@elevasis/ui 2.65.0 → 2.67.0

package/dist/app/index.d.ts

@@ -4905,7 +4905,14 @@ interface ElevasisAppConfig {
     apiUrl: string;
     /** WorkOS AuthKit configuration */
     auth: {
-        clientId: string;
+        /**
+         * WorkOS client ID. Defaults to the shared platform application
+         * (`WORKOS_CLIENT_ID` in `../config/workos`) resolved through
+         * `VITE_WORKOS_CLIENT_ID` when omitted. Only set this to target a
+         * different WorkOS environment -- e.g. Command Center's local `.env`
+         * uses a staging client ID this way.
+         */
+        clientId?: string;
         redirectUri?: string;
         apiHostname?: string;
         devMode?: boolean;
@@ -4929,11 +4936,6 @@ interface ElevasisAppConfig {
     listActions?: ListBuilderRegistry;
     /** Callback for API errors (status >= 500) */
     onApiError?: (endpoint: string, error: Error, details?: ApiErrorDetails) => void;
-    /**
-     * Component to render when VITE_WORKOS_CLIENT_ID (or auth.clientId) is missing.
-     * When omitted and clientId is falsy, renders null.
-     */
-    MissingEnvNotice?: ComponentType;
     /**
      * Called with the current access token whenever the auth user changes.
      * Use this to sync the token to a debug logger or external service.
@@ -4945,24 +4947,27 @@ interface ElevasisAppConfig {
  *
  * Absorbs the boilerplate common to every template's main.tsx:
  * - Theme preset/colorScheme reading from a Zustand store
- * - Missing env var guard
+ * - WorkOS client ID resolution (config -> env -> shared platform default)
  * - ElevasisUIProvider assembly
  * - Auth token sync
  * - Profile theme sync
  * - Notifications + RouterProvider rendering
  *
+ * A malformed or unresolvable WorkOS client ID throws during render, which
+ * this factory catches with `AppErrorBoundary` so the failure surfaces via
+ * `CrashErrorFallback` instead of a blank page.
+ *
  * @example
  * ```tsx
  * const App = createElevasisApp({
  *   router,
  *   apiUrl: import.meta.env.VITE_API_URL,
- *   auth: { clientId: import.meta.env.VITE_WORKOS_CLIENT_ID, devMode: true },
+ *   auth: { devMode: true },
  *   store: {
  *     useThemePreset: () => useAppStore(s => s.theme.preset),
  *     useThemeColorScheme: () => useAppStore(s => s.theme.colorScheme),
  *     useSetTheme: () => useAppStore(s => s.setTheme),
  *   },
- *   MissingEnvNotice,
  *   onAuthTokenChange: (token) => uiLogger.setAuthToken(token),
  *   onApiError: (endpoint, error, details) => bslogAPIError(endpoint, error, details),
  * })
@@ -5090,6 +5095,12 @@ interface ElevasisSystemsProviderProps {
     children: ReactNode;
 }
 
+/**
+ * Canonical initialization types, owned here next to {@link InitializationProvider}
+ * (the live, wired implementation). The legacy `createUseAppInitialization`
+ * factory in `./hooks/useAppInitialization.ts` imports these rather than
+ * declaring its own copy, so the two implementations can never drift on shape.
+ */
 interface InitializationError {
     layer: 'auth' | 'profile' | 'organization';
     message: string;
@@ -5124,6 +5135,7 @@ interface ElevasisAuthenticatedShellProps {
     fullScreenPathPrefixes?: readonly string[];
     readyMode?: 'user' | 'organization';
     accountPath?: string;
+    /** Where WorkOS redirects after sign-out. Defaults to `${window.location.origin}/login`. */
     signOutReturnTo?: string;
     appVersion?: string;
     timeRange?: ElevasisSystemsProviderProps['timeRange'];

package/dist/app/index.js

@@ -1,15 +1,15 @@
-import { useSessionCheck, AppErrorBoundary, SidebarProvider, ElevasisSystemsProvider, useElevasisSystems, AppShellContainer, Sidebar, AppShellRightSideContainer, AppShellRightSideOuterContainer, SystemShell, ElevasisUIProvider } from '../chunk-3WVZRN37.js';
+import { useSessionCheck, AppErrorBoundary, SidebarProvider, ElevasisSystemsProvider, useElevasisSystems, AppShellContainer, Sidebar, AppShellRightSideContainer, AppShellRightSideOuterContainer, SystemShell, ElevasisUIProvider } from '../chunk-5TERYXOO.js';
 import '../chunk-4OEVLV66.js';
 import '../chunk-RBGVNPA6.js';
-import '../chunk-ZTWA5H77.js';
+import '../chunk-6ZAP3FOA.js';
 import '../chunk-AUDNF2Q7.js';
 import '../chunk-6M6OLGQY.js';
 import '../chunk-MKH2KOAO.js';
 import '../chunk-XNW3O6QW.js';
-import '../chunk-T4LA4RY2.js';
+import '../chunk-L7BZZ4SI.js';
 import '../chunk-GMXGDO3I.js';
 import '../chunk-62GVNH5U.js';
-import { useInitialization } from '../chunk-LO7GWG24.js';
+import { useInitialization } from '../chunk-P45GQ3ZW.js';
 import '../chunk-DD3CCMCZ.js';
 import '../chunk-M7WWRZ5Z.js';
 import '../chunk-JFBZ6XDW.js';
@@ -18,7 +18,7 @@ import '../chunk-Q7DJKLEN.js';
 import '../chunk-HENXLGVD.js';
 import '../chunk-BLXJEIQS.js';
 import '../chunk-RNP5R5I3.js';
-import '../chunk-EIXSQONC.js';
+import '../chunk-RT4KRGZT.js';
 import { listAllSystems } from '../chunk-I7BZVVVU.js';
 import '../chunk-Y6I3IC45.js';
 import '../chunk-6SSQGWK7.js';
@@ -34,6 +34,18 @@ import { useAuth } from '@workos-inc/authkit-react';
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
 import { useComputedColorScheme } from '@mantine/core';
 
+// src/config/workos.ts
+var WORKOS_CLIENT_ID = "client_01K41FQ781Z3F787FBCYGDH00J";
+var WORKOS_CLIENT_ID_PATTERN = /^client_[A-Za-z0-9]+$/;
+function resolveWorkosClientId(explicit) {
+  const resolved = explicit || import.meta.env?.VITE_WORKOS_CLIENT_ID || WORKOS_CLIENT_ID;
+  if (!WORKOS_CLIENT_ID_PATTERN.test(resolved)) {
+    throw new Error(
+      `Invalid WorkOS client ID "${resolved}". Expected a value matching ${WORKOS_CLIENT_ID_PATTERN}. This is most likely caused by a malformed VITE_WORKOS_CLIENT_ID environment variable (e.g. an extra "=" producing "=client_...").`
+    );
+  }
+  return resolved;
+}
 var DEFAULT_PRESET = "default";
 var DEFAULT_COLOR_SCHEME = "dark";
 function AppWithStore({ config }) {
@@ -45,12 +57,7 @@ function AppWithStore({ config }) {
     },
     [config.onApiError]
   );
-  if (!config.auth.clientId) {
-    if (config.MissingEnvNotice) {
-      return /* @__PURE__ */ jsx(config.MissingEnvNotice, {});
-    }
-    return null;
-  }
+  const resolvedClientId = resolveWorkosClientId(config.auth.clientId);
   const assembledTheme = {
     preset: themePreset,
     colorScheme: themeColorScheme,
@@ -64,7 +71,7 @@ function AppWithStore({ config }) {
       theme: assembledTheme,
       auth: {
         mode: "authkit",
-        clientId: config.auth.clientId,
+        clientId: resolvedClientId,
         redirectUri: config.auth.redirectUri,
         apiHostname: config.auth.apiHostname,
         devMode: config.auth.devMode
@@ -105,7 +112,7 @@ function AuthenticatedApp({ config }) {
 }
 function createElevasisApp(config) {
   function ElevasisApp() {
-    return /* @__PURE__ */ jsx(AppWithStore, { config });
+    return /* @__PURE__ */ jsx(AppErrorBoundary, { children: /* @__PURE__ */ jsx(AppWithStore, { config }) });
   }
   ElevasisApp.displayName = "ElevasisApp";
   return ElevasisApp;
@@ -129,7 +136,7 @@ function ElevasisAuthenticatedShell({
   fullScreenPathPrefixes = ["/public/", "/chat/"],
   readyMode = "organization",
   accountPath = "/settings/account",
-  signOutReturnTo,
+  signOutReturnTo = typeof window !== "undefined" ? `${window.location.origin}/login` : void 0,
   appVersion,
   timeRange,
   operationsApiUrl,

package/dist/auth/index.d.ts

@@ -169,6 +169,12 @@ declare function useStableAccessToken(): () => Promise<string>;
  */
 declare function useSessionCheck(): void;
 
+/**
+ * Canonical initialization types, owned here next to {@link InitializationProvider}
+ * (the live, wired implementation). The legacy `createUseAppInitialization`
+ * factory in `./hooks/useAppInitialization.ts` imports these rather than
+ * declaring its own copy, so the two implementations can never drift on shape.
+ */
 interface InitializationError {
     layer: 'auth' | 'profile' | 'organization';
     message: string;
@@ -197,7 +203,7 @@ interface ProtectedRouteProps {
     /**
      * When true (default), waits for both user AND organization to be ready
      * before rendering children. When false, only waits for user readiness.
-     * @default true
+     * @default true -- see {@link DEFAULT_WAIT_FOR_ORGANIZATION}
      */
     waitForOrganization?: boolean;
 }
@@ -216,8 +222,9 @@ interface ProtectedRouteProps {
  * When `canRecover()` returns false, falls back to navigating to `redirectTo`
  * (default: '/login') with a `returnTo` search param.
  *
- * Organization-layer errors are allowed through -- routes like /invitations
- * must be accessible even when the user has no org membership.
+ * Organization-layer errors are allowed through so a route can render its own
+ * no-org UI (e.g. "you have no organization membership yet") instead of being
+ * stuck behind this guard's fallback indefinitely.
  *
  * @example
  * // With custom fallback (your Mantine loader):
@@ -226,9 +233,9 @@ interface ProtectedRouteProps {
  * </ProtectedRoute>
  *
  * @example
- * // Wait only for user, not org (e.g. /invitations route):
+ * // Wait only for user, not org (e.g. a page reachable before onboarding):
  * <ProtectedRoute waitForOrganization={false}>
- *   <InvitationsPage />
+ *   <WelcomePage />
  * </ProtectedRoute>
  */
 declare function ProtectedRoute({ children, redirectTo, fallback, errorFallback, waitForOrganization }: ProtectedRouteProps): react_jsx_runtime.JSX.Element | null;

package/dist/auth/index.js

@@ -1,15 +1,15 @@
-export { AccessGuard, AccessKeys, ProtectedRoute, useSessionCheck as useRefocusSessionCheck, useSessionCheck, useStableAccessToken } from '../chunk-3WVZRN37.js';
+export { AccessGuard, AccessKeys, ProtectedRoute, useSessionCheck as useRefocusSessionCheck, useSessionCheck, useStableAccessToken } from '../chunk-5TERYXOO.js';
 import '../chunk-4OEVLV66.js';
 import '../chunk-RBGVNPA6.js';
-import '../chunk-ZTWA5H77.js';
+import '../chunk-6ZAP3FOA.js';
 import '../chunk-AUDNF2Q7.js';
 import '../chunk-6M6OLGQY.js';
 import '../chunk-MKH2KOAO.js';
 import '../chunk-XNW3O6QW.js';
-import '../chunk-T4LA4RY2.js';
+import '../chunk-L7BZZ4SI.js';
 import '../chunk-GMXGDO3I.js';
 import '../chunk-62GVNH5U.js';
-import '../chunk-LO7GWG24.js';
+import '../chunk-P45GQ3ZW.js';
 import '../chunk-DD3CCMCZ.js';
 import '../chunk-M7WWRZ5Z.js';
 import '../chunk-JFBZ6XDW.js';
@@ -18,7 +18,7 @@ import '../chunk-Q7DJKLEN.js';
 import '../chunk-HENXLGVD.js';
 import '../chunk-BLXJEIQS.js';
 import '../chunk-RNP5R5I3.js';
-import '../chunk-EIXSQONC.js';
+import '../chunk-RT4KRGZT.js';
 import '../chunk-I7BZVVVU.js';
 import '../chunk-Y6I3IC45.js';
 import '../chunk-6SSQGWK7.js';

package/dist/charts/index.js

@@ -1,15 +1,15 @@
-export { ActivityTrendChart, ChartFrame, CombinedTrendChart, CostTrendChart, CyberAreaChart, CyberDonut, CyberDonutTooltip, CyberLegendItem, HeroStatsRow, getSeriesColor, useCyberColors } from '../chunk-3WVZRN37.js';
+export { ActivityTrendChart, ChartFrame, CombinedTrendChart, CostTrendChart, CyberAreaChart, CyberDonut, CyberDonutTooltip, CyberLegendItem, HeroStatsRow, getSeriesColor, useCyberColors } from '../chunk-5TERYXOO.js';
 import '../chunk-4OEVLV66.js';
 import '../chunk-RBGVNPA6.js';
-import '../chunk-ZTWA5H77.js';
+import '../chunk-6ZAP3FOA.js';
 import '../chunk-AUDNF2Q7.js';
 import '../chunk-6M6OLGQY.js';
 import '../chunk-MKH2KOAO.js';
 import '../chunk-XNW3O6QW.js';
-import '../chunk-T4LA4RY2.js';
+import '../chunk-L7BZZ4SI.js';
 import '../chunk-GMXGDO3I.js';
 import '../chunk-62GVNH5U.js';
-import '../chunk-LO7GWG24.js';
+import '../chunk-P45GQ3ZW.js';
 import '../chunk-DD3CCMCZ.js';
 import '../chunk-M7WWRZ5Z.js';
 import '../chunk-JFBZ6XDW.js';
@@ -18,7 +18,7 @@ import '../chunk-Q7DJKLEN.js';
 import '../chunk-HENXLGVD.js';
 import '../chunk-BLXJEIQS.js';
 import '../chunk-RNP5R5I3.js';
-import '../chunk-EIXSQONC.js';
+import '../chunk-RT4KRGZT.js';
 import '../chunk-I7BZVVVU.js';
 import '../chunk-Y6I3IC45.js';
 import '../chunk-6SSQGWK7.js';