@open-mercato/core 0.4.2-canary-15c0b23a3a → 0.4.2-canary-da2b080494

package/dist/modules/staff/notifications.js

@@ -1,75 +0,0 @@
-const notificationTypes = [
-  {
-    type: "staff.leave_request.pending",
-    module: "staff",
-    titleKey: "staff.notifications.leaveRequest.pending.title",
-    bodyKey: "staff.notifications.leaveRequest.pending.body",
-    icon: "calendar-off",
-    severity: "warning",
-    actions: [
-      {
-        id: "approve",
-        labelKey: "staff.notifications.leaveRequest.actions.approve",
-        variant: "default",
-        icon: "check",
-        commandId: "staff.leave-requests.accept"
-      },
-      {
-        id: "reject",
-        labelKey: "staff.notifications.leaveRequest.actions.reject",
-        variant: "destructive",
-        icon: "x",
-        commandId: "staff.leave-requests.reject"
-      }
-    ],
-    primaryActionId: "approve",
-    linkHref: "/backend/staff/leave-requests/{sourceEntityId}",
-    expiresAfterHours: 168
-  },
-  {
-    type: "staff.leave_request.approved",
-    module: "staff",
-    titleKey: "staff.notifications.leaveRequest.approved.title",
-    bodyKey: "staff.notifications.leaveRequest.approved.body",
-    icon: "calendar-check",
-    severity: "success",
-    actions: [
-      {
-        id: "view",
-        labelKey: "common.view",
-        variant: "outline",
-        href: "/backend/staff/leave-requests/{sourceEntityId}",
-        icon: "external-link"
-      }
-    ],
-    linkHref: "/backend/staff/leave-requests/{sourceEntityId}",
-    expiresAfterHours: 168
-    // 7 days
-  },
-  {
-    type: "staff.leave_request.rejected",
-    module: "staff",
-    titleKey: "staff.notifications.leaveRequest.rejected.title",
-    bodyKey: "staff.notifications.leaveRequest.rejected.body",
-    icon: "calendar-x",
-    severity: "warning",
-    actions: [
-      {
-        id: "view",
-        labelKey: "common.view",
-        variant: "outline",
-        href: "/backend/staff/leave-requests/{sourceEntityId}",
-        icon: "external-link"
-      }
-    ],
-    linkHref: "/backend/staff/leave-requests/{sourceEntityId}",
-    expiresAfterHours: 168
-    // 7 days
-  }
-];
-var notifications_default = notificationTypes;
-export {
-  notifications_default as default,
-  notificationTypes
-};
-//# sourceMappingURL=notifications.js.map

package/dist/modules/staff/notifications.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/modules/staff/notifications.ts"],
-  "sourcesContent": ["import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'\n\nexport const notificationTypes: NotificationTypeDefinition[] = [\n  {\n    type: 'staff.leave_request.pending',\n    module: 'staff',\n    titleKey: 'staff.notifications.leaveRequest.pending.title',\n    bodyKey: 'staff.notifications.leaveRequest.pending.body',\n    icon: 'calendar-off',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'approve',\n        labelKey: 'staff.notifications.leaveRequest.actions.approve',\n        variant: 'default',\n        icon: 'check',\n        commandId: 'staff.leave-requests.accept',\n      },\n      {\n        id: 'reject',\n        labelKey: 'staff.notifications.leaveRequest.actions.reject',\n        variant: 'destructive',\n        icon: 'x',\n        commandId: 'staff.leave-requests.reject',\n      },\n    ],\n    primaryActionId: 'approve',\n    linkHref: '/backend/staff/leave-requests/{sourceEntityId}',\n    expiresAfterHours: 168,\n  },\n  {\n    type: 'staff.leave_request.approved',\n    module: 'staff',\n    titleKey: 'staff.notifications.leaveRequest.approved.title',\n    bodyKey: 'staff.notifications.leaveRequest.approved.body',\n    icon: 'calendar-check',\n    severity: 'success',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/staff/leave-requests/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/staff/leave-requests/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    type: 'staff.leave_request.rejected',\n    module: 'staff',\n    titleKey: 'staff.notifications.leaveRequest.rejected.title',\n    bodyKey: 'staff.notifications.leaveRequest.rejected.body',\n    icon: 'calendar-x',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/staff/leave-requests/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/staff/leave-requests/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n]\n\nexport default notificationTypes\n"],
-  "mappings": "AAEO,MAAM,oBAAkD;AAAA,EAC7D;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,WAAW;AAAA,MACb;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,WAAW;AAAA,MACb;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AACF;AAEA,IAAO,wBAAQ;",
-  "names": []
-}

package/dist/modules/workflows/notifications.js

@@ -1,28 +0,0 @@
-const notificationTypes = [
-  {
-    type: "workflows.task.assigned",
-    module: "workflows",
-    titleKey: "workflows.notifications.task.assigned.title",
-    bodyKey: "workflows.notifications.task.assigned.body",
-    icon: "clipboard-list",
-    severity: "info",
-    actions: [
-      {
-        id: "view",
-        labelKey: "common.view",
-        variant: "outline",
-        href: "/backend/workflows/tasks/{sourceEntityId}",
-        icon: "external-link"
-      }
-    ],
-    linkHref: "/backend/workflows/tasks/{sourceEntityId}",
-    expiresAfterHours: 168
-    // 7 days
-  }
-];
-var notifications_default = notificationTypes;
-export {
-  notifications_default as default,
-  notificationTypes
-};
-//# sourceMappingURL=notifications.js.map

package/dist/modules/workflows/notifications.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/modules/workflows/notifications.ts"],
-  "sourcesContent": ["import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'\n\nexport const notificationTypes: NotificationTypeDefinition[] = [\n  {\n    type: 'workflows.task.assigned',\n    module: 'workflows',\n    titleKey: 'workflows.notifications.task.assigned.title',\n    bodyKey: 'workflows.notifications.task.assigned.body',\n    icon: 'clipboard-list',\n    severity: 'info',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/workflows/tasks/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/workflows/tasks/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n]\n\nexport default notificationTypes\n"],
-  "mappings": "AAEO,MAAM,oBAAkD;AAAA,EAC7D;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AACF;AAEA,IAAO,wBAAQ;",
-  "names": []
-}

package/dist/modules/workflows/subscribers/task-assigned-notification.js

@@ -1,38 +0,0 @@
-import { resolveNotificationService } from "../../notifications/lib/notificationService.js";
-import { buildNotificationFromType } from "../../notifications/lib/notificationBuilder.js";
-import { notificationTypes } from "../notifications.js";
-const metadata = {
-  event: "workflows.task.assigned",
-  persistent: true,
-  id: "workflows:task-assigned-notification"
-};
-async function handle(payload, ctx) {
-  if (!payload.assignedUserId) return;
-  try {
-    const notificationService = resolveNotificationService(ctx);
-    const typeDef = notificationTypes.find((type) => type.type === "workflows.task.assigned");
-    if (!typeDef) return;
-    const notificationInput = buildNotificationFromType(typeDef, {
-      recipientUserId: payload.assignedUserId,
-      bodyVariables: {
-        taskName: payload.taskName,
-        workflowName: payload.workflowName,
-        dueDate: payload.dueDate ?? ""
-      },
-      sourceEntityType: "workflows:user_task",
-      sourceEntityId: payload.taskId,
-      linkHref: `/backend/workflows/tasks/${payload.taskId}`
-    });
-    await notificationService.create(notificationInput, {
-      tenantId: payload.tenantId,
-      organizationId: payload.organizationId ?? null
-    });
-  } catch (err) {
-    console.error("[workflows:task-assigned-notification] Failed to create notification:", err);
-  }
-}
-export {
-  handle as default,
-  metadata
-};
-//# sourceMappingURL=task-assigned-notification.js.map

package/dist/modules/workflows/subscribers/task-assigned-notification.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/workflows/subscribers/task-assigned-notification.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { resolveNotificationService } from '../../notifications/lib/notificationService'\nimport { buildNotificationFromType } from '../../notifications/lib/notificationBuilder'\nimport { notificationTypes } from '../notifications'\n\nexport const metadata = {\n  event: 'workflows.task.assigned',\n  persistent: true,\n  id: 'workflows:task-assigned-notification',\n}\n\ntype TaskAssignedPayload = {\n  taskId: string\n  taskName: string\n  workflowName: string\n  assignedUserId: string\n  dueDate?: string | null\n  tenantId: string\n  organizationId?: string | null\n}\n\ntype ResolverContext = {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport default async function handle(payload: TaskAssignedPayload, ctx: ResolverContext) {\n  if (!payload.assignedUserId) return\n\n  try {\n    const notificationService = resolveNotificationService(ctx)\n    const typeDef = notificationTypes.find((type) => type.type === 'workflows.task.assigned')\n    if (!typeDef) return\n\n    const notificationInput = buildNotificationFromType(typeDef, {\n      recipientUserId: payload.assignedUserId,\n      bodyVariables: {\n        taskName: payload.taskName,\n        workflowName: payload.workflowName,\n        dueDate: payload.dueDate ?? '',\n      },\n      sourceEntityType: 'workflows:user_task',\n      sourceEntityId: payload.taskId,\n      linkHref: `/backend/workflows/tasks/${payload.taskId}`,\n    })\n\n    await notificationService.create(notificationInput, {\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId ?? null,\n    })\n  } catch (err) {\n    console.error('[workflows:task-assigned-notification] Failed to create notification:', err)\n  }\n}\n"],
-  "mappings": "AACA,SAAS,kCAAkC;AAC3C,SAAS,iCAAiC;AAC1C,SAAS,yBAAyB;AAE3B,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAgBA,eAAO,OAA8B,SAA8B,KAAsB;AACvF,MAAI,CAAC,QAAQ,eAAgB;AAE7B,MAAI;AACF,UAAM,sBAAsB,2BAA2B,GAAG;AAC1D,UAAM,UAAU,kBAAkB,KAAK,CAAC,SAAS,KAAK,SAAS,yBAAyB;AACxF,QAAI,CAAC,QAAS;AAEd,UAAM,oBAAoB,0BAA0B,SAAS;AAAA,MAC3D,iBAAiB,QAAQ;AAAA,MACzB,eAAe;AAAA,QACb,UAAU,QAAQ;AAAA,QAClB,cAAc,QAAQ;AAAA,QACtB,SAAS,QAAQ,WAAW;AAAA,MAC9B;AAAA,MACA,kBAAkB;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,UAAU,4BAA4B,QAAQ,MAAM;AAAA,IACtD,CAAC;AAED,UAAM,oBAAoB,OAAO,mBAAmB;AAAA,MAClD,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ,kBAAkB;AAAA,IAC5C,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,YAAQ,MAAM,yEAAyE,GAAG;AAAA,EAC5F;AACF;",
-  "names": []
-}

package/generated/entities/notification/index.ts

@@ -1,27 +0,0 @@
-export const id = 'id'
-export const recipient_user_id = 'recipient_user_id'
-export const type = 'type'
-export const title_key = 'title_key'
-export const body_key = 'body_key'
-export const title_variables = 'title_variables'
-export const body_variables = 'body_variables'
-export const title = 'title'
-export const body = 'body'
-export const icon = 'icon'
-export const severity = 'severity'
-export const status = 'status'
-export const action_data = 'action_data'
-export const action_result = 'action_result'
-export const action_taken = 'action_taken'
-export const source_module = 'source_module'
-export const source_entity_type = 'source_entity_type'
-export const source_entity_id = 'source_entity_id'
-export const link_href = 'link_href'
-export const group_key = 'group_key'
-export const created_at = 'created_at'
-export const read_at = 'read_at'
-export const actioned_at = 'actioned_at'
-export const dismissed_at = 'dismissed_at'
-export const expires_at = 'expires_at'
-export const tenant_id = 'tenant_id'
-export const organization_id = 'organization_id'

package/src/modules/auth/api/profile/route.ts

@@ -1,163 +0,0 @@
-import { NextResponse } from 'next/server'
-import { z } from 'zod'
-import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
-import type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'
-import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
-import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
-import { signJwt } from '@open-mercato/shared/lib/auth/jwt'
-import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
-import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'
-import { AuthService } from '@open-mercato/core/modules/auth/services/authService'
-import { User } from '@open-mercato/core/modules/auth/data/entities'
-import type { EntityManager } from '@mikro-orm/postgresql'
-import { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'
-import { buildPasswordSchema } from '@open-mercato/shared/lib/auth/passwordPolicy'
-
-const profileResponseSchema = z.object({
-  email: z.string().email(),
-})
-
-const passwordSchema = buildPasswordSchema()
-
-const updateSchema = z.object({
-  email: z.string().email().optional(),
-  password: passwordSchema.optional(),
-}).refine((data) => Boolean(data.email || data.password), {
-  message: 'Provide an email or password.',
-  path: ['email'],
-})
-
-const profileUpdateResponseSchema = z.object({
-  ok: z.literal(true),
-  email: z.string().email(),
-})
-
-export const metadata = {
-  GET: { requireAuth: true },
-  PUT: { requireAuth: true },
-}
-
-function buildCommandContext(container: Awaited<ReturnType<typeof createRequestContainer>>, auth: NonNullable<Awaited<ReturnType<typeof getAuthFromRequest>>>, req: Request): CommandRuntimeContext {
-  return {
-    container,
-    auth,
-    organizationScope: null,
-    selectedOrganizationId: auth.orgId ?? null,
-    organizationIds: auth.orgId ? [auth.orgId] : null,
-    request: req,
-  }
-}
-
-export async function GET(req: Request) {
-  const { translate } = await resolveTranslations()
-  const auth = await getAuthFromRequest(req)
-  if (!auth?.sub) {
-    return NextResponse.json({ error: translate('api.errors.unauthorized', 'Unauthorized') }, { status: 401 })
-  }
-  try {
-    const container = await createRequestContainer()
-    const em = (container.resolve('em') as EntityManager)
-    const user = await findOneWithDecryption(
-      em,
-      User,
-      { id: auth.sub, deletedAt: null },
-      undefined,
-      { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null },
-    )
-    if (!user) {
-      return NextResponse.json({ error: translate('auth.users.form.errors.notFound', 'User not found') }, { status: 404 })
-    }
-    return NextResponse.json({ email: String(user.email) })
-  } catch (err) {
-    console.error('auth.profile.load failed', err)
-    return NextResponse.json({ error: translate('auth.profile.form.errors.load', 'Failed to load profile.') }, { status: 400 })
-  }
-}
-
-export async function PUT(req: Request) {
-  const { translate } = await resolveTranslations()
-  const auth = await getAuthFromRequest(req)
-  if (!auth?.sub) {
-    return NextResponse.json({ error: translate('api.errors.unauthorized', 'Unauthorized') }, { status: 401 })
-  }
-  try {
-    const body = await req.json().catch(() => ({}))
-    const parsed = updateSchema.safeParse(body)
-    if (!parsed.success) {
-      return NextResponse.json(
-        {
-          error: translate('auth.profile.form.errors.invalid', 'Invalid profile update.'),
-          issues: parsed.error.issues,
-        },
-        { status: 400 },
-      )
-    }
-    const container = await createRequestContainer()
-    const commandBus = (container.resolve('commandBus') as CommandBus)
-    const ctx = buildCommandContext(container, auth, req)
-    const { result } = await commandBus.execute<{ id: string; email?: string; password?: string }, User>(
-      'auth.users.update',
-      {
-        input: {
-          id: auth.sub,
-          email: parsed.data.email,
-          password: parsed.data.password,
-        },
-        ctx,
-      },
-    )
-    const authService = container.resolve('authService') as AuthService
-    const roles = await authService.getUserRoles(result, result.tenantId ? String(result.tenantId) : null)
-    const jwt = signJwt({
-      sub: String(result.id),
-      tenantId: result.tenantId ? String(result.tenantId) : null,
-      orgId: result.organizationId ? String(result.organizationId) : null,
-      email: result.email,
-      roles,
-    })
-    const res = NextResponse.json({ ok: true, email: String(result.email) })
-    res.cookies.set('auth_token', jwt, {
-      httpOnly: true,
-      path: '/',
-      sameSite: 'lax',
-      secure: process.env.NODE_ENV === 'production',
-      maxAge: 60 * 60 * 8,
-    })
-    return res
-  } catch (err) {
-    if (err instanceof CrudHttpError) {
-      return NextResponse.json(err.body, { status: err.status })
-    }
-    console.error('auth.profile.update failed', err)
-    return NextResponse.json({ error: translate('auth.profile.form.errors.save', 'Failed to update profile.') }, { status: 400 })
-  }
-}
-
-export const openApi: OpenApiRouteDoc = {
-  tag: 'Authentication & Accounts',
-  summary: 'Profile settings',
-  methods: {
-    GET: {
-      summary: 'Get current profile',
-      description: 'Returns the email address for the signed-in user.',
-      responses: [
-        { status: 200, description: 'Profile payload', schema: profileResponseSchema },
-        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },
-        { status: 404, description: 'User not found', schema: z.object({ error: z.string() }) },
-      ],
-    },
-    PUT: {
-      summary: 'Update current profile',
-      description: 'Updates the email address or password for the signed-in user.',
-      requestBody: {
-        contentType: 'application/json',
-        schema: updateSchema,
-      },
-      responses: [
-        { status: 200, description: 'Profile updated', schema: profileUpdateResponseSchema },
-        { status: 400, description: 'Invalid payload', schema: z.object({ error: z.string() }) },
-        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },
-      ],
-    },
-  },
-}

package/src/modules/auth/backend/auth/profile/page.meta.ts

@@ -1,9 +0,0 @@
-export const metadata = {
-  requireAuth: true,
-  navHidden: true,
-  pageTitle: 'Profile',
-  pageTitleKey: 'auth.profile.title',
-  breadcrumb: [
-    { label: 'Profile', labelKey: 'auth.profile.title' },
-  ],
-}

package/src/modules/auth/backend/auth/profile/page.tsx

@@ -1,174 +0,0 @@
-"use client"
-import * as React from 'react'
-import { useRouter } from 'next/navigation'
-import { z } from 'zod'
-import { Save } from 'lucide-react'
-import { Page, PageBody } from '@open-mercato/ui/backend/Page'
-import { CrudForm, type CrudField } from '@open-mercato/ui/backend/CrudForm'
-import { apiCall, readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'
-import { createCrudFormError } from '@open-mercato/ui/backend/utils/serverErrors'
-import { flash } from '@open-mercato/ui/backend/FlashMessages'
-import { LoadingMessage, ErrorMessage } from '@open-mercato/ui/backend/detail'
-import { Button } from '@open-mercato/ui/primitives/button'
-import { useT } from '@open-mercato/shared/lib/i18n/context'
-import { buildPasswordSchema, formatPasswordRequirements, getPasswordPolicy } from '@open-mercato/shared/lib/auth/passwordPolicy'
-
-type ProfileResponse = {
-  email?: string | null
-}
-
-type ProfileUpdateResponse = {
-  ok?: boolean
-  email?: string | null
-}
-
-type ProfileFormValues = {
-  email: string
-  password?: string
-  confirmPassword?: string
-}
-
-export default function AuthProfilePage() {
-  const t = useT()
-  const router = useRouter()
-  const [loading, setLoading] = React.useState(true)
-  const [error, setError] = React.useState<string | null>(null)
-  const [email, setEmail] = React.useState('')
-  const [formKey, setFormKey] = React.useState(0)
-  const formId = React.useId()
-  const passwordPolicy = React.useMemo(() => getPasswordPolicy(), [])
-  const passwordRequirements = React.useMemo(
-    () => formatPasswordRequirements(passwordPolicy, t),
-    [passwordPolicy, t],
-  )
-  const passwordDescription = React.useMemo(() => (
-    passwordRequirements
-      ? t('auth.password.requirements.help', 'Password requirements: {requirements}', { requirements: passwordRequirements })
-      : undefined
-  ), [passwordRequirements, t])
-
-  React.useEffect(() => {
-    let cancelled = false
-    async function load() {
-      setLoading(true)
-      setError(null)
-      try {
-        const { ok, result } = await apiCall<ProfileResponse>('/api/auth/profile')
-        if (!ok) throw new Error('load_failed')
-        const resolvedEmail = typeof result?.email === 'string' ? result.email : ''
-        if (!cancelled) setEmail(resolvedEmail)
-      } catch (err) {
-        console.error('Failed to load auth profile', err)
-        if (!cancelled) setError(t('auth.profile.form.errors.load', 'Failed to load profile.'))
-      } finally {
-        if (!cancelled) setLoading(false)
-      }
-    }
-    load()
-    return () => { cancelled = true }
-  }, [t])
-
-  const fields = React.useMemo<CrudField[]>(() => [
-    { id: 'email', label: t('auth.profile.form.email', 'Email'), type: 'text', required: true },
-    {
-      id: 'password',
-      label: t('auth.profile.form.password', 'New password'),
-      type: 'text',
-      description: passwordDescription,
-    },
-    { id: 'confirmPassword', label: t('auth.profile.form.confirmPassword', 'Confirm new password'), type: 'text' },
-  ], [passwordDescription, t])
-
-  const schema = React.useMemo(() => {
-    const passwordSchema = buildPasswordSchema({
-      policy: passwordPolicy,
-      message: t('auth.profile.form.errors.passwordRequirements', 'Password must meet the requirements.'),
-    })
-    const optionalPasswordSchema = z.union([z.literal(''), passwordSchema]).optional()
-    return z.object({
-      email: z.string().trim().min(1, t('auth.profile.form.errors.emailRequired', 'Email is required.')),
-      password: optionalPasswordSchema,
-      confirmPassword: z.string().optional(),
-    }).superRefine((values, ctx) => {
-      const password = values.password?.trim() ?? ''
-      const confirmPassword = values.confirmPassword?.trim() ?? ''
-      if ((password || confirmPassword) && password !== confirmPassword) {
-        ctx.addIssue({
-          code: z.ZodIssueCode.custom,
-          message: t('auth.profile.form.errors.passwordMismatch', 'Passwords do not match.'),
-          path: ['confirmPassword'],
-        })
-      }
-    })
-  }, [passwordPolicy, t])
-
-  const handleSubmit = React.useCallback(async (values: ProfileFormValues) => {
-    const nextEmail = values.email?.trim() ?? ''
-    const password = values.password?.trim() ?? ''
-
-    if (!password && nextEmail === email) {
-      throw createCrudFormError(t('auth.profile.form.errors.noChanges', 'No changes to save.'))
-    }
-
-    const payload: { email: string; password?: string } = { email: nextEmail }
-    if (password) payload.password = password
-
-    const result = await readApiResultOrThrow<ProfileUpdateResponse>(
-      '/api/auth/profile',
-      {
-        method: 'PUT',
-        headers: { 'content-type': 'application/json' },
-        body: JSON.stringify(payload),
-      },
-      { errorMessage: t('auth.profile.form.errors.save', 'Failed to update profile.') },
-    )
-
-    const resolvedEmail = typeof result?.email === 'string' ? result.email : nextEmail
-    setEmail(resolvedEmail)
-    setFormKey((prev) => prev + 1)
-    flash(t('auth.profile.form.success', 'Profile updated.'), 'success')
-    router.refresh()
-  }, [email, router, t])
-
-  return (
-    <Page>
-      <PageBody>
-        {loading ? (
-          <LoadingMessage label={t('auth.profile.form.loading', 'Loading profile...')} />
-        ) : error ? (
-          <ErrorMessage label={error} />
-        ) : (
-          <section className="space-y-6 rounded-lg border bg-background p-6">
-            <header className="flex flex-col gap-4 sm:flex-row sm:items-start sm:justify-between">
-              <div className="space-y-1">
-                <h2 className="text-lg font-semibold">{t('auth.profile.title', 'Profile')}</h2>
-                <p className="text-sm text-muted-foreground">
-                  {t('auth.profile.subtitle', 'Change password')}
-                </p>
-              </div>
-              <Button type="submit" form={formId}>
-                <Save className="size-4 mr-2" />
-                {t('auth.profile.form.save', 'Save changes')}
-              </Button>
-            </header>
-            <CrudForm<ProfileFormValues>
-              key={formKey}
-              formId={formId}
-              schema={schema}
-              fields={fields}
-              initialValues={{
-                email,
-                password: '',
-                confirmPassword: '',
-              }}
-              submitLabel={t('auth.profile.form.save', 'Save changes')}
-              onSubmit={handleSubmit}
-              embedded
-              hideFooterActions
-            />
-          </section>
-        )}
-      </PageBody>
-    </Page>
-  )
-}

package/src/modules/auth/notifications.ts

@@ -1,109 +0,0 @@
-import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'
-
-export const notificationTypes: NotificationTypeDefinition[] = [
-  {
-    type: 'auth.password_reset.requested',
-    module: 'auth',
-    titleKey: 'auth.notifications.passwordReset.requested.title',
-    bodyKey: 'auth.notifications.passwordReset.requested.body',
-    icon: 'key',
-    severity: 'info',
-    actions: [
-      {
-        id: 'view',
-        labelKey: 'common.view',
-        variant: 'outline',
-        href: '/backend/auth/profile',
-        icon: 'external-link',
-      },
-    ],
-    linkHref: '/backend/auth/profile',
-    expiresAfterHours: 24,
-  },
-  {
-    type: 'auth.password_reset.completed',
-    module: 'auth',
-    titleKey: 'auth.notifications.passwordReset.completed.title',
-    bodyKey: 'auth.notifications.passwordReset.completed.body',
-    icon: 'check-circle',
-    severity: 'success',
-    actions: [],
-    expiresAfterHours: 72,
-  },
-  {
-    type: 'auth.account.locked',
-    module: 'auth',
-    titleKey: 'auth.notifications.account.locked.title',
-    bodyKey: 'auth.notifications.account.locked.body',
-    icon: 'lock',
-    severity: 'warning',
-    actions: [
-      {
-        id: 'contact_support',
-        labelKey: 'auth.actions.contactSupport',
-        variant: 'default',
-        href: '/backend/support',
-        icon: 'mail',
-      },
-    ],
-    linkHref: '/backend/support',
-  },
-  {
-    type: 'auth.login.new_device',
-    module: 'auth',
-    titleKey: 'auth.notifications.login.newDevice.title',
-    bodyKey: 'auth.notifications.login.newDevice.body',
-    icon: 'smartphone',
-    severity: 'info',
-    actions: [
-      {
-        id: 'view_sessions',
-        labelKey: 'auth.actions.viewSessions',
-        variant: 'outline',
-        href: '/backend/auth/sessions',
-        icon: 'list',
-      },
-    ],
-    linkHref: '/backend/auth/sessions',
-    expiresAfterHours: 168, // 7 days
-  },
-  {
-    type: 'auth.role.assigned',
-    module: 'auth',
-    titleKey: 'auth.notifications.role.assigned.title',
-    bodyKey: 'auth.notifications.role.assigned.body',
-    icon: 'user-plus',
-    severity: 'success',
-    actions: [
-      {
-        id: 'view_permissions',
-        labelKey: 'auth.actions.viewPermissions',
-        variant: 'outline',
-        href: '/backend/auth/profile',
-        icon: 'shield',
-      },
-    ],
-    linkHref: '/backend/auth/profile',
-    expiresAfterHours: 168,
-  },
-  {
-    type: 'auth.role.revoked',
-    module: 'auth',
-    titleKey: 'auth.notifications.role.revoked.title',
-    bodyKey: 'auth.notifications.role.revoked.body',
-    icon: 'user-minus',
-    severity: 'warning',
-    actions: [
-      {
-        id: 'view_profile',
-        labelKey: 'common.view',
-        variant: 'outline',
-        href: '/backend/auth/profile',
-      },
-    ],
-    linkHref: '/backend/auth/profile',
-    expiresAfterHours: 168,
-  },
-]
-
-export default notificationTypes