@burdenoff/microfe-auth 2026.524.1 → 2026.525.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/microfe-auth",
-  "version": "2026.524.1",
+  "version": "2026.525.1",
   "description": "Auth microfrontend for Burdenoff products",
   "type": "module",
   "imports": {

package/dist/auth/AuthRoot.d.ts

@@ -1,30 +0,0 @@
-import { FC } from 'react';
-import { AuthRootProps } from './types';
-
-/**
- * Root component for the Auth microfrontend.
- *
- * This is the main entry point that host applications import and render.
- * It sets up the necessary providers and renders the internal routing.
- * Automatically registers navigation items with the shell if registration functions are provided.
- *
- * @example
- * ```tsx
- * import { AuthRoot, type AuthRootProps } from '@burdenoff/microfe-auth';
- *
- * function App() {
- *   const props: AuthRootProps = {
- *     basePath: '/auth',
- *     navigate: (path) => router.push(path),
- *     apiGatewayUrl: 'http://localhost:4002',
- *     authToken: 'token',
- *     onAuthSuccess: (user) => shellLogin(user),
- *     onLogout: () => shellLogout(),
- *   };
- *
- *   return <AuthRoot {...props} />;
- * }
- * ```
- */
-export declare const AuthRoot: FC<AuthRootProps>;
-//# sourceMappingURL=AuthRoot.d.ts.map

package/dist/auth/AuthRoot.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AuthRoot.d.ts","sourceRoot":"","sources":["../../src/auth/AuthRoot.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAQhC,OAAO,KAAK,EAAW,aAAa,EAAE,MAAM,SAAS,CAAC;AAGtD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,QAAQ,EAAE,EAAE,CAAC,aAAa,CAgJtC,CAAC"}

package/dist/auth/AuthRoutes.d.ts

@@ -1,30 +0,0 @@
-/**
- * Internal router for the Auth microfrontend.
- * This component handles routing within the microfrontend using React Router v7.
- *
- * When used within a parent route (e.g., <Route path="/auth/*">), all paths are relative:
- * - login → Login page (accessible at /auth/login)
- * - register → Registration page (accessible at /auth/register)
- * - reset-password → Password reset page (accessible at /auth/reset-password)
- * - verify-email → Email verification page (accessible at /auth/verify-email)
- * - mfa-verify → MFA verification page (accessible at /auth/mfa-verify)
- * - magic-link → Magic link authentication page (accessible at /auth/magic-link)
- * - sso/login → SSO login page (accessible at /auth/sso/login)
- * - sso/callback → SSO callback handler (accessible at /auth/sso/callback)
- * - oauth/callback → OAuth callback handler (accessible at /auth/oauth/callback)
- * - security → Security settings (protected, accessible at /auth/security)
- * - sessions → Active sessions (protected, accessible at /auth/sessions)
- * - mfa → MFA setup (protected, accessible at /auth/mfa)
- * - api-keys → API keys management (protected, accessible at /auth/api-keys)
- * - apps → Legacy redirect to Developer Portal app creation
- * - users → Users management (protected, admin only, accessible at /auth/users)
- * - profile → User profile page (protected, accessible at /auth/profile)
- * - audit-log → Security audit log (protected, accessible at /auth/audit-log)
- * - sso → SSO configuration (protected, admin only, accessible at /auth/sso)
- */
-export declare function AuthRoutes({ basePath: _basePath, enableAdminRoutes, bypassEnterprisePlanGate, }: {
-    basePath?: string;
-    enableAdminRoutes?: boolean;
-    bypassEnterprisePlanGate?: boolean;
-}): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=AuthRoutes.d.ts.map

package/dist/auth/AuthRoutes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AuthRoutes.d.ts","sourceRoot":"","sources":["../../src/auth/AuthRoutes.tsx"],"names":[],"mappings":"AAmMA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,UAAU,CAAC,EACzB,QAAQ,EAAE,SAAc,EACxB,iBAAwB,EACxB,wBAAgC,GACjC,EAAE;IACD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC,2CAkQA"}

package/dist/auth/components/AuthIcons.d.ts

@@ -1,17 +0,0 @@
-import { SVGProps } from 'react';
-
-type IconProps = SVGProps<SVGSVGElement>;
-export declare function EmailIcon(props: IconProps): import("react/jsx-runtime").JSX.Element;
-export declare function LockIcon(props: IconProps): import("react/jsx-runtime").JSX.Element;
-export declare function UserIcon(props: IconProps): import("react/jsx-runtime").JSX.Element;
-export declare function EyeIcon(props: IconProps): import("react/jsx-runtime").JSX.Element;
-export declare function EyeOffIcon(props: IconProps): import("react/jsx-runtime").JSX.Element;
-export declare function CheckIcon(props: IconProps): import("react/jsx-runtime").JSX.Element;
-export declare function XIcon(props: IconProps): import("react/jsx-runtime").JSX.Element;
-export declare function AlertIcon(props: IconProps): import("react/jsx-runtime").JSX.Element;
-export declare function SpinnerIcon(props: IconProps): import("react/jsx-runtime").JSX.Element;
-export declare function GoogleIcon(props: IconProps): import("react/jsx-runtime").JSX.Element;
-export declare function GitHubIcon(props: IconProps): import("react/jsx-runtime").JSX.Element;
-export declare function MicrosoftIcon(props: IconProps): import("react/jsx-runtime").JSX.Element;
-export {};
-//# sourceMappingURL=AuthIcons.d.ts.map

package/dist/auth/components/AuthIcons.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AuthIcons.d.ts","sourceRoot":"","sources":["../../../src/auth/components/AuthIcons.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEtC,KAAK,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;AAEzC,wBAAgB,SAAS,CAAC,KAAK,EAAE,SAAS,2CAgBzC;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,SAAS,2CAgBxC;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,SAAS,2CAgBxC;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,SAAS,2CAqBvC;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,SAAS,2CAgB1C;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,SAAS,2CAgBzC;AAED,wBAAgB,KAAK,CAAC,KAAK,EAAE,SAAS,2CAgBrC;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,SAAS,2CAgBzC;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,2CAkB3C;AAGD,wBAAgB,UAAU,CAAC,KAAK,EAAE,SAAS,2CAqB1C;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,SAAS,2CAM1C;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,2CAS7C"}

package/dist/auth/components/AuthLayout.d.ts

@@ -1,17 +0,0 @@
-import { ReactNode } from 'react';
-
-interface AuthLayoutProps {
-    children: ReactNode;
-    title: string;
-    subtitle: string;
-    productName?: string;
-    tagline?: string;
-}
-/**
- * Professional auth layout with split-screen design
- * Left side: Branding with gradient background
- * Right side: Auth form
- */
-export declare function AuthLayout({ children, title, subtitle, productName, tagline, }: AuthLayoutProps): import("react/jsx-runtime").JSX.Element;
-export {};
-//# sourceMappingURL=AuthLayout.d.ts.map

package/dist/auth/components/AuthLayout.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AuthLayout.d.ts","sourceRoot":"","sources":["../../../src/auth/components/AuthLayout.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAQvC,UAAU,eAAe;IACvB,QAAQ,EAAE,SAAS,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAaD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,EACzB,QAAQ,EACR,KAAK,EACL,QAAQ,EACR,WAAW,EACX,OAAO,GACR,EAAE,eAAe,2CAkOjB"}

package/dist/auth/components/CaptchaV2.d.ts

@@ -1,16 +0,0 @@
-interface CaptchaV2Props {
-    onVerify: (token: string | null) => void;
-    onExpired?: () => void;
-}
-/**
- * reCAPTCHA v2 checkbox component.
- * Renders nothing when VITE_CAPTCHA_ENABLED is not "true".
- * Lazily loads the Google reCAPTCHA library only when enabled.
- */
-export declare function CaptchaV2({ onVerify, onExpired }: CaptchaV2Props): import("react/jsx-runtime").JSX.Element | null;
-/**
- * Check if captcha is enabled in this environment
- */
-export declare function isCaptchaEnabled(): boolean;
-export {};
-//# sourceMappingURL=CaptchaV2.d.ts.map

package/dist/auth/components/CaptchaV2.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"CaptchaV2.d.ts","sourceRoot":"","sources":["../../../src/auth/components/CaptchaV2.tsx"],"names":[],"mappings":"AAOA,UAAU,cAAc;IACtB,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACzC,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;CACxB;AAgDD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,cAAc,kDAqBhE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C"}

package/dist/auth/components/ConfirmActionDialog.d.ts

@@ -1,16 +0,0 @@
-type ConfirmActionDialogVariant = "default" | "warning" | "danger";
-interface ConfirmActionDialogProps {
-    open: boolean;
-    onOpenChange: (open: boolean) => void;
-    title: string;
-    description: string;
-    confirmText?: string;
-    cancelText?: string;
-    variant?: ConfirmActionDialogVariant;
-    isPending?: boolean;
-    disabled?: boolean;
-    onConfirm: () => void | Promise<void>;
-}
-export declare function ConfirmActionDialog({ open, onOpenChange, title, description, confirmText, cancelText, variant, isPending, disabled, onConfirm, }: ConfirmActionDialogProps): import("react/jsx-runtime").JSX.Element;
-export {};
-//# sourceMappingURL=ConfirmActionDialog.d.ts.map

package/dist/auth/components/ConfirmActionDialog.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ConfirmActionDialog.d.ts","sourceRoot":"","sources":["../../../src/auth/components/ConfirmActionDialog.tsx"],"names":[],"mappings":"AAYA,KAAK,0BAA0B,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEnE,UAAU,wBAAwB;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,YAAY,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAkCD,wBAAgB,mBAAmB,CAAC,EAClC,IAAI,EACJ,YAAY,EACZ,KAAK,EACL,WAAW,EACX,WAAuB,EACvB,UAAqB,EACrB,OAAmB,EACnB,SAAiB,EACjB,QAAgB,EAChB,SAAS,GACV,EAAE,wBAAwB,2CA+C1B"}

package/dist/auth/components/index.d.ts

@@ -1,4 +0,0 @@
-export * from './AuthLayout';
-export * from './AuthIcons';
-export * from './ConfirmActionDialog';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/components/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/components/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC"}

package/dist/auth/components/profile/UserProfileMenu.d.ts

@@ -1,42 +0,0 @@
-export interface UserProfileMenuProps {
-    /**
-     * Callback when workspace switcher should be shown
-     */
-    onSwitchWorkspace?: () => void;
-    /**
-     * Logout handler (REQUIRED)
-     * Should clear auth state and redirect to login
-     */
-    onLogout: () => void;
-    /**
-     * Position of the dropdown menu
-     * @default 'right'
-     */
-    position?: "left" | "right";
-}
-/**
- * User Profile Menu Component
- *
- * Displays user avatar/icon with dropdown menu containing:
- * - User information
- * - Switch Workspace option
- * - Logout button
- *
- * @example
- * ```tsx
- * import { UserProfileMenu } from '@burdenoff/microfe-auth';
- *
- * function AppHeader() {
- *   return (
- *     <div className="header">
- *       <UserProfileMenu
- *         onSwitchWorkspace={() => setShowWorkspaceSwitcher(true)}
- *         position="right"
- *       />
- *     </div>
- *   );
- * }
- * ```
- */
-export declare function UserProfileMenu({ onSwitchWorkspace, onLogout, position, }: UserProfileMenuProps): import("react/jsx-runtime").JSX.Element | null;
-//# sourceMappingURL=UserProfileMenu.d.ts.map

package/dist/auth/components/profile/UserProfileMenu.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"UserProfileMenu.d.ts","sourceRoot":"","sources":["../../../../src/auth/components/profile/UserProfileMenu.tsx"],"names":[],"mappings":"AAMA,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,IAAI,CAAC;IAE/B;;;OAGG;IACH,QAAQ,EAAE,MAAM,IAAI,CAAC;IAErB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,eAAe,CAAC,EAC9B,iBAAiB,EACjB,QAAQ,EACR,QAAkB,GACnB,EAAE,oBAAoB,kDAmKtB"}

package/dist/auth/components/workspace/WorkspaceSelector.d.ts

@@ -1,76 +0,0 @@
-import { Workspace } from '../../types';
-
-/**
- * Organization interface (grouped from workspaces)
- */
-export interface Organization {
-    id: string;
-    name: string;
-    workspaceCount: number;
-}
-/**
- * Project interface (optional, for future use)
- */
-export interface Project {
-    id: string;
-    name: string;
-    workspaceId: string;
-}
-export interface WorkspaceSelectorProps {
-    /**
-     * Control modal visibility
-     */
-    isOpen: boolean;
-    /**
-     * Callback when modal is closed without selection
-     */
-    onClose: () => void;
-    /**
-     * List of workspaces to choose from
-     */
-    workspaces: Workspace[];
-    /**
-     * Optional list of projects (filtered by workspace)
-     */
-    projects?: Project[];
-    /**
-     * Callback when workspace is selected and confirmed
-     */
-    onSelect: (workspace: Workspace, project?: Project) => void;
-    /**
-     * Loading state while issuing workspace token
-     */
-    isLoading?: boolean;
-    /**
-     * Error message to display
-     */
-    error?: string | null;
-}
-/**
- * WorkspaceSelector Component
- *
- * Multi-level workspace selection modal for use across all Burdenoff products.
- *
- * Features:
- * - Three-tier selection: Organization → Workspace → Project (optional)
- * - Auto-select if only one option at each level
- * - Loading and error states
- * - Clean, accessible UI
- *
- * Usage:
- * ```tsx
- * import { WorkspaceSelector } from '@burdenoff/microfe-auth';
- *
- * <WorkspaceSelector
- *   isOpen={showSelector}
- *   onClose={() => setShowSelector(false)}
- *   workspaces={workspaces}
- *   onSelect={async (workspace) => {
- *     await issueWorkspaceToken(workspace.id);
- *     navigate('/');
- *   }}
- * />
- * ```
- */
-export declare function WorkspaceSelector({ isOpen, onClose, workspaces, projects, onSelect, isLoading, error, }: WorkspaceSelectorProps): import("react/jsx-runtime").JSX.Element | null;
-//# sourceMappingURL=WorkspaceSelector.d.ts.map

package/dist/auth/components/workspace/WorkspaceSelector.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"WorkspaceSelector.d.ts","sourceRoot":"","sources":["../../../../src/auth/components/workspace/WorkspaceSelector.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,MAAM,EAAE,OAAO,CAAC;IAEhB;;OAEG;IACH,OAAO,EAAE,MAAM,IAAI,CAAC;IAEpB;;OAEG;IACH,UAAU,EAAE,SAAS,EAAE,CAAC;IAExB;;OAEG;IACH,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;IAErB;;OAEG;IACH,QAAQ,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAE5D;;OAEG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,iBAAiB,CAAC,EAChC,MAAM,EACN,OAAO,EACP,UAAU,EACV,QAAa,EACb,QAAQ,EACR,SAAiB,EACjB,KAAY,GACb,EAAE,sBAAsB,kDAyVxB"}

package/dist/auth/constants/permissions.d.ts

@@ -1,30 +0,0 @@
-/**
- * Auth Permission Constants
- *
- * Permission strings matching the @rbac directives on global-auth-svc.
- * Only covers admin-facing operations — public auth flows (login, signup,
- * password reset, MFA verify, OAuth, SSO) don't need RBAC.
- * Self-service operations (own profile, sessions, API keys) are identity-scoped.
- *
- * Resource types and actions from global-rbac-svc seed:
- *   user:       read, update, delete
- *   app:        read, create, update
- *   sso-config: manage, delete
- *   oidc-config: manage, delete
- *   auth-method: update
- */
-export declare const AUTH_PERMISSIONS: {
-    readonly USER_READ: "user:read";
-    readonly USER_UPDATE: "user:update";
-    readonly USER_DELETE: "user:delete";
-    readonly APP_READ: "app:read";
-    readonly APP_CREATE: "app:create";
-    readonly APP_UPDATE: "app:update";
-    readonly SSO_CONFIG_MANAGE: "sso-config:manage";
-    readonly SSO_CONFIG_DELETE: "sso-config:delete";
-    readonly OIDC_CONFIG_MANAGE: "oidc-config:manage";
-    readonly OIDC_CONFIG_DELETE: "oidc-config:delete";
-    readonly AUTH_METHOD_UPDATE: "auth-method:update";
-};
-export type AuthPermission = (typeof AUTH_PERMISSIONS)[keyof typeof AUTH_PERMISSIONS];
-//# sourceMappingURL=permissions.d.ts.map

package/dist/auth/constants/permissions.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../src/auth/constants/permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;CAqBnB,CAAC;AAEX,MAAM,MAAM,cAAc,GACxB,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/auth/constants/sessionKeys.d.ts

@@ -1,18 +0,0 @@
-/**
- * sessionStorage key constants for auth flows.
- * Centralizing these avoids silent key mismatches across files.
- */
-export declare const MFA_CHALLENGE_ID = "mfa_challenge_id";
-export declare const MFA_PENDING_TOKEN = "mfa_pending_token";
-export declare const MFA_PENDING_REFRESH = "mfa_pending_refresh";
-export declare const MFA_REDIRECT = "mfa_redirect";
-export declare const OIDC_CODE_VERIFIER = "oidc_code_verifier";
-export declare const OIDC_STATE = "oidc_state";
-export declare const OIDC_NONCE = "oidc_nonce";
-export declare const OIDC_TENANT_ID = "oidc_tenant_id";
-export declare const OIDC_FLOW = "oidc_flow";
-export declare const OIDC_REDIRECT = "oidc_redirect";
-export declare const OIDC_CLIENT_ID = "oidc_client_id";
-export declare const MFA_SESSION_KEYS: readonly ["mfa_challenge_id", "mfa_pending_token", "mfa_pending_refresh", "mfa_redirect"];
-export declare const OIDC_SESSION_KEYS: readonly ["oidc_code_verifier", "oidc_state", "oidc_nonce", "oidc_tenant_id", "oidc_flow", "oidc_redirect"];
-//# sourceMappingURL=sessionKeys.d.ts.map

package/dist/auth/constants/sessionKeys.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sessionKeys.d.ts","sourceRoot":"","sources":["../../../src/auth/constants/sessionKeys.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AACnD,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AACrD,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AACzD,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAG3C,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,eAAO,MAAM,UAAU,eAAe,CAAC;AACvC,eAAO,MAAM,UAAU,eAAe,CAAC;AACvC,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAC/C,eAAO,MAAM,SAAS,cAAc,CAAC;AACrC,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAC7C,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAG/C,eAAO,MAAM,gBAAgB,2FAKnB,CAAC;AAEX,eAAO,MAAM,iBAAiB,6GAOpB,CAAC"}

package/dist/auth/hooks/index.d.ts

@@ -1,18 +0,0 @@
-export { useAuthOperations } from './useAuthOperations';
-export { useMfaOperations } from './useMfaOperations';
-export { usePasswordOperations } from './usePasswordOperations';
-export { useSessionOperations } from './useSessionOperations';
-export { useApiKeyOperations } from './useApiKeyOperations';
-export { useAppOperations } from './useAppOperations';
-export { useWorkspaceOperations } from './useWorkspaceOperations';
-export { useMyWorkspaces } from './useMyWorkspaces';
-export { useContextSwitcherData, useWorkspaceSyncEffect, useProjectSyncEffect, } from './useContextSwitcherData';
-export type { UseContextSwitcherDataOptions } from './useContextSwitcherData';
-export { useDelegationOperations } from './useDelegationOperations';
-export { useUserOperations } from './useUserOperations';
-export { useSsoOperations } from './useSsoOperations';
-export { useOAuthOperations } from './useOAuthOperations';
-export { useAccountOperations } from './useAccountOperations';
-export { useAuthPermissions } from './useAuthPermissions';
-export { useAuthStore } from '../store/authStore';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/hooks/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAG9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAG5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGpD,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAG9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAGpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAG9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/auth/hooks/useAccountOperations.d.ts

@@ -1,19 +0,0 @@
-import { AuthResult } from '../types';
-
-export interface AccountActionResult {
-    success: boolean;
-    message: string;
-}
-/**
- * Hook for account management operations (deactivate, delete, reactivate)
- */
-export declare function useAccountOperations(): {
-    deactivateAccount: (password: string) => Promise<AccountActionResult>;
-    deleteAccount: (password: string, confirmPhrase: string) => Promise<AccountActionResult>;
-    reactivateAccount: (email: string, password: string) => Promise<AuthResult>;
-    isDeactivating: boolean;
-    isDeleting: boolean;
-    isReactivating: boolean;
-    isLoading: boolean;
-};
-//# sourceMappingURL=useAccountOperations.d.ts.map

package/dist/auth/hooks/useAccountOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useAccountOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useAccountOperations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAqC3C,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD;;GAEG;AACH,wBAAgB,oBAAoB;kCAqBtB,MAAM,KACf,OAAO,CAAC,mBAAmB,CAAC;8BAyBnB,MAAM,iBACD,MAAM,KACpB,OAAO,CAAC,mBAAmB,CAAC;+BA8BtB,MAAM,YACH,MAAM,KACf,OAAO,CAAC,UAAU,CAAC;;;;;EAuCvB"}

package/dist/auth/hooks/useApiKeyOperations.d.ts

@@ -1,26 +0,0 @@
-import { GenerateAPIKeyInput, APIKeyResult, APIKeyRotateResult, AuthResult, ApiKey } from '../types';
-
-interface MyApiKeysResponse {
-    myApiKeys: {
-        apiKeys: ApiKey[];
-        hasMore: boolean;
-        totalCount: number;
-    };
-}
-/**
- * Hook for API key operations
- */
-export declare function useApiKeyOperations(): {
-    generateAPIKey: (input: GenerateAPIKeyInput) => Promise<APIKeyResult>;
-    revokeAPIKey: (keyId: string) => Promise<boolean>;
-    rotateAPIKey: (keyId: string) => Promise<APIKeyRotateResult>;
-    authenticateAPIKey: (apiKey: string, apiSecret: string) => Promise<AuthResult>;
-    refetchApiKeys: () => Promise<void> | import("@apollo/client").ObservableQuery.ResultPromise<import("@apollo/client").ApolloClient.QueryResult<MyApiKeysResponse>>;
-    createApiKey: (input: GenerateAPIKeyInput) => Promise<APIKeyResult>;
-    revokeApiKey: (keyId: string) => Promise<boolean>;
-    apiKeys: ApiKey[];
-    isLoading: boolean;
-    error: import('@apollo/client').ErrorLike | undefined;
-};
-export {};
-//# sourceMappingURL=useApiKeyOperations.d.ts.map

package/dist/auth/hooks/useApiKeyOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useApiKeyOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useApiKeyOperations.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,mBAAmB,EACnB,YAAY,EACZ,kBAAkB,EAClB,UAAU,EACV,MAAM,EACP,MAAM,UAAU,CAAC;AAGlB,UAAU,iBAAiB;IACzB,SAAS,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CACxE;AAoBD;;GAEG;AACH,wBAAgB,mBAAmB;4BAwDxB,mBAAmB,KACzB,OAAO,CAAC,YAAY,CAAC;0BAuBW,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;0BAgBzB,MAAM,KAAG,OAAO,CAAC,kBAAkB,CAAC;iCAqB7D,MAAM,aACH,MAAM,KAChB,OAAO,CAAC,UAAU,CAAC;;0BA/Db,mBAAmB,KACzB,OAAO,CAAC,YAAY,CAAC;0BAuBW,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;;;;EA0E7D"}

package/dist/auth/hooks/useAppOperations.d.ts

@@ -1,30 +0,0 @@
-import { App, AppCreateResponse, CreateAppInput, UpdateAppInput, AppTokenResponse, AppAsUserTokenResponse } from '../types';
-
-interface CurrentUserAppsResponse {
-    currentUserApps: {
-        apps: App[];
-        hasMore: boolean;
-        totalCount: number;
-    };
-}
-/**
- * Hook for app management operations
- */
-export declare function useAppOperations(): {
-    getApp: (id: string) => Promise<App | null>;
-    refetchApps: () => Promise<void> | import("@apollo/client").ObservableQuery.ResultPromise<import("@apollo/client").ApolloClient.QueryResult<CurrentUserAppsResponse>>;
-    createApp: (input: CreateAppInput) => Promise<AppCreateResponse>;
-    updateApp: (id: string, input: UpdateAppInput) => Promise<App>;
-    deactivateApp: (id: string) => Promise<boolean>;
-    rotateAppSecret: (id: string) => Promise<AppCreateResponse>;
-    authenticateApp: (clientId: string, clientSecret: string, scopes?: string[]) => Promise<AppTokenResponse>;
-    generateAppToken: (clientId: string, clientSecret: string, scopes?: string[]) => Promise<AppTokenResponse>;
-    generateAppAsUserToken: (targetUserId: string, scopes?: string[]) => Promise<AppAsUserTokenResponse>;
-    exchangeToken: (appId: string, userId: string, scopes?: string[]) => Promise<AppAsUserTokenResponse>;
-    apps: App[];
-    currentApp: App | null;
-    isLoading: boolean;
-    error: import('@apollo/client').ErrorLike | undefined;
-};
-export {};
-//# sourceMappingURL=useAppOperations.d.ts.map

package/dist/auth/hooks/useAppOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useAppOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useAppOperations.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,GAAG,EACH,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,UAAU,CAAC;AAMlB,UAAU,uBAAuB;IAC/B,eAAe,EAAE;QAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CACxE;AAoCD;;GAEG;AACH,wBAAgB,gBAAgB;iBA4EJ,MAAM,KAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;;uBAU7C,cAAc,KACpB,OAAO,CAAC,iBAAiB,CAAC;oBA2BA,MAAM,SAAS,cAAc,KAAG,OAAO,CAAC,GAAG,CAAC;wBA2BxC,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;0BAuBvB,MAAM,KAAG,OAAO,CAAC,iBAAiB,CAAC;gCAwB1D,MAAM,gBACF,MAAM,WACX,MAAM,EAAE,KAChB,OAAO,CAAC,gBAAgB,CAAC;iCAwBhB,MAAM,gBACF,MAAM,WACX,MAAM,EAAE,KAChB,OAAO,CAAC,gBAAgB,CAAC;2CAwBZ,MAAM,WACX,MAAM,EAAE,KAChB,OAAO,CAAC,sBAAsB,CAAC;2BAwBzB,MAAM,UACL,MAAM,WACL,MAAM,EAAE,KAChB,OAAO,CAAC,sBAAsB,CAAC;;;;;EAuCnC"}

package/dist/auth/hooks/useAuthOperations.d.ts

@@ -1,57 +0,0 @@
-import { SignInInput, SignUpInput, User, AuthPayload, AuthResult } from '../types';
-
-interface CurrentUserResponse {
-    currentUser: User | null;
-}
-interface UseAuthOperationsOptions {
-    disableCurrentUserQuery?: boolean;
-}
-/**
- * Hook for authentication operations
- * Uses Zustand v5 pattern: selectors for state, getState() for actions
- */
-export declare function useAuthOperations(options?: UseAuthOperationsOptions): {
-    signIn: (input: SignInInput) => Promise<AuthResult>;
-    signUp: (input: SignUpInput) => Promise<AuthPayload | {
-        requiresEmailVerification: boolean;
-        user: User | null;
-        accessToken: string | null;
-        refreshToken: string | null;
-        expiresIn: number | null;
-        requiresMFA?: boolean;
-        mfaChallengeId?: string;
-        mfaMethod?: import('..').MFAMethod;
-    }>;
-    signOut: () => Promise<void>;
-    refreshToken: () => Promise<AuthPayload>;
-    verifyEmail: (token: string) => Promise<{
-        success: boolean;
-        message: string;
-        email?: string;
-    }>;
-    resendVerification: (email: string) => Promise<{
-        success: boolean;
-        message: string;
-    }>;
-    refetchCurrentUser: (variables?: Partial<import('@apollo/client').OperationVariables> | undefined) => Promise<import("@apollo/client").ApolloClient.QueryResult<CurrentUserResponse>>;
-    login: (input: SignInInput) => Promise<AuthResult>;
-    register: (input: SignUpInput) => Promise<AuthPayload | {
-        requiresEmailVerification: boolean;
-        user: User | null;
-        accessToken: string | null;
-        refreshToken: string | null;
-        expiresIn: number | null;
-        requiresMFA?: boolean;
-        mfaChallengeId?: string;
-        mfaMethod?: import('..').MFAMethod;
-    }>;
-    logout: () => Promise<void>;
-    isLoading: boolean;
-    error: string | null;
-    errorCode: string | null;
-    isAuthenticated: boolean;
-    user: User | null;
-    accessToken: string | null;
-};
-export {};
-//# sourceMappingURL=useAuthOperations.d.ts.map

package/dist/auth/hooks/useAuthOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useAuthOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useAuthOperations.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EACX,IAAI,EACJ,WAAW,EACX,UAAU,EACX,MAAM,UAAU,CAAC;AA6IlB,UAAU,mBAAmB;IAC3B,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;CAC1B;AAED,UAAU,wBAAwB;IAChC,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AA4BD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,wBAA6B;oBAyCzC,WAAW,KAAG,OAAO,CAAC,UAAU,CAAC;oBAkJjC,WAAW;;;;;;;;;;;;yBAsP/B,MAAM,KACZ,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;gCAyBxB,MAAM;iBA5dpC,OAAO;iBACP,MAAM;;;mBAyDY,WAAW,KAAG,OAAO,CAAC,UAAU,CAAC;sBAkJjC,WAAW;;;;;;;;;;;;;;;;;EAsTzC"}

package/dist/auth/hooks/useAuthPermissions.d.ts

@@ -1,20 +0,0 @@
-/**
- * Hook for auth admin RBAC permissions.
- *
- * Only covers admin-facing operations. Public auth flows and self-service
- * operations don't need RBAC checks — they're either @rbac(public: true)
- * or scoped to the current user's own data.
- */
-export declare function useAuthPermissions(): {
-    canViewUsers: boolean;
-    canUpdateUsers: boolean;
-    canDeleteUsers: boolean;
-    canViewApps: boolean;
-    canCreateApps: boolean;
-    canUpdateApps: boolean;
-    canManageSsoConfig: boolean;
-    canManageOidcConfig: boolean;
-    canManageAuthMethods: boolean;
-    isLoading: boolean;
-};
-//# sourceMappingURL=useAuthPermissions.d.ts.map

package/dist/auth/hooks/useAuthPermissions.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useAuthPermissions.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useAuthPermissions.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,wBAAgB,kBAAkB;;;;;;;;;;;EAuBjC"}

package/dist/auth/hooks/useCaptchaV3.d.ts

@@ -1,13 +0,0 @@
-/**
- * Hook for reCAPTCHA v3 invisible verification.
- * Returns a no-op when VITE_CAPTCHA_ENABLED is not "true".
- *
- * When enabled, dynamically imports `react-google-recaptcha-v3` and uses
- * the `useGoogleReCaptcha` hook from the `GoogleReCaptchaProvider` context.
- * The provider must be mounted above this hook in the component tree
- * (handled by CaptchaProvider in AuthRoot).
- */
-export declare function useCaptchaV3(): {
-    executeRecaptcha: (action: string) => Promise<string | undefined>;
-};
-//# sourceMappingURL=useCaptchaV3.d.ts.map

package/dist/auth/hooks/useCaptchaV3.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useCaptchaV3.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useCaptchaV3.ts"],"names":[],"mappings":"AAMA;;;;;;;;GAQG;AACH,wBAAgB,YAAY;+BAaT,MAAM,KAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;EA8BtD"}