@open-mercato/core 0.4.2-canary-15c0b23a3a → 0.4.2-canary-da2b080494

package/dist/modules/auth/api/profile/route.js

@@ -1,157 +0,0 @@
-import { NextResponse } from "next/server";
-import { z } from "zod";
-import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
-import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
-import { signJwt } from "@open-mercato/shared/lib/auth/jwt";
-import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
-import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
-import { User } from "@open-mercato/core/modules/auth/data/entities";
-import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
-import { buildPasswordSchema } from "@open-mercato/shared/lib/auth/passwordPolicy";
-const profileResponseSchema = z.object({
-  email: z.string().email()
-});
-const passwordSchema = buildPasswordSchema();
-const updateSchema = z.object({
-  email: z.string().email().optional(),
-  password: passwordSchema.optional()
-}).refine((data) => Boolean(data.email || data.password), {
-  message: "Provide an email or password.",
-  path: ["email"]
-});
-const profileUpdateResponseSchema = z.object({
-  ok: z.literal(true),
-  email: z.string().email()
-});
-const metadata = {
-  GET: { requireAuth: true },
-  PUT: { requireAuth: true }
-};
-function buildCommandContext(container, auth, req) {
-  return {
-    container,
-    auth,
-    organizationScope: null,
-    selectedOrganizationId: auth.orgId ?? null,
-    organizationIds: auth.orgId ? [auth.orgId] : null,
-    request: req
-  };
-}
-async function GET(req) {
-  const { translate } = await resolveTranslations();
-  const auth = await getAuthFromRequest(req);
-  if (!auth?.sub) {
-    return NextResponse.json({ error: translate("api.errors.unauthorized", "Unauthorized") }, { status: 401 });
-  }
-  try {
-    const container = await createRequestContainer();
-    const em = container.resolve("em");
-    const user = await findOneWithDecryption(
-      em,
-      User,
-      { id: auth.sub, deletedAt: null },
-      void 0,
-      { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null }
-    );
-    if (!user) {
-      return NextResponse.json({ error: translate("auth.users.form.errors.notFound", "User not found") }, { status: 404 });
-    }
-    return NextResponse.json({ email: String(user.email) });
-  } catch (err) {
-    console.error("auth.profile.load failed", err);
-    return NextResponse.json({ error: translate("auth.profile.form.errors.load", "Failed to load profile.") }, { status: 400 });
-  }
-}
-async function PUT(req) {
-  const { translate } = await resolveTranslations();
-  const auth = await getAuthFromRequest(req);
-  if (!auth?.sub) {
-    return NextResponse.json({ error: translate("api.errors.unauthorized", "Unauthorized") }, { status: 401 });
-  }
-  try {
-    const body = await req.json().catch(() => ({}));
-    const parsed = updateSchema.safeParse(body);
-    if (!parsed.success) {
-      return NextResponse.json(
-        {
-          error: translate("auth.profile.form.errors.invalid", "Invalid profile update."),
-          issues: parsed.error.issues
-        },
-        { status: 400 }
-      );
-    }
-    const container = await createRequestContainer();
-    const commandBus = container.resolve("commandBus");
-    const ctx = buildCommandContext(container, auth, req);
-    const { result } = await commandBus.execute(
-      "auth.users.update",
-      {
-        input: {
-          id: auth.sub,
-          email: parsed.data.email,
-          password: parsed.data.password
-        },
-        ctx
-      }
-    );
-    const authService = container.resolve("authService");
-    const roles = await authService.getUserRoles(result, result.tenantId ? String(result.tenantId) : null);
-    const jwt = signJwt({
-      sub: String(result.id),
-      tenantId: result.tenantId ? String(result.tenantId) : null,
-      orgId: result.organizationId ? String(result.organizationId) : null,
-      email: result.email,
-      roles
-    });
-    const res = NextResponse.json({ ok: true, email: String(result.email) });
-    res.cookies.set("auth_token", jwt, {
-      httpOnly: true,
-      path: "/",
-      sameSite: "lax",
-      secure: process.env.NODE_ENV === "production",
-      maxAge: 60 * 60 * 8
-    });
-    return res;
-  } catch (err) {
-    if (err instanceof CrudHttpError) {
-      return NextResponse.json(err.body, { status: err.status });
-    }
-    console.error("auth.profile.update failed", err);
-    return NextResponse.json({ error: translate("auth.profile.form.errors.save", "Failed to update profile.") }, { status: 400 });
-  }
-}
-const openApi = {
-  tag: "Authentication & Accounts",
-  summary: "Profile settings",
-  methods: {
-    GET: {
-      summary: "Get current profile",
-      description: "Returns the email address for the signed-in user.",
-      responses: [
-        { status: 200, description: "Profile payload", schema: profileResponseSchema },
-        { status: 401, description: "Unauthorized", schema: z.object({ error: z.string() }) },
-        { status: 404, description: "User not found", schema: z.object({ error: z.string() }) }
-      ]
-    },
-    PUT: {
-      summary: "Update current profile",
-      description: "Updates the email address or password for the signed-in user.",
-      requestBody: {
-        contentType: "application/json",
-        schema: updateSchema
-      },
-      responses: [
-        { status: 200, description: "Profile updated", schema: profileUpdateResponseSchema },
-        { status: 400, description: "Invalid payload", schema: z.object({ error: z.string() }) },
-        { status: 401, description: "Unauthorized", schema: z.object({ error: z.string() }) }
-      ]
-    }
-  }
-};
-export {
-  GET,
-  PUT,
-  metadata,
-  openApi
-};
-//# sourceMappingURL=route.js.map

package/dist/modules/auth/api/profile/route.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../../src/modules/auth/api/profile/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { signJwt } from '@open-mercato/shared/lib/auth/jwt'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { AuthService } from '@open-mercato/core/modules/auth/services/authService'\nimport { User } from '@open-mercato/core/modules/auth/data/entities'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { buildPasswordSchema } from '@open-mercato/shared/lib/auth/passwordPolicy'\n\nconst profileResponseSchema = z.object({\n  email: z.string().email(),\n})\n\nconst passwordSchema = buildPasswordSchema()\n\nconst updateSchema = z.object({\n  email: z.string().email().optional(),\n  password: passwordSchema.optional(),\n}).refine((data) => Boolean(data.email || data.password), {\n  message: 'Provide an email or password.',\n  path: ['email'],\n})\n\nconst profileUpdateResponseSchema = z.object({\n  ok: z.literal(true),\n  email: z.string().email(),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true },\n  PUT: { requireAuth: true },\n}\n\nfunction buildCommandContext(container: Awaited<ReturnType<typeof createRequestContainer>>, auth: NonNullable<Awaited<ReturnType<typeof getAuthFromRequest>>>, req: Request): CommandRuntimeContext {\n  return {\n    container,\n    auth,\n    organizationScope: null,\n    selectedOrganizationId: auth.orgId ?? null,\n    organizationIds: auth.orgId ? [auth.orgId] : null,\n    request: req,\n  }\n}\n\nexport async function GET(req: Request) {\n  const { translate } = await resolveTranslations()\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return NextResponse.json({ error: translate('api.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n  }\n  try {\n    const container = await createRequestContainer()\n    const em = (container.resolve('em') as EntityManager)\n    const user = await findOneWithDecryption(\n      em,\n      User,\n      { id: auth.sub, deletedAt: null },\n      undefined,\n      { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null },\n    )\n    if (!user) {\n      return NextResponse.json({ error: translate('auth.users.form.errors.notFound', 'User not found') }, { status: 404 })\n    }\n    return NextResponse.json({ email: String(user.email) })\n  } catch (err) {\n    console.error('auth.profile.load failed', err)\n    return NextResponse.json({ error: translate('auth.profile.form.errors.load', 'Failed to load profile.') }, { status: 400 })\n  }\n}\n\nexport async function PUT(req: Request) {\n  const { translate } = await resolveTranslations()\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return NextResponse.json({ error: translate('api.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n  }\n  try {\n    const body = await req.json().catch(() => ({}))\n    const parsed = updateSchema.safeParse(body)\n    if (!parsed.success) {\n      return NextResponse.json(\n        {\n          error: translate('auth.profile.form.errors.invalid', 'Invalid profile update.'),\n          issues: parsed.error.issues,\n        },\n        { status: 400 },\n      )\n    }\n    const container = await createRequestContainer()\n    const commandBus = (container.resolve('commandBus') as CommandBus)\n    const ctx = buildCommandContext(container, auth, req)\n    const { result } = await commandBus.execute<{ id: string; email?: string; password?: string }, User>(\n      'auth.users.update',\n      {\n        input: {\n          id: auth.sub,\n          email: parsed.data.email,\n          password: parsed.data.password,\n        },\n        ctx,\n      },\n    )\n    const authService = container.resolve('authService') as AuthService\n    const roles = await authService.getUserRoles(result, result.tenantId ? String(result.tenantId) : null)\n    const jwt = signJwt({\n      sub: String(result.id),\n      tenantId: result.tenantId ? String(result.tenantId) : null,\n      orgId: result.organizationId ? String(result.organizationId) : null,\n      email: result.email,\n      roles,\n    })\n    const res = NextResponse.json({ ok: true, email: String(result.email) })\n    res.cookies.set('auth_token', jwt, {\n      httpOnly: true,\n      path: '/',\n      sameSite: 'lax',\n      secure: process.env.NODE_ENV === 'production',\n      maxAge: 60 * 60 * 8,\n    })\n    return res\n  } catch (err) {\n    if (err instanceof CrudHttpError) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    console.error('auth.profile.update failed', err)\n    return NextResponse.json({ error: translate('auth.profile.form.errors.save', 'Failed to update profile.') }, { status: 400 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Authentication & Accounts',\n  summary: 'Profile settings',\n  methods: {\n    GET: {\n      summary: 'Get current profile',\n      description: 'Returns the email address for the signed-in user.',\n      responses: [\n        { status: 200, description: 'Profile payload', schema: profileResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 404, description: 'User not found', schema: z.object({ error: z.string() }) },\n      ],\n    },\n    PUT: {\n      summary: 'Update current profile',\n      description: 'Updates the email address or password for the signed-in user.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: updateSchema,\n      },\n      responses: [\n        { status: 200, description: 'Profile updated', schema: profileUpdateResponseSchema },\n        { status: 400, description: 'Invalid payload', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,eAAe;AACxB,SAAS,2BAA2B;AACpC,SAAS,qBAAqB;AAE9B,SAAS,YAAY;AAErB,SAAS,6BAA6B;AACtC,SAAS,2BAA2B;AAEpC,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,OAAO,EAAE,OAAO,EAAE,MAAM;AAC1B,CAAC;AAED,MAAM,iBAAiB,oBAAoB;AAE3C,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS;AAAA,EACnC,UAAU,eAAe,SAAS;AACpC,CAAC,EAAE,OAAO,CAAC,SAAS,QAAQ,KAAK,SAAS,KAAK,QAAQ,GAAG;AAAA,EACxD,SAAS;AAAA,EACT,MAAM,CAAC,OAAO;AAChB,CAAC;AAED,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,OAAO,EAAE,OAAO,EAAE,MAAM;AAC1B,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,KAAK;AAAA,EACzB,KAAK,EAAE,aAAa,KAAK;AAC3B;AAEA,SAAS,oBAAoB,WAA+D,MAAmE,KAAqC;AAClM,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB,wBAAwB,KAAK,SAAS;AAAA,IACtC,iBAAiB,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,IAC7C,SAAS;AAAA,EACX;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,2BAA2B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3G;AACA,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAM,UAAU,QAAQ,IAAI;AAClC,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,KAAK,KAAK,WAAW,KAAK;AAAA,MAChC;AAAA,MACA,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK;AAAA,IACxE;AACA,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,mCAAmC,gBAAgB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrH;AACA,WAAO,aAAa,KAAK,EAAE,OAAO,OAAO,KAAK,KAAK,EAAE,CAAC;AAAA,EACxD,SAAS,KAAK;AACZ,YAAQ,MAAM,4BAA4B,GAAG;AAC7C,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,iCAAiC,yBAAyB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5H;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,2BAA2B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3G;AACA,MAAI;AACF,UAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,UAAM,SAAS,aAAa,UAAU,IAAI;AAC1C,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,OAAO,UAAU,oCAAoC,yBAAyB;AAAA,UAC9E,QAAQ,OAAO,MAAM;AAAA,QACvB;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,aAAc,UAAU,QAAQ,YAAY;AAClD,UAAM,MAAM,oBAAoB,WAAW,MAAM,GAAG;AACpD,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,MAClC;AAAA,MACA;AAAA,QACE,OAAO;AAAA,UACL,IAAI,KAAK;AAAA,UACT,OAAO,OAAO,KAAK;AAAA,UACnB,UAAU,OAAO,KAAK;AAAA,QACxB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,QAAQ,MAAM,YAAY,aAAa,QAAQ,OAAO,WAAW,OAAO,OAAO,QAAQ,IAAI,IAAI;AACrG,UAAM,MAAM,QAAQ;AAAA,MAClB,KAAK,OAAO,OAAO,EAAE;AAAA,MACrB,UAAU,OAAO,WAAW,OAAO,OAAO,QAAQ,IAAI;AAAA,MACtD,OAAO,OAAO,iBAAiB,OAAO,OAAO,cAAc,IAAI;AAAA,MAC/D,OAAO,OAAO;AAAA,MACd;AAAA,IACF,CAAC;AACD,UAAM,MAAM,aAAa,KAAK,EAAE,IAAI,MAAM,OAAO,OAAO,OAAO,KAAK,EAAE,CAAC;AACvE,QAAI,QAAQ,IAAI,cAAc,KAAK;AAAA,MACjC,UAAU;AAAA,MACV,MAAM;AAAA,MACN,UAAU;AAAA,MACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,MACjC,QAAQ,KAAK,KAAK;AAAA,IACpB,CAAC;AACD,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,eAAe,eAAe;AAChC,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,YAAQ,MAAM,8BAA8B,GAAG;AAC/C,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,iCAAiC,2BAA2B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9H;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,sBAAsB;AAAA,QAC7E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACxF;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,4BAA4B;AAAA,QACnF,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACtF;AAAA,IACF;AAAA,EACF;AACF;",
-  "names": []
-}

package/dist/modules/auth/backend/auth/profile/page.js

@@ -1,141 +0,0 @@
-"use client";
-import { jsx, jsxs } from "react/jsx-runtime";
-import * as React from "react";
-import { useRouter } from "next/navigation";
-import { z } from "zod";
-import { Save } from "lucide-react";
-import { Page, PageBody } from "@open-mercato/ui/backend/Page";
-import { CrudForm } from "@open-mercato/ui/backend/CrudForm";
-import { apiCall, readApiResultOrThrow } from "@open-mercato/ui/backend/utils/apiCall";
-import { createCrudFormError } from "@open-mercato/ui/backend/utils/serverErrors";
-import { flash } from "@open-mercato/ui/backend/FlashMessages";
-import { LoadingMessage, ErrorMessage } from "@open-mercato/ui/backend/detail";
-import { Button } from "@open-mercato/ui/primitives/button";
-import { useT } from "@open-mercato/shared/lib/i18n/context";
-import { buildPasswordSchema, formatPasswordRequirements, getPasswordPolicy } from "@open-mercato/shared/lib/auth/passwordPolicy";
-function AuthProfilePage() {
-  const t = useT();
-  const router = useRouter();
-  const [loading, setLoading] = React.useState(true);
-  const [error, setError] = React.useState(null);
-  const [email, setEmail] = React.useState("");
-  const [formKey, setFormKey] = React.useState(0);
-  const formId = React.useId();
-  const passwordPolicy = React.useMemo(() => getPasswordPolicy(), []);
-  const passwordRequirements = React.useMemo(
-    () => formatPasswordRequirements(passwordPolicy, t),
-    [passwordPolicy, t]
-  );
-  const passwordDescription = React.useMemo(() => passwordRequirements ? t("auth.password.requirements.help", "Password requirements: {requirements}", { requirements: passwordRequirements }) : void 0, [passwordRequirements, t]);
-  React.useEffect(() => {
-    let cancelled = false;
-    async function load() {
-      setLoading(true);
-      setError(null);
-      try {
-        const { ok, result } = await apiCall("/api/auth/profile");
-        if (!ok) throw new Error("load_failed");
-        const resolvedEmail = typeof result?.email === "string" ? result.email : "";
-        if (!cancelled) setEmail(resolvedEmail);
-      } catch (err) {
-        console.error("Failed to load auth profile", err);
-        if (!cancelled) setError(t("auth.profile.form.errors.load", "Failed to load profile."));
-      } finally {
-        if (!cancelled) setLoading(false);
-      }
-    }
-    load();
-    return () => {
-      cancelled = true;
-    };
-  }, [t]);
-  const fields = React.useMemo(() => [
-    { id: "email", label: t("auth.profile.form.email", "Email"), type: "text", required: true },
-    {
-      id: "password",
-      label: t("auth.profile.form.password", "New password"),
-      type: "text",
-      description: passwordDescription
-    },
-    { id: "confirmPassword", label: t("auth.profile.form.confirmPassword", "Confirm new password"), type: "text" }
-  ], [passwordDescription, t]);
-  const schema = React.useMemo(() => {
-    const passwordSchema = buildPasswordSchema({
-      policy: passwordPolicy,
-      message: t("auth.profile.form.errors.passwordRequirements", "Password must meet the requirements.")
-    });
-    const optionalPasswordSchema = z.union([z.literal(""), passwordSchema]).optional();
-    return z.object({
-      email: z.string().trim().min(1, t("auth.profile.form.errors.emailRequired", "Email is required.")),
-      password: optionalPasswordSchema,
-      confirmPassword: z.string().optional()
-    }).superRefine((values, ctx) => {
-      const password = values.password?.trim() ?? "";
-      const confirmPassword = values.confirmPassword?.trim() ?? "";
-      if ((password || confirmPassword) && password !== confirmPassword) {
-        ctx.addIssue({
-          code: z.ZodIssueCode.custom,
-          message: t("auth.profile.form.errors.passwordMismatch", "Passwords do not match."),
-          path: ["confirmPassword"]
-        });
-      }
-    });
-  }, [passwordPolicy, t]);
-  const handleSubmit = React.useCallback(async (values) => {
-    const nextEmail = values.email?.trim() ?? "";
-    const password = values.password?.trim() ?? "";
-    if (!password && nextEmail === email) {
-      throw createCrudFormError(t("auth.profile.form.errors.noChanges", "No changes to save."));
-    }
-    const payload = { email: nextEmail };
-    if (password) payload.password = password;
-    const result = await readApiResultOrThrow(
-      "/api/auth/profile",
-      {
-        method: "PUT",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify(payload)
-      },
-      { errorMessage: t("auth.profile.form.errors.save", "Failed to update profile.") }
-    );
-    const resolvedEmail = typeof result?.email === "string" ? result.email : nextEmail;
-    setEmail(resolvedEmail);
-    setFormKey((prev) => prev + 1);
-    flash(t("auth.profile.form.success", "Profile updated."), "success");
-    router.refresh();
-  }, [email, router, t]);
-  return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: loading ? /* @__PURE__ */ jsx(LoadingMessage, { label: t("auth.profile.form.loading", "Loading profile...") }) : error ? /* @__PURE__ */ jsx(ErrorMessage, { label: error }) : /* @__PURE__ */ jsxs("section", { className: "space-y-6 rounded-lg border bg-background p-6", children: [
-    /* @__PURE__ */ jsxs("header", { className: "flex flex-col gap-4 sm:flex-row sm:items-start sm:justify-between", children: [
-      /* @__PURE__ */ jsxs("div", { className: "space-y-1", children: [
-        /* @__PURE__ */ jsx("h2", { className: "text-lg font-semibold", children: t("auth.profile.title", "Profile") }),
-        /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: t("auth.profile.subtitle", "Change password") })
-      ] }),
-      /* @__PURE__ */ jsxs(Button, { type: "submit", form: formId, children: [
-        /* @__PURE__ */ jsx(Save, { className: "size-4 mr-2" }),
-        t("auth.profile.form.save", "Save changes")
-      ] })
-    ] }),
-    /* @__PURE__ */ jsx(
-      CrudForm,
-      {
-        formId,
-        schema,
-        fields,
-        initialValues: {
-          email,
-          password: "",
-          confirmPassword: ""
-        },
-        submitLabel: t("auth.profile.form.save", "Save changes"),
-        onSubmit: handleSubmit,
-        embedded: true,
-        hideFooterActions: true
-      },
-      formKey
-    )
-  ] }) }) });
-}
-export {
-  AuthProfilePage as default
-};
-//# sourceMappingURL=page.js.map

package/dist/modules/auth/backend/auth/profile/page.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../../../src/modules/auth/backend/auth/profile/page.tsx"],
-  "sourcesContent": ["\"use client\"\nimport * as React from 'react'\nimport { useRouter } from 'next/navigation'\nimport { z } from 'zod'\nimport { Save } from 'lucide-react'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { CrudForm, type CrudField } from '@open-mercato/ui/backend/CrudForm'\nimport { apiCall, readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { createCrudFormError } from '@open-mercato/ui/backend/utils/serverErrors'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { LoadingMessage, ErrorMessage } from '@open-mercato/ui/backend/detail'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { buildPasswordSchema, formatPasswordRequirements, getPasswordPolicy } from '@open-mercato/shared/lib/auth/passwordPolicy'\n\ntype ProfileResponse = {\n  email?: string | null\n}\n\ntype ProfileUpdateResponse = {\n  ok?: boolean\n  email?: string | null\n}\n\ntype ProfileFormValues = {\n  email: string\n  password?: string\n  confirmPassword?: string\n}\n\nexport default function AuthProfilePage() {\n  const t = useT()\n  const router = useRouter()\n  const [loading, setLoading] = React.useState(true)\n  const [error, setError] = React.useState<string | null>(null)\n  const [email, setEmail] = React.useState('')\n  const [formKey, setFormKey] = React.useState(0)\n  const formId = React.useId()\n  const passwordPolicy = React.useMemo(() => getPasswordPolicy(), [])\n  const passwordRequirements = React.useMemo(\n    () => formatPasswordRequirements(passwordPolicy, t),\n    [passwordPolicy, t],\n  )\n  const passwordDescription = React.useMemo(() => (\n    passwordRequirements\n      ? t('auth.password.requirements.help', 'Password requirements: {requirements}', { requirements: passwordRequirements })\n      : undefined\n  ), [passwordRequirements, t])\n\n  React.useEffect(() => {\n    let cancelled = false\n    async function load() {\n      setLoading(true)\n      setError(null)\n      try {\n        const { ok, result } = await apiCall<ProfileResponse>('/api/auth/profile')\n        if (!ok) throw new Error('load_failed')\n        const resolvedEmail = typeof result?.email === 'string' ? result.email : ''\n        if (!cancelled) setEmail(resolvedEmail)\n      } catch (err) {\n        console.error('Failed to load auth profile', err)\n        if (!cancelled) setError(t('auth.profile.form.errors.load', 'Failed to load profile.'))\n      } finally {\n        if (!cancelled) setLoading(false)\n      }\n    }\n    load()\n    return () => { cancelled = true }\n  }, [t])\n\n  const fields = React.useMemo<CrudField[]>(() => [\n    { id: 'email', label: t('auth.profile.form.email', 'Email'), type: 'text', required: true },\n    {\n      id: 'password',\n      label: t('auth.profile.form.password', 'New password'),\n      type: 'text',\n      description: passwordDescription,\n    },\n    { id: 'confirmPassword', label: t('auth.profile.form.confirmPassword', 'Confirm new password'), type: 'text' },\n  ], [passwordDescription, t])\n\n  const schema = React.useMemo(() => {\n    const passwordSchema = buildPasswordSchema({\n      policy: passwordPolicy,\n      message: t('auth.profile.form.errors.passwordRequirements', 'Password must meet the requirements.'),\n    })\n    const optionalPasswordSchema = z.union([z.literal(''), passwordSchema]).optional()\n    return z.object({\n      email: z.string().trim().min(1, t('auth.profile.form.errors.emailRequired', 'Email is required.')),\n      password: optionalPasswordSchema,\n      confirmPassword: z.string().optional(),\n    }).superRefine((values, ctx) => {\n      const password = values.password?.trim() ?? ''\n      const confirmPassword = values.confirmPassword?.trim() ?? ''\n      if ((password || confirmPassword) && password !== confirmPassword) {\n        ctx.addIssue({\n          code: z.ZodIssueCode.custom,\n          message: t('auth.profile.form.errors.passwordMismatch', 'Passwords do not match.'),\n          path: ['confirmPassword'],\n        })\n      }\n    })\n  }, [passwordPolicy, t])\n\n  const handleSubmit = React.useCallback(async (values: ProfileFormValues) => {\n    const nextEmail = values.email?.trim() ?? ''\n    const password = values.password?.trim() ?? ''\n\n    if (!password && nextEmail === email) {\n      throw createCrudFormError(t('auth.profile.form.errors.noChanges', 'No changes to save.'))\n    }\n\n    const payload: { email: string; password?: string } = { email: nextEmail }\n    if (password) payload.password = password\n\n    const result = await readApiResultOrThrow<ProfileUpdateResponse>(\n      '/api/auth/profile',\n      {\n        method: 'PUT',\n        headers: { 'content-type': 'application/json' },\n        body: JSON.stringify(payload),\n      },\n      { errorMessage: t('auth.profile.form.errors.save', 'Failed to update profile.') },\n    )\n\n    const resolvedEmail = typeof result?.email === 'string' ? result.email : nextEmail\n    setEmail(resolvedEmail)\n    setFormKey((prev) => prev + 1)\n    flash(t('auth.profile.form.success', 'Profile updated.'), 'success')\n    router.refresh()\n  }, [email, router, t])\n\n  return (\n    <Page>\n      <PageBody>\n        {loading ? (\n          <LoadingMessage label={t('auth.profile.form.loading', 'Loading profile...')} />\n        ) : error ? (\n          <ErrorMessage label={error} />\n        ) : (\n          <section className=\"space-y-6 rounded-lg border bg-background p-6\">\n            <header className=\"flex flex-col gap-4 sm:flex-row sm:items-start sm:justify-between\">\n              <div className=\"space-y-1\">\n                <h2 className=\"text-lg font-semibold\">{t('auth.profile.title', 'Profile')}</h2>\n                <p className=\"text-sm text-muted-foreground\">\n                  {t('auth.profile.subtitle', 'Change password')}\n                </p>\n              </div>\n              <Button type=\"submit\" form={formId}>\n                <Save className=\"size-4 mr-2\" />\n                {t('auth.profile.form.save', 'Save changes')}\n              </Button>\n            </header>\n            <CrudForm<ProfileFormValues>\n              key={formKey}\n              formId={formId}\n              schema={schema}\n              fields={fields}\n              initialValues={{\n                email,\n                password: '',\n                confirmPassword: '',\n              }}\n              submitLabel={t('auth.profile.form.save', 'Save changes')}\n              onSubmit={handleSubmit}\n              embedded\n              hideFooterActions\n            />\n          </section>\n        )}\n      </PageBody>\n    </Page>\n  )\n}\n"],
-  "mappings": ";AAwIU,cAMI,YANJ;AAvIV,YAAY,WAAW;AACvB,SAAS,iBAAiB;AAC1B,SAAS,SAAS;AAClB,SAAS,YAAY;AACrB,SAAS,MAAM,gBAAgB;AAC/B,SAAS,gBAAgC;AACzC,SAAS,SAAS,4BAA4B;AAC9C,SAAS,2BAA2B;AACpC,SAAS,aAAa;AACtB,SAAS,gBAAgB,oBAAoB;AAC7C,SAAS,cAAc;AACvB,SAAS,YAAY;AACrB,SAAS,qBAAqB,4BAA4B,yBAAyB;AAiBpE,SAAR,kBAAmC;AACxC,QAAM,IAAI,KAAK;AACf,QAAM,SAAS,UAAU;AACzB,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,IAAI;AACjD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAC5D,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAS,EAAE;AAC3C,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,CAAC;AAC9C,QAAM,SAAS,MAAM,MAAM;AAC3B,QAAM,iBAAiB,MAAM,QAAQ,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAClE,QAAM,uBAAuB,MAAM;AAAA,IACjC,MAAM,2BAA2B,gBAAgB,CAAC;AAAA,IAClD,CAAC,gBAAgB,CAAC;AAAA,EACpB;AACA,QAAM,sBAAsB,MAAM,QAAQ,MACxC,uBACI,EAAE,mCAAmC,yCAAyC,EAAE,cAAc,qBAAqB,CAAC,IACpH,QACH,CAAC,sBAAsB,CAAC,CAAC;AAE5B,QAAM,UAAU,MAAM;AACpB,QAAI,YAAY;AAChB,mBAAe,OAAO;AACpB,iBAAW,IAAI;AACf,eAAS,IAAI;AACb,UAAI;AACF,cAAM,EAAE,IAAI,OAAO,IAAI,MAAM,QAAyB,mBAAmB;AACzE,YAAI,CAAC,GAAI,OAAM,IAAI,MAAM,aAAa;AACtC,cAAM,gBAAgB,OAAO,QAAQ,UAAU,WAAW,OAAO,QAAQ;AACzE,YAAI,CAAC,UAAW,UAAS,aAAa;AAAA,MACxC,SAAS,KAAK;AACZ,gBAAQ,MAAM,+BAA+B,GAAG;AAChD,YAAI,CAAC,UAAW,UAAS,EAAE,iCAAiC,yBAAyB,CAAC;AAAA,MACxF,UAAE;AACA,YAAI,CAAC,UAAW,YAAW,KAAK;AAAA,MAClC;AAAA,IACF;AACA,SAAK;AACL,WAAO,MAAM;AAAE,kBAAY;AAAA,IAAK;AAAA,EAClC,GAAG,CAAC,CAAC,CAAC;AAEN,QAAM,SAAS,MAAM,QAAqB,MAAM;AAAA,IAC9C,EAAE,IAAI,SAAS,OAAO,EAAE,2BAA2B,OAAO,GAAG,MAAM,QAAQ,UAAU,KAAK;AAAA,IAC1F;AAAA,MACE,IAAI;AAAA,MACJ,OAAO,EAAE,8BAA8B,cAAc;AAAA,MACrD,MAAM;AAAA,MACN,aAAa;AAAA,IACf;AAAA,IACA,EAAE,IAAI,mBAAmB,OAAO,EAAE,qCAAqC,sBAAsB,GAAG,MAAM,OAAO;AAAA,EAC/G,GAAG,CAAC,qBAAqB,CAAC,CAAC;AAE3B,QAAM,SAAS,MAAM,QAAQ,MAAM;AACjC,UAAM,iBAAiB,oBAAoB;AAAA,MACzC,QAAQ;AAAA,MACR,SAAS,EAAE,iDAAiD,sCAAsC;AAAA,IACpG,CAAC;AACD,UAAM,yBAAyB,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,cAAc,CAAC,EAAE,SAAS;AACjF,WAAO,EAAE,OAAO;AAAA,MACd,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,0CAA0C,oBAAoB,CAAC;AAAA,MACjG,UAAU;AAAA,MACV,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,IACvC,CAAC,EAAE,YAAY,CAAC,QAAQ,QAAQ;AAC9B,YAAM,WAAW,OAAO,UAAU,KAAK,KAAK;AAC5C,YAAM,kBAAkB,OAAO,iBAAiB,KAAK,KAAK;AAC1D,WAAK,YAAY,oBAAoB,aAAa,iBAAiB;AACjE,YAAI,SAAS;AAAA,UACX,MAAM,EAAE,aAAa;AAAA,UACrB,SAAS,EAAE,6CAA6C,yBAAyB;AAAA,UACjF,MAAM,CAAC,iBAAiB;AAAA,QAC1B,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAAA,EACH,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAEtB,QAAM,eAAe,MAAM,YAAY,OAAO,WAA8B;AAC1E,UAAM,YAAY,OAAO,OAAO,KAAK,KAAK;AAC1C,UAAM,WAAW,OAAO,UAAU,KAAK,KAAK;AAE5C,QAAI,CAAC,YAAY,cAAc,OAAO;AACpC,YAAM,oBAAoB,EAAE,sCAAsC,qBAAqB,CAAC;AAAA,IAC1F;AAEA,UAAM,UAAgD,EAAE,OAAO,UAAU;AACzE,QAAI,SAAU,SAAQ,WAAW;AAEjC,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,MAC9B;AAAA,MACA,EAAE,cAAc,EAAE,iCAAiC,2BAA2B,EAAE;AAAA,IAClF;AAEA,UAAM,gBAAgB,OAAO,QAAQ,UAAU,WAAW,OAAO,QAAQ;AACzE,aAAS,aAAa;AACtB,eAAW,CAAC,SAAS,OAAO,CAAC;AAC7B,UAAM,EAAE,6BAA6B,kBAAkB,GAAG,SAAS;AACnE,WAAO,QAAQ;AAAA,EACjB,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC;AAErB,SACE,oBAAC,QACC,8BAAC,YACE,oBACC,oBAAC,kBAAe,OAAO,EAAE,6BAA6B,oBAAoB,GAAG,IAC3E,QACF,oBAAC,gBAAa,OAAO,OAAO,IAE5B,qBAAC,aAAQ,WAAU,iDACjB;AAAA,yBAAC,YAAO,WAAU,qEAChB;AAAA,2BAAC,SAAI,WAAU,aACb;AAAA,4BAAC,QAAG,WAAU,yBAAyB,YAAE,sBAAsB,SAAS,GAAE;AAAA,QAC1E,oBAAC,OAAE,WAAU,iCACV,YAAE,yBAAyB,iBAAiB,GAC/C;AAAA,SACF;AAAA,MACA,qBAAC,UAAO,MAAK,UAAS,MAAM,QAC1B;AAAA,4BAAC,QAAK,WAAU,eAAc;AAAA,QAC7B,EAAE,0BAA0B,cAAc;AAAA,SAC7C;AAAA,OACF;AAAA,IACA;AAAA,MAAC;AAAA;AAAA,QAEC;AAAA,QACA;AAAA,QACA;AAAA,QACA,eAAe;AAAA,UACb;AAAA,UACA,UAAU;AAAA,UACV,iBAAiB;AAAA,QACnB;AAAA,QACA,aAAa,EAAE,0BAA0B,cAAc;AAAA,QACvD,UAAU;AAAA,QACV,UAAQ;AAAA,QACR,mBAAiB;AAAA;AAAA,MAZZ;AAAA,IAaP;AAAA,KACF,GAEJ,GACF;AAEJ;",
-  "names": []
-}

package/dist/modules/auth/backend/auth/profile/page.meta.js

@@ -1,13 +0,0 @@
-const metadata = {
-  requireAuth: true,
-  navHidden: true,
-  pageTitle: "Profile",
-  pageTitleKey: "auth.profile.title",
-  breadcrumb: [
-    { label: "Profile", labelKey: "auth.profile.title" }
-  ]
-};
-export {
-  metadata
-};
-//# sourceMappingURL=page.meta.js.map

package/dist/modules/auth/backend/auth/profile/page.meta.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../../../src/modules/auth/backend/auth/profile/page.meta.ts"],
-  "sourcesContent": ["export const metadata = {\n  requireAuth: true,\n  navHidden: true,\n  pageTitle: 'Profile',\n  pageTitleKey: 'auth.profile.title',\n  breadcrumb: [\n    { label: 'Profile', labelKey: 'auth.profile.title' },\n  ],\n}\n"],
-  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,WAAW;AAAA,EACX,WAAW;AAAA,EACX,cAAc;AAAA,EACd,YAAY;AAAA,IACV,EAAE,OAAO,WAAW,UAAU,qBAAqB;AAAA,EACrD;AACF;",
-  "names": []
-}

package/dist/modules/auth/notifications.js

@@ -1,112 +0,0 @@
-const notificationTypes = [
-  {
-    type: "auth.password_reset.requested",
-    module: "auth",
-    titleKey: "auth.notifications.passwordReset.requested.title",
-    bodyKey: "auth.notifications.passwordReset.requested.body",
-    icon: "key",
-    severity: "info",
-    actions: [
-      {
-        id: "view",
-        labelKey: "common.view",
-        variant: "outline",
-        href: "/backend/auth/profile",
-        icon: "external-link"
-      }
-    ],
-    linkHref: "/backend/auth/profile",
-    expiresAfterHours: 24
-  },
-  {
-    type: "auth.password_reset.completed",
-    module: "auth",
-    titleKey: "auth.notifications.passwordReset.completed.title",
-    bodyKey: "auth.notifications.passwordReset.completed.body",
-    icon: "check-circle",
-    severity: "success",
-    actions: [],
-    expiresAfterHours: 72
-  },
-  {
-    type: "auth.account.locked",
-    module: "auth",
-    titleKey: "auth.notifications.account.locked.title",
-    bodyKey: "auth.notifications.account.locked.body",
-    icon: "lock",
-    severity: "warning",
-    actions: [
-      {
-        id: "contact_support",
-        labelKey: "auth.actions.contactSupport",
-        variant: "default",
-        href: "/backend/support",
-        icon: "mail"
-      }
-    ],
-    linkHref: "/backend/support"
-  },
-  {
-    type: "auth.login.new_device",
-    module: "auth",
-    titleKey: "auth.notifications.login.newDevice.title",
-    bodyKey: "auth.notifications.login.newDevice.body",
-    icon: "smartphone",
-    severity: "info",
-    actions: [
-      {
-        id: "view_sessions",
-        labelKey: "auth.actions.viewSessions",
-        variant: "outline",
-        href: "/backend/auth/sessions",
-        icon: "list"
-      }
-    ],
-    linkHref: "/backend/auth/sessions",
-    expiresAfterHours: 168
-    // 7 days
-  },
-  {
-    type: "auth.role.assigned",
-    module: "auth",
-    titleKey: "auth.notifications.role.assigned.title",
-    bodyKey: "auth.notifications.role.assigned.body",
-    icon: "user-plus",
-    severity: "success",
-    actions: [
-      {
-        id: "view_permissions",
-        labelKey: "auth.actions.viewPermissions",
-        variant: "outline",
-        href: "/backend/auth/profile",
-        icon: "shield"
-      }
-    ],
-    linkHref: "/backend/auth/profile",
-    expiresAfterHours: 168
-  },
-  {
-    type: "auth.role.revoked",
-    module: "auth",
-    titleKey: "auth.notifications.role.revoked.title",
-    bodyKey: "auth.notifications.role.revoked.body",
-    icon: "user-minus",
-    severity: "warning",
-    actions: [
-      {
-        id: "view_profile",
-        labelKey: "common.view",
-        variant: "outline",
-        href: "/backend/auth/profile"
-      }
-    ],
-    linkHref: "/backend/auth/profile",
-    expiresAfterHours: 168
-  }
-];
-var notifications_default = notificationTypes;
-export {
-  notifications_default as default,
-  notificationTypes
-};
-//# sourceMappingURL=notifications.js.map

package/dist/modules/auth/notifications.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/modules/auth/notifications.ts"],
-  "sourcesContent": ["import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'\n\nexport const notificationTypes: NotificationTypeDefinition[] = [\n  {\n    type: 'auth.password_reset.requested',\n    module: 'auth',\n    titleKey: 'auth.notifications.passwordReset.requested.title',\n    bodyKey: 'auth.notifications.passwordReset.requested.body',\n    icon: 'key',\n    severity: 'info',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/auth/profile',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/auth/profile',\n    expiresAfterHours: 24,\n  },\n  {\n    type: 'auth.password_reset.completed',\n    module: 'auth',\n    titleKey: 'auth.notifications.passwordReset.completed.title',\n    bodyKey: 'auth.notifications.passwordReset.completed.body',\n    icon: 'check-circle',\n    severity: 'success',\n    actions: [],\n    expiresAfterHours: 72,\n  },\n  {\n    type: 'auth.account.locked',\n    module: 'auth',\n    titleKey: 'auth.notifications.account.locked.title',\n    bodyKey: 'auth.notifications.account.locked.body',\n    icon: 'lock',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'contact_support',\n        labelKey: 'auth.actions.contactSupport',\n        variant: 'default',\n        href: '/backend/support',\n        icon: 'mail',\n      },\n    ],\n    linkHref: '/backend/support',\n  },\n  {\n    type: 'auth.login.new_device',\n    module: 'auth',\n    titleKey: 'auth.notifications.login.newDevice.title',\n    bodyKey: 'auth.notifications.login.newDevice.body',\n    icon: 'smartphone',\n    severity: 'info',\n    actions: [\n      {\n        id: 'view_sessions',\n        labelKey: 'auth.actions.viewSessions',\n        variant: 'outline',\n        href: '/backend/auth/sessions',\n        icon: 'list',\n      },\n    ],\n    linkHref: '/backend/auth/sessions',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    type: 'auth.role.assigned',\n    module: 'auth',\n    titleKey: 'auth.notifications.role.assigned.title',\n    bodyKey: 'auth.notifications.role.assigned.body',\n    icon: 'user-plus',\n    severity: 'success',\n    actions: [\n      {\n        id: 'view_permissions',\n        labelKey: 'auth.actions.viewPermissions',\n        variant: 'outline',\n        href: '/backend/auth/profile',\n        icon: 'shield',\n      },\n    ],\n    linkHref: '/backend/auth/profile',\n    expiresAfterHours: 168,\n  },\n  {\n    type: 'auth.role.revoked',\n    module: 'auth',\n    titleKey: 'auth.notifications.role.revoked.title',\n    bodyKey: 'auth.notifications.role.revoked.body',\n    icon: 'user-minus',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'view_profile',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/auth/profile',\n      },\n    ],\n    linkHref: '/backend/auth/profile',\n    expiresAfterHours: 168,\n  },\n]\n\nexport default notificationTypes\n"],
-  "mappings": "AAEO,MAAM,oBAAkD;AAAA,EAC7D;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS,CAAC;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AACF;AAEA,IAAO,wBAAQ;",
-  "names": []
-}

package/dist/modules/business_rules/notifications.js

@@ -1,28 +0,0 @@
-const notificationTypes = [
-  {
-    type: "business_rules.rule.execution_failed",
-    module: "business_rules",
-    titleKey: "businessRules.notifications.rule.executionFailed.title",
-    bodyKey: "businessRules.notifications.rule.executionFailed.body",
-    icon: "alert-triangle",
-    severity: "error",
-    actions: [
-      {
-        id: "view",
-        labelKey: "common.view",
-        variant: "outline",
-        href: "/backend/business-rules/{sourceEntityId}",
-        icon: "external-link"
-      }
-    ],
-    linkHref: "/backend/business-rules/{sourceEntityId}",
-    expiresAfterHours: 168
-    // 7 days
-  }
-];
-var notifications_default = notificationTypes;
-export {
-  notifications_default as default,
-  notificationTypes
-};
-//# sourceMappingURL=notifications.js.map

package/dist/modules/business_rules/notifications.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/modules/business_rules/notifications.ts"],
-  "sourcesContent": ["import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'\n\nexport const notificationTypes: NotificationTypeDefinition[] = [\n  {\n    type: 'business_rules.rule.execution_failed',\n    module: 'business_rules',\n    titleKey: 'businessRules.notifications.rule.executionFailed.title',\n    bodyKey: 'businessRules.notifications.rule.executionFailed.body',\n    icon: 'alert-triangle',\n    severity: 'error',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/business-rules/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/business-rules/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n]\n\nexport default notificationTypes\n"],
-  "mappings": "AAEO,MAAM,oBAAkD;AAAA,EAC7D;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AACF;AAEA,IAAO,wBAAQ;",
-  "names": []
-}

package/dist/modules/business_rules/subscribers/rule-execution-failed-notification.js

@@ -1,37 +0,0 @@
-import { resolveNotificationService } from "../../notifications/lib/notificationService.js";
-import { buildFeatureNotificationFromType } from "../../notifications/lib/notificationBuilder.js";
-import { notificationTypes } from "../notifications.js";
-const metadata = {
-  event: "business_rules.rule.execution_failed",
-  persistent: true,
-  id: "business_rules:rule-execution-failed-notification"
-};
-async function handle(payload, ctx) {
-  try {
-    const notificationService = resolveNotificationService(ctx);
-    const typeDef = notificationTypes.find((type) => type.type === "business_rules.rule.execution_failed");
-    if (!typeDef) return;
-    const notificationInput = buildFeatureNotificationFromType(typeDef, {
-      requiredFeature: "business_rules.manage",
-      bodyVariables: {
-        ruleName: payload.ruleName,
-        entityType: payload.entityType ?? "",
-        errorMessage: payload.errorMessage ?? "Unknown error"
-      },
-      sourceEntityType: "business_rules:rule",
-      sourceEntityId: payload.ruleId,
-      linkHref: `/backend/business-rules/${payload.ruleId}`
-    });
-    await notificationService.createForFeature(notificationInput, {
-      tenantId: payload.tenantId,
-      organizationId: payload.organizationId ?? null
-    });
-  } catch (err) {
-    console.error("[business_rules:rule-execution-failed-notification] Failed to create notification:", err);
-  }
-}
-export {
-  handle as default,
-  metadata
-};
-//# sourceMappingURL=rule-execution-failed-notification.js.map

package/dist/modules/business_rules/subscribers/rule-execution-failed-notification.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/business_rules/subscribers/rule-execution-failed-notification.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { resolveNotificationService } from '../../notifications/lib/notificationService'\nimport { buildFeatureNotificationFromType } from '../../notifications/lib/notificationBuilder'\nimport { notificationTypes } from '../notifications'\n\nexport const metadata = {\n  event: 'business_rules.rule.execution_failed',\n  persistent: true,\n  id: 'business_rules:rule-execution-failed-notification',\n}\n\ntype RuleExecutionFailedPayload = {\n  ruleId: string\n  ruleName: string\n  entityType?: string | null\n  errorMessage?: string | null\n  tenantId: string\n  organizationId?: string | null\n}\n\ntype ResolverContext = {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport default async function handle(payload: RuleExecutionFailedPayload, ctx: ResolverContext) {\n  try {\n    const notificationService = resolveNotificationService(ctx)\n    const typeDef = notificationTypes.find((type) => type.type === 'business_rules.rule.execution_failed')\n    if (!typeDef) return\n\n    const notificationInput = buildFeatureNotificationFromType(typeDef, {\n      requiredFeature: 'business_rules.manage',\n      bodyVariables: {\n        ruleName: payload.ruleName,\n        entityType: payload.entityType ?? '',\n        errorMessage: payload.errorMessage ?? 'Unknown error',\n      },\n      sourceEntityType: 'business_rules:rule',\n      sourceEntityId: payload.ruleId,\n      linkHref: `/backend/business-rules/${payload.ruleId}`,\n    })\n\n    await notificationService.createForFeature(notificationInput, {\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId ?? null,\n    })\n  } catch (err) {\n    console.error('[business_rules:rule-execution-failed-notification] Failed to create notification:', err)\n  }\n}\n"],
-  "mappings": "AACA,SAAS,kCAAkC;AAC3C,SAAS,wCAAwC;AACjD,SAAS,yBAAyB;AAE3B,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAeA,eAAO,OAA8B,SAAqC,KAAsB;AAC9F,MAAI;AACF,UAAM,sBAAsB,2BAA2B,GAAG;AAC1D,UAAM,UAAU,kBAAkB,KAAK,CAAC,SAAS,KAAK,SAAS,sCAAsC;AACrG,QAAI,CAAC,QAAS;AAEd,UAAM,oBAAoB,iCAAiC,SAAS;AAAA,MAClE,iBAAiB;AAAA,MACjB,eAAe;AAAA,QACb,UAAU,QAAQ;AAAA,QAClB,YAAY,QAAQ,cAAc;AAAA,QAClC,cAAc,QAAQ,gBAAgB;AAAA,MACxC;AAAA,MACA,kBAAkB;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,UAAU,2BAA2B,QAAQ,MAAM;AAAA,IACrD,CAAC;AAED,UAAM,oBAAoB,iBAAiB,mBAAmB;AAAA,MAC5D,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ,kBAAkB;AAAA,IAC5C,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,YAAQ,MAAM,sFAAsF,GAAG;AAAA,EACzG;AACF;",
-  "names": []
-}

package/dist/modules/catalog/notifications.js

@@ -1,28 +0,0 @@
-const notificationTypes = [
-  {
-    type: "catalog.product.low_stock",
-    module: "catalog",
-    titleKey: "catalog.notifications.product.lowStock.title",
-    bodyKey: "catalog.notifications.product.lowStock.body",
-    icon: "package-x",
-    severity: "warning",
-    actions: [
-      {
-        id: "view",
-        labelKey: "common.view",
-        variant: "outline",
-        href: "/backend/catalog/products/{sourceEntityId}",
-        icon: "external-link"
-      }
-    ],
-    linkHref: "/backend/catalog/products/{sourceEntityId}",
-    expiresAfterHours: 72
-    // 3 days
-  }
-];
-var notifications_default = notificationTypes;
-export {
-  notifications_default as default,
-  notificationTypes
-};
-//# sourceMappingURL=notifications.js.map

package/dist/modules/catalog/notifications.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/modules/catalog/notifications.ts"],
-  "sourcesContent": ["import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'\n\nexport const notificationTypes: NotificationTypeDefinition[] = [\n  {\n    type: 'catalog.product.low_stock',\n    module: 'catalog',\n    titleKey: 'catalog.notifications.product.lowStock.title',\n    bodyKey: 'catalog.notifications.product.lowStock.body',\n    icon: 'package-x',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/catalog/products/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/catalog/products/{sourceEntityId}',\n    expiresAfterHours: 72, // 3 days\n  },\n]\n\nexport default notificationTypes\n"],
-  "mappings": "AAEO,MAAM,oBAAkD;AAAA,EAC7D;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AACF;AAEA,IAAO,wBAAQ;",
-  "names": []
-}