create-mercato-app 0.6.2-develop.3461.1.605f31c2c9 → 0.6.2-develop.3467.1.2a1818709d

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-mercato-app",
-  "version": "0.6.2-develop.3461.1.605f31c2c9",
+  "version": "0.6.2-develop.3467.1.2a1818709d",
   "type": "module",
   "description": "Create a new Open Mercato application",
   "main": "./dist/index.js",

package/template/src/app/(backend)/backend/layout.tsx

@@ -106,6 +106,7 @@ export default async function BackendLayout({
         rightHeaderSlot={(
           <BackendHeaderChrome
             email={auth?.email}
+            userId={auth?.sub ?? null}
             embeddingConfigured={embeddingConfigured}
             missingConfigMessage={missingConfigMessage}
             tenantId={auth?.tenantId ?? null}

package/template/src/components/BackendHeaderChrome.tsx

@@ -5,6 +5,7 @@ import Link from 'next/link'
 import * as React from 'react'
 import { MoreHorizontal, PlugZap, Settings, Mail } from 'lucide-react'
 import { hasFeature } from '@open-mercato/shared/security/features'
+import { AuthSessionGuard } from '@open-mercato/ui/backend/AuthSessionGuard'
 import { IconButton } from '@open-mercato/ui/primitives/icon-button'
 import { Popover, PopoverContent, PopoverTrigger } from '@open-mercato/ui/primitives/popover'
 import { IntegrationsButton } from '@open-mercato/ui/backend/IntegrationsButton'
@@ -37,6 +38,7 @@ const LazyMessagesIcon = dynamic(
 
 type BackendHeaderChromeProps = {
   email?: string
+  userId: string | null
   embeddingConfigured: boolean
   missingConfigMessage: string
   tenantId: string | null
@@ -102,6 +104,7 @@ function MobileMoreMenu({ items }: { items: MobileMoreItem[] }) {
 
 export function BackendHeaderChrome({
   email,
+  userId,
   embeddingConfigured,
   missingConfigMessage,
   tenantId,
@@ -160,6 +163,7 @@ export function BackendHeaderChrome({
 
   return (
     <>
+      <AuthSessionGuard serverUserId={userId} />
       {isReady && showAiAssistant ? (
         <AiAssistantShellIntegration tenantId={tenantId} organizationId={organizationId}>
           <LazyAiChatHeaderButton />

package/template/src/components/__tests__/BackendHeaderChrome.test.tsx

@@ -39,6 +39,10 @@ jest.mock('@open-mercato/ui/backend/SettingsButton', () => ({
   SettingsButton: () => <div data-testid="settings-button" />,
 }))
 
+jest.mock('@open-mercato/ui/backend/AuthSessionGuard', () => ({
+  AuthSessionGuard: () => <div data-testid="auth-session-guard" />,
+}))
+
 jest.mock('@/components/AiAssistantShellIntegration', () => ({
   AiAssistantShellIntegration: ({ children }: { children: React.ReactNode }) => <>{children}</>,
 }))
@@ -48,6 +52,7 @@ describe('BackendHeaderChrome', () => {
     const { container } = render(
       <BackendHeaderChrome
         email="demo@example.com"
+        userId="user-1"
         embeddingConfigured={false}
         missingConfigMessage=""
         tenantId={null}