hazo_auth 4.4.1 → 4.5.1

package/dist/app/api/hazo_auth/org_management/orgs/route.js

@@ -0,0 +1,315 @@
+// file_description: API route for organization management (list, create, update, soft delete)
+// section: imports
+import { NextResponse } from "next/server";
+import { get_hazo_connect_instance } from "../../../../../lib/hazo_connect_instance.server";
+import { hazo_get_auth } from "../../../../../lib/auth/hazo_get_auth.server";
+import { create_app_logger } from "../../../../../lib/app_logger";
+import { get_filename, get_line_number } from "../../../../../lib/utils/api_route_helpers";
+import { is_multi_tenancy_enabled } from "../../../../../lib/multi_tenancy_config.server";
+import { get_orgs, create_org, update_org, soft_delete_org, get_org_tree, check_user_org_access, } from "../../../../../lib/services/org_service";
+// section: route_config
+export const dynamic = "force-dynamic";
+// section: constants
+const PERMISSION_ORG_MANAGEMENT = "hazo_perm_org_management";
+const PERMISSION_GLOBAL_ADMIN = "hazo_org_global_admin";
+// section: helpers
+async function check_permission(request) {
+    const auth_result = await hazo_get_auth(request, {
+        required_permissions: [PERMISSION_ORG_MANAGEMENT],
+        strict: false,
+    });
+    if (!auth_result.authenticated) {
+        return {
+            authorized: false,
+            error: NextResponse.json({ error: "Authentication required" }, { status: 401 }),
+        };
+    }
+    if (!auth_result.permission_ok) {
+        return {
+            authorized: false,
+            error: NextResponse.json({ error: "Permission denied", missing_permissions: auth_result.missing_permissions }, { status: 403 }),
+        };
+    }
+    // Check if user has global admin permission
+    const is_global_admin = auth_result.permissions.includes(PERMISSION_GLOBAL_ADMIN);
+    return {
+        authorized: true,
+        user_id: auth_result.user.id,
+        user_org_id: auth_result.user.org_id || null,
+        user_root_org_id: auth_result.user.root_org_id || null,
+        is_global_admin,
+    };
+}
+// section: api_handler
+/**
+ * GET - Fetch organizations
+ * Query params:
+ * - action: 'list' | 'tree' (default: 'list')
+ * - include_inactive: boolean (default: false)
+ * - root_org_id: string (optional, filter by root org - required unless global admin)
+ */
+export async function GET(request) {
+    var _a;
+    const logger = create_app_logger();
+    try {
+        // Check if multi-tenancy is enabled
+        if (!is_multi_tenancy_enabled()) {
+            return NextResponse.json({ error: "Multi-tenancy is not enabled", code: "MULTI_TENANCY_DISABLED" }, { status: 400 });
+        }
+        // Check permission
+        const perm_check = await check_permission(request);
+        if (!perm_check.authorized) {
+            return perm_check.error;
+        }
+        const { searchParams } = new URL(request.url);
+        const action = searchParams.get("action") || "list";
+        const include_inactive = searchParams.get("include_inactive") === "true";
+        let root_org_id = searchParams.get("root_org_id") || undefined;
+        const adapter = get_hazo_connect_instance();
+        // If not global admin, restrict to user's org tree
+        if (!perm_check.is_global_admin) {
+            // User must have an org to view orgs
+            if (!perm_check.user_root_org_id && !perm_check.user_org_id) {
+                return NextResponse.json({ error: "You are not assigned to any organization" }, { status: 403 });
+            }
+            // Force filter to user's root org
+            root_org_id = perm_check.user_root_org_id || perm_check.user_org_id || undefined;
+        }
+        if (action === "tree") {
+            // Return hierarchical tree structure
+            const result = await get_org_tree(adapter, root_org_id, include_inactive);
+            if (!result.success) {
+                return NextResponse.json({ error: result.error }, { status: 500 });
+            }
+            return NextResponse.json({
+                success: true,
+                tree: result.tree,
+            });
+        }
+        // List organizations
+        const result = await get_orgs(adapter, {
+            root_org_id,
+            include_inactive,
+        });
+        if (!result.success) {
+            return NextResponse.json({ error: result.error }, { status: 500 });
+        }
+        logger.info("org_management_orgs_fetched", {
+            filename: get_filename(),
+            line_number: get_line_number(),
+            root_org_id,
+            count: ((_a = result.orgs) === null || _a === void 0 ? void 0 : _a.length) || 0,
+            is_global_admin: perm_check.is_global_admin,
+        });
+        return NextResponse.json({
+            success: true,
+            orgs: result.orgs,
+        });
+    }
+    catch (error) {
+        const error_message = error instanceof Error ? error.message : "Unknown error";
+        logger.error("org_management_orgs_fetch_error", {
+            filename: get_filename(),
+            line_number: get_line_number(),
+            error_message,
+        });
+        return NextResponse.json({ error: "Failed to fetch organizations" }, { status: 500 });
+    }
+}
+/**
+ * POST - Create a new organization
+ * Body: { name: string, user_limit?: number, parent_org_id?: string }
+ */
+export async function POST(request) {
+    var _a;
+    const logger = create_app_logger();
+    try {
+        // Check if multi-tenancy is enabled
+        if (!is_multi_tenancy_enabled()) {
+            return NextResponse.json({ error: "Multi-tenancy is not enabled", code: "MULTI_TENANCY_DISABLED" }, { status: 400 });
+        }
+        // Check permission
+        const perm_check = await check_permission(request);
+        if (!perm_check.authorized) {
+            return perm_check.error;
+        }
+        const body = await request.json();
+        const { name, user_limit, parent_org_id } = body;
+        // Validate required fields
+        if (!name || typeof name !== "string" || name.trim().length === 0) {
+            return NextResponse.json({ error: "name is required and must be a non-empty string" }, { status: 400 });
+        }
+        const adapter = get_hazo_connect_instance();
+        // If not global admin, verify user has access to parent org
+        if (!perm_check.is_global_admin && parent_org_id) {
+            const access_check = await check_user_org_access(adapter, perm_check.user_org_id || null, perm_check.user_root_org_id || null, parent_org_id);
+            if (!access_check.has_access) {
+                return NextResponse.json({ error: "You do not have access to the parent organization" }, { status: 403 });
+            }
+        }
+        // If not global admin and no parent_org_id, they can't create root orgs
+        if (!perm_check.is_global_admin && !parent_org_id) {
+            return NextResponse.json({ error: "Only global admins can create root organizations" }, { status: 403 });
+        }
+        const result = await create_org(adapter, {
+            name: name.trim(),
+            user_limit: typeof user_limit === "number" ? user_limit : 0,
+            parent_org_id,
+            created_by: perm_check.user_id,
+        });
+        if (!result.success) {
+            return NextResponse.json({ error: result.error }, { status: 400 });
+        }
+        logger.info("org_management_org_created", {
+            filename: get_filename(),
+            line_number: get_line_number(),
+            org_id: (_a = result.org) === null || _a === void 0 ? void 0 : _a.id,
+            name: name.trim(),
+            parent_org_id,
+            created_by: perm_check.user_id,
+        });
+        return NextResponse.json({
+            success: true,
+            org: result.org,
+        }, { status: 201 });
+    }
+    catch (error) {
+        const error_message = error instanceof Error ? error.message : "Unknown error";
+        logger.error("org_management_org_create_error", {
+            filename: get_filename(),
+            line_number: get_line_number(),
+            error_message,
+        });
+        return NextResponse.json({ error: "Failed to create organization" }, { status: 500 });
+    }
+}
+/**
+ * PATCH - Update an existing organization
+ * Body: { org_id: string, name?: string, user_limit?: number }
+ */
+export async function PATCH(request) {
+    const logger = create_app_logger();
+    try {
+        // Check if multi-tenancy is enabled
+        if (!is_multi_tenancy_enabled()) {
+            return NextResponse.json({ error: "Multi-tenancy is not enabled", code: "MULTI_TENANCY_DISABLED" }, { status: 400 });
+        }
+        // Check permission
+        const perm_check = await check_permission(request);
+        if (!perm_check.authorized) {
+            return perm_check.error;
+        }
+        const body = await request.json();
+        const { org_id, name, user_limit } = body;
+        // Validate required fields
+        if (!org_id || typeof org_id !== "string") {
+            return NextResponse.json({ error: "org_id is required" }, { status: 400 });
+        }
+        const adapter = get_hazo_connect_instance();
+        // If not global admin, verify user has access to this org
+        if (!perm_check.is_global_admin) {
+            const access_check = await check_user_org_access(adapter, perm_check.user_org_id || null, perm_check.user_root_org_id || null, org_id);
+            if (!access_check.has_access) {
+                return NextResponse.json({ error: "You do not have access to this organization" }, { status: 403 });
+            }
+        }
+        // Build update data
+        const update_data = {
+            changed_by: perm_check.user_id,
+        };
+        if (name !== undefined) {
+            if (typeof name !== "string" || name.trim().length === 0) {
+                return NextResponse.json({ error: "name must be a non-empty string" }, { status: 400 });
+            }
+            update_data.name = name.trim();
+        }
+        if (user_limit !== undefined) {
+            if (typeof user_limit !== "number" || user_limit < 0) {
+                return NextResponse.json({ error: "user_limit must be a non-negative number" }, { status: 400 });
+            }
+            update_data.user_limit = user_limit;
+        }
+        if (update_data.name === undefined && update_data.user_limit === undefined) {
+            return NextResponse.json({ error: "No update data provided" }, { status: 400 });
+        }
+        const result = await update_org(adapter, org_id, update_data);
+        if (!result.success) {
+            return NextResponse.json({ error: result.error }, { status: 400 });
+        }
+        logger.info("org_management_org_updated", {
+            filename: get_filename(),
+            line_number: get_line_number(),
+            org_id,
+            changed_by: perm_check.user_id,
+        });
+        return NextResponse.json({
+            success: true,
+            org: result.org,
+        });
+    }
+    catch (error) {
+        const error_message = error instanceof Error ? error.message : "Unknown error";
+        logger.error("org_management_org_update_error", {
+            filename: get_filename(),
+            line_number: get_line_number(),
+            error_message,
+        });
+        return NextResponse.json({ error: "Failed to update organization" }, { status: 500 });
+    }
+}
+/**
+ * DELETE - Soft delete an organization (sets active = false)
+ * Query params: org_id
+ */
+export async function DELETE(request) {
+    const logger = create_app_logger();
+    try {
+        // Check if multi-tenancy is enabled
+        if (!is_multi_tenancy_enabled()) {
+            return NextResponse.json({ error: "Multi-tenancy is not enabled", code: "MULTI_TENANCY_DISABLED" }, { status: 400 });
+        }
+        // Check permission
+        const perm_check = await check_permission(request);
+        if (!perm_check.authorized) {
+            return perm_check.error;
+        }
+        const { searchParams } = new URL(request.url);
+        const org_id = searchParams.get("org_id");
+        if (!org_id) {
+            return NextResponse.json({ error: "org_id query parameter is required" }, { status: 400 });
+        }
+        const adapter = get_hazo_connect_instance();
+        // If not global admin, verify user has access to this org
+        if (!perm_check.is_global_admin) {
+            const access_check = await check_user_org_access(adapter, perm_check.user_org_id || null, perm_check.user_root_org_id || null, org_id);
+            if (!access_check.has_access) {
+                return NextResponse.json({ error: "You do not have access to this organization" }, { status: 403 });
+            }
+        }
+        // Soft delete (set active = false)
+        const result = await soft_delete_org(adapter, org_id, perm_check.user_id);
+        if (!result.success) {
+            return NextResponse.json({ error: result.error }, { status: 400 });
+        }
+        logger.info("org_management_org_deactivated", {
+            filename: get_filename(),
+            line_number: get_line_number(),
+            org_id,
+            deactivated_by: perm_check.user_id,
+        });
+        return NextResponse.json({
+            success: true,
+            org: result.org,
+            message: "Organization deactivated successfully",
+        });
+    }
+    catch (error) {
+        const error_message = error instanceof Error ? error.message : "Unknown error";
+        logger.error("org_management_org_deactivate_error", {
+            filename: get_filename(),
+            line_number: get_line_number(),
+            error_message,
+        });
+        return NextResponse.json({ error: "Failed to deactivate organization" }, { status: 500 });
+    }
+}

package/dist/app/api/hazo_auth/user_management/users/route.d.ts

@@ -8,6 +8,13 @@ export declare function GET(request: NextRequest): Promise<NextResponse<{
     error: string;
 }> | NextResponse<{
     success: boolean;
+    user_types_enabled: boolean;
+    available_user_types: {
+        key: string;
+        label: string;
+        badge_color: string;
+    }[];
+    multi_tenancy_enabled: boolean;
     users: {
         id: unknown;
         name: {} | null;
@@ -18,10 +25,13 @@ export declare function GET(request: NextRequest): Promise<NextResponse<{
         created_at: {} | null;
         profile_picture_url: {} | null;
         profile_source: {} | null;
+        user_type: string | null;
+        org_id: string | null | undefined;
+        root_org_id: string | null | undefined;
     }[];
 }>>;
 /**
- * PATCH - Update user (deactivate: set is_active to false)
+ * PATCH - Update user (deactivate: set is_active to false, assign org, etc.)
  */
 export declare function PATCH(request: NextRequest): Promise<NextResponse<{
     error: string;

package/dist/app/api/hazo_auth/user_management/users/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/app/api/hazo_auth/user_management/users/route.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAUxD,eAAO,MAAM,OAAO,kBAAkB,CAAC;AAGvC;;;GAGG;AACH,wBAAsB,GAAG,CAAC,OAAO,EAAE,WAAW;;;;;;;;;;;;;;;IA2D7C;AAED;;GAEG;AACH,wBAAsB,KAAK,CAAC,OAAO,EAAE,WAAW;;;;IA0E/C;AAED;;GAEG;AACH,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW;;;;IA2E9C"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/app/api/hazo_auth/user_management/users/route.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAsBxD,eAAO,MAAM,OAAO,kBAAkB,CAAC;AAGvC;;;GAGG;AACH,wBAAsB,GAAG,CAAC,OAAO,EAAE,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;IA+E7C;AAED;;GAEG;AACH,wBAAsB,KAAK,CAAC,OAAO,EAAE,WAAW;;;;IA2L/C;AAED;;GAEG;AACH,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW;;;;IA2E9C"}

package/dist/app/api/hazo_auth/user_management/users/route.js

@@ -8,6 +8,11 @@ import { get_filename, get_line_number } from "../../../../../lib/utils/api_rout
 import { request_password_reset } from "../../../../../lib/services/password_reset_service";
 import { get_auth_cache } from "../../../../../lib/auth/auth_cache";
 import { get_auth_utility_config } from "../../../../../lib/auth_utility_config.server";
+import { is_user_types_enabled, get_all_user_types, get_user_types_config, } from "../../../../../lib/user_types_config.server";
+import { is_multi_tenancy_enabled } from "../../../../../lib/multi_tenancy_config.server";
+import { get_org_by_id, can_add_user_to_org, } from "../../../../../lib/services/org_service";
+import { get_org_cache } from "../../../../../lib/auth/org_cache";
+import { get_multi_tenancy_config } from "../../../../../lib/multi_tenancy_config.server";
 // section: route_config
 export const dynamic = 'force-dynamic';
 // section: api_handler
@@ -32,8 +37,22 @@ export async function GET(request) {
             line_number: get_line_number(),
             user_count: users.length,
         });
+        // Check if user types feature is enabled
+        const user_types_enabled = is_user_types_enabled();
+        const available_user_types = user_types_enabled
+            ? get_all_user_types().map((t) => ({
+                key: t.key,
+                label: t.label,
+                badge_color: t.badge_color,
+            }))
+            : [];
+        // Check if multi-tenancy is enabled
+        const multi_tenancy_enabled = is_multi_tenancy_enabled();
         return NextResponse.json({
             success: true,
+            user_types_enabled,
+            available_user_types,
+            multi_tenancy_enabled,
             users: users.map((user) => ({
                 id: user.id,
                 name: user.name || null,
@@ -44,6 +63,10 @@ export async function GET(request) {
                 created_at: user.created_at || null,
                 profile_picture_url: user.profile_picture_url || null,
                 profile_source: user.profile_source || null,
+                user_type: user.user_type || null,
+                // Include org info when multi-tenancy is enabled
+                org_id: multi_tenancy_enabled ? user.org_id || null : undefined,
+                root_org_id: multi_tenancy_enabled ? user.root_org_id || null : undefined,
             })),
         }, { status: 200 });
     }
@@ -60,30 +83,89 @@ export async function GET(request) {
     }
 }
 /**
- * PATCH - Update user (deactivate: set is_active to false)
+ * PATCH - Update user (deactivate: set is_active to false, assign org, etc.)
  */
 export async function PATCH(request) {
     const logger = create_app_logger();
     try {
         const body = await request.json();
-        const { user_id, is_active } = body;
-        if (!user_id || typeof is_active !== "boolean") {
-            return NextResponse.json({ error: "user_id and is_active (boolean) are required" }, { status: 400 });
+        const { user_id, is_active, user_type, org_id } = body;
+        // user_id is always required
+        if (!user_id) {
+            return NextResponse.json({ error: "user_id is required" }, { status: 400 });
         }
+        // Build update object based on what's provided
+        const update_data = {
+            changed_at: new Date().toISOString(),
+        };
         const hazoConnect = get_hazo_connect_instance();
+        // Handle is_active if provided
+        if (typeof is_active === "boolean") {
+            update_data.is_active = is_active;
+        }
+        // Handle user_type if provided (only when feature is enabled)
+        if (user_type !== undefined) {
+            const config = get_user_types_config();
+            if (config.enable_user_types) {
+                // Allow null to clear the type, or validate type exists
+                if (user_type === null || user_type === "") {
+                    update_data.user_type = null;
+                }
+                else if (config.user_types.has(user_type)) {
+                    update_data.user_type = user_type;
+                }
+                else {
+                    return NextResponse.json({ error: "Invalid user type" }, { status: 400 });
+                }
+            }
+        }
+        // Handle org_id if provided (only when multi-tenancy is enabled)
+        if (org_id !== undefined) {
+            if (!is_multi_tenancy_enabled()) {
+                return NextResponse.json({ error: "Multi-tenancy is not enabled" }, { status: 400 });
+            }
+            // Allow null to clear the org assignment
+            if (org_id === null || org_id === "") {
+                update_data.org_id = null;
+                update_data.root_org_id = null;
+            }
+            else {
+                // Validate org exists
+                const org_result = await get_org_by_id(hazoConnect, org_id);
+                if (!org_result.success || !org_result.org) {
+                    return NextResponse.json({ error: "Organization not found" }, { status: 400 });
+                }
+                const org = org_result.org;
+                // Check if org is active
+                if (org.active === false) {
+                    return NextResponse.json({ error: "Cannot assign user to inactive organization" }, { status: 400 });
+                }
+                // Check user limit
+                const limit_check = await can_add_user_to_org(hazoConnect, org_id);
+                if (limit_check.success && !limit_check.can_add) {
+                    return NextResponse.json({ error: limit_check.reason || "Organization user limit reached" }, { status: 400 });
+                }
+                // Set org_id and calculate root_org_id
+                update_data.org_id = org_id;
+                update_data.root_org_id = org.root_org_id || org_id;
+            }
+        }
+        // Ensure there's something to update besides changed_at
+        if (Object.keys(update_data).length === 1) {
+            return NextResponse.json({ error: "No valid fields to update" }, { status: 400 });
+        }
         const users_service = createCrudService(hazoConnect, "hazo_users");
-        // Update user with changed_at timestamp
-        const now = new Date().toISOString();
-        await users_service.updateById(user_id, {
-            is_active,
-            changed_at: now,
-        });
-        // Invalidate user cache after deactivation
-        if (is_active === false) {
+        // Update user
+        await users_service.updateById(user_id, update_data);
+        // Invalidate caches
+        let cache_invalidated = false;
+        // Invalidate user auth cache if user deactivated or org changed
+        if (is_active === false || org_id !== undefined) {
             try {
-                const config = get_auth_utility_config();
-                const cache = get_auth_cache(config.cache_max_users, config.cache_ttl_minutes, config.cache_max_age_minutes);
-                cache.invalidate_user(user_id);
+                const auth_config = get_auth_utility_config();
+                const auth_cache = get_auth_cache(auth_config.cache_max_users, auth_config.cache_ttl_minutes, auth_config.cache_max_age_minutes);
+                auth_cache.invalidate_user(user_id);
+                cache_invalidated = true;
             }
             catch (cache_error) {
                 // Log but don't fail user update if cache invalidation fails
@@ -96,11 +178,34 @@ export async function PATCH(request) {
                 });
             }
         }
+        // If org changed, also invalidate org cache for old and new orgs
+        if (org_id !== undefined && is_multi_tenancy_enabled()) {
+            try {
+                const mt_config = get_multi_tenancy_config();
+                const org_cache = get_org_cache(mt_config.org_cache_max_entries, mt_config.org_cache_ttl_minutes);
+                // Invalidate for the new org if set
+                if (org_id && typeof org_id === "string") {
+                    org_cache.invalidate(org_id);
+                }
+            }
+            catch (cache_error) {
+                // Log but don't fail user update if cache invalidation fails
+                const cache_error_message = cache_error instanceof Error ? cache_error.message : "Unknown error";
+                logger.warn("user_management_org_cache_invalidation_failed", {
+                    filename: get_filename(),
+                    line_number: get_line_number(),
+                    user_id,
+                    org_id,
+                    error: cache_error_message,
+                });
+            }
+        }
         logger.info("user_management_user_updated", {
             filename: get_filename(),
             line_number: get_line_number(),
             user_id,
-            is_active,
+            updated_fields: Object.keys(update_data).filter((k) => k !== "changed_at"),
+            cache_invalidated,
         });
         return NextResponse.json({ success: true }, { status: 200 });
     }

package/dist/components/layouts/my_settings/components/profile_picture_library_tab.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profile_picture_library_tab.d.ts","sourceRoot":"","sources":["../../../../../src/components/layouts/my_settings/components/profile_picture_library_tab.tsx"],"names":[],"mappings":"AAeA,MAAM,MAAM,6BAA6B,GAAG;IAC1C,UAAU,EAAE,OAAO,CAAC;IACpB,kBAAkB,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;IAC3C,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uBAAuB,EAAE,MAAM,CAAC;IAChC,uBAAuB,EAAE,MAAM,CAAC;CACjC,CAAC;AAGF;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,QAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,GACxB,EAAE,6BAA6B,2CAyQ/B"}
+{"version":3,"file":"profile_picture_library_tab.d.ts","sourceRoot":"","sources":["../../../../../src/components/layouts/my_settings/components/profile_picture_library_tab.tsx"],"names":[],"mappings":"AAeA,MAAM,MAAM,6BAA6B,GAAG;IAC1C,UAAU,EAAE,OAAO,CAAC;IACpB,kBAAkB,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;IAC3C,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uBAAuB,EAAE,MAAM,CAAC;IAChC,uBAAuB,EAAE,MAAM,CAAC;CACjC,CAAC;AAGF;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,QAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,GACxB,EAAE,6BAA6B,2CAsQ/B"}

package/dist/components/layouts/my_settings/components/profile_picture_library_tab.js

@@ -112,25 +112,19 @@ export function ProfilePictureLibraryTab({ useLibrary, onUseLibraryChange, onPho
     const getInitials = () => {
         return "L";
     };
-    // Map column count to Tailwind grid class
-    const getGridColumnsClass = (columns) => {
-        const columnMap = {
-            1: "grid-cols-1",
-            2: "grid-cols-2",
-            3: "grid-cols-3",
-            4: "grid-cols-4",
-            5: "grid-cols-5",
-            6: "grid-cols-6",
-            7: "grid-cols-7",
-            8: "grid-cols-8",
+    // Get inline style for grid columns (using inline styles instead of Tailwind classes
+    // because dynamic classes like grid-cols-4 may not be included in consuming app's CSS bundle)
+    const getGridColumnsStyle = (columns) => {
+        const validColumns = Math.min(Math.max(columns, 1), 8);
+        return {
+            gridTemplateColumns: `repeat(${validColumns}, minmax(0, 1fr))`,
         };
-        return columnMap[columns] || "grid-cols-4";
     };
-    return (_jsxs("div", { className: "cls_profile_picture_library_tab flex flex-col gap-4", children: [_jsxs("div", { className: "cls_profile_picture_library_tab_switch flex items-center gap-3", children: [_jsx(Switch, { id: "use-library", checked: useLibrary, onCheckedChange: onUseLibraryChange, disabled: disabled, className: "cls_profile_picture_library_tab_switch_input", "aria-label": "Use library photo" }), _jsxs(Label, { htmlFor: "use-library", className: "cls_profile_picture_library_tab_switch_label text-sm font-medium text-[var(--hazo-text-secondary)] cursor-pointer", children: ["Use library photo", _jsx(HazoUITooltip, { message: libraryTooltipMessage, iconSize: tooltipIconSizeSmall, side: "top" })] })] }), _jsxs("div", { className: "cls_profile_picture_library_tab_content grid grid-cols-12 gap-4", children: [_jsxs("div", { className: "cls_profile_picture_library_tab_categories_container flex flex-col gap-2 col-span-3", children: [_jsx(Label, { className: "cls_profile_picture_library_tab_categories_label text-sm font-medium text-[var(--hazo-text-secondary)]", children: "Categories" }), loadingCategories ? (_jsx("div", { className: "cls_profile_picture_library_tab_loading flex items-center justify-center p-8 border border-[var(--hazo-border)] rounded-lg bg-[var(--hazo-bg-subtle)] min-h-[400px]", children: _jsx(Loader2, { className: "h-6 w-6 text-[var(--hazo-text-subtle)] animate-spin", "aria-hidden": "true" }) })) : categories.length > 0 ? (_jsx(VerticalTabs, { value: selectedCategory || categories[0], onValueChange: setSelectedCategory, className: "cls_profile_picture_library_tab_vertical_tabs", children: _jsx(VerticalTabsList, { className: "cls_profile_picture_library_tab_vertical_tabs_list w-full", children: categories.map((category) => (_jsx(VerticalTabsTrigger, { value: category, className: "cls_profile_picture_library_tab_vertical_tabs_trigger w-full justify-start", children: category }, category))) }) })) : (_jsx("div", { className: "cls_profile_picture_library_tab_no_categories flex items-center justify-center p-8 border border-[var(--hazo-border)] rounded-lg bg-[var(--hazo-bg-subtle)] min-h-[400px]", children: _jsx("p", { className: "cls_profile_picture_library_tab_no_categories_text text-sm text-[var(--hazo-text-muted)]", children: "No categories available" }) }))] }), _jsxs("div", { className: "cls_profile_picture_library_tab_photos_container flex flex-col gap-2 col-span-6", children: [_jsx(Label, { className: "cls_profile_picture_library_tab_photos_label text-sm font-medium text-[var(--hazo-text-secondary)]", children: "Photos" }), loadingPhotos ? (_jsx("div", { className: "cls_profile_picture_library_tab_photos_loading flex items-center justify-center p-8 border border-[var(--hazo-border)] rounded-lg bg-[var(--hazo-bg-subtle)] min-h-[400px]", children: _jsx(Loader2, { className: "h-6 w-6 text-[var(--hazo-text-subtle)] animate-spin", "aria-hidden": "true" }) })) : photos.length > 0 ? (_jsx("div", { className: `cls_profile_picture_library_tab_photos_grid grid ${getGridColumnsClass(libraryPhotoGridColumns)} gap-3 overflow-y-auto p-4 border border-[var(--hazo-border)] rounded-lg bg-[var(--hazo-bg-subtle)] min-h-[400px] max-h-[400px]`, children: photos.map((photoUrl) => (_jsx("button", { type: "button", onClick: () => handlePhotoClick(photoUrl), className: `
+    return (_jsxs("div", { className: "cls_profile_picture_library_tab flex flex-col gap-4", children: [_jsxs("div", { className: "cls_profile_picture_library_tab_switch flex items-center gap-3", children: [_jsx(Switch, { id: "use-library", checked: useLibrary, onCheckedChange: onUseLibraryChange, disabled: disabled, className: "cls_profile_picture_library_tab_switch_input", "aria-label": "Use library photo" }), _jsxs(Label, { htmlFor: "use-library", className: "cls_profile_picture_library_tab_switch_label text-sm font-medium text-[var(--hazo-text-secondary)] cursor-pointer", children: ["Use library photo", _jsx(HazoUITooltip, { message: libraryTooltipMessage, iconSize: tooltipIconSizeSmall, side: "top" })] })] }), _jsxs("div", { className: "cls_profile_picture_library_tab_content grid grid-cols-12 gap-4", children: [_jsxs("div", { className: "cls_profile_picture_library_tab_categories_container flex flex-col gap-2 col-span-3", children: [_jsx(Label, { className: "cls_profile_picture_library_tab_categories_label text-sm font-medium text-[var(--hazo-text-secondary)]", children: "Categories" }), loadingCategories ? (_jsx("div", { className: "cls_profile_picture_library_tab_loading flex items-center justify-center p-8 border border-[var(--hazo-border)] rounded-lg bg-[var(--hazo-bg-subtle)] min-h-[400px]", children: _jsx(Loader2, { className: "h-6 w-6 text-[var(--hazo-text-subtle)] animate-spin", "aria-hidden": "true" }) })) : categories.length > 0 ? (_jsx(VerticalTabs, { value: selectedCategory || categories[0], onValueChange: setSelectedCategory, className: "cls_profile_picture_library_tab_vertical_tabs", children: _jsx(VerticalTabsList, { className: "cls_profile_picture_library_tab_vertical_tabs_list w-full", children: categories.map((category) => (_jsx(VerticalTabsTrigger, { value: category, className: "cls_profile_picture_library_tab_vertical_tabs_trigger w-full justify-start", children: category }, category))) }) })) : (_jsx("div", { className: "cls_profile_picture_library_tab_no_categories flex items-center justify-center p-8 border border-[var(--hazo-border)] rounded-lg bg-[var(--hazo-bg-subtle)] min-h-[400px]", children: _jsx("p", { className: "cls_profile_picture_library_tab_no_categories_text text-sm text-[var(--hazo-text-muted)]", children: "No categories available" }) }))] }), _jsxs("div", { className: "cls_profile_picture_library_tab_photos_container flex flex-col gap-2 col-span-6", children: [_jsx(Label, { className: "cls_profile_picture_library_tab_photos_label text-sm font-medium text-[var(--hazo-text-secondary)]", children: "Photos" }), loadingPhotos ? (_jsx("div", { className: "cls_profile_picture_library_tab_photos_loading flex items-center justify-center p-8 border border-[var(--hazo-border)] rounded-lg bg-[var(--hazo-bg-subtle)] min-h-[400px]", children: _jsx(Loader2, { className: "h-6 w-6 text-[var(--hazo-text-subtle)] animate-spin", "aria-hidden": "true" }) })) : photos.length > 0 ? (_jsx("div", { className: "cls_profile_picture_library_tab_photos_grid grid gap-3 overflow-y-auto p-4 border border-[var(--hazo-border)] rounded-lg bg-[var(--hazo-bg-subtle)] min-h-[400px] max-h-[400px]", style: getGridColumnsStyle(libraryPhotoGridColumns), children: photos.map((photoUrl) => (_jsx("button", { type: "button", onClick: () => handlePhotoClick(photoUrl), className: `
                     cls_profile_picture_library_tab_photo_thumbnail
                     w-full aspect-square rounded-lg overflow-hidden border-2 transition-colors cursor-pointer
                     ${selectedPhoto === photoUrl ? "border-blue-500 ring-2 ring-blue-200" : "border-[var(--hazo-border)] hover:border-[var(--hazo-border-emphasis)]"}
-                  `, style: { minHeight: '80px', minWidth: '80px' }, "aria-label": `Select photo ${photoUrl.split('/').pop()}`, children: _jsx("img", { src: photoUrl, alt: `Library photo ${photoUrl.split('/').pop()}`, className: "cls_profile_picture_library_tab_photo_thumbnail_image w-full h-full object-cover", loading: "lazy", onError: (e) => {
+                  `, style: { minHeight: '80px', minWidth: '80px', aspectRatio: '1/1' }, "aria-label": `Select photo ${photoUrl.split('/').pop()}`, children: _jsx("img", { src: photoUrl, alt: `Library photo ${photoUrl.split('/').pop()}`, className: "cls_profile_picture_library_tab_photo_thumbnail_image w-full h-full object-cover", loading: "lazy", onError: (e) => {
                                             // Fallback if image fails to load
                                             const target = e.target;
                                             target.style.display = 'none';

package/dist/components/layouts/rbac_test/index.d.ts

@@ -2,8 +2,6 @@ export type RbacTestLayoutProps = {
     className?: string;
     /** Whether HRBAC is enabled (passed from server) */
     hrbacEnabled?: boolean;
-    /** Default organization for HRBAC scopes */
-    defaultOrg?: string;
 };
 /**
  * RBAC/HRBAC Test layout component
@@ -11,5 +9,5 @@ export type RbacTestLayoutProps = {
  * @param props - Component props
  * @returns RBAC test layout component
  */
-export declare function RbacTestLayout({ className, hrbacEnabled, defaultOrg, }: RbacTestLayoutProps): import("react/jsx-runtime").JSX.Element;
+export declare function RbacTestLayout({ className, hrbacEnabled, }: RbacTestLayoutProps): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=index.d.ts.map

package/dist/components/layouts/rbac_test/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/layouts/rbac_test/index.tsx"],"names":[],"mappings":"AA2CA,MAAM,MAAM,mBAAmB,GAAG;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AA+GF;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,EAC7B,SAAS,EACT,YAAoB,EACpB,UAAe,GAChB,EAAE,mBAAmB,2CAw3BrB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/layouts/rbac_test/index.tsx"],"names":[],"mappings":"AA2CA,MAAM,MAAM,mBAAmB,GAAG;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AAgHF;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,EAC7B,SAAS,EACT,YAAoB,GACrB,EAAE,mBAAmB,2CAw3BrB"}