selectWorkspace: (workspace: Workspace) => Promise<{
-        success: boolean;
-        error?: string;
-    }>;
-    completeAuthFlow: (accessToken?: string) => Promise<{
-        success: boolean;
-        workspace?: Workspace;
-        error?: string;
-    }>;
-    refetch: (variables?: Partial<import('@apollo/client').OperationVariables> | undefined) => Promise<import("@apollo/client").ApolloClient.QueryResult<MyWorkspacesResponse>>;
-};
-export {};
-//# sourceMappingURL=useMyWorkspaces.d.ts.map

package/dist/auth/hooks/useMyWorkspaces.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useMyWorkspaces.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useMyWorkspaces.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAM1C,UAAU,oBAAoB;IAC5B,YAAY,EAAE;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,SAAS,EAAE,CAAC;KACpB,CAAC;CACH;AAoDD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe;;;;;;;oCAoEN,MAAM,KAAG,OAAO,CAAC,SAAS,EAAE,CAAC;uCA8CnC,MAAM,kBACH,MAAM,gBACR,MAAM,KACnB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;iCAkEnD,SAAS,KACnB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;qCAchC,MAAM,KACnB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,SAAS,CAAC,EAAE,SAAS,CAAC;QACtB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;;EAoGL"}

package/dist/auth/hooks/useOAuthOperations.d.ts

@@ -1,19 +0,0 @@
-import { AuthResult } from '../types';
-
-/**
- * Supported OAuth providers
- */
-export type OAuthProvider = "google" | "github" | "microsoft";
-/**
- * Hook for OAuth authentication operations
- */
-export declare function useOAuthOperations(): {
-    initiateOAuth: (provider: OAuthProvider) => void;
-    completeOAuth: (code: string, state: string) => Promise<AuthResult>;
-    initiateGoogleOAuth: () => void;
-    initiateGitHubOAuth: () => void;
-    initiateMicrosoftOAuth: () => void;
-    isProviderConfigured: (provider: OAuthProvider) => boolean;
-    isLoading: boolean;
-};
-//# sourceMappingURL=useOAuthOperations.d.ts.map

package/dist/auth/hooks/useOAuthOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useOAuthOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useOAuthOperations.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAc,MAAM,UAAU,CAAC;AAgBvD;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,CAAC;AAyC9D;;GAEG;AACH,wBAAgB,kBAAkB;8BAWC,aAAa;0BAuDtC,MAAM,SACL,MAAM,KACZ,OAAO,CAAC,UAAU,CAAC;;;;qCAmGkB,aAAa,KAAG,OAAO;;EAoBhE"}

package/dist/auth/hooks/usePasswordOperations.d.ts

@@ -1,13 +0,0 @@
-import { ChangePasswordInput, PasswordResetRequestResult } from '../types';
-
-/**
- * Hook for password management operations
- * Uses Zustand v5 pattern: selectors for state, getState() for actions
- */
-export declare function usePasswordOperations(): {
-    changePassword: (input: ChangePasswordInput) => Promise<boolean>;
-    requestPasswordReset: (email: string, recaptchaToken?: string) => Promise<PasswordResetRequestResult>;
-    resetPassword: (token: string, newPassword: string) => Promise<boolean>;
-    isLoading: boolean;
-};
-//# sourceMappingURL=usePasswordOperations.d.ts.map

package/dist/auth/hooks/usePasswordOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"usePasswordOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/usePasswordOperations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AAoChF;;;GAGG;AACH,wBAAgB,qBAAqB;4BAqB1B,mBAAmB,KACzB,OAAO,CAAC,OAAO,CAAC;kCAsBV,MAAM,mBACI,MAAM,KACtB,OAAO,CAAC,0BAA0B,CAAC;2BAsB7B,MAAM,eACA,MAAM,KAClB,OAAO,CAAC,OAAO,CAAC;;EA2DpB"}

package/dist/auth/hooks/useSessionOperations.d.ts

@@ -1,52 +0,0 @@
-import { ActiveSessionsQuery } from '../../generated/global-operations';
-import { TokenValidationResponse, ValidateTokensInput } from '../types';
-
-interface TokenInfoQueryResponse {
-    tokenInfo: TokenValidationResponse;
-}
-interface UseSessionOperationsOptions {
-    disableTokenInfoQuery?: boolean;
-    /** Number of sessions to load per page (default: 10) */
-    pageSize?: number;
-}
-/**
- * Hook for session/token management operations
- */
-export declare function useSessionOperations(options?: UseSessionOperationsOptions): {
-    validateTokens: (input: ValidateTokensInput) => Promise<TokenValidationResponse>;
-    isTokenExpired: () => boolean;
-    getTokenRemainingTime: () => number;
-    tokenInfo: TokenValidationResponse | undefined;
-    revokeSession: (sessionId: string) => Promise<boolean>;
-    revokeAllSessions: () => Promise<{
-        success: boolean;
-        revokedCount: number;
-    }>;
-    activeSessions: {
-        __typename?: "Session";
-        id: string;
-        status: import('../../generated/global-types').SessionStatus;
-        ipAddress?: string | null;
-        userAgent?: string | null;
-        location?: string | null;
-        lastActivityAt: string;
-        expiresAt: string;
-        createdAt: string;
-        isCurrent: boolean;
-    }[];
-    sessionsLoading: boolean;
-    refetchSessions: (variables?: Partial<import('../../generated/global-types').Exact<{
-        pagination?: import('../../generated/global-types').InputMaybe<import('../../generated/global-types').PaginationInput>;
-    }>> | undefined) => Promise<import("@apollo/client").ApolloClient.QueryResult<ActiveSessionsQuery>>;
-    page: number;
-    pageSize: number;
-    totalCount: number;
-    totalPages: number;
-    hasMore: boolean;
-    goToNextPage: () => void;
-    goToPrevPage: () => void;
-    isLoading: boolean;
-    refetch: (variables?: Partial<import('@apollo/client').OperationVariables> | undefined) => Promise<import("@apollo/client").ApolloClient.QueryResult<TokenInfoQueryResponse>>;
-};
-export {};
-//# sourceMappingURL=useSessionOperations.d.ts.map

package/dist/auth/hooks/useSessionOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useSessionOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useSessionOperations.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,mBAAmB,EAMpB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAM7E,UAAU,sBAAsB;IAC9B,SAAS,EAAE,uBAAuB,CAAC;CACpC;AAUD,UAAU,2BAA2B;IACnC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,GAAE,2BAAgC;4BAsEhC,mBAAmB,KACzB,OAAO,CAAC,uBAAuB,CAAC;0BAaR,OAAO;iCAQA,MAAM;;+BASA,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;6BAmB7B,OAAO,CAAC;QAC1C,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;EAsDH"}