@open-mercato/core 0.6.1-develop.3276.1.1fcd145078 → 0.6.1-develop.3287.1.450f4ffb56

package/dist/modules/customer_accounts/setup.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/customer_accounts/setup.ts"],
-  "sourcesContent": ["import type { ModuleSetupConfig, DefaultCustomerRoleFeatures } from '@open-mercato/shared/modules/setup'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { Module } from '@open-mercato/shared/modules/registry'\nimport { hash } from 'bcryptjs'\nimport { hashForLookup } from '@open-mercato/shared/lib/encryption/aes'\nimport {\n  CustomerRole,\n  CustomerRoleAcl,\n  CustomerUser,\n  CustomerUserRole,\n} from '@open-mercato/core/modules/customer_accounts/data/entities'\n\ninterface SeedScope {\n  tenantId: string\n  organizationId: string\n}\n\nconst DEFAULT_ROLES = [\n  {\n    name: 'Portal Admin',\n    slug: 'portal_admin',\n    description: 'Full portal administration access',\n    isSystem: true,\n    customerAssignable: false,\n    isDefault: false,\n    acl: {\n      isPortalAdmin: true,\n      features: ['portal.*'],\n    },\n  },\n  {\n    name: 'Buyer',\n    slug: 'buyer',\n    description: 'Standard buyer access with ordering capabilities',\n    isSystem: true,\n    customerAssignable: true,\n    isDefault: true,\n    acl: {\n      isPortalAdmin: false,\n      features: [\n        'portal.account.manage',\n        'portal.orders.view',\n        'portal.orders.create',\n        'portal.quotes.view',\n        'portal.quotes.request',\n        'portal.invoices.view',\n        'portal.catalog.view',\n      ],\n    },\n  },\n  {\n    name: 'Viewer',\n    slug: 'viewer',\n    description: 'Read-only portal access',\n    isSystem: true,\n    customerAssignable: true,\n    isDefault: false,\n    acl: {\n      isPortalAdmin: false,\n      features: [\n        'portal.account.manage',\n        'portal.orders.view',\n        'portal.invoices.view',\n        'portal.catalog.view',\n      ],\n    },\n  },\n]\n\n/**\n * Collect defaultCustomerRoleFeatures from all enabled modules and merge\n * them into the corresponding CustomerRoleAcl records.\n */\nasync function ensureDefaultCustomerRoleAcls(\n  em: EntityManager,\n  tenantId: string,\n  modules: Module[],\n): Promise<void> {\n  const featuresByRole: Record<string, string[]> = {}\n\n  for (const mod of modules) {\n    const customerRoleFeatures = mod.setup?.defaultCustomerRoleFeatures\n    if (!customerRoleFeatures) continue\n    for (const [roleSlug, features] of Object.entries(customerRoleFeatures)) {\n      if (!features || !features.length) continue\n      if (!featuresByRole[roleSlug]) featuresByRole[roleSlug] = []\n      featuresByRole[roleSlug].push(...features)\n    }\n  }\n\n  const roleSlugs = Object.keys(featuresByRole)\n  if (!roleSlugs.length) return\n\n  for (const roleSlug of roleSlugs) {\n    const role = await em.findOne(CustomerRole, { tenantId, slug: roleSlug, deletedAt: null })\n    if (!role) continue\n\n    const acl = await em.findOne(CustomerRoleAcl, { role: role.id as any, tenantId })\n    if (!acl) continue\n\n    const currentFeatures = Array.isArray(acl.featuresJson) ? acl.featuresJson : []\n    const merged = Array.from(new Set([...currentFeatures, ...featuresByRole[roleSlug]]))\n    const changed =\n      merged.length !== currentFeatures.length ||\n      merged.some((value, index) => value !== currentFeatures[index])\n    if (changed) {\n      acl.featuresJson = merged\n      em.persist(acl)\n    }\n  }\n  await em.flush()\n}\n\nasync function seedDefaultRoles(em: EntityManager, scope: SeedScope): Promise<void> {\n  for (const roleDef of DEFAULT_ROLES) {\n    const existing = await em.findOne(CustomerRole, {\n      tenantId: scope.tenantId,\n      slug: roleDef.slug,\n      deletedAt: null,\n    })\n    if (existing) continue\n\n    const role = em.create(CustomerRole, {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      name: roleDef.name,\n      slug: roleDef.slug,\n      description: roleDef.description,\n      isSystem: roleDef.isSystem,\n      customerAssignable: roleDef.customerAssignable,\n      isDefault: roleDef.isDefault,\n      createdAt: new Date(),\n    } as any)\n    em.persist(role)\n\n    const acl = em.create(CustomerRoleAcl, {\n      role,\n      tenantId: scope.tenantId,\n      featuresJson: roleDef.acl.features,\n      isPortalAdmin: roleDef.acl.isPortalAdmin,\n      createdAt: new Date(),\n    } as any)\n    em.persist(acl)\n  }\n  await em.flush()\n}\n\nexport const setup: ModuleSetupConfig = {\n  defaultRoleFeatures: {\n    superadmin: ['customer_accounts.*'],\n    admin: ['customer_accounts.*'],\n  },\n\n  async onTenantCreated({ em, tenantId, organizationId }) {\n    await seedDefaultRoles(em, { tenantId, organizationId })\n  },\n\n  async seedDefaults({ em, tenantId, organizationId }) {\n    await seedDefaultRoles(em, { tenantId, organizationId })\n    // Merge defaultCustomerRoleFeatures from all enabled modules\n    try {\n      const { getModules } = await import('@open-mercato/shared/lib/modules/registry')\n      const allModules = getModules()\n      await ensureDefaultCustomerRoleAcls(em, tenantId, allModules)\n    } catch {\n      // Modules may not be registered yet during initial setup\n    }\n  },\n\n  async seedExamples({ em, tenantId, organizationId }) {\n    const BCRYPT_COST = 10\n    const exampleUsers = [\n      { email: 'alice.johnson@example.com', displayName: 'Alice Johnson', password: 'Password123!', roleSlug: 'portal_admin' },\n      { email: 'bob.smith@example.com', displayName: 'Bob Smith', password: 'Password123!', roleSlug: 'buyer' },\n      { email: 'carol.white@example.com', displayName: 'Carol White', password: 'Password123!', roleSlug: 'viewer' },\n    ]\n\n    for (const entry of exampleUsers) {\n      const emailHash = hashForLookup(entry.email)\n      const existing = await em.findOne(CustomerUser, { emailHash, tenantId, deletedAt: null })\n      if (existing) continue\n\n      const passwordHash = await hash(entry.password, BCRYPT_COST)\n      const user = em.create(CustomerUser, {\n        email: entry.email,\n        emailHash,\n        passwordHash,\n        displayName: entry.displayName,\n        tenantId,\n        organizationId,\n        isActive: true,\n        failedLoginAttempts: 0,\n        emailVerifiedAt: new Date(),\n        createdAt: new Date(),\n      } as any)\n      em.persist(user)\n\n      const role = await em.findOne(CustomerRole, { tenantId, slug: entry.roleSlug, deletedAt: null })\n      if (role) {\n        const userRole = em.create(CustomerUserRole, {\n          user,\n          role,\n          createdAt: new Date(),\n        } as any)\n        em.persist(userRole)\n      }\n    }\n    await em.flush()\n  },\n}\n\nexport default setup\n"],
-  "mappings": "AAGA,SAAS,YAAY;AACrB,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAOP,MAAM,gBAAgB;AAAA,EACpB;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,oBAAoB;AAAA,IACpB,WAAW;AAAA,IACX,KAAK;AAAA,MACH,eAAe;AAAA,MACf,UAAU,CAAC,UAAU;AAAA,IACvB;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,oBAAoB;AAAA,IACpB,WAAW;AAAA,IACX,KAAK;AAAA,MACH,eAAe;AAAA,MACf,UAAU;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,oBAAoB;AAAA,IACpB,WAAW;AAAA,IACX,KAAK;AAAA,MACH,eAAe;AAAA,MACf,UAAU;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAMA,eAAe,8BACb,IACA,UACA,SACe;AACf,QAAM,iBAA2C,CAAC;AAElD,aAAW,OAAO,SAAS;AACzB,UAAM,uBAAuB,IAAI,OAAO;AACxC,QAAI,CAAC,qBAAsB;AAC3B,eAAW,CAAC,UAAU,QAAQ,KAAK,OAAO,QAAQ,oBAAoB,GAAG;AACvE,UAAI,CAAC,YAAY,CAAC,SAAS,OAAQ;AACnC,UAAI,CAAC,eAAe,QAAQ,EAAG,gBAAe,QAAQ,IAAI,CAAC;AAC3D,qBAAe,QAAQ,EAAE,KAAK,GAAG,QAAQ;AAAA,IAC3C;AAAA,EACF;AAEA,QAAM,YAAY,OAAO,KAAK,cAAc;AAC5C,MAAI,CAAC,UAAU,OAAQ;AAEvB,aAAW,YAAY,WAAW;AAChC,UAAM,OAAO,MAAM,GAAG,QAAQ,cAAc,EAAE,UAAU,MAAM,UAAU,WAAW,KAAK,CAAC;AACzF,QAAI,CAAC,KAAM;AAEX,UAAM,MAAM,MAAM,GAAG,QAAQ,iBAAiB,EAAE,MAAM,KAAK,IAAW,SAAS,CAAC;AAChF,QAAI,CAAC,IAAK;AAEV,UAAM,kBAAkB,MAAM,QAAQ,IAAI,YAAY,IAAI,IAAI,eAAe,CAAC;AAC9E,UAAM,SAAS,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAG,iBAAiB,GAAG,eAAe,QAAQ,CAAC,CAAC,CAAC;AACpF,UAAM,UACJ,OAAO,WAAW,gBAAgB,UAClC,OAAO,KAAK,CAAC,OAAO,UAAU,UAAU,gBAAgB,KAAK,CAAC;AAChE,QAAI,SAAS;AACX,UAAI,eAAe;AACnB,SAAG,QAAQ,GAAG;AAAA,IAChB;AAAA,EACF;AACA,QAAM,GAAG,MAAM;AACjB;AAEA,eAAe,iBAAiB,IAAmB,OAAiC;AAClF,aAAW,WAAW,eAAe;AACnC,UAAM,WAAW,MAAM,GAAG,QAAQ,cAAc;AAAA,MAC9C,UAAU,MAAM;AAAA,MAChB,MAAM,QAAQ;AAAA,MACd,WAAW;AAAA,IACb,CAAC;AACD,QAAI,SAAU;AAEd,UAAM,OAAO,GAAG,OAAO,cAAc;AAAA,MACnC,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,MAAM,QAAQ;AAAA,MACd,MAAM,QAAQ;AAAA,MACd,aAAa,QAAQ;AAAA,MACrB,UAAU,QAAQ;AAAA,MAClB,oBAAoB,QAAQ;AAAA,MAC5B,WAAW,QAAQ;AAAA,MACnB,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAQ;AACR,OAAG,QAAQ,IAAI;AAEf,UAAM,MAAM,GAAG,OAAO,iBAAiB;AAAA,MACrC;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,cAAc,QAAQ,IAAI;AAAA,MAC1B,eAAe,QAAQ,IAAI;AAAA,MAC3B,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAQ;AACR,OAAG,QAAQ,GAAG;AAAA,EAChB;AACA,QAAM,GAAG,MAAM;AACjB;AAEO,MAAM,QAA2B;AAAA,EACtC,qBAAqB;AAAA,IACnB,YAAY,CAAC,qBAAqB;AAAA,IAClC,OAAO,CAAC,qBAAqB;AAAA,EAC/B;AAAA,EAEA,MAAM,gBAAgB,EAAE,IAAI,UAAU,eAAe,GAAG;AACtD,UAAM,iBAAiB,IAAI,EAAE,UAAU,eAAe,CAAC;AAAA,EACzD;AAAA,EAEA,MAAM,aAAa,EAAE,IAAI,UAAU,eAAe,GAAG;AACnD,UAAM,iBAAiB,IAAI,EAAE,UAAU,eAAe,CAAC;AAEvD,QAAI;AACF,YAAM,EAAE,WAAW,IAAI,MAAM,OAAO,2CAA2C;AAC/E,YAAM,aAAa,WAAW;AAC9B,YAAM,8BAA8B,IAAI,UAAU,UAAU;AAAA,IAC9D,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,EAAE,IAAI,UAAU,eAAe,GAAG;AACnD,UAAM,cAAc;AACpB,UAAM,eAAe;AAAA,MACnB,EAAE,OAAO,6BAA6B,aAAa,iBAAiB,UAAU,gBAAgB,UAAU,eAAe;AAAA,MACvH,EAAE,OAAO,yBAAyB,aAAa,aAAa,UAAU,gBAAgB,UAAU,QAAQ;AAAA,MACxG,EAAE,OAAO,2BAA2B,aAAa,eAAe,UAAU,gBAAgB,UAAU,SAAS;AAAA,IAC/G;AAEA,eAAW,SAAS,cAAc;AAChC,YAAM,YAAY,cAAc,MAAM,KAAK;AAC3C,YAAM,WAAW,MAAM,GAAG,QAAQ,cAAc,EAAE,WAAW,UAAU,WAAW,KAAK,CAAC;AACxF,UAAI,SAAU;AAEd,YAAM,eAAe,MAAM,KAAK,MAAM,UAAU,WAAW;AAC3D,YAAM,OAAO,GAAG,OAAO,cAAc;AAAA,QACnC,OAAO,MAAM;AAAA,QACb;AAAA,QACA;AAAA,QACA,aAAa,MAAM;AAAA,QACnB;AAAA,QACA;AAAA,QACA,UAAU;AAAA,QACV,qBAAqB;AAAA,QACrB,iBAAiB,oBAAI,KAAK;AAAA,QAC1B,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAQ;AACR,SAAG,QAAQ,IAAI;AAEf,YAAM,OAAO,MAAM,GAAG,QAAQ,cAAc,EAAE,UAAU,MAAM,MAAM,UAAU,WAAW,KAAK,CAAC;AAC/F,UAAI,MAAM;AACR,cAAM,WAAW,GAAG,OAAO,kBAAkB;AAAA,UAC3C;AAAA,UACA;AAAA,UACA,WAAW,oBAAI,KAAK;AAAA,QACtB,CAAQ;AACR,WAAG,QAAQ,QAAQ;AAAA,MACrB;AAAA,IACF;AACA,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;AAEA,IAAO,gBAAQ;",
+  "sourcesContent": ["import type { ModuleSetupConfig, DefaultCustomerRoleFeatures } from '@open-mercato/shared/modules/setup'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { Module } from '@open-mercato/shared/modules/registry'\nimport { hash } from 'bcryptjs'\nimport { hashForLookup } from '@open-mercato/shared/lib/encryption/aes'\nimport {\n  CustomerRole,\n  CustomerRoleAcl,\n  CustomerUser,\n  CustomerUserRole,\n} from '@open-mercato/core/modules/customer_accounts/data/entities'\n\ninterface SeedScope {\n  tenantId: string\n  organizationId: string\n}\n\ntype SchedulerServiceLike = {\n  register: (registration: {\n    id: string\n    name: string\n    description?: string\n    scopeType: 'system'\n    scheduleType: 'interval'\n    scheduleValue: string\n    timezone?: string\n    targetType: 'queue'\n    targetQueue: string\n    targetPayload?: Record<string, unknown>\n    sourceType: 'module'\n    sourceModule: string\n    isEnabled?: boolean\n  }) => Promise<void>\n}\n\n// Stable, deterministic UUIDs for the two domain-routing system schedules so\n// re-running setup re-upserts the same rows instead of creating duplicates.\nconst DOMAIN_VERIFICATION_SCHEDULE_ID = '5e9ef5fc-1f4d-5b3d-8b58-8e1a5a4d1001'\nconst DOMAIN_TLS_RETRY_SCHEDULE_ID = '5e9ef5fc-1f4d-5b3d-8b58-8e1a5a4d1002'\n\nfunction intervalSecondsFromEnv(envName: string, fallbackSeconds: number): string {\n  const parsed = Number.parseInt(process.env[envName] ?? '', 10)\n  const seconds = Number.isFinite(parsed) && parsed > 0 ? parsed : fallbackSeconds\n  return `${seconds}s`\n}\n\nasync function registerDomainSchedules(\n  container: { hasRegistration?: (name: string) => boolean; resolve: (name: string) => unknown },\n): Promise<void> {\n  if (typeof container.hasRegistration !== 'function' || !container.hasRegistration('schedulerService')) {\n    return\n  }\n  const schedulerService = container.resolve('schedulerService') as SchedulerServiceLike\n\n  await schedulerService.register({\n    id: DOMAIN_VERIFICATION_SCHEDULE_ID,\n    name: 'Custom domain \u2014 DNS auto-verification',\n    description:\n      'Re-runs DNS verification for custom-domain mappings stuck in pending or dns_failed, and triggers TLS health checks on success.',\n    scopeType: 'system',\n    scheduleType: 'interval',\n    scheduleValue: intervalSecondsFromEnv('DOMAIN_AUTO_VERIFY_INTERVAL_SECONDS', 300),\n    timezone: 'UTC',\n    targetType: 'queue',\n    targetQueue: 'domain-verification',\n    sourceType: 'module',\n    sourceModule: 'customer_accounts',\n    isEnabled: true,\n  })\n\n  await schedulerService.register({\n    id: DOMAIN_TLS_RETRY_SCHEDULE_ID,\n    name: 'Custom domain \u2014 TLS retry',\n    description:\n      'Retries TLS certificate provisioning for verified or tls_failed custom-domain mappings, with batch cap and adaptive backoff on Let\\'s Encrypt rate limits.',\n    scopeType: 'system',\n    scheduleType: 'interval',\n    scheduleValue: intervalSecondsFromEnv('DOMAIN_TLS_RETRY_INTERVAL_SECONDS', 1800),\n    timezone: 'UTC',\n    targetType: 'queue',\n    targetQueue: 'domain-tls-retry',\n    sourceType: 'module',\n    sourceModule: 'customer_accounts',\n    isEnabled: true,\n  })\n}\n\nconst DEFAULT_ROLES = [\n  {\n    name: 'Portal Admin',\n    slug: 'portal_admin',\n    description: 'Full portal administration access',\n    isSystem: true,\n    customerAssignable: false,\n    isDefault: false,\n    acl: {\n      isPortalAdmin: true,\n      features: ['portal.*'],\n    },\n  },\n  {\n    name: 'Buyer',\n    slug: 'buyer',\n    description: 'Standard buyer access with ordering capabilities',\n    isSystem: true,\n    customerAssignable: true,\n    isDefault: true,\n    acl: {\n      isPortalAdmin: false,\n      features: [\n        'portal.account.manage',\n        'portal.orders.view',\n        'portal.orders.create',\n        'portal.quotes.view',\n        'portal.quotes.request',\n        'portal.invoices.view',\n        'portal.catalog.view',\n      ],\n    },\n  },\n  {\n    name: 'Viewer',\n    slug: 'viewer',\n    description: 'Read-only portal access',\n    isSystem: true,\n    customerAssignable: true,\n    isDefault: false,\n    acl: {\n      isPortalAdmin: false,\n      features: [\n        'portal.account.manage',\n        'portal.orders.view',\n        'portal.invoices.view',\n        'portal.catalog.view',\n      ],\n    },\n  },\n]\n\n/**\n * Collect defaultCustomerRoleFeatures from all enabled modules and merge\n * them into the corresponding CustomerRoleAcl records.\n */\nasync function ensureDefaultCustomerRoleAcls(\n  em: EntityManager,\n  tenantId: string,\n  modules: Module[],\n): Promise<void> {\n  const featuresByRole: Record<string, string[]> = {}\n\n  for (const mod of modules) {\n    const customerRoleFeatures = mod.setup?.defaultCustomerRoleFeatures\n    if (!customerRoleFeatures) continue\n    for (const [roleSlug, features] of Object.entries(customerRoleFeatures)) {\n      if (!features || !features.length) continue\n      if (!featuresByRole[roleSlug]) featuresByRole[roleSlug] = []\n      featuresByRole[roleSlug].push(...features)\n    }\n  }\n\n  const roleSlugs = Object.keys(featuresByRole)\n  if (!roleSlugs.length) return\n\n  for (const roleSlug of roleSlugs) {\n    const role = await em.findOne(CustomerRole, { tenantId, slug: roleSlug, deletedAt: null })\n    if (!role) continue\n\n    const acl = await em.findOne(CustomerRoleAcl, { role: role.id as any, tenantId })\n    if (!acl) continue\n\n    const currentFeatures = Array.isArray(acl.featuresJson) ? acl.featuresJson : []\n    const merged = Array.from(new Set([...currentFeatures, ...featuresByRole[roleSlug]]))\n    const changed =\n      merged.length !== currentFeatures.length ||\n      merged.some((value, index) => value !== currentFeatures[index])\n    if (changed) {\n      acl.featuresJson = merged\n      em.persist(acl)\n    }\n  }\n  await em.flush()\n}\n\nasync function seedDefaultRoles(em: EntityManager, scope: SeedScope): Promise<void> {\n  for (const roleDef of DEFAULT_ROLES) {\n    const existing = await em.findOne(CustomerRole, {\n      tenantId: scope.tenantId,\n      slug: roleDef.slug,\n      deletedAt: null,\n    })\n    if (existing) continue\n\n    const role = em.create(CustomerRole, {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      name: roleDef.name,\n      slug: roleDef.slug,\n      description: roleDef.description,\n      isSystem: roleDef.isSystem,\n      customerAssignable: roleDef.customerAssignable,\n      isDefault: roleDef.isDefault,\n      createdAt: new Date(),\n    } as any)\n    em.persist(role)\n\n    const acl = em.create(CustomerRoleAcl, {\n      role,\n      tenantId: scope.tenantId,\n      featuresJson: roleDef.acl.features,\n      isPortalAdmin: roleDef.acl.isPortalAdmin,\n      createdAt: new Date(),\n    } as any)\n    em.persist(acl)\n  }\n  await em.flush()\n}\n\nexport const setup: ModuleSetupConfig = {\n  defaultRoleFeatures: {\n    superadmin: ['customer_accounts.*'],\n    admin: ['customer_accounts.*'],\n  },\n\n  async onTenantCreated({ em, tenantId, organizationId }) {\n    await seedDefaultRoles(em, { tenantId, organizationId })\n  },\n\n  async seedDefaults({ em, tenantId, organizationId, container }) {\n    await seedDefaultRoles(em, { tenantId, organizationId })\n    // Merge defaultCustomerRoleFeatures from all enabled modules\n    try {\n      const { getModules } = await import('@open-mercato/shared/lib/modules/registry')\n      const allModules = getModules()\n      await ensureDefaultCustomerRoleAcls(em, tenantId, allModules)\n    } catch {\n      // Modules may not be registered yet during initial setup\n    }\n\n    // System-scoped schedules: register is idempotent, so re-running setup\n    // (or running it for additional tenants) just upserts the same two rows.\n    try {\n      await registerDomainSchedules(\n        container as { hasRegistration?: (name: string) => boolean; resolve: (name: string) => unknown },\n      )\n    } catch {\n      // Scheduler may not be installed in this deployment; ignore.\n    }\n  },\n\n  async seedExamples({ em, tenantId, organizationId }) {\n    const BCRYPT_COST = 10\n    const exampleUsers = [\n      { email: 'alice.johnson@example.com', displayName: 'Alice Johnson', password: 'Password123!', roleSlug: 'portal_admin' },\n      { email: 'bob.smith@example.com', displayName: 'Bob Smith', password: 'Password123!', roleSlug: 'buyer' },\n      { email: 'carol.white@example.com', displayName: 'Carol White', password: 'Password123!', roleSlug: 'viewer' },\n    ]\n\n    for (const entry of exampleUsers) {\n      const emailHash = hashForLookup(entry.email)\n      const existing = await em.findOne(CustomerUser, { emailHash, tenantId, deletedAt: null })\n      if (existing) continue\n\n      const passwordHash = await hash(entry.password, BCRYPT_COST)\n      const user = em.create(CustomerUser, {\n        email: entry.email,\n        emailHash,\n        passwordHash,\n        displayName: entry.displayName,\n        tenantId,\n        organizationId,\n        isActive: true,\n        failedLoginAttempts: 0,\n        emailVerifiedAt: new Date(),\n        createdAt: new Date(),\n      } as any)\n      em.persist(user)\n\n      const role = await em.findOne(CustomerRole, { tenantId, slug: entry.roleSlug, deletedAt: null })\n      if (role) {\n        const userRole = em.create(CustomerUserRole, {\n          user,\n          role,\n          createdAt: new Date(),\n        } as any)\n        em.persist(userRole)\n      }\n    }\n    await em.flush()\n  },\n}\n\nexport default setup\n"],
+  "mappings": "AAGA,SAAS,YAAY;AACrB,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA2BP,MAAM,kCAAkC;AACxC,MAAM,+BAA+B;AAErC,SAAS,uBAAuB,SAAiB,iBAAiC;AAChF,QAAM,SAAS,OAAO,SAAS,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE;AAC7D,QAAM,UAAU,OAAO,SAAS,MAAM,KAAK,SAAS,IAAI,SAAS;AACjE,SAAO,GAAG,OAAO;AACnB;AAEA,eAAe,wBACb,WACe;AACf,MAAI,OAAO,UAAU,oBAAoB,cAAc,CAAC,UAAU,gBAAgB,kBAAkB,GAAG;AACrG;AAAA,EACF;AACA,QAAM,mBAAmB,UAAU,QAAQ,kBAAkB;AAE7D,QAAM,iBAAiB,SAAS;AAAA,IAC9B,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aACE;AAAA,IACF,WAAW;AAAA,IACX,cAAc;AAAA,IACd,eAAe,uBAAuB,uCAAuC,GAAG;AAAA,IAChF,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,cAAc;AAAA,IACd,WAAW;AAAA,EACb,CAAC;AAED,QAAM,iBAAiB,SAAS;AAAA,IAC9B,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aACE;AAAA,IACF,WAAW;AAAA,IACX,cAAc;AAAA,IACd,eAAe,uBAAuB,qCAAqC,IAAI;AAAA,IAC/E,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,cAAc;AAAA,IACd,WAAW;AAAA,EACb,CAAC;AACH;AAEA,MAAM,gBAAgB;AAAA,EACpB;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,oBAAoB;AAAA,IACpB,WAAW;AAAA,IACX,KAAK;AAAA,MACH,eAAe;AAAA,MACf,UAAU,CAAC,UAAU;AAAA,IACvB;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,oBAAoB;AAAA,IACpB,WAAW;AAAA,IACX,KAAK;AAAA,MACH,eAAe;AAAA,MACf,UAAU;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,oBAAoB;AAAA,IACpB,WAAW;AAAA,IACX,KAAK;AAAA,MACH,eAAe;AAAA,MACf,UAAU;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAMA,eAAe,8BACb,IACA,UACA,SACe;AACf,QAAM,iBAA2C,CAAC;AAElD,aAAW,OAAO,SAAS;AACzB,UAAM,uBAAuB,IAAI,OAAO;AACxC,QAAI,CAAC,qBAAsB;AAC3B,eAAW,CAAC,UAAU,QAAQ,KAAK,OAAO,QAAQ,oBAAoB,GAAG;AACvE,UAAI,CAAC,YAAY,CAAC,SAAS,OAAQ;AACnC,UAAI,CAAC,eAAe,QAAQ,EAAG,gBAAe,QAAQ,IAAI,CAAC;AAC3D,qBAAe,QAAQ,EAAE,KAAK,GAAG,QAAQ;AAAA,IAC3C;AAAA,EACF;AAEA,QAAM,YAAY,OAAO,KAAK,cAAc;AAC5C,MAAI,CAAC,UAAU,OAAQ;AAEvB,aAAW,YAAY,WAAW;AAChC,UAAM,OAAO,MAAM,GAAG,QAAQ,cAAc,EAAE,UAAU,MAAM,UAAU,WAAW,KAAK,CAAC;AACzF,QAAI,CAAC,KAAM;AAEX,UAAM,MAAM,MAAM,GAAG,QAAQ,iBAAiB,EAAE,MAAM,KAAK,IAAW,SAAS,CAAC;AAChF,QAAI,CAAC,IAAK;AAEV,UAAM,kBAAkB,MAAM,QAAQ,IAAI,YAAY,IAAI,IAAI,eAAe,CAAC;AAC9E,UAAM,SAAS,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAG,iBAAiB,GAAG,eAAe,QAAQ,CAAC,CAAC,CAAC;AACpF,UAAM,UACJ,OAAO,WAAW,gBAAgB,UAClC,OAAO,KAAK,CAAC,OAAO,UAAU,UAAU,gBAAgB,KAAK,CAAC;AAChE,QAAI,SAAS;AACX,UAAI,eAAe;AACnB,SAAG,QAAQ,GAAG;AAAA,IAChB;AAAA,EACF;AACA,QAAM,GAAG,MAAM;AACjB;AAEA,eAAe,iBAAiB,IAAmB,OAAiC;AAClF,aAAW,WAAW,eAAe;AACnC,UAAM,WAAW,MAAM,GAAG,QAAQ,cAAc;AAAA,MAC9C,UAAU,MAAM;AAAA,MAChB,MAAM,QAAQ;AAAA,MACd,WAAW;AAAA,IACb,CAAC;AACD,QAAI,SAAU;AAEd,UAAM,OAAO,GAAG,OAAO,cAAc;AAAA,MACnC,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,MAAM,QAAQ;AAAA,MACd,MAAM,QAAQ;AAAA,MACd,aAAa,QAAQ;AAAA,MACrB,UAAU,QAAQ;AAAA,MAClB,oBAAoB,QAAQ;AAAA,MAC5B,WAAW,QAAQ;AAAA,MACnB,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAQ;AACR,OAAG,QAAQ,IAAI;AAEf,UAAM,MAAM,GAAG,OAAO,iBAAiB;AAAA,MACrC;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,cAAc,QAAQ,IAAI;AAAA,MAC1B,eAAe,QAAQ,IAAI;AAAA,MAC3B,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAQ;AACR,OAAG,QAAQ,GAAG;AAAA,EAChB;AACA,QAAM,GAAG,MAAM;AACjB;AAEO,MAAM,QAA2B;AAAA,EACtC,qBAAqB;AAAA,IACnB,YAAY,CAAC,qBAAqB;AAAA,IAClC,OAAO,CAAC,qBAAqB;AAAA,EAC/B;AAAA,EAEA,MAAM,gBAAgB,EAAE,IAAI,UAAU,eAAe,GAAG;AACtD,UAAM,iBAAiB,IAAI,EAAE,UAAU,eAAe,CAAC;AAAA,EACzD;AAAA,EAEA,MAAM,aAAa,EAAE,IAAI,UAAU,gBAAgB,UAAU,GAAG;AAC9D,UAAM,iBAAiB,IAAI,EAAE,UAAU,eAAe,CAAC;AAEvD,QAAI;AACF,YAAM,EAAE,WAAW,IAAI,MAAM,OAAO,2CAA2C;AAC/E,YAAM,aAAa,WAAW;AAC9B,YAAM,8BAA8B,IAAI,UAAU,UAAU;AAAA,IAC9D,QAAQ;AAAA,IAER;AAIA,QAAI;AACF,YAAM;AAAA,QACJ;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,EAAE,IAAI,UAAU,eAAe,GAAG;AACnD,UAAM,cAAc;AACpB,UAAM,eAAe;AAAA,MACnB,EAAE,OAAO,6BAA6B,aAAa,iBAAiB,UAAU,gBAAgB,UAAU,eAAe;AAAA,MACvH,EAAE,OAAO,yBAAyB,aAAa,aAAa,UAAU,gBAAgB,UAAU,QAAQ;AAAA,MACxG,EAAE,OAAO,2BAA2B,aAAa,eAAe,UAAU,gBAAgB,UAAU,SAAS;AAAA,IAC/G;AAEA,eAAW,SAAS,cAAc;AAChC,YAAM,YAAY,cAAc,MAAM,KAAK;AAC3C,YAAM,WAAW,MAAM,GAAG,QAAQ,cAAc,EAAE,WAAW,UAAU,WAAW,KAAK,CAAC;AACxF,UAAI,SAAU;AAEd,YAAM,eAAe,MAAM,KAAK,MAAM,UAAU,WAAW;AAC3D,YAAM,OAAO,GAAG,OAAO,cAAc;AAAA,QACnC,OAAO,MAAM;AAAA,QACb;AAAA,QACA;AAAA,QACA,aAAa,MAAM;AAAA,QACnB;AAAA,QACA;AAAA,QACA,UAAU;AAAA,QACV,qBAAqB;AAAA,QACrB,iBAAiB,oBAAI,KAAK;AAAA,QAC1B,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAQ;AACR,SAAG,QAAQ,IAAI;AAEf,YAAM,OAAO,MAAM,GAAG,QAAQ,cAAc,EAAE,UAAU,MAAM,MAAM,UAAU,WAAW,KAAK,CAAC;AAC/F,UAAI,MAAM;AACR,cAAM,WAAW,GAAG,OAAO,kBAAkB;AAAA,UAC3C;AAAA,UACA;AAAA,UACA,WAAW,oBAAI,KAAK;AAAA,QACtB,CAAQ;AACR,WAAG,QAAQ,QAAQ;AAAA,MACrB;AAAA,IACF;AACA,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;AAEA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/customer_accounts/subscribers/invalidateDomainCache.js

@@ -0,0 +1,29 @@
+const metadata = {
+  event: "customer_accounts.domain_mapping.*",
+  persistent: false,
+  id: "customer_accounts:invalidate-domain-cache"
+};
+async function handle(payload, ctx) {
+  const data = payload ?? {};
+  const hostname = typeof data.hostname === "string" ? data.hostname : null;
+  const organizationId = typeof data.organizationId === "string" ? data.organizationId : null;
+  let cache = null;
+  try {
+    cache = ctx.resolve("cache");
+  } catch {
+    return;
+  }
+  if (!cache) return;
+  const tags = ["domain_routing"];
+  if (hostname) tags.push(`domain_routing:${hostname}`);
+  if (organizationId) tags.push(`domain_routing:org:${organizationId}`);
+  try {
+    await cache.deleteByTags(tags);
+  } catch {
+  }
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=invalidateDomainCache.js.map

package/dist/modules/customer_accounts/subscribers/invalidateDomainCache.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customer_accounts/subscribers/invalidateDomainCache.ts"],
+  "sourcesContent": ["type CacheService = {\n  deleteByTags(tags: string[]): Promise<number>\n}\n\nexport const metadata = {\n  event: 'customer_accounts.domain_mapping.*',\n  persistent: false,\n  id: 'customer_accounts:invalidate-domain-cache',\n}\n\nexport default async function handle(\n  payload: unknown,\n  ctx: { resolve: <T = unknown>(name: string) => T },\n): Promise<void> {\n  const data = (payload ?? {}) as Record<string, unknown>\n  const hostname = typeof data.hostname === 'string' ? data.hostname : null\n  const organizationId = typeof data.organizationId === 'string' ? data.organizationId : null\n\n  let cache: CacheService | null = null\n  try {\n    cache = ctx.resolve<CacheService>('cache')\n  } catch {\n    return\n  }\n  if (!cache) return\n\n  const tags = ['domain_routing']\n  if (hostname) tags.push(`domain_routing:${hostname}`)\n  if (organizationId) tags.push(`domain_routing:org:${organizationId}`)\n  try {\n    await cache.deleteByTags(tags)\n  } catch {\n    // Best-effort cache invalidation. TTL is the backstop.\n  }\n}\n"],
+  "mappings": "AAIO,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAEA,eAAO,OACL,SACA,KACe;AACf,QAAM,OAAQ,WAAW,CAAC;AAC1B,QAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,QAAM,iBAAiB,OAAO,KAAK,mBAAmB,WAAW,KAAK,iBAAiB;AAEvF,MAAI,QAA6B;AACjC,MAAI;AACF,YAAQ,IAAI,QAAsB,OAAO;AAAA,EAC3C,QAAQ;AACN;AAAA,EACF;AACA,MAAI,CAAC,MAAO;AAEZ,QAAM,OAAO,CAAC,gBAAgB;AAC9B,MAAI,SAAU,MAAK,KAAK,kBAAkB,QAAQ,EAAE;AACpD,MAAI,eAAgB,MAAK,KAAK,sBAAsB,cAAc,EAAE;AACpE,MAAI;AACF,UAAM,MAAM,aAAa,IAAI;AAAA,EAC/B,QAAQ;AAAA,EAER;AACF;",
+  "names": []
+}

package/dist/modules/customer_accounts/subscribers/notifyDomainActivated.js

@@ -0,0 +1,29 @@
+const metadata = {
+  event: "customer_accounts.domain_mapping.activated",
+  persistent: true,
+  id: "customer_accounts:notify-domain-activated"
+};
+async function handle(payload, ctx) {
+  const data = payload ?? {};
+  const id = typeof data.id === "string" ? data.id : null;
+  const tenantId = typeof data.tenantId === "string" ? data.tenantId : null;
+  const organizationId = typeof data.organizationId === "string" ? data.organizationId : null;
+  const hostname = typeof data.hostname === "string" ? data.hostname : "";
+  if (!id || !tenantId || !organizationId) return;
+  try {
+    const eventBus = ctx.resolve("eventBus");
+    await eventBus.emitEvent("notifications.create", {
+      type: "customer_accounts.domain_mapping.activated",
+      tenantId,
+      organizationId,
+      sourceEntityId: id,
+      data: { hostname }
+    });
+  } catch {
+  }
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=notifyDomainActivated.js.map

package/dist/modules/customer_accounts/subscribers/notifyDomainActivated.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customer_accounts/subscribers/notifyDomainActivated.ts"],
+  "sourcesContent": ["import type { EventBus } from '@open-mercato/events/types'\n\nexport const metadata = {\n  event: 'customer_accounts.domain_mapping.activated',\n  persistent: true,\n  id: 'customer_accounts:notify-domain-activated',\n}\n\nexport default async function handle(\n  payload: unknown,\n  ctx: { resolve: <T = unknown>(name: string) => T },\n): Promise<void> {\n  const data = (payload ?? {}) as Record<string, unknown>\n  const id = typeof data.id === 'string' ? data.id : null\n  const tenantId = typeof data.tenantId === 'string' ? data.tenantId : null\n  const organizationId = typeof data.organizationId === 'string' ? data.organizationId : null\n  const hostname = typeof data.hostname === 'string' ? data.hostname : ''\n  if (!id || !tenantId || !organizationId) return\n\n  try {\n    const eventBus = ctx.resolve<EventBus>('eventBus')\n    await eventBus.emitEvent('notifications.create', {\n      type: 'customer_accounts.domain_mapping.activated',\n      tenantId,\n      organizationId,\n      sourceEntityId: id,\n      data: { hostname },\n    })\n  } catch {\n    // Notifications module may be absent \u2014 best-effort.\n  }\n}\n"],
+  "mappings": "AAEO,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAEA,eAAO,OACL,SACA,KACe;AACf,QAAM,OAAQ,WAAW,CAAC;AAC1B,QAAM,KAAK,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK;AACnD,QAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,QAAM,iBAAiB,OAAO,KAAK,mBAAmB,WAAW,KAAK,iBAAiB;AACvF,QAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,MAAI,CAAC,MAAM,CAAC,YAAY,CAAC,eAAgB;AAEzC,MAAI;AACF,UAAM,WAAW,IAAI,QAAkB,UAAU;AACjD,UAAM,SAAS,UAAU,wBAAwB;AAAA,MAC/C,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,gBAAgB;AAAA,MAChB,MAAM,EAAE,SAAS;AAAA,IACnB,CAAC;AAAA,EACH,QAAQ;AAAA,EAER;AACF;",
+  "names": []
+}

package/dist/modules/customer_accounts/subscribers/notifyDomainDnsFailed.js

@@ -0,0 +1,30 @@
+const metadata = {
+  event: "customer_accounts.domain_mapping.dns_failed",
+  persistent: true,
+  id: "customer_accounts:notify-domain-dns-failed"
+};
+async function handle(payload, ctx) {
+  const data = payload ?? {};
+  const id = typeof data.id === "string" ? data.id : null;
+  const tenantId = typeof data.tenantId === "string" ? data.tenantId : null;
+  const organizationId = typeof data.organizationId === "string" ? data.organizationId : null;
+  const hostname = typeof data.hostname === "string" ? data.hostname : "";
+  const reason = typeof data.reason === "string" ? data.reason : "";
+  if (!id || !tenantId || !organizationId) return;
+  try {
+    const eventBus = ctx.resolve("eventBus");
+    await eventBus.emitEvent("notifications.create", {
+      type: "customer_accounts.domain_mapping.dns_failed",
+      tenantId,
+      organizationId,
+      sourceEntityId: id,
+      data: { hostname, reason }
+    });
+  } catch {
+  }
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=notifyDomainDnsFailed.js.map

package/dist/modules/customer_accounts/subscribers/notifyDomainDnsFailed.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customer_accounts/subscribers/notifyDomainDnsFailed.ts"],
+  "sourcesContent": ["import type { EventBus } from '@open-mercato/events/types'\n\nexport const metadata = {\n  event: 'customer_accounts.domain_mapping.dns_failed',\n  persistent: true,\n  id: 'customer_accounts:notify-domain-dns-failed',\n}\n\nexport default async function handle(\n  payload: unknown,\n  ctx: { resolve: <T = unknown>(name: string) => T },\n): Promise<void> {\n  const data = (payload ?? {}) as Record<string, unknown>\n  const id = typeof data.id === 'string' ? data.id : null\n  const tenantId = typeof data.tenantId === 'string' ? data.tenantId : null\n  const organizationId = typeof data.organizationId === 'string' ? data.organizationId : null\n  const hostname = typeof data.hostname === 'string' ? data.hostname : ''\n  const reason = typeof data.reason === 'string' ? data.reason : ''\n  if (!id || !tenantId || !organizationId) return\n\n  try {\n    const eventBus = ctx.resolve<EventBus>('eventBus')\n    await eventBus.emitEvent('notifications.create', {\n      type: 'customer_accounts.domain_mapping.dns_failed',\n      tenantId,\n      organizationId,\n      sourceEntityId: id,\n      data: { hostname, reason },\n    })\n  } catch {\n    // Notifications module may be absent \u2014 best-effort.\n  }\n}\n"],
+  "mappings": "AAEO,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAEA,eAAO,OACL,SACA,KACe;AACf,QAAM,OAAQ,WAAW,CAAC;AAC1B,QAAM,KAAK,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK;AACnD,QAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,QAAM,iBAAiB,OAAO,KAAK,mBAAmB,WAAW,KAAK,iBAAiB;AACvF,QAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,QAAM,SAAS,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS;AAC/D,MAAI,CAAC,MAAM,CAAC,YAAY,CAAC,eAAgB;AAEzC,MAAI;AACF,UAAM,WAAW,IAAI,QAAkB,UAAU;AACjD,UAAM,SAAS,UAAU,wBAAwB;AAAA,MAC/C,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,gBAAgB;AAAA,MAChB,MAAM,EAAE,UAAU,OAAO;AAAA,IAC3B,CAAC;AAAA,EACH,QAAQ;AAAA,EAER;AACF;",
+  "names": []
+}

package/dist/modules/customer_accounts/subscribers/notifyDomainTlsFailed.js

@@ -0,0 +1,31 @@
+const metadata = {
+  event: "customer_accounts.domain_mapping.tls_failed",
+  persistent: true,
+  id: "customer_accounts:notify-domain-tls-failed"
+};
+async function handle(payload, ctx) {
+  const data = payload ?? {};
+  const id = typeof data.id === "string" ? data.id : null;
+  const tenantId = typeof data.tenantId === "string" ? data.tenantId : null;
+  const organizationId = typeof data.organizationId === "string" ? data.organizationId : null;
+  const hostname = typeof data.hostname === "string" ? data.hostname : "";
+  const reason = typeof data.reason === "string" ? data.reason : "";
+  const retryCount = typeof data.retryCount === "number" ? data.retryCount : 0;
+  if (!id || !tenantId || !organizationId) return;
+  try {
+    const eventBus = ctx.resolve("eventBus");
+    await eventBus.emitEvent("notifications.create", {
+      type: "customer_accounts.domain_mapping.tls_failed",
+      tenantId,
+      organizationId,
+      sourceEntityId: id,
+      data: { hostname, reason, retryCount }
+    });
+  } catch {
+  }
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=notifyDomainTlsFailed.js.map

package/dist/modules/customer_accounts/subscribers/notifyDomainTlsFailed.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customer_accounts/subscribers/notifyDomainTlsFailed.ts"],
+  "sourcesContent": ["import type { EventBus } from '@open-mercato/events/types'\n\nexport const metadata = {\n  event: 'customer_accounts.domain_mapping.tls_failed',\n  persistent: true,\n  id: 'customer_accounts:notify-domain-tls-failed',\n}\n\nexport default async function handle(\n  payload: unknown,\n  ctx: { resolve: <T = unknown>(name: string) => T },\n): Promise<void> {\n  const data = (payload ?? {}) as Record<string, unknown>\n  const id = typeof data.id === 'string' ? data.id : null\n  const tenantId = typeof data.tenantId === 'string' ? data.tenantId : null\n  const organizationId = typeof data.organizationId === 'string' ? data.organizationId : null\n  const hostname = typeof data.hostname === 'string' ? data.hostname : ''\n  const reason = typeof data.reason === 'string' ? data.reason : ''\n  const retryCount = typeof data.retryCount === 'number' ? data.retryCount : 0\n  if (!id || !tenantId || !organizationId) return\n\n  try {\n    const eventBus = ctx.resolve<EventBus>('eventBus')\n    await eventBus.emitEvent('notifications.create', {\n      type: 'customer_accounts.domain_mapping.tls_failed',\n      tenantId,\n      organizationId,\n      sourceEntityId: id,\n      data: { hostname, reason, retryCount },\n    })\n  } catch {\n    // Notifications module may be absent \u2014 best-effort.\n  }\n}\n"],
+  "mappings": "AAEO,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAEA,eAAO,OACL,SACA,KACe;AACf,QAAM,OAAQ,WAAW,CAAC;AAC1B,QAAM,KAAK,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK;AACnD,QAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,QAAM,iBAAiB,OAAO,KAAK,mBAAmB,WAAW,KAAK,iBAAiB;AACvF,QAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,QAAM,SAAS,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS;AAC/D,QAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa;AAC3E,MAAI,CAAC,MAAM,CAAC,YAAY,CAAC,eAAgB;AAEzC,MAAI;AACF,UAAM,WAAW,IAAI,QAAkB,UAAU;AACjD,UAAM,SAAS,UAAU,wBAAwB;AAAA,MAC/C,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,gBAAgB;AAAA,MAChB,MAAM,EAAE,UAAU,QAAQ,WAAW;AAAA,IACvC,CAAC;AAAA,EACH,QAAQ;AAAA,EAER;AACF;",
+  "names": []
+}

package/dist/modules/customer_accounts/subscribers/notifyDomainVerified.js

@@ -0,0 +1,29 @@
+const metadata = {
+  event: "customer_accounts.domain_mapping.verified",
+  persistent: true,
+  id: "customer_accounts:notify-domain-verified"
+};
+async function handle(payload, ctx) {
+  const data = payload ?? {};
+  const id = typeof data.id === "string" ? data.id : null;
+  const tenantId = typeof data.tenantId === "string" ? data.tenantId : null;
+  const organizationId = typeof data.organizationId === "string" ? data.organizationId : null;
+  const hostname = typeof data.hostname === "string" ? data.hostname : "";
+  if (!id || !tenantId || !organizationId) return;
+  try {
+    const eventBus = ctx.resolve("eventBus");
+    await eventBus.emitEvent("notifications.create", {
+      type: "customer_accounts.domain_mapping.verified",
+      tenantId,
+      organizationId,
+      sourceEntityId: id,
+      data: { hostname }
+    });
+  } catch {
+  }
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=notifyDomainVerified.js.map

package/dist/modules/customer_accounts/subscribers/notifyDomainVerified.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customer_accounts/subscribers/notifyDomainVerified.ts"],
+  "sourcesContent": ["import type { EventBus } from '@open-mercato/events/types'\n\nexport const metadata = {\n  event: 'customer_accounts.domain_mapping.verified',\n  persistent: true,\n  id: 'customer_accounts:notify-domain-verified',\n}\n\nexport default async function handle(\n  payload: unknown,\n  ctx: { resolve: <T = unknown>(name: string) => T },\n): Promise<void> {\n  const data = (payload ?? {}) as Record<string, unknown>\n  const id = typeof data.id === 'string' ? data.id : null\n  const tenantId = typeof data.tenantId === 'string' ? data.tenantId : null\n  const organizationId = typeof data.organizationId === 'string' ? data.organizationId : null\n  const hostname = typeof data.hostname === 'string' ? data.hostname : ''\n  if (!id || !tenantId || !organizationId) return\n\n  try {\n    const eventBus = ctx.resolve<EventBus>('eventBus')\n    await eventBus.emitEvent('notifications.create', {\n      type: 'customer_accounts.domain_mapping.verified',\n      tenantId,\n      organizationId,\n      sourceEntityId: id,\n      data: { hostname },\n    })\n  } catch {\n    // Notifications module may be absent \u2014 best-effort.\n  }\n}\n"],
+  "mappings": "AAEO,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAEA,eAAO,OACL,SACA,KACe;AACf,QAAM,OAAQ,WAAW,CAAC;AAC1B,QAAM,KAAK,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK;AACnD,QAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,QAAM,iBAAiB,OAAO,KAAK,mBAAmB,WAAW,KAAK,iBAAiB;AACvF,QAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,MAAI,CAAC,MAAM,CAAC,YAAY,CAAC,eAAgB;AAEzC,MAAI;AACF,UAAM,WAAW,IAAI,QAAkB,UAAU;AACjD,UAAM,SAAS,UAAU,wBAAwB;AAAA,MAC/C,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,gBAAgB;AAAA,MAChB,MAAM,EAAE,SAAS;AAAA,IACnB,CAAC;AAAA,EACH,QAAQ;AAAA,EAER;AACF;",
+  "names": []
+}

package/dist/modules/customer_accounts/widgets/injection/account-status/widget.client.js

@@ -6,6 +6,7 @@ import { apiCall } from "@open-mercato/ui/backend/utils/apiCall";
 import { useT } from "@open-mercato/shared/lib/i18n/context";
 import { Button } from "@open-mercato/ui/primitives/button";
 import { Input } from "@open-mercato/ui/primitives/input";
+import { EmailInput } from "@open-mercato/ui/primitives/email-input";
 import { flash } from "@open-mercato/ui/backend/FlashMessages";
 function InviteForm({ personEntityId, onSuccess }) {
   const t = useT();
@@ -121,10 +122,9 @@ function InviteForm({ personEntityId, onSuccess }) {
     /* @__PURE__ */ jsxs("div", { children: [
       /* @__PURE__ */ jsx("label", { htmlFor: "invite-email", className: "block text-xs font-medium text-muted-foreground mb-1", children: t("common.email", "Email") }),
       /* @__PURE__ */ jsx(
-        Input,
+        EmailInput,
         {
           id: "invite-email",
-          type: "email",
           size: "sm",
           value: email,
           onChange: (event) => setEmail(event.target.value),

package/dist/modules/customer_accounts/widgets/injection/account-status/widget.client.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/customer_accounts/widgets/injection/account-status/widget.client.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport React from 'react'\nimport { useQuery, useQueryClient } from '@tanstack/react-query'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Input } from '@open-mercato/ui/primitives/input'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\n\ninterface AccountStatusData {\n  id: string\n  email: string\n  isActive: boolean\n  emailVerified: boolean\n  lastLoginAt: string | null\n}\n\ninterface AccountStatusProps {\n  context?: {\n    entityId?: string\n    recordId?: string\n  }\n}\n\ninterface RoleOption {\n  id: string\n  name: string\n}\n\ninterface PersonData {\n  person?: {\n    primaryEmail?: string | null\n    displayName?: string | null\n  }\n  profile?: {\n    firstName?: string | null\n    lastName?: string | null\n  } | null\n}\n\nfunction InviteForm({ personEntityId, onSuccess }: { personEntityId: string; onSuccess: () => void }) {\n  const t = useT()\n  const [isLoadingPerson, setIsLoadingPerson] = React.useState(true)\n  const [email, setEmail] = React.useState('')\n  const [displayName, setDisplayName] = React.useState('')\n  const [selectedRoleIds, setSelectedRoleIds] = React.useState<string[]>([])\n  const [availableRoles, setAvailableRoles] = React.useState<RoleOption[]>([])\n  const [isLoadingRoles, setIsLoadingRoles] = React.useState(true)\n  const [isSubmitting, setIsSubmitting] = React.useState(false)\n\n  React.useEffect(() => {\n    let cancelled = false\n    async function loadPerson() {\n      try {\n        const call = await apiCall<PersonData>(\n          `/api/customers/people/${encodeURIComponent(personEntityId)}`,\n        )\n        if (cancelled) return\n        if (call.ok && call.result) {\n          const person = call.result.person\n          const profile = call.result.profile\n          if (person?.primaryEmail) {\n            setEmail(person.primaryEmail)\n          }\n          const nameParts = [profile?.firstName, profile?.lastName].filter(Boolean)\n          if (nameParts.length > 0) {\n            setDisplayName(nameParts.join(' '))\n          } else if (person?.displayName) {\n            setDisplayName(person.displayName)\n          }\n        }\n      } catch {\n        /* ignore - fields will remain empty for manual entry */\n      } finally {\n        if (!cancelled) setIsLoadingPerson(false)\n      }\n    }\n    loadPerson()\n    return () => { cancelled = true }\n  }, [personEntityId])\n\n  React.useEffect(() => {\n    let cancelled = false\n    async function loadRoles() {\n      try {\n        const call = await apiCall<{ items?: RoleOption[] }>(\n          '/api/customer_accounts/admin/roles?pageSize=100',\n        )\n        if (cancelled) return\n        if (call.ok && call.result) {\n          const items = Array.isArray(call.result.items) ? call.result.items : []\n          setAvailableRoles(items.map((role) => ({ id: role.id, name: role.name })))\n        }\n      } catch {\n        /* ignore */\n      } finally {\n        if (!cancelled) setIsLoadingRoles(false)\n      }\n    }\n    loadRoles()\n    return () => { cancelled = true }\n  }, [])\n\n  function toggleRole(roleId: string) {\n    setSelectedRoleIds((prev) =>\n      prev.includes(roleId) ? prev.filter((id) => id !== roleId) : [...prev, roleId],\n    )\n  }\n\n  async function handleSubmit(event: React.FormEvent) {\n    event.preventDefault()\n\n    const trimmedEmail = email.trim()\n    if (!trimmedEmail) {\n      flash(t('customer_accounts.widgets.invite.error.emailRequired', 'Email is required'), 'error')\n      return\n    }\n    if (selectedRoleIds.length === 0) {\n      flash(t('customer_accounts.widgets.invite.error.roleRequired', 'At least one role must be selected'), 'error')\n      return\n    }\n\n    setIsSubmitting(true)\n    try {\n      const call = await apiCall<{ ok: boolean; error?: string }>(\n        '/api/customer_accounts/admin/users-invite',\n        {\n          method: 'POST',\n          headers: { 'content-type': 'application/json' },\n          body: JSON.stringify({\n            email: trimmedEmail,\n            roleIds: selectedRoleIds,\n            displayName: displayName.trim() || undefined,\n            customerEntityId: personEntityId,\n          }),\n        },\n      )\n\n      if (!call.ok) {\n        const errorMessage = (call.result as Record<string, unknown> | null)?.error as string | undefined\n        flash(errorMessage || t('customer_accounts.widgets.invite.error.failed', 'Failed to send invitation'), 'error')\n        return\n      }\n\n      flash(t('customer_accounts.widgets.invite.success', 'Invitation sent successfully'), 'success')\n      onSuccess()\n    } catch {\n      flash(t('customer_accounts.widgets.invite.error.failed', 'Failed to send invitation'), 'error')\n    } finally {\n      setIsSubmitting(false)\n    }\n  }\n\n  const isLoading = isLoadingPerson || isLoadingRoles\n\n  if (isLoading) {\n    return (\n      <div className=\"text-sm text-muted-foreground py-2\">\n        {t('common.loading', 'Loading...')}\n      </div>\n    )\n  }\n\n  return (\n    <form onSubmit={handleSubmit} className=\"space-y-3 mt-2\">\n      <div>\n        <label htmlFor=\"invite-email\" className=\"block text-xs font-medium text-muted-foreground mb-1\">\n          {t('common.email', 'Email')}\n        </label>\n        <Input\n          id=\"invite-email\"\n          type=\"email\"\n          size=\"sm\"\n          value={email}\n          onChange={(event) => setEmail(event.target.value)}\n          required\n          disabled={isSubmitting}\n        />\n      </div>\n\n      <div>\n        <label htmlFor=\"invite-display-name\" className=\"block text-xs font-medium text-muted-foreground mb-1\">\n          {t('customer_accounts.widgets.invite.displayName', 'Display Name')}\n        </label>\n        <Input\n          id=\"invite-display-name\"\n          type=\"text\"\n          size=\"sm\"\n          value={displayName}\n          onChange={(event) => setDisplayName(event.target.value)}\n          disabled={isSubmitting}\n        />\n      </div>\n\n      <div>\n        <div className=\"text-xs font-medium text-muted-foreground mb-1.5\">\n          {t('customer_accounts.widgets.invite.roles', 'Roles')}\n        </div>\n        {availableRoles.length === 0 ? (\n          <div className=\"text-xs text-muted-foreground\">\n            {t('customer_accounts.widgets.invite.noRoles', 'No roles available')}\n          </div>\n        ) : (\n          <div className=\"flex flex-wrap gap-1.5\">\n            {availableRoles.map((role) => (\n              <Button\n                key={role.id}\n                type=\"button\"\n                variant={selectedRoleIds.includes(role.id) ? 'default' : 'outline'}\n                size=\"sm\"\n                onClick={() => toggleRole(role.id)}\n                disabled={isSubmitting}\n                className=\"text-xs h-7\"\n              >\n                {role.name}\n              </Button>\n            ))}\n          </div>\n        )}\n      </div>\n\n      <div className=\"flex justify-end gap-2 pt-1\">\n        <Button\n          type=\"submit\"\n          size=\"sm\"\n          disabled={isSubmitting || !email.trim() || selectedRoleIds.length === 0}\n        >\n          {isSubmitting\n            ? t('common.loading', 'Loading...')\n            : t('customer_accounts.widgets.invite.submit', 'Send Invitation')}\n        </Button>\n      </div>\n    </form>\n  )\n}\n\nexport default function AccountStatusWidget({ context }: AccountStatusProps) {\n  const t = useT()\n  const queryClient = useQueryClient()\n  const personEntityId = context?.recordId\n  const [showInviteForm, setShowInviteForm] = React.useState(false)\n\n  const { data, isLoading } = useQuery({\n    queryKey: ['customer-account-status', personEntityId],\n    queryFn: async (): Promise<AccountStatusData | null> => {\n      if (!personEntityId) return null\n      const result = await apiCall(`/api/customer_accounts/admin/users?personEntityId=${personEntityId}&pageSize=1`)\n      if (!result.ok) return null\n      const json = result.result as Record<string, unknown> | null\n      const items = json?.items as AccountStatusData[] | undefined\n      return items?.[0] || null\n    },\n    enabled: !!personEntityId,\n  })\n\n  function handleInviteSuccess() {\n    setShowInviteForm(false)\n    queryClient.invalidateQueries({ queryKey: ['customer-account-status', personEntityId] })\n  }\n\n  if (isLoading) {\n    return <div className=\"text-sm text-muted-foreground\">{t('common.loading', 'Loading...')}</div>\n  }\n\n  if (!data) {\n    return (\n      <div className=\"rounded-md border p-3\">\n        <div className=\"text-sm font-medium mb-1\">{t('customer_accounts.widgets.accountStatus', 'Portal Account')}</div>\n        <div className=\"text-sm text-muted-foreground\">{t('customer_accounts.widgets.noAccount', 'No portal account linked')}</div>\n        {!showInviteForm && personEntityId && (\n          <div className=\"mt-2\">\n            <Button\n              type=\"button\"\n              variant=\"outline\"\n              size=\"sm\"\n              onClick={() => setShowInviteForm(true)}\n            >\n              {t('customer_accounts.widgets.invite.button', 'Invite to Portal')}\n            </Button>\n          </div>\n        )}\n        {showInviteForm && personEntityId && (\n          <InviteForm personEntityId={personEntityId} onSuccess={handleInviteSuccess} />\n        )}\n      </div>\n    )\n  }\n\n  return (\n    <div className=\"rounded-md border p-3\">\n      <div className=\"text-sm font-medium mb-2\">{t('customer_accounts.widgets.accountStatus', 'Portal Account')}</div>\n      <div className=\"space-y-1 text-sm\">\n        <div className=\"flex justify-between\">\n          <span className=\"text-muted-foreground\">{t('common.status', 'Status')}</span>\n          <span className={data.isActive ? 'text-green-600' : 'text-red-600'}>\n            {data.isActive ? t('common.active', 'Active') : t('common.inactive', 'Inactive')}\n          </span>\n        </div>\n        <div className=\"flex justify-between\">\n          <span className=\"text-muted-foreground\">{t('common.email', 'Email')}</span>\n          <span>{data.email}</span>\n        </div>\n        {data.emailVerified !== undefined && (\n          <div className=\"flex justify-between\">\n            <span className=\"text-muted-foreground\">{t('customer_accounts.widgets.emailVerified', 'Email Verified')}</span>\n            <span>{data.emailVerified ? '\u2713' : '\u2717'}</span>\n          </div>\n        )}\n        {data.lastLoginAt && (\n          <div className=\"flex justify-between\">\n            <span className=\"text-muted-foreground\">{t('customer_accounts.widgets.lastLogin', 'Last Login')}</span>\n            <span>{new Date(data.lastLoginAt).toLocaleDateString()}</span>\n          </div>\n        )}\n      </div>\n      <div className=\"mt-2\">\n        <a\n          href={`/backend/customer_accounts/users/${data.id}`}\n          className=\"text-xs text-primary hover:underline\"\n        >\n          {t('customer_accounts.widgets.viewAccount', 'View account details \u2192')}\n        </a>\n      </div>\n    </div>\n  )\n}\n"],
-  "mappings": ";AA8JM,cAQA,YARA;AA5JN,OAAO,WAAW;AAClB,SAAS,UAAU,sBAAsB;AACzC,SAAS,eAAe;AACxB,SAAS,YAAY;AACrB,SAAS,cAAc;AACvB,SAAS,aAAa;AACtB,SAAS,aAAa;AAiCtB,SAAS,WAAW,EAAE,gBAAgB,UAAU,GAAsD;AACpG,QAAM,IAAI,KAAK;AACf,QAAM,CAAC,iBAAiB,kBAAkB,IAAI,MAAM,SAAS,IAAI;AACjE,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAS,EAAE;AAC3C,QAAM,CAAC,aAAa,cAAc,IAAI,MAAM,SAAS,EAAE;AACvD,QAAM,CAAC,iBAAiB,kBAAkB,IAAI,MAAM,SAAmB,CAAC,CAAC;AACzE,QAAM,CAAC,gBAAgB,iBAAiB,IAAI,MAAM,SAAuB,CAAC,CAAC;AAC3E,QAAM,CAAC,gBAAgB,iBAAiB,IAAI,MAAM,SAAS,IAAI;AAC/D,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAS,KAAK;AAE5D,QAAM,UAAU,MAAM;AACpB,QAAI,YAAY;AAChB,mBAAe,aAAa;AAC1B,UAAI;AACF,cAAM,OAAO,MAAM;AAAA,UACjB,yBAAyB,mBAAmB,cAAc,CAAC;AAAA,QAC7D;AACA,YAAI,UAAW;AACf,YAAI,KAAK,MAAM,KAAK,QAAQ;AAC1B,gBAAM,SAAS,KAAK,OAAO;AAC3B,gBAAM,UAAU,KAAK,OAAO;AAC5B,cAAI,QAAQ,cAAc;AACxB,qBAAS,OAAO,YAAY;AAAA,UAC9B;AACA,gBAAM,YAAY,CAAC,SAAS,WAAW,SAAS,QAAQ,EAAE,OAAO,OAAO;AACxE,cAAI,UAAU,SAAS,GAAG;AACxB,2BAAe,UAAU,KAAK,GAAG,CAAC;AAAA,UACpC,WAAW,QAAQ,aAAa;AAC9B,2BAAe,OAAO,WAAW;AAAA,UACnC;AAAA,QACF;AAAA,MACF,QAAQ;AAAA,MAER,UAAE;AACA,YAAI,CAAC,UAAW,oBAAmB,KAAK;AAAA,MAC1C;AAAA,IACF;AACA,eAAW;AACX,WAAO,MAAM;AAAE,kBAAY;AAAA,IAAK;AAAA,EAClC,GAAG,CAAC,cAAc,CAAC;AAEnB,QAAM,UAAU,MAAM;AACpB,QAAI,YAAY;AAChB,mBAAe,YAAY;AACzB,UAAI;AACF,cAAM,OAAO,MAAM;AAAA,UACjB;AAAA,QACF;AACA,YAAI,UAAW;AACf,YAAI,KAAK,MAAM,KAAK,QAAQ;AAC1B,gBAAM,QAAQ,MAAM,QAAQ,KAAK,OAAO,KAAK,IAAI,KAAK,OAAO,QAAQ,CAAC;AACtE,4BAAkB,MAAM,IAAI,CAAC,UAAU,EAAE,IAAI,KAAK,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;AAAA,QAC3E;AAAA,MACF,QAAQ;AAAA,MAER,UAAE;AACA,YAAI,CAAC,UAAW,mBAAkB,KAAK;AAAA,MACzC;AAAA,IACF;AACA,cAAU;AACV,WAAO,MAAM;AAAE,kBAAY;AAAA,IAAK;AAAA,EAClC,GAAG,CAAC,CAAC;AAEL,WAAS,WAAW,QAAgB;AAClC;AAAA,MAAmB,CAAC,SAClB,KAAK,SAAS,MAAM,IAAI,KAAK,OAAO,CAAC,OAAO,OAAO,MAAM,IAAI,CAAC,GAAG,MAAM,MAAM;AAAA,IAC/E;AAAA,EACF;AAEA,iBAAe,aAAa,OAAwB;AAClD,UAAM,eAAe;AAErB,UAAM,eAAe,MAAM,KAAK;AAChC,QAAI,CAAC,cAAc;AACjB,YAAM,EAAE,wDAAwD,mBAAmB,GAAG,OAAO;AAC7F;AAAA,IACF;AACA,QAAI,gBAAgB,WAAW,GAAG;AAChC,YAAM,EAAE,uDAAuD,oCAAoC,GAAG,OAAO;AAC7G;AAAA,IACF;AAEA,oBAAgB,IAAI;AACpB,QAAI;AACF,YAAM,OAAO,MAAM;AAAA,QACjB;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU;AAAA,YACnB,OAAO;AAAA,YACP,SAAS;AAAA,YACT,aAAa,YAAY,KAAK,KAAK;AAAA,YACnC,kBAAkB;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,MACF;AAEA,UAAI,CAAC,KAAK,IAAI;AACZ,cAAM,eAAgB,KAAK,QAA2C;AACtE,cAAM,gBAAgB,EAAE,iDAAiD,2BAA2B,GAAG,OAAO;AAC9G;AAAA,MACF;AAEA,YAAM,EAAE,4CAA4C,8BAA8B,GAAG,SAAS;AAC9F,gBAAU;AAAA,IACZ,QAAQ;AACN,YAAM,EAAE,iDAAiD,2BAA2B,GAAG,OAAO;AAAA,IAChG,UAAE;AACA,sBAAgB,KAAK;AAAA,IACvB;AAAA,EACF;AAEA,QAAM,YAAY,mBAAmB;AAErC,MAAI,WAAW;AACb,WACE,oBAAC,SAAI,WAAU,sCACZ,YAAE,kBAAkB,YAAY,GACnC;AAAA,EAEJ;AAEA,SACE,qBAAC,UAAK,UAAU,cAAc,WAAU,kBACtC;AAAA,yBAAC,SACC;AAAA,0BAAC,WAAM,SAAQ,gBAAe,WAAU,wDACrC,YAAE,gBAAgB,OAAO,GAC5B;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,IAAG;AAAA,UACH,MAAK;AAAA,UACL,MAAK;AAAA,UACL,OAAO;AAAA,UACP,UAAU,CAAC,UAAU,SAAS,MAAM,OAAO,KAAK;AAAA,UAChD,UAAQ;AAAA,UACR,UAAU;AAAA;AAAA,MACZ;AAAA,OACF;AAAA,IAEA,qBAAC,SACC;AAAA,0BAAC,WAAM,SAAQ,uBAAsB,WAAU,wDAC5C,YAAE,gDAAgD,cAAc,GACnE;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,IAAG;AAAA,UACH,MAAK;AAAA,UACL,MAAK;AAAA,UACL,OAAO;AAAA,UACP,UAAU,CAAC,UAAU,eAAe,MAAM,OAAO,KAAK;AAAA,UACtD,UAAU;AAAA;AAAA,MACZ;AAAA,OACF;AAAA,IAEA,qBAAC,SACC;AAAA,0BAAC,SAAI,WAAU,oDACZ,YAAE,0CAA0C,OAAO,GACtD;AAAA,MACC,eAAe,WAAW,IACzB,oBAAC,SAAI,WAAU,iCACZ,YAAE,4CAA4C,oBAAoB,GACrE,IAEA,oBAAC,SAAI,WAAU,0BACZ,yBAAe,IAAI,CAAC,SACnB;AAAA,QAAC;AAAA;AAAA,UAEC,MAAK;AAAA,UACL,SAAS,gBAAgB,SAAS,KAAK,EAAE,IAAI,YAAY;AAAA,UACzD,MAAK;AAAA,UACL,SAAS,MAAM,WAAW,KAAK,EAAE;AAAA,UACjC,UAAU;AAAA,UACV,WAAU;AAAA,UAET,eAAK;AAAA;AAAA,QARD,KAAK;AAAA,MASZ,CACD,GACH;AAAA,OAEJ;AAAA,IAEA,oBAAC,SAAI,WAAU,+BACb;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,MAAK;AAAA,QACL,UAAU,gBAAgB,CAAC,MAAM,KAAK,KAAK,gBAAgB,WAAW;AAAA,QAErE,yBACG,EAAE,kBAAkB,YAAY,IAChC,EAAE,2CAA2C,iBAAiB;AAAA;AAAA,IACpE,GACF;AAAA,KACF;AAEJ;AAEe,SAAR,oBAAqC,EAAE,QAAQ,GAAuB;AAC3E,QAAM,IAAI,KAAK;AACf,QAAM,cAAc,eAAe;AACnC,QAAM,iBAAiB,SAAS;AAChC,QAAM,CAAC,gBAAgB,iBAAiB,IAAI,MAAM,SAAS,KAAK;AAEhE,QAAM,EAAE,MAAM,UAAU,IAAI,SAAS;AAAA,IACnC,UAAU,CAAC,2BAA2B,cAAc;AAAA,IACpD,SAAS,YAA+C;AACtD,UAAI,CAAC,eAAgB,QAAO;AAC5B,YAAM,SAAS,MAAM,QAAQ,qDAAqD,cAAc,aAAa;AAC7G,UAAI,CAAC,OAAO,GAAI,QAAO;AACvB,YAAM,OAAO,OAAO;AACpB,YAAM,QAAQ,MAAM;AACpB,aAAO,QAAQ,CAAC,KAAK;AAAA,IACvB;AAAA,IACA,SAAS,CAAC,CAAC;AAAA,EACb,CAAC;AAED,WAAS,sBAAsB;AAC7B,sBAAkB,KAAK;AACvB,gBAAY,kBAAkB,EAAE,UAAU,CAAC,2BAA2B,cAAc,EAAE,CAAC;AAAA,EACzF;AAEA,MAAI,WAAW;AACb,WAAO,oBAAC,SAAI,WAAU,iCAAiC,YAAE,kBAAkB,YAAY,GAAE;AAAA,EAC3F;AAEA,MAAI,CAAC,MAAM;AACT,WACE,qBAAC,SAAI,WAAU,yBACb;AAAA,0BAAC,SAAI,WAAU,4BAA4B,YAAE,2CAA2C,gBAAgB,GAAE;AAAA,MAC1G,oBAAC,SAAI,WAAU,iCAAiC,YAAE,uCAAuC,0BAA0B,GAAE;AAAA,MACpH,CAAC,kBAAkB,kBAClB,oBAAC,SAAI,WAAU,QACb;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,SAAQ;AAAA,UACR,MAAK;AAAA,UACL,SAAS,MAAM,kBAAkB,IAAI;AAAA,UAEpC,YAAE,2CAA2C,kBAAkB;AAAA;AAAA,MAClE,GACF;AAAA,MAED,kBAAkB,kBACjB,oBAAC,cAAW,gBAAgC,WAAW,qBAAqB;AAAA,OAEhF;AAAA,EAEJ;AAEA,SACE,qBAAC,SAAI,WAAU,yBACb;AAAA,wBAAC,SAAI,WAAU,4BAA4B,YAAE,2CAA2C,gBAAgB,GAAE;AAAA,IAC1G,qBAAC,SAAI,WAAU,qBACb;AAAA,2BAAC,SAAI,WAAU,wBACb;AAAA,4BAAC,UAAK,WAAU,yBAAyB,YAAE,iBAAiB,QAAQ,GAAE;AAAA,QACtE,oBAAC,UAAK,WAAW,KAAK,WAAW,mBAAmB,gBACjD,eAAK,WAAW,EAAE,iBAAiB,QAAQ,IAAI,EAAE,mBAAmB,UAAU,GACjF;AAAA,SACF;AAAA,MACA,qBAAC,SAAI,WAAU,wBACb;AAAA,4BAAC,UAAK,WAAU,yBAAyB,YAAE,gBAAgB,OAAO,GAAE;AAAA,QACpE,oBAAC,UAAM,eAAK,OAAM;AAAA,SACpB;AAAA,MACC,KAAK,kBAAkB,UACtB,qBAAC,SAAI,WAAU,wBACb;AAAA,4BAAC,UAAK,WAAU,yBAAyB,YAAE,2CAA2C,gBAAgB,GAAE;AAAA,QACxG,oBAAC,UAAM,eAAK,gBAAgB,WAAM,UAAI;AAAA,SACxC;AAAA,MAED,KAAK,eACJ,qBAAC,SAAI,WAAU,wBACb;AAAA,4BAAC,UAAK,WAAU,yBAAyB,YAAE,uCAAuC,YAAY,GAAE;AAAA,QAChG,oBAAC,UAAM,cAAI,KAAK,KAAK,WAAW,EAAE,mBAAmB,GAAE;AAAA,SACzD;AAAA,OAEJ;AAAA,IACA,oBAAC,SAAI,WAAU,QACb;AAAA,MAAC;AAAA;AAAA,QACC,MAAM,oCAAoC,KAAK,EAAE;AAAA,QACjD,WAAU;AAAA,QAET,YAAE,yCAAyC,6BAAwB;AAAA;AAAA,IACtE,GACF;AAAA,KACF;AAEJ;",
+  "sourcesContent": ["\"use client\"\n\nimport React from 'react'\nimport { useQuery, useQueryClient } from '@tanstack/react-query'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Input } from '@open-mercato/ui/primitives/input'\nimport { EmailInput } from '@open-mercato/ui/primitives/email-input'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\n\ninterface AccountStatusData {\n  id: string\n  email: string\n  isActive: boolean\n  emailVerified: boolean\n  lastLoginAt: string | null\n}\n\ninterface AccountStatusProps {\n  context?: {\n    entityId?: string\n    recordId?: string\n  }\n}\n\ninterface RoleOption {\n  id: string\n  name: string\n}\n\ninterface PersonData {\n  person?: {\n    primaryEmail?: string | null\n    displayName?: string | null\n  }\n  profile?: {\n    firstName?: string | null\n    lastName?: string | null\n  } | null\n}\n\nfunction InviteForm({ personEntityId, onSuccess }: { personEntityId: string; onSuccess: () => void }) {\n  const t = useT()\n  const [isLoadingPerson, setIsLoadingPerson] = React.useState(true)\n  const [email, setEmail] = React.useState('')\n  const [displayName, setDisplayName] = React.useState('')\n  const [selectedRoleIds, setSelectedRoleIds] = React.useState<string[]>([])\n  const [availableRoles, setAvailableRoles] = React.useState<RoleOption[]>([])\n  const [isLoadingRoles, setIsLoadingRoles] = React.useState(true)\n  const [isSubmitting, setIsSubmitting] = React.useState(false)\n\n  React.useEffect(() => {\n    let cancelled = false\n    async function loadPerson() {\n      try {\n        const call = await apiCall<PersonData>(\n          `/api/customers/people/${encodeURIComponent(personEntityId)}`,\n        )\n        if (cancelled) return\n        if (call.ok && call.result) {\n          const person = call.result.person\n          const profile = call.result.profile\n          if (person?.primaryEmail) {\n            setEmail(person.primaryEmail)\n          }\n          const nameParts = [profile?.firstName, profile?.lastName].filter(Boolean)\n          if (nameParts.length > 0) {\n            setDisplayName(nameParts.join(' '))\n          } else if (person?.displayName) {\n            setDisplayName(person.displayName)\n          }\n        }\n      } catch {\n        /* ignore - fields will remain empty for manual entry */\n      } finally {\n        if (!cancelled) setIsLoadingPerson(false)\n      }\n    }\n    loadPerson()\n    return () => { cancelled = true }\n  }, [personEntityId])\n\n  React.useEffect(() => {\n    let cancelled = false\n    async function loadRoles() {\n      try {\n        const call = await apiCall<{ items?: RoleOption[] }>(\n          '/api/customer_accounts/admin/roles?pageSize=100',\n        )\n        if (cancelled) return\n        if (call.ok && call.result) {\n          const items = Array.isArray(call.result.items) ? call.result.items : []\n          setAvailableRoles(items.map((role) => ({ id: role.id, name: role.name })))\n        }\n      } catch {\n        /* ignore */\n      } finally {\n        if (!cancelled) setIsLoadingRoles(false)\n      }\n    }\n    loadRoles()\n    return () => { cancelled = true }\n  }, [])\n\n  function toggleRole(roleId: string) {\n    setSelectedRoleIds((prev) =>\n      prev.includes(roleId) ? prev.filter((id) => id !== roleId) : [...prev, roleId],\n    )\n  }\n\n  async function handleSubmit(event: React.FormEvent) {\n    event.preventDefault()\n\n    const trimmedEmail = email.trim()\n    if (!trimmedEmail) {\n      flash(t('customer_accounts.widgets.invite.error.emailRequired', 'Email is required'), 'error')\n      return\n    }\n    if (selectedRoleIds.length === 0) {\n      flash(t('customer_accounts.widgets.invite.error.roleRequired', 'At least one role must be selected'), 'error')\n      return\n    }\n\n    setIsSubmitting(true)\n    try {\n      const call = await apiCall<{ ok: boolean; error?: string }>(\n        '/api/customer_accounts/admin/users-invite',\n        {\n          method: 'POST',\n          headers: { 'content-type': 'application/json' },\n          body: JSON.stringify({\n            email: trimmedEmail,\n            roleIds: selectedRoleIds,\n            displayName: displayName.trim() || undefined,\n            customerEntityId: personEntityId,\n          }),\n        },\n      )\n\n      if (!call.ok) {\n        const errorMessage = (call.result as Record<string, unknown> | null)?.error as string | undefined\n        flash(errorMessage || t('customer_accounts.widgets.invite.error.failed', 'Failed to send invitation'), 'error')\n        return\n      }\n\n      flash(t('customer_accounts.widgets.invite.success', 'Invitation sent successfully'), 'success')\n      onSuccess()\n    } catch {\n      flash(t('customer_accounts.widgets.invite.error.failed', 'Failed to send invitation'), 'error')\n    } finally {\n      setIsSubmitting(false)\n    }\n  }\n\n  const isLoading = isLoadingPerson || isLoadingRoles\n\n  if (isLoading) {\n    return (\n      <div className=\"text-sm text-muted-foreground py-2\">\n        {t('common.loading', 'Loading...')}\n      </div>\n    )\n  }\n\n  return (\n    <form onSubmit={handleSubmit} className=\"space-y-3 mt-2\">\n      <div>\n        <label htmlFor=\"invite-email\" className=\"block text-xs font-medium text-muted-foreground mb-1\">\n          {t('common.email', 'Email')}\n        </label>\n        <EmailInput\n          id=\"invite-email\"\n          size=\"sm\"\n          value={email}\n          onChange={(event) => setEmail(event.target.value)}\n          required\n          disabled={isSubmitting}\n        />\n      </div>\n\n      <div>\n        <label htmlFor=\"invite-display-name\" className=\"block text-xs font-medium text-muted-foreground mb-1\">\n          {t('customer_accounts.widgets.invite.displayName', 'Display Name')}\n        </label>\n        <Input\n          id=\"invite-display-name\"\n          type=\"text\"\n          size=\"sm\"\n          value={displayName}\n          onChange={(event) => setDisplayName(event.target.value)}\n          disabled={isSubmitting}\n        />\n      </div>\n\n      <div>\n        <div className=\"text-xs font-medium text-muted-foreground mb-1.5\">\n          {t('customer_accounts.widgets.invite.roles', 'Roles')}\n        </div>\n        {availableRoles.length === 0 ? (\n          <div className=\"text-xs text-muted-foreground\">\n            {t('customer_accounts.widgets.invite.noRoles', 'No roles available')}\n          </div>\n        ) : (\n          <div className=\"flex flex-wrap gap-1.5\">\n            {availableRoles.map((role) => (\n              <Button\n                key={role.id}\n                type=\"button\"\n                variant={selectedRoleIds.includes(role.id) ? 'default' : 'outline'}\n                size=\"sm\"\n                onClick={() => toggleRole(role.id)}\n                disabled={isSubmitting}\n                className=\"text-xs h-7\"\n              >\n                {role.name}\n              </Button>\n            ))}\n          </div>\n        )}\n      </div>\n\n      <div className=\"flex justify-end gap-2 pt-1\">\n        <Button\n          type=\"submit\"\n          size=\"sm\"\n          disabled={isSubmitting || !email.trim() || selectedRoleIds.length === 0}\n        >\n          {isSubmitting\n            ? t('common.loading', 'Loading...')\n            : t('customer_accounts.widgets.invite.submit', 'Send Invitation')}\n        </Button>\n      </div>\n    </form>\n  )\n}\n\nexport default function AccountStatusWidget({ context }: AccountStatusProps) {\n  const t = useT()\n  const queryClient = useQueryClient()\n  const personEntityId = context?.recordId\n  const [showInviteForm, setShowInviteForm] = React.useState(false)\n\n  const { data, isLoading } = useQuery({\n    queryKey: ['customer-account-status', personEntityId],\n    queryFn: async (): Promise<AccountStatusData | null> => {\n      if (!personEntityId) return null\n      const result = await apiCall(`/api/customer_accounts/admin/users?personEntityId=${personEntityId}&pageSize=1`)\n      if (!result.ok) return null\n      const json = result.result as Record<string, unknown> | null\n      const items = json?.items as AccountStatusData[] | undefined\n      return items?.[0] || null\n    },\n    enabled: !!personEntityId,\n  })\n\n  function handleInviteSuccess() {\n    setShowInviteForm(false)\n    queryClient.invalidateQueries({ queryKey: ['customer-account-status', personEntityId] })\n  }\n\n  if (isLoading) {\n    return <div className=\"text-sm text-muted-foreground\">{t('common.loading', 'Loading...')}</div>\n  }\n\n  if (!data) {\n    return (\n      <div className=\"rounded-md border p-3\">\n        <div className=\"text-sm font-medium mb-1\">{t('customer_accounts.widgets.accountStatus', 'Portal Account')}</div>\n        <div className=\"text-sm text-muted-foreground\">{t('customer_accounts.widgets.noAccount', 'No portal account linked')}</div>\n        {!showInviteForm && personEntityId && (\n          <div className=\"mt-2\">\n            <Button\n              type=\"button\"\n              variant=\"outline\"\n              size=\"sm\"\n              onClick={() => setShowInviteForm(true)}\n            >\n              {t('customer_accounts.widgets.invite.button', 'Invite to Portal')}\n            </Button>\n          </div>\n        )}\n        {showInviteForm && personEntityId && (\n          <InviteForm personEntityId={personEntityId} onSuccess={handleInviteSuccess} />\n        )}\n      </div>\n    )\n  }\n\n  return (\n    <div className=\"rounded-md border p-3\">\n      <div className=\"text-sm font-medium mb-2\">{t('customer_accounts.widgets.accountStatus', 'Portal Account')}</div>\n      <div className=\"space-y-1 text-sm\">\n        <div className=\"flex justify-between\">\n          <span className=\"text-muted-foreground\">{t('common.status', 'Status')}</span>\n          <span className={data.isActive ? 'text-green-600' : 'text-red-600'}>\n            {data.isActive ? t('common.active', 'Active') : t('common.inactive', 'Inactive')}\n          </span>\n        </div>\n        <div className=\"flex justify-between\">\n          <span className=\"text-muted-foreground\">{t('common.email', 'Email')}</span>\n          <span>{data.email}</span>\n        </div>\n        {data.emailVerified !== undefined && (\n          <div className=\"flex justify-between\">\n            <span className=\"text-muted-foreground\">{t('customer_accounts.widgets.emailVerified', 'Email Verified')}</span>\n            <span>{data.emailVerified ? '\u2713' : '\u2717'}</span>\n          </div>\n        )}\n        {data.lastLoginAt && (\n          <div className=\"flex justify-between\">\n            <span className=\"text-muted-foreground\">{t('customer_accounts.widgets.lastLogin', 'Last Login')}</span>\n            <span>{new Date(data.lastLoginAt).toLocaleDateString()}</span>\n          </div>\n        )}\n      </div>\n      <div className=\"mt-2\">\n        <a\n          href={`/backend/customer_accounts/users/${data.id}`}\n          className=\"text-xs text-primary hover:underline\"\n        >\n          {t('customer_accounts.widgets.viewAccount', 'View account details \u2192')}\n        </a>\n      </div>\n    </div>\n  )\n}\n"],
+  "mappings": ";AA+JM,cAQA,YARA;AA7JN,OAAO,WAAW;AAClB,SAAS,UAAU,sBAAsB;AACzC,SAAS,eAAe;AACxB,SAAS,YAAY;AACrB,SAAS,cAAc;AACvB,SAAS,aAAa;AACtB,SAAS,kBAAkB;AAC3B,SAAS,aAAa;AAiCtB,SAAS,WAAW,EAAE,gBAAgB,UAAU,GAAsD;AACpG,QAAM,IAAI,KAAK;AACf,QAAM,CAAC,iBAAiB,kBAAkB,IAAI,MAAM,SAAS,IAAI;AACjE,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAS,EAAE;AAC3C,QAAM,CAAC,aAAa,cAAc,IAAI,MAAM,SAAS,EAAE;AACvD,QAAM,CAAC,iBAAiB,kBAAkB,IAAI,MAAM,SAAmB,CAAC,CAAC;AACzE,QAAM,CAAC,gBAAgB,iBAAiB,IAAI,MAAM,SAAuB,CAAC,CAAC;AAC3E,QAAM,CAAC,gBAAgB,iBAAiB,IAAI,MAAM,SAAS,IAAI;AAC/D,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAS,KAAK;AAE5D,QAAM,UAAU,MAAM;AACpB,QAAI,YAAY;AAChB,mBAAe,aAAa;AAC1B,UAAI;AACF,cAAM,OAAO,MAAM;AAAA,UACjB,yBAAyB,mBAAmB,cAAc,CAAC;AAAA,QAC7D;AACA,YAAI,UAAW;AACf,YAAI,KAAK,MAAM,KAAK,QAAQ;AAC1B,gBAAM,SAAS,KAAK,OAAO;AAC3B,gBAAM,UAAU,KAAK,OAAO;AAC5B,cAAI,QAAQ,cAAc;AACxB,qBAAS,OAAO,YAAY;AAAA,UAC9B;AACA,gBAAM,YAAY,CAAC,SAAS,WAAW,SAAS,QAAQ,EAAE,OAAO,OAAO;AACxE,cAAI,UAAU,SAAS,GAAG;AACxB,2BAAe,UAAU,KAAK,GAAG,CAAC;AAAA,UACpC,WAAW,QAAQ,aAAa;AAC9B,2BAAe,OAAO,WAAW;AAAA,UACnC;AAAA,QACF;AAAA,MACF,QAAQ;AAAA,MAER,UAAE;AACA,YAAI,CAAC,UAAW,oBAAmB,KAAK;AAAA,MAC1C;AAAA,IACF;AACA,eAAW;AACX,WAAO,MAAM;AAAE,kBAAY;AAAA,IAAK;AAAA,EAClC,GAAG,CAAC,cAAc,CAAC;AAEnB,QAAM,UAAU,MAAM;AACpB,QAAI,YAAY;AAChB,mBAAe,YAAY;AACzB,UAAI;AACF,cAAM,OAAO,MAAM;AAAA,UACjB;AAAA,QACF;AACA,YAAI,UAAW;AACf,YAAI,KAAK,MAAM,KAAK,QAAQ;AAC1B,gBAAM,QAAQ,MAAM,QAAQ,KAAK,OAAO,KAAK,IAAI,KAAK,OAAO,QAAQ,CAAC;AACtE,4BAAkB,MAAM,IAAI,CAAC,UAAU,EAAE,IAAI,KAAK,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;AAAA,QAC3E;AAAA,MACF,QAAQ;AAAA,MAER,UAAE;AACA,YAAI,CAAC,UAAW,mBAAkB,KAAK;AAAA,MACzC;AAAA,IACF;AACA,cAAU;AACV,WAAO,MAAM;AAAE,kBAAY;AAAA,IAAK;AAAA,EAClC,GAAG,CAAC,CAAC;AAEL,WAAS,WAAW,QAAgB;AAClC;AAAA,MAAmB,CAAC,SAClB,KAAK,SAAS,MAAM,IAAI,KAAK,OAAO,CAAC,OAAO,OAAO,MAAM,IAAI,CAAC,GAAG,MAAM,MAAM;AAAA,IAC/E;AAAA,EACF;AAEA,iBAAe,aAAa,OAAwB;AAClD,UAAM,eAAe;AAErB,UAAM,eAAe,MAAM,KAAK;AAChC,QAAI,CAAC,cAAc;AACjB,YAAM,EAAE,wDAAwD,mBAAmB,GAAG,OAAO;AAC7F;AAAA,IACF;AACA,QAAI,gBAAgB,WAAW,GAAG;AAChC,YAAM,EAAE,uDAAuD,oCAAoC,GAAG,OAAO;AAC7G;AAAA,IACF;AAEA,oBAAgB,IAAI;AACpB,QAAI;AACF,YAAM,OAAO,MAAM;AAAA,QACjB;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU;AAAA,YACnB,OAAO;AAAA,YACP,SAAS;AAAA,YACT,aAAa,YAAY,KAAK,KAAK;AAAA,YACnC,kBAAkB;AAAA,UACpB,CAAC;AAAA,QACH;AAAA,MACF;AAEA,UAAI,CAAC,KAAK,IAAI;AACZ,cAAM,eAAgB,KAAK,QAA2C;AACtE,cAAM,gBAAgB,EAAE,iDAAiD,2BAA2B,GAAG,OAAO;AAC9G;AAAA,MACF;AAEA,YAAM,EAAE,4CAA4C,8BAA8B,GAAG,SAAS;AAC9F,gBAAU;AAAA,IACZ,QAAQ;AACN,YAAM,EAAE,iDAAiD,2BAA2B,GAAG,OAAO;AAAA,IAChG,UAAE;AACA,sBAAgB,KAAK;AAAA,IACvB;AAAA,EACF;AAEA,QAAM,YAAY,mBAAmB;AAErC,MAAI,WAAW;AACb,WACE,oBAAC,SAAI,WAAU,sCACZ,YAAE,kBAAkB,YAAY,GACnC;AAAA,EAEJ;AAEA,SACE,qBAAC,UAAK,UAAU,cAAc,WAAU,kBACtC;AAAA,yBAAC,SACC;AAAA,0BAAC,WAAM,SAAQ,gBAAe,WAAU,wDACrC,YAAE,gBAAgB,OAAO,GAC5B;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,IAAG;AAAA,UACH,MAAK;AAAA,UACL,OAAO;AAAA,UACP,UAAU,CAAC,UAAU,SAAS,MAAM,OAAO,KAAK;AAAA,UAChD,UAAQ;AAAA,UACR,UAAU;AAAA;AAAA,MACZ;AAAA,OACF;AAAA,IAEA,qBAAC,SACC;AAAA,0BAAC,WAAM,SAAQ,uBAAsB,WAAU,wDAC5C,YAAE,gDAAgD,cAAc,GACnE;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,IAAG;AAAA,UACH,MAAK;AAAA,UACL,MAAK;AAAA,UACL,OAAO;AAAA,UACP,UAAU,CAAC,UAAU,eAAe,MAAM,OAAO,KAAK;AAAA,UACtD,UAAU;AAAA;AAAA,MACZ;AAAA,OACF;AAAA,IAEA,qBAAC,SACC;AAAA,0BAAC,SAAI,WAAU,oDACZ,YAAE,0CAA0C,OAAO,GACtD;AAAA,MACC,eAAe,WAAW,IACzB,oBAAC,SAAI,WAAU,iCACZ,YAAE,4CAA4C,oBAAoB,GACrE,IAEA,oBAAC,SAAI,WAAU,0BACZ,yBAAe,IAAI,CAAC,SACnB;AAAA,QAAC;AAAA;AAAA,UAEC,MAAK;AAAA,UACL,SAAS,gBAAgB,SAAS,KAAK,EAAE,IAAI,YAAY;AAAA,UACzD,MAAK;AAAA,UACL,SAAS,MAAM,WAAW,KAAK,EAAE;AAAA,UACjC,UAAU;AAAA,UACV,WAAU;AAAA,UAET,eAAK;AAAA;AAAA,QARD,KAAK;AAAA,MASZ,CACD,GACH;AAAA,OAEJ;AAAA,IAEA,oBAAC,SAAI,WAAU,+BACb;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,MAAK;AAAA,QACL,UAAU,gBAAgB,CAAC,MAAM,KAAK,KAAK,gBAAgB,WAAW;AAAA,QAErE,yBACG,EAAE,kBAAkB,YAAY,IAChC,EAAE,2CAA2C,iBAAiB;AAAA;AAAA,IACpE,GACF;AAAA,KACF;AAEJ;AAEe,SAAR,oBAAqC,EAAE,QAAQ,GAAuB;AAC3E,QAAM,IAAI,KAAK;AACf,QAAM,cAAc,eAAe;AACnC,QAAM,iBAAiB,SAAS;AAChC,QAAM,CAAC,gBAAgB,iBAAiB,IAAI,MAAM,SAAS,KAAK;AAEhE,QAAM,EAAE,MAAM,UAAU,IAAI,SAAS;AAAA,IACnC,UAAU,CAAC,2BAA2B,cAAc;AAAA,IACpD,SAAS,YAA+C;AACtD,UAAI,CAAC,eAAgB,QAAO;AAC5B,YAAM,SAAS,MAAM,QAAQ,qDAAqD,cAAc,aAAa;AAC7G,UAAI,CAAC,OAAO,GAAI,QAAO;AACvB,YAAM,OAAO,OAAO;AACpB,YAAM,QAAQ,MAAM;AACpB,aAAO,QAAQ,CAAC,KAAK;AAAA,IACvB;AAAA,IACA,SAAS,CAAC,CAAC;AAAA,EACb,CAAC;AAED,WAAS,sBAAsB;AAC7B,sBAAkB,KAAK;AACvB,gBAAY,kBAAkB,EAAE,UAAU,CAAC,2BAA2B,cAAc,EAAE,CAAC;AAAA,EACzF;AAEA,MAAI,WAAW;AACb,WAAO,oBAAC,SAAI,WAAU,iCAAiC,YAAE,kBAAkB,YAAY,GAAE;AAAA,EAC3F;AAEA,MAAI,CAAC,MAAM;AACT,WACE,qBAAC,SAAI,WAAU,yBACb;AAAA,0BAAC,SAAI,WAAU,4BAA4B,YAAE,2CAA2C,gBAAgB,GAAE;AAAA,MAC1G,oBAAC,SAAI,WAAU,iCAAiC,YAAE,uCAAuC,0BAA0B,GAAE;AAAA,MACpH,CAAC,kBAAkB,kBAClB,oBAAC,SAAI,WAAU,QACb;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,SAAQ;AAAA,UACR,MAAK;AAAA,UACL,SAAS,MAAM,kBAAkB,IAAI;AAAA,UAEpC,YAAE,2CAA2C,kBAAkB;AAAA;AAAA,MAClE,GACF;AAAA,MAED,kBAAkB,kBACjB,oBAAC,cAAW,gBAAgC,WAAW,qBAAqB;AAAA,OAEhF;AAAA,EAEJ;AAEA,SACE,qBAAC,SAAI,WAAU,yBACb;AAAA,wBAAC,SAAI,WAAU,4BAA4B,YAAE,2CAA2C,gBAAgB,GAAE;AAAA,IAC1G,qBAAC,SAAI,WAAU,qBACb;AAAA,2BAAC,SAAI,WAAU,wBACb;AAAA,4BAAC,UAAK,WAAU,yBAAyB,YAAE,iBAAiB,QAAQ,GAAE;AAAA,QACtE,oBAAC,UAAK,WAAW,KAAK,WAAW,mBAAmB,gBACjD,eAAK,WAAW,EAAE,iBAAiB,QAAQ,IAAI,EAAE,mBAAmB,UAAU,GACjF;AAAA,SACF;AAAA,MACA,qBAAC,SAAI,WAAU,wBACb;AAAA,4BAAC,UAAK,WAAU,yBAAyB,YAAE,gBAAgB,OAAO,GAAE;AAAA,QACpE,oBAAC,UAAM,eAAK,OAAM;AAAA,SACpB;AAAA,MACC,KAAK,kBAAkB,UACtB,qBAAC,SAAI,WAAU,wBACb;AAAA,4BAAC,UAAK,WAAU,yBAAyB,YAAE,2CAA2C,gBAAgB,GAAE;AAAA,QACxG,oBAAC,UAAM,eAAK,gBAAgB,WAAM,UAAI;AAAA,SACxC;AAAA,MAED,KAAK,eACJ,qBAAC,SAAI,WAAU,wBACb;AAAA,4BAAC,UAAK,WAAU,yBAAyB,YAAE,uCAAuC,YAAY,GAAE;AAAA,QAChG,oBAAC,UAAM,cAAI,KAAK,KAAK,WAAW,EAAE,mBAAmB,GAAE;AAAA,SACzD;AAAA,OAEJ;AAAA,IACA,oBAAC,SAAI,WAAU,QACb;AAAA,MAAC;AAAA;AAAA,QACC,MAAM,oCAAoC,KAAK,EAAE;AAAA,QACjD,WAAU;AAAA,QAET,YAAE,yCAAyC,6BAAwB;AAAA;AAAA,IACtE,GACF;AAAA,KACF;AAEJ;",
   "names": []
 }

package/dist/modules/customer_accounts/workers/domainTlsRetryWorker.js

@@ -0,0 +1,67 @@
+const metadata = {
+  queue: "domain-tls-retry",
+  id: "customer_accounts:domain-tls-retry",
+  concurrency: 1
+};
+function parseInt32(value, fallback) {
+  const parsed = Number.parseInt(value ?? "", 10);
+  if (!Number.isFinite(parsed) || parsed <= 0) return fallback;
+  return parsed;
+}
+function parseFloat01(value, fallback) {
+  const parsed = Number.parseFloat(value ?? "");
+  if (!Number.isFinite(parsed) || parsed <= 0 || parsed > 1) return fallback;
+  return parsed;
+}
+let backoffMultiplier = 1;
+let nextEligibleAt = 0;
+const BACKOFF_CAP_HOURS = 6;
+async function handle(_job, ctx) {
+  const baseIntervalSeconds = parseInt32(process.env.DOMAIN_TLS_RETRY_INTERVAL_SECONDS, 1800);
+  const batchSize = parseInt32(process.env.DOMAIN_TLS_RETRY_BATCH, 50);
+  const maxRetries = parseInt32(process.env.DOMAIN_TLS_MAX_RETRIES, 6);
+  const failureThreshold = parseFloat01(process.env.DOMAIN_TLS_RETRY_FAILURE_THRESHOLD, 0.8);
+  const capSeconds = BACKOFF_CAP_HOURS * 3600;
+  const maxMultiplier = Math.max(1, Math.floor(capSeconds / baseIntervalSeconds));
+  if (Date.now() < nextEligibleAt) return;
+  const service = ctx.resolve("domainMappingService");
+  const candidates = await service.findPendingTls({ maxRetries, batchSize });
+  if (candidates.length === 0) {
+    backoffMultiplier = 1;
+    nextEligibleAt = 0;
+    return;
+  }
+  let attempted = 0;
+  let failed = 0;
+  for (const mapping of candidates) {
+    attempted += 1;
+    try {
+      const updated = await service.healthCheck(mapping.id);
+      if (updated.status !== "active") failed += 1;
+    } catch {
+      failed += 1;
+    }
+  }
+  if (attempted === 0) return;
+  const failureRate = failed / attempted;
+  if (failureRate >= failureThreshold) {
+    backoffMultiplier = Math.min(backoffMultiplier * 2, maxMultiplier);
+    nextEligibleAt = Date.now() + backoffMultiplier * baseIntervalSeconds * 1e3;
+  } else {
+    backoffMultiplier = 1;
+    nextEligibleAt = 0;
+  }
+}
+const __testing__ = {
+  reset: () => {
+    backoffMultiplier = 1;
+    nextEligibleAt = 0;
+  },
+  getState: () => ({ backoffMultiplier, nextEligibleAt })
+};
+export {
+  __testing__,
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=domainTlsRetryWorker.js.map

package/dist/modules/customer_accounts/workers/domainTlsRetryWorker.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customer_accounts/workers/domainTlsRetryWorker.ts"],
+  "sourcesContent": ["import type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { DomainMappingService } from '@open-mercato/core/modules/customer_accounts/services/domainMappingService'\n\nexport const metadata: WorkerMeta = {\n  queue: 'domain-tls-retry',\n  id: 'customer_accounts:domain-tls-retry',\n  concurrency: 1,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\nfunction parseInt32(value: string | undefined, fallback: number): number {\n  const parsed = Number.parseInt(value ?? '', 10)\n  if (!Number.isFinite(parsed) || parsed <= 0) return fallback\n  return parsed\n}\n\nfunction parseFloat01(value: string | undefined, fallback: number): number {\n  const parsed = Number.parseFloat(value ?? '')\n  if (!Number.isFinite(parsed) || parsed <= 0 || parsed > 1) return fallback\n  return parsed\n}\n\n// In-process adaptive-backoff state. Worker is concurrency=1, so a single\n// process owns this state. Surviving restarts is unnecessary because the\n// scheduler will simply re-evaluate on the next tick. See spec\n// \"Phase 5 \u2192 Worker-level backoff\" for the contract.\nlet backoffMultiplier = 1\nlet nextEligibleAt = 0\n\nconst BACKOFF_CAP_HOURS = 6\n\nexport default async function handle(_job: QueuedJob, ctx: HandlerContext): Promise<void> {\n  const baseIntervalSeconds = parseInt32(process.env.DOMAIN_TLS_RETRY_INTERVAL_SECONDS, 1800)\n  const batchSize = parseInt32(process.env.DOMAIN_TLS_RETRY_BATCH, 50)\n  const maxRetries = parseInt32(process.env.DOMAIN_TLS_MAX_RETRIES, 6)\n  const failureThreshold = parseFloat01(process.env.DOMAIN_TLS_RETRY_FAILURE_THRESHOLD, 0.8)\n  const capSeconds = BACKOFF_CAP_HOURS * 3600\n  const maxMultiplier = Math.max(1, Math.floor(capSeconds / baseIntervalSeconds))\n\n  if (Date.now() < nextEligibleAt) return\n\n  const service = ctx.resolve<DomainMappingService>('domainMappingService')\n  const candidates = await service.findPendingTls({ maxRetries, batchSize })\n  if (candidates.length === 0) {\n    backoffMultiplier = 1\n    nextEligibleAt = 0\n    return\n  }\n\n  let attempted = 0\n  let failed = 0\n  for (const mapping of candidates) {\n    attempted += 1\n    try {\n      const updated = await service.healthCheck(mapping.id)\n      if (updated.status !== 'active') failed += 1\n    } catch {\n      failed += 1\n    }\n  }\n\n  if (attempted === 0) return\n  const failureRate = failed / attempted\n\n  if (failureRate >= failureThreshold) {\n    backoffMultiplier = Math.min(backoffMultiplier * 2, maxMultiplier)\n    nextEligibleAt = Date.now() + backoffMultiplier * baseIntervalSeconds * 1000\n  } else {\n    backoffMultiplier = 1\n    nextEligibleAt = 0\n  }\n}\n\n// Test-only export so unit tests can reset state between runs.\nexport const __testing__ = {\n  reset: () => {\n    backoffMultiplier = 1\n    nextEligibleAt = 0\n  },\n  getState: () => ({ backoffMultiplier, nextEligibleAt }),\n}\n"],
+  "mappings": "AAGO,MAAM,WAAuB;AAAA,EAClC,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,aAAa;AACf;AAMA,SAAS,WAAW,OAA2B,UAA0B;AACvE,QAAM,SAAS,OAAO,SAAS,SAAS,IAAI,EAAE;AAC9C,MAAI,CAAC,OAAO,SAAS,MAAM,KAAK,UAAU,EAAG,QAAO;AACpD,SAAO;AACT;AAEA,SAAS,aAAa,OAA2B,UAA0B;AACzE,QAAM,SAAS,OAAO,WAAW,SAAS,EAAE;AAC5C,MAAI,CAAC,OAAO,SAAS,MAAM,KAAK,UAAU,KAAK,SAAS,EAAG,QAAO;AAClE,SAAO;AACT;AAMA,IAAI,oBAAoB;AACxB,IAAI,iBAAiB;AAErB,MAAM,oBAAoB;AAE1B,eAAO,OAA8B,MAAiB,KAAoC;AACxF,QAAM,sBAAsB,WAAW,QAAQ,IAAI,mCAAmC,IAAI;AAC1F,QAAM,YAAY,WAAW,QAAQ,IAAI,wBAAwB,EAAE;AACnE,QAAM,aAAa,WAAW,QAAQ,IAAI,wBAAwB,CAAC;AACnE,QAAM,mBAAmB,aAAa,QAAQ,IAAI,oCAAoC,GAAG;AACzF,QAAM,aAAa,oBAAoB;AACvC,QAAM,gBAAgB,KAAK,IAAI,GAAG,KAAK,MAAM,aAAa,mBAAmB,CAAC;AAE9E,MAAI,KAAK,IAAI,IAAI,eAAgB;AAEjC,QAAM,UAAU,IAAI,QAA8B,sBAAsB;AACxE,QAAM,aAAa,MAAM,QAAQ,eAAe,EAAE,YAAY,UAAU,CAAC;AACzE,MAAI,WAAW,WAAW,GAAG;AAC3B,wBAAoB;AACpB,qBAAiB;AACjB;AAAA,EACF;AAEA,MAAI,YAAY;AAChB,MAAI,SAAS;AACb,aAAW,WAAW,YAAY;AAChC,iBAAa;AACb,QAAI;AACF,YAAM,UAAU,MAAM,QAAQ,YAAY,QAAQ,EAAE;AACpD,UAAI,QAAQ,WAAW,SAAU,WAAU;AAAA,IAC7C,QAAQ;AACN,gBAAU;AAAA,IACZ;AAAA,EACF;AAEA,MAAI,cAAc,EAAG;AACrB,QAAM,cAAc,SAAS;AAE7B,MAAI,eAAe,kBAAkB;AACnC,wBAAoB,KAAK,IAAI,oBAAoB,GAAG,aAAa;AACjE,qBAAiB,KAAK,IAAI,IAAI,oBAAoB,sBAAsB;AAAA,EAC1E,OAAO;AACL,wBAAoB;AACpB,qBAAiB;AAAA,EACnB;AACF;AAGO,MAAM,cAAc;AAAA,EACzB,OAAO,MAAM;AACX,wBAAoB;AACpB,qBAAiB;AAAA,EACnB;AAAA,EACA,UAAU,OAAO,EAAE,mBAAmB,eAAe;AACvD;",
+  "names": []
+}

package/dist/modules/customer_accounts/workers/domainVerificationWorker.js

@@ -0,0 +1,34 @@
+const metadata = {
+  queue: "domain-verification",
+  id: "customer_accounts:domain-verification",
+  concurrency: 1
+};
+function parseSeconds(value, fallback) {
+  const parsed = Number.parseInt(value ?? "", 10);
+  if (!Number.isFinite(parsed) || parsed <= 0) return fallback;
+  return parsed;
+}
+async function handle(_job, ctx) {
+  const service = ctx.resolve("domainMappingService");
+  const intervalSeconds = parseSeconds(process.env.DOMAIN_AUTO_VERIFY_INTERVAL_SECONDS, 300);
+  const olderThanMs = intervalSeconds * 1e3;
+  const candidates = await service.findPendingVerification({ olderThanMs });
+  if (candidates.length === 0) return;
+  for (const mapping of candidates) {
+    try {
+      const result = await service.verify(mapping.id);
+      if (result.domainMapping.status === "verified") {
+        try {
+          await service.healthCheck(mapping.id);
+        } catch {
+        }
+      }
+    } catch {
+    }
+  }
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=domainVerificationWorker.js.map

package/dist/modules/customer_accounts/workers/domainVerificationWorker.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/customer_accounts/workers/domainVerificationWorker.ts"],
+  "sourcesContent": ["import type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { DomainMappingService } from '@open-mercato/core/modules/customer_accounts/services/domainMappingService'\n\nexport const metadata: WorkerMeta = {\n  queue: 'domain-verification',\n  id: 'customer_accounts:domain-verification',\n  concurrency: 1,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\nfunction parseSeconds(value: string | undefined, fallback: number): number {\n  const parsed = Number.parseInt(value ?? '', 10)\n  if (!Number.isFinite(parsed) || parsed <= 0) return fallback\n  return parsed\n}\n\nexport default async function handle(_job: QueuedJob, ctx: HandlerContext): Promise<void> {\n  const service = ctx.resolve<DomainMappingService>('domainMappingService')\n\n  const intervalSeconds = parseSeconds(process.env.DOMAIN_AUTO_VERIFY_INTERVAL_SECONDS, 300)\n  const olderThanMs = intervalSeconds * 1000\n\n  const candidates = await service.findPendingVerification({ olderThanMs })\n  if (candidates.length === 0) return\n\n  for (const mapping of candidates) {\n    try {\n      const result = await service.verify(mapping.id)\n      if (result.domainMapping.status === 'verified') {\n        try {\n          await service.healthCheck(mapping.id)\n        } catch {\n          // healthCheck emits its own events on failure; swallow here so one\n          // bad domain doesn't poison the rest of the batch.\n        }\n      }\n    } catch {\n      // verify() emits dns_failed events on negative results. A thrown error\n      // here is unexpected (e.g. DB blip) \u2014 skip and let the next tick retry.\n    }\n  }\n}\n"],
+  "mappings": "AAGO,MAAM,WAAuB;AAAA,EAClC,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,aAAa;AACf;AAMA,SAAS,aAAa,OAA2B,UAA0B;AACzE,QAAM,SAAS,OAAO,SAAS,SAAS,IAAI,EAAE;AAC9C,MAAI,CAAC,OAAO,SAAS,MAAM,KAAK,UAAU,EAAG,QAAO;AACpD,SAAO;AACT;AAEA,eAAO,OAA8B,MAAiB,KAAoC;AACxF,QAAM,UAAU,IAAI,QAA8B,sBAAsB;AAExE,QAAM,kBAAkB,aAAa,QAAQ,IAAI,qCAAqC,GAAG;AACzF,QAAM,cAAc,kBAAkB;AAEtC,QAAM,aAAa,MAAM,QAAQ,wBAAwB,EAAE,YAAY,CAAC;AACxE,MAAI,WAAW,WAAW,EAAG;AAE7B,aAAW,WAAW,YAAY;AAChC,QAAI;AACF,YAAM,SAAS,MAAM,QAAQ,OAAO,QAAQ,EAAE;AAC9C,UAAI,OAAO,cAAc,WAAW,YAAY;AAC9C,YAAI;AACF,gBAAM,QAAQ,YAAY,QAAQ,EAAE;AAAA,QACtC,QAAQ;AAAA,QAGR;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAGR;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/customers/api/companies/route.js

@@ -13,7 +13,6 @@ import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import {
   applyEntityIdExclusion,
   applyEntityIdRestriction,
-  consumeAdvancedFilterState,
   findMatchingEntityIdsWithQueryEngine,
   findMatchingEntityIdsBySearchTokensAcrossSources,
   withScopedPayload
@@ -26,7 +25,7 @@ import {
 import { escapeLikePattern } from "@open-mercato/shared/lib/db/escapeLikePattern";
 import { parseBooleanToken } from "@open-mercato/shared/lib/boolean";
 import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
-import { mergeAdvancedFilters } from "@open-mercato/shared/lib/crud/advanced-filter-integration";
+import { consumeAdvancedFilterState, mergeAdvancedFilterTree } from "@open-mercato/shared/lib/crud/advanced-filter-integration";
 import {
   createCustomersCrudOpenApi,
   createPagedListResponseSchema,
@@ -111,8 +110,7 @@ const crud = makeCrudRoute({
       updatedAt: "updated_at"
     },
     buildFilters: async (query, ctx) => {
-      const advancedQuery = { ...query };
-      const advancedFilterState = consumeAdvancedFilterState(query);
+      const advancedFilterTree = consumeAdvancedFilterState(query);
       const filters = { kind: { $eq: "company" } };
       if (query.id) filters.id = { $eq: query.id };
       if (query.search) {
@@ -296,11 +294,8 @@ const crud = makeCrudRoute({
           console.warn("[customers.companies.list] custom field filter resolution failed; falling back to base filters", err);
         }
       }
-      if (ctx && advancedFilterState) {
-        const advancedFilters = mergeAdvancedFilters(
-          { ...filters },
-          advancedQuery
-        );
+      if (ctx && advancedFilterTree) {
+        const advancedFilters = mergeAdvancedFilterTree({ ...filters }, advancedFilterTree);
         const matchedIds = await findMatchingEntityIdsWithQueryEngine({
           ctx,
           entityId: E.customers.customer_entity,