@svadmin/ui 0.72.0 → 0.74.0

package/dist/components/json-schema-form-state.js

@@ -0,0 +1,168 @@
+export const SCHEMA_FORM_LIMITS = Object.freeze({ depth: 32, nodes: 10_000, characters: 1_048_576 });
+const unsafe = new Set(['__proto__', 'prototype', 'constructor']);
+const record = (value) => value !== null
+    && typeof value === 'object' && !Array.isArray(value)
+    && (Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null);
+function safeKey(key) {
+    if (unsafe.has(key))
+        throw new Error('Unsafe form field');
+}
+/** wire 模式仅省略对象的 undefined；数组的空洞/undefined 不能偷偷转成 null。 */
+function copy(value, wire) {
+    const active = new Set();
+    let nodes = 0, characters = 0;
+    function visit(current, depth) {
+        if (++nodes > SCHEMA_FORM_LIMITS.nodes || depth > SCHEMA_FORM_LIMITS.depth)
+            throw new Error('Form value exceeds limits');
+        if (current === undefined && !wire)
+            return undefined;
+        if (current === null || typeof current === 'boolean')
+            return current;
+        if (typeof current === 'number' && Number.isFinite(current))
+            return current;
+        if (typeof current === 'string') {
+            characters += current.length;
+            if (characters > SCHEMA_FORM_LIMITS.characters)
+                throw new Error('Form text exceeds limits');
+            return current;
+        }
+        if ((!record(current) && !Array.isArray(current)) || active.has(current))
+            throw new Error('Expected acyclic plain form data');
+        active.add(current);
+        try {
+            if (Reflect.ownKeys(current).some(key => typeof key === 'symbol'))
+                throw new Error('Symbol values are not JSON fields');
+            if (Array.isArray(current)) {
+                if (current.length > SCHEMA_FORM_LIMITS.nodes)
+                    throw new Error('Form array exceeds limits');
+                const result = [];
+                for (let index = 0; index < current.length; index++) {
+                    const descriptor = Object.getOwnPropertyDescriptor(current, String(index));
+                    if (!descriptor || !('value' in descriptor))
+                        throw new Error('Sparse arrays and accessors are not form data');
+                    result.push(visit(descriptor.value, depth + 1));
+                }
+                if (Object.keys(current).some(key => !/^(0|[1-9][0-9]*)$/u.test(key) || Number(key) >= current.length)) {
+                    throw new Error('Array properties are not JSON fields');
+                }
+                return result;
+            }
+            const result = {};
+            for (const key of Object.keys(current)) {
+                safeKey(key);
+                characters += key.length;
+                if (characters > SCHEMA_FORM_LIMITS.characters)
+                    throw new Error('Form text exceeds limits');
+                const descriptor = Object.getOwnPropertyDescriptor(current, key);
+                if (!descriptor || !('value' in descriptor))
+                    throw new Error('Accessors are not form data');
+                if (!wire || descriptor.value !== undefined)
+                    result[key] = visit(descriptor.value, depth + 1);
+            }
+            return result;
+        }
+        finally {
+            active.delete(current);
+        }
+    }
+    return visit(value, 0);
+}
+/** Svelte 代理也通过普通数据属性读取；回调永远收不到活跃草稿的引用。 */
+export function schemaFormSnapshot(value) {
+    if (!record(value))
+        throw new Error('Form root must be an object');
+    return copy(value, true);
+}
+/** 默认值只填“缺失的键”；显式 undefined/null/false/0/空串都表示调用方的决定。 */
+export function initializeSchemaForm(schema, value) {
+    if (!record(value))
+        throw new Error('Form root must be an object');
+    const active = new Set();
+    let nodes = 0;
+    function visit(node, current, present, required, depth) {
+        if (++nodes > SCHEMA_FORM_LIMITS.nodes || depth > SCHEMA_FORM_LIMITS.depth || !record(node) || active.has(node)) {
+            throw new Error('Form schema exceeds supported traversal limits');
+        }
+        active.add(node);
+        try {
+            if (!present) {
+                if (Object.hasOwn(node, 'default'))
+                    current = copy(node.default, false);
+                else if (node.type === 'object' || node.properties)
+                    current = {};
+                else if (node.type === 'array')
+                    current = [];
+                else if (node.type === 'boolean' && required)
+                    current = false;
+            }
+            if (record(current) && (node.type === 'object' || node.properties)) {
+                let result = current;
+                for (const [key, child] of Object.entries(node.properties ?? {})) {
+                    safeKey(key);
+                    const exists = Object.hasOwn(current, key);
+                    const next = visit(child, exists ? current[key] : undefined, exists, node.required?.includes(key) ?? false, depth + 1);
+                    if ((!exists && next !== undefined) || (exists && next !== current[key])) {
+                        if (result === current)
+                            result = { ...current };
+                        result[key] = next;
+                    }
+                }
+                return result;
+            }
+            if (Array.isArray(current) && node.type === 'array' && node.items) {
+                if (current.length > SCHEMA_FORM_LIMITS.nodes)
+                    throw new Error('Form array exceeds limits');
+                const array = current;
+                const items = array.map(item => visit(node.items, item, true, true, depth + 1));
+                return items.some((item, index) => item !== array[index]) ? items : array;
+            }
+            return current;
+        }
+        finally {
+            active.delete(node);
+        }
+    }
+    return visit(schema, value, true, true, 0);
+}
+export function schemaFormArrayItem(schema) {
+    // 新增对象项也初始化其嵌套默认值及必填 false；数字留空，不猜测为 0。
+    const seed = Object.hasOwn(schema, 'default') ? copy(schema.default, false)
+        : schema.type === 'object' || schema.properties ? {}
+            : schema.type === 'array' ? [] : schema.type === 'boolean' ? false : schema.type === 'number' || schema.type === 'integer' ? undefined : '';
+    return initializeSchemaForm({ properties: { item: schema }, required: ['item'] }, { item: seed })['item'];
+}
+export function writeSchemaFormPath(value, path, nextValue) {
+    if (!path.length || path.length > SCHEMA_FORM_LIMITS.depth)
+        throw new Error('Invalid form path');
+    const next = copy(value, false);
+    let target = next;
+    for (const [index, key] of path.entries()) {
+        safeKey(key);
+        if (Array.isArray(target) && (!/^(0|[1-9][0-9]*)$/u.test(key) || Number(key) >= target.length))
+            throw new Error('Invalid array field');
+        if (index === path.length - 1) {
+            Reflect.set(target, key, copy(nextValue, false));
+        }
+        else {
+            let child = Object.hasOwn(target, key) ? Reflect.get(target, key) : undefined;
+            if (!record(child) && !Array.isArray(child)) {
+                child = {};
+                Reflect.set(target, key, child);
+            }
+            target = child;
+        }
+    }
+    return next;
+}
+/** option.value 是索引，不是 String(value)：1 与 "1"、null 与 "null" 必须可区分。 */
+export function schemaFormEnumIndex(choices, value) {
+    const index = choices.findIndex(choice => choice === value);
+    return index === -1 ? '' : String(index);
+}
+export function schemaFormEnumValue(choices, index) {
+    if (index === '')
+        return undefined;
+    if (!/^(0|[1-9][0-9]*)$/u.test(index) || !Object.hasOwn(choices, Number(index)))
+        throw new Error('Invalid form choice');
+    return choices[Number(index)];
+}

package/dist/components/network/TeamCrewTablePage.svelte

@@ -9,6 +9,10 @@
   import type { NetworkColumn } from '../content/NetworkTable.types.js';
   import { Avatar } from '../ui/avatar/index.js';
   import { Badge } from '../ui/badge/index.js';
+  import ReferenceNotice from '../content/ReferenceNotice.svelte';
+  import { captureAdminContext } from '@svadmin/core';
+  import { downloadRows } from '../export-reference.js';
+  const context = captureAdminContext();
 
   interface CrewMember { id: string; name: string; email: string; role: string; department: string; status: 'active' | 'away' | 'offline'; projects: number; }
   const i18n = useTranslation();
@@ -31,7 +35,8 @@
 {/snippet}
 
 <ContentPageShell pageId="network-team-crew" width="wide">
-  <div class="svadmin-u-60fbb7713999 svadmin-u-8dddea0773ed svadmin-u-1004c0c3954c svadmin-u-020ba687fa12 svadmin-u-64cac80d2e9a svadmin-u-3b9871a0bf93"><ContentPageHeader title={i18n.t('network.teamCrew')} description={i18n.t('network.teamCrewDescription')} /><div class="svadmin-u-60fbb7713999 svadmin-u-1eb5c6df38c1 svadmin-u-77a2a20e90d4"><Button variant="outline" size="sm"><Download class="svadmin-u-783b0d9d1e2c" />{i18n.t('common.export')}</Button><Button size="sm"><UserPlus class="svadmin-u-783b0d9d1e2c" />{i18n.t('account.inviteMember')}</Button></div></div>
+  <ReferenceNotice />
+  <div class="svadmin-u-60fbb7713999 svadmin-u-8dddea0773ed svadmin-u-1004c0c3954c svadmin-u-020ba687fa12 svadmin-u-64cac80d2e9a svadmin-u-3b9871a0bf93"><ContentPageHeader title={i18n.t('network.teamCrew')} description={i18n.t('network.teamCrewDescription')} /><div class="svadmin-u-60fbb7713999 svadmin-u-1eb5c6df38c1 svadmin-u-77a2a20e90d4"><Button variant="outline" size="sm" onclick={() => downloadRows('sample-team.json', filtered)}><Download class="svadmin-u-783b0d9d1e2c" />{i18n.t('common.export')}</Button><Button size="sm" onclick={() => context.navigate('/account/members/team-members')}><UserPlus class="svadmin-u-783b0d9d1e2c" />{i18n.t('account.inviteMember')}</Button></div></div>
   <FilterToolbar bind:query placeholder={i18n.t('common.search')} />
   <NetworkTable rows={filtered} {columns} {row} />
 </ContentPageShell>

package/dist/components/network/UserCardsNFTPage.svelte

@@ -4,6 +4,7 @@
   import ContentPageHeader from '../content/ContentPageHeader.svelte';
   import FilterToolbar from '../content/FilterToolbar.svelte';
   import DataState from '../content/DataState.svelte';
+  import ReferenceNotice from '../content/ReferenceNotice.svelte';
   import NetworkUserCard from '../content/NetworkUserCard.svelte';
   import type { NetworkUser } from '../content/NetworkUserCard.svelte';
 
@@ -24,6 +25,7 @@
 </script>
 
 <ContentPageShell pageId="network-user-cards" width="wide">
+  <ReferenceNotice />
   <ContentPageHeader title={i18n.t('network.userCards')} description={i18n.t('network.userCardsDescription')} />
   <FilterToolbar bind:query placeholder={i18n.t('common.search')} clearLabel={i18n.locale === 'zh-CN' ? '清除搜索' : 'Clear search'} />
   {#if filtered.length === 0}

package/dist/components/profile/PublicProfilePage.svelte

@@ -9,6 +9,7 @@
   import ContentPageShell from '../content/ContentPageShell.svelte';
   import ContentPageHeader from '../content/ContentPageHeader.svelte';
   import { referenceDemoData } from '../../reference-data.js';
+  import ReferenceNotice from '../content/ReferenceNotice.svelte';
 
   type ProfileVariant = 'default' | 'company' | 'gamer';
   type ProfileTab = 'projects' | 'activity' | 'teams';
@@ -35,6 +36,7 @@
 </script>
 
 <ContentPageShell {pageId} width="wide">
+  <ReferenceNotice />
   <ContentPageHeader title={profileData.name} eyebrow={i18n.t('publicProfile.title')} description={profileData.tagline} />
   {#if showSections}
     <div class="svadmin-u-f3c543ad5fe9 svadmin-u-0d304f904cb0 svadmin-u-bf1b5b54929e"><ProfileCard {...profileData} {variant} /><ProfileVariantSections {variant} /></div>

package/dist/components/record-detail.svelte.d.ts

@@ -1,13 +1,16 @@
+import { type ResourceRendering } from '../rendering/index.js';
 /** Views mount this only when they have an explicit record ID. */
 export declare function useRecordDetail(options: () => {
     resourceName: string;
     id: string | number;
+    rendering?: ResourceRendering | undefined;
 }): {
     query: import("@tanstack/query-core").QueryObserverResult<import("@svadmin/core").GetOneResult<import("@svadmin/core").BaseRecord & {
         id: string | number;
     }>, unknown> & {
         overtime: import("@svadmin/core").OvertimeResult;
     };
+    readonly rendering: ResourceRendering | undefined;
     readonly resource: import("@svadmin/core").ResourceDefinition;
     readonly fields: import("@svadmin/core").FieldDefinition[];
     readonly canRead: boolean;

package/dist/components/record-detail.svelte.js

@@ -1,20 +1,26 @@
+import { bindResourceRendering } from '../rendering/index.js';
 import { captureAdminContext, useOne, useCan, useResourceContract } from '@svadmin/core';
 /** Views mount this only when they have an explicit record ID. */
 export function useRecordDetail(options) {
     const context = captureAdminContext();
     const binding = useResourceContract(() => options().resourceName);
+    const rendering = $derived(bindResourceRendering(options().rendering, binding.resource));
     const resource = $derived(context.getResource(options().resourceName));
     const permission = useCan(() => ({
         resource: options().resourceName, action: 'show', id: options().id,
         queryOptions: { enabled: resource.canShow !== false },
     }));
     const canRead = $derived(resource.canShow !== false && permission.allowed === true);
-    const query = useOne(() => ({
-        resource: binding.resource, id: options().id, dataProviderName: binding.dataProviderName,
-        queryOptions: { enabled: canRead },
-    }));
+    const query = useOne(() => {
+        void rendering;
+        return {
+            resource: binding.resource, id: options().id, dataProviderName: binding.dataProviderName,
+            queryOptions: { enabled: canRead },
+        };
+    });
     return {
         query,
+        get rendering() { return rendering; },
         get resource() { return resource; },
         get fields() { return resource.fields.filter(field => field.showInShow !== false); },
         get canRead() { return canRead; },

package/dist/components/saved-list-views.d.ts

@@ -14,13 +14,86 @@ export interface SavedListView {
     id: string;
     name: string;
     state: SavedListViewState;
+    version?: number;
+    source?: 'local' | 'team' | 'system';
+    readOnly?: boolean;
+    default?: boolean;
+    access?: SavedListViewAccess;
+}
+export type SavedListViewAccessMode = 'team' | 'organization' | 'restricted';
+export interface SavedListViewAccess {
+    mode: SavedListViewAccessMode;
+    subjectIds: string[];
+}
+export interface SavedListViewSubject {
+    id: string;
+    label: string;
+    description?: string;
+}
+export interface SavedListViewMutation {
+    id: string;
+    name: string;
+    state: SavedListViewState;
+    /** null 仅允许创建；更新必须提供读取到的版本。 */
+    expectedVersion: number | null;
+    source: 'team' | 'system';
+}
+export interface SavedListViewMutationSuccess {
+    ok: true;
+    view: SavedListView;
+    version: number;
+}
+export interface SavedListViewMutationConflict {
+    ok: false;
+    code: 'VERSION_CONFLICT';
+    current: SavedListView;
+    version: number;
+}
+export interface SavedListViewRemoveSuccess {
+    ok: true;
+    id: string;
+    version: number;
+}
+export interface SavedListViewProvider {
+    list: (scope: ListPreferenceScope) => Promise<unknown>;
+    /** 可选的成员目录查询；授权仍由宿主服务端负责。 */
+    listAccessSubjects?: (scope: ListPreferenceScope, input: {
+        query?: string;
+        limit?: number;
+    }) => Promise<unknown>;
+    save?: (scope: ListPreferenceScope, mutation: SavedListViewMutation) => Promise<unknown>;
+    remove?: (scope: ListPreferenceScope, input: {
+        id: string;
+        expectedVersion: number;
+    }) => Promise<unknown>;
+    setDefault?: (scope: ListPreferenceScope, input: {
+        id: string;
+        source: 'team' | 'system';
+        expectedVersion: number;
+        default: boolean;
+    }) => Promise<unknown>;
+    updateAccess?: (scope: ListPreferenceScope, input: {
+        id: string;
+        source: 'team' | 'system';
+        expectedVersion: number;
+        access: SavedListViewAccess;
+    }) => Promise<unknown>;
 }
 export interface ListPreferenceScope {
     resourceName: string;
     providerName: string;
     tenantIdentity?: string | number;
+    identityKey?: string;
 }
-export declare function readSavedListViews(raw: string | null, allowedColumnIds: Set<string>): SavedListView[];
+export declare function decodeSavedListViewAccess(value: unknown): SavedListViewAccess | undefined;
+export declare function decodeSavedListViewSubjects(value: unknown): SavedListViewSubject[] | undefined;
+export declare function readSavedListViews(raw: string | null, allowedColumnIds: Set<string>, source?: SavedListView['source']): SavedListView[];
+export declare function decodeSavedListViewMutationResult(value: unknown, allowedColumnIds: Set<string>, expected?: Pick<SavedListViewMutation, 'id' | 'source' | 'expectedVersion'>): SavedListViewMutationSuccess | SavedListViewMutationConflict | undefined;
+export declare function decodeSavedListViewRemoveResult(value: unknown, expected: {
+    id: string;
+    expectedVersion: number;
+}): SavedListViewRemoveSuccess | undefined;
+export declare function decodeRemoteSavedListViews(value: unknown, allowedColumnIds: Set<string>, writable?: boolean): SavedListView[];
 export declare function serializeSavedListViews(views: SavedListView[]): string;
 export declare function cloneSavedListViewState(state: SavedListViewState): SavedListViewState;
 export declare function listPreferenceScopeId(scope: ListPreferenceScope): string;

package/dist/components/saved-list-views.js

@@ -1,3 +1,4 @@
+import { snapshotPlainData } from '@svadmin/core/schema';
 const STORAGE_VERSION = 1;
 const MAX_SAVED_VIEWS = 25;
 const MAX_FILTER_NODES = 200;
@@ -91,7 +92,63 @@ function parseState(value, allowedColumnIds) {
         columnOrder,
     };
 }
-export function readSavedListViews(raw, allowedColumnIds) {
+function parseAccess(value) {
+    if (!isRecord(value) || Object.keys(value).some(key => key !== 'mode' && key !== 'subjectIds'))
+        return;
+    const mode = value['mode'];
+    const ids = value['subjectIds'];
+    if ((mode !== 'team' && mode !== 'organization' && mode !== 'restricted')
+        || !Array.isArray(ids) || ids.length > 200)
+        return;
+    const subjectIds = [];
+    for (const id of ids) {
+        if (typeof id !== 'string' || !id.trim() || id !== id.trim() || id.length > 200
+            || subjectIds.includes(id))
+            return;
+        subjectIds.push(id);
+    }
+    if ((mode === 'restricted') !== (subjectIds.length > 0))
+        return;
+    return { mode, subjectIds };
+}
+export function decodeSavedListViewAccess(value) {
+    try {
+        return parseAccess(snapshotPlainData(value));
+    }
+    catch {
+        return;
+    }
+}
+export function decodeSavedListViewSubjects(value) {
+    try {
+        const snapshot = snapshotPlainData(value);
+        if (!Array.isArray(snapshot) || snapshot.length > 200)
+            return;
+        const seen = new Set();
+        const subjects = [];
+        for (const entry of snapshot) {
+            if (!isRecord(entry)
+                || Object.keys(entry).some(key => !['id', 'label', 'description'].includes(key))
+                || typeof entry['id'] !== 'string' || !entry['id'].trim() || entry['id'] !== entry['id'].trim()
+                || entry['id'].length > 200 || seen.has(entry['id'])
+                || typeof entry['label'] !== 'string' || !entry['label'].trim() || entry['label'].length > 200
+                || (entry['description'] !== undefined
+                    && (typeof entry['description'] !== 'string' || entry['description'].length > 500)))
+                return;
+            seen.add(entry['id']);
+            subjects.push({
+                id: entry['id'],
+                label: entry['label'].trim(),
+                ...(entry['description'] === undefined ? {} : { description: entry['description'] }),
+            });
+        }
+        return subjects;
+    }
+    catch {
+        return;
+    }
+}
+export function readSavedListViews(raw, allowedColumnIds, source = 'local') {
     if (!raw)
         return [];
     try {
@@ -110,8 +167,20 @@ export function readSavedListViews(raw, allowedColumnIds) {
             const state = parseState(entry['state'], allowedColumnIds);
             if (!state)
                 continue;
+            const access = entry['access'] === undefined ? undefined : parseAccess(entry['access']);
+            if (entry['access'] !== undefined && !access)
+                continue;
             seenIds.add(entry['id']);
-            views.push({ id: entry['id'], name: entry['name'].trim(), state });
+            views.push({
+                id: entry['id'], name: entry['name'].trim(), state,
+                ...(isPositiveInteger(entry['version'], Number.MAX_SAFE_INTEGER) ? { version: entry['version'] } : {}),
+                ...(source !== 'local' ? {
+                    source: entry['source'] === 'system' ? 'system' : 'team',
+                    readOnly: true,
+                    ...(entry['default'] === true ? { default: true } : {}),
+                    ...(access === undefined ? {} : { access }),
+                } : {}),
+            });
         }
         return views;
     }
@@ -121,6 +190,124 @@ export function readSavedListViews(raw, allowedColumnIds) {
         throw error;
     }
 }
+export function decodeSavedListViewMutationResult(value, allowedColumnIds, expected) {
+    try {
+        if (expected && (!expected.id.trim()
+            || !['team', 'system'].includes(expected.source)
+            || (expected.expectedVersion !== null
+                && !isPositiveInteger(expected.expectedVersion, Number.MAX_SAFE_INTEGER))))
+            return;
+        const snapshot = snapshotPlainData(value);
+        if (!isRecord(snapshot) || typeof snapshot['ok'] !== 'boolean')
+            return;
+        const keys = snapshot['ok'] ? ['ok', 'version', 'view'] : ['ok', 'code', 'version', 'current'];
+        if (Object.keys(snapshot).some(key => !keys.includes(key)))
+            return;
+        const parseReceiptView = (candidate, version) => {
+            if (!isRecord(candidate)
+                || Object.keys(candidate).some(key => !['id', 'name', 'state', 'version', 'source', 'readOnly', 'default', 'access'].includes(key))
+                || candidate['version'] !== version
+                || (candidate['readOnly'] !== undefined && typeof candidate['readOnly'] !== 'boolean')
+                || (candidate['default'] !== undefined && typeof candidate['default'] !== 'boolean')
+                || (candidate['source'] !== undefined && candidate['source'] !== 'team' && candidate['source'] !== 'system'))
+                return;
+            const access = candidate['access'] === undefined ? undefined : parseAccess(candidate['access']);
+            if (candidate['access'] !== undefined && !access)
+                return;
+            const state = candidate['state'];
+            if (!isRecord(state) || Object.keys(state).some(key => !['search', 'filters', 'sorters', 'pagination', 'columnVisibility', 'columnOrder'].includes(key)))
+                return;
+            if (!isRecord(state['pagination']) || Object.keys(state['pagination']).some(key => !['current', 'pageSize'].includes(key)))
+                return;
+            if (!isRecord(state['columnVisibility']) || Object.entries(state['columnVisibility'])
+                .some(([key, visible]) => !allowedColumnIds.has(key) || typeof visible !== 'boolean'))
+                return;
+            if (!Array.isArray(state['columnOrder']) || state['columnOrder'].some(key => typeof key !== 'string' || !allowedColumnIds.has(key))
+                || new Set(state['columnOrder']).size !== state['columnOrder'].length)
+                return;
+            if (!Array.isArray(state['sorters']) || state['sorters'].some(sorter => !isRecord(sorter) || Object.keys(sorter).some(key => !['field', 'order'].includes(key))))
+                return;
+            const exactFilter = (filter, depth = 0) => {
+                if (!isRecord(filter) || depth > 20)
+                    return false;
+                if ('field' in filter)
+                    return Object.keys(filter).every(key => ['field', 'operator', 'value'].includes(key));
+                return Object.keys(filter).every(key => ['operator', 'value'].includes(key))
+                    && Array.isArray(filter['value']) && filter['value'].every(child => exactFilter(child, depth + 1));
+            };
+            if (!Array.isArray(state['filters']) || !state['filters'].every(filter => exactFilter(filter)))
+                return;
+            const views = readSavedListViews(JSON.stringify({ version: STORAGE_VERSION, views: [candidate] }), allowedColumnIds);
+            const view = views[0];
+            if (!view || view.name !== candidate['name'])
+                return;
+            if (expected && (view.id !== expected.id || candidate['source'] !== expected.source))
+                return;
+            return {
+                ...view,
+                ...(candidate['source'] === undefined ? {} : { source: candidate['source'] }),
+                ...(candidate['readOnly'] === undefined ? {} : { readOnly: candidate['readOnly'] }),
+                ...(candidate['default'] === undefined ? {} : { default: candidate['default'] }),
+                ...(access === undefined ? {} : { access }),
+            };
+        };
+        if (snapshot['ok'] === true) {
+            if (!isPositiveInteger(snapshot['version'], Number.MAX_SAFE_INTEGER))
+                return;
+            if (expected?.expectedVersion !== undefined && expected.expectedVersion !== null
+                && snapshot['version'] <= expected.expectedVersion)
+                return;
+            const view = parseReceiptView(snapshot['view'], snapshot['version']);
+            if (!view)
+                return;
+            return { ok: true, view, version: snapshot['version'] };
+        }
+        if (snapshot['code'] !== 'VERSION_CONFLICT' || !isPositiveInteger(snapshot['version'], Number.MAX_SAFE_INTEGER))
+            return;
+        const current = parseReceiptView(snapshot['current'], snapshot['version']);
+        if (!current)
+            return;
+        return { ok: false, code: 'VERSION_CONFLICT', current, version: snapshot['version'] };
+    }
+    catch {
+        return;
+    }
+}
+export function decodeSavedListViewRemoveResult(value, expected) {
+    try {
+        const snapshot = snapshotPlainData(value);
+        if (!isRecord(snapshot) || snapshot['ok'] !== true
+            || Object.keys(snapshot).some(key => !['ok', 'id', 'version'].includes(key))
+            || snapshot['id'] !== expected.id
+            || !isPositiveInteger(expected.expectedVersion, Number.MAX_SAFE_INTEGER)
+            || !isPositiveInteger(snapshot['version'], Number.MAX_SAFE_INTEGER)
+            || snapshot['version'] <= expected.expectedVersion)
+            return;
+        return { ok: true, id: expected.id, version: snapshot['version'] };
+    }
+    catch {
+        return;
+    }
+}
+export function decodeRemoteSavedListViews(value, allowedColumnIds, writable = false) {
+    try {
+        const snapshot = snapshotPlainData(value);
+        if (!Array.isArray(snapshot))
+            return [];
+        return readSavedListViews(JSON.stringify({ version: STORAGE_VERSION, views: snapshot }), allowedColumnIds, 'team')
+            .map(view => {
+            const entry = snapshot.find(entry => isRecord(entry) && entry['id'] === view.id);
+            return {
+                ...view,
+                readOnly: !writable || !view.version || !isRecord(entry) || entry['readOnly'] !== false,
+                ...(isRecord(entry) && entry['default'] === true ? { default: true } : {}),
+            };
+        });
+    }
+    catch {
+        return [];
+    }
+}
 export function serializeSavedListViews(views) {
     return JSON.stringify({ version: STORAGE_VERSION, views: views.slice(0, MAX_SAVED_VIEWS) });
 }
@@ -137,10 +324,11 @@ export function listPreferenceScopeId(scope) {
         `r:${encodeURIComponent(scope.resourceName)}`,
         `p:${encodeURIComponent(scope.providerName)}`,
         `t:${encodeScopeValue(scope.tenantIdentity)}`,
+        ...(scope.identityKey === undefined ? [] : [`u:${encodeScopeValue(scope.identityKey)}`]),
     ].join('|');
 }
 export function canMigrateLegacyListPreferences(scope) {
-    return scope.providerName === 'default' && scope.tenantIdentity === undefined;
+    return scope.providerName === 'default' && scope.tenantIdentity === undefined && scope.identityKey === undefined;
 }
 export function savedListViewsStorageKey(scope) {
     return `svadmin-list-views-v2-${listPreferenceScopeId(scope)}`;

package/dist/components/svar-grid-cells.d.ts

@@ -0,0 +1,14 @@
+import type { Snippet } from 'svelte';
+import type { SvarRecordId } from './svar-grid-operations.js';
+export interface SvarCellContent {
+    readonly id: SvarRecordId;
+    readonly field: string;
+    readonly value: unknown;
+    readonly record: Record<string, unknown>;
+}
+export interface SvarCellContext {
+    readonly render: () => Snippet<[SvarCellContent]> | undefined;
+    readonly resolve: (row: unknown, column: unknown) => SvarCellContent | undefined;
+}
+/** 仅可信宿主可提供原生 snippet；不把引擎 api 或 exec 传给内容组件。 */
+export declare const SVAR_CELL_CONTEXT: unique symbol;

package/dist/components/svar-grid-cells.js

@@ -0,0 +1,2 @@
+/** 仅可信宿主可提供原生 snippet；不把引擎 api 或 exec 传给内容组件。 */
+export const SVAR_CELL_CONTEXT = Symbol('svadmin.svar.cell');