@open-mercato/core 0.4.2-canary-15e78de280 → 0.4.2-canary-f075c3eb92

package/src/modules/auth/lib/setup-app.ts

@@ -4,12 +4,8 @@ import { Role, RoleAcl, User, UserRole } from '@open-mercato/core/modules/auth/d
 import { Tenant, Organization } from '@open-mercato/core/modules/directory/data/entities'
 import { rebuildHierarchyForTenant } from '@open-mercato/core/modules/directory/lib/hierarchy'
 import { normalizeTenantId } from './tenantAccess'
-import { SalesSettings, SalesDocumentSequence } from '@open-mercato/core/modules/sales/data/entities'
-import {
-  DEFAULT_ORDER_NUMBER_FORMAT,
-  DEFAULT_QUOTE_NUMBER_FORMAT,
-} from '@open-mercato/core/modules/sales/lib/documentNumberTokens'
 import { computeEmailHash } from '@open-mercato/core/modules/auth/lib/emailHash'
+import type { Module } from '@open-mercato/shared/modules/registry'
 import { isEncryptionDebugEnabled, isTenantDataEncryptionEnabled } from '@open-mercato/shared/lib/encryption/toggles'
 import { EncryptionMap } from '@open-mercato/core/modules/entities/data/entities'
 import { DEFAULT_ENCRYPTION_MAPS } from '@open-mercato/core/modules/entities/lib/encryptionDefaults'
@@ -95,6 +91,8 @@ export type SetupInitialTenantOptions = {
   failIfUserExists?: boolean
   primaryUserRoles?: string[]
   includeSuperadminRole?: boolean
+  /** Optional list of enabled modules. When provided, module setup hooks are called. */
+  modules?: Module[]
 }
 
 export type SetupInitialTenantResult = {
@@ -321,9 +319,16 @@ export async function setupInitialTenant(
     await rebuildHierarchyForTenant(em, tenantId)
   }
 
-  await ensureDefaultRoleAcls(em, tenantId, { includeSuperadminRole })
+  const resolvedModules = options.modules ?? tryGetModules()
+  await ensureDefaultRoleAcls(em, tenantId, resolvedModules, { includeSuperadminRole })
   await deactivateDemoSuperAdminIfSelfOnboardingEnabled(em)
-  await ensureSalesNumberingDefaults(em, { tenantId, organizationId })
+
+  // Call module onTenantCreated hooks
+  for (const mod of resolvedModules) {
+    if (mod.setup?.onTenantCreated) {
+      await mod.setup.onTenantCreated({ em, tenantId, organizationId })
+    }
+  }
 
   return {
     tenantId,
@@ -349,6 +354,7 @@ async function resolvePasswordHash(input: PrimaryUserInput): Promise<string | nu
 async function ensureDefaultRoleAcls(
   em: EntityManager,
   tenantId: string,
+  modules: Module[],
   options: { includeSuperadminRole?: boolean } = {},
 ) {
   const includeSuperadminRole = options.includeSuperadminRole ?? true
@@ -357,84 +363,27 @@ async function ensureDefaultRoleAcls(
   const adminRole = await findRoleByName(em, 'admin', roleTenantId)
   const employeeRole = await findRoleByName(em, 'employee', roleTenantId)
 
+  // Merge features from all enabled modules' setup configs
+  const superadminFeatures: string[] = []
+  const adminFeatures: string[] = []
+  const employeeFeatures: string[] = []
+
+  for (const mod of modules) {
+    const roleFeatures = mod.setup?.defaultRoleFeatures
+    if (!roleFeatures) continue
+    if (roleFeatures.superadmin) superadminFeatures.push(...roleFeatures.superadmin)
+    if (roleFeatures.admin) adminFeatures.push(...roleFeatures.admin)
+    if (roleFeatures.employee) employeeFeatures.push(...roleFeatures.employee)
+  }
+
   if (includeSuperadminRole && superadminRole) {
-    await ensureRoleAclFor(em, superadminRole, tenantId, ['directory.tenants.*'], { isSuperAdmin: true })
+    await ensureRoleAclFor(em, superadminRole, tenantId, superadminFeatures, { isSuperAdmin: true })
   }
   if (adminRole) {
-    const adminFeatures = [
-      'auth.*',
-      'entities.*',
-      'attachments.*',
-      'attachments.view',
-      'attachments.manage',
-      'query_index.*',
-      'search.*',
-      'vector.*',
-      'feature_toggles.*',
-      'configs.system_status.view',
-      'configs.cache.view',
-      'configs.cache.manage',
-      'configs.manage',
-      'catalog.*',
-      'catalog.variants.manage',
-      'catalog.pricing.manage',
-      'sales.*',
-      'audit_logs.*',
-      'directory.organizations.view',
-      'directory.organizations.manage',
-      'customers.*',
-      'customers.people.view',
-      'customers.people.manage',
-      'customers.companies.view',
-      'customers.companies.manage',
-      'customers.deals.view',
-      'customers.deals.manage',
-      'dictionaries.view',
-      'dictionaries.manage',
-      'example.*',
-      'dashboards.*',
-      'dashboards.admin.assign-widgets',
-      'analytics.view',
-      'api_keys.*',
-      'perspectives.use',
-      'perspectives.role_defaults',
-      'business_rules.*',
-      'workflows.*',
-      'currencies.*',
-      'staff.*',
-      'staff.leave_requests.manage',
-      'resources.*',
-      'planner.*',
-    ]
-    await ensureRoleAclFor(em, adminRole, tenantId, adminFeatures, { remove: ['directory.organizations.*', 'directory.tenants.*'] })
+    await ensureRoleAclFor(em, adminRole, tenantId, adminFeatures)
   }
   if (employeeRole) {
-    await ensureRoleAclFor(em, employeeRole, tenantId, [
-      'customers.*',
-      'customers.people.view',
-      'customers.people.manage',
-      'customers.companies.view',
-      'customers.companies.manage',
-      'vector.*',
-      'catalog.*',
-      'catalog.variants.manage',
-      'catalog.pricing.manage',
-      'sales.*',
-      'dictionaries.view',
-      'example.*',
-      'example.widgets.*',
-      'dashboards.view',
-      'dashboards.configure',
-      'analytics.view',
-      'audit_logs.undo_self',
-      'perspectives.use',
-      'staff.leave_requests.send',
-      'staff.my_availability.view',
-      'staff.my_availability.manage',
-      'staff.my_leave_requests.view',
-      'staff.my_leave_requests.send',
-      'planner.view',
-    ])
+    await ensureRoleAclFor(em, employeeRole, tenantId, employeeFeatures)
   }
 }
 
@@ -443,7 +392,7 @@ async function ensureRoleAclFor(
   role: Role,
   tenantId: string,
   features: string[],
-  options: { isSuperAdmin?: boolean; remove?: string[] } = {},
+  options: { isSuperAdmin?: boolean } = {},
 ) {
   const existing = await em.findOne(RoleAcl, { role, tenantId })
   if (!existing) {
@@ -459,24 +408,10 @@ async function ensureRoleAclFor(
   }
   const currentFeatures = Array.isArray(existing.featuresJson) ? existing.featuresJson : []
   const merged = Array.from(new Set([...currentFeatures, ...features]))
-  const removeSet = new Set(options.remove ?? [])
-  const sanitized =
-    removeSet.size
-      ? merged.filter((value) => {
-        if (removeSet.has(value)) return false
-        for (const entry of removeSet) {
-          if (entry.endsWith('.*')) {
-            const prefix = entry.slice(0, -1) // keep trailing dot
-            if (value === entry || value.startsWith(prefix)) return false
-          }
-        }
-        return true
-      })
-      : merged
   const changed =
-    sanitized.length !== currentFeatures.length ||
-    sanitized.some((value, index) => value !== currentFeatures[index])
-  if (changed) existing.featuresJson = sanitized
+    merged.length !== currentFeatures.length ||
+    merged.some((value, index) => value !== currentFeatures[index])
+  if (changed) existing.featuresJson = merged
   if (options.isSuperAdmin && !existing.isSuperAdmin) {
     existing.isSuperAdmin = true
   }
@@ -507,84 +442,12 @@ async function deactivateDemoSuperAdminIfSelfOnboardingEnabled(em: EntityManager
   }
 }
 
-async function ensureSalesNumberingDefaults(
-  em: EntityManager,
-  scope: { tenantId: string; organizationId: string },
-) {
-  const repo = (em as any).getRepository?.(SalesSettings)
-  const findSettings = async () =>
-    repo?.findOne({
-      tenantId: scope.tenantId,
-      organizationId: scope.organizationId,
-    }) ??
-    (em as any).findOne?.(SalesSettings, {
-      tenantId: scope.tenantId,
-      organizationId: scope.organizationId,
-    })
-
-  const exists = await findSettings()
-  if (!exists) {
-    const settings =
-      repo?.create?.({
-        tenantId: scope.tenantId,
-        organizationId: scope.organizationId,
-        orderNumberFormat: DEFAULT_ORDER_NUMBER_FORMAT,
-        quoteNumberFormat: DEFAULT_QUOTE_NUMBER_FORMAT,
-        createdAt: new Date(),
-        updatedAt: new Date(),
-      }) ??
-      (em as any).create?.(SalesSettings, {
-        tenantId: scope.tenantId,
-        organizationId: scope.organizationId,
-        orderNumberFormat: DEFAULT_ORDER_NUMBER_FORMAT,
-        quoteNumberFormat: DEFAULT_QUOTE_NUMBER_FORMAT,
-        createdAt: new Date(),
-        updatedAt: new Date(),
-      })
-    if (settings && (em as any).persist) {
-      em.persist(settings)
-    }
-  }
-
-  const sequenceRepo = (em as any).getRepository?.(SalesDocumentSequence)
-  const kinds: Array<'order' | 'quote'> = ['order', 'quote']
-  for (const kind of kinds) {
-    const seq =
-      sequenceRepo?.findOne({
-        tenantId: scope.tenantId,
-        organizationId: scope.organizationId,
-        documentKind: kind,
-      }) ??
-      (em as any).findOne?.(SalesDocumentSequence, {
-        tenantId: scope.tenantId,
-        organizationId: scope.organizationId,
-        documentKind: kind,
-      })
-    if (!seq) {
-      const entry =
-        sequenceRepo?.create?.({
-          tenantId: scope.tenantId,
-          organizationId: scope.organizationId,
-          documentKind: kind,
-          currentValue: 0,
-          createdAt: new Date(),
-          updatedAt: new Date(),
-        }) ??
-        (em as any).create?.(SalesDocumentSequence, {
-          tenantId: scope.tenantId,
-          organizationId: scope.organizationId,
-          documentKind: kind,
-          currentValue: 0,
-          createdAt: new Date(),
-          updatedAt: new Date(),
-        })
-      if (entry && (em as any).persist) {
-        em.persist(entry)
-      }
-    }
-  }
-
-  if ((em as any).flush) {
-    await em.flush()
+/** Try to get modules from runtime registry; returns empty array if not yet registered. */
+function tryGetModules(): Module[] {
+  try {
+    const { getModules } = require('@open-mercato/shared/lib/modules/registry')
+    return getModules()
+  } catch {
+    return []
   }
 }

package/src/modules/auth/setup.ts

@@ -0,0 +1,9 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+
+export const setup: ModuleSetupConfig = {
+  defaultRoleFeatures: {
+    admin: ['auth.*'],
+  },
+}
+
+export default setup

package/src/modules/business_rules/setup.ts

@@ -0,0 +1,9 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+
+export const setup: ModuleSetupConfig = {
+  defaultRoleFeatures: {
+    admin: ['business_rules.*'],
+  },
+}
+
+export default setup

package/src/modules/catalog/setup.ts

@@ -0,0 +1,22 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+import { seedCatalogUnits, seedCatalogPriceKinds, seedCatalogExamplesForScope } from './lib/seeds'
+
+export const setup: ModuleSetupConfig = {
+  seedDefaults: async (ctx) => {
+    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+    await seedCatalogUnits(ctx.em, scope)
+    await seedCatalogPriceKinds(ctx.em, scope)
+  },
+
+  seedExamples: async (ctx) => {
+    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+    await seedCatalogExamplesForScope(ctx.em, ctx.container, scope)
+  },
+
+  defaultRoleFeatures: {
+    admin: ['catalog.*', 'catalog.variants.manage', 'catalog.pricing.manage'],
+    employee: ['catalog.*', 'catalog.variants.manage', 'catalog.pricing.manage'],
+  },
+}
+
+export default setup

package/src/modules/configs/lib/upgrade-actions.ts

@@ -4,13 +4,8 @@ import type { AwilixContainer } from 'awilix'
 import { Role, RoleAcl } from '@open-mercato/core/modules/auth/data/entities'
 import type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'
 import { reindexModules } from '@open-mercato/core/modules/configs/lib/reindex-helpers'
-import { installExampleCatalogData, type CatalogSeedScope } from '@open-mercato/core/modules/catalog/lib/seeds'
-import { seedSalesExamples } from '@open-mercato/core/modules/sales/seed/examples'
-import { seedExampleCurrencies } from '@open-mercato/core/modules/currencies/lib/seeds'
-import { seedExampleWorkflows } from '@open-mercato/core/modules/workflows/lib/seeds'
-import { seedPlannerAvailabilityRuleSetDefaults, seedPlannerUnavailabilityReasons } from '@open-mercato/core/modules/planner/lib/seeds'
-import { seedResourcesAddressTypes, seedResourcesCapacityUnits, seedResourcesResourceExamples } from '@open-mercato/core/modules/resources/lib/seeds'
-import { seedStaffTeamExamples } from '@open-mercato/core/modules/staff/lib/seeds'
+// Optional module imports are loaded dynamically inside each upgrade action
+// so the app does not crash when a module is disabled.
 import { collectCrudCacheStats, purgeCrudCacheSegment } from '@open-mercato/shared/lib/crud/cache-stats'
 import { isCrudCacheEnabled, resolveCrudCache } from '@open-mercato/shared/lib/crud/cache'
 import * as semver from 'semver'
@@ -91,7 +86,9 @@ async function ensureVectorSearchEncryptionMap(
   return true
 }
 
-export type UpgradeActionContext = CatalogSeedScope & {
+export type UpgradeActionContext = {
+  tenantId: string
+  organizationId: string
   container: AwilixContainer
   em: EntityManager
 }
@@ -155,6 +152,14 @@ export const upgradeActions: UpgradeActionDefinition[] = [
     successKey: 'upgrades.v034.success',
     loadingKey: 'upgrades.v034.loading',
     async run({ container, em, tenantId, organizationId }) {
+      let installExampleCatalogData: typeof import('@open-mercato/core/modules/catalog/lib/seeds')['installExampleCatalogData'] | undefined
+      try {
+        const catalogSeeds = await import('@open-mercato/core/modules/catalog/lib/seeds')
+        installExampleCatalogData = catalogSeeds.installExampleCatalogData
+      } catch {
+        console.warn('[upgrade-actions] catalog module not available, skipping catalog example data')
+        return
+      }
       await installExampleCatalogData(container, { tenantId, organizationId }, em)
       const vectorService = resolveVectorService(container)
       await reindexModules(em, ['catalog'], { tenantId, organizationId, vectorService })
@@ -214,8 +219,16 @@ export const upgradeActions: UpgradeActionDefinition[] = [
     successKey: 'upgrades.v036.success',
     loadingKey: 'upgrades.v036.loading',
     async run({ container, em, tenantId, organizationId }) {
+      let seedSalesExamples: typeof import('@open-mercato/core/modules/sales/seed/examples')['seedSalesExamples'] | undefined
+      try {
+        const salesSeeds = await import('@open-mercato/core/modules/sales/seed/examples')
+        seedSalesExamples = salesSeeds.seedSalesExamples
+      } catch {
+        console.warn('[upgrade-actions] sales module not available, skipping sales example data')
+        return
+      }
       await em.transactional(async (tem) => {
-        await seedSalesExamples(tem, container, { tenantId, organizationId })
+        await seedSalesExamples!(tem, container, { tenantId, organizationId })
       })
       const vectorService = resolveVectorService(container)
       await reindexModules(em, ['sales', 'catalog'], { tenantId, organizationId, vectorService })
@@ -262,9 +275,26 @@ export const upgradeActions: UpgradeActionDefinition[] = [
     async run({ container, em, tenantId, organizationId }) {
       const normalizedTenantId = tenantId.trim()
       const scope = { tenantId, organizationId }
+
+      let seedExampleCurrencies: typeof import('@open-mercato/core/modules/currencies/lib/seeds')['seedExampleCurrencies'] | undefined
+      try {
+        const currenciesSeeds = await import('@open-mercato/core/modules/currencies/lib/seeds')
+        seedExampleCurrencies = currenciesSeeds.seedExampleCurrencies
+      } catch {
+        console.warn('[upgrade-actions] currencies module not available, skipping currency seeding')
+      }
+
+      let seedExampleWorkflows: typeof import('@open-mercato/core/modules/workflows/lib/seeds')['seedExampleWorkflows'] | undefined
+      try {
+        const workflowsSeeds = await import('@open-mercato/core/modules/workflows/lib/seeds')
+        seedExampleWorkflows = workflowsSeeds.seedExampleWorkflows
+      } catch {
+        console.warn('[upgrade-actions] workflows module not available, skipping workflow seeding')
+      }
+
       await em.transactional(async (tem) => {
-        await seedExampleCurrencies(tem, scope)
-        await seedExampleWorkflows(tem, scope)
+        if (seedExampleCurrencies) await seedExampleCurrencies(tem, scope)
+        if (seedExampleWorkflows) await seedExampleWorkflows(tem, scope)
 
         const adminRole = await tem.findOne(Role, { name: 'admin', tenantId: normalizedTenantId, deletedAt: null })
         if (!adminRole) return
@@ -315,13 +345,44 @@ export const upgradeActions: UpgradeActionDefinition[] = [
     async run({ container, em, tenantId, organizationId }) {
       const normalizedTenantId = tenantId.trim()
       const scope = { tenantId, organizationId }
+
+      let seedPlannerAvailabilityRuleSetDefaults: typeof import('@open-mercato/core/modules/planner/lib/seeds')['seedPlannerAvailabilityRuleSetDefaults'] | undefined
+      let seedPlannerUnavailabilityReasons: typeof import('@open-mercato/core/modules/planner/lib/seeds')['seedPlannerUnavailabilityReasons'] | undefined
+      try {
+        const plannerSeeds = await import('@open-mercato/core/modules/planner/lib/seeds')
+        seedPlannerAvailabilityRuleSetDefaults = plannerSeeds.seedPlannerAvailabilityRuleSetDefaults
+        seedPlannerUnavailabilityReasons = plannerSeeds.seedPlannerUnavailabilityReasons
+      } catch {
+        console.warn('[upgrade-actions] planner module not available, skipping planner seeding')
+      }
+
+      let seedStaffTeamExamples: typeof import('@open-mercato/core/modules/staff/lib/seeds')['seedStaffTeamExamples'] | undefined
+      try {
+        const staffSeeds = await import('@open-mercato/core/modules/staff/lib/seeds')
+        seedStaffTeamExamples = staffSeeds.seedStaffTeamExamples
+      } catch {
+        console.warn('[upgrade-actions] staff module not available, skipping staff seeding')
+      }
+
+      let seedResourcesAddressTypes: typeof import('@open-mercato/core/modules/resources/lib/seeds')['seedResourcesAddressTypes'] | undefined
+      let seedResourcesCapacityUnits: typeof import('@open-mercato/core/modules/resources/lib/seeds')['seedResourcesCapacityUnits'] | undefined
+      let seedResourcesResourceExamples: typeof import('@open-mercato/core/modules/resources/lib/seeds')['seedResourcesResourceExamples'] | undefined
+      try {
+        const resourcesSeeds = await import('@open-mercato/core/modules/resources/lib/seeds')
+        seedResourcesAddressTypes = resourcesSeeds.seedResourcesAddressTypes
+        seedResourcesCapacityUnits = resourcesSeeds.seedResourcesCapacityUnits
+        seedResourcesResourceExamples = resourcesSeeds.seedResourcesResourceExamples
+      } catch {
+        console.warn('[upgrade-actions] resources module not available, skipping resources seeding')
+      }
+
       await em.transactional(async (tem) => {
-        await seedPlannerAvailabilityRuleSetDefaults(tem, scope)
-        await seedPlannerUnavailabilityReasons(tem, scope)
-        await seedStaffTeamExamples(tem, scope)
-        await seedResourcesCapacityUnits(tem, scope)
-        await seedResourcesAddressTypes(tem, scope)
-        await seedResourcesResourceExamples(tem, scope)
+        if (seedPlannerAvailabilityRuleSetDefaults) await seedPlannerAvailabilityRuleSetDefaults(tem, scope)
+        if (seedPlannerUnavailabilityReasons) await seedPlannerUnavailabilityReasons(tem, scope)
+        if (seedStaffTeamExamples) await seedStaffTeamExamples(tem, scope)
+        if (seedResourcesCapacityUnits) await seedResourcesCapacityUnits(tem, scope)
+        if (seedResourcesAddressTypes) await seedResourcesAddressTypes(tem, scope)
+        if (seedResourcesResourceExamples) await seedResourcesResourceExamples(tem, scope)
 
         const adminRole = await tem.findOne(Role, { name: 'admin', tenantId: normalizedTenantId, deletedAt: null })
         if (!adminRole) return

package/src/modules/configs/setup.ts

@@ -0,0 +1,14 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+
+export const setup: ModuleSetupConfig = {
+  defaultRoleFeatures: {
+    admin: [
+      'configs.system_status.view',
+      'configs.cache.view',
+      'configs.cache.manage',
+      'configs.manage',
+    ],
+  },
+}
+
+export default setup

package/src/modules/currencies/setup.ts

@@ -0,0 +1,15 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+import { seedExampleCurrencies } from './lib/seeds'
+
+export const setup: ModuleSetupConfig = {
+  seedDefaults: async (ctx) => {
+    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+    await seedExampleCurrencies(ctx.em, scope)
+  },
+
+  defaultRoleFeatures: {
+    admin: ['currencies.*'],
+  },
+}
+
+export default setup

package/src/modules/customers/setup.ts

@@ -0,0 +1,36 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+import { seedCustomerDictionaries, seedCurrencyDictionary, seedCustomerExamples } from './cli'
+
+export const setup: ModuleSetupConfig = {
+  seedDefaults: async (ctx) => {
+    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+    await seedCustomerDictionaries(ctx.em, scope)
+    await seedCurrencyDictionary(ctx.em, scope)
+  },
+
+  seedExamples: async (ctx) => {
+    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+    await seedCustomerExamples(ctx.em, ctx.container, scope)
+  },
+
+  defaultRoleFeatures: {
+    admin: [
+      'customers.*',
+      'customers.people.view',
+      'customers.people.manage',
+      'customers.companies.view',
+      'customers.companies.manage',
+      'customers.deals.view',
+      'customers.deals.manage',
+    ],
+    employee: [
+      'customers.*',
+      'customers.people.view',
+      'customers.people.manage',
+      'customers.companies.view',
+      'customers.companies.manage',
+    ],
+  },
+}
+
+export default setup

package/src/modules/dashboards/setup.ts

@@ -0,0 +1,10 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+
+export const setup: ModuleSetupConfig = {
+  defaultRoleFeatures: {
+    admin: ['dashboards.*', 'dashboards.admin.assign-widgets', 'analytics.view'],
+    employee: ['dashboards.view', 'dashboards.configure', 'analytics.view'],
+  },
+}
+
+export default setup

package/src/modules/dictionaries/setup.ts

@@ -0,0 +1,10 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+
+export const setup: ModuleSetupConfig = {
+  defaultRoleFeatures: {
+    admin: ['dictionaries.view', 'dictionaries.manage'],
+    employee: ['dictionaries.view'],
+  },
+}
+
+export default setup

package/src/modules/directory/setup.ts

@@ -0,0 +1,10 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+
+export const setup: ModuleSetupConfig = {
+  defaultRoleFeatures: {
+    superadmin: ['directory.tenants.*'],
+    admin: ['directory.organizations.view', 'directory.organizations.manage'],
+  },
+}
+
+export default setup

package/src/modules/entities/setup.ts

@@ -0,0 +1,9 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+
+export const setup: ModuleSetupConfig = {
+  defaultRoleFeatures: {
+    admin: ['entities.*'],
+  },
+}
+
+export default setup

package/src/modules/feature_toggles/setup.ts

@@ -0,0 +1,9 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+
+export const setup: ModuleSetupConfig = {
+  defaultRoleFeatures: {
+    admin: ['feature_toggles.*'],
+  },
+}
+
+export default setup

package/src/modules/perspectives/setup.ts

@@ -0,0 +1,10 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+
+export const setup: ModuleSetupConfig = {
+  defaultRoleFeatures: {
+    admin: ['perspectives.use', 'perspectives.role_defaults'],
+    employee: ['perspectives.use'],
+  },
+}
+
+export default setup

package/src/modules/planner/setup.ts

@@ -0,0 +1,21 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+import { seedPlannerUnavailabilityReasons, seedPlannerAvailabilityRuleSetDefaults } from './lib/seeds'
+
+export const setup: ModuleSetupConfig = {
+  seedDefaults: async (ctx) => {
+    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+    await seedPlannerUnavailabilityReasons(ctx.em, scope)
+  },
+
+  seedExamples: async (ctx) => {
+    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+    await seedPlannerAvailabilityRuleSetDefaults(ctx.em, scope)
+  },
+
+  defaultRoleFeatures: {
+    admin: ['planner.*'],
+    employee: ['planner.view'],
+  },
+}
+
+export default setup

package/src/modules/query_index/setup.ts

@@ -0,0 +1,9 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+
+export const setup: ModuleSetupConfig = {
+  defaultRoleFeatures: {
+    admin: ['query_index.*'],
+  },
+}
+
+export default setup

package/src/modules/resources/setup.ts

@@ -0,0 +1,21 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+import { seedResourcesAddressTypes, seedResourcesCapacityUnits, seedResourcesResourceExamples } from './lib/seeds'
+
+export const setup: ModuleSetupConfig = {
+  seedDefaults: async (ctx) => {
+    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+    await seedResourcesAddressTypes(ctx.em, scope)
+  },
+
+  seedExamples: async (ctx) => {
+    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+    await seedResourcesCapacityUnits(ctx.em, scope)
+    await seedResourcesResourceExamples(ctx.em, scope)
+  },
+
+  defaultRoleFeatures: {
+    admin: ['resources.*'],
+  },
+}
+
+export default setup