@open-mercato/cli 0.6.6-develop.6460.1.f94c74174c → 0.6.6-develop.6471.1.9ab5bdd79a

package/dist/agentic/guides/modules/directory.md

@@ -1,5 +1,5 @@
 # directory — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/entities.md

@@ -1,5 +1,5 @@
 # entities — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/events.md

@@ -1,5 +1,5 @@
 # events — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/feature_toggles.md

@@ -1,5 +1,5 @@
 # feature_toggles — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/gateway_stripe.md

@@ -1,5 +1,5 @@
 # gateway_stripe — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/generators.md

@@ -1,5 +1,5 @@
 # generators — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/inbox_ops.md

@@ -1,5 +1,5 @@
 # inbox_ops — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/integrations.md

@@ -1,5 +1,5 @@
 # integrations — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/messages.md

@@ -1,5 +1,5 @@
 # messages — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/notifications.md

@@ -1,5 +1,5 @@
 # notifications — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/onboarding.md

@@ -1,5 +1,5 @@
 # onboarding — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/payment_gateways.md

@@ -1,5 +1,5 @@
 # payment_gateways — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/perspectives.md

@@ -1,5 +1,5 @@
 # perspectives — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/planner.md

@@ -1,5 +1,5 @@
 # planner — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/portal.md

@@ -1,5 +1,5 @@
 # portal — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/progress.md

@@ -1,5 +1,5 @@
 # progress — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/query_index.md

@@ -1,5 +1,5 @@
 # query_index — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/record_locks.md

@@ -1,5 +1,5 @@
 # record_locks — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/resources.md

@@ -1,5 +1,5 @@
 # resources — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/sales.md

@@ -1,5 +1,5 @@
 # sales — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/scheduler.md

@@ -1,5 +1,5 @@
 # scheduler — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/search.md

@@ -1,5 +1,5 @@
 # search — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/security.md

@@ -1,5 +1,5 @@
 # security — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/shipping_carriers.md

@@ -1,5 +1,5 @@
 # shipping_carriers — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/sso.md

@@ -1,5 +1,5 @@
 # sso — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/staff.md

@@ -1,5 +1,5 @@
 # staff — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/storage_s3.md

@@ -1,5 +1,5 @@
 # storage_s3 — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/sync_akeneo.md

@@ -1,5 +1,5 @@
 # sync_akeneo — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/sync_excel.md

@@ -1,5 +1,5 @@
 # sync_excel — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/system_status_overlays.md

@@ -1,5 +1,5 @@
 # system_status_overlays — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/translations.md

@@ -1,5 +1,5 @@
 # translations — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/webhooks.md

@@ -1,5 +1,5 @@
 # webhooks — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/agentic/guides/modules/workflows.md

@@ -1,5 +1,5 @@
 # workflows — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.6-develop.6460.1.f94c74174c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.6-develop.6471.1.9ab5bdd79a — R1 staleness stamp -->
 
 ## Entities
 

package/dist/lib/testing/integration.js

@@ -165,6 +165,7 @@ const FOLDER_TO_CATEGORY_CODE = {
   api: "API",
   integration: "INT"
 };
+const BACKEND_BROWSER_AUTH_REDIRECT_LIMIT = 6;
 const BUILD_CACHE_STATE_VERSION = 2;
 const BUILD_CACHE_ENV_KEYS = [
   "NODE_ENV",
@@ -1064,17 +1065,195 @@ async function probeAuthenticatedApi(baseUrl) {
     };
   }
 }
+function splitSetCookieHeader(header) {
+  return header.split(/,(?=\s*[^;,\s=]+=)/).map((value) => value.trim()).filter((value) => value.length > 0);
+}
+function getSetCookieHeaders(headers) {
+  if (!headers) {
+    return [];
+  }
+  const setCookieGetter = headers.getSetCookie;
+  if (typeof setCookieGetter === "function") {
+    return setCookieGetter.call(headers).map((value) => value.trim()).filter((value) => value.length > 0);
+  }
+  const combined = headers.get("set-cookie");
+  return combined ? splitSetCookieHeader(combined) : [];
+}
+function parseSetCookiePair(header) {
+  const pair = header.split(";", 1)[0]?.trim();
+  if (!pair) {
+    return null;
+  }
+  const equalsIndex = pair.indexOf("=");
+  if (equalsIndex <= 0) {
+    return null;
+  }
+  const name = pair.slice(0, equalsIndex).trim();
+  if (!name) {
+    return null;
+  }
+  return {
+    name,
+    value: pair.slice(equalsIndex + 1)
+  };
+}
+function addSetCookieHeadersToJar(jar, headers) {
+  for (const setCookieHeader of getSetCookieHeaders(headers)) {
+    const pair = parseSetCookiePair(setCookieHeader);
+    if (pair) {
+      jar.set(pair.name, pair.value);
+    }
+  }
+}
+function serializeCookieJar(jar) {
+  return [...jar.entries()].map(([name, value]) => `${name}=${value}`).join("; ");
+}
+function formatCookieNames(jar) {
+  const names = [...jar.keys()].sort((left, right) => left.localeCompare(right));
+  return names.length > 0 ? names.join(", ") : "none";
+}
+function toReadinessPath(url) {
+  return url.pathname || "/";
+}
+function resolveReadinessRedirect(baseUrl, currentUrl, rawLocation) {
+  const location = rawLocation?.trim();
+  if (!location) {
+    return { error: "missing Location header" };
+  }
+  if (location.startsWith("//")) {
+    return { error: "protocol-relative redirect" };
+  }
+  let nextUrl;
+  try {
+    nextUrl = new URL(location, currentUrl);
+  } catch {
+    return { error: "invalid Location header" };
+  }
+  if (nextUrl.origin !== baseUrl.origin) {
+    return { error: "cross-origin redirect" };
+  }
+  return {
+    url: nextUrl,
+    path: toReadinessPath(nextUrl)
+  };
+}
+async function probeBackendBrowserAuth(baseUrl) {
+  try {
+    const base = new URL(baseUrl);
+    const form = new URLSearchParams();
+    form.set("email", "admin@acme.com");
+    form.set("password", "secret");
+    const loginResponse = await probeFetch(`${baseUrl}/api/auth/login`, {
+      method: "POST",
+      redirect: "manual",
+      headers: {
+        "Content-Type": "application/x-www-form-urlencoded"
+      },
+      body: form.toString()
+    });
+    if (!loginResponse.ok) {
+      return {
+        loginStatus: loginResponse.status,
+        backendStatus: null,
+        healthy: false,
+        detail: `Backend browser auth login returned ${loginResponse.status}`
+      };
+    }
+    const cookieJar = /* @__PURE__ */ new Map();
+    addSetCookieHeadersToJar(cookieJar, loginResponse.headers);
+    if (cookieJar.size === 0) {
+      return {
+        loginStatus: loginResponse.status,
+        backendStatus: null,
+        healthy: false,
+        detail: "Backend browser auth login returned no cookies"
+      };
+    }
+    let currentUrl = new URL("/backend", base);
+    let backendStatus = null;
+    const visitedPaths = /* @__PURE__ */ new Set();
+    const trace = [];
+    for (let redirectCount = 0; redirectCount <= BACKEND_BROWSER_AUTH_REDIRECT_LIMIT; redirectCount += 1) {
+      const currentPath = toReadinessPath(currentUrl);
+      visitedPaths.add(currentPath);
+      const response = await probeFetch(currentUrl.toString(), {
+        method: "GET",
+        redirect: "manual",
+        headers: {
+          Cookie: serializeCookieJar(cookieJar)
+        }
+      });
+      backendStatus = response.status;
+      addSetCookieHeadersToJar(cookieJar, response.headers);
+      const location = response.headers?.get("location") ?? null;
+      const traceRedirect = location ? resolveReadinessRedirect(base, currentUrl, location) : null;
+      const statusAndLocation = traceRedirect && !("error" in traceRedirect) ? `${currentPath} ${response.status} -> ${traceRedirect.path}` : `${currentPath} ${response.status}${location ? " -> [unsafe]" : ""}`;
+      trace.push(statusAndLocation);
+      if (response.status === 200 && currentPath === "/backend") {
+        return {
+          loginStatus: loginResponse.status,
+          backendStatus,
+          healthy: true,
+          detail: `Cookie-backed GET /backend returned 200 (cookies: ${formatCookieNames(cookieJar)})`
+        };
+      }
+      if (response.status < 300 || response.status >= 400) {
+        return {
+          loginStatus: loginResponse.status,
+          backendStatus,
+          healthy: false,
+          detail: `Cookie-backed GET ${currentPath} returned ${response.status} (cookies: ${formatCookieNames(cookieJar)}; trace: ${trace.join(" | ")})`
+        };
+      }
+      const redirect = traceRedirect ?? resolveReadinessRedirect(base, currentUrl, location);
+      if ("error" in redirect) {
+        return {
+          loginStatus: loginResponse.status,
+          backendStatus,
+          healthy: false,
+          detail: `Backend browser auth probe followed unsafe redirect: ${redirect.error} (cookies: ${formatCookieNames(cookieJar)}; trace: ${trace.join(" | ")})`
+        };
+      }
+      if (visitedPaths.has(redirect.path)) {
+        trace.push(redirect.path);
+        return {
+          loginStatus: loginResponse.status,
+          backendStatus,
+          healthy: false,
+          detail: `Backend browser auth probe detected redirect loop: ${trace.join(" | ")} (cookies: ${formatCookieNames(cookieJar)})`
+        };
+      }
+      currentUrl = redirect.url;
+    }
+    return {
+      loginStatus: loginResponse.status,
+      backendStatus,
+      healthy: false,
+      detail: `Backend browser auth probe exceeded ${BACKEND_BROWSER_AUTH_REDIRECT_LIMIT} redirects (cookies: ${formatCookieNames(cookieJar)}; trace: ${trace.join(" | ")})`
+    };
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return {
+      loginStatus: null,
+      backendStatus: null,
+      healthy: false,
+      detail: `Backend browser auth probe failed: ${message}`
+    };
+  }
+}
 async function probeApplicationReadiness(baseUrl) {
-  const [frontend, backend, authenticated] = await Promise.all([
+  const [frontend, backend, authenticated, backendBrowserAuth] = await Promise.all([
     probeLoginPage(baseUrl),
     probeBackendLoginEndpoint(baseUrl),
-    probeAuthenticatedApi(baseUrl)
+    probeAuthenticatedApi(baseUrl),
+    probeBackendBrowserAuth(baseUrl)
   ]);
   return {
-    ready: frontend.healthy && backend.healthy && authenticated.healthy,
+    ready: frontend.healthy && backend.healthy && authenticated.healthy && backendBrowserAuth.healthy,
     frontend,
     backend,
-    authenticated
+    authenticated,
+    backendBrowserAuth
   };
 }
 async function acquireEphemeralEnvironmentLock(logPrefix) {
@@ -1421,8 +1600,9 @@ async function waitForApplicationReadiness(baseUrl, appProcess, options) {
   const lastFrontendDetail = lastProbe?.frontend.detail ?? "GET /login was never observed";
   const lastBackendDetail = lastProbe?.backend.detail ?? "POST /api/auth/login was never observed";
   const lastAuthenticatedDetail = lastProbe?.authenticated.detail ?? "Authenticated API probe was never observed";
+  const lastBackendBrowserAuthDetail = lastProbe?.backendBrowserAuth.detail ?? "Backend browser auth probe was never observed";
   throw new Error(
-    `Application did not become ready within ${options.timeoutMs / 1e3} seconds. Last probe: ${lastFrontendDetail}; ${lastBackendDetail}; ${lastAuthenticatedDetail}`
+    `Application did not become ready within ${options.timeoutMs / 1e3} seconds. Last probe: ${lastFrontendDetail}; ${lastBackendDetail}; ${lastAuthenticatedDetail}; ${lastBackendBrowserAuthDetail}`
   );
 }
 function parseOptions(rawArgs) {