@burdenoff/microfe-auth 2026.904.1 → 2026.908.1

package/dist/auth/AuthRoutes.js

@@ -100,7 +100,7 @@ function B({ basePath: e = "", enableAdminRoutes: c = !1, bypassEnterprisePlanGa
 		/* @__PURE__ */ h(f, {
 			path: "signup",
 			element: /* @__PURE__ */ h(d, {
-				to: "register",
+				to: "/auth/register",
 				replace: !0
 			})
 		}),

package/dist/auth/AuthRoutes.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthRoutes.js","names":[],"sources":["../../src/auth/AuthRoutes.tsx"],"sourcesContent":["import { lazy, Suspense, useEffect, useState } from \"react\";\nimport {\n  useFeatureFlagDetails,\n  FeatureGate,\n} from \"@burdenoff/fe-libs/shared/feature-flags\";\nimport { Navigate, Route, Routes } from \"react-router\";\nimport { useAuthStore } from \"./store/authStore\";\n\n// Eager imports - these are the most commonly accessed routes\nimport { LoginPage } from \"./pages/LoginPage\";\nimport { SessionBridgePage } from \"./pages/SessionBridgePage\";\nimport { SSORelayPage } from \"./pages/SSORelayPage\";\nimport { SSORelayCallbackPage } from \"./pages/SSORelayCallbackPage\";\nimport { SSODepositPage } from \"./pages/SSODepositPage\";\nimport { SSOClearPage } from \"./pages/SSOClearPage\";\n\n// Lazy-loaded pages - loaded on demand when their routes are accessed\nconst RegisterPage = lazy(() =>\n  import(\"./pages/RegisterPage\").then((m) => ({ default: m.RegisterPage })),\n);\nconst PasswordResetPage = lazy(() =>\n  import(\"./pages/PasswordResetPage\").then((m) => ({\n    default: m.PasswordResetPage,\n  })),\n);\nconst EmailVerifyPage = lazy(() =>\n  import(\"./pages/EmailVerifyPage\").then((m) => ({\n    default: m.EmailVerifyPage,\n  })),\n);\nconst MfaVerifyPage = lazy(() =>\n  import(\"./pages/MfaVerifyPage\").then((m) => ({ default: m.MfaVerifyPage })),\n);\nconst MagicLinkPage = lazy(() =>\n  import(\"./pages/MagicLinkPage\").then((m) => ({ default: m.MagicLinkPage })),\n);\nconst ReactivatePage = lazy(() =>\n  import(\"./pages/ReactivatePage\").then((m) => ({ default: m.ReactivatePage })),\n);\nconst SecurityPage = lazy(() =>\n  import(\"./pages/SecurityPage\").then((m) => ({ default: m.SecurityPage })),\n);\nconst SessionsPage = lazy(() =>\n  import(\"./pages/SessionsPage\").then((m) => ({ default: m.SessionsPage })),\n);\nconst MfaSetupPage = lazy(() =>\n  import(\"./pages/MfaSetupPage\").then((m) => ({ default: m.MfaSetupPage })),\n);\nconst AuditLogPage = lazy(() =>\n  import(\"./pages/AuditLogPage\").then((m) => ({ default: m.AuditLogPage })),\n);\nconst SsoConfigPage = lazy(() =>\n  import(\"./pages/SsoConfigPage\").then((m) => ({ default: m.SsoConfigPage })),\n);\nconst SsoLoginPage = lazy(() =>\n  import(\"./pages/SsoLoginPage\").then((m) => ({ default: m.SsoLoginPage })),\n);\nconst SsoCallbackPage = lazy(() =>\n  import(\"./pages/SsoCallbackPage\").then((m) => ({\n    default: m.SsoCallbackPage,\n  })),\n);\nconst OAuthCallbackPage = lazy(() =>\n  import(\"./pages/OAuthCallbackPage\").then((m) => ({\n    default: m.OAuthCallbackPage,\n  })),\n);\nconst UsersPage = lazy(() =>\n  import(\"./pages/UsersPage\").then((m) => ({ default: m.UsersPage })),\n);\nconst UserDetailsPage = lazy(() =>\n  import(\"./pages/UserDetailsPage\").then((m) => ({\n    default: m.UserDetailsPage,\n  })),\n);\nconst UserProfilePage = lazy(() =>\n  import(\"./pages/UserProfilePage\").then((m) => ({\n    default: m.UserProfilePage,\n  })),\n);\n/**\n * Simple loading fallback for lazy-loaded pages\n */\nfunction PageLoader() {\n  return (\n    <div className=\"flex min-h-[400px] items-center justify-center\">\n      <div className=\"size-8 animate-spin rounded-full border-4 border-primary border-t-transparent\" />\n    </div>\n  );\n}\n\nfunction decodeJwtExpiry(token: string): number | null {\n  try {\n    const payload = JSON.parse(\n      atob(token.split(\".\")[1].replace(/-/g, \"+\").replace(/_/g, \"/\")),\n    ) as { exp?: number };\n\n    return typeof payload.exp === \"number\" ? payload.exp * 1000 : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction getStoredSessionSnapshot(): {\n  hasValidSession: boolean;\n  expiresAt: number | null;\n} {\n  try {\n    const activeProfileId = sessionStorage.getItem(\"bf-active-profile\");\n    if (!activeProfileId) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    const tokensRaw = localStorage.getItem(`bf-p-${activeProfileId}-tokens`);\n    if (!tokensRaw) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    const tokens = JSON.parse(tokensRaw) as {\n      accessToken?: string;\n      expiresAt?: number;\n    };\n\n    if (!tokens.accessToken) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    const expiresAt =\n      typeof tokens.expiresAt === \"number\"\n        ? tokens.expiresAt\n        : decodeJwtExpiry(tokens.accessToken);\n\n    if (!expiresAt) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    return {\n      hasValidSession: expiresAt > Date.now(),\n      expiresAt,\n    };\n  } catch {\n    return { hasValidSession: false, expiresAt: null };\n  }\n}\n\n/**\n * Protected route wrapper\n */\nfunction ProtectedRoute({ children }: { children: React.ReactNode }) {\n  const isAuthenticated = useAuthStore((state) => state.isAuthenticated);\n  const clearAuth = useAuthStore((state) => state.clearAuth);\n  const [sessionCheckVersion, setSessionCheckVersion] = useState(0);\n  const sessionSnapshot = getStoredSessionSnapshot();\n\n  useEffect(() => {\n    const handleSessionUpdate = () => {\n      setSessionCheckVersion((value) => value + 1);\n    };\n\n    window.addEventListener(\"bf-profile-storage-change\", handleSessionUpdate);\n    window.addEventListener(\"storage\", handleSessionUpdate);\n\n    return () => {\n      window.removeEventListener(\n        \"bf-profile-storage-change\",\n        handleSessionUpdate,\n      );\n      window.removeEventListener(\"storage\", handleSessionUpdate);\n    };\n  }, []);\n\n  useEffect(() => {\n    if (!sessionSnapshot.expiresAt) return;\n\n    const timeoutMs = Math.max(sessionSnapshot.expiresAt - Date.now(), 0) + 50;\n    const timer = window.setTimeout(() => {\n      setSessionCheckVersion((value) => value + 1);\n    }, timeoutMs);\n\n    return () => window.clearTimeout(timer);\n  }, [sessionSnapshot.expiresAt, sessionCheckVersion]);\n\n  useEffect(() => {\n    if (isAuthenticated && !sessionSnapshot.hasValidSession) {\n      clearAuth();\n    }\n  }, [clearAuth, isAuthenticated, sessionSnapshot.hasValidSession]);\n\n  if (!sessionSnapshot.hasValidSession) {\n    return <Navigate to=\"/auth/login\" replace />;\n  }\n\n  return <>{children}</>;\n}\n\n/**\n * Internal router for the Auth microfrontend.\n * This component handles routing within the microfrontend using React Router v7.\n *\n * When used within a parent route (e.g., <Route path=\"/auth/*\">), all paths are relative:\n * - login → Login page (accessible at /auth/login)\n * - register → Registration page (accessible at /auth/register)\n * - reset-password → Password reset page (accessible at /auth/reset-password)\n * - verify-email → Email verification page (accessible at /auth/verify-email)\n * - mfa-verify → MFA verification page (accessible at /auth/mfa-verify)\n * - magic-link → Magic link authentication page (accessible at /auth/magic-link)\n * - sso/login → SSO login page (accessible at /auth/sso/login)\n * - sso/callback → SSO callback handler (accessible at /auth/sso/callback)\n * - oauth/callback → OAuth callback handler (accessible at /auth/oauth/callback)\n * - security → Security settings (protected, accessible at /auth/security)\n * - sessions → Active sessions (protected, accessible at /auth/sessions)\n * - mfa → MFA setup (protected, accessible at /auth/mfa)\n * - users → Users management (protected, admin only, accessible at /auth/users)\n * - profile → User profile page (protected, accessible at /auth/profile)\n * - audit-log → Security audit log (protected, accessible at /auth/audit-log)\n * - sso → SSO configuration (protected, admin only, accessible at /auth/sso)\n */\nexport function AuthRoutes({\n  basePath: _basePath = \"\",\n  // Admin routes (`/auth/users`, `/auth/users/:id`, `/auth/sso`,\n  // `/auth/audit-log`) are opt-in: only the admin app shell should pass\n  // `enableAdminRoutes={true}`. User-facing product hosts (vibecontrols,\n  // workspaces, botlit, healthybowl, etc.) intentionally do not expose\n  // these surfaces — the gateway's RBAC directives still gate the\n  // underlying queries/mutations, but hiding the routes prevents\n  // accidental UI discoverability and reduces the attack surface for\n  // misconfigured permissions.\n  enableAdminRoutes = false,\n  bypassEnterprisePlanGate = false,\n}: {\n  basePath?: string;\n  enableAdminRoutes?: boolean;\n  bypassEnterprisePlanGate?: boolean;\n}) {\n  // Note: basePath is kept for backwards compatibility but not used in route paths\n  // since React Router v7 uses relative paths when nested inside a parent <Route>\n  const auditLogFlag = useFeatureFlagDetails(\"auth.audit-log\");\n  const showAuditLog = auditLogFlag?.value === true;\n  return (\n    <Routes>\n      {/* Public routes (no auth required) */}\n      {/* LoginPage is eager-loaded as it's the most common entry point */}\n      <Route path=\"login\" element={<LoginPage />} />\n      <Route\n        path=\"register\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <RegisterPage />\n          </Suspense>\n        }\n      />\n      {/* \"signup\" is the URL most people guess (it's the term this app's own\n          copy uses — \"Create your account\" / sign up), but the route has\n          always been \"register\" with nothing to catch the alias — it silently\n          rendered a blank page. Redirect rather than rename register itself,\n          since register is the established/linked path. */}\n      <Route path=\"signup\" element={<Navigate to=\"register\" replace />} />\n      <Route\n        path=\"reset-password\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <PasswordResetPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"verify-email\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <EmailVerifyPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"mfa-verify\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <MfaVerifyPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"magic-link\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <MagicLinkPage />\n          </Suspense>\n        }\n      />\n\n      {/* SSO routes (public) */}\n      <Route\n        path=\"sso/login\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <SsoLoginPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"sso/callback\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <SsoCallbackPage />\n          </Suspense>\n        }\n      />\n\n      {/* OAuth callback route (public) */}\n      <Route\n        path=\"oauth/callback\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <OAuthCallbackPage />\n          </Suspense>\n        }\n      />\n\n      {/* Account reactivation (public) */}\n      <Route\n        path=\"reactivate\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <ReactivatePage />\n          </Suspense>\n        }\n      />\n\n      {/* Session bridge (public - embedded as hidden iframe by other app shells) */}\n      <Route path=\"session-bridge\" element={<SessionBridgePage />} />\n\n      {/* Cross-domain SSO relay (reads local tokens, redirects with them to target) */}\n      <Route path=\"sso-relay\" element={<SSORelayPage />} />\n\n      {/* Cross-domain SSO callback (receives tokens from relay, stores locally) */}\n      <Route path=\"sso-callback\" element={<SSORelayCallbackPage />} />\n\n      {/* Cross-domain SSO deposit (bridge host receives tokens on top-level\n          redirect right after login on a product origin, writes first-party\n          localStorage on the bridge origin so other products can discover\n          the session). */}\n      <Route path=\"sso-deposit\" element={<SSODepositPage />} />\n\n      {/* Cross-domain SLO clear (bridge host clears its central session on\n          top-level redirect from a product origin's logout). */}\n      <Route path=\"sso-clear\" element={<SSOClearPage />} />\n\n      {/* Protected routes (auth required) */}\n      <Route\n        path=\"security\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.security\" defaultValue={true}>\n              <Suspense fallback={<PageLoader />}>\n                <SecurityPage enableAdminRoutes={enableAdminRoutes} />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      <Route\n        path=\"sessions\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.sessions\" defaultValue={true}>\n              <Suspense fallback={<PageLoader />}>\n                <SessionsPage />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      <Route\n        path=\"mfa\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.mfa\" defaultValue={true}>\n              <Suspense fallback={<PageLoader />}>\n                <MfaSetupPage />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      {enableAdminRoutes && showAuditLog && (\n        <Route\n          path=\"audit-log\"\n          element={\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.audit-log\" defaultValue={false}>\n                <Suspense fallback={<PageLoader />}>\n                  <AuditLogPage />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          }\n        />\n      )}\n      {!enableAdminRoutes && (\n        <Route\n          path=\"audit-log\"\n          element={<Navigate to=\"/auth/login\" replace />}\n        />\n      )}\n      <Route\n        path=\"sso\"\n        element={\n          enableAdminRoutes ? (\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.sso\" defaultValue={true}>\n                <Suspense fallback={<PageLoader />}>\n                  <SsoConfigPage\n                    bypassEnterprisePlanGate={bypassEnterprisePlanGate}\n                  />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          ) : (\n            <Navigate to=\"/auth/login\" replace />\n          )\n        }\n      />\n      <Route\n        path=\"users\"\n        element={\n          enableAdminRoutes ? (\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.users\" defaultValue={true}>\n                <Suspense fallback={<PageLoader />}>\n                  <UsersPage />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          ) : (\n            <Navigate to=\"/auth/login\" replace />\n          )\n        }\n      />\n      <Route\n        path=\"users/:id\"\n        element={\n          enableAdminRoutes ? (\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.users\" defaultValue={true}>\n                <Suspense fallback={<PageLoader />}>\n                  <UserDetailsPage />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          ) : (\n            <Navigate to=\"/auth/login\" replace />\n          )\n        }\n      />\n      <Route\n        path=\"profile\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.profile\" defaultValue={true}>\n              <Suspense fallback={<PageLoader />}>\n                <UserProfilePage />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n\n      {/* Default redirect - when visiting /auth or /auth/ with no subpath */}\n      <Route index element={<Navigate to=\"login\" replace />} />\n    </Routes>\n  );\n}\n"],"mappings":";;;;;;;;;;;;AAiBA,IAAM,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAoB,QACxB,OAAO,gCAA6B,MAAM,OAAO,EAC/C,SAAS,EAAE,mBACZ,EAAE,CACJ,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ,EACK,IAAgB,QACpB,OAAO,4BAAyB,MAAM,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAC5E,EACK,IAAgB,QACpB,OAAO,4BAAyB,MAAM,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAC5E,EACK,IAAiB,QACrB,OAAO,6BAA0B,MAAM,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAC9E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAgB,QACpB,OAAO,4BAAyB,MAAM,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAC5E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ,EACK,IAAoB,QACxB,OAAO,gCAA6B,MAAM,OAAO,EAC/C,SAAS,EAAE,mBACZ,EAAE,CACJ,EACK,IAAY,QAChB,OAAO,wBAAqB,MAAM,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CACpE,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ;AAID,SAAS,IAAa;AACpB,QACE,kBAAC,OAAD;EAAK,WAAU;YACb,kBAAC,OAAD,EAAK,WAAU,iFAAkF,CAAA;EAC7F,CAAA;;AAIV,SAAS,EAAgB,GAA8B;AACrD,KAAI;EACF,IAAM,IAAU,KAAK,MACnB,KAAK,EAAM,MAAM,IAAI,CAAC,GAAG,QAAQ,MAAM,IAAI,CAAC,QAAQ,MAAM,IAAI,CAAC,CAChE;AAED,SAAO,OAAO,EAAQ,OAAQ,WAAW,EAAQ,MAAM,MAAO;SACxD;AACN,SAAO;;;AAIX,SAAS,IAGP;AACA,KAAI;EACF,IAAM,IAAkB,eAAe,QAAQ,oBAAoB;AACnE,MAAI,CAAC,EACH,QAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;EAGpD,IAAM,IAAY,aAAa,QAAQ,QAAQ,EAAgB,SAAS;AACxE,MAAI,CAAC,EACH,QAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;EAGpD,IAAM,IAAS,KAAK,MAAM,EAAU;AAKpC,MAAI,CAAC,EAAO,YACV,QAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;EAGpD,IAAM,IACJ,OAAO,EAAO,aAAc,WACxB,EAAO,YACP,EAAgB,EAAO,YAAY;AAMzC,SAJK,IAIE;GACL,iBAAiB,IAAY,KAAK,KAAK;GACvC;GACD,GANQ;GAAE,iBAAiB;GAAO,WAAW;GAAM;SAO9C;AACN,SAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;;;AAOtD,SAAS,EAAe,EAAE,eAA2C;CACnE,IAAM,IAAkB,GAAc,MAAU,EAAM,gBAAgB,EAChE,IAAY,GAAc,MAAU,EAAM,UAAU,EACpD,CAAC,GAAqB,KAA0B,EAAS,EAAE,EAC3D,IAAkB,GAA0B;AAwClD,QAtCA,QAAgB;EACd,IAAM,UAA4B;AAChC,MAAwB,MAAU,IAAQ,EAAE;;AAM9C,SAHA,OAAO,iBAAiB,6BAA6B,EAAoB,EACzE,OAAO,iBAAiB,WAAW,EAAoB,QAE1C;AAKX,GAJA,OAAO,oBACL,6BACA,EACD,EACD,OAAO,oBAAoB,WAAW,EAAoB;;IAE3D,EAAE,CAAC,EAEN,QAAgB;AACd,MAAI,CAAC,EAAgB,UAAW;EAEhC,IAAM,IAAY,KAAK,IAAI,EAAgB,YAAY,KAAK,KAAK,EAAE,EAAE,GAAG,IAClE,IAAQ,OAAO,iBAAiB;AACpC,MAAwB,MAAU,IAAQ,EAAE;KAC3C,EAAU;AAEb,eAAa,OAAO,aAAa,EAAM;IACtC,CAAC,EAAgB,WAAW,EAAoB,CAAC,EAEpD,QAAgB;AACd,EAAI,KAAmB,CAAC,EAAgB,mBACtC,GAAW;IAEZ;EAAC;EAAW;EAAiB,EAAgB;EAAgB,CAAC,EAE5D,EAAgB,kBAId,kBAAA,GAAA,EAAG,aAAY,CAAA,GAHb,kBAAC,GAAD;EAAU,IAAG;EAAc,SAAA;EAAU,CAAA;;AA4BhD,SAAgB,EAAW,EACzB,UAAU,IAAY,IAStB,uBAAoB,IACpB,8BAA2B,MAK1B;CAID,IAAM,IADe,EAAsB,iBAAiB,EACzB,UAAU;AAC7C,QACE,kBAAC,GAAD,EAAA,UAAA;EAGE,kBAAC,GAAD;GAAO,MAAK;GAAQ,SAAS,kBAAC,GAAD,EAAa,CAAA;GAAI,CAAA;EAC9C,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAgB,CAAA;IACP,CAAA;GAEb,CAAA;EAMF,kBAAC,GAAD;GAAO,MAAK;GAAS,SAAS,kBAAC,GAAD;IAAU,IAAG;IAAW,SAAA;IAAU,CAAA;GAAI,CAAA;EACpE,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAqB,CAAA;IACZ,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAmB,CAAA;IACV,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAiB,CAAA;IACR,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAiB,CAAA;IACR,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAgB,CAAA;IACP,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAmB,CAAA;IACV,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAqB,CAAA;IACZ,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAkB,CAAA;IACT,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GAAO,MAAK;GAAiB,SAAS,kBAAC,GAAD,EAAqB,CAAA;GAAI,CAAA;EAG/D,kBAAC,GAAD;GAAO,MAAK;GAAY,SAAS,kBAAC,GAAD,EAAgB,CAAA;GAAI,CAAA;EAGrD,kBAAC,GAAD;GAAO,MAAK;GAAe,SAAS,kBAAC,GAAD,EAAwB,CAAA;GAAI,CAAA;EAMhE,kBAAC,GAAD;GAAO,MAAK;GAAc,SAAS,kBAAC,GAAD,EAAkB,CAAA;GAAI,CAAA;EAIzD,kBAAC,GAAD;GAAO,MAAK;GAAY,SAAS,kBAAC,GAAD,EAAgB,CAAA;GAAI,CAAA;EAGrD,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAgB,cAAc;cAC9C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAiC,sBAAqB,CAAA;KAC7C,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAgB,cAAc;cAC9C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAgB,CAAA;KACP,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAW,cAAc;cACzC,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAgB,CAAA;KACP,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EACD,KAAqB,KACpB,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAiB,cAAc;cAC/C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAgB,CAAA;KACP,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EAEH,CAAC,KACA,kBAAC,GAAD;GACE,MAAK;GACL,SAAS,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAC9C,CAAA;EAEJ,kBAAC,GAAD;GACE,MAAK;GACL,SACE,IACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAW,cAAc;cACzC,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAC4B,6BAC1B,CAAA;KACO,CAAA;IACC,CAAA,EACC,CAAA,GAEjB,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAGzC,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,IACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAa,cAAc;cAC3C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAa,CAAA;KACJ,CAAA;IACC,CAAA,EACC,CAAA,GAEjB,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAGzC,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,IACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAa,cAAc;cAC3C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAmB,CAAA;KACV,CAAA;IACC,CAAA,EACC,CAAA,GAEjB,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAGzC,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAe,cAAc;cAC7C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAmB,CAAA;KACV,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EAGF,kBAAC,GAAD;GAAO,OAAA;GAAM,SAAS,kBAAC,GAAD;IAAU,IAAG;IAAQ,SAAA;IAAU,CAAA;GAAI,CAAA;EAClD,EAAA,CAAA"}
+{"version":3,"file":"AuthRoutes.js","names":[],"sources":["../../src/auth/AuthRoutes.tsx"],"sourcesContent":["import { lazy, Suspense, useEffect, useState } from \"react\";\nimport {\n  useFeatureFlagDetails,\n  FeatureGate,\n} from \"@burdenoff/fe-libs/shared/feature-flags\";\nimport { Navigate, Route, Routes } from \"react-router\";\nimport { useAuthStore } from \"./store/authStore\";\n\n// Eager imports - these are the most commonly accessed routes\nimport { LoginPage } from \"./pages/LoginPage\";\nimport { SessionBridgePage } from \"./pages/SessionBridgePage\";\nimport { SSORelayPage } from \"./pages/SSORelayPage\";\nimport { SSORelayCallbackPage } from \"./pages/SSORelayCallbackPage\";\nimport { SSODepositPage } from \"./pages/SSODepositPage\";\nimport { SSOClearPage } from \"./pages/SSOClearPage\";\n\n// Lazy-loaded pages - loaded on demand when their routes are accessed\nconst RegisterPage = lazy(() =>\n  import(\"./pages/RegisterPage\").then((m) => ({ default: m.RegisterPage })),\n);\nconst PasswordResetPage = lazy(() =>\n  import(\"./pages/PasswordResetPage\").then((m) => ({\n    default: m.PasswordResetPage,\n  })),\n);\nconst EmailVerifyPage = lazy(() =>\n  import(\"./pages/EmailVerifyPage\").then((m) => ({\n    default: m.EmailVerifyPage,\n  })),\n);\nconst MfaVerifyPage = lazy(() =>\n  import(\"./pages/MfaVerifyPage\").then((m) => ({ default: m.MfaVerifyPage })),\n);\nconst MagicLinkPage = lazy(() =>\n  import(\"./pages/MagicLinkPage\").then((m) => ({ default: m.MagicLinkPage })),\n);\nconst ReactivatePage = lazy(() =>\n  import(\"./pages/ReactivatePage\").then((m) => ({ default: m.ReactivatePage })),\n);\nconst SecurityPage = lazy(() =>\n  import(\"./pages/SecurityPage\").then((m) => ({ default: m.SecurityPage })),\n);\nconst SessionsPage = lazy(() =>\n  import(\"./pages/SessionsPage\").then((m) => ({ default: m.SessionsPage })),\n);\nconst MfaSetupPage = lazy(() =>\n  import(\"./pages/MfaSetupPage\").then((m) => ({ default: m.MfaSetupPage })),\n);\nconst AuditLogPage = lazy(() =>\n  import(\"./pages/AuditLogPage\").then((m) => ({ default: m.AuditLogPage })),\n);\nconst SsoConfigPage = lazy(() =>\n  import(\"./pages/SsoConfigPage\").then((m) => ({ default: m.SsoConfigPage })),\n);\nconst SsoLoginPage = lazy(() =>\n  import(\"./pages/SsoLoginPage\").then((m) => ({ default: m.SsoLoginPage })),\n);\nconst SsoCallbackPage = lazy(() =>\n  import(\"./pages/SsoCallbackPage\").then((m) => ({\n    default: m.SsoCallbackPage,\n  })),\n);\nconst OAuthCallbackPage = lazy(() =>\n  import(\"./pages/OAuthCallbackPage\").then((m) => ({\n    default: m.OAuthCallbackPage,\n  })),\n);\nconst UsersPage = lazy(() =>\n  import(\"./pages/UsersPage\").then((m) => ({ default: m.UsersPage })),\n);\nconst UserDetailsPage = lazy(() =>\n  import(\"./pages/UserDetailsPage\").then((m) => ({\n    default: m.UserDetailsPage,\n  })),\n);\nconst UserProfilePage = lazy(() =>\n  import(\"./pages/UserProfilePage\").then((m) => ({\n    default: m.UserProfilePage,\n  })),\n);\n/**\n * Simple loading fallback for lazy-loaded pages\n */\nfunction PageLoader() {\n  return (\n    <div className=\"flex min-h-[400px] items-center justify-center\">\n      <div className=\"size-8 animate-spin rounded-full border-4 border-primary border-t-transparent\" />\n    </div>\n  );\n}\n\nfunction decodeJwtExpiry(token: string): number | null {\n  try {\n    const payload = JSON.parse(\n      atob(token.split(\".\")[1].replace(/-/g, \"+\").replace(/_/g, \"/\")),\n    ) as { exp?: number };\n\n    return typeof payload.exp === \"number\" ? payload.exp * 1000 : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction getStoredSessionSnapshot(): {\n  hasValidSession: boolean;\n  expiresAt: number | null;\n} {\n  try {\n    const activeProfileId = sessionStorage.getItem(\"bf-active-profile\");\n    if (!activeProfileId) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    const tokensRaw = localStorage.getItem(`bf-p-${activeProfileId}-tokens`);\n    if (!tokensRaw) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    const tokens = JSON.parse(tokensRaw) as {\n      accessToken?: string;\n      expiresAt?: number;\n    };\n\n    if (!tokens.accessToken) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    const expiresAt =\n      typeof tokens.expiresAt === \"number\"\n        ? tokens.expiresAt\n        : decodeJwtExpiry(tokens.accessToken);\n\n    if (!expiresAt) {\n      return { hasValidSession: false, expiresAt: null };\n    }\n\n    return {\n      hasValidSession: expiresAt > Date.now(),\n      expiresAt,\n    };\n  } catch {\n    return { hasValidSession: false, expiresAt: null };\n  }\n}\n\n/**\n * Protected route wrapper\n */\nfunction ProtectedRoute({ children }: { children: React.ReactNode }) {\n  const isAuthenticated = useAuthStore((state) => state.isAuthenticated);\n  const clearAuth = useAuthStore((state) => state.clearAuth);\n  const [sessionCheckVersion, setSessionCheckVersion] = useState(0);\n  const sessionSnapshot = getStoredSessionSnapshot();\n\n  useEffect(() => {\n    const handleSessionUpdate = () => {\n      setSessionCheckVersion((value) => value + 1);\n    };\n\n    window.addEventListener(\"bf-profile-storage-change\", handleSessionUpdate);\n    window.addEventListener(\"storage\", handleSessionUpdate);\n\n    return () => {\n      window.removeEventListener(\n        \"bf-profile-storage-change\",\n        handleSessionUpdate,\n      );\n      window.removeEventListener(\"storage\", handleSessionUpdate);\n    };\n  }, []);\n\n  useEffect(() => {\n    if (!sessionSnapshot.expiresAt) return;\n\n    const timeoutMs = Math.max(sessionSnapshot.expiresAt - Date.now(), 0) + 50;\n    const timer = window.setTimeout(() => {\n      setSessionCheckVersion((value) => value + 1);\n    }, timeoutMs);\n\n    return () => window.clearTimeout(timer);\n  }, [sessionSnapshot.expiresAt, sessionCheckVersion]);\n\n  useEffect(() => {\n    if (isAuthenticated && !sessionSnapshot.hasValidSession) {\n      clearAuth();\n    }\n  }, [clearAuth, isAuthenticated, sessionSnapshot.hasValidSession]);\n\n  if (!sessionSnapshot.hasValidSession) {\n    return <Navigate to=\"/auth/login\" replace />;\n  }\n\n  return <>{children}</>;\n}\n\n/**\n * Internal router for the Auth microfrontend.\n * This component handles routing within the microfrontend using React Router v7.\n *\n * When used within a parent route (e.g., <Route path=\"/auth/*\">), all paths are relative:\n * - login → Login page (accessible at /auth/login)\n * - register → Registration page (accessible at /auth/register)\n * - reset-password → Password reset page (accessible at /auth/reset-password)\n * - verify-email → Email verification page (accessible at /auth/verify-email)\n * - mfa-verify → MFA verification page (accessible at /auth/mfa-verify)\n * - magic-link → Magic link authentication page (accessible at /auth/magic-link)\n * - sso/login → SSO login page (accessible at /auth/sso/login)\n * - sso/callback → SSO callback handler (accessible at /auth/sso/callback)\n * - oauth/callback → OAuth callback handler (accessible at /auth/oauth/callback)\n * - security → Security settings (protected, accessible at /auth/security)\n * - sessions → Active sessions (protected, accessible at /auth/sessions)\n * - mfa → MFA setup (protected, accessible at /auth/mfa)\n * - users → Users management (protected, admin only, accessible at /auth/users)\n * - profile → User profile page (protected, accessible at /auth/profile)\n * - audit-log → Security audit log (protected, accessible at /auth/audit-log)\n * - sso → SSO configuration (protected, admin only, accessible at /auth/sso)\n */\nexport function AuthRoutes({\n  basePath: _basePath = \"\",\n  // Admin routes (`/auth/users`, `/auth/users/:id`, `/auth/sso`,\n  // `/auth/audit-log`) are opt-in: only the admin app shell should pass\n  // `enableAdminRoutes={true}`. User-facing product hosts (vibecontrols,\n  // workspaces, botlit, healthybowl, etc.) intentionally do not expose\n  // these surfaces — the gateway's RBAC directives still gate the\n  // underlying queries/mutations, but hiding the routes prevents\n  // accidental UI discoverability and reduces the attack surface for\n  // misconfigured permissions.\n  enableAdminRoutes = false,\n  bypassEnterprisePlanGate = false,\n}: {\n  basePath?: string;\n  enableAdminRoutes?: boolean;\n  bypassEnterprisePlanGate?: boolean;\n}) {\n  // Note: basePath is kept for backwards compatibility but not used in route paths\n  // since React Router v7 uses relative paths when nested inside a parent <Route>\n  const auditLogFlag = useFeatureFlagDetails(\"auth.audit-log\");\n  const showAuditLog = auditLogFlag?.value === true;\n  return (\n    <Routes>\n      {/* Public routes (no auth required) */}\n      {/* LoginPage is eager-loaded as it's the most common entry point */}\n      <Route path=\"login\" element={<LoginPage />} />\n      <Route\n        path=\"register\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <RegisterPage />\n          </Suspense>\n        }\n      />\n      {/* \"signup\" is the URL most people guess (it's the term this app's own\n          copy uses — \"Create your account\" / sign up), but the route has\n          always been \"register\" with nothing to catch the alias — it silently\n          rendered a blank page. Redirect rather than rename register itself,\n          since register is the established/linked path. */}\n      <Route path=\"signup\" element={<Navigate to=\"/auth/register\" replace />} />\n      <Route\n        path=\"reset-password\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <PasswordResetPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"verify-email\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <EmailVerifyPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"mfa-verify\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <MfaVerifyPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"magic-link\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <MagicLinkPage />\n          </Suspense>\n        }\n      />\n\n      {/* SSO routes (public) */}\n      <Route\n        path=\"sso/login\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <SsoLoginPage />\n          </Suspense>\n        }\n      />\n      <Route\n        path=\"sso/callback\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <SsoCallbackPage />\n          </Suspense>\n        }\n      />\n\n      {/* OAuth callback route (public) */}\n      <Route\n        path=\"oauth/callback\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <OAuthCallbackPage />\n          </Suspense>\n        }\n      />\n\n      {/* Account reactivation (public) */}\n      <Route\n        path=\"reactivate\"\n        element={\n          <Suspense fallback={<PageLoader />}>\n            <ReactivatePage />\n          </Suspense>\n        }\n      />\n\n      {/* Session bridge (public - embedded as hidden iframe by other app shells) */}\n      <Route path=\"session-bridge\" element={<SessionBridgePage />} />\n\n      {/* Cross-domain SSO relay (reads local tokens, redirects with them to target) */}\n      <Route path=\"sso-relay\" element={<SSORelayPage />} />\n\n      {/* Cross-domain SSO callback (receives tokens from relay, stores locally) */}\n      <Route path=\"sso-callback\" element={<SSORelayCallbackPage />} />\n\n      {/* Cross-domain SSO deposit (bridge host receives tokens on top-level\n          redirect right after login on a product origin, writes first-party\n          localStorage on the bridge origin so other products can discover\n          the session). */}\n      <Route path=\"sso-deposit\" element={<SSODepositPage />} />\n\n      {/* Cross-domain SLO clear (bridge host clears its central session on\n          top-level redirect from a product origin's logout). */}\n      <Route path=\"sso-clear\" element={<SSOClearPage />} />\n\n      {/* Protected routes (auth required) */}\n      <Route\n        path=\"security\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.security\" defaultValue={true}>\n              <Suspense fallback={<PageLoader />}>\n                <SecurityPage enableAdminRoutes={enableAdminRoutes} />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      <Route\n        path=\"sessions\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.sessions\" defaultValue={true}>\n              <Suspense fallback={<PageLoader />}>\n                <SessionsPage />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      <Route\n        path=\"mfa\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.mfa\" defaultValue={true}>\n              <Suspense fallback={<PageLoader />}>\n                <MfaSetupPage />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n      {enableAdminRoutes && showAuditLog && (\n        <Route\n          path=\"audit-log\"\n          element={\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.audit-log\" defaultValue={false}>\n                <Suspense fallback={<PageLoader />}>\n                  <AuditLogPage />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          }\n        />\n      )}\n      {!enableAdminRoutes && (\n        <Route\n          path=\"audit-log\"\n          element={<Navigate to=\"/auth/login\" replace />}\n        />\n      )}\n      <Route\n        path=\"sso\"\n        element={\n          enableAdminRoutes ? (\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.sso\" defaultValue={true}>\n                <Suspense fallback={<PageLoader />}>\n                  <SsoConfigPage\n                    bypassEnterprisePlanGate={bypassEnterprisePlanGate}\n                  />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          ) : (\n            <Navigate to=\"/auth/login\" replace />\n          )\n        }\n      />\n      <Route\n        path=\"users\"\n        element={\n          enableAdminRoutes ? (\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.users\" defaultValue={true}>\n                <Suspense fallback={<PageLoader />}>\n                  <UsersPage />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          ) : (\n            <Navigate to=\"/auth/login\" replace />\n          )\n        }\n      />\n      <Route\n        path=\"users/:id\"\n        element={\n          enableAdminRoutes ? (\n            <ProtectedRoute>\n              <FeatureGate flag=\"auth.users\" defaultValue={true}>\n                <Suspense fallback={<PageLoader />}>\n                  <UserDetailsPage />\n                </Suspense>\n              </FeatureGate>\n            </ProtectedRoute>\n          ) : (\n            <Navigate to=\"/auth/login\" replace />\n          )\n        }\n      />\n      <Route\n        path=\"profile\"\n        element={\n          <ProtectedRoute>\n            <FeatureGate flag=\"auth.profile\" defaultValue={true}>\n              <Suspense fallback={<PageLoader />}>\n                <UserProfilePage />\n              </Suspense>\n            </FeatureGate>\n          </ProtectedRoute>\n        }\n      />\n\n      {/* Default redirect - when visiting /auth or /auth/ with no subpath */}\n      <Route index element={<Navigate to=\"login\" replace />} />\n    </Routes>\n  );\n}\n"],"mappings":";;;;;;;;;;;;AAiBA,IAAM,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAoB,QACxB,OAAO,gCAA6B,MAAM,OAAO,EAC/C,SAAS,EAAE,mBACZ,EAAE,CACJ,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ,EACK,IAAgB,QACpB,OAAO,4BAAyB,MAAM,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAC5E,EACK,IAAgB,QACpB,OAAO,4BAAyB,MAAM,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAC5E,EACK,IAAiB,QACrB,OAAO,6BAA0B,MAAM,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAC9E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAgB,QACpB,OAAO,4BAAyB,MAAM,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAC5E,EACK,IAAe,QACnB,OAAO,2BAAwB,MAAM,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAC1E,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ,EACK,IAAoB,QACxB,OAAO,gCAA6B,MAAM,OAAO,EAC/C,SAAS,EAAE,mBACZ,EAAE,CACJ,EACK,IAAY,QAChB,OAAO,wBAAqB,MAAM,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CACpE,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ,EACK,IAAkB,QACtB,OAAO,8BAA2B,MAAM,OAAO,EAC7C,SAAS,EAAE,iBACZ,EAAE,CACJ;AAID,SAAS,IAAa;AACpB,QACE,kBAAC,OAAD;EAAK,WAAU;YACb,kBAAC,OAAD,EAAK,WAAU,iFAAkF,CAAA;EAC7F,CAAA;;AAIV,SAAS,EAAgB,GAA8B;AACrD,KAAI;EACF,IAAM,IAAU,KAAK,MACnB,KAAK,EAAM,MAAM,IAAI,CAAC,GAAG,QAAQ,MAAM,IAAI,CAAC,QAAQ,MAAM,IAAI,CAAC,CAChE;AAED,SAAO,OAAO,EAAQ,OAAQ,WAAW,EAAQ,MAAM,MAAO;SACxD;AACN,SAAO;;;AAIX,SAAS,IAGP;AACA,KAAI;EACF,IAAM,IAAkB,eAAe,QAAQ,oBAAoB;AACnE,MAAI,CAAC,EACH,QAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;EAGpD,IAAM,IAAY,aAAa,QAAQ,QAAQ,EAAgB,SAAS;AACxE,MAAI,CAAC,EACH,QAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;EAGpD,IAAM,IAAS,KAAK,MAAM,EAAU;AAKpC,MAAI,CAAC,EAAO,YACV,QAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;EAGpD,IAAM,IACJ,OAAO,EAAO,aAAc,WACxB,EAAO,YACP,EAAgB,EAAO,YAAY;AAMzC,SAJK,IAIE;GACL,iBAAiB,IAAY,KAAK,KAAK;GACvC;GACD,GANQ;GAAE,iBAAiB;GAAO,WAAW;GAAM;SAO9C;AACN,SAAO;GAAE,iBAAiB;GAAO,WAAW;GAAM;;;AAOtD,SAAS,EAAe,EAAE,eAA2C;CACnE,IAAM,IAAkB,GAAc,MAAU,EAAM,gBAAgB,EAChE,IAAY,GAAc,MAAU,EAAM,UAAU,EACpD,CAAC,GAAqB,KAA0B,EAAS,EAAE,EAC3D,IAAkB,GAA0B;AAwClD,QAtCA,QAAgB;EACd,IAAM,UAA4B;AAChC,MAAwB,MAAU,IAAQ,EAAE;;AAM9C,SAHA,OAAO,iBAAiB,6BAA6B,EAAoB,EACzE,OAAO,iBAAiB,WAAW,EAAoB,QAE1C;AAKX,GAJA,OAAO,oBACL,6BACA,EACD,EACD,OAAO,oBAAoB,WAAW,EAAoB;;IAE3D,EAAE,CAAC,EAEN,QAAgB;AACd,MAAI,CAAC,EAAgB,UAAW;EAEhC,IAAM,IAAY,KAAK,IAAI,EAAgB,YAAY,KAAK,KAAK,EAAE,EAAE,GAAG,IAClE,IAAQ,OAAO,iBAAiB;AACpC,MAAwB,MAAU,IAAQ,EAAE;KAC3C,EAAU;AAEb,eAAa,OAAO,aAAa,EAAM;IACtC,CAAC,EAAgB,WAAW,EAAoB,CAAC,EAEpD,QAAgB;AACd,EAAI,KAAmB,CAAC,EAAgB,mBACtC,GAAW;IAEZ;EAAC;EAAW;EAAiB,EAAgB;EAAgB,CAAC,EAE5D,EAAgB,kBAId,kBAAA,GAAA,EAAG,aAAY,CAAA,GAHb,kBAAC,GAAD;EAAU,IAAG;EAAc,SAAA;EAAU,CAAA;;AA4BhD,SAAgB,EAAW,EACzB,UAAU,IAAY,IAStB,uBAAoB,IACpB,8BAA2B,MAK1B;CAID,IAAM,IADe,EAAsB,iBAAiB,EACzB,UAAU;AAC7C,QACE,kBAAC,GAAD,EAAA,UAAA;EAGE,kBAAC,GAAD;GAAO,MAAK;GAAQ,SAAS,kBAAC,GAAD,EAAa,CAAA;GAAI,CAAA;EAC9C,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAgB,CAAA;IACP,CAAA;GAEb,CAAA;EAMF,kBAAC,GAAD;GAAO,MAAK;GAAS,SAAS,kBAAC,GAAD;IAAU,IAAG;IAAiB,SAAA;IAAU,CAAA;GAAI,CAAA;EAC1E,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAqB,CAAA;IACZ,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAmB,CAAA;IACV,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAiB,CAAA;IACR,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAiB,CAAA;IACR,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAgB,CAAA;IACP,CAAA;GAEb,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAmB,CAAA;IACV,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAqB,CAAA;IACZ,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD;IAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;cAChC,kBAAC,GAAD,EAAkB,CAAA;IACT,CAAA;GAEb,CAAA;EAGF,kBAAC,GAAD;GAAO,MAAK;GAAiB,SAAS,kBAAC,GAAD,EAAqB,CAAA;GAAI,CAAA;EAG/D,kBAAC,GAAD;GAAO,MAAK;GAAY,SAAS,kBAAC,GAAD,EAAgB,CAAA;GAAI,CAAA;EAGrD,kBAAC,GAAD;GAAO,MAAK;GAAe,SAAS,kBAAC,GAAD,EAAwB,CAAA;GAAI,CAAA;EAMhE,kBAAC,GAAD;GAAO,MAAK;GAAc,SAAS,kBAAC,GAAD,EAAkB,CAAA;GAAI,CAAA;EAIzD,kBAAC,GAAD;GAAO,MAAK;GAAY,SAAS,kBAAC,GAAD,EAAgB,CAAA;GAAI,CAAA;EAGrD,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAgB,cAAc;cAC9C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAiC,sBAAqB,CAAA;KAC7C,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAgB,cAAc;cAC9C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAgB,CAAA;KACP,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAW,cAAc;cACzC,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAgB,CAAA;KACP,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EACD,KAAqB,KACpB,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAiB,cAAc;cAC/C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAgB,CAAA;KACP,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EAEH,CAAC,KACA,kBAAC,GAAD;GACE,MAAK;GACL,SAAS,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAC9C,CAAA;EAEJ,kBAAC,GAAD;GACE,MAAK;GACL,SACE,IACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAW,cAAc;cACzC,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAC4B,6BAC1B,CAAA;KACO,CAAA;IACC,CAAA,EACC,CAAA,GAEjB,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAGzC,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,IACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAa,cAAc;cAC3C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAa,CAAA;KACJ,CAAA;IACC,CAAA,EACC,CAAA,GAEjB,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAGzC,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,IACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAa,cAAc;cAC3C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAmB,CAAA;KACV,CAAA;IACC,CAAA,EACC,CAAA,GAEjB,kBAAC,GAAD;IAAU,IAAG;IAAc,SAAA;IAAU,CAAA;GAGzC,CAAA;EACF,kBAAC,GAAD;GACE,MAAK;GACL,SACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;IAAa,MAAK;IAAe,cAAc;cAC7C,kBAAC,GAAD;KAAU,UAAU,kBAAC,GAAD,EAAc,CAAA;eAChC,kBAAC,GAAD,EAAmB,CAAA;KACV,CAAA;IACC,CAAA,EACC,CAAA;GAEnB,CAAA;EAGF,kBAAC,GAAD;GAAO,OAAA;GAAM,SAAS,kBAAC,GAAD;IAAU,IAAG;IAAQ,SAAA;IAAU,CAAA;GAAI,CAAA;EAClD,EAAA,CAAA"}

package/dist/auth/pages/RegisterPage.js

@@ -3,135 +3,136 @@ import { useTr as t } from "../../shared/hooks/useTr.js";
 import { useAuthOperations as n } from "../hooks/useAuthOperations.js";
 import { useOAuthOperations as ee } from "../hooks/useOAuthOperations.js";
 import { AuthLayout as r } from "../components/AuthLayout.js";
-import { AlertIcon as i, CheckIcon as te, EmailIcon as a, EyeIcon as ne, EyeOffIcon as o, GitHubIcon as re, GoogleIcon as ie, LockIcon as s, MicrosoftIcon as c, SpinnerIcon as l, UserIcon as u, XIcon as d } from "../components/AuthIcons.js";
-import { validateEmail as f, validatePassword as p } from "../utils/validation.js";
+import { AlertIcon as i, CheckIcon as te, EmailIcon as a, EyeIcon as o, EyeOffIcon as s, GitHubIcon as ne, GoogleIcon as re, LockIcon as c, MicrosoftIcon as l, SpinnerIcon as u, UserIcon as d, XIcon as f } from "../components/AuthIcons.js";
+import { validateEmail as p, validatePassword as ie } from "../utils/validation.js";
+import { resolveLegalUrl as m } from "../utils/legalUrls.js";
 import { CaptchaV2 as ae } from "../components/CaptchaV2.js";
 import { useSignupCaptcha as oe } from "../hooks/useSignupCaptcha.js";
-import { useState as m } from "react";
-import { useNavigate as se } from "react-router";
-import { Fragment as ce, jsx as h, jsxs as g } from "react/jsx-runtime";
-import { Button as _ } from "@burdenoff/fe-libs/button";
-import { PagePurpose as le } from "@burdenoff/fe-libs/ui";
+import { useState as h } from "react";
+import { useNavigate as g } from "react-router";
+import { Fragment as se, jsx as _, jsxs as v } from "react/jsx-runtime";
+import { Button as y } from "@burdenoff/fe-libs/button";
+import { PagePurpose as ce } from "@burdenoff/fe-libs/ui";
 //#region src/auth/pages/RegisterPage.tsx
-function v() {
-	let v = t(), { productName: y } = e(), b = se(), { signUp: x, resendVerification: S, isLoading: C, errorCode: w } = n(), { initiateGoogleOAuth: ue, initiateMicrosoftOAuth: de, isProviderConfigured: T } = ee(), [E, fe] = m(!1), [D, O] = m({
+function b() {
+	let b = t(), { productName: x } = e(), S = g(), { signUp: C, resendVerification: le, isLoading: w, errorCode: T } = n(), { initiateGoogleOAuth: ue, initiateMicrosoftOAuth: de, isProviderConfigured: E } = ee(), [D, fe] = h(!1), [O, k] = h({
 		email: "",
 		username: "",
 		password: "",
 		firstName: "",
 		lastName: ""
-	}), [k, A] = m([]), [j, M] = m(!1), [N, P] = m(null), [F, I] = m(null), [L, R] = m(null), [z, B] = m(0), { enabled: V, siteKey: pe } = oe(), [H, U] = m(!1), [W, G] = m(null), K = !!N && w === "ACCOUNT_DEACTIVATED", q = !!N && w === "ACCOUNT_REMOVED", J = !!N && w === "ACCOUNT_SUSPENDED", Y = (() => {
-		let e = D.password;
+	}), [A, j] = h([]), [M, N] = h(!1), [P, F] = h(null), [I, L] = h(null), [R, z] = h(null), [B, V] = h(0), { enabled: H, siteKey: pe } = oe(), [U, W] = h(!1), [G, K] = h(null), q = !!P && T === "ACCOUNT_DEACTIVATED", J = !!P && T === "ACCOUNT_REMOVED", Y = !!P && T === "ACCOUNT_SUSPENDED", X = (() => {
+		let e = O.password;
 		return [
 			{
-				label: v("auth.register.pwMin8", "At least 12 characters"),
+				label: b("auth.register.pwMin8", "At least 12 characters"),
 				met: e.length >= 12
 			},
 			{
-				label: v("auth.register.pwUppercase", "One uppercase letter"),
+				label: b("auth.register.pwUppercase", "One uppercase letter"),
 				met: /[A-Z]/.test(e)
 			},
 			{
-				label: v("auth.register.pwLowercase", "One lowercase letter"),
+				label: b("auth.register.pwLowercase", "One lowercase letter"),
 				met: /[a-z]/.test(e)
 			},
 			{
-				label: v("auth.register.pwNumber", "One number"),
+				label: b("auth.register.pwNumber", "One number"),
 				met: /\d/.test(e)
 			},
 			{
-				label: v("auth.register.pwSpecial", "One special character"),
+				label: b("auth.register.pwSpecial", "One special character"),
 				met: /[!@#$%^&*(),.?":{}|<>]/.test(e)
 			}
 		];
-	})(), X = (() => {
-		let e = Y.filter((e) => e.met).length;
+	})(), Z = (() => {
+		let e = X.filter((e) => e.met).length;
 		return e <= 2 ? {
-			level: v("auth.register.passwordStrengthWeak", "weak"),
+			level: b("auth.register.passwordStrengthWeak", "weak"),
 			color: "bg-status-error-bg-subtle0",
 			width: "w-1/4"
 		} : e <= 3 ? {
-			level: v("auth.register.passwordStrengthFair", "fair"),
+			level: b("auth.register.passwordStrengthFair", "fair"),
 			color: "bg-status-warning-text",
 			width: "w-2/4"
 		} : e <= 4 ? {
-			level: v("auth.register.passwordStrengthGood", "good"),
+			level: b("auth.register.passwordStrengthGood", "good"),
 			color: "bg-status-warning-bg-subtle0",
 			width: "w-3/4"
 		} : {
-			level: v("auth.register.passwordStrengthStrong", "strong"),
+			level: b("auth.register.passwordStrengthStrong", "strong"),
 			color: "bg-status-success-text",
 			width: "w-full"
 		};
-	})(), Z = async (e) => {
+	})(), me = async (e) => {
 		e.preventDefault();
 		let t = [];
-		f(D.email) || t.push(v("auth.register.invalidEmail", "Please enter a valid email address")), (!D.username || D.username.length < 3) && t.push(v("auth.register.usernameMin3", "Username must be at least 3 characters")), /^[a-zA-Z0-9_-]+$/.test(D.username) || t.push(v("auth.register.usernameChars", "Username can only contain letters, numbers, underscores, and hyphens"));
-		let n = p(D.password);
-		if (n.valid || t.push(...n.errors), V && !L && t.push(v("auth.register.completeCaptcha", "Please complete the reCAPTCHA verification")), t.length > 0) {
-			A(t);
+		p(O.email) || t.push(b("auth.register.invalidEmail", "Please enter a valid email address")), (!O.username || O.username.length < 3) && t.push(b("auth.register.usernameMin3", "Username must be at least 3 characters")), /^[a-zA-Z0-9_-]+$/.test(O.username) || t.push(b("auth.register.usernameChars", "Username can only contain letters, numbers, underscores, and hyphens"));
+		let n = ie(O.password);
+		if (n.valid || t.push(...n.errors), H && !R && t.push(b("auth.register.completeCaptcha", "Please complete the reCAPTCHA verification")), t.length > 0) {
+			j(t);
 			return;
 		}
-		A([]), P(null);
+		j([]), F(null);
 		try {
-			await x({
-				...D,
-				...L ? { recaptchaToken: L } : {}
-			}), M(!0);
+			await C({
+				...O,
+				...R ? { recaptchaToken: R } : {}
+			}), N(!0);
 		} catch (e) {
-			P(e instanceof Error ? e.message : v("auth.register.signUpFailed", "Sign up failed")), console.error("Sign up failed:", e), V && (R(null), B((e) => e + 1));
+			F(e instanceof Error ? e.message : b("auth.register.signUpFailed", "Sign up failed")), console.error("Sign up failed:", e), H && (z(null), V((e) => e + 1));
 		}
-	}, me = () => {
-		I(null);
+	}, he = () => {
+		L(null);
 		try {
 			ue();
 		} catch (e) {
-			I(e instanceof Error ? e.message : v("auth.register.googleSignUpFailed", "Failed to initiate Google sign up"));
+			L(e instanceof Error ? e.message : b("auth.register.googleSignUpFailed", "Failed to initiate Google sign up"));
 		}
-	}, he = () => {
-		I(null);
+	}, ge = () => {
+		L(null);
 		try {
 			de();
 		} catch (e) {
-			I(e instanceof Error ? e.message : v("auth.register.microsoftSignUpFailed", "Failed to initiate Microsoft sign up"));
+			L(e instanceof Error ? e.message : b("auth.register.microsoftSignUpFailed", "Failed to initiate Microsoft sign up"));
 		}
-	}, Q = T("google"), $ = T("microsoft"), ge = [
+	}, Q = E("google"), $ = E("microsoft"), _e = [
 		{
 			name: "Google",
-			icon: ie,
-			onClick: me,
+			icon: re,
+			onClick: he,
 			disabled: !Q,
-			tooltip: Q ? void 0 : v("auth.register.googleNotConfigured", "Google sign up is not configured")
+			tooltip: Q ? void 0 : b("auth.register.googleNotConfigured", "Google sign up is not configured")
 		},
 		{
 			name: "GitHub",
-			icon: re,
+			icon: ne,
 			onClick: () => {},
 			disabled: !0,
-			tooltip: v("auth.register.githubNotConfigured", "GitHub sign up is not configured")
+			tooltip: b("auth.register.githubNotConfigured", "GitHub sign up is not configured")
 		},
 		{
 			name: "Microsoft",
-			icon: c,
-			onClick: he,
+			icon: l,
+			onClick: ge,
 			disabled: !$,
-			tooltip: $ ? void 0 : v("auth.register.microsoftNotConfigured", "Microsoft sign up is not configured")
+			tooltip: $ ? void 0 : b("auth.register.microsoftNotConfigured", "Microsoft sign up is not configured")
 		}
-	], [_e, ve = ""] = v("auth.register.verificationEmailSentTo", "We've sent a verification email to {{email}}. Please check your inbox and click the verification link to activate your account.").split("{{email}}");
-	return j ? /* @__PURE__ */ h(r, {
-		title: v("auth.register.checkEmail", "Check your email"),
-		subtitle: v("auth.register.verificationLinkSent", "We've sent you a verification link"),
-		children: /* @__PURE__ */ g("div", {
+	], [ve, ye = ""] = b("auth.register.verificationEmailSentTo", "We've sent a verification email to {{email}}. Please check your inbox and click the verification link to activate your account.").split("{{email}}");
+	return M ? /* @__PURE__ */ _(r, {
+		title: b("auth.register.checkEmail", "Check your email"),
+		subtitle: b("auth.register.verificationLinkSent", "We've sent you a verification link"),
+		children: /* @__PURE__ */ v("div", {
 			className: "flex flex-col items-center justify-center py-6",
 			children: [
-				/* @__PURE__ */ h("div", {
+				/* @__PURE__ */ _("div", {
 					className: "size-20 rounded-full bg-status-success-bg-subtle flex items-center justify-center mb-6",
-					children: /* @__PURE__ */ h("svg", {
+					children: /* @__PURE__ */ _("svg", {
 						className: "size-10 text-status-success-text",
 						fill: "none",
 						viewBox: "0 0 24 24",
 						stroke: "currentColor",
-						children: /* @__PURE__ */ h("path", {
+						children: /* @__PURE__ */ _("path", {
 							strokeLinecap: "round",
 							strokeLinejoin: "round",
 							strokeWidth: 2,
@@ -139,56 +140,56 @@ function v() {
 						})
 					})
 				}),
-				/* @__PURE__ */ h("h3", {
+				/* @__PURE__ */ _("h3", {
 					className: "text-lg font-semibold text-[var(--color-text-primary)] mb-2",
-					children: v("auth.register.accountCreated", "Account created successfully!")
+					children: b("auth.register.accountCreated", "Account created successfully!")
 				}),
-				/* @__PURE__ */ g("p", {
+				/* @__PURE__ */ v("p", {
 					className: "text-center text-[var(--color-text-secondary)] mb-8 max-w-sm",
 					children: [
-						_e,
-						/* @__PURE__ */ h("span", {
+						ve,
+						/* @__PURE__ */ _("span", {
 							className: "font-medium text-[var(--color-text-primary)]",
-							children: D.email
+							children: O.email
 						}),
-						ve
+						ye
 					]
 				}),
-				/* @__PURE__ */ g("div", {
+				/* @__PURE__ */ v("div", {
 					className: "space-y-3 w-full",
 					children: [
-						/* @__PURE__ */ h(_, {
+						/* @__PURE__ */ _(y, {
 							type: "button",
-							onClick: () => b("/auth/login"),
+							onClick: () => S("/auth/login"),
 							variant: "default",
 							size: "lg",
 							className: "w-full font-semibold",
-							children: v("auth.register.continueToSignIn", "Continue to sign in")
+							children: b("auth.register.continueToSignIn", "Continue to sign in")
 						}),
-						W && /* @__PURE__ */ h("p", {
+						G && /* @__PURE__ */ _("p", {
 							className: "text-center text-sm text-status-error-text",
-							children: W
+							children: G
 						}),
-						/* @__PURE__ */ g("p", {
+						/* @__PURE__ */ v("p", {
 							className: "text-center text-sm text-[var(--color-text-tertiary)]",
 							children: [
-								v("auth.register.didntReceiveEmail", "Didn't receive the email? Check your spam folder or"),
+								b("auth.register.didntReceiveEmail", "Didn't receive the email? Check your spam folder or"),
 								" ",
-								/* @__PURE__ */ h("button", {
+								/* @__PURE__ */ _("button", {
 									type: "button",
-									disabled: H,
+									disabled: U,
 									onClick: async () => {
-										G(null), U(!0);
+										K(null), W(!0);
 										try {
-											await S(D.email);
+											await le(O.email);
 										} catch (e) {
-											G(e instanceof Error ? e.message : v("auth.register.resendFailed", "Failed to resend verification email"));
+											K(e instanceof Error ? e.message : b("auth.register.resendFailed", "Failed to resend verification email"));
 										} finally {
-											U(!1);
+											W(!1);
 										}
 									},
 									className: "text-text-link hover:text-text-linkHover font-medium disabled:opacity-50 disabled:cursor-not-allowed",
-									children: H ? v("auth.register.resending", "resending...") : v("auth.register.tryAgain", "try again")
+									children: U ? b("auth.register.resending", "resending...") : b("auth.register.tryAgain", "try again")
 								})
 							]
 						})
@@ -196,223 +197,223 @@ function v() {
 				})
 			]
 		})
-	}) : /* @__PURE__ */ g(r, {
-		title: v("auth.register.createAccount", "Create your account"),
-		subtitle: v("auth.register.startJourney", "Start your journey with {{productName}}").replace("{{productName}}", y || "Burdenoff Workspaces"),
-		productName: y,
+	}) : /* @__PURE__ */ v(r, {
+		title: b("auth.register.createAccount", "Create your account"),
+		subtitle: b("auth.register.startJourney", "Start your journey with {{productName}}").replace("{{productName}}", x || "Burdenoff Workspaces"),
+		productName: x,
 		children: [
-			/* @__PURE__ */ h(le, {
+			/* @__PURE__ */ _(ce, {
 				className: "mb-5",
-				children: v("auth.register.purpose", "Create your account to get a personal workspace and start collaborating. You'll verify your email, then you can sign in and invite your team.")
+				children: b("auth.register.purpose", "Create your account to get a personal workspace and start collaborating. You'll verify your email, then you can sign in and invite your team.")
 			}),
-			/* @__PURE__ */ g("form", {
-				onSubmit: Z,
+			/* @__PURE__ */ v("form", {
+				onSubmit: me,
 				className: "space-y-5",
 				children: [
-					K && /* @__PURE__ */ g("div", {
+					q && /* @__PURE__ */ v("div", {
 						className: "flex items-start gap-3 p-4 rounded-xl bg-status-warning-bg-subtle border border-status-warning-border",
-						children: [/* @__PURE__ */ h(i, { className: "size-5 text-status-warning-text flex-shrink-0 mt-0.5" }), /* @__PURE__ */ g("div", {
+						children: [/* @__PURE__ */ _(i, { className: "size-5 text-status-warning-text flex-shrink-0 mt-0.5" }), /* @__PURE__ */ v("div", {
 							className: "space-y-2",
 							children: [
-								/* @__PURE__ */ h("p", {
+								/* @__PURE__ */ _("p", {
 									className: "text-sm font-medium text-status-warning-text",
-									children: v("auth.register.accountDeactivated", "This email belongs to a deactivated account.")
+									children: b("auth.register.accountDeactivated", "This email belongs to a deactivated account.")
 								}),
-								/* @__PURE__ */ h("p", {
+								/* @__PURE__ */ _("p", {
 									className: "text-xs text-status-warning-text/80",
-									children: v("auth.register.accountDeactivatedHelp", "If this is your account, you can reactivate it instead of creating a new one.")
+									children: b("auth.register.accountDeactivatedHelp", "If this is your account, you can reactivate it instead of creating a new one.")
 								}),
-								/* @__PURE__ */ h("button", {
+								/* @__PURE__ */ _("button", {
 									type: "button",
-									onClick: () => b("/auth/reactivate", { state: { email: D.email } }),
+									onClick: () => S("/auth/reactivate", { state: { email: O.email } }),
 									className: "text-sm font-semibold text-status-warning-text underline underline-offset-2",
-									children: v("auth.register.reactivateCta", "Reactivate my account")
+									children: b("auth.register.reactivateCta", "Reactivate my account")
 								})
 							]
 						})]
 					}),
-					(q || J) && /* @__PURE__ */ g("div", {
+					(J || Y) && /* @__PURE__ */ v("div", {
 						className: "flex items-start gap-3 p-4 rounded-xl bg-status-warning-bg-subtle border border-status-warning-border",
-						children: [/* @__PURE__ */ h(i, { className: "size-5 text-status-warning-text flex-shrink-0 mt-0.5" }), /* @__PURE__ */ h("p", {
+						children: [/* @__PURE__ */ _(i, { className: "size-5 text-status-warning-text flex-shrink-0 mt-0.5" }), /* @__PURE__ */ _("p", {
 							className: "text-sm text-status-warning-text",
-							children: N
+							children: P
 						})]
 					}),
-					(N && !K && !q && !J || k.length > 0) && /* @__PURE__ */ g("div", {
+					(P && !q && !J && !Y || A.length > 0) && /* @__PURE__ */ v("div", {
 						className: "flex items-start gap-3 p-4 rounded-xl bg-status-error-bg-subtle border border-status-error-border",
-						children: [/* @__PURE__ */ h(i, { className: "size-5 text-status-error-text flex-shrink-0 mt-0.5" }), /* @__PURE__ */ g("div", {
+						children: [/* @__PURE__ */ _(i, { className: "size-5 text-status-error-text flex-shrink-0 mt-0.5" }), /* @__PURE__ */ v("div", {
 							className: "space-y-1",
-							children: [N && !K && !q && !J && /* @__PURE__ */ h("p", {
+							children: [P && !q && !J && !Y && /* @__PURE__ */ _("p", {
 								className: "text-sm text-status-error-text",
-								children: N
-							}), k.map((e) => /* @__PURE__ */ h("p", {
+								children: P
+							}), A.map((e) => /* @__PURE__ */ _("p", {
 								className: "text-sm text-status-error-text",
 								children: e
 							}, e))]
 						})]
 					}),
-					/* @__PURE__ */ g("div", {
+					/* @__PURE__ */ v("div", {
 						className: "grid grid-cols-2 gap-4",
-						children: [/* @__PURE__ */ g("div", {
+						children: [/* @__PURE__ */ v("div", {
 							className: "space-y-2",
-							children: [/* @__PURE__ */ h("label", {
+							children: [/* @__PURE__ */ _("label", {
 								htmlFor: "firstName",
 								className: "block text-sm font-medium text-[var(--color-text-primary)]",
-								children: v("auth.register.firstName", "First Name")
-							}), /* @__PURE__ */ h("input", {
+								children: b("auth.register.firstName", "First Name")
+							}), /* @__PURE__ */ _("input", {
 								id: "firstName",
 								type: "text",
 								required: !0,
 								"aria-required": "true",
-								"aria-label": v("auth.register.firstName", "First Name"),
-								value: D.firstName,
-								onChange: (e) => O({
-									...D,
+								"aria-label": b("auth.register.firstName", "First Name"),
+								value: O.firstName,
+								onChange: (e) => k({
+									...O,
 									firstName: e.target.value
 								}),
 								className: "block w-full px-4 py-3 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] placeholder:text-[var(--color-text-tertiary)] focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all",
-								placeholder: v("auth.register.firstNamePlaceholder", "Enter first name")
+								placeholder: b("auth.register.firstNamePlaceholder", "Enter first name")
 							})]
-						}), /* @__PURE__ */ g("div", {
+						}), /* @__PURE__ */ v("div", {
 							className: "space-y-2",
-							children: [/* @__PURE__ */ h("label", {
+							children: [/* @__PURE__ */ _("label", {
 								htmlFor: "lastName",
 								className: "block text-sm font-medium text-[var(--color-text-primary)]",
-								children: v("auth.register.lastName", "Last Name")
-							}), /* @__PURE__ */ h("input", {
+								children: b("auth.register.lastName", "Last Name")
+							}), /* @__PURE__ */ _("input", {
 								id: "lastName",
 								type: "text",
 								required: !0,
 								"aria-required": "true",
-								"aria-label": v("auth.register.lastName", "Last Name"),
-								value: D.lastName,
-								onChange: (e) => O({
-									...D,
+								"aria-label": b("auth.register.lastName", "Last Name"),
+								value: O.lastName,
+								onChange: (e) => k({
+									...O,
 									lastName: e.target.value
 								}),
 								className: "block w-full px-4 py-3 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] placeholder:text-[var(--color-text-tertiary)] focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all",
-								placeholder: v("auth.register.lastNamePlaceholder", "Enter last name")
+								placeholder: b("auth.register.lastNamePlaceholder", "Enter last name")
 							})]
 						})]
 					}),
-					/* @__PURE__ */ g("div", {
+					/* @__PURE__ */ v("div", {
 						className: "space-y-2",
-						children: [/* @__PURE__ */ h("label", {
+						children: [/* @__PURE__ */ _("label", {
 							htmlFor: "username",
 							className: "block text-sm font-medium text-[var(--color-text-primary)]",
-							children: v("auth.register.username", "Username")
-						}), /* @__PURE__ */ g("div", {
+							children: b("auth.register.username", "Username")
+						}), /* @__PURE__ */ v("div", {
 							className: "relative",
-							children: [/* @__PURE__ */ h("div", {
+							children: [/* @__PURE__ */ _("div", {
 								className: "absolute inset-y-0 left-0 pl-3.5 flex items-center pointer-events-none",
-								children: /* @__PURE__ */ h(u, { className: "size-5 text-[var(--color-text-tertiary)]" })
-							}), /* @__PURE__ */ h("input", {
+								children: /* @__PURE__ */ _(d, { className: "size-5 text-[var(--color-text-tertiary)]" })
+							}), /* @__PURE__ */ _("input", {
 								id: "username",
 								type: "text",
 								required: !0,
 								"aria-required": "true",
-								"aria-label": v("auth.register.username", "Username"),
+								"aria-label": b("auth.register.username", "Username"),
 								autoComplete: "username",
-								value: D.username,
-								onChange: (e) => O({
-									...D,
+								value: O.username,
+								onChange: (e) => k({
+									...O,
 									username: e.target.value
 								}),
 								className: "block w-full pl-[3.5rem] pr-4 py-3 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] placeholder:text-[var(--color-text-tertiary)] focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all",
-								placeholder: v("auth.register.usernamePlaceholder", "Choose a username")
+								placeholder: b("auth.register.usernamePlaceholder", "Choose a username")
 							})]
 						})]
 					}),
-					/* @__PURE__ */ g("div", {
+					/* @__PURE__ */ v("div", {
 						className: "space-y-2",
-						children: [/* @__PURE__ */ h("label", {
+						children: [/* @__PURE__ */ _("label", {
 							htmlFor: "email",
 							className: "block text-sm font-medium text-[var(--color-text-primary)]",
-							children: v("auth.register.email", "Email")
-						}), /* @__PURE__ */ g("div", {
+							children: b("auth.register.email", "Email")
+						}), /* @__PURE__ */ v("div", {
 							className: "relative",
-							children: [/* @__PURE__ */ h("div", {
+							children: [/* @__PURE__ */ _("div", {
 								className: "absolute inset-y-0 left-0 pl-3.5 flex items-center pointer-events-none",
-								children: /* @__PURE__ */ h(a, { className: "size-5 text-[var(--color-text-tertiary)]" })
-							}), /* @__PURE__ */ h("input", {
+								children: /* @__PURE__ */ _(a, { className: "size-5 text-[var(--color-text-tertiary)]" })
+							}), /* @__PURE__ */ _("input", {
 								id: "email",
 								type: "email",
 								required: !0,
 								"aria-required": "true",
-								"aria-label": v("auth.register.email", "Email"),
+								"aria-label": b("auth.register.email", "Email"),
 								autoComplete: "email",
-								value: D.email,
-								onChange: (e) => O({
-									...D,
+								value: O.email,
+								onChange: (e) => k({
+									...O,
 									email: e.target.value
 								}),
 								className: "block w-full pl-[3.5rem] pr-4 py-3 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] placeholder:text-[var(--color-text-tertiary)] focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all",
-								placeholder: v("auth.register.emailPlaceholder", "you@example.com")
+								placeholder: b("auth.register.emailPlaceholder", "you@example.com")
 							})]
 						})]
 					}),
-					/* @__PURE__ */ g("div", {
+					/* @__PURE__ */ v("div", {
 						className: "space-y-2",
 						children: [
-							/* @__PURE__ */ h("label", {
+							/* @__PURE__ */ _("label", {
 								htmlFor: "password",
 								className: "block text-sm font-medium text-[var(--color-text-primary)]",
-								children: v("auth.register.password", "Password")
+								children: b("auth.register.password", "Password")
 							}),
-							/* @__PURE__ */ g("div", {
+							/* @__PURE__ */ v("div", {
 								className: "relative",
 								children: [
-									/* @__PURE__ */ h("div", {
+									/* @__PURE__ */ _("div", {
 										className: "absolute inset-y-0 left-0 pl-3.5 flex items-center pointer-events-none",
-										children: /* @__PURE__ */ h(s, { className: "size-5 text-[var(--color-text-tertiary)]" })
+										children: /* @__PURE__ */ _(c, { className: "size-5 text-[var(--color-text-tertiary)]" })
 									}),
-									/* @__PURE__ */ h("input", {
+									/* @__PURE__ */ _("input", {
 										id: "password",
-										type: E ? "text" : "password",
+										type: D ? "text" : "password",
 										required: !0,
 										"aria-required": "true",
-										"aria-label": v("auth.register.password", "Password"),
+										"aria-label": b("auth.register.password", "Password"),
 										autoComplete: "new-password",
-										value: D.password,
-										onChange: (e) => O({
-											...D,
+										value: O.password,
+										onChange: (e) => k({
+											...O,
 											password: e.target.value
 										}),
 										className: "block w-full pl-[3.5rem] pr-12 py-3 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] placeholder:text-[var(--color-text-tertiary)] focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all",
-										placeholder: v("auth.register.passwordPlaceholder", "Create a strong password")
+										placeholder: b("auth.register.passwordPlaceholder", "Create a strong password")
 									}),
-									/* @__PURE__ */ h("button", {
+									/* @__PURE__ */ _("button", {
 										type: "button",
-										onClick: () => fe(!E),
-										"aria-label": E ? v("auth.register.hidePassword", "Hide password") : v("auth.register.showPassword", "Show password"),
+										onClick: () => fe(!D),
+										"aria-label": D ? b("auth.register.hidePassword", "Hide password") : b("auth.register.showPassword", "Show password"),
 										className: "absolute inset-y-0 right-0 pr-3.5 flex items-center text-[var(--color-text-tertiary)] hover:text-[var(--color-text-secondary)] transition-colors",
-										children: h(E ? o : ne, { className: "size-5" })
+										children: _(D ? s : o, { className: "size-5" })
 									})
 								]
 							}),
-							D.password && /* @__PURE__ */ g("div", {
+							O.password && /* @__PURE__ */ v("div", {
 								className: "space-y-3 pt-2",
-								children: [/* @__PURE__ */ g("div", {
+								children: [/* @__PURE__ */ v("div", {
 									className: "space-y-1",
-									children: [/* @__PURE__ */ h("div", {
+									children: [/* @__PURE__ */ _("div", {
 										className: "h-1.5 bg-[var(--color-bg-sunken)] rounded-full overflow-hidden",
-										children: /* @__PURE__ */ h("div", { className: `h-full ${X.color} ${X.width} transition-all duration-300` })
-									}), /* @__PURE__ */ g("p", {
+										children: /* @__PURE__ */ _("div", { className: `h-full ${Z.color} ${Z.width} transition-all duration-300` })
+									}), /* @__PURE__ */ v("p", {
 										className: "text-xs text-[var(--color-text-tertiary)] capitalize",
 										children: [
-											v("auth.register.passwordStrength", "Password strength:"),
+											b("auth.register.passwordStrength", "Password strength:"),
 											" ",
-											/* @__PURE__ */ h("span", {
+											/* @__PURE__ */ _("span", {
 												className: "font-medium",
-												children: X.level
+												children: Z.level
 											})
 										]
 									})]
-								}), /* @__PURE__ */ h("div", {
+								}), /* @__PURE__ */ _("div", {
 									className: "grid grid-cols-2 gap-2",
-									children: Y.map((e) => /* @__PURE__ */ g("div", {
+									children: X.map((e) => /* @__PURE__ */ v("div", {
 										className: "flex items-center gap-2",
-										children: [e.met ? /* @__PURE__ */ h(te, { className: "size-4 text-status-success-text" }) : /* @__PURE__ */ h(d, { className: "size-4 text-[var(--color-text-tertiary)]" }), /* @__PURE__ */ h("span", {
+										children: [e.met ? /* @__PURE__ */ _(te, { className: "size-4 text-status-success-text" }) : /* @__PURE__ */ _(f, { className: "size-4 text-[var(--color-text-tertiary)]" }), /* @__PURE__ */ _("span", {
 											className: `text-xs ${e.met ? "text-status-success-text" : "text-[var(--color-text-tertiary)]"}`,
 											children: e.label
 										})]
@@ -421,87 +422,91 @@ function v() {
 							})
 						]
 					}),
-					/* @__PURE__ */ g("p", {
+					/* @__PURE__ */ v("p", {
 						className: "text-xs text-[var(--color-text-tertiary)] leading-relaxed",
 						children: [
-							v("auth.register.agreeToTerms", "By creating an account, you agree to our"),
+							b("auth.register.agreeToTerms", "By creating an account, you agree to our"),
 							" ",
-							/* @__PURE__ */ h("a", {
-								href: "/legal/terms",
+							/* @__PURE__ */ _("a", {
+								href: m("/terms"),
+								target: "_blank",
+								rel: "noopener noreferrer",
 								className: "text-text-link underline underline-offset-2",
-								children: v("auth.register.termsOfService", "Terms of Service")
+								children: b("auth.register.termsOfService", "Terms of Service")
 							}),
 							" ",
-							v("auth.register.and", "and"),
+							b("auth.register.and", "and"),
 							" ",
-							/* @__PURE__ */ h("a", {
-								href: "/legal/privacy",
+							/* @__PURE__ */ _("a", {
+								href: m("/privacy"),
+								target: "_blank",
+								rel: "noopener noreferrer",
 								className: "text-text-link underline underline-offset-2",
-								children: v("auth.register.privacyPolicy", "Privacy Policy")
+								children: b("auth.register.privacyPolicy", "Privacy Policy")
 							}),
 							"."
 						]
 					}),
-					/* @__PURE__ */ h(ae, {
-						enabled: V,
+					/* @__PURE__ */ _(ae, {
+						enabled: H,
 						siteKey: pe,
-						onVerify: R,
-						onExpired: () => R(null)
-					}, z),
-					/* @__PURE__ */ h(_, {
+						onVerify: z,
+						onExpired: () => z(null)
+					}, B),
+					/* @__PURE__ */ _(y, {
 						type: "submit",
-						disabled: C,
+						disabled: w,
 						variant: "default",
 						size: "lg",
 						className: "w-full font-semibold",
-						children: C ? /* @__PURE__ */ g(ce, { children: [/* @__PURE__ */ h(l, { className: "size-5 animate-spin" }), /* @__PURE__ */ h("span", { children: v("auth.register.creatingAccount", "Creating account...") })] }) : v("auth.register.createAccountBtn", "Create account")
+						children: w ? /* @__PURE__ */ v(se, { children: [/* @__PURE__ */ _(u, { className: "size-5 animate-spin" }), /* @__PURE__ */ _("span", { children: b("auth.register.creatingAccount", "Creating account...") })] }) : b("auth.register.createAccountBtn", "Create account")
 					})
 				]
 			}),
-			/* @__PURE__ */ g("div", {
+			/* @__PURE__ */ v("div", {
 				className: "relative my-8",
-				children: [/* @__PURE__ */ h("div", {
+				children: [/* @__PURE__ */ _("div", {
 					className: "absolute inset-0 flex items-center",
-					children: /* @__PURE__ */ h("div", { className: "w-full border-t border-[var(--color-border-default)]" })
-				}), /* @__PURE__ */ h("div", {
+					children: /* @__PURE__ */ _("div", { className: "w-full border-t border-[var(--color-border-default)]" })
+				}), /* @__PURE__ */ _("div", {
 					className: "relative flex justify-center",
-					children: /* @__PURE__ */ h("span", {
+					children: /* @__PURE__ */ _("span", {
 						className: "px-4 bg-[var(--color-bg-canvas)] text-sm text-[var(--color-text-tertiary)]",
-						children: v("auth.register.orSignUpWith", "or sign up with")
+						children: b("auth.register.orSignUpWith", "or sign up with")
 					})
 				})]
 			}),
-			F && /* @__PURE__ */ g("div", {
+			I && /* @__PURE__ */ v("div", {
 				className: "flex items-start gap-3 p-4 rounded-xl border bg-status-error-bg-subtle border-status-error-border",
-				children: [/* @__PURE__ */ h(i, { className: "size-5 flex-shrink-0 mt-0.5 text-status-error-text" }), /* @__PURE__ */ h("p", {
+				children: [/* @__PURE__ */ _(i, { className: "size-5 flex-shrink-0 mt-0.5 text-status-error-text" }), /* @__PURE__ */ _("p", {
 					className: "text-sm text-status-error-text",
-					children: F
+					children: I
 				})]
 			}),
-			/* @__PURE__ */ h("div", {
+			/* @__PURE__ */ _("div", {
 				className: "grid grid-cols-3 gap-3",
-				children: ge.map((e) => /* @__PURE__ */ g("button", {
+				children: _e.map((e) => /* @__PURE__ */ v("button", {
 					type: "button",
 					onClick: e.onClick,
 					disabled: e.disabled,
 					title: e.tooltip,
 					className: `flex items-center justify-center gap-2 px-4 py-3 rounded-xl border transition-all duration-200 group ${e.disabled ? "border-[var(--color-border-subtle)] bg-[var(--color-bg-disabled)] cursor-not-allowed opacity-50" : "border-[var(--color-border-default)] bg-[var(--color-bg-surface)] hover:bg-[var(--color-bg-sunken)] hover:border-[var(--color-border-strong)]"}`,
-					children: [/* @__PURE__ */ h(e.icon, { className: `size-5 ${e.disabled ? "opacity-50" : ""}` }), /* @__PURE__ */ h("span", {
+					children: [/* @__PURE__ */ _(e.icon, { className: `size-5 ${e.disabled ? "opacity-50" : ""}` }), /* @__PURE__ */ _("span", {
 						className: `sr-only sm:not-sr-only text-sm font-medium transition-colors ${e.disabled ? "text-[var(--color-text-disabled)]" : "text-[var(--color-text-secondary)] group-hover:text-[var(--color-text-primary)]"}`,
 						children: e.name
 					})]
 				}, e.name))
 			}),
-			/* @__PURE__ */ g("p", {
+			/* @__PURE__ */ v("p", {
 				className: "mt-8 text-center text-sm text-[var(--color-text-secondary)]",
 				children: [
-					v("auth.register.alreadyHaveAccount", "Already have an account?"),
+					b("auth.register.alreadyHaveAccount", "Already have an account?"),
 					" ",
-					/* @__PURE__ */ h("button", {
+					/* @__PURE__ */ _("button", {
 						type: "button",
-						onClick: () => b("/auth/login"),
+						onClick: () => S("/auth/login"),
 						className: "font-semibold text-text-link hover:text-text-linkHover transition-colors",
-						children: v("auth.register.signIn", "Sign in")
+						children: b("auth.register.signIn", "Sign in")
 					})
 				]
 			})
@@ -509,6 +514,6 @@ function v() {
 	});
 }
 //#endregion
-export { v as RegisterPage };
+export { b as RegisterPage };
 
 //# sourceMappingURL=RegisterPage.js.map

package/dist/auth/pages/RegisterPage.js.map

@@ -1 +1 @@
-{"version":3,"file":"RegisterPage.js","names":[],"sources":["../../../src/auth/pages/RegisterPage.tsx"],"sourcesContent":["import { useState } from \"react\";\nimport { useNavigate } from \"react-router\";\nimport { useTr } from \"../../shared/hooks/useTr\";\nimport { validateEmail, validatePassword } from \"../utils/validation\";\nimport { useAuthOperations } from \"../hooks/useAuthOperations\";\nimport { useOAuthOperations } from \"../hooks/useOAuthOperations\";\nimport { AuthLayout } from \"../components/AuthLayout\";\nimport { Button } from \"@burdenoff/fe-libs/button\";\nimport { PagePurpose } from \"@burdenoff/fe-libs/ui\";\nimport {\n  EmailIcon,\n  LockIcon,\n  UserIcon,\n  EyeIcon,\n  EyeOffIcon,\n  AlertIcon,\n  CheckIcon,\n  XIcon,\n  SpinnerIcon,\n  GoogleIcon,\n  GitHubIcon,\n  MicrosoftIcon,\n} from \"../components/AuthIcons\";\nimport { useAuth } from \"../providers/AuthProvider\";\nimport { CaptchaV2 } from \"../components/CaptchaV2\";\nimport { useSignupCaptcha } from \"../hooks/useSignupCaptcha\";\nimport type { SignUpInput } from \"../types\";\n\n/**\n * Registration page with professional design\n */\nexport function RegisterPage() {\n  const tr = useTr();\n  const { productName } = useAuth();\n  const navigate = useNavigate();\n\n  const { signUp, resendVerification, isLoading, errorCode } =\n    useAuthOperations();\n  const { initiateGoogleOAuth, initiateMicrosoftOAuth, isProviderConfigured } =\n    useOAuthOperations();\n  const [showPassword, setShowPassword] = useState(false);\n  const [formData, setFormData] = useState<SignUpInput>({\n    email: \"\",\n    username: \"\",\n    password: \"\",\n    firstName: \"\",\n    lastName: \"\",\n  });\n  const [validationErrors, setValidationErrors] = useState<string[]>([]);\n  const [signupSuccess, setSignupSuccess] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n  const [oauthError, setOauthError] = useState<string | null>(null);\n  const [captchaToken, setCaptchaToken] = useState<string | null>(null);\n  // reCAPTCHA v2 tokens are single-use. Bumping this key remounts the widget so\n  // a fresh token is issued after a failed submit (the prior token is consumed\n  // server-side; reusing it returns timeout-or-duplicate → CAPTCHA_FAILED loop).\n  const [captchaResetKey, setCaptchaResetKey] = useState(0);\n  const { enabled: captchaEnabled, siteKey: captchaSiteKey } =\n    useSignupCaptcha();\n  const [isResendingVerification, setIsResendingVerification] = useState(false);\n  const [resendError, setResendError] = useState<string | null>(null);\n\n  // Signing up with an email that already belongs to a non-active account:\n  // route the user to the right recovery path instead of dead-ending.\n  const isAccountDeactivated =\n    Boolean(error) && errorCode === \"ACCOUNT_DEACTIVATED\";\n  const isAccountRemoved = Boolean(error) && errorCode === \"ACCOUNT_REMOVED\";\n  const isAccountSuspended =\n    Boolean(error) && errorCode === \"ACCOUNT_SUSPENDED\";\n\n  // Password strength indicators\n  const passwordChecks = (() => {\n    const password = formData.password;\n    return [\n      {\n        label: tr(\"auth.register.pwMin8\", \"At least 12 characters\"),\n        met: password.length >= 12,\n      },\n      {\n        label: tr(\"auth.register.pwUppercase\", \"One uppercase letter\"),\n        met: /[A-Z]/.test(password),\n      },\n      {\n        label: tr(\"auth.register.pwLowercase\", \"One lowercase letter\"),\n        met: /[a-z]/.test(password),\n      },\n      {\n        label: tr(\"auth.register.pwNumber\", \"One number\"),\n        met: /\\d/.test(password),\n      },\n      {\n        label: tr(\"auth.register.pwSpecial\", \"One special character\"),\n        met: /[!@#$%^&*(),.?\":{}|<>]/.test(password),\n      },\n    ];\n  })();\n\n  const passwordStrength = (() => {\n    const metCount = passwordChecks.filter((c) => c.met).length;\n    if (metCount <= 2)\n      return {\n        level: tr(\"auth.register.passwordStrengthWeak\", \"weak\"),\n        color: \"bg-status-error-bg-subtle0\",\n        width: \"w-1/4\",\n      };\n    if (metCount <= 3)\n      return {\n        level: tr(\"auth.register.passwordStrengthFair\", \"fair\"),\n        color: \"bg-status-warning-text\",\n        width: \"w-2/4\",\n      };\n    if (metCount <= 4)\n      return {\n        level: tr(\"auth.register.passwordStrengthGood\", \"good\"),\n        color: \"bg-status-warning-bg-subtle0\",\n        width: \"w-3/4\",\n      };\n    return {\n      level: tr(\"auth.register.passwordStrengthStrong\", \"strong\"),\n      color: \"bg-status-success-text\",\n      width: \"w-full\",\n    };\n  })();\n\n  const handleSubmit = async (e: React.FormEvent) => {\n    e.preventDefault();\n\n    const errors: string[] = [];\n    if (!validateEmail(formData.email)) {\n      errors.push(\n        tr(\"auth.register.invalidEmail\", \"Please enter a valid email address\"),\n      );\n    }\n    if (!formData.username || formData.username.length < 3) {\n      errors.push(\n        tr(\n          \"auth.register.usernameMin3\",\n          \"Username must be at least 3 characters\",\n        ),\n      );\n    }\n    if (!/^[a-zA-Z0-9_-]+$/.test(formData.username)) {\n      errors.push(\n        tr(\n          \"auth.register.usernameChars\",\n          \"Username can only contain letters, numbers, underscores, and hyphens\",\n        ),\n      );\n    }\n    const passwordValidation = validatePassword(formData.password);\n    if (!passwordValidation.valid) {\n      errors.push(...passwordValidation.errors);\n    }\n\n    if (captchaEnabled && !captchaToken) {\n      errors.push(\n        tr(\n          \"auth.register.completeCaptcha\",\n          \"Please complete the reCAPTCHA verification\",\n        ),\n      );\n    }\n\n    if (errors.length > 0) {\n      setValidationErrors(errors);\n      return;\n    }\n\n    setValidationErrors([]);\n    setError(null);\n    try {\n      await signUp({\n        ...formData,\n        ...(captchaToken ? { recaptchaToken: captchaToken } : {}),\n      });\n      // Sign up successful - check if email verification is required\n      // (Backend returns empty tokens when email verification is needed)\n      setSignupSuccess(true);\n    } catch (err) {\n      const message =\n        err instanceof Error\n          ? err.message\n          : tr(\"auth.register.signUpFailed\", \"Sign up failed\");\n      setError(message);\n      console.error(\"Sign up failed:\", err);\n      // The captcha token (if any) was consumed during this attempt — discard it\n      // and remount the widget so the user gets a fresh, solvable challenge on\n      // retry instead of being trapped in a CAPTCHA_FAILED loop.\n      if (captchaEnabled) {\n        setCaptchaToken(null);\n        setCaptchaResetKey((k) => k + 1);\n      }\n    }\n  };\n\n  /**\n   * Handle Google OAuth signup\n   */\n  const handleGoogleSignup = () => {\n    setOauthError(null);\n    try {\n      initiateGoogleOAuth();\n    } catch (err) {\n      setOauthError(\n        err instanceof Error\n          ? err.message\n          : tr(\n              \"auth.register.googleSignUpFailed\",\n              \"Failed to initiate Google sign up\",\n            ),\n      );\n    }\n  };\n\n  /**\n   * Handle Microsoft OAuth signup\n   */\n  const handleMicrosoftSignup = () => {\n    setOauthError(null);\n    try {\n      initiateMicrosoftOAuth();\n    } catch (err) {\n      setOauthError(\n        err instanceof Error\n          ? err.message\n          : tr(\n              \"auth.register.microsoftSignUpFailed\",\n              \"Failed to initiate Microsoft sign up\",\n            ),\n      );\n    }\n  };\n\n  // Check if OAuth providers are configured\n  const isGoogleConfigured = isProviderConfigured(\"google\");\n  const isMicrosoftConfigured = isProviderConfigured(\"microsoft\");\n\n  const oauthProviders = [\n    {\n      name: \"Google\",\n      icon: GoogleIcon,\n      onClick: handleGoogleSignup,\n      disabled: !isGoogleConfigured,\n      tooltip: isGoogleConfigured\n        ? undefined\n        : tr(\n            \"auth.register.googleNotConfigured\",\n            \"Google sign up is not configured\",\n          ),\n    },\n    {\n      name: \"GitHub\",\n      icon: GitHubIcon,\n      onClick: () => {},\n      disabled: true,\n      tooltip: tr(\n        \"auth.register.githubNotConfigured\",\n        \"GitHub sign up is not configured\",\n      ),\n    },\n    {\n      name: \"Microsoft\",\n      icon: MicrosoftIcon,\n      onClick: handleMicrosoftSignup,\n      disabled: !isMicrosoftConfigured,\n      tooltip: isMicrosoftConfigured\n        ? undefined\n        : tr(\n            \"auth.register.microsoftNotConfigured\",\n            \"Microsoft sign up is not configured\",\n          ),\n    },\n  ];\n\n  const verificationEmailMessage = tr(\n    \"auth.register.verificationEmailSentTo\",\n    \"We've sent a verification email to {{email}}. Please check your inbox and click the verification link to activate your account.\",\n  );\n  const [verificationEmailPrefix, verificationEmailSuffix = \"\"] =\n    verificationEmailMessage.split(\"{{email}}\");\n\n  // Show success state after signup\n  if (signupSuccess) {\n    return (\n      <AuthLayout\n        title={tr(\"auth.register.checkEmail\", \"Check your email\")}\n        subtitle={tr(\n          \"auth.register.verificationLinkSent\",\n          \"We've sent you a verification link\",\n        )}\n      >\n        <div className=\"flex flex-col items-center justify-center py-6\">\n          {/* Success Icon */}\n          <div className=\"size-20 rounded-full bg-status-success-bg-subtle flex items-center justify-center mb-6\">\n            <svg\n              className=\"size-10 text-status-success-text\"\n              fill=\"none\"\n              viewBox=\"0 0 24 24\"\n              stroke=\"currentColor\"\n            >\n              <path\n                strokeLinecap=\"round\"\n                strokeLinejoin=\"round\"\n                strokeWidth={2}\n                d=\"M3 8l7.89 5.26a2 2 0 002.22 0L21 8M5 19h14a2 2 0 002-2V7a2 2 0 00-2-2H5a2 2 0 00-2 2v10a2 2 0 002 2z\"\n              />\n            </svg>\n          </div>\n\n          <h3 className=\"text-lg font-semibold text-[var(--color-text-primary)] mb-2\">\n            {tr(\n              \"auth.register.accountCreated\",\n              \"Account created successfully!\",\n            )}\n          </h3>\n\n          <p className=\"text-center text-[var(--color-text-secondary)] mb-8 max-w-sm\">\n            {verificationEmailPrefix}\n            <span className=\"font-medium text-[var(--color-text-primary)]\">\n              {formData.email}\n            </span>\n            {verificationEmailSuffix}\n          </p>\n\n          <div className=\"space-y-3 w-full\">\n            <Button\n              type=\"button\"\n              onClick={() => navigate(\"/auth/login\")}\n              variant=\"default\"\n              size=\"lg\"\n              className=\"w-full font-semibold\"\n            >\n              {tr(\"auth.register.continueToSignIn\", \"Continue to sign in\")}\n            </Button>\n\n            {resendError && (\n              <p className=\"text-center text-sm text-status-error-text\">\n                {resendError}\n              </p>\n            )}\n            <p className=\"text-center text-sm text-[var(--color-text-tertiary)]\">\n              {tr(\n                \"auth.register.didntReceiveEmail\",\n                \"Didn't receive the email? Check your spam folder or\",\n              )}{\" \"}\n              <button\n                type=\"button\"\n                disabled={isResendingVerification}\n                onClick={async () => {\n                  setResendError(null);\n                  setIsResendingVerification(true);\n                  try {\n                    await resendVerification(formData.email);\n                  } catch (err) {\n                    setResendError(\n                      err instanceof Error\n                        ? err.message\n                        : tr(\n                            \"auth.register.resendFailed\",\n                            \"Failed to resend verification email\",\n                          ),\n                    );\n                  } finally {\n                    setIsResendingVerification(false);\n                  }\n                }}\n                className=\"text-text-link hover:text-text-linkHover font-medium disabled:opacity-50 disabled:cursor-not-allowed\"\n              >\n                {isResendingVerification\n                  ? tr(\"auth.register.resending\", \"resending...\")\n                  : tr(\"auth.register.tryAgain\", \"try again\")}\n              </button>\n            </p>\n          </div>\n        </div>\n      </AuthLayout>\n    );\n  }\n\n  return (\n    <AuthLayout\n      title={tr(\"auth.register.createAccount\", \"Create your account\")}\n      subtitle={tr(\n        \"auth.register.startJourney\",\n        \"Start your journey with {{productName}}\",\n      ).replace(\"{{productName}}\", productName || \"Burdenoff Workspaces\")}\n      productName={productName}\n    >\n      <PagePurpose className=\"mb-5\">\n        {tr(\n          \"auth.register.purpose\",\n          \"Create your account to get a personal workspace and start collaborating. You'll verify your email, then you can sign in and invite your team.\",\n        )}\n      </PagePurpose>\n      <form onSubmit={handleSubmit} className=\"space-y-5\">\n        {/* Deactivated account → offer self-service reactivation */}\n        {isAccountDeactivated && (\n          <div className=\"flex items-start gap-3 p-4 rounded-xl bg-status-warning-bg-subtle border border-status-warning-border\">\n            <AlertIcon className=\"size-5 text-status-warning-text flex-shrink-0 mt-0.5\" />\n            <div className=\"space-y-2\">\n              <p className=\"text-sm font-medium text-status-warning-text\">\n                {tr(\n                  \"auth.register.accountDeactivated\",\n                  \"This email belongs to a deactivated account.\",\n                )}\n              </p>\n              <p className=\"text-xs text-status-warning-text/80\">\n                {tr(\n                  \"auth.register.accountDeactivatedHelp\",\n                  \"If this is your account, you can reactivate it instead of creating a new one.\",\n                )}\n              </p>\n              <button\n                type=\"button\"\n                onClick={() =>\n                  navigate(\"/auth/reactivate\", {\n                    state: { email: formData.email },\n                  })\n                }\n                className=\"text-sm font-semibold text-status-warning-text underline underline-offset-2\"\n              >\n                {tr(\"auth.register.reactivateCta\", \"Reactivate my account\")}\n              </button>\n            </div>\n          </div>\n        )}\n\n        {/* Admin-removed / suspended → point to support (no self-service path) */}\n        {(isAccountRemoved || isAccountSuspended) && (\n          <div className=\"flex items-start gap-3 p-4 rounded-xl bg-status-warning-bg-subtle border border-status-warning-border\">\n            <AlertIcon className=\"size-5 text-status-warning-text flex-shrink-0 mt-0.5\" />\n            <p className=\"text-sm text-status-warning-text\">{error}</p>\n          </div>\n        )}\n\n        {/* Generic error / validation alert */}\n        {((error &&\n          !isAccountDeactivated &&\n          !isAccountRemoved &&\n          !isAccountSuspended) ||\n          validationErrors.length > 0) && (\n          <div className=\"flex items-start gap-3 p-4 rounded-xl bg-status-error-bg-subtle border border-status-error-border\">\n            <AlertIcon className=\"size-5 text-status-error-text flex-shrink-0 mt-0.5\" />\n            <div className=\"space-y-1\">\n              {error &&\n                !isAccountDeactivated &&\n                !isAccountRemoved &&\n                !isAccountSuspended && (\n                  <p className=\"text-sm text-status-error-text\">{error}</p>\n                )}\n              {validationErrors.map((err) => (\n                <p key={err} className=\"text-sm text-status-error-text\">\n                  {err}\n                </p>\n              ))}\n            </div>\n          </div>\n        )}\n\n        {/* Name Fields */}\n        <div className=\"grid grid-cols-2 gap-4\">\n          <div className=\"space-y-2\">\n            <label\n              htmlFor=\"firstName\"\n              className=\"block text-sm font-medium text-[var(--color-text-primary)]\"\n            >\n              {tr(\"auth.register.firstName\", \"First Name\")}\n            </label>\n            <input\n              id=\"firstName\"\n              type=\"text\"\n              required\n              aria-required=\"true\"\n              aria-label={tr(\"auth.register.firstName\", \"First Name\")}\n              value={formData.firstName}\n              onChange={(e) =>\n                setFormData({ ...formData, firstName: e.target.value })\n              }\n              className=\"block w-full px-4 py-3 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] placeholder:text-[var(--color-text-tertiary)] focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all\"\n              placeholder={tr(\n                \"auth.register.firstNamePlaceholder\",\n                \"Enter first name\",\n              )}\n            />\n          </div>\n          <div className=\"space-y-2\">\n            <label\n              htmlFor=\"lastName\"\n              className=\"block text-sm font-medium text-[var(--color-text-primary)]\"\n            >\n              {tr(\"auth.register.lastName\", \"Last Name\")}\n            </label>\n            <input\n              id=\"lastName\"\n              type=\"text\"\n              required\n              aria-required=\"true\"\n              aria-label={tr(\"auth.register.lastName\", \"Last Name\")}\n              value={formData.lastName}\n              onChange={(e) =>\n                setFormData({ ...formData, lastName: e.target.value })\n              }\n              className=\"block w-full px-4 py-3 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] placeholder:text-[var(--color-text-tertiary)] focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all\"\n              placeholder={tr(\n                \"auth.register.lastNamePlaceholder\",\n                \"Enter last name\",\n              )}\n            />\n          </div>\n        </div>\n\n        {/* Username Input */}\n        <div className=\"space-y-2\">\n          <label\n            htmlFor=\"username\"\n            className=\"block text-sm font-medium text-[var(--color-text-primary)]\"\n          >\n            {tr(\"auth.register.username\", \"Username\")}\n          </label>\n          <div className=\"relative\">\n            <div className=\"absolute inset-y-0 left-0 pl-3.5 flex items-center pointer-events-none\">\n              <UserIcon className=\"size-5 text-[var(--color-text-tertiary)]\" />\n            </div>\n            <input\n              id=\"username\"\n              type=\"text\"\n              required\n              aria-required=\"true\"\n              aria-label={tr(\"auth.register.username\", \"Username\")}\n              autoComplete=\"username\"\n              value={formData.username}\n              onChange={(e) =>\n                setFormData({ ...formData, username: e.target.value })\n              }\n              className=\"block w-full pl-[3.5rem] pr-4 py-3 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] placeholder:text-[var(--color-text-tertiary)] focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all\"\n              placeholder={tr(\n                \"auth.register.usernamePlaceholder\",\n                \"Choose a username\",\n              )}\n            />\n          </div>\n        </div>\n\n        {/* Email Input */}\n        <div className=\"space-y-2\">\n          <label\n            htmlFor=\"email\"\n            className=\"block text-sm font-medium text-[var(--color-text-primary)]\"\n          >\n            {tr(\"auth.register.email\", \"Email\")}\n          </label>\n          <div className=\"relative\">\n            <div className=\"absolute inset-y-0 left-0 pl-3.5 flex items-center pointer-events-none\">\n              <EmailIcon className=\"size-5 text-[var(--color-text-tertiary)]\" />\n            </div>\n            <input\n              id=\"email\"\n              type=\"email\"\n              required\n              aria-required=\"true\"\n              aria-label={tr(\"auth.register.email\", \"Email\")}\n              autoComplete=\"email\"\n              value={formData.email}\n              onChange={(e) =>\n                setFormData({ ...formData, email: e.target.value })\n              }\n              className=\"block w-full pl-[3.5rem] pr-4 py-3 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] placeholder:text-[var(--color-text-tertiary)] focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all\"\n              placeholder={tr(\n                \"auth.register.emailPlaceholder\",\n                \"you@example.com\",\n              )}\n            />\n          </div>\n        </div>\n\n        {/* Password Input */}\n        <div className=\"space-y-2\">\n          <label\n            htmlFor=\"password\"\n            className=\"block text-sm font-medium text-[var(--color-text-primary)]\"\n          >\n            {tr(\"auth.register.password\", \"Password\")}\n          </label>\n          <div className=\"relative\">\n            <div className=\"absolute inset-y-0 left-0 pl-3.5 flex items-center pointer-events-none\">\n              <LockIcon className=\"size-5 text-[var(--color-text-tertiary)]\" />\n            </div>\n            <input\n              id=\"password\"\n              type={showPassword ? \"text\" : \"password\"}\n              required\n              aria-required=\"true\"\n              aria-label={tr(\"auth.register.password\", \"Password\")}\n              autoComplete=\"new-password\"\n              value={formData.password}\n              onChange={(e) =>\n                setFormData({ ...formData, password: e.target.value })\n              }\n              className=\"block w-full pl-[3.5rem] pr-12 py-3 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] placeholder:text-[var(--color-text-tertiary)] focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all\"\n              placeholder={tr(\n                \"auth.register.passwordPlaceholder\",\n                \"Create a strong password\",\n              )}\n            />\n            <button\n              type=\"button\"\n              onClick={() => setShowPassword(!showPassword)}\n              aria-label={\n                showPassword\n                  ? tr(\"auth.register.hidePassword\", \"Hide password\")\n                  : tr(\"auth.register.showPassword\", \"Show password\")\n              }\n              className=\"absolute inset-y-0 right-0 pr-3.5 flex items-center text-[var(--color-text-tertiary)] hover:text-[var(--color-text-secondary)] transition-colors\"\n            >\n              {showPassword ? (\n                <EyeOffIcon className=\"size-5\" />\n              ) : (\n                <EyeIcon className=\"size-5\" />\n              )}\n            </button>\n          </div>\n\n          {/* Password Strength Indicator */}\n          {formData.password && (\n            <div className=\"space-y-3 pt-2\">\n              {/* Strength Bar */}\n              <div className=\"space-y-1\">\n                <div className=\"h-1.5 bg-[var(--color-bg-sunken)] rounded-full overflow-hidden\">\n                  <div\n                    className={`h-full ${passwordStrength.color} ${passwordStrength.width} transition-all duration-300`}\n                  />\n                </div>\n                <p className=\"text-xs text-[var(--color-text-tertiary)] capitalize\">\n                  {tr(\"auth.register.passwordStrength\", \"Password strength:\")}{\" \"}\n                  <span className=\"font-medium\">{passwordStrength.level}</span>\n                </p>\n              </div>\n\n              {/* Requirements Checklist */}\n              <div className=\"grid grid-cols-2 gap-2\">\n                {passwordChecks.map((check) => (\n                  <div key={check.label} className=\"flex items-center gap-2\">\n                    {check.met ? (\n                      <CheckIcon className=\"size-4 text-status-success-text\" />\n                    ) : (\n                      <XIcon className=\"size-4 text-[var(--color-text-tertiary)]\" />\n                    )}\n                    <span\n                      className={`text-xs ${\n                        check.met\n                          ? \"text-status-success-text\"\n                          : \"text-[var(--color-text-tertiary)]\"\n                      }`}\n                    >\n                      {check.label}\n                    </span>\n                  </div>\n                ))}\n              </div>\n            </div>\n          )}\n        </div>\n\n        {/* Terms Agreement */}\n        <p className=\"text-xs text-[var(--color-text-tertiary)] leading-relaxed\">\n          {tr(\n            \"auth.register.agreeToTerms\",\n            \"By creating an account, you agree to our\",\n          )}{\" \"}\n          <a\n            href=\"/legal/terms\"\n            className=\"text-text-link underline underline-offset-2\"\n          >\n            {tr(\"auth.register.termsOfService\", \"Terms of Service\")}\n          </a>{\" \"}\n          {tr(\"auth.register.and\", \"and\")}{\" \"}\n          <a\n            href=\"/legal/privacy\"\n            className=\"text-text-link underline underline-offset-2\"\n          >\n            {tr(\"auth.register.privacyPolicy\", \"Privacy Policy\")}\n          </a>\n          .\n        </p>\n\n        {/* reCAPTCHA v2 Checkbox — enabled per-product via the platform catalog.\n            `key` remounts it after a failed submit so a fresh token is issued. */}\n        <CaptchaV2\n          key={captchaResetKey}\n          enabled={captchaEnabled}\n          siteKey={captchaSiteKey}\n          onVerify={setCaptchaToken}\n          onExpired={() => setCaptchaToken(null)}\n        />\n\n        {/* Submit Button */}\n        <Button\n          type=\"submit\"\n          disabled={isLoading}\n          variant=\"default\"\n          size=\"lg\"\n          className=\"w-full font-semibold\"\n        >\n          {isLoading ? (\n            <>\n              <SpinnerIcon className=\"size-5 animate-spin\" />\n              <span>\n                {tr(\"auth.register.creatingAccount\", \"Creating account...\")}\n              </span>\n            </>\n          ) : (\n            tr(\"auth.register.createAccountBtn\", \"Create account\")\n          )}\n        </Button>\n      </form>\n\n      {/* Divider */}\n      <div className=\"relative my-8\">\n        <div className=\"absolute inset-0 flex items-center\">\n          <div className=\"w-full border-t border-[var(--color-border-default)]\" />\n        </div>\n        <div className=\"relative flex justify-center\">\n          <span className=\"px-4 bg-[var(--color-bg-canvas)] text-sm text-[var(--color-text-tertiary)]\">\n            {tr(\"auth.register.orSignUpWith\", \"or sign up with\")}\n          </span>\n        </div>\n      </div>\n\n      {/* OAuth Error */}\n      {oauthError && (\n        <div className=\"flex items-start gap-3 p-4 rounded-xl border bg-status-error-bg-subtle border-status-error-border\">\n          <AlertIcon className=\"size-5 flex-shrink-0 mt-0.5 text-status-error-text\" />\n          <p className=\"text-sm text-status-error-text\">{oauthError}</p>\n        </div>\n      )}\n\n      {/* OAuth Buttons */}\n      <div className=\"grid grid-cols-3 gap-3\">\n        {oauthProviders.map((provider) => (\n          <button\n            key={provider.name}\n            type=\"button\"\n            onClick={provider.onClick}\n            disabled={provider.disabled}\n            title={provider.tooltip}\n            className={`flex items-center justify-center gap-2 px-4 py-3 rounded-xl border transition-all duration-200 group ${\n              provider.disabled\n                ? \"border-[var(--color-border-subtle)] bg-[var(--color-bg-disabled)] cursor-not-allowed opacity-50\"\n                : \"border-[var(--color-border-default)] bg-[var(--color-bg-surface)] hover:bg-[var(--color-bg-sunken)] hover:border-[var(--color-border-strong)]\"\n            }`}\n          >\n            <provider.icon\n              className={`size-5 ${provider.disabled ? \"opacity-50\" : \"\"}`}\n            />\n            <span\n              className={`sr-only sm:not-sr-only text-sm font-medium transition-colors ${\n                provider.disabled\n                  ? \"text-[var(--color-text-disabled)]\"\n                  : \"text-[var(--color-text-secondary)] group-hover:text-[var(--color-text-primary)]\"\n              }`}\n            >\n              {provider.name}\n            </span>\n          </button>\n        ))}\n      </div>\n\n      {/* Sign In Link */}\n      <p className=\"mt-8 text-center text-sm text-[var(--color-text-secondary)]\">\n        {tr(\"auth.register.alreadyHaveAccount\", \"Already have an account?\")}{\" \"}\n        <button\n          type=\"button\"\n          onClick={() => navigate(\"/auth/login\")}\n          className=\"font-semibold text-text-link hover:text-text-linkHover transition-colors\"\n        >\n          {tr(\"auth.register.signIn\", \"Sign in\")}\n        </button>\n      </p>\n    </AuthLayout>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;AA+BA,SAAgB,IAAe;CAC7B,IAAM,IAAK,GAAO,EACZ,EAAE,mBAAgB,GAAS,EAC3B,IAAW,IAAa,EAExB,EAAE,WAAQ,uBAAoB,cAAW,iBAC7C,GAAmB,EACf,EAAE,yBAAqB,4BAAwB,4BACnD,IAAoB,EAChB,CAAC,GAAc,MAAmB,EAAS,GAAM,EACjD,CAAC,GAAU,KAAe,EAAsB;EACpD,OAAO;EACP,UAAU;EACV,UAAU;EACV,WAAW;EACX,UAAU;EACX,CAAC,EACI,CAAC,GAAkB,KAAuB,EAAmB,EAAE,CAAC,EAChE,CAAC,GAAe,KAAoB,EAAS,GAAM,EACnD,CAAC,GAAO,KAAY,EAAwB,KAAK,EACjD,CAAC,GAAY,KAAiB,EAAwB,KAAK,EAC3D,CAAC,GAAc,KAAmB,EAAwB,KAAK,EAI/D,CAAC,GAAiB,KAAsB,EAAS,EAAE,EACnD,EAAE,SAAS,GAAgB,SAAS,OACxC,IAAkB,EACd,CAAC,GAAyB,KAA8B,EAAS,GAAM,EACvE,CAAC,GAAa,KAAkB,EAAwB,KAAK,EAI7D,IACJ,EAAQ,KAAU,MAAc,uBAC5B,IAAmB,EAAQ,KAAU,MAAc,mBACnD,IACJ,EAAQ,KAAU,MAAc,qBAG5B,WAAwB;EAC5B,IAAM,IAAW,EAAS;AAC1B,SAAO;GACL;IACE,OAAO,EAAG,wBAAwB,yBAAyB;IAC3D,KAAK,EAAS,UAAU;IACzB;GACD;IACE,OAAO,EAAG,6BAA6B,uBAAuB;IAC9D,KAAK,QAAQ,KAAK,EAAS;IAC5B;GACD;IACE,OAAO,EAAG,6BAA6B,uBAAuB;IAC9D,KAAK,QAAQ,KAAK,EAAS;IAC5B;GACD;IACE,OAAO,EAAG,0BAA0B,aAAa;IACjD,KAAK,KAAK,KAAK,EAAS;IACzB;GACD;IACE,OAAO,EAAG,2BAA2B,wBAAwB;IAC7D,KAAK,yBAAyB,KAAK,EAAS;IAC7C;GACF;KACC,EAEE,WAA0B;EAC9B,IAAM,IAAW,EAAe,QAAQ,MAAM,EAAE,IAAI,CAAC;AAmBrD,SAlBI,KAAY,IACP;GACL,OAAO,EAAG,sCAAsC,OAAO;GACvD,OAAO;GACP,OAAO;GACR,GACC,KAAY,IACP;GACL,OAAO,EAAG,sCAAsC,OAAO;GACvD,OAAO;GACP,OAAO;GACR,GACC,KAAY,IACP;GACL,OAAO,EAAG,sCAAsC,OAAO;GACvD,OAAO;GACP,OAAO;GACR,GACI;GACL,OAAO,EAAG,wCAAwC,SAAS;GAC3D,OAAO;GACP,OAAO;GACR;KACC,EAEE,IAAe,OAAO,MAAuB;AACjD,IAAE,gBAAgB;EAElB,IAAM,IAAmB,EAAE;AAc3B,EAbK,EAAc,EAAS,MAAM,IAChC,EAAO,KACL,EAAG,8BAA8B,qCAAqC,CACvE,GAEC,CAAC,EAAS,YAAY,EAAS,SAAS,SAAS,MACnD,EAAO,KACL,EACE,8BACA,yCACD,CACF,EAEE,mBAAmB,KAAK,EAAS,SAAS,IAC7C,EAAO,KACL,EACE,+BACA,uEACD,CACF;EAEH,IAAM,IAAqB,EAAiB,EAAS,SAAS;AAc9D,MAbK,EAAmB,SACtB,EAAO,KAAK,GAAG,EAAmB,OAAO,EAGvC,KAAkB,CAAC,KACrB,EAAO,KACL,EACE,iCACA,6CACD,CACF,EAGC,EAAO,SAAS,GAAG;AACrB,KAAoB,EAAO;AAC3B;;AAIF,EADA,EAAoB,EAAE,CAAC,EACvB,EAAS,KAAK;AACd,MAAI;AAOF,GANA,MAAM,EAAO;IACX,GAAG;IACH,GAAI,IAAe,EAAE,gBAAgB,GAAc,GAAG,EAAE;IACzD,CAAC,EAGF,EAAiB,GAAK;WACf,GAAK;AAUZ,GALA,EAHE,aAAe,QACX,EAAI,UACJ,EAAG,8BAA8B,iBAAiB,CACvC,EACjB,QAAQ,MAAM,mBAAmB,EAAI,EAIjC,MACF,EAAgB,KAAK,EACrB,GAAoB,MAAM,IAAI,EAAE;;IAQhC,WAA2B;AAC/B,IAAc,KAAK;AACnB,MAAI;AACF,OAAqB;WACd,GAAK;AACZ,KACE,aAAe,QACX,EAAI,UACJ,EACE,oCACA,oCACD,CACN;;IAOC,WAA8B;AAClC,IAAc,KAAK;AACnB,MAAI;AACF,OAAwB;WACjB,GAAK;AACZ,KACE,aAAe,QACX,EAAI,UACJ,EACE,uCACA,uCACD,CACN;;IAKC,IAAqB,EAAqB,SAAS,EACnD,IAAwB,EAAqB,YAAY,EAEzD,KAAiB;EACrB;GACE,MAAM;GACN,MAAM;GACN,SAAS;GACT,UAAU,CAAC;GACX,SAAS,IACL,KAAA,IACA,EACE,qCACA,mCACD;GACN;EACD;GACE,MAAM;GACN,MAAM;GACN,eAAe;GACf,UAAU;GACV,SAAS,EACP,qCACA,mCACD;GACF;EACD;GACE,MAAM;GACN,MAAM;GACN,SAAS;GACT,UAAU,CAAC;GACX,SAAS,IACL,KAAA,IACA,EACE,wCACA,sCACD;GACN;EACF,EAMK,CAAC,IAAyB,KAA0B,MAJzB,EAC/B,yCACA,kIACD,CAE0B,MAAM,YAAY;AAoG7C,QAjGI,IAEA,kBAAC,GAAD;EACE,OAAO,EAAG,4BAA4B,mBAAmB;EACzD,UAAU,EACR,sCACA,qCACD;YAED,kBAAC,OAAD;GAAK,WAAU;aAAf;IAEE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,OAAD;MACE,WAAU;MACV,MAAK;MACL,SAAQ;MACR,QAAO;gBAEP,kBAAC,QAAD;OACE,eAAc;OACd,gBAAe;OACf,aAAa;OACb,GAAE;OACF,CAAA;MACE,CAAA;KACF,CAAA;IAEN,kBAAC,MAAD;KAAI,WAAU;eACX,EACC,gCACA,gCACD;KACE,CAAA;IAEL,kBAAC,KAAD;KAAG,WAAU;eAAb;MACG;MACD,kBAAC,QAAD;OAAM,WAAU;iBACb,EAAS;OACL,CAAA;MACN;MACC;;IAEJ,kBAAC,OAAD;KAAK,WAAU;eAAf;MACE,kBAAC,GAAD;OACE,MAAK;OACL,eAAe,EAAS,cAAc;OACtC,SAAQ;OACR,MAAK;OACL,WAAU;iBAET,EAAG,kCAAkC,sBAAsB;OACrD,CAAA;MAER,KACC,kBAAC,KAAD;OAAG,WAAU;iBACV;OACC,CAAA;MAEN,kBAAC,KAAD;OAAG,WAAU;iBAAb;QACG,EACC,mCACA,sDACD;QAAE;QACH,kBAAC,UAAD;SACE,MAAK;SACL,UAAU;SACV,SAAS,YAAY;AAEnB,UADA,EAAe,KAAK,EACpB,EAA2B,GAAK;AAChC,cAAI;AACF,iBAAM,EAAmB,EAAS,MAAM;mBACjC,GAAK;AACZ,aACE,aAAe,QACX,EAAI,UACJ,EACE,8BACA,sCACD,CACN;oBACO;AACR,aAA2B,GAAM;;;SAGrC,WAAU;mBAET,IACG,EAAG,2BAA2B,eAAe,GAC7C,EAAG,0BAA0B,YAAY;SACtC,CAAA;QACP;;MACA;;IACF;;EACK,CAAA,GAKf,kBAAC,GAAD;EACE,OAAO,EAAG,+BAA+B,sBAAsB;EAC/D,UAAU,EACR,8BACA,0CACD,CAAC,QAAQ,mBAAmB,KAAe,uBAAuB;EACtD;YANf;GAQE,kBAAC,IAAD;IAAa,WAAU;cACpB,EACC,yBACA,gJACD;IACW,CAAA;GACd,kBAAC,QAAD;IAAM,UAAU;IAAc,WAAU;cAAxC;KAEG,KACC,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,GAAD,EAAW,WAAU,wDAAyD,CAAA,EAC9E,kBAAC,OAAD;OAAK,WAAU;iBAAf;QACE,kBAAC,KAAD;SAAG,WAAU;mBACV,EACC,oCACA,+CACD;SACC,CAAA;QACJ,kBAAC,KAAD;SAAG,WAAU;mBACV,EACC,wCACA,gFACD;SACC,CAAA;QACJ,kBAAC,UAAD;SACE,MAAK;SACL,eACE,EAAS,oBAAoB,EAC3B,OAAO,EAAE,OAAO,EAAS,OAAO,EACjC,CAAC;SAEJ,WAAU;mBAET,EAAG,+BAA+B,wBAAwB;SACpD,CAAA;QACL;SACF;;MAIN,KAAoB,MACpB,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,GAAD,EAAW,WAAU,wDAAyD,CAAA,EAC9E,kBAAC,KAAD;OAAG,WAAU;iBAAoC;OAAU,CAAA,CACvD;;MAIL,KACD,CAAC,KACD,CAAC,KACD,CAAC,KACD,EAAiB,SAAS,MAC1B,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,GAAD,EAAW,WAAU,sDAAuD,CAAA,EAC5E,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACG,KACC,CAAC,KACD,CAAC,KACD,CAAC,KACC,kBAAC,KAAD;QAAG,WAAU;kBAAkC;QAAU,CAAA,EAE5D,EAAiB,KAAK,MACrB,kBAAC,KAAD;QAAa,WAAU;kBACpB;QACC,EAFI,EAEJ,CACJ,CACE;SACF;;KAIR,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,SAAD;QACE,SAAQ;QACR,WAAU;kBAET,EAAG,2BAA2B,aAAa;QACtC,CAAA,EACR,kBAAC,SAAD;QACE,IAAG;QACH,MAAK;QACL,UAAA;QACA,iBAAc;QACd,cAAY,EAAG,2BAA2B,aAAa;QACvD,OAAO,EAAS;QAChB,WAAW,MACT,EAAY;SAAE,GAAG;SAAU,WAAW,EAAE,OAAO;SAAO,CAAC;QAEzD,WAAU;QACV,aAAa,EACX,sCACA,mBACD;QACD,CAAA,CACE;UACN,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,SAAD;QACE,SAAQ;QACR,WAAU;kBAET,EAAG,0BAA0B,YAAY;QACpC,CAAA,EACR,kBAAC,SAAD;QACE,IAAG;QACH,MAAK;QACL,UAAA;QACA,iBAAc;QACd,cAAY,EAAG,0BAA0B,YAAY;QACrD,OAAO,EAAS;QAChB,WAAW,MACT,EAAY;SAAE,GAAG;SAAU,UAAU,EAAE,OAAO;SAAO,CAAC;QAExD,WAAU;QACV,aAAa,EACX,qCACA,kBACD;QACD,CAAA,CACE;SACF;;KAGN,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,SAAD;OACE,SAAQ;OACR,WAAU;iBAET,EAAG,0BAA0B,WAAW;OACnC,CAAA,EACR,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,OAAD;QAAK,WAAU;kBACb,kBAAC,GAAD,EAAU,WAAU,4CAA6C,CAAA;QAC7D,CAAA,EACN,kBAAC,SAAD;QACE,IAAG;QACH,MAAK;QACL,UAAA;QACA,iBAAc;QACd,cAAY,EAAG,0BAA0B,WAAW;QACpD,cAAa;QACb,OAAO,EAAS;QAChB,WAAW,MACT,EAAY;SAAE,GAAG;SAAU,UAAU,EAAE,OAAO;SAAO,CAAC;QAExD,WAAU;QACV,aAAa,EACX,qCACA,oBACD;QACD,CAAA,CACE;SACF;;KAGN,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,SAAD;OACE,SAAQ;OACR,WAAU;iBAET,EAAG,uBAAuB,QAAQ;OAC7B,CAAA,EACR,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,OAAD;QAAK,WAAU;kBACb,kBAAC,GAAD,EAAW,WAAU,4CAA6C,CAAA;QAC9D,CAAA,EACN,kBAAC,SAAD;QACE,IAAG;QACH,MAAK;QACL,UAAA;QACA,iBAAc;QACd,cAAY,EAAG,uBAAuB,QAAQ;QAC9C,cAAa;QACb,OAAO,EAAS;QAChB,WAAW,MACT,EAAY;SAAE,GAAG;SAAU,OAAO,EAAE,OAAO;SAAO,CAAC;QAErD,WAAU;QACV,aAAa,EACX,kCACA,kBACD;QACD,CAAA,CACE;SACF;;KAGN,kBAAC,OAAD;MAAK,WAAU;gBAAf;OACE,kBAAC,SAAD;QACE,SAAQ;QACR,WAAU;kBAET,EAAG,0BAA0B,WAAW;QACnC,CAAA;OACR,kBAAC,OAAD;QAAK,WAAU;kBAAf;SACE,kBAAC,OAAD;UAAK,WAAU;oBACb,kBAAC,GAAD,EAAU,WAAU,4CAA6C,CAAA;UAC7D,CAAA;SACN,kBAAC,SAAD;UACE,IAAG;UACH,MAAM,IAAe,SAAS;UAC9B,UAAA;UACA,iBAAc;UACd,cAAY,EAAG,0BAA0B,WAAW;UACpD,cAAa;UACb,OAAO,EAAS;UAChB,WAAW,MACT,EAAY;WAAE,GAAG;WAAU,UAAU,EAAE,OAAO;WAAO,CAAC;UAExD,WAAU;UACV,aAAa,EACX,qCACA,2BACD;UACD,CAAA;SACF,kBAAC,UAAD;UACE,MAAK;UACL,eAAe,GAAgB,CAAC,EAAa;UAC7C,cACE,IACI,EAAG,8BAA8B,gBAAgB,GACjD,EAAG,8BAA8B,gBAAgB;UAEvD,WAAU;oBAGR,EADD,IACE,IAEA,IAFD,EAAY,WAAU,UAAW,CAEH;UAEzB,CAAA;SACL;;OAGL,EAAS,YACR,kBAAC,OAAD;QAAK,WAAU;kBAAf,CAEE,kBAAC,OAAD;SAAK,WAAU;mBAAf,CACE,kBAAC,OAAD;UAAK,WAAU;oBACb,kBAAC,OAAD,EACE,WAAW,UAAU,EAAiB,MAAM,GAAG,EAAiB,MAAM,+BACtE,CAAA;UACE,CAAA,EACN,kBAAC,KAAD;UAAG,WAAU;oBAAb;WACG,EAAG,kCAAkC,qBAAqB;WAAE;WAC7D,kBAAC,QAAD;YAAM,WAAU;sBAAe,EAAiB;YAAa,CAAA;WAC3D;YACA;YAGN,kBAAC,OAAD;SAAK,WAAU;mBACZ,EAAe,KAAK,MACnB,kBAAC,OAAD;UAAuB,WAAU;oBAAjC,CACG,EAAM,MACL,kBAAC,IAAD,EAAW,WAAU,mCAAoC,CAAA,GAEzD,kBAAC,GAAD,EAAO,WAAU,4CAA6C,CAAA,EAEhE,kBAAC,QAAD;WACE,WAAW,WACT,EAAM,MACF,6BACA;qBAGL,EAAM;WACF,CAAA,CACH;YAfI,EAAM,MAeV,CACN;SACE,CAAA,CACF;;OAEJ;;KAGN,kBAAC,KAAD;MAAG,WAAU;gBAAb;OACG,EACC,8BACA,2CACD;OAAE;OACH,kBAAC,KAAD;QACE,MAAK;QACL,WAAU;kBAET,EAAG,gCAAgC,mBAAmB;QACrD,CAAA;OAAC;OACJ,EAAG,qBAAqB,MAAM;OAAE;OACjC,kBAAC,KAAD;QACE,MAAK;QACL,WAAU;kBAET,EAAG,+BAA+B,iBAAiB;QAClD,CAAA;;OAEF;;KAIJ,kBAAC,IAAD;MAEE,SAAS;MACT,SAAS;MACT,UAAU;MACV,iBAAiB,EAAgB,KAAK;MACtC,EALK,EAKL;KAGF,kBAAC,GAAD;MACE,MAAK;MACL,UAAU;MACV,SAAQ;MACR,MAAK;MACL,WAAU;gBAET,IACC,kBAAA,IAAA,EAAA,UAAA,CACE,kBAAC,GAAD,EAAa,WAAU,uBAAwB,CAAA,EAC/C,kBAAC,QAAD,EAAA,UACG,EAAG,iCAAiC,sBAAsB,EACtD,CAAA,CACN,EAAA,CAAA,GAEH,EAAG,kCAAkC,iBAAiB;MAEjD,CAAA;KACJ;;GAGP,kBAAC,OAAD;IAAK,WAAU;cAAf,CACE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,OAAD,EAAK,WAAU,wDAAyD,CAAA;KACpE,CAAA,EACN,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,QAAD;MAAM,WAAU;gBACb,EAAG,8BAA8B,kBAAkB;MAC/C,CAAA;KACH,CAAA,CACF;;GAGL,KACC,kBAAC,OAAD;IAAK,WAAU;cAAf,CACE,kBAAC,GAAD,EAAW,WAAU,sDAAuD,CAAA,EAC5E,kBAAC,KAAD;KAAG,WAAU;eAAkC;KAAe,CAAA,CAC1D;;GAIR,kBAAC,OAAD;IAAK,WAAU;cACZ,GAAe,KAAK,MACnB,kBAAC,UAAD;KAEE,MAAK;KACL,SAAS,EAAS;KAClB,UAAU,EAAS;KACnB,OAAO,EAAS;KAChB,WAAW,wGACT,EAAS,WACL,oGACA;eATR,CAYE,kBAAC,EAAS,MAAV,EACE,WAAW,UAAU,EAAS,WAAW,eAAe,MACxD,CAAA,EACF,kBAAC,QAAD;MACE,WAAW,gEACT,EAAS,WACL,sCACA;gBAGL,EAAS;MACL,CAAA,CACA;OAvBF,EAAS,KAuBP,CACT;IACE,CAAA;GAGN,kBAAC,KAAD;IAAG,WAAU;cAAb;KACG,EAAG,oCAAoC,2BAA2B;KAAE;KACrE,kBAAC,UAAD;MACE,MAAK;MACL,eAAe,EAAS,cAAc;MACtC,WAAU;gBAET,EAAG,wBAAwB,UAAU;MAC/B,CAAA;KACP;;GACO"}
+{"version":3,"file":"RegisterPage.js","names":[],"sources":["../../../src/auth/pages/RegisterPage.tsx"],"sourcesContent":["import { useState } from \"react\";\nimport { useNavigate } from \"react-router\";\nimport { useTr } from \"../../shared/hooks/useTr\";\nimport { validateEmail, validatePassword } from \"../utils/validation\";\nimport { resolveLegalUrl } from \"../utils/legalUrls\";\nimport { useAuthOperations } from \"../hooks/useAuthOperations\";\nimport { useOAuthOperations } from \"../hooks/useOAuthOperations\";\nimport { AuthLayout } from \"../components/AuthLayout\";\nimport { Button } from \"@burdenoff/fe-libs/button\";\nimport { PagePurpose } from \"@burdenoff/fe-libs/ui\";\nimport {\n  EmailIcon,\n  LockIcon,\n  UserIcon,\n  EyeIcon,\n  EyeOffIcon,\n  AlertIcon,\n  CheckIcon,\n  XIcon,\n  SpinnerIcon,\n  GoogleIcon,\n  GitHubIcon,\n  MicrosoftIcon,\n} from \"../components/AuthIcons\";\nimport { useAuth } from \"../providers/AuthProvider\";\nimport { CaptchaV2 } from \"../components/CaptchaV2\";\nimport { useSignupCaptcha } from \"../hooks/useSignupCaptcha\";\nimport type { SignUpInput } from \"../types\";\n\n/**\n * Registration page with professional design\n */\nexport function RegisterPage() {\n  const tr = useTr();\n  const { productName } = useAuth();\n  const navigate = useNavigate();\n\n  const { signUp, resendVerification, isLoading, errorCode } =\n    useAuthOperations();\n  const { initiateGoogleOAuth, initiateMicrosoftOAuth, isProviderConfigured } =\n    useOAuthOperations();\n  const [showPassword, setShowPassword] = useState(false);\n  const [formData, setFormData] = useState<SignUpInput>({\n    email: \"\",\n    username: \"\",\n    password: \"\",\n    firstName: \"\",\n    lastName: \"\",\n  });\n  const [validationErrors, setValidationErrors] = useState<string[]>([]);\n  const [signupSuccess, setSignupSuccess] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n  const [oauthError, setOauthError] = useState<string | null>(null);\n  const [captchaToken, setCaptchaToken] = useState<string | null>(null);\n  // reCAPTCHA v2 tokens are single-use. Bumping this key remounts the widget so\n  // a fresh token is issued after a failed submit (the prior token is consumed\n  // server-side; reusing it returns timeout-or-duplicate → CAPTCHA_FAILED loop).\n  const [captchaResetKey, setCaptchaResetKey] = useState(0);\n  const { enabled: captchaEnabled, siteKey: captchaSiteKey } =\n    useSignupCaptcha();\n  const [isResendingVerification, setIsResendingVerification] = useState(false);\n  const [resendError, setResendError] = useState<string | null>(null);\n\n  // Signing up with an email that already belongs to a non-active account:\n  // route the user to the right recovery path instead of dead-ending.\n  const isAccountDeactivated =\n    Boolean(error) && errorCode === \"ACCOUNT_DEACTIVATED\";\n  const isAccountRemoved = Boolean(error) && errorCode === \"ACCOUNT_REMOVED\";\n  const isAccountSuspended =\n    Boolean(error) && errorCode === \"ACCOUNT_SUSPENDED\";\n\n  // Password strength indicators\n  const passwordChecks = (() => {\n    const password = formData.password;\n    return [\n      {\n        label: tr(\"auth.register.pwMin8\", \"At least 12 characters\"),\n        met: password.length >= 12,\n      },\n      {\n        label: tr(\"auth.register.pwUppercase\", \"One uppercase letter\"),\n        met: /[A-Z]/.test(password),\n      },\n      {\n        label: tr(\"auth.register.pwLowercase\", \"One lowercase letter\"),\n        met: /[a-z]/.test(password),\n      },\n      {\n        label: tr(\"auth.register.pwNumber\", \"One number\"),\n        met: /\\d/.test(password),\n      },\n      {\n        label: tr(\"auth.register.pwSpecial\", \"One special character\"),\n        met: /[!@#$%^&*(),.?\":{}|<>]/.test(password),\n      },\n    ];\n  })();\n\n  const passwordStrength = (() => {\n    const metCount = passwordChecks.filter((c) => c.met).length;\n    if (metCount <= 2)\n      return {\n        level: tr(\"auth.register.passwordStrengthWeak\", \"weak\"),\n        color: \"bg-status-error-bg-subtle0\",\n        width: \"w-1/4\",\n      };\n    if (metCount <= 3)\n      return {\n        level: tr(\"auth.register.passwordStrengthFair\", \"fair\"),\n        color: \"bg-status-warning-text\",\n        width: \"w-2/4\",\n      };\n    if (metCount <= 4)\n      return {\n        level: tr(\"auth.register.passwordStrengthGood\", \"good\"),\n        color: \"bg-status-warning-bg-subtle0\",\n        width: \"w-3/4\",\n      };\n    return {\n      level: tr(\"auth.register.passwordStrengthStrong\", \"strong\"),\n      color: \"bg-status-success-text\",\n      width: \"w-full\",\n    };\n  })();\n\n  const handleSubmit = async (e: React.FormEvent) => {\n    e.preventDefault();\n\n    const errors: string[] = [];\n    if (!validateEmail(formData.email)) {\n      errors.push(\n        tr(\"auth.register.invalidEmail\", \"Please enter a valid email address\"),\n      );\n    }\n    if (!formData.username || formData.username.length < 3) {\n      errors.push(\n        tr(\n          \"auth.register.usernameMin3\",\n          \"Username must be at least 3 characters\",\n        ),\n      );\n    }\n    if (!/^[a-zA-Z0-9_-]+$/.test(formData.username)) {\n      errors.push(\n        tr(\n          \"auth.register.usernameChars\",\n          \"Username can only contain letters, numbers, underscores, and hyphens\",\n        ),\n      );\n    }\n    const passwordValidation = validatePassword(formData.password);\n    if (!passwordValidation.valid) {\n      errors.push(...passwordValidation.errors);\n    }\n\n    if (captchaEnabled && !captchaToken) {\n      errors.push(\n        tr(\n          \"auth.register.completeCaptcha\",\n          \"Please complete the reCAPTCHA verification\",\n        ),\n      );\n    }\n\n    if (errors.length > 0) {\n      setValidationErrors(errors);\n      return;\n    }\n\n    setValidationErrors([]);\n    setError(null);\n    try {\n      await signUp({\n        ...formData,\n        ...(captchaToken ? { recaptchaToken: captchaToken } : {}),\n      });\n      // Sign up successful - check if email verification is required\n      // (Backend returns empty tokens when email verification is needed)\n      setSignupSuccess(true);\n    } catch (err) {\n      const message =\n        err instanceof Error\n          ? err.message\n          : tr(\"auth.register.signUpFailed\", \"Sign up failed\");\n      setError(message);\n      console.error(\"Sign up failed:\", err);\n      // The captcha token (if any) was consumed during this attempt — discard it\n      // and remount the widget so the user gets a fresh, solvable challenge on\n      // retry instead of being trapped in a CAPTCHA_FAILED loop.\n      if (captchaEnabled) {\n        setCaptchaToken(null);\n        setCaptchaResetKey((k) => k + 1);\n      }\n    }\n  };\n\n  /**\n   * Handle Google OAuth signup\n   */\n  const handleGoogleSignup = () => {\n    setOauthError(null);\n    try {\n      initiateGoogleOAuth();\n    } catch (err) {\n      setOauthError(\n        err instanceof Error\n          ? err.message\n          : tr(\n              \"auth.register.googleSignUpFailed\",\n              \"Failed to initiate Google sign up\",\n            ),\n      );\n    }\n  };\n\n  /**\n   * Handle Microsoft OAuth signup\n   */\n  const handleMicrosoftSignup = () => {\n    setOauthError(null);\n    try {\n      initiateMicrosoftOAuth();\n    } catch (err) {\n      setOauthError(\n        err instanceof Error\n          ? err.message\n          : tr(\n              \"auth.register.microsoftSignUpFailed\",\n              \"Failed to initiate Microsoft sign up\",\n            ),\n      );\n    }\n  };\n\n  // Check if OAuth providers are configured\n  const isGoogleConfigured = isProviderConfigured(\"google\");\n  const isMicrosoftConfigured = isProviderConfigured(\"microsoft\");\n\n  const oauthProviders = [\n    {\n      name: \"Google\",\n      icon: GoogleIcon,\n      onClick: handleGoogleSignup,\n      disabled: !isGoogleConfigured,\n      tooltip: isGoogleConfigured\n        ? undefined\n        : tr(\n            \"auth.register.googleNotConfigured\",\n            \"Google sign up is not configured\",\n          ),\n    },\n    {\n      name: \"GitHub\",\n      icon: GitHubIcon,\n      onClick: () => {},\n      disabled: true,\n      tooltip: tr(\n        \"auth.register.githubNotConfigured\",\n        \"GitHub sign up is not configured\",\n      ),\n    },\n    {\n      name: \"Microsoft\",\n      icon: MicrosoftIcon,\n      onClick: handleMicrosoftSignup,\n      disabled: !isMicrosoftConfigured,\n      tooltip: isMicrosoftConfigured\n        ? undefined\n        : tr(\n            \"auth.register.microsoftNotConfigured\",\n            \"Microsoft sign up is not configured\",\n          ),\n    },\n  ];\n\n  const verificationEmailMessage = tr(\n    \"auth.register.verificationEmailSentTo\",\n    \"We've sent a verification email to {{email}}. Please check your inbox and click the verification link to activate your account.\",\n  );\n  const [verificationEmailPrefix, verificationEmailSuffix = \"\"] =\n    verificationEmailMessage.split(\"{{email}}\");\n\n  // Show success state after signup\n  if (signupSuccess) {\n    return (\n      <AuthLayout\n        title={tr(\"auth.register.checkEmail\", \"Check your email\")}\n        subtitle={tr(\n          \"auth.register.verificationLinkSent\",\n          \"We've sent you a verification link\",\n        )}\n      >\n        <div className=\"flex flex-col items-center justify-center py-6\">\n          {/* Success Icon */}\n          <div className=\"size-20 rounded-full bg-status-success-bg-subtle flex items-center justify-center mb-6\">\n            <svg\n              className=\"size-10 text-status-success-text\"\n              fill=\"none\"\n              viewBox=\"0 0 24 24\"\n              stroke=\"currentColor\"\n            >\n              <path\n                strokeLinecap=\"round\"\n                strokeLinejoin=\"round\"\n                strokeWidth={2}\n                d=\"M3 8l7.89 5.26a2 2 0 002.22 0L21 8M5 19h14a2 2 0 002-2V7a2 2 0 00-2-2H5a2 2 0 00-2 2v10a2 2 0 002 2z\"\n              />\n            </svg>\n          </div>\n\n          <h3 className=\"text-lg font-semibold text-[var(--color-text-primary)] mb-2\">\n            {tr(\n              \"auth.register.accountCreated\",\n              \"Account created successfully!\",\n            )}\n          </h3>\n\n          <p className=\"text-center text-[var(--color-text-secondary)] mb-8 max-w-sm\">\n            {verificationEmailPrefix}\n            <span className=\"font-medium text-[var(--color-text-primary)]\">\n              {formData.email}\n            </span>\n            {verificationEmailSuffix}\n          </p>\n\n          <div className=\"space-y-3 w-full\">\n            <Button\n              type=\"button\"\n              onClick={() => navigate(\"/auth/login\")}\n              variant=\"default\"\n              size=\"lg\"\n              className=\"w-full font-semibold\"\n            >\n              {tr(\"auth.register.continueToSignIn\", \"Continue to sign in\")}\n            </Button>\n\n            {resendError && (\n              <p className=\"text-center text-sm text-status-error-text\">\n                {resendError}\n              </p>\n            )}\n            <p className=\"text-center text-sm text-[var(--color-text-tertiary)]\">\n              {tr(\n                \"auth.register.didntReceiveEmail\",\n                \"Didn't receive the email? Check your spam folder or\",\n              )}{\" \"}\n              <button\n                type=\"button\"\n                disabled={isResendingVerification}\n                onClick={async () => {\n                  setResendError(null);\n                  setIsResendingVerification(true);\n                  try {\n                    await resendVerification(formData.email);\n                  } catch (err) {\n                    setResendError(\n                      err instanceof Error\n                        ? err.message\n                        : tr(\n                            \"auth.register.resendFailed\",\n                            \"Failed to resend verification email\",\n                          ),\n                    );\n                  } finally {\n                    setIsResendingVerification(false);\n                  }\n                }}\n                className=\"text-text-link hover:text-text-linkHover font-medium disabled:opacity-50 disabled:cursor-not-allowed\"\n              >\n                {isResendingVerification\n                  ? tr(\"auth.register.resending\", \"resending...\")\n                  : tr(\"auth.register.tryAgain\", \"try again\")}\n              </button>\n            </p>\n          </div>\n        </div>\n      </AuthLayout>\n    );\n  }\n\n  return (\n    <AuthLayout\n      title={tr(\"auth.register.createAccount\", \"Create your account\")}\n      subtitle={tr(\n        \"auth.register.startJourney\",\n        \"Start your journey with {{productName}}\",\n      ).replace(\"{{productName}}\", productName || \"Burdenoff Workspaces\")}\n      productName={productName}\n    >\n      <PagePurpose className=\"mb-5\">\n        {tr(\n          \"auth.register.purpose\",\n          \"Create your account to get a personal workspace and start collaborating. You'll verify your email, then you can sign in and invite your team.\",\n        )}\n      </PagePurpose>\n      <form onSubmit={handleSubmit} className=\"space-y-5\">\n        {/* Deactivated account → offer self-service reactivation */}\n        {isAccountDeactivated && (\n          <div className=\"flex items-start gap-3 p-4 rounded-xl bg-status-warning-bg-subtle border border-status-warning-border\">\n            <AlertIcon className=\"size-5 text-status-warning-text flex-shrink-0 mt-0.5\" />\n            <div className=\"space-y-2\">\n              <p className=\"text-sm font-medium text-status-warning-text\">\n                {tr(\n                  \"auth.register.accountDeactivated\",\n                  \"This email belongs to a deactivated account.\",\n                )}\n              </p>\n              <p className=\"text-xs text-status-warning-text/80\">\n                {tr(\n                  \"auth.register.accountDeactivatedHelp\",\n                  \"If this is your account, you can reactivate it instead of creating a new one.\",\n                )}\n              </p>\n              <button\n                type=\"button\"\n                onClick={() =>\n                  navigate(\"/auth/reactivate\", {\n                    state: { email: formData.email },\n                  })\n                }\n                className=\"text-sm font-semibold text-status-warning-text underline underline-offset-2\"\n              >\n                {tr(\"auth.register.reactivateCta\", \"Reactivate my account\")}\n              </button>\n            </div>\n          </div>\n        )}\n\n        {/* Admin-removed / suspended → point to support (no self-service path) */}\n        {(isAccountRemoved || isAccountSuspended) && (\n          <div className=\"flex items-start gap-3 p-4 rounded-xl bg-status-warning-bg-subtle border border-status-warning-border\">\n            <AlertIcon className=\"size-5 text-status-warning-text flex-shrink-0 mt-0.5\" />\n            <p className=\"text-sm text-status-warning-text\">{error}</p>\n          </div>\n        )}\n\n        {/* Generic error / validation alert */}\n        {((error &&\n          !isAccountDeactivated &&\n          !isAccountRemoved &&\n          !isAccountSuspended) ||\n          validationErrors.length > 0) && (\n          <div className=\"flex items-start gap-3 p-4 rounded-xl bg-status-error-bg-subtle border border-status-error-border\">\n            <AlertIcon className=\"size-5 text-status-error-text flex-shrink-0 mt-0.5\" />\n            <div className=\"space-y-1\">\n              {error &&\n                !isAccountDeactivated &&\n                !isAccountRemoved &&\n                !isAccountSuspended && (\n                  <p className=\"text-sm text-status-error-text\">{error}</p>\n                )}\n              {validationErrors.map((err) => (\n                <p key={err} className=\"text-sm text-status-error-text\">\n                  {err}\n                </p>\n              ))}\n            </div>\n          </div>\n        )}\n\n        {/* Name Fields */}\n        <div className=\"grid grid-cols-2 gap-4\">\n          <div className=\"space-y-2\">\n            <label\n              htmlFor=\"firstName\"\n              className=\"block text-sm font-medium text-[var(--color-text-primary)]\"\n            >\n              {tr(\"auth.register.firstName\", \"First Name\")}\n            </label>\n            <input\n              id=\"firstName\"\n              type=\"text\"\n              required\n              aria-required=\"true\"\n              aria-label={tr(\"auth.register.firstName\", \"First Name\")}\n              value={formData.firstName}\n              onChange={(e) =>\n                setFormData({ ...formData, firstName: e.target.value })\n              }\n              className=\"block w-full px-4 py-3 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] placeholder:text-[var(--color-text-tertiary)] focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all\"\n              placeholder={tr(\n                \"auth.register.firstNamePlaceholder\",\n                \"Enter first name\",\n              )}\n            />\n          </div>\n          <div className=\"space-y-2\">\n            <label\n              htmlFor=\"lastName\"\n              className=\"block text-sm font-medium text-[var(--color-text-primary)]\"\n            >\n              {tr(\"auth.register.lastName\", \"Last Name\")}\n            </label>\n            <input\n              id=\"lastName\"\n              type=\"text\"\n              required\n              aria-required=\"true\"\n              aria-label={tr(\"auth.register.lastName\", \"Last Name\")}\n              value={formData.lastName}\n              onChange={(e) =>\n                setFormData({ ...formData, lastName: e.target.value })\n              }\n              className=\"block w-full px-4 py-3 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] placeholder:text-[var(--color-text-tertiary)] focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all\"\n              placeholder={tr(\n                \"auth.register.lastNamePlaceholder\",\n                \"Enter last name\",\n              )}\n            />\n          </div>\n        </div>\n\n        {/* Username Input */}\n        <div className=\"space-y-2\">\n          <label\n            htmlFor=\"username\"\n            className=\"block text-sm font-medium text-[var(--color-text-primary)]\"\n          >\n            {tr(\"auth.register.username\", \"Username\")}\n          </label>\n          <div className=\"relative\">\n            <div className=\"absolute inset-y-0 left-0 pl-3.5 flex items-center pointer-events-none\">\n              <UserIcon className=\"size-5 text-[var(--color-text-tertiary)]\" />\n            </div>\n            <input\n              id=\"username\"\n              type=\"text\"\n              required\n              aria-required=\"true\"\n              aria-label={tr(\"auth.register.username\", \"Username\")}\n              autoComplete=\"username\"\n              value={formData.username}\n              onChange={(e) =>\n                setFormData({ ...formData, username: e.target.value })\n              }\n              className=\"block w-full pl-[3.5rem] pr-4 py-3 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] placeholder:text-[var(--color-text-tertiary)] focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all\"\n              placeholder={tr(\n                \"auth.register.usernamePlaceholder\",\n                \"Choose a username\",\n              )}\n            />\n          </div>\n        </div>\n\n        {/* Email Input */}\n        <div className=\"space-y-2\">\n          <label\n            htmlFor=\"email\"\n            className=\"block text-sm font-medium text-[var(--color-text-primary)]\"\n          >\n            {tr(\"auth.register.email\", \"Email\")}\n          </label>\n          <div className=\"relative\">\n            <div className=\"absolute inset-y-0 left-0 pl-3.5 flex items-center pointer-events-none\">\n              <EmailIcon className=\"size-5 text-[var(--color-text-tertiary)]\" />\n            </div>\n            <input\n              id=\"email\"\n              type=\"email\"\n              required\n              aria-required=\"true\"\n              aria-label={tr(\"auth.register.email\", \"Email\")}\n              autoComplete=\"email\"\n              value={formData.email}\n              onChange={(e) =>\n                setFormData({ ...formData, email: e.target.value })\n              }\n              className=\"block w-full pl-[3.5rem] pr-4 py-3 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] placeholder:text-[var(--color-text-tertiary)] focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all\"\n              placeholder={tr(\n                \"auth.register.emailPlaceholder\",\n                \"you@example.com\",\n              )}\n            />\n          </div>\n        </div>\n\n        {/* Password Input */}\n        <div className=\"space-y-2\">\n          <label\n            htmlFor=\"password\"\n            className=\"block text-sm font-medium text-[var(--color-text-primary)]\"\n          >\n            {tr(\"auth.register.password\", \"Password\")}\n          </label>\n          <div className=\"relative\">\n            <div className=\"absolute inset-y-0 left-0 pl-3.5 flex items-center pointer-events-none\">\n              <LockIcon className=\"size-5 text-[var(--color-text-tertiary)]\" />\n            </div>\n            <input\n              id=\"password\"\n              type={showPassword ? \"text\" : \"password\"}\n              required\n              aria-required=\"true\"\n              aria-label={tr(\"auth.register.password\", \"Password\")}\n              autoComplete=\"new-password\"\n              value={formData.password}\n              onChange={(e) =>\n                setFormData({ ...formData, password: e.target.value })\n              }\n              className=\"block w-full pl-[3.5rem] pr-12 py-3 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] placeholder:text-[var(--color-text-tertiary)] focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all\"\n              placeholder={tr(\n                \"auth.register.passwordPlaceholder\",\n                \"Create a strong password\",\n              )}\n            />\n            <button\n              type=\"button\"\n              onClick={() => setShowPassword(!showPassword)}\n              aria-label={\n                showPassword\n                  ? tr(\"auth.register.hidePassword\", \"Hide password\")\n                  : tr(\"auth.register.showPassword\", \"Show password\")\n              }\n              className=\"absolute inset-y-0 right-0 pr-3.5 flex items-center text-[var(--color-text-tertiary)] hover:text-[var(--color-text-secondary)] transition-colors\"\n            >\n              {showPassword ? (\n                <EyeOffIcon className=\"size-5\" />\n              ) : (\n                <EyeIcon className=\"size-5\" />\n              )}\n            </button>\n          </div>\n\n          {/* Password Strength Indicator */}\n          {formData.password && (\n            <div className=\"space-y-3 pt-2\">\n              {/* Strength Bar */}\n              <div className=\"space-y-1\">\n                <div className=\"h-1.5 bg-[var(--color-bg-sunken)] rounded-full overflow-hidden\">\n                  <div\n                    className={`h-full ${passwordStrength.color} ${passwordStrength.width} transition-all duration-300`}\n                  />\n                </div>\n                <p className=\"text-xs text-[var(--color-text-tertiary)] capitalize\">\n                  {tr(\"auth.register.passwordStrength\", \"Password strength:\")}{\" \"}\n                  <span className=\"font-medium\">{passwordStrength.level}</span>\n                </p>\n              </div>\n\n              {/* Requirements Checklist */}\n              <div className=\"grid grid-cols-2 gap-2\">\n                {passwordChecks.map((check) => (\n                  <div key={check.label} className=\"flex items-center gap-2\">\n                    {check.met ? (\n                      <CheckIcon className=\"size-4 text-status-success-text\" />\n                    ) : (\n                      <XIcon className=\"size-4 text-[var(--color-text-tertiary)]\" />\n                    )}\n                    <span\n                      className={`text-xs ${\n                        check.met\n                          ? \"text-status-success-text\"\n                          : \"text-[var(--color-text-tertiary)]\"\n                      }`}\n                    >\n                      {check.label}\n                    </span>\n                  </div>\n                ))}\n              </div>\n            </div>\n          )}\n        </div>\n\n        {/* Terms Agreement */}\n        <p className=\"text-xs text-[var(--color-text-tertiary)] leading-relaxed\">\n          {tr(\n            \"auth.register.agreeToTerms\",\n            \"By creating an account, you agree to our\",\n          )}{\" \"}\n          {/* These link to the PUBLIC marketing site, not an app route: the\n              reader is signed out, and the app's /legal/:slug route sits behind\n              the shell's auth guard. Opened in a new tab so a half-completed\n              signup form is not discarded to read the terms. */}\n          <a\n            href={resolveLegalUrl(\"/terms\")}\n            target=\"_blank\"\n            rel=\"noopener noreferrer\"\n            className=\"text-text-link underline underline-offset-2\"\n          >\n            {tr(\"auth.register.termsOfService\", \"Terms of Service\")}\n          </a>{\" \"}\n          {tr(\"auth.register.and\", \"and\")}{\" \"}\n          <a\n            href={resolveLegalUrl(\"/privacy\")}\n            target=\"_blank\"\n            rel=\"noopener noreferrer\"\n            className=\"text-text-link underline underline-offset-2\"\n          >\n            {tr(\"auth.register.privacyPolicy\", \"Privacy Policy\")}\n          </a>\n          .\n        </p>\n\n        {/* reCAPTCHA v2 Checkbox — enabled per-product via the platform catalog.\n            `key` remounts it after a failed submit so a fresh token is issued. */}\n        <CaptchaV2\n          key={captchaResetKey}\n          enabled={captchaEnabled}\n          siteKey={captchaSiteKey}\n          onVerify={setCaptchaToken}\n          onExpired={() => setCaptchaToken(null)}\n        />\n\n        {/* Submit Button */}\n        <Button\n          type=\"submit\"\n          disabled={isLoading}\n          variant=\"default\"\n          size=\"lg\"\n          className=\"w-full font-semibold\"\n        >\n          {isLoading ? (\n            <>\n              <SpinnerIcon className=\"size-5 animate-spin\" />\n              <span>\n                {tr(\"auth.register.creatingAccount\", \"Creating account...\")}\n              </span>\n            </>\n          ) : (\n            tr(\"auth.register.createAccountBtn\", \"Create account\")\n          )}\n        </Button>\n      </form>\n\n      {/* Divider */}\n      <div className=\"relative my-8\">\n        <div className=\"absolute inset-0 flex items-center\">\n          <div className=\"w-full border-t border-[var(--color-border-default)]\" />\n        </div>\n        <div className=\"relative flex justify-center\">\n          <span className=\"px-4 bg-[var(--color-bg-canvas)] text-sm text-[var(--color-text-tertiary)]\">\n            {tr(\"auth.register.orSignUpWith\", \"or sign up with\")}\n          </span>\n        </div>\n      </div>\n\n      {/* OAuth Error */}\n      {oauthError && (\n        <div className=\"flex items-start gap-3 p-4 rounded-xl border bg-status-error-bg-subtle border-status-error-border\">\n          <AlertIcon className=\"size-5 flex-shrink-0 mt-0.5 text-status-error-text\" />\n          <p className=\"text-sm text-status-error-text\">{oauthError}</p>\n        </div>\n      )}\n\n      {/* OAuth Buttons */}\n      <div className=\"grid grid-cols-3 gap-3\">\n        {oauthProviders.map((provider) => (\n          <button\n            key={provider.name}\n            type=\"button\"\n            onClick={provider.onClick}\n            disabled={provider.disabled}\n            title={provider.tooltip}\n            className={`flex items-center justify-center gap-2 px-4 py-3 rounded-xl border transition-all duration-200 group ${\n              provider.disabled\n                ? \"border-[var(--color-border-subtle)] bg-[var(--color-bg-disabled)] cursor-not-allowed opacity-50\"\n                : \"border-[var(--color-border-default)] bg-[var(--color-bg-surface)] hover:bg-[var(--color-bg-sunken)] hover:border-[var(--color-border-strong)]\"\n            }`}\n          >\n            <provider.icon\n              className={`size-5 ${provider.disabled ? \"opacity-50\" : \"\"}`}\n            />\n            <span\n              className={`sr-only sm:not-sr-only text-sm font-medium transition-colors ${\n                provider.disabled\n                  ? \"text-[var(--color-text-disabled)]\"\n                  : \"text-[var(--color-text-secondary)] group-hover:text-[var(--color-text-primary)]\"\n              }`}\n            >\n              {provider.name}\n            </span>\n          </button>\n        ))}\n      </div>\n\n      {/* Sign In Link */}\n      <p className=\"mt-8 text-center text-sm text-[var(--color-text-secondary)]\">\n        {tr(\"auth.register.alreadyHaveAccount\", \"Already have an account?\")}{\" \"}\n        <button\n          type=\"button\"\n          onClick={() => navigate(\"/auth/login\")}\n          className=\"font-semibold text-text-link hover:text-text-linkHover transition-colors\"\n        >\n          {tr(\"auth.register.signIn\", \"Sign in\")}\n        </button>\n      </p>\n    </AuthLayout>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAgCA,SAAgB,IAAe;CAC7B,IAAM,IAAK,GAAO,EACZ,EAAE,mBAAgB,GAAS,EAC3B,IAAW,GAAa,EAExB,EAAE,WAAQ,wBAAoB,cAAW,iBAC7C,GAAmB,EACf,EAAE,yBAAqB,4BAAwB,4BACnD,IAAoB,EAChB,CAAC,GAAc,MAAmB,EAAS,GAAM,EACjD,CAAC,GAAU,KAAe,EAAsB;EACpD,OAAO;EACP,UAAU;EACV,UAAU;EACV,WAAW;EACX,UAAU;EACX,CAAC,EACI,CAAC,GAAkB,KAAuB,EAAmB,EAAE,CAAC,EAChE,CAAC,GAAe,KAAoB,EAAS,GAAM,EACnD,CAAC,GAAO,KAAY,EAAwB,KAAK,EACjD,CAAC,GAAY,KAAiB,EAAwB,KAAK,EAC3D,CAAC,GAAc,KAAmB,EAAwB,KAAK,EAI/D,CAAC,GAAiB,KAAsB,EAAS,EAAE,EACnD,EAAE,SAAS,GAAgB,SAAS,OACxC,IAAkB,EACd,CAAC,GAAyB,KAA8B,EAAS,GAAM,EACvE,CAAC,GAAa,KAAkB,EAAwB,KAAK,EAI7D,IACJ,EAAQ,KAAU,MAAc,uBAC5B,IAAmB,EAAQ,KAAU,MAAc,mBACnD,IACJ,EAAQ,KAAU,MAAc,qBAG5B,WAAwB;EAC5B,IAAM,IAAW,EAAS;AAC1B,SAAO;GACL;IACE,OAAO,EAAG,wBAAwB,yBAAyB;IAC3D,KAAK,EAAS,UAAU;IACzB;GACD;IACE,OAAO,EAAG,6BAA6B,uBAAuB;IAC9D,KAAK,QAAQ,KAAK,EAAS;IAC5B;GACD;IACE,OAAO,EAAG,6BAA6B,uBAAuB;IAC9D,KAAK,QAAQ,KAAK,EAAS;IAC5B;GACD;IACE,OAAO,EAAG,0BAA0B,aAAa;IACjD,KAAK,KAAK,KAAK,EAAS;IACzB;GACD;IACE,OAAO,EAAG,2BAA2B,wBAAwB;IAC7D,KAAK,yBAAyB,KAAK,EAAS;IAC7C;GACF;KACC,EAEE,WAA0B;EAC9B,IAAM,IAAW,EAAe,QAAQ,MAAM,EAAE,IAAI,CAAC;AAmBrD,SAlBI,KAAY,IACP;GACL,OAAO,EAAG,sCAAsC,OAAO;GACvD,OAAO;GACP,OAAO;GACR,GACC,KAAY,IACP;GACL,OAAO,EAAG,sCAAsC,OAAO;GACvD,OAAO;GACP,OAAO;GACR,GACC,KAAY,IACP;GACL,OAAO,EAAG,sCAAsC,OAAO;GACvD,OAAO;GACP,OAAO;GACR,GACI;GACL,OAAO,EAAG,wCAAwC,SAAS;GAC3D,OAAO;GACP,OAAO;GACR;KACC,EAEE,KAAe,OAAO,MAAuB;AACjD,IAAE,gBAAgB;EAElB,IAAM,IAAmB,EAAE;AAc3B,EAbK,EAAc,EAAS,MAAM,IAChC,EAAO,KACL,EAAG,8BAA8B,qCAAqC,CACvE,GAEC,CAAC,EAAS,YAAY,EAAS,SAAS,SAAS,MACnD,EAAO,KACL,EACE,8BACA,yCACD,CACF,EAEE,mBAAmB,KAAK,EAAS,SAAS,IAC7C,EAAO,KACL,EACE,+BACA,uEACD,CACF;EAEH,IAAM,IAAqB,GAAiB,EAAS,SAAS;AAc9D,MAbK,EAAmB,SACtB,EAAO,KAAK,GAAG,EAAmB,OAAO,EAGvC,KAAkB,CAAC,KACrB,EAAO,KACL,EACE,iCACA,6CACD,CACF,EAGC,EAAO,SAAS,GAAG;AACrB,KAAoB,EAAO;AAC3B;;AAIF,EADA,EAAoB,EAAE,CAAC,EACvB,EAAS,KAAK;AACd,MAAI;AAOF,GANA,MAAM,EAAO;IACX,GAAG;IACH,GAAI,IAAe,EAAE,gBAAgB,GAAc,GAAG,EAAE;IACzD,CAAC,EAGF,EAAiB,GAAK;WACf,GAAK;AAUZ,GALA,EAHE,aAAe,QACX,EAAI,UACJ,EAAG,8BAA8B,iBAAiB,CACvC,EACjB,QAAQ,MAAM,mBAAmB,EAAI,EAIjC,MACF,EAAgB,KAAK,EACrB,GAAoB,MAAM,IAAI,EAAE;;IAQhC,WAA2B;AAC/B,IAAc,KAAK;AACnB,MAAI;AACF,OAAqB;WACd,GAAK;AACZ,KACE,aAAe,QACX,EAAI,UACJ,EACE,oCACA,oCACD,CACN;;IAOC,WAA8B;AAClC,IAAc,KAAK;AACnB,MAAI;AACF,OAAwB;WACjB,GAAK;AACZ,KACE,aAAe,QACX,EAAI,UACJ,EACE,uCACA,uCACD,CACN;;IAKC,IAAqB,EAAqB,SAAS,EACnD,IAAwB,EAAqB,YAAY,EAEzD,KAAiB;EACrB;GACE,MAAM;GACN,MAAM;GACN,SAAS;GACT,UAAU,CAAC;GACX,SAAS,IACL,KAAA,IACA,EACE,qCACA,mCACD;GACN;EACD;GACE,MAAM;GACN,MAAM;GACN,eAAe;GACf,UAAU;GACV,SAAS,EACP,qCACA,mCACD;GACF;EACD;GACE,MAAM;GACN,MAAM;GACN,SAAS;GACT,UAAU,CAAC;GACX,SAAS,IACL,KAAA,IACA,EACE,wCACA,sCACD;GACN;EACF,EAMK,CAAC,IAAyB,KAA0B,MAJzB,EAC/B,yCACA,kIACD,CAE0B,MAAM,YAAY;AAoG7C,QAjGI,IAEA,kBAAC,GAAD;EACE,OAAO,EAAG,4BAA4B,mBAAmB;EACzD,UAAU,EACR,sCACA,qCACD;YAED,kBAAC,OAAD;GAAK,WAAU;aAAf;IAEE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,OAAD;MACE,WAAU;MACV,MAAK;MACL,SAAQ;MACR,QAAO;gBAEP,kBAAC,QAAD;OACE,eAAc;OACd,gBAAe;OACf,aAAa;OACb,GAAE;OACF,CAAA;MACE,CAAA;KACF,CAAA;IAEN,kBAAC,MAAD;KAAI,WAAU;eACX,EACC,gCACA,gCACD;KACE,CAAA;IAEL,kBAAC,KAAD;KAAG,WAAU;eAAb;MACG;MACD,kBAAC,QAAD;OAAM,WAAU;iBACb,EAAS;OACL,CAAA;MACN;MACC;;IAEJ,kBAAC,OAAD;KAAK,WAAU;eAAf;MACE,kBAAC,GAAD;OACE,MAAK;OACL,eAAe,EAAS,cAAc;OACtC,SAAQ;OACR,MAAK;OACL,WAAU;iBAET,EAAG,kCAAkC,sBAAsB;OACrD,CAAA;MAER,KACC,kBAAC,KAAD;OAAG,WAAU;iBACV;OACC,CAAA;MAEN,kBAAC,KAAD;OAAG,WAAU;iBAAb;QACG,EACC,mCACA,sDACD;QAAE;QACH,kBAAC,UAAD;SACE,MAAK;SACL,UAAU;SACV,SAAS,YAAY;AAEnB,UADA,EAAe,KAAK,EACpB,EAA2B,GAAK;AAChC,cAAI;AACF,iBAAM,GAAmB,EAAS,MAAM;mBACjC,GAAK;AACZ,aACE,aAAe,QACX,EAAI,UACJ,EACE,8BACA,sCACD,CACN;oBACO;AACR,aAA2B,GAAM;;;SAGrC,WAAU;mBAET,IACG,EAAG,2BAA2B,eAAe,GAC7C,EAAG,0BAA0B,YAAY;SACtC,CAAA;QACP;;MACA;;IACF;;EACK,CAAA,GAKf,kBAAC,GAAD;EACE,OAAO,EAAG,+BAA+B,sBAAsB;EAC/D,UAAU,EACR,8BACA,0CACD,CAAC,QAAQ,mBAAmB,KAAe,uBAAuB;EACtD;YANf;GAQE,kBAAC,IAAD;IAAa,WAAU;cACpB,EACC,yBACA,gJACD;IACW,CAAA;GACd,kBAAC,QAAD;IAAM,UAAU;IAAc,WAAU;cAAxC;KAEG,KACC,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,GAAD,EAAW,WAAU,wDAAyD,CAAA,EAC9E,kBAAC,OAAD;OAAK,WAAU;iBAAf;QACE,kBAAC,KAAD;SAAG,WAAU;mBACV,EACC,oCACA,+CACD;SACC,CAAA;QACJ,kBAAC,KAAD;SAAG,WAAU;mBACV,EACC,wCACA,gFACD;SACC,CAAA;QACJ,kBAAC,UAAD;SACE,MAAK;SACL,eACE,EAAS,oBAAoB,EAC3B,OAAO,EAAE,OAAO,EAAS,OAAO,EACjC,CAAC;SAEJ,WAAU;mBAET,EAAG,+BAA+B,wBAAwB;SACpD,CAAA;QACL;SACF;;MAIN,KAAoB,MACpB,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,GAAD,EAAW,WAAU,wDAAyD,CAAA,EAC9E,kBAAC,KAAD;OAAG,WAAU;iBAAoC;OAAU,CAAA,CACvD;;MAIL,KACD,CAAC,KACD,CAAC,KACD,CAAC,KACD,EAAiB,SAAS,MAC1B,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,GAAD,EAAW,WAAU,sDAAuD,CAAA,EAC5E,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACG,KACC,CAAC,KACD,CAAC,KACD,CAAC,KACC,kBAAC,KAAD;QAAG,WAAU;kBAAkC;QAAU,CAAA,EAE5D,EAAiB,KAAK,MACrB,kBAAC,KAAD;QAAa,WAAU;kBACpB;QACC,EAFI,EAEJ,CACJ,CACE;SACF;;KAIR,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,SAAD;QACE,SAAQ;QACR,WAAU;kBAET,EAAG,2BAA2B,aAAa;QACtC,CAAA,EACR,kBAAC,SAAD;QACE,IAAG;QACH,MAAK;QACL,UAAA;QACA,iBAAc;QACd,cAAY,EAAG,2BAA2B,aAAa;QACvD,OAAO,EAAS;QAChB,WAAW,MACT,EAAY;SAAE,GAAG;SAAU,WAAW,EAAE,OAAO;SAAO,CAAC;QAEzD,WAAU;QACV,aAAa,EACX,sCACA,mBACD;QACD,CAAA,CACE;UACN,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,SAAD;QACE,SAAQ;QACR,WAAU;kBAET,EAAG,0BAA0B,YAAY;QACpC,CAAA,EACR,kBAAC,SAAD;QACE,IAAG;QACH,MAAK;QACL,UAAA;QACA,iBAAc;QACd,cAAY,EAAG,0BAA0B,YAAY;QACrD,OAAO,EAAS;QAChB,WAAW,MACT,EAAY;SAAE,GAAG;SAAU,UAAU,EAAE,OAAO;SAAO,CAAC;QAExD,WAAU;QACV,aAAa,EACX,qCACA,kBACD;QACD,CAAA,CACE;SACF;;KAGN,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,SAAD;OACE,SAAQ;OACR,WAAU;iBAET,EAAG,0BAA0B,WAAW;OACnC,CAAA,EACR,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,OAAD;QAAK,WAAU;kBACb,kBAAC,GAAD,EAAU,WAAU,4CAA6C,CAAA;QAC7D,CAAA,EACN,kBAAC,SAAD;QACE,IAAG;QACH,MAAK;QACL,UAAA;QACA,iBAAc;QACd,cAAY,EAAG,0BAA0B,WAAW;QACpD,cAAa;QACb,OAAO,EAAS;QAChB,WAAW,MACT,EAAY;SAAE,GAAG;SAAU,UAAU,EAAE,OAAO;SAAO,CAAC;QAExD,WAAU;QACV,aAAa,EACX,qCACA,oBACD;QACD,CAAA,CACE;SACF;;KAGN,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,SAAD;OACE,SAAQ;OACR,WAAU;iBAET,EAAG,uBAAuB,QAAQ;OAC7B,CAAA,EACR,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,OAAD;QAAK,WAAU;kBACb,kBAAC,GAAD,EAAW,WAAU,4CAA6C,CAAA;QAC9D,CAAA,EACN,kBAAC,SAAD;QACE,IAAG;QACH,MAAK;QACL,UAAA;QACA,iBAAc;QACd,cAAY,EAAG,uBAAuB,QAAQ;QAC9C,cAAa;QACb,OAAO,EAAS;QAChB,WAAW,MACT,EAAY;SAAE,GAAG;SAAU,OAAO,EAAE,OAAO;SAAO,CAAC;QAErD,WAAU;QACV,aAAa,EACX,kCACA,kBACD;QACD,CAAA,CACE;SACF;;KAGN,kBAAC,OAAD;MAAK,WAAU;gBAAf;OACE,kBAAC,SAAD;QACE,SAAQ;QACR,WAAU;kBAET,EAAG,0BAA0B,WAAW;QACnC,CAAA;OACR,kBAAC,OAAD;QAAK,WAAU;kBAAf;SACE,kBAAC,OAAD;UAAK,WAAU;oBACb,kBAAC,GAAD,EAAU,WAAU,4CAA6C,CAAA;UAC7D,CAAA;SACN,kBAAC,SAAD;UACE,IAAG;UACH,MAAM,IAAe,SAAS;UAC9B,UAAA;UACA,iBAAc;UACd,cAAY,EAAG,0BAA0B,WAAW;UACpD,cAAa;UACb,OAAO,EAAS;UAChB,WAAW,MACT,EAAY;WAAE,GAAG;WAAU,UAAU,EAAE,OAAO;WAAO,CAAC;UAExD,WAAU;UACV,aAAa,EACX,qCACA,2BACD;UACD,CAAA;SACF,kBAAC,UAAD;UACE,MAAK;UACL,eAAe,GAAgB,CAAC,EAAa;UAC7C,cACE,IACI,EAAG,8BAA8B,gBAAgB,GACjD,EAAG,8BAA8B,gBAAgB;UAEvD,WAAU;oBAGR,EADD,IACE,IAEA,GAFD,EAAY,WAAU,UAAW,CAEH;UAEzB,CAAA;SACL;;OAGL,EAAS,YACR,kBAAC,OAAD;QAAK,WAAU;kBAAf,CAEE,kBAAC,OAAD;SAAK,WAAU;mBAAf,CACE,kBAAC,OAAD;UAAK,WAAU;oBACb,kBAAC,OAAD,EACE,WAAW,UAAU,EAAiB,MAAM,GAAG,EAAiB,MAAM,+BACtE,CAAA;UACE,CAAA,EACN,kBAAC,KAAD;UAAG,WAAU;oBAAb;WACG,EAAG,kCAAkC,qBAAqB;WAAE;WAC7D,kBAAC,QAAD;YAAM,WAAU;sBAAe,EAAiB;YAAa,CAAA;WAC3D;YACA;YAGN,kBAAC,OAAD;SAAK,WAAU;mBACZ,EAAe,KAAK,MACnB,kBAAC,OAAD;UAAuB,WAAU;oBAAjC,CACG,EAAM,MACL,kBAAC,IAAD,EAAW,WAAU,mCAAoC,CAAA,GAEzD,kBAAC,GAAD,EAAO,WAAU,4CAA6C,CAAA,EAEhE,kBAAC,QAAD;WACE,WAAW,WACT,EAAM,MACF,6BACA;qBAGL,EAAM;WACF,CAAA,CACH;YAfI,EAAM,MAeV,CACN;SACE,CAAA,CACF;;OAEJ;;KAGN,kBAAC,KAAD;MAAG,WAAU;gBAAb;OACG,EACC,8BACA,2CACD;OAAE;OAKH,kBAAC,KAAD;QACE,MAAM,EAAgB,SAAS;QAC/B,QAAO;QACP,KAAI;QACJ,WAAU;kBAET,EAAG,gCAAgC,mBAAmB;QACrD,CAAA;OAAC;OACJ,EAAG,qBAAqB,MAAM;OAAE;OACjC,kBAAC,KAAD;QACE,MAAM,EAAgB,WAAW;QACjC,QAAO;QACP,KAAI;QACJ,WAAU;kBAET,EAAG,+BAA+B,iBAAiB;QAClD,CAAA;;OAEF;;KAIJ,kBAAC,IAAD;MAEE,SAAS;MACT,SAAS;MACT,UAAU;MACV,iBAAiB,EAAgB,KAAK;MACtC,EALK,EAKL;KAGF,kBAAC,GAAD;MACE,MAAK;MACL,UAAU;MACV,SAAQ;MACR,MAAK;MACL,WAAU;gBAET,IACC,kBAAA,IAAA,EAAA,UAAA,CACE,kBAAC,GAAD,EAAa,WAAU,uBAAwB,CAAA,EAC/C,kBAAC,QAAD,EAAA,UACG,EAAG,iCAAiC,sBAAsB,EACtD,CAAA,CACN,EAAA,CAAA,GAEH,EAAG,kCAAkC,iBAAiB;MAEjD,CAAA;KACJ;;GAGP,kBAAC,OAAD;IAAK,WAAU;cAAf,CACE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,OAAD,EAAK,WAAU,wDAAyD,CAAA;KACpE,CAAA,EACN,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,QAAD;MAAM,WAAU;gBACb,EAAG,8BAA8B,kBAAkB;MAC/C,CAAA;KACH,CAAA,CACF;;GAGL,KACC,kBAAC,OAAD;IAAK,WAAU;cAAf,CACE,kBAAC,GAAD,EAAW,WAAU,sDAAuD,CAAA,EAC5E,kBAAC,KAAD;KAAG,WAAU;eAAkC;KAAe,CAAA,CAC1D;;GAIR,kBAAC,OAAD;IAAK,WAAU;cACZ,GAAe,KAAK,MACnB,kBAAC,UAAD;KAEE,MAAK;KACL,SAAS,EAAS;KAClB,UAAU,EAAS;KACnB,OAAO,EAAS;KAChB,WAAW,wGACT,EAAS,WACL,oGACA;eATR,CAYE,kBAAC,EAAS,MAAV,EACE,WAAW,UAAU,EAAS,WAAW,eAAe,MACxD,CAAA,EACF,kBAAC,QAAD;MACE,WAAW,gEACT,EAAS,WACL,sCACA;gBAGL,EAAS;MACL,CAAA,CACA;OAvBF,EAAS,KAuBP,CACT;IACE,CAAA;GAGN,kBAAC,KAAD;IAAG,WAAU;cAAb;KACG,EAAG,oCAAoC,2BAA2B;KAAE;KACrE,kBAAC,UAAD;MACE,MAAK;MACL,eAAe,EAAS,cAAc;MACtC,WAAU;gBAET,EAAG,wBAAwB,UAAU;MAC/B,CAAA;KACP;;GACO"}

package/dist/auth/utils/legalUrls.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Public legal-document URLs for the signup consent copy.
+ *
+ * The signup form is shown to SIGNED-OUT visitors, so its "Terms of Service" and
+ * "Privacy Policy" links must resolve to the public marketing site. They used to
+ * be written as the app-relative paths `/legal/terms` and `/legal/privacy`, which
+ * resolved against the app origin (e.g. `https://app.fluidgrids.ai/legal/terms`).
+ * That route lives *inside* the shell's authenticated block, so a visitor who
+ * clicked it was bounced to `/auth/login?returnTo=%2Flegal%2Fterms` and the shell
+ * footer fired two FORBIDDEN queries on the way out:
+ *
+ *   [Burdenoff backend error] You do not have permission to do that.
+ *     {code: FORBIDDEN, operationName: GetFooterContentPages}
+ *     {code: FORBIDDEN, operationName: GetFooterProduct}
+ *
+ * i.e. the consent links were unreadable for exactly the people being asked to
+ * consent. The marketing site is also the authoritative home of the policy text
+ * (rendered from the dated drafts in `fluidgrids-website/src/content/legal/`),
+ * so linking there avoids maintaining a second copy that can drift.
+ *
+ * microfe-auth is mounted by every Burdenoff product shell, so the origin is
+ * DERIVED from the current host rather than hardcoded — hardcoding one product's
+ * domain would send every other product's users to the wrong company's terms.
+ * Every product serves its marketing site at `www.<product-domain>` using the
+ * same `/terms` and `/privacy` route names (verified against fluidgrids.ai,
+ * burdenoff.com, bigconsole.com, planmagnet.com, adaptercloud.com, botlit.ai and
+ * timecampus.com).
+ */
+/**
+ * Resolve the public marketing origin for the product currently being served,
+ * or `null` when it cannot be determined (local development, or a host with no
+ * registrable domain). Exported for unit testing; prefer `resolveLegalUrl`.
+ */
+export declare function resolveMarketingOrigin(hostname?: string): string | null;
+/** Public legal pages, by the route name every product marketing site uses. */
+export type LegalDocumentPath = "/terms" | "/privacy";
+/**
+ * Absolute URL of a public legal document for the current product.
+ *
+ * Falls back to the bare path when the marketing origin cannot be resolved
+ * (local development), which keeps the link valid-looking in dev without
+ * inventing a production domain.
+ */
+export declare function resolveLegalUrl(path: LegalDocumentPath): string;

package/dist/auth/utils/legalUrls.js

@@ -0,0 +1,26 @@
+//#region src/auth/utils/legalUrls.ts
+var e = [
+	"app.",
+	"alphaapp.",
+	"admin.",
+	"alphaadmin.",
+	"www."
+];
+function t(t) {
+	let n = (t ?? (typeof window < "u" ? window.location.hostname : "")).toLowerCase().trim();
+	if (!n || n === "localhost" || n === "127.0.0.1" || n === "0.0.0.0" || n.startsWith("[") || n.endsWith(".local.burdenoff.com") || /^\d+\.\d+\.\d+\.\d+$/.test(n)) return null;
+	let r = n;
+	for (let t of e) if (r.startsWith(t)) {
+		r = r.slice(t.length);
+		break;
+	}
+	return r.includes(".") ? `https://www.${r}` : null;
+}
+function n(e) {
+	let n = t();
+	return n ? `${n}${e}` : e;
+}
+//#endregion
+export { n as resolveLegalUrl };
+
+//# sourceMappingURL=legalUrls.js.map

package/dist/auth/utils/legalUrls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legalUrls.js","names":[],"sources":["../../../src/auth/utils/legalUrls.ts"],"sourcesContent":["/**\n * Public legal-document URLs for the signup consent copy.\n *\n * The signup form is shown to SIGNED-OUT visitors, so its \"Terms of Service\" and\n * \"Privacy Policy\" links must resolve to the public marketing site. They used to\n * be written as the app-relative paths `/legal/terms` and `/legal/privacy`, which\n * resolved against the app origin (e.g. `https://app.fluidgrids.ai/legal/terms`).\n * That route lives *inside* the shell's authenticated block, so a visitor who\n * clicked it was bounced to `/auth/login?returnTo=%2Flegal%2Fterms` and the shell\n * footer fired two FORBIDDEN queries on the way out:\n *\n *   [Burdenoff backend error] You do not have permission to do that.\n *     {code: FORBIDDEN, operationName: GetFooterContentPages}\n *     {code: FORBIDDEN, operationName: GetFooterProduct}\n *\n * i.e. the consent links were unreadable for exactly the people being asked to\n * consent. The marketing site is also the authoritative home of the policy text\n * (rendered from the dated drafts in `fluidgrids-website/src/content/legal/`),\n * so linking there avoids maintaining a second copy that can drift.\n *\n * microfe-auth is mounted by every Burdenoff product shell, so the origin is\n * DERIVED from the current host rather than hardcoded — hardcoding one product's\n * domain would send every other product's users to the wrong company's terms.\n * Every product serves its marketing site at `www.<product-domain>` using the\n * same `/terms` and `/privacy` route names (verified against fluidgrids.ai,\n * burdenoff.com, bigconsole.com, planmagnet.com, adaptercloud.com, botlit.ai and\n * timecampus.com).\n */\n\n/**\n * Shell subdomains that front a product's app surface. Stripping one of these\n * leaves the bare product domain whose `www.` host serves the marketing site.\n */\nconst APP_HOST_PREFIXES = [\n  \"app.\",\n  \"alphaapp.\",\n  \"admin.\",\n  \"alphaadmin.\",\n  \"www.\",\n];\n\n/**\n * Resolve the public marketing origin for the product currently being served,\n * or `null` when it cannot be determined (local development, or a host with no\n * registrable domain). Exported for unit testing; prefer `resolveLegalUrl`.\n */\nexport function resolveMarketingOrigin(hostname?: string): string | null {\n  const host = (\n    hostname ?? (typeof window !== \"undefined\" ? window.location.hostname : \"\")\n  )\n    .toLowerCase()\n    .trim();\n\n  if (!host) return null;\n\n  // Local development has no marketing site to link to. `0.0.0.0` and IPv6\n  // literals (which `location.hostname` reports bracketed, e.g. \"[::1]\") are\n  // included because a bare dotted-quad would otherwise survive the \"has a dot\"\n  // check below and produce a nonsense origin like `https://www.0.0.0.0`.\n  if (\n    host === \"localhost\" ||\n    host === \"127.0.0.1\" ||\n    host === \"0.0.0.0\" ||\n    host.startsWith(\"[\") ||\n    host.endsWith(\".local.burdenoff.com\")\n  ) {\n    return null;\n  }\n\n  // Any other IPv4 literal is likewise not a registrable domain.\n  if (/^\\d+\\.\\d+\\.\\d+\\.\\d+$/.test(host)) return null;\n\n  let domain = host;\n  for (const prefix of APP_HOST_PREFIXES) {\n    if (domain.startsWith(prefix)) {\n      domain = domain.slice(prefix.length);\n      break;\n    }\n  }\n\n  // A bare hostname with no dot is not a registrable domain we can build on.\n  if (!domain.includes(\".\")) return null;\n\n  return `https://www.${domain}`;\n}\n\n/** Public legal pages, by the route name every product marketing site uses. */\nexport type LegalDocumentPath = \"/terms\" | \"/privacy\";\n\n/**\n * Absolute URL of a public legal document for the current product.\n *\n * Falls back to the bare path when the marketing origin cannot be resolved\n * (local development), which keeps the link valid-looking in dev without\n * inventing a production domain.\n */\nexport function resolveLegalUrl(path: LegalDocumentPath): string {\n  const origin = resolveMarketingOrigin();\n  return origin ? `${origin}${path}` : path;\n}\n"],"mappings":";AAiCA,IAAM,IAAoB;CACxB;CACA;CACA;CACA;CACA;CACD;AAOD,SAAgB,EAAuB,GAAkC;CACvE,IAAM,KACJ,MAAa,OAAO,SAAW,MAAc,OAAO,SAAS,WAAW,KAEvE,aAAa,CACb,MAAM;AAmBT,KAjBI,CAAC,KAOH,MAAS,eACT,MAAS,eACT,MAAS,aACT,EAAK,WAAW,IAAI,IACpB,EAAK,SAAS,uBAAuB,IAMnC,uBAAuB,KAAK,EAAK,CAAE,QAAO;CAE9C,IAAI,IAAS;AACb,MAAK,IAAM,KAAU,EACnB,KAAI,EAAO,WAAW,EAAO,EAAE;AAC7B,MAAS,EAAO,MAAM,EAAO,OAAO;AACpC;;AAOJ,QAFK,EAAO,SAAS,IAAI,GAElB,eAAe,MAFY;;AAepC,SAAgB,EAAgB,GAAiC;CAC/D,IAAM,IAAS,GAAwB;AACvC,QAAO,IAAS,GAAG,IAAS,MAAS"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/microfe-auth",
-  "version": "2026.904.1",
+  "version": "2026.908.1",
   "description": "Auth microfrontend for Burdenoff products",
   "type": "module",
   "imports": {