@freighttech/ui 0.13.18

package/dist/backend/dynamic-table/server/filterSuggestions.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/backend/dynamic-table/server/filterSuggestions.ts"],
+  "sourcesContent": ["/**\n * Shared primitive for DynamicTable filter-value suggestions.\n *\n * Why this exists instead of `/api/entities/filter-suggestions`:\n *\n *  1. The generic endpoint SAMPLES rather than aggregating \u2014 it pulls\n *     `pageSize: limit * 2` rows and de-duplicates whatever came back. On a\n *     skewed column that hides most values: on production, `invoice.source`\n *     returned a single suggestion while the table actually holds three\n *     (finance 8,499 / document 675 / ksef 66), because the first 100 rows were\n *     all `finance`.\n *  2. It resolves fields off the entity's own table, so any column the list\n *     denormalises (a joined contractor name, a container number living on a\n *     child unit) yields `[]` \u2014 and it fails *silently*, so the picker just\n *     looks empty rather than erroring.\n *\n * `distinctColumnValues` runs a real `SELECT DISTINCT` against a named\n * table/column, always constrained by the caller's scope, so every list can\n * offer the same suggestion behaviour regardless of where its data lives.\n */\n\n/** Postgres identifier: letters, digits, underscore; not starting with a digit. */\nconst IDENTIFIER = /^[a-z_][a-z0-9_]*$/i\n\nfunction assertIdentifier(kind: 'table' | 'column', value: string): string {\n  if (!IDENTIFIER.test(value)) {\n    throw new Error(`Unsafe ${kind} identifier for filter suggestions: ${JSON.stringify(value)}`)\n  }\n  return `\"${value}\"`\n}\n\nexport interface DistinctColumnValuesOptions {\n  /** MikroORM EntityManager (uses its underlying connection). */\n  em: { getConnection: () => { execute: (sql: string, params?: unknown[]) => Promise<unknown> } }\n  /** Physical table name. Caller-controlled \u2014 never user input. */\n  table: string\n  /**\n   * Physical column(s) to aggregate. Caller-controlled \u2014 never user input.\n   * Pass several when one grid column is fed by more than one DB column: the\n   * invoice list's \"counterparty\" is `seller_name` for incoming invoices and\n   * `buyer_name` for outgoing ones, so both have to be offered.\n   */\n  column: string | string[]\n  /**\n   * Scope predicate as physical column \u2192 value. `null` means `IS NULL` (used\n   * for `deleted_at`), an array becomes `IN (...)`. Values are parameterised.\n   */\n  scope?: Record<string, string | string[] | null | undefined>\n  /** Optional case-insensitive substring the value must contain. */\n  query?: string\n  /** Max suggestions returned. Defaults to 50, hard-capped at 200. */\n  limit?: number\n  /**\n   * Optional join, for columns that live on a related table\n   * (e.g. suggesting a contractor name for a folder list).\n   */\n  join?: { table: string; on: string; foreign: string }\n}\n\n/**\n * Distinct, non-empty, alphabetically ordered values for one column.\n *\n * Returns `[]` rather than throwing when the table is unreachable \u2014 a missing\n * suggestion list must never take down the list page that requested it.\n */\nexport async function distinctColumnValues(opts: DistinctColumnValuesOptions): Promise<string[]> {\n  const limit = Math.min(Math.max(opts.limit ?? 50, 1), 200)\n  const base = assertIdentifier('table', opts.table)\n  const columns = (Array.isArray(opts.column) ? opts.column : [opts.column])\n    .map((c) => assertIdentifier('column', c))\n  if (columns.length === 0) return []\n\n  const params: unknown[] = []\n  const where: string[] = []\n  let from = `${base} AS t`\n  let prefix = 't'\n\n  if (opts.join) {\n    const jt = assertIdentifier('table', opts.join.table)\n    const on = assertIdentifier('column', opts.join.on)\n    const foreign = assertIdentifier('column', opts.join.foreign)\n    from = `${base} AS t INNER JOIN ${jt} AS j ON j.${foreign} = t.${on}`\n    prefix = 'j'\n  }\n\n  // One grid column, possibly several DB columns: unnest keeps the scope\n  // predicate (and its bound parameters) written exactly once.\n  const target = columns.length === 1\n    ? `${prefix}.${columns[0]}`\n    : `unnest(ARRAY[${columns.map((c) => `${prefix}.${c}::text`).join(', ')}])`\n\n  for (const [rawColumn, value] of Object.entries(opts.scope ?? {})) {\n    if (value === undefined) continue\n    const scoped = `t.${assertIdentifier('column', rawColumn)}`\n    if (value === null) {\n      where.push(`${scoped} IS NULL`)\n    } else if (Array.isArray(value)) {\n      // An empty allow-list means \"no rows in scope\" \u2014 not \"no constraint\".\n      if (value.length === 0) return []\n      const holes = value.map((entry) => {\n        params.push(entry)\n        return '?'\n      })\n      where.push(`${scoped} IN (${holes.join(', ')})`)\n    } else {\n      params.push(value)\n      where.push(`${scoped} = ?`)\n    }\n  }\n\n  // `unnest` is a set-returning function and cannot sit in WHERE, so the\n  // multi-column form selects into a subquery and filters the flattened value\n  // outside it. Scope predicates stay inside either way \u2014 they must be applied\n  // before the columns are flattened, and their parameters bind first.\n  const needle = (opts.query ?? '').trim()\n  const scopeWhere = where.length > 0 ? `WHERE ${where.join(' AND ')} ` : ''\n\n  const outer: string[] = ['value IS NOT NULL', \"btrim(value) <> ''\"]\n  let sql: string\n  if (columns.length === 1) {\n    if (needle) params.push(`%${needle}%`)\n    const outerSql = [...outer, ...(needle ? ['value ILIKE ?'] : [])].join(' AND ')\n    sql =\n      `SELECT DISTINCT value FROM (SELECT ${target}::text AS value FROM ${from} ${scopeWhere}) s ` +\n      `WHERE ${outerSql} ORDER BY value ASC LIMIT ?`\n  } else {\n    if (needle) params.push(`%${needle}%`)\n    const outerSql = [...outer, ...(needle ? ['value ILIKE ?'] : [])].join(' AND ')\n    sql =\n      `SELECT DISTINCT value FROM (SELECT ${target} AS value FROM ${from} ${scopeWhere}) s ` +\n      `WHERE ${outerSql} ORDER BY value ASC LIMIT ?`\n  }\n  params.push(limit)\n\n  try {\n    const rows = (await opts.em.getConnection().execute(sql, params)) as Array<{ value: string }>\n    return Array.isArray(rows) ? rows.map((r) => r.value).filter(Boolean) : []\n  } catch (err) {\n    // A missing suggestion list must never take down the list page, so this\n    // still degrades to []. But it does NOT swallow the reason: a broken query\n    // here is indistinguishable from \"this column has no values\", and that cost\n    // a full release cycle once already \u2014 every endpoint answered 200 with an\n    // empty list and looked correctly wired.\n    console.error(\n      `[filter-suggestions] query failed for ${opts.table}.${opts.column}:`,\n      err instanceof Error ? err.message : err,\n    )\n    return []\n  }\n}\n"],
+  "mappings": "AAsBA,MAAM,aAAa;AAEnB,SAAS,iBAAiB,MAA0B,OAAuB;AACzE,MAAI,CAAC,WAAW,KAAK,KAAK,GAAG;AAC3B,UAAM,IAAI,MAAM,UAAU,IAAI,uCAAuC,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,EAC9F;AACA,SAAO,IAAI,KAAK;AAClB;AAoCA,eAAsB,qBAAqB,MAAsD;AAC/F,QAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,KAAK,SAAS,IAAI,CAAC,GAAG,GAAG;AACzD,QAAM,OAAO,iBAAiB,SAAS,KAAK,KAAK;AACjD,QAAM,WAAW,MAAM,QAAQ,KAAK,MAAM,IAAI,KAAK,SAAS,CAAC,KAAK,MAAM,GACrE,IAAI,CAAC,MAAM,iBAAiB,UAAU,CAAC,CAAC;AAC3C,MAAI,QAAQ,WAAW,EAAG,QAAO,CAAC;AAElC,QAAM,SAAoB,CAAC;AAC3B,QAAM,QAAkB,CAAC;AACzB,MAAI,OAAO,GAAG,IAAI;AAClB,MAAI,SAAS;AAEb,MAAI,KAAK,MAAM;AACb,UAAM,KAAK,iBAAiB,SAAS,KAAK,KAAK,KAAK;AACpD,UAAM,KAAK,iBAAiB,UAAU,KAAK,KAAK,EAAE;AAClD,UAAM,UAAU,iBAAiB,UAAU,KAAK,KAAK,OAAO;AAC5D,WAAO,GAAG,IAAI,oBAAoB,EAAE,cAAc,OAAO,QAAQ,EAAE;AACnE,aAAS;AAAA,EACX;AAIA,QAAM,SAAS,QAAQ,WAAW,IAC9B,GAAG,MAAM,IAAI,QAAQ,CAAC,CAAC,KACvB,gBAAgB,QAAQ,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC;AAEzE,aAAW,CAAC,WAAW,KAAK,KAAK,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,GAAG;AACjE,QAAI,UAAU,OAAW;AACzB,UAAM,SAAS,KAAK,iBAAiB,UAAU,SAAS,CAAC;AACzD,QAAI,UAAU,MAAM;AAClB,YAAM,KAAK,GAAG,MAAM,UAAU;AAAA,IAChC,WAAW,MAAM,QAAQ,KAAK,GAAG;AAE/B,UAAI,MAAM,WAAW,EAAG,QAAO,CAAC;AAChC,YAAM,QAAQ,MAAM,IAAI,CAAC,UAAU;AACjC,eAAO,KAAK,KAAK;AACjB,eAAO;AAAA,MACT,CAAC;AACD,YAAM,KAAK,GAAG,MAAM,QAAQ,MAAM,KAAK,IAAI,CAAC,GAAG;AAAA,IACjD,OAAO;AACL,aAAO,KAAK,KAAK;AACjB,YAAM,KAAK,GAAG,MAAM,MAAM;AAAA,IAC5B;AAAA,EACF;AAMA,QAAM,UAAU,KAAK,SAAS,IAAI,KAAK;AACvC,QAAM,aAAa,MAAM,SAAS,IAAI,SAAS,MAAM,KAAK,OAAO,CAAC,MAAM;AAExE,QAAM,QAAkB,CAAC,qBAAqB,oBAAoB;AAClE,MAAI;AACJ,MAAI,QAAQ,WAAW,GAAG;AACxB,QAAI,OAAQ,QAAO,KAAK,IAAI,MAAM,GAAG;AACrC,UAAM,WAAW,CAAC,GAAG,OAAO,GAAI,SAAS,CAAC,eAAe,IAAI,CAAC,CAAE,EAAE,KAAK,OAAO;AAC9E,UACE,sCAAsC,MAAM,wBAAwB,IAAI,IAAI,UAAU,aAC7E,QAAQ;AAAA,EACrB,OAAO;AACL,QAAI,OAAQ,QAAO,KAAK,IAAI,MAAM,GAAG;AACrC,UAAM,WAAW,CAAC,GAAG,OAAO,GAAI,SAAS,CAAC,eAAe,IAAI,CAAC,CAAE,EAAE,KAAK,OAAO;AAC9E,UACE,sCAAsC,MAAM,kBAAkB,IAAI,IAAI,UAAU,aACvE,QAAQ;AAAA,EACrB;AACA,SAAO,KAAK,KAAK;AAEjB,MAAI;AACF,UAAM,OAAQ,MAAM,KAAK,GAAG,cAAc,EAAE,QAAQ,KAAK,MAAM;AAC/D,WAAO,MAAM,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,OAAO,IAAI,CAAC;AAAA,EAC3E,SAAS,KAAK;AAMZ,YAAQ;AAAA,MACN,yCAAyC,KAAK,KAAK,IAAI,KAAK,MAAM;AAAA,MAClE,eAAe,QAAQ,IAAI,UAAU;AAAA,IACvC;AACA,WAAO,CAAC;AAAA,EACV;AACF;",
+  "names": []
+}

package/dist/backend/dynamic-table/server/index.js

@@ -0,0 +1,47 @@
+import { makeDynamicTableRoute } from "./makeDynamicTableRoute.js";
+import {
+  parseFilterRow,
+  parseDynamicTableFilters
+} from "./filterParser.js";
+import {
+  DATE_WINDOW_OPERATORS,
+  isDateWindowOperator,
+  resolveDateWindow
+} from "./dateWindows.js";
+import { distinctColumnValues } from "./filterSuggestions.js";
+import {
+  MAX_AGGREGATE_ENTRIES,
+  MAX_AGGREGATE_PARAM_LENGTH,
+  AggregateSpecError,
+  AggregateScopeError,
+  aggregateKey,
+  buildAggregateSelect,
+  buildAggregateWhere,
+  makeColumnResolver,
+  mapAggregateRow,
+  parseAggregateSpec,
+  runAggregate,
+  tenancyFromRouteContext
+} from "./aggregate.js";
+export {
+  AggregateScopeError,
+  AggregateSpecError,
+  DATE_WINDOW_OPERATORS,
+  MAX_AGGREGATE_ENTRIES,
+  MAX_AGGREGATE_PARAM_LENGTH,
+  aggregateKey,
+  buildAggregateSelect,
+  buildAggregateWhere,
+  distinctColumnValues,
+  isDateWindowOperator,
+  makeColumnResolver,
+  makeDynamicTableRoute,
+  mapAggregateRow,
+  parseAggregateSpec,
+  parseDynamicTableFilters,
+  parseFilterRow,
+  resolveDateWindow,
+  runAggregate,
+  tenancyFromRouteContext
+};
+//# sourceMappingURL=index.js.map

package/dist/backend/dynamic-table/server/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/backend/dynamic-table/server/index.ts"],
+  "sourcesContent": ["export { makeDynamicTableRoute } from './makeDynamicTableRoute'\nexport type {\n  DynamicTableRouteConfig,\n  DynamicTableRouteOrmConfig,\n  DynamicTableRouteCtx,\n  DynamicTableRouteMethodMetadata,\n  DynamicTableRouteUpdateConfig,\n  DynamicTableRouteCreateConfig,\n  DynamicTableRouteDeleteConfig,\n} from './makeDynamicTableRoute'\n\nexport {\n  parseFilterRow,\n  parseDynamicTableFilters,\n} from './filterParser'\nexport type { DynamicTableFilterRow } from './filterParser'\n\nexport {\n  DATE_WINDOW_OPERATORS,\n  isDateWindowOperator,\n  resolveDateWindow,\n} from './dateWindows'\nexport type { DateWindow, DateWindowOperator } from './dateWindows'\n\nexport { distinctColumnValues } from './filterSuggestions'\nexport type { DistinctColumnValuesOptions } from './filterSuggestions'\n\nexport {\n  MAX_AGGREGATE_ENTRIES,\n  MAX_AGGREGATE_PARAM_LENGTH,\n  AggregateSpecError,\n  AggregateScopeError,\n  aggregateKey,\n  buildAggregateSelect,\n  buildAggregateWhere,\n  makeColumnResolver,\n  mapAggregateRow,\n  parseAggregateSpec,\n  runAggregate,\n  tenancyFromRouteContext,\n} from './aggregate'\nexport type {\n  AggregateEntry,\n  AggregateSelectPlan,\n  AggregateTenancy,\n  RunAggregateOptions,\n} from './aggregate'\n"],
+  "mappings": "AAAA,SAAS,6BAA6B;AAWtC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,SAAS,4BAA4B;AAGrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;",
+  "names": []
+}

package/dist/backend/dynamic-table/server/makeDynamicTableRoute.js

@@ -0,0 +1,270 @@
+import { z } from "zod";
+import { NextResponse } from "next/server.js";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { parseDynamicTableFilters } from "./filterParser.js";
+import {
+  AggregateSpecError,
+  parseAggregateSpec,
+  runAggregate,
+  tenancyFromRouteContext
+} from "./aggregate.js";
+const listQuerySchema = z.object({
+  page: z.coerce.number().min(1).default(1),
+  limit: z.coerce.number().min(1).max(100).default(50),
+  q: z.string().optional(),
+  sortField: z.string().optional().default("id"),
+  sortDir: z.enum(["asc", "desc"]).optional().default("asc"),
+  filters: z.string().optional(),
+  /** `field:fn,field:fn` — see `server/aggregate.ts`. Capped there too. */
+  aggregate: z.string().max(500).optional()
+}).passthrough();
+async function resolveContext(request) {
+  const auth = await getAuthFromRequest(request);
+  if (!auth) return null;
+  const container = await createRequestContainer();
+  const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
+  const em = container.resolve("em");
+  const tenantId = auth.actorTenantId || auth.tenantId;
+  const organizationId = auth.actorOrgId || auth.orgId;
+  const allowedOrgIds = /* @__PURE__ */ new Set();
+  if (scope?.filterIds?.length) {
+    scope.filterIds.forEach((id) => {
+      if (typeof id === "string") allowedOrgIds.add(id);
+    });
+  } else if (typeof auth.actorOrgId === "string") {
+    allowedOrgIds.add(auth.actorOrgId);
+  } else if (typeof auth.orgId === "string") {
+    allowedOrgIds.add(auth.orgId);
+  }
+  return { auth, container, em, scope, tenantId, organizationId, allowedOrgIds, request };
+}
+function buildScopeFilters(ctx, orm) {
+  const filters = {};
+  const softDeleteField = orm.softDeleteField === void 0 ? "deletedAt" : orm.softDeleteField;
+  if (softDeleteField) {
+    filters[softDeleteField] = null;
+  }
+  const tenantField = orm.tenantField === void 0 ? "tenantId" : orm.tenantField;
+  if (tenantField && ctx.tenantId) {
+    filters[tenantField] = ctx.tenantId;
+  }
+  const orgField = orm.orgField === void 0 ? "organizationId" : orm.orgField;
+  if (orgField && ctx.allowedOrgIds.size) {
+    filters[orgField] = { $in: [...ctx.allowedOrgIds] };
+  }
+  return filters;
+}
+function makeDynamicTableRoute(config) {
+  const { orm, fieldMap, transformItem } = config;
+  async function GET(request) {
+    const ctx = await resolveContext(request);
+    if (!ctx) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const url = new URL(request.url);
+    const rawQuery = {};
+    url.searchParams.forEach((value, key) => {
+      rawQuery[key] = value;
+    });
+    const parse = listQuerySchema.safeParse(rawQuery);
+    if (!parse.success) {
+      return NextResponse.json(
+        { error: "Invalid query parameters", details: parse.error },
+        { status: 400 }
+      );
+    }
+    const query = parse.data;
+    const filters = buildScopeFilters(ctx, orm);
+    if (config.buildFilters) {
+      Object.assign(filters, config.buildFilters(rawQuery, ctx));
+    }
+    if (query.q && query.q.trim() && config.search) {
+      const searchFilters = config.search(query.q.trim());
+      Object.assign(filters, searchFilters);
+    }
+    if (query.filters) {
+      try {
+        const dynamicFilters = JSON.parse(query.filters);
+        if (dynamicFilters.length > 0) {
+          const parsedFilters = parseDynamicTableFilters(dynamicFilters, fieldMap);
+          if (parsedFilters.length > 0) {
+            filters.$and = [
+              ...filters.$and || [],
+              ...parsedFilters
+            ];
+          }
+        }
+      } catch {
+      }
+    }
+    const sortField = fieldMap[query.sortField] || fieldMap[Object.keys(fieldMap)[0]] || "id";
+    const sortDir = query.sortDir || "asc";
+    const [entities, total] = await ctx.em.findAndCount(orm.entity, filters, {
+      orderBy: { [sortField]: sortDir },
+      limit: query.limit,
+      offset: (query.page - 1) * query.limit
+    });
+    let items = entities.map(transformItem);
+    if (config.afterList) {
+      items = await config.afterList(items, ctx);
+    }
+    let aggregate;
+    if (query.aggregate) {
+      let entries;
+      try {
+        entries = parseAggregateSpec(query.aggregate, fieldMap);
+      } catch (err) {
+        if (err instanceof AggregateSpecError) {
+          return NextResponse.json({ error: err.message }, { status: 400 });
+        }
+        throw err;
+      }
+      if (entries.length > 0) {
+        aggregate = await runAggregate({
+          em: ctx.em,
+          entity: orm.entity,
+          where: filters,
+          tenancy: tenancyFromRouteContext(ctx, orm),
+          entries
+        });
+      }
+    }
+    return NextResponse.json({
+      items,
+      total,
+      page: query.page,
+      limit: query.limit,
+      totalPages: Math.ceil(total / query.limit),
+      ...aggregate ? { aggregate } : {}
+    });
+  }
+  async function POST(request) {
+    if (!config.create) {
+      return NextResponse.json({ error: "Method not allowed" }, { status: 405 });
+    }
+    const ctx = await resolveContext(request);
+    if (!ctx) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    if (!ctx.tenantId || !ctx.organizationId) {
+      return NextResponse.json({ error: "Missing tenant or organization context" }, { status: 400 });
+    }
+    const body = await request.json();
+    const parse = config.create.schema.safeParse(body);
+    if (!parse.success) {
+      return NextResponse.json(
+        { error: "Invalid request body", details: parse.error },
+        { status: 400 }
+      );
+    }
+    let payload = { ...parse.data };
+    if (config.create.mapPayload) {
+      payload = config.create.mapPayload(payload, ctx);
+    }
+    const tenantField = orm.tenantField === void 0 ? "tenantId" : orm.tenantField;
+    const orgField = orm.orgField === void 0 ? "organizationId" : orm.orgField;
+    const entityData = { ...payload };
+    if (tenantField) entityData[tenantField] = ctx.tenantId;
+    if (orgField) entityData[orgField] = ctx.organizationId;
+    if ("createdBy" in new orm.entity()) {
+      entityData.createdBy = typeof ctx.auth?.userId === "string" ? ctx.auth.userId : null;
+    }
+    const entity = ctx.em.create(orm.entity, entityData);
+    await ctx.em.persist(entity).flush();
+    const idField = orm.idField || "id";
+    return NextResponse.json({
+      id: entity[idField],
+      success: true
+    });
+  }
+  async function PUT(request, { params }) {
+    if (config.update === false) {
+      return NextResponse.json({ error: "Method not allowed" }, { status: 405 });
+    }
+    const ctx = await resolveContext(request);
+    if (!ctx) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const { id } = await params;
+    const body = await request.json();
+    if (config.update) {
+      const parse = config.update.schema.safeParse(body);
+      if (!parse.success) {
+        return NextResponse.json(
+          { error: "Invalid request body", details: parse.error },
+          { status: 400 }
+        );
+      }
+    }
+    const idField = orm.idField || "id";
+    const findFilters = {
+      [idField]: id,
+      ...buildScopeFilters(ctx, orm)
+    };
+    const entity = await ctx.em.findOne(orm.entity, findFilters);
+    if (!entity) {
+      return NextResponse.json({ error: "Not found" }, { status: 404 });
+    }
+    let payload = { ...body };
+    if (config.update && config.update.mapPayload) {
+      payload = config.update.mapPayload(payload, ctx);
+    }
+    ctx.em.assign(entity, payload);
+    if ("updatedBy" in entity) {
+      ;
+      entity.updatedBy = typeof ctx.auth?.userId === "string" ? ctx.auth.userId : null;
+    }
+    await ctx.em.flush();
+    return NextResponse.json({
+      id: entity[idField],
+      success: true
+    });
+  }
+  async function DELETE(request, { params }) {
+    if (!config.delete) {
+      return NextResponse.json({ error: "Method not allowed" }, { status: 405 });
+    }
+    const ctx = await resolveContext(request);
+    if (!ctx) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const { id } = await params;
+    const idField = orm.idField || "id";
+    const findFilters = {
+      [idField]: id,
+      ...buildScopeFilters(ctx, orm)
+    };
+    const entity = await ctx.em.findOne(orm.entity, findFilters);
+    if (!entity) {
+      return NextResponse.json({ error: "Not found" }, { status: 404 });
+    }
+    const deleteConfig = typeof config.delete === "object" ? config.delete : {};
+    const useSoftDelete = deleteConfig.soft !== false;
+    const softDeleteField = orm.softDeleteField === void 0 ? "deletedAt" : orm.softDeleteField;
+    if (useSoftDelete && softDeleteField) {
+      ;
+      entity[softDeleteField] = /* @__PURE__ */ new Date();
+      if ("updatedBy" in entity) {
+        ;
+        entity.updatedBy = typeof ctx.auth?.userId === "string" ? ctx.auth.userId : null;
+      }
+      await ctx.em.flush();
+    } else {
+      await ctx.em.remove(entity).flush();
+    }
+    return NextResponse.json({ success: true });
+  }
+  const metadata = {
+    GET: config.metadata?.GET,
+    POST: config.metadata?.POST,
+    PUT: config.metadata?.PUT,
+    DELETE: config.metadata?.DELETE
+  };
+  return { GET, POST, PUT, DELETE, metadata };
+}
+export {
+  makeDynamicTableRoute
+};
+//# sourceMappingURL=makeDynamicTableRoute.js.map

package/dist/backend/dynamic-table/server/makeDynamicTableRoute.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/backend/dynamic-table/server/makeDynamicTableRoute.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport { NextRequest, NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest, type AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest, type OrganizationScope } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { parseDynamicTableFilters } from './filterParser'\nimport {\n  AggregateSpecError,\n  parseAggregateSpec,\n  runAggregate,\n  tenancyFromRouteContext,\n} from './aggregate'\n\n// \u2500\u2500\u2500 Types \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport interface DynamicTableRouteOrmConfig {\n  entity: any\n  idField?: string\n  orgField?: string | null\n  tenantField?: string | null\n  softDeleteField?: string | null\n}\n\nexport interface DynamicTableRouteMethodMetadata {\n  requireAuth?: boolean\n  requireRoles?: string[]\n  requireFeatures?: string[]\n}\n\nexport interface DynamicTableRouteCtx {\n  auth: AuthContext\n  container: any\n  em: EntityManager\n  scope: OrganizationScope | null\n  tenantId: string | null\n  organizationId: string | null\n  allowedOrgIds: Set<string>\n  request: NextRequest\n}\n\nexport interface DynamicTableRouteUpdateConfig {\n  schema: z.ZodType<any>\n  mapPayload?: (payload: Record<string, unknown>, ctx: DynamicTableRouteCtx) => Record<string, unknown>\n}\n\nexport interface DynamicTableRouteCreateConfig {\n  schema: z.ZodType<any>\n  mapPayload?: (payload: Record<string, unknown>, ctx: DynamicTableRouteCtx) => Record<string, unknown>\n}\n\nexport interface DynamicTableRouteDeleteConfig {\n  soft?: boolean\n}\n\nexport interface DynamicTableRouteConfig<TEntity = any, TRow = any> {\n  orm: DynamicTableRouteOrmConfig\n  fieldMap: Record<string, string>\n  transformItem: (entity: TEntity) => TRow\n\n  search?: (q: string) => Record<string, unknown>\n  buildFilters?: (query: Record<string, unknown>, ctx: DynamicTableRouteCtx) => Record<string, unknown>\n  afterList?: (items: TRow[], ctx: DynamicTableRouteCtx) => Promise<TRow[]> | TRow[]\n\n  update?: DynamicTableRouteUpdateConfig | false\n  create?: DynamicTableRouteCreateConfig\n  delete?: boolean | DynamicTableRouteDeleteConfig\n\n  metadata?: {\n    GET?: DynamicTableRouteMethodMetadata\n    PUT?: DynamicTableRouteMethodMetadata\n    POST?: DynamicTableRouteMethodMetadata\n    DELETE?: DynamicTableRouteMethodMetadata\n  }\n}\n\n// \u2500\u2500\u2500 Built-in list query schema \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nconst listQuerySchema = z\n  .object({\n    page: z.coerce.number().min(1).default(1),\n    limit: z.coerce.number().min(1).max(100).default(50),\n    q: z.string().optional(),\n    sortField: z.string().optional().default('id'),\n    sortDir: z.enum(['asc', 'desc']).optional().default('asc'),\n    filters: z.string().optional(),\n    /** `field:fn,field:fn` \u2014 see `server/aggregate.ts`. Capped there too. */\n    aggregate: z.string().max(500).optional(),\n  })\n  .passthrough()\n\n// \u2500\u2500\u2500 Helpers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nasync function resolveContext(request: NextRequest): Promise<DynamicTableRouteCtx | null> {\n  const auth = await getAuthFromRequest(request)\n  if (!auth) return null\n\n  const container = await createRequestContainer()\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n  const em = container.resolve('em') as EntityManager\n\n  const tenantId = (auth.actorTenantId || auth.tenantId) as string | null\n  const organizationId = (auth.actorOrgId || auth.orgId) as string | null\n\n  const allowedOrgIds = new Set<string>()\n  if (scope?.filterIds?.length) {\n    scope.filterIds.forEach((id) => {\n      if (typeof id === 'string') allowedOrgIds.add(id)\n    })\n  } else if (typeof auth.actorOrgId === 'string') {\n    allowedOrgIds.add(auth.actorOrgId)\n  } else if (typeof auth.orgId === 'string') {\n    allowedOrgIds.add(auth.orgId)\n  }\n\n  return { auth, container, em, scope, tenantId, organizationId, allowedOrgIds, request }\n}\n\nfunction buildScopeFilters(\n  ctx: DynamicTableRouteCtx,\n  orm: DynamicTableRouteOrmConfig\n): Record<string, unknown> {\n  const filters: Record<string, unknown> = {}\n\n  const softDeleteField = orm.softDeleteField === undefined ? 'deletedAt' : orm.softDeleteField\n  if (softDeleteField) {\n    filters[softDeleteField] = null\n  }\n\n  const tenantField = orm.tenantField === undefined ? 'tenantId' : orm.tenantField\n  if (tenantField && ctx.tenantId) {\n    filters[tenantField] = ctx.tenantId\n  }\n\n  const orgField = orm.orgField === undefined ? 'organizationId' : orm.orgField\n  if (orgField && ctx.allowedOrgIds.size) {\n    filters[orgField] = { $in: [...ctx.allowedOrgIds] }\n  }\n\n  return filters\n}\n\n// \u2500\u2500\u2500 Factory \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport function makeDynamicTableRoute<TEntity = any, TRow = any>(\n  config: DynamicTableRouteConfig<TEntity, TRow>\n) {\n  const { orm, fieldMap, transformItem } = config\n\n  // \u2500\u2500 GET: List with filters, search, sort, pagination \u2500\u2500\n\n  async function GET(request: NextRequest) {\n    const ctx = await resolveContext(request)\n    if (!ctx) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const url = new URL(request.url)\n    const rawQuery: Record<string, string | undefined> = {}\n    url.searchParams.forEach((value, key) => {\n      rawQuery[key] = value\n    })\n\n    const parse = listQuerySchema.safeParse(rawQuery)\n    if (!parse.success) {\n      return NextResponse.json(\n        { error: 'Invalid query parameters', details: parse.error },\n        { status: 400 }\n      )\n    }\n\n    const query = parse.data\n\n    // Build base scope filters (tenant, org, soft delete)\n    const filters: Record<string, unknown> = buildScopeFilters(ctx, orm)\n\n    // Custom filters from query params\n    if (config.buildFilters) {\n      Object.assign(filters, config.buildFilters(rawQuery, ctx))\n    }\n\n    // Search\n    if (query.q && query.q.trim() && config.search) {\n      const searchFilters = config.search(query.q.trim())\n      Object.assign(filters, searchFilters)\n    }\n\n    // DynamicTable filters (JSON)\n    if (query.filters) {\n      try {\n        const dynamicFilters: Array<{ field: string; operator: string; values: unknown[] }> =\n          JSON.parse(query.filters)\n        if (dynamicFilters.length > 0) {\n          const parsedFilters = parseDynamicTableFilters(dynamicFilters, fieldMap)\n          if (parsedFilters.length > 0) {\n            filters.$and = [\n              ...((filters.$and as Record<string, unknown>[]) || []),\n              ...parsedFilters,\n            ]\n          }\n        }\n      } catch {\n        // Ignore invalid filters JSON\n      }\n    }\n\n    // Sort\n    const sortField = fieldMap[query.sortField] || fieldMap[Object.keys(fieldMap)[0]] || 'id'\n    const sortDir = query.sortDir || 'asc'\n\n    // Query\n    const [entities, total] = await ctx.em.findAndCount(orm.entity, filters, {\n      orderBy: { [sortField]: sortDir },\n      limit: query.limit,\n      offset: (query.page - 1) * query.limit,\n    })\n\n    let items = (entities as TEntity[]).map(transformItem)\n\n    if (config.afterList) {\n      items = await config.afterList(items, ctx)\n    }\n\n    // \u2500\u2500 Optional dataset-wide aggregate \u2500\u2500\n    //\n    // CRITICAL: `filters` is the SAME OBJECT REFERENCE just handed to\n    // `findAndCount`. Rebuilding an equivalent-looking one is the cross-tenant\n    // total this helper exists to prevent \u2014 the aggregate must describe exactly\n    // the rows the page is a window onto.\n    //\n    // Absent `?aggregate=`, the response is byte-identical to before: the key\n    // is spread in conditionally, never emitted as `undefined`.\n    let aggregate: Awaited<ReturnType<typeof runAggregate>> | undefined\n    if (query.aggregate) {\n      let entries\n      try {\n        entries = parseAggregateSpec(query.aggregate, fieldMap)\n      } catch (err) {\n        if (err instanceof AggregateSpecError) {\n          return NextResponse.json({ error: err.message }, { status: 400 })\n        }\n        throw err\n      }\n      if (entries.length > 0) {\n        aggregate = await runAggregate({\n          em: ctx.em,\n          entity: orm.entity,\n          where: filters,\n          tenancy: tenancyFromRouteContext(ctx, orm),\n          entries,\n        })\n      }\n    }\n\n    return NextResponse.json({\n      items,\n      total,\n      page: query.page,\n      limit: query.limit,\n      totalPages: Math.ceil(total / query.limit),\n      ...(aggregate ? { aggregate } : {}),\n    })\n  }\n\n  // \u2500\u2500 POST: Create new entity \u2500\u2500\n\n  async function POST(request: NextRequest) {\n    if (!config.create) {\n      return NextResponse.json({ error: 'Method not allowed' }, { status: 405 })\n    }\n\n    const ctx = await resolveContext(request)\n    if (!ctx) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    if (!ctx.tenantId || !ctx.organizationId) {\n      return NextResponse.json({ error: 'Missing tenant or organization context' }, { status: 400 })\n    }\n\n    const body = await request.json()\n    const parse = config.create.schema.safeParse(body)\n    if (!parse.success) {\n      return NextResponse.json(\n        { error: 'Invalid request body', details: parse.error },\n        { status: 400 }\n      )\n    }\n\n    let payload: Record<string, unknown> = { ...parse.data }\n    if (config.create.mapPayload) {\n      payload = config.create.mapPayload(payload, ctx)\n    }\n\n    const tenantField = orm.tenantField === undefined ? 'tenantId' : orm.tenantField\n    const orgField = orm.orgField === undefined ? 'organizationId' : orm.orgField\n\n    const entityData: Record<string, unknown> = { ...payload }\n    if (tenantField) entityData[tenantField] = ctx.tenantId\n    if (orgField) entityData[orgField] = ctx.organizationId\n    if ('createdBy' in (new orm.entity() as any)) {\n      entityData.createdBy = typeof ctx.auth?.userId === 'string' ? ctx.auth.userId : null\n    }\n\n    const entity = ctx.em.create(orm.entity, entityData)\n    await ctx.em.persist(entity).flush()\n\n    const idField = orm.idField || 'id'\n    return NextResponse.json({\n      id: (entity as any)[idField],\n      success: true,\n    })\n  }\n\n  // \u2500\u2500 PUT: Update entity by id (for cell edit) \u2500\u2500\n\n  async function PUT(\n    request: NextRequest,\n    { params }: { params: Promise<{ id: string }> }\n  ) {\n    if (config.update === false) {\n      return NextResponse.json({ error: 'Method not allowed' }, { status: 405 })\n    }\n\n    const ctx = await resolveContext(request)\n    if (!ctx) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const { id } = await params\n    const body = await request.json()\n\n    if (config.update) {\n      const parse = config.update.schema.safeParse(body)\n      if (!parse.success) {\n        return NextResponse.json(\n          { error: 'Invalid request body', details: parse.error },\n          { status: 400 }\n        )\n      }\n    }\n\n    const idField = orm.idField || 'id'\n    const findFilters: Record<string, unknown> = {\n      [idField]: id,\n      ...buildScopeFilters(ctx, orm),\n    }\n\n    const entity = await ctx.em.findOne(orm.entity, findFilters)\n    if (!entity) {\n      return NextResponse.json({ error: 'Not found' }, { status: 404 })\n    }\n\n    let payload: Record<string, unknown> = { ...body }\n    if (config.update && config.update.mapPayload) {\n      payload = config.update.mapPayload(payload, ctx)\n    }\n\n    ctx.em.assign(entity, payload)\n    if ('updatedBy' in (entity as any)) {\n      ;(entity as any).updatedBy = typeof ctx.auth?.userId === 'string' ? ctx.auth.userId : null\n    }\n    await ctx.em.flush()\n\n    return NextResponse.json({\n      id: (entity as any)[idField],\n      success: true,\n    })\n  }\n\n  // \u2500\u2500 DELETE: Remove entity by id \u2500\u2500\n\n  async function DELETE(\n    request: NextRequest,\n    { params }: { params: Promise<{ id: string }> }\n  ) {\n    if (!config.delete) {\n      return NextResponse.json({ error: 'Method not allowed' }, { status: 405 })\n    }\n\n    const ctx = await resolveContext(request)\n    if (!ctx) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const { id } = await params\n    const idField = orm.idField || 'id'\n    const findFilters: Record<string, unknown> = {\n      [idField]: id,\n      ...buildScopeFilters(ctx, orm),\n    }\n\n    const entity = await ctx.em.findOne(orm.entity, findFilters)\n    if (!entity) {\n      return NextResponse.json({ error: 'Not found' }, { status: 404 })\n    }\n\n    const deleteConfig = typeof config.delete === 'object' ? config.delete : {}\n    const useSoftDelete = deleteConfig.soft !== false\n\n    const softDeleteField = orm.softDeleteField === undefined ? 'deletedAt' : orm.softDeleteField\n\n    if (useSoftDelete && softDeleteField) {\n      ;(entity as any)[softDeleteField] = new Date()\n      if ('updatedBy' in (entity as any)) {\n        ;(entity as any).updatedBy = typeof ctx.auth?.userId === 'string' ? ctx.auth.userId : null\n      }\n      await ctx.em.flush()\n    } else {\n      await ctx.em.remove(entity).flush()\n    }\n\n    return NextResponse.json({ success: true })\n  }\n\n  // \u2500\u2500 Metadata \u2500\u2500\n\n  const metadata: Record<string, DynamicTableRouteMethodMetadata | undefined> = {\n    GET: config.metadata?.GET,\n    POST: config.metadata?.POST,\n    PUT: config.metadata?.PUT,\n    DELETE: config.metadata?.DELETE,\n  }\n\n  return { GET, POST, PUT, DELETE, metadata }\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAsB,oBAAoB;AAE1C,SAAS,8BAA8B;AACvC,SAAS,0BAA4C;AACrD,SAAS,0CAAkE;AAC3E,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAkEP,MAAM,kBAAkB,EACrB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,OAAO,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACnD,GAAG,EAAE,OAAO,EAAE,SAAS;AAAA,EACvB,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAC7C,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EACzD,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAE7B,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAC1C,CAAC,EACA,YAAY;AAIf,eAAe,eAAe,SAA4D;AACxF,QAAM,OAAO,MAAM,mBAAmB,OAAO;AAC7C,MAAI,CAAC,KAAM,QAAO;AAElB,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,QAAM,WAAY,KAAK,iBAAiB,KAAK;AAC7C,QAAM,iBAAkB,KAAK,cAAc,KAAK;AAEhD,QAAM,gBAAgB,oBAAI,IAAY;AACtC,MAAI,OAAO,WAAW,QAAQ;AAC5B,UAAM,UAAU,QAAQ,CAAC,OAAO;AAC9B,UAAI,OAAO,OAAO,SAAU,eAAc,IAAI,EAAE;AAAA,IAClD,CAAC;AAAA,EACH,WAAW,OAAO,KAAK,eAAe,UAAU;AAC9C,kBAAc,IAAI,KAAK,UAAU;AAAA,EACnC,WAAW,OAAO,KAAK,UAAU,UAAU;AACzC,kBAAc,IAAI,KAAK,KAAK;AAAA,EAC9B;AAEA,SAAO,EAAE,MAAM,WAAW,IAAI,OAAO,UAAU,gBAAgB,eAAe,QAAQ;AACxF;AAEA,SAAS,kBACP,KACA,KACyB;AACzB,QAAM,UAAmC,CAAC;AAE1C,QAAM,kBAAkB,IAAI,oBAAoB,SAAY,cAAc,IAAI;AAC9E,MAAI,iBAAiB;AACnB,YAAQ,eAAe,IAAI;AAAA,EAC7B;AAEA,QAAM,cAAc,IAAI,gBAAgB,SAAY,aAAa,IAAI;AACrE,MAAI,eAAe,IAAI,UAAU;AAC/B,YAAQ,WAAW,IAAI,IAAI;AAAA,EAC7B;AAEA,QAAM,WAAW,IAAI,aAAa,SAAY,mBAAmB,IAAI;AACrE,MAAI,YAAY,IAAI,cAAc,MAAM;AACtC,YAAQ,QAAQ,IAAI,EAAE,KAAK,CAAC,GAAG,IAAI,aAAa,EAAE;AAAA,EACpD;AAEA,SAAO;AACT;AAIO,SAAS,sBACd,QACA;AACA,QAAM,EAAE,KAAK,UAAU,cAAc,IAAI;AAIzC,iBAAe,IAAI,SAAsB;AACvC,UAAM,MAAM,MAAM,eAAe,OAAO;AACxC,QAAI,CAAC,KAAK;AACR,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,WAA+C,CAAC;AACtD,QAAI,aAAa,QAAQ,CAAC,OAAO,QAAQ;AACvC,eAAS,GAAG,IAAI;AAAA,IAClB,CAAC;AAED,UAAM,QAAQ,gBAAgB,UAAU,QAAQ;AAChD,QAAI,CAAC,MAAM,SAAS;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,4BAA4B,SAAS,MAAM,MAAM;AAAA,QAC1D,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,QAAQ,MAAM;AAGpB,UAAM,UAAmC,kBAAkB,KAAK,GAAG;AAGnE,QAAI,OAAO,cAAc;AACvB,aAAO,OAAO,SAAS,OAAO,aAAa,UAAU,GAAG,CAAC;AAAA,IAC3D;AAGA,QAAI,MAAM,KAAK,MAAM,EAAE,KAAK,KAAK,OAAO,QAAQ;AAC9C,YAAM,gBAAgB,OAAO,OAAO,MAAM,EAAE,KAAK,CAAC;AAClD,aAAO,OAAO,SAAS,aAAa;AAAA,IACtC;AAGA,QAAI,MAAM,SAAS;AACjB,UAAI;AACF,cAAM,iBACJ,KAAK,MAAM,MAAM,OAAO;AAC1B,YAAI,eAAe,SAAS,GAAG;AAC7B,gBAAM,gBAAgB,yBAAyB,gBAAgB,QAAQ;AACvE,cAAI,cAAc,SAAS,GAAG;AAC5B,oBAAQ,OAAO;AAAA,cACb,GAAK,QAAQ,QAAsC,CAAC;AAAA,cACpD,GAAG;AAAA,YACL;AAAA,UACF;AAAA,QACF;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AAGA,UAAM,YAAY,SAAS,MAAM,SAAS,KAAK,SAAS,OAAO,KAAK,QAAQ,EAAE,CAAC,CAAC,KAAK;AACrF,UAAM,UAAU,MAAM,WAAW;AAGjC,UAAM,CAAC,UAAU,KAAK,IAAI,MAAM,IAAI,GAAG,aAAa,IAAI,QAAQ,SAAS;AAAA,MACvE,SAAS,EAAE,CAAC,SAAS,GAAG,QAAQ;AAAA,MAChC,OAAO,MAAM;AAAA,MACb,SAAS,MAAM,OAAO,KAAK,MAAM;AAAA,IACnC,CAAC;AAED,QAAI,QAAS,SAAuB,IAAI,aAAa;AAErD,QAAI,OAAO,WAAW;AACpB,cAAQ,MAAM,OAAO,UAAU,OAAO,GAAG;AAAA,IAC3C;AAWA,QAAI;AACJ,QAAI,MAAM,WAAW;AACnB,UAAI;AACJ,UAAI;AACF,kBAAU,mBAAmB,MAAM,WAAW,QAAQ;AAAA,MACxD,SAAS,KAAK;AACZ,YAAI,eAAe,oBAAoB;AACrC,iBAAO,aAAa,KAAK,EAAE,OAAO,IAAI,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,QAClE;AACA,cAAM;AAAA,MACR;AACA,UAAI,QAAQ,SAAS,GAAG;AACtB,oBAAY,MAAM,aAAa;AAAA,UAC7B,IAAI,IAAI;AAAA,UACR,QAAQ,IAAI;AAAA,UACZ,OAAO;AAAA,UACP,SAAS,wBAAwB,KAAK,GAAG;AAAA,UACzC;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB;AAAA,MACA;AAAA,MACA,MAAM,MAAM;AAAA,MACZ,OAAO,MAAM;AAAA,MACb,YAAY,KAAK,KAAK,QAAQ,MAAM,KAAK;AAAA,MACzC,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;AAAA,IACnC,CAAC;AAAA,EACH;AAIA,iBAAe,KAAK,SAAsB;AACxC,QAAI,CAAC,OAAO,QAAQ;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3E;AAEA,UAAM,MAAM,MAAM,eAAe,OAAO;AACxC,QAAI,CAAC,KAAK;AACR,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,QAAI,CAAC,IAAI,YAAY,CAAC,IAAI,gBAAgB;AACxC,aAAO,aAAa,KAAK,EAAE,OAAO,yCAAyC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AAEA,UAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,UAAM,QAAQ,OAAO,OAAO,OAAO,UAAU,IAAI;AACjD,QAAI,CAAC,MAAM,SAAS;AAClB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB,SAAS,MAAM,MAAM;AAAA,QACtD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,QAAI,UAAmC,EAAE,GAAG,MAAM,KAAK;AACvD,QAAI,OAAO,OAAO,YAAY;AAC5B,gBAAU,OAAO,OAAO,WAAW,SAAS,GAAG;AAAA,IACjD;AAEA,UAAM,cAAc,IAAI,gBAAgB,SAAY,aAAa,IAAI;AACrE,UAAM,WAAW,IAAI,aAAa,SAAY,mBAAmB,IAAI;AAErE,UAAM,aAAsC,EAAE,GAAG,QAAQ;AACzD,QAAI,YAAa,YAAW,WAAW,IAAI,IAAI;AAC/C,QAAI,SAAU,YAAW,QAAQ,IAAI,IAAI;AACzC,QAAI,eAAgB,IAAI,IAAI,OAAO,GAAW;AAC5C,iBAAW,YAAY,OAAO,IAAI,MAAM,WAAW,WAAW,IAAI,KAAK,SAAS;AAAA,IAClF;AAEA,UAAM,SAAS,IAAI,GAAG,OAAO,IAAI,QAAQ,UAAU;AACnD,UAAM,IAAI,GAAG,QAAQ,MAAM,EAAE,MAAM;AAEnC,UAAM,UAAU,IAAI,WAAW;AAC/B,WAAO,aAAa,KAAK;AAAA,MACvB,IAAK,OAAe,OAAO;AAAA,MAC3B,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAIA,iBAAe,IACb,SACA,EAAE,OAAO,GACT;AACA,QAAI,OAAO,WAAW,OAAO;AAC3B,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3E;AAEA,UAAM,MAAM,MAAM,eAAe,OAAO;AACxC,QAAI,CAAC,KAAK;AACR,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,EAAE,GAAG,IAAI,MAAM;AACrB,UAAM,OAAO,MAAM,QAAQ,KAAK;AAEhC,QAAI,OAAO,QAAQ;AACjB,YAAM,QAAQ,OAAO,OAAO,OAAO,UAAU,IAAI;AACjD,UAAI,CAAC,MAAM,SAAS;AAClB,eAAO,aAAa;AAAA,UAClB,EAAE,OAAO,wBAAwB,SAAS,MAAM,MAAM;AAAA,UACtD,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAU,IAAI,WAAW;AAC/B,UAAM,cAAuC;AAAA,MAC3C,CAAC,OAAO,GAAG;AAAA,MACX,GAAG,kBAAkB,KAAK,GAAG;AAAA,IAC/B;AAEA,UAAM,SAAS,MAAM,IAAI,GAAG,QAAQ,IAAI,QAAQ,WAAW;AAC3D,QAAI,CAAC,QAAQ;AACX,aAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AAEA,QAAI,UAAmC,EAAE,GAAG,KAAK;AACjD,QAAI,OAAO,UAAU,OAAO,OAAO,YAAY;AAC7C,gBAAU,OAAO,OAAO,WAAW,SAAS,GAAG;AAAA,IACjD;AAEA,QAAI,GAAG,OAAO,QAAQ,OAAO;AAC7B,QAAI,eAAgB,QAAgB;AAClC;AAAC,MAAC,OAAe,YAAY,OAAO,IAAI,MAAM,WAAW,WAAW,IAAI,KAAK,SAAS;AAAA,IACxF;AACA,UAAM,IAAI,GAAG,MAAM;AAEnB,WAAO,aAAa,KAAK;AAAA,MACvB,IAAK,OAAe,OAAO;AAAA,MAC3B,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAIA,iBAAe,OACb,SACA,EAAE,OAAO,GACT;AACA,QAAI,CAAC,OAAO,QAAQ;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3E;AAEA,UAAM,MAAM,MAAM,eAAe,OAAO;AACxC,QAAI,CAAC,KAAK;AACR,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,EAAE,GAAG,IAAI,MAAM;AACrB,UAAM,UAAU,IAAI,WAAW;AAC/B,UAAM,cAAuC;AAAA,MAC3C,CAAC,OAAO,GAAG;AAAA,MACX,GAAG,kBAAkB,KAAK,GAAG;AAAA,IAC/B;AAEA,UAAM,SAAS,MAAM,IAAI,GAAG,QAAQ,IAAI,QAAQ,WAAW;AAC3D,QAAI,CAAC,QAAQ;AACX,aAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AAEA,UAAM,eAAe,OAAO,OAAO,WAAW,WAAW,OAAO,SAAS,CAAC;AAC1E,UAAM,gBAAgB,aAAa,SAAS;AAE5C,UAAM,kBAAkB,IAAI,oBAAoB,SAAY,cAAc,IAAI;AAE9E,QAAI,iBAAiB,iBAAiB;AACpC;AAAC,MAAC,OAAe,eAAe,IAAI,oBAAI,KAAK;AAC7C,UAAI,eAAgB,QAAgB;AAClC;AAAC,QAAC,OAAe,YAAY,OAAO,IAAI,MAAM,WAAW,WAAW,IAAI,KAAK,SAAS;AAAA,MACxF;AACA,YAAM,IAAI,GAAG,MAAM;AAAA,IACrB,OAAO;AACL,YAAM,IAAI,GAAG,OAAO,MAAM,EAAE,MAAM;AAAA,IACpC;AAEA,WAAO,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AAAA,EAC5C;AAIA,QAAM,WAAwE;AAAA,IAC5E,KAAK,OAAO,UAAU;AAAA,IACtB,MAAM,OAAO,UAAU;AAAA,IACvB,KAAK,OAAO,UAAU;AAAA,IACtB,QAAQ,OAAO,UAAU;AAAA,EAC3B;AAEA,SAAO,EAAE,KAAK,MAAM,KAAK,QAAQ,SAAS;AAC5C;",
+  "names": []
+}

package/dist/backend/dynamic-table/split-view/ContentPicker.js

@@ -0,0 +1,171 @@
+"use client";
+import { jsx, jsxs } from "react/jsx-runtime";
+import * as React from "react";
+import ReactDOM from "react-dom";
+import { Search } from "lucide-react";
+import { computeAnchoredPosition } from "../utils/anchoredPosition.js";
+import { useAccessibleContent } from "../registry/ContentRegistryContext.js";
+const MENU_WIDTH = 300;
+const MENU_MAX_HEIGHT = 340;
+const KIND_LABEL = {
+  table: "Tables",
+  widget: "Widgets"
+};
+const KIND_ORDER = ["table", "widget"];
+function contentRefFor(item) {
+  return item.kind === "table" ? { kind: "table", tableId: item.id } : { kind: "widget", widgetId: item.id, loaderKey: item.loaderKey };
+}
+function isOpen(item, open) {
+  return open.some(
+    (ref) => ref.kind === "table" ? item.kind === "table" && ref.tableId === item.id : item.kind === "widget" && ref.widgetId === item.id
+  );
+}
+function ContentPicker({
+  anchorRect,
+  openContent,
+  onPick,
+  onClose
+}) {
+  const items = useAccessibleContent();
+  const [query, setQuery] = React.useState("");
+  const inputRef = React.useRef(null);
+  const boxRef = React.useRef(null);
+  const [placement, setPlacement] = React.useState({
+    top: 0,
+    left: 0,
+    maxHeight: MENU_MAX_HEIGHT
+  });
+  React.useLayoutEffect(() => {
+    if (!anchorRect) return;
+    const next = computeAnchoredPosition(
+      anchorRect,
+      { width: window.innerWidth, height: window.innerHeight },
+      { width: MENU_WIDTH, preferredHeight: MENU_MAX_HEIGHT, align: "end", minHeight: 160 }
+    );
+    setPlacement({ top: next.top, left: next.left, maxHeight: next.maxHeight });
+  }, [anchorRect]);
+  React.useEffect(() => {
+    inputRef.current?.focus();
+  }, []);
+  React.useEffect(() => {
+    const onKey = (event) => {
+      if (event.key === "Escape") {
+        event.stopPropagation();
+        onClose();
+      }
+    };
+    const onDown = (event) => {
+      if (boxRef.current && !boxRef.current.contains(event.target)) onClose();
+    };
+    const onScroll = (event) => {
+      const target = event.target;
+      if (target instanceof Element && target !== document.scrollingElement) return;
+      onClose();
+    };
+    document.addEventListener("keydown", onKey, true);
+    document.addEventListener("mousedown", onDown, true);
+    window.addEventListener("scroll", onScroll, true);
+    window.addEventListener("resize", onScroll);
+    return () => {
+      document.removeEventListener("keydown", onKey, true);
+      document.removeEventListener("mousedown", onDown, true);
+      window.removeEventListener("scroll", onScroll, true);
+      window.removeEventListener("resize", onScroll);
+    };
+  }, [onClose]);
+  const sections = React.useMemo(() => {
+    const needle = query.trim().toLowerCase();
+    const matching = needle ? items.filter(
+      (item) => item.title.toLowerCase().includes(needle) || item.id.toLowerCase().includes(needle)
+    ) : items;
+    return KIND_ORDER.map((kind) => {
+      const byGroup = /* @__PURE__ */ new Map();
+      for (const item of matching) {
+        if (item.kind !== kind) continue;
+        const key = item.group ?? "Other";
+        const list = byGroup.get(key) ?? [];
+        list.push(item);
+        byGroup.set(key, list);
+      }
+      return {
+        kind,
+        groups: Array.from(byGroup.entries()).sort(([a], [b]) => a.localeCompare(b))
+      };
+    }).filter((section) => section.groups.length > 0);
+  }, [items, query]);
+  const menu = /* @__PURE__ */ jsxs(
+    "div",
+    {
+      ref: boxRef,
+      role: "dialog",
+      "aria-label": "Add table or widget",
+      className: "fixed z-[1000] overflow-hidden rounded-m3-md border border-[var(--m3-outline-variant)] bg-[var(--m3-surface-container)] shadow-m3-2",
+      style: {
+        top: placement.top,
+        left: placement.left,
+        width: MENU_WIDTH,
+        maxHeight: placement.maxHeight
+      },
+      "data-split-picker": "",
+      children: [
+        /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2 bg-[var(--m3-surface-container-high)] px-2 py-1.5 transition-[background-color,box-shadow] duration-[var(--m3-duration-short2)] ease-m3-standard focus-within:bg-[var(--m3-surface-container-highest)] focus-within:shadow-[var(--m3-focus-ring-inset)]", children: [
+          /* @__PURE__ */ jsx(Search, { className: "h-3.5 w-3.5 text-[var(--m3-on-surface-variant)]", "aria-hidden": "true" }),
+          /* @__PURE__ */ jsx(
+            "input",
+            {
+              ref: inputRef,
+              value: query,
+              onChange: (event) => setQuery(event.target.value),
+              placeholder: "Add table or widget\u2026",
+              className: "min-w-0 flex-1 bg-transparent text-body-regular-xs text-[var(--m3-on-surface)] outline-none placeholder:text-[var(--m3-on-surface-variant)]",
+              "data-split-picker-search": ""
+            }
+          )
+        ] }),
+        /* @__PURE__ */ jsxs("div", { className: "overflow-y-auto p-1", style: { maxHeight: placement.maxHeight - 38 }, children: [
+          sections.length === 0 && /* @__PURE__ */ jsx(
+            "div",
+            {
+              className: "px-2 py-4 text-center text-body-regular-xs text-[var(--m3-on-surface-variant)]",
+              "data-split-picker-empty": "",
+              children: "No tables or widgets available."
+            }
+          ),
+          sections.map((section) => /* @__PURE__ */ jsxs("div", { "data-split-picker-kind": section.kind, children: [
+            /* @__PURE__ */ jsx("div", { className: "px-2 pb-1 pt-2 text-label-semibold-xs text-[var(--m3-on-surface)]", children: KIND_LABEL[section.kind] }),
+            section.groups.map(([group, groupItems]) => /* @__PURE__ */ jsxs("div", { children: [
+              /* @__PURE__ */ jsx("div", { className: "px-2 pb-0.5 pt-1.5 text-label-semibold-2xs uppercase tracking-wider text-[var(--m3-on-surface-variant)]", children: group }),
+              groupItems.map((item) => {
+                const alreadyOpen = isOpen(item, openContent);
+                return /* @__PURE__ */ jsxs(
+                  "button",
+                  {
+                    type: "button",
+                    onClick: () => onPick(contentRefFor(item)),
+                    "data-split-picker-item": item.id,
+                    "data-split-picker-item-kind": item.kind,
+                    className: "flex w-full items-center justify-between gap-2 rounded-m3-xs px-2 py-1 text-left text-body-regular-xs text-[var(--m3-on-surface)] transition-colors duration-[var(--m3-duration-short2)] ease-m3-standard hover:bg-[var(--m3-state-layer-hover)] active:bg-[var(--m3-state-layer-pressed)]",
+                    children: [
+                      /* @__PURE__ */ jsx("span", { className: "truncate", children: item.title }),
+                      alreadyOpen && /* @__PURE__ */ jsx("span", { className: "shrink-0 rounded-m3-full bg-[var(--m3-secondary-container)] px-1.5 text-label-semibold-2xs uppercase text-[var(--m3-on-secondary-container)]", children: "open" })
+                    ]
+                  },
+                  `${item.kind}:${item.id}`
+                );
+              })
+            ] }, group))
+          ] }, section.kind))
+        ] })
+      ]
+    }
+  );
+  if (typeof document === "undefined") return menu;
+  return ReactDOM.createPortal(menu, document.body);
+}
+var ContentPicker_default = ContentPicker;
+export {
+  ContentPicker,
+  contentRefFor,
+  ContentPicker_default as default
+};
+//# sourceMappingURL=ContentPicker.js.map

package/dist/backend/dynamic-table/split-view/ContentPicker.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/backend/dynamic-table/split-view/ContentPicker.tsx"],
+  "sourcesContent": ["'use client'\n\n// Choose what goes in a slot: a table or a dashboard widget.\n//\n// The superseded table-only picker with a second kind of thing in it (that file\n// is gone; this replaced it outright). Everything that made the original work is\n// kept deliberately unchanged \u2014 a context dropdown anchored to whatever\n// opened it (not a centred modal that hides the layout you are adding to),\n// portalled to `document.body` because panes clip their overflow, positioned by\n// the same `computeAnchoredPosition` every other menu in the grid uses, and\n// already-open entries MARKED rather than hidden, because two panes of one table\n// with different views is a legitimate layout.\n//\n// The one addition is a level of hierarchy: KIND first (Tables / Widgets), then\n// the existing per-module group headers inside each. Kind is the axis the user\n// is actually choosing on \u2014 \"I want a chart here, not another grid\" \u2014 so it\n// outranks the module, and putting it first keeps the two catalogues from\n// interleaving into one undifferentiated list as the registry grows.\n//\n// ACL is not resolved here, in either half: tables come from the host's grant\n// check via the registry context, widgets arrive already filtered server-side.\n//\n// Spec: .ai/specs/2026-08-17-split-view-workspace-composition.md (Phase 2)\n\nimport * as React from 'react'\nimport ReactDOM from 'react-dom'\nimport { Search } from 'lucide-react'\nimport { computeAnchoredPosition } from '../utils/anchoredPosition'\nimport { useAccessibleContent, type PaneContentItem } from '../registry/ContentRegistryContext'\nimport type { PaneContentRef } from './types'\n\nconst MENU_WIDTH = 300\nconst MENU_MAX_HEIGHT = 340\n\nconst KIND_LABEL: Record<PaneContentItem['kind'], string> = {\n  table: 'Tables',\n  widget: 'Widgets',\n}\n// Tables first: they are the bulk of the catalogue and the thing a split view is\n// usually for. Widgets are the accent, not the headline.\nconst KIND_ORDER: Array<PaneContentItem['kind']> = ['table', 'widget']\n\n/** The ref a picked item becomes. Widgets carry their loader key so a saved\n *  layout can be reopened without re-deriving it from the catalogue. */\nexport function contentRefFor(item: PaneContentItem): PaneContentRef {\n  return item.kind === 'table'\n    ? { kind: 'table', tableId: item.id }\n    : { kind: 'widget', widgetId: item.id, loaderKey: item.loaderKey }\n}\n\nfunction isOpen(item: PaneContentItem, open: PaneContentRef[]): boolean {\n  return open.some((ref) =>\n    ref.kind === 'table'\n      ? item.kind === 'table' && ref.tableId === item.id\n      : item.kind === 'widget' && ref.widgetId === item.id,\n  )\n}\n\nexport function ContentPicker({\n  anchorRect,\n  openContent,\n  onPick,\n  onClose,\n}: {\n  /** Bounding rect of the control that opened this. */\n  anchorRect: DOMRect | null\n  /** What the layout already holds \u2014 marked, never hidden. */\n  openContent: PaneContentRef[]\n  onPick: (content: PaneContentRef) => void\n  onClose: () => void\n}) {\n  const items = useAccessibleContent()\n  const [query, setQuery] = React.useState('')\n  const inputRef = React.useRef<HTMLInputElement>(null)\n  const boxRef = React.useRef<HTMLDivElement>(null)\n\n  const [placement, setPlacement] = React.useState({\n    top: 0,\n    left: 0,\n    maxHeight: MENU_MAX_HEIGHT,\n  })\n\n  React.useLayoutEffect(() => {\n    if (!anchorRect) return\n    const next = computeAnchoredPosition(\n      anchorRect,\n      { width: window.innerWidth, height: window.innerHeight },\n      { width: MENU_WIDTH, preferredHeight: MENU_MAX_HEIGHT, align: 'end', minHeight: 160 },\n    )\n    setPlacement({ top: next.top, left: next.left, maxHeight: next.maxHeight })\n  }, [anchorRect])\n\n  React.useEffect(() => {\n    inputRef.current?.focus()\n  }, [])\n\n  React.useEffect(() => {\n    const onKey = (event: KeyboardEvent) => {\n      if (event.key === 'Escape') {\n        event.stopPropagation()\n        onClose()\n      }\n    }\n    const onDown = (event: MouseEvent) => {\n      if (boxRef.current && !boxRef.current.contains(event.target as Node)) onClose()\n    }\n    // Scroll/resize move the anchor out from under us; close rather than leave\n    // a menu floating next to nothing.\n    //\n    // But ONLY a scroll that actually moves the anchor counts. This listener is\n    // capture-phase on `window`, so it also hears every inner scroller \u2014 and a\n    // pane emits a scroll event one frame after the picker mounts, which\n    // dismissed the menu ~6ms after it opened. The user-visible symptom was\n    // that clicking an empty slot in a workspace that already had a filled pane\n    // \"did nothing\" \u2014 reliably, on the second fill of a 2\u00D72.\n    //\n    // Panes scroll INSIDE the layout; the slot the picker is anchored to does\n    // not move when they do. So element-level scrolls are ignored and only a\n    // document-level scroll dismisses.\n    const onScroll = (event: Event) => {\n      const target = event.target\n      if (target instanceof Element && target !== document.scrollingElement) return\n      onClose()\n    }\n    document.addEventListener('keydown', onKey, true)\n    document.addEventListener('mousedown', onDown, true)\n    window.addEventListener('scroll', onScroll, true)\n    window.addEventListener('resize', onScroll)\n    return () => {\n      document.removeEventListener('keydown', onKey, true)\n      document.removeEventListener('mousedown', onDown, true)\n      window.removeEventListener('scroll', onScroll, true)\n      window.removeEventListener('resize', onScroll)\n    }\n  }, [onClose])\n\n  const sections = React.useMemo(() => {\n    const needle = query.trim().toLowerCase()\n    const matching = needle\n      ? items.filter(\n          (item) =>\n            item.title.toLowerCase().includes(needle) || item.id.toLowerCase().includes(needle),\n        )\n      : items\n\n    return KIND_ORDER.map((kind) => {\n      const byGroup = new Map<string, PaneContentItem[]>()\n      for (const item of matching) {\n        if (item.kind !== kind) continue\n        const key = item.group ?? 'Other'\n        const list = byGroup.get(key) ?? []\n        list.push(item)\n        byGroup.set(key, list)\n      }\n      return {\n        kind,\n        groups: Array.from(byGroup.entries()).sort(([a], [b]) => a.localeCompare(b)),\n      }\n    }).filter((section) => section.groups.length > 0)\n  }, [items, query])\n\n  const menu = (\n    <div\n      ref={boxRef}\n      role=\"dialog\"\n      aria-label=\"Add table or widget\"\n      className=\"fixed z-[1000] overflow-hidden rounded-m3-md border border-[var(--m3-outline-variant)] bg-[var(--m3-surface-container)] shadow-m3-2\"\n      style={{\n        top: placement.top,\n        left: placement.left,\n        width: MENU_WIDTH,\n        maxHeight: placement.maxHeight,\n      }}\n      data-split-picker=\"\"\n    >\n      {/* A tinted band rather than a hairline, and the focus signal is on\n          the whole row \u2014 the input inside it is borderless, so a halo on the\n          field alone would float in the middle of nothing.\n          The band steps the container UP from the panel and up again on focus,\n          which reads the same direction in BOTH schemes (light gets greyer,\n          dark gets lighter); stepping DOWN would invert between them. */}\n      <div className=\"flex items-center gap-2 bg-[var(--m3-surface-container-high)] px-2 py-1.5 transition-[background-color,box-shadow] duration-[var(--m3-duration-short2)] ease-m3-standard focus-within:bg-[var(--m3-surface-container-highest)] focus-within:shadow-[var(--m3-focus-ring-inset)]\">\n        <Search className=\"h-3.5 w-3.5 text-[var(--m3-on-surface-variant)]\" aria-hidden=\"true\" />\n        <input\n          ref={inputRef}\n          value={query}\n          onChange={(event) => setQuery(event.target.value)}\n          placeholder=\"Add table or widget\u2026\"\n          className=\"min-w-0 flex-1 bg-transparent text-body-regular-xs text-[var(--m3-on-surface)] outline-none placeholder:text-[var(--m3-on-surface-variant)]\"\n          data-split-picker-search=\"\"\n        />\n      </div>\n\n      <div className=\"overflow-y-auto p-1\" style={{ maxHeight: placement.maxHeight - 38 }}>\n        {sections.length === 0 && (\n          <div\n            className=\"px-2 py-4 text-center text-body-regular-xs text-[var(--m3-on-surface-variant)]\"\n            data-split-picker-empty=\"\"\n          >\n            No tables or widgets available.\n          </div>\n        )}\n        {sections.map((section) => (\n          <div key={section.kind} data-split-picker-kind={section.kind}>\n            {/* Section ink is `on-surface`, group ink below is `on-surface-variant`.\n                Both levels used to be 12px in the SAME muted ink, and the group\n                carried uppercase + tracking \u2014 so the lower level read as the more\n                emphatic one and the hierarchy inverted. */}\n            <div className=\"px-2 pb-1 pt-2 text-label-semibold-xs text-[var(--m3-on-surface)]\">\n              {KIND_LABEL[section.kind]}\n            </div>\n            {section.groups.map(([group, groupItems]) => (\n              <div key={group}>\n                <div className=\"px-2 pb-0.5 pt-1.5 text-label-semibold-2xs uppercase tracking-wider text-[var(--m3-on-surface-variant)]\">\n                  {group}\n                </div>\n                {groupItems.map((item) => {\n                  const alreadyOpen = isOpen(item, openContent)\n                  return (\n                    <button\n                      key={`${item.kind}:${item.id}`}\n                      type=\"button\"\n                      onClick={() => onPick(contentRefFor(item))}\n                      data-split-picker-item={item.id}\n                      data-split-picker-item-kind={item.kind}\n                      className=\"flex w-full items-center justify-between gap-2 rounded-m3-xs px-2 py-1 text-left text-body-regular-xs text-[var(--m3-on-surface)] transition-colors duration-[var(--m3-duration-short2)] ease-m3-standard hover:bg-[var(--m3-state-layer-hover)] active:bg-[var(--m3-state-layer-pressed)]\"\n                    >\n                      <span className=\"truncate\">{item.title}</span>\n                      {/* A marked entry is not a dimmed one \u2014 it is a real\n                          state, so it gets the selection container as a chip. */}\n                      {alreadyOpen && (\n                        <span className=\"shrink-0 rounded-m3-full bg-[var(--m3-secondary-container)] px-1.5 text-label-semibold-2xs uppercase text-[var(--m3-on-secondary-container)]\">\n                          open\n                        </span>\n                      )}\n                    </button>\n                  )\n                })}\n              </div>\n            ))}\n          </div>\n        ))}\n      </div>\n    </div>\n  )\n\n  if (typeof document === 'undefined') return menu\n  return ReactDOM.createPortal(menu, document.body)\n}\n\nexport default ContentPicker\n"],
+  "mappings": ";AAqLM,SACE,KADF;AA7JN,YAAY,WAAW;AACvB,OAAO,cAAc;AACrB,SAAS,cAAc;AACvB,SAAS,+BAA+B;AACxC,SAAS,4BAAkD;AAG3D,MAAM,aAAa;AACnB,MAAM,kBAAkB;AAExB,MAAM,aAAsD;AAAA,EAC1D,OAAO;AAAA,EACP,QAAQ;AACV;AAGA,MAAM,aAA6C,CAAC,SAAS,QAAQ;AAI9D,SAAS,cAAc,MAAuC;AACnE,SAAO,KAAK,SAAS,UACjB,EAAE,MAAM,SAAS,SAAS,KAAK,GAAG,IAClC,EAAE,MAAM,UAAU,UAAU,KAAK,IAAI,WAAW,KAAK,UAAU;AACrE;AAEA,SAAS,OAAO,MAAuB,MAAiC;AACtE,SAAO,KAAK;AAAA,IAAK,CAAC,QAChB,IAAI,SAAS,UACT,KAAK,SAAS,WAAW,IAAI,YAAY,KAAK,KAC9C,KAAK,SAAS,YAAY,IAAI,aAAa,KAAK;AAAA,EACtD;AACF;AAEO,SAAS,cAAc;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAOG;AACD,QAAM,QAAQ,qBAAqB;AACnC,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAS,EAAE;AAC3C,QAAM,WAAW,MAAM,OAAyB,IAAI;AACpD,QAAM,SAAS,MAAM,OAAuB,IAAI;AAEhD,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS;AAAA,IAC/C,KAAK;AAAA,IACL,MAAM;AAAA,IACN,WAAW;AAAA,EACb,CAAC;AAED,QAAM,gBAAgB,MAAM;AAC1B,QAAI,CAAC,WAAY;AACjB,UAAM,OAAO;AAAA,MACX;AAAA,MACA,EAAE,OAAO,OAAO,YAAY,QAAQ,OAAO,YAAY;AAAA,MACvD,EAAE,OAAO,YAAY,iBAAiB,iBAAiB,OAAO,OAAO,WAAW,IAAI;AAAA,IACtF;AACA,iBAAa,EAAE,KAAK,KAAK,KAAK,MAAM,KAAK,MAAM,WAAW,KAAK,UAAU,CAAC;AAAA,EAC5E,GAAG,CAAC,UAAU,CAAC;AAEf,QAAM,UAAU,MAAM;AACpB,aAAS,SAAS,MAAM;AAAA,EAC1B,GAAG,CAAC,CAAC;AAEL,QAAM,UAAU,MAAM;AACpB,UAAM,QAAQ,CAAC,UAAyB;AACtC,UAAI,MAAM,QAAQ,UAAU;AAC1B,cAAM,gBAAgB;AACtB,gBAAQ;AAAA,MACV;AAAA,IACF;AACA,UAAM,SAAS,CAAC,UAAsB;AACpC,UAAI,OAAO,WAAW,CAAC,OAAO,QAAQ,SAAS,MAAM,MAAc,EAAG,SAAQ;AAAA,IAChF;AAcA,UAAM,WAAW,CAAC,UAAiB;AACjC,YAAM,SAAS,MAAM;AACrB,UAAI,kBAAkB,WAAW,WAAW,SAAS,iBAAkB;AACvE,cAAQ;AAAA,IACV;AACA,aAAS,iBAAiB,WAAW,OAAO,IAAI;AAChD,aAAS,iBAAiB,aAAa,QAAQ,IAAI;AACnD,WAAO,iBAAiB,UAAU,UAAU,IAAI;AAChD,WAAO,iBAAiB,UAAU,QAAQ;AAC1C,WAAO,MAAM;AACX,eAAS,oBAAoB,WAAW,OAAO,IAAI;AACnD,eAAS,oBAAoB,aAAa,QAAQ,IAAI;AACtD,aAAO,oBAAoB,UAAU,UAAU,IAAI;AACnD,aAAO,oBAAoB,UAAU,QAAQ;AAAA,IAC/C;AAAA,EACF,GAAG,CAAC,OAAO,CAAC;AAEZ,QAAM,WAAW,MAAM,QAAQ,MAAM;AACnC,UAAM,SAAS,MAAM,KAAK,EAAE,YAAY;AACxC,UAAM,WAAW,SACb,MAAM;AAAA,MACJ,CAAC,SACC,KAAK,MAAM,YAAY,EAAE,SAAS,MAAM,KAAK,KAAK,GAAG,YAAY,EAAE,SAAS,MAAM;AAAA,IACtF,IACA;AAEJ,WAAO,WAAW,IAAI,CAAC,SAAS;AAC9B,YAAM,UAAU,oBAAI,IAA+B;AACnD,iBAAW,QAAQ,UAAU;AAC3B,YAAI,KAAK,SAAS,KAAM;AACxB,cAAM,MAAM,KAAK,SAAS;AAC1B,cAAM,OAAO,QAAQ,IAAI,GAAG,KAAK,CAAC;AAClC,aAAK,KAAK,IAAI;AACd,gBAAQ,IAAI,KAAK,IAAI;AAAA,MACvB;AACA,aAAO;AAAA,QACL;AAAA,QACA,QAAQ,MAAM,KAAK,QAAQ,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAAA,MAC7E;AAAA,IACF,CAAC,EAAE,OAAO,CAAC,YAAY,QAAQ,OAAO,SAAS,CAAC;AAAA,EAClD,GAAG,CAAC,OAAO,KAAK,CAAC;AAEjB,QAAM,OACJ;AAAA,IAAC;AAAA;AAAA,MACC,KAAK;AAAA,MACL,MAAK;AAAA,MACL,cAAW;AAAA,MACX,WAAU;AAAA,MACV,OAAO;AAAA,QACL,KAAK,UAAU;AAAA,QACf,MAAM,UAAU;AAAA,QAChB,OAAO;AAAA,QACP,WAAW,UAAU;AAAA,MACvB;AAAA,MACA,qBAAkB;AAAA,MAQlB;AAAA,6BAAC,SAAI,WAAU,mRACb;AAAA,8BAAC,UAAO,WAAU,mDAAkD,eAAY,QAAO;AAAA,UACvF;AAAA,YAAC;AAAA;AAAA,cACC,KAAK;AAAA,cACL,OAAO;AAAA,cACP,UAAU,CAAC,UAAU,SAAS,MAAM,OAAO,KAAK;AAAA,cAChD,aAAY;AAAA,cACZ,WAAU;AAAA,cACV,4BAAyB;AAAA;AAAA,UAC3B;AAAA,WACF;AAAA,QAEA,qBAAC,SAAI,WAAU,uBAAsB,OAAO,EAAE,WAAW,UAAU,YAAY,GAAG,GAC/E;AAAA,mBAAS,WAAW,KACnB;AAAA,YAAC;AAAA;AAAA,cACC,WAAU;AAAA,cACV,2BAAwB;AAAA,cACzB;AAAA;AAAA,UAED;AAAA,UAED,SAAS,IAAI,CAAC,YACb,qBAAC,SAAuB,0BAAwB,QAAQ,MAKtD;AAAA,gCAAC,SAAI,WAAU,qEACZ,qBAAW,QAAQ,IAAI,GAC1B;AAAA,YACC,QAAQ,OAAO,IAAI,CAAC,CAAC,OAAO,UAAU,MACrC,qBAAC,SACC;AAAA,kCAAC,SAAI,WAAU,2GACZ,iBACH;AAAA,cACC,WAAW,IAAI,CAAC,SAAS;AACxB,sBAAM,cAAc,OAAO,MAAM,WAAW;AAC5C,uBACE;AAAA,kBAAC;AAAA;AAAA,oBAEC,MAAK;AAAA,oBACL,SAAS,MAAM,OAAO,cAAc,IAAI,CAAC;AAAA,oBACzC,0BAAwB,KAAK;AAAA,oBAC7B,+BAA6B,KAAK;AAAA,oBAClC,WAAU;AAAA,oBAEV;AAAA,0CAAC,UAAK,WAAU,YAAY,eAAK,OAAM;AAAA,sBAGtC,eACC,oBAAC,UAAK,WAAU,gJAA+I,kBAE/J;AAAA;AAAA;AAAA,kBAbG,GAAG,KAAK,IAAI,IAAI,KAAK,EAAE;AAAA,gBAe9B;AAAA,cAEJ,CAAC;AAAA,iBAzBO,KA0BV,CACD;AAAA,eApCO,QAAQ,IAqClB,CACD;AAAA,WACH;AAAA;AAAA;AAAA,EACF;AAGF,MAAI,OAAO,aAAa,YAAa,QAAO;AAC5C,SAAO,SAAS,aAAa,MAAM,SAAS,IAAI;AAClD;AAEA,IAAO,wBAAQ;",
+  "names": []
+}