@open-mercato/cli 0.6.8-develop.6961.1.5b7ca407e7 → 0.6.8-develop.6963.1.04a6d320e9

package/dist/agentic/guides/modules/search/index.md

@@ -0,0 +1,25 @@
+# search — module facts (generated, do not edit)
+<!-- generated from @open-mercato/search 0.6.8-develop.6963.1.04a6d320e9; core 0.6.8-develop.6963.1.04a6d320e9 — R1 staleness stamp -->
+Source root: node_modules/@open-mercato/search/src/modules/search
+
+## Sections
+
+- [Events](events.md) — ~1 KB — Generated events facts for search.
+- [ACL features](acl-features.md) — ~1 KB — Generated acl features facts for search.
+- [Backend pages](backend-pages.md) — ~1 KB — Generated backend pages facts for search.
+- [UMES hosts](umes-hosts.md) — ~1 KB — Generated umes hosts facts for search.
+- [UMES contributions](umes-contributions.md) — ~3 KB — Generated umes contributions facts for search.
+- [Contribution resolutions](contribution-resolutions.md) — ~3 KB — Generated contribution resolutions facts for search.
+- [CLI commands](cli-commands.md) — ~1 KB — Generated cli commands facts for search.
+- [AI tools / MCP capabilities](ai-tools-mcp-capabilities.md) — ~1 KB — Generated ai tools / mcp capabilities facts for search.
+- [Exact override targets](exact-override-targets.md) — ~8 KB — Generated exact override targets facts for search.
+- [Owned contract — module metadata](owned-contract-module-metadata.md) — ~1 KB — Generated owned contract — module metadata facts for search.
+- [Workers](workers.md) — ~1 KB — Generated workers facts for search.
+- [Setup](setup.md) — ~1 KB — Generated setup facts for search.
+- [Encryption](encryption.md) — ~1 KB — Generated encryption facts for search.
+- [DI registrations (rich)](di-registrations-rich.md) — ~1 KB — Generated di registrations (rich) facts for search.
+
+Read only the section files needed for the task; every section ends with a completion marker.
+A section absent from this list has no facts for search; this index is complete only when the read reaches the marker below.
+
+<!-- end module facts: search — 14 sections -->

package/dist/agentic/guides/modules/search/owned-contract-module-metadata.md

@@ -0,0 +1,11 @@
+# search — Owned contract — module metadata
+
+[Back to module index](index.md)
+
+## Owned contract — module metadata
+
+| ID | Metadata | Source |
+|---|---|---|
+| search | name=search; version=0.1.0 | [index.ts:3](../../../../node_modules/@open-mercato/search/src/modules/search/index.ts#L3) |
+
+<!-- end module facts section: search/owned-contract-module-metadata -->

package/dist/agentic/guides/modules/search/setup.md

@@ -0,0 +1,11 @@
+# search — Setup
+
+[Back to module index](index.md)
+
+## Setup
+
+| ID | Metadata | Source |
+|---|---|---|
+| search:setup | roles=admin, employee | [setup.ts:3](../../../../node_modules/@open-mercato/search/src/modules/search/setup.ts#L3) |
+
+<!-- end module facts section: search/setup -->

package/dist/agentic/guides/modules/search/umes-contributions.md

@@ -0,0 +1,20 @@
+# search — UMES contributions
+
+[Back to module index](index.md)
+
+## UMES contributions
+
+| ID | Kind | Target | Phase / operations | Contract | Resolution | Source |
+|---|---|---|---|---|---|---|
+| ai:search_aggregate | specialized-registry | search_aggregate | — | registry=ai; registryId=search_aggregate; specialistRoute=aiTools | fact-ref | [ai-tools.ts](../../../../node_modules/@open-mercato/search/src/modules/search/ai-tools.ts) |
+| ai:search_get | specialized-registry | search_get | — | registry=ai; registryId=search_get; specialistRoute=aiTools | fact-ref | [ai-tools.ts](../../../../node_modules/@open-mercato/search/src/modules/search/ai-tools.ts) |
+| ai:search_query | specialized-registry | search_query | — | registry=ai; registryId=search_query; specialistRoute=aiTools | fact-ref | [ai-tools.ts](../../../../node_modules/@open-mercato/search/src/modules/search/ai-tools.ts) |
+| ai:search_reindex | specialized-registry | search_reindex | — | registry=ai; registryId=search_reindex; specialistRoute=aiTools | fact-ref | [ai-tools.ts](../../../../node_modules/@open-mercato/search/src/modules/search/ai-tools.ts) |
+| ai:search_schema | specialized-registry | search_schema | — | registry=ai; registryId=search_schema; specialistRoute=aiTools | fact-ref | [ai-tools.ts](../../../../node_modules/@open-mercato/search/src/modules/search/ai-tools.ts) |
+| ai:search_status | specialized-registry | search_status | — | registry=ai; registryId=search_status; specialistRoute=aiTools | fact-ref | [ai-tools.ts](../../../../node_modules/@open-mercato/search/src/modules/search/ai-tools.ts) |
+| search:fulltext_upsert | subscriber | search.index_record | before-or-after | event=search.index_record; persistent=false; subscriberId=search:fulltext_upsert; sync=true | fact-ref | [subscribers/fulltext_upsert.ts](../../../../node_modules/@open-mercato/search/src/modules/search/subscribers/fulltext_upsert.ts) |
+| search:vector_delete | subscriber | query_index.delete_one | before-or-after | event=query_index.delete_one; persistent=false; subscriberId=search:vector_delete; sync=true | fact-ref | [subscribers/vector_delete.ts](../../../../node_modules/@open-mercato/search/src/modules/search/subscribers/vector_delete.ts) |
+| search:vector_purge | subscriber | query_index.vectorize_purge | before-or-after | event=query_index.vectorize_purge; persistent=false; subscriberId=search:vector_purge; sync=true | fact-ref | [subscribers/vector_purge.ts](../../../../node_modules/@open-mercato/search/src/modules/search/subscribers/vector_purge.ts) |
+| search:vector_upsert | subscriber | query_index.vectorize_one | before-or-after | event=query_index.vectorize_one; persistent=false; subscriberId=search:vector_upsert; sync=true | fact-ref | [subscribers/vector_upsert.ts](../../../../node_modules/@open-mercato/search/src/modules/search/subscribers/vector_upsert.ts) |
+
+<!-- end module facts section: search/umes-contributions -->

package/dist/agentic/guides/modules/search/umes-hosts.md

@@ -0,0 +1,11 @@
+# search — UMES hosts
+
+[Back to module index](index.md)
+
+## UMES hosts
+
+| ID / pattern | Family | Supports | Context | Stability | Source |
+|---|---|---|---|---|---|
+| search.index_record | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:search.index_record |
+
+<!-- end module facts section: search/umes-hosts -->

package/dist/agentic/guides/modules/search/workers.md

@@ -0,0 +1,12 @@
+# search — Workers
+
+[Back to module index](index.md)
+
+## Workers
+
+| ID | Metadata | Source |
+|---|---|---|
+| search:workers:fulltext-index.worker | queue=fulltext-indexing | [workers/fulltext-index.worker.ts:20](../../../../node_modules/@open-mercato/search/src/modules/search/workers/fulltext-index.worker.ts#L20) |
+| search:workers:vector-index.worker | queue=vector-indexing | [workers/vector-index.worker.ts:23](../../../../node_modules/@open-mercato/search/src/modules/search/workers/vector-index.worker.ts#L23) |
+
+<!-- end module facts section: search/workers -->

package/dist/agentic/guides/modules/security/acl-features.md

@@ -0,0 +1,17 @@
+# security — ACL features
+
+[Back to module index](index.md)
+
+## ACL features  (7)
+
+| Feature | Source |
+|---|---|
+| security.profile.view | [acl.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
+| security.profile.password | [acl.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
+| security.profile.manage | [acl.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
+| security.mfa.manage | [acl.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
+| security.admin.manage | [acl.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
+| security.sudo.view | [acl.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
+| security.sudo.manage | [acl.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
+
+<!-- end module facts section: security/acl-features -->

package/dist/agentic/guides/modules/security/backend-pages.md

@@ -0,0 +1,22 @@
+# security — Backend pages
+
+[Back to module index](index.md)
+
+## Backend pages
+
+| ID / path | Source |
+|---|---|
+| /backend/profile/security | [backend/profile/security/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/profile/security/page.tsx) |
+| /backend/profile/security/mfa | [backend/profile/security/mfa/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/profile/security/mfa/page.tsx) |
+| /backend/profile/security/mfa/[providername] | [backend/profile/security/mfa/[providername]/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/profile/security/mfa/[providername]/page.tsx) |
+| /backend/profile/security/mfa/recovery-codes | [backend/profile/security/mfa/recovery-codes/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/profile/security/mfa/recovery-codes/page.tsx) |
+| /backend/security/enforcement | [backend/security/enforcement/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/enforcement/page.tsx) |
+| /backend/security/enforcement/[id] | [backend/security/enforcement/[id]/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/enforcement/[id]/page.tsx) |
+| /backend/security/enforcement/create | [backend/security/enforcement/create/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/enforcement/create/page.tsx) |
+| /backend/security/sudo | [backend/security/sudo/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/sudo/page.tsx) |
+| /backend/security/sudo/[id]/edit | [backend/security/sudo/[id]/edit/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/sudo/[id]/edit/page.tsx) |
+| /backend/security/sudo/create | [backend/security/sudo/create/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/sudo/create/page.tsx) |
+| /backend/security/users | [backend/security/users/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/users/page.tsx) |
+| /backend/security/users/[id] | [backend/security/users/[id]/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/users/[id]/page.tsx) |
+
+<!-- end module facts section: security/backend-pages -->

package/dist/agentic/guides/modules/security/contribution-resolutions.md

@@ -0,0 +1,22 @@
+# security — Contribution resolutions
+
+[Back to module index](index.md)
+
+## Contribution resolutions
+
+| Contribution | Target | Resolution | Activations | Source |
+|---|---|---|---|---|
+| notification:security.mfa.enforcement_deadline | module:security.mfa.enforcement_deadline | capability-only | — | [notifications.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
+| notification:security.mfa.enrolled | module:security.mfa.enrolled @security | capability-only | — | [notifications.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
+| notification:security.mfa.reset | module:security.mfa.reset @security | capability-only | — | [notifications.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
+| notification:security.password.changed | module:security.password.changed @security | capability-only | — | [notifications.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
+| security:enforcement-deadline-notification | event:security.enforcement.created @security | capability-only | — | [subscribers/enforcement-deadline-notification.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/enforcement-deadline-notification.ts) |
+| security:enforcement-updated-notification | event:security.enforcement.updated @security | capability-only | — | [subscribers/enforcement-updated-notification.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/enforcement-updated-notification.ts) |
+| security:mfa-enrolled-notification | event:security.mfa.enrolled @security | capability-only | — | [subscribers/notification.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/notification.ts) |
+| security:mfa-reset-notification | event:security.mfa.reset @security | capability-only | — | [subscribers/mfa-reset-notification.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/mfa-reset-notification.ts) |
+| security:password-change-notification | event:security.password.notification_requested @security | capability-only | — | [subscribers/audit.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/audit.ts) |
+| security.auth.login.mfa-challenge | api-route:auth/login | capability-only | — | [api/interceptors.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/api/interceptors.ts) |
+| security.block-legacy-self-password-change | command:auth.users.update @auth | bound | command:auth.users.update:command-interceptor-bridge | [commands/interceptors.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/interceptors.ts) |
+| security.component-override.0:section:auth.login.form | component:section:auth.login.form | optional-target-missing | — | [widgets/components.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/widgets/components.ts) |
+
+<!-- end module facts section: security/contribution-resolutions -->

package/dist/agentic/guides/modules/security/di-registrations-rich.md

@@ -0,0 +1,17 @@
+# security — DI registrations (rich)
+
+[Back to module index](index.md)
+
+## DI registrations (rich)
+
+| Token | Kind | Lifetime | Injection | Provider | Source |
+|---|---|---|---|---|---|
+| mfaAdminService | class | scoped | — | MfaAdminService | [di.ts:34](../../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L34) |
+| mfaEnforcementService | class | scoped | — | MfaEnforcementService | [di.ts:33](../../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L33) |
+| mfaProviderRegistry | value | — | — | — | [di.ts:29](../../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L29) |
+| mfaService | class | scoped | — | MfaService | [di.ts:31](../../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L31) |
+| mfaVerificationService | class | scoped | — | MfaVerificationService | [di.ts:32](../../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L32) |
+| passwordService | class | scoped | — | PasswordService | [di.ts:30](../../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L30) |
+| sudoChallengeService | class | scoped | — | SudoChallengeService | [di.ts:35](../../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L35) |
+
+<!-- end module facts section: security/di-registrations-rich -->

package/dist/agentic/guides/modules/security/di-service-tokens.md

@@ -0,0 +1,16 @@
+# security — DI service tokens
+
+[Back to module index](index.md)
+
+## DI service tokens
+
+| Token | Source |
+|---|---|
+| passwordService | [di.ts:30](../../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L30) |
+| mfaService | [di.ts:31](../../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L31) |
+| mfaVerificationService | [di.ts:32](../../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L32) |
+| mfaEnforcementService | [di.ts:33](../../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L33) |
+| mfaAdminService | [di.ts:34](../../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L34) |
+| sudoChallengeService | [di.ts:35](../../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L35) |
+
+<!-- end module facts section: security/di-service-tokens -->

package/dist/agentic/guides/modules/security/domain-commands.md

@@ -0,0 +1,20 @@
+# security — Domain commands
+
+[Back to module index](index.md)
+
+## Domain commands
+
+| ID | Metadata | Source |
+|---|---|---|
+| security.admin.mfa.reset | — | [commands/resetUserMfa.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/resetUserMfa.ts) |
+| security.enforcement.create | — | [commands/createEnforcementPolicy.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/createEnforcementPolicy.ts) |
+| security.enforcement.delete | — | [commands/deleteEnforcementPolicy.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/deleteEnforcementPolicy.ts) |
+| security.enforcement.update | — | [commands/updateEnforcementPolicy.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/updateEnforcementPolicy.ts) |
+| security.mfa.method.remove | — | [commands/removeMfaMethod.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/removeMfaMethod.ts) |
+| security.mfa.recovery_codes.regenerate | — | [commands/regenerateRecoveryCodes.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/regenerateRecoveryCodes.ts) |
+| security.password.change | — | [commands/changePassword.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/changePassword.ts) |
+| security.sudo.config.create | — | [commands/createSudoConfig.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/createSudoConfig.ts) |
+| security.sudo.config.delete | — | [commands/deleteSudoConfig.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/deleteSudoConfig.ts) |
+| security.sudo.config.update | — | [commands/updateSudoConfig.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/updateSudoConfig.ts) |
+
+<!-- end module facts section: security/domain-commands -->

package/dist/agentic/guides/modules/security/entities.md

@@ -0,0 +1,16 @@
+# security — Entities
+
+[Back to module index](index.md)
+
+## Entities
+
+| Entity ID | Class | Table | Editable | CustomFields | Source |
+|---|---|---|---|---|---|
+| security:user_mfa_method | UserMfaMethod | user_mfa_methods | yes | no | [data/entities.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/data/entities.ts) |
+| security:mfa_recovery_code | MfaRecoveryCode | mfa_recovery_codes | no | no | [data/entities.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/data/entities.ts) |
+| security:mfa_enforcement_policy | MfaEnforcementPolicy | mfa_enforcement_policies | yes | no | [data/entities.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/data/entities.ts) |
+| security:sudo_challenge_config | SudoChallengeConfig | sudo_challenge_configs | yes | no | [data/entities.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/data/entities.ts) |
+| security:sudo_session | SudoSession | sudo_sessions | no | no | [data/entities.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/data/entities.ts) |
+| security:mfa_challenge | MfaChallenge | mfa_challenges | no | no | [data/entities.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/data/entities.ts) |
+
+<!-- end module facts section: security/entities -->

package/dist/agentic/guides/modules/security/events.md

@@ -0,0 +1,30 @@
+# security — Events
+
+[Back to module index](index.md)
+
+## Events  (20)
+
+| ID | Category | Entity | Browser transport | Source |
+|---|---|---|---|---|
+| security.password.changed | lifecycle | password | — | [events.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
+| security.password.notification_requested | lifecycle | password | — | [events.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
+| security.mfa.method.added | lifecycle | — | — | [events.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
+| security.mfa.method.removed | lifecycle | — | — | [events.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
+| security.mfa.enrolled | lifecycle | — | — | [events.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
+| security.mfa.removed | lifecycle | — | — | [events.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
+| security.mfa.verified | lifecycle | — | — | [events.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
+| security.mfa.otp.sent | lifecycle | — | — | [events.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
+| security.mfa.reset | lifecycle | — | — | [events.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
+| security.recovery.regenerated | lifecycle | — | — | [events.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
+| security.recovery.used | lifecycle | — | — | [events.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
+| security.enforcement.created | lifecycle | — | — | [events.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
+| security.enforcement.updated | lifecycle | — | — | [events.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
+| security.enforcement.deadline_reminder_requested | lifecycle | — | — | [events.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
+| security.sudo.challenged | lifecycle | — | — | [events.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
+| security.sudo.verified | lifecycle | — | — | [events.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
+| security.sudo.failed | lifecycle | — | — | [events.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
+| security.sudo.config.created | lifecycle | — | — | [events.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
+| security.sudo.config.updated | lifecycle | — | — | [events.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
+| security.sudo.config.deleted | lifecycle | — | — | [events.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/events.ts) |
+
+<!-- end module facts section: security/events -->

package/dist/agentic/guides/modules/security/exact-override-targets.md

@@ -0,0 +1,52 @@
+# security — Exact override targets
+
+[Back to module index](index.md)
+
+## Exact override targets
+
+| Domain | Path / key | Supported modes | Referenced fact | Source |
+|---|---|---|---|---|
+| acl | `overrides.acl.features["security.admin.manage"]` | disable-replace | aclFeatures:security.admin.manage | [acl.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
+| acl | `overrides.acl.features["security.mfa.manage"]` | disable-replace | aclFeatures:security.mfa.manage | [acl.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
+| acl | `overrides.acl.features["security.profile.manage"]` | disable-replace | aclFeatures:security.profile.manage | [acl.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
+| acl | `overrides.acl.features["security.profile.password"]` | disable-replace | aclFeatures:security.profile.password | [acl.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
+| acl | `overrides.acl.features["security.profile.view"]` | disable-replace | aclFeatures:security.profile.view | [acl.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
+| acl | `overrides.acl.features["security.sudo.manage"]` | disable-replace | aclFeatures:security.sudo.manage | [acl.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
+| acl | `overrides.acl.features["security.sudo.view"]` | disable-replace | aclFeatures:security.sudo.view | [acl.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/acl.ts) |
+| commandInterceptors | `overrides.commandInterceptors["security.block-legacy-self-password-change"]` | disable-replace | extensionSurfaces.contributions:security.block-legacy-self-password-change | [commands/interceptors.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/interceptors.ts) |
+| di | `overrides.di["mfaAdminService"]` | disable-replace | ownedContracts.di-registration:mfaAdminService | [di.ts:34](../../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L34) |
+| di | `overrides.di["mfaEnforcementService"]` | disable-replace | ownedContracts.di-registration:mfaEnforcementService | [di.ts:33](../../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L33) |
+| di | `overrides.di["mfaProviderRegistry"]` | disable-replace | ownedContracts.di-registration:mfaProviderRegistry | [di.ts:29](../../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L29) |
+| di | `overrides.di["mfaService"]` | disable-replace | ownedContracts.di-registration:mfaService | [di.ts:31](../../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L31) |
+| di | `overrides.di["mfaVerificationService"]` | disable-replace | ownedContracts.di-registration:mfaVerificationService | [di.ts:32](../../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L32) |
+| di | `overrides.di["passwordService"]` | disable-replace | ownedContracts.di-registration:passwordService | [di.ts:30](../../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L30) |
+| di | `overrides.di["sudoChallengeService"]` | disable-replace | ownedContracts.di-registration:sudoChallengeService | [di.ts:35](../../../../node_modules/@open-mercato/enterprise/src/modules/security/di.ts#L35) |
+| events | `overrides.events.subscribers["security:enforcement-deadline-notification"]` | disable-replace | extensionSurfaces.contributions:security:enforcement-deadline-notification | [subscribers/enforcement-deadline-notification.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/enforcement-deadline-notification.ts) |
+| events | `overrides.events.subscribers["security:enforcement-updated-notification"]` | disable-replace | extensionSurfaces.contributions:security:enforcement-updated-notification | [subscribers/enforcement-updated-notification.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/enforcement-updated-notification.ts) |
+| events | `overrides.events.subscribers["security:mfa-enrolled-notification"]` | disable-replace | extensionSurfaces.contributions:security:mfa-enrolled-notification | [subscribers/notification.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/notification.ts) |
+| events | `overrides.events.subscribers["security:mfa-reset-notification"]` | disable-replace | extensionSurfaces.contributions:security:mfa-reset-notification | [subscribers/mfa-reset-notification.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/mfa-reset-notification.ts) |
+| events | `overrides.events.subscribers["security:password-change-notification"]` | disable-replace | extensionSurfaces.contributions:security:password-change-notification | [subscribers/audit.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/audit.ts) |
+| guards | `overrides.guards["security.backend.legacy-profile-password-redirect"]` | disable-replace | ownedContracts.page-middleware:security.backend.legacy-profile-password-redirect | [backend/middleware.ts:9](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/middleware.ts#L9) |
+| guards | `overrides.guards["security.backend.mfa-enrollment-redirect"]` | disable-replace | ownedContracts.page-middleware:security.backend.mfa-enrollment-redirect | [backend/middleware.ts:20](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/middleware.ts#L20) |
+| guards | `overrides.guards["security.frontend.mfa-enrollment-redirect"]` | disable-replace | ownedContracts.page-middleware:security.frontend.mfa-enrollment-redirect | [frontend/middleware.ts:8](../../../../node_modules/@open-mercato/enterprise/src/modules/security/frontend/middleware.ts#L8) |
+| interceptors | `overrides.interceptors["security.auth.login.mfa-challenge"]` | disable-replace | extensionSurfaces.contributions:security.auth.login.mfa-challenge | [api/interceptors.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/api/interceptors.ts) |
+| notifications | `overrides.notifications.types["security.mfa.enforcement_deadline"]` | disable-replace | notifications:security.mfa.enforcement_deadline | [notifications.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
+| notifications | `overrides.notifications.types["security.mfa.enrolled"]` | disable-replace | notifications:security.mfa.enrolled | [notifications.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
+| notifications | `overrides.notifications.types["security.mfa.reset"]` | disable-replace | notifications:security.mfa.reset | [notifications.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
+| notifications | `overrides.notifications.types["security.password.changed"]` | disable-replace | notifications:security.password.changed | [notifications.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
+| routes | `overrides.routes.pages["backend:/backend/profile/security"]` | disable-replace | backendPages:/backend/profile/security | [backend/profile/security/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/profile/security/page.tsx) |
+| routes | `overrides.routes.pages["backend:/backend/profile/security/mfa"]` | disable-replace | backendPages:/backend/profile/security/mfa | [backend/profile/security/mfa/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/profile/security/mfa/page.tsx) |
+| routes | `overrides.routes.pages["backend:/backend/profile/security/mfa/[providername]"]` | disable-replace | backendPages:/backend/profile/security/mfa/[providername] | [backend/profile/security/mfa/[providername]/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/profile/security/mfa/[providername]/page.tsx) |
+| routes | `overrides.routes.pages["backend:/backend/profile/security/mfa/recovery-codes"]` | disable-replace | backendPages:/backend/profile/security/mfa/recovery-codes | [backend/profile/security/mfa/recovery-codes/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/profile/security/mfa/recovery-codes/page.tsx) |
+| routes | `overrides.routes.pages["backend:/backend/security/enforcement"]` | disable-replace | backendPages:/backend/security/enforcement | [backend/security/enforcement/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/enforcement/page.tsx) |
+| routes | `overrides.routes.pages["backend:/backend/security/enforcement/[id]"]` | disable-replace | backendPages:/backend/security/enforcement/[id] | [backend/security/enforcement/[id]/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/enforcement/[id]/page.tsx) |
+| routes | `overrides.routes.pages["backend:/backend/security/enforcement/create"]` | disable-replace | backendPages:/backend/security/enforcement/create | [backend/security/enforcement/create/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/enforcement/create/page.tsx) |
+| routes | `overrides.routes.pages["backend:/backend/security/sudo"]` | disable-replace | backendPages:/backend/security/sudo | [backend/security/sudo/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/sudo/page.tsx) |
+| routes | `overrides.routes.pages["backend:/backend/security/sudo/[id]/edit"]` | disable-replace | backendPages:/backend/security/sudo/[id]/edit | [backend/security/sudo/[id]/edit/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/sudo/[id]/edit/page.tsx) |
+| routes | `overrides.routes.pages["backend:/backend/security/sudo/create"]` | disable-replace | backendPages:/backend/security/sudo/create | [backend/security/sudo/create/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/sudo/create/page.tsx) |
+| routes | `overrides.routes.pages["backend:/backend/security/users"]` | disable-replace | backendPages:/backend/security/users | [backend/security/users/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/users/page.tsx) |
+| routes | `overrides.routes.pages["backend:/backend/security/users/[id]"]` | disable-replace | backendPages:/backend/security/users/[id] | [backend/security/users/[id]/page.tsx](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/security/users/[id]/page.tsx) |
+| setup | `overrides.setup.defaultRoleFeatures` | replace | ownedContracts.setup:security:setup | [setup.ts:3](../../../../node_modules/@open-mercato/enterprise/src/modules/security/setup.ts#L3) |
+| widgets | `overrides.widgets.components["section:auth.login.form"]` | disable-replace | extensionSurfaces.contributions:security.component-override.0:section:auth.login.form | [widgets/components.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/widgets/components.ts) |
+
+<!-- end module facts section: security/exact-override-targets -->

package/dist/agentic/guides/modules/security/generator-plugins.md

@@ -0,0 +1,12 @@
+# security — Generator plugins
+
+[Back to module index](index.md)
+
+## Generator plugins
+
+| ID | Metadata | Source |
+|---|---|---|
+| security.mfa-providers | conventionFile=security.mfa-providers.ts; outputFileName=security-mfa-providers.generated.ts | [generators.ts:28](../../../../node_modules/@open-mercato/enterprise/src/modules/security/generators.ts#L28) |
+| security.sudo | conventionFile=security.sudo.ts; outputFileName=security-sudo.generated.ts | [generators.ts:45](../../../../node_modules/@open-mercato/enterprise/src/modules/security/generators.ts#L45) |
+
+<!-- end module facts section: security/generator-plugins -->

package/dist/agentic/guides/modules/security/host-extension-points.md

@@ -0,0 +1,10 @@
+# security — Host extension points
+
+[Back to module index](index.md)
+
+## Host extension points
+
+- Entity IDs: _none_
+- Table IDs: security.enforcement.list · security.sudo.list · security.users.list
+
+<!-- end module facts section: security/host-extension-points -->

package/dist/agentic/guides/modules/security/index.md

@@ -0,0 +1,29 @@
+# security — module facts (generated, do not edit)
+<!-- generated from @open-mercato/enterprise 0.6.8-develop.6963.1.04a6d320e9; core 0.6.8-develop.6963.1.04a6d320e9 — R1 staleness stamp -->
+Source root: node_modules/@open-mercato/enterprise/src/modules/security
+
+## Sections
+
+- [Entities](entities.md) — ~2 KB — Generated entities facts for security.
+- [Events](events.md) — ~4 KB — Generated events facts for security.
+- [ACL features](acl-features.md) — ~1 KB — Generated acl features facts for security.
+- [Backend pages](backend-pages.md) — ~3 KB — Generated backend pages facts for security.
+- [DI service tokens](di-service-tokens.md) — ~1 KB — Generated di service tokens facts for security.
+- [Host extension points](host-extension-points.md) — ~1 KB — Generated host extension points facts for security.
+- [UMES hosts](umes-hosts.md) — ~11 KB — Generated umes hosts facts for security.
+- [UMES contributions](umes-contributions.md) — ~5 KB — Generated umes contributions facts for security.
+- [Contribution resolutions](contribution-resolutions.md) — ~4 KB — Generated contribution resolutions facts for security.
+- [UMES diagnostics](umes-diagnostics.md) — ~1 KB — Generated umes diagnostics facts for security.
+- [Notifications](notifications.md) — ~1 KB — Generated notifications facts for security.
+- [Exact override targets](exact-override-targets.md) — ~12 KB — Generated exact override targets facts for security.
+- [Owned contract — module metadata](owned-contract-module-metadata.md) — ~1 KB — Generated owned contract — module metadata facts for security.
+- [Domain commands](domain-commands.md) — ~2 KB — Generated domain commands facts for security.
+- [Page middleware](page-middleware.md) — ~1 KB — Generated page middleware facts for security.
+- [Setup](setup.md) — ~1 KB — Generated setup facts for security.
+- [DI registrations (rich)](di-registrations-rich.md) — ~2 KB — Generated di registrations (rich) facts for security.
+- [Generator plugins](generator-plugins.md) — ~1 KB — Generated generator plugins facts for security.
+
+Read only the section files needed for the task; every section ends with a completion marker.
+A section absent from this list has no facts for security; this index is complete only when the read reaches the marker below.
+
+<!-- end module facts: security — 18 sections -->

package/dist/agentic/guides/modules/security/notifications.md

@@ -0,0 +1,14 @@
+# security — Notifications
+
+[Back to module index](index.md)
+
+## Notifications
+
+| Notification ID | Source |
+|---|---|
+| security.password.changed | [notifications.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
+| security.mfa.enrolled | [notifications.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
+| security.mfa.reset | [notifications.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
+| security.mfa.enforcement_deadline | [notifications.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
+
+<!-- end module facts section: security/notifications -->

package/dist/agentic/guides/modules/security/owned-contract-module-metadata.md

@@ -0,0 +1,11 @@
+# security — Owned contract — module metadata
+
+[Back to module index](index.md)
+
+## Owned contract — module metadata
+
+| ID | Metadata | Source |
+|---|---|---|
+| security | version=0.1.0 | [index.ts:1](../../../../node_modules/@open-mercato/enterprise/src/modules/security/index.ts#L1) |
+
+<!-- end module facts section: security/owned-contract-module-metadata -->

package/dist/agentic/guides/modules/security/page-middleware.md

@@ -0,0 +1,13 @@
+# security — Page middleware
+
+[Back to module index](index.md)
+
+## Page middleware
+
+| ID | Metadata | Source |
+|---|---|---|
+| security.backend.legacy-profile-password-redirect | mode=backend; priority=10; surface=backend | [backend/middleware.ts:9](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/middleware.ts#L9) |
+| security.backend.mfa-enrollment-redirect | mode=backend; priority=50; surface=backend | [backend/middleware.ts:20](../../../../node_modules/@open-mercato/enterprise/src/modules/security/backend/middleware.ts#L20) |
+| security.frontend.mfa-enrollment-redirect | mode=frontend; priority=50; surface=frontend | [frontend/middleware.ts:8](../../../../node_modules/@open-mercato/enterprise/src/modules/security/frontend/middleware.ts#L8) |
+
+<!-- end module facts section: security/page-middleware -->

package/dist/agentic/guides/modules/security/setup.md

@@ -0,0 +1,11 @@
+# security — Setup
+
+[Back to module index](index.md)
+
+## Setup
+
+| ID | Metadata | Source |
+|---|---|---|
+| security:setup | roles=admin, employee, superadmin | [setup.ts:3](../../../../node_modules/@open-mercato/enterprise/src/modules/security/setup.ts#L3) |
+
+<!-- end module facts section: security/setup -->

package/dist/agentic/guides/modules/security/umes-contributions.md

@@ -0,0 +1,22 @@
+# security — UMES contributions
+
+[Back to module index](index.md)
+
+## UMES contributions
+
+| ID | Kind | Target | Phase / operations | Contract | Resolution | Source |
+|---|---|---|---|---|---|---|
+| security.auth.login.mfa-challenge | api-interceptor | auth/login | after | activation=crud-pipeline; failurePosture=fallback; methods=POST; phases=after; route=auth/login; timeoutMs=2000 | fact-ref | [api/interceptors.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/api/interceptors.ts) |
+| security.block-legacy-self-password-change | command-interceptor | auth.users.update | before-execute | phases=before-execute; targetCommand=auth.users.update | fact-ref | [commands/interceptors.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/commands/interceptors.ts) |
+| security.component-override.0:section:auth.login.form | component-override | section:auth.login.form | — | handle=section:auth.login.form; mode=wrapper; propsContract=component-props-schema | optional-external | [widgets/components.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/widgets/components.ts) |
+| notification:security.mfa.enforcement_deadline | specialized-registry | security.mfa.enforcement_deadline | — | registry=notification; registryId=security.mfa.enforcement_deadline; specialistRoute=notifications | fact-ref | [notifications.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
+| notification:security.mfa.enrolled | specialized-registry | security.mfa.enrolled | — | registry=notification; registryId=security.mfa.enrolled; specialistRoute=notifications | fact-ref | [notifications.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
+| notification:security.mfa.reset | specialized-registry | security.mfa.reset | — | registry=notification; registryId=security.mfa.reset; specialistRoute=notifications | fact-ref | [notifications.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
+| notification:security.password.changed | specialized-registry | security.password.changed | — | registry=notification; registryId=security.password.changed; specialistRoute=notifications | fact-ref | [notifications.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/notifications.ts) |
+| security:enforcement-deadline-notification | subscriber | security.enforcement.created | async-delivery | event=security.enforcement.created; persistent=true; subscriberId=security:enforcement-deadline-notification; sync=false | fact-ref | [subscribers/enforcement-deadline-notification.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/enforcement-deadline-notification.ts) |
+| security:enforcement-updated-notification | subscriber | security.enforcement.updated | async-delivery | event=security.enforcement.updated; persistent=true; subscriberId=security:enforcement-updated-notification; sync=false | fact-ref | [subscribers/enforcement-updated-notification.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/enforcement-updated-notification.ts) |
+| security:mfa-enrolled-notification | subscriber | security.mfa.enrolled | async-delivery | event=security.mfa.enrolled; persistent=true; subscriberId=security:mfa-enrolled-notification; sync=false | fact-ref | [subscribers/notification.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/notification.ts) |
+| security:mfa-reset-notification | subscriber | security.mfa.reset | async-delivery | event=security.mfa.reset; persistent=true; subscriberId=security:mfa-reset-notification; sync=false | fact-ref | [subscribers/mfa-reset-notification.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/mfa-reset-notification.ts) |
+| security:password-change-notification | subscriber | security.password.notification_requested | async-delivery | event=security.password.notification_requested; persistent=true; subscriberId=security:password-change-notification; sync=false | fact-ref | [subscribers/audit.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/subscribers/audit.ts) |
+
+<!-- end module facts section: security/umes-contributions -->

package/dist/agentic/guides/modules/security/umes-diagnostics.md

@@ -0,0 +1,11 @@
+# security — UMES diagnostics
+
+[Back to module index](index.md)
+
+## UMES diagnostics
+
+- unbound-helper: data-table:security.enforcement.list:empty-state
+- unbound-helper: data-table:security.sudo.list:empty-state
+- unbound-helper: data-table:security.users.list:empty-state
+
+<!-- end module facts section: security/umes-diagnostics -->

package/dist/agentic/guides/modules/security/umes-hosts.md

@@ -0,0 +1,65 @@
+# security — UMES hosts
+
+[Back to module index](index.md)
+
+## UMES hosts
+
+| ID / pattern | Family | Supports | Context | Stability | Source |
+|---|---|---|---|---|---|
+| data-table:security.enforcement.list | data-table | component-replacement | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.enforcement.list:bulk-actions | data-table | bulk-action | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.enforcement.list:columns | data-table | column-widget | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.enforcement.list:filters | data-table | filter-widget | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.enforcement.list:footer | data-table | render-widget | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.enforcement.list:header | data-table | render-widget | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.enforcement.list:row-actions | data-table | row-action | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.enforcement.list:search-trailing | data-table | render-widget | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.enforcement.list:toolbar | data-table | toolbar-widget | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.sudo.list | data-table | component-replacement | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.sudo.list:bulk-actions | data-table | bulk-action | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.sudo.list:columns | data-table | column-widget | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.sudo.list:filters | data-table | filter-widget | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.sudo.list:footer | data-table | render-widget | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.sudo.list:header | data-table | render-widget | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.sudo.list:row-actions | data-table | row-action | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.sudo.list:search-trailing | data-table | render-widget | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.sudo.list:toolbar | data-table | toolbar-widget | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.users.list | data-table | component-replacement | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.users.list:bulk-actions | data-table | bulk-action | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.users.list:columns | data-table | column-widget | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.users.list:filters | data-table | filter-widget | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.users.list:footer | data-table | render-widget | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.users.list:header | data-table | render-widget | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.users.list:row-actions | data-table | row-action | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.users.list:search-trailing | data-table | render-widget | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| data-table:security.users.list:toolbar | data-table | toolbar-widget | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| security.profile.sections | detail | render-widget | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| security.profile.sidebar | detail | render-widget | — | FROZEN | [extension-points.ts](../../../../node_modules/@open-mercato/enterprise/src/modules/security/extension-points.ts) |
+| security:mfa_challenge | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:security:mfa_challenge |
+| security:mfa_enforcement_policy | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:security:mfa_enforcement_policy |
+| security:mfa_recovery_code | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:security:mfa_recovery_code |
+| security:sudo_challenge_config | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:security:sudo_challenge_config |
+| security:sudo_session | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:security:sudo_session |
+| security:user_mfa_method | entity | response-enricher, query-enricher, mutation-guard, entity-extension | tenant-and-organization | STABLE | entities:security:user_mfa_method |
+| security.enforcement.created | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.enforcement.created |
+| security.enforcement.deadline_reminder_requested | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.enforcement.deadline_reminder_requested |
+| security.enforcement.updated | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.enforcement.updated |
+| security.mfa.enrolled | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.mfa.enrolled |
+| security.mfa.method.added | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.mfa.method.added |
+| security.mfa.method.removed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.mfa.method.removed |
+| security.mfa.otp.sent | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.mfa.otp.sent |
+| security.mfa.removed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.mfa.removed |
+| security.mfa.reset | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.mfa.reset |
+| security.mfa.verified | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.mfa.verified |
+| security.password.changed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.password.changed |
+| security.password.notification_requested | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.password.notification_requested |
+| security.recovery.regenerated | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.recovery.regenerated |
+| security.recovery.used | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.recovery.used |
+| security.sudo.challenged | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.sudo.challenged |
+| security.sudo.config.created | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.sudo.config.created |
+| security.sudo.config.deleted | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.sudo.config.deleted |
+| security.sudo.config.updated | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.sudo.config.updated |
+| security.sudo.failed | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.sudo.failed |
+| security.sudo.verified | event | async-subscriber, sync-subscriber | tenant-organization-and-audience | STABLE | events:security.sudo.verified |
+
+<!-- end module facts section: security/umes-hosts -->