@nextsparkjs/core 0.1.0-beta.195 → 0.1.0-beta.197

package/dist/messages/pt/billing.json

@@ -7,7 +7,6 @@
   "contactUs": "Fale Conosco",
   "unlimited": "Ilimitado",
   "upgrade": "Fazer Upgrade",
-  "downgrade": "Fazer Downgrade",
   "cancelSubscription": "Cancelar Assinatura",
   "upgradeDescription": "Escolha o plano que melhor se adapta as suas necessidades",
   "monthly": "Mensal",
@@ -159,6 +158,18 @@
     "failed": "Falhou"
   },
 
+  "changePlan": {
+    "title": "Alterar plano",
+    "from": "Plano atual",
+    "to": "Novo plano",
+    "upgradeDescription": "A cobrança será ajustada proporcionalmente ao período atual",
+    "downgradeDescription": "Os recursos existentes continuarão acessíveis, mas a criação de novos pode ser limitada",
+    "downgradeToFreeDescription": "Sua assinatura será cancelada e você passará para o plano gratuito",
+    "confirm": "Confirmar alteração",
+    "cancel": "Cancelar",
+    "confirming": "Alterando o plano..."
+  },
+
   "quota": {
     "limitReached": "Voce atingiu seu limite de {entity}",
     "limitReachedDetail": "Seu plano atual nao permite mais {entity}. Faca upgrade para continuar crescendo.",

package/dist/messages/pt/common.json

@@ -1,4 +1,6 @@
 {
+  "soon": "Em breve",
+  "comingSoon": "Em breve",
   "navigation": {
     "dashboard": "Painel",
     "settings": "Configuracoes",

package/dist/messages/pt/docs.json

@@ -18,6 +18,7 @@
     "home": "Inicio"
   },
   "sidebar": {
+    "close": "Fechar menu lateral",
     "open": "Abrir menu lateral",
     "label": "Navegacao da documentacao"
   },

package/dist/messages/pt/features.json

@@ -1,8 +1,20 @@
 {
   "analytics": {
-    "title": "",
-    "benefit1": "",
-    "benefit2": "",
-    "benefit3": ""
+    "title": "Analytics Avançado",
+    "benefit1": "Métricas em tempo real",
+    "benefit2": "Construtor de relatórios personalizados",
+    "benefit3": "Exportar para PDF/CSV"
+  },
+  "webhooks": {
+    "title": "Webhooks",
+    "benefit1": "Callbacks HTTP para eventos",
+    "benefit2": "Templates de payload personalizados",
+    "benefit3": "Lógica de retry e logging"
+  },
+  "automation": {
+    "title": "Automação de Tarefas",
+    "benefit1": "Criação automática de tarefas",
+    "benefit2": "Ações agendadas",
+    "benefit3": "Gatilhos de workflow"
   }
 }

package/dist/messages/pt/home.json

@@ -9,5 +9,10 @@
   "features": {
     "title": "Recursos",
     "subtitle": "Tudo o que voce precisa"
+  },
+  "auth": {
+    "signIn": "Entrar",
+    "createAccount": "Criar conta",
+    "goToDashboard": "Ir para o painel"
   }
 }

package/dist/messages/pt/index.d.ts

@@ -422,14 +422,6 @@ declare const _default: {
         contactUs: string;
         unlimited: string;
         upgrade: string;
-        downgrade: {
-            title: string;
-            description: string;
-            resource_over: string;
-            policy: string;
-            confirm: string;
-            cancel: string;
-        };
         cancelSubscription: string;
         upgradeDescription: string;
         monthly: string;
@@ -536,6 +528,14 @@ declare const _default: {
             featureNotAvailable: string;
             upgradeRequired: string;
         };
+        downgrade: {
+            title: string;
+            description: string;
+            resource_over: string;
+            policy: string;
+            confirm: string;
+            cancel: string;
+        };
         portal: {
             manage: string;
             loading: string;
@@ -563,6 +563,17 @@ declare const _default: {
             pending: string;
             failed: string;
         };
+        changePlan: {
+            title: string;
+            from: string;
+            to: string;
+            upgradeDescription: string;
+            downgradeDescription: string;
+            downgradeToFreeDescription: string;
+            confirm: string;
+            cancel: string;
+            confirming: string;
+        };
         quota: {
             limitReached: string;
             limitReachedDetail: string;
@@ -598,6 +609,8 @@ declare const _default: {
         signingOut: string;
     };
     readonly common: {
+        soon: string;
+        comingSoon: string;
         navigation: {
             dashboard: string;
             settings: string;
@@ -1238,6 +1251,7 @@ declare const _default: {
             home: string;
         };
         sidebar: {
+            close: string;
             open: string;
             label: string;
         };
@@ -1356,6 +1370,26 @@ declare const _default: {
             idCopied: string;
         };
     };
+    readonly features: {
+        analytics: {
+            title: string;
+            benefit1: string;
+            benefit2: string;
+            benefit3: string;
+        };
+        webhooks: {
+            title: string;
+            benefit1: string;
+            benefit2: string;
+            benefit3: string;
+        };
+        automation: {
+            title: string;
+            benefit1: string;
+            benefit2: string;
+            benefit3: string;
+        };
+    };
     readonly footer: {
         product: string;
         features: string;
@@ -1390,6 +1424,11 @@ declare const _default: {
             title: string;
             subtitle: string;
         };
+        auth: {
+            signIn: string;
+            createAccount: string;
+            goToDashboard: string;
+        };
     };
     readonly navigation: {
         home: string;
@@ -1893,6 +1932,7 @@ declare const _default: {
                     refunded: string;
                 };
                 pagination: {
+                    page: string;
                     showing: string;
                     previous: string;
                     next: string;
@@ -2129,18 +2169,6 @@ declare const _default: {
     readonly teams: {
         title: string;
         description: string;
-        entity: {
-            description: string;
-            plural: string;
-        };
-        fields: {
-            name: string;
-            slug: string;
-            description: string;
-            email: string;
-            role: string;
-            joinedAt: string;
-        };
         types: {
             personal: string;
             work: string;
@@ -2157,6 +2185,10 @@ declare const _default: {
             member: string;
             viewer: string;
         };
+        entity: {
+            description: string;
+            plural: string;
+        };
         actions: {
             create: string;
             creating: string;
@@ -2230,6 +2262,7 @@ declare const _default: {
             joined: string;
         };
         invitations: {
+            expired: string;
             title: string;
             description: string;
             pending: string;
@@ -2247,6 +2280,7 @@ declare const _default: {
             cancelError: string;
         };
         invite: {
+            limitReached: string;
             title: string;
             description: string;
             emailLabel: string;
@@ -2274,11 +2308,6 @@ declare const _default: {
             billing: string;
             danger: string;
         };
-        messages: {
-            created: string;
-            loading: string;
-            memberInvited: string;
-        };
         errors: {
             notFound: string;
             notMember: string;
@@ -2292,6 +2321,20 @@ declare const _default: {
             title: string;
             description: string;
         };
+        fields: {
+            name: string;
+            slug: string;
+            description: string;
+            email: string;
+            role: string;
+            joinedAt: string;
+        };
+        messages: {
+            cancelling: string;
+            created: string;
+            loading: string;
+            memberInvited: string;
+        };
     };
     readonly validation: {
         email: {

package/dist/messages/pt/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/messages/pt/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqBA,wBAqBU"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/messages/pt/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsBA,wBAsBU"}

package/dist/messages/pt/index.js

@@ -8,6 +8,7 @@ import devtools from "./devtools.json";
 import docs from "./docs.json";
 import email from "./email.json";
 import entities from "./entities.json";
+import features from "./features.json";
 import footer from "./footer.json";
 import home from "./home.json";
 import navigation from "./navigation.json";
@@ -29,6 +30,7 @@ var pt_default = {
   docs,
   email,
   entities,
+  features,
   footer,
   home,
   navigation,

package/dist/messages/pt/index.ts

@@ -8,6 +8,7 @@ import devtools from './devtools.json'
 import docs from './docs.json'
 import email from './email.json'
 import entities from './entities.json'
+import features from './features.json'
 import footer from './footer.json'
 import home from './home.json'
 import navigation from './navigation.json'
@@ -30,6 +31,7 @@ export default {
   docs,
   email,
   entities,
+  features,
   footer,
   home,
   navigation,

package/dist/messages/pt/settings.json

@@ -368,6 +368,7 @@
         "refunded": "Reembolsada"
       },
       "pagination": {
+        "page": "Página {current} de {total}",
         "showing": "Mostrando {start} a {end} de {total} faturas",
         "previous": "Anterior",
         "next": "Proximo"

package/dist/messages/pt/teams.json

@@ -2,20 +2,6 @@
   "title": "Equipes",
   "description": "Gerencie suas equipes e colaboracoes",
 
-  "entity": {
-    "description": "Gerencie suas equipes, membros e convites",
-    "plural": "Equipes"
-  },
-
-  "fields": {
-    "name": "Nome",
-    "slug": "URL",
-    "description": "Descricao",
-    "email": "Email",
-    "role": "Funcao",
-    "joinedAt": "Data de entrada"
-  },
-
   "types": {
     "personal": "Pessoal",
     "work": "Equipe de Trabalho"
@@ -120,6 +106,7 @@
   },
 
   "invitations": {
+    "expired": "Expirado",
     "title": "Convites Pendentes",
     "description": "Convites aguardando resposta",
     "pending": "Pendente",
@@ -138,6 +125,7 @@
   },
 
   "invite": {
+    "limitReached": "Limite de membros da equipe atingido ({limit})",
     "title": "Convidar Membro",
     "description": "Convide alguem para participar desta equipe",
     "emailLabel": "Email",
@@ -168,10 +156,6 @@
     "danger": "Zona de Perigo"
   },
 
-  "messages": {
-    "loading": "Carregando..."
-  },
-
   "errors": {
     "notFound": "Equipe nao encontrada",
     "notMember": "Voce nao e membro desta equipe",
@@ -197,6 +181,7 @@
   },
 
   "messages": {
+    "cancelling": "Cancelando...",
     "created": "Equipe criada com sucesso",
     "loading": "Carregando equipes...",
     "memberInvited": "Membro convidado com sucesso"

package/dist/migrations/029_sample_accounts_outside_development.sql

@@ -0,0 +1,55 @@
+-- Migration: 029_sample_accounts_outside_development.sql
+-- Description: sample accounts keep no usable credentials outside development
+--
+-- Sample data (090_sample_data.sql and the projects' *sample_data* files) is
+-- only applied by an explicit development opt-in (`nextspark db:seed`,
+-- `--sample-data` or NEXTSPARK_SEED_SAMPLE_DATA=1). Databases migrated before
+-- that may still hold the sample accounts. This migration finds them by the
+-- sample password, never by name, so a renamed account is found and an account
+-- whose password was changed is left alone; for each one it:
+--   - removes the sample password (its "credential" account row),
+--   - removes its sessions,
+--   - deactivates its API keys (status 'inactive'; deleting them would delete
+--     their api_audit_log rows),
+--   - sets its global role to 'member' (027's trigger then removes it from the
+--     System Admin Team, as for any user who loses that role).
+-- It also removes the sample sessions and deactivates the sample API key by
+-- their fixed values, whoever owns them now. Nothing else is changed.
+--
+-- It runs once, everywhere, except in a development run that opted into sample
+-- data (the runner sets nextspark.seed_sample_data to 'on' then), where those
+-- accounts are wanted. To keep using one of them deliberately, give it a new
+-- password before upgrading; to restore one afterwards, set its role back and
+-- reset its password.
+
+DO $$
+DECLARE
+  sample_passwords CONSTANT TEXT[] := ARRAY[
+    '22de14d5472248ed0bece911df908b2a:d29576424798ba6845d348a3767c0b0f38a00f2aca461b3b1d34b99a93cab06c86774c6edb183e6d6ec47457649b032a49a7b60a48f6f4f7fbbc4ea40258f19f',
+    '3db9e98e2b4d3caca97fdf2783791cbc:34b293de615caf277a237773208858e960ea8aa10f1f5c5c309b632f192cac34d52ceafbd338385616f4929e4b1b6c055b67429c6722ffdb80b01d9bf4764866'
+  ];
+  sample_session_tokens CONSTANT TEXT[] := ARRAY['tmt_superadmin_session_token_001', 'tmt_developer_session_token_001'];
+  sample_key_hashes CONSTANT TEXT[] := ARRAY[
+    '205f13ae4d2e18df417e61123bb84030c124fcb5013699046379ae1b5ec04324',
+    'e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855'
+  ];
+  sample_users TEXT[];
+BEGIN
+  IF current_setting('nextspark.seed_sample_data', true) = 'on' THEN
+    RAISE NOTICE 'Sample accounts: kept (development run with sample data).';
+    RETURN;
+  END IF;
+
+  SELECT COALESCE(array_agg(DISTINCT "userId"), '{}') INTO sample_users
+  FROM "account"
+  WHERE "providerId" = 'credential' AND "password" = ANY (sample_passwords);
+
+  DELETE FROM "account" WHERE "providerId" = 'credential' AND "password" = ANY (sample_passwords);
+  DELETE FROM "session" WHERE "userId" = ANY (sample_users) OR token = ANY (sample_session_tokens);
+  UPDATE "api_key" SET status = 'inactive', "updatedAt" = now()
+  WHERE status IS DISTINCT FROM 'inactive' AND ("userId" = ANY (sample_users) OR "keyHash" = ANY (sample_key_hashes));
+  UPDATE "users" SET role = 'member', "updatedAt" = now()
+  WHERE id = ANY (sample_users) AND role <> 'member';
+
+  RAISE NOTICE 'Sample accounts: % disabled (no password, sessions or active API keys; role member).', cardinality(sample_users);
+END $$;

package/dist/migrations/030_taxonomies_team_writes.sql

@@ -0,0 +1,29 @@
+-- Migration: 030_taxonomies_team_writes.sql
+-- Description: Taxonomy rows are written by members of their team; rows without a team only by a superadmin.
+--
+-- 021 let any authenticated user write a taxonomy row with "teamId" IS NULL. Post categories are now created in
+-- the caller's team (lib/api/post-categories.ts), and the rows without a team that earlier releases created stay
+-- readable by everyone but are changed only by a superadmin. This policy says the same on the RLS-enforced
+-- connection: reads are as before, writes need the row's team (or is_superadmin()).
+-- is_superadmin() also accepts a developer enrolled in the System Admin Team; the API (lib/api/post-categories.ts) is
+-- stricter and lets only users.role = 'superadmin' change a row without a team.
+-- Idempotent; the anon read policy from 006 is unchanged.
+
+DROP POLICY IF EXISTS "taxonomies auth can do all" ON public.taxonomies;
+DROP POLICY IF EXISTS "taxonomies auth can select" ON public.taxonomies;
+DROP POLICY IF EXISTS "taxonomies team can write" ON public.taxonomies;
+
+CREATE POLICY "taxonomies auth can select"
+ON public.taxonomies
+FOR SELECT TO authenticated
+USING (
+  "teamId" IS NULL
+  OR "teamId" = ANY(public.get_user_team_ids())
+  OR public.is_superadmin()
+);
+
+CREATE POLICY "taxonomies team can write"
+ON public.taxonomies
+FOR ALL TO authenticated
+USING ("teamId" = ANY(public.get_user_team_ids()) OR public.is_superadmin())
+WITH CHECK ("teamId" = ANY(public.get_user_team_ids()) OR public.is_superadmin());

package/dist/migrations/031_users_role_suspended.sql

@@ -0,0 +1,41 @@
+-- Migration: 031_users_role_suspended.sql
+-- Description: users.role accepts 'suspended' (lib/auth/suspension.ts).
+--
+-- The superadmin "suspend" action sets users.role = 'suspended', which check_users_role (002: member, superadmin,
+-- developer) refused. This adds 'suspended' to the roles the constraint already accepts and keeps every other one,
+-- including roles a project added to it. Idempotent: a constraint that already accepts 'suspended' is left alone. A
+-- constraint that is not a plain list of roles is left alone too, with a notice (add 'suspended' to it yourself).
+
+DO $$
+DECLARE
+  def   TEXT;
+  roles TEXT[];
+BEGIN
+  SELECT pg_get_constraintdef(c.oid) INTO def
+  FROM pg_constraint c
+  WHERE c.conrelid = 'public.users'::regclass AND c.conname = 'check_users_role';
+
+  IF def IS NULL THEN
+    ALTER TABLE public."users" ADD CONSTRAINT check_users_role
+      CHECK ("role" IN ('member', 'superadmin', 'developer', 'suspended'));
+    RETURN;
+  END IF;
+
+  IF def ~ '\msuspended\M' THEN
+    RETURN;
+  END IF;
+
+  -- "role" IN (...) is stored as: CHECK ((role = ANY (ARRAY['member'::text, ...])))
+  IF def !~ '^CHECK \(\(+"?role"?\)?(::text)? = ANY \(\(?ARRAY\[' THEN
+    RAISE NOTICE 'check_users_role is not a plain list of roles (%); add ''suspended'' to it to use the suspend action', def;
+    RETURN;
+  END IF;
+
+  SELECT array_agg(m[1]) INTO roles FROM regexp_matches(def, '''([^'']+)''', 'g') AS m;
+
+  ALTER TABLE public."users" DROP CONSTRAINT check_users_role;
+  EXECUTE format(
+    'ALTER TABLE public."users" ADD CONSTRAINT check_users_role CHECK ("role" IN (%s))',
+    (SELECT string_agg(quote_literal(r), ', ') FROM unnest(array_append(roles, 'suspended')) AS r)
+  );
+END $$;

package/dist/migrations/090_sample_data.sql

@@ -7,6 +7,16 @@
 -- Theme-specific demo data (TMT.dev users, companies, invoices) is in:
 -- migrations/090_demo_users_teams.sql
 
+-- Only a development run that asked for sample data applies this file (see
+-- scripts/db/sample-data.mjs); anything else that runs it, such as a tool that
+-- applies every core .sql file in order, fails here instead of creating these accounts.
+DO $$
+BEGIN
+  IF current_setting('nextspark.seed_sample_data', true) IS DISTINCT FROM 'on' THEN
+    RAISE EXCEPTION 'Sample data is applied only by `pnpm db:seed` (or NEXTSPARK_SEED_SAMPLE_DATA=1) outside production. If you ran that, the session setting it relies on was lost: a transaction-mode pooler (PgBouncer, Supavisor on port 6543) drops it, so point MIGRATE_DATABASE_URL at a direct connection.';
+  END IF;
+END $$;
+
 -- ============================================
 -- STEP 1: CREATE CORE TEST USERS
 -- ============================================

package/dist/routes/(auth)/signup/page.cc.d.ts

@@ -1,4 +1,6 @@
 import { metadata } from './page';
 export { metadata };
-export default function SignupPageCc(): import("react/jsx-runtime").JSX.Element;
+export default function SignupPageCc({ searchParams }: {
+    searchParams: Promise<Record<string, string | string[] | undefined>>;
+}): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=page.cc.d.ts.map

package/dist/routes/(auth)/signup/page.cc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"page.cc.d.ts","sourceRoot":"","sources":["../../../../src/routes/(auth)/signup/page.cc.tsx"],"names":[],"mappings":"AAUA,OAAmB,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,QAAQ,EAAE,CAAA;AAEnB,MAAM,CAAC,OAAO,UAAU,YAAY,4CAMnC"}
+{"version":3,"file":"page.cc.d.ts","sourceRoot":"","sources":["../../../../src/routes/(auth)/signup/page.cc.tsx"],"names":[],"mappings":"AAUA,OAAmB,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,QAAQ,EAAE,CAAA;AAEnB,MAAM,CAAC,OAAO,UAAU,YAAY,CAAC,EAAE,YAAY,EAAE,EAAE;IAAE,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAA;CAAE,2CAM9H"}

package/dist/routes/(auth)/signup/page.cc.js

@@ -2,6 +2,6 @@ import { jsx } from "react/jsx-runtime";
 import { Suspense } from "react";
 import SignupPage, { metadata } from "./page.js";
 export { metadata };
-export default function SignupPageCc() {
-  return /* @__PURE__ */ jsx(Suspense, { fallback: null, children: /* @__PURE__ */ jsx(SignupPage, {}) });
+export default function SignupPageCc({ searchParams }) {
+  return /* @__PURE__ */ jsx(Suspense, { fallback: null, children: /* @__PURE__ */ jsx(SignupPage, { searchParams }) });
 }

package/dist/routes/(auth)/signup/page.d.ts

@@ -1,6 +1,8 @@
 import type { Metadata } from 'next';
 export declare const dynamic = "force-dynamic";
 export declare const metadata: Metadata;
-declare function SignupPage(): Promise<import("react/jsx-runtime").JSX.Element>;
+declare function SignupPage({ searchParams }: {
+    searchParams?: Promise<Record<string, string | string[] | undefined>>;
+}): Promise<import("react/jsx-runtime").JSX.Element>;
 export default SignupPage;
 //# sourceMappingURL=page.d.ts.map

package/dist/routes/(auth)/signup/page.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"page.d.ts","sourceRoot":"","sources":["../../../../src/routes/(auth)/signup/page.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AASpC,eAAO,MAAM,OAAO,kBAAkB,CAAA;AAOtC,eAAO,MAAM,QAAQ,EAAE,QAA0B,CAAA;AAKjD,iBAAe,UAAU,qDA4BxB;AAED,eAAe,UAAU,CAAA"}
+{"version":3,"file":"page.d.ts","sourceRoot":"","sources":["../../../../src/routes/(auth)/signup/page.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AASpC,eAAO,MAAM,OAAO,kBAAkB,CAAA;AAOtC,eAAO,MAAM,QAAQ,EAAE,QAA0B,CAAA;AAKjD,iBAAe,UAAU,CAAC,EAAE,YAAY,EAAE,EAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAA;CAAE,oDA8BpH;AAED,eAAe,UAAU,CAAA"}

package/dist/routes/(auth)/signup/page.js

@@ -10,10 +10,11 @@ const defaultMetadata = {
   description: "Create your account to start using our platform"
 };
 export const metadata = defaultMetadata;
-async function SignupPage() {
-  var _a, _b;
+async function SignupPage({ searchParams }) {
+  var _a, _b, _c;
   const registrationMode = ((_b = (_a = AUTH_CONFIG) == null ? void 0 : _a.registration) == null ? void 0 : _b.mode) ?? "open";
-  if (!resolveAuthMethods(AUTH_CONFIG).includes("email-password")) {
+  const invited = typeof ((_c = await searchParams) == null ? void 0 : _c.inviteToken) === "string";
+  if (!invited && !resolveAuthMethods(AUTH_CONFIG).includes("email-password")) {
     redirect("/login");
   }
   if (registrationMode === "invitation-only") {

package/dist/routes/_internal/area-access.js

@@ -2,7 +2,7 @@ import { jsx } from "react/jsx-runtime";
 import { Suspense } from "react";
 import { headers } from "next/headers";
 import { redirect } from "next/navigation";
-import { getRequestSession } from "@nextsparkjs/core/lib/auth/request-session";
+import { getAuthorizationRequestSession } from "@nextsparkjs/core/lib/auth/request-session";
 const AREA_ROLES = {
   superadmin: ["superadmin", "developer"],
   devtools: ["developer"]
@@ -16,7 +16,7 @@ export function loginPathFor(area, pathname) {
   return `/login?callbackUrl=${encodeURIComponent(back)}`;
 }
 async function requestSession() {
-  return { session: await getRequestSession(), pathname: (await headers()).get("x-pathname") };
+  return { session: await getAuthorizationRequestSession(), pathname: (await headers()).get("x-pathname") };
 }
 export async function requireAreaAccess(area) {
   var _a;

package/dist/routes/_internal/entity-permission-layout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity-permission-layout.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/entity-permission-layout.tsx"],"names":[],"mappings":"AAqDA,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CAC1B;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,EAC3C,MAAM,EACN,QAAQ,GACT,EAAE,2BAA2B,oDAiD7B"}
+{"version":3,"file":"entity-permission-layout.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/entity-permission-layout.tsx"],"names":[],"mappings":"AAqDA,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CAC1B;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,EAC3C,MAAM,EACN,QAAQ,GACT,EAAE,2BAA2B,oDAyC7B"}

package/dist/routes/_internal/entity-permission-layout.js

@@ -34,13 +34,6 @@ export async function EntityPermissionLayout({
   }
   const action = detectActionFromPathname(pathname, entity);
   const permission = `${entity}.${action}`;
-  console.log("[EntityPermissionLayout] Checking permission:", {
-    entity,
-    action,
-    permission,
-    userId,
-    teamId
-  });
   const hasPermission = await checkPermission(userId, teamId, permission);
   if (!hasPermission) {
     console.log("[EntityPermissionLayout] Permission denied, redirecting");

package/dist/routes/api/devtools/config/entities/route.js

@@ -1,4 +1,4 @@
-import { getTypedSession } from "@nextsparkjs/core/lib/auth";
+import { getAuthorizationSession } from "@nextsparkjs/core/lib/auth/authorization-session";
 import { NextResponse } from "next/server";
 import { getEntityRegistry } from "@nextsparkjs/core/lib/entities/queries";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
@@ -9,7 +9,7 @@ function isEntityConfig(entity) {
 export const GET = withRateLimitTier(async (request) => {
   var _a, _b;
   try {
-    const session = await getTypedSession(request.headers);
+    const session = await getAuthorizationSession(request.headers);
     if (!(session == null ? void 0 : session.user) || session.user.role !== "developer") {
       return NextResponse.json(
         {

package/dist/routes/api/devtools/config/theme/route.js

@@ -1,11 +1,11 @@
-import { getTypedSession } from "@nextsparkjs/core/lib/auth";
+import { getAuthorizationSession } from "@nextsparkjs/core/lib/auth/authorization-session";
 import { NextResponse } from "next/server";
 import { ThemeService } from "@nextsparkjs/core/lib/services/theme.service";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
 import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const GET = withRateLimitTier(async (request) => {
   try {
-    const session = await getTypedSession(request.headers);
+    const session = await getAuthorizationSession(request.headers);
     if (!(session == null ? void 0 : session.user) || session.user.role !== "developer") {
       return NextResponse.json(
         {