hazo_auth 10.4.13 → 10.6.0

package/README.md

@@ -1620,11 +1620,11 @@ The component automatically shows/hides tabs based on the user's permissions, so
 
 ### Choose the UI Shell (Test Sidebar vs Standalone)
 
-By default, the pages render inside the "test workspace" sidebar so you can quickly preview every flow. When you reuse the routes inside another project you'll usually want a clean, standalone wrapper instead. Set this in `hazo_auth_config.ini`:
+By default, pages render with a clean, standalone wrapper that inherits your own app shell, layout, and theme tokens. The "test workspace" sidebar (`test_sidebar`) is opt-in and intended only for this package's own demo/dev app (Storybook screenshots, quickly previewing every flow). Set this in `hazo_auth_config.ini`:
 
 ```ini
 [hazo_auth__ui_shell]
-# Options: test_sidebar | standalone
+# Options: standalone (default) | test_sidebar
 layout_mode = standalone
 vertical_center = auto  # 'auto' enables vertical centering when navbar is present
 # Optional tweaks for the standalone header wrapper/classes:
@@ -1634,11 +1634,13 @@ vertical_center = auto  # 'auto' enables vertical centering when navbar is prese
 # standalone_content_class = mx-auto w-full max-w-4xl rounded-2xl border bg-card
 ```
 
-- `test_sidebar`: keeps the developer sidebar (perfect for the demo workspace or Storybook screenshots).
-- `standalone`: renders the page body directly so it inherits your own app shell, layout, and theme tokens.
+- `standalone` (default): renders the page body directly so it inherits your own app shell, layout, and theme tokens.
+- `test_sidebar`: keeps the developer sidebar. Opt-in only, meant for this package's own demo/dev app — do not set this in consuming apps.
 - `vertical_center`: controls vertical centering of auth content (`auto` enables centering when navbar is present)
 - The wrapper and content class overrides let you align spacing/borders with your design system without editing package code.
 
+**`pages/*` vs `components/layouts/*`:** The `hazo_auth/pages/*` exports (e.g. `hazo_auth/pages/login`, `/register`, etc.) are full-screen pages meant to be rendered at page root by consumers — they should not be wrapped in a fixed-width card/container. If you need an embedded/card-style form (e.g. inside a modal or a section of an existing page), use the bare `components/layouts/login` component with `layout="form_only"` instead.
+
 ### Authentication Page Navbar
 
 **The navbar now works automatically** - zero-config server page components include the navbar based on configuration without manual wrapping.

package/cli-src/lib/ui_shell_config.server.ts

@@ -27,11 +27,15 @@ export type UiShellConfig = {
 /**
  * Reads ui shell configuration controlling whether pages use the sidebar test shell
  * or a clean standalone wrapper that inherits consumer project styling.
+ *
+ * `standalone` is the default so consuming apps get a clean wrapper out of the box.
+ * `test_sidebar` must be explicitly opted into via config and is intended for use
+ * by this package's own demo/dev app only.
  */
 export function get_ui_shell_config(): UiShellConfig {
   const section = "hazo_auth__ui_shell";
 
-  const layoutModeValue = get_config_value(section, "layout_mode", "test_sidebar").toLowerCase();
+  const layoutModeValue = get_config_value(section, "layout_mode", "standalone").toLowerCase();
   const layout_mode: UiShellLayoutMode =
     layoutModeValue === "standalone" ? "standalone" : "test_sidebar";
 

package/dist/client.d.ts

@@ -12,6 +12,8 @@ export * from "./components/layouts/shared/utils/validation.js";
 export { requestGoogleScopes } from "./lib/auth/request_google_scopes.js";
 export { PermissionDeniedDialog } from "./components/permission_denied_dialog.client.js";
 export type { PermissionDeniedDialogProps, PermissionDeniedDetails } from "./components/permission_denied_dialog.client";
+export { UserPickerSelect, UserAvatar, userDisplayName } from "./components/user_picker_select.js";
+export type { UserPickerSelectProps, UserAvatarProps, PickableUser, } from "./components/user_picker_select";
 export { AuthIssueCard, registerAuthIssueCardRenderer } from './admin-issues/plugin.client.js';
 export { PermissionDeniedProvider, showPermissionDeniedDialog, handlePermissionDenied, fetchWithPermissionCapture, } from './admin-issues/permission_denied_provider.client.js';
 export type { PermissionDeniedProviderProps } from './admin-issues/permission_denied_provider.client';

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAYA,cAAc,oBAAoB,CAAC;AAInC,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAInI,OAAO,EAAE,EAAE,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAIpD,cAAc,uBAAuB,CAAC;AAItC,OAAO,EAAE,eAAe,EAAE,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AACjH,OAAO,EAAE,aAAa,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAC3G,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,iDAAiD,CAAC;AAC7G,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AACnH,YAAY,EAAE,YAAY,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAC;AAGvI,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAIxG,cAAc,8CAA8C,CAAC;AAG7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAGvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AACtF,YAAY,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AAGzH,OAAO,EAAE,aAAa,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAG5F,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,kDAAkD,CAAC;AAC1D,YAAY,EAAE,6BAA6B,EAAE,MAAM,kDAAkD,CAAC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAYA,cAAc,oBAAoB,CAAC;AAInC,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAInI,OAAO,EAAE,EAAE,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAIpD,cAAc,uBAAuB,CAAC;AAItC,OAAO,EAAE,eAAe,EAAE,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AACjH,OAAO,EAAE,aAAa,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAC3G,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,iDAAiD,CAAC;AAC7G,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AACnH,YAAY,EAAE,YAAY,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAC;AAGvI,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAIxG,cAAc,8CAA8C,CAAC;AAG7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAGvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AACtF,YAAY,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AAKzH,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAChG,YAAY,EACV,qBAAqB,EACrB,eAAe,EACf,YAAY,GACb,MAAM,iCAAiC,CAAC;AAGzC,OAAO,EAAE,aAAa,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAG5F,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,kDAAkD,CAAC;AAC1D,YAAY,EAAE,6BAA6B,EAAE,MAAM,kDAAkD,CAAC"}

package/dist/client.js

@@ -33,6 +33,10 @@ export * from "./components/layouts/shared/utils/validation.js";
 export { requestGoogleScopes } from "./lib/auth/request_google_scopes.js";
 // section: permission_denied_dialog_exports
 export { PermissionDeniedDialog } from "./components/permission_denied_dialog.client.js";
+// section: user_picker_exports
+// Reusable avatar + username dropdown for choosing a user (issue owner,
+// assignee, mention, etc.). Data-agnostic — caller supplies the candidate list.
+export { UserPickerSelect, UserAvatar, userDisplayName } from "./components/user_picker_select.js";
 // admin-issues plugin (client card renderer)
 export { AuthIssueCard, registerAuthIssueCardRenderer } from './admin-issues/plugin.client.js';
 // permission-denied provider + fetch helper

package/dist/components/user_picker_select.d.ts

@@ -0,0 +1,58 @@
+import * as React from "react";
+export interface PickableUser {
+    /** Stable id — the value the picker commits. */
+    user_id: string;
+    /** Display name; falls back to email, then the id. */
+    name?: string | null;
+    email?: string | null;
+    /** Profile picture URL; absent/failed → tinted initials. */
+    profile_picture_url?: string | null;
+}
+export interface UserPickerSelectProps {
+    /** Candidate users to choose from. */
+    users: PickableUser[];
+    /** Selected user_id; null (or "") means unassigned. */
+    value: string | null;
+    /** Fired with the new user_id, or null when the unassigned row is picked. */
+    onChange: (userId: string | null) => void;
+    /** Prepend an "Unassigned" row. Default true. */
+    includeUnassigned?: boolean;
+    /** Label for the unassigned row. Default "Unassigned". */
+    unassignedLabel?: string;
+    /** Placeholder shown when nothing is selected. Default "Select user". */
+    placeholder?: string;
+    disabled?: boolean;
+    /** Control + avatar sizing. Default "default". */
+    size?: "sm" | "default";
+    /** Extra classes for the trigger. */
+    className?: string;
+    /**
+     * Classes for the portalled dropdown panel. The list renders in a body-level
+     * portal, so it escapes any theme tokens scoped to an ancestor — pass classes
+     * here when the surrounding surface pins its own tokens.
+     */
+    contentClassName?: string;
+    /** Inline styles for the portalled dropdown panel (e.g. pinned CSS token vars). */
+    contentStyle?: React.CSSProperties;
+    "aria-label"?: string;
+}
+/** name → email → id, so a row is never blank. */
+export declare function userDisplayName(u: PickableUser): string;
+export interface UserAvatarProps {
+    user?: PickableUser | null;
+    size?: "sm" | "default";
+    className?: string;
+}
+/**
+ * Standalone avatar: the profile picture when present, else tinted initials,
+ * else a muted person glyph for the empty/unassigned slot. Exported so callers
+ * can reuse the exact same avatar outside the picker (cards, headers, etc.).
+ */
+export declare function UserAvatar({ user, size, className }: UserAvatarProps): React.JSX.Element;
+/**
+ * A Select whose rows show a profile picture + username. The trigger mirrors the
+ * selected row (Radix `SelectValue` copies the item's children), so the chosen
+ * user's avatar + name show in the closed control automatically.
+ */
+export declare function UserPickerSelect({ users, value, onChange, includeUnassigned, unassignedLabel, placeholder, disabled, size, className, contentClassName, contentStyle, "aria-label": ariaLabel, }: UserPickerSelectProps): React.JSX.Element;
+//# sourceMappingURL=user_picker_select.d.ts.map

package/dist/components/user_picker_select.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user_picker_select.d.ts","sourceRoot":"","sources":["../../src/components/user_picker_select.tsx"],"names":[],"mappings":"AASA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAa/B,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,4DAA4D;IAC5D,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,qBAAqB;IACpC,sCAAsC;IACtC,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,uDAAuD;IACvD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,6EAA6E;IAC7E,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC1C,iDAAiD;IACjD,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,0DAA0D;IAC1D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,kDAAkD;IAClD,IAAI,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACxB,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mFAAmF;IACnF,YAAY,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC;IACnC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAOD,kDAAkD;AAClD,wBAAgB,eAAe,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,CAEvD;AA+BD,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3B,IAAI,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,EAAE,IAAI,EAAE,IAAgB,EAAE,SAAS,EAAE,EAAE,eAAe,qBAsBhF;AAGD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,KAAK,EACL,KAAK,EACL,QAAQ,EACR,iBAAwB,EACxB,eAA8B,EAC9B,WAA2B,EAC3B,QAAQ,EACR,IAAgB,EAChB,SAAS,EACT,gBAAgB,EAChB,YAAY,EACZ,YAAY,EAAE,SAAS,GACxB,EAAE,qBAAqB,qBAqCvB"}

package/dist/components/user_picker_select.js

@@ -0,0 +1,76 @@
+// file_description: reusable user-picker dropdown — a Select whose rows render a
+// profile picture (or tinted initials) beside the user's name. Client-safe;
+// built on the shadcn Avatar + Select primitives. Data-agnostic: the caller
+// supplies the candidate users and owns fetching them (e.g. via
+// hazo_get_user_profiles server-side).
+// section: client_directive
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { UserRound } from "lucide-react";
+import { Avatar, AvatarImage, AvatarFallback } from "./ui/avatar.js";
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue, } from "./ui/select.js";
+import { cn } from "../lib/utils.js";
+// Radix Select forbids an empty-string item value, so the unassigned row uses a
+// sentinel that is mapped back to null across the component boundary.
+const UNASSIGNED = "__hazo_unassigned__";
+// section: helpers
+/** name → email → id, so a row is never blank. */
+export function userDisplayName(u) {
+    return (u.name && u.name.trim()) || (u.email && u.email.trim()) || u.user_id;
+}
+/** Up-to-two-letter initials from a label. */
+function initialsOf(label) {
+    const s = label.trim();
+    if (!s)
+        return "?";
+    const parts = s.split(/[\s@._-]+/).filter(Boolean);
+    if (parts.length === 0)
+        return s.slice(0, 2).toUpperCase();
+    if (parts.length === 1)
+        return parts[0].slice(0, 2).toUpperCase();
+    return (parts[0][0] + parts[1][0]).toUpperCase();
+}
+// Deterministic fallback tint from a key, so the same user keeps one colour.
+const TINTS = [
+    "bg-indigo-500 text-white",
+    "bg-emerald-500 text-white",
+    "bg-violet-500 text-white",
+    "bg-amber-500 text-white",
+    "bg-rose-500 text-white",
+    "bg-cyan-500 text-white",
+    "bg-sky-500 text-white",
+    "bg-fuchsia-500 text-white",
+];
+function tintOf(key) {
+    let hash = 0;
+    for (let i = 0; i < key.length; i++)
+        hash = (hash * 31 + key.charCodeAt(i)) | 0;
+    return TINTS[Math.abs(hash) % TINTS.length];
+}
+/**
+ * Standalone avatar: the profile picture when present, else tinted initials,
+ * else a muted person glyph for the empty/unassigned slot. Exported so callers
+ * can reuse the exact same avatar outside the picker (cards, headers, etc.).
+ */
+export function UserAvatar({ user, size = "default", className }) {
+    const dim = size === "sm" ? "h-5 w-5" : "h-6 w-6";
+    if (!user) {
+        return (_jsx(Avatar, { className: cn(dim, "bg-muted text-muted-foreground", className), children: _jsx(AvatarFallback, { className: "bg-transparent", children: _jsx(UserRound, { className: size === "sm" ? "h-3 w-3" : "h-3.5 w-3.5" }) }) }));
+    }
+    const label = userDisplayName(user);
+    return (_jsxs(Avatar, { className: cn(dim, className), children: [user.profile_picture_url ? (_jsx(AvatarImage, { src: user.profile_picture_url, alt: "" })) : null, _jsx(AvatarFallback, { className: cn("text-[9px] font-semibold", tintOf(user.user_id)), children: initialsOf(label) })] }));
+}
+// section: user_picker_select
+/**
+ * A Select whose rows show a profile picture + username. The trigger mirrors the
+ * selected row (Radix `SelectValue` copies the item's children), so the chosen
+ * user's avatar + name show in the closed control automatically.
+ */
+export function UserPickerSelect({ users, value, onChange, includeUnassigned = true, unassignedLabel = "Unassigned", placeholder = "Select user", disabled, size = "default", className, contentClassName, contentStyle, "aria-label": ariaLabel, }) {
+    const current = value ? value : includeUnassigned ? UNASSIGNED : "";
+    const handleChange = (next) => {
+        onChange(next === UNASSIGNED ? null : next);
+    };
+    const triggerSize = size === "sm" ? "h-7 gap-1.5 text-xs" : "h-9 gap-2 text-sm";
+    return (_jsxs(Select, { value: current || undefined, onValueChange: handleChange, disabled: disabled, children: [_jsx(SelectTrigger, { "aria-label": ariaLabel !== null && ariaLabel !== void 0 ? ariaLabel : "Select user", className: cn(triggerSize, "min-w-0 [&>span]:truncate", className), children: _jsx(SelectValue, { placeholder: placeholder }) }), _jsxs(SelectContent, { className: contentClassName, style: contentStyle, children: [includeUnassigned ? (_jsx(SelectItem, { value: UNASSIGNED, children: _jsxs("span", { className: "flex items-center gap-2", children: [_jsx(UserAvatar, { user: null, size: size }), _jsx("span", { className: "truncate", children: unassignedLabel })] }) })) : null, users.map((u) => (_jsx(SelectItem, { value: u.user_id, children: _jsxs("span", { className: "flex items-center gap-2", children: [_jsx(UserAvatar, { user: u, size: size }), _jsx("span", { className: "truncate", children: userDisplayName(u) })] }) }, u.user_id)))] })] }));
+}

package/dist/lib/ui_shell_config.server.d.ts

@@ -17,6 +17,10 @@ export type UiShellConfig = {
 /**
  * Reads ui shell configuration controlling whether pages use the sidebar test shell
  * or a clean standalone wrapper that inherits consumer project styling.
+ *
+ * `standalone` is the default so consuming apps get a clean wrapper out of the box.
+ * `test_sidebar` must be explicitly opted into via config and is intended for use
+ * by this package's own demo/dev app only.
  */
 export declare function get_ui_shell_config(): UiShellConfig;
 //# sourceMappingURL=ui_shell_config.server.d.ts.map

package/dist/lib/ui_shell_config.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ui_shell_config.server.d.ts","sourceRoot":"","sources":["../../src/lib/ui_shell_config.server.ts"],"names":[],"mappings":"AAEA,OAAO,aAAa,CAAC;AAIrB,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAG9E,MAAM,MAAM,iBAAiB,GAAG,cAAc,GAAG,YAAY,CAAC;AAE9D,MAAM,MAAM,aAAa,GAAG;IAC1B,WAAW,EAAE,iBAAiB,CAAC;IAC/B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,wBAAwB,EAAE,MAAM,CAAC;IACjC,wBAAwB,EAAE,MAAM,CAAC;IACjC,uBAAuB,EAAE,OAAO,CAAC;IACjC,2BAA2B,EAAE,OAAO,CAAC;IACrC,+CAA+C;IAC/C,MAAM,EAAE,YAAY,CAAC;IACrB,mDAAmD;IACnD,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC;AAGF;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,aAAa,CA6DnD"}
+{"version":3,"file":"ui_shell_config.server.d.ts","sourceRoot":"","sources":["../../src/lib/ui_shell_config.server.ts"],"names":[],"mappings":"AAEA,OAAO,aAAa,CAAC;AAIrB,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAG9E,MAAM,MAAM,iBAAiB,GAAG,cAAc,GAAG,YAAY,CAAC;AAE9D,MAAM,MAAM,aAAa,GAAG;IAC1B,WAAW,EAAE,iBAAiB,CAAC;IAC/B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,wBAAwB,EAAE,MAAM,CAAC;IACjC,wBAAwB,EAAE,MAAM,CAAC;IACjC,uBAAuB,EAAE,OAAO,CAAC;IACjC,2BAA2B,EAAE,OAAO,CAAC;IACrC,+CAA+C;IAC/C,MAAM,EAAE,YAAY,CAAC;IACrB,mDAAmD;IACnD,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC;AAGF;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,IAAI,aAAa,CA6DnD"}

package/dist/lib/ui_shell_config.server.js

@@ -8,10 +8,14 @@ import { get_navbar_config } from "./navbar_config.server.js";
 /**
  * Reads ui shell configuration controlling whether pages use the sidebar test shell
  * or a clean standalone wrapper that inherits consumer project styling.
+ *
+ * `standalone` is the default so consuming apps get a clean wrapper out of the box.
+ * `test_sidebar` must be explicitly opted into via config and is intended for use
+ * by this package's own demo/dev app only.
  */
 export function get_ui_shell_config() {
     const section = "hazo_auth__ui_shell";
-    const layoutModeValue = get_config_value(section, "layout_mode", "test_sidebar").toLowerCase();
+    const layoutModeValue = get_config_value(section, "layout_mode", "standalone").toLowerCase();
     const layout_mode = layoutModeValue === "standalone" ? "standalone" : "test_sidebar";
     const standalone_heading = get_config_value(section, "standalone_heading", "Welcome to hazo auth");
     const standalone_description = get_config_value(section, "standalone_description", "Reuse the packaged authentication flows while inheriting your existing app shell styles.");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hazo_auth",
-  "version": "10.4.13",
+  "version": "10.6.0",
   "description": "Zero-config authentication UI components for Next.js with RBAC, OAuth, scope-based multi-tenancy, and invitations",
   "keywords": [
     "authentication",
@@ -262,14 +262,14 @@
     "@radix-ui/react-switch": "^1.2.0",
     "@radix-ui/react-tabs": "^1.1.0",
     "@radix-ui/react-tooltip": "^1.2.0",
-    "hazo_api": "^2.4.0",
+    "hazo_api": "^2.5.1",
     "hazo_config": "^2.4.1",
     "hazo_connect": "^3.9.0",
-    "hazo_core": "^1.2.0",
+    "hazo_core": "^1.2.1",
     "hazo_logs": "^2.1.1",
     "hazo_notify": "^6.1.4",
-    "hazo_secure": "^1.1.0",
-    "hazo_ui": "^4.6.2",
+    "hazo_secure": "^1.3.0",
+    "hazo_ui": "^4.9.0",
     "input-otp": "^1.4.0",
     "lucide-react": "^0.553.0",
     "next": "^14.0.0",
@@ -408,7 +408,7 @@
     "hazo_core": "^1.2.1",
     "hazo_logs": "^2.1.1",
     "hazo_notify": "^6.1.4",
-    "hazo_ui": "^4.7.0",
+    "hazo_ui": "^4.9.0",
     "input-otp": "^1.4.0",
     "jest": "^30.2.0",
     "jest-environment-jsdom": "^30.0.0",