feat(portal_users): bulk-delete customer portal users from the admin list

[pat-lewczuk]

Problem

Backend → Portal klienta → Użytkownicy klientów could only delete one account at a time, through the row menu. After an event that means clicking through participants one by one.

What changed

A new app module portal_users injects a bulk action into the core table with UMES — no eject of customer_accounts, no patched node_modules.

• Widget portal_users.injection.users-bulk-delete targets data-table:customer_accounts.admin.users:bulk-actions.
• Injecting a bulk action is exactly what makes DataTable set enableRowSelection, so the row checkboxes and the Delete selected button appear together — no change needed in the core page.
• Gated on the existing core feature customer_accounts.manage, the same one DELETE /api/customer_accounts/admin/users/<id> enforces, so there is no new ACL feature to declare, grant and sync.
• Deletion goes through that core endpoint once per selected user, carrying the optimistic-lock header built from each row's updatedAt. That keeps everything the single-row path gives you: stale deletes refused, sessions revoked, customer_accounts.user.deleted emitted. Sequential on purpose — an admin list is small and each delete does real work server-side.
• A destructive confirm dialog states how many accounts are about to go.
• Partial failures are reported with the count that succeeded and the reason for each that did not.

One wrinkle worth reviewing

The core users page keeps its rows in client state (reloadToken) and passes no refreshButton, so an injected widget gets no refresh callback and router.refresh() would not refetch the list. The action therefore reloads through the URL and passes its message to FlashMessages via the ?flash=&type= query string — the same mechanism CrudForm's successRedirect uses. It returns { ok: false } with no message so the table does not also flash its own.

Testing

• yarn generate registers the widget and the injection table (verified in .mercato/generated/injection-widgets.generated.ts and injection-tables.generated.ts).
• yarn typecheck passes.
• Local dev server smoke-checked after registering the module: /api/customer_accounts/admin/users → 401, /backend/customer_accounts/users → 307. Nothing 500s on boot.
• Not exercised in a browser — the Chrome extension available here has no permission for localhost, so selecting rows and running the delete needs a manual pass: check the checkboxes appear, the confirm text counts correctly, the list reloads, and a partial failure reports sensibly.
• yarn lint is broken in this repo independently of this change (next lint was removed in Next 15).

🤖 Generated with Claude Code

https://claude.ai/code/session_01VLqyzgTthFCZsqQWE9gh4a