@burdenoff/microfe-auth 2026.524.1 → 2026.525.1

package/dist/auth/hooks/useContextSwitcherData.d.ts

@@ -1,106 +0,0 @@
-import { Organization, Workspace, Project } from '../types';
-
-export interface UseContextSwitcherDataOptions {
-    /**
-     * Optional Global API Gateway base URL override.
-     * If not provided, uses GATEWAYS config from fe-libs.
-     */
-    globalBaseUrl?: string;
-    /**
-     * Optional Workspaces API Gateway base URL override.
-     * If not provided, uses GATEWAYS config from fe-libs.
-     */
-    workspaceBaseUrl?: string;
-    /** Disable initial organization/workspace bootstrap fetches */
-    disableBootstrap?: boolean;
-    /** Disable the workspace sync effect */
-    disableWorkspaceSync?: boolean;
-    /** Disable the project sync effect */
-    disableProjectSync?: boolean;
-    /** Only hydrate the workspace token; do not eagerly fetch projects */
-    skipProjectFetch?: boolean;
-}
-/**
- * Hook for managing the context switcher data (organizations, workspaces, projects)
- *
- * Data flow:
- * 1. fetchOrganizations() - Get all orgs user has access to (Global Gateway)
- * 2. selectOrganization(org) - Set current org & fetch workspaces for that org
- * 3. selectWorkspace(ws) - Issue workspace token & fetch projects
- * 4. selectProject(proj) - Set current project
- *
- * All GraphQL calls go through graphqlFetch from fe-libs which automatically
- * resolves gateway URLs and injects auth + locale headers.
- *
- * @param options - Optional configuration (gateway base URL overrides)
- */
-export declare function useContextSwitcherData(options?: UseContextSwitcherDataOptions): {
-    organizations: Organization[];
-    workspaces: Workspace[];
-    projects: Project[];
-    currentOrganizationId: string | null;
-    currentWorkspaceId: string | null;
-    currentProjectId: string | null;
-    currentOrganization: Organization | undefined;
-    currentWorkspace: Workspace | undefined;
-    currentProject: Project | undefined;
-    workspaceToken: string | null;
-    isLoadingOrganizations: boolean;
-    isLoadingWorkspaces: boolean;
-    isLoadingProjects: boolean;
-    isLoading: boolean;
-    error: string | null;
-    fetchOrganizations: () => Promise<Organization[]>;
-    fetchWorkspacesForOrg: (organizationId: string) => Promise<Workspace[]>;
-    issueWorkspaceToken: (organizationId: string, workspaceId?: string) => Promise<{
-        success: boolean;
-        token?: string;
-        resolvedWorkspaceId?: string;
-        error?: string;
-    }>;
-    fetchProjects: () => Promise<Project[]>;
-    selectOrganization: (org: Organization) => Promise<Workspace[]>;
-    selectWorkspace: (workspace: Workspace) => Promise<{
-        success: boolean;
-        projects?: Project[];
-        error?: string;
-    }>;
-    selectProject: (project: Project) => void;
-};
-/**
- * Hook to reactively ensure workspaces are synced with the current organization.
- *
- * This handles edge cases where the organization changes but workspaces
- * from a different org are still in the store (e.g., stale data, race conditions).
- *
- * Usage:
- * ```tsx
- * import { useWorkspaceSyncEffect } from '@burdenoff/microfe-auth';
- *
- * function MyComponent() {
- *   useWorkspaceSyncEffect(); // Ensures workspaces stay in sync
- *   // ...
- * }
- * ```
- */
-export declare function useWorkspaceSyncEffect(options?: UseContextSwitcherDataOptions): void;
-/**
- * Hook to reactively ensure projects are loaded when a workspace is selected.
- *
- * This handles the case where a workspace is auto-selected (from URL/localStorage)
- * but projects haven't been fetched yet. It will:
- * 1. Issue a workspace token if not present
- * 2. Fetch projects for the selected workspace
- *
- * Usage:
- * ```tsx
- * import { useProjectSyncEffect } from '@burdenoff/microfe-auth';
- *
- * function MyComponent() {
- *   useProjectSyncEffect(); // Ensures projects are loaded for selected workspace
- *   // ...
- * }
- * ```
- */
-export declare function useProjectSyncEffect(options?: UseContextSwitcherDataOptions): void;
-//# sourceMappingURL=useContextSwitcherData.d.ts.map

package/dist/auth/hooks/useContextSwitcherData.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useContextSwitcherData.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useContextSwitcherData.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAOjE,MAAM,WAAW,6BAA6B;IAC5C;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,+DAA+D;IAC/D,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,wCAAwC;IACxC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,sCAAsC;IACtC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,sEAAsE;IACtE,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAiWD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,CAAC,EAAE,6BAA6B;;;;;;;;;;;;;;;;8BA4IU,OAAO,CAAC,YAAY,EAAE,CAAC;4CAmT/C,MAAM,KAAG,OAAO,CAAC,SAAS,EAAE,CAAC;0CAoElC,MAAM,gBACR,MAAM,KACnB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;yBAuEwC,OAAO,CAAC,OAAO,EAAE,CAAC;8BA8DhD,YAAY,KAAG,OAAO,CAAC,SAAS,EAAE,CAAC;iCAiBlC,SAAS,KACnB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;6BAiDwC,OAAO,KAAG,IAAI;EAqD3D;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,CAAC,EAAE,6BAA6B,QA4DxC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,CAAC,EAAE,6BAA6B,QAoR3E"}

package/dist/auth/hooks/useDelegationOperations.d.ts

@@ -1,33 +0,0 @@
-import { AppUserDelegation, GrantDelegationInput } from '../types';
-
-interface CurrentUserDelegationsResponse {
-    currentUserDelegations: {
-        delegations: AppUserDelegation[];
-        hasMore: boolean;
-        totalCount: number;
-    };
-}
-interface CurrentUserGrantedDelegationsResponse {
-    currentUserGrantedDelegations: {
-        delegations: AppUserDelegation[];
-        hasMore: boolean;
-        totalCount: number;
-    };
-}
-/**
- * Hook for app-user delegation operations
- */
-export declare function useDelegationOperations(): {
-    grantDelegation: (input: GrantDelegationInput) => Promise<AppUserDelegation>;
-    revokeDelegation: (id: string, reason?: string) => Promise<boolean>;
-    getDelegationsForApp: (appId: string) => AppUserDelegation[];
-    hasWorkspaceDelegation: (appId: string, workspaceId: string) => boolean;
-    refetchDelegations: (variables?: Partial<import('@apollo/client').OperationVariables> | undefined) => Promise<import("@apollo/client").ApolloClient.QueryResult<CurrentUserDelegationsResponse>>;
-    refetchGrantedDelegations: (variables?: Partial<import('@apollo/client').OperationVariables> | undefined) => Promise<import("@apollo/client").ApolloClient.QueryResult<CurrentUserGrantedDelegationsResponse>>;
-    delegations: AppUserDelegation[];
-    grantedDelegations: AppUserDelegation[];
-    isLoading: boolean;
-    error: string | null;
-};
-export {};
-//# sourceMappingURL=useDelegationOperations.d.ts.map

package/dist/auth/hooks/useDelegationOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useDelegationOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useDelegationOperations.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAYxE,UAAU,8BAA8B;IACtC,sBAAsB,EAAE;QACtB,WAAW,EAAE,iBAAiB,EAAE,CAAC;QACjC,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAED,UAAU,qCAAqC;IAC7C,6BAA6B,EAAE;QAC7B,WAAW,EAAE,iBAAiB,EAAE,CAAC;QACjC,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAuBD;;GAEG;AACH,wBAAgB,uBAAuB;6BAsF5B,oBAAoB,KAC1B,OAAO,CAAC,iBAAiB,CAAC;2BA0BvB,MAAM,WACD,MAAM,KACd,OAAO,CAAC,OAAO,CAAC;kCAsBkB,MAAM,KAAG,iBAAiB,EAAE;oCAUxD,MAAM,eACA,MAAM,KAClB,OAAO;;;;;;;EAgCX"}

package/dist/auth/hooks/useMfaOperations.d.ts

@@ -1,18 +0,0 @@
-import { MFAMethod, MFASetupResult, MFAVerifyInput, AuthResult } from '../types';
-
-/**
- * Hook for MFA operations
- */
-export declare function useMfaOperations(): {
-    setupMFA: (method: MFAMethod) => Promise<MFASetupResult>;
-    enableMFA: (code: string) => Promise<boolean>;
-    verifyMFA: (input: MFAVerifyInput) => Promise<AuthResult>;
-    disableMFA: () => Promise<boolean>;
-    enableMfa: (code: string) => Promise<boolean>;
-    verifyMfa: (input: MFAVerifyInput) => Promise<AuthResult>;
-    disableMfa: () => Promise<boolean>;
-    mfaRequired: boolean;
-    mfaChallengeId: string | null;
-    isLoading: boolean;
-};
-//# sourceMappingURL=useMfaOperations.d.ts.map

package/dist/auth/hooks/useMfaOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useMfaOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useMfaOperations.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,SAAS,EACT,cAAc,EACd,cAAc,EACd,UAAU,EAEX,MAAM,UAAU,CAAC;AA2DlB;;GAEG;AACH,wBAAgB,gBAAgB;uBAqBE,SAAS,KAAG,OAAO,CAAC,cAAc,CAAC;sBAsBpC,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;uBA0BxB,cAAc,KAAG,OAAO,CAAC,UAAU,CAAC;sBAgEvC,OAAO,CAAC,OAAO,CAAC;sBA1Fd,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;uBA0BxB,cAAc,KAAG,OAAO,CAAC,UAAU,CAAC;sBAgEvC,OAAO,CAAC,OAAO,CAAC;;;;EAwC9C"}

package/dist/auth/hooks/useMyWorkspaces.d.ts

@@ -1,45 +0,0 @@
-import { Workspace } from '../types';
-
-interface MyWorkspacesResponse {
-    myWorkspaces: {
-        total: number;
-        items: Workspace[];
-    };
-}
-/**
- * Hook for fetching user's workspaces and issuing workspace tokens
- *
- * This hook provides:
- * - Fetch workspaces: Query to get all workspaces the user has access to
- * - Issue workspace token: Get a workspace-scoped token for API access
- * - Complete auth flow: Fetch workspaces + auto-select + issue token
- *
- * Uses the shell's Apollo client (via GatewayRoute) for useQuery, and
- * graphqlFetch from fe-libs for imperative calls that need explicit tokens.
- */
-export declare function useMyWorkspaces(): {
-    workspaces: Workspace[];
-    totalWorkspaces: number;
-    currentWorkspaceId: string | null;
-    workspaceToken: string | null;
-    isLoading: boolean;
-    error: string | null;
-    fetchWorkspaces: (accessToken?: string) => Promise<Workspace[]>;
-    issueWorkspaceToken: (workspaceId: string, organizationId: string, accessToken?: string) => Promise<{
-        success: boolean;
-        token?: string;
-        error?: string;
-    }>;
-    selectWorkspace: (workspace: Workspace) => Promise<{
-        success: boolean;
-        error?: string;
-    }>;
-    completeAuthFlow: (accessToken?: string) => Promise<{
-        success: boolean;
-        workspace?: Workspace;
-        error?: string;
-    }>;
-    refetch: (variables?: Partial<import('@apollo/client').OperationVariables> | undefined) => Promise<import("@apollo/client").ApolloClient.QueryResult<MyWorkspacesResponse>>;
-};
-export {};
-//# sourceMappingURL=useMyWorkspaces.d.ts.map

package/dist/auth/hooks/useMyWorkspaces.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useMyWorkspaces.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useMyWorkspaces.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAM1C,UAAU,oBAAoB;IAC5B,YAAY,EAAE;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,SAAS,EAAE,CAAC;KACpB,CAAC;CACH;AAoDD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe;;;;;;;oCAoEN,MAAM,KAAG,OAAO,CAAC,SAAS,EAAE,CAAC;uCA8CnC,MAAM,kBACH,MAAM,gBACR,MAAM,KACnB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;iCAkEnD,SAAS,KACnB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;qCAchC,MAAM,KACnB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,SAAS,CAAC,EAAE,SAAS,CAAC;QACtB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;;EAoGL"}

package/dist/auth/hooks/useOAuthOperations.d.ts

@@ -1,19 +0,0 @@
-import { AuthResult } from '../types';
-
-/**
- * Supported OAuth providers
- */
-export type OAuthProvider = "google" | "github" | "microsoft";
-/**
- * Hook for OAuth authentication operations
- */
-export declare function useOAuthOperations(): {
-    initiateOAuth: (provider: OAuthProvider) => void;
-    completeOAuth: (code: string, state: string) => Promise<AuthResult>;
-    initiateGoogleOAuth: () => void;
-    initiateGitHubOAuth: () => void;
-    initiateMicrosoftOAuth: () => void;
-    isProviderConfigured: (provider: OAuthProvider) => boolean;
-    isLoading: boolean;
-};
-//# sourceMappingURL=useOAuthOperations.d.ts.map

package/dist/auth/hooks/useOAuthOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useOAuthOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useOAuthOperations.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAc,MAAM,UAAU,CAAC;AAgBvD;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,CAAC;AA0G9D;;GAEG;AACH,wBAAgB,kBAAkB;8BAWC,aAAa;0BA+DtC,MAAM,SACL,MAAM,KACZ,OAAO,CAAC,UAAU,CAAC;;;;qCAmGkB,aAAa,KAAG,OAAO;;EAoBhE"}

package/dist/auth/hooks/usePasswordOperations.d.ts

@@ -1,13 +0,0 @@
-import { ChangePasswordInput, PasswordResetRequestResult } from '../types';
-
-/**
- * Hook for password management operations
- * Uses Zustand v5 pattern: selectors for state, getState() for actions
- */
-export declare function usePasswordOperations(): {
-    changePassword: (input: ChangePasswordInput) => Promise<boolean>;
-    requestPasswordReset: (email: string, recaptchaToken?: string) => Promise<PasswordResetRequestResult>;
-    resetPassword: (token: string, newPassword: string) => Promise<boolean>;
-    isLoading: boolean;
-};
-//# sourceMappingURL=usePasswordOperations.d.ts.map

package/dist/auth/hooks/usePasswordOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"usePasswordOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/usePasswordOperations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AAoChF;;;GAGG;AACH,wBAAgB,qBAAqB;4BAqB1B,mBAAmB,KACzB,OAAO,CAAC,OAAO,CAAC;kCAsBV,MAAM,mBACI,MAAM,KACtB,OAAO,CAAC,0BAA0B,CAAC;2BAsB7B,MAAM,eACA,MAAM,KAClB,OAAO,CAAC,OAAO,CAAC;;EA2DpB"}

package/dist/auth/hooks/useSessionOperations.d.ts

@@ -1,52 +0,0 @@
-import { ActiveSessionsQuery } from '../../generated/global-operations';
-import { TokenValidationResponse, ValidateTokensInput } from '../types';
-
-interface TokenInfoQueryResponse {
-    tokenInfo: TokenValidationResponse;
-}
-interface UseSessionOperationsOptions {
-    disableTokenInfoQuery?: boolean;
-    /** Number of sessions to load per page (default: 10) */
-    pageSize?: number;
-}
-/**
- * Hook for session/token management operations
- */
-export declare function useSessionOperations(options?: UseSessionOperationsOptions): {
-    validateTokens: (input: ValidateTokensInput) => Promise<TokenValidationResponse>;
-    isTokenExpired: () => boolean;
-    getTokenRemainingTime: () => number;
-    tokenInfo: TokenValidationResponse | undefined;
-    revokeSession: (sessionId: string) => Promise<boolean>;
-    revokeAllSessions: () => Promise<{
-        success: boolean;
-        revokedCount: number;
-    }>;
-    activeSessions: {
-        __typename?: "Session";
-        id: string;
-        status: import('../../generated/global-types').SessionStatus;
-        ipAddress?: string | null;
-        userAgent?: string | null;
-        location?: string | null;
-        lastActivityAt: string;
-        expiresAt: string;
-        createdAt: string;
-        isCurrent: boolean;
-    }[];
-    sessionsLoading: boolean;
-    refetchSessions: (variables?: Partial<import('../../generated/global-types').Exact<{
-        pagination?: import('../../generated/global-types').InputMaybe<import('../../generated/global-types').PaginationInput>;
-    }>> | undefined) => Promise<import("@apollo/client").ApolloClient.QueryResult<ActiveSessionsQuery>>;
-    page: number;
-    pageSize: number;
-    totalCount: number;
-    totalPages: number;
-    hasMore: boolean;
-    goToNextPage: () => void;
-    goToPrevPage: () => void;
-    isLoading: boolean;
-    refetch: (variables?: Partial<import('@apollo/client').OperationVariables> | undefined) => Promise<import("@apollo/client").ApolloClient.QueryResult<TokenInfoQueryResponse>>;
-};
-export {};
-//# sourceMappingURL=useSessionOperations.d.ts.map

package/dist/auth/hooks/useSessionOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useSessionOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useSessionOperations.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,mBAAmB,EAMpB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAM7E,UAAU,sBAAsB;IAC9B,SAAS,EAAE,uBAAuB,CAAC;CACpC;AAUD,UAAU,2BAA2B;IACnC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,GAAE,2BAAgC;4BAsEhC,mBAAmB,KACzB,OAAO,CAAC,uBAAuB,CAAC;0BAaR,OAAO;iCAQA,MAAM;;+BASA,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;6BAmB7B,OAAO,CAAC;QAC1C,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;EAsDH"}

package/dist/auth/hooks/useSsoOperations.d.ts

@@ -1,65 +0,0 @@
-import { AuthResult, SSOConfig } from '../types';
-
-interface GetSSOConfigResponse {
-    getSSOConfig: SSOConfig | null;
-}
-interface GetSSOConfigVariables {
-    tenantId: string;
-}
-export interface SSOConfigInput {
-    entityId: string;
-    ssoUrl: string;
-    sloUrl?: string;
-    certificate: string;
-    enabled?: boolean;
-    metadata?: Record<string, unknown>;
-}
-export interface SAMLRequestResult {
-    requestId: string;
-    ssoUrl: string;
-    samlRequest: string;
-}
-export interface ExternalOIDCAuthUrlResult {
-    authUrl: string;
-    state: string;
-    nonce: string;
-    codeVerifier: string;
-    relayState?: string;
-}
-export interface OIDCConfig {
-    issuer: string;
-    authorizationEndpoint: string;
-    tokenEndpoint: string;
-    userinfoEndpoint: string;
-    jwksUri: string;
-    registrationEndpoint?: string;
-    scopesSupported: string[];
-    responseTypesSupported: string[];
-    grantTypesSupported: string[];
-}
-/**
- * Hook for SSO/SAML operations
- */
-export declare function useSsoOperations(tenantId?: string): {
-    initiateSsoLogin: (targetTenantId: string, relayState?: string) => Promise<void>;
-    handleSamlCallback: (samlResponse: string, relayState?: string) => Promise<AuthResult>;
-    saveSsoConfig: (configOrTenantId: SSOConfigInput | string, config?: SSOConfigInput) => Promise<SSOConfig>;
-    deleteSsoConfig: (targetTenantId?: string) => Promise<boolean>;
-    getOidcAuthUrl: (clientId: string, redirectUri: string, scopes?: string[]) => Promise<string>;
-    exchangeOidcCode: (code: string, clientId: string, redirectUri: string) => Promise<AuthResult>;
-    validateOidcState: (state: string) => boolean;
-    initiateExternalOidcLogin: (targetTenantId: string, redirectPath?: string) => Promise<void>;
-    handleExternalOidcCallback: (code: string, state: string) => Promise<AuthResult>;
-    isExternalOidcCallback: () => boolean;
-    ssoConfig: SSOConfig | undefined;
-    oidcConfig: OIDCConfig | undefined;
-    isLoading: boolean;
-    isGeneratingRequest: boolean;
-    isAuthenticating: boolean;
-    isSaving: boolean;
-    isDeleting: boolean;
-    isGeneratingOidcUrl: boolean;
-    refetchConfig: (variables?: Partial<GetSSOConfigVariables> | undefined) => Promise<import("@apollo/client").ApolloClient.QueryResult<GetSSOConfigResponse>>;
-};
-export {};
-//# sourceMappingURL=useSsoOperations.d.ts.map

package/dist/auth/hooks/useSsoOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useSsoOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useSsoOperations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAQ,MAAM,UAAU,CAAC;AAwB5D,UAAU,oBAAoB;IAC5B,YAAY,EAAE,SAAS,GAAG,IAAI,CAAC;CAChC;AAED,UAAU,qBAAqB;IAC7B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAkFD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,qBAAqB,EAAE,MAAM,CAAC;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAiCD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,CAAC,EAAE,MAAM;uCAkD9B,MAAM,eACT,MAAM,KAClB,OAAO,CAAC,IAAI,CAAC;uCA0CA,MAAM,eACP,MAAM,KAClB,OAAO,CAAC,UAAU,CAAC;sCAwNF,cAAc,GAAG,MAAM,WAChC,cAAc,KACtB,OAAO,CAAC,SAAS,CAAC;uCAyB2B,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;+BAsB7D,MAAM,eACH,MAAM,WACX,MAAM,EAAE,KACf,OAAO,CAAC,MAAM,CAAC;6BAgCV,MAAM,YACF,MAAM,eACH,MAAM,KAClB,OAAO,CAAC,UAAU,CAAC;+BAoGY,MAAM,KAAG,OAAO;gDAhWhC,MAAM,iBACP,MAAM,KACpB,OAAO,CAAC,IAAI,CAAC;uCA8CR,MAAM,SACL,MAAM,KACZ,OAAO,CAAC,UAAU,CAAC;kCAsGa,OAAO;;;;;;;;;;EAqP3C"}

package/dist/auth/hooks/useTokenRefresh.d.ts

@@ -1,56 +0,0 @@
-/**
- * Automatic workspace token refresh hook
- *
- * Monitors the workspace token and automatically refreshes it
- * 5 minutes before expiry. This ensures uninterrupted access to
- * workspace resources.
- *
- * Usage:
- * ```tsx
- * // In your root App component
- * function App() {
- *   useTokenRefresh({
- *     workspaceAuthServiceUrl: 'http://localhost:3730/graphql',
- *     refreshBeforeExpiry: 5 * 60 * 1000, // 5 minutes
- *   });
- *
- *   return <AppContent />;
- * }
- * ```
- */
-export interface UseTokenRefreshOptions {
-    /**
-     * URL of workspace auth service GraphQL endpoint
-     * Default: http://localhost:3730/graphql
-     */
-    workspaceAuthServiceUrl?: string;
-    /**
-     * Time before expiry to refresh token (in milliseconds)
-     * Default: 5 minutes (300000ms)
-     */
-    refreshBeforeExpiry?: number;
-    /**
-     * Enable/disable auto-refresh
-     * Default: true
-     */
-    enabled?: boolean;
-    /**
-     * Callback when token refresh succeeds
-     */
-    onRefreshSuccess?: (token: string) => void;
-    /**
-     * Callback when token refresh fails
-     */
-    onRefreshError?: (error: Error) => void;
-}
-export declare function useTokenRefresh(options?: UseTokenRefreshOptions): {
-    /**
-     * Manually trigger a token refresh
-     */
-    manualRefresh: () => Promise<string>;
-    /**
-     * Check if auto-refresh is currently scheduled
-     */
-    isScheduled: boolean;
-};
-//# sourceMappingURL=useTokenRefresh.d.ts.map

package/dist/auth/hooks/useTokenRefresh.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useTokenRefresh.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useTokenRefresh.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAEjC;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;OAEG;IACH,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAE3C;;OAEG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CACzC;AAED,wBAAgB,eAAe,CAAC,OAAO,GAAE,sBAA2B;IAyGhE;;OAEG;;IAGH;;OAEG;;EAGN"}

package/dist/auth/hooks/useUserOperations.d.ts

@@ -1,33 +0,0 @@
-import { User, UserConnection, UserFilterInput, PaginationInput, DeleteUserResult } from '../types';
-
-interface UpdateUserProfileInput {
-    avatar?: string;
-    username?: string;
-    firstName?: string;
-    lastName?: string;
-    name?: string;
-    phoneNumber?: string;
-    defaultWorkspaceId?: string;
-    language?: string;
-    timezone?: string;
-}
-interface AdminUpdateUserInput extends UpdateUserProfileInput {
-    role?: string;
-    status?: string;
-    emailVerified?: boolean;
-}
-/**
- * Hook for user management operations
- */
-export declare function useUserOperations(): {
-    getUser: (id: string) => Promise<User | null>;
-    listUsers: (filter?: UserFilterInput, pagination?: PaginationInput) => Promise<UserConnection>;
-    updateCurrentUserProfile: (input: UpdateUserProfileInput) => Promise<User>;
-    updateUser: (id: string, input: AdminUpdateUserInput) => Promise<User>;
-    deleteUser: (id: string) => Promise<DeleteUserResult>;
-    hardDeleteUser: (id: string) => Promise<DeleteUserResult>;
-    currentUser: User | null;
-    isLoading: boolean;
-};
-export {};
-//# sourceMappingURL=useUserOperations.d.ts.map

package/dist/auth/hooks/useUserOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useUserOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useUserOperations.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EACV,IAAI,EACJ,cAAc,EACd,eAAe,EACf,eAAe,EACf,gBAAgB,EACjB,MAAM,UAAU,CAAC;AA2DlB,UAAU,sBAAsB;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,oBAAqB,SAAQ,sBAAsB;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;GAEG;AACH,wBAAgB,iBAAiB;kBAuClB,MAAM,KAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;yBAsB7B,eAAe,eACX,eAAe,KAC3B,OAAO,CAAC,cAAc,CAAC;sCAyBZ,sBAAsB,KAAG,OAAO,CAAC,IAAI,CAAC;qBAgCzC,MAAM,SAAS,oBAAoB,KAAG,OAAO,CAAC,IAAI,CAAC;qBA0BnD,MAAM,KAAG,OAAO,CAAC,gBAAgB,CAAC;yBA0BlC,MAAM,KAAG,OAAO,CAAC,gBAAgB,CAAC;;;EAiChD"}

package/dist/auth/hooks/useWorkspaceOperations.d.ts

@@ -1,35 +0,0 @@
-import { useMutation } from '@apollo/client/react';
-import { WorkspaceTokenResponse, SecretRotationResponse, RotateWorkspaceSecretInput } from '../types';
-
-/**
- * Hook for workspace token and secret operations
- */
-export declare function useWorkspaceOperations(): {
-    generateWorkspaceToken: (_workspaceId: string) => Promise<WorkspaceTokenResponse>;
-    switchWorkspace: (workspaceId: string) => Promise<WorkspaceTokenResponse>;
-    createWorkspaceSecret: (_workspaceId: string) => Promise<boolean>;
-    rotateWorkspaceSecret: (_input: RotateWorkspaceSecretInput) => Promise<SecretRotationResponse>;
-    revokeWorkspaceSecret: (_workspaceId: string) => Promise<boolean>;
-    revokeWorkspaceToken: (_token: string, _reason?: string) => Promise<boolean>;
-    revokeAllMyWorkspaceTokens: (_reason?: string) => Promise<number>;
-    clearWorkspace: () => void;
-    createWorkspaceMutation: useMutation.MutationFunction<unknown, {
-        [x: string]: any;
-    }, import('@apollo/client').ApolloCache>;
-    updateWorkspaceMutation: useMutation.MutationFunction<unknown, {
-        [x: string]: any;
-    }, import('@apollo/client').ApolloCache>;
-    addWorkspaceMemberMutation: useMutation.MutationFunction<unknown, {
-        [x: string]: any;
-    }, import('@apollo/client').ApolloCache>;
-    updateWorkspaceMemberMutation: useMutation.MutationFunction<unknown, {
-        [x: string]: any;
-    }, import('@apollo/client').ApolloCache>;
-    removeWorkspaceMemberMutation: useMutation.MutationFunction<unknown, {
-        [x: string]: any;
-    }, import('@apollo/client').ApolloCache>;
-    currentWorkspaceId: string | null;
-    workspaceToken: string | null;
-    isLoading: boolean;
-};
-//# sourceMappingURL=useWorkspaceOperations.d.ts.map

package/dist/auth/hooks/useWorkspaceOperations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useWorkspaceOperations.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useWorkspaceOperations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AASnD,OAAO,KAAK,EACV,sBAAsB,EACtB,sBAAsB,EACtB,0BAA0B,EAC3B,MAAM,UAAU,CAAC;AAalB;;GAEG;AACH,wBAAgB,sBAAsB;2CAqBpB,MAAM,KACnB,OAAO,CAAC,sBAAsB,CAAC;mCAcnB,MAAM,KAClB,OAAO,CAAC,sBAAsB,CAAC;0CAalB,MAAM,KACnB,OAAO,CAAC,OAAO,CAAC;oCAYT,0BAA0B,KACjC,OAAO,CAAC,sBAAsB,CAAC;0CAclB,MAAM,KACnB,OAAO,CAAC,OAAO,CAAC;mCAYT,MAAM,YACJ,MAAM,KACf,OAAO,CAAC,OAAO,CAAC;2CAYP,MAAM,KACf,OAAO,CAAC,MAAM,CAAC;;;;;;;;;;;;;;;;;;;;EAmCnB"}

package/dist/auth/hooks/useWorkspaceToken.d.ts

@@ -1,56 +0,0 @@
-/**
- * Workspace token management hook
- *
- * Provides functions to issue, refresh, and verify workspace tokens.
- * Automatically updates the auth store with new tokens.
- *
- * API Flow:
- * - Calls workspace gateway (https://gw-wspace.local.burdenoff.com/workspaces/graphql)
- * - Gateway federates wspace-auth-svc which handles token operations
- * - Auth token (from global-auth-svc) goes in Authorization header
- *
- * Usage:
- * ```tsx
- * const { issueToken, refreshToken, verifyToken, isLoading, error } = useWorkspaceToken({
- *   workspaceGatewayUrl: 'https://gw-wspace.local.burdenoff.com/workspaces/graphql'
- * });
- *
- * // After login and organization/workspace selection
- * await issueToken(organizationId, workspaceId);
- *
- * // Refresh token before expiry (uses stored org/workspace IDs)
- * await refreshToken();
- * ```
- */
-export interface UseWorkspaceTokenOptions {
-    /**
-     * URL of workspace gateway GraphQL endpoint
-     * Default: https://gw-wspace.local.burdenoff.com/workspaces/graphql
-     *
-     * Note: This should point to the workspace gateway, NOT directly to wspace-auth-svc.
-     * The gateway federates wspace-auth-svc and handles routing.
-     */
-    workspaceGatewayUrl?: string;
-}
-export interface WorkspaceTokenPayload {
-    sub: string;
-    workspaceId: string;
-    tenantId?: string;
-    email?: string;
-    username?: string;
-    role?: string;
-    scopes: string[];
-    iat: number;
-    exp: number;
-}
-export declare function useWorkspaceToken(options?: UseWorkspaceTokenOptions): {
-    issueToken: (organizationId: string, workspaceId?: string, projectId?: string, scopes?: string[]) => Promise<string>;
-    refreshToken: () => Promise<string>;
-    verifyToken: (token?: string) => Promise<WorkspaceTokenPayload>;
-    decodeToken: (token: string) => WorkspaceTokenPayload;
-    isTokenExpired: (token?: string) => boolean;
-    getTimeUntilExpiry: (token?: string) => number;
-    isLoading: boolean;
-    error: string | null;
-};
-//# sourceMappingURL=useWorkspaceToken.d.ts.map

package/dist/auth/hooks/useWorkspaceToken.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useWorkspaceToken.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useWorkspaceToken.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,wBAA6B;iCAkBlD,MAAM,gBACR,MAAM,cACR,MAAM,WACT,MAAM,EAAE,KAChB,OAAO,CAAC,MAAM,CAAC;wBAoKuB,OAAO,CAAC,MAAM,CAAC;0BA7EzC,MAAM,KAAG,OAAO,CAAC,qBAAqB,CAAC;yBAyFhB,MAAM,KAAG,qBAAqB;6BAoB3D,MAAM,KAAG,OAAO;iCAsBhB,MAAM,KAAG,MAAM;;;EA6B3B"}