@burdenoff/microfe-auth 2026.731.1 → 2026.802.1

package/dist/auth/AuthRoot.js

@@ -3,7 +3,7 @@ import { CaptchaProvider as t } from "./providers/CaptchaProvider.js";
 import { AuthRoutes as n } from "./AuthRoutes.js";
 import { useEffect as r, useMemo as i } from "react";
 import { ErrorBoundary as a } from "@burdenoff/fe-libs/shared/components";
-import { useLocation as o } from "react-router-dom";
+import { useLocation as o } from "react-router";
 import { Building as s, Key as c, Laptop as l, ShieldCheck as u } from "lucide-react";
 import { jsx as d } from "react/jsx-runtime";
 import { FeatureFlagProvider as f } from "@burdenoff/fe-libs/shared/feature-flags";

package/dist/auth/AuthRoot.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthRoot.js","names":[],"sources":["../../src/auth/AuthRoot.tsx"],"sourcesContent":["import type { FC } from \"react\";\nimport { useEffect, useMemo } from \"react\";\nimport { ErrorBoundary } from \"@burdenoff/fe-libs/shared/components\";\nimport { useLocation } from \"react-router-dom\";\nimport { ShieldCheck, Laptop, Key, /* Code, */ Building } from \"lucide-react\";\nimport { AuthProvider } from \"./providers/AuthProvider\";\nimport { FeatureFlagProvider } from \"@burdenoff/fe-libs/shared/feature-flags\";\nimport { CaptchaProvider } from \"./providers/CaptchaProvider\";\nimport type { NavItem, AuthRootProps } from \"./types\";\nimport { AuthRoutes } from \"./AuthRoutes\";\n\n/**\n * Root component for the Auth microfrontend.\n *\n * This is the main entry point that host applications import and render.\n * It sets up the necessary providers and renders the internal routing.\n * Automatically registers navigation items with the shell if registration functions are provided.\n *\n * @example\n * ```tsx\n * import { AuthRoot, type AuthRootProps } from '@burdenoff/microfe-auth';\n *\n * function App() {\n *   const props: AuthRootProps = {\n *     basePath: '/auth',\n *     navigate: (path) => router.push(path),\n *     apiGatewayUrl: 'http://localhost:4002',\n *     authToken: 'token',\n *     onAuthSuccess: (user) => shellLogin(user),\n *     onLogout: () => shellLogout(),\n *   };\n *\n *   return <AuthRoot {...props} />;\n * }\n * ```\n */\nexport const AuthRoot: FC<AuthRootProps> = (props) => {\n  const {\n    registerNavItems,\n    registerFooterItems,\n    basePath = \"/\",\n    // Admin routes (`/auth/users`, `/auth/users/:id`, `/auth/sso`,\n    // `/auth/audit-log`) are opt-in: only the admin app shell should pass\n    // `enableAdminRoutes={true}`. User-facing product hosts (vibecontrols,\n    // workspaces, botlit, healthybowl, etc.) intentionally do not expose\n    // these surfaces — gateway RBAC still gates the underlying\n    // queries/mutations, but hiding the routes prevents accidental UI\n    // discoverability. Must match the corresponding default in\n    // `AuthRoutes.tsx`.\n    enableAdminRoutes = false,\n    bypassEnterprisePlanGate = false,\n  } = props;\n  const location = useLocation();\n\n  // Normalize basePath (remove trailing slash)\n  const normalizedBasePath = useMemo(\n    () =>\n      basePath && basePath !== \"/\"\n        ? basePath.endsWith(\"/\")\n          ? basePath.slice(0, -1)\n          : basePath\n        : \"\",\n    [basePath],\n  );\n\n  // Helper to join paths correctly, avoiding double slashes\n  const joinPath = (base: string, path: string): string => {\n    const cleanBase = base.endsWith(\"/\") ? base.slice(0, -1) : base;\n    const cleanPath = path.startsWith(\"/\") ? path : `/${path}`;\n    return cleanBase + cleanPath;\n  };\n\n  // Register navigation items with the shell\n  useEffect(() => {\n    if (!registerNavItems) return;\n\n    const navItems: NavItem[] = [\n      {\n        id: \"auth-security\",\n        label: \"Security Settings\",\n        path: joinPath(basePath, \"security\"),\n        icon: <ShieldCheck size={20} />,\n        order: 10,\n        group: \"auth\",\n      },\n      {\n        id: \"auth-sessions\",\n        label: \"Active Sessions\",\n        path: joinPath(basePath, \"sessions\"),\n        icon: <Laptop size={20} />,\n        order: 20,\n        group: \"auth\",\n      },\n      {\n        id: \"auth-mfa\",\n        label: \"Multi-Factor Auth\",\n        path: joinPath(basePath, \"mfa\"),\n        icon: <Key size={20} />,\n        order: 30,\n        group: \"auth\",\n      },\n      // Hidden — moved to Developer Portal\n      // {\n      //   id: \"auth-api-keys\",\n      //   label: \"API Keys\",\n      //   path: joinPath(basePath, \"api-keys\"),\n      //   icon: <Code size={20} />,\n      //   order: 40,\n      //   group: \"auth\",\n      // },\n      ...(enableAdminRoutes\n        ? [\n            {\n              id: \"auth-sso\",\n              label: \"SSO Configuration\",\n              path: joinPath(basePath, \"sso\"),\n              icon: <Building size={20} />,\n              order: 50,\n              group: \"auth\",\n            },\n          ]\n        : []),\n    ];\n\n    // Register and get cleanup function\n    const cleanup = registerNavItems(navItems);\n\n    // Return cleanup function to unregister on unmount\n    return cleanup;\n  }, [registerNavItems, basePath, enableAdminRoutes]);\n\n  // Register footer items (example: auth status indicator)\n  useEffect(() => {\n    if (!registerFooterItems) return;\n\n    const footerItems = [\n      {\n        id: \"auth-status\",\n        label: \"Auth Ready\",\n        type: \"status\" as const,\n        order: 10,\n        section: \"left\" as const,\n      },\n    ];\n\n    const cleanup = registerFooterItems(footerItems);\n    return cleanup;\n  }, [registerFooterItems]);\n\n  // Check if path matches - must be after all hooks\n  const pathMatches = useMemo(() => {\n    if (!normalizedBasePath) return true;\n    return (\n      location.pathname === normalizedBasePath ||\n      location.pathname.startsWith(normalizedBasePath + \"/\")\n    );\n  }, [normalizedBasePath, location.pathname]);\n\n  // Early return after all hooks are called\n  if (!pathMatches) {\n    return null;\n  }\n\n  return (\n    <ErrorBoundary\n      fallback={\n        <div className=\"p-6 text-center text-text-secondary\">\n          Something went wrong loading this module. Please refresh the page.\n        </div>\n      }\n    >\n      <FeatureFlagProvider\n        workspaceId={null}\n        gateway=\"global\"\n        defaultEnabled={true}\n      >\n        <AuthProvider {...props}>\n          <CaptchaProvider>\n            <AuthRoutes\n              basePath={normalizedBasePath}\n              enableAdminRoutes={enableAdminRoutes}\n              bypassEnterprisePlanGate={bypassEnterprisePlanGate}\n            />\n          </CaptchaProvider>\n        </AuthProvider>\n      </FeatureFlagProvider>\n    </ErrorBoundary>\n  );\n};\n"],"mappings":";;;;;;;;;;AAoCA,IAAa,KAA+B,MAAU;CACpD,IAAM,EACJ,qBACA,wBACA,cAAW,KASX,uBAAoB,IACpB,8BAA2B,OACzB,GACE,IAAW,GAAa,EAGxB,IAAqB,QAEvB,KAAY,MAAa,MACrB,EAAS,SAAS,IAAI,GACpB,EAAS,MAAM,GAAG,GAAG,GACrB,IACF,IACN,CAAC,EAAS,CACX,EAGK,KAAY,GAAc,OACZ,EAAK,SAAS,IAAI,GAAG,EAAK,MAAM,GAAG,GAAG,GAAG,MACzC,EAAK,WAAW,IAAI,GAAG,IAAO,IAAI;AA+FtD,QA1FA,QAAgB;AACT,QAsDL,QAHgB,EAjDY;GAC1B;IACE,IAAI;IACJ,OAAO;IACP,MAAM,EAAS,GAAU,WAAW;IACpC,MAAM,kBAAC,GAAD,EAAa,MAAM,IAAM,CAAA;IAC/B,OAAO;IACP,OAAO;IACR;GACD;IACE,IAAI;IACJ,OAAO;IACP,MAAM,EAAS,GAAU,WAAW;IACpC,MAAM,kBAAC,GAAD,EAAQ,MAAM,IAAM,CAAA;IAC1B,OAAO;IACP,OAAO;IACR;GACD;IACE,IAAI;IACJ,OAAO;IACP,MAAM,EAAS,GAAU,MAAM;IAC/B,MAAM,kBAAC,GAAD,EAAK,MAAM,IAAM,CAAA;IACvB,OAAO;IACP,OAAO;IACR;GAUD,GAAI,IACA,CACE;IACE,IAAI;IACJ,OAAO;IACP,MAAM,EAAS,GAAU,MAAM;IAC/B,MAAM,kBAAC,GAAD,EAAU,MAAM,IAAM,CAAA;IAC5B,OAAO;IACP,OAAO;IACR,CACF,GACD,EAAE;GACP,CAGyC;IAIzC;EAAC;EAAkB;EAAU;EAAkB,CAAC,EAGnD,QAAgB;AACT,QAaL,QADgB,EAVI,CAClB;GACE,IAAI;GACJ,OAAO;GACP,MAAM;GACN,OAAO;GACP,SAAS;GACV,CACF,CAE+C;IAE/C,CAAC,EAAoB,CAAC,EAGL,QACb,IAEH,EAAS,aAAa,KACtB,EAAS,SAAS,WAAW,IAAqB,IAAI,GAHxB,IAK/B,CAAC,GAAoB,EAAS,SAAS,CAAC,GAQzC,kBAAC,GAAD;EACE,UACE,kBAAC,OAAD;GAAK,WAAU;aAAsC;GAE/C,CAAA;YAGR,kBAAC,GAAD;GACE,aAAa;GACb,SAAQ;GACR,gBAAgB;aAEhB,kBAAC,GAAD;IAAc,GAAI;cAChB,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;KACE,UAAU;KACS;KACO;KAC1B,CAAA,EACc,CAAA;IACL,CAAA;GACK,CAAA;EACR,CAAA,GA1BT"}
+{"version":3,"file":"AuthRoot.js","names":[],"sources":["../../src/auth/AuthRoot.tsx"],"sourcesContent":["import type { FC } from \"react\";\nimport { useEffect, useMemo } from \"react\";\nimport { ErrorBoundary } from \"@burdenoff/fe-libs/shared/components\";\nimport { useLocation } from \"react-router\";\nimport { ShieldCheck, Laptop, Key, /* Code, */ Building } from \"lucide-react\";\nimport { AuthProvider } from \"./providers/AuthProvider\";\nimport { FeatureFlagProvider } from \"@burdenoff/fe-libs/shared/feature-flags\";\nimport { CaptchaProvider } from \"./providers/CaptchaProvider\";\nimport type { NavItem, AuthRootProps } from \"./types\";\nimport { AuthRoutes } from \"./AuthRoutes\";\n\n/**\n * Root component for the Auth microfrontend.\n *\n * This is the main entry point that host applications import and render.\n * It sets up the necessary providers and renders the internal routing.\n * Automatically registers navigation items with the shell if registration functions are provided.\n *\n * @example\n * ```tsx\n * import { AuthRoot, type AuthRootProps } from '@burdenoff/microfe-auth';\n *\n * function App() {\n *   const props: AuthRootProps = {\n *     basePath: '/auth',\n *     navigate: (path) => router.push(path),\n *     apiGatewayUrl: 'http://localhost:4002',\n *     authToken: 'token',\n *     onAuthSuccess: (user) => shellLogin(user),\n *     onLogout: () => shellLogout(),\n *   };\n *\n *   return <AuthRoot {...props} />;\n * }\n * ```\n */\nexport const AuthRoot: FC<AuthRootProps> = (props) => {\n  const {\n    registerNavItems,\n    registerFooterItems,\n    basePath = \"/\",\n    // Admin routes (`/auth/users`, `/auth/users/:id`, `/auth/sso`,\n    // `/auth/audit-log`) are opt-in: only the admin app shell should pass\n    // `enableAdminRoutes={true}`. User-facing product hosts (vibecontrols,\n    // workspaces, botlit, healthybowl, etc.) intentionally do not expose\n    // these surfaces — gateway RBAC still gates the underlying\n    // queries/mutations, but hiding the routes prevents accidental UI\n    // discoverability. Must match the corresponding default in\n    // `AuthRoutes.tsx`.\n    enableAdminRoutes = false,\n    bypassEnterprisePlanGate = false,\n  } = props;\n  const location = useLocation();\n\n  // Normalize basePath (remove trailing slash)\n  const normalizedBasePath = useMemo(\n    () =>\n      basePath && basePath !== \"/\"\n        ? basePath.endsWith(\"/\")\n          ? basePath.slice(0, -1)\n          : basePath\n        : \"\",\n    [basePath],\n  );\n\n  // Helper to join paths correctly, avoiding double slashes\n  const joinPath = (base: string, path: string): string => {\n    const cleanBase = base.endsWith(\"/\") ? base.slice(0, -1) : base;\n    const cleanPath = path.startsWith(\"/\") ? path : `/${path}`;\n    return cleanBase + cleanPath;\n  };\n\n  // Register navigation items with the shell\n  useEffect(() => {\n    if (!registerNavItems) return;\n\n    const navItems: NavItem[] = [\n      {\n        id: \"auth-security\",\n        label: \"Security Settings\",\n        path: joinPath(basePath, \"security\"),\n        icon: <ShieldCheck size={20} />,\n        order: 10,\n        group: \"auth\",\n      },\n      {\n        id: \"auth-sessions\",\n        label: \"Active Sessions\",\n        path: joinPath(basePath, \"sessions\"),\n        icon: <Laptop size={20} />,\n        order: 20,\n        group: \"auth\",\n      },\n      {\n        id: \"auth-mfa\",\n        label: \"Multi-Factor Auth\",\n        path: joinPath(basePath, \"mfa\"),\n        icon: <Key size={20} />,\n        order: 30,\n        group: \"auth\",\n      },\n      // Hidden — moved to Developer Portal\n      // {\n      //   id: \"auth-api-keys\",\n      //   label: \"API Keys\",\n      //   path: joinPath(basePath, \"api-keys\"),\n      //   icon: <Code size={20} />,\n      //   order: 40,\n      //   group: \"auth\",\n      // },\n      ...(enableAdminRoutes\n        ? [\n            {\n              id: \"auth-sso\",\n              label: \"SSO Configuration\",\n              path: joinPath(basePath, \"sso\"),\n              icon: <Building size={20} />,\n              order: 50,\n              group: \"auth\",\n            },\n          ]\n        : []),\n    ];\n\n    // Register and get cleanup function\n    const cleanup = registerNavItems(navItems);\n\n    // Return cleanup function to unregister on unmount\n    return cleanup;\n  }, [registerNavItems, basePath, enableAdminRoutes]);\n\n  // Register footer items (example: auth status indicator)\n  useEffect(() => {\n    if (!registerFooterItems) return;\n\n    const footerItems = [\n      {\n        id: \"auth-status\",\n        label: \"Auth Ready\",\n        type: \"status\" as const,\n        order: 10,\n        section: \"left\" as const,\n      },\n    ];\n\n    const cleanup = registerFooterItems(footerItems);\n    return cleanup;\n  }, [registerFooterItems]);\n\n  // Check if path matches - must be after all hooks\n  const pathMatches = useMemo(() => {\n    if (!normalizedBasePath) return true;\n    return (\n      location.pathname === normalizedBasePath ||\n      location.pathname.startsWith(normalizedBasePath + \"/\")\n    );\n  }, [normalizedBasePath, location.pathname]);\n\n  // Early return after all hooks are called\n  if (!pathMatches) {\n    return null;\n  }\n\n  return (\n    <ErrorBoundary\n      fallback={\n        <div className=\"p-6 text-center text-text-secondary\">\n          Something went wrong loading this module. Please refresh the page.\n        </div>\n      }\n    >\n      <FeatureFlagProvider\n        workspaceId={null}\n        gateway=\"global\"\n        defaultEnabled={true}\n      >\n        <AuthProvider {...props}>\n          <CaptchaProvider>\n            <AuthRoutes\n              basePath={normalizedBasePath}\n              enableAdminRoutes={enableAdminRoutes}\n              bypassEnterprisePlanGate={bypassEnterprisePlanGate}\n            />\n          </CaptchaProvider>\n        </AuthProvider>\n      </FeatureFlagProvider>\n    </ErrorBoundary>\n  );\n};\n"],"mappings":";;;;;;;;;;AAoCA,IAAa,KAA+B,MAAU;CACpD,IAAM,EACJ,qBACA,wBACA,cAAW,KASX,uBAAoB,IACpB,8BAA2B,OACzB,GACE,IAAW,GAAa,EAGxB,IAAqB,QAEvB,KAAY,MAAa,MACrB,EAAS,SAAS,IAAI,GACpB,EAAS,MAAM,GAAG,GAAG,GACrB,IACF,IACN,CAAC,EAAS,CACX,EAGK,KAAY,GAAc,OACZ,EAAK,SAAS,IAAI,GAAG,EAAK,MAAM,GAAG,GAAG,GAAG,MACzC,EAAK,WAAW,IAAI,GAAG,IAAO,IAAI;AA+FtD,QA1FA,QAAgB;AACT,QAsDL,QAHgB,EAjDY;GAC1B;IACE,IAAI;IACJ,OAAO;IACP,MAAM,EAAS,GAAU,WAAW;IACpC,MAAM,kBAAC,GAAD,EAAa,MAAM,IAAM,CAAA;IAC/B,OAAO;IACP,OAAO;IACR;GACD;IACE,IAAI;IACJ,OAAO;IACP,MAAM,EAAS,GAAU,WAAW;IACpC,MAAM,kBAAC,GAAD,EAAQ,MAAM,IAAM,CAAA;IAC1B,OAAO;IACP,OAAO;IACR;GACD;IACE,IAAI;IACJ,OAAO;IACP,MAAM,EAAS,GAAU,MAAM;IAC/B,MAAM,kBAAC,GAAD,EAAK,MAAM,IAAM,CAAA;IACvB,OAAO;IACP,OAAO;IACR;GAUD,GAAI,IACA,CACE;IACE,IAAI;IACJ,OAAO;IACP,MAAM,EAAS,GAAU,MAAM;IAC/B,MAAM,kBAAC,GAAD,EAAU,MAAM,IAAM,CAAA;IAC5B,OAAO;IACP,OAAO;IACR,CACF,GACD,EAAE;GACP,CAGyC;IAIzC;EAAC;EAAkB;EAAU;EAAkB,CAAC,EAGnD,QAAgB;AACT,QAaL,QADgB,EAVI,CAClB;GACE,IAAI;GACJ,OAAO;GACP,MAAM;GACN,OAAO;GACP,SAAS;GACV,CACF,CAE+C;IAE/C,CAAC,EAAoB,CAAC,EAGL,QACb,IAEH,EAAS,aAAa,KACtB,EAAS,SAAS,WAAW,IAAqB,IAAI,GAHxB,IAK/B,CAAC,GAAoB,EAAS,SAAS,CAAC,GAQzC,kBAAC,GAAD;EACE,UACE,kBAAC,OAAD;GAAK,WAAU;aAAsC;GAE/C,CAAA;YAGR,kBAAC,GAAD;GACE,aAAa;GACb,SAAQ;GACR,gBAAgB;aAEhB,kBAAC,GAAD;IAAc,GAAI;cAChB,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;KACE,UAAU;KACS;KACO;KAC1B,CAAA,EACc,CAAA;IACL,CAAA;GACK,CAAA;EACR,CAAA,GA1BT"}

package/dist/auth/AuthRoutes.js

@@ -6,7 +6,7 @@ import { SSORelayCallbackPage as i } from "./pages/SSORelayCallbackPage.js";
 import { SSODepositPage as a } from "./pages/SSODepositPage.js";
 import { SSOClearPage as o } from "./pages/SSOClearPage.js";
 import { Suspense as s, lazy as c, useEffect as l, useState as u } from "react";
-import { Navigate as d, Route as f, Routes as p } from "react-router-dom";
+import { Navigate as d, Route as f, Routes as p } from "react-router";
 import { Fragment as m, jsx as h, jsxs as g } from "react/jsx-runtime";
 import { FeatureGate as _, useFeatureFlagDetails as v } from "@burdenoff/fe-libs/shared/feature-flags";
 //#region src/auth/AuthRoutes.tsx

package/dist/auth/AuthRoutes.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthRoutes.js","names":[],"sources":["../../src/auth/AuthRoutes.tsx"],"sourcesContent":["import { lazy, Suspense, useEffect, useState } from \"react\";\nimport {\n  useFeatureFlagDetails,\n  FeatureGate,\n} from \"@burdenoff/fe-libs/shared/feature-flags\";\nimport { Navigate, Route, Routes } from \"react-router-dom\";\nimport { useAuthStore } from \"./store/authStore\";\n\n// Eager imports - these are the most commonly accessed routes\nimport { LoginPage } from \"./pages/LoginPage\";\nimport { SessionBridgePage } from \"./pages/SessionBridgePage\";\nimport { SSORelayPage } from \"./pages/SSORelayPage\";\nimport { SSORelayCallbackPage } from \"./pages/SSORelayCallbackPage\";\nimport { SSODepositPage } from \"./pages/SSODepositPage\";\nimport { SSOClearPage } from \"./pages/SSOClearPage\";\n\n// Lazy-loaded pages - loaded on demand when their routes are accessed\nconst RegisterPage = lazy(() =>\n  import(\"./pages/RegisterPage\").then((m) => ({ default: m.RegisterPage })),\n);\nconst PasswordResetPage = lazy(() =>\n  import(\"./pages/PasswordResetPage\").then((m) => ({\n    default: m.PasswordResetPage,\n  })),\n);\nconst EmailVerifyPage = lazy(() =>\n  import(\"./pages/EmailVerifyPage\").then((m) => ({\n    default: m.EmailVerifyPage,\n  })),\n);\nconst MfaVerifyPage = lazy(() =>\n  import(\"./pages/MfaVerifyPage\").then((m) => ({ default: m.MfaVerifyPage })),\n);\nconst MagicLinkPage = lazy(() =>\n  import(\"./pages/MagicLinkPage\").then((m) => ({ default: m.MagicLinkPage })),\n);\nconst ReactivatePage = lazy(() =>\n  import(\"./pages/ReactivatePage\").then((m) => ({ default: m.ReactivatePage })),\n);\nconst SecurityPage = lazy(() =>\n  import(\"./pages/SecurityPage\").then((m) => ({ default: m.SecurityPage })),\n);\nconst SessionsPage = lazy(() =>\n  import(\"./pages/SessionsPage\").then((m) => ({ default: m.SessionsPage })),\n);\nconst MfaSetupPage = lazy(() =>\n  import(\"./pages/MfaSetupPage\").then((m) => ({ default: m.MfaSetupPage })),\n);\nconst AuditLogPage = lazy(() =>\n  import(\"./pages/AuditLogPage\").then((m) => ({ default: m.AuditLogPage })),\n);\nconst SsoConfigPage = lazy(() =>\n  import(\"./pages/SsoConfigPage\").then((m) => ({ default: m.SsoConfigPage })),\n);\nconst SsoLoginPage = lazy(() =>\n  import(\"./pages/SsoLoginPage\").then((m) => ({ default: m.SsoLoginPage })),\n);\nconst SsoCallbackPage = lazy(() =>\n  import(\"./pages/SsoCallbackPage\").then((m) => ({\n    default: m.SsoCallbackPage,\n  })),\n);\nconst OAuthCallbackPage = lazy(() =>\n  import(\"./pages/OAuthCallbackPage\").then((m) => ({\n    default: m.OAuthCallbackPage,\n  })),\n);\nconst UsersPage = lazy(() =>\n  import(\"./pages/UsersPage\").then((m) => ({ default: m.UsersPage })),\n);\nconst UserDetailsPage = lazy(() =>\n  import(\"./pages/UserDetailsPage\").then((m) => ({\n    default: m.UserDetailsPage,\n  })),\n);\nconst UserProfilePage = lazy(() =>\n  import(\"./pages/UserProfilePage\").then((m) => ({\n    default: m.UserProfilePage,\n  })),\n);\n/**\n * Simple loading fallback for lazy-loaded pages\n */\nfunction PageLoader() {\n  return (\n    <div className=\"flex min-h-[400px] items-center justify-center\">\n      <div className=\"size-8 animate-spin rounded-full border-4 border-primary border-t-transparent\" />\n    </div>\n  );\n}\n\nfunction decodeJwtExpiry(token: string): number | null {\n  try {\n    const payload = JSON.parse(\n      atob(token.split(\".\")[1].replace(/-/g, \"+\").replace(/_/g, \"/\")),\n    ) as { exp?: number };\n\n    return typeof payload.exp === \"number\" ? payload.exp * 1000 : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction getStoredSessionSnapshot(): {\n  hasValidSession: boolean;\n  expiresAt: number | null;\n} {\n  try {\n    const activeProfileId = sessionStorage.getItem(\"bf-active-profile\");\n    if (!activeProfileId) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    const tokensRaw = localStorage.getItem(`bf-p-${activeProfileId}-tokens`);\n    if (!tokensRaw) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    const tokens = JSON.parse(tokensRaw) as {\n      accessToken?: string;\n      expiresAt?: number;\n    };\n\n    if (!tokens.accessToken) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    const expiresAt =\n      typeof tokens.expiresAt === \"number\"\n        ? tokens.expiresAt\n        : decodeJwtExpiry(tokens.accessToken);\n\n    if (!expiresAt) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    return {\n      hasValidSession: expiresAt > Date.now(),\n      expiresAt,\n    };\n  } catch {\n    return { hasValidSession: false, expiresAt: null };\n  }\n}\n\n/**\n * Protected route wrapper\n */\nfunction ProtectedRoute({ children }: { children: React.ReactNode }) {\n  const isAuthenticated = useAuthStore((state) => state.isAuthenticated);\n  const clearAuth = useAuthStore((state) => state.clearAuth);\n  const [sessionCheckVersion, setSessionCheckVersion] = useState(0);\n  const sessionSnapshot = getStoredSessionSnapshot();\n\n  useEffect(() => {\n    const handleSessionUpdate = () => {\n      setSessionCheckVersion((value) => value + 1);\n    };\n\n    window.addEventListener(\"bf-profile-storage-change\", handleSessionUpdate);\n    window.addEventListener(\"storage\", handleSessionUpdate);\n\n    return () => {\n      window.removeEventListener(\n        \"bf-profile-storage-change\",\n        handleSessionUpdate,\n      );\n      window.removeEventListener(\"storage\", handleSessionUpdate);\n    };\n  }, []);\n\n  useEffect(() => {\n    if (!sessionSnapshot.expiresAt) return;\n\n    const timeoutMs = Math.max(sessionSnapshot.expiresAt - Date.now(), 0) + 50;\n    const timer = window.setTimeout(() => {\n      setSessionCheckVersion((value) => value + 1);\n    }, timeoutMs);\n\n    return () => window.clearTimeout(timer);\n  }, [sessionSnapshot.expiresAt, sessionCheckVersion]);\n\n  useEffect(() => {\n    if (isAuthenticated && !sessionSnapshot.hasValidSession) {\n      clearAuth();\n    }\n  }, [clearAuth, isAuthenticated, sessionSnapshot.hasValidSession]);\n\n  if (!sessionSnapshot.hasValidSession) {\n    return <Navigate to=\"/auth/login\" replace />;\n  }\n\n  return <>{children}</>;\n}\n\n/**\n * Internal router for the Auth microfrontend.\n * This component handles routing within the microfrontend using React Router v7.\n *\n * When used within a parent route (e.g., <Route path=\"/auth/*\">), all paths are relative:\n * - login → Login page (accessible at /auth/login)\n * - register → Registration page (accessible at /auth/register)\n * - reset-password → Password reset page (accessible at /auth/reset-password)\n * - verify-email → Email verification page (accessible at /auth/verify-email)\n * - mfa-verify → MFA verification page (accessible at /auth/mfa-verify)\n * - magic-link → Magic link authentication page (accessible at /auth/magic-link)\n * - sso/login → SSO login page (accessible at /auth/sso/login)\n * - sso/callback → SSO callback handler (accessible at /auth/sso/callback)\n * - oauth/callback → OAuth callback handler (accessible at /auth/oauth/callback)\n * - security → Security settings (protected, accessible at /auth/security)\n * - sessions → Active sessions (protected, accessible at /auth/sessions)\n * - mfa → MFA setup (protected, accessible at /auth/mfa)\n * - users → Users management (protected, admin only, accessible at /auth/users)\n * - profile → User profile page (protected, accessible at /auth/profile)\n * - audit-log → Security audit log (protected, accessible at /auth/audit-log)\n * - sso → SSO configuration (protected, admin only, accessible at /auth/sso)\n */\nexport function AuthRoutes({\n  basePath: _basePath = \"\",\n  // Admin routes (`/auth/users`, `/auth/users/:id`, `/auth/sso`,\n  // `/auth/audit-log`) are opt-in: only the admin app shell should pass\n  // `enableAdminRoutes={true}`. User-facing product hosts (vibecontrols,\n  // workspaces, botlit, healthybowl, etc.) intentionally do not expose\n  // these surfaces — the gateway's RBAC directives still gate the\n  // underlying queries/mutations, but hiding the routes prevents\n  // accidental UI discoverability and reduces the attack surface for\n  // misconfigured permissions.\n  enableAdminRoutes = false,\n  bypassEnterprisePlanGate = false,\n}: {\n  basePath?: string;\n  enableAdminRoutes?: boolean;\n  bypassEnterprisePlanGate?: boolean;\n}) {\n  // Note: basePath is kept for backwards compatibility but not used in route paths\n  // since React Router v7 uses relative paths when nested inside a parent <Route>\n  const auditLogFlag = useFeatureFlagDetails(\"auth.audit-log\");\n  const showAuditLog = auditLogFlag?.value === true;\n  return (\n    <Routes>\n      {/* Public routes (no auth required) */}\n      {/* LoginPage is eager-loaded as it's the most common entry point */}\n      <Route path=\"login\" element={<LoginPage />} />\n      <Route\n        path=\"register\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <RegisterPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"reset-password\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <PasswordResetPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"verify-email\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <EmailVerifyPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"mfa-verify\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <MfaVerifyPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"magic-link\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <MagicLinkPage />\n          </Suspense>\n        }\n      />\n\n      {/* SSO routes (public) */}\n      <Route\n        path=\"sso/login\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <SsoLoginPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"sso/callback\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <SsoCallbackPage />\n          </Suspense>\n        }\n      />\n\n      {/* OAuth callback route (public) */}\n      <Route\n        path=\"oauth/callback\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <OAuthCallbackPage />\n          </Suspense>\n        }\n      />\n\n      {/* Account reactivation (public) */}\n      <Route\n        path=\"reactivate\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <ReactivatePage />\n          </Suspense>\n        }\n      />\n\n      {/* Session bridge (public - embedded as hidden iframe by other app shells) */}\n      <Route path=\"session-bridge\" element={<SessionBridgePage />} />\n\n      {/* Cross-domain SSO relay (reads local tokens, redirects with them to target) */}\n      <Route path=\"sso-relay\" element={<SSORelayPage />} />\n\n      {/* Cross-domain SSO callback (receives tokens from relay, stores locally) */}\n      <Route path=\"sso-callback\" element={<SSORelayCallbackPage />} />\n\n      {/* Cross-domain SSO deposit (bridge host receives tokens on top-level\n          redirect right after login on a product origin, writes first-party\n          localStorage on the bridge origin so other products can discover\n          the session). */}\n      <Route path=\"sso-deposit\" element={<SSODepositPage />} />\n\n      {/* Cross-domain SLO clear (bridge host clears its central session on\n          top-level redirect from a product origin's logout). */}\n      <Route path=\"sso-clear\" element={<SSOClearPage />} />\n\n      {/* Protected routes (auth required) */}\n      <Route\n        path=\"security\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.security\" defaultValue={true}>\n              <Suspense fallback={<PageLoader />}>\n                <SecurityPage enableAdminRoutes={enableAdminRoutes} />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      <Route\n        path=\"sessions\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.sessions\" defaultValue={true}>\n              <Suspense fallback={<PageLoader />}>\n                <SessionsPage />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      <Route\n        path=\"mfa\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.mfa\" defaultValue={true}>\n              <Suspense fallback={<PageLoader />}>\n                <MfaSetupPage />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      {enableAdminRoutes && showAuditLog && (\n        <Route\n          path=\"audit-log\"\n          element={\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.audit-log\" defaultValue={false}>\n                <Suspense fallback={<PageLoader />}>\n                  <AuditLogPage />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          }\n        />\n      )}\n      {!enableAdminRoutes && (\n        <Route\n          path=\"audit-log\"\n          element={<Navigate to=\"/auth/login\" replace />}\n        />\n      )}\n      <Route\n        path=\"sso\"\n        element={\n          enableAdminRoutes ? (\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.sso\" defaultValue={true}>\n                <Suspense fallback={<PageLoader />}>\n                  <SsoConfigPage\n                    bypassEnterprisePlanGate={bypassEnterprisePlanGate}\n                  />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          ) : (\n            <Navigate to=\"/auth/login\" replace />\n          )\n        }\n      />\n      <Route\n        path=\"users\"\n        element={\n          enableAdminRoutes ? (\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.users\" defaultValue={true}>\n                <Suspense fallback={<PageLoader />}>\n                  <UsersPage />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          ) : (\n            <Navigate to=\"/auth/login\" replace />\n          )\n        }\n      />\n      <Route\n        path=\"users/:id\"\n        element={\n          enableAdminRoutes ? (\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.users\" defaultValue={true}>\n                <Suspense fallback={<PageLoader />}>\n                  <UserDetailsPage />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          ) : (\n            <Navigate to=\"/auth/login\" replace />\n          )\n        }\n      />\n      <Route\n        path=\"profile\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.profile\" defaultValue={true}>\n              <Suspense fallback={<PageLoader />}>\n                <UserProfilePage />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n\n      {/* Default redirect - when visiting /auth or /auth/ with no subpath */}\n      <Route index element={<Navigate to=\"login\" replace />} />\n    </Routes>\n  );\n}\n"],"mappings":";;;;;;;;;;;;AAiBA,IAAM,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAoB,QACxB,OAAO,gCAA6B,MAAM,OAAO,EAC/C,SAAS,EAAE,mBACZ,EAAE,CACJ,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ,EACK,IAAgB,QACpB,OAAO,4BAAyB,MAAM,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAC5E,EACK,IAAgB,QACpB,OAAO,4BAAyB,MAAM,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAC5E,EACK,IAAiB,QACrB,OAAO,6BAA0B,MAAM,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAC9E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAgB,QACpB,OAAO,4BAAyB,MAAM,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAC5E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ,EACK,IAAoB,QACxB,OAAO,gCAA6B,MAAM,OAAO,EAC/C,SAAS,EAAE,mBACZ,EAAE,CACJ,EACK,IAAY,QAChB,OAAO,wBAAqB,MAAM,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CACpE,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ;AAID,SAAS,IAAa;AACpB,QACE,kBAAC,OAAD;EAAK,WAAU;YACb,kBAAC,OAAD,EAAK,WAAU,iFAAkF,CAAA;EAC7F,CAAA;;AAIV,SAAS,EAAgB,GAA8B;AACrD,KAAI;EACF,IAAM,IAAU,KAAK,MACnB,KAAK,EAAM,MAAM,IAAI,CAAC,GAAG,QAAQ,MAAM,IAAI,CAAC,QAAQ,MAAM,IAAI,CAAC,CAChE;AAED,SAAO,OAAO,EAAQ,OAAQ,WAAW,EAAQ,MAAM,MAAO;SACxD;AACN,SAAO;;;AAIX,SAAS,IAGP;AACA,KAAI;EACF,IAAM,IAAkB,eAAe,QAAQ,oBAAoB;AACnE,MAAI,CAAC,EACH,QAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;EAGpD,IAAM,IAAY,aAAa,QAAQ,QAAQ,EAAgB,SAAS;AACxE,MAAI,CAAC,EACH,QAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;EAGpD,IAAM,IAAS,KAAK,MAAM,EAAU;AAKpC,MAAI,CAAC,EAAO,YACV,QAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;EAGpD,IAAM,IACJ,OAAO,EAAO,aAAc,WACxB,EAAO,YACP,EAAgB,EAAO,YAAY;AAMzC,SAJK,IAIE;GACL,iBAAiB,IAAY,KAAK,KAAK;GACvC;GACD,GANQ;GAAE,iBAAiB;GAAO,WAAW;GAAM;SAO9C;AACN,SAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;;;AAOtD,SAAS,EAAe,EAAE,eAA2C;CACnE,IAAM,IAAkB,GAAc,MAAU,EAAM,gBAAgB,EAChE,IAAY,GAAc,MAAU,EAAM,UAAU,EACpD,CAAC,GAAqB,KAA0B,EAAS,EAAE,EAC3D,IAAkB,GAA0B;AAwClD,QAtCA,QAAgB;EACd,IAAM,UAA4B;AAChC,MAAwB,MAAU,IAAQ,EAAE;;AAM9C,SAHA,OAAO,iBAAiB,6BAA6B,EAAoB,EACzE,OAAO,iBAAiB,WAAW,EAAoB,QAE1C;AAKX,GAJA,OAAO,oBACL,6BACA,EACD,EACD,OAAO,oBAAoB,WAAW,EAAoB;;IAE3D,EAAE,CAAC,EAEN,QAAgB;AACd,MAAI,CAAC,EAAgB,UAAW;EAEhC,IAAM,IAAY,KAAK,IAAI,EAAgB,YAAY,KAAK,KAAK,EAAE,EAAE,GAAG,IAClE,IAAQ,OAAO,iBAAiB;AACpC,MAAwB,MAAU,IAAQ,EAAE;KAC3C,EAAU;AAEb,eAAa,OAAO,aAAa,EAAM;IACtC,CAAC,EAAgB,WAAW,EAAoB,CAAC,EAEpD,QAAgB;AACd,EAAI,KAAmB,CAAC,EAAgB,mBACtC,GAAW;IAEZ;EAAC;EAAW;EAAiB,EAAgB;EAAgB,CAAC,EAE5D,EAAgB,kBAId,kBAAA,GAAA,EAAG,aAAY,CAAA,GAHb,kBAAC,GAAD;EAAU,IAAG;EAAc,SAAA;EAAU,CAAA;;AA4BhD,SAAgB,EAAW,EACzB,UAAU,IAAY,IAStB,uBAAoB,IACpB,8BAA2B,MAK1B;CAID,IAAM,IADe,EAAsB,iBAAiB,EACzB,UAAU;AAC7C,QACE,kBAAC,GAAD,EAAA,UAAA;EAGE,kBAAC,GAAD;GAAO,MAAK;GAAQ,SAAS,kBAAC,GAAD,EAAa,CAAA;GAAI,CAAA;EAC9C,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAgB,CAAA;IACP,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAqB,CAAA;IACZ,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAmB,CAAA;IACV,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAiB,CAAA;IACR,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAiB,CAAA;IACR,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAgB,CAAA;IACP,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAmB,CAAA;IACV,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAqB,CAAA;IACZ,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAkB,CAAA;IACT,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GAAO,MAAK;GAAiB,SAAS,kBAAC,GAAD,EAAqB,CAAA;GAAI,CAAA;EAG/D,kBAAC,GAAD;GAAO,MAAK;GAAY,SAAS,kBAAC,GAAD,EAAgB,CAAA;GAAI,CAAA;EAGrD,kBAAC,GAAD;GAAO,MAAK;GAAe,SAAS,kBAAC,GAAD,EAAwB,CAAA;GAAI,CAAA;EAMhE,kBAAC,GAAD;GAAO,MAAK;GAAc,SAAS,kBAAC,GAAD,EAAkB,CAAA;GAAI,CAAA;EAIzD,kBAAC,GAAD;GAAO,MAAK;GAAY,SAAS,kBAAC,GAAD,EAAgB,CAAA;GAAI,CAAA;EAGrD,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAgB,cAAc;cAC9C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAiC,sBAAqB,CAAA;KAC7C,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAgB,cAAc;cAC9C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAgB,CAAA;KACP,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAW,cAAc;cACzC,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAgB,CAAA;KACP,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EACD,KAAqB,KACpB,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAiB,cAAc;cAC/C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAgB,CAAA;KACP,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EAEH,CAAC,KACA,kBAAC,GAAD;GACE,MAAK;GACL,SAAS,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAC9C,CAAA;EAEJ,kBAAC,GAAD;GACE,MAAK;GACL,SACE,IACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAW,cAAc;cACzC,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAC4B,6BAC1B,CAAA;KACO,CAAA;IACC,CAAA,EACC,CAAA,GAEjB,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAGzC,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,IACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAa,cAAc;cAC3C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAa,CAAA;KACJ,CAAA;IACC,CAAA,EACC,CAAA,GAEjB,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAGzC,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,IACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAa,cAAc;cAC3C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAmB,CAAA;KACV,CAAA;IACC,CAAA,EACC,CAAA,GAEjB,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAGzC,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAe,cAAc;cAC7C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAmB,CAAA;KACV,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EAGF,kBAAC,GAAD;GAAO,OAAA;GAAM,SAAS,kBAAC,GAAD;IAAU,IAAG;IAAQ,SAAA;IAAU,CAAA;GAAI,CAAA;EAClD,EAAA,CAAA"}
+{"version":3,"file":"AuthRoutes.js","names":[],"sources":["../../src/auth/AuthRoutes.tsx"],"sourcesContent":["import { lazy, Suspense, useEffect, useState } from \"react\";\nimport {\n  useFeatureFlagDetails,\n  FeatureGate,\n} from \"@burdenoff/fe-libs/shared/feature-flags\";\nimport { Navigate, Route, Routes } from \"react-router\";\nimport { useAuthStore } from \"./store/authStore\";\n\n// Eager imports - these are the most commonly accessed routes\nimport { LoginPage } from \"./pages/LoginPage\";\nimport { SessionBridgePage } from \"./pages/SessionBridgePage\";\nimport { SSORelayPage } from \"./pages/SSORelayPage\";\nimport { SSORelayCallbackPage } from \"./pages/SSORelayCallbackPage\";\nimport { SSODepositPage } from \"./pages/SSODepositPage\";\nimport { SSOClearPage } from \"./pages/SSOClearPage\";\n\n// Lazy-loaded pages - loaded on demand when their routes are accessed\nconst RegisterPage = lazy(() =>\n  import(\"./pages/RegisterPage\").then((m) => ({ default: m.RegisterPage })),\n);\nconst PasswordResetPage = lazy(() =>\n  import(\"./pages/PasswordResetPage\").then((m) => ({\n    default: m.PasswordResetPage,\n  })),\n);\nconst EmailVerifyPage = lazy(() =>\n  import(\"./pages/EmailVerifyPage\").then((m) => ({\n    default: m.EmailVerifyPage,\n  })),\n);\nconst MfaVerifyPage = lazy(() =>\n  import(\"./pages/MfaVerifyPage\").then((m) => ({ default: m.MfaVerifyPage })),\n);\nconst MagicLinkPage = lazy(() =>\n  import(\"./pages/MagicLinkPage\").then((m) => ({ default: m.MagicLinkPage })),\n);\nconst ReactivatePage = lazy(() =>\n  import(\"./pages/ReactivatePage\").then((m) => ({ default: m.ReactivatePage })),\n);\nconst SecurityPage = lazy(() =>\n  import(\"./pages/SecurityPage\").then((m) => ({ default: m.SecurityPage })),\n);\nconst SessionsPage = lazy(() =>\n  import(\"./pages/SessionsPage\").then((m) => ({ default: m.SessionsPage })),\n);\nconst MfaSetupPage = lazy(() =>\n  import(\"./pages/MfaSetupPage\").then((m) => ({ default: m.MfaSetupPage })),\n);\nconst AuditLogPage = lazy(() =>\n  import(\"./pages/AuditLogPage\").then((m) => ({ default: m.AuditLogPage })),\n);\nconst SsoConfigPage = lazy(() =>\n  import(\"./pages/SsoConfigPage\").then((m) => ({ default: m.SsoConfigPage })),\n);\nconst SsoLoginPage = lazy(() =>\n  import(\"./pages/SsoLoginPage\").then((m) => ({ default: m.SsoLoginPage })),\n);\nconst SsoCallbackPage = lazy(() =>\n  import(\"./pages/SsoCallbackPage\").then((m) => ({\n    default: m.SsoCallbackPage,\n  })),\n);\nconst OAuthCallbackPage = lazy(() =>\n  import(\"./pages/OAuthCallbackPage\").then((m) => ({\n    default: m.OAuthCallbackPage,\n  })),\n);\nconst UsersPage = lazy(() =>\n  import(\"./pages/UsersPage\").then((m) => ({ default: m.UsersPage })),\n);\nconst UserDetailsPage = lazy(() =>\n  import(\"./pages/UserDetailsPage\").then((m) => ({\n    default: m.UserDetailsPage,\n  })),\n);\nconst UserProfilePage = lazy(() =>\n  import(\"./pages/UserProfilePage\").then((m) => ({\n    default: m.UserProfilePage,\n  })),\n);\n/**\n * Simple loading fallback for lazy-loaded pages\n */\nfunction PageLoader() {\n  return (\n    <div className=\"flex min-h-[400px] items-center justify-center\">\n      <div className=\"size-8 animate-spin rounded-full border-4 border-primary border-t-transparent\" />\n    </div>\n  );\n}\n\nfunction decodeJwtExpiry(token: string): number | null {\n  try {\n    const payload = JSON.parse(\n      atob(token.split(\".\")[1].replace(/-/g, \"+\").replace(/_/g, \"/\")),\n    ) as { exp?: number };\n\n    return typeof payload.exp === \"number\" ? payload.exp * 1000 : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction getStoredSessionSnapshot(): {\n  hasValidSession: boolean;\n  expiresAt: number | null;\n} {\n  try {\n    const activeProfileId = sessionStorage.getItem(\"bf-active-profile\");\n    if (!activeProfileId) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    const tokensRaw = localStorage.getItem(`bf-p-${activeProfileId}-tokens`);\n    if (!tokensRaw) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    const tokens = JSON.parse(tokensRaw) as {\n      accessToken?: string;\n      expiresAt?: number;\n    };\n\n    if (!tokens.accessToken) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    const expiresAt =\n      typeof tokens.expiresAt === \"number\"\n        ? tokens.expiresAt\n        : decodeJwtExpiry(tokens.accessToken);\n\n    if (!expiresAt) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    return {\n      hasValidSession: expiresAt > Date.now(),\n      expiresAt,\n    };\n  } catch {\n    return { hasValidSession: false, expiresAt: null };\n  }\n}\n\n/**\n * Protected route wrapper\n */\nfunction ProtectedRoute({ children }: { children: React.ReactNode }) {\n  const isAuthenticated = useAuthStore((state) => state.isAuthenticated);\n  const clearAuth = useAuthStore((state) => state.clearAuth);\n  const [sessionCheckVersion, setSessionCheckVersion] = useState(0);\n  const sessionSnapshot = getStoredSessionSnapshot();\n\n  useEffect(() => {\n    const handleSessionUpdate = () => {\n      setSessionCheckVersion((value) => value + 1);\n    };\n\n    window.addEventListener(\"bf-profile-storage-change\", handleSessionUpdate);\n    window.addEventListener(\"storage\", handleSessionUpdate);\n\n    return () => {\n      window.removeEventListener(\n        \"bf-profile-storage-change\",\n        handleSessionUpdate,\n      );\n      window.removeEventListener(\"storage\", handleSessionUpdate);\n    };\n  }, []);\n\n  useEffect(() => {\n    if (!sessionSnapshot.expiresAt) return;\n\n    const timeoutMs = Math.max(sessionSnapshot.expiresAt - Date.now(), 0) + 50;\n    const timer = window.setTimeout(() => {\n      setSessionCheckVersion((value) => value + 1);\n    }, timeoutMs);\n\n    return () => window.clearTimeout(timer);\n  }, [sessionSnapshot.expiresAt, sessionCheckVersion]);\n\n  useEffect(() => {\n    if (isAuthenticated && !sessionSnapshot.hasValidSession) {\n      clearAuth();\n    }\n  }, [clearAuth, isAuthenticated, sessionSnapshot.hasValidSession]);\n\n  if (!sessionSnapshot.hasValidSession) {\n    return <Navigate to=\"/auth/login\" replace />;\n  }\n\n  return <>{children}</>;\n}\n\n/**\n * Internal router for the Auth microfrontend.\n * This component handles routing within the microfrontend using React Router v7.\n *\n * When used within a parent route (e.g., <Route path=\"/auth/*\">), all paths are relative:\n * - login → Login page (accessible at /auth/login)\n * - register → Registration page (accessible at /auth/register)\n * - reset-password → Password reset page (accessible at /auth/reset-password)\n * - verify-email → Email verification page (accessible at /auth/verify-email)\n * - mfa-verify → MFA verification page (accessible at /auth/mfa-verify)\n * - magic-link → Magic link authentication page (accessible at /auth/magic-link)\n * - sso/login → SSO login page (accessible at /auth/sso/login)\n * - sso/callback → SSO callback handler (accessible at /auth/sso/callback)\n * - oauth/callback → OAuth callback handler (accessible at /auth/oauth/callback)\n * - security → Security settings (protected, accessible at /auth/security)\n * - sessions → Active sessions (protected, accessible at /auth/sessions)\n * - mfa → MFA setup (protected, accessible at /auth/mfa)\n * - users → Users management (protected, admin only, accessible at /auth/users)\n * - profile → User profile page (protected, accessible at /auth/profile)\n * - audit-log → Security audit log (protected, accessible at /auth/audit-log)\n * - sso → SSO configuration (protected, admin only, accessible at /auth/sso)\n */\nexport function AuthRoutes({\n  basePath: _basePath = \"\",\n  // Admin routes (`/auth/users`, `/auth/users/:id`, `/auth/sso`,\n  // `/auth/audit-log`) are opt-in: only the admin app shell should pass\n  // `enableAdminRoutes={true}`. User-facing product hosts (vibecontrols,\n  // workspaces, botlit, healthybowl, etc.) intentionally do not expose\n  // these surfaces — the gateway's RBAC directives still gate the\n  // underlying queries/mutations, but hiding the routes prevents\n  // accidental UI discoverability and reduces the attack surface for\n  // misconfigured permissions.\n  enableAdminRoutes = false,\n  bypassEnterprisePlanGate = false,\n}: {\n  basePath?: string;\n  enableAdminRoutes?: boolean;\n  bypassEnterprisePlanGate?: boolean;\n}) {\n  // Note: basePath is kept for backwards compatibility but not used in route paths\n  // since React Router v7 uses relative paths when nested inside a parent <Route>\n  const auditLogFlag = useFeatureFlagDetails(\"auth.audit-log\");\n  const showAuditLog = auditLogFlag?.value === true;\n  return (\n    <Routes>\n      {/* Public routes (no auth required) */}\n      {/* LoginPage is eager-loaded as it's the most common entry point */}\n      <Route path=\"login\" element={<LoginPage />} />\n      <Route\n        path=\"register\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <RegisterPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"reset-password\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <PasswordResetPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"verify-email\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <EmailVerifyPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"mfa-verify\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <MfaVerifyPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"magic-link\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <MagicLinkPage />\n          </Suspense>\n        }\n      />\n\n      {/* SSO routes (public) */}\n      <Route\n        path=\"sso/login\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <SsoLoginPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"sso/callback\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <SsoCallbackPage />\n          </Suspense>\n        }\n      />\n\n      {/* OAuth callback route (public) */}\n      <Route\n        path=\"oauth/callback\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <OAuthCallbackPage />\n          </Suspense>\n        }\n      />\n\n      {/* Account reactivation (public) */}\n      <Route\n        path=\"reactivate\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <ReactivatePage />\n          </Suspense>\n        }\n      />\n\n      {/* Session bridge (public - embedded as hidden iframe by other app shells) */}\n      <Route path=\"session-bridge\" element={<SessionBridgePage />} />\n\n      {/* Cross-domain SSO relay (reads local tokens, redirects with them to target) */}\n      <Route path=\"sso-relay\" element={<SSORelayPage />} />\n\n      {/* Cross-domain SSO callback (receives tokens from relay, stores locally) */}\n      <Route path=\"sso-callback\" element={<SSORelayCallbackPage />} />\n\n      {/* Cross-domain SSO deposit (bridge host receives tokens on top-level\n          redirect right after login on a product origin, writes first-party\n          localStorage on the bridge origin so other products can discover\n          the session). */}\n      <Route path=\"sso-deposit\" element={<SSODepositPage />} />\n\n      {/* Cross-domain SLO clear (bridge host clears its central session on\n          top-level redirect from a product origin's logout). */}\n      <Route path=\"sso-clear\" element={<SSOClearPage />} />\n\n      {/* Protected routes (auth required) */}\n      <Route\n        path=\"security\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.security\" defaultValue={true}>\n              <Suspense fallback={<PageLoader />}>\n                <SecurityPage enableAdminRoutes={enableAdminRoutes} />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      <Route\n        path=\"sessions\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.sessions\" defaultValue={true}>\n              <Suspense fallback={<PageLoader />}>\n                <SessionsPage />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      <Route\n        path=\"mfa\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.mfa\" defaultValue={true}>\n              <Suspense fallback={<PageLoader />}>\n                <MfaSetupPage />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      {enableAdminRoutes && showAuditLog && (\n        <Route\n          path=\"audit-log\"\n          element={\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.audit-log\" defaultValue={false}>\n                <Suspense fallback={<PageLoader />}>\n                  <AuditLogPage />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          }\n        />\n      )}\n      {!enableAdminRoutes && (\n        <Route\n          path=\"audit-log\"\n          element={<Navigate to=\"/auth/login\" replace />}\n        />\n      )}\n      <Route\n        path=\"sso\"\n        element={\n          enableAdminRoutes ? (\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.sso\" defaultValue={true}>\n                <Suspense fallback={<PageLoader />}>\n                  <SsoConfigPage\n                    bypassEnterprisePlanGate={bypassEnterprisePlanGate}\n                  />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          ) : (\n            <Navigate to=\"/auth/login\" replace />\n          )\n        }\n      />\n      <Route\n        path=\"users\"\n        element={\n          enableAdminRoutes ? (\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.users\" defaultValue={true}>\n                <Suspense fallback={<PageLoader />}>\n                  <UsersPage />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          ) : (\n            <Navigate to=\"/auth/login\" replace />\n          )\n        }\n      />\n      <Route\n        path=\"users/:id\"\n        element={\n          enableAdminRoutes ? (\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.users\" defaultValue={true}>\n                <Suspense fallback={<PageLoader />}>\n                  <UserDetailsPage />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          ) : (\n            <Navigate to=\"/auth/login\" replace />\n          )\n        }\n      />\n      <Route\n        path=\"profile\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.profile\" defaultValue={true}>\n              <Suspense fallback={<PageLoader />}>\n                <UserProfilePage />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n\n      {/* Default redirect - when visiting /auth or /auth/ with no subpath */}\n      <Route index element={<Navigate to=\"login\" replace />} />\n    </Routes>\n  );\n}\n"],"mappings":";;;;;;;;;;;;AAiBA,IAAM,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAoB,QACxB,OAAO,gCAA6B,MAAM,OAAO,EAC/C,SAAS,EAAE,mBACZ,EAAE,CACJ,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ,EACK,IAAgB,QACpB,OAAO,4BAAyB,MAAM,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAC5E,EACK,IAAgB,QACpB,OAAO,4BAAyB,MAAM,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAC5E,EACK,IAAiB,QACrB,OAAO,6BAA0B,MAAM,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAC9E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAgB,QACpB,OAAO,4BAAyB,MAAM,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAC5E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ,EACK,IAAoB,QACxB,OAAO,gCAA6B,MAAM,OAAO,EAC/C,SAAS,EAAE,mBACZ,EAAE,CACJ,EACK,IAAY,QAChB,OAAO,wBAAqB,MAAM,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CACpE,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ;AAID,SAAS,IAAa;AACpB,QACE,kBAAC,OAAD;EAAK,WAAU;YACb,kBAAC,OAAD,EAAK,WAAU,iFAAkF,CAAA;EAC7F,CAAA;;AAIV,SAAS,EAAgB,GAA8B;AACrD,KAAI;EACF,IAAM,IAAU,KAAK,MACnB,KAAK,EAAM,MAAM,IAAI,CAAC,GAAG,QAAQ,MAAM,IAAI,CAAC,QAAQ,MAAM,IAAI,CAAC,CAChE;AAED,SAAO,OAAO,EAAQ,OAAQ,WAAW,EAAQ,MAAM,MAAO;SACxD;AACN,SAAO;;;AAIX,SAAS,IAGP;AACA,KAAI;EACF,IAAM,IAAkB,eAAe,QAAQ,oBAAoB;AACnE,MAAI,CAAC,EACH,QAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;EAGpD,IAAM,IAAY,aAAa,QAAQ,QAAQ,EAAgB,SAAS;AACxE,MAAI,CAAC,EACH,QAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;EAGpD,IAAM,IAAS,KAAK,MAAM,EAAU;AAKpC,MAAI,CAAC,EAAO,YACV,QAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;EAGpD,IAAM,IACJ,OAAO,EAAO,aAAc,WACxB,EAAO,YACP,EAAgB,EAAO,YAAY;AAMzC,SAJK,IAIE;GACL,iBAAiB,IAAY,KAAK,KAAK;GACvC;GACD,GANQ;GAAE,iBAAiB;GAAO,WAAW;GAAM;SAO9C;AACN,SAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;;;AAOtD,SAAS,EAAe,EAAE,eAA2C;CACnE,IAAM,IAAkB,GAAc,MAAU,EAAM,gBAAgB,EAChE,IAAY,GAAc,MAAU,EAAM,UAAU,EACpD,CAAC,GAAqB,KAA0B,EAAS,EAAE,EAC3D,IAAkB,GAA0B;AAwClD,QAtCA,QAAgB;EACd,IAAM,UAA4B;AAChC,MAAwB,MAAU,IAAQ,EAAE;;AAM9C,SAHA,OAAO,iBAAiB,6BAA6B,EAAoB,EACzE,OAAO,iBAAiB,WAAW,EAAoB,QAE1C;AAKX,GAJA,OAAO,oBACL,6BACA,EACD,EACD,OAAO,oBAAoB,WAAW,EAAoB;;IAE3D,EAAE,CAAC,EAEN,QAAgB;AACd,MAAI,CAAC,EAAgB,UAAW;EAEhC,IAAM,IAAY,KAAK,IAAI,EAAgB,YAAY,KAAK,KAAK,EAAE,EAAE,GAAG,IAClE,IAAQ,OAAO,iBAAiB;AACpC,MAAwB,MAAU,IAAQ,EAAE;KAC3C,EAAU;AAEb,eAAa,OAAO,aAAa,EAAM;IACtC,CAAC,EAAgB,WAAW,EAAoB,CAAC,EAEpD,QAAgB;AACd,EAAI,KAAmB,CAAC,EAAgB,mBACtC,GAAW;IAEZ;EAAC;EAAW;EAAiB,EAAgB;EAAgB,CAAC,EAE5D,EAAgB,kBAId,kBAAA,GAAA,EAAG,aAAY,CAAA,GAHb,kBAAC,GAAD;EAAU,IAAG;EAAc,SAAA;EAAU,CAAA;;AA4BhD,SAAgB,EAAW,EACzB,UAAU,IAAY,IAStB,uBAAoB,IACpB,8BAA2B,MAK1B;CAID,IAAM,IADe,EAAsB,iBAAiB,EACzB,UAAU;AAC7C,QACE,kBAAC,GAAD,EAAA,UAAA;EAGE,kBAAC,GAAD;GAAO,MAAK;GAAQ,SAAS,kBAAC,GAAD,EAAa,CAAA;GAAI,CAAA;EAC9C,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAgB,CAAA;IACP,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAqB,CAAA;IACZ,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAmB,CAAA;IACV,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAiB,CAAA;IACR,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAiB,CAAA;IACR,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAgB,CAAA;IACP,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAmB,CAAA;IACV,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAqB,CAAA;IACZ,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAkB,CAAA;IACT,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GAAO,MAAK;GAAiB,SAAS,kBAAC,GAAD,EAAqB,CAAA;GAAI,CAAA;EAG/D,kBAAC,GAAD;GAAO,MAAK;GAAY,SAAS,kBAAC,GAAD,EAAgB,CAAA;GAAI,CAAA;EAGrD,kBAAC,GAAD;GAAO,MAAK;GAAe,SAAS,kBAAC,GAAD,EAAwB,CAAA;GAAI,CAAA;EAMhE,kBAAC,GAAD;GAAO,MAAK;GAAc,SAAS,kBAAC,GAAD,EAAkB,CAAA;GAAI,CAAA;EAIzD,kBAAC,GAAD;GAAO,MAAK;GAAY,SAAS,kBAAC,GAAD,EAAgB,CAAA;GAAI,CAAA;EAGrD,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAgB,cAAc;cAC9C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAiC,sBAAqB,CAAA;KAC7C,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAgB,cAAc;cAC9C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAgB,CAAA;KACP,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAW,cAAc;cACzC,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAgB,CAAA;KACP,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EACD,KAAqB,KACpB,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAiB,cAAc;cAC/C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAgB,CAAA;KACP,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EAEH,CAAC,KACA,kBAAC,GAAD;GACE,MAAK;GACL,SAAS,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAC9C,CAAA;EAEJ,kBAAC,GAAD;GACE,MAAK;GACL,SACE,IACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAW,cAAc;cACzC,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAC4B,6BAC1B,CAAA;KACO,CAAA;IACC,CAAA,EACC,CAAA,GAEjB,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAGzC,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,IACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAa,cAAc;cAC3C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAa,CAAA;KACJ,CAAA;IACC,CAAA,EACC,CAAA,GAEjB,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAGzC,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,IACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAa,cAAc;cAC3C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAmB,CAAA;KACV,CAAA;IACC,CAAA,EACC,CAAA,GAEjB,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAGzC,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAe,cAAc;cAC7C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAmB,CAAA;KACV,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EAGF,kBAAC,GAAD;GAAO,OAAA;GAAM,SAAS,kBAAC,GAAD;IAAU,IAAG;IAAQ,SAAA;IAAU,CAAA;GAAI,CAAA;EAClD,EAAA,CAAA"}

package/dist/auth/components/profile/UserProfileMenu.js

@@ -1,6 +1,6 @@
 import { useAuthStore as e } from "../../store/authStore.js";
 import { useEffect as t, useRef as n, useState as r } from "react";
-import { useNavigate as i } from "react-router-dom";
+import { useNavigate as i } from "react-router";
 import { Building2 as a, ChevronDown as o, LogOut as s, UserPlus as c } from "lucide-react";
 import { useI18n as l } from "@burdenoff/fe-libs/shared/providers/shell";
 import { jsx as u, jsxs as d } from "react/jsx-runtime";

package/dist/auth/components/profile/UserProfileMenu.js.map

@@ -1 +1 @@
-{"version":3,"file":"UserProfileMenu.js","names":[],"sources":["../../../../src/auth/components/profile/UserProfileMenu.tsx"],"sourcesContent":["import { useState, useRef, useEffect } from \"react\";\nimport { useI18n } from \"@burdenoff/fe-libs/shared/providers/shell\";\nimport { LogOut, ChevronDown, Building2, UserPlus } from \"lucide-react\";\nimport { useNavigate } from \"react-router-dom\";\nimport { useAuthStore } from \"../../store/authStore\";\n\nexport interface UserProfileMenuProps {\n  /**\n   * Callback when workspace switcher should be shown\n   */\n  onSwitchWorkspace?: () => void;\n\n  /**\n   * Logout handler (REQUIRED)\n   * Should clear auth state and redirect to login\n   */\n  onLogout: () => void;\n\n  /**\n   * Position of the dropdown menu\n   * @default 'right'\n   */\n  position?: \"left\" | \"right\";\n}\n\n/**\n * User Profile Menu Component\n *\n * Displays user avatar/icon with dropdown menu containing:\n * - User information\n * - Switch Workspace option\n * - Logout button\n *\n * @example\n * ```tsx\n * import { UserProfileMenu } from '@burdenoff/microfe-auth';\n *\n * function AppHeader() {\n *   return (\n *     <div className=\"header\">\n *       <UserProfileMenu\n *         onSwitchWorkspace={() => setShowWorkspaceSwitcher(true)}\n *         position=\"right\"\n *       />\n *     </div>\n *   );\n * }\n * ```\n */\nexport function UserProfileMenu({\n  onSwitchWorkspace,\n  onLogout,\n  position = \"right\",\n}: UserProfileMenuProps) {\n  const { t } = useI18n();\n  const tr = (key: string, fallback: string): string => {\n    const translated = t(key);\n    return translated === key ? fallback : translated;\n  };\n  const [isOpen, setIsOpen] = useState(false);\n  const menuRef = useRef<HTMLDivElement>(null);\n  const navigate = useNavigate();\n\n  const user = useAuthStore((state) => state.user);\n  const currentWorkspaceId = useAuthStore((state) => state.currentWorkspaceId);\n\n  // Close dropdown when clicking outside\n  useEffect(() => {\n    function handleClickOutside(event: MouseEvent) {\n      if (menuRef.current && !menuRef.current.contains(event.target as Node)) {\n        setIsOpen(false);\n      }\n    }\n\n    if (isOpen) {\n      document.addEventListener(\"mousedown\", handleClickOutside);\n      return () =>\n        document.removeEventListener(\"mousedown\", handleClickOutside);\n    }\n  }, [isOpen]);\n\n  const handleLogout = () => {\n    setIsOpen(false);\n    onLogout();\n  };\n\n  const handleSwitchWorkspace = () => {\n    setIsOpen(false);\n    onSwitchWorkspace?.();\n  };\n\n  if (!user) {\n    return null;\n  }\n\n  // Get user initials for avatar\n  const getInitials = () => {\n    if (user.firstName && user.lastName) {\n      return `${user.firstName[0]}${user.lastName[0]}`.toUpperCase();\n    }\n    if (user.name) {\n      const parts = user.name.split(\" \");\n      if (parts.length >= 2) {\n        return `${parts[0][0]}${parts[1][0]}`.toUpperCase();\n      }\n      return user.name.substring(0, 2).toUpperCase();\n    }\n    if (user.username) {\n      return user.username.substring(0, 2).toUpperCase();\n    }\n    return user.email.substring(0, 2).toUpperCase();\n  };\n\n  const displayName =\n    user.name ||\n    `${user.firstName || \"\"} ${user.lastName || \"\"}`.trim() ||\n    user.username;\n\n  return (\n    <div className=\"relative\" ref={menuRef}>\n      {/* Profile Button */}\n      <button\n        type=\"button\"\n        onClick={() => setIsOpen(!isOpen)}\n        className=\"flex items-center gap-2 px-3 py-2 rounded-lg hover:bg-bg-sunken transition-colors\"\n        aria-label=\"User menu\"\n        aria-expanded={isOpen}\n      >\n        {/* Avatar */}\n        <div className=\"size-8 rounded-full bg-accent-blue flex items-center justify-center text-white text-sm font-medium overflow-hidden\">\n          {user.avatar ? (\n            <img\n              src={user.avatar}\n              alt={tr(\"auth.profileMenu.avatarAlt\", \"Profile picture\")}\n              className=\"size-full object-cover\"\n            />\n          ) : (\n            getInitials()\n          )}\n        </div>\n\n        {/* User Name (optional, hide on small screens) */}\n        <span className=\"hidden sm:block text-sm font-medium text-text-secondary\">\n          {displayName}\n        </span>\n\n        {/* Chevron */}\n        <ChevronDown\n          className={`size-4 text-text-secondary transition-transform ${\n            isOpen ? \"rotate-180\" : \"\"\n          }`}\n        />\n      </button>\n\n      {/* Dropdown Menu */}\n      {isOpen && (\n        <div\n          className={`absolute top-full mt-2 w-64 bg-bg-surface rounded-lg shadow-lg border border-border-subtle py-2 z-50 ${\n            position === \"right\" ? \"right-0\" : \"left-0\"\n          }`}\n        >\n          {/* User Info Section */}\n          <div className=\"px-4 py-3 border-b border-border-subtle\">\n            <p className=\"text-sm font-medium text-text-primary truncate\">\n              {displayName}\n            </p>\n            <p className=\"text-xs text-text-secondary truncate\">{user.email}</p>\n            {currentWorkspaceId && (\n              <p className=\"text-xs text-text-tertiary mt-1 truncate\">\n                Workspace: {currentWorkspaceId.substring(0, 8)}...\n              </p>\n            )}\n          </div>\n\n          {/* Menu Items */}\n          <div className=\"py-1\">\n            {/* Switch Workspace */}\n            {onSwitchWorkspace && (\n              <button\n                type=\"button\"\n                onClick={handleSwitchWorkspace}\n                className=\"w-full flex items-center gap-3 px-4 py-2 text-sm text-text-secondary hover:bg-bg-sunken transition-colors\"\n              >\n                <Building2 className=\"size-4\" />\n                <span>\n                  {tr(\"auth.profileMenu.switchWorkspace\", \"Switch Workspace\")}\n                </span>\n              </button>\n            )}\n\n            {/* Add Account */}\n            <button\n              type=\"button\"\n              onClick={() => {\n                setIsOpen(false);\n                const returnTo = encodeURIComponent(\n                  window.location.pathname + window.location.search,\n                );\n                navigate(`/auth/login?mode=add-account&returnTo=${returnTo}`);\n              }}\n              className=\"w-full flex items-center gap-3 px-4 py-2 text-sm text-text-secondary hover:bg-bg-sunken transition-colors\"\n            >\n              <UserPlus className=\"size-4\" />\n              <span>{tr(\"auth.profileMenu.addAccount\", \"Add account\")}</span>\n            </button>\n\n            {/* Logout */}\n            <button\n              type=\"button\"\n              onClick={handleLogout}\n              className=\"w-full flex items-center gap-3 px-4 py-2 text-sm text-status-error-text hover:bg-status-error-bg-subtle transition-colors\"\n            >\n              <LogOut className=\"size-4\" />\n              <span>{tr(\"auth.profileMenu.logout\", \"Logout\")}</span>\n            </button>\n          </div>\n        </div>\n      )}\n    </div>\n  );\n}\n"],"mappings":";;;;;;;AAiDA,SAAgB,EAAgB,EAC9B,sBACA,aACA,cAAW,WACY;CACvB,IAAM,EAAE,SAAM,GAAS,EACjB,KAAM,GAAa,MAA6B;EACpD,IAAM,IAAa,EAAE,EAAI;AACzB,SAAO,MAAe,IAAM,IAAW;IAEnC,CAAC,GAAQ,KAAa,EAAS,GAAM,EACrC,IAAU,EAAuB,KAAK,EACtC,IAAW,GAAa,EAExB,IAAO,GAAc,MAAU,EAAM,KAAK,EAC1C,IAAqB,GAAc,MAAU,EAAM,mBAAmB;AAG5E,SAAgB;EACd,SAAS,EAAmB,GAAmB;AAC7C,GAAI,EAAQ,WAAW,CAAC,EAAQ,QAAQ,SAAS,EAAM,OAAe,IACpE,EAAU,GAAM;;AAIpB,MAAI,EAEF,QADA,SAAS,iBAAiB,aAAa,EAAmB,QAExD,SAAS,oBAAoB,aAAa,EAAmB;IAEhE,CAAC,EAAO,CAAC;CAEZ,IAAM,UAAqB;AAEzB,EADA,EAAU,GAAM,EAChB,GAAU;IAGN,UAA8B;AAElC,EADA,EAAU,GAAM,EAChB,KAAqB;;AAGvB,KAAI,CAAC,EACH,QAAO;CAIT,IAAM,UAAoB;AACxB,MAAI,EAAK,aAAa,EAAK,SACzB,QAAO,GAAG,EAAK,UAAU,KAAK,EAAK,SAAS,KAAK,aAAa;AAEhE,MAAI,EAAK,MAAM;GACb,IAAM,IAAQ,EAAK,KAAK,MAAM,IAAI;AAIlC,UAHI,EAAM,UAAU,IACX,GAAG,EAAM,GAAG,KAAK,EAAM,GAAG,KAAK,aAAa,GAE9C,EAAK,KAAK,UAAU,GAAG,EAAE,CAAC,aAAa;;AAKhD,SAHI,EAAK,WACA,EAAK,SAAS,UAAU,GAAG,EAAE,CAAC,aAAa,GAE7C,EAAK,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa;IAG3C,IACJ,EAAK,QACL,GAAG,EAAK,aAAa,GAAG,GAAG,EAAK,YAAY,KAAK,MAAM,IACvD,EAAK;AAEP,QACE,kBAAC,OAAD;EAAK,WAAU;EAAW,KAAK;YAA/B,CAEE,kBAAC,UAAD;GACE,MAAK;GACL,eAAe,EAAU,CAAC,EAAO;GACjC,WAAU;GACV,cAAW;GACX,iBAAe;aALjB;IAQE,kBAAC,OAAD;KAAK,WAAU;eACZ,EAAK,SACJ,kBAAC,OAAD;MACE,KAAK,EAAK;MACV,KAAK,EAAG,8BAA8B,kBAAkB;MACxD,WAAU;MACV,CAAA,GAEF,GAAa;KAEX,CAAA;IAGN,kBAAC,QAAD;KAAM,WAAU;eACb;KACI,CAAA;IAGP,kBAAC,GAAD,EACE,WAAW,mDACT,IAAS,eAAe,MAE1B,CAAA;IACK;MAGR,KACC,kBAAC,OAAD;GACE,WAAW,wGACT,MAAa,UAAU,YAAY;aAFvC,CAME,kBAAC,OAAD;IAAK,WAAU;cAAf;KACE,kBAAC,KAAD;MAAG,WAAU;gBACV;MACC,CAAA;KACJ,kBAAC,KAAD;MAAG,WAAU;gBAAwC,EAAK;MAAU,CAAA;KACnE,KACC,kBAAC,KAAD;MAAG,WAAU;gBAAb;OAAwD;OAC1C,EAAmB,UAAU,GAAG,EAAE;OAAC;OAC7C;;KAEF;OAGN,kBAAC,OAAD;IAAK,WAAU;cAAf;KAEG,KACC,kBAAC,UAAD;MACE,MAAK;MACL,SAAS;MACT,WAAU;gBAHZ,CAKE,kBAAC,GAAD,EAAW,WAAU,UAAW,CAAA,EAChC,kBAAC,QAAD,EAAA,UACG,EAAG,oCAAoC,mBAAmB,EACtD,CAAA,CACA;;KAIX,kBAAC,UAAD;MACE,MAAK;MACL,eAAe;AAKb,OAJA,EAAU,GAAM,EAIhB,EAAS,yCAHQ,mBACf,OAAO,SAAS,WAAW,OAAO,SAAS,OAC5C,GAC4D;;MAE/D,WAAU;gBATZ,CAWE,kBAAC,GAAD,EAAU,WAAU,UAAW,CAAA,EAC/B,kBAAC,QAAD,EAAA,UAAO,EAAG,+BAA+B,cAAc,EAAQ,CAAA,CACxD;;KAGT,kBAAC,UAAD;MACE,MAAK;MACL,SAAS;MACT,WAAU;gBAHZ,CAKE,kBAAC,GAAD,EAAQ,WAAU,UAAW,CAAA,EAC7B,kBAAC,QAAD,EAAA,UAAO,EAAG,2BAA2B,SAAS,EAAQ,CAAA,CAC/C;;KACL;MACF;KAEJ"}
+{"version":3,"file":"UserProfileMenu.js","names":[],"sources":["../../../../src/auth/components/profile/UserProfileMenu.tsx"],"sourcesContent":["import { useState, useRef, useEffect } from \"react\";\nimport { useI18n } from \"@burdenoff/fe-libs/shared/providers/shell\";\nimport { LogOut, ChevronDown, Building2, UserPlus } from \"lucide-react\";\nimport { useNavigate } from \"react-router\";\nimport { useAuthStore } from \"../../store/authStore\";\n\nexport interface UserProfileMenuProps {\n  /**\n   * Callback when workspace switcher should be shown\n   */\n  onSwitchWorkspace?: () => void;\n\n  /**\n   * Logout handler (REQUIRED)\n   * Should clear auth state and redirect to login\n   */\n  onLogout: () => void;\n\n  /**\n   * Position of the dropdown menu\n   * @default 'right'\n   */\n  position?: \"left\" | \"right\";\n}\n\n/**\n * User Profile Menu Component\n *\n * Displays user avatar/icon with dropdown menu containing:\n * - User information\n * - Switch Workspace option\n * - Logout button\n *\n * @example\n * ```tsx\n * import { UserProfileMenu } from '@burdenoff/microfe-auth';\n *\n * function AppHeader() {\n *   return (\n *     <div className=\"header\">\n *       <UserProfileMenu\n *         onSwitchWorkspace={() => setShowWorkspaceSwitcher(true)}\n *         position=\"right\"\n *       />\n *     </div>\n *   );\n * }\n * ```\n */\nexport function UserProfileMenu({\n  onSwitchWorkspace,\n  onLogout,\n  position = \"right\",\n}: UserProfileMenuProps) {\n  const { t } = useI18n();\n  const tr = (key: string, fallback: string): string => {\n    const translated = t(key);\n    return translated === key ? fallback : translated;\n  };\n  const [isOpen, setIsOpen] = useState(false);\n  const menuRef = useRef<HTMLDivElement>(null);\n  const navigate = useNavigate();\n\n  const user = useAuthStore((state) => state.user);\n  const currentWorkspaceId = useAuthStore((state) => state.currentWorkspaceId);\n\n  // Close dropdown when clicking outside\n  useEffect(() => {\n    function handleClickOutside(event: MouseEvent) {\n      if (menuRef.current && !menuRef.current.contains(event.target as Node)) {\n        setIsOpen(false);\n      }\n    }\n\n    if (isOpen) {\n      document.addEventListener(\"mousedown\", handleClickOutside);\n      return () =>\n        document.removeEventListener(\"mousedown\", handleClickOutside);\n    }\n  }, [isOpen]);\n\n  const handleLogout = () => {\n    setIsOpen(false);\n    onLogout();\n  };\n\n  const handleSwitchWorkspace = () => {\n    setIsOpen(false);\n    onSwitchWorkspace?.();\n  };\n\n  if (!user) {\n    return null;\n  }\n\n  // Get user initials for avatar\n  const getInitials = () => {\n    if (user.firstName && user.lastName) {\n      return `${user.firstName[0]}${user.lastName[0]}`.toUpperCase();\n    }\n    if (user.name) {\n      const parts = user.name.split(\" \");\n      if (parts.length >= 2) {\n        return `${parts[0][0]}${parts[1][0]}`.toUpperCase();\n      }\n      return user.name.substring(0, 2).toUpperCase();\n    }\n    if (user.username) {\n      return user.username.substring(0, 2).toUpperCase();\n    }\n    return user.email.substring(0, 2).toUpperCase();\n  };\n\n  const displayName =\n    user.name ||\n    `${user.firstName || \"\"} ${user.lastName || \"\"}`.trim() ||\n    user.username;\n\n  return (\n    <div className=\"relative\" ref={menuRef}>\n      {/* Profile Button */}\n      <button\n        type=\"button\"\n        onClick={() => setIsOpen(!isOpen)}\n        className=\"flex items-center gap-2 px-3 py-2 rounded-lg hover:bg-bg-sunken transition-colors\"\n        aria-label=\"User menu\"\n        aria-expanded={isOpen}\n      >\n        {/* Avatar */}\n        <div className=\"size-8 rounded-full bg-accent-blue flex items-center justify-center text-white text-sm font-medium overflow-hidden\">\n          {user.avatar ? (\n            <img\n              src={user.avatar}\n              alt={tr(\"auth.profileMenu.avatarAlt\", \"Profile picture\")}\n              className=\"size-full object-cover\"\n            />\n          ) : (\n            getInitials()\n          )}\n        </div>\n\n        {/* User Name (optional, hide on small screens) */}\n        <span className=\"hidden sm:block text-sm font-medium text-text-secondary\">\n          {displayName}\n        </span>\n\n        {/* Chevron */}\n        <ChevronDown\n          className={`size-4 text-text-secondary transition-transform ${\n            isOpen ? \"rotate-180\" : \"\"\n          }`}\n        />\n      </button>\n\n      {/* Dropdown Menu */}\n      {isOpen && (\n        <div\n          className={`absolute top-full mt-2 w-64 bg-bg-surface rounded-lg shadow-lg border border-border-subtle py-2 z-50 ${\n            position === \"right\" ? \"right-0\" : \"left-0\"\n          }`}\n        >\n          {/* User Info Section */}\n          <div className=\"px-4 py-3 border-b border-border-subtle\">\n            <p className=\"text-sm font-medium text-text-primary truncate\">\n              {displayName}\n            </p>\n            <p className=\"text-xs text-text-secondary truncate\">{user.email}</p>\n            {currentWorkspaceId && (\n              <p className=\"text-xs text-text-tertiary mt-1 truncate\">\n                Workspace: {currentWorkspaceId.substring(0, 8)}...\n              </p>\n            )}\n          </div>\n\n          {/* Menu Items */}\n          <div className=\"py-1\">\n            {/* Switch Workspace */}\n            {onSwitchWorkspace && (\n              <button\n                type=\"button\"\n                onClick={handleSwitchWorkspace}\n                className=\"w-full flex items-center gap-3 px-4 py-2 text-sm text-text-secondary hover:bg-bg-sunken transition-colors\"\n              >\n                <Building2 className=\"size-4\" />\n                <span>\n                  {tr(\"auth.profileMenu.switchWorkspace\", \"Switch Workspace\")}\n                </span>\n              </button>\n            )}\n\n            {/* Add Account */}\n            <button\n              type=\"button\"\n              onClick={() => {\n                setIsOpen(false);\n                const returnTo = encodeURIComponent(\n                  window.location.pathname + window.location.search,\n                );\n                navigate(`/auth/login?mode=add-account&returnTo=${returnTo}`);\n              }}\n              className=\"w-full flex items-center gap-3 px-4 py-2 text-sm text-text-secondary hover:bg-bg-sunken transition-colors\"\n            >\n              <UserPlus className=\"size-4\" />\n              <span>{tr(\"auth.profileMenu.addAccount\", \"Add account\")}</span>\n            </button>\n\n            {/* Logout */}\n            <button\n              type=\"button\"\n              onClick={handleLogout}\n              className=\"w-full flex items-center gap-3 px-4 py-2 text-sm text-status-error-text hover:bg-status-error-bg-subtle transition-colors\"\n            >\n              <LogOut className=\"size-4\" />\n              <span>{tr(\"auth.profileMenu.logout\", \"Logout\")}</span>\n            </button>\n          </div>\n        </div>\n      )}\n    </div>\n  );\n}\n"],"mappings":";;;;;;;AAiDA,SAAgB,EAAgB,EAC9B,sBACA,aACA,cAAW,WACY;CACvB,IAAM,EAAE,SAAM,GAAS,EACjB,KAAM,GAAa,MAA6B;EACpD,IAAM,IAAa,EAAE,EAAI;AACzB,SAAO,MAAe,IAAM,IAAW;IAEnC,CAAC,GAAQ,KAAa,EAAS,GAAM,EACrC,IAAU,EAAuB,KAAK,EACtC,IAAW,GAAa,EAExB,IAAO,GAAc,MAAU,EAAM,KAAK,EAC1C,IAAqB,GAAc,MAAU,EAAM,mBAAmB;AAG5E,SAAgB;EACd,SAAS,EAAmB,GAAmB;AAC7C,GAAI,EAAQ,WAAW,CAAC,EAAQ,QAAQ,SAAS,EAAM,OAAe,IACpE,EAAU,GAAM;;AAIpB,MAAI,EAEF,QADA,SAAS,iBAAiB,aAAa,EAAmB,QAExD,SAAS,oBAAoB,aAAa,EAAmB;IAEhE,CAAC,EAAO,CAAC;CAEZ,IAAM,UAAqB;AAEzB,EADA,EAAU,GAAM,EAChB,GAAU;IAGN,UAA8B;AAElC,EADA,EAAU,GAAM,EAChB,KAAqB;;AAGvB,KAAI,CAAC,EACH,QAAO;CAIT,IAAM,UAAoB;AACxB,MAAI,EAAK,aAAa,EAAK,SACzB,QAAO,GAAG,EAAK,UAAU,KAAK,EAAK,SAAS,KAAK,aAAa;AAEhE,MAAI,EAAK,MAAM;GACb,IAAM,IAAQ,EAAK,KAAK,MAAM,IAAI;AAIlC,UAHI,EAAM,UAAU,IACX,GAAG,EAAM,GAAG,KAAK,EAAM,GAAG,KAAK,aAAa,GAE9C,EAAK,KAAK,UAAU,GAAG,EAAE,CAAC,aAAa;;AAKhD,SAHI,EAAK,WACA,EAAK,SAAS,UAAU,GAAG,EAAE,CAAC,aAAa,GAE7C,EAAK,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa;IAG3C,IACJ,EAAK,QACL,GAAG,EAAK,aAAa,GAAG,GAAG,EAAK,YAAY,KAAK,MAAM,IACvD,EAAK;AAEP,QACE,kBAAC,OAAD;EAAK,WAAU;EAAW,KAAK;YAA/B,CAEE,kBAAC,UAAD;GACE,MAAK;GACL,eAAe,EAAU,CAAC,EAAO;GACjC,WAAU;GACV,cAAW;GACX,iBAAe;aALjB;IAQE,kBAAC,OAAD;KAAK,WAAU;eACZ,EAAK,SACJ,kBAAC,OAAD;MACE,KAAK,EAAK;MACV,KAAK,EAAG,8BAA8B,kBAAkB;MACxD,WAAU;MACV,CAAA,GAEF,GAAa;KAEX,CAAA;IAGN,kBAAC,QAAD;KAAM,WAAU;eACb;KACI,CAAA;IAGP,kBAAC,GAAD,EACE,WAAW,mDACT,IAAS,eAAe,MAE1B,CAAA;IACK;MAGR,KACC,kBAAC,OAAD;GACE,WAAW,wGACT,MAAa,UAAU,YAAY;aAFvC,CAME,kBAAC,OAAD;IAAK,WAAU;cAAf;KACE,kBAAC,KAAD;MAAG,WAAU;gBACV;MACC,CAAA;KACJ,kBAAC,KAAD;MAAG,WAAU;gBAAwC,EAAK;MAAU,CAAA;KACnE,KACC,kBAAC,KAAD;MAAG,WAAU;gBAAb;OAAwD;OAC1C,EAAmB,UAAU,GAAG,EAAE;OAAC;OAC7C;;KAEF;OAGN,kBAAC,OAAD;IAAK,WAAU;cAAf;KAEG,KACC,kBAAC,UAAD;MACE,MAAK;MACL,SAAS;MACT,WAAU;gBAHZ,CAKE,kBAAC,GAAD,EAAW,WAAU,UAAW,CAAA,EAChC,kBAAC,QAAD,EAAA,UACG,EAAG,oCAAoC,mBAAmB,EACtD,CAAA,CACA;;KAIX,kBAAC,UAAD;MACE,MAAK;MACL,eAAe;AAKb,OAJA,EAAU,GAAM,EAIhB,EAAS,yCAHQ,mBACf,OAAO,SAAS,WAAW,OAAO,SAAS,OAC5C,GAC4D;;MAE/D,WAAU;gBATZ,CAWE,kBAAC,GAAD,EAAU,WAAU,UAAW,CAAA,EAC/B,kBAAC,QAAD,EAAA,UAAO,EAAG,+BAA+B,cAAc,EAAQ,CAAA,CACxD;;KAGT,kBAAC,UAAD;MACE,MAAK;MACL,SAAS;MACT,WAAU;gBAHZ,CAKE,kBAAC,GAAD,EAAQ,WAAU,UAAW,CAAA,EAC7B,kBAAC,QAAD,EAAA,UAAO,EAAG,2BAA2B,SAAS,EAAQ,CAAA,CAC/C;;KACL;MACF;KAEJ"}

package/dist/auth/pages/EmailVerifyPage.js

@@ -3,7 +3,7 @@ import { useAuthOperations as t } from "../hooks/useAuthOperations.js";
 import { AuthLayout as n } from "../components/AuthLayout.js";
 import { SpinnerIcon as r } from "../components/AuthIcons.js";
 import { useCallback as i, useEffect as a, useRef as o, useState as s } from "react";
-import { useSearchParams as c } from "react-router-dom";
+import { useSearchParams as c } from "react-router";
 import { useI18n as l } from "@burdenoff/fe-libs/shared/providers/shell";
 import { Fragment as u, jsx as d, jsxs as f } from "react/jsx-runtime";
 import { Button as p } from "@burdenoff/fe-libs/button";

package/dist/auth/pages/EmailVerifyPage.js.map

@@ -1 +1 @@
-{"version":3,"file":"EmailVerifyPage.js","names":[],"sources":["../../../src/auth/pages/EmailVerifyPage.tsx"],"sourcesContent":["import { useEffect, useState, useCallback, useRef } from \"react\";\nimport { useI18n } from \"@burdenoff/fe-libs/shared/providers/shell\";\nimport { useSearchParams } from \"react-router-dom\";\nimport { useAuthOperations } from \"../hooks/useAuthOperations\";\nimport { useAuthStore } from \"../store/authStore\";\nimport { AuthLayout } from \"../components/AuthLayout\";\nimport { Button } from \"@burdenoff/fe-libs/button\";\nimport { SpinnerIcon } from \"../components/AuthIcons\";\n\nconst REDIRECT_DELAY = 5; // seconds\n\n/**\n * Navigate to login page with optional email pre-fill\n * Uses window.location.href for reliable navigation (works in new tabs)\n */\nfunction navigateToLogin(email?: string) {\n  const baseUrl = \"/auth/login\";\n  const url = email ? `${baseUrl}?email=${encodeURIComponent(email)}` : baseUrl;\n  window.location.href = url;\n}\n\n/**\n * Email verification page with professional design\n */\nexport function EmailVerifyPage() {\n  const { t } = useI18n();\n  const tr = (key: string, fallback: string): string => {\n    const translated = t(key);\n    return translated === key ? fallback : translated;\n  };\n\n  const [searchParams] = useSearchParams();\n  const token = searchParams.get(\"token\");\n  const urlEmail = searchParams.get(\"email\");\n  const { verifyEmail, resendVerification } = useAuthOperations();\n  const user = useAuthStore((state) => state.user);\n  const [status, setStatus] = useState<\"verifying\" | \"success\" | \"error\">(\n    \"verifying\",\n  );\n  const verifiedEmailRef = useRef<string | undefined>(urlEmail || undefined);\n  const [isResending, setIsResending] = useState(false);\n  const [resendSuccess, setResendSuccess] = useState(false);\n  const [countdown, setCountdown] = useState(REDIRECT_DELAY);\n\n  // Guard against duplicate calls. useRef alone resets across remounts\n  // (StrictMode, Suspense resolution of the lazy Auth root, HMR), so we\n  // additionally key on the token via sessionStorage — any remount for the\n  // same token short-circuits instead of firing a second mutation.\n  const verificationInitiatedRef = useRef(false);\n\n  useEffect(() => {\n    if (!token || verificationInitiatedRef.current) return;\n\n    const storageKey = `auth:verifyEmail:inflight:${token}`;\n    if (\n      typeof window !== \"undefined\" &&\n      window.sessionStorage.getItem(storageKey)\n    ) {\n      return;\n    }\n    verificationInitiatedRef.current = true;\n    try {\n      window.sessionStorage.setItem(storageKey, \"1\");\n    } catch {\n      // sessionStorage unavailable (private mode, SSR); ref guard still applies.\n    }\n\n    verifyEmail(token)\n      .then((result) => {\n        if (result.success) {\n          setStatus(\"success\");\n          if (result.email) verifiedEmailRef.current = result.email;\n        } else {\n          setStatus(\"error\");\n        }\n      })\n      .catch(() => setStatus(\"error\"));\n  }, [token, verifyEmail]);\n\n  // Auto-redirect countdown after successful verification\n  useEffect(() => {\n    if (status !== \"success\") return;\n\n    const timer = setInterval(() => {\n      setCountdown((prev) => {\n        if (prev <= 1) {\n          clearInterval(timer);\n          navigateToLogin(verifiedEmailRef.current);\n          return 0;\n        }\n        return prev - 1;\n      });\n    }, 1000);\n\n    return () => clearInterval(timer);\n  }, [status]);\n\n  const handleResend = async () => {\n    const resendEmail = urlEmail || user?.email;\n    if (!resendEmail) {\n      console.error(\"No email available for resend\");\n      return;\n    }\n    setIsResending(true);\n    try {\n      await resendVerification(resendEmail);\n      setResendSuccess(true);\n    } catch (err) {\n      console.error(\"Failed to resend verification:\", err);\n    } finally {\n      setIsResending(false);\n    }\n  };\n\n  const handleContinueToLogin = useCallback(() => {\n    navigateToLogin(verifiedEmailRef.current);\n  }, []);\n\n  const handleBackToLogin = useCallback(() => {\n    navigateToLogin();\n  }, []);\n\n  if (status === \"verifying\") {\n    return (\n      <AuthLayout\n        title={tr(\"auth.emailVerify.verifyingTitle\", \"Verifying your email\")}\n        subtitle={tr(\n          \"auth.emailVerify.verifyingSubtitle\",\n          \"Please wait while we confirm your email address\",\n        )}\n      >\n        {/* Loading Spinner */}\n        <div className=\"flex flex-col items-center justify-center py-12\">\n          <div className=\"size-16 rounded-full bg-[var(--color-bg-accent)] flex items-center justify-center mb-6\">\n            <SpinnerIcon className=\"size-8 text-[var(--color-text-link)] animate-spin\" />\n          </div>\n          <p className=\"text-[var(--color-text-secondary)]\">\n            {tr(\"auth.emailVerify.moment\", \"This will only take a moment...\")}\n          </p>\n        </div>\n      </AuthLayout>\n    );\n  }\n\n  if (status === \"success\") {\n    return (\n      <AuthLayout\n        title={tr(\"auth.emailVerify.verifiedTitle\", \"Email verified!\")}\n        subtitle={tr(\n          \"auth.emailVerify.verifiedSubtitle\",\n          \"Your email address has been confirmed\",\n        )}\n      >\n        {/* Success Icon */}\n        <div className=\"flex flex-col items-center justify-center py-6\">\n          <div className=\"size-20 rounded-full bg-[var(--color-status-success-bg-subtle)] flex items-center justify-center mb-6\">\n            <svg\n              className=\"size-10 text-[var(--color-status-success-text)]\"\n              fill=\"none\"\n              viewBox=\"0 0 24 24\"\n              stroke=\"currentColor\"\n            >\n              <path\n                strokeLinecap=\"round\"\n                strokeLinejoin=\"round\"\n                strokeWidth={2}\n                d=\"M5 13l4 4L19 7\"\n              />\n            </svg>\n          </div>\n\n          <p className=\"text-center text-[var(--color-text-secondary)] mb-6\">\n            {tr(\n              \"auth.emailVerify.successMessage\",\n              \"Your email has been successfully verified. You can now sign in to access all features.\",\n            )}\n          </p>\n\n          <p className=\"text-center text-sm text-[var(--color-text-tertiary)] mb-6\">\n            {tr(\"auth.emailVerify.redirecting\", \"Redirecting to sign in in\")}{\" \"}\n            <span className=\"font-semibold text-[var(--color-text-primary)]\">\n              {countdown}\n            </span>{\" \"}\n            {tr(\"auth.emailVerify.seconds\", \"seconds...\")}\n          </p>\n\n          <Button\n            type=\"button\"\n            onClick={handleContinueToLogin}\n            variant=\"default\"\n            size=\"lg\"\n            className=\"w-full font-semibold\"\n          >\n            {tr(\"auth.emailVerify.continueSignIn\", \"Continue to sign in now\")}\n          </Button>\n        </div>\n      </AuthLayout>\n    );\n  }\n\n  // Error state\n  return (\n    <AuthLayout\n      title={tr(\"auth.emailVerify.failedTitle\", \"Verification failed\")}\n      subtitle={tr(\n        \"auth.emailVerify.failedSubtitle\",\n        \"We couldn't verify your email address\",\n      )}\n    >\n      <div className=\"flex flex-col items-center justify-center py-6\">\n        {/* Error Icon */}\n        <div className=\"size-20 rounded-full bg-[var(--color-status-error-bg-subtle)] flex items-center justify-center mb-6\">\n          <svg\n            className=\"size-10 text-[var(--color-status-error-text)]\"\n            fill=\"none\"\n            viewBox=\"0 0 24 24\"\n            stroke=\"currentColor\"\n          >\n            <path\n              strokeLinecap=\"round\"\n              strokeLinejoin=\"round\"\n              strokeWidth={2}\n              d=\"M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-3L13.732 4c-.77-1.333-2.694-1.333-3.464 0L3.34 16c-.77 1.333.192 3 1.732 3z\"\n            />\n          </svg>\n        </div>\n\n        <p className=\"text-center text-[var(--color-text-secondary)] mb-8\">\n          {tr(\n            \"auth.emailVerify.invalidLink\",\n            \"The verification link is invalid or has expired. Please request a new verification email.\",\n          )}\n        </p>\n\n        {resendSuccess ? (\n          <div className=\"w-full p-4 rounded-xl bg-[var(--color-status-success-bg-subtle)] border border-[var(--color-status-success-border)] text-center mb-4\">\n            <p className=\"text-sm text-[var(--color-status-success-text)]\">\n              {tr(\n                \"auth.emailVerify.emailSent\",\n                \"Verification email sent! Please check your inbox.\",\n              )}\n            </p>\n          </div>\n        ) : (\n          <Button\n            type=\"button\"\n            onClick={handleResend}\n            disabled={isResending}\n            variant=\"default\"\n            size=\"lg\"\n            className=\"mb-4 w-full font-semibold\"\n          >\n            {isResending ? (\n              <>\n                <SpinnerIcon className=\"size-5 animate-spin\" />\n                <span>Sending…</span>\n              </>\n            ) : (\n              tr(\"auth.emailVerify.resend\", \"Resend verification email\")\n            )}\n          </Button>\n        )}\n\n        <button\n          type=\"button\"\n          onClick={handleBackToLogin}\n          className=\"w-full py-3 px-4 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] font-medium hover:bg-[var(--color-bg-sunken)] transition-all\"\n        >\n          {tr(\"auth.emailVerify.backToSignIn\", \"Back to sign in\")}\n        </button>\n      </div>\n    </AuthLayout>\n  );\n}\n"],"mappings":";;;;;;;;;;AASA,IAAM,IAAiB;AAMvB,SAAS,EAAgB,GAAgB;CACvC,IAAM,IAAU,eACV,IAAM,IAAQ,GAAG,EAAQ,SAAS,mBAAmB,EAAM,KAAK;AACtE,QAAO,SAAS,OAAO;;AAMzB,SAAgB,IAAkB;CAChC,IAAM,EAAE,SAAM,GAAS,EACjB,KAAM,GAAa,MAA6B;EACpD,IAAM,IAAa,EAAE,EAAI;AACzB,SAAO,MAAe,IAAM,IAAW;IAGnC,CAAC,KAAgB,GAAiB,EAClC,IAAQ,EAAa,IAAI,QAAQ,EACjC,IAAW,EAAa,IAAI,QAAQ,EACpC,EAAE,gBAAa,0BAAuB,GAAmB,EACzD,IAAO,GAAc,MAAU,EAAM,KAAK,EAC1C,CAAC,GAAQ,KAAa,EAC1B,YACD,EACK,IAAmB,EAA2B,KAAY,KAAA,EAAU,EACpE,CAAC,GAAa,KAAkB,EAAS,GAAM,EAC/C,CAAC,GAAe,KAAoB,EAAS,GAAM,EACnD,CAAC,GAAW,KAAgB,EAAS,EAAe,EAMpD,IAA2B,EAAO,GAAM;AAgC9C,CA9BA,QAAgB;AACd,MAAI,CAAC,KAAS,EAAyB,QAAS;EAEhD,IAAM,IAAa,6BAA6B;AAE9C,eAAO,SAAW,OAClB,OAAO,eAAe,QAAQ,EAAW,GAI3C;KAAyB,UAAU;AACnC,OAAI;AACF,WAAO,eAAe,QAAQ,GAAY,IAAI;WACxC;AAIR,KAAY,EAAM,CACf,MAAM,MAAW;AAChB,IAAI,EAAO,WACT,EAAU,UAAU,EAChB,EAAO,UAAO,EAAiB,UAAU,EAAO,UAEpD,EAAU,QAAQ;KAEpB,CACD,YAAY,EAAU,QAAQ,CAAC;;IACjC,CAAC,GAAO,EAAY,CAAC,EAGxB,QAAgB;AACd,MAAI,MAAW,UAAW;EAE1B,IAAM,IAAQ,kBAAkB;AAC9B,MAAc,MACR,KAAQ,KACV,cAAc,EAAM,EACpB,EAAgB,EAAiB,QAAQ,EAClC,KAEF,IAAO,EACd;KACD,IAAK;AAER,eAAa,cAAc,EAAM;IAChC,CAAC,EAAO,CAAC;CAEZ,IAAM,IAAe,YAAY;EAC/B,IAAM,IAAc,KAAY,GAAM;AACtC,MAAI,CAAC,GAAa;AAChB,WAAQ,MAAM,gCAAgC;AAC9C;;AAEF,IAAe,GAAK;AACpB,MAAI;AAEF,GADA,MAAM,EAAmB,EAAY,EACrC,EAAiB,GAAK;WACf,GAAK;AACZ,WAAQ,MAAM,kCAAkC,EAAI;YAC5C;AACR,KAAe,GAAM;;IAInB,IAAwB,QAAkB;AAC9C,IAAgB,EAAiB,QAAQ;IACxC,EAAE,CAAC,EAEA,IAAoB,QAAkB;AAC1C,KAAiB;IAChB,EAAE,CAAC;AAiFN,QA/EI,MAAW,cAEX,kBAAC,GAAD;EACE,OAAO,EAAG,mCAAmC,uBAAuB;EACpE,UAAU,EACR,sCACA,kDACD;YAGD,kBAAC,OAAD;GAAK,WAAU;aAAf,CACE,kBAAC,OAAD;IAAK,WAAU;cACb,kBAAC,GAAD,EAAa,WAAU,qDAAsD,CAAA;IACzE,CAAA,EACN,kBAAC,KAAD;IAAG,WAAU;cACV,EAAG,2BAA2B,kCAAkC;IAC/D,CAAA,CACA;;EACK,CAAA,GAIb,MAAW,YAEX,kBAAC,GAAD;EACE,OAAO,EAAG,kCAAkC,kBAAkB;EAC9D,UAAU,EACR,qCACA,wCACD;YAGD,kBAAC,OAAD;GAAK,WAAU;aAAf;IACE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,OAAD;MACE,WAAU;MACV,MAAK;MACL,SAAQ;MACR,QAAO;gBAEP,kBAAC,QAAD;OACE,eAAc;OACd,gBAAe;OACf,aAAa;OACb,GAAE;OACF,CAAA;MACE,CAAA;KACF,CAAA;IAEN,kBAAC,KAAD;KAAG,WAAU;eACV,EACC,mCACA,yFACD;KACC,CAAA;IAEJ,kBAAC,KAAD;KAAG,WAAU;eAAb;MACG,EAAG,gCAAgC,4BAA4B;MAAE;MAClE,kBAAC,QAAD;OAAM,WAAU;iBACb;OACI,CAAA;MAAC;MACP,EAAG,4BAA4B,aAAa;MAC3C;;IAEJ,kBAAC,GAAD;KACE,MAAK;KACL,SAAS;KACT,SAAQ;KACR,MAAK;KACL,WAAU;eAET,EAAG,mCAAmC,0BAA0B;KAC1D,CAAA;IACL;;EACK,CAAA,GAMf,kBAAC,GAAD;EACE,OAAO,EAAG,gCAAgC,sBAAsB;EAChE,UAAU,EACR,mCACA,wCACD;YAED,kBAAC,OAAD;GAAK,WAAU;aAAf;IAEE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,OAAD;MACE,WAAU;MACV,MAAK;MACL,SAAQ;MACR,QAAO;gBAEP,kBAAC,QAAD;OACE,eAAc;OACd,gBAAe;OACf,aAAa;OACb,GAAE;OACF,CAAA;MACE,CAAA;KACF,CAAA;IAEN,kBAAC,KAAD;KAAG,WAAU;eACV,EACC,gCACA,4FACD;KACC,CAAA;IAEH,IACC,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,KAAD;MAAG,WAAU;gBACV,EACC,8BACA,oDACD;MACC,CAAA;KACA,CAAA,GAEN,kBAAC,GAAD;KACE,MAAK;KACL,SAAS;KACT,UAAU;KACV,SAAQ;KACR,MAAK;KACL,WAAU;eAET,IACC,kBAAA,GAAA,EAAA,UAAA,CACE,kBAAC,GAAD,EAAa,WAAU,uBAAwB,CAAA,EAC/C,kBAAC,QAAD,EAAA,UAAM,YAAe,CAAA,CACpB,EAAA,CAAA,GAEH,EAAG,2BAA2B,4BAA4B;KAErD,CAAA;IAGX,kBAAC,UAAD;KACE,MAAK;KACL,SAAS;KACT,WAAU;eAET,EAAG,iCAAiC,kBAAkB;KAChD,CAAA;IACL;;EACK,CAAA"}
+{"version":3,"file":"EmailVerifyPage.js","names":[],"sources":["../../../src/auth/pages/EmailVerifyPage.tsx"],"sourcesContent":["import { useEffect, useState, useCallback, useRef } from \"react\";\nimport { useI18n } from \"@burdenoff/fe-libs/shared/providers/shell\";\nimport { useSearchParams } from \"react-router\";\nimport { useAuthOperations } from \"../hooks/useAuthOperations\";\nimport { useAuthStore } from \"../store/authStore\";\nimport { AuthLayout } from \"../components/AuthLayout\";\nimport { Button } from \"@burdenoff/fe-libs/button\";\nimport { SpinnerIcon } from \"../components/AuthIcons\";\n\nconst REDIRECT_DELAY = 5; // seconds\n\n/**\n * Navigate to login page with optional email pre-fill\n * Uses window.location.href for reliable navigation (works in new tabs)\n */\nfunction navigateToLogin(email?: string) {\n  const baseUrl = \"/auth/login\";\n  const url = email ? `${baseUrl}?email=${encodeURIComponent(email)}` : baseUrl;\n  window.location.href = url;\n}\n\n/**\n * Email verification page with professional design\n */\nexport function EmailVerifyPage() {\n  const { t } = useI18n();\n  const tr = (key: string, fallback: string): string => {\n    const translated = t(key);\n    return translated === key ? fallback : translated;\n  };\n\n  const [searchParams] = useSearchParams();\n  const token = searchParams.get(\"token\");\n  const urlEmail = searchParams.get(\"email\");\n  const { verifyEmail, resendVerification } = useAuthOperations();\n  const user = useAuthStore((state) => state.user);\n  const [status, setStatus] = useState<\"verifying\" | \"success\" | \"error\">(\n    \"verifying\",\n  );\n  const verifiedEmailRef = useRef<string | undefined>(urlEmail || undefined);\n  const [isResending, setIsResending] = useState(false);\n  const [resendSuccess, setResendSuccess] = useState(false);\n  const [countdown, setCountdown] = useState(REDIRECT_DELAY);\n\n  // Guard against duplicate calls. useRef alone resets across remounts\n  // (StrictMode, Suspense resolution of the lazy Auth root, HMR), so we\n  // additionally key on the token via sessionStorage — any remount for the\n  // same token short-circuits instead of firing a second mutation.\n  const verificationInitiatedRef = useRef(false);\n\n  useEffect(() => {\n    if (!token || verificationInitiatedRef.current) return;\n\n    const storageKey = `auth:verifyEmail:inflight:${token}`;\n    if (\n      typeof window !== \"undefined\" &&\n      window.sessionStorage.getItem(storageKey)\n    ) {\n      return;\n    }\n    verificationInitiatedRef.current = true;\n    try {\n      window.sessionStorage.setItem(storageKey, \"1\");\n    } catch {\n      // sessionStorage unavailable (private mode, SSR); ref guard still applies.\n    }\n\n    verifyEmail(token)\n      .then((result) => {\n        if (result.success) {\n          setStatus(\"success\");\n          if (result.email) verifiedEmailRef.current = result.email;\n        } else {\n          setStatus(\"error\");\n        }\n      })\n      .catch(() => setStatus(\"error\"));\n  }, [token, verifyEmail]);\n\n  // Auto-redirect countdown after successful verification\n  useEffect(() => {\n    if (status !== \"success\") return;\n\n    const timer = setInterval(() => {\n      setCountdown((prev) => {\n        if (prev <= 1) {\n          clearInterval(timer);\n          navigateToLogin(verifiedEmailRef.current);\n          return 0;\n        }\n        return prev - 1;\n      });\n    }, 1000);\n\n    return () => clearInterval(timer);\n  }, [status]);\n\n  const handleResend = async () => {\n    const resendEmail = urlEmail || user?.email;\n    if (!resendEmail) {\n      console.error(\"No email available for resend\");\n      return;\n    }\n    setIsResending(true);\n    try {\n      await resendVerification(resendEmail);\n      setResendSuccess(true);\n    } catch (err) {\n      console.error(\"Failed to resend verification:\", err);\n    } finally {\n      setIsResending(false);\n    }\n  };\n\n  const handleContinueToLogin = useCallback(() => {\n    navigateToLogin(verifiedEmailRef.current);\n  }, []);\n\n  const handleBackToLogin = useCallback(() => {\n    navigateToLogin();\n  }, []);\n\n  if (status === \"verifying\") {\n    return (\n      <AuthLayout\n        title={tr(\"auth.emailVerify.verifyingTitle\", \"Verifying your email\")}\n        subtitle={tr(\n          \"auth.emailVerify.verifyingSubtitle\",\n          \"Please wait while we confirm your email address\",\n        )}\n      >\n        {/* Loading Spinner */}\n        <div className=\"flex flex-col items-center justify-center py-12\">\n          <div className=\"size-16 rounded-full bg-[var(--color-bg-accent)] flex items-center justify-center mb-6\">\n            <SpinnerIcon className=\"size-8 text-[var(--color-text-link)] animate-spin\" />\n          </div>\n          <p className=\"text-[var(--color-text-secondary)]\">\n            {tr(\"auth.emailVerify.moment\", \"This will only take a moment...\")}\n          </p>\n        </div>\n      </AuthLayout>\n    );\n  }\n\n  if (status === \"success\") {\n    return (\n      <AuthLayout\n        title={tr(\"auth.emailVerify.verifiedTitle\", \"Email verified!\")}\n        subtitle={tr(\n          \"auth.emailVerify.verifiedSubtitle\",\n          \"Your email address has been confirmed\",\n        )}\n      >\n        {/* Success Icon */}\n        <div className=\"flex flex-col items-center justify-center py-6\">\n          <div className=\"size-20 rounded-full bg-[var(--color-status-success-bg-subtle)] flex items-center justify-center mb-6\">\n            <svg\n              className=\"size-10 text-[var(--color-status-success-text)]\"\n              fill=\"none\"\n              viewBox=\"0 0 24 24\"\n              stroke=\"currentColor\"\n            >\n              <path\n                strokeLinecap=\"round\"\n                strokeLinejoin=\"round\"\n                strokeWidth={2}\n                d=\"M5 13l4 4L19 7\"\n              />\n            </svg>\n          </div>\n\n          <p className=\"text-center text-[var(--color-text-secondary)] mb-6\">\n            {tr(\n              \"auth.emailVerify.successMessage\",\n              \"Your email has been successfully verified. You can now sign in to access all features.\",\n            )}\n          </p>\n\n          <p className=\"text-center text-sm text-[var(--color-text-tertiary)] mb-6\">\n            {tr(\"auth.emailVerify.redirecting\", \"Redirecting to sign in in\")}{\" \"}\n            <span className=\"font-semibold text-[var(--color-text-primary)]\">\n              {countdown}\n            </span>{\" \"}\n            {tr(\"auth.emailVerify.seconds\", \"seconds...\")}\n          </p>\n\n          <Button\n            type=\"button\"\n            onClick={handleContinueToLogin}\n            variant=\"default\"\n            size=\"lg\"\n            className=\"w-full font-semibold\"\n          >\n            {tr(\"auth.emailVerify.continueSignIn\", \"Continue to sign in now\")}\n          </Button>\n        </div>\n      </AuthLayout>\n    );\n  }\n\n  // Error state\n  return (\n    <AuthLayout\n      title={tr(\"auth.emailVerify.failedTitle\", \"Verification failed\")}\n      subtitle={tr(\n        \"auth.emailVerify.failedSubtitle\",\n        \"We couldn't verify your email address\",\n      )}\n    >\n      <div className=\"flex flex-col items-center justify-center py-6\">\n        {/* Error Icon */}\n        <div className=\"size-20 rounded-full bg-[var(--color-status-error-bg-subtle)] flex items-center justify-center mb-6\">\n          <svg\n            className=\"size-10 text-[var(--color-status-error-text)]\"\n            fill=\"none\"\n            viewBox=\"0 0 24 24\"\n            stroke=\"currentColor\"\n          >\n            <path\n              strokeLinecap=\"round\"\n              strokeLinejoin=\"round\"\n              strokeWidth={2}\n              d=\"M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-3L13.732 4c-.77-1.333-2.694-1.333-3.464 0L3.34 16c-.77 1.333.192 3 1.732 3z\"\n            />\n          </svg>\n        </div>\n\n        <p className=\"text-center text-[var(--color-text-secondary)] mb-8\">\n          {tr(\n            \"auth.emailVerify.invalidLink\",\n            \"The verification link is invalid or has expired. Please request a new verification email.\",\n          )}\n        </p>\n\n        {resendSuccess ? (\n          <div className=\"w-full p-4 rounded-xl bg-[var(--color-status-success-bg-subtle)] border border-[var(--color-status-success-border)] text-center mb-4\">\n            <p className=\"text-sm text-[var(--color-status-success-text)]\">\n              {tr(\n                \"auth.emailVerify.emailSent\",\n                \"Verification email sent! Please check your inbox.\",\n              )}\n            </p>\n          </div>\n        ) : (\n          <Button\n            type=\"button\"\n            onClick={handleResend}\n            disabled={isResending}\n            variant=\"default\"\n            size=\"lg\"\n            className=\"mb-4 w-full font-semibold\"\n          >\n            {isResending ? (\n              <>\n                <SpinnerIcon className=\"size-5 animate-spin\" />\n                <span>Sending…</span>\n              </>\n            ) : (\n              tr(\"auth.emailVerify.resend\", \"Resend verification email\")\n            )}\n          </Button>\n        )}\n\n        <button\n          type=\"button\"\n          onClick={handleBackToLogin}\n          className=\"w-full py-3 px-4 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] font-medium hover:bg-[var(--color-bg-sunken)] transition-all\"\n        >\n          {tr(\"auth.emailVerify.backToSignIn\", \"Back to sign in\")}\n        </button>\n      </div>\n    </AuthLayout>\n  );\n}\n"],"mappings":";;;;;;;;;;AASA,IAAM,IAAiB;AAMvB,SAAS,EAAgB,GAAgB;CACvC,IAAM,IAAU,eACV,IAAM,IAAQ,GAAG,EAAQ,SAAS,mBAAmB,EAAM,KAAK;AACtE,QAAO,SAAS,OAAO;;AAMzB,SAAgB,IAAkB;CAChC,IAAM,EAAE,SAAM,GAAS,EACjB,KAAM,GAAa,MAA6B;EACpD,IAAM,IAAa,EAAE,EAAI;AACzB,SAAO,MAAe,IAAM,IAAW;IAGnC,CAAC,KAAgB,GAAiB,EAClC,IAAQ,EAAa,IAAI,QAAQ,EACjC,IAAW,EAAa,IAAI,QAAQ,EACpC,EAAE,gBAAa,0BAAuB,GAAmB,EACzD,IAAO,GAAc,MAAU,EAAM,KAAK,EAC1C,CAAC,GAAQ,KAAa,EAC1B,YACD,EACK,IAAmB,EAA2B,KAAY,KAAA,EAAU,EACpE,CAAC,GAAa,KAAkB,EAAS,GAAM,EAC/C,CAAC,GAAe,KAAoB,EAAS,GAAM,EACnD,CAAC,GAAW,KAAgB,EAAS,EAAe,EAMpD,IAA2B,EAAO,GAAM;AAgC9C,CA9BA,QAAgB;AACd,MAAI,CAAC,KAAS,EAAyB,QAAS;EAEhD,IAAM,IAAa,6BAA6B;AAE9C,eAAO,SAAW,OAClB,OAAO,eAAe,QAAQ,EAAW,GAI3C;KAAyB,UAAU;AACnC,OAAI;AACF,WAAO,eAAe,QAAQ,GAAY,IAAI;WACxC;AAIR,KAAY,EAAM,CACf,MAAM,MAAW;AAChB,IAAI,EAAO,WACT,EAAU,UAAU,EAChB,EAAO,UAAO,EAAiB,UAAU,EAAO,UAEpD,EAAU,QAAQ;KAEpB,CACD,YAAY,EAAU,QAAQ,CAAC;;IACjC,CAAC,GAAO,EAAY,CAAC,EAGxB,QAAgB;AACd,MAAI,MAAW,UAAW;EAE1B,IAAM,IAAQ,kBAAkB;AAC9B,MAAc,MACR,KAAQ,KACV,cAAc,EAAM,EACpB,EAAgB,EAAiB,QAAQ,EAClC,KAEF,IAAO,EACd;KACD,IAAK;AAER,eAAa,cAAc,EAAM;IAChC,CAAC,EAAO,CAAC;CAEZ,IAAM,IAAe,YAAY;EAC/B,IAAM,IAAc,KAAY,GAAM;AACtC,MAAI,CAAC,GAAa;AAChB,WAAQ,MAAM,gCAAgC;AAC9C;;AAEF,IAAe,GAAK;AACpB,MAAI;AAEF,GADA,MAAM,EAAmB,EAAY,EACrC,EAAiB,GAAK;WACf,GAAK;AACZ,WAAQ,MAAM,kCAAkC,EAAI;YAC5C;AACR,KAAe,GAAM;;IAInB,IAAwB,QAAkB;AAC9C,IAAgB,EAAiB,QAAQ;IACxC,EAAE,CAAC,EAEA,IAAoB,QAAkB;AAC1C,KAAiB;IAChB,EAAE,CAAC;AAiFN,QA/EI,MAAW,cAEX,kBAAC,GAAD;EACE,OAAO,EAAG,mCAAmC,uBAAuB;EACpE,UAAU,EACR,sCACA,kDACD;YAGD,kBAAC,OAAD;GAAK,WAAU;aAAf,CACE,kBAAC,OAAD;IAAK,WAAU;cACb,kBAAC,GAAD,EAAa,WAAU,qDAAsD,CAAA;IACzE,CAAA,EACN,kBAAC,KAAD;IAAG,WAAU;cACV,EAAG,2BAA2B,kCAAkC;IAC/D,CAAA,CACA;;EACK,CAAA,GAIb,MAAW,YAEX,kBAAC,GAAD;EACE,OAAO,EAAG,kCAAkC,kBAAkB;EAC9D,UAAU,EACR,qCACA,wCACD;YAGD,kBAAC,OAAD;GAAK,WAAU;aAAf;IACE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,OAAD;MACE,WAAU;MACV,MAAK;MACL,SAAQ;MACR,QAAO;gBAEP,kBAAC,QAAD;OACE,eAAc;OACd,gBAAe;OACf,aAAa;OACb,GAAE;OACF,CAAA;MACE,CAAA;KACF,CAAA;IAEN,kBAAC,KAAD;KAAG,WAAU;eACV,EACC,mCACA,yFACD;KACC,CAAA;IAEJ,kBAAC,KAAD;KAAG,WAAU;eAAb;MACG,EAAG,gCAAgC,4BAA4B;MAAE;MAClE,kBAAC,QAAD;OAAM,WAAU;iBACb;OACI,CAAA;MAAC;MACP,EAAG,4BAA4B,aAAa;MAC3C;;IAEJ,kBAAC,GAAD;KACE,MAAK;KACL,SAAS;KACT,SAAQ;KACR,MAAK;KACL,WAAU;eAET,EAAG,mCAAmC,0BAA0B;KAC1D,CAAA;IACL;;EACK,CAAA,GAMf,kBAAC,GAAD;EACE,OAAO,EAAG,gCAAgC,sBAAsB;EAChE,UAAU,EACR,mCACA,wCACD;YAED,kBAAC,OAAD;GAAK,WAAU;aAAf;IAEE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,OAAD;MACE,WAAU;MACV,MAAK;MACL,SAAQ;MACR,QAAO;gBAEP,kBAAC,QAAD;OACE,eAAc;OACd,gBAAe;OACf,aAAa;OACb,GAAE;OACF,CAAA;MACE,CAAA;KACF,CAAA;IAEN,kBAAC,KAAD;KAAG,WAAU;eACV,EACC,gCACA,4FACD;KACC,CAAA;IAEH,IACC,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,KAAD;MAAG,WAAU;gBACV,EACC,8BACA,oDACD;MACC,CAAA;KACA,CAAA,GAEN,kBAAC,GAAD;KACE,MAAK;KACL,SAAS;KACT,UAAU;KACV,SAAQ;KACR,MAAK;KACL,WAAU;eAET,IACC,kBAAA,GAAA,EAAA,UAAA,CACE,kBAAC,GAAD,EAAa,WAAU,uBAAwB,CAAA,EAC/C,kBAAC,QAAD,EAAA,UAAM,YAAe,CAAA,CACpB,EAAA,CAAA,GAEH,EAAG,2BAA2B,4BAA4B;KAErD,CAAA;IAGX,kBAAC,UAAD;KACE,MAAK;KACL,SAAS;KACT,WAAU;eAET,EAAG,iCAAiC,kBAAkB;KAChD,CAAA;IACL;;EACK,CAAA"}

package/dist/auth/pages/LoginPage.js

@@ -9,7 +9,7 @@ import { useCaptchaV3 as ie } from "../hooks/useCaptchaV3.js";
 import { MFA_REDIRECT as ae } from "../constants/sessionKeys.js";
 import { useCallback as u, useEffect as d, useRef as oe, useState as f } from "react";
 import { SSORedirectSpinner as se, getSSORedirectUrl as ce } from "@burdenoff/fe-libs/shared/components";
-import { useLocation as le, useNavigate as ue, useSearchParams as de } from "react-router-dom";
+import { useLocation as le, useNavigate as ue, useSearchParams as de } from "react-router";
 import { useActiveContext as fe, useI18n as pe } from "@burdenoff/fe-libs/shared/providers/shell";
 import { Fragment as p, jsx as m, jsxs as h } from "react/jsx-runtime";
 import { beginSsoNavigation as me, buildSsoDepositUrl as he, isSsoNavigationPending as ge, markSsoDepositPending as _e, mintSsoSessionTokens as ve } from "@burdenoff/fe-libs/shared/utils";