@entifix/next-shell 0.1.0-0

package/dist/lib/crud/make-entity-crud.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/lib/crud/make-entity-crud.tsx"],"sourcesContent":["'use client';\n\nimport {\n  type ConfigurationRepositoryTag,\n  deleteUCFactory,\n  type EntityRepositoryTag,\n  getUCFactory,\n  loadUCFactory,\n  saveUCFactory,\n} from '@entifix/business';\nimport {\n  describeEntityColumns,\n  EntifixBuildError,\n  type EntifixError,\n  EntifixLogicError,\n  type Entity,\n  type EntityConstructor,\n  envelopeEntityName,\n  extractMetaEntity,\n} from '@entifix/core';\nimport { EntityTable, useCasesForSurface } from '@entifix/react-controls';\nimport {\n  entityQueryScope,\n  useDataLoading,\n  useEntityMutation,\n  useEntityRecord,\n} from '@entifix/react-integration';\nimport type { TransactionSink } from '@entifix/transactions';\nimport { TransactionSinkTag } from '@entifix/transactions';\nimport { useQueryClient } from '@tanstack/react-query';\nimport { Context } from 'effect';\nimport { useParams, useRouter } from 'next/navigation';\nimport { useState } from 'react';\n\nimport { useLocaleHref } from '../i18n/index.js';\nimport {\n  pendingFor,\n  pendingRecordsFor,\n  usePendingTransactions,\n} from '../workspace/pending-transactions.js';\nimport { EntityCrudForm } from './entity-crud-form.js';\nimport { handOffWrite } from './hand-off-write.js';\nimport type {\n  EntityCrud,\n  EntityCrudLinkSource,\n  EntityCrudOptions,\n  EntityCrudSingleViewProps,\n} from './make-entity-crud.types.js';\nimport { PendingNotice } from './pending-notice.js';\nimport { CATALOG_NEW_SLUG, slugToEntityId } from './slug.js';\nimport { useEntityAffordances } from './use-entity-affordances.js';\nimport { useEntityBulk } from './use-entity-bulk.js';\n\n/** What a picker defaults to reading off its target. */\nconst TARGET_NAME_PROPERTY = 'name';\n\n/**\n * What the generated pages' use-cases run against.\n *\n * Exported because a hand-built screen needs the same three: a wizard reads\n * records, resolves pickers and writes through exactly these ports, and\n * rebuilding the union at each such call site is how one of them ends up\n * missing `TransactionSinkTag` and quietly losing its optimistic treatment.\n */\nexport type CrudContext =\n  EntityRepositoryTag | ConfigurationRepositoryTag | TransactionSinkTag;\n\n/**\n * Merges the configuration adapter with one repository adapter into the context\n * the use-cases run against.\n *\n * The casts are the price of naming adapters by key: `AdapterKey` narrows which\n * names may be *offered*, but TypeScript will not carry that narrowing through\n * an index access on a generic record. The alternative is every call site\n * passing two `Context` values per entity — the duplication this factory exists\n * to remove.\n */\nexport function mergeCrudContext<TAdapters>(\n  adapters: TAdapters,\n  configuration: keyof TAdapters,\n  repository: keyof TAdapters,\n  sink: TransactionSink,\n): Context.Context<CrudContext> {\n  return Context.add(\n    Context.merge(\n      adapters[configuration] as Context.Context<ConfigurationRepositoryTag>,\n      adapters[repository] as Context.Context<EntityRepositoryTag>,\n    ),\n    TransactionSinkTag,\n    sink,\n  );\n}\n\n/**\n * Builds the list page and the single-record page for one entity.\n *\n * Every catalog entity used to cost ~10 files and ~300 lines whose only variable\n * was a class name: two organisms with a `.types.ts` each, two client pages, two\n * route files. The route files stay (Next needs a module per path); everything\n * between them is derived from the entity's own metadata, so a new reference\n * entity is this call plus a nav entry.\n *\n * Two things are checked here rather than at the call site, because both fail\n * silently otherwise. The catalog key must be the entity's own `@entity({ key })`\n * — they are the same string by convention, and a drifted one titles the form\n * after a different entity in a way only a reader of both catalogs would catch.\n * And a `links` entry must name a real member — a picker aimed at nothing renders\n * identically to a read-only field.\n *\n * **Serves compile-time `@entity()` classes only.** Operator reference data ships\n * with the code, so making this spec-driven would trade type safety for nothing;\n * a vendor-authored `EntitySpecification` renders through a separate path\n * (ADR 0014).\n */\n/**\n * A rejected verb, as something the form's error slot can render.\n *\n * `useErrorMessage` resolves `details.code` through the shared `errors`\n * catalog, so a shell that throws an `EntifixError` carrying one gets its\n * translated sentence; anything else — a network failure, a thrown string —\n * keeps its message rather than being relabelled with a code it never had.\n */\nfunction asEntifixError(failure: unknown): EntifixError {\n  return failure instanceof EntifixLogicError ||\n    failure instanceof EntifixBuildError\n    ? failure\n    : new EntifixLogicError(\n        failure instanceof Error ? failure.message : String(failure),\n      );\n}\n\nexport function makeEntityCrud<TEntity extends Entity, TAdapters>(\n  entityConstructor: EntityConstructor<TEntity>,\n  options: EntityCrudOptions<TAdapters, TEntity>,\n): EntityCrud<TEntity> {\n  const {\n    useAdapters,\n    basePath,\n    catalogKey,\n    repository,\n    configuration,\n    hiddenFields = [],\n    columns,\n    toolbar,\n    links = [],\n    metadataSource,\n    runBulkUseCase,\n    runUseCase,\n  } = options;\n\n  const meta = extractMetaEntity(entityConstructor);\n  if (meta.key !== catalogKey) {\n    throw new EntifixBuildError(\n      `${entityConstructor.name} declares key \"${String(meta.key)}\" but was given catalog key \"${catalogKey}\"`,\n    );\n  }\n  // Read off `@entity()` rather than rebuilt from `catalogKey`. Both spellings\n  // produce the same string today, and that is exactly the problem: a second\n  // place that knows how an entity's catalog subtree is laid out is a second\n  // place to fix when one moves. `MetaEntityOptions` makes them optional, so an\n  // entity that never declared them fails here — where a screen is generated —\n  // rather than on the render that first tries to title a tab with `undefined`.\n  const { labelKey: entityLabelKey, pluralKey: entityPluralKey } = meta;\n  if (entityLabelKey === undefined || entityPluralKey === undefined) {\n    throw new EntifixBuildError(\n      `${entityConstructor.name} must declare labelKey and pluralKey on @entity() to be generated`,\n    );\n  }\n\n  // Computed once: a descriptor is a property of the class, so nothing about it\n  // depends on the record being edited. `linkLabelProperty`/`linkSearchProperty`\n  // are overridden here because a scalar foreign key's `@accessor()` cannot name\n  // the target's members — it may not import the target at all.\n  // The wire name, which is also what a pending entry records and what\n  // `entityQueryScopeFor` keys on — one derivation, so a notice and an\n  // invalidation can never disagree about which entity they mean.\n  const entityName = envelopeEntityName(entityConstructor);\n  const descriptors = describeEntityColumns(entityConstructor);\n  const linkPlans = links.map(link => {\n    const descriptor = descriptors.find(entry => entry.name === link.field);\n    if (descriptor === undefined) {\n      throw new EntifixBuildError(\n        `${entityConstructor.name} has no member \"${link.field}\" for a link source`,\n      );\n    }\n    return {\n      ...link,\n      descriptor: {\n        ...descriptor,\n        linkLabelProperty: link.labelProperty ?? TARGET_NAME_PROPERTY,\n        linkSearchProperty: link.searchProperty ?? TARGET_NAME_PROPERTY,\n      },\n    };\n  });\n\n  function ListPage() {\n    const adapters = useAdapters();\n    // Outside a `PendingTransactionsProvider` this watches nothing, so a host\n    // that has not mounted one behaves exactly as it did before.\n    const pending = usePendingTransactions();\n    // Every internal href carries the locale. An unprefixed one still resolves —\n    // the middleware redirects it — but the visitor pays a round trip per click.\n    const withLocale = useLocaleHref();\n\n    const queryClient = useQueryClient();\n    const scope = entityQueryScope(entityConstructor);\n    const affordances = useEntityAffordances(entityConstructor, metadataSource);\n\n    // Records this browser has created but the service has not finished\n    // writing. Prepended below rather than patched into the cache, which a\n    // refetch would undo.\n    const optimistic = pendingRecordsFor<TEntity>(pending, entityName);\n\n    const pager = useDataLoading<TEntity, CrudContext>({\n      uc: loadUCFactory<TEntity>(),\n      ctx: mergeCrudContext(adapters, configuration, repository, pending),\n      // Scoped rather than left to the per-instance fallback, which is correct\n      // but unshared: with the entity's own scope one invalidation refreshes\n      // every page and filter of it, which is what a bulk run needs — and it is\n      // the same prefix `useReactiveInvalidation`already targets, so a generated\n      // list now also refreshes on a reactive change event.\n      queryKey: scope,\n    });\n\n    // Only when this caller may actually run something over a selection.\n    //\n    // Measured live: an `admin` holds `catalog-reference:*:read` and no\n    // `retire`, so the service filters the verb out of `$metadata` — but the\n    // selection column still rendered, offering a set that no action could be\n    // taken on. A checkbox that can lead nowhere is worse than no checkbox: it\n    // reads as a permission the user does not have.\n    //\n    // Decided from the served document rather than from the runner, because\n    // the runner is a property of the *shell* (it knows the route) and the\n    // grant is a property of the *caller*. The column therefore appears when\n    // the document lands, which is the asynchrony ADR 0026 already accepts for\n    // every action surface.\n    const canRunBulk =\n      useCasesForSurface('bulk-bar', affordances.metadata?.useCases).length > 0;\n\n    const bulk = useEntityBulk<TEntity>({\n      run: canRunBulk ? runBulkUseCase : undefined,\n      // A bulk write changed the rows underneath the listing, so the page is\n      // re-read; the selection deliberately survives it (#121 — \"the selection\n      // is still there afterwards\"), because the operator's next act is usually\n      // to retry the failures or run a second verb on the same rows.\n      onCompleted: () => {\n        void queryClient.invalidateQueries({ queryKey: scope });\n      },\n    });\n\n    // What a row's overflow menu runs, and the one place the list reports a\n    // verb that failed.\n    //\n    // ⚠️ **A row verb and the form's are the same runner with different\n    // arguments.** `EntityTable` hands back the whole record, because that is\n    // what it has; `runUseCase` takes an id, because that is what a route needs\n    // (#216). The list has no error slot of its own, so a failure lands in the\n    // table's own error region — the same one a failed page read uses.\n    const [useCaseError, setUseCaseError] = useState<EntifixError | undefined>(\n      undefined,\n    );\n    // Called unconditionally and the *result* gated, the way the surfaces are\n    // read in `EntityForm`: the name begins with `use`, so short-circuiting it\n    // reads to `react-hooks/rules-of-hooks` as a conditional hook.\n    const rowUseCases = useCasesForSurface(\n      'row-menu',\n      affordances.metadata?.useCases,\n    );\n    const canRunRowUseCase = runUseCase !== undefined && rowUseCases.length > 0;\n\n    const handleRowUseCase = canRunRowUseCase\n      ? (key: string, item: TEntity) => {\n          if (item.id == null) return;\n          setUseCaseError(undefined);\n          void runUseCase(key, item.id).then(\n            () => queryClient.invalidateQueries({ queryKey: scope }),\n            (failure: unknown) => setUseCaseError(asEntifixError(failure)),\n          );\n        }\n      : undefined;\n\n    return (\n      <div className=\"flex flex-col gap-s\">\n        {/* Above the table, because this is where `afterSave()` leaves the\n            operator after a create — and a create is the only transactional\n            write there is, so this is the surface the pending state has. */}\n        <PendingNotice\n          entries={pendingFor(pending, entityName)}\n          onDismiss={pending.dismiss}\n        />\n        <EntityTable\n          entityConstructor={entityConstructor}\n          {...pager}\n          items={[...optimistic, ...pager.items]}\n          totalItems={pager.totalItems + optimistic.length}\n          hrefFor={id => withLocale(`${basePath}/${String(id)}`)}\n          newHref={withLocale(`${basePath}/${CATALOG_NEW_SLUG}`)}\n          {...affordances}\n          {...bulk.tableProps}\n          onUseCase={handleRowUseCase}\n          error={useCaseError ?? pager.error}\n        >\n          {columns}\n          {toolbar}\n        </EntityTable>\n      </div>\n    );\n  }\n\n  /**\n   * Dual-host: as a route it reads its slug from the URL and returns to the list\n   * on save; in a workspace tab it takes the slug and the post-save action as\n   * props.\n   */\n  function SingleViewPage({\n    slug,\n    onSaved,\n    onDeleted,\n    draft,\n  }: EntityCrudSingleViewProps = {}) {\n    const adapters = useAdapters();\n    const pending = usePendingTransactions();\n    const router = useRouter();\n    const withLocale = useLocaleHref();\n    const params = useParams<{ slug: string }>();\n    // A verb's failure is this page's, not the record fetch's or the mutation's,\n    // so it needs a slot of its own to reach the form's error area.\n    const [useCaseError, setUseCaseError] = useState<EntifixError | undefined>(\n      undefined,\n    );\n    const id = slugToEntityId(slug ?? params.slug);\n\n    const ctx = mergeCrudContext(adapters, configuration, repository, pending);\n\n    const {\n      entity,\n      isLoading,\n      error: loadError,\n      reload,\n    } = useEntityRecord<TEntity, CrudContext>({\n      uc: getUCFactory<TEntity>(),\n      ctx,\n      id,\n    });\n\n    const {\n      save,\n      remove,\n      isSaving,\n      isDeleting,\n      error: writeError,\n    } = useEntityMutation<TEntity, CrudContext>({\n      saveUc: saveUCFactory<TEntity>(),\n      deleteUc: deleteUCFactory<TEntity>(),\n      ctx,\n    });\n\n    // Rebuilt inline on every render on purpose: `useEntityLinkSource` holds\n    // these in a ref and keeps them out of its query keys, precisely so a caller\n    // does not have to memoise them.\n    const linkSources: EntityCrudLinkSource[] = linkPlans.map(plan => ({\n      field: plan.field,\n      descriptor: plan.descriptor,\n      config: {\n        entityConstructor: plan.entityConstructor,\n        loadUc: loadUCFactory(),\n        getUc: getUCFactory(),\n        ctx: mergeCrudContext(\n          adapters,\n          configuration,\n          plan.repository,\n          pending,\n        ),\n      },\n    }));\n\n    const afterSave = onSaved ?? (() => router.push(withLocale(basePath)));\n    const afterDelete = onDeleted ?? (() => router.push(withLocale(basePath)));\n\n    // The draft is spent once the write *commits*, and only here is that known:\n    // `useEntityForm` neither fetches nor saves, so it cannot clear its own.\n    // A failed mutation deliberately keeps the draft — the edit is still the\n    // user's only copy of what they typed.\n    const handleSave = async (next: TEntity) => {\n      const saved = await save(next);\n      if (saved === undefined) return;\n\n      // ⚠️ Deliberately *not* a `setQueriesData` patch. The list refetches on\n      // mount — precisely when the operator arrives, having just been navigated\n      // here — and the server legitimately does not hold the record yet, so the\n      // refetch would replace the patched page and the row would vanish a\n      // moment after appearing. The pending set outlives refetches.\n      handOffWrite({ id: String(saved.id), record: saved, pending, draft });\n      afterSave();\n    };\n\n    const handleDelete = async () => {\n      if (await remove(id)) {\n        draft?.clear();\n        afterDelete();\n      }\n    };\n\n    /**\n     * An `entity`-bound verb, on the record being shown.\n     *\n     * It **reloads** rather than patching what it has: the service decides the\n     * resulting state — a `publish` may land on `published` from four different\n     * places — and a client that assumed the new value would show the wrong one\n     * the first time the rule changed. `id == null` means the create form,\n     * where there is no record to act on and the form renders no verbs anyway.\n     *\n     * ⚠️ The rejection is **caught and shown**, never left to the promise.\n     * `EntityForm`'s `onUseCase` returns `void`, so an uncaught rejection here\n     * reaches the console and nothing else — measured on an offering refusing\n     * `unpublish` from `draft`: the service answered `409` with a coded body,\n     * the record correctly did not move, and the operator saw a button that\n     * appeared to do nothing at all.\n     */\n    const handleUseCase =\n      runUseCase === undefined || id == null\n        ? undefined\n        : (key: string) => {\n            setUseCaseError(undefined);\n            void runUseCase(key, id).then(\n              () => reload(),\n              (failure: unknown) => setUseCaseError(asEntifixError(failure)),\n            );\n          };\n\n    return (\n      <EntityCrudForm<TEntity>\n        // Remounts (and reseeds the fields) once the record arrives.\n        key={String(entity?.id ?? CATALOG_NEW_SLUG)}\n        entityConstructor={entityConstructor}\n        catalogKey={catalogKey}\n        metadataSource={metadataSource}\n        hiddenFields={hiddenFields}\n        links={linkSources}\n        entity={entity}\n        isLoading={isLoading}\n        isSaving={isSaving}\n        isDeleting={isDeleting}\n        error={loadError ?? writeError ?? useCaseError}\n        onSave={handleSave}\n        onDelete={id == null ? undefined : handleDelete}\n        onUseCase={handleUseCase}\n        backHref={withLocale(basePath)}\n        draft={draft}\n      />\n    );\n  }\n\n  return {\n    entityConstructor,\n    entityKey: catalogKey,\n    entityLabelKey,\n    entityPluralKey,\n    basePath,\n    ListPage,\n    SingleViewPage,\n  };\n}\n"],"names":["deleteUCFactory","getUCFactory","loadUCFactory","saveUCFactory","describeEntityColumns","EntifixBuildError","EntifixLogicError","envelopeEntityName","extractMetaEntity","EntityTable","useCasesForSurface","entityQueryScope","useDataLoading","useEntityMutation","useEntityRecord","TransactionSinkTag","useQueryClient","Context","useParams","useRouter","useState","useLocaleHref","pendingFor","pendingRecordsFor","usePendingTransactions","EntityCrudForm","handOffWrite","PendingNotice","CATALOG_NEW_SLUG","slugToEntityId","useEntityAffordances","useEntityBulk","TARGET_NAME_PROPERTY","mergeCrudContext","adapters","configuration","repository","sink","add","merge","asEntifixError","failure","Error","message","String","makeEntityCrud","entityConstructor","options","useAdapters","basePath","catalogKey","hiddenFields","columns","toolbar","links","metadataSource","runBulkUseCase","runUseCase","meta","key","name","labelKey","entityLabelKey","pluralKey","entityPluralKey","undefined","entityName","descriptors","linkPlans","map","link","descriptor","find","entry","field","linkLabelProperty","labelProperty","linkSearchProperty","searchProperty","ListPage","affordances","pending","withLocale","queryClient","scope","optimistic","pager","uc","ctx","queryKey","canRunBulk","metadata","useCases","length","bulk","run","onCompleted","invalidateQueries","useCaseError","setUseCaseError","rowUseCases","canRunRowUseCase","handleRowUseCase","item","id","then","div","className","entries","onDismiss","dismiss","items","totalItems","hrefFor","newHref","tableProps","onUseCase","error","SingleViewPage","slug","onSaved","onDeleted","draft","loadError","router","params","entity","isLoading","reload","save","remove","isSaving","isDeleting","writeError","saveUc","deleteUc","linkSources","plan","config","loadUc","getUc","afterSave","push","afterDelete","handleSave","next","saved","record","handleDelete","clear","handleUseCase","onSave","onDelete","backHref","entityKey"],"mappings":"AAAA;;;AAEA,SAEEA,eAAe,EAEfC,YAAY,EACZC,aAAa,EACbC,aAAa,QACR,oBAAoB;AAC3B,SACEC,qBAAqB,EACrBC,iBAAiB,EAEjBC,iBAAiB,EAGjBC,kBAAkB,EAClBC,iBAAiB,QACZ,gBAAgB;AACvB,SAASC,WAAW,EAAEC,kBAAkB,QAAQ,0BAA0B;AAC1E,SACEC,gBAAgB,EAChBC,cAAc,EACdC,iBAAiB,EACjBC,eAAe,QACV,6BAA6B;AAEpC,SAASC,kBAAkB,QAAQ,wBAAwB;AAC3D,SAASC,cAAc,QAAQ,wBAAwB;AACvD,SAASC,OAAO,QAAQ,SAAS;AACjC,SAASC,SAAS,EAAEC,SAAS,QAAQ,kBAAkB;AACvD,SAASC,QAAQ,QAAQ,QAAQ;AAEjC,SAASC,aAAa,QAAQ,mBAAmB;AACjD,SACEC,UAAU,EACVC,iBAAiB,EACjBC,sBAAsB,QACjB,uCAAuC;AAC9C,SAASC,cAAc,QAAQ,wBAAwB;AACvD,SAASC,YAAY,QAAQ,sBAAsB;AAOnD,SAASC,aAAa,QAAQ,sBAAsB;AACpD,SAASC,gBAAgB,EAAEC,cAAc,QAAQ,YAAY;AAC7D,SAASC,oBAAoB,QAAQ,8BAA8B;AACnE,SAASC,aAAa,QAAQ,uBAAuB;AAErD,sDAAsD,GACtD,MAAMC,uBAAuB;AAa7B;;;;;;;;;CASC,GACD,OAAO,SAASC,iBACdC,QAAmB,EACnBC,aAA8B,EAC9BC,UAA2B,EAC3BC,IAAqB;IAErB,OAAOpB,QAAQqB,GAAG,CAChBrB,QAAQsB,KAAK,CACXL,QAAQ,CAACC,cAAc,EACvBD,QAAQ,CAACE,WAAW,GAEtBrB,oBACAsB;AAEJ;AAEA;;;;;;;;;;;;;;;;;;;;CAoBC,GACD;;;;;;;CAOC,GACD,SAASG,eAAeC,OAAgB;IACtC,OAAOA,mBAAmBnC,qBACxBmC,mBAAmBpC,oBACjBoC,UACA,IAAInC,kBACFmC,mBAAmBC,QAAQD,QAAQE,OAAO,GAAGC,OAAOH;AAE5D;AAEA,OAAO,SAASI,eACdC,iBAA6C,EAC7CC,OAA8C;IAE9C,MAAM,EACJC,WAAW,EACXC,QAAQ,EACRC,UAAU,EACVd,UAAU,EACVD,aAAa,EACbgB,eAAe,EAAE,EACjBC,OAAO,EACPC,OAAO,EACPC,QAAQ,EAAE,EACVC,cAAc,EACdC,cAAc,EACdC,UAAU,EACX,GAAGV;IAEJ,MAAMW,OAAOlD,kBAAkBsC;IAC/B,IAAIY,KAAKC,GAAG,KAAKT,YAAY;QAC3B,MAAM,IAAI7C,kBACR,GAAGyC,kBAAkBc,IAAI,CAAC,eAAe,EAAEhB,OAAOc,KAAKC,GAAG,EAAE,6BAA6B,EAAET,WAAW,CAAC,CAAC;IAE5G;IACA,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,8EAA8E;IAC9E,6EAA6E;IAC7E,8EAA8E;IAC9E,MAAM,EAAEW,UAAUC,cAAc,EAAEC,WAAWC,eAAe,EAAE,GAAGN;IACjE,IAAII,mBAAmBG,aAAaD,oBAAoBC,WAAW;QACjE,MAAM,IAAI5D,kBACR,GAAGyC,kBAAkBc,IAAI,CAAC,iEAAiE,CAAC;IAEhG;IAEA,8EAA8E;IAC9E,+EAA+E;IAC/E,+EAA+E;IAC/E,8DAA8D;IAC9D,qEAAqE;IACrE,qEAAqE;IACrE,gEAAgE;IAChE,MAAMM,aAAa3D,mBAAmBuC;IACtC,MAAMqB,cAAc/D,sBAAsB0C;IAC1C,MAAMsB,YAAYd,MAAMe,GAAG,CAACC,CAAAA;YAWHA,qBACCA;QAXxB,MAAMC,aAAaJ,YAAYK,IAAI,CAACC,CAAAA,QAASA,MAAMb,IAAI,KAAKU,KAAKI,KAAK;QACtE,IAAIH,eAAeN,WAAW;YAC5B,MAAM,IAAI5D,kBACR,GAAGyC,kBAAkBc,IAAI,CAAC,gBAAgB,EAAEU,KAAKI,KAAK,CAAC,mBAAmB,CAAC;QAE/E;QACA,OAAO,aACFJ;YACHC,YAAY,aACPA;gBACHI,iBAAiB,GAAEL,sBAAAA,KAAKM,aAAa,YAAlBN,sBAAsBtC;gBACzC6C,kBAAkB,GAAEP,uBAAAA,KAAKQ,cAAc,YAAnBR,uBAAuBtC;;;IAGjD;IAEA,SAAS+C;YA2C0BC,uBA6B/BA;QAvEF,MAAM9C,WAAWc;QACjB,0EAA0E;QAC1E,6DAA6D;QAC7D,MAAMiC,UAAUzD;QAChB,6EAA6E;QAC7E,6EAA6E;QAC7E,MAAM0D,aAAa7D;QAEnB,MAAM8D,cAAcnE;QACpB,MAAMoE,QAAQzE,iBAAiBmC;QAC/B,MAAMkC,cAAclD,qBAAqBgB,mBAAmBS;QAE5D,oEAAoE;QACpE,uEAAuE;QACvE,sBAAsB;QACtB,MAAM8B,aAAa9D,kBAA2B0D,SAASf;QAEvD,MAAMoB,QAAQ1E,eAAqC;YACjD2E,IAAIrF;YACJsF,KAAKvD,iBAAiBC,UAAUC,eAAeC,YAAY6C;YAC3D,yEAAyE;YACzE,uEAAuE;YACvE,0EAA0E;YAC1E,2EAA2E;YAC3E,sDAAsD;YACtDQ,UAAUL;QACZ;QAEA,qEAAqE;QACrE,EAAE;QACF,oEAAoE;QACpE,yEAAyE;QACzE,0EAA0E;QAC1E,2EAA2E;QAC3E,gDAAgD;QAChD,EAAE;QACF,wEAAwE;QACxE,uEAAuE;QACvE,yEAAyE;QACzE,2EAA2E;QAC3E,wBAAwB;QACxB,MAAMM,aACJhF,mBAAmB,aAAYsE,wBAAAA,YAAYW,QAAQ,qBAApBX,sBAAsBY,QAAQ,EAAEC,MAAM,GAAG;QAE1E,MAAMC,OAAO/D,cAAuB;YAClCgE,KAAKL,aAAalC,iBAAiBS;YACnC,uEAAuE;YACvE,yEAAyE;YACzE,0EAA0E;YAC1E,+DAA+D;YAC/D+B,aAAa;gBACX,KAAKb,YAAYc,iBAAiB,CAAC;oBAAER,UAAUL;gBAAM;YACvD;QACF;QAEA,wEAAwE;QACxE,oBAAoB;QACpB,EAAE;QACF,oEAAoE;QACpE,0EAA0E;QAC1E,4EAA4E;QAC5E,2EAA2E;QAC3E,mEAAmE;QACnE,MAAM,CAACc,cAAcC,gBAAgB,GAAG/E,SACtC6C;QAEF,0EAA0E;QAC1E,2EAA2E;QAC3E,+DAA+D;QAC/D,MAAMmC,cAAc1F,mBAClB,aACAsE,yBAAAA,YAAYW,QAAQ,qBAApBX,uBAAsBY,QAAQ;QAEhC,MAAMS,mBAAmB5C,eAAeQ,aAAamC,YAAYP,MAAM,GAAG;QAE1E,MAAMS,mBAAmBD,mBACrB,CAAC1C,KAAa4C;YACZ,IAAIA,KAAKC,EAAE,IAAI,MAAM;YACrBL,gBAAgBlC;YAChB,KAAKR,WAAWE,KAAK4C,KAAKC,EAAE,EAAEC,IAAI,CAChC,IAAMtB,YAAYc,iBAAiB,CAAC;oBAAER,UAAUL;gBAAM,IACtD,CAAC3C,UAAqB0D,gBAAgB3D,eAAeC;QAEzD,IACAwB;QAEJ,qBACE,MAACyC;YAAIC,WAAU;;8BAIb,KAAChF;oBACCiF,SAAStF,WAAW2D,SAASf;oBAC7B2C,WAAW5B,QAAQ6B,OAAO;;8BAE5B,MAACrG;oBACCqC,mBAAmBA;mBACfwC;oBACJyB,OAAO;2BAAI1B;2BAAeC,MAAMyB,KAAK;qBAAC;oBACtCC,YAAY1B,MAAM0B,UAAU,GAAG3B,WAAWQ,MAAM;oBAChDoB,SAAST,CAAAA,KAAMtB,WAAW,GAAGjC,SAAS,CAAC,EAAEL,OAAO4D,KAAK;oBACrDU,SAAShC,WAAW,GAAGjC,SAAS,CAAC,EAAErB,kBAAkB;mBACjDoD,aACAc,KAAKqB,UAAU;oBACnBC,WAAWd;oBACXe,KAAK,EAAEnB,uBAAAA,eAAgBZ,MAAM+B,KAAK;;wBAEjCjE;wBACAC;;;;;IAIT;IAEA;;;;GAIC,GACD,SAASiE,eAAe,EACtBC,IAAI,EACJC,OAAO,EACPC,SAAS,EACTC,KAAK,EACqB,GAAG,CAAC,CAAC;YA4HpBC;QA3HX,MAAMzF,WAAWc;QACjB,MAAMiC,UAAUzD;QAChB,MAAMoG,SAASzG;QACf,MAAM+D,aAAa7D;QACnB,MAAMwG,SAAS3G;QACf,6EAA6E;QAC7E,gEAAgE;QAChE,MAAM,CAACgF,cAAcC,gBAAgB,GAAG/E,SACtC6C;QAEF,MAAMuC,KAAK3E,eAAe0F,eAAAA,OAAQM,OAAON,IAAI;QAE7C,MAAM/B,MAAMvD,iBAAiBC,UAAUC,eAAeC,YAAY6C;QAElE,MAAM,EACJ6C,MAAM,EACNC,SAAS,EACTV,OAAOM,SAAS,EAChBK,MAAM,EACP,GAAGlH,gBAAsC;YACxCyE,IAAItF;YACJuF;YACAgB;QACF;QAEA,MAAM,EACJyB,IAAI,EACJC,MAAM,EACNC,QAAQ,EACRC,UAAU,EACVf,OAAOgB,UAAU,EAClB,GAAGxH,kBAAwC;YAC1CyH,QAAQnI;YACRoI,UAAUvI;YACVwF;QACF;QAEA,yEAAyE;QACzE,6EAA6E;QAC7E,iCAAiC;QACjC,MAAMgD,cAAsCpE,UAAUC,GAAG,CAACoE,CAAAA,OAAS,CAAA;gBACjE/D,OAAO+D,KAAK/D,KAAK;gBACjBH,YAAYkE,KAAKlE,UAAU;gBAC3BmE,QAAQ;oBACN5F,mBAAmB2F,KAAK3F,iBAAiB;oBACzC6F,QAAQzI;oBACR0I,OAAO3I;oBACPuF,KAAKvD,iBACHC,UACAC,eACAsG,KAAKrG,UAAU,EACf6C;gBAEJ;YACF,CAAA;QAEA,MAAM4D,YAAYrB,kBAAAA,UAAY,IAAMI,OAAOkB,IAAI,CAAC5D,WAAWjC;QAC3D,MAAM8F,cAActB,oBAAAA,YAAc,IAAMG,OAAOkB,IAAI,CAAC5D,WAAWjC;QAE/D,4EAA4E;QAC5E,yEAAyE;QACzE,yEAAyE;QACzE,uCAAuC;QACvC,MAAM+F,aAAa,OAAOC;YACxB,MAAMC,QAAQ,MAAMjB,KAAKgB;YACzB,IAAIC,UAAUjF,WAAW;YAEzB,wEAAwE;YACxE,0EAA0E;YAC1E,0EAA0E;YAC1E,oEAAoE;YACpE,8DAA8D;YAC9DvC,aAAa;gBAAE8E,IAAI5D,OAAOsG,MAAM1C,EAAE;gBAAG2C,QAAQD;gBAAOjE;gBAASyC;YAAM;YACnEmB;QACF;QAEA,MAAMO,eAAe;YACnB,IAAI,MAAMlB,OAAO1B,KAAK;gBACpBkB,yBAAAA,MAAO2B,KAAK;gBACZN;YACF;QACF;QAEA;;;;;;;;;;;;;;;KAeC,GACD,MAAMO,gBACJ7F,eAAeQ,aAAauC,MAAM,OAC9BvC,YACA,CAACN;YACCwC,gBAAgBlC;YAChB,KAAKR,WAAWE,KAAK6C,IAAIC,IAAI,CAC3B,IAAMuB,UACN,CAACvF,UAAqB0D,gBAAgB3D,eAAeC;QAEzD;QAEN,qBACE,KAAChB;YAGCqB,mBAAmBA;YACnBI,YAAYA;YACZK,gBAAgBA;YAChBJ,cAAcA;YACdG,OAAOkF;YACPV,QAAQA;YACRC,WAAWA;YACXI,UAAUA;YACVC,YAAYA;YACZf,KAAK,GAAEM,OAAAA,oBAAAA,YAAaU,sBAAbV,OAA2BzB;YAClCqD,QAAQP;YACRQ,UAAUhD,MAAM,OAAOvC,YAAYmF;YACnChC,WAAWkC;YACXG,UAAUvE,WAAWjC;YACrByE,OAAOA;WAfF9E,gBAAOkF,0BAAAA,OAAQtB,EAAE,oBAAI5E;IAkBhC;IAEA,OAAO;QACLkB;QACA4G,WAAWxG;QACXY;QACAE;QACAf;QACA8B;QACAuC;IACF;AACF"}

package/dist/lib/crud/make-entity-crud.types.d.ts

@@ -0,0 +1,237 @@
+import type { ConfigurationRepositoryTag, EntityRepositoryTag } from '@entifix/business';
+import type { BulkOutcome, Entity, EntityConstructor, EntityFieldDescriptor, EntityId, EntityMetadataSource, EntitySelection } from '@entifix/core';
+import type { EntityDraftStore, EntityLinkSourceConfig } from '@entifix/react-integration';
+import type { Context } from 'effect/Context';
+import type { CustomTypeOptions } from 'i18next';
+import type { ReactElement, ReactNode } from 'react';
+/**
+ * The `entity` catalog keys that carry **both** form titles, a `label` and a
+ * `plural`.
+ *
+ * Derived from the Spanish catalog rather than written out, so the union is the
+ * catalog: an entity whose subtree has no `form.editTitle`/`form.newTitle`
+ * cannot be handed to {@link makeEntityCrud} at all, and adding a reference
+ * entity therefore starts by adding its copy to both locales. That is the whole
+ * i18n gate for this factory — `@r10c/i18n-check` scans only
+ * `packages/business/ts` for `@useCase()` decorators and never `.tsx`, so a
+ * runtime key here would be checked by nothing.
+ *
+ * `label`/`plural` joined the condition when {@link EntityCrud} began carrying
+ * them, so that a workspace tab and a nav entry derived from this descriptor
+ * name the entity in the catalog's own words. They are part of the **type**
+ * rather than a runtime assertion in the factory, because the catalog is
+ * statically known here: a missing `plural` should fail at the call site that
+ * generates the screens, not on the render that first tries to title a tab.
+ *
+ * Keeping the key typed is what lets the generated form call `useT('entity')`
+ * with a template literal and still fail the build on a typo, instead of
+ * reaching for the `useTranslateKey` escape hatch that authored copy must not
+ * use. `AccountLabelKey` in `../session/account-links.ts` is the same trick
+ * written out by hand; this one cannot drift because it is computed.
+ */
+export type EntityCatalogKey<TEntityCatalog = EntityCatalogOf<TypeOptionsResources>> = [TEntityCatalog] extends [never] ? string : {
+    [K in keyof TEntityCatalog]: TEntityCatalog[K] extends {
+        form: {
+            editTitle: string;
+            newTitle: string;
+        };
+        label: string;
+        plural: string;
+    } ? K : never;
+}[keyof TEntityCatalog] & string;
+/**
+ * The host's `entity` namespace, read back out of its own `i18next`
+ * augmentation.
+ *
+ * ⚠️ **The `entity` catalog is the host's, not entifix's.** It names *their*
+ * entities — a parameter, an offering, a sales channel — so a framework that
+ * shipped one would be shipping an application's product copy. Reading it back
+ * through `CustomTypeOptions` keeps the key union computed rather than written
+ * out, which is what stops it drifting, while leaving the catalog where it
+ * belongs. A host that declares no augmentation gets `string`, and the factory
+ * still works with the gate relaxed.
+ */
+type TypeOptionsResources = CustomTypeOptions extends {
+    resources: infer R;
+} ? R : never;
+type EntityCatalogOf<TResources> = TResources extends {
+    entity: infer E;
+} ? E : never;
+/**
+ * A relation the generated form edits with a picker.
+ *
+ * The target is named here rather than derived, because the common case is a
+ * **plain foreign key**: when the target lives in another slice's store a typed
+ * `EntityLink` is both an illegal import and a cross-store join, so the member
+ * is a bare `string` (`ProductSpecification.brandId` into `catalog-reference`)
+ * and its `@accessor()` has no vocabulary for "the target's name". Hence
+ * `labelProperty`/`searchProperty` are stated at the call site instead of being
+ * left to `describeEntityColumns`' `'name'` default, which happens to be right
+ * today and states nothing.
+ *
+ * `searchProperty` must be `filterable` on the **target** or the service answers
+ * `400`; `useEntityLinkSource` throws at render rather than letting that surface
+ * as an empty suggestion list.
+ */
+export interface EntityCrudLink<TAdapters> {
+    /** The owning entity's accessor name, e.g. `'brandId'`. */
+    readonly field: string;
+    readonly entityConstructor: EntityConstructor<Entity>;
+    /**
+     * Which adapter holds the **target's** repository. Often a different service
+     * than the record's own: `catalog-reference` is another slice's store, so
+     * resolving an id goes through that domain's own read path.
+     */
+    readonly repository: AdapterKey<TAdapters, Context<EntityRepositoryTag>>;
+    /** Defaults to `'name'`. */
+    readonly labelProperty?: string;
+    /** Defaults to `'name'`. Must be `filterable` on the target. */
+    readonly searchProperty?: string;
+}
+/** The keys of `TAdapters` whose value is assignable to `TValue`. */
+export type AdapterKey<TAdapters, TValue> = {
+    [K in keyof TAdapters]: TAdapters[K] extends TValue ? K : never;
+}[keyof TAdapters];
+export interface EntityCrudOptions<TAdapters, TEntity extends Entity> {
+    /** The domain shell's adapters hook, e.g. `useMarketplaceAdminAdapters`. */
+    readonly useAdapters: () => TAdapters;
+    /** Route prefix for both pages, e.g. `'/catalog/product-brand'`. */
+    readonly basePath: string;
+    /**
+     * The entity's `entity` catalog key. Asserted against `@entity({ key })` at
+     * factory time — the two are the same string by convention
+     * (`entity:product-brand.label` mirrors `key: 'product-brand'`), and letting
+     * them drift would title a form after a different entity.
+     */
+    readonly catalogKey: EntityCatalogKey;
+    /** Which adapter holds this entity's own repository. */
+    readonly repository: AdapterKey<TAdapters, Context<EntityRepositoryTag>>;
+    readonly configuration: AdapterKey<TAdapters, Context<ConfigurationRepositoryTag>>;
+    /**
+     * Members the form keeps but does not show — `id` always, plus anything a
+     * transaction assigns. A hidden member still round-trips: it is dropped from
+     * the rendered fields, not from the draft, so `reconstructEntity` carries it
+     * back out of the seeded values.
+     */
+    readonly hiddenFields?: readonly string[];
+    /** `<EntityColumn>` overrides for the list, for presentation metadata cannot express. */
+    readonly columns?: ReactNode;
+    /**
+     * Extra controls beside the table's own — an `<EntityTableToolbar>`.
+     *
+     * Its own option rather than more `columns`, though both end up as
+     * `EntityTable` children and the slots are sorted by component identity: a
+     * toolbar filed under a columns prop is a name that lies, and the first thing
+     * to go here is a link into a wizard, which is not a column by any reading
+     * ([ADR 0045](../../../../../../docs/adr/0045-the-wizard-a-step-graph-and-a-submit-that-hands-off.md)).
+     */
+    readonly toolbar?: ReactNode;
+    /** Frozen at factory time — see `use-entity-link-sources.ts`. */
+    readonly links?: readonly EntityCrudLink<TAdapters>[];
+    /**
+     * Where the entity's served affordances come from — `GET /api/<entity>/$metadata`.
+     *
+     * Supplying it is what turns on everything ADR 0026 and ADR 0035 describe:
+     * Save and Delete filtered against the caller's real grants, the declared
+     * verbs on the form, the row overflow menu, and the bulk bar. Omitting it
+     * keeps the pre-0026 behaviour exactly, which is what every generated catalog
+     * rendered before this option existed.
+     *
+     * A `EntityMetadataSource` rather than a URL because the two hosts reach
+     * their service differently — one through the config-driven REST adapters,
+     * one through a shell's own same-origin routes.
+     */
+    readonly metadataSource?: EntityMetadataSource;
+    /**
+     * Runs a `collection`-bound verb over a selection, and reports **per row**.
+     *
+     * Supplying it opts the list into the selection column and the bulk bar.
+     * It is separate from `metadataSource` because the two are independent: an
+     * entity can declare no collection verb and still want permission-filtered
+     * Save, and the endpoint a verb posts to is the shell's knowledge, not
+     * metadata's.
+     */
+    readonly runBulkUseCase?: (key: string, selection: EntitySelection<TEntity>) => Promise<readonly BulkOutcome[]>;
+    /**
+     * Runs an `entity`-bound verb on the record the single view is showing.
+     *
+     * The sibling of {@link runBulkUseCase}, and it had to exist for the same
+     * reason: `EntityForm` has rendered these buttons since ADR 0035, and
+     * `EntityCrudForm` has accepted an `onUseCase` for as long — but nothing ever
+     * passed one, so a generated screen showed a declared, granted, served verb
+     * that did nothing when clicked. Measured on `ProductOffering`'s `publish`,
+     * which passed every `@r10c/slices` invariant and appeared nowhere.
+     *
+     * Resolving means the record changed, and the page reloads it: a verb that
+     * moves a lifecycle leaves the form showing the old state otherwise, which
+     * reads as "the button did nothing". Rejecting surfaces through the form's
+     * own error slot, so a `409` from an illegal transition renders as the coded
+     * message the catalog holds rather than a thrown promise nobody catches.
+     */
+    readonly runUseCase?: (key: string, id: EntityId) => Promise<void>;
+}
+/**
+ * Props both hosts pass. A route host passes none — the slug comes from the URL
+ * and a save returns to the list; the workspace tab host passes all of them.
+ */
+export interface EntityCrudSingleViewProps {
+    /** Defaults to the `[slug]` route param. */
+    readonly slug?: string;
+    /** Defaults to navigating back to the list. */
+    readonly onSaved?: () => void;
+    readonly onDeleted?: () => void;
+    /**
+     * Where to autosave the edit. Supplying it is the whole opt-in: the form
+     * seeds from the persisted draft, writes to it on every edit, and the page
+     * clears it once a save or delete commits.
+     *
+     * A route host omits it and stays ephemeral, which is the rule stated as a
+     * missing prop rather than as a flag — there is no value of "absent" that
+     * accidentally starts persisting.
+     */
+    readonly draft?: EntityDraftStore;
+}
+/**
+ * What the factory returns: a **named descriptor**, not four loose components.
+ *
+ * The identity fields are here so the workspace registry and the nav are derived
+ * from a list of these rather than from the hand-written const maps they replace
+ * (#141).
+ */
+export interface EntityCrud<TEntity extends Entity> {
+    readonly entityConstructor: EntityConstructor<TEntity>;
+    /** `@entity({ key })`, which is also `catalogKey` and the tab address payload. */
+    readonly entityKey: EntityCatalogKey;
+    /**
+     * `@entity({ labelKey })` — how one record is named. A record tab's title.
+     *
+     * Read off the decorator rather than passed, so the tab strip, the nav and the
+     * search results all name the entity from the one place it names itself.
+     */
+    readonly entityLabelKey: string;
+    /** `@entity({ pluralKey })` — how the collection is named. A list tab's title. */
+    readonly entityPluralKey: string;
+    readonly basePath: string;
+    readonly ListPage: () => ReactElement;
+    readonly SingleViewPage: (props?: EntityCrudSingleViewProps) => ReactElement;
+}
+/**
+ * A picker's transport with its context tags erased.
+ *
+ * The factory cannot preserve one type parameter per link — the pages that
+ * build these know their adapters, the generated form only forwards them — and
+ * `EntityForm.linkSources` is already `Record<string, EntityLinkSource<any>>`
+ * for the same reason.
+ */
+export type AnyEntityLinkSourceConfig = EntityLinkSourceConfig<Entity, any>;
+/**
+ * One picker, resolved: the descriptor computed once at factory time, and the
+ * use-cases plus adapter context the page builds per render.
+ */
+export interface EntityCrudLinkSource {
+    readonly field: string;
+    readonly descriptor: EntityFieldDescriptor;
+    readonly config: AnyEntityLinkSourceConfig;
+}
+export {};
+//# sourceMappingURL=make-entity-crud.types.d.ts.map

package/dist/lib/crud/make-entity-crud.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"make-entity-crud.types.d.ts","sourceRoot":"","sources":["../../../src/lib/crud/make-entity-crud.types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,0BAA0B,EAC1B,mBAAmB,EACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EACV,WAAW,EACX,MAAM,EACN,iBAAiB,EACjB,qBAAqB,EACrB,QAAQ,EACR,oBAAoB,EACpB,eAAe,EAChB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EACV,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,MAAM,gBAAgB,CAC1B,cAAc,GAAG,eAAe,CAAC,oBAAoB,CAAC,IACpD,CAAC,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,GAIhC,MAAM,GACN;KACG,CAAC,IAAI,MAAM,cAAc,GAAG,cAAc,CAAC,CAAC,CAAC,SAAS;QACrD,IAAI,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;QAC9C,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;KAChB,GACG,CAAC,GACD,KAAK;CACV,CAAC,MAAM,cAAc,CAAC,GACrB,MAAM,CAAC;AAEb;;;;;;;;;;;GAWG;AACH,KAAK,oBAAoB,GAAG,iBAAiB,SAAS;IAAE,SAAS,EAAE,MAAM,CAAC,CAAA;CAAE,GACxE,CAAC,GACD,KAAK,CAAC;AAEV,KAAK,eAAe,CAAC,UAAU,IAAI,UAAU,SAAS;IAAE,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GACrE,CAAC,GACD,KAAK,CAAC;AAEV;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,cAAc,CAAC,SAAS;IACvC,2DAA2D;IAC3D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACtD;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACzE,4BAA4B;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,gEAAgE;IAChE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,qEAAqE;AACrE,MAAM,MAAM,UAAU,CAAC,SAAS,EAAE,MAAM,IAAI;KACzC,CAAC,IAAI,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,MAAM,GAAG,CAAC,GAAG,KAAK;CAChE,CAAC,MAAM,SAAS,CAAC,CAAC;AAEnB,MAAM,WAAW,iBAAiB,CAAC,SAAS,EAAE,OAAO,SAAS,MAAM;IAClE,4EAA4E;IAC5E,QAAQ,CAAC,WAAW,EAAE,MAAM,SAAS,CAAC;IACtC,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,wDAAwD;IACxD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACzE,QAAQ,CAAC,aAAa,EAAE,UAAU,CAChC,SAAS,EACT,OAAO,CAAC,0BAA0B,CAAC,CACpC,CAAC;IACF;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,yFAAyF;IACzF,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC;IAC7B,iEAAiE;IACjE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;IACtD;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC;IAC/C;;;;;;;;OAQG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,CACxB,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,KAChC,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CAAC;IACrC;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpE;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,4CAA4C;IAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,+CAA+C;IAC/C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IAChC;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;CACnC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,UAAU,CAAC,OAAO,SAAS,MAAM;IAChD,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACvD,kFAAkF;IAClF,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,kFAAkF;IAClF,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,YAAY,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,EAAE,yBAAyB,KAAK,YAAY,CAAC;CAC9E;AAED;;;;;;;GAOG;AAEH,MAAM,MAAM,yBAAyB,GAAG,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAE5E;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;CAC5C"}

package/dist/lib/crud/make-entity-crud.types.js

@@ -0,0 +1,6 @@
+/**
+ * One picker, resolved: the descriptor computed once at factory time, and the
+ * use-cases plus adapter context the page builds per render.
+ */ export { };
+
+//# sourceMappingURL=make-entity-crud.types.js.map

package/dist/lib/crud/make-entity-crud.types.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/lib/crud/make-entity-crud.types.ts"],"sourcesContent":["import type {\n  ConfigurationRepositoryTag,\n  EntityRepositoryTag,\n} from '@entifix/business';\nimport type {\n  BulkOutcome,\n  Entity,\n  EntityConstructor,\n  EntityFieldDescriptor,\n  EntityId,\n  EntityMetadataSource,\n  EntitySelection,\n} from '@entifix/core';\nimport type {\n  EntityDraftStore,\n  EntityLinkSourceConfig,\n} from '@entifix/react-integration';\nimport type { Context } from 'effect/Context';\nimport type { CustomTypeOptions } from 'i18next';\nimport type { ReactElement, ReactNode } from 'react';\n\n/**\n * The `entity` catalog keys that carry **both** form titles, a `label` and a\n * `plural`.\n *\n * Derived from the Spanish catalog rather than written out, so the union is the\n * catalog: an entity whose subtree has no `form.editTitle`/`form.newTitle`\n * cannot be handed to {@link makeEntityCrud} at all, and adding a reference\n * entity therefore starts by adding its copy to both locales. That is the whole\n * i18n gate for this factory — `@r10c/i18n-check` scans only\n * `packages/business/ts` for `@useCase()` decorators and never `.tsx`, so a\n * runtime key here would be checked by nothing.\n *\n * `label`/`plural` joined the condition when {@link EntityCrud} began carrying\n * them, so that a workspace tab and a nav entry derived from this descriptor\n * name the entity in the catalog's own words. They are part of the **type**\n * rather than a runtime assertion in the factory, because the catalog is\n * statically known here: a missing `plural` should fail at the call site that\n * generates the screens, not on the render that first tries to title a tab.\n *\n * Keeping the key typed is what lets the generated form call `useT('entity')`\n * with a template literal and still fail the build on a typo, instead of\n * reaching for the `useTranslateKey` escape hatch that authored copy must not\n * use. `AccountLabelKey` in `../session/account-links.ts` is the same trick\n * written out by hand; this one cannot drift because it is computed.\n */\nexport type EntityCatalogKey<\n  TEntityCatalog = EntityCatalogOf<TypeOptionsResources>,\n> = [TEntityCatalog] extends [never]\n  ? // No host augmentation in this compilation — this package's own specs, or\n    // an adopter who has not declared one. The factory still works; the key is\n    // simply unchecked, which is the same trade `useTranslateKey` makes.\n    string\n  : {\n      [K in keyof TEntityCatalog]: TEntityCatalog[K] extends {\n        form: { editTitle: string; newTitle: string };\n        label: string;\n        plural: string;\n      }\n        ? K\n        : never;\n    }[keyof TEntityCatalog] &\n      string;\n\n/**\n * The host's `entity` namespace, read back out of its own `i18next`\n * augmentation.\n *\n * ⚠️ **The `entity` catalog is the host's, not entifix's.** It names *their*\n * entities — a parameter, an offering, a sales channel — so a framework that\n * shipped one would be shipping an application's product copy. Reading it back\n * through `CustomTypeOptions` keeps the key union computed rather than written\n * out, which is what stops it drifting, while leaving the catalog where it\n * belongs. A host that declares no augmentation gets `string`, and the factory\n * still works with the gate relaxed.\n */\ntype TypeOptionsResources = CustomTypeOptions extends { resources: infer R }\n  ? R\n  : never;\n\ntype EntityCatalogOf<TResources> = TResources extends { entity: infer E }\n  ? E\n  : never;\n\n/**\n * A relation the generated form edits with a picker.\n *\n * The target is named here rather than derived, because the common case is a\n * **plain foreign key**: when the target lives in another slice's store a typed\n * `EntityLink` is both an illegal import and a cross-store join, so the member\n * is a bare `string` (`ProductSpecification.brandId` into `catalog-reference`)\n * and its `@accessor()` has no vocabulary for \"the target's name\". Hence\n * `labelProperty`/`searchProperty` are stated at the call site instead of being\n * left to `describeEntityColumns`' `'name'` default, which happens to be right\n * today and states nothing.\n *\n * `searchProperty` must be `filterable` on the **target** or the service answers\n * `400`; `useEntityLinkSource` throws at render rather than letting that surface\n * as an empty suggestion list.\n */\nexport interface EntityCrudLink<TAdapters> {\n  /** The owning entity's accessor name, e.g. `'brandId'`. */\n  readonly field: string;\n  readonly entityConstructor: EntityConstructor<Entity>;\n  /**\n   * Which adapter holds the **target's** repository. Often a different service\n   * than the record's own: `catalog-reference` is another slice's store, so\n   * resolving an id goes through that domain's own read path.\n   */\n  readonly repository: AdapterKey<TAdapters, Context<EntityRepositoryTag>>;\n  /** Defaults to `'name'`. */\n  readonly labelProperty?: string;\n  /** Defaults to `'name'`. Must be `filterable` on the target. */\n  readonly searchProperty?: string;\n}\n\n/** The keys of `TAdapters` whose value is assignable to `TValue`. */\nexport type AdapterKey<TAdapters, TValue> = {\n  [K in keyof TAdapters]: TAdapters[K] extends TValue ? K : never;\n}[keyof TAdapters];\n\nexport interface EntityCrudOptions<TAdapters, TEntity extends Entity> {\n  /** The domain shell's adapters hook, e.g. `useMarketplaceAdminAdapters`. */\n  readonly useAdapters: () => TAdapters;\n  /** Route prefix for both pages, e.g. `'/catalog/product-brand'`. */\n  readonly basePath: string;\n  /**\n   * The entity's `entity` catalog key. Asserted against `@entity({ key })` at\n   * factory time — the two are the same string by convention\n   * (`entity:product-brand.label` mirrors `key: 'product-brand'`), and letting\n   * them drift would title a form after a different entity.\n   */\n  readonly catalogKey: EntityCatalogKey;\n  /** Which adapter holds this entity's own repository. */\n  readonly repository: AdapterKey<TAdapters, Context<EntityRepositoryTag>>;\n  readonly configuration: AdapterKey<\n    TAdapters,\n    Context<ConfigurationRepositoryTag>\n  >;\n  /**\n   * Members the form keeps but does not show — `id` always, plus anything a\n   * transaction assigns. A hidden member still round-trips: it is dropped from\n   * the rendered fields, not from the draft, so `reconstructEntity` carries it\n   * back out of the seeded values.\n   */\n  readonly hiddenFields?: readonly string[];\n  /** `<EntityColumn>` overrides for the list, for presentation metadata cannot express. */\n  readonly columns?: ReactNode;\n  /**\n   * Extra controls beside the table's own — an `<EntityTableToolbar>`.\n   *\n   * Its own option rather than more `columns`, though both end up as\n   * `EntityTable` children and the slots are sorted by component identity: a\n   * toolbar filed under a columns prop is a name that lies, and the first thing\n   * to go here is a link into a wizard, which is not a column by any reading\n   * ([ADR 0045](../../../../../../docs/adr/0045-the-wizard-a-step-graph-and-a-submit-that-hands-off.md)).\n   */\n  readonly toolbar?: ReactNode;\n  /** Frozen at factory time — see `use-entity-link-sources.ts`. */\n  readonly links?: readonly EntityCrudLink<TAdapters>[];\n  /**\n   * Where the entity's served affordances come from — `GET /api/<entity>/$metadata`.\n   *\n   * Supplying it is what turns on everything ADR 0026 and ADR 0035 describe:\n   * Save and Delete filtered against the caller's real grants, the declared\n   * verbs on the form, the row overflow menu, and the bulk bar. Omitting it\n   * keeps the pre-0026 behaviour exactly, which is what every generated catalog\n   * rendered before this option existed.\n   *\n   * A `EntityMetadataSource` rather than a URL because the two hosts reach\n   * their service differently — one through the config-driven REST adapters,\n   * one through a shell's own same-origin routes.\n   */\n  readonly metadataSource?: EntityMetadataSource;\n  /**\n   * Runs a `collection`-bound verb over a selection, and reports **per row**.\n   *\n   * Supplying it opts the list into the selection column and the bulk bar.\n   * It is separate from `metadataSource` because the two are independent: an\n   * entity can declare no collection verb and still want permission-filtered\n   * Save, and the endpoint a verb posts to is the shell's knowledge, not\n   * metadata's.\n   */\n  readonly runBulkUseCase?: (\n    key: string,\n    selection: EntitySelection<TEntity>,\n  ) => Promise<readonly BulkOutcome[]>;\n  /**\n   * Runs an `entity`-bound verb on the record the single view is showing.\n   *\n   * The sibling of {@link runBulkUseCase}, and it had to exist for the same\n   * reason: `EntityForm` has rendered these buttons since ADR 0035, and\n   * `EntityCrudForm` has accepted an `onUseCase` for as long — but nothing ever\n   * passed one, so a generated screen showed a declared, granted, served verb\n   * that did nothing when clicked. Measured on `ProductOffering`'s `publish`,\n   * which passed every `@r10c/slices` invariant and appeared nowhere.\n   *\n   * Resolving means the record changed, and the page reloads it: a verb that\n   * moves a lifecycle leaves the form showing the old state otherwise, which\n   * reads as \"the button did nothing\". Rejecting surfaces through the form's\n   * own error slot, so a `409` from an illegal transition renders as the coded\n   * message the catalog holds rather than a thrown promise nobody catches.\n   */\n  readonly runUseCase?: (key: string, id: EntityId) => Promise<void>;\n}\n\n/**\n * Props both hosts pass. A route host passes none — the slug comes from the URL\n * and a save returns to the list; the workspace tab host passes all of them.\n */\nexport interface EntityCrudSingleViewProps {\n  /** Defaults to the `[slug]` route param. */\n  readonly slug?: string;\n  /** Defaults to navigating back to the list. */\n  readonly onSaved?: () => void;\n  readonly onDeleted?: () => void;\n  /**\n   * Where to autosave the edit. Supplying it is the whole opt-in: the form\n   * seeds from the persisted draft, writes to it on every edit, and the page\n   * clears it once a save or delete commits.\n   *\n   * A route host omits it and stays ephemeral, which is the rule stated as a\n   * missing prop rather than as a flag — there is no value of \"absent\" that\n   * accidentally starts persisting.\n   */\n  readonly draft?: EntityDraftStore;\n}\n\n/**\n * What the factory returns: a **named descriptor**, not four loose components.\n *\n * The identity fields are here so the workspace registry and the nav are derived\n * from a list of these rather than from the hand-written const maps they replace\n * (#141).\n */\nexport interface EntityCrud<TEntity extends Entity> {\n  readonly entityConstructor: EntityConstructor<TEntity>;\n  /** `@entity({ key })`, which is also `catalogKey` and the tab address payload. */\n  readonly entityKey: EntityCatalogKey;\n  /**\n   * `@entity({ labelKey })` — how one record is named. A record tab's title.\n   *\n   * Read off the decorator rather than passed, so the tab strip, the nav and the\n   * search results all name the entity from the one place it names itself.\n   */\n  readonly entityLabelKey: string;\n  /** `@entity({ pluralKey })` — how the collection is named. A list tab's title. */\n  readonly entityPluralKey: string;\n  readonly basePath: string;\n  readonly ListPage: () => ReactElement;\n  readonly SingleViewPage: (props?: EntityCrudSingleViewProps) => ReactElement;\n}\n\n/**\n * A picker's transport with its context tags erased.\n *\n * The factory cannot preserve one type parameter per link — the pages that\n * build these know their adapters, the generated form only forwards them — and\n * `EntityForm.linkSources` is already `Record<string, EntityLinkSource<any>>`\n * for the same reason.\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport type AnyEntityLinkSourceConfig = EntityLinkSourceConfig<Entity, any>;\n\n/**\n * One picker, resolved: the descriptor computed once at factory time, and the\n * use-cases plus adapter context the page builds per render.\n */\nexport interface EntityCrudLinkSource {\n  readonly field: string;\n  readonly descriptor: EntityFieldDescriptor;\n  readonly config: AnyEntityLinkSourceConfig;\n}\n"],"names":[],"mappings":"AAwQA;;;CAGC,GACD,WAIC"}

package/dist/lib/crud/pending-notice.d.ts

@@ -0,0 +1,31 @@
+import type { PendingEntry } from '@entifix/transactions';
+export interface PendingNoticeProps {
+    /** This entity's in-flight and failed writes, newest last. */
+    entries: readonly PendingEntry[];
+    /** Retires a failure the operator has read. */
+    onDismiss: (transactionId: string) => void;
+    className?: string;
+}
+/**
+ * What became of the writes this browser started but the server has not
+ * finished.
+ *
+ * ⚠️ **This is the list's surface because the tab strip cannot be.** Only
+ * creates are transactional (`create: 'command'` fires on `isCreate` alone), and
+ * a create has no workspace tab — `EntityEditorTab` takes a required id, so
+ * `master:<key>` is the list and there is no address for a record that does not
+ * exist yet. A badge keyed on a pending record id would therefore be unreachable
+ * by construction, which is exactly the "declared, styled, never produced"
+ * defect ADR 0043 was written about. It renders here instead, where
+ * `afterSave()` actually puts the operator.
+ *
+ * `role="status"`, not `role="alert"` — the `BulkResult` reasoning: an outcome
+ * to read, not an interruption.
+ *
+ * The failure headline is a catalog key and never `entry.reason`, which is free
+ * text from whatever threw, in whatever language that code was written in. The
+ * reason is kept as secondary, explicitly-unlocalized detail; a translatable
+ * failure needs an error *code* on the event, which is ADR 0043's residual.
+ */
+export declare function PendingNotice({ entries, onDismiss, className, }: PendingNoticeProps): import("react").JSX.Element | null;
+//# sourceMappingURL=pending-notice.d.ts.map

package/dist/lib/crud/pending-notice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-notice.d.ts","sourceRoot":"","sources":["../../../src/lib/crud/pending-notice.tsx"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAE1D,MAAM,WAAW,kBAAkB;IACjC,8DAA8D;IAC9D,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;IACjC,+CAA+C;IAC/C,SAAS,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,aAAa,CAAC,EAC5B,OAAO,EACP,SAAS,EACT,SAAS,GACV,EAAE,kBAAkB,sCA0DpB"}

package/dist/lib/crud/pending-notice.js

@@ -0,0 +1,72 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Button, cn, useT } from '@entifix/react-controls/primitives';
+/**
+ * What became of the writes this browser started but the server has not
+ * finished.
+ *
+ * ⚠️ **This is the list's surface because the tab strip cannot be.** Only
+ * creates are transactional (`create: 'command'` fires on `isCreate` alone), and
+ * a create has no workspace tab — `EntityEditorTab` takes a required id, so
+ * `master:<key>` is the list and there is no address for a record that does not
+ * exist yet. A badge keyed on a pending record id would therefore be unreachable
+ * by construction, which is exactly the "declared, styled, never produced"
+ * defect ADR 0043 was written about. It renders here instead, where
+ * `afterSave()` actually puts the operator.
+ *
+ * `role="status"`, not `role="alert"` — the `BulkResult` reasoning: an outcome
+ * to read, not an interruption.
+ *
+ * The failure headline is a catalog key and never `entry.reason`, which is free
+ * text from whatever threw, in whatever language that code was written in. The
+ * reason is kept as secondary, explicitly-unlocalized detail; a translatable
+ * failure needs an error *code* on the event, which is ADR 0043's residual.
+ */ export function PendingNotice({ entries, onDismiss, className }) {
+    // The `shell` namespace: this copy lives in `shell.ts`, and `useT()` with no
+    // argument reads `controls` — which resolves nothing and renders the key.
+    const t = useT('shell');
+    const saving = entries.filter((entry)=>entry.state === 'pending');
+    const failed = entries.filter((entry)=>entry.state === 'failed');
+    if (saving.length === 0 && failed.length === 0) return null;
+    return /*#__PURE__*/ _jsxs("div", {
+        role: "status",
+        "aria-label": t('workspace.pendingLabel'),
+        "data-testid": "pending-notice",
+        className: cn('flex flex-col gap-2xs rounded-lg border border-border bg-surface-elevated px-s py-2xs', className),
+        children: [
+            saving.length > 0 && /*#__PURE__*/ _jsx("span", {
+                className: "text-step-sm text-content-muted",
+                children: t('workspace.savePending', {
+                    count: saving.length
+                })
+            }),
+            failed.map((entry)=>/*#__PURE__*/ _jsxs("div", {
+                    className: "flex flex-wrap items-center gap-2xs",
+                    children: [
+                        /*#__PURE__*/ _jsx("span", {
+                            className: "text-step-sm text-danger",
+                            children: t('workspace.saveFailed')
+                        }),
+                        entry.reason !== undefined && // Untranslated on purpose, and marked as such: it is a server
+                        // exception string, shown because a reason nobody can read is worse
+                        // than one in the wrong language.
+                        /*#__PURE__*/ _jsx("span", {
+                            lang: "und",
+                            className: "text-step-sm text-content-muted",
+                            "data-testid": "pending-notice-reason",
+                            children: entry.reason
+                        }),
+                        /*#__PURE__*/ _jsx(Button, {
+                            type: "button",
+                            variant: "ghost",
+                            size: "sm",
+                            onClick: ()=>onDismiss(entry.transactionId),
+                            children: t('workspace.saveFailedDismiss')
+                        })
+                    ]
+                }, entry.transactionId))
+        ]
+    });
+}
+
+//# sourceMappingURL=pending-notice.js.map

package/dist/lib/crud/pending-notice.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/lib/crud/pending-notice.tsx"],"sourcesContent":["'use client';\n\nimport { Button, cn, useT } from '@entifix/react-controls/primitives';\nimport type { PendingEntry } from '@entifix/transactions';\n\nexport interface PendingNoticeProps {\n  /** This entity's in-flight and failed writes, newest last. */\n  entries: readonly PendingEntry[];\n  /** Retires a failure the operator has read. */\n  onDismiss: (transactionId: string) => void;\n  className?: string;\n}\n\n/**\n * What became of the writes this browser started but the server has not\n * finished.\n *\n * ⚠️ **This is the list's surface because the tab strip cannot be.** Only\n * creates are transactional (`create: 'command'` fires on `isCreate` alone), and\n * a create has no workspace tab — `EntityEditorTab` takes a required id, so\n * `master:<key>` is the list and there is no address for a record that does not\n * exist yet. A badge keyed on a pending record id would therefore be unreachable\n * by construction, which is exactly the \"declared, styled, never produced\"\n * defect ADR 0043 was written about. It renders here instead, where\n * `afterSave()` actually puts the operator.\n *\n * `role=\"status\"`, not `role=\"alert\"` — the `BulkResult` reasoning: an outcome\n * to read, not an interruption.\n *\n * The failure headline is a catalog key and never `entry.reason`, which is free\n * text from whatever threw, in whatever language that code was written in. The\n * reason is kept as secondary, explicitly-unlocalized detail; a translatable\n * failure needs an error *code* on the event, which is ADR 0043's residual.\n */\nexport function PendingNotice({\n  entries,\n  onDismiss,\n  className,\n}: PendingNoticeProps) {\n  // The `shell` namespace: this copy lives in `shell.ts`, and `useT()` with no\n  // argument reads `controls` — which resolves nothing and renders the key.\n  const t = useT('shell');\n\n  const saving = entries.filter(entry => entry.state === 'pending');\n  const failed = entries.filter(entry => entry.state === 'failed');\n\n  if (saving.length === 0 && failed.length === 0) return null;\n\n  return (\n    <div\n      role=\"status\"\n      aria-label={t('workspace.pendingLabel')}\n      data-testid=\"pending-notice\"\n      className={cn(\n        'flex flex-col gap-2xs rounded-lg border border-border bg-surface-elevated px-s py-2xs',\n        className,\n      )}\n    >\n      {saving.length > 0 && (\n        <span className=\"text-step-sm text-content-muted\">\n          {t('workspace.savePending', { count: saving.length })}\n        </span>\n      )}\n\n      {failed.map(entry => (\n        <div\n          key={entry.transactionId}\n          className=\"flex flex-wrap items-center gap-2xs\"\n        >\n          <span className=\"text-step-sm text-danger\">\n            {t('workspace.saveFailed')}\n          </span>\n          {entry.reason !== undefined && (\n            // Untranslated on purpose, and marked as such: it is a server\n            // exception string, shown because a reason nobody can read is worse\n            // than one in the wrong language.\n            <span\n              lang=\"und\"\n              className=\"text-step-sm text-content-muted\"\n              data-testid=\"pending-notice-reason\"\n            >\n              {entry.reason}\n            </span>\n          )}\n          <Button\n            type=\"button\"\n            variant=\"ghost\"\n            size=\"sm\"\n            onClick={() => onDismiss(entry.transactionId)}\n          >\n            {t('workspace.saveFailedDismiss')}\n          </Button>\n        </div>\n      ))}\n    </div>\n  );\n}\n"],"names":["Button","cn","useT","PendingNotice","entries","onDismiss","className","t","saving","filter","entry","state","failed","length","div","role","aria-label","data-testid","span","count","map","reason","undefined","lang","type","variant","size","onClick","transactionId"],"mappings":"AAAA;;AAEA,SAASA,MAAM,EAAEC,EAAE,EAAEC,IAAI,QAAQ,qCAAqC;AAWtE;;;;;;;;;;;;;;;;;;;;CAoBC,GACD,OAAO,SAASC,cAAc,EAC5BC,OAAO,EACPC,SAAS,EACTC,SAAS,EACU;IACnB,6EAA6E;IAC7E,0EAA0E;IAC1E,MAAMC,IAAIL,KAAK;IAEf,MAAMM,SAASJ,QAAQK,MAAM,CAACC,CAAAA,QAASA,MAAMC,KAAK,KAAK;IACvD,MAAMC,SAASR,QAAQK,MAAM,CAACC,CAAAA,QAASA,MAAMC,KAAK,KAAK;IAEvD,IAAIH,OAAOK,MAAM,KAAK,KAAKD,OAAOC,MAAM,KAAK,GAAG,OAAO;IAEvD,qBACE,MAACC;QACCC,MAAK;QACLC,cAAYT,EAAE;QACdU,eAAY;QACZX,WAAWL,GACT,yFACAK;;YAGDE,OAAOK,MAAM,GAAG,mBACf,KAACK;gBAAKZ,WAAU;0BACbC,EAAE,yBAAyB;oBAAEY,OAAOX,OAAOK,MAAM;gBAAC;;YAItDD,OAAOQ,GAAG,CAACV,CAAAA,sBACV,MAACI;oBAECR,WAAU;;sCAEV,KAACY;4BAAKZ,WAAU;sCACbC,EAAE;;wBAEJG,MAAMW,MAAM,KAAKC,aAChB,8DAA8D;wBAC9D,oEAAoE;wBACpE,kCAAkC;sCAClC,KAACJ;4BACCK,MAAK;4BACLjB,WAAU;4BACVW,eAAY;sCAEXP,MAAMW,MAAM;;sCAGjB,KAACrB;4BACCwB,MAAK;4BACLC,SAAQ;4BACRC,MAAK;4BACLC,SAAS,IAAMtB,UAAUK,MAAMkB,aAAa;sCAE3CrB,EAAE;;;mBAxBAG,MAAMkB,aAAa;;;AA8BlC"}

package/dist/lib/crud/slug.d.ts

@@ -0,0 +1,13 @@
+import type { EntityId } from '@entifix/core';
+/**
+ * The `[slug]` value that means "create" rather than an existing record, as in
+ * `/catalog/product/new`. Reserving this one literal is the cost of addressing
+ * the create form through the same dynamic segment as every record.
+ */
+export declare const CATALOG_NEW_SLUG = "new";
+/**
+ * Maps a route slug to the id of the record to load. `undefined` means there is
+ * nothing to load — the create case.
+ */
+export declare function slugToEntityId(slug: string | undefined): EntityId;
+//# sourceMappingURL=slug.d.ts.map

package/dist/lib/crud/slug.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slug.d.ts","sourceRoot":"","sources":["../../../src/lib/crud/slug.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,QAAQ,CAAC;AAEtC;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAEjE"}

package/dist/lib/crud/slug.js

@@ -0,0 +1,13 @@
+/**
+ * The `[slug]` value that means "create" rather than an existing record, as in
+ * `/catalog/product/new`. Reserving this one literal is the cost of addressing
+ * the create form through the same dynamic segment as every record.
+ */ export const CATALOG_NEW_SLUG = 'new';
+/**
+ * Maps a route slug to the id of the record to load. `undefined` means there is
+ * nothing to load — the create case.
+ */ export function slugToEntityId(slug) {
+    return slug == null || slug === CATALOG_NEW_SLUG ? undefined : slug;
+}
+
+//# sourceMappingURL=slug.js.map

package/dist/lib/crud/slug.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/lib/crud/slug.ts"],"sourcesContent":["import type { EntityId } from '@entifix/core';\n\n/**\n * The `[slug]` value that means \"create\" rather than an existing record, as in\n * `/catalog/product/new`. Reserving this one literal is the cost of addressing\n * the create form through the same dynamic segment as every record.\n */\nexport const CATALOG_NEW_SLUG = 'new';\n\n/**\n * Maps a route slug to the id of the record to load. `undefined` means there is\n * nothing to load — the create case.\n */\nexport function slugToEntityId(slug: string | undefined): EntityId {\n  return slug == null || slug === CATALOG_NEW_SLUG ? undefined : slug;\n}\n"],"names":["CATALOG_NEW_SLUG","slugToEntityId","slug","undefined"],"mappings":"AAEA;;;;CAIC,GACD,OAAO,MAAMA,mBAAmB,MAAM;AAEtC;;;CAGC,GACD,OAAO,SAASC,eAAeC,IAAwB;IACrD,OAAOA,QAAQ,QAAQA,SAASF,mBAAmBG,YAAYD;AACjE"}

package/dist/lib/crud/use-entity-affordances.d.ts

@@ -0,0 +1,20 @@
+import type { Entity, EntityConstructor, EntityMetadataDocument, EntityMetadataSource } from '@entifix/core';
+/** What a surface needs to render an entity's served affordances. */
+export interface EntityAffordances {
+    metadata?: EntityMetadataDocument;
+    isMetadataLoading: boolean;
+}
+/**
+ * Reads what this caller may do with an entity, in the shape a surface spreads.
+ *
+ * A thin rename over `useEntityUseCases` — `isLoading` becomes
+ * `isMetadataLoading` — so a page can spread the result straight into
+ * `EntityForm` or `EntityTable` beside its other props, rather than restating
+ * two lines at every call site. An absent source is the hook's own business.
+ *
+ * Absent metadata is **not** a security posture: it is the shape both surfaces
+ * read as "behave exactly as before ADR 0026". The route guard is the
+ * authorization boundary.
+ */
+export declare function useEntityAffordances<TEntity extends Entity>(entityConstructor: EntityConstructor<TEntity>, source: EntityMetadataSource | undefined): EntityAffordances;
+//# sourceMappingURL=use-entity-affordances.d.ts.map

package/dist/lib/crud/use-entity-affordances.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-entity-affordances.d.ts","sourceRoot":"","sources":["../../../src/lib/crud/use-entity-affordances.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,MAAM,EACN,iBAAiB,EACjB,sBAAsB,EACtB,oBAAoB,EACrB,MAAM,eAAe,CAAC;AAGvB,qEAAqE;AACrE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,SAAS,MAAM,EACzD,iBAAiB,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAC7C,MAAM,EAAE,oBAAoB,GAAG,SAAS,GACvC,iBAAiB,CAInB"}

package/dist/lib/crud/use-entity-affordances.js

@@ -0,0 +1,22 @@
+'use client';
+import { useEntityUseCases } from '@entifix/react-integration';
+/**
+ * Reads what this caller may do with an entity, in the shape a surface spreads.
+ *
+ * A thin rename over `useEntityUseCases` — `isLoading` becomes
+ * `isMetadataLoading` — so a page can spread the result straight into
+ * `EntityForm` or `EntityTable` beside its other props, rather than restating
+ * two lines at every call site. An absent source is the hook's own business.
+ *
+ * Absent metadata is **not** a security posture: it is the shape both surfaces
+ * read as "behave exactly as before ADR 0026". The route guard is the
+ * authorization boundary.
+ */ export function useEntityAffordances(entityConstructor, source) {
+    const { metadata, isLoading } = useEntityUseCases(entityConstructor, source);
+    return {
+        metadata,
+        isMetadataLoading: isLoading
+    };
+}
+
+//# sourceMappingURL=use-entity-affordances.js.map

package/dist/lib/crud/use-entity-affordances.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/lib/crud/use-entity-affordances.ts"],"sourcesContent":["'use client';\n\nimport type {\n  Entity,\n  EntityConstructor,\n  EntityMetadataDocument,\n  EntityMetadataSource,\n} from '@entifix/core';\nimport { useEntityUseCases } from '@entifix/react-integration';\n\n/** What a surface needs to render an entity's served affordances. */\nexport interface EntityAffordances {\n  metadata?: EntityMetadataDocument;\n  isMetadataLoading: boolean;\n}\n\n/**\n * Reads what this caller may do with an entity, in the shape a surface spreads.\n *\n * A thin rename over `useEntityUseCases` — `isLoading` becomes\n * `isMetadataLoading` — so a page can spread the result straight into\n * `EntityForm` or `EntityTable` beside its other props, rather than restating\n * two lines at every call site. An absent source is the hook's own business.\n *\n * Absent metadata is **not** a security posture: it is the shape both surfaces\n * read as \"behave exactly as before ADR 0026\". The route guard is the\n * authorization boundary.\n */\nexport function useEntityAffordances<TEntity extends Entity>(\n  entityConstructor: EntityConstructor<TEntity>,\n  source: EntityMetadataSource | undefined,\n): EntityAffordances {\n  const { metadata, isLoading } = useEntityUseCases(entityConstructor, source);\n\n  return { metadata, isMetadataLoading: isLoading };\n}\n"],"names":["useEntityUseCases","useEntityAffordances","entityConstructor","source","metadata","isLoading","isMetadataLoading"],"mappings":"AAAA;AAQA,SAASA,iBAAiB,QAAQ,6BAA6B;AAQ/D;;;;;;;;;;;CAWC,GACD,OAAO,SAASC,qBACdC,iBAA6C,EAC7CC,MAAwC;IAExC,MAAM,EAAEC,QAAQ,EAAEC,SAAS,EAAE,GAAGL,kBAAkBE,mBAAmBC;IAErE,OAAO;QAAEC;QAAUE,mBAAmBD;IAAU;AAClD"}

package/dist/lib/crud/use-entity-bulk.d.ts

@@ -0,0 +1,43 @@
+import { type BulkOutcome, type Entity, type EntityId, type EntitySelection } from '@entifix/core';
+export interface UseEntityBulkOptions<TEntity extends Entity> {
+    /**
+     * Runs one `collection`-bound verb. Absent means this listing has no bulk
+     * actions, and no selection column is rendered at all.
+     */
+    readonly run?: (key: string, selection: EntitySelection<TEntity>) => Promise<readonly BulkOutcome[]>;
+    /** Called after a run, so the listing can re-read the rows it just changed. */
+    readonly onCompleted?: () => void;
+    /** The whole request failed — a transport error, not a per-row outcome. */
+    readonly onError?: (error: unknown) => void;
+}
+/** The props {@link useEntityBulk} contributes to `EntityTable`. */
+export interface EntityBulkTableProps<TEntity extends Entity> {
+    selection?: EntitySelection<TEntity>;
+    onSelectionChange?: (selection: EntitySelection<TEntity>) => void;
+    onBulkUseCase?: (key: string, selection: EntitySelection<TEntity>) => void;
+    bulkOutcomes?: readonly BulkOutcome[];
+    onBulkDismiss?: () => void;
+    onBulkRetry?: (ids: EntityId[]) => void;
+    isBulkRunning?: boolean;
+}
+/**
+ * Owns a listing's selection and the result of the last bulk run.
+ *
+ * The selection lives here rather than inside `EntityTable` because it has to
+ * survive pagination, and the page owns the pager — a selection reset by the
+ * very navigation used to add to it would make "select rows across pages"
+ * impossible.
+ *
+ * Two behaviours worth not re-deriving. **The selection survives the action**
+ * (#121): after a run the rows stay ticked, because the operator's next act is
+ * usually to retry the failures or to run a second verb on the same rows, and
+ * re-selecting forty rows to do it is the whole cost the bulk bar exists to
+ * remove. And **a retry re-runs only the failures**, as an `ids` selection
+ * built from the outcomes — never the original selection, which would redo the
+ * successful rows and, for a `matching` selection, re-resolve a filter whose
+ * answer has just changed underneath it.
+ */
+export declare function useEntityBulk<TEntity extends Entity>({ run, onCompleted, onError, }: UseEntityBulkOptions<TEntity>): {
+    tableProps: EntityBulkTableProps<TEntity>;
+};
+//# sourceMappingURL=use-entity-bulk.d.ts.map

package/dist/lib/crud/use-entity-bulk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-entity-bulk.d.ts","sourceRoot":"","sources":["../../../src/lib/crud/use-entity-bulk.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,WAAW,EAEhB,KAAK,MAAM,EACX,KAAK,QAAQ,EACb,KAAK,eAAe,EACrB,MAAM,eAAe,CAAC;AAWvB,MAAM,WAAW,oBAAoB,CAAC,OAAO,SAAS,MAAM;IAC1D;;;OAGG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,CACb,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,KAChC,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CAAC;IACrC,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;IAClC,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CAC7C;AAED,oEAAoE;AACpE,MAAM,WAAW,oBAAoB,CAAC,OAAO,SAAS,MAAM;IAC1D,SAAS,CAAC,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;IACrC,iBAAiB,CAAC,EAAE,CAAC,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IAClE,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IAC3E,YAAY,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;IACtC,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,IAAI,CAAC;IACxC,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,aAAa,CAAC,OAAO,SAAS,MAAM,EAAE,EACpD,GAAG,EACH,WAAW,EACX,OAAO,GACR,EAAE,oBAAoB,CAAC,OAAO,CAAC,GAAG;IACjC,UAAU,EAAE,oBAAoB,CAAC,OAAO,CAAC,CAAC;CAC3C,CAsFA"}