@fayz-ai/admin 0.62.0 → 0.63.0

package/dist/PermissionProfilesTab-3ZPRCHMZ.js

@@ -0,0 +1,548 @@
+import { useAgentSurface, askAI, DeleteConfirmDialog } from './chunk-6QFOE3UD.js';
+import { PageActions } from './chunk-PQ47MLTH.js';
+import './chunk-S56FQKPL.js';
+import { useTranslation } from './chunk-YUHCC7JY.js';
+import './chunk-ALCSIN3Z.js';
+import './chunk-SGAFPNMA.js';
+import './chunk-KLO7DKXX.js';
+import './chunk-TL42NKTH.js';
+import { useOrgAdapterOptional } from './chunk-5D5QLMOQ.js';
+import { usePermissionsStore } from './chunk-UQ2NTFQC.js';
+import './chunk-KJELMULA.js';
+import './chunk-JRZJBMOY.js';
+import { useOrganizationStore } from './chunk-YKPPCV2Z.js';
+import './chunk-QD7BMUDF.js';
+import { errorMessage, tl } from '@fayz-ai/core';
+import * as React from 'react';
+import { Plus, WandSparkles, Shield, Eye, Copy, Pencil, Trash2, Search, ChevronRight, ChevronDown } from 'lucide-react';
+import { PageHeaderActions, Card, CardContent, Skeleton, CardTitle, Badge, CardDescription, RowActions, useSaveBar, PageHeader, Input, Button, Checkbox } from '@fayz-ai/ui';
+import { jsx, jsxs } from 'react/jsx-runtime';
+
+var V1_CATEGORY_BY_PREFIX = [
+  [/^(agenda|appointments|schedules)(\.|$)/, () => tl("Schedule", "Agenda")],
+  [/^(people|registry\.customers|clinical)(\.|$)/, () => tl("Clients", "Clientes")],
+  [/^(crm|sales)(\.|$)/, () => "CRM"],
+  [/^(catalog|services|registry|units|custom_forms)(\.|$)/, () => tl("Registries", "Cadastros")],
+  [/^financial(\.|$)/, () => tl("Financial", "Financeiro")],
+  [/^(inventory|production)(\.|$)/, () => tl("Stock", "Estoque")],
+  [/^fiscal(\.|$)/, () => tl("Invoices", "Notas Fiscais")],
+  [/^(orders|tables|menu|reservations|kds|pos|shop)(\.|$)/, () => tl("Restaurant & sales", "Restaurante e vendas")],
+  [/^(marketing|conversations|automations|notifications|reputation|blog|sites)(\.|$)/, () => tl("Communication", "Comunica\xE7\xE3o")],
+  [/^(reports|dashboard)(\.|$)/, () => tl("Reports", "Relat\xF3rios")],
+  [/^(workforce|tasks)(\.|$)/, () => tl("Team & tasks", "Equipe e tarefas")],
+  [/^(settings|audit|admin|scribe)(\.|$)/, () => tl("Settings", "Configura\xE7\xF5es")]
+];
+function v1PermissionGroup(feature) {
+  for (const [re, label] of V1_CATEGORY_BY_PREFIX) if (re.test(feature.id)) return label();
+  return feature.group ?? tl("Other", "Outros");
+}
+function coreFeatures() {
+  return [
+    { id: "people", label: tl("People and clients", "Pessoas e clientes") },
+    { id: "catalog", label: tl("Products and catalog", "Produtos e cat\xE1logo") },
+    { id: "services", label: tl("Services, rooms and groups", "Servi\xE7os, locais e grupos") },
+    { id: "audit", label: tl("Action log", "Log de a\xE7\xF5es"), actions: ["read"] }
+  ];
+}
+function specialActions() {
+  return [
+    { feature: "financial", action: "amend", label: tl("Edit a paid entry", "Editar lan\xE7amento j\xE1 pago"), enforced: true },
+    { feature: "financial.discount", action: "approve", label: tl("Approve discounts", "Aprovar desconto"), enforced: true },
+    { feature: "financial", action: "close_period", label: tl("Close and reopen a period", "Fechar e reabrir data"), enforced: true },
+    { feature: "workforce", action: "adjust_time", label: tl("Adjust clock-ins", "Ajustar batidas de ponto"), enforced: true },
+    { feature: "workforce", action: "close_period", label: tl("Close the time-clock period", "Fechar o per\xEDodo do ponto"), enforced: true },
+    { feature: "orders", action: "discount_without_pin", label: tl("Discount without a PIN", "Dar desconto sem senha"), enforced: false },
+    { feature: "orders", action: "cancel_without_pin", label: tl("Cancel without a PIN", "Cancelar sem senha"), enforced: false },
+    { feature: "orders", action: "reopen_bill", label: tl("Reopen a closed bill", "Reabrir conta fechada"), enforced: false },
+    { feature: "orders", action: "delete_paid_item", label: tl("Remove a paid item", "Excluir item j\xE1 pago"), enforced: false },
+    { feature: "sales", action: "approve_quote", label: tl("Approve a quote", "Aprovar or\xE7amento"), enforced: false },
+    { feature: "financial", action: "edit_payment_history", label: tl("Edit payment history", "Editar hist\xF3rico de pagamento"), enforced: false },
+    { feature: "financial", action: "manage_bank_integration", label: tl("Manage bank integration", "Gerenciar integra\xE7\xE3o banc\xE1ria"), enforced: false },
+    { feature: "financial", action: "unmatch_reconciled", label: tl("Undo a reconciliation", "Desfazer concilia\xE7\xE3o"), enforced: false },
+    { feature: "financial", action: "force_reconcile", label: tl("Force a reconciliation", "For\xE7ar concilia\xE7\xE3o"), enforced: false },
+    { feature: "people", action: "export_sensitive", label: tl("Export sensitive data", "Exportar dados sens\xEDveis"), enforced: false },
+    { feature: "settings", action: "bulk_import", label: tl("Bulk import", "Importar em massa"), enforced: false },
+    { feature: "catalog", action: "view_cost", label: tl("See cost prices", "Ver pre\xE7o de custo"), enforced: false },
+    { feature: "catalog", action: "edit_fiscal", label: tl("Edit fiscal data", "Editar dados fiscais"), enforced: false },
+    { feature: "inventory", action: "view_margin", label: tl("See recipe margins", "Ver margem da ficha t\xE9cnica"), enforced: false },
+    { feature: "inventory", action: "approve_loss", label: tl("Approve stock losses", "Aprovar perda de estoque"), enforced: false },
+    { feature: "fiscal", action: "delete_import", label: tl("Delete an imported invoice", "Excluir nota importada"), enforced: false },
+    { feature: "conversations", action: "bulk_send", label: tl("Send bulk messages", "Disparar mensagens em massa"), enforced: false },
+    { feature: "tasks", action: "view_all", label: tl("See everyone's tasks", "Ver tarefas de todos"), enforced: false },
+    { feature: "members", action: "qr_access_issue", label: tl("Issue access QR codes", "Gerar QR Code de acesso"), enforced: false }
+  ];
+}
+var ACTIONS = ["read", "create", "edit", "delete"];
+var ACTION_COLORS = {
+  read: "primary",
+  create: "success",
+  edit: "warning",
+  delete: "destructive"
+};
+var SYSTEM_GRANT = {
+  manage_team: ["members", "manage"],
+  manage_permissions: ["roles", "manage"],
+  manage_settings: ["settings", "manage"],
+  manage_billing: ["billing", "manage"]
+};
+var SYSTEM_PERMISSIONS = [
+  { id: "manage_team", key: "organization.permissions.manageTeam" },
+  { id: "manage_billing", key: "organization.permissions.manageBilling" },
+  { id: "manage_settings", key: "organization.permissions.manageSettings" },
+  { id: "manage_permissions", key: "organization.permissions.managePermissions" }
+];
+function PermissionMatrixEditor({ features, profile, onSave, onCancel, saving, isNew, parentLabel }) {
+  const { t } = useTranslation();
+  const [name, setName] = React.useState(profile?.name ?? "");
+  const [description, setDescription] = React.useState(profile?.description ?? "");
+  const [systemPerms, setSystemPerms] = React.useState(profile?.systemPermissions ?? []);
+  const [grants, setGrants] = React.useState(profile?.grants ?? {});
+  const [collapsed, setCollapsed] = React.useState(/* @__PURE__ */ new Set());
+  const [search, setSearch] = React.useState("");
+  const initial = React.useRef({
+    name: profile?.name ?? "",
+    description: profile?.description ?? "",
+    systemPerms: JSON.stringify(profile?.systemPermissions ?? []),
+    grants: JSON.stringify(profile?.grants ?? {})
+  });
+  const dirty = isNew ? name.trim() !== "" : name !== initial.current.name || description !== initial.current.description || JSON.stringify(systemPerms) !== initial.current.systemPerms || JSON.stringify(grants) !== initial.current.grants;
+  const toggleSystemPerm = (perm) => {
+    setSystemPerms(
+      (prev) => prev.includes(perm) ? prev.filter((p) => p !== perm) : [...prev, perm]
+    );
+  };
+  const toggleGrant = (featureId, action) => {
+    setGrants((prev) => {
+      const current = prev[featureId] ?? [];
+      const next = current.includes(action) ? current.filter((a) => a !== action) : [...current, action];
+      return { ...prev, [featureId]: next };
+    });
+  };
+  const toggleGroup = (group) => {
+    setCollapsed((prev) => {
+      const next = new Set(prev);
+      next.has(group) ? next.delete(group) : next.add(group);
+      return next;
+    });
+  };
+  const handleSave = () => {
+    if (!name.trim()) return;
+    const withSystem = { ...grants };
+    for (const [perm, [feature, action]] of Object.entries(SYSTEM_GRANT)) {
+      const current = (withSystem[feature] ?? []).filter((a) => a !== action);
+      withSystem[feature] = systemPerms.includes(perm) ? [...current, action] : current;
+    }
+    onSave({ name: name.trim(), description: description.trim() || void 0, systemPermissions: systemPerms, grants: withSystem });
+  };
+  const specials = React.useMemo(() => {
+    const q = search.toLowerCase();
+    return specialActions().filter((sa) => !q || sa.label.toLowerCase().includes(q));
+  }, [search]);
+  useSaveBar({
+    dirty,
+    saving,
+    onSave: handleSave,
+    onDiscard: onCancel,
+    saveLabel: isNew ? t("organization.permissions.createProfile") : t("organization.permissions.updateProfile")
+  });
+  const groups = React.useMemo(() => {
+    const filtered = search ? features.filter((f) => f.label.toLowerCase().includes(search.toLowerCase())) : features;
+    const map = /* @__PURE__ */ new Map();
+    for (const f of filtered) {
+      const group = v1PermissionGroup(f);
+      if (!map.has(group)) map.set(group, []);
+      map.get(group).push(f);
+    }
+    return new Map([...map.entries()].sort(([a], [b]) => a.localeCompare(b, "pt-BR")));
+  }, [features, search]);
+  return /* @__PURE__ */ jsxs("div", { className: "space-y-6", children: [
+    /* @__PURE__ */ jsx(
+      PageHeader,
+      {
+        title: name.trim() || t("organization.permissions.createCustom"),
+        parentLabel: parentLabel ?? t("organization.permissions.title"),
+        onBack: onCancel
+      }
+    ),
+    /* @__PURE__ */ jsxs("div", { className: "grid gap-4 sm:grid-cols-2", children: [
+      /* @__PURE__ */ jsxs("div", { children: [
+        /* @__PURE__ */ jsx("label", { className: "text-sm font-medium", children: t("organization.permissions.profileName") }),
+        /* @__PURE__ */ jsx(Input, { value: name, onChange: (e) => setName(e.target.value), placeholder: t("organization.permissions.profileNamePlaceholder"), className: "mt-1" })
+      ] }),
+      /* @__PURE__ */ jsxs("div", { children: [
+        /* @__PURE__ */ jsx("label", { className: "text-sm font-medium", children: t("organization.permissions.description") }),
+        /* @__PURE__ */ jsx(Input, { value: description, onChange: (e) => setDescription(e.target.value), placeholder: t("organization.permissions.descriptionPlaceholder"), className: "mt-1" })
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxs(Card, { className: "overflow-hidden", children: [
+      features.length > 8 && /* @__PURE__ */ jsx("div", { className: "border-b border-border/40 px-3 py-2", children: /* @__PURE__ */ jsxs("div", { className: "relative", children: [
+        /* @__PURE__ */ jsx(Search, { className: "absolute left-2.5 top-1/2 h-3.5 w-3.5 -translate-y-1/2 text-muted-foreground" }),
+        /* @__PURE__ */ jsx(
+          Input,
+          {
+            value: search,
+            onChange: (e) => setSearch(e.target.value),
+            placeholder: t("organization.permissions.searchFeatures"),
+            className: "h-8 pl-8 text-xs"
+          }
+        )
+      ] }) }),
+      /* @__PURE__ */ jsx("div", { className: "overflow-x-auto", children: /* @__PURE__ */ jsxs("table", { className: "w-full", children: [
+        /* @__PURE__ */ jsx("thead", { children: /* @__PURE__ */ jsxs("tr", { className: "border-b bg-muted/50", children: [
+          /* @__PURE__ */ jsx("th", { className: "text-left p-3 text-sm font-medium text-muted-foreground", children: t("common.feature") }),
+          ACTIONS.map((action) => /* @__PURE__ */ jsx("th", { className: "p-3 text-center text-sm font-medium text-muted-foreground capitalize w-20", children: t(`organization.permissions.action.${action}`) === `organization.permissions.action.${action}` ? action : t(`organization.permissions.action.${action}`) }, action))
+        ] }) }),
+        /* @__PURE__ */ jsxs("tbody", { className: "divide-y", children: [
+          /* @__PURE__ */ jsx("tr", { children: /* @__PURE__ */ jsx("td", { colSpan: 5, className: "p-2 px-3", children: /* @__PURE__ */ jsxs(
+            Button,
+            {
+              variant: "bare",
+              size: "bare",
+              onClick: () => toggleGroup("__system"),
+              className: "flex items-center gap-1.5 text-xs font-normal",
+              children: [
+                collapsed.has("__system") ? /* @__PURE__ */ jsx(ChevronRight, { className: "h-3 w-3 text-muted-foreground" }) : /* @__PURE__ */ jsx(ChevronDown, { className: "h-3 w-3 text-muted-foreground" }),
+                /* @__PURE__ */ jsx(Badge, { variant: "secondary", className: "text-xs", children: t("organization.permissions.systemPermissions") })
+              ]
+            }
+          ) }) }),
+          !collapsed.has("__system") && SYSTEM_PERMISSIONS.map((sp) => /* @__PURE__ */ jsxs("tr", { className: "hover:bg-muted/30", children: [
+            /* @__PURE__ */ jsx("td", { className: "p-3 text-sm font-medium", children: t(sp.key) }),
+            /* @__PURE__ */ jsx("td", { colSpan: 4, className: "p-3", children: /* @__PURE__ */ jsx("div", { className: "flex justify-center", children: /* @__PURE__ */ jsx(
+              Checkbox,
+              {
+                checked: systemPerms.includes(sp.id),
+                onChange: () => toggleSystemPerm(sp.id)
+              }
+            ) }) })
+          ] }, sp.id)),
+          Array.from(groups.entries()).map(([groupName, groupFeatures]) => /* @__PURE__ */ jsxs(React.Fragment, { children: [
+            /* @__PURE__ */ jsx("tr", { children: /* @__PURE__ */ jsx("td", { colSpan: 5, className: "p-2 px-3", children: /* @__PURE__ */ jsxs(
+              Button,
+              {
+                variant: "bare",
+                size: "bare",
+                onClick: () => toggleGroup(groupName),
+                className: "flex items-center gap-1.5 text-xs font-normal",
+                children: [
+                  collapsed.has(groupName) ? /* @__PURE__ */ jsx(ChevronRight, { className: "h-3 w-3 text-muted-foreground" }) : /* @__PURE__ */ jsx(ChevronDown, { className: "h-3 w-3 text-muted-foreground" }),
+                  /* @__PURE__ */ jsx(Badge, { variant: "secondary", className: "text-xs", children: groupName }),
+                  /* @__PURE__ */ jsx("span", { className: "text-[10px] text-muted-foreground", children: groupFeatures.length })
+                ]
+              }
+            ) }) }),
+            !collapsed.has(groupName) && groupFeatures.map((feature) => /* @__PURE__ */ jsxs("tr", { className: "hover:bg-muted/30", children: [
+              /* @__PURE__ */ jsx("td", { className: "p-3 text-sm font-medium", children: feature.label }),
+              ACTIONS.map((action) => /* @__PURE__ */ jsx("td", { className: "p-3 text-center", children: /* @__PURE__ */ jsx("div", { className: "flex justify-center", children: /* @__PURE__ */ jsx(
+                Checkbox,
+                {
+                  checked: grants[feature.id]?.includes(action) ?? false,
+                  onChange: () => toggleGrant(feature.id, action),
+                  color: ACTION_COLORS[action]
+                }
+              ) }) }, action))
+            ] }, feature.id))
+          ] }, groupName)),
+          specials.length > 0 && /* @__PURE__ */ jsx("tr", { children: /* @__PURE__ */ jsx("td", { colSpan: 5, className: "p-2 px-3", children: /* @__PURE__ */ jsxs(Button, { variant: "bare", size: "bare", onClick: () => toggleGroup("__special"), className: "font-normal whitespace-normal flex items-center gap-1.5 text-xs", children: [
+            collapsed.has("__special") ? /* @__PURE__ */ jsx(ChevronRight, { className: "h-3 w-3 text-muted-foreground" }) : /* @__PURE__ */ jsx(ChevronDown, { className: "h-3 w-3 text-muted-foreground" }),
+            /* @__PURE__ */ jsx(Badge, { variant: "secondary", className: "text-xs", children: tl("Special actions", "A\xE7\xF5es especiais") }),
+            /* @__PURE__ */ jsx("span", { className: "text-[10px] text-muted-foreground", children: specials.length })
+          ] }) }) }),
+          !collapsed.has("__special") && specials.map((sa) => /* @__PURE__ */ jsxs("tr", { className: "hover:bg-muted/30", children: [
+            /* @__PURE__ */ jsxs("td", { className: "p-3 text-sm font-medium", children: [
+              /* @__PURE__ */ jsx("span", { className: sa.enforced ? void 0 : "text-muted-foreground", children: sa.label }),
+              !sa.enforced && /* @__PURE__ */ jsx(Badge, { variant: "outline", className: "ml-2 text-[10px]", children: tl("Coming soon", "Em breve") })
+            ] }),
+            /* @__PURE__ */ jsx("td", { colSpan: 4, className: "p-3", children: /* @__PURE__ */ jsx("div", { className: "flex justify-center", children: /* @__PURE__ */ jsx(
+              Checkbox,
+              {
+                checked: grants[sa.feature]?.includes(sa.action) ?? false,
+                onChange: () => toggleGrant(sa.feature, sa.action),
+                disabled: !sa.enforced
+              }
+            ) }) })
+          ] }, `${sa.feature}.${sa.action}`))
+        ] })
+      ] }) })
+    ] })
+  ] });
+}
+var CREATE_PROFILE_TOOL = {
+  id: "org.createPermissionProfile",
+  name: "createPermissionProfile",
+  description: 'Creates an access profile (role) for this organisation. Use ONLY the feature ids listed in the surface state \u2014 an id that is not there does not exist and the grant is silently dropped. Grant the least that satisfies the description: someone who "sees" something needs read, someone who "handles" it needs read+create+edit. Never grant a system permission (manage_team, manage_billing, manage_settings, manage_permissions) unless the user says so in words.',
+  icon: "Shield",
+  mode: "persist",
+  execution: { plane: "client" },
+  category: "Organization",
+  suggestions: [
+    { label: "Um perfil de recep\xE7\xE3o que n\xE3o v\xEA o financeiro" }
+  ],
+  parameters: {
+    type: "object",
+    properties: {
+      name: { type: "string", description: "Profile name, in the user's language." },
+      description: { type: "string", description: "One line on who this profile is for." },
+      grants: {
+        type: "array",
+        description: "One entry per feature the profile can touch: { feature, actions[] } with feature ids from the surface state.",
+        items: { type: "object", description: "{ feature: string, actions: string[] }" }
+      },
+      systemPermissions: {
+        type: "array",
+        description: "manage_team | manage_billing | manage_settings | manage_permissions. Leave empty unless asked.",
+        items: { type: "string" }
+      }
+    },
+    required: ["name", "grants"]
+  }
+};
+var PERMISSIONS_INSTRUCTIONS = "The user is on the access-profiles screen. `features` in the surface state lists every feature id this app actually has, with the actions each accepts \u2014 use those ids verbatim and never invent one. When they describe a role, call createPermissionProfile once with the full grant set. Say afterwards, in one line, what the profile can and cannot reach.";
+function PermissionProfilesTab() {
+  const adapter = useOrgAdapterOptional();
+  const currentOrg = useOrganizationStore((s) => s.currentOrg);
+  const profiles = usePermissionsStore((s) => s.profiles);
+  const features = usePermissionsStore((s) => s.features);
+  const setProfiles = usePermissionsStore((s) => s.setProfiles);
+  const members = useOrganizationStore((s) => s.members);
+  const realProfile = usePermissionsStore((s) => s.realProfile);
+  const startImpersonation = usePermissionsStore((s) => s.startImpersonation);
+  const canPreview = (realProfile?.systemPermissions ?? []).includes("manage_permissions") ?? false;
+  const { t } = useTranslation();
+  const [editingProfile, setEditingProfile] = React.useState(null);
+  const [creating, setCreating] = React.useState(false);
+  const [duplicateSource, setDuplicateSource] = React.useState(null);
+  const [saving, setSaving] = React.useState(false);
+  const [error, setError] = React.useState(null);
+  const [deleting, setDeleting] = React.useState(null);
+  const handleDuplicate = (profile) => {
+    setEditingProfile(null);
+    setCreating(false);
+    setDuplicateSource({
+      ...profile,
+      name: t("organization.permissions.copyName", { name: profile.name }) || `${profile.name} (copy)`,
+      isSystem: false
+    });
+  };
+  const surfaceRef = React.useRef({ features, profiles, adapter, currentOrg, setProfiles });
+  surfaceRef.current = { features, profiles, adapter, currentOrg, setProfiles };
+  const agentSurface = React.useMemo(() => ({
+    id: "org.permissions",
+    instructions: PERMISSIONS_INSTRUCTIONS,
+    describe: () => {
+      const o = surfaceRef.current;
+      return {
+        title: "Perfis de acesso",
+        state: {
+          features: o.features.map((f) => ({
+            id: f.id,
+            label: f.label,
+            group: f.group ?? null,
+            actions: f.actions ?? ["read", "create", "edit", "delete"]
+          })),
+          existingProfiles: o.profiles.map((p) => ({ id: p.id, name: p.name, system: Boolean(p.isSystem) }))
+        }
+      };
+    },
+    tools: [{
+      tool: CREATE_PROFILE_TOOL,
+      execute: async (args) => {
+        const o = surfaceRef.current;
+        if (!o.adapter || !o.currentOrg) return { ok: false, error: "no_organization" };
+        const known = new Set(o.features.map((f) => f.id));
+        const grants = {};
+        const unknown = [];
+        for (const entry of args.grants ?? []) {
+          const feature = entry?.feature;
+          if (!feature) continue;
+          if (!known.has(feature)) {
+            unknown.push(feature);
+            continue;
+          }
+          grants[feature] = entry.actions ?? ["read"];
+        }
+        if (Object.keys(grants).length === 0) {
+          return { ok: false, error: "no_valid_feature", unknown, available: [...known] };
+        }
+        try {
+          await o.adapter.createProfile(o.currentOrg.id, {
+            name: String(args.name ?? "").trim() || "Perfil",
+            description: args.description ? String(args.description) : void 0,
+            systemPermissions: args.systemPermissions ?? [],
+            grants
+          });
+          o.setProfiles(await o.adapter.listProfiles(o.currentOrg.id));
+          return { ok: true, name: args.name, features: Object.keys(grants), ignored: unknown };
+        } catch (e) {
+          return { ok: false, error: errorMessage(e) };
+        }
+      }
+    }]
+  }), []);
+  useAgentSurface(agentSurface);
+  const createActions = React.useMemo(() => [
+    {
+      id: "new",
+      label: t("organization.permissions.createProfile"),
+      description: t("organization.permissions.newByHandHint"),
+      icon: Plus,
+      intent: "primary",
+      creates: true,
+      onSelect: () => setCreating(true)
+    },
+    {
+      id: "ai",
+      label: t("assistant.askAI"),
+      description: t("organization.permissions.newWithAIHint"),
+      icon: WandSparkles,
+      ai: true,
+      intent: "secondary",
+      creates: true,
+      onSelect: () => askAI({
+        hint: t("organization.permissions.askPlaceholder"),
+        intro: {
+          role: "setup",
+          persona: t("organization.permissions.askPersona"),
+          pitch: t("organization.permissions.askPitch"),
+          description: t("organization.permissions.askDescription"),
+          suggestions: [0, 1, 2].map((i) => ({ label: t(`organization.permissions.askSuggestion.${i}`) }))
+        }
+      })
+    }
+  ], [t]);
+  const memberCountByProfile = React.useMemo(() => {
+    const counts = {};
+    for (const m of members) {
+      counts[m.profileId] = (counts[m.profileId] ?? 0) + 1;
+    }
+    return counts;
+  }, [members]);
+  const handleSave = async (data) => {
+    if (!adapter || !currentOrg) return;
+    setSaving(true);
+    setError(null);
+    try {
+      if (editingProfile) {
+        await adapter.updateProfile(currentOrg.id, editingProfile.id, data);
+      } else {
+        await adapter.createProfile(currentOrg.id, data);
+      }
+      const updated = await adapter.listProfiles(currentOrg.id);
+      setProfiles(updated);
+      setEditingProfile(null);
+      setCreating(false);
+      setDuplicateSource(null);
+    } catch (e) {
+      setError(errorMessage(e));
+    } finally {
+      setSaving(false);
+    }
+  };
+  const handleDelete = async (profile) => {
+    setDeleting(null);
+    if (!adapter || !currentOrg || profile.isSystem) return;
+    try {
+      await adapter.deleteProfile(currentOrg.id, profile.id);
+      const updated = await adapter.listProfiles(currentOrg.id);
+      setProfiles(updated);
+    } catch (e) {
+      setError(errorMessage(e));
+    }
+  };
+  if (creating || editingProfile || duplicateSource) {
+    return /* @__PURE__ */ jsx(
+      PermissionMatrixEditor,
+      {
+        features: [...coreFeatures().filter((c) => !features.some((f) => f.id === c.id)), ...features],
+        profile: editingProfile ?? duplicateSource ?? void 0,
+        isNew: !editingProfile,
+        parentLabel: t("organization.permissions.title"),
+        onSave: handleSave,
+        onCancel: () => {
+          setEditingProfile(null);
+          setCreating(false);
+          setDuplicateSource(null);
+        },
+        saving
+      }
+    );
+  }
+  return /* @__PURE__ */ jsxs("div", { className: "space-y-4", children: [
+    /* @__PURE__ */ jsx(PageHeaderActions, { children: /* @__PURE__ */ jsx(PageActions, { actions: createActions }) }),
+    error && /* @__PURE__ */ jsx("p", { className: "rounded-lg border border-destructive/40 bg-destructive/5 px-3 py-2 text-sm text-destructive", children: error }),
+    /* @__PURE__ */ jsx("div", { className: "grid gap-3", children: profiles.length === 0 ? (
+      // Roles load via central org hydration; show skeletons until they arrive.
+      Array.from({ length: 4 }).map((_, i) => /* @__PURE__ */ jsx(Card, { children: /* @__PURE__ */ jsxs(CardContent, { className: "flex items-center gap-4 p-4", children: [
+        /* @__PURE__ */ jsx(Skeleton, { className: "h-10 w-10 shrink-0 rounded-lg" }),
+        /* @__PURE__ */ jsxs("div", { className: "flex-1 space-y-2", children: [
+          /* @__PURE__ */ jsx(Skeleton, { className: "h-4 w-40" }),
+          /* @__PURE__ */ jsx(Skeleton, { className: "h-3 w-64" })
+        ] })
+      ] }) }, `sk-${i}`))
+    ) : profiles.map((profile) => /* @__PURE__ */ jsx(Card, { children: /* @__PURE__ */ jsxs(CardContent, { className: "flex items-center gap-4 p-4", children: [
+      /* @__PURE__ */ jsx("div", { className: "flex h-10 w-10 shrink-0 items-center justify-center rounded-lg bg-primary/10", children: /* @__PURE__ */ jsx(Shield, { className: "h-5 w-5 text-primary" }) }),
+      /* @__PURE__ */ jsxs("div", { className: "flex-1 min-w-0", children: [
+        /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2", children: [
+          /* @__PURE__ */ jsx(CardTitle, { className: "text-sm", children: profile.name }),
+          profile.isSystem && /* @__PURE__ */ jsx(Badge, { variant: "secondary", className: "text-xs", children: t("organization.permissions.system") })
+        ] }),
+        profile.description && /* @__PURE__ */ jsx(CardDescription, { className: "text-xs mt-0.5", children: profile.description }),
+        /* @__PURE__ */ jsx("p", { className: "text-xs text-muted-foreground mt-1", children: t("organization.permissions.memberCount", { count: String(memberCountByProfile[profile.id] ?? 0), plural: (memberCountByProfile[profile.id] ?? 0) !== 1 ? "s" : "" }) })
+      ] }),
+      /* @__PURE__ */ jsx(
+        RowActions,
+        {
+          actions: [
+            {
+              id: "preview",
+              label: t("organization.permissions.previewAs"),
+              icon: Eye,
+              hidden: !canPreview || profile.id === realProfile?.id,
+              onSelect: () => startImpersonation(profile)
+            },
+            // Duplicate — always available; the primary (and only) way to
+            // customize a static system role.
+            {
+              id: "duplicate",
+              label: t("organization.permissions.duplicate"),
+              icon: Copy,
+              onSelect: () => handleDuplicate(profile)
+            },
+            // Edit + delete are for custom roles only — system roles are static.
+            {
+              id: "edit",
+              label: t("common.edit"),
+              icon: Pencil,
+              hidden: Boolean(profile.isSystem),
+              onSelect: () => setEditingProfile(profile)
+            },
+            {
+              id: "delete",
+              label: t("common.delete"),
+              icon: Trash2,
+              intent: "danger",
+              hidden: Boolean(profile.isSystem),
+              onSelect: () => setDeleting(profile)
+            }
+          ]
+        }
+      )
+    ] }) }, profile.id)) }),
+    /* @__PURE__ */ jsx(
+      DeleteConfirmDialog,
+      {
+        open: Boolean(deleting),
+        onClose: () => setDeleting(null),
+        onConfirm: () => {
+          if (deleting) void handleDelete(deleting);
+        },
+        entityName: t("organization.permissions.profile"),
+        displayValue: deleting?.name
+      }
+    )
+  ] });
+}
+
+export { PermissionProfilesTab };
+//# sourceMappingURL=PermissionProfilesTab-3ZPRCHMZ.js.map
+//# sourceMappingURL=PermissionProfilesTab-3ZPRCHMZ.js.map