Scaffold custom reports app (LXC 122 · /reports)

Framework for categorised custom reports pulling from NewBook, ResOS,
SambaPOS, and internal data. Report tree with collapsible categories
and subcategories; date-range params; run-audit log in reports_db.

Initial reports: NewBook arrivals/departures/stayovers/bookings-by-source,
ResOS covers/revenue, SambaPOS sales-summary/top-products, internal run-history.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

frontend/src/components/AuthGate.tsx

@@ -0,0 +1,51 @@
+import { useEffect, useState, createContext, useContext } from 'react'
+import type { User } from '../types'
+
+interface AuthCtx { user: User }
+const Ctx = createContext<AuthCtx | null>(null)
+
+export function useAuth() {
+  const ctx = useContext(Ctx)
+  if (!ctx) throw new Error('useAuth must be used inside AuthGate')
+  return ctx
+}
+
+export default function AuthGate({ children }: { children: React.ReactNode }) {
+  const [user, setUser] = useState<User | null>(null)
+  const [error, setError] = useState<string | null>(null)
+
+  useEffect(() => {
+    fetch('/reports/api/auth/verify?app=reports', { credentials: 'include' })
+      .then(r => {
+        if (r.status === 401 || r.status === 403) {
+          window.location.href = `/portal?redirect=${encodeURIComponent(window.location.href)}`
+          return null
+        }
+        if (!r.ok) throw new Error(`Auth check failed: ${r.status}`)
+        return r.json()
+      })
+      .then(data => { if (data) setUser(data) })
+      .catch(err => setError(err.message))
+  }, [])
+
+  if (error) {
+    return (
+      <div style={{ padding: 32, color: '#991b1b', fontFamily: 'sans-serif' }}>
+        Authentication error: {error}
+      </div>
+    )
+  }
+
+  if (!user) {
+    return (
+      <div style={{
+        display: 'flex', alignItems: 'center', justifyContent: 'center',
+        height: '100vh', fontFamily: 'sans-serif', color: '#6b7280',
+      }}>
+        Loading…
+      </div>
+    )
+  }
+
+  return <Ctx.Provider value={{ user }}>{children}</Ctx.Provider>
+}