@open-mercato/core 0.6.7-develop.6593.1.0ecf630f1e → 0.6.7-develop.6595.1.e93ecd3cfa

package/dist/modules/entities/migrations/Migration20260716120000.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/entities/migrations/Migration20260716120000.ts"],
+  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\nexport class Migration20260716120000 extends Migration {\n\n  override async up(): Promise<void> {\n    this.addSql(`alter table \"custom_entities\" add column \"access_restricted\" boolean not null default false;`);\n  }\n\n  override async down(): Promise<void> {\n    this.addSql(`alter table \"custom_entities\" drop column \"access_restricted\";`);\n  }\n\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAEnB,MAAM,gCAAgC,UAAU;AAAA,EAErD,MAAe,KAAoB;AACjC,SAAK,OAAO,8FAA8F;AAAA,EAC5G;AAAA,EAEA,MAAe,OAAsB;AACnC,SAAK,OAAO,gEAAgE;AAAA,EAC9E;AAEF;",
+  "names": []
+}

package/generated/entities/custom_entity/index.ts

@@ -5,6 +5,7 @@ export const description = "description";
 export const label_field = "label_field";
 export const default_editor = "default_editor";
 export const show_in_sidebar = "show_in_sidebar";
+export const access_restricted = "access_restricted";
 export const organization_id = "organization_id";
 export const tenant_id = "tenant_id";
 export const is_active = "is_active";

package/generated/entity-fields-registry.ts

@@ -503,6 +503,7 @@ export const entityFieldsRegistry: Record<string, Record<string, string>> = {
       "label_field": "label_field",
       "default_editor": "default_editor",
       "show_in_sidebar": "show_in_sidebar",
+      "access_restricted": "access_restricted",
       "organization_id": "organization_id",
       "tenant_id": "tenant_id",
       "is_active": "is_active",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/core",
-  "version": "0.6.7-develop.6593.1.0ecf630f1e",
+  "version": "0.6.7-develop.6595.1.e93ecd3cfa",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -254,16 +254,16 @@
     "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@open-mercato/ai-assistant": "0.6.7-develop.6593.1.0ecf630f1e",
-    "@open-mercato/shared": "0.6.7-develop.6593.1.0ecf630f1e",
-    "@open-mercato/ui": "0.6.7-develop.6593.1.0ecf630f1e",
+    "@open-mercato/ai-assistant": "0.6.7-develop.6595.1.e93ecd3cfa",
+    "@open-mercato/shared": "0.6.7-develop.6595.1.e93ecd3cfa",
+    "@open-mercato/ui": "0.6.7-develop.6595.1.e93ecd3cfa",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/ai-assistant": "0.6.7-develop.6593.1.0ecf630f1e",
-    "@open-mercato/shared": "0.6.7-develop.6593.1.0ecf630f1e",
-    "@open-mercato/ui": "0.6.7-develop.6593.1.0ecf630f1e",
+    "@open-mercato/ai-assistant": "0.6.7-develop.6595.1.e93ecd3cfa",
+    "@open-mercato/shared": "0.6.7-develop.6595.1.e93ecd3cfa",
+    "@open-mercato/ui": "0.6.7-develop.6595.1.e93ecd3cfa",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.1",

package/src/modules/auth/api/features.ts

@@ -3,6 +3,8 @@ import { z } from 'zod'
 import type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
 import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
 import { getModules } from '@open-mercato/shared/lib/i18n/server'
+import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
+import { synthesizeRestrictedEntityFeatures } from '@open-mercato/core/modules/entities/lib/restrictedEntityFeatures'
 
 export const metadata = {
   GET: { requireAuth: true, requireFeatures: ['auth.acl.manage'] },
@@ -44,6 +46,21 @@ export async function GET(req: Request) {
       return base
     })
   )
+  // Append synthesized per-entity features for the tenant's restricted custom
+  // entities so they can be granted in the ACL editor. Tenant-scoped; never
+  // throws (falls back to the static catalog on any failure).
+  try {
+    const { resolve } = await createRequestContainer()
+    const em = resolve('em') as any
+    const synthesized = await synthesizeRestrictedEntityFeatures(em, auth.tenantId ?? null)
+    for (const item of synthesized) {
+      const deps = normalizeDependsOn(item.dependsOn)
+      const base: FeatureItem = { id: item.id, title: item.title, module: item.module }
+      if (deps) base.dependsOn = deps
+      items.push(base)
+    }
+  } catch {}
+
   // Deduplicate by id (keep first occurrence)
   const byId = new Map<string, FeatureItem>()
   for (const it of items) if (!byId.has(it.id)) byId.set(it.id, it)