@open-mercato/core 0.6.3-develop.3809.1.bde5459e65 → 0.6.3-develop.3811.1.be22750402

package/src/modules/customers/i18n/de.json

@@ -669,7 +669,7 @@
   "customers.deals.create.submit": "Deal erstellen",
   "customers.deals.create.title": "Deal erstellen",
   "customers.deals.detail.actions.apply": "Apply",
-  "customers.deals.detail.actions.backToList": "Back to deals",
+  "customers.deals.detail.actions.backToList": "Zurück zu Deals",
   "customers.deals.detail.actions.cancel": "Cancel",
   "customers.deals.detail.actions.delete": "Delete",
   "customers.deals.detail.actions.moveStage": "Phase ändern",
@@ -686,7 +686,6 @@
   "customers.deals.detail.activitiesEmptyAction": "Aktivität hinzufügen",
   "customers.deals.detail.activitiesEmptyTitle": "Noch keine Aktivitäten",
   "customers.deals.detail.activitiesLoading": "Aktivitäten werden geladen…",
-  "customers.deals.detail.backToList": "Zur Deal-Liste",
   "customers.deals.detail.badge.deal": "Deal",
   "customers.deals.detail.badge.lost": "Lost",
   "customers.deals.detail.badge.won": "Won",
@@ -707,8 +706,8 @@
   "customers.deals.detail.deleteError": "Deal konnte nicht gelöscht werden.",
   "customers.deals.detail.deleteSuccess": "Deal gelöscht.",
   "customers.deals.detail.editAssignments": "Zuordnungen bearbeiten",
-  "customers.deals.detail.error.load": "Failed to load deal.",
-  "customers.deals.detail.error.notFound": "Deal not found.",
+  "customers.deals.detail.error.load": "Deal konnte nicht geladen werden.",
+  "customers.deals.detail.error.notFound": "Deal nicht gefunden.",
   "customers.deals.detail.fields.expectedClose": "Voraussichtlicher Abschluss",
   "customers.deals.detail.fields.pipeline": "Pipeline-Stufe",
   "customers.deals.detail.fields.probability": "Wahrscheinlichkeit",
@@ -770,7 +769,6 @@
   "customers.deals.detail.noPipeline": "Keine Pipeline",
   "customers.deals.detail.noStatus": "Kein Status",
   "customers.deals.detail.noValue": "Keine Angaben",
-  "customers.deals.detail.notFound": "Deal wurde nicht gefunden.",
   "customers.deals.detail.notesAdd": "Notiz hinzufügen",
   "customers.deals.detail.notesEmpty": "Noch keine Notizen.",
   "customers.deals.detail.notesEmptyAction": "Notiz hinzufügen",

package/src/modules/customers/i18n/en.json

@@ -686,7 +686,6 @@
   "customers.deals.detail.activitiesEmptyAction": "Add an activity",
   "customers.deals.detail.activitiesEmptyTitle": "No activities yet",
   "customers.deals.detail.activitiesLoading": "Loading activities…",
-  "customers.deals.detail.backToList": "Back to deals",
   "customers.deals.detail.badge.deal": "Deal",
   "customers.deals.detail.badge.lost": "Lost",
   "customers.deals.detail.badge.won": "Won",
@@ -770,7 +769,6 @@
   "customers.deals.detail.noPipeline": "No pipeline",
   "customers.deals.detail.noStatus": "No status",
   "customers.deals.detail.noValue": "Not provided",
-  "customers.deals.detail.notFound": "Deal not found.",
   "customers.deals.detail.notesAdd": "Add note",
   "customers.deals.detail.notesEmpty": "No notes yet.",
   "customers.deals.detail.notesEmptyAction": "Add a note",

package/src/modules/customers/i18n/es.json

@@ -669,7 +669,7 @@
   "customers.deals.create.submit": "Crear oportunidad",
   "customers.deals.create.title": "Crear oportunidad",
   "customers.deals.detail.actions.apply": "Apply",
-  "customers.deals.detail.actions.backToList": "Back to deals",
+  "customers.deals.detail.actions.backToList": "Volver a los deals",
   "customers.deals.detail.actions.cancel": "Cancel",
   "customers.deals.detail.actions.delete": "Delete",
   "customers.deals.detail.actions.moveStage": "Mover etapa",
@@ -686,7 +686,6 @@
   "customers.deals.detail.activitiesEmptyAction": "Agregar actividad",
   "customers.deals.detail.activitiesEmptyTitle": "Aún no hay actividades",
   "customers.deals.detail.activitiesLoading": "Cargando actividades…",
-  "customers.deals.detail.backToList": "Volver a los deals",
   "customers.deals.detail.badge.deal": "Deal",
   "customers.deals.detail.badge.lost": "Lost",
   "customers.deals.detail.badge.won": "Won",
@@ -707,8 +706,8 @@
   "customers.deals.detail.deleteError": "No se pudo eliminar el deal.",
   "customers.deals.detail.deleteSuccess": "Deal eliminado.",
   "customers.deals.detail.editAssignments": "Editar vínculos",
-  "customers.deals.detail.error.load": "Failed to load deal.",
-  "customers.deals.detail.error.notFound": "Deal not found.",
+  "customers.deals.detail.error.load": "No se pudo cargar el deal.",
+  "customers.deals.detail.error.notFound": "No se encontró el deal.",
   "customers.deals.detail.fields.expectedClose": "Cierre previsto",
   "customers.deals.detail.fields.pipeline": "Etapa del pipeline",
   "customers.deals.detail.fields.probability": "Probabilidad",
@@ -770,7 +769,6 @@
   "customers.deals.detail.noPipeline": "Sin pipeline",
   "customers.deals.detail.noStatus": "Sin estado",
   "customers.deals.detail.noValue": "Sin datos",
-  "customers.deals.detail.notFound": "No se encontró el deal.",
   "customers.deals.detail.notesAdd": "Agregar nota",
   "customers.deals.detail.notesEmpty": "Aún no hay notas.",
   "customers.deals.detail.notesEmptyAction": "Agregar nota",

package/src/modules/customers/i18n/pl.json

@@ -669,7 +669,7 @@
   "customers.deals.create.submit": "Utwórz szansę",
   "customers.deals.create.title": "Utwórz szansę",
   "customers.deals.detail.actions.apply": "Apply",
-  "customers.deals.detail.actions.backToList": "Back to deals",
+  "customers.deals.detail.actions.backToList": "Powrót do listy szans",
   "customers.deals.detail.actions.cancel": "Cancel",
   "customers.deals.detail.actions.delete": "Delete",
   "customers.deals.detail.actions.moveStage": "Zmień etap",
@@ -686,7 +686,6 @@
   "customers.deals.detail.activitiesEmptyAction": "Dodaj aktywność",
   "customers.deals.detail.activitiesEmptyTitle": "Brak aktywności",
   "customers.deals.detail.activitiesLoading": "Ładowanie aktywności…",
-  "customers.deals.detail.backToList": "Wróć do listy szans",
   "customers.deals.detail.badge.deal": "Deal",
   "customers.deals.detail.badge.lost": "Lost",
   "customers.deals.detail.badge.won": "Won",
@@ -707,8 +706,8 @@
   "customers.deals.detail.deleteError": "Nie udało się usunąć szansy.",
   "customers.deals.detail.deleteSuccess": "Szansa została usunięta.",
   "customers.deals.detail.editAssignments": "Edytuj powiązania",
-  "customers.deals.detail.error.load": "Failed to load deal.",
-  "customers.deals.detail.error.notFound": "Deal not found.",
+  "customers.deals.detail.error.load": "Nie udało się załadować szansy.",
+  "customers.deals.detail.error.notFound": "Nie znaleziono szansy.",
   "customers.deals.detail.fields.expectedClose": "Przewidywana data zamknięcia",
   "customers.deals.detail.fields.pipeline": "Etap",
   "customers.deals.detail.fields.probability": "Prawdopodobieństwo",
@@ -770,7 +769,6 @@
   "customers.deals.detail.noPipeline": "Brak etapu",
   "customers.deals.detail.noStatus": "Brak statusu",
   "customers.deals.detail.noValue": "Brak danych",
-  "customers.deals.detail.notFound": "Nie znaleziono szansy.",
   "customers.deals.detail.notesAdd": "Dodaj notatkę",
   "customers.deals.detail.notesEmpty": "Brak notatek.",
   "customers.deals.detail.notesEmptyAction": "Dodaj notatkę",

package/src/modules/data_sync/AGENTS.md

@@ -6,6 +6,36 @@ The `data_sync` module provides a streaming data synchronization hub for import/
 
 ---
 
+## Always
+
+- **Always scope by organizationId + tenantId** — every entity query
+- **Use the queue system** — never run syncs inline in API handlers
+- **New sync providers MUST support provider-owned env preconfiguration** when fresh installs need credentials or default mappings/locales/channels from deployment env
+- **Persist cursor after each batch** — enables resume on failure
+- **Log item-level errors** — don't stop the sync for individual item failures
+- **Check for overlap** before starting a new run (same integration + entityType + direction)
+- **API routes must export `openApi`** for documentation generation
+
+## Ask First
+
+- Ask before changing adapter contracts, run lifecycle states, cursor semantics, queue names, or overlap detection.
+- Ask before adding provider-specific logic to this generic module.
+- Ask before changing progress delivery or cancellation behavior.
+
+## Never
+
+- Never import from provider adapter modules — `data_sync` is generic.
+- Never run syncs inline in API handlers.
+- Never add frontend polling loops for sync progress beyond initial hydration or reconnect recovery.
+- Never special-case provider credentials, mappings, or state in `data_sync`.
+
+## Validation Commands
+
+```bash
+yarn generate
+yarn workspace @open-mercato/core build
+```
+
 ## Module Structure
 
 ```
@@ -152,14 +182,3 @@ Data sync providers can leverage the **Unified Module Extension System (UMES)**
 - Use helpers from `@open-mercato/core/modules/core/__integration__/helpers/*`
 - Tests must create prerequisites via API and clean up in `finally`
 - Avoid hard dependency on late-phase modules; keep tests scoped to implemented contracts
-
-## MUST Rules
-
-- **Always scope by organizationId + tenantId** — every entity query
-- **Never import from provider adapter modules** — data_sync is generic
-- **Use the queue system** — never run syncs inline in API handlers
-- **New sync providers MUST support provider-owned env preconfiguration** when fresh installs need credentials or default mappings/locales/channels from deployment env
-- **Persist cursor after each batch** — enables resume on failure
-- **Log item-level errors** — don't stop the sync for individual item failures
-- **Check for overlap** before starting a new run (same integration + entityType + direction)
-- **API routes must export `openApi`** for documentation generation

package/src/modules/integrations/AGENTS.md

@@ -6,6 +6,37 @@ The `integrations` module is the foundation layer for all external connectors (p
 
 ---
 
+## Always
+
+- **Always scope by organizationId + tenantId** — every entity query and service call
+- **Use `findWithDecryption`/`findOneWithDecryption`** for credential reads
+- **New providers MUST support provider-owned env preconfiguration** when credentials/settings are deployment-managed; implement it in the provider package, not in core
+- **Health check services** must be registered in DI by the provider module, not by integrations
+- **API routes must export `openApi`** for documentation generation
+- **All user-facing strings** via i18n keys in `i18n/en.json`
+- **Keep ACL default export shape** consistent: `export const features = [...]; export default features`
+- **Registry/type contracts** live in `@open-mercato/shared/modules/integrations/types`
+
+## Ask First
+
+- Ask before changing credential resolution order, registry type contracts, canonical API routes, or compatibility surfaces.
+- Ask before moving provider-specific logic into this module.
+- Ask before changing health-check timeouts, log retention semantics, or credential redaction behavior.
+
+## Never
+
+- Never import from provider modules — integrations module is generic; providers import from integrations, not vice versa.
+- Never log credential values — log service strips secret fields from payload.
+- Never special-case provider env presets, credentials, mappings, or enabled state in core.
+- Never remove legacy `integrations.detail:tabs` fallback without a compatibility plan.
+
+## Validation Commands
+
+```bash
+yarn generate
+yarn workspace @open-mercato/core build
+```
+
 ## Module Structure
 
 ```
@@ -192,16 +223,3 @@ The integrations module itself uses UMES to inject external ID displays on any e
 - Module-local integration tests go under `__integration__/`
 - Use helpers from `@open-mercato/core/modules/core/__integration__/helpers/*`
 - Tests must create prerequisites via API and clean up in `finally`
-
-## MUST Rules
-
-- **Never import from provider modules** — integrations module is generic; providers import from integrations, not vice versa
-- **Always scope by organizationId + tenantId** — every entity query and service call
-- **Use `findWithDecryption`/`findOneWithDecryption`** for credential reads
-- **New providers MUST support provider-owned env preconfiguration** when credentials/settings are deployment-managed; implement it in the provider package, not in core
-- **Never log credential values** — log service strips secret fields from payload
-- **Health check services** must be registered in DI by the provider module, not by integrations
-- **API routes must export `openApi`** for documentation generation
-- **All user-facing strings** via i18n keys in `i18n/en.json`
-- **Keep ACL default export shape** consistent: `export const features = [...]; export default features`
-- **Registry/type contracts** live in `@open-mercato/shared/modules/integrations/types`

package/src/modules/progress/AGENTS.md

@@ -2,7 +2,7 @@
 
 Use the progress module for every user-visible bulk operation and every long-running operation. Keep `ProgressTopBar` the single shared progress surface.
 
-## MUST Rules
+## Always
 
 1. **MUST create `ProgressJob` for durable work** — imports, exports, bulk mutations, reindexing, external sync, and queued work must persist progress server-side.
 2. **MUST return `progressJobId` to the UI** — DataTable bulk actions and start-operation APIs must expose the job id so the top bar can track it.
@@ -11,7 +11,25 @@ Use the progress module for every user-visible bulk operation and every long-run
 5. **MUST use queue workers for durable work** — use `@open-mercato/queue`; do not implement custom queues, timers, or page polling loops.
 6. **MUST run mutations through commands** — workers must use `commandBus.execute(...)` for domain writes so audit, undo, cache, events, and index invalidation stay intact.
 7. **MUST use client-local progress only for browser-bound loops** — local `client:*` progress events are best-effort and must not represent work that should survive navigation.
-8. **MUST NOT build per-module progress bars for global operations** — use `ProgressTopBar` and shared progress hooks.
+
+## Ask First
+
+- Ask before adding a new progress mode, changing job terminal states, or changing cancellation semantics.
+- Ask before creating a module-specific progress UI for work that could use the shared top bar.
+
+## Never
+
+- Never leave running jobs without heartbeat/progress updates.
+- Never implement custom queues, timers, or page polling loops for durable work.
+- Never represent durable server work with client-local `client:*` progress events.
+- Never build per-module progress bars for global operations — use `ProgressTopBar` and shared progress hooks.
+
+## Validation Commands
+
+```bash
+yarn generate
+yarn workspace @open-mercato/core build
+```
 
 ## Choosing Progress Mode
 

package/src/modules/sales/AGENTS.md

@@ -2,13 +2,32 @@
 
 Use the sales module for orders, quotes, invoices, shipments, and payments. This module has the most complex business logic in the system.
 
-## MUST Rules
+## Always
 
-1. **MUST NOT reimplement document math inline** — use `salesCalculationService` from DI
+1. **MUST use `salesCalculationService` from DI** for document math.
 2. **MUST follow document flow**: Quote → Order → Invoice — no skipping steps
-3. **MUST NOT modify configuration entities directly** (statuses, methods, channels) — use the admin UI or setup hooks
-4. **MUST use `selectBestPrice`** from catalog pricing helpers — never inline price calculations
-5. **MUST scope all documents to a channel** — channel selection affects pricing, numbering, and visibility
+3. **MUST use `selectBestPrice`** from catalog pricing helpers.
+4. **MUST scope all documents to a channel** — channel selection affects pricing, numbering, and visibility
+
+## Ask First
+
+- Ask before changing the Quote → Order → Invoice flow, workflow states, numbering rules, or channel scoping behavior.
+- Ask before changing configuration entity semantics for statuses, methods, channels, price kinds, adjustment kinds, or document numbers.
+
+## Never
+
+- Never reimplement document math inline.
+- Never skip configured document workflow states.
+- Never modify configuration entities directly; use the admin UI or setup hooks.
+- Never inline price calculations.
+
+## Validation Commands
+
+```bash
+yarn db:generate
+yarn generate
+yarn workspace @open-mercato/core build
+```
 
 ## Document Flow
 

package/src/modules/workflows/AGENTS.md

@@ -2,19 +2,41 @@
 
 Use the workflows module for business process automation: defining step-based workflows, executing instances, handling user tasks, processing async activities, and triggering workflows from domain events.
 
-## MUST Rules
+## Always
 
 1. **MUST resolve services via DI** — use `container.resolve('workflowExecutor')`, never import and call lib functions directly
-2. **MUST NOT skip the execution loop** — always use `workflowExecutor.startWorkflow()` to create and run instances; never insert `WorkflowInstance` rows directly
+2. **MUST use `workflowExecutor.startWorkflow()`** to create and run instances.
 3. **MUST follow the step state machine** — steps transition `PENDING → ACTIVE → COMPLETED|FAILED|SKIPPED|CANCELLED`; never set status out of order
 4. **MUST follow the instance state machine** — instances transition `RUNNING → COMPLETED|FAILED|CANCELLED`; intermediate states include `PAUSED`, `WAITING_FOR_ACTIVITIES`, `COMPENSATING`
 5. **MUST keep activity handlers idempotent** — check state before mutating; activities may be retried on failure
 6. **MUST use event sourcing** — log all workflow events via `eventLogger.logWorkflowEvent()`; never mutate instance state without a corresponding event
 7. **MUST use variable interpolation** for dynamic activity config — use `{{context.*}}`, `{{workflow.*}}`, `{{env.*}}`, `{{now}}`; never hardcode values
-8. **MUST NOT couple other modules to workflow internals** — use event triggers and signals for cross-module integration; widget injection for UI
+8. **MUST use event triggers, signals, and widget injection** for cross-module integration.
 9. **MUST declare new events in `events.ts`** with `as const` — undeclared events trigger TypeScript errors and runtime warnings
 10. **MUST scope all queries by `organization_id`** — workflow data is tenant-scoped; never expose cross-tenant instances or tasks
 
+## Ask First
+
+- Ask before changing workflow, step, or activity state machines.
+- Ask before changing SSRF guard behavior, private URL allowances, compensation semantics, or trigger storm controls.
+- Ask before coupling another module directly to workflow internals.
+
+## Never
+
+- Never import and call workflow lib functions directly instead of resolving DI services.
+- Never skip the execution loop or insert `WorkflowInstance` rows directly.
+- Never mutate instance state without a corresponding workflow event.
+- Never expose cross-tenant workflow instances or tasks.
+- Never leave `OM_WORKFLOWS_ALLOW_PRIVATE_URLS` enabled in production.
+
+## Validation Commands
+
+```bash
+yarn db:generate
+yarn generate
+yarn workspace @open-mercato/core build
+```
+
 ## Execution Architecture
 
 ```