@open-mercato/core 0.4.2-canary-ed15f2e753 → 0.4.2-canary-e2aeb1a7bf

package/src/modules/catalog/notifications.ts

@@ -0,0 +1,25 @@
+import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'
+
+export const notificationTypes: NotificationTypeDefinition[] = [
+  {
+    type: 'catalog.product.low_stock',
+    module: 'catalog',
+    titleKey: 'catalog.notifications.product.lowStock.title',
+    bodyKey: 'catalog.notifications.product.lowStock.body',
+    icon: 'package-x',
+    severity: 'warning',
+    actions: [
+      {
+        id: 'view',
+        labelKey: 'common.view',
+        variant: 'outline',
+        href: '/backend/catalog/products/{sourceEntityId}',
+        icon: 'external-link',
+      },
+    ],
+    linkHref: '/backend/catalog/products/{sourceEntityId}',
+    expiresAfterHours: 72, // 3 days
+  },
+]
+
+export default notificationTypes

package/src/modules/catalog/setup.ts

@@ -0,0 +1,22 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+import { seedCatalogUnits, seedCatalogPriceKinds, seedCatalogExamplesForScope } from './lib/seeds'
+
+export const setup: ModuleSetupConfig = {
+  seedDefaults: async (ctx) => {
+    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+    await seedCatalogUnits(ctx.em, scope)
+    await seedCatalogPriceKinds(ctx.em, scope)
+  },
+
+  seedExamples: async (ctx) => {
+    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+    await seedCatalogExamplesForScope(ctx.em, ctx.container, scope)
+  },
+
+  defaultRoleFeatures: {
+    admin: ['catalog.*', 'catalog.variants.manage', 'catalog.pricing.manage'],
+    employee: ['catalog.*', 'catalog.variants.manage', 'catalog.pricing.manage'],
+  },
+}
+
+export default setup

package/src/modules/catalog/subscribers/low-stock-notification.ts

@@ -0,0 +1,52 @@
+import type { EntityManager } from '@mikro-orm/postgresql'
+import { resolveNotificationService } from '../../notifications/lib/notificationService'
+import { buildFeatureNotificationFromType } from '../../notifications/lib/notificationBuilder'
+import { notificationTypes } from '../notifications'
+
+export const metadata = {
+  event: 'catalog.product.stock_low',
+  persistent: true,
+  id: 'catalog:low-stock-notification',
+}
+
+type LowStockPayload = {
+  productId: string
+  productName: string
+  sku?: string | null
+  currentStock: number
+  threshold: number
+  tenantId: string
+  organizationId?: string | null
+}
+
+type ResolverContext = {
+  resolve: <T = unknown>(name: string) => T
+}
+
+export default async function handle(payload: LowStockPayload, ctx: ResolverContext) {
+  try {
+    const notificationService = resolveNotificationService(ctx)
+    const typeDef = notificationTypes.find((type) => type.type === 'catalog.product.low_stock')
+    if (!typeDef) return
+
+    const notificationInput = buildFeatureNotificationFromType(typeDef, {
+      requiredFeature: 'catalog.products.manage',
+      bodyVariables: {
+        productName: payload.productName,
+        sku: payload.sku ?? '',
+        currentStock: String(payload.currentStock),
+        threshold: String(payload.threshold),
+      },
+      sourceEntityType: 'catalog:product',
+      sourceEntityId: payload.productId,
+      linkHref: `/backend/catalog/products/${payload.productId}`,
+    })
+
+    await notificationService.createForFeature(notificationInput, {
+      tenantId: payload.tenantId,
+      organizationId: payload.organizationId ?? null,
+    })
+  } catch (err) {
+    console.error('[catalog:low-stock-notification] Failed to create notification:', err)
+  }
+}

package/src/modules/configs/cli.ts

@@ -2,6 +2,7 @@ import type { ModuleCli } from '@open-mercato/shared/modules/registry'
 import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
 import type { ModuleConfigService } from './lib/module-config-service'
 import { parseBooleanToken } from '@open-mercato/shared/lib/boolean'
+import { DEFAULT_NOTIFICATION_DELIVERY_CONFIG, NOTIFICATIONS_DELIVERY_CONFIG_KEY } from '../notifications/lib/deliveryConfig'
 
 function envDisablesAutoIndexing(): boolean {
   const raw = process.env.DISABLE_VECTOR_SEARCH_AUTOINDEXING
@@ -31,6 +32,11 @@ const restoreDefaults: ModuleCli = {
             name: 'auto_index_enabled',
             value: defaultEnabled,
           },
+          {
+            moduleId: 'notifications',
+            name: NOTIFICATIONS_DELIVERY_CONFIG_KEY,
+            value: DEFAULT_NOTIFICATION_DELIVERY_CONFIG,
+          },
         ],
         { force: true },
       )

package/src/modules/configs/components/CachePanel.tsx

@@ -194,7 +194,7 @@ export function CachePanel() {
         <header className="space-y-1">
           <h2 className="text-lg font-semibold">{t('configs.cache.title', 'Cache overview')}</h2>
           <p className="text-sm text-muted-foreground">
-            {t('configs.cache.description', 'Inspect cached CRUD responses and clear segments when necessary.')}
+            {t('configs.cache.description', 'Inspect cached responses and clear segments when necessary.')}
           </p>
         </header>
         <div className="flex items-center gap-2 text-sm text-muted-foreground">
@@ -211,7 +211,7 @@ export function CachePanel() {
         <header className="space-y-1">
           <h2 className="text-lg font-semibold">{t('configs.cache.title', 'Cache overview')}</h2>
           <p className="text-sm text-muted-foreground">
-            {t('configs.cache.description', 'Inspect cached CRUD responses and clear segments when necessary.')}
+            {t('configs.cache.description', 'Inspect cached responses and clear segments when necessary.')}
           </p>
         </header>
         <div className="rounded border border-red-200 bg-red-50 p-3 text-sm text-red-700">
@@ -235,7 +235,7 @@ export function CachePanel() {
         <div className="space-y-1">
           <h2 className="text-lg font-semibold">{t('configs.cache.title', 'Cache overview')}</h2>
           <p className="text-sm text-muted-foreground">
-            {t('configs.cache.description', 'Inspect cached CRUD responses and clear segments when necessary.')}
+            {t('configs.cache.description', 'Inspect cached responses and clear segments when necessary.')}
           </p>
           {stats ? (
             <>
@@ -342,7 +342,7 @@ export function CachePanel() {
           </div>
         ) : (
           <p className="text-sm text-muted-foreground">
-            {t('configs.cache.empty', 'No cached CRUD responses for this tenant.')}
+            {t('configs.cache.empty', 'No cached responses for this tenant.')}
           </p>
         )}
       </div>

package/src/modules/configs/i18n/en.json

@@ -35,14 +35,14 @@
   "configs.systemStatus.actions.purgeCacheUnavailable": "Cache service is unavailable.",
   "configs.config.nav.cache": "Cache",
   "configs.cache.title": "Cache overview",
-  "configs.cache.description": "Inspect cached CRUD responses and clear segments when necessary.",
+  "configs.cache.description": "Inspect cached responses and clear segments when necessary.",
   "configs.cache.loading": "Loading cache statistics…",
   "configs.cache.loadError": "Failed to load cache statistics.",
   "configs.cache.retry": "Retry",
   "configs.cache.refresh": "Refresh",
   "configs.cache.generatedAt": "Stats generated {{timestamp}}",
   "configs.cache.totalEntries": "{{count}} cached entries",
-  "configs.cache.empty": "No cached CRUD responses for this tenant.",
+  "configs.cache.empty": "No cached responses for this tenant.",
   "configs.cache.purgeAll": "Purge all cache",
   "configs.cache.purgeAllLoading": "Purging…",
   "configs.cache.purgeAllConfirm": "Purge all cached entries for this tenant?",
@@ -64,6 +64,8 @@
   "configs.systemStatus.categories.profilingDescription": "Flags that control request and query profiling outputs.",
   "configs.systemStatus.categories.logging": "Logging",
   "configs.systemStatus.categories.loggingDescription": "Tune verbosity and SQL logging for diagnostics.",
+  "configs.systemStatus.categories.security": "Security",
+  "configs.systemStatus.categories.securityDescription": "Password policy requirements enforced at login and user creation.",
   "configs.systemStatus.categories.caching": "Caching",
   "configs.systemStatus.categories.cachingDescription": "Cache providers and TTL controls for backend responses.",
   "configs.systemStatus.categories.queryIndex": "Query index",
@@ -84,6 +86,14 @@
   "configs.systemStatus.variables.logVerbosity.description": "Overrides structured log verbosity such as debug or trace.",
   "configs.systemStatus.variables.logLevel.label": "Log level",
   "configs.systemStatus.variables.logLevel.description": "Fallback log level applied when verbosity is not set.",
+  "configs.systemStatus.variables.passwordMinLength.label": "Password min length",
+  "configs.systemStatus.variables.passwordMinLength.description": "Minimum number of characters required for passwords.",
+  "configs.systemStatus.variables.passwordRequireDigit.label": "Password requires digit",
+  "configs.systemStatus.variables.passwordRequireDigit.description": "Require at least one numeric character.",
+  "configs.systemStatus.variables.passwordRequireUppercase.label": "Password requires uppercase",
+  "configs.systemStatus.variables.passwordRequireUppercase.description": "Require at least one uppercase letter.",
+  "configs.systemStatus.variables.passwordRequireSpecial.label": "Password requires special",
+  "configs.systemStatus.variables.passwordRequireSpecial.description": "Require at least one special character.",
   "configs.systemStatus.variables.enableCrudApiCache.label": "CRUD API cache",
   "configs.systemStatus.variables.enableCrudApiCache.description": "Enable the CRUD API response cache layer.",
   "configs.systemStatus.variables.cacheStrategy.label": "Cache strategy",

package/src/modules/configs/i18n/pl.json

@@ -35,14 +35,14 @@
   "configs.systemStatus.actions.purgeCacheUnavailable": "Usługa pamięci podręcznej jest niedostępna.",
   "configs.config.nav.cache": "Pamięć podręczna",
   "configs.cache.title": "Podgląd pamięci podręcznej",
-  "configs.cache.description": "Przeglądaj zapisane odpowiedzi CRUD i czyść segmenty w razie potrzeby.",
+  "configs.cache.description": "Przeglądaj zapisane odpowiedzi i czyść segmenty w razie potrzeby.",
   "configs.cache.loading": "Ładowanie statystyk pamięci podręcznej…",
   "configs.cache.loadError": "Nie udało się wczytać statystyk pamięci podręcznej.",
   "configs.cache.retry": "Spróbuj ponownie",
   "configs.cache.refresh": "Odśwież",
   "configs.cache.generatedAt": "Statystyki z {{timestamp}}",
   "configs.cache.totalEntries": "{{count}} wpisów w pamięci podręcznej",
-  "configs.cache.empty": "Brak zapisanych odpowiedzi CRUD dla tego tenanta.",
+  "configs.cache.empty": "Brak zapisanych odpowiedzi dla tego tenanta.",
   "configs.cache.purgeAll": "Wyczyść całą pamięć",
   "configs.cache.purgeAllLoading": "Czyszczenie…",
   "configs.cache.purgeAllConfirm": "Wyczyścić wszystkie wpisy pamięci podręcznej dla tego tenanta?",
@@ -64,6 +64,8 @@
   "configs.systemStatus.categories.profilingDescription": "Flagi sterujące generowaniem danych z profilowania zapytań i żądań.",
   "configs.systemStatus.categories.logging": "Logowanie",
   "configs.systemStatus.categories.loggingDescription": "Dostosuj poziom logowania i zapisywanie zapytań SQL na potrzeby diagnostyki.",
+  "configs.systemStatus.categories.security": "Bezpieczeństwo",
+  "configs.systemStatus.categories.securityDescription": "Wymagania polityki haseł stosowane przy logowaniu i tworzeniu użytkowników.",
   "configs.systemStatus.categories.caching": "Buforowanie",
   "configs.systemStatus.categories.cachingDescription": "Mechanizmy cache oraz kontrola czasu życia odpowiedzi backendu.",
   "configs.systemStatus.categories.queryIndex": "Indeks zapytań",
@@ -84,6 +86,14 @@
   "configs.systemStatus.variables.logVerbosity.description": "Nadpisuje poziom szczegółowości logów, np. debug lub trace.",
   "configs.systemStatus.variables.logLevel.label": "Poziom logowania",
   "configs.systemStatus.variables.logLevel.description": "Domyślny poziom logowania używany, gdy nie ustawiono szczegółowości.",
+  "configs.systemStatus.variables.passwordMinLength.label": "Minimalna długość hasła",
+  "configs.systemStatus.variables.passwordMinLength.description": "Minimalna liczba znaków wymagana w haśle.",
+  "configs.systemStatus.variables.passwordRequireDigit.label": "Hasło wymaga cyfry",
+  "configs.systemStatus.variables.passwordRequireDigit.description": "Wymagaj co najmniej jednej cyfry.",
+  "configs.systemStatus.variables.passwordRequireUppercase.label": "Hasło wymaga wielkiej litery",
+  "configs.systemStatus.variables.passwordRequireUppercase.description": "Wymagaj co najmniej jednej wielkiej litery.",
+  "configs.systemStatus.variables.passwordRequireSpecial.label": "Hasło wymaga znaku specjalnego",
+  "configs.systemStatus.variables.passwordRequireSpecial.description": "Wymagaj co najmniej jednego znaku specjalnego.",
   "configs.systemStatus.variables.enableCrudApiCache.label": "Cache API CRUD",
   "configs.systemStatus.variables.enableCrudApiCache.description": "Włącza warstwę buforowania odpowiedzi API CRUD.",
   "configs.systemStatus.variables.cacheStrategy.label": "Strategia cache",

package/src/modules/configs/lib/system-status.ts

@@ -19,7 +19,14 @@ type SystemStatusVariableDefinition = {
   defaultValue: string | null
 }
 
-const CATEGORY_ORDER: SystemStatusCategoryKey[] = ['profiling', 'logging', 'caching', 'query_index', 'entities']
+const CATEGORY_ORDER: SystemStatusCategoryKey[] = [
+  'profiling',
+  'logging',
+  'security',
+  'caching',
+  'query_index',
+  'entities',
+]
 
 const CATEGORY_METADATA: Record<
   SystemStatusCategoryKey,
@@ -33,6 +40,10 @@ const CATEGORY_METADATA: Record<
     labelKey: 'configs.systemStatus.categories.logging',
     descriptionKey: 'configs.systemStatus.categories.loggingDescription',
   },
+  security: {
+    labelKey: 'configs.systemStatus.categories.security',
+    descriptionKey: 'configs.systemStatus.categories.securityDescription',
+  },
   caching: {
     labelKey: 'configs.systemStatus.categories.caching',
     descriptionKey: 'configs.systemStatus.categories.cachingDescription',
@@ -113,6 +124,42 @@ export const SYSTEM_STATUS_VARIABLES: SystemStatusVariableDefinition[] = [
     docUrl: `${SYSTEM_STATUS_DOC_BASE}#log_level`,
     defaultValue: '',
   },
+  {
+    key: 'OM_PASSWORD_MIN_LENGTH',
+    category: 'security',
+    kind: 'string',
+    labelKey: 'configs.systemStatus.variables.passwordMinLength.label',
+    descriptionKey: 'configs.systemStatus.variables.passwordMinLength.description',
+    docUrl: `${SYSTEM_STATUS_DOC_BASE}#om_password_min_length`,
+    defaultValue: '6',
+  },
+  {
+    key: 'OM_PASSWORD_REQUIRE_DIGIT',
+    category: 'security',
+    kind: 'boolean',
+    labelKey: 'configs.systemStatus.variables.passwordRequireDigit.label',
+    descriptionKey: 'configs.systemStatus.variables.passwordRequireDigit.description',
+    docUrl: `${SYSTEM_STATUS_DOC_BASE}#om_password_require_digit`,
+    defaultValue: 'true',
+  },
+  {
+    key: 'OM_PASSWORD_REQUIRE_UPPERCASE',
+    category: 'security',
+    kind: 'boolean',
+    labelKey: 'configs.systemStatus.variables.passwordRequireUppercase.label',
+    descriptionKey: 'configs.systemStatus.variables.passwordRequireUppercase.description',
+    docUrl: `${SYSTEM_STATUS_DOC_BASE}#om_password_require_uppercase`,
+    defaultValue: 'true',
+  },
+  {
+    key: 'OM_PASSWORD_REQUIRE_SPECIAL',
+    category: 'security',
+    kind: 'boolean',
+    labelKey: 'configs.systemStatus.variables.passwordRequireSpecial.label',
+    descriptionKey: 'configs.systemStatus.variables.passwordRequireSpecial.description',
+    docUrl: `${SYSTEM_STATUS_DOC_BASE}#om_password_require_special`,
+    defaultValue: 'true',
+  },
   {
     key: 'ENABLE_CRUD_API_CACHE',
     category: 'caching',

package/src/modules/configs/lib/system-status.types.ts

@@ -1,6 +1,7 @@
 export type SystemStatusCategoryKey =
   | 'profiling'
   | 'logging'
+  | 'security'
   | 'caching'
   | 'query_index'
   | 'entities'