@burdenoff/microfe-auth 2026.527.3 → 2026.528.2

package/dist/auth/components/profile/UserProfileMenu.js.map

@@ -1 +1 @@
-{"version":3,"file":"UserProfileMenu.js","names":[],"sources":["../../../../src/auth/components/profile/UserProfileMenu.tsx"],"sourcesContent":["import { useState, useRef, useEffect } from \"react\";\nimport { useI18n } from \"@burdenoff/fe-libs/shared/providers/shell\";\nimport { LogOut, ChevronDown, Building2, UserPlus } from \"lucide-react\";\nimport { useNavigate } from \"react-router-dom\";\nimport { useAuthStore } from \"../../store/authStore\";\n\nexport interface UserProfileMenuProps {\n  /**\n   * Callback when workspace switcher should be shown\n   */\n  onSwitchWorkspace?: () => void;\n\n  /**\n   * Logout handler (REQUIRED)\n   * Should clear auth state and redirect to login\n   */\n  onLogout: () => void;\n\n  /**\n   * Position of the dropdown menu\n   * @default 'right'\n   */\n  position?: \"left\" | \"right\";\n}\n\n/**\n * User Profile Menu Component\n *\n * Displays user avatar/icon with dropdown menu containing:\n * - User information\n * - Switch Workspace option\n * - Logout button\n *\n * @example\n * ```tsx\n * import { UserProfileMenu } from '@burdenoff/microfe-auth';\n *\n * function AppHeader() {\n *   return (\n *     <div className=\"header\">\n *       <UserProfileMenu\n *         onSwitchWorkspace={() => setShowWorkspaceSwitcher(true)}\n *         position=\"right\"\n *       />\n *     </div>\n *   );\n * }\n * ```\n */\nexport function UserProfileMenu({\n  onSwitchWorkspace,\n  onLogout,\n  position = \"right\",\n}: UserProfileMenuProps) {\n  const { t } = useI18n();\n  const tr = (key: string, fallback: string): string => {\n    const translated = t(key);\n    return translated === key ? fallback : translated;\n  };\n  const [isOpen, setIsOpen] = useState(false);\n  const menuRef = useRef<HTMLDivElement>(null);\n  const navigate = useNavigate();\n\n  const user = useAuthStore((state) => state.user);\n  const currentWorkspaceId = useAuthStore((state) => state.currentWorkspaceId);\n\n  // Close dropdown when clicking outside\n  useEffect(() => {\n    function handleClickOutside(event: MouseEvent) {\n      if (menuRef.current && !menuRef.current.contains(event.target as Node)) {\n        setIsOpen(false);\n      }\n    }\n\n    if (isOpen) {\n      document.addEventListener(\"mousedown\", handleClickOutside);\n      return () =>\n        document.removeEventListener(\"mousedown\", handleClickOutside);\n    }\n  }, [isOpen]);\n\n  const handleLogout = () => {\n    setIsOpen(false);\n    onLogout();\n  };\n\n  const handleSwitchWorkspace = () => {\n    setIsOpen(false);\n    onSwitchWorkspace?.();\n  };\n\n  if (!user) {\n    return null;\n  }\n\n  // Get user initials for avatar\n  const getInitials = () => {\n    if (user.firstName && user.lastName) {\n      return `${user.firstName[0]}${user.lastName[0]}`.toUpperCase();\n    }\n    if (user.name) {\n      const parts = user.name.split(\" \");\n      if (parts.length >= 2) {\n        return `${parts[0][0]}${parts[1][0]}`.toUpperCase();\n      }\n      return user.name.substring(0, 2).toUpperCase();\n    }\n    if (user.username) {\n      return user.username.substring(0, 2).toUpperCase();\n    }\n    return user.email.substring(0, 2).toUpperCase();\n  };\n\n  const displayName =\n    user.name ||\n    `${user.firstName || \"\"} ${user.lastName || \"\"}`.trim() ||\n    user.username;\n\n  return (\n    <div className=\"relative\" ref={menuRef}>\n      {/* Profile Button */}\n      <button type=\"button\"\n        onClick={() => setIsOpen(!isOpen)}\n        className=\"flex items-center gap-2 px-3 py-2 rounded-lg hover:bg-bg-sunken transition-colors\"\n        aria-label=\"User menu\"\n        aria-expanded={isOpen}\n      >\n        {/* Avatar */}\n        <div className=\"size-8 rounded-full bg-accent-blue flex items-center justify-center text-white text-sm font-medium overflow-hidden\">\n          {user.avatar ? (\n            <img\n              src={user.avatar}\n              alt={tr(\"auth.profileMenu.avatarAlt\", \"Profile picture\")}\n              className=\"size-full object-cover\"\n            />\n          ) : (\n            getInitials()\n          )}\n        </div>\n\n        {/* User Name (optional, hide on small screens) */}\n        <span className=\"hidden sm:block text-sm font-medium text-text-secondary\">\n          {displayName}\n        </span>\n\n        {/* Chevron */}\n        <ChevronDown\n          className={`size-4 text-text-secondary transition-transform ${\n            isOpen ? \"rotate-180\" : \"\"\n          }`}\n        />\n      </button>\n\n      {/* Dropdown Menu */}\n      {isOpen && (\n        <div\n          className={`absolute top-full mt-2 w-64 bg-bg-surface rounded-lg shadow-lg border border-border-subtle py-2 z-50 ${\n            position === \"right\" ? \"right-0\" : \"left-0\"\n          }`}\n        >\n          {/* User Info Section */}\n          <div className=\"px-4 py-3 border-b border-border-subtle\">\n            <p className=\"text-sm font-medium text-foreground truncate\">\n              {displayName}\n            </p>\n            <p className=\"text-xs text-text-secondary truncate\">{user.email}</p>\n            {currentWorkspaceId && (\n              <p className=\"text-xs text-text-tertiary mt-1 truncate\">\n                Workspace: {currentWorkspaceId.substring(0, 8)}...\n              </p>\n            )}\n          </div>\n\n          {/* Menu Items */}\n          <div className=\"py-1\">\n            {/* Switch Workspace */}\n            {onSwitchWorkspace && (\n              <button type=\"button\"\n                onClick={handleSwitchWorkspace}\n                className=\"w-full flex items-center gap-3 px-4 py-2 text-sm text-text-secondary hover:bg-bg-sunken transition-colors\"\n              >\n                <Building2 className=\"size-4\" />\n                <span>\n                  {tr(\"auth.profileMenu.switchWorkspace\", \"Switch Workspace\")}\n                </span>\n              </button>\n            )}\n\n            {/* Add Account */}\n            <button type=\"button\"\n              onClick={() => {\n                setIsOpen(false);\n                const returnTo = encodeURIComponent(\n                  window.location.pathname + window.location.search,\n                );\n                navigate(`/auth/login?mode=add-account&returnTo=${returnTo}`);\n              }}\n              className=\"w-full flex items-center gap-3 px-4 py-2 text-sm text-text-secondary hover:bg-bg-sunken transition-colors\"\n            >\n              <UserPlus className=\"size-4\" />\n              <span>{tr(\"auth.profileMenu.addAccount\", \"Add account\")}</span>\n            </button>\n\n            {/* Logout */}\n            <button type=\"button\"\n              onClick={handleLogout}\n              className=\"w-full flex items-center gap-3 px-4 py-2 text-sm text-status-error-text hover:bg-status-error-bg-subtle transition-colors\"\n            >\n              <LogOut className=\"size-4\" />\n              <span>{tr(\"auth.profileMenu.logout\", \"Logout\")}</span>\n            </button>\n          </div>\n        </div>\n      )}\n    </div>\n  );\n}\n"],"mappings":";;;;;;;AAiDA,SAAgB,EAAgB,EAC9B,sBACA,aACA,cAAW,WACY;CACvB,IAAM,EAAE,SAAM,GAAS,EACjB,KAAM,GAAa,MAA6B;EACpD,IAAM,IAAa,EAAE,EAAI;AACzB,SAAO,MAAe,IAAM,IAAW;IAEnC,CAAC,GAAQ,KAAa,EAAS,GAAM,EACrC,IAAU,EAAuB,KAAK,EACtC,IAAW,GAAa,EAExB,IAAO,GAAc,MAAU,EAAM,KAAK,EAC1C,IAAqB,GAAc,MAAU,EAAM,mBAAmB;AAG5E,SAAgB;EACd,SAAS,EAAmB,GAAmB;AAC7C,GAAI,EAAQ,WAAW,CAAC,EAAQ,QAAQ,SAAS,EAAM,OAAe,IACpE,EAAU,GAAM;;AAIpB,MAAI,EAEF,QADA,SAAS,iBAAiB,aAAa,EAAmB,QAExD,SAAS,oBAAoB,aAAa,EAAmB;IAEhE,CAAC,EAAO,CAAC;CAEZ,IAAM,UAAqB;AAEzB,EADA,EAAU,GAAM,EAChB,GAAU;IAGN,UAA8B;AAElC,EADA,EAAU,GAAM,EAChB,KAAqB;;AAGvB,KAAI,CAAC,EACH,QAAO;CAIT,IAAM,UAAoB;AACxB,MAAI,EAAK,aAAa,EAAK,SACzB,QAAO,GAAG,EAAK,UAAU,KAAK,EAAK,SAAS,KAAK,aAAa;AAEhE,MAAI,EAAK,MAAM;GACb,IAAM,IAAQ,EAAK,KAAK,MAAM,IAAI;AAIlC,UAHI,EAAM,UAAU,IACX,GAAG,EAAM,GAAG,KAAK,EAAM,GAAG,KAAK,aAAa,GAE9C,EAAK,KAAK,UAAU,GAAG,EAAE,CAAC,aAAa;;AAKhD,SAHI,EAAK,WACA,EAAK,SAAS,UAAU,GAAG,EAAE,CAAC,aAAa,GAE7C,EAAK,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa;IAG3C,IACJ,EAAK,QACL,GAAG,EAAK,aAAa,GAAG,GAAG,EAAK,YAAY,KAAK,MAAM,IACvD,EAAK;AAEP,QACE,kBAAC,OAAD;EAAK,WAAU;EAAW,KAAK;YAA/B,CAEE,kBAAC,UAAD;GAAQ,MAAK;GACX,eAAe,EAAU,CAAC,EAAO;GACjC,WAAU;GACV,cAAW;GACX,iBAAe;aAJjB;IAOE,kBAAC,OAAD;KAAK,WAAU;eACZ,EAAK,SACJ,kBAAC,OAAD;MACE,KAAK,EAAK;MACV,KAAK,EAAG,8BAA8B,kBAAkB;MACxD,WAAU;MACV,CAAA,GAEF,GAAa;KAEX,CAAA;IAGN,kBAAC,QAAD;KAAM,WAAU;eACb;KACI,CAAA;IAGP,kBAAC,GAAD,EACE,WAAW,mDACT,IAAS,eAAe,MAE1B,CAAA;IACK;MAGR,KACC,kBAAC,OAAD;GACE,WAAW,wGACT,MAAa,UAAU,YAAY;aAFvC,CAME,kBAAC,OAAD;IAAK,WAAU;cAAf;KACE,kBAAC,KAAD;MAAG,WAAU;gBACV;MACC,CAAA;KACJ,kBAAC,KAAD;MAAG,WAAU;gBAAwC,EAAK;MAAU,CAAA;KACnE,KACC,kBAAC,KAAD;MAAG,WAAU;gBAAb;OAAwD;OAC1C,EAAmB,UAAU,GAAG,EAAE;OAAC;OAC7C;;KAEF;OAGN,kBAAC,OAAD;IAAK,WAAU;cAAf;KAEG,KACC,kBAAC,UAAD;MAAQ,MAAK;MACX,SAAS;MACT,WAAU;gBAFZ,CAIE,kBAAC,GAAD,EAAW,WAAU,UAAW,CAAA,EAChC,kBAAC,QAAD,EAAA,UACG,EAAG,oCAAoC,mBAAmB,EACtD,CAAA,CACA;;KAIX,kBAAC,UAAD;MAAQ,MAAK;MACX,eAAe;AAKb,OAJA,EAAU,GAAM,EAIhB,EAAS,yCAHQ,mBACf,OAAO,SAAS,WAAW,OAAO,SAAS,OAC5C,GAC4D;;MAE/D,WAAU;gBARZ,CAUE,kBAAC,GAAD,EAAU,WAAU,UAAW,CAAA,EAC/B,kBAAC,QAAD,EAAA,UAAO,EAAG,+BAA+B,cAAc,EAAQ,CAAA,CACxD;;KAGT,kBAAC,UAAD;MAAQ,MAAK;MACX,SAAS;MACT,WAAU;gBAFZ,CAIE,kBAAC,GAAD,EAAQ,WAAU,UAAW,CAAA,EAC7B,kBAAC,QAAD,EAAA,UAAO,EAAG,2BAA2B,SAAS,EAAQ,CAAA,CAC/C;;KACL;MACF;KAEJ"}
+{"version":3,"file":"UserProfileMenu.js","names":[],"sources":["../../../../src/auth/components/profile/UserProfileMenu.tsx"],"sourcesContent":["import { useState, useRef, useEffect } from \"react\";\nimport { useI18n } from \"@burdenoff/fe-libs/shared/providers/shell\";\nimport { LogOut, ChevronDown, Building2, UserPlus } from \"lucide-react\";\nimport { useNavigate } from \"react-router-dom\";\nimport { useAuthStore } from \"../../store/authStore\";\n\nexport interface UserProfileMenuProps {\n  /**\n   * Callback when workspace switcher should be shown\n   */\n  onSwitchWorkspace?: () => void;\n\n  /**\n   * Logout handler (REQUIRED)\n   * Should clear auth state and redirect to login\n   */\n  onLogout: () => void;\n\n  /**\n   * Position of the dropdown menu\n   * @default 'right'\n   */\n  position?: \"left\" | \"right\";\n}\n\n/**\n * User Profile Menu Component\n *\n * Displays user avatar/icon with dropdown menu containing:\n * - User information\n * - Switch Workspace option\n * - Logout button\n *\n * @example\n * ```tsx\n * import { UserProfileMenu } from '@burdenoff/microfe-auth';\n *\n * function AppHeader() {\n *   return (\n *     <div className=\"header\">\n *       <UserProfileMenu\n *         onSwitchWorkspace={() => setShowWorkspaceSwitcher(true)}\n *         position=\"right\"\n *       />\n *     </div>\n *   );\n * }\n * ```\n */\nexport function UserProfileMenu({\n  onSwitchWorkspace,\n  onLogout,\n  position = \"right\",\n}: UserProfileMenuProps) {\n  const { t } = useI18n();\n  const tr = (key: string, fallback: string): string => {\n    const translated = t(key);\n    return translated === key ? fallback : translated;\n  };\n  const [isOpen, setIsOpen] = useState(false);\n  const menuRef = useRef<HTMLDivElement>(null);\n  const navigate = useNavigate();\n\n  const user = useAuthStore((state) => state.user);\n  const currentWorkspaceId = useAuthStore((state) => state.currentWorkspaceId);\n\n  // Close dropdown when clicking outside\n  useEffect(() => {\n    function handleClickOutside(event: MouseEvent) {\n      if (menuRef.current && !menuRef.current.contains(event.target as Node)) {\n        setIsOpen(false);\n      }\n    }\n\n    if (isOpen) {\n      document.addEventListener(\"mousedown\", handleClickOutside);\n      return () =>\n        document.removeEventListener(\"mousedown\", handleClickOutside);\n    }\n  }, [isOpen]);\n\n  const handleLogout = () => {\n    setIsOpen(false);\n    onLogout();\n  };\n\n  const handleSwitchWorkspace = () => {\n    setIsOpen(false);\n    onSwitchWorkspace?.();\n  };\n\n  if (!user) {\n    return null;\n  }\n\n  // Get user initials for avatar\n  const getInitials = () => {\n    if (user.firstName && user.lastName) {\n      return `${user.firstName[0]}${user.lastName[0]}`.toUpperCase();\n    }\n    if (user.name) {\n      const parts = user.name.split(\" \");\n      if (parts.length >= 2) {\n        return `${parts[0][0]}${parts[1][0]}`.toUpperCase();\n      }\n      return user.name.substring(0, 2).toUpperCase();\n    }\n    if (user.username) {\n      return user.username.substring(0, 2).toUpperCase();\n    }\n    return user.email.substring(0, 2).toUpperCase();\n  };\n\n  const displayName =\n    user.name ||\n    `${user.firstName || \"\"} ${user.lastName || \"\"}`.trim() ||\n    user.username;\n\n  return (\n    <div className=\"relative\" ref={menuRef}>\n      {/* Profile Button */}\n      <button\n        type=\"button\"\n        onClick={() => setIsOpen(!isOpen)}\n        className=\"flex items-center gap-2 px-3 py-2 rounded-lg hover:bg-bg-sunken transition-colors\"\n        aria-label=\"User menu\"\n        aria-expanded={isOpen}\n      >\n        {/* Avatar */}\n        <div className=\"size-8 rounded-full bg-accent-blue flex items-center justify-center text-white text-sm font-medium overflow-hidden\">\n          {user.avatar ? (\n            <img\n              src={user.avatar}\n              alt={tr(\"auth.profileMenu.avatarAlt\", \"Profile picture\")}\n              className=\"size-full object-cover\"\n            />\n          ) : (\n            getInitials()\n          )}\n        </div>\n\n        {/* User Name (optional, hide on small screens) */}\n        <span className=\"hidden sm:block text-sm font-medium text-text-secondary\">\n          {displayName}\n        </span>\n\n        {/* Chevron */}\n        <ChevronDown\n          className={`size-4 text-text-secondary transition-transform ${\n            isOpen ? \"rotate-180\" : \"\"\n          }`}\n        />\n      </button>\n\n      {/* Dropdown Menu */}\n      {isOpen && (\n        <div\n          className={`absolute top-full mt-2 w-64 bg-bg-surface rounded-lg shadow-lg border border-border-subtle py-2 z-50 ${\n            position === \"right\" ? \"right-0\" : \"left-0\"\n          }`}\n        >\n          {/* User Info Section */}\n          <div className=\"px-4 py-3 border-b border-border-subtle\">\n            <p className=\"text-sm font-medium text-foreground truncate\">\n              {displayName}\n            </p>\n            <p className=\"text-xs text-text-secondary truncate\">{user.email}</p>\n            {currentWorkspaceId && (\n              <p className=\"text-xs text-text-tertiary mt-1 truncate\">\n                Workspace: {currentWorkspaceId.substring(0, 8)}...\n              </p>\n            )}\n          </div>\n\n          {/* Menu Items */}\n          <div className=\"py-1\">\n            {/* Switch Workspace */}\n            {onSwitchWorkspace && (\n              <button\n                type=\"button\"\n                onClick={handleSwitchWorkspace}\n                className=\"w-full flex items-center gap-3 px-4 py-2 text-sm text-text-secondary hover:bg-bg-sunken transition-colors\"\n              >\n                <Building2 className=\"size-4\" />\n                <span>\n                  {tr(\"auth.profileMenu.switchWorkspace\", \"Switch Workspace\")}\n                </span>\n              </button>\n            )}\n\n            {/* Add Account */}\n            <button\n              type=\"button\"\n              onClick={() => {\n                setIsOpen(false);\n                const returnTo = encodeURIComponent(\n                  window.location.pathname + window.location.search,\n                );\n                navigate(`/auth/login?mode=add-account&returnTo=${returnTo}`);\n              }}\n              className=\"w-full flex items-center gap-3 px-4 py-2 text-sm text-text-secondary hover:bg-bg-sunken transition-colors\"\n            >\n              <UserPlus className=\"size-4\" />\n              <span>{tr(\"auth.profileMenu.addAccount\", \"Add account\")}</span>\n            </button>\n\n            {/* Logout */}\n            <button\n              type=\"button\"\n              onClick={handleLogout}\n              className=\"w-full flex items-center gap-3 px-4 py-2 text-sm text-status-error-text hover:bg-status-error-bg-subtle transition-colors\"\n            >\n              <LogOut className=\"size-4\" />\n              <span>{tr(\"auth.profileMenu.logout\", \"Logout\")}</span>\n            </button>\n          </div>\n        </div>\n      )}\n    </div>\n  );\n}\n"],"mappings":";;;;;;;AAiDA,SAAgB,EAAgB,EAC9B,sBACA,aACA,cAAW,WACY;CACvB,IAAM,EAAE,SAAM,GAAS,EACjB,KAAM,GAAa,MAA6B;EACpD,IAAM,IAAa,EAAE,EAAI;AACzB,SAAO,MAAe,IAAM,IAAW;IAEnC,CAAC,GAAQ,KAAa,EAAS,GAAM,EACrC,IAAU,EAAuB,KAAK,EACtC,IAAW,GAAa,EAExB,IAAO,GAAc,MAAU,EAAM,KAAK,EAC1C,IAAqB,GAAc,MAAU,EAAM,mBAAmB;AAG5E,SAAgB;EACd,SAAS,EAAmB,GAAmB;AAC7C,GAAI,EAAQ,WAAW,CAAC,EAAQ,QAAQ,SAAS,EAAM,OAAe,IACpE,EAAU,GAAM;;AAIpB,MAAI,EAEF,QADA,SAAS,iBAAiB,aAAa,EAAmB,QAExD,SAAS,oBAAoB,aAAa,EAAmB;IAEhE,CAAC,EAAO,CAAC;CAEZ,IAAM,UAAqB;AAEzB,EADA,EAAU,GAAM,EAChB,GAAU;IAGN,UAA8B;AAElC,EADA,EAAU,GAAM,EAChB,KAAqB;;AAGvB,KAAI,CAAC,EACH,QAAO;CAIT,IAAM,UAAoB;AACxB,MAAI,EAAK,aAAa,EAAK,SACzB,QAAO,GAAG,EAAK,UAAU,KAAK,EAAK,SAAS,KAAK,aAAa;AAEhE,MAAI,EAAK,MAAM;GACb,IAAM,IAAQ,EAAK,KAAK,MAAM,IAAI;AAIlC,UAHI,EAAM,UAAU,IACX,GAAG,EAAM,GAAG,KAAK,EAAM,GAAG,KAAK,aAAa,GAE9C,EAAK,KAAK,UAAU,GAAG,EAAE,CAAC,aAAa;;AAKhD,SAHI,EAAK,WACA,EAAK,SAAS,UAAU,GAAG,EAAE,CAAC,aAAa,GAE7C,EAAK,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa;IAG3C,IACJ,EAAK,QACL,GAAG,EAAK,aAAa,GAAG,GAAG,EAAK,YAAY,KAAK,MAAM,IACvD,EAAK;AAEP,QACE,kBAAC,OAAD;EAAK,WAAU;EAAW,KAAK;YAA/B,CAEE,kBAAC,UAAD;GACE,MAAK;GACL,eAAe,EAAU,CAAC,EAAO;GACjC,WAAU;GACV,cAAW;GACX,iBAAe;aALjB;IAQE,kBAAC,OAAD;KAAK,WAAU;eACZ,EAAK,SACJ,kBAAC,OAAD;MACE,KAAK,EAAK;MACV,KAAK,EAAG,8BAA8B,kBAAkB;MACxD,WAAU;MACV,CAAA,GAEF,GAAa;KAEX,CAAA;IAGN,kBAAC,QAAD;KAAM,WAAU;eACb;KACI,CAAA;IAGP,kBAAC,GAAD,EACE,WAAW,mDACT,IAAS,eAAe,MAE1B,CAAA;IACK;MAGR,KACC,kBAAC,OAAD;GACE,WAAW,wGACT,MAAa,UAAU,YAAY;aAFvC,CAME,kBAAC,OAAD;IAAK,WAAU;cAAf;KACE,kBAAC,KAAD;MAAG,WAAU;gBACV;MACC,CAAA;KACJ,kBAAC,KAAD;MAAG,WAAU;gBAAwC,EAAK;MAAU,CAAA;KACnE,KACC,kBAAC,KAAD;MAAG,WAAU;gBAAb;OAAwD;OAC1C,EAAmB,UAAU,GAAG,EAAE;OAAC;OAC7C;;KAEF;OAGN,kBAAC,OAAD;IAAK,WAAU;cAAf;KAEG,KACC,kBAAC,UAAD;MACE,MAAK;MACL,SAAS;MACT,WAAU;gBAHZ,CAKE,kBAAC,GAAD,EAAW,WAAU,UAAW,CAAA,EAChC,kBAAC,QAAD,EAAA,UACG,EAAG,oCAAoC,mBAAmB,EACtD,CAAA,CACA;;KAIX,kBAAC,UAAD;MACE,MAAK;MACL,eAAe;AAKb,OAJA,EAAU,GAAM,EAIhB,EAAS,yCAHQ,mBACf,OAAO,SAAS,WAAW,OAAO,SAAS,OAC5C,GAC4D;;MAE/D,WAAU;gBATZ,CAWE,kBAAC,GAAD,EAAU,WAAU,UAAW,CAAA,EAC/B,kBAAC,QAAD,EAAA,UAAO,EAAG,+BAA+B,cAAc,EAAQ,CAAA,CACxD;;KAGT,kBAAC,UAAD;MACE,MAAK;MACL,SAAS;MACT,WAAU;gBAHZ,CAKE,kBAAC,GAAD,EAAQ,WAAU,UAAW,CAAA,EAC7B,kBAAC,QAAD,EAAA,UAAO,EAAG,2BAA2B,SAAS,EAAQ,CAAA,CAC/C;;KACL;MACF;KAEJ"}

package/dist/auth/hooks/useMfaOperations.js

@@ -44,27 +44,31 @@ function d() {
 	}, b = async (e) => {
 		try {
 			d.setLoading(!0);
-			let { data: t } = await g({ variables: { input: e } }), n = t.verifyMFA;
-			if (n.success && n.user && n.token) {
-				d.setUser(n.user), d.setAuthTokens(n.token, n.refreshToken || ""), d.setAuthenticated(!0), d.setMfaRequired(!1);
-				let e = n.expiresIn ? Date.now() + n.expiresIn * 1e3 : void 0;
-				o(l(n.user), {
-					accessToken: n.token,
-					refreshToken: n.refreshToken || "",
+			let { data: t, error: n } = await g({ variables: { input: e } }), r = t?.verifyMFA;
+			if (!r) return {
+				success: !1,
+				error: n?.message || "Invalid verification code. Please try again."
+			};
+			if (r.success && r.user && r.token) {
+				d.setUser(r.user), d.setAuthTokens(r.token, r.refreshToken || ""), d.setAuthenticated(!0), d.setMfaRequired(!1);
+				let e = r.expiresIn ? Date.now() + r.expiresIn * 1e3 : void 0;
+				o(l(r.user), {
+					accessToken: r.token,
+					refreshToken: r.refreshToken || "",
 					expiresAt: e
-				}), u(n.user.id), p.emit("auth.signed_in", {
-					userId: n.user.id,
-					tenantId: n.user.tenantId,
-					workspaceId: n.user.defaultWorkspaceId,
-					mfaEnabled: n.user.mfaEnabled,
-					emailVerified: n.user.emailVerified
-				}, { component: "useMfaOperations" }), f.onAuthSuccess?.(n.user, n.token, n.refreshToken);
+				}), u(r.user.id), p.emit("auth.signed_in", {
+					userId: r.user.id,
+					tenantId: r.user.tenantId,
+					workspaceId: r.user.defaultWorkspaceId,
+					mfaEnabled: r.user.mfaEnabled,
+					emailVerified: r.user.emailVerified
+				}, { component: "useMfaOperations" }), f.onAuthSuccess?.(r.user, r.token, r.refreshToken);
 			} else console.warn("[useMfaOperations] NOT saving tokens - condition failed:", {
-				success: n.success,
-				hasUser: !!n.user,
-				hasToken: !!n.token
+				success: r.success,
+				hasUser: !!r.user,
+				hasToken: !!r.token
 			});
-			return n;
+			return r;
 		} catch (e) {
 			throw e;
 		} finally {

package/dist/auth/hooks/useMfaOperations.js.map

@@ -1 +1 @@
-{"version":3,"file":"useMfaOperations.js","names":[],"sources":["../../../src/auth/hooks/useMfaOperations.ts"],"sourcesContent":["import { useMutation } from \"@apollo/client/react\";\nimport { useEventBus } from \"@burdenoff/fe-libs/shared/events\";\nimport {\n  loginProfile,\n  type ProfileUser,\n} from \"@burdenoff/fe-libs/shared/providers/shell/ProfileStorageManager\";\nimport { useAuthStore } from \"../store/authStore\";\nimport { useAuth } from \"../providers/AuthProvider\";\nimport {\n  SetupMfaDocument,\n  EnableMfaDocument,\n  VerifyMfaDocument,\n  DisableMfaDocument,\n} from \"../../generated/global-operations\";\nimport type {\n  MFAMethod,\n  MFASetupResult,\n  MFAVerifyInput,\n  AuthResult,\n  User,\n} from \"../types\";\n\nfunction toProfileUser(user: User): ProfileUser {\n  return { ...user };\n}\n\nfunction setShellSsoCookie(userId: string): void {\n  try {\n    const hostname = window.location.hostname;\n    const domain = hostname.endsWith(\".local.burdenoff.com\")\n      ? \".local.burdenoff.com\"\n      : undefined;\n    const domainPart = domain ? `; domain=${domain}` : \"\";\n    const securePart = window.location.protocol === \"https:\" ? \"; secure\" : \"\";\n    const ssoValue = JSON.stringify({\n      id: userId,\n      origin: window.location.origin,\n    });\n    document.cookie = `bf-sso=${encodeURIComponent(ssoValue)}${domainPart}; path=/; samesite=lax${securePart}; max-age=86400`;\n    document.cookie = `bf-sso-profile=${encodeURIComponent(ssoValue)}${domainPart}; path=/; samesite=lax${securePart}; max-age=86400`;\n  } catch {\n    // Best effort only.\n  }\n}\n\n// =============================================================================\n// GRAPHQL RESPONSE INTERFACES\n// =============================================================================\n\ninterface SetupMFAResponse {\n  setupMFA: MFASetupResult;\n}\n\ninterface SetupMFAVariables {\n  method: MFAMethod;\n}\n\ninterface EnableMFAResponse {\n  enableMFA: boolean;\n}\n\ninterface EnableMFAVariables {\n  code: string;\n}\n\ninterface VerifyMFAResponse {\n  verifyMFA: AuthResult;\n}\n\ninterface VerifyMFAVariables {\n  input: MFAVerifyInput;\n}\n\ninterface DisableMFAResponse {\n  disableMFA: boolean;\n}\n\n// GraphQL Operations\n\n/**\n * Hook for MFA operations\n */\nexport function useMfaOperations() {\n  const store = useAuthStore();\n  const context = useAuth();\n  const eventBus = useEventBus();\n  const [setupMfaMutation] = useMutation<SetupMFAResponse, SetupMFAVariables>(\n    SetupMfaDocument,\n  );\n  const [enableMfaMutation] = useMutation<\n    EnableMFAResponse,\n    EnableMFAVariables\n  >(EnableMfaDocument);\n  const [verifyMfaMutation] = useMutation<\n    VerifyMFAResponse,\n    VerifyMFAVariables\n  >(VerifyMfaDocument);\n  const [disableMfaMutation] =\n    useMutation<DisableMFAResponse>(DisableMfaDocument);\n\n  /**\n   * Setup MFA for the user\n   */\n  const setupMFA = async (method: MFAMethod): Promise<MFASetupResult> => {\n    try {\n      store.setLoading(true);\n\n      const { data } = await setupMfaMutation({\n        variables: { method },\n      });\n\n      return data!.setupMFA;\n    } catch (error) {\n      if (import.meta.env.DEV) {\n        console.error(\"MFA setup failed:\", error);\n      }\n      throw error;\n    } finally {\n      store.setLoading(false);\n    }\n  };\n\n  /**\n   * Enable MFA after setup with verification code\n   */\n  const enableMFA = async (code: string): Promise<boolean> => {\n    try {\n      store.setLoading(true);\n\n      const { data } = await enableMfaMutation({\n        variables: { code },\n      });\n\n      if (data!.enableMFA && store.user) {\n        store.setUser({ ...store.user, mfaEnabled: true });\n      }\n\n      return data!.enableMFA;\n    } catch (error) {\n      if (import.meta.env.DEV) {\n        console.error(\"Failed to enable MFA:\", error);\n      }\n      throw error;\n    } finally {\n      store.setLoading(false);\n    }\n  };\n\n  /**\n   * Verify MFA code during login\n   */\n  const verifyMFA = async (input: MFAVerifyInput): Promise<AuthResult> => {\n    try {\n      store.setLoading(true);\n\n      const { data } = await verifyMfaMutation({\n        variables: { input },\n      });\n\n      const result = data!.verifyMFA;\n\n      if (result.success && result.user && result.token) {\n        store.setUser(result.user);\n        store.setAuthTokens(result.token, result.refreshToken || \"\");\n        store.setAuthenticated(true);\n        store.setMfaRequired(false);\n\n        const expiresAt = result.expiresIn\n          ? Date.now() + result.expiresIn * 1000\n          : undefined;\n        loginProfile(toProfileUser(result.user), {\n          accessToken: result.token,\n          refreshToken: result.refreshToken || \"\",\n          expiresAt,\n        });\n        setShellSsoCookie(result.user.id);\n\n        eventBus.emit(\n          \"auth.signed_in\",\n          {\n            userId: result.user.id,\n            tenantId: result.user.tenantId,\n            workspaceId: result.user.defaultWorkspaceId,\n            mfaEnabled: result.user.mfaEnabled,\n            emailVerified: result.user.emailVerified,\n          },\n          { component: \"useMfaOperations\" },\n        );\n\n        context.onAuthSuccess?.(result.user, result.token, result.refreshToken);\n      } else {\n        console.warn(\n          \"[useMfaOperations] NOT saving tokens - condition failed:\",\n          {\n            success: result.success,\n            hasUser: !!result.user,\n            hasToken: !!result.token,\n          },\n        );\n      }\n\n      return result;\n    } catch (error) {\n      if (import.meta.env.DEV) {\n        console.error(\"MFA verification failed:\", error);\n      }\n      throw error;\n    } finally {\n      store.setLoading(false);\n    }\n  };\n\n  /**\n   * Disable MFA\n   */\n  const disableMFA = async (): Promise<boolean> => {\n    try {\n      store.setLoading(true);\n\n      const { data } = await disableMfaMutation();\n\n      if (data!.disableMFA && store.user) {\n        store.setUser({ ...store.user, mfaEnabled: false });\n      }\n\n      return data!.disableMFA;\n    } catch (error) {\n      if (import.meta.env.DEV) {\n        console.error(\"Failed to disable MFA:\", error);\n      }\n      throw error;\n    } finally {\n      store.setLoading(false);\n    }\n  };\n\n  // Legacy aliases\n  const enableMfa = enableMFA;\n  const verifyMfa = verifyMFA;\n  const disableMfa = disableMFA;\n\n  return {\n    setupMFA,\n    enableMFA,\n    verifyMFA,\n    disableMFA,\n    // Legacy aliases\n    enableMfa,\n    verifyMfa,\n    disableMfa,\n    // State\n    mfaRequired: store.mfaRequired,\n    mfaChallengeId: store.mfaChallengeId,\n    isLoading: store.isLoading,\n  };\n}\n"],"mappings":";;;;;;;AAsBA,SAAS,EAAc,GAAyB;AAC9C,QAAO,EAAE,GAAG,GAAM;;AAGpB,SAAS,EAAkB,GAAsB;AAC/C,KAAI;EAEF,IAAM,IADW,OAAO,SAAS,SACT,SAAS,uBAAuB,GACpD,yBACA,KAAA,GACE,IAAa,IAAS,YAAY,MAAW,IAC7C,IAAa,OAAO,SAAS,aAAa,WAAW,aAAa,IAClE,IAAW,KAAK,UAAU;GAC9B,IAAI;GACJ,QAAQ,OAAO,SAAS;GACzB,CAAC;AAEF,EADA,SAAS,SAAS,UAAU,mBAAmB,EAAS,GAAG,EAAW,wBAAwB,EAAW,kBACzG,SAAS,SAAS,kBAAkB,mBAAmB,EAAS,GAAG,EAAW,wBAAwB,EAAW;SAC3G;;AA0CV,SAAgB,IAAmB;CACjC,IAAM,IAAQ,GAAc,EACtB,IAAU,GAAS,EACnB,IAAW,GAAa,EACxB,CAAC,KAAoB,EACzB,EACD,EACK,CAAC,KAAqB,EAG1B,EAAkB,EACd,CAAC,KAAqB,EAG1B,EAAkB,EACd,CAAC,KACL,EAAgC,EAAmB,EAK/C,IAAW,OAAO,MAA+C;AACrE,MAAI;AACF,KAAM,WAAW,GAAK;GAEtB,IAAM,EAAE,YAAS,MAAM,EAAiB,EACtC,WAAW,EAAE,WAAQ,EACtB,CAAC;AAEF,UAAO,EAAM;WACN,GAAO;AAId,SAAM;YACE;AACR,KAAM,WAAW,GAAM;;IAOrB,IAAY,OAAO,MAAmC;AAC1D,MAAI;AACF,KAAM,WAAW,GAAK;GAEtB,IAAM,EAAE,YAAS,MAAM,EAAkB,EACvC,WAAW,EAAE,SAAM,EACpB,CAAC;AAMF,UAJI,EAAM,aAAa,EAAM,QAC3B,EAAM,QAAQ;IAAE,GAAG,EAAM;IAAM,YAAY;IAAM,CAAC,EAG7C,EAAM;WACN,GAAO;AAId,SAAM;YACE;AACR,KAAM,WAAW,GAAM;;IAOrB,IAAY,OAAO,MAA+C;AACtE,MAAI;AACF,KAAM,WAAW,GAAK;GAEtB,IAAM,EAAE,YAAS,MAAM,EAAkB,EACvC,WAAW,EAAE,UAAO,EACrB,CAAC,EAEI,IAAS,EAAM;AAErB,OAAI,EAAO,WAAW,EAAO,QAAQ,EAAO,OAAO;AAIjD,IAHA,EAAM,QAAQ,EAAO,KAAK,EAC1B,EAAM,cAAc,EAAO,OAAO,EAAO,gBAAgB,GAAG,EAC5D,EAAM,iBAAiB,GAAK,EAC5B,EAAM,eAAe,GAAM;IAE3B,IAAM,IAAY,EAAO,YACrB,KAAK,KAAK,GAAG,EAAO,YAAY,MAChC,KAAA;AAoBJ,IAnBA,EAAa,EAAc,EAAO,KAAK,EAAE;KACvC,aAAa,EAAO;KACpB,cAAc,EAAO,gBAAgB;KACrC;KACD,CAAC,EACF,EAAkB,EAAO,KAAK,GAAG,EAEjC,EAAS,KACP,kBACA;KACE,QAAQ,EAAO,KAAK;KACpB,UAAU,EAAO,KAAK;KACtB,aAAa,EAAO,KAAK;KACzB,YAAY,EAAO,KAAK;KACxB,eAAe,EAAO,KAAK;KAC5B,EACD,EAAE,WAAW,oBAAoB,CAClC,EAED,EAAQ,gBAAgB,EAAO,MAAM,EAAO,OAAO,EAAO,aAAa;SAEvE,SAAQ,KACN,4DACA;IACE,SAAS,EAAO;IAChB,SAAS,CAAC,CAAC,EAAO;IAClB,UAAU,CAAC,CAAC,EAAO;IACpB,CACF;AAGH,UAAO;WACA,GAAO;AAId,SAAM;YACE;AACR,KAAM,WAAW,GAAM;;IAOrB,IAAa,YAA8B;AAC/C,MAAI;AACF,KAAM,WAAW,GAAK;GAEtB,IAAM,EAAE,YAAS,MAAM,GAAoB;AAM3C,UAJI,EAAM,cAAc,EAAM,QAC5B,EAAM,QAAQ;IAAE,GAAG,EAAM;IAAM,YAAY;IAAO,CAAC,EAG9C,EAAM;WACN,GAAO;AAId,SAAM;YACE;AACR,KAAM,WAAW,GAAM;;;AAS3B,QAAO;EACL;EACA;EACA;EACA;EAEA,WAVgB;EAWhB,WAVgB;EAWhB,YAViB;EAYjB,aAAa,EAAM;EACnB,gBAAgB,EAAM;EACtB,WAAW,EAAM;EAClB"}
+{"version":3,"file":"useMfaOperations.js","names":[],"sources":["../../../src/auth/hooks/useMfaOperations.ts"],"sourcesContent":["import { useMutation } from \"@apollo/client/react\";\nimport { useEventBus } from \"@burdenoff/fe-libs/shared/events\";\nimport {\n  loginProfile,\n  type ProfileUser,\n} from \"@burdenoff/fe-libs/shared/providers/shell/ProfileStorageManager\";\nimport { useAuthStore } from \"../store/authStore\";\nimport { useAuth } from \"../providers/AuthProvider\";\nimport {\n  SetupMfaDocument,\n  EnableMfaDocument,\n  VerifyMfaDocument,\n  DisableMfaDocument,\n} from \"../../generated/global-operations\";\nimport type {\n  MFAMethod,\n  MFASetupResult,\n  MFAVerifyInput,\n  AuthResult,\n  User,\n} from \"../types\";\n\nfunction toProfileUser(user: User): ProfileUser {\n  return { ...user };\n}\n\nfunction setShellSsoCookie(userId: string): void {\n  try {\n    const hostname = window.location.hostname;\n    const domain = hostname.endsWith(\".local.burdenoff.com\")\n      ? \".local.burdenoff.com\"\n      : undefined;\n    const domainPart = domain ? `; domain=${domain}` : \"\";\n    const securePart = window.location.protocol === \"https:\" ? \"; secure\" : \"\";\n    const ssoValue = JSON.stringify({\n      id: userId,\n      origin: window.location.origin,\n    });\n    document.cookie = `bf-sso=${encodeURIComponent(ssoValue)}${domainPart}; path=/; samesite=lax${securePart}; max-age=86400`;\n    document.cookie = `bf-sso-profile=${encodeURIComponent(ssoValue)}${domainPart}; path=/; samesite=lax${securePart}; max-age=86400`;\n  } catch {\n    // Best effort only.\n  }\n}\n\n// =============================================================================\n// GRAPHQL RESPONSE INTERFACES\n// =============================================================================\n\ninterface SetupMFAResponse {\n  setupMFA: MFASetupResult;\n}\n\ninterface SetupMFAVariables {\n  method: MFAMethod;\n}\n\ninterface EnableMFAResponse {\n  enableMFA: boolean;\n}\n\ninterface EnableMFAVariables {\n  code: string;\n}\n\ninterface VerifyMFAResponse {\n  verifyMFA: AuthResult;\n}\n\ninterface VerifyMFAVariables {\n  input: MFAVerifyInput;\n}\n\ninterface DisableMFAResponse {\n  disableMFA: boolean;\n}\n\n// GraphQL Operations\n\n/**\n * Hook for MFA operations\n */\nexport function useMfaOperations() {\n  const store = useAuthStore();\n  const context = useAuth();\n  const eventBus = useEventBus();\n  const [setupMfaMutation] = useMutation<SetupMFAResponse, SetupMFAVariables>(\n    SetupMfaDocument,\n  );\n  const [enableMfaMutation] = useMutation<\n    EnableMFAResponse,\n    EnableMFAVariables\n  >(EnableMfaDocument);\n  const [verifyMfaMutation] = useMutation<\n    VerifyMFAResponse,\n    VerifyMFAVariables\n  >(VerifyMfaDocument);\n  const [disableMfaMutation] =\n    useMutation<DisableMFAResponse>(DisableMfaDocument);\n\n  /**\n   * Setup MFA for the user\n   */\n  const setupMFA = async (method: MFAMethod): Promise<MFASetupResult> => {\n    try {\n      store.setLoading(true);\n\n      const { data } = await setupMfaMutation({\n        variables: { method },\n      });\n\n      return data!.setupMFA;\n    } catch (error) {\n      if (import.meta.env.DEV) {\n        console.error(\"MFA setup failed:\", error);\n      }\n      throw error;\n    } finally {\n      store.setLoading(false);\n    }\n  };\n\n  /**\n   * Enable MFA after setup with verification code\n   */\n  const enableMFA = async (code: string): Promise<boolean> => {\n    try {\n      store.setLoading(true);\n\n      const { data } = await enableMfaMutation({\n        variables: { code },\n      });\n\n      if (data!.enableMFA && store.user) {\n        store.setUser({ ...store.user, mfaEnabled: true });\n      }\n\n      return data!.enableMFA;\n    } catch (error) {\n      if (import.meta.env.DEV) {\n        console.error(\"Failed to enable MFA:\", error);\n      }\n      throw error;\n    } finally {\n      store.setLoading(false);\n    }\n  };\n\n  /**\n   * Verify MFA code during login\n   */\n  const verifyMFA = async (input: MFAVerifyInput): Promise<AuthResult> => {\n    try {\n      store.setLoading(true);\n\n      const { data, error } = await verifyMfaMutation({\n        variables: { input },\n      });\n\n      const result = data?.verifyMFA;\n\n      // Server returned no data (GraphQL errors, network failure, or null payload).\n      // Surface a friendly message instead of letting `result.success` throw a\n      // \"Cannot read properties of null\" error to the UI.\n      if (!result) {\n        return {\n          success: false,\n          error:\n            error?.message || \"Invalid verification code. Please try again.\",\n        } as AuthResult;\n      }\n\n      if (result.success && result.user && result.token) {\n        store.setUser(result.user);\n        store.setAuthTokens(result.token, result.refreshToken || \"\");\n        store.setAuthenticated(true);\n        store.setMfaRequired(false);\n\n        const expiresAt = result.expiresIn\n          ? Date.now() + result.expiresIn * 1000\n          : undefined;\n        loginProfile(toProfileUser(result.user), {\n          accessToken: result.token,\n          refreshToken: result.refreshToken || \"\",\n          expiresAt,\n        });\n        setShellSsoCookie(result.user.id);\n\n        eventBus.emit(\n          \"auth.signed_in\",\n          {\n            userId: result.user.id,\n            tenantId: result.user.tenantId,\n            workspaceId: result.user.defaultWorkspaceId,\n            mfaEnabled: result.user.mfaEnabled,\n            emailVerified: result.user.emailVerified,\n          },\n          { component: \"useMfaOperations\" },\n        );\n\n        context.onAuthSuccess?.(result.user, result.token, result.refreshToken);\n      } else {\n        console.warn(\n          \"[useMfaOperations] NOT saving tokens - condition failed:\",\n          {\n            success: result.success,\n            hasUser: !!result.user,\n            hasToken: !!result.token,\n          },\n        );\n      }\n\n      return result;\n    } catch (error) {\n      if (import.meta.env.DEV) {\n        console.error(\"MFA verification failed:\", error);\n      }\n      throw error;\n    } finally {\n      store.setLoading(false);\n    }\n  };\n\n  /**\n   * Disable MFA\n   */\n  const disableMFA = async (): Promise<boolean> => {\n    try {\n      store.setLoading(true);\n\n      const { data } = await disableMfaMutation();\n\n      if (data!.disableMFA && store.user) {\n        store.setUser({ ...store.user, mfaEnabled: false });\n      }\n\n      return data!.disableMFA;\n    } catch (error) {\n      if (import.meta.env.DEV) {\n        console.error(\"Failed to disable MFA:\", error);\n      }\n      throw error;\n    } finally {\n      store.setLoading(false);\n    }\n  };\n\n  // Legacy aliases\n  const enableMfa = enableMFA;\n  const verifyMfa = verifyMFA;\n  const disableMfa = disableMFA;\n\n  return {\n    setupMFA,\n    enableMFA,\n    verifyMFA,\n    disableMFA,\n    // Legacy aliases\n    enableMfa,\n    verifyMfa,\n    disableMfa,\n    // State\n    mfaRequired: store.mfaRequired,\n    mfaChallengeId: store.mfaChallengeId,\n    isLoading: store.isLoading,\n  };\n}\n"],"mappings":";;;;;;;AAsBA,SAAS,EAAc,GAAyB;AAC9C,QAAO,EAAE,GAAG,GAAM;;AAGpB,SAAS,EAAkB,GAAsB;AAC/C,KAAI;EAEF,IAAM,IADW,OAAO,SAAS,SACT,SAAS,uBAAuB,GACpD,yBACA,KAAA,GACE,IAAa,IAAS,YAAY,MAAW,IAC7C,IAAa,OAAO,SAAS,aAAa,WAAW,aAAa,IAClE,IAAW,KAAK,UAAU;GAC9B,IAAI;GACJ,QAAQ,OAAO,SAAS;GACzB,CAAC;AAEF,EADA,SAAS,SAAS,UAAU,mBAAmB,EAAS,GAAG,EAAW,wBAAwB,EAAW,kBACzG,SAAS,SAAS,kBAAkB,mBAAmB,EAAS,GAAG,EAAW,wBAAwB,EAAW;SAC3G;;AA0CV,SAAgB,IAAmB;CACjC,IAAM,IAAQ,GAAc,EACtB,IAAU,GAAS,EACnB,IAAW,GAAa,EACxB,CAAC,KAAoB,EACzB,EACD,EACK,CAAC,KAAqB,EAG1B,EAAkB,EACd,CAAC,KAAqB,EAG1B,EAAkB,EACd,CAAC,KACL,EAAgC,EAAmB,EAK/C,IAAW,OAAO,MAA+C;AACrE,MAAI;AACF,KAAM,WAAW,GAAK;GAEtB,IAAM,EAAE,YAAS,MAAM,EAAiB,EACtC,WAAW,EAAE,WAAQ,EACtB,CAAC;AAEF,UAAO,EAAM;WACN,GAAO;AAId,SAAM;YACE;AACR,KAAM,WAAW,GAAM;;IAOrB,IAAY,OAAO,MAAmC;AAC1D,MAAI;AACF,KAAM,WAAW,GAAK;GAEtB,IAAM,EAAE,YAAS,MAAM,EAAkB,EACvC,WAAW,EAAE,SAAM,EACpB,CAAC;AAMF,UAJI,EAAM,aAAa,EAAM,QAC3B,EAAM,QAAQ;IAAE,GAAG,EAAM;IAAM,YAAY;IAAM,CAAC,EAG7C,EAAM;WACN,GAAO;AAId,SAAM;YACE;AACR,KAAM,WAAW,GAAM;;IAOrB,IAAY,OAAO,MAA+C;AACtE,MAAI;AACF,KAAM,WAAW,GAAK;GAEtB,IAAM,EAAE,SAAM,aAAU,MAAM,EAAkB,EAC9C,WAAW,EAAE,UAAO,EACrB,CAAC,EAEI,IAAS,GAAM;AAKrB,OAAI,CAAC,EACH,QAAO;IACL,SAAS;IACT,OACE,GAAO,WAAW;IACrB;AAGH,OAAI,EAAO,WAAW,EAAO,QAAQ,EAAO,OAAO;AAIjD,IAHA,EAAM,QAAQ,EAAO,KAAK,EAC1B,EAAM,cAAc,EAAO,OAAO,EAAO,gBAAgB,GAAG,EAC5D,EAAM,iBAAiB,GAAK,EAC5B,EAAM,eAAe,GAAM;IAE3B,IAAM,IAAY,EAAO,YACrB,KAAK,KAAK,GAAG,EAAO,YAAY,MAChC,KAAA;AAoBJ,IAnBA,EAAa,EAAc,EAAO,KAAK,EAAE;KACvC,aAAa,EAAO;KACpB,cAAc,EAAO,gBAAgB;KACrC;KACD,CAAC,EACF,EAAkB,EAAO,KAAK,GAAG,EAEjC,EAAS,KACP,kBACA;KACE,QAAQ,EAAO,KAAK;KACpB,UAAU,EAAO,KAAK;KACtB,aAAa,EAAO,KAAK;KACzB,YAAY,EAAO,KAAK;KACxB,eAAe,EAAO,KAAK;KAC5B,EACD,EAAE,WAAW,oBAAoB,CAClC,EAED,EAAQ,gBAAgB,EAAO,MAAM,EAAO,OAAO,EAAO,aAAa;SAEvE,SAAQ,KACN,4DACA;IACE,SAAS,EAAO;IAChB,SAAS,CAAC,CAAC,EAAO;IAClB,UAAU,CAAC,CAAC,EAAO;IACpB,CACF;AAGH,UAAO;WACA,GAAO;AAId,SAAM;YACE;AACR,KAAM,WAAW,GAAM;;IAOrB,IAAa,YAA8B;AAC/C,MAAI;AACF,KAAM,WAAW,GAAK;GAEtB,IAAM,EAAE,YAAS,MAAM,GAAoB;AAM3C,UAJI,EAAM,cAAc,EAAM,QAC5B,EAAM,QAAQ;IAAE,GAAG,EAAM;IAAM,YAAY;IAAO,CAAC,EAG9C,EAAM;WACN,GAAO;AAId,SAAM;YACE;AACR,KAAM,WAAW,GAAM;;;AAS3B,QAAO;EACL;EACA;EACA;EACA;EAEA,WAVgB;EAWhB,WAVgB;EAWhB,YAViB;EAYjB,aAAa,EAAM;EACnB,gBAAgB,EAAM;EACtB,WAAW,EAAM;EAClB"}

package/dist/auth/pages/AuditLogPage.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuditLogPage.js","names":[],"sources":["../../../src/auth/pages/AuditLogPage.tsx"],"sourcesContent":["import { useState } from \"react\";\nimport { useI18n } from \"@burdenoff/fe-libs/shared/providers/shell\";\nimport { useGatewayClient } from \"@burdenoff/fe-libs/shared/graphql\";\nimport { useFeatureFlagDetails } from \"@burdenoff/fe-libs/shared/feature-flags\";\nimport { formatDateTime } from \"../utils/formatters\";\nimport { AlertIcon, SpinnerIcon } from \"../components/AuthIcons\";\nimport {\n  useAuthAuditLogsQuery,\n  type AuditLogEntry_AuthAuditLogFragment,\n} from \"../../generated/global-operations\";\nimport { useCreateAuthExportJobMutation } from \"../../generated/wspace-operations\";\n\nconst PAGE_SIZE = 20;\n\n/**\n * Security audit log page with pagination and export\n *\n * Fragment: AuditLogEntry_AuthAuditLog (graphql/operations/global/fragments/AuditLogEntry.fragment.graphql)\n * Query: AuthAuditLogs (graphql/operations/global/queries/auditLog.graphql)\n *\n * TODO: When authAuditLogs backend migrates to AuthAuditLogConnection type,\n *   update this query to use: authAuditLogs { auditLogs: [...], totalCount, hasMore }\n *   and remove the client-side hasMore approximation below.\n */\nexport function AuditLogPage() {\n  const { t } = useI18n();\n  const tr = (key: string, fallback: string): string => {\n    const translated = t(key);\n    return translated === key ? fallback : translated;\n  };\n\n  const [page, setPage] = useState(1);\n  const offset = (page - 1) * PAGE_SIZE;\n\n  // Default-deny: only show when the flag is explicitly enabled in the system.\n  // useFeatureFlag uses default-allow (returns true when not found), so we use\n  // useFeatureFlagDetails + explicit value check instead.\n  const auditLogFlag = useFeatureFlagDetails(\"auth.audit-log\");\n  const showAuditLog = auditLogFlag?.value === true;\n\n  const { data, loading, error } = useAuthAuditLogsQuery({\n    skip: !showAuditLog,\n    fetchPolicy: \"cache-and-network\",\n    variables: { pagination: { limit: PAGE_SIZE, offset } },\n  });\n\n  const auditLogs = data?.authAuditLogs ?? [];\n  // Approximate hasMore: if we received a full page there may be more\n  const hasMore = auditLogs.length === PAGE_SIZE;\n\n  const wspaceClient = useGatewayClient(\"workspace\");\n  const [createExportJob, { loading: isExporting }] =\n    useCreateAuthExportJobMutation({ client: wspaceClient });\n  const [exportError, setExportError] = useState<string | null>(null);\n\n  const handleExport = async () => {\n    setExportError(null);\n    try {\n      await createExportJob({\n        variables: {\n          input: {\n            name: \"Audit Log Export\",\n            // permission_audit_logs covers auth audit logs in the export system\n            entityTypes: [\"permission_audit_logs\"],\n            format: \"CSV\",\n            exportScope: \"INDIVIDUAL\",\n            includeMetadata: true,\n          },\n        },\n      });\n    } catch (err) {\n      setExportError(\n        err instanceof Error ? err.message : \"Failed to start export\",\n      );\n    }\n  };\n\n  const getEventMarker = (eventType: string) => {\n    switch (eventType) {\n      case \"LOGIN_SUCCESS\":\n        return \"OK\";\n      case \"LOGIN_FAILURE\":\n        return \"ER\";\n      case \"LOGOUT\":\n        return \"LO\";\n      case \"PASSWORD_CHANGE\":\n        return \"PW\";\n      case \"MFA_ENABLED\":\n      case \"MFA_VERIFIED\":\n        return \"MF\";\n      case \"ANOMALY_DETECTED\":\n        return \"AL\";\n      default:\n        return \"AU\";\n    }\n  };\n\n  if (!showAuditLog) {\n    return (\n      <div className=\"max-w-4xl mx-auto p-6\">\n        <div className=\"text-center py-16 border-2 border-dashed border-border-subtle rounded-xl\">\n          <div className=\"size-16 mx-auto mb-4 rounded-full bg-status-warning-bg-subtle flex items-center justify-center\">\n            <AlertIcon\n              className=\"size-8 text-status-warning-text\"\n              aria-hidden=\"true\"\n            />\n          </div>\n          <h2 className=\"text-xl font-semibold text-text-primary mb-2\">\n            {tr(\"auth.auditLog.notAvailable\", \"Page Not Available\")}\n          </h2>\n          <p className=\"text-text-secondary\">\n            {tr(\n              \"auth.auditLog.notEnabled\",\n              \"The Security Audit Log is not enabled for your account.\",\n            )}\n          </p>\n        </div>\n      </div>\n    );\n  }\n\n  return (\n    <div className=\"max-w-4xl mx-auto p-6\">\n      {/* Header */}\n      <div className=\"flex items-center justify-between mb-8\">\n        <h1 className=\"text-3xl font-semibold text-text-primary\">\n          {tr(\"auth.auditLog.title\", \"Security Audit Log\")}\n        </h1>\n        <button\n          type=\"button\"\n          onClick={() => void handleExport()}\n          disabled={isExporting}\n          aria-label={tr(\"auth.auditLog.exportAriaLabel\", \"Export audit log\")}\n          className=\"flex items-center gap-2 px-4 py-2.5 rounded-xl border border-border-default text-text-primary bg-bg-surface hover:bg-bg-sunken disabled:opacity-50 disabled:cursor-not-allowed transition-colors font-medium\"\n        >\n          {isExporting ? (\n            <>\n              <SpinnerIcon\n                className=\"size-4 animate-spin\"\n                aria-hidden=\"true\"\n              />\n              {tr(\"auth.auditLog.exporting\", \"Exporting...\")}\n            </>\n          ) : (\n            <>\n              <svg\n                className=\"size-4\"\n                fill=\"none\"\n                viewBox=\"0 0 24 24\"\n                stroke=\"currentColor\"\n                aria-hidden=\"true\"\n              >\n                <path\n                  strokeLinecap=\"round\"\n                  strokeLinejoin=\"round\"\n                  strokeWidth={2}\n                  d=\"M4 16v1a3 3 0 003 3h10a3 3 0 003-3v-1m-4-4l-4 4m0 0l-4-4m4 4V4\"\n                />\n              </svg>\n              {tr(\"auth.auditLog.export\", \"Export\")}\n            </>\n          )}\n        </button>\n      </div>\n\n      {/* Export error */}\n      {exportError && (\n        <div\n          role=\"alert\"\n          className=\"mb-6 flex items-start gap-3 p-4 rounded-xl bg-status-error-bg-subtle border border-status-error-border\"\n        >\n          <AlertIcon\n            className=\"size-5 text-status-error-text flex-shrink-0 mt-0.5\"\n            aria-hidden=\"true\"\n          />\n          <p className=\"text-sm text-status-error-text\">{exportError}</p>\n        </div>\n      )}\n\n      {loading ? (\n        <div aria-live=\"polite\" aria-busy=\"true\" className=\"text-center py-12\">\n          <SpinnerIcon\n            className=\"size-8 mx-auto text-text-link animate-spin\"\n            aria-hidden=\"true\"\n          />\n          <p className=\"mt-3 text-text-secondary\">\n            {tr(\"auth.auditLog.loading\", \"Loading audit events...\")}\n          </p>\n        </div>\n      ) : error ? (\n        <div\n          role=\"alert\"\n          className=\"text-center py-12 border border-status-error-border rounded-xl bg-status-error-bg-subtle\"\n        >\n          <p className=\"text-status-error-text\">\n            {tr(\"auth.auditLog.error\", \"Unable to load audit events\")}\n          </p>\n        </div>\n      ) : auditLogs.length === 0 ? (\n        <output className=\"block text-center py-12\">\n          <p className=\"text-text-secondary\">\n            {tr(\"auth.auditLog.noEvents\", \"No security events recorded\")}\n          </p>\n        </output>\n      ) : (\n        <>\n          <div className=\"space-y-4\" aria-live=\"polite\" aria-busy={loading}>\n            {auditLogs.map((event: AuditLogEntry_AuthAuditLogFragment) => (\n              <div\n                key={event.id}\n                className=\"p-6 rounded-xl border border-border-subtle bg-bg-surface shadow-sm\"\n              >\n                <div className=\"flex items-start gap-4\">\n                  <div\n                    className=\"flex size-10 shrink-0 items-center justify-center rounded-full bg-bg-muted text-xs font-semibold text-text-secondary\"\n                    aria-hidden=\"true\"\n                  >\n                    {getEventMarker(event.action)}\n                  </div>\n                  <div className=\"flex-1\">\n                    <h3 className=\"text-lg font-medium text-text-primary mb-1\">\n                      {event.action.replace(/_/g, \" \")}\n                    </h3>\n                    <p className=\"text-sm text-text-secondary mb-2\">\n                      <time dateTime={event.createdAt}>\n                        {formatDateTime(event.createdAt)}\n                      </time>\n                    </p>\n                    <p className=\"text-sm text-text-secondary\">\n                      {event.description ??\n                        tr(\n                          \"auth.auditLog.defaultDescription\",\n                          \"Authentication event\",\n                        )}\n                      {event.ipAddress && ` • ${event.ipAddress}`}\n                    </p>\n                  </div>\n                  {event.action.includes(\"FAILURE\") && (\n                    <output\n                      className=\"px-3 py-1 rounded-full bg-status-error-bg-subtle text-status-error-text text-sm font-medium\"\n                    >\n                      {tr(\"auth.auditLog.failed\", \"Failed\")}\n                    </output>\n                  )}\n                </div>\n              </div>\n            ))}\n          </div>\n\n          {/* Pagination */}\n          <nav\n            aria-label={tr(\n              \"auth.auditLog.paginationAriaLabel\",\n              \"Audit log pagination\",\n            )}\n            className=\"mt-6 flex items-center justify-between\"\n          >\n            <p className=\"text-sm text-text-secondary\">\n              {tr(\"auth.auditLog.page\", \"Page\")} {page}\n            </p>\n            <div className=\"flex gap-2\">\n              <button\n                type=\"button\"\n                onClick={() => setPage((prev) => Math.max(1, prev - 1))}\n                disabled={page === 1}\n                aria-label={tr(\n                  \"auth.auditLog.previousPageAriaLabel\",\n                  \"Go to previous page\",\n                )}\n                className=\"px-4 py-2 rounded-lg border border-border-default text-text-primary bg-bg-surface disabled:opacity-50 disabled:cursor-not-allowed hover:bg-bg-sunken transition-colors\"\n              >\n                {tr(\"auth.auditLog.previous\", \"Previous\")}\n              </button>\n              <button\n                type=\"button\"\n                onClick={() => setPage((prev) => prev + 1)}\n                disabled={!hasMore}\n                aria-label={tr(\n                  \"auth.auditLog.nextPageAriaLabel\",\n                  \"Go to next page\",\n                )}\n                className=\"px-4 py-2 rounded-lg border border-border-default text-text-primary bg-bg-surface disabled:opacity-50 disabled:cursor-not-allowed hover:bg-bg-sunken transition-colors\"\n              >\n                {tr(\"auth.auditLog.next\", \"Next\")}\n              </button>\n            </div>\n          </nav>\n        </>\n      )}\n    </div>\n  );\n}\n"],"mappings":";;;;;;;;;;AAYA,IAAM,IAAY;AAYlB,SAAgB,IAAe;CAC7B,IAAM,EAAE,SAAM,GAAS,EACjB,KAAM,GAAa,MAA6B;EACpD,IAAM,IAAa,EAAE,EAAI;AACzB,SAAO,MAAe,IAAM,IAAW;IAGnC,CAAC,GAAM,KAAW,EAAS,EAAE,EAC7B,KAAU,IAAO,KAAK,GAMtB,IADe,EAAsB,iBAAiB,EACzB,UAAU,IAEvC,EAAE,SAAM,YAAS,aAAU,EAAsB;EACrD,MAAM,CAAC;EACP,aAAa;EACb,WAAW,EAAE,YAAY;GAAE,OAAO;GAAW;GAAQ,EAAE;EACxD,CAAC,EAEI,IAAY,GAAM,iBAAiB,EAAE,EAErC,IAAU,EAAU,WAAW,GAG/B,CAAC,GAAiB,EAAE,SAAS,OACjC,EAA+B,EAAE,QAFd,EAAiB,YAAY,EAEO,CAAC,EACpD,CAAC,GAAa,KAAkB,EAAwB,KAAK,EAE7D,IAAe,YAAY;AAC/B,IAAe,KAAK;AACpB,MAAI;AACF,SAAM,EAAgB,EACpB,WAAW,EACT,OAAO;IACL,MAAM;IAEN,aAAa,CAAC,wBAAwB;IACtC,QAAQ;IACR,aAAa;IACb,iBAAiB;IAClB,EACF,EACF,CAAC;WACK,GAAK;AACZ,KACE,aAAe,QAAQ,EAAI,UAAU,yBACtC;;IAIC,KAAkB,MAAsB;AAC5C,UAAQ,GAAR;GACE,KAAK,gBACH,QAAO;GACT,KAAK,gBACH,QAAO;GACT,KAAK,SACH,QAAO;GACT,KAAK,kBACH,QAAO;GACT,KAAK;GACL,KAAK,eACH,QAAO;GACT,KAAK,mBACH,QAAO;GACT,QACE,QAAO;;;AA4Bb,QAxBK,IAyBH,kBAAC,OAAD;EAAK,WAAU;YAAf;GAEE,kBAAC,OAAD;IAAK,WAAU;cAAf,CACE,kBAAC,MAAD;KAAI,WAAU;eACX,EAAG,uBAAuB,qBAAqB;KAC7C,CAAA,EACL,kBAAC,UAAD;KACE,MAAK;KACL,eAAe,KAAK,GAAc;KAClC,UAAU;KACV,cAAY,EAAG,iCAAiC,mBAAmB;KACnE,WAAU;eAET,IACC,kBAAA,GAAA,EAAA,UAAA,CACE,kBAAC,GAAD;MACE,WAAU;MACV,eAAY;MACZ,CAAA,EACD,EAAG,2BAA2B,eAAe,CAC7C,EAAA,CAAA,GAEH,kBAAA,GAAA,EAAA,UAAA,CACE,kBAAC,OAAD;MACE,WAAU;MACV,MAAK;MACL,SAAQ;MACR,QAAO;MACP,eAAY;gBAEZ,kBAAC,QAAD;OACE,eAAc;OACd,gBAAe;OACf,aAAa;OACb,GAAE;OACF,CAAA;MACE,CAAA,EACL,EAAG,wBAAwB,SAAS,CACpC,EAAA,CAAA;KAEE,CAAA,CACL;;GAGL,KACC,kBAAC,OAAD;IACE,MAAK;IACL,WAAU;cAFZ,CAIE,kBAAC,GAAD;KACE,WAAU;KACV,eAAY;KACZ,CAAA,EACF,kBAAC,KAAD;KAAG,WAAU;eAAkC;KAAgB,CAAA,CAC3D;;GAGP,IACC,kBAAC,OAAD;IAAK,aAAU;IAAS,aAAU;IAAO,WAAU;cAAnD,CACE,kBAAC,GAAD;KACE,WAAU;KACV,eAAY;KACZ,CAAA,EACF,kBAAC,KAAD;KAAG,WAAU;eACV,EAAG,yBAAyB,0BAA0B;KACrD,CAAA,CACA;QACJ,IACF,kBAAC,OAAD;IACE,MAAK;IACL,WAAU;cAEV,kBAAC,KAAD;KAAG,WAAU;eACV,EAAG,uBAAuB,8BAA8B;KACvD,CAAA;IACA,CAAA,GACJ,EAAU,WAAW,IACvB,kBAAC,UAAD;IAAQ,WAAU;cAChB,kBAAC,KAAD;KAAG,WAAU;eACV,EAAG,0BAA0B,8BAA8B;KAC1D,CAAA;IACG,CAAA,GAET,kBAAA,GAAA,EAAA,UAAA,CACE,kBAAC,OAAD;IAAK,WAAU;IAAY,aAAU;IAAS,aAAW;cACtD,EAAU,KAAK,MACd,kBAAC,OAAD;KAEE,WAAU;eAEV,kBAAC,OAAD;MAAK,WAAU;gBAAf;OACE,kBAAC,OAAD;QACE,WAAU;QACV,eAAY;kBAEX,EAAe,EAAM,OAAO;QACzB,CAAA;OACN,kBAAC,OAAD;QAAK,WAAU;kBAAf;SACE,kBAAC,MAAD;UAAI,WAAU;oBACX,EAAM,OAAO,QAAQ,MAAM,IAAI;UAC7B,CAAA;SACL,kBAAC,KAAD;UAAG,WAAU;oBACX,kBAAC,QAAD;WAAM,UAAU,EAAM;qBACnB,EAAe,EAAM,UAAU;WAC3B,CAAA;UACL,CAAA;SACJ,kBAAC,KAAD;UAAG,WAAU;oBAAb,CACG,EAAM,eACL,EACE,oCACA,uBACD,EACF,EAAM,aAAa,MAAM,EAAM,YAC9B;;SACA;;OACL,EAAM,OAAO,SAAS,UAAU,IAC/B,kBAAC,UAAD;QACE,WAAU;kBAET,EAAG,wBAAwB,SAAS;QAC9B,CAAA;OAEP;;KACF,EApCC,EAAM,GAoCP,CACN;IACE,CAAA,EAGN,kBAAC,OAAD;IACE,cAAY,EACV,qCACA,uBACD;IACD,WAAU;cALZ,CAOE,kBAAC,KAAD;KAAG,WAAU;eAAb;MACG,EAAG,sBAAsB,OAAO;MAAC;MAAE;MAClC;QACJ,kBAAC,OAAD;KAAK,WAAU;eAAf,CACE,kBAAC,UAAD;MACE,MAAK;MACL,eAAe,GAAS,MAAS,KAAK,IAAI,GAAG,IAAO,EAAE,CAAC;MACvD,UAAU,MAAS;MACnB,cAAY,EACV,uCACA,sBACD;MACD,WAAU;gBAET,EAAG,0BAA0B,WAAW;MAClC,CAAA,EACT,kBAAC,UAAD;MACE,MAAK;MACL,eAAe,GAAS,MAAS,IAAO,EAAE;MAC1C,UAAU,CAAC;MACX,cAAY,EACV,mCACA,kBACD;MACD,WAAU;gBAET,EAAG,sBAAsB,OAAO;MAC1B,CAAA,CACL;OACF;MACL,EAAA,CAAA;GAED;MA9LJ,kBAAC,OAAD;EAAK,WAAU;YACb,kBAAC,OAAD;GAAK,WAAU;aAAf;IACE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,GAAD;MACE,WAAU;MACV,eAAY;MACZ,CAAA;KACE,CAAA;IACN,kBAAC,MAAD;KAAI,WAAU;eACX,EAAG,8BAA8B,qBAAqB;KACpD,CAAA;IACL,kBAAC,KAAD;KAAG,WAAU;eACV,EACC,4BACA,0DACD;KACC,CAAA;IACA;;EACF,CAAA"}
+{"version":3,"file":"AuditLogPage.js","names":[],"sources":["../../../src/auth/pages/AuditLogPage.tsx"],"sourcesContent":["import { useState } from \"react\";\nimport { useI18n } from \"@burdenoff/fe-libs/shared/providers/shell\";\nimport { useGatewayClient } from \"@burdenoff/fe-libs/shared/graphql\";\nimport { useFeatureFlagDetails } from \"@burdenoff/fe-libs/shared/feature-flags\";\nimport { formatDateTime } from \"../utils/formatters\";\nimport { AlertIcon, SpinnerIcon } from \"../components/AuthIcons\";\nimport {\n  useAuthAuditLogsQuery,\n  type AuditLogEntry_AuthAuditLogFragment,\n} from \"../../generated/global-operations\";\nimport { useCreateAuthExportJobMutation } from \"../../generated/wspace-operations\";\n\nconst PAGE_SIZE = 20;\n\n/**\n * Security audit log page with pagination and export\n *\n * Fragment: AuditLogEntry_AuthAuditLog (graphql/operations/global/fragments/AuditLogEntry.fragment.graphql)\n * Query: AuthAuditLogs (graphql/operations/global/queries/auditLog.graphql)\n *\n * TODO: When authAuditLogs backend migrates to AuthAuditLogConnection type,\n *   update this query to use: authAuditLogs { auditLogs: [...], totalCount, hasMore }\n *   and remove the client-side hasMore approximation below.\n */\nexport function AuditLogPage() {\n  const { t } = useI18n();\n  const tr = (key: string, fallback: string): string => {\n    const translated = t(key);\n    return translated === key ? fallback : translated;\n  };\n\n  const [page, setPage] = useState(1);\n  const offset = (page - 1) * PAGE_SIZE;\n\n  // Default-deny: only show when the flag is explicitly enabled in the system.\n  // useFeatureFlag uses default-allow (returns true when not found), so we use\n  // useFeatureFlagDetails + explicit value check instead.\n  const auditLogFlag = useFeatureFlagDetails(\"auth.audit-log\");\n  const showAuditLog = auditLogFlag?.value === true;\n\n  const { data, loading, error } = useAuthAuditLogsQuery({\n    skip: !showAuditLog,\n    fetchPolicy: \"cache-and-network\",\n    variables: { pagination: { limit: PAGE_SIZE, offset } },\n  });\n\n  const auditLogs = data?.authAuditLogs ?? [];\n  // Approximate hasMore: if we received a full page there may be more\n  const hasMore = auditLogs.length === PAGE_SIZE;\n\n  const wspaceClient = useGatewayClient(\"workspace\");\n  const [createExportJob, { loading: isExporting }] =\n    useCreateAuthExportJobMutation({ client: wspaceClient });\n  const [exportError, setExportError] = useState<string | null>(null);\n\n  const handleExport = async () => {\n    setExportError(null);\n    try {\n      await createExportJob({\n        variables: {\n          input: {\n            name: \"Audit Log Export\",\n            // permission_audit_logs covers auth audit logs in the export system\n            entityTypes: [\"permission_audit_logs\"],\n            format: \"CSV\",\n            exportScope: \"INDIVIDUAL\",\n            includeMetadata: true,\n          },\n        },\n      });\n    } catch (err) {\n      setExportError(\n        err instanceof Error ? err.message : \"Failed to start export\",\n      );\n    }\n  };\n\n  const getEventMarker = (eventType: string) => {\n    switch (eventType) {\n      case \"LOGIN_SUCCESS\":\n        return \"OK\";\n      case \"LOGIN_FAILURE\":\n        return \"ER\";\n      case \"LOGOUT\":\n        return \"LO\";\n      case \"PASSWORD_CHANGE\":\n        return \"PW\";\n      case \"MFA_ENABLED\":\n      case \"MFA_VERIFIED\":\n        return \"MF\";\n      case \"ANOMALY_DETECTED\":\n        return \"AL\";\n      default:\n        return \"AU\";\n    }\n  };\n\n  if (!showAuditLog) {\n    return (\n      <div className=\"max-w-4xl mx-auto p-6\">\n        <div className=\"text-center py-16 border-2 border-dashed border-border-subtle rounded-xl\">\n          <div className=\"size-16 mx-auto mb-4 rounded-full bg-status-warning-bg-subtle flex items-center justify-center\">\n            <AlertIcon\n              className=\"size-8 text-status-warning-text\"\n              aria-hidden=\"true\"\n            />\n          </div>\n          <h2 className=\"text-xl font-semibold text-text-primary mb-2\">\n            {tr(\"auth.auditLog.notAvailable\", \"Page Not Available\")}\n          </h2>\n          <p className=\"text-text-secondary\">\n            {tr(\n              \"auth.auditLog.notEnabled\",\n              \"The Security Audit Log is not enabled for your account.\",\n            )}\n          </p>\n        </div>\n      </div>\n    );\n  }\n\n  return (\n    <div className=\"max-w-4xl mx-auto p-6\">\n      {/* Header */}\n      <div className=\"flex items-center justify-between mb-8\">\n        <h1 className=\"text-3xl font-semibold text-text-primary\">\n          {tr(\"auth.auditLog.title\", \"Security Audit Log\")}\n        </h1>\n        <button\n          type=\"button\"\n          onClick={() => void handleExport()}\n          disabled={isExporting}\n          aria-label={tr(\"auth.auditLog.exportAriaLabel\", \"Export audit log\")}\n          className=\"flex items-center gap-2 px-4 py-2.5 rounded-xl border border-border-default text-text-primary bg-bg-surface hover:bg-bg-sunken disabled:opacity-50 disabled:cursor-not-allowed transition-colors font-medium\"\n        >\n          {isExporting ? (\n            <>\n              <SpinnerIcon className=\"size-4 animate-spin\" aria-hidden=\"true\" />\n              {tr(\"auth.auditLog.exporting\", \"Exporting...\")}\n            </>\n          ) : (\n            <>\n              <svg\n                className=\"size-4\"\n                fill=\"none\"\n                viewBox=\"0 0 24 24\"\n                stroke=\"currentColor\"\n                aria-hidden=\"true\"\n              >\n                <path\n                  strokeLinecap=\"round\"\n                  strokeLinejoin=\"round\"\n                  strokeWidth={2}\n                  d=\"M4 16v1a3 3 0 003 3h10a3 3 0 003-3v-1m-4-4l-4 4m0 0l-4-4m4 4V4\"\n                />\n              </svg>\n              {tr(\"auth.auditLog.export\", \"Export\")}\n            </>\n          )}\n        </button>\n      </div>\n\n      {/* Export error */}\n      {exportError && (\n        <div\n          role=\"alert\"\n          className=\"mb-6 flex items-start gap-3 p-4 rounded-xl bg-status-error-bg-subtle border border-status-error-border\"\n        >\n          <AlertIcon\n            className=\"size-5 text-status-error-text flex-shrink-0 mt-0.5\"\n            aria-hidden=\"true\"\n          />\n          <p className=\"text-sm text-status-error-text\">{exportError}</p>\n        </div>\n      )}\n\n      {loading ? (\n        <div aria-live=\"polite\" aria-busy=\"true\" className=\"text-center py-12\">\n          <SpinnerIcon\n            className=\"size-8 mx-auto text-text-link animate-spin\"\n            aria-hidden=\"true\"\n          />\n          <p className=\"mt-3 text-text-secondary\">\n            {tr(\"auth.auditLog.loading\", \"Loading audit events...\")}\n          </p>\n        </div>\n      ) : error ? (\n        <div\n          role=\"alert\"\n          className=\"text-center py-12 border border-status-error-border rounded-xl bg-status-error-bg-subtle\"\n        >\n          <p className=\"text-status-error-text\">\n            {tr(\"auth.auditLog.error\", \"Unable to load audit events\")}\n          </p>\n        </div>\n      ) : auditLogs.length === 0 ? (\n        <output className=\"block text-center py-12\">\n          <p className=\"text-text-secondary\">\n            {tr(\"auth.auditLog.noEvents\", \"No security events recorded\")}\n          </p>\n        </output>\n      ) : (\n        <>\n          <div className=\"space-y-4\" aria-live=\"polite\" aria-busy={loading}>\n            {auditLogs.map((event: AuditLogEntry_AuthAuditLogFragment) => (\n              <div\n                key={event.id}\n                className=\"p-6 rounded-xl border border-border-subtle bg-bg-surface shadow-sm\"\n              >\n                <div className=\"flex items-start gap-4\">\n                  <div\n                    className=\"flex size-10 shrink-0 items-center justify-center rounded-full bg-bg-muted text-xs font-semibold text-text-secondary\"\n                    aria-hidden=\"true\"\n                  >\n                    {getEventMarker(event.action)}\n                  </div>\n                  <div className=\"flex-1\">\n                    <h3 className=\"text-lg font-medium text-text-primary mb-1\">\n                      {event.action.replace(/_/g, \" \")}\n                    </h3>\n                    <p className=\"text-sm text-text-secondary mb-2\">\n                      <time dateTime={event.createdAt}>\n                        {formatDateTime(event.createdAt)}\n                      </time>\n                    </p>\n                    <p className=\"text-sm text-text-secondary\">\n                      {event.description ??\n                        tr(\n                          \"auth.auditLog.defaultDescription\",\n                          \"Authentication event\",\n                        )}\n                      {event.ipAddress && ` • ${event.ipAddress}`}\n                    </p>\n                  </div>\n                  {event.action.includes(\"FAILURE\") && (\n                    <output className=\"px-3 py-1 rounded-full bg-status-error-bg-subtle text-status-error-text text-sm font-medium\">\n                      {tr(\"auth.auditLog.failed\", \"Failed\")}\n                    </output>\n                  )}\n                </div>\n              </div>\n            ))}\n          </div>\n\n          {/* Pagination */}\n          <nav\n            aria-label={tr(\n              \"auth.auditLog.paginationAriaLabel\",\n              \"Audit log pagination\",\n            )}\n            className=\"mt-6 flex items-center justify-between\"\n          >\n            <p className=\"text-sm text-text-secondary\">\n              {tr(\"auth.auditLog.page\", \"Page\")} {page}\n            </p>\n            <div className=\"flex gap-2\">\n              <button\n                type=\"button\"\n                onClick={() => setPage((prev) => Math.max(1, prev - 1))}\n                disabled={page === 1}\n                aria-label={tr(\n                  \"auth.auditLog.previousPageAriaLabel\",\n                  \"Go to previous page\",\n                )}\n                className=\"px-4 py-2 rounded-lg border border-border-default text-text-primary bg-bg-surface disabled:opacity-50 disabled:cursor-not-allowed hover:bg-bg-sunken transition-colors\"\n              >\n                {tr(\"auth.auditLog.previous\", \"Previous\")}\n              </button>\n              <button\n                type=\"button\"\n                onClick={() => setPage((prev) => prev + 1)}\n                disabled={!hasMore}\n                aria-label={tr(\n                  \"auth.auditLog.nextPageAriaLabel\",\n                  \"Go to next page\",\n                )}\n                className=\"px-4 py-2 rounded-lg border border-border-default text-text-primary bg-bg-surface disabled:opacity-50 disabled:cursor-not-allowed hover:bg-bg-sunken transition-colors\"\n              >\n                {tr(\"auth.auditLog.next\", \"Next\")}\n              </button>\n            </div>\n          </nav>\n        </>\n      )}\n    </div>\n  );\n}\n"],"mappings":";;;;;;;;;;AAYA,IAAM,IAAY;AAYlB,SAAgB,IAAe;CAC7B,IAAM,EAAE,SAAM,GAAS,EACjB,KAAM,GAAa,MAA6B;EACpD,IAAM,IAAa,EAAE,EAAI;AACzB,SAAO,MAAe,IAAM,IAAW;IAGnC,CAAC,GAAM,KAAW,EAAS,EAAE,EAC7B,KAAU,IAAO,KAAK,GAMtB,IADe,EAAsB,iBAAiB,EACzB,UAAU,IAEvC,EAAE,SAAM,YAAS,aAAU,EAAsB;EACrD,MAAM,CAAC;EACP,aAAa;EACb,WAAW,EAAE,YAAY;GAAE,OAAO;GAAW;GAAQ,EAAE;EACxD,CAAC,EAEI,IAAY,GAAM,iBAAiB,EAAE,EAErC,IAAU,EAAU,WAAW,GAG/B,CAAC,GAAiB,EAAE,SAAS,OACjC,EAA+B,EAAE,QAFd,EAAiB,YAAY,EAEO,CAAC,EACpD,CAAC,GAAa,KAAkB,EAAwB,KAAK,EAE7D,IAAe,YAAY;AAC/B,IAAe,KAAK;AACpB,MAAI;AACF,SAAM,EAAgB,EACpB,WAAW,EACT,OAAO;IACL,MAAM;IAEN,aAAa,CAAC,wBAAwB;IACtC,QAAQ;IACR,aAAa;IACb,iBAAiB;IAClB,EACF,EACF,CAAC;WACK,GAAK;AACZ,KACE,aAAe,QAAQ,EAAI,UAAU,yBACtC;;IAIC,KAAkB,MAAsB;AAC5C,UAAQ,GAAR;GACE,KAAK,gBACH,QAAO;GACT,KAAK,gBACH,QAAO;GACT,KAAK,SACH,QAAO;GACT,KAAK,kBACH,QAAO;GACT,KAAK;GACL,KAAK,eACH,QAAO;GACT,KAAK,mBACH,QAAO;GACT,QACE,QAAO;;;AA4Bb,QAxBK,IAyBH,kBAAC,OAAD;EAAK,WAAU;YAAf;GAEE,kBAAC,OAAD;IAAK,WAAU;cAAf,CACE,kBAAC,MAAD;KAAI,WAAU;eACX,EAAG,uBAAuB,qBAAqB;KAC7C,CAAA,EACL,kBAAC,UAAD;KACE,MAAK;KACL,eAAe,KAAK,GAAc;KAClC,UAAU;KACV,cAAY,EAAG,iCAAiC,mBAAmB;KACnE,WAAU;eAET,IACC,kBAAA,GAAA,EAAA,UAAA,CACE,kBAAC,GAAD;MAAa,WAAU;MAAsB,eAAY;MAAS,CAAA,EACjE,EAAG,2BAA2B,eAAe,CAC7C,EAAA,CAAA,GAEH,kBAAA,GAAA,EAAA,UAAA,CACE,kBAAC,OAAD;MACE,WAAU;MACV,MAAK;MACL,SAAQ;MACR,QAAO;MACP,eAAY;gBAEZ,kBAAC,QAAD;OACE,eAAc;OACd,gBAAe;OACf,aAAa;OACb,GAAE;OACF,CAAA;MACE,CAAA,EACL,EAAG,wBAAwB,SAAS,CACpC,EAAA,CAAA;KAEE,CAAA,CACL;;GAGL,KACC,kBAAC,OAAD;IACE,MAAK;IACL,WAAU;cAFZ,CAIE,kBAAC,GAAD;KACE,WAAU;KACV,eAAY;KACZ,CAAA,EACF,kBAAC,KAAD;KAAG,WAAU;eAAkC;KAAgB,CAAA,CAC3D;;GAGP,IACC,kBAAC,OAAD;IAAK,aAAU;IAAS,aAAU;IAAO,WAAU;cAAnD,CACE,kBAAC,GAAD;KACE,WAAU;KACV,eAAY;KACZ,CAAA,EACF,kBAAC,KAAD;KAAG,WAAU;eACV,EAAG,yBAAyB,0BAA0B;KACrD,CAAA,CACA;QACJ,IACF,kBAAC,OAAD;IACE,MAAK;IACL,WAAU;cAEV,kBAAC,KAAD;KAAG,WAAU;eACV,EAAG,uBAAuB,8BAA8B;KACvD,CAAA;IACA,CAAA,GACJ,EAAU,WAAW,IACvB,kBAAC,UAAD;IAAQ,WAAU;cAChB,kBAAC,KAAD;KAAG,WAAU;eACV,EAAG,0BAA0B,8BAA8B;KAC1D,CAAA;IACG,CAAA,GAET,kBAAA,GAAA,EAAA,UAAA,CACE,kBAAC,OAAD;IAAK,WAAU;IAAY,aAAU;IAAS,aAAW;cACtD,EAAU,KAAK,MACd,kBAAC,OAAD;KAEE,WAAU;eAEV,kBAAC,OAAD;MAAK,WAAU;gBAAf;OACE,kBAAC,OAAD;QACE,WAAU;QACV,eAAY;kBAEX,EAAe,EAAM,OAAO;QACzB,CAAA;OACN,kBAAC,OAAD;QAAK,WAAU;kBAAf;SACE,kBAAC,MAAD;UAAI,WAAU;oBACX,EAAM,OAAO,QAAQ,MAAM,IAAI;UAC7B,CAAA;SACL,kBAAC,KAAD;UAAG,WAAU;oBACX,kBAAC,QAAD;WAAM,UAAU,EAAM;qBACnB,EAAe,EAAM,UAAU;WAC3B,CAAA;UACL,CAAA;SACJ,kBAAC,KAAD;UAAG,WAAU;oBAAb,CACG,EAAM,eACL,EACE,oCACA,uBACD,EACF,EAAM,aAAa,MAAM,EAAM,YAC9B;;SACA;;OACL,EAAM,OAAO,SAAS,UAAU,IAC/B,kBAAC,UAAD;QAAQ,WAAU;kBACf,EAAG,wBAAwB,SAAS;QAC9B,CAAA;OAEP;;KACF,EAlCC,EAAM,GAkCP,CACN;IACE,CAAA,EAGN,kBAAC,OAAD;IACE,cAAY,EACV,qCACA,uBACD;IACD,WAAU;cALZ,CAOE,kBAAC,KAAD;KAAG,WAAU;eAAb;MACG,EAAG,sBAAsB,OAAO;MAAC;MAAE;MAClC;QACJ,kBAAC,OAAD;KAAK,WAAU;eAAf,CACE,kBAAC,UAAD;MACE,MAAK;MACL,eAAe,GAAS,MAAS,KAAK,IAAI,GAAG,IAAO,EAAE,CAAC;MACvD,UAAU,MAAS;MACnB,cAAY,EACV,uCACA,sBACD;MACD,WAAU;gBAET,EAAG,0BAA0B,WAAW;MAClC,CAAA,EACT,kBAAC,UAAD;MACE,MAAK;MACL,eAAe,GAAS,MAAS,IAAO,EAAE;MAC1C,UAAU,CAAC;MACX,cAAY,EACV,mCACA,kBACD;MACD,WAAU;gBAET,EAAG,sBAAsB,OAAO;MAC1B,CAAA,CACL;OACF;MACL,EAAA,CAAA;GAED;MAzLJ,kBAAC,OAAD;EAAK,WAAU;YACb,kBAAC,OAAD;GAAK,WAAU;aAAf;IACE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,GAAD;MACE,WAAU;MACV,eAAY;MACZ,CAAA;KACE,CAAA;IACN,kBAAC,MAAD;KAAI,WAAU;eACX,EAAG,8BAA8B,qBAAqB;KACpD,CAAA;IACL,kBAAC,KAAD;KAAG,WAAU;eACV,EACC,4BACA,0DACD;KACC,CAAA;IACA;;EACF,CAAA"}

package/dist/auth/pages/EmailVerifyPage.js.map

@@ -1 +1 @@
-{"version":3,"file":"EmailVerifyPage.js","names":[],"sources":["../../../src/auth/pages/EmailVerifyPage.tsx"],"sourcesContent":["import { useEffect, useState, useCallback, useRef } from \"react\";\nimport { useI18n } from \"@burdenoff/fe-libs/shared/providers/shell\";\nimport { useSearchParams } from \"react-router-dom\";\nimport { useAuthOperations } from \"../hooks/useAuthOperations\";\nimport { useAuthStore } from \"../store/authStore\";\nimport { AuthLayout } from \"../components/AuthLayout\";\nimport { SpinnerIcon } from \"../components/AuthIcons\";\n\nconst REDIRECT_DELAY = 5; // seconds\n\n/**\n * Navigate to login page with optional email pre-fill\n * Uses window.location.href for reliable navigation (works in new tabs)\n */\nfunction navigateToLogin(email?: string) {\n  const baseUrl = \"/auth/login\";\n  const url = email ? `${baseUrl}?email=${encodeURIComponent(email)}` : baseUrl;\n  window.location.href = url;\n}\n\n/**\n * Email verification page with professional design\n */\nexport function EmailVerifyPage() {\n  const { t } = useI18n();\n  const tr = (key: string, fallback: string): string => {\n    const translated = t(key);\n    return translated === key ? fallback : translated;\n  };\n\n  const [searchParams] = useSearchParams();\n  const token = searchParams.get(\"token\");\n  const urlEmail = searchParams.get(\"email\");\n  const { verifyEmail, resendVerification } = useAuthOperations();\n  const user = useAuthStore((state) => state.user);\n  const [status, setStatus] = useState<\"verifying\" | \"success\" | \"error\">(\n    \"verifying\",\n  );\n  const verifiedEmailRef = useRef<string | undefined>(urlEmail || undefined);\n  const [isResending, setIsResending] = useState(false);\n  const [resendSuccess, setResendSuccess] = useState(false);\n  const [countdown, setCountdown] = useState(REDIRECT_DELAY);\n\n  // Guard against duplicate calls. useRef alone resets across remounts\n  // (StrictMode, Suspense resolution of the lazy Auth root, HMR), so we\n  // additionally key on the token via sessionStorage — any remount for the\n  // same token short-circuits instead of firing a second mutation.\n  const verificationInitiatedRef = useRef(false);\n\n  useEffect(() => {\n    if (!token || verificationInitiatedRef.current) return;\n\n    const storageKey = `auth:verifyEmail:inflight:${token}`;\n    if (\n      typeof window !== \"undefined\" &&\n      window.sessionStorage.getItem(storageKey)\n    ) {\n      return;\n    }\n    verificationInitiatedRef.current = true;\n    try {\n      window.sessionStorage.setItem(storageKey, \"1\");\n    } catch {\n      // sessionStorage unavailable (private mode, SSR); ref guard still applies.\n    }\n\n    verifyEmail(token)\n      .then((result) => {\n        if (result.success) {\n          setStatus(\"success\");\n          if (result.email) verifiedEmailRef.current = result.email;\n        } else {\n          setStatus(\"error\");\n        }\n      })\n      .catch(() => setStatus(\"error\"));\n  }, [token, verifyEmail]);\n\n  // Auto-redirect countdown after successful verification\n  useEffect(() => {\n    if (status !== \"success\") return;\n\n    const timer = setInterval(() => {\n      setCountdown((prev) => {\n        if (prev <= 1) {\n          clearInterval(timer);\n          navigateToLogin(verifiedEmailRef.current);\n          return 0;\n        }\n        return prev - 1;\n      });\n    }, 1000);\n\n    return () => clearInterval(timer);\n  }, [status]);\n\n  const handleResend = async () => {\n    const resendEmail = urlEmail || user?.email;\n    if (!resendEmail) {\n      console.error(\"No email available for resend\");\n      return;\n    }\n    setIsResending(true);\n    try {\n      await resendVerification(resendEmail);\n      setResendSuccess(true);\n    } catch (err) {\n      console.error(\"Failed to resend verification:\", err);\n    } finally {\n      setIsResending(false);\n    }\n  };\n\n  const handleContinueToLogin = useCallback(() => {\n    navigateToLogin(verifiedEmailRef.current);\n  }, []);\n\n  const handleBackToLogin = useCallback(() => {\n    navigateToLogin();\n  }, []);\n\n  if (status === \"verifying\") {\n    return (\n      <AuthLayout\n        title={tr(\"auth.emailVerify.verifyingTitle\", \"Verifying your email\")}\n        subtitle={tr(\n          \"auth.emailVerify.verifyingSubtitle\",\n          \"Please wait while we confirm your email address\",\n        )}\n      >\n        {/* Loading Spinner */}\n        <div className=\"flex flex-col items-center justify-center py-12\">\n          <div className=\"size-16 rounded-full bg-[var(--color-bg-accent)] flex items-center justify-center mb-6\">\n            <SpinnerIcon className=\"size-8 text-[var(--color-text-link)] animate-spin\" />\n          </div>\n          <p className=\"text-[var(--color-text-secondary)]\">\n            {tr(\"auth.emailVerify.moment\", \"This will only take a moment...\")}\n          </p>\n        </div>\n      </AuthLayout>\n    );\n  }\n\n  if (status === \"success\") {\n    return (\n      <AuthLayout\n        title={tr(\"auth.emailVerify.verifiedTitle\", \"Email verified!\")}\n        subtitle={tr(\n          \"auth.emailVerify.verifiedSubtitle\",\n          \"Your email address has been confirmed\",\n        )}\n      >\n        {/* Success Icon */}\n        <div className=\"flex flex-col items-center justify-center py-6\">\n          <div className=\"size-20 rounded-full bg-[var(--color-status-success-bg-subtle)] flex items-center justify-center mb-6\">\n            <svg\n              className=\"size-10 text-[var(--color-status-success-text)]\"\n              fill=\"none\"\n              viewBox=\"0 0 24 24\"\n              stroke=\"currentColor\"\n            >\n              <path\n                strokeLinecap=\"round\"\n                strokeLinejoin=\"round\"\n                strokeWidth={2}\n                d=\"M5 13l4 4L19 7\"\n              />\n            </svg>\n          </div>\n\n          <p className=\"text-center text-[var(--color-text-secondary)] mb-6\">\n            {tr(\n              \"auth.emailVerify.successMessage\",\n              \"Your email has been successfully verified. You can now sign in to access all features.\",\n            )}\n          </p>\n\n          <p className=\"text-center text-sm text-[var(--color-text-tertiary)] mb-6\">\n            {tr(\"auth.emailVerify.redirecting\", \"Redirecting to sign in in\")}{\" \"}\n            <span className=\"font-semibold text-[var(--color-text-primary)]\">\n              {countdown}\n            </span>{\" \"}\n            {tr(\"auth.emailVerify.seconds\", \"seconds...\")}\n          </p>\n\n          <button type=\"button\"\n            onClick={handleContinueToLogin}\n            className=\"auth-primary-button w-full px-4 py-3 font-semibold\"\n          >\n            {tr(\"auth.emailVerify.continueSignIn\", \"Continue to sign in now\")}\n          </button>\n        </div>\n      </AuthLayout>\n    );\n  }\n\n  // Error state\n  return (\n    <AuthLayout\n      title={tr(\"auth.emailVerify.failedTitle\", \"Verification failed\")}\n      subtitle={tr(\n        \"auth.emailVerify.failedSubtitle\",\n        \"We couldn't verify your email address\",\n      )}\n    >\n      <div className=\"flex flex-col items-center justify-center py-6\">\n        {/* Error Icon */}\n        <div className=\"size-20 rounded-full bg-[var(--color-status-error-bg-subtle)] flex items-center justify-center mb-6\">\n          <svg\n            className=\"size-10 text-[var(--color-status-error-text)]\"\n            fill=\"none\"\n            viewBox=\"0 0 24 24\"\n            stroke=\"currentColor\"\n          >\n            <path\n              strokeLinecap=\"round\"\n              strokeLinejoin=\"round\"\n              strokeWidth={2}\n              d=\"M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-3L13.732 4c-.77-1.333-2.694-1.333-3.464 0L3.34 16c-.77 1.333.192 3 1.732 3z\"\n            />\n          </svg>\n        </div>\n\n        <p className=\"text-center text-[var(--color-text-secondary)] mb-8\">\n          {tr(\n            \"auth.emailVerify.invalidLink\",\n            \"The verification link is invalid or has expired. Please request a new verification email.\",\n          )}\n        </p>\n\n        {resendSuccess ? (\n          <div className=\"w-full p-4 rounded-xl bg-[var(--color-status-success-bg-subtle)] border border-[var(--color-status-success-border)] text-center mb-4\">\n            <p className=\"text-sm text-[var(--color-status-success-text)]\">\n              {tr(\n                \"auth.emailVerify.emailSent\",\n                \"Verification email sent! Please check your inbox.\",\n              )}\n            </p>\n          </div>\n        ) : (\n          <button type=\"button\"\n            onClick={handleResend}\n            disabled={isResending}\n            className=\"auth-primary-button mb-4 flex w-full items-center justify-center gap-2 px-4 py-3 font-semibold\"\n          >\n            {isResending ? (\n              <>\n                <SpinnerIcon className=\"size-5 animate-spin\" />\n                <span>Sending…</span>\n              </>\n            ) : (\n              tr(\"auth.emailVerify.resend\", \"Resend verification email\")\n            )}\n          </button>\n        )}\n\n        <button type=\"button\"\n          onClick={handleBackToLogin}\n          className=\"w-full py-3 px-4 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] font-medium hover:bg-[var(--color-bg-sunken)] transition-all\"\n        >\n          {tr(\"auth.emailVerify.backToSignIn\", \"Back to sign in\")}\n        </button>\n      </div>\n    </AuthLayout>\n  );\n}\n"],"mappings":";;;;;;;;;AAQA,IAAM,IAAiB;AAMvB,SAAS,EAAgB,GAAgB;CACvC,IAAM,IAAU,eACV,IAAM,IAAQ,GAAG,EAAQ,SAAS,mBAAmB,EAAM,KAAK;AACtE,QAAO,SAAS,OAAO;;AAMzB,SAAgB,IAAkB;CAChC,IAAM,EAAE,SAAM,GAAS,EACjB,KAAM,GAAa,MAA6B;EACpD,IAAM,IAAa,EAAE,EAAI;AACzB,SAAO,MAAe,IAAM,IAAW;IAGnC,CAAC,KAAgB,GAAiB,EAClC,IAAQ,EAAa,IAAI,QAAQ,EACjC,IAAW,EAAa,IAAI,QAAQ,EACpC,EAAE,gBAAa,0BAAuB,GAAmB,EACzD,IAAO,GAAc,MAAU,EAAM,KAAK,EAC1C,CAAC,GAAQ,KAAa,EAC1B,YACD,EACK,IAAmB,EAA2B,KAAY,KAAA,EAAU,EACpE,CAAC,GAAa,KAAkB,EAAS,GAAM,EAC/C,CAAC,GAAe,KAAoB,EAAS,GAAM,EACnD,CAAC,GAAW,KAAgB,EAAS,EAAe,EAMpD,IAA2B,EAAO,GAAM;AAgC9C,CA9BA,QAAgB;AACd,MAAI,CAAC,KAAS,EAAyB,QAAS;EAEhD,IAAM,IAAa,6BAA6B;AAE9C,eAAO,SAAW,OAClB,OAAO,eAAe,QAAQ,EAAW,GAI3C;KAAyB,UAAU;AACnC,OAAI;AACF,WAAO,eAAe,QAAQ,GAAY,IAAI;WACxC;AAIR,KAAY,EAAM,CACf,MAAM,MAAW;AAChB,IAAI,EAAO,WACT,EAAU,UAAU,EAChB,EAAO,UAAO,EAAiB,UAAU,EAAO,UAEpD,EAAU,QAAQ;KAEpB,CACD,YAAY,EAAU,QAAQ,CAAC;;IACjC,CAAC,GAAO,EAAY,CAAC,EAGxB,QAAgB;AACd,MAAI,MAAW,UAAW;EAE1B,IAAM,IAAQ,kBAAkB;AAC9B,MAAc,MACR,KAAQ,KACV,cAAc,EAAM,EACpB,EAAgB,EAAiB,QAAQ,EAClC,KAEF,IAAO,EACd;KACD,IAAK;AAER,eAAa,cAAc,EAAM;IAChC,CAAC,EAAO,CAAC;CAEZ,IAAM,IAAe,YAAY;EAC/B,IAAM,IAAc,KAAY,GAAM;AACtC,MAAI,CAAC,GAAa;AAChB,WAAQ,MAAM,gCAAgC;AAC9C;;AAEF,IAAe,GAAK;AACpB,MAAI;AAEF,GADA,MAAM,EAAmB,EAAY,EACrC,EAAiB,GAAK;WACf,GAAK;AACZ,WAAQ,MAAM,kCAAkC,EAAI;YAC5C;AACR,KAAe,GAAM;;IAInB,IAAwB,QAAkB;AAC9C,IAAgB,EAAiB,QAAQ;IACxC,EAAE,CAAC,EAEA,IAAoB,QAAkB;AAC1C,KAAiB;IAChB,EAAE,CAAC;AA8EN,QA5EI,MAAW,cAEX,kBAAC,GAAD;EACE,OAAO,EAAG,mCAAmC,uBAAuB;EACpE,UAAU,EACR,sCACA,kDACD;YAGD,kBAAC,OAAD;GAAK,WAAU;aAAf,CACE,kBAAC,OAAD;IAAK,WAAU;cACb,kBAAC,GAAD,EAAa,WAAU,qDAAsD,CAAA;IACzE,CAAA,EACN,kBAAC,KAAD;IAAG,WAAU;cACV,EAAG,2BAA2B,kCAAkC;IAC/D,CAAA,CACA;;EACK,CAAA,GAIb,MAAW,YAEX,kBAAC,GAAD;EACE,OAAO,EAAG,kCAAkC,kBAAkB;EAC9D,UAAU,EACR,qCACA,wCACD;YAGD,kBAAC,OAAD;GAAK,WAAU;aAAf;IACE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,OAAD;MACE,WAAU;MACV,MAAK;MACL,SAAQ;MACR,QAAO;gBAEP,kBAAC,QAAD;OACE,eAAc;OACd,gBAAe;OACf,aAAa;OACb,GAAE;OACF,CAAA;MACE,CAAA;KACF,CAAA;IAEN,kBAAC,KAAD;KAAG,WAAU;eACV,EACC,mCACA,yFACD;KACC,CAAA;IAEJ,kBAAC,KAAD;KAAG,WAAU;eAAb;MACG,EAAG,gCAAgC,4BAA4B;MAAE;MAClE,kBAAC,QAAD;OAAM,WAAU;iBACb;OACI,CAAA;MAAC;MACP,EAAG,4BAA4B,aAAa;MAC3C;;IAEJ,kBAAC,UAAD;KAAQ,MAAK;KACX,SAAS;KACT,WAAU;eAET,EAAG,mCAAmC,0BAA0B;KAC1D,CAAA;IACL;;EACK,CAAA,GAMf,kBAAC,GAAD;EACE,OAAO,EAAG,gCAAgC,sBAAsB;EAChE,UAAU,EACR,mCACA,wCACD;YAED,kBAAC,OAAD;GAAK,WAAU;aAAf;IAEE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,OAAD;MACE,WAAU;MACV,MAAK;MACL,SAAQ;MACR,QAAO;gBAEP,kBAAC,QAAD;OACE,eAAc;OACd,gBAAe;OACf,aAAa;OACb,GAAE;OACF,CAAA;MACE,CAAA;KACF,CAAA;IAEN,kBAAC,KAAD;KAAG,WAAU;eACV,EACC,gCACA,4FACD;KACC,CAAA;IAEH,IACC,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,KAAD;MAAG,WAAU;gBACV,EACC,8BACA,oDACD;MACC,CAAA;KACA,CAAA,GAEN,kBAAC,UAAD;KAAQ,MAAK;KACX,SAAS;KACT,UAAU;KACV,WAAU;eAET,IACC,kBAAA,GAAA,EAAA,UAAA,CACE,kBAAC,GAAD,EAAa,WAAU,uBAAwB,CAAA,EAC/C,kBAAC,QAAD,EAAA,UAAM,YAAe,CAAA,CACpB,EAAA,CAAA,GAEH,EAAG,2BAA2B,4BAA4B;KAErD,CAAA;IAGX,kBAAC,UAAD;KAAQ,MAAK;KACX,SAAS;KACT,WAAU;eAET,EAAG,iCAAiC,kBAAkB;KAChD,CAAA;IACL;;EACK,CAAA"}
+{"version":3,"file":"EmailVerifyPage.js","names":[],"sources":["../../../src/auth/pages/EmailVerifyPage.tsx"],"sourcesContent":["import { useEffect, useState, useCallback, useRef } from \"react\";\nimport { useI18n } from \"@burdenoff/fe-libs/shared/providers/shell\";\nimport { useSearchParams } from \"react-router-dom\";\nimport { useAuthOperations } from \"../hooks/useAuthOperations\";\nimport { useAuthStore } from \"../store/authStore\";\nimport { AuthLayout } from \"../components/AuthLayout\";\nimport { SpinnerIcon } from \"../components/AuthIcons\";\n\nconst REDIRECT_DELAY = 5; // seconds\n\n/**\n * Navigate to login page with optional email pre-fill\n * Uses window.location.href for reliable navigation (works in new tabs)\n */\nfunction navigateToLogin(email?: string) {\n  const baseUrl = \"/auth/login\";\n  const url = email ? `${baseUrl}?email=${encodeURIComponent(email)}` : baseUrl;\n  window.location.href = url;\n}\n\n/**\n * Email verification page with professional design\n */\nexport function EmailVerifyPage() {\n  const { t } = useI18n();\n  const tr = (key: string, fallback: string): string => {\n    const translated = t(key);\n    return translated === key ? fallback : translated;\n  };\n\n  const [searchParams] = useSearchParams();\n  const token = searchParams.get(\"token\");\n  const urlEmail = searchParams.get(\"email\");\n  const { verifyEmail, resendVerification } = useAuthOperations();\n  const user = useAuthStore((state) => state.user);\n  const [status, setStatus] = useState<\"verifying\" | \"success\" | \"error\">(\n    \"verifying\",\n  );\n  const verifiedEmailRef = useRef<string | undefined>(urlEmail || undefined);\n  const [isResending, setIsResending] = useState(false);\n  const [resendSuccess, setResendSuccess] = useState(false);\n  const [countdown, setCountdown] = useState(REDIRECT_DELAY);\n\n  // Guard against duplicate calls. useRef alone resets across remounts\n  // (StrictMode, Suspense resolution of the lazy Auth root, HMR), so we\n  // additionally key on the token via sessionStorage — any remount for the\n  // same token short-circuits instead of firing a second mutation.\n  const verificationInitiatedRef = useRef(false);\n\n  useEffect(() => {\n    if (!token || verificationInitiatedRef.current) return;\n\n    const storageKey = `auth:verifyEmail:inflight:${token}`;\n    if (\n      typeof window !== \"undefined\" &&\n      window.sessionStorage.getItem(storageKey)\n    ) {\n      return;\n    }\n    verificationInitiatedRef.current = true;\n    try {\n      window.sessionStorage.setItem(storageKey, \"1\");\n    } catch {\n      // sessionStorage unavailable (private mode, SSR); ref guard still applies.\n    }\n\n    verifyEmail(token)\n      .then((result) => {\n        if (result.success) {\n          setStatus(\"success\");\n          if (result.email) verifiedEmailRef.current = result.email;\n        } else {\n          setStatus(\"error\");\n        }\n      })\n      .catch(() => setStatus(\"error\"));\n  }, [token, verifyEmail]);\n\n  // Auto-redirect countdown after successful verification\n  useEffect(() => {\n    if (status !== \"success\") return;\n\n    const timer = setInterval(() => {\n      setCountdown((prev) => {\n        if (prev <= 1) {\n          clearInterval(timer);\n          navigateToLogin(verifiedEmailRef.current);\n          return 0;\n        }\n        return prev - 1;\n      });\n    }, 1000);\n\n    return () => clearInterval(timer);\n  }, [status]);\n\n  const handleResend = async () => {\n    const resendEmail = urlEmail || user?.email;\n    if (!resendEmail) {\n      console.error(\"No email available for resend\");\n      return;\n    }\n    setIsResending(true);\n    try {\n      await resendVerification(resendEmail);\n      setResendSuccess(true);\n    } catch (err) {\n      console.error(\"Failed to resend verification:\", err);\n    } finally {\n      setIsResending(false);\n    }\n  };\n\n  const handleContinueToLogin = useCallback(() => {\n    navigateToLogin(verifiedEmailRef.current);\n  }, []);\n\n  const handleBackToLogin = useCallback(() => {\n    navigateToLogin();\n  }, []);\n\n  if (status === \"verifying\") {\n    return (\n      <AuthLayout\n        title={tr(\"auth.emailVerify.verifyingTitle\", \"Verifying your email\")}\n        subtitle={tr(\n          \"auth.emailVerify.verifyingSubtitle\",\n          \"Please wait while we confirm your email address\",\n        )}\n      >\n        {/* Loading Spinner */}\n        <div className=\"flex flex-col items-center justify-center py-12\">\n          <div className=\"size-16 rounded-full bg-[var(--color-bg-accent)] flex items-center justify-center mb-6\">\n            <SpinnerIcon className=\"size-8 text-[var(--color-text-link)] animate-spin\" />\n          </div>\n          <p className=\"text-[var(--color-text-secondary)]\">\n            {tr(\"auth.emailVerify.moment\", \"This will only take a moment...\")}\n          </p>\n        </div>\n      </AuthLayout>\n    );\n  }\n\n  if (status === \"success\") {\n    return (\n      <AuthLayout\n        title={tr(\"auth.emailVerify.verifiedTitle\", \"Email verified!\")}\n        subtitle={tr(\n          \"auth.emailVerify.verifiedSubtitle\",\n          \"Your email address has been confirmed\",\n        )}\n      >\n        {/* Success Icon */}\n        <div className=\"flex flex-col items-center justify-center py-6\">\n          <div className=\"size-20 rounded-full bg-[var(--color-status-success-bg-subtle)] flex items-center justify-center mb-6\">\n            <svg\n              className=\"size-10 text-[var(--color-status-success-text)]\"\n              fill=\"none\"\n              viewBox=\"0 0 24 24\"\n              stroke=\"currentColor\"\n            >\n              <path\n                strokeLinecap=\"round\"\n                strokeLinejoin=\"round\"\n                strokeWidth={2}\n                d=\"M5 13l4 4L19 7\"\n              />\n            </svg>\n          </div>\n\n          <p className=\"text-center text-[var(--color-text-secondary)] mb-6\">\n            {tr(\n              \"auth.emailVerify.successMessage\",\n              \"Your email has been successfully verified. You can now sign in to access all features.\",\n            )}\n          </p>\n\n          <p className=\"text-center text-sm text-[var(--color-text-tertiary)] mb-6\">\n            {tr(\"auth.emailVerify.redirecting\", \"Redirecting to sign in in\")}{\" \"}\n            <span className=\"font-semibold text-[var(--color-text-primary)]\">\n              {countdown}\n            </span>{\" \"}\n            {tr(\"auth.emailVerify.seconds\", \"seconds...\")}\n          </p>\n\n          <button\n            type=\"button\"\n            onClick={handleContinueToLogin}\n            className=\"auth-primary-button w-full px-4 py-3 font-semibold\"\n          >\n            {tr(\"auth.emailVerify.continueSignIn\", \"Continue to sign in now\")}\n          </button>\n        </div>\n      </AuthLayout>\n    );\n  }\n\n  // Error state\n  return (\n    <AuthLayout\n      title={tr(\"auth.emailVerify.failedTitle\", \"Verification failed\")}\n      subtitle={tr(\n        \"auth.emailVerify.failedSubtitle\",\n        \"We couldn't verify your email address\",\n      )}\n    >\n      <div className=\"flex flex-col items-center justify-center py-6\">\n        {/* Error Icon */}\n        <div className=\"size-20 rounded-full bg-[var(--color-status-error-bg-subtle)] flex items-center justify-center mb-6\">\n          <svg\n            className=\"size-10 text-[var(--color-status-error-text)]\"\n            fill=\"none\"\n            viewBox=\"0 0 24 24\"\n            stroke=\"currentColor\"\n          >\n            <path\n              strokeLinecap=\"round\"\n              strokeLinejoin=\"round\"\n              strokeWidth={2}\n              d=\"M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-3L13.732 4c-.77-1.333-2.694-1.333-3.464 0L3.34 16c-.77 1.333.192 3 1.732 3z\"\n            />\n          </svg>\n        </div>\n\n        <p className=\"text-center text-[var(--color-text-secondary)] mb-8\">\n          {tr(\n            \"auth.emailVerify.invalidLink\",\n            \"The verification link is invalid or has expired. Please request a new verification email.\",\n          )}\n        </p>\n\n        {resendSuccess ? (\n          <div className=\"w-full p-4 rounded-xl bg-[var(--color-status-success-bg-subtle)] border border-[var(--color-status-success-border)] text-center mb-4\">\n            <p className=\"text-sm text-[var(--color-status-success-text)]\">\n              {tr(\n                \"auth.emailVerify.emailSent\",\n                \"Verification email sent! Please check your inbox.\",\n              )}\n            </p>\n          </div>\n        ) : (\n          <button\n            type=\"button\"\n            onClick={handleResend}\n            disabled={isResending}\n            className=\"auth-primary-button mb-4 flex w-full items-center justify-center gap-2 px-4 py-3 font-semibold\"\n          >\n            {isResending ? (\n              <>\n                <SpinnerIcon className=\"size-5 animate-spin\" />\n                <span>Sending…</span>\n              </>\n            ) : (\n              tr(\"auth.emailVerify.resend\", \"Resend verification email\")\n            )}\n          </button>\n        )}\n\n        <button\n          type=\"button\"\n          onClick={handleBackToLogin}\n          className=\"w-full py-3 px-4 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] font-medium hover:bg-[var(--color-bg-sunken)] transition-all\"\n        >\n          {tr(\"auth.emailVerify.backToSignIn\", \"Back to sign in\")}\n        </button>\n      </div>\n    </AuthLayout>\n  );\n}\n"],"mappings":";;;;;;;;;AAQA,IAAM,IAAiB;AAMvB,SAAS,EAAgB,GAAgB;CACvC,IAAM,IAAU,eACV,IAAM,IAAQ,GAAG,EAAQ,SAAS,mBAAmB,EAAM,KAAK;AACtE,QAAO,SAAS,OAAO;;AAMzB,SAAgB,IAAkB;CAChC,IAAM,EAAE,SAAM,GAAS,EACjB,KAAM,GAAa,MAA6B;EACpD,IAAM,IAAa,EAAE,EAAI;AACzB,SAAO,MAAe,IAAM,IAAW;IAGnC,CAAC,KAAgB,GAAiB,EAClC,IAAQ,EAAa,IAAI,QAAQ,EACjC,IAAW,EAAa,IAAI,QAAQ,EACpC,EAAE,gBAAa,0BAAuB,GAAmB,EACzD,IAAO,GAAc,MAAU,EAAM,KAAK,EAC1C,CAAC,GAAQ,KAAa,EAC1B,YACD,EACK,IAAmB,EAA2B,KAAY,KAAA,EAAU,EACpE,CAAC,GAAa,KAAkB,EAAS,GAAM,EAC/C,CAAC,GAAe,KAAoB,EAAS,GAAM,EACnD,CAAC,GAAW,KAAgB,EAAS,EAAe,EAMpD,IAA2B,EAAO,GAAM;AAgC9C,CA9BA,QAAgB;AACd,MAAI,CAAC,KAAS,EAAyB,QAAS;EAEhD,IAAM,IAAa,6BAA6B;AAE9C,eAAO,SAAW,OAClB,OAAO,eAAe,QAAQ,EAAW,GAI3C;KAAyB,UAAU;AACnC,OAAI;AACF,WAAO,eAAe,QAAQ,GAAY,IAAI;WACxC;AAIR,KAAY,EAAM,CACf,MAAM,MAAW;AAChB,IAAI,EAAO,WACT,EAAU,UAAU,EAChB,EAAO,UAAO,EAAiB,UAAU,EAAO,UAEpD,EAAU,QAAQ;KAEpB,CACD,YAAY,EAAU,QAAQ,CAAC;;IACjC,CAAC,GAAO,EAAY,CAAC,EAGxB,QAAgB;AACd,MAAI,MAAW,UAAW;EAE1B,IAAM,IAAQ,kBAAkB;AAC9B,MAAc,MACR,KAAQ,KACV,cAAc,EAAM,EACpB,EAAgB,EAAiB,QAAQ,EAClC,KAEF,IAAO,EACd;KACD,IAAK;AAER,eAAa,cAAc,EAAM;IAChC,CAAC,EAAO,CAAC;CAEZ,IAAM,IAAe,YAAY;EAC/B,IAAM,IAAc,KAAY,GAAM;AACtC,MAAI,CAAC,GAAa;AAChB,WAAQ,MAAM,gCAAgC;AAC9C;;AAEF,IAAe,GAAK;AACpB,MAAI;AAEF,GADA,MAAM,EAAmB,EAAY,EACrC,EAAiB,GAAK;WACf,GAAK;AACZ,WAAQ,MAAM,kCAAkC,EAAI;YAC5C;AACR,KAAe,GAAM;;IAInB,IAAwB,QAAkB;AAC9C,IAAgB,EAAiB,QAAQ;IACxC,EAAE,CAAC,EAEA,IAAoB,QAAkB;AAC1C,KAAiB;IAChB,EAAE,CAAC;AA+EN,QA7EI,MAAW,cAEX,kBAAC,GAAD;EACE,OAAO,EAAG,mCAAmC,uBAAuB;EACpE,UAAU,EACR,sCACA,kDACD;YAGD,kBAAC,OAAD;GAAK,WAAU;aAAf,CACE,kBAAC,OAAD;IAAK,WAAU;cACb,kBAAC,GAAD,EAAa,WAAU,qDAAsD,CAAA;IACzE,CAAA,EACN,kBAAC,KAAD;IAAG,WAAU;cACV,EAAG,2BAA2B,kCAAkC;IAC/D,CAAA,CACA;;EACK,CAAA,GAIb,MAAW,YAEX,kBAAC,GAAD;EACE,OAAO,EAAG,kCAAkC,kBAAkB;EAC9D,UAAU,EACR,qCACA,wCACD;YAGD,kBAAC,OAAD;GAAK,WAAU;aAAf;IACE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,OAAD;MACE,WAAU;MACV,MAAK;MACL,SAAQ;MACR,QAAO;gBAEP,kBAAC,QAAD;OACE,eAAc;OACd,gBAAe;OACf,aAAa;OACb,GAAE;OACF,CAAA;MACE,CAAA;KACF,CAAA;IAEN,kBAAC,KAAD;KAAG,WAAU;eACV,EACC,mCACA,yFACD;KACC,CAAA;IAEJ,kBAAC,KAAD;KAAG,WAAU;eAAb;MACG,EAAG,gCAAgC,4BAA4B;MAAE;MAClE,kBAAC,QAAD;OAAM,WAAU;iBACb;OACI,CAAA;MAAC;MACP,EAAG,4BAA4B,aAAa;MAC3C;;IAEJ,kBAAC,UAAD;KACE,MAAK;KACL,SAAS;KACT,WAAU;eAET,EAAG,mCAAmC,0BAA0B;KAC1D,CAAA;IACL;;EACK,CAAA,GAMf,kBAAC,GAAD;EACE,OAAO,EAAG,gCAAgC,sBAAsB;EAChE,UAAU,EACR,mCACA,wCACD;YAED,kBAAC,OAAD;GAAK,WAAU;aAAf;IAEE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,OAAD;MACE,WAAU;MACV,MAAK;MACL,SAAQ;MACR,QAAO;gBAEP,kBAAC,QAAD;OACE,eAAc;OACd,gBAAe;OACf,aAAa;OACb,GAAE;OACF,CAAA;MACE,CAAA;KACF,CAAA;IAEN,kBAAC,KAAD;KAAG,WAAU;eACV,EACC,gCACA,4FACD;KACC,CAAA;IAEH,IACC,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,KAAD;MAAG,WAAU;gBACV,EACC,8BACA,oDACD;MACC,CAAA;KACA,CAAA,GAEN,kBAAC,UAAD;KACE,MAAK;KACL,SAAS;KACT,UAAU;KACV,WAAU;eAET,IACC,kBAAA,GAAA,EAAA,UAAA,CACE,kBAAC,GAAD,EAAa,WAAU,uBAAwB,CAAA,EAC/C,kBAAC,QAAD,EAAA,UAAM,YAAe,CAAA,CACpB,EAAA,CAAA,GAEH,EAAG,2BAA2B,4BAA4B;KAErD,CAAA;IAGX,kBAAC,UAAD;KACE,MAAK;KACL,SAAS;KACT,WAAU;eAET,EAAG,iCAAiC,kBAAkB;KAChD,CAAA;IACL;;EACK,CAAA"}