@open-mercato/core 0.6.6-develop.6551.1.1511bfa890 → 0.6.6

package/dist/modules/payment_gateways/lib/session-idempotency.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/payment_gateways/lib/session-idempotency.ts"],
-  "sourcesContent": ["import { createHash, randomUUID } from 'node:crypto'\nimport { UniqueConstraintViolationException } from '@mikro-orm/core'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { GatewaySessionInitialization } from '../data/entities'\n\ntype Scope = { organizationId: string; tenantId: string }\n\nexport type OwnedPaymentSessionInitialization = {\n  id: string\n  claimToken: string\n}\n\nexport function buildPaymentSessionOperationKey(input: {\n  idempotencyKey: string\n  paymentId: string\n  providerKey: string\n  scope: Scope\n}): string {\n  const digest = createHash('sha256')\n    .update(JSON.stringify([\n      input.scope.tenantId,\n      input.scope.organizationId,\n      input.providerKey,\n      input.paymentId,\n      input.idempotencyKey,\n    ]))\n    .digest('hex')\n  return `om-payment-session:${digest}`\n}\n\nexport async function findPaymentSessionInitialization(\n  em: EntityManager,\n  operationKey: string,\n  providerKey: string,\n  scope: Scope,\n): Promise<GatewaySessionInitialization | null> {\n  return findOneWithDecryption(\n    em.fork(),\n    GatewaySessionInitialization,\n    {\n      operationKey,\n      providerKey,\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n    },\n    undefined,\n    scope,\n  )\n}\n\nexport async function claimPaymentSessionInitialization(\n  em: EntityManager,\n  operationKey: string,\n  providerKey: string,\n  scope: Scope,\n  claimedAt: Date,\n): Promise<OwnedPaymentSessionInitialization | null> {\n  const claimEm = em.fork()\n  const claimToken = randomUUID()\n  const record = claimEm.create(GatewaySessionInitialization, {\n    operationKey,\n    providerKey,\n    claimToken,\n    claimedAt,\n    gatewayTransactionId: null,\n    organizationId: scope.organizationId,\n    tenantId: scope.tenantId,\n  })\n  try {\n    await claimEm.persist(record).flush()\n    return { id: record.id, claimToken }\n  } catch (error: unknown) {\n    if (error instanceof UniqueConstraintViolationException) return null\n    throw error\n  }\n}\n\nexport async function reclaimPaymentSessionInitialization(\n  em: EntityManager,\n  claim: GatewaySessionInitialization,\n  scope: Scope,\n  claimedAt: Date,\n  staleBefore: Date,\n): Promise<OwnedPaymentSessionInitialization | null> {\n  const claimToken = randomUUID()\n  const claimedRows = await em.fork().nativeUpdate(\n    GatewaySessionInitialization,\n    {\n      id: claim.id,\n      operationKey: claim.operationKey,\n      providerKey: claim.providerKey,\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n      gatewayTransactionId: null,\n      $or: [\n        { claimToken: null },\n        { claimedAt: { $lt: staleBefore } },\n      ],\n    },\n    { claimToken, claimedAt, updatedAt: claimedAt },\n  )\n  return claimedRows > 0 ? { id: claim.id, claimToken } : null\n}\n\nexport async function releasePaymentSessionInitialization(\n  em: EntityManager,\n  ownership: OwnedPaymentSessionInitialization,\n  scope: Scope,\n): Promise<void> {\n  await em.fork().nativeUpdate(\n    GatewaySessionInitialization,\n    {\n      id: ownership.id,\n      claimToken: ownership.claimToken,\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n      gatewayTransactionId: null,\n    },\n    { claimToken: null, claimedAt: null, updatedAt: new Date() },\n  )\n}\n\nexport async function refreshPaymentSessionInitialization(\n  em: EntityManager,\n  ownership: OwnedPaymentSessionInitialization,\n  scope: Scope,\n  claimedAt: Date,\n): Promise<boolean> {\n  const refreshedRows = await em.fork().nativeUpdate(\n    GatewaySessionInitialization,\n    {\n      id: ownership.id,\n      claimToken: ownership.claimToken,\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n      gatewayTransactionId: null,\n    },\n    { claimedAt, updatedAt: claimedAt },\n  )\n  return refreshedRows > 0\n}\n"],
-  "mappings": "AAAA,SAAS,YAAY,kBAAkB;AACvC,SAAS,0CAA0C;AAEnD,SAAS,6BAA6B;AACtC,SAAS,oCAAoC;AAStC,SAAS,gCAAgC,OAKrC;AACT,QAAM,SAAS,WAAW,QAAQ,EAC/B,OAAO,KAAK,UAAU;AAAA,IACrB,MAAM,MAAM;AAAA,IACZ,MAAM,MAAM;AAAA,IACZ,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,EACR,CAAC,CAAC,EACD,OAAO,KAAK;AACf,SAAO,sBAAsB,MAAM;AACrC;AAEA,eAAsB,iCACpB,IACA,cACA,aACA,OAC8C;AAC9C,SAAO;AAAA,IACL,GAAG,KAAK;AAAA,IACR;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,kCACpB,IACA,cACA,aACA,OACA,WACmD;AACnD,QAAM,UAAU,GAAG,KAAK;AACxB,QAAM,aAAa,WAAW;AAC9B,QAAM,SAAS,QAAQ,OAAO,8BAA8B;AAAA,IAC1D;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,sBAAsB;AAAA,IACtB,gBAAgB,MAAM;AAAA,IACtB,UAAU,MAAM;AAAA,EAClB,CAAC;AACD,MAAI;AACF,UAAM,QAAQ,QAAQ,MAAM,EAAE,MAAM;AACpC,WAAO,EAAE,IAAI,OAAO,IAAI,WAAW;AAAA,EACrC,SAAS,OAAgB;AACvB,QAAI,iBAAiB,mCAAoC,QAAO;AAChE,UAAM;AAAA,EACR;AACF;AAEA,eAAsB,oCACpB,IACA,OACA,OACA,WACA,aACmD;AACnD,QAAM,aAAa,WAAW;AAC9B,QAAM,cAAc,MAAM,GAAG,KAAK,EAAE;AAAA,IAClC;AAAA,IACA;AAAA,MACE,IAAI,MAAM;AAAA,MACV,cAAc,MAAM;AAAA,MACpB,aAAa,MAAM;AAAA,MACnB,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,sBAAsB;AAAA,MACtB,KAAK;AAAA,QACH,EAAE,YAAY,KAAK;AAAA,QACnB,EAAE,WAAW,EAAE,KAAK,YAAY,EAAE;AAAA,MACpC;AAAA,IACF;AAAA,IACA,EAAE,YAAY,WAAW,WAAW,UAAU;AAAA,EAChD;AACA,SAAO,cAAc,IAAI,EAAE,IAAI,MAAM,IAAI,WAAW,IAAI;AAC1D;AAEA,eAAsB,oCACpB,IACA,WACA,OACe;AACf,QAAM,GAAG,KAAK,EAAE;AAAA,IACd;AAAA,IACA;AAAA,MACE,IAAI,UAAU;AAAA,MACd,YAAY,UAAU;AAAA,MACtB,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,sBAAsB;AAAA,IACxB;AAAA,IACA,EAAE,YAAY,MAAM,WAAW,MAAM,WAAW,oBAAI,KAAK,EAAE;AAAA,EAC7D;AACF;AAEA,eAAsB,oCACpB,IACA,WACA,OACA,WACkB;AAClB,QAAM,gBAAgB,MAAM,GAAG,KAAK,EAAE;AAAA,IACpC;AAAA,IACA;AAAA,MACE,IAAI,UAAU;AAAA,MACd,YAAY,UAAU;AAAA,MACtB,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,sBAAsB;AAAA,IACxB;AAAA,IACA,EAAE,WAAW,WAAW,UAAU;AAAA,EACpC;AACA,SAAO,gBAAgB;AACzB;",
-  "names": []
-}

package/dist/modules/payment_gateways/migrations/Migration20260709220938_payment_gateways.js

@@ -1,11 +0,0 @@
-import { Migration } from "@mikro-orm/migrations";
-class Migration20260709220938_payment_gateways extends Migration {
-  up() {
-    this.addSql(`create table "gateway_session_initializations" ("id" uuid not null default gen_random_uuid(), "operation_key" text not null, "provider_key" text not null, "claim_token" uuid null, "claimed_at" timestamptz null, "gateway_transaction_id" uuid null, "organization_id" uuid not null, "tenant_id" uuid not null, "created_at" timestamptz not null, "updated_at" timestamptz not null, primary key ("id"));`);
-    this.addSql(`alter table "gateway_session_initializations" add constraint "gateway_session_initializations_scope_operation_unique" unique ("operation_key", "provider_key", "organization_id", "tenant_id");`);
-  }
-}
-export {
-  Migration20260709220938_payment_gateways
-};
-//# sourceMappingURL=Migration20260709220938_payment_gateways.js.map

package/dist/modules/payment_gateways/migrations/Migration20260709220938_payment_gateways.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/payment_gateways/migrations/Migration20260709220938_payment_gateways.ts"],
-  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\nexport class Migration20260709220938_payment_gateways extends Migration {\n\n  override up(): void | Promise<void> {\n    this.addSql(`create table \"gateway_session_initializations\" (\"id\" uuid not null default gen_random_uuid(), \"operation_key\" text not null, \"provider_key\" text not null, \"claim_token\" uuid null, \"claimed_at\" timestamptz null, \"gateway_transaction_id\" uuid null, \"organization_id\" uuid not null, \"tenant_id\" uuid not null, \"created_at\" timestamptz not null, \"updated_at\" timestamptz not null, primary key (\"id\"));`);\n    this.addSql(`alter table \"gateway_session_initializations\" add constraint \"gateway_session_initializations_scope_operation_unique\" unique (\"operation_key\", \"provider_key\", \"organization_id\", \"tenant_id\");`);\n  }\n\n}\n"],
-  "mappings": "AAAA,SAAS,iBAAiB;AAEnB,MAAM,iDAAiD,UAAU;AAAA,EAE7D,KAA2B;AAClC,SAAK,OAAO,+YAA+Y;AAC3Z,SAAK,OAAO,iMAAiM;AAAA,EAC/M;AAEF;",
-  "names": []
-}

package/dist/modules/sales/components/SalesChannelsDisabledNotice.js

@@ -1,15 +0,0 @@
-"use client";
-import { jsx } from "react/jsx-runtime";
-import { Page, PageBody } from "@open-mercato/ui/backend/Page";
-import { useT } from "@open-mercato/shared/lib/i18n/context";
-function SalesChannelsDisabledNotice() {
-  const t = useT();
-  return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx("div", { className: "rounded-lg border bg-muted/50 p-6 text-sm text-muted-foreground", children: t(
-    "sales.channels.disabledNotice",
-    'Sales channels are disabled for this tenant. Enable the "Sales Channels" feature toggle to manage them.'
-  ) }) }) });
-}
-export {
-  SalesChannelsDisabledNotice
-};
-//# sourceMappingURL=SalesChannelsDisabledNotice.js.map

package/dist/modules/sales/components/SalesChannelsDisabledNotice.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/sales/components/SalesChannelsDisabledNotice.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\n\nexport function SalesChannelsDisabledNotice() {\n  const t = useT()\n  return (\n    <Page>\n      <PageBody>\n        <div className=\"rounded-lg border bg-muted/50 p-6 text-sm text-muted-foreground\">\n          {t(\n            'sales.channels.disabledNotice',\n            'Sales channels are disabled for this tenant. Enable the \"Sales Channels\" feature toggle to manage them.',\n          )}\n        </div>\n      </PageBody>\n    </Page>\n  )\n}\n"],
-  "mappings": ";AAWQ;AARR,SAAS,MAAM,gBAAgB;AAC/B,SAAS,YAAY;AAEd,SAAS,8BAA8B;AAC5C,QAAM,IAAI,KAAK;AACf,SACE,oBAAC,QACC,8BAAC,YACC,8BAAC,SAAI,WAAU,mEACZ;AAAA,IACC;AAAA,IACA;AAAA,EACF,GACF,GACF,GACF;AAEJ;",
-  "names": []
-}

package/dist/modules/sales/components/useSalesChannelsEnabled.js

@@ -1,44 +0,0 @@
-"use client";
-import * as React from "react";
-import { apiCall } from "@open-mercato/ui/backend/utils/apiCall";
-import { SALES_CHANNELS_TOGGLE_ID } from "../lib/salesChannelsToggleId.js";
-const CACHE_TTL_MS = 6e4;
-async function fetchSalesChannelsEnabled() {
-  try {
-    const call = await apiCall(
-      `/api/feature_toggles/check/boolean?identifier=${SALES_CHANNELS_TOGGLE_ID}`
-    );
-    if (!call.ok) return true;
-    return !(call.result?.ok === true && call.result.value === false);
-  } catch {
-    return true;
-  }
-}
-let cache = null;
-function getSalesChannelsEnabled() {
-  const now = Date.now();
-  if (!cache || now - cache.at > CACHE_TTL_MS) {
-    cache = { value: fetchSalesChannelsEnabled(), at: now };
-  }
-  return cache.value;
-}
-function useSalesChannelsEnabled() {
-  const [resolved, setResolved] = React.useState(null);
-  React.useEffect(() => {
-    let active = true;
-    getSalesChannelsEnabled().then((value) => {
-      if (active) setResolved(value);
-    }).catch(() => {
-      if (active) setResolved(true);
-    });
-    return () => {
-      active = false;
-    };
-  }, []);
-  return { enabled: resolved !== false, isLoading: resolved === null };
-}
-export {
-  SALES_CHANNELS_TOGGLE_ID,
-  useSalesChannelsEnabled
-};
-//# sourceMappingURL=useSalesChannelsEnabled.js.map

package/dist/modules/sales/components/useSalesChannelsEnabled.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/sales/components/useSalesChannelsEnabled.ts"],
-  "sourcesContent": ["\"use client\"\n\nimport * as React from 'react'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { SALES_CHANNELS_TOGGLE_ID } from '../lib/salesChannelsToggleId'\n\nexport { SALES_CHANNELS_TOGGLE_ID }\n\nconst CACHE_TTL_MS = 60_000\n\ntype FeatureToggleCheckResponse = {\n  ok?: boolean\n  value?: unknown\n}\n\n// Fails open: channels stay visible unless the toggle explicitly resolves to\n// false. A missing toggle definition (404) or an absent feature_toggles module\n// must not hide sales channel UI.\nasync function fetchSalesChannelsEnabled(): Promise<boolean> {\n  try {\n    const call = await apiCall<FeatureToggleCheckResponse>(\n      `/api/feature_toggles/check/boolean?identifier=${SALES_CHANNELS_TOGGLE_ID}`,\n    )\n    if (!call.ok) return true\n    return !(call.result?.ok === true && call.result.value === false)\n  } catch {\n    return true\n  }\n}\n\nlet cache: { value: Promise<boolean>; at: number } | null = null\n\nfunction getSalesChannelsEnabled(): Promise<boolean> {\n  const now = Date.now()\n  if (!cache || now - cache.at > CACHE_TTL_MS) {\n    cache = { value: fetchSalesChannelsEnabled(), at: now }\n  }\n  return cache.value\n}\n\nexport function useSalesChannelsEnabled(): { enabled: boolean; isLoading: boolean } {\n  const [resolved, setResolved] = React.useState<boolean | null>(null)\n\n  React.useEffect(() => {\n    let active = true\n    getSalesChannelsEnabled()\n      .then((value) => {\n        if (active) setResolved(value)\n      })\n      .catch(() => {\n        if (active) setResolved(true)\n      })\n    return () => {\n      active = false\n    }\n  }, [])\n\n  return { enabled: resolved !== false, isLoading: resolved === null }\n}\n"],
-  "mappings": ";AAEA,YAAY,WAAW;AACvB,SAAS,eAAe;AACxB,SAAS,gCAAgC;AAIzC,MAAM,eAAe;AAUrB,eAAe,4BAA8C;AAC3D,MAAI;AACF,UAAM,OAAO,MAAM;AAAA,MACjB,iDAAiD,wBAAwB;AAAA,IAC3E;AACA,QAAI,CAAC,KAAK,GAAI,QAAO;AACrB,WAAO,EAAE,KAAK,QAAQ,OAAO,QAAQ,KAAK,OAAO,UAAU;AAAA,EAC7D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,IAAI,QAAwD;AAE5D,SAAS,0BAA4C;AACnD,QAAM,MAAM,KAAK,IAAI;AACrB,MAAI,CAAC,SAAS,MAAM,MAAM,KAAK,cAAc;AAC3C,YAAQ,EAAE,OAAO,0BAA0B,GAAG,IAAI,IAAI;AAAA,EACxD;AACA,SAAO,MAAM;AACf;AAEO,SAAS,0BAAoE;AAClF,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,SAAyB,IAAI;AAEnE,QAAM,UAAU,MAAM;AACpB,QAAI,SAAS;AACb,4BAAwB,EACrB,KAAK,CAAC,UAAU;AACf,UAAI,OAAQ,aAAY,KAAK;AAAA,IAC/B,CAAC,EACA,MAAM,MAAM;AACX,UAAI,OAAQ,aAAY,IAAI;AAAA,IAC9B,CAAC;AACH,WAAO,MAAM;AACX,eAAS;AAAA,IACX;AAAA,EACF,GAAG,CAAC,CAAC;AAEL,SAAO,EAAE,SAAS,aAAa,OAAO,WAAW,aAAa,KAAK;AACrE;",
-  "names": []
-}

package/dist/modules/sales/lib/salesChannelsToggle.js

@@ -1,18 +0,0 @@
-import { SALES_CHANNELS_TOGGLE_ID } from "./salesChannelsToggleId.js";
-async function isSalesChannelsEnabledForTenant(tenantId) {
-  if (!tenantId) return true;
-  try {
-    const { createRequestContainer } = await import("@open-mercato/shared/lib/di/container");
-    const container = await createRequestContainer();
-    const service = container.resolve("featureTogglesService");
-    const result = await service.getBoolConfig(SALES_CHANNELS_TOGGLE_ID, tenantId);
-    return !(result.ok === true && result.value === false);
-  } catch {
-    return true;
-  }
-}
-export {
-  SALES_CHANNELS_TOGGLE_ID,
-  isSalesChannelsEnabledForTenant
-};
-//# sourceMappingURL=salesChannelsToggle.js.map

package/dist/modules/sales/lib/salesChannelsToggle.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/sales/lib/salesChannelsToggle.ts"],
-  "sourcesContent": ["import { SALES_CHANNELS_TOGGLE_ID } from './salesChannelsToggleId'\n\nexport { SALES_CHANNELS_TOGGLE_ID }\n\ntype BoolConfigResult = { ok: boolean; value?: unknown }\n\ntype FeatureTogglesServiceLike = {\n  getBoolConfig: (identifier: string, tenantId: string) => Promise<BoolConfigResult>\n}\n\n// Server-side counterpart of useSalesChannelsEnabled with the same fail-open\n// contract: channels stay enabled unless the toggle explicitly resolves to\n// false. The DI container and feature_toggles service are optional peers, so\n// they are loaded lazily and any failure keeps channels visible.\nexport async function isSalesChannelsEnabledForTenant(tenantId: string | null | undefined): Promise<boolean> {\n  if (!tenantId) return true\n  try {\n    const { createRequestContainer } = await import('@open-mercato/shared/lib/di/container')\n    const container = await createRequestContainer()\n    const service = container.resolve('featureTogglesService') as FeatureTogglesServiceLike\n    const result = await service.getBoolConfig(SALES_CHANNELS_TOGGLE_ID, tenantId)\n    return !(result.ok === true && result.value === false)\n  } catch {\n    return true\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,gCAAgC;AAczC,eAAsB,gCAAgC,UAAuD;AAC3G,MAAI,CAAC,SAAU,QAAO;AACtB,MAAI;AACF,UAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,uCAAuC;AACvF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,UAAU,UAAU,QAAQ,uBAAuB;AACzD,UAAM,SAAS,MAAM,QAAQ,cAAc,0BAA0B,QAAQ;AAC7E,WAAO,EAAE,OAAO,OAAO,QAAQ,OAAO,UAAU;AAAA,EAClD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;",
-  "names": []
-}

package/dist/modules/sales/lib/salesChannelsToggleId.js

@@ -1,5 +0,0 @@
-const SALES_CHANNELS_TOGGLE_ID = "sales_channels_enabled";
-export {
-  SALES_CHANNELS_TOGGLE_ID
-};
-//# sourceMappingURL=salesChannelsToggleId.js.map

package/dist/modules/sales/lib/salesChannelsToggleId.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/sales/lib/salesChannelsToggleId.ts"],
-  "sourcesContent": ["export const SALES_CHANNELS_TOGGLE_ID = 'sales_channels_enabled'\n"],
-  "mappings": "AAAO,MAAM,2BAA2B;",
-  "names": []
-}

package/generated/entities/gateway_session_initialization/index.ts

@@ -1,10 +0,0 @@
-export const id = "id";
-export const operation_key = "operation_key";
-export const provider_key = "provider_key";
-export const claim_token = "claim_token";
-export const claimed_at = "claimed_at";
-export const gateway_transaction_id = "gateway_transaction_id";
-export const organization_id = "organization_id";
-export const tenant_id = "tenant_id";
-export const created_at = "created_at";
-export const updated_at = "updated_at";

package/src/modules/attachments/lib/reconcileOrganization.ts

@@ -1,188 +0,0 @@
-import type { EntityManager } from '@mikro-orm/postgresql'
-import { createLogger } from '@open-mercato/shared/lib/logger'
-import type { QueryEngine } from '@open-mercato/shared/lib/query/types'
-import { Attachment } from '../data/entities'
-
-const logger = createLogger('attachments').child({ component: 'reconcileOrganization' })
-
-/**
- * Virtual entity id for library attachments — these are not attached to a
- * parent record that owns an organization, so there is nothing to reconcile
- * against. They are counted as skipped rather than unresolved.
- */
-const LIBRARY_ENTITY_ID = 'attachments:library'
-
-const DEFAULT_BATCH_SIZE = 500
-
-export type AttachmentOrgReconcileEntityStat = {
-  scanned: number
-  updated: number
-  unresolved: number
-}
-
-export type AttachmentOrgReconcileReport = {
-  scanned: number
-  updated: number
-  unresolved: number
-  skippedVirtual: number
-  byEntity: Record<string, AttachmentOrgReconcileEntityStat>
-}
-
-type AttachmentScanRow = {
-  id: string
-  entity_id: string | null
-  record_id: string | null
-  organization_id: string | null
-}
-
-function readParentOrganizationId(record: Record<string, unknown>): string | null {
-  const raw = record['organization_id'] ?? record['organizationId']
-  if (typeof raw === 'string' && raw.trim().length) return raw.trim()
-  return null
-}
-
-function ensureBucket(
-  report: AttachmentOrgReconcileReport,
-  entityId: string,
-): AttachmentOrgReconcileEntityStat {
-  const existing = report.byEntity[entityId]
-  if (existing) return existing
-  const bucket: AttachmentOrgReconcileEntityStat = { scanned: 0, updated: 0, unresolved: 0 }
-  report.byEntity[entityId] = bucket
-  return bucket
-}
-
-/**
- * Reconcile the `organization_id` of existing attachments to the organization
- * of the record they are attached to.
- *
- * Background (#3765): before the upload route became selected-organization
- * aware, a multi-org admin who switched the header organization uploaded files
- * that were silently stored under their *home* organization instead of the
- * selected one (the organization of the parent record). Those rows are now
- * invisible to org-scoped reads and stay orphaned. This heals them forward.
- *
- * The parent record's organization is the ground truth: an attachment is not
- * distinguishable from a legitimately home-org one by looking at the attachment
- * alone. Parent organizations are resolved generically through the Query Engine
- * by `entityId` (works for both base and custom entities, tenant-scoped and
- * organization-agnostic so the parent's real org is returned regardless of
- * which org the caller sits in) — the same mechanism the attachments module
- * already uses to enrich assignment details.
- *
- * The reconciliation is:
- * - idempotent — rows already matching their parent are left untouched;
- * - conservative — when the parent org cannot be resolved (unregistered
- *   entity id, hard-deleted parent, parent without an org column) the row is
- *   counted as `unresolved` and left as-is rather than guessed at;
- * - tenant-scoped — it reconciles every attachment in the tenant across all
- *   organizations (the whole point is moving rows between orgs).
- *
- * Writes go through the passed `EntityManager` (which the caller runs inside a
- * transaction) so the whole reconciliation commits atomically.
- */
-export async function reconcileAttachmentOrganizations(opts: {
-  em: EntityManager
-  queryEngine: QueryEngine
-  tenantId: string
-  batchSize?: number
-}): Promise<AttachmentOrgReconcileReport> {
-  const { em, queryEngine, tenantId } = opts
-  const batchSize = opts.batchSize && opts.batchSize > 0 ? opts.batchSize : DEFAULT_BATCH_SIZE
-  const report: AttachmentOrgReconcileReport = {
-    scanned: 0,
-    updated: 0,
-    unresolved: 0,
-    skippedVirtual: 0,
-    byEntity: {},
-  }
-
-  const rows = (await em.getConnection().execute(
-    'select id, entity_id, record_id, organization_id from attachments where tenant_id = ?',
-    [tenantId],
-  )) as AttachmentScanRow[]
-  report.scanned = rows.length
-  if (!rows.length) return report
-
-  const groups = new Map<string, AttachmentScanRow[]>()
-  for (const row of rows) {
-    if (!row.id || !row.entity_id || !row.record_id) continue
-    const list = groups.get(row.entity_id) ?? []
-    list.push(row)
-    groups.set(row.entity_id, list)
-  }
-
-  const pendingUpdates: Array<{ id: string; organizationId: string }> = []
-
-  for (const [entityId, group] of groups) {
-    const bucket = ensureBucket(report, entityId)
-    bucket.scanned += group.length
-
-    if (entityId === LIBRARY_ENTITY_ID) {
-      report.skippedVirtual += group.length
-      continue
-    }
-
-    const recordIds = Array.from(
-      new Set(group.map((row) => row.record_id).filter((value): value is string => !!value)),
-    )
-    const parentOrgByRecordId = new Map<string, string | null>()
-    let resolvable = true
-
-    for (let index = 0; index < recordIds.length; index += batchSize) {
-      const chunk = recordIds.slice(index, index + batchSize)
-      try {
-        const result = await queryEngine.query(entityId as any, {
-          fields: ['id', 'organization_id'],
-          filters: { id: chunk.length === 1 ? { $eq: chunk[0] } : { $in: chunk } },
-          tenantId,
-          withDeleted: true,
-          page: { pageSize: Math.max(chunk.length, 1) },
-        })
-        for (const item of result.items ?? []) {
-          const record = item as Record<string, unknown>
-          const recordId = record.id != null ? String(record.id) : null
-          if (!recordId) continue
-          parentOrgByRecordId.set(recordId, readParentOrganizationId(record))
-        }
-      } catch (error) {
-        resolvable = false
-        logger.warn('org reconcile: cannot resolve parent organization for entity', {
-          entityId,
-          error,
-        })
-        break
-      }
-    }
-
-    if (!resolvable) {
-      bucket.unresolved += group.length
-      report.unresolved += group.length
-      continue
-    }
-
-    for (const row of group) {
-      const target = row.record_id ? parentOrgByRecordId.get(row.record_id) : null
-      if (!target) {
-        bucket.unresolved += 1
-        report.unresolved += 1
-        continue
-      }
-      if ((row.organization_id ?? null) === target) continue
-      pendingUpdates.push({ id: row.id, organizationId: target })
-      bucket.updated += 1
-      report.updated += 1
-    }
-  }
-
-  for (let index = 0; index < pendingUpdates.length; index += batchSize) {
-    const chunk = pendingUpdates.slice(index, index + batchSize)
-    for (const update of chunk) {
-      const reference = em.getReference(Attachment, update.id)
-      reference.organizationId = update.organizationId
-    }
-    await em.flush()
-  }
-
-  return report
-}

package/src/modules/attachments/lib/requestScope.ts

@@ -1,27 +0,0 @@
-import type { AwilixContainer } from 'awilix'
-import type { AuthContext } from '@open-mercato/shared/lib/auth/server'
-import { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'
-
-/**
- * Resolve the organization an attachment request should act within.
- *
- * `auth.orgId` alone is NOT selected-organization aware for non-superadmin
- * principals: `applySuperAdminScope` only rewrites `orgId` from the
- * `om_selected_org` cookie for superadmins, so a regular multi-org admin who
- * switches the header organization keeps `auth.orgId` pinned to their own home
- * organization. The CRUD factory and other org-scoped routes derive the active
- * organization via `resolveOrganizationScopeForRequest` (cookie-driven and
- * RBAC-validated for ALL users, falling back to the home org when the selection
- * is absent or inaccessible). Attachments must do the same so uploaded files
- * land under — and are read back from — the currently selected organization
- * rather than the uploader's home organization (#3765).
- */
-export async function resolveAttachmentOrganizationId(
-  container: AwilixContainer,
-  auth: AuthContext,
-  request: Request,
-): Promise<string | null> {
-  if (!auth) return null
-  const scope = await resolveOrganizationScopeForRequest({ container, auth, request })
-  return scope?.selectedId ?? auth.orgId ?? null
-}

package/src/modules/auth/api/autologin.ts

@@ -1,100 +0,0 @@
-import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
-import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
-import { createLogger } from '@open-mercato/shared/lib/logger'
-import { AuthService } from '@open-mercato/core/modules/auth/services/authService'
-import { signJwt } from '@open-mercato/shared/lib/auth/jwt'
-import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
-import { buildSafeRedirectResponse, resolveTrustedRedirectBase } from '@open-mercato/core/modules/auth/lib/requestRedirect'
-import { sanitizeRedirectPath } from '@open-mercato/core/modules/auth/lib/safeRedirect'
-import { resolveAutoLoginCredentials } from '@open-mercato/core/modules/auth/lib/autologin'
-import { emitAuthEvent } from '@open-mercato/core/modules/auth/events'
-
-export const metadata = { requireAuth: false }
-
-const accessTokenMaxAgeSeconds = 60 * 60 * 8
-const logger = createLogger('auth').child({ component: 'autologin' })
-
-// Demo-only convenience: when OM_AUTOLOGIN_* credentials are configured, sign the
-// visitor in with those credentials and redirect into the app. Gated entirely
-// behind env vars — the homepage only routes here when they are set. On any
-// failure (feature off, bad credentials) it falls back to the manual login form
-// so a misconfigured demo can never loop.
-export async function GET(req: Request) {
-  const url = new URL(req.url)
-  const baseUrl = resolveTrustedRedirectBase(req) ?? url.origin
-  const redirectTo = sanitizeRedirectPath(url.searchParams.get('redirect'), baseUrl, '/backend')
-
-  const credentials = resolveAutoLoginCredentials()
-  if (!credentials) {
-    return buildSafeRedirectResponse(req, '/login')
-  }
-
-  // Already signed in — go straight to the app instead of re-issuing a session.
-  const existing = await getAuthFromRequest(req)
-  if (existing) {
-    return buildSafeRedirectResponse(req, redirectTo)
-  }
-
-  const container = await createRequestContainer()
-  const auth = container.resolve<AuthService>('authService')
-
-  let user = null
-  if (credentials.tenantId) {
-    user = await auth.findUserByEmailAndTenant(credentials.email, credentials.tenantId)
-  } else {
-    const users = await auth.findUsersByEmail(credentials.email)
-    user = users.length === 1 ? users[0] : null
-  }
-
-  const ok = await auth.verifyPassword(user, credentials.password)
-  if (!user || !ok) {
-    // Misconfigured demo credentials — never loop; drop to the manual form.
-    logger.warn('OM_AUTOLOGIN credentials did not resolve to a single valid user; falling back to login')
-    return buildSafeRedirectResponse(req, '/login')
-  }
-
-  const resolvedTenantId = credentials.tenantId ?? (user.tenantId ? String(user.tenantId) : null)
-  const roles = await auth.getUserRoles(user, resolvedTenantId)
-  await auth.updateLastLoginAt(user)
-  const expiresAt = new Date(Date.now() + accessTokenMaxAgeSeconds * 1000)
-  const { session } = await auth.createSession(user, expiresAt)
-  const token = signJwt({
-    sub: String(user.id),
-    sid: String(session.id),
-    tenantId: resolvedTenantId,
-    orgId: user.organizationId ? String(user.organizationId) : null,
-    email: user.email,
-    roles,
-  })
-  void emitAuthEvent('auth.login.success', {
-    id: String(user.id),
-    email: user.email,
-    tenantId: resolvedTenantId,
-    organizationId: user.organizationId ? String(user.organizationId) : null,
-  }).catch(() => undefined)
-
-  const res = buildSafeRedirectResponse(req, redirectTo)
-  res.cookies.set('auth_token', token, {
-    httpOnly: true,
-    path: '/',
-    sameSite: 'lax',
-    secure: process.env.NODE_ENV === 'production',
-    maxAge: accessTokenMaxAgeSeconds,
-  })
-  return res
-}
-
-export const openApi: OpenApiRouteDoc = {
-  tag: 'Authentication & Accounts',
-  summary: 'Demo autologin',
-  methods: {
-    GET: {
-      summary: 'Auto sign-in using env-configured demo credentials',
-      description:
-        'When OM_AUTOLOGIN_EMAIL / OM_AUTOLOGIN_PASSWORD are configured, signs the visitor in with those credentials and redirects into the app. Intended for single-tenant demo instances only. Falls back to the login page when disabled or misconfigured.',
-      responses: [
-        { status: 307, description: 'Redirect into the app (or to /login on failure)', mediaType: 'text/html' },
-      ],
-    },
-  },
-}

package/src/modules/auth/lib/autologin.ts

@@ -1,36 +0,0 @@
-export type AutoLoginCredentials = {
-  email: string
-  password: string
-  tenantId: string | null
-}
-
-function readEnvValue(env: Record<string, string | undefined>, key: string): string {
-  const value = env[key]
-  return typeof value === 'string' ? value.trim() : ''
-}
-
-/**
- * Reads the optional demo-autologin credentials from env. When both
- * `OM_AUTOLOGIN_EMAIL` and `OM_AUTOLOGIN_PASSWORD` are set, the homepage hands
- * unauthenticated visitors to the autologin route which signs them in and drops
- * them into the app. Unset (the default) → `null` → normal login flow.
- *
- * `OM_AUTOLOGIN_TENANT` is optional and only needed when the same email exists
- * across multiple tenants. Pure: pass the env bag so it stays testable.
- */
-export function resolveAutoLoginCredentials(
-  env: Record<string, string | undefined> = process.env,
-): AutoLoginCredentials | null {
-  const email = readEnvValue(env, 'OM_AUTOLOGIN_EMAIL')
-  const password = env.OM_AUTOLOGIN_PASSWORD ?? ''
-  if (!email || !password) return null
-  const tenantId = readEnvValue(env, 'OM_AUTOLOGIN_TENANT')
-  return { email, password, tenantId: tenantId || null }
-}
-
-/** True when demo autologin credentials are configured via env. */
-export function isAutoLoginEnabled(
-  env: Record<string, string | undefined> = process.env,
-): boolean {
-  return resolveAutoLoginCredentials(env) !== null
-}

package/src/modules/customers/components/detail/useDealsAccess.ts

@@ -1,19 +0,0 @@
-"use client"
-
-import * as React from 'react'
-import { useBackendChrome } from '@open-mercato/ui/backend/BackendChromeProvider'
-import { hasFeature } from '@open-mercato/shared/security/features'
-
-export type DealsAccess = {
-  canViewDeals: boolean
-  isReady: boolean
-}
-
-export function useDealsAccess(): DealsAccess {
-  const { payload, isReady } = useBackendChrome()
-  const canViewDeals = React.useMemo(
-    () => hasFeature(payload?.grantedFeatures ?? [], 'customers.deals.view'),
-    [payload?.grantedFeatures],
-  )
-  return { canViewDeals, isReady }
-}