@burtson-labs/bandit-engine 2.0.98 → 2.0.100

package/dist/management/management.js

@@ -1505,6 +1505,143 @@ var init_anthropic_provider = __esm({
   }
 });
 
+// src/store/authenticationStore.ts
+var import_zustand2, TOKEN_KEY, validToken, user, rawToken, useAuthenticationStore, readPersistedToken;
+var init_authenticationStore = __esm({
+  "src/store/authenticationStore.ts"() {
+    "use strict";
+    import_zustand2 = require("zustand");
+    TOKEN_KEY = "authToken";
+    validToken = null;
+    user = null;
+    rawToken = localStorage.getItem(TOKEN_KEY);
+    if (rawToken) {
+      try {
+        const base64Url = rawToken.split(".")[1];
+        const base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
+        const jsonPayload = decodeURIComponent(
+          atob(base64).split("").map((c) => "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2)).join("")
+        );
+        const decoded = JSON.parse(jsonPayload);
+        if (decoded.exp * 1e3 > Date.now()) {
+          validToken = rawToken;
+          user = decoded;
+        }
+      } catch {
+        validToken = null;
+        user = null;
+      }
+    }
+    useAuthenticationStore = (0, import_zustand2.create)((set) => ({
+      token: validToken,
+      user,
+      authError: null,
+      setToken: (token) => {
+        if (token) {
+          try {
+            const base64Url = token.split(".")[1];
+            const base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
+            const jsonPayload = decodeURIComponent(
+              atob(base64).split("").map((c) => "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2)).join("")
+            );
+            const user2 = JSON.parse(jsonPayload);
+            localStorage.setItem(TOKEN_KEY, token);
+            set({ token, authError: null, user: user2 });
+          } catch {
+            set({ token: null, authError: "Invalid token", user: null });
+          }
+        } else {
+          set({ token: null, authError: null, user: null });
+        }
+      },
+      clearToken: () => {
+        localStorage.removeItem(TOKEN_KEY);
+        set({ token: null, authError: null, user: null });
+      }
+    }));
+    readPersistedToken = () => {
+      try {
+        const raw = localStorage.getItem(TOKEN_KEY);
+        if (!raw) return null;
+        const base64 = raw.split(".")[1].replace(/-/g, "+").replace(/_/g, "/");
+        const json2 = decodeURIComponent(
+          atob(base64).split("").map((c) => "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2)).join("")
+        );
+        const decoded = JSON.parse(json2);
+        return decoded.exp * 1e3 > Date.now() ? raw : null;
+      } catch {
+        return null;
+      }
+    };
+  }
+});
+
+// src/services/auth/authenticationService.ts
+function emitAuthTokenChanged(token) {
+  if (typeof window === "undefined") {
+    return;
+  }
+  window.dispatchEvent(new CustomEvent(AUTH_TOKEN_CHANGED_EVENT, {
+    detail: { token }
+  }));
+}
+var TOKEN_KEY2, AUTH_TOKEN_CHANGED_EVENT, AuthenticationService, authenticationService;
+var init_authenticationService = __esm({
+  "src/services/auth/authenticationService.ts"() {
+    "use strict";
+    init_authenticationStore();
+    init_debugLogger();
+    TOKEN_KEY2 = "authToken";
+    AUTH_TOKEN_CHANGED_EVENT = "bandit:auth-token-changed";
+    AuthenticationService = class {
+      getToken() {
+        const token = localStorage.getItem(TOKEN_KEY2);
+        return token;
+      }
+      setToken(token) {
+        localStorage.setItem(TOKEN_KEY2, token);
+        useAuthenticationStore.getState().setToken(token);
+        emitAuthTokenChanged(token);
+      }
+      clearToken() {
+        localStorage.removeItem(TOKEN_KEY2);
+        useAuthenticationStore.getState().clearToken();
+        emitAuthTokenChanged(null);
+      }
+      isAuthenticated() {
+        const token = useAuthenticationStore.getState().token;
+        return !!token && !this.isTokenExpired(token);
+      }
+      isTokenExpired(token) {
+        try {
+          if (!token) return true;
+          const decoded = this.parseJwtClaims(token);
+          if (!decoded) return true;
+          return decoded.exp * 1e3 < Date.now();
+        } catch {
+          return true;
+        }
+      }
+      parseJwtClaims(token) {
+        try {
+          const base64Url = token.split(".")[1];
+          const base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
+          const jsonPayload = decodeURIComponent(
+            atob(base64).split("").map((c) => {
+              return "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2);
+            }).join("")
+          );
+          return JSON.parse(jsonPayload);
+        } catch (error) {
+          debugLogger.error("Failed to parse JWT claims:", { error });
+          return null;
+        }
+      }
+    };
+    authenticationService = new AuthenticationService();
+  }
+});
+
 // src/services/gateway/gateway.service.ts
 var import_axios, import_rxjs6, GatewayService;
 var init_gateway_service = __esm({
@@ -1513,6 +1650,7 @@ var init_gateway_service = __esm({
     import_axios = __toESM(require("axios"));
     import_rxjs6 = require("rxjs");
     init_debugLogger();
+    init_authenticationService();
     GatewayService = class {
       constructor(_baseUrl, _tokenFactory, _feedbackEmail) {
         this._baseUrl = _baseUrl;
@@ -1553,7 +1691,10 @@ var init_gateway_service = __esm({
         });
         instance.interceptors.response.use(
           (response) => response,
-          (error) => Promise.reject(this._normalizeAxiosError(error))
+          (error) => {
+            this._handleAuthFailure(error);
+            return Promise.reject(this._normalizeAxiosError(error));
+          }
         );
         return instance;
       }
@@ -1574,6 +1715,24 @@ var init_gateway_service = __esm({
         }
         return new Error(error.message);
       }
+      _handleAuthFailure(error) {
+        const status = error.response?.status;
+        if (status !== 401 && status !== 403) {
+          return;
+        }
+        const data = error.response?.data;
+        const code = data?.code;
+        if (code !== "FORCE_RELOGIN" && code !== "ACCOUNT_LOCKED") {
+          return;
+        }
+        try {
+          authenticationService.clearToken();
+        } catch {
+        }
+        if (typeof window !== "undefined" && typeof window.dispatchEvent === "function") {
+          window.dispatchEvent(new CustomEvent("auth:force-relogin", { detail: { code } }));
+        }
+      }
       _createHttpError(message, response) {
         return Object.assign(new Error(message), { response });
       }
@@ -3520,14 +3679,14 @@ var aiProviderStore_exports = {};
 __export(aiProviderStore_exports, {
   useAIProviderStore: () => useAIProviderStore
 });
-var import_zustand2, useAIProviderStore;
+var import_zustand3, useAIProviderStore;
 var init_aiProviderStore = __esm({
   "src/store/aiProviderStore.ts"() {
     "use strict";
-    import_zustand2 = require("zustand");
+    import_zustand3 = require("zustand");
     init_ai_provider_factory();
     init_debugLogger();
-    useAIProviderStore = (0, import_zustand2.create)((set, get) => ({
+    useAIProviderStore = (0, import_zustand3.create)((set, get) => ({
       provider: null,
       config: null,
       setProvider: (provider, config) => set({ provider, config }),
@@ -3555,12 +3714,12 @@ var init_aiProviderStore = __esm({
 });
 
 // src/store/packageSettingsStore.ts
-var import_zustand3, usePackageSettingsStore;
+var import_zustand4, usePackageSettingsStore;
 var init_packageSettingsStore = __esm({
   "src/store/packageSettingsStore.ts"() {
     "use strict";
-    import_zustand3 = require("zustand");
-    usePackageSettingsStore = (0, import_zustand3.create)((set, get) => ({
+    import_zustand4 = require("zustand");
+    usePackageSettingsStore = (0, import_zustand4.create)((set, get) => ({
       settings: null,
       setSettings: (settings) => set({ settings }),
       getSettings: () => get().settings,
@@ -4232,17 +4391,17 @@ var init_prompts = __esm({
 });
 
 // src/store/memoryStore.ts
-var import_zustand4, DB_NAME, STORE_NAME, storeConfigs, normalize, useMemoryStore;
+var import_zustand5, DB_NAME, STORE_NAME, storeConfigs, normalize, useMemoryStore;
 var init_memoryStore = __esm({
   "src/store/memoryStore.ts"() {
     "use strict";
-    import_zustand4 = require("zustand");
+    import_zustand5 = require("zustand");
     init_indexedDBService();
     DB_NAME = "bandit-memory-db";
     STORE_NAME = "bandit-memory";
     storeConfigs = [{ name: STORE_NAME, keyPath: "id" }];
     normalize = (text) => text.toLowerCase().replace(/[^\w\s]|_/g, "").replace(/\s+/g, " ").trim();
-    useMemoryStore = (0, import_zustand4.create)((set, get) => ({
+    useMemoryStore = (0, import_zustand5.create)((set, get) => ({
       entries: [],
       _hasHydrated: false,
       hydrate: async () => {
@@ -6221,77 +6380,6 @@ var init_vectorMigrationService = __esm({
   }
 });
 
-// src/store/authenticationStore.ts
-var import_zustand5, TOKEN_KEY, validToken, user, rawToken, useAuthenticationStore, readPersistedToken;
-var init_authenticationStore = __esm({
-  "src/store/authenticationStore.ts"() {
-    "use strict";
-    import_zustand5 = require("zustand");
-    TOKEN_KEY = "authToken";
-    validToken = null;
-    user = null;
-    rawToken = localStorage.getItem(TOKEN_KEY);
-    if (rawToken) {
-      try {
-        const base64Url = rawToken.split(".")[1];
-        const base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
-        const jsonPayload = decodeURIComponent(
-          atob(base64).split("").map((c) => "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2)).join("")
-        );
-        const decoded = JSON.parse(jsonPayload);
-        if (decoded.exp * 1e3 > Date.now()) {
-          validToken = rawToken;
-          user = decoded;
-        }
-      } catch {
-        validToken = null;
-        user = null;
-      }
-    }
-    useAuthenticationStore = (0, import_zustand5.create)((set) => ({
-      token: validToken,
-      user,
-      authError: null,
-      setToken: (token) => {
-        if (token) {
-          try {
-            const base64Url = token.split(".")[1];
-            const base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
-            const jsonPayload = decodeURIComponent(
-              atob(base64).split("").map((c) => "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2)).join("")
-            );
-            const user2 = JSON.parse(jsonPayload);
-            localStorage.setItem(TOKEN_KEY, token);
-            set({ token, authError: null, user: user2 });
-          } catch {
-            set({ token: null, authError: "Invalid token", user: null });
-          }
-        } else {
-          set({ token: null, authError: null, user: null });
-        }
-      },
-      clearToken: () => {
-        localStorage.removeItem(TOKEN_KEY);
-        set({ token: null, authError: null, user: null });
-      }
-    }));
-    readPersistedToken = () => {
-      try {
-        const raw = localStorage.getItem(TOKEN_KEY);
-        if (!raw) return null;
-        const base64 = raw.split(".")[1].replace(/-/g, "+").replace(/_/g, "/");
-        const json2 = decodeURIComponent(
-          atob(base64).split("").map((c) => "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2)).join("")
-        );
-        const decoded = JSON.parse(json2);
-        return decoded.exp * 1e3 > Date.now() ? raw : null;
-      } catch {
-        return null;
-      }
-    };
-  }
-});
-
 // src/types/featureFlags.ts
 var init_featureFlags = __esm({
   "src/types/featureFlags.ts"() {
@@ -8009,72 +8097,6 @@ var init_projectStore = __esm({
   }
 });
 
-// src/services/auth/authenticationService.ts
-function emitAuthTokenChanged(token) {
-  if (typeof window === "undefined") {
-    return;
-  }
-  window.dispatchEvent(new CustomEvent(AUTH_TOKEN_CHANGED_EVENT, {
-    detail: { token }
-  }));
-}
-var TOKEN_KEY2, AUTH_TOKEN_CHANGED_EVENT, AuthenticationService, authenticationService;
-var init_authenticationService = __esm({
-  "src/services/auth/authenticationService.ts"() {
-    "use strict";
-    init_authenticationStore();
-    init_debugLogger();
-    TOKEN_KEY2 = "authToken";
-    AUTH_TOKEN_CHANGED_EVENT = "bandit:auth-token-changed";
-    AuthenticationService = class {
-      getToken() {
-        const token = localStorage.getItem(TOKEN_KEY2);
-        return token;
-      }
-      setToken(token) {
-        localStorage.setItem(TOKEN_KEY2, token);
-        useAuthenticationStore.getState().setToken(token);
-        emitAuthTokenChanged(token);
-      }
-      clearToken() {
-        localStorage.removeItem(TOKEN_KEY2);
-        useAuthenticationStore.getState().clearToken();
-        emitAuthTokenChanged(null);
-      }
-      isAuthenticated() {
-        const token = useAuthenticationStore.getState().token;
-        return !!token && !this.isTokenExpired(token);
-      }
-      isTokenExpired(token) {
-        try {
-          if (!token) return true;
-          const decoded = this.parseJwtClaims(token);
-          if (!decoded) return true;
-          return decoded.exp * 1e3 < Date.now();
-        } catch {
-          return true;
-        }
-      }
-      parseJwtClaims(token) {
-        try {
-          const base64Url = token.split(".")[1];
-          const base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
-          const jsonPayload = decodeURIComponent(
-            atob(base64).split("").map((c) => {
-              return "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2);
-            }).join("")
-          );
-          return JSON.parse(jsonPayload);
-        } catch (error) {
-          debugLogger.error("Failed to parse JWT claims:", { error });
-          return null;
-        }
-      }
-    };
-    authenticationService = new AuthenticationService();
-  }
-});
-
 // src/services/conversationSync/conversationSyncService.ts
 function buildUrl(path) {
   const base = usePackageSettingsStore.getState().settings?.gatewayApiUrl?.replace(/\/$/, "");
@@ -20397,69 +20419,48 @@ var init_source_chips = __esm({
             /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(import_material35.Box, { sx: { opacity: 0.75, fontSize: 11, wordBreak: "break-all", mt: 0.25 }, children: source.url })
           ] }),
           arrow: true,
-          children: /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)(
+          children: /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(
             import_material35.Box,
             {
               component: "a",
               href: source.url,
               target: "_blank",
               rel: "noopener noreferrer",
+              className: "source-chip",
               sx: {
                 display: "inline-flex",
                 alignItems: "center",
+                justifyContent: "center",
                 flexShrink: 0,
-                gap: 0.5,
-                height: 26,
-                px: 0.75,
-                borderRadius: 999,
-                border: "1px solid",
-                borderColor: "divider",
-                bgcolor: "background.paper",
-                textDecoration: "none",
+                width: 28,
+                height: 28,
+                borderRadius: "50%",
+                border: "2px solid",
+                borderColor: "background.paper",
+                bgcolor: "action.hover",
                 color: "text.primary",
-                fontSize: 12.5,
-                lineHeight: 1.4,
-                transition: "border-color 0.15s ease, background-color 0.15s ease, box-shadow 0.15s ease",
-                "&:hover": { borderColor: "primary.main", bgcolor: "action.hover", boxShadow: 1, zIndex: 2 }
+                textDecoration: "none",
+                // Hover lifts the chip via transform/z-index only — no layout reflow,
+                // so the overlapping stack can never jitter the way the expand did.
+                transition: "transform 0.15s ease, box-shadow 0.15s ease, border-color 0.15s ease",
+                "&:hover": {
+                  transform: "translateY(-3px)",
+                  boxShadow: 3,
+                  borderColor: "primary.main",
+                  zIndex: 3
+                }
               },
-              children: [
-                failed ? /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(
-                  import_material35.Box,
-                  {
-                    sx: {
-                      width: 18,
-                      height: 18,
-                      borderRadius: "50%",
-                      bgcolor: "primary.main",
-                      color: "primary.contrastText",
-                      display: "grid",
-                      placeItems: "center",
-                      fontSize: 9,
-                      fontWeight: 700,
-                      flexShrink: 0
-                    },
-                    children: domain.charAt(0).toUpperCase()
-                  }
-                ) : /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(
-                  import_material35.Box,
-                  {
-                    component: "img",
-                    src: `https://icons.duckduckgo.com/ip3/${domain}.ico`,
-                    alt: "",
-                    loading: "lazy",
-                    onError: () => setFailed(true),
-                    sx: { width: 18, height: 18, borderRadius: "50%", flexShrink: 0 }
-                  }
-                ),
-                /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(
-                  import_material35.Box,
-                  {
-                    component: "span",
-                    sx: { maxWidth: 150, overflow: "hidden", textOverflow: "ellipsis", whiteSpace: "nowrap" },
-                    children: label
-                  }
-                )
-              ]
+              children: failed ? /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(import_material35.Box, { component: "span", sx: { fontSize: 11, fontWeight: 700, color: "primary.main" }, children: domain.charAt(0).toUpperCase() }) : /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(
+                import_material35.Box,
+                {
+                  component: "img",
+                  src: `https://icons.duckduckgo.com/ip3/${domain}.ico`,
+                  alt: "",
+                  loading: "lazy",
+                  onError: () => setFailed(true),
+                  sx: { width: 16, height: 16, borderRadius: "4px", flexShrink: 0 }
+                }
+              )
             }
           )
         }
@@ -20484,7 +20485,19 @@ var init_source_chips = __esm({
             children: "Sources"
           }
         ),
-        /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(import_material35.Box, { sx: { display: "flex", flexWrap: "wrap", alignItems: "center", gap: 0.75 }, children: sources.map((s, i) => /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(SourceChip, { source: s }, `${s.url}-${i}`)) })
+        /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(
+          import_material35.Box,
+          {
+            sx: {
+              display: "flex",
+              alignItems: "center",
+              // Overlapping stack; each chip lifts on hover (no reflow → no jitter).
+              "& .source-chip": { ml: "-9px" },
+              "& .source-chip:first-of-type": { ml: 0 }
+            },
+            children: sources.map((s, i) => /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(SourceChip, { source: s }, `${s.url}-${i}`))
+          }
+        )
       ] });
     };
     source_chips_default = SourceChips;
@@ -23936,6 +23949,15 @@ ${fn}(${argStr})
 \`\`\``;
                   }
                 }
+                if (!/```(?:tool_code|TOOL_CODE)/.test(fullMessage)) {
+                  const plainToolFence = /```[a-zA-Z0-9_-]*[ \t]*\n([ \t]*(?:web_search|web_fetch|image_generation|create_file|ask_user)[\s\S]*?)\n```/;
+                  const fm = fullMessage.match(plainToolFence);
+                  if (fm) {
+                    fullMessage = fullMessage.replace(plainToolFence, `\`\`\`tool_code
+${fm[1].trim()}
+\`\`\``);
+                  }
+                }
                 const toolCallMatches = fullMessage.match(/```(?:tool_code|TOOL_CODE)\s*\n([^`]+)\n```/gi);
                 let enhancedMessage = fullMessage;
                 const summarizableResults = [];
@@ -26174,6 +26196,7 @@ var init_conversation_drawer = __esm({
     init_authenticationStore();
     init_packageSettingsStore();
     init_brandingService();
+    init_authenticationService();
     init_project_management_modal();
     init_memory_modal();
     init_move_conversation_modal();
@@ -26908,23 +26931,46 @@ var init_conversation_drawer = __esm({
                         ]
                       }
                     ),
-                    user2 && /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(
-                      import_material44.Box,
-                      {
-                        sx: {
-                          flexShrink: 0,
-                          display: "flex",
-                          alignItems: "center",
-                          justifyContent: "center",
-                          width: 30,
-                          height: 30,
-                          borderRadius: "50%",
-                          border: `1px solid ${(0, import_material44.alpha)(theme.palette.divider, 0.8)}`,
-                          color: theme.palette.text.secondary
-                        },
-                        children: /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(import_lucide_react11.Settings, { size: 16 })
-                      }
-                    )
+                    user2 && /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)(import_jsx_runtime44.Fragment, { children: [
+                      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(
+                        import_material44.Box,
+                        {
+                          sx: {
+                            flexShrink: 0,
+                            display: "flex",
+                            alignItems: "center",
+                            justifyContent: "center",
+                            width: 30,
+                            height: 30,
+                            borderRadius: "50%",
+                            border: `1px solid ${(0, import_material44.alpha)(theme.palette.divider, 0.8)}`,
+                            color: theme.palette.text.secondary
+                          },
+                          children: /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(import_lucide_react11.Settings, { size: 16 })
+                        }
+                      ),
+                      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(
+                        import_material44.IconButton,
+                        {
+                          "aria-label": "Sign out",
+                          title: "Sign out",
+                          onClick: (event) => {
+                            event.stopPropagation();
+                            authenticationService.clearToken();
+                            window.location.href = "/login";
+                          },
+                          sx: {
+                            flexShrink: 0,
+                            width: 30,
+                            height: 30,
+                            border: `1px solid ${(0, import_material44.alpha)(theme.palette.error.main, 0.4)}`,
+                            color: theme.palette.error.main,
+                            "&:hover": { bgcolor: (0, import_material44.alpha)(theme.palette.error.main, 0.1) }
+                          },
+                          children: /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(import_lucide_react11.LogOut, { size: 16 })
+                        }
+                      )
+                    ] })
                   ]
                 }
               )
@@ -27024,6 +27070,7 @@ var init_enhanced_mobile_conversations_modal = __esm({
     init_packageSettingsStore();
     init_memory_modal();
     init_brandingService();
+    init_authenticationService();
     init_project_management_modal();
     init_move_conversation_modal();
     init_simple_conversation_item();
@@ -27880,23 +27927,46 @@ var init_enhanced_mobile_conversations_modal = __esm({
                             }
                           )
                         ] }),
-                        user2 && /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(
-                          import_material45.Box,
-                          {
-                            sx: {
-                              flexShrink: 0,
-                              display: "flex",
-                              alignItems: "center",
-                              justifyContent: "center",
-                              width: 30,
-                              height: 30,
-                              borderRadius: "50%",
-                              border: `1px solid ${(0, import_styles29.alpha)(theme.palette.divider, 0.8)}`,
-                              color: theme.palette.text.secondary
-                            },
-                            children: /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(import_lucide_react12.Settings, { size: 16 })
-                          }
-                        )
+                        user2 && /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)(import_jsx_runtime45.Fragment, { children: [
+                          /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(
+                            import_material45.Box,
+                            {
+                              sx: {
+                                flexShrink: 0,
+                                display: "flex",
+                                alignItems: "center",
+                                justifyContent: "center",
+                                width: 30,
+                                height: 30,
+                                borderRadius: "50%",
+                                border: `1px solid ${(0, import_styles29.alpha)(theme.palette.divider, 0.8)}`,
+                                color: theme.palette.text.secondary
+                              },
+                              children: /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(import_lucide_react12.Settings, { size: 16 })
+                            }
+                          ),
+                          /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(
+                            import_material45.IconButton,
+                            {
+                              "aria-label": "Sign out",
+                              title: "Sign out",
+                              onClick: (event) => {
+                                event.stopPropagation();
+                                authenticationService.clearToken();
+                                window.location.href = "/login";
+                              },
+                              sx: {
+                                flexShrink: 0,
+                                width: 30,
+                                height: 30,
+                                border: `1px solid ${(0, import_styles29.alpha)(theme.palette.error.main, 0.4)}`,
+                                color: theme.palette.error.main,
+                                "&:hover": { bgcolor: (0, import_styles29.alpha)(theme.palette.error.main, 0.1) }
+                              },
+                              children: /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(import_lucide_react12.LogOut, { size: 16 })
+                            }
+                          )
+                        ] })
                       ]
                     }
                   )