@open-mercato/core 0.4.2-canary-ed15f2e753 → 0.4.2-canary-e2aeb1a7bf

package/src/modules/configs/lib/upgrade-actions.ts

@@ -1,97 +1,10 @@
-import { runWithCacheTenant } from '@open-mercato/cache'
-import type { EntityManager } from '@mikro-orm/postgresql'
 import type { AwilixContainer } from 'awilix'
-import { Role, RoleAcl } from '@open-mercato/core/modules/auth/data/entities'
-import type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'
-import { reindexModules } from '@open-mercato/core/modules/configs/lib/reindex-helpers'
-import { installExampleCatalogData, type CatalogSeedScope } from '@open-mercato/core/modules/catalog/lib/seeds'
-import { seedSalesExamples } from '@open-mercato/core/modules/sales/seed/examples'
-import { seedExampleCurrencies } from '@open-mercato/core/modules/currencies/lib/seeds'
-import { seedExampleWorkflows } from '@open-mercato/core/modules/workflows/lib/seeds'
-import { seedPlannerAvailabilityRuleSetDefaults, seedPlannerUnavailabilityReasons } from '@open-mercato/core/modules/planner/lib/seeds'
-import { seedResourcesAddressTypes, seedResourcesCapacityUnits, seedResourcesResourceExamples } from '@open-mercato/core/modules/resources/lib/seeds'
-import { seedStaffTeamExamples } from '@open-mercato/core/modules/staff/lib/seeds'
-import { collectCrudCacheStats, purgeCrudCacheSegment } from '@open-mercato/shared/lib/crud/cache-stats'
-import { isCrudCacheEnabled, resolveCrudCache } from '@open-mercato/shared/lib/crud/cache'
+import type { EntityManager } from '@mikro-orm/postgresql'
 import * as semver from 'semver'
-import type { VectorIndexService } from '@open-mercato/search/vector'
-import { EncryptionMap } from '@open-mercato/core/modules/entities/data/entities'
-import { DEFAULT_ENCRYPTION_MAPS } from '@open-mercato/core/modules/entities/lib/encryptionDefaults'
-import type { TenantDataEncryptionService } from '@open-mercato/shared/lib/encryption/tenantDataEncryptionService'
-
-function resolveVectorService(container: AwilixContainer): VectorIndexService | null {
-  try {
-    return container.resolve<VectorIndexService>('vectorIndexService')
-  } catch {
-    return null
-  }
-}
-
-function resolveEncryptionService(container: AwilixContainer): TenantDataEncryptionService | null {
-  try {
-    return container.resolve<TenantDataEncryptionService>('tenantEncryptionService')
-  } catch {
-    return null
-  }
-}
-
-async function ensureVectorSearchEncryptionMap(
-  em: EntityManager,
-  tenantId: string,
-  organizationId: string | null,
-): Promise<boolean> {
-  const spec = DEFAULT_ENCRYPTION_MAPS.find((entry) => entry.entityId === 'vector:vector_search')
-  const required = spec?.fields ?? []
-  if (!required.length) return false
-
-  const repo = em.getRepository(EncryptionMap)
-  const existing = await repo.findOne({
-    entityId: 'vector:vector_search',
-    tenantId,
-    organizationId,
-    deletedAt: null,
-  })
 
-  if (!existing) {
-    em.persist(
-      em.create(EncryptionMap, {
-        entityId: 'vector:vector_search',
-        tenantId,
-        organizationId,
-        fieldsJson: required,
-        isActive: true,
-        createdAt: new Date(),
-        updatedAt: new Date(),
-      }),
-    )
-    await em.flush()
-    return true
-  }
-
-  const existingFields = Array.isArray(existing.fieldsJson) ? existing.fieldsJson : []
-  const byField = new Map<string, { field: string; hashField?: string | null }>()
-  for (const item of existingFields) {
-    if (!item?.field) continue
-    byField.set(item.field, item)
-  }
-  for (const req of required) {
-    if (!req?.field) continue
-    if (byField.has(req.field)) continue
-    byField.set(req.field, req)
-  }
-
-  const merged = Array.from(byField.values())
-  const changed = merged.length !== existingFields.length
-  if (!changed && existing.isActive) return false
-
-  existing.fieldsJson = merged
-  existing.isActive = true
-  existing.updatedAt = new Date()
-  await em.flush()
-  return true
-}
-
-export type UpgradeActionContext = CatalogSeedScope & {
+export type UpgradeActionContext = {
+  tenantId: string
+  organizationId: string
   container: AwilixContainer
   em: EntityManager
 }
@@ -124,253 +37,7 @@ export function compareVersions(a: string, b: string): number {
   return semver.compare(cleanA, cleanB)
 }
 
-async function purgeCatalogCrudCache(container: AwilixContainer, tenantId: string | null) {
-  if (!isCrudCacheEnabled()) return
-  const cache = resolveCrudCache(container)
-  if (!cache) return
-  await runWithCacheTenant(tenantId ?? null, async () => {
-    const stats = await collectCrudCacheStats(cache)
-    const catalogSegments = stats.segments.filter((segment) => segment.resource?.startsWith('catalog.'))
-    if (!catalogSegments.length) return
-    for (const segment of catalogSegments) {
-      try {
-        await purgeCrudCacheSegment(cache, segment.segment)
-      } catch (error) {
-        console.warn('[upgrade-actions] failed to purge catalog cache segment', {
-          tenantId,
-          segment: segment.segment,
-          error,
-        })
-      }
-    }
-  })
-}
-
-export const upgradeActions: UpgradeActionDefinition[] = [
-  {
-    id: 'configs.upgrades.catalog.examples',
-    version: '0.3.4',
-    messageKey: 'upgrades.v034.message',
-    ctaKey: 'upgrades.v034.cta',
-    successKey: 'upgrades.v034.success',
-    loadingKey: 'upgrades.v034.loading',
-    async run({ container, em, tenantId, organizationId }) {
-      await installExampleCatalogData(container, { tenantId, organizationId }, em)
-      const vectorService = resolveVectorService(container)
-      await reindexModules(em, ['catalog'], { tenantId, organizationId, vectorService })
-    },
-  },
-  {
-    id: 'configs.upgrades.auth.admin_business_rules_acl',
-    version: '0.3.5',
-    messageKey: 'upgrades.v035.message',
-    ctaKey: 'upgrades.v035.cta',
-    successKey: 'upgrades.v035.success',
-    loadingKey: 'upgrades.v035.loading',
-    async run({ container, em, tenantId }) {
-      const normalizedTenantId = tenantId.trim()
-      await em.transactional(async (tem) => {
-        const adminRole = await tem.findOne(Role, { name: 'admin', tenantId: normalizedTenantId, deletedAt: null })
-        if (!adminRole) return
-
-        const roleAcls = await tem.find(RoleAcl, { role: adminRole, tenantId: normalizedTenantId, deletedAt: null })
-        let touched = false
-        if (!roleAcls.length) {
-          tem.persist(
-            tem.create(RoleAcl, {
-              role: adminRole,
-              tenantId: normalizedTenantId,
-              featuresJson: ['business_rules.*'],
-              isSuperAdmin: false,
-              createdAt: new Date(),
-              updatedAt: new Date(),
-            }),
-          )
-          touched = true
-        }
-
-        for (const acl of roleAcls) {
-          const features = Array.isArray(acl.featuresJson) ? [...acl.featuresJson] : []
-          if (features.includes('business_rules.*')) continue
-          acl.featuresJson = [...features, 'business_rules.*']
-          acl.updatedAt = new Date()
-          touched = true
-        }
-
-        if (touched) {
-          await tem.flush()
-        }
-      })
-
-      const rbac = container.resolve<RbacService>('rbacService')
-      await rbac.invalidateTenantCache(normalizedTenantId)
-    },
-  },
-  {
-    id: 'configs.upgrades.sales.examples',
-    version: '0.3.6',
-    messageKey: 'upgrades.v036.message',
-    ctaKey: 'upgrades.v036.cta',
-    successKey: 'upgrades.v036.success',
-    loadingKey: 'upgrades.v036.loading',
-    async run({ container, em, tenantId, organizationId }) {
-      await em.transactional(async (tem) => {
-        await seedSalesExamples(tem, container, { tenantId, organizationId })
-      })
-      const vectorService = resolveVectorService(container)
-      await reindexModules(em, ['sales', 'catalog'], { tenantId, organizationId, vectorService })
-      await purgeCatalogCrudCache(container, tenantId)
-    },
-  },
-  {
-    id: 'configs.upgrades.vector.encryption_vector_search',
-    version: '0.3.6',
-    messageKey: 'upgrades.v036_vector_encryption.message',
-    ctaKey: 'upgrades.v036_vector_encryption.cta',
-    successKey: 'upgrades.v036_vector_encryption.success',
-    loadingKey: 'upgrades.v036_vector_encryption.loading',
-    async run({ container, em, tenantId, organizationId }) {
-      const normalizedTenantId = tenantId.trim()
-      const normalizedOrgId = organizationId ?? null
-
-      const encryptionService = resolveEncryptionService(container)
-      if (!encryptionService?.isEnabled?.()) {
-        return
-      }
-
-      const updated = await em.transactional(async (tem) => {
-        return ensureVectorSearchEncryptionMap(tem, normalizedTenantId, normalizedOrgId)
-      })
-
-      if (updated) {
-        await encryptionService.invalidateMap('vector:vector_search', normalizedTenantId, normalizedOrgId)
-      }
-
-      const vectorService = resolveVectorService(container)
-      if (vectorService) {
-        await vectorService.reindexAll({ tenantId: normalizedTenantId, organizationId: normalizedOrgId, purgeFirst: false })
-      }
-    },
-  },
-  {
-    id: 'configs.upgrades.examples.currencies_workflows',
-    version: '0.3.13',
-    messageKey: 'upgrades.v0313.message',
-    ctaKey: 'upgrades.v0313.cta',
-    successKey: 'upgrades.v0313.success',
-    loadingKey: 'upgrades.v0313.loading',
-    async run({ container, em, tenantId, organizationId }) {
-      const normalizedTenantId = tenantId.trim()
-      const scope = { tenantId, organizationId }
-      await em.transactional(async (tem) => {
-        await seedExampleCurrencies(tem, scope)
-        await seedExampleWorkflows(tem, scope)
-
-        const adminRole = await tem.findOne(Role, { name: 'admin', tenantId: normalizedTenantId, deletedAt: null })
-        if (!adminRole) return
-
-        const roleAcls = await tem.find(RoleAcl, { role: adminRole, tenantId: normalizedTenantId, deletedAt: null })
-        let touched = false
-        if (!roleAcls.length) {
-          tem.persist(
-            tem.create(RoleAcl, {
-              role: adminRole,
-              tenantId: normalizedTenantId,
-              featuresJson: ['search.*', 'feature_toggles.*', 'currencies.*'],
-              isSuperAdmin: false,
-              createdAt: new Date(),
-              updatedAt: new Date(),
-            }),
-          )
-          touched = true
-        }
-
-        for (const acl of roleAcls) {
-          const features = Array.isArray(acl.featuresJson) ? [...acl.featuresJson] : []
-          const nextFeatures = new Set(features)
-          nextFeatures.add('search.*')
-          nextFeatures.add('feature_toggles.*')
-          nextFeatures.add('currencies.*')
-          if (nextFeatures.size === features.length) continue
-          acl.featuresJson = Array.from(nextFeatures)
-          acl.updatedAt = new Date()
-          touched = true
-        }
-
-        if (touched) {
-          await tem.flush()
-        }
-      })
-      const rbac = container.resolve<RbacService>('rbacService')
-      await rbac.invalidateTenantCache(normalizedTenantId)
-    },
-  },
-  {
-    id: 'configs.upgrades.examples.planner_staff_resources',
-    version: '0.4.1',
-    messageKey: 'upgrades.v041.message',
-    ctaKey: 'upgrades.v041.cta',
-    successKey: 'upgrades.v041.success',
-    loadingKey: 'upgrades.v041.loading',
-    async run({ container, em, tenantId, organizationId }) {
-      const normalizedTenantId = tenantId.trim()
-      const scope = { tenantId, organizationId }
-      await em.transactional(async (tem) => {
-        await seedPlannerAvailabilityRuleSetDefaults(tem, scope)
-        await seedPlannerUnavailabilityReasons(tem, scope)
-        await seedStaffTeamExamples(tem, scope)
-        await seedResourcesCapacityUnits(tem, scope)
-        await seedResourcesAddressTypes(tem, scope)
-        await seedResourcesResourceExamples(tem, scope)
-
-        const adminRole = await tem.findOne(Role, { name: 'admin', tenantId: normalizedTenantId, deletedAt: null })
-        if (!adminRole) return
-
-        const roleAcls = await tem.find(RoleAcl, { role: adminRole, tenantId: normalizedTenantId, deletedAt: null })
-        const addedFeatures = [
-          'staff.*',
-          'staff.leave_requests.manage',
-          'resources.*',
-          'planner.*',
-        ]
-        let touched = false
-        if (!roleAcls.length) {
-          tem.persist(
-            tem.create(RoleAcl, {
-              role: adminRole,
-              tenantId: normalizedTenantId,
-              featuresJson: addedFeatures,
-              isSuperAdmin: false,
-              createdAt: new Date(),
-              updatedAt: new Date(),
-            }),
-          )
-          touched = true
-        }
-
-        for (const acl of roleAcls) {
-          const features = Array.isArray(acl.featuresJson) ? [...acl.featuresJson] : []
-          const nextFeatures = new Set(features)
-          for (const feature of addedFeatures) nextFeatures.add(feature)
-          if (nextFeatures.size === features.length) continue
-          acl.featuresJson = Array.from(nextFeatures)
-          acl.updatedAt = new Date()
-          touched = true
-        }
-
-        if (touched) {
-          await tem.flush()
-        }
-      })
-
-      const rbac = container.resolve<RbacService>('rbacService')
-      await rbac.invalidateTenantCache(normalizedTenantId)
-
-      const vectorService = resolveVectorService(container)
-      await reindexModules(em, ['planner', 'staff', 'resources'], { tenantId, organizationId, vectorService })
-    },
-  },
-]
+export const upgradeActions: UpgradeActionDefinition[] = []
 
 export function actionsUpToVersion(version: string): UpgradeActionDefinition[] {
   return upgradeActions

package/src/modules/configs/setup.ts

@@ -0,0 +1,14 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+
+export const setup: ModuleSetupConfig = {
+  defaultRoleFeatures: {
+    admin: [
+      'configs.system_status.view',
+      'configs.cache.view',
+      'configs.cache.manage',
+      'configs.manage',
+    ],
+  },
+}
+
+export default setup

package/src/modules/currencies/backend/currencies/page.tsx

@@ -256,12 +256,14 @@ export default function CurrenciesPage() {
             <RowActions
               items={[
                 {
+                  id: 'edit',
                   label: t('common.edit'),
                   href: `/backend/currencies/${row.id}`,
                 },
                 ...(!row.isBase
                   ? [
                       {
+                        id: 'set-base',
                         label: t('currencies.list.actions.setBase'),
                         onSelect: () => handleSetBase(row),
                       },
@@ -270,6 +272,7 @@ export default function CurrenciesPage() {
                 ...(!row.isBase
                   ? [
                       {
+                        id: 'delete',
                         label: t('common.delete'),
                         destructive: true,
                         onSelect: () => handleDelete(row),

package/src/modules/currencies/backend/exchange-rates/page.tsx

@@ -279,10 +279,12 @@ export default function ExchangeRatesPage() {
             <RowActions
               items={[
                 {
+                  id: 'edit',
                   label: t('common.edit'),
                   href: `/backend/exchange-rates/${row.id}`,
                 },
                 {
+                  id: 'delete',
                   label: t('common.delete'),
                   destructive: true,
                   onSelect: () => handleDelete(row),

package/src/modules/currencies/setup.ts

@@ -0,0 +1,15 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+import { seedExampleCurrencies } from './lib/seeds'
+
+export const setup: ModuleSetupConfig = {
+  seedDefaults: async (ctx) => {
+    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+    await seedExampleCurrencies(ctx.em, scope)
+  },
+
+  defaultRoleFeatures: {
+    admin: ['currencies.*'],
+  },
+}
+
+export default setup

package/src/modules/customers/backend/customers/companies/page.tsx

@@ -597,14 +597,17 @@ export default function CustomersCompaniesPage() {
             <RowActions
               items={[
                 {
+                  id: 'view',
                   label: t('customers.companies.list.actions.view'),
                   onSelect: () => { router.push(`/backend/customers/companies/${row.id}`) },
                 },
                 {
+                  id: 'open-new-tab',
                   label: t('customers.companies.list.actions.openInNewTab'),
                   onSelect: () => window.open(`/backend/customers/companies/${row.id}`, '_blank', 'noopener'),
                 },
                 {
+                  id: 'delete',
                   label: t('customers.companies.list.actions.delete'),
                   destructive: true,
                   onSelect: () => handleDelete(row),

package/src/modules/customers/backend/customers/deals/page.tsx

@@ -889,10 +889,12 @@ export default function CustomersDealsPage() {
               <RowActions
                 items={[
                   {
+                    id: 'edit',
                     label: t('customers.deals.list.actions.edit', 'Edit'),
                     onSelect: () => { router.push(`/backend/customers/deals/${row.id}`) },
                   },
                   {
+                    id: 'open-new-tab',
                     label: t('customers.deals.list.actions.openInNewTab', 'Open in new tab'),
                     onSelect: () => {
                       if (typeof window !== 'undefined') {
@@ -901,6 +903,7 @@ export default function CustomersDealsPage() {
                     },
                   },
                   {
+                    id: 'delete',
                     label: isDeleting
                       ? t('customers.deals.list.actions.deleting', 'Deleting…')
                       : t('customers.deals.list.actions.delete', 'Delete'),

package/src/modules/customers/backend/customers/people/page.tsx

@@ -614,14 +614,17 @@ export default function CustomersPeoplePage() {
             <RowActions
               items={[
                 {
+                  id: 'view',
                   label: t('customers.people.list.actions.view'),
                   onSelect: () => { router.push(`/backend/customers/people/${row.id}`) },
                 },
                 {
+                  id: 'open-new-tab',
                   label: t('customers.people.list.actions.openInNewTab'),
                   onSelect: () => window.open(`/backend/customers/people/${row.id}`, '_blank', 'noopener'),
                 },
                 {
+                  id: 'delete',
                   label: t('customers.people.list.actions.delete'),
                   destructive: true,
                   onSelect: () => handleDelete(row),

package/src/modules/customers/commands/deals.ts

@@ -35,6 +35,9 @@ import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'
 import type { CrudIndexerConfig } from '@open-mercato/shared/lib/crud/types'
 import { E } from '#generated/entities.ids.generated'
 import { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'
+import { resolveNotificationService } from '../../notifications/lib/notificationService'
+import { buildNotificationFromType } from '../../notifications/lib/notificationBuilder'
+import { notificationTypes } from '../notifications'
 
 const DEAL_ENTITY_ID = 'customers:customer_deal'
 const dealCrudIndexer: CrudIndexerConfig<CustomerDeal> = {
@@ -281,6 +284,8 @@ const updateDealCommand: CommandHandler<DealUpdateInput, { dealId: string }> = {
     ensureTenantScope(ctx, record.tenantId)
     ensureOrganizationScope(ctx, record.organizationId)
 
+    const previousStatus = record.status
+
     if (parsed.title !== undefined) record.title = parsed.title
     if (parsed.description !== undefined) record.description = parsed.description ?? null
     if (parsed.status !== undefined) record.status = parsed.status ?? record.status
@@ -319,6 +324,40 @@ const updateDealCommand: CommandHandler<DealUpdateInput, { dealId: string }> = {
       indexer: dealCrudIndexer,
     })
 
+    // Send notifications for deal won/lost status changes
+    const newStatus = record.status
+    const normalizedStatus = newStatus === 'win' ? 'won' : newStatus === 'loose' ? 'lost' : newStatus
+    if (previousStatus !== newStatus && (normalizedStatus === 'won' || normalizedStatus === 'lost') && record.ownerUserId) {
+      try {
+        const notificationService = resolveNotificationService(ctx.container)
+        const notificationType = normalizedStatus === 'won' ? 'customers.deal.won' : 'customers.deal.lost'
+        const typeDef = notificationTypes.find((type) => type.type === notificationType)
+        if (typeDef) {
+          const valueDisplay = record.valueAmount && record.valueCurrency
+            ? `${record.valueCurrency} ${record.valueAmount}`
+            : ''
+
+          const notificationInput = buildNotificationFromType(typeDef, {
+            recipientUserId: record.ownerUserId,
+            bodyVariables: {
+              dealTitle: record.title,
+              dealValue: valueDisplay,
+            },
+            sourceEntityType: 'customers:customer_deal',
+            sourceEntityId: record.id,
+            linkHref: `/backend/customers/deals/${record.id}`,
+          })
+
+          await notificationService.create(notificationInput, {
+            tenantId: record.tenantId,
+            organizationId: record.organizationId,
+          })
+        }
+      } catch {
+        // Notification creation is non-critical, don't fail the command
+      }
+    }
+
     return { dealId: record.id }
   },
   buildLog: async ({ snapshots, ctx }) => {

package/src/modules/customers/components/CustomerTodosTable.tsx

@@ -253,6 +253,7 @@ export function CustomerTodosTable(): React.JSX.Element {
           <RowActions
             items={[
               {
+                id: 'open-customer',
                 label: t('customers.workPlan.customerTodos.table.actions.openCustomer'),
                 href: customerLink,
               },

package/src/modules/customers/i18n/en.json

@@ -943,5 +943,9 @@
   "customers.workPlan.customerTodos.table.state.empty": "No customer tasks yet.",
   "customers.workPlan.customerTodos.table.error.load": "Failed to load customer tasks.",
   "customers.workPlan.customerTodos.table.export.view": "Exports the current list with filters and visible columns.",
-  "customers.workPlan.customerTodos.table.export.full": "Exports every linked task field, including hidden attributes."
+  "customers.workPlan.customerTodos.table.export.full": "Exports every linked task field, including hidden attributes.",
+  "customers.notifications.deal.won.title": "Deal Won",
+  "customers.notifications.deal.won.body": "{dealTitle} has been marked as won{dealValue, select, other { ({dealValue})}}",
+  "customers.notifications.deal.lost.title": "Deal Lost",
+  "customers.notifications.deal.lost.body": "{dealTitle} has been marked as lost"
 }

package/src/modules/customers/notifications.ts

@@ -0,0 +1,44 @@
+import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'
+
+export const notificationTypes: NotificationTypeDefinition[] = [
+  {
+    type: 'customers.deal.won',
+    module: 'customers',
+    titleKey: 'customers.notifications.deal.won.title',
+    bodyKey: 'customers.notifications.deal.won.body',
+    icon: 'trophy',
+    severity: 'success',
+    actions: [
+      {
+        id: 'view',
+        labelKey: 'common.view',
+        variant: 'outline',
+        href: '/backend/customers/deals/{sourceEntityId}',
+        icon: 'external-link',
+      },
+    ],
+    linkHref: '/backend/customers/deals/{sourceEntityId}',
+    expiresAfterHours: 168, // 7 days
+  },
+  {
+    type: 'customers.deal.lost',
+    module: 'customers',
+    titleKey: 'customers.notifications.deal.lost.title',
+    bodyKey: 'customers.notifications.deal.lost.body',
+    icon: 'x-circle',
+    severity: 'warning',
+    actions: [
+      {
+        id: 'view',
+        labelKey: 'common.view',
+        variant: 'outline',
+        href: '/backend/customers/deals/{sourceEntityId}',
+        icon: 'external-link',
+      },
+    ],
+    linkHref: '/backend/customers/deals/{sourceEntityId}',
+    expiresAfterHours: 168, // 7 days
+  },
+]
+
+export default notificationTypes

package/src/modules/customers/setup.ts

@@ -0,0 +1,36 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+import { seedCustomerDictionaries, seedCurrencyDictionary, seedCustomerExamples } from './cli'
+
+export const setup: ModuleSetupConfig = {
+  seedDefaults: async (ctx) => {
+    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+    await seedCustomerDictionaries(ctx.em, scope)
+    await seedCurrencyDictionary(ctx.em, scope)
+  },
+
+  seedExamples: async (ctx) => {
+    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+    await seedCustomerExamples(ctx.em, ctx.container, scope)
+  },
+
+  defaultRoleFeatures: {
+    admin: [
+      'customers.*',
+      'customers.people.view',
+      'customers.people.manage',
+      'customers.companies.view',
+      'customers.companies.manage',
+      'customers.deals.view',
+      'customers.deals.manage',
+    ],
+    employee: [
+      'customers.*',
+      'customers.people.view',
+      'customers.people.manage',
+      'customers.companies.view',
+      'customers.companies.manage',
+    ],
+  },
+}
+
+export default setup

package/src/modules/customers/widgets/dashboard/customer-todos/widget.ts

@@ -1,6 +1,6 @@
-import type { DashboardWidgetModule } from '@open-mercato/shared/modules/dashboard/widgets'
-import CustomerTodosWidget from './widget.client'
+import { lazyDashboardWidget, type DashboardWidgetModule } from '@open-mercato/shared/modules/dashboard/widgets'
 import { DEFAULT_SETTINGS, hydrateCustomerTodoSettings, type CustomerTodoWidgetSettings } from './config'
+const CustomerTodosWidget = lazyDashboardWidget(() => import('./widget.client'))
 
 const widget: DashboardWidgetModule<CustomerTodoWidgetSettings> = {
   metadata: {

package/src/modules/customers/widgets/dashboard/new-customers/widget.ts

@@ -1,6 +1,6 @@
-import type { DashboardWidgetModule } from '@open-mercato/shared/modules/dashboard/widgets'
-import CustomerNewCustomersWidget from './widget.client'
+import { lazyDashboardWidget, type DashboardWidgetModule } from '@open-mercato/shared/modules/dashboard/widgets'
 import { DEFAULT_SETTINGS, hydrateNewCustomersSettings, type CustomerNewCustomersSettings } from './config'
+const CustomerNewCustomersWidget = lazyDashboardWidget(() => import('./widget.client'))
 
 const widget: DashboardWidgetModule<CustomerNewCustomersSettings> = {
   metadata: {