hazo_auth 10.7.1 → 10.8.0

package/README.md

@@ -2,6 +2,13 @@
 
 A reusable authentication UI component package powered by Next.js, TailwindCSS, and shadcn. It integrates `hazo_config` for configuration management and `hazo_connect` for data access, enabling future components to stay aligned with platform conventions.
 
+### What's New in v10.8.0
+
+- **Firm branding gained `app_title` + `footer`.** `FirmBranding` (from `use_firm_branding`) now carries `app_title?: string` and `footer?: { public?: FooterConfig; app?: FooterConfig }` alongside the existing logo/color fields — migration `022_add_app_title_and_footer_to_hazo_scopes.sql` adds the backing `app_title`/`footer_config` columns to `hazo_scopes`. The scope-management branding editor exposes both as new form inputs.
+- **`firm_branding_to_brand_identity()`** (`hazo_auth/src/components/layouts/shared/firm_branding_to_brand_identity.ts`) — maps a `FirmBranding` record (hex colors) into a `hazo_theme` `BrandIdentity` (HSL channel strings), for consumers rendering hazo_ui's `Logo`/`AppHeader`/`AppFooter` chrome components from stored firm branding.
+- Server-side `validate_branding` now rejects footer link/social hrefs that resolve to an unsafe scheme (`javascript:`, `data:`, etc.) before persisting, as defense-in-depth alongside hazo_ui's client-side `safeHref()`.
+- `hazo_theme` optional peer dependency range bumped to `^0.2.0`.
+
 ### What's New in v10.4.13
 
 - **`validate_session_secret_config()`** exported from `hazo_auth/server-lib` — hard startup validator that throws `HazoConfigError` (code `HAZO_AUTH_CONFIG`) when `JWT_SECRET` is unset or shorter than 32 chars. Call it from a Next.js `instrumentation.ts` `register()` hook to fail boot loudly instead of hitting the silent split-brain a bad/missing secret otherwise causes (edge proxy bounces to `/login` while server-side auth falls back to unsigned cookies and still considers the user authenticated).

package/cli-src/cli/generate.ts

@@ -64,6 +64,7 @@ const ROUTES: RouteDefinition[] = [
   { name: "nextauth_post", path: "api/auth/[...nextauth]", method: "POST", export_name: "nextauthPOST" },
   { name: "oauth_google_callback", path: "api/hazo_auth/oauth/google/callback", method: "GET", export_name: "oauthGoogleCallbackGET" },
   { name: "set_password", path: "api/hazo_auth/set_password", method: "POST", export_name: "setPasswordPOST" },
+  { name: "create_firm", path: "api/hazo_auth/create_firm", method: "POST", export_name: "createFirmPOST" },
   // Static assets (default auth-page images served from the package's dist/assets/images).
   // Without this route the default image_src (/api/hazo_auth/assets/login_default.jpg) 404s
   // and login/register/etc. render with an empty image panel.
@@ -77,6 +78,7 @@ const PAGES: PageDefinition[] = [
   { name: "reset_password", path: "hazo_auth/reset_password", component_name: "ResetPasswordPage", import_path: "hazo_auth/pages/reset_password" },
   { name: "verify_email", path: "hazo_auth/verify_email", component_name: "VerifyEmailPage", import_path: "hazo_auth/pages/verify_email" },
   { name: "my_settings", path: "hazo_auth/my_settings", component_name: "MySettingsPage", import_path: "hazo_auth/pages/my_settings" },
+  { name: "create_firm", path: "hazo_auth/create_firm", component_name: "CreateFirmPage", import_path: "hazo_auth/pages/create_firm" },
 ];
 // Note: Using barrel export "hazo_auth/pages" which maps to dist/server_pages/index.js in package.json exports
 

package/cli-src/lib/services/branding_service.ts

@@ -1,6 +1,7 @@
 // file_description: service for firm branding operations with inheritance support
 // section: imports
 import type { HazoConnectAdapter } from "hazo_connect";
+import type { FooterConfig } from "hazo_theme";
 import {
   type FirmBranding,
   type ScopeRecord,
@@ -28,6 +29,8 @@ export type UpdateBrandingData = {
   primary_color?: string | null;
   secondary_color?: string | null;
   tagline?: string | null;
+  app_title?: string | null;
+  footer?: { public?: FooterConfig; app?: FooterConfig } | null;
 };
 
 // section: validation
@@ -39,6 +42,47 @@ function is_valid_hex_color(color: string): boolean {
   return /^#[0-9A-Fa-f]{6}$/.test(color);
 }
 
+/**
+ * Validates an admin-supplied href against a scheme allowlist. Blocks
+ * `javascript:`/`data:`/`vbscript:` URIs that would become stored XSS when the
+ * value is later rendered into an `<a href>` (defense-in-depth alongside the
+ * render-time `safeHref` filter in hazo_ui's chrome components). Allows
+ * http(s), mailto, and same-origin absolute paths (`/…` but not `//…`).
+ */
+function is_safe_href(url: string): boolean {
+  const t = url.trim().toLowerCase();
+  if (t.startsWith("http://") || t.startsWith("https://") || t.startsWith("mailto:")) {
+    return true;
+  }
+  return t.startsWith("/") && !t.startsWith("//");
+}
+
+/**
+ * Walks every admin-configurable href in a footer config (column links + social
+ * links across both public/app variants) and returns the first unsafe one, or
+ * null when all are safe.
+ */
+function first_unsafe_footer_href(
+  footer: UpdateBrandingData["footer"],
+): string | null {
+  if (!footer) return null;
+  for (const variant of ["public", "app"] as const) {
+    const cfg: FooterConfig | undefined = footer[variant];
+    if (!cfg) continue;
+    for (const column of cfg.columns ?? []) {
+      for (const link of column.links ?? []) {
+        if (link?.href && !is_safe_href(link.href)) return link.href;
+      }
+    }
+    if (cfg.social) {
+      for (const handle of Object.values(cfg.social)) {
+        if (typeof handle === "string" && handle && !is_safe_href(handle)) return handle;
+      }
+    }
+  }
+  return null;
+}
+
 /**
  * Validates branding data
  */
@@ -66,6 +110,20 @@ export function validate_branding(data: UpdateBrandingData): {
     return { valid: false, error: "Logo URL must be 500 characters or less" };
   }
 
+  if (data.app_title && typeof data.app_title === "string" && data.app_title.length > 200) {
+    return { valid: false, error: "App title must be 200 characters or less" };
+  }
+
+  // Reject unsafe footer link/social hrefs (javascript:/data: etc.) before they
+  // are persisted to footer_config and later rendered into <a href>.
+  const bad_href = first_unsafe_footer_href(data.footer);
+  if (bad_href) {
+    return {
+      valid: false,
+      error: "Footer links must use http(s), mailto, or same-origin (/…) URLs",
+    };
+  }
+
   return { valid: true };
 }
 
@@ -240,6 +298,8 @@ export async function update_branding(
     const updated_primary = data.primary_color !== undefined ? data.primary_color : current.primary_color;
     const updated_secondary = data.secondary_color !== undefined ? data.secondary_color : current.secondary_color;
     const updated_tagline = data.tagline !== undefined ? data.tagline : current.tagline;
+    const updated_app_title = data.app_title !== undefined ? data.app_title : current.app_title;
+    const updated_footer = data.footer !== undefined ? data.footer : current.footer;
 
     // Update the scope with individual fields
     const update_result = await update_scope(adapter, scope_id, {
@@ -247,6 +307,8 @@ export async function update_branding(
       primary_color: updated_primary || null,
       secondary_color: updated_secondary || null,
       tagline: updated_tagline || null,
+      app_title: updated_app_title || null,
+      footer: updated_footer || null,
     });
 
     if (!update_result.success) {
@@ -317,6 +379,8 @@ export async function replace_branding(
       primary_color: branding?.primary_color || null,
       secondary_color: branding?.secondary_color || null,
       tagline: branding?.tagline || null,
+      app_title: branding?.app_title || null,
+      footer: branding?.footer || null,
     });
 
     if (!update_result.success) {

package/cli-src/lib/services/invitation_service.ts

@@ -2,6 +2,7 @@
 // section: imports
 import type { HazoConnectAdapter } from "hazo_connect";
 import { createCrudService } from "hazo_connect/server";
+import { randomBytes } from "crypto";
 import { create_app_logger } from "../app_logger.js";
 import { sanitize_error_for_user } from "../utils/error_sanitizer.js";
 import { assign_user_scope } from "./user_scope_service.js";
@@ -14,7 +15,10 @@ export type InvitationStatus = "PENDING" | "ACCEPTED" | "EXPIRED" | "REVOKED";
 export type InvitationRecord = {
   id: string;
   email_address: string;
+  /** Opaque unique token identifying this invitation (e.g. for an accept link). */
+  token: string;
   scope_id: string;
+  root_scope_id: string;
   role_id: string;
   status: InvitationStatus;
   invited_by: string | null;
@@ -48,6 +52,15 @@ const MAX_PENDING_PER_EMAIL = 5;
 
 // section: helpers
 
+/**
+ * Generates an opaque, unique invitation token.
+ * `hazo_invitations.token` is `NOT NULL UNIQUE` in the schema (migration 011 /
+ * db_setup_sqlite.sql / db_setup_postgres.sql) — every insert must supply one.
+ */
+function generate_invitation_token(): string {
+  return randomBytes(32).toString("hex");
+}
+
 /**
  * Creates a new invitation
  */
@@ -85,9 +98,19 @@ export async function create_invitation(
     const expires_hours = data.expires_in_hours || DEFAULT_EXPIRY_HOURS;
     const expires_at = new Date(now.getTime() + expires_hours * 60 * 60 * 1000);
 
+    // `hazo_invitations.root_scope_id` is NOT NULL — same computation
+    // `assign_user_scope` (user_scope_service.ts) uses for the analogous
+    // `hazo_user_scopes.root_scope_id` column: resolve the scope's root
+    // ancestor, falling back to the scope itself if it IS the root (or the
+    // computation fails).
+    const computed_root_scope_id = await get_root_scope_id(adapter, data.scope_id);
+    const root_scope_id = computed_root_scope_id || data.scope_id;
+
     const inserted = await invitation_service.insert({
       email_address: data.email_address.toLowerCase(),
+      token: generate_invitation_token(),
       scope_id: data.scope_id,
+      root_scope_id,
       role_id: data.role_id,
       status: "PENDING",
       invited_by: data.invited_by || null,

package/cli-src/lib/services/scope_service.ts

@@ -2,6 +2,7 @@
 // section: imports
 import type { HazoConnectAdapter } from "hazo_connect";
 import { createCrudService } from "hazo_connect/server";
+import type { FooterConfig } from "hazo_theme";
 import { create_app_logger } from "../app_logger.js";
 import { sanitize_error_for_user } from "../utils/error_sanitizer.js";
 
@@ -24,6 +25,8 @@ export type FirmBranding = {
   primary_color?: string | null;
   secondary_color?: string | null;
   tagline?: string | null;
+  app_title?: string | null;
+  footer?: { public?: FooterConfig; app?: FooterConfig } | null;
 };
 
 export type ScopeRecord = {
@@ -36,6 +39,8 @@ export type ScopeRecord = {
   primary_color: string | null;
   secondary_color: string | null;
   tagline: string | null;
+  app_title: string | null;
+  footer: { public?: FooterConfig; app?: FooterConfig } | null;
   created_at: string;
   changed_at: string;
 };
@@ -56,6 +61,8 @@ export type CreateScopeData = {
   primary_color?: string | null;
   secondary_color?: string | null;
   tagline?: string | null;
+  app_title?: string | null;
+  footer?: { public?: FooterConfig; app?: FooterConfig } | null;
 };
 
 export type UpdateScopeData = {
@@ -67,6 +74,8 @@ export type UpdateScopeData = {
   primary_color?: string | null;
   secondary_color?: string | null;
   tagline?: string | null;
+  app_title?: string | null;
+  footer?: { public?: FooterConfig; app?: FooterConfig } | null;
 };
 
 export type ScopeTreeNode = ScopeRecord & {
@@ -88,6 +97,12 @@ function normalize_scope_record(raw: Record<string, unknown>): ScopeRecord {
     primary_color: (raw.primary_color as string | null) || null,
     secondary_color: (raw.secondary_color as string | null) || null,
     tagline: (raw.tagline as string | null) || null,
+    app_title: (raw.app_title as string | null) || null,
+    footer: (() => {
+      const raw_fc = raw.footer_config;
+      if (typeof raw_fc !== "string" || raw_fc.length === 0) return null;
+      try { return JSON.parse(raw_fc); } catch { return null; }
+    })(),
     created_at: raw.created_at as string,
     changed_at: raw.changed_at as string,
   };
@@ -103,6 +118,8 @@ export function extract_branding(scope: ScopeRecord): FirmBranding | null {
   if (scope.primary_color) branding.primary_color = scope.primary_color;
   if (scope.secondary_color) branding.secondary_color = scope.secondary_color;
   if (scope.tagline) branding.tagline = scope.tagline;
+  if (scope.app_title) branding.app_title = scope.app_title;
+  if (scope.footer) branding.footer = scope.footer;
   return Object.keys(branding).length > 0 ? branding : null;
 }
 
@@ -110,7 +127,7 @@ export function extract_branding(scope: ScopeRecord): FirmBranding | null {
  * Checks if a scope has any branding set
  */
 export function has_branding(scope: ScopeRecord): boolean {
-  return !!(scope.logo_url || scope.primary_color || scope.secondary_color || scope.tagline);
+  return !!(scope.logo_url || scope.primary_color || scope.secondary_color || scope.tagline || scope.app_title || scope.footer);
 }
 
 /**
@@ -303,6 +320,8 @@ export async function create_scope(
       primary_color: data.primary_color || null,
       secondary_color: data.secondary_color || null,
       tagline: data.tagline || null,
+      app_title: data.app_title || null,
+      footer_config: data.footer ? JSON.stringify(data.footer) : null,
       created_at: now,
       changed_at: now,
     };
@@ -427,6 +446,12 @@ export async function update_scope(
     if (data.tagline !== undefined) {
       update_data.tagline = data.tagline;
     }
+    if (data.app_title !== undefined) {
+      update_data.app_title = data.app_title;
+    }
+    if (data.footer !== undefined) {
+      update_data.footer_config = data.footer ? JSON.stringify(data.footer) : null;
+    }
 
     const updated = await scope_service.updateById(scope_id, update_data);
 
@@ -794,6 +819,8 @@ export async function ensure_default_system_scope(
       primary_color: null,
       secondary_color: null,
       tagline: null,
+      app_title: null,
+      footer_config: null,
       created_at: now,
       changed_at: now,
     });

package/dist/cli/generate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../src/cli/generate.ts"],"names":[],"mappings":"AAqBA,MAAM,MAAM,eAAe,GAAG;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf,CAAC;AAqMF,wBAAgB,eAAe,CAAC,OAAO,GAAE,eAAoB,GAAG,IAAI,CA8DnE"}
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../src/cli/generate.ts"],"names":[],"mappings":"AAqBA,MAAM,MAAM,eAAe,GAAG;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf,CAAC;AAuMF,wBAAgB,eAAe,CAAC,OAAO,GAAE,eAAoB,GAAG,IAAI,CA8DnE"}

package/dist/cli/generate.js

@@ -41,6 +41,7 @@ const ROUTES = [
     { name: "nextauth_post", path: "api/auth/[...nextauth]", method: "POST", export_name: "nextauthPOST" },
     { name: "oauth_google_callback", path: "api/hazo_auth/oauth/google/callback", method: "GET", export_name: "oauthGoogleCallbackGET" },
     { name: "set_password", path: "api/hazo_auth/set_password", method: "POST", export_name: "setPasswordPOST" },
+    { name: "create_firm", path: "api/hazo_auth/create_firm", method: "POST", export_name: "createFirmPOST" },
     // Static assets (default auth-page images served from the package's dist/assets/images).
     // Without this route the default image_src (/api/hazo_auth/assets/login_default.jpg) 404s
     // and login/register/etc. render with an empty image panel.
@@ -53,6 +54,7 @@ const PAGES = [
     { name: "reset_password", path: "hazo_auth/reset_password", component_name: "ResetPasswordPage", import_path: "hazo_auth/pages/reset_password" },
     { name: "verify_email", path: "hazo_auth/verify_email", component_name: "VerifyEmailPage", import_path: "hazo_auth/pages/verify_email" },
     { name: "my_settings", path: "hazo_auth/my_settings", component_name: "MySettingsPage", import_path: "hazo_auth/pages/my_settings" },
+    { name: "create_firm", path: "hazo_auth/create_firm", component_name: "CreateFirmPage", import_path: "hazo_auth/pages/create_firm" },
 ];
 // Note: Using barrel export "hazo_auth/pages" which maps to dist/server_pages/index.js in package.json exports
 // section: helpers

package/dist/components/layouts/create_firm/index.d.ts

@@ -34,6 +34,12 @@ export type CreateFirmLayoutProps = {
     org_structure_placeholder?: string;
     /** Default value for org structure */
     default_org_structure?: string;
+    /**
+     * Show the org structure field. When false, the field is hidden from the
+     * form but {@link default_org_structure} is still submitted (the API
+     * requires org_structure to be non-empty).
+     */
+    show_org_structure?: boolean;
     /** Label for submit button */
     submit_button_label?: string;
     /** Success message shown after firm creation */
@@ -52,6 +58,6 @@ export type CreateFirmLayoutProps = {
         error: (message: string, data?: Record<string, unknown>) => void;
     };
 };
-export default function CreateFirmLayout({ image_src, keyword, keyword_lower, verb, image_alt, image_background_color, banner_body, heading, sub_heading, firm_name_label, firm_name_placeholder, org_structure_label, org_structure_placeholder, default_org_structure, submit_button_label, success_message, redirect_route, apiBasePath, onSuccess, button_colors, logger, }: CreateFirmLayoutProps): React.JSX.Element;
+export default function CreateFirmLayout({ image_src, keyword, keyword_lower, verb, image_alt, image_background_color, banner_body, heading, sub_heading, firm_name_label, firm_name_placeholder, org_structure_label, org_structure_placeholder, default_org_structure, show_org_structure, submit_button_label, success_message, redirect_route, apiBasePath, onSuccess, button_colors, logger, }: CreateFirmLayoutProps): React.JSX.Element;
 export { CreateFirmLayout };
 //# sourceMappingURL=index.d.ts.map

package/dist/components/layouts/create_firm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/layouts/create_firm/index.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAOlD,OAAO,EACL,KAAK,sBAAsB,EAC5B,MAAM,uCAAuC,CAAC;AAQ/C,MAAM,MAAM,qBAAqB,GAAG;IAClC,sCAAsC;IACtC,SAAS,EAAE,MAAM,GAAG,eAAe,CAAC;IACpC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gCAAgC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sCAAsC;IACtC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,oCAAoC;IACpC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0CAA0C;IAC1C,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,sCAAsC;IACtC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,8BAA8B;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,gDAAgD;IAChD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sCAAsC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,6BAA6B;IAC7B,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC,2BAA2B;IAC3B,MAAM,CAAC,EAAE;QACP,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAChE,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;KAClE,CAAC;CACH,CAAC;AAGF,MAAM,CAAC,OAAO,UAAU,gBAAgB,CAAC,EACvC,SAAS,EACT,OAAgB,EAChB,aAAsB,EACtB,IAAe,EACf,SAA2C,EAC3C,sBAAkC,EAClC,WAAyK,EACzK,OAAmC,EACnC,WAAuD,EACvD,eAAmC,EACnC,qBAA0D,EAC1D,mBAA8C,EAC9C,yBAA6D,EAC7D,qBAAsC,EACtC,mBAA0C,EAC1C,eAAwE,EACxE,cAAoB,EACpB,WAAW,EACX,SAAS,EACT,aAAa,EACb,MAAM,GACP,EAAE,qBAAqB,qBAuJvB;AAGD,OAAO,EAAE,gBAAgB,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/layouts/create_firm/index.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAOlD,OAAO,EACL,KAAK,sBAAsB,EAC5B,MAAM,uCAAuC,CAAC;AAQ/C,MAAM,MAAM,qBAAqB,GAAG;IAClC,sCAAsC;IACtC,SAAS,EAAE,MAAM,GAAG,eAAe,CAAC;IACpC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gCAAgC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sCAAsC;IACtC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,oCAAoC;IACpC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0CAA0C;IAC1C,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,sCAAsC;IACtC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,8BAA8B;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,gDAAgD;IAChD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sCAAsC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,6BAA6B;IAC7B,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC,2BAA2B;IAC3B,MAAM,CAAC,EAAE;QACP,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAChE,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;KAClE,CAAC;CACH,CAAC;AAGF,MAAM,CAAC,OAAO,UAAU,gBAAgB,CAAC,EACvC,SAAS,EACT,OAAgB,EAChB,aAAsB,EACtB,IAAe,EACf,SAA2C,EAC3C,sBAAkC,EAClC,WAAyK,EACzK,OAAmC,EACnC,WAAuD,EACvD,eAAmC,EACnC,qBAA0D,EAC1D,mBAA8C,EAC9C,yBAA6D,EAC7D,qBAAsC,EACtC,kBAAyB,EACzB,mBAA0C,EAC1C,eAAwE,EACxE,cAAoB,EACpB,WAAW,EACX,SAAS,EACT,aAAa,EACb,MAAM,GACP,EAAE,qBAAqB,qBAyJvB;AAGD,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/components/layouts/create_firm/index.js

@@ -11,7 +11,7 @@ import { CheckCircle, Building2 } from "lucide-react";
 import { use_create_firm_form, } from "./hooks/use_create_firm_form.js";
 import { useHazoAuthConfig } from "../../../contexts/hazo_auth_provider.js";
 // section: component
-export default function CreateFirmLayout({ image_src, keyword = "Firm", keyword_lower = "firm", verb = "Create", image_alt = `${verb} your ${keyword_lower}`, image_background_color = "#f1f5f9", banner_body = `${verb} your ${keyword_lower} to start using the application. You'll become the administrator of your ${keyword_lower} and can invite team members later.`, heading = `${verb} Your ${keyword}`, sub_heading = "Set up your organisation to get started", firm_name_label = `${keyword} Name`, firm_name_placeholder = `Enter your ${keyword_lower} name`, org_structure_label = "Organisation Structure", org_structure_placeholder = "e.g., Headquarters, Head Office", default_org_structure = "Headquarters", submit_button_label = `${verb} ${keyword}`, success_message = `Your ${keyword_lower} has been created successfully!`, redirect_route = "/", apiBasePath, onSuccess, button_colors, logger, }) {
+export default function CreateFirmLayout({ image_src, keyword = "Firm", keyword_lower = "firm", verb = "Create", image_alt = `${verb} your ${keyword_lower}`, image_background_color = "#f1f5f9", banner_body = `${verb} your ${keyword_lower} to start using the application. You'll become the administrator of your ${keyword_lower} and can invite team members later.`, heading = `${verb} Your ${keyword}`, sub_heading = "Set up your organisation to get started", firm_name_label = `${keyword} Name`, firm_name_placeholder = `Enter your ${keyword_lower} name`, org_structure_label = "Organisation Structure", org_structure_placeholder = "e.g., Headquarters, Head Office", default_org_structure = "Headquarters", show_org_structure = true, submit_button_label = `${verb} ${keyword}`, success_message = `Your ${keyword_lower} has been created successfully!`, redirect_route = "/", apiBasePath, onSuccess, button_colors, logger, }) {
     const { apiBasePath: contextApiBasePath } = useHazoAuthConfig();
     const resolvedApiBasePath = apiBasePath || contextApiBasePath;
     const form = use_create_firm_form({
@@ -33,7 +33,7 @@ export default function CreateFirmLayout({ image_src, keyword = "Firm", keyword_
             const value = e.target.value;
             formState.handleFieldChange(field, value);
         };
-        return (_jsxs(_Fragment, { children: [_jsx(FormFieldWrapper, { fieldId: "firm_name", label: firm_name_label, input: _jsx(Input, { id: "firm_name", ref: formState.firmNameRef, type: "text", value: formState.values.firm_name, onChange: (e) => handleInput("firm_name", e), onInput: (e) => handleInput("firm_name", e), placeholder: firm_name_placeholder, "aria-label": firm_name_label, className: "cls_create_firm_layout_field_input hazo-autofill-detect", autoComplete: "organization" }), errorMessage: formState.errors.firm_name }), _jsx(FormFieldWrapper, { fieldId: "org_structure", label: org_structure_label, input: _jsx(Input, { id: "org_structure", ref: formState.orgStructureRef, type: "text", value: formState.values.org_structure, onChange: (e) => handleInput("org_structure", e), onInput: (e) => handleInput("org_structure", e), placeholder: org_structure_placeholder, "aria-label": org_structure_label, className: "cls_create_firm_layout_field_input hazo-autofill-detect" }), errorMessage: formState.errors.org_structure })] }));
+        return (_jsxs(_Fragment, { children: [_jsx(FormFieldWrapper, { fieldId: "firm_name", label: firm_name_label, input: _jsx(Input, { id: "firm_name", ref: formState.firmNameRef, type: "text", value: formState.values.firm_name, onChange: (e) => handleInput("firm_name", e), onInput: (e) => handleInput("firm_name", e), placeholder: firm_name_placeholder, "aria-label": firm_name_label, className: "cls_create_firm_layout_field_input hazo-autofill-detect", autoComplete: "organization" }), errorMessage: formState.errors.firm_name }), show_org_structure && (_jsx(FormFieldWrapper, { fieldId: "org_structure", label: org_structure_label, input: _jsx(Input, { id: "org_structure", ref: formState.orgStructureRef, type: "text", value: formState.values.org_structure, onChange: (e) => handleInput("org_structure", e), onInput: (e) => handleInput("org_structure", e), placeholder: org_structure_placeholder, "aria-label": org_structure_label, className: "cls_create_firm_layout_field_input hazo-autofill-detect" }), errorMessage: formState.errors.org_structure }))] }));
     };
     // Show success message after firm creation
     if (form.isSuccess) {

package/dist/components/layouts/scope_management/components/branding_editor.d.ts

@@ -1,8 +1,14 @@
+import type { FooterConfig } from "hazo_theme";
 export type FirmBranding = {
     logo_url?: string;
     primary_color?: string;
     secondary_color?: string;
     tagline?: string;
+    app_title?: string;
+    footer?: {
+        public?: FooterConfig;
+        app?: FooterConfig;
+    };
 };
 export type BrandingEditorProps = {
     scopeId: string;

package/dist/components/layouts/scope_management/components/branding_editor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"branding_editor.d.ts","sourceRoot":"","sources":["../../../../../src/components/layouts/scope_management/components/branding_editor.tsx"],"names":[],"mappings":"AA8BA,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI,KAAK,IAAI,CAAC;IACjD,eAAe,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;CACvC,CAAC;AAQF,wBAAgB,cAAc,CAAC,EAC7B,OAAO,EACP,SAAS,EACT,MAAM,EACN,OAAO,EACP,MAAM,EACN,eAAe,GAChB,EAAE,mBAAmB,+BA2ZrB"}
+{"version":3,"file":"branding_editor.d.ts","sourceRoot":"","sources":["../../../../../src/components/layouts/scope_management/components/branding_editor.tsx"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG/C,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,YAAY,CAAC;QAAC,GAAG,CAAC,EAAE,YAAY,CAAA;KAAE,CAAC;CACxD,CAAC;AAQF,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI,KAAK,IAAI,CAAC;IACjD,eAAe,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;CACvC,CAAC;AAQF,wBAAgB,cAAc,CAAC,EAC7B,OAAO,EACP,SAAS,EACT,MAAM,EACN,OAAO,EACP,MAAM,EACN,eAAe,GAChB,EAAE,mBAAmB,+BA2jBrB"}

package/dist/components/layouts/scope_management/components/branding_editor.js

@@ -8,7 +8,7 @@ import { Button } from "../../../ui/button.js";
 import { Input } from "../../../ui/input.js";
 import { Label } from "../../../ui/label.js";
 import { Dialog, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogTitle, } from "../../../ui/dialog.js";
-import { Loader2, Upload, Trash2, CircleCheck, CircleX, Image as ImageIcon, Palette, } from "lucide-react";
+import { Loader2, Upload, Trash2, CircleCheck, CircleX, Image as ImageIcon, Palette, Plus, } from "lucide-react";
 import { toast } from "sonner";
 import { useHazoAuthConfig } from "../../../../contexts/hazo_auth_provider.js";
 // section: helpers
@@ -17,6 +17,7 @@ function isValidHexColor(color) {
 }
 // section: component
 export function BrandingEditor({ scopeId, scopeName, isOpen, onClose, onSave, initialBranding, }) {
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j;
     const { apiBasePath } = useHazoAuthConfig();
     // State
     const [loading, setLoading] = useState(false);
@@ -27,6 +28,14 @@ export function BrandingEditor({ scopeId, scopeName, isOpen, onClose, onSave, in
     const [primaryColor, setPrimaryColor] = useState((initialBranding === null || initialBranding === void 0 ? void 0 : initialBranding.primary_color) || "");
     const [secondaryColor, setSecondaryColor] = useState((initialBranding === null || initialBranding === void 0 ? void 0 : initialBranding.secondary_color) || "");
     const [tagline, setTagline] = useState((initialBranding === null || initialBranding === void 0 ? void 0 : initialBranding.tagline) || "");
+    const [appTitle, setAppTitle] = useState((initialBranding === null || initialBranding === void 0 ? void 0 : initialBranding.app_title) || "");
+    // Footer state
+    const [publicCopyright, setPublicCopyright] = useState(((_b = (_a = initialBranding === null || initialBranding === void 0 ? void 0 : initialBranding.footer) === null || _a === void 0 ? void 0 : _a.public) === null || _b === void 0 ? void 0 : _b.copyright) || "");
+    const [publicLinks, setPublicLinks] = useState(((_g = (_f = (_e = (_d = (_c = initialBranding === null || initialBranding === void 0 ? void 0 : initialBranding.footer) === null || _c === void 0 ? void 0 : _c.public) === null || _d === void 0 ? void 0 : _d.columns) === null || _e === void 0 ? void 0 : _e[0]) === null || _f === void 0 ? void 0 : _f.links) === null || _g === void 0 ? void 0 : _g.map((l) => ({
+        label: l.label,
+        href: l.href,
+    }))) || []);
+    const [appCopyright, setAppCopyright] = useState(((_j = (_h = initialBranding === null || initialBranding === void 0 ? void 0 : initialBranding.footer) === null || _h === void 0 ? void 0 : _h.app) === null || _j === void 0 ? void 0 : _j.copyright) || "");
     // File input ref
     const fileInputRef = useRef(null);
     // Load current branding when dialog opens
@@ -37,6 +46,7 @@ export function BrandingEditor({ scopeId, scopeName, isOpen, onClose, onSave, in
     }, [isOpen, scopeId]);
     // Load branding from API
     const loadBranding = useCallback(async () => {
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j;
         setLoading(true);
         try {
             const params = new URLSearchParams({
@@ -51,6 +61,10 @@ export function BrandingEditor({ scopeId, scopeName, isOpen, onClose, onSave, in
                 setPrimaryColor(branding.primary_color || "");
                 setSecondaryColor(branding.secondary_color || "");
                 setTagline(branding.tagline || "");
+                setAppTitle(branding.app_title || "");
+                setPublicCopyright(((_b = (_a = branding.footer) === null || _a === void 0 ? void 0 : _a.public) === null || _b === void 0 ? void 0 : _b.copyright) || "");
+                setPublicLinks(((_g = (_f = (_e = (_d = (_c = branding.footer) === null || _c === void 0 ? void 0 : _c.public) === null || _d === void 0 ? void 0 : _d.columns) === null || _e === void 0 ? void 0 : _e[0]) === null || _f === void 0 ? void 0 : _f.links) === null || _g === void 0 ? void 0 : _g.map((l) => ({ label: l.label, href: l.href }))) || []);
+                setAppCopyright(((_j = (_h = branding.footer) === null || _h === void 0 ? void 0 : _h.app) === null || _j === void 0 ? void 0 : _j.copyright) || "");
             }
         }
         catch (error) {
@@ -122,6 +136,17 @@ export function BrandingEditor({ scopeId, scopeName, isOpen, onClose, onSave, in
                 branding.secondary_color = secondaryColor;
             if (tagline)
                 branding.tagline = tagline;
+            if (appTitle)
+                branding.app_title = appTitle;
+            const cleanedLinks = publicLinks.filter((l) => l.label.trim() && l.href.trim());
+            const publicFooter = publicCopyright.trim() || cleanedLinks.length > 0
+                ? Object.assign(Object.assign({}, (publicCopyright.trim() ? { copyright: publicCopyright.trim() } : {})), (cleanedLinks.length > 0 ? { columns: [{ links: cleanedLinks }] } : {})) : undefined;
+            const appFooter = appCopyright.trim()
+                ? { copyright: appCopyright.trim() }
+                : undefined;
+            if (publicFooter || appFooter) {
+                branding.footer = Object.assign(Object.assign({}, (publicFooter ? { public: publicFooter } : {})), (appFooter ? { app: appFooter } : {}));
+            }
             const hasValues = Object.keys(branding).length > 0;
             const response = await fetch(`${apiBasePath}/scope_management/branding`, {
                 method: "PUT",
@@ -162,6 +187,10 @@ export function BrandingEditor({ scopeId, scopeName, isOpen, onClose, onSave, in
                 setPrimaryColor("");
                 setSecondaryColor("");
                 setTagline("");
+                setAppTitle("");
+                setPublicCopyright("");
+                setPublicLinks([]);
+                setAppCopyright("");
                 toast.success("Branding cleared");
                 onSave === null || onSave === void 0 ? void 0 : onSave(null);
             }
@@ -180,7 +209,17 @@ export function BrandingEditor({ scopeId, scopeName, isOpen, onClose, onSave, in
     const handleRemoveLogo = () => {
         setLogoUrl("");
     };
-    return (_jsx(Dialog, { open: isOpen, onOpenChange: (open) => !open && onClose(), children: _jsxs(DialogContent, { className: "cls_branding_editor_dialog max-w-lg", children: [_jsxs(DialogHeader, { children: [_jsxs(DialogTitle, { className: "flex items-center gap-2", children: [_jsx(Palette, { className: "h-5 w-5" }), "Firm Branding"] }), _jsxs(DialogDescription, { children: ["Customize branding for \"", scopeName, "\""] })] }), loading ? (_jsx("div", { className: "flex items-center justify-center p-8", children: _jsx(Loader2, { className: "h-6 w-6 animate-spin text-slate-400" }) })) : (_jsxs("div", { className: "flex flex-col gap-6 py-4", children: [_jsxs("div", { className: "flex flex-col gap-2", children: [_jsx(Label, { children: "Logo" }), _jsxs("div", { className: "flex items-start gap-4", children: [_jsx("div", { className: "flex-shrink-0 w-24 h-24 border rounded-lg overflow-hidden bg-muted flex items-center justify-center", children: logoUrl ? (_jsx("img", { src: logoUrl, alt: "Firm logo", className: "w-full h-full object-contain" })) : (_jsx(ImageIcon, { className: "h-8 w-8 text-muted-foreground" })) }), _jsxs("div", { className: "flex flex-col gap-2 flex-1", children: [_jsx("input", { type: "file", ref: fileInputRef, onChange: handleFileChange, accept: "image/png,image/jpeg,image/svg+xml,image/webp", className: "hidden" }), _jsx(Button, { type: "button", variant: "outline", size: "sm", onClick: handleUploadClick, disabled: uploading, children: uploading ? (_jsxs(_Fragment, { children: [_jsx(Loader2, { className: "h-4 w-4 mr-2 animate-spin" }), "Uploading..."] })) : (_jsxs(_Fragment, { children: [_jsx(Upload, { className: "h-4 w-4 mr-2" }), "Upload Logo"] })) }), logoUrl && (_jsxs(Button, { type: "button", variant: "ghost", size: "sm", onClick: handleRemoveLogo, className: "text-destructive hover:text-destructive", children: [_jsx(Trash2, { className: "h-4 w-4 mr-2" }), "Remove"] })), _jsx("p", { className: "text-xs text-muted-foreground", children: "PNG, JPG, SVG or WebP. Max 500KB." })] })] })] }), _jsxs("div", { className: "grid grid-cols-2 gap-4", children: [_jsxs("div", { className: "flex flex-col gap-2", children: [_jsx(Label, { htmlFor: "primary_color", children: "Primary Color" }), _jsxs("div", { className: "flex gap-2", children: [_jsx(Input, { id: "primary_color", type: "text", value: primaryColor, onChange: (e) => setPrimaryColor(e.target.value), placeholder: "#1a73e8", className: "flex-1" }), _jsx("input", { type: "color", value: primaryColor || "#000000", onChange: (e) => setPrimaryColor(e.target.value), className: "w-10 h-10 rounded border cursor-pointer", title: "Pick color" })] })] }), _jsxs("div", { className: "flex flex-col gap-2", children: [_jsx(Label, { htmlFor: "secondary_color", children: "Secondary Color" }), _jsxs("div", { className: "flex gap-2", children: [_jsx(Input, { id: "secondary_color", type: "text", value: secondaryColor, onChange: (e) => setSecondaryColor(e.target.value), placeholder: "#4285f4", className: "flex-1" }), _jsx("input", { type: "color", value: secondaryColor || "#000000", onChange: (e) => setSecondaryColor(e.target.value), className: "w-10 h-10 rounded border cursor-pointer", title: "Pick color" })] })] })] }), _jsxs("div", { className: "flex flex-col gap-2", children: [_jsx(Label, { htmlFor: "tagline", children: "Tagline" }), _jsx(Input, { id: "tagline", type: "text", value: tagline, onChange: (e) => setTagline(e.target.value), placeholder: "Your trusted partner", maxLength: 200 }), _jsx("p", { className: "text-xs text-muted-foreground", children: "A short company tagline (max 200 characters)" })] }), (logoUrl || primaryColor || tagline) && (_jsxs("div", { className: "flex flex-col gap-2", children: [_jsx(Label, { children: "Preview" }), _jsx("div", { className: "p-4 rounded-lg border", style: {
+    // Footer link row helpers
+    const handleAddFooterLink = () => {
+        setPublicLinks((prev) => [...prev, { label: "", href: "" }]);
+    };
+    const handleRemoveFooterLink = (index) => {
+        setPublicLinks((prev) => prev.filter((_, i) => i !== index));
+    };
+    const handleFooterLinkChange = (index, field, value) => {
+        setPublicLinks((prev) => prev.map((link, i) => (i === index ? Object.assign(Object.assign({}, link), { [field]: value }) : link)));
+    };
+    return (_jsx(Dialog, { open: isOpen, onOpenChange: (open) => !open && onClose(), children: _jsxs(DialogContent, { className: "cls_branding_editor_dialog max-w-lg", children: [_jsxs(DialogHeader, { children: [_jsxs(DialogTitle, { className: "flex items-center gap-2", children: [_jsx(Palette, { className: "h-5 w-5" }), "Firm Branding"] }), _jsxs(DialogDescription, { children: ["Customize branding for \"", scopeName, "\""] })] }), loading ? (_jsx("div", { className: "flex items-center justify-center p-8", children: _jsx(Loader2, { className: "h-6 w-6 animate-spin text-slate-400" }) })) : (_jsxs("div", { className: "flex flex-col gap-6 py-4", children: [_jsxs("div", { className: "flex flex-col gap-2", children: [_jsx(Label, { children: "Logo" }), _jsxs("div", { className: "flex items-start gap-4", children: [_jsx("div", { className: "flex-shrink-0 w-24 h-24 border rounded-lg overflow-hidden bg-muted flex items-center justify-center", children: logoUrl ? (_jsx("img", { src: logoUrl, alt: "Firm logo", className: "w-full h-full object-contain" })) : (_jsx(ImageIcon, { className: "h-8 w-8 text-muted-foreground" })) }), _jsxs("div", { className: "flex flex-col gap-2 flex-1", children: [_jsx("input", { type: "file", ref: fileInputRef, onChange: handleFileChange, accept: "image/png,image/jpeg,image/svg+xml,image/webp", className: "hidden" }), _jsx(Button, { type: "button", variant: "outline", size: "sm", onClick: handleUploadClick, disabled: uploading, children: uploading ? (_jsxs(_Fragment, { children: [_jsx(Loader2, { className: "h-4 w-4 mr-2 animate-spin" }), "Uploading..."] })) : (_jsxs(_Fragment, { children: [_jsx(Upload, { className: "h-4 w-4 mr-2" }), "Upload Logo"] })) }), logoUrl && (_jsxs(Button, { type: "button", variant: "ghost", size: "sm", onClick: handleRemoveLogo, className: "text-destructive hover:text-destructive", children: [_jsx(Trash2, { className: "h-4 w-4 mr-2" }), "Remove"] })), _jsx("p", { className: "text-xs text-muted-foreground", children: "PNG, JPG, SVG or WebP. Max 500KB." })] })] })] }), _jsxs("div", { className: "grid grid-cols-2 gap-4", children: [_jsxs("div", { className: "flex flex-col gap-2", children: [_jsx(Label, { htmlFor: "primary_color", children: "Primary Color" }), _jsxs("div", { className: "flex gap-2", children: [_jsx(Input, { id: "primary_color", type: "text", value: primaryColor, onChange: (e) => setPrimaryColor(e.target.value), placeholder: "#1a73e8", className: "flex-1" }), _jsx("input", { type: "color", value: primaryColor || "#000000", onChange: (e) => setPrimaryColor(e.target.value), className: "w-10 h-10 rounded border cursor-pointer", title: "Pick color" })] })] }), _jsxs("div", { className: "flex flex-col gap-2", children: [_jsx(Label, { htmlFor: "secondary_color", children: "Secondary Color" }), _jsxs("div", { className: "flex gap-2", children: [_jsx(Input, { id: "secondary_color", type: "text", value: secondaryColor, onChange: (e) => setSecondaryColor(e.target.value), placeholder: "#4285f4", className: "flex-1" }), _jsx("input", { type: "color", value: secondaryColor || "#000000", onChange: (e) => setSecondaryColor(e.target.value), className: "w-10 h-10 rounded border cursor-pointer", title: "Pick color" })] })] })] }), _jsxs("div", { className: "flex flex-col gap-2", children: [_jsx(Label, { htmlFor: "tagline", children: "Tagline" }), _jsx(Input, { id: "tagline", type: "text", value: tagline, onChange: (e) => setTagline(e.target.value), placeholder: "Your trusted partner", maxLength: 200 }), _jsx("p", { className: "text-xs text-muted-foreground", children: "A short company tagline (max 200 characters)" })] }), _jsxs("div", { className: "flex flex-col gap-2", children: [_jsx(Label, { htmlFor: "app_title", children: "App Title" }), _jsx(Input, { id: "app_title", type: "text", value: appTitle, onChange: (e) => setAppTitle(e.target.value), placeholder: "Acme Portal", maxLength: 200 }), _jsx("p", { className: "text-xs text-muted-foreground", children: "Title shown in the app chrome (browser tab, header)" })] }), _jsxs("div", { className: "flex flex-col gap-4", children: [_jsx(Label, { children: "Footer" }), _jsxs("div", { className: "flex flex-col gap-2 rounded-lg border p-3", children: [_jsx(Label, { htmlFor: "public_footer_copyright", className: "text-xs text-muted-foreground", children: "Public Footer Copyright" }), _jsx(Input, { id: "public_footer_copyright", type: "text", value: publicCopyright, onChange: (e) => setPublicCopyright(e.target.value), placeholder: "\u00A9 2026 Acme Inc." }), _jsxs("div", { className: "flex flex-col gap-2 mt-2", children: [_jsx(Label, { className: "text-xs text-muted-foreground", children: "Public Footer Links" }), publicLinks.map((link, index) => (_jsxs("div", { className: "flex gap-2 items-center", children: [_jsx(Input, { type: "text", value: link.label, onChange: (e) => handleFooterLinkChange(index, "label", e.target.value), placeholder: "Label", className: "flex-1" }), _jsx(Input, { type: "text", value: link.href, onChange: (e) => handleFooterLinkChange(index, "href", e.target.value), placeholder: "/privacy", className: "flex-1" }), _jsx(Button, { type: "button", variant: "ghost", size: "sm", onClick: () => handleRemoveFooterLink(index), className: "text-destructive hover:text-destructive", children: _jsx(Trash2, { className: "h-4 w-4" }) })] }, index))), _jsxs(Button, { type: "button", variant: "outline", size: "sm", onClick: handleAddFooterLink, className: "self-start", children: [_jsx(Plus, { className: "h-4 w-4 mr-2" }), "Add Link"] })] })] }), _jsxs("div", { className: "flex flex-col gap-2 rounded-lg border p-3", children: [_jsx(Label, { htmlFor: "app_footer_copyright", className: "text-xs text-muted-foreground", children: "App Footer Copyright" }), _jsx(Input, { id: "app_footer_copyright", type: "text", value: appCopyright, onChange: (e) => setAppCopyright(e.target.value), placeholder: "\u00A9 2026 Acme Inc." })] })] }), (logoUrl || primaryColor || tagline) && (_jsxs("div", { className: "flex flex-col gap-2", children: [_jsx(Label, { children: "Preview" }), _jsx("div", { className: "p-4 rounded-lg border", style: {
                                         backgroundColor: primaryColor
                                             ? `${primaryColor}10`
                                             : undefined,

package/dist/components/layouts/shared/firm_branding_to_brand_identity.d.ts

@@ -0,0 +1,17 @@
+import type { BrandIdentity } from "hazo_theme";
+import type { FirmBranding } from "./hooks/use_firm_branding";
+/**
+ * Maps a hazo_auth `FirmBranding` record into a hazo_theme `BrandIdentity`.
+ * Returns `{}` for null/undefined input.
+ *
+ * - `logo_url` → `logoUrl`
+ * - `app_title` → `appTitle`
+ * - `footer` → `footer` (passed through unchanged)
+ * - `primary_color` (hex) → `primary` (HSL channels)
+ * - `secondary_color` (hex) → `accent` (HSL channels)
+ *
+ * Does NOT set `primaryForeground`, `accentForeground`, fonts, or `themeSet` —
+ * `FirmBranding` has no source data for those.
+ */
+export declare function firm_branding_to_brand_identity(fb: FirmBranding | null | undefined): BrandIdentity;
+//# sourceMappingURL=firm_branding_to_brand_identity.d.ts.map

package/dist/components/layouts/shared/firm_branding_to_brand_identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firm_branding_to_brand_identity.d.ts","sourceRoot":"","sources":["../../../../src/components/layouts/shared/firm_branding_to_brand_identity.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAY9D;;;;;;;;;;;;GAYG;AACH,wBAAgB,+BAA+B,CAC7C,EAAE,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,GAClC,aAAa,CAkBf"}

package/dist/components/layouts/shared/firm_branding_to_brand_identity.js

@@ -0,0 +1,52 @@
+// file_description: Pure mapper from hazo_auth's per-scope FirmBranding into hazo_theme's BrandIdentity contract
+//
+// Direction: hazo_auth owns branding STORAGE (per-scope, hex colors, DB-backed via
+// scope_service/branding_service). hazo_theme owns the RUNTIME whitelabel CONTRACT
+// (BrandIdentity — HSL channel strings + identity data) consumed by `resolveTenantVars`
+// and chrome components. This mapper is a one-way translation: hazo_auth FirmBranding →
+// hazo_theme BrandIdentity. It never flows the other way.
+//
+// Color handling: FirmBranding stores colors as hex strings (e.g. "#1e293b"), matching
+// the `<input type="color">` editor UX. BrandIdentity expects HSL *channel* strings
+// (e.g. "222 47% 11%", no hsl() wrapper) so they can be injected as CSS custom properties.
+// This mapper converts hex → HSL channels via the existing `hex_to_hsl` util. Invalid/
+// malformed hex values are skipped silently (never thrown) so a bad stored value can't
+// crash a page render.
+import { hex_to_hsl } from "../../../theme/hex_to_hsl.js";
+// section: helpers
+const HEX_COLOR_RE = /^#?[0-9a-fA-F]{3}([0-9a-fA-F]{3})?$/;
+function is_valid_hex_color(value) {
+    return HEX_COLOR_RE.test(value);
+}
+// section: mapper
+/**
+ * Maps a hazo_auth `FirmBranding` record into a hazo_theme `BrandIdentity`.
+ * Returns `{}` for null/undefined input.
+ *
+ * - `logo_url` → `logoUrl`
+ * - `app_title` → `appTitle`
+ * - `footer` → `footer` (passed through unchanged)
+ * - `primary_color` (hex) → `primary` (HSL channels)
+ * - `secondary_color` (hex) → `accent` (HSL channels)
+ *
+ * Does NOT set `primaryForeground`, `accentForeground`, fonts, or `themeSet` —
+ * `FirmBranding` has no source data for those.
+ */
+export function firm_branding_to_brand_identity(fb) {
+    if (!fb)
+        return {};
+    const identity = {};
+    if (fb.logo_url)
+        identity.logoUrl = fb.logo_url;
+    if (fb.app_title)
+        identity.appTitle = fb.app_title;
+    if (fb.footer)
+        identity.footer = fb.footer;
+    if (fb.primary_color && is_valid_hex_color(fb.primary_color)) {
+        identity.primary = hex_to_hsl(fb.primary_color);
+    }
+    if (fb.secondary_color && is_valid_hex_color(fb.secondary_color)) {
+        identity.accent = hex_to_hsl(fb.secondary_color);
+    }
+    return identity;
+}

package/dist/components/layouts/shared/hooks/use_firm_branding.d.ts

@@ -1,3 +1,4 @@
+import type { FooterConfig } from "hazo_theme";
 /**
  * Firm branding data structure
  */
@@ -6,6 +7,11 @@ export type FirmBranding = {
     primary_color?: string;
     secondary_color?: string;
     tagline?: string;
+    app_title?: string;
+    footer?: {
+        public?: FooterConfig;
+        app?: FooterConfig;
+    };
 };
 /**
  * Options for use_firm_branding hook

package/dist/components/layouts/shared/hooks/use_firm_branding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"use_firm_branding.d.ts","sourceRoot":"","sources":["../../../../../src/components/layouts/shared/hooks/use_firm_branding.ts"],"names":[],"mappings":"AAUA;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;OAEG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC;;OAEG;IACH,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;IAC9B;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB;;OAEG;IACH,YAAY,EAAE,OAAO,CAAC;IACtB;;OAEG;IACH,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAAC;AAIF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,CAAC,EAAE,sBAAsB,GAC/B,qBAAqB,CAuEvB;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,IAAI,qBAAqB,CAqHjE"}
+{"version":3,"file":"use_firm_branding.d.ts","sourceRoot":"","sources":["../../../../../src/components/layouts/shared/hooks/use_firm_branding.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAI/C;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,YAAY,CAAC;QAAC,GAAG,CAAC,EAAE,YAAY,CAAA;KAAE,CAAC;CACxD,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;OAEG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC;;OAEG;IACH,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;IAC9B;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB;;OAEG;IACH,YAAY,EAAE,OAAO,CAAC;IACtB;;OAEG;IACH,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAAC;AAIF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,CAAC,EAAE,sBAAsB,GAC/B,qBAAqB,CAuEvB;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,IAAI,qBAAqB,CAqHjE"}

package/dist/components/ui/input.js

@@ -14,7 +14,7 @@ import * as React from "react";
 import { cn } from "../../lib/utils.js";
 const Input = React.forwardRef((_a, ref) => {
     var { className, type } = _a, props = __rest(_a, ["className", "type"]);
-    return (_jsx("input", Object.assign({ type: type, className: cn("flex h-9 w-full rounded-md border border-input bg-transparent px-3 py-1 text-base shadow-sm transition-colors file:border-0 file:bg-transparent file:text-sm file:font-medium file:text-foreground placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring disabled:cursor-not-allowed disabled:opacity-50 md:text-sm", className), ref: ref }, props)));
+    return (_jsx("input", Object.assign({ type: type, className: cn("flex h-9 w-full rounded-md border border-input bg-transparent px-3 py-1 text-base text-slate-900 shadow-sm transition-colors file:border-0 file:bg-transparent file:text-sm file:font-medium file:text-slate-900 placeholder:text-slate-400 focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring disabled:cursor-not-allowed disabled:opacity-50 md:text-sm", className), ref: ref }, props)));
 });
 Input.displayName = "Input";
 export { Input };

package/dist/lib/services/branding_service.d.ts

@@ -1,4 +1,5 @@
 import type { HazoConnectAdapter } from "hazo_connect";
+import type { FooterConfig } from "hazo_theme";
 import { type FirmBranding, type ScopeRecord } from "./scope_service.js";
 export type BrandingServiceResult = {
     success: boolean;
@@ -11,6 +12,11 @@ export type UpdateBrandingData = {
     primary_color?: string | null;
     secondary_color?: string | null;
     tagline?: string | null;
+    app_title?: string | null;
+    footer?: {
+        public?: FooterConfig;
+        app?: FooterConfig;
+    } | null;
 };
 /**
  * Validates branding data

package/dist/lib/services/branding_service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"branding_service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/branding_service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,WAAW,EAOjB,MAAM,iBAAiB,CAAC;AAMzB,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB,CAAC;AAWF;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,kBAAkB,GAAG;IAC3D,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAsBA;AAID;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,qBAAqB,CAAC,CAmChC;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,qBAAqB,CAAC,CA0EhC;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,qBAAqB,CAAC,CA2EhC;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,YAAY,GAAG,IAAI,GAC5B,OAAO,CAAC,qBAAqB,CAAC,CA4DhC;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,qBAAqB,CAAC,CAEhC;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,kBAAkB,EAC3B,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,qBAAqB,CAAC,CAiChC"}
+{"version":3,"file":"branding_service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/branding_service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,WAAW,EAOjB,MAAM,iBAAiB,CAAC;AAMzB,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,YAAY,CAAC;QAAC,GAAG,CAAC,EAAE,YAAY,CAAA;KAAE,GAAG,IAAI,CAAC;CAC/D,CAAC;AAoDF;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,kBAAkB,GAAG;IAC3D,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAoCA;AAID;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,qBAAqB,CAAC,CAmChC;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,qBAAqB,CAAC,CA0EhC;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,qBAAqB,CAAC,CA+EhC;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,YAAY,GAAG,IAAI,GAC5B,OAAO,CAAC,qBAAqB,CAAC,CA8DhC;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,qBAAqB,CAAC,CAEhC;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,kBAAkB,EAC3B,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,qBAAqB,CAAC,CAiChC"}

package/dist/lib/services/branding_service.js

@@ -8,6 +8,48 @@ import { sanitize_error_for_user } from "../utils/error_sanitizer.js";
 function is_valid_hex_color(color) {
     return /^#[0-9A-Fa-f]{6}$/.test(color);
 }
+/**
+ * Validates an admin-supplied href against a scheme allowlist. Blocks
+ * `javascript:`/`data:`/`vbscript:` URIs that would become stored XSS when the
+ * value is later rendered into an `<a href>` (defense-in-depth alongside the
+ * render-time `safeHref` filter in hazo_ui's chrome components). Allows
+ * http(s), mailto, and same-origin absolute paths (`/…` but not `//…`).
+ */
+function is_safe_href(url) {
+    const t = url.trim().toLowerCase();
+    if (t.startsWith("http://") || t.startsWith("https://") || t.startsWith("mailto:")) {
+        return true;
+    }
+    return t.startsWith("/") && !t.startsWith("//");
+}
+/**
+ * Walks every admin-configurable href in a footer config (column links + social
+ * links across both public/app variants) and returns the first unsafe one, or
+ * null when all are safe.
+ */
+function first_unsafe_footer_href(footer) {
+    var _a, _b;
+    if (!footer)
+        return null;
+    for (const variant of ["public", "app"]) {
+        const cfg = footer[variant];
+        if (!cfg)
+            continue;
+        for (const column of (_a = cfg.columns) !== null && _a !== void 0 ? _a : []) {
+            for (const link of (_b = column.links) !== null && _b !== void 0 ? _b : []) {
+                if ((link === null || link === void 0 ? void 0 : link.href) && !is_safe_href(link.href))
+                    return link.href;
+            }
+        }
+        if (cfg.social) {
+            for (const handle of Object.values(cfg.social)) {
+                if (typeof handle === "string" && handle && !is_safe_href(handle))
+                    return handle;
+            }
+        }
+    }
+    return null;
+}
 /**
  * Validates branding data
  */
@@ -28,6 +70,18 @@ export function validate_branding(data) {
     if (data.logo_url && typeof data.logo_url === "string" && data.logo_url.length > 500) {
         return { valid: false, error: "Logo URL must be 500 characters or less" };
     }
+    if (data.app_title && typeof data.app_title === "string" && data.app_title.length > 200) {
+        return { valid: false, error: "App title must be 200 characters or less" };
+    }
+    // Reject unsafe footer link/social hrefs (javascript:/data: etc.) before they
+    // are persisted to footer_config and later rendered into <a href>.
+    const bad_href = first_unsafe_footer_href(data.footer);
+    if (bad_href) {
+        return {
+            valid: false,
+            error: "Footer links must use http(s), mailto, or same-origin (/…) URLs",
+        };
+    }
     return { valid: true };
 }
 // section: core operations
@@ -177,12 +231,16 @@ export async function update_branding(adapter, scope_id, data) {
         const updated_primary = data.primary_color !== undefined ? data.primary_color : current.primary_color;
         const updated_secondary = data.secondary_color !== undefined ? data.secondary_color : current.secondary_color;
         const updated_tagline = data.tagline !== undefined ? data.tagline : current.tagline;
+        const updated_app_title = data.app_title !== undefined ? data.app_title : current.app_title;
+        const updated_footer = data.footer !== undefined ? data.footer : current.footer;
         // Update the scope with individual fields
         const update_result = await update_scope(adapter, scope_id, {
             logo_url: updated_logo || null,
             primary_color: updated_primary || null,
             secondary_color: updated_secondary || null,
             tagline: updated_tagline || null,
+            app_title: updated_app_title || null,
+            footer: updated_footer || null,
         });
         if (!update_result.success) {
             return {
@@ -244,6 +302,8 @@ export async function replace_branding(adapter, scope_id, branding) {
             primary_color: (branding === null || branding === void 0 ? void 0 : branding.primary_color) || null,
             secondary_color: (branding === null || branding === void 0 ? void 0 : branding.secondary_color) || null,
             tagline: (branding === null || branding === void 0 ? void 0 : branding.tagline) || null,
+            app_title: (branding === null || branding === void 0 ? void 0 : branding.app_title) || null,
+            footer: (branding === null || branding === void 0 ? void 0 : branding.footer) || null,
         });
         if (!update_result.success) {
             return {

package/dist/lib/services/invitation_service.d.ts

@@ -3,7 +3,10 @@ export type InvitationStatus = "PENDING" | "ACCEPTED" | "EXPIRED" | "REVOKED";
 export type InvitationRecord = {
     id: string;
     email_address: string;
+    /** Opaque unique token identifying this invitation (e.g. for an accept link). */
+    token: string;
     scope_id: string;
+    root_scope_id: string;
     role_id: string;
     status: InvitationStatus;
     invited_by: string | null;

package/dist/lib/services/invitation_service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invitation_service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/invitation_service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AASvD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;AAE9E,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,gBAAgB,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AASF;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,kBAAkB,EAC3B,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,uBAAuB,CAAC,CAyElC;AAED;;;GAGG;AACH,wBAAsB,+BAA+B,CACnD,OAAO,EAAE,kBAAkB,EAC3B,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,uBAAuB,CAAC,CAkFlC;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,kBAAkB,EAC3B,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,uBAAuB,CAAC,CAmClC;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,kBAAkB,EAC3B,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,uBAAuB,CAAC,CA8FlC;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,kBAAkB,EAC3B,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,uBAAuB,CAAC,CA0DlC;AAED;;GAEG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,gBAAgB,GACxB,OAAO,CAAC,uBAAuB,CAAC,CAoClC;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,kBAAkB,EAC3B,MAAM,CAAC,EAAE,gBAAgB,GACxB,OAAO,CAAC,uBAAuB,CAAC,CAmClC;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA0CvE"}
+{"version":3,"file":"invitation_service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/invitation_service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAUvD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;AAE9E,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,gBAAgB,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAkBF;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,kBAAkB,EAC3B,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,uBAAuB,CAAC,CAmFlC;AAED;;;GAGG;AACH,wBAAsB,+BAA+B,CACnD,OAAO,EAAE,kBAAkB,EAC3B,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,uBAAuB,CAAC,CAkFlC;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,kBAAkB,EAC3B,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,uBAAuB,CAAC,CAmClC;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,kBAAkB,EAC3B,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,uBAAuB,CAAC,CA8FlC;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,kBAAkB,EAC3B,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,uBAAuB,CAAC,CA0DlC;AAED;;GAEG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,gBAAgB,GACxB,OAAO,CAAC,uBAAuB,CAAC,CAoClC;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,kBAAkB,EAC3B,MAAM,CAAC,EAAE,gBAAgB,GACxB,OAAO,CAAC,uBAAuB,CAAC,CAmClC;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA0CvE"}

package/dist/lib/services/invitation_service.js

@@ -1,4 +1,5 @@
 import { createCrudService } from "hazo_connect/server";
+import { randomBytes } from "crypto";
 import { create_app_logger } from "../app_logger.js";
 import { sanitize_error_for_user } from "../utils/error_sanitizer.js";
 import { assign_user_scope } from "./user_scope_service.js";
@@ -7,6 +8,14 @@ import { get_scope_by_id, get_root_scope_id } from "./scope_service.js";
 const DEFAULT_EXPIRY_HOURS = 48;
 const MAX_PENDING_PER_EMAIL = 5;
 // section: helpers
+/**
+ * Generates an opaque, unique invitation token.
+ * `hazo_invitations.token` is `NOT NULL UNIQUE` in the schema (migration 011 /
+ * db_setup_sqlite.sql / db_setup_postgres.sql) — every insert must supply one.
+ */
+function generate_invitation_token() {
+    return randomBytes(32).toString("hex");
+}
 /**
  * Creates a new invitation
  */
@@ -36,9 +45,18 @@ export async function create_invitation(adapter, data) {
         // Calculate expiration
         const expires_hours = data.expires_in_hours || DEFAULT_EXPIRY_HOURS;
         const expires_at = new Date(now.getTime() + expires_hours * 60 * 60 * 1000);
+        // `hazo_invitations.root_scope_id` is NOT NULL — same computation
+        // `assign_user_scope` (user_scope_service.ts) uses for the analogous
+        // `hazo_user_scopes.root_scope_id` column: resolve the scope's root
+        // ancestor, falling back to the scope itself if it IS the root (or the
+        // computation fails).
+        const computed_root_scope_id = await get_root_scope_id(adapter, data.scope_id);
+        const root_scope_id = computed_root_scope_id || data.scope_id;
         const inserted = await invitation_service.insert({
             email_address: data.email_address.toLowerCase(),
+            token: generate_invitation_token(),
             scope_id: data.scope_id,
+            root_scope_id,
             role_id: data.role_id,
             status: "PENDING",
             invited_by: data.invited_by || null,

package/dist/lib/services/scope_service.d.ts

@@ -1,4 +1,5 @@
 import type { HazoConnectAdapter } from "hazo_connect";
+import type { FooterConfig } from "hazo_theme";
 /**
  * Default system scope ID - for non-multi-tenancy mode
  * All users are assigned to this scope when multi-tenancy is disabled
@@ -13,6 +14,11 @@ export type FirmBranding = {
     primary_color?: string | null;
     secondary_color?: string | null;
     tagline?: string | null;
+    app_title?: string | null;
+    footer?: {
+        public?: FooterConfig;
+        app?: FooterConfig;
+    } | null;
 };
 export type ScopeRecord = {
     id: string;
@@ -23,6 +29,11 @@ export type ScopeRecord = {
     primary_color: string | null;
     secondary_color: string | null;
     tagline: string | null;
+    app_title: string | null;
+    footer: {
+        public?: FooterConfig;
+        app?: FooterConfig;
+    } | null;
     created_at: string;
     changed_at: string;
 };
@@ -40,6 +51,11 @@ export type CreateScopeData = {
     primary_color?: string | null;
     secondary_color?: string | null;
     tagline?: string | null;
+    app_title?: string | null;
+    footer?: {
+        public?: FooterConfig;
+        app?: FooterConfig;
+    } | null;
 };
 export type UpdateScopeData = {
     name?: string;
@@ -49,6 +65,11 @@ export type UpdateScopeData = {
     primary_color?: string | null;
     secondary_color?: string | null;
     tagline?: string | null;
+    app_title?: string | null;
+    footer?: {
+        public?: FooterConfig;
+        app?: FooterConfig;
+    } | null;
 };
 export type ScopeTreeNode = ScopeRecord & {
     children?: ScopeTreeNode[];

package/dist/lib/services/scope_service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scope_service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/scope_service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAOvD;;;GAGG;AACH,eAAO,MAAM,uBAAuB,yCAAyC,CAAC;AAI9E;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG;IACxC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;CAC5B,CAAC;AAsBF;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,GAAG,YAAY,GAAG,IAAI,CAOxE;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAExD;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEjE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEzD;AAID;;GAEG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,kBAAkB,EAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAyC7B;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,kBAAkB,CAAC,CAE7B;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAmC7B;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,kBAAkB,EAC3B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,kBAAkB,CAAC,CAmC7B;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,kBAAkB,EAC3B,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,kBAAkB,CAAC,CA4D7B;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,kBAAkB,CAAC,CAiH7B;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CA2C7B;AAID;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CA8B7B;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAgD7B;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAyC7B;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAuBxB;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,kBAAkB,EAC3B,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAoEvE;AAED;;GAEG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,kBAAkB,CAAC,CAsD7B"}
+{"version":3,"file":"scope_service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/scope_service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAM/C;;;GAGG;AACH,eAAO,MAAM,uBAAuB,yCAAyC,CAAC;AAI9E;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,YAAY,CAAC;QAAC,GAAG,CAAC,EAAE,YAAY,CAAA;KAAE,GAAG,IAAI,CAAC;CAC/D,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,YAAY,CAAC;QAAC,GAAG,CAAC,EAAE,YAAY,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7D,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,YAAY,CAAC;QAAC,GAAG,CAAC,EAAE,YAAY,CAAA;KAAE,GAAG,IAAI,CAAC;CAC/D,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,YAAY,CAAC;QAAC,GAAG,CAAC,EAAE,YAAY,CAAA;KAAE,GAAG,IAAI,CAAC;CAC/D,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG;IACxC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;CAC5B,CAAC;AA4BF;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,GAAG,YAAY,GAAG,IAAI,CASxE;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAExD;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEjE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEzD;AAID;;GAEG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,kBAAkB,EAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAyC7B;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,kBAAkB,CAAC,CAE7B;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAmC7B;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,kBAAkB,EAC3B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,kBAAkB,CAAC,CAmC7B;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,kBAAkB,EAC3B,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,kBAAkB,CAAC,CA8D7B;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,kBAAkB,CAAC,CAuH7B;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CA2C7B;AAID;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CA8B7B;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAgD7B;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAyC7B;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAuBxB;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,kBAAkB,EAC3B,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAoEvE;AAED;;GAEG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,kBAAkB,CAAC,CAwD7B"}

package/dist/lib/services/scope_service.js

@@ -21,6 +21,18 @@ function normalize_scope_record(raw) {
         primary_color: raw.primary_color || null,
         secondary_color: raw.secondary_color || null,
         tagline: raw.tagline || null,
+        app_title: raw.app_title || null,
+        footer: (() => {
+            const raw_fc = raw.footer_config;
+            if (typeof raw_fc !== "string" || raw_fc.length === 0)
+                return null;
+            try {
+                return JSON.parse(raw_fc);
+            }
+            catch (_a) {
+                return null;
+            }
+        })(),
         created_at: raw.created_at,
         changed_at: raw.changed_at,
     };
@@ -39,13 +51,17 @@ export function extract_branding(scope) {
         branding.secondary_color = scope.secondary_color;
     if (scope.tagline)
         branding.tagline = scope.tagline;
+    if (scope.app_title)
+        branding.app_title = scope.app_title;
+    if (scope.footer)
+        branding.footer = scope.footer;
     return Object.keys(branding).length > 0 ? branding : null;
 }
 /**
  * Checks if a scope has any branding set
  */
 export function has_branding(scope) {
-    return !!(scope.logo_url || scope.primary_color || scope.secondary_color || scope.tagline);
+    return !!(scope.logo_url || scope.primary_color || scope.secondary_color || scope.tagline || scope.app_title || scope.footer);
 }
 /**
  * Checks if the given scope_id is the default system scope
@@ -208,6 +224,8 @@ export async function create_scope(adapter, data) {
             primary_color: data.primary_color || null,
             secondary_color: data.secondary_color || null,
             tagline: data.tagline || null,
+            app_title: data.app_title || null,
+            footer_config: data.footer ? JSON.stringify(data.footer) : null,
             created_at: now,
             changed_at: now,
         };
@@ -313,6 +331,12 @@ export async function update_scope(adapter, scope_id, data) {
         if (data.tagline !== undefined) {
             update_data.tagline = data.tagline;
         }
+        if (data.app_title !== undefined) {
+            update_data.app_title = data.app_title;
+        }
+        if (data.footer !== undefined) {
+            update_data.footer_config = data.footer ? JSON.stringify(data.footer) : null;
+        }
         const updated = await scope_service.updateById(scope_id, update_data);
         if (!Array.isArray(updated) || updated.length === 0) {
             return {
@@ -616,6 +640,8 @@ export async function ensure_default_system_scope(adapter) {
             primary_color: null,
             secondary_color: null,
             tagline: null,
+            app_title: null,
+            footer_config: null,
             created_at: now,
             changed_at: now,
         });

package/dist/page_components/create_firm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create_firm.d.ts","sourceRoot":"","sources":["../../src/page_components/create_firm.tsx"],"names":[],"mappings":"AAEA,OAAO,aAAa,CAAC;AAQrB,MAAM,MAAM,mBAAmB,GAAG;IAChC,iCAAiC;IACjC,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAyCF,MAAM,CAAC,OAAO,UAAU,cAAc,CAAC,EAAE,aAAa,EAAE,GAAE,mBAAwB,+BAyBjF;AAGD,OAAO,EAAE,cAAc,EAAE,CAAC"}
+{"version":3,"file":"create_firm.d.ts","sourceRoot":"","sources":["../../src/page_components/create_firm.tsx"],"names":[],"mappings":"AAEA,OAAO,aAAa,CAAC;AAWrB,MAAM,MAAM,mBAAmB,GAAG;IAChC,iCAAiC;IACjC,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AA8CF,MAAM,CAAC,OAAO,UAAU,cAAc,CAAC,EAAE,aAAa,EAAE,GAAE,mBAAwB,+BA0BjF;AAGD,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/page_components/create_firm.js

@@ -5,7 +5,7 @@ import "server-only";
 // section: imports
 import CreateFirmLayout from "../components/layouts/create_firm/index.js";
 import { AuthPageShell } from "../components/layouts/shared/components/auth_page_shell.js";
-import { get_config_value } from "../lib/config/config_loader.server.js";
+import { get_config_value, get_config_boolean, } from "../lib/config/config_loader.server.js";
 // section: config_loader
 const CREATE_FIRM_SECTION = "hazo_auth__create_firm";
 // Reads an optional label override: returns the configured string, or undefined
@@ -21,13 +21,14 @@ function get_create_firm_config() {
         keyword: get_config_value(CREATE_FIRM_SECTION, "keyword", "Firm"),
         keyword_lower: get_config_value(CREATE_FIRM_SECTION, "keyword_lower", "firm"),
         verb: get_config_value(CREATE_FIRM_SECTION, "verb", "Create"),
-        image_src: get_config_value(CREATE_FIRM_SECTION, "image_src", "/hazo_auth/images/new_firm_default.jpg"),
+        image_src: get_config_value(CREATE_FIRM_SECTION, "image_src", "/api/hazo_auth/assets/register_default.jpg"),
         // Explicit per-label overrides (undefined → keyword-derived default).
         heading: get_optional_config_value("heading"),
         sub_heading: get_optional_config_value("sub_heading"),
         firm_name_label: get_optional_config_value("firm_name_label"),
         org_structure_label: get_optional_config_value("org_structure_label"),
         org_structure_default: get_config_value(CREATE_FIRM_SECTION, "org_structure_default", "Headquarters"),
+        show_org_structure: get_config_boolean(CREATE_FIRM_SECTION, "show_org_structure", true),
         submit_button_label: get_optional_config_value("submit_button_label"),
         success_message: get_optional_config_value("success_message"),
         redirect_route: get_config_value(CREATE_FIRM_SECTION, "redirect_route", "/"),
@@ -36,7 +37,7 @@ function get_create_firm_config() {
 // section: component
 export default function CreateFirmPage({ disableNavbar } = {}) {
     const config = get_create_firm_config();
-    const layoutContent = (_jsx(CreateFirmLayout, { image_src: config.image_src, keyword: config.keyword, keyword_lower: config.keyword_lower, verb: config.verb, heading: config.heading, sub_heading: config.sub_heading, firm_name_label: config.firm_name_label, org_structure_label: config.org_structure_label, default_org_structure: config.org_structure_default, submit_button_label: config.submit_button_label, success_message: config.success_message, redirect_route: config.redirect_route }));
+    const layoutContent = (_jsx(CreateFirmLayout, { image_src: config.image_src, keyword: config.keyword, keyword_lower: config.keyword_lower, verb: config.verb, heading: config.heading, sub_heading: config.sub_heading, firm_name_label: config.firm_name_label, org_structure_label: config.org_structure_label, default_org_structure: config.org_structure_default, show_org_structure: config.show_org_structure, submit_button_label: config.submit_button_label, success_message: config.success_message, redirect_route: config.redirect_route }));
     if (disableNavbar) {
         return layoutContent;
     }

package/dist/server_pages/index.d.ts

@@ -4,12 +4,14 @@ export { default as ForgotPasswordPage } from "./forgot_password.js";
 export { default as ResetPasswordPage } from "./reset_password.js";
 export { default as VerifyEmailPage } from "./verify_email.js";
 export { default as MySettingsPage } from "./my_settings.js";
+export { CreateFirmPage } from "../page_components/create_firm.js";
 export type { LoginPageProps } from "./login";
 export type { RegisterPageProps } from "./register";
 export type { ForgotPasswordPageProps } from "./forgot_password";
 export type { ResetPasswordPageProps } from "./reset_password";
 export type { VerifyEmailPageProps } from "./verify_email";
 export type { MySettingsPageProps } from "./my_settings";
+export type { CreateFirmPageProps } from "../page_components/create_firm";
 export { default as OTPPage } from "./otp.js";
 export type { OTPPageProps } from "./otp";
 //# sourceMappingURL=index.d.ts.map

package/dist/server_pages/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server_pages/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,OAAO,IAAI,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,eAAe,CAAC;AAG1D,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,YAAY,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACjE,YAAY,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC/D,YAAY,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,YAAY,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,OAAO,CAAC;AAC3C,YAAY,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server_pages/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,OAAO,IAAI,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAGhE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,YAAY,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACjE,YAAY,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC/D,YAAY,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,YAAY,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACzD,YAAY,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,OAAO,CAAC;AAC3C,YAAY,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC"}

package/dist/server_pages/index.js

@@ -5,4 +5,5 @@ export { default as ForgotPasswordPage } from "./forgot_password.js";
 export { default as ResetPasswordPage } from "./reset_password.js";
 export { default as VerifyEmailPage } from "./verify_email.js";
 export { default as MySettingsPage } from "./my_settings.js";
+export { CreateFirmPage } from "../page_components/create_firm.js";
 export { default as OTPPage } from "./otp.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hazo_auth",
-  "version": "10.7.1",
+  "version": "10.8.0",
   "description": "Zero-config authentication UI components for Next.js with RBAC, OAuth, scope-based multi-tenancy, and invitations",
   "keywords": [
     "authentication",
@@ -264,12 +264,13 @@
     "@radix-ui/react-tooltip": "^1.2.0",
     "hazo_api": "^2.5.1",
     "hazo_config": "^2.4.1",
-    "hazo_connect": "^3.9.0",
+    "hazo_connect": "^3.9.2",
     "hazo_core": "^1.2.1",
     "hazo_logs": "^2.1.1",
     "hazo_notify": "^6.1.4",
     "hazo_secure": "^1.3.0",
-    "hazo_ui": "^4.9.0",
+    "hazo_theme": "^0.2.0",
+    "hazo_ui": "^4.10.0",
     "input-otp": "^1.4.0",
     "lucide-react": "^0.553.0",
     "next": "^14.0.0",
@@ -301,6 +302,9 @@
     "hazo_secure": {
       "optional": true
     },
+    "hazo_theme": {
+      "optional": true
+    },
     "hazo_ui": {
       "optional": true
     },
@@ -404,11 +408,12 @@
     "eslint-plugin-storybook": "^10.0.6",
     "hazo_api": "^2.5.1",
     "hazo_config": "^2.4.1",
-    "hazo_connect": "^3.9.0",
+    "hazo_connect": "^3.9.2",
     "hazo_core": "^1.2.1",
     "hazo_logs": "^2.1.1",
     "hazo_notify": "^6.1.4",
-    "hazo_ui": "^4.9.0",
+    "hazo_theme": "^0.2.0",
+    "hazo_ui": "^4.10.0",
     "input-otp": "^1.4.0",
     "jest": "^30.2.0",
     "jest-environment-jsdom": "^30.0.0",