@datatechsolutions/ui 2.11.81 → 2.11.83

package/dist/chunk-ZJPNP2YW.mjs

@@ -0,0 +1,44 @@
+"use client";
+// src/platform/rbac.ts
+function matchPermission(pattern, target) {
+  if (pattern === "*") return true;
+  if (pattern === target) return true;
+  const patternParts = pattern.split(":");
+  const targetParts = target.split(":");
+  for (let i = 0; i < patternParts.length; i++) {
+    if (patternParts[i] === "*") return true;
+    if (patternParts[i] !== targetParts[i]) return false;
+  }
+  return patternParts.length === targetParts.length;
+}
+function createPlatformRbac(opts) {
+  const ROLE_DEFINITIONS = opts.roles;
+  const MODULE_PERMISSIONS = opts.modulePermissions ?? {};
+  const PERMISSION_CLAIMS_MAP = opts.permissionClaimsMap;
+  const knownRoles = Object.keys(ROLE_DEFINITIONS);
+  const fallbackRole = opts.defaultRole ?? knownRoles[0];
+  function normalizePlatformRole(input) {
+    if (typeof input === "string" && input in ROLE_DEFINITIONS) {
+      return input;
+    }
+    return fallbackRole;
+  }
+  function can(user, permission) {
+    if (!user) return false;
+    const userClaims = user.permissions ?? [];
+    const requiredClaims = PERMISSION_CLAIMS_MAP[permission] ?? [];
+    return requiredClaims.some(
+      (claim) => userClaims.some((userClaim) => matchPermission(userClaim, claim))
+    );
+  }
+  return {
+    ROLE_DEFINITIONS,
+    MODULE_PERMISSIONS,
+    normalizePlatformRole,
+    can
+  };
+}
+
+export { createPlatformRbac };
+//# sourceMappingURL=chunk-ZJPNP2YW.mjs.map
+//# sourceMappingURL=chunk-ZJPNP2YW.mjs.map

package/dist/chunk-ZJPNP2YW.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/platform/rbac.ts"],"names":[],"mappings":";AAiDA,SAAS,eAAA,CAAgB,SAAiB,MAAA,EAAyB;AACjE,EAAA,IAAI,OAAA,KAAY,KAAK,OAAO,IAAA;AAC5B,EAAA,IAAI,OAAA,KAAY,QAAQ,OAAO,IAAA;AAC/B,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAA;AACtC,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,KAAA,CAAM,GAAG,CAAA;AACpC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,YAAA,CAAa,QAAQ,CAAA,EAAA,EAAK;AAC5C,IAAA,IAAI,YAAA,CAAa,CAAC,CAAA,KAAM,GAAA,EAAK,OAAO,IAAA;AACpC,IAAA,IAAI,aAAa,CAAC,CAAA,KAAM,WAAA,CAAY,CAAC,GAAG,OAAO,KAAA;AAAA,EACjD;AACA,EAAA,OAAO,YAAA,CAAa,WAAW,WAAA,CAAY,MAAA;AAC7C;AAEO,SAAS,mBAGd,IAAA,EAAuF;AACvF,EAAA,MAAM,mBAAmB,IAAA,CAAK,KAAA;AAC9B,EAAA,MAAM,kBAAA,GAAqB,IAAA,CAAK,iBAAA,IAAsB,EAAC;AACvD,EAAA,MAAM,wBAAwB,IAAA,CAAK,mBAAA;AAInC,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,IAAA,CAAK,gBAAgB,CAAA;AAC/C,EAAA,MAAM,YAAA,GAAsB,IAAA,CAAK,WAAA,IAAgB,UAAA,CAAW,CAAC,CAAA;AAE7D,EAAA,SAAS,sBAAsB,KAAA,EAAuB;AACpD,IAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAa,KAAA,IAAmB,gBAAA,EAAkB;AACrE,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,OAAO,YAAA;AAAA,EACT;AAEA,EAAA,SAAS,GAAA,CAAI,MAAuB,UAAA,EAAkC;AACpE,IAAA,IAAI,CAAC,MAAM,OAAO,KAAA;AAClB,IAAA,MAAM,UAAA,GAAc,IAAA,CAAK,WAAA,IAAe,EAAC;AAEzC,IAAA,MAAM,cAAA,GAAiB,qBAAA,CAAsB,UAAU,CAAA,IAAK,EAAC;AAC7D,IAAA,OAAO,cAAA,CAAe,IAAA;AAAA,MAAK,CAAC,UAC1B,UAAA,CAAW,IAAA,CAAK,CAAC,SAAA,KAAc,eAAA,CAAgB,SAAA,EAAW,KAAK,CAAC;AAAA,KAClE;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,gBAAA;AAAA,IACA,kBAAA;AAAA,IACA,qBAAA;AAAA,IACA;AAAA,GACF;AACF","file":"chunk-ZJPNP2YW.mjs","sourcesContent":["import type { AuthUser } from '@datatechsolutions/windsock/client'\n\n/**\n * Generic role-based access factory shared across platform apps (astrlabe,\n * kori-erp, etc). Each app instantiates this with its own role + permission\n * unions and seed-claim mapping. The factory closes over the config and\n * exports `ROLE_DEFINITIONS`, `MODULE_PERMISSIONS`, `normalizePlatformRole`,\n * and `can()` — the same surface the per-app file used to expose.\n *\n * The factory deliberately does not hardcode any specific role enum here —\n * astrlabe, kori-erp, and future apps each pick their own union (admin,\n * manager, analyst, viewer, …) and pass the role definitions in.\n */\n\nexport type PlatformRoleDefinition<TRole extends string> = {\n  id: TRole\n  label: string\n  description: string\n}\n\nexport type CreatePlatformRbacOptions<\n  TRole extends string,\n  TPermission extends string,\n> = {\n  /** Definitions for every role the app supports (id/label/description). */\n  roles: Record<TRole, PlatformRoleDefinition<TRole>>\n  /**\n   * Maps each app-level permission to one or more JWT permission claim\n   * strings. `can()` returns true when ANY of the listed claims (using\n   * wildcard matching) is present in the user's JWT permissions.\n   */\n  permissionClaimsMap: Record<TPermission, readonly string[]>\n  /** Optional map from navigation/module IDs to required permissions. */\n  modulePermissions?: Record<string, TPermission>\n  /** Role to fall back to when an unknown role string comes in. */\n  defaultRole?: TRole\n}\n\nexport type PlatformRbac<TRole extends string, TPermission extends string> = {\n  ROLE_DEFINITIONS: Record<TRole, PlatformRoleDefinition<TRole>>\n  MODULE_PERMISSIONS: Record<string, TPermission>\n  normalizePlatformRole: (input: unknown) => TRole\n  can: (user: AuthUser | null, permission: TPermission) => boolean\n}\n\n/**\n * Match a permission string against a pattern (supports wildcards).\n * Same logic as windsock's usePermissionChecker.\n */\nfunction matchPermission(pattern: string, target: string): boolean {\n  if (pattern === '*') return true\n  if (pattern === target) return true\n  const patternParts = pattern.split(':')\n  const targetParts = target.split(':')\n  for (let i = 0; i < patternParts.length; i++) {\n    if (patternParts[i] === '*') return true\n    if (patternParts[i] !== targetParts[i]) return false\n  }\n  return patternParts.length === targetParts.length\n}\n\nexport function createPlatformRbac<\n  TRole extends string,\n  TPermission extends string,\n>(opts: CreatePlatformRbacOptions<TRole, TPermission>): PlatformRbac<TRole, TPermission> {\n  const ROLE_DEFINITIONS = opts.roles\n  const MODULE_PERMISSIONS = opts.modulePermissions ?? ({} as Record<string, TPermission>)\n  const PERMISSION_CLAIMS_MAP = opts.permissionClaimsMap\n\n  // Pick the fallback role: explicit `defaultRole` first, then the first\n  // entry in the roles map. We assume there's at least one role.\n  const knownRoles = Object.keys(ROLE_DEFINITIONS) as TRole[]\n  const fallbackRole: TRole = opts.defaultRole ?? (knownRoles[0] as TRole)\n\n  function normalizePlatformRole(input: unknown): TRole {\n    if (typeof input === 'string' && (input as TRole) in ROLE_DEFINITIONS) {\n      return input as TRole\n    }\n    return fallbackRole\n  }\n\n  function can(user: AuthUser | null, permission: TPermission): boolean {\n    if (!user) return false\n    const userClaims = (user.permissions ?? []) as string[]\n\n    const requiredClaims = PERMISSION_CLAIMS_MAP[permission] ?? []\n    return requiredClaims.some((claim) =>\n      userClaims.some((userClaim) => matchPermission(userClaim, claim))\n    )\n  }\n\n  return {\n    ROLE_DEFINITIONS,\n    MODULE_PERMISSIONS,\n    normalizePlatformRole,\n    can,\n  }\n}\n"]}

package/dist/{workflow-canvas-NSxfr5dy.d.ts → index-AioB90qq.d.mts}

@@ -1,7 +1,4 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
-import { ComponentProps } from 'react';
-import { NodeTypes } from '@xyflow/react';
-import { AgentConfig, AnswerNodeConfig, CodeNodeConfig, DocumentExtractorNodeConfig, EndNodeConfig, EntityNodeConfig, GroupNodeConfig, HttpRequestNodeConfig, IfElseNodeConfig, IterationNodeConfig, IterationStartNodeConfig, KnowledgeBaseNodeConfig, ListOperatorNodeConfig, ModelProviderNodeConfig, NoteNodeConfig, ParameterExtractorNodeConfig, QuestionClassifierNodeConfig, AgentRule, RuleNodeConfig, StartNodeConfig, TemplateTransformNodeConfig, WorkflowTool, VariableAggregatorNodeConfig, VariableAssignerNodeConfig, AgentModel, AgentTool, WorkflowGraph, LogicNodeConfig } from './astrlabe/contracts.js';
+import { AgentConfig, AnswerNodeConfig, CodeNodeConfig, DocumentExtractorNodeConfig, EndNodeConfig, EntityNodeConfig, GroupNodeConfig, HttpRequestNodeConfig, IfElseNodeConfig, IterationNodeConfig, IterationStartNodeConfig, KnowledgeBaseNodeConfig, ListOperatorNodeConfig, ModelProviderNodeConfig, NoteNodeConfig, ParameterExtractorNodeConfig, QuestionClassifierNodeConfig, AgentRule, RuleNodeConfig, StartNodeConfig, TemplateTransformNodeConfig, WorkflowTool, VariableAggregatorNodeConfig, VariableAssignerNodeConfig } from './astrlabe/contracts.mjs';
 
 type WorkflowCardDisplayMode = 'detailed' | 'compact';
 type WorkflowEntityDefinition = {
@@ -208,66 +205,4 @@ type GroupNodeData = {
     onRemoveFromCanvas?: (nodeId: string) => void;
 };
 
-type AgentModalRenderProps = {
-    agent: AgentWithPrompts | null;
-    models: AgentModel[];
-    open: boolean;
-    isCreateMode: boolean;
-    onClose: () => void;
-    onSaved: () => void;
-};
-type LogicNodeModalRenderProps = {
-    nodeId: string | null;
-    nodeLabel: string;
-    config: LogicNodeConfig | null;
-    open: boolean;
-    onClose: () => void;
-    onSave: (nodeId: string, updatedConfig: LogicNodeConfig) => void;
-    entities: WorkflowEntityDefinition[];
-};
-type WorkflowCanvasProps = {
-    agents: AgentWithPrompts[];
-    models: AgentModel[];
-    tools?: WorkflowTool[];
-    agentTools?: AgentTool[];
-    rules?: AgentRule[];
-    entities?: WorkflowEntityDefinition[];
-    datasources?: Array<{
-        id: string;
-        name: string;
-        dialect: string;
-    }>;
-    onLoadTables?: (datasourceId: string) => Promise<string[]>;
-    onLoadSchema?: (datasourceId: string, table: string) => Promise<Array<{
-        name: string;
-        type: string;
-        nullable?: boolean;
-    }>>;
-    initialGraph?: WorkflowGraph | null;
-    onGraphChange?: (graph: WorkflowGraph) => void;
-    onEditTool?: (tool: WorkflowTool) => void;
-    onToggleTool?: (tool: WorkflowTool) => void;
-    onEditRule?: (rule: AgentRule) => void;
-    onToggleRule?: (rule: AgentRule) => void;
-    onCancelCreateAgent?: () => void;
-    onAgentSaved?: () => void;
-    isCreatingAgent?: boolean;
-    /** Custom node type components — merged with built-in edge types */
-    nodeTypes?: NodeTypes;
-    /** Optional: render the AgentModal externally (frontend provides the component) */
-    renderAgentModal?: (props: AgentModalRenderProps) => React.ReactNode;
-    /** Optional: render a custom LogicNodeModal; defaults to internal modal */
-    renderLogicNodeModal?: (props: LogicNodeModalRenderProps) => React.ReactNode;
-};
-declare function WorkflowCanvas(props: WorkflowCanvasProps): react_jsx_runtime.JSX.Element;
-
-type BuilderCanvasProps = ComponentProps<typeof WorkflowCanvas>;
-type WorkspaceProps = {
-    locale?: string;
-    messages?: Record<string, unknown>;
-    className?: string;
-    workflowId?: string;
-} & Partial<BuilderCanvasProps>;
-declare function Workspace({ locale, messages, className, workflowId, ...canvasProps }: WorkspaceProps): react_jsx_runtime.JSX.Element;
-
-export { type AgentWithPrompts as A, type CodeNodeData as C, type DocumentExtractorNodeData as D, type EntityNodeData as E, type GroupNodeData as G, type HttpRequestNodeData as H, type IfElseNodeData as I, type KnowledgeBaseNodeData as K, type ListOperatorNodeData as L, type ModelProviderNodeData as M, type NoteNodeData as N, type ParameterExtractorNodeData as P, type QuestionClassifierNodeData as Q, type RuleNodeData as R, type StartNodeData as S, type ToolCanvasData as T, type VariableAssignerNodeData as V, type WorkflowEntityDefinition as W, type AgentNodeData as a, type EndNodeData as b, type TemplateTransformNodeData as c, type IterationNodeData as d, type AnswerNodeData as e, type VariableAggregatorNodeData as f, type IterationStartNodeData as g, type WorkspaceProps as h, type AgentNodeTool as i, Workspace as j };
+export type { AgentWithPrompts as A, CodeNodeData as C, DocumentExtractorNodeData as D, EntityNodeData as E, GroupNodeData as G, HttpRequestNodeData as H, IfElseNodeData as I, KnowledgeBaseNodeData as K, ListOperatorNodeData as L, ModelProviderNodeData as M, NoteNodeData as N, ParameterExtractorNodeData as P, QuestionClassifierNodeData as Q, RuleNodeData as R, StartNodeData as S, ToolCanvasData as T, VariableAssignerNodeData as V, WorkflowEntityDefinition as W, AgentNodeData as a, EndNodeData as b, TemplateTransformNodeData as c, IterationNodeData as d, AnswerNodeData as e, VariableAggregatorNodeData as f, IterationStartNodeData as g, AgentNodeTool as h };

package/dist/{workflow-canvas-D4928AfA.d.mts → index-D5ai0cGZ.d.ts}

@@ -1,7 +1,4 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
-import { ComponentProps } from 'react';
-import { NodeTypes } from '@xyflow/react';
-import { AgentConfig, AnswerNodeConfig, CodeNodeConfig, DocumentExtractorNodeConfig, EndNodeConfig, EntityNodeConfig, GroupNodeConfig, HttpRequestNodeConfig, IfElseNodeConfig, IterationNodeConfig, IterationStartNodeConfig, KnowledgeBaseNodeConfig, ListOperatorNodeConfig, ModelProviderNodeConfig, NoteNodeConfig, ParameterExtractorNodeConfig, QuestionClassifierNodeConfig, AgentRule, RuleNodeConfig, StartNodeConfig, TemplateTransformNodeConfig, WorkflowTool, VariableAggregatorNodeConfig, VariableAssignerNodeConfig, AgentModel, AgentTool, WorkflowGraph, LogicNodeConfig } from './astrlabe/contracts.mjs';
+import { AgentConfig, AnswerNodeConfig, CodeNodeConfig, DocumentExtractorNodeConfig, EndNodeConfig, EntityNodeConfig, GroupNodeConfig, HttpRequestNodeConfig, IfElseNodeConfig, IterationNodeConfig, IterationStartNodeConfig, KnowledgeBaseNodeConfig, ListOperatorNodeConfig, ModelProviderNodeConfig, NoteNodeConfig, ParameterExtractorNodeConfig, QuestionClassifierNodeConfig, AgentRule, RuleNodeConfig, StartNodeConfig, TemplateTransformNodeConfig, WorkflowTool, VariableAggregatorNodeConfig, VariableAssignerNodeConfig } from './astrlabe/contracts.js';
 
 type WorkflowCardDisplayMode = 'detailed' | 'compact';
 type WorkflowEntityDefinition = {
@@ -208,66 +205,4 @@ type GroupNodeData = {
     onRemoveFromCanvas?: (nodeId: string) => void;
 };
 
-type AgentModalRenderProps = {
-    agent: AgentWithPrompts | null;
-    models: AgentModel[];
-    open: boolean;
-    isCreateMode: boolean;
-    onClose: () => void;
-    onSaved: () => void;
-};
-type LogicNodeModalRenderProps = {
-    nodeId: string | null;
-    nodeLabel: string;
-    config: LogicNodeConfig | null;
-    open: boolean;
-    onClose: () => void;
-    onSave: (nodeId: string, updatedConfig: LogicNodeConfig) => void;
-    entities: WorkflowEntityDefinition[];
-};
-type WorkflowCanvasProps = {
-    agents: AgentWithPrompts[];
-    models: AgentModel[];
-    tools?: WorkflowTool[];
-    agentTools?: AgentTool[];
-    rules?: AgentRule[];
-    entities?: WorkflowEntityDefinition[];
-    datasources?: Array<{
-        id: string;
-        name: string;
-        dialect: string;
-    }>;
-    onLoadTables?: (datasourceId: string) => Promise<string[]>;
-    onLoadSchema?: (datasourceId: string, table: string) => Promise<Array<{
-        name: string;
-        type: string;
-        nullable?: boolean;
-    }>>;
-    initialGraph?: WorkflowGraph | null;
-    onGraphChange?: (graph: WorkflowGraph) => void;
-    onEditTool?: (tool: WorkflowTool) => void;
-    onToggleTool?: (tool: WorkflowTool) => void;
-    onEditRule?: (rule: AgentRule) => void;
-    onToggleRule?: (rule: AgentRule) => void;
-    onCancelCreateAgent?: () => void;
-    onAgentSaved?: () => void;
-    isCreatingAgent?: boolean;
-    /** Custom node type components — merged with built-in edge types */
-    nodeTypes?: NodeTypes;
-    /** Optional: render the AgentModal externally (frontend provides the component) */
-    renderAgentModal?: (props: AgentModalRenderProps) => React.ReactNode;
-    /** Optional: render a custom LogicNodeModal; defaults to internal modal */
-    renderLogicNodeModal?: (props: LogicNodeModalRenderProps) => React.ReactNode;
-};
-declare function WorkflowCanvas(props: WorkflowCanvasProps): react_jsx_runtime.JSX.Element;
-
-type BuilderCanvasProps = ComponentProps<typeof WorkflowCanvas>;
-type WorkspaceProps = {
-    locale?: string;
-    messages?: Record<string, unknown>;
-    className?: string;
-    workflowId?: string;
-} & Partial<BuilderCanvasProps>;
-declare function Workspace({ locale, messages, className, workflowId, ...canvasProps }: WorkspaceProps): react_jsx_runtime.JSX.Element;
-
-export { type AgentWithPrompts as A, type CodeNodeData as C, type DocumentExtractorNodeData as D, type EntityNodeData as E, type GroupNodeData as G, type HttpRequestNodeData as H, type IfElseNodeData as I, type KnowledgeBaseNodeData as K, type ListOperatorNodeData as L, type ModelProviderNodeData as M, type NoteNodeData as N, type ParameterExtractorNodeData as P, type QuestionClassifierNodeData as Q, type RuleNodeData as R, type StartNodeData as S, type ToolCanvasData as T, type VariableAssignerNodeData as V, type WorkflowEntityDefinition as W, type AgentNodeData as a, type EndNodeData as b, type TemplateTransformNodeData as c, type IterationNodeData as d, type AnswerNodeData as e, type VariableAggregatorNodeData as f, type IterationStartNodeData as g, type WorkspaceProps as h, type AgentNodeTool as i, Workspace as j };
+export type { AgentWithPrompts as A, CodeNodeData as C, DocumentExtractorNodeData as D, EntityNodeData as E, GroupNodeData as G, HttpRequestNodeData as H, IfElseNodeData as I, KnowledgeBaseNodeData as K, ListOperatorNodeData as L, ModelProviderNodeData as M, NoteNodeData as N, ParameterExtractorNodeData as P, QuestionClassifierNodeData as Q, RuleNodeData as R, StartNodeData as S, ToolCanvasData as T, VariableAssignerNodeData as V, WorkflowEntityDefinition as W, AgentNodeData as a, EndNodeData as b, TemplateTransformNodeData as c, IterationNodeData as d, AnswerNodeData as e, VariableAggregatorNodeData as f, IterationStartNodeData as g, AgentNodeTool as h };

package/dist/platform/index.d.mts

@@ -0,0 +1,41 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+import { SessionSwitcherProps, ManagedUser, Organization } from '@datatechsolutions/shared-domain/common';
+import { ReactNode } from 'react';
+import { AuthUser } from '@datatechsolutions/windsock/client';
+export { CreatePlatformRbacOptions, PlatformRbac, PlatformRoleDefinition, createPlatformRbac } from './rbac.mjs';
+export { CreateSecretInput, SecretDetail, SecretSummary, UpdateSecretInput, addOrganizationDomain, addOrganizationMember, createOrganization, createOrganizationInvitation, createPermission, createSecret, createUser, deleteOrganization, deletePermission, deleteUser, disableSecret, getSecret, getUserPermissions, listOrganizationDomains, listOrganizationInvitations, listOrganizationMembers, listOrganizations, listPermissions, listSecrets, listUsers, removeOrganizationMember, resetUserPassword, rotateSecret, setUserPermissions, setWindsockAdminClient, updateOrganization, updatePermission, updateUser, verifyOrganizationDomain } from './windsock-admin-client.mjs';
+import { AdminUserSummary, AuthOrganization } from '@datatechsolutions/shared-domain';
+
+declare function SessionSwitcher({ organizations, users, organizationId, userEmail, onOrganizationChange, onUserChange, }: SessionSwitcherProps): react_jsx_runtime.JSX.Element;
+
+type PlatformState = {
+    currentOrganizationId: string;
+    actor: AuthUser | null;
+};
+type PlatformStateProviderProps = {
+    children: ReactNode;
+    /**
+     * Function that converts a JWT role claim to the app's canonical role
+     * union (the same `normalizePlatformRole` produced by
+     * `createPlatformRbac()` in this app). Lifted out as a prop because
+     * each consuming app uses its own role enum.
+     */
+    normalizeRole: (input: unknown) => string;
+};
+declare function PlatformStateProvider({ children, normalizeRole }: PlatformStateProviderProps): react_jsx_runtime.JSX.Element;
+declare function usePlatformState(): PlatformState;
+
+/** Maps a windsock AuthOrganization to the app-level Organization shape used by UI pages. */
+declare function mapAuthOrg(raw: AuthOrganization): Organization;
+/**
+ * Maps a windsock AdminUserSummary to the app-level ManagedUser shape.
+ * Takes `normalizeRole` as a parameter so each consuming app can plug in
+ * the role normalizer produced by its own `createPlatformRbac()` call —
+ * we deliberately don't hardcode an app-specific role enum here.
+ */
+declare function mapAdminUser(row: AdminUserSummary, normalizeRole: (input: unknown) => string): ManagedUser;
+/** Maps an app-level UserRole to a windsock AuthOrganizationRole. */
+declare const ORG_ROLE_MAP: Record<string, 'owner' | 'admin' | 'member' | 'viewer'>;
+declare function mapRoleToOrgRole(role: string): 'owner' | 'admin' | 'member' | 'viewer';
+
+export { ORG_ROLE_MAP, PlatformStateProvider, type PlatformStateProviderProps, SessionSwitcher, mapAdminUser, mapAuthOrg, mapRoleToOrgRole, usePlatformState };

package/dist/platform/index.d.ts

@@ -0,0 +1,41 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+import { SessionSwitcherProps, ManagedUser, Organization } from '@datatechsolutions/shared-domain/common';
+import { ReactNode } from 'react';
+import { AuthUser } from '@datatechsolutions/windsock/client';
+export { CreatePlatformRbacOptions, PlatformRbac, PlatformRoleDefinition, createPlatformRbac } from './rbac.js';
+export { CreateSecretInput, SecretDetail, SecretSummary, UpdateSecretInput, addOrganizationDomain, addOrganizationMember, createOrganization, createOrganizationInvitation, createPermission, createSecret, createUser, deleteOrganization, deletePermission, deleteUser, disableSecret, getSecret, getUserPermissions, listOrganizationDomains, listOrganizationInvitations, listOrganizationMembers, listOrganizations, listPermissions, listSecrets, listUsers, removeOrganizationMember, resetUserPassword, rotateSecret, setUserPermissions, setWindsockAdminClient, updateOrganization, updatePermission, updateUser, verifyOrganizationDomain } from './windsock-admin-client.js';
+import { AdminUserSummary, AuthOrganization } from '@datatechsolutions/shared-domain';
+
+declare function SessionSwitcher({ organizations, users, organizationId, userEmail, onOrganizationChange, onUserChange, }: SessionSwitcherProps): react_jsx_runtime.JSX.Element;
+
+type PlatformState = {
+    currentOrganizationId: string;
+    actor: AuthUser | null;
+};
+type PlatformStateProviderProps = {
+    children: ReactNode;
+    /**
+     * Function that converts a JWT role claim to the app's canonical role
+     * union (the same `normalizePlatformRole` produced by
+     * `createPlatformRbac()` in this app). Lifted out as a prop because
+     * each consuming app uses its own role enum.
+     */
+    normalizeRole: (input: unknown) => string;
+};
+declare function PlatformStateProvider({ children, normalizeRole }: PlatformStateProviderProps): react_jsx_runtime.JSX.Element;
+declare function usePlatformState(): PlatformState;
+
+/** Maps a windsock AuthOrganization to the app-level Organization shape used by UI pages. */
+declare function mapAuthOrg(raw: AuthOrganization): Organization;
+/**
+ * Maps a windsock AdminUserSummary to the app-level ManagedUser shape.
+ * Takes `normalizeRole` as a parameter so each consuming app can plug in
+ * the role normalizer produced by its own `createPlatformRbac()` call —
+ * we deliberately don't hardcode an app-specific role enum here.
+ */
+declare function mapAdminUser(row: AdminUserSummary, normalizeRole: (input: unknown) => string): ManagedUser;
+/** Maps an app-level UserRole to a windsock AuthOrganizationRole. */
+declare const ORG_ROLE_MAP: Record<string, 'owner' | 'admin' | 'member' | 'viewer'>;
+declare function mapRoleToOrgRole(role: string): 'owner' | 'admin' | 'member' | 'viewer';
+
+export { ORG_ROLE_MAP, PlatformStateProvider, type PlatformStateProviderProps, SessionSwitcher, mapAdminUser, mapAuthOrg, mapRoleToOrgRole, usePlatformState };

package/dist/platform/index.js

@@ -0,0 +1,237 @@
+"use client";
+'use strict';
+
+var chunkHZ4LOVHM_js = require('../chunk-HZ4LOVHM.js');
+var chunk6PBTB5ZX_js = require('../chunk-6PBTB5ZX.js');
+var chunkTUEYBNWL_js = require('../chunk-TUEYBNWL.js');
+var chunkYXN2K77G_js = require('../chunk-YXN2K77G.js');
+require('../chunk-S7KHTUHA.js');
+require('../chunk-UZ3CMNUJ.js');
+var jsxRuntime = require('react/jsx-runtime');
+var react = require('react');
+var client = require('@datatechsolutions/windsock/client');
+
+function SessionSwitcher({
+  organizations,
+  users,
+  organizationId,
+  userEmail,
+  onOrganizationChange,
+  onUserChange
+}) {
+  const tSession = chunkYXN2K77G_js.useTranslations("platform.session");
+  const tCommon = chunkYXN2K77G_js.useTranslations("common");
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "session-switcher", children: [
+    /* @__PURE__ */ jsxRuntime.jsx(
+      chunkTUEYBNWL_js.Select,
+      {
+        value: organizationId,
+        "aria-label": tSession("organization"),
+        onChange: (event) => {
+          onOrganizationChange(event.target.value);
+        },
+        options: organizations,
+        placeholder: tSession("organization")
+      }
+    ),
+    /* @__PURE__ */ jsxRuntime.jsx(
+      chunkTUEYBNWL_js.Select,
+      {
+        value: userEmail,
+        "aria-label": tSession("user"),
+        onChange: (event) => {
+          onUserChange(event.target.value);
+        },
+        options: users,
+        placeholder: tSession("user")
+      }
+    ),
+    /* @__PURE__ */ jsxRuntime.jsx(chunkTUEYBNWL_js.Button, { outline: true, onClick: () => globalThis.location.reload(), children: tCommon("refresh") })
+  ] });
+}
+var PlatformStateContext = react.createContext(null);
+function PlatformStateProvider({ children, normalizeRole }) {
+  const { user } = client.useAuth();
+  const state = react.useMemo(() => {
+    const organizationId = user?.organizationId ?? "";
+    const actor = user ? {
+      ...user,
+      role: normalizeRole(user.role),
+      organizationId
+    } : null;
+    return {
+      currentOrganizationId: organizationId,
+      actor
+    };
+  }, [user, normalizeRole]);
+  return /* @__PURE__ */ jsxRuntime.jsx(PlatformStateContext.Provider, { value: state, children });
+}
+function usePlatformState() {
+  const context = react.useContext(PlatformStateContext);
+  if (!context) throw new Error("usePlatformState must be used inside PlatformStateProvider");
+  return context;
+}
+
+// src/platform/windsock-mappers.ts
+function mapAuthOrg(raw) {
+  return {
+    id: raw.id,
+    name: raw.displayName ?? raw.name,
+    currency: "BRL",
+    country: "BR"
+  };
+}
+function mapAdminUser(row, normalizeRole) {
+  return {
+    id: row.id,
+    email: row.email,
+    name: row.name ?? row.email,
+    role: normalizeRole(row.role),
+    active: row.status === "active"
+  };
+}
+var ORG_ROLE_MAP = {
+  owner: "owner",
+  admin: "admin",
+  manager: "admin",
+  analyst: "member",
+  operator: "member",
+  viewer: "viewer",
+  finance: "member",
+  sales: "member",
+  support: "member",
+  member: "member"
+};
+function mapRoleToOrgRole(role) {
+  return ORG_ROLE_MAP[role] ?? "member";
+}
+
+Object.defineProperty(exports, "createPlatformRbac", {
+  enumerable: true,
+  get: function () { return chunkHZ4LOVHM_js.createPlatformRbac; }
+});
+Object.defineProperty(exports, "addOrganizationDomain", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.addOrganizationDomain; }
+});
+Object.defineProperty(exports, "addOrganizationMember", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.addOrganizationMember; }
+});
+Object.defineProperty(exports, "createOrganization", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.createOrganization; }
+});
+Object.defineProperty(exports, "createOrganizationInvitation", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.createOrganizationInvitation; }
+});
+Object.defineProperty(exports, "createPermission", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.createPermission; }
+});
+Object.defineProperty(exports, "createSecret", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.createSecret; }
+});
+Object.defineProperty(exports, "createUser", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.createUser; }
+});
+Object.defineProperty(exports, "deleteOrganization", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.deleteOrganization; }
+});
+Object.defineProperty(exports, "deletePermission", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.deletePermission; }
+});
+Object.defineProperty(exports, "deleteUser", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.deleteUser; }
+});
+Object.defineProperty(exports, "disableSecret", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.disableSecret; }
+});
+Object.defineProperty(exports, "getSecret", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.getSecret; }
+});
+Object.defineProperty(exports, "getUserPermissions", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.getUserPermissions; }
+});
+Object.defineProperty(exports, "listOrganizationDomains", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.listOrganizationDomains; }
+});
+Object.defineProperty(exports, "listOrganizationInvitations", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.listOrganizationInvitations; }
+});
+Object.defineProperty(exports, "listOrganizationMembers", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.listOrganizationMembers; }
+});
+Object.defineProperty(exports, "listOrganizations", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.listOrganizations; }
+});
+Object.defineProperty(exports, "listPermissions", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.listPermissions; }
+});
+Object.defineProperty(exports, "listSecrets", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.listSecrets; }
+});
+Object.defineProperty(exports, "listUsers", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.listUsers; }
+});
+Object.defineProperty(exports, "removeOrganizationMember", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.removeOrganizationMember; }
+});
+Object.defineProperty(exports, "resetUserPassword", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.resetUserPassword; }
+});
+Object.defineProperty(exports, "rotateSecret", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.rotateSecret; }
+});
+Object.defineProperty(exports, "setUserPermissions", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.setUserPermissions; }
+});
+Object.defineProperty(exports, "setWindsockAdminClient", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.setWindsockAdminClient; }
+});
+Object.defineProperty(exports, "updateOrganization", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.updateOrganization; }
+});
+Object.defineProperty(exports, "updatePermission", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.updatePermission; }
+});
+Object.defineProperty(exports, "updateUser", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.updateUser; }
+});
+Object.defineProperty(exports, "verifyOrganizationDomain", {
+  enumerable: true,
+  get: function () { return chunk6PBTB5ZX_js.verifyOrganizationDomain; }
+});
+exports.ORG_ROLE_MAP = ORG_ROLE_MAP;
+exports.PlatformStateProvider = PlatformStateProvider;
+exports.SessionSwitcher = SessionSwitcher;
+exports.mapAdminUser = mapAdminUser;
+exports.mapAuthOrg = mapAuthOrg;
+exports.mapRoleToOrgRole = mapRoleToOrgRole;
+exports.usePlatformState = usePlatformState;
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/platform/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/platform/session-switcher.tsx","../../src/platform/platform-state-provider.tsx","../../src/platform/windsock-mappers.ts"],"names":["useTranslations","jsxs","jsx","Select","Button","createContext","useAuth","useMemo","useContext"],"mappings":";;;;;;;;;;;;AAIO,SAAS,eAAA,CAAgB;AAAA,EAC9B,aAAA;AAAA,EACA,KAAA;AAAA,EACA,cAAA;AAAA,EACA,SAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF,CAAA,EAAyB;AACvB,EAAA,MAAM,QAAA,GAAWA,iCAAgB,kBAAkB,CAAA;AACnD,EAAA,MAAM,OAAA,GAAUA,iCAAgB,QAAQ,CAAA;AAExC,EAAA,uBACEC,eAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,kBAAA,EACb,QAAA,EAAA;AAAA,oBAAAC,cAAA;AAAA,MAACC,uBAAA;AAAA,MAAA;AAAA,QACC,KAAA,EAAO,cAAA;AAAA,QACP,YAAA,EAAY,SAAS,cAAc,CAAA;AAAA,QACnC,QAAA,EAAU,CAAC,KAAA,KAAU;AACnB,UAAA,oBAAA,CAAqB,KAAA,CAAM,OAAO,KAAK,CAAA;AAAA,QACzC,CAAA;AAAA,QACA,OAAA,EAAS,aAAA;AAAA,QACT,WAAA,EAAa,SAAS,cAAc;AAAA;AAAA,KACtC;AAAA,oBACAD,cAAA;AAAA,MAACC,uBAAA;AAAA,MAAA;AAAA,QACC,KAAA,EAAO,SAAA;AAAA,QACP,YAAA,EAAY,SAAS,MAAM,CAAA;AAAA,QAC3B,QAAA,EAAU,CAAC,KAAA,KAAU;AACnB,UAAA,YAAA,CAAa,KAAA,CAAM,OAAO,KAAK,CAAA;AAAA,QACjC,CAAA;AAAA,QACA,OAAA,EAAS,KAAA;AAAA,QACT,WAAA,EAAa,SAAS,MAAM;AAAA;AAAA,KAC9B;AAAA,oBACAD,cAAA,CAACE,uBAAA,EAAA,EAAO,OAAA,EAAO,IAAA,EAAC,OAAA,EAAS,MAAM,UAAA,CAAW,QAAA,CAAS,MAAA,EAAO,EACvD,QAAA,EAAA,OAAA,CAAQ,SAAS,CAAA,EACpB;AAAA,GAAA,EACF,CAAA;AAEJ;AChCA,IAAM,oBAAA,GAAuBC,oBAAoC,IAAI,CAAA;AAa9D,SAAS,qBAAA,CAAsB,EAAE,QAAA,EAAU,aAAA,EAAc,EAA+B;AAC7F,EAAA,MAAM,EAAE,IAAA,EAAK,GAAIC,cAAA,EAAQ;AAEzB,EAAA,MAAM,KAAA,GAAQC,cAAuB,MAAM;AACzC,IAAA,MAAM,cAAA,GAAiB,MAAM,cAAA,IAAkB,EAAA;AAE/C,IAAA,MAAM,QAAyB,IAAA,GAC3B;AAAA,MACA,GAAG,IAAA;AAAA,MACH,IAAA,EAAM,aAAA,CAAc,IAAA,CAAK,IAAI,CAAA;AAAA,MAC7B;AAAA,KACF,GACE,IAAA;AAEJ,IAAA,OAAO;AAAA,MACL,qBAAA,EAAuB,cAAA;AAAA,MACvB;AAAA,KACF;AAAA,EACF,CAAA,EAAG,CAAC,IAAA,EAAM,aAAa,CAAC,CAAA;AAExB,EAAA,uBACEL,cAAAA,CAAC,oBAAA,CAAqB,UAArB,EAA8B,KAAA,EAAO,OACnC,QAAA,EACH,CAAA;AAEJ;AAEO,SAAS,gBAAA,GAAmB;AACjC,EAAA,MAAM,OAAA,GAAUM,iBAAW,oBAAoB,CAAA;AAC/C,EAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,MAAM,4DAA4D,CAAA;AAC1F,EAAA,OAAO,OAAA;AACT;;;AC7CO,SAAS,WAAW,GAAA,EAAqC;AAC9D,EAAA,OAAO;AAAA,IACL,IAAI,GAAA,CAAI,EAAA;AAAA,IACR,IAAA,EAAM,GAAA,CAAI,WAAA,IAAe,GAAA,CAAI,IAAA;AAAA,IAC7B,QAAA,EAAU,KAAA;AAAA,IACV,OAAA,EAAS;AAAA,GACX;AACF;AAQO,SAAS,YAAA,CACd,KACA,aAAA,EACa;AACb,EAAA,OAAO;AAAA,IACL,IAAI,GAAA,CAAI,EAAA;AAAA,IACR,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,IAAA,EAAM,GAAA,CAAI,IAAA,IAAQ,GAAA,CAAI,KAAA;AAAA,IACtB,IAAA,EAAM,aAAA,CAAc,GAAA,CAAI,IAAI,CAAA;AAAA,IAC5B,MAAA,EAAQ,IAAI,MAAA,KAAW;AAAA,GACzB;AACF;AAGO,IAAM,YAAA,GAAwE;AAAA,EACnF,KAAA,EAAO,OAAA;AAAA,EACP,KAAA,EAAO,OAAA;AAAA,EACP,OAAA,EAAS,OAAA;AAAA,EACT,OAAA,EAAS,QAAA;AAAA,EACT,QAAA,EAAU,QAAA;AAAA,EACV,MAAA,EAAQ,QAAA;AAAA,EACR,OAAA,EAAS,QAAA;AAAA,EACT,KAAA,EAAO,QAAA;AAAA,EACP,OAAA,EAAS,QAAA;AAAA,EACT,MAAA,EAAQ;AACV;AAEO,SAAS,iBAAiB,IAAA,EAAuD;AACtF,EAAA,OAAO,YAAA,CAAa,IAAI,CAAA,IAAK,QAAA;AAC/B","file":"index.js","sourcesContent":["import { Select, Button } from '@ui/index'\nimport { useTranslations } from '@ui/lib/i18n-context'\nimport type { SessionSwitcherProps } from '@datatechsolutions/shared-domain/common'\n\nexport function SessionSwitcher({\n  organizations,\n  users,\n  organizationId,\n  userEmail,\n  onOrganizationChange,\n  onUserChange,\n}: SessionSwitcherProps) {\n  const tSession = useTranslations('platform.session')\n  const tCommon = useTranslations('common')\n\n  return (\n    <div className=\"session-switcher\">\n      <Select\n        value={organizationId}\n        aria-label={tSession('organization')}\n        onChange={(event) => {\n          onOrganizationChange(event.target.value)\n        }}\n        options={organizations}\n        placeholder={tSession('organization')}\n      />\n      <Select\n        value={userEmail}\n        aria-label={tSession('user')}\n        onChange={(event) => {\n          onUserChange(event.target.value)\n        }}\n        options={users}\n        placeholder={tSession('user')}\n      />\n      <Button outline onClick={() => globalThis.location.reload()}>\n        {tCommon('refresh')}\n      </Button>\n    </div>\n  )\n}\n","import { createContext, useContext, useMemo, type ReactNode } from 'react'\nimport { useAuth, type AuthUser } from '@datatechsolutions/windsock/client'\n\ntype PlatformState = {\n  currentOrganizationId: string\n  actor: AuthUser | null\n}\n\nconst PlatformStateContext = createContext<PlatformState | null>(null)\n\nexport type PlatformStateProviderProps = {\n  children: ReactNode\n  /**\n   * Function that converts a JWT role claim to the app's canonical role\n   * union (the same `normalizePlatformRole` produced by\n   * `createPlatformRbac()` in this app). Lifted out as a prop because\n   * each consuming app uses its own role enum.\n   */\n  normalizeRole: (input: unknown) => string\n}\n\nexport function PlatformStateProvider({ children, normalizeRole }: PlatformStateProviderProps) {\n  const { user } = useAuth()\n\n  const state = useMemo<PlatformState>(() => {\n    const organizationId = user?.organizationId ?? ''\n\n    const actor: AuthUser | null = user\n      ? {\n        ...user,\n        role: normalizeRole(user.role),\n        organizationId,\n      }\n      : null\n\n    return {\n      currentOrganizationId: organizationId,\n      actor,\n    }\n  }, [user, normalizeRole])\n\n  return (\n    <PlatformStateContext.Provider value={state}>\n      {children}\n    </PlatformStateContext.Provider>\n  )\n}\n\nexport function usePlatformState() {\n  const context = useContext(PlatformStateContext)\n  if (!context) throw new Error('usePlatformState must be used inside PlatformStateProvider')\n  return context\n}\n","import type {\n  AdminUserSummary,\n  AuthOrganization,\n} from '@datatechsolutions/shared-domain'\nimport type { ManagedUser, Organization, UserRole } from '@datatechsolutions/shared-domain/common'\n\n/** Maps a windsock AuthOrganization to the app-level Organization shape used by UI pages. */\nexport function mapAuthOrg(raw: AuthOrganization): Organization {\n  return {\n    id: raw.id,\n    name: raw.displayName ?? raw.name,\n    currency: 'BRL',\n    country: 'BR',\n  } as Organization\n}\n\n/**\n * Maps a windsock AdminUserSummary to the app-level ManagedUser shape.\n * Takes `normalizeRole` as a parameter so each consuming app can plug in\n * the role normalizer produced by its own `createPlatformRbac()` call —\n * we deliberately don't hardcode an app-specific role enum here.\n */\nexport function mapAdminUser(\n  row: AdminUserSummary,\n  normalizeRole: (input: unknown) => string,\n): ManagedUser {\n  return {\n    id: row.id,\n    email: row.email,\n    name: row.name ?? row.email,\n    role: normalizeRole(row.role) as UserRole,\n    active: row.status === 'active',\n  }\n}\n\n/** Maps an app-level UserRole to a windsock AuthOrganizationRole. */\nexport const ORG_ROLE_MAP: Record<string, 'owner' | 'admin' | 'member' | 'viewer'> = {\n  owner: 'owner',\n  admin: 'admin',\n  manager: 'admin',\n  analyst: 'member',\n  operator: 'member',\n  viewer: 'viewer',\n  finance: 'member',\n  sales: 'member',\n  support: 'member',\n  member: 'member',\n}\n\nexport function mapRoleToOrgRole(role: string): 'owner' | 'admin' | 'member' | 'viewer' {\n  return ORG_ROLE_MAP[role] ?? 'member'\n}\n"]}

package/dist/platform/index.mjs

@@ -0,0 +1,109 @@
+"use client";
+export { createPlatformRbac } from '../chunk-ZJPNP2YW.mjs';
+export { addOrganizationDomain, addOrganizationMember, createOrganization, createOrganizationInvitation, createPermission, createSecret, createUser, deleteOrganization, deletePermission, deleteUser, disableSecret, getSecret, getUserPermissions, listOrganizationDomains, listOrganizationInvitations, listOrganizationMembers, listOrganizations, listPermissions, listSecrets, listUsers, removeOrganizationMember, resetUserPassword, rotateSecret, setUserPermissions, setWindsockAdminClient, updateOrganization, updatePermission, updateUser, verifyOrganizationDomain } from '../chunk-UHHPBREK.mjs';
+import { Select, Button } from '../chunk-LLFU42KC.mjs';
+import { useTranslations } from '../chunk-7VJ7CMMT.mjs';
+import '../chunk-QWG2FMUN.mjs';
+import '../chunk-D2JF6C3E.mjs';
+import { jsxs, jsx } from 'react/jsx-runtime';
+import { createContext, useMemo, useContext } from 'react';
+import { useAuth } from '@datatechsolutions/windsock/client';
+
+function SessionSwitcher({
+  organizations,
+  users,
+  organizationId,
+  userEmail,
+  onOrganizationChange,
+  onUserChange
+}) {
+  const tSession = useTranslations("platform.session");
+  const tCommon = useTranslations("common");
+  return /* @__PURE__ */ jsxs("div", { className: "session-switcher", children: [
+    /* @__PURE__ */ jsx(
+      Select,
+      {
+        value: organizationId,
+        "aria-label": tSession("organization"),
+        onChange: (event) => {
+          onOrganizationChange(event.target.value);
+        },
+        options: organizations,
+        placeholder: tSession("organization")
+      }
+    ),
+    /* @__PURE__ */ jsx(
+      Select,
+      {
+        value: userEmail,
+        "aria-label": tSession("user"),
+        onChange: (event) => {
+          onUserChange(event.target.value);
+        },
+        options: users,
+        placeholder: tSession("user")
+      }
+    ),
+    /* @__PURE__ */ jsx(Button, { outline: true, onClick: () => globalThis.location.reload(), children: tCommon("refresh") })
+  ] });
+}
+var PlatformStateContext = createContext(null);
+function PlatformStateProvider({ children, normalizeRole }) {
+  const { user } = useAuth();
+  const state = useMemo(() => {
+    const organizationId = user?.organizationId ?? "";
+    const actor = user ? {
+      ...user,
+      role: normalizeRole(user.role),
+      organizationId
+    } : null;
+    return {
+      currentOrganizationId: organizationId,
+      actor
+    };
+  }, [user, normalizeRole]);
+  return /* @__PURE__ */ jsx(PlatformStateContext.Provider, { value: state, children });
+}
+function usePlatformState() {
+  const context = useContext(PlatformStateContext);
+  if (!context) throw new Error("usePlatformState must be used inside PlatformStateProvider");
+  return context;
+}
+
+// src/platform/windsock-mappers.ts
+function mapAuthOrg(raw) {
+  return {
+    id: raw.id,
+    name: raw.displayName ?? raw.name,
+    currency: "BRL",
+    country: "BR"
+  };
+}
+function mapAdminUser(row, normalizeRole) {
+  return {
+    id: row.id,
+    email: row.email,
+    name: row.name ?? row.email,
+    role: normalizeRole(row.role),
+    active: row.status === "active"
+  };
+}
+var ORG_ROLE_MAP = {
+  owner: "owner",
+  admin: "admin",
+  manager: "admin",
+  analyst: "member",
+  operator: "member",
+  viewer: "viewer",
+  finance: "member",
+  sales: "member",
+  support: "member",
+  member: "member"
+};
+function mapRoleToOrgRole(role) {
+  return ORG_ROLE_MAP[role] ?? "member";
+}
+
+export { ORG_ROLE_MAP, PlatformStateProvider, SessionSwitcher, mapAdminUser, mapAuthOrg, mapRoleToOrgRole, usePlatformState };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map