@open-mercato/core 0.4.2-canary-f075c3eb92 → 0.4.2-canary-e2aeb1a7bf

package/src/modules/business_rules/lib/__tests__/rule-engine.test.ts

@@ -654,6 +654,57 @@ describe('Rule Engine (Unit Tests)', () => {
       expect(result.errors).toBeDefined()
       expect(result.errors![0]).toContain('Rule count limit exceeded')
     })
+
+    test('should emit execution_failed event when rule evaluation fails', async () => {
+      const mockRule: Partial<BusinessRule> = {
+        id: 'rule-1',
+        ruleId: 'TEST-001',
+        ruleName: 'Test Rule',
+        ruleType: 'ACTION',
+        entityType: 'WorkOrder',
+        conditionExpression: { field: 'status', operator: '=', value: 'RELEASED' },
+        enabled: true,
+        tenantId: testTenantId,
+        organizationId: testOrgId,
+      }
+
+      mockEm.find.mockResolvedValue([mockRule as BusinessRule])
+      mockEm.create.mockReturnValue({ id: 'log-1' } as any)
+      mockEm.persistAndFlush.mockResolvedValue(undefined)
+
+      jest.mocked(ruleEvaluator.evaluateSingleRule).mockResolvedValue({
+        rule: mockRule as BusinessRule,
+        conditionsPassed: false,
+        evaluationCompleted: false,
+        evaluationTime: 1,
+        error: 'Evaluation error',
+      })
+
+      const eventBus = { emitEvent: jest.fn().mockResolvedValue(undefined) }
+
+      const context: RuleEngineContext = {
+        entityType: 'WorkOrder',
+        entityId: testEntityId,
+        data: { status: 'RELEASED' },
+        tenantId: testTenantId,
+        organizationId: testOrgId,
+        dryRun: false,
+      }
+
+      await ruleEngine.executeRules(mockEm, context, { eventBus })
+
+      expect(eventBus.emitEvent).toHaveBeenCalledWith(
+        'business_rules.rule.execution_failed',
+        expect.objectContaining({
+          ruleId: 'TEST-001',
+          ruleName: 'Test Rule',
+          entityType: 'WorkOrder',
+          errorMessage: 'Evaluation error',
+          tenantId: testTenantId,
+          organizationId: testOrgId,
+        })
+      )
+    })
   })
 
   describe('logRuleExecution', () => {

package/src/modules/business_rules/lib/rule-engine.ts

@@ -1,4 +1,5 @@
 import type { EntityManager } from '@mikro-orm/core'
+import type { EventBus } from '@open-mercato/events'
 import { BusinessRule, RuleExecutionLog, type RuleType } from '../data/entities'
 import * as ruleEvaluator from './rule-evaluator'
 import * as actionExecutor from './action-executor'
@@ -85,6 +86,19 @@ export interface RuleDiscoveryOptions {
   ruleType?: RuleType
 }
 
+export type RuleEngineExecutionOptions = {
+  eventBus?: Pick<EventBus, 'emitEvent'> | null
+}
+
+type RuleExecutionFailedPayload = {
+  ruleId: string
+  ruleName: string
+  entityType?: string | null
+  errorMessage?: string | null
+  tenantId: string
+  organizationId?: string | null
+}
+
 /**
  * Execute a function with a timeout
  */
@@ -113,7 +127,8 @@ async function withTimeout<T>(
  */
 export async function executeRules(
   em: EntityManager,
-  context: RuleEngineContext
+  context: RuleEngineContext,
+  options: RuleEngineExecutionOptions = {}
 ): Promise<RuleEngineResult> {
   // Validate input
   const validation = ruleEngineContextSchema.safeParse(context)
@@ -159,7 +174,7 @@ export async function executeRules(
     const executionPromise = (async () => {
       for (const rule of rules) {
       try {
-        const ruleResult = await executeSingleRule(em, rule, context)
+        const ruleResult = await executeSingleRule(em, rule, context, options)
         executedRules.push(ruleResult)
 
         if (ruleResult.logId) {
@@ -177,6 +192,17 @@ export async function executeRules(
           `Unexpected error in rule execution [ruleId=${rule.ruleId}, type=${rule.ruleType}]: ${errorMessage}`
         )
 
+        if (!context.dryRun) {
+          await emitRuleExecutionFailed(options.eventBus, {
+            ruleId: rule.ruleId,
+            ruleName: rule.ruleName,
+            entityType: context.entityType ?? null,
+            errorMessage,
+            tenantId: context.tenantId,
+            organizationId: context.organizationId ?? null,
+          })
+        }
+
         executedRules.push({
           rule,
           conditionResult: false,
@@ -233,7 +259,8 @@ export async function executeRules(
 export async function executeSingleRule(
   em: EntityManager,
   rule: BusinessRule,
-  context: RuleEngineContext
+  context: RuleEngineContext,
+  options: RuleEngineExecutionOptions = {}
 ): Promise<RuleExecutionResult> {
   const startTime = Date.now()
 
@@ -269,6 +296,15 @@ export async function executeSingleRule(
             executionTime,
             error: result.error,
           })
+
+          await emitRuleExecutionFailed(options.eventBus, {
+            ruleId: rule.ruleId,
+            ruleName: rule.ruleName,
+            entityType: context.entityType ?? null,
+            errorMessage: result.error ?? null,
+            tenantId: context.tenantId,
+            organizationId: context.organizationId ?? null,
+          })
         }
 
         return {
@@ -346,6 +382,15 @@ export async function executeSingleRule(
         executionTime,
         error: enhancedError,
       })
+
+      await emitRuleExecutionFailed(options.eventBus, {
+        ruleId: rule.ruleId,
+        ruleName: rule.ruleName,
+        entityType: context.entityType ?? null,
+        errorMessage: enhancedError,
+        tenantId: context.tenantId,
+        organizationId: context.organizationId ?? null,
+      })
     }
 
     return {
@@ -544,3 +589,12 @@ export async function logRuleExecution(
 
   return log.id
 }
+
+async function emitRuleExecutionFailed(
+  eventBus: Pick<EventBus, 'emitEvent'> | null | undefined,
+  payload: RuleExecutionFailedPayload
+): Promise<void> {
+  if (!eventBus?.emitEvent) return
+
+  await eventBus.emitEvent('business_rules.rule.execution_failed', payload).catch(() => undefined)
+}

package/src/modules/business_rules/notifications.ts

@@ -0,0 +1,25 @@
+import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'
+
+export const notificationTypes: NotificationTypeDefinition[] = [
+  {
+    type: 'business_rules.rule.execution_failed',
+    module: 'business_rules',
+    titleKey: 'businessRules.notifications.rule.executionFailed.title',
+    bodyKey: 'businessRules.notifications.rule.executionFailed.body',
+    icon: 'alert-triangle',
+    severity: 'error',
+    actions: [
+      {
+        id: 'view',
+        labelKey: 'common.view',
+        variant: 'outline',
+        href: '/backend/business-rules/{sourceEntityId}',
+        icon: 'external-link',
+      },
+    ],
+    linkHref: '/backend/business-rules/{sourceEntityId}',
+    expiresAfterHours: 168, // 7 days
+  },
+]
+
+export default notificationTypes

package/src/modules/business_rules/subscribers/rule-execution-failed-notification.ts

@@ -0,0 +1,50 @@
+import type { EntityManager } from '@mikro-orm/postgresql'
+import { resolveNotificationService } from '../../notifications/lib/notificationService'
+import { buildFeatureNotificationFromType } from '../../notifications/lib/notificationBuilder'
+import { notificationTypes } from '../notifications'
+
+export const metadata = {
+  event: 'business_rules.rule.execution_failed',
+  persistent: true,
+  id: 'business_rules:rule-execution-failed-notification',
+}
+
+type RuleExecutionFailedPayload = {
+  ruleId: string
+  ruleName: string
+  entityType?: string | null
+  errorMessage?: string | null
+  tenantId: string
+  organizationId?: string | null
+}
+
+type ResolverContext = {
+  resolve: <T = unknown>(name: string) => T
+}
+
+export default async function handle(payload: RuleExecutionFailedPayload, ctx: ResolverContext) {
+  try {
+    const notificationService = resolveNotificationService(ctx)
+    const typeDef = notificationTypes.find((type) => type.type === 'business_rules.rule.execution_failed')
+    if (!typeDef) return
+
+    const notificationInput = buildFeatureNotificationFromType(typeDef, {
+      requiredFeature: 'business_rules.manage',
+      bodyVariables: {
+        ruleName: payload.ruleName,
+        entityType: payload.entityType ?? '',
+        errorMessage: payload.errorMessage ?? 'Unknown error',
+      },
+      sourceEntityType: 'business_rules:rule',
+      sourceEntityId: payload.ruleId,
+      linkHref: `/backend/business-rules/${payload.ruleId}`,
+    })
+
+    await notificationService.createForFeature(notificationInput, {
+      tenantId: payload.tenantId,
+      organizationId: payload.organizationId ?? null,
+    })
+  } catch (err) {
+    console.error('[business_rules:rule-execution-failed-notification] Failed to create notification:', err)
+  }
+}

package/src/modules/catalog/components/PriceKindSettings.tsx

@@ -420,10 +420,12 @@ export function PriceKindSettings() {
             <RowActions
               items={[
                 {
+                  id: 'edit',
                   label: t('catalog.priceKinds.actions.edit', 'Edit'),
                   onSelect: () => openDialog({ mode: 'edit', entry }),
                 },
                 {
+                  id: 'delete',
                   label: t('catalog.priceKinds.actions.delete', 'Delete'),
                   destructive: true,
                   onSelect: () => { void handleDelete(entry) },

package/src/modules/catalog/components/categories/CategoriesDataTable.tsx

@@ -221,8 +221,8 @@ export default function CategoriesDataTable() {
         canManage ? (
           <RowActions
             items={[
-              { label: t('catalog.categories.list.actions.edit', 'Edit'), href: `/backend/catalog/categories/${row.id}/edit` },
-              { label: t('catalog.categories.list.actions.delete', 'Delete'), destructive: true, onSelect: () => handleDelete(row) },
+              { id: 'edit', label: t('catalog.categories.list.actions.edit', 'Edit'), href: `/backend/catalog/categories/${row.id}/edit` },
+              { id: 'delete', label: t('catalog.categories.list.actions.delete', 'Delete'), destructive: true, onSelect: () => handleDelete(row) },
             ]}
           />
         ) : null

package/src/modules/catalog/components/products/ProductsDataTable.tsx

@@ -650,10 +650,12 @@ export default function ProductsDataTable() {
         <RowActions
           items={[
             {
+              id: 'edit',
               label: t('catalog.products.table.actions.edit', 'Edit'),
               href: `/backend/catalog/products/${row.id}`,
             },
             {
+              id: 'delete',
               label: t('catalog.products.table.actions.delete', 'Delete'),
               destructive: true,
               onSelect: () => {

package/src/modules/catalog/i18n/en.json

@@ -681,5 +681,7 @@
         "deleteError": "Failed to delete variant."
       }
     }
-  }
+  },
+  "catalog.notifications.product.lowStock.title": "Low Stock Alert",
+  "catalog.notifications.product.lowStock.body": "{productName}{sku, select, other { ({sku})}} is running low on stock ({currentStock} remaining, threshold: {threshold})"
 }

package/src/modules/catalog/notifications.ts

@@ -0,0 +1,25 @@
+import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'
+
+export const notificationTypes: NotificationTypeDefinition[] = [
+  {
+    type: 'catalog.product.low_stock',
+    module: 'catalog',
+    titleKey: 'catalog.notifications.product.lowStock.title',
+    bodyKey: 'catalog.notifications.product.lowStock.body',
+    icon: 'package-x',
+    severity: 'warning',
+    actions: [
+      {
+        id: 'view',
+        labelKey: 'common.view',
+        variant: 'outline',
+        href: '/backend/catalog/products/{sourceEntityId}',
+        icon: 'external-link',
+      },
+    ],
+    linkHref: '/backend/catalog/products/{sourceEntityId}',
+    expiresAfterHours: 72, // 3 days
+  },
+]
+
+export default notificationTypes

package/src/modules/catalog/subscribers/low-stock-notification.ts

@@ -0,0 +1,52 @@
+import type { EntityManager } from '@mikro-orm/postgresql'
+import { resolveNotificationService } from '../../notifications/lib/notificationService'
+import { buildFeatureNotificationFromType } from '../../notifications/lib/notificationBuilder'
+import { notificationTypes } from '../notifications'
+
+export const metadata = {
+  event: 'catalog.product.stock_low',
+  persistent: true,
+  id: 'catalog:low-stock-notification',
+}
+
+type LowStockPayload = {
+  productId: string
+  productName: string
+  sku?: string | null
+  currentStock: number
+  threshold: number
+  tenantId: string
+  organizationId?: string | null
+}
+
+type ResolverContext = {
+  resolve: <T = unknown>(name: string) => T
+}
+
+export default async function handle(payload: LowStockPayload, ctx: ResolverContext) {
+  try {
+    const notificationService = resolveNotificationService(ctx)
+    const typeDef = notificationTypes.find((type) => type.type === 'catalog.product.low_stock')
+    if (!typeDef) return
+
+    const notificationInput = buildFeatureNotificationFromType(typeDef, {
+      requiredFeature: 'catalog.products.manage',
+      bodyVariables: {
+        productName: payload.productName,
+        sku: payload.sku ?? '',
+        currentStock: String(payload.currentStock),
+        threshold: String(payload.threshold),
+      },
+      sourceEntityType: 'catalog:product',
+      sourceEntityId: payload.productId,
+      linkHref: `/backend/catalog/products/${payload.productId}`,
+    })
+
+    await notificationService.createForFeature(notificationInput, {
+      tenantId: payload.tenantId,
+      organizationId: payload.organizationId ?? null,
+    })
+  } catch (err) {
+    console.error('[catalog:low-stock-notification] Failed to create notification:', err)
+  }
+}

package/src/modules/configs/cli.ts

@@ -2,6 +2,7 @@ import type { ModuleCli } from '@open-mercato/shared/modules/registry'
 import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
 import type { ModuleConfigService } from './lib/module-config-service'
 import { parseBooleanToken } from '@open-mercato/shared/lib/boolean'
+import { DEFAULT_NOTIFICATION_DELIVERY_CONFIG, NOTIFICATIONS_DELIVERY_CONFIG_KEY } from '../notifications/lib/deliveryConfig'
 
 function envDisablesAutoIndexing(): boolean {
   const raw = process.env.DISABLE_VECTOR_SEARCH_AUTOINDEXING
@@ -31,6 +32,11 @@ const restoreDefaults: ModuleCli = {
             name: 'auto_index_enabled',
             value: defaultEnabled,
           },
+          {
+            moduleId: 'notifications',
+            name: NOTIFICATIONS_DELIVERY_CONFIG_KEY,
+            value: DEFAULT_NOTIFICATION_DELIVERY_CONFIG,
+          },
         ],
         { force: true },
       )

package/src/modules/configs/components/CachePanel.tsx

@@ -194,7 +194,7 @@ export function CachePanel() {
         <header className="space-y-1">
           <h2 className="text-lg font-semibold">{t('configs.cache.title', 'Cache overview')}</h2>
           <p className="text-sm text-muted-foreground">
-            {t('configs.cache.description', 'Inspect cached CRUD responses and clear segments when necessary.')}
+            {t('configs.cache.description', 'Inspect cached responses and clear segments when necessary.')}
           </p>
         </header>
         <div className="flex items-center gap-2 text-sm text-muted-foreground">
@@ -211,7 +211,7 @@ export function CachePanel() {
         <header className="space-y-1">
           <h2 className="text-lg font-semibold">{t('configs.cache.title', 'Cache overview')}</h2>
           <p className="text-sm text-muted-foreground">
-            {t('configs.cache.description', 'Inspect cached CRUD responses and clear segments when necessary.')}
+            {t('configs.cache.description', 'Inspect cached responses and clear segments when necessary.')}
           </p>
         </header>
         <div className="rounded border border-red-200 bg-red-50 p-3 text-sm text-red-700">
@@ -235,7 +235,7 @@ export function CachePanel() {
         <div className="space-y-1">
           <h2 className="text-lg font-semibold">{t('configs.cache.title', 'Cache overview')}</h2>
           <p className="text-sm text-muted-foreground">
-            {t('configs.cache.description', 'Inspect cached CRUD responses and clear segments when necessary.')}
+            {t('configs.cache.description', 'Inspect cached responses and clear segments when necessary.')}
           </p>
           {stats ? (
             <>
@@ -342,7 +342,7 @@ export function CachePanel() {
           </div>
         ) : (
           <p className="text-sm text-muted-foreground">
-            {t('configs.cache.empty', 'No cached CRUD responses for this tenant.')}
+            {t('configs.cache.empty', 'No cached responses for this tenant.')}
           </p>
         )}
       </div>

package/src/modules/configs/i18n/en.json

@@ -35,14 +35,14 @@
   "configs.systemStatus.actions.purgeCacheUnavailable": "Cache service is unavailable.",
   "configs.config.nav.cache": "Cache",
   "configs.cache.title": "Cache overview",
-  "configs.cache.description": "Inspect cached CRUD responses and clear segments when necessary.",
+  "configs.cache.description": "Inspect cached responses and clear segments when necessary.",
   "configs.cache.loading": "Loading cache statistics…",
   "configs.cache.loadError": "Failed to load cache statistics.",
   "configs.cache.retry": "Retry",
   "configs.cache.refresh": "Refresh",
   "configs.cache.generatedAt": "Stats generated {{timestamp}}",
   "configs.cache.totalEntries": "{{count}} cached entries",
-  "configs.cache.empty": "No cached CRUD responses for this tenant.",
+  "configs.cache.empty": "No cached responses for this tenant.",
   "configs.cache.purgeAll": "Purge all cache",
   "configs.cache.purgeAllLoading": "Purging…",
   "configs.cache.purgeAllConfirm": "Purge all cached entries for this tenant?",
@@ -64,6 +64,8 @@
   "configs.systemStatus.categories.profilingDescription": "Flags that control request and query profiling outputs.",
   "configs.systemStatus.categories.logging": "Logging",
   "configs.systemStatus.categories.loggingDescription": "Tune verbosity and SQL logging for diagnostics.",
+  "configs.systemStatus.categories.security": "Security",
+  "configs.systemStatus.categories.securityDescription": "Password policy requirements enforced at login and user creation.",
   "configs.systemStatus.categories.caching": "Caching",
   "configs.systemStatus.categories.cachingDescription": "Cache providers and TTL controls for backend responses.",
   "configs.systemStatus.categories.queryIndex": "Query index",
@@ -84,6 +86,14 @@
   "configs.systemStatus.variables.logVerbosity.description": "Overrides structured log verbosity such as debug or trace.",
   "configs.systemStatus.variables.logLevel.label": "Log level",
   "configs.systemStatus.variables.logLevel.description": "Fallback log level applied when verbosity is not set.",
+  "configs.systemStatus.variables.passwordMinLength.label": "Password min length",
+  "configs.systemStatus.variables.passwordMinLength.description": "Minimum number of characters required for passwords.",
+  "configs.systemStatus.variables.passwordRequireDigit.label": "Password requires digit",
+  "configs.systemStatus.variables.passwordRequireDigit.description": "Require at least one numeric character.",
+  "configs.systemStatus.variables.passwordRequireUppercase.label": "Password requires uppercase",
+  "configs.systemStatus.variables.passwordRequireUppercase.description": "Require at least one uppercase letter.",
+  "configs.systemStatus.variables.passwordRequireSpecial.label": "Password requires special",
+  "configs.systemStatus.variables.passwordRequireSpecial.description": "Require at least one special character.",
   "configs.systemStatus.variables.enableCrudApiCache.label": "CRUD API cache",
   "configs.systemStatus.variables.enableCrudApiCache.description": "Enable the CRUD API response cache layer.",
   "configs.systemStatus.variables.cacheStrategy.label": "Cache strategy",

package/src/modules/configs/i18n/pl.json

@@ -35,14 +35,14 @@
   "configs.systemStatus.actions.purgeCacheUnavailable": "Usługa pamięci podręcznej jest niedostępna.",
   "configs.config.nav.cache": "Pamięć podręczna",
   "configs.cache.title": "Podgląd pamięci podręcznej",
-  "configs.cache.description": "Przeglądaj zapisane odpowiedzi CRUD i czyść segmenty w razie potrzeby.",
+  "configs.cache.description": "Przeglądaj zapisane odpowiedzi i czyść segmenty w razie potrzeby.",
   "configs.cache.loading": "Ładowanie statystyk pamięci podręcznej…",
   "configs.cache.loadError": "Nie udało się wczytać statystyk pamięci podręcznej.",
   "configs.cache.retry": "Spróbuj ponownie",
   "configs.cache.refresh": "Odśwież",
   "configs.cache.generatedAt": "Statystyki z {{timestamp}}",
   "configs.cache.totalEntries": "{{count}} wpisów w pamięci podręcznej",
-  "configs.cache.empty": "Brak zapisanych odpowiedzi CRUD dla tego tenanta.",
+  "configs.cache.empty": "Brak zapisanych odpowiedzi dla tego tenanta.",
   "configs.cache.purgeAll": "Wyczyść całą pamięć",
   "configs.cache.purgeAllLoading": "Czyszczenie…",
   "configs.cache.purgeAllConfirm": "Wyczyścić wszystkie wpisy pamięci podręcznej dla tego tenanta?",
@@ -64,6 +64,8 @@
   "configs.systemStatus.categories.profilingDescription": "Flagi sterujące generowaniem danych z profilowania zapytań i żądań.",
   "configs.systemStatus.categories.logging": "Logowanie",
   "configs.systemStatus.categories.loggingDescription": "Dostosuj poziom logowania i zapisywanie zapytań SQL na potrzeby diagnostyki.",
+  "configs.systemStatus.categories.security": "Bezpieczeństwo",
+  "configs.systemStatus.categories.securityDescription": "Wymagania polityki haseł stosowane przy logowaniu i tworzeniu użytkowników.",
   "configs.systemStatus.categories.caching": "Buforowanie",
   "configs.systemStatus.categories.cachingDescription": "Mechanizmy cache oraz kontrola czasu życia odpowiedzi backendu.",
   "configs.systemStatus.categories.queryIndex": "Indeks zapytań",
@@ -84,6 +86,14 @@
   "configs.systemStatus.variables.logVerbosity.description": "Nadpisuje poziom szczegółowości logów, np. debug lub trace.",
   "configs.systemStatus.variables.logLevel.label": "Poziom logowania",
   "configs.systemStatus.variables.logLevel.description": "Domyślny poziom logowania używany, gdy nie ustawiono szczegółowości.",
+  "configs.systemStatus.variables.passwordMinLength.label": "Minimalna długość hasła",
+  "configs.systemStatus.variables.passwordMinLength.description": "Minimalna liczba znaków wymagana w haśle.",
+  "configs.systemStatus.variables.passwordRequireDigit.label": "Hasło wymaga cyfry",
+  "configs.systemStatus.variables.passwordRequireDigit.description": "Wymagaj co najmniej jednej cyfry.",
+  "configs.systemStatus.variables.passwordRequireUppercase.label": "Hasło wymaga wielkiej litery",
+  "configs.systemStatus.variables.passwordRequireUppercase.description": "Wymagaj co najmniej jednej wielkiej litery.",
+  "configs.systemStatus.variables.passwordRequireSpecial.label": "Hasło wymaga znaku specjalnego",
+  "configs.systemStatus.variables.passwordRequireSpecial.description": "Wymagaj co najmniej jednego znaku specjalnego.",
   "configs.systemStatus.variables.enableCrudApiCache.label": "Cache API CRUD",
   "configs.systemStatus.variables.enableCrudApiCache.description": "Włącza warstwę buforowania odpowiedzi API CRUD.",
   "configs.systemStatus.variables.cacheStrategy.label": "Strategia cache",

package/src/modules/configs/lib/system-status.ts

@@ -19,7 +19,14 @@ type SystemStatusVariableDefinition = {
   defaultValue: string | null
 }
 
-const CATEGORY_ORDER: SystemStatusCategoryKey[] = ['profiling', 'logging', 'caching', 'query_index', 'entities']
+const CATEGORY_ORDER: SystemStatusCategoryKey[] = [
+  'profiling',
+  'logging',
+  'security',
+  'caching',
+  'query_index',
+  'entities',
+]
 
 const CATEGORY_METADATA: Record<
   SystemStatusCategoryKey,
@@ -33,6 +40,10 @@ const CATEGORY_METADATA: Record<
     labelKey: 'configs.systemStatus.categories.logging',
     descriptionKey: 'configs.systemStatus.categories.loggingDescription',
   },
+  security: {
+    labelKey: 'configs.systemStatus.categories.security',
+    descriptionKey: 'configs.systemStatus.categories.securityDescription',
+  },
   caching: {
     labelKey: 'configs.systemStatus.categories.caching',
     descriptionKey: 'configs.systemStatus.categories.cachingDescription',
@@ -113,6 +124,42 @@ export const SYSTEM_STATUS_VARIABLES: SystemStatusVariableDefinition[] = [
     docUrl: `${SYSTEM_STATUS_DOC_BASE}#log_level`,
     defaultValue: '',
   },
+  {
+    key: 'OM_PASSWORD_MIN_LENGTH',
+    category: 'security',
+    kind: 'string',
+    labelKey: 'configs.systemStatus.variables.passwordMinLength.label',
+    descriptionKey: 'configs.systemStatus.variables.passwordMinLength.description',
+    docUrl: `${SYSTEM_STATUS_DOC_BASE}#om_password_min_length`,
+    defaultValue: '6',
+  },
+  {
+    key: 'OM_PASSWORD_REQUIRE_DIGIT',
+    category: 'security',
+    kind: 'boolean',
+    labelKey: 'configs.systemStatus.variables.passwordRequireDigit.label',
+    descriptionKey: 'configs.systemStatus.variables.passwordRequireDigit.description',
+    docUrl: `${SYSTEM_STATUS_DOC_BASE}#om_password_require_digit`,
+    defaultValue: 'true',
+  },
+  {
+    key: 'OM_PASSWORD_REQUIRE_UPPERCASE',
+    category: 'security',
+    kind: 'boolean',
+    labelKey: 'configs.systemStatus.variables.passwordRequireUppercase.label',
+    descriptionKey: 'configs.systemStatus.variables.passwordRequireUppercase.description',
+    docUrl: `${SYSTEM_STATUS_DOC_BASE}#om_password_require_uppercase`,
+    defaultValue: 'true',
+  },
+  {
+    key: 'OM_PASSWORD_REQUIRE_SPECIAL',
+    category: 'security',
+    kind: 'boolean',
+    labelKey: 'configs.systemStatus.variables.passwordRequireSpecial.label',
+    descriptionKey: 'configs.systemStatus.variables.passwordRequireSpecial.description',
+    docUrl: `${SYSTEM_STATUS_DOC_BASE}#om_password_require_special`,
+    defaultValue: 'true',
+  },
   {
     key: 'ENABLE_CRUD_API_CACHE',
     category: 'caching',

package/src/modules/configs/lib/system-status.types.ts

@@ -1,6 +1,7 @@
 export type SystemStatusCategoryKey =
   | 'profiling'
   | 'logging'
+  | 'security'
   | 'caching'
   | 'query_index'
   | 'entities'