@open-mercato/cli 0.6.7-develop.6795.1.8a3f27921c → 0.6.7-develop.6814.1.0627c7e9f1

package/dist/agentic/guides/modules/shipping_carriers.md

@@ -1,30 +1,33 @@
 # shipping_carriers — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.6.7-develop.6795.1.8a3f27921c; core 0.6.7-develop.6795.1.8a3f27921c — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.6.7-develop.6814.1.0627c7e9f1; core 0.6.7-develop.6814.1.0627c7e9f1 — R1 staleness stamp -->
 Source root: [node_modules/@open-mercato/core/src/modules/shipping_carriers](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers)
 
 ## Entities
 
-| Entity ID | Class | Table | Editable | CustomFields |
-|---|---|---|---|---|
-| shipping_carriers:carrier_shipment | CarrierShipment | carrier_shipments | yes | no |
-| shipping_carriers:carrier_webhook_processed_event | CarrierWebhookProcessedEvent | carrier_webhook_events | no | no |
-| shipping_carriers:carrier_shipment_idempotency_key | CarrierShipmentIdempotencyKey | carrier_shipment_idempotency_keys | no | no |
+| Entity ID | Class | Table | Editable | CustomFields | Source |
+|---|---|---|---|---|---|
+| shipping_carriers:carrier_shipment | CarrierShipment | carrier_shipments | yes | no | [node_modules/@open-mercato/core/src/modules/shipping_carriers/data/entities.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/data/entities.ts) |
+| shipping_carriers:carrier_webhook_processed_event | CarrierWebhookProcessedEvent | carrier_webhook_events | no | no | [node_modules/@open-mercato/core/src/modules/shipping_carriers/data/entities.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/data/entities.ts) |
+| shipping_carriers:carrier_shipment_idempotency_key | CarrierShipmentIdempotencyKey | carrier_shipment_idempotency_keys | no | no | [node_modules/@open-mercato/core/src/modules/shipping_carriers/data/entities.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/data/entities.ts) |
 
 ## Events  (7)
 
-| ID | Category | Entity | Browser transport |
-|---|---|---|---|
-| shipping_carriers.shipment.created | lifecycle | shipment | — |
-| shipping_carriers.shipment.status_changed | lifecycle | shipment | — |
-| shipping_carriers.shipment.delivered | lifecycle | shipment | — |
-| shipping_carriers.shipment.returned | lifecycle | shipment | — |
-| shipping_carriers.shipment.cancelled | lifecycle | shipment | — |
-| shipping_carriers.webhook.received | system | — | — |
-| shipping_carriers.webhook.failed | system | — | — |
+| ID | Category | Entity | Browser transport | Source |
+|---|---|---|---|---|
+| shipping_carriers.shipment.created | lifecycle | shipment | — | [node_modules/@open-mercato/core/src/modules/shipping_carriers/events.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/events.ts) |
+| shipping_carriers.shipment.status_changed | lifecycle | shipment | — | [node_modules/@open-mercato/core/src/modules/shipping_carriers/events.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/events.ts) |
+| shipping_carriers.shipment.delivered | lifecycle | shipment | — | [node_modules/@open-mercato/core/src/modules/shipping_carriers/events.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/events.ts) |
+| shipping_carriers.shipment.returned | lifecycle | shipment | — | [node_modules/@open-mercato/core/src/modules/shipping_carriers/events.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/events.ts) |
+| shipping_carriers.shipment.cancelled | lifecycle | shipment | — | [node_modules/@open-mercato/core/src/modules/shipping_carriers/events.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/events.ts) |
+| shipping_carriers.webhook.received | system | — | — | [node_modules/@open-mercato/core/src/modules/shipping_carriers/events.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/events.ts) |
+| shipping_carriers.webhook.failed | system | — | — | [node_modules/@open-mercato/core/src/modules/shipping_carriers/events.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/events.ts) |
 
 ## ACL features  (2)
 
-shipping_carriers.view · shipping_carriers.manage
+| Feature | Source |
+|---|---|
+| shipping_carriers.view | [node_modules/@open-mercato/core/src/modules/shipping_carriers/acl.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/acl.ts) |
+| shipping_carriers.manage | [node_modules/@open-mercato/core/src/modules/shipping_carriers/acl.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/acl.ts) |
 
 ## API routes
 
@@ -42,7 +45,9 @@ _none_
 
 ## DI service tokens
 
-shippingCarrierService
+| Token | Source |
+|---|---|
+| shippingCarrierService | [node_modules/@open-mercato/core/src/modules/shipping_carriers/di.ts:15](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/di.ts#L15) |
 
 ## Search entities
 
@@ -55,29 +60,49 @@ _none_
 
 ## UMES hosts
 
-| ID / pattern | Family | Supports | Context | Stability |
-|---|---|---|---|---|
-| shipping_carriers:carrier_shipment | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE |
-| shipping_carriers:carrier_shipment_idempotency_key | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE |
-| shipping_carriers:carrier_webhook_processed_event | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE |
-| shipping_carriers.shipment | entity | response-enricher, query-enricher, mutation-guard | tenant-and-organization | STABLE |
-| shipping_carriers.shipment.cancelled | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
-| shipping_carriers.shipment.created | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
-| shipping_carriers.shipment.delivered | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
-| shipping_carriers.shipment.returned | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
-| shipping_carriers.shipment.status_changed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
-| shipping_carriers.webhook.failed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
-| shipping_carriers.webhook.received | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
+| ID / pattern | Family | Supports | Context | Stability | Source |
+|---|---|---|---|---|---|
+| shipping_carriers:carrier_shipment | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:shipping_carriers:carrier_shipment |
+| shipping_carriers:carrier_shipment_idempotency_key | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:shipping_carriers:carrier_shipment_idempotency_key |
+| shipping_carriers:carrier_webhook_processed_event | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:shipping_carriers:carrier_webhook_processed_event |
+| shipping_carriers.shipment | entity | response-enricher, query-enricher, mutation-guard | tenant-and-organization | STABLE | [node_modules/@open-mercato/core/src/modules/shipping_carriers/api/cancel/route.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/api/cancel/route.ts) |
+| shipping_carriers.shipment.cancelled | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:shipping_carriers.shipment.cancelled |
+| shipping_carriers.shipment.created | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:shipping_carriers.shipment.created |
+| shipping_carriers.shipment.delivered | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:shipping_carriers.shipment.delivered |
+| shipping_carriers.shipment.returned | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:shipping_carriers.shipment.returned |
+| shipping_carriers.shipment.status_changed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:shipping_carriers.shipment.status_changed |
+| shipping_carriers.webhook.failed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:shipping_carriers.webhook.failed |
+| shipping_carriers.webhook.received | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:shipping_carriers.webhook.received |
 
 ## UMES contributions
 
-| ID | Kind | Target | Phase / operations | Contract | Resolution |
-|---|---|---|---|---|---|
-| shipping_carriers.validate-provider | api-interceptor | shipping-carriers/* | before | activation=crud-pipeline; failurePosture=fallback; methods=POST,GET; phases=before; route=shipping-carriers/*; timeoutMs=2000 | pattern |
-| shipping_carriers.injection.create-shipment-button@data-table:sales.orders:row-actions | data-table | data-table:sales.orders:row-actions | — | executionGuard=host; payload=row-action; tableId=sales.orders | exact |
-| shipping_carriers.injection.tracking-column@data-table:sales.shipments:columns | data-table | data-table:sales.shipments:columns | — | executionGuard=host; payload=column; tableId=sales.shipments | optional-external |
-| shipping_carriers.injection.tracking-status-badge@data-table:sales.shipments:columns | data-table | data-table:sales.shipments:columns | — | executionGuard=host; payload=column; tableId=sales.shipments | optional-external |
-| shipping_carriers.sales-shipment-carrier | response-enricher | sales.shipment | list, detail | cachePosture=rerun-on-list-cache-hit; critical=false; fallback=none; surfaces=list,detail; targetEntity=sales.shipment; timeoutMs=2000 | optional-external |
+| ID | Kind | Target | Phase / operations | Contract | Resolution | Source |
+|---|---|---|---|---|---|---|
+| shipping_carriers.validate-provider | api-interceptor | shipping-carriers/* | before | activation=crud-pipeline; failurePosture=fallback; methods=POST,GET; phases=before; route=shipping-carriers/*; timeoutMs=2000 | pattern | [node_modules/@open-mercato/core/src/modules/shipping_carriers/api/interceptors.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/api/interceptors.ts) |
+| shipping_carriers.injection.create-shipment-button@data-table:sales.orders:row-actions | data-table | data-table:sales.orders:row-actions | — | executionGuard=host; payload=row-action; tableId=sales.orders | exact | [node_modules/@open-mercato/core/src/modules/shipping_carriers/widgets/injection-table.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/widgets/injection-table.ts) |
+| shipping_carriers.injection.tracking-column@data-table:sales.shipments:columns | data-table | data-table:sales.shipments:columns | — | executionGuard=host; payload=column; tableId=sales.shipments | optional-external | [node_modules/@open-mercato/core/src/modules/shipping_carriers/widgets/injection-table.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/widgets/injection-table.ts) |
+| shipping_carriers.injection.tracking-status-badge@data-table:sales.shipments:columns | data-table | data-table:sales.shipments:columns | — | executionGuard=host; payload=column; tableId=sales.shipments | optional-external | [node_modules/@open-mercato/core/src/modules/shipping_carriers/widgets/injection-table.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/widgets/injection-table.ts) |
+| shipping_carriers.sales-shipment-carrier | response-enricher | sales.shipment | list, detail | cachePosture=rerun-on-list-cache-hit; critical=false; fallback=none; surfaces=list,detail; targetEntity=sales.shipment; timeoutMs=2000 | optional-external | [node_modules/@open-mercato/core/src/modules/shipping_carriers/data/enrichers.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/data/enrichers.ts) |
+
+## Active extension bindings
+
+| Activation | Kind | Host | Contribution kinds | Phases | Bridge | Source |
+|---|---|---|---|---|---|---|
+| entity:shipping_carriers.shipment:mutation-guard | mutation-guard | entity:shipping_carriers.shipment @shipping_carriers | mutation-guard | — | — | [node_modules/@open-mercato/core/src/modules/shipping_carriers/api/cancel/route.ts:43](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/api/cancel/route.ts#L43) |
+
+## Incoming installed contributions
+
+_none_
+
+## Contribution resolutions
+
+| Contribution | Target | Resolution | Activations | Source |
+|---|---|---|---|---|
+| shipping_carriers.injection.create-shipment-button@data-table:sales.orders:row-actions | widget-spot:data-table:sales.orders:row-actions @sales | bound | widget-spot:data-table:sales.orders:row-actions:widget-injection-consumer | [node_modules/@open-mercato/core/src/modules/shipping_carriers/widgets/injection-table.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/widgets/injection-table.ts) |
+| shipping_carriers.injection.tracking-column@data-table:sales.shipments:columns | widget-spot:data-table:sales.shipments:columns | optional-target-missing | — | [node_modules/@open-mercato/core/src/modules/shipping_carriers/widgets/injection-table.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/widgets/injection-table.ts) |
+| shipping_carriers.injection.tracking-status-badge@data-table:sales.shipments:columns | widget-spot:data-table:sales.shipments:columns | optional-target-missing | — | [node_modules/@open-mercato/core/src/modules/shipping_carriers/widgets/injection-table.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/widgets/injection-table.ts) |
+| shipping_carriers.sales-shipment-carrier | entity:sales.shipment | optional-target-missing | — | [node_modules/@open-mercato/core/src/modules/shipping_carriers/data/enrichers.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/data/enrichers.ts) |
+| shipping_carriers.validate-provider | wildcard:shipping-carriers/* | wildcard | — | [node_modules/@open-mercato/core/src/modules/shipping_carriers/api/interceptors.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/api/interceptors.ts) |
 
 
 
@@ -96,3 +121,47 @@ _none_
 ## AI agents
 
 _none_
+
+## Exact override targets
+
+| Domain | Path / key | Supported modes | Referenced fact | Source |
+|---|---|---|---|---|
+| acl | `overrides.acl.features["shipping_carriers.manage"]` | disable-replace | aclFeatures:shipping_carriers.manage | [node_modules/@open-mercato/core/src/modules/shipping_carriers/acl.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/acl.ts) |
+| acl | `overrides.acl.features["shipping_carriers.view"]` | disable-replace | aclFeatures:shipping_carriers.view | [node_modules/@open-mercato/core/src/modules/shipping_carriers/acl.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/acl.ts) |
+| di | `overrides.di["CarrierShipment"]` | disable-replace | ownedContracts.di-registration:CarrierShipment | [node_modules/@open-mercato/core/src/modules/shipping_carriers/di.ts:18](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/di.ts#L18) |
+| di | `overrides.di["shippingCarrierService"]` | disable-replace | ownedContracts.di-registration:shippingCarrierService | [node_modules/@open-mercato/core/src/modules/shipping_carriers/di.ts:15](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/di.ts#L15) |
+| enrichers | `overrides.enrichers["shipping_carriers.sales-shipment-carrier"]` | disable-replace | extensionSurfaces.contributions:shipping_carriers.sales-shipment-carrier | [node_modules/@open-mercato/core/src/modules/shipping_carriers/data/enrichers.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/data/enrichers.ts) |
+| interceptors | `overrides.interceptors["shipping_carriers.validate-provider"]` | disable-replace | extensionSurfaces.contributions:shipping_carriers.validate-provider | [node_modules/@open-mercato/core/src/modules/shipping_carriers/api/interceptors.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/api/interceptors.ts) |
+| routes | `overrides.routes.pages["backend:/backend/shipping-carriers/create"]` | disable-replace | backendPages:/backend/shipping-carriers/create | [node_modules/@open-mercato/core/src/modules/shipping_carriers/backend/shipping-carriers/create/page.tsx](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/backend/shipping-carriers/create/page.tsx) |
+| setup | `overrides.setup.defaultRoleFeatures` | replace | ownedContracts.setup:shipping_carriers:setup | [node_modules/@open-mercato/core/src/modules/shipping_carriers/setup.ts:3](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/setup.ts#L3) |
+| widgets | `overrides.widgets.injection["shipping_carriers.injection.create-shipment-button"]` | disable-replace | extensionSurfaces.contributions:shipping_carriers.injection.create-shipment-button@data-table:sales.orders:row-actions | [node_modules/@open-mercato/core/src/modules/shipping_carriers/widgets/injection-table.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/widgets/injection-table.ts) |
+| widgets | `overrides.widgets.injection["shipping_carriers.injection.tracking-column"]` | disable-replace | extensionSurfaces.contributions:shipping_carriers.injection.tracking-column@data-table:sales.shipments:columns | [node_modules/@open-mercato/core/src/modules/shipping_carriers/widgets/injection-table.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/widgets/injection-table.ts) |
+| widgets | `overrides.widgets.injection["shipping_carriers.injection.tracking-status-badge"]` | disable-replace | extensionSurfaces.contributions:shipping_carriers.injection.tracking-status-badge@data-table:sales.shipments:columns | [node_modules/@open-mercato/core/src/modules/shipping_carriers/widgets/injection-table.ts](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/widgets/injection-table.ts) |
+| workers | `overrides.workers["shipping-carriers:status-poller"]` | disable-replace | ownedContracts.worker:shipping-carriers:status-poller | [node_modules/@open-mercato/core/src/modules/shipping_carriers/workers/status-poller.ts:17](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/workers/status-poller.ts#L17) |
+| workers | `overrides.workers["shipping-carriers:webhook-processor"]` | disable-replace | ownedContracts.worker:shipping-carriers:webhook-processor | [node_modules/@open-mercato/core/src/modules/shipping_carriers/workers/webhook-processor.ts:28](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/workers/webhook-processor.ts#L28) |
+
+## Owned contract — module metadata
+
+| ID | Metadata | Source |
+|---|---|---|
+| shipping_carriers | — | [node_modules/@open-mercato/core/src/modules/shipping_carriers/index.ts:1](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/index.ts#L1) |
+
+## Workers
+
+| ID | Metadata | Source |
+|---|---|---|
+| shipping-carriers:status-poller | concurrency=2; queue=shipping-carriers-status-poller | [node_modules/@open-mercato/core/src/modules/shipping_carriers/workers/status-poller.ts:17](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/workers/status-poller.ts#L17) |
+| shipping-carriers:webhook-processor | concurrency=5; queue=shipping-carriers-webhook | [node_modules/@open-mercato/core/src/modules/shipping_carriers/workers/webhook-processor.ts:28](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/workers/webhook-processor.ts#L28) |
+
+## Setup
+
+| ID | Metadata | Source |
+|---|---|---|
+| shipping_carriers:setup | roles=admin, employee, superadmin | [node_modules/@open-mercato/core/src/modules/shipping_carriers/setup.ts:3](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/setup.ts#L3) |
+
+## DI registrations (rich)
+
+| Token | Kind | Lifetime | Injection | Provider | Source |
+|---|---|---|---|---|---|
+| CarrierShipment | value | — | — | — | [node_modules/@open-mercato/core/src/modules/shipping_carriers/di.ts:18](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/di.ts#L18) |
+| shippingCarrierService | function | scoped | proxy | — | [node_modules/@open-mercato/core/src/modules/shipping_carriers/di.ts:15](../../../node_modules/@open-mercato/core/src/modules/shipping_carriers/di.ts#L15) |

package/dist/agentic/guides/modules/sso.md

@@ -1,38 +1,42 @@
 # sso — module facts (generated, do not edit)
-<!-- generated from @open-mercato/enterprise 0.6.7-develop.6795.1.8a3f27921c; core 0.6.7-develop.6795.1.8a3f27921c — R1 staleness stamp -->
+<!-- generated from @open-mercato/enterprise 0.6.7-develop.6814.1.0627c7e9f1; core 0.6.7-develop.6814.1.0627c7e9f1 — R1 staleness stamp -->
 Source root: [node_modules/@open-mercato/enterprise/src/modules/sso](../../../node_modules/@open-mercato/enterprise/src/modules/sso)
 
 ## Entities
 
-| Entity ID | Class | Table | Editable | CustomFields |
-|---|---|---|---|---|
-| sso:sso_config | SsoConfig | sso_configs | yes | no |
-| sso:sso_identity | SsoIdentity | sso_identities | yes | no |
-| sso:scim_token | ScimToken | scim_tokens | yes | no |
-| sso:sso_user_deactivation | SsoUserDeactivation | sso_user_deactivations | no | no |
-| sso:scim_provisioning_log | ScimProvisioningLog | scim_provisioning_log | no | no |
-| sso:sso_role_grant | SsoRoleGrant | sso_role_grants | no | no |
+| Entity ID | Class | Table | Editable | CustomFields | Source |
+|---|---|---|---|---|---|
+| sso:sso_config | SsoConfig | sso_configs | yes | no | [node_modules/@open-mercato/enterprise/src/modules/sso/data/entities.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/data/entities.ts) |
+| sso:sso_identity | SsoIdentity | sso_identities | yes | no | [node_modules/@open-mercato/enterprise/src/modules/sso/data/entities.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/data/entities.ts) |
+| sso:scim_token | ScimToken | scim_tokens | yes | no | [node_modules/@open-mercato/enterprise/src/modules/sso/data/entities.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/data/entities.ts) |
+| sso:sso_user_deactivation | SsoUserDeactivation | sso_user_deactivations | no | no | [node_modules/@open-mercato/enterprise/src/modules/sso/data/entities.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/data/entities.ts) |
+| sso:scim_provisioning_log | ScimProvisioningLog | scim_provisioning_log | no | no | [node_modules/@open-mercato/enterprise/src/modules/sso/data/entities.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/data/entities.ts) |
+| sso:sso_role_grant | SsoRoleGrant | sso_role_grants | no | no | [node_modules/@open-mercato/enterprise/src/modules/sso/data/entities.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/data/entities.ts) |
 
 ## Events  (12)
 
-| ID | Category | Entity | Browser transport |
-|---|---|---|---|
-| sso.login.initiated | lifecycle | — | — |
-| sso.login.completed | lifecycle | — | — |
-| sso.login.failed | lifecycle | — | — |
-| sso.identity.linked | lifecycle | — | — |
-| sso.identity.created | lifecycle | — | — |
-| sso.config.created | crud | sso_config | — |
-| sso.config.updated | crud | sso_config | — |
-| sso.config.deleted | crud | sso_config | — |
-| sso.config.activated | lifecycle | sso_config | — |
-| sso.config.deactivated | lifecycle | sso_config | — |
-| sso.domain.added | lifecycle | sso_config | — |
-| sso.domain.removed | lifecycle | sso_config | — |
+| ID | Category | Entity | Browser transport | Source |
+|---|---|---|---|---|
+| sso.login.initiated | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/sso/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/events.ts) |
+| sso.login.completed | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/sso/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/events.ts) |
+| sso.login.failed | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/sso/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/events.ts) |
+| sso.identity.linked | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/sso/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/events.ts) |
+| sso.identity.created | lifecycle | — | — | [node_modules/@open-mercato/enterprise/src/modules/sso/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/events.ts) |
+| sso.config.created | crud | sso_config | — | [node_modules/@open-mercato/enterprise/src/modules/sso/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/events.ts) |
+| sso.config.updated | crud | sso_config | — | [node_modules/@open-mercato/enterprise/src/modules/sso/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/events.ts) |
+| sso.config.deleted | crud | sso_config | — | [node_modules/@open-mercato/enterprise/src/modules/sso/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/events.ts) |
+| sso.config.activated | lifecycle | sso_config | — | [node_modules/@open-mercato/enterprise/src/modules/sso/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/events.ts) |
+| sso.config.deactivated | lifecycle | sso_config | — | [node_modules/@open-mercato/enterprise/src/modules/sso/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/events.ts) |
+| sso.domain.added | lifecycle | sso_config | — | [node_modules/@open-mercato/enterprise/src/modules/sso/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/events.ts) |
+| sso.domain.removed | lifecycle | sso_config | — | [node_modules/@open-mercato/enterprise/src/modules/sso/events.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/events.ts) |
 
 ## ACL features  (3)
 
-sso.config.view · sso.config.manage · sso.scim.manage
+| Feature | Source |
+|---|---|
+| sso.config.view | [node_modules/@open-mercato/enterprise/src/modules/sso/acl.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/acl.ts) |
+| sso.config.manage | [node_modules/@open-mercato/enterprise/src/modules/sso/acl.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/acl.ts) |
+| sso.scim.manage | [node_modules/@open-mercato/enterprise/src/modules/sso/acl.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/acl.ts) |
 
 ## API routes
 
@@ -52,7 +56,14 @@ _none_
 
 ## DI service tokens
 
-ssoService · accountLinkingService · ssoConfigService · hrdService · scimTokenService · scimService
+| Token | Source |
+|---|---|
+| ssoService | [node_modules/@open-mercato/enterprise/src/modules/sso/di.ts:18](../../../node_modules/@open-mercato/enterprise/src/modules/sso/di.ts#L18) |
+| accountLinkingService | [node_modules/@open-mercato/enterprise/src/modules/sso/di.ts:19](../../../node_modules/@open-mercato/enterprise/src/modules/sso/di.ts#L19) |
+| ssoConfigService | [node_modules/@open-mercato/enterprise/src/modules/sso/di.ts:20](../../../node_modules/@open-mercato/enterprise/src/modules/sso/di.ts#L20) |
+| hrdService | [node_modules/@open-mercato/enterprise/src/modules/sso/di.ts:21](../../../node_modules/@open-mercato/enterprise/src/modules/sso/di.ts#L21) |
+| scimTokenService | [node_modules/@open-mercato/enterprise/src/modules/sso/di.ts:22](../../../node_modules/@open-mercato/enterprise/src/modules/sso/di.ts#L22) |
+| scimService | [node_modules/@open-mercato/enterprise/src/modules/sso/di.ts:23](../../../node_modules/@open-mercato/enterprise/src/modules/sso/di.ts#L23) |
 
 ## Search entities
 
@@ -65,33 +76,48 @@ _none_
 
 ## UMES hosts
 
-| ID / pattern | Family | Supports | Context | Stability |
-|---|---|---|---|---|
-| sso:scim_provisioning_log | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE |
-| sso:scim_token | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE |
-| sso:sso_config | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE |
-| sso:sso_identity | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE |
-| sso:sso_role_grant | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE |
-| sso:sso_user_deactivation | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE |
-| sso.config.activated | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
-| sso.config.created | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
-| sso.config.deactivated | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
-| sso.config.deleted | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
-| sso.config.updated | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
-| sso.domain.added | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
-| sso.domain.removed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
-| sso.identity.created | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
-| sso.identity.linked | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
-| sso.login.completed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
-| sso.login.failed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
-| sso.login.initiated | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE |
+| ID / pattern | Family | Supports | Context | Stability | Source |
+|---|---|---|---|---|---|
+| sso:scim_provisioning_log | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:sso:scim_provisioning_log |
+| sso:scim_token | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:sso:scim_token |
+| sso:sso_config | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:sso:sso_config |
+| sso:sso_identity | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:sso:sso_identity |
+| sso:sso_role_grant | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:sso:sso_role_grant |
+| sso:sso_user_deactivation | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:sso:sso_user_deactivation |
+| sso.config.activated | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:sso.config.activated |
+| sso.config.created | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:sso.config.created |
+| sso.config.deactivated | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:sso.config.deactivated |
+| sso.config.deleted | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:sso.config.deleted |
+| sso.config.updated | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:sso.config.updated |
+| sso.domain.added | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:sso.domain.added |
+| sso.domain.removed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:sso.domain.removed |
+| sso.identity.created | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:sso.identity.created |
+| sso.identity.linked | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:sso.identity.linked |
+| sso.login.completed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:sso.login.completed |
+| sso.login.failed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:sso.login.failed |
+| sso.login.initiated | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:sso.login.initiated |
 
 ## UMES contributions
 
-| ID | Kind | Target | Phase / operations | Contract | Resolution |
-|---|---|---|---|---|---|
-| sso:user-deleted-cleanup | subscriber | auth.user.deleted | async-delivery | event=auth.user.deleted; persistent=true; subscriberId=sso:user-deleted-cleanup; sync=false | fact-ref |
-| sso.injection.login-sso@auth.login:form | widget | auth.login:form | — | executionGuard=host; payload=render; registryKey=sso.injection.login-sso | exact |
+| ID | Kind | Target | Phase / operations | Contract | Resolution | Source |
+|---|---|---|---|---|---|---|
+| sso:user-deleted-cleanup | subscriber | auth.user.deleted | async-delivery | event=auth.user.deleted; persistent=true; subscriberId=sso:user-deleted-cleanup; sync=false | fact-ref | [node_modules/@open-mercato/enterprise/src/modules/sso/subscribers/user-deleted-cleanup.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/subscribers/user-deleted-cleanup.ts) |
+| sso.injection.login-sso@auth.login:form | widget | auth.login:form | — | executionGuard=host; payload=render; registryKey=sso.injection.login-sso | exact | [node_modules/@open-mercato/enterprise/src/modules/sso/widgets/injection-table.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/widgets/injection-table.ts) |
+
+## Active extension bindings
+
+_none_
+
+## Incoming installed contributions
+
+_none_
+
+## Contribution resolutions
+
+| Contribution | Target | Resolution | Activations | Source |
+|---|---|---|---|---|
+| sso:user-deleted-cleanup | event:auth.user.deleted @auth | capability-only | — | [node_modules/@open-mercato/enterprise/src/modules/sso/subscribers/user-deleted-cleanup.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/subscribers/user-deleted-cleanup.ts) |
+| sso.injection.login-sso@auth.login:form | widget-spot:auth.login:form @auth | bound | widget-spot:auth.login:form:widget-injection-consumer | [node_modules/@open-mercato/enterprise/src/modules/sso/widgets/injection-table.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/widgets/injection-table.ts) |
 
 
 
@@ -110,3 +136,49 @@ _none_
 ## AI agents
 
 _none_
+
+## Exact override targets
+
+| Domain | Path / key | Supported modes | Referenced fact | Source |
+|---|---|---|---|---|
+| acl | `overrides.acl.features["sso.config.manage"]` | disable-replace | aclFeatures:sso.config.manage | [node_modules/@open-mercato/enterprise/src/modules/sso/acl.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/acl.ts) |
+| acl | `overrides.acl.features["sso.config.view"]` | disable-replace | aclFeatures:sso.config.view | [node_modules/@open-mercato/enterprise/src/modules/sso/acl.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/acl.ts) |
+| acl | `overrides.acl.features["sso.scim.manage"]` | disable-replace | aclFeatures:sso.scim.manage | [node_modules/@open-mercato/enterprise/src/modules/sso/acl.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/acl.ts) |
+| di | `overrides.di["accountLinkingService"]` | disable-replace | ownedContracts.di-registration:accountLinkingService | [node_modules/@open-mercato/enterprise/src/modules/sso/di.ts:19](../../../node_modules/@open-mercato/enterprise/src/modules/sso/di.ts#L19) |
+| di | `overrides.di["hrdService"]` | disable-replace | ownedContracts.di-registration:hrdService | [node_modules/@open-mercato/enterprise/src/modules/sso/di.ts:21](../../../node_modules/@open-mercato/enterprise/src/modules/sso/di.ts#L21) |
+| di | `overrides.di["scimService"]` | disable-replace | ownedContracts.di-registration:scimService | [node_modules/@open-mercato/enterprise/src/modules/sso/di.ts:23](../../../node_modules/@open-mercato/enterprise/src/modules/sso/di.ts#L23) |
+| di | `overrides.di["scimTokenService"]` | disable-replace | ownedContracts.di-registration:scimTokenService | [node_modules/@open-mercato/enterprise/src/modules/sso/di.ts:22](../../../node_modules/@open-mercato/enterprise/src/modules/sso/di.ts#L22) |
+| di | `overrides.di["ssoConfigService"]` | disable-replace | ownedContracts.di-registration:ssoConfigService | [node_modules/@open-mercato/enterprise/src/modules/sso/di.ts:20](../../../node_modules/@open-mercato/enterprise/src/modules/sso/di.ts#L20) |
+| di | `overrides.di["ssoProviderRegistry"]` | disable-replace | ownedContracts.di-registration:ssoProviderRegistry | [node_modules/@open-mercato/enterprise/src/modules/sso/di.ts:17](../../../node_modules/@open-mercato/enterprise/src/modules/sso/di.ts#L17) |
+| di | `overrides.di["ssoService"]` | disable-replace | ownedContracts.di-registration:ssoService | [node_modules/@open-mercato/enterprise/src/modules/sso/di.ts:18](../../../node_modules/@open-mercato/enterprise/src/modules/sso/di.ts#L18) |
+| events | `overrides.events.subscribers["sso:user-deleted-cleanup"]` | disable-replace | extensionSurfaces.contributions:sso:user-deleted-cleanup | [node_modules/@open-mercato/enterprise/src/modules/sso/subscribers/user-deleted-cleanup.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/subscribers/user-deleted-cleanup.ts) |
+| routes | `overrides.routes.pages["backend:/backend/sso"]` | disable-replace | backendPages:/backend/sso | [node_modules/@open-mercato/enterprise/src/modules/sso/backend/page.tsx](../../../node_modules/@open-mercato/enterprise/src/modules/sso/backend/page.tsx) |
+| routes | `overrides.routes.pages["backend:/backend/sso/config/[id]"]` | disable-replace | backendPages:/backend/sso/config/[id] | [node_modules/@open-mercato/enterprise/src/modules/sso/backend/sso/config/[id]/page.tsx](../../../node_modules/@open-mercato/enterprise/src/modules/sso/backend/sso/config/[id]/page.tsx) |
+| routes | `overrides.routes.pages["backend:/backend/sso/config/new"]` | disable-replace | backendPages:/backend/sso/config/new | [node_modules/@open-mercato/enterprise/src/modules/sso/backend/sso/config/new/page.tsx](../../../node_modules/@open-mercato/enterprise/src/modules/sso/backend/sso/config/new/page.tsx) |
+| setup | `overrides.setup.defaultRoleFeatures` | replace | ownedContracts.setup:sso:setup | [node_modules/@open-mercato/enterprise/src/modules/sso/setup.ts:6](../../../node_modules/@open-mercato/enterprise/src/modules/sso/setup.ts#L6) |
+| setup | `overrides.setup.seedDefaults` | replace | ownedContracts.setup:sso:setup | [node_modules/@open-mercato/enterprise/src/modules/sso/setup.ts:6](../../../node_modules/@open-mercato/enterprise/src/modules/sso/setup.ts#L6) |
+| widgets | `overrides.widgets.injection["sso.injection.login-sso"]` | disable-replace | extensionSurfaces.contributions:sso.injection.login-sso@auth.login:form | [node_modules/@open-mercato/enterprise/src/modules/sso/widgets/injection-table.ts](../../../node_modules/@open-mercato/enterprise/src/modules/sso/widgets/injection-table.ts) |
+
+## Owned contract — module metadata
+
+| ID | Metadata | Source |
+|---|---|---|
+| sso | version=0.1.0 | [node_modules/@open-mercato/enterprise/src/modules/sso/index.ts:1](../../../node_modules/@open-mercato/enterprise/src/modules/sso/index.ts#L1) |
+
+## Setup
+
+| ID | Metadata | Source |
+|---|---|---|
+| sso:setup | hooks=seedDefaults; roles=admin, superadmin | [node_modules/@open-mercato/enterprise/src/modules/sso/setup.ts:6](../../../node_modules/@open-mercato/enterprise/src/modules/sso/setup.ts#L6) |
+
+## DI registrations (rich)
+
+| Token | Kind | Lifetime | Injection | Provider | Source |
+|---|---|---|---|---|---|
+| accountLinkingService | class | scoped | — | AccountLinkingService | [node_modules/@open-mercato/enterprise/src/modules/sso/di.ts:19](../../../node_modules/@open-mercato/enterprise/src/modules/sso/di.ts#L19) |
+| hrdService | class | scoped | — | HrdService | [node_modules/@open-mercato/enterprise/src/modules/sso/di.ts:21](../../../node_modules/@open-mercato/enterprise/src/modules/sso/di.ts#L21) |
+| scimService | class | scoped | — | ScimService | [node_modules/@open-mercato/enterprise/src/modules/sso/di.ts:23](../../../node_modules/@open-mercato/enterprise/src/modules/sso/di.ts#L23) |
+| scimTokenService | class | scoped | — | ScimTokenService | [node_modules/@open-mercato/enterprise/src/modules/sso/di.ts:22](../../../node_modules/@open-mercato/enterprise/src/modules/sso/di.ts#L22) |
+| ssoConfigService | class | scoped | — | SsoConfigService | [node_modules/@open-mercato/enterprise/src/modules/sso/di.ts:20](../../../node_modules/@open-mercato/enterprise/src/modules/sso/di.ts#L20) |
+| ssoProviderRegistry | value | — | — | — | [node_modules/@open-mercato/enterprise/src/modules/sso/di.ts:17](../../../node_modules/@open-mercato/enterprise/src/modules/sso/di.ts#L17) |
+| ssoService | class | scoped | — | SsoService | [node_modules/@open-mercato/enterprise/src/modules/sso/di.ts:18](../../../node_modules/@open-mercato/enterprise/src/modules/sso/di.ts#L18) |