@open-mercato/core 0.6.6-develop.6465.1.019f0fb26f → 0.6.6-develop.6472.1.1673e7e66b

package/src/modules/attachments/components/AttachmentPartitionSettings.tsx

@@ -30,6 +30,9 @@ import { raiseCrudError } from '@open-mercato/ui/backend/utils/serverErrors'
 import { useT } from '@open-mercato/shared/lib/i18n/context'
 import { useConfirmDialog } from '@open-mercato/ui/backend/confirm-dialog'
 import { resolvePartitionEnvKey } from '@open-mercato/core/modules/attachments/lib/partitionEnv'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('attachments').child({ component: 'partitions' })
 
 type Partition = {
   id: string
@@ -119,7 +122,7 @@ export function AttachmentPartitionSettings({ s3Enabled }: AttachmentPartitionSe
       }))
       setItems(withDefaults)
     } catch (err) {
-      console.error('[attachments.partitions] list failed', err)
+      logger.error('Partition list failed', { err })
       flash(loadErrorMessage, 'error')
     } finally {
       setLoading(false)
@@ -257,7 +260,7 @@ export function AttachmentPartitionSettings({ s3Enabled }: AttachmentPartitionSe
       closeDialog()
       await loadItems()
     } catch (err) {
-      console.error('[attachments.partitions] save failed', err)
+      logger.error('Partition save failed', { err })
       if (surfaceRecordConflict(err, t)) return
       const message =
         err instanceof Error ? err.message : t('attachments.partitions.errors.save', 'Failed to save partition.')
@@ -295,7 +298,7 @@ export function AttachmentPartitionSettings({ s3Enabled }: AttachmentPartitionSe
         flash(t('attachments.partitions.messages.deleted', 'Partition removed.'), 'success')
         await loadItems()
       } catch (err) {
-        console.error('[attachments.partitions] delete failed', err)
+        logger.error('Partition delete failed', { err })
         if (surfaceRecordConflict(err, t)) return
         flash(t('attachments.partitions.errors.delete', 'Failed to delete partition.'), 'error')
       }

package/src/modules/attachments/lib/assignmentDetails.ts

@@ -3,6 +3,9 @@ import type { AttachmentAssignment } from './metadata'
 import type { CustomEntitySpec } from '@open-mercato/shared/modules/entities'
 import { getEntityIds } from '@open-mercato/shared/lib/encryption/entityIds'
 import { getModules } from '@open-mercato/shared/lib/i18n/server'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('attachments')
 
 type AssignmentLinkSpec = {
   labelFields?: string[]
@@ -271,7 +274,7 @@ export async function resolveAssignmentEnrichments(
         }
       }
     } catch (error) {
-      console.warn('[attachments] Failed to resolve assignment details for', entityId, error)
+      logger.warn('Failed to resolve assignment details', { entityId, err: error })
     }
   }
   return map

package/src/modules/attachments/lib/drivers/driverFactory.ts

@@ -3,6 +3,9 @@ import type { StorageDriver } from './types'
 import { LocalStorageDriver } from './localDriver'
 import { LegacyPublicStorageDriver } from './legacyPublicDriver'
 import { AttachmentPartition } from '../../data/entities'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('attachments').child({ component: 'storage-driver-factory' })
 
 type DriverScope = { tenantId: string; organizationId: string }
 type CredentialEnhancer = (config: Record<string, unknown>, scope: DriverScope) => Promise<Record<string, unknown>>
@@ -73,7 +76,7 @@ export class StorageDriverFactory {
     if (!partition) return this.localDriver
 
     const driverKey = partition.storageDriver ?? 'local'
-    console.log(`[storageDriverFactory] resolveForPartition: partition=${partitionCode} driverKey=${driverKey} moduleDrivers=${[...moduleDriverRegistry.keys()].join(',')} instanceDrivers=${[...this.externalDrivers.keys()].join(',')}`)
+    logger.debug('Resolving storage driver for partition', { partition: partitionCode, driverKey, moduleDrivers: [...moduleDriverRegistry.keys()], instanceDrivers: [...this.externalDrivers.keys()] })
     let config: Record<string, unknown> = partition.configJson ?? {}
 
     const activeEnhancer =

package/src/modules/attachments/lib/ocrQueue.ts

@@ -2,6 +2,9 @@ import type { EntityManager } from '@mikro-orm/postgresql'
 import { Attachment, AttachmentPartition } from '../data/entities'
 import { OcrService } from './ocrService'
 import type { StorageDriver } from './drivers/types'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('attachments').child({ component: 'ocr' })
 
 export type OcrRequestedEvent = {
   attachmentId: string
@@ -19,7 +22,7 @@ export async function processAttachmentOcr(
 ): Promise<void> {
   const { attachmentId, storagePath, mimeType, partitionCode } = payload
 
-  console.log(`[attachments.ocr] Processing started for attachment: ${attachmentId}`)
+  logger.info('Processing started', { attachmentId })
   const startTime = Date.now()
 
   const { filePath, cleanup } = await driver.toLocalPath(partitionCode, storagePath)
@@ -30,7 +33,7 @@ export async function processAttachmentOcr(
     const ocrService = new OcrService()
 
     if (!ocrService.available) {
-      console.warn(`[attachments.ocr] OPENAI_API_KEY not configured, skipping OCR for: ${attachmentId}`)
+      logger.warn('OPENAI_API_KEY not configured, skipping OCR', { attachmentId })
       return
     }
 
@@ -41,20 +44,20 @@ export async function processAttachmentOcr(
     })
 
     if (!result) {
-      console.log(`[attachments.ocr] No content extracted for attachment: ${attachmentId}`)
+      logger.info('No content extracted', { attachmentId })
       return
     }
 
     const attachment = await em.findOne(Attachment, { id: attachmentId })
     if (!attachment) {
-      console.error(`[attachments.ocr] Attachment not found: ${attachmentId}`)
+      logger.error('Attachment not found', { attachmentId })
       return
     }
 
     attachment.content = result.content
     await em.persist(attachment).flush()
 
-    console.log(`[attachments.ocr] Processing completed:`, {
+    logger.info('Processing completed', {
       attachmentId,
       pageCount: result.pageCount,
       contentLength: result.content.length,
@@ -62,13 +65,10 @@ export async function processAttachmentOcr(
       totalTimeMs: Date.now() - startTime,
     })
   } catch (error) {
-    console.error(`[attachments.ocr] Processing failed:`, {
-      attachmentId,
-      error: error instanceof Error ? error.message : String(error),
-    })
+    logger.error('Processing failed', { attachmentId, err: error })
   } finally {
     await cleanup().catch((cleanupError) => {
-      console.warn(`[attachments.ocr] Temp file cleanup failed:`, cleanupError)
+      logger.warn('Temp file cleanup failed', { err: cleanupError })
     })
   }
 }
@@ -99,7 +99,7 @@ export async function requestOcrProcessing(
 
   setImmediate(() => {
     processAttachmentOcr(workerEm, payload, driver).catch((error) => {
-      console.error(`[attachments.ocr] Background processing error:`, error)
+      logger.error('Background processing error', { err: error })
     })
   })
 }

package/src/modules/attachments/lib/ocrService.ts

@@ -2,6 +2,9 @@ import { generateText } from 'ai'
 import { createOpenAI } from '@ai-sdk/openai'
 import fs from 'fs/promises'
 import path from 'path'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('attachments').child({ component: 'ocr-service' })
 
 export type OcrServiceOptions = {
   apiKey?: string
@@ -221,7 +224,7 @@ export class OcrService {
           }
         }
       } catch (error) {
-        console.error(`[attachments.ocr] Failed to process PDF page ${page.pageNumber}`, error)
+        logger.error('Failed to process PDF page', { pageNumber: page.pageNumber, err: error })
       }
     }
 
@@ -236,16 +239,16 @@ export class OcrService {
     const { filePath, mimeType } = input
 
     if (isPdfMimeType(mimeType, filePath)) {
-      console.log('[attachments.ocr] Processing PDF attachment via pdfjs-dist')
+      logger.info('Processing PDF attachment via pdfjs-dist')
       return this.processPdf(input)
     }
 
     if (isImageMimeType(mimeType, filePath)) {
-      console.log('[attachments.ocr] Processing image attachment via LLM OCR')
+      logger.info('Processing image attachment via LLM OCR')
       return this.processImage(input)
     }
 
-    console.log(`[attachments.ocr] Unsupported file type for OCR: ${mimeType || 'unknown'}`)
+    logger.info('Unsupported file type for OCR', { mimeType: mimeType || 'unknown' })
     return null
   }
 }

package/src/modules/audit_logs/api/audit-logs/actions/redo/route.ts

@@ -11,6 +11,9 @@ import type { AwilixContainer } from 'awilix'
 import type { ActionLog } from '@open-mercato/core/modules/audit_logs/data/entities'
 import { z } from 'zod'
 import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('audit_logs').child({ component: 'redo' })
 
 export const metadata = {
   POST: { requireAuth: true, requireFeatures: ['audit_logs.redo_self'] },
@@ -157,7 +160,7 @@ export async function POST(req: Request) {
     }
     return response
   } catch (err) {
-    console.error('Redo failed', err)
+    logger.error('Redo failed', { err })
     return NextResponse.json({ error: 'Redo failed' }, { status: 400 })
   }
 }

package/src/modules/audit_logs/api/audit-logs/actions/undo/route.ts

@@ -9,6 +9,9 @@ import type { CommandRuntimeContext } from '@open-mercato/shared/lib/commands'
 import type { AwilixContainer } from 'awilix'
 import { z } from 'zod'
 import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('audit_logs').child({ component: 'undo' })
 
 export const metadata = {
   POST: { requireAuth: true, requireFeatures: ['audit_logs.undo_self'] },
@@ -117,7 +120,7 @@ export async function POST(req: Request) {
     await commandBus.undo(undoToken, ctx)
     return NextResponse.json({ ok: true, logId: target.id })
   } catch (err) {
-    console.error('Undo failed', err)
+    logger.error('Undo failed', { err })
     return NextResponse.json({ error: 'Undo failed' }, { status: 400 })
   }
 }

package/src/modules/audit_logs/backend/audit-logs/page.tsx

@@ -9,6 +9,9 @@ import type { ActionLogItem } from '../../components/AuditLogsActions'
 import { AuditLogsActions } from '../../components/AuditLogsActions'
 import type { AccessLogItem } from '../../components/AccessLogsTable'
 import { AccessLogsTable } from '../../components/AccessLogsTable'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('audit_logs').child({ component: 'audit-logs-page' })
 
 type ActionLogResponse = {
   items: ActionLogItem[]
@@ -118,7 +121,7 @@ export default function AuditLogsPage() {
     try {
       await loadAll(actionPage, actionPageSize, accessPageNum, accessPageSizeNum)
     } catch (err) {
-      console.error('Failed to load audit logs', err)
+      logger.error('Failed to load audit logs', { err })
       setError(t('audit_logs.error.load'))
     } finally {
       setLoading(false)

package/src/modules/audit_logs/components/AuditLogsActions.tsx

@@ -11,6 +11,9 @@ import { Undo2, RotateCcw } from 'lucide-react'
 import { markRedoConsumed, markUndoSuccess } from '@open-mercato/ui/backend/operations/store'
 import { useAuditPermissions, canUndoEntry, canRedoEntry } from '@open-mercato/ui/backend/version-history'
 import { Alert, AlertDescription } from '@open-mercato/ui/primitives/alert'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('audit_logs').child({ component: 'AuditLogsActions' })
 
 export type ActionLogItem = {
   id: string
@@ -104,7 +107,7 @@ export function AuditLogsActions({
       markUndoSuccess(token)
       await onRefresh()
     } catch (err) {
-      console.error(t('audit_logs.actions.undo'), err)
+      logger.error('Undo action failed', { err })
       onUndoError?.()
     } finally {
       setUndoingToken(null)
@@ -123,7 +126,7 @@ export function AuditLogsActions({
       markRedoConsumed(logId)
       await onRefresh()
     } catch (err) {
-      console.error(t('audit_logs.actions.redo'), err)
+      logger.error('Redo action failed', { err })
       onRedoError?.()
     } finally {
       setRedoingId(null)

package/src/modules/audit_logs/services/accessLogService.ts

@@ -10,6 +10,9 @@ import {
 import { resolveTenantEncryptionService } from '@open-mercato/shared/lib/encryption/customFieldValues'
 import { parseDecryptedFieldValue } from '@open-mercato/shared/lib/encryption/tenantDataEncryptionService'
 import { E } from '#generated/entities.ids.generated'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('audit_logs').child({ component: 'access-log-service' })
 
 const CORE_RESOURCE_KINDS = new Set<string>(['auth.user', 'auth.role'])
 
@@ -226,8 +229,7 @@ export class AccessLogService {
       } catch (err) {
         if (!isZodRuntimeMissing(err) && !validationWarningLogged) {
           validationWarningLogged = true
-          // eslint-disable-next-line no-console
-          console.warn('[audit_logs] falling back to permissive access log payload parser', err)
+          logger.warn('Falling back to permissive access log payload parser', { err })
         }
         if (isZodRuntimeMissing(err)) runtimeValidationAvailable = false
         return this.normalizeInput(input)
@@ -409,8 +411,7 @@ export class AccessLogService {
         createdAt: { $lt: nonCoreCutoff },
       })
     } catch (err) {
-      // eslint-disable-next-line no-console
-      console.warn('[audit_logs] failed to rotate access logs', err)
+      logger.warn('Failed to rotate access logs', { err })
     }
   }
 }

package/src/modules/audit_logs/services/actionLogService.ts

@@ -20,6 +20,9 @@ import {
   parseDecryptedFieldValue,
 } from '@open-mercato/shared/lib/encryption/tenantDataEncryptionService'
 import { toOptionalString } from '@open-mercato/shared/lib/string/coerce'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('audit_logs').child({ component: 'action-log-service' })
 
 let validationWarningLogged = false
 let runtimeValidationAvailable: boolean | null = null
@@ -174,7 +177,7 @@ export class ActionLogService {
     } catch (err) {
       if (!decryptionWarningLogged) {
         decryptionWarningLogged = true
-        console.warn('[audit_logs] failed to decrypt action log entry', err)
+        logger.warn('Failed to decrypt action log entry', { err })
       }
       return entry
     }
@@ -211,7 +214,7 @@ export class ActionLogService {
       } catch (err) {
         if (!isZodRuntimeMissing(err) && !validationWarningLogged) {
           validationWarningLogged = true
-          console.warn('[audit_logs] falling back to permissive action log payload parser', err)
+          logger.warn('Falling back to permissive action log payload parser', { err })
         }
         if (isZodRuntimeMissing(err)) runtimeValidationAvailable = false
         data = this.normalizeInput(input)

package/src/modules/auth/api/profile/route.ts

@@ -12,6 +12,9 @@ import { User } from '@open-mercato/core/modules/auth/data/entities'
 import type { EntityManager } from '@mikro-orm/postgresql'
 import { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'
 import { buildPasswordSchema } from '@open-mercato/shared/lib/auth/passwordPolicy'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('auth').child({ component: 'profile' })
 
 const profileResponseSchema = z.object({
   email: z.string().email(),
@@ -105,7 +108,7 @@ export async function GET(req: Request) {
     }
     return NextResponse.json({ email: String(user.email), roles: auth.roles ?? [] })
   } catch (err) {
-    console.error('auth.profile.load failed', err)
+    logger.error('Profile load failed', { err })
     return NextResponse.json({ error: translate('auth.profile.form.errors.load', 'Failed to load profile.') }, { status: 400 })
   }
 }
@@ -193,7 +196,7 @@ export async function PUT(req: Request) {
     if (isCrudHttpError(err)) {
       return NextResponse.json(err.body, { status: err.status })
     }
-    console.error('auth.profile.update failed', err)
+    logger.error('Profile update failed', { err })
     return NextResponse.json({ error: translate('auth.profile.form.errors.save', 'Failed to update profile.') }, { status: 400 })
   }
 }

package/src/modules/auth/api/reset/confirm.ts

@@ -10,6 +10,9 @@ import { z } from 'zod'
 import { rateLimitErrorSchema } from '@open-mercato/shared/lib/ratelimit/helpers'
 import { readEndpointRateLimitConfig } from '@open-mercato/shared/lib/ratelimit/config'
 import { checkAuthRateLimit } from '@open-mercato/core/modules/auth/lib/rateLimitCheck'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('auth').child({ component: 'reset-confirm' })
 
 const resetConfirmRateLimitConfig = readEndpointRateLimitConfig('RESET_CONFIRM', {
   points: 5, duration: 300, keyPrefix: 'reset-confirm',
@@ -48,7 +51,7 @@ export async function POST(req: Request) {
       }
     }
   } catch (err) {
-    console.error('[auth.reset.confirm] Failed to create notification:', err)
+    logger.error('Failed to create notification', { err })
   }
   return NextResponse.json({ ok: true, redirect: '/login' })
 }

package/src/modules/auth/api/reset.ts

@@ -14,6 +14,9 @@ import { rateLimitErrorSchema } from '@open-mercato/shared/lib/ratelimit/helpers
 import { readEndpointRateLimitConfig } from '@open-mercato/shared/lib/ratelimit/config'
 import { checkAuthRateLimit } from '@open-mercato/core/modules/auth/lib/rateLimitCheck'
 import { mapSecurityEmailUrlError, toSecurityEmailUrl } from '@open-mercato/shared/lib/url'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('auth').child({ component: 'reset' })
 
 const resetRateLimitConfig = readEndpointRateLimitConfig('RESET', {
   points: 3, duration: 60, blockDuration: 60, keyPrefix: 'reset',
@@ -68,7 +71,7 @@ export async function POST(req: Request) {
   try {
     await sendEmail({ to: user.email, subject, react: ResetPasswordEmail({ resetUrl, copy }) })
   } catch (err) {
-    console.error('[auth.reset] Failed to send reset email:', err)
+    logger.error('Failed to send reset email', { err })
   }
   try {
     const tenantId = user.tenantId ? String(user.tenantId) : null
@@ -88,7 +91,7 @@ export async function POST(req: Request) {
       }
     }
   } catch (err) {
-    console.error('[auth.reset] Failed to create notification:', err)
+    logger.error('Failed to create notification', { err })
   }
   return NextResponse.json({ ok: true })
 }

package/src/modules/auth/api/roles/route.ts

@@ -17,6 +17,9 @@ import { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern
 import { assertActorCanModifySuperAdminRoleTarget } from '@open-mercato/core/modules/auth/lib/grantChecks'
 import { enforceRoleTenantAccess } from '@open-mercato/core/modules/auth/lib/roleTenantGuard'
 import type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('auth').child({ component: 'roles' })
 
 const querySchema = z.object({
   id: z.string().uuid().optional(),
@@ -137,7 +140,7 @@ export async function GET(req: Request) {
       isSuperAdmin = !!acl?.isSuperAdmin
     }
   } catch (err) {
-    console.error('roles: failed to resolve rbac', err)
+    logger.error('Failed to resolve rbac', { err })
   }
   const actorTenantId = auth.tenantId ? String(auth.tenantId) : null
   if (!isSuperAdmin && !actorTenantId) {

package/src/modules/auth/api/sidebar/variants/route.ts

@@ -15,6 +15,9 @@ import {
   sidebarVariantRecordSchema,
 } from '../../../data/validators'
 import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('auth').child({ component: 'sidebar-variants' })
 
 export const metadata = {
   GET: { requireAuth: true },
@@ -125,8 +128,7 @@ export async function POST(req: Request) {
         { status: 409 },
       )
     }
-    // eslint-disable-next-line no-console
-    console.error('[sidebar-variants POST] failed', err)
+    logger.error('Sidebar variants update failed', { err })
     return NextResponse.json({ error: message }, { status: 500 })
   }
 }

package/src/modules/auth/api/users/resend-invite/route.ts

@@ -19,6 +19,9 @@ import { assertActorCanAccessUserTarget } from '@open-mercato/core/modules/auth/
 import type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'
 import { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'
 import type { EntityManager } from '@mikro-orm/postgresql'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('auth').child({ component: 'users-resend-invite' })
 
 const resendInviteRateLimitConfig = readEndpointRateLimitConfig('RESEND_INVITE', {
   points: 3, duration: 300, blockDuration: 300, keyPrefix: 'resend-invite',
@@ -80,7 +83,7 @@ export async function POST(req: Request) {
       isSuperAdmin = !!acl?.isSuperAdmin
     }
   } catch (err) {
-    console.error('[auth.users.resend-invite] Failed to resolve rbac:', err)
+    logger.error('Failed to resolve rbac', { err })
   }
 
   if (auth.sub) {
@@ -167,7 +170,7 @@ export async function POST(req: Request) {
   try {
     await sendEmail({ to: user.email, subject, react: InviteUserEmail({ inviteUrl, copy }) })
   } catch (err) {
-    console.error('[auth.users.resend-invite] Failed to send invitation email:', err)
+    logger.error('Failed to send invitation email', { err })
     emailSent = false
   }
 

package/src/modules/auth/api/users/route.ts

@@ -30,6 +30,9 @@ import {
   getSelectedTenantFromRequest,
   resolveOrganizationScopeForRequest,
 } from '@open-mercato/core/modules/directory/utils/organizationScope'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('auth').child({ component: 'users' })
 
 const querySchema = z.object({
   id: z.string().uuid().optional(),
@@ -190,7 +193,7 @@ export async function GET(req: Request) {
       isSuperAdmin = isSuperAdmin || !!acl?.isSuperAdmin
     }
   } catch (err) {
-    console.error('users: failed to resolve rbac', err)
+    logger.error('Failed to resolve rbac', { err })
   }
   const { id, page, pageSize, search, name, organizationId, roleIds } = parsed.data
   const filters: any[] = [{ deletedAt: null }]

package/src/modules/auth/backend/auth/profile/page.tsx

@@ -12,6 +12,9 @@ import { LoadingMessage, ErrorMessage } from '@open-mercato/ui/backend/detail'
 import { Button } from '@open-mercato/ui/primitives/button'
 import { useT } from '@open-mercato/shared/lib/i18n/context'
 import { buildPasswordSchema, formatPasswordRequirements, getPasswordPolicy } from '@open-mercato/shared/lib/auth/passwordPolicy'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('auth').child({ component: 'profile-page' })
 
 type ProfileResponse = {
   email?: string | null
@@ -59,7 +62,7 @@ export default function AuthProfilePage() {
         const resolvedEmail = typeof result?.email === 'string' ? result.email : ''
         if (!cancelled) setEmail(resolvedEmail)
       } catch (err) {
-        console.error('Failed to load auth profile', err)
+        logger.error('Failed to load auth profile', { err })
         if (!cancelled) setError(t('auth.profile.form.errors.load', 'Failed to load profile.'))
       } finally {
         if (!cancelled) setLoading(false)

package/src/modules/auth/backend/profile/change-password/page.tsx

@@ -11,6 +11,9 @@ import { LoadingMessage, ErrorMessage } from '@open-mercato/ui/backend/detail'
 import { Button } from '@open-mercato/ui/primitives/button'
 import { useT } from '@open-mercato/shared/lib/i18n/context'
 import { buildPasswordSchema, formatPasswordRequirements, getPasswordPolicy } from '@open-mercato/shared/lib/auth/passwordPolicy'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('auth').child({ component: 'change-password-page' })
 
 type ProfileResponse = {
   email?: string | null
@@ -58,7 +61,7 @@ export default function ProfileChangePasswordPage() {
         const resolvedEmail = typeof result?.email === 'string' ? result.email : ''
         if (!cancelled) setEmail(resolvedEmail)
       } catch (err) {
-        console.error('Failed to load auth profile', err)
+        logger.error('Failed to load auth profile', { err })
         if (!cancelled) setError(t('auth.profile.form.errors.load', 'Failed to load profile.'))
       } finally {
         if (!cancelled) setLoading(false)

package/src/modules/auth/backend/users/[id]/edit/page.tsx

@@ -22,6 +22,9 @@ import { UserConsentsPanel } from '@open-mercato/core/modules/auth/components/Us
 import { RecordNotFoundState, ErrorMessage } from '@open-mercato/ui/backend/detail'
 import { buildRecordInjectionContext, useSetCurrentRecordInjectionContext } from '@open-mercato/ui/backend/injection/recordContext'
 import { normalizeDisplayNameInput } from '@open-mercato/core/modules/auth/lib/displayName'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('auth').child({ component: 'users-edit-page' })
 
 type EditUserFormValues = {
   email: string
@@ -160,7 +163,7 @@ export default function EditUserPage({ params }: { params?: { id?: string } }) {
         }
       }
     } catch (err) {
-      console.error('Failed to resend invite:', err)
+      logger.error('Failed to resend invite', { err })
       flash(tRef.current('auth.users.form.errors.inviteResend', 'Failed to send invitation email'), 'error')
     } finally {
       setResendingInvite(false)
@@ -277,7 +280,7 @@ export default function EditUserPage({ params }: { params?: { id?: string } }) {
           }
         }
       } catch (err) {
-        console.error('Failed to load user:', err)
+        logger.error('Failed to load user', { err })
         if (!cancelled) setError(tRef.current('auth.users.form.errors.load', 'Failed to load user data'))
         if (!cancelled) setCustomFieldValues({})
         if (!cancelled) setActorResolved(true)
@@ -295,7 +298,7 @@ export default function EditUserPage({ params }: { params?: { id?: string } }) {
         )
         if (!cancelled) setCanEditOrgs(Boolean(featureCheck.result?.ok))
       } catch (err) {
-        console.error('Failed to check features:', err)
+        logger.error('Failed to check features', { err })
       }
     }
     load()

package/src/modules/auth/backend/users/create/page.tsx

@@ -15,6 +15,9 @@ import { RadioField } from '@open-mercato/ui/primitives/radio-field'
 import { useT } from '@open-mercato/shared/lib/i18n/context'
 import { formatPasswordRequirements, getPasswordPolicy } from '@open-mercato/shared/lib/auth/passwordPolicy'
 import { normalizeDisplayNameInput } from '@open-mercato/core/modules/auth/lib/displayName'
+import { createLogger } from '@open-mercato/shared/lib/logger'
+
+const logger = createLogger('auth').child({ component: 'users-create-page' })
 
 type CreateUserFormValues = {
   email: string
@@ -134,7 +137,7 @@ export default function CreateUserPage() {
           setWidgetCatalog(normalized)
         }
       } catch (err) {
-        console.error('Failed to load dashboard widget catalog', err)
+        logger.error('Failed to load dashboard widget catalog', { err })
         if (!cancelled) {
           setWidgetError(t(
             'auth.users.widgets.errors.load',
@@ -156,7 +159,7 @@ export default function CreateUserPage() {
         const { ok, result } = await apiCall<UserListResponse>('/api/auth/users?page=1&pageSize=1')
         if (!cancelled && ok) setActorIsSuperAdmin(Boolean(result?.isSuperAdmin))
       } catch (err) {
-        console.error('Failed to resolve actor super admin flag', err)
+        logger.error('Failed to resolve actor super admin flag', { err })
       } finally {
         if (!cancelled) setActorResolved(true)
       }

package/src/modules/auth/cli.ts

@@ -1,5 +1,7 @@
 import type { ModuleCli } from '@open-mercato/shared/modules/registry'
 import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
+import { OM_LOG_LEVEL_ENV, resetLogLevelCache } from '@open-mercato/shared/lib/logger'
+import { resetServerLoggerCache } from '@open-mercato/shared/lib/logger'
 import { hash } from 'bcryptjs'
 import type { EntityManager } from '@mikro-orm/postgresql'
 import { User, Role, UserRole } from '@open-mercato/core/modules/auth/data/entities'
@@ -475,9 +477,17 @@ const setupApp: ModuleCli = {
       const originalInfo = console.info
       console.log = () => undefined
       console.info = () => undefined
+      const originalLogLevel = process.env[OM_LOG_LEVEL_ENV]
+      process.env[OM_LOG_LEVEL_ENV] = 'error'
+      resetLogLevelCache()
+      resetServerLoggerCache()
       restoreConsole = () => {
         console.log = originalLog
         console.info = originalInfo
+        if (originalLogLevel === undefined) delete process.env[OM_LOG_LEVEL_ENV]
+        else process.env[OM_LOG_LEVEL_ENV] = originalLogLevel
+        resetLogLevelCache()
+        resetServerLoggerCache()
       }
     }
     const container = await createRequestContainer()