@eaera-com/cms-sdk 0.1.66 → 0.1.68

package/LICENSE

@@ -1,19 +1,32 @@
 Copyright (c) 2026 EAERA. All rights reserved.
 
-Redistribution and use of this software in source and binary forms, with or
-without modification, are NOT permitted except as expressly provided in
-writing by EAERA. Installing and running this package from the public npm
-registry for the purpose of building applications that interact with EAERA
-services is permitted.
+EAERA SOFTWARE LICENSE — DRAFT v2
+[PENDING FINAL REVIEW BY EAERA LEGAL — DO NOT REMOVE THIS NOTICE UNTIL
+THE TEXT IS APPROVED. CONSULT EAERA LEGAL BEFORE SWITCHING TO AN
+OPEN-SOURCE LICENSE (MIT / APACHE-2.0).]
 
-THIS SOFTWARE IS PROVIDED BY EAERA "AS IS" AND ANY EXPRESS OR IMPLIED
-WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
-MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
-EVENT SHALL EAERA BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
-EXEMPLARY, OR CONSEQUENTIAL DAMAGES ARISING IN ANY WAY OUT OF THE USE OF
-THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+1. Ownership. This software and its documentation are proprietary to
+   EAERA. All rights not expressly granted below are reserved.
 
-NOTE: This license text is a placeholder pending final legal review. The
-package will be published to the public npm registry; consult EAERA legal
-before changing this file or switching to an open-source license (MIT /
-Apache-2.0).
+2. Permitted use. You may obtain, install, cache, and run this package
+   from the public npm registry (registry.npmjs.org), including through
+   corporate registries, mirrors, and proxies that cache registry
+   content (e.g. Artifactory, Verdaccio), solely for the purpose of
+   building, deploying, and operating applications that interact with
+   EAERA services ("Permitted Applications"). You may copy and bundle
+   portions of this package into Permitted Applications, including
+   modifications made for internal use within such applications.
+
+3. Restrictions. Except as expressly permitted in Section 2 or provided
+   in writing by EAERA, you may NOT redistribute, publish, sublicense,
+   resell, or make available this software in source or binary form, in
+   whole or in part, and you may NOT use it to build products that
+   compete with EAERA services.
+
+4. No warranty. THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR
+   IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+   WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+   ARE DISCLAIMED. IN NO EVENT SHALL EAERA BE LIABLE FOR ANY DIRECT,
+   INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+   ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+   OF THE POSSIBILITY OF SUCH DAMAGE.

package/THIRD-PARTY-NOTICES.md

@@ -0,0 +1,135 @@
+# Third-Party Software Notices
+
+This package declares its dependencies in `package.json`; they are installed
+by your package manager and are NOT bundled into the published artifacts.
+Each dependency remains under its own license, listed below for the resolved
+lockfile versions.
+
+License metadata sourced from the npm registry (2026-09-17).
+
+- `@babel/code-frame@7.29.7` — MIT
+- `@babel/helper-string-parser@7.29.7` — MIT
+- `@babel/helper-validator-identifier@7.29.7` — MIT
+- `@babel/parser@7.29.7` — MIT
+- `@babel/types@7.29.7` — MIT
+- `@commitlint/cli@20.5.3` — MIT
+- `@commitlint/config-validator@20.5.0` — MIT
+- `@commitlint/ensure@20.5.3` — MIT
+- `@commitlint/execute-rule@20.0.0` — MIT
+- `@commitlint/format@20.5.0` — MIT
+- `@commitlint/is-ignored@20.5.0` — MIT
+- `@commitlint/lint@20.5.3` — MIT
+- `@commitlint/load@20.5.3` — MIT
+- `@commitlint/message@20.4.3` — MIT
+- `@commitlint/parse@20.5.0` — MIT
+- `@commitlint/read@20.5.0` — MIT
+- `@commitlint/resolve-extends@20.5.3` — MIT
+- `@commitlint/rules@20.5.3` — MIT
+- `@commitlint/to-lines@20.0.0` — MIT
+- `@commitlint/top-level@20.4.3` — MIT
+- `@commitlint/types@20.5.0` — MIT
+- `@conventional-changelog/git-client@2.7.0` — MIT
+- `@esbuild/aix-ppc64@0.27.7` — MIT
+- `@esbuild/android-arm@0.27.7` — MIT
+- `@esbuild/android-arm64@0.27.7` — MIT
+- `@esbuild/android-x64@0.27.7` — MIT
+- `@esbuild/darwin-arm64@0.27.7` — MIT
+- `@esbuild/darwin-x64@0.27.7` — MIT
+- `@esbuild/freebsd-arm64@0.27.7` — MIT
+- `@esbuild/freebsd-x64@0.27.7` — MIT
+- `@esbuild/linux-arm@0.27.7` — MIT
+- `@esbuild/linux-arm64@0.27.7` — MIT
+- `@esbuild/linux-ia32@0.27.7` — MIT
+- `@esbuild/linux-loong64@0.27.7` — MIT
+- `@esbuild/linux-mips64el@0.27.7` — MIT
+- `@esbuild/linux-ppc64@0.27.7` — MIT
+- `@esbuild/linux-riscv64@0.27.7` — MIT
+- `@esbuild/linux-s390x@0.27.7` — MIT
+- `@esbuild/linux-x64@0.27.7` — MIT
+- `@esbuild/netbsd-arm64@0.27.7` — MIT
+- `@esbuild/netbsd-x64@0.27.7` — MIT
+- `@esbuild/openbsd-arm64@0.27.7` — MIT
+- `@esbuild/openbsd-x64@0.27.7` — MIT
+- `@esbuild/openharmony-arm64@0.27.7` — MIT
+- `@esbuild/sunos-x64@0.27.7` — MIT
+- `@esbuild/win32-arm64@0.27.7` — MIT
+- `@esbuild/win32-ia32@0.27.7` — MIT
+- `@esbuild/win32-x64@0.27.7` — MIT
+- `@jridgewell/gen-mapping@0.3.13` — MIT
+- `@jridgewell/remapping@2.3.5` — MIT
+- `@jridgewell/resolve-uri@3.1.2` — MIT
+- `@jridgewell/sourcemap-codec@1.5.5` — MIT
+- `@jridgewell/trace-mapping@0.3.31` — MIT
+- `@nuxt/kit@4.4.8` — MIT
+- `@nuxt/schema@4.4.8` — MIT
+- `@pinia/nuxt@0.11.3` — MIT
+- `@pnpm/exe.android-arm64@12.4.1` — MIT
+- `@pnpm/exe.android-x64@12.4.1` — MIT
+- `@pnpm/exe.darwin-arm64@12.4.1` — MIT
+- `@pnpm/exe.darwin-x64@12.4.1` — MIT
+- `@pnpm/exe.freebsd-x64@12.4.1` — MIT
+- `@pnpm/exe.linux-arm64@12.4.1` — MIT
+- `@pnpm/exe.linux-arm64-musl@12.4.1` — MIT
+- `@pnpm/exe.linux-ppc64@12.4.1` — MIT
+- `@pnpm/exe.linux-riscv64@12.4.1` — MIT
+- `@pnpm/exe.linux-s390x@12.4.1` — MIT
+- `@pnpm/exe.linux-x64@12.4.1` — MIT
+- `@pnpm/exe.linux-x64-musl@12.4.1` — MIT
+- `@pnpm/exe.win32-arm64@12.4.1` — MIT
+- `@pnpm/exe.win32-x64@12.4.1` — MIT
+- `@publint/pack@0.1.5` — MIT
+- `@rollup/pluginutils@5.4.0` — MIT
+- `@rollup/rollup-android-arm64@4.62.2` — MIT
+- `@rollup/rollup-android-arm-eabi@4.62.2` — MIT
+- `@rollup/rollup-darwin-arm64@4.62.2` — MIT
+- `@rollup/rollup-darwin-x64@4.62.2` — MIT
+- `@rollup/rollup-freebsd-arm64@4.62.2` — MIT
+- `@rollup/rollup-freebsd-x64@4.62.2` — MIT
+- `@rollup/rollup-linux-arm64-gnu@4.62.2` — MIT
+- `@rollup/rollup-linux-arm64-musl@4.62.2` — MIT
+- `@rollup/rollup-linux-arm-gnueabihf@4.62.2` — MIT
+- `@rollup/rollup-linux-arm-musleabihf@4.62.2` — MIT
+- `@rollup/rollup-linux-loong64-gnu@4.62.2` — MIT
+- `@rollup/rollup-linux-loong64-musl@4.62.2` — MIT
+- `@rollup/rollup-linux-ppc64-gnu@4.62.2` — MIT
+- `@rollup/rollup-linux-ppc64-musl@4.62.2` — MIT
+- `@rollup/rollup-linux-riscv64-gnu@4.62.2` — MIT
+- `@rollup/rollup-linux-riscv64-musl@4.62.2` — MIT
+- `@rollup/rollup-linux-s390x-gnu@4.62.2` — MIT
+- `@rollup/rollup-linux-x64-gnu@4.62.2` — MIT
+- `@rollup/rollup-linux-x64-musl@4.62.2` — MIT
+- `@rollup/rollup-openbsd-x64@4.62.2` — MIT
+- `@rollup/rollup-openharmony-arm64@4.62.2` — MIT
+- `@rollup/rollup-win32-arm64-msvc@4.62.2` — MIT
+- `@rollup/rollup-win32-ia32-msvc@4.62.2` — MIT
+- `@rollup/rollup-win32-x64-gnu@4.62.2` — MIT
+- `@rollup/rollup-win32-x64-msvc@4.62.2` — MIT
+- `@simple-libs/child-process-utils@1.0.2` — MIT
+- `@simple-libs/stream-utils@1.2.0` — MIT
+- `@standard-schema/spec@1.1.0` — MIT
+- `@types/chai@5.2.3` — MIT
+- `@types/deep-eql@4.0.2` — MIT
+- `@types/estree@1.0.9` — MIT
+- `@types/node@22.20.0` — MIT
+- `@vitest/expect@4.1.9` — MIT
+- `@vitest/mocker@4.1.9` — MIT
+- `@vitest/pretty-format@4.1.9` — MIT
+- `@vitest/runner@4.1.9` — MIT
+- `@vitest/snapshot@4.1.9` — MIT
+- `@vitest/spy@4.1.9` — MIT
+- `@vitest/utils@4.1.9` — MIT
+- `@volar/language-core@2.4.28` — MIT
+- `@volar/source-map@2.4.28` — MIT
+- `@volar/typescript@2.4.28` — MIT
+- `@vue/compiler-core@3.5.38` — MIT
+- `@vue/compiler-dom@3.5.38` — MIT
+- `@vue/compiler-sfc@3.5.38` — MIT
+- `@vue/compiler-ssr@3.5.38` — MIT
+- `@vue/devtools-api@7.7.9` — MIT
+- `@vue/devtools-kit@7.7.9` — MIT
+- `@vue/devtools-shared@7.7.9` — MIT
+- `@vue/reactivity@3.5.38` — MIT
+- `@vue/runtime-core@3.5.38` — MIT
+- `@vue/runtime-dom@3.5.38` — MIT
+- `@vue/server-renderer@3.5.38` — MIT
+- `@vue/shared@3.5.38` — MIT

package/dist/chunks/{_shared-DdBWuPm_.js → _shared-DZlTUzoa.js}

@@ -1,4 +1,4 @@
-import { a as COOKIE_DEFAULTS } from './storage.constant--64BDSPW.js';
+import { a as COOKIE_DEFAULTS } from './storage.constant-CVWam5ls.js';
 import { useRuntimeConfig } from '#imports';
 
 const TOKEN_COOKIE_OPTIONS = {
@@ -24,4 +24,3 @@ function readSdkConfig(event) {
 }
 
 export { TOKEN_COOKIE_OPTIONS as T, readSdkConfig as r };
-//# sourceMappingURL=_shared-DdBWuPm_.js.map

package/dist/chunks/auth.constant-CMI1lqQc.js

@@ -34,4 +34,3 @@ const AUTH_PROXY_PATH = {
 };
 
 export { AUTH_PROXY_PATH as A, AUTH_ENDPOINT as a };
-//# sourceMappingURL=auth.constant-CMI1lqQc.js.map

package/dist/chunks/authz.constant-BAarvacV.js

@@ -6,4 +6,3 @@ const AUTHZ_PROXY_PATH = {
 };
 
 export { AUTHZ_PROXY_PATH as A, AUTHZ_ENDPOINT as a };
-//# sourceMappingURL=authz.constant-BAarvacV.js.map

package/dist/chunks/http.constant-BzH5tJTG.js

@@ -30,4 +30,3 @@ const HTTP_DEFAULTS = {
 const HTTP_RETRY_STATUS_CODES = [408, 425, 429, 500, 502, 503, 504];
 
 export { HTTP_DEFAULTS as H, RESPONSE_CASING_VALUE as R, SERIALIZATION_FORMAT as S, HTTP_RETRY_STATUS_CODES as a, HTTP_HEADER as b };
-//# sourceMappingURL=http.constant-BzH5tJTG.js.map

package/dist/chunks/mt5Retcode-DlZLQOLA.js

@@ -175,4 +175,3 @@ function viewMt5Retcode(retcode) {
 }
 
 export { viewMt5Retcode as A, MT5_RETCODE as M, WS_RECONNECT_INITIAL_MS as W, WS_RECONNECT_MAX_MS as a, WS_CONNECTION_STATE as b, WS_PING_INTERVAL_MS as c, WS_MESSAGE_TYPE as d, WS_CLOSE_CODE as e, WS_MAX_RECONNECT_ATTEMPTS as f, WS_AUTH_TIMEOUT_MS as g, WS_RECONNECT_JITTER_MS as h, WS_PING_WATCHDOG_CHECK_MS as i, WS_MAX_SUBSCRIPTIONS as j, WS_PING_WATCHDOG_FACTOR as k, WS_ACTION_ACCEPTED_ERROR_CODE as l, WS_ACTION_ERROR_CODE as m, WS_ACTION_RESULT_ERROR_CODE as n, WS_ACTION_RESULT_TTL_MS as o, WS_AUTH_ERROR_CODE as p, WS_CLOSE_REASON as q, WS_MT5_EVENT_TYPE as r, WS_TOPIC as s, WS_TOPIC_NAMESPACE as t, accountTopic as u, adminTopic as v, mt5Topic as w, streamTopic as x, symbolTopic as y, userTopic as z };
-//# sourceMappingURL=mt5Retcode-DlZLQOLA.js.map

package/dist/chunks/{storage.constant--64BDSPW.js → storage.constant-CVWam5ls.js}

@@ -10,6 +10,7 @@ const COOKIE_DEFAULTS = {
 };
 const STORE_PERSIST_KEY = {
   AUTH: "cms-auth-v1",
+  AUTHZ: "cms-authz-v1",
   CONTENT: "cms-content-v1",
   RULES: "cms-rules-v1",
   EXECUTIONS: "cms-executions-v1",
@@ -41,4 +42,3 @@ const COOKIE_SAME_SITE = {
 };
 
 export { COOKIE_SAME_SITE as C, PERSIST_KEY as P, REFRESH_TOKEN_STORAGE_KEY as R, STORE_PERSIST_KEY as S, TOKEN_STORAGE_KEY as T, COOKIE_DEFAULTS as a, PERSIST_ALLOWED_KEYS as b, PERSIST_MAX_BYTES as c, PERSIST_PREFIX as d, STORAGE_NAME as e };
-//# sourceMappingURL=storage.constant--64BDSPW.js.map

package/dist/common/constants/storage.constant.d.ts

@@ -19,6 +19,7 @@ export declare const COOKIE_DEFAULTS: {
 /** Pinia persistence keys (versioned for schema migration). */
 export declare const STORE_PERSIST_KEY: {
     readonly AUTH: "cms-auth-v1";
+    readonly AUTHZ: "cms-authz-v1";
     readonly CONTENT: "cms-content-v1";
     readonly RULES: "cms-rules-v1";
     readonly EXECUTIONS: "cms-executions-v1";

package/dist/common/constants/storage.constant.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage.constant.d.ts","sourceRoot":"","sources":["../../../src/common/constants/storage.constant.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAG,kBAA2B,CAAC;AAE7D;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAG,mBAA4B,CAAC;AAEtE,sEAAsE;AACtE,eAAO,MAAM,eAAe;;;;;;CAMlB,CAAC;AAEX,+DAA+D;AAC/D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;CAapB,CAAC;AAEX;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,EAAG,cAAuB,CAAC;AAEtD,eAAO,MAAM,WAAW;;CAEd,CAAC;AAEX,6EAA6E;AAC7E,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAEtC,6DAA6D;AAC7D,eAAO,MAAM,oBAAoB,wCAA4C,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,YAAY;;;;;CAKf,CAAC;AACX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE3E;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;;;CAInB,CAAC;AACX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,OAAO,gBAAgB,CAAC,CAAC"}
+{"version":3,"file":"storage.constant.d.ts","sourceRoot":"","sources":["../../../src/common/constants/storage.constant.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAG,kBAA2B,CAAC;AAE7D;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAG,mBAA4B,CAAC;AAEtE,sEAAsE;AACtE,eAAO,MAAM,eAAe;;;;;;CAMlB,CAAC;AAEX,+DAA+D;AAC/D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;CAcpB,CAAC;AAEX;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,EAAG,cAAuB,CAAC;AAEtD,eAAO,MAAM,WAAW;;CAEd,CAAC;AAEX,6EAA6E;AAC7E,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAEtC,6DAA6D;AAC7D,eAAO,MAAM,oBAAoB,wCAA4C,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,YAAY;;;;;CAKf,CAAC;AACX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE3E;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;;;CAInB,CAAC;AACX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/common/helpers/format.js

@@ -17,4 +17,3 @@ function categoryLabel(category) {
 }
 
 export { categoryLabel, computeSpread, formatPrice };
-//# sourceMappingURL=format.js.map

package/dist/common/helpers/mt5Retcode.js

@@ -1,2 +1 @@
 export { A as viewMt5Retcode } from '../../chunks/mt5Retcode-DlZLQOLA.js';
-//# sourceMappingURL=mt5Retcode.js.map

package/dist/index.js

@@ -3,8 +3,8 @@ import { H as HTTP_DEFAULTS, a as HTTP_RETRY_STATUS_CODES, b as HTTP_HEADER, R a
 export { S as SERIALIZATION_FORMAT } from './chunks/http.constant-BzH5tJTG.js';
 import { A as AUTH_PROXY_PATH, a as AUTH_ENDPOINT } from './chunks/auth.constant-CMI1lqQc.js';
 import { A as AUTHZ_PROXY_PATH, a as AUTHZ_ENDPOINT } from './chunks/authz.constant-BAarvacV.js';
-import { C as COOKIE_SAME_SITE, a as COOKIE_DEFAULTS, T as TOKEN_STORAGE_KEY, P as PERSIST_KEY, S as STORE_PERSIST_KEY } from './chunks/storage.constant--64BDSPW.js';
-export { b as PERSIST_ALLOWED_KEYS, c as PERSIST_MAX_BYTES, d as PERSIST_PREFIX, e as STORAGE_NAME } from './chunks/storage.constant--64BDSPW.js';
+import { C as COOKIE_SAME_SITE, a as COOKIE_DEFAULTS, T as TOKEN_STORAGE_KEY, P as PERSIST_KEY, S as STORE_PERSIST_KEY } from './chunks/storage.constant-CVWam5ls.js';
+export { b as PERSIST_ALLOWED_KEYS, c as PERSIST_MAX_BYTES, d as PERSIST_PREFIX, e as STORAGE_NAME } from './chunks/storage.constant-CVWam5ls.js';
 import { ref, shallowRef, watch, computed } from 'vue';
 import { W as WS_RECONNECT_INITIAL_MS, a as WS_RECONNECT_MAX_MS, b as WS_CONNECTION_STATE, c as WS_PING_INTERVAL_MS, d as WS_MESSAGE_TYPE, e as WS_CLOSE_CODE, f as WS_MAX_RECONNECT_ATTEMPTS, g as WS_AUTH_TIMEOUT_MS, h as WS_RECONNECT_JITTER_MS, i as WS_PING_WATCHDOG_CHECK_MS, j as WS_MAX_SUBSCRIPTIONS, k as WS_PING_WATCHDOG_FACTOR } from './chunks/mt5Retcode-DlZLQOLA.js';
 export { M as MT5_RETCODE, l as WS_ACTION_ACCEPTED_ERROR_CODE, m as WS_ACTION_ERROR_CODE, n as WS_ACTION_RESULT_ERROR_CODE, o as WS_ACTION_RESULT_TTL_MS, p as WS_AUTH_ERROR_CODE, q as WS_CLOSE_REASON, r as WS_MT5_EVENT_TYPE, s as WS_TOPIC, t as WS_TOPIC_NAMESPACE, u as accountTopic, v as adminTopic, w as mt5Topic, x as streamTopic, y as symbolTopic, z as userTopic, A as viewMt5Retcode } from './chunks/mt5Retcode-DlZLQOLA.js';
@@ -1192,7 +1192,7 @@ function createContentService(opts) {
       if (mock())
         return _okList(mockContentList(query));
       return api(CONTENT_ENDPOINT.BASE, {
-        query: _wireQuery(query)
+        query: _wireQuery$1(query)
       });
     },
     async detail(uuid) {
@@ -1247,7 +1247,7 @@ function createContentService(opts) {
     }
   };
 }
-function _wireQuery(query) {
+function _wireQuery$1(query) {
   const out = { ...query };
   if (out.packId !== void 0) {
     out.pack_id = out.packId;
@@ -1795,18 +1795,18 @@ function createExecutionsService(opts) {
         };
       }
       if (params.contentId) {
-        const { contentId: _id, offset = 0, limit = 50, ...rest } = params;
+        const { contentId: _id, offset = 0, limit = 50, ...rest2 } = params;
         const rows = await api(
           EXECUTIONS_ENDPOINT.byContent(params.contentId),
           {
-            query: { offset, limit, ...rest }
+            query: { offset, limit, ..._wireQuery(rest2) }
           }
         );
         const page = Math.floor(offset / Math.max(limit, 1)) + 1;
         return { items: rows, total: rows.length, page, perPage: limit };
       }
-      const { contentId: _drop, offset: _o, limit: _l, sourceType: _s, ...query } = params;
-      return api(EXECUTIONS_ENDPOINT.BASE, { query });
+      const { contentId: _drop, offset: _o, limit: _l, sourceType: _s, ...rest } = params;
+      return api(EXECUTIONS_ENDPOINT.BASE, { query: _wireQuery(rest) });
     },
     async detail(uuid) {
       if (mock()) return _mustFind$1(mockExecutionDetail(uuid), uuid);
@@ -1814,6 +1814,16 @@ function createExecutionsService(opts) {
     }
   };
 }
+function _wireQuery(params) {
+  const { contentUuid, perPage, excludeParams, includeUnlinked, llmOnly, ...rest } = params;
+  const q = { ...rest };
+  if (contentUuid != null) q.content_uuid = contentUuid;
+  if (perPage != null) q.per_page = perPage;
+  if (excludeParams != null) q.exclude_params = excludeParams;
+  if (includeUnlinked != null) q.include_unlinked = includeUnlinked;
+  if (llmOnly != null) q.llm_only = llmOnly;
+  return q;
+}
 function _mustFind$1(exec, uuid) {
   if (!exec) throw _notFound$2(`Execution ${uuid} not found`);
   return deepClone(exec);
@@ -3043,8 +3053,8 @@ const _MOCK_PROVIDERS = [
   {
     name: "openai-default",
     providerType: LLM_PROVIDER_TYPE.OPENAI,
-    baseUrl: "https://api.xiaomimimo.com/v1",
-    models: ["mimo-v2.5-pro", "mimo-v2.5"],
+    baseUrl: "https://llm.mock.example/v1",
+    models: ["mock-model-pro", "mock-model-basic"],
     config: { timeout: 180 },
     isEnabled: true,
     isHealthy: true
@@ -3216,6 +3226,8 @@ function createNotificationsService(opts) {
     if (query.category) q.category = query.category;
     if (query.page != null) q.page = query.page;
     if (query.perPage != null) q.per_page = query.perPage;
+    if (query.sortBy) q.sort_by = query.sortBy;
+    if (query.sortDirection) q.sort_direction = query.sortDirection;
     return q;
   };
   return {
@@ -4049,17 +4061,30 @@ function createPeoplePackOpsService(opts) {
     async uninstall(slug, force = false) {
       await api(`${PACKS_ENDPOINT}/${encodeURIComponent(slug)}`, {
         method: "DELETE",
-        query: force ? { force: true } : void 0
+        body: force ? { force: true } : void 0
       });
     },
     async updateMetadata(slug, patch) {
-      const metadata = {
-        ...patch.metadata ?? {},
-        ...patch.disabled !== void 0 ? { "people.pack.disabled": patch.disabled } : {}
+      const row = await api(
+        `${PACKS_ENDPOINT}/${encodeURIComponent(slug)}`
+      );
+      const currentMeta = row?.metadata ?? {};
+      const merged = {
+        ...currentMeta,
+        ...patch.metadata ?? {}
       };
+      if (patch.disabled !== void 0) merged["people.pack.disabled"] = patch.disabled;
+      for (const key of [
+        "installedRef",
+        "installedRequestedRef",
+        "installed_ref",
+        "installed_requested_ref"
+      ]) {
+        if (currentMeta[key] !== void 0) merged[key] = currentMeta[key];
+      }
       return api(`${PACKS_ENDPOINT}/${encodeURIComponent(slug)}`, {
         method: "PUT",
-        body: { metadata }
+        body: { metadata: merged }
       });
     },
     async conflicts(slug) {
@@ -6909,116 +6934,134 @@ function _noSdk$a() {
   return new Error("Auth store: SDK not attached. Call setSdk() first.");
 }
 
-const useAuthzStore = defineStore("cms-authz", () => {
-  const sdk = shallowRef(null);
-  const portal = ref("");
-  const portalAccess = ref(null);
-  const loaded = ref(false);
-  const isLoading = ref(false);
-  const errorCode = ref("");
-  let inFlight = null;
-  const hasAccess = computed(() => portalAccess.value?.hasAccess ?? false);
-  const permissions = computed(() => portalAccess.value?.permissions ?? []);
-  const roles = computed(() => portalAccess.value?.roles ?? []);
-  const SESSION_INVALID_CODES = /* @__PURE__ */ new Set([
-    "UNAUTHENTICATED",
-    "INVALID_TOKEN_AUDIENCE"
-  ]);
-  const ACCESS_DENIED_CODE = "PORTAL_ACCESS_DENIED";
-  const isSessionInvalid = computed(
-    () => loaded.value && SESSION_INVALID_CODES.has(errorCode.value)
-  );
-  const isAccessDenied = computed(() => loaded.value && errorCode.value === ACCESS_DENIED_CODE);
-  const can = (permission) => {
-    if (!loaded.value || !hasAccess.value) return false;
-    const list = permissions.value;
-    return list.includes("*") || list.includes(permission);
-  };
-  const hasRole = (role) => roles.value.includes(role);
-  const hasAnyPermission = (list) => {
-    if (!loaded.value || !hasAccess.value) return false;
-    const granted = permissions.value;
-    return granted.includes("*") || list.some((p) => granted.includes(p));
-  };
-  const hasAllPermissions = (list) => {
-    if (!loaded.value || !hasAccess.value) return false;
-    const granted = permissions.value;
-    return granted.includes("*") || list.every((p) => granted.includes(p));
-  };
-  const setSdk = (instance) => {
-    sdk.value = instance;
-  };
-  const setPortal = (id) => {
-    portal.value = id;
-  };
-  const _reset = () => {
-    portalAccess.value = null;
-    loaded.value = false;
-    isLoading.value = false;
-    errorCode.value = "";
-    inFlight = null;
-  };
-  const loadPortalAccess = async (opts) => {
-    if (!sdk.value) throw new Error("Authz store: SDK not attached. Call setSdk() first.");
-    if (opts?.portal) portal.value = opts.portal;
-    if (loaded.value && !opts?.force) return;
-    if (inFlight) return inFlight;
-    isLoading.value = true;
-    inFlight = (async () => {
-      try {
-        portalAccess.value = await sdk.value.authz.portalAccess(portal.value || void 0);
-        errorCode.value = "";
-      } catch (e) {
-        portalAccess.value = null;
-        errorCode.value = _extractErrorCode(e);
-        if (!errorCode.value) console.error("[cms-authz] portalAccess failed:", e);
-      } finally {
-        loaded.value = true;
-        isLoading.value = false;
-        inFlight = null;
-      }
-    })();
-    return inFlight;
-  };
-  const auth = useAuthStore();
-  watch(
-    () => auth.loginEpoch,
-    () => {
+const useAuthzStore = defineStore(
+  "cms-authz",
+  () => {
+    const sdk = shallowRef(null);
+    const portal = ref("");
+    const portalAccess = ref(null);
+    const loaded = ref(false);
+    const isLoading = ref(false);
+    const errorCode = ref("");
+    let inFlight = null;
+    const hasAccess = computed(() => portalAccess.value?.hasAccess ?? false);
+    const permissions = computed(() => portalAccess.value?.permissions ?? []);
+    const roles = computed(() => portalAccess.value?.roles ?? []);
+    const SESSION_INVALID_CODES = /* @__PURE__ */ new Set([
+      "UNAUTHENTICATED",
+      "INVALID_TOKEN_AUDIENCE"
+    ]);
+    const ACCESS_DENIED_CODE = "PORTAL_ACCESS_DENIED";
+    const isSessionInvalid = computed(
+      () => loaded.value && SESSION_INVALID_CODES.has(errorCode.value)
+    );
+    const isAccessDenied = computed(() => loaded.value && errorCode.value === ACCESS_DENIED_CODE);
+    const can = (permission) => {
+      if (!loaded.value || !hasAccess.value) return false;
+      return permissions.value.some((g) => _permissionMatches(g, permission));
+    };
+    const hasRole = (role) => roles.value.includes(role);
+    const hasAnyPermission = (list) => {
+      if (!loaded.value || !hasAccess.value) return false;
+      const granted = permissions.value;
+      return list.some((p) => granted.some((g) => _permissionMatches(g, p)));
+    };
+    const hasAllPermissions = (list) => {
+      if (!loaded.value || !hasAccess.value) return false;
+      const granted = permissions.value;
+      return list.every((p) => granted.some((g) => _permissionMatches(g, p)));
+    };
+    const setSdk = (instance) => {
+      sdk.value = instance;
+    };
+    const setPortal = (id) => {
+      portal.value = id;
+    };
+    const _reset = () => {
       portalAccess.value = null;
       loaded.value = false;
+      isLoading.value = false;
       errorCode.value = "";
       inFlight = null;
+    };
+    const loadPortalAccess = async (opts) => {
+      if (!sdk.value) throw new Error("Authz store: SDK not attached. Call setSdk() first.");
+      if (opts?.portal) portal.value = opts.portal;
+      if (loaded.value && !opts?.force) return;
+      if (inFlight) return inFlight;
+      isLoading.value = true;
+      inFlight = (async () => {
+        try {
+          portalAccess.value = await sdk.value.authz.portalAccess(portal.value || void 0);
+          errorCode.value = "";
+        } catch (e) {
+          portalAccess.value = null;
+          errorCode.value = _extractErrorCode(e);
+          if (!errorCode.value) console.error("[cms-authz] portalAccess failed:", e);
+        } finally {
+          loaded.value = true;
+          isLoading.value = false;
+          inFlight = null;
+        }
+      })();
+      return inFlight;
+    };
+    const auth = useAuthStore();
+    watch(
+      () => auth.loginEpoch,
+      () => {
+        portalAccess.value = null;
+        loaded.value = false;
+        errorCode.value = "";
+        inFlight = null;
+      }
+    );
+    watch(
+      () => auth.isLoggedIn,
+      (loggedIn) => {
+        if (!loggedIn) _reset();
+      }
+    );
+    return {
+      // state
+      portal,
+      portalAccess,
+      loaded,
+      isLoading,
+      errorCode,
+      // getters
+      hasAccess,
+      permissions,
+      roles,
+      isSessionInvalid,
+      isAccessDenied,
+      // actions
+      setSdk,
+      setPortal,
+      loadPortalAccess,
+      can,
+      hasRole,
+      hasAnyPermission,
+      hasAllPermissions
+    };
+  },
+  {
+    // Rehydrate the portal-access cache across reloads — `permissions`,
+    // `roles`, and `hasAccess` are computeds derived from `portalAccess`,
+    // so persisting the source (plus `loaded` so `can()` trusts the cache
+    // on the first render after F5, per the store contract "read the cache,
+    // never fetch before rendering") restores the full authorization
+    // surface. App-level session-restore middleware is expected to call
+    // `loadPortalAccess({ force: true })` afterwards to refresh from the
+    // server — same fetch-on-restore contract as login / `loginEpoch` bump.
+    // Size: `IPortalAccess` is `{ portal, hasAccess, permissions[], roles[] }`,
+    // well under the `PERSIST_MAX_BYTES` cookie cap.
+    persist: {
+      key: STORE_PERSIST_KEY.AUTHZ,
+      pick: ["portalAccess", "loaded", "errorCode"]
     }
-  );
-  watch(
-    () => auth.isLoggedIn,
-    (loggedIn) => {
-      if (!loggedIn) _reset();
-    }
-  );
-  return {
-    // state
-    portal,
-    portalAccess,
-    loaded,
-    isLoading,
-    errorCode,
-    // getters
-    hasAccess,
-    permissions,
-    roles,
-    isSessionInvalid,
-    isAccessDenied,
-    // actions
-    setSdk,
-    setPortal,
-    loadPortalAccess,
-    can,
-    hasRole,
-    hasAnyPermission,
-    hasAllPermissions
-  };
-});
+  }
+);
 function _extractErrorCode(e) {
   const err = e;
   const payload = err?.data?.data ?? err?.data;
@@ -7026,6 +7069,16 @@ function _extractErrorCode(e) {
   const code = detail?.error ?? payload?.error;
   return typeof code === "string" ? code : "";
 }
+function _permissionMatches(granted, requested) {
+  if (granted === "*") return true;
+  const g = granted.split(":");
+  if (g.every((seg) => seg === "*")) return true;
+  const r = requested.split(":");
+  if (g.length > r.length) return false;
+  if (!g.every((seg, i) => seg === "*" || seg === r[i])) return false;
+  if (g.length < r.length && g.at(-1) !== "*") return false;
+  return true;
+}
 
 const useBarsStore = defineStore(
   "cms-bars",
@@ -8605,4 +8658,3 @@ const buildFilter = (conditions) => {
 };
 
 export { ACTION_KIND, ACTION_KINDS, ACTION_RESULT_FIELDS, AUTHZ_ENDPOINT, AUTHZ_PROXY_PATH, AUTH_ENDPOINT, BARS_DEFAULTS, BARS_ENDPOINT, CBS_STATE_KEY_STORAGE, CHART_INTERVAL, CONDITION_FIELDS, CONDITION_OPERATORS, CONDITION_OPERATOR_LABELS, CONDITION_OPERATOR_SYMBOL_TO_WORD, CONDITION_OPERATOR_VALUE_KINDS, CONDITION_TYPE, CONTENT_DEFAULTS, CONTENT_ENDPOINT, CONTENT_FILTER_OPERATOR, CONTENT_FILTER_SCALAR_OPERATOR, CONTENT_TYPE, CONTENT_TYPES_DEFAULTS, CONTENT_TYPES_ENDPOINT, CONTENT_TYPE_CATEGORY, CONTENT_TYPE_NAMES, COOKIE_SAME_SITE, CRON_PRESETS, CmsError, DEFAULT_CRON_SCHEDULE, DEFAULT_EVENT_CONTENT_TYPE, DEFAULT_LLM_QUERY_TOOLS, EVENT_PAYLOAD_FIELDS, EVENT_TYPE, EVENT_TYPE_OPTIONS, EXECUTIONS_DEFAULTS, EXECUTIONS_ENDPOINT, EXECUTION_STATUS, EXECUTION_STATUSES, EXECUTION_TRANSITION, EXECUTION_TYPE, GOV_ACTION_BY_CT, GOV_ACTION_NAME, GOV_CONTENT_TYPE, GOV_CONTENT_TYPE_NAMES, GOV_COST_GROUP, GOV_DEFAULTS, GOV_ENDPOINT, GOV_USAGE_WINDOW, HISTORY_DEAL_ENTRY, HISTORY_DEFAULTS, HISTORY_ENDPOINT, HISTORY_ORDER_STATUS, HISTORY_SORT_BY, HISTORY_SORT_DIRECTION, HISTORY_TAB, HTTP_DEFAULTS, HTTP_HEADER, HTTP_RETRY_STATUS_CODES, KALSHI_CHART_INTERVAL, KALSHI_ENDPOINT, KALSHI_FUTURE_STATUS, KALSHI_LAST_TICKS_DEFAULTS, KALSHI_LIFECYCLE_STATUS, KALSHI_SERVER_STATUS, KALSHI_SETTLEMENT_RESULT, KALSHI_SYMBOL_TICKS_DEFAULTS, KALSHI_TRENDING_DEFAULTS, LEVERAGE_OPTIONS, LLM_ENDPOINT, LLM_EVAL_BOUNDS, LLM_PROVIDER_TYPE, LLM_QUERY_TOOL, LLM_QUERY_TOOL_OPTIONS, MONITORED_GROUPS_TYPE, MT5_ACCOUNT_STATUS, MT5_ACTION_NAME, MT5_ALL_ACTIONS, MT5_CHART_BAR_SOURCE, MT5_COMMISSION_MODE, MT5_COMMISSION_VOLUME_TYPE, MT5_DEAL_ENTRY, MT5_EXECUTION_MODE, MT5_FINANCIAL_ACTIONS, MT5_INTERVAL, MT5_LOCAL_ACTIONS, MT5_MARKET_STATUS, MT5_OPERATIONAL_ACTIONS, MT5_ORDER_DURATION, MT5_ORDER_KIND, MT5_ORDER_STATE, MT5_ORDER_STATE_NAME, MT5_ORDER_TYPE, MT5_POSITION_TYPE, MT5_SERVER_NAME, MT5_SERVER_STATE, MT5_SYNC_PHASE, MT5_TRADE_MODE, MT5_TRADE_SIDE, MT5_TRADING_ACTIONS, MT5_VIEWER_ACTIONS, NOTIFICATIONS_ENDPOINT, NOTIFICATION_FALLBACK_POLICY, NOTIFICATION_TEMPLATE_STATE, PACKS_AUDIT_ENDPOINT, PACKS_ENDPOINT, PEOPLE_ACTION_BY_CT, PEOPLE_ACTION_NAME, PEOPLE_CONTENT_TYPE, PEOPLE_CONTENT_TYPE_NAMES, PEOPLE_COPILOT_ENDPOINT, PEOPLE_DEFAULTS, PEOPLE_ENDPOINT, PEOPLE_PACK_ID, PEOPLE_SUBJECT_KIND, PEOPLE_SYSTEM_ONLY_ACTIONS, PEOPLE_TARGET_TYPE, PERSIST_KEY, PUBLIC_MARKETS_TYPE, REPORT_TEMPLATES_ENDPOINT, RULES_DEFAULTS, RULES_ENDPOINT, SETTINGS_ENDPOINT, SILENT_LOGIN_MESSAGE, SORT_DIRECTION, STORE_PERSIST_KEY, SUM_WITHIN_DAYS, TOKEN_STORAGE_KEY, TRIGGER_MODE, TRIGGER_TYPE, TokenManager, WS_AUTH_TIMEOUT_MS, WS_CLOSE_CODE, WS_CONNECTION_STATE, WS_EVENT_NAME, WS_MAX_SUBSCRIPTIONS, WS_MESSAGE_TYPE, WS_PING_INTERVAL_MS, WS_RECONNECT_INITIAL_MS, WS_RECONNECT_JITTER_MS, WS_RECONNECT_MAX_MS, actionDefByActionName, actionDefByKind, actionsFromExecution, actionsToExecutionParams, buildCronTrigger, buildEventTrigger, buildFilter, buildSignalTrigger, clearCbsStateKey, coerceEventType, cookieStorage, createApi, createAuthService, createAuthzService, createBarsService, createCmsSDK, createContentService, createContentTypesService, createEaeraWebSocket, createExecutionsService, createGovService, createHistoryService, createKalshiService, createLlmService, createNotificationsService, createPeopleService, createPersistPlugin, createSettingsService, eventPayloadFieldsFor, isKnownEventType, isSystemOnlyAction, llmEvalOf, localStorageAdapter, memoryStorage, normalizeChartInterval, normalizeConditionOperator, promptNameOf, queryToolsOf, readCbsStateKey, resolveStorage, resultOutputOf, scheduleOf, serializeAction, serializeActionParams, signalNameOf, triggerModeOf, useAuthStore, useAuthzStore, useBarsStore, useContentStore, useExecutionsStore, useGovStore, useHistoryStore, useKalshiStore, useLlmProvidersStore, useLlmStore, usePeopleStore, useRulesStore, useSettingsStore, useWsStore };
-//# sourceMappingURL=index.js.map

package/dist/nuxt.js

@@ -45,4 +45,3 @@ const nuxt = defineNuxtModule({
 });
 
 export { nuxt as default };
-//# sourceMappingURL=nuxt.js.map