From 6c4dd2d96b8522ee557778dd58b74a0fa051aa87 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marc-Andr=C3=A9=20Bombeck?= <mbombeck@gmail.com>
Date: Thu, 6 Aug 2026 05:02:37 +0200
Subject: [PATCH] feat(02-12): route scoped records to granted domains

- keep shared navigation independent of actor module preferences\n- open scoped records at their first allowed destination\n- announce record access and kind in doorway names
---
 .../__tests__/looking-after-card.test.tsx     |  2 +-
 .../dashboard/looking-after-card.tsx          | 28 +++++++++++++-----
 .../layout/account-switcher-menu.tsx          |  8 ++++-
 src/components/layout/nav-model.ts            | 16 ++++++++++
 src/hooks/use-account-switch.ts               | 29 +++++++++++++++----
 src/lib/navigation/shared-record.ts           |  9 +++++-
 6 files changed, 77 insertions(+), 15 deletions(-)

diff --git a/src/components/dashboard/__tests__/looking-after-card.test.tsx b/src/components/dashboard/__tests__/looking-after-card.test.tsx
index 42da0d447..d67408a89 100644
--- a/src/components/dashboard/__tests__/looking-after-card.test.tsx
+++ b/src/components/dashboard/__tests__/looking-after-card.test.tsx
@@ -161,7 +161,7 @@ describe("<LookingAfterCard>", () => {
     });
 
     expect(html).toMatch(
-      /aria-label="Open Managed profile&#x27;s record; Can read the record, add to it, and change or remove what is in it; Managed profile"/,
+      /aria-label="Open Managed profile&#x27;s record; Can read the record, add to it, and change or remove what is in it; Managed profile;/,
     );
   });
 
diff --git a/src/components/dashboard/looking-after-card.tsx b/src/components/dashboard/looking-after-card.tsx
index 96e003658..cccb7f4d4 100644
--- a/src/components/dashboard/looking-after-card.tsx
+++ b/src/components/dashboard/looking-after-card.tsx
@@ -11,6 +11,7 @@ import {
   resolveRecordPresentation,
   type RecordPresentation,
 } from "@/lib/navigation/record-presentation";
+import { sharedRecordLandingHref } from "@/lib/navigation/shared-record";
 import {
   accountLabel,
   type AccountAccessEntry,
@@ -83,6 +84,9 @@ export function LookingAfterCard() {
         <ul className="divide-y">
           {accounts.map((entry) => {
             const presentation = resolveRecordPresentation(entry);
+            const level = levelLabel(entry, presentation, t);
+            const kind = recordKindLabel(entry, t);
+            const scope = scopeLabel(entry, t);
 
             return (
               <li key={entry.accountId}>
@@ -93,10 +97,20 @@ export function LookingAfterCard() {
                   data-access-level={presentation.access}
                   data-record-kind={presentation.recordKind}
                   disabled={switchAccount.isPending}
-                  onClick={() => switchAccount.mutate(entry.accountId)}
-                  aria-label={t("recordSharing.lookingAfter.open", {
-                    name: accountLabel(entry),
-                  })}
+                  onClick={() =>
+                    switchAccount.switchTo(
+                      entry.accountId,
+                      sharedRecordLandingHref(entry.sections),
+                    )
+                  }
+                  aria-label={[
+                    t("recordSharing.lookingAfter.open", {
+                      name: accountLabel(entry),
+                    }),
+                    level,
+                    kind,
+                    scope,
+                  ].join("; ")}
                   className="hover:bg-accent/40 focus-visible:ring-ring/50 flex min-h-11 w-full items-center gap-3 rounded-md px-2 py-2 text-left transition-colors focus-visible:ring-2 focus-visible:outline-none disabled:opacity-50"
                 >
                   <span className="min-w-0 flex-1">
@@ -104,13 +118,13 @@ export function LookingAfterCard() {
                       {accountLabel(entry)}
                     </span>
                     <span className="text-muted-foreground block truncate text-xs">
-                      {levelLabel(entry, presentation, t)}
+                      {level}
                     </span>
                     <span className="text-muted-foreground block truncate text-xs">
-                      {recordKindLabel(entry, t)}
+                      {kind}
                     </span>
                     <span className="text-muted-foreground block truncate text-xs">
-                      {scopeLabel(entry, t)}
+                      {scope}
                     </span>
                   </span>
                   {switchAccount.isPending && (
diff --git a/src/components/layout/account-switcher-menu.tsx b/src/components/layout/account-switcher-menu.tsx
index e3a3f5513..8b7df237a 100644
--- a/src/components/layout/account-switcher-menu.tsx
+++ b/src/components/layout/account-switcher-menu.tsx
@@ -13,6 +13,7 @@ import { useAccountSwitch } from "@/hooks/use-account-switch";
 import { useAuth } from "@/hooks/use-auth";
 import { useTranslations } from "@/lib/i18n/context";
 import { resolveRecordPresentation } from "@/lib/navigation/record-presentation";
+import { sharedRecordLandingHref } from "@/lib/navigation/shared-record";
 import { accountLabel } from "@/lib/sharing/account-access-view";
 
 /**
@@ -92,7 +93,12 @@ export function AccountSwitcherMenuItems() {
                 data-record-kind={presentation.recordKind}
                 className="cursor-pointer"
                 disabled={switchAccount.isPending}
-                onClick={() => switchAccount.mutate(account.accountId)}
+                onClick={() =>
+                  switchAccount.switchTo(
+                    account.accountId,
+                    sharedRecordLandingHref(account.sections),
+                  )
+                }
               >
                 <div className="flex min-w-0 flex-1 flex-col">
                   <span className="truncate">{accountLabel(account)}</span>
diff --git a/src/components/layout/nav-model.ts b/src/components/layout/nav-model.ts
index 4e925f7f2..e286ae2a3 100644
--- a/src/components/layout/nav-model.ts
+++ b/src/components/layout/nav-model.ts
@@ -2,6 +2,7 @@ import {
   Activity,
   Bell,
   Brain,
+  ClipboardList,
   Droplets,
   FileScan,
   FlaskConical,
@@ -77,6 +78,8 @@ export interface NavDestination {
    * owner gave for their own use, so those surfaces stay owner-only in v1.
    */
   sharedRecord?: boolean;
+  /** A record-only view, intentionally absent from the actor's own nav. */
+  sharedRecordOnly?: boolean;
 }
 
 /**
@@ -170,6 +173,14 @@ export const NAV_DESTINATIONS: ReadonlyArray<NavDestination> = [
     tourId: "nav-labs",
     requiresModule: "labs",
   },
+  {
+    href: "/profile",
+    sharedRecord: true,
+    sharedRecordOnly: true,
+    tKey: "settings.sections.anamnesis.title",
+    icon: ClipboardList,
+    tourId: "nav-profile",
+  },
   // v1.18.1 — the illness/condition journal sits in the clinical spine
   // next to Labs. Born-gated: `requiresModule: "illness"` reads the
   // opt-in `illness` key from the resolved module map, so the entry is
@@ -316,6 +327,11 @@ function isNavDestinationVisible(
   ) {
     return false;
   }
+  // A shared record's server-resolved scope decides which health-domain doors
+  // exist. The actor's module preferences describe their own dashboard and
+  // must not hide a domain the target record explicitly granted.
+  if (sharedRecord) return true;
+  if (d.sharedRecordOnly) return false;
   if (!d.requiresModule) return true;
   if (!mounted) return false;
   return modules?.[d.requiresModule] !== false;
diff --git a/src/hooks/use-account-switch.ts b/src/hooks/use-account-switch.ts
index 6d11b18dc..25f00a232 100644
--- a/src/hooks/use-account-switch.ts
+++ b/src/hooks/use-account-switch.ts
@@ -102,10 +102,13 @@ async function postSwitch(accountId: string | null): Promise<SwitchResponse> {
  * sequence. Two copies of "wipe, then reload" is one copy too many for a step
  * whose order is the safety property.
  */
-async function landOnRecord(accountId: string | null): Promise<never> {
+async function landOnRecord(
+  accountId: string | null,
+  destination = "/",
+): Promise<never> {
   setRecordScope(accountId);
   await clearOfflineCachesForRecordSwitch();
-  window.location.assign("/");
+  window.location.assign(destination);
   // The document is being replaced. Nothing after this runs, and the promise
   // deliberately never settles so no caller paints a "done" state over a page
   // that is on its way out.
@@ -124,15 +127,21 @@ export function useAccountSwitch() {
   const { t } = useTranslations();
   const queryClient = useQueryClient();
 
-  return useMutation({
+  const mutation = useMutation({
     mutationKey: queryKeys.accountSwitchMutation(),
-    mutationFn: async (accountId: string | null) => {
+    mutationFn: async ({
+      accountId,
+      destination,
+    }: {
+      accountId: string | null;
+      destination: string;
+    }) => {
       await postSwitch(accountId);
       // The in-memory cache holds the record we are leaving. Clearing it here
       // as well as reloading costs nothing and closes the window in which a
       // failed navigation would leave the old entries reachable.
       queryClient.clear();
-      return landOnRecord(accountId);
+      return landOnRecord(accountId, destination);
     },
     onError: (error: unknown) => {
       toast.error(
@@ -142,6 +151,16 @@ export function useAccountSwitch() {
       );
     },
   });
+
+  return {
+    ...mutation,
+    /** Preserve the established own-record and exit call sites. */
+    mutate: (accountId: string | null) =>
+      mutation.mutate({ accountId, destination: "/" }),
+    /** Enter a scoped record directly at a server-presentable destination. */
+    switchTo: (accountId: string, destination: string) =>
+      mutation.mutate({ accountId, destination }),
+  };
 }
 
 /**
diff --git a/src/lib/navigation/shared-record.ts b/src/lib/navigation/shared-record.ts
index 15ba5be41..63a1fdca8 100644
--- a/src/lib/navigation/shared-record.ts
+++ b/src/lib/navigation/shared-record.ts
@@ -18,7 +18,7 @@ export const SHARED_RECORD_DOMAIN_ROUTE_FAMILIES = {
   measurements: ["/measurements"],
   medications: ["/medications"],
   labs: ["/labs"],
-  profile: ["/settings/anamnesis"],
+  profile: ["/profile"],
   illness: ["/illness"],
   mind: ["/mood", "/mental-wellbeing"],
   cycle: ["/cycle"],
@@ -87,6 +87,13 @@ export function resolveSharedRecordNavigation(
   };
 }
 
+/** The first scope-presentable location to load after a record switch. */
+export function sharedRecordLandingHref(
+  sections: readonly ShareDomain[] | null,
+): string {
+  return resolveSharedRecordNavigation(sections).destinationHrefs[0] ?? "/";
+}
+
 /**
  * Does the server-resolved scope make this browser route presentable?
  *