[mckaragoz]

Summary

Addresses critical Identity Lab audit findings and improves sandbox isolation, authorization, user provisioning, account management, and recovery workflows.

Changes

• Strengthen sandbox authorization and prevent unauthorized cross-sandbox operations.
• Secure Owner-managed user creation and introduce permanent member deletion.
• Add administrator repair tools and Owner sandbox recovery.
• Prevent Owner self-deletion to protect sandbox integrity.
• Fix Activity page initialization and refresh behavior.
• Improve password validation and user-facing error handling.

Notes

This PR is part of Identity Lab's pre-release hardening process, not a production-readiness milestone.

Additional automated tests, UI refinements, and production-readiness work will follow separately.

The framework-level session revocation issue affecting user deletion will be addressed in a dedicated PR.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.79%. Comparing base (1cfb7cd) to head (4649c57).
⚠️ Report is 1 commits behind head on dev.

Additional details and impacted files

@@           Coverage Diff           @@
##              dev     #115   +/-   ##
=======================================
  Coverage   86.79%   86.79%           
=======================================
  Files         681      681           
  Lines       18818    18818           
  Branches     2287     2287           
=======================================
  Hits        16334    16334           
  Misses       1738     1738           
  Partials      746      746           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.