@open-mercato/core 0.4.2-canary-3b5064ce72 → 0.4.2-canary-7732371765

package/src/modules/auth/api/profile/route.ts

@@ -1,163 +0,0 @@
-import { NextResponse } from 'next/server'
-import { z } from 'zod'
-import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
-import type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'
-import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
-import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
-import { signJwt } from '@open-mercato/shared/lib/auth/jwt'
-import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
-import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'
-import { AuthService } from '@open-mercato/core/modules/auth/services/authService'
-import { User } from '@open-mercato/core/modules/auth/data/entities'
-import type { EntityManager } from '@mikro-orm/postgresql'
-import { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'
-import { buildPasswordSchema } from '@open-mercato/shared/lib/auth/passwordPolicy'
-
-const profileResponseSchema = z.object({
-  email: z.string().email(),
-})
-
-const passwordSchema = buildPasswordSchema()
-
-const updateSchema = z.object({
-  email: z.string().email().optional(),
-  password: passwordSchema.optional(),
-}).refine((data) => Boolean(data.email || data.password), {
-  message: 'Provide an email or password.',
-  path: ['email'],
-})
-
-const profileUpdateResponseSchema = z.object({
-  ok: z.literal(true),
-  email: z.string().email(),
-})
-
-export const metadata = {
-  GET: { requireAuth: true },
-  PUT: { requireAuth: true },
-}
-
-function buildCommandContext(container: Awaited<ReturnType<typeof createRequestContainer>>, auth: NonNullable<Awaited<ReturnType<typeof getAuthFromRequest>>>, req: Request): CommandRuntimeContext {
-  return {
-    container,
-    auth,
-    organizationScope: null,
-    selectedOrganizationId: auth.orgId ?? null,
-    organizationIds: auth.orgId ? [auth.orgId] : null,
-    request: req,
-  }
-}
-
-export async function GET(req: Request) {
-  const { translate } = await resolveTranslations()
-  const auth = await getAuthFromRequest(req)
-  if (!auth?.sub) {
-    return NextResponse.json({ error: translate('api.errors.unauthorized', 'Unauthorized') }, { status: 401 })
-  }
-  try {
-    const container = await createRequestContainer()
-    const em = (container.resolve('em') as EntityManager)
-    const user = await findOneWithDecryption(
-      em,
-      User,
-      { id: auth.sub, deletedAt: null },
-      undefined,
-      { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null },
-    )
-    if (!user) {
-      return NextResponse.json({ error: translate('auth.users.form.errors.notFound', 'User not found') }, { status: 404 })
-    }
-    return NextResponse.json({ email: String(user.email) })
-  } catch (err) {
-    console.error('auth.profile.load failed', err)
-    return NextResponse.json({ error: translate('auth.profile.form.errors.load', 'Failed to load profile.') }, { status: 400 })
-  }
-}
-
-export async function PUT(req: Request) {
-  const { translate } = await resolveTranslations()
-  const auth = await getAuthFromRequest(req)
-  if (!auth?.sub) {
-    return NextResponse.json({ error: translate('api.errors.unauthorized', 'Unauthorized') }, { status: 401 })
-  }
-  try {
-    const body = await req.json().catch(() => ({}))
-    const parsed = updateSchema.safeParse(body)
-    if (!parsed.success) {
-      return NextResponse.json(
-        {
-          error: translate('auth.profile.form.errors.invalid', 'Invalid profile update.'),
-          issues: parsed.error.issues,
-        },
-        { status: 400 },
-      )
-    }
-    const container = await createRequestContainer()
-    const commandBus = (container.resolve('commandBus') as CommandBus)
-    const ctx = buildCommandContext(container, auth, req)
-    const { result } = await commandBus.execute<{ id: string; email?: string; password?: string }, User>(
-      'auth.users.update',
-      {
-        input: {
-          id: auth.sub,
-          email: parsed.data.email,
-          password: parsed.data.password,
-        },
-        ctx,
-      },
-    )
-    const authService = container.resolve('authService') as AuthService
-    const roles = await authService.getUserRoles(result, result.tenantId ? String(result.tenantId) : null)
-    const jwt = signJwt({
-      sub: String(result.id),
-      tenantId: result.tenantId ? String(result.tenantId) : null,
-      orgId: result.organizationId ? String(result.organizationId) : null,
-      email: result.email,
-      roles,
-    })
-    const res = NextResponse.json({ ok: true, email: String(result.email) })
-    res.cookies.set('auth_token', jwt, {
-      httpOnly: true,
-      path: '/',
-      sameSite: 'lax',
-      secure: process.env.NODE_ENV === 'production',
-      maxAge: 60 * 60 * 8,
-    })
-    return res
-  } catch (err) {
-    if (err instanceof CrudHttpError) {
-      return NextResponse.json(err.body, { status: err.status })
-    }
-    console.error('auth.profile.update failed', err)
-    return NextResponse.json({ error: translate('auth.profile.form.errors.save', 'Failed to update profile.') }, { status: 400 })
-  }
-}
-
-export const openApi: OpenApiRouteDoc = {
-  tag: 'Authentication & Accounts',
-  summary: 'Profile settings',
-  methods: {
-    GET: {
-      summary: 'Get current profile',
-      description: 'Returns the email address for the signed-in user.',
-      responses: [
-        { status: 200, description: 'Profile payload', schema: profileResponseSchema },
-        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },
-        { status: 404, description: 'User not found', schema: z.object({ error: z.string() }) },
-      ],
-    },
-    PUT: {
-      summary: 'Update current profile',
-      description: 'Updates the email address or password for the signed-in user.',
-      requestBody: {
-        contentType: 'application/json',
-        schema: updateSchema,
-      },
-      responses: [
-        { status: 200, description: 'Profile updated', schema: profileUpdateResponseSchema },
-        { status: 400, description: 'Invalid payload', schema: z.object({ error: z.string() }) },
-        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },
-      ],
-    },
-  },
-}

package/src/modules/auth/backend/auth/profile/page.meta.ts

@@ -1,9 +0,0 @@
-export const metadata = {
-  requireAuth: true,
-  navHidden: true,
-  pageTitle: 'Profile',
-  pageTitleKey: 'auth.profile.title',
-  breadcrumb: [
-    { label: 'Profile', labelKey: 'auth.profile.title' },
-  ],
-}

package/src/modules/auth/backend/auth/profile/page.tsx

@@ -1,174 +0,0 @@
-"use client"
-import * as React from 'react'
-import { useRouter } from 'next/navigation'
-import { z } from 'zod'
-import { Save } from 'lucide-react'
-import { Page, PageBody } from '@open-mercato/ui/backend/Page'
-import { CrudForm, type CrudField } from '@open-mercato/ui/backend/CrudForm'
-import { apiCall, readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'
-import { createCrudFormError } from '@open-mercato/ui/backend/utils/serverErrors'
-import { flash } from '@open-mercato/ui/backend/FlashMessages'
-import { LoadingMessage, ErrorMessage } from '@open-mercato/ui/backend/detail'
-import { Button } from '@open-mercato/ui/primitives/button'
-import { useT } from '@open-mercato/shared/lib/i18n/context'
-import { buildPasswordSchema, formatPasswordRequirements, getPasswordPolicy } from '@open-mercato/shared/lib/auth/passwordPolicy'
-
-type ProfileResponse = {
-  email?: string | null
-}
-
-type ProfileUpdateResponse = {
-  ok?: boolean
-  email?: string | null
-}
-
-type ProfileFormValues = {
-  email: string
-  password?: string
-  confirmPassword?: string
-}
-
-export default function AuthProfilePage() {
-  const t = useT()
-  const router = useRouter()
-  const [loading, setLoading] = React.useState(true)
-  const [error, setError] = React.useState<string | null>(null)
-  const [email, setEmail] = React.useState('')
-  const [formKey, setFormKey] = React.useState(0)
-  const formId = React.useId()
-  const passwordPolicy = React.useMemo(() => getPasswordPolicy(), [])
-  const passwordRequirements = React.useMemo(
-    () => formatPasswordRequirements(passwordPolicy, t),
-    [passwordPolicy, t],
-  )
-  const passwordDescription = React.useMemo(() => (
-    passwordRequirements
-      ? t('auth.password.requirements.help', 'Password requirements: {requirements}', { requirements: passwordRequirements })
-      : undefined
-  ), [passwordRequirements, t])
-
-  React.useEffect(() => {
-    let cancelled = false
-    async function load() {
-      setLoading(true)
-      setError(null)
-      try {
-        const { ok, result } = await apiCall<ProfileResponse>('/api/auth/profile')
-        if (!ok) throw new Error('load_failed')
-        const resolvedEmail = typeof result?.email === 'string' ? result.email : ''
-        if (!cancelled) setEmail(resolvedEmail)
-      } catch (err) {
-        console.error('Failed to load auth profile', err)
-        if (!cancelled) setError(t('auth.profile.form.errors.load', 'Failed to load profile.'))
-      } finally {
-        if (!cancelled) setLoading(false)
-      }
-    }
-    load()
-    return () => { cancelled = true }
-  }, [t])
-
-  const fields = React.useMemo<CrudField[]>(() => [
-    { id: 'email', label: t('auth.profile.form.email', 'Email'), type: 'text', required: true },
-    {
-      id: 'password',
-      label: t('auth.profile.form.password', 'New password'),
-      type: 'text',
-      description: passwordDescription,
-    },
-    { id: 'confirmPassword', label: t('auth.profile.form.confirmPassword', 'Confirm new password'), type: 'text' },
-  ], [passwordDescription, t])
-
-  const schema = React.useMemo(() => {
-    const passwordSchema = buildPasswordSchema({
-      policy: passwordPolicy,
-      message: t('auth.profile.form.errors.passwordRequirements', 'Password must meet the requirements.'),
-    })
-    const optionalPasswordSchema = z.union([z.literal(''), passwordSchema]).optional()
-    return z.object({
-      email: z.string().trim().min(1, t('auth.profile.form.errors.emailRequired', 'Email is required.')),
-      password: optionalPasswordSchema,
-      confirmPassword: z.string().optional(),
-    }).superRefine((values, ctx) => {
-      const password = values.password?.trim() ?? ''
-      const confirmPassword = values.confirmPassword?.trim() ?? ''
-      if ((password || confirmPassword) && password !== confirmPassword) {
-        ctx.addIssue({
-          code: z.ZodIssueCode.custom,
-          message: t('auth.profile.form.errors.passwordMismatch', 'Passwords do not match.'),
-          path: ['confirmPassword'],
-        })
-      }
-    })
-  }, [passwordPolicy, t])
-
-  const handleSubmit = React.useCallback(async (values: ProfileFormValues) => {
-    const nextEmail = values.email?.trim() ?? ''
-    const password = values.password?.trim() ?? ''
-
-    if (!password && nextEmail === email) {
-      throw createCrudFormError(t('auth.profile.form.errors.noChanges', 'No changes to save.'))
-    }
-
-    const payload: { email: string; password?: string } = { email: nextEmail }
-    if (password) payload.password = password
-
-    const result = await readApiResultOrThrow<ProfileUpdateResponse>(
-      '/api/auth/profile',
-      {
-        method: 'PUT',
-        headers: { 'content-type': 'application/json' },
-        body: JSON.stringify(payload),
-      },
-      { errorMessage: t('auth.profile.form.errors.save', 'Failed to update profile.') },
-    )
-
-    const resolvedEmail = typeof result?.email === 'string' ? result.email : nextEmail
-    setEmail(resolvedEmail)
-    setFormKey((prev) => prev + 1)
-    flash(t('auth.profile.form.success', 'Profile updated.'), 'success')
-    router.refresh()
-  }, [email, router, t])
-
-  return (
-    <Page>
-      <PageBody>
-        {loading ? (
-          <LoadingMessage label={t('auth.profile.form.loading', 'Loading profile...')} />
-        ) : error ? (
-          <ErrorMessage label={error} />
-        ) : (
-          <section className="space-y-6 rounded-lg border bg-background p-6">
-            <header className="flex flex-col gap-4 sm:flex-row sm:items-start sm:justify-between">
-              <div className="space-y-1">
-                <h2 className="text-lg font-semibold">{t('auth.profile.title', 'Profile')}</h2>
-                <p className="text-sm text-muted-foreground">
-                  {t('auth.profile.subtitle', 'Change password')}
-                </p>
-              </div>
-              <Button type="submit" form={formId}>
-                <Save className="size-4 mr-2" />
-                {t('auth.profile.form.save', 'Save changes')}
-              </Button>
-            </header>
-            <CrudForm<ProfileFormValues>
-              key={formKey}
-              formId={formId}
-              schema={schema}
-              fields={fields}
-              initialValues={{
-                email,
-                password: '',
-                confirmPassword: '',
-              }}
-              submitLabel={t('auth.profile.form.save', 'Save changes')}
-              onSubmit={handleSubmit}
-              embedded
-              hideFooterActions
-            />
-          </section>
-        )}
-      </PageBody>
-    </Page>
-  )
-}

package/src/modules/auth/notifications.ts

@@ -1,109 +0,0 @@
-import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'
-
-export const notificationTypes: NotificationTypeDefinition[] = [
-  {
-    type: 'auth.password_reset.requested',
-    module: 'auth',
-    titleKey: 'auth.notifications.passwordReset.requested.title',
-    bodyKey: 'auth.notifications.passwordReset.requested.body',
-    icon: 'key',
-    severity: 'info',
-    actions: [
-      {
-        id: 'view',
-        labelKey: 'common.view',
-        variant: 'outline',
-        href: '/backend/auth/profile',
-        icon: 'external-link',
-      },
-    ],
-    linkHref: '/backend/auth/profile',
-    expiresAfterHours: 24,
-  },
-  {
-    type: 'auth.password_reset.completed',
-    module: 'auth',
-    titleKey: 'auth.notifications.passwordReset.completed.title',
-    bodyKey: 'auth.notifications.passwordReset.completed.body',
-    icon: 'check-circle',
-    severity: 'success',
-    actions: [],
-    expiresAfterHours: 72,
-  },
-  {
-    type: 'auth.account.locked',
-    module: 'auth',
-    titleKey: 'auth.notifications.account.locked.title',
-    bodyKey: 'auth.notifications.account.locked.body',
-    icon: 'lock',
-    severity: 'warning',
-    actions: [
-      {
-        id: 'contact_support',
-        labelKey: 'auth.actions.contactSupport',
-        variant: 'default',
-        href: '/backend/support',
-        icon: 'mail',
-      },
-    ],
-    linkHref: '/backend/support',
-  },
-  {
-    type: 'auth.login.new_device',
-    module: 'auth',
-    titleKey: 'auth.notifications.login.newDevice.title',
-    bodyKey: 'auth.notifications.login.newDevice.body',
-    icon: 'smartphone',
-    severity: 'info',
-    actions: [
-      {
-        id: 'view_sessions',
-        labelKey: 'auth.actions.viewSessions',
-        variant: 'outline',
-        href: '/backend/auth/sessions',
-        icon: 'list',
-      },
-    ],
-    linkHref: '/backend/auth/sessions',
-    expiresAfterHours: 168, // 7 days
-  },
-  {
-    type: 'auth.role.assigned',
-    module: 'auth',
-    titleKey: 'auth.notifications.role.assigned.title',
-    bodyKey: 'auth.notifications.role.assigned.body',
-    icon: 'user-plus',
-    severity: 'success',
-    actions: [
-      {
-        id: 'view_permissions',
-        labelKey: 'auth.actions.viewPermissions',
-        variant: 'outline',
-        href: '/backend/auth/profile',
-        icon: 'shield',
-      },
-    ],
-    linkHref: '/backend/auth/profile',
-    expiresAfterHours: 168,
-  },
-  {
-    type: 'auth.role.revoked',
-    module: 'auth',
-    titleKey: 'auth.notifications.role.revoked.title',
-    bodyKey: 'auth.notifications.role.revoked.body',
-    icon: 'user-minus',
-    severity: 'warning',
-    actions: [
-      {
-        id: 'view_profile',
-        labelKey: 'common.view',
-        variant: 'outline',
-        href: '/backend/auth/profile',
-      },
-    ],
-    linkHref: '/backend/auth/profile',
-    expiresAfterHours: 168,
-  },
-]
-
-export default notificationTypes

package/src/modules/business_rules/notifications.ts

@@ -1,25 +0,0 @@
-import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'
-
-export const notificationTypes: NotificationTypeDefinition[] = [
-  {
-    type: 'business_rules.rule.execution_failed',
-    module: 'business_rules',
-    titleKey: 'businessRules.notifications.rule.executionFailed.title',
-    bodyKey: 'businessRules.notifications.rule.executionFailed.body',
-    icon: 'alert-triangle',
-    severity: 'error',
-    actions: [
-      {
-        id: 'view',
-        labelKey: 'common.view',
-        variant: 'outline',
-        href: '/backend/business-rules/{sourceEntityId}',
-        icon: 'external-link',
-      },
-    ],
-    linkHref: '/backend/business-rules/{sourceEntityId}',
-    expiresAfterHours: 168, // 7 days
-  },
-]
-
-export default notificationTypes

package/src/modules/business_rules/subscribers/rule-execution-failed-notification.ts

@@ -1,50 +0,0 @@
-import type { EntityManager } from '@mikro-orm/postgresql'
-import { resolveNotificationService } from '../../notifications/lib/notificationService'
-import { buildFeatureNotificationFromType } from '../../notifications/lib/notificationBuilder'
-import { notificationTypes } from '../notifications'
-
-export const metadata = {
-  event: 'business_rules.rule.execution_failed',
-  persistent: true,
-  id: 'business_rules:rule-execution-failed-notification',
-}
-
-type RuleExecutionFailedPayload = {
-  ruleId: string
-  ruleName: string
-  entityType?: string | null
-  errorMessage?: string | null
-  tenantId: string
-  organizationId?: string | null
-}
-
-type ResolverContext = {
-  resolve: <T = unknown>(name: string) => T
-}
-
-export default async function handle(payload: RuleExecutionFailedPayload, ctx: ResolverContext) {
-  try {
-    const notificationService = resolveNotificationService(ctx)
-    const typeDef = notificationTypes.find((type) => type.type === 'business_rules.rule.execution_failed')
-    if (!typeDef) return
-
-    const notificationInput = buildFeatureNotificationFromType(typeDef, {
-      requiredFeature: 'business_rules.manage',
-      bodyVariables: {
-        ruleName: payload.ruleName,
-        entityType: payload.entityType ?? '',
-        errorMessage: payload.errorMessage ?? 'Unknown error',
-      },
-      sourceEntityType: 'business_rules:rule',
-      sourceEntityId: payload.ruleId,
-      linkHref: `/backend/business-rules/${payload.ruleId}`,
-    })
-
-    await notificationService.createForFeature(notificationInput, {
-      tenantId: payload.tenantId,
-      organizationId: payload.organizationId ?? null,
-    })
-  } catch (err) {
-    console.error('[business_rules:rule-execution-failed-notification] Failed to create notification:', err)
-  }
-}

package/src/modules/catalog/notifications.ts

@@ -1,25 +0,0 @@
-import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'
-
-export const notificationTypes: NotificationTypeDefinition[] = [
-  {
-    type: 'catalog.product.low_stock',
-    module: 'catalog',
-    titleKey: 'catalog.notifications.product.lowStock.title',
-    bodyKey: 'catalog.notifications.product.lowStock.body',
-    icon: 'package-x',
-    severity: 'warning',
-    actions: [
-      {
-        id: 'view',
-        labelKey: 'common.view',
-        variant: 'outline',
-        href: '/backend/catalog/products/{sourceEntityId}',
-        icon: 'external-link',
-      },
-    ],
-    linkHref: '/backend/catalog/products/{sourceEntityId}',
-    expiresAfterHours: 72, // 3 days
-  },
-]
-
-export default notificationTypes

package/src/modules/catalog/subscribers/low-stock-notification.ts

@@ -1,52 +0,0 @@
-import type { EntityManager } from '@mikro-orm/postgresql'
-import { resolveNotificationService } from '../../notifications/lib/notificationService'
-import { buildFeatureNotificationFromType } from '../../notifications/lib/notificationBuilder'
-import { notificationTypes } from '../notifications'
-
-export const metadata = {
-  event: 'catalog.product.stock_low',
-  persistent: true,
-  id: 'catalog:low-stock-notification',
-}
-
-type LowStockPayload = {
-  productId: string
-  productName: string
-  sku?: string | null
-  currentStock: number
-  threshold: number
-  tenantId: string
-  organizationId?: string | null
-}
-
-type ResolverContext = {
-  resolve: <T = unknown>(name: string) => T
-}
-
-export default async function handle(payload: LowStockPayload, ctx: ResolverContext) {
-  try {
-    const notificationService = resolveNotificationService(ctx)
-    const typeDef = notificationTypes.find((type) => type.type === 'catalog.product.low_stock')
-    if (!typeDef) return
-
-    const notificationInput = buildFeatureNotificationFromType(typeDef, {
-      requiredFeature: 'catalog.products.manage',
-      bodyVariables: {
-        productName: payload.productName,
-        sku: payload.sku ?? '',
-        currentStock: String(payload.currentStock),
-        threshold: String(payload.threshold),
-      },
-      sourceEntityType: 'catalog:product',
-      sourceEntityId: payload.productId,
-      linkHref: `/backend/catalog/products/${payload.productId}`,
-    })
-
-    await notificationService.createForFeature(notificationInput, {
-      tenantId: payload.tenantId,
-      organizationId: payload.organizationId ?? null,
-    })
-  } catch (err) {
-    console.error('[catalog:low-stock-notification] Failed to create notification:', err)
-  }
-}

package/src/modules/customers/notifications.ts

@@ -1,44 +0,0 @@
-import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'
-
-export const notificationTypes: NotificationTypeDefinition[] = [
-  {
-    type: 'customers.deal.won',
-    module: 'customers',
-    titleKey: 'customers.notifications.deal.won.title',
-    bodyKey: 'customers.notifications.deal.won.body',
-    icon: 'trophy',
-    severity: 'success',
-    actions: [
-      {
-        id: 'view',
-        labelKey: 'common.view',
-        variant: 'outline',
-        href: '/backend/customers/deals/{sourceEntityId}',
-        icon: 'external-link',
-      },
-    ],
-    linkHref: '/backend/customers/deals/{sourceEntityId}',
-    expiresAfterHours: 168, // 7 days
-  },
-  {
-    type: 'customers.deal.lost',
-    module: 'customers',
-    titleKey: 'customers.notifications.deal.lost.title',
-    bodyKey: 'customers.notifications.deal.lost.body',
-    icon: 'x-circle',
-    severity: 'warning',
-    actions: [
-      {
-        id: 'view',
-        labelKey: 'common.view',
-        variant: 'outline',
-        href: '/backend/customers/deals/{sourceEntityId}',
-        icon: 'external-link',
-      },
-    ],
-    linkHref: '/backend/customers/deals/{sourceEntityId}',
-    expiresAfterHours: 168, // 7 days
-  },
-]
-
-export default notificationTypes