@burtson-labs/bandit-engine 2.0.99 → 2.0.101

package/dist/management/management.js

@@ -1505,6 +1505,143 @@ var init_anthropic_provider = __esm({
   }
 });
 
+// src/store/authenticationStore.ts
+var import_zustand2, TOKEN_KEY, validToken, user, rawToken, useAuthenticationStore, readPersistedToken;
+var init_authenticationStore = __esm({
+  "src/store/authenticationStore.ts"() {
+    "use strict";
+    import_zustand2 = require("zustand");
+    TOKEN_KEY = "authToken";
+    validToken = null;
+    user = null;
+    rawToken = localStorage.getItem(TOKEN_KEY);
+    if (rawToken) {
+      try {
+        const base64Url = rawToken.split(".")[1];
+        const base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
+        const jsonPayload = decodeURIComponent(
+          atob(base64).split("").map((c) => "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2)).join("")
+        );
+        const decoded = JSON.parse(jsonPayload);
+        if (decoded.exp * 1e3 > Date.now()) {
+          validToken = rawToken;
+          user = decoded;
+        }
+      } catch {
+        validToken = null;
+        user = null;
+      }
+    }
+    useAuthenticationStore = (0, import_zustand2.create)((set) => ({
+      token: validToken,
+      user,
+      authError: null,
+      setToken: (token) => {
+        if (token) {
+          try {
+            const base64Url = token.split(".")[1];
+            const base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
+            const jsonPayload = decodeURIComponent(
+              atob(base64).split("").map((c) => "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2)).join("")
+            );
+            const user2 = JSON.parse(jsonPayload);
+            localStorage.setItem(TOKEN_KEY, token);
+            set({ token, authError: null, user: user2 });
+          } catch {
+            set({ token: null, authError: "Invalid token", user: null });
+          }
+        } else {
+          set({ token: null, authError: null, user: null });
+        }
+      },
+      clearToken: () => {
+        localStorage.removeItem(TOKEN_KEY);
+        set({ token: null, authError: null, user: null });
+      }
+    }));
+    readPersistedToken = () => {
+      try {
+        const raw = localStorage.getItem(TOKEN_KEY);
+        if (!raw) return null;
+        const base64 = raw.split(".")[1].replace(/-/g, "+").replace(/_/g, "/");
+        const json2 = decodeURIComponent(
+          atob(base64).split("").map((c) => "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2)).join("")
+        );
+        const decoded = JSON.parse(json2);
+        return decoded.exp * 1e3 > Date.now() ? raw : null;
+      } catch {
+        return null;
+      }
+    };
+  }
+});
+
+// src/services/auth/authenticationService.ts
+function emitAuthTokenChanged(token) {
+  if (typeof window === "undefined") {
+    return;
+  }
+  window.dispatchEvent(new CustomEvent(AUTH_TOKEN_CHANGED_EVENT, {
+    detail: { token }
+  }));
+}
+var TOKEN_KEY2, AUTH_TOKEN_CHANGED_EVENT, AuthenticationService, authenticationService;
+var init_authenticationService = __esm({
+  "src/services/auth/authenticationService.ts"() {
+    "use strict";
+    init_authenticationStore();
+    init_debugLogger();
+    TOKEN_KEY2 = "authToken";
+    AUTH_TOKEN_CHANGED_EVENT = "bandit:auth-token-changed";
+    AuthenticationService = class {
+      getToken() {
+        const token = localStorage.getItem(TOKEN_KEY2);
+        return token;
+      }
+      setToken(token) {
+        localStorage.setItem(TOKEN_KEY2, token);
+        useAuthenticationStore.getState().setToken(token);
+        emitAuthTokenChanged(token);
+      }
+      clearToken() {
+        localStorage.removeItem(TOKEN_KEY2);
+        useAuthenticationStore.getState().clearToken();
+        emitAuthTokenChanged(null);
+      }
+      isAuthenticated() {
+        const token = useAuthenticationStore.getState().token;
+        return !!token && !this.isTokenExpired(token);
+      }
+      isTokenExpired(token) {
+        try {
+          if (!token) return true;
+          const decoded = this.parseJwtClaims(token);
+          if (!decoded) return true;
+          return decoded.exp * 1e3 < Date.now();
+        } catch {
+          return true;
+        }
+      }
+      parseJwtClaims(token) {
+        try {
+          const base64Url = token.split(".")[1];
+          const base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
+          const jsonPayload = decodeURIComponent(
+            atob(base64).split("").map((c) => {
+              return "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2);
+            }).join("")
+          );
+          return JSON.parse(jsonPayload);
+        } catch (error) {
+          debugLogger.error("Failed to parse JWT claims:", { error });
+          return null;
+        }
+      }
+    };
+    authenticationService = new AuthenticationService();
+  }
+});
+
 // src/services/gateway/gateway.service.ts
 var import_axios, import_rxjs6, GatewayService;
 var init_gateway_service = __esm({
@@ -1513,6 +1650,7 @@ var init_gateway_service = __esm({
     import_axios = __toESM(require("axios"));
     import_rxjs6 = require("rxjs");
     init_debugLogger();
+    init_authenticationService();
     GatewayService = class {
       constructor(_baseUrl, _tokenFactory, _feedbackEmail) {
         this._baseUrl = _baseUrl;
@@ -1553,7 +1691,10 @@ var init_gateway_service = __esm({
         });
         instance.interceptors.response.use(
           (response) => response,
-          (error) => Promise.reject(this._normalizeAxiosError(error))
+          (error) => {
+            this._handleAuthFailure(error);
+            return Promise.reject(this._normalizeAxiosError(error));
+          }
         );
         return instance;
       }
@@ -1574,6 +1715,24 @@ var init_gateway_service = __esm({
         }
         return new Error(error.message);
       }
+      _handleAuthFailure(error) {
+        const status = error.response?.status;
+        if (status !== 401 && status !== 403) {
+          return;
+        }
+        const data = error.response?.data;
+        const code = data?.code;
+        if (code !== "FORCE_RELOGIN" && code !== "ACCOUNT_LOCKED") {
+          return;
+        }
+        try {
+          authenticationService.clearToken();
+        } catch {
+        }
+        if (typeof window !== "undefined" && typeof window.dispatchEvent === "function") {
+          window.dispatchEvent(new CustomEvent("auth:force-relogin", { detail: { code } }));
+        }
+      }
       _createHttpError(message, response) {
         return Object.assign(new Error(message), { response });
       }
@@ -3520,14 +3679,14 @@ var aiProviderStore_exports = {};
 __export(aiProviderStore_exports, {
   useAIProviderStore: () => useAIProviderStore
 });
-var import_zustand2, useAIProviderStore;
+var import_zustand3, useAIProviderStore;
 var init_aiProviderStore = __esm({
   "src/store/aiProviderStore.ts"() {
     "use strict";
-    import_zustand2 = require("zustand");
+    import_zustand3 = require("zustand");
     init_ai_provider_factory();
     init_debugLogger();
-    useAIProviderStore = (0, import_zustand2.create)((set, get) => ({
+    useAIProviderStore = (0, import_zustand3.create)((set, get) => ({
       provider: null,
       config: null,
       setProvider: (provider, config) => set({ provider, config }),
@@ -3555,12 +3714,12 @@ var init_aiProviderStore = __esm({
 });
 
 // src/store/packageSettingsStore.ts
-var import_zustand3, usePackageSettingsStore;
+var import_zustand4, usePackageSettingsStore;
 var init_packageSettingsStore = __esm({
   "src/store/packageSettingsStore.ts"() {
     "use strict";
-    import_zustand3 = require("zustand");
-    usePackageSettingsStore = (0, import_zustand3.create)((set, get) => ({
+    import_zustand4 = require("zustand");
+    usePackageSettingsStore = (0, import_zustand4.create)((set, get) => ({
       settings: null,
       setSettings: (settings) => set({ settings }),
       getSettings: () => get().settings,
@@ -4232,17 +4391,17 @@ var init_prompts = __esm({
 });
 
 // src/store/memoryStore.ts
-var import_zustand4, DB_NAME, STORE_NAME, storeConfigs, normalize, useMemoryStore;
+var import_zustand5, DB_NAME, STORE_NAME, storeConfigs, normalize, useMemoryStore;
 var init_memoryStore = __esm({
   "src/store/memoryStore.ts"() {
     "use strict";
-    import_zustand4 = require("zustand");
+    import_zustand5 = require("zustand");
     init_indexedDBService();
     DB_NAME = "bandit-memory-db";
     STORE_NAME = "bandit-memory";
     storeConfigs = [{ name: STORE_NAME, keyPath: "id" }];
     normalize = (text) => text.toLowerCase().replace(/[^\w\s]|_/g, "").replace(/\s+/g, " ").trim();
-    useMemoryStore = (0, import_zustand4.create)((set, get) => ({
+    useMemoryStore = (0, import_zustand5.create)((set, get) => ({
       entries: [],
       _hasHydrated: false,
       hydrate: async () => {
@@ -6221,77 +6380,6 @@ var init_vectorMigrationService = __esm({
   }
 });
 
-// src/store/authenticationStore.ts
-var import_zustand5, TOKEN_KEY, validToken, user, rawToken, useAuthenticationStore, readPersistedToken;
-var init_authenticationStore = __esm({
-  "src/store/authenticationStore.ts"() {
-    "use strict";
-    import_zustand5 = require("zustand");
-    TOKEN_KEY = "authToken";
-    validToken = null;
-    user = null;
-    rawToken = localStorage.getItem(TOKEN_KEY);
-    if (rawToken) {
-      try {
-        const base64Url = rawToken.split(".")[1];
-        const base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
-        const jsonPayload = decodeURIComponent(
-          atob(base64).split("").map((c) => "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2)).join("")
-        );
-        const decoded = JSON.parse(jsonPayload);
-        if (decoded.exp * 1e3 > Date.now()) {
-          validToken = rawToken;
-          user = decoded;
-        }
-      } catch {
-        validToken = null;
-        user = null;
-      }
-    }
-    useAuthenticationStore = (0, import_zustand5.create)((set) => ({
-      token: validToken,
-      user,
-      authError: null,
-      setToken: (token) => {
-        if (token) {
-          try {
-            const base64Url = token.split(".")[1];
-            const base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
-            const jsonPayload = decodeURIComponent(
-              atob(base64).split("").map((c) => "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2)).join("")
-            );
-            const user2 = JSON.parse(jsonPayload);
-            localStorage.setItem(TOKEN_KEY, token);
-            set({ token, authError: null, user: user2 });
-          } catch {
-            set({ token: null, authError: "Invalid token", user: null });
-          }
-        } else {
-          set({ token: null, authError: null, user: null });
-        }
-      },
-      clearToken: () => {
-        localStorage.removeItem(TOKEN_KEY);
-        set({ token: null, authError: null, user: null });
-      }
-    }));
-    readPersistedToken = () => {
-      try {
-        const raw = localStorage.getItem(TOKEN_KEY);
-        if (!raw) return null;
-        const base64 = raw.split(".")[1].replace(/-/g, "+").replace(/_/g, "/");
-        const json2 = decodeURIComponent(
-          atob(base64).split("").map((c) => "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2)).join("")
-        );
-        const decoded = JSON.parse(json2);
-        return decoded.exp * 1e3 > Date.now() ? raw : null;
-      } catch {
-        return null;
-      }
-    };
-  }
-});
-
 // src/types/featureFlags.ts
 var init_featureFlags = __esm({
   "src/types/featureFlags.ts"() {
@@ -8009,72 +8097,6 @@ var init_projectStore = __esm({
   }
 });
 
-// src/services/auth/authenticationService.ts
-function emitAuthTokenChanged(token) {
-  if (typeof window === "undefined") {
-    return;
-  }
-  window.dispatchEvent(new CustomEvent(AUTH_TOKEN_CHANGED_EVENT, {
-    detail: { token }
-  }));
-}
-var TOKEN_KEY2, AUTH_TOKEN_CHANGED_EVENT, AuthenticationService, authenticationService;
-var init_authenticationService = __esm({
-  "src/services/auth/authenticationService.ts"() {
-    "use strict";
-    init_authenticationStore();
-    init_debugLogger();
-    TOKEN_KEY2 = "authToken";
-    AUTH_TOKEN_CHANGED_EVENT = "bandit:auth-token-changed";
-    AuthenticationService = class {
-      getToken() {
-        const token = localStorage.getItem(TOKEN_KEY2);
-        return token;
-      }
-      setToken(token) {
-        localStorage.setItem(TOKEN_KEY2, token);
-        useAuthenticationStore.getState().setToken(token);
-        emitAuthTokenChanged(token);
-      }
-      clearToken() {
-        localStorage.removeItem(TOKEN_KEY2);
-        useAuthenticationStore.getState().clearToken();
-        emitAuthTokenChanged(null);
-      }
-      isAuthenticated() {
-        const token = useAuthenticationStore.getState().token;
-        return !!token && !this.isTokenExpired(token);
-      }
-      isTokenExpired(token) {
-        try {
-          if (!token) return true;
-          const decoded = this.parseJwtClaims(token);
-          if (!decoded) return true;
-          return decoded.exp * 1e3 < Date.now();
-        } catch {
-          return true;
-        }
-      }
-      parseJwtClaims(token) {
-        try {
-          const base64Url = token.split(".")[1];
-          const base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
-          const jsonPayload = decodeURIComponent(
-            atob(base64).split("").map((c) => {
-              return "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2);
-            }).join("")
-          );
-          return JSON.parse(jsonPayload);
-        } catch (error) {
-          debugLogger.error("Failed to parse JWT claims:", { error });
-          return null;
-        }
-      }
-    };
-    authenticationService = new AuthenticationService();
-  }
-});
-
 // src/services/conversationSync/conversationSyncService.ts
 function buildUrl(path) {
   const base = usePackageSettingsStore.getState().settings?.gatewayApiUrl?.replace(/\/$/, "");
@@ -26174,6 +26196,7 @@ var init_conversation_drawer = __esm({
     init_authenticationStore();
     init_packageSettingsStore();
     init_brandingService();
+    init_authenticationService();
     init_project_management_modal();
     init_memory_modal();
     init_move_conversation_modal();
@@ -26908,23 +26931,46 @@ var init_conversation_drawer = __esm({
                         ]
                       }
                     ),
-                    user2 && /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(
-                      import_material44.Box,
-                      {
-                        sx: {
-                          flexShrink: 0,
-                          display: "flex",
-                          alignItems: "center",
-                          justifyContent: "center",
-                          width: 30,
-                          height: 30,
-                          borderRadius: "50%",
-                          border: `1px solid ${(0, import_material44.alpha)(theme.palette.divider, 0.8)}`,
-                          color: theme.palette.text.secondary
-                        },
-                        children: /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(import_lucide_react11.Settings, { size: 16 })
-                      }
-                    )
+                    user2 && /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)(import_jsx_runtime44.Fragment, { children: [
+                      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(
+                        import_material44.Box,
+                        {
+                          sx: {
+                            flexShrink: 0,
+                            display: "flex",
+                            alignItems: "center",
+                            justifyContent: "center",
+                            width: 30,
+                            height: 30,
+                            borderRadius: "50%",
+                            border: `1px solid ${(0, import_material44.alpha)(theme.palette.divider, 0.8)}`,
+                            color: theme.palette.text.secondary
+                          },
+                          children: /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(import_lucide_react11.Settings, { size: 16 })
+                        }
+                      ),
+                      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(
+                        import_material44.IconButton,
+                        {
+                          "aria-label": "Sign out",
+                          title: "Sign out",
+                          onClick: (event) => {
+                            event.stopPropagation();
+                            authenticationService.clearToken();
+                            window.location.href = "/login";
+                          },
+                          sx: {
+                            flexShrink: 0,
+                            width: 30,
+                            height: 30,
+                            border: `1px solid ${(0, import_material44.alpha)(theme.palette.error.main, 0.4)}`,
+                            color: theme.palette.error.main,
+                            "&:hover": { bgcolor: (0, import_material44.alpha)(theme.palette.error.main, 0.1) }
+                          },
+                          children: /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(import_lucide_react11.LogOut, { size: 16 })
+                        }
+                      )
+                    ] })
                   ]
                 }
               )
@@ -27024,6 +27070,7 @@ var init_enhanced_mobile_conversations_modal = __esm({
     init_packageSettingsStore();
     init_memory_modal();
     init_brandingService();
+    init_authenticationService();
     init_project_management_modal();
     init_move_conversation_modal();
     init_simple_conversation_item();
@@ -27880,23 +27927,46 @@ var init_enhanced_mobile_conversations_modal = __esm({
                             }
                           )
                         ] }),
-                        user2 && /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(
-                          import_material45.Box,
-                          {
-                            sx: {
-                              flexShrink: 0,
-                              display: "flex",
-                              alignItems: "center",
-                              justifyContent: "center",
-                              width: 30,
-                              height: 30,
-                              borderRadius: "50%",
-                              border: `1px solid ${(0, import_styles29.alpha)(theme.palette.divider, 0.8)}`,
-                              color: theme.palette.text.secondary
-                            },
-                            children: /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(import_lucide_react12.Settings, { size: 16 })
-                          }
-                        )
+                        user2 && /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)(import_jsx_runtime45.Fragment, { children: [
+                          /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(
+                            import_material45.Box,
+                            {
+                              sx: {
+                                flexShrink: 0,
+                                display: "flex",
+                                alignItems: "center",
+                                justifyContent: "center",
+                                width: 30,
+                                height: 30,
+                                borderRadius: "50%",
+                                border: `1px solid ${(0, import_styles29.alpha)(theme.palette.divider, 0.8)}`,
+                                color: theme.palette.text.secondary
+                              },
+                              children: /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(import_lucide_react12.Settings, { size: 16 })
+                            }
+                          ),
+                          /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(
+                            import_material45.IconButton,
+                            {
+                              "aria-label": "Sign out",
+                              title: "Sign out",
+                              onClick: (event) => {
+                                event.stopPropagation();
+                                authenticationService.clearToken();
+                                window.location.href = "/login";
+                              },
+                              sx: {
+                                flexShrink: 0,
+                                width: 30,
+                                height: 30,
+                                border: `1px solid ${(0, import_styles29.alpha)(theme.palette.error.main, 0.4)}`,
+                                color: theme.palette.error.main,
+                                "&:hover": { bgcolor: (0, import_styles29.alpha)(theme.palette.error.main, 0.1) }
+                              },
+                              children: /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(import_lucide_react12.LogOut, { size: 16 })
+                            }
+                          )
+                        ] })
                       ]
                     }
                   )
@@ -35938,7 +36008,7 @@ var PreferencesTab = ({
       {
         variant: "h5",
         color: "text.primary",
-        sx: { mb: 1, fontWeight: 600, fontSize: { xs: "1.6rem", md: "1.8rem" } },
+        sx: { mb: 1, fontWeight: 600, fontSize: { xs: "1.3rem", md: "1.45rem" } },
         children: "Preferences"
       }
     ),