npm - @open-mercato/core - Versions diffs - 0.4.6-develop-15c18897fc → 0.4.6-develop-d09919c37e - Mend

@open-mercato/core 0.4.6-develop-15c18897fc → 0.4.6-develop-d09919c37e

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (13) hide show

package/dist/modules/auth/api/login.js CHANGED Viewed

@@ -5,6 +5,7 @@ import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { signJwt } from "@open-mercato/shared/lib/auth/jwt";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { parseBooleanToken } from "@open-mercato/shared/lib/boolean";
+import { emitAuthEvent } from "@open-mercato/core/modules/auth/events";
 import { rateLimitErrorSchema } from "@open-mercato/shared/lib/ratelimit/helpers";
 import { readEndpointRateLimitConfig } from "@open-mercato/shared/lib/ratelimit/config";
 import { checkAuthRateLimit, resetAuthRateLimit } from "@open-mercato/core/modules/auth/lib/rateLimitCheck";
@@ -62,10 +63,12 @@ async function POST(req) {
     user = users[0] ?? null;
   }
   if (!user || !user.passwordHash) {
+    void emitAuthEvent("auth.login.failed", { email: parsed.data.email, reason: "invalid_credentials" }).catch(() => void 0);
     return NextResponse.json({ ok: false, error: translate("auth.login.errors.invalidCredentials", "Invalid email or password") }, { status: 401 });
   }
   const ok = await auth.verifyPassword(user, parsed.data.password);
   if (!ok) {
+    void emitAuthEvent("auth.login.failed", { email: parsed.data.email, reason: "invalid_password" }).catch(() => void 0);
     return NextResponse.json({ ok: false, error: translate("auth.login.errors.invalidCredentials", "Invalid email or password") }, { status: 401 });
   }
   if (requiredRoles.length) {
@@ -95,6 +98,7 @@ async function POST(req) {
     email: user.email,
     roles: userRoleNames
   });
+  void emitAuthEvent("auth.login.success", { id: String(user.id), email: user.email, tenantId: resolvedTenantId, organizationId: user.organizationId ? String(user.organizationId) : null }).catch(() => void 0);
   const responseData = {
     ok: true,
     token,

package/dist/modules/auth/api/login.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/auth/api/login.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { userLoginSchema } from '@open-mercato/core/modules/auth/data/validators'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { AuthService } from '@open-mercato/core/modules/auth/services/authService'\nimport { signJwt } from '@open-mercato/shared/lib/auth/jwt'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { EventBus } from '@open-mercato/events/types'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport { rateLimitErrorSchema } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport { readEndpointRateLimitConfig } from '@open-mercato/shared/lib/ratelimit/config'\nimport { checkAuthRateLimit, resetAuthRateLimit } from '@open-mercato/core/modules/auth/lib/rateLimitCheck'\n\nconst loginRateLimitConfig = readEndpointRateLimitConfig('LOGIN', {\n  points: 5, duration: 60, blockDuration: 60, keyPrefix: 'login',\n})\nconst loginIpRateLimitConfig = readEndpointRateLimitConfig('LOGIN_IP', {\n  points: 20, duration: 60, blockDuration: 60, keyPrefix: 'login-ip',\n})\n\nexport const metadata = {}\n\n// validation comes from userLoginSchema\n\nexport async function POST(req: Request) {\n  const { translate } = await resolveTranslations()\n  const form = await req.formData()\n  const email = String(form.get('email') ?? '')\n  const password = String(form.get('password') ?? '')\n  const remember = parseBooleanToken(form.get('remember')?.toString()) === true\n  const tenantIdRaw = String(form.get('tenantId') ?? form.get('tenant') ?? '').trim()\n  const requireRoleRaw = (String(form.get('requireRole') ?? form.get('role') ?? '')).trim()\n  const requiredRoles = requireRoleRaw ? requireRoleRaw.split(',').map((s) => s.trim()).filter(Boolean) : []\n  // Rate limit \u2014 two layers, both checked before validation and DB work\n  const { error: rateLimitError, compoundKey: rateLimitCompoundKey } = await checkAuthRateLimit({\n    req, ipConfig: loginIpRateLimitConfig, compoundConfig: loginRateLimitConfig, compoundIdentifier: email,\n  })\n  if (rateLimitError) return rateLimitError\n  const parsed = userLoginSchema.pick({ email: true, password: true, tenantId: true }).safeParse({\n    email,\n    password,\n    tenantId: tenantIdRaw || undefined,\n  })\n  if (!parsed.success) {\n    return NextResponse.json({ ok: false, error: translate('auth.login.errors.invalidCredentials', 'Invalid credentials') }, { status: 400 })\n  }\n  const container = await createRequestContainer()\n  const auth = (container.resolve('authService') as AuthService)\n  const tenantId = parsed.data.tenantId ?? null\n  let user = null\n  if (tenantId) {\n    user = await auth.findUserByEmailAndTenant(parsed.data.email, tenantId)\n  } else {\n    const users = await auth.findUsersByEmail(parsed.data.email)\n    if (users.length > 1) {\n      return NextResponse.json({\n        ok: false,\n        error: translate('auth.login.errors.tenantRequired', 'Use the login link provided with your tenant activation to continue.'),\n      }, { status: 400 })\n    }\n    user = users[0] ?? null\n  }\n  if (!user || !user.passwordHash) {\n    return NextResponse.json({ ok: false, error: translate('auth.login.errors.invalidCredentials', 'Invalid email or password') }, { status: 401 })\n  }\n  const ok = await auth.verifyPassword(user, parsed.data.password)\n  if (!ok) {\n    return NextResponse.json({ ok: false, error: translate('auth.login.errors.invalidCredentials', 'Invalid email or password') }, { status: 401 })\n  }\n  // Optional role requirement\n  if (requiredRoles.length) {\n    const userRoleNames = await auth.getUserRoles(user, tenantId ?? (user.tenantId ? String(user.tenantId) : null))\n    const authorized = requiredRoles.some(r => userRoleNames.includes(r))\n    if (!authorized) {\n      return NextResponse.json({ ok: false, error: translate('auth.login.errors.permissionDenied', 'Not authorized for this area') }, { status: 403 })\n    }\n  }\n  await auth.updateLastLoginAt(user)\n  // Reset rate limit counter on successful login so legitimate users aren't penalized for prior typos\n  if (rateLimitCompoundKey) {\n    await resetAuthRateLimit(rateLimitCompoundKey, loginRateLimitConfig)\n  }\n  const resolvedTenantId = tenantId ?? (user.tenantId ? String(user.tenantId) : null)\n  const userRoleNames = await auth.getUserRoles(user, resolvedTenantId)\n  try {\n    const eventBus = (container.resolve('eventBus') as EventBus)\n    void eventBus.emitEvent('query_index.coverage.warmup', {\n      tenantId: resolvedTenantId,\n    }).catch(() => undefined)\n  } catch {\n    // optional warmup\n  }\n  const token = signJwt({\n    sub: String(user.id),\n    tenantId: resolvedTenantId,\n    orgId: user.organizationId ? String(user.organizationId) : null,\n    email: user.email,\n    roles: userRoleNames\n  })\n  const responseData: { ok: true; token: string; redirect: string; refreshToken?: string } = {\n    ok: true,\n    token,\n    redirect: '/backend',\n  }\n  if (remember) {\n    const days = Number(process.env.REMEMBER_ME_DAYS || '30')\n    const expiresAt = new Date(Date.now() + days * 24 * 60 * 60 * 1000)\n    const sess = await auth.createSession(user, expiresAt)\n    responseData.refreshToken = sess.token\n  }\n  const res = NextResponse.json(responseData)\n  res.cookies.set('auth_token', token, { httpOnly: true, path: '/', sameSite: 'lax', secure: process.env.NODE_ENV === 'production', maxAge: 60 * 60 * 8 })\n  if (remember && responseData.refreshToken) {\n    const days = Number(process.env.REMEMBER_ME_DAYS || '30')\n    const expiresAt = new Date(Date.now() + days * 24 * 60 * 60 * 1000)\n    res.cookies.set('session_token', responseData.refreshToken, { httpOnly: true, path: '/', sameSite: 'lax', secure: process.env.NODE_ENV === 'production', expires: expiresAt })\n  }\n  return res\n}\n\nconst loginRequestSchema = userLoginSchema.extend({\n  password: z.string().min(6).describe('User password'),\n  remember: z.enum(['on', '1', 'true']).optional().describe('Persist the session (submit `on`, `1`, or `true`).'),\n}).describe('Login form payload')\n\nconst loginSuccessSchema = z.object({\n  ok: z.literal(true),\n  token: z.string().describe('JWT token issued for subsequent API calls'),\n  redirect: z.string().nullable().describe('Next location the client should navigate to'),\n  refreshToken: z.string().optional().describe('Long-lived refresh token for obtaining new access tokens (only present when remember=true)'),\n})\n\nconst loginErrorSchema = z.object({\n  ok: z.literal(false),\n  error: z.string(),\n})\n\nconst loginMethodDoc: OpenApiMethodDoc = {\n  summary: 'Authenticate user credentials',\n  description: 'Validates the submitted credentials and issues a bearer token cookie for subsequent API calls.',\n  tags: ['Authentication & Accounts'],\n  requestBody: {\n    contentType: 'application/x-www-form-urlencoded',\n    schema: loginRequestSchema,\n    description: 'Form-encoded payload captured from the login form.',\n  },\n  responses: [\n    {\n      status: 200,\n      description: 'Authentication succeeded',\n      schema: loginSuccessSchema,\n    },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed', schema: loginErrorSchema },\n    { status: 401, description: 'Invalid credentials', schema: loginErrorSchema },\n    { status: 403, description: 'User lacks required role', schema: loginErrorSchema },\n    { status: 429, description: 'Too many login attempts', schema: rateLimitErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  summary: 'Authenticate user credentials',\n  description: 'Accepts login form submissions and manages cookie/session issuance.',\n  methods: {\n    POST: loginMethodDoc,\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,uBAAuB;AAChC,SAAS,8BAA8B;AAEvC,SAAS,eAAe;AACxB,SAAS,2BAA2B;AAEpC,SAAS,yBAAyB;AAClC,SAAS,4BAA4B;AACrC,SAAS,mCAAmC;AAC5C,SAAS,oBAAoB,0BAA0B;AAEvD,MAAM,uBAAuB,4BAA4B,SAAS;AAAA,EAChE,QAAQ;AAAA,EAAG,UAAU;AAAA,EAAI,eAAe;AAAA,EAAI,WAAW;AACzD,CAAC;AACD,MAAM,yBAAyB,4BAA4B,YAAY;AAAA,EACrE,QAAQ;AAAA,EAAI,UAAU;AAAA,EAAI,eAAe;AAAA,EAAI,WAAW;AAC1D,CAAC;AAEM,MAAM,WAAW,CAAC;AAIzB,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAM,OAAO,MAAM,IAAI,SAAS;AAChC,QAAM,QAAQ,OAAO,KAAK,IAAI,OAAO,KAAK,EAAE;AAC5C,QAAM,WAAW,OAAO,KAAK,IAAI,UAAU,KAAK,EAAE;AAClD,QAAM,WAAW,kBAAkB,KAAK,IAAI,UAAU,GAAG,SAAS,CAAC,MAAM;AACzE,QAAM,cAAc,OAAO,KAAK,IAAI,UAAU,KAAK,KAAK,IAAI,QAAQ,KAAK,EAAE,EAAE,KAAK;AAClF,QAAM,iBAAkB,OAAO,KAAK,IAAI,aAAa,KAAK,KAAK,IAAI,MAAM,KAAK,EAAE,EAAG,KAAK;AACxF,QAAM,gBAAgB,iBAAiB,eAAe,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO,IAAI,CAAC;AAEzG,QAAM,EAAE,OAAO,gBAAgB,aAAa,qBAAqB,IAAI,MAAM,mBAAmB;AAAA,IAC5F;AAAA,IAAK,UAAU;AAAA,IAAwB,gBAAgB;AAAA,IAAsB,oBAAoB;AAAA,EACnG,CAAC;AACD,MAAI,eAAgB,QAAO;AAC3B,QAAM,SAAS,gBAAgB,KAAK,EAAE,OAAO,MAAM,UAAU,MAAM,UAAU,KAAK,CAAC,EAAE,UAAU;AAAA,IAC7F;AAAA,IACA;AAAA,IACA,UAAU,eAAe;AAAA,EAC3B,CAAC;AACD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,wCAAwC,qBAAqB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1I;AACA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAQ,UAAU,QAAQ,aAAa;AAC7C,QAAM,WAAW,OAAO,KAAK,YAAY;AACzC,MAAI,OAAO;AACX,MAAI,UAAU;AACZ,WAAO,MAAM,KAAK,yBAAyB,OAAO,KAAK,OAAO,QAAQ;AAAA,EACxE,OAAO;AACL,UAAM,QAAQ,MAAM,KAAK,iBAAiB,OAAO,KAAK,KAAK;AAC3D,QAAI,MAAM,SAAS,GAAG;AACpB,aAAO,aAAa,KAAK;AAAA,QACvB,IAAI;AAAA,QACJ,OAAO,UAAU,oCAAoC,sEAAsE;AAAA,MAC7H,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpB;AACA,WAAO,MAAM,CAAC,KAAK;AAAA,EACrB;AACA,MAAI,CAAC,QAAQ,CAAC,KAAK,cAAc;AAC/B,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,wCAAwC,2BAA2B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChJ;AACA,QAAM,KAAK,MAAM,KAAK,eAAe,MAAM,OAAO,KAAK,QAAQ;AAC/D,MAAI,CAAC,IAAI;AACP,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,wCAAwC,2BAA2B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChJ;AAEA,MAAI,cAAc,QAAQ;AACxB,UAAMA,iBAAgB,MAAM,KAAK,aAAa,MAAM,aAAa,KAAK,WAAW,OAAO,KAAK,QAAQ,IAAI,KAAK;AAC9G,UAAM,aAAa,cAAc,KAAK,OAAKA,eAAc,SAAS,CAAC,CAAC;AACpE,QAAI,CAAC,YAAY;AACf,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,sCAAsC,8BAA8B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjJ;AAAA,EACF;AACA,QAAM,KAAK,kBAAkB,IAAI;AAEjC,MAAI,sBAAsB;AACxB,UAAM,mBAAmB,sBAAsB,oBAAoB;AAAA,EACrE;AACA,QAAM,mBAAmB,aAAa,KAAK,WAAW,OAAO,KAAK,QAAQ,IAAI;AAC9E,QAAM,gBAAgB,MAAM,KAAK,aAAa,MAAM,gBAAgB;AACpE,MAAI;AACF,UAAM,WAAY,UAAU,QAAQ,UAAU;AAC9C,SAAK,SAAS,UAAU,+BAA+B;AAAA,MACrD,UAAU;AAAA,IACZ,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,EAC1B,QAAQ;AAAA,EAER;AACA,QAAM,QAAQ,QAAQ;AAAA,IACpB,KAAK,OAAO,KAAK,EAAE;AAAA,IACnB,UAAU;AAAA,IACV,OAAO,KAAK,iBAAiB,OAAO,KAAK,cAAc,IAAI;AAAA,IAC3D,OAAO,KAAK;AAAA,IACZ,OAAO;AAAA,EACT,CAAC;AACD,QAAM,eAAqF;AAAA,IACzF,IAAI;AAAA,IACJ;AAAA,IACA,UAAU;AAAA,EACZ;AACA,MAAI,UAAU;AACZ,UAAM,OAAO,OAAO,QAAQ,IAAI,oBAAoB,IAAI;AACxD,UAAM,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,KAAK,GAAI;AAClE,UAAM,OAAO,MAAM,KAAK,cAAc,MAAM,SAAS;AACrD,iBAAa,eAAe,KAAK;AAAA,EACnC;AACA,QAAM,MAAM,aAAa,KAAK,YAAY;AAC1C,MAAI,QAAQ,IAAI,cAAc,OAAO,EAAE,UAAU,MAAM,MAAM,KAAK,UAAU,OAAO,QAAQ,QAAQ,IAAI,aAAa,cAAc,QAAQ,KAAK,KAAK,EAAE,CAAC;AACvJ,MAAI,YAAY,aAAa,cAAc;AACzC,UAAM,OAAO,OAAO,QAAQ,IAAI,oBAAoB,IAAI;AACxD,UAAM,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,KAAK,GAAI;AAClE,QAAI,QAAQ,IAAI,iBAAiB,aAAa,cAAc,EAAE,UAAU,MAAM,MAAM,KAAK,UAAU,OAAO,QAAQ,QAAQ,IAAI,aAAa,cAAc,SAAS,UAAU,CAAC;AAAA,EAC/K;AACA,SAAO;AACT;AAEA,MAAM,qBAAqB,gBAAgB,OAAO;AAAA,EAChD,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,eAAe;AAAA,EACpD,UAAU,EAAE,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,oDAAoD;AAChH,CAAC,EAAE,SAAS,oBAAoB;AAEhC,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,OAAO,EAAE,OAAO,EAAE,SAAS,2CAA2C;AAAA,EACtE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,6CAA6C;AAAA,EACtF,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,4FAA4F;AAC3I,CAAC;AAED,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,IAAI,EAAE,QAAQ,KAAK;AAAA,EACnB,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,MAAM,iBAAmC;AAAA,EACvC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,2BAA2B;AAAA,EAClC,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT;AAAA,MACE,QAAQ;AAAA,MACR,aAAa;AAAA,MACb,QAAQ;AAAA,IACV;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,iBAAiB;AAAA,IAC1E,EAAE,QAAQ,KAAK,aAAa,uBAAuB,QAAQ,iBAAiB;AAAA,IAC5E,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,iBAAiB;AAAA,IACjF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,qBAAqB;AAAA,EACtF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,SAAS;AAAA,IACP,MAAM;AAAA,EACR;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { userLoginSchema } from '@open-mercato/core/modules/auth/data/validators'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { AuthService } from '@open-mercato/core/modules/auth/services/authService'\nimport { signJwt } from '@open-mercato/shared/lib/auth/jwt'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { EventBus } from '@open-mercato/events/types'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport { emitAuthEvent } from '@open-mercato/core/modules/auth/events'\nimport { rateLimitErrorSchema } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport { readEndpointRateLimitConfig } from '@open-mercato/shared/lib/ratelimit/config'\nimport { checkAuthRateLimit, resetAuthRateLimit } from '@open-mercato/core/modules/auth/lib/rateLimitCheck'\n\nconst loginRateLimitConfig = readEndpointRateLimitConfig('LOGIN', {\n  points: 5, duration: 60, blockDuration: 60, keyPrefix: 'login',\n})\nconst loginIpRateLimitConfig = readEndpointRateLimitConfig('LOGIN_IP', {\n  points: 20, duration: 60, blockDuration: 60, keyPrefix: 'login-ip',\n})\n\nexport const metadata = {}\n\n// validation comes from userLoginSchema\n\nexport async function POST(req: Request) {\n  const { translate } = await resolveTranslations()\n  const form = await req.formData()\n  const email = String(form.get('email') ?? '')\n  const password = String(form.get('password') ?? '')\n  const remember = parseBooleanToken(form.get('remember')?.toString()) === true\n  const tenantIdRaw = String(form.get('tenantId') ?? form.get('tenant') ?? '').trim()\n  const requireRoleRaw = (String(form.get('requireRole') ?? form.get('role') ?? '')).trim()\n  const requiredRoles = requireRoleRaw ? requireRoleRaw.split(',').map((s) => s.trim()).filter(Boolean) : []\n  // Rate limit \u2014 two layers, both checked before validation and DB work\n  const { error: rateLimitError, compoundKey: rateLimitCompoundKey } = await checkAuthRateLimit({\n    req, ipConfig: loginIpRateLimitConfig, compoundConfig: loginRateLimitConfig, compoundIdentifier: email,\n  })\n  if (rateLimitError) return rateLimitError\n  const parsed = userLoginSchema.pick({ email: true, password: true, tenantId: true }).safeParse({\n    email,\n    password,\n    tenantId: tenantIdRaw || undefined,\n  })\n  if (!parsed.success) {\n    return NextResponse.json({ ok: false, error: translate('auth.login.errors.invalidCredentials', 'Invalid credentials') }, { status: 400 })\n  }\n  const container = await createRequestContainer()\n  const auth = (container.resolve('authService') as AuthService)\n  const tenantId = parsed.data.tenantId ?? null\n  let user = null\n  if (tenantId) {\n    user = await auth.findUserByEmailAndTenant(parsed.data.email, tenantId)\n  } else {\n    const users = await auth.findUsersByEmail(parsed.data.email)\n    if (users.length > 1) {\n      return NextResponse.json({\n        ok: false,\n        error: translate('auth.login.errors.tenantRequired', 'Use the login link provided with your tenant activation to continue.'),\n      }, { status: 400 })\n    }\n    user = users[0] ?? null\n  }\n  if (!user || !user.passwordHash) {\n    void emitAuthEvent('auth.login.failed', { email: parsed.data.email, reason: 'invalid_credentials' }).catch(() => undefined)\n    return NextResponse.json({ ok: false, error: translate('auth.login.errors.invalidCredentials', 'Invalid email or password') }, { status: 401 })\n  }\n  const ok = await auth.verifyPassword(user, parsed.data.password)\n  if (!ok) {\n    void emitAuthEvent('auth.login.failed', { email: parsed.data.email, reason: 'invalid_password' }).catch(() => undefined)\n    return NextResponse.json({ ok: false, error: translate('auth.login.errors.invalidCredentials', 'Invalid email or password') }, { status: 401 })\n  }\n  // Optional role requirement\n  if (requiredRoles.length) {\n    const userRoleNames = await auth.getUserRoles(user, tenantId ?? (user.tenantId ? String(user.tenantId) : null))\n    const authorized = requiredRoles.some(r => userRoleNames.includes(r))\n    if (!authorized) {\n      return NextResponse.json({ ok: false, error: translate('auth.login.errors.permissionDenied', 'Not authorized for this area') }, { status: 403 })\n    }\n  }\n  await auth.updateLastLoginAt(user)\n  // Reset rate limit counter on successful login so legitimate users aren't penalized for prior typos\n  if (rateLimitCompoundKey) {\n    await resetAuthRateLimit(rateLimitCompoundKey, loginRateLimitConfig)\n  }\n  const resolvedTenantId = tenantId ?? (user.tenantId ? String(user.tenantId) : null)\n  const userRoleNames = await auth.getUserRoles(user, resolvedTenantId)\n  try {\n    const eventBus = (container.resolve('eventBus') as EventBus)\n    void eventBus.emitEvent('query_index.coverage.warmup', {\n      tenantId: resolvedTenantId,\n    }).catch(() => undefined)\n  } catch {\n    // optional warmup\n  }\n  const token = signJwt({\n    sub: String(user.id),\n    tenantId: resolvedTenantId,\n    orgId: user.organizationId ? String(user.organizationId) : null,\n    email: user.email,\n    roles: userRoleNames\n  })\n  void emitAuthEvent('auth.login.success', { id: String(user.id), email: user.email, tenantId: resolvedTenantId, organizationId: user.organizationId ? String(user.organizationId) : null }).catch(() => undefined)\n  const responseData: { ok: true; token: string; redirect: string; refreshToken?: string } = {\n    ok: true,\n    token,\n    redirect: '/backend',\n  }\n  if (remember) {\n    const days = Number(process.env.REMEMBER_ME_DAYS || '30')\n    const expiresAt = new Date(Date.now() + days * 24 * 60 * 60 * 1000)\n    const sess = await auth.createSession(user, expiresAt)\n    responseData.refreshToken = sess.token\n  }\n  const res = NextResponse.json(responseData)\n  res.cookies.set('auth_token', token, { httpOnly: true, path: '/', sameSite: 'lax', secure: process.env.NODE_ENV === 'production', maxAge: 60 * 60 * 8 })\n  if (remember && responseData.refreshToken) {\n    const days = Number(process.env.REMEMBER_ME_DAYS || '30')\n    const expiresAt = new Date(Date.now() + days * 24 * 60 * 60 * 1000)\n    res.cookies.set('session_token', responseData.refreshToken, { httpOnly: true, path: '/', sameSite: 'lax', secure: process.env.NODE_ENV === 'production', expires: expiresAt })\n  }\n  return res\n}\n\nconst loginRequestSchema = userLoginSchema.extend({\n  password: z.string().min(6).describe('User password'),\n  remember: z.enum(['on', '1', 'true']).optional().describe('Persist the session (submit `on`, `1`, or `true`).'),\n}).describe('Login form payload')\n\nconst loginSuccessSchema = z.object({\n  ok: z.literal(true),\n  token: z.string().describe('JWT token issued for subsequent API calls'),\n  redirect: z.string().nullable().describe('Next location the client should navigate to'),\n  refreshToken: z.string().optional().describe('Long-lived refresh token for obtaining new access tokens (only present when remember=true)'),\n})\n\nconst loginErrorSchema = z.object({\n  ok: z.literal(false),\n  error: z.string(),\n})\n\nconst loginMethodDoc: OpenApiMethodDoc = {\n  summary: 'Authenticate user credentials',\n  description: 'Validates the submitted credentials and issues a bearer token cookie for subsequent API calls.',\n  tags: ['Authentication & Accounts'],\n  requestBody: {\n    contentType: 'application/x-www-form-urlencoded',\n    schema: loginRequestSchema,\n    description: 'Form-encoded payload captured from the login form.',\n  },\n  responses: [\n    {\n      status: 200,\n      description: 'Authentication succeeded',\n      schema: loginSuccessSchema,\n    },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed', schema: loginErrorSchema },\n    { status: 401, description: 'Invalid credentials', schema: loginErrorSchema },\n    { status: 403, description: 'User lacks required role', schema: loginErrorSchema },\n    { status: 429, description: 'Too many login attempts', schema: rateLimitErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  summary: 'Authenticate user credentials',\n  description: 'Accepts login form submissions and manages cookie/session issuance.',\n  methods: {\n    POST: loginMethodDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,uBAAuB;AAChC,SAAS,8BAA8B;AAEvC,SAAS,eAAe;AACxB,SAAS,2BAA2B;AAEpC,SAAS,yBAAyB;AAClC,SAAS,qBAAqB;AAC9B,SAAS,4BAA4B;AACrC,SAAS,mCAAmC;AAC5C,SAAS,oBAAoB,0BAA0B;AAEvD,MAAM,uBAAuB,4BAA4B,SAAS;AAAA,EAChE,QAAQ;AAAA,EAAG,UAAU;AAAA,EAAI,eAAe;AAAA,EAAI,WAAW;AACzD,CAAC;AACD,MAAM,yBAAyB,4BAA4B,YAAY;AAAA,EACrE,QAAQ;AAAA,EAAI,UAAU;AAAA,EAAI,eAAe;AAAA,EAAI,WAAW;AAC1D,CAAC;AAEM,MAAM,WAAW,CAAC;AAIzB,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAM,OAAO,MAAM,IAAI,SAAS;AAChC,QAAM,QAAQ,OAAO,KAAK,IAAI,OAAO,KAAK,EAAE;AAC5C,QAAM,WAAW,OAAO,KAAK,IAAI,UAAU,KAAK,EAAE;AAClD,QAAM,WAAW,kBAAkB,KAAK,IAAI,UAAU,GAAG,SAAS,CAAC,MAAM;AACzE,QAAM,cAAc,OAAO,KAAK,IAAI,UAAU,KAAK,KAAK,IAAI,QAAQ,KAAK,EAAE,EAAE,KAAK;AAClF,QAAM,iBAAkB,OAAO,KAAK,IAAI,aAAa,KAAK,KAAK,IAAI,MAAM,KAAK,EAAE,EAAG,KAAK;AACxF,QAAM,gBAAgB,iBAAiB,eAAe,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO,IAAI,CAAC;AAEzG,QAAM,EAAE,OAAO,gBAAgB,aAAa,qBAAqB,IAAI,MAAM,mBAAmB;AAAA,IAC5F;AAAA,IAAK,UAAU;AAAA,IAAwB,gBAAgB;AAAA,IAAsB,oBAAoB;AAAA,EACnG,CAAC;AACD,MAAI,eAAgB,QAAO;AAC3B,QAAM,SAAS,gBAAgB,KAAK,EAAE,OAAO,MAAM,UAAU,MAAM,UAAU,KAAK,CAAC,EAAE,UAAU;AAAA,IAC7F;AAAA,IACA;AAAA,IACA,UAAU,eAAe;AAAA,EAC3B,CAAC;AACD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,wCAAwC,qBAAqB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1I;AACA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAQ,UAAU,QAAQ,aAAa;AAC7C,QAAM,WAAW,OAAO,KAAK,YAAY;AACzC,MAAI,OAAO;AACX,MAAI,UAAU;AACZ,WAAO,MAAM,KAAK,yBAAyB,OAAO,KAAK,OAAO,QAAQ;AAAA,EACxE,OAAO;AACL,UAAM,QAAQ,MAAM,KAAK,iBAAiB,OAAO,KAAK,KAAK;AAC3D,QAAI,MAAM,SAAS,GAAG;AACpB,aAAO,aAAa,KAAK;AAAA,QACvB,IAAI;AAAA,QACJ,OAAO,UAAU,oCAAoC,sEAAsE;AAAA,MAC7H,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpB;AACA,WAAO,MAAM,CAAC,KAAK;AAAA,EACrB;AACA,MAAI,CAAC,QAAQ,CAAC,KAAK,cAAc;AAC/B,SAAK,cAAc,qBAAqB,EAAE,OAAO,OAAO,KAAK,OAAO,QAAQ,sBAAsB,CAAC,EAAE,MAAM,MAAM,MAAS;AAC1H,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,wCAAwC,2BAA2B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChJ;AACA,QAAM,KAAK,MAAM,KAAK,eAAe,MAAM,OAAO,KAAK,QAAQ;AAC/D,MAAI,CAAC,IAAI;AACP,SAAK,cAAc,qBAAqB,EAAE,OAAO,OAAO,KAAK,OAAO,QAAQ,mBAAmB,CAAC,EAAE,MAAM,MAAM,MAAS;AACvH,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,wCAAwC,2BAA2B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChJ;AAEA,MAAI,cAAc,QAAQ;AACxB,UAAMA,iBAAgB,MAAM,KAAK,aAAa,MAAM,aAAa,KAAK,WAAW,OAAO,KAAK,QAAQ,IAAI,KAAK;AAC9G,UAAM,aAAa,cAAc,KAAK,OAAKA,eAAc,SAAS,CAAC,CAAC;AACpE,QAAI,CAAC,YAAY;AACf,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,sCAAsC,8BAA8B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjJ;AAAA,EACF;AACA,QAAM,KAAK,kBAAkB,IAAI;AAEjC,MAAI,sBAAsB;AACxB,UAAM,mBAAmB,sBAAsB,oBAAoB;AAAA,EACrE;AACA,QAAM,mBAAmB,aAAa,KAAK,WAAW,OAAO,KAAK,QAAQ,IAAI;AAC9E,QAAM,gBAAgB,MAAM,KAAK,aAAa,MAAM,gBAAgB;AACpE,MAAI;AACF,UAAM,WAAY,UAAU,QAAQ,UAAU;AAC9C,SAAK,SAAS,UAAU,+BAA+B;AAAA,MACrD,UAAU;AAAA,IACZ,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,EAC1B,QAAQ;AAAA,EAER;AACA,QAAM,QAAQ,QAAQ;AAAA,IACpB,KAAK,OAAO,KAAK,EAAE;AAAA,IACnB,UAAU;AAAA,IACV,OAAO,KAAK,iBAAiB,OAAO,KAAK,cAAc,IAAI;AAAA,IAC3D,OAAO,KAAK;AAAA,IACZ,OAAO;AAAA,EACT,CAAC;AACD,OAAK,cAAc,sBAAsB,EAAE,IAAI,OAAO,KAAK,EAAE,GAAG,OAAO,KAAK,OAAO,UAAU,kBAAkB,gBAAgB,KAAK,iBAAiB,OAAO,KAAK,cAAc,IAAI,KAAK,CAAC,EAAE,MAAM,MAAM,MAAS;AAChN,QAAM,eAAqF;AAAA,IACzF,IAAI;AAAA,IACJ;AAAA,IACA,UAAU;AAAA,EACZ;AACA,MAAI,UAAU;AACZ,UAAM,OAAO,OAAO,QAAQ,IAAI,oBAAoB,IAAI;AACxD,UAAM,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,KAAK,GAAI;AAClE,UAAM,OAAO,MAAM,KAAK,cAAc,MAAM,SAAS;AACrD,iBAAa,eAAe,KAAK;AAAA,EACnC;AACA,QAAM,MAAM,aAAa,KAAK,YAAY;AAC1C,MAAI,QAAQ,IAAI,cAAc,OAAO,EAAE,UAAU,MAAM,MAAM,KAAK,UAAU,OAAO,QAAQ,QAAQ,IAAI,aAAa,cAAc,QAAQ,KAAK,KAAK,EAAE,CAAC;AACvJ,MAAI,YAAY,aAAa,cAAc;AACzC,UAAM,OAAO,OAAO,QAAQ,IAAI,oBAAoB,IAAI;AACxD,UAAM,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,KAAK,GAAI;AAClE,QAAI,QAAQ,IAAI,iBAAiB,aAAa,cAAc,EAAE,UAAU,MAAM,MAAM,KAAK,UAAU,OAAO,QAAQ,QAAQ,IAAI,aAAa,cAAc,SAAS,UAAU,CAAC;AAAA,EAC/K;AACA,SAAO;AACT;AAEA,MAAM,qBAAqB,gBAAgB,OAAO;AAAA,EAChD,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,eAAe;AAAA,EACpD,UAAU,EAAE,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,oDAAoD;AAChH,CAAC,EAAE,SAAS,oBAAoB;AAEhC,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,OAAO,EAAE,OAAO,EAAE,SAAS,2CAA2C;AAAA,EACtE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,6CAA6C;AAAA,EACtF,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,4FAA4F;AAC3I,CAAC;AAED,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,IAAI,EAAE,QAAQ,KAAK;AAAA,EACnB,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,MAAM,iBAAmC;AAAA,EACvC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,2BAA2B;AAAA,EAClC,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT;AAAA,MACE,QAAQ;AAAA,MACR,aAAa;AAAA,MACb,QAAQ;AAAA,IACV;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,iBAAiB;AAAA,IAC1E,EAAE,QAAQ,KAAK,aAAa,uBAAuB,QAAQ,iBAAiB;AAAA,IAC5E,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,iBAAiB;AAAA,IACjF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,qBAAqB;AAAA,EACtF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,SAAS;AAAA,IACP,MAAM;AAAA,EACR;AACF;",
   "names": ["userRoleNames"]
 }

package/dist/modules/auth/frontend/login-injection.js ADDED Viewed

	@@ -0,0 +1 @@
1	+ //# sourceMappingURL=login-injection.js.map

package/dist/modules/auth/frontend/login-injection.js.map ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/modules/auth/frontend/login.js CHANGED Viewed

@@ -1,6 +1,6 @@
 "use client";
 import { jsx, jsxs } from "react/jsx-runtime";
-import { useCallback, useEffect, useState } from "react";
+import { useCallback, useEffect, useMemo, useState } from "react";
 import Image from "next/image";
 import Link from "next/link";
 import { useRouter, useSearchParams } from "next/navigation";
@@ -14,6 +14,7 @@ import { clearAllOperations } from "@open-mercato/ui/backend/operations/store";
 import { apiCall } from "@open-mercato/ui/backend/utils/apiCall";
 import { X } from "lucide-react";
 import { Notice } from "@open-mercato/ui/primitives/Notice";
+import { InjectionSpot } from "@open-mercato/ui/backend/injection/InjectionSpot";
 const loginTenantKey = "om_login_tenant";
 const loginTenantCookieMaxAge = 60 * 60 * 24 * 14;
 function readTenantCookie() {
@@ -79,6 +80,8 @@ function LoginPage() {
   const translatedFeatures = requiredFeatures.map((feature) => translate(`features.${feature}`, feature));
   const [error, setError] = useState(null);
   const [submitting, setSubmitting] = useState(false);
+  const [authOverride, setAuthOverride] = useState(null);
+  const [email, setEmail] = useState("");
   const [tenantId, setTenantId] = useState(null);
   const [tenantName, setTenantName] = useState(null);
   const [tenantLoading, setTenantLoading] = useState(false);
@@ -150,6 +153,10 @@ function LoginPage() {
   async function onSubmit(e) {
     e.preventDefault();
     setError(null);
+    if (authOverride) {
+      authOverride.onSubmit();
+      return;
+    }
     setSubmitting(true);
     try {
       const form = new FormData(e.currentTarget);
@@ -217,6 +224,13 @@ function LoginPage() {
       setSubmitting(false);
     }
   }
+  const loginFormContext = useMemo(() => ({
+    email,
+    tenantId,
+    searchParams,
+    setAuthOverride,
+    setError
+  }), [email, tenantId, searchParams]);
   return /* @__PURE__ */ jsx("div", { className: "min-h-svh flex items-center justify-center p-4", children: /* @__PURE__ */ jsxs(Card, { className: "w-full max-w-sm", children: [
     /* @__PURE__ */ jsxs(CardHeader, { className: "flex flex-col items-center gap-4 text-center p-10", children: [
       /* @__PURE__ */ jsx(Image, { alt: translate("auth.login.logoAlt", "Open Mercato logo"), src: "/open-mercato.svg", width: 150, height: 150, priority: true }),
@@ -251,18 +265,35 @@ function LoginPage() {
       error && !showTenantInvalid && /* @__PURE__ */ jsx("div", { className: "rounded-md border border-red-200 bg-red-50 px-3 py-2 text-center text-sm text-red-700", role: "alert", "aria-live": "polite", children: error }),
       /* @__PURE__ */ jsxs("div", { className: "grid gap-1", children: [
         /* @__PURE__ */ jsx(Label, { htmlFor: "email", children: t("auth.email") }),
-        /* @__PURE__ */ jsx(Input, { id: "email", name: "email", type: "email", required: true, "aria-invalid": !!error })
+        /* @__PURE__ */ jsx(
+          Input,
+          {
+            id: "email",
+            name: "email",
+            type: "email",
+            required: true,
+            "aria-invalid": !!error,
+            onBlur: (e) => setEmail(e.target.value)
+          }
+        )
       ] }),
-      /* @__PURE__ */ jsxs("div", { className: "grid gap-1", children: [
+      /* @__PURE__ */ jsx(
+        InjectionSpot,
+        {
+          spotId: "auth.login:form",
+          context: loginFormContext
+        }
+      ),
+      authOverride?.hidePassword ? null : /* @__PURE__ */ jsxs("div", { className: "grid gap-1", children: [
         /* @__PURE__ */ jsx(Label, { htmlFor: "password", children: t("auth.password") }),
-        /* @__PURE__ */ jsx(Input, { id: "password", name: "password", type: "password", required: true, "aria-invalid": !!error })
+        /* @__PURE__ */ jsx(Input, { id: "password", name: "password", type: "password", required: !authOverride, "aria-invalid": !!error })
       ] }),
-      /* @__PURE__ */ jsxs("label", { className: "flex items-center gap-2 text-xs text-muted-foreground", children: [
+      !authOverride?.hideRememberMe && !authOverride?.hidePassword && /* @__PURE__ */ jsxs("label", { className: "flex items-center gap-2 text-xs text-muted-foreground", children: [
         /* @__PURE__ */ jsx("input", { type: "checkbox", name: "remember", className: "accent-foreground" }),
         /* @__PURE__ */ jsx("span", { children: translate("auth.login.rememberMe", "Remember me") })
       ] }),
-      /* @__PURE__ */ jsx(Button, { type: "submit", className: "mt-2 w-full", disabled: submitting, children: submitting ? translate("auth.login.loading", "Loading...") : translate("auth.signIn", "Sign in") }),
-      /* @__PURE__ */ jsx("div", { className: "text-xs text-muted-foreground mt-2", children: /* @__PURE__ */ jsx(Link, { className: "underline", href: "/reset", children: translate("auth.login.forgotPassword", "Forgot password?") }) })
+      /* @__PURE__ */ jsx(Button, { type: "submit", disabled: submitting, className: "h-10 mt-2", children: submitting ? translate("auth.login.loading", "Loading...") : authOverride ? authOverride.providerLabel : translate("auth.signIn", "Sign in") }),
+      !authOverride?.hideForgotPassword && /* @__PURE__ */ jsx("div", { className: "text-xs text-muted-foreground mt-2", children: /* @__PURE__ */ jsx(Link, { className: "underline", href: "/reset", children: translate("auth.login.forgotPassword", "Forgot password?") }) })
     ] }) })
   ] }) });
 }

package/dist/modules/auth/frontend/login.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/auth/frontend/login.tsx"],
-  "sourcesContent": ["\"use client\"\nimport { useCallback, useEffect, useState } from 'react'\nimport Image from 'next/image'\nimport Link from 'next/link'\nimport { useRouter, useSearchParams } from 'next/navigation'\nimport { Card, CardContent, CardHeader, CardDescription } from '@open-mercato/ui/primitives/card'\nimport { Input } from '@open-mercato/ui/primitives/input'\nimport { Label } from '@open-mercato/ui/primitives/label'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { translateWithFallback } from '@open-mercato/shared/lib/i18n/translate'\nimport { clearAllOperations } from '@open-mercato/ui/backend/operations/store'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { X } from 'lucide-react'\nimport { Notice } from '@open-mercato/ui/primitives/Notice'\n\nconst loginTenantKey = 'om_login_tenant'\nconst loginTenantCookieMaxAge = 60 * 60 * 24 * 14\n\nfunction readTenantCookie() {\n  if (typeof document === 'undefined') return null\n  const entries = document.cookie.split(';')\n  for (const entry of entries) {\n    const [name, ...rest] = entry.trim().split('=')\n    if (name === loginTenantKey) return decodeURIComponent(rest.join('='))\n  }\n  return null\n}\n\nfunction setTenantCookie(value: string) {\n  if (typeof document === 'undefined') return\n  document.cookie = `${loginTenantKey}=${encodeURIComponent(value)}; path=/; max-age=${loginTenantCookieMaxAge}; samesite=lax`\n}\n\nfunction clearTenantCookie() {\n  if (typeof document === 'undefined') return\n  document.cookie = `${loginTenantKey}=; path=/; max-age=0; samesite=lax`\n}\n\nfunction extractErrorMessage(payload: unknown): string | null {\n  if (!payload) return null\n  if (typeof payload === 'string') return payload\n  if (Array.isArray(payload)) {\n    for (const entry of payload) {\n      const resolved = extractErrorMessage(entry)\n      if (resolved) return resolved\n    }\n    return null\n  }\n  if (typeof payload === 'object') {\n    const record = payload as Record<string, unknown>\n    const candidates: unknown[] = [\n      record.error,\n      record.message,\n      record.detail,\n      record.details,\n      record.description,\n    ]\n    for (const candidate of candidates) {\n      const resolved = extractErrorMessage(candidate)\n      if (resolved) return resolved\n    }\n  }\n  return null\n}\n\nfunction looksLikeJsonString(value: string): boolean {\n  const trimmed = value.trim()\n  return trimmed.startsWith('{') || trimmed.startsWith('[')\n}\n\nexport default function LoginPage() {\n  const t = useT()\n  const translate = useCallback(\n    (key: string, fallback: string, params?: Record<string, string | number>) =>\n      translateWithFallback(t, key, fallback, params),\n    [t],\n  )\n  const router = useRouter()\n  const searchParams = useSearchParams()\n  const requireRole = (searchParams.get('requireRole') || searchParams.get('role') || '').trim()\n  const requireFeature = (searchParams.get('requireFeature') || '').trim()\n  const requiredRoles = requireRole ? requireRole.split(',').map((value) => value.trim()).filter(Boolean) : []\n  const requiredFeatures = requireFeature ? requireFeature.split(',').map((value) => value.trim()).filter(Boolean) : []\n  const translatedRoles = requiredRoles.map((role) => translate(`auth.roles.${role}`, role))\n  const translatedFeatures = requiredFeatures.map((feature) => translate(`features.${feature}`, feature))\n  const [error, setError] = useState<string | null>(null)\n  const [submitting, setSubmitting] = useState(false)\n  const [tenantId, setTenantId] = useState<string | null>(null)\n  const [tenantName, setTenantName] = useState<string | null>(null)\n  const [tenantLoading, setTenantLoading] = useState(false)\n  const [tenantInvalid, setTenantInvalid] = useState<string | null>(null)\n  const showTenantInvalid = tenantId != null && tenantInvalid === tenantId\n\n  useEffect(() => {\n    const tenantParam = (searchParams.get('tenant') || '').trim()\n    if (tenantParam) {\n      setTenantId(tenantParam)\n      window.localStorage.setItem(loginTenantKey, tenantParam)\n      setTenantCookie(tenantParam)\n      return\n    }\n    const storedTenant = window.localStorage.getItem(loginTenantKey) || readTenantCookie()\n    if (storedTenant) {\n      setTenantId(storedTenant)\n    }\n  }, [searchParams])\n\n  useEffect(() => {\n    if (!tenantId) {\n      setTenantName(null)\n      setTenantInvalid(null)\n      return\n    }\n    if (tenantInvalid === tenantId) {\n      setTenantName(null)\n      setTenantLoading(false)\n      return\n    }\n    let active = true\n    setTenantLoading(true)\n    setTenantInvalid(null)\n    apiCall<{ ok: boolean; tenant?: { id: string; name: string }; error?: string }>(\n      `/api/directory/tenants/lookup?tenantId=${encodeURIComponent(tenantId)}`,\n    )\n      .then(({ result }) => {\n        if (!active) return\n        if (result?.ok && result.tenant) {\n          setTenantName(result.tenant.name)\n          return\n        }\n        const message = translate('auth.login.errors.tenantInvalid', 'Tenant not found. Clear the tenant selection and try again.')\n        setTenantName(null)\n        setTenantInvalid(tenantId)\n        setError(null)\n      })\n      .catch(() => {\n        if (!active) return\n        setTenantName(null)\n        setTenantInvalid(tenantId)\n        setError(null)\n      })\n      .finally(() => {\n        if (active) setTenantLoading(false)\n      })\n    return () => {\n      active = false\n    }\n  }, [tenantId, translate])\n\n  function handleClearTenant() {\n    window.localStorage.removeItem(loginTenantKey)\n    clearTenantCookie()\n    setTenantId(null)\n    setTenantName(null)\n    setTenantInvalid(null)\n    const params = new URLSearchParams(searchParams)\n    params.delete('tenant')\n    setError(null)\n    const query = params.toString()\n    router.replace(query ? `/login?${query}` : '/login')\n  }\n\n  async function onSubmit(e: React.FormEvent<HTMLFormElement>) {\n    e.preventDefault()\n    setError(null)\n    setSubmitting(true)\n    try {\n      const form = new FormData(e.currentTarget)\n      if (requiredRoles.length) form.set('requireRole', requiredRoles.join(','))\n      const res = await fetch('/api/auth/login', { method: 'POST', body: form })\n      if (res.redirected) {\n        clearAllOperations()\n        // NextResponse.redirect from API\n        router.replace(res.url)\n        return\n      }\n      if (!res.ok) {\n        const fallback = (() => {\n          if (res.status === 403) {\n            return translate(\n              'auth.login.errors.permissionDenied',\n              'You do not have permission to access this area. Please contact your administrator.',\n            )\n          }\n          if (res.status === 401 || res.status === 400) {\n            return translate('auth.login.errors.invalidCredentials', 'Invalid email or password')\n          }\n          return translate('auth.login.errors.generic', 'An error occurred. Please try again.')\n        })()\n        const cloned = res.clone()\n        let errorMessage = ''\n        const contentType = res.headers.get('content-type') || ''\n        if (contentType.includes('application/json')) {\n          try {\n            const data = await res.json()\n            errorMessage = extractErrorMessage(data) || ''\n          } catch {\n            try {\n              const text = await cloned.text()\n              const trimmed = text.trim()\n              if (trimmed && !looksLikeJsonString(trimmed)) {\n                errorMessage = trimmed\n              }\n            } catch {\n              errorMessage = ''\n            }\n          }\n        } else {\n          try {\n            const text = await res.text()\n            const trimmed = text.trim()\n            if (trimmed && !looksLikeJsonString(trimmed)) {\n              errorMessage = trimmed\n            }\n          } catch {\n            errorMessage = ''\n          }\n        }\n        setError(errorMessage || fallback)\n        return\n      }\n      // In case API returns 200 with JSON\n      const data = await res.json().catch(() => null)\n      clearAllOperations()\n      if (data && data.redirect) {\n        router.replace(data.redirect)\n      }\n    } catch (err: unknown) {\n      // Handle any errors thrown (e.g., network errors or thrown exceptions)\n      const message = err instanceof Error ? err.message : ''\n      setError(message || translate('auth.login.errors.generic', 'An error occurred. Please try again.'))\n    } finally {\n      setSubmitting(false)\n    }\n  }\n\n  return (\n    <div className=\"min-h-svh flex items-center justify-center p-4\">\n      <Card className=\"w-full max-w-sm\">\n        <CardHeader className=\"flex flex-col items-center gap-4 text-center p-10\">\n          <Image alt={translate('auth.login.logoAlt', 'Open Mercato logo')} src=\"/open-mercato.svg\" width={150} height={150} priority />\n          <h1 className=\"text-2xl font-semibold\">{translate('auth.login.brandName', 'Open Mercato')}</h1>\n          <CardDescription>{translate('auth.login.subtitle', 'Access your workspace')}</CardDescription>\n        </CardHeader>\n        <CardContent>\n          <form className=\"grid gap-3\" onSubmit={onSubmit} noValidate>\n            {tenantId ? (\n              <input type=\"hidden\" name=\"tenantId\" value={tenantId} />\n            ) : null}\n            {!!translatedRoles.length && (\n              <Notice compact className=\"text-center\">\n                {translate(\n                  translatedRoles.length > 1 ? 'auth.login.requireRolesMessage' : 'auth.login.requireRoleMessage',\n                  translatedRoles.length > 1\n                    ? 'Access requires one of the following roles: {roles}'\n                    : 'Access requires role: {roles}',\n                  { roles: translatedRoles.join(', ') },\n                )}\n              </Notice>\n            )}\n            {!!translatedFeatures.length && (\n              <Notice compact className=\"text-center\">\n                {translate('auth.login.featureDenied', \"You don't have access to this feature ({feature}). Please contact your administrator.\", {\n                  feature: translatedFeatures.join(', '),\n                })}\n              </Notice>\n            )}\n            {showTenantInvalid ? (\n              <div className=\"rounded-md border border-red-200 bg-red-50 px-3 py-2 text-center text-xs text-red-700\">\n                <div className=\"font-medium\">{translate('auth.login.errors.tenantInvalid', 'Tenant not found. Clear the tenant selection and try again.')}</div>\n                <Button type=\"button\" variant=\"outline\" size=\"sm\" className=\"mt-2 border-red-300 text-red-700\" onClick={handleClearTenant}>\n                  <X className=\"mr-2 size-4\" aria-hidden=\"true\" />\n                  {translate('auth.login.tenantClear', 'Clear')}\n                </Button>\n              </div>\n            ) : tenantId ? (\n              <div className=\"rounded-md border border-emerald-200 bg-emerald-50 px-3 py-2 text-center text-xs text-emerald-900\">\n                <div className=\"font-medium\">\n                  {tenantLoading\n                    ? translate('auth.login.tenantLoading', 'Loading tenant details...')\n                    : translate('auth.login.tenantBanner', \"You're logging in to {tenant} tenant.\", {\n                        tenant: tenantName || tenantId,\n                      })}\n                </div>\n                <Button type=\"button\" variant=\"outline\" size=\"sm\" className=\"mt-2 border-emerald-300 text-emerald-900\" onClick={handleClearTenant}>\n                  <X className=\"mr-2 size-4\" aria-hidden=\"true\" />\n                  {translate('auth.login.tenantClear', 'Clear')}\n                </Button>\n              </div>\n            ) : null}\n            {error && !showTenantInvalid && (\n              <div className=\"rounded-md border border-red-200 bg-red-50 px-3 py-2 text-center text-sm text-red-700\" role=\"alert\" aria-live=\"polite\">\n                {error}\n              </div>\n            )}\n            <div className=\"grid gap-1\">\n              <Label htmlFor=\"email\">{t('auth.email')}</Label>\n              <Input id=\"email\" name=\"email\" type=\"email\" required aria-invalid={!!error} />\n            </div>\n            <div className=\"grid gap-1\">\n              <Label htmlFor=\"password\">{t('auth.password')}</Label>\n              <Input id=\"password\" name=\"password\" type=\"password\" required aria-invalid={!!error} />\n            </div>\n            <label className=\"flex items-center gap-2 text-xs text-muted-foreground\">\n              <input type=\"checkbox\" name=\"remember\" className=\"accent-foreground\" />\n              <span>{translate('auth.login.rememberMe', 'Remember me')}</span>\n            </label>\n            <Button type=\"submit\" className=\"mt-2 w-full\" disabled={submitting}>\n              {submitting ? translate('auth.login.loading', 'Loading...') : translate('auth.signIn', 'Sign in')}\n            </Button>\n            <div className=\"text-xs text-muted-foreground mt-2\">\n              <Link className=\"underline\" href=\"/reset\">\n                {translate('auth.login.forgotPassword', 'Forgot password?')}\n              </Link>\n            </div>\n          </form>\n        </CardContent>\n      </Card>\n    </div>\n  )\n}\n"],
-  "mappings": ";AAgPQ,SACE,KADF;AA/OR,SAAS,aAAa,WAAW,gBAAgB;AACjD,OAAO,WAAW;AAClB,OAAO,UAAU;AACjB,SAAS,WAAW,uBAAuB;AAC3C,SAAS,MAAM,aAAa,YAAY,uBAAuB;AAC/D,SAAS,aAAa;AACtB,SAAS,aAAa;AACtB,SAAS,cAAc;AACvB,SAAS,YAAY;AACrB,SAAS,6BAA6B;AACtC,SAAS,0BAA0B;AACnC,SAAS,eAAe;AACxB,SAAS,SAAS;AAClB,SAAS,cAAc;AAEvB,MAAM,iBAAiB;AACvB,MAAM,0BAA0B,KAAK,KAAK,KAAK;AAE/C,SAAS,mBAAmB;AAC1B,MAAI,OAAO,aAAa,YAAa,QAAO;AAC5C,QAAM,UAAU,SAAS,OAAO,MAAM,GAAG;AACzC,aAAW,SAAS,SAAS;AAC3B,UAAM,CAAC,MAAM,GAAG,IAAI,IAAI,MAAM,KAAK,EAAE,MAAM,GAAG;AAC9C,QAAI,SAAS,eAAgB,QAAO,mBAAmB,KAAK,KAAK,GAAG,CAAC;AAAA,EACvE;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,OAAe;AACtC,MAAI,OAAO,aAAa,YAAa;AACrC,WAAS,SAAS,GAAG,cAAc,IAAI,mBAAmB,KAAK,CAAC,qBAAqB,uBAAuB;AAC9G;AAEA,SAAS,oBAAoB;AAC3B,MAAI,OAAO,aAAa,YAAa;AACrC,WAAS,SAAS,GAAG,cAAc;AACrC;AAEA,SAAS,oBAAoB,SAAiC;AAC5D,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI,OAAO,YAAY,SAAU,QAAO;AACxC,MAAI,MAAM,QAAQ,OAAO,GAAG;AAC1B,eAAW,SAAS,SAAS;AAC3B,YAAM,WAAW,oBAAoB,KAAK;AAC1C,UAAI,SAAU,QAAO;AAAA,IACvB;AACA,WAAO;AAAA,EACT;AACA,MAAI,OAAO,YAAY,UAAU;AAC/B,UAAM,SAAS;AACf,UAAM,aAAwB;AAAA,MAC5B,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,IACT;AACA,eAAW,aAAa,YAAY;AAClC,YAAM,WAAW,oBAAoB,SAAS;AAC9C,UAAI,SAAU,QAAO;AAAA,IACvB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAwB;AACnD,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW,GAAG;AAC1D;AAEe,SAAR,YAA6B;AAClC,QAAM,IAAI,KAAK;AACf,QAAM,YAAY;AAAA,IAChB,CAAC,KAAa,UAAkB,WAC9B,sBAAsB,GAAG,KAAK,UAAU,MAAM;AAAA,IAChD,CAAC,CAAC;AAAA,EACJ;AACA,QAAM,SAAS,UAAU;AACzB,QAAM,eAAe,gBAAgB;AACrC,QAAM,eAAe,aAAa,IAAI,aAAa,KAAK,aAAa,IAAI,MAAM,KAAK,IAAI,KAAK;AAC7F,QAAM,kBAAkB,aAAa,IAAI,gBAAgB,KAAK,IAAI,KAAK;AACvE,QAAM,gBAAgB,cAAc,YAAY,MAAM,GAAG,EAAE,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAAE,OAAO,OAAO,IAAI,CAAC;AAC3G,QAAM,mBAAmB,iBAAiB,eAAe,MAAM,GAAG,EAAE,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAAE,OAAO,OAAO,IAAI,CAAC;AACpH,QAAM,kBAAkB,cAAc,IAAI,CAAC,SAAS,UAAU,cAAc,IAAI,IAAI,IAAI,CAAC;AACzF,QAAM,qBAAqB,iBAAiB,IAAI,CAAC,YAAY,UAAU,YAAY,OAAO,IAAI,OAAO,CAAC;AACtG,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAwB,IAAI;AACtD,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,KAAK;AAClD,QAAM,CAAC,UAAU,WAAW,IAAI,SAAwB,IAAI;AAC5D,QAAM,CAAC,YAAY,aAAa,IAAI,SAAwB,IAAI;AAChE,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAAS,KAAK;AACxD,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAAwB,IAAI;AACtE,QAAM,oBAAoB,YAAY,QAAQ,kBAAkB;AAEhE,YAAU,MAAM;AACd,UAAM,eAAe,aAAa,IAAI,QAAQ,KAAK,IAAI,KAAK;AAC5D,QAAI,aAAa;AACf,kBAAY,WAAW;AACvB,aAAO,aAAa,QAAQ,gBAAgB,WAAW;AACvD,sBAAgB,WAAW;AAC3B;AAAA,IACF;AACA,UAAM,eAAe,OAAO,aAAa,QAAQ,cAAc,KAAK,iBAAiB;AACrF,QAAI,cAAc;AAChB,kBAAY,YAAY;AAAA,IAC1B;AAAA,EACF,GAAG,CAAC,YAAY,CAAC;AAEjB,YAAU,MAAM;AACd,QAAI,CAAC,UAAU;AACb,oBAAc,IAAI;AAClB,uBAAiB,IAAI;AACrB;AAAA,IACF;AACA,QAAI,kBAAkB,UAAU;AAC9B,oBAAc,IAAI;AAClB,uBAAiB,KAAK;AACtB;AAAA,IACF;AACA,QAAI,SAAS;AACb,qBAAiB,IAAI;AACrB,qBAAiB,IAAI;AACrB;AAAA,MACE,0CAA0C,mBAAmB,QAAQ,CAAC;AAAA,IACxE,EACG,KAAK,CAAC,EAAE,OAAO,MAAM;AACpB,UAAI,CAAC,OAAQ;AACb,UAAI,QAAQ,MAAM,OAAO,QAAQ;AAC/B,sBAAc,OAAO,OAAO,IAAI;AAChC;AAAA,MACF;AACA,YAAM,UAAU,UAAU,mCAAmC,6DAA6D;AAC1H,oBAAc,IAAI;AAClB,uBAAiB,QAAQ;AACzB,eAAS,IAAI;AAAA,IACf,CAAC,EACA,MAAM,MAAM;AACX,UAAI,CAAC,OAAQ;AACb,oBAAc,IAAI;AAClB,uBAAiB,QAAQ;AACzB,eAAS,IAAI;AAAA,IACf,CAAC,EACA,QAAQ,MAAM;AACb,UAAI,OAAQ,kBAAiB,KAAK;AAAA,IACpC,CAAC;AACH,WAAO,MAAM;AACX,eAAS;AAAA,IACX;AAAA,EACF,GAAG,CAAC,UAAU,SAAS,CAAC;AAExB,WAAS,oBAAoB;AAC3B,WAAO,aAAa,WAAW,cAAc;AAC7C,sBAAkB;AAClB,gBAAY,IAAI;AAChB,kBAAc,IAAI;AAClB,qBAAiB,IAAI;AACrB,UAAM,SAAS,IAAI,gBAAgB,YAAY;AAC/C,WAAO,OAAO,QAAQ;AACtB,aAAS,IAAI;AACb,UAAM,QAAQ,OAAO,SAAS;AAC9B,WAAO,QAAQ,QAAQ,UAAU,KAAK,KAAK,QAAQ;AAAA,EACrD;AAEA,iBAAe,SAAS,GAAqC;AAC3D,MAAE,eAAe;AACjB,aAAS,IAAI;AACb,kBAAc,IAAI;AAClB,QAAI;AACF,YAAM,OAAO,IAAI,SAAS,EAAE,aAAa;AACzC,UAAI,cAAc,OAAQ,MAAK,IAAI,eAAe,cAAc,KAAK,GAAG,CAAC;AACzE,YAAM,MAAM,MAAM,MAAM,mBAAmB,EAAE,QAAQ,QAAQ,MAAM,KAAK,CAAC;AACzE,UAAI,IAAI,YAAY;AAClB,2BAAmB;AAEnB,eAAO,QAAQ,IAAI,GAAG;AACtB;AAAA,MACF;AACA,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,YAAY,MAAM;AACtB,cAAI,IAAI,WAAW,KAAK;AACtB,mBAAO;AAAA,cACL;AAAA,cACA;AAAA,YACF;AAAA,UACF;AACA,cAAI,IAAI,WAAW,OAAO,IAAI,WAAW,KAAK;AAC5C,mBAAO,UAAU,wCAAwC,2BAA2B;AAAA,UACtF;AACA,iBAAO,UAAU,6BAA6B,sCAAsC;AAAA,QACtF,GAAG;AACH,cAAM,SAAS,IAAI,MAAM;AACzB,YAAI,eAAe;AACnB,cAAM,cAAc,IAAI,QAAQ,IAAI,cAAc,KAAK;AACvD,YAAI,YAAY,SAAS,kBAAkB,GAAG;AAC5C,cAAI;AACF,kBAAMA,QAAO,MAAM,IAAI,KAAK;AAC5B,2BAAe,oBAAoBA,KAAI,KAAK;AAAA,UAC9C,QAAQ;AACN,gBAAI;AACF,oBAAM,OAAO,MAAM,OAAO,KAAK;AAC/B,oBAAM,UAAU,KAAK,KAAK;AAC1B,kBAAI,WAAW,CAAC,oBAAoB,OAAO,GAAG;AAC5C,+BAAe;AAAA,cACjB;AAAA,YACF,QAAQ;AACN,6BAAe;AAAA,YACjB;AAAA,UACF;AAAA,QACF,OAAO;AACL,cAAI;AACF,kBAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,kBAAM,UAAU,KAAK,KAAK;AAC1B,gBAAI,WAAW,CAAC,oBAAoB,OAAO,GAAG;AAC5C,6BAAe;AAAA,YACjB;AAAA,UACF,QAAQ;AACN,2BAAe;AAAA,UACjB;AAAA,QACF;AACA,iBAAS,gBAAgB,QAAQ;AACjC;AAAA,MACF;AAEA,YAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AAC9C,yBAAmB;AACnB,UAAI,QAAQ,KAAK,UAAU;AACzB,eAAO,QAAQ,KAAK,QAAQ;AAAA,MAC9B;AAAA,IACF,SAAS,KAAc;AAErB,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,eAAS,WAAW,UAAU,6BAA6B,sCAAsC,CAAC;AAAA,IACpG,UAAE;AACA,oBAAc,KAAK;AAAA,IACrB;AAAA,EACF;AAEA,SACE,oBAAC,SAAI,WAAU,kDACb,+BAAC,QAAK,WAAU,mBACd;AAAA,yBAAC,cAAW,WAAU,qDACpB;AAAA,0BAAC,SAAM,KAAK,UAAU,sBAAsB,mBAAmB,GAAG,KAAI,qBAAoB,OAAO,KAAK,QAAQ,KAAK,UAAQ,MAAC;AAAA,MAC5H,oBAAC,QAAG,WAAU,0BAA0B,oBAAU,wBAAwB,cAAc,GAAE;AAAA,MAC1F,oBAAC,mBAAiB,oBAAU,uBAAuB,uBAAuB,GAAE;AAAA,OAC9E;AAAA,IACA,oBAAC,eACC,+BAAC,UAAK,WAAU,cAAa,UAAoB,YAAU,MACxD;AAAA,iBACC,oBAAC,WAAM,MAAK,UAAS,MAAK,YAAW,OAAO,UAAU,IACpD;AAAA,MACH,CAAC,CAAC,gBAAgB,UACjB,oBAAC,UAAO,SAAO,MAAC,WAAU,eACvB;AAAA,QACC,gBAAgB,SAAS,IAAI,mCAAmC;AAAA,QAChE,gBAAgB,SAAS,IACrB,wDACA;AAAA,QACJ,EAAE,OAAO,gBAAgB,KAAK,IAAI,EAAE;AAAA,MACtC,GACF;AAAA,MAED,CAAC,CAAC,mBAAmB,UACpB,oBAAC,UAAO,SAAO,MAAC,WAAU,eACvB,oBAAU,4BAA4B,yFAAyF;AAAA,QAC9H,SAAS,mBAAmB,KAAK,IAAI;AAAA,MACvC,CAAC,GACH;AAAA,MAED,oBACC,qBAAC,SAAI,WAAU,yFACb;AAAA,4BAAC,SAAI,WAAU,eAAe,oBAAU,mCAAmC,6DAA6D,GAAE;AAAA,QAC1I,qBAAC,UAAO,MAAK,UAAS,SAAQ,WAAU,MAAK,MAAK,WAAU,oCAAmC,SAAS,mBACtG;AAAA,8BAAC,KAAE,WAAU,eAAc,eAAY,QAAO;AAAA,UAC7C,UAAU,0BAA0B,OAAO;AAAA,WAC9C;AAAA,SACF,IACE,WACF,qBAAC,SAAI,WAAU,qGACb;AAAA,4BAAC,SAAI,WAAU,eACZ,0BACG,UAAU,4BAA4B,2BAA2B,IACjE,UAAU,2BAA2B,yCAAyC;AAAA,UAC5E,QAAQ,cAAc;AAAA,QACxB,CAAC,GACP;AAAA,QACA,qBAAC,UAAO,MAAK,UAAS,SAAQ,WAAU,MAAK,MAAK,WAAU,4CAA2C,SAAS,mBAC9G;AAAA,8BAAC,KAAE,WAAU,eAAc,eAAY,QAAO;AAAA,UAC7C,UAAU,0BAA0B,OAAO;AAAA,WAC9C;AAAA,SACF,IACE;AAAA,MACH,SAAS,CAAC,qBACT,oBAAC,SAAI,WAAU,yFAAwF,MAAK,SAAQ,aAAU,UAC3H,iBACH;AAAA,MAEF,qBAAC,SAAI,WAAU,cACb;AAAA,4BAAC,SAAM,SAAQ,SAAS,YAAE,YAAY,GAAE;AAAA,QACxC,oBAAC,SAAM,IAAG,SAAQ,MAAK,SAAQ,MAAK,SAAQ,UAAQ,MAAC,gBAAc,CAAC,CAAC,OAAO;AAAA,SAC9E;AAAA,MACA,qBAAC,SAAI,WAAU,cACb;AAAA,4BAAC,SAAM,SAAQ,YAAY,YAAE,eAAe,GAAE;AAAA,QAC9C,oBAAC,SAAM,IAAG,YAAW,MAAK,YAAW,MAAK,YAAW,UAAQ,MAAC,gBAAc,CAAC,CAAC,OAAO;AAAA,SACvF;AAAA,MACA,qBAAC,WAAM,WAAU,yDACf;AAAA,4BAAC,WAAM,MAAK,YAAW,MAAK,YAAW,WAAU,qBAAoB;AAAA,QACrE,oBAAC,UAAM,oBAAU,yBAAyB,aAAa,GAAE;AAAA,SAC3D;AAAA,MACA,oBAAC,UAAO,MAAK,UAAS,WAAU,eAAc,UAAU,YACrD,uBAAa,UAAU,sBAAsB,YAAY,IAAI,UAAU,eAAe,SAAS,GAClG;AAAA,MACA,oBAAC,SAAI,WAAU,sCACb,8BAAC,QAAK,WAAU,aAAY,MAAK,UAC9B,oBAAU,6BAA6B,kBAAkB,GAC5D,GACF;AAAA,OACF,GACF;AAAA,KACF,GACF;AAEJ;",
+  "sourcesContent": ["\"use client\"\nimport { useCallback, useEffect, useMemo, useState } from 'react'\nimport Image from 'next/image'\nimport Link from 'next/link'\nimport { useRouter, useSearchParams } from 'next/navigation'\nimport { Card, CardContent, CardHeader, CardDescription } from '@open-mercato/ui/primitives/card'\nimport { Input } from '@open-mercato/ui/primitives/input'\nimport { Label } from '@open-mercato/ui/primitives/label'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { translateWithFallback } from '@open-mercato/shared/lib/i18n/translate'\nimport { clearAllOperations } from '@open-mercato/ui/backend/operations/store'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { X } from 'lucide-react'\nimport { Notice } from '@open-mercato/ui/primitives/Notice'\nimport { InjectionSpot } from '@open-mercato/ui/backend/injection/InjectionSpot'\nimport type { AuthOverride, LoginFormWidgetContext } from './login-injection'\n\nconst loginTenantKey = 'om_login_tenant'\nconst loginTenantCookieMaxAge = 60 * 60 * 24 * 14\n\nfunction readTenantCookie() {\n  if (typeof document === 'undefined') return null\n  const entries = document.cookie.split(';')\n  for (const entry of entries) {\n    const [name, ...rest] = entry.trim().split('=')\n    if (name === loginTenantKey) return decodeURIComponent(rest.join('='))\n  }\n  return null\n}\n\nfunction setTenantCookie(value: string) {\n  if (typeof document === 'undefined') return\n  document.cookie = `${loginTenantKey}=${encodeURIComponent(value)}; path=/; max-age=${loginTenantCookieMaxAge}; samesite=lax`\n}\n\nfunction clearTenantCookie() {\n  if (typeof document === 'undefined') return\n  document.cookie = `${loginTenantKey}=; path=/; max-age=0; samesite=lax`\n}\n\nfunction extractErrorMessage(payload: unknown): string | null {\n  if (!payload) return null\n  if (typeof payload === 'string') return payload\n  if (Array.isArray(payload)) {\n    for (const entry of payload) {\n      const resolved = extractErrorMessage(entry)\n      if (resolved) return resolved\n    }\n    return null\n  }\n  if (typeof payload === 'object') {\n    const record = payload as Record<string, unknown>\n    const candidates: unknown[] = [\n      record.error,\n      record.message,\n      record.detail,\n      record.details,\n      record.description,\n    ]\n    for (const candidate of candidates) {\n      const resolved = extractErrorMessage(candidate)\n      if (resolved) return resolved\n    }\n  }\n  return null\n}\n\nfunction looksLikeJsonString(value: string): boolean {\n  const trimmed = value.trim()\n  return trimmed.startsWith('{') || trimmed.startsWith('[')\n}\n\nexport default function LoginPage() {\n  const t = useT()\n  const translate = useCallback(\n    (key: string, fallback: string, params?: Record<string, string | number>) =>\n      translateWithFallback(t, key, fallback, params),\n    [t],\n  )\n  const router = useRouter()\n  const searchParams = useSearchParams()\n  const requireRole = (searchParams.get('requireRole') || searchParams.get('role') || '').trim()\n  const requireFeature = (searchParams.get('requireFeature') || '').trim()\n  const requiredRoles = requireRole ? requireRole.split(',').map((value) => value.trim()).filter(Boolean) : []\n  const requiredFeatures = requireFeature ? requireFeature.split(',').map((value) => value.trim()).filter(Boolean) : []\n  const translatedRoles = requiredRoles.map((role) => translate(`auth.roles.${role}`, role))\n  const translatedFeatures = requiredFeatures.map((feature) => translate(`features.${feature}`, feature))\n  const [error, setError] = useState<string | null>(null)\n  const [submitting, setSubmitting] = useState(false)\n  const [authOverride, setAuthOverride] = useState<AuthOverride | null>(null)\n  const [email, setEmail] = useState('')\n  const [tenantId, setTenantId] = useState<string | null>(null)\n  const [tenantName, setTenantName] = useState<string | null>(null)\n  const [tenantLoading, setTenantLoading] = useState(false)\n  const [tenantInvalid, setTenantInvalid] = useState<string | null>(null)\n  const showTenantInvalid = tenantId != null && tenantInvalid === tenantId\n\n  useEffect(() => {\n    const tenantParam = (searchParams.get('tenant') || '').trim()\n    if (tenantParam) {\n      setTenantId(tenantParam)\n      window.localStorage.setItem(loginTenantKey, tenantParam)\n      setTenantCookie(tenantParam)\n      return\n    }\n    const storedTenant = window.localStorage.getItem(loginTenantKey) || readTenantCookie()\n    if (storedTenant) {\n      setTenantId(storedTenant)\n    }\n  }, [searchParams])\n\n  useEffect(() => {\n    if (!tenantId) {\n      setTenantName(null)\n      setTenantInvalid(null)\n      return\n    }\n    if (tenantInvalid === tenantId) {\n      setTenantName(null)\n      setTenantLoading(false)\n      return\n    }\n    let active = true\n    setTenantLoading(true)\n    setTenantInvalid(null)\n    apiCall<{ ok: boolean; tenant?: { id: string; name: string }; error?: string }>(\n      `/api/directory/tenants/lookup?tenantId=${encodeURIComponent(tenantId)}`,\n    )\n      .then(({ result }) => {\n        if (!active) return\n        if (result?.ok && result.tenant) {\n          setTenantName(result.tenant.name)\n          return\n        }\n        const message = translate('auth.login.errors.tenantInvalid', 'Tenant not found. Clear the tenant selection and try again.')\n        setTenantName(null)\n        setTenantInvalid(tenantId)\n        setError(null)\n      })\n      .catch(() => {\n        if (!active) return\n        setTenantName(null)\n        setTenantInvalid(tenantId)\n        setError(null)\n      })\n      .finally(() => {\n        if (active) setTenantLoading(false)\n      })\n    return () => {\n      active = false\n    }\n  }, [tenantId, translate])\n\n  function handleClearTenant() {\n    window.localStorage.removeItem(loginTenantKey)\n    clearTenantCookie()\n    setTenantId(null)\n    setTenantName(null)\n    setTenantInvalid(null)\n    const params = new URLSearchParams(searchParams)\n    params.delete('tenant')\n    setError(null)\n    const query = params.toString()\n    router.replace(query ? `/login?${query}` : '/login')\n  }\n\n  async function onSubmit(e: React.FormEvent<HTMLFormElement>) {\n    e.preventDefault()\n    setError(null)\n    if (authOverride) {\n      authOverride.onSubmit()\n      return\n    }\n    setSubmitting(true)\n    try {\n      const form = new FormData(e.currentTarget)\n      if (requiredRoles.length) form.set('requireRole', requiredRoles.join(','))\n      const res = await fetch('/api/auth/login', { method: 'POST', body: form })\n      if (res.redirected) {\n        clearAllOperations()\n        // NextResponse.redirect from API\n        router.replace(res.url)\n        return\n      }\n      if (!res.ok) {\n        const fallback = (() => {\n          if (res.status === 403) {\n            return translate(\n              'auth.login.errors.permissionDenied',\n              'You do not have permission to access this area. Please contact your administrator.',\n            )\n          }\n          if (res.status === 401 || res.status === 400) {\n            return translate('auth.login.errors.invalidCredentials', 'Invalid email or password')\n          }\n          return translate('auth.login.errors.generic', 'An error occurred. Please try again.')\n        })()\n        const cloned = res.clone()\n        let errorMessage = ''\n        const contentType = res.headers.get('content-type') || ''\n        if (contentType.includes('application/json')) {\n          try {\n            const data = await res.json()\n            errorMessage = extractErrorMessage(data) || ''\n          } catch {\n            try {\n              const text = await cloned.text()\n              const trimmed = text.trim()\n              if (trimmed && !looksLikeJsonString(trimmed)) {\n                errorMessage = trimmed\n              }\n            } catch {\n              errorMessage = ''\n            }\n          }\n        } else {\n          try {\n            const text = await res.text()\n            const trimmed = text.trim()\n            if (trimmed && !looksLikeJsonString(trimmed)) {\n              errorMessage = trimmed\n            }\n          } catch {\n            errorMessage = ''\n          }\n        }\n        setError(errorMessage || fallback)\n        return\n      }\n      // In case API returns 200 with JSON\n      const data = await res.json().catch(() => null)\n      clearAllOperations()\n      if (data && data.redirect) {\n        router.replace(data.redirect)\n      }\n    } catch (err: unknown) {\n      // Handle any errors thrown (e.g., network errors or thrown exceptions)\n      const message = err instanceof Error ? err.message : ''\n      setError(message || translate('auth.login.errors.generic', 'An error occurred. Please try again.'))\n    } finally {\n      setSubmitting(false)\n    }\n  }\n\n  const loginFormContext = useMemo<LoginFormWidgetContext>(() => ({\n    email,\n    tenantId,\n    searchParams,\n    setAuthOverride,\n    setError,\n  }), [email, tenantId, searchParams])\n\n  return (\n    <div className=\"min-h-svh flex items-center justify-center p-4\">\n      <Card className=\"w-full max-w-sm\">\n        <CardHeader className=\"flex flex-col items-center gap-4 text-center p-10\">\n          <Image alt={translate('auth.login.logoAlt', 'Open Mercato logo')} src=\"/open-mercato.svg\" width={150} height={150} priority />\n          <h1 className=\"text-2xl font-semibold\">{translate('auth.login.brandName', 'Open Mercato')}</h1>\n          <CardDescription>{translate('auth.login.subtitle', 'Access your workspace')}</CardDescription>\n        </CardHeader>\n        <CardContent>\n          <form className=\"grid gap-3\" onSubmit={onSubmit} noValidate>\n            {tenantId ? (\n              <input type=\"hidden\" name=\"tenantId\" value={tenantId} />\n            ) : null}\n            {!!translatedRoles.length && (\n              <Notice compact className=\"text-center\">\n                {translate(\n                  translatedRoles.length > 1 ? 'auth.login.requireRolesMessage' : 'auth.login.requireRoleMessage',\n                  translatedRoles.length > 1\n                    ? 'Access requires one of the following roles: {roles}'\n                    : 'Access requires role: {roles}',\n                  { roles: translatedRoles.join(', ') },\n                )}\n              </Notice>\n            )}\n            {!!translatedFeatures.length && (\n              <Notice compact className=\"text-center\">\n                {translate('auth.login.featureDenied', \"You don't have access to this feature ({feature}). Please contact your administrator.\", {\n                  feature: translatedFeatures.join(', '),\n                })}\n              </Notice>\n            )}\n            {showTenantInvalid ? (\n              <div className=\"rounded-md border border-red-200 bg-red-50 px-3 py-2 text-center text-xs text-red-700\">\n                <div className=\"font-medium\">{translate('auth.login.errors.tenantInvalid', 'Tenant not found. Clear the tenant selection and try again.')}</div>\n                <Button type=\"button\" variant=\"outline\" size=\"sm\" className=\"mt-2 border-red-300 text-red-700\" onClick={handleClearTenant}>\n                  <X className=\"mr-2 size-4\" aria-hidden=\"true\" />\n                  {translate('auth.login.tenantClear', 'Clear')}\n                </Button>\n              </div>\n            ) : tenantId ? (\n              <div className=\"rounded-md border border-emerald-200 bg-emerald-50 px-3 py-2 text-center text-xs text-emerald-900\">\n                <div className=\"font-medium\">\n                  {tenantLoading\n                    ? translate('auth.login.tenantLoading', 'Loading tenant details...')\n                    : translate('auth.login.tenantBanner', \"You're logging in to {tenant} tenant.\", {\n                        tenant: tenantName || tenantId,\n                      })}\n                </div>\n                <Button type=\"button\" variant=\"outline\" size=\"sm\" className=\"mt-2 border-emerald-300 text-emerald-900\" onClick={handleClearTenant}>\n                  <X className=\"mr-2 size-4\" aria-hidden=\"true\" />\n                  {translate('auth.login.tenantClear', 'Clear')}\n                </Button>\n              </div>\n            ) : null}\n            {error && !showTenantInvalid && (\n              <div className=\"rounded-md border border-red-200 bg-red-50 px-3 py-2 text-center text-sm text-red-700\" role=\"alert\" aria-live=\"polite\">\n                {error}\n              </div>\n            )}\n            <div className=\"grid gap-1\">\n              <Label htmlFor=\"email\">{t('auth.email')}</Label>\n              <Input\n                id=\"email\"\n                name=\"email\"\n                type=\"email\"\n                required\n                aria-invalid={!!error}\n                onBlur={(e) => setEmail(e.target.value)}\n              />\n            </div>\n            <InjectionSpot<LoginFormWidgetContext>\n              spotId=\"auth.login:form\"\n              context={loginFormContext}\n            />\n            {authOverride?.hidePassword ? null : (\n              <div className=\"grid gap-1\">\n                <Label htmlFor=\"password\">{t('auth.password')}</Label>\n                <Input id=\"password\" name=\"password\" type=\"password\" required={!authOverride} aria-invalid={!!error} />\n              </div>\n            )}\n            {!authOverride?.hideRememberMe && !authOverride?.hidePassword && (\n              <label className=\"flex items-center gap-2 text-xs text-muted-foreground\">\n                <input type=\"checkbox\" name=\"remember\" className=\"accent-foreground\" />\n                <span>{translate('auth.login.rememberMe', 'Remember me')}</span>\n              </label>\n            )}\n            <Button type=\"submit\" disabled={submitting} className=\"h-10 mt-2\">\n              {submitting\n                ? translate('auth.login.loading', 'Loading...')\n                : authOverride\n                  ? authOverride.providerLabel\n                  : translate('auth.signIn', 'Sign in')}\n            </Button>\n            {!authOverride?.hideForgotPassword && (\n              <div className=\"text-xs text-muted-foreground mt-2\">\n                <Link className=\"underline\" href=\"/reset\">\n                  {translate('auth.login.forgotPassword', 'Forgot password?')}\n                </Link>\n              </div>\n            )}\n          </form>\n        </CardContent>\n      </Card>\n    </div>\n  )\n}\n"],
+  "mappings": ";AAgQQ,SACE,KADF;AA/PR,SAAS,aAAa,WAAW,SAAS,gBAAgB;AAC1D,OAAO,WAAW;AAClB,OAAO,UAAU;AACjB,SAAS,WAAW,uBAAuB;AAC3C,SAAS,MAAM,aAAa,YAAY,uBAAuB;AAC/D,SAAS,aAAa;AACtB,SAAS,aAAa;AACtB,SAAS,cAAc;AACvB,SAAS,YAAY;AACrB,SAAS,6BAA6B;AACtC,SAAS,0BAA0B;AACnC,SAAS,eAAe;AACxB,SAAS,SAAS;AAClB,SAAS,cAAc;AACvB,SAAS,qBAAqB;AAG9B,MAAM,iBAAiB;AACvB,MAAM,0BAA0B,KAAK,KAAK,KAAK;AAE/C,SAAS,mBAAmB;AAC1B,MAAI,OAAO,aAAa,YAAa,QAAO;AAC5C,QAAM,UAAU,SAAS,OAAO,MAAM,GAAG;AACzC,aAAW,SAAS,SAAS;AAC3B,UAAM,CAAC,MAAM,GAAG,IAAI,IAAI,MAAM,KAAK,EAAE,MAAM,GAAG;AAC9C,QAAI,SAAS,eAAgB,QAAO,mBAAmB,KAAK,KAAK,GAAG,CAAC;AAAA,EACvE;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,OAAe;AACtC,MAAI,OAAO,aAAa,YAAa;AACrC,WAAS,SAAS,GAAG,cAAc,IAAI,mBAAmB,KAAK,CAAC,qBAAqB,uBAAuB;AAC9G;AAEA,SAAS,oBAAoB;AAC3B,MAAI,OAAO,aAAa,YAAa;AACrC,WAAS,SAAS,GAAG,cAAc;AACrC;AAEA,SAAS,oBAAoB,SAAiC;AAC5D,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI,OAAO,YAAY,SAAU,QAAO;AACxC,MAAI,MAAM,QAAQ,OAAO,GAAG;AAC1B,eAAW,SAAS,SAAS;AAC3B,YAAM,WAAW,oBAAoB,KAAK;AAC1C,UAAI,SAAU,QAAO;AAAA,IACvB;AACA,WAAO;AAAA,EACT;AACA,MAAI,OAAO,YAAY,UAAU;AAC/B,UAAM,SAAS;AACf,UAAM,aAAwB;AAAA,MAC5B,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,IACT;AACA,eAAW,aAAa,YAAY;AAClC,YAAM,WAAW,oBAAoB,SAAS;AAC9C,UAAI,SAAU,QAAO;AAAA,IACvB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAwB;AACnD,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW,GAAG;AAC1D;AAEe,SAAR,YAA6B;AAClC,QAAM,IAAI,KAAK;AACf,QAAM,YAAY;AAAA,IAChB,CAAC,KAAa,UAAkB,WAC9B,sBAAsB,GAAG,KAAK,UAAU,MAAM;AAAA,IAChD,CAAC,CAAC;AAAA,EACJ;AACA,QAAM,SAAS,UAAU;AACzB,QAAM,eAAe,gBAAgB;AACrC,QAAM,eAAe,aAAa,IAAI,aAAa,KAAK,aAAa,IAAI,MAAM,KAAK,IAAI,KAAK;AAC7F,QAAM,kBAAkB,aAAa,IAAI,gBAAgB,KAAK,IAAI,KAAK;AACvE,QAAM,gBAAgB,cAAc,YAAY,MAAM,GAAG,EAAE,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAAE,OAAO,OAAO,IAAI,CAAC;AAC3G,QAAM,mBAAmB,iBAAiB,eAAe,MAAM,GAAG,EAAE,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAAE,OAAO,OAAO,IAAI,CAAC;AACpH,QAAM,kBAAkB,cAAc,IAAI,CAAC,SAAS,UAAU,cAAc,IAAI,IAAI,IAAI,CAAC;AACzF,QAAM,qBAAqB,iBAAiB,IAAI,CAAC,YAAY,UAAU,YAAY,OAAO,IAAI,OAAO,CAAC;AACtG,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAwB,IAAI;AACtD,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,KAAK;AAClD,QAAM,CAAC,cAAc,eAAe,IAAI,SAA8B,IAAI;AAC1E,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,EAAE;AACrC,QAAM,CAAC,UAAU,WAAW,IAAI,SAAwB,IAAI;AAC5D,QAAM,CAAC,YAAY,aAAa,IAAI,SAAwB,IAAI;AAChE,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAAS,KAAK;AACxD,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAAwB,IAAI;AACtE,QAAM,oBAAoB,YAAY,QAAQ,kBAAkB;AAEhE,YAAU,MAAM;AACd,UAAM,eAAe,aAAa,IAAI,QAAQ,KAAK,IAAI,KAAK;AAC5D,QAAI,aAAa;AACf,kBAAY,WAAW;AACvB,aAAO,aAAa,QAAQ,gBAAgB,WAAW;AACvD,sBAAgB,WAAW;AAC3B;AAAA,IACF;AACA,UAAM,eAAe,OAAO,aAAa,QAAQ,cAAc,KAAK,iBAAiB;AACrF,QAAI,cAAc;AAChB,kBAAY,YAAY;AAAA,IAC1B;AAAA,EACF,GAAG,CAAC,YAAY,CAAC;AAEjB,YAAU,MAAM;AACd,QAAI,CAAC,UAAU;AACb,oBAAc,IAAI;AAClB,uBAAiB,IAAI;AACrB;AAAA,IACF;AACA,QAAI,kBAAkB,UAAU;AAC9B,oBAAc,IAAI;AAClB,uBAAiB,KAAK;AACtB;AAAA,IACF;AACA,QAAI,SAAS;AACb,qBAAiB,IAAI;AACrB,qBAAiB,IAAI;AACrB;AAAA,MACE,0CAA0C,mBAAmB,QAAQ,CAAC;AAAA,IACxE,EACG,KAAK,CAAC,EAAE,OAAO,MAAM;AACpB,UAAI,CAAC,OAAQ;AACb,UAAI,QAAQ,MAAM,OAAO,QAAQ;AAC/B,sBAAc,OAAO,OAAO,IAAI;AAChC;AAAA,MACF;AACA,YAAM,UAAU,UAAU,mCAAmC,6DAA6D;AAC1H,oBAAc,IAAI;AAClB,uBAAiB,QAAQ;AACzB,eAAS,IAAI;AAAA,IACf,CAAC,EACA,MAAM,MAAM;AACX,UAAI,CAAC,OAAQ;AACb,oBAAc,IAAI;AAClB,uBAAiB,QAAQ;AACzB,eAAS,IAAI;AAAA,IACf,CAAC,EACA,QAAQ,MAAM;AACb,UAAI,OAAQ,kBAAiB,KAAK;AAAA,IACpC,CAAC;AACH,WAAO,MAAM;AACX,eAAS;AAAA,IACX;AAAA,EACF,GAAG,CAAC,UAAU,SAAS,CAAC;AAExB,WAAS,oBAAoB;AAC3B,WAAO,aAAa,WAAW,cAAc;AAC7C,sBAAkB;AAClB,gBAAY,IAAI;AAChB,kBAAc,IAAI;AAClB,qBAAiB,IAAI;AACrB,UAAM,SAAS,IAAI,gBAAgB,YAAY;AAC/C,WAAO,OAAO,QAAQ;AACtB,aAAS,IAAI;AACb,UAAM,QAAQ,OAAO,SAAS;AAC9B,WAAO,QAAQ,QAAQ,UAAU,KAAK,KAAK,QAAQ;AAAA,EACrD;AAEA,iBAAe,SAAS,GAAqC;AAC3D,MAAE,eAAe;AACjB,aAAS,IAAI;AACb,QAAI,cAAc;AAChB,mBAAa,SAAS;AACtB;AAAA,IACF;AACA,kBAAc,IAAI;AAClB,QAAI;AACF,YAAM,OAAO,IAAI,SAAS,EAAE,aAAa;AACzC,UAAI,cAAc,OAAQ,MAAK,IAAI,eAAe,cAAc,KAAK,GAAG,CAAC;AACzE,YAAM,MAAM,MAAM,MAAM,mBAAmB,EAAE,QAAQ,QAAQ,MAAM,KAAK,CAAC;AACzE,UAAI,IAAI,YAAY;AAClB,2BAAmB;AAEnB,eAAO,QAAQ,IAAI,GAAG;AACtB;AAAA,MACF;AACA,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,YAAY,MAAM;AACtB,cAAI,IAAI,WAAW,KAAK;AACtB,mBAAO;AAAA,cACL;AAAA,cACA;AAAA,YACF;AAAA,UACF;AACA,cAAI,IAAI,WAAW,OAAO,IAAI,WAAW,KAAK;AAC5C,mBAAO,UAAU,wCAAwC,2BAA2B;AAAA,UACtF;AACA,iBAAO,UAAU,6BAA6B,sCAAsC;AAAA,QACtF,GAAG;AACH,cAAM,SAAS,IAAI,MAAM;AACzB,YAAI,eAAe;AACnB,cAAM,cAAc,IAAI,QAAQ,IAAI,cAAc,KAAK;AACvD,YAAI,YAAY,SAAS,kBAAkB,GAAG;AAC5C,cAAI;AACF,kBAAMA,QAAO,MAAM,IAAI,KAAK;AAC5B,2BAAe,oBAAoBA,KAAI,KAAK;AAAA,UAC9C,QAAQ;AACN,gBAAI;AACF,oBAAM,OAAO,MAAM,OAAO,KAAK;AAC/B,oBAAM,UAAU,KAAK,KAAK;AAC1B,kBAAI,WAAW,CAAC,oBAAoB,OAAO,GAAG;AAC5C,+BAAe;AAAA,cACjB;AAAA,YACF,QAAQ;AACN,6BAAe;AAAA,YACjB;AAAA,UACF;AAAA,QACF,OAAO;AACL,cAAI;AACF,kBAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,kBAAM,UAAU,KAAK,KAAK;AAC1B,gBAAI,WAAW,CAAC,oBAAoB,OAAO,GAAG;AAC5C,6BAAe;AAAA,YACjB;AAAA,UACF,QAAQ;AACN,2BAAe;AAAA,UACjB;AAAA,QACF;AACA,iBAAS,gBAAgB,QAAQ;AACjC;AAAA,MACF;AAEA,YAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AAC9C,yBAAmB;AACnB,UAAI,QAAQ,KAAK,UAAU;AACzB,eAAO,QAAQ,KAAK,QAAQ;AAAA,MAC9B;AAAA,IACF,SAAS,KAAc;AAErB,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,eAAS,WAAW,UAAU,6BAA6B,sCAAsC,CAAC;AAAA,IACpG,UAAE;AACA,oBAAc,KAAK;AAAA,IACrB;AAAA,EACF;AAEA,QAAM,mBAAmB,QAAgC,OAAO;AAAA,IAC9D;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI,CAAC,OAAO,UAAU,YAAY,CAAC;AAEnC,SACE,oBAAC,SAAI,WAAU,kDACb,+BAAC,QAAK,WAAU,mBACd;AAAA,yBAAC,cAAW,WAAU,qDACpB;AAAA,0BAAC,SAAM,KAAK,UAAU,sBAAsB,mBAAmB,GAAG,KAAI,qBAAoB,OAAO,KAAK,QAAQ,KAAK,UAAQ,MAAC;AAAA,MAC5H,oBAAC,QAAG,WAAU,0BAA0B,oBAAU,wBAAwB,cAAc,GAAE;AAAA,MAC1F,oBAAC,mBAAiB,oBAAU,uBAAuB,uBAAuB,GAAE;AAAA,OAC9E;AAAA,IACA,oBAAC,eACC,+BAAC,UAAK,WAAU,cAAa,UAAoB,YAAU,MACxD;AAAA,iBACC,oBAAC,WAAM,MAAK,UAAS,MAAK,YAAW,OAAO,UAAU,IACpD;AAAA,MACH,CAAC,CAAC,gBAAgB,UACjB,oBAAC,UAAO,SAAO,MAAC,WAAU,eACvB;AAAA,QACC,gBAAgB,SAAS,IAAI,mCAAmC;AAAA,QAChE,gBAAgB,SAAS,IACrB,wDACA;AAAA,QACJ,EAAE,OAAO,gBAAgB,KAAK,IAAI,EAAE;AAAA,MACtC,GACF;AAAA,MAED,CAAC,CAAC,mBAAmB,UACpB,oBAAC,UAAO,SAAO,MAAC,WAAU,eACvB,oBAAU,4BAA4B,yFAAyF;AAAA,QAC9H,SAAS,mBAAmB,KAAK,IAAI;AAAA,MACvC,CAAC,GACH;AAAA,MAED,oBACC,qBAAC,SAAI,WAAU,yFACb;AAAA,4BAAC,SAAI,WAAU,eAAe,oBAAU,mCAAmC,6DAA6D,GAAE;AAAA,QAC1I,qBAAC,UAAO,MAAK,UAAS,SAAQ,WAAU,MAAK,MAAK,WAAU,oCAAmC,SAAS,mBACtG;AAAA,8BAAC,KAAE,WAAU,eAAc,eAAY,QAAO;AAAA,UAC7C,UAAU,0BAA0B,OAAO;AAAA,WAC9C;AAAA,SACF,IACE,WACF,qBAAC,SAAI,WAAU,qGACb;AAAA,4BAAC,SAAI,WAAU,eACZ,0BACG,UAAU,4BAA4B,2BAA2B,IACjE,UAAU,2BAA2B,yCAAyC;AAAA,UAC5E,QAAQ,cAAc;AAAA,QACxB,CAAC,GACP;AAAA,QACA,qBAAC,UAAO,MAAK,UAAS,SAAQ,WAAU,MAAK,MAAK,WAAU,4CAA2C,SAAS,mBAC9G;AAAA,8BAAC,KAAE,WAAU,eAAc,eAAY,QAAO;AAAA,UAC7C,UAAU,0BAA0B,OAAO;AAAA,WAC9C;AAAA,SACF,IACE;AAAA,MACH,SAAS,CAAC,qBACT,oBAAC,SAAI,WAAU,yFAAwF,MAAK,SAAQ,aAAU,UAC3H,iBACH;AAAA,MAEF,qBAAC,SAAI,WAAU,cACb;AAAA,4BAAC,SAAM,SAAQ,SAAS,YAAE,YAAY,GAAE;AAAA,QACxC;AAAA,UAAC;AAAA;AAAA,YACC,IAAG;AAAA,YACH,MAAK;AAAA,YACL,MAAK;AAAA,YACL,UAAQ;AAAA,YACR,gBAAc,CAAC,CAAC;AAAA,YAChB,QAAQ,CAAC,MAAM,SAAS,EAAE,OAAO,KAAK;AAAA;AAAA,QACxC;AAAA,SACF;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,QAAO;AAAA,UACP,SAAS;AAAA;AAAA,MACX;AAAA,MACC,cAAc,eAAe,OAC5B,qBAAC,SAAI,WAAU,cACb;AAAA,4BAAC,SAAM,SAAQ,YAAY,YAAE,eAAe,GAAE;AAAA,QAC9C,oBAAC,SAAM,IAAG,YAAW,MAAK,YAAW,MAAK,YAAW,UAAU,CAAC,cAAc,gBAAc,CAAC,CAAC,OAAO;AAAA,SACvG;AAAA,MAED,CAAC,cAAc,kBAAkB,CAAC,cAAc,gBAC/C,qBAAC,WAAM,WAAU,yDACf;AAAA,4BAAC,WAAM,MAAK,YAAW,MAAK,YAAW,WAAU,qBAAoB;AAAA,QACrE,oBAAC,UAAM,oBAAU,yBAAyB,aAAa,GAAE;AAAA,SAC3D;AAAA,MAEF,oBAAC,UAAO,MAAK,UAAS,UAAU,YAAY,WAAU,aACnD,uBACG,UAAU,sBAAsB,YAAY,IAC5C,eACE,aAAa,gBACb,UAAU,eAAe,SAAS,GAC1C;AAAA,MACC,CAAC,cAAc,sBACd,oBAAC,SAAI,WAAU,sCACb,8BAAC,QAAK,WAAU,aAAY,MAAK,UAC9B,oBAAU,6BAA6B,kBAAkB,GAC5D,GACF;AAAA,OAEJ,GACF;AAAA,KACF,GACF;AAEJ;",
   "names": ["data"]
 }

package/dist/modules/translations/components/TranslationManager.js CHANGED Viewed

@@ -328,6 +328,7 @@ function TranslationManager({
           size: "sm",
           onClick: () => mutation.mutate(),
           disabled: mutation.isPending || !entityType || !recordId,
+          "data-testid": "translations-save",
           children: [
             /* @__PURE__ */ jsx(Save, { className: "mr-2 h-3 w-3" }),
             mutation.isPending ? t("translations.manager.actions.saving", "Saving...") : t("translations.manager.actions.save", "Save translations")
@@ -373,6 +374,7 @@ function TranslationManager({
         type: "button",
         onClick: () => mutation.mutate(),
         disabled: mutation.isPending || loadingEntities || !!entitiesError || !entityType || !recordId,
+        "data-testid": "translations-save",
         children: [
           /* @__PURE__ */ jsx(Save, { className: "mr-2 h-4 w-4" }),
           mutation.isPending ? t("translations.manager.actions.saving", "Saving...") : t("translations.manager.actions.save", "Save translations")

package/dist/modules/translations/components/TranslationManager.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/translations/components/TranslationManager.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { useQuery, useMutation, useQueryClient } from '@tanstack/react-query'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Input } from '@open-mercato/ui/primitives/input'\nimport { ComboboxInput } from '@open-mercato/ui/backend/inputs'\nimport { LoadingMessage, ErrorMessage } from '@open-mercato/ui/backend/detail'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { apiCall, readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { useCustomFieldDefs } from '@open-mercato/ui/backend/utils/customFieldDefs'\nimport { Save, Plus, X } from 'lucide-react'\nimport { useOrganizationScopeVersion } from '@open-mercato/shared/lib/frontend/useOrganizationScope'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { locales as defaultLocales } from '@open-mercato/shared/lib/i18n/config'\nimport { ISO_639_1, isValidIso639, getIso639Label } from '@open-mercato/shared/lib/i18n/iso639'\nimport { formatEntityLabel, buildEntityListUrl, getRecordLabel, resolveBaseValue } from '../lib/helpers'\nimport { resolveFieldList } from '../lib/resolve-field-list'\nimport type { ResolvedField } from '../lib/resolve-field-list'\n\ntype TranslationManagerProps = {\n  entityType?: string\n  recordId?: string\n  baseValues?: Record<string, unknown>\n  translatableFields?: string[]\n  mode?: 'standalone' | 'embedded'\n  compact?: boolean\n}\n\ntype EntityOption = { entityId: string; label?: string; source?: string }\n\ntype TranslationsResponse = {\n  entityType: string\n  entityId: string\n  translations: Record<string, Record<string, unknown>>\n  createdAt?: string\n  updatedAt?: string\n}\n\nfunction useTranslationLocales() {\n  return useQuery<string[]>({\n    queryKey: ['translation-locales'],\n    queryFn: async () => {\n      const res = await apiCall<{ locales: string[] }>('/api/translations/locales')\n      if (!res.ok) return [...defaultLocales]\n      return Array.isArray(res.result?.locales) && res.result.locales.length > 0\n        ? res.result.locales\n        : [...defaultLocales]\n    },\n    staleTime: 60_000,\n  })\n}\n\nexport function TranslationManager({\n  entityType: propEntityType,\n  recordId: propRecordId,\n  baseValues: propBaseValues,\n  translatableFields: propTranslatableFields,\n  mode = 'standalone',\n  compact = false,\n}: TranslationManagerProps) {\n  const t = useT()\n  const scopeVersion = useOrganizationScopeVersion()\n  const isEmbedded = mode === 'embedded'\n\n  const [selectedEntityType, setSelectedEntityType] = React.useState(propEntityType ?? '')\n  const [selectedRecordId, setSelectedRecordId] = React.useState(propRecordId ?? '')\n  const [activeLocale, setActiveLocale] = React.useState('')\n  const [editedTranslations, setEditedTranslations] = React.useState<Record<string, Record<string, string>>>({})\n  const [hasUserEdited, setHasUserEdited] = React.useState(false)\n\n  const entityType = isEmbedded ? (propEntityType ?? '') : selectedEntityType\n  const recordId = isEmbedded ? (propRecordId ?? '') : selectedRecordId\n\n  const { data: locales = [...defaultLocales] } = useTranslationLocales()\n\n  React.useEffect(() => {\n    if (locales.length > 0 && (!activeLocale || !locales.includes(activeLocale))) {\n      setActiveLocale(locales[0])\n    }\n  }, [locales, activeLocale])\n\n  React.useEffect(() => {\n    if (isEmbedded && propEntityType) setSelectedEntityType(propEntityType)\n  }, [isEmbedded, propEntityType])\n\n  React.useEffect(() => {\n    if (isEmbedded && propRecordId) setSelectedRecordId(propRecordId)\n  }, [isEmbedded, propRecordId])\n\n  const { data: entities, isLoading: loadingEntities, error: entitiesError } = useQuery<{ items: EntityOption[] }>({\n    queryKey: ['entities-list', scopeVersion],\n    enabled: !isEmbedded,\n    queryFn: async () =>\n      readApiResultOrThrow('/api/entities/entities', undefined, {\n        errorMessage: t('translations.manager.errors.loadEntities', 'Failed to load entities'),\n      }),\n  })\n\n  const entitySuggestions = React.useMemo(\n    () =>\n      (entities?.items || []).map((item) => ({\n        value: item.entityId,\n        label: formatEntityLabel(item.entityId, item.label),\n        description: item.entityId,\n      })),\n    [entities],\n  )\n\n  const resolveEntityLabel = React.useCallback(\n    (value: string) => {\n      const match = entities?.items?.find((e) => e.entityId === value)\n      return match ? formatEntityLabel(match.entityId, match.label) : formatEntityLabel(value)\n    },\n    [entities],\n  )\n\n  const listUrl = React.useMemo(() => entityType ? buildEntityListUrl(entityType) : null, [entityType])\n\n  const loadRecordSuggestions = React.useCallback(\n    async (query?: string) => {\n      if (!entityType || !listUrl) return []\n      const url = `${listUrl}?pageSize=20${query ? `&search=${encodeURIComponent(query)}` : ''}`\n      const res = await apiCall<{ items: Array<Record<string, unknown>> }>(url)\n      if (!res.ok) return []\n      const items = res.result?.items ?? []\n      return items.map((item) => ({\n        value: String(item.id ?? ''),\n        label: getRecordLabel(item),\n      }))\n    },\n    [entityType, listUrl],\n  )\n\n  const { data: recordData } = useQuery<Record<string, unknown> | null>({\n    queryKey: ['translation-record-data', entityType, recordId, listUrl, scopeVersion],\n    enabled: !isEmbedded && !!entityType && !!recordId && !!listUrl,\n    queryFn: async () => {\n      const res = await apiCall<{ items: Array<Record<string, unknown>> }>(\n        // Some APIs filter by `id` (catalog), others by `ids` (resources) \u2014 send both so the one recognized by the target route's buildFilters is applied\n        `${listUrl}?id=${encodeURIComponent(recordId)}&ids=${encodeURIComponent(recordId)}&pageSize=1`,\n      )\n      if (!res.ok) return null\n      const items = res.result?.items\n      return Array.isArray(items) && items.length > 0 ? items[0] : null\n    },\n  })\n\n  const baseValues = isEmbedded ? (propBaseValues ?? {}) : (recordData ?? {})\n\n  const resolveRecordLabel = React.useCallback(\n    (value: string) => {\n      if (recordData) return getRecordLabel(recordData)\n      return value\n    },\n    [recordData],\n  )\n\n  const { data: fieldDefs = [], isLoading: loadingFieldDefs } = useCustomFieldDefs(entityType ? [entityType] : [], {\n    enabled: !!entityType,\n  })\n\n  const fieldList = React.useMemo(\n    () => resolveFieldList(entityType, propTranslatableFields, fieldDefs as Array<{ key: string; kind: string; label?: string }>),\n    [entityType, propTranslatableFields, fieldDefs],\n  )\n\n  const {\n    data: translationData,\n    isLoading: loadingTranslation,\n    isError: translationError,\n    refetch: refetchTranslation,\n  } = useQuery<TranslationsResponse | null>({\n    queryKey: ['entity-translation', entityType, recordId, scopeVersion],\n    enabled: !!entityType && !!recordId,\n    queryFn: async () => {\n      const res = await apiCall<TranslationsResponse>(\n        `/api/translations/${encodeURIComponent(entityType)}/${encodeURIComponent(recordId)}`,\n      )\n      if (!res.ok) {\n        if (res.response?.status === 404) return null\n        return null\n      }\n      return res.result ?? null\n    },\n  })\n\n  const translationSignature = React.useMemo(() => JSON.stringify(translationData ?? null), [translationData])\n  const lastTranslationSignatureRef = React.useRef<string | null>(null)\n\n  React.useEffect(() => {\n    const sig = translationSignature\n    if (sig === lastTranslationSignatureRef.current && hasUserEdited) return\n    lastTranslationSignatureRef.current = sig\n\n    if (!translationData?.translations) {\n      if (!hasUserEdited) setEditedTranslations({})\n      return\n    }\n\n    const parsed: Record<string, Record<string, string>> = {}\n    for (const [locale, fields] of Object.entries(translationData.translations)) {\n      if (!fields || typeof fields !== 'object') continue\n      parsed[locale] = {}\n      for (const [key, val] of Object.entries(fields)) {\n        parsed[locale][key] = typeof val === 'string' ? val : ''\n      }\n    }\n    if (!hasUserEdited) setEditedTranslations(parsed)\n  }, [translationSignature, translationData, hasUserEdited])\n\n  const mutation = useMutation({\n    mutationFn: async () => {\n      if (!entityType || !recordId) {\n        throw new Error(t('translations.manager.errors.selectRecord', 'Select an entity and record before saving'))\n      }\n      const body: Record<string, Record<string, string | null>> = {}\n      for (const [locale, fields] of Object.entries(editedTranslations)) {\n        const localeFields: Record<string, string | null> = {}\n        let hasValues = false\n        for (const [key, val] of Object.entries(fields)) {\n          if (val && val.trim().length > 0) {\n            localeFields[key] = val.trim()\n            hasValues = true\n          }\n        }\n        if (hasValues) body[locale] = localeFields\n      }\n      const res = await apiCall(\n        `/api/translations/${encodeURIComponent(entityType)}/${encodeURIComponent(recordId)}`,\n        {\n          method: 'PUT',\n          headers: { 'content-type': 'application/json' },\n          body: JSON.stringify(body),\n        },\n      )\n      if (!res.ok) {\n        throw new Error(t('translations.manager.errors.save', 'Failed to save translations'))\n      }\n      return true\n    },\n    onSuccess: () => {\n      flash(t('translations.manager.flash.saved', 'Translations saved'), 'success')\n      setHasUserEdited(false)\n      void refetchTranslation()\n    },\n    onError: (err: unknown) => {\n      const message = err instanceof Error ? err.message : t('translations.manager.errors.save', 'Failed to save translations')\n      flash(message, 'error')\n    },\n  })\n\n  const updateFieldValue = (locale: string, fieldKey: string, value: string) => {\n    setHasUserEdited(true)\n    setEditedTranslations((prev) => ({\n      ...prev,\n      [locale]: {\n        ...prev[locale],\n        [fieldKey]: value,\n      },\n    }))\n  }\n\n  const getBaseValue = (fieldKey: string): string => resolveBaseValue(baseValues, fieldKey)\n\n  const renderRecordPicker = () => {\n    if (isEmbedded) return null\n\n    return (\n      <div className=\"space-y-2\">\n        <label className=\"text-xs text-muted-foreground\">\n          {t('translations.manager.selectRecord', 'Select record')}\n        </label>\n        <ComboboxInput\n          value={selectedRecordId}\n          onChange={(next) => {\n            setSelectedRecordId(next)\n            setHasUserEdited(false)\n          }}\n          placeholder={t('translations.manager.searchRecords', 'Search records...')}\n          loadSuggestions={loadRecordSuggestions}\n          resolveLabel={resolveRecordLabel}\n          allowCustomValues\n          disabled={!entityType}\n        />\n      </div>\n    )\n  }\n\n  const renderLocaleTabs = () => (\n    <div className=\"flex gap-1 border-b\">\n      {locales.map((locale) => (\n        <button\n          key={locale}\n          type=\"button\"\n          className={`px-3 py-1.5 text-sm font-medium transition-colors ${\n            activeLocale === locale\n              ? 'border-b-2 border-primary text-primary'\n              : 'text-muted-foreground hover:text-foreground'\n          }`}\n          onClick={() => setActiveLocale(locale)}\n        >\n          {locale.toUpperCase()}\n        </button>\n      ))}\n    </div>\n  )\n\n  const renderFieldTable = () => {\n    if (!entityType || !recordId) {\n      return (\n        <div className=\"rounded border bg-background/70 p-4 text-sm text-muted-foreground\">\n          {t('translations.manager.selectFirst', 'Select an entity and record to manage translations.')}\n        </div>\n      )\n    }\n    if (loadingTranslation || loadingFieldDefs) {\n      return (\n        <LoadingMessage\n          label={t('translations.manager.loadingTranslations', 'Loading translations...')}\n          className=\"border-0 bg-transparent p-4\"\n        />\n      )\n    }\n    if (translationError) {\n      return (\n        <ErrorMessage\n          label={t('translations.manager.errors.loadTranslation', 'Failed to load translations')}\n          action={(\n            <Button variant=\"outline\" size=\"sm\" onClick={() => void refetchTranslation()}>\n              {t('translations.manager.actions.retry', 'Retry')}\n            </Button>\n          )}\n        />\n      )\n    }\n    if (!fieldList.length) {\n      return (\n        <div className=\"rounded border bg-background/70 p-4 text-sm text-muted-foreground\">\n          {t('translations.manager.noFields', 'No translatable fields found for this entity type.')}\n        </div>\n      )\n    }\n\n    const localeTranslations = editedTranslations[activeLocale] ?? {}\n\n    return (\n      <div className=\"overflow-x-auto\">\n        <table className=\"w-full min-w-[480px] text-sm\">\n          <thead>\n            <tr className=\"text-xs uppercase tracking-wide text-muted-foreground\">\n              <th className=\"px-3 py-2 text-left w-[140px]\">\n                {t('translations.manager.fields.field', 'Field')}\n              </th>\n              {!compact && (\n                <th className=\"px-3 py-2 text-left\">\n                  {t('translations.manager.fields.baseValue', 'Base value')}\n                </th>\n              )}\n              <th className=\"px-3 py-2 text-left\">\n                {t('translations.manager.fields.translation', 'Translation')} ({activeLocale.toUpperCase()})\n              </th>\n            </tr>\n          </thead>\n          <tbody>\n            {fieldList.map((field) => {\n              const baseVal = getBaseValue(field.key)\n              const translatedVal = localeTranslations[field.key] ?? ''\n\n              return (\n                <tr key={field.key} className=\"border-t\">\n                  <td className=\"px-3 py-2 align-top text-xs font-medium text-muted-foreground\">\n                    {field.label}\n                  </td>\n                  {!compact && (\n                    <td className=\"px-3 py-2 align-top text-xs text-muted-foreground max-w-[200px]\">\n                      {baseVal ? (\n                        <span className=\"line-clamp-3\">{baseVal}</span>\n                      ) : (\n                        <span className=\"text-muted-foreground/50\">-</span>\n                      )}\n                    </td>\n                  )}\n                  <td className=\"px-3 py-2 align-top\">\n                    {field.multiline ? (\n                      <textarea\n                        className=\"flex w-full rounded-md border border-input bg-background px-3 py-2 text-sm shadow-sm transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 disabled:cursor-not-allowed disabled:opacity-50\"\n                        rows={3}\n                        value={translatedVal}\n                        onChange={(e) => updateFieldValue(activeLocale, field.key, e.target.value)}\n                        placeholder={baseVal || field.label}\n                      />\n                    ) : (\n                      <Input\n                        value={translatedVal}\n                        onChange={(e) => updateFieldValue(activeLocale, field.key, e.target.value)}\n                        placeholder={baseVal || field.label}\n                      />\n                    )}\n                  </td>\n                </tr>\n              )\n            })}\n          </tbody>\n        </table>\n      </div>\n    )\n  }\n\n  React.useEffect(() => {\n    const handler = (e: KeyboardEvent) => {\n      if ((e.metaKey || e.ctrlKey) && e.key === 'Enter') {\n        e.preventDefault()\n        if (entityType && recordId && !mutation.isPending) mutation.mutate()\n      }\n    }\n    document.addEventListener('keydown', handler)\n    return () => document.removeEventListener('keydown', handler)\n  }, [entityType, recordId, mutation])\n\n  if (compact) {\n    return (\n      <div className=\"space-y-3\">\n        {renderLocaleTabs()}\n        {renderFieldTable()}\n        <div className=\"flex justify-end\">\n          <Button\n            type=\"button\"\n            size=\"sm\"\n            onClick={() => mutation.mutate()}\n            disabled={mutation.isPending || !entityType || !recordId}\n          >\n            <Save className=\"mr-2 h-3 w-3\" />\n            {mutation.isPending\n              ? t('translations.manager.actions.saving', 'Saving...')\n              : t('translations.manager.actions.save', 'Save translations')}\n          </Button>\n        </div>\n      </div>\n    )\n  }\n\n  return (\n    <div className=\"space-y-6\">\n      <div className=\"flex flex-col gap-3 rounded-lg border bg-card p-4 shadow-sm\">\n        <div className=\"space-y-2\">\n          <h2 className=\"text-xl font-semibold\">{t('translations.manager.title', 'Translations')}</h2>\n          <p className=\"text-sm text-muted-foreground\">\n            {t('translations.manager.description', 'Manage translations for entity records across supported locales.')}\n          </p>\n        </div>\n\n        {!isEmbedded && (\n          <div className=\"flex flex-col gap-4 sm:flex-row sm:items-start\">\n            <div className=\"flex-1 space-y-3\">\n              <div>\n                <label className=\"text-xs text-muted-foreground\">\n                  {t('translations.manager.selectEntity', 'Choose entity')}\n                </label>\n                <div className=\"mt-1\">\n                  <ComboboxInput\n                    value={selectedEntityType}\n                    onChange={(next) => {\n                      setSelectedEntityType(next)\n                      setSelectedRecordId('')\n                      setHasUserEdited(false)\n                    }}\n                    placeholder={t('translations.manager.placeholder', 'Select an entity')}\n                    suggestions={entitySuggestions}\n                    resolveLabel={resolveEntityLabel}\n                    disabled={loadingEntities || !!entitiesError}\n                  />\n                </div>\n                {entitiesError && (\n                  <p className=\"mt-1 text-xs text-red-600\">\n                    {t('translations.manager.errors.loadEntities', 'Failed to load entities')}\n                  </p>\n                )}\n              </div>\n              {renderRecordPicker()}\n            </div>\n          </div>\n        )}\n\n        <div className=\"rounded-lg border bg-background/70 p-4\">\n          {renderLocaleTabs()}\n          <div className=\"mt-3\">\n            {renderFieldTable()}\n          </div>\n        </div>\n\n        <div className=\"flex justify-end\">\n          <Button\n            type=\"button\"\n            onClick={() => mutation.mutate()}\n            disabled={mutation.isPending || loadingEntities || !!entitiesError || !entityType || !recordId}\n          >\n            <Save className=\"mr-2 h-4 w-4\" />\n            {mutation.isPending\n              ? t('translations.manager.actions.saving', 'Saving...')\n              : t('translations.manager.actions.save', 'Save translations')}\n          </Button>\n        </div>\n      </div>\n    </div>\n  )\n}\n\nexport function LocaleManager() {\n  const t = useT()\n  const queryClient = useQueryClient()\n  const { data: locales = [], isLoading } = useTranslationLocales()\n  const [newLocale, setNewLocale] = React.useState('')\n\n  const mutation = useMutation({\n    mutationFn: async (updatedLocales: string[]) => {\n      const res = await apiCall<{ locales: string[] }>('/api/translations/locales', {\n        method: 'PUT',\n        headers: { 'content-type': 'application/json' },\n        body: JSON.stringify({ locales: updatedLocales }),\n      })\n      if (!res.ok) throw new Error('Failed to save locales')\n      return res.result?.locales ?? updatedLocales\n    },\n    onSuccess: (result) => {\n      queryClient.setQueryData(['translation-locales'], result)\n      flash(t('translations.locales.flash.saved', 'Locales updated'), 'success')\n    },\n    onError: () => {\n      flash(t('translations.locales.flash.error', 'Failed to update locales'), 'error')\n    },\n  })\n\n  const availableLocales = React.useMemo(\n    () => ISO_639_1.filter((entry) => !locales.includes(entry.code)).map((entry) => ({\n      value: entry.code,\n      label: `${entry.code.toUpperCase()} \u2014 ${entry.label}`,\n    })),\n    [locales],\n  )\n\n  const addLocale = () => {\n    const code = newLocale.toLowerCase().trim()\n    if (!code || !isValidIso639(code) || locales.includes(code)) return\n    mutation.mutate([...locales, code])\n    setNewLocale('')\n  }\n\n  const removeLocale = (locale: string) => {\n    if (locales.length <= 1) return\n    mutation.mutate(locales.filter((l) => l !== locale))\n  }\n\n  if (isLoading) {\n    return <LoadingMessage label={t('translations.locales.loading', 'Loading locales...')} className=\"border-0 bg-transparent p-4\" />\n  }\n\n  return (\n    <div className=\"flex flex-col gap-3 rounded-lg border bg-card p-4 shadow-sm\">\n      <div className=\"space-y-1\">\n        <h3 className=\"text-lg font-semibold\">{t('translations.locales.title', 'Supported locales')}</h3>\n        <p className=\"text-sm text-muted-foreground\">\n          {t('translations.locales.description', 'Configure which locales are available for translations. Add ISO language codes (e.g. fr, it, ja, zh).')}\n        </p>\n      </div>\n\n      <div className=\"flex flex-wrap gap-2\">\n        {locales.map((locale) => (\n          <span\n            key={locale}\n            className=\"inline-flex items-center gap-1.5 rounded-full border bg-muted/50 px-3 py-1 text-sm font-medium\"\n            title={getIso639Label(locale) ?? locale}\n          >\n            {locale.toUpperCase()}{getIso639Label(locale) ? ` \u2014 ${getIso639Label(locale)}` : ''}\n            {locales.length > 1 && (\n              <button\n                type=\"button\"\n                className=\"rounded-full p-0.5 text-muted-foreground hover:text-foreground transition-colors\"\n                onClick={() => removeLocale(locale)}\n                disabled={mutation.isPending}\n              >\n                <X className=\"h-3 w-3\" />\n              </button>\n            )}\n          </span>\n        ))}\n      </div>\n\n      <div className=\"flex gap-2 items-center\">\n        <div className=\"max-w-[240px] flex-1\">\n          <ComboboxInput\n            value={newLocale}\n            onChange={setNewLocale}\n            placeholder={t('translations.locales.addPlaceholder', 'Search language...')}\n            suggestions={availableLocales}\n            resolveLabel={(value) => {\n              const label = getIso639Label(value)\n              return label ? `${value.toUpperCase()} \u2014 ${label}` : value.toUpperCase()\n            }}\n          />\n        </div>\n        <Button\n          variant=\"outline\"\n          size=\"sm\"\n          onClick={addLocale}\n          disabled={mutation.isPending || !newLocale.trim() || !isValidIso639(newLocale) || locales.includes(newLocale.toLowerCase().trim())}\n        >\n          <Plus className=\"mr-1 h-3 w-3\" />\n          {t('translations.locales.add', 'Add')}\n        </Button>\n      </div>\n    </div>\n  )\n}\n"],
-  "mappings": ";AA6QM,SACE,KADF;AA3QN,YAAY,WAAW;AACvB,SAAS,UAAU,aAAa,sBAAsB;AACtD,SAAS,cAAc;AACvB,SAAS,aAAa;AACtB,SAAS,qBAAqB;AAC9B,SAAS,gBAAgB,oBAAoB;AAC7C,SAAS,aAAa;AACtB,SAAS,SAAS,4BAA4B;AAC9C,SAAS,0BAA0B;AACnC,SAAS,MAAM,MAAM,SAAS;AAC9B,SAAS,mCAAmC;AAC5C,SAAS,YAAY;AACrB,SAAS,WAAW,sBAAsB;AAC1C,SAAS,WAAW,eAAe,sBAAsB;AACzD,SAAS,mBAAmB,oBAAoB,gBAAgB,wBAAwB;AACxF,SAAS,wBAAwB;AAsBjC,SAAS,wBAAwB;AAC/B,SAAO,SAAmB;AAAA,IACxB,UAAU,CAAC,qBAAqB;AAAA,IAChC,SAAS,YAAY;AACnB,YAAM,MAAM,MAAM,QAA+B,2BAA2B;AAC5E,UAAI,CAAC,IAAI,GAAI,QAAO,CAAC,GAAG,cAAc;AACtC,aAAO,MAAM,QAAQ,IAAI,QAAQ,OAAO,KAAK,IAAI,OAAO,QAAQ,SAAS,IACrE,IAAI,OAAO,UACX,CAAC,GAAG,cAAc;AAAA,IACxB;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AACH;AAEO,SAAS,mBAAmB;AAAA,EACjC,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,YAAY;AAAA,EACZ,oBAAoB;AAAA,EACpB,OAAO;AAAA,EACP,UAAU;AACZ,GAA4B;AAC1B,QAAM,IAAI,KAAK;AACf,QAAM,eAAe,4BAA4B;AACjD,QAAM,aAAa,SAAS;AAE5B,QAAM,CAAC,oBAAoB,qBAAqB,IAAI,MAAM,SAAS,kBAAkB,EAAE;AACvF,QAAM,CAAC,kBAAkB,mBAAmB,IAAI,MAAM,SAAS,gBAAgB,EAAE;AACjF,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAS,EAAE;AACzD,QAAM,CAAC,oBAAoB,qBAAqB,IAAI,MAAM,SAAiD,CAAC,CAAC;AAC7G,QAAM,CAAC,eAAe,gBAAgB,IAAI,MAAM,SAAS,KAAK;AAE9D,QAAM,aAAa,aAAc,kBAAkB,KAAM;AACzD,QAAM,WAAW,aAAc,gBAAgB,KAAM;AAErD,QAAM,EAAE,MAAM,UAAU,CAAC,GAAG,cAAc,EAAE,IAAI,sBAAsB;AAEtE,QAAM,UAAU,MAAM;AACpB,QAAI,QAAQ,SAAS,MAAM,CAAC,gBAAgB,CAAC,QAAQ,SAAS,YAAY,IAAI;AAC5E,sBAAgB,QAAQ,CAAC,CAAC;AAAA,IAC5B;AAAA,EACF,GAAG,CAAC,SAAS,YAAY,CAAC;AAE1B,QAAM,UAAU,MAAM;AACpB,QAAI,cAAc,eAAgB,uBAAsB,cAAc;AAAA,EACxE,GAAG,CAAC,YAAY,cAAc,CAAC;AAE/B,QAAM,UAAU,MAAM;AACpB,QAAI,cAAc,aAAc,qBAAoB,YAAY;AAAA,EAClE,GAAG,CAAC,YAAY,YAAY,CAAC;AAE7B,QAAM,EAAE,MAAM,UAAU,WAAW,iBAAiB,OAAO,cAAc,IAAI,SAAoC;AAAA,IAC/G,UAAU,CAAC,iBAAiB,YAAY;AAAA,IACxC,SAAS,CAAC;AAAA,IACV,SAAS,YACP,qBAAqB,0BAA0B,QAAW;AAAA,MACxD,cAAc,EAAE,4CAA4C,yBAAyB;AAAA,IACvF,CAAC;AAAA,EACL,CAAC;AAED,QAAM,oBAAoB,MAAM;AAAA,IAC9B,OACG,UAAU,SAAS,CAAC,GAAG,IAAI,CAAC,UAAU;AAAA,MACrC,OAAO,KAAK;AAAA,MACZ,OAAO,kBAAkB,KAAK,UAAU,KAAK,KAAK;AAAA,MAClD,aAAa,KAAK;AAAA,IACpB,EAAE;AAAA,IACJ,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,qBAAqB,MAAM;AAAA,IAC/B,CAAC,UAAkB;AACjB,YAAM,QAAQ,UAAU,OAAO,KAAK,CAAC,MAAM,EAAE,aAAa,KAAK;AAC/D,aAAO,QAAQ,kBAAkB,MAAM,UAAU,MAAM,KAAK,IAAI,kBAAkB,KAAK;AAAA,IACzF;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,UAAU,MAAM,QAAQ,MAAM,aAAa,mBAAmB,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC;AAEpG,QAAM,wBAAwB,MAAM;AAAA,IAClC,OAAO,UAAmB;AACxB,UAAI,CAAC,cAAc,CAAC,QAAS,QAAO,CAAC;AACrC,YAAM,MAAM,GAAG,OAAO,eAAe,QAAQ,WAAW,mBAAmB,KAAK,CAAC,KAAK,EAAE;AACxF,YAAM,MAAM,MAAM,QAAmD,GAAG;AACxE,UAAI,CAAC,IAAI,GAAI,QAAO,CAAC;AACrB,YAAM,QAAQ,IAAI,QAAQ,SAAS,CAAC;AACpC,aAAO,MAAM,IAAI,CAAC,UAAU;AAAA,QAC1B,OAAO,OAAO,KAAK,MAAM,EAAE;AAAA,QAC3B,OAAO,eAAe,IAAI;AAAA,MAC5B,EAAE;AAAA,IACJ;AAAA,IACA,CAAC,YAAY,OAAO;AAAA,EACtB;AAEA,QAAM,EAAE,MAAM,WAAW,IAAI,SAAyC;AAAA,IACpE,UAAU,CAAC,2BAA2B,YAAY,UAAU,SAAS,YAAY;AAAA,IACjF,SAAS,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,CAAC,YAAY,CAAC,CAAC;AAAA,IACxD,SAAS,YAAY;AACnB,YAAM,MAAM,MAAM;AAAA;AAAA,QAEhB,GAAG,OAAO,OAAO,mBAAmB,QAAQ,CAAC,QAAQ,mBAAmB,QAAQ,CAAC;AAAA,MACnF;AACA,UAAI,CAAC,IAAI,GAAI,QAAO;AACpB,YAAM,QAAQ,IAAI,QAAQ;AAC1B,aAAO,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI;AAAA,IAC/D;AAAA,EACF,CAAC;AAED,QAAM,aAAa,aAAc,kBAAkB,CAAC,IAAM,cAAc,CAAC;AAEzE,QAAM,qBAAqB,MAAM;AAAA,IAC/B,CAAC,UAAkB;AACjB,UAAI,WAAY,QAAO,eAAe,UAAU;AAChD,aAAO;AAAA,IACT;AAAA,IACA,CAAC,UAAU;AAAA,EACb;AAEA,QAAM,EAAE,MAAM,YAAY,CAAC,GAAG,WAAW,iBAAiB,IAAI,mBAAmB,aAAa,CAAC,UAAU,IAAI,CAAC,GAAG;AAAA,IAC/G,SAAS,CAAC,CAAC;AAAA,EACb,CAAC;AAED,QAAM,YAAY,MAAM;AAAA,IACtB,MAAM,iBAAiB,YAAY,wBAAwB,SAAiE;AAAA,IAC5H,CAAC,YAAY,wBAAwB,SAAS;AAAA,EAChD;AAEA,QAAM;AAAA,IACJ,MAAM;AAAA,IACN,WAAW;AAAA,IACX,SAAS;AAAA,IACT,SAAS;AAAA,EACX,IAAI,SAAsC;AAAA,IACxC,UAAU,CAAC,sBAAsB,YAAY,UAAU,YAAY;AAAA,IACnE,SAAS,CAAC,CAAC,cAAc,CAAC,CAAC;AAAA,IAC3B,SAAS,YAAY;AACnB,YAAM,MAAM,MAAM;AAAA,QAChB,qBAAqB,mBAAmB,UAAU,CAAC,IAAI,mBAAmB,QAAQ,CAAC;AAAA,MACrF;AACA,UAAI,CAAC,IAAI,IAAI;AACX,YAAI,IAAI,UAAU,WAAW,IAAK,QAAO;AACzC,eAAO;AAAA,MACT;AACA,aAAO,IAAI,UAAU;AAAA,IACvB;AAAA,EACF,CAAC;AAED,QAAM,uBAAuB,MAAM,QAAQ,MAAM,KAAK,UAAU,mBAAmB,IAAI,GAAG,CAAC,eAAe,CAAC;AAC3G,QAAM,8BAA8B,MAAM,OAAsB,IAAI;AAEpE,QAAM,UAAU,MAAM;AACpB,UAAM,MAAM;AACZ,QAAI,QAAQ,4BAA4B,WAAW,cAAe;AAClE,gCAA4B,UAAU;AAEtC,QAAI,CAAC,iBAAiB,cAAc;AAClC,UAAI,CAAC,cAAe,uBAAsB,CAAC,CAAC;AAC5C;AAAA,IACF;AAEA,UAAM,SAAiD,CAAC;AACxD,eAAW,CAAC,QAAQ,MAAM,KAAK,OAAO,QAAQ,gBAAgB,YAAY,GAAG;AAC3E,UAAI,CAAC,UAAU,OAAO,WAAW,SAAU;AAC3C,aAAO,MAAM,IAAI,CAAC;AAClB,iBAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC/C,eAAO,MAAM,EAAE,GAAG,IAAI,OAAO,QAAQ,WAAW,MAAM;AAAA,MACxD;AAAA,IACF;AACA,QAAI,CAAC,cAAe,uBAAsB,MAAM;AAAA,EAClD,GAAG,CAAC,sBAAsB,iBAAiB,aAAa,CAAC;AAEzD,QAAM,WAAW,YAAY;AAAA,IAC3B,YAAY,YAAY;AACtB,UAAI,CAAC,cAAc,CAAC,UAAU;AAC5B,cAAM,IAAI,MAAM,EAAE,4CAA4C,2CAA2C,CAAC;AAAA,MAC5G;AACA,YAAM,OAAsD,CAAC;AAC7D,iBAAW,CAAC,QAAQ,MAAM,KAAK,OAAO,QAAQ,kBAAkB,GAAG;AACjE,cAAM,eAA8C,CAAC;AACrD,YAAI,YAAY;AAChB,mBAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC/C,cAAI,OAAO,IAAI,KAAK,EAAE,SAAS,GAAG;AAChC,yBAAa,GAAG,IAAI,IAAI,KAAK;AAC7B,wBAAY;AAAA,UACd;AAAA,QACF;AACA,YAAI,UAAW,MAAK,MAAM,IAAI;AAAA,MAChC;AACA,YAAM,MAAM,MAAM;AAAA,QAChB,qBAAqB,mBAAmB,UAAU,CAAC,IAAI,mBAAmB,QAAQ,CAAC;AAAA,QACnF;AAAA,UACE,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,IAAI;AAAA,QAC3B;AAAA,MACF;AACA,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,EAAE,oCAAoC,6BAA6B,CAAC;AAAA,MACtF;AACA,aAAO;AAAA,IACT;AAAA,IACA,WAAW,MAAM;AACf,YAAM,EAAE,oCAAoC,oBAAoB,GAAG,SAAS;AAC5E,uBAAiB,KAAK;AACtB,WAAK,mBAAmB;AAAA,IAC1B;AAAA,IACA,SAAS,CAAC,QAAiB;AACzB,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,EAAE,oCAAoC,6BAA6B;AACxH,YAAM,SAAS,OAAO;AAAA,IACxB;AAAA,EACF,CAAC;AAED,QAAM,mBAAmB,CAAC,QAAgB,UAAkB,UAAkB;AAC5E,qBAAiB,IAAI;AACrB,0BAAsB,CAAC,UAAU;AAAA,MAC/B,GAAG;AAAA,MACH,CAAC,MAAM,GAAG;AAAA,QACR,GAAG,KAAK,MAAM;AAAA,QACd,CAAC,QAAQ,GAAG;AAAA,MACd;AAAA,IACF,EAAE;AAAA,EACJ;AAEA,QAAM,eAAe,CAAC,aAA6B,iBAAiB,YAAY,QAAQ;AAExF,QAAM,qBAAqB,MAAM;AAC/B,QAAI,WAAY,QAAO;AAEvB,WACE,qBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,WAAM,WAAU,iCACd,YAAE,qCAAqC,eAAe,GACzD;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,OAAO;AAAA,UACP,UAAU,CAAC,SAAS;AAClB,gCAAoB,IAAI;AACxB,6BAAiB,KAAK;AAAA,UACxB;AAAA,UACA,aAAa,EAAE,sCAAsC,mBAAmB;AAAA,UACxE,iBAAiB;AAAA,UACjB,cAAc;AAAA,UACd,mBAAiB;AAAA,UACjB,UAAU,CAAC;AAAA;AAAA,MACb;AAAA,OACF;AAAA,EAEJ;AAEA,QAAM,mBAAmB,MACvB,oBAAC,SAAI,WAAU,uBACZ,kBAAQ,IAAI,CAAC,WACZ;AAAA,IAAC;AAAA;AAAA,MAEC,MAAK;AAAA,MACL,WAAW,qDACT,iBAAiB,SACb,2CACA,6CACN;AAAA,MACA,SAAS,MAAM,gBAAgB,MAAM;AAAA,MAEpC,iBAAO,YAAY;AAAA;AAAA,IATf;AAAA,EAUP,CACD,GACH;AAGF,QAAM,mBAAmB,MAAM;AAC7B,QAAI,CAAC,cAAc,CAAC,UAAU;AAC5B,aACE,oBAAC,SAAI,WAAU,qEACZ,YAAE,oCAAoC,qDAAqD,GAC9F;AAAA,IAEJ;AACA,QAAI,sBAAsB,kBAAkB;AAC1C,aACE;AAAA,QAAC;AAAA;AAAA,UACC,OAAO,EAAE,4CAA4C,yBAAyB;AAAA,UAC9E,WAAU;AAAA;AAAA,MACZ;AAAA,IAEJ;AACA,QAAI,kBAAkB;AACpB,aACE;AAAA,QAAC;AAAA;AAAA,UACC,OAAO,EAAE,+CAA+C,6BAA6B;AAAA,UACrF,QACE,oBAAC,UAAO,SAAQ,WAAU,MAAK,MAAK,SAAS,MAAM,KAAK,mBAAmB,GACxE,YAAE,sCAAsC,OAAO,GAClD;AAAA;AAAA,MAEJ;AAAA,IAEJ;AACA,QAAI,CAAC,UAAU,QAAQ;AACrB,aACE,oBAAC,SAAI,WAAU,qEACZ,YAAE,iCAAiC,oDAAoD,GAC1F;AAAA,IAEJ;AAEA,UAAM,qBAAqB,mBAAmB,YAAY,KAAK,CAAC;AAEhE,WACE,oBAAC,SAAI,WAAU,mBACb,+BAAC,WAAM,WAAU,gCACf;AAAA,0BAAC,WACC,+BAAC,QAAG,WAAU,yDACZ;AAAA,4BAAC,QAAG,WAAU,iCACX,YAAE,qCAAqC,OAAO,GACjD;AAAA,QACC,CAAC,WACA,oBAAC,QAAG,WAAU,uBACX,YAAE,yCAAyC,YAAY,GAC1D;AAAA,QAEF,qBAAC,QAAG,WAAU,uBACX;AAAA,YAAE,2CAA2C,aAAa;AAAA,UAAE;AAAA,UAAG,aAAa,YAAY;AAAA,UAAE;AAAA,WAC7F;AAAA,SACF,GACF;AAAA,MACA,oBAAC,WACE,oBAAU,IAAI,CAAC,UAAU;AACxB,cAAM,UAAU,aAAa,MAAM,GAAG;AACtC,cAAM,gBAAgB,mBAAmB,MAAM,GAAG,KAAK;AAEvD,eACE,qBAAC,QAAmB,WAAU,YAC5B;AAAA,8BAAC,QAAG,WAAU,iEACX,gBAAM,OACT;AAAA,UACC,CAAC,WACA,oBAAC,QAAG,WAAU,mEACX,oBACC,oBAAC,UAAK,WAAU,gBAAgB,mBAAQ,IAExC,oBAAC,UAAK,WAAU,4BAA2B,eAAC,GAEhD;AAAA,UAEF,oBAAC,QAAG,WAAU,uBACX,gBAAM,YACL;AAAA,YAAC;AAAA;AAAA,cACC,WAAU;AAAA,cACV,MAAM;AAAA,cACN,OAAO;AAAA,cACP,UAAU,CAAC,MAAM,iBAAiB,cAAc,MAAM,KAAK,EAAE,OAAO,KAAK;AAAA,cACzE,aAAa,WAAW,MAAM;AAAA;AAAA,UAChC,IAEA;AAAA,YAAC;AAAA;AAAA,cACC,OAAO;AAAA,cACP,UAAU,CAAC,MAAM,iBAAiB,cAAc,MAAM,KAAK,EAAE,OAAO,KAAK;AAAA,cACzE,aAAa,WAAW,MAAM;AAAA;AAAA,UAChC,GAEJ;AAAA,aA7BO,MAAM,GA8Bf;AAAA,MAEJ,CAAC,GACH;AAAA,OACF,GACF;AAAA,EAEJ;AAEA,QAAM,UAAU,MAAM;AACpB,UAAM,UAAU,CAAC,MAAqB;AACpC,WAAK,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,SAAS;AACjD,UAAE,eAAe;AACjB,YAAI,cAAc,YAAY,CAAC,SAAS,UAAW,UAAS,OAAO;AAAA,MACrE;AAAA,IACF;AACA,aAAS,iBAAiB,WAAW,OAAO;AAC5C,WAAO,MAAM,SAAS,oBAAoB,WAAW,OAAO;AAAA,EAC9D,GAAG,CAAC,YAAY,UAAU,QAAQ,CAAC;AAEnC,MAAI,SAAS;AACX,WACE,qBAAC,SAAI,WAAU,aACZ;AAAA,uBAAiB;AAAA,MACjB,iBAAiB;AAAA,MAClB,oBAAC,SAAI,WAAU,oBACb;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,SAAS,MAAM,SAAS,OAAO;AAAA,UAC/B,UAAU,SAAS,aAAa,CAAC,cAAc,CAAC;AAAA,UAEhD;AAAA,gCAAC,QAAK,WAAU,gBAAe;AAAA,YAC9B,SAAS,YACN,EAAE,uCAAuC,WAAW,IACpD,EAAE,qCAAqC,mBAAmB;AAAA;AAAA;AAAA,MAChE,GACF;AAAA,OACF;AAAA,EAEJ;AAEA,SACE,oBAAC,SAAI,WAAU,aACb,+BAAC,SAAI,WAAU,+DACb;AAAA,yBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,QAAG,WAAU,yBAAyB,YAAE,8BAA8B,cAAc,GAAE;AAAA,MACvF,oBAAC,OAAE,WAAU,iCACV,YAAE,oCAAoC,kEAAkE,GAC3G;AAAA,OACF;AAAA,IAEC,CAAC,cACA,oBAAC,SAAI,WAAU,kDACb,+BAAC,SAAI,WAAU,oBACb;AAAA,2BAAC,SACC;AAAA,4BAAC,WAAM,WAAU,iCACd,YAAE,qCAAqC,eAAe,GACzD;AAAA,QACA,oBAAC,SAAI,WAAU,QACb;AAAA,UAAC;AAAA;AAAA,YACC,OAAO;AAAA,YACP,UAAU,CAAC,SAAS;AAClB,oCAAsB,IAAI;AAC1B,kCAAoB,EAAE;AACtB,+BAAiB,KAAK;AAAA,YACxB;AAAA,YACA,aAAa,EAAE,oCAAoC,kBAAkB;AAAA,YACrE,aAAa;AAAA,YACb,cAAc;AAAA,YACd,UAAU,mBAAmB,CAAC,CAAC;AAAA;AAAA,QACjC,GACF;AAAA,QACC,iBACC,oBAAC,OAAE,WAAU,6BACV,YAAE,4CAA4C,yBAAyB,GAC1E;AAAA,SAEJ;AAAA,MACC,mBAAmB;AAAA,OACtB,GACF;AAAA,IAGF,qBAAC,SAAI,WAAU,0CACZ;AAAA,uBAAiB;AAAA,MAClB,oBAAC,SAAI,WAAU,QACZ,2BAAiB,GACpB;AAAA,OACF;AAAA,IAEA,oBAAC,SAAI,WAAU,oBACb;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,SAAS,MAAM,SAAS,OAAO;AAAA,QAC/B,UAAU,SAAS,aAAa,mBAAmB,CAAC,CAAC,iBAAiB,CAAC,cAAc,CAAC;AAAA,QAEtF;AAAA,8BAAC,QAAK,WAAU,gBAAe;AAAA,UAC9B,SAAS,YACN,EAAE,uCAAuC,WAAW,IACpD,EAAE,qCAAqC,mBAAmB;AAAA;AAAA;AAAA,IAChE,GACF;AAAA,KACF,GACF;AAEJ;AAEO,SAAS,gBAAgB;AAC9B,QAAM,IAAI,KAAK;AACf,QAAM,cAAc,eAAe;AACnC,QAAM,EAAE,MAAM,UAAU,CAAC,GAAG,UAAU,IAAI,sBAAsB;AAChE,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS,EAAE;AAEnD,QAAM,WAAW,YAAY;AAAA,IAC3B,YAAY,OAAO,mBAA6B;AAC9C,YAAM,MAAM,MAAM,QAA+B,6BAA6B;AAAA,QAC5E,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,SAAS,eAAe,CAAC;AAAA,MAClD,CAAC;AACD,UAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,wBAAwB;AACrD,aAAO,IAAI,QAAQ,WAAW;AAAA,IAChC;AAAA,IACA,WAAW,CAAC,WAAW;AACrB,kBAAY,aAAa,CAAC,qBAAqB,GAAG,MAAM;AACxD,YAAM,EAAE,oCAAoC,iBAAiB,GAAG,SAAS;AAAA,IAC3E;AAAA,IACA,SAAS,MAAM;AACb,YAAM,EAAE,oCAAoC,0BAA0B,GAAG,OAAO;AAAA,IAClF;AAAA,EACF,CAAC;AAED,QAAM,mBAAmB,MAAM;AAAA,IAC7B,MAAM,UAAU,OAAO,CAAC,UAAU,CAAC,QAAQ,SAAS,MAAM,IAAI,CAAC,EAAE,IAAI,CAAC,WAAW;AAAA,MAC/E,OAAO,MAAM;AAAA,MACb,OAAO,GAAG,MAAM,KAAK,YAAY,CAAC,WAAM,MAAM,KAAK;AAAA,IACrD,EAAE;AAAA,IACF,CAAC,OAAO;AAAA,EACV;AAEA,QAAM,YAAY,MAAM;AACtB,UAAM,OAAO,UAAU,YAAY,EAAE,KAAK;AAC1C,QAAI,CAAC,QAAQ,CAAC,cAAc,IAAI,KAAK,QAAQ,SAAS,IAAI,EAAG;AAC7D,aAAS,OAAO,CAAC,GAAG,SAAS,IAAI,CAAC;AAClC,iBAAa,EAAE;AAAA,EACjB;AAEA,QAAM,eAAe,CAAC,WAAmB;AACvC,QAAI,QAAQ,UAAU,EAAG;AACzB,aAAS,OAAO,QAAQ,OAAO,CAAC,MAAM,MAAM,MAAM,CAAC;AAAA,EACrD;AAEA,MAAI,WAAW;AACb,WAAO,oBAAC,kBAAe,OAAO,EAAE,gCAAgC,oBAAoB,GAAG,WAAU,+BAA8B;AAAA,EACjI;AAEA,SACE,qBAAC,SAAI,WAAU,+DACb;AAAA,yBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,QAAG,WAAU,yBAAyB,YAAE,8BAA8B,mBAAmB,GAAE;AAAA,MAC5F,oBAAC,OAAE,WAAU,iCACV,YAAE,oCAAoC,uGAAuG,GAChJ;AAAA,OACF;AAAA,IAEA,oBAAC,SAAI,WAAU,wBACZ,kBAAQ,IAAI,CAAC,WACZ;AAAA,MAAC;AAAA;AAAA,QAEC,WAAU;AAAA,QACV,OAAO,eAAe,MAAM,KAAK;AAAA,QAEhC;AAAA,iBAAO,YAAY;AAAA,UAAG,eAAe,MAAM,IAAI,WAAM,eAAe,MAAM,CAAC,KAAK;AAAA,UAChF,QAAQ,SAAS,KAChB;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,WAAU;AAAA,cACV,SAAS,MAAM,aAAa,MAAM;AAAA,cAClC,UAAU,SAAS;AAAA,cAEnB,8BAAC,KAAE,WAAU,WAAU;AAAA;AAAA,UACzB;AAAA;AAAA;AAAA,MAbG;AAAA,IAeP,CACD,GACH;AAAA,IAEA,qBAAC,SAAI,WAAU,2BACb;AAAA,0BAAC,SAAI,WAAU,wBACb;AAAA,QAAC;AAAA;AAAA,UACC,OAAO;AAAA,UACP,UAAU;AAAA,UACV,aAAa,EAAE,uCAAuC,oBAAoB;AAAA,UAC1E,aAAa;AAAA,UACb,cAAc,CAAC,UAAU;AACvB,kBAAM,QAAQ,eAAe,KAAK;AAClC,mBAAO,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAM,KAAK,KAAK,MAAM,YAAY;AAAA,UACzE;AAAA;AAAA,MACF,GACF;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,SAAQ;AAAA,UACR,MAAK;AAAA,UACL,SAAS;AAAA,UACT,UAAU,SAAS,aAAa,CAAC,UAAU,KAAK,KAAK,CAAC,cAAc,SAAS,KAAK,QAAQ,SAAS,UAAU,YAAY,EAAE,KAAK,CAAC;AAAA,UAEjI;AAAA,gCAAC,QAAK,WAAU,gBAAe;AAAA,YAC9B,EAAE,4BAA4B,KAAK;AAAA;AAAA;AAAA,MACtC;AAAA,OACF;AAAA,KACF;AAEJ;",
+  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { useQuery, useMutation, useQueryClient } from '@tanstack/react-query'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Input } from '@open-mercato/ui/primitives/input'\nimport { ComboboxInput } from '@open-mercato/ui/backend/inputs'\nimport { LoadingMessage, ErrorMessage } from '@open-mercato/ui/backend/detail'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { apiCall, readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { useCustomFieldDefs } from '@open-mercato/ui/backend/utils/customFieldDefs'\nimport { Save, Plus, X } from 'lucide-react'\nimport { useOrganizationScopeVersion } from '@open-mercato/shared/lib/frontend/useOrganizationScope'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { locales as defaultLocales } from '@open-mercato/shared/lib/i18n/config'\nimport { ISO_639_1, isValidIso639, getIso639Label } from '@open-mercato/shared/lib/i18n/iso639'\nimport { formatEntityLabel, buildEntityListUrl, getRecordLabel, resolveBaseValue } from '../lib/helpers'\nimport { resolveFieldList } from '../lib/resolve-field-list'\nimport type { ResolvedField } from '../lib/resolve-field-list'\n\ntype TranslationManagerProps = {\n  entityType?: string\n  recordId?: string\n  baseValues?: Record<string, unknown>\n  translatableFields?: string[]\n  mode?: 'standalone' | 'embedded'\n  compact?: boolean\n}\n\ntype EntityOption = { entityId: string; label?: string; source?: string }\n\ntype TranslationsResponse = {\n  entityType: string\n  entityId: string\n  translations: Record<string, Record<string, unknown>>\n  createdAt?: string\n  updatedAt?: string\n}\n\nfunction useTranslationLocales() {\n  return useQuery<string[]>({\n    queryKey: ['translation-locales'],\n    queryFn: async () => {\n      const res = await apiCall<{ locales: string[] }>('/api/translations/locales')\n      if (!res.ok) return [...defaultLocales]\n      return Array.isArray(res.result?.locales) && res.result.locales.length > 0\n        ? res.result.locales\n        : [...defaultLocales]\n    },\n    staleTime: 60_000,\n  })\n}\n\nexport function TranslationManager({\n  entityType: propEntityType,\n  recordId: propRecordId,\n  baseValues: propBaseValues,\n  translatableFields: propTranslatableFields,\n  mode = 'standalone',\n  compact = false,\n}: TranslationManagerProps) {\n  const t = useT()\n  const scopeVersion = useOrganizationScopeVersion()\n  const isEmbedded = mode === 'embedded'\n\n  const [selectedEntityType, setSelectedEntityType] = React.useState(propEntityType ?? '')\n  const [selectedRecordId, setSelectedRecordId] = React.useState(propRecordId ?? '')\n  const [activeLocale, setActiveLocale] = React.useState('')\n  const [editedTranslations, setEditedTranslations] = React.useState<Record<string, Record<string, string>>>({})\n  const [hasUserEdited, setHasUserEdited] = React.useState(false)\n\n  const entityType = isEmbedded ? (propEntityType ?? '') : selectedEntityType\n  const recordId = isEmbedded ? (propRecordId ?? '') : selectedRecordId\n\n  const { data: locales = [...defaultLocales] } = useTranslationLocales()\n\n  React.useEffect(() => {\n    if (locales.length > 0 && (!activeLocale || !locales.includes(activeLocale))) {\n      setActiveLocale(locales[0])\n    }\n  }, [locales, activeLocale])\n\n  React.useEffect(() => {\n    if (isEmbedded && propEntityType) setSelectedEntityType(propEntityType)\n  }, [isEmbedded, propEntityType])\n\n  React.useEffect(() => {\n    if (isEmbedded && propRecordId) setSelectedRecordId(propRecordId)\n  }, [isEmbedded, propRecordId])\n\n  const { data: entities, isLoading: loadingEntities, error: entitiesError } = useQuery<{ items: EntityOption[] }>({\n    queryKey: ['entities-list', scopeVersion],\n    enabled: !isEmbedded,\n    queryFn: async () =>\n      readApiResultOrThrow('/api/entities/entities', undefined, {\n        errorMessage: t('translations.manager.errors.loadEntities', 'Failed to load entities'),\n      }),\n  })\n\n  const entitySuggestions = React.useMemo(\n    () =>\n      (entities?.items || []).map((item) => ({\n        value: item.entityId,\n        label: formatEntityLabel(item.entityId, item.label),\n        description: item.entityId,\n      })),\n    [entities],\n  )\n\n  const resolveEntityLabel = React.useCallback(\n    (value: string) => {\n      const match = entities?.items?.find((e) => e.entityId === value)\n      return match ? formatEntityLabel(match.entityId, match.label) : formatEntityLabel(value)\n    },\n    [entities],\n  )\n\n  const listUrl = React.useMemo(() => entityType ? buildEntityListUrl(entityType) : null, [entityType])\n\n  const loadRecordSuggestions = React.useCallback(\n    async (query?: string) => {\n      if (!entityType || !listUrl) return []\n      const url = `${listUrl}?pageSize=20${query ? `&search=${encodeURIComponent(query)}` : ''}`\n      const res = await apiCall<{ items: Array<Record<string, unknown>> }>(url)\n      if (!res.ok) return []\n      const items = res.result?.items ?? []\n      return items.map((item) => ({\n        value: String(item.id ?? ''),\n        label: getRecordLabel(item),\n      }))\n    },\n    [entityType, listUrl],\n  )\n\n  const { data: recordData } = useQuery<Record<string, unknown> | null>({\n    queryKey: ['translation-record-data', entityType, recordId, listUrl, scopeVersion],\n    enabled: !isEmbedded && !!entityType && !!recordId && !!listUrl,\n    queryFn: async () => {\n      const res = await apiCall<{ items: Array<Record<string, unknown>> }>(\n        // Some APIs filter by `id` (catalog), others by `ids` (resources) \u2014 send both so the one recognized by the target route's buildFilters is applied\n        `${listUrl}?id=${encodeURIComponent(recordId)}&ids=${encodeURIComponent(recordId)}&pageSize=1`,\n      )\n      if (!res.ok) return null\n      const items = res.result?.items\n      return Array.isArray(items) && items.length > 0 ? items[0] : null\n    },\n  })\n\n  const baseValues = isEmbedded ? (propBaseValues ?? {}) : (recordData ?? {})\n\n  const resolveRecordLabel = React.useCallback(\n    (value: string) => {\n      if (recordData) return getRecordLabel(recordData)\n      return value\n    },\n    [recordData],\n  )\n\n  const { data: fieldDefs = [], isLoading: loadingFieldDefs } = useCustomFieldDefs(entityType ? [entityType] : [], {\n    enabled: !!entityType,\n  })\n\n  const fieldList = React.useMemo(\n    () => resolveFieldList(entityType, propTranslatableFields, fieldDefs as Array<{ key: string; kind: string; label?: string }>),\n    [entityType, propTranslatableFields, fieldDefs],\n  )\n\n  const {\n    data: translationData,\n    isLoading: loadingTranslation,\n    isError: translationError,\n    refetch: refetchTranslation,\n  } = useQuery<TranslationsResponse | null>({\n    queryKey: ['entity-translation', entityType, recordId, scopeVersion],\n    enabled: !!entityType && !!recordId,\n    queryFn: async () => {\n      const res = await apiCall<TranslationsResponse>(\n        `/api/translations/${encodeURIComponent(entityType)}/${encodeURIComponent(recordId)}`,\n      )\n      if (!res.ok) {\n        if (res.response?.status === 404) return null\n        return null\n      }\n      return res.result ?? null\n    },\n  })\n\n  const translationSignature = React.useMemo(() => JSON.stringify(translationData ?? null), [translationData])\n  const lastTranslationSignatureRef = React.useRef<string | null>(null)\n\n  React.useEffect(() => {\n    const sig = translationSignature\n    if (sig === lastTranslationSignatureRef.current && hasUserEdited) return\n    lastTranslationSignatureRef.current = sig\n\n    if (!translationData?.translations) {\n      if (!hasUserEdited) setEditedTranslations({})\n      return\n    }\n\n    const parsed: Record<string, Record<string, string>> = {}\n    for (const [locale, fields] of Object.entries(translationData.translations)) {\n      if (!fields || typeof fields !== 'object') continue\n      parsed[locale] = {}\n      for (const [key, val] of Object.entries(fields)) {\n        parsed[locale][key] = typeof val === 'string' ? val : ''\n      }\n    }\n    if (!hasUserEdited) setEditedTranslations(parsed)\n  }, [translationSignature, translationData, hasUserEdited])\n\n  const mutation = useMutation({\n    mutationFn: async () => {\n      if (!entityType || !recordId) {\n        throw new Error(t('translations.manager.errors.selectRecord', 'Select an entity and record before saving'))\n      }\n      const body: Record<string, Record<string, string | null>> = {}\n      for (const [locale, fields] of Object.entries(editedTranslations)) {\n        const localeFields: Record<string, string | null> = {}\n        let hasValues = false\n        for (const [key, val] of Object.entries(fields)) {\n          if (val && val.trim().length > 0) {\n            localeFields[key] = val.trim()\n            hasValues = true\n          }\n        }\n        if (hasValues) body[locale] = localeFields\n      }\n      const res = await apiCall(\n        `/api/translations/${encodeURIComponent(entityType)}/${encodeURIComponent(recordId)}`,\n        {\n          method: 'PUT',\n          headers: { 'content-type': 'application/json' },\n          body: JSON.stringify(body),\n        },\n      )\n      if (!res.ok) {\n        throw new Error(t('translations.manager.errors.save', 'Failed to save translations'))\n      }\n      return true\n    },\n    onSuccess: () => {\n      flash(t('translations.manager.flash.saved', 'Translations saved'), 'success')\n      setHasUserEdited(false)\n      void refetchTranslation()\n    },\n    onError: (err: unknown) => {\n      const message = err instanceof Error ? err.message : t('translations.manager.errors.save', 'Failed to save translations')\n      flash(message, 'error')\n    },\n  })\n\n  const updateFieldValue = (locale: string, fieldKey: string, value: string) => {\n    setHasUserEdited(true)\n    setEditedTranslations((prev) => ({\n      ...prev,\n      [locale]: {\n        ...prev[locale],\n        [fieldKey]: value,\n      },\n    }))\n  }\n\n  const getBaseValue = (fieldKey: string): string => resolveBaseValue(baseValues, fieldKey)\n\n  const renderRecordPicker = () => {\n    if (isEmbedded) return null\n\n    return (\n      <div className=\"space-y-2\">\n        <label className=\"text-xs text-muted-foreground\">\n          {t('translations.manager.selectRecord', 'Select record')}\n        </label>\n        <ComboboxInput\n          value={selectedRecordId}\n          onChange={(next) => {\n            setSelectedRecordId(next)\n            setHasUserEdited(false)\n          }}\n          placeholder={t('translations.manager.searchRecords', 'Search records...')}\n          loadSuggestions={loadRecordSuggestions}\n          resolveLabel={resolveRecordLabel}\n          allowCustomValues\n          disabled={!entityType}\n        />\n      </div>\n    )\n  }\n\n  const renderLocaleTabs = () => (\n    <div className=\"flex gap-1 border-b\">\n      {locales.map((locale) => (\n        <button\n          key={locale}\n          type=\"button\"\n          className={`px-3 py-1.5 text-sm font-medium transition-colors ${\n            activeLocale === locale\n              ? 'border-b-2 border-primary text-primary'\n              : 'text-muted-foreground hover:text-foreground'\n          }`}\n          onClick={() => setActiveLocale(locale)}\n        >\n          {locale.toUpperCase()}\n        </button>\n      ))}\n    </div>\n  )\n\n  const renderFieldTable = () => {\n    if (!entityType || !recordId) {\n      return (\n        <div className=\"rounded border bg-background/70 p-4 text-sm text-muted-foreground\">\n          {t('translations.manager.selectFirst', 'Select an entity and record to manage translations.')}\n        </div>\n      )\n    }\n    if (loadingTranslation || loadingFieldDefs) {\n      return (\n        <LoadingMessage\n          label={t('translations.manager.loadingTranslations', 'Loading translations...')}\n          className=\"border-0 bg-transparent p-4\"\n        />\n      )\n    }\n    if (translationError) {\n      return (\n        <ErrorMessage\n          label={t('translations.manager.errors.loadTranslation', 'Failed to load translations')}\n          action={(\n            <Button variant=\"outline\" size=\"sm\" onClick={() => void refetchTranslation()}>\n              {t('translations.manager.actions.retry', 'Retry')}\n            </Button>\n          )}\n        />\n      )\n    }\n    if (!fieldList.length) {\n      return (\n        <div className=\"rounded border bg-background/70 p-4 text-sm text-muted-foreground\">\n          {t('translations.manager.noFields', 'No translatable fields found for this entity type.')}\n        </div>\n      )\n    }\n\n    const localeTranslations = editedTranslations[activeLocale] ?? {}\n\n    return (\n      <div className=\"overflow-x-auto\">\n        <table className=\"w-full min-w-[480px] text-sm\">\n          <thead>\n            <tr className=\"text-xs uppercase tracking-wide text-muted-foreground\">\n              <th className=\"px-3 py-2 text-left w-[140px]\">\n                {t('translations.manager.fields.field', 'Field')}\n              </th>\n              {!compact && (\n                <th className=\"px-3 py-2 text-left\">\n                  {t('translations.manager.fields.baseValue', 'Base value')}\n                </th>\n              )}\n              <th className=\"px-3 py-2 text-left\">\n                {t('translations.manager.fields.translation', 'Translation')} ({activeLocale.toUpperCase()})\n              </th>\n            </tr>\n          </thead>\n          <tbody>\n            {fieldList.map((field) => {\n              const baseVal = getBaseValue(field.key)\n              const translatedVal = localeTranslations[field.key] ?? ''\n\n              return (\n                <tr key={field.key} className=\"border-t\">\n                  <td className=\"px-3 py-2 align-top text-xs font-medium text-muted-foreground\">\n                    {field.label}\n                  </td>\n                  {!compact && (\n                    <td className=\"px-3 py-2 align-top text-xs text-muted-foreground max-w-[200px]\">\n                      {baseVal ? (\n                        <span className=\"line-clamp-3\">{baseVal}</span>\n                      ) : (\n                        <span className=\"text-muted-foreground/50\">-</span>\n                      )}\n                    </td>\n                  )}\n                  <td className=\"px-3 py-2 align-top\">\n                    {field.multiline ? (\n                      <textarea\n                        className=\"flex w-full rounded-md border border-input bg-background px-3 py-2 text-sm shadow-sm transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 disabled:cursor-not-allowed disabled:opacity-50\"\n                        rows={3}\n                        value={translatedVal}\n                        onChange={(e) => updateFieldValue(activeLocale, field.key, e.target.value)}\n                        placeholder={baseVal || field.label}\n                      />\n                    ) : (\n                      <Input\n                        value={translatedVal}\n                        onChange={(e) => updateFieldValue(activeLocale, field.key, e.target.value)}\n                        placeholder={baseVal || field.label}\n                      />\n                    )}\n                  </td>\n                </tr>\n              )\n            })}\n          </tbody>\n        </table>\n      </div>\n    )\n  }\n\n  React.useEffect(() => {\n    const handler = (e: KeyboardEvent) => {\n      if ((e.metaKey || e.ctrlKey) && e.key === 'Enter') {\n        e.preventDefault()\n        if (entityType && recordId && !mutation.isPending) mutation.mutate()\n      }\n    }\n    document.addEventListener('keydown', handler)\n    return () => document.removeEventListener('keydown', handler)\n  }, [entityType, recordId, mutation])\n\n  if (compact) {\n    return (\n      <div className=\"space-y-3\">\n        {renderLocaleTabs()}\n        {renderFieldTable()}\n        <div className=\"flex justify-end\">\n          <Button\n            type=\"button\"\n            size=\"sm\"\n            onClick={() => mutation.mutate()}\n            disabled={mutation.isPending || !entityType || !recordId}\n            data-testid=\"translations-save\"\n          >\n            <Save className=\"mr-2 h-3 w-3\" />\n            {mutation.isPending\n              ? t('translations.manager.actions.saving', 'Saving...')\n              : t('translations.manager.actions.save', 'Save translations')}\n          </Button>\n        </div>\n      </div>\n    )\n  }\n\n  return (\n    <div className=\"space-y-6\">\n      <div className=\"flex flex-col gap-3 rounded-lg border bg-card p-4 shadow-sm\">\n        <div className=\"space-y-2\">\n          <h2 className=\"text-xl font-semibold\">{t('translations.manager.title', 'Translations')}</h2>\n          <p className=\"text-sm text-muted-foreground\">\n            {t('translations.manager.description', 'Manage translations for entity records across supported locales.')}\n          </p>\n        </div>\n\n        {!isEmbedded && (\n          <div className=\"flex flex-col gap-4 sm:flex-row sm:items-start\">\n            <div className=\"flex-1 space-y-3\">\n              <div>\n                <label className=\"text-xs text-muted-foreground\">\n                  {t('translations.manager.selectEntity', 'Choose entity')}\n                </label>\n                <div className=\"mt-1\">\n                  <ComboboxInput\n                    value={selectedEntityType}\n                    onChange={(next) => {\n                      setSelectedEntityType(next)\n                      setSelectedRecordId('')\n                      setHasUserEdited(false)\n                    }}\n                    placeholder={t('translations.manager.placeholder', 'Select an entity')}\n                    suggestions={entitySuggestions}\n                    resolveLabel={resolveEntityLabel}\n                    disabled={loadingEntities || !!entitiesError}\n                  />\n                </div>\n                {entitiesError && (\n                  <p className=\"mt-1 text-xs text-red-600\">\n                    {t('translations.manager.errors.loadEntities', 'Failed to load entities')}\n                  </p>\n                )}\n              </div>\n              {renderRecordPicker()}\n            </div>\n          </div>\n        )}\n\n        <div className=\"rounded-lg border bg-background/70 p-4\">\n          {renderLocaleTabs()}\n          <div className=\"mt-3\">\n            {renderFieldTable()}\n          </div>\n        </div>\n\n        <div className=\"flex justify-end\">\n          <Button\n            type=\"button\"\n            onClick={() => mutation.mutate()}\n            disabled={mutation.isPending || loadingEntities || !!entitiesError || !entityType || !recordId}\n            data-testid=\"translations-save\"\n          >\n            <Save className=\"mr-2 h-4 w-4\" />\n            {mutation.isPending\n              ? t('translations.manager.actions.saving', 'Saving...')\n              : t('translations.manager.actions.save', 'Save translations')}\n          </Button>\n        </div>\n      </div>\n    </div>\n  )\n}\n\nexport function LocaleManager() {\n  const t = useT()\n  const queryClient = useQueryClient()\n  const { data: locales = [], isLoading } = useTranslationLocales()\n  const [newLocale, setNewLocale] = React.useState('')\n\n  const mutation = useMutation({\n    mutationFn: async (updatedLocales: string[]) => {\n      const res = await apiCall<{ locales: string[] }>('/api/translations/locales', {\n        method: 'PUT',\n        headers: { 'content-type': 'application/json' },\n        body: JSON.stringify({ locales: updatedLocales }),\n      })\n      if (!res.ok) throw new Error('Failed to save locales')\n      return res.result?.locales ?? updatedLocales\n    },\n    onSuccess: (result) => {\n      queryClient.setQueryData(['translation-locales'], result)\n      flash(t('translations.locales.flash.saved', 'Locales updated'), 'success')\n    },\n    onError: () => {\n      flash(t('translations.locales.flash.error', 'Failed to update locales'), 'error')\n    },\n  })\n\n  const availableLocales = React.useMemo(\n    () => ISO_639_1.filter((entry) => !locales.includes(entry.code)).map((entry) => ({\n      value: entry.code,\n      label: `${entry.code.toUpperCase()} \u2014 ${entry.label}`,\n    })),\n    [locales],\n  )\n\n  const addLocale = () => {\n    const code = newLocale.toLowerCase().trim()\n    if (!code || !isValidIso639(code) || locales.includes(code)) return\n    mutation.mutate([...locales, code])\n    setNewLocale('')\n  }\n\n  const removeLocale = (locale: string) => {\n    if (locales.length <= 1) return\n    mutation.mutate(locales.filter((l) => l !== locale))\n  }\n\n  if (isLoading) {\n    return <LoadingMessage label={t('translations.locales.loading', 'Loading locales...')} className=\"border-0 bg-transparent p-4\" />\n  }\n\n  return (\n    <div className=\"flex flex-col gap-3 rounded-lg border bg-card p-4 shadow-sm\">\n      <div className=\"space-y-1\">\n        <h3 className=\"text-lg font-semibold\">{t('translations.locales.title', 'Supported locales')}</h3>\n        <p className=\"text-sm text-muted-foreground\">\n          {t('translations.locales.description', 'Configure which locales are available for translations. Add ISO language codes (e.g. fr, it, ja, zh).')}\n        </p>\n      </div>\n\n      <div className=\"flex flex-wrap gap-2\">\n        {locales.map((locale) => (\n          <span\n            key={locale}\n            className=\"inline-flex items-center gap-1.5 rounded-full border bg-muted/50 px-3 py-1 text-sm font-medium\"\n            title={getIso639Label(locale) ?? locale}\n          >\n            {locale.toUpperCase()}{getIso639Label(locale) ? ` \u2014 ${getIso639Label(locale)}` : ''}\n            {locales.length > 1 && (\n              <button\n                type=\"button\"\n                className=\"rounded-full p-0.5 text-muted-foreground hover:text-foreground transition-colors\"\n                onClick={() => removeLocale(locale)}\n                disabled={mutation.isPending}\n              >\n                <X className=\"h-3 w-3\" />\n              </button>\n            )}\n          </span>\n        ))}\n      </div>\n\n      <div className=\"flex gap-2 items-center\">\n        <div className=\"max-w-[240px] flex-1\">\n          <ComboboxInput\n            value={newLocale}\n            onChange={setNewLocale}\n            placeholder={t('translations.locales.addPlaceholder', 'Search language...')}\n            suggestions={availableLocales}\n            resolveLabel={(value) => {\n              const label = getIso639Label(value)\n              return label ? `${value.toUpperCase()} \u2014 ${label}` : value.toUpperCase()\n            }}\n          />\n        </div>\n        <Button\n          variant=\"outline\"\n          size=\"sm\"\n          onClick={addLocale}\n          disabled={mutation.isPending || !newLocale.trim() || !isValidIso639(newLocale) || locales.includes(newLocale.toLowerCase().trim())}\n        >\n          <Plus className=\"mr-1 h-3 w-3\" />\n          {t('translations.locales.add', 'Add')}\n        </Button>\n      </div>\n    </div>\n  )\n}\n"],
+  "mappings": ";AA6QM,SACE,KADF;AA3QN,YAAY,WAAW;AACvB,SAAS,UAAU,aAAa,sBAAsB;AACtD,SAAS,cAAc;AACvB,SAAS,aAAa;AACtB,SAAS,qBAAqB;AAC9B,SAAS,gBAAgB,oBAAoB;AAC7C,SAAS,aAAa;AACtB,SAAS,SAAS,4BAA4B;AAC9C,SAAS,0BAA0B;AACnC,SAAS,MAAM,MAAM,SAAS;AAC9B,SAAS,mCAAmC;AAC5C,SAAS,YAAY;AACrB,SAAS,WAAW,sBAAsB;AAC1C,SAAS,WAAW,eAAe,sBAAsB;AACzD,SAAS,mBAAmB,oBAAoB,gBAAgB,wBAAwB;AACxF,SAAS,wBAAwB;AAsBjC,SAAS,wBAAwB;AAC/B,SAAO,SAAmB;AAAA,IACxB,UAAU,CAAC,qBAAqB;AAAA,IAChC,SAAS,YAAY;AACnB,YAAM,MAAM,MAAM,QAA+B,2BAA2B;AAC5E,UAAI,CAAC,IAAI,GAAI,QAAO,CAAC,GAAG,cAAc;AACtC,aAAO,MAAM,QAAQ,IAAI,QAAQ,OAAO,KAAK,IAAI,OAAO,QAAQ,SAAS,IACrE,IAAI,OAAO,UACX,CAAC,GAAG,cAAc;AAAA,IACxB;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AACH;AAEO,SAAS,mBAAmB;AAAA,EACjC,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,YAAY;AAAA,EACZ,oBAAoB;AAAA,EACpB,OAAO;AAAA,EACP,UAAU;AACZ,GAA4B;AAC1B,QAAM,IAAI,KAAK;AACf,QAAM,eAAe,4BAA4B;AACjD,QAAM,aAAa,SAAS;AAE5B,QAAM,CAAC,oBAAoB,qBAAqB,IAAI,MAAM,SAAS,kBAAkB,EAAE;AACvF,QAAM,CAAC,kBAAkB,mBAAmB,IAAI,MAAM,SAAS,gBAAgB,EAAE;AACjF,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAS,EAAE;AACzD,QAAM,CAAC,oBAAoB,qBAAqB,IAAI,MAAM,SAAiD,CAAC,CAAC;AAC7G,QAAM,CAAC,eAAe,gBAAgB,IAAI,MAAM,SAAS,KAAK;AAE9D,QAAM,aAAa,aAAc,kBAAkB,KAAM;AACzD,QAAM,WAAW,aAAc,gBAAgB,KAAM;AAErD,QAAM,EAAE,MAAM,UAAU,CAAC,GAAG,cAAc,EAAE,IAAI,sBAAsB;AAEtE,QAAM,UAAU,MAAM;AACpB,QAAI,QAAQ,SAAS,MAAM,CAAC,gBAAgB,CAAC,QAAQ,SAAS,YAAY,IAAI;AAC5E,sBAAgB,QAAQ,CAAC,CAAC;AAAA,IAC5B;AAAA,EACF,GAAG,CAAC,SAAS,YAAY,CAAC;AAE1B,QAAM,UAAU,MAAM;AACpB,QAAI,cAAc,eAAgB,uBAAsB,cAAc;AAAA,EACxE,GAAG,CAAC,YAAY,cAAc,CAAC;AAE/B,QAAM,UAAU,MAAM;AACpB,QAAI,cAAc,aAAc,qBAAoB,YAAY;AAAA,EAClE,GAAG,CAAC,YAAY,YAAY,CAAC;AAE7B,QAAM,EAAE,MAAM,UAAU,WAAW,iBAAiB,OAAO,cAAc,IAAI,SAAoC;AAAA,IAC/G,UAAU,CAAC,iBAAiB,YAAY;AAAA,IACxC,SAAS,CAAC;AAAA,IACV,SAAS,YACP,qBAAqB,0BAA0B,QAAW;AAAA,MACxD,cAAc,EAAE,4CAA4C,yBAAyB;AAAA,IACvF,CAAC;AAAA,EACL,CAAC;AAED,QAAM,oBAAoB,MAAM;AAAA,IAC9B,OACG,UAAU,SAAS,CAAC,GAAG,IAAI,CAAC,UAAU;AAAA,MACrC,OAAO,KAAK;AAAA,MACZ,OAAO,kBAAkB,KAAK,UAAU,KAAK,KAAK;AAAA,MAClD,aAAa,KAAK;AAAA,IACpB,EAAE;AAAA,IACJ,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,qBAAqB,MAAM;AAAA,IAC/B,CAAC,UAAkB;AACjB,YAAM,QAAQ,UAAU,OAAO,KAAK,CAAC,MAAM,EAAE,aAAa,KAAK;AAC/D,aAAO,QAAQ,kBAAkB,MAAM,UAAU,MAAM,KAAK,IAAI,kBAAkB,KAAK;AAAA,IACzF;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,UAAU,MAAM,QAAQ,MAAM,aAAa,mBAAmB,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC;AAEpG,QAAM,wBAAwB,MAAM;AAAA,IAClC,OAAO,UAAmB;AACxB,UAAI,CAAC,cAAc,CAAC,QAAS,QAAO,CAAC;AACrC,YAAM,MAAM,GAAG,OAAO,eAAe,QAAQ,WAAW,mBAAmB,KAAK,CAAC,KAAK,EAAE;AACxF,YAAM,MAAM,MAAM,QAAmD,GAAG;AACxE,UAAI,CAAC,IAAI,GAAI,QAAO,CAAC;AACrB,YAAM,QAAQ,IAAI,QAAQ,SAAS,CAAC;AACpC,aAAO,MAAM,IAAI,CAAC,UAAU;AAAA,QAC1B,OAAO,OAAO,KAAK,MAAM,EAAE;AAAA,QAC3B,OAAO,eAAe,IAAI;AAAA,MAC5B,EAAE;AAAA,IACJ;AAAA,IACA,CAAC,YAAY,OAAO;AAAA,EACtB;AAEA,QAAM,EAAE,MAAM,WAAW,IAAI,SAAyC;AAAA,IACpE,UAAU,CAAC,2BAA2B,YAAY,UAAU,SAAS,YAAY;AAAA,IACjF,SAAS,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,CAAC,YAAY,CAAC,CAAC;AAAA,IACxD,SAAS,YAAY;AACnB,YAAM,MAAM,MAAM;AAAA;AAAA,QAEhB,GAAG,OAAO,OAAO,mBAAmB,QAAQ,CAAC,QAAQ,mBAAmB,QAAQ,CAAC;AAAA,MACnF;AACA,UAAI,CAAC,IAAI,GAAI,QAAO;AACpB,YAAM,QAAQ,IAAI,QAAQ;AAC1B,aAAO,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI;AAAA,IAC/D;AAAA,EACF,CAAC;AAED,QAAM,aAAa,aAAc,kBAAkB,CAAC,IAAM,cAAc,CAAC;AAEzE,QAAM,qBAAqB,MAAM;AAAA,IAC/B,CAAC,UAAkB;AACjB,UAAI,WAAY,QAAO,eAAe,UAAU;AAChD,aAAO;AAAA,IACT;AAAA,IACA,CAAC,UAAU;AAAA,EACb;AAEA,QAAM,EAAE,MAAM,YAAY,CAAC,GAAG,WAAW,iBAAiB,IAAI,mBAAmB,aAAa,CAAC,UAAU,IAAI,CAAC,GAAG;AAAA,IAC/G,SAAS,CAAC,CAAC;AAAA,EACb,CAAC;AAED,QAAM,YAAY,MAAM;AAAA,IACtB,MAAM,iBAAiB,YAAY,wBAAwB,SAAiE;AAAA,IAC5H,CAAC,YAAY,wBAAwB,SAAS;AAAA,EAChD;AAEA,QAAM;AAAA,IACJ,MAAM;AAAA,IACN,WAAW;AAAA,IACX,SAAS;AAAA,IACT,SAAS;AAAA,EACX,IAAI,SAAsC;AAAA,IACxC,UAAU,CAAC,sBAAsB,YAAY,UAAU,YAAY;AAAA,IACnE,SAAS,CAAC,CAAC,cAAc,CAAC,CAAC;AAAA,IAC3B,SAAS,YAAY;AACnB,YAAM,MAAM,MAAM;AAAA,QAChB,qBAAqB,mBAAmB,UAAU,CAAC,IAAI,mBAAmB,QAAQ,CAAC;AAAA,MACrF;AACA,UAAI,CAAC,IAAI,IAAI;AACX,YAAI,IAAI,UAAU,WAAW,IAAK,QAAO;AACzC,eAAO;AAAA,MACT;AACA,aAAO,IAAI,UAAU;AAAA,IACvB;AAAA,EACF,CAAC;AAED,QAAM,uBAAuB,MAAM,QAAQ,MAAM,KAAK,UAAU,mBAAmB,IAAI,GAAG,CAAC,eAAe,CAAC;AAC3G,QAAM,8BAA8B,MAAM,OAAsB,IAAI;AAEpE,QAAM,UAAU,MAAM;AACpB,UAAM,MAAM;AACZ,QAAI,QAAQ,4BAA4B,WAAW,cAAe;AAClE,gCAA4B,UAAU;AAEtC,QAAI,CAAC,iBAAiB,cAAc;AAClC,UAAI,CAAC,cAAe,uBAAsB,CAAC,CAAC;AAC5C;AAAA,IACF;AAEA,UAAM,SAAiD,CAAC;AACxD,eAAW,CAAC,QAAQ,MAAM,KAAK,OAAO,QAAQ,gBAAgB,YAAY,GAAG;AAC3E,UAAI,CAAC,UAAU,OAAO,WAAW,SAAU;AAC3C,aAAO,MAAM,IAAI,CAAC;AAClB,iBAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC/C,eAAO,MAAM,EAAE,GAAG,IAAI,OAAO,QAAQ,WAAW,MAAM;AAAA,MACxD;AAAA,IACF;AACA,QAAI,CAAC,cAAe,uBAAsB,MAAM;AAAA,EAClD,GAAG,CAAC,sBAAsB,iBAAiB,aAAa,CAAC;AAEzD,QAAM,WAAW,YAAY;AAAA,IAC3B,YAAY,YAAY;AACtB,UAAI,CAAC,cAAc,CAAC,UAAU;AAC5B,cAAM,IAAI,MAAM,EAAE,4CAA4C,2CAA2C,CAAC;AAAA,MAC5G;AACA,YAAM,OAAsD,CAAC;AAC7D,iBAAW,CAAC,QAAQ,MAAM,KAAK,OAAO,QAAQ,kBAAkB,GAAG;AACjE,cAAM,eAA8C,CAAC;AACrD,YAAI,YAAY;AAChB,mBAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC/C,cAAI,OAAO,IAAI,KAAK,EAAE,SAAS,GAAG;AAChC,yBAAa,GAAG,IAAI,IAAI,KAAK;AAC7B,wBAAY;AAAA,UACd;AAAA,QACF;AACA,YAAI,UAAW,MAAK,MAAM,IAAI;AAAA,MAChC;AACA,YAAM,MAAM,MAAM;AAAA,QAChB,qBAAqB,mBAAmB,UAAU,CAAC,IAAI,mBAAmB,QAAQ,CAAC;AAAA,QACnF;AAAA,UACE,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,IAAI;AAAA,QAC3B;AAAA,MACF;AACA,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,EAAE,oCAAoC,6BAA6B,CAAC;AAAA,MACtF;AACA,aAAO;AAAA,IACT;AAAA,IACA,WAAW,MAAM;AACf,YAAM,EAAE,oCAAoC,oBAAoB,GAAG,SAAS;AAC5E,uBAAiB,KAAK;AACtB,WAAK,mBAAmB;AAAA,IAC1B;AAAA,IACA,SAAS,CAAC,QAAiB;AACzB,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,EAAE,oCAAoC,6BAA6B;AACxH,YAAM,SAAS,OAAO;AAAA,IACxB;AAAA,EACF,CAAC;AAED,QAAM,mBAAmB,CAAC,QAAgB,UAAkB,UAAkB;AAC5E,qBAAiB,IAAI;AACrB,0BAAsB,CAAC,UAAU;AAAA,MAC/B,GAAG;AAAA,MACH,CAAC,MAAM,GAAG;AAAA,QACR,GAAG,KAAK,MAAM;AAAA,QACd,CAAC,QAAQ,GAAG;AAAA,MACd;AAAA,IACF,EAAE;AAAA,EACJ;AAEA,QAAM,eAAe,CAAC,aAA6B,iBAAiB,YAAY,QAAQ;AAExF,QAAM,qBAAqB,MAAM;AAC/B,QAAI,WAAY,QAAO;AAEvB,WACE,qBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,WAAM,WAAU,iCACd,YAAE,qCAAqC,eAAe,GACzD;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,OAAO;AAAA,UACP,UAAU,CAAC,SAAS;AAClB,gCAAoB,IAAI;AACxB,6BAAiB,KAAK;AAAA,UACxB;AAAA,UACA,aAAa,EAAE,sCAAsC,mBAAmB;AAAA,UACxE,iBAAiB;AAAA,UACjB,cAAc;AAAA,UACd,mBAAiB;AAAA,UACjB,UAAU,CAAC;AAAA;AAAA,MACb;AAAA,OACF;AAAA,EAEJ;AAEA,QAAM,mBAAmB,MACvB,oBAAC,SAAI,WAAU,uBACZ,kBAAQ,IAAI,CAAC,WACZ;AAAA,IAAC;AAAA;AAAA,MAEC,MAAK;AAAA,MACL,WAAW,qDACT,iBAAiB,SACb,2CACA,6CACN;AAAA,MACA,SAAS,MAAM,gBAAgB,MAAM;AAAA,MAEpC,iBAAO,YAAY;AAAA;AAAA,IATf;AAAA,EAUP,CACD,GACH;AAGF,QAAM,mBAAmB,MAAM;AAC7B,QAAI,CAAC,cAAc,CAAC,UAAU;AAC5B,aACE,oBAAC,SAAI,WAAU,qEACZ,YAAE,oCAAoC,qDAAqD,GAC9F;AAAA,IAEJ;AACA,QAAI,sBAAsB,kBAAkB;AAC1C,aACE;AAAA,QAAC;AAAA;AAAA,UACC,OAAO,EAAE,4CAA4C,yBAAyB;AAAA,UAC9E,WAAU;AAAA;AAAA,MACZ;AAAA,IAEJ;AACA,QAAI,kBAAkB;AACpB,aACE;AAAA,QAAC;AAAA;AAAA,UACC,OAAO,EAAE,+CAA+C,6BAA6B;AAAA,UACrF,QACE,oBAAC,UAAO,SAAQ,WAAU,MAAK,MAAK,SAAS,MAAM,KAAK,mBAAmB,GACxE,YAAE,sCAAsC,OAAO,GAClD;AAAA;AAAA,MAEJ;AAAA,IAEJ;AACA,QAAI,CAAC,UAAU,QAAQ;AACrB,aACE,oBAAC,SAAI,WAAU,qEACZ,YAAE,iCAAiC,oDAAoD,GAC1F;AAAA,IAEJ;AAEA,UAAM,qBAAqB,mBAAmB,YAAY,KAAK,CAAC;AAEhE,WACE,oBAAC,SAAI,WAAU,mBACb,+BAAC,WAAM,WAAU,gCACf;AAAA,0BAAC,WACC,+BAAC,QAAG,WAAU,yDACZ;AAAA,4BAAC,QAAG,WAAU,iCACX,YAAE,qCAAqC,OAAO,GACjD;AAAA,QACC,CAAC,WACA,oBAAC,QAAG,WAAU,uBACX,YAAE,yCAAyC,YAAY,GAC1D;AAAA,QAEF,qBAAC,QAAG,WAAU,uBACX;AAAA,YAAE,2CAA2C,aAAa;AAAA,UAAE;AAAA,UAAG,aAAa,YAAY;AAAA,UAAE;AAAA,WAC7F;AAAA,SACF,GACF;AAAA,MACA,oBAAC,WACE,oBAAU,IAAI,CAAC,UAAU;AACxB,cAAM,UAAU,aAAa,MAAM,GAAG;AACtC,cAAM,gBAAgB,mBAAmB,MAAM,GAAG,KAAK;AAEvD,eACE,qBAAC,QAAmB,WAAU,YAC5B;AAAA,8BAAC,QAAG,WAAU,iEACX,gBAAM,OACT;AAAA,UACC,CAAC,WACA,oBAAC,QAAG,WAAU,mEACX,oBACC,oBAAC,UAAK,WAAU,gBAAgB,mBAAQ,IAExC,oBAAC,UAAK,WAAU,4BAA2B,eAAC,GAEhD;AAAA,UAEF,oBAAC,QAAG,WAAU,uBACX,gBAAM,YACL;AAAA,YAAC;AAAA;AAAA,cACC,WAAU;AAAA,cACV,MAAM;AAAA,cACN,OAAO;AAAA,cACP,UAAU,CAAC,MAAM,iBAAiB,cAAc,MAAM,KAAK,EAAE,OAAO,KAAK;AAAA,cACzE,aAAa,WAAW,MAAM;AAAA;AAAA,UAChC,IAEA;AAAA,YAAC;AAAA;AAAA,cACC,OAAO;AAAA,cACP,UAAU,CAAC,MAAM,iBAAiB,cAAc,MAAM,KAAK,EAAE,OAAO,KAAK;AAAA,cACzE,aAAa,WAAW,MAAM;AAAA;AAAA,UAChC,GAEJ;AAAA,aA7BO,MAAM,GA8Bf;AAAA,MAEJ,CAAC,GACH;AAAA,OACF,GACF;AAAA,EAEJ;AAEA,QAAM,UAAU,MAAM;AACpB,UAAM,UAAU,CAAC,MAAqB;AACpC,WAAK,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,SAAS;AACjD,UAAE,eAAe;AACjB,YAAI,cAAc,YAAY,CAAC,SAAS,UAAW,UAAS,OAAO;AAAA,MACrE;AAAA,IACF;AACA,aAAS,iBAAiB,WAAW,OAAO;AAC5C,WAAO,MAAM,SAAS,oBAAoB,WAAW,OAAO;AAAA,EAC9D,GAAG,CAAC,YAAY,UAAU,QAAQ,CAAC;AAEnC,MAAI,SAAS;AACX,WACE,qBAAC,SAAI,WAAU,aACZ;AAAA,uBAAiB;AAAA,MACjB,iBAAiB;AAAA,MAClB,oBAAC,SAAI,WAAU,oBACb;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,SAAS,MAAM,SAAS,OAAO;AAAA,UAC/B,UAAU,SAAS,aAAa,CAAC,cAAc,CAAC;AAAA,UAChD,eAAY;AAAA,UAEZ;AAAA,gCAAC,QAAK,WAAU,gBAAe;AAAA,YAC9B,SAAS,YACN,EAAE,uCAAuC,WAAW,IACpD,EAAE,qCAAqC,mBAAmB;AAAA;AAAA;AAAA,MAChE,GACF;AAAA,OACF;AAAA,EAEJ;AAEA,SACE,oBAAC,SAAI,WAAU,aACb,+BAAC,SAAI,WAAU,+DACb;AAAA,yBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,QAAG,WAAU,yBAAyB,YAAE,8BAA8B,cAAc,GAAE;AAAA,MACvF,oBAAC,OAAE,WAAU,iCACV,YAAE,oCAAoC,kEAAkE,GAC3G;AAAA,OACF;AAAA,IAEC,CAAC,cACA,oBAAC,SAAI,WAAU,kDACb,+BAAC,SAAI,WAAU,oBACb;AAAA,2BAAC,SACC;AAAA,4BAAC,WAAM,WAAU,iCACd,YAAE,qCAAqC,eAAe,GACzD;AAAA,QACA,oBAAC,SAAI,WAAU,QACb;AAAA,UAAC;AAAA;AAAA,YACC,OAAO;AAAA,YACP,UAAU,CAAC,SAAS;AAClB,oCAAsB,IAAI;AAC1B,kCAAoB,EAAE;AACtB,+BAAiB,KAAK;AAAA,YACxB;AAAA,YACA,aAAa,EAAE,oCAAoC,kBAAkB;AAAA,YACrE,aAAa;AAAA,YACb,cAAc;AAAA,YACd,UAAU,mBAAmB,CAAC,CAAC;AAAA;AAAA,QACjC,GACF;AAAA,QACC,iBACC,oBAAC,OAAE,WAAU,6BACV,YAAE,4CAA4C,yBAAyB,GAC1E;AAAA,SAEJ;AAAA,MACC,mBAAmB;AAAA,OACtB,GACF;AAAA,IAGF,qBAAC,SAAI,WAAU,0CACZ;AAAA,uBAAiB;AAAA,MAClB,oBAAC,SAAI,WAAU,QACZ,2BAAiB,GACpB;AAAA,OACF;AAAA,IAEA,oBAAC,SAAI,WAAU,oBACb;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,SAAS,MAAM,SAAS,OAAO;AAAA,QAC/B,UAAU,SAAS,aAAa,mBAAmB,CAAC,CAAC,iBAAiB,CAAC,cAAc,CAAC;AAAA,QACtF,eAAY;AAAA,QAEZ;AAAA,8BAAC,QAAK,WAAU,gBAAe;AAAA,UAC9B,SAAS,YACN,EAAE,uCAAuC,WAAW,IACpD,EAAE,qCAAqC,mBAAmB;AAAA;AAAA;AAAA,IAChE,GACF;AAAA,KACF,GACF;AAEJ;AAEO,SAAS,gBAAgB;AAC9B,QAAM,IAAI,KAAK;AACf,QAAM,cAAc,eAAe;AACnC,QAAM,EAAE,MAAM,UAAU,CAAC,GAAG,UAAU,IAAI,sBAAsB;AAChE,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS,EAAE;AAEnD,QAAM,WAAW,YAAY;AAAA,IAC3B,YAAY,OAAO,mBAA6B;AAC9C,YAAM,MAAM,MAAM,QAA+B,6BAA6B;AAAA,QAC5E,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,SAAS,eAAe,CAAC;AAAA,MAClD,CAAC;AACD,UAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,wBAAwB;AACrD,aAAO,IAAI,QAAQ,WAAW;AAAA,IAChC;AAAA,IACA,WAAW,CAAC,WAAW;AACrB,kBAAY,aAAa,CAAC,qBAAqB,GAAG,MAAM;AACxD,YAAM,EAAE,oCAAoC,iBAAiB,GAAG,SAAS;AAAA,IAC3E;AAAA,IACA,SAAS,MAAM;AACb,YAAM,EAAE,oCAAoC,0BAA0B,GAAG,OAAO;AAAA,IAClF;AAAA,EACF,CAAC;AAED,QAAM,mBAAmB,MAAM;AAAA,IAC7B,MAAM,UAAU,OAAO,CAAC,UAAU,CAAC,QAAQ,SAAS,MAAM,IAAI,CAAC,EAAE,IAAI,CAAC,WAAW;AAAA,MAC/E,OAAO,MAAM;AAAA,MACb,OAAO,GAAG,MAAM,KAAK,YAAY,CAAC,WAAM,MAAM,KAAK;AAAA,IACrD,EAAE;AAAA,IACF,CAAC,OAAO;AAAA,EACV;AAEA,QAAM,YAAY,MAAM;AACtB,UAAM,OAAO,UAAU,YAAY,EAAE,KAAK;AAC1C,QAAI,CAAC,QAAQ,CAAC,cAAc,IAAI,KAAK,QAAQ,SAAS,IAAI,EAAG;AAC7D,aAAS,OAAO,CAAC,GAAG,SAAS,IAAI,CAAC;AAClC,iBAAa,EAAE;AAAA,EACjB;AAEA,QAAM,eAAe,CAAC,WAAmB;AACvC,QAAI,QAAQ,UAAU,EAAG;AACzB,aAAS,OAAO,QAAQ,OAAO,CAAC,MAAM,MAAM,MAAM,CAAC;AAAA,EACrD;AAEA,MAAI,WAAW;AACb,WAAO,oBAAC,kBAAe,OAAO,EAAE,gCAAgC,oBAAoB,GAAG,WAAU,+BAA8B;AAAA,EACjI;AAEA,SACE,qBAAC,SAAI,WAAU,+DACb;AAAA,yBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,QAAG,WAAU,yBAAyB,YAAE,8BAA8B,mBAAmB,GAAE;AAAA,MAC5F,oBAAC,OAAE,WAAU,iCACV,YAAE,oCAAoC,uGAAuG,GAChJ;AAAA,OACF;AAAA,IAEA,oBAAC,SAAI,WAAU,wBACZ,kBAAQ,IAAI,CAAC,WACZ;AAAA,MAAC;AAAA;AAAA,QAEC,WAAU;AAAA,QACV,OAAO,eAAe,MAAM,KAAK;AAAA,QAEhC;AAAA,iBAAO,YAAY;AAAA,UAAG,eAAe,MAAM,IAAI,WAAM,eAAe,MAAM,CAAC,KAAK;AAAA,UAChF,QAAQ,SAAS,KAChB;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,WAAU;AAAA,cACV,SAAS,MAAM,aAAa,MAAM;AAAA,cAClC,UAAU,SAAS;AAAA,cAEnB,8BAAC,KAAE,WAAU,WAAU;AAAA;AAAA,UACzB;AAAA;AAAA;AAAA,MAbG;AAAA,IAeP,CACD,GACH;AAAA,IAEA,qBAAC,SAAI,WAAU,2BACb;AAAA,0BAAC,SAAI,WAAU,wBACb;AAAA,QAAC;AAAA;AAAA,UACC,OAAO;AAAA,UACP,UAAU;AAAA,UACV,aAAa,EAAE,uCAAuC,oBAAoB;AAAA,UAC1E,aAAa;AAAA,UACb,cAAc,CAAC,UAAU;AACvB,kBAAM,QAAQ,eAAe,KAAK;AAClC,mBAAO,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAM,KAAK,KAAK,MAAM,YAAY;AAAA,UACzE;AAAA;AAAA,MACF,GACF;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,SAAQ;AAAA,UACR,MAAK;AAAA,UACL,SAAS;AAAA,UACT,UAAU,SAAS,aAAa,CAAC,UAAU,KAAK,KAAK,CAAC,cAAc,SAAS,KAAK,QAAQ,SAAS,UAAU,YAAY,EAAE,KAAK,CAAC;AAAA,UAEjI;AAAA,gCAAC,QAAK,WAAU,gBAAe;AAAA,YAC9B,EAAE,4BAA4B,KAAK;AAAA;AAAA;AAAA,MACtC;AAAA,OACF;AAAA,KACF;AAEJ;",
   "names": []
 }

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/core",
-  "version": "0.4.6-develop-15c18897fc",
+  "version": "0.4.6-develop-d09919c37e",
   "type": "module",
   "main": "./dist/index.js",
   "scripts": {
@@ -207,7 +207,7 @@
     }
   },
   "dependencies": {
-    "@open-mercato/shared": "0.4.6-develop-15c18897fc",
+    "@open-mercato/shared": "0.4.6-develop-d09919c37e",
     "@types/html-to-text": "^9.0.4",
     "@types/semver": "^7.5.8",
     "@xyflow/react": "^12.6.0",

package/src/modules/auth/api/login.ts CHANGED Viewed

@@ -8,6 +8,7 @@ import { signJwt } from '@open-mercato/shared/lib/auth/jwt'
 import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
 import type { EventBus } from '@open-mercato/events/types'
 import { parseBooleanToken } from '@open-mercato/shared/lib/boolean'
+import { emitAuthEvent } from '@open-mercato/core/modules/auth/events'
 import { rateLimitErrorSchema } from '@open-mercato/shared/lib/ratelimit/helpers'
 import { readEndpointRateLimitConfig } from '@open-mercato/shared/lib/ratelimit/config'
 import { checkAuthRateLimit, resetAuthRateLimit } from '@open-mercato/core/modules/auth/lib/rateLimitCheck'
@@ -62,10 +63,12 @@ export async function POST(req: Request) {
     user = users[0] ?? null
   }
   if (!user || !user.passwordHash) {
+    void emitAuthEvent('auth.login.failed', { email: parsed.data.email, reason: 'invalid_credentials' }).catch(() => undefined)
     return NextResponse.json({ ok: false, error: translate('auth.login.errors.invalidCredentials', 'Invalid email or password') }, { status: 401 })
   }
   const ok = await auth.verifyPassword(user, parsed.data.password)
   if (!ok) {
+    void emitAuthEvent('auth.login.failed', { email: parsed.data.email, reason: 'invalid_password' }).catch(() => undefined)
     return NextResponse.json({ ok: false, error: translate('auth.login.errors.invalidCredentials', 'Invalid email or password') }, { status: 401 })
   }
   // Optional role requirement
@@ -98,6 +101,7 @@ export async function POST(req: Request) {
     email: user.email,
     roles: userRoleNames
   })
+  void emitAuthEvent('auth.login.success', { id: String(user.id), email: user.email, tenantId: resolvedTenantId, organizationId: user.organizationId ? String(user.organizationId) : null }).catch(() => undefined)
   const responseData: { ok: true; token: string; redirect: string; refreshToken?: string } = {
     ok: true,
     token,

package/src/modules/auth/frontend/login-injection.ts ADDED Viewed

@@ -0,0 +1,45 @@
+/**
+ * Login form injection contract.
+ *
+ * Defines types that the login page exposes to widgets injected via
+ * the `auth.login:form` InjectionSpot. This allows enterprise modules
+ * (or any future auth provider) to extend the login flow without the
+ * core auth module knowing about specific providers.
+ */
+/**
+ * Describes an alternative authentication method that has claimed the
+ * current login flow. When set, the login form hides the password field
+ * and delegates submission to the provider.
+ */
+export type AuthOverride = {
+  /** Stable identifier for the provider (e.g., 'sso', 'social') */
+  providerId: string
+  /** Label shown on the submit button (e.g., 'Continue with SSO') */
+  providerLabel: string
+  /** Called instead of the normal password-based submit */
+  onSubmit: () => void
+  /** Whether to hide the password field */
+  hidePassword: boolean
+  /** Whether to hide the "Remember me" checkbox */
+  hideRememberMe: boolean
+  /** Whether to hide the "Forgot password?" link */
+  hideForgotPassword: boolean
+}
+/**
+ * Context passed to widgets injected into the login form.
+ * Widgets use these values and callbacks to participate in the login flow.
+ */
+export type LoginFormWidgetContext = {
+  /** Current value of the email input */
+  email: string
+  /** Current tenant ID (from URL param or localStorage) */
+  tenantId: string | null
+  /** URL search params — widgets can read provider-specific error codes */
+  searchParams: URLSearchParams
+  /** Set or clear an alternative auth provider for the current email */
+  setAuthOverride: (override: AuthOverride | null) => void
+  /** Display an error message in the login form's error area */
+  setError: (error: string | null) => void
+}

package/src/modules/auth/frontend/login.tsx CHANGED Viewed

@@ -1,5 +1,5 @@
 "use client"
-import { useCallback, useEffect, useState } from 'react'
+import { useCallback, useEffect, useMemo, useState } from 'react'
 import Image from 'next/image'
 import Link from 'next/link'
 import { useRouter, useSearchParams } from 'next/navigation'
@@ -13,6 +13,8 @@ import { clearAllOperations } from '@open-mercato/ui/backend/operations/store'
 import { apiCall } from '@open-mercato/ui/backend/utils/apiCall'
 import { X } from 'lucide-react'
 import { Notice } from '@open-mercato/ui/primitives/Notice'
+import { InjectionSpot } from '@open-mercato/ui/backend/injection/InjectionSpot'
+import type { AuthOverride, LoginFormWidgetContext } from './login-injection'
 const loginTenantKey = 'om_login_tenant'
 const loginTenantCookieMaxAge = 60 * 60 * 24 * 14
@@ -86,6 +88,8 @@ export default function LoginPage() {
   const translatedFeatures = requiredFeatures.map((feature) => translate(`features.${feature}`, feature))
   const [error, setError] = useState<string | null>(null)
   const [submitting, setSubmitting] = useState(false)
+  const [authOverride, setAuthOverride] = useState<AuthOverride | null>(null)
+  const [email, setEmail] = useState('')
   const [tenantId, setTenantId] = useState<string | null>(null)
   const [tenantName, setTenantName] = useState<string | null>(null)
   const [tenantLoading, setTenantLoading] = useState(false)
@@ -164,6 +168,10 @@ export default function LoginPage() {
   async function onSubmit(e: React.FormEvent<HTMLFormElement>) {
     e.preventDefault()
     setError(null)
+    if (authOverride) {
+      authOverride.onSubmit()
+      return
+    }
     setSubmitting(true)
     try {
       const form = new FormData(e.currentTarget)
@@ -235,6 +243,14 @@ export default function LoginPage() {
     }
   }
+  const loginFormContext = useMemo<LoginFormWidgetContext>(() => ({
+    email,
+    tenantId,
+    searchParams,
+    setAuthOverride,
+    setError,
+  }), [email, tenantId, searchParams])
   return (
     <div className="min-h-svh flex items-center justify-center p-4">
       <Card className="w-full max-w-sm">
@@ -296,24 +312,45 @@ export default function LoginPage() {
             )}
             <div className="grid gap-1">
               <Label htmlFor="email">{t('auth.email')}</Label>
-              <Input id="email" name="email" type="email" required aria-invalid={!!error} />
+              <Input
+                id="email"
+                name="email"
+                type="email"
+                required
+                aria-invalid={!!error}
+                onBlur={(e) => setEmail(e.target.value)}
+              />
             </div>
-            <div className="grid gap-1">
-              <Label htmlFor="password">{t('auth.password')}</Label>
-              <Input id="password" name="password" type="password" required aria-invalid={!!error} />
-            </div>
-            <label className="flex items-center gap-2 text-xs text-muted-foreground">
-              <input type="checkbox" name="remember" className="accent-foreground" />
-              <span>{translate('auth.login.rememberMe', 'Remember me')}</span>
-            </label>
-            <Button type="submit" className="mt-2 w-full" disabled={submitting}>
-              {submitting ? translate('auth.login.loading', 'Loading...') : translate('auth.signIn', 'Sign in')}
+            <InjectionSpot<LoginFormWidgetContext>
+              spotId="auth.login:form"
+              context={loginFormContext}
+            />
+            {authOverride?.hidePassword ? null : (
+              <div className="grid gap-1">
+                <Label htmlFor="password">{t('auth.password')}</Label>
+                <Input id="password" name="password" type="password" required={!authOverride} aria-invalid={!!error} />
+              </div>
+            )}
+            {!authOverride?.hideRememberMe && !authOverride?.hidePassword && (
+              <label className="flex items-center gap-2 text-xs text-muted-foreground">
+                <input type="checkbox" name="remember" className="accent-foreground" />
+                <span>{translate('auth.login.rememberMe', 'Remember me')}</span>
+              </label>
+            )}
+            <Button type="submit" disabled={submitting} className="h-10 mt-2">
+              {submitting
+                ? translate('auth.login.loading', 'Loading...')
+                : authOverride
+                  ? authOverride.providerLabel
+                  : translate('auth.signIn', 'Sign in')}
             </Button>
-            <div className="text-xs text-muted-foreground mt-2">
-              <Link className="underline" href="/reset">
-                {translate('auth.login.forgotPassword', 'Forgot password?')}
-              </Link>
-            </div>
+            {!authOverride?.hideForgotPassword && (
+              <div className="text-xs text-muted-foreground mt-2">
+                <Link className="underline" href="/reset">
+                  {translate('auth.login.forgotPassword', 'Forgot password?')}
+                </Link>
+              </div>
+            )}
           </form>
         </CardContent>
       </Card>

package/src/modules/translations/components/TranslationManager.tsx CHANGED Viewed

@@ -429,6 +429,7 @@ export function TranslationManager({
             size="sm"
             onClick={() => mutation.mutate()}
             disabled={mutation.isPending || !entityType || !recordId}
+            data-testid="translations-save"
           >
             <Save className="mr-2 h-3 w-3" />
             {mutation.isPending
@@ -494,6 +495,7 @@ export function TranslationManager({
             type="button"
             onClick={() => mutation.mutate()}
             disabled={mutation.isPending || loadingEntities || !!entitiesError || !entityType || !recordId}
+            data-testid="translations-save"
           >
             <Save className="mr-2 h-4 w-4" />
             {mutation.isPending