@prenta/admin 0.92.0

package/dist/lib/forms-service.js

@@ -0,0 +1,302 @@
+/**
+ * Forms service — typed client over the cms-core Forms REST endpoints.
+ *
+ * Every Forms admin component reads/writes through this module (never raw
+ * `cmsApi` / `fetch`), so the network contract lives in one place. Read
+ * fetchers re-surface `cmsApi`'s `{ error }` as a thrown error (so the
+ * resource hook can show error/retry UI); mutations return `{ error? }`.
+ *
+ * The endpoint paths here are the contract implemented by cms-core
+ * `packages/cms-core/src/api/handlers.ts` (PR 2). Domain types are re-used
+ * from `@prenta/core` so the admin can never drift from the server.
+ */
+import { cmsApi, getApiBase } from './api.js';
+/**
+ * `cmsApi` never throws — it returns `{ error, status }` on a network/HTTP
+ * failure. Read (GET) fetchers must re-surface that as a thrown error so the
+ * resource hook can distinguish "request failed" from "empty result".
+ */
+function throwIfError(res) {
+    if (res.error)
+        throw new Error(res.error);
+}
+// ─── Forms list / stats / sidebar ────────────────────────────────────────
+function buildFormsQuery(params) {
+    const qs = new URLSearchParams();
+    if (params.search)
+        qs.set('search', params.search);
+    if (params.status)
+        qs.set('status', params.status);
+    if (typeof params.notifyEnabled === 'boolean') {
+        qs.set('notifyEnabled', String(params.notifyEnabled));
+    }
+    if (params.sortBy)
+        qs.set('sortBy', params.sortBy);
+    if (params.sortDirection)
+        qs.set('sortDirection', params.sortDirection);
+    if (params.page)
+        qs.set('page', String(params.page));
+    if (params.pageSize)
+        qs.set('pageSize', String(params.pageSize));
+    const str = qs.toString();
+    return str ? `?${str}` : '';
+}
+export async function fetchForms(params = {}) {
+    const res = await cmsApi(`/forms${buildFormsQuery(params)}`);
+    throwIfError(res);
+    return res.data ?? [];
+}
+export async function fetchFormById(id) {
+    const res = await cmsApi(`/forms/${encodeURIComponent(id)}`);
+    throwIfError(res);
+    return res.data ?? null;
+}
+const EMPTY_STATS = {
+    totalForms: 0,
+    activeForms: 0,
+    totalEntries: 0,
+    unreadEntries: 0,
+};
+export async function fetchFormStats() {
+    const res = await cmsApi('/forms/stats');
+    throwIfError(res);
+    return res.data ?? EMPTY_STATS;
+}
+export async function fetchFormsSidebarCounts() {
+    const res = await cmsApi('/forms/sidebar-counts');
+    throwIfError(res);
+    return res.data ?? [];
+}
+export async function createForm(payload) {
+    const res = await cmsApi('/forms', {
+        method: 'POST',
+        body: JSON.stringify(payload),
+    });
+    return { data: res.data, error: res.error };
+}
+export async function updateForm(id, payload) {
+    const res = await cmsApi(`/forms/${encodeURIComponent(id)}`, {
+        method: 'PATCH',
+        body: JSON.stringify(payload),
+    });
+    return { data: res.data, error: res.error };
+}
+export async function duplicateForm(id) {
+    const res = await cmsApi(`/forms/${encodeURIComponent(id)}/duplicate`, {
+        method: 'POST',
+    });
+    return { data: res.data, error: res.error };
+}
+/** Move a form to the archived state (hidden from embed pickers, no new submissions). */
+export async function archiveForm(id) {
+    return updateForm(id, { status: 'archived' });
+}
+/** Restore an archived form back to draft. */
+export async function restoreForm(id) {
+    return updateForm(id, { status: 'draft' });
+}
+export async function deleteForm(id, opts = {}) {
+    const qs = opts.force ? '?force=true' : '';
+    const res = await cmsApi(`/forms/${encodeURIComponent(id)}${qs}`, { method: 'DELETE' });
+    return { error: res.error };
+}
+// ─── Schema ──────────────────────────────────────────────────────────────
+export async function fetchFormSchema(id) {
+    const res = await cmsApi(`/forms/${encodeURIComponent(id)}/schema`);
+    throwIfError(res);
+    return res.data ?? { fields: [], activeVersionId: null, versions: [] };
+}
+export async function saveFormSchema(id, fields, notes) {
+    const res = await cmsApi(`/forms/${encodeURIComponent(id)}/schema`, { method: 'PUT', body: JSON.stringify({ fields, notes }) });
+    return { data: res.data, error: res.error };
+}
+// ─── Notifications ─────────────────────────────────────────────────────────
+export async function fetchNotificationSettings(id) {
+    const res = await cmsApi(`/forms/${encodeURIComponent(id)}/notifications`);
+    throwIfError(res);
+    return res.data ?? { enabled: false, recipients: [] };
+}
+export async function updateNotificationSettings(id, payload) {
+    const res = await cmsApi(`/forms/${encodeURIComponent(id)}/notifications`, { method: 'PUT', body: JSON.stringify(payload) });
+    return { data: res.data, error: res.error };
+}
+/** Lightweight notify on/off toggle used by the forms-list switch. */
+export async function setNotifyEnabled(id, enabled) {
+    const res = await cmsApi(`/forms/${encodeURIComponent(id)}/notify`, {
+        method: 'PUT',
+        body: JSON.stringify({ enabled }),
+    });
+    return { data: res.data, error: res.error };
+}
+/** Send a sample notification email to the first configured recipient. */
+export async function testNotificationSettings(id) {
+    const res = await cmsApi(`/forms/${encodeURIComponent(id)}/notifications/test`, { method: 'POST', body: '{}' });
+    return { data: res.data, error: res.error };
+}
+// ─── Embed ───────────────────────────────────────────────────────────────
+export async function fetchEmbedSettings(id) {
+    const res = await cmsApi(`/forms/${encodeURIComponent(id)}/embed`);
+    throwIfError(res);
+    return res.data ?? {};
+}
+export async function updateEmbedSettings(id, payload) {
+    const res = await cmsApi(`/forms/${encodeURIComponent(id)}/embed`, {
+        method: 'PUT',
+        body: JSON.stringify(payload),
+    });
+    return { data: res.data, error: res.error };
+}
+export async function fetchFormWebhooks(formId) {
+    const res = await cmsApi(`/forms/${encodeURIComponent(formId)}/webhooks`);
+    throwIfError(res);
+    return res.data ?? [];
+}
+export async function createFormWebhook(formId, payload) {
+    const res = await cmsApi(`/forms/${encodeURIComponent(formId)}/webhooks`, {
+        method: 'POST',
+        body: JSON.stringify(payload),
+    });
+    return { data: res.data, error: res.error };
+}
+export async function updateFormWebhook(formId, webhookId, payload) {
+    const res = await cmsApi(`/forms/${encodeURIComponent(formId)}/webhooks/${encodeURIComponent(webhookId)}`, { method: 'PATCH', body: JSON.stringify(payload) });
+    return { data: res.data, error: res.error };
+}
+export async function deleteFormWebhook(formId, webhookId) {
+    const res = await cmsApi(`/forms/${encodeURIComponent(formId)}/webhooks/${encodeURIComponent(webhookId)}`, { method: 'DELETE' });
+    return { error: res.error };
+}
+export async function testFormWebhook(formId, webhookId) {
+    const res = await cmsApi(`/forms/${encodeURIComponent(formId)}/webhooks/${encodeURIComponent(webhookId)}/test`, { method: 'POST' });
+    return { data: res.data, error: res.error };
+}
+function buildEntriesQuery(params) {
+    const qs = new URLSearchParams();
+    if (params.search)
+        qs.set('search', params.search);
+    if (params.formId)
+        qs.set('formId', params.formId);
+    if (typeof params.unread === 'boolean')
+        qs.set('unread', String(params.unread));
+    if (typeof params.starred === 'boolean')
+        qs.set('starred', String(params.starred));
+    if (typeof params.archived === 'boolean')
+        qs.set('archived', String(params.archived));
+    if (params.spamStatus)
+        qs.set('spamStatus', params.spamStatus);
+    if (params.dateFrom)
+        qs.set('dateFrom', params.dateFrom);
+    if (params.dateTo)
+        qs.set('dateTo', params.dateTo);
+    if (params.thisWeek)
+        qs.set('thisWeek', 'true');
+    if (params.sortBy)
+        qs.set('sortBy', params.sortBy);
+    if (params.sortDirection)
+        qs.set('sortDirection', params.sortDirection);
+    if (params.page)
+        qs.set('page', String(params.page));
+    if (params.pageSize)
+        qs.set('pageSize', String(params.pageSize));
+    const str = qs.toString();
+    return str ? `?${str}` : '';
+}
+const EMPTY_PAGE = { entries: [], total: 0, page: 1, pageSize: 25 };
+export async function fetchEntries(params = {}) {
+    const res = await cmsApi(`/forms/entries${buildEntriesQuery(params)}`);
+    throwIfError(res);
+    return res.data ?? EMPTY_PAGE;
+}
+const EMPTY_COUNTS = { total: 0, unread: 0, starred: 0, thisWeek: 0, byForm: {} };
+export async function fetchEntryCounts(params = {}) {
+    const res = await cmsApi(`/forms/entries/counts${buildEntriesQuery(params)}`);
+    throwIfError(res);
+    return res.data ?? EMPTY_COUNTS;
+}
+export async function fetchEntry(id) {
+    const res = await cmsApi(`/forms/entries/${encodeURIComponent(id)}`);
+    throwIfError(res);
+    return res.data ?? null;
+}
+export async function updateEntry(id, patch) {
+    const res = await cmsApi(`/forms/entries/${encodeURIComponent(id)}`, {
+        method: 'PATCH',
+        body: JSON.stringify(patch),
+    });
+    return { data: res.data, error: res.error };
+}
+export async function deleteEntry(id) {
+    const res = await cmsApi(`/forms/entries/${encodeURIComponent(id)}`, { method: 'DELETE' });
+    return { error: res.error };
+}
+export async function bulkUpdateEntries(ids, patch) {
+    const res = await cmsApi('/forms/entries/bulk', {
+        method: 'POST',
+        body: JSON.stringify({ ids, patch }),
+    });
+    return { data: res.data, error: res.error };
+}
+/**
+ * Download the full server-side entries export (all pages, decrypted values,
+ * attribution columns — bounded server-side to 5,000 rows). Scoped to one
+ * form when `formId` is set, otherwise exports across all forms. Uses raw
+ * `fetch` because the response is a file, not the JSON envelope `cmsApi`
+ * unwraps.
+ */
+export async function downloadEntriesExport(options = {}) {
+    const format = options.format ?? 'csv';
+    const qs = new URLSearchParams({ format });
+    if (options.formId)
+        qs.set('formId', options.formId);
+    let res;
+    try {
+        res = await fetch(`${getApiBase()}/forms/entries/export?${qs.toString()}`, {
+            credentials: 'include',
+        });
+    }
+    catch (err) {
+        return { error: err instanceof Error ? err.message : 'Network error' };
+    }
+    if (!res.ok) {
+        const body = (await res.json().catch(() => ({})));
+        return { error: body.error || `Export failed (${res.status})` };
+    }
+    const blob = await res.blob();
+    const disposition = res.headers.get('content-disposition') ?? '';
+    const filename = /filename="([^"]+)"/.exec(disposition)?.[1] ?? `entries.${format}`;
+    const url = URL.createObjectURL(blob);
+    const a = document.createElement('a');
+    a.href = url;
+    a.download = filename;
+    a.click();
+    URL.revokeObjectURL(url);
+    return {};
+}
+export async function fetchFormDeliveries(params = {}) {
+    const qs = new URLSearchParams();
+    if (params.formId)
+        qs.set('formId', params.formId);
+    if (params.submissionId)
+        qs.set('submissionId', params.submissionId);
+    if (params.status)
+        qs.set('status', params.status);
+    if (params.page)
+        qs.set('page', String(params.page));
+    if (params.pageSize)
+        qs.set('pageSize', String(params.pageSize));
+    const suffix = qs.toString() ? `?${qs.toString()}` : '';
+    const res = await cmsApi(`/forms/deliveries${suffix}`);
+    throwIfError(res);
+    return res.data ?? { docs: [], total: 0, page: 1, pageSize: 25 };
+}
+export async function retryFormDelivery(attemptId) {
+    const res = await cmsApi(`/forms/deliveries/${encodeURIComponent(attemptId)}/retry`, { method: 'POST' });
+    return { data: res.data, error: res.error };
+}
+export async function fetchFailedDeliveryCount(formId) {
+    const qs = formId ? `?formId=${encodeURIComponent(formId)}` : '';
+    const res = await cmsApi(`/forms/deliveries/failed-count${qs}`);
+    throwIfError(res);
+    return res.data?.count ?? 0;
+}
+//# sourceMappingURL=forms-service.js.map

package/dist/lib/forms-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forms-service.js","sourceRoot":"","sources":["../../src/lib/forms-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAyC7C;;;;GAIG;AACH,SAAS,YAAY,CAAC,GAAuB;IAC3C,IAAI,GAAG,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;AAC3C,CAAC;AAmBD,4EAA4E;AAE5E,SAAS,eAAe,CAAC,MAAwB;IAC/C,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAA;IAChC,IAAI,MAAM,CAAC,MAAM;QAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IAClD,IAAI,MAAM,CAAC,MAAM;QAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IAClD,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAC9C,EAAE,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAA;IACvD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM;QAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IAClD,IAAI,MAAM,CAAC,aAAa;QAAE,EAAE,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,CAAA;IACvE,IAAI,MAAM,CAAC,IAAI;QAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IACpD,IAAI,MAAM,CAAC,QAAQ;QAAE,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;IAChE,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAA;IACzB,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,SAA2B,EAAE;IAC5D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAiB,SAAS,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC5E,YAAY,CAAC,GAAG,CAAC,CAAA;IACjB,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAA;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAU;IAC5C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAiB,UAAU,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAC5E,YAAY,CAAC,GAAG,CAAC,CAAA;IACjB,OAAO,GAAG,CAAC,IAAI,IAAI,IAAI,CAAA;AACzB,CAAC;AAED,MAAM,WAAW,GAAc;IAC7B,UAAU,EAAE,CAAC;IACb,WAAW,EAAE,CAAC;IACd,YAAY,EAAE,CAAC;IACf,aAAa,EAAE,CAAC;CACjB,CAAA;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAY,cAAc,CAAC,CAAA;IACnD,YAAY,CAAC,GAAG,CAAC,CAAA;IACjB,OAAO,GAAG,CAAC,IAAI,IAAI,WAAW,CAAA;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAsB,uBAAuB,CAAC,CAAA;IACtE,YAAY,CAAC,GAAG,CAAC,CAAA;IACjB,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAA;AACvB,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAA0B;IAE1B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAiB,QAAQ,EAAE;QACjD,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;KAC9B,CAAC,CAAA;IACF,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAA;AAC7C,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,EAAU,EACV,OAA0B;IAE1B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAiB,UAAU,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE;QAC3E,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;KAC9B,CAAC,CAAA;IACF,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAA;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAU;IAEV,MAAM,GAAG,GAAG,MAAM,MAAM,CAAiB,UAAU,kBAAkB,CAAC,EAAE,CAAC,YAAY,EAAE;QACrF,MAAM,EAAE,MAAM;KACf,CAAC,CAAA;IACF,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAA;AAC7C,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAAU;IAC1C,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;AAC/C,CAAC;AAED,8CAA8C;AAC9C,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAAU;IAC1C,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,EAAU,EACV,OAA4B,EAAE;IAE9B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAA;IAC1C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;IACvF,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAA;AAC7B,CAAC;AAED,4EAA4E;AAE5E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAU;IAC9C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAmB,UAAU,kBAAkB,CAAC,EAAE,CAAC,SAAS,CAAC,CAAA;IACrF,YAAY,CAAC,GAAG,CAAC,CAAA;IACjB,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAU,EACV,MAAmB,EACnB,KAAc;IAEd,MAAM,GAAG,GAAG,MAAM,MAAM,CACtB,UAAU,kBAAkB,CAAC,EAAE,CAAC,SAAS,EACzC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAC3D,CAAA;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAA;AAC7C,CAAC;AAED,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAAU;IACxD,MAAM,GAAG,GAAG,MAAM,MAAM,CACtB,UAAU,kBAAkB,CAAC,EAAE,CAAC,gBAAgB,CACjD,CAAA;IACD,YAAY,CAAC,GAAG,CAAC,CAAA;IACjB,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,EAAU,EACV,OAA0C;IAE1C,MAAM,GAAG,GAAG,MAAM,MAAM,CACtB,UAAU,kBAAkB,CAAC,EAAE,CAAC,gBAAgB,EAChD,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CACjD,CAAA;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAA;AAC7C,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAU,EACV,OAAgB;IAEhB,MAAM,GAAG,GAAG,MAAM,MAAM,CAA6B,UAAU,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE;QAC9F,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;KAClC,CAAC,CAAA;IACF,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAA;AAC7C,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,EAAU;IAIvD,MAAM,GAAG,GAAG,MAAM,MAAM,CACtB,UAAU,kBAAkB,CAAC,EAAE,CAAC,qBAAqB,EACrD,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAC/B,CAAA;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAA;AAC7C,CAAC;AAED,4EAA4E;AAE5E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAU;IACjD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAoB,UAAU,kBAAkB,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAA;IACrF,YAAY,CAAC,GAAG,CAAC,CAAA;IACjB,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAA;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,EAAU,EACV,OAAmC;IAEnC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAoB,UAAU,kBAAkB,CAAC,EAAE,CAAC,QAAQ,EAAE;QACpF,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;KAC9B,CAAC,CAAA;IACF,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAA;AAC7C,CAAC;AA4BD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAc;IACpD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAsB,UAAU,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAC9F,YAAY,CAAC,GAAG,CAAC,CAAA;IACjB,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAA;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,OAAiC;IAEjC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAqB,UAAU,kBAAkB,CAAC,MAAM,CAAC,WAAW,EAAE;QAC5F,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;KAC9B,CAAC,CAAA;IACF,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAA;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,SAAiB,EACjB,OAAiC;IAEjC,MAAM,GAAG,GAAG,MAAM,MAAM,CACtB,UAAU,kBAAkB,CAAC,MAAM,CAAC,aAAa,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAChF,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CACnD,CAAA;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAA;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,SAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,MAAM,CACtB,UAAU,kBAAkB,CAAC,MAAM,CAAC,aAAa,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAChF,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAA;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAA;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,SAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,MAAM,CACtB,UAAU,kBAAkB,CAAC,MAAM,CAAC,aAAa,kBAAkB,CAAC,SAAS,CAAC,OAAO,EACrF,EAAE,MAAM,EAAE,MAAM,EAAE,CACnB,CAAA;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAA;AAC7C,CAAC;AAmBD,SAAS,iBAAiB,CAAC,MAA8B;IACvD,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAA;IAChC,IAAI,MAAM,CAAC,MAAM;QAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IAClD,IAAI,MAAM,CAAC,MAAM;QAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IAClD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;IAC/E,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;IAClF,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,SAAS;QAAE,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;IACrF,IAAI,MAAM,CAAC,UAAU;QAAE,EAAE,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;IAC9D,IAAI,MAAM,CAAC,QAAQ;QAAE,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;IACxD,IAAI,MAAM,CAAC,MAAM;QAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IAClD,IAAI,MAAM,CAAC,QAAQ;QAAE,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAC/C,IAAI,MAAM,CAAC,MAAM;QAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IAClD,IAAI,MAAM,CAAC,aAAa;QAAE,EAAE,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,CAAA;IACvE,IAAI,MAAM,CAAC,IAAI;QAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IACpD,IAAI,MAAM,CAAC,QAAQ;QAAE,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;IAChE,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAA;IACzB,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AAC7B,CAAC;AAED,MAAM,UAAU,GAAgB,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;AAEhF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAiC,EAAE;IACpE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAc,iBAAiB,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACnF,YAAY,CAAC,GAAG,CAAC,CAAA;IACjB,OAAO,GAAG,CAAC,IAAI,IAAI,UAAU,CAAA;AAC/B,CAAC;AAED,MAAM,YAAY,GAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;AAE9F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAAiC,EAAE;IACxE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAc,wBAAwB,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC1F,YAAY,CAAC,GAAG,CAAC,CAAA;IACjB,OAAO,GAAG,CAAC,IAAI,IAAI,YAAY,CAAA;AACjC,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,EAAU;IACzC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAc,kBAAkB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IACjF,YAAY,CAAC,GAAG,CAAC,CAAA;IACjB,OAAO,GAAG,CAAC,IAAI,IAAI,IAAI,CAAA;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,EAAU,EACV,KAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAiB,kBAAkB,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE;QACnF,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;KAC5B,CAAC,CAAA;IACF,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAA;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAAU;IAC1C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,kBAAkB,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC1F,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAA;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAa,EACb,KAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAsB,qBAAqB,EAAE;QACnE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;KACrC,CAAC,CAAA;IACF,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAA;AAC7C,CAAC;AAID;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAGI,EAAE;IAEN,MAAM,MAAM,GAAwB,OAAO,CAAC,MAAM,IAAI,KAAK,CAAA;IAC3D,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;IAC1C,IAAI,OAAO,CAAC,MAAM;QAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAEpD,IAAI,GAAa,CAAA;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,EAAE,yBAAyB,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE;YACzE,WAAW,EAAE,SAAS;SACvB,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAA;IACxE,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAuB,CAAA;QACvE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,kBAAkB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAA;IACjE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IAC7B,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAA;IAChE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,MAAM,EAAE,CAAA;IACnF,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;IACrC,MAAM,CAAC,GAAG,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;IACrC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAA;IACZ,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAA;IACrB,CAAC,CAAC,KAAK,EAAE,CAAA;IACT,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;IACxB,OAAO,EAAE,CAAA;AACX,CAAC;AA4CD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAoC,EAAE;IAEtC,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAA;IAChC,IAAI,MAAM,CAAC,MAAM;QAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IAClD,IAAI,MAAM,CAAC,YAAY;QAAE,EAAE,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,YAAY,CAAC,CAAA;IACpE,IAAI,MAAM,CAAC,MAAM;QAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IAClD,IAAI,MAAM,CAAC,IAAI;QAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IACpD,IAAI,MAAM,CAAC,QAAQ;QAAE,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;IAChE,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACvD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAqB,oBAAoB,MAAM,EAAE,CAAC,CAAA;IAC1E,YAAY,CAAC,GAAG,CAAC,CAAA;IACjB,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,MAAM,CACtB,qBAAqB,kBAAkB,CAAC,SAAS,CAAC,QAAQ,EAC1D,EAAE,MAAM,EAAE,MAAM,EAAE,CACnB,CAAA;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAA;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAAe;IAC5D,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAChE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAoB,iCAAiC,EAAE,EAAE,CAAC,CAAA;IAClF,YAAY,CAAC,GAAG,CAAC,CAAA;IACjB,OAAO,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,CAAA;AAC7B,CAAC"}

package/dist/lib/mention-picker.d.ts

@@ -0,0 +1,69 @@
+export interface MentionUser {
+    id: string;
+    name: string;
+    email: string;
+}
+export type MentionSearchOutcome = {
+    ok: true;
+    result: MentionUser[];
+} | {
+    ok: false;
+    error: string;
+    status: number;
+};
+export declare function searchMentionUsers(query: string): Promise<MentionSearchOutcome>;
+/**
+ * Description of an active `@`-mention being typed in a textarea / input.
+ *
+ *  - `start` and `end` are character offsets into the field value: the
+ *    `@` itself sits at `start`, and `end` is the caret position
+ *    (exclusive end of the query slice).
+ *  - `query` is the substring between the `@` and the caret — exactly
+ *    what we should pass to `searchMentionUsers()`.
+ *
+ * Callers replace `value.slice(start, end)` with the chosen token
+ * (`@<userId> `, including the trailing space) to commit a selection.
+ */
+export interface MentionContext {
+    start: number;
+    end: number;
+    query: string;
+}
+/**
+ * Find an active mention at the caret. Mirrors the server-side
+ * `extractMentionedUserIds` regex
+ * (`/(^|\s)@[a-zA-Z0-9_-]{3,64}\b/g`) so the picker's intuition
+ * about what counts as a mention can never disagree with the
+ * server's notification routing.
+ *
+ * Returns `null` whenever:
+ *   - the caret is at offset 0,
+ *   - there is no `@` between the caret and the previous whitespace
+ *     boundary,
+ *   - the `@` is preceded by a non-whitespace, non-newline character
+ *     (so an email address mid-word like `foo@bar` does NOT open
+ *     the picker), or
+ *   - the candidate query contains a character outside the mention
+ *     charset (`[a-zA-Z0-9_-]`).
+ *
+ * The picker DOES open with a 0–2 character query — that's the
+ * "you've started typing a mention" UX. But it can NEVER commit
+ * such a token: `insertMentionToken` only fires for a `MentionUser`
+ * which always has an id of at least 3 chars, matching the server
+ * regex's min-length requirement.
+ */
+export declare function detectMentionContext(value: string, caret: number): MentionContext | null;
+/**
+ * Apply a mention selection to a text value. Returns the new value
+ * plus the caret position where the next keystroke should land.
+ *
+ * Inserts `@<userId> ` (trailing space) so the user can keep typing
+ * without manually moving the cursor past the token. If the caret
+ * already sits before a space, we don't insert a duplicate space.
+ */
+export interface MentionInsertion {
+    value: string;
+    caret: number;
+}
+export declare function insertMentionToken(value: string, context: MentionContext, userId: string): MentionInsertion;
+//# sourceMappingURL=mention-picker.d.ts.map

package/dist/lib/mention-picker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mention-picker.d.ts","sourceRoot":"","sources":["../../src/lib/mention-picker.ts"],"names":[],"mappings":"AAuBA,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,WAAW,EAAE,CAAA;CAAE,GACnC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAEhD,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAerF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAiCxF;AAwBD;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;CACd;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,MAAM,GACb,gBAAgB,CAclB"}

package/dist/lib/mention-picker.js

@@ -0,0 +1,138 @@
+/**
+ * Mention picker client logic + REST helper.
+ *
+ * Two responsibilities, deliberately separated so each can be unit
+ * tested without rendering React or hitting fetch:
+ *
+ * 1. `searchMentionUsers(query)` — typed wrapper over the new
+ *    `GET /api/cms/users/search` endpoint introduced in Phase 7.
+ *    Returns up to 10 `{ id, name, email }` rows matching the query.
+ * 2. `detectMentionContext(value, caret)` — pure parser that scans a
+ *    text input value backwards from the caret to decide whether the
+ *    user is currently typing a `@`-mention, and if so what the
+ *    query fragment is. Returns `null` when no active mention.
+ *
+ * Wire format note: the picker INSERTS `@<userId>` tokens at the
+ * cursor (matching the server-side `extractMentionedUserIds` regex
+ * in `cms-core/realtime/notifications.ts`). The user sees the chosen
+ * user's *name* in the picker but the textarea always holds the id.
+ * Rendering names back in the comment view is a separate slice that
+ * can ship later without breaking the wire format.
+ */
+import { cmsApi } from './api.js';
+export async function searchMentionUsers(query) {
+    const trimmed = query.trim();
+    if (trimmed.length === 0) {
+        // Mirror the server's contract: an empty query returns an empty
+        // array. We short-circuit here so the picker doesn't spend a
+        // round-trip on a guaranteed-empty response.
+        return { ok: true, result: [] };
+    }
+    const res = await cmsApi(`/users/search?q=${encodeURIComponent(trimmed)}`, {
+        method: 'GET',
+    });
+    if (res.error || !res.data) {
+        return { ok: false, error: res.error ?? `Request failed (${res.status})`, status: res.status };
+    }
+    return { ok: true, result: res.data };
+}
+/**
+ * Find an active mention at the caret. Mirrors the server-side
+ * `extractMentionedUserIds` regex
+ * (`/(^|\s)@[a-zA-Z0-9_-]{3,64}\b/g`) so the picker's intuition
+ * about what counts as a mention can never disagree with the
+ * server's notification routing.
+ *
+ * Returns `null` whenever:
+ *   - the caret is at offset 0,
+ *   - there is no `@` between the caret and the previous whitespace
+ *     boundary,
+ *   - the `@` is preceded by a non-whitespace, non-newline character
+ *     (so an email address mid-word like `foo@bar` does NOT open
+ *     the picker), or
+ *   - the candidate query contains a character outside the mention
+ *     charset (`[a-zA-Z0-9_-]`).
+ *
+ * The picker DOES open with a 0–2 character query — that's the
+ * "you've started typing a mention" UX. But it can NEVER commit
+ * such a token: `insertMentionToken` only fires for a `MentionUser`
+ * which always has an id of at least 3 chars, matching the server
+ * regex's min-length requirement.
+ */
+export function detectMentionContext(value, caret) {
+    if (typeof value !== 'string')
+        return null;
+    if (caret <= 0 || caret > value.length)
+        return null;
+    // Walk back from the caret looking for a `@`. Stop early on any
+    // character that is neither a valid mention char nor `@`. This
+    // means a typed space, newline, punctuation, etc. terminates the
+    // mention candidate the user was building.
+    let i = caret - 1;
+    while (i >= 0) {
+        const ch = value.charCodeAt(i);
+        if (ch === 64 /* @ */)
+            break;
+        if (!isMentionChar(ch))
+            return null;
+        i -= 1;
+    }
+    if (i < 0)
+        return null;
+    // The `@` must sit at the start of the field or be preceded by
+    // whitespace / newline. Otherwise we're mid-word (think `foo@bar`),
+    // which is not a mention.
+    if (i > 0) {
+        const prev = value.charCodeAt(i - 1);
+        if (!isBoundary(prev))
+            return null;
+    }
+    const query = value.slice(i + 1, caret);
+    // Server caps queries at 64 chars; the picker simply stops
+    // suggesting once the typed query exceeds that — extra typing
+    // closes the picker so the user can complete an email or other
+    // long token without staring at a dead dropdown.
+    if (query.length > 64)
+        return null;
+    return { start: i, end: caret, query };
+}
+function isMentionChar(code) {
+    // [a-zA-Z0-9_-] — keep this in lock-step with the regex in
+    // `cms-core/realtime/notifications.ts:extractMentionedUserIds`.
+    if (code === 95 /* _ */ || code === 45 /* - */)
+        return true;
+    if (code >= 48 && code <= 57)
+        return true; // 0-9
+    if (code >= 65 && code <= 90)
+        return true; // A-Z
+    if (code >= 97 && code <= 122)
+        return true; // a-z
+    return false;
+}
+function isBoundary(code) {
+    // ASCII space, tab, line-feed, or carriage-return. We deliberately
+    // do NOT widen this to the full Unicode whitespace class — the
+    // server-side `extractMentionedUserIds` regex in
+    // `cms-core/realtime/notifications.ts` uses `\s` which DOES match
+    // Unicode whitespace, but its `^` anchor means the only realistic
+    // mid-string boundaries in practice are these four ASCII chars
+    // (a CMS comment body containing U+00A0 NBSP before an `@` would
+    // be both unusual and not worth opening the picker for).
+    return code === 32 || code === 9 || code === 10 || code === 13;
+}
+export function insertMentionToken(value, context, userId) {
+    const hasTrailingSpace = value.charAt(context.end) === ' ';
+    // If the user already has a space immediately after the mention
+    // region, reuse it (don't double-space) but still advance the
+    // caret past that space so the next keystroke continues naturally
+    // rather than landing back in front of the space.
+    const trailingSpace = hasTrailingSpace ? '' : ' ';
+    const token = `@${userId}${trailingSpace}`;
+    const before = value.slice(0, context.start);
+    const after = value.slice(context.end);
+    return {
+        value: `${before}${token}${after}`,
+        caret: context.start + token.length + (hasTrailingSpace ? 1 : 0),
+    };
+}
+//# sourceMappingURL=mention-picker.js.map

package/dist/lib/mention-picker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mention-picker.js","sourceRoot":"","sources":["../../src/lib/mention-picker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AAYjC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAa;IACpD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,gEAAgE;QAChE,6DAA6D;QAC7D,6CAA6C;QAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;IACjC,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAgB,mBAAmB,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE;QACxF,MAAM,EAAE,KAAK;KACd,CAAC,CAAA;IACF,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,mBAAmB,GAAG,CAAC,MAAM,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAA;IAChG,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,CAAA;AACvC,CAAC;AAoBD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa,EAAE,KAAa;IAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1C,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAEnD,gEAAgE;IAChE,+DAA+D;IAC/D,iEAAiE;IACjE,2CAA2C;IAC3C,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAA;IACjB,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACd,MAAM,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QAC9B,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO;YAAE,MAAK;QAC5B,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAA;QACnC,CAAC,IAAI,CAAC,CAAA;IACR,CAAC;IACD,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAEtB,+DAA+D;IAC/D,oEAAoE;IACpE,0BAA0B;IAC1B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACV,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;IACpC,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAA;IACvC,2DAA2D;IAC3D,8DAA8D;IAC9D,+DAA+D;IAC/D,iDAAiD;IACjD,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAA;IAElC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;AACxC,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,2DAA2D;IAC3D,gEAAgE;IAChE,IAAI,IAAI,KAAK,EAAE,CAAC,OAAO,IAAI,IAAI,KAAK,EAAE,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IAC3D,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,IAAI,CAAA,CAAC,MAAM;IAChD,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,IAAI,CAAA,CAAC,MAAM;IAChD,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAA,CAAC,MAAM;IACjD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,mEAAmE;IACnE,+DAA+D;IAC/D,iDAAiD;IACjD,kEAAkE;IAClE,kEAAkE;IAClE,+DAA+D;IAC/D,iEAAiE;IACjE,yDAAyD;IACzD,OAAO,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,CAAA;AAChE,CAAC;AAeD,MAAM,UAAU,kBAAkB,CAChC,KAAa,EACb,OAAuB,EACvB,MAAc;IAEd,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAA;IAC1D,gEAAgE;IAChE,8DAA8D;IAC9D,kEAAkE;IAClE,kDAAkD;IAClD,MAAM,aAAa,GAAG,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA;IACjD,MAAM,KAAK,GAAG,IAAI,MAAM,GAAG,aAAa,EAAE,CAAA;IAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACtC,OAAO;QACL,KAAK,EAAE,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,EAAE;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACjE,CAAA;AACH,CAAC"}

package/dist/lib/notifications-client.d.ts

@@ -0,0 +1,121 @@
+/**
+ * Notifications REST client — typed wrapper around the slice-6 endpoints
+ * (`/notifications`, `/notifications/unread-count`,
+ * `/notifications/:id/read`, `/notifications/read-all`).
+ *
+ * Lives in `cms-admin` so the bell, the toast layer, and any future
+ * background sync agent share one request path, error model, and DTO
+ * shape. The wire format mirrors `NotificationDTO` in
+ * `@prenta/core/realtime/notifications.ts`; we duplicate the
+ * shape here to avoid taking a hard dependency on the server module
+ * (which carries Prisma types that don't belong in the admin bundle).
+ */
+export type NotificationKind = 'comment_reply' | 'comment_resolved' | 'comment_mention';
+export interface CommentReplyPayload {
+    kind: 'comment_reply';
+    actorId: string | null;
+    actorName: string | null;
+    excerpt: string;
+}
+export interface CommentResolvedPayload {
+    kind: 'comment_resolved';
+    actorId: string | null;
+    actorName: string | null;
+    rootExcerpt: string;
+}
+export interface CommentMentionPayload {
+    kind: 'comment_mention';
+    actorId: string | null;
+    actorName: string | null;
+    excerpt: string;
+}
+export type NotificationPayload = CommentReplyPayload | CommentResolvedPayload | CommentMentionPayload;
+export interface Notification {
+    id: string;
+    userId: string;
+    kind: NotificationKind;
+    documentId: string | null;
+    commentId: string | null;
+    payload: NotificationPayload;
+    readAt: string | null;
+    createdAt: string;
+}
+export type NotificationOutcome<T> = {
+    ok: true;
+    result: T;
+} | {
+    ok: false;
+    error: string;
+    status: number;
+};
+export interface ListNotificationsOptions {
+    /** Default: false. When true the response includes already-read rows. */
+    includeRead?: boolean;
+    /** Default: server-side cap. Hard upper bound is 200. */
+    pageSize?: number;
+}
+export declare function listNotifications(opts?: ListNotificationsOptions): Promise<NotificationOutcome<Notification[]>>;
+export declare function unreadCount(): Promise<NotificationOutcome<number>>;
+export declare function markNotificationRead(id: string): Promise<NotificationOutcome<Notification>>;
+export declare function markAllNotificationsRead(): Promise<NotificationOutcome<number>>;
+/**
+ * Subscribe to the per-user SSE push channel that ships notifications
+ * the instant they're persisted server-side. Replaces the 30-second
+ * poll loop in the notification bell.
+ *
+ * The browser's native `EventSource` handles reconnection for us — on
+ * a server-initiated close (the stream caps at ~4 minutes by design),
+ * the connection re-opens automatically. We DO NOT abort the poll
+ * fallback in callers: SSE is a latency-win, the poll is what keeps
+ * multi-node deployments correct (each node only pushes to its own
+ * subscribers).
+ *
+ * Returns a `close()` function that callers MUST invoke on unmount —
+ * otherwise the browser keeps the connection open and we leak event
+ * listeners.
+ *
+ * `EventSource` itself isn't available in the JSDOM test environment;
+ * callers can inject a `factory` to substitute a test double. In
+ * production we fall back to the global `EventSource` when no factory
+ * is supplied.
+ */
+export interface NotificationStreamOptions {
+    /** Called for every `event: notification` frame. */
+    onNotification: (n: Notification) => void;
+    /** Called once on the `event: ready` frame. */
+    onReady?: (payload: {
+        userId: string;
+    }) => void;
+    /** Called on connection errors. Useful for falling back to the poll loop. */
+    onError?: (event: Event) => void;
+    /**
+     * Optional factory so unit tests can inject a fake `EventSource`,
+     * or a null sentinel when the environment lacks one (SSR, JSDOM
+     * without a polyfill). Production code can rely on the default
+     * (global `EventSource`).
+     */
+    factory?: (url: string) => EventSourceLike | null;
+}
+/**
+ * Minimal subset of the `EventSource` interface our subscriber relies
+ * on. Browsers ship the full DOM type; the admin only needs add/remove
+ * event listeners plus `close()`.
+ */
+export interface EventSourceLike {
+    addEventListener: (type: string, listener: (event: MessageEvent | Event) => void) => void;
+    removeEventListener?: (type: string, listener: (event: MessageEvent | Event) => void) => void;
+    close: () => void;
+}
+export interface NotificationStreamHandle {
+    /** Tear down the EventSource and stop receiving events. Idempotent. */
+    close: () => void;
+}
+export declare function subscribeNotificationStream(opts: NotificationStreamOptions): NotificationStreamHandle;
+/**
+ * Cheap single-line summary for the bell list — the server gives us a
+ * structured payload, but the dropdown wants one human-readable string
+ * per row. Falls back to `Notification` when an unknown kind sneaks in
+ * (defensive against future server-side additions).
+ */
+export declare function notificationSummary(notification: Notification): string;
+//# sourceMappingURL=notifications-client.d.ts.map