@open-mercato/ui 0.6.7-develop.6773.1.f9b7fbae4f → 0.6.7-develop.6775.1.c2313bb8a3

package/dist/backend/perspectiveState.js

@@ -0,0 +1,34 @@
+const PERSPECTIVE_COOKIE_PREFIX = "om_table_perspective";
+const PERSPECTIVE_STORAGE_PREFIX = "om_table_perspective_snapshot";
+function clearAllPerspectiveState() {
+  if (typeof window !== "undefined") {
+    try {
+      const storage = window.localStorage;
+      const staleKeys = [];
+      for (let index = 0; index < storage.length; index += 1) {
+        const key = storage.key(index);
+        if (key && key.startsWith(`${PERSPECTIVE_STORAGE_PREFIX}:`)) staleKeys.push(key);
+      }
+      for (const key of staleKeys) storage.removeItem(key);
+    } catch {
+    }
+  }
+  if (typeof document !== "undefined") {
+    try {
+      const cookies = document.cookie ? document.cookie.split(";") : [];
+      for (const cookie of cookies) {
+        const name = cookie.split("=")[0]?.trim();
+        if (name && name.startsWith(`${PERSPECTIVE_COOKIE_PREFIX}:`)) {
+          document.cookie = `${name}=; Path=/; Max-Age=0; SameSite=Lax`;
+        }
+      }
+    } catch {
+    }
+  }
+}
+export {
+  PERSPECTIVE_COOKIE_PREFIX,
+  PERSPECTIVE_STORAGE_PREFIX,
+  clearAllPerspectiveState
+};
+//# sourceMappingURL=perspectiveState.js.map

package/dist/backend/perspectiveState.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/backend/perspectiveState.ts"],
+  "sourcesContent": ["export const PERSPECTIVE_COOKIE_PREFIX = 'om_table_perspective'\nexport const PERSPECTIVE_STORAGE_PREFIX = 'om_table_perspective_snapshot'\n\n/**\n * Purge every browser-local DataTable perspective snapshot and active-view cookie\n * across all tables in this origin. Snapshots persist the unsaved/live table state\n * (column widths, order, visibility) keyed only by `tableId`, so they are shared by\n * every account that signs in on the same browser profile. Call this at the auth\n * identity boundary so one user's unsaved layout never carries over to a different\n * user \u2014 including a different tenant \u2014 reusing the same browser tab (#4185).\n *\n * Lives here rather than in DataTable so the backend shell can call it without\n * pulling the whole table implementation into the bundle of every backend page.\n * `@open-mercato/ui/backend/DataTable` re-exports it, which is the published\n * import path and must stay stable.\n */\nexport function clearAllPerspectiveState(): void {\n  if (typeof window !== 'undefined') {\n    try {\n      const storage = window.localStorage\n      const staleKeys: string[] = []\n      for (let index = 0; index < storage.length; index += 1) {\n        const key = storage.key(index)\n        if (key && key.startsWith(`${PERSPECTIVE_STORAGE_PREFIX}:`)) staleKeys.push(key)\n      }\n      for (const key of staleKeys) storage.removeItem(key)\n    } catch {\n      // private mode / quota errors are non-fatal\n    }\n  }\n  if (typeof document !== 'undefined') {\n    try {\n      const cookies = document.cookie ? document.cookie.split(';') : []\n      for (const cookie of cookies) {\n        const name = cookie.split('=')[0]?.trim()\n        if (name && name.startsWith(`${PERSPECTIVE_COOKIE_PREFIX}:`)) {\n          document.cookie = `${name}=; Path=/; Max-Age=0; SameSite=Lax`\n        }\n      }\n    } catch {\n      // ignore \u2014 cookie access can throw in sandboxed contexts\n    }\n  }\n}\n"],
+  "mappings": "AAAO,MAAM,4BAA4B;AAClC,MAAM,6BAA6B;AAenC,SAAS,2BAAiC;AAC/C,MAAI,OAAO,WAAW,aAAa;AACjC,QAAI;AACF,YAAM,UAAU,OAAO;AACvB,YAAM,YAAsB,CAAC;AAC7B,eAAS,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AACtD,cAAM,MAAM,QAAQ,IAAI,KAAK;AAC7B,YAAI,OAAO,IAAI,WAAW,GAAG,0BAA0B,GAAG,EAAG,WAAU,KAAK,GAAG;AAAA,MACjF;AACA,iBAAW,OAAO,UAAW,SAAQ,WAAW,GAAG;AAAA,IACrD,QAAQ;AAAA,IAER;AAAA,EACF;AACA,MAAI,OAAO,aAAa,aAAa;AACnC,QAAI;AACF,YAAM,UAAU,SAAS,SAAS,SAAS,OAAO,MAAM,GAAG,IAAI,CAAC;AAChE,iBAAW,UAAU,SAAS;AAC5B,cAAM,OAAO,OAAO,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK;AACxC,YAAI,QAAQ,KAAK,WAAW,GAAG,yBAAyB,GAAG,GAAG;AAC5D,mBAAS,SAAS,GAAG,IAAI;AAAA,QAC3B;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACF;",
+  "names": []
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/ui",
-  "version": "0.6.7-develop.6773.1.f9b7fbae4f",
+  "version": "0.6.7-develop.6775.1.c2313bb8a3",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -155,13 +155,13 @@
     "remark-gfm": "^4.0.1"
   },
   "peerDependencies": {
-    "@open-mercato/shared": "0.6.7-develop.6773.1.f9b7fbae4f",
+    "@open-mercato/shared": "0.6.7-develop.6775.1.c2313bb8a3",
     "react": ">=18.0.0",
     "react-dom": ">=18.0.0",
     "react-is": ">=18.0.0"
   },
   "devDependencies": {
-    "@open-mercato/shared": "0.6.7-develop.6773.1.f9b7fbae4f",
+    "@open-mercato/shared": "0.6.7-develop.6775.1.c2313bb8a3",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.1",

package/src/backend/AuthSessionGuard.tsx

@@ -1,9 +1,37 @@
 'use client'
 import * as React from 'react'
 import { apiCall } from './utils/apiCall'
+import { clearAllPerspectiveState } from './perspectiveState'
 
 export const AUTH_IDENTITY_STORAGE_KEY = 'om:auth:identity'
 export const AUTH_IDENTITY_BROADCAST_CHANNEL = 'om-auth-identity'
+export const AUTH_IDENTITY_USER_STORAGE_KEY = 'om:auth:identity:user'
+
+/**
+ * Purge browser-local DataTable perspective state whenever the backend renders for a
+ * different user than the one it last rendered for (#4185).
+ *
+ * The login form also purges on submit, but that only fires when its client handler
+ * runs: a form submitted before hydration, an SSO/magic-link return, or any other
+ * entry point into the backend bypasses it entirely and the previous account's unsaved
+ * column widths carry over. Anchoring the purge to the observed server identity covers
+ * every route into the backend instead of one form.
+ *
+ * Missing identity metadata is treated as a legacy browser state and purged once:
+ * snapshots may predate this marker and belong to a different account. After the
+ * marker is recorded, an account's own unsaved widths survive a plain reload.
+ */
+function purgePerspectiveStateOnIdentityChange(serverUserId: string | null): void {
+  if (typeof window === 'undefined' || !serverUserId) return
+  try {
+    const lastSeenUserId = window.localStorage.getItem(AUTH_IDENTITY_USER_STORAGE_KEY)
+    if (lastSeenUserId === serverUserId) return
+    clearAllPerspectiveState()
+    window.localStorage.setItem(AUTH_IDENTITY_USER_STORAGE_KEY, serverUserId)
+  } catch {
+    // private mode / quota errors are non-fatal
+  }
+}
 
 type FeatureCheckResponse = {
   ok: boolean
@@ -24,6 +52,7 @@ export const __reload = {
 export function AuthSessionGuard({ serverUserId }: AuthSessionGuardProps) {
   React.useEffect(() => {
     if (typeof window === 'undefined') return
+    purgePerspectiveStateOnIdentityChange(serverUserId)
     let cancelled = false
     let reloadScheduled = false
 

package/src/backend/DataTable.tsx

@@ -95,6 +95,11 @@ import {
 } from '@dnd-kit/sortable'
 import { CSS } from '@dnd-kit/utilities'
 import { createLogger } from '@open-mercato/shared/lib/logger'
+import { clearAllPerspectiveState, PERSPECTIVE_COOKIE_PREFIX, PERSPECTIVE_STORAGE_PREFIX } from './perspectiveState'
+
+// Re-exported so `@open-mercato/ui/backend/DataTable` stays the published import
+// path for the purge (BACKWARD_COMPATIBILITY: import paths are a contract surface).
+export { clearAllPerspectiveState }
 
 const logger = createLogger('ui').child({ component: 'DataTable' })
 
@@ -470,8 +475,6 @@ function resolveExportSections(config: DataTableExportConfig | null | undefined)
   return sections
 }
 
-const PERSPECTIVE_COOKIE_PREFIX = 'om_table_perspective'
-const PERSPECTIVE_STORAGE_PREFIX = 'om_table_perspective_snapshot'
 
 // Bounds for user-driven column resizing (#1835). Widths outside this range are
 // clamped so a persisted/dragged value can never collapse a column to nothing or
@@ -552,43 +555,6 @@ export function writePerspectiveSnapshot(tableId: string, snapshot: PerspectiveS
   writeVersionedPreference(key, PERSPECTIVE_SNAPSHOT_VERSION, snapshot)
 }
 
-/**
- * Purge every browser-local DataTable perspective snapshot and active-view cookie
- * across all tables in this origin. Snapshots persist the unsaved/live table state
- * (column widths, order, visibility) keyed only by `tableId`, so they are shared by
- * every account that signs in on the same browser profile. Call this at the auth
- * identity boundary (login) so one user's unsaved layout never carries over to a
- * different user — including a different tenant — reusing the same browser tab (#4185).
- */
-export function clearAllPerspectiveState(): void {
-  if (typeof window !== 'undefined') {
-    try {
-      const storage = window.localStorage
-      const staleKeys: string[] = []
-      for (let index = 0; index < storage.length; index += 1) {
-        const key = storage.key(index)
-        if (key && key.startsWith(`${PERSPECTIVE_STORAGE_PREFIX}:`)) staleKeys.push(key)
-      }
-      for (const key of staleKeys) storage.removeItem(key)
-    } catch {
-      // private mode / quota errors are non-fatal
-    }
-  }
-  if (typeof document !== 'undefined') {
-    try {
-      const cookies = document.cookie ? document.cookie.split(';') : []
-      for (const cookie of cookies) {
-        const name = cookie.split('=')[0]?.trim()
-        if (name && name.startsWith(`${PERSPECTIVE_COOKIE_PREFIX}:`)) {
-          document.cookie = `${name}=; Path=/; Max-Age=0; SameSite=Lax`
-        }
-      }
-    } catch {
-      // ignore — cookie access can throw in sandboxed contexts
-    }
-  }
-}
-
 export function sanitizePerspectiveSettings(source?: PerspectiveSettings | null): PerspectiveSettings | null {
   if (!source || typeof source !== 'object') return null
   const forbidden = new Set(['__proto__', 'prototype', 'constructor'])

package/src/backend/__tests__/AuthSessionGuard.test.tsx

@@ -8,6 +8,7 @@ import { apiCall } from '@open-mercato/ui/backend/utils/apiCall'
 import {
   __reload,
   AUTH_IDENTITY_STORAGE_KEY,
+  AUTH_IDENTITY_USER_STORAGE_KEY,
   AuthSessionGuard,
   notifyAuthIdentityChange,
 } from '../AuthSessionGuard'
@@ -148,3 +149,54 @@ describe('notifyAuthIdentityChange', () => {
     setItemSpy.mockRestore()
   })
 })
+
+describe('perspective purge at the rendered identity boundary (#4185)', () => {
+  const snapshotKey = 'om_table_perspective_snapshot:customers-companies'
+
+  beforeEach(() => {
+    window.localStorage.clear()
+    apiCallMock.mockResolvedValue({ ok: true, status: 200, result: { ok: true } } as never)
+  })
+
+  afterEach(() => {
+    window.localStorage.clear()
+  })
+
+  it('purges legacy table state when no previous identity marker exists', () => {
+    window.localStorage.setItem(snapshotKey, '{"columnWidths":{"name":240}}')
+
+    render(<AuthSessionGuard serverUserId="user-1" />)
+
+    expect(window.localStorage.getItem(snapshotKey)).toBeNull()
+    expect(window.localStorage.getItem(AUTH_IDENTITY_USER_STORAGE_KEY)).toBe('user-1')
+  })
+
+  it('keeps a returning user\'s unsaved widths across a reload', () => {
+    window.localStorage.setItem(AUTH_IDENTITY_USER_STORAGE_KEY, 'user-1')
+    window.localStorage.setItem(snapshotKey, '{"columnWidths":{"name":240}}')
+
+    render(<AuthSessionGuard serverUserId="user-1" />)
+
+    expect(window.localStorage.getItem(snapshotKey)).toBe('{"columnWidths":{"name":240}}')
+  })
+
+  it('purges perspective state when the backend renders for a different user', () => {
+    window.localStorage.setItem(AUTH_IDENTITY_USER_STORAGE_KEY, 'user-1')
+    window.localStorage.setItem(snapshotKey, '{"columnWidths":{"name":240}}')
+
+    render(<AuthSessionGuard serverUserId="user-2" />)
+
+    expect(window.localStorage.getItem(snapshotKey)).toBeNull()
+    expect(window.localStorage.getItem(AUTH_IDENTITY_USER_STORAGE_KEY)).toBe('user-2')
+  })
+
+  it('does nothing when the shell renders without an authenticated user', () => {
+    window.localStorage.setItem(AUTH_IDENTITY_USER_STORAGE_KEY, 'user-1')
+    window.localStorage.setItem(snapshotKey, '{"columnWidths":{"name":240}}')
+
+    render(<AuthSessionGuard serverUserId={null} />)
+
+    expect(window.localStorage.getItem(snapshotKey)).toBe('{"columnWidths":{"name":240}}')
+    expect(window.localStorage.getItem(AUTH_IDENTITY_USER_STORAGE_KEY)).toBe('user-1')
+  })
+})

package/src/backend/perspectiveState.ts

@@ -0,0 +1,44 @@
+export const PERSPECTIVE_COOKIE_PREFIX = 'om_table_perspective'
+export const PERSPECTIVE_STORAGE_PREFIX = 'om_table_perspective_snapshot'
+
+/**
+ * Purge every browser-local DataTable perspective snapshot and active-view cookie
+ * across all tables in this origin. Snapshots persist the unsaved/live table state
+ * (column widths, order, visibility) keyed only by `tableId`, so they are shared by
+ * every account that signs in on the same browser profile. Call this at the auth
+ * identity boundary so one user's unsaved layout never carries over to a different
+ * user — including a different tenant — reusing the same browser tab (#4185).
+ *
+ * Lives here rather than in DataTable so the backend shell can call it without
+ * pulling the whole table implementation into the bundle of every backend page.
+ * `@open-mercato/ui/backend/DataTable` re-exports it, which is the published
+ * import path and must stay stable.
+ */
+export function clearAllPerspectiveState(): void {
+  if (typeof window !== 'undefined') {
+    try {
+      const storage = window.localStorage
+      const staleKeys: string[] = []
+      for (let index = 0; index < storage.length; index += 1) {
+        const key = storage.key(index)
+        if (key && key.startsWith(`${PERSPECTIVE_STORAGE_PREFIX}:`)) staleKeys.push(key)
+      }
+      for (const key of staleKeys) storage.removeItem(key)
+    } catch {
+      // private mode / quota errors are non-fatal
+    }
+  }
+  if (typeof document !== 'undefined') {
+    try {
+      const cookies = document.cookie ? document.cookie.split(';') : []
+      for (const cookie of cookies) {
+        const name = cookie.split('=')[0]?.trim()
+        if (name && name.startsWith(`${PERSPECTIVE_COOKIE_PREFIX}:`)) {
+          document.cookie = `${name}=; Path=/; Max-Age=0; SameSite=Lax`
+        }
+      }
+    } catch {
+      // ignore — cookie access can throw in sandboxed contexts
+    }
+  }
+}