@open-mercato/core 0.5.1-develop.2987.9f8c1e0f68 → 0.5.1-develop.3032.01699048cb

package/src/modules/customers/i18n/es.json

@@ -4,12 +4,33 @@
   "audit_logs.resource_kind.customers.comment": "Comentario",
   "audit_logs.resource_kind.customers.todoLink": "Tarea",
   "backend.nav.configuration": "Configuración",
+  "customers.activities.add.call": "Registrar llamada",
+  "customers.activities.add.email": "Redactar correo",
+  "customers.activities.add.meeting": "Nueva reunión",
+  "customers.activities.add.task": "Nueva tarea",
+  "customers.activities.addNew": "Añadir nuevo",
+  "customers.activities.calendar.eventPlural": "eventos",
+  "customers.activities.calendar.eventSingular": "evento",
+  "customers.activities.calendar.eventsSummary": "{count} {countLabel} · {duration}",
+  "customers.activities.calendar.hoursMinutesShort": "{hours}h {minutes}m",
+  "customers.activities.calendar.hoursShort": "{hours}h",
+  "customers.activities.calendar.minutesShort": "{minutes}m",
+  "customers.activities.calendar.monthYear": "{month} {year}",
+  "customers.activities.calendar.nextMonth": "Próximo mes",
+  "customers.activities.calendar.nextWindow": "Días siguientes",
+  "customers.activities.calendar.prevMonth": "Mes anterior",
+  "customers.activities.calendar.prevWindow": "Días anteriores",
+  "customers.activities.calendar.weekend": "Fin de semana",
+  "customers.activities.card.empty": "Nada programado para este día.",
+  "customers.activities.card.overdue": "{count} vencidas",
+  "customers.activities.card.title": "Actividades",
   "customers.activities.filters.clearAll": "Clear filters",
   "customers.activities.filters.dateRange": "Date range",
   "customers.activities.loadFailed": "No se pudieron cargar las actividades.",
   "customers.activities.loadMore": "Load more",
   "customers.activities.overdue": "",
   "customers.activities.seeAll": "",
+  "customers.activities.seeMatching": "",
   "customers.activities.yearSeparator": "",
   "customers.activityComposer.cancel": "Cancel",
   "customers.activityComposer.dateLabel": "Date",
@@ -1781,22 +1802,46 @@
   "customers.schedule.addVisibleLinks": "Agregar todos los visibles",
   "customers.schedule.addVisibleParticipants": "Agregar todos los visibles",
   "customers.schedule.allDay": "All day",
+  "customers.schedule.attendees": "Attendees",
   "customers.schedule.body": "Contenido",
+  "customers.schedule.call.direction.inbound": "Entrante",
+  "customers.schedule.call.direction.outbound": "Saliente",
+  "customers.schedule.call.directionLabel": "Dirección",
+  "customers.schedule.call.outcome.badNumber": "Número incorrecto",
+  "customers.schedule.call.outcome.busy": "Ocupado",
+  "customers.schedule.call.outcome.connected": "Conectado",
+  "customers.schedule.call.outcome.noAnswer": "Sin respuesta",
+  "customers.schedule.call.outcome.voicemail": "Buzón de voz",
+  "customers.schedule.call.outcomeLabel": "Resultado",
+  "customers.schedule.call.phoneLabel": "Número de teléfono",
+  "customers.schedule.call.phonePlaceholder": "+1 555 000 0000",
+  "customers.schedule.call.save": "Registrar llamada",
+  "customers.schedule.call.subtitle": "Registra una llamada que acabas de tener o programa una",
+  "customers.schedule.call.title": "Registrar llamada",
+  "customers.schedule.callNotes": "Call notes",
   "customers.schedule.cancel": "Cancel",
   "customers.schedule.conflict.description": "Overlaps with: {{items}}",
   "customers.schedule.conflict.title": "Calendar conflict",
+  "customers.schedule.connections": "Connections",
+  "customers.schedule.contact": "Contact",
   "customers.schedule.context": "On timeline: {{name}}",
   "customers.schedule.date": "Date",
   "customers.schedule.description": "Description",
   "customers.schedule.descriptionPlaceholder": "Add details...",
+  "customers.schedule.details": "Details",
   "customers.schedule.discardConfirm.cancel": "Seguir editando",
   "customers.schedule.discardConfirm.confirm": "Descartar",
   "customers.schedule.discardConfirm.description": "Tienes cambios sin guardar en esta actividad. Guárdalos primero o continúa para descartarlos.",
   "customers.schedule.discardConfirm.title": "¿Descartar cambios sin guardar?",
   "customers.schedule.dueDate": "Fecha límite",
+  "customers.schedule.dueTime": "Due time",
   "customers.schedule.duration": "Duration",
   "customers.schedule.editTitle": "Editar actividad",
+  "customers.schedule.email.save": "Enviar correo",
+  "customers.schedule.email.subtitle": "Redacta y envía un correo con seguimiento",
+  "customers.schedule.email.title": "Redactar correo",
   "customers.schedule.error": "Failed to schedule activity",
+  "customers.schedule.estimate": "Estimate",
   "customers.schedule.guestPerm.invite": "Invite others",
   "customers.schedule.guestPerm.modify": "Modify",
   "customers.schedule.guestPerm.seeList": "See list",
@@ -1808,6 +1853,10 @@
   "customers.schedule.loadMore": "Load more",
   "customers.schedule.location": "Location",
   "customers.schedule.locationPlaceholder": "Add location or meeting link...",
+  "customers.schedule.meeting.save": "Guardar actividad",
+  "customers.schedule.meeting.subtitle": "Bloquea tiempo en el calendario con asistentes",
+  "customers.schedule.meeting.title": "Nueva reunión",
+  "customers.schedule.message": "Message",
   "customers.schedule.noResults": "No results",
   "customers.schedule.participants": "Participants",
   "customers.schedule.recurrence.active": "Repeats",
@@ -1815,10 +1864,15 @@
   "customers.schedule.recurrence.edit": "Editar",
   "customers.schedule.recurrence.ends": "Ends",
   "customers.schedule.recurrence.never": "Never",
-  "customers.schedule.recurrence.none": "No repeat",
+  "customers.schedule.recurrence.none": "Does not repeat",
   "customers.schedule.recurrence.onDate": "On date",
   "customers.schedule.recurrence.title": "Recurrence",
   "customers.schedule.reminder": "Reminder",
+  "customers.schedule.reminder.dayBefore": "1 day before",
+  "customers.schedule.reminder.daysBefore": "{days} days before",
+  "customers.schedule.reminder.hourBefore": "1 hour before",
+  "customers.schedule.reminder.hoursBefore": "{hours} hours before",
+  "customers.schedule.reminder.minutesBefore": "{minutes} min before",
   "customers.schedule.reminder.none": "None",
   "customers.schedule.removeLink": "Eliminar enlace",
   "customers.schedule.removeParticipant": "Eliminar participante",
@@ -1834,9 +1888,19 @@
   "customers.schedule.searching": "Searching...",
   "customers.schedule.start": "Start",
   "customers.schedule.subject": "Asunto",
+  "customers.schedule.subjectPlaceholder": "Subject...",
+  "customers.schedule.task.priority.high": "Alta",
+  "customers.schedule.task.priority.low": "Baja",
+  "customers.schedule.task.priority.medium": "Media",
+  "customers.schedule.task.priority.urgent": "Urgente",
+  "customers.schedule.task.priorityLabel": "Prioridad",
+  "customers.schedule.task.save": "Guardar tarea",
+  "customers.schedule.task.subtitle": "Captura algo para hacer seguimiento",
+  "customers.schedule.task.title": "Nueva tarea",
   "customers.schedule.title": "Schedule activity",
   "customers.schedule.titleLabel": "Title",
   "customers.schedule.titlePlaceholder": "Activity title...",
+  "customers.schedule.to": "To",
   "customers.schedule.types.call": "Call",
   "customers.schedule.types.email": "Email",
   "customers.schedule.types.meeting": "Meeting",
@@ -1923,10 +1987,11 @@
   "customers.temperature.warm": "High Interest",
   "customers.timeline.author": "by {{name}}",
   "customers.timeline.date.today": "today",
+  "customers.timeline.date.tomorrow": "tomorrow",
   "customers.timeline.date.yesterday": "yesterday",
   "customers.timeline.edit": "Edit",
   "customers.timeline.empty": "No activities match the current filters.",
-  "customers.timeline.filter.all": "All",
+  "customers.timeline.filter.all": "All Activities",
   "customers.timeline.filter.call": "Call",
   "customers.timeline.filter.email": "Email",
   "customers.timeline.filter.from": "From date",
@@ -1934,6 +1999,8 @@
   "customers.timeline.filter.note": "Note",
   "customers.timeline.filter.to": "To date",
   "customers.timeline.history.filtered": "filtered: {{types}} · {{count}} results",
+  "customers.timeline.history.searchAriaLabel": "",
+  "customers.timeline.history.searchPlaceholder": "",
   "customers.timeline.history.seeAll": "See all {{count}} activities",
   "customers.timeline.history.title": "Interaction history with {{name}}",
   "customers.timeline.history.titleGeneric": "Interaction history",

package/src/modules/customers/i18n/pl.json

@@ -4,12 +4,33 @@
   "audit_logs.resource_kind.customers.comment": "Komentarz",
   "audit_logs.resource_kind.customers.todoLink": "Zadanie",
   "backend.nav.configuration": "Konfiguracja",
+  "customers.activities.add.call": "Zarejestruj rozmowę",
+  "customers.activities.add.email": "Napisz e-mail",
+  "customers.activities.add.meeting": "Nowe spotkanie",
+  "customers.activities.add.task": "Nowe zadanie",
+  "customers.activities.addNew": "Dodaj nowe",
+  "customers.activities.calendar.eventPlural": "wydarzeń",
+  "customers.activities.calendar.eventSingular": "wydarzenie",
+  "customers.activities.calendar.eventsSummary": "{count} {countLabel} · {duration}",
+  "customers.activities.calendar.hoursMinutesShort": "{hours}h {minutes}m",
+  "customers.activities.calendar.hoursShort": "{hours}h",
+  "customers.activities.calendar.minutesShort": "{minutes}m",
+  "customers.activities.calendar.monthYear": "{month} {year}",
+  "customers.activities.calendar.nextMonth": "Następny miesiąc",
+  "customers.activities.calendar.nextWindow": "Następne dni",
+  "customers.activities.calendar.prevMonth": "Poprzedni miesiąc",
+  "customers.activities.calendar.prevWindow": "Poprzednie dni",
+  "customers.activities.calendar.weekend": "Weekend",
+  "customers.activities.card.empty": "Nic nie zaplanowano na ten dzień.",
+  "customers.activities.card.overdue": "{count} zaległych",
+  "customers.activities.card.title": "Aktywności",
   "customers.activities.filters.clearAll": "Clear filters",
   "customers.activities.filters.dateRange": "Date range",
   "customers.activities.loadFailed": "Nie udało się załadować aktywności.",
   "customers.activities.loadMore": "Load more",
   "customers.activities.overdue": "{count} zaległe",
   "customers.activities.seeAll": "Zobacz wszystkie {count} aktywności",
+  "customers.activities.seeMatching": "Pokazuję {visible} z {total} aktywności",
   "customers.activities.yearSeparator": "{year}",
   "customers.activityComposer.cancel": "Anuluj",
   "customers.activityComposer.dateLabel": "Data",
@@ -1781,22 +1802,46 @@
   "customers.schedule.addVisibleLinks": "Dodaj wszystkie widoczne",
   "customers.schedule.addVisibleParticipants": "Dodaj wszystkich widocznych",
   "customers.schedule.allDay": "Cały dzień",
+  "customers.schedule.attendees": "Uczestnicy",
   "customers.schedule.body": "Treść",
+  "customers.schedule.call.direction.inbound": "Przychodzący",
+  "customers.schedule.call.direction.outbound": "Wychodzący",
+  "customers.schedule.call.directionLabel": "Kierunek",
+  "customers.schedule.call.outcome.badNumber": "Zły numer",
+  "customers.schedule.call.outcome.busy": "Zajęty",
+  "customers.schedule.call.outcome.connected": "Połączono",
+  "customers.schedule.call.outcome.noAnswer": "Brak odpowiedzi",
+  "customers.schedule.call.outcome.voicemail": "Poczta głosowa",
+  "customers.schedule.call.outcomeLabel": "Wynik",
+  "customers.schedule.call.phoneLabel": "Numer telefonu",
+  "customers.schedule.call.phonePlaceholder": "+1 555 000 0000",
+  "customers.schedule.call.save": "Zarejestruj rozmowę",
+  "customers.schedule.call.subtitle": "Zarejestruj odbytą rozmowę lub zaplanuj nową",
+  "customers.schedule.call.title": "Zarejestruj rozmowę",
+  "customers.schedule.callNotes": "Notatki z rozmowy",
   "customers.schedule.cancel": "Anuluj",
   "customers.schedule.conflict.description": "Overlaps with: {{items}}",
   "customers.schedule.conflict.title": "Konflikt w kalendarzu",
+  "customers.schedule.connections": "Powiązania",
+  "customers.schedule.contact": "Kontakt",
   "customers.schedule.context": "Na osi czasu: {{name}}",
   "customers.schedule.date": "Data",
   "customers.schedule.description": "Opis",
   "customers.schedule.descriptionPlaceholder": "Dodaj szczegóły...",
+  "customers.schedule.details": "Szczegóły",
   "customers.schedule.discardConfirm.cancel": "Kontynuuj edycję",
   "customers.schedule.discardConfirm.confirm": "Odrzuć",
   "customers.schedule.discardConfirm.description": "Masz niezapisane zmiany w tej aktywności. Zapisz je lub kontynuuj, aby je odrzucić.",
   "customers.schedule.discardConfirm.title": "Odrzucić niezapisane zmiany?",
   "customers.schedule.dueDate": "Termin",
+  "customers.schedule.dueTime": "Godzina",
   "customers.schedule.duration": "Czas trwania",
   "customers.schedule.editTitle": "Edytuj aktywność",
+  "customers.schedule.email.save": "Wyślij e-mail",
+  "customers.schedule.email.subtitle": "Napisz i wyślij śledzony e-mail",
+  "customers.schedule.email.title": "Napisz e-mail",
   "customers.schedule.error": "Nie udało się zaplanować aktywności",
+  "customers.schedule.estimate": "Szacowany czas",
   "customers.schedule.guestPerm.invite": "Invite others",
   "customers.schedule.guestPerm.modify": "Modify",
   "customers.schedule.guestPerm.seeList": "See list",
@@ -1808,6 +1853,10 @@
   "customers.schedule.loadMore": "Load more",
   "customers.schedule.location": "Lokalizacja",
   "customers.schedule.locationPlaceholder": "Dodaj lokalizację lub link do spotkania...",
+  "customers.schedule.meeting.save": "Zapisz aktywność",
+  "customers.schedule.meeting.subtitle": "Zarezerwuj czas w kalendarzu z uczestnikami",
+  "customers.schedule.meeting.title": "Nowe spotkanie",
+  "customers.schedule.message": "Wiadomość",
   "customers.schedule.noResults": "No results",
   "customers.schedule.participants": "Uczestnicy",
   "customers.schedule.recurrence.active": "Powtarza się",
@@ -1819,6 +1868,11 @@
   "customers.schedule.recurrence.onDate": "Dnia",
   "customers.schedule.recurrence.title": "Powtarzanie",
   "customers.schedule.reminder": "Przypomnienie",
+  "customers.schedule.reminder.dayBefore": "1 dzień przed",
+  "customers.schedule.reminder.daysBefore": "{days} dni przed",
+  "customers.schedule.reminder.hourBefore": "1 godzinę przed",
+  "customers.schedule.reminder.hoursBefore": "{hours} godz. przed",
+  "customers.schedule.reminder.minutesBefore": "{minutes} min przed",
   "customers.schedule.reminder.none": "Brak",
   "customers.schedule.removeLink": "Usuń powiązanie",
   "customers.schedule.removeParticipant": "Usuń uczestnika",
@@ -1834,9 +1888,19 @@
   "customers.schedule.searching": "Searching...",
   "customers.schedule.start": "Start",
   "customers.schedule.subject": "Temat",
+  "customers.schedule.subjectPlaceholder": "Temat...",
+  "customers.schedule.task.priority.high": "Wysoki",
+  "customers.schedule.task.priority.low": "Niski",
+  "customers.schedule.task.priority.medium": "Średni",
+  "customers.schedule.task.priority.urgent": "Pilny",
+  "customers.schedule.task.priorityLabel": "Priorytet",
+  "customers.schedule.task.save": "Zapisz zadanie",
+  "customers.schedule.task.subtitle": "Zapisz coś do późniejszego wykonania",
+  "customers.schedule.task.title": "Nowe zadanie",
   "customers.schedule.title": "Zaplanuj aktywność",
   "customers.schedule.titleLabel": "Tytuł",
   "customers.schedule.titlePlaceholder": "Tytuł aktywności...",
+  "customers.schedule.to": "Do",
   "customers.schedule.types.call": "Połączenie",
   "customers.schedule.types.email": "E-mail",
   "customers.schedule.types.meeting": "Spotkanie",
@@ -1923,10 +1987,11 @@
   "customers.temperature.warm": "High Interest",
   "customers.timeline.author": "by {{name}}",
   "customers.timeline.date.today": "dziś",
+  "customers.timeline.date.tomorrow": "tomorrow",
   "customers.timeline.date.yesterday": "wczoraj",
   "customers.timeline.edit": "Edytuj",
   "customers.timeline.empty": "Brak aktywności pasujących do filtrów.",
-  "customers.timeline.filter.all": "Wszystkie",
+  "customers.timeline.filter.all": "Wszystkie aktywności",
   "customers.timeline.filter.call": "Telefon",
   "customers.timeline.filter.email": "E-mail",
   "customers.timeline.filter.from": "Od daty",
@@ -1934,6 +1999,8 @@
   "customers.timeline.filter.note": "Notatka",
   "customers.timeline.filter.to": "Do daty",
   "customers.timeline.history.filtered": "filtered: {{types}} · {{count}} wyników",
+  "customers.timeline.history.searchAriaLabel": "Szukaj w historii interakcji",
+  "customers.timeline.history.searchPlaceholder": "Szukaj...",
   "customers.timeline.history.seeAll": "Zobacz wszystkie {{count}} aktywności",
   "customers.timeline.history.title": "Historia interakcji z {{name}}",
   "customers.timeline.history.titleGeneric": "Historia interakcji",

package/src/modules/customers/lib/displayName.ts

@@ -1,3 +1,24 @@
+/**
+ * Coerce an arbitrary `displayName` payload to a string for safe UI consumption.
+ *
+ * The encryption pipeline used to coerce numeric-looking string display names
+ * back into numbers (issue #1734). The root cause is fixed in
+ * `parseDecryptedFieldValue`, but this helper remains as belt-and-suspenders
+ * for any persisted data that was already corrupted on read paths that bypass
+ * the new heuristic.
+ */
+export function coerceDisplayName(value: unknown): string {
+  if (typeof value === 'string') return value
+  if (value == null) return ''
+  return String(value)
+}
+
+export function coerceDisplayNameOrNull(value: unknown): string | null {
+  if (value == null) return null
+  if (typeof value === 'string') return value
+  return String(value)
+}
+
 export function deriveDisplayName(
   firstName: string | null | undefined,
   lastName: string | null | undefined,

package/src/modules/entities/cli.ts

@@ -17,7 +17,10 @@ import {
   TenantDataEncryptionError,
   TenantDataEncryptionErrorCode,
 } from '@open-mercato/shared/lib/encryption/aes'
-import { TenantDataEncryptionService } from '@open-mercato/shared/lib/encryption/tenantDataEncryptionService'
+import {
+  TenantDataEncryptionService,
+  parseDecryptedFieldValue,
+} from '@open-mercato/shared/lib/encryption/tenantDataEncryptionService'
 import { resolveEntityIdFromMetadata } from '@open-mercato/shared/lib/encryption/entityIds'
 import { Organization } from '../directory/data/entities'
 import crypto from 'node:crypto'
@@ -563,11 +566,7 @@ const rotateEncryptionKey: ModuleCli = {
             if (typeof value !== 'string' || !isEncryptedPayload(value)) continue
             const decrypted = decryptWithOldKey(value, oldDek)
             if (decrypted === null) continue
-            try {
-              payload[rule.field] = JSON.parse(decrypted)
-            } catch {
-              payload[rule.field] = decrypted
-            }
+            payload[rule.field] = parseDecryptedFieldValue(decrypted)
           }
         }
         const encrypted = await encryptionService.encryptEntityPayload(

package/src/modules/portal/frontend/[orgSlug]/portal/reset-password/page.meta.ts

@@ -0,0 +1,9 @@
+import type { PageMetadata } from '@open-mercato/shared/modules/registry'
+
+export const metadata: PageMetadata = {
+  titleKey: 'portal.nav.resetPassword',
+  title: 'Reset Password',
+  navHidden: true,
+}
+
+export default metadata

package/src/modules/portal/frontend/[orgSlug]/portal/reset-password/page.tsx

@@ -0,0 +1,168 @@
+"use client"
+import { useCallback, useMemo, useState, useEffect } from 'react'
+import { useSearchParams } from 'next/navigation'
+import Link from 'next/link'
+import { useT } from '@open-mercato/shared/lib/i18n/context'
+import { Input } from '@open-mercato/ui/primitives/input'
+import { Label } from '@open-mercato/ui/primitives/label'
+import { Button } from '@open-mercato/ui/primitives/button'
+import { Alert, AlertDescription } from '@open-mercato/ui/primitives/alert'
+import { Spinner } from '@open-mercato/ui/primitives/spinner'
+import { apiCall } from '@open-mercato/ui/backend/utils/apiCall'
+import { usePortalContext } from '@open-mercato/ui/portal/PortalContext'
+import { InjectionSpot } from '@open-mercato/ui/backend/injection/InjectionSpot'
+import { PortalInjectionSpots } from '@open-mercato/ui/backend/injection/spotIds'
+
+type Props = { params: { orgSlug: string } }
+
+export default function PortalResetPasswordPage({ params }: Props) {
+  const t = useT()
+  const orgSlug = params.orgSlug
+  const { tenant } = usePortalContext()
+  const searchParams = useSearchParams()
+
+  const [password, setPassword] = useState('')
+  const [confirmPassword, setConfirmPassword] = useState('')
+  const [error, setError] = useState<string | null>(null)
+  const [success, setSuccess] = useState(false)
+  const [submitting, setSubmitting] = useState(false)
+  const [token, setToken] = useState<string | null>(null)
+
+  useEffect(() => {
+    const tokenParam = searchParams.get('token')
+    if (!tokenParam) {
+      setError(t('portal.resetPassword.error.noToken', 'Invalid or missing reset token.'))
+    } else {
+      setToken(tokenParam)
+    }
+  }, [searchParams, t])
+
+  const handleSubmit = useCallback(
+    async (event: React.FormEvent) => {
+      event.preventDefault()
+      setError(null)
+
+      if (!token) {
+        setError(t('portal.resetPassword.error.noToken', 'Invalid or missing reset token.'))
+        return
+      }
+
+      if (password !== confirmPassword) {
+        setError(t('portal.resetPassword.error.passwordMismatch', 'Passwords do not match.'))
+        return
+      }
+
+      if (password.length < 8) {
+        setError(t('portal.resetPassword.error.passwordTooShort', 'Password must be at least 8 characters long.'))
+        return
+      }
+
+      setSubmitting(true)
+      try {
+        const result = await apiCall<{ ok: boolean; error?: string }>('/api/customer_accounts/password/reset-confirm', {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ token, password }),
+        })
+
+        if (result.ok && result.result?.ok) {
+          setSuccess(true)
+          return
+        }
+
+        if (result.status === 400) {
+          setError(t('portal.resetPassword.error.invalidToken', 'Invalid or expired reset token.'))
+        } else {
+          setError(result.result?.error || t('portal.resetPassword.error.generic', 'Password reset failed. Please try again.'))
+        }
+      } catch {
+        setError(t('portal.resetPassword.error.generic', 'Password reset failed. Please try again.'))
+      } finally {
+        setSubmitting(false)
+      }
+    },
+    [token, password, confirmPassword, t],
+  )
+
+  const injectionContext = useMemo(
+    () => ({ orgSlug }),
+    [orgSlug],
+  )
+
+  if (tenant.loading) {
+    return <div className="flex items-center justify-center py-20"><Spinner /></div>
+  }
+
+  if (tenant.error) {
+    return (
+      <div className="mx-auto w-full max-w-md py-12">
+        <Alert variant="destructive">
+          <AlertDescription>{t('portal.org.invalid', 'Organization not found.')}</AlertDescription>
+        </Alert>
+      </div>
+    )
+  }
+
+  if (success) {
+    return (
+      <div className="mx-auto w-full max-w-sm">
+        <div className="mb-8 text-center">
+          <h1 className="text-2xl font-bold tracking-tight">{t('portal.resetPassword.success.title', 'Password Reset Complete')}</h1>
+          <p className="mt-1.5 text-sm text-muted-foreground">{t('portal.resetPassword.success.description', 'Your password has been successfully reset.')}</p>
+        </div>
+
+        <Alert>
+          <AlertDescription>{t('portal.resetPassword.success.message', 'You can now sign in with your new password.')}</AlertDescription>
+        </Alert>
+
+        <div className="mt-6 text-center">
+          <Link href={`/${orgSlug}/portal/login`} className="font-medium text-foreground underline underline-offset-4 hover:opacity-80">
+            {t('portal.resetPassword.success.loginLink', 'Go to Sign In')}
+          </Link>
+        </div>
+      </div>
+    )
+  }
+
+  return (
+    <div className="mx-auto w-full max-w-sm">
+      <div className="mb-8 text-center">
+        <h1 className="text-2xl font-bold tracking-tight">{t('portal.resetPassword.title', 'Reset Password')}</h1>
+        <p className="mt-1.5 text-sm text-muted-foreground">{t('portal.resetPassword.description', 'Enter your new password below.')}</p>
+      </div>
+
+      <InjectionSpot spotId={PortalInjectionSpots.pageBefore('reset-password')} context={injectionContext} />
+
+      <form onSubmit={handleSubmit} className="flex flex-col gap-4">
+        {error ? (
+          <Alert variant="destructive">
+            <AlertDescription>{error}</AlertDescription>
+          </Alert>
+        ) : null}
+
+        <div className="flex flex-col gap-1.5">
+          <Label htmlFor="reset-password" className="text-overline font-semibold uppercase tracking-wider text-muted-foreground/70">{t('portal.resetPassword.password', 'New Password')}</Label>
+          <Input id="reset-password" type="password" autoComplete="new-password" required placeholder={t('portal.resetPassword.password.placeholder', '••••••••')} value={password} onChange={(e) => setPassword(e.target.value)} disabled={submitting || !token} className="rounded-lg" />
+        </div>
+
+        <div className="flex flex-col gap-1.5">
+          <Label htmlFor="confirm-password" className="text-overline font-semibold uppercase tracking-wider text-muted-foreground/70">{t('portal.resetPassword.confirmPassword', 'Confirm New Password')}</Label>
+          <Input id="confirm-password" type="password" autoComplete="new-password" required placeholder={t('portal.resetPassword.confirmPassword.placeholder', '••••••••')} value={confirmPassword} onChange={(e) => setConfirmPassword(e.target.value)} disabled={submitting || !token} className="rounded-lg" />
+        </div>
+
+        <Button type="submit" disabled={submitting || !token} className="mt-1 w-full rounded-lg">
+          {submitting ? t('portal.resetPassword.submitting', 'Resetting password...') : t('portal.resetPassword.submit', 'Reset Password')}
+        </Button>
+
+        <p className="text-center text-sm text-muted-foreground">
+          {t('portal.resetPassword.backToLogin', 'Remember your password?')}{' '}
+          <Link href={`/${orgSlug}/portal/login`} className="font-medium text-foreground underline underline-offset-4 hover:opacity-80">
+            {t('portal.resetPassword.loginLink', 'Sign in')}
+          </Link>
+        </p>
+      </form>
+
+      <InjectionSpot spotId={PortalInjectionSpots.pageAfter('reset-password')} context={injectionContext} />
+    </div>
+  )
+}

package/src/modules/portal/i18n/de.json

@@ -52,6 +52,7 @@
   "portal.nav.login": "Anmelden",
   "portal.nav.logout": "Abmelden",
   "portal.nav.profile": "Profil",
+  "portal.nav.resetPassword": "Passwort zurücksetzen",
   "portal.nav.signup": "Registrieren",
   "portal.notifications.badge": "{count} ungelesen",
   "portal.notifications.daysAgo": "vor {d} Tagen",
@@ -73,6 +74,25 @@
   "portal.org.noOrganization": "Kein Organisationskontext verfügbar.",
   "portal.profile.label": "Konto",
   "portal.profile.title": "Profil",
+  "portal.resetPassword.backToLogin": "Erinnern Sie sich an Ihr Passwort?",
+  "portal.resetPassword.confirmPassword": "Neues Passwort bestätigen",
+  "portal.resetPassword.confirmPassword.placeholder": "••••••••",
+  "portal.resetPassword.description": "Geben Sie unten Ihr neues Passwort ein.",
+  "portal.resetPassword.error.generic": "Passwort-Zurücksetzung fehlgeschlagen. Bitte versuchen Sie es erneut.",
+  "portal.resetPassword.error.invalidToken": "Ungültiges oder abgelaufenes Zurücksetzungs-Token.",
+  "portal.resetPassword.error.noToken": "Ungültiges oder fehlendes Zurücksetzungs-Token.",
+  "portal.resetPassword.error.passwordMismatch": "Passwörter stimmen nicht überein.",
+  "portal.resetPassword.error.passwordTooShort": "Das Passwort muss mindestens 8 Zeichen lang sein.",
+  "portal.resetPassword.loginLink": "Anmelden",
+  "portal.resetPassword.password": "Neues Passwort",
+  "portal.resetPassword.password.placeholder": "••••••••",
+  "portal.resetPassword.submit": "Passwort zurücksetzen",
+  "portal.resetPassword.submitting": "Passwort wird zurückgesetzt…",
+  "portal.resetPassword.success.description": "Ihr Passwort wurde erfolgreich zurückgesetzt.",
+  "portal.resetPassword.success.loginLink": "Zur Anmeldung",
+  "portal.resetPassword.success.message": "Sie können sich jetzt mit Ihrem neuen Passwort anmelden.",
+  "portal.resetPassword.success.title": "Passwort zurückgesetzt",
+  "portal.resetPassword.title": "Passwort zurücksetzen",
   "portal.signup.description": "Registrieren Sie ein neues Kundenkonto.",
   "portal.signup.displayName": "Anzeigename",
   "portal.signup.displayName.placeholder": "Ihr Name",

package/src/modules/portal/i18n/en.json

@@ -52,6 +52,7 @@
   "portal.nav.login": "Log In",
   "portal.nav.logout": "Log Out",
   "portal.nav.profile": "Profile",
+  "portal.nav.resetPassword": "Reset Password",
   "portal.nav.signup": "Sign Up",
   "portal.notifications.badge": "{count} unread",
   "portal.notifications.daysAgo": "{d}d ago",
@@ -73,6 +74,25 @@
   "portal.org.noOrganization": "No organization context available.",
   "portal.profile.label": "Account",
   "portal.profile.title": "Profile",
+  "portal.resetPassword.backToLogin": "Remember your password?",
+  "portal.resetPassword.confirmPassword": "Confirm New Password",
+  "portal.resetPassword.confirmPassword.placeholder": "••••••••",
+  "portal.resetPassword.description": "Enter your new password below.",
+  "portal.resetPassword.error.generic": "Password reset failed. Please try again.",
+  "portal.resetPassword.error.invalidToken": "Invalid or expired reset token.",
+  "portal.resetPassword.error.noToken": "Invalid or missing reset token.",
+  "portal.resetPassword.error.passwordMismatch": "Passwords do not match.",
+  "portal.resetPassword.error.passwordTooShort": "Password must be at least 8 characters long.",
+  "portal.resetPassword.loginLink": "Sign in",
+  "portal.resetPassword.password": "New Password",
+  "portal.resetPassword.password.placeholder": "••••••••",
+  "portal.resetPassword.submit": "Reset Password",
+  "portal.resetPassword.submitting": "Resetting password…",
+  "portal.resetPassword.success.description": "Your password has been successfully reset.",
+  "portal.resetPassword.success.loginLink": "Go to Sign In",
+  "portal.resetPassword.success.message": "You can now sign in with your new password.",
+  "portal.resetPassword.success.title": "Password Reset Complete",
+  "portal.resetPassword.title": "Reset Password",
   "portal.signup.description": "Register for a new customer account.",
   "portal.signup.displayName": "Display Name",
   "portal.signup.displayName.placeholder": "Your name",

package/src/modules/portal/i18n/es.json

@@ -52,6 +52,7 @@
   "portal.nav.login": "Iniciar sesión",
   "portal.nav.logout": "Cerrar sesión",
   "portal.nav.profile": "Perfil",
+  "portal.nav.resetPassword": "Restablecer contraseña",
   "portal.nav.signup": "Registrarse",
   "portal.notifications.badge": "{count} sin leer",
   "portal.notifications.daysAgo": "hace {d} días",
@@ -73,6 +74,25 @@
   "portal.org.noOrganization": "No hay contexto de organización disponible.",
   "portal.profile.label": "Cuenta",
   "portal.profile.title": "Perfil",
+  "portal.resetPassword.backToLogin": "¿Recuerdas tu contraseña?",
+  "portal.resetPassword.confirmPassword": "Confirmar nueva contraseña",
+  "portal.resetPassword.confirmPassword.placeholder": "••••••••",
+  "portal.resetPassword.description": "Introduce tu nueva contraseña a continuación.",
+  "portal.resetPassword.error.generic": "El restablecimiento de la contraseña falló. Inténtalo de nuevo.",
+  "portal.resetPassword.error.invalidToken": "Token de restablecimiento no válido o expirado.",
+  "portal.resetPassword.error.noToken": "Token de restablecimiento no válido o faltante.",
+  "portal.resetPassword.error.passwordMismatch": "Las contraseñas no coinciden.",
+  "portal.resetPassword.error.passwordTooShort": "La contraseña debe tener al menos 8 caracteres.",
+  "portal.resetPassword.loginLink": "Iniciar sesión",
+  "portal.resetPassword.password": "Nueva contraseña",
+  "portal.resetPassword.password.placeholder": "••••••••",
+  "portal.resetPassword.submit": "Restablecer contraseña",
+  "portal.resetPassword.submitting": "Restableciendo contraseña…",
+  "portal.resetPassword.success.description": "Tu contraseña se ha restablecido correctamente.",
+  "portal.resetPassword.success.loginLink": "Ir a Iniciar sesión",
+  "portal.resetPassword.success.message": "Ahora puedes iniciar sesión con tu nueva contraseña.",
+  "portal.resetPassword.success.title": "Contraseña restablecida",
+  "portal.resetPassword.title": "Restablecer contraseña",
   "portal.signup.description": "Regístrate para una nueva cuenta de cliente.",
   "portal.signup.displayName": "Nombre para mostrar",
   "portal.signup.displayName.placeholder": "Tu nombre",