@open-mercato/core 0.6.7-develop.6605.1.761dd4c810 → 0.6.7-develop.6621.1.cdbe9dee3d

package/src/modules/integrations/i18n/pl.json

@@ -1,80 +1,4 @@
 {
-  "example.mutationLifecycle.description": "Validation page for mutation guards, sync event subscribers, client-side event filtering, and command interceptors.",
-  "example.mutationLifecycle.hintHeading": "What should be visible and how it should work",
-  "example.mutationLifecycle.m1.createFailed": "Guard probe failed: expected 201, got {value}.",
-  "example.mutationLifecycle.m1.description": "Create a todo via the CRUD pipeline to verify the mutation guard registry evaluates the `example.todo-limit` guard on POST.",
-  "example.mutationLifecycle.m1.hint1": "1. Guard `example.todo-limit` targets `example.todo` on `create` operations with priority 50.",
-  "example.mutationLifecycle.m1.hint2": "2. Guard validates `organizationId` presence — creation fails with 422 if missing.",
-  "example.mutationLifecycle.m1.hint3": "3. Multiple guards run by priority order; first rejection stops the pipeline.",
-  "example.mutationLifecycle.m1.hint4": "4. Legacy `crudMutationGuardService` is automatically bridged as a guard with priority 0.",
-  "example.mutationLifecycle.m1.run": "Run guard probe",
-  "example.mutationLifecycle.m1.title": "Phase m1 — Mutation Guard Registry",
-  "example.mutationLifecycle.m2.createFailed": "Could not create todo for sync subscriber probe.",
-  "example.mutationLifecycle.m2.description": "Run a multi-step probe: create a todo (verify auto-default-priority), mark as done then try to revert (verify prevent-uncomplete blocks with 422), and delete (verify audit-delete fires).",
-  "example.mutationLifecycle.m2.hint1": "1. `auto-default-priority`: Injects `priority: 'normal'` when creating a todo without explicit priority (sync before-create).",
-  "example.mutationLifecycle.m2.hint2": "2. `prevent-uncomplete`: Blocks reverting completed todos to pending with 422 (sync before-update).",
-  "example.mutationLifecycle.m2.hint3": "3. `audit-delete`: Logs deletion audit trail to server console (sync after-delete, non-blocking).",
-  "example.mutationLifecycle.m2.hint4": "4. Sync subscribers run inside the CRUD pipeline, before/after the actual mutation — unlike async subscribers which run post-commit.",
-  "example.mutationLifecycle.m2.partial": "One or more sync subscriber probes failed. Review rows below.",
-  "example.mutationLifecycle.m2.probe.auditDelete.error": "Expected 200, got {value}.",
-  "example.mutationLifecycle.m2.probe.auditDelete.label": "audit-delete (after-delete)",
-  "example.mutationLifecycle.m2.probe.auditDelete.ok": "Todo deleted (200). Sync after-event example.todo.deleted fired — audit-delete subscriber logged to server console.",
-  "example.mutationLifecycle.m2.probe.defaultPriority.error": "Expected 201, got {value}.",
-  "example.mutationLifecycle.m2.probe.defaultPriority.label": "auto-default-priority (before-create)",
-  "example.mutationLifecycle.m2.probe.defaultPriority.ok": "Todo created (201). Sync before-event example.todo.creating fired — auto-default-priority subscriber injects priority if absent.",
-  "example.mutationLifecycle.m2.probe.preventUncomplete.error": "Expected 422 (blocked), got {value}.",
-  "example.mutationLifecycle.m2.probe.preventUncomplete.label": "prevent-uncomplete (before-update)",
-  "example.mutationLifecycle.m2.probe.preventUncomplete.markDoneFailed": "Failed to mark todo as done: status {value}.",
-  "example.mutationLifecycle.m2.probe.preventUncomplete.ok": "Revert blocked (422). Sync before-event example.todo.updating fired — prevent-uncomplete subscriber rejected the operation.",
-  "example.mutationLifecycle.m2.probe.skipped": "Skipped — no todo was created in probe 1.",
-  "example.mutationLifecycle.m2.run": "Run sync subscriber probe",
-  "example.mutationLifecycle.m2.title": "Phase m2 — Sync Event Subscribers",
-  "example.mutationLifecycle.m3.description": "Widget injection event handlers can now declare an operation filter to skip events for specific CRUD operations.",
-  "example.mutationLifecycle.m3.hint1": "1. Widgets can declare `eventHandlers.filter.operations` to skip specific CRUD operations (e.g., only fire on `update`).",
-  "example.mutationLifecycle.m3.hint2": "2. CrudForm now passes `operation` ('create' or 'update') in the injection context.",
-  "example.mutationLifecycle.m3.hint3": "3. Widgets without a filter continue to fire for all operations (backward compatible).",
-  "example.mutationLifecycle.m3.hint4": "4. Type: `WidgetInjectionEventFilter = { operations?: ('create' | 'update' | 'delete')[] }`",
-  "example.mutationLifecycle.m3.note": "The filter is a type-level extension. See Phase G page for CrudForm injection demo.",
-  "example.mutationLifecycle.m3.openPhaseG": "Open Phase G — CrudForm injection",
-  "example.mutationLifecycle.m3.title": "Phase m3 — Client-Side Event Filtering",
-  "example.mutationLifecycle.m4.description": "The `example.audit-logging` interceptor wraps all `customers.*` command bus operations with timing metadata.",
-  "example.mutationLifecycle.m4.hint1": "1. `example.audit-logging` intercepts all `customers.*` commands (wildcard pattern).",
-  "example.mutationLifecycle.m4.hint2": "2. `beforeExecute` stores `auditStartedAt` timestamp in metadata.",
-  "example.mutationLifecycle.m4.hint3": "3. `afterExecute` reads metadata and logs: `[example:audit] Command {id} completed in {ms}ms`.",
-  "example.mutationLifecycle.m4.hint4": "4. Pattern matching supports `*` (all), exact ID, and `prefix.*` (namespace wildcard).",
-  "example.mutationLifecycle.m4.hint5": "5. Interceptors run on both `execute()` and `undo()` code paths.",
-  "example.mutationLifecycle.m4.note": "Create or edit a customer, then check server console for the audit log entry.",
-  "example.mutationLifecycle.m4.openCustomers": "Open customers",
-  "example.mutationLifecycle.m4.title": "Phase m4 — Command Interceptors",
-  "example.mutationLifecycle.title": "UMES Phase M — Mutation Lifecycle",
-  "example.umes.queryExtensions.description": "Validation page for Phase N query engine extensions: enricher opt-in, surface-aware registry, sync query events, and scope guard re-application.",
-  "example.umes.queryExtensions.enrichers.description": "Registers three enrichers (API-only, query-enabled for all engines, basic-only) and probes `getEnrichersForEntity` with different surface selectors.",
-  "example.umes.queryExtensions.enrichers.hint1": "1. No selector / `api-response` surface: returns all 3 enrichers (backward compatible).",
-  "example.umes.queryExtensions.enrichers.hint2": "2. `query-engine` surface (no engine filter): returns 2 enrichers (query-enabled + basic-only).",
-  "example.umes.queryExtensions.enrichers.hint3": "3. `query-engine` + `basic` engine: returns 2 enrichers (query-enabled defaults to both, basic-only matches).",
-  "example.umes.queryExtensions.enrichers.hint4": "4. `query-engine` + `hybrid` engine: returns 1 enricher (only query-enabled, basic-only excluded).",
-  "example.umes.queryExtensions.enrichers.run": "Run enricher registry probe",
-  "example.umes.queryExtensions.enrichers.title": "N.1 Surface-Aware Enricher Registry",
-  "example.umes.queryExtensions.entityIds.description": "Validates `entityIdToEventEntity` which converts query engine format (`module:entity`) to event format (`module.entity`).",
-  "example.umes.queryExtensions.entityIds.hint1": "1. `customers:person` should convert to `customers.person`.",
-  "example.umes.queryExtensions.entityIds.hint2": "2. `catalog:product:variant` should convert to `catalog.product.variant` (multiple colons).",
-  "example.umes.queryExtensions.entityIds.hint3": "3. All conversions should show `ok: true`.",
-  "example.umes.queryExtensions.entityIds.run": "Run entity ID conversion probe",
-  "example.umes.queryExtensions.entityIds.title": "N.4 Entity ID Conversion",
-  "example.umes.queryExtensions.hintHeading": "What should be visible and how it should work",
-  "example.umes.queryExtensions.scopeGuards.description": "Demonstrates that `reapplyScopeGuards` restores tenant/org constraints after subscriber modifications while preserving other query options.",
-  "example.umes.queryExtensions.scopeGuards.hint1": "1. Tampered tenantId/organizationId should be restored to original values.",
-  "example.umes.queryExtensions.scopeGuards.hint2": "2. Non-scope fields (filters, withDeleted) should remain unchanged.",
-  "example.umes.queryExtensions.scopeGuards.hint3": "3. This ensures subscribers cannot bypass multi-tenant isolation.",
-  "example.umes.queryExtensions.scopeGuards.run": "Run scope guard probe",
-  "example.umes.queryExtensions.scopeGuards.title": "N.3 Scope Guard Re-application",
-  "example.umes.queryExtensions.subscribers.description": "Registers three sync subscribers (querying, queried, wildcard) and probes `collectQuerySubscribers` with different event IDs.",
-  "example.umes.queryExtensions.subscribers.hint1": "1. `example.todo.querying` should match 2 subscribers (exact + wildcard `example.*.querying`).",
-  "example.umes.queryExtensions.subscribers.hint2": "2. `example.todo.queried` should match 1 subscriber (exact match only).",
-  "example.umes.queryExtensions.subscribers.hint3": "3. `customers.person.querying` should match 0 subscribers (no cross-entity leakage).",
-  "example.umes.queryExtensions.subscribers.run": "Run subscriber collection probe",
-  "example.umes.queryExtensions.subscribers.title": "N.2 Sync Query Event Subscribers",
-  "example.umes.queryExtensions.title": "UMES Phase N — Query Engine Extensibility",
   "integrations.bundle.configureIntegration": "Konfiguruj",
   "integrations.bundle.integrationToggles": "Integracje",
   "integrations.bundle.sharedCredentials": "Współdzielone dane",

package/src/modules/integrations/lib/organization-scope.ts

@@ -0,0 +1,27 @@
+type OrganizationScopedAuth = {
+  orgId?: string | null
+  actorOrgId?: unknown
+} | null | undefined
+
+/**
+ * Resolves the organization an integrations request is scoped to.
+ *
+ * Integrations are configured per organization — `integration_credentials` and
+ * `integration_states` both require a non-null `organization_id` — so there is no
+ * meaningful "all organizations" view of this module. When an operator selects that
+ * option the super-admin cookie override clears `auth.orgId` and preserves the actor's
+ * own organization in `actorOrgId`; fall back to it so the module keeps showing the
+ * operator's own configuration instead of failing.
+ *
+ * Answering 401 for that case is not merely wrong but self-perpetuating: `apiFetch`
+ * reads 401 as an expired session and redirects through `/api/auth/session/refresh`,
+ * which succeeds and returns to the same page, reloading forever.
+ */
+export function resolveIntegrationsOrganizationId(auth: OrganizationScopedAuth): string | null {
+  if (!auth) return null
+  const selected = auth.orgId
+  if (typeof selected === 'string' && selected.trim().length > 0) return selected
+  const actorOrgId = auth.actorOrgId
+  if (typeof actorOrgId === 'string' && actorOrgId.trim().length > 0) return actorOrgId
+  return null
+}

package/src/modules/payment_gateways/lib/gateway-service.ts

@@ -45,6 +45,12 @@ function assertManualActionAllowed(action: ManualGatewayAction, transaction: Gat
   }
 }
 
+function assertCaptureAmountAllowed(amount: number | undefined, transaction: GatewayTransaction): void {
+  if (amount !== undefined && amount > Number(transaction.amount)) {
+    throw conflict(`Capture amount ${amount} exceeds authorized transaction amount ${transaction.amount}`)
+  }
+}
+
 function applyAdapterResultStatus(
   action: ManualGatewayAction,
   transaction: GatewayTransaction,
@@ -192,6 +198,7 @@ export function createPaymentGatewayService(deps: PaymentGatewayServiceDeps) {
     operationId?: string
     payload: Record<string, unknown>
     scope: { organizationId: string; tenantId: string }
+    assertInitialAllowed?: (transaction: GatewayTransaction) => void
     invoke: (context: {
       adapter: GatewayAdapter
       credentials: Record<string, unknown>
@@ -210,7 +217,10 @@ export function createPaymentGatewayService(deps: PaymentGatewayServiceDeps) {
       operationId: input.operationId,
       payload: input.payload,
       scope: input.scope,
-      assertInitialAllowed: () => assertManualActionAllowed(input.action, transaction),
+      assertInitialAllowed: () => {
+        assertManualActionAllowed(input.action, transaction)
+        input.assertInitialAllowed?.(transaction)
+      },
     })
     if (prepared.kind === 'completed') {
       if (prepared.result.status !== transaction.unifiedStatus) {
@@ -487,6 +497,7 @@ export function createPaymentGatewayService(deps: PaymentGatewayServiceDeps) {
         operationId,
         payload: { amount: amount ?? null },
         scope,
+        assertInitialAllowed: (transaction) => assertCaptureAmountAllowed(amount, transaction),
         invoke: ({ adapter, credentials, transaction, idempotencyKey }) => adapter.capture({
           sessionId: readProviderSessionId(transaction),
           amount,

package/src/modules/sales/api/document-history/route.ts

@@ -4,6 +4,7 @@ import { loadAuditLogDisplayMaps } from '@open-mercato/core/modules/audit_logs/a
 import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
 import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
 import { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'
+import { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'
 import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
 import { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'
 import { NextResponse } from 'next/server'
@@ -67,12 +68,12 @@ export async function GET(req: Request) {
     }
 
     const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })
-    const organizationId = scope?.selectedId ?? auth.orgId ?? null
-    if (!organizationId) {
-      throw new CrudHttpError(400, {
-        error: translate('sales.documents.errors.organization_required', 'Organization context is required'),
-      })
-    }
+    // Resolve the organization scope the same way every other scoped read does.
+    // Under "All organizations" (super-admin) `rbacOrganizationId` is null and
+    // `where` is empty, so the read scopes by tenant + resource only instead of
+    // failing — the document's `id` is a tenant-unique UUID, so no cross-org leak.
+    const orgFilter = resolveOrganizationScopeFilter(scope, auth)
+    const organizationId = orgFilter.rbacOrganizationId
 
     const requiredFeature = query.kind === 'order' ? 'sales.orders.view' : 'sales.quotes.view'
     const rbac = container.resolve('rbacService') as RbacService
@@ -92,7 +93,7 @@ export async function GET(req: Request) {
     const [actionLogList, notes] = await Promise.all([
       actionLogService.list({
         tenantId: auth.tenantId,
-        organizationId,
+        organizationId: organizationId ?? undefined,
         resourceKind,
         resourceId: query.id,
         includeRelated: true,
@@ -107,11 +108,11 @@ export async function GET(req: Request) {
           contextType: query.kind,
           contextId: query.id,
           tenantId: auth.tenantId,
-          organizationId,
+          ...orgFilter.where,
           deletedAt: null,
         },
         { orderBy: { createdAt: 'DESC' } },
-        { tenantId: auth.tenantId, organizationId },
+        { tenantId: auth.tenantId, organizationId: organizationId ?? undefined },
       ),
     ])
     const logs = actionLogList.items as ActionLog[]

package/src/modules/sales/api/quotes/accept/route.ts

@@ -11,7 +11,7 @@ import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
 import { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'
 import { getCachedRateLimiterService } from '@open-mercato/core/bootstrap'
 import { readEndpointRateLimitConfig } from '@open-mercato/shared/lib/ratelimit/config'
-import { checkRateLimit, getClientIp, rateLimitErrorSchema } from '@open-mercato/shared/lib/ratelimit/helpers'
+import { checkRateLimit, getClientIp, RATE_LIMIT_FALLBACK_KEY, rateLimitErrorSchema } from '@open-mercato/shared/lib/ratelimit/helpers'
 import { validateSameOriginMutationRequest } from './originGuard'
 import { hashAuthToken } from '../../../../auth/lib/tokenHash'
 import { SalesOrder, SalesQuote } from '../../../data/entities'
@@ -52,11 +52,11 @@ export async function POST(req: Request) {
 
     const rateLimiterService = getCachedRateLimiterService()
     const clientIp = rateLimiterService ? getClientIp(req, rateLimiterService.trustProxyDepth) : null
-    if (rateLimiterService && clientIp) {
+    if (rateLimiterService) {
       const rateLimitResponse = await checkRateLimit(
         rateLimiterService,
         quoteAcceptRateLimitConfig,
-        clientIp,
+        clientIp ?? RATE_LIMIT_FALLBACK_KEY,
         translate('api.errors.rateLimit', 'Too many requests. Please try again later.'),
       )
       if (rateLimitResponse) return rateLimitResponse

package/src/modules/sales/api/returns/[id]/route.ts

@@ -5,6 +5,7 @@ import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
 import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
 import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
 import { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'
+import { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'
 import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
 import { CrudHttpError, isCrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'
 import { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'
@@ -40,20 +41,20 @@ export async function GET(req: Request, ctx: { params: { id: string } }) {
     }
 
     const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })
-    const organizationId = scope?.selectedId ?? auth.orgId ?? null
-    if (!organizationId) {
-      throw new CrudHttpError(400, {
-        error: translate('sales.documents.errors.organization_required', 'Organization context is required'),
-      })
-    }
+    // Scope by the caller's visible organizations. Under "All organizations"
+    // (super-admin) `where` is empty and `rbacOrganizationId` is null, so the
+    // return is fetched by its tenant-unique id instead of 400-ing; restricted
+    // callers keep their `filterIds` `$in` guard.
+    const orgFilter = resolveOrganizationScopeFilter(scope, auth)
+    const decryptionOrganizationId = orgFilter.rbacOrganizationId ?? undefined
 
     const em = (container.resolve('em') as EntityManager).fork()
     const header = await findOneWithDecryption(
       em,
       SalesReturn,
-      { id, deletedAt: null, tenantId: auth.tenantId, organizationId },
+      { id, deletedAt: null, tenantId: auth.tenantId, ...orgFilter.where },
       { populate: ['order'] },
-      { tenantId: auth.tenantId, organizationId },
+      { tenantId: auth.tenantId, organizationId: decryptionOrganizationId },
     )
     if (!header || !header.order) {
       throw notFound(translate('sales.returns.notFound', 'Return not found.'))
@@ -64,7 +65,7 @@ export async function GET(req: Request, ctx: { params: { id: string } }) {
       SalesReturnLine,
       { salesReturn: header.id, deletedAt: null },
       { populate: ['orderLine'] },
-      { tenantId: auth.tenantId, organizationId },
+      { tenantId: auth.tenantId, organizationId: decryptionOrganizationId },
     )
 
     const totals = lines.reduce(

package/src/modules/sales/backend/sales/documents/[id]/page.tsx

@@ -27,6 +27,8 @@ import { ArrowRightLeft, Building2, CreditCard, Mail, Pencil, Plus, Send, Store,
 import { FormHeader, type ActionItem } from '@open-mercato/ui/backend/forms'
 import { VersionHistoryAction } from '@open-mercato/ui/backend/version-history'
 import { SendObjectMessageDialog } from '@open-mercato/ui/backend/messages'
+import { useBackendChrome } from '@open-mercato/ui/backend/BackendChromeProvider'
+import { hasFeature } from '@open-mercato/shared/security/features'
 import Link from 'next/link'
 import { flash } from '@open-mercato/ui/backend/FlashMessages'
 import { apiCall, apiCallOrThrow, readApiResultOrThrow, withScopedApiRequestHeaders } from '@open-mercato/ui/backend/utils/apiCall'
@@ -3983,6 +3985,9 @@ export default function SalesDocumentDetailPage({
     []
   )
 
+  const { payload: backendChromePayload, isReady: backendChromeReady } = useBackendChrome()
+  const canComposeMessages = backendChromeReady && hasFeature(backendChromePayload?.grantedFeatures, 'messages.compose')
+
   const tabInjectionSpotId = React.useMemo(() => `sales.document.detail.${kind}:tabs`, [kind])
   const { widgets: injectedTabWidgets } = useInjectionWidgets(tabInjectionSpotId, {
     context: detailInjectionContext,
@@ -4564,25 +4569,27 @@ export default function SalesDocumentDetailPage({
           backLabel={t('sales.documents.detail.back', 'Back to documents')}
           utilityActions={record ? (
             <>
-              <SendObjectMessageDialog
-                object={{
-                  entityModule: 'sales',
-                  entityType: kind,
-                  entityId: record.id,
-                  sourceEntityType: kind === 'order' ? 'sales.order' : 'sales.quote',
-                  sourceEntityId: record.id,
-                  previewData: {
-                    title: number,
-                    status: statusDisplay?.label ?? record?.status ?? undefined,
-                    metadata: Object.keys(messagePreviewMetadata).length > 0 ? messagePreviewMetadata : undefined,
-                  },
-                }}
-                viewHref={`/backend/sales/${kind === 'order' ? 'orders' : 'quotes'}/${record.id}`}
-                defaultValues={{
-                  sourceEntityType: kind === 'order' ? 'sales.order' : 'sales.quote',
-                  sourceEntityId: record.id,
-                }}
-              />
+              {canComposeMessages ? (
+                <SendObjectMessageDialog
+                  object={{
+                    entityModule: 'sales',
+                    entityType: kind,
+                    entityId: record.id,
+                    sourceEntityType: kind === 'order' ? 'sales.order' : 'sales.quote',
+                    sourceEntityId: record.id,
+                    previewData: {
+                      title: number,
+                      status: statusDisplay?.label ?? record?.status ?? undefined,
+                      metadata: Object.keys(messagePreviewMetadata).length > 0 ? messagePreviewMetadata : undefined,
+                    },
+                  }}
+                  viewHref={`/backend/sales/${kind === 'order' ? 'orders' : 'quotes'}/${record.id}`}
+                  defaultValues={{
+                    sourceEntityType: kind === 'order' ? 'sales.order' : 'sales.quote',
+                    sourceEntityId: record.id,
+                  }}
+                />
+              ) : null}
               <VersionHistoryAction
                 config={{
                   resourceKind: kind === 'order' ? 'sales.order' : 'sales.quote',

package/src/modules/sales/components/documents/AddressesSection.tsx

@@ -200,9 +200,13 @@ export function SalesDocumentAddressesSection({
   const [addressesLoading, setAddressesLoading] = React.useState(false)
   const [addressesError, setAddressesError] = React.useState<string | null>(null)
   const [addressFormat, setAddressFormat] = React.useState<AddressFormatStrategy>('line_first')
-  const [useCustomShipping, setUseCustomShipping] = React.useState<boolean>(!!shippingAddressSnapshot)
+  const [useCustomShipping, setUseCustomShipping] = React.useState<boolean>(
+    !!shippingAddressSnapshot && !shippingAddressId
+  )
   const [useCustomBilling, setUseCustomBilling] = React.useState<boolean>(
-    billingAddressSnapshot ? true : !!shippingAddressSnapshot
+    billingAddressSnapshot && !billingAddressId
+      ? true
+      : !!shippingAddressSnapshot && !shippingAddressId
   )
   const [sameAsShipping, setSameAsShipping] = React.useState<boolean>(() => {
     if (shippingAddressSnapshot || billingAddressSnapshot) {
@@ -366,8 +370,8 @@ export function SalesDocumentAddressesSection({
   }, [documentId, kind, resolveAddressSummary, t])
 
   React.useEffect(() => {
-    const shippingCustom = !!shippingAddressSnapshot
-    const billingCustom = !!billingAddressSnapshot
+    const shippingCustom = !!shippingAddressSnapshot && !shippingAddressId
+    const billingCustom = !!billingAddressSnapshot && !billingAddressId
     const nextSame = shippingAddressSnapshot || billingAddressSnapshot
       ? deepEqual(shippingAddressSnapshot, billingAddressSnapshot)
       : !billingAddressId || billingAddressId === shippingAddressId

package/src/modules/sales/i18n/pl.json

@@ -12,9 +12,9 @@
   "sales.audit.credit_memos.create": "Utwórz notę kredytową",
   "sales.audit.credit_memos.delete": "Usuń notę kredytową",
   "sales.audit.credit_memos.update": "Zaktualizuj notę kredytową",
-  "sales.audit.delivery-windows.create": "Create delivery window",
-  "sales.audit.delivery-windows.delete": "Delete delivery window",
-  "sales.audit.delivery-windows.update": "Update delivery window",
+  "sales.audit.delivery-windows.create": "Utworzenie okna dostawy",
+  "sales.audit.delivery-windows.delete": "Usunięcie okna dostawy",
+  "sales.audit.delivery-windows.update": "Aktualizacja okna dostawy",
   "sales.audit.document_addresses.create": "Dodaj adres dokumentu",
   "sales.audit.document_addresses.delete": "Usuń adres dokumentu",
   "sales.audit.document_addresses.update": "Zaktualizuj adres dokumentu",
@@ -31,9 +31,9 @@
   "sales.audit.orders.lines.delete": "Usuń pozycję zamówienia",
   "sales.audit.orders.lines.upsert": "Zaktualizuj pozycję zamówienia",
   "sales.audit.orders.update": "Aktualizuj zamówienie sprzedaży",
-  "sales.audit.payment-methods.create": "Create payment method",
-  "sales.audit.payment-methods.delete": "Delete payment method",
-  "sales.audit.payment-methods.update": "Update payment method",
+  "sales.audit.payment-methods.create": "Utworzenie metody płatności",
+  "sales.audit.payment-methods.delete": "Usunięcie metody płatności",
+  "sales.audit.payment-methods.update": "Aktualizacja metody płatności",
   "sales.audit.payments.create": "Utwórz płatność",
   "sales.audit.payments.delete": "Usuń płatność",
   "sales.audit.payments.update": "Zaktualizuj płatność",
@@ -51,12 +51,12 @@
   "sales.audit.shipments.create": "Utwórz wysyłkę",
   "sales.audit.shipments.delete": "Usuń wysyłkę",
   "sales.audit.shipments.update": "Aktualizuj wysyłkę",
-  "sales.audit.shipping-methods.create": "Create shipping method",
-  "sales.audit.shipping-methods.delete": "Delete shipping method",
-  "sales.audit.shipping-methods.update": "Update shipping method",
-  "sales.audit.tax-rates.create": "Create tax rate",
-  "sales.audit.tax-rates.delete": "Delete tax rate",
-  "sales.audit.tax-rates.update": "Update tax rate",
+  "sales.audit.shipping-methods.create": "Utworzenie metody wysyłki",
+  "sales.audit.shipping-methods.delete": "Usunięcie metody wysyłki",
+  "sales.audit.shipping-methods.update": "Aktualizacja metody wysyłki",
+  "sales.audit.tax-rates.create": "Utworzenie stawki podatku",
+  "sales.audit.tax-rates.delete": "Usunięcie stawki podatku",
+  "sales.audit.tax-rates.update": "Aktualizacja stawki podatku",
   "sales.channels.actions.backToList": "Powrót do kanałów",
   "sales.channels.actions.create": "Dodaj kanał",
   "sales.channels.create": "Utwórz kanał sprzedaży",
@@ -1380,18 +1380,18 @@
   "sales.shipments.not_found": "Nie znaleziono wysyłki",
   "sales.shipments.payment_completed": "Nie można zmodyfikować wysyłki: płatność za zamówienie jest zakończona.",
   "sales.shipments.quantity_exceeded": "Nie można wysłać więcej niż pozostała ilość.",
-  "sales.stageBar.changeFailed": "Failed to update stage",
-  "sales.stageBar.changed": "Stage updated",
-  "sales.stageBar.closed.lost": "Lost",
-  "sales.stageBar.closed.won": "Won",
-  "sales.stageBar.closedLost": "Deal Lost",
-  "sales.stageBar.closedWon": "Deal Won",
-  "sales.stageBar.completed": "Completed",
-  "sales.stageBar.confirmChange": "Move deal to \"{{stage}}\"?",
-  "sales.stageBar.current": "Current",
-  "sales.stageBar.lost": "Lost",
-  "sales.stageBar.upcoming": "Upcoming",
-  "sales.stageBar.won": "Won",
+  "sales.stageBar.changeFailed": "Nie udało się zmienić etapu",
+  "sales.stageBar.changed": "Zmieniono etap",
+  "sales.stageBar.closed.lost": "Przegrana",
+  "sales.stageBar.closed.won": "Wygrana",
+  "sales.stageBar.closedLost": "Szansa przegrana",
+  "sales.stageBar.closedWon": "Szansa wygrana",
+  "sales.stageBar.completed": "Zakończony",
+  "sales.stageBar.confirmChange": "Przenieść szansę do etapu „{{stage}}”?",
+  "sales.stageBar.current": "Bieżący",
+  "sales.stageBar.lost": "Przegrana",
+  "sales.stageBar.upcoming": "Nadchodzący",
+  "sales.stageBar.won": "Wygrana",
   "sales.tax-rates.create": "Utwórz stawkę podatku",
   "sales.tax-rates.delete": "Usuń stawkę podatku",
   "sales.tax-rates.update": "Aktualizuj stawkę podatku",

package/src/modules/sales/workflows.ts

@@ -174,7 +174,7 @@ const orderApproval = defineWorkflow({
     triggerId: 'order_approval_trigger',
     name: 'Order Approval Trigger',
     description: 'Triggers when a new sales order is created',
-    eventPattern: 'sales.orders.created',
+    eventPattern: 'sales.order.created',
     config: { entityType: 'SalesOrder' },
     enabled: true,
     priority: 0,