@open-mercato/cli 0.6.7-develop.6795.1.8a3f27921c → 0.6.7-develop.6814.1.0627c7e9f1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (95) hide show
  1. package/.turbo/turbo-build.log +1 -1
  2. package/build.mjs +1 -1
  3. package/dist/agentic/guides/module-facts.json +90266 -20749
  4. package/dist/agentic/guides/modules/ai_assistant.md +170 -60
  5. package/dist/agentic/guides/modules/api_docs.md +26 -1
  6. package/dist/agentic/guides/modules/api_keys.md +57 -17
  7. package/dist/agentic/guides/modules/attachments.md +72 -19
  8. package/dist/agentic/guides/modules/audit_logs.md +95 -29
  9. package/dist/agentic/guides/modules/auth.md +218 -83
  10. package/dist/agentic/guides/modules/business_rules.md +108 -34
  11. package/dist/agentic/guides/modules/catalog.md +386 -157
  12. package/dist/agentic/guides/modules/channel_gmail.md +55 -6
  13. package/dist/agentic/guides/modules/channel_imap.md +55 -6
  14. package/dist/agentic/guides/modules/checkout.md +254 -129
  15. package/dist/agentic/guides/modules/communication_channels.md +280 -109
  16. package/dist/agentic/guides/modules/configs.md +68 -11
  17. package/dist/agentic/guides/modules/content.md +26 -1
  18. package/dist/agentic/guides/modules/currencies.md +109 -44
  19. package/dist/agentic/guides/modules/customer_accounts.md +350 -156
  20. package/dist/agentic/guides/modules/customers.md +642 -294
  21. package/dist/agentic/guides/modules/dashboards.md +122 -28
  22. package/dist/agentic/guides/modules/data_sync.md +117 -37
  23. package/dist/agentic/guides/modules/design_system.md +36 -2
  24. package/dist/agentic/guides/modules/dictionaries.md +78 -20
  25. package/dist/agentic/guides/modules/directory.md +110 -45
  26. package/dist/agentic/guides/modules/entities.md +95 -38
  27. package/dist/agentic/guides/modules/events.md +31 -1
  28. package/dist/agentic/guides/modules/feature_toggles.md +79 -12
  29. package/dist/agentic/guides/modules/gateway_stripe.md +61 -6
  30. package/dist/agentic/guides/modules/generators.md +17 -1
  31. package/dist/agentic/guides/modules/inbox_ops.md +171 -60
  32. package/dist/agentic/guides/modules/integrations.md +116 -30
  33. package/dist/agentic/guides/modules/messages.md +187 -66
  34. package/dist/agentic/guides/modules/notifications.md +64 -9
  35. package/dist/agentic/guides/modules/onboarding.md +47 -8
  36. package/dist/agentic/guides/modules/payment_gateways.md +133 -48
  37. package/dist/agentic/guides/modules/perspectives.md +50 -12
  38. package/dist/agentic/guides/modules/planner.md +102 -32
  39. package/dist/agentic/guides/modules/portal.md +58 -15
  40. package/dist/agentic/guides/modules/progress.md +78 -30
  41. package/dist/agentic/guides/modules/query_index.md +115 -53
  42. package/dist/agentic/guides/modules/record_locks.md +178 -59
  43. package/dist/agentic/guides/modules/resources.md +155 -78
  44. package/dist/agentic/guides/modules/sales.md +620 -257
  45. package/dist/agentic/guides/modules/scheduler.md +95 -19
  46. package/dist/agentic/guides/modules/search.md +124 -20
  47. package/dist/agentic/guides/modules/security.md +251 -105
  48. package/dist/agentic/guides/modules/shipping_carriers.md +106 -37
  49. package/dist/agentic/guides/modules/sso.md +121 -49
  50. package/dist/agentic/guides/modules/staff.md +314 -126
  51. package/dist/agentic/guides/modules/storage_s3.md +55 -6
  52. package/dist/agentic/guides/modules/sync_akeneo.md +54 -4
  53. package/dist/agentic/guides/modules/sync_excel.md +49 -11
  54. package/dist/agentic/guides/modules/system_status_overlays.md +33 -5
  55. package/dist/agentic/guides/modules/translations.md +76 -21
  56. package/dist/agentic/guides/modules/webhooks.md +166 -82
  57. package/dist/agentic/guides/modules/wms.md +383 -223
  58. package/dist/agentic/guides/modules/workflows.md +248 -112
  59. package/dist/agentic/guides/upstream/AGENTS.md +1 -1
  60. package/dist/agentic/guides/upstream/manifest.json +2 -2
  61. package/dist/agentic/shared/AGENTS.md.template +6 -5
  62. package/dist/agentic/shared/ai/harness/cases.json +3 -0
  63. package/dist/agentic/shared/ai/lessons/_template.md +16 -0
  64. package/dist/agentic/shared/ai/lessons.md +26 -3
  65. package/dist/agentic/shared/ai/skills/om-evolve-harness/SKILL.md +7 -6
  66. package/dist/agentic/shared/ai/skills/om-system-extension/references/unified-overrides.md +4 -2
  67. package/dist/agentic/shared/scripts/check-lessons.mjs +178 -0
  68. package/dist/lib/agentic-setup.js +2 -2
  69. package/dist/lib/agentic-setup.js.map +2 -2
  70. package/dist/lib/generators/module-extension-facts.js +652 -24
  71. package/dist/lib/generators/module-extension-facts.js.map +3 -3
  72. package/dist/lib/generators/module-fact-sources.js +70 -0
  73. package/dist/lib/generators/module-fact-sources.js.map +7 -0
  74. package/dist/lib/generators/module-facts.js +1001 -26
  75. package/dist/lib/generators/module-facts.js.map +3 -3
  76. package/dist/lib/generators/module-override-targets.js +688 -0
  77. package/dist/lib/generators/module-override-targets.js.map +7 -0
  78. package/dist/lib/testing/integration.js +5 -0
  79. package/dist/lib/testing/integration.js.map +2 -2
  80. package/package.json +5 -5
  81. package/src/lib/__tests__/agentic-setup.ownership.test.ts +6 -0
  82. package/src/lib/agentic-setup.ts +6 -2
  83. package/src/lib/generators/__tests__/activation-adapter-coverage.test.ts +92 -0
  84. package/src/lib/generators/__tests__/module-extension-activations.test.ts +762 -0
  85. package/src/lib/generators/__tests__/module-extension-facts.test.ts +4 -2
  86. package/src/lib/generators/__tests__/module-facts.bc-guard.test.ts +37 -3
  87. package/src/lib/generators/__tests__/module-facts.owned-contracts.test.ts +561 -0
  88. package/src/lib/generators/__tests__/module-override-targets.roundtrip.test.ts +149 -0
  89. package/src/lib/generators/__tests__/module-override-targets.test.ts +304 -0
  90. package/src/lib/generators/module-extension-facts.ts +923 -27
  91. package/src/lib/generators/module-fact-sources.ts +108 -0
  92. package/src/lib/generators/module-facts.ts +1360 -25
  93. package/src/lib/generators/module-override-targets.ts +863 -0
  94. package/src/lib/testing/__tests__/integration.test.ts +4 -0
  95. package/src/lib/testing/integration.ts +5 -0
package/dist/agentic/guides/modules/security.md CHANGED
@@ -1,46 +1,54 @@
1
1
  # security — module facts (generated, do not edit)
2
- <!-- generated from @open-mercato/enterprise 0.6.7-develop.6795.1.8a3f27921c; core 0.6.7-develop.6795.1.8a3f27921c — R1 staleness stamp -->
2
+ <!-- generated from @open-mercato/enterprise 0.6.7-develop.6814.1.0627c7e9f1; core 0.6.7-develop.6814.1.0627c7e9f1 — R1 staleness stamp -->
3
3
  Source root: [node_modules/@open-mercato/enterprise/src/modules/security](../../../node_modules/@open-mercato/enterprise/src/modules/security)
4
4
 
5
5
  ## Entities
6
6
 
7
- | Entity ID | Class | Table | Editable | CustomFields |
8
- |---|---|---|---|---|
9
- | security:user_mfa_method | UserMfaMethod | user_mfa_methods | yes | no |
10
- | security:mfa_recovery_code | MfaRecoveryCode | mfa_recovery_codes | no | no |
11
- | security:mfa_enforcement_policy | MfaEnforcementPolicy | mfa_enforcement_policies | yes | no |
12
- | security:sudo_challenge_config | SudoChallengeConfig | sudo_challenge_configs | yes | no |
13
- | security:sudo_session | SudoSession | sudo_sessions | no | no |
14
- | security:mfa_challenge | MfaChallenge | mfa_challenges | no | no |
7
+ | Entity ID | Class | Table | Editable | CustomFields | Source |
8
+ |---|---|---|---|---|---|
9
+ | security:user_mfa_method | UserMfaMethod | user_mfa_methods | yes | no | [node_modules/@open-mercato/enterprise/src/modules/security/data/entities.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/data/entities.ts) |
10
+ | security:mfa_recovery_code | MfaRecoveryCode | mfa_recovery_codes | no | no | [node_modules/@open-mercato/enterprise/src/modules/security/data/entities.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/data/entities.ts) |
11
+ | security:mfa_enforcement_policy | MfaEnforcementPolicy | mfa_enforcement_policies | yes | no | [node_modules/@open-mercato/enterprise/src/modules/security/data/entities.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/data/entities.ts) |
12
+ | security:sudo_challenge_config | SudoChallengeConfig | sudo_challenge_configs | yes | no | [node_modules/@open-mercato/enterprise/src/modules/security/data/entities.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/data/entities.ts) |
13
+ | security:sudo_session | SudoSession | sudo_sessions | no | no | [node_modules/@open-mercato/enterprise/src/modules/security/data/entities.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/data/entities.ts) |
14
+ | security:mfa_challenge | MfaChallenge | mfa_challenges | no | no | [node_modules/@open-mercato/enterprise/src/modules/security/data/entities.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/data/entities.ts) |
15
15
 
16
16
  ## Events (20)
17
17
 
18
- | ID | Category | Entity | Browser transport |
19
- |---|---|---|---|
20
- | security.password.changed | lifecycle | password | — |
21
- | security.password.notification_requested | lifecycle | password | — |
22
- | security.mfa.method.added | lifecycle | — | — |
23
- | security.mfa.method.removed | lifecycle | — | — |
24
- | security.mfa.enrolled | lifecycle | — | — |
25
- | security.mfa.removed | lifecycle | — | — |
26
- | security.mfa.verified | lifecycle | — | — |
27
- | security.mfa.otp.sent | lifecycle | — | — |
28
- | security.mfa.reset | lifecycle | — | — |
29
- | security.recovery.regenerated | lifecycle | — | — |
30
- | security.recovery.used | lifecycle | — | — |
31
- | security.enforcement.created | lifecycle | — | — |
32
- | security.enforcement.updated | lifecycle | — | — |
33
- | security.enforcement.deadline_reminder_requested | lifecycle | — | — |
34
- | security.sudo.challenged | lifecycle | — | — |
35
- | security.sudo.verified | lifecycle | — | — |
36
- | security.sudo.failed | lifecycle | — | — |
37
- | security.sudo.config.created | lifecycle | — | — |
38
- | security.sudo.config.updated | lifecycle | — | — |
39
- | security.sudo.config.deleted | lifecycle | — | — |
18
+ | ID | Category | Entity | Browser transport | Source |
19
+ |---|---|---|---|---|
20
+ | security.password.changed | lifecycle | password | — | [node_modules/@open-mercato/enterprise/src/modules/security/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
21
+ | security.password.notification_requested | lifecycle | password | — | [node_modules/@open-mercato/enterprise/src/modules/security/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
22
+ | security.mfa.method.added | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/security/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
23
+ | security.mfa.method.removed | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/security/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
24
+ | security.mfa.enrolled | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/security/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
25
+ | security.mfa.removed | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/security/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
26
+ | security.mfa.verified | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/security/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
27
+ | security.mfa.otp.sent | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/security/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
28
+ | security.mfa.reset | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/security/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
29
+ | security.recovery.regenerated | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/security/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
30
+ | security.recovery.used | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/security/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
31
+ | security.enforcement.created | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/security/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
32
+ | security.enforcement.updated | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/security/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
33
+ | security.enforcement.deadline_reminder_requested | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/security/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
34
+ | security.sudo.challenged | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/security/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
35
+ | security.sudo.verified | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/security/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
36
+ | security.sudo.failed | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/security/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
37
+ | security.sudo.config.created | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/security/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
38
+ | security.sudo.config.updated | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/security/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
39
+ | security.sudo.config.deleted | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/security/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
40
40
 
41
41
  ## ACL features (7)
42
42
 
43
- security.profile.view · security.profile.password · security.profile.manage · security.mfa.manage · security.admin.manage · security.sudo.view · security.sudo.manage
43
+ | Feature | Source |
44
+ |---|---|
45
+ | security.profile.view | [node_modules/@open-mercato/enterprise/src/modules/security/acl.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
46
+ | security.profile.password | [node_modules/@open-mercato/enterprise/src/modules/security/acl.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
47
+ | security.profile.manage | [node_modules/@open-mercato/enterprise/src/modules/security/acl.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
48
+ | security.mfa.manage | [node_modules/@open-mercato/enterprise/src/modules/security/acl.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
49
+ | security.admin.manage | [node_modules/@open-mercato/enterprise/src/modules/security/acl.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
50
+ | security.sudo.view | [node_modules/@open-mercato/enterprise/src/modules/security/acl.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
51
+ | security.sudo.manage | [node_modules/@open-mercato/enterprise/src/modules/security/acl.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
44
52
 
45
53
  ## API routes
46
54
 
@@ -69,7 +77,14 @@ _none_
69
77
 
70
78
  ## DI service tokens
71
79
 
72
- passwordService · mfaService · mfaVerificationService · mfaEnforcementService · mfaAdminService · sudoChallengeService
80
+ | Token | Source |
81
+ |---|---|
82
+ | passwordService | [node_modules/@open-mercato/enterprise/src/modules/security/di.ts:30](../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L30) |
83
+ | mfaService | [node_modules/@open-mercato/enterprise/src/modules/security/di.ts:31](../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L31) |
84
+ | mfaVerificationService | [node_modules/@open-mercato/enterprise/src/modules/security/di.ts:32](../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L32) |
85
+ | mfaEnforcementService | [node_modules/@open-mercato/enterprise/src/modules/security/di.ts:33](../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L33) |
86
+ | mfaAdminService | [node_modules/@open-mercato/enterprise/src/modules/security/di.ts:34](../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L34) |
87
+ | sudoChallengeService | [node_modules/@open-mercato/enterprise/src/modules/security/di.ts:35](../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L35) |
73
88
 
74
89
  ## Search entities
75
90
 
@@ -82,80 +97,105 @@ _none_
82
97
 
83
98
  ## UMES hosts
84
99
 
85
- | ID / pattern | Family | Supports | Context | Stability |
86
- |---|---|---|---|---|
87
- | data-table:security.enforcement.list | data-table | component-replacement | — | FROZEN |
88
- | data-table:security.enforcement.list:bulk-actions | data-table | bulk-action | — | FROZEN |
89
- | data-table:security.enforcement.list:columns | data-table | column-widget | — | FROZEN |
90
- | data-table:security.enforcement.list:filters | data-table | filter-widget | — | FROZEN |
91
- | data-table:security.enforcement.list:footer | data-table | render-widget | — | FROZEN |
92
- | data-table:security.enforcement.list:header | data-table | render-widget | — | FROZEN |
93
- | data-table:security.enforcement.list:row-actions | data-table | row-action | — | FROZEN |
94
- | data-table:security.enforcement.list:search-trailing | data-table | render-widget | — | FROZEN |
95
- | data-table:security.enforcement.list:toolbar | data-table | toolbar-widget | — | FROZEN |
96
- | data-table:security.sudo.list | data-table | component-replacement | — | FROZEN |
97
- | data-table:security.sudo.list:bulk-actions | data-table | bulk-action | — | FROZEN |
98
- | data-table:security.sudo.list:columns | data-table | column-widget | — | FROZEN |
99
- | data-table:security.sudo.list:filters | data-table | filter-widget | — | FROZEN |
100
- | data-table:security.sudo.list:footer | data-table | render-widget | — | FROZEN |
101
- | data-table:security.sudo.list:header | data-table | render-widget | — | FROZEN |
102
- | data-table:security.sudo.list:row-actions | data-table | row-action | — | FROZEN |
103
- | data-table:security.sudo.list:search-trailing | data-table | render-widget | — | FROZEN |
104
- | data-table:security.sudo.list:toolbar | data-table | toolbar-widget | — | FROZEN |
105
- | data-table:security.users.list | data-table | component-replacement | — | FROZEN |
106
- | data-table:security.users.list:bulk-actions | data-table | bulk-action | — | FROZEN |
107
- | data-table:security.users.list:columns | data-table | column-widget | — | FROZEN |
108
- | data-table:security.users.list:filters | data-table | filter-widget | — | FROZEN |
109
- | data-table:security.users.list:footer | data-table | render-widget | — | FROZEN |
110
- | data-table:security.users.list:header | data-table | render-widget | — | FROZEN |
111
- | data-table:security.users.list:row-actions | data-table | row-action | — | FROZEN |
112
- | data-table:security.users.list:search-trailing | data-table | render-widget | — | FROZEN |
113
- | data-table:security.users.list:toolbar | data-table | toolbar-widget | — | FROZEN |
114
- | security.profile.sections | detail | render-widget | — | FROZEN |
115
- | security.profile.sidebar | detail | render-widget | — | FROZEN |
116
- | security:mfa_challenge | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE |
117
- | security:mfa_enforcement_policy | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE |
118
- | security:mfa_recovery_code | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE |
119
- | security:sudo_challenge_config | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE |
120
- | security:sudo_session | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE |
121
- | security:user_mfa_method | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE |
122
- | security.enforcement.created | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
123
- | security.enforcement.deadline_reminder_requested | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
124
- | security.enforcement.updated | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
125
- | security.mfa.enrolled | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
126
- | security.mfa.method.added | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
127
- | security.mfa.method.removed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
128
- | security.mfa.otp.sent | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
129
- | security.mfa.removed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
130
- | security.mfa.reset | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
131
- | security.mfa.verified | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
132
- | security.password.changed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
133
- | security.password.notification_requested | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
134
- | security.recovery.regenerated | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
135
- | security.recovery.used | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
136
- | security.sudo.challenged | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
137
- | security.sudo.config.created | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
138
- | security.sudo.config.deleted | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
139
- | security.sudo.config.updated | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
140
- | security.sudo.failed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
141
- | security.sudo.verified | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
100
+ | ID / pattern | Family | Supports | Context | Stability | Source |
101
+ |---|---|---|---|---|---|
102
+ | data-table:security.enforcement.list | data-table | component-replacement | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
103
+ | data-table:security.enforcement.list:bulk-actions | data-table | bulk-action | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
104
+ | data-table:security.enforcement.list:columns | data-table | column-widget | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
105
+ | data-table:security.enforcement.list:filters | data-table | filter-widget | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
106
+ | data-table:security.enforcement.list:footer | data-table | render-widget | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
107
+ | data-table:security.enforcement.list:header | data-table | render-widget | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
108
+ | data-table:security.enforcement.list:row-actions | data-table | row-action | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
109
+ | data-table:security.enforcement.list:search-trailing | data-table | render-widget | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
110
+ | data-table:security.enforcement.list:toolbar | data-table | toolbar-widget | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
111
+ | data-table:security.sudo.list | data-table | component-replacement | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
112
+ | data-table:security.sudo.list:bulk-actions | data-table | bulk-action | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
113
+ | data-table:security.sudo.list:columns | data-table | column-widget | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
114
+ | data-table:security.sudo.list:filters | data-table | filter-widget | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
115
+ | data-table:security.sudo.list:footer | data-table | render-widget | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
116
+ | data-table:security.sudo.list:header | data-table | render-widget | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
117
+ | data-table:security.sudo.list:row-actions | data-table | row-action | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
118
+ | data-table:security.sudo.list:search-trailing | data-table | render-widget | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
119
+ | data-table:security.sudo.list:toolbar | data-table | toolbar-widget | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
120
+ | data-table:security.users.list | data-table | component-replacement | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
121
+ | data-table:security.users.list:bulk-actions | data-table | bulk-action | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
122
+ | data-table:security.users.list:columns | data-table | column-widget | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
123
+ | data-table:security.users.list:filters | data-table | filter-widget | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
124
+ | data-table:security.users.list:footer | data-table | render-widget | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
125
+ | data-table:security.users.list:header | data-table | render-widget | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
126
+ | data-table:security.users.list:row-actions | data-table | row-action | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
127
+ | data-table:security.users.list:search-trailing | data-table | render-widget | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
128
+ | data-table:security.users.list:toolbar | data-table | toolbar-widget | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
129
+ | security.profile.sections | detail | render-widget | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
130
+ | security.profile.sidebar | detail | render-widget | — | FROZEN | [node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
131
+ | security:mfa_challenge | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:security:mfa_challenge |
132
+ | security:mfa_enforcement_policy | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:security:mfa_enforcement_policy |
133
+ | security:mfa_recovery_code | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:security:mfa_recovery_code |
134
+ | security:sudo_challenge_config | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:security:sudo_challenge_config |
135
+ | security:sudo_session | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:security:sudo_session |
136
+ | security:user_mfa_method | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:security:user_mfa_method |
137
+ | security.enforcement.created | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.enforcement.created |
138
+ | security.enforcement.deadline_reminder_requested | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.enforcement.deadline_reminder_requested |
139
+ | security.enforcement.updated | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.enforcement.updated |
140
+ | security.mfa.enrolled | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.mfa.enrolled |
141
+ | security.mfa.method.added | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.mfa.method.added |
142
+ | security.mfa.method.removed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.mfa.method.removed |
143
+ | security.mfa.otp.sent | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.mfa.otp.sent |
144
+ | security.mfa.removed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.mfa.removed |
145
+ | security.mfa.reset | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.mfa.reset |
146
+ | security.mfa.verified | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.mfa.verified |
147
+ | security.password.changed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.password.changed |
148
+ | security.password.notification_requested | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.password.notification_requested |
149
+ | security.recovery.regenerated | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.recovery.regenerated |
150
+ | security.recovery.used | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.recovery.used |
151
+ | security.sudo.challenged | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.sudo.challenged |
152
+ | security.sudo.config.created | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.sudo.config.created |
153
+ | security.sudo.config.deleted | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.sudo.config.deleted |
154
+ | security.sudo.config.updated | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.sudo.config.updated |
155
+ | security.sudo.failed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.sudo.failed |
156
+ | security.sudo.verified | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.sudo.verified |
142
157
 
143
158
  ## UMES contributions
144
159
 
145
- | ID | Kind | Target | Phase / operations | Contract | Resolution |
146
- |---|---|---|---|---|---|
147
- | security.auth.login.mfa-challenge | api-interceptor | auth/login | after | activation=crud-pipeline; failurePosture=fallback; methods=POST; phases=after; route=auth/login; timeoutMs=2000 | fact-ref |
148
- | security.block-legacy-self-password-change | command-interceptor | auth.users.update | before-execute | phases=before-execute; targetCommand=auth.users.update | fact-ref |
149
- | security.component-override.0:section:auth.login.form | component-override | section:auth.login.form | — | handle=section:auth.login.form; mode=replace; propsContract=component-props-schema | optional-external |
150
- | notification:security.mfa.enforcement_deadline | specialized-registry | security.mfa.enforcement_deadline | — | registry=notification; registryId=security.mfa.enforcement_deadline; specialistRoute=notifications | fact-ref |
151
- | notification:security.mfa.enrolled | specialized-registry | security.mfa.enrolled | — | registry=notification; registryId=security.mfa.enrolled; specialistRoute=notifications | fact-ref |
152
- | notification:security.mfa.reset | specialized-registry | security.mfa.reset | — | registry=notification; registryId=security.mfa.reset; specialistRoute=notifications | fact-ref |
153
- | notification:security.password.changed | specialized-registry | security.password.changed | — | registry=notification; registryId=security.password.changed; specialistRoute=notifications | fact-ref |
154
- | security:enforcement-deadline-notification | subscriber | security.enforcement.created | async-delivery | event=security.enforcement.created; persistent=true; subscriberId=security:enforcement-deadline-notification; sync=false | fact-ref |
155
- | security:enforcement-updated-notification | subscriber | security.enforcement.updated | async-delivery | event=security.enforcement.updated; persistent=true; subscriberId=security:enforcement-updated-notification; sync=false | fact-ref |
156
- | security:mfa-enrolled-notification | subscriber | security.mfa.enrolled | async-delivery | event=security.mfa.enrolled; persistent=true; subscriberId=security:mfa-enrolled-notification; sync=false | fact-ref |
157
- | security:mfa-reset-notification | subscriber | security.mfa.reset | async-delivery | event=security.mfa.reset; persistent=true; subscriberId=security:mfa-reset-notification; sync=false | fact-ref |
158
- | security:password-change-notification | subscriber | security.password.notification_requested | async-delivery | event=security.password.notification_requested; persistent=true; subscriberId=security:password-change-notification; sync=false | fact-ref |
160
+ | ID | Kind | Target | Phase / operations | Contract | Resolution | Source |
161
+ |---|---|---|---|---|---|---|
162
+ | security.auth.login.mfa-challenge | api-interceptor | auth/login | after | activation=crud-pipeline; failurePosture=fallback; methods=POST; phases=after; route=auth/login; timeoutMs=2000 | fact-ref | [node_modules/@open-mercato/enterprise/src/modules/security/api/interceptors.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/api/interceptors.ts) |
163
+ | security.block-legacy-self-password-change | command-interceptor | auth.users.update | before-execute | phases=before-execute; targetCommand=auth.users.update | fact-ref | [node_modules/@open-mercato/enterprise/src/modules/security/commands/interceptors.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/interceptors.ts) |
164
+ | security.component-override.0:section:auth.login.form | component-override | section:auth.login.form | — | handle=section:auth.login.form; mode=replace; propsContract=component-props-schema | optional-external | [node_modules/@open-mercato/enterprise/src/modules/security/widgets/components.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/widgets/components.ts) |
165
+ | notification:security.mfa.enforcement_deadline | specialized-registry | security.mfa.enforcement_deadline | — | registry=notification; registryId=security.mfa.enforcement_deadline; specialistRoute=notifications | fact-ref | [node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
166
+ | notification:security.mfa.enrolled | specialized-registry | security.mfa.enrolled | — | registry=notification; registryId=security.mfa.enrolled; specialistRoute=notifications | fact-ref | [node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
167
+ | notification:security.mfa.reset | specialized-registry | security.mfa.reset | — | registry=notification; registryId=security.mfa.reset; specialistRoute=notifications | fact-ref | [node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
168
+ | notification:security.password.changed | specialized-registry | security.password.changed | — | registry=notification; registryId=security.password.changed; specialistRoute=notifications | fact-ref | [node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
169
+ | security:enforcement-deadline-notification | subscriber | security.enforcement.created | async-delivery | event=security.enforcement.created; persistent=true; subscriberId=security:enforcement-deadline-notification; sync=false | fact-ref | [node_modules/@open-mercato/enterprise/src/modules/security/subscribers/enforcement-deadline-notification.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/enforcement-deadline-notification.ts) |
170
+ | security:enforcement-updated-notification | subscriber | security.enforcement.updated | async-delivery | event=security.enforcement.updated; persistent=true; subscriberId=security:enforcement-updated-notification; sync=false | fact-ref | [node_modules/@open-mercato/enterprise/src/modules/security/subscribers/enforcement-updated-notification.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/enforcement-updated-notification.ts) |
171
+ | security:mfa-enrolled-notification | subscriber | security.mfa.enrolled | async-delivery | event=security.mfa.enrolled; persistent=true; subscriberId=security:mfa-enrolled-notification; sync=false | fact-ref | [node_modules/@open-mercato/enterprise/src/modules/security/subscribers/notification.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/notification.ts) |
172
+ | security:mfa-reset-notification | subscriber | security.mfa.reset | async-delivery | event=security.mfa.reset; persistent=true; subscriberId=security:mfa-reset-notification; sync=false | fact-ref | [node_modules/@open-mercato/enterprise/src/modules/security/subscribers/mfa-reset-notification.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/mfa-reset-notification.ts) |
173
+ | security:password-change-notification | subscriber | security.password.notification_requested | async-delivery | event=security.password.notification_requested; persistent=true; subscriberId=security:password-change-notification; sync=false | fact-ref | [node_modules/@open-mercato/enterprise/src/modules/security/subscribers/audit.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/audit.ts) |
174
+
175
+ ## Active extension bindings
176
+
177
+ _none_
178
+
179
+ ## Incoming installed contributions
180
+
181
+ _none_
182
+
183
+ ## Contribution resolutions
184
+
185
+ | Contribution | Target | Resolution | Activations | Source |
186
+ |---|---|---|---|---|
187
+ | notification:security.mfa.enforcement_deadline | module:security.mfa.enforcement_deadline | capability-only | — | [node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
188
+ | notification:security.mfa.enrolled | module:security.mfa.enrolled @security | capability-only | — | [node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
189
+ | notification:security.mfa.reset | module:security.mfa.reset @security | capability-only | — | [node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
190
+ | notification:security.password.changed | module:security.password.changed @security | capability-only | — | [node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
191
+ | security:enforcement-deadline-notification | event:security.enforcement.created @security | capability-only | — | [node_modules/@open-mercato/enterprise/src/modules/security/subscribers/enforcement-deadline-notification.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/enforcement-deadline-notification.ts) |
192
+ | security:enforcement-updated-notification | event:security.enforcement.updated @security | capability-only | — | [node_modules/@open-mercato/enterprise/src/modules/security/subscribers/enforcement-updated-notification.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/enforcement-updated-notification.ts) |
193
+ | security:mfa-enrolled-notification | event:security.mfa.enrolled @security | capability-only | — | [node_modules/@open-mercato/enterprise/src/modules/security/subscribers/notification.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/notification.ts) |
194
+ | security:mfa-reset-notification | event:security.mfa.reset @security | capability-only | — | [node_modules/@open-mercato/enterprise/src/modules/security/subscribers/mfa-reset-notification.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/mfa-reset-notification.ts) |
195
+ | security:password-change-notification | event:security.password.notification_requested @security | capability-only | — | [node_modules/@open-mercato/enterprise/src/modules/security/subscribers/audit.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/audit.ts) |
196
+ | security.auth.login.mfa-challenge | api-route:auth/login | capability-only | — | [node_modules/@open-mercato/enterprise/src/modules/security/api/interceptors.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/api/interceptors.ts) |
197
+ | security.block-legacy-self-password-change | command:auth.users.update @auth | bound | command:auth.users.update:command-interceptor-bridge | [node_modules/@open-mercato/enterprise/src/modules/security/commands/interceptors.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/interceptors.ts) |
198
+ | security.component-override.0:section:auth.login.form | component:section:auth.login.form | optional-target-missing | — | [node_modules/@open-mercato/enterprise/src/modules/security/widgets/components.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/widgets/components.ts) |
159
199
 
160
200
  ## UMES diagnostics
161
201
 
@@ -165,7 +205,12 @@ _none_
165
205
 
166
206
  ## Notifications
167
207
 
168
- security.password.changed · security.mfa.enrolled · security.mfa.reset · security.mfa.enforcement_deadline
208
+ | Notification ID | Source |
209
+ |---|---|
210
+ | security.password.changed | [node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
211
+ | security.mfa.enrolled | [node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
212
+ | security.mfa.reset | [node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
213
+ | security.mfa.enforcement_deadline | [node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
169
214
 
170
215
  ## CLI commands
171
216
 
@@ -178,3 +223,104 @@ _none_
178
223
  ## AI agents
179
224
 
180
225
  _none_
226
+
227
+ ## Exact override targets
228
+
229
+ | Domain | Path / key | Supported modes | Referenced fact | Source |
230
+ |---|---|---|---|---|
231
+ | acl | `overrides.acl.features["security.admin.manage"]` | disable-replace | aclFeatures:security.admin.manage | [node_modules/@open-mercato/enterprise/src/modules/security/acl.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
232
+ | acl | `overrides.acl.features["security.mfa.manage"]` | disable-replace | aclFeatures:security.mfa.manage | [node_modules/@open-mercato/enterprise/src/modules/security/acl.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
233
+ | acl | `overrides.acl.features["security.profile.manage"]` | disable-replace | aclFeatures:security.profile.manage | [node_modules/@open-mercato/enterprise/src/modules/security/acl.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
234
+ | acl | `overrides.acl.features["security.profile.password"]` | disable-replace | aclFeatures:security.profile.password | [node_modules/@open-mercato/enterprise/src/modules/security/acl.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
235
+ | acl | `overrides.acl.features["security.profile.view"]` | disable-replace | aclFeatures:security.profile.view | [node_modules/@open-mercato/enterprise/src/modules/security/acl.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
236
+ | acl | `overrides.acl.features["security.sudo.manage"]` | disable-replace | aclFeatures:security.sudo.manage | [node_modules/@open-mercato/enterprise/src/modules/security/acl.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
237
+ | acl | `overrides.acl.features["security.sudo.view"]` | disable-replace | aclFeatures:security.sudo.view | [node_modules/@open-mercato/enterprise/src/modules/security/acl.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
238
+ | commandInterceptors | `overrides.commandInterceptors["security.block-legacy-self-password-change"]` | disable-replace | extensionSurfaces.contributions:security.block-legacy-self-password-change | [node_modules/@open-mercato/enterprise/src/modules/security/commands/interceptors.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/interceptors.ts) |
239
+ | di | `overrides.di["mfaAdminService"]` | disable-replace | ownedContracts.di-registration:mfaAdminService | [node_modules/@open-mercato/enterprise/src/modules/security/di.ts:34](../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L34) |
240
+ | di | `overrides.di["mfaEnforcementService"]` | disable-replace | ownedContracts.di-registration:mfaEnforcementService | [node_modules/@open-mercato/enterprise/src/modules/security/di.ts:33](../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L33) |
241
+ | di | `overrides.di["mfaProviderRegistry"]` | disable-replace | ownedContracts.di-registration:mfaProviderRegistry | [node_modules/@open-mercato/enterprise/src/modules/security/di.ts:29](../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L29) |
242
+ | di | `overrides.di["mfaService"]` | disable-replace | ownedContracts.di-registration:mfaService | [node_modules/@open-mercato/enterprise/src/modules/security/di.ts:31](../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L31) |
243
+ | di | `overrides.di["mfaVerificationService"]` | disable-replace | ownedContracts.di-registration:mfaVerificationService | [node_modules/@open-mercato/enterprise/src/modules/security/di.ts:32](../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L32) |
244
+ | di | `overrides.di["passwordService"]` | disable-replace | ownedContracts.di-registration:passwordService | [node_modules/@open-mercato/enterprise/src/modules/security/di.ts:30](../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L30) |
245
+ | di | `overrides.di["sudoChallengeService"]` | disable-replace | ownedContracts.di-registration:sudoChallengeService | [node_modules/@open-mercato/enterprise/src/modules/security/di.ts:35](../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L35) |
246
+ | events | `overrides.events.subscribers["security:enforcement-deadline-notification"]` | disable-replace | extensionSurfaces.contributions:security:enforcement-deadline-notification | [node_modules/@open-mercato/enterprise/src/modules/security/subscribers/enforcement-deadline-notification.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/enforcement-deadline-notification.ts) |
247
+ | events | `overrides.events.subscribers["security:enforcement-updated-notification"]` | disable-replace | extensionSurfaces.contributions:security:enforcement-updated-notification | [node_modules/@open-mercato/enterprise/src/modules/security/subscribers/enforcement-updated-notification.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/enforcement-updated-notification.ts) |
248
+ | events | `overrides.events.subscribers["security:mfa-enrolled-notification"]` | disable-replace | extensionSurfaces.contributions:security:mfa-enrolled-notification | [node_modules/@open-mercato/enterprise/src/modules/security/subscribers/notification.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/notification.ts) |
249
+ | events | `overrides.events.subscribers["security:mfa-reset-notification"]` | disable-replace | extensionSurfaces.contributions:security:mfa-reset-notification | [node_modules/@open-mercato/enterprise/src/modules/security/subscribers/mfa-reset-notification.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/mfa-reset-notification.ts) |
250
+ | events | `overrides.events.subscribers["security:password-change-notification"]` | disable-replace | extensionSurfaces.contributions:security:password-change-notification | [node_modules/@open-mercato/enterprise/src/modules/security/subscribers/audit.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/audit.ts) |
251
+ | guards | `overrides.guards["security.backend.legacy-profile-password-redirect"]` | disable-replace | ownedContracts.page-middleware:security.backend.legacy-profile-password-redirect | [node_modules/@open-mercato/enterprise/src/modules/security/backend/middleware.ts:9](../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/middleware.ts#L9) |
252
+ | guards | `overrides.guards["security.backend.mfa-enrollment-redirect"]` | disable-replace | ownedContracts.page-middleware:security.backend.mfa-enrollment-redirect | [node_modules/@open-mercato/enterprise/src/modules/security/backend/middleware.ts:20](../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/middleware.ts#L20) |
253
+ | guards | `overrides.guards["security.frontend.mfa-enrollment-redirect"]` | disable-replace | ownedContracts.page-middleware:security.frontend.mfa-enrollment-redirect | [node_modules/@open-mercato/enterprise/src/modules/security/frontend/middleware.ts:8](../../../node_modules/@open-mercato/enterprise/src/modules/security/frontend/middleware.ts#L8) |
254
+ | interceptors | `overrides.interceptors["security.auth.login.mfa-challenge"]` | disable-replace | extensionSurfaces.contributions:security.auth.login.mfa-challenge | [node_modules/@open-mercato/enterprise/src/modules/security/api/interceptors.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/api/interceptors.ts) |
255
+ | notifications | `overrides.notifications.types["security.mfa.enforcement_deadline"]` | disable-replace | notifications:security.mfa.enforcement_deadline | [node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
256
+ | notifications | `overrides.notifications.types["security.mfa.enrolled"]` | disable-replace | notifications:security.mfa.enrolled | [node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
257
+ | notifications | `overrides.notifications.types["security.mfa.reset"]` | disable-replace | notifications:security.mfa.reset | [node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
258
+ | notifications | `overrides.notifications.types["security.password.changed"]` | disable-replace | notifications:security.password.changed | [node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
259
+ | routes | `overrides.routes.pages["backend:/backend/profile/security"]` | disable-replace | backendPages:/backend/profile/security | [node_modules/@open-mercato/enterprise/src/modules/security/backend/profile/security/page.tsx](../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/profile/security/page.tsx) |
260
+ | routes | `overrides.routes.pages["backend:/backend/profile/security/mfa"]` | disable-replace | backendPages:/backend/profile/security/mfa | [node_modules/@open-mercato/enterprise/src/modules/security/backend/profile/security/mfa/page.tsx](../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/profile/security/mfa/page.tsx) |
261
+ | routes | `overrides.routes.pages["backend:/backend/profile/security/mfa/[providername]"]` | disable-replace | backendPages:/backend/profile/security/mfa/[providername] | [node_modules/@open-mercato/enterprise/src/modules/security/backend/profile/security/mfa/[providername]/page.tsx](../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/profile/security/mfa/[providername]/page.tsx) |
262
+ | routes | `overrides.routes.pages["backend:/backend/profile/security/mfa/recovery-codes"]` | disable-replace | backendPages:/backend/profile/security/mfa/recovery-codes | [node_modules/@open-mercato/enterprise/src/modules/security/backend/profile/security/mfa/recovery-codes/page.tsx](../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/profile/security/mfa/recovery-codes/page.tsx) |
263
+ | routes | `overrides.routes.pages["backend:/backend/security/enforcement"]` | disable-replace | backendPages:/backend/security/enforcement | [node_modules/@open-mercato/enterprise/src/modules/security/backend/security/enforcement/page.tsx](../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/enforcement/page.tsx) |
264
+ | routes | `overrides.routes.pages["backend:/backend/security/enforcement/[id]"]` | disable-replace | backendPages:/backend/security/enforcement/[id] | [node_modules/@open-mercato/enterprise/src/modules/security/backend/security/enforcement/[id]/page.tsx](../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/enforcement/[id]/page.tsx) |
265
+ | routes | `overrides.routes.pages["backend:/backend/security/enforcement/create"]` | disable-replace | backendPages:/backend/security/enforcement/create | [node_modules/@open-mercato/enterprise/src/modules/security/backend/security/enforcement/create/page.tsx](../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/enforcement/create/page.tsx) |
266
+ | routes | `overrides.routes.pages["backend:/backend/security/sudo"]` | disable-replace | backendPages:/backend/security/sudo | [node_modules/@open-mercato/enterprise/src/modules/security/backend/security/sudo/page.tsx](../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/sudo/page.tsx) |
267
+ | routes | `overrides.routes.pages["backend:/backend/security/sudo/[id]/edit"]` | disable-replace | backendPages:/backend/security/sudo/[id]/edit | [node_modules/@open-mercato/enterprise/src/modules/security/backend/security/sudo/[id]/edit/page.tsx](../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/sudo/[id]/edit/page.tsx) |
268
+ | routes | `overrides.routes.pages["backend:/backend/security/sudo/create"]` | disable-replace | backendPages:/backend/security/sudo/create | [node_modules/@open-mercato/enterprise/src/modules/security/backend/security/sudo/create/page.tsx](../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/sudo/create/page.tsx) |
269
+ | routes | `overrides.routes.pages["backend:/backend/security/users"]` | disable-replace | backendPages:/backend/security/users | [node_modules/@open-mercato/enterprise/src/modules/security/backend/security/users/page.tsx](../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/users/page.tsx) |
270
+ | routes | `overrides.routes.pages["backend:/backend/security/users/[id]"]` | disable-replace | backendPages:/backend/security/users/[id] | [node_modules/@open-mercato/enterprise/src/modules/security/backend/security/users/[id]/page.tsx](../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/users/[id]/page.tsx) |
271
+ | setup | `overrides.setup.defaultRoleFeatures` | replace | ownedContracts.setup:security:setup | [node_modules/@open-mercato/enterprise/src/modules/security/setup.ts:3](../../../node_modules/@open-mercato/enterprise/src/modules/security/setup.ts#L3) |
272
+ | widgets | `overrides.widgets.components["section:auth.login.form"]` | disable-replace | extensionSurfaces.contributions:security.component-override.0:section:auth.login.form | [node_modules/@open-mercato/enterprise/src/modules/security/widgets/components.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/widgets/components.ts) |
273
+
274
+ ## Owned contract — module metadata
275
+
276
+ | ID | Metadata | Source |
277
+ |---|---|---|
278
+ | security | version=0.1.0 | [node_modules/@open-mercato/enterprise/src/modules/security/index.ts:1](../../../node_modules/@open-mercato/enterprise/src/modules/security/index.ts#L1) |
279
+
280
+ ## Domain commands
281
+
282
+ | ID | Metadata | Source |
283
+ |---|---|---|
284
+ | security.admin.mfa.reset | — | [node_modules/@open-mercato/enterprise/src/modules/security/commands/resetUserMfa.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/resetUserMfa.ts) |
285
+ | security.enforcement.create | — | [node_modules/@open-mercato/enterprise/src/modules/security/commands/createEnforcementPolicy.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/createEnforcementPolicy.ts) |
286
+ | security.enforcement.delete | — | [node_modules/@open-mercato/enterprise/src/modules/security/commands/deleteEnforcementPolicy.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/deleteEnforcementPolicy.ts) |
287
+ | security.enforcement.update | — | [node_modules/@open-mercato/enterprise/src/modules/security/commands/updateEnforcementPolicy.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/updateEnforcementPolicy.ts) |
288
+ | security.mfa.method.remove | — | [node_modules/@open-mercato/enterprise/src/modules/security/commands/removeMfaMethod.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/removeMfaMethod.ts) |
289
+ | security.mfa.recovery_codes.regenerate | — | [node_modules/@open-mercato/enterprise/src/modules/security/commands/regenerateRecoveryCodes.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/regenerateRecoveryCodes.ts) |
290
+ | security.password.change | — | [node_modules/@open-mercato/enterprise/src/modules/security/commands/changePassword.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/changePassword.ts) |
291
+ | security.sudo.config.create | — | [node_modules/@open-mercato/enterprise/src/modules/security/commands/createSudoConfig.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/createSudoConfig.ts) |
292
+ | security.sudo.config.delete | — | [node_modules/@open-mercato/enterprise/src/modules/security/commands/deleteSudoConfig.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/deleteSudoConfig.ts) |
293
+ | security.sudo.config.update | — | [node_modules/@open-mercato/enterprise/src/modules/security/commands/updateSudoConfig.ts](../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/updateSudoConfig.ts) |
294
+
295
+ ## Page middleware
296
+
297
+ | ID | Metadata | Source |
298
+ |---|---|---|
299
+ | security.backend.legacy-profile-password-redirect | mode=backend; priority=10; surface=backend | [node_modules/@open-mercato/enterprise/src/modules/security/backend/middleware.ts:9](../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/middleware.ts#L9) |
300
+ | security.backend.mfa-enrollment-redirect | mode=backend; priority=50; surface=backend | [node_modules/@open-mercato/enterprise/src/modules/security/backend/middleware.ts:20](../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/middleware.ts#L20) |
301
+ | security.frontend.mfa-enrollment-redirect | mode=frontend; priority=50; surface=frontend | [node_modules/@open-mercato/enterprise/src/modules/security/frontend/middleware.ts:8](../../../node_modules/@open-mercato/enterprise/src/modules/security/frontend/middleware.ts#L8) |
302
+
303
+ ## Setup
304
+
305
+ | ID | Metadata | Source |
306
+ |---|---|---|
307
+ | security:setup | roles=admin, employee, superadmin | [node_modules/@open-mercato/enterprise/src/modules/security/setup.ts:3](../../../node_modules/@open-mercato/enterprise/src/modules/security/setup.ts#L3) |
308
+
309
+ ## DI registrations (rich)
310
+
311
+ | Token | Kind | Lifetime | Injection | Provider | Source |
312
+ |---|---|---|---|---|---|
313
+ | mfaAdminService | class | scoped | — | MfaAdminService | [node_modules/@open-mercato/enterprise/src/modules/security/di.ts:34](../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L34) |
314
+ | mfaEnforcementService | class | scoped | — | MfaEnforcementService | [node_modules/@open-mercato/enterprise/src/modules/security/di.ts:33](../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L33) |
315
+ | mfaProviderRegistry | value | — | — | — | [node_modules/@open-mercato/enterprise/src/modules/security/di.ts:29](../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L29) |
316
+ | mfaService | class | scoped | — | MfaService | [node_modules/@open-mercato/enterprise/src/modules/security/di.ts:31](../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L31) |
317
+ | mfaVerificationService | class | scoped | — | MfaVerificationService | [node_modules/@open-mercato/enterprise/src/modules/security/di.ts:32](../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L32) |
318
+ | passwordService | class | scoped | — | PasswordService | [node_modules/@open-mercato/enterprise/src/modules/security/di.ts:30](../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L30) |
319
+ | sudoChallengeService | class | scoped | — | SudoChallengeService | [node_modules/@open-mercato/enterprise/src/modules/security/di.ts:35](../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L35) |
320
+
321
+ ## Generator plugins
322
+
323
+ | ID | Metadata | Source |
324
+ |---|---|---|
325
+ | security.mfa-providers | conventionFile=security.mfa-providers.ts; outputFileName=security-mfa-providers.generated.ts | [node_modules/@open-mercato/enterprise/src/modules/security/generators.ts:28](../../../node_modules/@open-mercato/enterprise/src/modules/security/generators.ts#L28) |
326
+ | security.sudo | conventionFile=security.sudo.ts; outputFileName=security-sudo.generated.ts | [node_modules/@open-mercato/enterprise/src/modules/security/generators.ts:45](../../../node_modules/@open-mercato/enterprise/src/modules/security/generators.ts#L45) |