@svgrid/enterprise 3.1.25 → 3.1.27

package/dist/export.js

@@ -1,3 +1,4 @@
+import { applyGroupAggregate } from '@svgrid/grid/core';
 // Import the pure formatters from the grid's Svelte-free `/format` subpath so
 // this module (and the enterprise unit tests) don't drag in SvGrid.svelte.
 import { formatValueForExport, toExcelNumFmt, valueForExcel } from '@svgrid/grid/format';
@@ -6,7 +7,10 @@ import { installSmartShim } from './smart-shim.js';
 import { downloadBlobFile, downloadTextFile, serializeDelimited, serializeHtml, serializeJson, serializeMarkdown, serializeXml, } from './export-serialize.js';
 import { serializeSpreadsheetML } from './export-xls.js';
 import { buildXlsxParts, packageXlsx } from './export-ooxml.js';
-import { buildPdfDocDefinition, pdfBlob, readGridPdfTheme, registerPdfFonts, resolvePdfCharts } from './export-pdf.js';
+import { buildPdfDocData, buildPdfDocDefinition, pdfBlob, PDF_ROBOTO_MISSING, readGridPdfTheme, registerPdfFont, registerPdfFonts, resolvePdfCharts } from './export-pdf.js';
+import { renderPdfInWorker } from './pdf-worker.js';
+/** Rows past which a PDF rendered on the page earns a warning: about a second of blocked page per thousand. */
+const LARGE_PDF_ROWS = 2000;
 import { buildConditionalResolver } from './export-conditional.js';
 /** Formats served by the native, dependency-free, streaming serializers. */
 const NATIVE_TEXT_FORMATS = [
@@ -102,6 +106,7 @@ export function resolveColumns(api, opts, sourceRows) {
             header: c.header,
             format: c.format,
             align: c.align,
+            aggregate: c.aggregate,
         }));
     }
     if (sourceRows.length > 0) {
@@ -550,27 +555,58 @@ function isSummableColumn(col) {
 }
 /**
  * Build a grouped PDF body: a bold group header per cluster (nested for
- * multi-level grouping), the cluster's data rows, then a subtotal row summing
- * the numeric / currency columns. Values use the same formatting as the grid.
+ * multi-level grouping), the cluster's data rows, a subtotal row, and a grand
+ * total at the end. A column totals with its own `aggregate` (avg, min, max,
+ * count, ...), as the grid's group rows do; without one, number and currency
+ * columns sum. Values and group names use the same formatting as the grid.
+ * Each data row carries its index in `rows`, so conditional formatting and
+ * links can find their row.
  */
-export function buildGroupedPdfBody(cols, rows, groupBy) {
+export function buildGroupedPdfBody(cols, rows, groupBy, opts = {}) {
     const out = [];
-    const headerOf = (field) => cols.find((c) => c.field === field)?.header ?? field;
-    // Put the "Subtotal" label in the first NON-numeric column; if every column
-    // is numeric, -1 means "don't overwrite a sum with the label".
-    const labelColIdx = cols.findIndex((c) => !isSummableColumn(c));
+    const colOf = (field) => cols.find((c) => c.field === field);
+    const aggOf = (c) => c.aggregate ?? (isSummableColumn(c) ? 'sum' : undefined);
+    const hasTotals = cols.some((c) => aggOf(c) !== undefined);
+    // The label goes in the first column that has no total of its own; if
+    // every column has one, -1 means "don't overwrite a total with the label".
+    const labelColIdx = cols.findIndex((c) => aggOf(c) === undefined);
+    const index = new Map();
+    rows.forEach((r, i) => index.set(r, i));
+    const field = (r, f) => r[f];
+    const total = (c, subset) => {
+        const agg = aggOf(c);
+        if (agg === undefined)
+            return '';
+        // The grid's own aggregator, over the same values the column shows.
+        const v = applyGroupAggregate(agg, c.field, subset.map((r) => ({ original: r, getCellValueByColumnId: () => field(r, c.field) })));
+        if (v == null || (typeof v === 'number' && !Number.isFinite(v)))
+            return '';
+        // A count is a number of rows, not an amount: no currency or percent.
+        if (agg === 'count' || agg === 'countDistinct')
+            return String(v);
+        if (Array.isArray(v))
+            return v.map((x) => formatValueForExport(x, c.format)).join(' - ');
+        return formatValueForExport(v, c.format);
+    };
+    const totalRow = (subset, label) => {
+        const cells = cols.map((c) => total(c, subset));
+        if (labelColIdx >= 0)
+            cells[labelColIdx] = label;
+        return { kind: 'subtotal', cells };
+    };
     const recurse = (subset, level) => {
         if (level >= groupBy.length) {
             for (const r of subset) {
-                out.push({ kind: 'data', cells: cols.map((c) => String(cellValueFor(c, r, false) ?? '')) });
+                out.push({ kind: 'data', cells: cols.map((c) => String(cellValueFor(c, r, false) ?? '')), source: index.get(r) });
             }
             return;
         }
-        const field = groupBy[level];
+        const groupField = groupBy[level];
+        const groupCol = colOf(groupField);
         // Preserve first-seen order of group keys.
         const buckets = new Map();
         for (const r of subset) {
-            const key = String(r[field] ?? '');
+            const key = String(field(r, groupField) ?? '');
             const bucket = buckets.get(key);
             if (bucket)
                 bucket.push(r);
@@ -578,26 +614,31 @@ export function buildGroupedPdfBody(cols, rows, groupBy) {
                 buckets.set(key, [r]);
         }
         for (const [key, groupRows] of buckets) {
-            out.push({ kind: 'group', label: `${headerOf(field)}: ${key} (${groupRows.length})`, level });
+            // The name as the grid shows it: a date group reads "Oct 3, 2026", not
+            // the timestamp it is keyed by.
+            const shown = groupCol ? String(cellValueFor(groupCol, groupRows[0], false) ?? key) : key;
+            out.push({ kind: 'group', label: `${groupCol?.header ?? groupField}: ${shown} (${groupRows.length})`, level });
             recurse(groupRows, level + 1);
-            // Subtotal row for the numeric columns of this cluster.
-            const hasSummable = cols.some(isSummableColumn);
-            if (hasSummable) {
-                const cells = cols.map((c) => {
-                    if (!isSummableColumn(c))
-                        return '';
-                    const sum = groupRows.reduce((a, r) => a + (Number(r[c.field]) || 0), 0);
-                    return formatValueForExport(sum, c.format);
-                });
-                if (labelColIdx >= 0)
-                    cells[labelColIdx] = `Subtotal (${key})`;
-                out.push({ kind: 'subtotal', cells });
-            }
+            if (hasTotals)
+                out.push(totalRow(groupRows, opts.labels?.subtotal?.(shown) ?? `Subtotal (${shown})`));
         }
     };
     recurse(rows, 0);
+    if (hasTotals && opts.grandTotal !== false && rows.length)
+        out.push(totalRow(rows, opts.labels?.total ?? 'Total'));
     return out;
 }
+/**
+ * Say so when the PDF holds text Roboto cannot draw. Without a `pdf.font` it
+ * prints as empty boxes, and nothing else would tell the developer why.
+ */
+function warnMissingGlyphs(texts) {
+    const hit = texts.find((t) => PDF_ROBOTO_MISSING.test(t));
+    if (hit === undefined)
+        return;
+    console.warn(`@svgrid/enterprise: the PDF has text its default font (Roboto) cannot draw, such as "${hit.slice(0, 40)}"; ` +
+        'it prints as empty boxes. Pass pdf.font with a font that covers it (Noto Sans CJK, Noto Sans Arabic, ...).');
+}
 /**
  * PDF export via our own pdfmake docDefinition (page setup, repeated header,
  * page numbers, per-column alignment/widths, title/logo, theme colors, and
@@ -605,18 +646,17 @@ export function buildGroupedPdfBody(cols, rows, groupBy) {
  * formatted display strings, so the PDF matches the grid.
  */
 async function exportPdf(api, opts) {
-    await ensureGlobals('pdf');
-    const pdfMake = globalThis.pdfMake;
-    if (!pdfMake) {
-        throw new Error('@svgrid/enterprise: pdf export requires the "pdfmake" peer dependency.');
-    }
     const sourceRows = resolveRowSource(api, opts.rows);
     if (sourceRows.length === 0) {
         throw new Error('@svgrid/enterprise: nothing to export - the grid has no rows');
     }
     const cols = resolveColumns(api, opts, sourceRows);
     const fields = cols.map((c) => c.field);
-    const columns = cols.map((c) => ({ header: c.header ?? c.field, align: c.align }));
+    // The grid's columns arrive with the alignment the screen uses; columns an
+    // app passes itself may not say, so a number or date format right-aligns,
+    // as it does on screen.
+    const alignOf = (c) => c.align ?? (c.format && ['number', 'currency', 'percent', 'date', 'datetime', 'time'].includes(String(c.format.type)) ? 'right' : undefined);
+    const columns = cols.map((c) => ({ header: c.header ?? c.field, align: alignOf(c) }));
     // Carry the grid's active grouping into group + subtotal rows (unless the
     // caller opted out or passed hierarchical), matching the xlsx outline path.
     const autoGrouping = opts.autoGroup !== false && !opts.groupBy?.length && !opts.hierarchical
@@ -648,33 +688,67 @@ async function exportPdf(api, opts) {
         return chartToPngBlob(el, { scale: 2 });
     });
     const now = new Date();
-    let def;
+    let params;
+    // A boolean prints as the grid's checkbox does: a tick for true and nothing
+    // for false, rather than the words. Only plain fields: a column with a
+    // format or an `exportValue` prints what it asks for.
+    const boolAt = (rowIdx, colIdx) => {
+        const col = cols[colIdx];
+        if (!col || col.exportValue || col.format)
+            return undefined;
+        const v = sourceRows[rowIdx]?.[col.field];
+        return typeof v === 'boolean' ? v : undefined;
+    };
+    const withTick = (v, b) => {
+        const icon = v?.icon ?? (b ? '✓' : undefined);
+        return v || icon ? { fill: v?.fill, color: v?.color, bold: v?.bold, icon, iconOnly: v?.iconOnly } : undefined;
+    };
     if (effGroupBy?.length) {
-        // Conditional formatting is skipped for grouped PDFs (group / subtotal
-        // rows own the layout); the grid colors still show on screen.
-        const body = buildGroupedPdfBody(cols, sourceRows, effGroupBy);
-        def = buildPdfDocDefinition({ columns, body, opts: pdfOpts, styles: opts.styles, theme, ...lines, charts, now });
+        const grouped = buildGroupedPdfBody(cols, sourceRows, effGroupBy, { grandTotal: pdfOpts.grandTotal, labels: pdfOpts.labels });
+        const body = grouped.map((row) => row.kind === 'data' && row.source !== undefined
+            ? { ...row, cells: row.cells.map((text, c) => (boolAt(row.source, c) === undefined ? text : '')) }
+            : row);
+        if (!pdfOpts.font)
+            warnMissingGlyphs(body.flatMap((r) => (r.kind === 'group' ? [r.label] : r.cells)));
+        // Data rows come out in group order; conditional formatting and links are
+        // looked up by each row's place in the exported rows.
+        const sources = body.flatMap((r) => (r.kind === 'data' ? [r.source ?? -1] : []));
+        const visual = buildConditionalResolver(cols, sourceRows, opts.conditionalFormats);
+        const link = buildLinkResolver(cols, sourceRows);
+        params = {
+            columns,
+            body,
+            dataCellStyle: (r, c) => {
+                const at = sources[r] ?? -1;
+                return at >= 0 ? withTick(visual(at, c), boolAt(at, c)) : undefined;
+            },
+            dataCellLink: link
+                ? (r, c) => {
+                    const at = sources[r] ?? -1;
+                    return at >= 0 ? link(at, c) : undefined;
+                }
+                : undefined,
+            opts: pdfOpts,
+            styles: opts.styles,
+            theme,
+            ...lines,
+            charts,
+            now,
+        };
     }
     else {
         const projected = await projectRows(sourceRows, cols, opts);
-        const dataRows = projected.slice(1).map((r) => fields.map((f) => String(r[f] ?? '')));
-        // Conditional formatting -> per-cell fill / color / bold + icon prefix.
+        const dataRows = projected.slice(1).map((r, ri) => fields.map((f, c) => (boolAt(ri, c) === undefined ? String(r[f] ?? '') : '')));
+        // Conditional formatting -> per-cell fill / color / bold, and the icon,
+        // which the builder draws (the icon sets' glyphs are not in the font).
         const visual = buildConditionalResolver(cols, sourceRows, opts.conditionalFormats);
-        for (let r = 0; r < dataRows.length; r++) {
-            for (let c = 0; c < cols.length; c++) {
-                const icon = visual(r, c)?.icon;
-                if (icon)
-                    dataRows[r][c] = `${icon} ${dataRows[r][c] ?? ''}`;
-            }
-        }
         const link = buildLinkResolver(cols, sourceRows);
-        def = buildPdfDocDefinition({
+        if (!pdfOpts.font)
+            warnMissingGlyphs([...columns.map((c) => c.header), ...dataRows.flat()]);
+        params = {
             columns,
             rows: dataRows,
-            dataCellStyle: (r, c) => {
-                const v = visual(r, c);
-                return v ? { fill: v.fill, color: v.color, bold: v.bold } : undefined;
-            },
+            dataCellStyle: (r, c) => withTick(visual(r, c), boolAt(r, c)),
             dataCellLink: link,
             opts: pdfOpts,
             styles: opts.styles,
@@ -683,11 +757,34 @@ async function exportPdf(api, opts) {
             merges: opts.merges,
             charts,
             now,
-        });
+        };
     }
     const filename = (opts.filename ?? 'grid').trim() || 'grid';
-    const blob = await pdfBlob(pdfMake.createPdf(def));
-    opts.onProgress?.({ phase: 'write', ratio: 1, total: sourceRows.length });
+    const total = sourceRows.length;
+    let blob;
+    if (pdfOpts.worker) {
+        // The document crosses to the worker as data; pdfmake is loaded there.
+        blob = await renderPdfInWorker(pdfOpts.worker, buildPdfDocData(params), {
+            font: pdfOpts.font,
+            signal: opts.signal,
+            onProgress: (ratio) => opts.onProgress?.({ phase: 'write', ratio, total }),
+        });
+    }
+    else {
+        if (total > LARGE_PDF_ROWS) {
+            console.warn(`@svgrid/enterprise: rendering a ${total.toLocaleString('en-US')}-row PDF on the page; pdfmake blocks it until done ` +
+                '(about a second per thousand rows). Pass pdf.worker to render in a worker instead.');
+        }
+        await ensureGlobals('pdf');
+        const pdfMake = globalThis.pdfMake;
+        if (!pdfMake) {
+            throw new Error('@svgrid/enterprise: pdf export requires the "pdfmake" peer dependency.');
+        }
+        if (pdfOpts.font)
+            registerPdfFont(pdfMake, pdfOpts.font);
+        blob = await pdfBlob(pdfMake.createPdf(buildPdfDocDefinition(params)));
+    }
+    opts.onProgress?.({ phase: 'write', ratio: 1, total });
     return deliver(blob, ensureExt(filename, 'pdf'), 'application/pdf', sourceRows.length, opts.download);
 }
 /**

package/dist/import.js

@@ -24,6 +24,7 @@
  * `print`, so unlicensed evaluation works but emits a one-time nudge.
  */
 import { assertEnterpriseLicensed } from './license.js';
+import { createUnzipBudget, readZipEntry, XLSX_MAX_COLS, XLSX_MAX_FILL, xlsxFillError, xlsxRangeError } from './xlsx-limits.js';
 // ---------------------------------------------------------------------------
 // Lazy peer dependency: jszip (xlsx only)
 // ---------------------------------------------------------------------------
@@ -182,11 +183,12 @@ async function parseXlsx(file) {
     const J = await getJSZip();
     const buf = await file.arrayBuffer();
     const zip = await J.loadAsync(buf);
+    const budget = createUnzipBudget();
     // Read sharedStrings.xml if it exists.
     let sharedStrings = [];
     const ssEntry = zip.file('xl/sharedStrings.xml');
     if (ssEntry) {
-        const ssText = await ssEntry.async('string');
+        const ssText = await readZipEntry(ssEntry, 'string', budget);
         sharedStrings = parseSharedStrings(ssText);
     }
     // Read the FIRST sheet. Workbook.xml -> rels mapping is involved; for the
@@ -196,7 +198,7 @@ async function parseXlsx(file) {
     if (!sheetEntry) {
         throw new Error('@svgrid/enterprise: could not locate sheet1.xml in the .xlsx archive');
     }
-    const sheetText = await sheetEntry.async('string');
+    const sheetText = await readZipEntry(sheetEntry, 'string', budget);
     return parseSheetXml(sheetText, sharedStrings);
 }
 /** Pull every `<t>...</t>` out of sharedStrings.xml in document order. */
@@ -242,6 +244,7 @@ function parseSheetXml(xml, sharedStrings) {
     const tRe = /<t\b[^>]*>([\s\S]*?)<\/t>/g;
     const vRe = /<v>([\s\S]*?)<\/v>/;
     let rowMatch;
+    let filled = 0;
     while ((rowMatch = rowRe.exec(xml)) !== null) {
         const rowBody = rowMatch[1] ?? '';
         const cells = [];
@@ -253,7 +256,15 @@ function parseSheetXml(xml, sharedStrings) {
             const ref = /r="([A-Z]+)\d+"/.exec(attrs)?.[1] ?? '';
             const colIndex = colRefToIndex(ref);
             const type = /t="([^"]+)"/.exec(attrs)?.[1] ?? 'n';
-            // Pad holes with empty strings so column alignment survives.
+            // Pad holes with empty strings so column alignment survives, within
+            // the sheet's real width and the blank budget (see xlsx-limits.ts).
+            if (colIndex >= XLSX_MAX_COLS)
+                throw xlsxRangeError(/r="([^"]*)"/.exec(attrs)?.[1] ?? ref);
+            if (colIndex > cells.length) {
+                filled += colIndex - cells.length;
+                if (filled > XLSX_MAX_FILL)
+                    throw xlsxFillError();
+            }
             while (cells.length < colIndex)
                 cells.push('');
             let value = '';

package/dist/index.d.ts

@@ -2,7 +2,7 @@ export { setLicenseKey, clearLicenseKey, getLicenseKey, isLicenseKeySet, hasVali
 export { parseLicenseExpiry } from './license-core.js';
 export { exportGrid, copyExportToClipboard, type ExportFormat, type ExportOptions, type ExportColumn, type ExportCellStyle, type ExportStyles, type ExportHeaderFooterLine, type ExportSheet, type ExportRowSource, type ExportProgress, type ExportResult, type ClipboardFormat, type ClipboardExportOptions, } from './export.js';
 export { default as SvExportMenu } from './SvExportMenu.svelte';
-export { buildPdfDocDefinition, resolvePdfCharts, resolvePdfVfs, registerPdfFonts, type PdfExportOptions, type PdfPageSize, type PdfChart, type PdfKpi, type PdfChartImage, type PdfVirtualFileSystem, type PdfMakeLike } from './export-pdf.js';
+export { buildPdfDocDefinition, buildPdfDocData, hydratePdfDoc, resolvePdfCharts, resolvePdfVfs, registerPdfFonts, registerPdfFont, type PdfExportOptions, type PdfDocData, type PdfDocParams, type PdfWorkerLike, type PdfPageSize, type PdfChart, type PdfKpi, type PdfChartImage, type PdfVirtualFileSystem, type PdfMakeLike, type PdfFont } from './export-pdf.js';
 export { printGrid, type PrintOptions } from './print.js';
 export { importData, readImportMatrix, mapImportMatrix, mapImportMatrixAsync, autoMapColumns, inferImportColumnTypes, type ImportFormat, type ImportFieldType, type ImportOptions, type ImportResult, type ImportProgress, type ImportColumnMap, type ImportColumnTypes, type ImportGridColumn, type ImportRowError, type ImportValidator, } from './import.js';
 export { default as SvImportDialog } from './SvImportDialog.svelte';

package/dist/index.js

@@ -8,7 +8,7 @@ licenseCovers, getLicenseEdition, nudgeEnterpriseFor, editionCovers, } from './l
 export { parseLicenseExpiry } from './license-core.js';
 export { exportGrid, copyExportToClipboard, } from './export.js';
 export { default as SvExportMenu } from './SvExportMenu.svelte';
-export { buildPdfDocDefinition, resolvePdfCharts, resolvePdfVfs, registerPdfFonts } from './export-pdf.js';
+export { buildPdfDocDefinition, buildPdfDocData, hydratePdfDoc, resolvePdfCharts, resolvePdfVfs, registerPdfFonts, registerPdfFont } from './export-pdf.js';
 export { printGrid } from './print.js';
 export { importData, readImportMatrix, mapImportMatrix, mapImportMatrixAsync, autoMapColumns, inferImportColumnTypes, } from './import.js';
 export { default as SvImportDialog } from './SvImportDialog.svelte';

package/dist/node/studio.js

@@ -16124,8 +16124,8 @@ function layoutFile(nav, opts = {}) {
     ${toolbarOn ? `<div class="sv-app__toolbar">
       <div class="sv-app__search">
         <svg class="sv-app__search-ic" viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"><circle cx="11" cy="11" r="7"/><path d="M21 21l-4.35-4.35"/></svg>
-        <input class="sv-app__search-in" type="search" placeholder="Search {brand}…" bind:value={q} bind:this={searchEl} aria-label="Search screens" />
-        <kbd class="sv-app__kbd" aria-hidden="true">⌘K</kbd>
+        <input class="sv-app__search-in" type="search" placeholder="Search {brand}…" bind:value={q} aria-label="Search screens" />
+        <button type="button" class="sv-app__kbd" title="Command palette (⌘K / Ctrl+K)" aria-label="Open the command palette" onclick={() => (paletteOpen = true)}>⌘K</button>
         {#if results.length}
           <div class="sv-app__results">
             {#each results as r (r.href)}
@@ -16165,6 +16165,7 @@ function layoutFile(nav, opts = {}) {
         </div>
       </div>
       {#if bellOpen || menuOpen}<button type="button" class="sv-app__scrim" tabindex="-1" aria-label="Close menus" onclick={() => { bellOpen = false; menuOpen = false }}></button>{/if}
+      <SvCommand bind:open={paletteOpen} {commands} placeholder="Go to a screen or run an action…" emptyText="No matching screen" />
     </div>\n    ` : ""}<div class="sv-app__content">
       ${opts.supabaseAuth ? `<SvAuthGate client={supabaseClient as unknown as SupabaseAuthClientLike} title={\`Sign in to \${brand}\`}>
         {@render children()}
@@ -16254,7 +16255,7 @@ function layoutFile(nav, opts = {}) {
   import '../app.css'
   import '../custom.css'
   import { page } from '$app/state'
-  import { setLicenseKey } from '@svgrid/enterprise'${opts.access ? `\n  import { currentRole, canScreen } from '$lib/access'` : ""}${opts.i18n ? `\n  import { t, currentLocale, locales } from '$lib/i18n'` : ""}${opts.auth ? `\n  import type { LayoutData } from './$types'` : ""}${opts.supabaseAuth ? `\n  import { SvAuthGate, type SupabaseAuthClientLike } from '@svgrid/enterprise'\n  import { supabaseClient } from '$lib/connections'` : ""}
+  import { setLicenseKey } from '@svgrid/enterprise'${toolbarOn ? `\n  import { goto } from '$app/navigation'\n  import { SvCommand, type CommandItem } from '@svgrid/grid'` : ""}${opts.access ? `\n  import { currentRole, canScreen } from '$lib/access'` : ""}${opts.i18n ? `\n  import { t, currentLocale, locales } from '$lib/i18n'` : ""}${opts.auth ? `\n  import type { LayoutData } from './$types'` : ""}${opts.supabaseAuth ? `\n  import { SvAuthGate, type SupabaseAuthClientLike } from '@svgrid/enterprise'\n  import { supabaseClient } from '$lib/connections'` : ""}
 
   // VITE_SVPRO_KEY in .env is your SvGrid license key; it removes the unlicensed watermark.
   if (import.meta.env.VITE_SVPRO_KEY) setLicenseKey(import.meta.env.VITE_SVPRO_KEY)
@@ -16280,24 +16281,30 @@ function layoutFile(nav, opts = {}) {
     try { const s = localStorage.getItem('svapp:theme'); if (s === 'light' || s === 'dark') t = s } catch (_) { /* storage blocked */ }
     applyTheme(t)
   })` : ""}${sideState}${toolbarOn ? `
-  // App-chrome quick-search: filter the screens by label as you type.
+  // App-chrome quick-search: filter the screens by label as you type. Only the
+  // screens the sidebar would show${opts.access ? " to this role" : ""}.
   const initials = ${JSON.stringify(initials)}
   const acctEmail = ${JSON.stringify(`admin@${brandSlug}.com`)}
+  const visibleNav = ${opts.access ? "$derived(nav.filter((n) => !n.id || canScreen($currentRole, n.id)))" : "nav"}
   let q = $state('')
-  const results = $derived(q.trim() ? nav.filter((n) => n.label.toLowerCase().includes(q.trim().toLowerCase())).slice(0, 6) : [])
+  const results = $derived(q.trim() ? visibleNav.filter((n) => n.label.toLowerCase().includes(q.trim().toLowerCase())).slice(0, 6) : [])
+  // Cmd/Ctrl+K: a palette over the same screens. SvCommand binds the key itself.
+  let paletteOpen = $state(false)
+  const commands: CommandItem[] = $derived([
+    ...visibleNav.map((n) => ({ id: 'go:' + n.href, label: ${opts.i18n ? "n.id ? $t('nav.' + n.id, n.label) : n.label" : "n.label"}, group: 'Go to', onRun: () => goto(n.href) })),${hasSwitch ? `
+    { id: 'theme', label: theme === 'dark' ? 'Switch to light mode' : 'Switch to dark mode', group: 'Actions', onRun: toggleTheme },` : ""}
+  ])
   let bellOpen = $state(false)
   let menuOpen = $state(false)
-  let searchEl: HTMLInputElement | null = $state(null)
   const notifications = [
     { title: 'Welcome to ' + brand, time: 'just now', color: 'var(--sg-accent, #6366f1)' },
     { title: 'Your workspace is ready', time: '2m ago', color: '#10b981' },
     { title: 'Sample data loaded', time: '5m ago', color: '#f59e0b' },
   ]
-  // Cmd/Ctrl+K focuses search; Escape closes the menus.
+  // Escape closes the menus.
   $effect(() => {
     function onKey(e: KeyboardEvent) {
-      if ((e.metaKey || e.ctrlKey) && e.key.toLowerCase() === 'k') { e.preventDefault(); searchEl?.focus() }
-      else if (e.key === 'Escape') { bellOpen = false; menuOpen = false }
+      if (e.key === 'Escape') { bellOpen = false; menuOpen = false }
     }
     window.addEventListener('keydown', onKey)
     return () => window.removeEventListener('keydown', onKey)
@@ -16336,7 +16343,8 @@ ${styles}
   .sv-app__tool:hover { color: var(--sg-fg, #0f172a); border-color: color-mix(in srgb, var(--sg-fg, #0f172a) 20%, var(--sg-border, #e6e8ec)); }
   .sv-app__dot { position: absolute; top: 5px; right: 5px; width: 6px; height: 6px; border-radius: 50%; background: var(--sg-accent, #6366f1); box-shadow: 0 0 0 2px var(--sg-bg, #fff); }
   .sv-app__avatar { display: inline-flex; align-items: center; justify-content: center; width: 32px; height: 32px; padding: 0; border: none; border-radius: 50%; font: inherit; font-size: 12px; font-weight: 700; color: #fff; background: var(--sg-accent, #6366f1); letter-spacing: 0.02em; cursor: pointer; }
-  .sv-app__kbd { position: absolute; right: 8px; font-size: 10.5px; font-weight: 600; color: var(--sg-muted, #94a3b8); background: color-mix(in srgb, var(--sg-fg, #0f172a) 6%, transparent); border: 1px solid var(--sg-border, #e6e8ec); border-radius: 5px; padding: 1px 5px; pointer-events: none; }
+  .sv-app__kbd { position: absolute; right: 8px; font-size: 10.5px; font-weight: 600; color: var(--sg-muted, #94a3b8); background: color-mix(in srgb, var(--sg-fg, #0f172a) 6%, transparent); border: 1px solid var(--sg-border, #e6e8ec); border-radius: 5px; padding: 1px 5px; font-family: inherit; line-height: inherit; cursor: pointer; }
+  .sv-app__kbd:hover { color: var(--sg-fg, #0f172a); }
   .sv-app__pop { position: relative; }
   .sv-app__scrim { position: fixed; inset: 0; z-index: 44; border: 0; padding: 0; background: transparent; cursor: default; }
   .sv-app__menu { position: absolute; top: calc(100% + 8px); right: 0; z-index: 46; min-width: 232px; padding: 6px; background: var(--sg-bg, #fff); border: 1px solid var(--sg-border, #e6e8ec); border-radius: 11px; box-shadow: 0 16px 40px -10px rgba(15, 23, 42, 0.3); }
@@ -16506,7 +16514,7 @@ function hasFieldConditions(schema) {
 *
 * `version.test.ts` asserts this matches `package.json`, so the two cannot drift.
 */
-var SVGRID_VERSION = "3.1.25";
+var SVGRID_VERSION = "3.1.27";
 /**
 * The version of `@svgrid/grid`, which releases on its own line: enterprise is
 * on 3.1.x while the grid is on 3.0.x.
@@ -16519,7 +16527,7 @@ var SVGRID_VERSION = "3.1.25";
 *
 * `version.test.ts` asserts this matches packages/grid/package.json.
 */
-var GRID_VERSION = "3.0.22";
+var GRID_VERSION = "3.0.23";
 //#endregion
 //#region src/studio/emit-project.ts
 var has = (blocks, kind) => blocks.some((b) => b.config.kind === kind);

package/dist/pdf-worker.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Render a PDF export in a worker, so a large report does not freeze the
+ * page. pdfmake lays out and writes the whole document in one synchronous
+ * run, about a millisecond per row of eight columns on a desktop machine:
+ * a 20,000-row export held the main thread for over twenty seconds.
+ *
+ * The app owns the worker file, so any bundler builds it:
+ *
+ * ```ts
+ * // pdf.worker.ts
+ * import { servePdfWorker } from '@svgrid/enterprise/pdf-worker'
+ * servePdfWorker()
+ * ```
+ *
+ * ```ts
+ * await api.exportData({
+ *   format: 'pdf',
+ *   pdf: { worker: () => new Worker(new URL('./pdf.worker.ts', import.meta.url), { type: 'module' }) },
+ * })
+ * ```
+ *
+ * The main thread builds the document as plain data (`buildPdfDocData`) and
+ * posts it here with the font, if any; the worker loads pdfmake, attaches
+ * the layout and footer functions (`hydratePdfDoc`), renders, and posts the
+ * bytes back with progress along the way.
+ */
+import { type PdfDocData, type PdfFont, type PdfMakeLike, type PdfWorkerLike } from './export-pdf.js';
+export type { PdfWorkerLike };
+/** Tags this channel's messages, so a worker shared with other traffic ignores the rest. */
+export declare const PDF_WORKER_CHANNEL = "svgrid-pdf";
+export type PdfWorkerRequest = {
+    channel: typeof PDF_WORKER_CHANNEL;
+    id: number;
+    doc: PdfDocData;
+    font?: PdfFont;
+};
+export type PdfWorkerReply = {
+    channel: typeof PDF_WORKER_CHANNEL;
+    id: number;
+    progress: number;
+} | {
+    channel: typeof PDF_WORKER_CHANNEL;
+    id: number;
+    pdf: ArrayBuffer;
+} | {
+    channel: typeof PDF_WORKER_CHANNEL;
+    id: number;
+    error: string;
+};
+/** The pdfmake calls rendering needs, in either the 0.2 or the 0.3 shape. */
+export type PdfMakeRenderer = PdfMakeLike & {
+    fonts?: Record<string, unknown>;
+    addFonts?: (fonts: Record<string, unknown>) => void;
+    createPdf(def: unknown): {
+        getBuffer(cb?: (bytes: Uint8Array) => void, options?: {
+            progressCallback?: (progress: number) => void;
+        }): unknown;
+    };
+};
+/** The part of a worker's global scope (or a `MessagePort`) this needs. */
+export type PdfWorkerScope = {
+    postMessage(message: unknown, transfer?: Transferable[]): void;
+    addEventListener(type: 'message', listener: (event: MessageEvent) => void): void;
+    removeEventListener(type: 'message', listener: (event: MessageEvent) => void): void;
+};
+/**
+ * Render a document from `buildPdfDocData` with the pdfmake given. The
+ * worker's half of the export, exported so it can run anywhere pdfmake does.
+ */
+export declare function renderPdfDoc(doc: PdfDocData, pdfMake: PdfMakeRenderer, opts?: {
+    font?: PdfFont;
+    onProgress?: (progress: number) => void;
+}): Promise<Uint8Array>;
+export type ServePdfWorkerOptions = {
+    /** Where to listen. Default: the worker's global scope. */
+    scope?: PdfWorkerScope;
+    /** How to get pdfmake. Default: import the installed `pdfmake` peer. */
+    loadPdfMake?: () => Promise<PdfMakeRenderer>;
+};
+/** Answer PDF export requests from the main thread. Call it once, in the worker. */
+export declare function servePdfWorker(options?: ServePdfWorkerOptions): {
+    dispose(): void;
+};
+/**
+ * The main thread's half: post the document to a fresh worker, report its
+ * progress, and resolve with the PDF. An abort terminates the worker.
+ */
+export declare function renderPdfInWorker(makeWorker: () => PdfWorkerLike, doc: PdfDocData, opts?: {
+    font?: PdfFont;
+    signal?: AbortSignal;
+    onProgress?: (progress: number) => void;
+}): Promise<Blob>;