@open-mercato/core 0.6.4-develop.4254.1.7a123d970c → 0.6.4-develop.4264.1.53368d85fe

package/dist/modules/customer_accounts/api/portal/events/stream.js

@@ -124,6 +124,7 @@ async function GET(req) {
         close: () => controller.close()
       };
       portalConnections.add(connection);
+      controller.enqueue(encoder.encode(": connected\n\n"));
       heartbeatTimer = setInterval(() => {
         try {
           controller.enqueue(encoder.encode(":heartbeat\n\n"));

package/dist/modules/customer_accounts/api/portal/events/stream.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/customer_accounts/api/portal/events/stream.ts"],
-  "sourcesContent": ["/**\n * Portal SSE Event Stream \u2014 Portal Event Bridge\n *\n * Server-Sent Events endpoint that bridges server-side events to the customer portal.\n * Only events with `portalBroadcast: true` in their EventDefinition are sent.\n * Events are scoped to the authenticated customer's tenant and organization.\n *\n * Uses customer JWT auth (cookie or Bearer token) instead of staff auth.\n *\n * Client consumer: `packages/ui/src/portal/hooks/usePortalEventBridge.ts`\n */\n\nimport { NextResponse } from 'next/server'\nimport { isPortalBroadcastEvent } from '@open-mercato/shared/modules/events'\nimport { getCustomerAuthFromRequest } from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport type { OpenApiRouteDoc, OpenApiMethodDoc } from '@open-mercato/shared/lib/openapi'\n\nexport const metadata: { path?: string; requireAuth?: boolean } = { requireAuth: false }\n\nconst HEARTBEAT_INTERVAL_MS = 30_000\nconst MAX_PAYLOAD_BYTES = 4096\n\ntype PortalSseConnection = {\n  tenantId: string\n  organizationId: string\n  customerUserId: string\n  send: (data: string) => void\n  close: () => void\n}\n\nfunction normalizeAudience(data: Record<string, unknown>): {\n  tenantId: string | null\n  organizationScopes: string[]\n  recipientUserScopes: string[]\n} {\n  const tenantId = typeof data.tenantId === 'string' ? data.tenantId : null\n  const organizationScopes = new Set<string>()\n  if (typeof data.organizationId === 'string' && data.organizationId.trim().length > 0) {\n    organizationScopes.add(data.organizationId.trim())\n  }\n  if (Array.isArray(data.organizationIds)) {\n    for (const orgId of data.organizationIds) {\n      if (typeof orgId === 'string' && orgId.trim().length > 0) {\n        organizationScopes.add(orgId.trim())\n      }\n    }\n  }\n\n  const recipientUserScopes = new Set<string>()\n  if (typeof data.recipientUserId === 'string' && data.recipientUserId.trim().length > 0) {\n    recipientUserScopes.add(data.recipientUserId.trim())\n  }\n  if (Array.isArray(data.recipientUserIds)) {\n    for (const userId of data.recipientUserIds) {\n      if (typeof userId === 'string' && userId.trim().length > 0) {\n        recipientUserScopes.add(userId.trim())\n      }\n    }\n  }\n\n  return {\n    tenantId,\n    organizationScopes: Array.from(organizationScopes),\n    recipientUserScopes: Array.from(recipientUserScopes),\n  }\n}\n\nfunction matchesAudience(conn: PortalSseConnection, audience: ReturnType<typeof normalizeAudience>): boolean {\n  if (!audience.tenantId) return false\n  if (conn.tenantId !== audience.tenantId) return false\n  if (audience.organizationScopes.length > 0) {\n    if (!audience.organizationScopes.includes(conn.organizationId)) return false\n  }\n  if (audience.recipientUserScopes.length > 0 && !audience.recipientUserScopes.includes(conn.customerUserId)) {\n    return false\n  }\n  return true\n}\n\nconst portalConnections = new Set<PortalSseConnection>()\n\nlet portalTapRegistered = false\n\nasync function broadcastPortalEvent(eventName: string, payload: Record<string, unknown>): Promise<void> {\n  if (!eventName || portalConnections.size === 0) return\n  if (!isPortalBroadcastEvent(eventName)) return\n\n  const data = payload ?? {}\n  const audience = normalizeAudience(data)\n  const organizationId = audience.organizationScopes[0] ?? ''\n\n  let ssePayload = JSON.stringify({\n    id: eventName,\n    payload: data,\n    timestamp: Date.now(),\n    organizationId,\n  })\n\n  if (new TextEncoder().encode(ssePayload).length > MAX_PAYLOAD_BYTES) {\n    const entityRef: Record<string, unknown> = { truncated: true }\n    if (typeof data.id === 'string' && data.id.trim().length > 0) entityRef.id = data.id.trim()\n    if (typeof data.entityId === 'string' && data.entityId.trim().length > 0) entityRef.entityId = data.entityId.trim()\n    ssePayload = JSON.stringify({\n      id: eventName,\n      payload: entityRef,\n      timestamp: Date.now(),\n      organizationId,\n    })\n    if (new TextEncoder().encode(ssePayload).length > MAX_PAYLOAD_BYTES) {\n      return\n    }\n  }\n\n  for (const conn of portalConnections) {\n    if (!matchesAudience(conn, audience)) continue\n    try {\n      conn.send(ssePayload)\n    } catch {\n      // Connection may have been closed\n    }\n  }\n}\n\nfunction ensurePortalTap(): void {\n  if (portalTapRegistered) return\n  portalTapRegistered = true\n\n  // Dynamically import to avoid circular dependency \u2014 the events bus\n  // registers a global tap that fires for every emitted event.\n  import('@open-mercato/events/bus').then(({ registerGlobalEventTap, registerCrossProcessEventListener }) => {\n    registerGlobalEventTap(async (eventName, payload) => {\n      await broadcastPortalEvent(eventName, (payload ?? {}) as Record<string, unknown>)\n    })\n\n    registerCrossProcessEventListener(async (envelope) => {\n      if (envelope.originPid === process.pid) return\n      await broadcastPortalEvent(\n        envelope.event,\n        (envelope.payload ?? {}) as Record<string, unknown>,\n      )\n    })\n  }).catch(() => {\n    // Silently ignore if events package is not available\n    portalTapRegistered = false\n  })\n}\n\nexport async function GET(req: Request): Promise<Response> {\n  const auth = await getCustomerAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ ok: false, error: 'Authentication required' }, { status: 401 })\n  }\n\n  ensurePortalTap()\n\n  const encoder = new TextEncoder()\n  let heartbeatTimer: ReturnType<typeof setInterval> | null = null\n  let connection: PortalSseConnection | null = null\n  const onAbort = () => cleanup()\n\n  const stream = new ReadableStream({\n    start(controller) {\n      const send = (data: string) => {\n        controller.enqueue(encoder.encode(`data: ${data}\\n\\n`))\n      }\n\n      connection = {\n        tenantId: auth.tenantId,\n        organizationId: auth.orgId,\n        customerUserId: auth.sub,\n        send,\n        close: () => controller.close(),\n      }\n      portalConnections.add(connection)\n\n      heartbeatTimer = setInterval(() => {\n        try {\n          controller.enqueue(encoder.encode(':heartbeat\\n\\n'))\n        } catch {\n          // Stream may have been closed\n        }\n      }, HEARTBEAT_INTERVAL_MS)\n    },\n    cancel() {\n      cleanup()\n    },\n  })\n\n  function cleanup() {\n    if (heartbeatTimer) {\n      clearInterval(heartbeatTimer)\n      heartbeatTimer = null\n    }\n    if (connection) {\n      portalConnections.delete(connection)\n      connection = null\n    }\n    // Detach from the request signal so reconnect churn does not accumulate\n    // listeners and closures on long-lived AbortSignals.\n    req.signal.removeEventListener('abort', onAbort)\n  }\n\n  req.signal.addEventListener('abort', onAbort, { once: true })\n\n  return new Response(stream, {\n    status: 200,\n    headers: {\n      'Content-Type': 'text/event-stream',\n      'Cache-Control': 'no-cache, no-transform',\n      'Connection': 'keep-alive',\n      'X-Accel-Buffering': 'no',\n    },\n  })\n}\n\nconst methodDoc: OpenApiMethodDoc = {\n  summary: 'Subscribe to portal events via SSE (Portal Event Bridge)',\n  description: 'Long-lived SSE connection that receives server-side events marked with portalBroadcast: true. Events are filtered by the customer\\'s tenant, organization, and recipient user audience.',\n  tags: ['Customer Portal'],\n  responses: [\n    {\n      status: 200,\n      description: 'Event stream (text/event-stream)',\n    },\n  ],\n  errors: [\n    { status: 401, description: 'Not authenticated' },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  summary: 'Portal event stream',\n  methods: { GET: methodDoc },\n}\n"],
-  "mappings": "AAYA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,kCAAkC;AAGpC,MAAM,WAAqD,EAAE,aAAa,MAAM;AAEvF,MAAM,wBAAwB;AAC9B,MAAM,oBAAoB;AAU1B,SAAS,kBAAkB,MAIzB;AACA,QAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,QAAM,qBAAqB,oBAAI,IAAY;AAC3C,MAAI,OAAO,KAAK,mBAAmB,YAAY,KAAK,eAAe,KAAK,EAAE,SAAS,GAAG;AACpF,uBAAmB,IAAI,KAAK,eAAe,KAAK,CAAC;AAAA,EACnD;AACA,MAAI,MAAM,QAAQ,KAAK,eAAe,GAAG;AACvC,eAAW,SAAS,KAAK,iBAAiB;AACxC,UAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,GAAG;AACxD,2BAAmB,IAAI,MAAM,KAAK,CAAC;AAAA,MACrC;AAAA,IACF;AAAA,EACF;AAEA,QAAM,sBAAsB,oBAAI,IAAY;AAC5C,MAAI,OAAO,KAAK,oBAAoB,YAAY,KAAK,gBAAgB,KAAK,EAAE,SAAS,GAAG;AACtF,wBAAoB,IAAI,KAAK,gBAAgB,KAAK,CAAC;AAAA,EACrD;AACA,MAAI,MAAM,QAAQ,KAAK,gBAAgB,GAAG;AACxC,eAAW,UAAU,KAAK,kBAAkB;AAC1C,UAAI,OAAO,WAAW,YAAY,OAAO,KAAK,EAAE,SAAS,GAAG;AAC1D,4BAAoB,IAAI,OAAO,KAAK,CAAC;AAAA,MACvC;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA,oBAAoB,MAAM,KAAK,kBAAkB;AAAA,IACjD,qBAAqB,MAAM,KAAK,mBAAmB;AAAA,EACrD;AACF;AAEA,SAAS,gBAAgB,MAA2B,UAAyD;AAC3G,MAAI,CAAC,SAAS,SAAU,QAAO;AAC/B,MAAI,KAAK,aAAa,SAAS,SAAU,QAAO;AAChD,MAAI,SAAS,mBAAmB,SAAS,GAAG;AAC1C,QAAI,CAAC,SAAS,mBAAmB,SAAS,KAAK,cAAc,EAAG,QAAO;AAAA,EACzE;AACA,MAAI,SAAS,oBAAoB,SAAS,KAAK,CAAC,SAAS,oBAAoB,SAAS,KAAK,cAAc,GAAG;AAC1G,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,MAAM,oBAAoB,oBAAI,IAAyB;AAEvD,IAAI,sBAAsB;AAE1B,eAAe,qBAAqB,WAAmB,SAAiD;AACtG,MAAI,CAAC,aAAa,kBAAkB,SAAS,EAAG;AAChD,MAAI,CAAC,uBAAuB,SAAS,EAAG;AAExC,QAAM,OAAO,WAAW,CAAC;AACzB,QAAM,WAAW,kBAAkB,IAAI;AACvC,QAAM,iBAAiB,SAAS,mBAAmB,CAAC,KAAK;AAEzD,MAAI,aAAa,KAAK,UAAU;AAAA,IAC9B,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,WAAW,KAAK,IAAI;AAAA,IACpB;AAAA,EACF,CAAC;AAED,MAAI,IAAI,YAAY,EAAE,OAAO,UAAU,EAAE,SAAS,mBAAmB;AACnE,UAAM,YAAqC,EAAE,WAAW,KAAK;AAC7D,QAAI,OAAO,KAAK,OAAO,YAAY,KAAK,GAAG,KAAK,EAAE,SAAS,EAAG,WAAU,KAAK,KAAK,GAAG,KAAK;AAC1F,QAAI,OAAO,KAAK,aAAa,YAAY,KAAK,SAAS,KAAK,EAAE,SAAS,EAAG,WAAU,WAAW,KAAK,SAAS,KAAK;AAClH,iBAAa,KAAK,UAAU;AAAA,MAC1B,IAAI;AAAA,MACJ,SAAS;AAAA,MACT,WAAW,KAAK,IAAI;AAAA,MACpB;AAAA,IACF,CAAC;AACD,QAAI,IAAI,YAAY,EAAE,OAAO,UAAU,EAAE,SAAS,mBAAmB;AACnE;AAAA,IACF;AAAA,EACF;AAEA,aAAW,QAAQ,mBAAmB;AACpC,QAAI,CAAC,gBAAgB,MAAM,QAAQ,EAAG;AACtC,QAAI;AACF,WAAK,KAAK,UAAU;AAAA,IACtB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAEA,SAAS,kBAAwB;AAC/B,MAAI,oBAAqB;AACzB,wBAAsB;AAItB,SAAO,0BAA0B,EAAE,KAAK,CAAC,EAAE,wBAAwB,kCAAkC,MAAM;AACzG,2BAAuB,OAAO,WAAW,YAAY;AACnD,YAAM,qBAAqB,WAAY,WAAW,CAAC,CAA6B;AAAA,IAClF,CAAC;AAED,sCAAkC,OAAO,aAAa;AACpD,UAAI,SAAS,cAAc,QAAQ,IAAK;AACxC,YAAM;AAAA,QACJ,SAAS;AAAA,QACR,SAAS,WAAW,CAAC;AAAA,MACxB;AAAA,IACF,CAAC;AAAA,EACH,CAAC,EAAE,MAAM,MAAM;AAEb,0BAAsB;AAAA,EACxB,CAAC;AACH;AAEA,eAAsB,IAAI,KAAiC;AACzD,QAAM,OAAO,MAAM,2BAA2B,GAAG;AACjD,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3F;AAEA,kBAAgB;AAEhB,QAAM,UAAU,IAAI,YAAY;AAChC,MAAI,iBAAwD;AAC5D,MAAI,aAAyC;AAC7C,QAAM,UAAU,MAAM,QAAQ;AAE9B,QAAM,SAAS,IAAI,eAAe;AAAA,IAChC,MAAM,YAAY;AAChB,YAAM,OAAO,CAAC,SAAiB;AAC7B,mBAAW,QAAQ,QAAQ,OAAO,SAAS,IAAI;AAAA;AAAA,CAAM,CAAC;AAAA,MACxD;AAEA,mBAAa;AAAA,QACX,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,QACrB,gBAAgB,KAAK;AAAA,QACrB;AAAA,QACA,OAAO,MAAM,WAAW,MAAM;AAAA,MAChC;AACA,wBAAkB,IAAI,UAAU;AAEhC,uBAAiB,YAAY,MAAM;AACjC,YAAI;AACF,qBAAW,QAAQ,QAAQ,OAAO,gBAAgB,CAAC;AAAA,QACrD,QAAQ;AAAA,QAER;AAAA,MACF,GAAG,qBAAqB;AAAA,IAC1B;AAAA,IACA,SAAS;AACP,cAAQ;AAAA,IACV;AAAA,EACF,CAAC;AAED,WAAS,UAAU;AACjB,QAAI,gBAAgB;AAClB,oBAAc,cAAc;AAC5B,uBAAiB;AAAA,IACnB;AACA,QAAI,YAAY;AACd,wBAAkB,OAAO,UAAU;AACnC,mBAAa;AAAA,IACf;AAGA,QAAI,OAAO,oBAAoB,SAAS,OAAO;AAAA,EACjD;AAEA,MAAI,OAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAE5D,SAAO,IAAI,SAAS,QAAQ;AAAA,IAC1B,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,iBAAiB;AAAA,MACjB,cAAc;AAAA,MACd,qBAAqB;AAAA,IACvB;AAAA,EACF,CAAC;AACH;AAEA,MAAM,YAA8B;AAAA,EAClC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,iBAAiB;AAAA,EACxB,WAAW;AAAA,IACT;AAAA,MACE,QAAQ;AAAA,MACR,aAAa;AAAA,IACf;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,EAClD;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,SAAS;AAAA,EACT,SAAS,EAAE,KAAK,UAAU;AAC5B;",
+  "sourcesContent": ["/**\n * Portal SSE Event Stream \u2014 Portal Event Bridge\n *\n * Server-Sent Events endpoint that bridges server-side events to the customer portal.\n * Only events with `portalBroadcast: true` in their EventDefinition are sent.\n * Events are scoped to the authenticated customer's tenant and organization.\n *\n * Uses customer JWT auth (cookie or Bearer token) instead of staff auth.\n *\n * Client consumer: `packages/ui/src/portal/hooks/usePortalEventBridge.ts`\n */\n\nimport { NextResponse } from 'next/server'\nimport { isPortalBroadcastEvent } from '@open-mercato/shared/modules/events'\nimport { getCustomerAuthFromRequest } from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport type { OpenApiRouteDoc, OpenApiMethodDoc } from '@open-mercato/shared/lib/openapi'\n\nexport const metadata: { path?: string; requireAuth?: boolean } = { requireAuth: false }\n\nconst HEARTBEAT_INTERVAL_MS = 30_000\nconst MAX_PAYLOAD_BYTES = 4096\n\ntype PortalSseConnection = {\n  tenantId: string\n  organizationId: string\n  customerUserId: string\n  send: (data: string) => void\n  close: () => void\n}\n\nfunction normalizeAudience(data: Record<string, unknown>): {\n  tenantId: string | null\n  organizationScopes: string[]\n  recipientUserScopes: string[]\n} {\n  const tenantId = typeof data.tenantId === 'string' ? data.tenantId : null\n  const organizationScopes = new Set<string>()\n  if (typeof data.organizationId === 'string' && data.organizationId.trim().length > 0) {\n    organizationScopes.add(data.organizationId.trim())\n  }\n  if (Array.isArray(data.organizationIds)) {\n    for (const orgId of data.organizationIds) {\n      if (typeof orgId === 'string' && orgId.trim().length > 0) {\n        organizationScopes.add(orgId.trim())\n      }\n    }\n  }\n\n  const recipientUserScopes = new Set<string>()\n  if (typeof data.recipientUserId === 'string' && data.recipientUserId.trim().length > 0) {\n    recipientUserScopes.add(data.recipientUserId.trim())\n  }\n  if (Array.isArray(data.recipientUserIds)) {\n    for (const userId of data.recipientUserIds) {\n      if (typeof userId === 'string' && userId.trim().length > 0) {\n        recipientUserScopes.add(userId.trim())\n      }\n    }\n  }\n\n  return {\n    tenantId,\n    organizationScopes: Array.from(organizationScopes),\n    recipientUserScopes: Array.from(recipientUserScopes),\n  }\n}\n\nfunction matchesAudience(conn: PortalSseConnection, audience: ReturnType<typeof normalizeAudience>): boolean {\n  if (!audience.tenantId) return false\n  if (conn.tenantId !== audience.tenantId) return false\n  if (audience.organizationScopes.length > 0) {\n    if (!audience.organizationScopes.includes(conn.organizationId)) return false\n  }\n  if (audience.recipientUserScopes.length > 0 && !audience.recipientUserScopes.includes(conn.customerUserId)) {\n    return false\n  }\n  return true\n}\n\nconst portalConnections = new Set<PortalSseConnection>()\n\nlet portalTapRegistered = false\n\nasync function broadcastPortalEvent(eventName: string, payload: Record<string, unknown>): Promise<void> {\n  if (!eventName || portalConnections.size === 0) return\n  if (!isPortalBroadcastEvent(eventName)) return\n\n  const data = payload ?? {}\n  const audience = normalizeAudience(data)\n  const organizationId = audience.organizationScopes[0] ?? ''\n\n  let ssePayload = JSON.stringify({\n    id: eventName,\n    payload: data,\n    timestamp: Date.now(),\n    organizationId,\n  })\n\n  if (new TextEncoder().encode(ssePayload).length > MAX_PAYLOAD_BYTES) {\n    const entityRef: Record<string, unknown> = { truncated: true }\n    if (typeof data.id === 'string' && data.id.trim().length > 0) entityRef.id = data.id.trim()\n    if (typeof data.entityId === 'string' && data.entityId.trim().length > 0) entityRef.entityId = data.entityId.trim()\n    ssePayload = JSON.stringify({\n      id: eventName,\n      payload: entityRef,\n      timestamp: Date.now(),\n      organizationId,\n    })\n    if (new TextEncoder().encode(ssePayload).length > MAX_PAYLOAD_BYTES) {\n      return\n    }\n  }\n\n  for (const conn of portalConnections) {\n    if (!matchesAudience(conn, audience)) continue\n    try {\n      conn.send(ssePayload)\n    } catch {\n      // Connection may have been closed\n    }\n  }\n}\n\nfunction ensurePortalTap(): void {\n  if (portalTapRegistered) return\n  portalTapRegistered = true\n\n  // Dynamically import to avoid circular dependency \u2014 the events bus\n  // registers a global tap that fires for every emitted event.\n  import('@open-mercato/events/bus').then(({ registerGlobalEventTap, registerCrossProcessEventListener }) => {\n    registerGlobalEventTap(async (eventName, payload) => {\n      await broadcastPortalEvent(eventName, (payload ?? {}) as Record<string, unknown>)\n    })\n\n    registerCrossProcessEventListener(async (envelope) => {\n      if (envelope.originPid === process.pid) return\n      await broadcastPortalEvent(\n        envelope.event,\n        (envelope.payload ?? {}) as Record<string, unknown>,\n      )\n    })\n  }).catch(() => {\n    // Silently ignore if events package is not available\n    portalTapRegistered = false\n  })\n}\n\nexport async function GET(req: Request): Promise<Response> {\n  const auth = await getCustomerAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ ok: false, error: 'Authentication required' }, { status: 401 })\n  }\n\n  ensurePortalTap()\n\n  const encoder = new TextEncoder()\n  let heartbeatTimer: ReturnType<typeof setInterval> | null = null\n  let connection: PortalSseConnection | null = null\n  const onAbort = () => cleanup()\n\n  const stream = new ReadableStream({\n    start(controller) {\n      const send = (data: string) => {\n        controller.enqueue(encoder.encode(`data: ${data}\\n\\n`))\n      }\n\n      connection = {\n        tenantId: auth.tenantId,\n        organizationId: auth.orgId,\n        customerUserId: auth.sub,\n        send,\n        close: () => controller.close(),\n      }\n      portalConnections.add(connection)\n\n      // Flush an initial comment so the runtime sends the response headers and\n      // first body byte immediately, firing the browser EventSource `open`\n      // event without waiting for the first heartbeat (30s) or matching event.\n      // Comment lines (`:` prefix) are ignored by EventSource message parsing.\n      controller.enqueue(encoder.encode(': connected\\n\\n'))\n\n      heartbeatTimer = setInterval(() => {\n        try {\n          controller.enqueue(encoder.encode(':heartbeat\\n\\n'))\n        } catch {\n          // Stream may have been closed\n        }\n      }, HEARTBEAT_INTERVAL_MS)\n    },\n    cancel() {\n      cleanup()\n    },\n  })\n\n  function cleanup() {\n    if (heartbeatTimer) {\n      clearInterval(heartbeatTimer)\n      heartbeatTimer = null\n    }\n    if (connection) {\n      portalConnections.delete(connection)\n      connection = null\n    }\n    // Detach from the request signal so reconnect churn does not accumulate\n    // listeners and closures on long-lived AbortSignals.\n    req.signal.removeEventListener('abort', onAbort)\n  }\n\n  req.signal.addEventListener('abort', onAbort, { once: true })\n\n  return new Response(stream, {\n    status: 200,\n    headers: {\n      'Content-Type': 'text/event-stream',\n      'Cache-Control': 'no-cache, no-transform',\n      'Connection': 'keep-alive',\n      'X-Accel-Buffering': 'no',\n    },\n  })\n}\n\nconst methodDoc: OpenApiMethodDoc = {\n  summary: 'Subscribe to portal events via SSE (Portal Event Bridge)',\n  description: 'Long-lived SSE connection that receives server-side events marked with portalBroadcast: true. Events are filtered by the customer\\'s tenant, organization, and recipient user audience.',\n  tags: ['Customer Portal'],\n  responses: [\n    {\n      status: 200,\n      description: 'Event stream (text/event-stream)',\n    },\n  ],\n  errors: [\n    { status: 401, description: 'Not authenticated' },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  summary: 'Portal event stream',\n  methods: { GET: methodDoc },\n}\n"],
+  "mappings": "AAYA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,kCAAkC;AAGpC,MAAM,WAAqD,EAAE,aAAa,MAAM;AAEvF,MAAM,wBAAwB;AAC9B,MAAM,oBAAoB;AAU1B,SAAS,kBAAkB,MAIzB;AACA,QAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,QAAM,qBAAqB,oBAAI,IAAY;AAC3C,MAAI,OAAO,KAAK,mBAAmB,YAAY,KAAK,eAAe,KAAK,EAAE,SAAS,GAAG;AACpF,uBAAmB,IAAI,KAAK,eAAe,KAAK,CAAC;AAAA,EACnD;AACA,MAAI,MAAM,QAAQ,KAAK,eAAe,GAAG;AACvC,eAAW,SAAS,KAAK,iBAAiB;AACxC,UAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,GAAG;AACxD,2BAAmB,IAAI,MAAM,KAAK,CAAC;AAAA,MACrC;AAAA,IACF;AAAA,EACF;AAEA,QAAM,sBAAsB,oBAAI,IAAY;AAC5C,MAAI,OAAO,KAAK,oBAAoB,YAAY,KAAK,gBAAgB,KAAK,EAAE,SAAS,GAAG;AACtF,wBAAoB,IAAI,KAAK,gBAAgB,KAAK,CAAC;AAAA,EACrD;AACA,MAAI,MAAM,QAAQ,KAAK,gBAAgB,GAAG;AACxC,eAAW,UAAU,KAAK,kBAAkB;AAC1C,UAAI,OAAO,WAAW,YAAY,OAAO,KAAK,EAAE,SAAS,GAAG;AAC1D,4BAAoB,IAAI,OAAO,KAAK,CAAC;AAAA,MACvC;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA,oBAAoB,MAAM,KAAK,kBAAkB;AAAA,IACjD,qBAAqB,MAAM,KAAK,mBAAmB;AAAA,EACrD;AACF;AAEA,SAAS,gBAAgB,MAA2B,UAAyD;AAC3G,MAAI,CAAC,SAAS,SAAU,QAAO;AAC/B,MAAI,KAAK,aAAa,SAAS,SAAU,QAAO;AAChD,MAAI,SAAS,mBAAmB,SAAS,GAAG;AAC1C,QAAI,CAAC,SAAS,mBAAmB,SAAS,KAAK,cAAc,EAAG,QAAO;AAAA,EACzE;AACA,MAAI,SAAS,oBAAoB,SAAS,KAAK,CAAC,SAAS,oBAAoB,SAAS,KAAK,cAAc,GAAG;AAC1G,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,MAAM,oBAAoB,oBAAI,IAAyB;AAEvD,IAAI,sBAAsB;AAE1B,eAAe,qBAAqB,WAAmB,SAAiD;AACtG,MAAI,CAAC,aAAa,kBAAkB,SAAS,EAAG;AAChD,MAAI,CAAC,uBAAuB,SAAS,EAAG;AAExC,QAAM,OAAO,WAAW,CAAC;AACzB,QAAM,WAAW,kBAAkB,IAAI;AACvC,QAAM,iBAAiB,SAAS,mBAAmB,CAAC,KAAK;AAEzD,MAAI,aAAa,KAAK,UAAU;AAAA,IAC9B,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,WAAW,KAAK,IAAI;AAAA,IACpB;AAAA,EACF,CAAC;AAED,MAAI,IAAI,YAAY,EAAE,OAAO,UAAU,EAAE,SAAS,mBAAmB;AACnE,UAAM,YAAqC,EAAE,WAAW,KAAK;AAC7D,QAAI,OAAO,KAAK,OAAO,YAAY,KAAK,GAAG,KAAK,EAAE,SAAS,EAAG,WAAU,KAAK,KAAK,GAAG,KAAK;AAC1F,QAAI,OAAO,KAAK,aAAa,YAAY,KAAK,SAAS,KAAK,EAAE,SAAS,EAAG,WAAU,WAAW,KAAK,SAAS,KAAK;AAClH,iBAAa,KAAK,UAAU;AAAA,MAC1B,IAAI;AAAA,MACJ,SAAS;AAAA,MACT,WAAW,KAAK,IAAI;AAAA,MACpB;AAAA,IACF,CAAC;AACD,QAAI,IAAI,YAAY,EAAE,OAAO,UAAU,EAAE,SAAS,mBAAmB;AACnE;AAAA,IACF;AAAA,EACF;AAEA,aAAW,QAAQ,mBAAmB;AACpC,QAAI,CAAC,gBAAgB,MAAM,QAAQ,EAAG;AACtC,QAAI;AACF,WAAK,KAAK,UAAU;AAAA,IACtB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAEA,SAAS,kBAAwB;AAC/B,MAAI,oBAAqB;AACzB,wBAAsB;AAItB,SAAO,0BAA0B,EAAE,KAAK,CAAC,EAAE,wBAAwB,kCAAkC,MAAM;AACzG,2BAAuB,OAAO,WAAW,YAAY;AACnD,YAAM,qBAAqB,WAAY,WAAW,CAAC,CAA6B;AAAA,IAClF,CAAC;AAED,sCAAkC,OAAO,aAAa;AACpD,UAAI,SAAS,cAAc,QAAQ,IAAK;AACxC,YAAM;AAAA,QACJ,SAAS;AAAA,QACR,SAAS,WAAW,CAAC;AAAA,MACxB;AAAA,IACF,CAAC;AAAA,EACH,CAAC,EAAE,MAAM,MAAM;AAEb,0BAAsB;AAAA,EACxB,CAAC;AACH;AAEA,eAAsB,IAAI,KAAiC;AACzD,QAAM,OAAO,MAAM,2BAA2B,GAAG;AACjD,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3F;AAEA,kBAAgB;AAEhB,QAAM,UAAU,IAAI,YAAY;AAChC,MAAI,iBAAwD;AAC5D,MAAI,aAAyC;AAC7C,QAAM,UAAU,MAAM,QAAQ;AAE9B,QAAM,SAAS,IAAI,eAAe;AAAA,IAChC,MAAM,YAAY;AAChB,YAAM,OAAO,CAAC,SAAiB;AAC7B,mBAAW,QAAQ,QAAQ,OAAO,SAAS,IAAI;AAAA;AAAA,CAAM,CAAC;AAAA,MACxD;AAEA,mBAAa;AAAA,QACX,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,QACrB,gBAAgB,KAAK;AAAA,QACrB;AAAA,QACA,OAAO,MAAM,WAAW,MAAM;AAAA,MAChC;AACA,wBAAkB,IAAI,UAAU;AAMhC,iBAAW,QAAQ,QAAQ,OAAO,iBAAiB,CAAC;AAEpD,uBAAiB,YAAY,MAAM;AACjC,YAAI;AACF,qBAAW,QAAQ,QAAQ,OAAO,gBAAgB,CAAC;AAAA,QACrD,QAAQ;AAAA,QAER;AAAA,MACF,GAAG,qBAAqB;AAAA,IAC1B;AAAA,IACA,SAAS;AACP,cAAQ;AAAA,IACV;AAAA,EACF,CAAC;AAED,WAAS,UAAU;AACjB,QAAI,gBAAgB;AAClB,oBAAc,cAAc;AAC5B,uBAAiB;AAAA,IACnB;AACA,QAAI,YAAY;AACd,wBAAkB,OAAO,UAAU;AACnC,mBAAa;AAAA,IACf;AAGA,QAAI,OAAO,oBAAoB,SAAS,OAAO;AAAA,EACjD;AAEA,MAAI,OAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAE5D,SAAO,IAAI,SAAS,QAAQ;AAAA,IAC1B,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,iBAAiB;AAAA,MACjB,cAAc;AAAA,MACd,qBAAqB;AAAA,IACvB;AAAA,EACF,CAAC;AACH;AAEA,MAAM,YAA8B;AAAA,EAClC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,iBAAiB;AAAA,EACxB,WAAW;AAAA,IACT;AAAA,MACE,QAAQ;AAAA,MACR,aAAa;AAAA,IACf;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,EAClD;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,SAAS;AAAA,EACT,SAAS,EAAE,KAAK,UAAU;AAC5B;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/core",
-  "version": "0.6.4-develop.4254.1.7a123d970c",
+  "version": "0.6.4-develop.4264.1.53368d85fe",
   "type": "module",
   "main": "./dist/index.js",
   "scripts": {
@@ -243,16 +243,16 @@
     "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@open-mercato/ai-assistant": "0.6.4-develop.4254.1.7a123d970c",
-    "@open-mercato/shared": "0.6.4-develop.4254.1.7a123d970c",
-    "@open-mercato/ui": "0.6.4-develop.4254.1.7a123d970c",
+    "@open-mercato/ai-assistant": "0.6.4-develop.4264.1.53368d85fe",
+    "@open-mercato/shared": "0.6.4-develop.4264.1.53368d85fe",
+    "@open-mercato/ui": "0.6.4-develop.4264.1.53368d85fe",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/ai-assistant": "0.6.4-develop.4254.1.7a123d970c",
-    "@open-mercato/shared": "0.6.4-develop.4254.1.7a123d970c",
-    "@open-mercato/ui": "0.6.4-develop.4254.1.7a123d970c",
+    "@open-mercato/ai-assistant": "0.6.4-develop.4264.1.53368d85fe",
+    "@open-mercato/shared": "0.6.4-develop.4264.1.53368d85fe",
+    "@open-mercato/ui": "0.6.4-develop.4264.1.53368d85fe",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.1",

package/src/modules/customer_accounts/api/portal/events/stream.ts

@@ -173,6 +173,12 @@ export async function GET(req: Request): Promise<Response> {
       }
       portalConnections.add(connection)
 
+      // Flush an initial comment so the runtime sends the response headers and
+      // first body byte immediately, firing the browser EventSource `open`
+      // event without waiting for the first heartbeat (30s) or matching event.
+      // Comment lines (`:` prefix) are ignored by EventSource message parsing.
+      controller.enqueue(encoder.encode(': connected\n\n'))
+
       heartbeatTimer = setInterval(() => {
         try {
           controller.enqueue(encoder.encode(':heartbeat\n\n'))

package/src/modules/staff/i18n/de.json

@@ -118,6 +118,14 @@
   "staff.audit.teams.create": "Team erstellen",
   "staff.audit.teams.delete": "Team löschen",
   "staff.audit.teams.update": "Team aktualisieren",
+  "staff.audit.timesheets.time_entries.create": "Zeiteintrag erstellen",
+  "staff.audit.timesheets.time_entries.delete": "Zeiteintrag löschen",
+  "staff.audit.timesheets.time_entries.update": "Zeiteintrag aktualisieren",
+  "staff.audit.timesheets.time_project_members.assign": "Zeitprojektmitglied zuweisen",
+  "staff.audit.timesheets.time_project_members.unassign": "Zeitprojektmitglied entfernen",
+  "staff.audit.timesheets.time_projects.create": "Zeitprojekt erstellen",
+  "staff.audit.timesheets.time_projects.delete": "Zeitprojekt löschen",
+  "staff.audit.timesheets.time_projects.update": "Zeitprojekt aktualisieren",
   "staff.availability.errors.organizationRequired": "Organisationskontext ist erforderlich.",
   "staff.availability.errors.unauthorized": "Nicht autorisiert",
   "staff.availability.errors.updateDateSpecific": "Datumsspezifische Verfügbarkeit konnte nicht gespeichert werden.",
@@ -202,6 +210,7 @@
   "staff.availabilityRuleSets.tabs.availability": "Verfügbarkeit",
   "staff.availabilityRuleSets.tabs.details": "Details",
   "staff.availabilityRuleSets.tabs.label": "Zeitplanbereiche",
+  "staff.errors.missingScope": "Mandanten- oder Organisationskontext fehlt.",
   "staff.errors.unauthorized": "Nicht autorisiert",
   "staff.leaveRequests.actions.accept": "Genehmigen",
   "staff.leaveRequests.actions.add": "Neuer Antrag",
@@ -413,6 +422,7 @@
   "staff.search.badge.team": "Team",
   "staff.search.badge.teamMember": "Teammitglied",
   "staff.search.badge.teamRole": "Teamrolle",
+  "staff.search.badge.timeProject": "Projekt",
   "staff.search.service.maxAttendees": "Max. {{count}}",
   "staff.search.status.active": "Aktiv",
   "staff.search.status.inactive": "Inaktiv",
@@ -918,13 +928,26 @@
   "staff.teams.tabs.details": "Details",
   "staff.teams.tabs.label": "Teamabschnitte",
   "staff.teams.tabs.members": "Teammitglieder",
+  "staff.timesheets.errors.bulkSave": "Zeiteinträge konnten nicht im Stapel gespeichert werden.",
   "staff.timesheets.errors.entryNotFound": "Zeiteintrag nicht gefunden, gelöscht oder Ihnen nicht zugeordnet.",
+  "staff.timesheets.errors.invalidBody": "Ungültiger Anfragetext.",
+  "staff.timesheets.errors.invalidProjectId": "Ungültige Projekt-ID.",
+  "staff.timesheets.errors.memberRequired": "Die ID des Zeitprojektmitglieds ist erforderlich.",
+  "staff.timesheets.errors.missingEntryId": "Eintrags-ID fehlt.",
+  "staff.timesheets.errors.myProjects": "Ihre Projekte konnten nicht geladen werden.",
+  "staff.timesheets.errors.noActiveSegment": "Für diesen Eintrag wurde kein aktives Timer-Segment gefunden.",
   "staff.timesheets.errors.noStaffMember": "Ihrem Konto ist kein Mitarbeiter zugeordnet.",
+  "staff.timesheets.errors.notAssigned": "Sie sind diesem Projekt nicht zugewiesen.",
   "staff.timesheets.errors.notOwner": "Sie können nur Ihre eigenen Zeiteinträge verwalten.",
   "staff.timesheets.errors.projectCodeDuplicate": "Ein Projekt mit diesem Code existiert bereits.",
   "staff.timesheets.errors.projectNotFound": "Zeitprojekt nicht gefunden oder nicht zugänglich.",
   "staff.timesheets.errors.projectsKpis": "Failed to load project KPIs.",
+  "staff.timesheets.errors.segmentCreate": "Zeiteintragssegment konnte nicht erstellt werden.",
   "staff.timesheets.errors.staffMemberNotFound": "Mitarbeiter nicht gefunden oder nicht zugänglich.",
+  "staff.timesheets.errors.timerAlreadyStarted": "Der Timer ist für diesen Eintrag bereits gestartet.",
+  "staff.timesheets.errors.timerStart": "Timer konnte nicht gestartet werden.",
+  "staff.timesheets.errors.timerStop": "Timer konnte nicht gestoppt werden.",
+  "staff.timesheets.errors.updateMyProject": "Projektsichtbarkeit konnte nicht aktualisiert werden.",
   "staff.timesheets.my.addRow.createProject": "Create a new project",
   "staff.timesheets.my.addRow.error": "Das Projekt konnte nicht hinzugefügt werden. Bitte erneut versuchen.",
   "staff.timesheets.my.addRow.noProjects": "No projects assigned",

package/src/modules/staff/i18n/en.json

@@ -118,6 +118,14 @@
   "staff.audit.teams.create": "Create team",
   "staff.audit.teams.delete": "Delete team",
   "staff.audit.teams.update": "Update team",
+  "staff.audit.timesheets.time_entries.create": "Create time entry",
+  "staff.audit.timesheets.time_entries.delete": "Delete time entry",
+  "staff.audit.timesheets.time_entries.update": "Update time entry",
+  "staff.audit.timesheets.time_project_members.assign": "Assign time project member",
+  "staff.audit.timesheets.time_project_members.unassign": "Unassign time project member",
+  "staff.audit.timesheets.time_projects.create": "Create time project",
+  "staff.audit.timesheets.time_projects.delete": "Delete time project",
+  "staff.audit.timesheets.time_projects.update": "Update time project",
   "staff.availability.errors.organizationRequired": "Organization context is required.",
   "staff.availability.errors.unauthorized": "Unauthorized",
   "staff.availability.errors.updateDateSpecific": "Failed to save date-specific availability.",
@@ -202,6 +210,7 @@
   "staff.availabilityRuleSets.tabs.availability": "Availability",
   "staff.availabilityRuleSets.tabs.details": "Details",
   "staff.availabilityRuleSets.tabs.label": "Schedule sections",
+  "staff.errors.missingScope": "Missing tenant or organization scope.",
   "staff.errors.unauthorized": "Unauthorized",
   "staff.leaveRequests.actions.accept": "Approve",
   "staff.leaveRequests.actions.add": "New request",
@@ -413,6 +422,7 @@
   "staff.search.badge.team": "Team",
   "staff.search.badge.teamMember": "Team member",
   "staff.search.badge.teamRole": "Team role",
+  "staff.search.badge.timeProject": "Project",
   "staff.search.service.maxAttendees": "Max {{count}}",
   "staff.search.status.active": "Active",
   "staff.search.status.inactive": "Inactive",
@@ -918,13 +928,26 @@
   "staff.teams.tabs.details": "Details",
   "staff.teams.tabs.label": "Team sections",
   "staff.teams.tabs.members": "Team members",
+  "staff.timesheets.errors.bulkSave": "Failed to bulk save time entries.",
   "staff.timesheets.errors.entryNotFound": "Time entry not found, deleted, or not owned by you.",
+  "staff.timesheets.errors.invalidBody": "Invalid request body.",
+  "staff.timesheets.errors.invalidProjectId": "Invalid project id.",
+  "staff.timesheets.errors.memberRequired": "Time project member id is required.",
+  "staff.timesheets.errors.missingEntryId": "Missing entry ID.",
+  "staff.timesheets.errors.myProjects": "Failed to load your projects.",
+  "staff.timesheets.errors.noActiveSegment": "No active timer segment found for this entry.",
   "staff.timesheets.errors.noStaffMember": "No staff member linked to your account.",
+  "staff.timesheets.errors.notAssigned": "You are not assigned to this project.",
   "staff.timesheets.errors.notOwner": "You can only manage your own time entries.",
   "staff.timesheets.errors.projectCodeDuplicate": "A project with this code already exists.",
   "staff.timesheets.errors.projectNotFound": "Time project not found or not accessible.",
   "staff.timesheets.errors.projectsKpis": "Failed to load project KPIs.",
+  "staff.timesheets.errors.segmentCreate": "Failed to create time entry segment.",
   "staff.timesheets.errors.staffMemberNotFound": "Staff member not found or not accessible.",
+  "staff.timesheets.errors.timerAlreadyStarted": "Timer is already started for this entry.",
+  "staff.timesheets.errors.timerStart": "Failed to start timer.",
+  "staff.timesheets.errors.timerStop": "Failed to stop timer.",
+  "staff.timesheets.errors.updateMyProject": "Failed to update project visibility.",
   "staff.timesheets.my.addRow.createProject": "Create a new project",
   "staff.timesheets.my.addRow.error": "Could not add the project. Please try again.",
   "staff.timesheets.my.addRow.noProjects": "No projects assigned",

package/src/modules/staff/i18n/es.json

@@ -118,6 +118,14 @@
   "staff.audit.teams.create": "Crear equipo",
   "staff.audit.teams.delete": "Eliminar equipo",
   "staff.audit.teams.update": "Actualizar equipo",
+  "staff.audit.timesheets.time_entries.create": "Crear registro de tiempo",
+  "staff.audit.timesheets.time_entries.delete": "Eliminar registro de tiempo",
+  "staff.audit.timesheets.time_entries.update": "Actualizar registro de tiempo",
+  "staff.audit.timesheets.time_project_members.assign": "Asignar miembro del proyecto de tiempo",
+  "staff.audit.timesheets.time_project_members.unassign": "Desasignar miembro del proyecto de tiempo",
+  "staff.audit.timesheets.time_projects.create": "Crear proyecto de tiempo",
+  "staff.audit.timesheets.time_projects.delete": "Eliminar proyecto de tiempo",
+  "staff.audit.timesheets.time_projects.update": "Actualizar proyecto de tiempo",
   "staff.availability.errors.organizationRequired": "Se requiere el contexto de la organización.",
   "staff.availability.errors.unauthorized": "No autorizado",
   "staff.availability.errors.updateDateSpecific": "No se pudo guardar la disponibilidad por fecha.",
@@ -202,6 +210,7 @@
   "staff.availabilityRuleSets.tabs.availability": "Disponibilidad",
   "staff.availabilityRuleSets.tabs.details": "Detalles",
   "staff.availabilityRuleSets.tabs.label": "Secciones del horario",
+  "staff.errors.missingScope": "Falta el contexto de inquilino u organización.",
   "staff.errors.unauthorized": "No autorizado",
   "staff.leaveRequests.actions.accept": "Aprobar",
   "staff.leaveRequests.actions.add": "Nueva solicitud",
@@ -413,6 +422,7 @@
   "staff.search.badge.team": "Equipo",
   "staff.search.badge.teamMember": "Miembro del equipo",
   "staff.search.badge.teamRole": "Rol del equipo",
+  "staff.search.badge.timeProject": "Proyecto",
   "staff.search.service.maxAttendees": "Máx. {{count}}",
   "staff.search.status.active": "Activo",
   "staff.search.status.inactive": "Inactivo",
@@ -918,13 +928,26 @@
   "staff.teams.tabs.details": "Detalles",
   "staff.teams.tabs.label": "Secciones del equipo",
   "staff.teams.tabs.members": "Miembros del equipo",
+  "staff.timesheets.errors.bulkSave": "No se pudieron guardar en lote los registros de tiempo.",
   "staff.timesheets.errors.entryNotFound": "Registro de tiempo no encontrado, eliminado o no asignado a ti.",
+  "staff.timesheets.errors.invalidBody": "Cuerpo de la solicitud no válido.",
+  "staff.timesheets.errors.invalidProjectId": "Identificador de proyecto no válido.",
+  "staff.timesheets.errors.memberRequired": "El identificador del miembro del proyecto de tiempo es obligatorio.",
+  "staff.timesheets.errors.missingEntryId": "Falta el identificador del registro.",
+  "staff.timesheets.errors.myProjects": "No se pudieron cargar tus proyectos.",
+  "staff.timesheets.errors.noActiveSegment": "No se encontró ningún segmento de temporizador activo para este registro.",
   "staff.timesheets.errors.noStaffMember": "Ningún miembro del personal vinculado a tu cuenta.",
+  "staff.timesheets.errors.notAssigned": "No estás asignado a este proyecto.",
   "staff.timesheets.errors.notOwner": "Solo puedes gestionar tus propios registros de tiempo.",
   "staff.timesheets.errors.projectCodeDuplicate": "Ya existe un proyecto con este código.",
   "staff.timesheets.errors.projectNotFound": "Proyecto de tiempo no encontrado o no accesible.",
   "staff.timesheets.errors.projectsKpis": "Failed to load project KPIs.",
+  "staff.timesheets.errors.segmentCreate": "No se pudo crear el segmento del registro de tiempo.",
   "staff.timesheets.errors.staffMemberNotFound": "Miembro del personal no encontrado o no accesible.",
+  "staff.timesheets.errors.timerAlreadyStarted": "El temporizador ya está iniciado para este registro.",
+  "staff.timesheets.errors.timerStart": "No se pudo iniciar el temporizador.",
+  "staff.timesheets.errors.timerStop": "No se pudo detener el temporizador.",
+  "staff.timesheets.errors.updateMyProject": "No se pudo actualizar la visibilidad del proyecto.",
   "staff.timesheets.my.addRow.createProject": "Create a new project",
   "staff.timesheets.my.addRow.error": "No se pudo añadir el proyecto. Inténtalo de nuevo.",
   "staff.timesheets.my.addRow.noProjects": "No projects assigned",

package/src/modules/staff/i18n/pl.json

@@ -118,6 +118,14 @@
   "staff.audit.teams.create": "Utwórz zespół",
   "staff.audit.teams.delete": "Usuń zespół",
   "staff.audit.teams.update": "Zaktualizuj zespół",
+  "staff.audit.timesheets.time_entries.create": "Utwórz wpis czasu",
+  "staff.audit.timesheets.time_entries.delete": "Usuń wpis czasu",
+  "staff.audit.timesheets.time_entries.update": "Zaktualizuj wpis czasu",
+  "staff.audit.timesheets.time_project_members.assign": "Przypisz członka projektu czasu",
+  "staff.audit.timesheets.time_project_members.unassign": "Usuń przypisanie członka projektu czasu",
+  "staff.audit.timesheets.time_projects.create": "Utwórz projekt czasu",
+  "staff.audit.timesheets.time_projects.delete": "Usuń projekt czasu",
+  "staff.audit.timesheets.time_projects.update": "Zaktualizuj projekt czasu",
   "staff.availability.errors.organizationRequired": "Wymagany jest kontekst organizacji.",
   "staff.availability.errors.unauthorized": "Brak autoryzacji",
   "staff.availability.errors.updateDateSpecific": "Nie udało się zapisać dostępności dla dat.",
@@ -202,6 +210,7 @@
   "staff.availabilityRuleSets.tabs.availability": "Dostępność",
   "staff.availabilityRuleSets.tabs.details": "Szczegóły",
   "staff.availabilityRuleSets.tabs.label": "Sekcje harmonogramu",
+  "staff.errors.missingScope": "Brak kontekstu najemcy lub organizacji.",
   "staff.errors.unauthorized": "Brak autoryzacji",
   "staff.leaveRequests.actions.accept": "Zatwierdź",
   "staff.leaveRequests.actions.add": "Nowy wniosek",
@@ -413,6 +422,7 @@
   "staff.search.badge.team": "Zespół",
   "staff.search.badge.teamMember": "Członek zespołu",
   "staff.search.badge.teamRole": "Rola zespołu",
+  "staff.search.badge.timeProject": "Projekt",
   "staff.search.service.maxAttendees": "Maks. {{count}}",
   "staff.search.status.active": "Aktywny",
   "staff.search.status.inactive": "Nieaktywny",
@@ -918,13 +928,26 @@
   "staff.teams.tabs.details": "Szczegóły",
   "staff.teams.tabs.label": "Sekcje zespołu",
   "staff.teams.tabs.members": "Członkowie zespołu",
+  "staff.timesheets.errors.bulkSave": "Nie udało się zbiorczo zapisać wpisów czasu.",
   "staff.timesheets.errors.entryNotFound": "Wpis czasu nie istnieje, został usunięty lub nie należy do Ciebie.",
+  "staff.timesheets.errors.invalidBody": "Nieprawidłowe ciało żądania.",
+  "staff.timesheets.errors.invalidProjectId": "Nieprawidłowy identyfikator projektu.",
+  "staff.timesheets.errors.memberRequired": "Identyfikator członka projektu czasu jest wymagany.",
+  "staff.timesheets.errors.missingEntryId": "Brak identyfikatora wpisu.",
+  "staff.timesheets.errors.myProjects": "Nie udało się załadować Twoich projektów.",
+  "staff.timesheets.errors.noActiveSegment": "Nie znaleziono aktywnego segmentu czasomierza dla tego wpisu.",
   "staff.timesheets.errors.noStaffMember": "Brak pracownika powiązanego z Twoim kontem.",
+  "staff.timesheets.errors.notAssigned": "Nie jesteś przypisany do tego projektu.",
   "staff.timesheets.errors.notOwner": "Możesz zarządzać tylko własnymi wpisami czasu.",
   "staff.timesheets.errors.projectCodeDuplicate": "Projekt o tym kodzie już istnieje.",
   "staff.timesheets.errors.projectNotFound": "Projekt czasowy nie został znaleziony lub jest niedostępny.",
   "staff.timesheets.errors.projectsKpis": "Failed to load project KPIs.",
+  "staff.timesheets.errors.segmentCreate": "Nie udało się utworzyć segmentu wpisu czasu.",
   "staff.timesheets.errors.staffMemberNotFound": "Pracownik nie został znaleziony lub jest niedostępny.",
+  "staff.timesheets.errors.timerAlreadyStarted": "Czasomierz jest już uruchomiony dla tego wpisu.",
+  "staff.timesheets.errors.timerStart": "Nie udało się uruchomić czasomierza.",
+  "staff.timesheets.errors.timerStop": "Nie udało się zatrzymać czasomierza.",
+  "staff.timesheets.errors.updateMyProject": "Nie udało się zaktualizować widoczności projektu.",
   "staff.timesheets.my.addRow.createProject": "Create a new project",
   "staff.timesheets.my.addRow.error": "Nie udało się dodać projektu. Spróbuj ponownie.",
   "staff.timesheets.my.addRow.noProjects": "No projects assigned",