@conduction/nextcloud-vue 2.59.0 → 2.61.0

package/dist/esm/utils/fetchFilterCounts.js

@@ -0,0 +1,186 @@
+import { fetchGroupedCounts, fetchAggregateValue } from './fetchAggregate.js';
+import { buildQueryString, prefixUrl, buildHeaders } from './headers.js';
+import { resolveFilterTokens } from './resolveFilterTokens.js';
+
+/**
+ * SPDX-FileCopyrightText: 2026 Conduction B.V.
+ * SPDX-License-Identifier: EUPL-1.2
+ *
+ * fetchFilterCounts: how many records each of a set of filters matches, in as
+ * few requests as the API allows.
+ *
+ * Quick filters and saved views usually differ in ONE field (`status: open`,
+ * `status: closed`, ...). Those are answered by one `/grouped` request on that
+ * field. A filter that narrows on something else (two fields, an operator, a
+ * list of values) cannot be read off a grouped result, so each of those costs
+ * one `/value` count. A filter that holds a LIST of values is counted through
+ * the list endpoint, because the aggregation endpoints cannot express it.
+ * Nothing is requested for an entry that did not ask.
+ *
+ * @module utils/fetchFilterCounts
+ */
+
+
+/**
+ * Whether a filter holds a list of values (`{ status: ['open', 'hold'] }`).
+ *
+ * The aggregation endpoints have no spelling for "one of these values", so a
+ * filter like this is never sent to them. It is counted through the list
+ * endpoint instead, which is where the page's own request sends it.
+ *
+ * @param {object} filter A filter map.
+ * @return {boolean} True when any value is an array.
+ * @spec openspec/changes/workplace-dashboard-primitives/specs/workplace-dashboard-primitives/spec.md#requirement-counts-on-filters-and-views
+ */
+function hasListValue(filter) {
+	if (!filter || typeof filter !== 'object') {
+		return false
+	}
+	return Object.values(filter).some((value) => Array.isArray(value))
+}
+
+/**
+ * Count the records a filter matches by asking the LIST endpoint for one
+ * record and reading its `total`. The filter is sent the way the list request
+ * sends it: a list of values as repeated `field[]=`, an operator as
+ * `field[op]=`.
+ *
+ * @param {string} register The register slug.
+ * @param {string} schema The schema slug.
+ * @param {object} filter The filter map.
+ * @param {object} [ctx] Token-resolution context for the filter.
+ * @return {Promise<number|null>} The total, or null when the response carries none.
+ * @spec openspec/changes/workplace-dashboard-primitives/specs/workplace-dashboard-primitives/spec.md#requirement-counts-on-filters-and-views
+ */
+async function fetchListTotal(register, schema, filter, ctx) {
+	const resolved = resolveFilterTokens(filter || {}, ctx || {});
+	const params = {};
+	for (const [key, value] of Object.entries(resolved || {})) {
+		if (value && typeof value === 'object' && !Array.isArray(value)) {
+			for (const [op, operand] of Object.entries(value)) {
+				params[`${key}[${op}]`] = operand;
+			}
+		} else {
+			params[key] = value;
+		}
+	}
+	const qs = buildQueryString({ ...params, _limit: 1 });
+	const url = prefixUrl(`/apps/openregister/api/objects/${encodeURIComponent(register)}/${encodeURIComponent(schema)}${qs}`);
+	const response = await fetch(url, { headers: buildHeaders() });
+	if (!response.ok) {
+		throw new Error(`list returned ${response.status}`)
+	}
+	const data = await response.json();
+	return typeof data.total === 'number' ? data.total : null
+}
+
+/**
+ * The single field a filter narrows on with a plain equality, or null when the
+ * filter is anything else.
+ *
+ * @param {object} filter A filter map.
+ * @return {{field: string, value: string}|null} The field and the value it must equal.
+ * @spec openspec/changes/workplace-dashboard-primitives/specs/workplace-dashboard-primitives/spec.md#requirement-counts-on-filters-and-views
+ */
+function singleEqualityOf(filter) {
+	if (!filter || typeof filter !== 'object' || Array.isArray(filter)) {
+		return null
+	}
+	const keys = Object.keys(filter);
+	if (keys.length !== 1) {
+		return null
+	}
+	const value = filter[keys[0]];
+	if (value === null || value === undefined || value === '' || typeof value === 'object') {
+		return null
+	}
+	// A token (`@me`, `@today`) resolves to a value the grouped keys are
+	// compared against only after resolution, which the count request does.
+	if (typeof value === 'string' && value.charAt(0) === '@') {
+		return null
+	}
+	return { field: keys[0], value: String(value) }
+}
+
+/**
+ * Count the records each entry's filter matches.
+ *
+ * @param {object} options The request.
+ * @param {string} options.register The register slug.
+ * @param {string} options.schema The schema slug.
+ * @param {Array<{key: (string|number), filter: object}>} options.entries The filters to count, each under its own key.
+ * @param {object} [options.baseFilter] A filter every count is narrowed by (the page's fixed filter).
+ * @param {object} [options.ctx] Token-resolution context for the filters.
+ * @return {Promise<{[key: string]: number}>} The count per entry key. An entry whose count failed is left out.
+ * @spec openspec/changes/workplace-dashboard-primitives/specs/workplace-dashboard-primitives/spec.md#requirement-counts-on-filters-and-views
+ */
+async function fetchFilterCounts({ register, schema, entries, baseFilter, ctx } = {}) {
+	const counts = {};
+	if (!register || !schema || !Array.isArray(entries) || entries.length === 0) {
+		return counts
+	}
+	const base = (baseFilter && typeof baseFilter === 'object') ? baseFilter : {};
+
+	// Entries that share one equality field go into one grouped request, but
+	// only when at least two do: a lone entry costs one request either way,
+	// and `/value` returns exactly its number.
+	// A list of values anywhere in a request rules the aggregation endpoints
+	// out for it. A base filter with one rules them out for every entry.
+	const baseHasList = hasListValue(base);
+	const byField = {};
+	const single = [];
+	const viaList = [];
+	for (const entry of entries) {
+		if (baseHasList || hasListValue(entry.filter)) {
+			viaList.push(entry);
+			continue
+		}
+		const eq = singleEqualityOf(entry.filter);
+		if (eq !== null && !(eq.field in base)) {
+			(byField[eq.field] = byField[eq.field] || []).push({ entry, value: eq.value });
+		} else {
+			single.push(entry);
+		}
+	}
+	const jobs = [];
+	for (const [field, members] of Object.entries(byField)) {
+		if (members.length < 2) {
+			single.push(members[0].entry);
+			continue
+		}
+		jobs.push(fetchGroupedCounts({ register, schema, groupBy: field, filter: base }, ctx)
+			.then((groups) => {
+				const map = {};
+				for (const group of groups) {
+					map[group.key] = group.count;
+				}
+				for (const member of members) {
+					counts[member.entry.key] = map[member.value] || 0;
+				}
+			})
+			.catch(() => {}));
+	}
+	for (const entry of single) {
+		jobs.push(fetchAggregateValue({ register, schema, metric: 'count', filter: { ...base, ...(entry.filter || {}) } }, ctx)
+			.then((value) => {
+				if (value !== null && Number.isFinite(Number(value))) {
+					counts[entry.key] = Number(value);
+				}
+			})
+			.catch(() => {}));
+	}
+	for (const entry of viaList) {
+		jobs.push(fetchListTotal(register, schema, { ...base, ...(entry.filter || {}) }, ctx)
+			.then((total) => {
+				if (total !== null) {
+					counts[entry.key] = total;
+				}
+			})
+			.catch(() => {}));
+	}
+	await Promise.all(jobs);
+	return counts
+}
+
+export { fetchFilterCounts, fetchListTotal, hasListValue, singleEqualityOf };
+//# sourceMappingURL=fetchFilterCounts.js.map

package/dist/esm/utils/fetchFilterCounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetchFilterCounts.js","sources":["../../../src/utils/fetchFilterCounts.js"],"sourcesContent":["/**\n * SPDX-FileCopyrightText: 2026 Conduction B.V.\n * SPDX-License-Identifier: EUPL-1.2\n *\n * fetchFilterCounts: how many records each of a set of filters matches, in as\n * few requests as the API allows.\n *\n * Quick filters and saved views usually differ in ONE field (`status: open`,\n * `status: closed`, ...). Those are answered by one `/grouped` request on that\n * field. A filter that narrows on something else (two fields, an operator, a\n * list of values) cannot be read off a grouped result, so each of those costs\n * one `/value` count. A filter that holds a LIST of values is counted through\n * the list endpoint, because the aggregation endpoints cannot express it.\n * Nothing is requested for an entry that did not ask.\n *\n * @module utils/fetchFilterCounts\n */\n\nimport { fetchAggregateValue, fetchGroupedCounts } from './fetchAggregate.js'\nimport { buildHeaders, buildQueryString, prefixUrl } from './headers.js'\nimport { resolveFilterTokens } from './resolveFilterTokens.js'\n\n/**\n * Whether a filter holds a list of values (`{ status: ['open', 'hold'] }`).\n *\n * The aggregation endpoints have no spelling for \"one of these values\", so a\n * filter like this is never sent to them. It is counted through the list\n * endpoint instead, which is where the page's own request sends it.\n *\n * @param {object} filter A filter map.\n * @return {boolean} True when any value is an array.\n * @spec openspec/changes/workplace-dashboard-primitives/specs/workplace-dashboard-primitives/spec.md#requirement-counts-on-filters-and-views\n */\nexport function hasListValue(filter) {\n\tif (!filter || typeof filter !== 'object') {\n\t\treturn false\n\t}\n\treturn Object.values(filter).some((value) => Array.isArray(value))\n}\n\n/**\n * Count the records a filter matches by asking the LIST endpoint for one\n * record and reading its `total`. The filter is sent the way the list request\n * sends it: a list of values as repeated `field[]=`, an operator as\n * `field[op]=`.\n *\n * @param {string} register The register slug.\n * @param {string} schema The schema slug.\n * @param {object} filter The filter map.\n * @param {object} [ctx] Token-resolution context for the filter.\n * @return {Promise<number|null>} The total, or null when the response carries none.\n * @spec openspec/changes/workplace-dashboard-primitives/specs/workplace-dashboard-primitives/spec.md#requirement-counts-on-filters-and-views\n */\nexport async function fetchListTotal(register, schema, filter, ctx) {\n\tconst resolved = resolveFilterTokens(filter || {}, ctx || {})\n\tconst params = {}\n\tfor (const [key, value] of Object.entries(resolved || {})) {\n\t\tif (value && typeof value === 'object' && !Array.isArray(value)) {\n\t\t\tfor (const [op, operand] of Object.entries(value)) {\n\t\t\t\tparams[`${key}[${op}]`] = operand\n\t\t\t}\n\t\t} else {\n\t\t\tparams[key] = value\n\t\t}\n\t}\n\tconst qs = buildQueryString({ ...params, _limit: 1 })\n\tconst url = prefixUrl(`/apps/openregister/api/objects/${encodeURIComponent(register)}/${encodeURIComponent(schema)}${qs}`)\n\tconst response = await fetch(url, { headers: buildHeaders() })\n\tif (!response.ok) {\n\t\tthrow new Error(`list returned ${response.status}`)\n\t}\n\tconst data = await response.json()\n\treturn typeof data.total === 'number' ? data.total : null\n}\n\n/**\n * The single field a filter narrows on with a plain equality, or null when the\n * filter is anything else.\n *\n * @param {object} filter A filter map.\n * @return {{field: string, value: string}|null} The field and the value it must equal.\n * @spec openspec/changes/workplace-dashboard-primitives/specs/workplace-dashboard-primitives/spec.md#requirement-counts-on-filters-and-views\n */\nexport function singleEqualityOf(filter) {\n\tif (!filter || typeof filter !== 'object' || Array.isArray(filter)) {\n\t\treturn null\n\t}\n\tconst keys = Object.keys(filter)\n\tif (keys.length !== 1) {\n\t\treturn null\n\t}\n\tconst value = filter[keys[0]]\n\tif (value === null || value === undefined || value === '' || typeof value === 'object') {\n\t\treturn null\n\t}\n\t// A token (`@me`, `@today`) resolves to a value the grouped keys are\n\t// compared against only after resolution, which the count request does.\n\tif (typeof value === 'string' && value.charAt(0) === '@') {\n\t\treturn null\n\t}\n\treturn { field: keys[0], value: String(value) }\n}\n\n/**\n * Count the records each entry's filter matches.\n *\n * @param {object} options The request.\n * @param {string} options.register The register slug.\n * @param {string} options.schema The schema slug.\n * @param {Array<{key: (string|number), filter: object}>} options.entries The filters to count, each under its own key.\n * @param {object} [options.baseFilter] A filter every count is narrowed by (the page's fixed filter).\n * @param {object} [options.ctx] Token-resolution context for the filters.\n * @return {Promise<{[key: string]: number}>} The count per entry key. An entry whose count failed is left out.\n * @spec openspec/changes/workplace-dashboard-primitives/specs/workplace-dashboard-primitives/spec.md#requirement-counts-on-filters-and-views\n */\nexport async function fetchFilterCounts({ register, schema, entries, baseFilter, ctx } = {}) {\n\tconst counts = {}\n\tif (!register || !schema || !Array.isArray(entries) || entries.length === 0) {\n\t\treturn counts\n\t}\n\tconst base = (baseFilter && typeof baseFilter === 'object') ? baseFilter : {}\n\n\t// Entries that share one equality field go into one grouped request, but\n\t// only when at least two do: a lone entry costs one request either way,\n\t// and `/value` returns exactly its number.\n\t// A list of values anywhere in a request rules the aggregation endpoints\n\t// out for it. A base filter with one rules them out for every entry.\n\tconst baseHasList = hasListValue(base)\n\tconst byField = {}\n\tconst single = []\n\tconst viaList = []\n\tfor (const entry of entries) {\n\t\tif (baseHasList || hasListValue(entry.filter)) {\n\t\t\tviaList.push(entry)\n\t\t\tcontinue\n\t\t}\n\t\tconst eq = singleEqualityOf(entry.filter)\n\t\tif (eq !== null && !(eq.field in base)) {\n\t\t\t(byField[eq.field] = byField[eq.field] || []).push({ entry, value: eq.value })\n\t\t} else {\n\t\t\tsingle.push(entry)\n\t\t}\n\t}\n\tconst jobs = []\n\tfor (const [field, members] of Object.entries(byField)) {\n\t\tif (members.length < 2) {\n\t\t\tsingle.push(members[0].entry)\n\t\t\tcontinue\n\t\t}\n\t\tjobs.push(fetchGroupedCounts({ register, schema, groupBy: field, filter: base }, ctx)\n\t\t\t.then((groups) => {\n\t\t\t\tconst map = {}\n\t\t\t\tfor (const group of groups) {\n\t\t\t\t\tmap[group.key] = group.count\n\t\t\t\t}\n\t\t\t\tfor (const member of members) {\n\t\t\t\t\tcounts[member.entry.key] = map[member.value] || 0\n\t\t\t\t}\n\t\t\t})\n\t\t\t.catch(() => {}))\n\t}\n\tfor (const entry of single) {\n\t\tjobs.push(fetchAggregateValue({ register, schema, metric: 'count', filter: { ...base, ...(entry.filter || {}) } }, ctx)\n\t\t\t.then((value) => {\n\t\t\t\tif (value !== null && Number.isFinite(Number(value))) {\n\t\t\t\t\tcounts[entry.key] = Number(value)\n\t\t\t\t}\n\t\t\t})\n\t\t\t.catch(() => {}))\n\t}\n\tfor (const entry of viaList) {\n\t\tjobs.push(fetchListTotal(register, schema, { ...base, ...(entry.filter || {}) }, ctx)\n\t\t\t.then((total) => {\n\t\t\t\tif (total !== null) {\n\t\t\t\t\tcounts[entry.key] = total\n\t\t\t\t}\n\t\t\t})\n\t\t\t.catch(() => {}))\n\t}\n\tawait Promise.all(jobs)\n\treturn counts\n}\n"],"names":[],"mappings":";;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS,YAAY,CAAC,MAAM,EAAE;AACrC,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE;AAC5C,EAAE,OAAO,KAAK;AACd,EAAE;AACF,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAe,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE;AACpE,CAAC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,EAAC;AAC9D,CAAC,MAAM,MAAM,GAAG,GAAE;AAClB,CAAC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE;AAC5D,EAAE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;AACnE,GAAG,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;AACtD,IAAI,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,QAAO;AACrC,IAAI;AACJ,GAAG,MAAM;AACT,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,MAAK;AACtB,GAAG;AACH,EAAE;AACF,CAAC,MAAM,EAAE,GAAG,gBAAgB,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,EAAC;AACtD,CAAC,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,+BAA+B,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAC;AAC3H,CAAC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,EAAC;AAC/D,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;AACnB,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AACrD,EAAE;AACF,CAAC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,GAAE;AACnC,CAAC,OAAO,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI;AAC1D,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS,gBAAgB,CAAC,MAAM,EAAE;AACzC,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;AACrE,EAAE,OAAO,IAAI;AACb,EAAE;AACF,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAC;AACjC,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE;AACxB,EAAE,OAAO,IAAI;AACb,EAAE;AACF,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC;AAC9B,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;AACzF,EAAE,OAAO,IAAI;AACb,EAAE;AACF;AACA;AACA,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE;AAC3D,EAAE,OAAO,IAAI;AACb,EAAE;AACF,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;AAChD,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAe,iBAAiB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;AAC7F,CAAC,MAAM,MAAM,GAAG,GAAE;AAClB,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE;AAC9E,EAAE,OAAO,MAAM;AACf,EAAE;AACF,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,GAAG,GAAE;AAC9E;AACA;AACA;AACA;AACA;AACA;AACA,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,EAAC;AACvC,CAAC,MAAM,OAAO,GAAG,GAAE;AACnB,CAAC,MAAM,MAAM,GAAG,GAAE;AAClB,CAAC,MAAM,OAAO,GAAG,GAAE;AACnB,CAAC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE;AAC9B,EAAE,IAAI,WAAW,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;AACjD,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,EAAC;AACtB,GAAG,QAAQ;AACX,GAAG;AACH,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAC;AAC3C,EAAE,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE;AAC1C,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,EAAC;AACjF,GAAG,MAAM;AACT,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAC;AACrB,GAAG;AACH,EAAE;AACF,CAAC,MAAM,IAAI,GAAG,GAAE;AAChB,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;AACzD,EAAE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;AAC1B,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,EAAC;AAChC,GAAG,QAAQ;AACX,GAAG;AACH,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC;AACvF,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK;AACrB,IAAI,MAAM,GAAG,GAAG,GAAE;AAClB,IAAI,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE;AAChC,KAAK,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAK;AACjC,KAAK;AACL,IAAI,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE;AAClC,KAAK,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAC;AACtD,KAAK;AACL,IAAI,CAAC;AACL,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,EAAC;AACpB,EAAE;AACF,CAAC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE;AAC7B,EAAE,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC;AACzH,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK;AACpB,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE;AAC1D,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,EAAC;AACtC,KAAK;AACL,IAAI,CAAC;AACL,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,EAAC;AACpB,EAAE;AACF,CAAC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE;AAC9B,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC;AACvF,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK;AACpB,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE;AACxB,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,MAAK;AAC9B,KAAK;AACL,IAAI,CAAC;AACL,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,EAAC;AACpB,EAAE;AACF,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAC;AACxB,CAAC,OAAO,MAAM;AACd;;;;"}

package/dist/esm/utils/headers.js

@@ -130,10 +130,15 @@ function capitalize(str) {
  *
  * Array values are serialized with PHP bracket notation (`key[]=a&key[]=b`)
  * so the Nextcloud/OpenRegister backend parses them as an array — a plain
- * repeated `key=a&key=b` collapses to the last value in PHP. Also handles
- * _order serialization (JSON.stringify for objects) and skips
+ * repeated `key=a&key=b` collapses to the last value in PHP. A plain object
+ * under a filter key is a set of operators and goes out in bracket form
+ * (`{ deadline: { lt: 'x' } }` becomes `deadline[lt]=x`); a key already
+ * written that way (`'deadline[lt]'`) passes through unchanged. Reserved keys
+ * that start with `_` keep their JSON form (`_order`). Skips
  * null/undefined/empty values.
  *
+ * @spec openspec/changes/link-cards-page/specs/link-cards-page/spec.md#requirement-a-filter-operator-is-serialised-in-bracket-form
+ *
  * @param {object} params Key-value pairs for query parameters
  * @return {string} Query string including leading '?' or empty string
  */
@@ -159,6 +164,27 @@ function buildQueryString(params = {}) {
 					queryParams.append(arrayKey, String(item));
 				}
 			}
+		} else if (typeof value === 'object' && !key.startsWith('_')) {
+			// A filter operator: `{ deadline: { lt: '2026-10-06' } }` goes out
+			// as `deadline[lt]=2026-10-06`, the form OpenRegister reads. As
+			// JSON it reached the database as the literal value and a date
+			// column answered 500. Reserved `_` keys (`_order`) keep JSON.
+			for (const [op, operand] of Object.entries(value)) {
+				if (operand === undefined || operand === null || operand === '') {
+					continue
+				}
+				if (Array.isArray(operand)) {
+					for (const item of operand) {
+						if (item !== undefined && item !== null && item !== '') {
+							queryParams.append(`${key}[${op}][]`, String(item));
+						}
+					}
+				} else if (typeof operand === 'object') {
+					queryParams.set(`${key}[${op}]`, JSON.stringify(operand));
+				} else {
+					queryParams.set(`${key}[${op}]`, String(operand));
+				}
+			}
 		} else if (typeof value === 'object') {
 			queryParams.set(key, JSON.stringify(value));
 		} else {

package/dist/esm/utils/headers.js.map

@@ -1 +1 @@
-{"version":3,"file":"headers.js","sources":["../../../src/utils/headers.js"],"sourcesContent":["import { generateUrl } from '@nextcloud/router'\n\n/**\n * Prefix an app-absolute URL path the way `generateUrl()` would: the instance\n * webroot, plus `/index.php` unless Nextcloud reports working URL rewriting.\n *\n * On an instance without pretty URLs the bare `/apps/<app>/api/...` form is\n * not routed at all and answers the web server's own 404, which is why every\n * internal API path has to pass through here or through `generateUrl()`.\n *\n * Only the PREFIX comes from `generateUrl()`: the path itself is appended\n * untouched, because `generateUrl()` URL-encodes any `{placeholder}` it cannot\n * fill, and callers pass templates filled later and JSON query values.\n *\n * Idempotent, and inert on anything that is not an app-absolute path, since it\n * is wrapped around hundreds of call sites: an absolute or protocol-relative\n * URL, a scheme (`data:`, `blob:`, `mailto:`), a document-relative path, or a\n * path already carrying the webroot or `/index.php` comes back unchanged.\n * `/ocs/`, `/remote.php` and `/public.php` get the webroot only, as they are\n * never served behind `/index.php`.\n *\n * @param {string} path URL path (e.g. '/apps/openregister/api/objects')\n * @return {string} The path as the instance routes it\n */\nexport function prefixUrl(path) {\n\tif (typeof path !== 'string' || path === '') {\n\t\treturn path\n\t}\n\t// Absolute URL, protocol-relative URL, or any scheme (data:, blob:, mailto:).\n\tif (/^[a-z][a-z0-9+.-]*:/i.test(path) || path.startsWith('//')) {\n\t\treturn path\n\t}\n\t// Only app-absolute paths are ours to prefix.\n\tif (!path.startsWith('/')) {\n\t\treturn path\n\t}\n\t// `generateUrl('/')` is `<webroot>[/index.php]/`; the webroot is that minus `/index.php`.\n\tconst prefix = generateUrl('/', {}).replace(/\\/$/, '')\n\tconst root = prefix.replace(/\\/index\\.php$/, '')\n\tif (path.startsWith('/index.php') || (root && (path === root || path.startsWith(root + '/')))) {\n\t\treturn path\n\t}\n\tif (/^\\/(ocs|remote\\.php|public\\.php)(\\/|$)/.test(path)) {\n\t\treturn root + path\n\t}\n\treturn prefix + path\n}\n\n/**\n * Build standard Nextcloud request headers for API calls.\n *\n * Includes the CSRF request token and OCS API request header\n * required by Nextcloud's API layer.\n *\n * Two call shapes are supported:\n *\n *   1. **Positional (back-compat)** — `buildHeaders(contentType)`.\n *      Returns the same object the v1 signature did.\n *\n *   2. **Options object** — `buildHeaders({ contentType?, organisationUuid?, targetLanguage? })`.\n *      When `organisationUuid` is a non-empty string the returned object\n *      includes `X-OpenRegister-Organisation: <uuid>`. The header is the\n *      FE side of the `multi-tenancy-context` capability and is consumed\n *      by OR's MultiTenancyTrait.\n *      When `targetLanguage` is a non-empty BCP-47 string the returned\n *      object includes `X-Translation-Target-Language: <bcp47>`. The\n *      header is the FE side of the `i18n-source-of-truth` write\n *      contract — OR stamps the value into `_translations[<bcp47>]`\n *      instead of overwriting the source row. See the\n *      `i18n-language-negotiation-getters` change.\n *\n * @param {string|object} [opts] Content-Type string (back-compat) or options object.\n * @param {string} [opts.contentType] Content-Type header value\n * @param {string} [opts.organisationUuid] Active organisation UUID for the request\n * @param {string} [opts.targetLanguage] BCP-47 target language for translation writes\n * @return {object} Headers object for use with fetch()\n */\nexport function buildHeaders(opts = 'application/json') {\n\tlet contentType = 'application/json'\n\tlet organisationUuid = null\n\tlet targetLanguage = null\n\n\tif (typeof opts === 'string') {\n\t\t// v1 positional signature: buildHeaders(contentType)\n\t\tcontentType = opts\n\t} else if (opts === null) {\n\t\t// v1 positional signature: buildHeaders(null) — explicit \"no Content-Type\"\n\t\tcontentType = null\n\t} else if (opts && typeof opts === 'object') {\n\t\t// Options-object signature\n\t\tif (Object.hasOwn(opts, 'contentType')) {\n\t\t\tcontentType = opts.contentType\n\t\t}\n\t\tif (typeof opts.organisationUuid === 'string' && opts.organisationUuid.length > 0) {\n\t\t\torganisationUuid = opts.organisationUuid\n\t\t}\n\t\tif (typeof opts.targetLanguage === 'string' && opts.targetLanguage.length > 0) {\n\t\t\ttargetLanguage = opts.targetLanguage\n\t\t}\n\t}\n\n\tconst headers = {\n\t\trequesttoken: typeof OC !== 'undefined' ? OC.requestToken : '',\n\t\t'OCS-APIREQUEST': 'true',\n\t}\n\tif (contentType) {\n\t\theaders['Content-Type'] = contentType\n\t}\n\tif (organisationUuid) {\n\t\theaders['X-OpenRegister-Organisation'] = organisationUuid\n\t}\n\tif (targetLanguage) {\n\t\theaders['X-Translation-Target-Language'] = targetLanguage\n\t}\n\treturn headers\n}\n\n/**\n * Capitalize the first letter of a string.\n *\n * @param {string} str Input string\n * @return {string} Capitalized string\n */\nexport function capitalize(str) {\n\treturn str.charAt(0).toUpperCase() + str.slice(1)\n}\n\n/**\n * Build a query string from a params object.\n *\n * Array values are serialized with PHP bracket notation (`key[]=a&key[]=b`)\n * so the Nextcloud/OpenRegister backend parses them as an array — a plain\n * repeated `key=a&key=b` collapses to the last value in PHP. Also handles\n * _order serialization (JSON.stringify for objects) and skips\n * null/undefined/empty values.\n *\n * @param {object} params Key-value pairs for query parameters\n * @return {string} Query string including leading '?' or empty string\n */\nexport function buildQueryString(params = {}) {\n\tconst queryParams = new URLSearchParams()\n\n\tfor (const [key, value] of Object.entries(params)) {\n\t\tif (value === undefined || value === null || value === '') {\n\t\t\tcontinue\n\t\t}\n\t\tif (Array.isArray(value) && value.length === 0) {\n\t\t\tcontinue\n\t\t}\n\t\tif (typeof value === 'object' && !Array.isArray(value) && Object.keys(value).length === 0) {\n\t\t\tcontinue\n\t\t}\n\t\tif (Array.isArray(value)) {\n\t\t\t// PHP needs `key[]` to receive repeated params as an array;\n\t\t\t// without the brackets only the last value survives server-side.\n\t\t\tconst arrayKey = key.endsWith('[]') ? key : `${key}[]`\n\t\t\tfor (const item of value) {\n\t\t\t\tif (item !== undefined && item !== null && item !== '') {\n\t\t\t\t\tqueryParams.append(arrayKey, String(item))\n\t\t\t\t}\n\t\t\t}\n\t\t} else if (typeof value === 'object') {\n\t\t\tqueryParams.set(key, JSON.stringify(value))\n\t\t} else {\n\t\t\tqueryParams.set(key, String(value))\n\t\t}\n\t}\n\n\tconst str = queryParams.toString()\n\treturn str ? '?' + str : ''\n}\n"],"names":[],"mappings":";;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS,SAAS,CAAC,IAAI,EAAE;AAChC,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,EAAE;AAC9C,EAAE,OAAO,IAAI;AACb,EAAE;AACF;AACA,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;AACjE,EAAE,OAAO,IAAI;AACb,EAAE;AACF;AACA,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;AAC5B,EAAE,OAAO,IAAI;AACb,EAAE;AACF;AACA,CAAC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAC;AACvD,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,EAAC;AACjD,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,KAAK,IAAI,KAAK,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE;AAChG,EAAE,OAAO,IAAI;AACb,EAAE;AACF,CAAC,IAAI,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;AAC1D,EAAE,OAAO,IAAI,GAAG,IAAI;AACpB,EAAE;AACF,CAAC,OAAO,MAAM,GAAG,IAAI;AACrB,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS,YAAY,CAAC,IAAI,GAAG,kBAAkB,EAAE;AACxD,CAAC,IAAI,WAAW,GAAG,mBAAkB;AACrC,CAAC,IAAI,gBAAgB,GAAG,KAAI;AAC5B,CAAC,IAAI,cAAc,GAAG,KAAI;AAC1B;AACA,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;AAC/B;AACA,EAAE,WAAW,GAAG,KAAI;AACpB,EAAE,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE;AAC3B;AACA,EAAE,WAAW,GAAG,KAAI;AACpB,EAAE,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;AAC9C;AACA,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE;AAC1C,GAAG,WAAW,GAAG,IAAI,CAAC,YAAW;AACjC,GAAG;AACH,EAAE,IAAI,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE;AACrF,GAAG,gBAAgB,GAAG,IAAI,CAAC,iBAAgB;AAC3C,GAAG;AACH,EAAE,IAAI,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE;AACjF,GAAG,cAAc,GAAG,IAAI,CAAC,eAAc;AACvC,GAAG;AACH,EAAE;AACF;AACA,CAAC,MAAM,OAAO,GAAG;AACjB,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,WAAW,GAAG,EAAE,CAAC,YAAY,GAAG,EAAE;AAChE,EAAE,gBAAgB,EAAE,MAAM;AAC1B,GAAE;AACF,CAAC,IAAI,WAAW,EAAE;AAClB,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,YAAW;AACvC,EAAE;AACF,CAAC,IAAI,gBAAgB,EAAE;AACvB,EAAE,OAAO,CAAC,6BAA6B,CAAC,GAAG,iBAAgB;AAC3D,EAAE;AACF,CAAC,IAAI,cAAc,EAAE;AACrB,EAAE,OAAO,CAAC,+BAA+B,CAAC,GAAG,eAAc;AAC3D,EAAE;AACF,CAAC,OAAO,OAAO;AACf,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS,UAAU,CAAC,GAAG,EAAE;AAChC,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAClD,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS,gBAAgB,CAAC,MAAM,GAAG,EAAE,EAAE;AAC9C,CAAC,MAAM,WAAW,GAAG,IAAI,eAAe,GAAE;AAC1C;AACA,CAAC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;AACpD,EAAE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE;AAC7D,GAAG,QAAQ;AACX,GAAG;AACH,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE;AAClD,GAAG,QAAQ;AACX,GAAG;AACH,EAAE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE;AAC7F,GAAG,QAAQ;AACX,GAAG;AACH,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;AAC5B;AACA;AACA,GAAG,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,EAAC;AACzD,GAAG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;AAC7B,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,EAAE,EAAE;AAC5D,KAAK,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,EAAC;AAC/C,KAAK;AACL,IAAI;AACJ,GAAG,MAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;AACxC,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAC;AAC9C,GAAG,MAAM;AACT,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,EAAC;AACtC,GAAG;AACH,EAAE;AACF;AACA,CAAC,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,GAAE;AACnC,CAAC,OAAO,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,EAAE;AAC5B;;;;"}
+{"version":3,"file":"headers.js","sources":["../../../src/utils/headers.js"],"sourcesContent":["import { generateUrl } from '@nextcloud/router'\n\n/**\n * Prefix an app-absolute URL path the way `generateUrl()` would: the instance\n * webroot, plus `/index.php` unless Nextcloud reports working URL rewriting.\n *\n * On an instance without pretty URLs the bare `/apps/<app>/api/...` form is\n * not routed at all and answers the web server's own 404, which is why every\n * internal API path has to pass through here or through `generateUrl()`.\n *\n * Only the PREFIX comes from `generateUrl()`: the path itself is appended\n * untouched, because `generateUrl()` URL-encodes any `{placeholder}` it cannot\n * fill, and callers pass templates filled later and JSON query values.\n *\n * Idempotent, and inert on anything that is not an app-absolute path, since it\n * is wrapped around hundreds of call sites: an absolute or protocol-relative\n * URL, a scheme (`data:`, `blob:`, `mailto:`), a document-relative path, or a\n * path already carrying the webroot or `/index.php` comes back unchanged.\n * `/ocs/`, `/remote.php` and `/public.php` get the webroot only, as they are\n * never served behind `/index.php`.\n *\n * @param {string} path URL path (e.g. '/apps/openregister/api/objects')\n * @return {string} The path as the instance routes it\n */\nexport function prefixUrl(path) {\n\tif (typeof path !== 'string' || path === '') {\n\t\treturn path\n\t}\n\t// Absolute URL, protocol-relative URL, or any scheme (data:, blob:, mailto:).\n\tif (/^[a-z][a-z0-9+.-]*:/i.test(path) || path.startsWith('//')) {\n\t\treturn path\n\t}\n\t// Only app-absolute paths are ours to prefix.\n\tif (!path.startsWith('/')) {\n\t\treturn path\n\t}\n\t// `generateUrl('/')` is `<webroot>[/index.php]/`; the webroot is that minus `/index.php`.\n\tconst prefix = generateUrl('/', {}).replace(/\\/$/, '')\n\tconst root = prefix.replace(/\\/index\\.php$/, '')\n\tif (path.startsWith('/index.php') || (root && (path === root || path.startsWith(root + '/')))) {\n\t\treturn path\n\t}\n\tif (/^\\/(ocs|remote\\.php|public\\.php)(\\/|$)/.test(path)) {\n\t\treturn root + path\n\t}\n\treturn prefix + path\n}\n\n/**\n * Build standard Nextcloud request headers for API calls.\n *\n * Includes the CSRF request token and OCS API request header\n * required by Nextcloud's API layer.\n *\n * Two call shapes are supported:\n *\n *   1. **Positional (back-compat)** — `buildHeaders(contentType)`.\n *      Returns the same object the v1 signature did.\n *\n *   2. **Options object** — `buildHeaders({ contentType?, organisationUuid?, targetLanguage? })`.\n *      When `organisationUuid` is a non-empty string the returned object\n *      includes `X-OpenRegister-Organisation: <uuid>`. The header is the\n *      FE side of the `multi-tenancy-context` capability and is consumed\n *      by OR's MultiTenancyTrait.\n *      When `targetLanguage` is a non-empty BCP-47 string the returned\n *      object includes `X-Translation-Target-Language: <bcp47>`. The\n *      header is the FE side of the `i18n-source-of-truth` write\n *      contract — OR stamps the value into `_translations[<bcp47>]`\n *      instead of overwriting the source row. See the\n *      `i18n-language-negotiation-getters` change.\n *\n * @param {string|object} [opts] Content-Type string (back-compat) or options object.\n * @param {string} [opts.contentType] Content-Type header value\n * @param {string} [opts.organisationUuid] Active organisation UUID for the request\n * @param {string} [opts.targetLanguage] BCP-47 target language for translation writes\n * @return {object} Headers object for use with fetch()\n */\nexport function buildHeaders(opts = 'application/json') {\n\tlet contentType = 'application/json'\n\tlet organisationUuid = null\n\tlet targetLanguage = null\n\n\tif (typeof opts === 'string') {\n\t\t// v1 positional signature: buildHeaders(contentType)\n\t\tcontentType = opts\n\t} else if (opts === null) {\n\t\t// v1 positional signature: buildHeaders(null) — explicit \"no Content-Type\"\n\t\tcontentType = null\n\t} else if (opts && typeof opts === 'object') {\n\t\t// Options-object signature\n\t\tif (Object.hasOwn(opts, 'contentType')) {\n\t\t\tcontentType = opts.contentType\n\t\t}\n\t\tif (typeof opts.organisationUuid === 'string' && opts.organisationUuid.length > 0) {\n\t\t\torganisationUuid = opts.organisationUuid\n\t\t}\n\t\tif (typeof opts.targetLanguage === 'string' && opts.targetLanguage.length > 0) {\n\t\t\ttargetLanguage = opts.targetLanguage\n\t\t}\n\t}\n\n\tconst headers = {\n\t\trequesttoken: typeof OC !== 'undefined' ? OC.requestToken : '',\n\t\t'OCS-APIREQUEST': 'true',\n\t}\n\tif (contentType) {\n\t\theaders['Content-Type'] = contentType\n\t}\n\tif (organisationUuid) {\n\t\theaders['X-OpenRegister-Organisation'] = organisationUuid\n\t}\n\tif (targetLanguage) {\n\t\theaders['X-Translation-Target-Language'] = targetLanguage\n\t}\n\treturn headers\n}\n\n/**\n * Capitalize the first letter of a string.\n *\n * @param {string} str Input string\n * @return {string} Capitalized string\n */\nexport function capitalize(str) {\n\treturn str.charAt(0).toUpperCase() + str.slice(1)\n}\n\n/**\n * Build a query string from a params object.\n *\n * Array values are serialized with PHP bracket notation (`key[]=a&key[]=b`)\n * so the Nextcloud/OpenRegister backend parses them as an array — a plain\n * repeated `key=a&key=b` collapses to the last value in PHP. A plain object\n * under a filter key is a set of operators and goes out in bracket form\n * (`{ deadline: { lt: 'x' } }` becomes `deadline[lt]=x`); a key already\n * written that way (`'deadline[lt]'`) passes through unchanged. Reserved keys\n * that start with `_` keep their JSON form (`_order`). Skips\n * null/undefined/empty values.\n *\n * @spec openspec/changes/link-cards-page/specs/link-cards-page/spec.md#requirement-a-filter-operator-is-serialised-in-bracket-form\n *\n * @param {object} params Key-value pairs for query parameters\n * @return {string} Query string including leading '?' or empty string\n */\nexport function buildQueryString(params = {}) {\n\tconst queryParams = new URLSearchParams()\n\n\tfor (const [key, value] of Object.entries(params)) {\n\t\tif (value === undefined || value === null || value === '') {\n\t\t\tcontinue\n\t\t}\n\t\tif (Array.isArray(value) && value.length === 0) {\n\t\t\tcontinue\n\t\t}\n\t\tif (typeof value === 'object' && !Array.isArray(value) && Object.keys(value).length === 0) {\n\t\t\tcontinue\n\t\t}\n\t\tif (Array.isArray(value)) {\n\t\t\t// PHP needs `key[]` to receive repeated params as an array;\n\t\t\t// without the brackets only the last value survives server-side.\n\t\t\tconst arrayKey = key.endsWith('[]') ? key : `${key}[]`\n\t\t\tfor (const item of value) {\n\t\t\t\tif (item !== undefined && item !== null && item !== '') {\n\t\t\t\t\tqueryParams.append(arrayKey, String(item))\n\t\t\t\t}\n\t\t\t}\n\t\t} else if (typeof value === 'object' && !key.startsWith('_')) {\n\t\t\t// A filter operator: `{ deadline: { lt: '2026-10-06' } }` goes out\n\t\t\t// as `deadline[lt]=2026-10-06`, the form OpenRegister reads. As\n\t\t\t// JSON it reached the database as the literal value and a date\n\t\t\t// column answered 500. Reserved `_` keys (`_order`) keep JSON.\n\t\t\tfor (const [op, operand] of Object.entries(value)) {\n\t\t\t\tif (operand === undefined || operand === null || operand === '') {\n\t\t\t\t\tcontinue\n\t\t\t\t}\n\t\t\t\tif (Array.isArray(operand)) {\n\t\t\t\t\tfor (const item of operand) {\n\t\t\t\t\t\tif (item !== undefined && item !== null && item !== '') {\n\t\t\t\t\t\t\tqueryParams.append(`${key}[${op}][]`, String(item))\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t} else if (typeof operand === 'object') {\n\t\t\t\t\tqueryParams.set(`${key}[${op}]`, JSON.stringify(operand))\n\t\t\t\t} else {\n\t\t\t\t\tqueryParams.set(`${key}[${op}]`, String(operand))\n\t\t\t\t}\n\t\t\t}\n\t\t} else if (typeof value === 'object') {\n\t\t\tqueryParams.set(key, JSON.stringify(value))\n\t\t} else {\n\t\t\tqueryParams.set(key, String(value))\n\t\t}\n\t}\n\n\tconst str = queryParams.toString()\n\treturn str ? '?' + str : ''\n}\n"],"names":[],"mappings":";;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS,SAAS,CAAC,IAAI,EAAE;AAChC,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,EAAE;AAC9C,EAAE,OAAO,IAAI;AACb,EAAE;AACF;AACA,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;AACjE,EAAE,OAAO,IAAI;AACb,EAAE;AACF;AACA,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;AAC5B,EAAE,OAAO,IAAI;AACb,EAAE;AACF;AACA,CAAC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAC;AACvD,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,EAAC;AACjD,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,KAAK,IAAI,KAAK,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE;AAChG,EAAE,OAAO,IAAI;AACb,EAAE;AACF,CAAC,IAAI,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;AAC1D,EAAE,OAAO,IAAI,GAAG,IAAI;AACpB,EAAE;AACF,CAAC,OAAO,MAAM,GAAG,IAAI;AACrB,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS,YAAY,CAAC,IAAI,GAAG,kBAAkB,EAAE;AACxD,CAAC,IAAI,WAAW,GAAG,mBAAkB;AACrC,CAAC,IAAI,gBAAgB,GAAG,KAAI;AAC5B,CAAC,IAAI,cAAc,GAAG,KAAI;AAC1B;AACA,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;AAC/B;AACA,EAAE,WAAW,GAAG,KAAI;AACpB,EAAE,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE;AAC3B;AACA,EAAE,WAAW,GAAG,KAAI;AACpB,EAAE,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;AAC9C;AACA,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE;AAC1C,GAAG,WAAW,GAAG,IAAI,CAAC,YAAW;AACjC,GAAG;AACH,EAAE,IAAI,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE;AACrF,GAAG,gBAAgB,GAAG,IAAI,CAAC,iBAAgB;AAC3C,GAAG;AACH,EAAE,IAAI,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE;AACjF,GAAG,cAAc,GAAG,IAAI,CAAC,eAAc;AACvC,GAAG;AACH,EAAE;AACF;AACA,CAAC,MAAM,OAAO,GAAG;AACjB,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,WAAW,GAAG,EAAE,CAAC,YAAY,GAAG,EAAE;AAChE,EAAE,gBAAgB,EAAE,MAAM;AAC1B,GAAE;AACF,CAAC,IAAI,WAAW,EAAE;AAClB,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,YAAW;AACvC,EAAE;AACF,CAAC,IAAI,gBAAgB,EAAE;AACvB,EAAE,OAAO,CAAC,6BAA6B,CAAC,GAAG,iBAAgB;AAC3D,EAAE;AACF,CAAC,IAAI,cAAc,EAAE;AACrB,EAAE,OAAO,CAAC,+BAA+B,CAAC,GAAG,eAAc;AAC3D,EAAE;AACF,CAAC,OAAO,OAAO;AACf,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS,UAAU,CAAC,GAAG,EAAE;AAChC,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAClD,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS,gBAAgB,CAAC,MAAM,GAAG,EAAE,EAAE;AAC9C,CAAC,MAAM,WAAW,GAAG,IAAI,eAAe,GAAE;AAC1C;AACA,CAAC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;AACpD,EAAE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE;AAC7D,GAAG,QAAQ;AACX,GAAG;AACH,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE;AAClD,GAAG,QAAQ;AACX,GAAG;AACH,EAAE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE;AAC7F,GAAG,QAAQ;AACX,GAAG;AACH,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;AAC5B;AACA;AACA,GAAG,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,EAAC;AACzD,GAAG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;AAC7B,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,EAAE,EAAE;AAC5D,KAAK,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,EAAC;AAC/C,KAAK;AACL,IAAI;AACJ,GAAG,MAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;AAChE;AACA;AACA;AACA;AACA,GAAG,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;AACtD,IAAI,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,EAAE,EAAE;AACrE,KAAK,QAAQ;AACb,KAAK;AACL,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;AAChC,KAAK,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE;AACjC,MAAM,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,EAAE,EAAE;AAC9D,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,EAAC;AAC1D,OAAO;AACP,MAAM;AACN,KAAK,MAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE;AAC5C,KAAK,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAC;AAC9D,KAAK,MAAM;AACX,KAAK,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,EAAC;AACtD,KAAK;AACL,IAAI;AACJ,GAAG,MAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;AACxC,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAC;AAC9C,GAAG,MAAM;AACT,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,EAAC;AACtC,GAAG;AACH,EAAE;AACF;AACA,CAAC,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,GAAE;AACnC,CAAC,OAAO,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,EAAE;AAC5B;;;;"}

package/dist/esm/utils/libraryWidgetKeys.js

@@ -94,10 +94,12 @@ const DASHBOARD_CATALOG_WIDGET_KEYS = Object.freeze([
 	'calendar',
 	'chart',
 	'container',
+	'conversation',
 	'countdown',
 	'data',
 	'delta',
 	'divider',
+	'document-review',
 	'files',
 	'flow-runs',
 	'gauge',
@@ -111,6 +113,7 @@ const DASHBOARD_CATALOG_WIDGET_KEYS = Object.freeze([
 	'map',
 	'menu',
 	'nc-widget',
+	'next-step',
 	// `news` was here until the widget moved to LaunchPad, which owns the feed
 	// fetching. An app that renders one now gets it from LaunchPad's registry.
 	'object-geo',
@@ -120,6 +123,7 @@ const DASHBOARD_CATALOG_WIDGET_KEYS = Object.freeze([
 	'quicklinks',
 	'related',
 	'spend-analytics',
+	'stacked-bar',
 	'stages',
 	'stat',
 	'stats-block',
@@ -129,6 +133,7 @@ const DASHBOARD_CATALOG_WIDGET_KEYS = Object.freeze([
 	'text',
 	'tile',
 	'video',
+	'week-strip',
 	'workspace-filter',
 ]);
 

package/dist/esm/utils/libraryWidgetKeys.js.map

@@ -1 +1 @@
-{"version":3,"file":"libraryWidgetKeys.js","sources":["../../../src/utils/libraryWidgetKeys.js"],"sourcesContent":["/**\n * SPDX-FileCopyrightText: 2026 Conduction B.V.\n * SPDX-License-Identifier: EUPL-1.2\n *\n * libraryWidgetKeys — the one vocabulary of widget keys the LIBRARY itself\n * renders, and the only list `validateManifestV2` is allowed to consult.\n *\n * WHY THIS MODULE EXISTS\n * ----------------------\n * The validator used to carry its own hand-written array of \"library built-in\n * widget keys\", with a comment instructing whoever added a built-in to append\n * it \"in the same PR\". That instruction was followed for five keys and missed\n * for six, so the validator knew 11 keys while the library actually rendered\n * 45. Nothing failed when the two disagreed, because the only consumer is an\n * exemption: a key the validator does not recognise is treated as a CUSTOM\n * registry component, which makes a legitimate single-widget library dashboard\n * fail the ADR-036 Decision 1 anti-pattern rule with advice (\"declare it as\n * type:'custom'\") that is wrong for a library widget.\n *\n * A comment cannot enforce anything, so the array moved here and\n * `tests/utils/libraryWidgetKeys.spec.js` now binds it to the two registries\n * that actually resolve a key at runtime:\n *\n *   1. `BUILT_IN_WIDGETS` (components/CnWidgetGrid/builtInWidgets.js) — the v2\n *      manifest widget set `CnWidgetGrid` resolves a `widgetKey` against.\n *   2. The dashboard widget catalog (`dashboardWidgetRegistry`), populated by\n *      `registerDashboardWidgets.js`. `CnWidgetGrid` falls back to it (third in\n *      the chain, after the consumer registry and `BUILT_IN_WIDGETS`), so a\n *      catalog key renders on a v2 page exactly like a `BUILT_IN_WIDGETS` one.\n *\n * The test asserts SET EQUALITY in both directions against the live registries,\n * so adding a widget to either registry without touching this file fails CI,\n * and deleting one without removing it here fails too. The lists below are the\n * validator's view; the registries are the truth the test holds them to.\n *\n * THE CATALOG IS NOT LEGACY. It is a live half of the same vocabulary, and the\n * old array already conceded the point by exempting `chart` and `stats-block`,\n * which are catalog-only keys that `BUILT_IN_WIDGETS` has never held. What it\n * got wrong was doing that for two keys and not the other thirty-seven.\n * `widgetDispatch.js` unified the two resolution paths for the same reason: a\n * widget authored against one vocabulary was invisible to the other and said\n * nothing about why (101 of 236 detail widgets on hrmq).\n *\n * @module utils/libraryWidgetKeys\n */\n\nimport { WIDGET_TYPE_ALIASES } from './widgetTypeAliases.js'\n\n/**\n * Keys of `BUILT_IN_WIDGETS` — the v2 manifest widget set.\n *\n * Kept in the registry's own declaration order so a diff against\n * `builtInWidgets.js` reads straight down.\n *\n * @type {string[]} Frozen.\n */\nexport const BUILT_IN_WIDGET_KEYS = Object.freeze([\n\t'object-table',\n\t'form-renderer',\n\t'map-viewer',\n\t'object-geo',\n\t'card-grid',\n\t'nav-card-grid',\n\t'data',\n\t'metadata',\n\t'related',\n\t'integration',\n\t'banner',\n\t'audit-trail',\n\t'header',\n\t'text',\n\t'divider',\n])\n\n/**\n * Widget types the LIBRARY registers into the dashboard catalog at import time\n * (`registerDashboardWidgets.js` and the widget `index.js` modules it pulls in).\n *\n * Deliberately a static list rather than a read of `dashboardWidgetRegistry`:\n * that object is mutable and consumer-extensible, so deriving the exemption\n * from it at call time would let an app register its own full-page component in\n * the catalog and walk straight through the ADR-036 Decision 1 rule the\n * exemption exists to enforce. Only keys the library itself ships are exempt.\n *\n * Sorted, because unlike `BUILT_IN_WIDGETS` these registrations are spread over\n * ~30 files and have no meaningful declaration order.\n *\n * @type {string[]} Frozen.\n */\nexport const DASHBOARD_CATALOG_WIDGET_KEYS = Object.freeze([\n\t'audit-trail',\n\t'banner',\n\t'calendar',\n\t'chart',\n\t'container',\n\t'countdown',\n\t'data',\n\t'delta',\n\t'divider',\n\t'files',\n\t'flow-runs',\n\t'gauge',\n\t'header',\n\t'image',\n\t'interaction-form',\n\t'kb-search',\n\t'label',\n\t'link',\n\t'links',\n\t'map',\n\t'menu',\n\t'nc-widget',\n\t// `news` was here until the widget moved to LaunchPad, which owns the feed\n\t// fetching. An app that renders one now gets it from LaunchPad's registry.\n\t'object-geo',\n\t'object-list',\n\t'object-table',\n\t'people',\n\t'quicklinks',\n\t'related',\n\t'spend-analytics',\n\t'stages',\n\t'stat',\n\t'stats-block',\n\t'table',\n\t'tabs',\n\t'tasks',\n\t'text',\n\t'tile',\n\t'video',\n\t'workspace-filter',\n])\n\n/**\n * Expand a key set over `WIDGET_TYPE_ALIASES` so both spellings of an aliased\n * widget are present whenever either one is.\n *\n * `CnWidgetGrid` resolves a key and its canonical form (`object-table` ⇄\n * `table`, `map-viewer` ⇄ `map`), so both spellings render and both must be\n * exempt. Today each registry happens to hold one side of each pair, which is\n * exactly the accident that would silently stop being true when the next alias\n * lands.\n *\n * @param {Set<string>} keys The key set to expand, mutated in place.\n * @return {Set<string>} The same set.\n */\nfunction expandAliases(keys) {\n\tfor (const [alias, canonical] of Object.entries(WIDGET_TYPE_ALIASES)) {\n\t\tif (keys.has(alias) || keys.has(canonical)) {\n\t\t\tkeys.add(alias)\n\t\t\tkeys.add(canonical)\n\t\t}\n\t}\n\treturn keys\n}\n\n/**\n * Every widget key the library renders itself: both registries, plus both\n * spellings of every alias.\n *\n * A `widgetKey` in this list is served by a library `Cn*` SFC and does NOT\n * count as a custom registry component for the single-12×12-widget dashboard\n * rule (ADR-036 Decision 1).\n *\n * @type {string[]} Frozen.\n */\nexport const LIBRARY_WIDGET_KEYS = Object.freeze([\n\t...expandAliases(new Set([\n\t\t...BUILT_IN_WIDGET_KEYS,\n\t\t...DASHBOARD_CATALOG_WIDGET_KEYS,\n\t])),\n])\n"],"names":[],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;AAClD,CAAC,cAAc;AACf,CAAC,eAAe;AAChB,CAAC,YAAY;AACb,CAAC,YAAY;AACb,CAAC,WAAW;AACZ,CAAC,eAAe;AAChB,CAAC,MAAM;AACP,CAAC,UAAU;AACX,CAAC,SAAS;AACV,CAAC,aAAa;AACd,CAAC,QAAQ;AACT,CAAC,aAAa;AACd,CAAC,QAAQ;AACT,CAAC,MAAM;AACP,CAAC,SAAS;AACV,CAAC,EAAC;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,6BAA6B,GAAG,MAAM,CAAC,MAAM,CAAC;AAC3D,CAAC,aAAa;AACd,CAAC,QAAQ;AACT,CAAC,UAAU;AACX,CAAC,OAAO;AACR,CAAC,WAAW;AACZ,CAAC,WAAW;AACZ,CAAC,MAAM;AACP,CAAC,OAAO;AACR,CAAC,SAAS;AACV,CAAC,OAAO;AACR,CAAC,WAAW;AACZ,CAAC,OAAO;AACR,CAAC,QAAQ;AACT,CAAC,OAAO;AACR,CAAC,kBAAkB;AACnB,CAAC,WAAW;AACZ,CAAC,OAAO;AACR,CAAC,MAAM;AACP,CAAC,OAAO;AACR,CAAC,KAAK;AACN,CAAC,MAAM;AACP,CAAC,WAAW;AACZ;AACA;AACA,CAAC,YAAY;AACb,CAAC,aAAa;AACd,CAAC,cAAc;AACf,CAAC,QAAQ;AACT,CAAC,YAAY;AACb,CAAC,SAAS;AACV,CAAC,iBAAiB;AAClB,CAAC,QAAQ;AACT,CAAC,MAAM;AACP,CAAC,aAAa;AACd,CAAC,OAAO;AACR,CAAC,MAAM;AACP,CAAC,OAAO;AACR,CAAC,MAAM;AACP,CAAC,MAAM;AACP,CAAC,OAAO;AACR,CAAC,kBAAkB;AACnB,CAAC,EAAC;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,aAAa,CAAC,IAAI,EAAE;AAC7B,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE;AACvE,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE;AAC9C,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAC;AAClB,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAC;AACtB,GAAG;AACH,EAAE;AACF,CAAC,OAAO,IAAI;AACZ,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;AACjD,CAAC,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC;AAC1B,EAAE,GAAG,oBAAoB;AACzB,EAAE,GAAG,6BAA6B;AAClC,EAAE,CAAC,CAAC;AACJ,CAAC;;;;"}
+{"version":3,"file":"libraryWidgetKeys.js","sources":["../../../src/utils/libraryWidgetKeys.js"],"sourcesContent":["/**\n * SPDX-FileCopyrightText: 2026 Conduction B.V.\n * SPDX-License-Identifier: EUPL-1.2\n *\n * libraryWidgetKeys — the one vocabulary of widget keys the LIBRARY itself\n * renders, and the only list `validateManifestV2` is allowed to consult.\n *\n * WHY THIS MODULE EXISTS\n * ----------------------\n * The validator used to carry its own hand-written array of \"library built-in\n * widget keys\", with a comment instructing whoever added a built-in to append\n * it \"in the same PR\". That instruction was followed for five keys and missed\n * for six, so the validator knew 11 keys while the library actually rendered\n * 45. Nothing failed when the two disagreed, because the only consumer is an\n * exemption: a key the validator does not recognise is treated as a CUSTOM\n * registry component, which makes a legitimate single-widget library dashboard\n * fail the ADR-036 Decision 1 anti-pattern rule with advice (\"declare it as\n * type:'custom'\") that is wrong for a library widget.\n *\n * A comment cannot enforce anything, so the array moved here and\n * `tests/utils/libraryWidgetKeys.spec.js` now binds it to the two registries\n * that actually resolve a key at runtime:\n *\n *   1. `BUILT_IN_WIDGETS` (components/CnWidgetGrid/builtInWidgets.js) — the v2\n *      manifest widget set `CnWidgetGrid` resolves a `widgetKey` against.\n *   2. The dashboard widget catalog (`dashboardWidgetRegistry`), populated by\n *      `registerDashboardWidgets.js`. `CnWidgetGrid` falls back to it (third in\n *      the chain, after the consumer registry and `BUILT_IN_WIDGETS`), so a\n *      catalog key renders on a v2 page exactly like a `BUILT_IN_WIDGETS` one.\n *\n * The test asserts SET EQUALITY in both directions against the live registries,\n * so adding a widget to either registry without touching this file fails CI,\n * and deleting one without removing it here fails too. The lists below are the\n * validator's view; the registries are the truth the test holds them to.\n *\n * THE CATALOG IS NOT LEGACY. It is a live half of the same vocabulary, and the\n * old array already conceded the point by exempting `chart` and `stats-block`,\n * which are catalog-only keys that `BUILT_IN_WIDGETS` has never held. What it\n * got wrong was doing that for two keys and not the other thirty-seven.\n * `widgetDispatch.js` unified the two resolution paths for the same reason: a\n * widget authored against one vocabulary was invisible to the other and said\n * nothing about why (101 of 236 detail widgets on hrmq).\n *\n * @module utils/libraryWidgetKeys\n */\n\nimport { WIDGET_TYPE_ALIASES } from './widgetTypeAliases.js'\n\n/**\n * Keys of `BUILT_IN_WIDGETS` — the v2 manifest widget set.\n *\n * Kept in the registry's own declaration order so a diff against\n * `builtInWidgets.js` reads straight down.\n *\n * @type {string[]} Frozen.\n */\nexport const BUILT_IN_WIDGET_KEYS = Object.freeze([\n\t'object-table',\n\t'form-renderer',\n\t'map-viewer',\n\t'object-geo',\n\t'card-grid',\n\t'nav-card-grid',\n\t'data',\n\t'metadata',\n\t'related',\n\t'integration',\n\t'banner',\n\t'audit-trail',\n\t'header',\n\t'text',\n\t'divider',\n])\n\n/**\n * Widget types the LIBRARY registers into the dashboard catalog at import time\n * (`registerDashboardWidgets.js` and the widget `index.js` modules it pulls in).\n *\n * Deliberately a static list rather than a read of `dashboardWidgetRegistry`:\n * that object is mutable and consumer-extensible, so deriving the exemption\n * from it at call time would let an app register its own full-page component in\n * the catalog and walk straight through the ADR-036 Decision 1 rule the\n * exemption exists to enforce. Only keys the library itself ships are exempt.\n *\n * Sorted, because unlike `BUILT_IN_WIDGETS` these registrations are spread over\n * ~30 files and have no meaningful declaration order.\n *\n * @type {string[]} Frozen.\n */\nexport const DASHBOARD_CATALOG_WIDGET_KEYS = Object.freeze([\n\t'audit-trail',\n\t'banner',\n\t'calendar',\n\t'chart',\n\t'container',\n\t'conversation',\n\t'countdown',\n\t'data',\n\t'delta',\n\t'divider',\n\t'document-review',\n\t'files',\n\t'flow-runs',\n\t'gauge',\n\t'header',\n\t'image',\n\t'interaction-form',\n\t'kb-search',\n\t'label',\n\t'link',\n\t'links',\n\t'map',\n\t'menu',\n\t'nc-widget',\n\t'next-step',\n\t// `news` was here until the widget moved to LaunchPad, which owns the feed\n\t// fetching. An app that renders one now gets it from LaunchPad's registry.\n\t'object-geo',\n\t'object-list',\n\t'object-table',\n\t'people',\n\t'quicklinks',\n\t'related',\n\t'spend-analytics',\n\t'stacked-bar',\n\t'stages',\n\t'stat',\n\t'stats-block',\n\t'table',\n\t'tabs',\n\t'tasks',\n\t'text',\n\t'tile',\n\t'video',\n\t'week-strip',\n\t'workspace-filter',\n])\n\n/**\n * Expand a key set over `WIDGET_TYPE_ALIASES` so both spellings of an aliased\n * widget are present whenever either one is.\n *\n * `CnWidgetGrid` resolves a key and its canonical form (`object-table` ⇄\n * `table`, `map-viewer` ⇄ `map`), so both spellings render and both must be\n * exempt. Today each registry happens to hold one side of each pair, which is\n * exactly the accident that would silently stop being true when the next alias\n * lands.\n *\n * @param {Set<string>} keys The key set to expand, mutated in place.\n * @return {Set<string>} The same set.\n */\nfunction expandAliases(keys) {\n\tfor (const [alias, canonical] of Object.entries(WIDGET_TYPE_ALIASES)) {\n\t\tif (keys.has(alias) || keys.has(canonical)) {\n\t\t\tkeys.add(alias)\n\t\t\tkeys.add(canonical)\n\t\t}\n\t}\n\treturn keys\n}\n\n/**\n * Every widget key the library renders itself: both registries, plus both\n * spellings of every alias.\n *\n * A `widgetKey` in this list is served by a library `Cn*` SFC and does NOT\n * count as a custom registry component for the single-12×12-widget dashboard\n * rule (ADR-036 Decision 1).\n *\n * @type {string[]} Frozen.\n */\nexport const LIBRARY_WIDGET_KEYS = Object.freeze([\n\t...expandAliases(new Set([\n\t\t...BUILT_IN_WIDGET_KEYS,\n\t\t...DASHBOARD_CATALOG_WIDGET_KEYS,\n\t])),\n])\n"],"names":[],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;AAClD,CAAC,cAAc;AACf,CAAC,eAAe;AAChB,CAAC,YAAY;AACb,CAAC,YAAY;AACb,CAAC,WAAW;AACZ,CAAC,eAAe;AAChB,CAAC,MAAM;AACP,CAAC,UAAU;AACX,CAAC,SAAS;AACV,CAAC,aAAa;AACd,CAAC,QAAQ;AACT,CAAC,aAAa;AACd,CAAC,QAAQ;AACT,CAAC,MAAM;AACP,CAAC,SAAS;AACV,CAAC,EAAC;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,6BAA6B,GAAG,MAAM,CAAC,MAAM,CAAC;AAC3D,CAAC,aAAa;AACd,CAAC,QAAQ;AACT,CAAC,UAAU;AACX,CAAC,OAAO;AACR,CAAC,WAAW;AACZ,CAAC,cAAc;AACf,CAAC,WAAW;AACZ,CAAC,MAAM;AACP,CAAC,OAAO;AACR,CAAC,SAAS;AACV,CAAC,iBAAiB;AAClB,CAAC,OAAO;AACR,CAAC,WAAW;AACZ,CAAC,OAAO;AACR,CAAC,QAAQ;AACT,CAAC,OAAO;AACR,CAAC,kBAAkB;AACnB,CAAC,WAAW;AACZ,CAAC,OAAO;AACR,CAAC,MAAM;AACP,CAAC,OAAO;AACR,CAAC,KAAK;AACN,CAAC,MAAM;AACP,CAAC,WAAW;AACZ,CAAC,WAAW;AACZ;AACA;AACA,CAAC,YAAY;AACb,CAAC,aAAa;AACd,CAAC,cAAc;AACf,CAAC,QAAQ;AACT,CAAC,YAAY;AACb,CAAC,SAAS;AACV,CAAC,iBAAiB;AAClB,CAAC,aAAa;AACd,CAAC,QAAQ;AACT,CAAC,MAAM;AACP,CAAC,aAAa;AACd,CAAC,OAAO;AACR,CAAC,MAAM;AACP,CAAC,OAAO;AACR,CAAC,MAAM;AACP,CAAC,MAAM;AACP,CAAC,OAAO;AACR,CAAC,YAAY;AACb,CAAC,kBAAkB;AACnB,CAAC,EAAC;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,aAAa,CAAC,IAAI,EAAE;AAC7B,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE;AACvE,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE;AAC9C,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAC;AAClB,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAC;AACtB,GAAG;AACH,EAAE;AACF,CAAC,OAAO,IAAI;AACZ,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACY,MAAC,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;AACjD,CAAC,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC;AAC1B,EAAE,GAAG,oBAAoB;AACzB,EAAE,GAAG,6BAA6B;AAClC,EAAE,CAAC,CAAC;AACJ,CAAC;;;;"}

package/dist/esm/utils/readPath.js

@@ -0,0 +1,30 @@
+/**
+ * SPDX-FileCopyrightText: 2026 Conduction B.V.
+ * SPDX-License-Identifier: EUPL-1.2
+ *
+ * readPath: read a dot-path off an object.
+ *
+ * Its own module, with no imports, so the rules that read a record's fields
+ * (stage, checklist, due date) do not hang on a module a host or a test may
+ * replace.
+ *
+ * @module utils/readPath
+ */
+
+/**
+ * Read a dot-path (`'a.b.c'`) off an object.
+ *
+ * @param {object|null} data The source object.
+ * @param {string} [path] Dot-path into the object. Empty returns the object itself.
+ * @return {unknown} The value at the path, or undefined when a segment is missing.
+ * @spec openspec/changes/detail-action-model-and-case-surfaces/specs/detail-action-model/spec.md#requirement-primary-action-follows-the-stage
+ */
+function readPath(data, path) {
+	if (!path) {
+		return data
+	}
+	return String(path).split('.').reduce((value, key) => (value === null || value === undefined ? value : value[key]), data)
+}
+
+export { readPath };
+//# sourceMappingURL=readPath.js.map

package/dist/esm/utils/readPath.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readPath.js","sources":["../../../src/utils/readPath.js"],"sourcesContent":["/**\n * SPDX-FileCopyrightText: 2026 Conduction B.V.\n * SPDX-License-Identifier: EUPL-1.2\n *\n * readPath: read a dot-path off an object.\n *\n * Its own module, with no imports, so the rules that read a record's fields\n * (stage, checklist, due date) do not hang on a module a host or a test may\n * replace.\n *\n * @module utils/readPath\n */\n\n/**\n * Read a dot-path (`'a.b.c'`) off an object.\n *\n * @param {object|null} data The source object.\n * @param {string} [path] Dot-path into the object. Empty returns the object itself.\n * @return {unknown} The value at the path, or undefined when a segment is missing.\n * @spec openspec/changes/detail-action-model-and-case-surfaces/specs/detail-action-model/spec.md#requirement-primary-action-follows-the-stage\n */\nexport function readPath(data, path) {\n\tif (!path) {\n\t\treturn data\n\t}\n\treturn String(path).split('.').reduce((value, key) => (value === null || value === undefined ? value : value[key]), data)\n}\n"],"names":[],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE;AACrC,CAAC,IAAI,CAAC,IAAI,EAAE;AACZ,EAAE,OAAO,IAAI;AACb,EAAE;AACF,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,GAAG,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,GAAG,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC;AAC1H;;;;"}