Dispatch Operator Console MVP
Workflow focus: precheck - assign - recover. This screen consumes existing task/trucking APIs.
Connection Context
Auth mode
Production mode supports password login + MFA challenge completion. Dev mode can issue token via `/auth/token` placeholder endpoint.
Production credential login
Account Security Workspace
Manage password lifecycle and session-security actions. Passwords/reset tokens remain in-memory only and are never persisted to local storage.
Password Change
Authenticated session required. If MFA step-up is enforced for your account, provide OTP from authenticator app.
Run Session Check successfully before changing password.
Password Reset Request
Non-leaky request path: accepted response does not prove account existence. Delivery is out-of-band unless explicit development token boundary is enabled.
Password Reset Confirm
Confirm reset using out-of-band token and set a new password.
Session / Logout Actions
Backend logout uses persisted refresh session revoke when refresh token is present. Session inventory/revoke list endpoint is not yet available.
Session inventory now available for own sessions only. No cross-tenant/session token material exposed.
Session Inventory
View and revoke your own tenant-scoped sessions. Safe metadata only: id, createdAt, expiresAt, revokedAt.
No session inventory loaded yet.
Admin-assisted Recovery
Dedicated admin-assisted lost-device recovery/reset endpoint is not yet available in current backend contract. Use existing password-reset and MFA disable boundaries.