[comp] Production Deploy

[github-actions]

This is an automated pull request to release the candidate branch into production, which will trigger a deployment.
It was created by the [Production PR] action.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
app (staging)	Ready	Preview, Comment	Mar 30, 2026 7:13pm
comp-framework-editor	Ready	Preview, Comment	Mar 30, 2026 7:13pm

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
portal (staging)	Skipped		Mar 30, 2026 7:13pm

[cursor]

PR Summary

Medium Risk
Switches active-organization syncing from direct DB writes to auth.api.setActiveOrganization, affecting session/org context during navigation and invitation acceptance. Also adjusts attachment rendering and SWR org scoping, which could change loading behavior and cache invalidation if edge cases were missed.

Overview
Active organization state is now synced through better-auth instead of direct session DB writes. Layout and completeInvitation call auth.api.setActiveOrganization (using request headers), and invitation acceptance reactivates a deactivated member before switching org to satisfy membership validation.

Org-scoped client fetching is more resilient. useApiSWR now falls back to orgId from useParams when useActiveOrganization hasn’t resolved yet, with added unit tests.

Task attachments UI behavior is stabilized and tested. TaskBody always renders the upload dropzone and shows loading skeletons when attachments are loading/undefined, with a new component test suite verifying these states.

^{Written by Cursor Bugbot for commit 7dc6bf9. This will update automatically on new commits. Configure here.}

[claudfuen]

🎉 This PR is included in version 3.12.1 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀