@vertesia/ui 1.5.0-dev.20260901.052906Z → 1.5.0-dev.20260910.051115Z

package/src/i18n/locales/pt.json

@@ -31,6 +31,7 @@
     "agent.approvalMode.fullControlDescription": "Executar ações de modificação sem aprovação",
     "agent.approvalMode.selectorLabel": "Modo de aprovação do agente",
     "agent.artifacts": "Artefatos",
+    "agent.backToDocuments": "Voltar aos documentos",
     "agent.backToMainAgent": "Voltar ao agente principal",
     "agent.batch": "Lote",
     "agent.browserPreview": "Prévia do navegador",
@@ -66,7 +67,10 @@
     "agent.dashboard": "Painel",
     "agent.details": "Detalhes",
     "agent.document": "Documento",
+    "agent.documentCount_one": "{{count}} documento",
+    "agent.documentCount_other": "{{count}} documentos",
     "agent.documents": "Documentos",
+    "agent.documentsFiltered": "{{visible}} de {{total}} documentos",
     "agent.download": "Baixar",
     "agent.downloadConversation": "Baixar conversa",
     "agent.dropFilesToUpload": "Solte arquivos para enviar",
@@ -122,6 +126,7 @@
     "agent.noConversationContent": "Nenhum conteúdo de conversa disponível para exportar",
     "agent.noDocumentsOpen": "Sem documentos abertos",
     "agent.noFilesUploadedYet": "Sem arquivos enviados",
+    "agent.noMatchingDocuments": "Nenhum documento correspondente",
     "agent.noMessagesInWorkstream": "Nenhuma mensagem neste fluxo de trabalho ainda...",
     "agent.noPlanAvailable": "Sem plano disponível",
     "agent.noPlanDetected": "Nenhum plano detectado ainda",
@@ -361,6 +366,7 @@
     "mcpConnections.enabled": "Ativado",
     "mcpConnections.label": "MCP",
     "mcpConnections.manage": "Gerenciar conexões MCP",
+    "mcpConnections.managedByApp": "Gerenciado pelo aplicativo",
     "mcpConnections.settings": "Configurações",
     "mcpConnections.subtitle": "Gerencie os servidores MCP disponíveis para esta conversa.",
     "mcpConnections.title": "MCP",
@@ -416,6 +422,12 @@
     "pdf.previousPage": "Página anterior",
     "pdf.zoomIn": "Ampliar",
     "pdf.zoomOut": "Reduzir",
+    "permissions.accessDenied": "Você não tem permissão para acessar este espaço de trabalho.",
+    "permissions.connecting": "Conectando ao seu espaço de trabalho…",
+    "permissions.connectionFailed": "Não foi possível conectar ao seu espaço de trabalho",
+    "permissions.loadingPermissions": "Carregando suas permissões.",
+    "permissions.retrying": "Isso está demorando mais que o normal. Continuaremos tentando automaticamente.",
+    "permissions.tryAgainLater": "Tente novamente em instantes.",
     "shell.accessDenied": "Acesso negado",
     "shell.applicationNotRegistered": "Aplicativo não registrado",
     "shell.organization": "Organização",
@@ -1132,12 +1144,12 @@
     "intakePolicy.summary.source": "Origem",
     "intakePolicy.summary.template": "Modelo",
     "intakePolicy.summary.toc": "Sumário",
+    "intakePolicy.tab.classification": "Classificação",
     "intakePolicy.tab.conversion": "Conversão",
     "intakePolicy.tab.extraction": "Extração",
     "intakePolicy.tab.grounding": "Fundamentação",
     "intakePolicy.tab.json": "JSON",
     "intakePolicy.tab.output": "Saída",
-    "intakePolicy.tab.overview": "Visão geral",
     "intakePolicy.title": "Política de ingestão",
     "intakePolicy.toast.invalid": "Política de ingestão inválida",
     "intakePolicy.toast.saved": "A política de ingestão foi salva.",

package/src/i18n/locales/ru.json

@@ -32,6 +32,7 @@
     "agent.approvalMode.fullControlDescription": "Выполнять изменяющие действия без одобрения",
     "agent.approvalMode.selectorLabel": "Режим одобрения агента",
     "agent.artifacts": "Артефакты",
+    "agent.backToDocuments": "Назад к документам",
     "agent.backToMainAgent": "Вернуться к основному агенту",
     "agent.batch": "Пакет",
     "agent.browserPreview": "Предпросмотр браузера",
@@ -67,7 +68,12 @@
     "agent.dashboard": "Панель управления",
     "agent.details": "Детали",
     "agent.document": "Документ",
+    "agent.documentCount_one": "{{count}} документ",
+    "agent.documentCount_few": "{{count}} документа",
+    "agent.documentCount_many": "{{count}} документов",
+    "agent.documentCount_other": "{{count}} документа",
     "agent.documents": "Документы",
+    "agent.documentsFiltered": "{{visible}} из {{total}} документов",
     "agent.download": "Скачать",
     "agent.downloadConversation": "Скачать разговор",
     "agent.dropFilesToUpload": "Перетащите файлы для загрузки",
@@ -123,6 +129,7 @@
     "agent.noConversationContent": "Нет содержимого разговора для экспорта",
     "agent.noDocumentsOpen": "Нет открытых документов",
     "agent.noFilesUploadedYet": "Файлы не загружены",
+    "agent.noMatchingDocuments": "Подходящих документов нет",
     "agent.noMessagesInWorkstream": "Пока нет сообщений в этом рабочем потоке...",
     "agent.noPlanAvailable": "План недоступен",
     "agent.noPlanDetected": "План пока не обнаружен",
@@ -363,6 +370,7 @@
     "mcpConnections.enabled": "Включено",
     "mcpConnections.label": "MCP",
     "mcpConnections.manage": "Управление подключениями MCP",
+    "mcpConnections.managedByApp": "Управляется приложением",
     "mcpConnections.settings": "Настройки",
     "mcpConnections.subtitle": "Управляйте серверами MCP, доступными для этого разговора.",
     "mcpConnections.title": "MCP",
@@ -418,6 +426,12 @@
     "pdf.previousPage": "Предыдущая страница",
     "pdf.zoomIn": "Увеличить",
     "pdf.zoomOut": "Уменьшить",
+    "permissions.accessDenied": "У вас нет разрешения на доступ к этому рабочему пространству.",
+    "permissions.connecting": "Подключение к рабочему пространству…",
+    "permissions.connectionFailed": "Не удалось подключиться к рабочему пространству",
+    "permissions.loadingPermissions": "Загрузка ваших разрешений.",
+    "permissions.retrying": "Это занимает больше времени, чем обычно. Мы продолжим попытки автоматически.",
+    "permissions.tryAgainLater": "Повторите попытку через некоторое время.",
     "shell.accessDenied": "Доступ запрещён",
     "shell.applicationNotRegistered": "Приложение не зарегистрировано",
     "shell.organization": "Организация",
@@ -1143,12 +1157,12 @@
     "intakePolicy.summary.source": "Источник",
     "intakePolicy.summary.template": "Модель",
     "intakePolicy.summary.toc": "Индекс",
+    "intakePolicy.tab.classification": "Классификация",
     "intakePolicy.tab.conversion": "Преобразование",
     "intakePolicy.tab.extraction": "Извлечение",
     "intakePolicy.tab.grounding": "Обоснование",
     "intakePolicy.tab.json": "JSON",
     "intakePolicy.tab.output": "Вывод",
-    "intakePolicy.tab.overview": "Обзор",
     "intakePolicy.title": "Политика приёма",
     "intakePolicy.toast.invalid": "Недопустимая политика приёма",
     "intakePolicy.toast.saved": "Политика приёма сохранена.",

package/src/i18n/locales/tr.json

@@ -30,6 +30,7 @@
     "agent.approvalMode.fullControlDescription": "Değiştiren işlemleri onaysız çalıştır",
     "agent.approvalMode.selectorLabel": "Ajan onay modu",
     "agent.artifacts": "Yapılar",
+    "agent.backToDocuments": "Belgelere geri dön",
     "agent.backToMainAgent": "Ana ajana dön",
     "agent.batch": "Toplu",
     "agent.browserPreview": "Tarayıcı önizlemesi",
@@ -65,7 +66,10 @@
     "agent.dashboard": "Gösterge paneli",
     "agent.details": "Ayrıntılar",
     "agent.document": "Belge",
+    "agent.documentCount_one": "{{count}} belge",
+    "agent.documentCount_other": "{{count}} belge",
     "agent.documents": "Belgeler",
+    "agent.documentsFiltered": "{{total}} belgeden {{visible}} tanesi",
     "agent.download": "İndir",
     "agent.downloadConversation": "Konuşmayı indir",
     "agent.dropFilesToUpload": "Yüklemek için dosyaları bırakın",
@@ -121,6 +125,7 @@
     "agent.noConversationContent": "Dışa aktarılacak konuşma içeriği yok",
     "agent.noDocumentsOpen": "Açık belge yok",
     "agent.noFilesUploadedYet": "Yüklenen dosya yok",
+    "agent.noMatchingDocuments": "Eşleşen belge yok",
     "agent.noMessagesInWorkstream": "Bu iş akışında henüz mesaj yok...",
     "agent.noPlanAvailable": "Plan mevcut değil",
     "agent.noPlanDetected": "Henüz bir plan algılanmadı",
@@ -359,6 +364,7 @@
     "mcpConnections.enabled": "Etkin",
     "mcpConnections.label": "MCP",
     "mcpConnections.manage": "MCP bağlantılarını yönet",
+    "mcpConnections.managedByApp": "Uygulama tarafından yönetiliyor",
     "mcpConnections.settings": "Ayarlar",
     "mcpConnections.subtitle": "Bu konuşma için kullanılabilen MCP sunucularını yönetin.",
     "mcpConnections.title": "MCP",
@@ -414,6 +420,12 @@
     "pdf.previousPage": "Önceki sayfa",
     "pdf.zoomIn": "Yakınlaştır",
     "pdf.zoomOut": "Uzaklaştır",
+    "permissions.accessDenied": "Bu çalışma alanına erişim izniniz yok.",
+    "permissions.connecting": "Çalışma alanınıza bağlanılıyor…",
+    "permissions.connectionFailed": "Çalışma alanınıza bağlanılamadı",
+    "permissions.loadingPermissions": "İzinleriniz yükleniyor.",
+    "permissions.retrying": "Bu işlem normalden uzun sürüyor. Otomatik olarak yeniden deneyeceğiz.",
+    "permissions.tryAgainLater": "Lütfen biraz sonra tekrar deneyin.",
     "shell.accessDenied": "Erişim Reddedildi",
     "shell.applicationNotRegistered": "Uygulama kayıtlı değil",
     "shell.organization": "Kuruluş",
@@ -1121,12 +1133,12 @@
     "intakePolicy.summary.source": "Kaynak",
     "intakePolicy.summary.template": "Model",
     "intakePolicy.summary.toc": "Dizin",
+    "intakePolicy.tab.classification": "Sınıflandırma",
     "intakePolicy.tab.conversion": "Dönüştürme",
     "intakePolicy.tab.extraction": "Çıkarma",
     "intakePolicy.tab.grounding": "Temellendirme",
     "intakePolicy.tab.json": "JSON",
     "intakePolicy.tab.output": "Çıktı",
-    "intakePolicy.tab.overview": "Genel bakış",
     "intakePolicy.title": "Alım ilkesi",
     "intakePolicy.toast.invalid": "Geçersiz alım ilkesi",
     "intakePolicy.toast.saved": "Alım ilkesi kaydedildi.",

package/src/i18n/locales/zh-TW.json

@@ -30,6 +30,7 @@
     "agent.approvalMode.fullControlDescription": "不需核准即可執行修改動作",
     "agent.approvalMode.selectorLabel": "代理程式核准模式",
     "agent.artifacts": "產物",
+    "agent.backToDocuments": "返回文件列表",
     "agent.backToMainAgent": "返回主代理",
     "agent.batch": "批次",
     "agent.browserPreview": "瀏覽器預覽",
@@ -65,7 +66,10 @@
     "agent.dashboard": "儀表板",
     "agent.details": "詳情",
     "agent.document": "文件",
+    "agent.documentCount_one": "{{count}} 個文件",
+    "agent.documentCount_other": "{{count}} 個文件",
     "agent.documents": "文件",
+    "agent.documentsFiltered": "{{total}} 個文件中的 {{visible}} 個",
     "agent.download": "下載",
     "agent.downloadConversation": "下載對話",
     "agent.dropFilesToUpload": "拖放檔案上傳",
@@ -121,6 +125,7 @@
     "agent.noConversationContent": "沒有可匯出的對話內容",
     "agent.noDocumentsOpen": "沒有開啟的文件",
     "agent.noFilesUploadedYet": "暫無上傳檔案",
+    "agent.noMatchingDocuments": "沒有符合的文件",
     "agent.noMessagesInWorkstream": "此工作流程中暫無訊息...",
     "agent.noPlanAvailable": "暫無計劃",
     "agent.noPlanDetected": "尚未偵測到計劃",
@@ -359,6 +364,7 @@
     "mcpConnections.enabled": "已啟用",
     "mcpConnections.label": "MCP",
     "mcpConnections.manage": "管理 MCP 連線",
+    "mcpConnections.managedByApp": "由應用程式管理",
     "mcpConnections.settings": "設定",
     "mcpConnections.subtitle": "管理可用於此對話的 MCP 伺服器。",
     "mcpConnections.title": "MCP",
@@ -414,6 +420,12 @@
     "pdf.previousPage": "上一頁",
     "pdf.zoomIn": "放大",
     "pdf.zoomOut": "縮小",
+    "permissions.accessDenied": "您沒有存取此工作區的權限。",
+    "permissions.connecting": "正在連線至您的工作區…",
+    "permissions.connectionFailed": "無法連線至您的工作區",
+    "permissions.loadingPermissions": "正在載入您的權限。",
+    "permissions.retrying": "這比平時需要更長時間。我們會繼續自動重試。",
+    "permissions.tryAgainLater": "請稍後再試。",
     "shell.accessDenied": "存取被拒絕",
     "shell.applicationNotRegistered": "應用程式未註冊",
     "shell.organization": "組織",
@@ -1120,12 +1132,12 @@
     "intakePolicy.summary.source": "來源",
     "intakePolicy.summary.template": "模板",
     "intakePolicy.summary.toc": "目录",
+    "intakePolicy.tab.classification": "分類",
     "intakePolicy.tab.conversion": "轉換",
     "intakePolicy.tab.extraction": "提取",
     "intakePolicy.tab.grounding": "依據",
     "intakePolicy.tab.json": "JSON",
     "intakePolicy.tab.output": "輸出",
-    "intakePolicy.tab.overview": "概覽",
     "intakePolicy.title": "采集策略",
     "intakePolicy.toast.invalid": "采集策略無效",
     "intakePolicy.toast.saved": "采集策略已保存。",

package/src/i18n/locales/zh.json

@@ -30,6 +30,7 @@
     "agent.approvalMode.fullControlDescription": "无需批准即可执行修改操作",
     "agent.approvalMode.selectorLabel": "代理批准模式",
     "agent.artifacts": "产物",
+    "agent.backToDocuments": "返回文档列表",
     "agent.backToMainAgent": "返回主代理",
     "agent.batch": "批次",
     "agent.browserPreview": "浏览器预览",
@@ -65,7 +66,10 @@
     "agent.dashboard": "仪表板",
     "agent.details": "详情",
     "agent.document": "文档",
+    "agent.documentCount_one": "{{count}} 个文档",
+    "agent.documentCount_other": "{{count}} 个文档",
     "agent.documents": "文档",
+    "agent.documentsFiltered": "{{total}} 个文档中的 {{visible}} 个",
     "agent.download": "下载",
     "agent.downloadConversation": "下载对话",
     "agent.dropFilesToUpload": "拖放文件上传",
@@ -121,6 +125,7 @@
     "agent.noConversationContent": "没有可导出的对话内容",
     "agent.noDocumentsOpen": "没有打开的文档",
     "agent.noFilesUploadedYet": "暂无上传文件",
+    "agent.noMatchingDocuments": "没有匹配的文档",
     "agent.noMessagesInWorkstream": "此工作流中暂无消息...",
     "agent.noPlanAvailable": "暂无计划",
     "agent.noPlanDetected": "尚未检测到计划",
@@ -359,6 +364,7 @@
     "mcpConnections.enabled": "已启用",
     "mcpConnections.label": "MCP",
     "mcpConnections.manage": "管理 MCP 连接",
+    "mcpConnections.managedByApp": "由应用管理",
     "mcpConnections.settings": "设置",
     "mcpConnections.subtitle": "管理可用于此对话的 MCP 服务器。",
     "mcpConnections.title": "MCP",
@@ -414,6 +420,12 @@
     "pdf.previousPage": "上一页",
     "pdf.zoomIn": "放大",
     "pdf.zoomOut": "缩小",
+    "permissions.accessDenied": "您没有访问此工作区的权限。",
+    "permissions.connecting": "正在连接到您的工作区…",
+    "permissions.connectionFailed": "无法连接到您的工作区",
+    "permissions.loadingPermissions": "正在加载您的权限。",
+    "permissions.retrying": "这比平时需要更长时间。我们会继续自动重试。",
+    "permissions.tryAgainLater": "请稍后重试。",
     "shell.accessDenied": "访问被拒绝",
     "shell.applicationNotRegistered": "应用未注册",
     "shell.organization": "组织",
@@ -1120,12 +1132,12 @@
     "intakePolicy.summary.source": "来源",
     "intakePolicy.summary.template": "模板",
     "intakePolicy.summary.toc": "目录",
+    "intakePolicy.tab.classification": "分类",
     "intakePolicy.tab.conversion": "转换",
     "intakePolicy.tab.extraction": "提取",
     "intakePolicy.tab.grounding": "依据",
     "intakePolicy.tab.json": "JSON",
     "intakePolicy.tab.output": "输出",
-    "intakePolicy.tab.overview": "概览",
     "intakePolicy.title": "采集策略",
     "intakePolicy.toast.invalid": "采集策略无效",
     "intakePolicy.toast.saved": "采集策略已保存。",

package/src/layout/FullHeightLayout.tsx

@@ -27,11 +27,11 @@ FullHeightLayout.Body = function Body({ className, children }: BodyProps) {
 };
 
 FullHeightLayout.VR = function VDivider() {
-    return <div className="w-[1px] border border-red-200"></div>;
+    return <div className="w-[1px] border border-destructive"></div>;
 };
 
 FullHeightLayout.HR = function HDivider() {
-    return <div className="w-full h-1 border-b border-red-200"></div>;
+    return <div className="w-full h-1 border-b border-destructive"></div>;
 };
 
 FullHeightLayout.Flex = function Flex({ className, children }: BodyProps) {

package/src/layout/Navbar.tsx

@@ -42,12 +42,12 @@ function SearchBox(_props: SearchBoxProps) {
                 {t('layout.search')}
             </label>
             <Search
-                className="pointer-events-none absolute inset-y-0 start-0 h-full w-5 text-gray-400"
+                className="pointer-events-none absolute inset-y-0 start-0 h-full w-5 text-muted"
                 aria-hidden="true"
             />
             <input
                 id="search-field"
-                className="block h-full w-full border-0 py-0 ps-8 pe-0 text-gray-900 placeholder:text-gray-400 focus:ring-0 sm:text-sm"
+                className="block h-full w-full border-0 py-0 ps-8 pe-0 text-foreground placeholder:text-muted focus:ring-0 sm:text-sm"
                 placeholder={t('layout.searchPlaceholder')}
                 type="search"
                 name="search"
@@ -85,7 +85,7 @@ export function NavbarSeparator({ visible }: NavbarSeparatorProps) {
     if (visible) {
         visibility = visible === 'mobile' ? 'lg:hidden' : 'hidden lg:block';
     }
-    return <div className={`h-6 w-px bg-gray-900/10 dark:bg-slate-900/0.1 ${visibility}`} aria-hidden="true" />;
+    return <div className={`h-6 w-px bg-muted/10 dark:bg-muted/0.1 ${visibility}`} aria-hidden="true" />;
 }
 
 interface NavbarIconButtonProps {
@@ -97,7 +97,7 @@ export function NavbarIconButton({ title, icon: Icon, onClick }: NavbarIconButto
     return (
         <button
             type="button"
-            className="-m-2.5 p-2.5 text-gray-400 dark:text-slate-50 hover:text-gray-500"
+            className="-m-2.5 p-2.5 text-muted dark:text-foreground hover:text-muted"
             onClick={onClick}
         >
             <span className="sr-only">{title}</span>
@@ -120,7 +120,7 @@ interface NavbarLinkProps {
 }
 export function NavbarLink({ href, onClick, children }: NavbarLinkProps) {
     return (
-        <a className="dark:text-slate-50" href={href} onClick={onClick}>
+        <a className="dark:text-foreground" href={href} onClick={onClick}>
             {children}
         </a>
     );

package/src/layout/Sidebar.tsx

@@ -12,7 +12,7 @@ interface SidebarProps {
 
 export function Sidebar({ children, logo, className }: SidebarProps) {
     return (
-        <div className={clsx(className || 'bg-indigo-600 dark:bg-indigo-950', 'flex flex-col h-full')}>
+        <div className={clsx(className || 'bg-primary', 'flex flex-col h-full')}>
             {logo && <div className="-mx-2 flex h-auto my-4 shrink-0 self-start">{logo}</div>}
             <div className="flex-1 min-h-0 overflow-hidden px-0 lg:px-2">
                 <nav className="h-full flex flex-col">

package/src/router/NestedNavigationContext.test.tsx

@@ -0,0 +1,54 @@
+// @vitest-environment jsdom
+
+import { act, cleanup, fireEvent, render, screen } from '@testing-library/react';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { NestedNavigationContext } from './NestedNavigationContext';
+import { NestedRouterProvider } from './NestedRouterProvider';
+import { RouteComponent } from './RouteComponent';
+import { useNavigate } from './Router';
+import { RouterProvider } from './RouterProvider';
+
+function NavigationButton() {
+    const navigate = useNavigate();
+    return (
+        <button type="button" onClick={() => navigate('/objects/object-1')}>
+            Open object
+        </button>
+    );
+}
+
+describe('NestedNavigationContext', () => {
+    beforeEach(() => {
+        window.history.pushState({}, '', '/store/objects');
+    });
+
+    afterEach(() => {
+        cleanup();
+        window.history.pushState({}, '', '/');
+    });
+
+    it('can apply a top-level base path from inside a nested route', () => {
+        const routes = [
+            {
+                path: '/store/objects/*',
+                Component: () => (
+                    <NestedRouterProvider routes={[{ path: '/', Component: () => null }]}>
+                        <NestedNavigationContext basePath="/store" isBasePathNested={false}>
+                            <NavigationButton />
+                        </NestedNavigationContext>
+                    </NestedRouterProvider>
+                ),
+            },
+        ];
+
+        render(
+            <RouterProvider routes={routes}>
+                <RouteComponent />
+            </RouterProvider>,
+        );
+
+        act(() => fireEvent.click(screen.getByRole('button', { name: 'Open object' })));
+
+        expect(window.location.pathname).toBe('/store/objects/object-1');
+    });
+});

package/src/router/NestedNavigationContext.tsx

@@ -7,10 +7,17 @@ import { ReactRouterContext, useRouterContext } from './Router';
 
 interface NestedNavigationContextProps {
     basePath: string;
+    /** Whether this base path is relative to the current nested router. Defaults to true. */
+    isBasePathNested?: boolean;
     fixLinks?: boolean;
     children: React.ReactNode | React.ReactNode[];
 }
-export function NestedNavigationContext({ basePath, fixLinks = false, children }: NestedNavigationContextProps) {
+export function NestedNavigationContext({
+    basePath,
+    isBasePathNested = true,
+    fixLinks = false,
+    children,
+}: NestedNavigationContextProps) {
     const ctx = useRouterContext();
 
     const wrapWithFixLinks = fixLinks
@@ -27,7 +34,7 @@ export function NestedNavigationContext({ basePath, fixLinks = false, children }
                         return ctx.navigate(to, options);
                     }
                     const actualBasePath = options?.basePath ? joinPath(basePath, options.basePath) : basePath;
-                    return ctx.navigate(to, { ...options, basePath: actualBasePath });
+                    return ctx.navigate(to, { ...options, basePath: actualBasePath, isBasePathNested });
                 },
             }}
         >

package/src/session/UserSessionProvider.tsx

@@ -12,13 +12,11 @@ import {
     resolveAuthSelection,
     UserNotFoundError,
 } from './auth/composable';
-import { authReturnUrl, centralAuthRedirectUrl, shouldRedirectToCentralAuth } from './auth/domainRouting';
+import { redirectToCentralAuth, shouldRedirectToCentralAuth } from './auth/domainRouting';
 import { getFirebaseAuth } from './auth/firebase';
 import { useAuthState } from './auth/useAuthState';
 import { UserSession, UserSessionContext } from './UserSession';
 
-const CENTRAL_AUTH_REDIRECT = 'https://internal-auth.vertesia.app/';
-
 function clearAuthHash() {
     const url = new URL(window.location.href);
     url.hash = '';
@@ -66,7 +64,7 @@ export function UserSessionProvider({ children, loadOnboardingStatus = true }: U
     const token = hashParams.get('token');
     const state = hashParams.get('state');
     const [session, setSession] = useState<UserSession>(new UserSession());
-    const { generateState, verifyState, clearState } = useAuthState();
+    const { verifyState, clearState } = useAuthState();
     const hasInitiatedAuthRef = useRef(false);
     const authFlowRef = useRef<(() => undefined | (() => void)) | undefined>(undefined);
 
@@ -110,17 +108,6 @@ export function UserSessionProvider({ children, loadOnboardingStatus = true }: U
         return true;
     };
 
-    const redirectToCentralAuth = (selection: { accountId?: string; projectId?: string }) => {
-        const url = centralAuthRedirectUrl({
-            centralAuthUrl: CENTRAL_AUTH_REDIRECT,
-            stsEndpoint: Env.endpoints.sts ?? 'https://sts.vertesia.io',
-            returnUrl: authReturnUrl(),
-            state: generateState(),
-            ...selection,
-        });
-        location.replace(url.toString());
-    };
-
     authFlowRef.current = () => {
         // Make this effect idempotent - only run auth flow once
         if (hasInitiatedAuthRef.current) {

package/src/session/auth/authState.test.ts

@@ -0,0 +1,35 @@
+import { renderHook } from '@testing-library/react';
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import { generateAuthState, verifyAuthState } from './authState';
+import { useAuthState } from './useAuthState';
+
+afterEach(() => {
+    sessionStorage.clear();
+    vi.useRealTimers();
+});
+
+describe('shared auth state', () => {
+    it('lets the provider hook verify and clear state generated before React mounts', () => {
+        const state = generateAuthState();
+        const { result } = renderHook(() => useAuthState());
+        expect(result.current.verifyState(state)).toBeUndefined();
+        result.current.clearState();
+        expect(verifyAuthState(state)).toContain('State mismatched');
+        expect(sessionStorage.getItem('auth_state_expiry')).toBeNull();
+    });
+
+    it('keeps hook-generated state compatible with the shared verifier', () => {
+        const { result } = renderHook(() => useAuthState());
+        const state = result.current.generateState();
+        expect(verifyAuthState(state)).toBeUndefined();
+        expect(verifyAuthState(null)).toBe('Missing state');
+        expect(verifyAuthState('wrong')).toContain('State mismatched');
+    });
+
+    it('rejects the recorded state after the existing five-minute lifetime', () => {
+        vi.useFakeTimers();
+        const state = generateAuthState();
+        vi.advanceTimersByTime(5 * 60 * 1000 + 1);
+        expect(verifyAuthState(state)).toBe('State expired');
+    });
+});

package/src/session/auth/authState.ts

@@ -0,0 +1,42 @@
+/**
+ * The `state` parameter binding a Central Auth round-trip to the tab that started it.
+ *
+ * Plain functions rather than a hook, because the round-trip is not always started from a
+ * component: an expired session is renewed from the token layer, which has no React context to
+ * call {@link useAuthState} from. The hook wraps these so both paths write the same record.
+ */
+
+const AUTH_STATE_KEY = 'auth_state';
+const STATE_EXPIRY_KEY = 'auth_state_expiry';
+const STATE_TTL = 5 * 60 * 1000; // 5 min
+
+/** Mint a state value and record it for {@link verifyAuthState}. */
+export function generateAuthState(): string {
+    const state = crypto.randomUUID();
+    sessionStorage.setItem(AUTH_STATE_KEY, state);
+    sessionStorage.setItem(STATE_EXPIRY_KEY, String(Date.now() + STATE_TTL));
+    return state;
+}
+
+/** The reason `returnedState` is unacceptable, or undefined when it is good. */
+export function verifyAuthState(returnedState: string | null): string | undefined {
+    if (!returnedState) {
+        return 'Missing state';
+    }
+
+    const savedState = sessionStorage.getItem(AUTH_STATE_KEY);
+    const expiryTime = parseInt(sessionStorage.getItem(STATE_EXPIRY_KEY) || '0', 10);
+
+    if (savedState !== returnedState) {
+        return `State mismatched (${savedState} !== ${returnedState})`;
+    }
+    if (Date.now() > expiryTime) {
+        return 'State expired';
+    }
+    return undefined;
+}
+
+export function clearAuthState(): void {
+    sessionStorage.removeItem(AUTH_STATE_KEY);
+    sessionStorage.removeItem(STATE_EXPIRY_KEY);
+}