@open-mercato/ui 0.5.1-develop.2652.0276e72e45 → 0.5.1-develop.2657.a01847a9fa

package/.turbo/turbo-build.log

@@ -1,3 +1,3 @@
 Generated lucide registry with 127 icons -> /home/runner/work/open-mercato/open-mercato/packages/ui/src/backend/icons/lucideRegistry.generated.tsx
-Found 256 entry points
+Found 257 entry points
 ui built successfully

package/AGENTS.md

@@ -249,19 +249,43 @@ function MyPage({ orgSlug }) {
 | `section:portal:sidebar` | Navigation sidebar |
 | `section:portal:user-menu` | User dropdown |
 
-### Declarative Customer Auth in Page Metadata
+### Portal Page Metadata (REQUIRED)
 
-Portal pages can declare `requireCustomerAuth: true` and `requireCustomerFeatures` in their page metadata:
+Every portal page (any page under `frontend/[orgSlug]/portal/...`) MUST ship a sibling `page.meta.ts`. The `(frontend)` catch-all server-side enforces `requireCustomerAuth` and `requireCustomerFeatures` from the route manifest, so omitting metadata silently disables access control on a page that should be guarded.
+
+Authoring checklist for each portal page:
+- Public pages (`login`, `signup`, `verify`, anonymous landing): set `navHidden: true`. Do not set `requireCustomerAuth`.
+- Authenticated pages: set `requireCustomerAuth: true`.
+- Pages that need feature gating: add `requireCustomerFeatures: ['portal.<feature>']`. Wildcard grants like `portal.*` are honored by the shared matcher.
+- Pages that should appear in the portal sidebar: add a `nav` block (label + group). Pages without `nav` are routable but not auto-listed (correct for detail/edit pages).
 
 ```typescript
 // frontend/[orgSlug]/portal/orders/page.meta.ts
-export const metadata = {
+import type { PageMetadata } from '@open-mercato/shared/modules/registry'
+
+export const metadata: PageMetadata = {
   requireCustomerAuth: true,
   requireCustomerFeatures: ['portal.orders.view'],
-  navHidden: true,
+  titleKey: 'orders.nav.title',
+  title: 'Orders',
+  nav: {
+    label: 'Orders',
+    labelKey: 'orders.nav.title',
+    group: 'main', // 'main' | 'account'
+    order: 20,
+    icon: 'shopping-bag',
+  },
 }
+
+export default metadata
 ```
 
+The portal sidebar is built from these `nav` declarations by `/api/customer_accounts/portal/nav`, filtered by `CustomerRbacService` against the same `requireCustomerFeatures` that gates access. Granting the feature to a customer role is sufficient for the entry to appear — no separate menu-injection widget required.
+
+For external links or items without a backing portal page, keep using `usePortalInjectedMenuItems` widgets.
+
+Reference: see `packages/core/src/modules/portal/frontend/[orgSlug]/portal/{dashboard,profile,login,signup,verify}/page.meta.ts` for examples.
+
 ### Declarative Customer Role Features in setup.ts
 
 Modules can declare features to be merged into customer role ACLs:

package/agentic/standalone-guide.md

@@ -206,6 +206,103 @@ import {
 | `PortalNotificationBell` | `t` | Header bell icon with unread badge |
 | `PortalNotificationPanel` | — | Notification dropdown panel |
 
+### Portal Page Structure
+
+Every portal page is two files under `frontend/[orgSlug]/portal/<path>/`:
+
+```
+page.tsx        # Client component ("use client")
+page.meta.ts    # PageMetadata — access control + sidebar nav
+```
+
+Minimal page:
+
+```tsx
+"use client"
+import { usePortalContext } from '@open-mercato/ui/portal/PortalContext'
+import { PortalPageHeader } from '@open-mercato/ui/portal/components'
+
+export default function MyPortalPage({ params }: { params: { orgSlug: string } }) {
+  const { auth } = usePortalContext()
+  const { user, resolvedFeatures } = auth
+  return <PortalPageHeader title="Orders" />
+}
+```
+
+Prefer `usePortalContext()` inside pages wrapped by `PortalLayoutShell` — it reads server-hydrated auth and avoids client loading flashes. Reach for `useCustomerAuth(orgSlug)` only when the server wrapper is unavailable.
+
+Minimal `page.meta.ts`:
+
+```ts
+import type { PageMetadata } from '@open-mercato/shared/modules/registry'
+
+export const metadata: PageMetadata = {
+  requireCustomerAuth: true,
+  requireCustomerFeatures: ['portal.orders.view'],
+  titleKey: 'portal.orders.title',
+  title: 'Orders',
+  nav: { label: 'Orders', labelKey: 'portal.nav.orders', group: 'main', order: 20 },
+}
+
+export default metadata
+```
+
+- Public pages (login, signup, verify, forgot/reset-password): omit `requireCustomerAuth`; set `navHidden: true`.
+- Authenticated pages without sidebar presence (detail/create/edit): set `requireCustomerAuth: true`, **omit** `nav`.
+- Sidebar-visible pages: include a `nav` block. Feature-gated pages are automatically hidden when the user lacks grants.
+
+Reference: `packages/core/src/modules/portal/frontend/[orgSlug]/portal/{dashboard,profile}/page.{tsx,meta.ts}`.
+
+### Portal Feature-Gating Contract
+
+Single source of truth: `requireCustomerFeatures` in `page.meta.ts`. The same list is enforced in three layers:
+
+| Layer | Where | Effect |
+|---|---|---|
+| Page access | `apps/mercato/src/app/(frontend)/[...slug]/page.tsx` | Server-side gate via `CustomerRbacService.userHasAllFeatures()` — missing feature blocks render |
+| Sidebar entry | `/api/customer_accounts/portal/nav` → `buildPortalNav()` at `packages/ui/src/portal/utils/nav.ts` | Same check — missing feature omits the entry |
+| Injection widgets | `usePortalInjectedMenuItems` / `usePortalDashboardWidgets` | `/api/customer_accounts/portal/feature-check` + `hasAllFeatures()` — missing feature filters the widget |
+
+Granting a customer role a feature (e.g. `portal.orders.view`) is sufficient to (a) reach the page, (b) see the sidebar entry, (c) see widgets gated by that feature. No separate menu-injection widget is required for sidebar presence when the page is backed by `page.meta.ts` with a `nav` block.
+
+**MUST** resolve features via `hasAllFeatures` / `matchFeature` from `@open-mercato/shared/security/features`. Raw `Array.includes()` or `Set.has()` on feature arrays misses wildcards (`portal.*`) and is a bug.
+
+Declare features in `acl.ts`; ship defaults per role via `defaultCustomerRoleFeatures` in `setup.ts`. Never rely on client-side checks alone as the access gate.
+
+### Portal SPA CSRF Posture
+
+Dual cookies set by login (`packages/core/src/modules/customer_accounts/api/login.ts`):
+
+| Cookie | Contents | TTL | Flags |
+|---|---|---|---|
+| `customer_auth_token` | Short-lived JWT | 8h | `httpOnly`, `sameSite: 'lax'`, `secure` in prod, `path: '/'` |
+| `customer_session_token` | Raw session token (hashed at rest) | 30d (env: `CUSTOMER_SESSION_TTL_DAYS`) | same as above |
+
+Primary CSRF defense: `SameSite=lax` + same-origin deployment. No explicit CSRF token — the browser blocks cross-origin POSTs.
+
+Rules:
+- Use `apiCall` for every write — it uses `credentials: 'same-origin'` and sets JSON headers.
+- Never expose either cookie to JS. `httpOnly` is load-bearing; do not add companion cookies that mirror session state.
+- Never accept cross-origin POSTs on portal routes. Cross-origin use cases are explicit exceptions: per-tenant origin allowlist + CSRF token + re-auth.
+- `sameSite: 'lax'` lets GET navigations carry cookies — keep all state-changing side effects behind POST/PUT/PATCH/DELETE.
+- Logout (`api/portal/logout.ts`) clears both cookies with `maxAge: 0`. Mirror this shape for any new logout-style endpoints.
+
+Concurrent sessions are capped at `MAX_CUSTOMER_SESSIONS_PER_USER` (default 5) in `customerSessionService.createSession()`. New sessions above the cap soft-delete the oldest active session.
+
+### Portal XSS Discipline (Injected Widgets)
+
+Third-party widgets render inside the authenticated portal and inherit user cookies. Enforce stricter discipline than first-party code because widgets load from arbitrary modules.
+
+- **Forbidden**: `dangerouslySetInnerHTML` anywhere in portal injection widgets. Render structured data, not raw HTML.
+- **Labels and user-facing text**: always through `useT()`; render as text children, never as HTML.
+- **Icons**: Lucide components (`lucide-react`). No inline `<svg>` composed from user-controlled strings.
+- **Asset URLs** (`src`, `href`, `action`, `srcDoc`): must not be user-controlled unless validated server-side against an allowlist.
+- **No `eval`, `new Function`, `setTimeout(string)`**, or similar dynamic code paths.
+- **Event-handler payloads** from SSE: validate shape (`isPortalBroadcastEvent` guards dispatch; never trust `event.data` to be well-formed without schema validation).
+- **Styles**: no user-controlled strings in `style` props, CSS variables, or `className` built from untrusted input.
+
+Prefer components that accept structured props over ones accepting `children` / `innerHTML` — the host keeps control of escaping.
+
 ### PortalShell Usage
 
 ```tsx

package/dist/portal/PortalShell.js

@@ -1,6 +1,6 @@
 "use client";
 import { jsx, jsxs } from "react/jsx-runtime";
-import { useState, useCallback, useMemo } from "react";
+import { useEffect, useState, useCallback, useMemo } from "react";
 import Image from "next/image";
 import Link from "next/link";
 import { usePathname } from "next/navigation";
@@ -12,6 +12,7 @@ import { usePortalEventBridge } from "./hooks/usePortalEventBridge.js";
 import { mergeMenuItems } from "../backend/injection/mergeMenuItems.js";
 import { PortalNotificationBell } from "./components/PortalNotificationBell.js";
 import { usePortalContext } from "./PortalContext.js";
+import { apiCall } from "../backend/utils/apiCall.js";
 const PORTAL_SHELL_HANDLE = "page:portal:layout";
 const PORTAL_HEADER_HANDLE = "section:portal:header";
 const PORTAL_FOOTER_HANDLE = "section:portal:footer";
@@ -101,24 +102,53 @@ function PortalShell({
   const portalHome = orgSlug ? `/${orgSlug}/portal` : "/portal";
   const loginHref = orgSlug ? `/${orgSlug}/portal/login` : "/portal/login";
   const signupHref = orgSlug ? `/${orgSlug}/portal/signup` : "/portal/signup";
-  const dashboardHref = orgSlug ? `/${orgSlug}/portal/dashboard` : "/portal/dashboard";
-  const profileHref = orgSlug ? `/${orgSlug}/portal/profile` : "/portal/profile";
   const headerTitle = orgName || t("portal.title", "Customer Portal");
   const closeMobile = useCallback(() => setMobileOpen(false), []);
+  const [autoNavGroups, setAutoNavGroups] = useState([]);
+  useEffect(() => {
+    if (!authenticated) {
+      setAutoNavGroups([]);
+      return;
+    }
+    let cancelled = false;
+    const load = async () => {
+      try {
+        const { ok, result } = await apiCall(
+          "/api/customer_accounts/portal/nav"
+        );
+        if (cancelled || !ok || !result?.ok) return;
+        setAutoNavGroups(Array.isArray(result.groups) ? result.groups : []);
+      } catch {
+        if (!cancelled) setAutoNavGroups([]);
+      }
+    };
+    void load();
+    return () => {
+      cancelled = true;
+    };
+  }, [authenticated]);
   const mergedNavItems = useMemo(() => {
     if (!authenticated) return [];
-    const builtIn = [
-      { id: "portal-dashboard", labelKey: "portal.nav.dashboard", href: dashboardHref }
-    ];
+    const discovered = autoNavGroups.find((g) => g.id === "main")?.items ?? [];
+    const builtIn = discovered.map((item) => ({
+      id: item.id,
+      labelKey: item.labelKey,
+      label: item.label,
+      href: item.href
+    }));
     return mergeMenuItems(builtIn, injectedMainItems);
-  }, [authenticated, dashboardHref, injectedMainItems]);
+  }, [authenticated, autoNavGroups, injectedMainItems]);
   const mergedAccountItems = useMemo(() => {
     if (!authenticated) return [];
-    const builtIn = [
-      { id: "portal-profile", labelKey: "portal.nav.profile", href: profileHref }
-    ];
+    const discovered = autoNavGroups.find((g) => g.id === "account")?.items ?? [];
+    const builtIn = discovered.map((item) => ({
+      id: item.id,
+      labelKey: item.labelKey,
+      label: item.label,
+      href: item.href
+    }));
     return mergeMenuItems(builtIn, injectedAccountItems);
-  }, [authenticated, profileHref, injectedAccountItems]);
+  }, [authenticated, autoNavGroups, injectedAccountItems]);
   if (!authenticated) {
     return /* @__PURE__ */ jsxs("div", { className: "flex min-h-svh flex-col bg-background", "data-portal-handle": PORTAL_SHELL_HANDLE, children: [
       /* @__PURE__ */ jsx("header", { className: "sticky top-0 z-40 border-b bg-background/95 backdrop-blur supports-[backdrop-filter]:bg-background/80", "data-portal-handle": PORTAL_HEADER_HANDLE, children: /* @__PURE__ */ jsxs("div", { className: "mx-auto flex h-16 w-full max-w-screen-lg items-center justify-between px-6", children: [

package/dist/portal/PortalShell.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/portal/PortalShell.tsx"],
-  "sourcesContent": ["\"use client\"\nimport { type ReactNode, useState, useCallback, useMemo, useContext } from 'react'\nimport Image from 'next/image'\nimport Link from 'next/link'\nimport { usePathname } from 'next/navigation'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { Button } from '../primitives/button'\nimport { IconButton } from '../primitives/icon-button'\nimport { usePortalInjectedMenuItems } from './hooks/usePortalInjectedMenuItems'\nimport { usePortalEventBridge } from './hooks/usePortalEventBridge'\nimport { mergeMenuItems } from '../backend/injection/mergeMenuItems'\nimport type { MergedMenuItem } from '../backend/injection/mergeMenuItems'\nimport { PortalNotificationBell } from './components/PortalNotificationBell'\nimport { usePortalContext } from './PortalContext'\n\n// Component replacement handle IDs (FROZEN once shipped)\nexport const PORTAL_SHELL_HANDLE = 'page:portal:layout'\nexport const PORTAL_HEADER_HANDLE = 'section:portal:header'\nexport const PORTAL_FOOTER_HANDLE = 'section:portal:footer'\nexport const PORTAL_SIDEBAR_HANDLE = 'section:portal:sidebar'\nexport const PORTAL_USER_MENU_HANDLE = 'section:portal:user-menu'\n\nexport type PortalShellProps = {\n  children: ReactNode\n  /** Override orgSlug (used on public pages without context) */\n  orgSlug?: string\n  /** Override organization name (used on public pages without context) */\n  organizationName?: string\n  /** Whether to show authenticated layout. Auto-detected from context when omitted. */\n  authenticated?: boolean\n  /** Logout handler. Auto-provided from context when omitted. */\n  onLogout?: () => void\n  enableEventBridge?: boolean\n  /** Override user name. Auto-read from context when omitted. */\n  userName?: string\n  /** Override user email. Auto-read from context when omitted. */\n  userEmail?: string\n}\n\nfunction PortalEventBridgeMount() {\n  usePortalEventBridge()\n  return null\n}\n\n/* ---- Inline SVG icons ---- */\n\nfunction MenuIcon({ className }: { className?: string }) {\n  return (\n    <svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" strokeWidth=\"1.5\" strokeLinecap=\"round\" strokeLinejoin=\"round\" className={className}>\n      <line x1=\"4\" x2=\"20\" y1=\"12\" y2=\"12\" /><line x1=\"4\" x2=\"20\" y1=\"6\" y2=\"6\" /><line x1=\"4\" x2=\"20\" y1=\"18\" y2=\"18\" />\n    </svg>\n  )\n}\n\nfunction XIcon({ className }: { className?: string }) {\n  return (\n    <svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" strokeWidth=\"1.5\" strokeLinecap=\"round\" strokeLinejoin=\"round\" className={className}>\n      <path d=\"M18 6 6 18\" /><path d=\"m6 6 12 12\" />\n    </svg>\n  )\n}\n\nfunction LogOutIcon({ className }: { className?: string }) {\n  return (\n    <svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" strokeWidth=\"1.5\" strokeLinecap=\"round\" strokeLinejoin=\"round\" className={className}>\n      <path d=\"M9 21H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h4\" /><polyline points=\"16 17 21 12 16 7\" /><line x1=\"21\" x2=\"9\" y1=\"12\" y2=\"12\" />\n    </svg>\n  )\n}\n\n/* ---- Sidebar nav item ---- */\n\nfunction SidebarNavItem({\n  item,\n  active,\n  t,\n  onClick,\n}: {\n  item: MergedMenuItem\n  active: boolean\n  t: (key: string, fallback?: string) => string\n  onClick?: () => void\n}) {\n  const label = item.labelKey ? t(item.labelKey, item.label) : item.label\n  if (!label) return null\n\n  const cls = [\n    'flex items-center gap-2.5 rounded-lg px-3 py-2 text-[13px] font-medium transition-colors',\n    active\n      ? 'bg-foreground text-background'\n      : 'text-muted-foreground hover:bg-muted hover:text-foreground',\n  ].join(' ')\n\n  if (item.href) {\n    return (\n      <Link href={item.href} className={cls} data-menu-item-id={item.id} onClick={onClick}>\n        {label}\n      </Link>\n    )\n  }\n  if (item.onClick) {\n    return (\n      <button type=\"button\" className={cls} data-menu-item-id={item.id} onClick={() => { item.onClick?.(); onClick?.() }}>\n        {label}\n      </button>\n    )\n  }\n  return null\n}\n\n/* ---- User initials avatar ---- */\n\nfunction UserAvatar({ name, className }: { name?: string; className?: string }) {\n  const initials = name\n    ? name.split(' ').map((w) => w[0]).slice(0, 2).join('').toUpperCase()\n    : '?'\n  return (\n    <div className={`flex items-center justify-center rounded-full bg-foreground text-[11px] font-semibold text-background ${className ?? 'size-8'}`}>\n      {initials}\n    </div>\n  )\n}\n\n/* ---- Try reading from PortalContext ---- */\n\nfunction useOptionalPortalContext() {\n  try {\n    return usePortalContext()\n  } catch {\n    return null\n  }\n}\n\n/* ================================================================== */\n/*  PortalShell                                                       */\n/* ================================================================== */\n\n/**\n * Portal layout shell.\n *\n * When a `PortalProvider` is mounted in a parent layout, PortalShell reads\n * auth/tenant state from context \u2014 no re-fetching on navigation. Props are\n * used as overrides or for public pages that don't have a context.\n */\nexport function PortalShell({\n  children,\n  orgSlug: orgSlugProp,\n  organizationName: orgNameProp,\n  authenticated: authenticatedProp,\n  onLogout: onLogoutProp,\n  enableEventBridge = false,\n  userName: userNameProp,\n  userEmail: userEmailProp,\n}: PortalShellProps) {\n  const t = useT()\n  const pathname = usePathname()\n  const [mobileOpen, setMobileOpen] = useState(false)\n\n  // Read from context when available (persists across navigations)\n  const portalCtx = useOptionalPortalContext()\n\n  // Resolve values: context takes priority, props are fallback/override\n  const orgSlug = portalCtx?.orgSlug ?? orgSlugProp\n  const orgName = portalCtx?.tenant.organizationName ?? orgNameProp\n  const user = portalCtx?.auth.user ?? null\n  const authenticated = authenticatedProp ?? !!user\n  const onLogout = onLogoutProp ?? portalCtx?.auth.logout\n  const userName = userNameProp ?? user?.displayName\n  const userEmail = userEmailProp ?? user?.email\n\n  const { items: injectedMainItems } = usePortalInjectedMenuItems('menu:portal:sidebar:main')\n  const { items: injectedAccountItems } = usePortalInjectedMenuItems('menu:portal:sidebar:account')\n\n  const portalHome = orgSlug ? `/${orgSlug}/portal` : '/portal'\n  const loginHref = orgSlug ? `/${orgSlug}/portal/login` : '/portal/login'\n  const signupHref = orgSlug ? `/${orgSlug}/portal/signup` : '/portal/signup'\n  const dashboardHref = orgSlug ? `/${orgSlug}/portal/dashboard` : '/portal/dashboard'\n  const profileHref = orgSlug ? `/${orgSlug}/portal/profile` : '/portal/profile'\n  // Always use the resolved organization name from the database.\n  // Fall back to the generic portal title \u2014 never display the raw slug.\n  const headerTitle = orgName || t('portal.title', 'Customer Portal')\n\n  const closeMobile = useCallback(() => setMobileOpen(false), [])\n\n  const mergedNavItems = useMemo(() => {\n    if (!authenticated) return []\n    const builtIn = [\n      { id: 'portal-dashboard', labelKey: 'portal.nav.dashboard', href: dashboardHref },\n    ]\n    return mergeMenuItems(builtIn, injectedMainItems)\n  }, [authenticated, dashboardHref, injectedMainItems])\n\n  const mergedAccountItems = useMemo(() => {\n    if (!authenticated) return []\n    const builtIn = [\n      { id: 'portal-profile', labelKey: 'portal.nav.profile', href: profileHref },\n    ]\n    return mergeMenuItems(builtIn, injectedAccountItems)\n  }, [authenticated, profileHref, injectedAccountItems])\n\n  /* ---- PUBLIC LAYOUT ---- */\n  if (!authenticated) {\n    return (\n      <div className=\"flex min-h-svh flex-col bg-background\" data-portal-handle={PORTAL_SHELL_HANDLE}>\n        <header className=\"sticky top-0 z-40 border-b bg-background/95 backdrop-blur supports-[backdrop-filter]:bg-background/80\" data-portal-handle={PORTAL_HEADER_HANDLE}>\n          <div className=\"mx-auto flex h-16 w-full max-w-screen-lg items-center justify-between px-6\">\n            <Link href={portalHome} className=\"flex items-center gap-2.5 text-foreground transition hover:opacity-80\" aria-label={headerTitle}>\n              <Image src=\"/open-mercato.svg\" alt=\"\" width={28} height={28} className=\"\" priority />\n              <span className=\"text-[15px] font-semibold tracking-tight\">{headerTitle}</span>\n            </Link>\n            <nav aria-label=\"Primary\" className=\"flex items-center gap-1\">\n              <Button asChild variant=\"ghost\" size=\"sm\" className=\"text-[13px]\">\n                <Link href={loginHref}>{t('portal.nav.login', 'Log In')}</Link>\n              </Button>\n              <Button asChild size=\"sm\" className=\"rounded-lg text-[13px]\">\n                <Link href={signupHref}>{t('portal.nav.signup', 'Sign Up')}</Link>\n              </Button>\n            </nav>\n          </div>\n        </header>\n\n        <main className=\"flex-1\">\n          <div className=\"mx-auto flex w-full max-w-screen-lg flex-col gap-8 px-6 py-12 sm:py-20\">\n            {children}\n          </div>\n        </main>\n\n        <footer className=\"border-t\" data-portal-handle={PORTAL_FOOTER_HANDLE}>\n          <div className=\"mx-auto flex w-full max-w-screen-lg items-center justify-between px-6 py-6\">\n            <Link href={portalHome} className=\"flex items-center gap-2 text-muted-foreground transition hover:text-foreground\">\n              <Image src=\"/open-mercato.svg\" alt=\"\" width={20} height={20} className=\"\" />\n              <span className=\"text-sm font-medium text-foreground\">{headerTitle}</span>\n            </Link>\n            <p className=\"text-xs text-muted-foreground/60\">\n              {t('portal.footer.copyright', '\\u00A9 {year} All rights reserved.', { year: new Date().getFullYear() })}\n            </p>\n          </div>\n        </footer>\n      </div>\n    )\n  }\n\n  /* ---- AUTHENTICATED LAYOUT ---- */\n\n  const sidebarContent = (\n    <div className=\"flex h-full flex-col\" data-portal-handle={PORTAL_SIDEBAR_HANDLE}>\n      <div className=\"flex h-16 items-center gap-2.5 border-b px-5\">\n        <Link href={portalHome} className=\"flex items-center gap-2.5 text-foreground transition hover:opacity-80\" aria-label={headerTitle}>\n          <Image src=\"/open-mercato.svg\" alt=\"\" width={22} height={22} className=\"\" />\n          <span className=\"text-[14px] font-semibold tracking-tight truncate\">{headerTitle}</span>\n        </Link>\n      </div>\n\n      <nav aria-label=\"Portal navigation\" className=\"flex-1 overflow-y-auto px-3 py-5\">\n        <p className=\"mb-2 px-3 text-[10px] font-semibold uppercase tracking-[0.12em] text-muted-foreground/50\">\n          {t('portal.nav.home', 'Portal')}\n        </p>\n        <div className=\"flex flex-col gap-0.5\">\n          {mergedNavItems.map((item) => (\n            <SidebarNavItem\n              key={item.id}\n              item={item}\n              active={!!item.href && pathname.startsWith(item.href)}\n              t={t}\n              onClick={closeMobile}\n            />\n          ))}\n        </div>\n\n        {mergedAccountItems.length > 0 ? (\n          <div className=\"mt-8\">\n            <p className=\"mb-2 px-3 text-[10px] font-semibold uppercase tracking-[0.12em] text-muted-foreground/50\">\n              {t('portal.nav.account', 'Account')}\n            </p>\n            <div className=\"flex flex-col gap-0.5\">\n              {mergedAccountItems.map((item) => (\n                <SidebarNavItem\n                  key={item.id}\n                  item={item}\n                  active={!!item.href && pathname.startsWith(item.href)}\n                  t={t}\n                  onClick={closeMobile}\n                />\n              ))}\n            </div>\n          </div>\n        ) : null}\n      </nav>\n\n      <div className=\"border-t px-3 py-3\">\n        <div className=\"flex items-center gap-2.5 rounded-lg px-3 py-2\">\n          <UserAvatar name={userName} className=\"size-8\" />\n          <div className=\"min-w-0 flex-1\">\n            {userName ? (\n              <p className=\"truncate text-[13px] font-medium leading-tight\">{userName}</p>\n            ) : (\n              <div className=\"h-4 w-24 animate-pulse rounded bg-muted\" />\n            )}\n            {userEmail ? (\n              <p className=\"truncate text-[11px] text-muted-foreground\">{userEmail}</p>\n            ) : (\n              <div className=\"mt-1 h-3 w-32 animate-pulse rounded bg-muted\" />\n            )}\n          </div>\n        </div>\n        <button\n          type=\"button\"\n          onClick={onLogout}\n          className=\"mt-0.5 flex w-full items-center gap-2.5 rounded-lg px-3 py-2 text-[13px] text-muted-foreground transition-colors hover:bg-muted hover:text-foreground\"\n          data-portal-handle={PORTAL_USER_MENU_HANDLE}\n          data-menu-item-id=\"portal-logout\"\n        >\n          <LogOutIcon className=\"size-4\" />\n          {t('portal.nav.logout', 'Log Out')}\n        </button>\n      </div>\n    </div>\n  )\n\n  return (\n    <div className=\"flex min-h-svh bg-background\" data-portal-handle={PORTAL_SHELL_HANDLE}>\n      {enableEventBridge ? <PortalEventBridgeMount /> : null}\n\n      <aside className=\"hidden w-[240px] shrink-0 border-r lg:block\">\n        {sidebarContent}\n      </aside>\n\n      {mobileOpen ? (\n        <div className=\"fixed inset-0 z-50 lg:hidden\">\n          <div className=\"absolute inset-0 bg-black/30 backdrop-blur-sm\" onClick={closeMobile} />\n          <aside className=\"relative z-10 h-full w-[280px] bg-background shadow-2xl\">\n            <div className=\"absolute right-3 top-4 z-20\">\n              <IconButton variant=\"ghost\" size=\"sm\" type=\"button\" onClick={closeMobile} aria-label=\"Close menu\">\n                <XIcon className=\"size-4\" />\n              </IconButton>\n            </div>\n            {sidebarContent}\n          </aside>\n        </div>\n      ) : null}\n\n      <div className=\"flex min-w-0 flex-1 flex-col\">\n        <header className=\"flex h-16 items-center justify-between border-b px-4 lg:px-8\" data-portal-handle={PORTAL_HEADER_HANDLE}>\n          <div className=\"flex items-center gap-3\">\n            <IconButton variant=\"ghost\" size=\"sm\" type=\"button\" onClick={() => setMobileOpen(true)} className=\"lg:hidden\" aria-label=\"Open menu\">\n              <MenuIcon className=\"size-5\" />\n            </IconButton>\n          </div>\n          <div className=\"flex items-center gap-3\">\n            <PortalNotificationBell t={t} />\n          </div>\n        </header>\n\n        <main className=\"flex-1 overflow-y-auto\">\n          <div className=\"w-full px-4 py-6 lg:px-8 lg:py-8\">\n            {children}\n          </div>\n        </main>\n\n        <footer className=\"border-t px-4 py-4 lg:px-8\" data-portal-handle={PORTAL_FOOTER_HANDLE}>\n          <p className=\"text-[11px] text-muted-foreground/50\">\n            {t('portal.footer.copyright', '\\u00A9 {year} All rights reserved.', { year: new Date().getFullYear() })}\n          </p>\n        </footer>\n      </div>\n    </div>\n  )\n}\n\nexport default PortalShell\n"],
-  "mappings": ";AAgDI,SACE,KADF;AA/CJ,SAAyB,UAAU,aAAa,eAA2B;AAC3E,OAAO,WAAW;AAClB,OAAO,UAAU;AACjB,SAAS,mBAAmB;AAC5B,SAAS,YAAY;AACrB,SAAS,cAAc;AACvB,SAAS,kBAAkB;AAC3B,SAAS,kCAAkC;AAC3C,SAAS,4BAA4B;AACrC,SAAS,sBAAsB;AAE/B,SAAS,8BAA8B;AACvC,SAAS,wBAAwB;AAG1B,MAAM,sBAAsB;AAC5B,MAAM,uBAAuB;AAC7B,MAAM,uBAAuB;AAC7B,MAAM,wBAAwB;AAC9B,MAAM,0BAA0B;AAmBvC,SAAS,yBAAyB;AAChC,uBAAqB;AACrB,SAAO;AACT;AAIA,SAAS,SAAS,EAAE,UAAU,GAA2B;AACvD,SACE,qBAAC,SAAI,OAAM,8BAA6B,SAAQ,aAAY,MAAK,QAAO,QAAO,gBAAe,aAAY,OAAM,eAAc,SAAQ,gBAAe,SAAQ,WAC3J;AAAA,wBAAC,UAAK,IAAG,KAAI,IAAG,MAAK,IAAG,MAAK,IAAG,MAAK;AAAA,IAAE,oBAAC,UAAK,IAAG,KAAI,IAAG,MAAK,IAAG,KAAI,IAAG,KAAI;AAAA,IAAE,oBAAC,UAAK,IAAG,KAAI,IAAG,MAAK,IAAG,MAAK,IAAG,MAAK;AAAA,KACnH;AAEJ;AAEA,SAAS,MAAM,EAAE,UAAU,GAA2B;AACpD,SACE,qBAAC,SAAI,OAAM,8BAA6B,SAAQ,aAAY,MAAK,QAAO,QAAO,gBAAe,aAAY,OAAM,eAAc,SAAQ,gBAAe,SAAQ,WAC3J;AAAA,wBAAC,UAAK,GAAE,cAAa;AAAA,IAAE,oBAAC,UAAK,GAAE,cAAa;AAAA,KAC9C;AAEJ;AAEA,SAAS,WAAW,EAAE,UAAU,GAA2B;AACzD,SACE,qBAAC,SAAI,OAAM,8BAA6B,SAAQ,aAAY,MAAK,QAAO,QAAO,gBAAe,aAAY,OAAM,eAAc,SAAQ,gBAAe,SAAQ,WAC3J;AAAA,wBAAC,UAAK,GAAE,2CAA0C;AAAA,IAAE,oBAAC,cAAS,QAAO,oBAAmB;AAAA,IAAE,oBAAC,UAAK,IAAG,MAAK,IAAG,KAAI,IAAG,MAAK,IAAG,MAAK;AAAA,KACjI;AAEJ;AAIA,SAAS,eAAe;AAAA,EACtB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAKG;AACD,QAAM,QAAQ,KAAK,WAAW,EAAE,KAAK,UAAU,KAAK,KAAK,IAAI,KAAK;AAClE,MAAI,CAAC,MAAO,QAAO;AAEnB,QAAM,MAAM;AAAA,IACV;AAAA,IACA,SACI,kCACA;AAAA,EACN,EAAE,KAAK,GAAG;AAEV,MAAI,KAAK,MAAM;AACb,WACE,oBAAC,QAAK,MAAM,KAAK,MAAM,WAAW,KAAK,qBAAmB,KAAK,IAAI,SAChE,iBACH;AAAA,EAEJ;AACA,MAAI,KAAK,SAAS;AAChB,WACE,oBAAC,YAAO,MAAK,UAAS,WAAW,KAAK,qBAAmB,KAAK,IAAI,SAAS,MAAM;AAAE,WAAK,UAAU;AAAG,gBAAU;AAAA,IAAE,GAC9G,iBACH;AAAA,EAEJ;AACA,SAAO;AACT;AAIA,SAAS,WAAW,EAAE,MAAM,UAAU,GAA0C;AAC9E,QAAM,WAAW,OACb,KAAK,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,YAAY,IAClE;AACJ,SACE,oBAAC,SAAI,WAAW,yGAAyG,aAAa,QAAQ,IAC3I,oBACH;AAEJ;AAIA,SAAS,2BAA2B;AAClC,MAAI;AACF,WAAO,iBAAiB;AAAA,EAC1B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAaO,SAAS,YAAY;AAAA,EAC1B;AAAA,EACA,SAAS;AAAA,EACT,kBAAkB;AAAA,EAClB,eAAe;AAAA,EACf,UAAU;AAAA,EACV,oBAAoB;AAAA,EACpB,UAAU;AAAA,EACV,WAAW;AACb,GAAqB;AACnB,QAAM,IAAI,KAAK;AACf,QAAM,WAAW,YAAY;AAC7B,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,KAAK;AAGlD,QAAM,YAAY,yBAAyB;AAG3C,QAAM,UAAU,WAAW,WAAW;AACtC,QAAM,UAAU,WAAW,OAAO,oBAAoB;AACtD,QAAM,OAAO,WAAW,KAAK,QAAQ;AACrC,QAAM,gBAAgB,qBAAqB,CAAC,CAAC;AAC7C,QAAM,WAAW,gBAAgB,WAAW,KAAK;AACjD,QAAM,WAAW,gBAAgB,MAAM;AACvC,QAAM,YAAY,iBAAiB,MAAM;AAEzC,QAAM,EAAE,OAAO,kBAAkB,IAAI,2BAA2B,0BAA0B;AAC1F,QAAM,EAAE,OAAO,qBAAqB,IAAI,2BAA2B,6BAA6B;AAEhG,QAAM,aAAa,UAAU,IAAI,OAAO,YAAY;AACpD,QAAM,YAAY,UAAU,IAAI,OAAO,kBAAkB;AACzD,QAAM,aAAa,UAAU,IAAI,OAAO,mBAAmB;AAC3D,QAAM,gBAAgB,UAAU,IAAI,OAAO,sBAAsB;AACjE,QAAM,cAAc,UAAU,IAAI,OAAO,oBAAoB;AAG7D,QAAM,cAAc,WAAW,EAAE,gBAAgB,iBAAiB;AAElE,QAAM,cAAc,YAAY,MAAM,cAAc,KAAK,GAAG,CAAC,CAAC;AAE9D,QAAM,iBAAiB,QAAQ,MAAM;AACnC,QAAI,CAAC,cAAe,QAAO,CAAC;AAC5B,UAAM,UAAU;AAAA,MACd,EAAE,IAAI,oBAAoB,UAAU,wBAAwB,MAAM,cAAc;AAAA,IAClF;AACA,WAAO,eAAe,SAAS,iBAAiB;AAAA,EAClD,GAAG,CAAC,eAAe,eAAe,iBAAiB,CAAC;AAEpD,QAAM,qBAAqB,QAAQ,MAAM;AACvC,QAAI,CAAC,cAAe,QAAO,CAAC;AAC5B,UAAM,UAAU;AAAA,MACd,EAAE,IAAI,kBAAkB,UAAU,sBAAsB,MAAM,YAAY;AAAA,IAC5E;AACA,WAAO,eAAe,SAAS,oBAAoB;AAAA,EACrD,GAAG,CAAC,eAAe,aAAa,oBAAoB,CAAC;AAGrD,MAAI,CAAC,eAAe;AAClB,WACE,qBAAC,SAAI,WAAU,yCAAwC,sBAAoB,qBACzE;AAAA,0BAAC,YAAO,WAAU,yGAAwG,sBAAoB,sBAC5I,+BAAC,SAAI,WAAU,8EACb;AAAA,6BAAC,QAAK,MAAM,YAAY,WAAU,yEAAwE,cAAY,aACpH;AAAA,8BAAC,SAAM,KAAI,qBAAoB,KAAI,IAAG,OAAO,IAAI,QAAQ,IAAI,WAAU,IAAG,UAAQ,MAAC;AAAA,UACnF,oBAAC,UAAK,WAAU,4CAA4C,uBAAY;AAAA,WAC1E;AAAA,QACA,qBAAC,SAAI,cAAW,WAAU,WAAU,2BAClC;AAAA,8BAAC,UAAO,SAAO,MAAC,SAAQ,SAAQ,MAAK,MAAK,WAAU,eAClD,8BAAC,QAAK,MAAM,WAAY,YAAE,oBAAoB,QAAQ,GAAE,GAC1D;AAAA,UACA,oBAAC,UAAO,SAAO,MAAC,MAAK,MAAK,WAAU,0BAClC,8BAAC,QAAK,MAAM,YAAa,YAAE,qBAAqB,SAAS,GAAE,GAC7D;AAAA,WACF;AAAA,SACF,GACF;AAAA,MAEA,oBAAC,UAAK,WAAU,UACd,8BAAC,SAAI,WAAU,0EACZ,UACH,GACF;AAAA,MAEA,oBAAC,YAAO,WAAU,YAAW,sBAAoB,sBAC/C,+BAAC,SAAI,WAAU,8EACb;AAAA,6BAAC,QAAK,MAAM,YAAY,WAAU,kFAChC;AAAA,8BAAC,SAAM,KAAI,qBAAoB,KAAI,IAAG,OAAO,IAAI,QAAQ,IAAI,WAAU,IAAG;AAAA,UAC1E,oBAAC,UAAK,WAAU,uCAAuC,uBAAY;AAAA,WACrE;AAAA,QACA,oBAAC,OAAE,WAAU,oCACV,YAAE,2BAA2B,oCAAsC,EAAE,OAAM,oBAAI,KAAK,GAAE,YAAY,EAAE,CAAC,GACxG;AAAA,SACF,GACF;AAAA,OACF;AAAA,EAEJ;AAIA,QAAM,iBACJ,qBAAC,SAAI,WAAU,wBAAuB,sBAAoB,uBACxD;AAAA,wBAAC,SAAI,WAAU,gDACb,+BAAC,QAAK,MAAM,YAAY,WAAU,yEAAwE,cAAY,aACpH;AAAA,0BAAC,SAAM,KAAI,qBAAoB,KAAI,IAAG,OAAO,IAAI,QAAQ,IAAI,WAAU,IAAG;AAAA,MAC1E,oBAAC,UAAK,WAAU,qDAAqD,uBAAY;AAAA,OACnF,GACF;AAAA,IAEA,qBAAC,SAAI,cAAW,qBAAoB,WAAU,oCAC5C;AAAA,0BAAC,OAAE,WAAU,4FACV,YAAE,mBAAmB,QAAQ,GAChC;AAAA,MACA,oBAAC,SAAI,WAAU,yBACZ,yBAAe,IAAI,CAAC,SACnB;AAAA,QAAC;AAAA;AAAA,UAEC;AAAA,UACA,QAAQ,CAAC,CAAC,KAAK,QAAQ,SAAS,WAAW,KAAK,IAAI;AAAA,UACpD;AAAA,UACA,SAAS;AAAA;AAAA,QAJJ,KAAK;AAAA,MAKZ,CACD,GACH;AAAA,MAEC,mBAAmB,SAAS,IAC3B,qBAAC,SAAI,WAAU,QACb;AAAA,4BAAC,OAAE,WAAU,4FACV,YAAE,sBAAsB,SAAS,GACpC;AAAA,QACA,oBAAC,SAAI,WAAU,yBACZ,6BAAmB,IAAI,CAAC,SACvB;AAAA,UAAC;AAAA;AAAA,YAEC;AAAA,YACA,QAAQ,CAAC,CAAC,KAAK,QAAQ,SAAS,WAAW,KAAK,IAAI;AAAA,YACpD;AAAA,YACA,SAAS;AAAA;AAAA,UAJJ,KAAK;AAAA,QAKZ,CACD,GACH;AAAA,SACF,IACE;AAAA,OACN;AAAA,IAEA,qBAAC,SAAI,WAAU,sBACb;AAAA,2BAAC,SAAI,WAAU,kDACb;AAAA,4BAAC,cAAW,MAAM,UAAU,WAAU,UAAS;AAAA,QAC/C,qBAAC,SAAI,WAAU,kBACZ;AAAA,qBACC,oBAAC,OAAE,WAAU,kDAAkD,oBAAS,IAExE,oBAAC,SAAI,WAAU,2CAA0C;AAAA,UAE1D,YACC,oBAAC,OAAE,WAAU,8CAA8C,qBAAU,IAErE,oBAAC,SAAI,WAAU,gDAA+C;AAAA,WAElE;AAAA,SACF;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,SAAS;AAAA,UACT,WAAU;AAAA,UACV,sBAAoB;AAAA,UACpB,qBAAkB;AAAA,UAElB;AAAA,gCAAC,cAAW,WAAU,UAAS;AAAA,YAC9B,EAAE,qBAAqB,SAAS;AAAA;AAAA;AAAA,MACnC;AAAA,OACF;AAAA,KACF;AAGF,SACE,qBAAC,SAAI,WAAU,gCAA+B,sBAAoB,qBAC/D;AAAA,wBAAoB,oBAAC,0BAAuB,IAAK;AAAA,IAElD,oBAAC,WAAM,WAAU,+CACd,0BACH;AAAA,IAEC,aACC,qBAAC,SAAI,WAAU,gCACb;AAAA,0BAAC,SAAI,WAAU,iDAAgD,SAAS,aAAa;AAAA,MACrF,qBAAC,WAAM,WAAU,2DACf;AAAA,4BAAC,SAAI,WAAU,+BACb,8BAAC,cAAW,SAAQ,SAAQ,MAAK,MAAK,MAAK,UAAS,SAAS,aAAa,cAAW,cACnF,8BAAC,SAAM,WAAU,UAAS,GAC5B,GACF;AAAA,QACC;AAAA,SACH;AAAA,OACF,IACE;AAAA,IAEJ,qBAAC,SAAI,WAAU,gCACb;AAAA,2BAAC,YAAO,WAAU,gEAA+D,sBAAoB,sBACnG;AAAA,4BAAC,SAAI,WAAU,2BACb,8BAAC,cAAW,SAAQ,SAAQ,MAAK,MAAK,MAAK,UAAS,SAAS,MAAM,cAAc,IAAI,GAAG,WAAU,aAAY,cAAW,aACvH,8BAAC,YAAS,WAAU,UAAS,GAC/B,GACF;AAAA,QACA,oBAAC,SAAI,WAAU,2BACb,8BAAC,0BAAuB,GAAM,GAChC;AAAA,SACF;AAAA,MAEA,oBAAC,UAAK,WAAU,0BACd,8BAAC,SAAI,WAAU,oCACZ,UACH,GACF;AAAA,MAEA,oBAAC,YAAO,WAAU,8BAA6B,sBAAoB,sBACjE,8BAAC,OAAE,WAAU,wCACV,YAAE,2BAA2B,oCAAsC,EAAE,OAAM,oBAAI,KAAK,GAAE,YAAY,EAAE,CAAC,GACxG,GACF;AAAA,OACF;AAAA,KACF;AAEJ;AAEA,IAAO,sBAAQ;",
+  "sourcesContent": ["\"use client\"\nimport { type ReactNode, useEffect, useState, useCallback, useMemo, useContext } from 'react'\nimport Image from 'next/image'\nimport Link from 'next/link'\nimport { usePathname } from 'next/navigation'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { Button } from '../primitives/button'\nimport { IconButton } from '../primitives/icon-button'\nimport { usePortalInjectedMenuItems } from './hooks/usePortalInjectedMenuItems'\nimport { usePortalEventBridge } from './hooks/usePortalEventBridge'\nimport { mergeMenuItems } from '../backend/injection/mergeMenuItems'\nimport type { MergedMenuItem } from '../backend/injection/mergeMenuItems'\nimport { PortalNotificationBell } from './components/PortalNotificationBell'\nimport { usePortalContext } from './PortalContext'\nimport { apiCall } from '../backend/utils/apiCall'\nimport type { PortalNavGroup } from './utils/nav'\n\n// Component replacement handle IDs (FROZEN once shipped)\nexport const PORTAL_SHELL_HANDLE = 'page:portal:layout'\nexport const PORTAL_HEADER_HANDLE = 'section:portal:header'\nexport const PORTAL_FOOTER_HANDLE = 'section:portal:footer'\nexport const PORTAL_SIDEBAR_HANDLE = 'section:portal:sidebar'\nexport const PORTAL_USER_MENU_HANDLE = 'section:portal:user-menu'\n\nexport type PortalShellProps = {\n  children: ReactNode\n  /** Override orgSlug (used on public pages without context) */\n  orgSlug?: string\n  /** Override organization name (used on public pages without context) */\n  organizationName?: string\n  /** Whether to show authenticated layout. Auto-detected from context when omitted. */\n  authenticated?: boolean\n  /** Logout handler. Auto-provided from context when omitted. */\n  onLogout?: () => void\n  enableEventBridge?: boolean\n  /** Override user name. Auto-read from context when omitted. */\n  userName?: string\n  /** Override user email. Auto-read from context when omitted. */\n  userEmail?: string\n}\n\nfunction PortalEventBridgeMount() {\n  usePortalEventBridge()\n  return null\n}\n\n/* ---- Inline SVG icons ---- */\n\nfunction MenuIcon({ className }: { className?: string }) {\n  return (\n    <svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" strokeWidth=\"1.5\" strokeLinecap=\"round\" strokeLinejoin=\"round\" className={className}>\n      <line x1=\"4\" x2=\"20\" y1=\"12\" y2=\"12\" /><line x1=\"4\" x2=\"20\" y1=\"6\" y2=\"6\" /><line x1=\"4\" x2=\"20\" y1=\"18\" y2=\"18\" />\n    </svg>\n  )\n}\n\nfunction XIcon({ className }: { className?: string }) {\n  return (\n    <svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" strokeWidth=\"1.5\" strokeLinecap=\"round\" strokeLinejoin=\"round\" className={className}>\n      <path d=\"M18 6 6 18\" /><path d=\"m6 6 12 12\" />\n    </svg>\n  )\n}\n\nfunction LogOutIcon({ className }: { className?: string }) {\n  return (\n    <svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" strokeWidth=\"1.5\" strokeLinecap=\"round\" strokeLinejoin=\"round\" className={className}>\n      <path d=\"M9 21H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h4\" /><polyline points=\"16 17 21 12 16 7\" /><line x1=\"21\" x2=\"9\" y1=\"12\" y2=\"12\" />\n    </svg>\n  )\n}\n\n/* ---- Sidebar nav item ---- */\n\nfunction SidebarNavItem({\n  item,\n  active,\n  t,\n  onClick,\n}: {\n  item: MergedMenuItem\n  active: boolean\n  t: (key: string, fallback?: string) => string\n  onClick?: () => void\n}) {\n  const label = item.labelKey ? t(item.labelKey, item.label) : item.label\n  if (!label) return null\n\n  const cls = [\n    'flex items-center gap-2.5 rounded-lg px-3 py-2 text-[13px] font-medium transition-colors',\n    active\n      ? 'bg-foreground text-background'\n      : 'text-muted-foreground hover:bg-muted hover:text-foreground',\n  ].join(' ')\n\n  if (item.href) {\n    return (\n      <Link href={item.href} className={cls} data-menu-item-id={item.id} onClick={onClick}>\n        {label}\n      </Link>\n    )\n  }\n  if (item.onClick) {\n    return (\n      <button type=\"button\" className={cls} data-menu-item-id={item.id} onClick={() => { item.onClick?.(); onClick?.() }}>\n        {label}\n      </button>\n    )\n  }\n  return null\n}\n\n/* ---- User initials avatar ---- */\n\nfunction UserAvatar({ name, className }: { name?: string; className?: string }) {\n  const initials = name\n    ? name.split(' ').map((w) => w[0]).slice(0, 2).join('').toUpperCase()\n    : '?'\n  return (\n    <div className={`flex items-center justify-center rounded-full bg-foreground text-[11px] font-semibold text-background ${className ?? 'size-8'}`}>\n      {initials}\n    </div>\n  )\n}\n\n/* ---- Try reading from PortalContext ---- */\n\nfunction useOptionalPortalContext() {\n  try {\n    return usePortalContext()\n  } catch {\n    return null\n  }\n}\n\n/* ================================================================== */\n/*  PortalShell                                                       */\n/* ================================================================== */\n\n/**\n * Portal layout shell.\n *\n * When a `PortalProvider` is mounted in a parent layout, PortalShell reads\n * auth/tenant state from context \u2014 no re-fetching on navigation. Props are\n * used as overrides or for public pages that don't have a context.\n */\nexport function PortalShell({\n  children,\n  orgSlug: orgSlugProp,\n  organizationName: orgNameProp,\n  authenticated: authenticatedProp,\n  onLogout: onLogoutProp,\n  enableEventBridge = false,\n  userName: userNameProp,\n  userEmail: userEmailProp,\n}: PortalShellProps) {\n  const t = useT()\n  const pathname = usePathname()\n  const [mobileOpen, setMobileOpen] = useState(false)\n\n  // Read from context when available (persists across navigations)\n  const portalCtx = useOptionalPortalContext()\n\n  // Resolve values: context takes priority, props are fallback/override\n  const orgSlug = portalCtx?.orgSlug ?? orgSlugProp\n  const orgName = portalCtx?.tenant.organizationName ?? orgNameProp\n  const user = portalCtx?.auth.user ?? null\n  const authenticated = authenticatedProp ?? !!user\n  const onLogout = onLogoutProp ?? portalCtx?.auth.logout\n  const userName = userNameProp ?? user?.displayName\n  const userEmail = userEmailProp ?? user?.email\n\n  const { items: injectedMainItems } = usePortalInjectedMenuItems('menu:portal:sidebar:main')\n  const { items: injectedAccountItems } = usePortalInjectedMenuItems('menu:portal:sidebar:account')\n\n  const portalHome = orgSlug ? `/${orgSlug}/portal` : '/portal'\n  const loginHref = orgSlug ? `/${orgSlug}/portal/login` : '/portal/login'\n  const signupHref = orgSlug ? `/${orgSlug}/portal/signup` : '/portal/signup'\n  // Always use the resolved organization name from the database.\n  // Fall back to the generic portal title \u2014 never display the raw slug.\n  const headerTitle = orgName || t('portal.title', 'Customer Portal')\n\n  const closeMobile = useCallback(() => setMobileOpen(false), [])\n\n  const [autoNavGroups, setAutoNavGroups] = useState<PortalNavGroup[]>([])\n  useEffect(() => {\n    if (!authenticated) {\n      setAutoNavGroups([])\n      return\n    }\n    let cancelled = false\n    const load = async () => {\n      try {\n        const { ok, result } = await apiCall<{ ok: boolean; groups?: PortalNavGroup[] }>(\n          '/api/customer_accounts/portal/nav',\n        )\n        if (cancelled || !ok || !result?.ok) return\n        setAutoNavGroups(Array.isArray(result.groups) ? result.groups : [])\n      } catch {\n        if (!cancelled) setAutoNavGroups([])\n      }\n    }\n    void load()\n    return () => {\n      cancelled = true\n    }\n  }, [authenticated])\n\n  const mergedNavItems = useMemo(() => {\n    if (!authenticated) return []\n    const discovered = autoNavGroups.find((g) => g.id === 'main')?.items ?? []\n    const builtIn = discovered.map((item) => ({\n      id: item.id,\n      labelKey: item.labelKey,\n      label: item.label,\n      href: item.href,\n    }))\n    return mergeMenuItems(builtIn, injectedMainItems)\n  }, [authenticated, autoNavGroups, injectedMainItems])\n\n  const mergedAccountItems = useMemo(() => {\n    if (!authenticated) return []\n    const discovered = autoNavGroups.find((g) => g.id === 'account')?.items ?? []\n    const builtIn = discovered.map((item) => ({\n      id: item.id,\n      labelKey: item.labelKey,\n      label: item.label,\n      href: item.href,\n    }))\n    return mergeMenuItems(builtIn, injectedAccountItems)\n  }, [authenticated, autoNavGroups, injectedAccountItems])\n\n  /* ---- PUBLIC LAYOUT ---- */\n  if (!authenticated) {\n    return (\n      <div className=\"flex min-h-svh flex-col bg-background\" data-portal-handle={PORTAL_SHELL_HANDLE}>\n        <header className=\"sticky top-0 z-40 border-b bg-background/95 backdrop-blur supports-[backdrop-filter]:bg-background/80\" data-portal-handle={PORTAL_HEADER_HANDLE}>\n          <div className=\"mx-auto flex h-16 w-full max-w-screen-lg items-center justify-between px-6\">\n            <Link href={portalHome} className=\"flex items-center gap-2.5 text-foreground transition hover:opacity-80\" aria-label={headerTitle}>\n              <Image src=\"/open-mercato.svg\" alt=\"\" width={28} height={28} className=\"\" priority />\n              <span className=\"text-[15px] font-semibold tracking-tight\">{headerTitle}</span>\n            </Link>\n            <nav aria-label=\"Primary\" className=\"flex items-center gap-1\">\n              <Button asChild variant=\"ghost\" size=\"sm\" className=\"text-[13px]\">\n                <Link href={loginHref}>{t('portal.nav.login', 'Log In')}</Link>\n              </Button>\n              <Button asChild size=\"sm\" className=\"rounded-lg text-[13px]\">\n                <Link href={signupHref}>{t('portal.nav.signup', 'Sign Up')}</Link>\n              </Button>\n            </nav>\n          </div>\n        </header>\n\n        <main className=\"flex-1\">\n          <div className=\"mx-auto flex w-full max-w-screen-lg flex-col gap-8 px-6 py-12 sm:py-20\">\n            {children}\n          </div>\n        </main>\n\n        <footer className=\"border-t\" data-portal-handle={PORTAL_FOOTER_HANDLE}>\n          <div className=\"mx-auto flex w-full max-w-screen-lg items-center justify-between px-6 py-6\">\n            <Link href={portalHome} className=\"flex items-center gap-2 text-muted-foreground transition hover:text-foreground\">\n              <Image src=\"/open-mercato.svg\" alt=\"\" width={20} height={20} className=\"\" />\n              <span className=\"text-sm font-medium text-foreground\">{headerTitle}</span>\n            </Link>\n            <p className=\"text-xs text-muted-foreground/60\">\n              {t('portal.footer.copyright', '\\u00A9 {year} All rights reserved.', { year: new Date().getFullYear() })}\n            </p>\n          </div>\n        </footer>\n      </div>\n    )\n  }\n\n  /* ---- AUTHENTICATED LAYOUT ---- */\n\n  const sidebarContent = (\n    <div className=\"flex h-full flex-col\" data-portal-handle={PORTAL_SIDEBAR_HANDLE}>\n      <div className=\"flex h-16 items-center gap-2.5 border-b px-5\">\n        <Link href={portalHome} className=\"flex items-center gap-2.5 text-foreground transition hover:opacity-80\" aria-label={headerTitle}>\n          <Image src=\"/open-mercato.svg\" alt=\"\" width={22} height={22} className=\"\" />\n          <span className=\"text-[14px] font-semibold tracking-tight truncate\">{headerTitle}</span>\n        </Link>\n      </div>\n\n      <nav aria-label=\"Portal navigation\" className=\"flex-1 overflow-y-auto px-3 py-5\">\n        <p className=\"mb-2 px-3 text-[10px] font-semibold uppercase tracking-[0.12em] text-muted-foreground/50\">\n          {t('portal.nav.home', 'Portal')}\n        </p>\n        <div className=\"flex flex-col gap-0.5\">\n          {mergedNavItems.map((item) => (\n            <SidebarNavItem\n              key={item.id}\n              item={item}\n              active={!!item.href && pathname.startsWith(item.href)}\n              t={t}\n              onClick={closeMobile}\n            />\n          ))}\n        </div>\n\n        {mergedAccountItems.length > 0 ? (\n          <div className=\"mt-8\">\n            <p className=\"mb-2 px-3 text-[10px] font-semibold uppercase tracking-[0.12em] text-muted-foreground/50\">\n              {t('portal.nav.account', 'Account')}\n            </p>\n            <div className=\"flex flex-col gap-0.5\">\n              {mergedAccountItems.map((item) => (\n                <SidebarNavItem\n                  key={item.id}\n                  item={item}\n                  active={!!item.href && pathname.startsWith(item.href)}\n                  t={t}\n                  onClick={closeMobile}\n                />\n              ))}\n            </div>\n          </div>\n        ) : null}\n      </nav>\n\n      <div className=\"border-t px-3 py-3\">\n        <div className=\"flex items-center gap-2.5 rounded-lg px-3 py-2\">\n          <UserAvatar name={userName} className=\"size-8\" />\n          <div className=\"min-w-0 flex-1\">\n            {userName ? (\n              <p className=\"truncate text-[13px] font-medium leading-tight\">{userName}</p>\n            ) : (\n              <div className=\"h-4 w-24 animate-pulse rounded bg-muted\" />\n            )}\n            {userEmail ? (\n              <p className=\"truncate text-[11px] text-muted-foreground\">{userEmail}</p>\n            ) : (\n              <div className=\"mt-1 h-3 w-32 animate-pulse rounded bg-muted\" />\n            )}\n          </div>\n        </div>\n        <button\n          type=\"button\"\n          onClick={onLogout}\n          className=\"mt-0.5 flex w-full items-center gap-2.5 rounded-lg px-3 py-2 text-[13px] text-muted-foreground transition-colors hover:bg-muted hover:text-foreground\"\n          data-portal-handle={PORTAL_USER_MENU_HANDLE}\n          data-menu-item-id=\"portal-logout\"\n        >\n          <LogOutIcon className=\"size-4\" />\n          {t('portal.nav.logout', 'Log Out')}\n        </button>\n      </div>\n    </div>\n  )\n\n  return (\n    <div className=\"flex min-h-svh bg-background\" data-portal-handle={PORTAL_SHELL_HANDLE}>\n      {enableEventBridge ? <PortalEventBridgeMount /> : null}\n\n      <aside className=\"hidden w-[240px] shrink-0 border-r lg:block\">\n        {sidebarContent}\n      </aside>\n\n      {mobileOpen ? (\n        <div className=\"fixed inset-0 z-50 lg:hidden\">\n          <div className=\"absolute inset-0 bg-black/30 backdrop-blur-sm\" onClick={closeMobile} />\n          <aside className=\"relative z-10 h-full w-[280px] bg-background shadow-2xl\">\n            <div className=\"absolute right-3 top-4 z-20\">\n              <IconButton variant=\"ghost\" size=\"sm\" type=\"button\" onClick={closeMobile} aria-label=\"Close menu\">\n                <XIcon className=\"size-4\" />\n              </IconButton>\n            </div>\n            {sidebarContent}\n          </aside>\n        </div>\n      ) : null}\n\n      <div className=\"flex min-w-0 flex-1 flex-col\">\n        <header className=\"flex h-16 items-center justify-between border-b px-4 lg:px-8\" data-portal-handle={PORTAL_HEADER_HANDLE}>\n          <div className=\"flex items-center gap-3\">\n            <IconButton variant=\"ghost\" size=\"sm\" type=\"button\" onClick={() => setMobileOpen(true)} className=\"lg:hidden\" aria-label=\"Open menu\">\n              <MenuIcon className=\"size-5\" />\n            </IconButton>\n          </div>\n          <div className=\"flex items-center gap-3\">\n            <PortalNotificationBell t={t} />\n          </div>\n        </header>\n\n        <main className=\"flex-1 overflow-y-auto\">\n          <div className=\"w-full px-4 py-6 lg:px-8 lg:py-8\">\n            {children}\n          </div>\n        </main>\n\n        <footer className=\"border-t px-4 py-4 lg:px-8\" data-portal-handle={PORTAL_FOOTER_HANDLE}>\n          <p className=\"text-[11px] text-muted-foreground/50\">\n            {t('portal.footer.copyright', '\\u00A9 {year} All rights reserved.', { year: new Date().getFullYear() })}\n          </p>\n        </footer>\n      </div>\n    </div>\n  )\n}\n\nexport default PortalShell\n"],
+  "mappings": ";AAkDI,SACE,KADF;AAjDJ,SAAyB,WAAW,UAAU,aAAa,eAA2B;AACtF,OAAO,WAAW;AAClB,OAAO,UAAU;AACjB,SAAS,mBAAmB;AAC5B,SAAS,YAAY;AACrB,SAAS,cAAc;AACvB,SAAS,kBAAkB;AAC3B,SAAS,kCAAkC;AAC3C,SAAS,4BAA4B;AACrC,SAAS,sBAAsB;AAE/B,SAAS,8BAA8B;AACvC,SAAS,wBAAwB;AACjC,SAAS,eAAe;AAIjB,MAAM,sBAAsB;AAC5B,MAAM,uBAAuB;AAC7B,MAAM,uBAAuB;AAC7B,MAAM,wBAAwB;AAC9B,MAAM,0BAA0B;AAmBvC,SAAS,yBAAyB;AAChC,uBAAqB;AACrB,SAAO;AACT;AAIA,SAAS,SAAS,EAAE,UAAU,GAA2B;AACvD,SACE,qBAAC,SAAI,OAAM,8BAA6B,SAAQ,aAAY,MAAK,QAAO,QAAO,gBAAe,aAAY,OAAM,eAAc,SAAQ,gBAAe,SAAQ,WAC3J;AAAA,wBAAC,UAAK,IAAG,KAAI,IAAG,MAAK,IAAG,MAAK,IAAG,MAAK;AAAA,IAAE,oBAAC,UAAK,IAAG,KAAI,IAAG,MAAK,IAAG,KAAI,IAAG,KAAI;AAAA,IAAE,oBAAC,UAAK,IAAG,KAAI,IAAG,MAAK,IAAG,MAAK,IAAG,MAAK;AAAA,KACnH;AAEJ;AAEA,SAAS,MAAM,EAAE,UAAU,GAA2B;AACpD,SACE,qBAAC,SAAI,OAAM,8BAA6B,SAAQ,aAAY,MAAK,QAAO,QAAO,gBAAe,aAAY,OAAM,eAAc,SAAQ,gBAAe,SAAQ,WAC3J;AAAA,wBAAC,UAAK,GAAE,cAAa;AAAA,IAAE,oBAAC,UAAK,GAAE,cAAa;AAAA,KAC9C;AAEJ;AAEA,SAAS,WAAW,EAAE,UAAU,GAA2B;AACzD,SACE,qBAAC,SAAI,OAAM,8BAA6B,SAAQ,aAAY,MAAK,QAAO,QAAO,gBAAe,aAAY,OAAM,eAAc,SAAQ,gBAAe,SAAQ,WAC3J;AAAA,wBAAC,UAAK,GAAE,2CAA0C;AAAA,IAAE,oBAAC,cAAS,QAAO,oBAAmB;AAAA,IAAE,oBAAC,UAAK,IAAG,MAAK,IAAG,KAAI,IAAG,MAAK,IAAG,MAAK;AAAA,KACjI;AAEJ;AAIA,SAAS,eAAe;AAAA,EACtB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAKG;AACD,QAAM,QAAQ,KAAK,WAAW,EAAE,KAAK,UAAU,KAAK,KAAK,IAAI,KAAK;AAClE,MAAI,CAAC,MAAO,QAAO;AAEnB,QAAM,MAAM;AAAA,IACV;AAAA,IACA,SACI,kCACA;AAAA,EACN,EAAE,KAAK,GAAG;AAEV,MAAI,KAAK,MAAM;AACb,WACE,oBAAC,QAAK,MAAM,KAAK,MAAM,WAAW,KAAK,qBAAmB,KAAK,IAAI,SAChE,iBACH;AAAA,EAEJ;AACA,MAAI,KAAK,SAAS;AAChB,WACE,oBAAC,YAAO,MAAK,UAAS,WAAW,KAAK,qBAAmB,KAAK,IAAI,SAAS,MAAM;AAAE,WAAK,UAAU;AAAG,gBAAU;AAAA,IAAE,GAC9G,iBACH;AAAA,EAEJ;AACA,SAAO;AACT;AAIA,SAAS,WAAW,EAAE,MAAM,UAAU,GAA0C;AAC9E,QAAM,WAAW,OACb,KAAK,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,YAAY,IAClE;AACJ,SACE,oBAAC,SAAI,WAAW,yGAAyG,aAAa,QAAQ,IAC3I,oBACH;AAEJ;AAIA,SAAS,2BAA2B;AAClC,MAAI;AACF,WAAO,iBAAiB;AAAA,EAC1B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAaO,SAAS,YAAY;AAAA,EAC1B;AAAA,EACA,SAAS;AAAA,EACT,kBAAkB;AAAA,EAClB,eAAe;AAAA,EACf,UAAU;AAAA,EACV,oBAAoB;AAAA,EACpB,UAAU;AAAA,EACV,WAAW;AACb,GAAqB;AACnB,QAAM,IAAI,KAAK;AACf,QAAM,WAAW,YAAY;AAC7B,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,KAAK;AAGlD,QAAM,YAAY,yBAAyB;AAG3C,QAAM,UAAU,WAAW,WAAW;AACtC,QAAM,UAAU,WAAW,OAAO,oBAAoB;AACtD,QAAM,OAAO,WAAW,KAAK,QAAQ;AACrC,QAAM,gBAAgB,qBAAqB,CAAC,CAAC;AAC7C,QAAM,WAAW,gBAAgB,WAAW,KAAK;AACjD,QAAM,WAAW,gBAAgB,MAAM;AACvC,QAAM,YAAY,iBAAiB,MAAM;AAEzC,QAAM,EAAE,OAAO,kBAAkB,IAAI,2BAA2B,0BAA0B;AAC1F,QAAM,EAAE,OAAO,qBAAqB,IAAI,2BAA2B,6BAA6B;AAEhG,QAAM,aAAa,UAAU,IAAI,OAAO,YAAY;AACpD,QAAM,YAAY,UAAU,IAAI,OAAO,kBAAkB;AACzD,QAAM,aAAa,UAAU,IAAI,OAAO,mBAAmB;AAG3D,QAAM,cAAc,WAAW,EAAE,gBAAgB,iBAAiB;AAElE,QAAM,cAAc,YAAY,MAAM,cAAc,KAAK,GAAG,CAAC,CAAC;AAE9D,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAA2B,CAAC,CAAC;AACvE,YAAU,MAAM;AACd,QAAI,CAAC,eAAe;AAClB,uBAAiB,CAAC,CAAC;AACnB;AAAA,IACF;AACA,QAAI,YAAY;AAChB,UAAM,OAAO,YAAY;AACvB,UAAI;AACF,cAAM,EAAE,IAAI,OAAO,IAAI,MAAM;AAAA,UAC3B;AAAA,QACF;AACA,YAAI,aAAa,CAAC,MAAM,CAAC,QAAQ,GAAI;AACrC,yBAAiB,MAAM,QAAQ,OAAO,MAAM,IAAI,OAAO,SAAS,CAAC,CAAC;AAAA,MACpE,QAAQ;AACN,YAAI,CAAC,UAAW,kBAAiB,CAAC,CAAC;AAAA,MACrC;AAAA,IACF;AACA,SAAK,KAAK;AACV,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,aAAa,CAAC;AAElB,QAAM,iBAAiB,QAAQ,MAAM;AACnC,QAAI,CAAC,cAAe,QAAO,CAAC;AAC5B,UAAM,aAAa,cAAc,KAAK,CAAC,MAAM,EAAE,OAAO,MAAM,GAAG,SAAS,CAAC;AACzE,UAAM,UAAU,WAAW,IAAI,CAAC,UAAU;AAAA,MACxC,IAAI,KAAK;AAAA,MACT,UAAU,KAAK;AAAA,MACf,OAAO,KAAK;AAAA,MACZ,MAAM,KAAK;AAAA,IACb,EAAE;AACF,WAAO,eAAe,SAAS,iBAAiB;AAAA,EAClD,GAAG,CAAC,eAAe,eAAe,iBAAiB,CAAC;AAEpD,QAAM,qBAAqB,QAAQ,MAAM;AACvC,QAAI,CAAC,cAAe,QAAO,CAAC;AAC5B,UAAM,aAAa,cAAc,KAAK,CAAC,MAAM,EAAE,OAAO,SAAS,GAAG,SAAS,CAAC;AAC5E,UAAM,UAAU,WAAW,IAAI,CAAC,UAAU;AAAA,MACxC,IAAI,KAAK;AAAA,MACT,UAAU,KAAK;AAAA,MACf,OAAO,KAAK;AAAA,MACZ,MAAM,KAAK;AAAA,IACb,EAAE;AACF,WAAO,eAAe,SAAS,oBAAoB;AAAA,EACrD,GAAG,CAAC,eAAe,eAAe,oBAAoB,CAAC;AAGvD,MAAI,CAAC,eAAe;AAClB,WACE,qBAAC,SAAI,WAAU,yCAAwC,sBAAoB,qBACzE;AAAA,0BAAC,YAAO,WAAU,yGAAwG,sBAAoB,sBAC5I,+BAAC,SAAI,WAAU,8EACb;AAAA,6BAAC,QAAK,MAAM,YAAY,WAAU,yEAAwE,cAAY,aACpH;AAAA,8BAAC,SAAM,KAAI,qBAAoB,KAAI,IAAG,OAAO,IAAI,QAAQ,IAAI,WAAU,IAAG,UAAQ,MAAC;AAAA,UACnF,oBAAC,UAAK,WAAU,4CAA4C,uBAAY;AAAA,WAC1E;AAAA,QACA,qBAAC,SAAI,cAAW,WAAU,WAAU,2BAClC;AAAA,8BAAC,UAAO,SAAO,MAAC,SAAQ,SAAQ,MAAK,MAAK,WAAU,eAClD,8BAAC,QAAK,MAAM,WAAY,YAAE,oBAAoB,QAAQ,GAAE,GAC1D;AAAA,UACA,oBAAC,UAAO,SAAO,MAAC,MAAK,MAAK,WAAU,0BAClC,8BAAC,QAAK,MAAM,YAAa,YAAE,qBAAqB,SAAS,GAAE,GAC7D;AAAA,WACF;AAAA,SACF,GACF;AAAA,MAEA,oBAAC,UAAK,WAAU,UACd,8BAAC,SAAI,WAAU,0EACZ,UACH,GACF;AAAA,MAEA,oBAAC,YAAO,WAAU,YAAW,sBAAoB,sBAC/C,+BAAC,SAAI,WAAU,8EACb;AAAA,6BAAC,QAAK,MAAM,YAAY,WAAU,kFAChC;AAAA,8BAAC,SAAM,KAAI,qBAAoB,KAAI,IAAG,OAAO,IAAI,QAAQ,IAAI,WAAU,IAAG;AAAA,UAC1E,oBAAC,UAAK,WAAU,uCAAuC,uBAAY;AAAA,WACrE;AAAA,QACA,oBAAC,OAAE,WAAU,oCACV,YAAE,2BAA2B,oCAAsC,EAAE,OAAM,oBAAI,KAAK,GAAE,YAAY,EAAE,CAAC,GACxG;AAAA,SACF,GACF;AAAA,OACF;AAAA,EAEJ;AAIA,QAAM,iBACJ,qBAAC,SAAI,WAAU,wBAAuB,sBAAoB,uBACxD;AAAA,wBAAC,SAAI,WAAU,gDACb,+BAAC,QAAK,MAAM,YAAY,WAAU,yEAAwE,cAAY,aACpH;AAAA,0BAAC,SAAM,KAAI,qBAAoB,KAAI,IAAG,OAAO,IAAI,QAAQ,IAAI,WAAU,IAAG;AAAA,MAC1E,oBAAC,UAAK,WAAU,qDAAqD,uBAAY;AAAA,OACnF,GACF;AAAA,IAEA,qBAAC,SAAI,cAAW,qBAAoB,WAAU,oCAC5C;AAAA,0BAAC,OAAE,WAAU,4FACV,YAAE,mBAAmB,QAAQ,GAChC;AAAA,MACA,oBAAC,SAAI,WAAU,yBACZ,yBAAe,IAAI,CAAC,SACnB;AAAA,QAAC;AAAA;AAAA,UAEC;AAAA,UACA,QAAQ,CAAC,CAAC,KAAK,QAAQ,SAAS,WAAW,KAAK,IAAI;AAAA,UACpD;AAAA,UACA,SAAS;AAAA;AAAA,QAJJ,KAAK;AAAA,MAKZ,CACD,GACH;AAAA,MAEC,mBAAmB,SAAS,IAC3B,qBAAC,SAAI,WAAU,QACb;AAAA,4BAAC,OAAE,WAAU,4FACV,YAAE,sBAAsB,SAAS,GACpC;AAAA,QACA,oBAAC,SAAI,WAAU,yBACZ,6BAAmB,IAAI,CAAC,SACvB;AAAA,UAAC;AAAA;AAAA,YAEC;AAAA,YACA,QAAQ,CAAC,CAAC,KAAK,QAAQ,SAAS,WAAW,KAAK,IAAI;AAAA,YACpD;AAAA,YACA,SAAS;AAAA;AAAA,UAJJ,KAAK;AAAA,QAKZ,CACD,GACH;AAAA,SACF,IACE;AAAA,OACN;AAAA,IAEA,qBAAC,SAAI,WAAU,sBACb;AAAA,2BAAC,SAAI,WAAU,kDACb;AAAA,4BAAC,cAAW,MAAM,UAAU,WAAU,UAAS;AAAA,QAC/C,qBAAC,SAAI,WAAU,kBACZ;AAAA,qBACC,oBAAC,OAAE,WAAU,kDAAkD,oBAAS,IAExE,oBAAC,SAAI,WAAU,2CAA0C;AAAA,UAE1D,YACC,oBAAC,OAAE,WAAU,8CAA8C,qBAAU,IAErE,oBAAC,SAAI,WAAU,gDAA+C;AAAA,WAElE;AAAA,SACF;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,SAAS;AAAA,UACT,WAAU;AAAA,UACV,sBAAoB;AAAA,UACpB,qBAAkB;AAAA,UAElB;AAAA,gCAAC,cAAW,WAAU,UAAS;AAAA,YAC9B,EAAE,qBAAqB,SAAS;AAAA;AAAA;AAAA,MACnC;AAAA,OACF;AAAA,KACF;AAGF,SACE,qBAAC,SAAI,WAAU,gCAA+B,sBAAoB,qBAC/D;AAAA,wBAAoB,oBAAC,0BAAuB,IAAK;AAAA,IAElD,oBAAC,WAAM,WAAU,+CACd,0BACH;AAAA,IAEC,aACC,qBAAC,SAAI,WAAU,gCACb;AAAA,0BAAC,SAAI,WAAU,iDAAgD,SAAS,aAAa;AAAA,MACrF,qBAAC,WAAM,WAAU,2DACf;AAAA,4BAAC,SAAI,WAAU,+BACb,8BAAC,cAAW,SAAQ,SAAQ,MAAK,MAAK,MAAK,UAAS,SAAS,aAAa,cAAW,cACnF,8BAAC,SAAM,WAAU,UAAS,GAC5B,GACF;AAAA,QACC;AAAA,SACH;AAAA,OACF,IACE;AAAA,IAEJ,qBAAC,SAAI,WAAU,gCACb;AAAA,2BAAC,YAAO,WAAU,gEAA+D,sBAAoB,sBACnG;AAAA,4BAAC,SAAI,WAAU,2BACb,8BAAC,cAAW,SAAQ,SAAQ,MAAK,MAAK,MAAK,UAAS,SAAS,MAAM,cAAc,IAAI,GAAG,WAAU,aAAY,cAAW,aACvH,8BAAC,YAAS,WAAU,UAAS,GAC/B,GACF;AAAA,QACA,oBAAC,SAAI,WAAU,2BACb,8BAAC,0BAAuB,GAAM,GAChC;AAAA,SACF;AAAA,MAEA,oBAAC,UAAK,WAAU,0BACd,8BAAC,SAAI,WAAU,oCACZ,UACH,GACF;AAAA,MAEA,oBAAC,YAAO,WAAU,8BAA6B,sBAAoB,sBACjE,8BAAC,OAAE,WAAU,wCACV,YAAE,2BAA2B,oCAAsC,EAAE,OAAM,oBAAI,KAAK,GAAE,YAAY,EAAE,CAAC,GACxG,GACF;AAAA,OACF;AAAA,KACF;AAEJ;AAEA,IAAO,sBAAQ;",
   "names": []
 }

package/dist/portal/hooks/usePortalDashboardWidgets.js

@@ -1,10 +1,37 @@
 "use client";
 import * as React from "react";
 import { loadInjectionWidgetsForSpot } from "@open-mercato/shared/modules/widgets/injection-loader";
+import { hasAllFeatures } from "@open-mercato/shared/security/features";
+import { apiCall } from "../../backend/utils/apiCall.js";
+function collectRequiredFeatures(widgets) {
+  const set = /* @__PURE__ */ new Set();
+  for (const widget of widgets) {
+    for (const feature of widget.metadata.features ?? []) {
+      if (!feature || feature.trim().length === 0) continue;
+      set.add(feature);
+    }
+  }
+  return Array.from(set);
+}
+async function readPortalGrantedFeatures(features) {
+  if (features.length === 0) return /* @__PURE__ */ new Set();
+  try {
+    const { ok, result: data } = await apiCall("/api/customer_accounts/portal/feature-check", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ features })
+    });
+    if (!ok || !data?.ok) return /* @__PURE__ */ new Set();
+    return new Set(data.granted ?? []);
+  } catch {
+    return /* @__PURE__ */ new Set();
+  }
+}
 function usePortalDashboardWidgets(spotId) {
   const [widgets, setWidgets] = React.useState([]);
   const [isLoading, setIsLoading] = React.useState(true);
   const [error, setError] = React.useState(null);
+  const [grantedFeatures, setGrantedFeatures] = React.useState(/* @__PURE__ */ new Set());
   React.useEffect(() => {
     let mounted = true;
     const load = async () => {
@@ -15,6 +42,10 @@ function usePortalDashboardWidgets(spotId) {
         if (!mounted) return;
         const uiWidgets = loaded.filter((w) => typeof w.Widget === "function");
         setWidgets(uiWidgets);
+        const required = collectRequiredFeatures(uiWidgets);
+        const granted = await readPortalGrantedFeatures(required);
+        if (!mounted) return;
+        setGrantedFeatures(granted);
       } catch (loadError) {
         if (!mounted) return;
         console.error(`[usePortalDashboardWidgets] Failed to load widgets for spot ${spotId}:`, loadError);
@@ -29,7 +60,15 @@ function usePortalDashboardWidgets(spotId) {
       mounted = false;
     };
   }, [spotId]);
-  return { widgets, isLoading, error };
+  const grantedFeatureList = React.useMemo(() => Array.from(grantedFeatures), [grantedFeatures]);
+  const visibleWidgets = React.useMemo(
+    () => widgets.filter((widget) => {
+      const required = widget.metadata.features ?? [];
+      return required.length === 0 || hasAllFeatures(grantedFeatureList, required);
+    }),
+    [widgets, grantedFeatureList]
+  );
+  return { widgets: visibleWidgets, isLoading, error };
 }
 export {
   usePortalDashboardWidgets

package/dist/portal/hooks/usePortalDashboardWidgets.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/portal/hooks/usePortalDashboardWidgets.ts"],
-  "sourcesContent": ["'use client'\n\nimport * as React from 'react'\nimport type { InjectionSpotId } from '@open-mercato/shared/modules/widgets/injection'\nimport { loadInjectionWidgetsForSpot, type LoadedInjectionWidget } from '@open-mercato/shared/modules/widgets/injection-loader'\n\n/**\n * Loads UI injection widgets (with Widget component) for a portal spot.\n *\n * Unlike `useInjectionDataWidgets` which loads data-only widgets (columns, fields, menuItems),\n * this hook loads widgets that export a `Widget` React component \u2014 suitable for\n * portal dashboard sections and other UI injection spots.\n */\nexport function usePortalDashboardWidgets(spotId: InjectionSpotId): {\n  widgets: LoadedInjectionWidget[]\n  isLoading: boolean\n  error: string | null\n} {\n  const [widgets, setWidgets] = React.useState<LoadedInjectionWidget[]>([])\n  const [isLoading, setIsLoading] = React.useState(true)\n  const [error, setError] = React.useState<string | null>(null)\n\n  React.useEffect(() => {\n    let mounted = true\n    const load = async () => {\n      try {\n        setIsLoading(true)\n        setError(null)\n        const loaded = await loadInjectionWidgetsForSpot(spotId)\n        if (!mounted) return\n        // Only keep widgets that have a Widget component\n        const uiWidgets = loaded.filter((w) => typeof w.Widget === 'function')\n        setWidgets(uiWidgets)\n      } catch (loadError) {\n        if (!mounted) return\n        console.error(`[usePortalDashboardWidgets] Failed to load widgets for spot ${spotId}:`, loadError)\n        setError(loadError instanceof Error ? loadError.message : String(loadError))\n        setWidgets([])\n      } finally {\n        if (mounted) setIsLoading(false)\n      }\n    }\n    void load()\n    return () => {\n      mounted = false\n    }\n  }, [spotId])\n\n  return { widgets, isLoading, error }\n}\n"],
-  "mappings": ";AAEA,YAAY,WAAW;AAEvB,SAAS,mCAA+D;AASjE,SAAS,0BAA0B,QAIxC;AACA,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAkC,CAAC,CAAC;AACxE,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS,IAAI;AACrD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAE5D,QAAM,UAAU,MAAM;AACpB,QAAI,UAAU;AACd,UAAM,OAAO,YAAY;AACvB,UAAI;AACF,qBAAa,IAAI;AACjB,iBAAS,IAAI;AACb,cAAM,SAAS,MAAM,4BAA4B,MAAM;AACvD,YAAI,CAAC,QAAS;AAEd,cAAM,YAAY,OAAO,OAAO,CAAC,MAAM,OAAO,EAAE,WAAW,UAAU;AACrE,mBAAW,SAAS;AAAA,MACtB,SAAS,WAAW;AAClB,YAAI,CAAC,QAAS;AACd,gBAAQ,MAAM,+DAA+D,MAAM,KAAK,SAAS;AACjG,iBAAS,qBAAqB,QAAQ,UAAU,UAAU,OAAO,SAAS,CAAC;AAC3E,mBAAW,CAAC,CAAC;AAAA,MACf,UAAE;AACA,YAAI,QAAS,cAAa,KAAK;AAAA,MACjC;AAAA,IACF;AACA,SAAK,KAAK;AACV,WAAO,MAAM;AACX,gBAAU;AAAA,IACZ;AAAA,EACF,GAAG,CAAC,MAAM,CAAC;AAEX,SAAO,EAAE,SAAS,WAAW,MAAM;AACrC;",
+  "sourcesContent": ["'use client'\n\nimport * as React from 'react'\nimport type { InjectionSpotId } from '@open-mercato/shared/modules/widgets/injection'\nimport { loadInjectionWidgetsForSpot, type LoadedInjectionWidget } from '@open-mercato/shared/modules/widgets/injection-loader'\nimport { hasAllFeatures } from '@open-mercato/shared/security/features'\nimport { apiCall } from '../../backend/utils/apiCall'\n\ntype PortalFeatureCheckResponse = {\n  ok: boolean\n  granted?: string[]\n}\n\nfunction collectRequiredFeatures(widgets: LoadedInjectionWidget[]): string[] {\n  const set = new Set<string>()\n  for (const widget of widgets) {\n    for (const feature of widget.metadata.features ?? []) {\n      if (!feature || feature.trim().length === 0) continue\n      set.add(feature)\n    }\n  }\n  return Array.from(set)\n}\n\nasync function readPortalGrantedFeatures(features: string[]): Promise<Set<string>> {\n  if (features.length === 0) return new Set()\n  try {\n    const { ok, result: data } = await apiCall<PortalFeatureCheckResponse>('/api/customer_accounts/portal/feature-check', {\n      method: 'POST',\n      headers: { 'content-type': 'application/json' },\n      body: JSON.stringify({ features }),\n    })\n    if (!ok || !data?.ok) return new Set()\n    return new Set(data.granted ?? [])\n  } catch {\n    return new Set()\n  }\n}\n\n/**\n * Loads UI injection widgets (with Widget component) for a portal spot.\n *\n * Unlike `useInjectionDataWidgets` which loads data-only widgets (columns, fields, menuItems),\n * this hook loads widgets that export a `Widget` React component \u2014 suitable for\n * portal dashboard sections and other UI injection spots.\n *\n * Feature gating: widgets declaring `metadata.features` are filtered against the\n * authenticated customer's grants resolved via\n * `/api/customer_accounts/portal/feature-check`. Wildcard grants (`portal.*`) resolve\n * through the shared matcher.\n */\nexport function usePortalDashboardWidgets(spotId: InjectionSpotId): {\n  widgets: LoadedInjectionWidget[]\n  isLoading: boolean\n  error: string | null\n} {\n  const [widgets, setWidgets] = React.useState<LoadedInjectionWidget[]>([])\n  const [isLoading, setIsLoading] = React.useState(true)\n  const [error, setError] = React.useState<string | null>(null)\n  const [grantedFeatures, setGrantedFeatures] = React.useState<Set<string>>(new Set())\n\n  React.useEffect(() => {\n    let mounted = true\n    const load = async () => {\n      try {\n        setIsLoading(true)\n        setError(null)\n        const loaded = await loadInjectionWidgetsForSpot(spotId)\n        if (!mounted) return\n        // Only keep widgets that have a Widget component\n        const uiWidgets = loaded.filter((w) => typeof w.Widget === 'function')\n        setWidgets(uiWidgets)\n        const required = collectRequiredFeatures(uiWidgets)\n        const granted = await readPortalGrantedFeatures(required)\n        if (!mounted) return\n        setGrantedFeatures(granted)\n      } catch (loadError) {\n        if (!mounted) return\n        console.error(`[usePortalDashboardWidgets] Failed to load widgets for spot ${spotId}:`, loadError)\n        setError(loadError instanceof Error ? loadError.message : String(loadError))\n        setWidgets([])\n      } finally {\n        if (mounted) setIsLoading(false)\n      }\n    }\n    void load()\n    return () => {\n      mounted = false\n    }\n  }, [spotId])\n\n  const grantedFeatureList = React.useMemo(() => Array.from(grantedFeatures), [grantedFeatures])\n\n  const visibleWidgets = React.useMemo(\n    () =>\n      widgets.filter((widget) => {\n        const required = widget.metadata.features ?? []\n        return required.length === 0 || hasAllFeatures(grantedFeatureList, required)\n      }),\n    [widgets, grantedFeatureList],\n  )\n\n  return { widgets: visibleWidgets, isLoading, error }\n}\n"],
+  "mappings": ";AAEA,YAAY,WAAW;AAEvB,SAAS,mCAA+D;AACxE,SAAS,sBAAsB;AAC/B,SAAS,eAAe;AAOxB,SAAS,wBAAwB,SAA4C;AAC3E,QAAM,MAAM,oBAAI,IAAY;AAC5B,aAAW,UAAU,SAAS;AAC5B,eAAW,WAAW,OAAO,SAAS,YAAY,CAAC,GAAG;AACpD,UAAI,CAAC,WAAW,QAAQ,KAAK,EAAE,WAAW,EAAG;AAC7C,UAAI,IAAI,OAAO;AAAA,IACjB;AAAA,EACF;AACA,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,eAAe,0BAA0B,UAA0C;AACjF,MAAI,SAAS,WAAW,EAAG,QAAO,oBAAI,IAAI;AAC1C,MAAI;AACF,UAAM,EAAE,IAAI,QAAQ,KAAK,IAAI,MAAM,QAAoC,+CAA+C;AAAA,MACpH,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,SAAS,CAAC;AAAA,IACnC,CAAC;AACD,QAAI,CAAC,MAAM,CAAC,MAAM,GAAI,QAAO,oBAAI,IAAI;AACrC,WAAO,IAAI,IAAI,KAAK,WAAW,CAAC,CAAC;AAAA,EACnC,QAAQ;AACN,WAAO,oBAAI,IAAI;AAAA,EACjB;AACF;AAcO,SAAS,0BAA0B,QAIxC;AACA,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAkC,CAAC,CAAC;AACxE,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS,IAAI;AACrD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAC5D,QAAM,CAAC,iBAAiB,kBAAkB,IAAI,MAAM,SAAsB,oBAAI,IAAI,CAAC;AAEnF,QAAM,UAAU,MAAM;AACpB,QAAI,UAAU;AACd,UAAM,OAAO,YAAY;AACvB,UAAI;AACF,qBAAa,IAAI;AACjB,iBAAS,IAAI;AACb,cAAM,SAAS,MAAM,4BAA4B,MAAM;AACvD,YAAI,CAAC,QAAS;AAEd,cAAM,YAAY,OAAO,OAAO,CAAC,MAAM,OAAO,EAAE,WAAW,UAAU;AACrE,mBAAW,SAAS;AACpB,cAAM,WAAW,wBAAwB,SAAS;AAClD,cAAM,UAAU,MAAM,0BAA0B,QAAQ;AACxD,YAAI,CAAC,QAAS;AACd,2BAAmB,OAAO;AAAA,MAC5B,SAAS,WAAW;AAClB,YAAI,CAAC,QAAS;AACd,gBAAQ,MAAM,+DAA+D,MAAM,KAAK,SAAS;AACjG,iBAAS,qBAAqB,QAAQ,UAAU,UAAU,OAAO,SAAS,CAAC;AAC3E,mBAAW,CAAC,CAAC;AAAA,MACf,UAAE;AACA,YAAI,QAAS,cAAa,KAAK;AAAA,MACjC;AAAA,IACF;AACA,SAAK,KAAK;AACV,WAAO,MAAM;AACX,gBAAU;AAAA,IACZ;AAAA,EACF,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,qBAAqB,MAAM,QAAQ,MAAM,MAAM,KAAK,eAAe,GAAG,CAAC,eAAe,CAAC;AAE7F,QAAM,iBAAiB,MAAM;AAAA,IAC3B,MACE,QAAQ,OAAO,CAAC,WAAW;AACzB,YAAM,WAAW,OAAO,SAAS,YAAY,CAAC;AAC9C,aAAO,SAAS,WAAW,KAAK,eAAe,oBAAoB,QAAQ;AAAA,IAC7E,CAAC;AAAA,IACH,CAAC,SAAS,kBAAkB;AAAA,EAC9B;AAEA,SAAO,EAAE,SAAS,gBAAgB,WAAW,MAAM;AACrD;",
   "names": []
 }

package/dist/portal/utils/nav.js

@@ -0,0 +1,84 @@
+import { hasAllFeatures } from "@open-mercato/shared/security/features";
+function isPortalPattern(pattern) {
+  if (!pattern) return false;
+  return pattern.startsWith("/[orgSlug]/portal/") || pattern === "/[orgSlug]/portal";
+}
+function hasNoUnresolvedParams(href) {
+  return !href.includes("[");
+}
+function resolveHref(pattern, orgSlug) {
+  return pattern.replace("[orgSlug]", orgSlug);
+}
+function pickGroup(group) {
+  if (group === "main" || group === "account") return group;
+  return "main";
+}
+function buildPortalNav({
+  routes,
+  orgSlug,
+  grantedFeatures,
+  isPortalAdmin = false
+}) {
+  const mainItems = [];
+  const accountItems = [];
+  for (const route of routes) {
+    const pattern = route.pattern ?? route.path;
+    if (!isPortalPattern(pattern)) continue;
+    if (route.navHidden) continue;
+    const nav = route.nav;
+    if (!nav || typeof nav.label !== "string" || nav.label.length === 0) continue;
+    const requireFeatures = route.requireCustomerFeatures ?? [];
+    if (!isPortalAdmin && requireFeatures.length) {
+      if (!hasAllFeatures(grantedFeatures, requireFeatures)) continue;
+    }
+    const href = resolveHref(pattern, orgSlug);
+    if (!hasNoUnresolvedParams(href)) continue;
+    const group = pickGroup(nav.group);
+    const item = {
+      id: `portal-nav:${pattern}`,
+      label: nav.label,
+      labelKey: nav.labelKey,
+      href,
+      icon: nav.icon,
+      order: typeof nav.order === "number" ? nav.order : 100
+    };
+    if (group === "account") accountItems.push(item);
+    else mainItems.push(item);
+  }
+  const sortItems = (items) => items.sort((a, b) => {
+    if (a.order !== b.order) return a.order - b.order;
+    return a.label.localeCompare(b.label);
+  });
+  sortItems(mainItems);
+  sortItems(accountItems);
+  const groups = [];
+  if (mainItems.length) groups.push({ id: "main", items: mainItems });
+  if (accountItems.length) groups.push({ id: "account", items: accountItems });
+  return groups;
+}
+function mergePortalSidebarGroupsWithInjected(discovered, injected) {
+  const mergeGroup = (base, extra) => {
+    const knownIds = new Set(base.map((item) => item.id));
+    const knownHrefs = new Set(base.map((item) => item.href).filter((href) => Boolean(href)));
+    const merged = [...base];
+    for (const item of extra) {
+      if (knownIds.has(item.id)) continue;
+      if (item.href && knownHrefs.has(item.href)) continue;
+      merged.push(item);
+      knownIds.add(item.id);
+      if (item.href) knownHrefs.add(item.href);
+    }
+    return merged;
+  };
+  const mainBase = discovered.find((g) => g.id === "main")?.items ?? [];
+  const accountBase = discovered.find((g) => g.id === "account")?.items ?? [];
+  return {
+    main: mergeGroup(mainBase, injected.main),
+    account: mergeGroup(accountBase, injected.account)
+  };
+}
+export {
+  buildPortalNav,
+  mergePortalSidebarGroupsWithInjected
+};
+//# sourceMappingURL=nav.js.map

package/dist/portal/utils/nav.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/portal/utils/nav.ts"],
+  "sourcesContent": ["import type { FrontendRouteManifestEntry } from '@open-mercato/shared/modules/registry'\nimport { hasAllFeatures } from '@open-mercato/shared/security/features'\n\nexport type PortalNavGroupId = 'main' | 'account'\n\nexport type PortalNavItem = {\n  id: string\n  label: string\n  labelKey?: string\n  href: string\n  icon?: string\n  order: number\n}\n\nexport type PortalNavGroup = {\n  id: PortalNavGroupId\n  items: PortalNavItem[]\n}\n\nexport type BuildPortalNavOptions = {\n  /** Route manifest to inspect (typically `getFrontendRouteManifests()`). */\n  routes: readonly FrontendRouteManifestEntry[]\n  /** Current customer org slug \u2014 substituted into `[orgSlug]` patterns. */\n  orgSlug: string\n  /** Feature strings granted to the current customer (may include wildcards). */\n  grantedFeatures: readonly string[]\n  /** If true, bypass feature checks (portal admin). Defaults to false. */\n  isPortalAdmin?: boolean\n}\n\nfunction isPortalPattern(pattern: string | undefined): pattern is string {\n  if (!pattern) return false\n  return pattern.startsWith('/[orgSlug]/portal/') || pattern === '/[orgSlug]/portal'\n}\n\nfunction hasNoUnresolvedParams(href: string): boolean {\n  return !href.includes('[')\n}\n\nfunction resolveHref(pattern: string, orgSlug: string): string {\n  return pattern.replace('[orgSlug]', orgSlug)\n}\n\nfunction pickGroup(group: unknown): PortalNavGroupId {\n  if (group === 'main' || group === 'account') return group\n  return 'main'\n}\n\n/**\n * Build the portal sidebar from the frontend route manifest.\n *\n * Mirrors `buildAdminNav()` for the portal surface: selects routes under\n * `/[orgSlug]/portal/*` that declare a `nav` block, applies\n * `requireCustomerFeatures` against the caller's grants (wildcards honored),\n * and returns ordered sidebar groups.\n *\n * Absence of `nav` on a metadata file means the page is routable but not\n * auto-listed \u2014 useful for detail/create pages.\n */\nexport function buildPortalNav({\n  routes,\n  orgSlug,\n  grantedFeatures,\n  isPortalAdmin = false,\n}: BuildPortalNavOptions): PortalNavGroup[] {\n  const mainItems: PortalNavItem[] = []\n  const accountItems: PortalNavItem[] = []\n\n  for (const route of routes) {\n    const pattern = route.pattern ?? route.path\n    if (!isPortalPattern(pattern)) continue\n    if (route.navHidden) continue\n    const nav = route.nav\n    if (!nav || typeof nav.label !== 'string' || nav.label.length === 0) continue\n\n    const requireFeatures = route.requireCustomerFeatures ?? []\n    if (!isPortalAdmin && requireFeatures.length) {\n      if (!hasAllFeatures(grantedFeatures as string[], requireFeatures as string[])) continue\n    }\n\n    const href = resolveHref(pattern as string, orgSlug)\n    if (!hasNoUnresolvedParams(href)) continue\n\n    const group = pickGroup(nav.group)\n    const item: PortalNavItem = {\n      id: `portal-nav:${pattern}`,\n      label: nav.label,\n      labelKey: nav.labelKey,\n      href,\n      icon: nav.icon,\n      order: typeof nav.order === 'number' ? nav.order : 100,\n    }\n    if (group === 'account') accountItems.push(item)\n    else mainItems.push(item)\n  }\n\n  const sortItems = (items: PortalNavItem[]) =>\n    items.sort((a, b) => {\n      if (a.order !== b.order) return a.order - b.order\n      return a.label.localeCompare(b.label)\n    })\n\n  sortItems(mainItems)\n  sortItems(accountItems)\n\n  const groups: PortalNavGroup[] = []\n  if (mainItems.length) groups.push({ id: 'main', items: mainItems })\n  if (accountItems.length) groups.push({ id: 'account', items: accountItems })\n  return groups\n}\n\n/**\n * Merge sidebar groups from the portal nav endpoint with items contributed via\n * `usePortalInjectedMenuItems`. Auto-discovered entries take precedence \u2014\n * injected items with matching `id` or `href` are dropped as duplicates.\n */\nexport function mergePortalSidebarGroupsWithInjected<TInjected extends { id: string; href?: string }>(\n  discovered: readonly PortalNavGroup[],\n  injected: {\n    main: readonly TInjected[]\n    account: readonly TInjected[]\n  },\n): {\n  main: Array<PortalNavItem | TInjected>\n  account: Array<PortalNavItem | TInjected>\n} {\n  const mergeGroup = <T extends PortalNavItem | TInjected>(\n    base: readonly PortalNavItem[],\n    extra: readonly TInjected[],\n  ): Array<PortalNavItem | TInjected> => {\n    const knownIds = new Set(base.map((item) => item.id))\n    const knownHrefs = new Set(base.map((item) => item.href).filter((href): href is string => Boolean(href)))\n    const merged: Array<PortalNavItem | TInjected> = [...base]\n    for (const item of extra) {\n      if (knownIds.has(item.id)) continue\n      if (item.href && knownHrefs.has(item.href)) continue\n      merged.push(item)\n      knownIds.add(item.id)\n      if (item.href) knownHrefs.add(item.href)\n    }\n    return merged\n  }\n\n  const mainBase = discovered.find((g) => g.id === 'main')?.items ?? []\n  const accountBase = discovered.find((g) => g.id === 'account')?.items ?? []\n  return {\n    main: mergeGroup(mainBase, injected.main),\n    account: mergeGroup(accountBase, injected.account),\n  }\n}\n"],
+  "mappings": "AACA,SAAS,sBAAsB;AA6B/B,SAAS,gBAAgB,SAAgD;AACvE,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO,QAAQ,WAAW,oBAAoB,KAAK,YAAY;AACjE;AAEA,SAAS,sBAAsB,MAAuB;AACpD,SAAO,CAAC,KAAK,SAAS,GAAG;AAC3B;AAEA,SAAS,YAAY,SAAiB,SAAyB;AAC7D,SAAO,QAAQ,QAAQ,aAAa,OAAO;AAC7C;AAEA,SAAS,UAAU,OAAkC;AACnD,MAAI,UAAU,UAAU,UAAU,UAAW,QAAO;AACpD,SAAO;AACT;AAaO,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA,gBAAgB;AAClB,GAA4C;AAC1C,QAAM,YAA6B,CAAC;AACpC,QAAM,eAAgC,CAAC;AAEvC,aAAW,SAAS,QAAQ;AAC1B,UAAM,UAAU,MAAM,WAAW,MAAM;AACvC,QAAI,CAAC,gBAAgB,OAAO,EAAG;AAC/B,QAAI,MAAM,UAAW;AACrB,UAAM,MAAM,MAAM;AAClB,QAAI,CAAC,OAAO,OAAO,IAAI,UAAU,YAAY,IAAI,MAAM,WAAW,EAAG;AAErE,UAAM,kBAAkB,MAAM,2BAA2B,CAAC;AAC1D,QAAI,CAAC,iBAAiB,gBAAgB,QAAQ;AAC5C,UAAI,CAAC,eAAe,iBAA6B,eAA2B,EAAG;AAAA,IACjF;AAEA,UAAM,OAAO,YAAY,SAAmB,OAAO;AACnD,QAAI,CAAC,sBAAsB,IAAI,EAAG;AAElC,UAAM,QAAQ,UAAU,IAAI,KAAK;AACjC,UAAM,OAAsB;AAAA,MAC1B,IAAI,cAAc,OAAO;AAAA,MACzB,OAAO,IAAI;AAAA,MACX,UAAU,IAAI;AAAA,MACd;AAAA,MACA,MAAM,IAAI;AAAA,MACV,OAAO,OAAO,IAAI,UAAU,WAAW,IAAI,QAAQ;AAAA,IACrD;AACA,QAAI,UAAU,UAAW,cAAa,KAAK,IAAI;AAAA,QAC1C,WAAU,KAAK,IAAI;AAAA,EAC1B;AAEA,QAAM,YAAY,CAAC,UACjB,MAAM,KAAK,CAAC,GAAG,MAAM;AACnB,QAAI,EAAE,UAAU,EAAE,MAAO,QAAO,EAAE,QAAQ,EAAE;AAC5C,WAAO,EAAE,MAAM,cAAc,EAAE,KAAK;AAAA,EACtC,CAAC;AAEH,YAAU,SAAS;AACnB,YAAU,YAAY;AAEtB,QAAM,SAA2B,CAAC;AAClC,MAAI,UAAU,OAAQ,QAAO,KAAK,EAAE,IAAI,QAAQ,OAAO,UAAU,CAAC;AAClE,MAAI,aAAa,OAAQ,QAAO,KAAK,EAAE,IAAI,WAAW,OAAO,aAAa,CAAC;AAC3E,SAAO;AACT;AAOO,SAAS,qCACd,YACA,UAOA;AACA,QAAM,aAAa,CACjB,MACA,UACqC;AACrC,UAAM,WAAW,IAAI,IAAI,KAAK,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC;AACpD,UAAM,aAAa,IAAI,IAAI,KAAK,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,OAAO,CAAC,SAAyB,QAAQ,IAAI,CAAC,CAAC;AACxG,UAAM,SAA2C,CAAC,GAAG,IAAI;AACzD,eAAW,QAAQ,OAAO;AACxB,UAAI,SAAS,IAAI,KAAK,EAAE,EAAG;AAC3B,UAAI,KAAK,QAAQ,WAAW,IAAI,KAAK,IAAI,EAAG;AAC5C,aAAO,KAAK,IAAI;AAChB,eAAS,IAAI,KAAK,EAAE;AACpB,UAAI,KAAK,KAAM,YAAW,IAAI,KAAK,IAAI;AAAA,IACzC;AACA,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,WAAW,KAAK,CAAC,MAAM,EAAE,OAAO,MAAM,GAAG,SAAS,CAAC;AACpE,QAAM,cAAc,WAAW,KAAK,CAAC,MAAM,EAAE,OAAO,SAAS,GAAG,SAAS,CAAC;AAC1E,SAAO;AAAA,IACL,MAAM,WAAW,UAAU,SAAS,IAAI;AAAA,IACxC,SAAS,WAAW,aAAa,SAAS,OAAO;AAAA,EACnD;AACF;",
+  "names": []
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/ui",
-  "version": "0.5.1-develop.2652.0276e72e45",
+  "version": "0.5.1-develop.2657.a01847a9fa",
   "type": "module",
   "main": "./dist/index.js",
   "scripts": {
@@ -132,12 +132,12 @@
     "recharts": "^3.8.1"
   },
   "peerDependencies": {
-    "@open-mercato/shared": "0.5.1-develop.2652.0276e72e45",
+    "@open-mercato/shared": "0.5.1-develop.2657.a01847a9fa",
     "react": ">=18.0.0",
     "react-dom": ">=18.0.0"
   },
   "devDependencies": {
-    "@open-mercato/shared": "0.5.1-develop.2652.0276e72e45",
+    "@open-mercato/shared": "0.5.1-develop.2657.a01847a9fa",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.1",

package/src/portal/PortalShell.tsx

@@ -1,5 +1,5 @@
 "use client"
-import { type ReactNode, useState, useCallback, useMemo, useContext } from 'react'
+import { type ReactNode, useEffect, useState, useCallback, useMemo, useContext } from 'react'
 import Image from 'next/image'
 import Link from 'next/link'
 import { usePathname } from 'next/navigation'
@@ -12,6 +12,8 @@ import { mergeMenuItems } from '../backend/injection/mergeMenuItems'
 import type { MergedMenuItem } from '../backend/injection/mergeMenuItems'
 import { PortalNotificationBell } from './components/PortalNotificationBell'
 import { usePortalContext } from './PortalContext'
+import { apiCall } from '../backend/utils/apiCall'
+import type { PortalNavGroup } from './utils/nav'
 
 // Component replacement handle IDs (FROZEN once shipped)
 export const PORTAL_SHELL_HANDLE = 'page:portal:layout'
@@ -174,29 +176,59 @@ export function PortalShell({
   const portalHome = orgSlug ? `/${orgSlug}/portal` : '/portal'
   const loginHref = orgSlug ? `/${orgSlug}/portal/login` : '/portal/login'
   const signupHref = orgSlug ? `/${orgSlug}/portal/signup` : '/portal/signup'
-  const dashboardHref = orgSlug ? `/${orgSlug}/portal/dashboard` : '/portal/dashboard'
-  const profileHref = orgSlug ? `/${orgSlug}/portal/profile` : '/portal/profile'
   // Always use the resolved organization name from the database.
   // Fall back to the generic portal title — never display the raw slug.
   const headerTitle = orgName || t('portal.title', 'Customer Portal')
 
   const closeMobile = useCallback(() => setMobileOpen(false), [])
 
+  const [autoNavGroups, setAutoNavGroups] = useState<PortalNavGroup[]>([])
+  useEffect(() => {
+    if (!authenticated) {
+      setAutoNavGroups([])
+      return
+    }
+    let cancelled = false
+    const load = async () => {
+      try {
+        const { ok, result } = await apiCall<{ ok: boolean; groups?: PortalNavGroup[] }>(
+          '/api/customer_accounts/portal/nav',
+        )
+        if (cancelled || !ok || !result?.ok) return
+        setAutoNavGroups(Array.isArray(result.groups) ? result.groups : [])
+      } catch {
+        if (!cancelled) setAutoNavGroups([])
+      }
+    }
+    void load()
+    return () => {
+      cancelled = true
+    }
+  }, [authenticated])
+
   const mergedNavItems = useMemo(() => {
     if (!authenticated) return []
-    const builtIn = [
-      { id: 'portal-dashboard', labelKey: 'portal.nav.dashboard', href: dashboardHref },
-    ]
+    const discovered = autoNavGroups.find((g) => g.id === 'main')?.items ?? []
+    const builtIn = discovered.map((item) => ({
+      id: item.id,
+      labelKey: item.labelKey,
+      label: item.label,
+      href: item.href,
+    }))
     return mergeMenuItems(builtIn, injectedMainItems)
-  }, [authenticated, dashboardHref, injectedMainItems])
+  }, [authenticated, autoNavGroups, injectedMainItems])
 
   const mergedAccountItems = useMemo(() => {
     if (!authenticated) return []
-    const builtIn = [
-      { id: 'portal-profile', labelKey: 'portal.nav.profile', href: profileHref },
-    ]
+    const discovered = autoNavGroups.find((g) => g.id === 'account')?.items ?? []
+    const builtIn = discovered.map((item) => ({
+      id: item.id,
+      labelKey: item.labelKey,
+      label: item.label,
+      href: item.href,
+    }))
     return mergeMenuItems(builtIn, injectedAccountItems)
-  }, [authenticated, profileHref, injectedAccountItems])
+  }, [authenticated, autoNavGroups, injectedAccountItems])
 
   /* ---- PUBLIC LAYOUT ---- */
   if (!authenticated) {

package/src/portal/hooks/__tests__/usePortalDashboardWidgets.test.tsx

@@ -0,0 +1,117 @@
+/** @jest-environment jsdom */
+import * as React from 'react'
+import { renderHook, waitFor } from '@testing-library/react'
+
+const loadInjectionWidgetsForSpotMock = jest.fn()
+const apiCallMock = jest.fn()
+
+jest.mock('@open-mercato/shared/modules/widgets/injection-loader', () => ({
+  loadInjectionWidgetsForSpot: (...args: unknown[]) => loadInjectionWidgetsForSpotMock(...args),
+}))
+
+jest.mock('../../../backend/utils/apiCall', () => ({
+  apiCall: (...args: unknown[]) => apiCallMock(...args),
+}))
+
+import { usePortalDashboardWidgets } from '../usePortalDashboardWidgets'
+
+function widget(id: string, features?: string[]) {
+  return {
+    moduleId: 'test',
+    spotId: 'portal:dashboard:sections',
+    widgetId: id,
+    Widget: () => null,
+    metadata: { id, features },
+  }
+}
+
+function mockFeatureCheckGranted(granted: string[]) {
+  apiCallMock.mockImplementation(async (url: string) => {
+    if (url === '/api/customer_accounts/portal/feature-check') {
+      return { ok: true, result: { ok: true, granted } }
+    }
+    throw new Error(`unexpected apiCall: ${url}`)
+  })
+}
+
+describe('usePortalDashboardWidgets — feature gating (Phase 1 regression)', () => {
+  beforeEach(() => {
+    jest.clearAllMocks()
+  })
+
+  it('returns widgets without required features regardless of grants', async () => {
+    loadInjectionWidgetsForSpotMock.mockResolvedValueOnce([widget('always-visible')])
+    // No features required → hook should skip the feature-check entirely
+
+    const { result } = renderHook(() => usePortalDashboardWidgets('portal:dashboard:sections' as any))
+
+    await waitFor(() => expect(result.current.isLoading).toBe(false))
+    expect(result.current.widgets).toHaveLength(1)
+    expect(result.current.widgets[0].widgetId).toBe('always-visible')
+    expect(apiCallMock).not.toHaveBeenCalled()
+  })
+
+  it('filters out widgets whose required feature the user lacks', async () => {
+    loadInjectionWidgetsForSpotMock.mockResolvedValueOnce([
+      widget('visible', ['portal.orders.view']),
+      widget('hidden', ['portal.billing.manage']),
+    ])
+    mockFeatureCheckGranted(['portal.orders.view'])
+
+    const { result } = renderHook(() => usePortalDashboardWidgets('portal:dashboard:sections' as any))
+
+    await waitFor(() => expect(result.current.isLoading).toBe(false))
+    const ids = result.current.widgets.map((w) => w.widgetId)
+    expect(ids).toEqual(['visible'])
+    expect(apiCallMock).toHaveBeenCalledWith(
+      '/api/customer_accounts/portal/feature-check',
+      expect.objectContaining({ method: 'POST' }),
+    )
+  })
+
+  it('resolves wildcard grants through the shared matcher', async () => {
+    loadInjectionWidgetsForSpotMock.mockResolvedValueOnce([
+      widget('orders-view', ['portal.orders.view']),
+      widget('orders-create', ['portal.orders.create']),
+      widget('billing', ['portal.billing.manage']),
+    ])
+    // Grant is a wildcard — server returns the concrete grants it matched.
+    mockFeatureCheckGranted(['portal.orders.view', 'portal.orders.create'])
+
+    const { result } = renderHook(() => usePortalDashboardWidgets('portal:dashboard:sections' as any))
+
+    await waitFor(() => expect(result.current.isLoading).toBe(false))
+    const ids = result.current.widgets.map((w) => w.widgetId).sort()
+    expect(ids).toEqual(['orders-create', 'orders-view'])
+  })
+
+  it('excludes all gated widgets when feature-check fails', async () => {
+    loadInjectionWidgetsForSpotMock.mockResolvedValueOnce([
+      widget('ungated'),
+      widget('gated', ['portal.orders.view']),
+    ])
+    apiCallMock.mockRejectedValueOnce(new Error('network down'))
+
+    const { result } = renderHook(() => usePortalDashboardWidgets('portal:dashboard:sections' as any))
+
+    await waitFor(() => expect(result.current.isLoading).toBe(false))
+    const ids = result.current.widgets.map((w) => w.widgetId)
+    // Ungated widget stays; gated widget is filtered because granted set is empty.
+    expect(ids).toEqual(['ungated'])
+  })
+
+  it('excludes widgets without a Widget component', async () => {
+    const noWidget = {
+      moduleId: 'test',
+      spotId: 'portal:dashboard:sections',
+      widgetId: 'data-only',
+      metadata: { id: 'data-only' },
+    } as any
+    loadInjectionWidgetsForSpotMock.mockResolvedValueOnce([widget('real'), noWidget])
+
+    const { result } = renderHook(() => usePortalDashboardWidgets('portal:dashboard:sections' as any))
+
+    await waitFor(() => expect(result.current.isLoading).toBe(false))
+    expect(result.current.widgets.map((w) => w.widgetId)).toEqual(['real'])
+  })
+})

package/src/portal/hooks/usePortalDashboardWidgets.ts

@@ -3,6 +3,39 @@
 import * as React from 'react'
 import type { InjectionSpotId } from '@open-mercato/shared/modules/widgets/injection'
 import { loadInjectionWidgetsForSpot, type LoadedInjectionWidget } from '@open-mercato/shared/modules/widgets/injection-loader'
+import { hasAllFeatures } from '@open-mercato/shared/security/features'
+import { apiCall } from '../../backend/utils/apiCall'
+
+type PortalFeatureCheckResponse = {
+  ok: boolean
+  granted?: string[]
+}
+
+function collectRequiredFeatures(widgets: LoadedInjectionWidget[]): string[] {
+  const set = new Set<string>()
+  for (const widget of widgets) {
+    for (const feature of widget.metadata.features ?? []) {
+      if (!feature || feature.trim().length === 0) continue
+      set.add(feature)
+    }
+  }
+  return Array.from(set)
+}
+
+async function readPortalGrantedFeatures(features: string[]): Promise<Set<string>> {
+  if (features.length === 0) return new Set()
+  try {
+    const { ok, result: data } = await apiCall<PortalFeatureCheckResponse>('/api/customer_accounts/portal/feature-check', {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ features }),
+    })
+    if (!ok || !data?.ok) return new Set()
+    return new Set(data.granted ?? [])
+  } catch {
+    return new Set()
+  }
+}
 
 /**
  * Loads UI injection widgets (with Widget component) for a portal spot.
@@ -10,6 +43,11 @@ import { loadInjectionWidgetsForSpot, type LoadedInjectionWidget } from '@open-m
  * Unlike `useInjectionDataWidgets` which loads data-only widgets (columns, fields, menuItems),
  * this hook loads widgets that export a `Widget` React component — suitable for
  * portal dashboard sections and other UI injection spots.
+ *
+ * Feature gating: widgets declaring `metadata.features` are filtered against the
+ * authenticated customer's grants resolved via
+ * `/api/customer_accounts/portal/feature-check`. Wildcard grants (`portal.*`) resolve
+ * through the shared matcher.
  */
 export function usePortalDashboardWidgets(spotId: InjectionSpotId): {
   widgets: LoadedInjectionWidget[]
@@ -19,6 +57,7 @@ export function usePortalDashboardWidgets(spotId: InjectionSpotId): {
   const [widgets, setWidgets] = React.useState<LoadedInjectionWidget[]>([])
   const [isLoading, setIsLoading] = React.useState(true)
   const [error, setError] = React.useState<string | null>(null)
+  const [grantedFeatures, setGrantedFeatures] = React.useState<Set<string>>(new Set())
 
   React.useEffect(() => {
     let mounted = true
@@ -31,6 +70,10 @@ export function usePortalDashboardWidgets(spotId: InjectionSpotId): {
         // Only keep widgets that have a Widget component
         const uiWidgets = loaded.filter((w) => typeof w.Widget === 'function')
         setWidgets(uiWidgets)
+        const required = collectRequiredFeatures(uiWidgets)
+        const granted = await readPortalGrantedFeatures(required)
+        if (!mounted) return
+        setGrantedFeatures(granted)
       } catch (loadError) {
         if (!mounted) return
         console.error(`[usePortalDashboardWidgets] Failed to load widgets for spot ${spotId}:`, loadError)
@@ -46,5 +89,16 @@ export function usePortalDashboardWidgets(spotId: InjectionSpotId): {
     }
   }, [spotId])
 
-  return { widgets, isLoading, error }
+  const grantedFeatureList = React.useMemo(() => Array.from(grantedFeatures), [grantedFeatures])
+
+  const visibleWidgets = React.useMemo(
+    () =>
+      widgets.filter((widget) => {
+        const required = widget.metadata.features ?? []
+        return required.length === 0 || hasAllFeatures(grantedFeatureList, required)
+      }),
+    [widgets, grantedFeatureList],
+  )
+
+  return { widgets: visibleWidgets, isLoading, error }
 }

package/src/portal/utils/__tests__/nav.test.ts

@@ -0,0 +1,199 @@
+import type { FrontendRouteManifestEntry } from '@open-mercato/shared/modules/registry'
+import { buildPortalNav, mergePortalSidebarGroupsWithInjected } from '../nav'
+
+function makeRoute(partial: Partial<FrontendRouteManifestEntry>): FrontendRouteManifestEntry {
+  return {
+    moduleId: 'test',
+    pattern: '/[orgSlug]/portal/test',
+    load: async () => null as any,
+    ...partial,
+  } as FrontendRouteManifestEntry
+}
+
+describe('buildPortalNav', () => {
+  it('auto-lists portal pages that declare nav metadata', () => {
+    const routes: FrontendRouteManifestEntry[] = [
+      makeRoute({
+        pattern: '/[orgSlug]/portal/dashboard',
+        nav: { label: 'Dashboard', labelKey: 'portal.nav.dashboard', group: 'main', order: 10 },
+      }),
+      makeRoute({
+        pattern: '/[orgSlug]/portal/profile',
+        nav: { label: 'Profile', labelKey: 'portal.nav.profile', group: 'account', order: 10 },
+      }),
+    ]
+
+    const groups = buildPortalNav({ routes, orgSlug: 'my-org', grantedFeatures: [] })
+
+    expect(groups).toEqual([
+      {
+        id: 'main',
+        items: [
+          expect.objectContaining({
+            label: 'Dashboard',
+            labelKey: 'portal.nav.dashboard',
+            href: '/my-org/portal/dashboard',
+            order: 10,
+          }),
+        ],
+      },
+      {
+        id: 'account',
+        items: [
+          expect.objectContaining({
+            label: 'Profile',
+            labelKey: 'portal.nav.profile',
+            href: '/my-org/portal/profile',
+            order: 10,
+          }),
+        ],
+      },
+    ])
+  })
+
+  it('skips pages without nav metadata', () => {
+    const routes: FrontendRouteManifestEntry[] = [
+      makeRoute({ pattern: '/[orgSlug]/portal/login' }),
+      makeRoute({
+        pattern: '/[orgSlug]/portal/dashboard',
+        nav: { label: 'Dashboard', group: 'main' },
+      }),
+    ]
+    const groups = buildPortalNav({ routes, orgSlug: 'my-org', grantedFeatures: [] })
+    expect(groups).toHaveLength(1)
+    expect(groups[0].id).toBe('main')
+    expect(groups[0].items.map((i) => i.label)).toEqual(['Dashboard'])
+  })
+
+  it('skips pages the user lacks required features for', () => {
+    const routes: FrontendRouteManifestEntry[] = [
+      makeRoute({
+        pattern: '/[orgSlug]/portal/orders',
+        requireCustomerFeatures: ['portal.orders.view'],
+        nav: { label: 'Orders', group: 'main' },
+      }),
+      makeRoute({
+        pattern: '/[orgSlug]/portal/dashboard',
+        nav: { label: 'Dashboard', group: 'main' },
+      }),
+    ]
+
+    const groups = buildPortalNav({ routes, orgSlug: 'my-org', grantedFeatures: [] })
+    expect(groups).toEqual([
+      { id: 'main', items: [expect.objectContaining({ label: 'Dashboard' })] },
+    ])
+  })
+
+  it('matches wildcard grants like portal.*', () => {
+    const routes: FrontendRouteManifestEntry[] = [
+      makeRoute({
+        pattern: '/[orgSlug]/portal/orders',
+        requireCustomerFeatures: ['portal.orders.view'],
+        nav: { label: 'Orders', group: 'main' },
+      }),
+    ]
+
+    const groups = buildPortalNav({ routes, orgSlug: 'my-org', grantedFeatures: ['portal.*'] })
+    expect(groups).toEqual([{ id: 'main', items: [expect.objectContaining({ label: 'Orders' })] }])
+  })
+
+  it('bypasses feature checks when isPortalAdmin is true', () => {
+    const routes: FrontendRouteManifestEntry[] = [
+      makeRoute({
+        pattern: '/[orgSlug]/portal/orders',
+        requireCustomerFeatures: ['portal.orders.view'],
+        nav: { label: 'Orders', group: 'main' },
+      }),
+    ]
+
+    const groups = buildPortalNav({ routes, orgSlug: 'my-org', grantedFeatures: [], isPortalAdmin: true })
+    expect(groups[0].items[0].label).toBe('Orders')
+  })
+
+  it('ignores navHidden pages even when nav is declared', () => {
+    const routes: FrontendRouteManifestEntry[] = [
+      makeRoute({
+        pattern: '/[orgSlug]/portal/secret',
+        navHidden: true,
+        nav: { label: 'Secret', group: 'main' },
+      }),
+    ]
+    expect(buildPortalNav({ routes, orgSlug: 'my-org', grantedFeatures: [] })).toEqual([])
+  })
+
+  it('skips non-portal routes and dynamic patterns with unresolved params', () => {
+    const routes: FrontendRouteManifestEntry[] = [
+      makeRoute({
+        pattern: '/[orgSlug]/portal/orders/[id]',
+        nav: { label: 'Order Detail', group: 'main' },
+      }),
+      makeRoute({
+        pattern: '/[orgSlug]/checkout',
+        nav: { label: 'Checkout', group: 'main' },
+      }),
+    ]
+    expect(buildPortalNav({ routes, orgSlug: 'my-org', grantedFeatures: [] })).toEqual([])
+  })
+
+  it('sorts items by order then label', () => {
+    const routes: FrontendRouteManifestEntry[] = [
+      makeRoute({
+        pattern: '/[orgSlug]/portal/b',
+        nav: { label: 'B', group: 'main', order: 20 },
+      }),
+      makeRoute({
+        pattern: '/[orgSlug]/portal/a',
+        nav: { label: 'A', group: 'main', order: 10 },
+      }),
+      makeRoute({
+        pattern: '/[orgSlug]/portal/aa',
+        nav: { label: 'Aa', group: 'main', order: 10 },
+      }),
+    ]
+    const main = buildPortalNav({ routes, orgSlug: 'my-org', grantedFeatures: [] })[0]
+    expect(main.items.map((i) => i.label)).toEqual(['A', 'Aa', 'B'])
+  })
+})
+
+describe('mergePortalSidebarGroupsWithInjected', () => {
+  it('dedupes injected items by id', () => {
+    const result = mergePortalSidebarGroupsWithInjected(
+      [
+        {
+          id: 'main',
+          items: [
+            { id: 'portal-nav:/[orgSlug]/portal/dashboard', label: 'Dashboard', href: '/x/portal/dashboard', order: 10 },
+          ],
+        },
+      ],
+      {
+        main: [
+          { id: 'portal-nav:/[orgSlug]/portal/dashboard', label: 'Dashboard (injected)', href: '/x/portal/dashboard' } as any,
+          { id: 'orders-external', label: 'External', href: 'https://external' } as any,
+        ],
+        account: [],
+      },
+    )
+    expect(result.main).toHaveLength(2)
+    expect(result.main[0]).toEqual(expect.objectContaining({ label: 'Dashboard' }))
+    expect(result.main[1]).toEqual(expect.objectContaining({ id: 'orders-external' }))
+  })
+
+  it('dedupes injected items by href', () => {
+    const result = mergePortalSidebarGroupsWithInjected(
+      [
+        {
+          id: 'main',
+          items: [
+            { id: 'portal-nav:/[orgSlug]/portal/profile', label: 'Profile', href: '/x/portal/profile', order: 10 },
+          ],
+        },
+      ],
+      {
+        main: [{ id: 'different-id', label: 'Profile', href: '/x/portal/profile' } as any],
+        account: [],
+      },
+    )
+    expect(result.main).toHaveLength(1)
+  })
+})

package/src/portal/utils/nav.ts

@@ -0,0 +1,150 @@
+import type { FrontendRouteManifestEntry } from '@open-mercato/shared/modules/registry'
+import { hasAllFeatures } from '@open-mercato/shared/security/features'
+
+export type PortalNavGroupId = 'main' | 'account'
+
+export type PortalNavItem = {
+  id: string
+  label: string
+  labelKey?: string
+  href: string
+  icon?: string
+  order: number
+}
+
+export type PortalNavGroup = {
+  id: PortalNavGroupId
+  items: PortalNavItem[]
+}
+
+export type BuildPortalNavOptions = {
+  /** Route manifest to inspect (typically `getFrontendRouteManifests()`). */
+  routes: readonly FrontendRouteManifestEntry[]
+  /** Current customer org slug — substituted into `[orgSlug]` patterns. */
+  orgSlug: string
+  /** Feature strings granted to the current customer (may include wildcards). */
+  grantedFeatures: readonly string[]
+  /** If true, bypass feature checks (portal admin). Defaults to false. */
+  isPortalAdmin?: boolean
+}
+
+function isPortalPattern(pattern: string | undefined): pattern is string {
+  if (!pattern) return false
+  return pattern.startsWith('/[orgSlug]/portal/') || pattern === '/[orgSlug]/portal'
+}
+
+function hasNoUnresolvedParams(href: string): boolean {
+  return !href.includes('[')
+}
+
+function resolveHref(pattern: string, orgSlug: string): string {
+  return pattern.replace('[orgSlug]', orgSlug)
+}
+
+function pickGroup(group: unknown): PortalNavGroupId {
+  if (group === 'main' || group === 'account') return group
+  return 'main'
+}
+
+/**
+ * Build the portal sidebar from the frontend route manifest.
+ *
+ * Mirrors `buildAdminNav()` for the portal surface: selects routes under
+ * `/[orgSlug]/portal/*` that declare a `nav` block, applies
+ * `requireCustomerFeatures` against the caller's grants (wildcards honored),
+ * and returns ordered sidebar groups.
+ *
+ * Absence of `nav` on a metadata file means the page is routable but not
+ * auto-listed — useful for detail/create pages.
+ */
+export function buildPortalNav({
+  routes,
+  orgSlug,
+  grantedFeatures,
+  isPortalAdmin = false,
+}: BuildPortalNavOptions): PortalNavGroup[] {
+  const mainItems: PortalNavItem[] = []
+  const accountItems: PortalNavItem[] = []
+
+  for (const route of routes) {
+    const pattern = route.pattern ?? route.path
+    if (!isPortalPattern(pattern)) continue
+    if (route.navHidden) continue
+    const nav = route.nav
+    if (!nav || typeof nav.label !== 'string' || nav.label.length === 0) continue
+
+    const requireFeatures = route.requireCustomerFeatures ?? []
+    if (!isPortalAdmin && requireFeatures.length) {
+      if (!hasAllFeatures(grantedFeatures as string[], requireFeatures as string[])) continue
+    }
+
+    const href = resolveHref(pattern as string, orgSlug)
+    if (!hasNoUnresolvedParams(href)) continue
+
+    const group = pickGroup(nav.group)
+    const item: PortalNavItem = {
+      id: `portal-nav:${pattern}`,
+      label: nav.label,
+      labelKey: nav.labelKey,
+      href,
+      icon: nav.icon,
+      order: typeof nav.order === 'number' ? nav.order : 100,
+    }
+    if (group === 'account') accountItems.push(item)
+    else mainItems.push(item)
+  }
+
+  const sortItems = (items: PortalNavItem[]) =>
+    items.sort((a, b) => {
+      if (a.order !== b.order) return a.order - b.order
+      return a.label.localeCompare(b.label)
+    })
+
+  sortItems(mainItems)
+  sortItems(accountItems)
+
+  const groups: PortalNavGroup[] = []
+  if (mainItems.length) groups.push({ id: 'main', items: mainItems })
+  if (accountItems.length) groups.push({ id: 'account', items: accountItems })
+  return groups
+}
+
+/**
+ * Merge sidebar groups from the portal nav endpoint with items contributed via
+ * `usePortalInjectedMenuItems`. Auto-discovered entries take precedence —
+ * injected items with matching `id` or `href` are dropped as duplicates.
+ */
+export function mergePortalSidebarGroupsWithInjected<TInjected extends { id: string; href?: string }>(
+  discovered: readonly PortalNavGroup[],
+  injected: {
+    main: readonly TInjected[]
+    account: readonly TInjected[]
+  },
+): {
+  main: Array<PortalNavItem | TInjected>
+  account: Array<PortalNavItem | TInjected>
+} {
+  const mergeGroup = <T extends PortalNavItem | TInjected>(
+    base: readonly PortalNavItem[],
+    extra: readonly TInjected[],
+  ): Array<PortalNavItem | TInjected> => {
+    const knownIds = new Set(base.map((item) => item.id))
+    const knownHrefs = new Set(base.map((item) => item.href).filter((href): href is string => Boolean(href)))
+    const merged: Array<PortalNavItem | TInjected> = [...base]
+    for (const item of extra) {
+      if (knownIds.has(item.id)) continue
+      if (item.href && knownHrefs.has(item.href)) continue
+      merged.push(item)
+      knownIds.add(item.id)
+      if (item.href) knownHrefs.add(item.href)
+    }
+    return merged
+  }
+
+  const mainBase = discovered.find((g) => g.id === 'main')?.items ?? []
+  const accountBase = discovered.find((g) => g.id === 'account')?.items ?? []
+  return {
+    main: mergeGroup(mainBase, injected.main),
+    account: mergeGroup(accountBase, injected.account),
+  }
+}