PHEE-401: token refresh, G2P mock, Account Mapper rebuild, CI workflow and TS fixes

[Flashl3opard]

Related

Epic: PHEE-363
Closes: PHEE-401

Summary

Adds session management, G2P Config MSW mock, Account Mapper
Register/Update workflow, CI pipeline and TypeScript build fixes.

Changes

Session Management & Token Refresh

• 60s polling checks JWT expiry in KeycloakProvider.tsx
• Proper Base64URL decoding (fixes valid token false-logout bug)
• Warning toast shown 2 minutes before session expires
• Auto logout and redirect to /login on token expiry
• 401 Axios interceptor clears token and redirects to /login
• Shared ToastProvider context for app-wide notifications

Account Mapper — Register/Update Workflow

• CreateBeneficiariesTab.tsx fully rebuilt with Register/Update mode toggle
• Dynamic multi-beneficiary form (add/remove entries)
• Fields: Payee Identity, Payment Modality (00-04), BBIC, Financial Address
• Source BBID field in Update mode
• Collapsible API Config section (API URL, Callback URL, Institution ID)
• Form validation with error banner
• SelfServicePortal.tsx updated with read-only → Edit → Save/Cancel flow
• BBIC added to Beneficiary type and mock data

G2P Config Mock (MSW)

• MSW handlers for g2pPaymentConfig, governmentEntity, program, dfsp
• Dual dev modes: npm run dev (Gazelle) vs npm run dev:g2p (MSW mock)

CI/CD Pipeline

• Added .github/workflows/ci.yml
• Runs npm ci, npm run build, tsc --noEmit on push/PR to dev and main

TypeScript & Build Fixes (from Giulio's review)

• Removed deprecated baseUrl from both tsconfigs (fixes TS5101)
• Typed fetchMainBatches return type (fixes implicit-any cascade)
• Fixed unused variables in UserManagementTab and Dashboard
• npm audit fix — 0 vulnerabilities

Filter Chips

• Main Batches filter chips now correctly filter real API uppercase
  status strings (COMPLETED, IN_PROGRESS, FAILED)

Screenshots

Notes

• Account Mapper APIs are mock for now (backend pending)
• Chrome required for Gazelle SSL cert acceptance

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[DavidH-1]

Why are account mapper APIs mock?

[DavidH-1]

Lgtm my comments can be addressed in a subsequent pr