@eintrek/erp-shell 0.1.31 → 0.1.32

package/dist/index.js

@@ -1368,7 +1368,9 @@ function DeniedCard() {
  * over the optional `fallbackRulesMap`), passes the resolved required roles
  * into the host's `usePermission` probe, and renders one of:
  *
- * 1. rules / probe still loading → `null` (let Suspense / loading.tsx show)
+ * 1. rules / probe still loading → `null` on FIRST load only (let Suspense /
+ *    loading.tsx show); once this subtree has been granted access, a later
+ *    loading state keeps the children mounted — see the note below
  * 2. no rule covers this path → deny (fail closed)
  * 3. rule is explicit public (`[]`) → children
  * 4. probe says no access → deny card
@@ -1388,7 +1390,25 @@ function PermissionProvider({ children, usePermission, fallbackRulesMap, }) {
     const { hasPermission, isLoading } = usePermission({
         requiredRoles: lookup.roles,
     });
-    if (rulesLoading) {
+    // Returning null unmounts the page. That is fine before anything has been
+    // shown, and destructive afterwards: next-auth flips its status back to
+    // "loading" on every session update() — one runs every 4 minutes — and a
+    // rules hook that reports loading on that transient took the page down with
+    // it. Users filling a long form watched everything they had typed vanish,
+    // which reads as a spontaneous page refresh.
+    //
+    // So a loading state only blanks the subtree until access has been granted
+    // once. After that the children stay mounted while the check re-settles; the
+    // API still enforces access on every request, and a genuine loss of
+    // permission surfaces as a denied response rather than a wiped form.
+    //
+    // The grant is remembered per pathname, not per mount. This provider lives in
+    // the layout, so it survives every in-app navigation — a bare boolean would
+    // carry one page's grant onto the next route and flash a page the user may
+    // not be allowed to see while its own check is still running.
+    const grantedForPathRef = React.useRef(null);
+    const grantedHere = grantedForPathRef.current === pathname;
+    if (rulesLoading && !grantedHere) {
         return null;
     }
     // Unknown route → deny. Only explicit `required_child_groups: []` is public.
@@ -1396,15 +1416,16 @@ function PermissionProvider({ children, usePermission, fallbackRulesMap, }) {
         return jsxRuntime.jsx(DeniedCard, {});
     }
     if (lookup.roles.length === 0) {
+        grantedForPathRef.current = pathname;
         return jsxRuntime.jsx(jsxRuntime.Fragment, { children: children });
     }
-    const isLoadingCombined = isLoading;
-    if (isLoadingCombined) {
+    if (isLoading && !grantedHere) {
         return null;
     }
-    if (!hasPermission) {
+    if (!hasPermission && !isLoading) {
         return jsxRuntime.jsx(DeniedCard, {});
     }
+    grantedForPathRef.current = pathname;
     return jsxRuntime.jsx(jsxRuntime.Fragment, { children: children });
 }