spine-framework 0.3.124 → 0.3.126

package/.framework/src/pages/admin/kb/KBAdminPage.tsx

@@ -0,0 +1,64 @@
+import { useParams, useNavigate } from 'react-router-dom'
+import { KBArticleList } from '../../../components/kb/KBArticleList'
+import { KBArticleEditor } from '../../../components/kb/KBArticleEditor'
+import { PageInstructions } from '../../../components/admin/PageInstructions'
+
+const KB_TYPE_SLUGS = ['kb-spine-admin', 'kb-spine-internal', 'kb-spine-public', 'kb-account']
+
+interface KBAdminPageProps {
+  mode?: 'view' | 'edit' | 'new'
+}
+
+export function KBAdminPage({ mode = 'view' }: KBAdminPageProps) {
+  const { typeSlug, id } = useParams<{ typeSlug: string; id: string }>()
+  const navigate = useNavigate()
+
+  const isList = mode === 'view' && !id
+
+  if (isList) {
+    return (
+      <>
+        <PageInstructions
+        description="Manage knowledge base articles, categories, and their lifecycle."
+        sections={[
+          { title: 'What this page is for', content: 'This page lists the articles and categories for the selected knowledge base type and provides the editor for creating or updating content.' },
+          { title: 'How to read this page', content: 'In list mode you see existing records and can filter or select one. In edit or new mode the article editor shows the content fields and save controls for the selected type slug.' },
+          { title: 'How to create / edit / delete', content: 'Click New to create an article, select an existing record to view it, click Edit to change it, and use the editor\'s delete action to remove it.' },
+          { title: 'Important notes', content: 'Knowledge base records are typed by slug (kb-spine-admin, kb-spine-internal, kb-spine-public, kb-account). Make sure you are editing under the correct category.' },
+        ]}
+      />
+        <KBArticleList
+          typeSlugs={KB_TYPE_SLUGS}
+          typeName="Knowledge Base"
+          onSelect={(record) => navigate(`/spine-framework/admin/kb/${record.type_slug}/${record.id}`)}
+          onNew={() => navigate(`/spine-framework/admin/kb/${typeSlug}/new`)}
+          onEdit={(record) => navigate(`/spine-framework/admin/kb/${record.type_slug}/${record.id}/edit`)}
+        />
+      </>
+    )
+  }
+
+  return (
+    <>
+      <PageInstructions
+        description="Manage knowledge base articles, categories, and their lifecycle."
+        sections={[
+          { title: 'What this page is for', content: 'This page lists the articles and categories for the selected knowledge base type and provides the editor for creating or updating content.' },
+          { title: 'How to read this page', content: 'In list mode you see existing records and can filter or select one. In edit or new mode the article editor shows the content fields and save controls for the selected type slug.' },
+          { title: 'How to create / edit / delete', content: 'Click New to create an article, select an existing record to view it, click Edit to change it, and use the editor\'s delete action to remove it.' },
+          { title: 'Important notes', content: 'Knowledge base records are typed by slug (kb-spine-admin, kb-spine-internal, kb-spine-public, kb-account). Make sure you are editing under the correct category.' },
+        ]}
+      />
+      <KBArticleEditor
+        typeSlug={typeSlug}
+        mode={mode}
+        articleId={mode === 'new' ? null : id}
+        onBack={() => navigate(`/spine-framework/admin/kb/${typeSlug}`)}
+        onSave={(record) => navigate(`/spine-framework/admin/kb/${typeSlug}/${record?.id || id || ''}`)}
+        onEdit={(articleId) => navigate(`/spine-framework/admin/kb/${typeSlug}/${articleId}/edit`)}
+        onCancel={() => navigate(`/spine-framework/admin/kb/${typeSlug}`)}
+        onDelete={() => navigate(`/spine-framework/admin/kb/${typeSlug}`)}
+      />
+    </>
+  )
+}

package/.framework/src/pages/auth/AuthConfirmPage.tsx

@@ -1,50 +1,58 @@
-/**
- * @module src/pages/auth/AuthConfirmPage
- * @audience installer
- * @layer frontend-page
- * @stability stable
- *
- * Universal auth callback page. Handles two token types delivered by Supabase
- * via email link, both arriving as query params on `/auth/confirm`:
- *
- *   type=signup   — email confirmation after registration
- *   type=recovery — password-reset link from ForgotPasswordPage
- *
- * Flow:
- *   1. On mount, read `token_hash` and `type` from the URL search params.
- *   2. Call `supabase.auth.verifyOtp({ token_hash, type })` to exchange the
- *      token for a live session. Supabase fires `SIGNED_IN` via
- *      `onAuthStateChange`, which triggers `fetchUserContext` in AuthContext.
- *   3a. signup  → navigate to "/" (AuthenticatedRouter takes over).
- *   3b. recovery → show a "set new password" form.
- *       On submit call `supabase.auth.updateUser({ password })`, then navigate.
- *
- * Error cases:
- *   - Token missing/malformed — show error + link back to login.
- *   - Token expired (>1 h)    — show error + link to /forgot-password to retry.
- *   - Password too short      — inline validation, never sent to Supabase.
- *
- * @seeAlso src/pages/auth/ForgotPasswordPage.tsx (generates recovery links)
- * @seeAlso src/pages/auth/RegisterPage.tsx        (generates signup links)
- * @seeAlso src/contexts/AuthContext.tsx           (onAuthStateChange handler)
- */
-
+// CIL[BEGIN chunk_id="AuthConfirmPage_module_header_1783662155" type="module_header" identity="module_header" parent="none"]
+// CIL[DOC-MACRO purpose="Import React hooks, routing, Supabase, and UI components for auth confirmation"]
+// CIL[DOC-RESPONSIBILITY responsibility="Provide necessary imports for token verification and password reset functionality"]
+// CIL[DOC-CONTEXT module="src/pages/auth/AuthConfirmPage" layer="frontend-page" related_files="[\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\"custom/apps/portal/pages/ContentPage.tsx\",\".framework/src/components/ui/dialog.tsx\",\".framework/functions/_shared/principal.ts\",\".framework/src/pages/admin/TypeDetailPage.tsx\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="React hooks, routing, Supabase client, LoadingSpinner" errors="none" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Standard imports for auth callback page with token handling" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-AUDIENCE audience="developer"]
+// CIL[DOC-VECTOR type="context" content="Layer: frontend-page. Direct callers: 0. Direct calls: 0. Related files: custom/apps/cortex/pages/operations/OperationsDashboard.tsx, custom/apps/portal/pages/ContentPage.tsx, .framework/src/components/ui/dialog.tsx, .framework/functions/_shared/principal.ts, .framework/src/pages/admin/TypeDetailPage.tsx, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 import React, { useState, useEffect } from 'react'
 import { Link, useNavigate, useSearchParams } from 'react-router-dom'
 import { supabase } from '../../lib/supabase'
 import { LoadingSpinner } from '../../components/ui/LoadingSpinner'
-
-// ─── TYPES ────────────────────────────────────────────────────────────────────
-
+// CIL[END chunk_id="AuthConfirmPage_module_header_1783662155"]
+// CIL[BEGIN chunk_id="AuthConfirmPage_stage_1783662155" type="type" identity="stage" parent="none"]
+// CIL[DOC-MACRO purpose="Define authentication confirmation page states for token verification flow"]
+// CIL[DOC-RESPONSIBILITY responsibility="Provide type definition for all possible page states during auth confirmation"]
+// CIL[DOC-CONTEXT module="src/pages/auth/AuthConfirmPage" layer="frontend-page" related_files="[\".framework/src/pages/admin/TypeDetailPage.tsx\",\"custom/apps/portal/pages/ContentPage.tsx\",\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\".framework/src/pages/admin/IntegrationsPage.tsx\",\".framework/src/pages/admin/RolesPage.tsx\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="Stage union type" errors="none" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Type definition for auth confirmation flow states" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: frontend-page. Direct callers: 0. Direct calls: 0. Related files: .framework/src/pages/admin/TypeDetailPage.tsx, custom/apps/portal/pages/ContentPage.tsx, custom/apps/cortex/pages/operations/OperationsDashboard.tsx, .framework/src/pages/admin/IntegrationsPage.tsx, .framework/src/pages/admin/RolesPage.tsx, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 type Stage =
-  | 'verifying'         // exchanging token with Supabase
-  | 'signup_success'    // signup confirmed — brief success then redirect
-  | 'set_password'      // recovery: show new-password form
-  | 'password_saved'    // recovery: update succeeded — brief success then redirect
-  | 'error'             // unrecoverable error
-
-// ─── COMPONENT ────────────────────────────────────────────────────────────────
-
+  | 'verifying'
+  | 'signup_success'
+  | 'set_password'
+  | 'password_saved'
+  | 'error'
+// CIL[END chunk_id="AuthConfirmPage_stage_1783662155"]
+// CIL[BEGIN chunk_id="AuthConfirmPage_authconfirmpage_1783662155" type="function" identity="AuthConfirmPage" parent="none"]
+// CIL[DOC-MACRO purpose="Handle email confirmation and password reset flows with token verification"]
+// CIL[DOC-RESPONSIBILITY responsibility="Verify auth tokens, handle signup confirmation, and manage password reset flow"]
+// CIL[DOC-CONTEXT module="src/pages/auth/AuthConfirmPage" layer="frontend-page" related_files="[\"custom/apps/portal/pages/ContentPage.tsx\",\".framework/src/pages/admin/RolesPage.tsx\",\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\".framework/src/components/ui/dialog.tsx\",\".framework/functions/_shared/principal.ts\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="authenticated session or password reset form" errors="token errors, validation errors" side_effects="updates auth state, creates user session"]
+// CIL[DOC-MICRO logic_summary="Token verification with multiple flow handling and error states" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: frontend-page. Direct callers: 0. Direct calls: 0. Related files: custom/apps/portal/pages/ContentPage.tsx, .framework/src/pages/admin/RolesPage.tsx, custom/apps/cortex/pages/operations/OperationsDashboard.tsx, .framework/src/components/ui/dialog.tsx, .framework/functions/_shared/principal.ts, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export function AuthConfirmPage() {
   const [searchParams] = useSearchParams()
   const navigate = useNavigate()
@@ -55,13 +63,11 @@ export function AuthConfirmPage() {
   const [stage, setStage] = useState<Stage>('verifying')
   const [errorMessage, setErrorMessage] = useState('')
 
-  // New-password form state
   const [newPassword, setNewPassword] = useState('')
   const [confirmPassword, setConfirmPassword] = useState('')
   const [passwordError, setPasswordError] = useState('')
   const [isSaving, setIsSaving] = useState(false)
 
-  // ── Token exchange on mount ──────────────────────────────────────────────
   useEffect(() => {
     if (!tokenHash || !type) {
       setErrorMessage('Invalid or missing confirmation link. Please request a new one.')
@@ -76,7 +82,6 @@ export function AuthConfirmPage() {
       })
 
       if (error) {
-        // Common GoTrue error messages — surface human-friendly versions
         if (error.message.includes('expired') || error.message.includes('otp_expired')) {
           setErrorMessage('This link has expired. Links are valid for 1 hour.')
         } else if (error.message.includes('invalid')) {
@@ -91,14 +96,12 @@ export function AuthConfirmPage() {
       if (type === 'recovery') {
         setStage('set_password')
       } else {
-        // signup, invite, magic_link — session is live, go to app
         setStage('signup_success')
         setTimeout(() => navigate('/', { replace: true }), 1500)
       }
     })()
-  }, []) // eslint-disable-line react-hooks/exhaustive-deps
+  }, [])
 
-  // ── Save new password ────────────────────────────────────────────────────
   const handleSetPassword = async (e: React.FormEvent) => {
     e.preventDefault()
     setPasswordError('')
@@ -126,8 +129,6 @@ export function AuthConfirmPage() {
     }
   }
 
-  // ── Render ───────────────────────────────────────────────────────────────
-
   if (stage === 'verifying') {
     return (
       <div className="min-h-screen flex items-center justify-center bg-slate-50">
@@ -205,7 +206,6 @@ export function AuthConfirmPage() {
     )
   }
 
-  // stage === 'set_password'
   return (
     <div className="min-h-screen flex items-center justify-center bg-slate-50 py-12 px-4 sm:px-6 lg:px-8">
       <div className="max-w-md w-full space-y-8">
@@ -286,3 +286,4 @@ export function AuthConfirmPage() {
     </div>
   )
 }
+// CIL[END chunk_id="AuthConfirmPage_authconfirmpage_1783662155"]

package/.framework/src/pages/auth/ForgotPasswordPage.tsx

@@ -1,29 +1,37 @@
-/**
- * @module src/pages/auth/ForgotPasswordPage
- * @audience installer
- * @layer frontend-page
- * @stability stable
- *
- * Password-reset request page. Collects the user's email address and calls
- * `supabase.auth.resetPasswordForEmail`, passing `emailRedirectTo` so the
- * link in the email returns the user to the correct origin (local dev,
- * Netlify preview, Cortex, Portal — whatever they're currently on).
- *
- * Supabase sends a recovery email whose link resolves to:
- *   <origin>/auth/confirm?token_hash=...&type=recovery
- *
- * That page (AuthConfirmPage) then handles the token exchange and prompts
- * the user to set a new password.
- *
- * @seeAlso src/pages/auth/AuthConfirmPage.tsx (token exchange + new-password form)
- * @seeAlso src/pages/auth/LoginPage.tsx       (links here via /forgot-password)
- */
-
+// CIL[BEGIN chunk_id="ForgotPasswordPage_module_header_1783662155" type="module_header" identity="module_header" parent="none"]
+// CIL[DOC-MACRO purpose="Import React hooks, routing, Supabase, and UI components for password reset"]
+// CIL[DOC-RESPONSIBILITY responsibility="Provide necessary imports for password reset functionality"]
+// CIL[DOC-CONTEXT module="src/pages/auth/ForgotPasswordPage" layer="frontend-page" related_files="[\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\"custom/apps/portal/pages/ContentPage.tsx\",\".framework/src/components/ui/dialog.tsx\",\".framework/src/pages/admin/TypeDetailPage.tsx\",\".framework/functions/_shared/principal.ts\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="React hooks, routing, Supabase client, LoadingSpinner" errors="none" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Standard imports for password reset page with email handling" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-AUDIENCE audience="developer"]
+// CIL[DOC-VECTOR type="context" content="Layer: frontend-page. Direct callers: 0. Direct calls: 0. Related files: custom/apps/cortex/pages/operations/OperationsDashboard.tsx, custom/apps/portal/pages/ContentPage.tsx, .framework/src/components/ui/dialog.tsx, .framework/src/pages/admin/TypeDetailPage.tsx, .framework/functions/_shared/principal.ts, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 import React, { useState } from 'react'
 import { Link } from 'react-router-dom'
 import { supabase } from '../../lib/supabase'
 import { LoadingSpinner } from '../../components/ui/LoadingSpinner'
-
+// CIL[END chunk_id="ForgotPasswordPage_module_header_1783662155"]
+// CIL[BEGIN chunk_id="ForgotPasswordPage_forgotpasswordpage_1783662155" type="function" identity="ForgotPasswordPage" parent="none"]
+// CIL[DOC-MACRO purpose="Handle password reset request form with email submission and success states"]
+// CIL[DOC-RESPONSIBILITY responsibility="Manage password reset flow, form submission, and user feedback states"]
+// CIL[DOC-CONTEXT module="src/pages/auth/ForgotPasswordPage" layer="frontend-page" related_files="[\"custom/apps/portal/pages/ContentPage.tsx\",\".framework/src/pages/admin/RolesPage.tsx\",\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\".framework/src/pages/admin/TypeDetailPage.tsx\",\".framework/src/components/ui/dialog.tsx\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="password reset email or error message" errors="validation errors, API errors" side_effects="sends password reset email via Supabase"]
+// CIL[DOC-MICRO logic_summary="Form with email validation, async submission, and success confirmation" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: frontend-page. Direct callers: 0. Direct calls: 0. Related files: custom/apps/portal/pages/ContentPage.tsx, .framework/src/pages/admin/RolesPage.tsx, custom/apps/cortex/pages/operations/OperationsDashboard.tsx, .framework/src/pages/admin/TypeDetailPage.tsx, .framework/src/components/ui/dialog.tsx, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export function ForgotPasswordPage() {
   const [email, setEmail] = useState('')
   const [isLoading, setIsLoading] = useState(false)
@@ -144,3 +152,4 @@ export function ForgotPasswordPage() {
     </div>
   )
 }
+// CIL[END chunk_id="ForgotPasswordPage_forgotpasswordpage_1783662155"]

package/.framework/src/pages/auth/LoginPage.tsx

@@ -1,23 +1,37 @@
-/**
- * @module src/pages/auth/LoginPage
- * @audience installer
- * @layer frontend-page
- * @stability stable
- *
- * Unauthenticated login page. Renders a centred card with email/password
- * inputs. On submit, calls `AuthContext.login(email, password)` and
- * navigates to `/dashboard` on success. Displays inline error text on
- * failure. Shows a `LoadingSpinner` inside the submit button while the
- * auth request is in-flight.
- *
- * @seeAlso src/contexts/AuthContext.tsx (login implementation)
- */
-
+// CIL[BEGIN chunk_id="LoginPage_module_header_1783662155" type="module_header" identity="module_header" parent="none"]
+// CIL[DOC-MACRO purpose="Import React hooks and components for login page functionality"]
+// CIL[DOC-RESPONSIBILITY responsibility="Provide necessary imports for React component, routing, auth context, and UI elements"]
+// CIL[DOC-CONTEXT module="src/pages/auth/LoginPage" layer="frontend-page" related_files="[\"custom/apps/portal/pages/ContentPage.tsx\",\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\"custom/apps/portal/pages/CoursesPage.tsx\",\".framework/src/pages/admin/TypeDetailPage.tsx\",\".framework/src/pages/admin/RolesPage.tsx\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="React, useState, Link, useAuth, LoadingSpinner" errors="none" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Standard React component imports for authentication page" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-AUDIENCE audience="developer"]
+// CIL[DOC-VECTOR type="context" content="Layer: frontend-page. Direct callers: 0. Direct calls: 0. Related files: custom/apps/portal/pages/ContentPage.tsx, custom/apps/cortex/pages/operations/OperationsDashboard.tsx, custom/apps/portal/pages/CoursesPage.tsx, .framework/src/pages/admin/TypeDetailPage.tsx, .framework/src/pages/admin/RolesPage.tsx, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 import React, { useState } from 'react'
-import { Link } from 'react-router-dom'
+import { Link, useNavigate } from 'react-router-dom'
 import { useAuth } from '../../contexts/AuthContext'
 import { LoadingSpinner } from '../../components/ui/LoadingSpinner'
-
+// CIL[END chunk_id="LoginPage_module_header_1783662155"]
+// CIL[BEGIN chunk_id="LoginPage_loginpage_1783662155" type="function" identity="LoginPage" parent="none"]
+// CIL[DOC-MACRO purpose="Render login form with email/password inputs and authentication handling"]
+// CIL[DOC-RESPONSIBILITY responsibility="Manage login state, form submission, error display, and user authentication flow"]
+// CIL[DOC-CONTEXT module="src/pages/auth/LoginPage" layer="frontend-page" related_files="[\"custom/apps/portal/pages/ContentPage.tsx\",\".framework/src/pages/admin/TypeDetailPage.tsx\",\".framework/src/pages/admin/RolesPage.tsx\",\"custom/apps/cortex/functions/custom_cil-embeddings.ts\",\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="authenticated user session or error message" errors="login failure, network errors" side_effects="updates auth context state"]
+// CIL[DOC-MICRO logic_summary="Form with controlled state, async login call, loading states, and error handling" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: frontend-page. Direct callers: 0. Direct calls: 0. Related files: custom/apps/portal/pages/ContentPage.tsx, .framework/src/pages/admin/TypeDetailPage.tsx, .framework/src/pages/admin/RolesPage.tsx, custom/apps/cortex/functions/custom_cil-embeddings.ts, custom/apps/cortex/pages/operations/OperationsDashboard.tsx, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export function LoginPage() {
   const [email, setEmail] = useState('')
   const [password, setPassword] = useState('')
@@ -25,10 +39,7 @@ export function LoginPage() {
   const [isLoading, setIsLoading] = useState(false)
   
   const { login } = useAuth()
-
-  // After login, App.tsx switches to AuthenticatedRouter which handles
-  // all routing decisions based on the user's role and installed apps.
-  // LoginPage has no redirect logic of its own.
+  const navigate = useNavigate()
 
   const handleSubmit = async (e: React.FormEvent) => {
     e.preventDefault()
@@ -36,8 +47,23 @@ export function LoginPage() {
     setIsLoading(true)
 
     try {
-      await login(email, password)
-      // App.tsx switches to AuthenticatedRouter on success — no redirect needed here
+      const user = await login(email, password)
+      const role = user?.roles?.[0]
+      if (!role) {
+        navigate('/')
+        return
+      }
+
+      const res = await fetch('/spine.config.json')
+      if (!res.ok) {
+        navigate('/')
+        return
+      }
+
+      const reg = (await res.json()).registration ?? {}
+      const app = reg.default_app_by_role?.[role] ?? reg.default_app
+      const path = reg.apps?.[app]?.path ?? '/'
+      navigate(path, { replace: true })
     } catch (err: any) {
       setError(err.message || 'Login failed')
     } finally {
@@ -147,3 +173,4 @@ export function LoginPage() {
     </div>
   )
 }
+// CIL[END chunk_id="LoginPage_loginpage_1783662155"]

package/.framework/src/pages/auth/PendingApprovalPage.tsx

@@ -1,20 +1,35 @@
-/**
- * @module src/pages/auth/PendingApprovalPage
- * @audience installer
- * @layer frontend-page
- * @stability stable
- *
- * Shown to authenticated users whose people.status === 'pending'.
- * They have successfully signed up but their access request has not yet
- * been approved by an account administrator.
- *
- * @seeAlso src/App.tsx (pending gate)
- * @seeAlso functions/invites.ts (approve action)
- */
-
+// CIL[BEGIN chunk_id="PendingApprovalPage_module_header_1783662155" type="module_header" identity="module_header" parent="none"]
+// CIL[DOC-MACRO purpose="Import React and auth context for pending approval page functionality"]
+// CIL[DOC-RESPONSIBILITY responsibility="Provide necessary imports for pending approval display and logout functionality"]
+// CIL[DOC-CONTEXT module="src/pages/auth/PendingApprovalPage" layer="frontend-page" related_files="[\"custom/apps/portal/pages/ContentPage.tsx\",\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\".framework/src/pages/admin/TypeDetailPage.tsx\",\".framework/functions/_shared/principal.ts\",\".framework/src/pages/admin/RolesPage.tsx\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="React, useAuth" errors="none" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Minimal imports for pending approval page with logout" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-AUDIENCE audience="developer"]
+// CIL[DOC-VECTOR type="context" content="Layer: frontend-page. Direct callers: 0. Direct calls: 0. Related files: custom/apps/portal/pages/ContentPage.tsx, custom/apps/cortex/pages/operations/OperationsDashboard.tsx, .framework/src/pages/admin/TypeDetailPage.tsx, .framework/functions/_shared/principal.ts, .framework/src/pages/admin/RolesPage.tsx, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 import React from 'react'
 import { useAuth } from '../../contexts/AuthContext'
-
+// CIL[END chunk_id="PendingApprovalPage_module_header_1783662155"]
+// CIL[BEGIN chunk_id="PendingApprovalPage_pendingapprovalpage_1783662155" type="function" identity="PendingApprovalPage" parent="none"]
+// CIL[DOC-MACRO purpose="Display pending approval page for users awaiting account administrator approval"]
+// CIL[DOC-RESPONSIBILITY responsibility="Show waiting state message and provide logout option for pending users"]
+// CIL[DOC-CONTEXT module="src/pages/auth/PendingApprovalPage" layer="frontend-page" related_files="[\".framework/src/pages/admin/TypeDetailPage.tsx\",\"custom/apps/portal/pages/ContentPage.tsx\",\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\".framework/src/pages/admin/RolesPage.tsx\",\".framework/src/pages/admin/IntegrationsPage.tsx\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="pending approval UI with logout option" errors="none" side_effects="logs out user on logout button click"]
+// CIL[DOC-MICRO logic_summary="Simple waiting page with static content and logout functionality" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: frontend-page. Direct callers: 0. Direct calls: 0. Related files: .framework/src/pages/admin/TypeDetailPage.tsx, custom/apps/portal/pages/ContentPage.tsx, custom/apps/cortex/pages/operations/OperationsDashboard.tsx, .framework/src/pages/admin/RolesPage.tsx, .framework/src/pages/admin/IntegrationsPage.tsx, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export function PendingApprovalPage() {
   const { logout } = useAuth()
 
@@ -52,3 +67,4 @@ export function PendingApprovalPage() {
     </div>
   )
 }
+// CIL[END chunk_id="PendingApprovalPage_pendingapprovalpage_1783662155"]