portal-mojo 0.2.19 → 0.2.21

package/src/styles/components/admin-edge.css

@@ -1 +1,125 @@
-.edge-kind-cards{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:12px}.edge-kind-card{position:relative;display:grid;gap:6px;padding:14px;border:1px solid var(--line);border-radius:10px;background:var(--surface);cursor:pointer}.edge-kind-card:hover{border-color:var(--accent)}.edge-kind-card.is-selected{border-color:var(--accent);background:var(--accent-soft)}.edge-kind-card:focus-within{outline:2px solid var(--accent);outline-offset:2px}.edge-kind-card input{position:absolute;opacity:0;pointer-events:none}.edge-kind-card i{font-size:22px;color:var(--accent)}.edge-kind-card span{color:var(--mute);font-size:13px}.edge-form-grid{display:grid;gap:14px}.edge-server-name{display:grid;gap:3px;padding:10px 12px;border:1px solid var(--line);border-radius:8px;background:var(--surface2)}.edge-server-name span,.edge-review dt{font-size:11px;color:var(--mute);text-transform:uppercase;letter-spacing:.06em}.edge-server-name code{font-size:15px;overflow-wrap:anywhere}.edge-path-list,.edge-route-list{display:grid;gap:8px}.edge-path-row{display:grid;grid-template-columns:minmax(0,1fr) auto;gap:8px;align-items:center}.edge-route-row{display:grid;grid-template-columns:minmax(0,1fr) minmax(0,1.3fr) auto;gap:8px;align-items:center}.edge-warning{display:flex;gap:8px;align-items:baseline;padding:10px 12px;border:1px solid var(--warn);border-radius:8px;color:var(--ink);background:var(--surface2)}.edge-warning i{color:var(--warn)}.edge-note{display:grid;gap:3px;padding:10px 12px;border:1px solid var(--line);border-radius:8px;background:var(--surface2)}.edge-note span{color:var(--mute);font-size:13px}.edge-review{display:grid;grid-template-columns:max-content minmax(0,1fr);gap:8px 16px;margin:0}.edge-review dd{margin:0;overflow-wrap:anywhere}.edge-routes{display:grid;gap:10px}.edge-route-item{display:grid;grid-template-columns:minmax(0,1fr) minmax(0,1fr) auto;gap:10px;align-items:center;padding:10px 12px;border:1px solid var(--line);border-radius:8px;background:var(--surface)}.edge-route-actions,.edge-row-actions{display:flex;gap:8px;flex-wrap:wrap;justify-content:flex-end}.edge-route-editor{display:grid;gap:12px;padding:14px;border:1px solid var(--line);border-radius:10px;background:var(--surface2)}.edge-inline-code{margin-right:6px}.edge-blocklist-editor .form-grid,.edge-upstream-dialog .form-grid{grid-template-columns:repeat(2,minmax(0,1fr))}.edge-blocklist-editor .edge-mode-field,.edge-upstream-dialog .form-grid>.collection-select{grid-column:1/-1}.edge-mode-control{display:flex;flex-wrap:wrap;gap:6px}.edge-mode-option{display:inline-flex;align-items:center;gap:6px;padding:6px 12px;border:1px solid var(--line);border-radius:999px;cursor:pointer}.edge-mode-option.is-selected{border-color:var(--accent);background:var(--accent-soft)}.edge-mode-option:focus-within{outline:2px solid var(--accent);outline-offset:2px}.edge-mode-option input{position:absolute;opacity:0;pointer-events:none}@media(max-width:700px){.edge-kind-cards,.edge-blocklist-editor .form-grid,.edge-upstream-dialog .form-grid{grid-template-columns:1fr}.edge-route-row{grid-template-columns:minmax(0,1fr) auto}.edge-route-row>:first-child{grid-column:1/-1}.edge-route-item{grid-template-columns:1fr}.edge-review{grid-template-columns:1fr;gap:2px 0}.edge-review dd{margin-bottom:8px}}
+.edge-form-grid { display: grid; gap: 14px; }
+.edge-server-name { display: grid; gap: 3px; padding: 10px 12px; border: 1px solid var(--line); border-radius: 8px; background: var(--surface2); }
+.edge-server-name span, .edge-review dt { font-size: 11px; color: var(--mute); text-transform: uppercase; letter-spacing: .06em; }
+.edge-server-name code { font-size: 15px; overflow-wrap: anywhere; }
+.edge-path-list, .edge-route-list { display: grid; gap: 8px; }
+.edge-path-row { display: grid; grid-template-columns: minmax(0, 1fr) auto; gap: 8px; align-items: center; }
+.edge-route-row { display: grid; grid-template-columns: minmax(0, 1fr) minmax(0, 1.3fr) auto; gap: 8px; align-items: center; }
+.edge-warning { display: flex; gap: 8px; align-items: baseline; padding: 10px 12px; border: 1px solid var(--warn); border-radius: 8px; color: var(--ink); background: var(--surface2); }
+.edge-warning i { color: var(--warn); }
+.edge-note { display: grid; gap: 3px; padding: 10px 12px; border: 1px solid var(--line); border-radius: 8px; background: var(--surface2); }
+.edge-note span { color: var(--mute); font-size: 13px; }
+.edge-review { display: grid; grid-template-columns: max-content minmax(0, 1fr); gap: 8px 16px; margin: 0; }
+.edge-review dd { margin: 0; overflow-wrap: anywhere; }
+.edge-routes { display: grid; gap: 10px; }
+.edge-route-actions, .edge-row-actions { display: flex; gap: 8px; flex-wrap: wrap; justify-content: flex-end; }
+.edge-blocklist-editor .form-grid, .edge-upstream-dialog .form-grid { grid-template-columns: repeat(2, minmax(0, 1fr)); }
+.edge-blocklist-editor .edge-mode-field, .edge-upstream-dialog .form-grid > .collection-select { grid-column: 1/-1; }
+.edge-mode-control { display: flex; flex-wrap: wrap; gap: 6px; }
+.edge-mode-option { display: inline-flex; align-items: center; gap: 6px; padding: 6px 12px; border: 1px solid var(--line); border-radius: 999px; cursor: pointer; }
+.edge-mode-option.is-selected { border-color: var(--accent); background: var(--accent-soft); }
+.edge-mode-option:focus-within { outline: 2px solid var(--accent); outline-offset: 2px; }
+.edge-mode-option input { position: absolute; opacity: 0; pointer-events: none; }
+@media (max-width: 700px) {
+    .edge-blocklist-editor .form-grid, .edge-upstream-dialog .form-grid { grid-template-columns: 1fr; }
+    .edge-route-row { grid-template-columns: minmax(0, 1fr) auto; }
+    .edge-route-row > :first-child { grid-column: 1/-1; }
+    .edge-review { grid-template-columns: 1fr; gap: 2px 0; }
+    .edge-review dd { margin-bottom: 8px; }
+}
+.edge-serving-page { display: grid; grid-template-columns: minmax(0, 1fr); gap: 24px; min-width: 0; }
+.edge-serving-page .page-header h1, .edge-serving-page .page-header h2 { font-size: 26px; font-weight: 650; letter-spacing: -.025em; line-height: 1.2; }
+.edge-serving-heading { display: flex; align-items: center; justify-content: space-between; gap: 12px; flex-wrap: wrap; }
+.edge-serving-evidence p { margin: 8px 0; overflow-wrap: anywhere; }
+.edge-serving-check { padding: 12px 0; border-top: 1px solid var(--line); overflow-wrap: anywhere; }
+@media (max-width: 700px) {
+    .edge-serving-heading { align-items: flex-start; }
+    .edge-serving-page .page-header h1, .edge-serving-page .page-header h2 { font-size: 23px; }
+}
+.edge-serving-page > * { min-width: 0; }
+.edge-vhost-wizard > .modal-title { flex-shrink: 0; margin-bottom: 16px; }
+/* Serving task surfaces are deliberately scoped; shared DetailView is unchanged. */
+.edge-vhost-wizard { display: flex; flex-direction: column; padding: 24px; max-height: calc(100dvh - 32px); }
+.edge-vhost-editor { display: flex; flex-direction: column; min-height: 0; gap: 16px; }
+.edge-vhost-editor > .mojo-tabs { display: flex; flex-direction: column; min-height: 0; }
+.edge-vhost-editor .mojo-tab-panels, .edge-vhost-editor .mojo-tab-panel { min-height: 0; }
+.edge-editor-panel { overflow: auto; min-height: 0; max-height: calc(100dvh - 260px); padding: 18px 2px 4px; }
+.edge-vhost-editor .mojo-tabs { overflow: visible; }
+.edge-editor-actions { flex-shrink: 0; margin-top: 0; padding-top: 16px; border-top: 1px solid var(--line); background: var(--surface); gap: 8px; flex-wrap: wrap; }
+.edge-vhost-wizard .edge-form-grid { gap: 20px; }
+.edge-kind-picker { border: 0; padding: 0; margin: 0; min-width: 0; }
+.edge-kind-picker legend { margin-bottom: 10px; }
+.edge-kind-options { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 8px; }
+.edge-kind-option { display: flex; align-items: center; gap: 8px; padding: 10px 12px; border: 1px solid var(--line); border-radius: 8px; cursor: pointer; font-size: 14px; }
+.edge-kind-option.is-selected { border-color: var(--accent); background: var(--accent-soft); }
+.edge-kind-option input { margin: 0; accent-color: var(--accent); }
+.edge-kind-option:focus-within { outline: 2px solid var(--accent); outline-offset: 2px; }
+.edge-kind-option i { color: var(--accent); }
+.edge-create-progress { display: flex; list-style: none; padding: 0; margin: 0; gap: 16px; flex-wrap: wrap; font-size: 13px; color: var(--mute); }
+.edge-create-progress li { display: flex; align-items: center; gap: 6px; }
+.edge-create-progress li > span { display: grid; place-items: center; width: 22px; height: 22px; border: 1px solid var(--line); border-radius: 50%; font-size: 12px; }
+.edge-create-progress li[aria-current="step"] { color: var(--accent); font-weight: 600; }
+.edge-create-progress li[aria-current="step"] > span { background: var(--accent-soft); border-color: var(--accent); }
+.edge-help { display: inline-flex; vertical-align: middle; }
+.edge-help > .btn-icon { width: 26px; height: 26px; min-width: 26px; color: var(--mute); }
+.edge-help-popover { width: min(320px, calc(100vw - 32px)); max-width: calc(100vw - 32px); padding: 14px 16px; font-size: 13px; line-height: 1.5; white-space: normal; overflow-wrap: anywhere; }
+.edge-help-popover p { margin: 0; }
+.edge-hostname-detail { padding: 24px; display: flex; flex-direction: column; min-height: 0; max-height: calc(100dvh - 32px); }
+.edge-detail-header { display: flex; align-items: flex-start; justify-content: space-between; gap: 20px; padding-bottom: 20px; }
+.edge-detail-identity { min-width: 0; }
+.edge-detail-identity .modal-title { margin: 0 0 8px; overflow-wrap: anywhere; }
+.edge-detail-subtitle { display: flex; align-items: center; flex-wrap: wrap; gap: 10px; color: var(--mute); font-size: 14px; }
+.edge-detail-actions { display: flex; flex-shrink: 0; align-items: center; gap: 8px; }
+.edge-enabled-switch { display: flex; gap: 6px; align-items: center; font-size: 13px; color: var(--mute); }
+.edge-enabled-switch input { appearance: none; width: 34px; height: 20px; border-radius: 12px; border: 1px solid var(--line); background: var(--surface2); cursor: pointer; position: relative; }
+.edge-enabled-switch input:before { content: ''; position: absolute; width: 14px; height: 14px; left: 2px; top: 2px; border-radius: 50%; background: var(--mute); }
+.edge-enabled-switch input:checked { background: var(--accent); border-color: var(--accent); }
+.edge-enabled-switch input:checked:before { left: 16px; background: var(--surface); }
+.edge-enabled-switch input:disabled { opacity: .55; cursor: default; }
+.edge-enabled-switch input:focus-visible { outline: 2px solid var(--accent); outline-offset: 3px; }
+.edge-hostname-detail > .mojo-tabs { min-height: 0; overflow: auto; }
+.edge-detail-panel { padding: 16px 2px 4px; min-height: 0; overflow-wrap: anywhere; }
+.edge-detail-panel > p { margin: 16px 0; }
+.edge-detail-panel .flat-row { min-width: 0; }
+.edge-detail-panel .flat-row code { overflow-wrap: anywhere; }
+.edge-detail-panel > div:last-child > .btn { margin-top: 16px; }
+.edge-hostname-detail .form-alert { display: flex; flex-wrap: wrap; align-items: center; gap: 12px; margin-bottom: 16px; }
+.edge-action-menu { padding: 8px; }
+.edge-route-dialog .edge-form-grid { margin-top: 20px; }
+.edge-check-summary { display: flex; align-items: center; gap: 12px; flex-wrap: wrap; }
+.edge-check-status { display: flex; align-items: center; gap: 8px; flex-wrap: wrap; }
+.edge-check-status > .bi { color: var(--accent); }
+.edge-serving-evidence { min-width: 0; margin-top: 12px; display: grid; gap: 4px; font-size: 13px; }
+.edge-serving-evidence > small { font-size: 12px; }
+.edge-check-dialog { max-height: calc(100dvh - 32px); display: flex; flex-direction: column; }
+.edge-check-body { overflow: auto; min-height: 0; }
+.edge-check-dialog .modal-actions { flex-shrink: 0; }
+.edge-domain-filter { width: min(320px, 100%); }
+.edge-domain-filter .field-label { font-size: 13px; }
+.edge-settings-button { justify-self: start; }
+@media (max-width: 700px) {
+    .edge-vhost-wizard, .edge-hostname-detail { padding: 20px 16px; }
+    .edge-detail-header { flex-wrap: wrap; gap: 12px; }
+    .edge-detail-actions { width: 100%; justify-content: flex-end; }
+    .edge-detail-actions > .edge-enabled-switch { margin-right: auto; }
+    .edge-create-progress { gap: 8px 12px; font-size: 12px; }
+    .edge-create-progress li > span { width: 20px; height: 20px; }
+    .edge-editor-panel { max-height: calc(100dvh - 285px); }
+    .edge-route-row > .collection-select { min-width: 0; }
+    .edge-check-summary { align-items: flex-start; }
+    .edge-serving-evidence { width: 100%; }
+}
+@media (max-width: 700px) {
+    .edge-vhost-editor .mojo-tab, .edge-hostname-detail .mojo-tab { font-size: 13px; padding-left: 8px; padding-right: 8px; }
+}
+.edge-vhost-editor .edge-route-row { align-items: end; }
+.edge-hostname-detail .edge-route-actions .btn { white-space: nowrap; }
+
+.edge-serving-heading.page-header { align-items: flex-start; }
+.edge-serving-heading.page-header > div { min-width: 0; }
+.edge-serving-evidence .edge-row-actions { align-items: center; gap: 6px; }
+.edge-serving-evidence .btn-compact { font-size: 12px; padding: 4px 8px; }
+.edge-serving-evidence .btn-icon { width: 28px; height: 28px; }
+
+.edge-certificate-summary { display: grid; gap: 8px; min-width: 0; }
+.edge-certificate-summary > .btn { justify-self: start; }

package/src/styles/components/admin-geolocation.css

@@ -0,0 +1,40 @@
+.geo-admin { display: grid; max-width: 880px; margin-inline: auto; gap: 20px; min-width: 0; overflow-wrap: anywhere; container-type: inline-size; }
+.geo-admin .page-header { display: flex; justify-content: space-between; margin: 0; align-items: start; flex-wrap: wrap; gap: 12px; }
+.geo-admin h1 { font-size: 26px; font-weight: 750; line-height: 1.2; letter-spacing: -.025em; color: var(--ink-strong); margin: 4px 0 8px; }
+.geo-admin h2 { font-size: 16px; font-weight: 700; line-height: 1.35; color: var(--ink-strong); margin: 0; }
+.geo-admin-setup, .geo-admin-status { min-width: 0; }
+.geo-admin-form { padding: 24px; }
+.geo-admin-provider-fields { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 18px; }
+.geo-admin-fields { border: 0; padding: 0; margin: 0; min-width: 0; display: grid; gap: 22px; }
+.geo-admin .field { display: grid; gap: 8px; min-width: 0; }
+.geo-admin .field-label, .geo-admin-key-heading, .geo-admin-sharing { display: flex; gap: 8px; align-items: center; }
+.geo-admin .input { width: 100%; box-sizing: border-box; min-width: 0; }
+.geo-admin [hidden] { display: none !important; }
+.geo-admin-actions { display: flex; gap: 8px; flex-wrap: wrap; align-items: center; }
+.geo-admin-actions .btn { white-space: normal; }
+.geo-admin-key { display: grid; gap: 12px; padding: 16px; background: var(--surface2); border: 1px solid var(--line); border-radius: 8px; min-width: 0; }
+.geo-admin-key p, .geo-admin-result p, .geo-admin-status p, .geo-admin-notice p { margin: 0; }
+.geo-admin-provider-list { padding: 0; margin: 0; list-style: none; display: grid; gap: 8px; }
+.geo-admin-provider-list li { display: flex; justify-content: space-between; align-items: center; gap: 8px; border: 1px solid var(--line); border-radius: 6px; padding: 8px 10px; }
+.geo-admin-provider-list small { display: block; }
+.geo-admin-provider-list .btn { padding: 5px 8px; }
+.geo-admin-context, .geo-admin-result { margin: 0 24px 20px; }
+.geo-admin-result { display: grid; gap: 8px; }
+.geo-admin-footer { display: flex; align-items: center; justify-content: space-between; flex-wrap: wrap; gap: 12px; padding: 16px 24px; border-top: 1px solid var(--line); }
+.geo-admin-status { padding: 18px 24px; display: grid; gap: 10px; }
+.geo-admin-status-heading, .geo-admin-activation { display: flex; justify-content: space-between; align-items: center; flex-wrap: wrap; gap: 10px; }
+.geo-admin-status-heading .btn { font-size: 12px; padding: 5px 8px; }
+.geo-admin-notice { border: 1px solid var(--line); background: var(--accent-soft); border-radius: 8px; padding: 12px; margin: 0; display: grid; gap: 6px; }
+.geo-admin-dialog dl { display: grid; gap: 14px; }
+.geo-admin-dialog dt { color: var(--mute); font-size: 12px; margin-bottom: 4px; }
+.geo-admin-dialog dd { margin: 0; overflow-wrap: anywhere; }
+@container (max-width: 420px) {
+    .geo-admin-provider-fields { grid-template-columns: 1fr; }
+    .geo-admin-form, .geo-admin-status { padding: 18px; }
+    .geo-admin-key { padding: 12px; }
+    .geo-admin-provider-list li { flex-wrap: wrap; }
+    .geo-admin-actions { gap: 6px; }
+    .geo-admin-footer { padding: 16px 18px; }
+    .geo-admin-context, .geo-admin-result { margin-inline: 18px; }
+    .geo-admin-sharing { align-items: start; }
+}

package/src/styles/components/admin-maintenance.css

@@ -0,0 +1,127 @@
+.admin-maintenance {
+    display: grid;
+    gap: 1.25rem;
+    max-width: 80rem;
+    margin: auto;
+    padding: 0;
+    overflow-wrap: anywhere;
+}
+.admin-maintenance header,
+.maintenance-resource {
+    display: flex;
+    align-items: flex-start;
+    justify-content: space-between;
+    gap: 1rem;
+}
+.admin-maintenance section {
+    background: var(--surface);
+    border: 1px solid var(--line);
+    border-radius: var(--radius-lg, 0.75rem);
+    padding: 1.25rem;
+    min-width: 0;
+}
+.admin-maintenance h1,
+.admin-maintenance h2,
+.admin-maintenance h3 {
+    margin: 0 0 0.5rem;
+}
+.maintenance-resource {
+    padding: 1rem 0;
+    border-bottom: 1px solid var(--line);
+}
+.maintenance-resource:last-child {
+    border-bottom: 0;
+}
+.admin-maintenance p {
+    margin: 0.5rem 0;
+}
+.admin-maintenance dl {
+    display: grid;
+    grid-template-columns: minmax(7rem, auto) 1fr;
+    gap: 0.5rem 1rem;
+}
+.admin-maintenance dd {
+    margin: 0;
+}
+.maintenance-warning {
+    color: var(--warn);
+}
+.maintenance-mode {
+    color: var(--mute);
+}
+.maintenance-dialog {
+    color: var(--ink);
+    background: var(--surface);
+    border: 1px solid var(--line);
+    border-radius: var(--radius-lg, 0.75rem);
+    max-width: min(38rem, calc(100vw - 2rem));
+    max-height: calc(100vh - 2rem);
+    overflow: auto;
+}
+.maintenance-dialog::backdrop {
+    background: rgb(0 0 0 / 0.6);
+}
+.maintenance-dialog-body {
+    padding: 1.25rem;
+    display: grid;
+    gap: 1rem;
+}
+.maintenance-dialog h2,
+.maintenance-dialog p {
+    margin: 0;
+}
+.maintenance-dialog fieldset {
+    display: grid;
+    gap: 0.75rem;
+}
+.maintenance-confirm-label {
+    display: grid;
+    gap: 0.5rem;
+}
+.maintenance-confirm-label input {
+    width: 100%;
+    min-width: 0;
+    background: var(--field-bg, var(--surface));
+    color: var(--ink);
+    border: 1px solid var(--line);
+    padding: 0.65rem;
+    border-radius: 0.35rem;
+}
+.maintenance-actions {
+    display: flex;
+    justify-content: flex-end;
+    gap: 0.75rem;
+}
+@media (max-width: 600px) {
+    .admin-maintenance {
+        padding: 0;
+    }
+    .admin-maintenance header,
+    .maintenance-resource {
+        flex-direction: column;
+    }
+    .admin-maintenance section {
+        padding: 0.8rem;
+    }
+    .maintenance-actions {
+        flex-wrap: wrap;
+    }
+}
+
+.admin-maintenance h1{font-size:26px;font-weight:750;line-height:1.2;letter-spacing:-.025em;color:var(--ink-strong)}.admin-maintenance h2,.maintenance-dialog h2{font-size:18px;font-weight:700;line-height:1.35;color:var(--ink-strong)}.admin-maintenance h3{font-size:16px;font-weight:650;line-height:1.4;color:var(--ink-strong)}
+
+.maintenance-resource>div{min-width:0}.maintenance-resource>button{flex-shrink:0}.maintenance-resource-status{color:var(--mute)}.maintenance-details{margin-block:.65rem}.maintenance-details>summary{font-size:13px;font-weight:600;cursor:pointer;color:var(--mute)}.maintenance-details[open]>summary{margin-bottom:.65rem}.admin-maintenance .maintenance-framework-summary{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:1rem}.maintenance-framework-summary>div{min-width:0}.maintenance-framework-summary dt{font-size:12px;color:var(--mute);margin-bottom:4px}.maintenance-framework-summary dd{font-size:16px;font-weight:600;overflow-wrap:anywhere}.admin-maintenance .maintenance-resource h3{margin-bottom:.25rem}.admin-maintenance .maintenance-resource p{margin:.25rem 0}.admin-maintenance .maintenance-details p{margin:.5rem 0}@media(max-width:600px){.admin-maintenance .maintenance-framework-summary{grid-template-columns:1fr}.maintenance-resource>button{align-self:flex-start}}
+
+.admin-maintenance { gap: 24px; }
+.admin-maintenance header > div > p:last-child { color: var(--mute); }
+.admin-maintenance section.maintenance-scan { padding: 0; background: transparent; border: 0; }
+.maintenance-scan .ops-details > summary { padding: 0; }
+.maintenance-dialog { margin: auto; padding: 0; width: min(38rem, calc(100vw - 2rem)); }
+.maintenance-dialog fieldset { border: 1px solid var(--line); border-radius: 8px; padding: 12px 16px; }
+.maintenance-dialog legend { padding-inline: 4px; font-weight: 600; }
+.maintenance-dialog-body { padding: 24px; gap: 20px; }
+
+.maintenance-dialog input[type="radio"] { margin-right: 6px; }
+
+/* Maintenance-only dialogs and compact progress. No shared Dashboard rules. */
+.maintenance-dialog-body{max-height:calc(100dvh - 2rem);display:flex;flex-direction:column;overflow:hidden;box-sizing:border-box}.maintenance-dialog-scroll{min-height:0;overflow:auto;display:grid;gap:16px;padding:2px}.maintenance-dialog .maintenance-actions{flex-shrink:0;padding-top:12px;align-items:center}.maintenance-dialog .maintenance-progress-facts{display:grid;grid-template-columns:auto minmax(0,1fr);gap:8px 16px;margin:0}.maintenance-progress-facts dt{color:var(--mute)}.maintenance-progress-facts dd{margin:0;overflow-wrap:anywhere}.maintenance-attempt-row{display:flex;justify-content:space-between;align-items:center;gap:16px;padding:12px 0;border-bottom:1px solid var(--line)}.maintenance-attempt-row:last-of-type{border-bottom:0}.admin-maintenance .maintenance-actions{justify-content:flex-start;margin-top:16px;flex-wrap:wrap}.maintenance-dialog .maintenance-dialog-scroll>p{margin:0}.maintenance-dialog .maintenance-dialog-scroll fieldset{margin:0}.maintenance-dialog .maintenance-dialog-scroll .field{margin:0}.maintenance-attempt-row>div{min-width:0}@media(max-width:600px){.maintenance-dialog-body{padding:20px;gap:16px}.maintenance-attempt-row{align-items:flex-start;flex-direction:column}.maintenance-dialog .maintenance-actions{gap:8px}.maintenance-dialog .maintenance-actions .btn{max-width:100%;white-space:normal}}

package/src/styles/components/admin-operational-fleet.css

@@ -0,0 +1,38 @@
+.operational-fleet{display:grid;gap:16px;min-width:0;container-type:inline-size;overflow-wrap:anywhere}.fleet-heading,.fleet-buttons{display:flex;align-items:center;justify-content:space-between;gap:12px;flex-wrap:wrap}.fleet-heading h2{margin:0}.fleet-heading p{margin:4px 0 0}.fleet-evidence-grid{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:12px}.fleet-evidence{min-width:0;overflow:hidden}.fleet-evidence h3{padding:14px 16px;margin:0;border-bottom:1px solid var(--line)}.fleet-evidence-row{display:grid;gap:6px;padding:12px 16px;border-bottom:1px solid var(--line);min-width:0}.fleet-evidence-row:last-child{border-bottom:0}.fleet-evidence-row>div:first-child{display:flex;align-items:center;justify-content:space-between;gap:8px;flex-wrap:wrap}.fleet-evidence-row p{margin:2px 0 5px}.fleet-source-status{font-size:11px;letter-spacing:.03em;text-transform:uppercase;color:var(--mute)}.fleet-status-healthy{color:var(--ok)}.fleet-status-unhealthy{color:var(--bad)}.fleet-status-degraded,.fleet-status-stale{color:var(--warn)}.fleet-availability{border-left:3px solid var(--mute)}.fleet-availability-ok{border-left-color:var(--ok)}.fleet-availability-down{border-left-color:var(--bad)}.fleet-capacity-facts summary{cursor:pointer;font-weight:600}.fleet-fact-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:20px}.fleet-member{display:block;margin:4px 0;color:var(--mute)}.fleet-scale{display:flex;flex-direction:column;max-height:calc(100dvh - 80px);min-height:0;overflow-wrap:anywhere}.fleet-scale-body{overflow:auto;min-height:0;padding-right:4px}.fleet-scale h3{margin:20px 0 8px}.fleet-scale-fields{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:12px}.fleet-scale-fields .field{min-width:0}.fleet-node{display:flex;gap:12px;justify-content:space-between;align-items:center;padding:10px 0;border-bottom:1px solid var(--line)}.fleet-node small{display:block}.fleet-plan-steps{padding-left:24px}.fleet-plan-steps li{margin-bottom:14px}.fleet-progress-step{padding:10px 0;border-bottom:1px solid var(--line)}.fleet-scale .modal-actions{flex-shrink:0}.fleet-scale fieldset{border:0;margin:0;padding:0;min-width:0}@container (max-width:850px){.fleet-evidence-grid{grid-template-columns:1fr}.fleet-fact-grid{grid-template-columns:1fr}}@media(max-width:560px){.fleet-scale-fields{grid-template-columns:1fr}.fleet-node{align-items:flex-start;flex-direction:column}.fleet-scale{max-height:calc(100dvh - 48px)}}
+
+.fleet-page>.page-header{display:flex;justify-content:space-between;align-items:start;margin-bottom:18px}.fleet-page h1{font-size:26px;font-weight:750;line-height:1.2;letter-spacing:-.025em;color:var(--ink-strong);margin:0}.fleet-heading h2{font-size:20px;font-weight:700;line-height:1.3;color:var(--ink-strong)}.fleet-evidence h3{font-size:16px;font-weight:700;color:var(--ink-strong)}.fleet-availability>strong{font-size:18px;line-height:1.35;font-weight:700;color:var(--ink-strong)}.fleet-scale h3{font-size:17px;font-weight:700;color:var(--ink-strong)}.fleet-scale h4,.fleet-fact-grid h4{font-size:15px;font-weight:650;color:var(--ink-strong)}.fleet-scale .fleet-scale-disclosure{border-top:1px solid var(--line);padding:12px 0}.fleet-scale-disclosure>summary{font-size:15px;font-weight:650;cursor:pointer;color:var(--ink-strong)}.fleet-scale-disclosure[open]>summary{margin-bottom:14px}.fleet-scale fieldset>h3:first-child{margin-top:12px}.fleet-scale fieldset>p{margin-bottom:12px}.fleet-scale fieldset>.fleet-scale-fields{margin-bottom:14px}
+
+.fleet-evidence-grid { grid-template-columns: minmax(0, 1fr); gap: 24px; }
+.fleet-evidence { border: 0; border-radius: 0; box-shadow: none; background: transparent; }
+.fleet-evidence h3 { padding: 0 0 10px; font-size: 11px; letter-spacing: .12em; text-transform: uppercase; color: var(--mute); }
+.fleet-evidence-row { grid-template-columns: minmax(130px, .7fr) minmax(0, 2fr) auto 62px; align-items: center; gap: 16px; padding: 17px 0; }
+.fleet-row-value { min-width: 0; color: var(--mute); }
+.fleet-detail-button { border: 0; padding: 4px 0; background: transparent; color: var(--accent); cursor: pointer; text-align: right; }
+.fleet-source-detail > p { margin: 14px 0; }
+.operational-fleet { gap: 24px; }
+@container (max-width: 600px) { .fleet-evidence-row { grid-template-columns: minmax(0, 1fr) auto; gap: 6px 12px; } .fleet-row-value { grid-row: 2; } .fleet-source-status { grid-column: 2; grid-row: 1; } .fleet-detail-button { grid-column: 2; grid-row: 2; } }
+
+.fleet-capacity-tab { padding-top: 4px; }
+.fleet-scale-body .fleet-buttons { margin-block: 10px 18px; }
+.fleet-scale-body > fieldset { margin-block: 12px 20px; }
+.fleet-scale-body > section { margin-block: 16px; }
+.fleet-scale .modal-actions { padding-top: 16px; border-top: 1px solid var(--line); }
+.fleet-scale .input { width: 100%; min-width: 0; }
+
+.fleet-evidence.panel { padding: 0; border: 0; border-radius: 0; box-shadow: none; background: transparent; }
+.fleet-evidence-row { padding-block: 14px; }
+
+.fleet-heading h2 { font-size: 26px; letter-spacing: -.025em; }
+
+.fleet-heading h1 { margin: 0; font-size: 26px; line-height: 1.3; font-weight: 700; letter-spacing: -.025em; color: var(--ink-strong); }
+
+.fleet-capacity-tab .panel > p { margin: 8px 0 16px; }
+.fleet-scale-fields .field { gap: 8px; }
+
+.fleet-capacity-dialog { display: flex; flex-direction: column; max-height: calc(100dvh - 64px); min-height: 0; overflow-wrap: anywhere; }
+.fleet-capacity-body { overflow: auto; min-height: 0; }
+.fleet-capacity-body p { margin: 8px 0; line-height: 1.5; }
+.fleet-capacity-body h4 { margin: 0 0 8px; }
+.fleet-capacity-body > .dim { margin: 0 0 18px; }
+.fleet-capacity-dialog .modal-actions { flex: none; padding-top: 16px; border-top: 1px solid var(--line); }
+@media (max-width: 560px) { .fleet-capacity-dialog .fleet-fact-grid { grid-template-columns: minmax(0, 1fr); } }

package/src/styles/components/admin-operations.css

@@ -0,0 +1,9 @@
+.ops-help { display: inline-flex; align-items: center; justify-content: center; padding: 3px; border: 0; background: transparent; color: var(--mute); cursor: pointer; vertical-align: middle; font-size: 14px; line-height: 1; border-radius: 4px; }
+.ops-help:hover, .ops-help[aria-expanded="true"] { color: var(--accent); background: var(--accent-soft); }
+.ops-help-content { width: min(340px, calc(100vw - 32px)); padding: 14px 16px; font-size: 13px; line-height: 1.6; color: var(--ink); overflow-wrap: anywhere; }
+.ops-help-content p { margin: 0 0 8px; }
+.ops-help-content p:last-child { margin-bottom: 0; }
+.ops-details > summary { cursor: pointer; font-size: 13px; font-weight: 600; color: var(--mute); padding-block: 6px; }
+.ops-details[open] > summary { margin-bottom: 10px; }
+.ops-cell { display: grid; gap: 3px; min-width: 0; }
+.ops-cell small { color: var(--mute); font-size: 12px; }

package/src/styles/components/admin-signin.css

@@ -52,6 +52,8 @@ textarea.signin-code { resize: vertical; }
 .signin-note i { flex: none; color: var(--accent); }
 .signin-note.is-warning { border-color: color-mix(in srgb, var(--warn) 35%, var(--line)); background: var(--warn-soft); }
 .signin-note.is-warning i { color: var(--warn); }
+.signin-note.is-danger { border-color: color-mix(in srgb, var(--bad) 35%, var(--line)); background: var(--bad-soft); }
+.signin-note.is-danger i { color: var(--bad); }
 .signin-provider-actions { display: flex; justify-content: flex-end; gap: 8px; padding-top: 12px; border-top: 1px solid var(--line); }
 
 @media (max-width: 1100px) { .signin-groups { grid-template-columns: 1fr; } }

package/src/styles/components/combobox.css

@@ -1,7 +1,6 @@
 /* ComboBox — styles for portal-mojo <ComboBox> (packages/portal-mojo/src/ui/ComboBox.tsx).
    Tokens only; reads correctly under data-theme="light" AND "dark".
-   NOT imported yet — the orchestrator adds `@import "./theme/combobox.css";`
-   to theme.css at merge. */
+   */
 
 .combo { position: relative; width: 100%; }
 .combo-input-wrap { position: relative; }
@@ -30,6 +29,8 @@
 /* Keyboard highlight (.combo-hot) and hover share one look — there is only
    one "pointed at" state. */
 .combo-option:hover, .combo-option.combo-hot { background: var(--surface2); color: var(--ink-strong); }
+.combo-option[aria-disabled="true"] { opacity: .5; cursor: not-allowed; background: transparent; }
+.combo-input[aria-invalid="true"] { border-color: var(--bad); }
 .combo-option-main { flex: 1; min-width: 0; }
 .combo-option-label { font-weight: 550; }
 .combo-option-desc { font-size: 12px; color: var(--mute); margin-top: 1px; }
@@ -40,3 +41,12 @@
 /* The <mark> around the matched substring — override the UA's yellow/black
    so it stays legible on both themes. */
 .combo-mark { background: var(--warn-soft); color: inherit; border-radius: 3px; padding: 0 1px; }
+
+.page-size .combo { width: 78px; }
+.combo { min-width: 0; }
+.combo-input { width: 100%; min-width: 0; }
+.combo-pop { max-height: min(300px, calc(100dvh - 16px)); min-width: min(260px, calc(100vw - 16px)); }
+
+.page-size .combo-input { min-height: 30px; padding: 5px 30px 5px 9px; font-size: 12px; }
+.combo.gran-select { width: 110px; }
+.gran-select .combo-input { min-height: 30px; padding: 5px 30px 5px 9px; font-size: 12px; }

package/src/styles/components/fleet-page.css

@@ -0,0 +1,9 @@
+/* Standalone Fleet only. Dashboard FleetOverview retains its own presentation. */
+.fleet-page .fp-workspace{display:flex;flex-direction:column;gap:20px;min-width:0}.fleet-page .fp-header{display:flex;align-items:center;justify-content:space-between;gap:24px}.fleet-page .fp-header h1{margin:3px 0 4px}.fleet-page .fp-header p{margin:0}.fleet-page .fp-actions{display:flex;flex-wrap:wrap;align-items:center;justify-content:flex-end;gap:8px}.fleet-page .fp-health{display:flex;justify-content:space-between;align-items:center;gap:16px;padding:20px 24px;border-left:3px solid var(--ok)}.fleet-page .fp-health-down{border-left-color:var(--bad)}.fleet-page .fp-health-unknown{border-left-color:var(--warn)}.fleet-page .fp-health p{margin:6px 0 0}.fleet-page .fp-evidence-grid{display:grid;grid-template-columns:1fr 1fr;align-items:start;gap:0}.fleet-page .fp-section{overflow:hidden;padding:8px 18px}.fleet-page .fp-section .mojo-tab-panel{padding:4px 0}.fleet-page .fp-section .mojo-tab-list{margin:0 2px}.fleet-page .fp-section h2{font-size:14px;margin:0;padding:18px 20px;border-bottom:1px solid var(--line)}.fleet-page .fp-source{padding:14px 12px;border-bottom:1px solid var(--line);min-width:0}.fleet-page .fp-source:nth-last-child(-n+2){border-bottom:0}.fleet-page .fp-source:last-child{border-bottom:0}.fleet-page .fp-source p{margin:5px 0 3px}.fleet-page .fp-row,.fleet-standalone-dialog .fp-row{display:flex;align-items:center;justify-content:space-between;gap:12px}.fleet-page .fp-source-meta{font-size:11px;color:var(--mute);gap:8px;flex-wrap:wrap}.fleet-page .fp-state,.fleet-standalone-dialog .fp-state{font-size:12px;font-weight:600;text-transform:capitalize}.fleet-page .fp-capacity-strip{display:grid;grid-template-columns:repeat(3,1fr) 1.6fr;padding:18px 24px;gap:18px}.fleet-page .fp-capacity-strip>div{display:flex;flex-direction:column;gap:4px}.fleet-page .fp-capacity-strip strong{font-size:23px;line-height:1.3}.fleet-page .fp-capacity-context{justify-content:center;align-items:flex-end}.fleet-page .fp-operation{display:flex;align-items:center;justify-content:space-between;gap:16px;padding:18px 24px}.fleet-page .fp-operation p{margin:6px 0 0}.fleet-page .fp-restricted{padding:16px 20px;margin:0}.fleet-page .fp-access-note{font-size:12px;margin:0}.fleet-standalone-dialog{display:flex;flex-direction:column;max-height:min(850px,calc(100dvh - 60px));min-width:0}.fleet-standalone-dialog .fleet-standalone-body{overflow:auto;min-height:0;overscroll-behavior:contain;padding:2px 2px 12px}.fleet-standalone-dialog .modal-message{flex-shrink:0}.fleet-standalone-dialog .modal-actions{flex-shrink:0}.fleet-standalone-dialog fieldset{min-width:0;border:0;padding:0;margin:0}.fleet-standalone-dialog .fp-stack{display:flex;flex-direction:column;gap:16px}.fleet-standalone-dialog .fp-stack>p,.fleet-standalone-dialog .fp-resource p,.fleet-standalone-dialog .fp-resource h3{margin:0}.fleet-standalone-dialog .mojo-tab-panel{padding-top:20px}.fleet-standalone-dialog .fp-resource{border:1px solid var(--line);border-radius:10px;padding:18px;overflow-wrap:anywhere}.fleet-standalone-dialog .fp-resource>p+small,.fleet-standalone-dialog .fp-resource>p+p{display:block;margin-top:8px}.fleet-standalone-dialog .fp-resource h3{font-size:14px}.fleet-standalone-dialog .fp-member{display:flex;flex-direction:column;gap:6px;padding:14px 0;border-bottom:1px solid var(--line)}.fleet-standalone-dialog .fp-member:last-child{border-bottom:0}.fleet-standalone-dialog .fp-fields{display:grid;grid-template-columns:1fr 1fr;gap:16px;align-items:start}.fleet-standalone-dialog .fp-check{display:flex;align-items:flex-start;gap:9px;font-size:13px;line-height:1.6}.fleet-standalone-dialog .fp-check input{flex:none;margin-top:4px}.fleet-standalone-dialog .fp-toolbar{margin:0 0 18px;flex-wrap:wrap}.fleet-standalone-dialog .fp-empty{margin:20px 0 4px}.fleet-standalone-dialog .fp-plan{display:flex;flex-direction:column;gap:14px;padding-left:24px;margin:0}.fleet-standalone-dialog .fp-plan p{margin:6px 0 0}.fleet-standalone-dialog pre{white-space:pre-wrap;font-family:var(--font-mono,monospace);font-size:12px}.fleet-standalone-dialog .field-help{line-height:1.6}.fleet-standalone-dialog .input{width:100%;min-width:0}.fleet-standalone-dialog .modal-title{overflow-wrap:anywhere}.fleet-standalone-dialog .fp-member .fp-fields{margin-top:8px}
+@media(max-width:700px){.fleet-page .fp-header{align-items:flex-start;flex-direction:column;gap:16px}.fleet-page .fp-actions{justify-content:flex-start}.fleet-page .fp-evidence-grid{grid-template-columns:1fr}.fleet-page .fp-capacity-strip{grid-template-columns:repeat(3,1fr);padding:16px;gap:16px}.fleet-page .fp-capacity-context{grid-column:1/-1;align-items:flex-start}.fleet-page .fp-health,.fleet-page .fp-operation{padding:18px;align-items:flex-start}.fleet-page .fp-operation{flex-direction:column}.fleet-standalone-dialog{max-height:calc(100dvh - 32px)}.fleet-standalone-dialog .fp-fields{grid-template-columns:1fr}.fleet-standalone-dialog .fp-resource>.fp-row{align-items:flex-start;flex-wrap:wrap}.fleet-standalone-dialog .fp-resource{padding:14px}.fleet-page .fp-source{padding:12px 4px}.fleet-page .fp-source:nth-last-child(2){border-bottom:1px solid var(--line)}.fleet-page .fp-section{padding:8px 14px}}
+/* Keep every inspection tab visible within a narrow native dialog. */
+@media(max-width:700px){.fleet-standalone-dialog .mojo-tab-list{flex-wrap:wrap;overflow:visible}}
+
+/* Destination names are actions; keep evidence-only labels visually distinct. */
+.fleet-page .fp-source strong a{color:var(--accent);text-decoration:underline;text-underline-offset:3px}
+.fleet-page .fp-source strong a:focus-visible{outline:2px solid var(--accent);outline-offset:3px;border-radius:2px}

package/src/styles/index.css

@@ -24,6 +24,13 @@
 @import "./components/admin-assistant.css" layer(portal-mojo);
 @import "./components/admin-security.css" layer(portal-mojo);
 @import "./components/admin-dashboard.css" layer(portal-mojo);
+@import "./components/admin-operational-fleet.css" layer(portal-mojo);
+@import "./components/fleet-page.css" layer(portal-mojo);
+@import "./components/admin-maintenance.css" layer(portal-mojo);
+@import "./components/admin-deployments.css" layer(portal-mojo);
+@import "./components/admin-domains.css" layer(portal-mojo);
+@import "./components/admin-operations.css" layer(portal-mojo);
+@import "./components/admin-geolocation.css" layer(portal-mojo);
 @import "./components/admin-cloudwatch.css" layer(portal-mojo);
 @import "./components/admin-monitoring.css" layer(portal-mojo);
 @import "./components/admin-bouncer.css" layer(portal-mojo);

package/src/ui/CollectionSelect.tsx

@@ -35,15 +35,24 @@
 //   · "Start typing to search…" is actually reachable — in the source it
 //     was dead code (its showNoResults guard required hasSearched).
 import { useContext, useEffect, useId, useLayoutEffect, useMemo, useRef, useState } from 'react';
-import { useQueryClient, type QueryClient } from '@tanstack/react-query';
-import { useModel, useModelList } from '../client/hooks';
+import { keepPreviousData, useQuery, useQueryClient, type QueryClient } from '@tanstack/react-query';
+import { mojoGet, mojoList } from '../client/client';
+import { getAuthSessionRevision } from '../client/auth';
 import type { ModelDef } from '../client/model';
 import type { Params } from '../client/types';
+import { useAuthSnapshot } from '../client/me';
 import { GroupContext } from '../client/group-context';
 import { Popover } from './Popover';
 
 /** Every id comparison in this component goes through here — string and
  *  number ids (and mixes of the two) work by construction. */
+const sanitizerIds = new WeakMap<Function, number>();
+let nextSanitizerId = 1;
+function sanitizerId(fn: Function): number {
+    if (!sanitizerIds.has(fn)) sanitizerIds.set(fn, nextSanitizerId++);
+    return sanitizerIds.get(fn)!;
+}
+
 const keyOf = (v: string | number): string => String(v);
 
 /** MOJOUtils.getNestedValue heritage: dot-notation nested access. */
@@ -76,8 +85,8 @@ const coerceFetchId = (id: string | number): string | number =>
  *  root for the row (ModelTable pages, other pickers, this picker's own
  *  fetches all share the [endpoint, params] keys). Non-reactive by design:
  *  a miss falls through to the reactive one-record fetch. */
-function findRowInListCaches(qc: QueryClient, endpoint: string, key: string, valueField: string): unknown {
-    for (const [, data] of qc.getQueriesData<unknown>({ queryKey: [endpoint] })) {
+function findRowInListCaches(qc: QueryClient, endpoint: string, key: string, valueField: string, safeRoot?: readonly unknown[]): unknown {
+    for (const [, data] of qc.getQueriesData<unknown>({ queryKey: safeRoot ?? [endpoint] })) {
         if (data == null || typeof data !== 'object') continue;
         const rows = (data as { rows?: unknown }).rows;
         if (!Array.isArray(rows)) continue; // skips [endpoint,'one',id] entries
@@ -109,6 +118,8 @@ export type CollectionSelectValue = string | number | Record<string, unknown> |
 export interface CollectionSelectProps<T extends { id: number | string }> {
     /** A defineModel definition — supplies the endpoint (and the row type). */
     model?: ModelDef<T>;
+    /** Optional ingress projection. Uses an auth-scoped isolated cache; raw caches are never read. */
+    sanitizeRow?: (row: T) => T;
     /** Bare endpoint, for lists without a model definition. */
     endpoint?: string;
     /** Selected id — CONTROLLED. Accepts id | null | row-object (see CollectionSelectValue). */
@@ -156,7 +167,7 @@ export interface CollectionSelectProps<T extends { id: number | string }> {
 }
 
 export function CollectionSelect<T extends { id: number | string }>({
-    model, endpoint, value, onChange,
+    model, endpoint, value, onChange, sanitizeRow,
     labelField = 'name', valueField = 'id',
     maxItems = 10, placeholder = 'Search…', debounceMs = 400,
     emptyFetch = true, defaultParams, requiresActiveGroup = false,
@@ -167,6 +178,8 @@ export function CollectionSelect<T extends { id: number | string }>({
     if (!resolvedEndpoint) throw new Error('CollectionSelect: pass `model` or `endpoint`');
 
     const qc = useQueryClient();
+    const auth = useAuthSnapshot();
+    const safeRoot = sanitizeRow ? [resolvedEndpoint, 'safe-select', sanitizerId(sanitizeRow), auth.uid, getAuthSessionRevision()] as const : undefined;
     const uid = useId();
     const inputDomId = `colsel-input-${uid}`;
     const listboxId = `colsel-list-${uid}`;
@@ -239,7 +252,12 @@ export function CollectionSelect<T extends { id: number | string }>({
     // Fetch only while the dropdown is open (the source fetched on focus);
     // with emptyFetch off, additionally only once there is a search term.
     const listEnabled = open && !waitingForGroup && (emptyFetch || term !== '');
-    const query = useModelList<T>(resolvedEndpoint, wire, { enabled: listEnabled });
+    const query = useQuery({
+        queryKey: safeRoot ? [...safeRoot, wire] : [resolvedEndpoint, wire],
+        queryFn: async () => { const page = await mojoList<T>(resolvedEndpoint, wire); return sanitizeRow ? { ...page, rows: page.rows.map(sanitizeRow) } : page; },
+        placeholderData: sanitizeRow ? undefined : keepPreviousData,
+        enabled: listEnabled && (!sanitizeRow || auth.authenticated),
+    });
     // A held query (emptyFetch=false with no term, or no active group) must
     // show its empty state — keepPreviousData would otherwise keep serving
     // the previous key's rows through the placeholder.
@@ -275,7 +293,7 @@ export function CollectionSelect<T extends { id: number | string }>({
     const pickedLabel = selKey != null && picked?.key === selKey ? picked.label : null;
     let scanLabel: string | null = null;
     if (selKey != null && seedLabel == null && pickedLabel == null) {
-        const row = findRowInListCaches(qc, resolvedEndpoint, selKey, valueField);
+        const row = findRowInListCaches(qc, resolvedEndpoint, selKey, valueField, safeRoot);
         if (row != null) {
             const raw = getPath(row, labelField);
             // A row without the label field stays unresolved — the one-record
@@ -284,7 +302,11 @@ export function CollectionSelect<T extends { id: number | string }>({
         }
     }
     const needFetch = selKey != null && seedLabel == null && pickedLabel == null && scanLabel == null;
-    const oneQuery = useModel<T>(resolvedEndpoint, needFetch && selId != null ? coerceFetchId(selId) : null);
+    const oneQuery = useQuery({
+        queryKey: safeRoot ? [...safeRoot, 'one', coerceFetchId(selId ?? '')] : [resolvedEndpoint, 'one', needFetch && selId != null ? coerceFetchId(selId) : null],
+        queryFn: async () => { const row = await mojoGet<T>(resolvedEndpoint, coerceFetchId(selId!), { unscoped: true }); return sanitizeRow ? sanitizeRow(row) : row; },
+        enabled: needFetch && selId != null && (!sanitizeRow || auth.authenticated),
+    });
     let oneLabel: string | null = null;
     if (needFetch && oneQuery.data != null) {
         const raw = getPath(oneQuery.data, labelField);