@cosmicdrift/kumiko-renderer 0.387.0 → 0.389.0

package/dist/web/app/history-leave-guard.js

@@ -0,0 +1,115 @@
+import { propertyOf } from "@cosmicdrift/kumiko-types/type-guards";
+import { hasUnsavedInput, requestLeave } from "../../index.js";
+// Back/Forward cannot be vetoed, so the browser has already moved by the time the guard asks.
+// Each entry we create carries its position in history.state; with it a declined move is
+// undone with history.go(-delta) and a confirmed one replayed with history.go(delta), so the
+// stack keeps its shape (no duplicated or truncated entries).
+const INDEX_KEY = "kumikoNavIndex";
+const committed = { url: "", index: 0 };
+let leaveRequestOpen = false;
+// Each history.go() we issue produces one popstate that must not be treated as user navigation.
+const pendingMoves = [];
+// Entries without a position (written by other code) cannot be undone relatively.
+let fallbackTargetUrl;
+function readUrl() {
+    return `${window.location.pathname}${window.location.search}${window.location.hash}`;
+}
+function stateAt(index) {
+    return { [INDEX_KEY]: index };
+}
+function readIndex() {
+    const value = propertyOf(window.history.state, INDEX_KEY);
+    return typeof value === "number" ? value : undefined;
+}
+export function committedUrl() {
+    return committed.url;
+}
+/** Adopts the entry the browser currently shows as the committed one. */
+export function adoptCurrentEntry() {
+    const index = readIndex();
+    committed.url = readUrl();
+    if (index === undefined) {
+        window.history.replaceState(stateAt(committed.index), "", committed.url);
+    }
+    else {
+        committed.index = index;
+    }
+}
+function commitCurrentUrl() {
+    committed.url = readUrl();
+    committed.index = readIndex() ?? committed.index;
+}
+export function pushEntry(url) {
+    window.history.pushState(stateAt(committed.index + 1), "", url);
+    committed.index += 1;
+    committed.url = readUrl();
+}
+export function replaceEntry(url) {
+    window.history.replaceState(stateAt(committed.index), "", url);
+    commitCurrentUrl();
+}
+export function handlePopstate(notify) {
+    const move = pendingMoves.shift();
+    if (move !== undefined) {
+        if (move === "replay") {
+            commitCurrentUrl();
+            notify();
+        }
+        // skip: this popstate is the echo of our own history.go()
+        return;
+    }
+    if (fallbackTargetUrl !== undefined) {
+        const target = fallbackTargetUrl;
+        fallbackTargetUrl = undefined;
+        // After a forward move the entry below our restore-push is not the target.
+        if (readUrl() !== target)
+            window.history.replaceState(stateAt(committed.index), "", target);
+        commitCurrentUrl();
+        notify();
+        // skip: the pending fallback move is settled
+        return;
+    }
+    const newIndex = readIndex();
+    const delta = newIndex === undefined ? 0 : newIndex - committed.index;
+    if (leaveRequestOpen) {
+        // Another Back/Forward while the dialog is open must neither stack an entry nor replace the
+        // open request: step back to the entry the dialog is about.
+        if (delta !== 0) {
+            pendingMoves.push("undo");
+            window.history.go(-delta);
+        }
+        else {
+            window.history.replaceState(stateAt(committed.index), "", committed.url);
+        }
+        // skip: the open leave dialog keeps the decision
+        return;
+    }
+    if (!hasUnsavedInput()) {
+        commitCurrentUrl();
+        notify();
+        // skip: nothing unsaved, the move stands
+        return;
+    }
+    const targetUrl = readUrl();
+    leaveRequestOpen = true;
+    const settle = () => {
+        leaveRequestOpen = false;
+    };
+    if (delta !== 0) {
+        pendingMoves.push("undo");
+        window.history.go(-delta);
+        requestLeave(() => {
+            settle();
+            pendingMoves.push("replay");
+            window.history.go(delta);
+        }, settle);
+        // skip: the leave request owns the rest of the move
+        return;
+    }
+    window.history.pushState(stateAt(committed.index), "", committed.url);
+    requestLeave(() => {
+        settle();
+        fallbackTargetUrl = targetUrl;
+        window.history.back();
+    }, settle);
+}

package/dist/web/app/list-state-store-boot.d.ts

@@ -0,0 +1,6 @@
+import { type ReactNode } from "react";
+/** Provides the tab-scoped list-state store and drops state remembered under
+ *  another user or tenant. Mount below the auth gates so the user is known. */
+export declare function ListStateStoreBoot({ children }: {
+    readonly children: ReactNode;
+}): ReactNode;

package/dist/web/app/list-state-store-boot.js

@@ -0,0 +1,15 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { useMemo } from "react";
+import { ListStateStoreProvider } from "../../components/list-state-store.js";
+import { useOptionalCurrentUser } from "../../current-user.js";
+import { resolveListStateStore } from "./session-list-state-store.js";
+/** Provides the tab-scoped list-state store and drops state remembered under
+ *  another user or tenant. Mount below the auth gates so the user is known. */
+export function ListStateStoreBoot({ children }) {
+    const user = useOptionalCurrentUser();
+    const userId = user?.id;
+    const tenantId = user?.tenantId;
+    // Must run before the first list renders; an effect would let it read the previous identity's state.
+    const store = useMemo(() => resolveListStateStore(userId === undefined ? undefined : { userId, tenantId }), [userId, tenantId]);
+    return _jsx(ListStateStoreProvider, { store: store, children: children });
+}

package/dist/web/app/nav.js

@@ -12,7 +12,9 @@ import { jsx as _jsx } from "react/jsx-runtime";
 // notification triggers (our pushPath and the popstate event), so this is not
 // generalizable.
 import { useCallback, useMemo, useSyncExternalStore, } from "react";
+import { normalizeBasePath, prependBasePath, stripBasePath } from "../../app/base-path.js";
 import { formatPath, hasUnsavedInput, parsePath, requestLeave, resolveTarget, useNav, } from "../../index.js";
+import { adoptCurrentEntry, handlePopstate, pushEntry, replaceEntry, } from "./history-leave-guard.js";
 // basePath allows the app to be mounted under a URL prefix
 // (for example, `/admin`). The read path strips the prefix before parsePath;
 // the write path prepends it before pushState/replaceState/href.
@@ -22,45 +24,11 @@ import { formatPath, hasUnsavedInput, parsePath, requestLeave, resolveTarget, us
 // returns route=undefined, and the app renders its "outside" state
 // (Not-Found, marketing layer, server-routing pickup, …). There is no
 // automatic redirect to the app root—the host app decides.
-function normalizeBasePath(raw) {
-    if (raw === undefined || raw === "" || raw === "/")
-        return "";
-    const withLeading = raw.startsWith("/") ? raw : `/${raw}`;
-    return withLeading.endsWith("/") ? withLeading.slice(0, -1) : withLeading;
-}
-// Returns the in-app (basePath-relative) path when `path` is under basePath;
-// otherwise returns `undefined`. The segment boundary is strict: "/administrator"
-// does not match "/admin"—otherwise a string-level prefix check would produce
-// false matches.
-function stripBasePath(path, basePath) {
-    if (basePath === "")
-        return path;
-    if (path === basePath)
-        return "/";
-    if (path.startsWith(`${basePath}/`))
-        return path.slice(basePath.length);
-    return undefined;
-}
-function prependBasePath(path, basePath) {
-    if (basePath === "")
-        return path;
-    // formatPath always returns an absolute in-app path: "/" or "/screen-id"
-    // or "/screen-id/entity-id". "/" becomes basePath; otherwise, concatenate.
-    if (path === "/" || path === "")
-        return basePath;
-    return `${basePath}${path}`;
-}
 // pushState does not fire popstate, so we maintain a listener set that
 // navigate() notifies. Back/Forward navigation goes through a window listener
 // wired exactly once.
 const listeners = new Set();
 let popstateWired = false;
-// URL the app currently shows; popstate has already moved the browser to the
-// target by the time we can ask, so a declined leave must restore this one.
-let committedUrl = "";
-function readUrl() {
-    return `${window.location.pathname}${window.location.search}${window.location.hash}`;
-}
 // Stable identity for the omitted-features case — `?? []` would create a
 // fresh array every render, busting the useMemo below on every render for
 // every existing useBrowserNavApi() call site (none of which pass features).
@@ -71,19 +39,7 @@ function ensurePopstateWired() {
     if (typeof window === "undefined")
         return;
     window.addEventListener("popstate", () => {
-        if (!hasUnsavedInput()) {
-            committedUrl = readUrl();
-            for (const l of listeners)
-                l();
-            return;
-        }
-        const targetUrl = readUrl();
-        window.history.pushState(null, "", committedUrl);
-        requestLeave(() => {
-            // replaceState, not history.back(): the declined entry is already ours
-            // and a forward navigation would otherwise land on the wrong entry.
-            window.history.replaceState(null, "", targetUrl);
-            committedUrl = targetUrl;
+        handlePopstate(() => {
             for (const l of listeners)
                 l();
         });
@@ -99,7 +55,7 @@ function ensurePopstateWired() {
 function subscribe(listener) {
     ensurePopstateWired();
     if (typeof window !== "undefined" && listeners.size === 0)
-        committedUrl = readUrl();
+        adoptCurrentEntry();
     listeners.add(listener);
     return () => {
         listeners.delete(listener);
@@ -146,8 +102,7 @@ function applySearchParamUpdates(updates) {
     if (nextSearch === window.location.search)
         return;
     const url = `${window.location.pathname}${nextSearch}${window.location.hash}`;
-    window.history.replaceState(null, "", url);
-    committedUrl = readUrl();
+    replaceEntry(url);
     for (const l of listeners)
         l();
 }
@@ -168,8 +123,7 @@ function pushPath(path, search) {
     if (unchanged)
         return;
     requestLeave(() => {
-        window.history.pushState(null, "", `${path}${search ?? ""}`);
-        committedUrl = readUrl();
+        pushEntry(`${path}${search ?? ""}`);
         for (const l of listeners)
             l();
     });
@@ -185,8 +139,7 @@ function replacePath(path, search) {
     const leavesCurrentPage = window.location.pathname !== path ||
         (search !== undefined && window.location.search !== search);
     const apply = () => {
-        window.history.replaceState(null, "", nextUrl);
-        committedUrl = readUrl();
+        replaceEntry(nextUrl);
         for (const l of listeners)
             l();
     };

package/dist/web/app/session-list-state-store.d.ts

@@ -0,0 +1,15 @@
+import type { ListStateStore } from "../../components/list-state-store.tsx";
+export type ListStateIdentity = {
+    readonly userId: string;
+    readonly tenantId?: string | undefined;
+};
+/** Remembered list state for the lifetime of the browser tab, keyed per tenant
+ *  and user. Every storage failure (blocked, full) degrades to "nothing remembered". */
+export declare function createSessionListStateStore(storage: Storage, identity: ListStateIdentity): ListStateStore;
+/** Forgets all remembered list state and the identity marker. Logout calls it
+ *  before a page reload, which would otherwise hide the identity change. */
+export declare function clearRememberedListState(): void;
+/** The store for the current identity. State remembered under another identity,
+ *  or under one that has since gone away, is dropped first. Without an identity
+ *  (app without auth) only the in-memory store is used and nothing is persisted. */
+export declare function resolveListStateStore(identity: ListStateIdentity | undefined): ListStateStore;

package/dist/web/app/session-list-state-store.js

@@ -0,0 +1,117 @@
+import { getDefaultMemoryListStateStore } from "../../components/list-state-store.js";
+import { parseStoredListStateJson } from "../../hooks/list-state-schema.js";
+const KEY_PREFIX = "kumiko.list.";
+const IDENTITY_KEY = `${KEY_PREFIX}identity`;
+const NO_TENANT = "-";
+function identityMarker(identity) {
+    return `${identity.tenantId ?? NO_TENANT}.${identity.userId}`;
+}
+function openSessionStorage() {
+    try {
+        return typeof window === "undefined" ? undefined : window.sessionStorage;
+    }
+    catch {
+        // Access itself throws when storage is blocked (privacy modes, sandboxed frames).
+        return undefined;
+    }
+}
+function prefixedKeys(storage) {
+    return Array.from({ length: storage.length }, (_, index) => storage.key(index)).filter((key) => key !== null && key.startsWith(KEY_PREFIX));
+}
+function removeAllRemembered(storage) {
+    for (const key of prefixedKeys(storage))
+        storage.removeItem(key);
+}
+/** Remembered list state for the lifetime of the browser tab, keyed per tenant
+ *  and user. Every storage failure (blocked, full) degrades to "nothing remembered". */
+export function createSessionListStateStore(storage, identity) {
+    const keyPrefix = `${KEY_PREFIX}${identityMarker(identity)}.`;
+    return {
+        read: (key) => {
+            try {
+                const raw = storage.getItem(`${keyPrefix}${key}`);
+                return raw === null ? undefined : parseStoredListStateJson(raw);
+            }
+            catch {
+                return undefined;
+            }
+        },
+        write: (key, state) => {
+            try {
+                storage.setItem(`${keyPrefix}${key}`, JSON.stringify(state));
+            }
+            catch {
+                // Quota or blocked storage: the list keeps working, it just is not remembered.
+            }
+        },
+        remove: (key) => {
+            try {
+                storage.removeItem(`${keyPrefix}${key}`);
+            }
+            catch {
+                // See write.
+            }
+        },
+        clear: () => {
+            try {
+                for (const key of prefixedKeys(storage).filter((k) => k !== IDENTITY_KEY)) {
+                    storage.removeItem(key);
+                }
+            }
+            catch {
+                // See write.
+            }
+        },
+    };
+}
+/** Forgets all remembered list state and the identity marker. Logout calls it
+ *  before a page reload, which would otherwise hide the identity change. */
+export function clearRememberedListState() {
+    getDefaultMemoryListStateStore().clear();
+    lastMemoryIdentity = undefined;
+    const storage = openSessionStorage();
+    // skip: no sessionStorage available, memory store already cleared
+    if (storage === undefined)
+        return;
+    try {
+        removeAllRemembered(storage);
+    }
+    catch {
+        // See createSessionListStateStore.
+    }
+}
+// The in-memory store survives SPA identity changes, so it needs its own marker.
+let lastMemoryIdentity;
+/** The store for the current identity. State remembered under another identity,
+ *  or under one that has since gone away, is dropped first. Without an identity
+ *  (app without auth) only the in-memory store is used and nothing is persisted. */
+export function resolveListStateStore(identity) {
+    const storage = openSessionStorage();
+    const memory = getDefaultMemoryListStateStore();
+    const marker = identity === undefined ? undefined : identityMarker(identity);
+    if (lastMemoryIdentity !== marker) {
+        if (lastMemoryIdentity !== undefined)
+            memory.clear();
+        lastMemoryIdentity = marker;
+    }
+    if (storage === undefined)
+        return memory;
+    try {
+        const storedMarker = storage.getItem(IDENTITY_KEY);
+        if (marker === undefined) {
+            if (storedMarker !== null) {
+                removeAllRemembered(storage);
+                memory.clear();
+            }
+            return memory;
+        }
+        if (storedMarker !== marker) {
+            removeAllRemembered(storage);
+            storage.setItem(IDENTITY_KEY, marker);
+        }
+    }
+    catch {
+        return memory;
+    }
+    return identity === undefined ? memory : createSessionListStateStore(storage, identity);
+}

package/dist/web/index.d.ts

@@ -13,6 +13,7 @@ export { KumikoLink, useBrowserNavApi } from "./app/nav.tsx";
 export { PlainContentEditor } from "./app/plain-content-editor.tsx";
 export { useResolvers } from "./app/resolvers-context.tsx";
 export { RichContentEditor } from "./app/rich-content-editor.tsx";
+export { clearRememberedListState } from "./app/session-list-state-store.ts";
 export type { NavIconKey } from "./icons.tsx";
 export { Icon } from "./icons.tsx";
 export type { AppLayoutProps } from "./layout/app-layout.tsx";
@@ -75,4 +76,4 @@ export { SidebarMenu, SidebarMenuButton, SidebarMenuItem, SidebarProvider } from
 export type { KumikoBuild } from "./version/update-checker.tsx";
 export { readLoadedBuild } from "./version/update-checker.tsx";
 export type { AiTextAreaProps, AiTextFieldProps, BooleanFieldProps, ComparisonMetric, DateFieldProps, DrawerProps, FeedRow, FileFieldProps, FloatingPanelGeometry, FloatingPanelProps, InfinityListProps, InfinityListSelection, ModeSwitchVariant, NumberFieldProps, PdfPreviewSource, PhotoSlotSpec, PhotoSlotsProps, PlanCardActionSlot, PlanCardLinkSlot, PlanCardPrice, PlanCardProps, PlanGridProps, ProgressListRow, PublicShellProps, PublicShellVariant, QueryTableColumn, QueryTableProps, RangeFieldProps, ResultColumn, SelectFieldProps, SideBySideTableCell, SideBySideTableColumn, SideBySideTableRow, StatDelta, StatTone, StatusBadgeTone, StatusBarEntry, StatusTone, TextareaFieldProps, TextFieldProps, TimeseriesHeight, TimeseriesPoint, TimeseriesReferenceLine, TimeseriesXAxis, TimeseriesYAxis, UploadZoneProps, } from "./widgets/index.ts";
-export { AiTextArea, AiTextField, BooleanField, CollapsibleSection, ComparisonTable, DateField, DetailList, Drawer, EmptyState, ErrorState, FeedList, FileField, FloatingPanel, InfinityList, LoadingState, MiniStat, ModeSwitch, MoneyField, NumberField, PdfPreview, PercentField, PhotoSlots, PlanCard, PlanGrid, ProgressBar, ProgressList, PublicShell, QueryTable, RangeField, ResultPanel, ResultTable, SectionCard, SelectField, SideBySideTable, Sparkline, STATUS_TONE_TEXT, StatCard, StatusBadge, StatusBarChart, StepBar, smoothPath, TextareaField, TextField, TimeseriesChart, UploadZone, useDraft, } from "./widgets/index.ts";
+export { AiTextArea, AiTextField, BooleanField, ChoiceCards, CollapsibleSection, ComparisonTable, DateField, DetailList, Drawer, EmptyState, ErrorState, FeedList, FileField, FloatingPanel, InfinityList, LoadingState, MiniStat, ModeSwitch, MoneyField, NumberField, PdfPreview, PercentField, PhotoSlots, PlanCard, PlanGrid, ProgressBar, ProgressList, PublicShell, QueryTable, RangeField, ResultPanel, ResultTable, SectionCard, SelectField, SideBySideTable, Sparkline, STATUS_TONE_TEXT, StatCard, StatusBadge, StatusBarChart, StepBar, smoothPath, TextareaField, TextField, TimeseriesChart, UploadZone, useDraft, } from "./widgets/index.ts";

package/dist/web/index.js

@@ -12,6 +12,7 @@ export { KumikoLink, useBrowserNavApi } from "./app/nav.js";
 export { PlainContentEditor } from "./app/plain-content-editor.js";
 export { useResolvers } from "./app/resolvers-context.js";
 export { RichContentEditor } from "./app/rich-content-editor.js";
+export { clearRememberedListState } from "./app/session-list-state-store.js";
 export { Icon } from "./icons.js";
 export { AppLayout } from "./layout/app-layout.js";
 export { Avatar } from "./layout/avatar.js";
@@ -50,4 +51,4 @@ export { applyTokensToCssVars, defaultTokens, lightTokens, useBrowserTokensApi,
 export { ResizableHandle, ResizablePanel, ResizablePanelGroup } from "./ui/resizable.js";
 export { SidebarMenu, SidebarMenuButton, SidebarMenuItem, SidebarProvider } from "./ui/sidebar.js";
 export { readLoadedBuild } from "./version/update-checker.js";
-export { AiTextArea, AiTextField, BooleanField, CollapsibleSection, ComparisonTable, DateField, DetailList, Drawer, EmptyState, ErrorState, FeedList, FileField, FloatingPanel, InfinityList, LoadingState, MiniStat, ModeSwitch, MoneyField, NumberField, PdfPreview, PercentField, PhotoSlots, PlanCard, PlanGrid, ProgressBar, ProgressList, PublicShell, QueryTable, RangeField, ResultPanel, ResultTable, SectionCard, SelectField, SideBySideTable, Sparkline, STATUS_TONE_TEXT, StatCard, StatusBadge, StatusBarChart, StepBar, smoothPath, TextareaField, TextField, TimeseriesChart, UploadZone, useDraft, } from "./widgets/index.js";
+export { AiTextArea, AiTextField, BooleanField, ChoiceCards, CollapsibleSection, ComparisonTable, DateField, DetailList, Drawer, EmptyState, ErrorState, FeedList, FileField, FloatingPanel, InfinityList, LoadingState, MiniStat, ModeSwitch, MoneyField, NumberField, PdfPreview, PercentField, PhotoSlots, PlanCard, PlanGrid, ProgressBar, ProgressList, PublicShell, QueryTable, RangeField, ResultPanel, ResultTable, SectionCard, SelectField, SideBySideTable, Sparkline, STATUS_TONE_TEXT, StatCard, StatusBadge, StatusBarChart, StepBar, smoothPath, TextareaField, TextField, TimeseriesChart, UploadZone, useDraft, } from "./widgets/index.js";

package/dist/web/layout/shell-header.js

@@ -19,6 +19,7 @@ import { HeaderOverflowMenuContext, headerOverflowMenuItemClass } from "./header
 import { buildNavRegistrySliceForApp, lastSegment } from "./nav-tree.js";
 import { usePageHeaderSlot } from "./page-header-slot.js";
 import { resolveDetailBreadcrumb, screenTitleKey, } from "./shell-breadcrumb.js";
+import { UNIFORM_BAR_CONTROLS_CLASSES } from "./uniform-bar-controls.js";
 export function ShellHeader({ schema, user, headerActions, }) {
     const nav = useNav();
     const t = useTranslation();
@@ -68,7 +69,7 @@ export function ShellHeader({ schema, user, headerActions, }) {
                                                     e.preventDefault();
                                                     nav.navigate({ screenId });
                                                 }, children: crumb.label })) : isLast ? (_jsx("h1", { "aria-current": "page", title: titleOverride ?? crumb.label, className: "truncate text-lg font-semibold text-foreground", children: titleOverride ?? crumb.label })) : (_jsx(BreadcrumbPage, { className: "whitespace-nowrap text-foreground-secondary", children: crumb.label })) })] }, screenId ?? crumb.label));
-                            }) }) })), _jsx("div", { ref: setStatusElement, "data-kumiko-layout": "page-header-status", className: cn("flex items-center gap-2 empty:hidden", compact ? "min-w-0 overflow-hidden" : "shrink-0") })] }), _jsxs("div", { className: cn("ml-auto flex items-center gap-2", compact ? "min-w-0 max-w-[60%]" : "min-w-0 max-w-[50%] shrink-0 sm:max-w-none"), children: [_jsx("div", { ref: setActionsElement, "data-kumiko-layout": "page-header-actions", className: cn("flex min-w-0 items-center gap-2 empty:hidden [&_*]:min-w-0 [&_*]:max-w-full [&_button]:overflow-hidden [&_button]:whitespace-nowrap", compact && "overflow-hidden") }), !compact && headerActions !== undefined && (_jsx("div", { "data-kumiko-layout": "header-actions", className: "flex items-center gap-2", children: headerActions })), hasOverflow && _jsx(HeaderOverflow, { items: overflowItems, headerActions: headerActions })] })] }));
+                            }) }) })), _jsx("div", { ref: setStatusElement, "data-kumiko-layout": "page-header-status", className: cn("flex items-center gap-2 empty:hidden", compact ? "min-w-0 overflow-hidden" : "shrink-0") })] }), _jsxs("div", { className: cn("ml-auto flex items-center gap-2", compact ? "min-w-0 max-w-[60%]" : "min-w-0 max-w-[50%] shrink-0 sm:max-w-none"), children: [_jsx("div", { ref: setActionsElement, "data-kumiko-layout": "page-header-actions", className: cn(UNIFORM_BAR_CONTROLS_CLASSES, "flex min-w-0 items-center gap-2 empty:hidden [&_*]:min-w-0 [&_*]:max-w-full [&_button]:overflow-hidden [&_button]:whitespace-nowrap", compact && "overflow-hidden") }), !compact && headerActions !== undefined && (_jsx("div", { "data-kumiko-layout": "header-actions", className: "flex items-center gap-2", children: headerActions })), hasOverflow && _jsx(HeaderOverflow, { items: overflowItems, headerActions: headerActions })] })] }));
 }
 // A hand-rolled menu instead of Radix DropdownMenu: app headerActions are opaque
 // nodes with their own popovers, and the panel stays mounted while closed so their

package/dist/web/layout/uniform-bar-controls.d.ts

@@ -0,0 +1 @@
+export declare const UNIFORM_BAR_CONTROLS_CLASSES = "[&_[data-slot=button]:not([data-size^=icon])]:h-9 [&_[data-slot=input]]:h-9";

package/dist/web/layout/uniform-bar-controls.js

@@ -0,0 +1,4 @@
+// Header and toolbar controls share one height whatever size a screen, app or
+// primitive asked for: the descendant selector outranks the button's own
+// size utilities. Icon-only buttons keep their square size.
+export const UNIFORM_BAR_CONTROLS_CLASSES = "[&_[data-slot=button]:not([data-size^=icon])]:h-9 [&_[data-slot=input]]:h-9";

package/dist/web/lib/export-xlsx-request.d.ts

@@ -0,0 +1,11 @@
+import type { DataTableExport } from "../../data-table-view-types.ts";
+export type XlsxExportResult = {
+    readonly status: "ok";
+    readonly blob: Blob;
+} | {
+    readonly status: "too-many";
+    readonly maxRows: number | undefined;
+} | {
+    readonly status: "failed";
+};
+export declare function requestXlsxExport(source: DataTableExport): Promise<XlsxExportResult>;

package/dist/web/lib/export-xlsx-request.js

@@ -0,0 +1,46 @@
+import { isPlainObject } from "@cosmicdrift/kumiko-types/type-guards";
+import { CSRF_HEADER_NAME, LOCALE_HEADER_NAME, readActiveLocale, readCsrfToken, } from "../../live/index.js";
+const TOO_MANY_ROWS_HTTP_STATUS = 413;
+async function readMaxRows(res) {
+    try {
+        const body = await res.json();
+        const error = isPlainObject(body) ? body["error"] : undefined;
+        const details = isPlainObject(error) ? error["details"] : undefined;
+        const maxRows = isPlainObject(details) ? details["maxRows"] : undefined;
+        return typeof maxRows === "number" ? maxRows : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function requestXlsxExport(source) {
+    const headers = { "Content-Type": "application/json" };
+    const csrf = readCsrfToken();
+    if (csrf !== undefined)
+        headers[CSRF_HEADER_NAME] = csrf;
+    const locale = readActiveLocale();
+    if (locale !== undefined)
+        headers[LOCALE_HEADER_NAME] = locale;
+    try {
+        const res = await fetch("/api/export/xlsx", {
+            method: "POST",
+            credentials: "include",
+            headers,
+            body: JSON.stringify({
+                screen: source.screen,
+                payload: source.payload,
+                columns: source.columns,
+                timeZone: Intl.DateTimeFormat().resolvedOptions().timeZone,
+            }),
+        });
+        if (res.ok)
+            return { status: "ok", blob: await res.blob() };
+        if (res.status === TOO_MANY_ROWS_HTTP_STATUS) {
+            return { status: "too-many", maxRows: await readMaxRows(res) };
+        }
+        return { status: "failed" };
+    }
+    catch {
+        return { status: "failed" };
+    }
+}

package/dist/web/lib/file-ref-download.js

@@ -37,6 +37,9 @@ export async function fetchFileRefBlob(fileRefId) {
         fileName: fileNameFromContentDisposition(res.headers.get("content-disposition")),
     };
 }
+// The browser starts the download after click() returns; Safari and some
+// Firefox versions fail it when the blob URL is already revoked.
+const OBJECT_URL_REVOKE_DELAY_MS = 40_000;
 export function saveBlobAsFile(fileName, blob, options) {
     const payload = options?.bom === true ? new Blob([UTF8_BOM, blob], { type: blob.type }) : blob;
     const url = URL.createObjectURL(payload);
@@ -53,7 +56,7 @@ export function saveBlobAsFile(fileName, blob, options) {
         }
     }
     finally {
-        URL.revokeObjectURL(url);
+        setTimeout(() => URL.revokeObjectURL(url), OBJECT_URL_REVOKE_DELAY_MS);
     }
 }
 export async function downloadFileRef(fileRefId, options) {

package/dist/web/primitives/action-menu.js

@@ -23,7 +23,7 @@ export function ActionMenu({ trigger, triggerLabel, items, align = "end", minWid
                         return _jsx(DropdownMenuSeparator, {}, `sep-${idx}`);
                     }
                     if (item.kind === "label") {
-                        // biome-ignore lint/suspicious/noArrayIndexKey: Separators have no ID, so their position provides identity
+                        // biome-ignore lint/suspicious/noArrayIndexKey: labels have no ID either, so their position provides identity
                         return _jsx(DropdownMenuLabel, { children: item.label }, `label-${idx}`);
                     }
                     return (_jsxs(DropdownMenuItem, { onSelect: item.onSelect, disabled: item.disabled === true, "data-testid": `action-menu-item-${item.id}`, className: item.variant === "danger" ? "text-destructive focus:text-destructive" : undefined, children: [item.icon !== undefined && _jsx("span", { className: "size-4 shrink-0", children: item.icon }), _jsx("span", { className: "flex-1", children: item.label }), item.shortcut !== undefined && (_jsx("span", { className: "ml-auto text-xs text-muted-foreground tracking-wider font-mono", children: item.shortcut }))] }, item.id));

package/dist/web/primitives/code-input.d.ts

@@ -0,0 +1,6 @@
+import { type ReactNode } from "react";
+import type { InputProps } from "../../index.ts";
+export type CodeInputProps = Extract<InputProps, {
+    readonly kind: "code";
+}>;
+export declare function CodeInput(props: CodeInputProps): ReactNode;

package/dist/web/primitives/code-input.js

@@ -0,0 +1,31 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useContext } from "react";
+import { cn } from "../lib/cn.js";
+import { FieldDescriptionContext } from "./contexts.js";
+import { useFocusOnMount } from "./use-focus-on-mount.js";
+const MIN_LENGTH_FOR_SEPARATOR = 6;
+export function CodeInput(props) {
+    const { length, value, hasError, disabled } = props;
+    const describedBy = useContext(FieldDescriptionContext);
+    const inputRef = useFocusOnMount(props.autoFocus);
+    const activeIndex = Math.min(value.length, length - 1);
+    const hasSeparator = length >= MIN_LENGTH_FOR_SEPARATOR && length % 2 === 0;
+    const handleChange = (e) => {
+        const next = e.target.value.replace(/\D/g, "").slice(0, length);
+        props.onChange(next);
+        if (next.length === length && next !== value)
+            props.onComplete?.(next);
+    };
+    const cells = [];
+    for (let index = 0; index < length; index++) {
+        const isActive = index === activeIndex;
+        const char = value[index];
+        if (hasSeparator && index === length / 2) {
+            cells.push(_jsx("span", { "aria-hidden": "true", className: "shrink-0 text-muted-foreground", children: "\u2013" }, "separator"));
+        }
+        cells.push(_jsxs("div", { "data-active": isActive, "aria-hidden": "true", className: cn("flex h-12 min-w-0 flex-1 items-center justify-center rounded-md border border-input bg-transparent text-xl font-semibold tabular-nums shadow-xs transition-[color,box-shadow] dark:bg-input/30", hasError === true && "border-destructive", "data-[active=true]:group-focus-within:ring-[3px]", hasError === true
+                ? "data-[active=true]:group-focus-within:border-destructive data-[active=true]:group-focus-within:ring-destructive/20 dark:data-[active=true]:group-focus-within:ring-destructive/40"
+                : "data-[active=true]:group-focus-within:border-ring data-[active=true]:group-focus-within:ring-ring/50"), children: [char, isActive && char === undefined ? (_jsx("span", { className: "hidden h-6 w-px animate-pulse bg-foreground group-focus-within:block" })) : null] }, index));
+    }
+    return (_jsxs("div", { className: cn("group relative flex w-full items-center gap-2", disabled === true && "cursor-not-allowed opacity-50"), children: [cells, _jsx("input", { ref: inputRef, type: "text", id: props.id, name: props.name, value: value, onChange: handleChange, disabled: disabled, inputMode: "numeric", autoComplete: props.autoComplete ?? "one-time-code", spellCheck: false, "data-testid": props.testId, "aria-describedby": describedBy, "aria-required": props.required, "aria-invalid": hasError === true ? true : undefined, className: "absolute inset-0 h-full w-full bg-transparent text-transparent caret-transparent outline-none selection:bg-transparent" })] }));
+}

package/dist/web/primitives/data-table/actions-column.d.ts

@@ -0,0 +1,16 @@
+import type { CSSProperties, ReactNode } from "react";
+export declare const ACTIONS_CONTENT_ATTRIBUTE = "data-actions-content";
+export declare function stickyActionsCellClass(fillsHeight: boolean): string;
+export declare function ActionsHeaderCell({ label, style, absorbsLeftover, }: {
+    readonly label: string;
+    readonly style?: CSSProperties | undefined;
+    /** Fixed table layout: `w-px` would pin this column to 1px, so it must size as auto and take the leftover width. */
+    readonly absorbsLeftover: boolean;
+}): ReactNode;
+export declare function ActionsBodyCell({ testId, fillsHeight, measureContent, children, }: {
+    readonly testId: string;
+    readonly fillsHeight: boolean;
+    /** Wraps the content so the column's natural width stays measurable under a fixed table layout. */
+    readonly measureContent: boolean;
+    readonly children: ReactNode;
+}): ReactNode;

package/dist/web/primitives/data-table/actions-column.js

@@ -0,0 +1,34 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { cn } from "../../lib/cn.js";
+import { TableCell, TableHead } from "../../ui/table.js";
+import { ROW_FOCUS_RING_CELL_CLASS } from "./use-row-keyboard-navigation.js";
+export const ACTIONS_CONTENT_ATTRIBUTE = "data-actions-content";
+export function stickyActionsCellClass(fillsHeight) {
+    return cn("md:sticky md:right-0 md:z-10 md:bg-background", fillsHeight && "md:bg-card");
+}
+export function ActionsHeaderCell({ label, style, absorbsLeftover, }) {
+    return (_jsx(TableHead, { "data-testid": "column-actions", 
+        // From md: sticky right-0 + bg-muted (= header tone) so the
+        // action column stays at the right edge during horizontal
+        // scroll on wider screens. Below md, actions scroll in
+        // normal flow — sticky there would pin the column over the
+        // preceding data column instead of the (already narrow)
+        // page edge. No border-l: a permanent divider looks heavy;
+        // the sticky bg already sets the column apart during scroll.
+        className: "w-px text-right text-muted-foreground md:sticky md:right-0 md:z-10 md:bg-muted", "aria-label": label, style: absorbsLeftover ? { ...style, width: "auto" } : style }));
+}
+export function ActionsBodyCell({ testId, fillsHeight, measureContent, children, }) {
+    return (_jsx(TableCell, { "data-testid": testId, 
+        // From md: sticky-right so the actions stay visible on the
+        // right edge during horizontal scroll. Below md, actions
+        // scroll with the row like any other cell — sticky there
+        // would hide the neighboring data column on narrow
+        // viewports. bg-background sets the column apart during
+        // scroll — no border-l (divider too heavy).
+        className: cn("whitespace-nowrap text-right", stickyActionsCellClass(fillsHeight), ROW_FOCUS_RING_CELL_CLASS), 
+        // Action-cell events must not trigger the row click/activation
+        // (typically "Open Detail" — the user wanted the action,
+        // not navigation). We stopPropagation for mouse and
+        // keyboard so a11y stays consistent.
+        onClick: (e) => e.stopPropagation(), onKeyDown: (e) => e.stopPropagation(), children: measureContent ? (_jsx("div", { [ACTIONS_CONTENT_ATTRIBUTE]: "", className: "ml-auto w-max", children: children })) : (children) }));
+}