@open-mercato/ui 0.6.7-develop.6860.1.f796b22e80 → 0.6.7

package/src/backend/utils/api.ts

@@ -47,6 +47,18 @@ export async function withScopedApiHeaders<T>(headers: Record<string, string>, r
   return scopedHeaders.withScopedHeaders(headers, run)
 }
 
+function readPathname(): string {
+  return typeof window !== 'undefined' ? window.location?.pathname ?? '' : ''
+}
+
+function isLoginPathname(pathname: string): boolean {
+  return pathname.startsWith('/login')
+}
+
+function isPortalPathname(pathname: string): boolean {
+  return /\/[^/]+\/portal(\/|$)/.test(pathname)
+}
+
 export class UnauthorizedError extends Error {
   readonly status = 401
   constructor(message = 'Unauthorized') {
@@ -166,10 +178,15 @@ export async function apiFetch(input: RequestInfo | URL, init?: RequestInit): Pr
   const requestHeaders = new Headers(mergedInit?.headers)
   const disableUnauthorizedRedirect = readRedirectOverride(requestHeaders, 'x-om-unauthorized-redirect')
   const disableForbiddenRedirect = readRedirectOverride(requestHeaders, 'x-om-forbidden-redirect')
+  // Snapshot the pathname BEFORE the request is sent. A 401 for a request that
+  // started on the login page must stay silent even when the response lands after
+  // the post-login client-side navigation to /backend — otherwise the stale
+  // pre-auth 401 raises a bogus "Session expired" banner right after signing in.
+  const requestPathname = readPathname()
   const res = await baseFetch(input, mergedInit)
-  const pathname = typeof window !== 'undefined' ? window.location.pathname : ''
-  const onLoginPage = pathname.startsWith('/login')
-  const onPortalRoute = /\/[^/]+\/portal(\/|$)/.test(pathname)
+  const responsePathname = readPathname()
+  const onLoginPage = isLoginPathname(requestPathname) || isLoginPathname(responsePathname)
+  const onPortalRoute = isPortalPathname(requestPathname) || isPortalPathname(responsePathname)
   if (res.status === 401) {
     // Trigger same redirect flow as protected pages
     // Skip for staff login page and all portal routes (portal has its own auth)

package/src/backend/utils/apiCall.ts

@@ -19,27 +19,6 @@ export type ApiCallResult<TReturn> = {
 
 const scopedRequestHeaders = createScopedHeaderStack()
 
-function isAbortError(error: unknown): boolean {
-  return typeof error === 'object'
-    && error !== null
-    && (error as { name?: unknown }).name === 'AbortError'
-}
-
-function createAbortError(): Error {
-  if (typeof DOMException === 'function') {
-    return new DOMException('[internal] The operation was aborted.', 'AbortError')
-  }
-  const error = new Error('[internal] The operation was aborted.')
-  error.name = 'AbortError'
-  return error
-}
-
-function resolveAbortSignal(input: RequestInfo | URL, init?: RequestInit): AbortSignal | null {
-  if (init?.signal) return init.signal
-  if (typeof Request !== 'undefined' && input instanceof Request) return input.signal ?? null
-  return null
-}
-
 function mergeHeaders(base: HeadersInit | undefined, extra: Record<string, string>): HeadersInit {
   if (!base) return extra
   if (typeof Headers !== 'undefined' && base instanceof Headers) {
@@ -84,16 +63,9 @@ export async function apiCall<TReturn = Record<string, unknown>>(
       : response
     if (parser) result = await parser(source)
     else result = await readJsonSafe<TReturn>(source, fallback)
-  } catch (err) {
-    if (isAbortError(err)) throw err
+  } catch {
     result = fallback
   }
-  // `readJsonSafe` swallows the abort that cancels an in-flight body read, so a
-  // request aborted after its response headers arrived would otherwise look like
-  // a successful call that returned an empty payload.
-  if (result == null && resolveAbortSignal(input, init)?.aborted) {
-    throw createAbortError()
-  }
   return {
     ok: response.ok,
     status: response.status,

package/src/backend/utils/customFieldDefs.ts

@@ -39,7 +39,6 @@ export type CustomFieldDefDto = {
   dictionaryId?: string
   dictionaryInlineCreate?: boolean
   defaultValue?: string | number | boolean | null
-  relatedEntityId?: string
 }
 
 export type CustomFieldsetGroupDto = {

package/src/backend/utils/customFieldForms.ts

@@ -9,7 +9,7 @@ import {
   fetchCustomFieldDefinitionsPayload,
 } from './customFieldDefs'
 import { FieldRegistry, loadGeneratedFieldRegistrations } from '../fields/registry'
-import { fetchAllOffsetPages } from './fetchAllPages'
+import { apiCall } from './apiCall'
 import { normalizeCustomFieldOptions } from '@open-mercato/shared/modules/entities/options'
 import { CURRENCY_OPTIONS_URL } from '@open-mercato/shared/modules/entities/kinds'
 
@@ -42,22 +42,18 @@ function buildOptionsUrl(base: string, query?: string): string {
   }
 }
 
+type OptionsResponse = { items?: unknown[] }
+
 async function loadRemoteOptions(url: string): Promise<Array<{ value: string; label: string }>> {
   try {
-    // Options routes bound how many rows one response carries (dictionary
-    // entries at 500), so walk every page instead of reading a single
-    // response — a stored value past the first page must stay selectable and
-    // resolvable to its label. Routes without `hasMore` still resolve in one
-    // request.
-    const pages = await fetchAllOffsetPages(url)
-    if (!pages.ok) return []
-    return pages.items.map((item) => {
-      const record = item && typeof item === 'object' ? (item as Record<string, unknown>) : null
-      return {
-        value: String(record?.value ?? item),
-        label: String(record?.label ?? record?.value ?? item),
-      }
-    })
+    const call = await apiCall<OptionsResponse>(url, undefined, { fallback: { items: [] } })
+    if (!call.ok) return []
+    const payload = call.result ?? { items: [] }
+    const items = Array.isArray(payload?.items) ? payload.items : []
+    return items.map((it: any) => ({
+      value: String(it?.value ?? it),
+      label: String(it?.label ?? it?.value ?? it),
+    }))
   } catch {
     return []
   }

package/src/backend/utils/nav.ts

@@ -100,26 +100,6 @@ export type SettingsSectionItem = {
   children?: SettingsSectionItem[]
 }
 
-/**
- * Slug of a rendered group label, used as the pre-#4843 settings section id.
- *
- * `sectionOrder` used to be keyed by these slugs, which made ordering depend on the active locale.
- * Kept only as a lookup fallback so third-party callers passing a legacy map keep their weights.
- *
- * @deprecated Key `sectionOrder` by the untranslated group id (`AdminNavItem.groupId`) instead.
- */
-function legacySettingsSectionSlug(groupLabel: string): string {
-  return groupLabel.toLowerCase().replace(/\s+/g, '-').replace(/[^a-z0-9-]/g, '')
-}
-
-/**
- * Groups the settings-context nav entries into ordered sections.
- *
- * `sectionOrder` is keyed by the untranslated group id (`AdminNavItem.groupId`, i.e. the page's
- * `pageGroupKey` when it declares one) — the same convention the main sidebar's `defaultGroupOrder`
- * follows. Keying off the rendered label instead made every non-English deployment miss its weights
- * and fall back to the catch-all bucket (#4843).
- */
 export function buildSettingsSections(
   entries: AdminNavItem[],
   sectionOrder: Record<string, number>
@@ -143,8 +123,8 @@ export function buildSettingsSections(
   }
 
   for (const item of settingsItems) {
-    const sectionId = item.groupId
-    const order = sectionOrder[sectionId] ?? sectionOrder[legacySettingsSectionSlug(item.group)] ?? 999
+    const sectionId = item.group.toLowerCase().replace(/\s+/g, '-').replace(/[^a-z0-9-]/g, '')
+    const order = sectionOrder[sectionId] ?? 999
 
     if (!sectionMap.has(sectionId)) {
       sectionMap.set(sectionId, {

package/src/frontend/LanguageSwitcher.tsx

@@ -24,7 +24,6 @@ export function LanguageSwitcher() {
     pl: t('common.languages.polish', 'Polski'),
     es: t('common.languages.spanish', 'Español'),
     de: t('common.languages.german', 'Deutsch'),
-    ko: t('common.languages.korean', '한국어'),
   }
 
   async function setLocale(locale: Locale) {

package/src/portal/PortalContext.tsx

@@ -91,7 +91,7 @@ export function PortalProvider({ orgSlug, children, initialAuth, initialTenant }
         },
         roles: [],
         resolvedFeatures: initialAuth.resolvedFeatures,
-        isPortalAdmin: initialAuth.isPortalAdmin === true,
+        isPortalAdmin: initialAuth.resolvedFeatures.some((f) => f === 'portal.*'),
         loading: false,
         error: null,
       }

package/src/portal/hooks/usePortalEventBridge.ts

@@ -3,7 +3,6 @@ import { useEffect, useRef } from 'react'
 import type { AppEventPayload } from '@open-mercato/shared/modules/widgets/injection'
 import { PORTAL_EVENT_DOM_NAME } from './usePortalAppEvent'
 import { createLogger } from '@open-mercato/shared/lib/logger'
-import { publishPortalBridgeHealth } from './portalBridgeStatus'
 
 const logger = createLogger('ui').child({ component: 'PortalEventBridge' })
 
@@ -63,7 +62,6 @@ export function usePortalEventBridge(): void {
       if (heartbeatTimer.current) clearTimeout(heartbeatTimer.current)
       heartbeatTimer.current = setTimeout(() => {
         logger.warn('Heartbeat timeout — reconnecting')
-        publishPortalBridgeHealth(false)
         disconnect()
         scheduleReconnect()
       }, HEARTBEAT_TIMEOUT)
@@ -82,7 +80,6 @@ export function usePortalEventBridge(): void {
           hasEverConnected.current = true
           reconnectPending.current = false
           reconnectAttempts.current = 0
-          publishPortalBridgeHealth(true)
           resetHeartbeatTimer()
           if (shouldEmitReconnect) {
             window.dispatchEvent(
@@ -119,7 +116,6 @@ export function usePortalEventBridge(): void {
           if (hasEverConnected.current) {
             reconnectPending.current = true
           }
-          publishPortalBridgeHealth(false)
           disconnect()
           if (mounted) scheduleReconnect()
         }
@@ -127,7 +123,6 @@ export function usePortalEventBridge(): void {
         if (hasEverConnected.current) {
           reconnectPending.current = true
         }
-        publishPortalBridgeHealth(false)
         if (mounted) scheduleReconnect()
       }
     }
@@ -160,7 +155,6 @@ export function usePortalEventBridge(): void {
 
     return () => {
       mounted = false
-      publishPortalBridgeHealth(false)
       disconnect()
       if (reconnectTimer.current) {
         clearTimeout(reconnectTimer.current)

package/src/portal/hooks/usePortalNotifications.ts

@@ -2,11 +2,6 @@
 import * as React from 'react'
 import type { NotificationDto } from '@open-mercato/shared/modules/notifications/types'
 import { apiCall } from '../../backend/utils/apiCall'
-import {
-  PORTAL_BRIDGE_STATUS_DOM_NAME,
-  readPortalBridgeHealth,
-  type PortalBridgeStatusDetail,
-} from './portalBridgeStatus'
 
 export type UsePortalNotificationsResult = {
   notifications: NotificationDto[]
@@ -33,11 +28,13 @@ async function fetchJson<T>(url: string, init?: RequestInit): Promise<T | null>
 }
 
 /**
- * Portal notification hook with SSE-first delivery and polling fallback.
+ * Portal notification hook — polls customer notification endpoints.
  *
- * Performs an initial list/count reconciliation, refreshes on notification,
- * reconnect, and focus events, and polls every 8 seconds until the portal
- * event bridge explicitly reports a healthy connection.
+ * Fetches notifications from `/api/customer_accounts/portal/notifications`
+ * and unread count from `.../unread-count`. Polls every 8 seconds.
+ *
+ * Also listens for portal SSE events (`notifications.notification.created`)
+ * to trigger immediate refresh.
  */
 export function usePortalNotifications(): UsePortalNotificationsResult {
   const [notifications, setNotifications] = React.useState<NotificationDto[]>([])
@@ -69,50 +66,18 @@ export function usePortalNotifications(): UsePortalNotificationsResult {
     setIsLoading(false)
   }, [])
 
-  const [usePolling, setUsePolling] = React.useState(() => {
-    if (typeof window === 'undefined' || !('EventSource' in window)) {
-      return true
-    }
-    return readPortalBridgeHealth() !== true
-  })
-
-  React.useEffect(() => {
-    if (typeof window === 'undefined' || !('EventSource' in window)) {
-      return
-    }
-    const handleStatusChange = (event: Event) => {
-      const detail = (event as CustomEvent<PortalBridgeStatusDetail>).detail
-      if (detail && typeof detail.healthy === 'boolean') {
-        setUsePolling(!detail.healthy)
-        if (!detail.healthy) {
-          fetchAll()
-        }
-      }
-    }
-    window.addEventListener(PORTAL_BRIDGE_STATUS_DOM_NAME, handleStatusChange)
-    return () => {
-      window.removeEventListener(PORTAL_BRIDGE_STATUS_DOM_NAME, handleStatusChange)
-    }
-  }, [fetchAll])
-
+  // Poll
   React.useEffect(() => {
     fetchAll()
-  }, [fetchAll])
-
-  React.useEffect(() => {
-    if (!usePolling) return
     const interval = setInterval(fetchAll, POLL_INTERVAL)
     return () => clearInterval(interval)
-  }, [fetchAll, usePolling])
+  }, [fetchAll])
 
+  // Listen for portal SSE notification events
   React.useEffect(() => {
-    const handler = (event: Event) => {
-      const detail = (event as CustomEvent<{ id?: string }>).detail
-      if (
-        detail?.id === 'notifications.notification.created' ||
-        detail?.id === 'notifications.notification.batch_created' ||
-        detail?.id === 'om:portal-bridge:reconnected'
-      ) {
+    const handler = (e: Event) => {
+      const detail = (e as CustomEvent).detail
+      if (detail?.id === 'notifications.notification.created' || detail?.id === 'notifications.notification.batch_created') {
         fetchAll()
       }
     }
@@ -120,14 +85,6 @@ export function usePortalNotifications(): UsePortalNotificationsResult {
     return () => window.removeEventListener('om:portal-event', handler)
   }, [fetchAll])
 
-  React.useEffect(() => {
-    const onFocus = () => {
-      fetchAll()
-    }
-    window.addEventListener('focus', onFocus)
-    return () => window.removeEventListener('focus', onFocus)
-  }, [fetchAll])
-
   const markAsRead = React.useCallback(async (id: string) => {
     await fetchJson(`${BASE}/${id}/read`, { method: 'PUT' })
     setNotifications((prev) =>

package/src/portal/utils/__tests__/nav.test.ts

@@ -97,7 +97,7 @@ describe('buildPortalNav', () => {
     expect(groups).toEqual([{ id: 'main', items: [expect.objectContaining({ label: 'Orders' })] }])
   })
 
-  it('does not let the deprecated portal-admin flag bypass effective features', () => {
+  it('bypasses feature checks when isPortalAdmin is true', () => {
     const routes: FrontendRouteManifestEntry[] = [
       makeRoute({
         pattern: '/[orgSlug]/portal/orders',
@@ -107,7 +107,7 @@ describe('buildPortalNav', () => {
     ]
 
     const groups = buildPortalNav({ routes, orgSlug: 'my-org', grantedFeatures: [], isPortalAdmin: true })
-    expect(groups).toEqual([])
+    expect(groups[0].items[0].label).toBe('Orders')
   })
 
   it('ignores navHidden pages even when nav is declared', () => {

package/src/portal/utils/nav.ts

@@ -22,9 +22,9 @@ export type BuildPortalNavOptions = {
   routes: readonly FrontendRouteManifestEntry[]
   /** Current customer org slug — substituted into `[orgSlug]` patterns. */
   orgSlug: string
-  /** Concrete effective features granted to the current customer. */
+  /** Feature strings granted to the current customer (may include wildcards). */
   grantedFeatures: readonly string[]
-  /** @deprecated Portal admins must receive concrete effective features. */
+  /** If true, bypass feature checks (portal admin). Defaults to false. */
   isPortalAdmin?: boolean
 }
 
@@ -75,6 +75,7 @@ export function buildPortalNav({
   routes,
   orgSlug,
   grantedFeatures,
+  isPortalAdmin = false,
 }: BuildPortalNavOptions): PortalNavGroup[] {
   const mainItems: PortalNavItem[] = []
   const accountItems: PortalNavItem[] = []
@@ -95,7 +96,7 @@ export function buildPortalNav({
     const nav = route.nav!
 
     const requireFeatures = route.requireCustomerFeatures ?? []
-    if (requireFeatures.length) {
+    if (!isPortalAdmin && requireFeatures.length) {
       if (!hasAllFeatures(grantedFeatures as string[], requireFeatures as string[])) continue
     }
 

package/src/primitives/button.tsx

@@ -9,20 +9,14 @@ const buttonVariants = cva(
     variants: {
       variant: {
         default: 'bg-primary text-primary-foreground shadow-xs hover:bg-primary-hover',
-        /* Destructive is quiet by design: red text on a calm surface. A wall
-           of solid red buttons trains users to ignore red. The filled form is
-           `destructive-solid`, reserved for the single point-of-no-return
-           confirmation inside a dialog — never for the button that opens it. */
         destructive:
-          'border border-destructive bg-background text-destructive shadow-xs hover:bg-destructive/10 aria-invalid:ring-destructive dark:aria-invalid:ring-destructive',
-        'destructive-solid':
-          'bg-destructive text-white shadow-xs hover:bg-destructive/90 aria-invalid:ring-destructive dark:aria-invalid:ring-destructive',
+          'bg-destructive text-white shadow-xs hover:bg-destructive/90 aria-invalid:ring-destructive dark:aria-invalid:ring-destructive dark:bg-destructive/10',
         'destructive-outline':
-          'border border-destructive bg-background text-destructive shadow-xs hover:bg-destructive/10',
+          'border border-destructive/30 bg-background text-destructive shadow-xs hover:bg-destructive/10 dark:border-destructive/40 dark:hover:bg-destructive/15',
         'destructive-soft':
-          'bg-destructive/10 text-destructive hover:bg-destructive/15',
+          'bg-destructive/10 text-destructive hover:bg-destructive/15 dark:bg-destructive/15 dark:hover:bg-destructive/20',
         'destructive-ghost':
-          'text-destructive hover:bg-destructive/10',
+          'text-destructive hover:bg-destructive/10 dark:hover:bg-destructive/15',
         outline:
           'border bg-background shadow-xs hover:bg-accent hover:text-accent-foreground dark:bg-input/30 dark:border-input dark:hover:bg-input/50',
         secondary: 'bg-secondary text-secondary-foreground shadow-xs hover:bg-secondary/80',

package/dist/backend/icons/lucideRegistryRuntime.js

@@ -1,28 +0,0 @@
-import { jsx } from "react/jsx-runtime";
-import { LUCIDE_ICON_REGISTRY } from "./lucideRegistry.generated.js";
-function normalizeKebabIconName(input) {
-  const trimmed = input.trim();
-  if (!trimmed) return "";
-  const withoutPrefix = trimmed.startsWith("lucide:") ? trimmed.slice("lucide:".length) : trimmed;
-  if (!withoutPrefix) return "";
-  if (!withoutPrefix.includes("-") && !withoutPrefix.includes("_") && !withoutPrefix.includes(" ") && /[A-Z]/.test(withoutPrefix)) {
-    return withoutPrefix.replace(/([a-z0-9])([A-Z])/g, "$1-$2").replace(/([A-Z])([A-Z][a-z])/g, "$1-$2").toLowerCase();
-  }
-  return withoutPrefix.replace(/[_\s]+/g, "-").replace(/-+/g, "-").toLowerCase();
-}
-function resolveRegisteredLucideIcon(name) {
-  if (!name) return null;
-  const normalized = normalizeKebabIconName(name);
-  if (!normalized) return null;
-  return LUCIDE_ICON_REGISTRY[normalized] ?? null;
-}
-function resolveRegisteredLucideIconNode(name, className) {
-  const Icon = resolveRegisteredLucideIcon(name);
-  if (!Icon) return null;
-  return /* @__PURE__ */ jsx(Icon, { className });
-}
-export {
-  resolveRegisteredLucideIcon,
-  resolveRegisteredLucideIconNode
-};
-//# sourceMappingURL=lucideRegistryRuntime.js.map

package/dist/backend/icons/lucideRegistryRuntime.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/backend/icons/lucideRegistryRuntime.tsx"],
-  "sourcesContent": ["import type * as React from 'react'\nimport type { LucideIcon } from 'lucide-react'\nimport { LUCIDE_ICON_REGISTRY } from './lucideRegistry.generated'\n\nfunction normalizeKebabIconName(input: string): string {\n  const trimmed = input.trim()\n  if (!trimmed) return ''\n  const withoutPrefix = trimmed.startsWith('lucide:') ? trimmed.slice('lucide:'.length) : trimmed\n  if (!withoutPrefix) return ''\n  if (!withoutPrefix.includes('-') && !withoutPrefix.includes('_') && !withoutPrefix.includes(' ') && /[A-Z]/.test(withoutPrefix)) {\n    return withoutPrefix\n      .replace(/([a-z0-9])([A-Z])/g, '$1-$2')\n      .replace(/([A-Z])([A-Z][a-z])/g, '$1-$2')\n      .toLowerCase()\n  }\n  return withoutPrefix\n    .replace(/[_\\s]+/g, '-')\n    .replace(/-+/g, '-')\n    .toLowerCase()\n}\n\nexport function resolveRegisteredLucideIcon(name: string | undefined): LucideIcon | null {\n  if (!name) return null\n  const normalized = normalizeKebabIconName(name)\n  if (!normalized) return null\n  return (LUCIDE_ICON_REGISTRY as Record<string, LucideIcon | undefined>)[normalized] ?? null\n}\n\nexport function resolveRegisteredLucideIconNode(\n  name: string | undefined,\n  className: string\n): React.ReactNode | null {\n  const Icon = resolveRegisteredLucideIcon(name)\n  if (!Icon) return null\n  return <Icon className={className} />\n}\n"],
-  "mappings": "AAkCS;AAhCT,SAAS,4BAA4B;AAErC,SAAS,uBAAuB,OAAuB;AACrD,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,gBAAgB,QAAQ,WAAW,SAAS,IAAI,QAAQ,MAAM,UAAU,MAAM,IAAI;AACxF,MAAI,CAAC,cAAe,QAAO;AAC3B,MAAI,CAAC,cAAc,SAAS,GAAG,KAAK,CAAC,cAAc,SAAS,GAAG,KAAK,CAAC,cAAc,SAAS,GAAG,KAAK,QAAQ,KAAK,aAAa,GAAG;AAC/H,WAAO,cACJ,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,wBAAwB,OAAO,EACvC,YAAY;AAAA,EACjB;AACA,SAAO,cACJ,QAAQ,WAAW,GAAG,EACtB,QAAQ,OAAO,GAAG,EAClB,YAAY;AACjB;AAEO,SAAS,4BAA4B,MAA6C;AACvF,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,aAAa,uBAAuB,IAAI;AAC9C,MAAI,CAAC,WAAY,QAAO;AACxB,SAAQ,qBAAgE,UAAU,KAAK;AACzF;AAEO,SAAS,gCACd,MACA,WACwB;AACxB,QAAM,OAAO,4BAA4B,IAAI;AAC7C,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO,oBAAC,QAAK,WAAsB;AACrC;",
-  "names": []
-}

package/dist/backend/perspectiveState.js

@@ -1,34 +0,0 @@
-const PERSPECTIVE_COOKIE_PREFIX = "om_table_perspective";
-const PERSPECTIVE_STORAGE_PREFIX = "om_table_perspective_snapshot";
-function clearAllPerspectiveState() {
-  if (typeof window !== "undefined") {
-    try {
-      const storage = window.localStorage;
-      const staleKeys = [];
-      for (let index = 0; index < storage.length; index += 1) {
-        const key = storage.key(index);
-        if (key && key.startsWith(`${PERSPECTIVE_STORAGE_PREFIX}:`)) staleKeys.push(key);
-      }
-      for (const key of staleKeys) storage.removeItem(key);
-    } catch {
-    }
-  }
-  if (typeof document !== "undefined") {
-    try {
-      const cookies = document.cookie ? document.cookie.split(";") : [];
-      for (const cookie of cookies) {
-        const name = cookie.split("=")[0]?.trim();
-        if (name && name.startsWith(`${PERSPECTIVE_COOKIE_PREFIX}:`)) {
-          document.cookie = `${name}=; Path=/; Max-Age=0; SameSite=Lax`;
-        }
-      }
-    } catch {
-    }
-  }
-}
-export {
-  PERSPECTIVE_COOKIE_PREFIX,
-  PERSPECTIVE_STORAGE_PREFIX,
-  clearAllPerspectiveState
-};
-//# sourceMappingURL=perspectiveState.js.map

package/dist/backend/perspectiveState.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../src/backend/perspectiveState.ts"],
-  "sourcesContent": ["export const PERSPECTIVE_COOKIE_PREFIX = 'om_table_perspective'\nexport const PERSPECTIVE_STORAGE_PREFIX = 'om_table_perspective_snapshot'\n\n/**\n * Purge every browser-local DataTable perspective snapshot and active-view cookie\n * across all tables in this origin. Snapshots persist the unsaved/live table state\n * (column widths, order, visibility) keyed only by `tableId`, so they are shared by\n * every account that signs in on the same browser profile. Call this at the auth\n * identity boundary so one user's unsaved layout never carries over to a different\n * user \u2014 including a different tenant \u2014 reusing the same browser tab (#4185).\n *\n * Lives here rather than in DataTable so the backend shell can call it without\n * pulling the whole table implementation into the bundle of every backend page.\n * `@open-mercato/ui/backend/DataTable` re-exports it, which is the published\n * import path and must stay stable.\n */\nexport function clearAllPerspectiveState(): void {\n  if (typeof window !== 'undefined') {\n    try {\n      const storage = window.localStorage\n      const staleKeys: string[] = []\n      for (let index = 0; index < storage.length; index += 1) {\n        const key = storage.key(index)\n        if (key && key.startsWith(`${PERSPECTIVE_STORAGE_PREFIX}:`)) staleKeys.push(key)\n      }\n      for (const key of staleKeys) storage.removeItem(key)\n    } catch {\n      // private mode / quota errors are non-fatal\n    }\n  }\n  if (typeof document !== 'undefined') {\n    try {\n      const cookies = document.cookie ? document.cookie.split(';') : []\n      for (const cookie of cookies) {\n        const name = cookie.split('=')[0]?.trim()\n        if (name && name.startsWith(`${PERSPECTIVE_COOKIE_PREFIX}:`)) {\n          document.cookie = `${name}=; Path=/; Max-Age=0; SameSite=Lax`\n        }\n      }\n    } catch {\n      // ignore \u2014 cookie access can throw in sandboxed contexts\n    }\n  }\n}\n"],
-  "mappings": "AAAO,MAAM,4BAA4B;AAClC,MAAM,6BAA6B;AAenC,SAAS,2BAAiC;AAC/C,MAAI,OAAO,WAAW,aAAa;AACjC,QAAI;AACF,YAAM,UAAU,OAAO;AACvB,YAAM,YAAsB,CAAC;AAC7B,eAAS,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;AACtD,cAAM,MAAM,QAAQ,IAAI,KAAK;AAC7B,YAAI,OAAO,IAAI,WAAW,GAAG,0BAA0B,GAAG,EAAG,WAAU,KAAK,GAAG;AAAA,MACjF;AACA,iBAAW,OAAO,UAAW,SAAQ,WAAW,GAAG;AAAA,IACrD,QAAQ;AAAA,IAER;AAAA,EACF;AACA,MAAI,OAAO,aAAa,aAAa;AACnC,QAAI;AACF,YAAM,UAAU,SAAS,SAAS,SAAS,OAAO,MAAM,GAAG,IAAI,CAAC;AAChE,iBAAW,UAAU,SAAS;AAC5B,cAAM,OAAO,OAAO,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK;AACxC,YAAI,QAAQ,KAAK,WAAW,GAAG,yBAAyB,GAAG,GAAG;AAC5D,mBAAS,SAAS,GAAG,IAAI;AAAA,QAC3B;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACF;",
-  "names": []
-}

package/dist/backend/utils/fetchAllPages.js

@@ -1,57 +0,0 @@
-"use client";
-import { apiCall } from "./apiCall.js";
-const MAX_OFFSET_PAGES = 50;
-const ABSOLUTE_URL_PATTERN = /^([a-z][a-z\d+\-.]*:)?\/\//i;
-function parseUrl(value) {
-  try {
-    const absolute = ABSOLUTE_URL_PATTERN.test(value);
-    const origin = typeof window !== "undefined" ? window.location.origin : "http://localhost";
-    return { url: absolute ? new URL(value) : new URL(value, origin), absolute };
-  } catch {
-    return null;
-  }
-}
-function formatUrl(parsed) {
-  return parsed.absolute ? parsed.url.toString() : `${parsed.url.pathname}${parsed.url.search}`;
-}
-function readOffset(value) {
-  const parsed = parseUrl(value);
-  if (!parsed) return 0;
-  const offset = Number.parseInt(parsed.url.searchParams.get("offset") ?? "", 10);
-  return Number.isFinite(offset) && offset > 0 ? offset : 0;
-}
-function withOffset(value, offset) {
-  const parsed = parseUrl(value);
-  if (!parsed) {
-    const separator = value.includes("?") ? "&" : "?";
-    return `${value}${separator}offset=${offset}`;
-  }
-  parsed.url.searchParams.set("offset", String(offset));
-  return formatUrl(parsed);
-}
-async function fetchAllOffsetPages(url, options = {}) {
-  const maxPages = options.maxPages ?? MAX_OFFSET_PAGES;
-  const baseOffset = readOffset(url);
-  const items = [];
-  let firstPayload = {};
-  let pageCount = 0;
-  while (pageCount < maxPages) {
-    const pageUrl = pageCount === 0 ? url : withOffset(url, baseOffset + items.length);
-    const call = await apiCall(pageUrl, void 0, { fallback: {} });
-    const payload = call.result ?? {};
-    if (!call.ok) {
-      return { ok: false, items, pageCount, firstPayload, errorPayload: payload };
-    }
-    pageCount += 1;
-    if (pageCount === 1) firstPayload = payload;
-    const pageItems = Array.isArray(payload.items) ? payload.items : [];
-    items.push(...pageItems);
-    if (payload.hasMore !== true || pageItems.length === 0) break;
-  }
-  return { ok: true, items, pageCount, firstPayload, errorPayload: null };
-}
-export {
-  MAX_OFFSET_PAGES,
-  fetchAllOffsetPages
-};
-//# sourceMappingURL=fetchAllPages.js.map

package/dist/backend/utils/fetchAllPages.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/backend/utils/fetchAllPages.ts"],
-  "sourcesContent": ["\"use client\"\n\nimport { apiCall } from './apiCall'\n\n// Offset-paged list routes cap how many rows one response may carry, so a\n// caller that needs the whole collection has to walk the pages. Bound the walk\n// so a route reporting hasMore forever cannot hang the caller; at the 500-row\n// dictionary ceiling this still covers 25k rows.\nexport const MAX_OFFSET_PAGES = 50\n\nexport type OffsetPagedPayload = Record<string, unknown>\n\nexport type OffsetPagedResult = {\n  ok: boolean\n  items: unknown[]\n  pageCount: number\n  firstPayload: OffsetPagedPayload\n  errorPayload: OffsetPagedPayload | null\n}\n\nconst ABSOLUTE_URL_PATTERN = /^([a-z][a-z\\d+\\-.]*:)?\\/\\//i\n\ntype ParsedUrl = { url: URL; absolute: boolean }\n\nfunction parseUrl(value: string): ParsedUrl | null {\n  try {\n    const absolute = ABSOLUTE_URL_PATTERN.test(value)\n    const origin = typeof window !== 'undefined' ? window.location.origin : 'http://localhost'\n    return { url: absolute ? new URL(value) : new URL(value, origin), absolute }\n  } catch {\n    return null\n  }\n}\n\nfunction formatUrl(parsed: ParsedUrl): string {\n  return parsed.absolute ? parsed.url.toString() : `${parsed.url.pathname}${parsed.url.search}`\n}\n\nfunction readOffset(value: string): number {\n  const parsed = parseUrl(value)\n  if (!parsed) return 0\n  const offset = Number.parseInt(parsed.url.searchParams.get('offset') ?? '', 10)\n  return Number.isFinite(offset) && offset > 0 ? offset : 0\n}\n\nfunction withOffset(value: string, offset: number): string {\n  const parsed = parseUrl(value)\n  if (!parsed) {\n    const separator = value.includes('?') ? '&' : '?'\n    return `${value}${separator}offset=${offset}`\n  }\n  parsed.url.searchParams.set('offset', String(offset))\n  return formatUrl(parsed)\n}\n\n/**\n * Walk every page of an offset-paged list route and return the assembled items.\n *\n * A route that does not report `hasMore` resolves after a single request, so\n * this is a drop-in replacement for a one-shot `apiCall` against any list\n * endpoint. Ordering is preserved as the route returned it, page after page \u2014\n * callers that need a global order across page boundaries must re-sort.\n */\nexport async function fetchAllOffsetPages(\n  url: string,\n  options: { maxPages?: number } = {},\n): Promise<OffsetPagedResult> {\n  const maxPages = options.maxPages ?? MAX_OFFSET_PAGES\n  const baseOffset = readOffset(url)\n  const items: unknown[] = []\n  let firstPayload: OffsetPagedPayload = {}\n  let pageCount = 0\n\n  while (pageCount < maxPages) {\n    // The first request goes out untouched so a route that caches only its\n    // default page still serves that page from cache.\n    const pageUrl = pageCount === 0 ? url : withOffset(url, baseOffset + items.length)\n    const call = await apiCall<OffsetPagedPayload>(pageUrl, undefined, { fallback: {} })\n    const payload = call.result ?? {}\n    if (!call.ok) {\n      return { ok: false, items, pageCount, firstPayload, errorPayload: payload }\n    }\n    pageCount += 1\n    if (pageCount === 1) firstPayload = payload\n    const pageItems = Array.isArray(payload.items) ? payload.items : []\n    items.push(...pageItems)\n    // An empty page also stops the walk: without it a route that keeps\n    // reporting hasMore while returning nothing would spin to the page cap.\n    if (payload.hasMore !== true || pageItems.length === 0) break\n  }\n\n  return { ok: true, items, pageCount, firstPayload, errorPayload: null }\n}\n"],
-  "mappings": ";AAEA,SAAS,eAAe;AAMjB,MAAM,mBAAmB;AAYhC,MAAM,uBAAuB;AAI7B,SAAS,SAAS,OAAiC;AACjD,MAAI;AACF,UAAM,WAAW,qBAAqB,KAAK,KAAK;AAChD,UAAM,SAAS,OAAO,WAAW,cAAc,OAAO,SAAS,SAAS;AACxE,WAAO,EAAE,KAAK,WAAW,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,MAAM,GAAG,SAAS;AAAA,EAC7E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,UAAU,QAA2B;AAC5C,SAAO,OAAO,WAAW,OAAO,IAAI,SAAS,IAAI,GAAG,OAAO,IAAI,QAAQ,GAAG,OAAO,IAAI,MAAM;AAC7F;AAEA,SAAS,WAAW,OAAuB;AACzC,QAAM,SAAS,SAAS,KAAK;AAC7B,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,SAAS,OAAO,SAAS,OAAO,IAAI,aAAa,IAAI,QAAQ,KAAK,IAAI,EAAE;AAC9E,SAAO,OAAO,SAAS,MAAM,KAAK,SAAS,IAAI,SAAS;AAC1D;AAEA,SAAS,WAAW,OAAe,QAAwB;AACzD,QAAM,SAAS,SAAS,KAAK;AAC7B,MAAI,CAAC,QAAQ;AACX,UAAM,YAAY,MAAM,SAAS,GAAG,IAAI,MAAM;AAC9C,WAAO,GAAG,KAAK,GAAG,SAAS,UAAU,MAAM;AAAA,EAC7C;AACA,SAAO,IAAI,aAAa,IAAI,UAAU,OAAO,MAAM,CAAC;AACpD,SAAO,UAAU,MAAM;AACzB;AAUA,eAAsB,oBACpB,KACA,UAAiC,CAAC,GACN;AAC5B,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,aAAa,WAAW,GAAG;AACjC,QAAM,QAAmB,CAAC;AAC1B,MAAI,eAAmC,CAAC;AACxC,MAAI,YAAY;AAEhB,SAAO,YAAY,UAAU;AAG3B,UAAM,UAAU,cAAc,IAAI,MAAM,WAAW,KAAK,aAAa,MAAM,MAAM;AACjF,UAAM,OAAO,MAAM,QAA4B,SAAS,QAAW,EAAE,UAAU,CAAC,EAAE,CAAC;AACnF,UAAM,UAAU,KAAK,UAAU,CAAC;AAChC,QAAI,CAAC,KAAK,IAAI;AACZ,aAAO,EAAE,IAAI,OAAO,OAAO,WAAW,cAAc,cAAc,QAAQ;AAAA,IAC5E;AACA,iBAAa;AACb,QAAI,cAAc,EAAG,gBAAe;AACpC,UAAM,YAAY,MAAM,QAAQ,QAAQ,KAAK,IAAI,QAAQ,QAAQ,CAAC;AAClE,UAAM,KAAK,GAAG,SAAS;AAGvB,QAAI,QAAQ,YAAY,QAAQ,UAAU,WAAW,EAAG;AAAA,EAC1D;AAEA,SAAO,EAAE,IAAI,MAAM,OAAO,WAAW,cAAc,cAAc,KAAK;AACxE;",
-  "names": []
-}

package/dist/portal/hooks/portalBridgeStatus.js

@@ -1,25 +0,0 @@
-const PORTAL_BRIDGE_STATUS_DOM_NAME = "om:portal-bridge:status";
-function readPortalBridgeHealth() {
-  if (typeof window === "undefined") return void 0;
-  return window.__portalBridgeHealthy;
-}
-function publishPortalBridgeHealth(healthy) {
-  if (typeof window === "undefined") return;
-  window.__portalBridgeHealthy = healthy;
-  window.dispatchEvent(
-    new CustomEvent(PORTAL_BRIDGE_STATUS_DOM_NAME, {
-      detail: { healthy }
-    })
-  );
-}
-function clearPortalBridgeHealth() {
-  if (typeof window === "undefined") return;
-  delete window.__portalBridgeHealthy;
-}
-export {
-  PORTAL_BRIDGE_STATUS_DOM_NAME,
-  clearPortalBridgeHealth,
-  publishPortalBridgeHealth,
-  readPortalBridgeHealth
-};
-//# sourceMappingURL=portalBridgeStatus.js.map

package/dist/portal/hooks/portalBridgeStatus.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/portal/hooks/portalBridgeStatus.ts"],
-  "sourcesContent": ["export const PORTAL_BRIDGE_STATUS_DOM_NAME = 'om:portal-bridge:status'\n\nexport type PortalBridgeStatusDetail = {\n  healthy: boolean\n}\n\ntype PortalBridgeWindow = Window & {\n  __portalBridgeHealthy?: boolean\n}\n\nexport function readPortalBridgeHealth(): boolean | undefined {\n  if (typeof window === 'undefined') return undefined\n  return (window as PortalBridgeWindow).__portalBridgeHealthy\n}\n\nexport function publishPortalBridgeHealth(healthy: boolean): void {\n  if (typeof window === 'undefined') return\n  ;(window as PortalBridgeWindow).__portalBridgeHealthy = healthy\n  window.dispatchEvent(\n    new CustomEvent<PortalBridgeStatusDetail>(PORTAL_BRIDGE_STATUS_DOM_NAME, {\n      detail: { healthy },\n    }),\n  )\n}\n\nexport function clearPortalBridgeHealth(): void {\n  if (typeof window === 'undefined') return\n  delete (window as PortalBridgeWindow).__portalBridgeHealthy\n}\n"],
-  "mappings": "AAAO,MAAM,gCAAgC;AAUtC,SAAS,yBAA8C;AAC5D,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,SAAQ,OAA8B;AACxC;AAEO,SAAS,0BAA0B,SAAwB;AAChE,MAAI,OAAO,WAAW,YAAa;AAClC,EAAC,OAA8B,wBAAwB;AACxD,SAAO;AAAA,IACL,IAAI,YAAsC,+BAA+B;AAAA,MACvE,QAAQ,EAAE,QAAQ;AAAA,IACpB,CAAC;AAAA,EACH;AACF;AAEO,SAAS,0BAAgC;AAC9C,MAAI,OAAO,WAAW,YAAa;AACnC,SAAQ,OAA8B;AACxC;",
-  "names": []
-}