@burdenoff/microfe-auth 2026.524.1 → 2026.525.1

package/dist/auth/index.d.ts

@@ -1,63 +0,0 @@
-/**
- * Auth Microfrontend
- *
- * Provides authentication, security settings, and account management interface
- * for the Burdenoff multi-tenant platform.
- *
- * Features:
- * - User authentication (signIn, signUp, signOut, refreshToken)
- * - MFA (TOTP, SMS, Email, WebAuthn)
- * - OAuth and SAML SSO
- * - Magic Link authentication
- * - Workspace token management
- * - User management (admin)
- *
- * Note: API Key management, App management, and App-user delegations
- * have been consolidated into microfe-devportal.
- *
- * @example
- * ```tsx
- * import { AuthRoot, type AuthRootProps } from '@burdenoff/microfe-auth';
- *
- * function App() {
- *   const props: AuthRootProps = {
- *     basePath: '/auth',
- *     navigate: (path) => router.push(path),
- *     apiGatewayUrl: 'https://gw-global.local.burdenoff.com',
- *     authToken: 'token',
- *     onAuthSuccess: (user) => shellLogin(user),
- *     onLogout: () => shellLogout(),
- *   };
- *
- *   return <AuthRoot {...props} />;
- * }
- * ```
- */
-export { AuthRoot } from './AuthRoot';
-export type { AuthRootProps, User, UserRole, UserStatus, UserConnection, UserFilterInput, PaginationInput, } from './types';
-export type { AuthType, AuthMethod, AuthMethodConfig, AuthStrategyHealth, AuthPayload, AuthResult, SignInInput, SignUpInput, ChangePasswordInput, } from './types';
-export type { MFAMethod, MFASetupResult, MFAVerifyInput } from './types';
-export type { OAuthInput, SAMLInput, SAMLRequestResult } from './types';
-export type { AuthContext, MagicLinkSendResult } from './types';
-export type { Organization, OrganizationConnection } from './types';
-export type { Project, ProjectStatus, ProjectConnection } from './types';
-export type { Workspace, WorkspaceSecretStatus, WorkspaceSecretInfo, WorkspaceTokenResponse, GenerateWorkspaceTokenInput, RotateWorkspaceSecretInput, SecretRotationResponse, } from './types';
-export type { TokenValidationError, TokenValidationResponse, ValidateTokensInput, } from './types';
-export type { EmailVerificationResult, ResendVerificationResult, PasswordResetRequestResult, DeleteUserResult, } from './types';
-export type { Session, MfaDevice, OAuthAccount, SecurityAudit, OAuthProvider, SecurityEventType, TrustedDevice, SSOConfig, PasswordStrength, } from './types';
-export { useAuth } from './providers/AuthProvider';
-export { useAuthOperations, useMfaOperations, useSessionOperations, usePasswordOperations, useAuthStore, } from './hooks';
-export { useWorkspaceOperations } from './hooks';
-export { useUserOperations } from './hooks';
-export { useWorkspaceToken } from './hooks/useWorkspaceToken';
-export { useTokenRefresh } from './hooks/useTokenRefresh';
-export { useContextSwitcherData, useWorkspaceSyncEffect, useProjectSyncEffect, } from './hooks';
-export { useMyWorkspaces } from './hooks';
-export type { UseContextSwitcherDataOptions } from './hooks';
-export { WorkspaceSelector } from './components/workspace/WorkspaceSelector';
-export type { WorkspaceSelectorProps } from './components/workspace/WorkspaceSelector';
-export { UserProfileMenu } from './components/profile/UserProfileMenu';
-export type { UserProfileMenuProps } from './components/profile/UserProfileMenu';
-export { SSORelayPage } from './pages/SSORelayPage';
-export { SSORelayCallbackPage } from './pages/SSORelayCallbackPage';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAGtC,YAAY,EACV,aAAa,EACb,IAAI,EACJ,QAAQ,EACR,UAAU,EACV,cAAc,EACd,eAAe,EACf,eAAe,GAChB,MAAM,SAAS,CAAC;AAGjB,YAAY,EACV,QAAQ,EACR,UAAU,EACV,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,UAAU,EACV,WAAW,EACX,WAAW,EACX,mBAAmB,GACpB,MAAM,SAAS,CAAC;AAGjB,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAGzE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAGxE,YAAY,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAGhE,YAAY,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAGpE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAGzE,YAAY,EACV,SAAS,EACT,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,2BAA2B,EAC3B,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,SAAS,CAAC;AAGjB,YAAY,EACV,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,SAAS,CAAC;AAGjB,YAAY,EACV,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,SAAS,CAAC;AAGjB,YAAY,EACV,OAAO,EACP,SAAS,EACT,YAAY,EACZ,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,SAAS,EACT,gBAAgB,GACjB,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAGnD,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,YAAY,GACb,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAG1D,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC1C,YAAY,EAAE,6BAA6B,EAAE,MAAM,SAAS,CAAC;AAG7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAC7E,YAAY,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAGvF,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AACvE,YAAY,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAGjF,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/auth/pages/AuditLogPage.d.ts

@@ -1,12 +0,0 @@
-/**
- * Security audit log page with pagination and export
- *
- * Fragment: AuditLogEntry_AuthAuditLog (graphql/operations/global/fragments/AuditLogEntry.fragment.graphql)
- * Query: AuthAuditLogs (graphql/operations/global/queries/auditLog.graphql)
- *
- * TODO: When authAuditLogs backend migrates to AuthAuditLogConnection type,
- *   update this query to use: authAuditLogs { auditLogs: [...], totalCount, hasMore }
- *   and remove the client-side hasMore approximation below.
- */
-export declare function AuditLogPage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=AuditLogPage.d.ts.map

package/dist/auth/pages/AuditLogPage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AuditLogPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/AuditLogPage.tsx"],"names":[],"mappings":"AAcA;;;;;;;;;GASG;AACH,wBAAgB,YAAY,4CA4Q3B"}

package/dist/auth/pages/EmailVerifyPage.d.ts

@@ -1,5 +0,0 @@
-/**
- * Email verification page with professional design
- */
-export declare function EmailVerifyPage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=EmailVerifyPage.d.ts.map

package/dist/auth/pages/EmailVerifyPage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"EmailVerifyPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/EmailVerifyPage.tsx"],"names":[],"mappings":"AAoBA;;GAEG;AACH,wBAAgB,eAAe,4CAqP9B"}

package/dist/auth/pages/LoginPage.d.ts

@@ -1,6 +0,0 @@
-/**
- * Login page with professional design
- * Provides email/password login and social OAuth options
- */
-export declare function LoginPage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=LoginPage.d.ts.map

package/dist/auth/pages/LoginPage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"LoginPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/LoginPage.tsx"],"names":[],"mappings":"AAkGA;;;GAGG;AACH,wBAAgB,SAAS,4CAulCxB"}

package/dist/auth/pages/MagicLinkPage.d.ts

@@ -1,6 +0,0 @@
-/**
- * Magic Link authentication page
- * Supports both sending magic links and verifying them via token
- */
-export declare function MagicLinkPage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=MagicLinkPage.d.ts.map

package/dist/auth/pages/MagicLinkPage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"MagicLinkPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/MagicLinkPage.tsx"],"names":[],"mappings":"AAuDA;;;GAGG;AACH,wBAAgB,aAAa,4CAuT5B"}

package/dist/auth/pages/MfaSetupPage.d.ts

@@ -1,5 +0,0 @@
-/**
- * MFA setup and management page with professional UI
- */
-export declare function MfaSetupPage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=MfaSetupPage.d.ts.map

package/dist/auth/pages/MfaSetupPage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"MfaSetupPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/MfaSetupPage.tsx"],"names":[],"mappings":"AAcA;;GAEG;AACH,wBAAgB,YAAY,4CAkhB3B"}

package/dist/auth/pages/MfaVerifyPage.d.ts

@@ -1,7 +0,0 @@
-/**
- * MFA verification page with professional design
- * Shown when user needs to verify MFA code during login
- * Handles both regular login MFA and SSO MFA flows
- */
-export declare function MfaVerifyPage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=MfaVerifyPage.d.ts.map

package/dist/auth/pages/MfaVerifyPage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"MfaVerifyPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/MfaVerifyPage.tsx"],"names":[],"mappings":"AAcA;;;;GAIG;AACH,wBAAgB,aAAa,4CAgT5B"}

package/dist/auth/pages/OAuthCallbackPage.d.ts

@@ -1,7 +0,0 @@
-/**
- * OAuth Callback Page
- * Handles the redirect from OAuth providers (Google, GitHub, Microsoft)
- * Extracts the authorization code and completes the authentication flow
- */
-export declare function OAuthCallbackPage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=OAuthCallbackPage.d.ts.map

package/dist/auth/pages/OAuthCallbackPage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"OAuthCallbackPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/OAuthCallbackPage.tsx"],"names":[],"mappings":"AAOA;;;;GAIG;AACH,wBAAgB,iBAAiB,4CAsLhC"}

package/dist/auth/pages/PasswordResetPage.d.ts

@@ -1,6 +0,0 @@
-/**
- * Password reset page with professional design
- * Handles both requesting reset and completing reset with token
- */
-export declare function PasswordResetPage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=PasswordResetPage.d.ts.map

package/dist/auth/pages/PasswordResetPage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PasswordResetPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/PasswordResetPage.tsx"],"names":[],"mappings":"AAkBA;;;GAGG;AACH,wBAAgB,iBAAiB,4CAmiBhC"}

package/dist/auth/pages/ReactivatePage.d.ts

@@ -1,6 +0,0 @@
-/**
- * Account Reactivation Page
- * Allows users to reactivate their deactivated accounts
- */
-export declare function ReactivatePage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=ReactivatePage.d.ts.map

package/dist/auth/pages/ReactivatePage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ReactivatePage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/ReactivatePage.tsx"],"names":[],"mappings":"AAYA;;;GAGG;AACH,wBAAgB,cAAc,4CAyR7B"}

package/dist/auth/pages/RegisterPage.d.ts

@@ -1,5 +0,0 @@
-/**
- * Registration page with professional design
- */
-export declare function RegisterPage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=RegisterPage.d.ts.map

package/dist/auth/pages/RegisterPage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"RegisterPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/RegisterPage.tsx"],"names":[],"mappings":"AAyBA;;GAEG;AACH,wBAAgB,YAAY,4CAwoB3B"}

package/dist/auth/pages/SSOClearPage.d.ts

@@ -1,22 +0,0 @@
-/**
- * SSOClearPage — Cross-Domain Logout at the Central Bridge Host
- *
- * Companion to SSODepositPage. When a user signs out on a product origin,
- * the product app cleared its own localStorage / cookies but the bridge
- * host (alphaapp/app.burdenoff.com) still held the deposited session in
- * first-party (unpartitioned) localStorage. A later visit to any product
- * would then bridge-host-relay that stale session back, effectively
- * undoing the logout.
- *
- * AuthProvider.logout() / logoutAll() on a non-bridge-host origin redirect
- * here via a top-level navigation:
- *
- *   product.com (logout)
- *     → app.burdenoff.com/auth/sso-clear?returnTo=<encoded-return-url>
- *         — wipes bridge-host localStorage + bf-sso cookie
- *     → <returnTo>
- *
- * URL: /auth/sso-clear
- */
-export declare function SSOClearPage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=SSOClearPage.d.ts.map

package/dist/auth/pages/SSOClearPage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SSOClearPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/SSOClearPage.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AA0EH,wBAAgB,YAAY,4CA0B3B"}

package/dist/auth/pages/SSODepositPage.d.ts

@@ -1,24 +0,0 @@
-/**
- * SSODepositPage — Cross-Domain Token Deposit at the Central Bridge Host
- *
- * Loaded as a top-level navigation (NOT an iframe) on the bridge host
- * (alphaapp/app.burdenoff.com) right after a user signs in on any other
- * product origin. It receives the freshly-issued tokens in the URL fragment
- * (`#sso=<base64>` — fragments are never sent to servers) and stores them
- * in this origin's first-party (unpartitioned) localStorage so that:
- *
- *   1. A later top-level visit to the bridge host renders authenticated.
- *   2. Other product origins can discover the session via
- *      `/auth/sso-relay?returnTo=...` against this host.
- *
- * Flow:
- *   product.com/auth/login    → user signs in
- *   product.com               → POST-success redirect to:
- *   app.burdenoff.com/auth/sso-deposit?returnTo=<encoded-return-url>#sso=<base64>
- *                             → writes tokens here, sets bf-sso cookie
- *   <returnTo>                → user lands back at intended dashboard
- *
- * URL: /auth/sso-deposit
- */
-export declare function SSODepositPage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=SSODepositPage.d.ts.map

package/dist/auth/pages/SSODepositPage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SSODepositPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/SSODepositPage.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AA0EH,wBAAgB,cAAc,4CA+D7B"}

package/dist/auth/pages/SSORelayCallbackPage.d.ts

@@ -1,8 +0,0 @@
-/**
- * SSORelayCallbackPage — Receives tokens from the SSO relay and stores them locally.
- *
- * Tokens arrive in the URL fragment (#sso=<base64>) which is never sent to servers.
- * After storing in localStorage, redirects to the returnTo path.
- */
-export declare function SSORelayCallbackPage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=SSORelayCallbackPage.d.ts.map

package/dist/auth/pages/SSORelayCallbackPage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SSORelayCallbackPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/SSORelayCallbackPage.tsx"],"names":[],"mappings":"AAAA;;;;;GAKG;AAoBH,wBAAgB,oBAAoB,4CA0DnC"}

package/dist/auth/pages/SSORelayPage.d.ts

@@ -1,18 +0,0 @@
-/**
- * SSORelayPage — Cross-domain SSO token relay.
- *
- * This page is loaded on the ORIGIN where the user is logged in.
- * It reads tokens from localStorage and redirects to the TARGET domain's
- * /auth/sso-callback with the tokens in a URL fragment (not query param
- * for security — fragments are not sent to servers).
- *
- * Flow:
- * 1. User visits productA.com → not logged in → detects SSO cookie
- * 2. Redirect to productB.com/auth/sso-relay?returnTo=productA.com/dashboard
- *    (productB is where the user IS logged in — identified by cookie)
- * 3. This page reads tokens from productB's localStorage
- * 4. Redirects to productA.com/auth/sso-callback#token=<base64-encoded-tokens>
- * 5. SSORelayCallbackPage on productA decodes and stores tokens, redirects to /dashboard
- */
-export declare function SSORelayPage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=SSORelayPage.d.ts.map

package/dist/auth/pages/SSORelayPage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SSORelayPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/SSORelayPage.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAgNH,wBAAgB,YAAY,4CAoE3B"}

package/dist/auth/pages/SecurityPage.d.ts

@@ -1,5 +0,0 @@
-/**
- * Security Dashboard - Main hub for all authentication features
- */
-export declare function SecurityPage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=SecurityPage.d.ts.map

package/dist/auth/pages/SecurityPage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SecurityPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/SecurityPage.tsx"],"names":[],"mappings":"AA2LA;;GAEG;AACH,wBAAgB,YAAY,4CA+tB3B"}

package/dist/auth/pages/SessionBridgePage.d.ts

@@ -1,14 +0,0 @@
-/**
- * SessionBridgePage — Cross-Domain Auth Session Bridge (Profile-Scoped)
- *
- * Embedded as hidden iframe by other app shells. Manages profile-scoped
- * auth tokens in localStorage and relays state via postMessage.
- *
- * Storage uses ProfileStorageManager keys:
- *   bf-profiles, bf-p-{id}-user, bf-p-{id}-tokens, bf-p-{id}-workspace-token
- *   bf-active-profile (sessionStorage, per-tab)
- *
- * URL: /auth/session-bridge
- */
-export declare function SessionBridgePage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=SessionBridgePage.d.ts.map

package/dist/auth/pages/SessionBridgePage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SessionBridgePage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/SessionBridgePage.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA0QH,wBAAgB,iBAAiB,4CAiNhC"}

package/dist/auth/pages/SessionsPage.d.ts

@@ -1,8 +0,0 @@
-/**
- * Active sessions management page with professional UI
- *
- * Fragment: SessionCard_Session (src/operations/global/fragments/SessionCard.fragment.graphql)
- * Query: ActiveSessions (src/operations/global/queries/sessions.graphql)
- */
-export declare function SessionsPage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=SessionsPage.d.ts.map

package/dist/auth/pages/SessionsPage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SessionsPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/SessionsPage.tsx"],"names":[],"mappings":"AAYA;;;;;GAKG;AACH,wBAAgB,YAAY,4CAoe3B"}

package/dist/auth/pages/SsoCallbackPage.d.ts

@@ -1,8 +0,0 @@
-/**
- * SSO Callback Page
- * Handles redirects from:
- * - SAML ACS server (with token/refreshToken in query params)
- * - OIDC Authorization Server (with code/state in query params)
- */
-export declare function SsoCallbackPage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=SsoCallbackPage.d.ts.map

package/dist/auth/pages/SsoCallbackPage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SsoCallbackPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/SsoCallbackPage.tsx"],"names":[],"mappings":"AAOA;;;;;GAKG;AACH,wBAAgB,eAAe,4CAqW9B"}

package/dist/auth/pages/SsoConfigPage.d.ts

@@ -1,13 +0,0 @@
-interface SsoConfigPageProps {
-    /** When true, skips the enterprise-plan gate so admins always see the full UI */
-    bypassEnterprisePlanGate?: boolean;
-}
-/**
- * SSO Configuration page for managing SAML/OIDC enterprise SSO.
- * Admin only - allows configuring Identity Provider settings.
- * In admin-app context, bypassEnterprisePlanGate=true and tenant/org/workspace
- * scoping is read from URL search params (?tenant=&org=&workspace=).
- */
-export declare function SsoConfigPage({ bypassEnterprisePlanGate, }: SsoConfigPageProps): import("react/jsx-runtime").JSX.Element;
-export {};
-//# sourceMappingURL=SsoConfigPage.d.ts.map

package/dist/auth/pages/SsoConfigPage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SsoConfigPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/SsoConfigPage.tsx"],"names":[],"mappings":"AAiHA,UAAU,kBAAkB;IAC1B,iFAAiF;IACjF,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,EAC5B,wBAAgC,GACjC,EAAE,kBAAkB,2CAqlDpB"}

package/dist/auth/pages/SsoLoginPage.d.ts

@@ -1,7 +0,0 @@
-/**
- * SSO Login Page
- * Allows users to enter their email/company domain to initiate SSO login
- * Supports both SAML 2.0 and OIDC authentication methods
- */
-export declare function SsoLoginPage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=SsoLoginPage.d.ts.map

package/dist/auth/pages/SsoLoginPage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SsoLoginPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/SsoLoginPage.tsx"],"names":[],"mappings":"AASA;;;;GAIG;AACH,wBAAgB,YAAY,4CAgZ3B"}

package/dist/auth/pages/UserDetailsPage.d.ts

@@ -1,11 +0,0 @@
-/**
- * User details page (admin only).
- *
- * Route: /auth/users/:id
- *
- * Renders the full profile of a single user, with admin actions
- * (edit, deactivate, hard-delete, export). Reuses the same getUser query
- * that UsersPage relies on.
- */
-export declare function UserDetailsPage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=UserDetailsPage.d.ts.map

package/dist/auth/pages/UserDetailsPage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"UserDetailsPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/UserDetailsPage.tsx"],"names":[],"mappings":"AA8CA;;;;;;;;GAQG;AACH,wBAAgB,eAAe,4CAmgB9B"}

package/dist/auth/pages/UserProfilePage.d.ts

@@ -1,5 +0,0 @@
-/**
- * User Profile page for viewing and editing own profile
- */
-export declare function UserProfilePage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=UserProfilePage.d.ts.map

package/dist/auth/pages/UserProfilePage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"UserProfilePage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/UserProfilePage.tsx"],"names":[],"mappings":"AA4BA;;GAEG;AACH,wBAAgB,eAAe,4CA+qB9B"}

package/dist/auth/pages/UsersPage.d.ts

@@ -1,5 +0,0 @@
-/**
- * Users CRUDL page for managing users (admin only)
- */
-export declare function UsersPage(): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=UsersPage.d.ts.map

package/dist/auth/pages/UsersPage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"UsersPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/UsersPage.tsx"],"names":[],"mappings":"AA8CA;;GAEG;AACH,wBAAgB,SAAS,4CAw0CxB"}

package/dist/auth/providers/AuthProvider.d.ts

@@ -1,18 +0,0 @@
-import { FC, PropsWithChildren } from 'react';
-import { AuthRootProps } from '../types';
-
-/**
- * Hook to access Auth context
- */
-export declare const useAuth: () => AuthRootProps;
-/**
- * Provider component for Auth microfrontend
- * Sets up routing and context.
- *
- * NOTE: Apollo client is provided by the app shell's MultiGatewayProvider +
- * GatewayRoute. Auth routes are wrapped with <GatewayRoute gateway="global">
- * so all useQuery/useMutation calls automatically use the global gateway client.
- * This MFE does NOT create its own Apollo client.
- */
-export declare const AuthProvider: FC<PropsWithChildren<AuthRootProps>>;
-//# sourceMappingURL=AuthProvider.d.ts.map

package/dist/auth/providers/AuthProvider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AuthProvider.d.ts","sourceRoot":"","sources":["../../../src/auth/providers/AuthProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,iBAAiB,EAAE,MAAM,OAAO,CAAC;AAInD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAS9C;;GAEG;AACH,eAAO,MAAM,OAAO,qBAMnB,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAgD7D,CAAC"}

package/dist/auth/providers/CaptchaProvider.d.ts

@@ -1,13 +0,0 @@
-import { ReactNode } from 'react';
-
-interface CaptchaProviderProps {
-    children: ReactNode;
-}
-/**
- * Provides reCAPTCHA v3 context for invisible captcha.
- * Only loads the Google reCAPTCHA script when VITE_CAPTCHA_ENABLED is "true".
- * Otherwise, renders children directly without loading any scripts.
- */
-export declare function CaptchaProvider({ children }: CaptchaProviderProps): import("react/jsx-runtime").JSX.Element;
-export {};
-//# sourceMappingURL=CaptchaProvider.d.ts.map

package/dist/auth/providers/CaptchaProvider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"CaptchaProvider.d.ts","sourceRoot":"","sources":["../../../src/auth/providers/CaptchaProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAGvD,UAAU,oBAAoB;IAC5B,QAAQ,EAAE,SAAS,CAAC;CACrB;AAwBD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,EAAE,QAAQ,EAAE,EAAE,oBAAoB,2CAUjE"}

package/dist/auth/store/authStore.d.ts

@@ -1,111 +0,0 @@
-import { User, Session, MfaDevice, OAuthAccount, TrustedDevice, SecurityAudit, ApiKey, App, AppUserDelegation, Workspace, Organization, Project } from '../types';
-
-interface AuthState {
-    user: User | null;
-    accessToken: string | null;
-    refreshToken: string | null;
-    isAuthenticated: boolean;
-    organizations: Organization[];
-    currentOrganizationId: string | null;
-    isLoadingOrganizations: boolean;
-    workspaces: Workspace[];
-    currentWorkspaceId: string | null;
-    workspaceToken: string | null;
-    isLoadingWorkspaces: boolean;
-    projects: Project[];
-    currentProjectId: string | null;
-    isLoadingProjects: boolean;
-    mfaRequired: boolean;
-    mfaChallengeId: string | null;
-    mfaDevices: MfaDevice[];
-    activeSessions: Session[];
-    currentSessionId: string | null;
-    linkedAccounts: OAuthAccount[];
-    trustedDevices: TrustedDevice[];
-    securityEvents: SecurityAudit[];
-    apiKeys: ApiKey[];
-    apps: App[];
-    currentApp: App | null;
-    delegations: AppUserDelegation[];
-    grantedDelegations: AppUserDelegation[];
-    isLoading: boolean;
-    error: string | null;
-    errorCode: string | null;
-    setUser: (user: User | null) => void;
-    setAccessToken: (token: string | null) => void;
-    setAuthTokens: (accessToken: string, refreshToken: string) => void;
-    setAuthenticated: (isAuthenticated: boolean) => void;
-    clearAuth: () => void;
-    setOrganizations: (organizations: Organization[]) => void;
-    setCurrentOrganizationId: (orgId: string | null) => void;
-    setLoadingOrganizations: (loading: boolean) => void;
-    setWorkspaces: (workspaces: Workspace[]) => void;
-    setCurrentWorkspaceId: (workspaceId: string | null) => void;
-    setWorkspaceToken: (token: string | null) => void;
-    setLoadingWorkspaces: (loading: boolean) => void;
-    clearWorkspace: () => void;
-    setProjects: (projects: Project[]) => void;
-    setCurrentProjectId: (projectId: string | null) => void;
-    setLoadingProjects: (loading: boolean) => void;
-    clearProject: () => void;
-    clearContext: () => void;
-    loadFromProfile: (profileId: string) => void;
-    setMfaRequired: (required: boolean, challengeId?: string) => void;
-    setMfaDevices: (devices: MfaDevice[]) => void;
-    removeMfaDevice: (deviceId: string) => void;
-    setActiveSessions: (sessions: Session[]) => void;
-    removeSession: (sessionId: string) => void;
-    setLinkedAccounts: (accounts: OAuthAccount[]) => void;
-    removeLinkedAccount: (accountId: string) => void;
-    setTrustedDevices: (devices: TrustedDevice[]) => void;
-    removeTrustedDevice: (deviceId: string) => void;
-    setSecurityEvents: (events: SecurityAudit[]) => void;
-    setApiKeys: (keys: ApiKey[]) => void;
-    removeApiKey: (keyId: string) => void;
-    setApps: (apps: App[]) => void;
-    setCurrentApp: (app: App | null) => void;
-    addApp: (app: App) => void;
-    updateApp: (app: App) => void;
-    removeApp: (appId: string) => void;
-    setDelegations: (delegations: AppUserDelegation[]) => void;
-    setGrantedDelegations: (delegations: AppUserDelegation[]) => void;
-    addDelegation: (delegation: AppUserDelegation) => void;
-    removeDelegation: (delegationId: string) => void;
-    setLoading: (loading: boolean) => void;
-    setError: (error: string | null, errorCode?: string | null) => void;
-}
-/**
- * Auth Zustand store — browser-tab-local state.
- *
- * SAFE for in-memory (no Redis needed):
- *   - accessToken / refreshToken / user: per-tab, backed by profileScopedStorage
- *     (localStorage key bf-p-{profileId}-*). Tabs sharing the same profile ID
- *     stay in sync via the "bf-profile-storage-change" custom event + "storage"
- *     cross-tab event.
- *   - workspaceToken: same pattern as above.
- *   - mfaRequired / mfaChallengeId: transient login-flow state; not needed
- *     cross-tab (each login has its own challenge).
- *   - organizations / workspaces / projects lists: cached context, re-fetched
- *     after account switch; no cross-tab sharing needed.
- *   - UI state (isLoading, error): purely ephemeral.
- *
- * NOT safe for in-memory (needs Redis in future if required server-side):
- *   - Nothing currently — all server-side session tracking is done by the
- *     backend (global-auth-svc) using its own DB. The frontend only holds
- *     short-lived JWT access tokens that expire independently.
- */
-export declare const useAuthStore: import('zustand').UseBoundStore<Omit<import('zustand').StoreApi<AuthState>, "setState" | "persist"> & {
-    setState(partial: AuthState | Partial<AuthState> | ((state: AuthState) => AuthState | Partial<AuthState>), replace?: false | undefined): unknown;
-    setState(state: AuthState | ((state: AuthState) => AuthState), replace: true): unknown;
-    persist: {
-        setOptions: (options: Partial<import('zustand/middleware').PersistOptions<AuthState, unknown, unknown>>) => void;
-        clearStorage: () => void;
-        rehydrate: () => Promise<void> | void;
-        hasHydrated: () => boolean;
-        onHydrate: (fn: (state: AuthState) => void) => () => void;
-        onFinishHydration: (fn: (state: AuthState) => void) => () => void;
-        getOptions: () => Partial<import('zustand/middleware').PersistOptions<AuthState, unknown, unknown>>;
-    };
-}>;
-export {};
-//# sourceMappingURL=authStore.d.ts.map

package/dist/auth/store/authStore.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"authStore.d.ts","sourceRoot":"","sources":["../../../src/auth/store/authStore.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,IAAI,EACJ,OAAO,EACP,SAAS,EACT,YAAY,EACZ,aAAa,EACb,aAAa,EACb,MAAM,EACN,GAAG,EACH,iBAAiB,EACjB,SAAS,EACT,YAAY,EACZ,OAAO,EACR,MAAM,UAAU,CAAC;AAuNlB,UAAU,SAAS;IAEjB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,eAAe,EAAE,OAAO,CAAC;IAGzB,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,sBAAsB,EAAE,OAAO,CAAC;IAGhC,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mBAAmB,EAAE,OAAO,CAAC;IAG7B,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,iBAAiB,EAAE,OAAO,CAAC;IAG3B,WAAW,EAAE,OAAO,CAAC;IACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,SAAS,EAAE,CAAC;IAGxB,cAAc,EAAE,OAAO,EAAE,CAAC;IAC1B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAGhC,cAAc,EAAE,YAAY,EAAE,CAAC;IAG/B,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,cAAc,EAAE,aAAa,EAAE,CAAC;IAGhC,OAAO,EAAE,MAAM,EAAE,CAAC;IAGlB,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,UAAU,EAAE,GAAG,GAAG,IAAI,CAAC;IAGvB,WAAW,EAAE,iBAAiB,EAAE,CAAC;IACjC,kBAAkB,EAAE,iBAAiB,EAAE,CAAC;IAGxC,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAGzB,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,KAAK,IAAI,CAAC;IACrC,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC/C,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,IAAI,CAAC;IACnE,gBAAgB,EAAE,CAAC,eAAe,EAAE,OAAO,KAAK,IAAI,CAAC;IACrD,SAAS,EAAE,MAAM,IAAI,CAAC;IAGtB,gBAAgB,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,KAAK,IAAI,CAAC;IAC1D,wBAAwB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACzD,uBAAuB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IAGpD,aAAa,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,IAAI,CAAC;IACjD,qBAAqB,EAAE,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC5D,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAClD,oBAAoB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IACjD,cAAc,EAAE,MAAM,IAAI,CAAC;IAG3B,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;IAC3C,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACxD,kBAAkB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IAC/C,YAAY,EAAE,MAAM,IAAI,CAAC;IAGzB,YAAY,EAAE,MAAM,IAAI,CAAC;IAGzB,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IAG7C,cAAc,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAClE,aAAa,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,IAAI,CAAC;IAC9C,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAG5C,iBAAiB,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;IACjD,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IAG3C,iBAAiB,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,IAAI,CAAC;IACtD,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IAGjD,iBAAiB,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,IAAI,CAAC;IACtD,mBAAmB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,iBAAiB,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,IAAI,CAAC;IAGrD,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;IACrC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAGtC,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,CAAC;IAC/B,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI,KAAK,IAAI,CAAC;IACzC,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC;IAC3B,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC;IAC9B,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAGnC,cAAc,EAAE,CAAC,WAAW,EAAE,iBAAiB,EAAE,KAAK,IAAI,CAAC;IAC3D,qBAAqB,EAAE,CAAC,WAAW,EAAE,iBAAiB,EAAE,KAAK,IAAI,CAAC;IAClE,aAAa,EAAE,CAAC,UAAU,EAAE,iBAAiB,KAAK,IAAI,CAAC;IACvD,gBAAgB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,IAAI,CAAC;IAGjD,UAAU,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IACvC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;CACrE;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;EAyVxB,CAAC"}