@open-mercato/core 0.6.7-develop.6606.1.3b1ec9b1ea → 0.6.7-develop.6621.1.cdbe9dee3d

package/src/modules/integrations/api/[id]/health/route.ts

@@ -9,6 +9,7 @@ import {
   runIntegrationMutationGuardAfterSuccess,
   runIntegrationMutationGuards,
 } from '../../guards'
+import { resolveIntegrationsOrganizationId } from '../../../lib/organization-scope'
 
 const idParamsSchema = z.object({ id: z.string().min(1) })
 
@@ -23,7 +24,8 @@ export const openApi = {
 
 export async function POST(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {
   const auth = await getAuthFromRequest(req)
-  if (!auth?.tenantId || !auth.orgId) {
+  const organizationId = resolveIntegrationsOrganizationId(auth)
+  if (!auth?.tenantId || !organizationId) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
   }
 
@@ -46,7 +48,7 @@ export async function POST(req: Request, ctx: { params?: Promise<{ id?: string }
     container,
     {
       tenantId: auth.tenantId,
-      organizationId: auth.orgId,
+      organizationId,
       userId: auth.sub ?? '',
       resourceKind: 'integrations.integration',
       resourceId: integration.id,
@@ -65,12 +67,12 @@ export async function POST(req: Request, ctx: { params?: Promise<{ id?: string }
 
   const result = await healthService.runHealthCheck(
     integration.id,
-    { organizationId: auth.orgId as string, tenantId: auth.tenantId },
+    { organizationId: organizationId, tenantId: auth.tenantId },
   )
 
   await runIntegrationMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {
     tenantId: auth.tenantId,
-    organizationId: auth.orgId,
+    organizationId,
     userId: auth.sub ?? '',
     resourceKind: 'integrations.integration',
     resourceId: integration.id,

package/src/modules/integrations/api/[id]/route.ts

@@ -12,6 +12,7 @@ import {
   integrationApiRoutePaths,
   runIntegrationsReadBeforeInterceptors,
 } from '../umes-read'
+import { resolveIntegrationsOrganizationId } from '../../lib/organization-scope'
 
 const idParamsSchema = z.object({ id: z.string().min(1) })
 
@@ -26,7 +27,8 @@ export const openApi = {
 
 export async function GET(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {
   const auth = await getAuthFromRequest(req)
-  if (!auth?.tenantId || !auth.orgId) {
+  const organizationId = resolveIntegrationsOrganizationId(auth)
+  if (!auth?.tenantId || !organizationId) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
   }
 
@@ -57,7 +59,7 @@ export async function GET(req: Request, ctx: { params?: Promise<{ id?: string }>
   const credentialsService = container.resolve('integrationCredentialsService') as CredentialsService
   const stateService = container.resolve('integrationStateService') as IntegrationStateService
   const logService = container.resolve('integrationLogService') as IntegrationLogService
-  const scope = { organizationId: auth.orgId as string, tenantId: auth.tenantId }
+  const scope = { organizationId: organizationId, tenantId: auth.tenantId }
 
   const [credentials, credentialsUpdatedAt, state, analyticsMap] = await Promise.all([
     credentialsService.resolve(integration.id, scope).catch((err) => {

package/src/modules/integrations/api/[id]/state/route.ts

@@ -13,6 +13,7 @@ import {
   runIntegrationMutationGuardAfterSuccess,
   runIntegrationMutationGuards,
 } from '../../guards'
+import { resolveIntegrationsOrganizationId } from '../../../lib/organization-scope'
 
 const idParamsSchema = z.object({ id: z.string().min(1) })
 
@@ -27,7 +28,8 @@ export const openApi = {
 
 export async function PUT(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {
   const auth = await getAuthFromRequest(req)
-  if (!auth?.tenantId || !auth.orgId) {
+  const organizationId = resolveIntegrationsOrganizationId(auth)
+  if (!auth?.tenantId || !organizationId) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
   }
 
@@ -56,7 +58,7 @@ export async function PUT(req: Request, ctx: { params?: Promise<{ id?: string }>
     container,
     {
     tenantId: auth.tenantId,
-    organizationId: auth.orgId,
+    organizationId,
     userId: auth.sub ?? '',
     resourceKind: 'integrations.integration',
     resourceId: integration.id,
@@ -82,7 +84,7 @@ export async function PUT(req: Request, ctx: { params?: Promise<{ id?: string }>
   }
 
   const stateService = container.resolve('integrationStateService') as IntegrationStateService
-  const stateScope = { organizationId: auth.orgId as string, tenantId: auth.tenantId }
+  const stateScope = { organizationId: organizationId, tenantId: auth.tenantId }
 
   try {
     const current = await stateService.resolveState(integration.id, stateScope)
@@ -113,13 +115,13 @@ export async function PUT(req: Request, ctx: { params?: Promise<{ id?: string }>
     isEnabled: state.isEnabled,
     reauthRequired: state.reauthRequired,
     tenantId: auth.tenantId,
-    organizationId: auth.orgId,
+    organizationId,
     userId: auth.sub,
   })
 
   await runIntegrationMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {
       tenantId: auth.tenantId,
-      organizationId: auth.orgId,
+      organizationId,
       userId: auth.sub ?? '',
       resourceKind: 'integrations.integration',
       resourceId: integration.id,

package/src/modules/integrations/api/[id]/version/route.ts

@@ -14,6 +14,7 @@ import {
   runIntegrationMutationGuardAfterSuccess,
   runIntegrationMutationGuards,
 } from '../../guards'
+import { resolveIntegrationsOrganizationId } from '../../../lib/organization-scope'
 
 const idParamsSchema = z.object({ id: z.string().min(1) })
 
@@ -28,7 +29,8 @@ export const openApi = {
 
 export async function PUT(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {
   const auth = await getAuthFromRequest(req)
-  if (!auth?.tenantId || !auth.orgId) {
+  const organizationId = resolveIntegrationsOrganizationId(auth)
+  if (!auth?.tenantId || !organizationId) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
   }
 
@@ -73,7 +75,7 @@ export async function PUT(req: Request, ctx: { params?: Promise<{ id?: string }>
     container,
     {
       tenantId: auth.tenantId,
-      organizationId: auth.orgId,
+      organizationId,
       userId: auth.sub ?? '',
       resourceKind: 'integrations.integration',
       resourceId: integration.id,
@@ -102,7 +104,7 @@ export async function PUT(req: Request, ctx: { params?: Promise<{ id?: string }>
   }
 
   const stateService = container.resolve('integrationStateService') as IntegrationStateService
-  const scope = { organizationId: auth.orgId as string, tenantId: auth.tenantId }
+  const scope = { organizationId: organizationId, tenantId: auth.tenantId }
 
   const currentState = await stateService.resolveState(integration.id, scope)
   try {
@@ -127,13 +129,13 @@ export async function PUT(req: Request, ctx: { params?: Promise<{ id?: string }>
     previousVersion: before ?? defaultVersion,
     apiVersion: payloadData.apiVersion,
     tenantId: auth.tenantId,
-    organizationId: auth.orgId,
+    organizationId,
     userId: auth.sub,
   })
 
   await runIntegrationMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {
     tenantId: auth.tenantId,
-    organizationId: auth.orgId,
+    organizationId,
     userId: auth.sub ?? '',
     resourceKind: 'integrations.integration',
     resourceId: integration.id,

package/src/modules/integrations/api/logs/route.ts

@@ -8,6 +8,7 @@ import {
   integrationApiRoutePaths,
   runIntegrationsReadBeforeInterceptors,
 } from '../umes-read'
+import { resolveIntegrationsOrganizationId } from '../../lib/organization-scope'
 
 export const metadata = {
   GET: { requireAuth: true, requireFeatures: ['integrations.manage'] },
@@ -20,7 +21,8 @@ export const openApi = {
 
 export async function GET(req: Request) {
   const auth = await getAuthFromRequest(req)
-  if (!auth?.tenantId || !auth.orgId) {
+  const organizationId = resolveIntegrationsOrganizationId(auth)
+  if (!auth?.tenantId || !organizationId) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
   }
 
@@ -52,7 +54,7 @@ export async function GET(req: Request) {
   const logService = container.resolve('integrationLogService') as IntegrationLogService
 
   const { items, total } = await logService.query(parsed.data, {
-    organizationId: auth.orgId as string,
+    organizationId: organizationId,
     tenantId: auth.tenantId,
   })
 

package/src/modules/integrations/api/route.ts

@@ -14,6 +14,7 @@ import {
   integrationApiRoutePaths,
   runIntegrationsReadBeforeInterceptors,
 } from './umes-read'
+import { resolveIntegrationsOrganizationId } from '../lib/organization-scope'
 
 export const metadata = {
   GET: { requireAuth: true, requireFeatures: ['integrations.view'] },
@@ -46,7 +47,8 @@ function matchesSearchQuery(
 
 export async function GET(req: Request) {
   const auth = await getAuthFromRequest(req)
-  if (!auth?.tenantId || !auth.orgId) {
+  const organizationId = resolveIntegrationsOrganizationId(auth)
+  if (!auth?.tenantId || !organizationId) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
   }
 
@@ -71,7 +73,7 @@ export async function GET(req: Request) {
   const stateService = container.resolve('integrationStateService') as IntegrationStateService
   const logService = container.resolve('integrationLogService') as IntegrationLogService
 
-  const scope = { organizationId: auth.orgId as string, tenantId: auth.tenantId as string }
+  const scope = { organizationId: organizationId, tenantId: auth.tenantId as string }
   const searchNeedle = query.q?.trim().toLowerCase() ?? ''
 
   type ListRow = {

package/src/modules/integrations/api/umes-read.ts

@@ -4,6 +4,7 @@ import type { AwilixContainer } from 'awilix'
 import { runApiInterceptorsAfter, runApiInterceptorsBefore, type RunInterceptorsBeforeResult } from '@open-mercato/shared/lib/crud/interceptor-runner'
 import { applyResponseEnrichers, applyResponseEnricherToRecord } from '@open-mercato/shared/lib/crud/enricher-runner'
 import type { ApiInterceptorMethod, InterceptorRequest } from '@open-mercato/shared/lib/crud/api-interceptor'
+import { resolveIntegrationsOrganizationId } from '../lib/organization-scope'
 
 export const integrationApiRoutePaths = {
   list: 'integrations',
@@ -66,7 +67,7 @@ function mergeAdditiveBody(
 
 function getEnricherContext(input: ReadRouteContext) {
   return {
-    organizationId: input.auth.orgId as string,
+    organizationId: resolveIntegrationsOrganizationId(input.auth) as string,
     tenantId: input.auth.tenantId as string,
     userId: input.auth.sub ?? '',
     em: input.container.resolve('em') as EntityManager,

package/src/modules/integrations/i18n/de.json

@@ -1,80 +1,4 @@
 {
-  "example.mutationLifecycle.description": "Validation page for mutation guards, sync event subscribers, client-side event filtering, and command interceptors.",
-  "example.mutationLifecycle.hintHeading": "What should be visible and how it should work",
-  "example.mutationLifecycle.m1.createFailed": "Guard probe failed: expected 201, got {value}.",
-  "example.mutationLifecycle.m1.description": "Create a todo via the CRUD pipeline to verify the mutation guard registry evaluates the `example.todo-limit` guard on POST.",
-  "example.mutationLifecycle.m1.hint1": "1. Guard `example.todo-limit` targets `example.todo` on `create` operations with priority 50.",
-  "example.mutationLifecycle.m1.hint2": "2. Guard validates `organizationId` presence — creation fails with 422 if missing.",
-  "example.mutationLifecycle.m1.hint3": "3. Multiple guards run by priority order; first rejection stops the pipeline.",
-  "example.mutationLifecycle.m1.hint4": "4. Legacy `crudMutationGuardService` is automatically bridged as a guard with priority 0.",
-  "example.mutationLifecycle.m1.run": "Run guard probe",
-  "example.mutationLifecycle.m1.title": "Phase m1 — Mutation Guard Registry",
-  "example.mutationLifecycle.m2.createFailed": "Could not create todo for sync subscriber probe.",
-  "example.mutationLifecycle.m2.description": "Run a multi-step probe: create a todo (verify auto-default-priority), mark as done then try to revert (verify prevent-uncomplete blocks with 422), and delete (verify audit-delete fires).",
-  "example.mutationLifecycle.m2.hint1": "1. `auto-default-priority`: Injects `priority: 'normal'` when creating a todo without explicit priority (sync before-create).",
-  "example.mutationLifecycle.m2.hint2": "2. `prevent-uncomplete`: Blocks reverting completed todos to pending with 422 (sync before-update).",
-  "example.mutationLifecycle.m2.hint3": "3. `audit-delete`: Logs deletion audit trail to server console (sync after-delete, non-blocking).",
-  "example.mutationLifecycle.m2.hint4": "4. Sync subscribers run inside the CRUD pipeline, before/after the actual mutation — unlike async subscribers which run post-commit.",
-  "example.mutationLifecycle.m2.partial": "One or more sync subscriber probes failed. Review rows below.",
-  "example.mutationLifecycle.m2.probe.auditDelete.error": "Expected 200, got {value}.",
-  "example.mutationLifecycle.m2.probe.auditDelete.label": "audit-delete (after-delete)",
-  "example.mutationLifecycle.m2.probe.auditDelete.ok": "Todo deleted (200). Sync after-event example.todo.deleted fired — audit-delete subscriber logged to server console.",
-  "example.mutationLifecycle.m2.probe.defaultPriority.error": "Expected 201, got {value}.",
-  "example.mutationLifecycle.m2.probe.defaultPriority.label": "auto-default-priority (before-create)",
-  "example.mutationLifecycle.m2.probe.defaultPriority.ok": "Todo created (201). Sync before-event example.todo.creating fired — auto-default-priority subscriber injects priority if absent.",
-  "example.mutationLifecycle.m2.probe.preventUncomplete.error": "Expected 422 (blocked), got {value}.",
-  "example.mutationLifecycle.m2.probe.preventUncomplete.label": "prevent-uncomplete (before-update)",
-  "example.mutationLifecycle.m2.probe.preventUncomplete.markDoneFailed": "Failed to mark todo as done: status {value}.",
-  "example.mutationLifecycle.m2.probe.preventUncomplete.ok": "Revert blocked (422). Sync before-event example.todo.updating fired — prevent-uncomplete subscriber rejected the operation.",
-  "example.mutationLifecycle.m2.probe.skipped": "Skipped — no todo was created in probe 1.",
-  "example.mutationLifecycle.m2.run": "Run sync subscriber probe",
-  "example.mutationLifecycle.m2.title": "Phase m2 — Sync Event Subscribers",
-  "example.mutationLifecycle.m3.description": "Widget injection event handlers can now declare an operation filter to skip events for specific CRUD operations.",
-  "example.mutationLifecycle.m3.hint1": "1. Widgets can declare `eventHandlers.filter.operations` to skip specific CRUD operations (e.g., only fire on `update`).",
-  "example.mutationLifecycle.m3.hint2": "2. CrudForm now passes `operation` ('create' or 'update') in the injection context.",
-  "example.mutationLifecycle.m3.hint3": "3. Widgets without a filter continue to fire for all operations (backward compatible).",
-  "example.mutationLifecycle.m3.hint4": "4. Type: `WidgetInjectionEventFilter = { operations?: ('create' | 'update' | 'delete')[] }`",
-  "example.mutationLifecycle.m3.note": "The filter is a type-level extension. See Phase G page for CrudForm injection demo.",
-  "example.mutationLifecycle.m3.openPhaseG": "Open Phase G — CrudForm injection",
-  "example.mutationLifecycle.m3.title": "Phase m3 — Client-Side Event Filtering",
-  "example.mutationLifecycle.m4.description": "The `example.audit-logging` interceptor wraps all `customers.*` command bus operations with timing metadata.",
-  "example.mutationLifecycle.m4.hint1": "1. `example.audit-logging` intercepts all `customers.*` commands (wildcard pattern).",
-  "example.mutationLifecycle.m4.hint2": "2. `beforeExecute` stores `auditStartedAt` timestamp in metadata.",
-  "example.mutationLifecycle.m4.hint3": "3. `afterExecute` reads metadata and logs: `[example:audit] Command {id} completed in {ms}ms`.",
-  "example.mutationLifecycle.m4.hint4": "4. Pattern matching supports `*` (all), exact ID, and `prefix.*` (namespace wildcard).",
-  "example.mutationLifecycle.m4.hint5": "5. Interceptors run on both `execute()` and `undo()` code paths.",
-  "example.mutationLifecycle.m4.note": "Create or edit a customer, then check server console for the audit log entry.",
-  "example.mutationLifecycle.m4.openCustomers": "Open customers",
-  "example.mutationLifecycle.m4.title": "Phase m4 — Command Interceptors",
-  "example.mutationLifecycle.title": "UMES Phase M — Mutation Lifecycle",
-  "example.umes.queryExtensions.description": "Validation page for Phase N query engine extensions: enricher opt-in, surface-aware registry, sync query events, and scope guard re-application.",
-  "example.umes.queryExtensions.enrichers.description": "Registers three enrichers (API-only, query-enabled for all engines, basic-only) and probes `getEnrichersForEntity` with different surface selectors.",
-  "example.umes.queryExtensions.enrichers.hint1": "1. No selector / `api-response` surface: returns all 3 enrichers (backward compatible).",
-  "example.umes.queryExtensions.enrichers.hint2": "2. `query-engine` surface (no engine filter): returns 2 enrichers (query-enabled + basic-only).",
-  "example.umes.queryExtensions.enrichers.hint3": "3. `query-engine` + `basic` engine: returns 2 enrichers (query-enabled defaults to both, basic-only matches).",
-  "example.umes.queryExtensions.enrichers.hint4": "4. `query-engine` + `hybrid` engine: returns 1 enricher (only query-enabled, basic-only excluded).",
-  "example.umes.queryExtensions.enrichers.run": "Run enricher registry probe",
-  "example.umes.queryExtensions.enrichers.title": "N.1 Surface-Aware Enricher Registry",
-  "example.umes.queryExtensions.entityIds.description": "Validates `entityIdToEventEntity` which converts query engine format (`module:entity`) to event format (`module.entity`).",
-  "example.umes.queryExtensions.entityIds.hint1": "1. `customers:person` should convert to `customers.person`.",
-  "example.umes.queryExtensions.entityIds.hint2": "2. `catalog:product:variant` should convert to `catalog.product.variant` (multiple colons).",
-  "example.umes.queryExtensions.entityIds.hint3": "3. All conversions should show `ok: true`.",
-  "example.umes.queryExtensions.entityIds.run": "Run entity ID conversion probe",
-  "example.umes.queryExtensions.entityIds.title": "N.4 Entity ID Conversion",
-  "example.umes.queryExtensions.hintHeading": "What should be visible and how it should work",
-  "example.umes.queryExtensions.scopeGuards.description": "Demonstrates that `reapplyScopeGuards` restores tenant/org constraints after subscriber modifications while preserving other query options.",
-  "example.umes.queryExtensions.scopeGuards.hint1": "1. Tampered tenantId/organizationId should be restored to original values.",
-  "example.umes.queryExtensions.scopeGuards.hint2": "2. Non-scope fields (filters, withDeleted) should remain unchanged.",
-  "example.umes.queryExtensions.scopeGuards.hint3": "3. This ensures subscribers cannot bypass multi-tenant isolation.",
-  "example.umes.queryExtensions.scopeGuards.run": "Run scope guard probe",
-  "example.umes.queryExtensions.scopeGuards.title": "N.3 Scope Guard Re-application",
-  "example.umes.queryExtensions.subscribers.description": "Registers three sync subscribers (querying, queried, wildcard) and probes `collectQuerySubscribers` with different event IDs.",
-  "example.umes.queryExtensions.subscribers.hint1": "1. `example.todo.querying` should match 2 subscribers (exact + wildcard `example.*.querying`).",
-  "example.umes.queryExtensions.subscribers.hint2": "2. `example.todo.queried` should match 1 subscriber (exact match only).",
-  "example.umes.queryExtensions.subscribers.hint3": "3. `customers.person.querying` should match 0 subscribers (no cross-entity leakage).",
-  "example.umes.queryExtensions.subscribers.run": "Run subscriber collection probe",
-  "example.umes.queryExtensions.subscribers.title": "N.2 Sync Query Event Subscribers",
-  "example.umes.queryExtensions.title": "UMES Phase N — Query Engine Extensibility",
   "integrations.bundle.configureIntegration": "Konfigurieren",
   "integrations.bundle.integrationToggles": "Integrationen",
   "integrations.bundle.sharedCredentials": "Gemeinsame Zugangsdaten",

package/src/modules/integrations/i18n/en.json

@@ -1,80 +1,4 @@
 {
-  "example.mutationLifecycle.description": "Validation page for mutation guards, sync event subscribers, client-side event filtering, and command interceptors.",
-  "example.mutationLifecycle.hintHeading": "What should be visible and how it should work",
-  "example.mutationLifecycle.m1.createFailed": "Guard probe failed: expected 201, got {value}.",
-  "example.mutationLifecycle.m1.description": "Create a todo via the CRUD pipeline to verify the mutation guard registry evaluates the `example.todo-limit` guard on POST.",
-  "example.mutationLifecycle.m1.hint1": "1. Guard `example.todo-limit` targets `example.todo` on `create` operations with priority 50.",
-  "example.mutationLifecycle.m1.hint2": "2. Guard validates `organizationId` presence — creation fails with 422 if missing.",
-  "example.mutationLifecycle.m1.hint3": "3. Multiple guards run by priority order; first rejection stops the pipeline.",
-  "example.mutationLifecycle.m1.hint4": "4. Legacy `crudMutationGuardService` is automatically bridged as a guard with priority 0.",
-  "example.mutationLifecycle.m1.run": "Run guard probe",
-  "example.mutationLifecycle.m1.title": "Phase m1 — Mutation Guard Registry",
-  "example.mutationLifecycle.m2.createFailed": "Could not create todo for sync subscriber probe.",
-  "example.mutationLifecycle.m2.description": "Run a multi-step probe: create a todo (verify auto-default-priority), mark as done then try to revert (verify prevent-uncomplete blocks with 422), and delete (verify audit-delete fires).",
-  "example.mutationLifecycle.m2.hint1": "1. `auto-default-priority`: Injects `priority: 'normal'` when creating a todo without explicit priority (sync before-create).",
-  "example.mutationLifecycle.m2.hint2": "2. `prevent-uncomplete`: Blocks reverting completed todos to pending with 422 (sync before-update).",
-  "example.mutationLifecycle.m2.hint3": "3. `audit-delete`: Logs deletion audit trail to server console (sync after-delete, non-blocking).",
-  "example.mutationLifecycle.m2.hint4": "4. Sync subscribers run inside the CRUD pipeline, before/after the actual mutation — unlike async subscribers which run post-commit.",
-  "example.mutationLifecycle.m2.partial": "One or more sync subscriber probes failed. Review rows below.",
-  "example.mutationLifecycle.m2.probe.auditDelete.error": "Expected 200, got {value}.",
-  "example.mutationLifecycle.m2.probe.auditDelete.label": "audit-delete (after-delete)",
-  "example.mutationLifecycle.m2.probe.auditDelete.ok": "Todo deleted (200). Sync after-event example.todo.deleted fired — audit-delete subscriber logged to server console.",
-  "example.mutationLifecycle.m2.probe.defaultPriority.error": "Expected 201, got {value}.",
-  "example.mutationLifecycle.m2.probe.defaultPriority.label": "auto-default-priority (before-create)",
-  "example.mutationLifecycle.m2.probe.defaultPriority.ok": "Todo created (201). Sync before-event example.todo.creating fired — auto-default-priority subscriber injects priority if absent.",
-  "example.mutationLifecycle.m2.probe.preventUncomplete.error": "Expected 422 (blocked), got {value}.",
-  "example.mutationLifecycle.m2.probe.preventUncomplete.label": "prevent-uncomplete (before-update)",
-  "example.mutationLifecycle.m2.probe.preventUncomplete.markDoneFailed": "Failed to mark todo as done: status {value}.",
-  "example.mutationLifecycle.m2.probe.preventUncomplete.ok": "Revert blocked (422). Sync before-event example.todo.updating fired — prevent-uncomplete subscriber rejected the operation.",
-  "example.mutationLifecycle.m2.probe.skipped": "Skipped — no todo was created in probe 1.",
-  "example.mutationLifecycle.m2.run": "Run sync subscriber probe",
-  "example.mutationLifecycle.m2.title": "Phase m2 — Sync Event Subscribers",
-  "example.mutationLifecycle.m3.description": "Widget injection event handlers can now declare an operation filter to skip events for specific CRUD operations.",
-  "example.mutationLifecycle.m3.hint1": "1. Widgets can declare `eventHandlers.filter.operations` to skip specific CRUD operations (e.g., only fire on `update`).",
-  "example.mutationLifecycle.m3.hint2": "2. CrudForm now passes `operation` ('create' or 'update') in the injection context.",
-  "example.mutationLifecycle.m3.hint3": "3. Widgets without a filter continue to fire for all operations (backward compatible).",
-  "example.mutationLifecycle.m3.hint4": "4. Type: `WidgetInjectionEventFilter = { operations?: ('create' | 'update' | 'delete')[] }`",
-  "example.mutationLifecycle.m3.note": "The filter is a type-level extension. See Phase G page for CrudForm injection demo.",
-  "example.mutationLifecycle.m3.openPhaseG": "Open Phase G — CrudForm injection",
-  "example.mutationLifecycle.m3.title": "Phase m3 — Client-Side Event Filtering",
-  "example.mutationLifecycle.m4.description": "The `example.audit-logging` interceptor wraps all `customers.*` command bus operations with timing metadata.",
-  "example.mutationLifecycle.m4.hint1": "1. `example.audit-logging` intercepts all `customers.*` commands (wildcard pattern).",
-  "example.mutationLifecycle.m4.hint2": "2. `beforeExecute` stores `auditStartedAt` timestamp in metadata.",
-  "example.mutationLifecycle.m4.hint3": "3. `afterExecute` reads metadata and logs: `[example:audit] Command {id} completed in {ms}ms`.",
-  "example.mutationLifecycle.m4.hint4": "4. Pattern matching supports `*` (all), exact ID, and `prefix.*` (namespace wildcard).",
-  "example.mutationLifecycle.m4.hint5": "5. Interceptors run on both `execute()` and `undo()` code paths.",
-  "example.mutationLifecycle.m4.note": "Create or edit a customer, then check server console for the audit log entry.",
-  "example.mutationLifecycle.m4.openCustomers": "Open customers",
-  "example.mutationLifecycle.m4.title": "Phase m4 — Command Interceptors",
-  "example.mutationLifecycle.title": "UMES Phase M — Mutation Lifecycle",
-  "example.umes.queryExtensions.description": "Validation page for Phase N query engine extensions: enricher opt-in, surface-aware registry, sync query events, and scope guard re-application.",
-  "example.umes.queryExtensions.enrichers.description": "Registers three enrichers (API-only, query-enabled for all engines, basic-only) and probes `getEnrichersForEntity` with different surface selectors.",
-  "example.umes.queryExtensions.enrichers.hint1": "1. No selector / `api-response` surface: returns all 3 enrichers (backward compatible).",
-  "example.umes.queryExtensions.enrichers.hint2": "2. `query-engine` surface (no engine filter): returns 2 enrichers (query-enabled + basic-only).",
-  "example.umes.queryExtensions.enrichers.hint3": "3. `query-engine` + `basic` engine: returns 2 enrichers (query-enabled defaults to both, basic-only matches).",
-  "example.umes.queryExtensions.enrichers.hint4": "4. `query-engine` + `hybrid` engine: returns 1 enricher (only query-enabled, basic-only excluded).",
-  "example.umes.queryExtensions.enrichers.run": "Run enricher registry probe",
-  "example.umes.queryExtensions.enrichers.title": "N.1 Surface-Aware Enricher Registry",
-  "example.umes.queryExtensions.entityIds.description": "Validates `entityIdToEventEntity` which converts query engine format (`module:entity`) to event format (`module.entity`).",
-  "example.umes.queryExtensions.entityIds.hint1": "1. `customers:person` should convert to `customers.person`.",
-  "example.umes.queryExtensions.entityIds.hint2": "2. `catalog:product:variant` should convert to `catalog.product.variant` (multiple colons).",
-  "example.umes.queryExtensions.entityIds.hint3": "3. All conversions should show `ok: true`.",
-  "example.umes.queryExtensions.entityIds.run": "Run entity ID conversion probe",
-  "example.umes.queryExtensions.entityIds.title": "N.4 Entity ID Conversion",
-  "example.umes.queryExtensions.hintHeading": "What should be visible and how it should work",
-  "example.umes.queryExtensions.scopeGuards.description": "Demonstrates that `reapplyScopeGuards` restores tenant/org constraints after subscriber modifications while preserving other query options.",
-  "example.umes.queryExtensions.scopeGuards.hint1": "1. Tampered tenantId/organizationId should be restored to original values.",
-  "example.umes.queryExtensions.scopeGuards.hint2": "2. Non-scope fields (filters, withDeleted) should remain unchanged.",
-  "example.umes.queryExtensions.scopeGuards.hint3": "3. This ensures subscribers cannot bypass multi-tenant isolation.",
-  "example.umes.queryExtensions.scopeGuards.run": "Run scope guard probe",
-  "example.umes.queryExtensions.scopeGuards.title": "N.3 Scope Guard Re-application",
-  "example.umes.queryExtensions.subscribers.description": "Registers three sync subscribers (querying, queried, wildcard) and probes `collectQuerySubscribers` with different event IDs.",
-  "example.umes.queryExtensions.subscribers.hint1": "1. `example.todo.querying` should match 2 subscribers (exact + wildcard `example.*.querying`).",
-  "example.umes.queryExtensions.subscribers.hint2": "2. `example.todo.queried` should match 1 subscriber (exact match only).",
-  "example.umes.queryExtensions.subscribers.hint3": "3. `customers.person.querying` should match 0 subscribers (no cross-entity leakage).",
-  "example.umes.queryExtensions.subscribers.run": "Run subscriber collection probe",
-  "example.umes.queryExtensions.subscribers.title": "N.2 Sync Query Event Subscribers",
-  "example.umes.queryExtensions.title": "UMES Phase N — Query Engine Extensibility",
   "integrations.bundle.configureIntegration": "Configure",
   "integrations.bundle.integrationToggles": "Integrations",
   "integrations.bundle.sharedCredentials": "Shared Credentials",

package/src/modules/integrations/i18n/es.json

@@ -1,80 +1,4 @@
 {
-  "example.mutationLifecycle.description": "Validation page for mutation guards, sync event subscribers, client-side event filtering, and command interceptors.",
-  "example.mutationLifecycle.hintHeading": "What should be visible and how it should work",
-  "example.mutationLifecycle.m1.createFailed": "Guard probe failed: expected 201, got {value}.",
-  "example.mutationLifecycle.m1.description": "Create a todo via the CRUD pipeline to verify the mutation guard registry evaluates the `example.todo-limit` guard on POST.",
-  "example.mutationLifecycle.m1.hint1": "1. Guard `example.todo-limit` targets `example.todo` on `create` operations with priority 50.",
-  "example.mutationLifecycle.m1.hint2": "2. Guard validates `organizationId` presence — creation fails with 422 if missing.",
-  "example.mutationLifecycle.m1.hint3": "3. Multiple guards run by priority order; first rejection stops the pipeline.",
-  "example.mutationLifecycle.m1.hint4": "4. Legacy `crudMutationGuardService` is automatically bridged as a guard with priority 0.",
-  "example.mutationLifecycle.m1.run": "Run guard probe",
-  "example.mutationLifecycle.m1.title": "Phase m1 — Mutation Guard Registry",
-  "example.mutationLifecycle.m2.createFailed": "Could not create todo for sync subscriber probe.",
-  "example.mutationLifecycle.m2.description": "Run a multi-step probe: create a todo (verify auto-default-priority), mark as done then try to revert (verify prevent-uncomplete blocks with 422), and delete (verify audit-delete fires).",
-  "example.mutationLifecycle.m2.hint1": "1. `auto-default-priority`: Injects `priority: 'normal'` when creating a todo without explicit priority (sync before-create).",
-  "example.mutationLifecycle.m2.hint2": "2. `prevent-uncomplete`: Blocks reverting completed todos to pending with 422 (sync before-update).",
-  "example.mutationLifecycle.m2.hint3": "3. `audit-delete`: Logs deletion audit trail to server console (sync after-delete, non-blocking).",
-  "example.mutationLifecycle.m2.hint4": "4. Sync subscribers run inside the CRUD pipeline, before/after the actual mutation — unlike async subscribers which run post-commit.",
-  "example.mutationLifecycle.m2.partial": "One or more sync subscriber probes failed. Review rows below.",
-  "example.mutationLifecycle.m2.probe.auditDelete.error": "Expected 200, got {value}.",
-  "example.mutationLifecycle.m2.probe.auditDelete.label": "audit-delete (after-delete)",
-  "example.mutationLifecycle.m2.probe.auditDelete.ok": "Todo deleted (200). Sync after-event example.todo.deleted fired — audit-delete subscriber logged to server console.",
-  "example.mutationLifecycle.m2.probe.defaultPriority.error": "Expected 201, got {value}.",
-  "example.mutationLifecycle.m2.probe.defaultPriority.label": "auto-default-priority (before-create)",
-  "example.mutationLifecycle.m2.probe.defaultPriority.ok": "Todo created (201). Sync before-event example.todo.creating fired — auto-default-priority subscriber injects priority if absent.",
-  "example.mutationLifecycle.m2.probe.preventUncomplete.error": "Expected 422 (blocked), got {value}.",
-  "example.mutationLifecycle.m2.probe.preventUncomplete.label": "prevent-uncomplete (before-update)",
-  "example.mutationLifecycle.m2.probe.preventUncomplete.markDoneFailed": "Failed to mark todo as done: status {value}.",
-  "example.mutationLifecycle.m2.probe.preventUncomplete.ok": "Revert blocked (422). Sync before-event example.todo.updating fired — prevent-uncomplete subscriber rejected the operation.",
-  "example.mutationLifecycle.m2.probe.skipped": "Skipped — no todo was created in probe 1.",
-  "example.mutationLifecycle.m2.run": "Run sync subscriber probe",
-  "example.mutationLifecycle.m2.title": "Phase m2 — Sync Event Subscribers",
-  "example.mutationLifecycle.m3.description": "Widget injection event handlers can now declare an operation filter to skip events for specific CRUD operations.",
-  "example.mutationLifecycle.m3.hint1": "1. Widgets can declare `eventHandlers.filter.operations` to skip specific CRUD operations (e.g., only fire on `update`).",
-  "example.mutationLifecycle.m3.hint2": "2. CrudForm now passes `operation` ('create' or 'update') in the injection context.",
-  "example.mutationLifecycle.m3.hint3": "3. Widgets without a filter continue to fire for all operations (backward compatible).",
-  "example.mutationLifecycle.m3.hint4": "4. Type: `WidgetInjectionEventFilter = { operations?: ('create' | 'update' | 'delete')[] }`",
-  "example.mutationLifecycle.m3.note": "The filter is a type-level extension. See Phase G page for CrudForm injection demo.",
-  "example.mutationLifecycle.m3.openPhaseG": "Open Phase G — CrudForm injection",
-  "example.mutationLifecycle.m3.title": "Phase m3 — Client-Side Event Filtering",
-  "example.mutationLifecycle.m4.description": "The `example.audit-logging` interceptor wraps all `customers.*` command bus operations with timing metadata.",
-  "example.mutationLifecycle.m4.hint1": "1. `example.audit-logging` intercepts all `customers.*` commands (wildcard pattern).",
-  "example.mutationLifecycle.m4.hint2": "2. `beforeExecute` stores `auditStartedAt` timestamp in metadata.",
-  "example.mutationLifecycle.m4.hint3": "3. `afterExecute` reads metadata and logs: `[example:audit] Command {id} completed in {ms}ms`.",
-  "example.mutationLifecycle.m4.hint4": "4. Pattern matching supports `*` (all), exact ID, and `prefix.*` (namespace wildcard).",
-  "example.mutationLifecycle.m4.hint5": "5. Interceptors run on both `execute()` and `undo()` code paths.",
-  "example.mutationLifecycle.m4.note": "Create or edit a customer, then check server console for the audit log entry.",
-  "example.mutationLifecycle.m4.openCustomers": "Open customers",
-  "example.mutationLifecycle.m4.title": "Phase m4 — Command Interceptors",
-  "example.mutationLifecycle.title": "UMES Phase M — Mutation Lifecycle",
-  "example.umes.queryExtensions.description": "Validation page for Phase N query engine extensions: enricher opt-in, surface-aware registry, sync query events, and scope guard re-application.",
-  "example.umes.queryExtensions.enrichers.description": "Registers three enrichers (API-only, query-enabled for all engines, basic-only) and probes `getEnrichersForEntity` with different surface selectors.",
-  "example.umes.queryExtensions.enrichers.hint1": "1. No selector / `api-response` surface: returns all 3 enrichers (backward compatible).",
-  "example.umes.queryExtensions.enrichers.hint2": "2. `query-engine` surface (no engine filter): returns 2 enrichers (query-enabled + basic-only).",
-  "example.umes.queryExtensions.enrichers.hint3": "3. `query-engine` + `basic` engine: returns 2 enrichers (query-enabled defaults to both, basic-only matches).",
-  "example.umes.queryExtensions.enrichers.hint4": "4. `query-engine` + `hybrid` engine: returns 1 enricher (only query-enabled, basic-only excluded).",
-  "example.umes.queryExtensions.enrichers.run": "Run enricher registry probe",
-  "example.umes.queryExtensions.enrichers.title": "N.1 Surface-Aware Enricher Registry",
-  "example.umes.queryExtensions.entityIds.description": "Validates `entityIdToEventEntity` which converts query engine format (`module:entity`) to event format (`module.entity`).",
-  "example.umes.queryExtensions.entityIds.hint1": "1. `customers:person` should convert to `customers.person`.",
-  "example.umes.queryExtensions.entityIds.hint2": "2. `catalog:product:variant` should convert to `catalog.product.variant` (multiple colons).",
-  "example.umes.queryExtensions.entityIds.hint3": "3. All conversions should show `ok: true`.",
-  "example.umes.queryExtensions.entityIds.run": "Run entity ID conversion probe",
-  "example.umes.queryExtensions.entityIds.title": "N.4 Entity ID Conversion",
-  "example.umes.queryExtensions.hintHeading": "What should be visible and how it should work",
-  "example.umes.queryExtensions.scopeGuards.description": "Demonstrates that `reapplyScopeGuards` restores tenant/org constraints after subscriber modifications while preserving other query options.",
-  "example.umes.queryExtensions.scopeGuards.hint1": "1. Tampered tenantId/organizationId should be restored to original values.",
-  "example.umes.queryExtensions.scopeGuards.hint2": "2. Non-scope fields (filters, withDeleted) should remain unchanged.",
-  "example.umes.queryExtensions.scopeGuards.hint3": "3. This ensures subscribers cannot bypass multi-tenant isolation.",
-  "example.umes.queryExtensions.scopeGuards.run": "Run scope guard probe",
-  "example.umes.queryExtensions.scopeGuards.title": "N.3 Scope Guard Re-application",
-  "example.umes.queryExtensions.subscribers.description": "Registers three sync subscribers (querying, queried, wildcard) and probes `collectQuerySubscribers` with different event IDs.",
-  "example.umes.queryExtensions.subscribers.hint1": "1. `example.todo.querying` should match 2 subscribers (exact + wildcard `example.*.querying`).",
-  "example.umes.queryExtensions.subscribers.hint2": "2. `example.todo.queried` should match 1 subscriber (exact match only).",
-  "example.umes.queryExtensions.subscribers.hint3": "3. `customers.person.querying` should match 0 subscribers (no cross-entity leakage).",
-  "example.umes.queryExtensions.subscribers.run": "Run subscriber collection probe",
-  "example.umes.queryExtensions.subscribers.title": "N.2 Sync Query Event Subscribers",
-  "example.umes.queryExtensions.title": "UMES Phase N — Query Engine Extensibility",
   "integrations.bundle.configureIntegration": "Configurar",
   "integrations.bundle.integrationToggles": "Integraciones",
   "integrations.bundle.sharedCredentials": "Credenciales compartidas",

package/src/modules/integrations/i18n/pl.json

@@ -1,80 +1,4 @@
 {
-  "example.mutationLifecycle.description": "Validation page for mutation guards, sync event subscribers, client-side event filtering, and command interceptors.",
-  "example.mutationLifecycle.hintHeading": "What should be visible and how it should work",
-  "example.mutationLifecycle.m1.createFailed": "Guard probe failed: expected 201, got {value}.",
-  "example.mutationLifecycle.m1.description": "Create a todo via the CRUD pipeline to verify the mutation guard registry evaluates the `example.todo-limit` guard on POST.",
-  "example.mutationLifecycle.m1.hint1": "1. Guard `example.todo-limit` targets `example.todo` on `create` operations with priority 50.",
-  "example.mutationLifecycle.m1.hint2": "2. Guard validates `organizationId` presence — creation fails with 422 if missing.",
-  "example.mutationLifecycle.m1.hint3": "3. Multiple guards run by priority order; first rejection stops the pipeline.",
-  "example.mutationLifecycle.m1.hint4": "4. Legacy `crudMutationGuardService` is automatically bridged as a guard with priority 0.",
-  "example.mutationLifecycle.m1.run": "Run guard probe",
-  "example.mutationLifecycle.m1.title": "Phase m1 — Mutation Guard Registry",
-  "example.mutationLifecycle.m2.createFailed": "Could not create todo for sync subscriber probe.",
-  "example.mutationLifecycle.m2.description": "Run a multi-step probe: create a todo (verify auto-default-priority), mark as done then try to revert (verify prevent-uncomplete blocks with 422), and delete (verify audit-delete fires).",
-  "example.mutationLifecycle.m2.hint1": "1. `auto-default-priority`: Injects `priority: 'normal'` when creating a todo without explicit priority (sync before-create).",
-  "example.mutationLifecycle.m2.hint2": "2. `prevent-uncomplete`: Blocks reverting completed todos to pending with 422 (sync before-update).",
-  "example.mutationLifecycle.m2.hint3": "3. `audit-delete`: Logs deletion audit trail to server console (sync after-delete, non-blocking).",
-  "example.mutationLifecycle.m2.hint4": "4. Sync subscribers run inside the CRUD pipeline, before/after the actual mutation — unlike async subscribers which run post-commit.",
-  "example.mutationLifecycle.m2.partial": "One or more sync subscriber probes failed. Review rows below.",
-  "example.mutationLifecycle.m2.probe.auditDelete.error": "Expected 200, got {value}.",
-  "example.mutationLifecycle.m2.probe.auditDelete.label": "audit-delete (after-delete)",
-  "example.mutationLifecycle.m2.probe.auditDelete.ok": "Todo deleted (200). Sync after-event example.todo.deleted fired — audit-delete subscriber logged to server console.",
-  "example.mutationLifecycle.m2.probe.defaultPriority.error": "Expected 201, got {value}.",
-  "example.mutationLifecycle.m2.probe.defaultPriority.label": "auto-default-priority (before-create)",
-  "example.mutationLifecycle.m2.probe.defaultPriority.ok": "Todo created (201). Sync before-event example.todo.creating fired — auto-default-priority subscriber injects priority if absent.",
-  "example.mutationLifecycle.m2.probe.preventUncomplete.error": "Expected 422 (blocked), got {value}.",
-  "example.mutationLifecycle.m2.probe.preventUncomplete.label": "prevent-uncomplete (before-update)",
-  "example.mutationLifecycle.m2.probe.preventUncomplete.markDoneFailed": "Failed to mark todo as done: status {value}.",
-  "example.mutationLifecycle.m2.probe.preventUncomplete.ok": "Revert blocked (422). Sync before-event example.todo.updating fired — prevent-uncomplete subscriber rejected the operation.",
-  "example.mutationLifecycle.m2.probe.skipped": "Skipped — no todo was created in probe 1.",
-  "example.mutationLifecycle.m2.run": "Run sync subscriber probe",
-  "example.mutationLifecycle.m2.title": "Phase m2 — Sync Event Subscribers",
-  "example.mutationLifecycle.m3.description": "Widget injection event handlers can now declare an operation filter to skip events for specific CRUD operations.",
-  "example.mutationLifecycle.m3.hint1": "1. Widgets can declare `eventHandlers.filter.operations` to skip specific CRUD operations (e.g., only fire on `update`).",
-  "example.mutationLifecycle.m3.hint2": "2. CrudForm now passes `operation` ('create' or 'update') in the injection context.",
-  "example.mutationLifecycle.m3.hint3": "3. Widgets without a filter continue to fire for all operations (backward compatible).",
-  "example.mutationLifecycle.m3.hint4": "4. Type: `WidgetInjectionEventFilter = { operations?: ('create' | 'update' | 'delete')[] }`",
-  "example.mutationLifecycle.m3.note": "The filter is a type-level extension. See Phase G page for CrudForm injection demo.",
-  "example.mutationLifecycle.m3.openPhaseG": "Open Phase G — CrudForm injection",
-  "example.mutationLifecycle.m3.title": "Phase m3 — Client-Side Event Filtering",
-  "example.mutationLifecycle.m4.description": "The `example.audit-logging` interceptor wraps all `customers.*` command bus operations with timing metadata.",
-  "example.mutationLifecycle.m4.hint1": "1. `example.audit-logging` intercepts all `customers.*` commands (wildcard pattern).",
-  "example.mutationLifecycle.m4.hint2": "2. `beforeExecute` stores `auditStartedAt` timestamp in metadata.",
-  "example.mutationLifecycle.m4.hint3": "3. `afterExecute` reads metadata and logs: `[example:audit] Command {id} completed in {ms}ms`.",
-  "example.mutationLifecycle.m4.hint4": "4. Pattern matching supports `*` (all), exact ID, and `prefix.*` (namespace wildcard).",
-  "example.mutationLifecycle.m4.hint5": "5. Interceptors run on both `execute()` and `undo()` code paths.",
-  "example.mutationLifecycle.m4.note": "Create or edit a customer, then check server console for the audit log entry.",
-  "example.mutationLifecycle.m4.openCustomers": "Open customers",
-  "example.mutationLifecycle.m4.title": "Phase m4 — Command Interceptors",
-  "example.mutationLifecycle.title": "UMES Phase M — Mutation Lifecycle",
-  "example.umes.queryExtensions.description": "Validation page for Phase N query engine extensions: enricher opt-in, surface-aware registry, sync query events, and scope guard re-application.",
-  "example.umes.queryExtensions.enrichers.description": "Registers three enrichers (API-only, query-enabled for all engines, basic-only) and probes `getEnrichersForEntity` with different surface selectors.",
-  "example.umes.queryExtensions.enrichers.hint1": "1. No selector / `api-response` surface: returns all 3 enrichers (backward compatible).",
-  "example.umes.queryExtensions.enrichers.hint2": "2. `query-engine` surface (no engine filter): returns 2 enrichers (query-enabled + basic-only).",
-  "example.umes.queryExtensions.enrichers.hint3": "3. `query-engine` + `basic` engine: returns 2 enrichers (query-enabled defaults to both, basic-only matches).",
-  "example.umes.queryExtensions.enrichers.hint4": "4. `query-engine` + `hybrid` engine: returns 1 enricher (only query-enabled, basic-only excluded).",
-  "example.umes.queryExtensions.enrichers.run": "Run enricher registry probe",
-  "example.umes.queryExtensions.enrichers.title": "N.1 Surface-Aware Enricher Registry",
-  "example.umes.queryExtensions.entityIds.description": "Validates `entityIdToEventEntity` which converts query engine format (`module:entity`) to event format (`module.entity`).",
-  "example.umes.queryExtensions.entityIds.hint1": "1. `customers:person` should convert to `customers.person`.",
-  "example.umes.queryExtensions.entityIds.hint2": "2. `catalog:product:variant` should convert to `catalog.product.variant` (multiple colons).",
-  "example.umes.queryExtensions.entityIds.hint3": "3. All conversions should show `ok: true`.",
-  "example.umes.queryExtensions.entityIds.run": "Run entity ID conversion probe",
-  "example.umes.queryExtensions.entityIds.title": "N.4 Entity ID Conversion",
-  "example.umes.queryExtensions.hintHeading": "What should be visible and how it should work",
-  "example.umes.queryExtensions.scopeGuards.description": "Demonstrates that `reapplyScopeGuards` restores tenant/org constraints after subscriber modifications while preserving other query options.",
-  "example.umes.queryExtensions.scopeGuards.hint1": "1. Tampered tenantId/organizationId should be restored to original values.",
-  "example.umes.queryExtensions.scopeGuards.hint2": "2. Non-scope fields (filters, withDeleted) should remain unchanged.",
-  "example.umes.queryExtensions.scopeGuards.hint3": "3. This ensures subscribers cannot bypass multi-tenant isolation.",
-  "example.umes.queryExtensions.scopeGuards.run": "Run scope guard probe",
-  "example.umes.queryExtensions.scopeGuards.title": "N.3 Scope Guard Re-application",
-  "example.umes.queryExtensions.subscribers.description": "Registers three sync subscribers (querying, queried, wildcard) and probes `collectQuerySubscribers` with different event IDs.",
-  "example.umes.queryExtensions.subscribers.hint1": "1. `example.todo.querying` should match 2 subscribers (exact + wildcard `example.*.querying`).",
-  "example.umes.queryExtensions.subscribers.hint2": "2. `example.todo.queried` should match 1 subscriber (exact match only).",
-  "example.umes.queryExtensions.subscribers.hint3": "3. `customers.person.querying` should match 0 subscribers (no cross-entity leakage).",
-  "example.umes.queryExtensions.subscribers.run": "Run subscriber collection probe",
-  "example.umes.queryExtensions.subscribers.title": "N.2 Sync Query Event Subscribers",
-  "example.umes.queryExtensions.title": "UMES Phase N — Query Engine Extensibility",
   "integrations.bundle.configureIntegration": "Konfiguruj",
   "integrations.bundle.integrationToggles": "Integracje",
   "integrations.bundle.sharedCredentials": "Współdzielone dane",

package/src/modules/integrations/lib/organization-scope.ts

@@ -0,0 +1,27 @@
+type OrganizationScopedAuth = {
+  orgId?: string | null
+  actorOrgId?: unknown
+} | null | undefined
+
+/**
+ * Resolves the organization an integrations request is scoped to.
+ *
+ * Integrations are configured per organization — `integration_credentials` and
+ * `integration_states` both require a non-null `organization_id` — so there is no
+ * meaningful "all organizations" view of this module. When an operator selects that
+ * option the super-admin cookie override clears `auth.orgId` and preserves the actor's
+ * own organization in `actorOrgId`; fall back to it so the module keeps showing the
+ * operator's own configuration instead of failing.
+ *
+ * Answering 401 for that case is not merely wrong but self-perpetuating: `apiFetch`
+ * reads 401 as an expired session and redirects through `/api/auth/session/refresh`,
+ * which succeeds and returns to the same page, reloading forever.
+ */
+export function resolveIntegrationsOrganizationId(auth: OrganizationScopedAuth): string | null {
+  if (!auth) return null
+  const selected = auth.orgId
+  if (typeof selected === 'string' && selected.trim().length > 0) return selected
+  const actorOrgId = auth.actorOrgId
+  if (typeof actorOrgId === 'string' && actorOrgId.trim().length > 0) return actorOrgId
+  return null
+}