@open-mercato/ui 0.6.7 → 0.6.8-develop.6874.1.982d6097d8

package/dist/backend/AuthSessionGuard.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/backend/AuthSessionGuard.tsx"],
-  "sourcesContent": ["'use client'\nimport * as React from 'react'\nimport { apiCall } from './utils/apiCall'\n\nexport const AUTH_IDENTITY_STORAGE_KEY = 'om:auth:identity'\nexport const AUTH_IDENTITY_BROADCAST_CHANNEL = 'om-auth-identity'\n\ntype FeatureCheckResponse = {\n  ok: boolean\n  granted?: string[]\n  userId?: string\n}\n\nexport type AuthSessionGuardProps = {\n  serverUserId: string | null\n}\n\nexport const __reload = {\n  fn: (): void => {\n    if (typeof window !== 'undefined') window.location.reload()\n  },\n}\n\nexport function AuthSessionGuard({ serverUserId }: AuthSessionGuardProps) {\n  React.useEffect(() => {\n    if (typeof window === 'undefined') return\n    let cancelled = false\n    let reloadScheduled = false\n\n    const triggerReload = () => {\n      if (reloadScheduled) return\n      reloadScheduled = true\n      __reload.fn()\n    }\n\n    const checkIdentity = async () => {\n      if (cancelled || reloadScheduled) return\n      try {\n        const res = await apiCall<FeatureCheckResponse>('/api/auth/feature-check', {\n          method: 'POST',\n          headers: { 'content-type': 'application/json' },\n          body: JSON.stringify({ features: [] }),\n          cache: 'no-store',\n        })\n        if (cancelled || reloadScheduled) return\n        if (res.status === 401) {\n          if (serverUserId) triggerReload()\n          return\n        }\n        if (!res.ok) return\n        const currentUserId = typeof res.result?.userId === 'string' ? res.result.userId : null\n        if (!currentUserId) return\n        if (currentUserId !== serverUserId) triggerReload()\n      } catch {\n        // network errors are ignored \u2014 next focus/storage event retries\n      }\n    }\n\n    const onVisibilityOrFocus = () => {\n      if (typeof document !== 'undefined' && document.visibilityState === 'hidden') return\n      void checkIdentity()\n    }\n\n    const onStorage = (event: StorageEvent) => {\n      if (event.key !== AUTH_IDENTITY_STORAGE_KEY) return\n      void checkIdentity()\n    }\n\n    let broadcastChannel: BroadcastChannel | null = null\n    if (typeof BroadcastChannel !== 'undefined') {\n      try {\n        broadcastChannel = new BroadcastChannel(AUTH_IDENTITY_BROADCAST_CHANNEL)\n        broadcastChannel.onmessage = () => { void checkIdentity() }\n      } catch {\n        broadcastChannel = null\n      }\n    }\n\n    window.addEventListener('focus', onVisibilityOrFocus)\n    document.addEventListener('visibilitychange', onVisibilityOrFocus)\n    window.addEventListener('storage', onStorage)\n\n    return () => {\n      cancelled = true\n      window.removeEventListener('focus', onVisibilityOrFocus)\n      document.removeEventListener('visibilitychange', onVisibilityOrFocus)\n      window.removeEventListener('storage', onStorage)\n      if (broadcastChannel) {\n        broadcastChannel.onmessage = null\n        broadcastChannel.close()\n      }\n    }\n  }, [serverUserId])\n\n  return null\n}\n\nexport function notifyAuthIdentityChange(): void {\n  if (typeof window === 'undefined') return\n  try {\n    if (typeof BroadcastChannel !== 'undefined') {\n      const channel = new BroadcastChannel(AUTH_IDENTITY_BROADCAST_CHANNEL)\n      channel.postMessage('changed')\n      channel.close()\n    }\n  } catch {\n    // ignore \u2014 fall back to storage event below\n  }\n  try {\n    window.localStorage.setItem(AUTH_IDENTITY_STORAGE_KEY, String(Date.now()))\n  } catch {\n    // private mode / quota errors are non-fatal\n  }\n}\n"],
-  "mappings": ";AACA,YAAY,WAAW;AACvB,SAAS,eAAe;AAEjB,MAAM,4BAA4B;AAClC,MAAM,kCAAkC;AAYxC,MAAM,WAAW;AAAA,EACtB,IAAI,MAAY;AACd,QAAI,OAAO,WAAW,YAAa,QAAO,SAAS,OAAO;AAAA,EAC5D;AACF;AAEO,SAAS,iBAAiB,EAAE,aAAa,GAA0B;AACxE,QAAM,UAAU,MAAM;AACpB,QAAI,OAAO,WAAW,YAAa;AACnC,QAAI,YAAY;AAChB,QAAI,kBAAkB;AAEtB,UAAM,gBAAgB,MAAM;AAC1B,UAAI,gBAAiB;AACrB,wBAAkB;AAClB,eAAS,GAAG;AAAA,IACd;AAEA,UAAM,gBAAgB,YAAY;AAChC,UAAI,aAAa,gBAAiB;AAClC,UAAI;AACF,cAAM,MAAM,MAAM,QAA8B,2BAA2B;AAAA,UACzE,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC;AAAA,UACrC,OAAO;AAAA,QACT,CAAC;AACD,YAAI,aAAa,gBAAiB;AAClC,YAAI,IAAI,WAAW,KAAK;AACtB,cAAI,aAAc,eAAc;AAChC;AAAA,QACF;AACA,YAAI,CAAC,IAAI,GAAI;AACb,cAAM,gBAAgB,OAAO,IAAI,QAAQ,WAAW,WAAW,IAAI,OAAO,SAAS;AACnF,YAAI,CAAC,cAAe;AACpB,YAAI,kBAAkB,aAAc,eAAc;AAAA,MACpD,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,UAAM,sBAAsB,MAAM;AAChC,UAAI,OAAO,aAAa,eAAe,SAAS,oBAAoB,SAAU;AAC9E,WAAK,cAAc;AAAA,IACrB;AAEA,UAAM,YAAY,CAAC,UAAwB;AACzC,UAAI,MAAM,QAAQ,0BAA2B;AAC7C,WAAK,cAAc;AAAA,IACrB;AAEA,QAAI,mBAA4C;AAChD,QAAI,OAAO,qBAAqB,aAAa;AAC3C,UAAI;AACF,2BAAmB,IAAI,iBAAiB,+BAA+B;AACvE,yBAAiB,YAAY,MAAM;AAAE,eAAK,cAAc;AAAA,QAAE;AAAA,MAC5D,QAAQ;AACN,2BAAmB;AAAA,MACrB;AAAA,IACF;AAEA,WAAO,iBAAiB,SAAS,mBAAmB;AACpD,aAAS,iBAAiB,oBAAoB,mBAAmB;AACjE,WAAO,iBAAiB,WAAW,SAAS;AAE5C,WAAO,MAAM;AACX,kBAAY;AACZ,aAAO,oBAAoB,SAAS,mBAAmB;AACvD,eAAS,oBAAoB,oBAAoB,mBAAmB;AACpE,aAAO,oBAAoB,WAAW,SAAS;AAC/C,UAAI,kBAAkB;AACpB,yBAAiB,YAAY;AAC7B,yBAAiB,MAAM;AAAA,MACzB;AAAA,IACF;AAAA,EACF,GAAG,CAAC,YAAY,CAAC;AAEjB,SAAO;AACT;AAEO,SAAS,2BAAiC;AAC/C,MAAI,OAAO,WAAW,YAAa;AACnC,MAAI;AACF,QAAI,OAAO,qBAAqB,aAAa;AAC3C,YAAM,UAAU,IAAI,iBAAiB,+BAA+B;AACpE,cAAQ,YAAY,SAAS;AAC7B,cAAQ,MAAM;AAAA,IAChB;AAAA,EACF,QAAQ;AAAA,EAER;AACA,MAAI;AACF,WAAO,aAAa,QAAQ,2BAA2B,OAAO,KAAK,IAAI,CAAC,CAAC;AAAA,EAC3E,QAAQ;AAAA,EAER;AACF;",
+  "sourcesContent": ["'use client'\nimport * as React from 'react'\nimport { apiCall } from './utils/apiCall'\nimport { clearAllPerspectiveState } from './perspectiveState'\n\nexport const AUTH_IDENTITY_STORAGE_KEY = 'om:auth:identity'\nexport const AUTH_IDENTITY_BROADCAST_CHANNEL = 'om-auth-identity'\nexport const AUTH_IDENTITY_USER_STORAGE_KEY = 'om:auth:identity:user'\n\n/**\n * Purge browser-local DataTable perspective state whenever the backend renders for a\n * different user than the one it last rendered for (#4185).\n *\n * The login form also purges on submit, but that only fires when its client handler\n * runs: a form submitted before hydration, an SSO/magic-link return, or any other\n * entry point into the backend bypasses it entirely and the previous account's unsaved\n * column widths carry over. Anchoring the purge to the observed server identity covers\n * every route into the backend instead of one form.\n *\n * Missing identity metadata is treated as a legacy browser state and purged once:\n * snapshots may predate this marker and belong to a different account. After the\n * marker is recorded, an account's own unsaved widths survive a plain reload.\n */\nfunction purgePerspectiveStateOnIdentityChange(serverUserId: string | null): void {\n  if (typeof window === 'undefined' || !serverUserId) return\n  try {\n    const lastSeenUserId = window.localStorage.getItem(AUTH_IDENTITY_USER_STORAGE_KEY)\n    if (lastSeenUserId === serverUserId) return\n    clearAllPerspectiveState()\n    window.localStorage.setItem(AUTH_IDENTITY_USER_STORAGE_KEY, serverUserId)\n  } catch {\n    // private mode / quota errors are non-fatal\n  }\n}\n\ntype FeatureCheckResponse = {\n  ok: boolean\n  granted?: string[]\n  userId?: string\n}\n\nexport type AuthSessionGuardProps = {\n  serverUserId: string | null\n}\n\nexport const __reload = {\n  fn: (): void => {\n    if (typeof window !== 'undefined') window.location.reload()\n  },\n}\n\nexport function AuthSessionGuard({ serverUserId }: AuthSessionGuardProps) {\n  React.useEffect(() => {\n    if (typeof window === 'undefined') return\n    purgePerspectiveStateOnIdentityChange(serverUserId)\n    let cancelled = false\n    let reloadScheduled = false\n\n    const triggerReload = () => {\n      if (reloadScheduled) return\n      reloadScheduled = true\n      __reload.fn()\n    }\n\n    const checkIdentity = async () => {\n      if (cancelled || reloadScheduled) return\n      try {\n        const res = await apiCall<FeatureCheckResponse>('/api/auth/feature-check', {\n          method: 'POST',\n          headers: { 'content-type': 'application/json' },\n          body: JSON.stringify({ features: [] }),\n          cache: 'no-store',\n        })\n        if (cancelled || reloadScheduled) return\n        if (res.status === 401) {\n          if (serverUserId) triggerReload()\n          return\n        }\n        if (!res.ok) return\n        const currentUserId = typeof res.result?.userId === 'string' ? res.result.userId : null\n        if (!currentUserId) return\n        if (currentUserId !== serverUserId) triggerReload()\n      } catch {\n        // network errors are ignored \u2014 next focus/storage event retries\n      }\n    }\n\n    const onVisibilityOrFocus = () => {\n      if (typeof document !== 'undefined' && document.visibilityState === 'hidden') return\n      void checkIdentity()\n    }\n\n    const onStorage = (event: StorageEvent) => {\n      if (event.key !== AUTH_IDENTITY_STORAGE_KEY) return\n      void checkIdentity()\n    }\n\n    let broadcastChannel: BroadcastChannel | null = null\n    if (typeof BroadcastChannel !== 'undefined') {\n      try {\n        broadcastChannel = new BroadcastChannel(AUTH_IDENTITY_BROADCAST_CHANNEL)\n        broadcastChannel.onmessage = () => { void checkIdentity() }\n      } catch {\n        broadcastChannel = null\n      }\n    }\n\n    window.addEventListener('focus', onVisibilityOrFocus)\n    document.addEventListener('visibilitychange', onVisibilityOrFocus)\n    window.addEventListener('storage', onStorage)\n\n    return () => {\n      cancelled = true\n      window.removeEventListener('focus', onVisibilityOrFocus)\n      document.removeEventListener('visibilitychange', onVisibilityOrFocus)\n      window.removeEventListener('storage', onStorage)\n      if (broadcastChannel) {\n        broadcastChannel.onmessage = null\n        broadcastChannel.close()\n      }\n    }\n  }, [serverUserId])\n\n  return null\n}\n\nexport function notifyAuthIdentityChange(): void {\n  if (typeof window === 'undefined') return\n  try {\n    if (typeof BroadcastChannel !== 'undefined') {\n      const channel = new BroadcastChannel(AUTH_IDENTITY_BROADCAST_CHANNEL)\n      channel.postMessage('changed')\n      channel.close()\n    }\n  } catch {\n    // ignore \u2014 fall back to storage event below\n  }\n  try {\n    window.localStorage.setItem(AUTH_IDENTITY_STORAGE_KEY, String(Date.now()))\n  } catch {\n    // private mode / quota errors are non-fatal\n  }\n}\n"],
+  "mappings": ";AACA,YAAY,WAAW;AACvB,SAAS,eAAe;AACxB,SAAS,gCAAgC;AAElC,MAAM,4BAA4B;AAClC,MAAM,kCAAkC;AACxC,MAAM,iCAAiC;AAgB9C,SAAS,sCAAsC,cAAmC;AAChF,MAAI,OAAO,WAAW,eAAe,CAAC,aAAc;AACpD,MAAI;AACF,UAAM,iBAAiB,OAAO,aAAa,QAAQ,8BAA8B;AACjF,QAAI,mBAAmB,aAAc;AACrC,6BAAyB;AACzB,WAAO,aAAa,QAAQ,gCAAgC,YAAY;AAAA,EAC1E,QAAQ;AAAA,EAER;AACF;AAYO,MAAM,WAAW;AAAA,EACtB,IAAI,MAAY;AACd,QAAI,OAAO,WAAW,YAAa,QAAO,SAAS,OAAO;AAAA,EAC5D;AACF;AAEO,SAAS,iBAAiB,EAAE,aAAa,GAA0B;AACxE,QAAM,UAAU,MAAM;AACpB,QAAI,OAAO,WAAW,YAAa;AACnC,0CAAsC,YAAY;AAClD,QAAI,YAAY;AAChB,QAAI,kBAAkB;AAEtB,UAAM,gBAAgB,MAAM;AAC1B,UAAI,gBAAiB;AACrB,wBAAkB;AAClB,eAAS,GAAG;AAAA,IACd;AAEA,UAAM,gBAAgB,YAAY;AAChC,UAAI,aAAa,gBAAiB;AAClC,UAAI;AACF,cAAM,MAAM,MAAM,QAA8B,2BAA2B;AAAA,UACzE,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC;AAAA,UACrC,OAAO;AAAA,QACT,CAAC;AACD,YAAI,aAAa,gBAAiB;AAClC,YAAI,IAAI,WAAW,KAAK;AACtB,cAAI,aAAc,eAAc;AAChC;AAAA,QACF;AACA,YAAI,CAAC,IAAI,GAAI;AACb,cAAM,gBAAgB,OAAO,IAAI,QAAQ,WAAW,WAAW,IAAI,OAAO,SAAS;AACnF,YAAI,CAAC,cAAe;AACpB,YAAI,kBAAkB,aAAc,eAAc;AAAA,MACpD,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,UAAM,sBAAsB,MAAM;AAChC,UAAI,OAAO,aAAa,eAAe,SAAS,oBAAoB,SAAU;AAC9E,WAAK,cAAc;AAAA,IACrB;AAEA,UAAM,YAAY,CAAC,UAAwB;AACzC,UAAI,MAAM,QAAQ,0BAA2B;AAC7C,WAAK,cAAc;AAAA,IACrB;AAEA,QAAI,mBAA4C;AAChD,QAAI,OAAO,qBAAqB,aAAa;AAC3C,UAAI;AACF,2BAAmB,IAAI,iBAAiB,+BAA+B;AACvE,yBAAiB,YAAY,MAAM;AAAE,eAAK,cAAc;AAAA,QAAE;AAAA,MAC5D,QAAQ;AACN,2BAAmB;AAAA,MACrB;AAAA,IACF;AAEA,WAAO,iBAAiB,SAAS,mBAAmB;AACpD,aAAS,iBAAiB,oBAAoB,mBAAmB;AACjE,WAAO,iBAAiB,WAAW,SAAS;AAE5C,WAAO,MAAM;AACX,kBAAY;AACZ,aAAO,oBAAoB,SAAS,mBAAmB;AACvD,eAAS,oBAAoB,oBAAoB,mBAAmB;AACpE,aAAO,oBAAoB,WAAW,SAAS;AAC/C,UAAI,kBAAkB;AACpB,yBAAiB,YAAY;AAC7B,yBAAiB,MAAM;AAAA,MACzB;AAAA,IACF;AAAA,EACF,GAAG,CAAC,YAAY,CAAC;AAEjB,SAAO;AACT;AAEO,SAAS,2BAAiC;AAC/C,MAAI,OAAO,WAAW,YAAa;AACnC,MAAI;AACF,QAAI,OAAO,qBAAqB,aAAa;AAC3C,YAAM,UAAU,IAAI,iBAAiB,+BAA+B;AACpE,cAAQ,YAAY,SAAS;AAC7B,cAAQ,MAAM;AAAA,IAChB;AAAA,EACF,QAAQ;AAAA,EAER;AACA,MAAI;AACF,WAAO,aAAa,QAAQ,2BAA2B,OAAO,KAAK,IAAI,CAAC,CAAC;AAAA,EAC3E,QAAQ;AAAA,EAER;AACF;",
   "names": []
 }

package/dist/backend/BackendChromeProvider.js

@@ -78,8 +78,13 @@ function useBackendChrome() {
     }
   };
 }
+function useCurrentOrganization() {
+  const { payload } = useBackendChrome();
+  return payload?.currentOrganization ?? null;
+}
 export {
   BackendChromeProvider,
-  useBackendChrome
+  useBackendChrome,
+  useCurrentOrganization
 };
 //# sourceMappingURL=BackendChromeProvider.js.map

package/dist/backend/BackendChromeProvider.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/backend/BackendChromeProvider.tsx"],
-  "sourcesContent": ["'use client'\n\nimport * as React from 'react'\nimport { apiCall } from './utils/apiCall'\nimport { subscribeOrganizationScopeChanged, getCurrentOrganizationScopeVersion } from '@open-mercato/shared/lib/frontend/organizationEvents'\nimport type { BackendChromePayload } from '@open-mercato/shared/modules/navigation/backendChrome'\n\ntype BackendChromeContextValue = {\n  payload: BackendChromePayload | null\n  isLoading: boolean\n  isReady: boolean\n  refresh: () => Promise<void>\n}\n\ntype BackendChromeProviderProps = {\n  adminNavApi?: string\n  children: React.ReactNode\n}\n\nconst chromeCache = new Map<string, BackendChromePayload>()\nconst BackendChromeContext = React.createContext<BackendChromeContextValue | null>(null)\n\nfunction buildCacheKey(api: string): string {\n  return `${api}::scope:${getCurrentOrganizationScopeVersion()}`\n}\n\nexport function BackendChromeProvider({ adminNavApi, children }: BackendChromeProviderProps) {\n  const cachedPayload = React.useMemo(() => {\n    if (!adminNavApi) return null\n    return chromeCache.get(buildCacheKey(adminNavApi)) ?? null\n  }, [adminNavApi])\n  const [payload, setPayload] = React.useState<BackendChromePayload | null>(cachedPayload)\n  const [isLoading, setIsLoading] = React.useState(Boolean(adminNavApi && !cachedPayload))\n\n  const refresh = React.useCallback(async () => {\n    if (!adminNavApi) return\n    setIsLoading(true)\n    try {\n      const call = await apiCall<BackendChromePayload>(adminNavApi, { credentials: 'include' as never })\n      if (!call.ok || !call.result) return\n      const nextPayload = call.result\n      chromeCache.set(buildCacheKey(adminNavApi), nextPayload)\n      setPayload(nextPayload)\n    } catch {\n      return\n    } finally {\n      setIsLoading(false)\n    }\n  }, [adminNavApi])\n\n  React.useEffect(() => {\n    if (!adminNavApi) {\n      setPayload(null)\n      setIsLoading(false)\n      return\n    }\n    const cached = chromeCache.get(buildCacheKey(adminNavApi)) ?? null\n    setPayload(cached)\n    if (!cached) {\n      void refresh()\n    }\n  }, [adminNavApi, refresh])\n\n  React.useEffect(() => {\n    if (!adminNavApi) return\n    const onFocus = () => { void refresh() }\n    const onManualRefresh = () => { void refresh() }\n    const unsubscribeScope = subscribeOrganizationScopeChanged(() => {\n      void refresh()\n    })\n    window.addEventListener('focus', onFocus)\n    window.addEventListener('om:refresh-sidebar', onManualRefresh as EventListener)\n    return () => {\n      unsubscribeScope()\n      window.removeEventListener('focus', onFocus)\n      window.removeEventListener('om:refresh-sidebar', onManualRefresh as EventListener)\n    }\n  }, [adminNavApi, refresh])\n\n  const value = React.useMemo<BackendChromeContextValue>(() => ({\n    payload,\n    isLoading,\n    isReady: !adminNavApi || payload !== null,\n    refresh,\n  }), [adminNavApi, isLoading, payload, refresh])\n\n  return (\n    <BackendChromeContext.Provider value={value}>\n      {children}\n    </BackendChromeContext.Provider>\n  )\n}\n\nexport function useBackendChrome(): BackendChromeContextValue {\n  return React.useContext(BackendChromeContext) ?? {\n    payload: null,\n    isLoading: false,\n    isReady: true,\n    refresh: async () => {},\n  }\n}\n"],
-  "mappings": ";AAuFI;AArFJ,YAAY,WAAW;AACvB,SAAS,eAAe;AACxB,SAAS,mCAAmC,0CAA0C;AAetF,MAAM,cAAc,oBAAI,IAAkC;AAC1D,MAAM,uBAAuB,MAAM,cAAgD,IAAI;AAEvF,SAAS,cAAc,KAAqB;AAC1C,SAAO,GAAG,GAAG,WAAW,mCAAmC,CAAC;AAC9D;AAEO,SAAS,sBAAsB,EAAE,aAAa,SAAS,GAA+B;AAC3F,QAAM,gBAAgB,MAAM,QAAQ,MAAM;AACxC,QAAI,CAAC,YAAa,QAAO;AACzB,WAAO,YAAY,IAAI,cAAc,WAAW,CAAC,KAAK;AAAA,EACxD,GAAG,CAAC,WAAW,CAAC;AAChB,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAsC,aAAa;AACvF,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS,QAAQ,eAAe,CAAC,aAAa,CAAC;AAEvF,QAAM,UAAU,MAAM,YAAY,YAAY;AAC5C,QAAI,CAAC,YAAa;AAClB,iBAAa,IAAI;AACjB,QAAI;AACF,YAAM,OAAO,MAAM,QAA8B,aAAa,EAAE,aAAa,UAAmB,CAAC;AACjG,UAAI,CAAC,KAAK,MAAM,CAAC,KAAK,OAAQ;AAC9B,YAAM,cAAc,KAAK;AACzB,kBAAY,IAAI,cAAc,WAAW,GAAG,WAAW;AACvD,iBAAW,WAAW;AAAA,IACxB,QAAQ;AACN;AAAA,IACF,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,WAAW,CAAC;AAEhB,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,aAAa;AAChB,iBAAW,IAAI;AACf,mBAAa,KAAK;AAClB;AAAA,IACF;AACA,UAAM,SAAS,YAAY,IAAI,cAAc,WAAW,CAAC,KAAK;AAC9D,eAAW,MAAM;AACjB,QAAI,CAAC,QAAQ;AACX,WAAK,QAAQ;AAAA,IACf;AAAA,EACF,GAAG,CAAC,aAAa,OAAO,CAAC;AAEzB,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,YAAa;AAClB,UAAM,UAAU,MAAM;AAAE,WAAK,QAAQ;AAAA,IAAE;AACvC,UAAM,kBAAkB,MAAM;AAAE,WAAK,QAAQ;AAAA,IAAE;AAC/C,UAAM,mBAAmB,kCAAkC,MAAM;AAC/D,WAAK,QAAQ;AAAA,IACf,CAAC;AACD,WAAO,iBAAiB,SAAS,OAAO;AACxC,WAAO,iBAAiB,sBAAsB,eAAgC;AAC9E,WAAO,MAAM;AACX,uBAAiB;AACjB,aAAO,oBAAoB,SAAS,OAAO;AAC3C,aAAO,oBAAoB,sBAAsB,eAAgC;AAAA,IACnF;AAAA,EACF,GAAG,CAAC,aAAa,OAAO,CAAC;AAEzB,QAAM,QAAQ,MAAM,QAAmC,OAAO;AAAA,IAC5D;AAAA,IACA;AAAA,IACA,SAAS,CAAC,eAAe,YAAY;AAAA,IACrC;AAAA,EACF,IAAI,CAAC,aAAa,WAAW,SAAS,OAAO,CAAC;AAE9C,SACE,oBAAC,qBAAqB,UAArB,EAA8B,OAC5B,UACH;AAEJ;AAEO,SAAS,mBAA8C;AAC5D,SAAO,MAAM,WAAW,oBAAoB,KAAK;AAAA,IAC/C,SAAS;AAAA,IACT,WAAW;AAAA,IACX,SAAS;AAAA,IACT,SAAS,YAAY;AAAA,IAAC;AAAA,EACxB;AACF;",
+  "sourcesContent": ["'use client'\n\nimport * as React from 'react'\nimport { apiCall } from './utils/apiCall'\nimport { subscribeOrganizationScopeChanged, getCurrentOrganizationScopeVersion } from '@open-mercato/shared/lib/frontend/organizationEvents'\nimport type {\n  BackendChromeCurrentOrganization,\n  BackendChromePayload,\n} from '@open-mercato/shared/modules/navigation/backendChrome'\n\ntype BackendChromeContextValue = {\n  payload: BackendChromePayload | null\n  isLoading: boolean\n  isReady: boolean\n  refresh: () => Promise<void>\n}\n\ntype BackendChromeProviderProps = {\n  adminNavApi?: string\n  children: React.ReactNode\n}\n\nconst chromeCache = new Map<string, BackendChromePayload>()\nconst BackendChromeContext = React.createContext<BackendChromeContextValue | null>(null)\n\nfunction buildCacheKey(api: string): string {\n  return `${api}::scope:${getCurrentOrganizationScopeVersion()}`\n}\n\nexport function BackendChromeProvider({ adminNavApi, children }: BackendChromeProviderProps) {\n  const cachedPayload = React.useMemo(() => {\n    if (!adminNavApi) return null\n    return chromeCache.get(buildCacheKey(adminNavApi)) ?? null\n  }, [adminNavApi])\n  const [payload, setPayload] = React.useState<BackendChromePayload | null>(cachedPayload)\n  const [isLoading, setIsLoading] = React.useState(Boolean(adminNavApi && !cachedPayload))\n\n  const refresh = React.useCallback(async () => {\n    if (!adminNavApi) return\n    setIsLoading(true)\n    try {\n      const call = await apiCall<BackendChromePayload>(adminNavApi, { credentials: 'include' as never })\n      if (!call.ok || !call.result) return\n      const nextPayload = call.result\n      chromeCache.set(buildCacheKey(adminNavApi), nextPayload)\n      setPayload(nextPayload)\n    } catch {\n      return\n    } finally {\n      setIsLoading(false)\n    }\n  }, [adminNavApi])\n\n  React.useEffect(() => {\n    if (!adminNavApi) {\n      setPayload(null)\n      setIsLoading(false)\n      return\n    }\n    const cached = chromeCache.get(buildCacheKey(adminNavApi)) ?? null\n    setPayload(cached)\n    if (!cached) {\n      void refresh()\n    }\n  }, [adminNavApi, refresh])\n\n  React.useEffect(() => {\n    if (!adminNavApi) return\n    const onFocus = () => { void refresh() }\n    const onManualRefresh = () => { void refresh() }\n    const unsubscribeScope = subscribeOrganizationScopeChanged(() => {\n      void refresh()\n    })\n    window.addEventListener('focus', onFocus)\n    window.addEventListener('om:refresh-sidebar', onManualRefresh as EventListener)\n    return () => {\n      unsubscribeScope()\n      window.removeEventListener('focus', onFocus)\n      window.removeEventListener('om:refresh-sidebar', onManualRefresh as EventListener)\n    }\n  }, [adminNavApi, refresh])\n\n  const value = React.useMemo<BackendChromeContextValue>(() => ({\n    payload,\n    isLoading,\n    isReady: !adminNavApi || payload !== null,\n    refresh,\n  }), [adminNavApi, isLoading, payload, refresh])\n\n  return (\n    <BackendChromeContext.Provider value={value}>\n      {children}\n    </BackendChromeContext.Provider>\n  )\n}\n\nexport function useBackendChrome(): BackendChromeContextValue {\n  return React.useContext(BackendChromeContext) ?? {\n    payload: null,\n    isLoading: false,\n    isReady: true,\n    refresh: async () => {},\n  }\n}\n\n/**\n * The organization the backend chrome is currently scoped to, for UI that needs to label\n * \"you are viewing: <name>\".\n *\n * Reads the payload this provider already holds, so it costs no additional request. Returns `null`\n * under an all-organizations selection, outside a provider, or before the payload has arrived \u2014 treat\n * it as \"unknown\", not as \"no organization\".\n *\n * Prefer this over `payload.brand`, which only populates when the organization has a logo configured.\n */\nexport function useCurrentOrganization(): BackendChromeCurrentOrganization | null {\n  const { payload } = useBackendChrome()\n  return payload?.currentOrganization ?? null\n}\n"],
+  "mappings": ";AA0FI;AAxFJ,YAAY,WAAW;AACvB,SAAS,eAAe;AACxB,SAAS,mCAAmC,0CAA0C;AAkBtF,MAAM,cAAc,oBAAI,IAAkC;AAC1D,MAAM,uBAAuB,MAAM,cAAgD,IAAI;AAEvF,SAAS,cAAc,KAAqB;AAC1C,SAAO,GAAG,GAAG,WAAW,mCAAmC,CAAC;AAC9D;AAEO,SAAS,sBAAsB,EAAE,aAAa,SAAS,GAA+B;AAC3F,QAAM,gBAAgB,MAAM,QAAQ,MAAM;AACxC,QAAI,CAAC,YAAa,QAAO;AACzB,WAAO,YAAY,IAAI,cAAc,WAAW,CAAC,KAAK;AAAA,EACxD,GAAG,CAAC,WAAW,CAAC;AAChB,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAsC,aAAa;AACvF,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS,QAAQ,eAAe,CAAC,aAAa,CAAC;AAEvF,QAAM,UAAU,MAAM,YAAY,YAAY;AAC5C,QAAI,CAAC,YAAa;AAClB,iBAAa,IAAI;AACjB,QAAI;AACF,YAAM,OAAO,MAAM,QAA8B,aAAa,EAAE,aAAa,UAAmB,CAAC;AACjG,UAAI,CAAC,KAAK,MAAM,CAAC,KAAK,OAAQ;AAC9B,YAAM,cAAc,KAAK;AACzB,kBAAY,IAAI,cAAc,WAAW,GAAG,WAAW;AACvD,iBAAW,WAAW;AAAA,IACxB,QAAQ;AACN;AAAA,IACF,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,WAAW,CAAC;AAEhB,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,aAAa;AAChB,iBAAW,IAAI;AACf,mBAAa,KAAK;AAClB;AAAA,IACF;AACA,UAAM,SAAS,YAAY,IAAI,cAAc,WAAW,CAAC,KAAK;AAC9D,eAAW,MAAM;AACjB,QAAI,CAAC,QAAQ;AACX,WAAK,QAAQ;AAAA,IACf;AAAA,EACF,GAAG,CAAC,aAAa,OAAO,CAAC;AAEzB,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,YAAa;AAClB,UAAM,UAAU,MAAM;AAAE,WAAK,QAAQ;AAAA,IAAE;AACvC,UAAM,kBAAkB,MAAM;AAAE,WAAK,QAAQ;AAAA,IAAE;AAC/C,UAAM,mBAAmB,kCAAkC,MAAM;AAC/D,WAAK,QAAQ;AAAA,IACf,CAAC;AACD,WAAO,iBAAiB,SAAS,OAAO;AACxC,WAAO,iBAAiB,sBAAsB,eAAgC;AAC9E,WAAO,MAAM;AACX,uBAAiB;AACjB,aAAO,oBAAoB,SAAS,OAAO;AAC3C,aAAO,oBAAoB,sBAAsB,eAAgC;AAAA,IACnF;AAAA,EACF,GAAG,CAAC,aAAa,OAAO,CAAC;AAEzB,QAAM,QAAQ,MAAM,QAAmC,OAAO;AAAA,IAC5D;AAAA,IACA;AAAA,IACA,SAAS,CAAC,eAAe,YAAY;AAAA,IACrC;AAAA,EACF,IAAI,CAAC,aAAa,WAAW,SAAS,OAAO,CAAC;AAE9C,SACE,oBAAC,qBAAqB,UAArB,EAA8B,OAC5B,UACH;AAEJ;AAEO,SAAS,mBAA8C;AAC5D,SAAO,MAAM,WAAW,oBAAoB,KAAK;AAAA,IAC/C,SAAS;AAAA,IACT,WAAW;AAAA,IACX,SAAS;AAAA,IACT,SAAS,YAAY;AAAA,IAAC;AAAA,EACxB;AACF;AAYO,SAAS,yBAAkE;AAChF,QAAM,EAAE,QAAQ,IAAI,iBAAiB;AACrC,SAAO,SAAS,uBAAuB;AACzC;",
   "names": []
 }

package/dist/backend/CrudForm.js

@@ -100,6 +100,7 @@ import { InjectedField } from "./injection/InjectedField.js";
 import { insertByInjectionPlacement } from "@open-mercato/shared/modules/widgets/injection-position";
 import { evaluateInjectedVisibility } from "./injection/visibility-utils.js";
 import { ComponentReplacementHandles } from "@open-mercato/shared/modules/widgets/component-registry";
+import { crudFormExtensionSpotId, extensionSpotChildId } from "@open-mercato/shared/modules/widgets/extension-points";
 import { RichEditor } from "../primitives/rich-editor.js";
 import MarkdownField from "./inputs/MarkdownField.js";
 const logger = createLogger("ui").child({ component: "CrudForm" });
@@ -453,7 +454,7 @@ function CrudForm({
     if (injectionSpotId) return injectionSpotId;
     if (resolvedEntityIds.length) {
       const normalized = resolvedEntityIds[0].replace(/[:]+/g, ".");
-      return `crud-form:${normalized}`;
+      return crudFormExtensionSpotId(normalized);
     }
     return void 0;
   }, [injectionSpotId, resolvedEntityIds]);
@@ -462,7 +463,7 @@ function CrudForm({
     if (resolvedEntityIds.length) return ComponentReplacementHandles.crudForm(resolvedEntityIds[0].replace(/[:]+/g, "."));
     return ComponentReplacementHandles.crudForm("unknown");
   }, [replacementHandle, resolvedEntityIds]);
-  const headerInjectionSpotId = resolvedInjectionSpotId ? `${resolvedInjectionSpotId}:header` : void 0;
+  const headerInjectionSpotId = resolvedInjectionSpotId ? extensionSpotChildId(resolvedInjectionSpotId, "header") : void 0;
   const recordId = React.useMemo(() => {
     const raw = values.id;
     if (typeof raw === "string") return raw;
@@ -679,7 +680,7 @@ function CrudForm({
     triggerOnLoad: true
   });
   const { widgets: injectedFieldWidgets } = useInjectionDataWidgets(
-    resolvedInjectionSpotId ? `${resolvedInjectionSpotId}:fields` : "__disabled__:fields"
+    resolvedInjectionSpotId ? extensionSpotChildId(resolvedInjectionSpotId, "fields") : "__disabled__:fields"
   );
   const { triggerEvent: triggerInjectionEvent } = useInjectionSpotEvents(resolvedInjectionSpotId ?? "", injectionWidgets);
   const extendedInjectionEventsEnabled = CRUDFORM_EXTENDED_EVENTS_ENABLED && Boolean(resolvedInjectionSpotId);
@@ -1798,10 +1799,11 @@ function CrudForm({
   }, [validateFieldOnBlur]);
   const handleFieldsetSelectionChange = React.useCallback(
     (entityId2, nextCode) => {
+      if (!nextCode) return;
       setCfFieldsetSelections((prev) => ({ ...prev, [entityId2]: nextCode }));
       const bindingKey = customFieldsetBindings?.[entityId2]?.valueKey;
       if (bindingKey) {
-        setValue(bindingKey, nextCode ?? void 0);
+        setValue(bindingKey, nextCode);
       }
     },
     [customFieldsetBindings, setValue]