v1.59.0

1.59.0 (2026-10-22)

Bug Fixes

• AdminSubscriptionCard: never leave the first line blank (8ade251)
• AdminSubscriptionCard: skip helper requests the user scope can't read (fc93bee)
• async-actions: show an access denied label when an action is denied (471eab2)
• async-actions: show an access denied label when an action is denied (a089f56)
• composite-gets: keep loading when an extra request is denied (e3f5893)
• composite-gets: keep loading when an extra request is denied (c29273d)
• configurable: reset a stale inherited scope and skip rule getters without a scope (0ca72a5)
• configurable: treat an empty current-user-scope as unset (e390a01)
• configurable: treat an empty current-user-scope as unset (b474a41)
• Customer: zoom subscription carts only with carts_read (0b939af)
• filterZoom: keep the readable start of a nested zoom (096a6c8)
• filterZoom: keep the readable start of a nested zoom (2f591ef)
• foxy-address-form: pick the scope collection from the address links (9eb9be5)
• foxy-admin-subscription-card: do not wait for unreadable helpers (9335521)
• foxy-admin-subscription-form: render without the transaction template embed (a3a3d67)
• foxy-admin-transaction-card: do not wait for an unreadable store (9847b8d)
• foxy-applied-coupon-code-form: keep delete editable without a scope (cc6efc5)
• foxy-downloadable-form: keep the category picker in create mode (c16c82e)
• foxy-experimental-add-to-cart-builder: stop loading when the scope cannot read the code's data (5642bd8)
• foxy-form-dialog: forward current-user-scope to string forms (68f4f70)
• foxy-form-dialog: forward current-user-scope to string forms (b70fed7)
• foxy-gift-card-code-log-card: don't wait for the store without stores_read (025ba8d)
• foxy-internal-async-resource-link-list-control: show failures instead of loading forever (1a8fd70)
• foxy-internal-async-resource-link-list-control: show failures instead of loading forever (08a6d19)
• foxy-internal-password-control: do not generate a password when readonly or disabled (58fc734)
• foxy-internal-post-action-control: show a distinct message when the action is denied (af7eee2)
• foxy-internal-post-action-control: show a distinct message when the action is denied (5b79c39)
• foxy-item-card: do not wait for an unreadable currency source (cd2057b)
• foxy-item-category-form: keep the taxes list writable for taxes_write (7d2fe1a)
• foxy-item-form: only read items from the resource the item belongs to (132eb7c)
• foxy-item-form: only read items from the resource the item belongs to (caca6c9)
• foxy-payment-card: do not wait for an unreadable store (ea71a48)
• foxy-payment-method-card: pass the user scope to the update dialog (7f89639)
• foxy-payments-api-payment-preset-form: build readonly selector from readonly controls (e902388)
• foxy-payments-api: keep the upstream status in handler errors (e01ffe8)
• foxy-payments-api: keep the upstream status in handler errors (2fd4a04)
• foxy-store-form: lock the form by href, not by loaded data (a33828b)
• foxy-store-form: skip the domain check unless the API says the domain is taken (b58108d)
• foxy-store-form: skip the domain check unless the API says the domain is taken (46a29eb)
• foxy-template-config-form: show multiship fields when the scope cannot read the store (6f36f55)
• foxy-transaction: keep send emails unchanged without a scope and gate the subscription link (ad55dc6)
• foxy-transaction: show send emails when templates fail to load and gate store links (dcbcdaa)
• foxy-transaction: show send emails when templates fail to load and gate store links (583bf9d)
• foxy-user-invitation-card: show an invitation without a scope as full access (bdd976c)
• foxy-user-invitation-card: show an invitation without a scope as full access (4e61bce)
• foxy-user-invitation-form: keep delete of the user's own invitation (2f291f2)
• foxy-user-invitation-form: stop Custom from keeping full store access (fe34566)
• foxy-user-invitation-form: stop Custom from keeping full store access (e9f7379)
• i18n: add spinner text for resource link list failures (470626c)
• i18n: add spinner text for resource link list failures (83bdcc8)
• i18n: add the access denied spinner text to every namespace (0477991)
• i18n: add the access denied spinner text to every namespace (cd7051f)
• internal-async-list-control: keep the control visible when the page failed (c6c040b)
• internal-async-list-control: keep the control visible when the page failed (19f83a3)
• internal-card: stop endless spinners on failed helpers and show denied writes (d21711d)
• internal-card: stop endless spinners on failed helpers and show denied writes (419b1cc)
• internal-form: show a denied write as a banner (9d7cf65)
• internal-form: show a denied write as a banner (0f0aeba)
• ItemCard, ItemOptionCard: handle a subscription without the zoomed cart (7f02b3f)
• nucleon-element: keep showing denied writes in forms that read fail (dacfd53)
• nucleon-element: keep showing denied writes in forms that read fail (41296f7)
• nucleon-element: report scope-denied writes as errors instead of failing (0fb2f9b)
• nucleon-element: report scope-denied writes as errors instead of failing (f1cde61)
• server: proxy read-only reads with a plain request (c10d30a)
• server: proxy read-only reads with a plain request (eb01016)
• SubscriptionsTable: render rows without the zoomed cart (c60fd2d)
• Transaction: zoom shipment item categories only with item_categories_read (bf28f8e)
• Transaction: zoom shipment item categories only with item_categories_read (4fa30c2)

Features

• configurable: add an inferred current-user-scope that hides and locks controls (1946bb2)
• configurable: add an inferred current-user-scope that hides and locks controls (b8ed863)
• ConfigurableMixin: infer the user scope on top-level elements (1c73797)
• ConfigurableMixin: infer the user scope on top-level elements (40b2022)
• foxy-admin-subscription-form: hide and lock controls by the current user scope (0b86a4e)
• foxy-applied-coupon-code-card: follow the cart scope for applied codes (2f7cbfb)
• foxy-applied-tax-card: follow carts or transactions scope for item children (7cbf79c)
• foxy-applied-tax-card: follow carts or transactions scope for item children (a74057d)
• foxy-cancellation-form: lock the form and hide cancel by scope (2c84b61)
• foxy-cart-card: follow the carts scope and skip unreadable helpers (f18a165)
• foxy-cart-form: hide and lock controls by the current user scope (c1242e0)
• foxy-coupon-form: lock coupons and coupon codes by scope (c6fcf92)
• foxy-customer-form: lock customer forms and cards by scope (69a7e08)
• foxy-customer-portal-settings-form: lock portal settings by scope (8fca41c)
• foxy-customer: hide and lock controls by the current user scope (433e7a1)
• foxy-error-entry-card: lock error entries by scope (26dd1e3)
• foxy-experimental-add-to-cart-builder: hide pickers the scope cannot read (42edd05)
• foxy-filter-attribute-card: follow the stores scope (0ae4e8e)
• foxy-generate-codes-form: follow the coupon or gift card scope (f92165d)
• foxy-gift-card-form: lock gift cards and gift card codes by scope (5226d40)
• foxy-integration-form: lock integrations by scope (6fb4d97)
• foxy-item-category-form: lock item categories and downloadables by scope (8ace6a1)
• foxy-item-form: follow carts or transactions scope for items (36155a1)
• foxy-item-form: follow carts or transactions scope for items (0ba4f63)
• foxy-native-integration-form: follow the provider's scope collection (9c951c7)
• foxy-payment-method-card: hide card actions without customers_write (eeabf99)
• foxy-payments-api-payment-preset-form: lock payment settings by scope (39ec368)
• foxy-report-form: lock reports by scope (f1fff8f)
• foxy-store-form: lock store settings by scope (a7d786d)
• foxy-store-shipping-method-form: lock store shipping methods by scope (9dc24dd)
• foxy-store-transaction-folder-form: lock folders without transactions_write (3d0a6e1)
• foxy-store-transaction-folder-form: lock folders without transactions_write (8368ba4)
• foxy-subscription-card: lock subscription cards and table by scope (421270e)
• foxy-subscription-form: hide and lock controls by the current user scope (ba79278)
• foxy-subscription-settings-form: lock settings without subscription_settings_write (327f157)
• foxy-tax-form: lock taxes by scope (48d9221)
• foxy-template-form: lock template forms and hide cache by scope (ce81857)
• foxy-template-set-form: lock template sets, configs and cards by scope (12858c3)
• foxy-transaction-card: lock transaction cards and table by scope (b941a3b)
• foxy-transaction-card: lock transaction cards and table by scope (24ca35e)
• foxy-transaction: hide and lock controls by the current user scope (8ee94f5)
• foxy-transaction: hide and lock controls by the current user scope (a1d274a)
• foxy-update-payment-method-form: lock the form by customers scope (02906e5)
• foxy-user-form: lock users and passkeys by scope (f8bcffb)
• foxy-user-invitation-form: hide invitation management by scope (2fcc05e)
• foxy-users-table: pass the user scope to the user form dialog (e9798ef)
• foxy-webhook-card: lock webhooks by scope (0f64186)
• foxy-webhook-form: lock webhooks by scope (678cf93)
• foxy-webhook-status-card: lock webhook statuses and logs by scope (0bcf411)
• NucleonElement: drop zooms the user scope can't read (d7faf4f)
• NucleonElement: drop zooms the user scope can't read (f32d613)
• server: add demo routes for scope denials (07457a7)
• server: add demo routes for scope denials (efef42d)
• user-invitation-form: assign granular scopes to user invitations (706ec5c)
• user-invitation-form: assign granular scopes to user invitations (5c80a38)
• user-scope: add canReadCollection for helper loaders (0b690a6)
• user-scope: parse token scopes and turn rules into selectors (9cf7347)
• user-scope: parse token scopes and turn rules into selectors (9a612e3)