Add user feature permissions and unified account management

frontend/app/ui/HeaderActions.tsx

@@ -1,54 +1,15 @@
 'use client'
 
 import { usePathname } from 'next/navigation'
-import { useEffect, useState } from 'react'
-import { authFetch, clearToken, getApiBase, getToken } from '../lib/auth'
+import { canAccess, featureForPath } from '../lib/features'
+import { useFeatureUser } from './FeatureGate'
 
 export default function HeaderActions() {
-  const [signedIn, setSignedIn] = useState(false)
-  const [role, setRole] = useState<string | null>(null)
-  const [showRequestsNav, setShowRequestsNav] = useState(true)
   const pathname = usePathname()
-
-  useEffect(() => {
-    const token = getToken()
-    setSignedIn(Boolean(token))
-    if (!token) {
-      setShowRequestsNav(true)
-      return
-    }
-    const load = async () => {
-      try {
-        const baseUrl = getApiBase()
-        const [response, siteResponse] = await Promise.all([
-          authFetch(`${baseUrl}/auth/me`),
-          fetch(`${baseUrl}/site/public`).catch(() => null),
-        ])
-        if (!response.ok) {
-          clearToken()
-          setSignedIn(false)
-          setRole(null)
-          return
-        }
-        const data = await response.json()
-        setRole(data?.role ?? null)
-        if (siteResponse?.ok) {
-          const siteData = await siteResponse.json()
-          setShowRequestsNav(siteData?.navigation?.showRequests !== false)
-        } else {
-          setShowRequestsNav(true)
-        }
-      } catch (err) {
-        console.error(err)
-        setShowRequestsNav(true)
-      }
-    }
-    void load()
-  }, [])
-
-  if (!signedIn) {
-    return null
-  }
+  const { user, ready } = useFeatureUser()
+  const role = user?.role ?? null
+  const showRequestsNav = canAccess(user, 'new_requests')
+  if (!ready || !user) return null
 
   const roleItems =
     role === null
@@ -104,7 +65,7 @@ export default function HeaderActions() {
   const items = [
     ...commonItems,
     ...roleItems,
-  ]
+  ].filter((item) => canAccess(user, featureForPath(item.href)))
 
   return (
     <nav className="header-actions" aria-label="Primary">