@taskforcehq/taskforce 0.3.170 → 0.3.301

package/dist/TaskforceCore.js

@@ -1,18 +1,53 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { useCallback, useEffect, useMemo, useState } from 'react';
-import { MemoryRouter, useInRouterContext, useLocation, useNavigate } from 'react-router-dom';
+import { MemoryRouter, Navigate, useInRouterContext, useLocation, useNavigate } from 'react-router-dom';
 import { useTaskforce } from './hooks/useTaskforce';
 import { WidgetView } from './components/views/WidgetView';
 import { StandaloneLayout } from './components/views/StandaloneLayout';
 import styles from './Taskforce.module.css';
+import shellStyles from './components/views/WorkspaceShell.module.css';
+import authStyles from './components/views/AuthShell.module.css';
 import { t } from './localization';
 import { resolveWorkspaceLifecycleState } from './utils/workspaceLifecycle';
-import logo from './assets/branding/logos/logo_white_01.png';
+import { listBuiltInTaxonomyLibraryPacks } from './shared/taxonomyLibrary.js';
+import logoLight from './assets/branding/logos/logo_light.svg';
+import logoDark from './assets/branding/logos/logo_dark.svg';
 import taskforceBg from './assets/images/taskforce.png';
+import { isLightThemeFamily } from './utils/theme';
+function isDebugModeEnabled() {
+    const runtimeOverride = globalThis.__DEBUG_MODE__;
+    if (typeof runtimeOverride === 'boolean')
+        return runtimeOverride;
+    return typeof __DEBUG_MODE__ !== 'undefined' && __DEBUG_MODE__;
+}
+function buildDebugRegistrationCredentials() {
+    const suffix = Date.now().toString(36);
+    return {
+        email: `debug+${suffix}@example.com`,
+        password: 'DebugPass123!',
+        displayName: `Debug ${suffix.slice(-4).toUpperCase()}`
+    };
+}
+function defaultSetupTaxonomySections(pack) {
+    return {
+        categories: Boolean(pack?.categories?.length),
+        types: Boolean(pack?.types?.length),
+        priorities: Boolean(pack?.priorities?.length),
+    };
+}
 function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange, onHeaderMouseDown, isDragging, onClose, mode = 'standalone' }) {
     const location = useLocation();
+    const routeQuery = useMemo(() => new URLSearchParams(location.search), [location.search]);
+    const selectedSignupPlanId = String(routeQuery.get('planId') || '').trim();
+    const selectedSignupPlanVersionId = String(routeQuery.get('planVersionId') || '').trim();
+    const selectedSignupInterval = String(routeQuery.get('interval') || '').trim();
+    const isPricingRoute = location.pathname === '/pricing';
+    const isPlansRoute = location.pathname === '/plans';
+    const isPlansScreen = location.pathname === '/' && String(routeQuery.get('screen') || '').trim().toLowerCase() === 'plans';
+    const planSelectionPath = '/?screen=plans&gate=plan_selection_required';
     const navigate = useNavigate();
     const [loginEmail, setLoginEmail] = useState('');
+    const [loginDisplayName, setLoginDisplayName] = useState('');
     const [loginPassword, setLoginPassword] = useState('');
     const [authMode, setAuthMode] = useState('login');
     const [verificationToken, setVerificationToken] = useState('');
@@ -20,6 +55,8 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
     const [inviteToken, setInviteToken] = useState('');
     const [inviteEmail, setInviteEmail] = useState(null);
     const [inviteWorkspaceId, setInviteWorkspaceId] = useState(null);
+    const [inviteResolution, setInviteResolution] = useState('unknown');
+    const [invitePasswordRequired, setInvitePasswordRequired] = useState(false);
     const [loginNotice, setLoginNotice] = useState(null);
     const [loginError, setLoginError] = useState(null);
     const [loginErrorCode, setLoginErrorCode] = useState(null);
@@ -39,7 +76,14 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
     const [cloudWorkspaceLoading, setCloudWorkspaceLoading] = useState(false);
     const [cloudWorkspaceError, setCloudWorkspaceError] = useState(null);
     const [syncNewLocalWorkspaceToCloud, setSyncNewLocalWorkspaceToCloud] = useState(false);
+    const fallbackSetupLibraryPacks = useMemo(() => listBuiltInTaxonomyLibraryPacks(), []);
+    const [setupLibraryPacks, setSetupLibraryPacks] = useState(fallbackSetupLibraryPacks);
+    const [selectedSetupPackId, setSelectedSetupPackId] = useState(() => (fallbackSetupLibraryPacks.find((pack) => pack.isDefaultStarter)?.id || fallbackSetupLibraryPacks[0]?.id || ''));
+    const [setupTaxonomySections, setSetupTaxonomySections] = useState(() => (defaultSetupTaxonomySections(fallbackSetupLibraryPacks.find((pack) => pack.isDefaultStarter) || fallbackSetupLibraryPacks[0] || null)));
+    const [setupLibraryLoading, setSetupLibraryLoading] = useState(false);
+    const [setupLibraryError, setSetupLibraryError] = useState(null);
     const [bootstrapRetryBusy, setBootstrapRetryBusy] = useState(false);
+    const [accountAccessGate, setAccountAccessGate] = useState(null);
     // Initialize the hook
     const taskforceState = useTaskforce({
         config,
@@ -47,7 +91,15 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
         onTaskCountChange,
         onClose
     });
-    const { runtimeMode, workspaceSwitchingEnabled, currentWorkspaceId, configLoaded, cloudAuthConfigured, authRequiredForApi, authBlocked, isAuthenticated, hasBetaAccess, authSessionResolved, workspaceBootstrapPending, bootstrapPhase, bootstrapError, setupState, runtimeCapabilities, refreshSetupContext, retryBootstrapChecks, saveWorkspaceProfile, fetchWorkspaces, applyWorkspaceSyncStateSnapshot, loginWithCredentials, registerWithCredentials, requestEmailVerification, confirmEmailVerification, requestPasswordReset, confirmPasswordReset, inspectInviteAcceptance, acceptInviteWithToken, currentTheme, logout } = taskforceState;
+    const { runtimeMode, workspaceSwitchingEnabled, currentWorkspaceId, configLoaded, cloudAuthConfigured, authRequiredForApi, authBlocked, isAuthenticated, hasBetaAccess, authSessionResolved, workspaceBootstrapPending, bootstrapPhase, bootstrapError, setupState, runtimeCapabilities, refreshSetupContext, retryBootstrapChecks, createWorkspace, saveWorkspaceProfile, fetchWorkspaces, applyWorkspaceSyncStateSnapshot, settingsModel, fetchTasks, loginWithCredentials, registerWithCredentials, requestEmailVerification, confirmEmailVerification, requestPasswordReset, confirmPasswordReset, inspectInviteAcceptance, acceptInviteWithToken, joinInviteWithToken, authUserEmail, currentTheme, logout } = taskforceState;
+    const selectedSetupPack = useMemo(() => {
+        return setupLibraryPacks.find((pack) => pack.id === selectedSetupPackId)
+            || setupLibraryPacks.find((pack) => pack.isDefaultStarter)
+            || setupLibraryPacks[0]
+            || null;
+    }, [selectedSetupPackId, setupLibraryPacks]);
+    const brandLogo = isLightThemeFamily(currentTheme) ? logoDark : logoLight;
+    const authBrandLogo = logoLight;
     const normalizedCloudAuthBase = useMemo(() => {
         const raw = String(config.cloudAuthBaseUrl || config.apiBaseUrl || '').trim();
         if (!raw)
@@ -59,18 +111,31 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
     const isLikelyCloudAppHost = typeof window !== 'undefined' && /^app\./i.test(window.location.hostname);
     const isCloudAuthRequired = runtimeMode === 'cloud' && authRequiredForApi;
     const shouldForceForAuthBlocked = runtimeMode === 'cloud' && authBlocked;
-    const shouldForceLogin = isLikelyCloudAppHost
-        ? (!isAuthenticated || authBlocked)
-        : ((isCloudAuthRequired && !isAuthenticated) || shouldForceForAuthBlocked);
-    const shouldForceComingSoon = runtimeMode === 'cloud' && isAuthenticated && !hasBetaAccess;
     const isLoginRoute = location.pathname === '/login';
     const isSetupRoute = location.pathname === '/setup';
     const isComingSoonRoute = location.pathname === '/coming-soon';
+    const shouldForceLogin = isLikelyCloudAppHost
+        ? ((!isAuthenticated || authBlocked) && !isPricingRoute && !isPlansRoute && !isPlansScreen)
+        : (((isCloudAuthRequired && !isAuthenticated) || shouldForceForAuthBlocked) && !isPricingRoute && !isPlansRoute && !isPlansScreen);
+    const shouldForceComingSoon = runtimeMode === 'cloud' && isAuthenticated && !hasBetaAccess && !isPricingRoute && !isPlansRoute && !isPlansScreen;
+    const shouldForceAccountAccessGate = runtimeMode === 'cloud'
+        && isAuthenticated
+        && authSessionResolved
+        && accountAccessGate?.canAccessApp === false
+        && accountAccessGate?.canAccessPlans !== false
+        && !isPricingRoute
+        && !isPlansRoute
+        && !isPlansScreen;
     const setupStep = useMemo(() => String(new URLSearchParams(location.search).get('step') || '').trim().toLowerCase(), [location.search]);
+    const setupIntent = useMemo(() => String(new URLSearchParams(location.search).get('intent') || '').trim().toLowerCase(), [location.search]);
+    const isCreateWorkspaceIntent = isSetupRoute && setupStep === 'workspace' && setupIntent === 'create-workspace';
     const shouldHoldForAuthBootstrap = mode !== 'widget'
         && !authSessionResolved
         && !isLoginRoute
         && !isSetupRoute
+        && !isPricingRoute
+        && !isPlansRoute
+        && !isPlansScreen
         && (runtimeMode === 'cloud' || isLikelyCloudAppHost);
     const workspaceLifecycle = useMemo(() => resolveWorkspaceLifecycleState({
         setupState: setupState
@@ -96,6 +161,9 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
         && authSessionResolved
         && !shouldForceLogin
         && !shouldForceComingSoon
+        && !isPricingRoute
+        && !isPlansRoute
+        && !isPlansScreen
         && (!configLoaded || workspaceBootstrapPending || bootstrapPhase === 'stalled')
         && (isSetupRoute || runtimeMode === 'cloud' || isLikelyCloudAppHost);
     const bootstrapSubtitle = useMemo(() => {
@@ -123,6 +191,48 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
         setSetupModeChoice(modeValue);
     }, [setupState?.mode]);
     useEffect(() => {
+        if (runtimeMode !== 'cloud' || !isAuthenticated || !authSessionResolved) {
+            setAccountAccessGate(null);
+            return;
+        }
+        setAccountAccessGate(null);
+        let cancelled = false;
+        (async () => {
+            try {
+                const res = await fetch('/api/taskforce/account/access-status', {
+                    method: 'GET',
+                    credentials: 'include'
+                });
+                const payload = await res.json().catch(() => ({}));
+                if (cancelled || !res.ok)
+                    return;
+                const gate = String(payload?.gate || '').trim().toLowerCase();
+                if (gate !== 'ok' && gate !== 'plan_selection_required' && gate !== 'misconfigured' && gate !== 'missing_entitlement') {
+                    setAccountAccessGate(null);
+                    return;
+                }
+                setAccountAccessGate({
+                    gate,
+                    canAccessApp: payload?.canAccessApp === true,
+                    canAccessPlans: payload?.canAccessPlans !== false,
+                    message: typeof payload?.message === 'string' ? payload.message : null
+                });
+            }
+            catch {
+                if (!cancelled)
+                    setAccountAccessGate(null);
+            }
+        })();
+        return () => {
+            cancelled = true;
+        };
+    }, [authSessionResolved, isAuthenticated, runtimeMode, location.pathname, location.search]);
+    useEffect(() => {
+        if (isCreateWorkspaceIntent) {
+            setWorkspaceNameInput('');
+            setWorkspaceDescriptionInput('');
+            return;
+        }
         if (!setupState)
             return;
         const currentName = String(setupState.workspace?.name || '').trim();
@@ -137,6 +247,7 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
         setupState?.workspace?.description,
         setupState?.suggestedWorkspaceName,
         setupState?.workspaceId,
+        isCreateWorkspaceIntent,
         isPlaceholderWorkspaceName
     ]);
     useEffect(() => {
@@ -200,6 +311,45 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
             return;
         void fetchCloudWorkspaceOptions();
     }, [fetchCloudWorkspaceOptions, workspaceSetupSource]);
+    useEffect(() => {
+        if (!isSetupRoute || setupStep !== 'workspace' || workspaceSetupSource === 'cloud')
+            return;
+        let cancelled = false;
+        setSetupLibraryLoading(true);
+        setSetupLibraryError(null);
+        void fetch('/api/taskforce/taxonomy-library', {
+            method: 'GET',
+            credentials: 'include'
+        })
+            .then(async (res) => {
+            if (!res.ok)
+                throw new Error(`Failed to load starter libraries (${res.status})`);
+            const payload = await res.json().catch(() => ({}));
+            const nextPacks = Array.isArray(payload?.packs) ? payload.packs : [];
+            if (cancelled || nextPacks.length === 0)
+                return;
+            setSetupLibraryPacks(nextPacks);
+            setSelectedSetupPackId((current) => (nextPacks.some((pack) => pack.id === current)
+                ? current
+                : (nextPacks.find((pack) => pack.isDefaultStarter)?.id || nextPacks[0]?.id || '')));
+        })
+            .catch((error) => {
+            if (cancelled)
+                return;
+            setSetupLibraryPacks(fallbackSetupLibraryPacks);
+            setSetupLibraryError(error instanceof Error ? error.message : 'Failed to load starter libraries.');
+        })
+            .finally(() => {
+            if (!cancelled)
+                setSetupLibraryLoading(false);
+        });
+        return () => {
+            cancelled = true;
+        };
+    }, [fallbackSetupLibraryPacks, isSetupRoute, setupStep, workspaceSetupSource]);
+    useEffect(() => {
+        setSetupTaxonomySections(defaultSetupTaxonomySections(selectedSetupPack));
+    }, [selectedSetupPackId, selectedSetupPack]);
     const nextPath = useMemo(() => {
         const raw = new URLSearchParams(location.search).get('next') || '/';
         if (!raw.startsWith('/'))
@@ -269,19 +419,47 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
             if (inspected.success) {
                 setInviteEmail(inspected.email || null);
                 setInviteWorkspaceId(inspected.workspaceId || null);
-                setLoginNotice('Invite ready. Set your password to join.');
+                setInvitePasswordRequired(inspected.passwordRequired === true);
+                const inviteMatchesAuthenticatedUser = Boolean(isAuthenticated
+                    && authUserEmail
+                    && inspected.email
+                    && authUserEmail.trim().toLowerCase() === inspected.email.trim().toLowerCase());
+                const nextResolution = inspected.passwordRequired === true
+                    ? 'new_user'
+                    : (inviteMatchesAuthenticatedUser ? 'existing_user_ready' : 'existing_user_signed_out');
+                setInviteResolution(nextResolution);
+                if (nextResolution === 'new_user') {
+                    setLoginNotice('Create your account password to join this workspace.');
+                }
+                else if (nextResolution === 'existing_user_ready') {
+                    setLoginNotice('Invite ready. Confirm to join this workspace.');
+                }
+                else {
+                    setLoginNotice('Sign in with the invited account to join this workspace.');
+                }
                 setLoginError(null);
                 setLoginErrorCode(null);
             }
             else {
                 setInviteEmail(null);
                 setInviteWorkspaceId(null);
+                setInviteResolution('invalid');
+                setInvitePasswordRequired(false);
                 setLoginError(formatAuthError(inspected));
                 setLoginErrorCode(inspected.code || inspected.state || null);
             }
         })();
         return () => { active = false; };
-    }, [isLoginRoute, authMode, inviteToken, inspectInviteAcceptance]);
+    }, [isLoginRoute, authMode, inviteToken, inspectInviteAcceptance, isAuthenticated, authUserEmail]);
+    useEffect(() => {
+        if (authMode !== 'invite')
+            return;
+        if (inviteResolution !== 'existing_user_signed_out')
+            return;
+        if (!inviteEmail)
+            return;
+        setLoginEmail((prev) => prev.trim() ? prev : inviteEmail);
+    }, [authMode, inviteResolution, inviteEmail]);
     useEffect(() => {
         const hasCooldown = verifyCooldownUntil > Date.now() || resetCooldownUntil > Date.now();
         if (!hasCooldown)
@@ -313,7 +491,10 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
             return;
         }
         if (!shouldForceLogin) {
-            if (isLoginRoute && isAuthenticated)
+            const shouldStayOnInviteRoute = isLoginRoute
+                && authMode === 'invite'
+                && inviteToken.trim().length > 0;
+            if (isLoginRoute && isAuthenticated && !shouldStayOnInviteRoute)
                 navigate(nextPath, { replace: true });
         }
         else {
@@ -324,6 +505,13 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
             }
             return;
         }
+        if (shouldForceAccountAccessGate) {
+            if (!isPlansScreen) {
+                const gate = encodeURIComponent(String(accountAccessGate?.gate || 'plan_selection_required'));
+                navigate(`/?screen=plans&gate=${gate}`, { replace: true });
+            }
+            return;
+        }
         if (setupGateActive) {
             if (hasSetupReadError) {
                 if (!isSetupRoute || setupStep !== 'error') {
@@ -348,19 +536,24 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
             }
             return;
         }
-        if (isSetupRoute && setupState) {
+        if (isSetupRoute && setupState && !isCreateWorkspaceIntent) {
             navigate('/', { replace: true });
         }
     }, [
         mode,
         shouldForceLogin,
         shouldForceComingSoon,
+        shouldForceAccountAccessGate,
         isLoginRoute,
         isSetupRoute,
         isComingSoonRoute,
+        isPlansRoute,
+        isPlansScreen,
+        accountAccessGate?.gate,
         setupGateActive,
         setupState,
         hasSetupReadError,
+        isCreateWorkspaceIntent,
         needsGlobalSetup,
         needsWorkspaceSetup,
         setupStep,
@@ -402,16 +595,45 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
     if (mode === 'widget') {
         return (_jsx(WidgetView, { ...taskforceState, onHeaderMouseDown: onHeaderMouseDown, isDragging: isDragging, onClose: onClose }));
     }
+    if (isPricingRoute) {
+        const params = new URLSearchParams(location.search);
+        params.set('screen', 'plans');
+        return _jsx(Navigate, { to: `/?${params.toString()}${location.hash || ''}`, replace: true });
+    }
+    if (isPlansRoute) {
+        const params = new URLSearchParams(location.search);
+        params.set('screen', 'plans');
+        return _jsx(Navigate, { to: `/?${params.toString()}${location.hash || ''}`, replace: true });
+    }
     if (shouldHoldForAuthBootstrap) {
-        return (_jsx("div", { className: styles.standaloneWrapper, "data-theme": currentTheme, children: _jsx("div", { className: styles.loginView, children: _jsxs("div", { className: styles.loginCard, children: [_jsxs("div", { className: styles.authBrandRow, children: [_jsx("img", { src: logo, alt: "Taskforce", className: styles.loginLogo }), _jsx("h1", { className: styles.loginTitle, children: "Loading Taskforce" })] }), _jsx("p", { className: styles.loginSubtitle, children: "Checking your session..." })] }) }) }));
+        return (_jsx("div", { className: shellStyles.standaloneWrapper, "data-theme": currentTheme, children: _jsx("div", { className: authStyles.loginView, children: _jsxs("div", { className: authStyles.loginCard, children: [_jsxs("div", { className: authStyles.authBrandRow, children: [_jsx("img", { src: authBrandLogo, alt: "Taskforce", className: authStyles.loginLogo }), _jsx("h1", { className: authStyles.loginTitle, children: "Loading Taskforce" })] }), _jsx("p", { className: authStyles.loginSubtitle, children: "Checking your session..." })] }) }) }));
     }
     if (shouldHoldForSetupBootstrap) {
-        return (_jsx("div", { className: styles.standaloneWrapper, "data-theme": currentTheme, children: _jsx("div", { className: styles.loginView, children: _jsxs("div", { className: styles.loginCard, children: [_jsxs("div", { className: styles.authBrandRow, children: [_jsx("img", { src: logo, alt: "Taskforce", className: styles.loginLogo }), _jsx("h1", { className: styles.loginTitle, children: "Loading Taskforce" })] }), _jsx("p", { className: styles.loginSubtitle, children: bootstrapSubtitle }), bootstrapPhase === 'stalled' && (_jsxs(_Fragment, { children: [_jsx("p", { className: styles.loginError, children: bootstrapError || 'Startup checks timed out.' }), _jsx("button", { className: styles.submitBtn, disabled: bootstrapRetryBusy, onClick: handleRetryBootstrap, children: bootstrapRetryBusy ? 'Retrying...' : 'Retry checks' }), isCloudRuntime && (_jsx("button", { className: styles.cancelBtn, disabled: bootstrapRetryBusy, onClick: handleGoToSignIn, children: "Go to sign-in" }))] }))] }) }) }));
+        return (_jsx("div", { className: shellStyles.standaloneWrapper, "data-theme": currentTheme, children: _jsx("div", { className: authStyles.loginView, children: _jsxs("div", { className: authStyles.loginCard, children: [_jsxs("div", { className: authStyles.authBrandRow, children: [_jsx("img", { src: authBrandLogo, alt: "Taskforce", className: authStyles.loginLogo }), _jsx("h1", { className: authStyles.loginTitle, children: "Loading Taskforce" })] }), _jsx("p", { className: authStyles.loginSubtitle, children: bootstrapSubtitle }), bootstrapPhase === 'stalled' && (_jsxs(_Fragment, { children: [_jsx("p", { className: authStyles.loginError, children: bootstrapError || 'Startup checks timed out.' }), _jsx("button", { className: styles.submitBtn, disabled: bootstrapRetryBusy, onClick: handleRetryBootstrap, children: bootstrapRetryBusy ? 'Retrying...' : 'Retry checks' }), isCloudRuntime && (_jsx("button", { className: styles.cancelBtn, disabled: bootstrapRetryBusy, onClick: handleGoToSignIn, children: "Go to sign-in" }))] }))] }) }) }));
     }
     if (isLoginRoute) {
-        return (_jsx("div", { className: styles.standaloneWrapper, "data-theme": currentTheme, children: _jsx("div", { className: styles.loginView, style: {
+        return (_jsx("div", { className: shellStyles.standaloneWrapper, "data-theme": currentTheme, children: _jsx("div", { className: authStyles.loginView, style: {
                     backgroundImage: `linear-gradient(rgba(15, 15, 26, 0.88), rgba(15, 15, 26, 0.9)), url(${taskforceBg})`
-                }, children: _jsxs("div", { className: styles.loginCard, children: [!isCloudRuntime && !shouldForceLogin && (_jsx("button", { className: styles.loginCloseBtn, "aria-label": "Close sign in", onClick: () => navigate(nextPath, { replace: true }), children: "\u00D7" })), _jsxs("div", { className: styles.authBrandRow, children: [_jsx("img", { src: logo, alt: "Taskforce", className: styles.loginLogo }), _jsxs("h1", { className: styles.loginTitle, children: ["TASKFORCE ", _jsx("span", { className: styles.loginTitleAccent, children: "HQ" })] })] }), _jsxs("p", { className: styles.loginSubtitle, children: [authMode === 'login' && 'Sign in with your account credentials.', authMode === 'register' && 'Create your Taskforce account.', authMode === 'verify' && 'Enter your verification token.', authMode === 'forgot' && 'Request a password reset link.', authMode === 'reset' && 'Set a new password using your reset token.', authMode === 'invite' && 'Accept your invite and create a password.'] }), (authMode === 'login' || authMode === 'register' || authMode === 'forgot') && (_jsx("input", { className: styles.input, type: "email", value: loginEmail, placeholder: "Email", onChange: (event) => setLoginEmail(event.target.value) })), (authMode === 'login' || authMode === 'register' || authMode === 'reset') && (_jsx("input", { className: styles.input, type: "password", value: loginPassword, placeholder: authMode === 'reset' ? 'New password' : 'Password', onChange: (event) => setLoginPassword(event.target.value) })), authMode === 'verify' && (_jsx("input", { className: styles.input, type: "text", value: verificationToken, placeholder: "Verification token", onChange: (event) => setVerificationToken(event.target.value) })), authMode === 'reset' && (_jsx("input", { className: styles.input, type: "text", value: resetToken, placeholder: "Reset token", onChange: (event) => setResetToken(event.target.value) })), authMode === 'invite' && (_jsxs(_Fragment, { children: [_jsx("input", { className: styles.input, type: "text", value: inviteToken, placeholder: "Invite token", onChange: (event) => setInviteToken(event.target.value) }), inviteEmail && (_jsxs("p", { className: styles.loginSubtitle, children: ["Invite for: ", _jsx("strong", { children: inviteEmail }), inviteWorkspaceId ? ` · Workspace: ${inviteWorkspaceId}` : ''] }))] })), loginNotice && _jsx("p", { className: styles.loginSubtitle, children: loginNotice }), loginError && _jsx("p", { className: styles.loginError, children: loginError }), authMode === 'login' && loginErrorCode === 'EMAIL_NOT_VERIFIED' && loginEmail.trim() && (_jsx("button", { className: styles.authModeLink, disabled: loginBusy || verifyCooldownActive, onClick: async () => {
+                }, children: _jsxs("div", { className: authStyles.loginCard, children: [!isCloudRuntime && !shouldForceLogin && (_jsx("button", { className: authStyles.loginCloseBtn, "aria-label": "Close sign in", onClick: () => navigate(nextPath, { replace: true }), children: "\u00D7" })), _jsxs("div", { className: authStyles.authBrandRow, children: [_jsx("img", { src: authBrandLogo, alt: "Taskforce", className: authStyles.loginLogo }), _jsxs("h1", { className: authStyles.loginTitle, children: ["TASKFORCE ", _jsx("span", { className: authStyles.loginTitleAccent, children: "HQ" })] })] }), _jsxs("p", { className: authStyles.loginSubtitle, children: [authMode === 'login' && 'Sign in with your account credentials.', authMode === 'register' && 'Create your Taskforce account.', authMode === 'verify' && 'Enter your verification token.', authMode === 'forgot' && 'Request a password reset link.', authMode === 'reset' && 'Set a new password using your reset token.', authMode === 'invite' && (inviteResolution === 'existing_user_ready'
+                                    ? `You've been invited to join ${inviteWorkspaceId || 'this workspace'}.`
+                                    : inviteResolution === 'existing_user_signed_out'
+                                        ? 'Sign in to join this workspace.'
+                                        : 'Create your account to join this workspace.')] }), (authMode === 'login' || authMode === 'register' || authMode === 'forgot' || (authMode === 'invite' && inviteResolution === 'existing_user_signed_out')) && (_jsx("input", { className: `${styles.input} ${authStyles.loginInput}`, type: "email", value: loginEmail, placeholder: "Email", onChange: (event) => setLoginEmail(event.target.value) })), authMode === 'register' && (_jsx("input", { className: `${styles.input} ${authStyles.loginInput}`, type: "text", value: loginDisplayName, placeholder: "Display name", onChange: (event) => setLoginDisplayName(event.target.value) })), (authMode === 'login'
+                            || authMode === 'register'
+                            || authMode === 'reset'
+                            || (authMode === 'invite' && (invitePasswordRequired || inviteResolution === 'existing_user_signed_out'))) && (_jsx("input", { className: `${styles.input} ${authStyles.loginInput}`, type: "password", value: loginPassword, placeholder: authMode === 'reset'
+                                ? 'New password'
+                                : (authMode === 'invite'
+                                    ? (invitePasswordRequired ? 'Create password' : 'Password')
+                                    : 'Password'), onChange: (event) => setLoginPassword(event.target.value) })), authMode === 'register' && isDebugModeEnabled() && (_jsx("button", { className: authStyles.authModeLink, type: "button", disabled: loginBusy, onClick: () => {
+                                const credentials = buildDebugRegistrationCredentials();
+                                setLoginEmail(credentials.email);
+                                setLoginDisplayName(credentials.displayName);
+                                setLoginPassword(credentials.password);
+                                setLoginNotice(null);
+                                setLoginError(null);
+                                setLoginErrorCode(null);
+                            }, children: "Fill Form" })), authMode === 'verify' && (_jsx("input", { className: `${styles.input} ${authStyles.loginInput}`, type: "text", value: verificationToken, placeholder: "Verification token", onChange: (event) => setVerificationToken(event.target.value) })), authMode === 'reset' && (_jsx("input", { className: `${styles.input} ${authStyles.loginInput}`, type: "text", value: resetToken, placeholder: "Reset token", onChange: (event) => setResetToken(event.target.value) })), authMode === 'invite' && (_jsxs(_Fragment, { children: [_jsx("input", { className: `${styles.input} ${authStyles.loginInput}`, type: "text", value: inviteToken, placeholder: "Invite token", onChange: (event) => setInviteToken(event.target.value) }), inviteEmail && (_jsxs("p", { className: authStyles.loginSubtitle, children: ["Invite for: ", _jsx("strong", { children: inviteEmail }), inviteWorkspaceId ? ` · Workspace: ${inviteWorkspaceId}` : ''] }))] })), loginNotice && _jsx("p", { className: authStyles.loginSubtitle, children: loginNotice }), loginError && _jsx("p", { className: authStyles.loginError, children: loginError }), authMode === 'login' && loginErrorCode === 'EMAIL_NOT_VERIFIED' && loginEmail.trim() && (_jsx("button", { className: authStyles.authModeLink, disabled: loginBusy || verifyCooldownActive, onClick: async () => {
                                 setLoginBusy(true);
                                 setLoginNotice(null);
                                 const sent = await requestEmailVerification(loginEmail);
@@ -428,17 +650,27 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
                                     setLoginError(formatAuthError(sent));
                                 }
                                 setLoginBusy(false);
-                            }, children: verifyCooldownActive ? `Resend in ${verifyCooldownSeconds}s` : 'Resend Verification Email' })), _jsx("button", { className: styles.submitBtn, disabled: loginBusy || (authMode === 'verify' && verifyCooldownActive) || (authMode === 'forgot' && resetCooldownActive), onClick: async () => {
+                            }, children: verifyCooldownActive ? `Resend in ${verifyCooldownSeconds}s` : 'Resend Verification Email' })), _jsx("button", { className: `${styles.submitBtn} ${authStyles.loginPrimaryBtn}`, disabled: loginBusy || (authMode === 'verify' && verifyCooldownActive) || (authMode === 'forgot' && resetCooldownActive), onClick: async () => {
                                 setLoginBusy(true);
                                 setLoginNotice(null);
                                 setLoginError(null);
                                 setLoginErrorCode(null);
+                                if (authMode === 'register' && !loginDisplayName.trim()) {
+                                    setLoginError('Display name is required.');
+                                    setLoginBusy(false);
+                                    return;
+                                }
                                 let result = { success: false };
                                 if (authMode === 'login') {
                                     result = await loginWithCredentials(loginEmail, loginPassword);
                                 }
                                 else if (authMode === 'register') {
-                                    result = await registerWithCredentials(loginEmail, loginPassword);
+                                    result = await registerWithCredentials(loginEmail, loginPassword, {
+                                        displayName: loginDisplayName,
+                                        planId: selectedSignupPlanId || undefined,
+                                        planVersionId: selectedSignupPlanVersionId || undefined,
+                                        interval: selectedSignupInterval || undefined
+                                    });
                                 }
                                 else if (authMode === 'verify') {
                                     result = await confirmEmailVerification(verificationToken);
@@ -450,9 +682,24 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
                                     result = await confirmPasswordReset(resetToken, loginPassword);
                                 }
                                 else if (authMode === 'invite') {
-                                    result = await acceptInviteWithToken(inviteToken, loginPassword);
+                                    if (inviteResolution === 'existing_user_signed_out') {
+                                        result = await loginWithCredentials(loginEmail, loginPassword);
+                                    }
+                                    else {
+                                        result = invitePasswordRequired
+                                            ? await acceptInviteWithToken(inviteToken, loginPassword)
+                                            : await joinInviteWithToken(inviteToken);
+                                    }
                                 }
                                 if (!result.success) {
+                                    if (authMode === 'register'
+                                        && (result.code === 'SIGNUP_PLAN_NOT_ENABLED'
+                                            || result.code === 'SIGNUP_PLAN_VERSION_NOT_FOUND'
+                                            || result.code === 'SIGNUP_PLAN_VERSION_REQUIRED')) {
+                                        navigate(planSelectionPath, { replace: true });
+                                        setLoginBusy(false);
+                                        return;
+                                    }
                                     setLoginError(formatAuthError(result));
                                     setLoginErrorCode(result.code || null);
                                     if (authMode === 'login' && (result.code === 'WORKSPACE_NOT_FOUND' || result.code === 'WORKSPACE_ID_REQUIRED')) {
@@ -478,17 +725,27 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
                                         setLoginBusy(false);
                                         return;
                                     }
-                                    if (result.verificationToken)
-                                        setVerificationToken(result.verificationToken);
-                                    setVerifyCooldownUntil(Date.now() + 30_000);
-                                    setLoginMode('verify');
-                                    setLoginNotice(result.emailSent === false
-                                        ? `Account created, but verification email failed to send. ${result.emailError || 'Try Resend Verification again.'}`
-                                        : 'Account created. Check your email for verification instructions.');
+                                    if (result.verificationRequired) {
+                                        if (result.verificationToken)
+                                            setVerificationToken(result.verificationToken);
+                                        setVerifyCooldownUntil(Date.now() + 30_000);
+                                        setLoginMode('verify');
+                                        setLoginNotice(result.emailSent === false
+                                            ? `Account created, but verification email failed to send. ${result.emailError || 'Try Resend Verification again.'}`
+                                            : 'Account created. Check your email for verification instructions.');
+                                    }
+                                    else {
+                                        setLoginEmail('');
+                                        setLoginDisplayName('');
+                                        setLoginPassword('');
+                                        navigate(nextPath, { replace: true });
+                                    }
                                 }
                                 else if (authMode === 'verify') {
-                                    setLoginMode('login');
-                                    setLoginNotice('Email verified. You can sign in now.');
+                                    await retryBootstrapChecks();
+                                    setLoginEmail('');
+                                    setLoginPassword('');
+                                    navigate(nextPath, { replace: true });
                                 }
                                 else if (authMode === 'forgot') {
                                     if (result.resetToken)
@@ -504,6 +761,13 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
                                     setLoginNotice('Password updated. Sign in with your new password.');
                                 }
                                 else if (authMode === 'invite') {
+                                    if (inviteResolution === 'existing_user_signed_out') {
+                                        setAuthMode('invite');
+                                        setLoginPassword('');
+                                        setLoginNotice('Signed in. Review the invite details to continue.');
+                                        setLoginBusy(false);
+                                        return;
+                                    }
                                     if (result.workspaceSetupRequired) {
                                         navigate('/setup?step=workspace', { replace: true });
                                         setLoginBusy(false);
@@ -512,17 +776,26 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
                                     navigate(nextPath, { replace: true });
                                 }
                                 else if (authMode === 'login') {
+                                    if (inviteToken.trim()) {
+                                        setAuthMode('invite');
+                                        setLoginPassword('');
+                                        setLoginNotice('Signed in. Review the invite details to continue.');
+                                        setLoginBusy(false);
+                                        return;
+                                    }
                                     if (result.workspaceSetupRequired) {
                                         navigate('/setup?step=workspace', { replace: true });
                                         setLoginBusy(false);
                                         return;
                                     }
                                     setLoginEmail('');
+                                    setLoginDisplayName('');
                                     setLoginPassword('');
                                     navigate(nextPath, { replace: true });
                                 }
                                 else {
                                     setLoginEmail('');
+                                    setLoginDisplayName('');
                                     setLoginPassword('');
                                     navigate(nextPath, { replace: true });
                                 }
@@ -535,40 +808,51 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
                                             ? (resetCooldownActive ? `Retry in ${resetCooldownSeconds}s` : 'Send Reset Link')
                                             : authMode === 'reset'
                                                 ? 'Reset Password'
-                                                : 'Accept Invite') }), (authMode === 'login' || authMode === 'register') && (_jsxs("p", { className: styles.authModeSwitch, children: [authMode === 'login' ? 'Need an account?' : 'Already have an account?', ' ', _jsx("button", { className: styles.authModeSwitchLink, disabled: loginBusy, onClick: () => {
+                                                : (inviteResolution === 'existing_user_signed_out'
+                                                    ? 'Sign In to Continue'
+                                                    : (invitePasswordRequired ? 'Create Account and Join' : 'Join Workspace'))) }), authMode === 'register' && (_jsxs("p", { className: authStyles.registerConsent, children: ["By creating an account, you agree to the", ' ', _jsx("a", { className: authStyles.registerConsentLink, href: "https://taskforcehq.com/legal/terms", target: "_blank", rel: "noopener noreferrer", children: "Terms of Service" }), ' ', "and acknowledge the", ' ', _jsx("a", { className: authStyles.registerConsentLink, href: "https://taskforcehq.com/legal/privacy", target: "_blank", rel: "noopener noreferrer", children: "Privacy Policy" }), "."] })), (authMode === 'login' || authMode === 'register') && (_jsxs("p", { className: authStyles.authModeSwitch, children: [authMode === 'login' ? 'Need an account?' : 'Already have an account?', ' ', _jsx("button", { className: authStyles.authModeSwitchLink, disabled: loginBusy, onClick: () => {
                                         setLoginError(null);
                                         setLoginErrorCode(null);
                                         setLoginNotice(null);
                                         setLoginMode(authMode === 'login' ? 'register' : 'login');
-                                    }, children: authMode === 'login' ? 'Register' : 'Sign In' })] })), _jsxs("div", { className: styles.authModeLinks, children: [(authMode === 'login' || authMode === 'register') && (_jsxs(_Fragment, { children: [_jsx("button", { className: styles.authModeLink, disabled: loginBusy || resetCooldownActive, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('forgot'); }, children: resetCooldownActive ? `Forgot Password (${resetCooldownSeconds}s)` : 'Forgot Password' }), _jsx("button", { className: styles.authModeLink, disabled: loginBusy || verifyCooldownActive, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('verify'); }, children: verifyCooldownActive ? `Resend Verification (${verifyCooldownSeconds}s)` : 'Resend Verification' }), _jsx("button", { className: styles.authModeLink, disabled: loginBusy, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('invite'); }, children: "Accept Invite" })] })), (authMode !== 'login' && authMode !== 'register') && (_jsxs(_Fragment, { children: [_jsx("button", { className: styles.authModeLink, disabled: loginBusy, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('login'); }, children: "Sign In" }), _jsx("button", { className: styles.authModeLink, disabled: loginBusy, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('register'); }, children: "Register" }), authMode === 'reset' && (_jsx("button", { className: styles.authModeLink, disabled: loginBusy || resetCooldownActive, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('forgot'); }, children: resetCooldownActive ? `Forgot Password (${resetCooldownSeconds}s)` : 'Forgot Password' }))] }))] })] }) }) }));
+                                    }, children: authMode === 'login' ? 'Register' : 'Sign In' })] })), _jsxs("div", { className: authStyles.authModeLinks, children: [(authMode === 'login' || authMode === 'register') && (_jsxs(_Fragment, { children: [_jsx("button", { className: authStyles.authModeLink, disabled: loginBusy || resetCooldownActive, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('forgot'); }, children: resetCooldownActive ? `Forgot Password (${resetCooldownSeconds}s)` : 'Forgot Password' }), _jsx("button", { className: authStyles.authModeLink, disabled: loginBusy || verifyCooldownActive, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('verify'); }, children: verifyCooldownActive ? `Resend Verification (${verifyCooldownSeconds}s)` : 'Resend Verification' }), _jsx("button", { className: authStyles.authModeLink, disabled: loginBusy, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('invite'); }, children: "Accept Invite" })] })), (authMode !== 'login' && authMode !== 'register') && (_jsxs(_Fragment, { children: [_jsx("button", { className: authStyles.authModeLink, disabled: loginBusy, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('login'); }, children: "Sign In" }), _jsx("button", { className: authStyles.authModeLink, disabled: loginBusy, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('register'); }, children: "Register" }), authMode === 'reset' && (_jsx("button", { className: authStyles.authModeLink, disabled: loginBusy || resetCooldownActive, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('forgot'); }, children: resetCooldownActive ? `Forgot Password (${resetCooldownSeconds}s)` : 'Forgot Password' }))] }))] })] }) }) }));
     }
     if (shouldForceLogin && !isLoginRoute) {
-        return (_jsx("div", { className: styles.standaloneWrapper, "data-theme": currentTheme, children: _jsx("div", { className: styles.loginView, children: _jsxs("div", { className: styles.loginCard, children: [_jsxs("div", { className: styles.authBrandRow, children: [_jsx("img", { src: logo, alt: "Taskforce", className: styles.loginLogo }), _jsx("h1", { className: styles.loginTitle, children: "Loading Taskforce" })] }), _jsx("p", { className: styles.loginSubtitle, children: "Redirecting to sign in..." })] }) }) }));
+        return (_jsx("div", { className: shellStyles.standaloneWrapper, "data-theme": currentTheme, children: _jsx("div", { className: authStyles.loginView, children: _jsxs("div", { className: authStyles.loginCard, children: [_jsxs("div", { className: authStyles.authBrandRow, children: [_jsx("img", { src: authBrandLogo, alt: "Taskforce", className: authStyles.loginLogo }), _jsx("h1", { className: authStyles.loginTitle, children: "Loading Taskforce" })] }), _jsx("p", { className: authStyles.loginSubtitle, children: "Redirecting to sign in..." })] }) }) }));
     }
     if (isComingSoonRoute && shouldForceComingSoon) {
-        return (_jsx("div", { className: styles.standaloneWrapper, "data-theme": currentTheme, children: _jsx("div", { className: styles.loginView, style: {
+        return (_jsx("div", { className: shellStyles.standaloneWrapper, "data-theme": currentTheme, children: _jsx("div", { className: authStyles.loginView, style: {
                     backgroundImage: `linear-gradient(rgba(15, 15, 26, 0.88), rgba(15, 15, 26, 0.9)), url(${taskforceBg})`
-                }, children: _jsxs("div", { className: styles.loginCard, children: [_jsxs("div", { className: styles.authBrandRow, children: [_jsx("img", { src: logo, alt: "Taskforce", className: styles.loginLogo }), _jsx("h1", { className: styles.loginTitle, children: "Private Beta" })] }), _jsx("p", { className: styles.loginSubtitle, children: "You are signed in, but your account is not in the beta allowlist yet." }), _jsx("p", { className: styles.loginSubtitle, children: "You will see the full app as soon as beta access is enabled." }), _jsx("button", { className: styles.cancelBtn, onClick: async () => { await taskforceState.logout(); navigate('/login', { replace: true }); }, children: "Sign Out" })] }) }) }));
+                }, children: _jsxs("div", { className: authStyles.loginCard, children: [_jsxs("div", { className: authStyles.authBrandRow, children: [_jsx("img", { src: authBrandLogo, alt: "Taskforce", className: authStyles.loginLogo }), _jsx("h1", { className: authStyles.loginTitle, children: "Private Beta" })] }), _jsx("p", { className: authStyles.loginSubtitle, children: "You are signed in, but your account is not in the beta allowlist yet." }), _jsx("p", { className: authStyles.loginSubtitle, children: "You will see the full app as soon as beta access is enabled." }), _jsx("button", { className: styles.cancelBtn, onClick: async () => { await taskforceState.logout(); navigate('/login', { replace: true }); }, children: "Sign Out" })] }) }) }));
     }
-    if (isSetupRoute && setupGateActive && (hasSetupReadError || needsGlobalSetup || needsWorkspaceSetup)) {
-        const isError = hasSetupReadError || setupStep === 'error';
-        const isGlobal = !isError && (needsGlobalSetup || setupStep === 'global');
+    const showGuidedWorkspaceSetup = isCreateWorkspaceIntent
+        || (isSetupRoute && setupGateActive && (hasSetupReadError || needsGlobalSetup || needsWorkspaceSetup));
+    if (showGuidedWorkspaceSetup) {
+        const isError = !isCreateWorkspaceIntent && (hasSetupReadError || setupStep === 'error');
+        const isGlobal = !isCreateWorkspaceIntent && !isError && (needsGlobalSetup || setupStep === 'global');
         const heading = isError
             ? t('setup.headingCheckFailed')
-            : (isGlobal ? t('setup.headingGlobalRequired') : t('setup.headingWorkspaceRequired'));
+            : (isGlobal
+                ? t('setup.headingGlobalRequired')
+                : (isCreateWorkspaceIntent ? 'Create Workspace' : t('setup.headingWorkspaceRequired')));
         const subtitle = isError
             ? t('setup.subtitleUnreadable')
             : isGlobal
                 ? t('setup.subtitleGlobalRequired')
-                : t('setup.subtitleWorkspaceRequired');
+                : (isCreateWorkspaceIntent
+                    ? 'Set up the new workspace before it is created.'
+                    : t('setup.subtitleWorkspaceRequired'));
         const workspaceLabel = setupModeChoice === 'operations'
             ? t('setup.workspaceTermMission')
             : t('setup.workspaceTermProject');
-        return (_jsx("div", { className: styles.standaloneWrapper, "data-theme": currentTheme, children: _jsx("div", { className: styles.loginView, style: {
+        return (_jsx("div", { className: shellStyles.standaloneWrapper, "data-theme": currentTheme, children: _jsx("div", { className: authStyles.loginView, style: {
                     backgroundImage: `linear-gradient(rgba(15, 15, 26, 0.88), rgba(15, 15, 26, 0.9)), url(${taskforceBg})`
-                }, children: _jsxs("div", { className: styles.loginCard, children: [_jsxs("div", { className: styles.authBrandRow, children: [_jsx("img", { src: logo, alt: "Taskforce", className: styles.loginLogo }), _jsxs("h1", { className: styles.loginTitle, children: ["TASKFORCE ", _jsx("span", { className: styles.loginTitleAccent, children: "HQ" })] })] }), _jsx("p", { className: styles.loginSubtitle, children: _jsx("strong", { children: heading }) }), _jsx("p", { className: styles.loginSubtitle, children: subtitle }), runtimeCapabilities && (_jsxs("p", { className: styles.loginSubtitle, children: [t('setup.runtimeLabel'), ": ", _jsx("strong", { children: runtimeCapabilities.runtimeMode })] })), setupNotice && _jsx("p", { className: styles.loginSubtitle, children: setupNotice }), setupError && _jsx("p", { className: styles.loginError, children: setupError }), isGlobal && (_jsxs("div", { style: { display: 'grid', gap: 10, textAlign: 'left' }, children: [_jsxs("label", { className: styles.authModeLink, style: { display: 'flex', gap: 8, alignItems: 'center', cursor: 'pointer' }, children: [_jsx("input", { type: "radio", name: "setup-mode", value: "core", checked: setupModeChoice === 'core', onChange: () => setSetupModeChoice('core'), disabled: setupBusy }), _jsx("span", { children: t('setup.coreModeOption', { workspaceLabel }) })] }), _jsxs("label", { className: styles.authModeLink, style: { display: 'flex', gap: 8, alignItems: 'center', cursor: 'pointer' }, children: [_jsx("input", { type: "radio", name: "setup-mode", value: "operations", checked: setupModeChoice === 'operations', onChange: () => setSetupModeChoice('operations'), disabled: setupBusy }), _jsx("span", { children: t('setup.operationsModeOption') })] })] })), !isError && !isGlobal && (_jsxs("div", { style: { display: 'grid', gap: 10, textAlign: 'left' }, children: [!isCloudRuntime && canUseCloudWorkspaceSetup && (_jsxs("div", { style: { display: 'grid', gap: 8 }, children: [_jsxs("label", { className: styles.authModeLink, style: { display: 'flex', gap: 8, alignItems: 'center', cursor: 'pointer' }, children: [_jsx("input", { type: "radio", name: "workspace-setup-source", value: "local", checked: workspaceSetupSource === 'local', onChange: () => setWorkspaceSetupSource('local'), disabled: setupBusy }), _jsxs("span", { children: ["Create new local ", workspaceLabel.toLowerCase()] })] }), _jsxs("label", { className: styles.authModeLink, style: { display: 'flex', gap: 8, alignItems: 'center', cursor: 'pointer' }, children: [_jsx("input", { type: "radio", name: "workspace-setup-source", value: "cloud", checked: workspaceSetupSource === 'cloud', onChange: () => setWorkspaceSetupSource('cloud'), disabled: setupBusy }), _jsxs("span", { children: ["Sync existing cloud ", workspaceLabel.toLowerCase()] })] })] })), !isCloudRuntime && workspaceSetupSource === 'cloud' && canUseCloudWorkspaceSetup ? (_jsxs("div", { style: { display: 'grid', gap: 8 }, children: [!isAuthenticated && (_jsxs(_Fragment, { children: [_jsx("p", { className: styles.loginSubtitle, style: { margin: 0 }, children: "Sign in to choose one of your cloud projects." }), _jsx("button", { className: styles.cancelBtn, disabled: setupBusy, onClick: () => {
+                }, children: _jsxs("div", { className: authStyles.loginCard, children: [_jsxs("div", { className: authStyles.authBrandRow, children: [_jsx("img", { src: authBrandLogo, alt: "Taskforce", className: authStyles.loginLogo }), _jsxs("h1", { className: authStyles.loginTitle, children: ["TASKFORCE ", _jsx("span", { className: authStyles.loginTitleAccent, children: "HQ" })] })] }), _jsx("p", { className: authStyles.loginSubtitle, children: _jsx("strong", { children: heading }) }), _jsx("p", { className: authStyles.loginSubtitle, children: subtitle }), runtimeCapabilities && (_jsxs("p", { className: authStyles.loginSubtitle, children: [t('setup.runtimeLabel'), ": ", _jsx("strong", { children: runtimeCapabilities.runtimeMode })] })), setupNotice && _jsx("p", { className: authStyles.loginSubtitle, children: setupNotice }), setupError && _jsx("p", { className: authStyles.loginError, children: setupError }), isGlobal && (_jsxs("div", { className: authStyles.optionGrid, children: [_jsxs("label", { className: `${authStyles.authModeLink} ${authStyles.optionRow}`, children: [_jsx("input", { type: "radio", name: "setup-mode", value: "core", checked: setupModeChoice === 'core', onChange: () => setSetupModeChoice('core'), disabled: setupBusy }), _jsx("span", { children: t('setup.coreModeOption', { workspaceLabel }) })] }), _jsxs("label", { className: `${authStyles.authModeLink} ${authStyles.optionRow}`, children: [_jsx("input", { type: "radio", name: "setup-mode", value: "operations", checked: setupModeChoice === 'operations', onChange: () => setSetupModeChoice('operations'), disabled: setupBusy }), _jsx("span", { children: t('setup.operationsModeOption') })] })] })), !isError && !isGlobal && (_jsxs("div", { className: authStyles.optionGrid, children: [!isCloudRuntime && canUseCloudWorkspaceSetup && (_jsxs("div", { className: authStyles.optionGroup, children: [_jsxs("label", { className: `${authStyles.authModeLink} ${authStyles.optionRow}`, children: [_jsx("input", { type: "radio", name: "workspace-setup-source", value: "local", checked: workspaceSetupSource === 'local', onChange: () => setWorkspaceSetupSource('local'), disabled: setupBusy }), _jsxs("span", { children: ["Create new local ", workspaceLabel.toLowerCase()] })] }), _jsxs("label", { className: `${authStyles.authModeLink} ${authStyles.optionRow}`, children: [_jsx("input", { type: "radio", name: "workspace-setup-source", value: "cloud", checked: workspaceSetupSource === 'cloud', onChange: () => setWorkspaceSetupSource('cloud'), disabled: setupBusy }), _jsxs("span", { children: ["Sync existing cloud ", workspaceLabel.toLowerCase()] })] })] })), !isCloudRuntime && workspaceSetupSource === 'cloud' && canUseCloudWorkspaceSetup ? (_jsxs("div", { className: authStyles.optionGroup, children: [!isAuthenticated && (_jsxs(_Fragment, { children: [_jsx("p", { className: authStyles.inlineHint, children: "Sign in to choose one of your cloud projects." }), _jsx("button", { className: styles.cancelBtn, disabled: setupBusy, onClick: () => {
                                                         navigate(`/login?mode=login&next=${encodeURIComponent('/setup?step=workspace&source=cloud')}`, { replace: true });
-                                                    }, children: "Sign In" })] })), isAuthenticated && (_jsxs(_Fragment, { children: [_jsxs("select", { className: styles.input, value: cloudWorkspaceSelection, onChange: (event) => setCloudWorkspaceSelection(event.target.value), disabled: setupBusy || cloudWorkspaceLoading || cloudWorkspaceOptions.length === 0, children: [cloudWorkspaceOptions.length === 0 && (_jsx("option", { value: "", children: cloudWorkspaceLoading ? 'Loading cloud projects...' : 'No cloud projects found' })), cloudWorkspaceOptions.map((workspace) => (_jsxs("option", { value: workspace.id, children: [workspace.name, " (", workspace.id, ")"] }, workspace.id)))] }), _jsx("div", { style: { display: 'flex', justifyContent: 'flex-end', gap: 8 }, children: _jsx("button", { className: styles.cancelBtn, disabled: setupBusy || cloudWorkspaceLoading, onClick: () => void fetchCloudWorkspaceOptions(), children: "Refresh Cloud Projects" }) }), cloudWorkspaceError && _jsx("p", { className: styles.loginError, children: cloudWorkspaceError })] }))] })) : (_jsxs(_Fragment, { children: [_jsx("input", { className: styles.input, type: "text", value: workspaceNameInput, placeholder: t('setup.workspaceNamePlaceholder', { workspaceLabel }), onChange: (event) => setWorkspaceNameInput(event.target.value), disabled: setupBusy }), _jsx("textarea", { className: styles.textarea, value: workspaceDescriptionInput, placeholder: t('setup.workspaceDescriptionPlaceholder', { workspaceLabel }), onChange: (event) => setWorkspaceDescriptionInput(event.target.value), disabled: setupBusy, rows: 4 }), !isCloudRuntime && canUseCloudWorkspaceSetup && isAuthenticated && (_jsxs("div", { style: { display: 'grid', gap: 4 }, children: [_jsxs("label", { className: styles.authModeLink, style: { display: 'flex', gap: 8, alignItems: 'center', cursor: 'pointer' }, children: [_jsx("input", { type: "checkbox", checked: syncNewLocalWorkspaceToCloud, onChange: (event) => setSyncNewLocalWorkspaceToCloud(event.target.checked), disabled: setupBusy }), _jsx("span", { children: "Sync to cloud after setup" })] }), _jsx("p", { style: { margin: 0, color: 'var(--text-muted)', fontSize: '12px' }, children: "When enabled, this project will connect to cloud sync as soon as setup finishes." })] }))] }))] })), _jsxs("div", { className: styles.authModeLinks, children: [isGlobal ? (_jsx("button", { className: styles.submitBtn, disabled: setupBusy, onClick: async () => {
+                                                    }, children: "Sign In" })] })), isAuthenticated && (_jsxs(_Fragment, { children: [_jsxs("select", { className: styles.input, value: cloudWorkspaceSelection, onChange: (event) => setCloudWorkspaceSelection(event.target.value), disabled: setupBusy || cloudWorkspaceLoading || cloudWorkspaceOptions.length === 0, children: [cloudWorkspaceOptions.length === 0 && (_jsx("option", { value: "", children: cloudWorkspaceLoading ? 'Loading cloud projects...' : 'No cloud projects found' })), cloudWorkspaceOptions.map((workspace) => (_jsxs("option", { value: workspace.id, children: [workspace.name, " (", workspace.id, ")"] }, workspace.id)))] }), _jsx("div", { className: authStyles.actionRowEnd, children: _jsx("button", { className: styles.cancelBtn, disabled: setupBusy || cloudWorkspaceLoading, onClick: () => void fetchCloudWorkspaceOptions(), children: "Refresh Cloud Projects" }) }), cloudWorkspaceError && _jsx("p", { className: authStyles.loginError, children: cloudWorkspaceError })] }))] })) : (_jsxs(_Fragment, { children: [_jsx("input", { className: styles.input, type: "text", value: workspaceNameInput, placeholder: t('setup.workspaceNamePlaceholder', { workspaceLabel }), onChange: (event) => setWorkspaceNameInput(event.target.value), disabled: setupBusy }), _jsx("textarea", { className: styles.textarea, value: workspaceDescriptionInput, placeholder: t('setup.workspaceDescriptionPlaceholder', { workspaceLabel }), onChange: (event) => setWorkspaceDescriptionInput(event.target.value), disabled: setupBusy, rows: 4 }), _jsxs("div", { className: authStyles.optionGroup, children: [_jsx("p", { className: authStyles.loginSubtitle, children: "What are you working on?" }), _jsx("p", { className: authStyles.inlineHint, children: "Choose a starter taxonomy library for this workspace. You can still edit categories, task types, and priorities later." }), setupLibraryPacks.map((pack) => {
+                                                    const isSelected = selectedSetupPack?.id === pack.id;
+                                                    return (_jsxs("label", { className: `${authStyles.authModeLink} ${authStyles.optionRow}`, children: [_jsx("input", { type: "radio", name: "workspace-taxonomy-library", checked: isSelected, onChange: () => setSelectedSetupPackId(pack.id), disabled: setupBusy || setupLibraryLoading }), _jsx("span", { children: pack.label })] }, pack.id));
+                                                }), selectedSetupPack ? (_jsxs(_Fragment, { children: [_jsx("p", { className: authStyles.inlineHint, children: selectedSetupPack.description }), _jsxs("p", { className: authStyles.inlineHint, children: ["Includes ", selectedSetupPack.categories.length, " categories, ", selectedSetupPack.types.length, " task types, and ", selectedSetupPack.priorities.length, " priority levels."] })] })) : null, _jsxs("div", { className: authStyles.optionGroup, children: [_jsx("p", { className: authStyles.loginSubtitle, children: "Apply Starter Sections" }), _jsxs("label", { className: `${authStyles.authModeLink} ${authStyles.optionRow}`, children: [_jsx("input", { type: "checkbox", checked: setupTaxonomySections.categories, onChange: () => setSetupTaxonomySections((current) => ({ ...current, categories: !current.categories })), disabled: setupBusy || !selectedSetupPack?.categories.length }), _jsx("span", { children: "Categories" })] }), _jsxs("label", { className: `${authStyles.authModeLink} ${authStyles.optionRow}`, children: [_jsx("input", { type: "checkbox", checked: setupTaxonomySections.types, onChange: () => setSetupTaxonomySections((current) => ({ ...current, types: !current.types })), disabled: setupBusy || !selectedSetupPack?.types.length }), _jsx("span", { children: "Task Types" })] }), _jsxs("label", { className: `${authStyles.authModeLink} ${authStyles.optionRow}`, children: [_jsx("input", { type: "checkbox", checked: setupTaxonomySections.priorities, onChange: () => setSetupTaxonomySections((current) => ({ ...current, priorities: !current.priorities })), disabled: setupBusy || !selectedSetupPack?.priorities.length }), _jsx("span", { children: "Priorities" })] })] }), setupLibraryLoading ? (_jsx("p", { className: authStyles.inlineHint, children: "Loading starter libraries\u2026" })) : null, setupLibraryError ? (_jsx("p", { className: authStyles.loginError, children: setupLibraryError })) : null] }), !isCloudRuntime && canUseCloudWorkspaceSetup && isAuthenticated && (_jsxs("div", { className: authStyles.optionGroup, children: [_jsxs("label", { className: `${authStyles.authModeLink} ${authStyles.optionRow}`, children: [_jsx("input", { type: "checkbox", checked: syncNewLocalWorkspaceToCloud, onChange: (event) => setSyncNewLocalWorkspaceToCloud(event.target.checked), disabled: setupBusy }), _jsx("span", { children: "Sync to cloud after setup" })] }), _jsx("p", { className: authStyles.inlineHint, children: "When enabled, this project will connect to cloud sync as soon as setup finishes." })] }))] }))] })), _jsxs("div", { className: authStyles.authModeLinks, children: [isGlobal ? (_jsx("button", { className: styles.submitBtn, disabled: setupBusy, onClick: async () => {
                                         setSetupBusy(true);
                                         setSetupNotice(null);
                                         setSetupError(null);
@@ -634,12 +918,13 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
                                                     workspaceId: workspaceIdForSync,
                                                     stateKey: 'workspace-sync',
                                                     patch: {
-                                                        cloudSyncEnabled: true,
-                                                        sourceOfTruth: 'cloud',
-                                                        // I6: start false; the orchestrator marks it true after first successful pull.
-                                                        onboardingCompleted: false,
+                                                        version: 2,
+                                                        enabled: true,
+                                                        phase: 'attach-cloud',
                                                         pullCursor: null,
-                                                        updatedAt: new Date().toISOString()
+                                                        lastPullAt: null,
+                                                        lastPushAt: null,
+                                                        lastSyncedAt: null
                                                     }
                                                 })
                                             });
@@ -650,33 +935,57 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
                                                 return;
                                             }
                                             applyWorkspaceSyncStateSnapshot({
-                                                cloudSyncEnabled: true,
-                                                sourceOfTruth: 'cloud',
-                                                // I6: start false; the orchestrator marks it true after first successful pull.
-                                                onboardingCompleted: false,
+                                                enabled: true,
+                                                phase: 'attach-cloud',
                                                 pullCursor: null
                                             });
                                             await refreshSetupContext();
                                             setSetupNotice(`Cloud project synced setup ready: ${selectedWorkspace.name}`);
                                         }
                                         else {
-                                            const creatingNewLocalWorkspace = setupState?.workspaceSetupState === 'missing';
-                                            const result = await saveWorkspaceProfile({
-                                                workspaceId: creatingNewLocalWorkspace ? undefined : setupState?.workspaceId,
-                                                name: workspaceNameInput,
-                                                description: workspaceDescriptionInput
-                                            });
-                                            if (!result.success) {
-                                                setSetupError(result.error || t('setup.saveWorkspaceFailed'));
+                                            const creatingNewWorkspace = isCreateWorkspaceIntent || setupState?.workspaceSetupState === 'missing';
+                                            const createResult = isCreateWorkspaceIntent
+                                                ? await createWorkspace(workspaceNameInput, workspaceDescriptionInput || undefined)
+                                                : null;
+                                            const saveResult = isCreateWorkspaceIntent
+                                                ? null
+                                                : await saveWorkspaceProfile({
+                                                    workspaceId: creatingNewWorkspace ? undefined : setupState?.workspaceId,
+                                                    name: workspaceNameInput,
+                                                    description: workspaceDescriptionInput
+                                                });
+                                            const result = createResult || saveResult;
+                                            if (!result?.success) {
+                                                setSetupError(result?.error || t('setup.saveWorkspaceFailed'));
                                             }
                                             else {
-                                                const shouldEnableCloudSync = Boolean(!isCloudRuntime && syncNewLocalWorkspaceToCloud && canUseCloudWorkspaceSetup && isAuthenticated);
-                                                const workspaceIdForSync = String(result.workspaceId || setupState?.workspaceId || '').trim();
-                                                if (!workspaceIdForSync) {
-                                                    setSetupError('Failed to resolve workspace id for sync setup.');
+                                                const workspaceIdForSetup = String(createResult?.workspace?.id
+                                                    || saveResult?.workspaceId
+                                                    || setupState?.workspaceId
+                                                    || '').trim();
+                                                if (!workspaceIdForSetup) {
+                                                    setSetupError('Failed to resolve workspace id for setup.');
                                                     setSetupBusy(false);
                                                     return;
                                                 }
+                                                const shouldApplyStarterPack = workspaceSetupSource === 'local'
+                                                    && Boolean(selectedSetupPack)
+                                                    && (setupTaxonomySections.categories || setupTaxonomySections.types || setupTaxonomySections.priorities);
+                                                if (shouldApplyStarterPack && selectedSetupPack) {
+                                                    const applyResult = await settingsModel.onApplySystemTaxonomyPack({
+                                                        pack: selectedSetupPack,
+                                                        sections: setupTaxonomySections,
+                                                        remapExistingValuesToDefault: true,
+                                                        workspaceIdOverride: workspaceIdForSetup
+                                                    });
+                                                    if (!applyResult?.success) {
+                                                        setSetupError(applyResult?.error || 'Failed to apply starter taxonomy library.');
+                                                        setSetupBusy(false);
+                                                        return;
+                                                    }
+                                                }
+                                                const shouldEnableCloudSync = Boolean(!isCloudRuntime && syncNewLocalWorkspaceToCloud && canUseCloudWorkspaceSetup && isAuthenticated);
+                                                const workspaceIdForSync = workspaceIdForSetup;
                                                 const stateRes = await fetch('/api/taskforce/ui-state', {
                                                     method: 'POST',
                                                     headers: { 'Content-Type': 'application/json' },
@@ -685,12 +994,13 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
                                                         workspaceId: workspaceIdForSync,
                                                         stateKey: 'workspace-sync',
                                                         patch: {
-                                                            cloudSyncEnabled: shouldEnableCloudSync,
-                                                            sourceOfTruth: shouldEnableCloudSync ? 'local' : null,
-                                                            // I6: start false; the orchestrator marks it true after first successful pull.
-                                                            onboardingCompleted: false,
+                                                            version: 2,
+                                                            enabled: shouldEnableCloudSync,
+                                                            phase: shouldEnableCloudSync ? 'provision-local' : 'idle',
                                                             pullCursor: null,
-                                                            updatedAt: new Date().toISOString()
+                                                            lastPullAt: null,
+                                                            lastPushAt: null,
+                                                            lastSyncedAt: null
                                                         }
                                                     })
                                                 });
@@ -701,10 +1011,8 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
                                                     return;
                                                 }
                                                 applyWorkspaceSyncStateSnapshot({
-                                                    cloudSyncEnabled: shouldEnableCloudSync,
-                                                    sourceOfTruth: shouldEnableCloudSync ? 'local' : null,
-                                                    // I6: start false; the orchestrator marks it true after first successful pull.
-                                                    onboardingCompleted: false,
+                                                    enabled: shouldEnableCloudSync,
+                                                    phase: shouldEnableCloudSync ? 'provision-local' : 'idle',
                                                     pullCursor: null
                                                 });
                                                 if (shouldEnableCloudSync) {
@@ -713,10 +1021,19 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
                                                 else {
                                                     setSetupNotice(t('setup.workspaceSetupSaved', { workspaceLabel }));
                                                 }
+                                                if (isCreateWorkspaceIntent) {
+                                                    await refreshSetupContext();
+                                                    await fetchTasks(true);
+                                                    navigate('/', { replace: true });
+                                                }
                                             }
                                         }
                                         setSetupBusy(false);
-                                    }, children: setupBusy ? t('setup.saving') : t('setup.saveWorkspaceSetup', { workspaceLabel }) })) : (_jsx("button", { className: styles.submitBtn, disabled: setupBusy, onClick: refreshSetupContext, children: t('setup.retrySetupCheck') })), runtimeMode === 'cloud' && (_jsx("button", { className: styles.cancelBtn, onClick: async () => { await taskforceState.logout(); navigate('/login', { replace: true }); }, children: t('setup.signOut') }))] })] }) }) }));
+                                    }, children: setupBusy ? t('setup.saving') : t('setup.saveWorkspaceSetup', { workspaceLabel }) })) : (_jsx("button", { className: styles.submitBtn, disabled: setupBusy, onClick: refreshSetupContext, children: t('setup.retrySetupCheck') })), isCreateWorkspaceIntent ? (_jsx("button", { className: styles.cancelBtn, onClick: () => {
+                                        setSetupError(null);
+                                        setSetupNotice(null);
+                                        navigate('/', { replace: true });
+                                    }, children: "Cancel" })) : runtimeMode === 'cloud' ? (_jsx("button", { className: styles.cancelBtn, onClick: async () => { await taskforceState.logout(); navigate('/login', { replace: true }); }, children: t('setup.signOut') })) : null] })] }) }) }));
     }
     return (_jsx(StandaloneLayout, { ...taskforceState, onHeaderMouseDown: onHeaderMouseDown, isDragging: isDragging, onClose: onClose }));
 }