@open-mercato/shared 0.6.6-develop.6543.1.49fadb4c31 → 0.6.6

package/dist/lib/location/countries.js

@@ -11,14 +11,9 @@ const RAW_COUNTRIES = registry.filter(isIsoAlpha2).map((entry) => ({
   code: entry.Subtag,
   name: entry.Description.join(", ")
 }));
-const SUPPLEMENTAL_COUNTRIES = [
-  { code: "XK", name: "Kosovo" }
-];
-const RAW_COUNTRY_CODES = new Set(RAW_COUNTRIES.map((entry) => entry.code));
-const ISO_COUNTRIES = [
-  ...RAW_COUNTRIES,
-  ...SUPPLEMENTAL_COUNTRIES.filter((entry) => !RAW_COUNTRY_CODES.has(entry.code))
-].sort((a, b) => a.name.localeCompare(b.name, "en", { sensitivity: "base" }));
+const ISO_COUNTRIES = [...RAW_COUNTRIES].sort(
+  (a, b) => a.name.localeCompare(b.name, "en", { sensitivity: "base" })
+);
 const COUNTRY_PRIORITY = ["PL", "DE", "ES", "FR", "IT", "US", "GB", "CA"];
 const displayNameCache = /* @__PURE__ */ new Map();
 function getDisplayNames(locale) {
@@ -42,8 +37,7 @@ function resolveCountryName(code, options = {}) {
   if (!displayNames) return fallback;
   try {
     const label = displayNames.of(normalized);
-    if (typeof label !== "string" || label === normalized) return fallback;
-    return label;
+    return typeof label === "string" ? label : fallback;
   } catch {
     return fallback;
   }

package/dist/lib/location/countries.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/location/countries.ts"],
-  "sourcesContent": ["import registry from 'language-subtag-registry/data/json/registry.json'\n\ntype RegistryEntry = {\n  Type: string\n  Subtag?: string\n  Description?: string[]\n  Deprecated?: string\n}\n\nexport type IsoCountry = {\n  code: string\n  name: string\n}\n\nfunction isIsoAlpha2(entry: RegistryEntry): entry is RegistryEntry & { Subtag: string; Description: string[] } {\n  if (entry.Type !== 'region') return false\n  if (!entry.Subtag || !/^[A-Z]{2}$/.test(entry.Subtag)) return false\n  if (entry.Deprecated) return false\n  if (!entry.Description || !entry.Description.length) return false\n  if (entry.Description[0] === 'Private use') return false\n  return true\n}\n\nconst RAW_COUNTRIES: IsoCountry[] = (registry as RegistryEntry[])\n  .filter(isIsoAlpha2)\n  .map((entry) => ({\n    code: entry.Subtag,\n    name: entry.Description.join(', '),\n  }))\n\n// Codes in common use that the language-subtag registry does not list as region subtags.\n// XK is user-assigned rather than ISO 3166-1 assigned, so it never appears in the registry.\nconst SUPPLEMENTAL_COUNTRIES: IsoCountry[] = [\n  { code: 'XK', name: 'Kosovo' },\n]\n\nconst RAW_COUNTRY_CODES = new Set(RAW_COUNTRIES.map((entry) => entry.code))\n\nexport const ISO_COUNTRIES: IsoCountry[] = [\n  ...RAW_COUNTRIES,\n  ...SUPPLEMENTAL_COUNTRIES.filter((entry) => !RAW_COUNTRY_CODES.has(entry.code)),\n].sort((a, b) => a.name.localeCompare(b.name, 'en', { sensitivity: 'base' }))\n\nexport const COUNTRY_PRIORITY: string[] = ['PL', 'DE', 'ES', 'FR', 'IT', 'US', 'GB', 'CA']\n\nconst displayNameCache = new Map<string, Intl.DisplayNames>()\n\nfunction getDisplayNames(locale: string): Intl.DisplayNames | null {\n  if (typeof Intl === 'undefined' || typeof Intl.DisplayNames === 'undefined') return null\n  const key = locale || 'en'\n  let instance = displayNameCache.get(key)\n  if (!instance) {\n    try {\n      instance = new Intl.DisplayNames([key], { type: 'region' })\n      displayNameCache.set(key, instance)\n    } catch {\n      return null\n    }\n  }\n  return instance\n}\n\nexport function resolveCountryName(code: string, options: { locale?: string } = {}): string {\n  const normalized = code.toUpperCase()\n  const fallback = ISO_COUNTRIES.find((entry) => entry.code === normalized)?.name ?? normalized\n  const displayNames = getDisplayNames(options.locale ?? 'en')\n  if (!displayNames) return fallback\n  try {\n    const label = displayNames.of(normalized as any)\n    // Intl echoes the raw code back when its ICU data cannot resolve the region.\n    if (typeof label !== 'string' || label === normalized) return fallback\n    return label\n  } catch {\n    return fallback\n  }\n}\n\nexport function buildCountryOptions(options: {\n  locale?: string\n  priority?: string[]\n  transformLabel?: (code: string, defaultLabel: string) => string\n} = {}): Array<{ code: string; label: string }> {\n  const { locale, transformLabel } = options\n  const priority = (options.priority ?? COUNTRY_PRIORITY).map((code) => code.toUpperCase())\n  const prioritySet = new Set(priority)\n  const labelFor = (code: string) => {\n    const base = resolveCountryName(code, { locale })\n    return transformLabel ? transformLabel(code, base) : base\n  }\n\n  const byCode = new Map(ISO_COUNTRIES.map((entry) => [entry.code, entry]))\n\n  const prioritized = priority\n    .map((code) => {\n      const base = byCode.get(code)\n      if (!base) return null\n      return { code, label: labelFor(code) }\n    })\n    .filter((entry): entry is { code: string; label: string } => !!entry)\n    .sort((a, b) => a.label.localeCompare(b.label, locale ?? 'en', { sensitivity: 'base' }))\n\n  const remaining = ISO_COUNTRIES\n    .filter((entry) => !prioritySet.has(entry.code))\n    .map((entry) => ({ code: entry.code, label: labelFor(entry.code) }))\n    .sort((a, b) => a.label.localeCompare(b.label, locale ?? 'en', { sensitivity: 'base' }))\n\n  return [...prioritized, ...remaining]\n}\n"],
-  "mappings": "AAAA,OAAO,cAAc;AAcrB,SAAS,YAAY,OAA0F;AAC7G,MAAI,MAAM,SAAS,SAAU,QAAO;AACpC,MAAI,CAAC,MAAM,UAAU,CAAC,aAAa,KAAK,MAAM,MAAM,EAAG,QAAO;AAC9D,MAAI,MAAM,WAAY,QAAO;AAC7B,MAAI,CAAC,MAAM,eAAe,CAAC,MAAM,YAAY,OAAQ,QAAO;AAC5D,MAAI,MAAM,YAAY,CAAC,MAAM,cAAe,QAAO;AACnD,SAAO;AACT;AAEA,MAAM,gBAA+B,SAClC,OAAO,WAAW,EAClB,IAAI,CAAC,WAAW;AAAA,EACf,MAAM,MAAM;AAAA,EACZ,MAAM,MAAM,YAAY,KAAK,IAAI;AACnC,EAAE;AAIJ,MAAM,yBAAuC;AAAA,EAC3C,EAAE,MAAM,MAAM,MAAM,SAAS;AAC/B;AAEA,MAAM,oBAAoB,IAAI,IAAI,cAAc,IAAI,CAAC,UAAU,MAAM,IAAI,CAAC;AAEnE,MAAM,gBAA8B;AAAA,EACzC,GAAG;AAAA,EACH,GAAG,uBAAuB,OAAO,CAAC,UAAU,CAAC,kBAAkB,IAAI,MAAM,IAAI,CAAC;AAChF,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,MAAM,MAAM,EAAE,aAAa,OAAO,CAAC,CAAC;AAErE,MAAM,mBAA6B,CAAC,MAAM,MAAM,MAAM,MAAM,MAAM,MAAM,MAAM,IAAI;AAEzF,MAAM,mBAAmB,oBAAI,IAA+B;AAE5D,SAAS,gBAAgB,QAA0C;AACjE,MAAI,OAAO,SAAS,eAAe,OAAO,KAAK,iBAAiB,YAAa,QAAO;AACpF,QAAM,MAAM,UAAU;AACtB,MAAI,WAAW,iBAAiB,IAAI,GAAG;AACvC,MAAI,CAAC,UAAU;AACb,QAAI;AACF,iBAAW,IAAI,KAAK,aAAa,CAAC,GAAG,GAAG,EAAE,MAAM,SAAS,CAAC;AAC1D,uBAAiB,IAAI,KAAK,QAAQ;AAAA,IACpC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,mBAAmB,MAAc,UAA+B,CAAC,GAAW;AAC1F,QAAM,aAAa,KAAK,YAAY;AACpC,QAAM,WAAW,cAAc,KAAK,CAAC,UAAU,MAAM,SAAS,UAAU,GAAG,QAAQ;AACnF,QAAM,eAAe,gBAAgB,QAAQ,UAAU,IAAI;AAC3D,MAAI,CAAC,aAAc,QAAO;AAC1B,MAAI;AACF,UAAM,QAAQ,aAAa,GAAG,UAAiB;AAE/C,QAAI,OAAO,UAAU,YAAY,UAAU,WAAY,QAAO;AAC9D,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,oBAAoB,UAIhC,CAAC,GAA2C;AAC9C,QAAM,EAAE,QAAQ,eAAe,IAAI;AACnC,QAAM,YAAY,QAAQ,YAAY,kBAAkB,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC;AACxF,QAAM,cAAc,IAAI,IAAI,QAAQ;AACpC,QAAM,WAAW,CAAC,SAAiB;AACjC,UAAM,OAAO,mBAAmB,MAAM,EAAE,OAAO,CAAC;AAChD,WAAO,iBAAiB,eAAe,MAAM,IAAI,IAAI;AAAA,EACvD;AAEA,QAAM,SAAS,IAAI,IAAI,cAAc,IAAI,CAAC,UAAU,CAAC,MAAM,MAAM,KAAK,CAAC,CAAC;AAExE,QAAM,cAAc,SACjB,IAAI,CAAC,SAAS;AACb,UAAM,OAAO,OAAO,IAAI,IAAI;AAC5B,QAAI,CAAC,KAAM,QAAO;AAClB,WAAO,EAAE,MAAM,OAAO,SAAS,IAAI,EAAE;AAAA,EACvC,CAAC,EACA,OAAO,CAAC,UAAoD,CAAC,CAAC,KAAK,EACnE,KAAK,CAAC,GAAG,MAAM,EAAE,MAAM,cAAc,EAAE,OAAO,UAAU,MAAM,EAAE,aAAa,OAAO,CAAC,CAAC;AAEzF,QAAM,YAAY,cACf,OAAO,CAAC,UAAU,CAAC,YAAY,IAAI,MAAM,IAAI,CAAC,EAC9C,IAAI,CAAC,WAAW,EAAE,MAAM,MAAM,MAAM,OAAO,SAAS,MAAM,IAAI,EAAE,EAAE,EAClE,KAAK,CAAC,GAAG,MAAM,EAAE,MAAM,cAAc,EAAE,OAAO,UAAU,MAAM,EAAE,aAAa,OAAO,CAAC,CAAC;AAEzF,SAAO,CAAC,GAAG,aAAa,GAAG,SAAS;AACtC;",
+  "sourcesContent": ["import registry from 'language-subtag-registry/data/json/registry.json'\n\ntype RegistryEntry = {\n  Type: string\n  Subtag?: string\n  Description?: string[]\n  Deprecated?: string\n}\n\nexport type IsoCountry = {\n  code: string\n  name: string\n}\n\nfunction isIsoAlpha2(entry: RegistryEntry): entry is RegistryEntry & { Subtag: string; Description: string[] } {\n  if (entry.Type !== 'region') return false\n  if (!entry.Subtag || !/^[A-Z]{2}$/.test(entry.Subtag)) return false\n  if (entry.Deprecated) return false\n  if (!entry.Description || !entry.Description.length) return false\n  if (entry.Description[0] === 'Private use') return false\n  return true\n}\n\nconst RAW_COUNTRIES: IsoCountry[] = (registry as RegistryEntry[])\n  .filter(isIsoAlpha2)\n  .map((entry) => ({\n    code: entry.Subtag,\n    name: entry.Description.join(', '),\n  }))\n\nexport const ISO_COUNTRIES: IsoCountry[] = [...RAW_COUNTRIES].sort((a, b) =>\n  a.name.localeCompare(b.name, 'en', { sensitivity: 'base' })\n)\n\nexport const COUNTRY_PRIORITY: string[] = ['PL', 'DE', 'ES', 'FR', 'IT', 'US', 'GB', 'CA']\n\nconst displayNameCache = new Map<string, Intl.DisplayNames>()\n\nfunction getDisplayNames(locale: string): Intl.DisplayNames | null {\n  if (typeof Intl === 'undefined' || typeof Intl.DisplayNames === 'undefined') return null\n  const key = locale || 'en'\n  let instance = displayNameCache.get(key)\n  if (!instance) {\n    try {\n      instance = new Intl.DisplayNames([key], { type: 'region' })\n      displayNameCache.set(key, instance)\n    } catch {\n      return null\n    }\n  }\n  return instance\n}\n\nexport function resolveCountryName(code: string, options: { locale?: string } = {}): string {\n  const normalized = code.toUpperCase()\n  const fallback = ISO_COUNTRIES.find((entry) => entry.code === normalized)?.name ?? normalized\n  const displayNames = getDisplayNames(options.locale ?? 'en')\n  if (!displayNames) return fallback\n  try {\n    const label = displayNames.of(normalized as any)\n    return typeof label === 'string' ? label : fallback\n  } catch {\n    return fallback\n  }\n}\n\nexport function buildCountryOptions(options: {\n  locale?: string\n  priority?: string[]\n  transformLabel?: (code: string, defaultLabel: string) => string\n} = {}): Array<{ code: string; label: string }> {\n  const { locale, transformLabel } = options\n  const priority = (options.priority ?? COUNTRY_PRIORITY).map((code) => code.toUpperCase())\n  const prioritySet = new Set(priority)\n  const labelFor = (code: string) => {\n    const base = resolveCountryName(code, { locale })\n    return transformLabel ? transformLabel(code, base) : base\n  }\n\n  const byCode = new Map(ISO_COUNTRIES.map((entry) => [entry.code, entry]))\n\n  const prioritized = priority\n    .map((code) => {\n      const base = byCode.get(code)\n      if (!base) return null\n      return { code, label: labelFor(code) }\n    })\n    .filter((entry): entry is { code: string; label: string } => !!entry)\n    .sort((a, b) => a.label.localeCompare(b.label, locale ?? 'en', { sensitivity: 'base' }))\n\n  const remaining = ISO_COUNTRIES\n    .filter((entry) => !prioritySet.has(entry.code))\n    .map((entry) => ({ code: entry.code, label: labelFor(entry.code) }))\n    .sort((a, b) => a.label.localeCompare(b.label, locale ?? 'en', { sensitivity: 'base' }))\n\n  return [...prioritized, ...remaining]\n}\n"],
+  "mappings": "AAAA,OAAO,cAAc;AAcrB,SAAS,YAAY,OAA0F;AAC7G,MAAI,MAAM,SAAS,SAAU,QAAO;AACpC,MAAI,CAAC,MAAM,UAAU,CAAC,aAAa,KAAK,MAAM,MAAM,EAAG,QAAO;AAC9D,MAAI,MAAM,WAAY,QAAO;AAC7B,MAAI,CAAC,MAAM,eAAe,CAAC,MAAM,YAAY,OAAQ,QAAO;AAC5D,MAAI,MAAM,YAAY,CAAC,MAAM,cAAe,QAAO;AACnD,SAAO;AACT;AAEA,MAAM,gBAA+B,SAClC,OAAO,WAAW,EAClB,IAAI,CAAC,WAAW;AAAA,EACf,MAAM,MAAM;AAAA,EACZ,MAAM,MAAM,YAAY,KAAK,IAAI;AACnC,EAAE;AAEG,MAAM,gBAA8B,CAAC,GAAG,aAAa,EAAE;AAAA,EAAK,CAAC,GAAG,MACrE,EAAE,KAAK,cAAc,EAAE,MAAM,MAAM,EAAE,aAAa,OAAO,CAAC;AAC5D;AAEO,MAAM,mBAA6B,CAAC,MAAM,MAAM,MAAM,MAAM,MAAM,MAAM,MAAM,IAAI;AAEzF,MAAM,mBAAmB,oBAAI,IAA+B;AAE5D,SAAS,gBAAgB,QAA0C;AACjE,MAAI,OAAO,SAAS,eAAe,OAAO,KAAK,iBAAiB,YAAa,QAAO;AACpF,QAAM,MAAM,UAAU;AACtB,MAAI,WAAW,iBAAiB,IAAI,GAAG;AACvC,MAAI,CAAC,UAAU;AACb,QAAI;AACF,iBAAW,IAAI,KAAK,aAAa,CAAC,GAAG,GAAG,EAAE,MAAM,SAAS,CAAC;AAC1D,uBAAiB,IAAI,KAAK,QAAQ;AAAA,IACpC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,mBAAmB,MAAc,UAA+B,CAAC,GAAW;AAC1F,QAAM,aAAa,KAAK,YAAY;AACpC,QAAM,WAAW,cAAc,KAAK,CAAC,UAAU,MAAM,SAAS,UAAU,GAAG,QAAQ;AACnF,QAAM,eAAe,gBAAgB,QAAQ,UAAU,IAAI;AAC3D,MAAI,CAAC,aAAc,QAAO;AAC1B,MAAI;AACF,UAAM,QAAQ,aAAa,GAAG,UAAiB;AAC/C,WAAO,OAAO,UAAU,WAAW,QAAQ;AAAA,EAC7C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,oBAAoB,UAIhC,CAAC,GAA2C;AAC9C,QAAM,EAAE,QAAQ,eAAe,IAAI;AACnC,QAAM,YAAY,QAAQ,YAAY,kBAAkB,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC;AACxF,QAAM,cAAc,IAAI,IAAI,QAAQ;AACpC,QAAM,WAAW,CAAC,SAAiB;AACjC,UAAM,OAAO,mBAAmB,MAAM,EAAE,OAAO,CAAC;AAChD,WAAO,iBAAiB,eAAe,MAAM,IAAI,IAAI;AAAA,EACvD;AAEA,QAAM,SAAS,IAAI,IAAI,cAAc,IAAI,CAAC,UAAU,CAAC,MAAM,MAAM,KAAK,CAAC,CAAC;AAExE,QAAM,cAAc,SACjB,IAAI,CAAC,SAAS;AACb,UAAM,OAAO,OAAO,IAAI,IAAI;AAC5B,QAAI,CAAC,KAAM,QAAO;AAClB,WAAO,EAAE,MAAM,OAAO,SAAS,IAAI,EAAE;AAAA,EACvC,CAAC,EACA,OAAO,CAAC,UAAoD,CAAC,CAAC,KAAK,EACnE,KAAK,CAAC,GAAG,MAAM,EAAE,MAAM,cAAc,EAAE,OAAO,UAAU,MAAM,EAAE,aAAa,OAAO,CAAC,CAAC;AAEzF,QAAM,YAAY,cACf,OAAO,CAAC,UAAU,CAAC,YAAY,IAAI,MAAM,IAAI,CAAC,EAC9C,IAAI,CAAC,WAAW,EAAE,MAAM,MAAM,MAAM,OAAO,SAAS,MAAM,IAAI,EAAE,EAAE,EAClE,KAAK,CAAC,GAAG,MAAM,EAAE,MAAM,cAAc,EAAE,OAAO,UAAU,MAAM,EAAE,aAAa,OAAO,CAAC,CAAC;AAEzF,SAAO,CAAC,GAAG,aAAa,GAAG,SAAS;AACtC;",
   "names": []
 }

package/dist/lib/string.js

@@ -4,12 +4,7 @@ function trimToUndefined(value) {
   const trimmed = value.trim();
   return trimmed.length > 0 ? trimmed : void 0;
 }
-function parseCommaSeparatedList(value) {
-  if (typeof value !== "string") return [];
-  return value.split(",").map((entry) => entry.trim()).filter(Boolean);
-}
 export {
-  parseCommaSeparatedList,
   toOptionalString,
   trimToUndefined
 };

package/dist/lib/string.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/lib/string.ts"],
-  "sourcesContent": ["export { toOptionalString } from './string/coerce'\n\nexport function trimToUndefined(value: unknown): string | undefined {\n  if (typeof value !== 'string') return undefined\n  const trimmed = value.trim()\n  return trimmed.length > 0 ? trimmed : undefined\n}\n\nexport function parseCommaSeparatedList(value: string | null | undefined): string[] {\n  if (typeof value !== 'string') return []\n  return value\n    .split(',')\n    .map((entry) => entry.trim())\n    .filter(Boolean)\n}\n\n"],
-  "mappings": "AAAA,SAAS,wBAAwB;AAE1B,SAAS,gBAAgB,OAAoC;AAClE,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEO,SAAS,wBAAwB,OAA4C;AAClF,MAAI,OAAO,UAAU,SAAU,QAAO,CAAC;AACvC,SAAO,MACJ,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,OAAO;AACnB;",
+  "sourcesContent": ["export { toOptionalString } from './string/coerce'\n\nexport function trimToUndefined(value: unknown): string | undefined {\n  if (typeof value !== 'string') return undefined\n  const trimmed = value.trim()\n  return trimmed.length > 0 ? trimmed : undefined\n}\n\n"],
+  "mappings": "AAAA,SAAS,wBAAwB;AAE1B,SAAS,gBAAgB,OAAoC;AAClE,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;",
   "names": []
 }

package/dist/lib/version.js

@@ -1,4 +1,4 @@
-const APP_VERSION = "0.6.6-develop.6543.1.49fadb4c31";
+const APP_VERSION = "0.6.6";
 const appVersion = APP_VERSION;
 export {
   APP_VERSION,

package/dist/lib/version.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/lib/version.ts"],
-  "sourcesContent": ["// Build-time generated version\nexport const APP_VERSION = '0.6.6-develop.6543.1.49fadb4c31'\nexport const appVersion = APP_VERSION\n"],
+  "sourcesContent": ["// Build-time generated version\nexport const APP_VERSION = '0.6.6'\nexport const appVersion = APP_VERSION\n"],
   "mappings": "AACO,MAAM,cAAc;AACpB,MAAM,aAAa;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/shared",
-  "version": "0.6.6-develop.6543.1.49fadb4c31",
+  "version": "0.6.6",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -97,7 +97,7 @@
     "@mikro-orm/core": "^7.1.5",
     "@mikro-orm/decorators": "^7.1.5",
     "@mikro-orm/postgresql": "^7.1.5",
-    "@open-mercato/cache": "0.6.6-develop.6543.1.49fadb4c31",
+    "@open-mercato/cache": "0.6.6",
     "@types/sanitize-html": "^2.16.1",
     "dotenv": "^17.4.2",
     "pino": "^10.3.1",
@@ -120,6 +120,5 @@
     "type": "git",
     "url": "https://github.com/open-mercato/open-mercato",
     "directory": "packages/shared"
-  },
-  "stableVersion": "0.6.5"
+  }
 }

package/src/lib/auth/__tests__/server.test.ts

@@ -82,6 +82,45 @@ describe('auth server integrity checks', () => {
     expect(resolveCanonicalStaffAuthContext).toHaveBeenCalledWith(em, auth)
   })
 
+  it('reports a transient DB failure as "error", never "invalid" (issue #4176 — no mass logout)', async () => {
+    const { resolveAuthFromRequestDetailed, resolveAuthFromCookiesDetailed } = await import('@open-mercato/shared/lib/auth/server')
+    const auth = {
+      sub: '11111111-1111-4111-8111-111111111111',
+      tenantId: '22222222-2222-4222-8222-222222222222',
+      orgId: '33333333-3333-4333-8333-333333333333',
+      roles: [],
+    }
+
+    verifyJwt.mockReturnValue(auth)
+    // A DB blip / pool exhaustion / timeout throws from the canonical lookup.
+    resolveCanonicalStaffAuthContext.mockRejectedValue(new Error('connection pool exhausted'))
+
+    const request = new Request('https://example.test/api/test', {
+      headers: { cookie: 'auth_token=jwt-token' },
+    })
+
+    await expect(resolveAuthFromRequestDetailed(request)).resolves.toEqual({ auth: null, status: 'error' })
+
+    cookieStore.get.mockImplementation((name: string) => {
+      if (name === 'auth_token') return { value: 'jwt-token' }
+      return undefined
+    })
+    await expect(resolveAuthFromCookiesDetailed()).resolves.toEqual({ auth: null, status: 'error' })
+  })
+
+  it('still reports a genuinely bad token as "invalid" when it throws during verify', async () => {
+    const { resolveAuthFromRequestDetailed } = await import('@open-mercato/shared/lib/auth/server')
+    verifyJwt.mockImplementation(() => {
+      throw new Error('malformed token')
+    })
+
+    const request = new Request('https://example.test/api/test', {
+      headers: { cookie: 'auth_token=jwt-token' },
+    })
+
+    await expect(resolveAuthFromRequestDetailed(request)).resolves.toEqual({ auth: null, status: 'invalid' })
+  })
+
   it('replaces stale JWT roles with canonical roles from the database', async () => {
     const { getAuthFromRequest } = await import('@open-mercato/shared/lib/auth/server')
     const jwtAuth = {

package/src/lib/auth/server.ts

@@ -23,12 +23,29 @@ export type AuthContext = {
 } | null
 
 type CookieOverride = { applied: boolean; value: string | null }
-type AuthResolutionStatus = 'authenticated' | 'missing' | 'invalid'
+// 'error' means auth could not be determined because of a transient/unexpected
+// failure (DB unavailable, connection-pool exhaustion, statement timeout, …) —
+// NOT because the token is genuinely invalid. Callers MUST NOT clear the user's
+// session cookies for 'error'; doing so would log everyone out at once during a
+// shared infrastructure blip (issue #4176).
+type AuthResolutionStatus = 'authenticated' | 'missing' | 'invalid' | 'error'
 type AuthResolution = {
   auth: AuthContext
   status: AuthResolutionStatus
 }
 
+// Thrown by `resolveCanonicalInteractiveAuthContext` when the canonical auth
+// lookup itself fails unexpectedly (as opposed to resolving to a genuine
+// "not authorized" null). Kept distinct so resolvers can map it to the
+// non-destructive 'error' status instead of the cookie-clearing 'invalid'.
+export class AuthResolutionUnavailableError extends Error {
+  constructor(cause?: unknown) {
+    super('Auth resolution unavailable')
+    this.name = 'AuthResolutionUnavailableError'
+    if (cause !== undefined) (this as { cause?: unknown }).cause = cause
+  }
+}
+
 // Symbol-keyed trusted auth context. Set on synthetic Request objects by
 // callers that have already authenticated (e.g. the AI in-process operation
 // runner) so downstream auth resolution short-circuits without re-running
@@ -263,8 +280,12 @@ async function resolveCanonicalInteractiveAuthContext(auth: AuthContext): Promis
     const container = await createRequestContainer()
     const em = container.resolve('em') as EntityManager
     return await resolveCanonicalStaffAuthContext(em, auth)
-  } catch {
-    return null
+  } catch (err) {
+    // A thrown error here means we could not check the token against the
+    // database (DB down, pool exhausted, timeout). This is NOT the same as the
+    // token being invalid — surface it so callers keep the session intact and
+    // fail the request transiently instead of force-logging the user out.
+    throw new AuthResolutionUnavailableError(err)
   }
 }
 
@@ -284,7 +305,8 @@ export async function resolveAuthFromCookiesDetailed(): Promise<AuthResolution>
       auth: applySuperAdminScope(canonicalAuth, tenantCookie, orgCookie),
       status: 'authenticated',
     }
-  } catch {
+  } catch (err) {
+    if (err instanceof AuthResolutionUnavailableError) return { auth: null, status: 'error' }
     return { auth: null, status: 'invalid' }
   }
 }
@@ -307,6 +329,7 @@ export async function resolveAuthFromRequestDetailed(req: Request): Promise<Auth
   const authHeader = (req.headers.get('authorization') || '').trim()
   let token: string | undefined
   let hadInvalidInteractiveToken = false
+  let hadUnavailableResolution = false
   if (authHeader.toLowerCase().startsWith('bearer ')) token = authHeader.slice(7).trim()
   if (!token) {
     const match = cookieHeader.match(/(?:^|;\s*)auth_token=([^;]+)/)
@@ -326,18 +349,25 @@ export async function resolveAuthFromRequestDetailed(req: Request): Promise<Auth
         }
         hadInvalidInteractiveToken = true
       }
-    } catch {
-      hadInvalidInteractiveToken = true
+    } catch (err) {
+      // Transient/unexpected canonical-resolution failures must not invalidate
+      // the token — surface them so we return 'error' (retryable) rather than
+      // clearing the session cookies.
+      if (err instanceof AuthResolutionUnavailableError) hadUnavailableResolution = true
+      else hadInvalidInteractiveToken = true
     }
   }
 
+  const resolveUnauthenticatedStatus = (): AuthResolutionStatus =>
+    hadUnavailableResolution ? 'error' : hadInvalidInteractiveToken ? 'invalid' : 'missing'
+
   const apiKey = extractApiKey(req)
   if (!apiKey) {
-    return { auth: null, status: hadInvalidInteractiveToken ? 'invalid' : 'missing' }
+    return { auth: null, status: resolveUnauthenticatedStatus() }
   }
   const apiAuth = await resolveApiKeyAuth(apiKey)
   if (!apiAuth) {
-    return { auth: null, status: hadInvalidInteractiveToken ? 'invalid' : 'missing' }
+    return { auth: null, status: resolveUnauthenticatedStatus() }
   }
   return {
     auth: applySuperAdminScope(apiAuth, tenantCookie, orgCookie),

package/src/lib/crud/factory.ts

@@ -510,14 +510,6 @@ function json(data: any, init?: ResponseInit) {
   })
 }
 
-// Name of the selected-organization cookie (mirrors the directory module's
-// OrganizationSwitcher, which writes `om_selected_org=...; path=/; samesite=lax`).
-// Kept as a local literal so shared has no import dependency on a domain package.
-const SELECTED_ORG_COOKIE = 'om_selected_org'
-// Set-Cookie value that expires the stale selection so the next request falls
-// back to the caller's home org. Attributes mirror how the switcher sets it.
-const CLEAR_SELECTED_ORG_COOKIE = `${SELECTED_ORG_COOKIE}=; Path=/; Max-Age=0; SameSite=Lax`
-
 function attachOperationHeader(res: Response, logEntry: any) {
   if (!res || !(res instanceof Response)) return res
   if (!logEntry || typeof logEntry !== 'object') return res
@@ -1347,42 +1339,6 @@ export function makeCrudRoute<TCreate = any, TUpdate = any, TList = any>(opts: C
     return { container, auth: scopedAuth, organizationScope: scope, selectedOrganizationId, organizationIds, request }
   }
 
-  // The caller explicitly selected an organization (selected-org cookie) that no
-  // longer resolves to a real, accessible org — e.g. a stale cookie after a DB
-  // reset, or after the caller lost access to that org. Rather than silently
-  // acting against a fallback org the caller did not select (writes) or showing
-  // a different org's data than the one selected (reads), fail loud on every
-  // org-scoped record operation so the client re-selects. Recovery surfaces
-  // (org switcher, nav, profile) are custom routes, not this factory, so they
-  // keep working. Returns a 422 Response when rejected, otherwise null.
-  function rejectInvalidOrgSelection(ctx: CrudCtx, action: 'list' | 'create' | 'update' | 'delete'): Response | null {
-    if (!ormCfg.orgField) return null
-    if (!(ctx.organizationScope as OrganizationScope | null | undefined)?.selectionRejected) return null
-    logForbidden({
-      resourceKind,
-      action,
-      reason: 'organization_selection_invalid',
-      userId: ctx.auth?.sub ?? null,
-      tenantId: ctx.auth?.tenantId ?? null,
-      organizationIds: ctx.organizationIds,
-    })
-    // Self-heal reads: expire the stale selected-org cookie so the caller's next
-    // request falls back to their home org and the session recovers on its own
-    // (important for single-org users, who have no org switcher to re-select
-    // from). Writes intentionally do NOT clear it — a mutation must go through an
-    // explicit, valid re-selection, never silently target a fallback org.
-    const headers: Record<string, string> = action === 'list'
-      ? { 'set-cookie': CLEAR_SELECTED_ORG_COOKIE }
-      : {}
-    return json(
-      {
-        error: 'Your selected organization is no longer available. Please re-select an organization and try again.',
-        code: 'organization_selection_invalid',
-      },
-      { status: 422, headers },
-    )
-  }
-
   async function GET(request: Request) {
     const profiler = createCrudProfiler(resourceKind, 'list')
     const requestMeta: Record<string, unknown> = { method: request.method }
@@ -1410,11 +1366,6 @@ export function makeCrudRoute<TCreate = any, TUpdate = any, TList = any>(opts: C
         finishProfile({ reason: 'unauthorized' })
         return json({ error: 'Unauthorized' }, { status: 401 })
       }
-      const listSelectionRejected = rejectInvalidOrgSelection(ctx, 'list')
-      if (listSelectionRejected) {
-        finishProfile({ reason: 'organization_selection_invalid' })
-        return listSelectionRejected
-      }
       if (!opts.list) {
         finishProfile({ reason: 'list_not_configured' })
         return json({ error: 'Not implemented' }, { status: 501 })
@@ -2081,8 +2032,6 @@ export function makeCrudRoute<TCreate = any, TUpdate = any, TList = any>(opts: C
       if (!opts.create && !useCommand) return json({ error: 'Not implemented' }, { status: 501 })
       const ctx = await withCtx(request)
       if (!ctx.auth) return json({ error: 'Unauthorized' }, { status: 401 })
-      const createSelectionRejected = rejectInvalidOrgSelection(ctx, 'create')
-      if (createSelectionRejected) return createSelectionRejected
       if (ormCfg.orgField && ctx.organizationIds && ctx.organizationIds.length === 0) {
         logForbidden({
           resourceKind,
@@ -2353,8 +2302,6 @@ export function makeCrudRoute<TCreate = any, TUpdate = any, TList = any>(opts: C
       if (!opts.update && !useCommand) return json({ error: 'Not implemented' }, { status: 501 })
       const ctx = await withCtx(request)
       if (!ctx.auth) return json({ error: 'Unauthorized' }, { status: 401 })
-      const updateSelectionRejected = rejectInvalidOrgSelection(ctx, 'update')
-      if (updateSelectionRejected) return updateSelectionRejected
       if (ormCfg.orgField && ctx.organizationIds && ctx.organizationIds.length === 0) {
         logForbidden({
           resourceKind,
@@ -2684,8 +2631,6 @@ export function makeCrudRoute<TCreate = any, TUpdate = any, TList = any>(opts: C
     try {
       const ctx = await withCtx(request)
       if (!ctx.auth) return json({ error: 'Unauthorized' }, { status: 401 })
-      const deleteSelectionRejected = rejectInvalidOrgSelection(ctx, 'delete')
-      if (deleteSelectionRejected) return deleteSelectionRejected
       if (ormCfg.orgField && ctx.organizationIds && ctx.organizationIds.length === 0) {
         logForbidden({
           resourceKind,

package/src/lib/location/countries.ts

@@ -28,18 +28,9 @@ const RAW_COUNTRIES: IsoCountry[] = (registry as RegistryEntry[])
     name: entry.Description.join(', '),
   }))
 
-// Codes in common use that the language-subtag registry does not list as region subtags.
-// XK is user-assigned rather than ISO 3166-1 assigned, so it never appears in the registry.
-const SUPPLEMENTAL_COUNTRIES: IsoCountry[] = [
-  { code: 'XK', name: 'Kosovo' },
-]
-
-const RAW_COUNTRY_CODES = new Set(RAW_COUNTRIES.map((entry) => entry.code))
-
-export const ISO_COUNTRIES: IsoCountry[] = [
-  ...RAW_COUNTRIES,
-  ...SUPPLEMENTAL_COUNTRIES.filter((entry) => !RAW_COUNTRY_CODES.has(entry.code)),
-].sort((a, b) => a.name.localeCompare(b.name, 'en', { sensitivity: 'base' }))
+export const ISO_COUNTRIES: IsoCountry[] = [...RAW_COUNTRIES].sort((a, b) =>
+  a.name.localeCompare(b.name, 'en', { sensitivity: 'base' })
+)
 
 export const COUNTRY_PRIORITY: string[] = ['PL', 'DE', 'ES', 'FR', 'IT', 'US', 'GB', 'CA']
 
@@ -67,9 +58,7 @@ export function resolveCountryName(code: string, options: { locale?: string } =
   if (!displayNames) return fallback
   try {
     const label = displayNames.of(normalized as any)
-    // Intl echoes the raw code back when its ICU data cannot resolve the region.
-    if (typeof label !== 'string' || label === normalized) return fallback
-    return label
+    return typeof label === 'string' ? label : fallback
   } catch {
     return fallback
   }

package/src/lib/string.ts

@@ -6,11 +6,3 @@ export function trimToUndefined(value: unknown): string | undefined {
   return trimmed.length > 0 ? trimmed : undefined
 }
 
-export function parseCommaSeparatedList(value: string | null | undefined): string[] {
-  if (typeof value !== 'string') return []
-  return value
-    .split(',')
-    .map((entry) => entry.trim())
-    .filter(Boolean)
-}
-

package/src/lib/__tests__/string.test.ts

@@ -1,49 +0,0 @@
-import { parseCommaSeparatedList, trimToUndefined } from '../string'
-
-describe('parseCommaSeparatedList', () => {
-  it('splits a comma-separated string into entries', () => {
-    expect(parseCommaSeparatedList('low,medium,high')).toEqual(['low', 'medium', 'high'])
-  })
-
-  it('trims surrounding whitespace from every entry', () => {
-    expect(parseCommaSeparatedList(' admin ,  editor,viewer  ')).toEqual(['admin', 'editor', 'viewer'])
-  })
-
-  it('drops empty entries produced by repeated or trailing separators', () => {
-    expect(parseCommaSeparatedList('a,,b,')).toEqual(['a', 'b'])
-    expect(parseCommaSeparatedList(',a, ,b')).toEqual(['a', 'b'])
-  })
-
-  it('returns an empty array when every entry is blank', () => {
-    expect(parseCommaSeparatedList(',,')).toEqual([])
-    expect(parseCommaSeparatedList('  ,  ')).toEqual([])
-  })
-
-  it('returns an empty array for blank or non-string inputs', () => {
-    expect(parseCommaSeparatedList('')).toEqual([])
-    expect(parseCommaSeparatedList('   ')).toEqual([])
-    expect(parseCommaSeparatedList(null)).toEqual([])
-    expect(parseCommaSeparatedList(undefined)).toEqual([])
-  })
-
-  it('returns a single entry when the input has no separator', () => {
-    expect(parseCommaSeparatedList('admin')).toEqual(['admin'])
-    expect(parseCommaSeparatedList('  admin  ')).toEqual(['admin'])
-  })
-
-  it('preserves interior whitespace within an entry', () => {
-    expect(parseCommaSeparatedList('order created, order shipped')).toEqual(['order created', 'order shipped'])
-  })
-})
-
-describe('trimToUndefined', () => {
-  it('returns the trimmed value when it is a non-blank string', () => {
-    expect(trimToUndefined('  value  ')).toBe('value')
-  })
-
-  it('returns undefined for blank or non-string values', () => {
-    expect(trimToUndefined('   ')).toBeUndefined()
-    expect(trimToUndefined(null)).toBeUndefined()
-    expect(trimToUndefined(42)).toBeUndefined()
-  })
-})

package/src/lib/location/__tests__/countries.test.ts

@@ -1,82 +0,0 @@
-import {
-  COUNTRY_PRIORITY,
-  ISO_COUNTRIES,
-  buildCountryOptions,
-  resolveCountryName,
-} from '../countries'
-
-describe('ISO_COUNTRIES', () => {
-  it('includes Kosovo, which the language-subtag registry does not list', () => {
-    const kosovo = ISO_COUNTRIES.filter((entry) => entry.code === 'XK')
-    expect(kosovo).toEqual([{ code: 'XK', name: 'Kosovo' }])
-  })
-
-  it('does not duplicate any country code', () => {
-    const codes = ISO_COUNTRIES.map((entry) => entry.code)
-    expect(codes).toHaveLength(new Set(codes).size)
-  })
-
-  it('keeps registry-derived countries intact', () => {
-    expect(ISO_COUNTRIES).toEqual(
-      expect.arrayContaining([
-        { code: 'PL', name: 'Poland' },
-        { code: 'DE', name: 'Germany' },
-      ])
-    )
-  })
-
-  it('stays sorted by name', () => {
-    const names = ISO_COUNTRIES.map((entry) => entry.name)
-    const sorted = [...names].sort((a, b) => a.localeCompare(b, 'en', { sensitivity: 'base' }))
-    expect(names).toEqual(sorted)
-  })
-})
-
-describe('resolveCountryName', () => {
-  it('resolves Kosovo for XK', () => {
-    expect(resolveCountryName('XK')).toBe('Kosovo')
-  })
-
-  it('resolves Kosovo for a lowercase xk', () => {
-    expect(resolveCountryName('xk')).toBe('Kosovo')
-  })
-
-  it('still resolves registry-backed countries', () => {
-    expect(resolveCountryName('PL')).toBe('Poland')
-  })
-
-  it('falls back to the raw code for an unknown region', () => {
-    expect(resolveCountryName('ZZZ')).toBe('ZZZ')
-  })
-})
-
-describe('buildCountryOptions', () => {
-  it('offers Kosovo as a selectable option', () => {
-    const options = buildCountryOptions()
-    expect(options).toEqual(expect.arrayContaining([{ code: 'XK', label: 'Kosovo' }]))
-  })
-
-  it('offers exactly one Kosovo option', () => {
-    const options = buildCountryOptions().filter((option) => option.code === 'XK')
-    expect(options).toHaveLength(1)
-  })
-
-  it('lists Kosovo after the prioritized countries', () => {
-    const options = buildCountryOptions()
-    const kosovoIndex = options.findIndex((option) => option.code === 'XK')
-    expect(kosovoIndex).toBeGreaterThanOrEqual(COUNTRY_PRIORITY.length)
-  })
-
-  it('keeps the prioritized countries at the top', () => {
-    const options = buildCountryOptions()
-    const leading = options.slice(0, COUNTRY_PRIORITY.length).map((option) => option.code)
-    expect(leading.slice().sort()).toEqual(COUNTRY_PRIORITY.slice().sort())
-  })
-
-  it('applies transformLabel to the supplemental country too', () => {
-    const options = buildCountryOptions({
-      transformLabel: (code, defaultLabel) => `${defaultLabel} (${code})`,
-    })
-    expect(options).toEqual(expect.arrayContaining([{ code: 'XK', label: 'Kosovo (XK)' }]))
-  })
-})