@payez/next-mvp 4.0.1 → 4.0.3

package/dist/models/SessionModel.js

@@ -0,0 +1,136 @@
+"use strict";
+/**
+ * Session Model - Redis Session Data Structure
+ *
+ * This is the single source of truth for session data stored in Redis.
+ * The session contains all authentication state - the JWT cookie only
+ * stores the session ID (redisSessionId).
+ *
+ * FIELD NAMING CONVENTIONS:
+ * - idp* prefix: Tokens from PayEz IDP (identity provider)
+ * - oauth* prefix: Tokens from external OAuth providers (Google, etc.)
+ * - mfa* prefix: Multi-factor authentication related fields
+ *
+ * @version 2.0.0 - Normalized field names
+ * @since auth-refactor-2026-01
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SessionModel = void 0;
+// ============================================================================
+// SESSION MODEL CLASS
+// ============================================================================
+/**
+ * Session model class for working with session data.
+ *
+ * Provides typed access to session fields with normalized names.
+ */
+class SessionModel {
+    // Core Identity
+    userId;
+    email;
+    name;
+    roles;
+    // IDP Tokens
+    idpAccessToken;
+    idpRefreshToken;
+    idpAccessTokenExpires;
+    idpRefreshTokenExpires;
+    decodedAccessToken;
+    bearerKeyId;
+    // MFA State
+    mfaVerified;
+    mfaMethod;
+    mfaCompletedAt;
+    mfaExpiresAt;
+    mfaValidityHours;
+    authenticationMethods;
+    authenticationLevel;
+    // OAuth Provider
+    oauthProvider;
+    oauthProviderToken;
+    oauthProviderRefreshToken;
+    // Multi-Tenant
+    idpClientId;
+    merchantId;
+    constructor(data) {
+        // Core Identity
+        this.userId = data.userId;
+        this.email = data.email;
+        this.name = data.name;
+        this.roles = data.roles || [];
+        // IDP Tokens
+        this.idpAccessToken = data.idpAccessToken;
+        this.idpRefreshToken = data.idpRefreshToken;
+        this.idpAccessTokenExpires = data.idpAccessTokenExpires;
+        this.idpRefreshTokenExpires = data.idpRefreshTokenExpires;
+        this.decodedAccessToken = data.decodedAccessToken;
+        this.bearerKeyId = data.bearerKeyId;
+        // MFA State
+        this.mfaVerified = data.mfaVerified ?? false;
+        this.mfaMethod = data.mfaMethod;
+        this.mfaCompletedAt = data.mfaCompletedAt;
+        this.mfaExpiresAt = data.mfaExpiresAt;
+        this.mfaValidityHours = data.mfaValidityHours;
+        this.authenticationMethods = data.authenticationMethods;
+        this.authenticationLevel = data.authenticationLevel;
+        // OAuth Provider
+        this.oauthProvider = data.oauthProvider;
+        this.oauthProviderToken = data.oauthProviderToken;
+        this.oauthProviderRefreshToken = data.oauthProviderRefreshToken;
+        // Multi-Tenant
+        this.idpClientId = data.idpClientId;
+        this.merchantId = data.merchantId;
+    }
+    /**
+     * Check if the IDP access token has expired.
+     */
+    isAccessTokenExpired() {
+        return Date.now() >= this.idpAccessTokenExpires;
+    }
+    /**
+     * Check if the IDP refresh token has expired.
+     */
+    isRefreshTokenExpired() {
+        if (!this.idpRefreshTokenExpires)
+            return false;
+        return Date.now() >= this.idpRefreshTokenExpires;
+    }
+    /**
+     * Check if MFA has expired.
+     */
+    isMfaExpired() {
+        if (!this.mfaExpiresAt)
+            return false;
+        return Date.now() > this.mfaExpiresAt;
+    }
+    /**
+     * Convert to plain object for storage.
+     */
+    toJSON() {
+        return {
+            userId: this.userId,
+            email: this.email,
+            name: this.name,
+            roles: this.roles,
+            idpAccessToken: this.idpAccessToken,
+            idpRefreshToken: this.idpRefreshToken,
+            idpAccessTokenExpires: this.idpAccessTokenExpires,
+            idpRefreshTokenExpires: this.idpRefreshTokenExpires,
+            decodedAccessToken: this.decodedAccessToken,
+            bearerKeyId: this.bearerKeyId,
+            mfaVerified: this.mfaVerified,
+            mfaMethod: this.mfaMethod,
+            mfaCompletedAt: this.mfaCompletedAt,
+            mfaExpiresAt: this.mfaExpiresAt,
+            mfaValidityHours: this.mfaValidityHours,
+            authenticationMethods: this.authenticationMethods,
+            authenticationLevel: this.authenticationLevel,
+            oauthProvider: this.oauthProvider,
+            oauthProviderToken: this.oauthProviderToken,
+            oauthProviderRefreshToken: this.oauthProviderRefreshToken,
+            idpClientId: this.idpClientId,
+            merchantId: this.merchantId,
+        };
+    }
+}
+exports.SessionModel = SessionModel;

package/dist/pages/admin-login/page.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Admin Login Page for @payez/next-mvp
+ *
+ * A standalone username/password login page for admin access.
+ * NOT linked from any navigation - only accessible via direct URL.
+ *
+ * USAGE:
+ * 1. Create app/account-auth/admin-login/page.tsx in your Next.js app
+ * 2. Re-export this component:
+ *    export { default } from '@payez/next-mvp/pages/admin-login';
+ *
+ * CUSTOMIZATION:
+ * - Override styles via CSS variables or wrap with your own component
+ * - Provide custom branding via ThemeProvider
+ */
+import React from 'react';
+interface AdminLoginFormProps {
+    /** Optional custom title (default: "Admin Login") */
+    title?: string;
+    /** Optional custom subtitle (default: "Authorized personnel only") */
+    subtitle?: string;
+    /** Optional callback URL override */
+    callbackUrl?: string;
+    /** Optional logo component to render */
+    logo?: React.ReactNode;
+}
+declare function AdminLoginForm({ title, subtitle, callbackUrl: propCallbackUrl, logo, }: AdminLoginFormProps): import("react/jsx-runtime").JSX.Element;
+declare function AdminLoginFallback(): import("react/jsx-runtime").JSX.Element;
+export default function AdminLoginPage(props: AdminLoginFormProps): import("react/jsx-runtime").JSX.Element;
+export { AdminLoginForm, AdminLoginFallback };
+export type { AdminLoginFormProps };

package/dist/pages/admin-login/page.js

@@ -0,0 +1,73 @@
+"use strict";
+/**
+ * Admin Login Page for @payez/next-mvp
+ *
+ * A standalone username/password login page for admin access.
+ * NOT linked from any navigation - only accessible via direct URL.
+ *
+ * USAGE:
+ * 1. Create app/account-auth/admin-login/page.tsx in your Next.js app
+ * 2. Re-export this component:
+ *    export { default } from '@payez/next-mvp/pages/admin-login';
+ *
+ * CUSTOMIZATION:
+ * - Override styles via CSS variables or wrap with your own component
+ * - Provide custom branding via ThemeProvider
+ */
+'use client';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = AdminLoginPage;
+exports.AdminLoginForm = AdminLoginForm;
+exports.AdminLoginFallback = AdminLoginFallback;
+const jsx_runtime_1 = require("react/jsx-runtime");
+const react_1 = require("react");
+const better_auth_client_1 = require("../../client/better-auth-client");
+const navigation_1 = require("next/navigation");
+const react_2 = require("react");
+const useTheme_1 = require("../../theme/useTheme");
+function AdminLoginForm({ title = 'Admin Login', subtitle = 'Authorized personnel only', callbackUrl: propCallbackUrl, logo, }) {
+    const searchParams = (0, navigation_1.useSearchParams)();
+    const callbackUrl = propCallbackUrl || searchParams?.get('callbackUrl') || '/dashboard';
+    const branding = (0, useTheme_1.useBranding)();
+    const colors = (0, useTheme_1.useColors)();
+    const [email, setEmail] = (0, react_1.useState)('');
+    const [password, setPassword] = (0, react_1.useState)('');
+    const [showPassword, setShowPassword] = (0, react_1.useState)(false);
+    const [isLoading, setIsLoading] = (0, react_1.useState)(false);
+    const [error, setError] = (0, react_1.useState)(null);
+    const handleSubmit = async (e) => {
+        e.preventDefault();
+        setIsLoading(true);
+        setError(null);
+        try {
+            const result = await better_auth_client_1.authClient.signIn.email({
+                email,
+                password,
+                callbackURL: callbackUrl,
+            });
+            if (result?.error) {
+                const errorMsg = typeof result.error === 'object'
+                    ? result.error.message || 'Invalid credentials'
+                    : String(result.error);
+                setError(errorMsg);
+            }
+            else if (result?.data) {
+                // Redirect to verify-code for 2FA or directly to callback
+                window.location.href = `/account-auth/verify-code?callbackUrl=${encodeURIComponent(callbackUrl)}`;
+            }
+        }
+        catch (err) {
+            setError('An unexpected error occurred');
+        }
+        finally {
+            setIsLoading(false);
+        }
+    };
+    return ((0, jsx_runtime_1.jsx)("div", { className: "min-h-screen flex items-center justify-center bg-gradient-to-br from-slate-700 via-slate-800 to-slate-900 p-4", children: (0, jsx_runtime_1.jsxs)("div", { className: "bg-white rounded-2xl shadow-2xl p-8 max-w-md w-full", children: [logo && ((0, jsx_runtime_1.jsx)("div", { className: "flex justify-center mb-6", children: logo })), (0, jsx_runtime_1.jsx)("h1", { className: "text-2xl font-bold text-center mb-2 text-slate-900", children: title }), (0, jsx_runtime_1.jsx)("p", { className: "text-center mb-8 text-slate-600", children: subtitle }), error && ((0, jsx_runtime_1.jsx)("div", { className: "mb-6 px-4 py-3 rounded-lg bg-red-500 text-white text-center text-sm", children: error })), (0, jsx_runtime_1.jsxs)("form", { onSubmit: handleSubmit, className: "space-y-4", children: [(0, jsx_runtime_1.jsxs)("div", { children: [(0, jsx_runtime_1.jsx)("label", { htmlFor: "admin-email", className: "block text-sm font-medium mb-2 text-slate-700", children: "Email" }), (0, jsx_runtime_1.jsx)("input", { id: "admin-email", type: "email", value: email, onChange: (e) => setEmail(e.target.value), required: true, disabled: isLoading, autoComplete: "email", className: "w-full px-4 py-3 rounded-lg border border-slate-300 bg-white text-slate-900 placeholder-slate-400 focus:outline-none focus:ring-2 focus:ring-slate-500 focus:border-transparent disabled:opacity-50 disabled:cursor-not-allowed", placeholder: "admin@example.com" })] }), (0, jsx_runtime_1.jsxs)("div", { children: [(0, jsx_runtime_1.jsx)("label", { htmlFor: "admin-password", className: "block text-sm font-medium mb-2 text-slate-700", children: "Password" }), (0, jsx_runtime_1.jsxs)("div", { className: "relative", children: [(0, jsx_runtime_1.jsx)("input", { id: "admin-password", type: showPassword ? 'text' : 'password', value: password, onChange: (e) => setPassword(e.target.value), required: true, disabled: isLoading, autoComplete: "current-password", className: "w-full px-4 py-3 pr-12 rounded-lg border border-slate-300 bg-white text-slate-900 placeholder-slate-400 focus:outline-none focus:ring-2 focus:ring-slate-500 focus:border-transparent disabled:opacity-50 disabled:cursor-not-allowed", placeholder: "Enter your password" }), (0, jsx_runtime_1.jsx)("button", { type: "button", onClick: () => setShowPassword(!showPassword), className: "absolute right-3 top-1/2 transform -translate-y-1/2 text-slate-500 hover:text-slate-700", "aria-label": showPassword ? 'Hide password' : 'Show password', children: showPassword ? ((0, jsx_runtime_1.jsx)("svg", { xmlns: "http://www.w3.org/2000/svg", viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", className: "w-5 h-5", children: (0, jsx_runtime_1.jsx)("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M13.875 18.825A10.05 10.05 0 0112 19c-4.478 0-8.268-2.943-9.543-7a9.97 9.97 0 011.563-3.029m5.858.908a3 3 0 114.243 4.243M9.878 9.878l4.242 4.242M9.878 9.878L6.464 6.464m7.535 7.535l3.415 3.414M3 3l3.464 3.464M21 21l-3.415-3.414" }) })) : ((0, jsx_runtime_1.jsxs)("svg", { xmlns: "http://www.w3.org/2000/svg", viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", className: "w-5 h-5", children: [(0, jsx_runtime_1.jsx)("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M15 12a3 3 0 11-6 0 3 3 0 016 0z" }), (0, jsx_runtime_1.jsx)("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M2.458 12C3.732 7.943 7.523 5 12 5c4.478 0 8.268 2.943 9.542 7-1.274 4.057-5.064 7-9.542 7-4.477 0-8.268-2.943-9.542-7z" })] })) })] })] }), (0, jsx_runtime_1.jsx)("button", { type: "submit", disabled: isLoading, className: "w-full py-3 px-4 rounded-lg font-semibold text-white transition-colors bg-slate-700 hover:bg-slate-800 disabled:bg-slate-400 disabled:cursor-not-allowed", children: isLoading ? ((0, jsx_runtime_1.jsxs)("span", { className: "flex items-center justify-center", children: [(0, jsx_runtime_1.jsxs)("svg", { className: "animate-spin -ml-1 mr-3 h-5 w-5 text-white", fill: "none", viewBox: "0 0 24 24", children: [(0, jsx_runtime_1.jsx)("circle", { className: "opacity-25", cx: "12", cy: "12", r: "10", stroke: "currentColor", strokeWidth: "4" }), (0, jsx_runtime_1.jsx)("path", { className: "opacity-75", fill: "currentColor", d: "M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4zm2 5.291A7.962 7.962 0 014 12H0c0 3.042 1.135 5.824 3 7.938l3-2.647z" })] }), "Signing in..."] })) : ('Sign In') })] }), (0, jsx_runtime_1.jsxs)("p", { className: "mt-6 text-center text-xs text-slate-500", children: ["This login is for authorized administrators only.", (0, jsx_runtime_1.jsx)("br", {}), "All access attempts are logged."] })] }) }));
+}
+function AdminLoginFallback() {
+    return ((0, jsx_runtime_1.jsx)("div", { className: "min-h-screen flex items-center justify-center bg-gradient-to-br from-slate-700 via-slate-800 to-slate-900", children: (0, jsx_runtime_1.jsxs)("div", { className: "text-center", children: [(0, jsx_runtime_1.jsxs)("svg", { className: "animate-spin h-10 w-10 mx-auto text-white", fill: "none", viewBox: "0 0 24 24", children: [(0, jsx_runtime_1.jsx)("circle", { className: "opacity-25", cx: "12", cy: "12", r: "10", stroke: "currentColor", strokeWidth: "4" }), (0, jsx_runtime_1.jsx)("path", { className: "opacity-75", fill: "currentColor", d: "M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4zm2 5.291A7.962 7.962 0 014 12H0c0 3.042 1.135 5.824 3 7.938l3-2.647z" })] }), (0, jsx_runtime_1.jsx)("p", { className: "mt-4 text-slate-400", children: "Loading..." })] }) }));
+}
+function AdminLoginPage(props) {
+    return ((0, jsx_runtime_1.jsx)(react_2.Suspense, { fallback: (0, jsx_runtime_1.jsx)(AdminLoginFallback, {}), children: (0, jsx_runtime_1.jsx)(AdminLoginForm, { ...props }) }));
+}

package/dist/pages/admin-page-permissions/PagePermissionsAdminPage.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Page Permissions Admin Page (/admin/page-permissions)
+ *
+ * Design: Aurum (DESIGN_SPEC.md)
+ * Control which roles can access which pages
+ *
+ * Three sections:
+ * 1. Search & Filters — Find pages by route or category
+ * 2. Pages & Role Requirements — Table showing pages and their role assignments
+ * 3. Change History — Audit log of permission changes
+ *
+ * Design Principles:
+ * - No shadows, gradients, or animation
+ * - One accent color (blue #0066cc)
+ * - Inline interactions (no modals)
+ * - Scan-friendly tables and lists
+ */
+export default function PagePermissionsAdminPage(): import("react/jsx-runtime").JSX.Element;

package/dist/pages/admin-page-permissions/PagePermissionsAdminPage.js

@@ -0,0 +1,276 @@
+"use strict";
+/**
+ * Page Permissions Admin Page (/admin/page-permissions)
+ *
+ * Design: Aurum (DESIGN_SPEC.md)
+ * Control which roles can access which pages
+ *
+ * Three sections:
+ * 1. Search & Filters — Find pages by route or category
+ * 2. Pages & Role Requirements — Table showing pages and their role assignments
+ * 3. Change History — Audit log of permission changes
+ *
+ * Design Principles:
+ * - No shadows, gradients, or animation
+ * - One accent color (blue #0066cc)
+ * - Inline interactions (no modals)
+ * - Scan-friendly tables and lists
+ */
+'use client';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = PagePermissionsAdminPage;
+const jsx_runtime_1 = require("react/jsx-runtime");
+const react_1 = require("react");
+// Mock data
+const MOCK_PAGES = [
+    {
+        id: 1,
+        route: '/dashboard',
+        displayName: 'Dashboard',
+        requires2fa: false,
+        roles: [],
+        category: 'user',
+    },
+    {
+        id: 2,
+        route: '/admin',
+        displayName: 'Admin Dashboard',
+        requires2fa: true,
+        roles: ['SiteAdmin', 'ClientAdmin'],
+        category: 'admin',
+    },
+    {
+        id: 3,
+        route: '/admin/users',
+        displayName: 'User Management',
+        requires2fa: true,
+        roles: ['SiteAdmin'],
+        category: 'admin',
+    },
+    {
+        id: 4,
+        route: '/account/security',
+        displayName: 'Security Settings',
+        requires2fa: true,
+        roles: [],
+        category: 'account',
+    },
+    {
+        id: 5,
+        route: '/interview-practice',
+        displayName: 'Interview Practice',
+        requires2fa: false,
+        roles: ['ClientAdmin'],
+        category: 'user',
+    },
+];
+const MOCK_CHANGES = [
+    {
+        timestamp: '3/10/2026, 10:30 AM',
+        event: '/admin/users role requirement changed: Added ClientAdmin by Admin User',
+    },
+    {
+        timestamp: '3/10/2026, 10:15 AM',
+        event: '/dashboard updated: 2FA requirement removed by Admin User',
+    },
+    {
+        timestamp: '3/9/2026, 3:45 PM',
+        event: '/interview-practice role requirement changed: Added SiteAdmin by Admin User',
+    },
+];
+const CATEGORIES = ['All Pages', 'Admin Pages', 'Account Pages', 'User Pages'];
+const categoryMap = {
+    'All Pages': '',
+    'Admin Pages': 'admin',
+    'Account Pages': 'account',
+    'User Pages': 'user',
+};
+function PagePermissionsAdminPage() {
+    const [pages, setPages] = (0, react_1.useState)(MOCK_PAGES);
+    const [searchQuery, setSearchQuery] = (0, react_1.useState)('');
+    const [activeFilter, setActiveFilter] = (0, react_1.useState)('All Pages');
+    const [message, setMessage] = (0, react_1.useState)(null);
+    const [editingPageId, setEditingPageId] = (0, react_1.useState)(null);
+    const [tempRoles, setTempRoles] = (0, react_1.useState)([]);
+    const filteredPages = pages.filter((page) => {
+        const matchesSearch = page.route.toLowerCase().includes(searchQuery.toLowerCase()) ||
+            page.displayName.toLowerCase().includes(searchQuery.toLowerCase());
+        const categoryFilter = categoryMap[activeFilter];
+        const matchesCategory = !categoryFilter || page.category === categoryFilter;
+        return matchesSearch && matchesCategory;
+    });
+    const handleEditRoles = (pageId, currentRoles) => {
+        setEditingPageId(pageId);
+        setTempRoles([...currentRoles]);
+    };
+    const handleToggleRole = (role) => {
+        setTempRoles((prev) => prev.includes(role) ? prev.filter((r) => r !== role) : [...prev, role]);
+    };
+    const handleSaveRoles = (pageId) => {
+        setPages((prev) => prev.map((p) => (p.id === pageId ? { ...p, roles: tempRoles } : p)));
+        setMessage('Page updated');
+        setEditingPageId(null);
+        setTimeout(() => setMessage(null), 3000);
+    };
+    const handleRemoveRole = (pageId, role) => {
+        setPages((prev) => prev.map((p) => p.id === pageId ? { ...p, roles: p.roles.filter((r) => r !== role) } : p));
+        setMessage('Role removed');
+        setTimeout(() => setMessage(null), 3000);
+    };
+    return ((0, jsx_runtime_1.jsx)("div", { style: { background: '#f8f8f8', minHeight: '100vh', padding: '40px 20px' }, children: (0, jsx_runtime_1.jsxs)("div", { style: { maxWidth: '1200px', margin: '0 auto' }, children: [(0, jsx_runtime_1.jsxs)("div", { style: { marginBottom: '40px' }, children: [(0, jsx_runtime_1.jsx)("h1", { style: {
+                                fontSize: '32px',
+                                fontWeight: 400,
+                                color: '#333',
+                                marginBottom: '8px',
+                            }, children: "Page Permissions" }), (0, jsx_runtime_1.jsx)("p", { style: { fontSize: '16px', color: '#666', fontWeight: 400 }, children: "Control which roles can access which pages" })] }), (0, jsx_runtime_1.jsx)("div", { style: { height: '1px', background: '#e0e0e0', margin: '24px 0' } }), (0, jsx_runtime_1.jsxs)("section", { style: { marginBottom: '40px' }, children: [(0, jsx_runtime_1.jsx)("div", { style: { marginBottom: '16px' }, children: (0, jsx_runtime_1.jsx)("input", { type: "text", placeholder: "Search pages...", value: searchQuery, onChange: (e) => setSearchQuery(e.target.value), style: {
+                                    width: '100%',
+                                    padding: '10px 14px',
+                                    fontSize: '14px',
+                                    border: '1px solid #e0e0e0',
+                                    borderRadius: '4px',
+                                    background: 'white',
+                                    boxSizing: 'border-box',
+                                } }) }), (0, jsx_runtime_1.jsx)("div", { style: { display: 'flex', gap: '8px', flexWrap: 'wrap' }, children: CATEGORIES.map((cat) => ((0, jsx_runtime_1.jsx)("button", { onClick: () => setActiveFilter(cat), style: {
+                                    padding: '8px 14px',
+                                    fontSize: '13px',
+                                    border: activeFilter === cat ? 'none' : '1px solid #e0e0e0',
+                                    borderRadius: '4px',
+                                    background: activeFilter === cat ? '#0066cc' : 'white',
+                                    color: activeFilter === cat ? 'white' : '#333',
+                                    cursor: 'pointer',
+                                    transition: 'all 0.2s',
+                                }, onMouseEnter: (e) => {
+                                    if (activeFilter !== cat) {
+                                        e.currentTarget.style.background = '#f5f5f5';
+                                    }
+                                }, onMouseLeave: (e) => {
+                                    if (activeFilter !== cat) {
+                                        e.currentTarget.style.background = 'white';
+                                    }
+                                }, children: cat }, cat))) })] }), (0, jsx_runtime_1.jsx)("div", { style: { height: '1px', background: '#e0e0e0', margin: '24px 0' } }), message && ((0, jsx_runtime_1.jsxs)("div", { style: {
+                        padding: '8px 12px',
+                        background: '#e8f5e9',
+                        color: '#2e7d32',
+                        borderRadius: '4px',
+                        marginBottom: '12px',
+                        fontSize: '13px',
+                    }, children: ["\u2713 ", message] })), (0, jsx_runtime_1.jsxs)("section", { style: { marginBottom: '60px' }, children: [(0, jsx_runtime_1.jsx)("h2", { style: {
+                                fontSize: '18px',
+                                fontWeight: 400,
+                                color: '#666',
+                                marginBottom: '24px',
+                                textTransform: 'uppercase',
+                                letterSpacing: '1px',
+                            }, children: "Pages & Permissions" }), (0, jsx_runtime_1.jsxs)("table", { style: {
+                                width: '100%',
+                                borderCollapse: 'collapse',
+                                background: 'white',
+                                border: '1px solid #e0e0e0',
+                                borderRadius: '4px',
+                                overflow: 'hidden',
+                            }, children: [(0, jsx_runtime_1.jsx)("thead", { children: (0, jsx_runtime_1.jsxs)("tr", { style: { background: '#f8f8f8', borderBottom: '1px solid #e0e0e0' }, children: [(0, jsx_runtime_1.jsx)("th", { style: {
+                                                    padding: '16px',
+                                                    textAlign: 'left',
+                                                    fontSize: '12px',
+                                                    color: '#999',
+                                                    textTransform: 'uppercase',
+                                                    letterSpacing: '0.5px',
+                                                    fontWeight: 'normal',
+                                                }, children: "Route" }), (0, jsx_runtime_1.jsx)("th", { style: {
+                                                    padding: '16px',
+                                                    textAlign: 'left',
+                                                    fontSize: '12px',
+                                                    color: '#999',
+                                                    textTransform: 'uppercase',
+                                                    letterSpacing: '0.5px',
+                                                    fontWeight: 'normal',
+                                                }, children: "Display Name" }), (0, jsx_runtime_1.jsx)("th", { style: {
+                                                    padding: '16px',
+                                                    textAlign: 'center',
+                                                    fontSize: '12px',
+                                                    color: '#999',
+                                                    textTransform: 'uppercase',
+                                                    letterSpacing: '0.5px',
+                                                    fontWeight: 'normal',
+                                                }, children: "2FA" }), (0, jsx_runtime_1.jsx)("th", { style: {
+                                                    padding: '16px',
+                                                    textAlign: 'left',
+                                                    fontSize: '12px',
+                                                    color: '#999',
+                                                    textTransform: 'uppercase',
+                                                    letterSpacing: '0.5px',
+                                                    fontWeight: 'normal',
+                                                }, children: "Roles" })] }) }), (0, jsx_runtime_1.jsx)("tbody", { children: filteredPages.map((page) => ((0, jsx_runtime_1.jsxs)("tr", { style: {
+                                            borderBottom: '1px solid #e0e0e0',
+                                            height: '48px',
+                                        }, onMouseEnter: (e) => (e.currentTarget.style.background = '#f5f5f5'), onMouseLeave: (e) => (e.currentTarget.style.background = 'white'), children: [(0, jsx_runtime_1.jsx)("td", { style: {
+                                                    padding: '16px',
+                                                    fontSize: '12px',
+                                                    fontFamily: 'Courier New, monospace',
+                                                    color: '#333',
+                                                }, title: "Click to copy", children: page.route }), (0, jsx_runtime_1.jsx)("td", { style: { padding: '16px', fontSize: '14px', color: '#333' }, children: page.displayName }), (0, jsx_runtime_1.jsx)("td", { style: { padding: '16px', textAlign: 'center', fontSize: '14px' }, children: page.requires2fa ? '✓' : '✕' }), (0, jsx_runtime_1.jsx)("td", { style: { padding: '16px', fontSize: '13px' }, children: editingPageId === page.id ? ((0, jsx_runtime_1.jsxs)("div", { style: { display: 'flex', gap: '12px', alignItems: 'center' }, children: [(0, jsx_runtime_1.jsx)("div", { style: { display: 'flex', gap: '12px' }, children: ['SiteAdmin', 'ClientAdmin'].map((role) => ((0, jsx_runtime_1.jsxs)("label", { style: {
+                                                                    display: 'flex',
+                                                                    alignItems: 'center',
+                                                                    gap: '6px',
+                                                                    cursor: 'pointer',
+                                                                }, children: [(0, jsx_runtime_1.jsx)("input", { type: "checkbox", checked: tempRoles.includes(role), onChange: () => handleToggleRole(role), style: { cursor: 'pointer' } }), (0, jsx_runtime_1.jsx)("span", { style: { fontSize: '12px', color: '#333' }, children: role })] }, role))) }), (0, jsx_runtime_1.jsxs)("div", { style: { display: 'flex', gap: '6px' }, children: [(0, jsx_runtime_1.jsx)("button", { onClick: () => handleSaveRoles(page.id), style: {
+                                                                        padding: '6px 10px',
+                                                                        background: '#0066cc',
+                                                                        color: 'white',
+                                                                        border: 'none',
+                                                                        borderRadius: '4px',
+                                                                        cursor: 'pointer',
+                                                                        fontSize: '11px',
+                                                                    }, onMouseEnter: (e) => (e.currentTarget.style.background = '#0052a3'), onMouseLeave: (e) => (e.currentTarget.style.background = '#0066cc'), children: "Save" }), (0, jsx_runtime_1.jsx)("button", { onClick: () => setEditingPageId(null), style: {
+                                                                        padding: '6px 10px',
+                                                                        background: 'white',
+                                                                        color: '#333',
+                                                                        border: '1px solid #e0e0e0',
+                                                                        borderRadius: '4px',
+                                                                        cursor: 'pointer',
+                                                                        fontSize: '11px',
+                                                                    }, onMouseEnter: (e) => (e.currentTarget.style.background = '#f5f5f5'), onMouseLeave: (e) => (e.currentTarget.style.background = 'white'), children: "Cancel" })] })] })) : ((0, jsx_runtime_1.jsx)("div", { style: { display: 'flex', gap: '6px', alignItems: 'center' }, children: page.roles.length > 0 ? ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [page.roles.map((role) => ((0, jsx_runtime_1.jsxs)("span", { style: {
+                                                                    background: '#e3f2fd',
+                                                                    color: '#0066cc',
+                                                                    padding: '4px 8px',
+                                                                    borderRadius: '3px',
+                                                                    fontSize: '12px',
+                                                                    display: 'inline-flex',
+                                                                    alignItems: 'center',
+                                                                    gap: '4px',
+                                                                }, children: [role, (0, jsx_runtime_1.jsx)("button", { onClick: () => handleRemoveRole(page.id, role), style: {
+                                                                            background: 'none',
+                                                                            border: 'none',
+                                                                            color: '#0066cc',
+                                                                            cursor: 'pointer',
+                                                                            fontSize: '12px',
+                                                                            padding: '0',
+                                                                            lineHeight: '1',
+                                                                        }, children: "\u2715" })] }, role))), (0, jsx_runtime_1.jsx)("button", { onClick: () => handleEditRoles(page.id, page.roles), style: {
+                                                                    padding: '4px 8px',
+                                                                    background: 'white',
+                                                                    color: '#0066cc',
+                                                                    border: '1px solid #e0e0e0',
+                                                                    borderRadius: '3px',
+                                                                    cursor: 'pointer',
+                                                                    fontSize: '11px',
+                                                                }, onMouseEnter: (e) => (e.currentTarget.style.background = '#f5f5f5'), onMouseLeave: (e) => (e.currentTarget.style.background = 'white'), children: "+" })] })) : ((0, jsx_runtime_1.jsx)("button", { onClick: () => handleEditRoles(page.id, []), style: {
+                                                            padding: '4px 8px',
+                                                            background: 'white',
+                                                            color: '#0066cc',
+                                                            border: '1px solid #e0e0e0',
+                                                            borderRadius: '3px',
+                                                            cursor: 'pointer',
+                                                            fontSize: '11px',
+                                                        }, onMouseEnter: (e) => (e.currentTarget.style.background = '#f5f5f5'), onMouseLeave: (e) => (e.currentTarget.style.background = 'white'), children: "+ Add Role" })) })) })] }, page.id))) })] }), (0, jsx_runtime_1.jsxs)("div", { style: { marginTop: '12px', fontSize: '12px', color: '#999' }, children: [filteredPages.length, " of ", pages.length, " pages shown"] })] }), (0, jsx_runtime_1.jsx)("div", { style: { height: '1px', background: '#e0e0e0', margin: '24px 0' } }), (0, jsx_runtime_1.jsxs)("section", { children: [(0, jsx_runtime_1.jsx)("h2", { style: {
+                                fontSize: '18px',
+                                fontWeight: 400,
+                                color: '#666',
+                                marginBottom: '24px',
+                                textTransform: 'uppercase',
+                                letterSpacing: '1px',
+                            }, children: "Recent Changes" }), (0, jsx_runtime_1.jsx)("div", { style: { background: 'white', border: '1px solid #e0e0e0', borderRadius: '4px' }, children: MOCK_CHANGES.map((change, idx) => ((0, jsx_runtime_1.jsxs)("div", { style: {
+                                    padding: '16px',
+                                    borderBottom: idx < MOCK_CHANGES.length - 1 ? '1px solid #e0e0e0' : 'none',
+                                }, children: [(0, jsx_runtime_1.jsx)("div", { style: { fontSize: '12px', color: '#999', marginBottom: '4px' }, children: change.timestamp }), (0, jsx_runtime_1.jsx)("div", { style: { fontSize: '14px', color: '#333' }, children: change.event })] }, idx))) })] })] }) }));
+}

package/dist/pages/admin-page-permissions/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Page Permissions Admin exports
+ *
+ * - PagePermissionsAdminPage: Admin interface for managing page permissions (/admin/page-permissions)
+ */
+export { default as PagePermissionsAdminPage } from './PagePermissionsAdminPage';

package/dist/pages/admin-page-permissions/index.js

@@ -0,0 +1,13 @@
+"use strict";
+/**
+ * Page Permissions Admin exports
+ *
+ * - PagePermissionsAdminPage: Admin interface for managing page permissions (/admin/page-permissions)
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PagePermissionsAdminPage = void 0;
+var PagePermissionsAdminPage_1 = require("./PagePermissionsAdminPage");
+Object.defineProperty(exports, "PagePermissionsAdminPage", { enumerable: true, get: function () { return __importDefault(PagePermissionsAdminPage_1).default; } });

package/dist/pages/admin-roles/RolesAdminPage.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Role Management Admin Page (/admin/roles)
+ *
+ * Design: Aurum (DESIGN_SPEC.md)
+ * Three sections:
+ * 1. Available Roles — Cards showing SiteAdmin, ClientAdmin
+ * 2. User Assignments — Table with inline role dropdowns
+ * 3. Change History — Audit log of role changes
+ *
+ * Design Principles:
+ * - No shadows, gradients, or animation
+ * - One accent color (blue #0066cc)
+ * - Inline interactions (no modals)
+ * - Scan-friendly tables and lists
+ */
+export default function RolesAdminPage(): import("react/jsx-runtime").JSX.Element;