@zeniai/client-epic-state 5.0.3-betaVR10 → 5.0.4-beta0ND

package/lib/coreEpics.js

@@ -24,6 +24,7 @@ const resendVerifyDeviceOTPEpic_1 = require("./entity/tenant/epic/resendVerifyDe
 const saveExternalConnectionEpic_1 = require("./entity/tenant/epic/saveExternalConnectionEpic");
 const sendEmailMagicLinkToUserEpic_1 = require("./entity/tenant/epic/sendEmailMagicLinkToUserEpic");
 const signInUserEpic_1 = require("./entity/tenant/epic/signInUserEpic");
+const sessionHeartbeatEpic_1 = require("./entity/tenant/epic/sessionHeartbeatEpic");
 const signOutUserEpic_1 = require("./entity/tenant/epic/signOutUserEpic");
 const verifyDeviceWithTwoFAEpic_1 = require("./entity/tenant/epic/verifyDeviceWithTwoFAEpic");
 // ── Toast Notification Epic ──────────────────────────────────────────
@@ -48,7 +49,7 @@ const verifyOtpEpic_1 = require("./view/twoFactorAuthentication/verifyOtpEpic");
 // RootActionType is only available in the dynamically imported epic.ts.
 const coreRootEpic = (0, redux_observable_1.combineEpics)(
 // Auth & tenant
-clearAllEpic_1.clearAllEpic, doMagicLinkSignInEpic_1.doMagicLinkSignInEpic, signInUserEpic_1.doSignInEpic, signOutUserEpic_1.doSignOutEpic, fetchActiveTenantEpic_1.fetchActiveTenantEpic, fetchAllTenantsEpic_1.fetchAllTenantsEpic, fetchExcludedResourcesEpic_1.fetchExcludedResourcesEpic, fetchExternalConnectionsEpic_1.fetchExternalConnectionsEpic, fetchSubscriptionSummaryForTenantEpic_1.fetchSubscriptionSummaryForTenantEpic, resendVerifyDeviceOTPEpic_1.resendVerifyDeviceOTPEpic, saveExternalConnectionEpic_1.saveExternalConnectionEpic, sendEmailMagicLinkToUserEpic_1.sendEmailMagicLinkToUserEpic, verifyDeviceWithTwoFAEpic_1.verifyDeviceWithTwoFAEpic, 
+clearAllEpic_1.clearAllEpic, doMagicLinkSignInEpic_1.doMagicLinkSignInEpic, signInUserEpic_1.doSignInEpic, signOutUserEpic_1.doSignOutEpic, sessionHeartbeatEpic_1.sessionHeartbeatEpic, fetchActiveTenantEpic_1.fetchActiveTenantEpic, fetchAllTenantsEpic_1.fetchAllTenantsEpic, fetchExcludedResourcesEpic_1.fetchExcludedResourcesEpic, fetchExternalConnectionsEpic_1.fetchExternalConnectionsEpic, fetchSubscriptionSummaryForTenantEpic_1.fetchSubscriptionSummaryForTenantEpic, resendVerifyDeviceOTPEpic_1.resendVerifyDeviceOTPEpic, saveExternalConnectionEpic_1.saveExternalConnectionEpic, sendEmailMagicLinkToUserEpic_1.sendEmailMagicLinkToUserEpic, verifyDeviceWithTwoFAEpic_1.verifyDeviceWithTwoFAEpic, 
 // Toast
 pushToastNotificationEpic_1.pushToastNotificationEpic, 
 // Collaboration

package/lib/entity/aiAccountantCustomer/aiAccountantCustomerPayload.d.ts

@@ -1,7 +1,15 @@
 import { AiAccountantCustomer, AiAccountantEnrollment, AiAccountantJob } from './aiAccountantCustomerState';
+export interface AiAccountantModelAccuracyPayload {
+    accuracy: number;
+    model_id: string;
+    passed: boolean;
+    threshold: number;
+    training_status: string;
+    validated_at: string;
+}
 export interface AiAccountantEnrollmentPayload {
     status: string;
-    accuracy?: Record<string, number>;
+    accuracy?: Record<string, AiAccountantModelAccuracyPayload> | null;
     latest_training?: string;
     latest_transaction_sync?: string;
     offboarded_at?: string;

package/lib/entity/aiAccountantCustomer/aiAccountantCustomerPayload.js

@@ -4,9 +4,24 @@ exports.toAiAccountantJob = exports.toAiAccountantCustomer = exports.toAiAccount
 const zeniDayJS_1 = require("../../zeniDayJS");
 const aiAccountantCustomerState_1 = require("./aiAccountantCustomerState");
 // ── Mapping functions (payload → state) ──
+// Backend returns accuracy as a percent (0–100) inside a nested object; the UI
+// layer treats it as a 0–1 fraction. Normalize here and drop malformed entries.
+const toAccuracyByModel = (accuracyPayload) => {
+    if (accuracyPayload == null) {
+        return undefined;
+    }
+    const result = {};
+    Object.entries(accuracyPayload).forEach(([model, entry]) => {
+        const percent = entry?.accuracy;
+        if (typeof percent === 'number' && Number.isFinite(percent)) {
+            result[model] = percent / 100;
+        }
+    });
+    return Object.keys(result).length > 0 ? result : undefined;
+};
 const toAiAccountantEnrollment = (payload) => ({
     status: (0, aiAccountantCustomerState_1.toAiAccountantEnrollmentStatus)(payload.status),
-    accuracy: payload.accuracy,
+    accuracy: toAccuracyByModel(payload.accuracy),
     latestTraining: payload.latest_training != null
         ? (0, zeniDayJS_1.date)(payload.latest_training)
         : undefined,

package/lib/entity/tenant/SessionManager.d.ts

@@ -0,0 +1,38 @@
+/**
+ * SessionManager — Central session lifecycle manager.
+ *
+ * Responsibilities:
+ * 1. Track user activity (mousemove, keydown, click, scroll, touch)
+ * 2. Send heartbeat at configurable intervals while user is active
+ * 3. Show warning popup after idle timeout
+ * 4. Auto-logout after warning countdown expires
+ */
+import { SessionCallbacks, SessionConfig } from './sessionTypes';
+export declare class SessionManager {
+    private config;
+    private callbacks;
+    /** Timestamps and timers */
+    private lastActivityTime;
+    private idleCheckInterval;
+    private heartbeatInterval;
+    private countdownInterval;
+    private activityDebounceTimer;
+    /** State */
+    private running;
+    private warningActive;
+    private secondsRemaining;
+    /** Bound handler for event listener cleanup. */
+    private boundOnActivity;
+    private boundOnVisibilityChange;
+    start(config: Partial<SessionConfig> | undefined, callbacks: SessionCallbacks): void;
+    stop(): void;
+    continueSession(): void;
+    isWarningActive(): boolean;
+    getSecondsRemaining(): number;
+    private onActivity;
+    private onVisibilityChange;
+    private checkIdle;
+    private startWarning;
+    private startHeartbeat;
+    private clearTimer;
+}

package/lib/entity/tenant/SessionManager.js

@@ -0,0 +1,171 @@
+"use strict";
+/**
+ * SessionManager — Central session lifecycle manager.
+ *
+ * Responsibilities:
+ * 1. Track user activity (mousemove, keydown, click, scroll, touch)
+ * 2. Send heartbeat at configurable intervals while user is active
+ * 3. Show warning popup after idle timeout
+ * 4. Auto-logout after warning countdown expires
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SessionManager = void 0;
+const sessionTypes_1 = require("./sessionTypes");
+/** Events that indicate user activity. */
+const ACTIVITY_EVENTS = [
+    'mousemove',
+    'mousedown',
+    'keydown',
+    'scroll',
+    'touchstart',
+    'click',
+];
+/** Debounce interval for activity events (ms). */
+const ACTIVITY_DEBOUNCE_MS = 1000;
+class SessionManager {
+    constructor() {
+        this.config = sessionTypes_1.DEFAULT_SESSION_CONFIG;
+        this.callbacks = null;
+        /** Timestamps and timers */
+        this.lastActivityTime = 0;
+        this.idleCheckInterval = null;
+        this.heartbeatInterval = null;
+        this.countdownInterval = null;
+        this.activityDebounceTimer = null;
+        /** State */
+        this.running = false;
+        this.warningActive = false;
+        this.secondsRemaining = 0;
+        /** Bound handler for event listener cleanup. */
+        this.boundOnActivity = this.onActivity.bind(this);
+        this.boundOnVisibilityChange = this.onVisibilityChange.bind(this);
+    }
+    // ─── Public API ────────────────────────────────────────────
+    start(config = {}, callbacks) {
+        if (this.running) {
+            this.stop();
+        }
+        this.config = { ...sessionTypes_1.DEFAULT_SESSION_CONFIG, ...config };
+        this.callbacks = callbacks;
+        this.running = true;
+        this.warningActive = false;
+        this.lastActivityTime = Date.now();
+        if (!this.config.isAutoLogoutEnabled) {
+            return;
+        }
+        ACTIVITY_EVENTS.forEach((event) => {
+            document.addEventListener(event, this.boundOnActivity, {
+                capture: true,
+                passive: true,
+            });
+        });
+        document.addEventListener('visibilitychange', this.boundOnVisibilityChange);
+        this.startHeartbeat();
+        this.callbacks?.onHeartbeat();
+        this.idleCheckInterval = setInterval(() => this.checkIdle(), 1000);
+    }
+    stop() {
+        this.running = false;
+        this.warningActive = false;
+        ACTIVITY_EVENTS.forEach((event) => {
+            document.removeEventListener(event, this.boundOnActivity, {
+                capture: true,
+            });
+        });
+        document.removeEventListener('visibilitychange', this.boundOnVisibilityChange);
+        this.clearTimer('idleCheckInterval');
+        this.clearTimer('heartbeatInterval');
+        this.clearTimer('countdownInterval');
+        this.clearTimer('activityDebounceTimer');
+    }
+    continueSession() {
+        if (!this.running) {
+            return;
+        }
+        this.warningActive = false;
+        this.secondsRemaining = 0;
+        this.lastActivityTime = Date.now();
+        this.clearTimer('countdownInterval');
+        this.callbacks?.onHeartbeat();
+        this.callbacks?.onSessionExtended();
+        this.startHeartbeat();
+    }
+    isWarningActive() {
+        return this.warningActive;
+    }
+    getSecondsRemaining() {
+        return this.secondsRemaining;
+    }
+    // ─── Private ───────────────────────────────────────────────
+    onActivity() {
+        if (!this.running || this.warningActive) {
+            return;
+        }
+        if (this.activityDebounceTimer != null) {
+            return;
+        }
+        this.lastActivityTime = Date.now();
+        this.activityDebounceTimer = setTimeout(() => {
+            this.activityDebounceTimer = null;
+        }, ACTIVITY_DEBOUNCE_MS);
+    }
+    onVisibilityChange() {
+        if (!this.running) {
+            return;
+        }
+        if (document.visibilityState === 'visible') {
+            this.lastActivityTime = Date.now();
+            this.checkIdle();
+        }
+    }
+    checkIdle() {
+        if (!this.running || this.warningActive) {
+            return;
+        }
+        const idleMs = Date.now() - this.lastActivityTime;
+        const idleTimeoutMs = this.config.idleTimeoutMinutes * 60 * 1000;
+        if (idleMs >= idleTimeoutMs) {
+            this.startWarning();
+        }
+    }
+    startWarning() {
+        this.warningActive = true;
+        this.secondsRemaining = this.config.warningDurationSeconds;
+        this.clearTimer('heartbeatInterval');
+        this.callbacks?.onWarningStart(this.secondsRemaining);
+        this.countdownInterval = setInterval(() => {
+            this.secondsRemaining -= 1;
+            if (this.secondsRemaining <= 0) {
+                this.clearTimer('countdownInterval');
+                this.warningActive = false;
+                this.callbacks?.onAutoLogout();
+            }
+            else {
+                this.callbacks?.onWarningTick(this.secondsRemaining);
+            }
+        }, 1000);
+    }
+    startHeartbeat() {
+        this.clearTimer('heartbeatInterval');
+        const intervalMs = this.config.heartbeatIntervalMinutes * 60 * 1000;
+        this.heartbeatInterval = setInterval(() => {
+            if (!this.running || this.warningActive) {
+                return;
+            }
+            this.callbacks?.onHeartbeat();
+        }, intervalMs);
+    }
+    clearTimer(name) {
+        const timer = this[name];
+        if (timer != null) {
+            if (name === 'activityDebounceTimer') {
+                clearTimeout(timer);
+            }
+            else {
+                clearInterval(timer);
+            }
+            this[name] = null;
+        }
+    }
+}
+exports.SessionManager = SessionManager;

package/lib/entity/tenant/epic/sessionHeartbeatEpic.d.ts

@@ -0,0 +1,16 @@
+import { ActionsObservable, StateObservable } from 'redux-observable';
+import { RootState } from '../../../reducer';
+import { ZeniAPI } from '../../../zeniAPI';
+import { sendSessionHeartbeat, sessionHeartbeatFailure, sessionHeartbeatSuccess } from '../tenantReducer';
+export type ActionType = ReturnType<typeof sendSessionHeartbeat> | ReturnType<typeof sessionHeartbeatSuccess> | ReturnType<typeof sessionHeartbeatFailure>;
+export declare const sessionHeartbeatEpic: (actions$: ActionsObservable<ActionType>, _: StateObservable<RootState>, zeniAPI: ZeniAPI) => import("rxjs").Observable<{
+    payload: {
+        expiresAt: string;
+    };
+    type: "tenant/sessionHeartbeatSuccess";
+} | {
+    payload: {
+        error: import("../../../responsePayload").ZeniAPIStatus<Record<string, unknown>>;
+    };
+    type: "tenant/sessionHeartbeatFailure";
+}>;

package/lib/entity/tenant/epic/sessionHeartbeatEpic.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sessionHeartbeatEpic = void 0;
+const rxjs_1 = require("rxjs");
+const operators_1 = require("rxjs/operators");
+const responsePayload_1 = require("../../../responsePayload");
+const tenantReducer_1 = require("../tenantReducer");
+const sessionHeartbeatEpic = (actions$, _, zeniAPI) => actions$.pipe((0, operators_1.filter)(tenantReducer_1.sendSessionHeartbeat.match), (0, operators_1.switchMap)(() => zeniAPI
+    .postAndGetJSON(`${zeniAPI.apiEndPoints.authMicroServiceBaseUrl}/1.0/sessions/heartbeat`)
+    .pipe((0, operators_1.mergeMap)((response) => {
+    if ((0, responsePayload_1.isSuccessResponse)(response)) {
+        return (0, rxjs_1.of)((0, tenantReducer_1.sessionHeartbeatSuccess)(response.data?.expiry ?? ''));
+    }
+    return (0, rxjs_1.of)((0, tenantReducer_1.sessionHeartbeatFailure)(response.status));
+}), (0, operators_1.catchError)((error) => (0, rxjs_1.of)((0, tenantReducer_1.sessionHeartbeatFailure)((0, responsePayload_1.createZeniAPIStatus)('Heartbeat failed', 'Session heartbeat API call errored: ' + JSON.stringify(error))))))));
+exports.sessionHeartbeatEpic = sessionHeartbeatEpic;

package/lib/entity/tenant/sessionTypes.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Session management types for idle timeout and heartbeat.
+ */
+export interface SessionConfig {
+    /** Minutes between heartbeat API calls while user is active. Default: 10 */
+    heartbeatIntervalMinutes: number;
+    /** Minutes of inactivity before the warning popup appears. Default: 30 */
+    idleTimeoutMinutes: number;
+    /** Whether auto-logout is enabled. Default: true */
+    isAutoLogoutEnabled: boolean;
+    /** Seconds to count down in the warning popup before auto-logout. Default: 60 */
+    warningDurationSeconds: number;
+}
+export declare const DEFAULT_SESSION_CONFIG: SessionConfig;
+export interface SessionCallbacks {
+    /** Called when the countdown reaches zero — app should sign out. */
+    onAutoLogout: () => void;
+    /** Called to send a heartbeat API request. */
+    onHeartbeat: () => void;
+    /** Called when the session is extended (heartbeat success or "Continue Session"). */
+    onSessionExtended: () => void;
+    /** Called when the warning countdown starts. */
+    onWarningStart: (secondsRemaining: number) => void;
+    /** Called every second during the countdown. */
+    onWarningTick: (secondsRemaining: number) => void;
+}

package/lib/entity/tenant/sessionTypes.js

@@ -0,0 +1,12 @@
+"use strict";
+/**
+ * Session management types for idle timeout and heartbeat.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_SESSION_CONFIG = void 0;
+exports.DEFAULT_SESSION_CONFIG = {
+    heartbeatIntervalMinutes: 10,
+    idleTimeoutMinutes: 30,
+    isAutoLogoutEnabled: true,
+    warningDurationSeconds: 60,
+};

package/lib/entity/tenant/tenantReducer.d.ts

@@ -51,7 +51,11 @@ export declare const updateTenants: import("@reduxjs/toolkit").ActionCreatorWith
     accountLockTime?: string;
     accountUnlockTime?: string;
     isAccountLocked?: boolean;
-}, "tenant/sendEmailMagicLinkToUserFailure">, updateSignInState: import("@reduxjs/toolkit").ActionCreatorWithPayload<FetchState, "tenant/updateSignInState">, doSignOut: import("@reduxjs/toolkit").ActionCreatorWithoutPayload<"tenant/doSignOut">, signOutSuccess: import("@reduxjs/toolkit").ActionCreatorWithoutPayload<"tenant/signOutSuccess">, updateLoggedInUser: import("@reduxjs/toolkit").ActionCreatorWithPreparedPayload<[userPayload: LoggedInUserPayload, zeniSessionId: string, authProvider: AuthProvider], {
+}, "tenant/sendEmailMagicLinkToUserFailure">, updateSignInState: import("@reduxjs/toolkit").ActionCreatorWithPayload<FetchState, "tenant/updateSignInState">, doSignOut: import("@reduxjs/toolkit").ActionCreatorWithoutPayload<"tenant/doSignOut">, signOutSuccess: import("@reduxjs/toolkit").ActionCreatorWithoutPayload<"tenant/signOutSuccess">, sendSessionHeartbeat: import("@reduxjs/toolkit").ActionCreatorWithoutPayload<"tenant/sendSessionHeartbeat">, sessionHeartbeatSuccess: import("@reduxjs/toolkit").ActionCreatorWithPreparedPayload<[expiresAt: string], {
+    expiresAt: string;
+}, "tenant/sessionHeartbeatSuccess", never, never>, sessionHeartbeatFailure: import("@reduxjs/toolkit").ActionCreatorWithPreparedPayload<[error: ZeniAPIStatus<Record<string, unknown>>], {
+    error: ZeniAPIStatus<Record<string, unknown>>;
+}, "tenant/sessionHeartbeatFailure", never, never>, updateLoggedInUser: import("@reduxjs/toolkit").ActionCreatorWithPreparedPayload<[userPayload: LoggedInUserPayload, zeniSessionId: string, authProvider: AuthProvider], {
     userPayload: LoggedInUserPayload;
     zeniSessionId: string;
     authProvider: AuthProvider;

package/lib/entity/tenant/tenantReducer.js

@@ -4,7 +4,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 var _a;
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.toConnection = exports.toRoleResource = exports.resendVerifyDeviceOTPFailure = exports.resendVerifyDeviceOTPSuccess = exports.resendVerifyDeviceOTP = exports.verifyDeviceWithTwoFAFailure = exports.verifyDeviceWithTwoFASuccess = exports.verifyDeviceWithTwoFA = exports.updateTenantMasterTOSInfo = exports.updateTenantAccountingClassesEnabled = exports.trigger2FA = exports.resetSignInState = exports.updateTreasuryVideoViewedForLoggedInUser = exports.updateReferViewedForLoggedInUser = exports.updateTenantReimbursementInfo = exports.removeOnboardingTenant = exports.updateOnboardingTenants = exports.updateSubscriptionSummaryForTenantFailure = exports.updateSubscriptionSummaryForTenantSuccess = exports.fetchSubscriptionSummaryForTenant = exports.clearAll = exports.fetchExternalConnectionsSuccess = exports.fetchExternalConnectionsFailure = exports.saveExternalConnectionFailure = exports.saveExternalConnectionSuccess = exports.saveExternalConnection = exports.fetchExternalConnections = exports.updateLoggedInUser = exports.signOutSuccess = exports.doSignOut = exports.updateSignInState = exports.sendEmailMagicLinkToUserFailure = exports.sendEmailMagicLinkToUserSuccess = exports.sendEmailMagicLinkToUser = exports.magicLinkSignInFailure = exports.magicLinkSignInSuccess = exports.doMagicLinkSignIn = exports.doSignIn = exports.updateExcludedResourcesFailure = exports.updateExcludedResourcesSuccess = exports.fetchExcludedResources = exports.updateCurrentTenant = exports.updateTenantFailure = exports.updateTenantSuccess = exports.fetchActiveTenant = exports.updateTenantsFailure = exports.updateTenantsSuccess = exports.fetchAllTenants = exports.updateTenants = exports.initialState = void 0;
+exports.resendVerifyDeviceOTPSuccess = exports.resendVerifyDeviceOTP = exports.verifyDeviceWithTwoFAFailure = exports.verifyDeviceWithTwoFASuccess = exports.verifyDeviceWithTwoFA = exports.updateTenantMasterTOSInfo = exports.updateTenantAccountingClassesEnabled = exports.trigger2FA = exports.resetSignInState = exports.updateTreasuryVideoViewedForLoggedInUser = exports.updateReferViewedForLoggedInUser = exports.updateTenantReimbursementInfo = exports.removeOnboardingTenant = exports.updateOnboardingTenants = exports.updateSubscriptionSummaryForTenantFailure = exports.updateSubscriptionSummaryForTenantSuccess = exports.fetchSubscriptionSummaryForTenant = exports.clearAll = exports.fetchExternalConnectionsSuccess = exports.fetchExternalConnectionsFailure = exports.saveExternalConnectionFailure = exports.saveExternalConnectionSuccess = exports.saveExternalConnection = exports.fetchExternalConnections = exports.updateLoggedInUser = exports.sessionHeartbeatFailure = exports.sessionHeartbeatSuccess = exports.sendSessionHeartbeat = exports.signOutSuccess = exports.doSignOut = exports.updateSignInState = exports.sendEmailMagicLinkToUserFailure = exports.sendEmailMagicLinkToUserSuccess = exports.sendEmailMagicLinkToUser = exports.magicLinkSignInFailure = exports.magicLinkSignInSuccess = exports.doMagicLinkSignIn = exports.doSignIn = exports.updateExcludedResourcesFailure = exports.updateExcludedResourcesSuccess = exports.fetchExcludedResources = exports.updateCurrentTenant = exports.updateTenantFailure = exports.updateTenantSuccess = exports.fetchActiveTenant = exports.updateTenantsFailure = exports.updateTenantsSuccess = exports.fetchAllTenants = exports.updateTenants = exports.initialState = void 0;
+exports.toConnection = exports.toRoleResource = exports.resendVerifyDeviceOTPFailure = void 0;
 exports.mapConnectionsPayloadToState = mapConnectionsPayloadToState;
 const toolkit_1 = require("@reduxjs/toolkit");
 const js_base64_1 = require("js-base64");
@@ -436,6 +437,26 @@ const tenant = (0, toolkit_1.createSlice)({
         signOutSuccess(draft) {
             draft.loggedInUser = undefined;
             draft.currentTenantId = undefined;
+            draft.sessionExpiresAt = undefined;
+        },
+        sendSessionHeartbeat() {
+            // No state change needed — epic handles the API call
+        },
+        sessionHeartbeatSuccess: {
+            prepare(expiresAt) {
+                return { payload: { expiresAt } };
+            },
+            reducer(draft, action) {
+                draft.sessionExpiresAt = action.payload.expiresAt;
+            },
+        },
+        sessionHeartbeatFailure: {
+            prepare(error) {
+                return { payload: { error } };
+            },
+            reducer(draft, action) {
+                draft.error = action.payload.error;
+            },
         },
         fetchSubscriptionSummaryForTenant: {
             prepare(tenantId) {
@@ -543,7 +564,7 @@ const tenant = (0, toolkit_1.createSlice)({
         },
     },
 });
-_a = tenant.actions, exports.updateTenants = _a.updateTenants, exports.fetchAllTenants = _a.fetchAllTenants, exports.updateTenantsSuccess = _a.updateTenantsSuccess, exports.updateTenantsFailure = _a.updateTenantsFailure, exports.fetchActiveTenant = _a.fetchActiveTenant, exports.updateTenantSuccess = _a.updateTenantSuccess, exports.updateTenantFailure = _a.updateTenantFailure, exports.updateCurrentTenant = _a.updateCurrentTenant, exports.fetchExcludedResources = _a.fetchExcludedResources, exports.updateExcludedResourcesSuccess = _a.updateExcludedResourcesSuccess, exports.updateExcludedResourcesFailure = _a.updateExcludedResourcesFailure, exports.doSignIn = _a.doSignIn, exports.doMagicLinkSignIn = _a.doMagicLinkSignIn, exports.magicLinkSignInSuccess = _a.magicLinkSignInSuccess, exports.magicLinkSignInFailure = _a.magicLinkSignInFailure, exports.sendEmailMagicLinkToUser = _a.sendEmailMagicLinkToUser, exports.sendEmailMagicLinkToUserSuccess = _a.sendEmailMagicLinkToUserSuccess, exports.sendEmailMagicLinkToUserFailure = _a.sendEmailMagicLinkToUserFailure, exports.updateSignInState = _a.updateSignInState, exports.doSignOut = _a.doSignOut, exports.signOutSuccess = _a.signOutSuccess, exports.updateLoggedInUser = _a.updateLoggedInUser, exports.fetchExternalConnections = _a.fetchExternalConnections, exports.saveExternalConnection = _a.saveExternalConnection, exports.saveExternalConnectionSuccess = _a.saveExternalConnectionSuccess, exports.saveExternalConnectionFailure = _a.saveExternalConnectionFailure, exports.fetchExternalConnectionsFailure = _a.fetchExternalConnectionsFailure, exports.fetchExternalConnectionsSuccess = _a.fetchExternalConnectionsSuccess, exports.clearAll = _a.clearAll, exports.fetchSubscriptionSummaryForTenant = _a.fetchSubscriptionSummaryForTenant, exports.updateSubscriptionSummaryForTenantSuccess = _a.updateSubscriptionSummaryForTenantSuccess, exports.updateSubscriptionSummaryForTenantFailure = _a.updateSubscriptionSummaryForTenantFailure, exports.updateOnboardingTenants = _a.updateOnboardingTenants, exports.removeOnboardingTenant = _a.removeOnboardingTenant, exports.updateTenantReimbursementInfo = _a.updateTenantReimbursementInfo, exports.updateReferViewedForLoggedInUser = _a.updateReferViewedForLoggedInUser, exports.updateTreasuryVideoViewedForLoggedInUser = _a.updateTreasuryVideoViewedForLoggedInUser, exports.resetSignInState = _a.resetSignInState, exports.trigger2FA = _a.trigger2FA, exports.updateTenantAccountingClassesEnabled = _a.updateTenantAccountingClassesEnabled, exports.updateTenantMasterTOSInfo = _a.updateTenantMasterTOSInfo, exports.verifyDeviceWithTwoFA = _a.verifyDeviceWithTwoFA, exports.verifyDeviceWithTwoFASuccess = _a.verifyDeviceWithTwoFASuccess, exports.verifyDeviceWithTwoFAFailure = _a.verifyDeviceWithTwoFAFailure, exports.resendVerifyDeviceOTP = _a.resendVerifyDeviceOTP, exports.resendVerifyDeviceOTPSuccess = _a.resendVerifyDeviceOTPSuccess, exports.resendVerifyDeviceOTPFailure = _a.resendVerifyDeviceOTPFailure;
+_a = tenant.actions, exports.updateTenants = _a.updateTenants, exports.fetchAllTenants = _a.fetchAllTenants, exports.updateTenantsSuccess = _a.updateTenantsSuccess, exports.updateTenantsFailure = _a.updateTenantsFailure, exports.fetchActiveTenant = _a.fetchActiveTenant, exports.updateTenantSuccess = _a.updateTenantSuccess, exports.updateTenantFailure = _a.updateTenantFailure, exports.updateCurrentTenant = _a.updateCurrentTenant, exports.fetchExcludedResources = _a.fetchExcludedResources, exports.updateExcludedResourcesSuccess = _a.updateExcludedResourcesSuccess, exports.updateExcludedResourcesFailure = _a.updateExcludedResourcesFailure, exports.doSignIn = _a.doSignIn, exports.doMagicLinkSignIn = _a.doMagicLinkSignIn, exports.magicLinkSignInSuccess = _a.magicLinkSignInSuccess, exports.magicLinkSignInFailure = _a.magicLinkSignInFailure, exports.sendEmailMagicLinkToUser = _a.sendEmailMagicLinkToUser, exports.sendEmailMagicLinkToUserSuccess = _a.sendEmailMagicLinkToUserSuccess, exports.sendEmailMagicLinkToUserFailure = _a.sendEmailMagicLinkToUserFailure, exports.updateSignInState = _a.updateSignInState, exports.doSignOut = _a.doSignOut, exports.signOutSuccess = _a.signOutSuccess, exports.sendSessionHeartbeat = _a.sendSessionHeartbeat, exports.sessionHeartbeatSuccess = _a.sessionHeartbeatSuccess, exports.sessionHeartbeatFailure = _a.sessionHeartbeatFailure, exports.updateLoggedInUser = _a.updateLoggedInUser, exports.fetchExternalConnections = _a.fetchExternalConnections, exports.saveExternalConnection = _a.saveExternalConnection, exports.saveExternalConnectionSuccess = _a.saveExternalConnectionSuccess, exports.saveExternalConnectionFailure = _a.saveExternalConnectionFailure, exports.fetchExternalConnectionsFailure = _a.fetchExternalConnectionsFailure, exports.fetchExternalConnectionsSuccess = _a.fetchExternalConnectionsSuccess, exports.clearAll = _a.clearAll, exports.fetchSubscriptionSummaryForTenant = _a.fetchSubscriptionSummaryForTenant, exports.updateSubscriptionSummaryForTenantSuccess = _a.updateSubscriptionSummaryForTenantSuccess, exports.updateSubscriptionSummaryForTenantFailure = _a.updateSubscriptionSummaryForTenantFailure, exports.updateOnboardingTenants = _a.updateOnboardingTenants, exports.removeOnboardingTenant = _a.removeOnboardingTenant, exports.updateTenantReimbursementInfo = _a.updateTenantReimbursementInfo, exports.updateReferViewedForLoggedInUser = _a.updateReferViewedForLoggedInUser, exports.updateTreasuryVideoViewedForLoggedInUser = _a.updateTreasuryVideoViewedForLoggedInUser, exports.resetSignInState = _a.resetSignInState, exports.trigger2FA = _a.trigger2FA, exports.updateTenantAccountingClassesEnabled = _a.updateTenantAccountingClassesEnabled, exports.updateTenantMasterTOSInfo = _a.updateTenantMasterTOSInfo, exports.verifyDeviceWithTwoFA = _a.verifyDeviceWithTwoFA, exports.verifyDeviceWithTwoFASuccess = _a.verifyDeviceWithTwoFASuccess, exports.verifyDeviceWithTwoFAFailure = _a.verifyDeviceWithTwoFAFailure, exports.resendVerifyDeviceOTP = _a.resendVerifyDeviceOTP, exports.resendVerifyDeviceOTPSuccess = _a.resendVerifyDeviceOTPSuccess, exports.resendVerifyDeviceOTPFailure = _a.resendVerifyDeviceOTPFailure;
 exports.default = tenant.reducer;
 /**
  * Converts tenants payload to Tenant and User State

package/lib/entity/tenant/tenantState.d.ts

@@ -45,6 +45,7 @@ export interface TenantState extends FetchedState {
     magicLinkCodeVerifier?: string;
     magicLinkEmail?: string;
     otpChallenge?: string;
+    sessionExpiresAt?: string;
     twoFAPhoneNumber?: string;
 }
 export interface TenantProductSettings {

package/lib/esm/coreEpics.js

@@ -22,6 +22,7 @@ import { resendVerifyDeviceOTPEpic } from './entity/tenant/epic/resendVerifyDevi
 import { saveExternalConnectionEpic } from './entity/tenant/epic/saveExternalConnectionEpic';
 import { sendEmailMagicLinkToUserEpic } from './entity/tenant/epic/sendEmailMagicLinkToUserEpic';
 import { doSignInEpic } from './entity/tenant/epic/signInUserEpic';
+import { sessionHeartbeatEpic } from './entity/tenant/epic/sessionHeartbeatEpic';
 import { doSignOutEpic } from './entity/tenant/epic/signOutUserEpic';
 import { verifyDeviceWithTwoFAEpic } from './entity/tenant/epic/verifyDeviceWithTwoFAEpic';
 // ── Toast Notification Epic ──────────────────────────────────────────
@@ -46,7 +47,7 @@ import { verifyOtpEpic } from './view/twoFactorAuthentication/verifyOtpEpic';
 // RootActionType is only available in the dynamically imported epic.ts.
 const coreRootEpic = combineEpics(
 // Auth & tenant
-clearAllEpic, doMagicLinkSignInEpic, doSignInEpic, doSignOutEpic, fetchActiveTenantEpic, fetchAllTenantsEpic, fetchExcludedResourcesEpic, fetchExternalConnectionsEpic, fetchSubscriptionSummaryForTenantEpic, resendVerifyDeviceOTPEpic, saveExternalConnectionEpic, sendEmailMagicLinkToUserEpic, verifyDeviceWithTwoFAEpic, 
+clearAllEpic, doMagicLinkSignInEpic, doSignInEpic, doSignOutEpic, sessionHeartbeatEpic, fetchActiveTenantEpic, fetchAllTenantsEpic, fetchExcludedResourcesEpic, fetchExternalConnectionsEpic, fetchSubscriptionSummaryForTenantEpic, resendVerifyDeviceOTPEpic, saveExternalConnectionEpic, sendEmailMagicLinkToUserEpic, verifyDeviceWithTwoFAEpic, 
 // Toast
 pushToastNotificationEpic, 
 // Collaboration

package/lib/esm/entity/aiAccountantCustomer/aiAccountantCustomerPayload.js

@@ -1,9 +1,24 @@
 import { date } from '../../zeniDayJS';
 import { toAiAccountantEnrollmentStatus, toAiAccountantJobStatus, toAiAccountantOperationType, } from './aiAccountantCustomerState';
 // ── Mapping functions (payload → state) ──
+// Backend returns accuracy as a percent (0–100) inside a nested object; the UI
+// layer treats it as a 0–1 fraction. Normalize here and drop malformed entries.
+const toAccuracyByModel = (accuracyPayload) => {
+    if (accuracyPayload == null) {
+        return undefined;
+    }
+    const result = {};
+    Object.entries(accuracyPayload).forEach(([model, entry]) => {
+        const percent = entry?.accuracy;
+        if (typeof percent === 'number' && Number.isFinite(percent)) {
+            result[model] = percent / 100;
+        }
+    });
+    return Object.keys(result).length > 0 ? result : undefined;
+};
 export const toAiAccountantEnrollment = (payload) => ({
     status: toAiAccountantEnrollmentStatus(payload.status),
-    accuracy: payload.accuracy,
+    accuracy: toAccuracyByModel(payload.accuracy),
     latestTraining: payload.latest_training != null
         ? date(payload.latest_training)
         : undefined,

package/lib/esm/entity/tenant/SessionManager.js

@@ -0,0 +1,167 @@
+/**
+ * SessionManager — Central session lifecycle manager.
+ *
+ * Responsibilities:
+ * 1. Track user activity (mousemove, keydown, click, scroll, touch)
+ * 2. Send heartbeat at configurable intervals while user is active
+ * 3. Show warning popup after idle timeout
+ * 4. Auto-logout after warning countdown expires
+ */
+import { DEFAULT_SESSION_CONFIG, } from './sessionTypes';
+/** Events that indicate user activity. */
+const ACTIVITY_EVENTS = [
+    'mousemove',
+    'mousedown',
+    'keydown',
+    'scroll',
+    'touchstart',
+    'click',
+];
+/** Debounce interval for activity events (ms). */
+const ACTIVITY_DEBOUNCE_MS = 1000;
+export class SessionManager {
+    constructor() {
+        this.config = DEFAULT_SESSION_CONFIG;
+        this.callbacks = null;
+        /** Timestamps and timers */
+        this.lastActivityTime = 0;
+        this.idleCheckInterval = null;
+        this.heartbeatInterval = null;
+        this.countdownInterval = null;
+        this.activityDebounceTimer = null;
+        /** State */
+        this.running = false;
+        this.warningActive = false;
+        this.secondsRemaining = 0;
+        /** Bound handler for event listener cleanup. */
+        this.boundOnActivity = this.onActivity.bind(this);
+        this.boundOnVisibilityChange = this.onVisibilityChange.bind(this);
+    }
+    // ─── Public API ────────────────────────────────────────────
+    start(config = {}, callbacks) {
+        if (this.running) {
+            this.stop();
+        }
+        this.config = { ...DEFAULT_SESSION_CONFIG, ...config };
+        this.callbacks = callbacks;
+        this.running = true;
+        this.warningActive = false;
+        this.lastActivityTime = Date.now();
+        if (!this.config.isAutoLogoutEnabled) {
+            return;
+        }
+        ACTIVITY_EVENTS.forEach((event) => {
+            document.addEventListener(event, this.boundOnActivity, {
+                capture: true,
+                passive: true,
+            });
+        });
+        document.addEventListener('visibilitychange', this.boundOnVisibilityChange);
+        this.startHeartbeat();
+        this.callbacks?.onHeartbeat();
+        this.idleCheckInterval = setInterval(() => this.checkIdle(), 1000);
+    }
+    stop() {
+        this.running = false;
+        this.warningActive = false;
+        ACTIVITY_EVENTS.forEach((event) => {
+            document.removeEventListener(event, this.boundOnActivity, {
+                capture: true,
+            });
+        });
+        document.removeEventListener('visibilitychange', this.boundOnVisibilityChange);
+        this.clearTimer('idleCheckInterval');
+        this.clearTimer('heartbeatInterval');
+        this.clearTimer('countdownInterval');
+        this.clearTimer('activityDebounceTimer');
+    }
+    continueSession() {
+        if (!this.running) {
+            return;
+        }
+        this.warningActive = false;
+        this.secondsRemaining = 0;
+        this.lastActivityTime = Date.now();
+        this.clearTimer('countdownInterval');
+        this.callbacks?.onHeartbeat();
+        this.callbacks?.onSessionExtended();
+        this.startHeartbeat();
+    }
+    isWarningActive() {
+        return this.warningActive;
+    }
+    getSecondsRemaining() {
+        return this.secondsRemaining;
+    }
+    // ─── Private ───────────────────────────────────────────────
+    onActivity() {
+        if (!this.running || this.warningActive) {
+            return;
+        }
+        if (this.activityDebounceTimer != null) {
+            return;
+        }
+        this.lastActivityTime = Date.now();
+        this.activityDebounceTimer = setTimeout(() => {
+            this.activityDebounceTimer = null;
+        }, ACTIVITY_DEBOUNCE_MS);
+    }
+    onVisibilityChange() {
+        if (!this.running) {
+            return;
+        }
+        if (document.visibilityState === 'visible') {
+            this.lastActivityTime = Date.now();
+            this.checkIdle();
+        }
+    }
+    checkIdle() {
+        if (!this.running || this.warningActive) {
+            return;
+        }
+        const idleMs = Date.now() - this.lastActivityTime;
+        const idleTimeoutMs = this.config.idleTimeoutMinutes * 60 * 1000;
+        if (idleMs >= idleTimeoutMs) {
+            this.startWarning();
+        }
+    }
+    startWarning() {
+        this.warningActive = true;
+        this.secondsRemaining = this.config.warningDurationSeconds;
+        this.clearTimer('heartbeatInterval');
+        this.callbacks?.onWarningStart(this.secondsRemaining);
+        this.countdownInterval = setInterval(() => {
+            this.secondsRemaining -= 1;
+            if (this.secondsRemaining <= 0) {
+                this.clearTimer('countdownInterval');
+                this.warningActive = false;
+                this.callbacks?.onAutoLogout();
+            }
+            else {
+                this.callbacks?.onWarningTick(this.secondsRemaining);
+            }
+        }, 1000);
+    }
+    startHeartbeat() {
+        this.clearTimer('heartbeatInterval');
+        const intervalMs = this.config.heartbeatIntervalMinutes * 60 * 1000;
+        this.heartbeatInterval = setInterval(() => {
+            if (!this.running || this.warningActive) {
+                return;
+            }
+            this.callbacks?.onHeartbeat();
+        }, intervalMs);
+    }
+    clearTimer(name) {
+        const timer = this[name];
+        if (timer != null) {
+            if (name === 'activityDebounceTimer') {
+                clearTimeout(timer);
+            }
+            else {
+                clearInterval(timer);
+            }
+            this[name] = null;
+        }
+    }
+}

package/lib/esm/entity/tenant/epic/sessionHeartbeatEpic.js

@@ -0,0 +1,12 @@
+import { of } from 'rxjs';
+import { catchError, filter, mergeMap, switchMap } from 'rxjs/operators';
+import { createZeniAPIStatus, isSuccessResponse, } from '../../../responsePayload';
+import { sendSessionHeartbeat, sessionHeartbeatFailure, sessionHeartbeatSuccess, } from '../tenantReducer';
+export const sessionHeartbeatEpic = (actions$, _, zeniAPI) => actions$.pipe(filter(sendSessionHeartbeat.match), switchMap(() => zeniAPI
+    .postAndGetJSON(`${zeniAPI.apiEndPoints.authMicroServiceBaseUrl}/1.0/sessions/heartbeat`)
+    .pipe(mergeMap((response) => {
+    if (isSuccessResponse(response)) {
+        return of(sessionHeartbeatSuccess(response.data?.expiry ?? ''));
+    }
+    return of(sessionHeartbeatFailure(response.status));
+}), catchError((error) => of(sessionHeartbeatFailure(createZeniAPIStatus('Heartbeat failed', 'Session heartbeat API call errored: ' + JSON.stringify(error))))))));