@rebasepro/app 0.13.1-canary.gf57a27e → 0.14.0

package/dist/components/LoginView/oauth-redirect-flow.d.ts

@@ -0,0 +1,86 @@
+/**
+ * The browser half of the OAuth authorization-code flow.
+ *
+ * The server only ever sees a `code` and a `redirectUri` taken from the
+ * request body, so `state`, PKCE and the binding between "this browser started
+ * a login" and "this code came back" are, by construction, the client's job.
+ * In the admin login they had been nobody's job: the authorize URL carried no
+ * `state`, and the return leg accepted any `?code=` as long as a localStorage
+ * marker naming the *provider* was set — a marker written on button click and
+ * removed only on a callback that carried a code, so abandoning the flow left
+ * it set indefinitely.
+ *
+ * Everything here is provider-agnostic on purpose. A button that wants a new
+ * provider calls {@link startOAuthRedirect} and gets state, expiry and PKCE
+ * without deciding anything, which is what stops the next provider shipping
+ * without them.
+ */
+export interface OAuthRedirectRequest {
+    /** Provider id, as mounted at `POST /auth/<id>`. */
+    provider: string;
+    /** The provider's authorization endpoint. */
+    authorizeUrl: string;
+    clientId: string;
+    scope: string;
+    /** Where the provider sends the browser back. Echoed to the token exchange. */
+    redirectUri: string;
+    /** Set when the provider implements PKCE. */
+    pkce?: boolean;
+    /** Extra authorize-endpoint parameters (`response_type`, and so on). */
+    params?: Record<string, string>;
+}
+/** What the browser remembers between leaving for the provider and coming back. */
+export interface PendingOAuthRedirect {
+    provider: string;
+    state: string;
+    codeVerifier?: string;
+    redirectUri: string;
+    startedAt: number;
+}
+export type OAuthCallbackResult = 
+/** No OAuth callback in this URL. */
+{
+    status: "none";
+}
+/** The provider reported a failure, or the user declined. */
+ | {
+    status: "error";
+    error: string;
+}
+/**
+ * A code arrived that this browser cannot account for: no pending
+ * authorization, an expired one, or a `state` that does not match. This is
+ * what a login-CSRF / code-injection attempt looks like.
+ */
+ | {
+    status: "mismatch";
+} | {
+    status: "ok";
+    provider: string;
+    code: string;
+    codeVerifier?: string;
+    redirectUri: string;
+};
+type Storage = Pick<globalThis.Storage, "getItem" | "setItem" | "removeItem">;
+export declare function readPendingOAuthRedirect(storage?: Storage | null): PendingOAuthRedirect | null;
+export declare function clearPendingOAuthRedirect(storage?: Storage | null): void;
+/**
+ * Build the authorize URL and the pending record that will validate its
+ * callback. Split out from {@link startOAuthRedirect} so it can be tested
+ * without navigating.
+ */
+export declare function buildOAuthAuthorization(request: OAuthRedirectRequest, now?: number): Promise<{
+    url: string;
+    pending: PendingOAuthRedirect;
+}>;
+/** Remember the authorization and send the browser to the provider. */
+export declare function startOAuthRedirect(request: OAuthRedirectRequest, storage?: Storage | null): Promise<void>;
+/**
+ * Interpret a return from the provider.
+ *
+ * Clears the pending record on **every** path that saw a callback — including
+ * `?error=` and a state mismatch — so a declined or abandoned consent screen
+ * cannot leave the browser primed to accept somebody else's code later.
+ */
+export declare function consumeOAuthCallback(search: string, storage?: Storage | null, now?: number): OAuthCallbackResult;
+export {};

package/dist/hooks/data/useRelationSelector.d.ts

@@ -36,6 +36,17 @@ export interface UseRelationSelectorProps<M extends Record<string, any> = any> {
      * Property name to use as the secondary display field
      */
     descriptionProperty?: keyof M;
+    /**
+     * Whether the list should be fetched at all. Defaults to `true`.
+     *
+     * A picker that is mounted is not a picker that is open, and the two used
+     * to be the same thing here: the fetch ran on mount, so a collection table
+     * with a relation column paid for one query — or one realtime subscription
+     * — per rendered row before anyone clicked a cell. Pass `false` until the
+     * list is actually needed and nothing is requested; flipping it to `true`
+     * fetches once, and it never goes back.
+     */
+    enabled?: boolean;
 }
 export interface RelationSelectorController {
     items: RelationItem[];
@@ -49,4 +60,4 @@ export interface RelationSelectorController {
 /**
  * Hook to manage relation selection with data fetching from Rebase data source
  */
-export declare function useRelationSelector<M extends Record<string, any> = any>({ path, collection, fixedFilter, pageSize, getLabelFromEntity, getDescriptionFromEntity, descriptionProperty }: UseRelationSelectorProps<M>): RelationSelectorController;
+export declare function useRelationSelector<M extends Record<string, any> = any>({ path, collection, fixedFilter, pageSize, getLabelFromEntity, getDescriptionFromEntity, descriptionProperty, enabled }: UseRelationSelectorProps<M>): RelationSelectorController;

package/dist/index.es.js

@@ -1,5 +1,5 @@
 import React, { createContext, lazy, useCallback, useContext, useEffect, useId, useLayoutEffect, useMemo, useRef, useState } from "react";
-import { Alert, AlertCircleIcon, AlertTriangleIcon, AppWindow, ArrowDownIcon, ArrowLeftIcon, ArrowRightLeftIcon, ArrowUpDownIcon, ArrowUpIcon, Avatar, BooleanSwitch, Button, CalendarIcon, Card, CenteredView, CheckCircle2Icon, CheckIcon, Checkbox, ChevronDownIcon, ChevronLeftIcon, ChevronRightIcon, ChevronsLeftIcon, ChevronsRightIcon, Chip, CircleDotIcon, CircleUserIcon, CircularProgress, ColumnsIcon, Container, Dialog, DialogActions, DialogContent, DialogTitle, DollarSignIcon, ErrorBoundary, FileIcon, FileTextIcon, FilterChip, FilterIcon, FolderIcon, FolderKanbanIcon, IconButton, KanbanIcon, KanbanView, LanguagesIcon, LayoutGridIcon, ListIcon, ListPlusIcon, ListTodoIcon, LoadingButton, LogOutIcon, MailIcon, Menu, MenuItem, MessageCircleIcon, MoonIcon, MultiSelect, MultiSelectItem, PanelLeftIcon, Paper, PenLineIcon, PencilIcon, PhoneIcon, PinIcon, PlusIcon, Popover, RefreshCwIcon, SearchBar, Select, SelectItem, Separator, SettingsIcon, Skeleton, StickyNoteIcon, SunIcon, SunMoonIcon, Tab, Table, TableBody, TableCell, TableHeader, TableRow, Tabs, TagIcon, TextField, ToggleButtonGroup, Tooltip, Trash2Icon, TrendingUpIcon, TypeIcon, Typography, UserIcon, UserPlus, UsersIcon, VideoIcon, Wand2Icon, WrenchIcon, XIcon, cls, colorClassesMapping, coolIconKeys, defaultBorderMixin, getColorSchemeForKey, getColorSchemeForSeed, iconKeys, iconSize, lucideIcons } from "@rebasepro/ui";
+import { Alert, AlertCircleIcon, AlertTriangleIcon, AppWindow, ArrowDownIcon, ArrowLeftIcon, ArrowRightLeftIcon, ArrowUpDownIcon, ArrowUpIcon, Avatar, BooleanSwitch, Button, CalendarIcon, Card, CenteredView, CheckCircle2Icon, CheckIcon, Checkbox, ChevronDownIcon, ChevronLeftIcon, ChevronRightIcon, ChevronsLeftIcon, ChevronsRightIcon, Chip, CircleDotIcon, CircleUserIcon, CircularProgress, ColumnsIcon, Container, Dialog, DialogActions, DialogContent, DialogTitle, DollarSignIcon, ErrorBoundary, FileIcon, FileTextIcon, FilterChip, FilterIcon, FolderIcon, FolderKanbanIcon, IconButton, KanbanIcon, KanbanView, LanguagesIcon, LayoutGridIcon, ListIcon, ListPlusIcon, ListTodoIcon, LoadingButton, LogOutIcon, LucideIconByName, MailIcon, Menu, MenuItem, MessageCircleIcon, MoonIcon, MultiSelect, MultiSelectItem, PanelLeftIcon, Paper, PenLineIcon, PencilIcon, PhoneIcon, PinIcon, PlusIcon, Popover, RefreshCwIcon, SearchBar, Select, SelectItem, Separator, SettingsIcon, Skeleton, StickyNoteIcon, SunIcon, SunMoonIcon, Tab, Table, TableBody, TableCell, TableHeader, TableRow, Tabs, TagIcon, TextField, ToggleButtonGroup, Tooltip, Trash2Icon, TrendingUpIcon, TypeIcon, Typography, UserIcon, UserPlus, UsersIcon, VideoIcon, Wand2Icon, WrenchIcon, XIcon, cls, colorClassesMapping, coolIconKeys, defaultBorderMixin, getColorSchemeForKey, getColorSchemeForSeed, iconKeys, iconSize } from "@rebasepro/ui";
 import { ALL_WHERE_FILTER_OPS, DEFAULT_DATA_SOURCE_KEY, DEFAULT_FILTERABLE_RELATION_KINDS, DEFAULT_STORAGE_SOURCE_KEY, EntityReference, EntityRelation, GeoPoint, RebaseApiError, Vector, getDataSourceCapabilities, isLazyComponentRef, isRelationalCollectionConfig } from "@rebasepro/types";
 import { UNRENDERED_SLOTS, resolveAdminCollection } from "@rebasepro/admin-types";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
@@ -1007,7 +1007,7 @@ var DEFAULT_PAGE_SIZE$1 = 10;
 /**
 * Hook to manage relation selection with data fetching from Rebase data source
 */
-function useRelationSelector({ path, collection, fixedFilter, pageSize = DEFAULT_PAGE_SIZE$1, getLabelFromEntity, getDescriptionFromEntity, descriptionProperty }) {
+function useRelationSelector({ path, collection, fixedFilter, pageSize = DEFAULT_PAGE_SIZE$1, getLabelFromEntity, getDescriptionFromEntity, descriptionProperty, enabled = true }) {
 	const dataClient = useData();
 	const [items, setItems] = useState([]);
 	const [isLoading, setIsLoading] = useState(false);
@@ -1018,6 +1018,7 @@ function useRelationSelector({ path, collection, fixedFilter, pageSize = DEFAULT
 	const [limit, setLimit] = useState(pageSize);
 	const unsubscribeRef = useRef(null);
 	const searchTimeoutRef = useRef(null);
+	const hasLoadedRef = useRef(false);
 	const setLoading = useCallback((loading) => {
 		isLoadingRef.current = loading;
 		setIsLoading(loading);
@@ -1066,12 +1067,14 @@ function useRelationSelector({ path, collection, fixedFilter, pageSize = DEFAULT
 		const whereParams = fixedFilter && Object.keys(fixedFilter).length > 0 ? fixedFilter : void 0;
 		const onEntitiesUpdate = (res) => {
 			const newItems = res.data.map((e) => entityToRelationItem(e));
+			hasLoadedRef.current = true;
 			setItems(newItems);
 			setHasMore(res.meta.hasMore);
 			setLoading(false);
 		};
 		const onErrorUpdate = (fetchError) => {
 			console.error("useRelationSelector: Error fetching data:", fetchError);
+			hasLoadedRef.current = true;
 			setError(fetchError);
 			setLoading(false);
 		};
@@ -1141,11 +1144,16 @@ function useRelationSelector({ path, collection, fixedFilter, pageSize = DEFAULT
 		setLoading
 	]);
 	useEffect(() => {
+		if (!enabled) return;
 		fetchData();
 		return () => {
 			cleanupSubscription();
 		};
-	}, [fetchData]);
+	}, [
+		fetchData,
+		enabled,
+		cleanupSubscription
+	]);
 	useEffect(() => {
 		return () => {
 			if (searchTimeoutRef.current) clearTimeout(searchTimeoutRef.current);
@@ -1153,7 +1161,7 @@ function useRelationSelector({ path, collection, fixedFilter, pageSize = DEFAULT
 	}, []);
 	return useMemo(() => ({
 		items,
-		isLoading,
+		isLoading: isLoading || enabled && !hasLoadedRef.current,
 		error,
 		search,
 		loadMore,
@@ -1166,7 +1174,8 @@ function useRelationSelector({ path, collection, fixedFilter, pageSize = DEFAULT
 		search,
 		loadMore,
 		hasMore,
-		entityToRelationItem
+		entityToRelationItem,
+		enabled
 	]);
 }
 //#endregion
@@ -9358,6 +9367,133 @@ function UserDisplay({ user }) {
 	});
 }
 //#endregion
+//#region src/components/LoginView/oauth-redirect-flow.ts
+/**
+* The browser half of the OAuth authorization-code flow.
+*
+* The server only ever sees a `code` and a `redirectUri` taken from the
+* request body, so `state`, PKCE and the binding between "this browser started
+* a login" and "this code came back" are, by construction, the client's job.
+* In the admin login they had been nobody's job: the authorize URL carried no
+* `state`, and the return leg accepted any `?code=` as long as a localStorage
+* marker naming the *provider* was set — a marker written on button click and
+* removed only on a callback that carried a code, so abandoning the flow left
+* it set indefinitely.
+*
+* Everything here is provider-agnostic on purpose. A button that wants a new
+* provider calls {@link startOAuthRedirect} and gets state, expiry and PKCE
+* without deciding anything, which is what stops the next provider shipping
+* without them.
+*/
+/** sessionStorage, not localStorage: a login attempt belongs to one tab. */
+var STORAGE_KEY = "rebase_oauth_redirect";
+/** How long a started authorization stays valid. */
+var PENDING_TTL_MS = 600 * 1e3;
+function defaultStorage() {
+	try {
+		return window.sessionStorage;
+	} catch {
+		return null;
+	}
+}
+function base64Url(bytes) {
+	let binary = "";
+	for (const byte of bytes) binary += String.fromCharCode(byte);
+	return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function randomToken(byteLength = 32) {
+	const bytes = new Uint8Array(byteLength);
+	crypto.getRandomValues(bytes);
+	return base64Url(bytes);
+}
+async function pkceChallenge(verifier) {
+	const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(verifier));
+	return base64Url(new Uint8Array(digest));
+}
+function readPendingOAuthRedirect(storage = defaultStorage()) {
+	if (!storage) return null;
+	const raw = storage.getItem(STORAGE_KEY);
+	if (!raw) return null;
+	try {
+		const parsed = JSON.parse(raw);
+		if (!parsed?.provider || !parsed?.state) return null;
+		return parsed;
+	} catch {
+		return null;
+	}
+}
+function clearPendingOAuthRedirect(storage = defaultStorage()) {
+	storage?.removeItem(STORAGE_KEY);
+}
+/**
+* Build the authorize URL and the pending record that will validate its
+* callback. Split out from {@link startOAuthRedirect} so it can be tested
+* without navigating.
+*/
+async function buildOAuthAuthorization(request, now = Date.now()) {
+	const state = randomToken();
+	const url = new URL(request.authorizeUrl);
+	url.searchParams.set("response_type", "code");
+	url.searchParams.set("client_id", request.clientId);
+	url.searchParams.set("redirect_uri", request.redirectUri);
+	url.searchParams.set("scope", request.scope);
+	url.searchParams.set("state", state);
+	for (const [key, value] of Object.entries(request.params ?? {})) url.searchParams.set(key, value);
+	let codeVerifier;
+	if (request.pkce) {
+		codeVerifier = randomToken(32);
+		url.searchParams.set("code_challenge", await pkceChallenge(codeVerifier));
+		url.searchParams.set("code_challenge_method", "S256");
+	}
+	return {
+		url: url.toString(),
+		pending: {
+			provider: request.provider,
+			state,
+			codeVerifier,
+			redirectUri: request.redirectUri,
+			startedAt: now
+		}
+	};
+}
+/** Remember the authorization and send the browser to the provider. */
+async function startOAuthRedirect(request, storage = defaultStorage()) {
+	const { url, pending } = await buildOAuthAuthorization(request);
+	storage?.setItem(STORAGE_KEY, JSON.stringify(pending));
+	window.location.href = url;
+}
+/**
+* Interpret a return from the provider.
+*
+* Clears the pending record on **every** path that saw a callback — including
+* `?error=` and a state mismatch — so a declined or abandoned consent screen
+* cannot leave the browser primed to accept somebody else's code later.
+*/
+function consumeOAuthCallback(search, storage = defaultStorage(), now = Date.now()) {
+	const params = new URLSearchParams(search);
+	const code = params.get("code");
+	const state = params.get("state");
+	const error = params.get("error");
+	if (!code && !error && !state) return { status: "none" };
+	const pending = readPendingOAuthRedirect(storage);
+	clearPendingOAuthRedirect(storage);
+	if (error) return {
+		status: "error",
+		error
+	};
+	if (!code) return { status: "mismatch" };
+	if (!pending) return { status: "mismatch" };
+	if (now - pending.startedAt > PENDING_TTL_MS) return { status: "mismatch" };
+	if (!state || state !== pending.state) return { status: "mismatch" };
+	return {
+		status: "ok",
+		provider: pending.provider,
+		code,
+		codeVerifier: pending.codeVerifier,
+		redirectUri: pending.redirectUri
+	};
+}
+//#endregion
 //#region src/components/LoginView/LoginView.tsx
 /**
 * The shared field background mixin (`dark:bg-black/30`) is invisible on the
@@ -9427,19 +9563,25 @@ function LoginView({ logo, authController, noUserComponent, disableSignupScreen
 		return () => clearTimeout(timer);
 	}, []);
 	useEffect(() => {
-		const code = new URLSearchParams(window.location.search).get("code");
-		const provider = localStorage.getItem("rebase_oauth_provider");
-		if (code && provider) {
-			localStorage.removeItem("rebase_oauth_provider");
-			const cleanUrl = window.location.origin + window.location.pathname;
-			window.history.replaceState({}, document.title, cleanUrl);
-			if (authController.oauthLogin) authController.oauthLogin(provider, {
-				code,
-				redirectUri: cleanUrl
-			}).catch((err) => {
-				console.error(`${provider} login failed:`, err);
-			});
+		const result = consumeOAuthCallback(window.location.search);
+		if (result.status === "none") return;
+		const cleanUrl = window.location.origin + window.location.pathname;
+		window.history.replaceState({}, document.title, cleanUrl);
+		if (result.status === "error") {
+			console.error(`OAuth sign-in failed: ${result.error}`);
+			return;
+		}
+		if (result.status === "mismatch") {
+			console.error("Ignoring an OAuth code that does not match a sign-in this browser started.");
+			return;
 		}
+		if (authController.oauthLogin) authController.oauthLogin(result.provider, {
+			code: result.code,
+			redirectUri: result.redirectUri,
+			...result.codeVerifier ? { codeVerifier: result.codeVerifier } : {}
+		}).catch((err) => {
+			console.error(`${result.provider} login failed:`, err);
+		});
 	}, [authController]);
 	let logoComponent;
 	if (logo) logoComponent = /* @__PURE__ */ jsx("img", {
@@ -9710,10 +9852,13 @@ var GitHubIcon = () => /* @__PURE__ */ jsx("svg", {
 });
 function GitHubLoginButton({ disabled, githubClientId }) {
 	const handleClick = () => {
-		localStorage.setItem("rebase_oauth_provider", "github");
-		const redirectUri = encodeURIComponent(window.location.origin + window.location.pathname);
-		const scope = "read:user,user:email";
-		window.location.href = `https://github.com/login/oauth/authorize?client_id=${githubClientId}&redirect_uri=${redirectUri}&scope=${scope}`;
+		startOAuthRedirect({
+			provider: "github",
+			authorizeUrl: "https://github.com/login/oauth/authorize",
+			clientId: githubClientId,
+			redirectUri: window.location.origin + window.location.pathname,
+			scope: "read:user,user:email"
+		});
 	};
 	return /* @__PURE__ */ jsx(LoginButton, {
 		disabled,
@@ -9731,10 +9876,13 @@ var LinkedInIcon = () => /* @__PURE__ */ jsx("svg", {
 });
 function LinkedInLoginButton({ disabled, linkedinClientId }) {
 	const handleClick = () => {
-		localStorage.setItem("rebase_oauth_provider", "linkedin");
-		const redirectUri = encodeURIComponent(window.location.origin + window.location.pathname);
-		const scope = "openid profile email";
-		window.location.href = `https://www.linkedin.com/oauth/v2/authorization?response_type=code&client_id=${linkedinClientId}&redirect_uri=${redirectUri}&scope=${scope}`;
+		startOAuthRedirect({
+			provider: "linkedin",
+			authorizeUrl: "https://www.linkedin.com/oauth/v2/authorization",
+			clientId: linkedinClientId,
+			redirectUri: window.location.origin + window.location.pathname,
+			scope: "openid profile email"
+		});
 	};
 	return /* @__PURE__ */ jsx(LoginButton, {
 		disabled,
@@ -9746,6 +9894,9 @@ function LinkedInLoginButton({ disabled, linkedinClientId }) {
 function LoginForm({ onClose, onForgotPassword, authController, registrationMode, noUserComponent, disableSignupScreen, bootstrapMode = false, switchToRegister, switchToLogin, defaultEmail, defaultPassword, onNewsletterOptIn, newsletterOptIn = false, setNewsletterOptIn }) {
 	const passwordRef = useRef(null);
 	const { t } = useTranslation();
+	const emailId = useId();
+	const passwordId = useId();
+	const displayNameId = useId();
 	const [email, setEmail] = useState(defaultEmail);
 	const [password, setPassword] = useState(defaultPassword);
 	const [displayName, setDisplayName] = useState();
@@ -9814,11 +9965,14 @@ function LoginForm({ onClose, onForgotPassword, authController, registrationMode
 				className: "w-full mb-3",
 				children: [/* @__PURE__ */ jsx(Typography, {
 					variant: "label",
+					component: "label",
 					color: "secondary",
 					className: "mb-1",
+					htmlFor: displayNameId,
 					children: "Display Name"
 				}), /* @__PURE__ */ jsx(TextField, {
 					placeholder: "Jane Doe (optional)",
+					id: displayNameId,
 					className: loginFieldClasses,
 					value: displayName ?? "",
 					disabled: authController.initialLoading,
@@ -9831,11 +9985,14 @@ function LoginForm({ onClose, onForgotPassword, authController, registrationMode
 				className: "w-full mb-3",
 				children: [/* @__PURE__ */ jsx(Typography, {
 					variant: "label",
+					component: "label",
 					color: "secondary",
 					className: "mb-1",
+					htmlFor: emailId,
 					children: "Email"
 				}), /* @__PURE__ */ jsx(TextField, {
 					placeholder: "you@example.com",
+					id: emailId,
 					className: loginFieldClasses,
 					autoFocus: true,
 					value: email ?? "",
@@ -9849,11 +10006,14 @@ function LoginForm({ onClose, onForgotPassword, authController, registrationMode
 				className: "w-full mb-1",
 				children: [/* @__PURE__ */ jsx(Typography, {
 					variant: "label",
+					component: "label",
 					color: "secondary",
 					className: "mb-1",
+					htmlFor: passwordId,
 					children: "Password"
 				}), /* @__PURE__ */ jsx(TextField, {
 					placeholder: "••••••••",
+					id: passwordId,
 					className: loginFieldClasses,
 					value: password ?? "",
 					disabled: authController.initialLoading,
@@ -9942,6 +10102,7 @@ function ForgotPasswordForm({ onClose, authController }) {
 	const [email, setEmail] = useState("");
 	const [submitted, setSubmitted] = useState(false);
 	const [error, setError] = useState(null);
+	const emailId = useId();
 	useEffect(() => {
 		if (!document) return;
 		const escFunction = (event) => {
@@ -10042,11 +10203,14 @@ function ForgotPasswordForm({ onClose, authController }) {
 				className: "w-full mb-3",
 				children: [/* @__PURE__ */ jsx(Typography, {
 					variant: "label",
+					component: "label",
 					color: "secondary",
 					className: "mb-1",
+					htmlFor: emailId,
 					children: "Email"
 				}), /* @__PURE__ */ jsx(TextField, {
 					placeholder: "you@example.com",
+					id: emailId,
 					className: loginFieldClasses,
 					autoFocus: true,
 					value: email,
@@ -10470,6 +10634,7 @@ var en = {
 	flatten_arrays: "Flatten arrays",
 	download: "Download",
 	large_number_of_documents: "This collection has a large number of documents ({{count}}).",
+	too_many_documents_to_export: "This collection has more documents ({{count}}) than the browser can export in a single file (limit {{limit}}). Filter it down before exporting.",
 	include_undefined_values: "Include undefined values",
 	submit: "Submit",
 	no_filterable_properties: "No filterable properties available",
@@ -11368,6 +11533,7 @@ var es = {
 	flatten_arrays: "Aplanar arrays",
 	download: "Descargar",
 	large_number_of_documents: "Esta colección posee un gran número de documentos ({{count}}).",
+	too_many_documents_to_export: "Esta colección tiene más documentos ({{count}}) de los que el navegador puede exportar en un solo archivo (límite {{limit}}). Fíltrala antes de exportar.",
 	include_undefined_values: "Incluir valores omitidos (undefined)",
 	submit: "Enviar",
 	no_filterable_properties: "No hay propiedades filtrables disponibles",
@@ -12225,6 +12391,7 @@ var de = {
 	flatten_arrays: "Arrays glätten",
 	download: "Herunterladen",
 	large_number_of_documents: "Diese Sammlung hat eine große Anzahl von Dokumenten ({{count}}).",
+	too_many_documents_to_export: "Diese Sammlung enthält mehr Dokumente ({{count}}), als der Browser in einer einzigen Datei exportieren kann (Grenze {{limit}}). Filtern Sie sie vor dem Export.",
 	include_undefined_values: "Undefinierte Werte einschließen",
 	submit: "Einreichen",
 	no_filterable_properties: "Keine filterbaren Eigenschaften verfügbar",
@@ -13072,6 +13239,7 @@ var fr = {
 	flatten_arrays: "Aplatir les tableaux",
 	download: "Télécharger",
 	large_number_of_documents: "Cette collection contient un grand nombre de documents ({{count}}).",
+	too_many_documents_to_export: "Cette collection contient plus de documents ({{count}}) que le navigateur ne peut en exporter dans un seul fichier (limite {{limit}}). Filtrez-la avant d'exporter.",
 	include_undefined_values: "Inclure les valeurs non définies",
 	submit: "Soumettre",
 	no_filterable_properties: "Aucune propriété filtrable disponible",
@@ -13919,6 +14087,7 @@ var it = {
 	flatten_arrays: "Appiattisci gli array",
 	download: "Scarica",
 	large_number_of_documents: "Questa collezione contiene un numero elevato di documenti ({{count}})",
+	too_many_documents_to_export: "Questa collezione contiene più documenti ({{count}}) di quanti il browser possa esportarne in un solo file (limite {{limit}}). Filtrala prima di esportare.",
 	include_undefined_values: "Includi valori non definiti",
 	submit: "Invia",
 	no_filterable_properties: "Nessuna proprietà filtrabile disponibile",
@@ -14766,6 +14935,7 @@ var hi = {
 	flatten_arrays: "ऐरे को फ़्लैट करें",
 	download: "डाउनलोड",
 	large_number_of_documents: "इस संग्रह में बड़ी संख्या में दस्तावेज़ हैं ({{count}})।",
+	too_many_documents_to_export: "इस संग्रह में इतने दस्तावेज़ ({{count}}) हैं कि ब्राउज़र उन्हें एक ही फ़ाइल में निर्यात नहीं कर सकता (सीमा {{limit}})। निर्यात से पहले इसे फ़िल्टर करें।",
 	include_undefined_values: "अपरिभाषित (undefined) मान शामिल करें",
 	submit: "सबमिट करें",
 	no_filterable_properties: "कोई फ़िल्टर करने योग्य गुण उपलब्ध नहीं हैं",
@@ -15618,6 +15788,7 @@ var pt = {
 	flatten_arrays: "Achatar listas",
 	download: "Descarregar",
 	large_number_of_documents: "Esta coleção tem um grande número de documentos ({{count}}).",
+	too_many_documents_to_export: "Esta coleção tem mais documentos ({{count}}) do que o navegador consegue exportar num único ficheiro (limite {{limit}}). Filtre-a antes de exportar.",
 	include_undefined_values: "Incluir valores indefinidos",
 	submit: "Submeter",
 	no_filterable_properties: "Não há propriedades filtráveis disponíveis",
@@ -16548,6 +16719,7 @@ function useRebaseAuthController(props = {}) {
 		const syncState = async (event, session) => {
 			await updateState(session);
 			if (event === "SIGNED_OUT") {
+				clearFetchCache();
 				if (isMountedRef.current) setLoginSkipped(false);
 				onSignOutRef.current?.();
 			}
@@ -16876,23 +17048,13 @@ var iconKeysMap = iconKeys.reduce((acc, key) => {
 	acc[key] = key;
 	return acc;
 }, {});
-function toPascalCase(str) {
-	return str.split(/[-_]/).map((word) => word.charAt(0).toUpperCase() + word.slice(1)).join("");
-}
-/**
-* Resolve a Lucide icon component by string key.
-* Tries direct match, PascalCase conversion, and falls back to CircleAlert.
-*/
-function resolveIcon(iconKey) {
-	const iconsMap = lucideIcons;
-	let icon = iconsMap[iconKey];
-	if (!icon) icon = iconsMap[toPascalCase(iconKey)];
-	if (!icon) icon = iconsMap.CircleAlert;
-	return icon ?? null;
-}
 /**
 * Render an icon element from a string key or existing React element.
-* This resolves the icon from the lucide-react icons map directly.
+*
+* Whether a key names an icon is decided here, against `iconKeys` — an array
+* of strings. The component behind the key is fetched by `LucideIconByName` on
+* first use: this used to index lucide's full `icons` map, which is the whole
+* library and cannot be tree-shaken.
 */
 function getIcon(iconKey, className, color, size) {
 	if (React.isValidElement(iconKey)) return iconKey;
@@ -16902,9 +17064,8 @@ function getIcon(iconKey, className, color, size) {
 		const slugifiedKey = slugify(iconKey).replace(/-/g, "_");
 		const mappedKey = iconKeysMap[iconKey] || iconKeysMap[lowerKey] || iconKeysMap[slugifiedKey];
 		if (!mappedKey) return;
-		const LucideIcon = resolveIcon(mappedKey);
-		if (!LucideIcon) return void 0;
-		return /* @__PURE__ */ jsx(LucideIcon, {
+		return /* @__PURE__ */ jsx(LucideIconByName, {
+			name: mappedKey,
 			size: typeof size === "number" ? size : iconSize[size ?? "medium"],
 			className: cls(color ? colorClassesMapping[color] : "", "select-none shrink-0", className)
 		});
@@ -16924,10 +17085,10 @@ var IconForView = React.memo(function IconForView({ collectionOrView, className,
 	}
 	const iconsCount = coolIconKeys.length;
 	if (!key) key = coolIconKeys[hashString(collectionOrView.slug) % iconsCount];
-	const LucideIcon = resolveIcon(key);
-	if (!LucideIcon) return /* @__PURE__ */ jsx(Fragment, {});
-	return /* @__PURE__ */ jsx(LucideIcon, {
-		size: typeof size === "number" ? size : iconSize[size],
+	const sizeInPx = typeof size === "number" ? size : iconSize[size];
+	return /* @__PURE__ */ jsx(LucideIconByName, {
+		name: key,
+		size: sizeInPx,
 		className: cls(color ? colorClassesMapping[color] : "", "select-none shrink-0", className)
 	});
 }, (prevProps, nextProps) => {