Janady13/missionmatch / frontend/src/App.tsx

1import type { ReactNode } from 'react' 2import { Loader2 } from 'lucide-react' 3import { Navigate, Route, Routes } from 'react-router-dom' 4import { AppShell } from './components/AppShell' 5import { ScreeningQueue } from './tools/screenmatch/ScreeningQueue' 6import { CandidateEvaluation } from './tools/screenmatch/CandidateEvaluation' 7import { ScreenCompare } from './tools/screenmatch/ScreenCompare' 8import { AliasSettings } from './tools/screenmatch/AliasSettings' 9import { Requirements } from './screens/Requirements' 10import { Candidates } from './tools/missionmatch/Candidates' 11import { RecruiterDashboard } from './tools/recruitmatch/RecruiterDashboard' 12import { ClientDetail } from './tools/recruitmatch/ClientDetail' 13import { Clients } from './tools/recruitmatch/Clients' 14import { RequisitionDetail } from './tools/recruitmatch/RequisitionDetail' 15import { Pipeline } from './tools/recruitmatch/Pipeline' 16import { Assignment } from './tools/recruitmatch/Assignment' 17import { Analytics } from './tools/recruitmatch/Analytics' 18import { Reports } from './tools/recruitmatch/Reports' 19import { Tasks } from './tools/recruitmatch/Tasks' 20import { Requisitions } from './tools/recruitmatch/Requisitions' 21import { Slate } from './tools/slatematch/Slate' 22import { CommandCenter } from './tools/missionmatch/CommandCenter' 23import { Ask } from './tools/missionmatch/Ask' 24import { Compliance } from './screens/Compliance' 25import { NotFound } from './screens/NotFound' 26import { Admin } from './screens/Admin' 27import { Settings } from './screens/Settings' 28import { Login } from './screens/Login' 29import { AcceptInvite } from './screens/AcceptInvite' 30import { AuthProvider } from './lib/AuthContext' 31import { useAuth } from './lib/useAuth' 32import { homePath, toolForPath } from './lib/homeTool' 33import { hasTool } from './lib/can' 34import { useLocation } from 'react-router-dom' 35 36export default function App() { 37 return ( 38 <AuthProvider> 39 <Routes> 40 <Route path="/accept" element={<AcceptInvite />} /> 41 <Route path="/*" element={<Gate />} /> 42 </Routes> 43 </AuthProvider> 44 ) 45} 46 47// Gate renders the app only for a validated session; otherwise the login. The session check runs once on 48// load, so a reload never flashes the app before auth resolves. 49function Gate() { 50 const { principal, loading } = useAuth() 51 if (loading) { 52 return ( 53 <div className="grid min-h-screen place-items-center bg-navy-950 text-muted"> 54 <Loader2 className="animate-spin" size={22} /> 55 </div> 56 ) 57 } 58 if (!principal) { 59 return <Login /> 60 } 61 return ( 62 <Routes> 63 <Route element={<ToolGuard><AppShell /></ToolGuard>}> 64 {/* The landing route follows ENTITLEMENT, not a hard coded tool. It was an unconditional redirect 65 to /command, which is missionMATCH, so a user without that grant was sent to a tool the 66 navigation hides from them and met a permanent error with a retry that could never succeed. */} 67 <Route index element={<Navigate to={homePath(principal)} replace />} /> 68 69 {/* missionMATCH */} 70 <Route path="command" element={<CommandCenter />} /> 71 <Route path="command/candidates" element={<Candidates />} /> 72 <Route path="command/ask" element={<Ask />} /> 73 <Route path="compliance" element={<Compliance />} /> 74 75 {/* screenMATCH */} 76 <Route path="screen" element={<ScreeningQueue />} /> 77 <Route path="screen/compare" element={<ScreenCompare />} /> 78 <Route path="screen/aliases" element={<AliasSettings />} /> 79 <Route path="screen/evaluate/:candidateId/:requirementId" element={<CandidateEvaluation />} /> 80 <Route path="requirements" element={<Requirements />} /> 81 82 {/* recruitMATCH */} 83 84 <Route path="recruit" element={<RecruiterDashboard />} /> 85 <Route path="recruit/clients" element={<Clients />} /> 86 <Route path="recruit/clients/:clientId" element={<ClientDetail />} /> 87 88 <Route path="recruit/requisitions" element={<Requisitions />} /> 89 90 <Route path="recruit/requisitions/:reqId" element={<RequisitionDetail />} /> 91 92 93 <Route path="recruit/requisitions/:reqId/pipeline" element={<Pipeline />} /> 94 95 96 97 <Route path="recruit/applications/:appId" element={<Assignment />} /> 98 99 100 101 102 <Route path="recruit/tasks" element={<Tasks />} /> 103 104 105 106 107 108 <Route path="recruit/analytics" element={<Analytics />} /> 109 110 111 112 113 114 115 <Route path="recruit/reports" element={<Reports />} /> 116 117 {/* slateMATCH */} 118 <Route path="slate" element={<Slate />} /> 119 120 {/* shared */} 121 <Route path="settings" element={<Settings />} /> 122 123 {/* One access surface. /people is kept as an alias so existing links and bookmarks keep working 124 after the rename rather than 404ing into the NotFound screen. */} 125 <Route path="admin" element={<Admin />} /> 126 <Route path="people" element={<Admin />} /> 127 {/* Last, so it matches only when nothing else did. Without it a mistyped address rendered the 128 shell with an empty outlet, which reads as a crash rather than a wrong URL. */} 129 <Route path="*" element={<NotFound />} /> 130 {/* Legacy paths kept so existing links and deep links keep resolving after the tool split. 131 /pipeline (a placeholder) and /dashboard (the pre split dashboard) used to live here too. No 132 link in the app reached either one, and the real pipeline is recruitMATCH's 133 /recruit/requisitions/:reqId/pipeline, so both were removed rather than left as screens only a 134 typed URL could find. */} 135 <Route path="command-center" element={<Navigate to="/command" replace />} /> 136 <Route path="candidates" element={<Navigate to="/command/candidates" replace />} /> 137 <Route path="evaluate/:candidateId/:requirementId" element={<CandidateEvaluation />} /> 138 </Route> 139 </Routes> 140 ) 141} 142 143// ToolGuard redirects a route belonging to a tool the user was not granted back to their own home tool. 144// 145// The route table registers every tool for every authenticated user, and cross tool links exist (a 146// candidate card links into screenMATCH to evaluate), so without this a user can be walked by a BUTTON 147// into a tool whose every request the API refuses. The server side gate is the enforcement; this only 148// stops the interface offering a journey that ends in an error panel. 149function ToolGuard({ children }: { children: ReactNode }) { 150 const { principal } = useAuth() 151 const { pathname } = useLocation() 152 const needed = toolForPath(pathname) 153 if (needed && !hasTool(principal, needed)) { 154 return <Navigate to={homePath(principal)} replace /> 155 } 156 return <>{children}</> 157} 158