@asteby/metacore-runtime-react 45.0.0 → 45.3.0

package/CHANGELOG.md

@@ -1,5 +1,34 @@
 # @asteby/metacore-runtime-react
 
+## 45.3.0
+
+### Minor Changes
+
+- ce3dd3b: Action modal: `PrefillSpec.fromField` — a line-items grid can be seeded from the document picked in a sibling ref field. A `create`-placed action (no record) such as «Recibir OC» now fills its rows as soon as the user selects the purchase order: `$prefillFromRecord` names a one_to_many relation of the referenced model, `map`/`remaining`/`lock` work as in row actions, and clearing the selection empties the grid. Exports `prefillFromFieldRequests` and `prefillFromFieldRelationRequest`.
+- 6ffdaa9: Motivo obligatorio al eliminar/cancelar (PER-4). Un modelo que declara `reason_required` en su manifest responde 422 `errors.reason` a un DELETE o acción sin motivo; `useReasonPrompt().run({ request })` prueba la petición, y si el servidor lo exige pregunta una vez (`ReasonPromptDialog`) y reintenta con `reason`. Ya cableado en la eliminación de fila, la eliminación masiva (un motivo para el lote) y los modales de acción (confirmación y formulario). `ActivityEvent.reason` se pinta en `ActivityDiff` («Motivo: …»). `useAddonSettings`/`useUpdateAddonSettings` aceptan `branchId` para leer/escribir los ajustes por sucursal (`settings[].scope: branch`, POS-1); `addonSettingsKey`/`addonSettingsUrl` lo respetan.
+- cfafe4e: `ReturnWizard` («Devolver mercancía», benchmark DEV-2): un solo asistente para POS, Pedido, Factura, RMA y OT. Renglones con tope vendido − devuelto, condición vendible/defectuoso → stock/merma/garantía, paso «Recibir» dentro del asistente cuando no hay almacén (PIT-021), reembolso con `RefundDestination` (nuevo destino `transfer`), estados de RMA con motivo obligatorio al rechazar/cancelar (`canTransitionRma`) y NC CFDI con relación 01/03 automática (`creditNoteRelation`). Helpers puros: `computeReturnTotals`, `validateReturnChoices`, `serializeReturn`, `returnSteps`.
+
+### Patch Changes
+
+- 0eb49fb: DynamicRelation: una sub-tabla cuya carga falla (403/500) ya no se muestra como «No hay registros relacionados»; muestra «Sin permiso…» o un aviso de error (strings opcionales `forbiddenState` / `errorState`). La columna `tags` con objetos usa su `label`/`name`/`key` en lugar de «[object Object]» (PIT-045, PIT-049).
+
+## 45.2.0
+
+### Minor Changes
+
+- 19870d6: Patrón «página de documento» (benchmark Pitsline §5/§6/§7, FAC-1/FAC-5/FAC-6). Un `DocumentSpec` de datos puros declara, por modelo, badges de varias máquinas de estado independientes (`StatusMachine`, catálogo semántico neutral/info/success/caution/warning/critical con ícono y texto: el color nunca es la única señal), la distribución de acciones por estado (1 primaria + hasta 3 secundarias + «Más…» + zona destructiva separada, con bloqueo explicado `blockedWhen`), botones inteligentes con contador, pestañas (`fields` / `records` / `slot`) y fuentes relacionadas (con relación de dos saltos `via`). Componentes: `DocumentPage`, `DocumentHeader`, `ActionBar`, `SmartButtons`, `StatusBadge`, `DocumentTimeline`, `CancelWithReason` (cancelación guiada de 2 pasos con catálogo de motivos, documento sustituto y consecuencias). Registro por modelo con `registerDocumentPage` / `getDocumentPage`; `pruneUnavailableActions` quita las acciones que el backend no declara.
+
+## 45.1.0
+
+### Minor Changes
+
+- 610500d: Aprobación de supervisor con PIN: `ApprovalPinDialog` (motivo + PIN, error inline), `ApprovalGateProvider` / `useApprovalGate` (`requestApproval({policy, label, context})`: quien tiene `general.approve_<policy>` pasa sin prompt; los demás piden PIN a `/approvals/pin-grant`) y `approvalCapability`. `toastServerError` ya no pinta como error una escritura parada con `approval_required`: avisa "Enviado a aprobación" y, con el gate montado, ofrece "Aprobar con PIN" (`/approvals/:id/approve-pin`). Cierra el pendiente de docs/APPROVALS.md (los dispatchers del SDK apilaban el toast de error).
+- 2c4c75e: Componentes de negocio compartidos con contrato estable (benchmark Pitsline §7, §6.4-6.7) en `@asteby/metacore-runtime-react`.
+
+  - Componentes: `CustomerPicker`, `ProductPicker` (medida de llanta, código de barras, SKU/clave de proveedor, variantes, existencia por almacén), `LineItemsEditor` (secciones/notas, política de sobreventa, `serializeLineItems` como única salida hacia el backend — corrige el guardado de renglones PIT-018), `PaymentCapture` (cobro mixto, cambio solo en efectivo, referencia y cuenta) y `RefundDestination` (efectivo, tarjeta, monedero, saldo a favor, NC CFDI).
+  - Utilidades: formateador único `formatMoney` / `formatDate` / `formatDateTime` / `createFormatter` / `useFormatter` (es-MX, moneda y zona de la org, sin mezclar locale — PIT-023/025); `mapApiError` (409/422 → mensaje por campo + banner, PIT-002/003/013/021/029); `notify`, `SystemNoticeBanner`, `FormErrorBanner`, `ACTION_SAFE_TOASTER_PROPS` (avisos que no tapan acciones, PIT-005) y `EmptyState` accionable.
+  - `BUSINESS_COMPONENTS`: catálogo legible por máquina (props, eventos, permisos, dónde se usa). Guía en `docs/business-components.md`.
+
 ## 45.0.0
 
 ### Minor Changes

package/dist/action-modal-dispatcher.d.ts

@@ -16,6 +16,16 @@ export interface PrefillSpec {
      * flow (which carries no prefill spec); only the prefilled action locks them.
      */
     lock?: string[];
+    /**
+     * Key of a SIBLING action field (a dynamic_select with a `ref`) whose selected
+     * value is the id of the document the rows are seeded from. Without it the
+     * rows come from the record the action was opened on (row actions); with it
+     * a `create`-placed action — which has no record — seeds its grid as soon as
+     * the user picks the source document (e.g. a goods receipt picking its
+     * purchase order). `$prefillFromRecord` then names a one_to_many relation of
+     * the REFERENCED model. Clearing the selection empties the grid.
+     */
+    fromField?: string;
 }
 export declare function isPrefillSpec(v: unknown): v is PrefillSpec;
 export declare function applyPrefillLock(field: ActionFieldDef): ActionFieldDef;
@@ -33,6 +43,25 @@ export declare function prefillRelationRequests(fields: ActionFieldDef[] | undef
     foreign_key?: string;
     scope?: Record<string, unknown>;
 }>): PrefillRelationRequest[];
+export interface PrefillFromFieldRequest {
+    fieldKey: string;
+    spec: PrefillSpec;
+    /** Model key the sibling field references (its `ref`). */
+    refModel: string;
+    /** Selected document id; '' when nothing is selected (grid must clear). */
+    refId: string;
+}
+export declare function prefillFromFieldRequests(fields: ActionFieldDef[] | undefined, formData: Record<string, any>): PrefillFromFieldRequest[];
+export declare function prefillFromFieldRelationRequest(req: PrefillFromFieldRequest, relations: Array<{
+    name?: string;
+    kind?: string;
+    through?: string;
+    foreign_key?: string;
+    scope?: Record<string, unknown>;
+}>): {
+    endpoint: string;
+    params: Record<string, string | number>;
+} | null;
 export declare function unwrapRecordScalar(value: unknown): unknown;
 export declare function readRecordPath(record: any, path: string): unknown;
 /** Scalar seed for one action field from the row being acted on. */

package/dist/action-modal-dispatcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action-modal-dispatcher.d.ts","sourceRoot":"","sources":["../src/action-modal-dispatcher.tsx"],"names":[],"mappings":"AA4EA,OAAO,KAAK,EAAE,cAAc,EAAmC,MAAM,SAAS,CAAA;AAE9E,OAAO,EACH,KAAK,cAAc,EACnB,KAAK,gBAAgB,EAGxB,MAAM,sBAAsB,CAAA;AAG7B,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAA;AAiBhD,MAAM,WAAW,WAAW;IACxB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,SAAS,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1D;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,WAAW,CAM1D;AAsBD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,GAAG,cAAc,CAStE;AAGD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAkB3F;AAYD,MAAM,WAAW,sBAAsB;IACnC,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,WAAW,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAA;CAC1C;AAED,wBAAgB,uBAAuB,CACnC,MAAM,EAAE,cAAc,EAAE,GAAG,SAAS,EACpC,MAAM,EAAE,GAAG,EACX,SAAS,EAAE,KAAK,CAAC;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,GAC5H,sBAAsB,EAAE,CAyB1B;AASD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAY1D;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CASjE;AAUD,oEAAoE;AACpE,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,GAAG,OAAO,CAgBnF;AAED,wBAAgB,qBAAqB,CAAC,EAClC,IAAI,EACJ,YAAY,EACZ,MAAM,EACN,KAAK,EACL,MAAM,EACN,QAAQ,EACR,SAAS,GACZ,EAAE,gBAAgB,sCAmFlB;AAED,yEAAyE;AACzE,eAAO,MAAM,iCAAiC,QAAS,CAAA"}
+{"version":3,"file":"action-modal-dispatcher.d.ts","sourceRoot":"","sources":["../src/action-modal-dispatcher.tsx"],"names":[],"mappings":"AA6EA,OAAO,KAAK,EAAE,cAAc,EAAmC,MAAM,SAAS,CAAA;AAE9E,OAAO,EACH,KAAK,cAAc,EACnB,KAAK,gBAAgB,EAGxB,MAAM,sBAAsB,CAAA;AAG7B,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAA;AAiBhD,MAAM,WAAW,WAAW;IACxB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,SAAS,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1D;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,WAAW,CAM1D;AAsBD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,GAAG,cAAc,CAStE;AAGD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAkB3F;AAYD,MAAM,WAAW,sBAAsB;IACnC,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,WAAW,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAA;CAC1C;AAED,wBAAgB,uBAAuB,CACnC,MAAM,EAAE,cAAc,EAAE,GAAG,SAAS,EACpC,MAAM,EAAE,GAAG,EACX,SAAS,EAAE,KAAK,CAAC;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,GAC5H,sBAAsB,EAAE,CAyB1B;AASD,MAAM,WAAW,uBAAuB;IACpC,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,WAAW,CAAA;IACjB,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAA;IAChB,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAA;CAChB;AAED,wBAAgB,wBAAwB,CACpC,MAAM,EAAE,cAAc,EAAE,GAAG,SAAS,EACpC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC9B,uBAAuB,EAAE,CAe3B;AAKD,wBAAgB,+BAA+B,CAC3C,GAAG,EAAE,uBAAuB,EAC5B,SAAS,EAAE,KAAK,CAAC;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,GAC5H;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAA;CAAE,GAAG,IAAI,CActE;AASD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAY1D;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CASjE;AAUD,oEAAoE;AACpE,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,GAAG,OAAO,CAgBnF;AAED,wBAAgB,qBAAqB,CAAC,EAClC,IAAI,EACJ,YAAY,EACZ,MAAM,EACN,KAAK,EACL,MAAM,EACN,QAAQ,EACR,SAAS,GACZ,EAAE,gBAAgB,sCAmFlB;AAED,yEAAyE;AACzE,eAAO,MAAM,iCAAiC,QAAS,CAAA"}

package/dist/action-modal-dispatcher.js

@@ -1,4 +1,4 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 // ActionModalDispatcher — renders the right modal for a custom action:
 // 1) Custom component from the SDK registry → use it
 // 2) action.modal set but no registered component → loading state while the
@@ -15,7 +15,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 //
 // The host injects its axios-like client via <ApiProvider>; we no longer
 // depend on a bundler alias to `@/lib/api`.
-import { useState, useEffect, useMemo, useSyncExternalStore } from 'react';
+import { useState, useEffect, useMemo, useRef, useSyncExternalStore } from 'react';
 import { useTranslation } from 'react-i18next';
 import { Dialog, DialogContent, DialogHeader, DialogTitle, DialogDescription, DialogFooter, AlertDialog, AlertDialogAction, AlertDialogCancel, AlertDialogContent, AlertDialogDescription, AlertDialogFooter, AlertDialogHeader, AlertDialogTitle, Button, Input, Textarea, Select, SelectContent, SelectItem, SelectTrigger, SelectValue, Switch, } from '@asteby/metacore-ui/primitives';
 import { Loader2 } from 'lucide-react';
@@ -27,6 +27,7 @@ import { validateValues, bagHasErrors } from './validator';
 import { clearFieldErrorTree, formatFieldErrorsDescription, labelsForValidationFields, labelForValidationPath, lineItemErrorsFor, } from './field-validation-ui';
 import { validationCatalog } from './validation-catalog';
 import { useApi } from './api-context';
+import { useReasonPrompt } from './reason-prompt';
 import { buildRelationFilterParams } from './dynamic-relation-helpers';
 import { DynamicIcon } from './dynamic-icon';
 import { DynamicLineItems } from './dynamic-line-items';
@@ -130,6 +131,45 @@ export function prefillRelationRequests(fields, record, relations) {
     }
     return out;
 }
+export function prefillFromFieldRequests(fields, formData) {
+    const out = [];
+    if (!fields)
+        return out;
+    for (const field of fields) {
+        if (!isLineItemsField(field))
+            continue;
+        const spec = lineItemsDefault(field);
+        if (!isPrefillSpec(spec) || !spec.fromField)
+            continue;
+        const source = fields.find((f) => f.key === spec.fromField);
+        const refModel = source ? getFieldRef(source) : undefined;
+        if (!refModel)
+            continue;
+        const raw = unwrapRecordScalar(formData?.[spec.fromField]);
+        const refId = raw === undefined || raw === null ? '' : String(raw);
+        out.push({ fieldKey: field.key, spec, refModel, refId });
+    }
+    return out;
+}
+// prefillFromFieldRelationRequest resolves the child-rows request for a
+// selected document, from the referenced model's declared relations. Null when
+// the relation is missing or not a plain one_to_many.
+export function prefillFromFieldRelationRequest(req, relations) {
+    if (!req.refId)
+        return null;
+    const rel = (relations || []).find((r) => r?.name === req.spec.$prefillFromRecord && (r.kind ?? 'one_to_many') === 'one_to_many');
+    if (!rel?.through || !rel.foreign_key)
+        return null;
+    const scope = {};
+    for (const [k, v] of Object.entries(rel.scope ?? {})) {
+        if (v !== undefined && v !== null)
+            scope[k] = String(v);
+    }
+    return {
+        endpoint: `/data/${rel.through}`,
+        params: { ...buildRelationFilterParams(rel.foreign_key, req.refId, scope), per_page: 200 },
+    };
+}
 // ---- scalar prefill from the acted-on record --------------------------------
 //
 // Row actions (stamp / refactura / cancel-with-reason) should open with the
@@ -481,6 +521,9 @@ function ConfirmActionDialog({ open, onOpenChange, action, model, record, endpoi
     const { t, i18n } = useTranslation();
     const api = useApi();
     const [executing, setExecuting] = useState(false);
+    // Actions listed in the model's `reason_required.actions` (cancel, void…)
+    // answer 422 errors.reason without a motive; the prompt asks and retries.
+    const reasonPrompt = useReasonPrompt();
     // `action.label` is an addon-contributed i18n key; its locale bundle loads
     // asynchronously, so translate at render (defaultValue keeps an already
     // localized label unchanged).
@@ -489,7 +532,14 @@ function ConfirmActionDialog({ open, onOpenChange, action, model, record, endpoi
         setExecuting(true);
         try {
             const url = buildActionUrl(endpoint, model, record.id, action.key);
-            const res = await api.post(url, {});
+            const res = await reasonPrompt.run({
+                title: label,
+                description: t('actions.reason_desc', { defaultValue: 'Esta acción pide el motivo. Queda en la bitácora del documento.' }),
+                request: (reason) => api.post(url, reason ? { reason } : {}),
+            });
+            // Operator cancelled the reason prompt: nothing ran.
+            if (!res)
+                return;
             if (res.data.success) {
                 toastServerSuccess(res.data, { t });
                 onOpenChange(false);
@@ -506,7 +556,7 @@ function ConfirmActionDialog({ open, onOpenChange, action, model, record, endpoi
             setExecuting(false);
         }
     };
-    return (_jsx(AlertDialog, { open: open, onOpenChange: onOpenChange, children: _jsxs(AlertDialogContent, { children: [_jsxs(AlertDialogHeader, { children: [_jsxs(AlertDialogTitle, { className: "flex items-center gap-2", children: [_jsx(DynamicIcon, { name: action.icon, className: "h-5 w-5" }), label] }), _jsx(AlertDialogDescription, { children: action.confirmMessage || `${label}?` })] }), record ? _jsx(RecordPreview, { model: model, record: record }) : null, _jsxs(AlertDialogFooter, { children: [_jsx(AlertDialogCancel, { disabled: executing, children: t('common.cancel') }), _jsxs(AlertDialogAction, { onClick: (e) => { e.preventDefault(); execute(); }, disabled: executing, style: action.color ? { backgroundColor: action.color } : undefined, children: [executing ? _jsx(Loader2, { className: "mr-2 h-4 w-4 animate-spin" }) : _jsx(DynamicIcon, { name: action.icon, className: "mr-2 h-4 w-4" }), label] })] })] }) }));
+    return (_jsxs(_Fragment, { children: [reasonPrompt.dialog, _jsx(AlertDialog, { open: open, onOpenChange: onOpenChange, children: _jsxs(AlertDialogContent, { children: [_jsxs(AlertDialogHeader, { children: [_jsxs(AlertDialogTitle, { className: "flex items-center gap-2", children: [_jsx(DynamicIcon, { name: action.icon, className: "h-5 w-5" }), label] }), _jsx(AlertDialogDescription, { children: action.confirmMessage || `${label}?` })] }), record ? _jsx(RecordPreview, { model: model, record: record }) : null, _jsxs(AlertDialogFooter, { children: [_jsx(AlertDialogCancel, { disabled: executing, children: t('common.cancel') }), _jsxs(AlertDialogAction, { onClick: (e) => { e.preventDefault(); execute(); }, disabled: executing, style: action.color ? { backgroundColor: action.color } : undefined, children: [executing ? _jsx(Loader2, { className: "mr-2 h-4 w-4 animate-spin" }) : _jsx(DynamicIcon, { name: action.icon, className: "mr-2 h-4 w-4" }), label] })] })] }) })] }));
 }
 function GenericActionModal({ open, onOpenChange, action, model, record, endpoint, onSuccess }) {
     const { t, i18n } = useTranslation();
@@ -515,6 +565,7 @@ function GenericActionModal({ open, onOpenChange, action, model, record, endpoin
     // defaultValue keeps an already-localized string unchanged.
     const tl = (s) => t(s, { defaultValue: s });
     const api = useApi();
+    const reasonPrompt = useReasonPrompt();
     const branchGate = useBranchCreateGate();
     const [formData, setFormData] = useState({});
     const [executing, setExecuting] = useState(false);
@@ -580,6 +631,58 @@ function GenericActionModal({ open, onOpenChange, action, model, record, endpoin
             cancelled = true;
         };
     }, [open, action.fields, record, relations, api]);
+    // Lines seeded from a document picked in a sibling field (PrefillSpec.fromField).
+    // Re-runs only when the picked id changes; each pick loads the referenced
+    // model's relations (cached per model for the life of the modal) and then
+    // the child rows.
+    const fromFieldReqs = useMemo(() => prefillFromFieldRequests(action.fields, formData), [action.fields, formData]);
+    const fromFieldSig = fromFieldReqs.map((r) => `${r.fieldKey}=${r.refModel}:${r.refId}`).join('|');
+    const refRelationsCache = useRef(new Map());
+    useEffect(() => {
+        if (!open || fromFieldReqs.length === 0)
+            return;
+        let cancelled = false;
+        for (const req of fromFieldReqs) {
+            if (!req.refId) {
+                setFormData((prev) => Array.isArray(prev[req.fieldKey]) && prev[req.fieldKey].length === 0
+                    ? prev
+                    : { ...prev, [req.fieldKey]: [] });
+                continue;
+            }
+            let relsPromise = refRelationsCache.current.get(req.refModel);
+            if (!relsPromise) {
+                relsPromise = api
+                    .get(`/metadata/table/${req.refModel}`)
+                    .then((res) => {
+                    const rels = res?.data?.relations ?? res?.data?.data?.relations ?? [];
+                    return Array.isArray(rels) ? rels : [];
+                })
+                    .catch(() => []);
+                refRelationsCache.current.set(req.refModel, relsPromise);
+            }
+            relsPromise
+                .then((rels) => {
+                const call = prefillFromFieldRelationRequest(req, rels);
+                if (!call)
+                    return;
+                return api.get(call.endpoint, { params: call.params }).then((res) => {
+                    if (cancelled)
+                        return;
+                    const rows = res?.data?.data ?? res?.data ?? [];
+                    if (!Array.isArray(rows))
+                        return;
+                    const built = buildPrefillRows(req.spec, { [req.spec.$prefillFromRecord]: rows });
+                    setFormData((prev) => ({ ...prev, [req.fieldKey]: built }));
+                });
+            })
+                .catch(() => { });
+        }
+        return () => {
+            cancelled = true;
+        };
+        // fromFieldSig captures every dependency of fromFieldReqs that matters.
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [open, fromFieldSig, api]);
     const updateField = (key, value) => {
         setFormData((prev) => ({ ...prev, [key]: value }));
         setFieldErrors((prev) => clearFieldErrorTree(prev, key));
@@ -643,7 +746,13 @@ function GenericActionModal({ open, onOpenChange, action, model, record, endpoin
                     payload = { ...payload, branch_id: branchId };
             }
             const url = buildActionUrl(endpoint, model, record?.id, action.key);
-            const res = await api.post(url, payload);
+            const res = await reasonPrompt.run({
+                title: tl(action.label),
+                description: t('actions.reason_desc', { defaultValue: 'Esta acción pide el motivo. Queda en la bitácora del documento.' }),
+                request: (reason) => api.post(url, reason ? { ...payload, reason } : payload),
+            });
+            if (!res)
+                return;
             if (res.data.success) {
                 toastServerSuccess(res.data, { t });
                 onOpenChange(false);
@@ -680,7 +789,7 @@ function GenericActionModal({ open, onOpenChange, action, model, record, endpoin
                                     resolveWidget(field) === 'textarea' ||
                                     resolveWidget(field) === 'richtext';
                                 return (_jsxs(FieldCell, { fullWidth: fullWidth, children: [_jsx(FieldLabel, { htmlFor: field.key, required: field.required, children: tl(field.label) }), renderField(field, formData[field.key], (v) => updateField(field.key, v), formData, record, fieldErrors), fieldErrors[field.key] && (_jsx("p", { className: "text-destructive text-xs mt-1", children: fieldErrors[field.key] }))] }, field.key));
-                            }), embedRelations && relations.length > 0 && (_jsx(FieldCell, { fullWidth: true, children: _jsx(DynamicRelations, { record: record, relations: relations, lineSubtable: true, embedOnly: true }) }))] }) }), _jsxs(DialogFooter, { className: "shrink-0", children: [_jsx(Button, { variant: "outline", onClick: () => onOpenChange(false), disabled: executing, children: t('common.cancel') }), _jsxs(Button, { onClick: execute, disabled: executing, style: action.color ? { backgroundColor: action.color, color: 'white' } : undefined, children: [executing ? _jsx(Loader2, { className: "mr-2 h-4 w-4 animate-spin" }) : _jsx(DynamicIcon, { name: action.icon, className: "mr-2 h-4 w-4" }), tl(action.label)] })] })] }) }));
+                            }), embedRelations && relations.length > 0 && (_jsx(FieldCell, { fullWidth: true, children: _jsx(DynamicRelations, { record: record, relations: relations, lineSubtable: true, embedOnly: true }) }))] }) }), _jsxs(DialogFooter, { className: "shrink-0", children: [_jsx(Button, { variant: "outline", onClick: () => onOpenChange(false), disabled: executing, children: t('common.cancel') }), _jsxs(Button, { onClick: execute, disabled: executing, style: action.color ? { backgroundColor: action.color, color: 'white' } : undefined, children: [executing ? _jsx(Loader2, { className: "mr-2 h-4 w-4 animate-spin" }) : _jsx(DynamicIcon, { name: action.icon, className: "mr-2 h-4 w-4" }), tl(action.label)] })] }), reasonPrompt.dialog] }) }));
 }
 // buildFieldDefaults seeds formData for a set of action fields, honoring the
 // same line-items prefill spec + boolean/empty rules GenericActionModal uses, so

package/dist/activity-diff.d.ts

@@ -43,6 +43,8 @@ export interface ActivityEvent {
         to: unknown;
     }> | null;
     summary?: string | null;
+    /** Motive the operator stated for a delete / reason_required action (PER-4). */
+    reason?: string | null;
     occurred_at: string;
 }
 export interface ActivityDiffProps {

package/dist/activity-diff.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"activity-diff.d.ts","sourceRoot":"","sources":["../src/activity-diff.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAI9B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAO/C;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACtC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAA;KAAE,CAAC,GAAG,IAAI,CAAA;IAC/D,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,WAAW,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,iBAAiB;IAC9B,oCAAoC;IACpC,KAAK,EAAE,aAAa,CAAA;IACpB;;;;OAIG;IACH,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAC5B,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,uCAAuC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAA;CACrB;AA8GD;;;;GAIG;AACH,eAAO,MAAM,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC,iBAAiB,CA4KpD,CAAA"}
+{"version":3,"file":"activity-diff.d.ts","sourceRoot":"","sources":["../src/activity-diff.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAI9B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAO/C;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACtC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAA;KAAE,CAAC,GAAG,IAAI,CAAA;IAC/D,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,WAAW,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,iBAAiB;IAC9B,oCAAoC;IACpC,KAAK,EAAE,aAAa,CAAA;IACpB;;;;OAIG;IACH,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAC5B,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,uCAAuC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAA;CACrB;AA8GD;;;;GAIG;AACH,eAAO,MAAM,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAmLpD,CAAA"}

package/dist/activity-diff.js

@@ -142,10 +142,10 @@ export const ActivityDiff = ({ event, columns, timeZone, currency, locale = 'es'
     const isCreated = variant === 'created';
     const isDeleted = variant === 'deleted';
     const variantBadge = VARIANT_BADGE[variant] ?? VARIANT_BADGE.other;
-    if (allKeys.length === 0 && !event.summary) {
+    if (allKeys.length === 0 && !event.summary && !event.reason) {
         return (_jsx("div", { className: cn('text-sm text-muted-foreground italic py-1', className), children: "Sin campos registrados." }));
     }
-    return (_jsxs("div", { className: cn('space-y-2', className), children: [_jsxs("div", { className: "flex items-center gap-2 flex-wrap", children: [_jsx(Badge, { variant: "outline", className: cn('text-xs font-medium px-2 py-0.5', variantBadge.className), children: variantBadge.label || event.action }), changed.size > 0 && variant === 'updated' && (_jsxs("span", { className: "text-xs text-muted-foreground", children: [changed.size, " campo", changed.size !== 1 ? 's' : '', " modificado", changed.size !== 1 ? 's' : ''] })), allKeys.length > 0 && variant === 'updated' && (_jsx("button", { type: "button", onClick: () => setShowOnlyChanged((v) => !v), className: "ml-auto text-xs text-primary hover:underline", children: showOnlyChanged ? `Ver todos (${allKeys.length})` : 'Solo cambios' }))] }), event.summary && (_jsx("p", { className: "text-sm text-muted-foreground italic", children: event.summary })), displayedKeys.length > 0 && (_jsxs("div", { className: "rounded-lg border border-border/60 overflow-hidden text-sm", children: [isCreated || isDeleted ? (_jsxs("div", { className: "grid grid-cols-[1fr_2fr] border-b border-border/40 bg-muted/40 px-3 py-1.5 text-xs font-medium text-muted-foreground gap-x-2", children: [_jsx("span", { children: "Campo" }), _jsx("span", { children: isDeleted ? 'Valor anterior' : 'Valor' })] })) : (_jsxs("div", { className: "grid grid-cols-[1fr_1fr_1fr] border-b border-border/40 bg-muted/40 px-3 py-1.5 text-xs font-medium text-muted-foreground gap-x-2", children: [_jsx("span", { children: "Campo" }), _jsx("span", { children: "Antes" }), _jsx("span", { children: "Despu\u00E9s" })] })), displayedKeys.map((key, idx) => {
+    return (_jsxs("div", { className: cn('space-y-2', className), children: [_jsxs("div", { className: "flex items-center gap-2 flex-wrap", children: [_jsx(Badge, { variant: "outline", className: cn('text-xs font-medium px-2 py-0.5', variantBadge.className), children: variantBadge.label || event.action }), changed.size > 0 && variant === 'updated' && (_jsxs("span", { className: "text-xs text-muted-foreground", children: [changed.size, " campo", changed.size !== 1 ? 's' : '', " modificado", changed.size !== 1 ? 's' : ''] })), allKeys.length > 0 && variant === 'updated' && (_jsx("button", { type: "button", onClick: () => setShowOnlyChanged((v) => !v), className: "ml-auto text-xs text-primary hover:underline", children: showOnlyChanged ? `Ver todos (${allKeys.length})` : 'Solo cambios' }))] }), event.reason && (_jsxs("p", { className: "text-sm", "data-testid": "activity-reason", children: [_jsx("span", { className: "font-medium", children: "Motivo:" }), " ", event.reason] })), event.summary && (_jsx("p", { className: "text-sm text-muted-foreground italic", children: event.summary })), displayedKeys.length > 0 && (_jsxs("div", { className: "rounded-lg border border-border/60 overflow-hidden text-sm", children: [isCreated || isDeleted ? (_jsxs("div", { className: "grid grid-cols-[1fr_2fr] border-b border-border/40 bg-muted/40 px-3 py-1.5 text-xs font-medium text-muted-foreground gap-x-2", children: [_jsx("span", { children: "Campo" }), _jsx("span", { children: isDeleted ? 'Valor anterior' : 'Valor' })] })) : (_jsxs("div", { className: "grid grid-cols-[1fr_1fr_1fr] border-b border-border/40 bg-muted/40 px-3 py-1.5 text-xs font-medium text-muted-foreground gap-x-2", children: [_jsx("span", { children: "Campo" }), _jsx("span", { children: "Antes" }), _jsx("span", { children: "Despu\u00E9s" })] })), displayedKeys.map((key, idx) => {
                         const col = resolveColumn(key, columns);
                         const label = resolveLabel(key, columns);
                         const isChanged = changed.has(key);

package/dist/approval-events.d.ts

@@ -0,0 +1,16 @@
+/** Window event toastServerError fires for a parked `approval_required` write. */
+export declare const APPROVAL_PARKED_EVENT = "metacore:approval-parked";
+/** Fired after a parked request was approved (and replayed) with a PIN. */
+export declare const APPROVAL_DECIDED_EVENT = "metacore:approval-decided";
+/** @internal provider bookkeeping. */
+export declare function gateMountedDelta(d: number): void;
+/** True while an <ApprovalGateProvider> is mounted (toastServerError offers the PIN action only then). */
+export declare function approvalGateAvailable(): boolean;
+export interface ApprovalRequiredInfo {
+    requestId: string;
+    label?: string;
+    roles: string[];
+}
+/** Extracts the parked-request info from an axios error / response body, or null. */
+export declare function approvalRequiredInfo(err: unknown): ApprovalRequiredInfo | null;
+//# sourceMappingURL=approval-events.d.ts.map

package/dist/approval-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-events.d.ts","sourceRoot":"","sources":["../src/approval-events.ts"],"names":[],"mappings":"AAIA,kFAAkF;AAClF,eAAO,MAAM,qBAAqB,6BAA6B,CAAA;AAC/D,2EAA2E;AAC3E,eAAO,MAAM,sBAAsB,8BAA8B,CAAA;AAGjE,sCAAsC;AACtC,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAEhD;AAED,0GAA0G;AAC1G,wBAAgB,qBAAqB,IAAI,OAAO,CAE/C;AAED,MAAM,WAAW,oBAAoB;IACjC,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,qFAAqF;AACrF,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,oBAAoB,GAAG,IAAI,CAU9E"}

package/dist/approval-events.js

@@ -0,0 +1,27 @@
+// approval-events — dependency-free glue between server-error.ts (which sees a
+// parked `approval_required` write) and <ApprovalGateProvider> (which owns the
+// PIN dialog). Kept apart so the error toaster never imports React/UI code.
+/** Window event toastServerError fires for a parked `approval_required` write. */
+export const APPROVAL_PARKED_EVENT = 'metacore:approval-parked';
+/** Fired after a parked request was approved (and replayed) with a PIN. */
+export const APPROVAL_DECIDED_EVENT = 'metacore:approval-decided';
+let gateMounted = 0;
+/** @internal provider bookkeeping. */
+export function gateMountedDelta(d) {
+    gateMounted += d;
+}
+/** True while an <ApprovalGateProvider> is mounted (toastServerError offers the PIN action only then). */
+export function approvalGateAvailable() {
+    return gateMounted > 0;
+}
+/** Extracts the parked-request info from an axios error / response body, or null. */
+export function approvalRequiredInfo(err) {
+    const data = (err?.response?.data ?? err);
+    if (data?.error?.code !== 'approval_required')
+        return null;
+    return {
+        requestId: data.meta?.approval_request_id ?? '',
+        label: data.meta?.approval_label,
+        roles: data.meta?.approval_roles ?? [],
+    };
+}

package/dist/approval-gate.d.ts

@@ -0,0 +1,39 @@
+import React from 'react';
+export { APPROVAL_DECIDED_EVENT, APPROVAL_PARKED_EVENT, approvalGateAvailable, approvalRequiredInfo, type ApprovalRequiredInfo, } from './approval-events';
+/** Capability that authorizes `policy` (and lets its holder skip the prompt). */
+export declare function approvalCapability(policy: string): string;
+export interface ApprovalGrant {
+    /** Audit row id (ApprovalRequest.kind=pin); null when the caller bypassed. */
+    id: string | null;
+    policy: string;
+    bypassed: boolean;
+    reason?: string;
+}
+export interface RequestApprovalOptions {
+    /** Policy key: oversell | discount | price_below_min | refund | cancel_cfdi | inventory_adjust | <addon-declared>. */
+    policy: string;
+    label: string;
+    description?: React.ReactNode;
+    /** Free-form audit data stored with the grant (product, qty, before → after…). */
+    context?: Record<string, unknown>;
+    model?: string;
+    recordId?: string;
+    addonKey?: string;
+}
+export interface ApprovalGateValue {
+    /** Resolves the grant, or null when the operator cancelled. */
+    requestApproval: (opts: RequestApprovalOptions) => Promise<ApprovalGrant | null>;
+    /** True when the current user may do `policy` without asking anyone. */
+    canSelfApprove: (policy: string) => boolean;
+}
+export declare function ApprovalGateProvider({ children }: {
+    children: React.ReactNode;
+}): React.JSX.Element;
+/**
+ * Access the gate. Without a provider the gate fails CLOSED for inline requests
+ * (resolves null) — never silently authorizes — but honours the capability
+ * bypass, and `canSelfApprove` follows `useCan()` (always-true with no
+ * <PermissionsProvider>, i.e. legacy hosts keep today's behaviour).
+ */
+export declare function useApprovalGate(): ApprovalGateValue;
+//# sourceMappingURL=approval-gate.d.ts.map

package/dist/approval-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-gate.d.ts","sourceRoot":"","sources":["../src/approval-gate.tsx"],"names":[],"mappings":"AAaA,OAAO,KAAuF,MAAM,OAAO,CAAA;AAa3G,OAAO,EACH,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,oBAAoB,GAC5B,MAAM,mBAAmB,CAAA;AAE1B,iFAAiF;AACjF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,MAAM,WAAW,aAAa;IAC1B,8EAA8E;IAC9E,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,OAAO,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,sBAAsB;IACnC,sHAAsH;IACtH,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC7B,kFAAkF;IAClF,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,iBAAiB;IAC9B,+DAA+D;IAC/D,eAAe,EAAE,CAAC,IAAI,EAAE,sBAAsB,KAAK,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAA;IAChF,wEAAwE;IACxE,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAA;CAC9C;AAQD,wBAAgB,oBAAoB,CAAC,EAAE,QAAQ,EAAE,EAAE;IAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CAAE,qBAuF/E;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,IAAI,iBAAiB,CAYnD"}

package/dist/approval-gate.js

@@ -0,0 +1,110 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// ApprovalGate — one place for "this needs a supervisor" in hosts that mount an
+// ApiProvider. It answers two situations with the same PIN dialog:
+//
+//   1. INLINE policy (POS oversell, discount over the cap, refund…): the client
+//      calls `requestApproval({policy, …})`. A user who already holds the policy's
+//      `general.approve_<policy>` capability passes straight through (`bypassed`);
+//      everyone else gets the dialog, which posts `/approvals/pin-grant`.
+//   2. PARKED request: a write answered 422 `approval_required`. toastServerError
+//      shows "Enviado a aprobación" with an "Aprobar con PIN" action that opens the
+//      dialog against `/approvals/:id/approve-pin` (kernel approvals_pin.go).
+//
+// Federated addons with their own HTTP client use <ApprovalPinDialog> directly
+// (approval-pin-dialog.tsx) and post to the same endpoints.
+import { createContext, useCallback, useContext, useEffect, useMemo, useRef, useState } from 'react';
+import { useTranslation } from 'react-i18next';
+import { toast } from 'sonner';
+import { useApi } from './api-context';
+import { useCan } from './permissions-context';
+import { ApprovalPinDialog } from './approval-pin-dialog';
+import { APPROVAL_DECIDED_EVENT, APPROVAL_PARKED_EVENT, gateMountedDelta, } from './approval-events';
+export { APPROVAL_DECIDED_EVENT, APPROVAL_PARKED_EVENT, approvalGateAvailable, approvalRequiredInfo, } from './approval-events';
+/** Capability that authorizes `policy` (and lets its holder skip the prompt). */
+export function approvalCapability(policy) {
+    return `general.approve_${policy}`;
+}
+const ApprovalGateContext = createContext(null);
+export function ApprovalGateProvider({ children }) {
+    const { t } = useTranslation();
+    const api = useApi();
+    const can = useCan();
+    const [pending, setPending] = useState(null);
+    const pendingRef = useRef(null);
+    pendingRef.current = pending;
+    useEffect(() => {
+        gateMountedDelta(1);
+        const onParked = (e) => {
+            const info = e.detail;
+            if (info?.requestId)
+                setPending({ kind: 'parked', info });
+        };
+        window.addEventListener(APPROVAL_PARKED_EVENT, onParked);
+        return () => {
+            gateMountedDelta(-1);
+            window.removeEventListener(APPROVAL_PARKED_EVENT, onParked);
+        };
+    }, []);
+    const canSelfApprove = useCallback((policy) => can(approvalCapability(policy)), [can]);
+    const requestApproval = useCallback((opts) => {
+        if (can(approvalCapability(opts.policy))) {
+            return Promise.resolve({ id: null, policy: opts.policy, bypassed: true });
+        }
+        return new Promise((resolve) => {
+            pendingRef.current?.kind === 'inline' && pendingRef.current.resolve(null);
+            setPending({ kind: 'inline', opts, resolve });
+        });
+    }, [can]);
+    const close = () => {
+        const p = pendingRef.current;
+        if (p?.kind === 'inline')
+            p.resolve(null);
+        setPending(null);
+    };
+    const submit = async ({ pin, reason }) => {
+        const p = pendingRef.current;
+        if (!p)
+            return;
+        if (p.kind === 'inline') {
+            const res = await api.post('/approvals/pin-grant', {
+                policy: p.opts.policy,
+                label: p.opts.label,
+                pin,
+                reason,
+                context: p.opts.context,
+                model: p.opts.model,
+                record_id: p.opts.recordId,
+                addon_key: p.opts.addonKey,
+            });
+            const row = res.data?.data;
+            p.resolve({ id: row?.id ?? null, policy: p.opts.policy, bypassed: false, reason });
+        }
+        else {
+            await api.post(`/approvals/${p.info.requestId}/approve-pin`, { pin, reason });
+            toast.success(t('approvals.approved_applied', { defaultValue: 'Aprobado y aplicado' }));
+            window.dispatchEvent(new CustomEvent(APPROVAL_DECIDED_EVENT, { detail: p.info }));
+        }
+        setPending(null);
+    };
+    const value = useMemo(() => ({ requestApproval, canSelfApprove }), [requestApproval, canSelfApprove]);
+    const title = pending?.kind === 'inline'
+        ? pending.opts.label
+        : pending?.kind === 'parked'
+            ? pending.info.label || t('approvals.parked_title', { defaultValue: 'Requiere aprobación' })
+            : '';
+    return (_jsxs(ApprovalGateContext.Provider, { value: value, children: [children, _jsx(ApprovalPinDialog, { open: pending !== null, title: title, description: pending?.kind === 'inline' ? pending.opts.description : undefined, onSubmit: submit, onCancel: close })] }));
+}
+/**
+ * Access the gate. Without a provider the gate fails CLOSED for inline requests
+ * (resolves null) — never silently authorizes — but honours the capability
+ * bypass, and `canSelfApprove` follows `useCan()` (always-true with no
+ * <PermissionsProvider>, i.e. legacy hosts keep today's behaviour).
+ */
+export function useApprovalGate() {
+    const ctx = useContext(ApprovalGateContext);
+    const can = useCan();
+    return useMemo(() => ctx ?? {
+        canSelfApprove: (policy) => can(approvalCapability(policy)),
+        requestApproval: async (opts) => can(approvalCapability(opts.policy)) ? { id: null, policy: opts.policy, bypassed: true } : null,
+    }, [ctx, can]);
+}

package/dist/approval-pin-dialog.d.ts

@@ -0,0 +1,25 @@
+export interface ApprovalPinSubmit {
+    pin: string;
+    reason: string;
+}
+export interface ApprovalPinDialogProps {
+    open: boolean;
+    /** Headline, e.g. "Venta sin existencias". */
+    title: string;
+    /** What is being authorized, in the operator's words. */
+    description?: React.ReactNode;
+    /** Called with the typed PIN + reason. Throw (or reject) to keep the dialog open. */
+    onSubmit: (v: ApprovalPinSubmit) => Promise<void>;
+    onCancel: () => void;
+    /** Optional secondary action, e.g. "Enviar a la bandeja" (async request). */
+    secondaryAction?: {
+        label: string;
+        onClick: () => void;
+    };
+}
+/** Best human message out of an axios-style error carrying the kernel envelope. */
+export declare function approvalErrorMessage(err: unknown, t: (k: string, o?: {
+    defaultValue?: string;
+}) => string): string;
+export declare function ApprovalPinDialog({ open, title, description, onSubmit, onCancel, secondaryAction }: ApprovalPinDialogProps): import("react").JSX.Element;
+//# sourceMappingURL=approval-pin-dialog.d.ts.map

package/dist/approval-pin-dialog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-pin-dialog.d.ts","sourceRoot":"","sources":["../src/approval-pin-dialog.tsx"],"names":[],"mappings":"AAwBA,MAAM,WAAW,iBAAiB;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,sBAAsB;IACnC,IAAI,EAAE,OAAO,CAAA;IACb,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAA;IACb,yDAAyD;IACzD,WAAW,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC7B,qFAAqF;IACrF,QAAQ,EAAE,CAAC,CAAC,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACjD,QAAQ,EAAE,MAAM,IAAI,CAAA;IACpB,6EAA6E;IAC7E,eAAe,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,IAAI,CAAA;KAAE,CAAA;CAC3D;AAED,mFAAmF;AACnF,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,MAAM,GAAG,MAAM,CAalH;AAED,wBAAgB,iBAAiB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,sBAAsB,+BAuG1H"}