hazo_auth 4.4.1 → 4.5.0

package/dist/lib/scope_hierarchy_config.server.js

@@ -49,13 +49,12 @@ function get_default_labels() {
 /**
  * Reads HRBAC scope hierarchy configuration from hazo_auth_config.ini file
  * Falls back to defaults if config file is not found or section is missing
+ * Note: Scopes are now connected to organizations via org_id/root_org_id FK references
  * @returns Scope hierarchy configuration options
  */
 export function get_scope_hierarchy_config() {
     // Core HRBAC enablement
     const enable_hrbac = get_config_boolean(SECTION_NAME, "enable_hrbac", false);
-    // Default organization for single-tenant apps
-    const default_org = get_config_value(SECTION_NAME, "default_org", "");
     // Cache settings
     const scope_cache_ttl_minutes = get_config_number(SECTION_NAME, "scope_cache_ttl_minutes", 15);
     const scope_cache_max_entries = get_config_number(SECTION_NAME, "scope_cache_max_entries", 5000);
@@ -66,7 +65,6 @@ export function get_scope_hierarchy_config() {
     const default_labels = get_default_labels();
     return {
         enable_hrbac,
-        default_org,
         scope_cache_ttl_minutes,
         scope_cache_max_entries,
         active_levels,
@@ -80,13 +78,6 @@ export function get_scope_hierarchy_config() {
 export function is_hrbac_enabled() {
     return get_config_boolean(SECTION_NAME, "enable_hrbac", false);
 }
-/**
- * Gets the default organization from config
- * Returns empty string if not configured (multi-tenant mode)
- */
-export function get_default_org() {
-    return get_config_value(SECTION_NAME, "default_org", "");
-}
 /**
  * Gets the default label for a scope level
  */

package/dist/lib/services/registration_service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registration_service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/registration_service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAcvD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAGF;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,kBAAkB,EAC3B,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,kBAAkB,CAAC,CAgJ7B"}
+{"version":3,"file":"registration_service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/registration_service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAkBvD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAGF;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,kBAAkB,EAC3B,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,kBAAkB,CAAC,CAwJ7B"}

package/dist/lib/services/registration_service.js

@@ -9,6 +9,7 @@ import { create_app_logger } from "../app_logger";
 import { send_template_email } from "./email_service";
 import { sanitize_error_for_user } from "../utils/error_sanitizer";
 import { get_line_number } from "../utils/api_route_helpers";
+import { is_user_types_enabled, get_default_user_type, } from "../user_types_config.server";
 // section: helpers
 /**
  * Registers a new user in the database using hazo_connect
@@ -69,6 +70,13 @@ export async function register_user(adapter, data) {
                 insert_data.profile_source = map_ui_source_to_db(default_photo.profile_source);
             }
         }
+        // Set default user type if feature is enabled and default is configured
+        if (is_user_types_enabled()) {
+            const default_type = get_default_user_type();
+            if (default_type) {
+                insert_data.user_type = default_type;
+            }
+        }
         const inserted_users = await users_service.insert(insert_data);
         // Verify insertion was successful
         if (!Array.isArray(inserted_users) || inserted_users.length === 0) {

package/dist/lib/services/scope_labels_service.d.ts

@@ -2,7 +2,7 @@ import type { HazoConnectAdapter } from "hazo_connect";
 import type { ScopeLevel } from "./scope_service";
 export type ScopeLabel = {
     id: string;
-    org: string;
+    org_id: string;
     scope_type: ScopeLevel;
     label: string;
     created_at: string;
@@ -18,31 +18,31 @@ export declare const DEFAULT_SCOPE_LABELS: Record<ScopeLevel, string>;
 /**
  * Gets all scope labels for an organization
  */
-export declare function get_scope_labels(adapter: HazoConnectAdapter, org: string): Promise<ScopeLabelResult>;
+export declare function get_scope_labels(adapter: HazoConnectAdapter, org_id: string): Promise<ScopeLabelResult>;
 /**
  * Gets all scope labels for an organization, with defaults filled in for missing levels
  */
-export declare function get_scope_labels_with_defaults(adapter: HazoConnectAdapter, org: string, custom_defaults?: Record<ScopeLevel, string>): Promise<ScopeLabelResult>;
+export declare function get_scope_labels_with_defaults(adapter: HazoConnectAdapter, org_id: string, custom_defaults?: Record<ScopeLevel, string>): Promise<ScopeLabelResult>;
 /**
  * Gets the label for a specific scope level
  * Returns the custom label if set, otherwise returns the default
  */
-export declare function get_label_for_level(adapter: HazoConnectAdapter, org: string, scope_type: ScopeLevel, custom_default?: string): Promise<string>;
+export declare function get_label_for_level(adapter: HazoConnectAdapter, org_id: string, scope_type: ScopeLevel, custom_default?: string): Promise<string>;
 /**
  * Creates or updates a scope label for an organization
  * Uses upsert pattern - creates if not exists, updates if exists
  */
-export declare function upsert_scope_label(adapter: HazoConnectAdapter, org: string, scope_type: ScopeLevel, label: string): Promise<ScopeLabelResult>;
+export declare function upsert_scope_label(adapter: HazoConnectAdapter, org_id: string, scope_type: ScopeLevel, label: string): Promise<ScopeLabelResult>;
 /**
  * Batch upsert scope labels for an organization
  * Useful for saving all labels at once from the UI
  */
-export declare function batch_upsert_scope_labels(adapter: HazoConnectAdapter, org: string, labels: Array<{
+export declare function batch_upsert_scope_labels(adapter: HazoConnectAdapter, org_id: string, labels: Array<{
     scope_type: ScopeLevel;
     label: string;
 }>): Promise<ScopeLabelResult>;
 /**
  * Deletes a scope label, reverting to default
  */
-export declare function delete_scope_label(adapter: HazoConnectAdapter, org: string, scope_type: ScopeLevel): Promise<ScopeLabelResult>;
+export declare function delete_scope_label(adapter: HazoConnectAdapter, org_id: string, scope_type: ScopeLevel): Promise<ScopeLabelResult>;
 //# sourceMappingURL=scope_labels_service.d.ts.map

package/dist/lib/services/scope_labels_service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scope_labels_service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/scope_labels_service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAKvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAIlD,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,UAAU,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAGF,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAQ3D,CAAC;AAIF;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,kBAAkB,EAC3B,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,gBAAgB,CAAC,CA4B3B;AAED;;GAEG;AACH,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,kBAAkB,EAC3B,GAAG,EAAE,MAAM,EACX,eAAe,CAAC,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,GAC3C,OAAO,CAAC,gBAAgB,CAAC,CA0D3B;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,kBAAkB,EAC3B,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,UAAU,EACtB,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,MAAM,CAAC,CAcjB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,kBAAkB,EAC3B,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,gBAAgB,CAAC,CAuE3B;AAED;;;GAGG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,kBAAkB,EAC3B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,KAAK,CAAC;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,GACvD,OAAO,CAAC,gBAAgB,CAAC,CAwC3B;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,kBAAkB,EAC3B,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAwC3B"}
+{"version":3,"file":"scope_labels_service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/scope_labels_service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAKvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAIlD,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,UAAU,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAGF,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAQ3D,CAAC;AAIF;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,kBAAkB,EAC3B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,gBAAgB,CAAC,CA4B3B;AAED;;GAEG;AACH,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,kBAAkB,EAC3B,MAAM,EAAE,MAAM,EACd,eAAe,CAAC,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,GAC3C,OAAO,CAAC,gBAAgB,CAAC,CA0D3B;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,kBAAkB,EAC3B,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,UAAU,EACtB,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,MAAM,CAAC,CAcjB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,kBAAkB,EAC3B,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,gBAAgB,CAAC,CAuE3B;AAED;;;GAGG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,kBAAkB,EAC3B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,KAAK,CAAC;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,GACvD,OAAO,CAAC,gBAAgB,CAAC,CAwC3B;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,kBAAkB,EAC3B,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAwC3B"}

package/dist/lib/services/scope_labels_service.js

@@ -17,10 +17,10 @@ export const DEFAULT_SCOPE_LABELS = {
 /**
  * Gets all scope labels for an organization
  */
-export async function get_scope_labels(adapter, org) {
+export async function get_scope_labels(adapter, org_id) {
     try {
         const label_service = createCrudService(adapter, "hazo_scope_labels");
-        const labels = await label_service.findBy({ org });
+        const labels = await label_service.findBy({ org_id });
         return {
             success: true,
             labels: Array.isArray(labels) ? labels : [],
@@ -36,7 +36,7 @@ export async function get_scope_labels(adapter, org) {
                 filename: "scope_labels_service.ts",
                 line_number: 0,
                 operation: "get_scope_labels",
-                org,
+                org_id,
             },
         });
         return {
@@ -48,9 +48,9 @@ export async function get_scope_labels(adapter, org) {
 /**
  * Gets all scope labels for an organization, with defaults filled in for missing levels
  */
-export async function get_scope_labels_with_defaults(adapter, org, custom_defaults) {
+export async function get_scope_labels_with_defaults(adapter, org_id, custom_defaults) {
     try {
-        const result = await get_scope_labels(adapter, org);
+        const result = await get_scope_labels(adapter, org_id);
         if (!result.success) {
             return result;
         }
@@ -71,7 +71,7 @@ export async function get_scope_labels_with_defaults(adapter, org, custom_defaul
                 // Create a synthetic label entry (not persisted)
                 all_labels.push({
                     id: "", // Empty ID indicates this is a default, not from DB
-                    org,
+                    org_id,
                     scope_type: level,
                     label: defaults[level],
                     created_at: "",
@@ -94,7 +94,7 @@ export async function get_scope_labels_with_defaults(adapter, org, custom_defaul
                 filename: "scope_labels_service.ts",
                 line_number: 0,
                 operation: "get_scope_labels_with_defaults",
-                org,
+                org_id,
             },
         });
         return {
@@ -107,10 +107,10 @@ export async function get_scope_labels_with_defaults(adapter, org, custom_defaul
  * Gets the label for a specific scope level
  * Returns the custom label if set, otherwise returns the default
  */
-export async function get_label_for_level(adapter, org, scope_type, custom_default) {
+export async function get_label_for_level(adapter, org_id, scope_type, custom_default) {
     try {
         const label_service = createCrudService(adapter, "hazo_scope_labels");
-        const labels = await label_service.findBy({ org, scope_type });
+        const labels = await label_service.findBy({ org_id, scope_type });
         if (Array.isArray(labels) && labels.length > 0) {
             return labels[0].label;
         }
@@ -125,12 +125,12 @@ export async function get_label_for_level(adapter, org, scope_type, custom_defau
  * Creates or updates a scope label for an organization
  * Uses upsert pattern - creates if not exists, updates if exists
  */
-export async function upsert_scope_label(adapter, org, scope_type, label) {
+export async function upsert_scope_label(adapter, org_id, scope_type, label) {
     try {
         const label_service = createCrudService(adapter, "hazo_scope_labels");
         const now = new Date().toISOString();
-        // Check if label already exists for this org + scope_type
-        const existing = await label_service.findBy({ org, scope_type });
+        // Check if label already exists for this org_id + scope_type
+        const existing = await label_service.findBy({ org_id, scope_type });
         if (Array.isArray(existing) && existing.length > 0) {
             // Update existing
             const existing_label = existing[0];
@@ -153,7 +153,7 @@ export async function upsert_scope_label(adapter, org, scope_type, label) {
             // Create new
             const inserted = await label_service.insert({
                 id: randomUUID(),
-                org,
+                org_id,
                 scope_type,
                 label,
                 created_at: now,
@@ -181,7 +181,7 @@ export async function upsert_scope_label(adapter, org, scope_type, label) {
                 filename: "scope_labels_service.ts",
                 line_number: 0,
                 operation: "upsert_scope_label",
-                org,
+                org_id,
                 scope_type,
                 label,
             },
@@ -196,11 +196,11 @@ export async function upsert_scope_label(adapter, org, scope_type, label) {
  * Batch upsert scope labels for an organization
  * Useful for saving all labels at once from the UI
  */
-export async function batch_upsert_scope_labels(adapter, org, labels) {
+export async function batch_upsert_scope_labels(adapter, org_id, labels) {
     try {
         const results = [];
         for (const { scope_type, label } of labels) {
-            const result = await upsert_scope_label(adapter, org, scope_type, label);
+            const result = await upsert_scope_label(adapter, org_id, scope_type, label);
             if (!result.success) {
                 return {
                     success: false,
@@ -226,7 +226,7 @@ export async function batch_upsert_scope_labels(adapter, org, labels) {
                 filename: "scope_labels_service.ts",
                 line_number: 0,
                 operation: "batch_upsert_scope_labels",
-                org,
+                org_id,
             },
         });
         return {
@@ -238,11 +238,11 @@ export async function batch_upsert_scope_labels(adapter, org, labels) {
 /**
  * Deletes a scope label, reverting to default
  */
-export async function delete_scope_label(adapter, org, scope_type) {
+export async function delete_scope_label(adapter, org_id, scope_type) {
     try {
         const label_service = createCrudService(adapter, "hazo_scope_labels");
         // Find the label
-        const existing = await label_service.findBy({ org, scope_type });
+        const existing = await label_service.findBy({ org_id, scope_type });
         if (!Array.isArray(existing) || existing.length === 0) {
             return {
                 success: true, // Already doesn't exist
@@ -265,7 +265,7 @@ export async function delete_scope_label(adapter, org, scope_type) {
                 filename: "scope_labels_service.ts",
                 line_number: 0,
                 operation: "delete_scope_label",
-                org,
+                org_id,
                 scope_type,
             },
         });

package/dist/lib/services/scope_service.d.ts

@@ -3,7 +3,8 @@ export type ScopeLevel = "hazo_scopes_l1" | "hazo_scopes_l2" | "hazo_scopes_l3"
 export type ScopeRecord = {
     id: string;
     seq: string;
-    org: string;
+    org_id: string;
+    root_org_id: string;
     name: string;
     parent_scope_id?: string | null;
     created_at: string;
@@ -16,7 +17,8 @@ export type ScopeServiceResult = {
     error?: string;
 };
 export type CreateScopeData = {
-    org: string;
+    org_id: string;
+    root_org_id: string;
     name: string;
     parent_scope_id?: string;
 };
@@ -43,7 +45,7 @@ export declare function get_child_level(level: ScopeLevel): ScopeLevel | undefin
 /**
  * Gets all scopes for a given level, optionally filtered by organization
  */
-export declare function get_scopes_by_level(adapter: HazoConnectAdapter, level: ScopeLevel, org?: string): Promise<ScopeServiceResult>;
+export declare function get_scopes_by_level(adapter: HazoConnectAdapter, level: ScopeLevel, org_id?: string): Promise<ScopeServiceResult>;
 /**
  * Gets a single scope by ID
  */
@@ -93,11 +95,12 @@ export type ScopeTreeNode = ScopeRecord & {
 export type OrgScopeTreeNode = {
     id: string;
     name: string;
-    org: string;
+    org_id: string;
+    root_org_id: string;
     isOrgNode: true;
     children: ScopeTreeNode[];
 };
-export declare function get_scope_tree(adapter: HazoConnectAdapter, org: string): Promise<{
+export declare function get_scope_tree(adapter: HazoConnectAdapter, org_id: string): Promise<{
     success: boolean;
     tree?: ScopeTreeNode[];
     error?: string;

package/dist/lib/services/scope_service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scope_service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/scope_service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAMvD,MAAM,MAAM,UAAU,GAClB,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,CAAC;AAErB,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,CAAC;AAGF,eAAO,MAAM,YAAY,EAAE,UAAU,EAQpC,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAQ1D,CAAC;AAIF;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,UAAU,CAEvE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,CAI1E;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,CAIzE;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,UAAU,EACjB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,kBAAkB,CAAC,CA0C7B;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAoC7B;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,UAAU,EACjB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,kBAAkB,CAAC,CAoC7B;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,kBAAkB,CAAC,CAyE7B;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,kBAAkB,CAAC,CA2E7B;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAoC7B;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAqC7B;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAuD7B;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAoD7B;AAED;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG;IACxC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAC3B,KAAK,EAAE,UAAU,CAAC;CACnB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B,CAAC;AAEF,wBAAsB,cAAc,CAClC,OAAO,EAAE,kBAAkB,EAC3B,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA8DvE;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,aAAa,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA8DxE"}
+{"version":3,"file":"scope_service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/scope_service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAMvD,MAAM,MAAM,UAAU,GAClB,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,CAAC;AAErB,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,CAAC;AAGF,eAAO,MAAM,YAAY,EAAE,UAAU,EAQpC,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAQ1D,CAAC;AAIF;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,UAAU,CAEvE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,CAI1E;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,CAIzE;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,UAAU,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,kBAAkB,CAAC,CA0C7B;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAoC7B;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,UAAU,EACjB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,kBAAkB,CAAC,CAoC7B;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,kBAAkB,CAAC,CA0E7B;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,kBAAkB,CAAC,CA2E7B;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAoC7B;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAqC7B;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAuD7B;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAoD7B;AAED;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG;IACxC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAC3B,KAAK,EAAE,UAAU,CAAC;CACnB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B,CAAC;AAEF,wBAAsB,cAAc,CAClC,OAAO,EAAE,kBAAkB,EAC3B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA8DvE;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,aAAa,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA8DxE"}

package/dist/lib/services/scope_service.js

@@ -50,12 +50,12 @@ export function get_child_level(level) {
 /**
  * Gets all scopes for a given level, optionally filtered by organization
  */
-export async function get_scopes_by_level(adapter, level, org) {
+export async function get_scopes_by_level(adapter, level, org_id) {
     try {
         const scope_service = createCrudService(adapter, level);
         let scopes;
-        if (org) {
-            scopes = await scope_service.findBy({ org });
+        if (org_id) {
+            scopes = await scope_service.findBy({ org_id });
         }
         else {
             scopes = await scope_service.findBy({});
@@ -82,7 +82,7 @@ export async function get_scopes_by_level(adapter, level, org) {
                 line_number: 0,
                 operation: "get_scopes_by_level",
                 level,
-                org,
+                org_id,
             },
         });
         return {
@@ -194,7 +194,8 @@ export async function create_scope(adapter, level, data) {
             }
         }
         const insert_data = {
-            org: data.org,
+            org_id: data.org_id,
+            root_org_id: data.root_org_id,
             name: data.name,
             created_at: now,
             changed_at: now,
@@ -474,10 +475,10 @@ export async function get_scope_descendants(adapter, level, scope_id) {
         };
     }
 }
-export async function get_scope_tree(adapter, org) {
+export async function get_scope_tree(adapter, org_id) {
     try {
         // Get all L1 scopes for this org
-        const l1_result = await get_scopes_by_level(adapter, "hazo_scopes_l1", org);
+        const l1_result = await get_scopes_by_level(adapter, "hazo_scopes_l1", org_id);
         if (!l1_result.success || !l1_result.scopes) {
             return l1_result;
         }
@@ -516,7 +517,7 @@ export async function get_scope_tree(adapter, org) {
                 filename: "scope_service.ts",
                 line_number: 0,
                 operation: "get_scope_tree",
-                org,
+                org_id,
             },
         });
         return {

package/dist/lib/ui_shell_config.server.d.ts

@@ -1,3 +1,4 @@
+import { type NavbarConfig } from "./navbar_config.server";
 export type UiShellLayoutMode = "test_sidebar" | "standalone";
 export type UiShellConfig = {
     layout_mode: UiShellLayoutMode;
@@ -7,6 +8,10 @@ export type UiShellConfig = {
     standalone_content_class: string;
     standalone_show_heading: boolean;
     standalone_show_description: boolean;
+    /** Navbar configuration for standalone mode */
+    navbar: NavbarConfig;
+    /** Enable vertical centering in standalone mode */
+    vertical_center: boolean;
 };
 /**
  * Reads ui shell configuration controlling whether pages use the sidebar test shell

package/dist/lib/ui_shell_config.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ui_shell_config.server.d.ts","sourceRoot":"","sources":["../../src/lib/ui_shell_config.server.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,iBAAiB,GAAG,cAAc,GAAG,YAAY,CAAC;AAE9D,MAAM,MAAM,aAAa,GAAG;IAC1B,WAAW,EAAE,iBAAiB,CAAC;IAC/B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,wBAAwB,EAAE,MAAM,CAAC;IACjC,wBAAwB,EAAE,MAAM,CAAC;IACjC,uBAAuB,EAAE,OAAO,CAAC;IACjC,2BAA2B,EAAE,OAAO,CAAC;CACtC,CAAC;AAGF;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,aAAa,CA+CnD"}
+{"version":3,"file":"ui_shell_config.server.d.ts","sourceRoot":"","sources":["../../src/lib/ui_shell_config.server.ts"],"names":[],"mappings":"AAGA,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAG9E,MAAM,MAAM,iBAAiB,GAAG,cAAc,GAAG,YAAY,CAAC;AAE9D,MAAM,MAAM,aAAa,GAAG;IAC1B,WAAW,EAAE,iBAAiB,CAAC;IAC/B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,wBAAwB,EAAE,MAAM,CAAC;IACjC,wBAAwB,EAAE,MAAM,CAAC;IACjC,uBAAuB,EAAE,OAAO,CAAC;IACjC,2BAA2B,EAAE,OAAO,CAAC;IACrC,+CAA+C;IAC/C,MAAM,EAAE,YAAY,CAAC;IACrB,mDAAmD;IACnD,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC;AAGF;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,aAAa,CAyDnD"}

package/dist/lib/ui_shell_config.server.js

@@ -1,6 +1,7 @@
 // file_description: load ui shell layout settings from hazo_auth_config.ini
 // section: imports
 import { get_config_value } from "./config/config_loader.server";
+import { get_navbar_config } from "./navbar_config.server";
 // section: helpers
 /**
  * Reads ui shell configuration controlling whether pages use the sidebar test shell
@@ -16,6 +17,8 @@ export function get_ui_shell_config() {
     const standalone_content_class = get_config_value(section, "standalone_content_class", "cls_standalone_shell_content w-full max-w-5xl shadow-xl rounded-2xl border bg-card");
     const standalone_show_heading = get_config_value(section, "standalone_show_heading", "true").toLowerCase() === "true";
     const standalone_show_description = get_config_value(section, "standalone_show_description", "true").toLowerCase() === "true";
+    const vertical_center = get_config_value(section, "vertical_center", "true").toLowerCase() === "true";
+    const navbar = get_navbar_config();
     return {
         layout_mode,
         standalone_heading,
@@ -24,5 +27,7 @@ export function get_ui_shell_config() {
         standalone_content_class,
         standalone_show_heading,
         standalone_show_description,
+        navbar,
+        vertical_center,
     };
 }

package/dist/lib/user_types_config.server.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Badge color preset names supported by the UserTypeBadge component
+ */
+export type BadgeColorPreset = "blue" | "green" | "red" | "yellow" | "purple" | "gray" | "orange" | "pink";
+/**
+ * Individual user type definition parsed from config
+ */
+export type UserTypeDefinition = {
+    /** Unique key stored in database (e.g., "admin", "standard") */
+    key: string;
+    /** Display label (e.g., "Administrator", "Standard User") */
+    label: string;
+    /** Badge color - preset name or hex value */
+    badge_color: string;
+    /** Whether this is a preset color or custom hex */
+    is_preset_color: boolean;
+};
+/**
+ * User types configuration options
+ */
+export type UserTypesConfig = {
+    /** Whether user types feature is enabled (default: false) */
+    enable_user_types: boolean;
+    /** Default user type for new users (empty = no default) */
+    default_user_type: string;
+    /** Map of user type definitions by key */
+    user_types: Map<string, UserTypeDefinition>;
+};
+/**
+ * Reads user types configuration from hazo_auth_config.ini file
+ * Falls back to defaults if config file is not found or section is missing
+ * @returns User types configuration options
+ */
+export declare function get_user_types_config(): UserTypesConfig;
+/**
+ * Checks if user types feature is enabled in the configuration
+ * Convenience function for quick checks
+ */
+export declare function is_user_types_enabled(): boolean;
+/**
+ * Gets the default user type from config
+ * Returns empty string if not configured
+ */
+export declare function get_default_user_type(): string;
+/**
+ * Gets user type definition by key
+ * @param type_key - The user type key
+ * @returns UserTypeDefinition or undefined if not found
+ */
+export declare function get_user_type_by_key(type_key: string): UserTypeDefinition | undefined;
+/**
+ * Gets all user type definitions as array (for UI dropdowns)
+ * @returns Array of UserTypeDefinition objects
+ */
+export declare function get_all_user_types(): UserTypeDefinition[];
+//# sourceMappingURL=user_types_config.server.d.ts.map

package/dist/lib/user_types_config.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user_types_config.server.d.ts","sourceRoot":"","sources":["../../src/lib/user_types_config.server.ts"],"names":[],"mappings":"AAWA;;GAEG;AACH,MAAM,MAAM,gBAAgB,GACxB,MAAM,GACN,OAAO,GACP,KAAK,GACL,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,MAAM,CAAC;AAEX;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,gEAAgE;IAChE,GAAG,EAAE,MAAM,CAAC;IACZ,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,6DAA6D;IAC7D,iBAAiB,EAAE,OAAO,CAAC;IAC3B,2DAA2D;IAC3D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,0CAA0C;IAC1C,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;CAC7C,CAAC;AA2CF;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,eAAe,CAoCvD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CAM/C;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAM9C;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,GACf,kBAAkB,GAAG,SAAS,CAGhC;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,kBAAkB,EAAE,CAGzD"}

package/dist/lib/user_types_config.server.js

@@ -0,0 +1,100 @@
+// file_description: server-only helper to read user types configuration from hazo_auth_config.ini
+// section: imports
+import { get_config_value, get_config_boolean, read_config_section, } from "./config/config_loader.server";
+import { DEFAULT_USER_TYPES } from "./config/default_config";
+// section: constants
+const SECTION_NAME = "hazo_auth__user_types";
+const PRESET_COLORS = new Set([
+    "blue",
+    "green",
+    "red",
+    "yellow",
+    "purple",
+    "gray",
+    "orange",
+    "pink",
+]);
+// section: helpers
+/**
+ * Parses a user type definition string
+ * Format: key:label:color (e.g., "admin:Administrator:red" or "custom:Custom Type:#4CAF50")
+ * @param value - The config value string
+ * @returns UserTypeDefinition or null if invalid
+ */
+function parse_user_type_definition(value) {
+    const parts = value.split(":").map((s) => s.trim());
+    if (parts.length < 2)
+        return null;
+    const key = parts[0];
+    const label = parts[1];
+    const badge_color = parts[2] || "gray";
+    if (!key || !label)
+        return null;
+    return {
+        key,
+        label,
+        badge_color,
+        is_preset_color: PRESET_COLORS.has(badge_color),
+    };
+}
+/**
+ * Reads user types configuration from hazo_auth_config.ini file
+ * Falls back to defaults if config file is not found or section is missing
+ * @returns User types configuration options
+ */
+export function get_user_types_config() {
+    const enable_user_types = get_config_boolean(SECTION_NAME, "enable_user_types", DEFAULT_USER_TYPES.enable_user_types);
+    const default_user_type = get_config_value(SECTION_NAME, "default_user_type", DEFAULT_USER_TYPES.default_user_type);
+    // Parse user type definitions from config
+    const user_types = new Map();
+    const section = read_config_section(SECTION_NAME);
+    if (section) {
+        // Look for user_type_1, user_type_2, etc. (up to 50 types supported)
+        for (let i = 1; i <= 50; i++) {
+            const key = `user_type_${i}`;
+            const value = section[key];
+            if (!value)
+                continue;
+            const type_def = parse_user_type_definition(value);
+            if (type_def) {
+                user_types.set(type_def.key, type_def);
+            }
+        }
+    }
+    return {
+        enable_user_types,
+        default_user_type,
+        user_types,
+    };
+}
+/**
+ * Checks if user types feature is enabled in the configuration
+ * Convenience function for quick checks
+ */
+export function is_user_types_enabled() {
+    return get_config_boolean(SECTION_NAME, "enable_user_types", DEFAULT_USER_TYPES.enable_user_types);
+}
+/**
+ * Gets the default user type from config
+ * Returns empty string if not configured
+ */
+export function get_default_user_type() {
+    return get_config_value(SECTION_NAME, "default_user_type", DEFAULT_USER_TYPES.default_user_type);
+}
+/**
+ * Gets user type definition by key
+ * @param type_key - The user type key
+ * @returns UserTypeDefinition or undefined if not found
+ */
+export function get_user_type_by_key(type_key) {
+    const config = get_user_types_config();
+    return config.user_types.get(type_key);
+}
+/**
+ * Gets all user type definitions as array (for UI dropdowns)
+ * @returns Array of UserTypeDefinition objects
+ */
+export function get_all_user_types() {
+    const config = get_user_types_config();
+    return Array.from(config.user_types.values());
+}

package/dist/server/routes/index.d.ts

@@ -20,4 +20,5 @@ export { GET as userManagementUsersGET, PATCH as userManagementUsersPATCH, POST
 export { GET as userManagementPermissionsGET, POST as userManagementPermissionsPOST, PUT as userManagementPermissionsPUT, DELETE as userManagementPermissionsDELETE } from "./user_management_permissions.js";
 export { GET as userManagementRolesGET, POST as userManagementRolesPOST, PUT as userManagementRolesPUT } from "./user_management_roles.js";
 export { GET as userManagementUsersRolesGET, POST as userManagementUsersRolesPOST, PUT as userManagementUsersRolesPUT } from "./user_management_users_roles.js";
+export { GET as orgManagementOrgsGET, POST as orgManagementOrgsPOST, PATCH as orgManagementOrgsPATCH, DELETE as orgManagementOrgsDELETE } from "./org_management_orgs.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/server/routes/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/routes/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,IAAI,IAAI,SAAS,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,IAAI,IAAI,YAAY,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,IAAI,IAAI,UAAU,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,GAAG,IAAI,KAAK,EAAE,MAAM,SAAS,CAAC;AAGvC,OAAO,EAAE,IAAI,IAAI,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,IAAI,IAAI,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,IAAI,IAAI,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,GAAG,IAAI,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAGzE,OAAO,EAAE,GAAG,IAAI,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,IAAI,IAAI,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAG1E,OAAO,EAAE,KAAK,IAAI,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,IAAI,IAAI,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,EAAE,MAAM,IAAI,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,GAAG,IAAI,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,GAAG,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,GAAG,IAAI,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAGjF,OAAO,EAAE,IAAI,IAAI,WAAW,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,IAAI,IAAI,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAGpE,OAAO,EAAE,GAAG,IAAI,sBAAsB,EAAE,KAAK,IAAI,wBAAwB,EAAE,IAAI,IAAI,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC/I,OAAO,EAAE,GAAG,IAAI,4BAA4B,EAAE,IAAI,IAAI,6BAA6B,EAAE,GAAG,IAAI,4BAA4B,EAAE,MAAM,IAAI,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AAC9M,OAAO,EAAE,GAAG,IAAI,sBAAsB,EAAE,IAAI,IAAI,uBAAuB,EAAE,GAAG,IAAI,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAC3I,OAAO,EAAE,GAAG,IAAI,2BAA2B,EAAE,IAAI,IAAI,4BAA4B,EAAE,GAAG,IAAI,2BAA2B,EAAE,MAAM,kCAAkC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/routes/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,IAAI,IAAI,SAAS,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,IAAI,IAAI,YAAY,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,IAAI,IAAI,UAAU,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,GAAG,IAAI,KAAK,EAAE,MAAM,SAAS,CAAC;AAGvC,OAAO,EAAE,IAAI,IAAI,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,IAAI,IAAI,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,IAAI,IAAI,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,GAAG,IAAI,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAGzE,OAAO,EAAE,GAAG,IAAI,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,IAAI,IAAI,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAG1E,OAAO,EAAE,KAAK,IAAI,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,IAAI,IAAI,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,EAAE,MAAM,IAAI,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,GAAG,IAAI,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,GAAG,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,GAAG,IAAI,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAGjF,OAAO,EAAE,IAAI,IAAI,WAAW,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,IAAI,IAAI,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAGpE,OAAO,EAAE,GAAG,IAAI,sBAAsB,EAAE,KAAK,IAAI,wBAAwB,EAAE,IAAI,IAAI,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC/I,OAAO,EAAE,GAAG,IAAI,4BAA4B,EAAE,IAAI,IAAI,6BAA6B,EAAE,GAAG,IAAI,4BAA4B,EAAE,MAAM,IAAI,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AAC9M,OAAO,EAAE,GAAG,IAAI,sBAAsB,EAAE,IAAI,IAAI,uBAAuB,EAAE,GAAG,IAAI,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAC3I,OAAO,EAAE,GAAG,IAAI,2BAA2B,EAAE,IAAI,IAAI,4BAA4B,EAAE,GAAG,IAAI,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAGhK,OAAO,EAAE,GAAG,IAAI,oBAAoB,EAAE,IAAI,IAAI,qBAAqB,EAAE,KAAK,IAAI,sBAAsB,EAAE,MAAM,IAAI,uBAAuB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/server/routes/index.js

@@ -28,3 +28,5 @@ export { GET as userManagementUsersGET, PATCH as userManagementUsersPATCH, POST
 export { GET as userManagementPermissionsGET, POST as userManagementPermissionsPOST, PUT as userManagementPermissionsPUT, DELETE as userManagementPermissionsDELETE } from "./user_management_permissions.js";
 export { GET as userManagementRolesGET, POST as userManagementRolesPOST, PUT as userManagementRolesPUT } from "./user_management_roles.js";
 export { GET as userManagementUsersRolesGET, POST as userManagementUsersRolesPOST, PUT as userManagementUsersRolesPUT } from "./user_management_users_roles.js";
+// Organization management routes
+export { GET as orgManagementOrgsGET, POST as orgManagementOrgsPOST, PATCH as orgManagementOrgsPATCH, DELETE as orgManagementOrgsDELETE } from "./org_management_orgs.js";

package/dist/server/routes/org_management_orgs.d.ts

@@ -0,0 +1,2 @@
+export { GET, POST, PATCH, DELETE } from "../../app/api/hazo_auth/org_management/orgs/route";
+//# sourceMappingURL=org_management_orgs.d.ts.map

package/dist/server/routes/org_management_orgs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org_management_orgs.d.ts","sourceRoot":"","sources":["../../../src/server/routes/org_management_orgs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,mDAAmD,CAAC"}

package/dist/server/routes/org_management_orgs.js

@@ -0,0 +1,2 @@
+// file_description: re-export org management orgs route handlers for use by consuming projects
+export { GET, POST, PATCH, DELETE } from "../../app/api/hazo_auth/org_management/orgs/route";

package/hazo_auth_config.example.ini

@@ -561,6 +561,15 @@ application_permission_list_defaults = admin_user_management,admin_role_manageme
 # When enabled, users can be assigned to organizations and hazo_get_auth returns org info
 # enable_multi_tenancy = false
 
+# NOTE: When multi-tenancy is enabled, org_id is OPTIONAL by default.
+# Users without org_id will have null org fields in hazo_get_auth result.
+#
+# To REQUIRE org assignment for specific API routes, use:
+#   hazo_get_auth(request, { require_org: true })
+#
+# This will throw OrgRequiredError if the user has no org_id assigned.
+# Consuming apps should catch this error and return an appropriate response.
+
 # Organization cache TTL in minutes (default: 15)
 # Cached org data will be refreshed after this time
 # org_cache_ttl_minutes = 15