@fayz-ai/admin 0.18.0 → 0.19.1

package/dist/{chunk-LZRLWKJ2.js → chunk-UHHEPU4A.js}

@@ -1,8 +1,14 @@
+import { markWorkspaceSwitch, clearOrgSnapshot, useTenant, useTenantOptional, setAutoPick } from './chunk-NB6X5O5L.js';
+import { persistOrgId, getPersistedOrgId } from './chunk-5GWUM4SM.js';
 import { createClient } from '@supabase/supabase-js';
-import { getActiveUnitId, getActiveTenantId, setGlobalSupabaseClient } from '@fayz-ai/core';
+import { getActiveUnitId, getActiveTenantId, setGlobalSupabaseClient, useTranslation } from '@fayz-ai/core';
 import { createDedupedFetch } from '@fayz-ai/sdk';
+import * as React2 from 'react';
+import { cn, Checkbox, Button } from '@fayz-ai/ui';
+import { Check, Building2, ShieldCheck } from 'lucide-react';
+import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
+import { create } from 'zustand';
 
-// src/data/client.ts
 var _client = null;
 function requestUrl(input) {
   if (typeof input === "string") return input;
@@ -110,6 +116,14 @@ function buildTeamRows(people, members, profiles, currentUser) {
   return [...loginRows, ...personRows];
 }
 
+// src/directory/app-id.ts
+function resolveAppId() {
+  const env = import.meta.env;
+  const id = env?.VITE_APP_ID ?? env?.PUBLIC_APP_ID;
+  const trimmed = id?.trim();
+  return trimmed ? trimmed : null;
+}
+
 // src/org/adapters/supabase.ts
 var inflightRequests = /* @__PURE__ */ new Map();
 function dedup(key, fn) {
@@ -249,7 +263,7 @@ function buildPermissionProfiles(roles, permissions, rolePerms, overrides) {
     read: "read",
     create: "create",
     update: "edit",
-    manage: "edit",
+    manage: "manage",
     delete: "delete",
     configure: "edit",
     invite: "create"
@@ -306,16 +320,30 @@ function createSupabaseOrgAdapter(config) {
     },
     async listUserOrgs(userId) {
       return dedup(`listUserOrgs:${userId}`, async () => {
-        const { data, error } = await core().from("tenant_members").select("tenant_id, role, tenant:tenants(id, name, slug, logo_url)").eq("user_id", userId);
+        const { data, error } = await core().from("v_team_members").select("tenant_id, role, tenant:tenants(id, name, slug, logo_url)").eq("user_id", userId);
         if (error) throw error;
-        return (data ?? []).map((row) => ({
-          orgId: row["tenant_id"],
-          orgName: row["tenant"]?.["name"] ?? "",
-          orgSlug: row["tenant"]?.["slug"] ?? "",
-          orgLogoUrl: row["tenant"]?.["logo_url"] ?? void 0,
-          profileId: row["role"],
-          profileName: capitalize2(row["role"])
-        }));
+        let rows = data ?? [];
+        const appId = resolveAppId();
+        if (appId && rows.length > 1) {
+          const { data: scoped, error: scopeError } = await core().from("v_tenant_apps").select("tenant_id").eq("app_id", appId);
+          if (!scopeError && Array.isArray(scoped)) {
+            const runsThisApp = new Set(scoped.map((r) => r.tenant_id));
+            const kept = rows.filter((row) => runsThisApp.has(row["tenant_id"]));
+            if (kept.length > 0) rows = kept;
+          }
+        }
+        return rows.map((row) => {
+          const tenant = row["tenant"] ?? {};
+          const role = row["role"] ?? "";
+          return {
+            orgId: row["tenant_id"],
+            orgName: tenant["name"] ?? "",
+            orgSlug: tenant["slug"] ?? "",
+            orgLogoUrl: tenant["logo_url"] ?? void 0,
+            profileId: role,
+            profileName: capitalize2(role)
+          };
+        });
       });
     },
     async getOrg(orgId) {
@@ -354,7 +382,7 @@ function createSupabaseOrgAdapter(config) {
       return mapTenantToOrg(data);
     },
     async listMembers(orgId) {
-      const { data, error } = await core().from("tenant_members").select("*").eq("tenant_id", orgId);
+      const { data, error } = await core().from("v_team_members").select("*").eq("tenant_id", orgId);
       if (error) throw error;
       const userIds = (data ?? []).map((m) => m["user_id"]);
       const { data: profiles } = userIds.length > 0 ? await core().from("profiles").select("id, full_name, avatar_url, email").in("id", userIds) : { data: [] };
@@ -374,7 +402,7 @@ function createSupabaseOrgAdapter(config) {
       if (!personKinds || personKinds.length === 0) return [];
       const [peopleResult, membersResult] = await Promise.all([
         core().from("people").select("id, name, kind, email, avatar_url, is_active").eq("tenant_id", orgId).in("kind", personKinds).not("is_active", "is", false),
-        core().from("tenant_members").select("id, user_id, role, person_id, created_at").eq("tenant_id", orgId)
+        core().from("v_team_members").select("id, user_id, role, person_id, created_at").eq("tenant_id", orgId)
       ]);
       if (peopleResult.error) throw peopleResult.error;
       const people = peopleResult.data ?? [];
@@ -392,64 +420,80 @@ function createSupabaseOrgAdapter(config) {
       } : null;
       return buildTeamRows(people, members, profilesResult.data ?? [], currentUser);
     },
-    async updateMemberProfile(orgId, memberId, profileId) {
-      const { error } = await core().from("tenant_members").update({ role: profileId }).eq("id", memberId).eq("tenant_id", orgId);
+    // Verbs, not writes into the projection: v_team_members is a JOINed view
+    // and accepts neither UPDATE nor DELETE, and each RPC checks the permission
+    // in one place. `_orgId` stays in the signature for the adapter contract —
+    // the RPCs take the tenant from the session, not from a parameter.
+    async updateMemberProfile(_orgId, memberId, profileId) {
+      const { error } = await core().rpc("member_set_role", { p_membership: memberId, p_role: profileId });
       if (error) throw error;
     },
-    async removeMember(orgId, memberId) {
-      const { error } = await core().from("tenant_members").delete().eq("id", memberId).eq("tenant_id", orgId);
+    async removeMember(_orgId, memberId) {
+      const { error } = await core().rpc("member_remove", { p_membership: memberId });
       if (error) throw error;
     },
+    // #136 moved authorization into app.*, reachable through the v_authz_*
+    // views (security_invoker, so RLS still decides what a caller sees) and a
+    // small set of RPCs. The four public mirrors this used to read and write —
+    // permissions, role_permissions, tenant_roles, tenant_role_overrides — are
+    // dropped by @fayz-ai/db 003.
+    //
+    // The RPCs take the tenant from the SESSION, not a parameter, so orgId is
+    // asserted against the active tenant rather than passed down: writing to
+    // one org while another is active was never possible and should fail
+    // loudly rather than silently touch the wrong one.
     async listProfiles(orgId) {
-      const [permsResult, rolePermsResult, overridesResult, customResult] = await Promise.all([
-        core().from("permissions").select("id, category"),
-        core().from("role_permissions").select("role, permission_id"),
-        core().from("tenant_role_overrides").select("role, permission_id, granted").eq("tenant_id", orgId),
-        // Custom roles the tenant created by duplicating a system role. Tolerate a
-        // missing table (pre-seed) — just show the system roles in that case.
-        core().from("tenant_roles").select("key, name, description").eq("tenant_id", orgId)
+      const [permsResult, rolesResult, grantsResult] = await Promise.all([
+        core().from("v_authz_permissions").select("key, plugin"),
+        core().from("v_authz_roles").select("id, key, name, description, is_system").eq("tenant_id", orgId),
+        core().from("v_authz_role_permissions").select("role_id, permission").eq("tenant_id", orgId)
       ]);
       if (permsResult.error) throw permsResult.error;
-      if (rolePermsResult.error) throw rolePermsResult.error;
-      if (overridesResult.error) throw overridesResult.error;
-      const systemRoles = roles.map((r) => ({ ...r, isSystem: true }));
-      const customRoles = customResult.error ? [] : (customResult.data ?? []).map((r) => ({
-        id: r.key,
-        name: r.name,
-        description: r.description ?? void 0,
-        isSystem: false
-      }));
+      if (rolesResult.error) throw rolesResult.error;
+      if (grantsResult.error) throw grantsResult.error;
+      const dbRoles = rolesResult.data ?? [];
+      const keyOf = new Map(dbRoles.map((r) => [r.id, r.key]));
+      const declared = roles.map((r) => ({ ...r, isSystem: true }));
+      const declaredIds = new Set(declared.map((r) => r.id));
+      const fromDb = dbRoles.filter((r) => !declaredIds.has(r.key)).map((r) => ({ id: r.key, name: r.name, description: r.description ?? void 0, isSystem: r.is_system }));
+      const overrides = (grantsResult.data ?? []).flatMap((g) => {
+        const role = keyOf.get(g.role_id);
+        return role ? [{ role, permission_id: g.permission, granted: true }] : [];
+      });
       return buildPermissionProfiles(
-        [...systemRoles, ...customRoles],
-        permsResult.data ?? [],
-        rolePermsResult.data ?? [],
-        overridesResult.data ?? []
+        [...declared, ...fromDb],
+        (permsResult.data ?? []).map((p) => ({ id: p.key, category: p.plugin })),
+        [],
+        overrides
       );
     },
     async createProfile(orgId, profile) {
-      const existing = new Set(
-        ((await core().from("tenant_roles").select("key").eq("tenant_id", orgId)).data ?? []).map((r) => r.key)
-      );
+      const existingRoles = await core().from("v_authz_roles").select("key, is_system").eq("tenant_id", orgId);
+      if (existingRoles.error) throw existingRoles.error;
+      const rows = existingRoles.data ?? [];
+      const existing = new Set(rows.map((r) => r.key));
       let key = slugifyRole(profile.name);
       if (existing.has(key) || roles.some((r) => r.id === key)) {
         let n = 2;
         while (existing.has(`${key}-${n}`) || roles.some((r) => r.id === `${key}-${n}`)) n++;
         key = `${key}-${n}`;
       }
-      const insertRole = await core().from("tenant_roles").insert({ tenant_id: orgId, key, name: profile.name, description: profile.description ?? null });
-      if (insertRole.error) throw insertRole.error;
-      const overrides = Object.entries(profile.grants ?? {}).flatMap(
-        ([category, actions]) => actions.map((action) => ({
-          tenant_id: orgId,
-          role: key,
-          permission_id: `${category}.${DB_ACTION[action] ?? action}`,
-          granted: true
-        }))
+      const seed = rows.find((r) => r.is_system && r.key === "viewer")?.key ?? rows.find((r) => r.is_system)?.key ?? rows[0]?.key;
+      if (!seed) throw new Error("createProfile: the tenant has no role to clone from");
+      const created = await core().rpc("role_create_from_template", {
+        p_role_key: key,
+        p_name: profile.name,
+        p_template_role: seed,
+        p_template: null,
+        p_description: profile.description ?? null
+      });
+      if (created.error) throw created.error;
+      const roleId = created.data;
+      const keys = Object.entries(profile.grants ?? {}).flatMap(
+        ([category, actions]) => actions.map((action) => `${category}.${DB_ACTION[action] ?? action}`)
       );
-      if (overrides.length > 0) {
-        const { error } = await core().from("tenant_role_overrides").insert(overrides);
-        if (error) throw error;
-      }
+      const set = await core().rpc("role_set_permissions", { p_role_id: roleId, p_keys: keys });
+      if (set.error) throw set.error;
       const profiles = await this.listProfiles(orgId);
       return profiles.find((p) => p.id === key) ?? {
         id: key,
@@ -461,27 +505,26 @@ function createSupabaseOrgAdapter(config) {
       };
     },
     async updateProfile(orgId, profileId, data) {
+      const found = await core().from("v_authz_roles").select("id, name, description, is_system").eq("tenant_id", orgId).eq("key", profileId).maybeSingle();
+      if (found.error) throw found.error;
+      if (!found.data) throw new Error(`Profile not found: ${profileId}`);
+      const role = found.data;
       if (data.name !== void 0 || data.description !== void 0) {
-        const patch = {};
-        if (data.name !== void 0) patch.name = data.name;
-        if (data.description !== void 0) patch.description = data.description ?? null;
-        const { error } = await core().from("tenant_roles").update(patch).eq("tenant_id", orgId).eq("key", profileId);
+        const { error } = await core().rpc("role_rename", {
+          p_role_id: role.id,
+          p_name: data.name ?? role.name,
+          // Explicit, not coalesced: role_rename treats NULL as "clear it", so
+          // an untouched description has to be sent back as it was.
+          p_description: data.description !== void 0 ? data.description ?? null : role.description
+        });
         if (error) throw error;
       }
       if (data.grants) {
-        await core().from("tenant_role_overrides").delete().eq("tenant_id", orgId).eq("role", profileId);
-        const overrides = Object.entries(data.grants).flatMap(
-          ([category, actions]) => actions.map((action) => ({
-            tenant_id: orgId,
-            role: profileId,
-            permission_id: `${category}.${DB_ACTION[action] ?? action}`,
-            granted: true
-          }))
+        const keys = Object.entries(data.grants).flatMap(
+          ([category, actions]) => actions.map((action) => `${category}.${DB_ACTION[action] ?? action}`)
         );
-        if (overrides.length > 0) {
-          const { error } = await core().from("tenant_role_overrides").insert(overrides);
-          if (error) throw error;
-        }
+        const { error } = await core().rpc("role_set_permissions", { p_role_id: role.id, p_keys: keys });
+        if (error) throw error;
       }
       const profiles = await this.listProfiles(orgId);
       const updated = profiles.find((p) => p.id === profileId);
@@ -489,11 +532,12 @@ function createSupabaseOrgAdapter(config) {
       return updated;
     },
     async deleteProfile(orgId, profileId) {
-      const found = await core().from("tenant_roles").select("key").eq("tenant_id", orgId).eq("key", profileId).maybeSingle();
+      const found = await core().from("v_authz_roles").select("id, is_system").eq("tenant_id", orgId).eq("key", profileId).maybeSingle();
       if (found.error) throw found.error;
       if (!found.data) throw new Error("System roles cannot be deleted.");
-      await core().from("tenant_role_overrides").delete().eq("tenant_id", orgId).eq("role", profileId);
-      const { error } = await core().from("tenant_roles").delete().eq("tenant_id", orgId).eq("key", profileId);
+      const role = found.data;
+      if (role.is_system) throw new Error("System roles cannot be deleted.");
+      const { error } = await core().rpc("role_delete", { p_role_id: role.id });
       if (error) throw error;
     },
     async listInvites(orgId) {
@@ -552,23 +596,29 @@ function createSupabaseOrgAdapter(config) {
       return mapInviteRow(row);
     },
     async listLocations(orgId) {
-      const { data, error } = await core().from("locations").select("*").eq("tenant_id", orgId).order("is_headquarters", { ascending: false }).order("name");
+      const { data, error } = await core().from("v_units").select("*").eq("tenant_id", orgId).order("is_headquarters", { ascending: false }).order("name");
       if (error) throw error;
       return (data ?? []).map(mapLocationRow);
     },
     async createLocation(orgId, input) {
-      const { data, error } = await core().from("locations").insert({
-        tenant_id: orgId,
-        name: input.name,
-        address: input.address ?? null,
-        city: input.city ?? null,
-        state: input.state ?? null,
-        country: input.country ?? "BR",
-        phone: input.phone ?? null,
-        is_headquarters: input.isHeadquarters ?? false
-      }).select().single();
+      const { data, error } = await core().rpc("unit_create", {
+        p_name: input.name,
+        p_kind: input.isHeadquarters ? "hq" : "branch",
+        p_parent_unit: null,
+        // app.units keeps a unit's contact details in metadata; v_units reads
+        // them back out under the flat names this screen already uses.
+        p_metadata: {
+          address: input.address ?? null,
+          city: input.city ?? null,
+          state: input.state ?? null,
+          country: input.country ?? "BR",
+          phone: input.phone ?? null
+        }
+      });
       if (error) throw error;
-      return mapLocationRow(data);
+      const created = await core().from("v_units").select("*").eq("id", data).single();
+      if (created.error) throw created.error;
+      return mapLocationRow(created.data);
     }
   };
 }
@@ -842,7 +892,248 @@ function createMockOrgAdapter(defaultProfiles) {
     }
   };
 }
+function WorkspaceChooser({ memberships, suggestedId, onCancel }) {
+  const t = useTranslation();
+  const tr = (key, fallback) => {
+    const v = t(key);
+    return !v || v === key ? fallback : v;
+  };
+  const { switchOrg } = useTenant();
+  const [selected, setSelected] = React2.useState(
+    suggestedId ?? memberships[0]?.orgId ?? null
+  );
+  const [remember, setRemember] = React2.useState(false);
+  const [entering, setEntering] = React2.useState(false);
+  const enter = async (orgId) => {
+    if (entering) return;
+    setEntering(true);
+    setAutoPick(remember);
+    try {
+      await switchOrg(orgId);
+    } finally {
+      setEntering(false);
+    }
+  };
+  return /* @__PURE__ */ jsx("div", { className: "flex min-h-screen items-center justify-center bg-background p-4", children: /* @__PURE__ */ jsxs("div", { className: "w-full max-w-md", children: [
+    /* @__PURE__ */ jsxs("div", { className: "mb-6 text-center", children: [
+      /* @__PURE__ */ jsx("h1", { className: "text-xl font-semibold text-foreground", children: tr("organization.chooseWorkspace", "Escolha uma \xE1rea de trabalho") }),
+      /* @__PURE__ */ jsx("p", { className: "mt-1 text-sm text-muted-foreground", children: tr(
+        "organization.chooseWorkspaceDescription",
+        "Voc\xEA tem acesso a mais de uma. Selecione em qual deseja entrar."
+      ) })
+    ] }),
+    /* @__PURE__ */ jsx(
+      "div",
+      {
+        role: "radiogroup",
+        "aria-label": tr("organization.workspaces", "Workspaces"),
+        className: "space-y-2",
+        children: memberships.map((m) => {
+          const isSelected = m.orgId === selected;
+          const isSuggested = m.orgId === suggestedId;
+          return /* @__PURE__ */ jsxs(
+            "button",
+            {
+              type: "button",
+              role: "radio",
+              "aria-checked": isSelected,
+              disabled: entering,
+              onClick: () => setSelected(m.orgId),
+              onDoubleClick: () => void enter(m.orgId),
+              className: cn(
+                "flex w-full items-center gap-3 rounded-lg border p-3 text-left transition-colors",
+                "disabled:opacity-60",
+                isSelected ? "border-primary bg-primary/5" : "border-border hover:border-primary/50 hover:bg-muted/50"
+              ),
+              children: [
+                /* @__PURE__ */ jsx(WorkspaceMark, { name: m.orgName, logoUrl: m.orgLogoUrl }),
+                /* @__PURE__ */ jsxs("span", { className: "min-w-0 flex-1", children: [
+                  /* @__PURE__ */ jsx("span", { className: "block truncate text-sm font-medium text-foreground", children: m.orgName || m.orgSlug || m.orgId }),
+                  /* @__PURE__ */ jsxs("span", { className: "block truncate text-xs text-muted-foreground", children: [
+                    m.profileName,
+                    isSuggested && ` \xB7 ${tr("organization.lastUsed", "\xFAltimo acesso")}`
+                  ] })
+                ] }),
+                isSelected && /* @__PURE__ */ jsx(Check, { className: "h-4 w-4 shrink-0 text-primary" })
+              ]
+            },
+            m.orgId
+          );
+        })
+      }
+    ),
+    /* @__PURE__ */ jsxs("div", { className: "mt-5 flex items-center gap-2.5 text-sm text-muted-foreground", children: [
+      /* @__PURE__ */ jsx(
+        Checkbox,
+        {
+          checked: remember,
+          onChange: setRemember,
+          disabled: entering,
+          "aria-label": tr("organization.rememberChoice", "N\xE3o perguntar novamente neste dispositivo")
+        }
+      ),
+      /* @__PURE__ */ jsx("span", { className: "cursor-pointer select-none", onClick: () => !entering && setRemember(!remember), children: tr("organization.rememberChoice", "N\xE3o perguntar novamente neste dispositivo") })
+    ] }),
+    /* @__PURE__ */ jsxs("div", { className: "mt-5 flex gap-2", children: [
+      onCancel && /* @__PURE__ */ jsx(Button, { variant: "outline", className: "flex-1", onClick: onCancel, disabled: entering, children: tr("common.cancel", "Cancelar") }),
+      /* @__PURE__ */ jsx(
+        Button,
+        {
+          className: "flex-1",
+          disabled: !selected || entering,
+          onClick: () => selected && void enter(selected),
+          children: entering ? tr("common.loading", "Entrando\u2026") : tr("organization.enter", "Entrar")
+        }
+      )
+    ] }),
+    /* @__PURE__ */ jsx("p", { className: "mt-4 text-center text-xs text-muted-foreground", children: tr(
+      "organization.switchLaterHint",
+      "Voc\xEA pode trocar a qualquer momento pelo seletor no topo da tela."
+    ) })
+  ] }) });
+}
+function WorkspaceMark({ name, logoUrl }) {
+  if (logoUrl) {
+    return /* @__PURE__ */ jsx("img", { src: logoUrl, alt: "", className: "h-9 w-9 shrink-0 rounded-lg object-cover" });
+  }
+  const initials = name.split(/\s+/).filter(Boolean).slice(0, 2).map((w) => w[0]).join("").toUpperCase();
+  return /* @__PURE__ */ jsx("span", { className: "flex h-9 w-9 shrink-0 items-center justify-center rounded-lg bg-primary/10 text-xs font-semibold text-primary", children: initials || /* @__PURE__ */ jsx(Building2, { className: "h-4 w-4" }) });
+}
+function WorkspaceChooserGate({ fallback, children }) {
+  const tenant = useTenantOptional();
+  if (!tenant) return /* @__PURE__ */ jsx(Fragment, { children });
+  const { org, userOrgs, orgsKnown, settled } = tenant;
+  if (org) return /* @__PURE__ */ jsx(Fragment, { children });
+  if (!settled) return /* @__PURE__ */ jsx(Fragment, { children: fallback ?? null });
+  if (!orgsKnown || userOrgs.length <= 1) return /* @__PURE__ */ jsx(Fragment, { children });
+  return /* @__PURE__ */ jsx(
+    WorkspaceChooser,
+    {
+      memberships: userOrgs,
+      suggestedId: userOrgs.some((m) => m.orgId === getPersistedOrgId()) ? getPersistedOrgId() : null
+    }
+  );
+}
+var useWorkspaceSwitchingStore = create((set) => ({
+  target: null,
+  begin: (target) => {
+    markWorkspaceSwitch(target.orgId);
+    persistOrgId(target.orgId);
+    clearOrgSnapshot();
+    set({ target });
+  },
+  cancel: () => set({ target: null })
+}));
+var STEP_MS = 850;
+function WorkspaceSwitching({ orgName, orgLogoUrl, onDone }) {
+  const t = useTranslation();
+  const tr = (key, fallback) => {
+    const v = t(key);
+    return !v || v === key ? fallback : v;
+  };
+  const steps = React2.useMemo(
+    () => [
+      tr("organization.switching.step1", "Alterando organiza\xE7\xE3o"),
+      tr("organization.switching.step2", "Garantindo seguran\xE7a dos dados"),
+      tr("organization.switching.step3", "Carregando suas informa\xE7\xF5es")
+    ],
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+    []
+  );
+  const [step, setStep] = React2.useState(0);
+  const doneRef = React2.useRef(onDone);
+  doneRef.current = onDone;
+  React2.useEffect(() => {
+    const id = window.setInterval(() => {
+      setStep((s) => {
+        if (s < steps.length - 1) return s + 1;
+        window.clearInterval(id);
+        window.setTimeout(() => doneRef.current(), STEP_MS);
+        return s;
+      });
+    }, STEP_MS);
+    return () => window.clearInterval(id);
+  }, [steps.length]);
+  return /* @__PURE__ */ jsx(
+    "div",
+    {
+      role: "status",
+      "aria-live": "polite",
+      "aria-label": `${steps[step]} \u2014 ${orgName}`,
+      className: "saas-switch-veil fixed inset-0 z-[100] flex items-center justify-center bg-background px-6",
+      children: /* @__PURE__ */ jsxs("div", { className: "saas-switch-rise flex w-full max-w-sm flex-col items-center", children: [
+        /* @__PURE__ */ jsxs("div", { className: "relative flex h-20 w-20 items-center justify-center", children: [
+          /* @__PURE__ */ jsx(
+            "span",
+            {
+              "aria-hidden": true,
+              className: "saas-switch-pulse absolute inset-0 rounded-2xl bg-primary/25"
+            }
+          ),
+          /* @__PURE__ */ jsx(WorkspaceMark2, { name: orgName, logoUrl: orgLogoUrl })
+        ] }),
+        /* @__PURE__ */ jsx("p", { className: "mt-7 text-xs font-medium uppercase tracking-[0.14em] text-muted-foreground", children: tr("organization.switching.eyebrow", "Entrando em") }),
+        /* @__PURE__ */ jsx("h1", { className: "mt-1.5 text-pretty text-center text-3xl font-semibold leading-tight tracking-tight text-foreground sm:text-4xl", children: orgName }),
+        /* @__PURE__ */ jsx("ul", { className: "mt-9 flex w-full min-h-[7.5rem] flex-col items-start sm:min-h-[8.5rem]", children: steps.slice(0, step + 1).map((label, i) => {
+          const done = i < step;
+          const isSecurity = i === 1;
+          return /* @__PURE__ */ jsxs("li", { className: "saas-switch-step flex w-full gap-3", children: [
+            /* @__PURE__ */ jsxs("span", { className: "flex w-6 shrink-0 flex-col items-center", children: [
+              i > 0 && // Tinted, not `bg-border`: on a light surface the border
+              // token is invisible at 1px, and this thread is the part
+              // that makes three rows read as one advancing sequence
+              // rather than three unrelated lines.
+              /* @__PURE__ */ jsx("span", { "aria-hidden": true, className: "saas-switch-link h-5 w-0.5 rounded-full bg-primary/30" }),
+              /* @__PURE__ */ jsx("span", { className: "flex h-7 w-6 items-center justify-center", children: done ? /* @__PURE__ */ jsx(Check, { className: "h-5 w-5 text-primary", strokeWidth: 2.5 }) : isSecurity ? /* @__PURE__ */ jsx(ShieldCheck, { className: "saas-switch-dot h-5 w-5 text-primary", strokeWidth: 2 }) : /* @__PURE__ */ jsx("span", { className: "saas-switch-dot h-2 w-2 rounded-full bg-primary" }) })
+            ] }),
+            /* @__PURE__ */ jsx(
+              "span",
+              {
+                className: cn(
+                  "flex h-7 items-center text-base transition-colors duration-300 sm:text-lg",
+                  // Only ever two states now — done, or happening. Nothing is
+                  // on screen before its turn, so there is no "ahead" tone.
+                  done ? "text-muted-foreground" : "font-medium text-foreground",
+                  // Push the label down past the connector so it stays level
+                  // with its own marker rather than with the thread above it.
+                  i > 0 && "mt-5"
+                ),
+                children: label
+              }
+            )
+          ] }, label);
+        }) })
+      ] })
+    }
+  );
+}
+function WorkspaceMark2({ name, logoUrl }) {
+  if (logoUrl) {
+    return /* @__PURE__ */ jsx(
+      "img",
+      {
+        src: logoUrl,
+        alt: "",
+        className: "relative h-16 w-16 rounded-2xl object-cover shadow-sm"
+      }
+    );
+  }
+  const initials = name.split(/\s+/).filter(Boolean).slice(0, 2).map((w) => w[0]).join("").toUpperCase();
+  return /* @__PURE__ */ jsx("span", { className: "relative flex h-16 w-16 items-center justify-center rounded-2xl bg-primary text-xl font-semibold text-primary-foreground shadow-sm", children: initials || /* @__PURE__ */ jsx(Building2, { className: "h-7 w-7" }) });
+}
+function WorkspaceSwitchingHost() {
+  const target = useWorkspaceSwitchingStore((s) => s.target);
+  if (!target) return null;
+  return /* @__PURE__ */ jsx(
+    WorkspaceSwitching,
+    {
+      orgName: target.orgName,
+      orgLogoUrl: target.orgLogoUrl,
+      onDone: () => window.location.reload()
+    }
+  );
+}
 
-export { createFayzSupabaseClient, createMockOrgAdapter, createSupabaseOrgAdapter, getFayzSupabaseClient, getFayzSupabaseClientOptional };
-//# sourceMappingURL=chunk-LZRLWKJ2.js.map
-//# sourceMappingURL=chunk-LZRLWKJ2.js.map
+export { WorkspaceChooser, WorkspaceChooserGate, WorkspaceSwitching, WorkspaceSwitchingHost, createFayzSupabaseClient, createMockOrgAdapter, createSupabaseOrgAdapter, getFayzSupabaseClient, getFayzSupabaseClientOptional, resolveAppId, useWorkspaceSwitchingStore };
+//# sourceMappingURL=chunk-UHHEPU4A.js.map
+//# sourceMappingURL=chunk-UHHEPU4A.js.map