@open-mercato/ui 0.6.7-develop.6870.1.b69802067a → 0.6.8-develop.6874.1.982d6097d8

package/.turbo/turbo-build.log

@@ -1,3 +1,3 @@
 Generated lucide registry with 145 icons -> /home/runner/work/open-mercato/open-mercato/packages/ui/src/backend/icons/lucideRegistry.generated.tsx
-[build:ui] found 397 entry points
+[build:ui] found 398 entry points
 [build:ui] built successfully

package/dist/backend/utils/api.js

@@ -38,6 +38,15 @@ function isSameOriginRequest(input) {
 async function withScopedApiHeaders(headers, run) {
   return scopedHeaders.withScopedHeaders(headers, run);
 }
+function readPathname() {
+  return typeof window !== "undefined" ? window.location?.pathname ?? "" : "";
+}
+function isLoginPathname(pathname) {
+  return pathname.startsWith("/login");
+}
+function isPortalPathname(pathname) {
+  return /\/[^/]+\/portal(\/|$)/.test(pathname);
+}
 class UnauthorizedError extends Error {
   constructor(message = "Unauthorized") {
     super(message);
@@ -110,10 +119,11 @@ async function apiFetch(input, init) {
   const requestHeaders = new Headers(mergedInit?.headers);
   const disableUnauthorizedRedirect = readRedirectOverride(requestHeaders, "x-om-unauthorized-redirect");
   const disableForbiddenRedirect = readRedirectOverride(requestHeaders, "x-om-forbidden-redirect");
+  const requestPathname = readPathname();
   const res = await baseFetch(input, mergedInit);
-  const pathname = typeof window !== "undefined" ? window.location.pathname : "";
-  const onLoginPage = pathname.startsWith("/login");
-  const onPortalRoute = /\/[^/]+\/portal(\/|$)/.test(pathname);
+  const responsePathname = readPathname();
+  const onLoginPage = isLoginPathname(requestPathname) || isLoginPathname(responsePathname);
+  const onPortalRoute = isPortalPathname(requestPathname) || isPortalPathname(responsePathname);
   if (res.status === 401) {
     if (!onLoginPage && !onPortalRoute && !disableUnauthorizedRedirect) {
       redirectToSessionRefresh();

package/dist/backend/utils/api.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/backend/utils/api.ts"],
-  "sourcesContent": ["\"use client\"\n// Simple fetch wrapper that redirects to session refresh on 401 (Unauthorized)\n// Used across UI data utilities to avoid duplication.\nimport { flash } from '../FlashMessages'\nimport { deserializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { pushOperation } from '../operations/store'\nimport { pushPartialIndexWarning } from '../indexes/store'\nimport { createScopedHeaderStack } from './scopedHeaderStack'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('ui').child({ component: 'apiFetch' })\n\nconst scopedHeaders = createScopedHeaderStack()\n\nfunction mergeHeaders(base: HeadersInit | undefined, scoped: Record<string, string>): Headers {\n  const headers = new Headers(base ?? {})\n  for (const [key, value] of Object.entries(scoped)) {\n    if (headers.has(key)) continue\n    headers.set(key, value)\n  }\n  return headers\n}\n\nfunction readRedirectOverride(headers: Headers, headerName: string): boolean {\n  return headers.get(headerName) === '0'\n}\n\nfunction isSameOriginRequest(input: RequestInfo | URL): boolean {\n  if (typeof window === 'undefined') return false\n  const host = window.location?.host\n  if (!host) return false\n  let urlString: string\n  if (typeof input === 'string') urlString = input\n  else if (input instanceof URL) urlString = input.toString()\n  else if (typeof Request !== 'undefined' && input instanceof Request) urlString = input.url\n  else return false\n  if (!/^[a-z][a-z0-9+.-]*:/i.test(urlString)) return true\n  try {\n    return new URL(urlString).host === host\n  } catch {\n    return false\n  }\n}\n\nexport async function withScopedApiHeaders<T>(headers: Record<string, string>, run: () => Promise<T>): Promise<T> {\n  return scopedHeaders.withScopedHeaders(headers, run)\n}\n\nexport class UnauthorizedError extends Error {\n  readonly status = 401\n  constructor(message = 'Unauthorized') {\n    super(message)\n    this.name = 'UnauthorizedError'\n  }\n}\n\nexport function redirectToSessionRefresh() {\n  if (typeof window === 'undefined') return\n  const current = window.location.pathname + window.location.search\n  // Avoid redirect loops if already on an auth/session route\n  if (window.location.pathname.startsWith('/api/auth')) return\n  // Portal routes have their own customer auth \u2014 never redirect to staff login\n  if (/\\/[^/]+\\/portal(\\/|$)/.test(window.location.pathname)) return\n  try {\n    flash('Session expired. Redirecting to sign in\u2026', 'warning')\n    setTimeout(() => {\n      window.location.href = `/api/auth/session/refresh?redirect=${encodeURIComponent(current)}`\n    }, 20)\n  } catch {\n    // no-op\n  }\n}\n\nexport class ForbiddenError extends Error {\n  readonly status = 403\n  readonly requiredFeatures: string[] | null\n  readonly requiredRoles: string[] | null\n\n  constructor(\n    message = 'Forbidden',\n    options?: { requiredFeatures?: string[] | null; requiredRoles?: string[] | null },\n  ) {\n    super(message)\n    this.name = 'ForbiddenError'\n    this.requiredFeatures = options?.requiredFeatures?.length ? [...options.requiredFeatures] : null\n    this.requiredRoles = options?.requiredRoles?.length ? [...options.requiredRoles] : null\n  }\n}\n\nlet DEFAULT_FORBIDDEN_ROLES: string[] = ['admin']\n\nexport function setAuthRedirectConfig(cfg: { defaultForbiddenRoles?: readonly string[] }) {\n  if (cfg?.defaultForbiddenRoles && cfg.defaultForbiddenRoles.length) {\n    DEFAULT_FORBIDDEN_ROLES = [...cfg.defaultForbiddenRoles].map(String)\n  }\n}\n\nfunction formatForbiddenAccessMessage(options?: { requiredRoles?: string[] | null; requiredFeatures?: string[] | null }): string {\n  const features = options?.requiredFeatures?.filter(Boolean) ?? []\n  const roles = options?.requiredRoles?.filter(Boolean) ?? []\n  const effectiveRoles = roles.length ? roles : DEFAULT_FORBIDDEN_ROLES.filter(Boolean)\n  if (features.length) {\n    return `Access denied: you are missing the required permission \"${features.join(', ')}\". Contact your administrator.`\n  }\n  if (effectiveRoles.length) {\n    return `Access denied: this area requires the role \"${effectiveRoles.join(', ')}\". Contact your administrator.`\n  }\n  return 'Access denied: you do not have permission to perform this action.'\n}\n\n/**\n * Signal a forbidden access attempt for an authenticated user via a flash banner.\n *\n * Authenticated 403 responses must never redirect to `/login` \u2014 that creates an\n * infinite loop because the login page detects the active session and bounces\n * the user back to the failing destination (see GH #2070). Pages that need an\n * inline banner should catch `ForbiddenError` and render `AccessDeniedMessage`\n * from `@open-mercato/ui/backend/detail`.\n */\nexport function notifyForbiddenAccess(options?: { requiredRoles?: string[] | null; requiredFeatures?: string[] | null }) {\n  if (typeof window === 'undefined') return\n  // Portal routes have their own customer auth \u2014 keep the existing no-op contract.\n  if (/\\/[^/]+\\/portal(\\/|$)/.test(window.location.pathname)) return\n  try {\n    flash(formatForbiddenAccessMessage(options), 'warning')\n  } catch {\n    // no-op\n  }\n}\n\n/**\n * @deprecated Renamed to {@link notifyForbiddenAccess}. The previous name\n * implied a `/login` redirect that no longer happens (see GH #2070). Kept as an\n * exported alias for one minor version so third-party module imports keep\n * building; update imports to `notifyForbiddenAccess`.\n */\nexport const redirectToForbiddenLogin = notifyForbiddenAccess\n\nexport async function apiFetch(input: RequestInfo | URL, init?: RequestInit): Promise<Response> {\n  type FetchType = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>\n  const originalFetch =\n    typeof window !== 'undefined'\n      ? (window as Window & { __omOriginalFetch?: FetchType }).__omOriginalFetch\n      : undefined\n  const fallbackFetch = (globalThis as typeof globalThis & { fetch?: FetchType }).fetch\n  const baseFetch = originalFetch ?? fallbackFetch\n  if (!baseFetch) {\n    return new Response(\n      JSON.stringify({ error: 'Fetch API is not available in this runtime' }),\n      { status: 503, headers: { 'content-type': 'application/json' } },\n    )\n  }\n  const scoped = scopedHeaders.resolveScopedHeaders()\n  const baseInit: RequestInit = Object.keys(scoped).length\n    ? { ...(init ?? {}), headers: mergeHeaders(init?.headers, scoped) }\n    : init ?? {}\n  // Only auto-inject credentials: 'include' for same-origin requests so cookies\n  // round-trip across Next.js proxy.ts rewrites (custom-domain portal flows)\n  // without leaking session cookies to third-party hosts.\n  const mergedInit: RequestInit = baseInit.credentials\n    ? baseInit\n    : isSameOriginRequest(input)\n      ? { ...baseInit, credentials: 'include' }\n      : baseInit\n  const requestHeaders = new Headers(mergedInit?.headers)\n  const disableUnauthorizedRedirect = readRedirectOverride(requestHeaders, 'x-om-unauthorized-redirect')\n  const disableForbiddenRedirect = readRedirectOverride(requestHeaders, 'x-om-forbidden-redirect')\n  const res = await baseFetch(input, mergedInit)\n  const pathname = typeof window !== 'undefined' ? window.location.pathname : ''\n  const onLoginPage = pathname.startsWith('/login')\n  const onPortalRoute = /\\/[^/]+\\/portal(\\/|$)/.test(pathname)\n  if (res.status === 401) {\n    // Trigger same redirect flow as protected pages\n    // Skip for staff login page and all portal routes (portal has its own auth)\n    if (!onLoginPage && !onPortalRoute && !disableUnauthorizedRedirect) {\n      redirectToSessionRefresh()\n      // Throw a typed error for callers that might still handle it\n      throw new UnauthorizedError(await res.text().catch(() => 'Unauthorized'))\n    }\n    return res\n  }\n  if (res.status === 403) {\n    // Try to read requiredRoles from JSON body; ignore if not JSON\n    let roles: string[] | null = null\n    let features: string[] | null = null\n    let payload: unknown = null\n    const aclData = await readJsonSafe<Record<string, unknown>>(res.clone(), null)\n    if (aclData && typeof aclData === 'object') {\n      if (Array.isArray(aclData.requiredRoles)) {\n        roles = aclData.requiredRoles.map((r) => String(r))\n      }\n      if (Array.isArray(aclData.requiredFeatures)) {\n        features = aclData.requiredFeatures.map((f) => String(f))\n      }\n      payload = aclData\n    }\n    // Only redirect if not already on login page or a portal route\n    if (!onLoginPage && !onPortalRoute && !disableForbiddenRedirect) {\n      const target =\n        typeof input === 'string'\n          ? input\n          : input instanceof URL\n            ? input.toString()\n            : (typeof Request !== 'undefined' && input instanceof Request)\n              ? input.url\n              : 'unknown'\n      try {\n        logger.warn('Forbidden response', {\n          url: target,\n          status: res.status,\n          requiredRoles: roles,\n          requiredFeatures: features,\n          details: payload,\n        })\n      } catch {}\n      const hasAclHints = Boolean((roles && roles.length) || (features && features.length))\n      if (hasAclHints) {\n        notifyForbiddenAccess({ requiredRoles: roles, requiredFeatures: features })\n      }\n      let msg = 'Forbidden'\n      if (aclData && typeof aclData === 'object') {\n        if (typeof aclData.error === 'string') {\n          msg = aclData.error\n        } else if (typeof aclData.message === 'string') {\n          msg = aclData.message\n        }\n      } else {\n        msg = await res.clone().text().catch(() => 'Forbidden')\n      }\n      // Attach ACL hints so callers (e.g. flashMutationError) can name the\n      // missing permission instead of surfacing a bare \"Forbidden\" toast.\n      throw new ForbiddenError(msg, { requiredFeatures: features, requiredRoles: roles })\n    }\n    // If already on login, just return the response for the caller to handle\n  }\n  try {\n    const header = res.headers.get('x-om-operation')\n    const metadata = deserializeOperationMetadata(header)\n    if (metadata) pushOperation(metadata)\n  } catch {\n    // ignore malformed headers\n  }\n  try {\n    const warningRaw = res.headers.get('x-om-partial-index')\n    if (warningRaw) {\n      const parsed = JSON.parse(warningRaw) as Record<string, unknown>\n      if (parsed && typeof parsed === 'object' && parsed.type === 'partial_index') {\n        const entity = typeof parsed.entity === 'string' ? parsed.entity : String(parsed.entity ?? '')\n        if (entity) {\n          const baseCount = typeof parsed.baseCount === 'number' ? parsed.baseCount : null\n          const indexedCount = typeof parsed.indexedCount === 'number' ? parsed.indexedCount : null\n          const scope = parsed.scope === 'global' ? 'global' : 'scoped'\n          const entityLabel =\n            typeof parsed.entityLabel === 'string' && parsed.entityLabel.trim()\n              ? parsed.entityLabel.trim()\n              : entity\n          pushPartialIndexWarning({ entity, entityLabel, baseCount, indexedCount, scope })\n        }\n      }\n    }\n  } catch {\n    // ignore malformed headers\n  }\n  return res\n}\n"],
-  "mappings": ";AAGA,SAAS,aAAa;AACtB,SAAS,oCAAoC;AAC7C,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,SAAS,+BAA+B;AACxC,SAAS,+BAA+B;AACxC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,IAAI,EAAE,MAAM,EAAE,WAAW,WAAW,CAAC;AAEjE,MAAM,gBAAgB,wBAAwB;AAE9C,SAAS,aAAa,MAA+B,QAAyC;AAC5F,QAAM,UAAU,IAAI,QAAQ,QAAQ,CAAC,CAAC;AACtC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,QAAI,QAAQ,IAAI,GAAG,EAAG;AACtB,YAAQ,IAAI,KAAK,KAAK;AAAA,EACxB;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,SAAkB,YAA6B;AAC3E,SAAO,QAAQ,IAAI,UAAU,MAAM;AACrC;AAEA,SAAS,oBAAoB,OAAmC;AAC9D,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,QAAM,OAAO,OAAO,UAAU;AAC9B,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI;AACJ,MAAI,OAAO,UAAU,SAAU,aAAY;AAAA,WAClC,iBAAiB,IAAK,aAAY,MAAM,SAAS;AAAA,WACjD,OAAO,YAAY,eAAe,iBAAiB,QAAS,aAAY,MAAM;AAAA,MAClF,QAAO;AACZ,MAAI,CAAC,uBAAuB,KAAK,SAAS,EAAG,QAAO;AACpD,MAAI;AACF,WAAO,IAAI,IAAI,SAAS,EAAE,SAAS;AAAA,EACrC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,qBAAwB,SAAiC,KAAmC;AAChH,SAAO,cAAc,kBAAkB,SAAS,GAAG;AACrD;AAEO,MAAM,0BAA0B,MAAM;AAAA,EAE3C,YAAY,UAAU,gBAAgB;AACpC,UAAM,OAAO;AAFf,SAAS,SAAS;AAGhB,SAAK,OAAO;AAAA,EACd;AACF;AAEO,SAAS,2BAA2B;AACzC,MAAI,OAAO,WAAW,YAAa;AACnC,QAAM,UAAU,OAAO,SAAS,WAAW,OAAO,SAAS;AAE3D,MAAI,OAAO,SAAS,SAAS,WAAW,WAAW,EAAG;AAEtD,MAAI,wBAAwB,KAAK,OAAO,SAAS,QAAQ,EAAG;AAC5D,MAAI;AACF,UAAM,iDAA4C,SAAS;AAC3D,eAAW,MAAM;AACf,aAAO,SAAS,OAAO,sCAAsC,mBAAmB,OAAO,CAAC;AAAA,IAC1F,GAAG,EAAE;AAAA,EACP,QAAQ;AAAA,EAER;AACF;AAEO,MAAM,uBAAuB,MAAM;AAAA,EAKxC,YACE,UAAU,aACV,SACA;AACA,UAAM,OAAO;AARf,SAAS,SAAS;AAShB,SAAK,OAAO;AACZ,SAAK,mBAAmB,SAAS,kBAAkB,SAAS,CAAC,GAAG,QAAQ,gBAAgB,IAAI;AAC5F,SAAK,gBAAgB,SAAS,eAAe,SAAS,CAAC,GAAG,QAAQ,aAAa,IAAI;AAAA,EACrF;AACF;AAEA,IAAI,0BAAoC,CAAC,OAAO;AAEzC,SAAS,sBAAsB,KAAoD;AACxF,MAAI,KAAK,yBAAyB,IAAI,sBAAsB,QAAQ;AAClE,8BAA0B,CAAC,GAAG,IAAI,qBAAqB,EAAE,IAAI,MAAM;AAAA,EACrE;AACF;AAEA,SAAS,6BAA6B,SAA2F;AAC/H,QAAM,WAAW,SAAS,kBAAkB,OAAO,OAAO,KAAK,CAAC;AAChE,QAAM,QAAQ,SAAS,eAAe,OAAO,OAAO,KAAK,CAAC;AAC1D,QAAM,iBAAiB,MAAM,SAAS,QAAQ,wBAAwB,OAAO,OAAO;AACpF,MAAI,SAAS,QAAQ;AACnB,WAAO,2DAA2D,SAAS,KAAK,IAAI,CAAC;AAAA,EACvF;AACA,MAAI,eAAe,QAAQ;AACzB,WAAO,+CAA+C,eAAe,KAAK,IAAI,CAAC;AAAA,EACjF;AACA,SAAO;AACT;AAWO,SAAS,sBAAsB,SAAmF;AACvH,MAAI,OAAO,WAAW,YAAa;AAEnC,MAAI,wBAAwB,KAAK,OAAO,SAAS,QAAQ,EAAG;AAC5D,MAAI;AACF,UAAM,6BAA6B,OAAO,GAAG,SAAS;AAAA,EACxD,QAAQ;AAAA,EAER;AACF;AAQO,MAAM,2BAA2B;AAExC,eAAsB,SAAS,OAA0B,MAAuC;AAE9F,QAAM,gBACJ,OAAO,WAAW,cACb,OAAsD,oBACvD;AACN,QAAM,gBAAiB,WAAyD;AAChF,QAAM,YAAY,iBAAiB;AACnC,MAAI,CAAC,WAAW;AACd,WAAO,IAAI;AAAA,MACT,KAAK,UAAU,EAAE,OAAO,6CAA6C,CAAC;AAAA,MACtE,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,IACjE;AAAA,EACF;AACA,QAAM,SAAS,cAAc,qBAAqB;AAClD,QAAM,WAAwB,OAAO,KAAK,MAAM,EAAE,SAC9C,EAAE,GAAI,QAAQ,CAAC,GAAI,SAAS,aAAa,MAAM,SAAS,MAAM,EAAE,IAChE,QAAQ,CAAC;AAIb,QAAM,aAA0B,SAAS,cACrC,WACA,oBAAoB,KAAK,IACvB,EAAE,GAAG,UAAU,aAAa,UAAU,IACtC;AACN,QAAM,iBAAiB,IAAI,QAAQ,YAAY,OAAO;AACtD,QAAM,8BAA8B,qBAAqB,gBAAgB,4BAA4B;AACrG,QAAM,2BAA2B,qBAAqB,gBAAgB,yBAAyB;AAC/F,QAAM,MAAM,MAAM,UAAU,OAAO,UAAU;AAC7C,QAAM,WAAW,OAAO,WAAW,cAAc,OAAO,SAAS,WAAW;AAC5E,QAAM,cAAc,SAAS,WAAW,QAAQ;AAChD,QAAM,gBAAgB,wBAAwB,KAAK,QAAQ;AAC3D,MAAI,IAAI,WAAW,KAAK;AAGtB,QAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,6BAA6B;AAClE,+BAAyB;AAEzB,YAAM,IAAI,kBAAkB,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,cAAc,CAAC;AAAA,IAC1E;AACA,WAAO;AAAA,EACT;AACA,MAAI,IAAI,WAAW,KAAK;AAEtB,QAAI,QAAyB;AAC7B,QAAI,WAA4B;AAChC,QAAI,UAAmB;AACvB,UAAM,UAAU,MAAM,aAAsC,IAAI,MAAM,GAAG,IAAI;AAC7E,QAAI,WAAW,OAAO,YAAY,UAAU;AAC1C,UAAI,MAAM,QAAQ,QAAQ,aAAa,GAAG;AACxC,gBAAQ,QAAQ,cAAc,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC;AAAA,MACpD;AACA,UAAI,MAAM,QAAQ,QAAQ,gBAAgB,GAAG;AAC3C,mBAAW,QAAQ,iBAAiB,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC;AAAA,MAC1D;AACA,gBAAU;AAAA,IACZ;AAEA,QAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,0BAA0B;AAC/D,YAAM,SACJ,OAAO,UAAU,WACb,QACA,iBAAiB,MACf,MAAM,SAAS,IACd,OAAO,YAAY,eAAe,iBAAiB,UAClD,MAAM,MACN;AACV,UAAI;AACF,eAAO,KAAK,sBAAsB;AAAA,UAChC,KAAK;AAAA,UACL,QAAQ,IAAI;AAAA,UACZ,eAAe;AAAA,UACf,kBAAkB;AAAA,UAClB,SAAS;AAAA,QACX,CAAC;AAAA,MACH,QAAQ;AAAA,MAAC;AACT,YAAM,cAAc,QAAS,SAAS,MAAM,UAAY,YAAY,SAAS,MAAO;AACpF,UAAI,aAAa;AACf,8BAAsB,EAAE,eAAe,OAAO,kBAAkB,SAAS,CAAC;AAAA,MAC5E;AACA,UAAI,MAAM;AACV,UAAI,WAAW,OAAO,YAAY,UAAU;AAC1C,YAAI,OAAO,QAAQ,UAAU,UAAU;AACrC,gBAAM,QAAQ;AAAA,QAChB,WAAW,OAAO,QAAQ,YAAY,UAAU;AAC9C,gBAAM,QAAQ;AAAA,QAChB;AAAA,MACF,OAAO;AACL,cAAM,MAAM,IAAI,MAAM,EAAE,KAAK,EAAE,MAAM,MAAM,WAAW;AAAA,MACxD;AAGA,YAAM,IAAI,eAAe,KAAK,EAAE,kBAAkB,UAAU,eAAe,MAAM,CAAC;AAAA,IACpF;AAAA,EAEF;AACA,MAAI;AACF,UAAM,SAAS,IAAI,QAAQ,IAAI,gBAAgB;AAC/C,UAAM,WAAW,6BAA6B,MAAM;AACpD,QAAI,SAAU,eAAc,QAAQ;AAAA,EACtC,QAAQ;AAAA,EAER;AACA,MAAI;AACF,UAAM,aAAa,IAAI,QAAQ,IAAI,oBAAoB;AACvD,QAAI,YAAY;AACd,YAAM,SAAS,KAAK,MAAM,UAAU;AACpC,UAAI,UAAU,OAAO,WAAW,YAAY,OAAO,SAAS,iBAAiB;AAC3E,cAAM,SAAS,OAAO,OAAO,WAAW,WAAW,OAAO,SAAS,OAAO,OAAO,UAAU,EAAE;AAC7F,YAAI,QAAQ;AACV,gBAAM,YAAY,OAAO,OAAO,cAAc,WAAW,OAAO,YAAY;AAC5E,gBAAM,eAAe,OAAO,OAAO,iBAAiB,WAAW,OAAO,eAAe;AACrF,gBAAM,QAAQ,OAAO,UAAU,WAAW,WAAW;AACrD,gBAAM,cACJ,OAAO,OAAO,gBAAgB,YAAY,OAAO,YAAY,KAAK,IAC9D,OAAO,YAAY,KAAK,IACxB;AACN,kCAAwB,EAAE,QAAQ,aAAa,WAAW,cAAc,MAAM,CAAC;AAAA,QACjF;AAAA,MACF;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;",
+  "sourcesContent": ["\"use client\"\n// Simple fetch wrapper that redirects to session refresh on 401 (Unauthorized)\n// Used across UI data utilities to avoid duplication.\nimport { flash } from '../FlashMessages'\nimport { deserializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { pushOperation } from '../operations/store'\nimport { pushPartialIndexWarning } from '../indexes/store'\nimport { createScopedHeaderStack } from './scopedHeaderStack'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('ui').child({ component: 'apiFetch' })\n\nconst scopedHeaders = createScopedHeaderStack()\n\nfunction mergeHeaders(base: HeadersInit | undefined, scoped: Record<string, string>): Headers {\n  const headers = new Headers(base ?? {})\n  for (const [key, value] of Object.entries(scoped)) {\n    if (headers.has(key)) continue\n    headers.set(key, value)\n  }\n  return headers\n}\n\nfunction readRedirectOverride(headers: Headers, headerName: string): boolean {\n  return headers.get(headerName) === '0'\n}\n\nfunction isSameOriginRequest(input: RequestInfo | URL): boolean {\n  if (typeof window === 'undefined') return false\n  const host = window.location?.host\n  if (!host) return false\n  let urlString: string\n  if (typeof input === 'string') urlString = input\n  else if (input instanceof URL) urlString = input.toString()\n  else if (typeof Request !== 'undefined' && input instanceof Request) urlString = input.url\n  else return false\n  if (!/^[a-z][a-z0-9+.-]*:/i.test(urlString)) return true\n  try {\n    return new URL(urlString).host === host\n  } catch {\n    return false\n  }\n}\n\nexport async function withScopedApiHeaders<T>(headers: Record<string, string>, run: () => Promise<T>): Promise<T> {\n  return scopedHeaders.withScopedHeaders(headers, run)\n}\n\nfunction readPathname(): string {\n  return typeof window !== 'undefined' ? window.location?.pathname ?? '' : ''\n}\n\nfunction isLoginPathname(pathname: string): boolean {\n  return pathname.startsWith('/login')\n}\n\nfunction isPortalPathname(pathname: string): boolean {\n  return /\\/[^/]+\\/portal(\\/|$)/.test(pathname)\n}\n\nexport class UnauthorizedError extends Error {\n  readonly status = 401\n  constructor(message = 'Unauthorized') {\n    super(message)\n    this.name = 'UnauthorizedError'\n  }\n}\n\nexport function redirectToSessionRefresh() {\n  if (typeof window === 'undefined') return\n  const current = window.location.pathname + window.location.search\n  // Avoid redirect loops if already on an auth/session route\n  if (window.location.pathname.startsWith('/api/auth')) return\n  // Portal routes have their own customer auth \u2014 never redirect to staff login\n  if (/\\/[^/]+\\/portal(\\/|$)/.test(window.location.pathname)) return\n  try {\n    flash('Session expired. Redirecting to sign in\u2026', 'warning')\n    setTimeout(() => {\n      window.location.href = `/api/auth/session/refresh?redirect=${encodeURIComponent(current)}`\n    }, 20)\n  } catch {\n    // no-op\n  }\n}\n\nexport class ForbiddenError extends Error {\n  readonly status = 403\n  readonly requiredFeatures: string[] | null\n  readonly requiredRoles: string[] | null\n\n  constructor(\n    message = 'Forbidden',\n    options?: { requiredFeatures?: string[] | null; requiredRoles?: string[] | null },\n  ) {\n    super(message)\n    this.name = 'ForbiddenError'\n    this.requiredFeatures = options?.requiredFeatures?.length ? [...options.requiredFeatures] : null\n    this.requiredRoles = options?.requiredRoles?.length ? [...options.requiredRoles] : null\n  }\n}\n\nlet DEFAULT_FORBIDDEN_ROLES: string[] = ['admin']\n\nexport function setAuthRedirectConfig(cfg: { defaultForbiddenRoles?: readonly string[] }) {\n  if (cfg?.defaultForbiddenRoles && cfg.defaultForbiddenRoles.length) {\n    DEFAULT_FORBIDDEN_ROLES = [...cfg.defaultForbiddenRoles].map(String)\n  }\n}\n\nfunction formatForbiddenAccessMessage(options?: { requiredRoles?: string[] | null; requiredFeatures?: string[] | null }): string {\n  const features = options?.requiredFeatures?.filter(Boolean) ?? []\n  const roles = options?.requiredRoles?.filter(Boolean) ?? []\n  const effectiveRoles = roles.length ? roles : DEFAULT_FORBIDDEN_ROLES.filter(Boolean)\n  if (features.length) {\n    return `Access denied: you are missing the required permission \"${features.join(', ')}\". Contact your administrator.`\n  }\n  if (effectiveRoles.length) {\n    return `Access denied: this area requires the role \"${effectiveRoles.join(', ')}\". Contact your administrator.`\n  }\n  return 'Access denied: you do not have permission to perform this action.'\n}\n\n/**\n * Signal a forbidden access attempt for an authenticated user via a flash banner.\n *\n * Authenticated 403 responses must never redirect to `/login` \u2014 that creates an\n * infinite loop because the login page detects the active session and bounces\n * the user back to the failing destination (see GH #2070). Pages that need an\n * inline banner should catch `ForbiddenError` and render `AccessDeniedMessage`\n * from `@open-mercato/ui/backend/detail`.\n */\nexport function notifyForbiddenAccess(options?: { requiredRoles?: string[] | null; requiredFeatures?: string[] | null }) {\n  if (typeof window === 'undefined') return\n  // Portal routes have their own customer auth \u2014 keep the existing no-op contract.\n  if (/\\/[^/]+\\/portal(\\/|$)/.test(window.location.pathname)) return\n  try {\n    flash(formatForbiddenAccessMessage(options), 'warning')\n  } catch {\n    // no-op\n  }\n}\n\n/**\n * @deprecated Renamed to {@link notifyForbiddenAccess}. The previous name\n * implied a `/login` redirect that no longer happens (see GH #2070). Kept as an\n * exported alias for one minor version so third-party module imports keep\n * building; update imports to `notifyForbiddenAccess`.\n */\nexport const redirectToForbiddenLogin = notifyForbiddenAccess\n\nexport async function apiFetch(input: RequestInfo | URL, init?: RequestInit): Promise<Response> {\n  type FetchType = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>\n  const originalFetch =\n    typeof window !== 'undefined'\n      ? (window as Window & { __omOriginalFetch?: FetchType }).__omOriginalFetch\n      : undefined\n  const fallbackFetch = (globalThis as typeof globalThis & { fetch?: FetchType }).fetch\n  const baseFetch = originalFetch ?? fallbackFetch\n  if (!baseFetch) {\n    return new Response(\n      JSON.stringify({ error: 'Fetch API is not available in this runtime' }),\n      { status: 503, headers: { 'content-type': 'application/json' } },\n    )\n  }\n  const scoped = scopedHeaders.resolveScopedHeaders()\n  const baseInit: RequestInit = Object.keys(scoped).length\n    ? { ...(init ?? {}), headers: mergeHeaders(init?.headers, scoped) }\n    : init ?? {}\n  // Only auto-inject credentials: 'include' for same-origin requests so cookies\n  // round-trip across Next.js proxy.ts rewrites (custom-domain portal flows)\n  // without leaking session cookies to third-party hosts.\n  const mergedInit: RequestInit = baseInit.credentials\n    ? baseInit\n    : isSameOriginRequest(input)\n      ? { ...baseInit, credentials: 'include' }\n      : baseInit\n  const requestHeaders = new Headers(mergedInit?.headers)\n  const disableUnauthorizedRedirect = readRedirectOverride(requestHeaders, 'x-om-unauthorized-redirect')\n  const disableForbiddenRedirect = readRedirectOverride(requestHeaders, 'x-om-forbidden-redirect')\n  // Snapshot the pathname BEFORE the request is sent. A 401 for a request that\n  // started on the login page must stay silent even when the response lands after\n  // the post-login client-side navigation to /backend \u2014 otherwise the stale\n  // pre-auth 401 raises a bogus \"Session expired\" banner right after signing in.\n  const requestPathname = readPathname()\n  const res = await baseFetch(input, mergedInit)\n  const responsePathname = readPathname()\n  const onLoginPage = isLoginPathname(requestPathname) || isLoginPathname(responsePathname)\n  const onPortalRoute = isPortalPathname(requestPathname) || isPortalPathname(responsePathname)\n  if (res.status === 401) {\n    // Trigger same redirect flow as protected pages\n    // Skip for staff login page and all portal routes (portal has its own auth)\n    if (!onLoginPage && !onPortalRoute && !disableUnauthorizedRedirect) {\n      redirectToSessionRefresh()\n      // Throw a typed error for callers that might still handle it\n      throw new UnauthorizedError(await res.text().catch(() => 'Unauthorized'))\n    }\n    return res\n  }\n  if (res.status === 403) {\n    // Try to read requiredRoles from JSON body; ignore if not JSON\n    let roles: string[] | null = null\n    let features: string[] | null = null\n    let payload: unknown = null\n    const aclData = await readJsonSafe<Record<string, unknown>>(res.clone(), null)\n    if (aclData && typeof aclData === 'object') {\n      if (Array.isArray(aclData.requiredRoles)) {\n        roles = aclData.requiredRoles.map((r) => String(r))\n      }\n      if (Array.isArray(aclData.requiredFeatures)) {\n        features = aclData.requiredFeatures.map((f) => String(f))\n      }\n      payload = aclData\n    }\n    // Only redirect if not already on login page or a portal route\n    if (!onLoginPage && !onPortalRoute && !disableForbiddenRedirect) {\n      const target =\n        typeof input === 'string'\n          ? input\n          : input instanceof URL\n            ? input.toString()\n            : (typeof Request !== 'undefined' && input instanceof Request)\n              ? input.url\n              : 'unknown'\n      try {\n        logger.warn('Forbidden response', {\n          url: target,\n          status: res.status,\n          requiredRoles: roles,\n          requiredFeatures: features,\n          details: payload,\n        })\n      } catch {}\n      const hasAclHints = Boolean((roles && roles.length) || (features && features.length))\n      if (hasAclHints) {\n        notifyForbiddenAccess({ requiredRoles: roles, requiredFeatures: features })\n      }\n      let msg = 'Forbidden'\n      if (aclData && typeof aclData === 'object') {\n        if (typeof aclData.error === 'string') {\n          msg = aclData.error\n        } else if (typeof aclData.message === 'string') {\n          msg = aclData.message\n        }\n      } else {\n        msg = await res.clone().text().catch(() => 'Forbidden')\n      }\n      // Attach ACL hints so callers (e.g. flashMutationError) can name the\n      // missing permission instead of surfacing a bare \"Forbidden\" toast.\n      throw new ForbiddenError(msg, { requiredFeatures: features, requiredRoles: roles })\n    }\n    // If already on login, just return the response for the caller to handle\n  }\n  try {\n    const header = res.headers.get('x-om-operation')\n    const metadata = deserializeOperationMetadata(header)\n    if (metadata) pushOperation(metadata)\n  } catch {\n    // ignore malformed headers\n  }\n  try {\n    const warningRaw = res.headers.get('x-om-partial-index')\n    if (warningRaw) {\n      const parsed = JSON.parse(warningRaw) as Record<string, unknown>\n      if (parsed && typeof parsed === 'object' && parsed.type === 'partial_index') {\n        const entity = typeof parsed.entity === 'string' ? parsed.entity : String(parsed.entity ?? '')\n        if (entity) {\n          const baseCount = typeof parsed.baseCount === 'number' ? parsed.baseCount : null\n          const indexedCount = typeof parsed.indexedCount === 'number' ? parsed.indexedCount : null\n          const scope = parsed.scope === 'global' ? 'global' : 'scoped'\n          const entityLabel =\n            typeof parsed.entityLabel === 'string' && parsed.entityLabel.trim()\n              ? parsed.entityLabel.trim()\n              : entity\n          pushPartialIndexWarning({ entity, entityLabel, baseCount, indexedCount, scope })\n        }\n      }\n    }\n  } catch {\n    // ignore malformed headers\n  }\n  return res\n}\n"],
+  "mappings": ";AAGA,SAAS,aAAa;AACtB,SAAS,oCAAoC;AAC7C,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,SAAS,+BAA+B;AACxC,SAAS,+BAA+B;AACxC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,IAAI,EAAE,MAAM,EAAE,WAAW,WAAW,CAAC;AAEjE,MAAM,gBAAgB,wBAAwB;AAE9C,SAAS,aAAa,MAA+B,QAAyC;AAC5F,QAAM,UAAU,IAAI,QAAQ,QAAQ,CAAC,CAAC;AACtC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,QAAI,QAAQ,IAAI,GAAG,EAAG;AACtB,YAAQ,IAAI,KAAK,KAAK;AAAA,EACxB;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,SAAkB,YAA6B;AAC3E,SAAO,QAAQ,IAAI,UAAU,MAAM;AACrC;AAEA,SAAS,oBAAoB,OAAmC;AAC9D,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,QAAM,OAAO,OAAO,UAAU;AAC9B,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI;AACJ,MAAI,OAAO,UAAU,SAAU,aAAY;AAAA,WAClC,iBAAiB,IAAK,aAAY,MAAM,SAAS;AAAA,WACjD,OAAO,YAAY,eAAe,iBAAiB,QAAS,aAAY,MAAM;AAAA,MAClF,QAAO;AACZ,MAAI,CAAC,uBAAuB,KAAK,SAAS,EAAG,QAAO;AACpD,MAAI;AACF,WAAO,IAAI,IAAI,SAAS,EAAE,SAAS;AAAA,EACrC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,qBAAwB,SAAiC,KAAmC;AAChH,SAAO,cAAc,kBAAkB,SAAS,GAAG;AACrD;AAEA,SAAS,eAAuB;AAC9B,SAAO,OAAO,WAAW,cAAc,OAAO,UAAU,YAAY,KAAK;AAC3E;AAEA,SAAS,gBAAgB,UAA2B;AAClD,SAAO,SAAS,WAAW,QAAQ;AACrC;AAEA,SAAS,iBAAiB,UAA2B;AACnD,SAAO,wBAAwB,KAAK,QAAQ;AAC9C;AAEO,MAAM,0BAA0B,MAAM;AAAA,EAE3C,YAAY,UAAU,gBAAgB;AACpC,UAAM,OAAO;AAFf,SAAS,SAAS;AAGhB,SAAK,OAAO;AAAA,EACd;AACF;AAEO,SAAS,2BAA2B;AACzC,MAAI,OAAO,WAAW,YAAa;AACnC,QAAM,UAAU,OAAO,SAAS,WAAW,OAAO,SAAS;AAE3D,MAAI,OAAO,SAAS,SAAS,WAAW,WAAW,EAAG;AAEtD,MAAI,wBAAwB,KAAK,OAAO,SAAS,QAAQ,EAAG;AAC5D,MAAI;AACF,UAAM,iDAA4C,SAAS;AAC3D,eAAW,MAAM;AACf,aAAO,SAAS,OAAO,sCAAsC,mBAAmB,OAAO,CAAC;AAAA,IAC1F,GAAG,EAAE;AAAA,EACP,QAAQ;AAAA,EAER;AACF;AAEO,MAAM,uBAAuB,MAAM;AAAA,EAKxC,YACE,UAAU,aACV,SACA;AACA,UAAM,OAAO;AARf,SAAS,SAAS;AAShB,SAAK,OAAO;AACZ,SAAK,mBAAmB,SAAS,kBAAkB,SAAS,CAAC,GAAG,QAAQ,gBAAgB,IAAI;AAC5F,SAAK,gBAAgB,SAAS,eAAe,SAAS,CAAC,GAAG,QAAQ,aAAa,IAAI;AAAA,EACrF;AACF;AAEA,IAAI,0BAAoC,CAAC,OAAO;AAEzC,SAAS,sBAAsB,KAAoD;AACxF,MAAI,KAAK,yBAAyB,IAAI,sBAAsB,QAAQ;AAClE,8BAA0B,CAAC,GAAG,IAAI,qBAAqB,EAAE,IAAI,MAAM;AAAA,EACrE;AACF;AAEA,SAAS,6BAA6B,SAA2F;AAC/H,QAAM,WAAW,SAAS,kBAAkB,OAAO,OAAO,KAAK,CAAC;AAChE,QAAM,QAAQ,SAAS,eAAe,OAAO,OAAO,KAAK,CAAC;AAC1D,QAAM,iBAAiB,MAAM,SAAS,QAAQ,wBAAwB,OAAO,OAAO;AACpF,MAAI,SAAS,QAAQ;AACnB,WAAO,2DAA2D,SAAS,KAAK,IAAI,CAAC;AAAA,EACvF;AACA,MAAI,eAAe,QAAQ;AACzB,WAAO,+CAA+C,eAAe,KAAK,IAAI,CAAC;AAAA,EACjF;AACA,SAAO;AACT;AAWO,SAAS,sBAAsB,SAAmF;AACvH,MAAI,OAAO,WAAW,YAAa;AAEnC,MAAI,wBAAwB,KAAK,OAAO,SAAS,QAAQ,EAAG;AAC5D,MAAI;AACF,UAAM,6BAA6B,OAAO,GAAG,SAAS;AAAA,EACxD,QAAQ;AAAA,EAER;AACF;AAQO,MAAM,2BAA2B;AAExC,eAAsB,SAAS,OAA0B,MAAuC;AAE9F,QAAM,gBACJ,OAAO,WAAW,cACb,OAAsD,oBACvD;AACN,QAAM,gBAAiB,WAAyD;AAChF,QAAM,YAAY,iBAAiB;AACnC,MAAI,CAAC,WAAW;AACd,WAAO,IAAI;AAAA,MACT,KAAK,UAAU,EAAE,OAAO,6CAA6C,CAAC;AAAA,MACtE,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,IACjE;AAAA,EACF;AACA,QAAM,SAAS,cAAc,qBAAqB;AAClD,QAAM,WAAwB,OAAO,KAAK,MAAM,EAAE,SAC9C,EAAE,GAAI,QAAQ,CAAC,GAAI,SAAS,aAAa,MAAM,SAAS,MAAM,EAAE,IAChE,QAAQ,CAAC;AAIb,QAAM,aAA0B,SAAS,cACrC,WACA,oBAAoB,KAAK,IACvB,EAAE,GAAG,UAAU,aAAa,UAAU,IACtC;AACN,QAAM,iBAAiB,IAAI,QAAQ,YAAY,OAAO;AACtD,QAAM,8BAA8B,qBAAqB,gBAAgB,4BAA4B;AACrG,QAAM,2BAA2B,qBAAqB,gBAAgB,yBAAyB;AAK/F,QAAM,kBAAkB,aAAa;AACrC,QAAM,MAAM,MAAM,UAAU,OAAO,UAAU;AAC7C,QAAM,mBAAmB,aAAa;AACtC,QAAM,cAAc,gBAAgB,eAAe,KAAK,gBAAgB,gBAAgB;AACxF,QAAM,gBAAgB,iBAAiB,eAAe,KAAK,iBAAiB,gBAAgB;AAC5F,MAAI,IAAI,WAAW,KAAK;AAGtB,QAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,6BAA6B;AAClE,+BAAyB;AAEzB,YAAM,IAAI,kBAAkB,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,cAAc,CAAC;AAAA,IAC1E;AACA,WAAO;AAAA,EACT;AACA,MAAI,IAAI,WAAW,KAAK;AAEtB,QAAI,QAAyB;AAC7B,QAAI,WAA4B;AAChC,QAAI,UAAmB;AACvB,UAAM,UAAU,MAAM,aAAsC,IAAI,MAAM,GAAG,IAAI;AAC7E,QAAI,WAAW,OAAO,YAAY,UAAU;AAC1C,UAAI,MAAM,QAAQ,QAAQ,aAAa,GAAG;AACxC,gBAAQ,QAAQ,cAAc,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC;AAAA,MACpD;AACA,UAAI,MAAM,QAAQ,QAAQ,gBAAgB,GAAG;AAC3C,mBAAW,QAAQ,iBAAiB,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC;AAAA,MAC1D;AACA,gBAAU;AAAA,IACZ;AAEA,QAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,0BAA0B;AAC/D,YAAM,SACJ,OAAO,UAAU,WACb,QACA,iBAAiB,MACf,MAAM,SAAS,IACd,OAAO,YAAY,eAAe,iBAAiB,UAClD,MAAM,MACN;AACV,UAAI;AACF,eAAO,KAAK,sBAAsB;AAAA,UAChC,KAAK;AAAA,UACL,QAAQ,IAAI;AAAA,UACZ,eAAe;AAAA,UACf,kBAAkB;AAAA,UAClB,SAAS;AAAA,QACX,CAAC;AAAA,MACH,QAAQ;AAAA,MAAC;AACT,YAAM,cAAc,QAAS,SAAS,MAAM,UAAY,YAAY,SAAS,MAAO;AACpF,UAAI,aAAa;AACf,8BAAsB,EAAE,eAAe,OAAO,kBAAkB,SAAS,CAAC;AAAA,MAC5E;AACA,UAAI,MAAM;AACV,UAAI,WAAW,OAAO,YAAY,UAAU;AAC1C,YAAI,OAAO,QAAQ,UAAU,UAAU;AACrC,gBAAM,QAAQ;AAAA,QAChB,WAAW,OAAO,QAAQ,YAAY,UAAU;AAC9C,gBAAM,QAAQ;AAAA,QAChB;AAAA,MACF,OAAO;AACL,cAAM,MAAM,IAAI,MAAM,EAAE,KAAK,EAAE,MAAM,MAAM,WAAW;AAAA,MACxD;AAGA,YAAM,IAAI,eAAe,KAAK,EAAE,kBAAkB,UAAU,eAAe,MAAM,CAAC;AAAA,IACpF;AAAA,EAEF;AACA,MAAI;AACF,UAAM,SAAS,IAAI,QAAQ,IAAI,gBAAgB;AAC/C,UAAM,WAAW,6BAA6B,MAAM;AACpD,QAAI,SAAU,eAAc,QAAQ;AAAA,EACtC,QAAQ;AAAA,EAER;AACA,MAAI;AACF,UAAM,aAAa,IAAI,QAAQ,IAAI,oBAAoB;AACvD,QAAI,YAAY;AACd,YAAM,SAAS,KAAK,MAAM,UAAU;AACpC,UAAI,UAAU,OAAO,WAAW,YAAY,OAAO,SAAS,iBAAiB;AAC3E,cAAM,SAAS,OAAO,OAAO,WAAW,WAAW,OAAO,SAAS,OAAO,OAAO,UAAU,EAAE;AAC7F,YAAI,QAAQ;AACV,gBAAM,YAAY,OAAO,OAAO,cAAc,WAAW,OAAO,YAAY;AAC5E,gBAAM,eAAe,OAAO,OAAO,iBAAiB,WAAW,OAAO,eAAe;AACrF,gBAAM,QAAQ,OAAO,UAAU,WAAW,WAAW;AACrD,gBAAM,cACJ,OAAO,OAAO,gBAAgB,YAAY,OAAO,YAAY,KAAK,IAC9D,OAAO,YAAY,KAAK,IACxB;AACN,kCAAwB,EAAE,QAAQ,aAAa,WAAW,cAAc,MAAM,CAAC;AAAA,QACjF;AAAA,MACF;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;",
   "names": []
 }

package/dist/theme/ThemeProvider.js

@@ -3,9 +3,9 @@ import { Fragment, jsx } from "react/jsx-runtime";
 import * as React from "react";
 import { createContext, useContext } from "react";
 import { createLogger } from "@open-mercato/shared/lib/logger";
+import { THEME_STORAGE_KEY } from "./theme-init-script.js";
 const logger = createLogger("ui").child({ component: "ThemeProvider" });
 const ThemeContext = createContext(void 0);
-const THEME_STORAGE_KEY = "om-theme";
 function getSystemTheme() {
   if (typeof window === "undefined") return "light";
   return window.matchMedia("(prefers-color-scheme: dark)").matches ? "dark" : "light";

package/dist/theme/ThemeProvider.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/theme/ThemeProvider.tsx"],
-  "sourcesContent": ["'use client'\n\nimport * as React from 'react'\nimport { createContext, useContext } from 'react'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('ui').child({ component: 'ThemeProvider' })\n\nexport type Theme = 'light' | 'dark' | 'system'\n\ntype ThemeContextValue = {\n  theme: Theme\n  resolvedTheme: 'light' | 'dark'\n  setTheme: (theme: Theme) => void\n}\n\nconst ThemeContext = createContext<ThemeContextValue | undefined>(undefined)\n\nconst THEME_STORAGE_KEY = 'om-theme'\n\nfunction getSystemTheme(): 'light' | 'dark' {\n  if (typeof window === 'undefined') return 'light'\n  return window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light'\n}\n\nfunction getStoredTheme(): Theme {\n  if (typeof window === 'undefined') return 'system'\n  try {\n    const stored = localStorage.getItem(THEME_STORAGE_KEY)\n    if (stored === 'light' || stored === 'dark' || stored === 'system') {\n      return stored\n    }\n  } catch (error) {\n    // localStorage may be unavailable in private browsing, iframes, or restricted contexts\n    // Theme will default to system preference - this is expected graceful degradation\n    if (process.env.NODE_ENV === 'development') {\n      logger.warn('localStorage read failed', { err: error })\n    }\n  }\n  return 'system'\n}\n\nfunction applyTheme(resolvedTheme: 'light' | 'dark') {\n  const root = document.documentElement\n  if (resolvedTheme === 'dark') {\n    root.classList.add('dark')\n  } else {\n    root.classList.remove('dark')\n  }\n}\n\nexport function ThemeProvider({ children }: { children: React.ReactNode }) {\n  const [theme, setThemeState] = React.useState<Theme>('system')\n  const [resolvedTheme, setResolvedTheme] = React.useState<'light' | 'dark'>('light')\n  const [mounted, setMounted] = React.useState(false)\n\n  // Initialize theme from localStorage on mount\n  React.useEffect(() => {\n    const stored = getStoredTheme()\n    setThemeState(stored)\n    const resolved = stored === 'system' ? getSystemTheme() : stored\n    setResolvedTheme(resolved)\n    applyTheme(resolved)\n    setMounted(true)\n  }, [])\n\n  // Listen for system theme changes\n  React.useEffect(() => {\n    if (typeof window === 'undefined') return\n\n    const mediaQuery = window.matchMedia('(prefers-color-scheme: dark)')\n    const handleChange = () => {\n      if (theme === 'system') {\n        const newResolved = getSystemTheme()\n        setResolvedTheme(newResolved)\n        applyTheme(newResolved)\n      }\n    }\n\n    mediaQuery.addEventListener('change', handleChange)\n    return () => mediaQuery.removeEventListener('change', handleChange)\n  }, [theme])\n\n  const setTheme = React.useCallback((newTheme: Theme) => {\n    setThemeState(newTheme)\n    try {\n      localStorage.setItem(THEME_STORAGE_KEY, newTheme)\n    } catch (error) {\n      // localStorage may be unavailable - theme still works for this session, just won't persist\n      if (process.env.NODE_ENV === 'development') {\n        logger.warn('localStorage write failed', { err: error })\n      }\n    }\n    const resolved = newTheme === 'system' ? getSystemTheme() : newTheme\n    setResolvedTheme(resolved)\n    applyTheme(resolved)\n  }, [])\n\n  const value = React.useMemo(\n    () => ({ theme, resolvedTheme, setTheme }),\n    [theme, resolvedTheme, setTheme]\n  )\n\n  // Prevent flash of wrong theme during hydration\n  if (!mounted) {\n    return <>{children}</>\n  }\n\n  return <ThemeContext.Provider value={value}>{children}</ThemeContext.Provider>\n}\n\nexport function useTheme(): ThemeContextValue {\n  const context = useContext(ThemeContext)\n  if (context === undefined) {\n    // Return safe defaults when not in provider (e.g., server render)\n    return {\n      theme: 'system',\n      resolvedTheme: 'light',\n      setTheme: () => {},\n    }\n  }\n  return context\n}\n"],
-  "mappings": ";AAyGW;AAvGX,YAAY,WAAW;AACvB,SAAS,eAAe,kBAAkB;AAC1C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,IAAI,EAAE,MAAM,EAAE,WAAW,gBAAgB,CAAC;AAUtE,MAAM,eAAe,cAA6C,MAAS;AAE3E,MAAM,oBAAoB;AAE1B,SAAS,iBAAmC;AAC1C,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,SAAO,OAAO,WAAW,8BAA8B,EAAE,UAAU,SAAS;AAC9E;AAEA,SAAS,iBAAwB;AAC/B,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,MAAI;AACF,UAAM,SAAS,aAAa,QAAQ,iBAAiB;AACrD,QAAI,WAAW,WAAW,WAAW,UAAU,WAAW,UAAU;AAClE,aAAO;AAAA,IACT;AAAA,EACF,SAAS,OAAO;AAGd,QAAI,QAAQ,IAAI,aAAa,eAAe;AAC1C,aAAO,KAAK,4BAA4B,EAAE,KAAK,MAAM,CAAC;AAAA,IACxD;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,WAAW,eAAiC;AACnD,QAAM,OAAO,SAAS;AACtB,MAAI,kBAAkB,QAAQ;AAC5B,SAAK,UAAU,IAAI,MAAM;AAAA,EAC3B,OAAO;AACL,SAAK,UAAU,OAAO,MAAM;AAAA,EAC9B;AACF;AAEO,SAAS,cAAc,EAAE,SAAS,GAAkC;AACzE,QAAM,CAAC,OAAO,aAAa,IAAI,MAAM,SAAgB,QAAQ;AAC7D,QAAM,CAAC,eAAe,gBAAgB,IAAI,MAAM,SAA2B,OAAO;AAClF,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,KAAK;AAGlD,QAAM,UAAU,MAAM;AACpB,UAAM,SAAS,eAAe;AAC9B,kBAAc,MAAM;AACpB,UAAM,WAAW,WAAW,WAAW,eAAe,IAAI;AAC1D,qBAAiB,QAAQ;AACzB,eAAW,QAAQ;AACnB,eAAW,IAAI;AAAA,EACjB,GAAG,CAAC,CAAC;AAGL,QAAM,UAAU,MAAM;AACpB,QAAI,OAAO,WAAW,YAAa;AAEnC,UAAM,aAAa,OAAO,WAAW,8BAA8B;AACnE,UAAM,eAAe,MAAM;AACzB,UAAI,UAAU,UAAU;AACtB,cAAM,cAAc,eAAe;AACnC,yBAAiB,WAAW;AAC5B,mBAAW,WAAW;AAAA,MACxB;AAAA,IACF;AAEA,eAAW,iBAAiB,UAAU,YAAY;AAClD,WAAO,MAAM,WAAW,oBAAoB,UAAU,YAAY;AAAA,EACpE,GAAG,CAAC,KAAK,CAAC;AAEV,QAAM,WAAW,MAAM,YAAY,CAAC,aAAoB;AACtD,kBAAc,QAAQ;AACtB,QAAI;AACF,mBAAa,QAAQ,mBAAmB,QAAQ;AAAA,IAClD,SAAS,OAAO;AAEd,UAAI,QAAQ,IAAI,aAAa,eAAe;AAC1C,eAAO,KAAK,6BAA6B,EAAE,KAAK,MAAM,CAAC;AAAA,MACzD;AAAA,IACF;AACA,UAAM,WAAW,aAAa,WAAW,eAAe,IAAI;AAC5D,qBAAiB,QAAQ;AACzB,eAAW,QAAQ;AAAA,EACrB,GAAG,CAAC,CAAC;AAEL,QAAM,QAAQ,MAAM;AAAA,IAClB,OAAO,EAAE,OAAO,eAAe,SAAS;AAAA,IACxC,CAAC,OAAO,eAAe,QAAQ;AAAA,EACjC;AAGA,MAAI,CAAC,SAAS;AACZ,WAAO,gCAAG,UAAS;AAAA,EACrB;AAEA,SAAO,oBAAC,aAAa,UAAb,EAAsB,OAAe,UAAS;AACxD;AAEO,SAAS,WAA8B;AAC5C,QAAM,UAAU,WAAW,YAAY;AACvC,MAAI,YAAY,QAAW;AAEzB,WAAO;AAAA,MACL,OAAO;AAAA,MACP,eAAe;AAAA,MACf,UAAU,MAAM;AAAA,MAAC;AAAA,IACnB;AAAA,EACF;AACA,SAAO;AACT;",
+  "sourcesContent": ["'use client'\n\nimport * as React from 'react'\nimport { createContext, useContext } from 'react'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { THEME_STORAGE_KEY } from './theme-init-script'\n\nconst logger = createLogger('ui').child({ component: 'ThemeProvider' })\n\nexport type Theme = 'light' | 'dark' | 'system'\n\ntype ThemeContextValue = {\n  theme: Theme\n  resolvedTheme: 'light' | 'dark'\n  setTheme: (theme: Theme) => void\n}\n\nconst ThemeContext = createContext<ThemeContextValue | undefined>(undefined)\n\nfunction getSystemTheme(): 'light' | 'dark' {\n  if (typeof window === 'undefined') return 'light'\n  return window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light'\n}\n\nfunction getStoredTheme(): Theme {\n  if (typeof window === 'undefined') return 'system'\n  try {\n    const stored = localStorage.getItem(THEME_STORAGE_KEY)\n    if (stored === 'light' || stored === 'dark' || stored === 'system') {\n      return stored\n    }\n  } catch (error) {\n    // localStorage may be unavailable in private browsing, iframes, or restricted contexts\n    // Theme will default to system preference - this is expected graceful degradation\n    if (process.env.NODE_ENV === 'development') {\n      logger.warn('localStorage read failed', { err: error })\n    }\n  }\n  return 'system'\n}\n\nfunction applyTheme(resolvedTheme: 'light' | 'dark') {\n  const root = document.documentElement\n  if (resolvedTheme === 'dark') {\n    root.classList.add('dark')\n  } else {\n    root.classList.remove('dark')\n  }\n}\n\nexport function ThemeProvider({ children }: { children: React.ReactNode }) {\n  const [theme, setThemeState] = React.useState<Theme>('system')\n  const [resolvedTheme, setResolvedTheme] = React.useState<'light' | 'dark'>('light')\n  const [mounted, setMounted] = React.useState(false)\n\n  // Initialize theme from localStorage on mount\n  React.useEffect(() => {\n    const stored = getStoredTheme()\n    setThemeState(stored)\n    const resolved = stored === 'system' ? getSystemTheme() : stored\n    setResolvedTheme(resolved)\n    applyTheme(resolved)\n    setMounted(true)\n  }, [])\n\n  // Listen for system theme changes\n  React.useEffect(() => {\n    if (typeof window === 'undefined') return\n\n    const mediaQuery = window.matchMedia('(prefers-color-scheme: dark)')\n    const handleChange = () => {\n      if (theme === 'system') {\n        const newResolved = getSystemTheme()\n        setResolvedTheme(newResolved)\n        applyTheme(newResolved)\n      }\n    }\n\n    mediaQuery.addEventListener('change', handleChange)\n    return () => mediaQuery.removeEventListener('change', handleChange)\n  }, [theme])\n\n  const setTheme = React.useCallback((newTheme: Theme) => {\n    setThemeState(newTheme)\n    try {\n      localStorage.setItem(THEME_STORAGE_KEY, newTheme)\n    } catch (error) {\n      // localStorage may be unavailable - theme still works for this session, just won't persist\n      if (process.env.NODE_ENV === 'development') {\n        logger.warn('localStorage write failed', { err: error })\n      }\n    }\n    const resolved = newTheme === 'system' ? getSystemTheme() : newTheme\n    setResolvedTheme(resolved)\n    applyTheme(resolved)\n  }, [])\n\n  const value = React.useMemo(\n    () => ({ theme, resolvedTheme, setTheme }),\n    [theme, resolvedTheme, setTheme]\n  )\n\n  // Prevent flash of wrong theme during hydration\n  if (!mounted) {\n    return <>{children}</>\n  }\n\n  return <ThemeContext.Provider value={value}>{children}</ThemeContext.Provider>\n}\n\nexport function useTheme(): ThemeContextValue {\n  const context = useContext(ThemeContext)\n  if (context === undefined) {\n    // Return safe defaults when not in provider (e.g., server render)\n    return {\n      theme: 'system',\n      resolvedTheme: 'light',\n      setTheme: () => {},\n    }\n  }\n  return context\n}\n"],
+  "mappings": ";AAwGW;AAtGX,YAAY,WAAW;AACvB,SAAS,eAAe,kBAAkB;AAC1C,SAAS,oBAAoB;AAC7B,SAAS,yBAAyB;AAElC,MAAM,SAAS,aAAa,IAAI,EAAE,MAAM,EAAE,WAAW,gBAAgB,CAAC;AAUtE,MAAM,eAAe,cAA6C,MAAS;AAE3E,SAAS,iBAAmC;AAC1C,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,SAAO,OAAO,WAAW,8BAA8B,EAAE,UAAU,SAAS;AAC9E;AAEA,SAAS,iBAAwB;AAC/B,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,MAAI;AACF,UAAM,SAAS,aAAa,QAAQ,iBAAiB;AACrD,QAAI,WAAW,WAAW,WAAW,UAAU,WAAW,UAAU;AAClE,aAAO;AAAA,IACT;AAAA,EACF,SAAS,OAAO;AAGd,QAAI,QAAQ,IAAI,aAAa,eAAe;AAC1C,aAAO,KAAK,4BAA4B,EAAE,KAAK,MAAM,CAAC;AAAA,IACxD;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,WAAW,eAAiC;AACnD,QAAM,OAAO,SAAS;AACtB,MAAI,kBAAkB,QAAQ;AAC5B,SAAK,UAAU,IAAI,MAAM;AAAA,EAC3B,OAAO;AACL,SAAK,UAAU,OAAO,MAAM;AAAA,EAC9B;AACF;AAEO,SAAS,cAAc,EAAE,SAAS,GAAkC;AACzE,QAAM,CAAC,OAAO,aAAa,IAAI,MAAM,SAAgB,QAAQ;AAC7D,QAAM,CAAC,eAAe,gBAAgB,IAAI,MAAM,SAA2B,OAAO;AAClF,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,KAAK;AAGlD,QAAM,UAAU,MAAM;AACpB,UAAM,SAAS,eAAe;AAC9B,kBAAc,MAAM;AACpB,UAAM,WAAW,WAAW,WAAW,eAAe,IAAI;AAC1D,qBAAiB,QAAQ;AACzB,eAAW,QAAQ;AACnB,eAAW,IAAI;AAAA,EACjB,GAAG,CAAC,CAAC;AAGL,QAAM,UAAU,MAAM;AACpB,QAAI,OAAO,WAAW,YAAa;AAEnC,UAAM,aAAa,OAAO,WAAW,8BAA8B;AACnE,UAAM,eAAe,MAAM;AACzB,UAAI,UAAU,UAAU;AACtB,cAAM,cAAc,eAAe;AACnC,yBAAiB,WAAW;AAC5B,mBAAW,WAAW;AAAA,MACxB;AAAA,IACF;AAEA,eAAW,iBAAiB,UAAU,YAAY;AAClD,WAAO,MAAM,WAAW,oBAAoB,UAAU,YAAY;AAAA,EACpE,GAAG,CAAC,KAAK,CAAC;AAEV,QAAM,WAAW,MAAM,YAAY,CAAC,aAAoB;AACtD,kBAAc,QAAQ;AACtB,QAAI;AACF,mBAAa,QAAQ,mBAAmB,QAAQ;AAAA,IAClD,SAAS,OAAO;AAEd,UAAI,QAAQ,IAAI,aAAa,eAAe;AAC1C,eAAO,KAAK,6BAA6B,EAAE,KAAK,MAAM,CAAC;AAAA,MACzD;AAAA,IACF;AACA,UAAM,WAAW,aAAa,WAAW,eAAe,IAAI;AAC5D,qBAAiB,QAAQ;AACzB,eAAW,QAAQ;AAAA,EACrB,GAAG,CAAC,CAAC;AAEL,QAAM,QAAQ,MAAM;AAAA,IAClB,OAAO,EAAE,OAAO,eAAe,SAAS;AAAA,IACxC,CAAC,OAAO,eAAe,QAAQ;AAAA,EACjC;AAGA,MAAI,CAAC,SAAS;AACZ,WAAO,gCAAG,UAAS;AAAA,EACrB;AAEA,SAAO,oBAAC,aAAa,UAAb,EAAsB,OAAe,UAAS;AACxD;AAEO,SAAS,WAA8B;AAC5C,QAAM,UAAU,WAAW,YAAY;AACvC,MAAI,YAAY,QAAW;AAEzB,WAAO;AAAA,MACL,OAAO;AAAA,MACP,eAAe;AAAA,MACf,UAAU,MAAM;AAAA,MAAC;AAAA,IACnB;AAAA,EACF;AACA,SAAO;AACT;",
   "names": []
 }

package/dist/theme/index.js

@@ -1,8 +1,11 @@
 import { ThemeProvider, useTheme } from "./ThemeProvider.js";
+import { THEME_INIT_SCRIPT, THEME_STORAGE_KEY } from "./theme-init-script.js";
 import { ThemeToggle } from "./ThemeToggle.js";
 import { QueryProvider } from "./QueryProvider.js";
 export {
   QueryProvider,
+  THEME_INIT_SCRIPT,
+  THEME_STORAGE_KEY,
   ThemeProvider,
   ThemeToggle,
   useTheme

package/dist/theme/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/theme/index.ts"],
-  "sourcesContent": ["export { ThemeProvider, useTheme } from './ThemeProvider'\nexport { ThemeToggle } from './ThemeToggle'\nexport { QueryProvider } from './QueryProvider'\n"],
-  "mappings": "AAAA,SAAS,eAAe,gBAAgB;AACxC,SAAS,mBAAmB;AAC5B,SAAS,qBAAqB;",
+  "sourcesContent": ["export { ThemeProvider, useTheme } from './ThemeProvider'\nexport { THEME_INIT_SCRIPT, THEME_STORAGE_KEY } from './theme-init-script'\nexport { ThemeToggle } from './ThemeToggle'\nexport { QueryProvider } from './QueryProvider'\n"],
+  "mappings": "AAAA,SAAS,eAAe,gBAAgB;AACxC,SAAS,mBAAmB,yBAAyB;AACrD,SAAS,mBAAmB;AAC5B,SAAS,qBAAqB;",
   "names": []
 }

package/dist/theme/theme-init-script.js

@@ -0,0 +1,17 @@
+const THEME_STORAGE_KEY = "om-theme";
+const THEME_INIT_SCRIPT = `
+(function () {
+  try {
+    var stored = localStorage.getItem(${JSON.stringify(THEME_STORAGE_KEY)});
+    var theme = stored === 'dark' ? 'dark'
+      : stored === 'light' ? 'light'
+      : window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light';
+    if (theme === 'dark') document.documentElement.classList.add('dark');
+  } catch (error) {}
+})();
+`;
+export {
+  THEME_INIT_SCRIPT,
+  THEME_STORAGE_KEY
+};
+//# sourceMappingURL=theme-init-script.js.map

package/dist/theme/theme-init-script.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/theme/theme-init-script.ts"],
+  "sourcesContent": ["export const THEME_STORAGE_KEY = 'om-theme'\n\n/**\n * Inline source for the root layout's theme initializer.\n *\n * It MUST be rendered as a plain, non-deferred `<script>` element so the browser\n * executes it while parsing the document, before the first paint. Deferring it \u2014\n * for example through `next/script` with `strategy=\"beforeInteractive\"`, which in\n * the App Router only queues the code onto `self.__next_s` for the client runtime\n * to replay once hydration starts \u2014 makes the page paint in light theme first and\n * flash to dark afterwards.\n */\nexport const THEME_INIT_SCRIPT = `\n(function () {\n  try {\n    var stored = localStorage.getItem(${JSON.stringify(THEME_STORAGE_KEY)});\n    var theme = stored === 'dark' ? 'dark'\n      : stored === 'light' ? 'light'\n      : window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light';\n    if (theme === 'dark') document.documentElement.classList.add('dark');\n  } catch (error) {}\n})();\n`\n"],
+  "mappings": "AAAO,MAAM,oBAAoB;AAY1B,MAAM,oBAAoB;AAAA;AAAA;AAAA,wCAGO,KAAK,UAAU,iBAAiB,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;",
+  "names": []
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/ui",
-  "version": "0.6.7-develop.6870.1.b69802067a",
+  "version": "0.6.8-develop.6874.1.982d6097d8",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -155,14 +155,14 @@
     "remark-gfm": "^4.0.1"
   },
   "peerDependencies": {
-    "@open-mercato/shared": "0.6.7-develop.6870.1.b69802067a",
+    "@open-mercato/shared": "0.6.8-develop.6874.1.982d6097d8",
     "react": ">=18.0.0",
     "react-dom": ">=18.0.0",
     "react-is": ">=18.0.0"
   },
   "devDependencies": {
     "@figma/code-connect": "^1.3.4",
-    "@open-mercato/shared": "0.6.7-develop.6870.1.b69802067a",
+    "@open-mercato/shared": "0.6.8-develop.6874.1.982d6097d8",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^7.0.0",
     "@testing-library/react": "^16.3.1",
@@ -186,5 +186,5 @@
     "url": "https://github.com/open-mercato/open-mercato",
     "directory": "packages/ui"
   },
-  "stableVersion": "0.6.6"
+  "stableVersion": "0.6.7"
 }

package/src/backend/utils/__tests__/api.test.ts

@@ -149,6 +149,33 @@ describe('apiFetch', () => {
     expect(flash).not.toHaveBeenCalled()
   })
 
+  it('stays silent when a login-page 401 lands after the post-login navigation', async () => {
+    window.history.pushState({}, '', '/login')
+    ;(window as unknown as Record<string, unknown>).__omOriginalFetch = jest.fn(async () => {
+      // The sign-in completes while the pre-auth probe is still in flight, so the
+      // app has already client-navigated to /backend when the 401 arrives.
+      window.history.pushState({}, '', '/backend')
+      return createMockResponse(401, { error: 'Unauthorized' })
+    })
+
+    const result = await apiFetch('/api/auth/feature-check', { method: 'POST' })
+
+    expect(result.status).toBe(401)
+    expect(flash).not.toHaveBeenCalled()
+  })
+
+  it('stays silent when a 401 lands after navigating to the login page', async () => {
+    ;(window as unknown as Record<string, unknown>).__omOriginalFetch = jest.fn(async () => {
+      window.history.pushState({}, '', '/login')
+      return createMockResponse(401, { error: 'Unauthorized' })
+    })
+
+    const result = await apiFetch('/api/private')
+
+    expect(result.status).toBe(401)
+    expect(flash).not.toHaveBeenCalled()
+  })
+
   it('throws UnauthorizedError for 401 responses by default', async () => {
     ;(window as unknown as Record<string, unknown>).__omOriginalFetch = jest.fn(async () =>
       createMockResponse(401, { error: 'Unauthorized' }),

package/src/backend/utils/api.ts

@@ -47,6 +47,18 @@ export async function withScopedApiHeaders<T>(headers: Record<string, string>, r
   return scopedHeaders.withScopedHeaders(headers, run)
 }
 
+function readPathname(): string {
+  return typeof window !== 'undefined' ? window.location?.pathname ?? '' : ''
+}
+
+function isLoginPathname(pathname: string): boolean {
+  return pathname.startsWith('/login')
+}
+
+function isPortalPathname(pathname: string): boolean {
+  return /\/[^/]+\/portal(\/|$)/.test(pathname)
+}
+
 export class UnauthorizedError extends Error {
   readonly status = 401
   constructor(message = 'Unauthorized') {
@@ -166,10 +178,15 @@ export async function apiFetch(input: RequestInfo | URL, init?: RequestInit): Pr
   const requestHeaders = new Headers(mergedInit?.headers)
   const disableUnauthorizedRedirect = readRedirectOverride(requestHeaders, 'x-om-unauthorized-redirect')
   const disableForbiddenRedirect = readRedirectOverride(requestHeaders, 'x-om-forbidden-redirect')
+  // Snapshot the pathname BEFORE the request is sent. A 401 for a request that
+  // started on the login page must stay silent even when the response lands after
+  // the post-login client-side navigation to /backend — otherwise the stale
+  // pre-auth 401 raises a bogus "Session expired" banner right after signing in.
+  const requestPathname = readPathname()
   const res = await baseFetch(input, mergedInit)
-  const pathname = typeof window !== 'undefined' ? window.location.pathname : ''
-  const onLoginPage = pathname.startsWith('/login')
-  const onPortalRoute = /\/[^/]+\/portal(\/|$)/.test(pathname)
+  const responsePathname = readPathname()
+  const onLoginPage = isLoginPathname(requestPathname) || isLoginPathname(responsePathname)
+  const onPortalRoute = isPortalPathname(requestPathname) || isPortalPathname(responsePathname)
   if (res.status === 401) {
     // Trigger same redirect flow as protected pages
     // Skip for staff login page and all portal routes (portal has its own auth)

package/src/theme/ThemeProvider.tsx

@@ -3,6 +3,7 @@
 import * as React from 'react'
 import { createContext, useContext } from 'react'
 import { createLogger } from '@open-mercato/shared/lib/logger'
+import { THEME_STORAGE_KEY } from './theme-init-script'
 
 const logger = createLogger('ui').child({ component: 'ThemeProvider' })
 
@@ -16,8 +17,6 @@ type ThemeContextValue = {
 
 const ThemeContext = createContext<ThemeContextValue | undefined>(undefined)
 
-const THEME_STORAGE_KEY = 'om-theme'
-
 function getSystemTheme(): 'light' | 'dark' {
   if (typeof window === 'undefined') return 'light'
   return window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light'

package/src/theme/__tests__/theme-init-script.test.ts

@@ -0,0 +1,70 @@
+import { THEME_INIT_SCRIPT, THEME_STORAGE_KEY } from '../theme-init-script'
+
+function mockSystemTheme(prefersDark: boolean) {
+  Object.defineProperty(window, 'matchMedia', {
+    writable: true,
+    configurable: true,
+    value: (query: string) => ({
+      matches: query.includes('prefers-color-scheme: dark') ? prefersDark : false,
+      media: query,
+      addEventListener: () => {},
+      removeEventListener: () => {},
+    }),
+  })
+}
+
+function runThemeInitScript() {
+  new Function(THEME_INIT_SCRIPT)()
+}
+
+describe('THEME_INIT_SCRIPT', () => {
+  beforeEach(() => {
+    document.documentElement.classList.remove('dark')
+    window.localStorage.clear()
+    jest.restoreAllMocks()
+  })
+
+  it('applies the dark class when the stored preference is dark', () => {
+    window.localStorage.setItem(THEME_STORAGE_KEY, 'dark')
+    mockSystemTheme(false)
+
+    runThemeInitScript()
+
+    expect(document.documentElement.classList.contains('dark')).toBe(true)
+  })
+
+  it('keeps the light theme when the stored preference is light, even if the system prefers dark', () => {
+    window.localStorage.setItem(THEME_STORAGE_KEY, 'light')
+    mockSystemTheme(true)
+
+    runThemeInitScript()
+
+    expect(document.documentElement.classList.contains('dark')).toBe(false)
+  })
+
+  it('falls back to the system preference when nothing is stored', () => {
+    mockSystemTheme(true)
+
+    runThemeInitScript()
+
+    expect(document.documentElement.classList.contains('dark')).toBe(true)
+  })
+
+  it('stays on the light theme when nothing is stored and the system prefers light', () => {
+    mockSystemTheme(false)
+
+    runThemeInitScript()
+
+    expect(document.documentElement.classList.contains('dark')).toBe(false)
+  })
+
+  it('degrades gracefully when localStorage is unavailable', () => {
+    jest.spyOn(Storage.prototype, 'getItem').mockImplementation(() => {
+      throw new Error('localStorage is blocked')
+    })
+    mockSystemTheme(true)
+
+    expect(() => runThemeInitScript()).not.toThrow()
+    expect(document.documentElement.classList.contains('dark')).toBe(false)
+  })
+})

package/src/theme/index.ts

@@ -1,3 +1,4 @@
 export { ThemeProvider, useTheme } from './ThemeProvider'
+export { THEME_INIT_SCRIPT, THEME_STORAGE_KEY } from './theme-init-script'
 export { ThemeToggle } from './ThemeToggle'
 export { QueryProvider } from './QueryProvider'

package/src/theme/theme-init-script.ts

@@ -0,0 +1,23 @@
+export const THEME_STORAGE_KEY = 'om-theme'
+
+/**
+ * Inline source for the root layout's theme initializer.
+ *
+ * It MUST be rendered as a plain, non-deferred `<script>` element so the browser
+ * executes it while parsing the document, before the first paint. Deferring it —
+ * for example through `next/script` with `strategy="beforeInteractive"`, which in
+ * the App Router only queues the code onto `self.__next_s` for the client runtime
+ * to replay once hydration starts — makes the page paint in light theme first and
+ * flash to dark afterwards.
+ */
+export const THEME_INIT_SCRIPT = `
+(function () {
+  try {
+    var stored = localStorage.getItem(${JSON.stringify(THEME_STORAGE_KEY)});
+    var theme = stored === 'dark' ? 'dark'
+      : stored === 'light' ? 'light'
+      : window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light';
+    if (theme === 'dark') document.documentElement.classList.add('dark');
+  } catch (error) {}
+})();
+`