Janady13/missionmatch / frontend/src/App.tsx

1import type { ReactNode } from 'react' 2import { Loader2 } from 'lucide-react' 3import { Navigate, Route, Routes } from 'react-router-dom' 4import { AppShell } from './components/AppShell' 5import { ScreeningQueue } from './tools/screenmatch/ScreeningQueue' 6import { CandidateEvaluation } from './tools/screenmatch/CandidateEvaluation' 7import { ScreenCompare } from './tools/screenmatch/ScreenCompare' 8import { AliasSettings } from './tools/screenmatch/AliasSettings' 9import { Requirements } from './screens/Requirements' 10import { Candidates } from './tools/missionmatch/Candidates' 11import { RecruiterDashboard } from './tools/recruitmatch/RecruiterDashboard' 12import { ClientDetail } from './tools/recruitmatch/ClientDetail' 13import { Clients } from './tools/recruitmatch/Clients' 14import { RequisitionDetail } from './tools/recruitmatch/RequisitionDetail' 15import { Pipeline } from './tools/recruitmatch/Pipeline' 16import { Assignment } from './tools/recruitmatch/Assignment' 17import { Analytics } from './tools/recruitmatch/Analytics' 18import { Reports } from './tools/recruitmatch/Reports' 19import { Tasks } from './tools/recruitmatch/Tasks' 20import { Requisitions } from './tools/recruitmatch/Requisitions' 21import { Capture } from './tools/slatematch/Capture' 22import { CaptureReview } from './screens/CaptureReview' 23import { OpportunityDetail } from './tools/slatematch/OpportunityDetail' 24import { Documents } from './tools/slatematch/Documents' 25import { ScopeReview } from './tools/slatematch/ScopeReview' 26import { BuildRequirements } from './tools/slatematch/BuildRequirements' 27import { AmendmentView } from './tools/slatematch/AmendmentView' 28import { Slate } from './tools/slatematch/Slate' 29import { CommandCenter } from './tools/missionmatch/CommandCenter' 30import { Ask } from './tools/missionmatch/Ask' 31import { Compliance } from './screens/Compliance' 32import { NotFound } from './screens/NotFound' 33import { Admin } from './screens/Admin' 34import { Settings } from './screens/Settings' 35import { Mailbox } from './screens/Mailbox' 36import { Bench } from './screens/Bench' 37import { Duplicates } from './screens/Duplicates' 38import { Careers } from './screens/Careers' 39import { CandidateRecord } from './screens/CandidateRecord' 40import { ManagerView } from './screens/ManagerView' 41import { Login } from './screens/Login' 42import { AcceptInvite } from './screens/AcceptInvite' 43import { PublicCareersList, PublicPostingPage, PublicSchedulePage } from './screens/PublicCareers' 44import { AuthProvider } from './lib/AuthContext' 45import { useAuth } from './lib/useAuth' 46import { homePath, toolForPath } from './lib/homeTool' 47import { hasTool } from './lib/can' 48import { useLocation } from 'react-router-dom' 49 50export default function App() { 51 return ( 52 <AuthProvider> 53 <Routes> 54 <Route path="/accept" element={<AcceptInvite />} /> 55 {/* THE PUBLIC CAREERS PAGES SIT OUTSIDE THE GATE, beside the invite acceptance page and for the same 56 reason: a visitor has no session and never will. Mounting them here means no session check runs, 57 no authenticated query fires, and the recruiter shell is never constructed for somebody who has no 58 account. They talk to the public API routes directly with credentials omitted. */} 59 <Route path="/careers/:slug" element={<PublicCareersList />} /> 60 <Route path="/careers/:slug/schedule/:token" element={<PublicSchedulePage />} /> 61 <Route path="/careers/:slug/:token" element={<PublicPostingPage />} /> 62 <Route path="/*" element={<Gate />} /> 63 </Routes> 64 </AuthProvider> 65 ) 66} 67 68// Gate renders the app only for a validated session; otherwise the login. The session check runs once on 69// load, so a reload never flashes the app before auth resolves. 70function Gate() { 71 const { principal, loading } = useAuth() 72 if (loading) { 73 return ( 74 <div className="grid min-h-screen place-items-center bg-navy-950 text-muted"> 75 <Loader2 className="animate-spin" size={22} /> 76 </div> 77 ) 78 } 79 if (!principal) { 80 return <Login /> 81 } 82 return ( 83 <Routes> 84 <Route element={<ToolGuard><AppShell /></ToolGuard>}> 85 {/* The landing route follows ENTITLEMENT, not a hard coded tool. It was an unconditional redirect 86 to /command, which is missionMATCH, so a user without that grant was sent to a tool the 87 navigation hides from them and met a permanent error with a retry that could never succeed. */} 88 <Route index element={<Navigate to={homePath(principal)} replace />} /> 89 90 {/* missionMATCH */} 91 <Route path="command" element={<CommandCenter />} /> 92 <Route path="command/candidates" element={<Candidates />} /> 93 <Route path="command/ask" element={<Ask />} /> 94 <Route path="compliance" element={<Compliance />} /> 95 96 {/* screenMATCH */} 97 <Route path="screen" element={<ScreeningQueue />} /> 98 <Route path="screen/compare" element={<ScreenCompare />} /> 99 <Route path="screen/aliases" element={<AliasSettings />} /> 100 <Route path="screen/evaluate/:candidateId/:requirementId" element={<CandidateEvaluation />} /> 101 <Route path="requirements" element={<Requirements />} /> 102 103 {/* recruitMATCH */} 104 105 <Route path="recruit" element={<RecruiterDashboard />} /> 106 <Route path="recruit/clients" element={<Clients />} /> 107 <Route path="recruit/clients/:clientId" element={<ClientDetail />} /> 108 109 <Route path="recruit/requisitions" element={<Requisitions />} /> 110 111 <Route path="recruit/requisitions/:reqId" element={<RequisitionDetail />} /> 112 113 114 <Route path="recruit/requisitions/:reqId/pipeline" element={<Pipeline />} /> 115 116 117 118 <Route path="recruit/applications/:appId" element={<Assignment />} /> 119 120 121 122 123 <Route path="recruit/tasks" element={<Tasks />} /> 124 125 126 127 128 129 <Route path="recruit/analytics" element={<Analytics />} /> 130 131 132 133 134 135 136 <Route path="recruit/reports" element={<Reports />} /> 137 138 {/* slateMATCH */} 139 <Route path="slate" element={<Slate />} /> 140 <Route path="slate/capture" element={<Capture />} /> 141 <Route path="slate/review" element={<CaptureReview />} /> 142 <Route path="slate/capture/:id" element={<OpportunityDetail />} /> 143 {/* Phase 2 intake screens 3, 4 and 5, plus the amendment view. They nest under one opportunity 144 because every one of them is scoped to it. */} 145 <Route path="slate/capture/:id/documents" element={<Documents />} /> 146 <Route path="slate/capture/:id/scope" element={<ScopeReview />} /> 147 <Route path="slate/capture/:id/requirements" element={<BuildRequirements />} /> 148 <Route path="slate/capture/:id/amendments" element={<AmendmentView />} /> 149 150 {/* shared */} 151 <Route path="settings" element={<Settings />} /> 152 {/* The personal mailbox belongs to no tool, like settings and the access screen. A recruiter's own 153 mail connection is not a feature of a purchased product, and the server mounts it outside every 154 tool gate for exactly that reason. */} 155 <Route path="mailbox" element={<Mailbox />} /> 156 {/* The bench and the duplicate review belong to no tool either. Finding a person you already have, 157 and noticing you have them twice, are not features of a purchased product, and the server mounts 158 both outside every tool gate for that reason. */} 159 <Route path="bench" element={<Bench />} /> 160 <Route path="bench/duplicates" element={<Duplicates />} /> 161 <Route path="bench/candidate/:candidateId" element={<CandidateRecord />} /> 162 {/* The tenant side of careers: what is published, what came back, and interview scheduling. It rides 163 the recruitMATCH entitlement because publishing a job order is recruiting operations, and the 164 server gates the publish route on requirement.write independently. */} 165 <Route path="recruit/careers" element={<Careers />} /> 166 <Route path="recruit/manager" element={<ManagerView />} /> 167 168 {/* One access surface. /people is kept as an alias so existing links and bookmarks keep working 169 after the rename rather than 404ing into the NotFound screen. */} 170 <Route path="admin" element={<Admin />} /> 171 <Route path="people" element={<Admin />} /> 172 {/* Last, so it matches only when nothing else did. Without it a mistyped address rendered the 173 shell with an empty outlet, which reads as a crash rather than a wrong URL. */} 174 <Route path="*" element={<NotFound />} /> 175 {/* Legacy paths kept so existing links and deep links keep resolving after the tool split. 176 /pipeline (a placeholder) and /dashboard (the pre split dashboard) used to live here too. No 177 link in the app reached either one, and the real pipeline is recruitMATCH's 178 /recruit/requisitions/:reqId/pipeline, so both were removed rather than left as screens only a 179 typed URL could find. */} 180 <Route path="command-center" element={<Navigate to="/command" replace />} /> 181 <Route path="candidates" element={<Navigate to="/command/candidates" replace />} /> 182 <Route path="evaluate/:candidateId/:requirementId" element={<CandidateEvaluation />} /> 183 </Route> 184 </Routes> 185 ) 186} 187 188// ToolGuard redirects a route belonging to a tool the user was not granted back to their own home tool. 189// 190// The route table registers every tool for every authenticated user, and cross tool links exist (a 191// candidate card links into screenMATCH to evaluate), so without this a user can be walked by a BUTTON 192// into a tool whose every request the API refuses. The server side gate is the enforcement; this only 193// stops the interface offering a journey that ends in an error panel. 194function ToolGuard({ children }: { children: ReactNode }) { 195 const { principal } = useAuth() 196 const { pathname } = useLocation() 197 const needed = toolForPath(pathname) 198 if (needed && !hasTool(principal, needed)) { 199 return <Navigate to={homePath(principal)} replace /> 200 } 201 return <>{children}</> 202} 203