@hub-kit/core 0.3.0

package/dist/pages/team/labels.js

@@ -0,0 +1,98 @@
+export const englishTeamPageLabels = {
+    title: "Team & roles",
+    subtitle: "Manage employees, roles, and company access.",
+    peopleTab: "People",
+    rolesTab: "Roles & permissions",
+    searchPlaceholder: "Search name, email or role …",
+    inactiveOnly: "Inactive only",
+    empty: "No employees found.",
+    roleLabel: (roleName) => roleName,
+    columns: {
+        name: "Name",
+        email: "Email",
+        role: "Role",
+        companies: "Companies",
+        permissions: "Permissions",
+        active: "Active",
+    },
+    allCompanies: "All",
+    moreCompanies: (count) => `+${count} more`,
+    permissionCount: (held, total) => `${held} of ${total}`,
+    active: "Active",
+    inactive: "Inactive",
+    neverSignedIn: "never signed in",
+    categoryLabel: (categoryKey) => categoryKey,
+    permissionsTitle: "Permissions",
+    permissionColumnLabel: "Permission",
+    rolesMatrixNote: "A change here moves every person holding that role, unless they have a personal exception.",
+    impliedBySuperAdmin: "The owner account always holds every permission.",
+    newEmployee: {
+        button: "New employee",
+        title: "New employee",
+        name: "Name",
+        email: "Email",
+        role: "Role",
+        companies: "Companies",
+        noCompaniesHint: "No company selected means access to every company.",
+        someCompaniesHint: "The person only sees the selected companies.",
+        emailRequired: "An email address is required.",
+        emailInvalid: "This email address does not look valid.",
+        emailTaken: "This email address is already in use.",
+        nameRequired: "A name is required.",
+        create: "Create",
+        creating: "Creating …",
+        cancel: "Cancel",
+        createFailed: (error) => `Creating the employee failed: ${error}`,
+        rightsFailed: (error) => `The account was created, but saving its permission exceptions failed: ${error}`,
+    },
+    edit: {
+        open: "Edit",
+        title: "Edit employee",
+        emailChangeHint: "Changing the email also changes the login.",
+        editingMyselfNote: "You are editing your own account. Your role stays locked here.",
+        superAdminRoleHint: "The owner account keeps its role and full access.",
+        roleChangeWarning: (fromRole, toRole) => `This changes the role from ${fromRole} to ${toRole} and with it what this person may do.`,
+        accessWidensWarning: "Removing the last company gives access to every company, not to none.",
+        stepProfile: "profile",
+        stepRole: "role",
+        stepAccess: "company access",
+        save: "Save",
+        saving: "Saving …",
+        cancel: "Cancel",
+        saved: "Saved.",
+        partlyFailed: (step, error) => `Saving stopped at the ${step} step: ${error}`,
+        failed: (error) => `Saving failed: ${error}`,
+        superAdminCannotBeDeactivated: "The owner account cannot be deactivated.",
+    },
+    activeToggle: {
+        deactivate: "Deactivate",
+        reactivate: "Reactivate",
+        deactivateTitle: "Deactivate this account?",
+        reactivateTitle: "Reactivate this account?",
+        deactivateDescription: (email) => `${email} will no longer be able to sign in.`,
+        reactivateDescription: (email) => `${email} will be able to sign in again.`,
+        confirmDeactivate: "Deactivate",
+        confirmReactivate: "Reactivate",
+        cancel: "Cancel",
+        deactivated: "Account deactivated.",
+        reactivated: "Account reactivated.",
+        failed: (error) => `Changing the account failed: ${error}`,
+    },
+    resetPassword: {
+        open: "Reset password",
+        title: "Reset the password?",
+        description: (email) => `${email} gets a new temporary password and must change it at sign-in.`,
+        confirm: "Reset",
+        cancel: "Cancel",
+        failed: (error) => `Resetting the password failed: ${error}`,
+        resultTitle: "New temporary password",
+        resultDescription: (email) => `Hand this password to ${email}. It is shown only once.`,
+    },
+    tempPassword: {
+        title: "Temporary password",
+        description: (email) => `Hand this password to ${email}. It is shown only once.`,
+        copy: "Copy password",
+        copyFailed: "Copying failed. Please select and copy the password by hand.",
+        close: "Close",
+    },
+};

package/dist/pages/team/new-employee.d.ts

@@ -0,0 +1,8 @@
+import type { TeamAdapter, TeamCompany } from "../../adapters/team";
+import type { TeamPageLabels } from "./labels";
+export declare function NewEmployeeSheet({ companies, existingEmails, adapter, labels, }: {
+    companies: TeamCompany[];
+    existingEmails: string[];
+    adapter: TeamAdapter;
+    labels: TeamPageLabels;
+}): import("react").JSX.Element;

package/dist/pages/team/new-employee.js

@@ -0,0 +1,103 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { useMemo, useState } from "react";
+import { Plus } from "lucide-react";
+import { toast } from "sonner";
+import { Button } from "../../ui/button.js";
+import { Input } from "../../ui/input.js";
+import { Label } from "../../ui/label.js";
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue, } from "../../ui/select.js";
+import { Sheet, SheetContent, SheetDescription, SheetFooter, SheetHeader, SheetTitle, SheetTrigger, } from "../../ui/sheet.js";
+import { PermissionChecklist } from "../../components/access/permission-checklist.js";
+import { readableErrorMessage } from "../../components/feedback/query-states.js";
+import { CompanyPickList } from "./employee-editor.js";
+import { TempPasswordDialog } from "./temp-password-dialog.js";
+// Catches "abc" and a missing @, without trying to police the full RFC.
+const EMAIL_PATTERN = /^[^\s@]+@[^\s@]+\.[^\s@]{2,}$/;
+export function NewEmployeeSheet({ companies, existingEmails, adapter, labels, }) {
+    const newLabels = labels.newEmployee;
+    const catalogueQuery = adapter.usePermissionCatalogue();
+    const rolesQuery = adapter.useRoles();
+    const rolePermissionsQuery = adapter.useRolePermissions();
+    const [open, setOpen] = useState(false);
+    const [email, setEmail] = useState("");
+    const [name, setName] = useState("");
+    const [roleName, setRoleName] = useState(adapter.assignableRoles[adapter.assignableRoles.length - 1] ?? "");
+    const [companyIds, setCompanyIds] = useState([]);
+    // Deviations from what the chosen role grants; written right after the account exists.
+    const [permissionOverrides, setPermissionOverrides] = useState({});
+    const [isCreating, setIsCreating] = useState(false);
+    const [createdCredentials, setCreatedCredentials] = useState(null);
+    const roleDefaultKeys = useMemo(() => {
+        const role = (rolesQuery.data ?? []).find((r) => r.name === roleName);
+        return role ? ((rolePermissionsQuery.data ?? {})[role.id] ?? []) : [];
+    }, [rolesQuery.data, rolePermissionsQuery.data, roleName]);
+    const effectiveHeldKeys = useMemo(() => {
+        const keys = new Set(roleDefaultKeys);
+        for (const [key, granted] of Object.entries(permissionOverrides)) {
+            if (granted)
+                keys.add(key);
+            else
+                keys.delete(key);
+        }
+        return [...keys];
+    }, [roleDefaultKeys, permissionOverrides]);
+    const emailInvalid = email.trim().length > 0 && !EMAIL_PATTERN.test(email.trim());
+    const emailTaken = existingEmails.includes(email.trim().toLowerCase());
+    function reset() {
+        setEmail("");
+        setName("");
+        setRoleName(adapter.assignableRoles[adapter.assignableRoles.length - 1] ?? "");
+        setCompanyIds([]);
+        setPermissionOverrides({});
+    }
+    async function create() {
+        if (!email.trim())
+            return toast.error(newLabels.emailRequired);
+        if (!EMAIL_PATTERN.test(email.trim()))
+            return toast.error(newLabels.emailInvalid);
+        if (emailTaken)
+            return toast.error(newLabels.emailTaken);
+        if (!name.trim())
+            return toast.error(newLabels.nameRequired);
+        setIsCreating(true);
+        try {
+            const result = await adapter.createEmployee({
+                email: email.trim(),
+                name: name.trim(),
+                roleName,
+                companyIds,
+            });
+            // Overrides need the new id, so they are written right after creation.
+            const overrides = Object.entries(permissionOverrides);
+            if (overrides.length > 0) {
+                try {
+                    await Promise.all(overrides.map(([key, value]) => adapter.setEmployeeRight({ employeeId: result.employeeId, right: key, value })));
+                }
+                catch (error) {
+                    toast.error(newLabels.rightsFailed(readableErrorMessage(error, "")));
+                }
+            }
+            setCreatedCredentials({ email: result.email, tempPassword: result.tempPassword });
+            reset();
+            setOpen(false);
+        }
+        catch (error) {
+            toast.error(newLabels.createFailed(readableErrorMessage(error, "")));
+        }
+        finally {
+            setIsCreating(false);
+        }
+    }
+    return (_jsxs(_Fragment, { children: [_jsxs(Sheet, { open: open, onOpenChange: setOpen, children: [_jsx(SheetTrigger, { asChild: true, children: _jsxs(Button, { className: "gap-2", children: [_jsx(Plus, { className: "size-4" }), " ", newLabels.button] }) }), _jsxs(SheetContent, { side: "right", className: "flex w-full flex-col gap-0 overflow-y-auto p-0 sm:max-w-xl", children: [_jsxs(SheetHeader, { className: "border-b border-border px-6 py-4", children: [_jsx(SheetTitle, { children: newLabels.title }), _jsx(SheetDescription, { className: "sr-only", children: newLabels.title })] }), _jsxs("div", { className: "flex-1 space-y-4 overflow-y-auto px-6 py-4", children: [_jsxs("div", { className: "space-y-1", children: [_jsxs(Label, { className: "text-xs text-muted-foreground", children: [newLabels.name, " ", _jsx("span", { className: "text-destructive", children: "*" })] }), _jsx(Input, { value: name, onChange: (event) => setName(event.target.value), "aria-required": true })] }), _jsxs("div", { className: "space-y-1", children: [_jsxs(Label, { className: "text-xs text-muted-foreground", children: [newLabels.email, " ", _jsx("span", { className: "text-destructive", children: "*" })] }), _jsx(Input, { type: "email", value: email, onChange: (event) => setEmail(event.target.value), placeholder: `name@${adapter.emailDomain}`, "aria-required": true, "aria-invalid": emailInvalid || emailTaken }), emailInvalid && _jsx("p", { className: "text-xs text-warning", children: newLabels.emailInvalid }), emailTaken && _jsx("p", { className: "text-xs text-warning", children: newLabels.emailTaken })] }), _jsxs("div", { className: "space-y-1", children: [_jsxs(Label, { className: "text-xs text-muted-foreground", children: [newLabels.role, " ", _jsx("span", { className: "text-destructive", children: "*" })] }), _jsxs(Select, { value: roleName, onValueChange: setRoleName, children: [_jsx(SelectTrigger, { children: _jsx(SelectValue, {}) }), _jsx(SelectContent, { children: adapter.assignableRoles.map((role) => (_jsx(SelectItem, { value: role, children: labels.roleLabel(role) }, role))) })] })] }), _jsxs("div", { className: "space-y-1", children: [_jsx(Label, { className: "text-xs text-muted-foreground", children: newLabels.companies }), _jsx(CompanyPickList, { companies: companies, selectedIds: companyIds, onChange: setCompanyIds, maxHeightClass: "max-h-48" }), _jsx("p", { className: "text-xs text-muted-foreground", children: companyIds.length === 0
+                                                    ? newLabels.noCompaniesHint
+                                                    : newLabels.someCompaniesHint })] }), _jsxs("div", { className: "space-y-2", children: [_jsx(Label, { children: labels.permissionsTitle }), _jsx("div", { className: "rounded-lg border border-border p-3", children: _jsx(PermissionChecklist, { permissions: catalogueQuery.data ?? [], held: effectiveHeldKeys, disabled: isCreating, categoryLabel: labels.categoryLabel, onToggle: (key, next) => setPermissionOverrides((current) => {
+                                                        const fromRole = roleDefaultKeys.includes(key);
+                                                        const rest = { ...current };
+                                                        // A tick matching the role default is not a deviation, so drop it.
+                                                        if (next === fromRole)
+                                                            delete rest[key];
+                                                        else
+                                                            rest[key] = next;
+                                                        return rest;
+                                                    }) }) })] })] }), _jsxs(SheetFooter, { className: "mt-auto gap-2 border-t border-border px-6 py-4", children: [_jsx(Button, { variant: "outline", onClick: () => setOpen(false), children: newLabels.cancel }), _jsx(Button, { onClick: create, disabled: isCreating || !name.trim() || !email.trim() || emailInvalid || emailTaken, children: isCreating ? newLabels.creating : newLabels.create })] })] })] }), createdCredentials && (_jsx(TempPasswordDialog, { credentials: createdCredentials, onClose: () => setCreatedCredentials(null), labels: labels }))] }));
+}

package/dist/pages/team/roles-tab.d.ts

@@ -0,0 +1,6 @@
+import type { TeamAdapter } from "../../adapters/team";
+import type { TeamPageLabels } from "./labels";
+export declare function RolesPermissionsTab({ adapter, labels, }: {
+    adapter: TeamAdapter;
+    labels: TeamPageLabels;
+}): import("react").JSX.Element;

package/dist/pages/team/roles-tab.js

@@ -0,0 +1,46 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useMemo, useState } from "react";
+import { toast } from "sonner";
+import { PermissionMatrix } from "../../components/access/permission-matrix.js";
+import { ErrorState, TableSkeleton, readableErrorMessage } from "../../components/feedback/query-states.js";
+// What each role grants. Changing a cell moves everyone holding that role.
+export function RolesPermissionsTab({ adapter, labels, }) {
+    const catalogueQuery = adapter.usePermissionCatalogue();
+    const rolesQuery = adapter.useRoles();
+    const rolePermissionsQuery = adapter.useRolePermissions();
+    const [isSaving, setIsSaving] = useState(false);
+    const roles = useMemo(() => 
+    // The owner role is forced on by the database, so its column could only be noise.
+    (rolesQuery.data ?? [])
+        .filter((role) => role.name !== "super_admin")
+        .map((role) => ({ id: role.id, label: labels.roleLabel(role.name) })), [rolesQuery.data, labels]);
+    const roleNameById = useMemo(() => new Map((rolesQuery.data ?? []).map((role) => [role.id, role.name])), [rolesQuery.data]);
+    if (catalogueQuery.isLoading || rolesQuery.isLoading || rolePermissionsQuery.isLoading) {
+        return _jsx(TableSkeleton, { rows: 6, columns: 4 });
+    }
+    if (catalogueQuery.isError || rolesQuery.isError || rolePermissionsQuery.isError) {
+        return (_jsx(ErrorState, { error: catalogueQuery.error ?? rolesQuery.error ?? rolePermissionsQuery.error, onRetry: () => {
+                catalogueQuery.refetch();
+                rolesQuery.refetch();
+                rolePermissionsQuery.refetch();
+            } }));
+    }
+    async function toggleCell(roleId, key, value) {
+        setIsSaving(true);
+        try {
+            await adapter.setRolePermission({
+                roleId,
+                roleName: roleNameById.get(roleId) ?? "",
+                key,
+                value,
+            });
+        }
+        catch (error) {
+            toast.error(readableErrorMessage(error, ""));
+        }
+        finally {
+            setIsSaving(false);
+        }
+    }
+    return (_jsxs("div", { children: [_jsx("p", { className: "max-w-3xl text-sm text-muted-foreground", children: labels.rolesMatrixNote }), _jsx(PermissionMatrix, { className: "mt-4", permissions: catalogueQuery.data ?? [], roles: roles, grantedByRole: rolePermissionsQuery.data ?? {}, disabled: isSaving, permissionColumnLabel: labels.permissionColumnLabel, categoryLabel: labels.categoryLabel, onToggle: toggleCell })] }));
+}

package/dist/pages/team/team-page.d.ts

@@ -0,0 +1,7 @@
+import type { TeamAdapter } from "../../adapters/team";
+import { type TeamPageLabels } from "./labels";
+export interface TeamPageProps {
+    adapter: TeamAdapter;
+    labels?: TeamPageLabels;
+}
+export declare function TeamPage({ adapter, labels }: TeamPageProps): import("react").JSX.Element;

package/dist/pages/team/team-page.js

@@ -0,0 +1,81 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { useMemo, useState } from "react";
+import { Search } from "lucide-react";
+import { Badge } from "../../ui/badge.js";
+import { Button } from "../../ui/button.js";
+import { Input } from "../../ui/input.js";
+import { Table, TableBody, TableCell, TableHead, TableHeader, TableRow, } from "../../ui/table.js";
+import { Tabs, TabsContent, TabsList, TabsTrigger } from "../../ui/tabs.js";
+import { ErrorState, TableSkeleton } from "../../components/feedback/query-states.js";
+import { cn } from "../../lib/class-names.js";
+import { englishTeamPageLabels } from "./labels.js";
+import { EditEmployeeSheet } from "./employee-editor.js";
+import { NewEmployeeSheet } from "./new-employee.js";
+import { ResetPasswordDialog, ToggleActiveDialog } from "./account-dialogs.js";
+import { RolesPermissionsTab } from "./roles-tab.js";
+// One hue, four weights: rank separates roles, so a color per role would invent categories.
+const ROLE_BADGE_STYLE = {
+    super_admin: "border-transparent bg-brand-dark text-white",
+    admin: "border-transparent bg-brand-tint text-brand-dark",
+    supervisor: "border-transparent bg-muted text-foreground",
+    assistant: "border-border bg-card text-muted-foreground",
+};
+export function TeamPage({ adapter, labels = englishTeamPageLabels }) {
+    const [activeTab, setActiveTab] = useState("people");
+    const employeesQuery = adapter.useEmployees();
+    const companiesQuery = adapter.useCompanies();
+    const companies = companiesQuery.data ?? [];
+    const [searchInput, setSearchInput] = useState("");
+    const [inactiveOnly, setInactiveOnly] = useState(false);
+    // Owner account pinned to the top: the one row with different rules must be easy to find.
+    const employees = useMemo(() => {
+        const term = searchInput.trim().toLowerCase();
+        const rows = (employeesQuery.data ?? []).filter((employee) => {
+            if (inactiveOnly && employee.isActive)
+                return false;
+            if (!term)
+                return true;
+            return [employee.name ?? "", employee.email, labels.roleLabel(employee.roleName)]
+                .join(" ")
+                .toLowerCase()
+                .includes(term);
+        });
+        return [...rows].sort((a, b) => {
+            const aOwner = a.roleName === "super_admin" ? 0 : 1;
+            const bOwner = b.roleName === "super_admin" ? 0 : 1;
+            return aOwner - bOwner;
+        });
+    }, [employeesQuery.data, searchInput, inactiveOnly, labels]);
+    return (_jsxs("div", { children: [_jsxs("div", { className: "flex flex-wrap items-end justify-between gap-4", children: [_jsxs("div", { children: [_jsx("h1", { className: "mt-2 text-2xl font-semibold tracking-tight text-foreground", children: labels.title }), _jsx("p", { className: "mt-1 max-w-2xl text-sm text-muted-foreground", children: labels.subtitle })] }), _jsx(NewEmployeeSheet, { companies: companies, existingEmails: (employeesQuery.data ?? []).map((e) => e.email.toLowerCase()), adapter: adapter, labels: labels })] }), _jsxs(Tabs, { value: activeTab, onValueChange: setActiveTab, className: "mt-6", children: [_jsxs("div", { className: "flex flex-wrap items-center gap-3", children: [_jsxs(TabsList, { className: "flex h-auto w-auto flex-wrap justify-start gap-1", children: [_jsx(TabsTrigger, { value: "people", children: labels.peopleTab }), _jsx(TabsTrigger, { value: "roles", children: labels.rolesTab })] }), activeTab === "people" && (_jsxs("div", { className: "flex w-full items-center gap-2 sm:ml-auto sm:w-auto", children: [_jsxs("div", { className: "relative min-w-0 flex-1 sm:w-[260px] sm:flex-none", children: [_jsx(Search, { className: "absolute top-1/2 left-3 size-4 -translate-y-1/2 text-muted-foreground" }), _jsx(Input, { value: searchInput, onChange: (event) => setSearchInput(event.target.value), placeholder: labels.searchPlaceholder, className: "h-9 pl-9" })] }), _jsx(Button, { variant: inactiveOnly ? "default" : "outline", size: "sm", className: "shrink-0", onClick: () => setInactiveOnly((value) => !value), children: labels.inactiveOnly })] }))] }), _jsx(TabsContent, { value: "people", className: "mt-3", children: employeesQuery.isError ? (_jsx(ErrorState, { error: employeesQuery.error, onRetry: employeesQuery.refetch })) : employeesQuery.isLoading ? (_jsx(TableSkeleton, { rows: 4, columns: 5 })) : (_jsxs(_Fragment, { children: [_jsx("div", { className: "hidden overflow-hidden rounded-xl border border-border bg-card sm:block", children: _jsxs(Table, { className: "[&_td]:py-1.5 [&_th]:h-9", children: [_jsx(TableHeader, { children: _jsxs(TableRow, { className: "bg-muted/40", children: [_jsx(TableHead, { children: labels.columns.name }), _jsx(TableHead, { children: labels.columns.email }), _jsx(TableHead, { children: labels.columns.role }), _jsx(TableHead, { children: labels.columns.companies }), _jsx(TableHead, { className: "w-[130px] text-center", children: labels.columns.permissions }), _jsx(TableHead, { className: "w-[92px] text-center", children: labels.columns.active }), _jsx(TableHead, { className: "w-[64px]" })] }) }), _jsxs(TableBody, { children: [employees.map((employee) => (_jsx(EmployeeRow, { employee: employee, companies: companies, adapter: adapter, labels: labels }, employee.id))), employees.length === 0 && (_jsx(TableRow, { children: _jsx(TableCell, { colSpan: 7, className: "py-12 text-center text-muted-foreground", children: labels.empty }) }))] })] }) }), _jsxs("div", { className: "mt-3 space-y-3 sm:hidden", children: [employees.map((employee) => (_jsx(EmployeeCard, { employee: employee, companies: companies, adapter: adapter, labels: labels }, employee.id))), employees.length === 0 && (_jsx("p", { className: "rounded-xl border border-border bg-card py-12 text-center text-sm text-muted-foreground", children: labels.empty }))] })] })) }), _jsx(TabsContent, { value: "roles", className: "mt-3", children: _jsx(RolesPermissionsTab, { adapter: adapter, labels: labels }) })] })] }));
+}
+function RoleBadge({ roleName, labels }) {
+    return (_jsx(Badge, { variant: "outline", className: ROLE_BADGE_STYLE[roleName] ?? ROLE_BADGE_STYLE.assistant, children: labels.roleLabel(roleName) }));
+}
+function ActiveBadge({ employee, labels }) {
+    return employee.isActive ? (_jsx(Badge, { className: "border-transparent bg-success-soft text-success", children: labels.active })) : (_jsx(Badge, { variant: "outline", className: "text-muted-foreground", children: labels.inactive }));
+}
+function CompanyBadges({ employee, companies, labels, }) {
+    if (employee.allowedCompanyIds.length === 0) {
+        return _jsx(Badge, { variant: "default", children: labels.allCompanies });
+    }
+    const codes = companies
+        .filter((company) => employee.allowedCompanyIds.includes(company.id))
+        .map((company) => company.code);
+    const visibleCodes = codes.slice(0, 4);
+    const hiddenCount = codes.length - visibleCodes.length;
+    return (_jsxs(_Fragment, { children: [visibleCodes.map((code) => (_jsx(Badge, { variant: "secondary", children: code }, code))), hiddenCount > 0 && (_jsx(Badge, { variant: "outline", title: codes.join(", "), children: labels.moreCompanies(hiddenCount) }))] }));
+}
+function PermissionCount({ employee, adapter, labels, }) {
+    const catalogueQuery = adapter.usePermissionCatalogue();
+    const total = catalogueQuery.data?.length ?? 0;
+    if (!total)
+        return _jsx(_Fragment, { children: "\u2014" });
+    const held = employee.roleName === "super_admin" ? total : employee.permissions.length;
+    return _jsx(_Fragment, { children: labels.permissionCount(held, total) });
+}
+function EmployeeRow({ employee, companies, adapter, labels, }) {
+    return (_jsxs(TableRow, { className: cn(!employee.isActive && "opacity-60", employee.roleName === "super_admin" && "bg-brand-wash/60 hover:bg-brand-wash"), children: [_jsxs(TableCell, { className: "font-medium text-foreground", children: [_jsx("span", { className: "block", children: employee.name ?? "—" }), employee.mustChangePassword && (_jsx("span", { className: "block text-xs font-normal whitespace-nowrap text-muted-foreground", children: labels.neverSignedIn }))] }), _jsx(TableCell, { className: "text-muted-foreground", children: employee.email }), _jsx(TableCell, { children: _jsx(RoleBadge, { roleName: employee.roleName, labels: labels }) }), _jsx(TableCell, { children: _jsx("div", { className: "flex flex-wrap gap-1", children: _jsx(CompanyBadges, { employee: employee, companies: companies, labels: labels }) }) }), _jsx(TableCell, { className: "text-center text-sm text-muted-foreground", children: _jsx(PermissionCount, { employee: employee, adapter: adapter, labels: labels }) }), _jsx(TableCell, { className: "text-center", children: _jsx(ActiveBadge, { employee: employee, labels: labels }) }), _jsx(TableCell, { children: _jsxs("div", { className: "flex justify-end gap-1", children: [_jsx(EditEmployeeSheet, { employee: employee, companies: companies, adapter: adapter, labels: labels }), _jsx(ResetPasswordDialog, { employee: employee, adapter: adapter, labels: labels }), _jsx(ToggleActiveDialog, { employee: employee, adapter: adapter, labels: labels })] }) })] }));
+}
+function EmployeeCard({ employee, companies, adapter, labels, }) {
+    return (_jsxs("div", { className: cn("rounded-xl border border-border bg-card p-4", !employee.isActive && "opacity-60", employee.roleName === "super_admin" && "border-brand-soft bg-brand-wash/60"), children: [_jsxs("div", { className: "flex items-start justify-between gap-3", children: [_jsxs("div", { className: "min-w-0", children: [_jsx("div", { className: "truncate text-sm font-medium text-foreground", children: employee.name ?? "—" }), _jsx("div", { className: "truncate text-xs text-muted-foreground", children: employee.email })] }), _jsxs("div", { className: "shrink-0 text-right", children: [_jsx(ActiveBadge, { employee: employee, labels: labels }), employee.mustChangePassword && (_jsx("div", { className: "mt-1 text-[10px] text-muted-foreground", children: labels.neverSignedIn }))] })] }), _jsxs("div", { className: "mt-2 flex flex-wrap items-center gap-1.5", children: [_jsx(RoleBadge, { roleName: employee.roleName, labels: labels }), _jsx(CompanyBadges, { employee: employee, companies: companies, labels: labels })] }), _jsx("div", { className: "mt-3 space-y-1.5 border-t border-border pt-3", children: _jsxs("div", { className: "flex items-center justify-between gap-3", children: [_jsx("span", { className: "text-xs text-muted-foreground", children: labels.columns.permissions }), _jsx("span", { className: "text-xs text-muted-foreground", children: _jsx(PermissionCount, { employee: employee, adapter: adapter, labels: labels }) })] }) }), _jsxs("div", { className: "mt-3 flex justify-end gap-1 border-t border-border pt-2", children: [_jsx(EditEmployeeSheet, { employee: employee, companies: companies, adapter: adapter, labels: labels }), _jsx(ResetPasswordDialog, { employee: employee, adapter: adapter, labels: labels }), _jsx(ToggleActiveDialog, { employee: employee, adapter: adapter, labels: labels })] })] }));
+}

package/dist/pages/team/temp-password-dialog.d.ts

@@ -0,0 +1,11 @@
+import type { TeamPageLabels } from "./labels";
+export declare function TempPasswordDialog({ credentials, onClose, labels, title, description, }: {
+    credentials: {
+        email: string;
+        tempPassword: string;
+    };
+    onClose: () => void;
+    labels: TeamPageLabels;
+    title?: string;
+    description?: string;
+}): import("react").JSX.Element;

package/dist/pages/team/temp-password-dialog.js

@@ -0,0 +1,23 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useState } from "react";
+import { Check, Copy } from "lucide-react";
+import { Button } from "../../ui/button.js";
+import { Dialog, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogTitle, } from "../../ui/dialog.js";
+// Shown exactly once after creating or resetting an account; the password is never stored.
+export function TempPasswordDialog({ credentials, onClose, labels, title, description, }) {
+    const [copied, setCopied] = useState(false);
+    const [copyFailed, setCopyFailed] = useState(false);
+    async function copyPassword() {
+        try {
+            await navigator.clipboard.writeText(credentials.tempPassword);
+            setCopyFailed(false);
+            setCopied(true);
+            setTimeout(() => setCopied(false), 2000);
+        }
+        catch {
+            setCopied(false);
+            setCopyFailed(true);
+        }
+    }
+    return (_jsx(Dialog, { open: true, children: _jsxs(DialogContent, { onEscapeKeyDown: (event) => event.preventDefault(), onPointerDownOutside: (event) => event.preventDefault(), onInteractOutside: (event) => event.preventDefault(), children: [_jsxs(DialogHeader, { children: [_jsx(DialogTitle, { children: title ?? labels.tempPassword.title }), _jsx(DialogDescription, { children: description ?? labels.tempPassword.description(credentials.email) })] }), _jsxs("div", { className: "flex items-center gap-2 rounded-md border border-border bg-muted/40 p-3", children: [_jsx("code", { className: "flex-1 font-mono text-sm break-all text-foreground", children: credentials.tempPassword }), _jsx(Button, { variant: "outline", size: "icon", onClick: copyPassword, "aria-label": labels.tempPassword.copy, children: copied ? _jsx(Check, { className: "size-4" }) : _jsx(Copy, { className: "size-4" }) })] }), copyFailed && _jsx("p", { className: "text-xs text-warning", children: labels.tempPassword.copyFailed }), _jsx(DialogFooter, { children: _jsx(Button, { onClick: onClose, children: labels.tempPassword.close }) })] }) }));
+}

package/dist/pages/trash/labels.d.ts

@@ -0,0 +1,68 @@
+export interface TrashPageLabels {
+    title: string;
+    subtitle: string;
+    empty: string;
+    searchLabel: string;
+    searchPlaceholder: string;
+    allTypes: string;
+    ageFilterLabel: string;
+    anyAge: string;
+    olderThanThirtyDays: string;
+    olderThanNinetyDays: string;
+    olderThanOneYear: string;
+    deletedToday: string;
+    deletedDaysAgo: (count: number) => string;
+    deletedMonthsAgo: (count: number) => string;
+    deletedYearsAgo: (count: number) => string;
+    sortAscending: string;
+    sortDescending: string;
+    tableLabel: (tableName: string) => string;
+    columns: {
+        type: string;
+        label: string;
+        deletedAt: string;
+        deletedBy: string;
+        reason: string;
+    };
+    selection: {
+        selectPage: string;
+        selectRow: (label: string) => string;
+        selectedCount: (count: number) => string;
+        clearSelection: string;
+        restoreSelected: (count: number) => string;
+        purgeSelected: (count: number) => string;
+        selectAllFiltered: (count: number) => string;
+        allFilteredSelected: (count: number) => string;
+        notPurgeableCount: (count: number) => string;
+    };
+    fullReason: {
+        showMore: string;
+        title: string;
+    };
+    restore: {
+        action: string;
+        title: string;
+        description: (label: string) => string;
+        reasonLabel: string;
+        reasonPlaceholder: string;
+        cancel: string;
+        confirm: string;
+        succeeded: (label: string) => string;
+        failed: (error: string) => string;
+        manySucceeded: (count: number) => string;
+    };
+    purge: {
+        action: string;
+        title: string;
+        description: (label: string) => string;
+        cancel: string;
+        confirm: string;
+        lockedReason: (tableName: string) => string;
+        manyTitle: (count: number) => string;
+        manyDescription: (count: number) => string;
+        succeeded: (label: string) => string;
+        failed: (error: string) => string;
+        manySucceeded: (count: number) => string;
+    };
+}
+export declare const englishTrashPageLabels: TrashPageLabels;

package/dist/pages/trash/labels.js

@@ -0,0 +1,69 @@
+export const englishTrashPageLabels = {
+    title: "Trash",
+    subtitle: "Deleted records that are restorable or permanently deletable.",
+    empty: "Trash is empty.",
+    searchLabel: "Search the trash",
+    searchPlaceholder: "Search label, reason or person",
+    allTypes: "All types",
+    ageFilterLabel: "Age",
+    anyAge: "Any age",
+    olderThanThirtyDays: "Older than 30 days",
+    olderThanNinetyDays: "Older than 90 days",
+    olderThanOneYear: "Older than 1 year",
+    deletedToday: "deleted today",
+    deletedDaysAgo: (count) => `${count} ${count === 1 ? "day" : "days"} ago`,
+    deletedMonthsAgo: (count) => `${count} ${count === 1 ? "month" : "months"} ago`,
+    deletedYearsAgo: (count) => `${count} ${count === 1 ? "year" : "years"} ago`,
+    sortAscending: "sort ascending",
+    sortDescending: "sort descending",
+    tableLabel: (tableName) => tableName,
+    columns: {
+        type: "Type",
+        label: "Label",
+        deletedAt: "Deleted on",
+        deletedBy: "Deleted by",
+        reason: "Reason",
+    },
+    selection: {
+        selectPage: "Select all on this page",
+        selectRow: (label) => `Select '${label}'`,
+        selectedCount: (count) => `${count} selected`,
+        clearSelection: "Clear selection",
+        restoreSelected: (count) => `Restore (${count})`,
+        purgeSelected: (count) => `Delete permanently (${count})`,
+        selectAllFiltered: (count) => `Select all ${count} entries`,
+        allFilteredSelected: (count) => `All ${count} entries are selected.`,
+        notPurgeableCount: (count) => `${count} of the selected records cannot be permanently deleted; they stay in the trash.`,
+    },
+    fullReason: {
+        showMore: "Show the full reason",
+        title: "Deletion reason",
+    },
+    restore: {
+        action: "Restore",
+        title: "Restore",
+        description: (label) => `'${label}' goes back into the active list and takes effect immediately: rules start matching again, invoices re-enter the workflow.`,
+        reasonLabel: "Reason (optional)",
+        reasonPlaceholder: "Why is this being restored?",
+        cancel: "Cancel",
+        confirm: "Restore",
+        succeeded: (label) => `'${label}' restored.`,
+        failed: (error) => `Restore failed: ${error}`,
+        manySucceeded: (count) => `${count} ${count === 1 ? "record" : "records"} restored.`,
+    },
+    purge: {
+        action: "Delete permanently",
+        title: "Delete permanently",
+        description: (label) => `'${label}' will be deleted irreversibly. This cannot be undone.`,
+        cancel: "Cancel",
+        confirm: "Delete permanently",
+        lockedReason: (tableName) => tableName === "invoices"
+            ? "Invoices cannot be permanently deleted: retention rules only allow deactivating them. Restoring is still possible."
+            : "Cannot be permanently deleted: other records still reference this one. Restoring is still possible.",
+        manyTitle: (count) => `Delete ${count} ${count === 1 ? "record" : "records"} permanently`,
+        manyDescription: (count) => `${count} ${count === 1 ? "record" : "records"} will be deleted irreversibly. This cannot be undone.`,
+        succeeded: (label) => `'${label}' permanently deleted.`,
+        failed: (error) => `Delete failed: ${error}`,
+        manySucceeded: (count) => `${count} ${count === 1 ? "record" : "records"} permanently deleted.`,
+    },
+};

package/dist/pages/trash/trash-page.d.ts

@@ -0,0 +1,9 @@
+import { type Formatters } from "../../lib/formatters";
+import type { TrashAdapter } from "../../adapters/trash";
+import { type TrashPageLabels } from "./labels";
+export interface TrashPageProps {
+    adapter: TrashAdapter;
+    labels?: TrashPageLabels;
+    formatters?: Formatters;
+}
+export declare function TrashPage({ adapter, labels, formatters, }: TrashPageProps): import("react").JSX.Element;