cabloy 5.1.133 → 5.1.135

package/.cabloy-version

@@ -1 +1 @@
-5.1.133
+5.1.135

package/.claude/scheduled_tasks.lock

@@ -0,0 +1 @@
+{"sessionId":"aa2f5459-9806-45a9-a112-0437b3fc7c19","pid":45095,"procStart":"Sun Aug  9 08:20:36 2026","acquiredAt":1786451839628}

package/CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+## 5.1.135
+
+### Improvements
+
+- Refresh the Zova lockfile after compensation rerun preparation.
+- Refresh the Vona Zova Core patch for v5.1.84.
+
+## 5.1.134
+
+### Features
+
+- Add SSR profile support, including cookie-based profile handling.
+- Add SSR layout support.
+- Add `this.ctx.meta.$ssr.cookieDisabledOnServer` metadata.
+- Update the `ms` type definitions.
+
+### Bug Fixes
+
+- Correct SSR profile behavior between server and client.
+
+### Improvements
+
+- Update the Bean theme configuration.
+- Update IoC and Beans documentation.
+
 ## 5.1.133
 
 ### Features

package/cabloy-docs/frontend/ioc-and-beans.md

@@ -133,6 +133,26 @@ class ControllerLayout {
 
 In practice, Zova can still preserve the ergonomic class-based development experience while compiling cross-module usage back toward bean-identifier-based resolution.
 
+### Getter-based parameterized injection
+
+Use a getter when injection arguments must be prepared dynamically. The getter must explicitly identify the target bean with `beanFullName`; `usePrepareArg(...)` supplies initialization arguments only and does not resolve the target bean.
+
+```typescript
+import { Use, usePrepareArg } from 'zova';
+import type { ServiceSsrLayout } from 'zova-module-home-base';
+
+class ControllerLayout {
+  @Use({ beanFullName: 'home-base.service.ssrLayout' })
+  get $$serviceSsrLayout(): ServiceSsrLayout {
+    return usePrepareArg({
+      bodyReadyObserver: this.scope.config.layout.sidebar.bodyReadyObserver,
+    });
+  }
+}
+```
+
+Do not rely on the getter return type for implicit class resolution. Unlike a field declaration, a decorated getter does not reliably expose its return bean class as runtime type metadata, and build-time cross-module `@Use()` transforms do not provide a replacement target for getter injection.
+
 ### Hierarchical injection patterns
 
 Hierarchical injection replaces many common cases where a generic Vue app would fall back to `provide/inject`.

package/e2e/specs/a-commerce/commerce.spec.ts

@@ -218,6 +218,42 @@ test(
   },
 );
 
+test(
+  'Commerce theme: public local preference mirrors session cookie without hydration mismatch',
+  { tag: ['@web', '@ssr', '@theme'] },
+  async ({ browser, request }, testInfo) => {
+    const customer = await registerCustomer(request, testInfo);
+    const context = await browser.newContext();
+    await context.addInitScript(() => localStorage.setItem('themedark', 'true'));
+    const page = await context.newPage();
+    const pageErrors = collectPageErrors(page);
+    const consoleErrors: string[] = [];
+    page.on('console', message => {
+      if (message.type() === 'error' || /hydration mismatch/i.test(message.text())) {
+        consoleErrors.push(message.text());
+      }
+    });
+    try {
+      await page.goto('/commerce', { waitUntil: 'load' });
+      await page.evaluate(() => localStorage.setItem('themedark', 'true'));
+      await page.reload({ waitUntil: 'load' });
+      await expect(page.locator('html')).toHaveAttribute('data-zova-hydrated', 'commerce');
+      await expect(page.locator('body')).toHaveAttribute('data-theme', 'dark');
+      expect((await context.cookies()).find(cookie => cookie.name === 'themedark')?.value).toBe(
+        'true',
+      );
+
+      await login(page, '/commerce/address', customer.username, customer.password, 'commerce');
+      await expect(page.locator('html')).toHaveAttribute('data-zova-hydrated', 'commerce');
+      await expect(page.locator('body')).toHaveAttribute('data-theme', 'dark');
+      expect(pageErrors).toEqual([]);
+      expect(consoleErrors).toEqual([]);
+    } finally {
+      await context.close();
+    }
+  },
+);
+
 test(
   'Commerce catalogue: public sellable inventory renders after hydration',
   { tag: ['@web', '@flow'] },
@@ -472,32 +508,25 @@ test(
       await expect(page).toHaveURL(new RegExp(`/commerce/order/${checkout.orderId}(?:/|$)`), {
         timeout: 40_000,
       });
-      const orderDetailResponse = waitForApiResponse(
-        page,
-        'GET',
-        new RegExp(`/api/commerce/trade/order/viewMine/${checkout.orderId}$`),
-      );
-      await page.reload({ waitUntil: 'load' });
-      const orderDetailResponseValue = await orderDetailResponse;
-      expect(orderDetailResponseValue.ok()).toBeTruthy();
-      const order = (await orderDetailResponseValue.json()).data;
-      expect(order.id).toBe(checkout.orderId);
-      expect(order.state).toBe('paid');
-      expect(order.currency).toBe('USD');
-      expect(order.discountCents).toBe(0);
-      expect(order.payableTotalCents).toBe(4599);
-      expect(order.addressSnapshot.recipientName).toBe(fixture.recipientName);
-      expect(order.addressSnapshot.addressLine1).toBe(fixture.addressLine1);
-      expect(order.lines).toEqual([
-        expect.objectContaining({
-          titleSnapshot: 'Pour-Over Coffee Set',
-          skuCodeSnapshot: 'COF-SET-01',
-          unitPriceCents: 4599,
-          quantity: 1,
-          lineTotalCents: 4599,
-        }),
-      ]);
-
+      const orderPath = `/commerce/order/${checkout.orderId}`;
+      const orderResponse = await context.request.get(orderPath);
+      expect(orderResponse.ok()).toBeTruthy();
+      expect(orderResponse.headers()['cache-control']).toBe('private, no-store');
+      const orderHtml = await orderResponse.text();
+      expect(orderHtml.toLowerCase()).not.toContain('data-zova-hydrated');
+      expect(orderHtml).toContain(`Order #${checkout.orderId}`);
+      expect(orderHtml).toContain('paid · $45.99');
+      expect(orderHtml).toContain('USD');
+      expect(orderHtml).toContain(fixture.recipientName);
+      expect(orderHtml).toContain(fixture.addressLine1);
+      expect(orderHtml).toContain('Discount: $0.00');
+      expect(orderHtml).toContain('Pour-Over Coffee Set');
+      expect(orderHtml).toContain('COF-SET-01');
+      expect(orderHtml).toContain('1 × $45.99 = $45.99');
+
+      const orderDocumentResponse = await page.reload({ waitUntil: 'load' });
+      expect(orderDocumentResponse?.ok()).toBeTruthy();
+      await expect(page.locator('html')).toHaveAttribute('data-zova-hydrated', 'commerce');
       await expect(page.getByRole('heading', { name: `Order #${checkout.orderId}` })).toBeVisible();
       await expect(page.getByText('paid · $45.99')).toBeVisible();
       await expect(page.getByText(fixture.recipientName)).toBeVisible();
@@ -567,22 +596,18 @@ test(
         await adminContext.close().catch(() => {});
       }
 
-      const shippedDetailResponse = waitForApiResponse(
-        page,
-        'GET',
-        new RegExp(`/api/commerce/trade/order/viewMine/${checkout.orderId}$`),
-      );
-      await page.reload({ waitUntil: 'load' });
-      await shippedDetailResponse;
+      const shippedDocumentResponse = await page.reload({ waitUntil: 'load' });
+      expect(shippedDocumentResponse?.ok()).toBeTruthy();
+      await expect(page.locator('html')).toHaveAttribute('data-zova-hydrated', 'commerce');
       await expect(page.getByText('shipped · $45.99')).toBeVisible();
       await expect(page.getByRole('heading', { name: 'Shipment' })).toBeVisible();
       await expect(page.getByText(shipmentCarrier)).toBeVisible();
       await expect(page.getByText(shipmentTrackingNumber)).toBeVisible();
 
-      const ordersResponse = waitForApiResponse(page, 'GET', '/api/commerce/trade/order/mine');
-      await page.goto('/commerce/orders', { waitUntil: 'load' });
+      const ordersDocumentResponse = await page.goto('/commerce/orders', { waitUntil: 'load' });
+      expect(ordersDocumentResponse?.ok()).toBeTruthy();
       await expect(page).toHaveURL(/\/commerce\/orders(?:\/|$)/);
-      await ordersResponse;
+      await expect(page.locator('html')).toHaveAttribute('data-zova-hydrated', 'commerce');
       await expect(page.getByRole('heading', { name: 'My orders' })).toBeVisible();
       const orderCard = page
         .locator('article')

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cabloy",
-  "version": "5.1.133",
+  "version": "5.1.135",
   "gitHead": "2c5c19284bab738e492856189acb6fad74b8a7b7",
   "description": "A Node.js fullstack framework",
   "keywords": [

package/vona/patches/{zova-core@5.1.82.patch → zova-core@5.1.84.patch}

@@ -32,10 +32,10 @@ index 838e299407218b7bfac469d42a12d6ab59820380..e8b61cc231e39ee3a270ee513ab43ff5
  //# sourceMappingURL=module.d.ts.map
 
 diff --git a/dist/types/utils/env.d.ts b/dist/types/utils/env.d.ts
-index 7eb5fa0c4d5c23e046b1cebb64cf8ce85c0302fa..5f6aa470d4a88262e2108ff086923c673fdfbf67 100644
+index a25f8af9d4be43730ecaeaacce63646687fa8198..989fae4e0eed932fe36d9a874902ab6a2bb711fe 100644
 --- a/dist/types/utils/env.d.ts
 +++ b/dist/types/utils/env.d.ts
-@@ -35,19 +35,4 @@ export interface ZovaConfigEnv {
+@@ -37,19 +37,4 @@ export interface ZovaConfigEnv {
      MOCK_BUILD: string | undefined;
      MOCK_BUILD_PORT: string | undefined;
  }