@hachej/boring-core 0.1.0

package/dist/chunk-VTOS4C7B.js

@@ -0,0 +1,3443 @@
+import {
+  TopBarSlotProvider
+} from "./chunk-HYNKZSTF.js";
+import {
+  ConfigFetchError,
+  ERROR_CODES,
+  HttpError
+} from "./chunk-H5KU6R6Y.js";
+
+// src/front/AppErrorBoundary.tsx
+import { Component } from "react";
+import { Button, ErrorState } from "@hachej/boring-ui-kit";
+import { jsx } from "react/jsx-runtime";
+var AppErrorBoundary = class extends Component {
+  state = { error: null };
+  static getDerivedStateFromError(error) {
+    return { error };
+  }
+  componentDidCatch(error, errorInfo) {
+    console.error("[AppErrorBoundary]", error, errorInfo);
+    this.props.onError?.(error, errorInfo);
+  }
+  handleReload = () => {
+    window.location.reload();
+  };
+  handleRetry = () => {
+    this.setState({ error: null });
+  };
+  render() {
+    const { error } = this.state;
+    if (!error) return this.props.children;
+    const isConfigError = error instanceof ConfigFetchError;
+    return /* @__PURE__ */ jsx("div", { className: "flex min-h-screen items-center justify-center bg-background p-8 text-foreground", children: /* @__PURE__ */ jsx(
+      ErrorState,
+      {
+        className: "w-full max-w-lg",
+        title: isConfigError ? "Cannot reach server" : "Something went wrong",
+        description: error.message,
+        details: isConfigError && error.requestId ? `Request ID: ${error.requestId}` : void 0,
+        actions: /* @__PURE__ */ jsx(Button, { type: "button", onClick: isConfigError ? this.handleRetry : this.handleReload, children: isConfigError ? "Retry" : "Reload page" })
+      }
+    ) });
+  }
+};
+
+// src/front/ConfigProvider.tsx
+import { createContext, useContext, useState, useEffect, useRef } from "react";
+
+// src/front/utils.ts
+var apiBase = "";
+function setApiBase(base) {
+  apiBase = base.replace(/\/$/, "");
+}
+function getApiBase() {
+  return apiBase;
+}
+function buildApiUrl(path) {
+  if (path.startsWith("http://") || path.startsWith("https://")) return path;
+  const base = getApiBase();
+  const normalizedPath = path.startsWith("/") ? path : `/${path}`;
+  return `${base}${normalizedPath}`;
+}
+function getWsBase() {
+  const base = getApiBase();
+  if (base.startsWith("https://")) return base.replace("https://", "wss://");
+  if (base.startsWith("http://")) return base.replace("http://", "ws://");
+  const protocol = typeof window !== "undefined" && window.location.protocol === "https:" ? "wss:" : "ws:";
+  const host = typeof window !== "undefined" ? window.location.host : "localhost";
+  return `${protocol}//${host}${base}`;
+}
+function buildWsUrl(path) {
+  const base = getWsBase();
+  const normalizedPath = path.startsWith("/") ? path : `/${path}`;
+  return `${base}${normalizedPath}`;
+}
+function openWebSocket(path, protocols) {
+  return new WebSocket(buildWsUrl(path), protocols);
+}
+async function parseErrorEnvelope(response) {
+  try {
+    const body = await response.json();
+    const code = body.code ?? "internal_error";
+    const message = body.message ?? body.error ?? response.statusText;
+    return { code, message, requestId: body.requestId };
+  } catch {
+    return {
+      code: ERROR_CODES.INTERNAL_ERROR,
+      message: response.statusText || `HTTP ${response.status}`
+    };
+  }
+}
+async function apiFetch(url, init) {
+  const fullUrl = buildApiUrl(url);
+  const response = await fetch(fullUrl, {
+    ...init,
+    credentials: "include"
+  }).catch((err) => {
+    throw new HttpError({
+      status: 0,
+      code: ERROR_CODES.INTERNAL_ERROR,
+      message: `Network error: ${err instanceof Error ? err.message : String(err)}`
+    });
+  });
+  if (!response.ok) {
+    const envelope = await parseErrorEnvelope(response);
+    throw new HttpError({
+      status: response.status,
+      code: envelope.code,
+      message: envelope.message,
+      requestId: envelope.requestId
+    });
+  }
+  return response;
+}
+async function apiFetchJson(url, init) {
+  const response = await apiFetch(url, init);
+  return response.json();
+}
+function getHttpErrorDetail(err) {
+  if (err instanceof HttpError) {
+    return { code: err.code, message: err.message, status: err.status };
+  }
+  if (err instanceof Error) {
+    return { code: "internal_error", message: err.message };
+  }
+  return { code: "internal_error", message: String(err) };
+}
+var routes = {
+  signin: "/auth/signin",
+  signup: "/auth/signup",
+  forgotPassword: "/auth/forgot-password",
+  resetPassword: "/auth/reset-password",
+  verifyEmail: "/auth/verify-email",
+  callbackGithub: "/auth/callback/github",
+  me: "/me",
+  workspaceMembers: "/w/:id/members",
+  workspaceInvites: "/w/:id/invites",
+  workspaceSettings: "/w/:id/settings",
+  inviteAccept: "/invites/:token"
+};
+function routeHref(name, params) {
+  let path = routes[name];
+  if (params) {
+    for (const [key, value] of Object.entries(params)) {
+      path = path.replace(`:${key}`, encodeURIComponent(value));
+    }
+  }
+  return path;
+}
+
+// src/front/ConfigProvider.tsx
+import { jsx as jsx2 } from "react/jsx-runtime";
+var ConfigContext = createContext(null);
+var DEFAULT_BACKOFF_MS = [500, 1e3, 2e3];
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function fetchConfigWithRetry(backoffMs) {
+  const maxRetries = backoffMs.length;
+  let lastError;
+  for (let attempt = 0; attempt <= maxRetries; attempt++) {
+    try {
+      return await apiFetchJson("/api/v1/config");
+    } catch (err) {
+      lastError = err;
+      if (attempt < maxRetries) {
+        await sleep(backoffMs[attempt]);
+      }
+    }
+  }
+  const message = lastError instanceof Error ? lastError.message : "Failed to load config";
+  const requestId = lastError && typeof lastError === "object" && "requestId" in lastError ? lastError.requestId : void 0;
+  throw new ConfigFetchError(message, requestId);
+}
+function ConfigProvider({
+  children,
+  retryBackoff = DEFAULT_BACKOFF_MS
+}) {
+  const [config, setConfig] = useState(null);
+  const [error, setError] = useState(null);
+  const fetchedRef = useRef(false);
+  useEffect(() => {
+    if (fetchedRef.current) return;
+    fetchedRef.current = true;
+    fetchConfigWithRetry(retryBackoff).then(setConfig).catch((err) => {
+      setError(
+        err instanceof ConfigFetchError ? err : new ConfigFetchError(
+          err instanceof Error ? err.message : "Unknown error"
+        )
+      );
+    });
+  }, []);
+  if (error) throw error;
+  if (!config) return null;
+  return /* @__PURE__ */ jsx2(ConfigContext.Provider, { value: config, children });
+}
+function useConfig() {
+  const ctx = useContext(ConfigContext);
+  if (!ctx)
+    throw new Error("useConfig must be used within a ConfigProvider");
+  return ctx;
+}
+function useConfigLoaded() {
+  return useContext(ConfigContext) !== null;
+}
+
+// src/front/ThemeProvider.tsx
+import {
+  createContext as createContext2,
+  useContext as useContext2,
+  useCallback,
+  useEffect as useEffect2,
+  useMemo,
+  useState as useState2
+} from "react";
+import { jsx as jsx3 } from "react/jsx-runtime";
+var ThemeContext = createContext2(null);
+var STORAGE_KEY = "boring-core:theme";
+function getSystemTheme() {
+  if (typeof window === "undefined") return "light";
+  return window.matchMedia("(prefers-color-scheme: dark)").matches ? "dark" : "light";
+}
+function resolveTheme(pref) {
+  return pref === "system" ? getSystemTheme() : pref;
+}
+function applyTheme(theme) {
+  document.documentElement.setAttribute("data-theme", theme);
+  document.documentElement.classList.toggle("dark", theme === "dark");
+}
+function ThemeProvider({ children, defaultTheme = "system" }) {
+  const [preference, setPreference] = useState2(() => {
+    if (typeof window === "undefined") return defaultTheme;
+    try {
+      const stored = localStorage.getItem(STORAGE_KEY);
+      if (stored === "light" || stored === "dark" || stored === "system") return stored;
+    } catch {
+    }
+    return defaultTheme;
+  });
+  const [systemTheme, setSystemTheme] = useState2(getSystemTheme);
+  const resolved = preference === "system" ? systemTheme : preference;
+  useEffect2(() => {
+    applyTheme(resolved);
+    return () => {
+      document.documentElement.removeAttribute("data-theme");
+      document.documentElement.classList.remove("dark");
+    };
+  }, [resolved]);
+  useEffect2(() => {
+    const mql = window.matchMedia("(prefers-color-scheme: dark)");
+    const handler = () => setSystemTheme(getSystemTheme());
+    mql.addEventListener("change", handler);
+    return () => mql.removeEventListener("change", handler);
+  }, []);
+  useEffect2(() => {
+    const handler = (e) => {
+      if (e.key !== STORAGE_KEY) return;
+      const val = e.newValue;
+      if (val === "light" || val === "dark" || val === "system") {
+        setPreference(val);
+      }
+    };
+    window.addEventListener("storage", handler);
+    return () => window.removeEventListener("storage", handler);
+  }, []);
+  const setTheme = useCallback((theme) => {
+    setPreference(theme);
+    try {
+      localStorage.setItem(STORAGE_KEY, theme);
+    } catch {
+    }
+  }, []);
+  const toggleTheme = useCallback(() => {
+    setPreference((prev) => {
+      const next = resolveTheme(prev) === "light" ? "dark" : "light";
+      try {
+        localStorage.setItem(STORAGE_KEY, next);
+      } catch {
+      }
+      return next;
+    });
+  }, []);
+  const value = useMemo(
+    () => ({ theme: resolved, preference, setTheme, toggleTheme }),
+    [resolved, preference, setTheme, toggleTheme]
+  );
+  return /* @__PURE__ */ jsx3(ThemeContext.Provider, { value, children });
+}
+function useTheme() {
+  const ctx = useContext2(ThemeContext);
+  if (!ctx) throw new Error("useTheme must be used within a ThemeProvider");
+  return ctx;
+}
+
+// src/front/hooks/useKeyboardShortcuts.ts
+import { useEffect as useEffect3, useRef as useRef2 } from "react";
+var MAC_PLATFORM_RE = /Mac|iPod|iPhone|iPad/;
+function normalizeKey(key) {
+  const lowered = key.toLowerCase();
+  if (lowered === "space") return " ";
+  if (lowered === "esc") return "escape";
+  return lowered;
+}
+function parseShortcut(shortcut) {
+  const parts = shortcut.split("+").map((part) => part.trim().toLowerCase()).filter(Boolean);
+  if (parts.length === 0) {
+    return {
+      key: "",
+      cmd: false,
+      ctrl: false,
+      meta: false,
+      shift: false,
+      alt: false
+    };
+  }
+  const key = normalizeKey(parts[parts.length - 1] ?? "");
+  const modifiers = parts.slice(0, -1);
+  return {
+    key,
+    cmd: modifiers.includes("cmd"),
+    ctrl: modifiers.includes("ctrl"),
+    meta: modifiers.includes("meta"),
+    shift: modifiers.includes("shift"),
+    alt: modifiers.includes("alt") || modifiers.includes("option")
+  };
+}
+function isMacPlatform() {
+  if (typeof navigator === "undefined") return false;
+  return MAC_PLATFORM_RE.test(navigator.platform);
+}
+function matchesBinding(event, parsed, macPlatform) {
+  const expectedMeta = parsed.meta || parsed.cmd && macPlatform;
+  const expectedCtrl = parsed.ctrl || parsed.cmd && !macPlatform;
+  const expectedShift = parsed.shift;
+  const expectedAlt = parsed.alt;
+  if (event.metaKey !== expectedMeta) return false;
+  if (event.ctrlKey !== expectedCtrl) return false;
+  if (event.shiftKey !== expectedShift) return false;
+  if (event.altKey !== expectedAlt) return false;
+  return normalizeKey(event.key) === parsed.key;
+}
+function useKeyboardShortcuts(bindings) {
+  const bindingsRef = useRef2(bindings);
+  bindingsRef.current = bindings;
+  useEffect3(() => {
+    if (typeof window === "undefined") return;
+    const macPlatform = isMacPlatform();
+    const parsedBindings = bindingsRef.current.map((binding) => ({
+      binding,
+      parsed: parseShortcut(binding.shortcut)
+    }));
+    const onKeyDown = (event) => {
+      for (const { binding, parsed } of parsedBindings) {
+        if (!parsed.key) continue;
+        if (!matchesBinding(event, parsed, macPlatform)) continue;
+        event.preventDefault();
+        binding.handler(event);
+        return;
+      }
+    };
+    window.addEventListener("keydown", onKeyDown);
+    return () => {
+      window.removeEventListener("keydown", onKeyDown);
+    };
+  }, [bindings]);
+}
+
+// src/front/hooks/useViewportBreakpoint.ts
+import { useEffect as useEffect4, useState as useState3 } from "react";
+function getBreakpoint() {
+  if (typeof window === "undefined") return "sm";
+  if (typeof window.matchMedia !== "function") return "sm";
+  if (window.matchMedia("(min-width: 1536px)").matches) return "2xl";
+  if (window.matchMedia("(min-width: 1280px)").matches) return "xl";
+  if (window.matchMedia("(min-width: 1024px)").matches) return "lg";
+  if (window.matchMedia("(min-width: 768px)").matches) return "md";
+  return "sm";
+}
+function useViewportBreakpoint() {
+  const [breakpoint, setBreakpoint] = useState3(getBreakpoint);
+  useEffect4(() => {
+    if (typeof window === "undefined") return;
+    const update = () => {
+      setBreakpoint(getBreakpoint());
+    };
+    update();
+    window.addEventListener("resize", update);
+    return () => {
+      window.removeEventListener("resize", update);
+    };
+  }, []);
+  return breakpoint;
+}
+
+// src/front/hooks/useReducedMotion.ts
+import { useEffect as useEffect5, useState as useState4 } from "react";
+var QUERY = "(prefers-reduced-motion: reduce)";
+function prefersReducedMotion() {
+  if (typeof window === "undefined") return false;
+  if (typeof window.matchMedia !== "function") return false;
+  return window.matchMedia(QUERY).matches;
+}
+function useReducedMotion() {
+  const [reducedMotion, setReducedMotion] = useState4(prefersReducedMotion);
+  useEffect5(() => {
+    if (typeof window === "undefined" || typeof window.matchMedia !== "function") return;
+    const media = window.matchMedia(QUERY);
+    const update = (event) => {
+      setReducedMotion(event?.matches ?? media.matches);
+    };
+    update();
+    if (typeof media.addEventListener === "function") {
+      media.addEventListener("change", update);
+      return () => media.removeEventListener("change", update);
+    }
+    if (typeof media.addListener === "function") {
+      media.addListener(update);
+      return () => media.removeListener(update);
+    }
+  }, []);
+  return reducedMotion;
+}
+
+// src/front/hooks/useBlobUrl.ts
+import { useEffect as useEffect6, useState as useState5 } from "react";
+function useBlobUrl(blob) {
+  const [blobUrl, setBlobUrl] = useState5(null);
+  useEffect6(() => {
+    if (!blob) {
+      setBlobUrl(null);
+      return;
+    }
+    const nextUrl = URL.createObjectURL(blob);
+    setBlobUrl(nextUrl);
+    return () => {
+      URL.revokeObjectURL(nextUrl);
+    };
+  }, [blob]);
+  return blobUrl;
+}
+
+// src/front/hooks/useCapabilities.ts
+import { useSuspenseQuery } from "@tanstack/react-query";
+var CAPABILITIES_QUERY_KEY = ["capabilities"];
+function useCapabilities() {
+  const query = useSuspenseQuery({
+    queryKey: CAPABILITIES_QUERY_KEY,
+    queryFn: async () => apiFetchJson("/api/v1/capabilities")
+  });
+  return query.data;
+}
+
+// src/front/hooks/useWorkspaceMembers.ts
+import { useQuery } from "@tanstack/react-query";
+function useWorkspaceMembers(workspaceId) {
+  return useQuery({
+    queryKey: ["members", workspaceId],
+    queryFn: async () => {
+      const data = await apiFetchJson(
+        `/api/v1/workspaces/${encodeURIComponent(workspaceId)}/members`
+      );
+      return data.members;
+    },
+    enabled: workspaceId.length > 0
+  });
+}
+
+// src/front/WorkspaceAuthProvider.tsx
+import { createContext as createContext3, useContext as useContext3 } from "react";
+import { useQuery as useQuery2, useQueryClient } from "@tanstack/react-query";
+import { matchPath, useLocation, useParams } from "react-router-dom";
+import { jsx as jsx4 } from "react/jsx-runtime";
+var WorkspaceContext = createContext3({
+  workspace: null,
+  role: null
+});
+var WORKSPACES_QUERY_KEY = ["workspaces"];
+function workspaceQueryKey(workspaceId) {
+  return ["workspace", workspaceId ?? null];
+}
+async function fetchWorkspaces() {
+  const data = await apiFetchJson("/api/v1/workspaces");
+  return data.workspaces;
+}
+async function fetchWorkspace(workspaceId) {
+  return await apiFetchJson(
+    `/api/v1/workspaces/${encodeURIComponent(workspaceId)}`
+  );
+}
+function workspaceIdFromPath(pathname) {
+  const match = matchPath("/w/:id/*", pathname) ?? matchPath("/w/:id", pathname) ?? matchPath("/workspace/:id/*", pathname) ?? matchPath("/workspace/:id", pathname);
+  const id = match?.params.id?.trim();
+  return id ? id : null;
+}
+function WorkspaceAuthProvider({ children }) {
+  const { id } = useParams();
+  const location = useLocation();
+  const queryClient = useQueryClient();
+  const routeWorkspaceId = id?.trim() ? id : workspaceIdFromPath(location.pathname);
+  const workspacesQuery = useQuery2({
+    queryKey: WORKSPACES_QUERY_KEY,
+    queryFn: fetchWorkspaces
+  });
+  const defaultWorkspace = routeWorkspaceId === null ? workspacesQuery.data?.find((workspace2) => workspace2.isDefault) ?? workspacesQuery.data?.[0] ?? null : null;
+  const resolvedId = routeWorkspaceId ?? defaultWorkspace?.id ?? null;
+  const cachedDetail = resolvedId ? queryClient.getQueryData(workspaceQueryKey(resolvedId)) : void 0;
+  const detailQuery = useQuery2({
+    queryKey: workspaceQueryKey(resolvedId),
+    queryFn: () => {
+      if (!resolvedId) {
+        throw new Error("Workspace id is required");
+      }
+      return fetchWorkspace(resolvedId);
+    },
+    enabled: resolvedId !== null
+  });
+  const detail = detailQuery.data ?? cachedDetail ?? null;
+  const workspace = detailQuery.isError ? null : detail?.workspace ?? null;
+  const role = detailQuery.isError ? null : detail?.role ?? null;
+  return /* @__PURE__ */ jsx4(WorkspaceContext.Provider, { value: { workspace, role }, children });
+}
+function useCurrentWorkspace() {
+  return useContext3(WorkspaceContext).workspace;
+}
+function useWorkspaceRole() {
+  return useContext3(WorkspaceContext).role;
+}
+
+// src/front/auth/AuthProvider.tsx
+import { createContext as createContext4, useContext as useContext4, useCallback as useCallback2, useMemo as useMemo2 } from "react";
+
+// src/front/auth/authClient.ts
+import { createAuthClient } from "better-auth/react";
+import { magicLinkClient } from "better-auth/client/plugins";
+function createBetterAuthClient(baseURL) {
+  return createAuthClient({
+    baseURL,
+    basePath: "/auth",
+    plugins: [magicLinkClient()]
+  });
+}
+var singleton = null;
+var singletonBase = "";
+function getAuthClient(baseURL) {
+  const base = baseURL ?? getApiBase();
+  if (singleton && singletonBase === base) return singleton;
+  singleton = createBetterAuthClient(base);
+  singletonBase = base;
+  return singleton;
+}
+
+// src/front/auth/AuthProvider.tsx
+import { jsx as jsx5 } from "react/jsx-runtime";
+var AuthContext = createContext4(null);
+function toISOString(value) {
+  if (!value) return "";
+  if (value instanceof Date) return value.toISOString();
+  return value;
+}
+function normalizeUser(raw) {
+  return {
+    id: raw.id,
+    email: raw.email,
+    name: raw.name ?? null,
+    emailVerified: Boolean(raw.emailVerified),
+    image: raw.image ?? null,
+    createdAt: toISOString(raw.createdAt),
+    updatedAt: toISOString(raw.updatedAt)
+  };
+}
+function AuthProvider({
+  children,
+  baseURL,
+  queryClient,
+  navigate
+}) {
+  const client = useMemo2(() => getAuthClient(baseURL), [baseURL]);
+  const signOut = useCallback2(async () => {
+    await client.signOut();
+    queryClient?.clear();
+    navigate?.(routes.signin);
+  }, [client, queryClient, navigate]);
+  const value = useMemo2(
+    () => ({ client, signOut }),
+    [client, signOut]
+  );
+  return /* @__PURE__ */ jsx5(AuthContext.Provider, { value, children });
+}
+function useAuthContext() {
+  const ctx = useContext4(AuthContext);
+  if (!ctx) throw new Error("useSession/signIn/signOut must be used within an AuthProvider");
+  return ctx;
+}
+function useSession() {
+  const { client } = useAuthContext();
+  const session = client.useSession();
+  const raw = session.data;
+  const rawUser = raw?.user;
+  const rawSession = raw?.session;
+  return {
+    data: rawUser ? {
+      user: normalizeUser(rawUser),
+      expiresAt: toISOString(rawSession?.expiresAt)
+    } : null,
+    isPending: session.isPending,
+    error: session.error ? { status: session.error.status ?? 0, code: "unauthorized", message: session.error.message ?? "Session error" } : null
+  };
+}
+function useSignIn() {
+  const { client } = useAuthContext();
+  return client.signIn;
+}
+function useSignUp() {
+  const { client } = useAuthContext();
+  return client.signUp;
+}
+function useForgetPassword() {
+  const { client } = useAuthContext();
+  return client.forgetPassword;
+}
+function useResetPassword() {
+  const { client } = useAuthContext();
+  return client.resetPassword;
+}
+function useVerifyEmail() {
+  const { client } = useAuthContext();
+  return client.verifyEmail;
+}
+function useSendVerificationEmail() {
+  const { client } = useAuthContext();
+  return client.sendVerificationEmail;
+}
+function useChangePassword() {
+  const { client } = useAuthContext();
+  return client.changePassword;
+}
+function useSignOut() {
+  const { signOut } = useAuthContext();
+  return signOut;
+}
+
+// src/front/auth/UserIdentityProvider.tsx
+import { createContext as createContext5, useContext as useContext5, useEffect as useEffect7, useState as useState6, useRef as useRef3 } from "react";
+import { jsx as jsx6 } from "react/jsx-runtime";
+var UserContext = createContext5(null);
+var STALE_MS = 6e4;
+function UserIdentityProvider({ children }) {
+  const { data: session } = useSession();
+  const [identity, setIdentity] = useState6(null);
+  const fetchedForRef = useRef3(null);
+  const lastFetchRef = useRef3(0);
+  useEffect7(() => {
+    if (!session?.user) {
+      setIdentity(null);
+      fetchedForRef.current = null;
+      return;
+    }
+    const userId = session.user.id;
+    const now = Date.now();
+    if (fetchedForRef.current === userId && now - lastFetchRef.current < STALE_MS) {
+      return;
+    }
+    let cancelled = false;
+    apiFetchJson("/api/v1/me").then((data) => {
+      if (cancelled) return;
+      setIdentity({ user: data.user, settings: data.settings });
+      fetchedForRef.current = userId;
+      lastFetchRef.current = Date.now();
+    }).catch(() => {
+      if (cancelled) return;
+      setIdentity(null);
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [session?.user?.id]);
+  return /* @__PURE__ */ jsx6(UserContext.Provider, { value: identity, children });
+}
+function useUser() {
+  return useContext5(UserContext);
+}
+
+// src/front/auth/SignInPage.tsx
+import { useState as useState7 } from "react";
+import { useForm } from "react-hook-form";
+import { zodResolver } from "@hookform/resolvers/zod";
+import { z } from "zod";
+import { Button as Button2, Card, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Input, Label } from "@hachej/boring-ui-kit";
+import { jsx as jsx7, jsxs } from "react/jsx-runtime";
+var signInSchema = z.object({
+  email: z.string().email("Please enter a valid email"),
+  password: z.string().min(1, "Password is required")
+});
+function SignInPage() {
+  const signIn = useSignIn();
+  const [serverError, setServerError] = useState7(null);
+  const [isSubmitting, setIsSubmitting] = useState7(false);
+  const {
+    register,
+    handleSubmit,
+    formState: { errors }
+  } = useForm({
+    resolver: zodResolver(signInSchema)
+  });
+  async function onSubmit(data) {
+    setServerError(null);
+    setIsSubmitting(true);
+    try {
+      const result = await signIn.email({
+        email: data.email,
+        password: data.password
+      });
+      if (result.error) {
+        setServerError(result.error.message ?? "Sign in failed");
+      }
+    } catch (err) {
+      setServerError(err instanceof Error ? err.message : "Sign in failed");
+    } finally {
+      setIsSubmitting(false);
+    }
+  }
+  return /* @__PURE__ */ jsx7("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs(Card, { className: "w-full max-w-sm", children: [
+    /* @__PURE__ */ jsxs(CardHeader, { children: [
+      /* @__PURE__ */ jsx7(CardTitle, { children: "Sign in" }),
+      /* @__PURE__ */ jsx7(CardDescription, { children: "Enter your credentials to continue" })
+    ] }),
+    /* @__PURE__ */ jsxs("form", { onSubmit: handleSubmit(onSubmit), noValidate: true, children: [
+      /* @__PURE__ */ jsxs(CardContent, { className: "space-y-4", children: [
+        serverError && /* @__PURE__ */ jsx7("div", { role: "alert", className: "text-sm text-destructive", children: serverError }),
+        /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
+          /* @__PURE__ */ jsx7(Label, { htmlFor: "email", children: "Email" }),
+          /* @__PURE__ */ jsx7(
+            Input,
+            {
+              id: "email",
+              type: "email",
+              autoComplete: "email",
+              placeholder: "you@example.com",
+              ...register("email")
+            }
+          ),
+          errors.email && /* @__PURE__ */ jsx7("p", { className: "text-sm text-destructive", children: errors.email.message })
+        ] }),
+        /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
+          /* @__PURE__ */ jsx7(Label, { htmlFor: "password", children: "Password" }),
+          /* @__PURE__ */ jsx7(
+            Input,
+            {
+              id: "password",
+              type: "password",
+              autoComplete: "current-password",
+              ...register("password")
+            }
+          ),
+          errors.password && /* @__PURE__ */ jsx7("p", { className: "text-sm text-destructive", children: errors.password.message })
+        ] })
+      ] }),
+      /* @__PURE__ */ jsxs(CardFooter, { className: "flex flex-col gap-4", children: [
+        /* @__PURE__ */ jsx7(Button2, { type: "submit", className: "w-full", disabled: isSubmitting, children: isSubmitting ? "Signing in\u2026" : "Sign in" }),
+        /* @__PURE__ */ jsxs("div", { className: "flex justify-between text-sm w-full", children: [
+          /* @__PURE__ */ jsx7("a", { href: routes.forgotPassword, className: "text-muted-foreground hover:underline", children: "Forgot password?" }),
+          /* @__PURE__ */ jsx7("a", { href: routes.signup, className: "text-muted-foreground hover:underline", children: "Sign up" })
+        ] })
+      ] })
+    ] })
+  ] }) });
+}
+
+// src/front/auth/SignUpPage.tsx
+import { useState as useState8 } from "react";
+import { useForm as useForm2 } from "react-hook-form";
+import { zodResolver as zodResolver2 } from "@hookform/resolvers/zod";
+import { z as z2 } from "zod";
+import { Button as Button3, Card as Card2, CardContent as CardContent2, CardDescription as CardDescription2, CardFooter as CardFooter2, CardHeader as CardHeader2, CardTitle as CardTitle2, Input as Input2, Label as Label2 } from "@hachej/boring-ui-kit";
+import { jsx as jsx8, jsxs as jsxs2 } from "react/jsx-runtime";
+var signUpSchema = z2.object({
+  name: z2.string().min(1, "Name is required"),
+  email: z2.string().email("Please enter a valid email"),
+  password: z2.string().min(8, "Password must be at least 8 characters")
+});
+function SignUpPage() {
+  const signUp = useSignUp();
+  const [serverError, setServerError] = useState8(null);
+  const [isSubmitting, setIsSubmitting] = useState8(false);
+  const [success, setSuccess] = useState8(false);
+  const inviteToken = typeof window !== "undefined" ? new URLSearchParams(window.location.search).get("invite_token") : null;
+  const {
+    register,
+    handleSubmit,
+    formState: { errors }
+  } = useForm2({
+    resolver: zodResolver2(signUpSchema)
+  });
+  async function onSubmit(data) {
+    setServerError(null);
+    setIsSubmitting(true);
+    try {
+      const fetchOptions = inviteToken ? { headers: { "x-invite-token": inviteToken } } : void 0;
+      const result = await signUp.email(
+        { email: data.email, password: data.password, name: data.name },
+        fetchOptions
+      );
+      if (result.error) {
+        setServerError(result.error.message ?? "Sign up failed");
+      } else {
+        setSuccess(true);
+      }
+    } catch (err) {
+      setServerError(err instanceof Error ? err.message : "Sign up failed");
+    } finally {
+      setIsSubmitting(false);
+    }
+  }
+  if (success) {
+    return /* @__PURE__ */ jsx8("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs2(Card2, { className: "w-full max-w-sm", children: [
+      /* @__PURE__ */ jsxs2(CardHeader2, { children: [
+        /* @__PURE__ */ jsx8(CardTitle2, { children: "Check your email" }),
+        /* @__PURE__ */ jsx8(CardDescription2, { children: "We sent a verification link to your email address. Please check your inbox to continue." })
+      ] }),
+      /* @__PURE__ */ jsx8(CardFooter2, { children: /* @__PURE__ */ jsx8("a", { href: routes.signin, className: "text-sm text-muted-foreground hover:underline", children: "Back to sign in" }) })
+    ] }) });
+  }
+  return /* @__PURE__ */ jsx8("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs2(Card2, { className: "w-full max-w-sm", children: [
+    /* @__PURE__ */ jsxs2(CardHeader2, { children: [
+      /* @__PURE__ */ jsx8(CardTitle2, { children: "Create an account" }),
+      /* @__PURE__ */ jsx8(CardDescription2, { children: "Enter your details to get started" })
+    ] }),
+    /* @__PURE__ */ jsxs2("form", { onSubmit: handleSubmit(onSubmit), noValidate: true, children: [
+      /* @__PURE__ */ jsxs2(CardContent2, { className: "space-y-4", children: [
+        serverError && /* @__PURE__ */ jsx8("div", { role: "alert", className: "text-sm text-destructive", children: serverError }),
+        /* @__PURE__ */ jsxs2("div", { className: "space-y-2", children: [
+          /* @__PURE__ */ jsx8(Label2, { htmlFor: "name", children: "Name" }),
+          /* @__PURE__ */ jsx8(
+            Input2,
+            {
+              id: "name",
+              type: "text",
+              autoComplete: "name",
+              placeholder: "Your name",
+              ...register("name")
+            }
+          ),
+          errors.name && /* @__PURE__ */ jsx8("p", { className: "text-sm text-destructive", children: errors.name.message })
+        ] }),
+        /* @__PURE__ */ jsxs2("div", { className: "space-y-2", children: [
+          /* @__PURE__ */ jsx8(Label2, { htmlFor: "email", children: "Email" }),
+          /* @__PURE__ */ jsx8(
+            Input2,
+            {
+              id: "email",
+              type: "email",
+              autoComplete: "email",
+              placeholder: "you@example.com",
+              ...register("email")
+            }
+          ),
+          errors.email && /* @__PURE__ */ jsx8("p", { className: "text-sm text-destructive", children: errors.email.message })
+        ] }),
+        /* @__PURE__ */ jsxs2("div", { className: "space-y-2", children: [
+          /* @__PURE__ */ jsx8(Label2, { htmlFor: "password", children: "Password" }),
+          /* @__PURE__ */ jsx8(
+            Input2,
+            {
+              id: "password",
+              type: "password",
+              autoComplete: "new-password",
+              placeholder: "At least 8 characters",
+              ...register("password")
+            }
+          ),
+          errors.password && /* @__PURE__ */ jsx8("p", { className: "text-sm text-destructive", children: errors.password.message })
+        ] })
+      ] }),
+      /* @__PURE__ */ jsxs2(CardFooter2, { className: "flex flex-col gap-4", children: [
+        /* @__PURE__ */ jsx8(Button3, { type: "submit", className: "w-full", disabled: isSubmitting, children: isSubmitting ? "Creating account\u2026" : "Sign up" }),
+        /* @__PURE__ */ jsxs2("div", { className: "text-sm text-center", children: [
+          /* @__PURE__ */ jsx8("span", { className: "text-muted-foreground", children: "Already have an account? " }),
+          /* @__PURE__ */ jsx8("a", { href: routes.signin, className: "hover:underline", children: "Sign in" })
+        ] })
+      ] })
+    ] })
+  ] }) });
+}
+
+// src/front/auth/ForgotPasswordPage.tsx
+import { useState as useState9 } from "react";
+import { useForm as useForm3 } from "react-hook-form";
+import { zodResolver as zodResolver3 } from "@hookform/resolvers/zod";
+import { z as z3 } from "zod";
+import { Button as Button4, Card as Card3, CardContent as CardContent3, CardDescription as CardDescription3, CardFooter as CardFooter3, CardHeader as CardHeader3, CardTitle as CardTitle3, Input as Input3, Label as Label3 } from "@hachej/boring-ui-kit";
+import { jsx as jsx9, jsxs as jsxs3 } from "react/jsx-runtime";
+var forgotSchema = z3.object({
+  email: z3.string().email("Please enter a valid email")
+});
+function ForgotPasswordPage() {
+  const forgetPassword = useForgetPassword();
+  const [isSubmitting, setIsSubmitting] = useState9(false);
+  const [submitted, setSubmitted] = useState9(false);
+  const {
+    register,
+    handleSubmit,
+    formState: { errors }
+  } = useForm3({
+    resolver: zodResolver3(forgotSchema)
+  });
+  async function onSubmit(data) {
+    setIsSubmitting(true);
+    try {
+      await forgetPassword({ email: data.email, redirectTo: routes.resetPassword });
+    } catch {
+    } finally {
+      setIsSubmitting(false);
+      setSubmitted(true);
+    }
+  }
+  if (submitted) {
+    return /* @__PURE__ */ jsx9("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs3(Card3, { className: "w-full max-w-sm", children: [
+      /* @__PURE__ */ jsxs3(CardHeader3, { children: [
+        /* @__PURE__ */ jsx9(CardTitle3, { children: "Check your inbox" }),
+        /* @__PURE__ */ jsx9(CardDescription3, { children: "If an account exists with that email, we sent a password reset link. Check your inbox and follow the instructions." })
+      ] }),
+      /* @__PURE__ */ jsx9(CardFooter3, { children: /* @__PURE__ */ jsx9("a", { href: routes.signin, className: "text-sm text-muted-foreground hover:underline", children: "Back to sign in" }) })
+    ] }) });
+  }
+  return /* @__PURE__ */ jsx9("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs3(Card3, { className: "w-full max-w-sm", children: [
+    /* @__PURE__ */ jsxs3(CardHeader3, { children: [
+      /* @__PURE__ */ jsx9(CardTitle3, { children: "Forgot password" }),
+      /* @__PURE__ */ jsx9(CardDescription3, { children: "Enter your email and we'll send you a reset link" })
+    ] }),
+    /* @__PURE__ */ jsxs3("form", { onSubmit: handleSubmit(onSubmit), noValidate: true, children: [
+      /* @__PURE__ */ jsx9(CardContent3, { className: "space-y-4", children: /* @__PURE__ */ jsxs3("div", { className: "space-y-2", children: [
+        /* @__PURE__ */ jsx9(Label3, { htmlFor: "email", children: "Email" }),
+        /* @__PURE__ */ jsx9(
+          Input3,
+          {
+            id: "email",
+            type: "email",
+            autoComplete: "email",
+            placeholder: "you@example.com",
+            ...register("email")
+          }
+        ),
+        errors.email && /* @__PURE__ */ jsx9("p", { className: "text-sm text-destructive", children: errors.email.message })
+      ] }) }),
+      /* @__PURE__ */ jsxs3(CardFooter3, { className: "flex flex-col gap-4", children: [
+        /* @__PURE__ */ jsx9(Button4, { type: "submit", className: "w-full", disabled: isSubmitting, children: isSubmitting ? "Sending\u2026" : "Send reset link" }),
+        /* @__PURE__ */ jsx9("a", { href: routes.signin, className: "text-sm text-muted-foreground hover:underline", children: "Back to sign in" })
+      ] })
+    ] })
+  ] }) });
+}
+
+// src/front/auth/ResetPasswordPage.tsx
+import { useState as useState10 } from "react";
+import { useForm as useForm4 } from "react-hook-form";
+import { zodResolver as zodResolver4 } from "@hookform/resolvers/zod";
+import { z as z4 } from "zod";
+import { Button as Button5, Card as Card4, CardContent as CardContent4, CardDescription as CardDescription4, CardFooter as CardFooter4, CardHeader as CardHeader4, CardTitle as CardTitle4, Input as Input4, Label as Label4 } from "@hachej/boring-ui-kit";
+import { jsx as jsx10, jsxs as jsxs4 } from "react/jsx-runtime";
+var resetSchema = z4.object({
+  password: z4.string().min(8, "Password must be at least 8 characters"),
+  confirmPassword: z4.string()
+}).refine((data) => data.password === data.confirmPassword, {
+  message: "Passwords do not match",
+  path: ["confirmPassword"]
+});
+function ResetPasswordPage() {
+  const resetPassword = useResetPassword();
+  const [serverError, setServerError] = useState10(null);
+  const [isSubmitting, setIsSubmitting] = useState10(false);
+  const [expired, setExpired] = useState10(false);
+  const token = typeof window !== "undefined" ? new URLSearchParams(window.location.search).get("token") : null;
+  const {
+    register,
+    handleSubmit,
+    formState: { errors }
+  } = useForm4({
+    resolver: zodResolver4(resetSchema)
+  });
+  async function onSubmit(data) {
+    if (!token) {
+      setExpired(true);
+      return;
+    }
+    setServerError(null);
+    setIsSubmitting(true);
+    try {
+      const result = await resetPassword({ token, newPassword: data.password });
+      if (result.error) {
+        const status = result.error.status;
+        if (status === 410 || status === 400) {
+          const msg = result.error.message?.toLowerCase() ?? "";
+          if (msg.includes("expired") || msg.includes("invalid") || status === 410) {
+            setExpired(true);
+            return;
+          }
+        }
+        setServerError(result.error.message ?? "Reset failed");
+      } else {
+        window.location.assign(routes.signin);
+      }
+    } catch (err) {
+      setServerError(err instanceof Error ? err.message : "Reset failed");
+    } finally {
+      setIsSubmitting(false);
+    }
+  }
+  if (!token || expired) {
+    return /* @__PURE__ */ jsx10("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs4(Card4, { className: "w-full max-w-sm", children: [
+      /* @__PURE__ */ jsxs4(CardHeader4, { children: [
+        /* @__PURE__ */ jsx10(CardTitle4, { children: "Link expired" }),
+        /* @__PURE__ */ jsx10(CardDescription4, { children: "This reset link is no longer valid. Please request a new one." })
+      ] }),
+      /* @__PURE__ */ jsx10(CardFooter4, { children: /* @__PURE__ */ jsx10("a", { href: routes.forgotPassword, children: /* @__PURE__ */ jsx10(Button5, { variant: "outline", children: "Request new link" }) }) })
+    ] }) });
+  }
+  return /* @__PURE__ */ jsx10("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs4(Card4, { className: "w-full max-w-sm", children: [
+    /* @__PURE__ */ jsxs4(CardHeader4, { children: [
+      /* @__PURE__ */ jsx10(CardTitle4, { children: "Reset password" }),
+      /* @__PURE__ */ jsx10(CardDescription4, { children: "Enter your new password below" })
+    ] }),
+    /* @__PURE__ */ jsxs4("form", { onSubmit: handleSubmit(onSubmit), noValidate: true, children: [
+      /* @__PURE__ */ jsxs4(CardContent4, { className: "space-y-4", children: [
+        serverError && /* @__PURE__ */ jsx10("div", { role: "alert", className: "text-sm text-destructive", children: serverError }),
+        /* @__PURE__ */ jsxs4("div", { className: "space-y-2", children: [
+          /* @__PURE__ */ jsx10(Label4, { htmlFor: "password", children: "New password" }),
+          /* @__PURE__ */ jsx10(
+            Input4,
+            {
+              id: "password",
+              type: "password",
+              autoComplete: "new-password",
+              placeholder: "At least 8 characters",
+              ...register("password")
+            }
+          ),
+          errors.password && /* @__PURE__ */ jsx10("p", { className: "text-sm text-destructive", children: errors.password.message })
+        ] }),
+        /* @__PURE__ */ jsxs4("div", { className: "space-y-2", children: [
+          /* @__PURE__ */ jsx10(Label4, { htmlFor: "confirmPassword", children: "Confirm password" }),
+          /* @__PURE__ */ jsx10(
+            Input4,
+            {
+              id: "confirmPassword",
+              type: "password",
+              autoComplete: "new-password",
+              ...register("confirmPassword")
+            }
+          ),
+          errors.confirmPassword && /* @__PURE__ */ jsx10("p", { className: "text-sm text-destructive", children: errors.confirmPassword.message })
+        ] })
+      ] }),
+      /* @__PURE__ */ jsx10(CardFooter4, { children: /* @__PURE__ */ jsx10(Button5, { type: "submit", className: "w-full", disabled: isSubmitting, children: isSubmitting ? "Resetting\u2026" : "Reset password" }) })
+    ] })
+  ] }) });
+}
+
+// src/front/auth/VerifyEmailPage.tsx
+import { useCallback as useCallback3, useEffect as useEffect8, useRef as useRef4, useState as useState11 } from "react";
+import { Button as Button6, Card as Card5, CardContent as CardContent5, CardDescription as CardDescription5, CardFooter as CardFooter5, CardHeader as CardHeader5, CardTitle as CardTitle5, Input as Input5, Label as Label5 } from "@hachej/boring-ui-kit";
+import { jsx as jsx11, jsxs as jsxs5 } from "react/jsx-runtime";
+function getCookie(name) {
+  const match = document.cookie.match(new RegExp(`(?:^|; )${name}=([^;]*)`));
+  return match ? decodeURIComponent(match[1]) : null;
+}
+function deleteCookie(name) {
+  document.cookie = `${name}=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT`;
+}
+function VerifyEmailPage() {
+  const session = useSession();
+  const verifyEmail = useVerifyEmail();
+  const sendVerificationEmail = useSendVerificationEmail();
+  const token = typeof window !== "undefined" ? new URLSearchParams(window.location.search).get("token") : null;
+  const [status, setStatus] = useState11(token ? "verifying" : "no-token");
+  const [inviteWarning, setInviteWarning] = useState11(null);
+  const [cooldown, setCooldown] = useState11(0);
+  const [resendEmail, setResendEmail] = useState11("");
+  const [resendSent, setResendSent] = useState11(false);
+  const verifiedRef = useRef4(false);
+  const sessionEmail = session.data?.user?.email ?? null;
+  useEffect8(() => {
+    const cookie = getCookie("boring_invite_failed");
+    if (cookie) {
+      setInviteWarning(cookie || "Your invite link was invalid; you\u2019re signed in.");
+      deleteCookie("boring_invite_failed");
+    }
+  }, []);
+  useEffect8(() => {
+    if (!token || verifiedRef.current) return;
+    verifiedRef.current = true;
+    (async () => {
+      try {
+        const result = await verifyEmail({ query: { token } });
+        if (result.error) {
+          const s = result.error.status;
+          const msg = (result.error.message ?? "").toLowerCase();
+          if (s === 410 || msg.includes("expired")) {
+            setStatus("expired");
+          } else {
+            setStatus("invalid");
+          }
+        } else {
+          setStatus("verified");
+        }
+      } catch {
+        setStatus("invalid");
+      }
+    })();
+  }, [token, verifyEmail]);
+  useEffect8(() => {
+    if (cooldown <= 0) return;
+    const id = setInterval(() => {
+      setCooldown((c) => {
+        if (c <= 1) {
+          clearInterval(id);
+          return 0;
+        }
+        return c - 1;
+      });
+    }, 1e3);
+    return () => clearInterval(id);
+  }, [cooldown > 0]);
+  const handleResend = useCallback3(async () => {
+    const email = sessionEmail ?? resendEmail.trim();
+    if (!email || cooldown > 0) return;
+    try {
+      await sendVerificationEmail({ email, callbackURL: routes.verifyEmail });
+    } catch {
+    }
+    setResendSent(true);
+    setCooldown(60);
+  }, [sessionEmail, resendEmail, cooldown, sendVerificationEmail]);
+  const resendButton = /* @__PURE__ */ jsx11(
+    Button6,
+    {
+      variant: "outline",
+      className: "w-full",
+      disabled: cooldown > 0 || !sessionEmail && !resendEmail.trim(),
+      onClick: handleResend,
+      children: cooldown > 0 ? `Resend in ${cooldown}s` : "Resend verification email"
+    }
+  );
+  const resendSection = /* @__PURE__ */ jsxs5("div", { className: "space-y-3", children: [
+    !sessionEmail && /* @__PURE__ */ jsxs5("div", { className: "space-y-2", children: [
+      /* @__PURE__ */ jsx11(Label5, { htmlFor: "resend-email", children: "Email" }),
+      /* @__PURE__ */ jsx11(
+        Input5,
+        {
+          id: "resend-email",
+          type: "email",
+          placeholder: "you@example.com",
+          value: resendEmail,
+          onChange: (e) => setResendEmail(e.target.value)
+        }
+      )
+    ] }),
+    resendButton,
+    resendSent && /* @__PURE__ */ jsx11("p", { className: "text-sm text-muted-foreground text-center", children: "If an account exists with that email, we sent a new verification link." })
+  ] });
+  if (status === "verifying") {
+    return /* @__PURE__ */ jsx11("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsx11(Card5, { className: "w-full max-w-sm", children: /* @__PURE__ */ jsxs5(CardHeader5, { children: [
+      /* @__PURE__ */ jsx11(CardTitle5, { children: "Verifying your email" }),
+      /* @__PURE__ */ jsx11(CardDescription5, { children: "Please wait\u2026" })
+    ] }) }) });
+  }
+  if (status === "verified") {
+    return /* @__PURE__ */ jsx11("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs5(Card5, { className: "w-full max-w-sm", children: [
+      inviteWarning && /* @__PURE__ */ jsx11("div", { role: "status", className: "px-6 pt-4", children: /* @__PURE__ */ jsx11("div", { className: "rounded-md bg-muted px-3 py-2 text-sm text-muted-foreground", children: inviteWarning }) }),
+      /* @__PURE__ */ jsxs5(CardHeader5, { children: [
+        /* @__PURE__ */ jsx11(CardTitle5, { children: "Email verified" }),
+        /* @__PURE__ */ jsx11(CardDescription5, { children: "Your email has been verified. You can now continue." })
+      ] }),
+      /* @__PURE__ */ jsx11(CardFooter5, { children: /* @__PURE__ */ jsx11("a", { href: "/", className: "w-full", children: /* @__PURE__ */ jsx11(Button6, { className: "w-full", children: "Continue" }) }) })
+    ] }) });
+  }
+  if (status === "expired") {
+    return /* @__PURE__ */ jsx11("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs5(Card5, { className: "w-full max-w-sm", children: [
+      inviteWarning && /* @__PURE__ */ jsx11("div", { role: "status", className: "px-6 pt-4", children: /* @__PURE__ */ jsx11("div", { className: "rounded-md bg-muted px-3 py-2 text-sm text-muted-foreground", children: inviteWarning }) }),
+      /* @__PURE__ */ jsxs5(CardHeader5, { children: [
+        /* @__PURE__ */ jsx11(CardTitle5, { children: "Link expired" }),
+        /* @__PURE__ */ jsx11(CardDescription5, { children: "This verification link is no longer valid. Request a new one below." })
+      ] }),
+      /* @__PURE__ */ jsx11(CardContent5, { children: resendSection }),
+      /* @__PURE__ */ jsx11(CardFooter5, { children: /* @__PURE__ */ jsx11("a", { href: routes.signin, className: "text-sm text-muted-foreground hover:underline", children: "Back to sign in" }) })
+    ] }) });
+  }
+  return /* @__PURE__ */ jsx11("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs5(Card5, { className: "w-full max-w-sm", children: [
+    inviteWarning && /* @__PURE__ */ jsx11("div", { role: "status", className: "px-6 pt-4", children: /* @__PURE__ */ jsx11("div", { className: "rounded-md bg-muted px-3 py-2 text-sm text-muted-foreground", children: inviteWarning }) }),
+    /* @__PURE__ */ jsxs5(CardHeader5, { children: [
+      /* @__PURE__ */ jsx11(CardTitle5, { children: "Invalid verification link" }),
+      /* @__PURE__ */ jsx11(CardDescription5, { children: status === "no-token" ? "No verification token found. Check the link in your email." : "This verification link is invalid. Request a new one below." })
+    ] }),
+    /* @__PURE__ */ jsx11(CardContent5, { children: resendSection }),
+    /* @__PURE__ */ jsx11(CardFooter5, { children: /* @__PURE__ */ jsx11("a", { href: routes.signin, className: "text-sm text-muted-foreground hover:underline", children: "Back to sign in" }) })
+  ] }) });
+}
+
+// src/front/auth/UserSettingsPage.tsx
+import { useCallback as useCallback4, useState as useState12 } from "react";
+import { useForm as useForm5 } from "react-hook-form";
+import { zodResolver as zodResolver5 } from "@hookform/resolvers/zod";
+import { z as z5 } from "zod";
+import {
+  AlertDialog,
+  AlertDialogCancel,
+  AlertDialogContent,
+  AlertDialogDescription,
+  AlertDialogFooter,
+  AlertDialogHeader,
+  AlertDialogTitle,
+  AlertDialogTrigger,
+  Button as Button7,
+  DetailLine as UiDetailLine,
+  DetailList,
+  Input as Input6,
+  Label as Label6,
+  Notice,
+  SettingsActionRow as UiSettingsActionRow,
+  SettingsNav as UiSettingsNav,
+  SettingsPanel as UiSettingsPanel
+} from "@hachej/boring-ui-kit";
+import {
+  CalendarDays,
+  CheckCircle2,
+  KeyRound,
+  Mail,
+  ShieldAlert,
+  Trash2,
+  UserRound
+} from "lucide-react";
+import { jsx as jsx12, jsxs as jsxs6 } from "react/jsx-runtime";
+var changePasswordSchema = z5.object({
+  currentPassword: z5.string().min(1, "Current password is required"),
+  newPassword: z5.string().min(8, "Password must be at least 8 characters"),
+  confirmPassword: z5.string()
+}).refine((data) => data.newPassword === data.confirmPassword, {
+  message: "Passwords do not match",
+  path: ["confirmPassword"]
+});
+function initialsFor(name, email) {
+  const source = name?.trim() ? name : email;
+  return source.trim().split(/\s+/).slice(0, 2).map((part) => part[0]?.toUpperCase() ?? "").join("");
+}
+function formatMemberSince(value) {
+  const date = new Date(value);
+  if (Number.isNaN(date.getTime())) return "Unknown";
+  return date.toLocaleDateString(void 0, {
+    year: "numeric",
+    month: "long",
+    day: "numeric"
+  });
+}
+function SettingsTopBar() {
+  return /* @__PURE__ */ jsx12(
+    "header",
+    {
+      className: "relative flex h-[52px] items-center justify-between gap-3 border-b border-border/40 bg-background px-4",
+      "aria-label": "App top bar",
+      children: /* @__PURE__ */ jsxs6("div", { className: "flex min-w-0 flex-1 items-center gap-2.5", children: [
+        /* @__PURE__ */ jsx12(
+          "div",
+          {
+            "aria-hidden": "true",
+            className: "flex h-7 w-7 shrink-0 items-center justify-center rounded-md bg-foreground text-[12px] font-semibold text-background",
+            children: "B"
+          }
+        ),
+        /* @__PURE__ */ jsx12("span", { className: "truncate text-[13px] font-medium tracking-tight text-foreground", children: "Boring" }),
+        /* @__PURE__ */ jsx12("span", { "aria-hidden": "true", className: "text-muted-foreground/30", children: "/" }),
+        /* @__PURE__ */ jsx12("span", { className: "truncate text-[13px] text-muted-foreground", children: "Account settings" })
+      ] })
+    }
+  );
+}
+function SettingsPageHeader({
+  initials,
+  displayName,
+  email
+}) {
+  return /* @__PURE__ */ jsxs6("header", { className: "boring-settings-page-header", children: [
+    /* @__PURE__ */ jsxs6("div", { className: "boring-settings-context", children: [
+      /* @__PURE__ */ jsx12("div", { className: "flex h-9 w-9 shrink-0 items-center justify-center rounded-md bg-foreground text-[12px] font-semibold text-background", children: initials }),
+      /* @__PURE__ */ jsxs6("div", { className: "min-w-0", children: [
+        /* @__PURE__ */ jsxs6("p", { className: "truncate text-[13px] font-medium text-foreground", children: [
+          "Signed in as ",
+          displayName
+        ] }),
+        /* @__PURE__ */ jsxs6("p", { className: "truncate text-[12px] leading-5 text-muted-foreground", children: [
+          email,
+          " account"
+        ] })
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxs6("div", { className: "max-w-2xl", children: [
+      /* @__PURE__ */ jsx12("p", { className: "text-[11px] font-medium uppercase leading-4 text-muted-foreground", children: "Account" }),
+      /* @__PURE__ */ jsx12("h1", { className: "mt-1 text-[20px] font-semibold leading-7 tracking-tight text-foreground", children: "Account settings" }),
+      /* @__PURE__ */ jsx12("p", { className: "mt-2 text-[13px] leading-5 text-muted-foreground", children: "Review your profile, change your password, and manage account-level actions." })
+    ] })
+  ] });
+}
+var ACCOUNT_NAV_ITEMS = [
+  { href: "#profile", label: "Profile", description: "Identity and email" },
+  { href: "#password", label: "Password", description: "Sign-in security" },
+  { href: "#danger-zone", label: "Deletion", description: "Permanent actions" }
+];
+function UserSettingsPage({ topBar } = {}) {
+  const session = useSession();
+  const identity = useUser();
+  const signOut = useSignOut();
+  const changePassword = useChangePassword();
+  const user = identity?.user ?? session.data?.user ?? null;
+  const [passwordError, setPasswordError] = useState12(null);
+  const [passwordSuccess, setPasswordSuccess] = useState12(false);
+  const [isChangingPassword, setIsChangingPassword] = useState12(false);
+  const [deleteConfirm, setDeleteConfirm] = useState12("");
+  const [deleteError, setDeleteError] = useState12(null);
+  const [isDeleting, setIsDeleting] = useState12(false);
+  const [deleteDialogOpen, setDeleteDialogOpen] = useState12(false);
+  const {
+    register,
+    handleSubmit,
+    formState: { errors },
+    reset: resetForm
+  } = useForm5({
+    resolver: zodResolver5(changePasswordSchema)
+  });
+  const onChangePassword = useCallback4(
+    async (data) => {
+      setPasswordError(null);
+      setPasswordSuccess(false);
+      setIsChangingPassword(true);
+      try {
+        const result = await changePassword({
+          currentPassword: data.currentPassword,
+          newPassword: data.newPassword,
+          revokeOtherSessions: true
+        });
+        if (result.error) {
+          setPasswordError(result.error.message ?? "Failed to change password");
+        } else {
+          setPasswordSuccess(true);
+          resetForm();
+        }
+      } catch (err) {
+        setPasswordError(err instanceof Error ? err.message : "Failed to change password");
+      } finally {
+        setIsChangingPassword(false);
+      }
+    },
+    [changePassword, resetForm]
+  );
+  const onDeleteAccount = useCallback4(async () => {
+    if (!user?.email) return;
+    setDeleteError(null);
+    setIsDeleting(true);
+    try {
+      await apiFetch("/api/v1/me", {
+        method: "DELETE",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ confirm: user.email })
+      });
+      await signOut();
+    } catch (err) {
+      const message = err instanceof Error ? err.message : "Failed to delete account";
+      if (message.includes("sole owner") || message.includes("last_owner")) {
+        setDeleteError(
+          "You are the sole owner of one or more workspaces. Transfer ownership or delete those workspaces first."
+        );
+      } else {
+        setDeleteError(message);
+      }
+    } finally {
+      setIsDeleting(false);
+    }
+  }, [user?.email, signOut]);
+  const topBarNode = topBar === void 0 ? /* @__PURE__ */ jsx12(SettingsTopBar, {}) : topBar;
+  if (!user) {
+    return /* @__PURE__ */ jsxs6("main", { className: "boring-settings-shell", children: [
+      topBarNode,
+      /* @__PURE__ */ jsx12("div", { className: "boring-settings-scroll", children: /* @__PURE__ */ jsx12("div", { className: "mx-auto flex min-h-full w-full max-w-5xl items-center justify-center px-4", children: /* @__PURE__ */ jsxs6("div", { className: "w-full max-w-sm rounded-lg border border-border/60 bg-background p-4", children: [
+        /* @__PURE__ */ jsx12("h1", { className: "text-[13px] font-medium", children: "Account settings" }),
+        /* @__PURE__ */ jsx12("p", { className: "mt-1 text-[12px] text-muted-foreground", children: "Loading your account..." })
+      ] }) }) })
+    ] });
+  }
+  const initials = initialsFor(user.name, user.email);
+  return /* @__PURE__ */ jsxs6("main", { className: "boring-settings-shell", children: [
+    topBarNode,
+    /* @__PURE__ */ jsx12("div", { className: "boring-settings-scroll", children: /* @__PURE__ */ jsxs6("div", { className: "boring-settings-layout", children: [
+      /* @__PURE__ */ jsx12("aside", { className: "boring-settings-sidebar", children: /* @__PURE__ */ jsx12(UiSettingsNav, { label: "Account settings", items: ACCOUNT_NAV_ITEMS }) }),
+      /* @__PURE__ */ jsxs6("div", { className: "boring-settings-content space-y-4", children: [
+        /* @__PURE__ */ jsx12(
+          SettingsPageHeader,
+          {
+            initials,
+            displayName: user.name ?? user.email,
+            email: user.email
+          }
+        ),
+        /* @__PURE__ */ jsx12(
+          UiSettingsPanel,
+          {
+            id: "profile",
+            icon: /* @__PURE__ */ jsx12(UserRound, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+            title: "Profile",
+            description: "The identity shown inside this app.",
+            children: /* @__PURE__ */ jsxs6(DetailList, { children: [
+              /* @__PURE__ */ jsx12(
+                UiDetailLine,
+                {
+                  icon: /* @__PURE__ */ jsx12(Mail, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+                  label: "Email",
+                  children: /* @__PURE__ */ jsx12("p", { className: "truncate", children: user.email })
+                }
+              ),
+              /* @__PURE__ */ jsx12(
+                UiDetailLine,
+                {
+                  icon: /* @__PURE__ */ jsx12(UserRound, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+                  label: "Name",
+                  children: /* @__PURE__ */ jsx12("p", { className: "truncate", children: user.name ?? "Not set" })
+                }
+              ),
+              /* @__PURE__ */ jsx12(
+                UiDetailLine,
+                {
+                  icon: /* @__PURE__ */ jsx12(CalendarDays, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+                  label: "Member since",
+                  children: /* @__PURE__ */ jsx12("p", { children: formatMemberSince(user.createdAt) })
+                }
+              ),
+              /* @__PURE__ */ jsx12(
+                UiDetailLine,
+                {
+                  icon: /* @__PURE__ */ jsx12(CheckCircle2, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+                  label: "Email status",
+                  children: /* @__PURE__ */ jsx12("p", { children: user.emailVerified ? "Verified" : "Not verified" })
+                }
+              )
+            ] })
+          }
+        ),
+        /* @__PURE__ */ jsx12("form", { onSubmit: handleSubmit(onChangePassword), noValidate: true, children: /* @__PURE__ */ jsx12(
+          UiSettingsPanel,
+          {
+            id: "password",
+            icon: /* @__PURE__ */ jsx12(KeyRound, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+            title: "Change password",
+            description: "Update the password used for email sign-in.",
+            footer: /* @__PURE__ */ jsx12(Button7, { type: "submit", size: "sm", disabled: isChangingPassword, children: isChangingPassword ? "Changing..." : "Change password" }),
+            children: /* @__PURE__ */ jsxs6("div", { className: "space-y-4", children: [
+              passwordError && /* @__PURE__ */ jsx12(Notice, { role: "alert", tone: "error", description: passwordError }),
+              passwordSuccess && /* @__PURE__ */ jsx12(Notice, { role: "status", tone: "success", description: "Password changed successfully." }),
+              /* @__PURE__ */ jsxs6("div", { className: "grid gap-3 sm:grid-cols-2", children: [
+                /* @__PURE__ */ jsxs6("div", { className: "space-y-2 sm:col-span-2", children: [
+                  /* @__PURE__ */ jsx12(Label6, { htmlFor: "currentPassword", className: "text-[12px]", children: "Current password" }),
+                  /* @__PURE__ */ jsx12(
+                    Input6,
+                    {
+                      id: "currentPassword",
+                      type: "password",
+                      className: "h-8 text-[13px]",
+                      autoComplete: "current-password",
+                      "aria-invalid": errors.currentPassword ? "true" : "false",
+                      ...register("currentPassword")
+                    }
+                  ),
+                  errors.currentPassword && /* @__PURE__ */ jsx12("p", { className: "text-[12px] text-destructive", children: errors.currentPassword.message })
+                ] }),
+                /* @__PURE__ */ jsxs6("div", { className: "space-y-2", children: [
+                  /* @__PURE__ */ jsx12(Label6, { htmlFor: "newPassword", className: "text-[12px]", children: "New password" }),
+                  /* @__PURE__ */ jsx12(
+                    Input6,
+                    {
+                      id: "newPassword",
+                      type: "password",
+                      className: "h-8 text-[13px]",
+                      autoComplete: "new-password",
+                      placeholder: "At least 8 characters",
+                      "aria-invalid": errors.newPassword ? "true" : "false",
+                      ...register("newPassword")
+                    }
+                  ),
+                  errors.newPassword && /* @__PURE__ */ jsx12("p", { className: "text-[12px] text-destructive", children: errors.newPassword.message })
+                ] }),
+                /* @__PURE__ */ jsxs6("div", { className: "space-y-2", children: [
+                  /* @__PURE__ */ jsx12(Label6, { htmlFor: "confirmPassword", className: "text-[12px]", children: "Confirm new password" }),
+                  /* @__PURE__ */ jsx12(
+                    Input6,
+                    {
+                      id: "confirmPassword",
+                      type: "password",
+                      className: "h-8 text-[13px]",
+                      autoComplete: "new-password",
+                      "aria-invalid": errors.confirmPassword ? "true" : "false",
+                      ...register("confirmPassword")
+                    }
+                  ),
+                  errors.confirmPassword && /* @__PURE__ */ jsx12("p", { className: "text-[12px] text-destructive", children: errors.confirmPassword.message })
+                ] })
+              ] })
+            ] })
+          }
+        ) }),
+        /* @__PURE__ */ jsx12(
+          UiSettingsPanel,
+          {
+            id: "danger-zone",
+            icon: /* @__PURE__ */ jsx12(ShieldAlert, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+            title: "Danger zone",
+            description: "Permanently delete this account and remove its workspace access.",
+            danger: true,
+            children: /* @__PURE__ */ jsx12(
+              UiSettingsActionRow,
+              {
+                title: "Delete account",
+                description: "Delete your account, user settings, and workspace memberships after confirmation.",
+                action: /* @__PURE__ */ jsxs6(AlertDialog, { open: deleteDialogOpen, onOpenChange: setDeleteDialogOpen, children: [
+                  /* @__PURE__ */ jsx12(AlertDialogTrigger, { asChild: true, children: /* @__PURE__ */ jsxs6(Button7, { variant: "destructive", size: "sm", children: [
+                    /* @__PURE__ */ jsx12(Trash2, { className: "h-4 w-4", "aria-hidden": "true" }),
+                    "Delete account"
+                  ] }) }),
+                  /* @__PURE__ */ jsxs6(AlertDialogContent, { children: [
+                    /* @__PURE__ */ jsxs6(AlertDialogHeader, { children: [
+                      /* @__PURE__ */ jsx12(AlertDialogTitle, { children: "Delete your account?" }),
+                      /* @__PURE__ */ jsx12(AlertDialogDescription, { children: "This action cannot be undone. All your data, workspaces, and settings will be permanently deleted." })
+                    ] }),
+                    /* @__PURE__ */ jsxs6("div", { className: "space-y-3 py-2", children: [
+                      deleteError && /* @__PURE__ */ jsx12(Notice, { role: "alert", tone: "error", description: deleteError }),
+                      /* @__PURE__ */ jsxs6("div", { className: "space-y-2", children: [
+                        /* @__PURE__ */ jsxs6(Label6, { htmlFor: "delete-confirm", children: [
+                          "Type ",
+                          /* @__PURE__ */ jsx12("span", { className: "font-mono font-bold", children: "DELETE" }),
+                          " to confirm"
+                        ] }),
+                        /* @__PURE__ */ jsx12(
+                          Input6,
+                          {
+                            id: "delete-confirm",
+                            className: "h-8 text-[13px]",
+                            value: deleteConfirm,
+                            onChange: (e) => setDeleteConfirm(e.target.value),
+                            placeholder: "DELETE",
+                            autoComplete: "off"
+                          }
+                        )
+                      ] })
+                    ] }),
+                    /* @__PURE__ */ jsxs6(AlertDialogFooter, { children: [
+                      /* @__PURE__ */ jsx12(
+                        AlertDialogCancel,
+                        {
+                          onClick: () => {
+                            setDeleteConfirm("");
+                            setDeleteError(null);
+                          },
+                          children: "Cancel"
+                        }
+                      ),
+                      /* @__PURE__ */ jsx12(
+                        Button7,
+                        {
+                          variant: "destructive",
+                          size: "sm",
+                          disabled: deleteConfirm !== "DELETE" || isDeleting,
+                          onClick: onDeleteAccount,
+                          children: isDeleting ? "Deleting..." : "Delete my account"
+                        }
+                      )
+                    ] })
+                  ] })
+                ] })
+              }
+            )
+          }
+        )
+      ] })
+    ] }) })
+  ] });
+}
+
+// src/front/auth/InviteAcceptPage.tsx
+import { useCallback as useCallback5, useState as useState13 } from "react";
+import { useParams as useParams2, useNavigate } from "react-router-dom";
+import { useQuery as useQuery3, useMutation, useQueryClient as useQueryClient2 } from "@tanstack/react-query";
+import {
+  Button as Button8,
+  Card as Card6,
+  CardContent as CardContent6,
+  CardDescription as CardDescription6,
+  CardFooter as CardFooter6,
+  CardHeader as CardHeader6,
+  CardTitle as CardTitle6,
+  LoadingState,
+  Notice as Notice2
+} from "@hachej/boring-ui-kit";
+import { jsx as jsx13, jsxs as jsxs7 } from "react/jsx-runtime";
+function InviteAcceptPage() {
+  const { token } = useParams2();
+  const session = useSession();
+  const navigate = useNavigate();
+  const queryClient = useQueryClient2();
+  const [acceptError, setAcceptError] = useState13(null);
+  const isSignedIn = Boolean(session.data);
+  const isSessionPending = session.isPending;
+  const resolveQuery = useQuery3({
+    queryKey: ["invite-resolve", token],
+    queryFn: () => apiFetchJson("/api/v1/invites/resolve", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ token })
+    }),
+    enabled: Boolean(token) && !isSessionPending && isSignedIn,
+    retry: false
+  });
+  const acceptMutation = useMutation({
+    mutationFn: () => apiFetchJson("/api/v1/invites/accept", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ token })
+    }),
+    onSuccess: (data) => {
+      queryClient.invalidateQueries({ queryKey: WORKSPACES_QUERY_KEY });
+      navigate(`/w/${data.workspace.id}`);
+    },
+    onError: (err) => {
+      const detail = getHttpErrorDetail(err);
+      if (detail.status === 403 || detail.code === "invite_email_mismatch") {
+        setAcceptError("This invite is for a different email. Sign in with that account to accept.");
+      } else if (detail.status === 410) {
+        setAcceptError("This invite has expired.");
+      } else if (detail.status === 429) {
+        setAcceptError("Too many attempts. Please wait a minute.");
+      } else {
+        setAcceptError(detail.message);
+      }
+    }
+  });
+  const handleAccept = useCallback5(() => {
+    setAcceptError(null);
+    acceptMutation.mutate();
+  }, [acceptMutation]);
+  const handleDecline = useCallback5(() => {
+    navigate("/");
+  }, [navigate]);
+  if (isSessionPending) {
+    return /* @__PURE__ */ jsx13("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsx13(Card6, { className: "w-full max-w-md", children: /* @__PURE__ */ jsx13(CardContent6, { className: "py-8 text-center", children: /* @__PURE__ */ jsx13(LoadingState, { "data-testid": "loading", className: "justify-center" }) }) }) });
+  }
+  if (!isSignedIn) {
+    const signinUrl = `${routes.signin}?redirect=${encodeURIComponent(`/invites/${token}`)}`;
+    return /* @__PURE__ */ jsx13("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs7(Card6, { className: "w-full max-w-md", children: [
+      /* @__PURE__ */ jsxs7(CardHeader6, { children: [
+        /* @__PURE__ */ jsx13(CardTitle6, { children: "Sign in to accept this invite" }),
+        /* @__PURE__ */ jsx13(CardDescription6, { children: "You need to sign in before you can accept a workspace invite." })
+      ] }),
+      /* @__PURE__ */ jsx13(CardFooter6, { children: /* @__PURE__ */ jsx13(Button8, { className: "w-full", onClick: () => navigate(signinUrl), "data-testid": "signin-redirect", children: "Sign in" }) })
+    ] }) });
+  }
+  if (resolveQuery.isLoading) {
+    return /* @__PURE__ */ jsx13("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsx13(Card6, { className: "w-full max-w-md", children: /* @__PURE__ */ jsx13(CardContent6, { className: "py-8 text-center", children: /* @__PURE__ */ jsx13(LoadingState, { "data-testid": "loading", className: "justify-center" }) }) }) });
+  }
+  if (resolveQuery.error) {
+    const detail = getHttpErrorDetail(resolveQuery.error);
+    let message;
+    if (detail.status === 404) {
+      message = "This invite is no longer valid. It may have been revoked or never existed.";
+    } else if (detail.status === 410) {
+      message = "This invite has expired.";
+    } else if (detail.status === 423) {
+      message = "This invite is temporarily locked due to too many failed attempts. Try again later.";
+    } else {
+      message = detail.message;
+    }
+    return /* @__PURE__ */ jsx13("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs7(Card6, { className: "w-full max-w-md", children: [
+      /* @__PURE__ */ jsx13(CardHeader6, { children: /* @__PURE__ */ jsx13(CardTitle6, { children: "Invite unavailable" }) }),
+      /* @__PURE__ */ jsx13(CardContent6, { children: /* @__PURE__ */ jsx13(Notice2, { "data-testid": "resolve-error", tone: "error", description: message }) }),
+      /* @__PURE__ */ jsx13(CardFooter6, { children: /* @__PURE__ */ jsx13(Button8, { variant: "outline", className: "w-full", onClick: () => navigate("/"), children: "Go home" }) })
+    ] }) });
+  }
+  const preview = resolveQuery.data;
+  if (!preview) return null;
+  return /* @__PURE__ */ jsx13("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs7(Card6, { className: "w-full max-w-md", children: [
+    /* @__PURE__ */ jsxs7(CardHeader6, { children: [
+      /* @__PURE__ */ jsx13(CardTitle6, { children: "You've been invited" }),
+      /* @__PURE__ */ jsxs7(CardDescription6, { children: [
+        "Join ",
+        /* @__PURE__ */ jsx13("strong", { children: preview.workspaceName }),
+        " as ",
+        /* @__PURE__ */ jsx13("strong", { children: preview.role })
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxs7(CardContent6, { className: "space-y-3", children: [
+      acceptError && /* @__PURE__ */ jsx13(Notice2, { role: "alert", "data-testid": "accept-error", tone: "error", description: acceptError }),
+      /* @__PURE__ */ jsxs7("div", { className: "text-sm text-muted-foreground", children: [
+        "This invite expires on",
+        " ",
+        new Date(preview.expiresAt).toLocaleDateString(void 0, {
+          year: "numeric",
+          month: "long",
+          day: "numeric"
+        })
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxs7(CardFooter6, { className: "flex gap-3", children: [
+      /* @__PURE__ */ jsx13(
+        Button8,
+        {
+          variant: "outline",
+          className: "flex-1",
+          onClick: handleDecline,
+          "data-testid": "decline-btn",
+          children: "Decline"
+        }
+      ),
+      /* @__PURE__ */ jsx13(
+        Button8,
+        {
+          className: "flex-1",
+          disabled: acceptMutation.isPending,
+          onClick: handleAccept,
+          "data-testid": "accept-btn",
+          children: acceptMutation.isPending ? "Accepting\u2026" : "Accept invite"
+        }
+      )
+    ] })
+  ] }) });
+}
+
+// src/front/AuthGate.tsx
+import { useEffect as useEffect9, useMemo as useMemo3, useRef as useRef5 } from "react";
+import { Fragment, jsx as jsx14 } from "react/jsx-runtime";
+var DEFAULT_GRACE_MS = 3e4;
+var UNSAFE_REDIRECT_RE = /[\0\r\n<>"'`]/;
+function normalizePath(pathname) {
+  if (!pathname) return "/";
+  return pathname.startsWith("/") ? pathname : `/${pathname}`;
+}
+function normalizeSearch(search) {
+  if (!search) return "";
+  return search.startsWith("?") ? search : `?${search}`;
+}
+function normalizeHash(hash) {
+  if (!hash) return "";
+  return hash.startsWith("#") ? hash : `#${hash}`;
+}
+function buildCurrentPath(location) {
+  return `${normalizePath(location.pathname)}${normalizeSearch(location.search)}${normalizeHash(location.hash)}`;
+}
+function normalizePublicPath(path) {
+  const normalized = normalizePath(path);
+  if (normalized.length > 1 && normalized.endsWith("/")) return normalized.slice(0, -1);
+  return normalized;
+}
+function isPublicPath(pathname, publicPaths) {
+  const normalizedPath = normalizePath(pathname);
+  if (normalizedPath === "/auth" || normalizedPath.startsWith("/auth/")) return true;
+  return publicPaths.some((candidate) => normalizedPath === candidate || normalizedPath.startsWith(`${candidate}/`));
+}
+function readSafeRedirect(search) {
+  const redirect = new URLSearchParams(normalizeSearch(search)).get("redirect");
+  if (!redirect) return null;
+  if (!redirect.startsWith("/") || redirect.startsWith("//")) return null;
+  if (UNSAFE_REDIRECT_RE.test(redirect)) return null;
+  return redirect;
+}
+function defaultLocation() {
+  if (typeof window === "undefined") return { pathname: "/" };
+  return {
+    pathname: window.location.pathname,
+    search: window.location.search,
+    hash: window.location.hash
+  };
+}
+function defaultNavigate(to, options) {
+  if (typeof window === "undefined") return;
+  if (options?.replace) {
+    window.location.replace(to);
+    return;
+  }
+  window.location.assign(to);
+}
+function AuthGate({
+  children,
+  publicPaths = [],
+  graceMs = DEFAULT_GRACE_MS,
+  location,
+  navigate,
+  now
+}) {
+  const session = useSession();
+  const nullSinceRef = useRef5(null);
+  const redirectTimerRef = useRef5(null);
+  const readNow = now ?? Date.now;
+  const currentLocation = location ?? defaultLocation();
+  const goTo = navigate ?? defaultNavigate;
+  const normalizedPublicPaths = useMemo3(
+    () => publicPaths.map(normalizePublicPath),
+    [publicPaths]
+  );
+  useEffect9(() => {
+    return () => {
+      if (!redirectTimerRef.current) return;
+      clearTimeout(redirectTimerRef.current);
+      redirectTimerRef.current = null;
+    };
+  }, []);
+  useEffect9(() => {
+    if (redirectTimerRef.current) {
+      clearTimeout(redirectTimerRef.current);
+      redirectTimerRef.current = null;
+    }
+    const pathname = normalizePath(currentLocation.pathname);
+    const currentPath = buildCurrentPath(currentLocation);
+    if (session.data) {
+      nullSinceRef.current = null;
+      if (pathname === routes.signin) {
+        const destination = readSafeRedirect(currentLocation.search) ?? "/";
+        if (destination !== currentPath) {
+          goTo(destination, { replace: true });
+        }
+      }
+      return;
+    }
+    if (session.isPending || isPublicPath(pathname, normalizedPublicPaths)) {
+      nullSinceRef.current = null;
+      return;
+    }
+    const nowMs = readNow();
+    if (nullSinceRef.current === null) {
+      nullSinceRef.current = nowMs;
+    }
+    const elapsedMs = nowMs - nullSinceRef.current;
+    if (elapsedMs >= graceMs) {
+      goTo(`${routes.signin}?redirect=${encodeURIComponent(currentPath)}`, { replace: true });
+      return;
+    }
+    const remainingMs = graceMs - elapsedMs;
+    redirectTimerRef.current = setTimeout(() => {
+      goTo(`${routes.signin}?redirect=${encodeURIComponent(currentPath)}`, { replace: true });
+    }, remainingMs);
+    redirectTimerRef.current.unref?.();
+  }, [currentLocation, goTo, graceMs, normalizedPublicPaths, readNow, session.data, session.isPending]);
+  return /* @__PURE__ */ jsx14(Fragment, { children });
+}
+
+// src/front/CoreFront.tsx
+import { Suspense, useMemo as useMemo6 } from "react";
+import { BrowserRouter, Routes, Route } from "react-router-dom";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { Helmet, HelmetProvider } from "react-helmet-async";
+
+// src/front/components/UserMenu.tsx
+import { useMemo as useMemo4, useState as useState14 } from "react";
+import {
+  Button as Button9,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuLabel,
+  DropdownMenuSeparator,
+  DropdownMenuTrigger
+} from "@hachej/boring-ui-kit";
+import {
+  ChevronDown,
+  Check,
+  LogOut,
+  Monitor,
+  Moon,
+  Settings,
+  Sun
+} from "lucide-react";
+import { useNavigate as useNavigate2 } from "react-router-dom";
+import { jsx as jsx15, jsxs as jsxs8 } from "react/jsx-runtime";
+var THEME_ORDER = ["light", "dark", "system"];
+function labelForTheme(preference) {
+  if (preference === "light") return "Light";
+  if (preference === "dark") return "Dark";
+  return "System";
+}
+function iconForTheme(preference) {
+  if (preference === "light") return Sun;
+  if (preference === "dark") return Moon;
+  return Monitor;
+}
+function initialsFor2(name, email) {
+  if (name && name.trim().length > 0) {
+    return name.trim().split(/\s+/).slice(0, 2).map((part) => part[0]?.toUpperCase() ?? "").join("");
+  }
+  return email.slice(0, 2).toUpperCase();
+}
+function UserMenu() {
+  const identity = useUser();
+  const signOut = useSignOut();
+  const navigate = useNavigate2();
+  const { preference, setTheme } = useTheme();
+  const [isSigningOut, setIsSigningOut] = useState14(false);
+  const user = identity?.user;
+  const userName = user?.name ?? "Unknown user";
+  const userEmail = user?.email ?? "unknown@example.com";
+  const initials = useMemo4(() => initialsFor2(user?.name ?? null, userEmail), [user?.name, userEmail]);
+  async function handleSignOut() {
+    if (isSigningOut) return;
+    setIsSigningOut(true);
+    try {
+      await signOut();
+    } finally {
+      setIsSigningOut(false);
+      navigate(routes.signin);
+    }
+  }
+  return /* @__PURE__ */ jsxs8(DropdownMenu, { children: [
+    /* @__PURE__ */ jsx15(DropdownMenuTrigger, { asChild: true, children: /* @__PURE__ */ jsxs8(
+      Button9,
+      {
+        type: "button",
+        variant: "ghost",
+        "aria-label": "User menu",
+        className: "h-8 rounded-md border border-transparent bg-transparent px-1 pr-1.5 text-foreground shadow-none hover:bg-foreground/5 focus-visible:ring-1 focus-visible:ring-ring",
+        children: [
+          /* @__PURE__ */ jsx15("span", { className: "inline-flex h-7 w-7 items-center justify-center rounded-md bg-foreground text-[11px] font-semibold text-background", children: initials }),
+          /* @__PURE__ */ jsx15(ChevronDown, { className: "h-3.5 w-3.5 text-muted-foreground", "aria-hidden": "true" })
+        ]
+      }
+    ) }),
+    /* @__PURE__ */ jsxs8(
+      DropdownMenuContent,
+      {
+        align: "end",
+        sideOffset: 8,
+        className: "w-80 rounded-lg border-border/70 bg-[color:var(--surface-workbench-left)] p-2 shadow-2xl",
+        children: [
+          /* @__PURE__ */ jsx15(DropdownMenuLabel, { className: "p-2", children: /* @__PURE__ */ jsxs8("div", { className: "flex items-center gap-3", children: [
+            /* @__PURE__ */ jsx15("span", { className: "flex h-9 w-9 shrink-0 items-center justify-center rounded-md bg-foreground text-[12px] font-semibold text-background", children: initials }),
+            /* @__PURE__ */ jsxs8("span", { className: "min-w-0 space-y-1", children: [
+              /* @__PURE__ */ jsx15("span", { className: "block truncate text-sm font-medium leading-none", children: userName }),
+              /* @__PURE__ */ jsx15("span", { className: "block truncate text-xs font-normal text-muted-foreground", children: userEmail })
+            ] })
+          ] }) }),
+          /* @__PURE__ */ jsx15(DropdownMenuSeparator, { className: "-mx-2" }),
+          /* @__PURE__ */ jsx15(DropdownMenuLabel, { className: "px-2 pb-1 pt-2 text-[11px] font-medium text-muted-foreground", children: "Theme" }),
+          THEME_ORDER.map((theme) => {
+            const Icon = iconForTheme(theme);
+            const selected = preference === theme;
+            return /* @__PURE__ */ jsxs8(
+              DropdownMenuItem,
+              {
+                "aria-label": labelForTheme(theme),
+                "data-current": selected ? "true" : "false",
+                onSelect: (event) => {
+                  event.preventDefault();
+                  setTheme(theme);
+                },
+                className: "gap-3 rounded-md py-2 text-[13px] focus:bg-foreground/[0.06] focus:text-foreground",
+                children: [
+                  /* @__PURE__ */ jsx15(Icon, { className: "h-4 w-4 text-muted-foreground", "aria-hidden": "true" }),
+                  /* @__PURE__ */ jsx15("span", { className: "flex-1", children: labelForTheme(theme) }),
+                  selected ? /* @__PURE__ */ jsx15(Check, { className: "h-4 w-4 text-foreground", "aria-hidden": "true" }) : null
+                ]
+              },
+              theme
+            );
+          }),
+          /* @__PURE__ */ jsx15(DropdownMenuSeparator, { className: "-mx-2" }),
+          /* @__PURE__ */ jsxs8(
+            DropdownMenuItem,
+            {
+              "aria-label": "User settings",
+              onSelect: () => navigate(routes.me),
+              className: "gap-3 rounded-md py-2 text-[13px] focus:bg-foreground/[0.06] focus:text-foreground",
+              children: [
+                /* @__PURE__ */ jsx15(Settings, { className: "h-4 w-4", "aria-hidden": "true" }),
+                /* @__PURE__ */ jsxs8("span", { className: "flex min-w-0 flex-col", children: [
+                  /* @__PURE__ */ jsx15("span", { children: "User settings" }),
+                  /* @__PURE__ */ jsx15("span", { className: "text-xs text-muted-foreground", children: "Password and account controls" })
+                ] })
+              ]
+            }
+          ),
+          /* @__PURE__ */ jsx15(DropdownMenuSeparator, { className: "-mx-2" }),
+          /* @__PURE__ */ jsxs8(
+            DropdownMenuItem,
+            {
+              variant: "destructive",
+              onSelect: (event) => {
+                event.preventDefault();
+                void handleSignOut();
+              },
+              disabled: isSigningOut,
+              className: "gap-3 rounded-md py-2 text-[13px]",
+              children: [
+                /* @__PURE__ */ jsx15(LogOut, { className: "h-4 w-4", "aria-hidden": "true" }),
+                isSigningOut ? "Signing out..." : "Sign out"
+              ]
+            }
+          )
+        ]
+      }
+    )
+  ] });
+}
+
+// src/front/components/WorkspaceSwitcher.tsx
+import { useMemo as useMemo5, useState as useState15 } from "react";
+import { useQuery as useQuery4, useQueryClient as useQueryClient3 } from "@tanstack/react-query";
+import {
+  Button as Button10,
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  DropdownMenu as DropdownMenu2,
+  DropdownMenuContent as DropdownMenuContent2,
+  DropdownMenuItem as DropdownMenuItem2,
+  DropdownMenuLabel as DropdownMenuLabel2,
+  DropdownMenuSeparator as DropdownMenuSeparator2,
+  DropdownMenuTrigger as DropdownMenuTrigger2,
+  Input as Input7,
+  Label as Label7,
+  useToast
+} from "@hachej/boring-ui-kit";
+import { Check as Check2, ChevronsUpDown, LayoutGrid, Plus, Settings as Settings2 } from "lucide-react";
+import { useNavigate as useNavigate3 } from "react-router-dom";
+import { z as z6 } from "zod";
+import { Fragment as Fragment2, jsx as jsx16, jsxs as jsxs9 } from "react/jsx-runtime";
+var workspaceNameSchema = z6.object({
+  name: z6.string().trim().min(1, "Workspace name is required").max(100, "Workspace name must be 100 characters or fewer")
+});
+function useToastCompat() {
+  return useToast();
+}
+function validateWorkspaceName(name) {
+  const parsed = workspaceNameSchema.safeParse({ name });
+  if (!parsed.success) {
+    return {
+      parsedName: null,
+      message: parsed.error.issues[0]?.message ?? "Invalid workspace name"
+    };
+  }
+  return {
+    parsedName: parsed.data.name,
+    message: null
+  };
+}
+function useWorkspaces() {
+  return useQuery4({
+    queryKey: WORKSPACES_QUERY_KEY,
+    queryFn: async () => {
+      const data = await apiFetchJson("/api/v1/workspaces");
+      return data.workspaces;
+    }
+  });
+}
+function hrefForWorkspace(prefix, workspaceId, suffix = "") {
+  const normalized = prefix.startsWith("/") ? prefix : `/${prefix}`;
+  return `${normalized.replace(/\/$/, "")}/${encodeURIComponent(workspaceId)}${suffix}`;
+}
+function workspaceInitial(name) {
+  return (name.trim()[0] ?? "W").toUpperCase();
+}
+function WorkspaceSwitcher({
+  appTitle = "Boring",
+  workspacePathPrefix = "/workspace"
+}) {
+  const navigate = useNavigate3();
+  const queryClient = useQueryClient3();
+  const { toast } = useToastCompat();
+  const currentWorkspace = useCurrentWorkspace();
+  const workspacesQuery = useWorkspaces();
+  const workspaces = workspacesQuery.data ?? [];
+  const [isModalOpen, setIsModalOpen] = useState15(false);
+  const [name, setName] = useState15("");
+  const [attemptedSubmit, setAttemptedSubmit] = useState15(false);
+  const [isSubmitting, setIsSubmitting] = useState15(false);
+  const [serverError, setServerError] = useState15(null);
+  const nameValidation = useMemo5(() => validateWorkspaceName(name), [name]);
+  const shouldShowNameError = name.length > 100 || attemptedSubmit && nameValidation.message !== null;
+  const nameError = shouldShowNameError ? nameValidation.message : null;
+  function openCreateWorkspace() {
+    setIsModalOpen(true);
+    setServerError(null);
+  }
+  function resetModalState() {
+    setName("");
+    setAttemptedSubmit(false);
+    setIsSubmitting(false);
+    setServerError(null);
+  }
+  function onModalChange(nextOpen) {
+    setIsModalOpen(nextOpen);
+    if (!nextOpen) {
+      resetModalState();
+    }
+  }
+  async function handleCreateWorkspace(event) {
+    event.preventDefault();
+    setAttemptedSubmit(true);
+    setServerError(null);
+    const parsed = workspaceNameSchema.safeParse({ name });
+    if (!parsed.success) {
+      return;
+    }
+    setIsSubmitting(true);
+    try {
+      const data = await apiFetchJson("/api/v1/workspaces", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ name: parsed.data.name })
+      });
+      await Promise.all([
+        queryClient.invalidateQueries({ queryKey: WORKSPACES_QUERY_KEY }),
+        queryClient.invalidateQueries({ queryKey: workspaceQueryKey(data.workspace.id) })
+      ]);
+      onModalChange(false);
+      navigate(hrefForWorkspace(workspacePathPrefix, data.workspace.id));
+    } catch (error) {
+      const detail = getHttpErrorDetail(error);
+      if (typeof detail.status === "number" && detail.status >= 400 && detail.status < 500) {
+        toast({
+          title: "Unable to create workspace",
+          description: detail.message,
+          variant: "destructive"
+        });
+      } else {
+        setServerError(detail.message);
+      }
+    } finally {
+      setIsSubmitting(false);
+    }
+  }
+  const switcherLabel = currentWorkspace?.name ?? "Select workspace";
+  return /* @__PURE__ */ jsxs9(Fragment2, { children: [
+    workspaces.length === 0 ? /* @__PURE__ */ jsxs9(
+      Button10,
+      {
+        type: "button",
+        variant: "ghost",
+        onClick: openCreateWorkspace,
+        className: "-ml-1 h-8 gap-2 rounded-md px-1 pr-2.5 hover:bg-foreground/5 focus-visible:ring-1 focus-visible:ring-ring",
+        children: [
+          /* @__PURE__ */ jsx16(
+            "span",
+            {
+              "aria-hidden": "true",
+              className: "flex h-7 w-7 shrink-0 items-center justify-center rounded-md bg-foreground text-[12px] font-semibold text-background",
+              children: appTitle.charAt(0).toUpperCase()
+            }
+          ),
+          /* @__PURE__ */ jsx16("span", { className: "text-[13px] font-medium text-foreground", children: "Create your first workspace" })
+        ]
+      }
+    ) : /* @__PURE__ */ jsxs9(DropdownMenu2, { children: [
+      /* @__PURE__ */ jsx16(DropdownMenuTrigger2, { asChild: true, children: /* @__PURE__ */ jsxs9(
+        Button10,
+        {
+          type: "button",
+          variant: "ghost",
+          "aria-label": `Workspace menu: ${switcherLabel}`,
+          className: "-ml-1 h-8 min-w-0 justify-start gap-2.5 border border-transparent px-1 py-1 text-left",
+          children: [
+            /* @__PURE__ */ jsx16(
+              "span",
+              {
+                "aria-hidden": "true",
+                className: "flex h-7 w-7 shrink-0 items-center justify-center rounded-md bg-foreground text-[12px] font-semibold text-background",
+                children: appTitle.charAt(0).toUpperCase()
+              }
+            ),
+            /* @__PURE__ */ jsxs9("span", { className: "flex min-w-0 items-center gap-1.5", children: [
+              /* @__PURE__ */ jsx16("span", { className: "truncate text-[13px] font-medium text-foreground", children: appTitle }),
+              /* @__PURE__ */ jsx16("span", { "aria-hidden": "true", className: "text-muted-foreground/30", children: "/" }),
+              /* @__PURE__ */ jsx16("span", { className: "truncate text-[13px] font-normal text-muted-foreground", children: switcherLabel })
+            ] }),
+            /* @__PURE__ */ jsx16(ChevronsUpDown, { className: "h-3.5 w-3.5 shrink-0 text-muted-foreground/55", "aria-hidden": "true" })
+          ]
+        }
+      ) }),
+      /* @__PURE__ */ jsxs9(
+        DropdownMenuContent2,
+        {
+          align: "start",
+          sideOffset: 8,
+          className: "w-80 rounded-lg border-border/70 bg-[color:var(--surface-workbench-left)] p-2 shadow-2xl",
+          children: [
+            /* @__PURE__ */ jsx16(DropdownMenuLabel2, { className: "px-2 pb-2 pt-1", children: /* @__PURE__ */ jsxs9("span", { className: "flex items-center gap-2 text-xs font-medium text-muted-foreground", children: [
+              /* @__PURE__ */ jsx16(LayoutGrid, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+              "Workspaces"
+            ] }) }),
+            /* @__PURE__ */ jsx16("div", { className: "max-h-72 overflow-y-auto pr-1", children: workspaces.map((workspace) => {
+              const isCurrent = currentWorkspace?.id === workspace.id;
+              return /* @__PURE__ */ jsxs9(
+                DropdownMenuItem2,
+                {
+                  "aria-label": workspace.name,
+                  "data-current": isCurrent ? "true" : "false",
+                  onSelect: () => navigate(hrefForWorkspace(workspacePathPrefix, workspace.id)),
+                  className: "gap-3 rounded-md py-2 text-[13px] focus:bg-foreground/[0.06] focus:text-foreground",
+                  children: [
+                    /* @__PURE__ */ jsx16("span", { className: "flex h-7 w-7 shrink-0 items-center justify-center rounded-md border border-border/60 bg-background text-xs font-semibold text-muted-foreground", children: workspaceInitial(workspace.name) }),
+                    /* @__PURE__ */ jsx16("span", { className: "min-w-0 flex-1 truncate text-sm", children: workspace.name }),
+                    isCurrent ? /* @__PURE__ */ jsx16(Check2, { className: "h-4 w-4 text-foreground", "aria-hidden": "true" }) : null
+                  ]
+                },
+                workspace.id
+              );
+            }) }),
+            /* @__PURE__ */ jsx16(DropdownMenuSeparator2, { className: "-mx-2" }),
+            /* @__PURE__ */ jsxs9(
+              DropdownMenuItem2,
+              {
+                "aria-label": "Create workspace",
+                onSelect: (event) => {
+                  event.preventDefault();
+                  openCreateWorkspace();
+                },
+                className: "gap-3 rounded-md py-2 text-[13px] focus:bg-foreground/[0.06] focus:text-foreground",
+                children: [
+                  /* @__PURE__ */ jsx16(Plus, { className: "h-4 w-4", "aria-hidden": "true" }),
+                  /* @__PURE__ */ jsxs9("span", { className: "flex min-w-0 flex-col", children: [
+                    /* @__PURE__ */ jsx16("span", { children: "Create workspace" }),
+                    /* @__PURE__ */ jsx16("span", { className: "text-xs text-muted-foreground", children: "Start a clean project space" })
+                  ] })
+                ]
+              }
+            ),
+            currentWorkspace ? /* @__PURE__ */ jsxs9(
+              DropdownMenuItem2,
+              {
+                "aria-label": "Workspace settings",
+                onSelect: () => navigate(hrefForWorkspace(workspacePathPrefix, currentWorkspace.id, "/settings")),
+                className: "gap-3 rounded-md py-2 text-[13px] focus:bg-foreground/[0.06] focus:text-foreground",
+                children: [
+                  /* @__PURE__ */ jsx16(Settings2, { className: "h-4 w-4", "aria-hidden": "true" }),
+                  /* @__PURE__ */ jsxs9("span", { className: "flex min-w-0 flex-col", children: [
+                    /* @__PURE__ */ jsx16("span", { children: "Workspace settings" }),
+                    /* @__PURE__ */ jsx16("span", { className: "text-xs text-muted-foreground", children: "Rename, runtime, deletion" })
+                  ] })
+                ]
+              }
+            ) : null
+          ]
+        }
+      )
+    ] }),
+    /* @__PURE__ */ jsx16(Dialog, { open: isModalOpen, onOpenChange: onModalChange, children: /* @__PURE__ */ jsxs9(DialogContent, { children: [
+      /* @__PURE__ */ jsxs9(DialogHeader, { children: [
+        /* @__PURE__ */ jsx16(DialogTitle, { children: "Create workspace" }),
+        /* @__PURE__ */ jsx16(DialogDescription, { children: "Choose a name for your new workspace." })
+      ] }),
+      /* @__PURE__ */ jsxs9("form", { onSubmit: (event) => void handleCreateWorkspace(event), className: "space-y-4", children: [
+        /* @__PURE__ */ jsxs9("div", { className: "space-y-2", children: [
+          /* @__PURE__ */ jsxs9("div", { className: "flex items-center justify-between gap-3", children: [
+            /* @__PURE__ */ jsx16(Label7, { htmlFor: "workspace-name", children: "Name" }),
+            /* @__PURE__ */ jsxs9("span", { className: "text-xs text-muted-foreground", children: [
+              name.length,
+              "/100"
+            ] })
+          ] }),
+          /* @__PURE__ */ jsx16(
+            Input7,
+            {
+              id: "workspace-name",
+              name: "name",
+              value: name,
+              maxLength: 101,
+              onChange: (event) => {
+                setName(event.target.value);
+                if (serverError) setServerError(null);
+              },
+              placeholder: "My Workspace",
+              "aria-invalid": nameError ? "true" : "false",
+              autoFocus: true
+            }
+          ),
+          nameError ? /* @__PURE__ */ jsx16("p", { role: "alert", className: "text-sm text-destructive", children: nameError }) : null,
+          serverError ? /* @__PURE__ */ jsx16("p", { role: "alert", className: "text-sm text-destructive", children: serverError }) : null
+        ] }),
+        /* @__PURE__ */ jsxs9(DialogFooter, { children: [
+          /* @__PURE__ */ jsx16(
+            Button10,
+            {
+              type: "button",
+              variant: "ghost",
+              onClick: () => onModalChange(false),
+              disabled: isSubmitting,
+              children: "Cancel"
+            }
+          ),
+          /* @__PURE__ */ jsx16(
+            Button10,
+            {
+              type: "submit",
+              disabled: isSubmitting || nameValidation.parsedName === null,
+              children: isSubmitting ? "Creating..." : "Create workspace"
+            }
+          )
+        ] })
+      ] })
+    ] }) })
+  ] });
+}
+
+// src/front/components/ThemeToggle.tsx
+import { Button as Button11 } from "@hachej/boring-ui-kit";
+import { jsxs as jsxs10 } from "react/jsx-runtime";
+var THEME_ORDER2 = ["light", "dark", "system"];
+function nextTheme(preference) {
+  const index = THEME_ORDER2.indexOf(preference);
+  const nextIndex = index === -1 ? 0 : (index + 1) % THEME_ORDER2.length;
+  return THEME_ORDER2[nextIndex];
+}
+function labelForTheme2(preference) {
+  if (preference === "light") return "Light";
+  if (preference === "dark") return "Dark";
+  return "System";
+}
+function ThemeToggle() {
+  const { preference, setTheme } = useTheme();
+  return /* @__PURE__ */ jsxs10(
+    Button11,
+    {
+      type: "button",
+      variant: "outline",
+      onClick: () => setTheme(nextTheme(preference)),
+      "aria-label": "Theme toggle",
+      "data-theme-preference": preference,
+      children: [
+        "Theme: ",
+        labelForTheme2(preference)
+      ]
+    }
+  );
+}
+
+// src/front/workspace/InvitesPage.tsx
+import { useCallback as useCallback6, useState as useState16 } from "react";
+import { useQuery as useQuery5, useMutation as useMutation2, useQueryClient as useQueryClient4 } from "@tanstack/react-query";
+import {
+  Button as Button12,
+  Card as Card7,
+  CardContent as CardContent7,
+  CardDescription as CardDescription7,
+  CardFooter as CardFooter7,
+  CardHeader as CardHeader7,
+  CardTitle as CardTitle7,
+  Input as Input8,
+  Label as Label8,
+  LoadingState as LoadingState2,
+  Notice as Notice3,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+  StatusBadge
+} from "@hachej/boring-ui-kit";
+import { jsx as jsx17, jsxs as jsxs11 } from "react/jsx-runtime";
+function invitesQueryKey(workspaceId) {
+  return ["invites", workspaceId];
+}
+function generateIdempotencyKey() {
+  return globalThis.crypto?.randomUUID?.() ?? Math.random().toString(36).slice(2);
+}
+function getInviteStatus(invite) {
+  if (invite.acceptedAt) return "accepted";
+  if (new Date(invite.expiresAt) <= /* @__PURE__ */ new Date()) return "expired";
+  return "pending";
+}
+var STATUS_TONES = {
+  pending: "info",
+  expired: "neutral",
+  accepted: "success"
+};
+function InvitesPage() {
+  const workspace = useCurrentWorkspace();
+  const role = useWorkspaceRole();
+  const queryClient = useQueryClient4();
+  const [email, setEmail] = useState16("");
+  const [inviteRole, setInviteRole] = useState16("editor");
+  const [formError, setFormError] = useState16(null);
+  const [successMessage, setSuccessMessage] = useState16(null);
+  const workspaceId = workspace?.id ?? "";
+  const encodedWorkspaceId = encodeURIComponent(workspaceId);
+  const invitesQuery = useQuery5({
+    queryKey: invitesQueryKey(workspaceId),
+    queryFn: () => apiFetchJson(
+      `/api/v1/workspaces/${encodedWorkspaceId}/invites`
+    ).then((data) => data.invites),
+    enabled: workspaceId.length > 0
+  });
+  const createMutation = useMutation2({
+    mutationFn: async ({ email: invEmail, role: invRole }) => {
+      const idempotencyKey = generateIdempotencyKey();
+      const response = await apiFetch(`/api/v1/workspaces/${encodedWorkspaceId}/invites`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "Idempotency-Key": idempotencyKey
+        },
+        body: JSON.stringify({ email: invEmail, role: invRole })
+      });
+      return response.json();
+    },
+    onSuccess: (_data, variables) => {
+      queryClient.invalidateQueries({ queryKey: invitesQueryKey(workspaceId) });
+      setEmail("");
+      setInviteRole("editor");
+      setFormError(null);
+      setSuccessMessage(`Invite sent to ${variables.email}`);
+    },
+    onError: (err) => {
+      setSuccessMessage(null);
+      const detail = getHttpErrorDetail(err);
+      setFormError(detail.message);
+    }
+  });
+  const [revokeError, setRevokeError] = useState16(null);
+  const revokeMutation = useMutation2({
+    mutationFn: async (inviteId) => {
+      await apiFetch(
+        `/api/v1/workspaces/${encodedWorkspaceId}/invites/${encodeURIComponent(inviteId)}`,
+        { method: "DELETE" }
+      );
+    },
+    onSuccess: () => {
+      setRevokeError(null);
+      queryClient.invalidateQueries({ queryKey: invitesQueryKey(workspaceId) });
+    },
+    onError: (err) => {
+      const detail = getHttpErrorDetail(err);
+      setRevokeError(detail.message);
+    }
+  });
+  const handleSubmit = useCallback6(
+    (e) => {
+      e.preventDefault();
+      setFormError(null);
+      setSuccessMessage(null);
+      const trimmed = email.trim();
+      if (!trimmed) {
+        setFormError("Email is required");
+        return;
+      }
+      createMutation.mutate({ email: trimmed, role: inviteRole });
+    },
+    [email, inviteRole, createMutation]
+  );
+  if (role !== "owner") {
+    return /* @__PURE__ */ jsx17("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsx17(Card7, { className: "w-full max-w-md", children: /* @__PURE__ */ jsxs11(CardHeader7, { children: [
+      /* @__PURE__ */ jsx17(CardTitle7, { children: "Access denied" }),
+      /* @__PURE__ */ jsx17(CardDescription7, { children: "Only workspace owners can manage invites." })
+    ] }) }) });
+  }
+  return /* @__PURE__ */ jsx17("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs11("div", { className: "w-full max-w-2xl space-y-6", children: [
+    /* @__PURE__ */ jsxs11(Card7, { children: [
+      /* @__PURE__ */ jsxs11(CardHeader7, { children: [
+        /* @__PURE__ */ jsx17(CardTitle7, { children: "Invite a member" }),
+        /* @__PURE__ */ jsxs11(CardDescription7, { children: [
+          "Send an invite to join ",
+          workspace?.name ?? "this workspace",
+          "."
+        ] })
+      ] }),
+      /* @__PURE__ */ jsxs11("form", { onSubmit: handleSubmit, "data-testid": "invite-form", children: [
+        /* @__PURE__ */ jsxs11(CardContent7, { className: "space-y-4", children: [
+          formError && /* @__PURE__ */ jsx17(Notice3, { role: "alert", tone: "error", description: formError }),
+          successMessage && /* @__PURE__ */ jsx17(Notice3, { role: "status", tone: "success", description: successMessage }),
+          /* @__PURE__ */ jsxs11("div", { className: "space-y-2", children: [
+            /* @__PURE__ */ jsx17(Label8, { htmlFor: "invite-email", children: "Email address" }),
+            /* @__PURE__ */ jsx17(
+              Input8,
+              {
+                id: "invite-email",
+                type: "email",
+                placeholder: "colleague@example.com",
+                value: email,
+                onChange: (e) => setEmail(e.target.value),
+                autoComplete: "email"
+              }
+            )
+          ] }),
+          /* @__PURE__ */ jsxs11("div", { className: "space-y-2", children: [
+            /* @__PURE__ */ jsx17(Label8, { htmlFor: "invite-role", children: "Role" }),
+            /* @__PURE__ */ jsxs11(Select, { value: inviteRole, onValueChange: (value) => setInviteRole(value), children: [
+              /* @__PURE__ */ jsx17(SelectTrigger, { id: "invite-role", "data-testid": "invite-role-select", children: /* @__PURE__ */ jsx17(SelectValue, { placeholder: "Select role" }) }),
+              /* @__PURE__ */ jsxs11(SelectContent, { children: [
+                /* @__PURE__ */ jsx17(SelectItem, { value: "editor", children: "Editor" }),
+                /* @__PURE__ */ jsx17(SelectItem, { value: "viewer", children: "Viewer" }),
+                /* @__PURE__ */ jsx17(SelectItem, { value: "owner", children: "Owner" })
+              ] })
+            ] })
+          ] })
+        ] }),
+        /* @__PURE__ */ jsx17(CardFooter7, { children: /* @__PURE__ */ jsx17(
+          Button12,
+          {
+            type: "submit",
+            className: "w-full",
+            disabled: createMutation.isPending,
+            children: createMutation.isPending ? "Sending\u2026" : "Send invite"
+          }
+        ) })
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxs11(Card7, { children: [
+      /* @__PURE__ */ jsxs11(CardHeader7, { children: [
+        /* @__PURE__ */ jsx17(CardTitle7, { children: "Pending invites" }),
+        /* @__PURE__ */ jsx17(CardDescription7, { children: invitesQuery.data?.length ? `${invitesQuery.data.length} invite${invitesQuery.data.length === 1 ? "" : "s"}` : "No invites yet" })
+      ] }),
+      /* @__PURE__ */ jsxs11(CardContent7, { children: [
+        revokeError && /* @__PURE__ */ jsx17(Notice3, { role: "alert", tone: "error", className: "mb-4", description: revokeError }),
+        invitesQuery.isLoading && /* @__PURE__ */ jsx17(LoadingState2, {}),
+        invitesQuery.isError && /* @__PURE__ */ jsx17(Notice3, { tone: "error", description: "Failed to load invites." }),
+        invitesQuery.data && invitesQuery.data.length > 0 && /* @__PURE__ */ jsx17("div", { className: "divide-y", "data-testid": "invites-list", children: invitesQuery.data.map((invite) => {
+          const status = getInviteStatus(invite);
+          return /* @__PURE__ */ jsxs11(
+            "div",
+            {
+              className: "flex items-center justify-between py-3",
+              "data-testid": `invite-row-${invite.id}`,
+              children: [
+                /* @__PURE__ */ jsxs11("div", { className: "space-y-1", children: [
+                  /* @__PURE__ */ jsx17("p", { className: "text-sm font-medium", children: invite.email }),
+                  /* @__PURE__ */ jsxs11("div", { className: "flex items-center gap-2 text-xs text-muted-foreground", children: [
+                    /* @__PURE__ */ jsx17("span", { children: invite.role }),
+                    /* @__PURE__ */ jsx17(StatusBadge, { "data-testid": `status-${status}`, tone: STATUS_TONES[status] ?? "neutral", children: status }),
+                    /* @__PURE__ */ jsxs11("span", { children: [
+                      "expires",
+                      " ",
+                      new Date(invite.expiresAt).toLocaleDateString()
+                    ] })
+                  ] })
+                ] }),
+                status === "pending" && /* @__PURE__ */ jsx17(
+                  Button12,
+                  {
+                    variant: "destructive",
+                    size: "sm",
+                    disabled: revokeMutation.isPending,
+                    onClick: () => revokeMutation.mutate(invite.id),
+                    "data-testid": `revoke-${invite.id}`,
+                    children: "Revoke"
+                  }
+                )
+              ]
+            },
+            invite.id
+          );
+        }) })
+      ] })
+    ] })
+  ] }) });
+}
+
+// src/front/workspace/MembersPage.tsx
+import { useCallback as useCallback7, useState as useState17 } from "react";
+import { useMutation as useMutation3, useQueryClient as useQueryClient5 } from "@tanstack/react-query";
+import {
+  AlertDialog as AlertDialog2,
+  AlertDialogCancel as AlertDialogCancel2,
+  AlertDialogContent as AlertDialogContent2,
+  AlertDialogDescription as AlertDialogDescription2,
+  AlertDialogFooter as AlertDialogFooter2,
+  AlertDialogHeader as AlertDialogHeader2,
+  AlertDialogTitle as AlertDialogTitle2,
+  Button as Button13,
+  Card as Card8,
+  CardContent as CardContent8,
+  CardDescription as CardDescription8,
+  CardHeader as CardHeader8,
+  CardTitle as CardTitle8,
+  Select as Select2,
+  SelectContent as SelectContent2,
+  SelectItem as SelectItem2,
+  SelectTrigger as SelectTrigger2,
+  SelectValue as SelectValue2,
+  InitialsAvatar,
+  LoadingState as LoadingState3,
+  Notice as Notice4
+} from "@hachej/boring-ui-kit";
+import { jsx as jsx18, jsxs as jsxs12 } from "react/jsx-runtime";
+var ROLE_OPTIONS = ["owner", "editor", "viewer"];
+function MembersPage() {
+  const workspace = useCurrentWorkspace();
+  const myRole = useWorkspaceRole();
+  const session = useSession();
+  const queryClient = useQueryClient5();
+  const workspaceId = workspace?.id ?? "";
+  const currentUserId = session.data?.user?.id ?? "";
+  const encodedWorkspaceId = encodeURIComponent(workspaceId);
+  const membersQuery = useWorkspaceMembers(workspaceId);
+  const [toast, setToast] = useState17(null);
+  const [confirmTarget, setConfirmTarget] = useState17(null);
+  const showToast = useCallback7((msg) => {
+    setToast(msg);
+    setTimeout(() => setToast(null), 4e3);
+  }, []);
+  const changeRoleMutation = useMutation3({
+    mutationFn: async ({ userId, role }) => {
+      await apiFetch(
+        `/api/v1/workspaces/${encodedWorkspaceId}/members/${encodeURIComponent(userId)}/role`,
+        {
+          method: "PATCH",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify({ role })
+        }
+      );
+    },
+    onSuccess: () => {
+      queryClient.invalidateQueries({ queryKey: ["members", workspaceId] });
+    },
+    onError: (err) => {
+      const detail = getHttpErrorDetail(err);
+      if (detail.code === "last_owner") {
+        showToast("Cannot demote: workspace would have no owners.");
+      } else {
+        showToast(detail.message);
+      }
+      queryClient.invalidateQueries({ queryKey: ["members", workspaceId] });
+    }
+  });
+  const removeMutation = useMutation3({
+    mutationFn: async (userId) => {
+      await apiFetch(
+        `/api/v1/workspaces/${encodedWorkspaceId}/members/${encodeURIComponent(userId)}`,
+        { method: "DELETE" }
+      );
+    },
+    onSuccess: () => {
+      queryClient.invalidateQueries({ queryKey: ["members", workspaceId] });
+      setConfirmTarget(null);
+    },
+    onError: (err) => {
+      const detail = getHttpErrorDetail(err);
+      if (detail.code === "last_owner") {
+        showToast("Cannot remove: workspace would have no owners.");
+      } else {
+        showToast(detail.message);
+      }
+      setConfirmTarget(null);
+    }
+  });
+  const handleRoleChange = useCallback7(
+    (userId, newRole) => {
+      changeRoleMutation.mutate({ userId, role: newRole });
+    },
+    [changeRoleMutation]
+  );
+  const handleRemoveConfirm = useCallback7(() => {
+    if (!confirmTarget) return;
+    removeMutation.mutate(confirmTarget.userId);
+  }, [confirmTarget, removeMutation]);
+  const isOwner = myRole === "owner";
+  return /* @__PURE__ */ jsx18("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs12("div", { className: "w-full max-w-2xl space-y-6", children: [
+    /* @__PURE__ */ jsxs12(Card8, { children: [
+      /* @__PURE__ */ jsxs12(CardHeader8, { children: [
+        /* @__PURE__ */ jsx18(CardTitle8, { children: "Members" }),
+        /* @__PURE__ */ jsxs12(CardDescription8, { children: [
+          workspace?.name ?? "Workspace",
+          " \xB7",
+          " ",
+          membersQuery.data?.length ?? 0,
+          " member",
+          (membersQuery.data?.length ?? 0) !== 1 ? "s" : ""
+        ] })
+      ] }),
+      /* @__PURE__ */ jsxs12(CardContent8, { children: [
+        toast && /* @__PURE__ */ jsx18(Notice4, { role: "alert", "data-testid": "toast", tone: "error", className: "mb-4", description: toast }),
+        membersQuery.isLoading && /* @__PURE__ */ jsx18(LoadingState3, {}),
+        membersQuery.isError && /* @__PURE__ */ jsx18(Notice4, { tone: "error", description: "Failed to load members." }),
+        membersQuery.data && membersQuery.data.length > 0 && /* @__PURE__ */ jsx18("div", { className: "divide-y", "data-testid": "members-list", children: membersQuery.data.map((member) => {
+          const isSelf = member.userId === currentUserId;
+          const canChangeRole = isOwner && !isSelf;
+          const canRemove = isOwner || isSelf;
+          return /* @__PURE__ */ jsxs12(
+            "div",
+            {
+              className: "flex items-center justify-between py-3",
+              "data-testid": `member-row-${member.userId}`,
+              children: [
+                /* @__PURE__ */ jsxs12("div", { className: "flex items-center gap-3", children: [
+                  /* @__PURE__ */ jsx18(InitialsAvatar, { initials: (member.user.name?.[0] ?? member.user.email[0]).toUpperCase() }),
+                  /* @__PURE__ */ jsxs12("div", { children: [
+                    /* @__PURE__ */ jsxs12("p", { className: "text-sm font-medium", children: [
+                      member.user.name ?? member.user.email,
+                      isSelf && /* @__PURE__ */ jsx18("span", { className: "ml-1 text-xs text-muted-foreground", children: "(you)" })
+                    ] }),
+                    /* @__PURE__ */ jsx18("p", { className: "text-xs text-muted-foreground", children: member.user.email })
+                  ] })
+                ] }),
+                /* @__PURE__ */ jsxs12("div", { className: "flex items-center gap-2", children: [
+                  /* @__PURE__ */ jsxs12(
+                    Select2,
+                    {
+                      value: member.role,
+                      disabled: !canChangeRole,
+                      onValueChange: (value) => handleRoleChange(member.userId, value),
+                      children: [
+                        /* @__PURE__ */ jsx18(SelectTrigger2, { "data-testid": `role-select-${member.userId}`, className: "h-8 w-28 text-xs", children: /* @__PURE__ */ jsx18(SelectValue2, { placeholder: "Role" }) }),
+                        /* @__PURE__ */ jsx18(SelectContent2, { children: ROLE_OPTIONS.map((r) => /* @__PURE__ */ jsx18(SelectItem2, { value: r, children: r }, r)) })
+                      ]
+                    }
+                  ),
+                  canRemove && /* @__PURE__ */ jsx18(
+                    Button13,
+                    {
+                      variant: "destructive",
+                      size: "sm",
+                      "data-testid": `remove-${member.userId}`,
+                      onClick: () => setConfirmTarget(member),
+                      children: isSelf ? "Leave" : "Remove"
+                    }
+                  )
+                ] })
+              ]
+            },
+            member.userId
+          );
+        }) })
+      ] })
+    ] }),
+    /* @__PURE__ */ jsx18(
+      AlertDialog2,
+      {
+        open: confirmTarget !== null,
+        onOpenChange: (open) => {
+          if (!open) setConfirmTarget(null);
+        },
+        children: /* @__PURE__ */ jsxs12(AlertDialogContent2, { children: [
+          /* @__PURE__ */ jsxs12(AlertDialogHeader2, { children: [
+            /* @__PURE__ */ jsx18(AlertDialogTitle2, { children: confirmTarget?.userId === currentUserId ? "Leave workspace?" : `Remove ${confirmTarget?.user.name ?? confirmTarget?.user.email}?` }),
+            /* @__PURE__ */ jsx18(AlertDialogDescription2, { children: confirmTarget?.userId === currentUserId ? "You will lose access to this workspace." : "This member will lose access to the workspace." })
+          ] }),
+          /* @__PURE__ */ jsxs12(AlertDialogFooter2, { children: [
+            /* @__PURE__ */ jsx18(AlertDialogCancel2, { children: "Cancel" }),
+            /* @__PURE__ */ jsx18(
+              Button13,
+              {
+                variant: "destructive",
+                disabled: removeMutation.isPending,
+                onClick: handleRemoveConfirm,
+                "data-testid": "confirm-remove",
+                children: removeMutation.isPending ? "Removing\u2026" : confirmTarget?.userId === currentUserId ? "Leave" : "Remove"
+              }
+            )
+          ] })
+        ] })
+      }
+    )
+  ] }) });
+}
+
+// src/front/workspace/WorkspaceSettingsPage.tsx
+import { useCallback as useCallback8, useState as useState18 } from "react";
+import { useQuery as useQuery6, useMutation as useMutation4, useQueryClient as useQueryClient6 } from "@tanstack/react-query";
+import { useNavigate as useNavigate4 } from "react-router-dom";
+import {
+  AlertDialog as AlertDialog3,
+  AlertDialogCancel as AlertDialogCancel3,
+  AlertDialogContent as AlertDialogContent3,
+  AlertDialogDescription as AlertDialogDescription3,
+  AlertDialogFooter as AlertDialogFooter3,
+  AlertDialogHeader as AlertDialogHeader3,
+  AlertDialogTitle as AlertDialogTitle3,
+  Button as Button14,
+  IconButton,
+  SettingsActionRow as UiSettingsActionRow2,
+  SettingsNav as UiSettingsNav2,
+  SettingsPanel as UiSettingsPanel2,
+  StatusBadge as StatusBadge2,
+  Input as Input9,
+  Label as Label9,
+  Notice as Notice5
+} from "@hachej/boring-ui-kit";
+import {
+  AlertCircle,
+  HardDrive,
+  RefreshCw,
+  Settings2 as Settings22,
+  ShieldAlert as ShieldAlert2,
+  Trash2 as Trash22
+} from "lucide-react";
+import { Fragment as Fragment3, jsx as jsx19, jsxs as jsxs13 } from "react/jsx-runtime";
+var STATE_TONES = {
+  pending: "info",
+  ready: "success",
+  error: "danger"
+};
+function SettingsTopBar2({ workspaceId, workspaceName }) {
+  const navigate = useNavigate4();
+  const workspaceHref = workspaceId ? `/workspace/${encodeURIComponent(workspaceId)}` : "/";
+  return /* @__PURE__ */ jsx19(
+    "header",
+    {
+      className: "relative flex h-[52px] items-center justify-between gap-3 border-b border-border/40 bg-background px-4",
+      "aria-label": "App top bar",
+      children: /* @__PURE__ */ jsxs13("div", { className: "flex min-w-0 flex-1 items-center gap-2.5", children: [
+        /* @__PURE__ */ jsx19(
+          IconButton,
+          {
+            type: "button",
+            variant: "default",
+            size: "icon-xs",
+            "aria-label": "Back to workspace",
+            title: "Back to workspace",
+            onClick: () => navigate(workspaceHref),
+            className: "shrink-0 bg-foreground text-[12px] font-semibold text-background hover:bg-foreground/90",
+            children: "B"
+          }
+        ),
+        /* @__PURE__ */ jsx19("span", { className: "truncate text-[13px] font-medium tracking-tight text-foreground", children: "Boring" }),
+        /* @__PURE__ */ jsx19("span", { "aria-hidden": "true", className: "text-muted-foreground/30", children: "/" }),
+        /* @__PURE__ */ jsx19("span", { className: "truncate text-[13px] text-muted-foreground", children: workspaceName }),
+        /* @__PURE__ */ jsx19("span", { "aria-hidden": "true", className: "text-muted-foreground/30", children: "/" }),
+        /* @__PURE__ */ jsx19("span", { className: "truncate text-[13px] text-muted-foreground", children: "Settings" })
+      ] })
+    }
+  );
+}
+function SettingsPageHeader2({
+  workspaceName,
+  workspaceInitial: workspaceInitial2,
+  role,
+  isDefault
+}) {
+  return /* @__PURE__ */ jsxs13("header", { className: "boring-settings-page-header", children: [
+    /* @__PURE__ */ jsxs13("div", { className: "boring-settings-context", children: [
+      /* @__PURE__ */ jsx19("div", { className: "flex h-9 w-9 shrink-0 items-center justify-center rounded-md bg-foreground text-[12px] font-semibold text-background", children: workspaceInitial2 }),
+      /* @__PURE__ */ jsxs13("div", { className: "min-w-0 flex-1", children: [
+        /* @__PURE__ */ jsx19("p", { className: "truncate text-[13px] font-medium text-foreground", children: workspaceName }),
+        /* @__PURE__ */ jsxs13("div", { className: "mt-1 flex flex-wrap items-center gap-1.5", children: [
+          /* @__PURE__ */ jsx19("span", { className: "inline-flex h-5 items-center rounded border border-border/60 px-1.5 text-[11px] text-muted-foreground", children: roleLabel(role) }),
+          isDefault ? /* @__PURE__ */ jsx19("span", { className: "inline-flex h-5 items-center rounded border border-border/60 px-1.5 text-[11px] text-muted-foreground", children: "Default" }) : null
+        ] })
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxs13("div", { className: "max-w-2xl", children: [
+      /* @__PURE__ */ jsx19("p", { className: "text-[11px] font-medium uppercase leading-4 text-muted-foreground", children: "Workspace" }),
+      /* @__PURE__ */ jsx19("h1", { className: "mt-1 text-[20px] font-semibold leading-7 tracking-tight text-foreground", children: "Workspace settings" }),
+      /* @__PURE__ */ jsx19("p", { className: "mt-2 text-[13px] leading-5 text-muted-foreground", children: "Manage workspace identity, runtime recovery, and irreversible workspace actions." })
+    ] })
+  ] });
+}
+function FieldNote({ children }) {
+  return /* @__PURE__ */ jsx19("p", { className: "text-[12px] leading-5 text-muted-foreground", children });
+}
+function roleLabel(role) {
+  if (!role) return "Loading role";
+  return role.charAt(0).toUpperCase() + role.slice(1);
+}
+var WORKSPACE_NAV_ITEMS = [
+  { href: "#general", label: "General", description: "Name and access" },
+  { href: "#runtime", label: "Runtime", description: "Provisioning state" },
+  { href: "#danger-zone", label: "Danger zone", description: "Permanent actions" }
+];
+function WorkspaceSettingsPage({ topBar } = {}) {
+  const workspace = useCurrentWorkspace();
+  const role = useWorkspaceRole();
+  const queryClient = useQueryClient6();
+  const navigate = useNavigate4();
+  const workspaceId = workspace?.id ?? "";
+  const [nameValue, setNameValue] = useState18(null);
+  const [nameError, setNameError] = useState18(null);
+  const [retryError, setRetryError] = useState18(null);
+  const [deleteConfirmName, setDeleteConfirmName] = useState18("");
+  const [deleteDialogOpen, setDeleteDialogOpen] = useState18(false);
+  const [deleteError, setDeleteError] = useState18(null);
+  const displayName = nameValue ?? workspace?.name ?? "";
+  const encodedWorkspaceId = encodeURIComponent(workspaceId);
+  const runtimeQuery = useQuery6({
+    queryKey: ["runtime", workspaceId],
+    queryFn: async () => {
+      try {
+        const data = await apiFetchJson(
+          `/api/v1/workspaces/${encodedWorkspaceId}/runtime`
+        );
+        return data.runtime;
+      } catch (err) {
+        const detail = getHttpErrorDetail(err);
+        if (detail.status === 404) return null;
+        throw err;
+      }
+    },
+    enabled: workspaceId.length > 0
+  });
+  const renameMutation = useMutation4({
+    mutationFn: async (name) => {
+      await apiFetch(`/api/v1/workspaces/${encodedWorkspaceId}`, {
+        method: "PUT",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ name })
+      });
+    },
+    onSuccess: () => {
+      setNameError(null);
+      queryClient.invalidateQueries({ queryKey: workspaceQueryKey(workspaceId) });
+      queryClient.invalidateQueries({ queryKey: WORKSPACES_QUERY_KEY });
+      setNameValue(null);
+    },
+    onError: (err) => {
+      const detail = getHttpErrorDetail(err);
+      setNameError(detail.message);
+    }
+  });
+  const retryMutation = useMutation4({
+    mutationFn: async () => {
+      await apiFetch(`/api/v1/workspaces/${encodedWorkspaceId}/runtime/retry`, {
+        method: "POST"
+      });
+    },
+    onSuccess: () => {
+      setRetryError(null);
+      queryClient.invalidateQueries({ queryKey: ["runtime", workspaceId] });
+    },
+    onError: (err) => {
+      const detail = getHttpErrorDetail(err);
+      setRetryError(detail.message);
+    }
+  });
+  const deleteMutation = useMutation4({
+    mutationFn: async () => {
+      await apiFetch(`/api/v1/workspaces/${encodedWorkspaceId}`, {
+        method: "DELETE"
+      });
+    },
+    onSuccess: () => {
+      queryClient.invalidateQueries({ queryKey: WORKSPACES_QUERY_KEY });
+      setDeleteDialogOpen(false);
+      navigate("/");
+    },
+    onError: (err) => {
+      const detail = getHttpErrorDetail(err);
+      if (detail.code === "destroy_failed") {
+        setDeleteError(`Destroy failed: ${detail.message}. Try again.`);
+      } else if (detail.code === "provision_failed" || detail.status === 409) {
+        setDeleteError(detail.message);
+      } else {
+        setDeleteError(detail.message);
+      }
+      setDeleteDialogOpen(false);
+    }
+  });
+  const handleSaveName = useCallback8(() => {
+    const trimmed = displayName.trim();
+    if (!trimmed || trimmed === workspace?.name) return;
+    renameMutation.mutate(trimmed);
+  }, [displayName, workspace?.name, renameMutation]);
+  const handleDelete = useCallback8(() => {
+    setDeleteError(null);
+    deleteMutation.mutate();
+  }, [deleteMutation]);
+  const runtime = runtimeQuery.data ?? null;
+  const hasRuntime = runtime !== null && runtimeQuery.isSuccess;
+  const nameChanged = nameValue !== null && nameValue.trim() !== workspace?.name;
+  const canEditName = role !== "viewer";
+  const canDeleteWorkspace = role === "owner" || role === null;
+  const workspaceName = workspace?.name ?? "Workspace";
+  const workspaceInitial2 = (workspace?.name?.trim()?.[0] ?? "W").toUpperCase();
+  const topBarNode = topBar === void 0 ? /* @__PURE__ */ jsx19(SettingsTopBar2, { workspaceId, workspaceName }) : topBar;
+  const navItems = hasRuntime ? WORKSPACE_NAV_ITEMS : WORKSPACE_NAV_ITEMS.filter((item) => item.href !== "#runtime");
+  return /* @__PURE__ */ jsxs13("main", { className: "boring-settings-shell", children: [
+    topBarNode,
+    /* @__PURE__ */ jsx19("div", { className: "boring-settings-scroll", children: /* @__PURE__ */ jsxs13("div", { className: "boring-settings-layout", children: [
+      /* @__PURE__ */ jsx19("aside", { className: "boring-settings-sidebar", children: /* @__PURE__ */ jsx19(UiSettingsNav2, { label: "Workspace settings", items: navItems }) }),
+      /* @__PURE__ */ jsxs13("div", { className: "boring-settings-content space-y-4", children: [
+        /* @__PURE__ */ jsx19(
+          SettingsPageHeader2,
+          {
+            workspaceName,
+            workspaceInitial: workspaceInitial2,
+            role,
+            isDefault: Boolean(workspace?.isDefault)
+          }
+        ),
+        /* @__PURE__ */ jsx19(
+          UiSettingsPanel2,
+          {
+            id: "general",
+            icon: /* @__PURE__ */ jsx19(Settings22, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+            title: "General",
+            description: "Keep the workspace name clear enough to scan in menus.",
+            footer: /* @__PURE__ */ jsxs13(Fragment3, { children: [
+              nameChanged ? /* @__PURE__ */ jsx19(
+                Button14,
+                {
+                  type: "button",
+                  variant: "ghost",
+                  size: "sm",
+                  onClick: () => {
+                    setNameValue(null);
+                    setNameError(null);
+                  },
+                  disabled: renameMutation.isPending,
+                  children: "Reset"
+                }
+              ) : null,
+              /* @__PURE__ */ jsx19(
+                Button14,
+                {
+                  "data-testid": "save-name",
+                  size: "sm",
+                  disabled: !nameChanged || renameMutation.isPending || !canEditName,
+                  onClick: handleSaveName,
+                  children: renameMutation.isPending ? "Saving..." : "Save changes"
+                }
+              )
+            ] }),
+            children: /* @__PURE__ */ jsxs13("div", { className: "space-y-4", children: [
+              nameError && /* @__PURE__ */ jsx19(Notice5, { "data-testid": "name-error", role: "alert", tone: "error", description: nameError }),
+              /* @__PURE__ */ jsxs13("div", { className: "space-y-2", children: [
+                /* @__PURE__ */ jsx19(Label9, { htmlFor: "workspace-name", className: "text-[12px]", children: "Workspace name" }),
+                /* @__PURE__ */ jsx19(
+                  Input9,
+                  {
+                    id: "workspace-name",
+                    "data-testid": "workspace-name-input",
+                    className: "h-8 text-[13px]",
+                    value: displayName,
+                    onChange: (e) => setNameValue(e.target.value),
+                    disabled: !canEditName,
+                    "aria-invalid": nameError ? "true" : "false"
+                  }
+                ),
+                /* @__PURE__ */ jsx19(FieldNote, { children: canEditName ? "Editors and owners can rename a workspace." : "Viewers can inspect settings, but cannot rename this workspace." })
+              ] })
+            ] })
+          }
+        ),
+        hasRuntime && /* @__PURE__ */ jsx19(
+          UiSettingsPanel2,
+          {
+            id: "runtime",
+            testId: "runtime-card",
+            icon: /* @__PURE__ */ jsx19(HardDrive, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+            title: "Runtime",
+            description: "Provisioning status for this workspace.",
+            children: /* @__PURE__ */ jsxs13("div", { className: "space-y-3", children: [
+              /* @__PURE__ */ jsxs13("div", { className: "flex min-h-10 flex-wrap items-center justify-between gap-3 rounded-md border border-border/50 bg-muted/10 px-3 py-2", children: [
+                /* @__PURE__ */ jsx19("span", { className: "text-[13px] font-medium", children: "State" }),
+                /* @__PURE__ */ jsx19(StatusBadge2, { "data-testid": `runtime-state-${runtime.state}`, tone: STATE_TONES[runtime.state] ?? "neutral", children: runtime.state })
+              ] }),
+              runtime.state === "ready" && runtime.volumePath && /* @__PURE__ */ jsxs13(
+                "div",
+                {
+                  "data-testid": "volume-path",
+                  className: "space-y-1 rounded-md border border-border/50 bg-muted/10 px-3 py-2",
+                  children: [
+                    /* @__PURE__ */ jsx19("p", { className: "text-[13px] font-medium", children: "Volume" }),
+                    /* @__PURE__ */ jsx19("code", { className: "block overflow-x-auto whitespace-nowrap text-[12px] text-muted-foreground", children: runtime.volumePath })
+                  ]
+                }
+              ),
+              runtime.state === "error" && runtime.lastError && /* @__PURE__ */ jsxs13(
+                "div",
+                {
+                  "data-testid": "runtime-error",
+                  role: "alert",
+                  className: "flex gap-2 rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-[13px] leading-5 text-destructive",
+                  children: [
+                    /* @__PURE__ */ jsx19(AlertCircle, { className: "mt-0.5 h-4 w-4 shrink-0", "aria-hidden": "true" }),
+                    runtime.lastError
+                  ]
+                }
+              ),
+              runtime.state === "error" && runtime.lastErrorOp === "provision" && /* @__PURE__ */ jsxs13("div", { className: "space-y-3", children: [
+                /* @__PURE__ */ jsxs13(
+                  Button14,
+                  {
+                    "data-testid": "retry-provision",
+                    variant: "outline",
+                    size: "sm",
+                    disabled: retryMutation.isPending,
+                    onClick: () => retryMutation.mutate(),
+                    children: [
+                      /* @__PURE__ */ jsx19(RefreshCw, { className: "h-4 w-4", "aria-hidden": "true" }),
+                      retryMutation.isPending ? "Retrying..." : "Retry provisioning"
+                    ]
+                  }
+                ),
+                retryError && /* @__PURE__ */ jsx19(Notice5, { "data-testid": "retry-error", role: "alert", tone: "error", description: retryError })
+              ] }),
+              runtime.state === "error" && runtime.lastErrorOp === "destroy" && /* @__PURE__ */ jsx19(
+                "p",
+                {
+                  "data-testid": "destroy-guidance",
+                  className: "rounded-md border border-border/50 bg-muted/10 px-3 py-2 text-[13px] leading-5 text-muted-foreground",
+                  children: "Destroy failed. Use the Delete button below to re-issue the delete."
+                }
+              )
+            ] })
+          }
+        ),
+        /* @__PURE__ */ jsx19(
+          UiSettingsPanel2,
+          {
+            id: "danger-zone",
+            testId: "danger-zone",
+            icon: /* @__PURE__ */ jsx19(ShieldAlert2, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+            title: "Danger zone",
+            description: "Permanently delete this workspace and all provisioned data.",
+            danger: true,
+            children: /* @__PURE__ */ jsxs13("div", { className: "space-y-4", children: [
+              deleteError && /* @__PURE__ */ jsx19(Notice5, { "data-testid": "delete-error", role: "alert", tone: "error", description: deleteError }),
+              !canDeleteWorkspace ? /* @__PURE__ */ jsx19("div", { className: "rounded-md border border-border/50 bg-muted/10 px-3 py-2 text-[13px] leading-5 text-muted-foreground", children: "Only workspace owners can delete this workspace." }) : null,
+              /* @__PURE__ */ jsx19(
+                UiSettingsActionRow2,
+                {
+                  title: "Delete workspace",
+                  description: "Delete the workspace record and re-issue cleanup for provisioned runtime data.",
+                  action: /* @__PURE__ */ jsxs13(AlertDialog3, { open: deleteDialogOpen, onOpenChange: setDeleteDialogOpen, children: [
+                    /* @__PURE__ */ jsxs13(
+                      Button14,
+                      {
+                        variant: "destructive",
+                        size: "sm",
+                        "data-testid": "delete-workspace",
+                        disabled: !canDeleteWorkspace,
+                        onClick: () => {
+                          setDeleteDialogOpen(true);
+                          setDeleteConfirmName("");
+                        },
+                        children: [
+                          /* @__PURE__ */ jsx19(Trash22, { className: "h-4 w-4", "aria-hidden": "true" }),
+                          "Delete workspace"
+                        ]
+                      }
+                    ),
+                    /* @__PURE__ */ jsxs13(AlertDialogContent3, { children: [
+                      /* @__PURE__ */ jsxs13(AlertDialogHeader3, { children: [
+                        /* @__PURE__ */ jsx19(AlertDialogTitle3, { children: "Delete workspace?" }),
+                        /* @__PURE__ */ jsxs13(AlertDialogDescription3, { children: [
+                          "This action cannot be undone. Type ",
+                          /* @__PURE__ */ jsx19("strong", { children: workspace?.name }),
+                          " to confirm."
+                        ] })
+                      ] }),
+                      /* @__PURE__ */ jsx19("div", { className: "px-6 pb-2", children: /* @__PURE__ */ jsx19(
+                        Input9,
+                        {
+                          "data-testid": "delete-confirm-input",
+                          className: "h-8 text-[13px]",
+                          placeholder: workspace?.name ?? "",
+                          value: deleteConfirmName,
+                          onChange: (e) => setDeleteConfirmName(e.target.value),
+                          autoComplete: "off"
+                        }
+                      ) }),
+                      /* @__PURE__ */ jsxs13(AlertDialogFooter3, { children: [
+                        /* @__PURE__ */ jsx19(AlertDialogCancel3, { children: "Cancel" }),
+                        /* @__PURE__ */ jsx19(
+                          Button14,
+                          {
+                            variant: "destructive",
+                            size: "sm",
+                            "data-testid": "confirm-delete",
+                            disabled: deleteConfirmName !== workspace?.name || deleteMutation.isPending,
+                            onClick: handleDelete,
+                            children: deleteMutation.isPending ? "Deleting..." : "Delete workspace"
+                          }
+                        )
+                      ] })
+                    ] })
+                  ] })
+                }
+              )
+            ] })
+          }
+        )
+      ] })
+    ] }) })
+  ] });
+}
+
+// src/front/CoreFront.tsx
+import { Fragment as Fragment4, jsx as jsx20, jsxs as jsxs14 } from "react/jsx-runtime";
+var CSP_NONCE_META_NAME = "boring-csp-nonce";
+function PlaceholderPage({ name }) {
+  return /* @__PURE__ */ jsxs14("div", { "data-testid": `placeholder-${name}`, children: [
+    name,
+    " (not yet implemented)"
+  ] });
+}
+function readCspNonceFromDom() {
+  if (typeof document === "undefined") return void 0;
+  const meta = document.querySelector(`meta[name="${CSP_NONCE_META_NAME}"]`);
+  const value = meta?.getAttribute("content")?.trim();
+  return value ? value : void 0;
+}
+function createDefaultQueryClient() {
+  return new QueryClient({
+    defaultOptions: {
+      queries: {
+        staleTime: 6e4,
+        retry: 1
+      }
+    }
+  });
+}
+function CoreFront({ children, authPages, cspNonce }) {
+  const queryClient = useMemo6(createDefaultQueryClient, []);
+  const resolvedCspNonce = useMemo6(
+    () => cspNonce ?? readCspNonceFromDom(),
+    [cspNonce]
+  );
+  const SignInPage2 = authPages?.signIn ?? SignInPage;
+  const SignUpPage2 = authPages?.signUp ?? SignUpPage;
+  const ForgotPasswordPage2 = authPages?.forgotPassword ?? ForgotPasswordPage;
+  const ResetPasswordPage2 = authPages?.resetPassword ?? ResetPasswordPage;
+  const VerifyEmailPage2 = authPages?.verifyEmail ?? VerifyEmailPage;
+  const UserSettingsPage2 = authPages?.userSettings ?? UserSettingsPage;
+  return /* @__PURE__ */ jsx20(HelmetProvider, { children: /* @__PURE__ */ jsx20(AppErrorBoundary, { children: /* @__PURE__ */ jsx20(QueryClientProvider, { client: queryClient, children: /* @__PURE__ */ jsx20(ConfigProvider, { children: /* @__PURE__ */ jsx20(ThemeProvider, { children: /* @__PURE__ */ jsx20(AuthProvider, { queryClient, children: /* @__PURE__ */ jsx20(UserIdentityProvider, { children: /* @__PURE__ */ jsx20(BrowserRouter, { children: /* @__PURE__ */ jsx20(WorkspaceAuthProvider, { children: /* @__PURE__ */ jsxs14(TopBarSlotProvider, { slot: /* @__PURE__ */ jsx20(UserMenu, {}), children: [
+    /* @__PURE__ */ jsx20(Helmet, { children: resolvedCspNonce ? /* @__PURE__ */ jsxs14(Fragment4, { children: [
+      /* @__PURE__ */ jsx20("meta", { name: CSP_NONCE_META_NAME, content: resolvedCspNonce }),
+      /* @__PURE__ */ jsx20(
+        "script",
+        {
+          type: "application/json",
+          nonce: resolvedCspNonce,
+          "data-boring-csp-nonce": "true",
+          children: JSON.stringify({ nonce: resolvedCspNonce })
+        }
+      )
+    ] }) : null }),
+    /* @__PURE__ */ jsx20(AuthGate, { publicPaths: ["/invites"], children: /* @__PURE__ */ jsx20(Suspense, { fallback: null, children: /* @__PURE__ */ jsxs14(Routes, { children: [
+      /* @__PURE__ */ jsx20(Route, { path: routes.signin, element: /* @__PURE__ */ jsx20(SignInPage2, {}) }),
+      /* @__PURE__ */ jsx20(Route, { path: routes.signup, element: /* @__PURE__ */ jsx20(SignUpPage2, {}) }),
+      /* @__PURE__ */ jsx20(Route, { path: routes.forgotPassword, element: /* @__PURE__ */ jsx20(ForgotPasswordPage2, {}) }),
+      /* @__PURE__ */ jsx20(Route, { path: routes.resetPassword, element: /* @__PURE__ */ jsx20(ResetPasswordPage2, {}) }),
+      /* @__PURE__ */ jsx20(Route, { path: routes.verifyEmail, element: /* @__PURE__ */ jsx20(VerifyEmailPage2, {}) }),
+      /* @__PURE__ */ jsx20(Route, { path: routes.callbackGithub, element: /* @__PURE__ */ jsx20(PlaceholderPage, { name: "github-callback" }) }),
+      /* @__PURE__ */ jsx20(Route, { path: routes.me, element: /* @__PURE__ */ jsx20(UserSettingsPage2, {}) }),
+      /* @__PURE__ */ jsx20(Route, { path: routes.workspaceMembers, element: /* @__PURE__ */ jsx20(MembersPage, {}) }),
+      /* @__PURE__ */ jsx20(Route, { path: "/workspace/:id/members", element: /* @__PURE__ */ jsx20(MembersPage, {}) }),
+      /* @__PURE__ */ jsx20(Route, { path: routes.workspaceInvites, element: /* @__PURE__ */ jsx20(InvitesPage, {}) }),
+      /* @__PURE__ */ jsx20(Route, { path: "/workspace/:id/invites", element: /* @__PURE__ */ jsx20(InvitesPage, {}) }),
+      /* @__PURE__ */ jsx20(Route, { path: routes.workspaceSettings, element: /* @__PURE__ */ jsx20(WorkspaceSettingsPage, {}) }),
+      /* @__PURE__ */ jsx20(Route, { path: "/workspace/:id/settings", element: /* @__PURE__ */ jsx20(WorkspaceSettingsPage, {}) }),
+      /* @__PURE__ */ jsx20(Route, { path: routes.inviteAccept, element: /* @__PURE__ */ jsx20(InviteAcceptPage, {}) }),
+      children
+    ] }) }) })
+  ] }) }) }) }) }) }) }) }) }) });
+}
+
+// src/front/commands/CoreCommandContributions.tsx
+import { useMemo as useMemo7, useState as useState19 } from "react";
+import { useNavigate as useNavigate5 } from "react-router-dom";
+
+// src/front/workspace/commands.ts
+function getWorkspaceCommands(workspaceId, navigate) {
+  return [
+    {
+      id: "workspace:settings",
+      label: "Workspace settings",
+      keywords: ["workspace", "settings", "edit", "rename", "delete"],
+      run: () => navigate(`/w/${workspaceId}/settings`)
+    },
+    {
+      id: "workspace:members",
+      label: "Manage members",
+      keywords: ["members", "team", "people", "roles"],
+      run: () => navigate(`/w/${workspaceId}/members`)
+    },
+    {
+      id: "workspace:invites",
+      label: "Invite to workspace",
+      keywords: ["invite", "add", "new member"],
+      run: () => navigate(`/w/${workspaceId}/invites`)
+    }
+  ];
+}
+
+// src/front/commands/CoreCommandContributions.tsx
+var CORE_COMMAND_SOURCE = "core";
+function toPaletteCommand(command) {
+  return {
+    id: command.id,
+    title: command.label,
+    keywords: command.keywords,
+    run: command.run,
+    pluginId: CORE_COMMAND_SOURCE
+  };
+}
+function useCoreCommands() {
+  const navigate = useNavigate5();
+  const signOut = useSignOut();
+  const workspace = useCurrentWorkspace();
+  const [isSigningOut, setIsSigningOut] = useState19(false);
+  return useMemo7(() => {
+    const result = [
+      {
+        id: "user:settings",
+        title: "Account settings",
+        keywords: ["user", "profile", "settings", "account", "me"],
+        pluginId: CORE_COMMAND_SOURCE,
+        run: () => navigate(routes.me)
+      },
+      {
+        id: "auth:sign-out",
+        title: "Sign out",
+        keywords: ["logout", "log out", "auth", "user"],
+        pluginId: CORE_COMMAND_SOURCE,
+        when: () => !isSigningOut,
+        run: () => {
+          if (isSigningOut) return;
+          setIsSigningOut(true);
+          void signOut().finally(() => {
+            setIsSigningOut(false);
+            navigate(routes.signin);
+          });
+        }
+      }
+    ];
+    if (workspace?.id) {
+      result.push(...getWorkspaceCommands(workspace.id, navigate).map(toPaletteCommand));
+    }
+    return result;
+  }, [isSigningOut, navigate, signOut, workspace?.id]);
+}
+
+// src/front/sanitize.ts
+import DOMPurify from "isomorphic-dompurify";
+function sanitizeMarkdown(input) {
+  return DOMPurify.sanitize(input, {
+    ALLOWED_TAGS: [
+      "p",
+      "br",
+      "strong",
+      "em",
+      "b",
+      "i",
+      "u",
+      "a",
+      "code",
+      "pre",
+      "blockquote",
+      "ul",
+      "ol",
+      "li",
+      "h1",
+      "h2",
+      "h3",
+      "h4",
+      "h5",
+      "h6",
+      "hr",
+      "img",
+      "table",
+      "thead",
+      "tbody",
+      "tr",
+      "th",
+      "td",
+      "span",
+      "div",
+      "sup",
+      "sub",
+      "del",
+      "ins",
+      "details",
+      "summary"
+    ],
+    ALLOWED_ATTR: ["href", "src", "alt", "title", "class", "id", "target", "rel"],
+    ALLOW_DATA_ATTR: false
+  });
+}
+function sanitizeToolOutput(input) {
+  return DOMPurify.sanitize(input, {
+    ALLOWED_TAGS: ["span", "code", "pre", "br", "strong", "em"],
+    ALLOWED_ATTR: ["class"],
+    ALLOW_DATA_ATTR: false
+  });
+}
+
+// src/front/debounce.ts
+function debounce(fn, ms) {
+  let timer;
+  const debounced = (...args) => {
+    if (timer) clearTimeout(timer);
+    timer = setTimeout(() => fn(...args), ms);
+  };
+  return debounced;
+}
+
+export {
+  AppErrorBoundary,
+  setApiBase,
+  getApiBase,
+  buildApiUrl,
+  getWsBase,
+  buildWsUrl,
+  openWebSocket,
+  apiFetch,
+  apiFetchJson,
+  getHttpErrorDetail,
+  routes,
+  routeHref,
+  ConfigProvider,
+  useConfig,
+  useConfigLoaded,
+  ThemeProvider,
+  useTheme,
+  useKeyboardShortcuts,
+  useViewportBreakpoint,
+  useReducedMotion,
+  useBlobUrl,
+  useCapabilities,
+  useWorkspaceMembers,
+  WorkspaceAuthProvider,
+  useCurrentWorkspace,
+  useWorkspaceRole,
+  getAuthClient,
+  AuthProvider,
+  useSession,
+  useSignIn,
+  useSignUp,
+  useVerifyEmail,
+  useSendVerificationEmail,
+  useChangePassword,
+  useSignOut,
+  UserIdentityProvider,
+  useUser,
+  SignInPage,
+  SignUpPage,
+  ForgotPasswordPage,
+  ResetPasswordPage,
+  VerifyEmailPage,
+  UserSettingsPage,
+  InviteAcceptPage,
+  AuthGate,
+  UserMenu,
+  WorkspaceSwitcher,
+  ThemeToggle,
+  InvitesPage,
+  MembersPage,
+  WorkspaceSettingsPage,
+  CoreFront,
+  getWorkspaceCommands,
+  useCoreCommands,
+  sanitizeMarkdown,
+  sanitizeToolOutput,
+  debounce
+};