certctl/web/src/components/AuthGate.tsx

import type { ReactNode } from 'react';
import { useAuth } from './AuthProvider';
import LoginPage from '../pages/LoginPage';

export default function AuthGate({ children }: { children: ReactNode }) {
  const { loading, authRequired, authenticated } = useAuth();

  if (loading) {
    return (
      <div className="min-h-screen bg-page flex items-center justify-center">
        <div className="text-center">
          <h1 className="text-2xl font-bold text-brand-500 mb-2">certctl</h1>
          <p className="text-sm text-ink-muted">Connecting...</p>
        </div>
      </div>
    );
  }

  if (authRequired && !authenticated) {
    return <LoginPage />;
  }

  return <>{children}</>;
}