cabloy 5.1.160 → 5.1.162

package/zova/src/suite/a-home/modules/home-indexweb/src/page/home/controller.tsx

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { BeanControllerPageBase } from 'zova';
 import { Controller } from 'zova-module-a-bean';
+import { ZPage, ZSiteEntryTables } from 'zova-module-home-base';
 
 export const ControllerPageHomeSchemaParams = z.object({
   locale: z.string().optional(),
@@ -8,22 +9,13 @@ export const ControllerPageHomeSchemaParams = z.object({
 
 @Controller()
 export class ControllerPageHome extends BeanControllerPageBase {
-  public message: string;
-
-  protected async __init__() {
-    this.message = 'Hello Zova';
-  }
-
   protected render() {
-    const localeCurrent = this.app.meta.locale.current;
     return (
-      <div style="text-align: center;">
-        <div>
-          <div style="font-size: 36px;">{this.message}</div>
-          <div style="font-size: 24px;opacity:.4;">Less is more, while more is less</div>
-          <div>{`Web: ${localeCurrent}`}</div>
-        </div>
-      </div>
+      <ZPage>
+        <section class="mx-auto max-w-6xl p-6">
+          <ZSiteEntryTables />
+        </section>
+      </ZPage>
     );
   }
 }

package/repo-docs/ai/edition-detection.md

@@ -1,30 +0,0 @@
-# Edition Detection for AI Workflows
-
-This page applies the general detection rule from [Editions / Detection](/editions/detection) to AI-assisted development specifically.
-
-Edition detection should happen before any AI workflow that assumes a frontend stack, module set, or example path.
-
-## AI-specific consequence
-
-If an agent skips edition detection, it can:
-
-- scaffold against the wrong UI-layer assumptions
-- suggest the wrong frontend flavors
-- cite suites, modules, SSR site baselines, or project assets that do not exist in the active repo
-- generate docs or skills that accidentally hardcode Basic-only behavior or `npm create cabloy` assumptions into Start workflows
-
-## Operational rule
-
-Before an AI workflow recommends implementation steps:
-
-1. check the edition marker
-2. verify the relevant package scripts or CLI entrypoints
-3. branch the guidance only where the editions truly diverge
-
-## Where this rule should live
-
-Keep the same rule in three places on purpose:
-
-- **public docs** so people can review it
-- **skills** so agents execute it consistently
-- **`CLAUDE.md`** so repo-wide Claude behavior stays aligned

package/repo-docs/editions/cabloy-basic.md

@@ -1,26 +0,0 @@
-# Cabloy Basic
-
-Cabloy Basic is the public framework/reference edition you are reading right now.
-
-## Repository marker
-
-The repository root contains:
-
-- `__CABLOY_BASIC__`
-
-This marker is the quickest safe signal for docs, skills, and rules that need to distinguish Cabloy Basic from Cabloy Start.
-
-## Typical role
-
-Use Cabloy Basic as the public reference edition for:
-
-- shared architecture explanations
-- root scripts and monorepo entrypoints
-- Vona and Zova source browsing
-- public CLI-backed workflows
-- public user-facing documentation
-- projects created with `npm create cabloy`
-
-## Frontend bias
-
-In the current source and docs, Cabloy Basic examples commonly align with a shared frontend engineering layer built on Zova, Vue, Vite, and Quasar tooling, plus a Basic-specific UI layer built with DaisyUI + Tailwind CSS. That does not mean Zova is limited to that UI stack, but it does mean docs and AI outputs should not accidentally project Vuetify-specific assumptions into Cabloy Basic unless the current source explicitly requires it.

package/repo-docs/editions/cabloy-start.md

@@ -1,53 +0,0 @@
-# Cabloy Start
-
-Cabloy Start is the public MIT-licensed edition. It is a sibling repository that shares the Cabloy fullstack direction while intentionally differing from Cabloy Basic.
-
-## Repository marker
-
-The Cabloy Start root contains:
-
-- `__CABLOY_START__`
-
-Use that marker before choosing examples, UI assumptions, or automation behavior.
-
-## Typical role
-
-Use Cabloy Start as the edition-aware target when work depends on:
-
-- direct use of the public Cabloy Start repository source
-- Vuetify-specific frontend workflows
-- Cabloy Start flavor names in frontend scripts
-- edition-specific module composition in the active Start repository
-- separate-repository structure and edition-specific project composition
-- edition-specific SSR site baselines and project assets
-
-## Clone and initialize
-
-Cabloy Start is public and MIT-licensed. It does not use the default `npm create cabloy` project route.
-
-To use Cabloy Start:
-
-1. clone the public repository directly
-2. run the edition initialization flow in the cloned project
-
-Repository:
-
-- `https://github.com/cabloy/cabloy-start`
-
-Clone the repository:
-
-```bash
-git clone git@github.com:cabloy/cabloy-start.git
-```
-
-After cloning, run:
-
-```bash
-npm run init
-```
-
-This initializes the project and installs dependencies.
-
-## Relationship to this docs site
-
-This unified docs site treats Cabloy Start as a supported edition, not as a clone of Cabloy Basic. Shared architecture should remain shared, but any Start-specific script, module path, or UI workflow must be labeled explicitly.

package/repo-docs/editions/choosing-between-basic-and-start.md

@@ -1,83 +0,0 @@
-# Choosing Between Cabloy Basic and Cabloy Start
-
-This guide helps you choose the right Cabloy edition before you start a new project, adopt a frontend UI strategy, or prepare AI workflow guidance.
-
-## Short answer
-
-Choose **Cabloy Basic** when you want the public framework/reference edition, the default `npm create cabloy` project route, and a faster path for open, community-oriented, or small-to-medium system development.
-
-Choose **Cabloy Start** when you want the public MIT-licensed edition in its own repository and a stronger baseline for more complex business systems built around Start-oriented SSR sites, project assets, and a Vuetify-aligned UI layer.
-
-## What stays the same in both editions
-
-Both editions share the same Cabloy fullstack core:
-
-- **Vona** as the backend framework
-- **Zova** as the frontend framework
-- suite-based modular architecture
-- CLI-first workflows
-- shared frontend engineering direction built around Vue, Vite, Quasar tooling, and related libraries
-
-So the decision is not about choosing two unrelated products. It is about choosing the edition baseline that fits your delivery goals best.
-
-## Choose Cabloy Basic when
-
-Cabloy Basic is usually the better fit when you want:
-
-- the public framework/reference edition
-- the default project route created by `npm create cabloy`
-- open-source visibility and community-friendly workflows
-- public examples and docs that match your repo directly
-- a UI layer aligned with DaisyUI + Tailwind CSS
-- a faster path for small-to-medium system development
-
-## Choose Cabloy Start when
-
-Cabloy Start is usually the better fit when you want:
-
-- the public MIT-licensed edition maintained in its own repository
-- direct cloning of the public Start repository
-- Start-specific flavors, SSR site baselines, and project assets
-- a UI layer aligned with Vuetify
-- a stronger starting point for more complex business systems
-- edition-specific rules, skills, and docs optimized for the Start repo assumptions
-
-## The most practical decision factors
-
-### Project creation path
-
-- **Cabloy Basic**: create the project with `npm create cabloy`
-- **Cabloy Start**: clone the public repository directly, then run `npm run init`
-
-### UI strategy
-
-- **Cabloy Basic**: DaisyUI + Tailwind CSS
-- **Cabloy Start**: Vuetify
-
-### Repo and asset model
-
-- **Cabloy Basic**: public repository and public reference materials
-- **Cabloy Start**: separate public repository with edition-specific SSR sites and project assets
-
-### AI workflow assumptions
-
-- **Cabloy Basic**: use Basic-specific examples, flavors, modules, and UI assumptions
-- **Cabloy Start**: use Start-specific examples, flavors, SSR site baselines, and UI assumptions
-
-This is why edition detection matters so much for AI vibe coding.
-
-## A simple recommendation rule
-
-Use this rule when you need a fast decision:
-
-1. If you want the public, default, `npm create cabloy` path, choose **Cabloy Basic**.
-2. If you want the public MIT-licensed Start repository with Start-oriented assets, a Vuetify-based business-system baseline, and a clone-plus-`npm run init` onboarding path, choose **Cabloy Start**.
-3. If AI workflow accuracy matters for UI generation, SSR site assumptions, or flavor-specific commands, confirm the edition before writing prompts, rules, skills, or docs.
-
-## Read together with
-
-- [Editions Overview](/editions/overview)
-- [Cabloy Basic](/editions/cabloy-basic)
-- [Cabloy Start](/editions/cabloy-start)
-- [Edition Detection](/editions/detection)
-- [Fullstack Quickstart](/fullstack/quickstart)

package/repo-docs/editions/detection.md

@@ -1,31 +0,0 @@
-# Edition Detection
-
-Edition detection is a first-class requirement for documentation, rules, and skills.
-
-## Repository markers
-
-Use these root markers:
-
-- `__CABLOY_BASIC__` → Cabloy Basic
-- `__CABLOY_START__` → Cabloy Start
-
-## Why this matters
-
-The two editions share many concepts but differ in important operational details, especially around:
-
-- frontend UI library assumptions
-- flavor-specific frontend scripts
-- module availability
-- Start-specific value-add project content
-
-If an agent skips edition detection, it may generate the wrong instructions, recommend the wrong module, or use the wrong UI stack.
-
-## Recommended rule for skills and repo guidance
-
-Before suggesting a cross-stack implementation path:
-
-1. check the repository marker
-2. verify the relevant root scripts or package scripts
-3. only then choose the edition-specific example or workflow branch
-
-When neither marker is present, fall back to code inspection and ask the user before making a strong edition-specific assumption.

package/test-results/a-commerce-ATP-ADDR-01-aut-11dea-ss-through-Web-self-service/error-context.md

@@ -1,238 +0,0 @@
-# Instructions
-
-- Following Playwright test failed.
-- Explain why, be concise, respect Playwright best practices.
-- Provide a snippet of code with the fix, if possible.
-
-# Test info
-
-- Name: a-commerce.spec.ts >> ATP-ADDR-01: authenticated customer manages Address through Web self-service
-- Location: repo-e2e/specs/a-commerce.spec.ts:556:1
-
-# Error details
-
-```
-Error: expect(page).toHaveURL(expected) failed
-
-Expected pattern: /\/commerce\/commerce\/member\/address(?:\?|$)/
-Received string:  "http://127.0.0.1:7102/commerce/home/base/errorAccessDenied"
-Timeout: 5000ms
-
-Call log:
-  - Expect "toHaveURL" with timeout 5000ms
-    14 × locator resolved to <html lang="en-us" data-zova-hydrated="commerce">…</html>
-       - unexpected value "http://127.0.0.1:7102/commerce/home/base/errorAccessDenied"
-
-```
-
-```yaml
-- text: 403 Access denied.
-- button "Go Home"
-```
-
-# Test source
-
-```ts
-  89  |     await expect(passwordInput).toHaveValue(password);
-  90  |     await expect(page.getByPlaceholder('Please input captcha')).not.toHaveValue('');
-  91  |     const loginResponse = waitForApiResponse(page, 'POST', '/api/home/user/passport/login');
-  92  |     await page.getByRole('button', { name: 'Login', exact: true }).click();
-  93  |     const loginResponseValue = await loginResponse;
-  94  |     if (!loginResponseValue.ok()) {
-  95  |       throw new Error(
-  96  |         `login failed: ${loginResponseValue.status()} ${await loginResponseValue.text()}`,
-  97  |       );
-  98  |     }
-  99  |     await expect(page).not.toHaveURL(/\/login(?:\?|$)/);
-  100 |   }
-  101 | }
-  102 | 
-  103 | async function registerCustomer(
-  104 |   request: APIRequestContext,
-  105 |   testInfo: TestInfo,
-  106 | ): Promise<{ password: string; username: string }> {
-  107 |   const id = `${testInfo.workerIndex}-${testInfo.parallelIndex ?? testInfo.retry}-${Date.now()}`;
-  108 |   const username = `e2e-address-${id}`;
-  109 |   const password = 'address-e2e-password';
-  110 |   const captchaResponse = await request.post('/api/captcha/create', {
-  111 |     data: { scene: 'captcha-simple:simple' },
-  112 |   });
-  113 |   expect(captchaResponse.ok()).toBeTruthy();
-  114 |   const captcha = (await captchaResponse.json()).data;
-  115 |   expect(captcha?.id).toEqual(expect.any(String));
-  116 |   expect(captcha?.token).toEqual(expect.any(String));
-  117 | 
-  118 |   const baseURL = testInfo.project.use.baseURL;
-  119 |   if (!baseURL) throw new Error('commerce E2E base URL is unavailable');
-  120 |   const consumerUrl = new URL('/home/user/activation', baseURL).toString();
-  121 |   const registerResponse = await request.post('/api/home/user/passport/register', {
-  122 |     data: {
-  123 |       username,
-  124 |       email: `${username}@example.test`,
-  125 |       password,
-  126 |       passwordConfirm: password,
-  127 |       consumerUrl,
-  128 |       captcha: { id: captcha.id, token: captcha.token },
-  129 |     },
-  130 |   });
-  131 |   expect(registerResponse.ok()).toBeTruthy();
-  132 |   const registration = (await registerResponse.json()).data;
-  133 |   expect(registration?.jwt?.accessToken).toEqual(expect.any(String));
-  134 |   const activateResponse = await request.post(passportTestActivateCurrentPath, {
-  135 |     headers: { Authorization: `Bearer ${registration.jwt.accessToken}` },
-  136 |   });
-  137 |   expect(activateResponse.ok()).toBeTruthy();
-  138 |   return { username, password };
-  139 | }
-  140 | 
-  141 | function createAddressFixture(testInfo: TestInfo): IAddressFixture {
-  142 |   const id = `${testInfo.workerIndex}-${testInfo.parallelIndex ?? testInfo.retry}-${Date.now()}`;
-  143 |   return {
-  144 |     recipientName: `E2E Address ${id}`,
-  145 |     phone: '15555550123',
-  146 |     countryCode: 'US',
-  147 |     region: 'California',
-  148 |     city: `Original City ${id}`,
-  149 |     postalCode: '94105',
-  150 |     addressLine1: `1 Test Street ${id}`,
-  151 |     addressLine2: 'Suite E2E',
-  152 |     updatedCity: `Updated City ${id}`,
-  153 |   };
-  154 | }
-  155 | 
-  156 | function getAddressTextbox(page: Page, name: string): Locator {
-  157 |   return page.getByRole('group', { name, exact: true }).getByRole('textbox');
-  158 | }
-  159 | 
-  160 | async function fillAddressForm(page: Page, fixture: IAddressFixture) {
-  161 |   await getAddressTextbox(page, 'Recipient Name *').fill(fixture.recipientName);
-  162 |   await getAddressTextbox(page, 'Phone *').fill(fixture.phone);
-  163 |   await getAddressTextbox(page, 'Country Code *').fill(fixture.countryCode);
-  164 |   await getAddressTextbox(page, 'Region *').fill(fixture.region);
-  165 |   await getAddressTextbox(page, 'City *').fill(fixture.city);
-  166 |   await getAddressTextbox(page, 'Postal Code *').fill(fixture.postalCode);
-  167 |   await getAddressTextbox(page, 'Address Line 1 *').fill(fixture.addressLine1);
-  168 |   await getAddressTextbox(page, 'Address Line 2').fill(fixture.addressLine2);
-  169 | }
-  170 | 
-  171 | async function createAddressThroughCustomerPage(
-  172 |   browser: Browser,
-  173 |   request: APIRequestContext,
-  174 |   testInfo: TestInfo,
-  175 | ) {
-  176 |   const customer = await registerCustomer(request, testInfo);
-  177 |   const fixture = createAddressFixture(testInfo);
-  178 |   const context = await browser.newContext();
-  179 |   const page = await context.newPage();
-  180 |   const pageErrors = collectPageErrors(page);
-  181 | 
-  182 |   await login(
-  183 |     page,
-  184 |     '/commerce/commerce/member/address',
-  185 |     customer.username,
-  186 |     customer.password,
-  187 |     'commerce',
-  188 |   );
-> 189 |   await expect(page).toHaveURL(/\/commerce\/commerce\/member\/address(?:\?|$)/);
-      |                      ^ Error: expect(page).toHaveURL(expected) failed
-  190 |   await expect(page.getByRole('heading', { name: 'Addresses' })).toBeVisible();
-  191 |   await expect(page.getByText('No addresses yet.')).toBeVisible();
-  192 | 
-  193 |   await fillAddressForm(page, fixture);
-  194 |   const createResponse = waitForAddressResponse(page, 'POST', `${addressActionPath}/createMine`);
-  195 |   const mineResponse = waitForAddressMine(page);
-  196 |   await page.getByRole('button', { name: 'Save address', exact: true }).click();
-  197 |   await createResponse;
-  198 |   await mineResponse;
-  199 |   await expect(page.getByRole('heading', { name: fixture.recipientName })).toBeVisible();
-  200 | 
-  201 |   return { context, fixture, page, pageErrors };
-  202 | }
-  203 | 
-  204 | async function deleteAddressThroughCustomerPage(page: Page, fixture: IAddressFixture) {
-  205 |   const card = page
-  206 |     .locator('article')
-  207 |     .filter({ has: page.getByRole('heading', { name: fixture.recipientName }) });
-  208 |   const deleteResponse = waitForAddressResponse(page, 'DELETE', /\/deleteMine\/[^/]+$/);
-  209 |   const mineResponse = waitForAddressMine(page);
-  210 |   await card.getByRole('button', { name: 'Delete', exact: true }).click();
-  211 |   await deleteResponse;
-  212 |   await mineResponse;
-  213 |   await expect(page.getByRole('heading', { name: fixture.recipientName })).toHaveCount(0);
-  214 |   await expect(page.getByText('No addresses yet.')).toBeVisible();
-  215 | }
-  216 | 
-  217 | test(
-  218 |   'ATP-SSR-01: anonymous Commerce HTML is public and hydration completes',
-  219 |   { tag: ['@web', '@smoke'] },
-  220 |   async ({ page, request }) => {
-  221 |     const response = await request.get('/commerce');
-  222 |     expect(response.ok()).toBeTruthy();
-  223 |     expect(response.headers()['cache-control']).toBe('no-cache, no-store, must-revalidate');
-  224 |     const html = await response.text();
-  225 |     const normalizedHtml = html.toLowerCase();
-  226 |     expect(normalizedHtml).not.toContain('data-zova-hydrated');
-  227 | 
-  228 |     for (const marker of privateMarkers) {
-  229 |       expect(normalizedHtml).not.toContain(`"${marker}"`);
-  230 |     }
-  231 | 
-  232 |     const pageErrors = collectPageErrors(page);
-  233 |     const documentResponse = await page.goto('/commerce', { waitUntil: 'load' });
-  234 |     expect(documentResponse?.ok()).toBeTruthy();
-  235 |     await expect(page).toHaveURL(/\/commerce(?:\/|$)/);
-  236 |     await expect(page.locator('html')).toHaveAttribute('data-zova-hydrated', 'commerce');
-  237 |     await expect(page.getByRole('heading', { name: 'Commerce catalogue' })).toBeVisible();
-  238 |     await expect(page.getByText('Dashboard')).toHaveCount(0);
-  239 |     await expect(page.locator('body')).toBeVisible();
-  240 |     await expect(page).not.toHaveTitle(/error/i);
-  241 |     expect(pageErrors).toEqual([]);
-  242 |   },
-  243 | );
-  244 | 
-  245 | test(
-  246 |   'Commerce theme: public local preference mirrors session cookie without hydration mismatch',
-  247 |   { tag: ['@web', '@ssr', '@theme'] },
-  248 |   async ({ browser, request }, testInfo) => {
-  249 |     const customer = await registerCustomer(request, testInfo);
-  250 |     const context = await browser.newContext();
-  251 |     await context.addInitScript(() => localStorage.setItem('themedark', 'true'));
-  252 |     const page = await context.newPage();
-  253 |     const pageErrors = collectPageErrors(page);
-  254 |     const consoleErrors: string[] = [];
-  255 |     page.on('console', message => {
-  256 |       if (message.type() === 'error' || /hydration mismatch/i.test(message.text())) {
-  257 |         consoleErrors.push(message.text());
-  258 |       }
-  259 |     });
-  260 |     try {
-  261 |       await page.goto('/commerce', { waitUntil: 'load' });
-  262 |       await page.evaluate(() => localStorage.setItem('themedark', 'true'));
-  263 |       await page.reload({ waitUntil: 'load' });
-  264 |       await expect(page.locator('html')).toHaveAttribute('data-zova-hydrated', 'commerce');
-  265 |       await expect(page.locator('body')).toHaveAttribute('data-theme', 'dark');
-  266 |       expect((await context.cookies()).find(cookie => cookie.name === 'themedark')?.value).toBe(
-  267 |         'true',
-  268 |       );
-  269 | 
-  270 |       await login(
-  271 |         page,
-  272 |         '/commerce/commerce/member/address',
-  273 |         customer.username,
-  274 |         customer.password,
-  275 |         'commerce',
-  276 |       );
-  277 |       await expect(page.locator('html')).toHaveAttribute('data-zova-hydrated', 'commerce');
-  278 |       await expect(page.locator('body')).toHaveAttribute('data-theme', 'dark');
-  279 |       expect(pageErrors).toEqual([]);
-  280 |       expect(consoleErrors).toEqual([]);
-  281 |     } finally {
-  282 |       await context.close();
-  283 |     }
-  284 |   },
-  285 | );
-  286 | 
-  287 | test(
-  288 |   'Commerce theme: session cookie mirrors public local preference without hydration mismatch',
-  289 |   { tag: ['@web', '@ssr', '@theme'] },
-```