feat: implement cross-tab idle session timeout and add request collapsing to token refresh logic.

apps/backoffice/src/app/i18n/locales/am.ts

@@ -105,6 +105,8 @@ export const am: Translations = {
 
   common: {
     logout: "ውጣ",
+    idleLogoutTitle: "ክፍለ ጊዜው አልቋል",
+    idleLogoutMessage: "ለ15 ደቂቃ እንቅስቃሴ ባለማድረግዎ ምክንያት ወጥተዋል።",
     profile: "መገለጫ",
     settings: "ቅንብሮች",
     export: "ላክ",

apps/backoffice/src/app/i18n/locales/en.ts

@@ -103,6 +103,8 @@ export const en = {
 
   common: {
     logout: 'Log out',
+    idleLogoutTitle: 'Session ended',
+    idleLogoutMessage: 'You were signed out after 15 minutes of inactivity.',
     profile: 'Profile',
     settings: 'Settings',
     export: 'Export',

apps/backoffice/src/app/layouts/BackofficeLayout.tsx

@@ -3,7 +3,7 @@ import { AppShell, Drawer } from '@mantine/core';
 import { useDisclosure } from '@mantine/hooks';
 import { Outlet, useLocation, useNavigate } from 'react-router-dom';
 import { useTranslation } from 'react-i18next';
-import { BrandMark, logout } from '@ema-platform/auth';
+import { BrandMark, logout, useIdleTimer } from '@ema-platform/auth';
 import { AppHeader, AppSidebar } from '@ema-platform/ui';
 import type { NavItem, NavSection } from '@ema-platform/ui';
 import { notify } from '@ema-platform/ui';
@@ -26,6 +26,13 @@ const BADGE_POLL_MS = 60_000;
 
 const HEADER_HEIGHT = 116;
 
+/**
+ * A desk left unlocked with a license-review or medical-record screen open is
+ * the actual threat model here, not a slow token. 15 minutes of no mouse,
+ * key, scroll, or touch activity signs the officer out automatically.
+ */
+const IDLE_TIMEOUT_MS = 15 * 60 * 1000;
+
 export function BackofficeLayout() {
   const { t } = useTranslation();
   const navigate = useNavigate();
@@ -37,15 +44,6 @@ export function BackofficeLayout() {
   const layoutMode = useAppSelector((state) => state.preferences.layoutMode);
   const { permissions: granted, known } = usePermissions();
 
-  // TEMPORARY diagnostic — remove once the sidebar is confirmed working.
-  // eslint-disable-next-line no-console
-  console.log(
-    '[NAV] known=', known,
-    'granted=', granted.length,
-    '| cookies:', document.cookie.split('; ').map((c) => c.split('=')[0]).filter((n) => n.includes('token')),
-    '| token tail:', (document.cookie.match(/ema-backoffice-auth-token=([^;]+)/)?.[1] ?? 'NONE').slice(-12),
-  );
-
   // Badges reflect real pending work. One grouped request on a timer, shared
   // by the sidebar and the top bar via the RTK cache.
   const { data: counts } = useGetQueueCountsQuery(undefined, {
@@ -92,6 +90,17 @@ export function BackofficeLayout() {
     navigate("/");
   }, [dispatch, navigate]);
 
+  useIdleTimer(IDLE_TIMEOUT_MS, () => {
+    notify.info(
+      t(
+        'common.idleLogoutMessage',
+        'You were signed out after 15 minutes of inactivity.',
+      ),
+      t('common.idleLogoutTitle', 'Session ended'),
+    );
+    handleLogout();
+  });
+
   const segments = location.pathname.split('/').filter(Boolean);
   // Label each crumb from the nav item it corresponds to, falling back to a
   // readable form of the path segment. Every crumb was previously labelled