@open-mercato/core 0.6.7-develop.6606.1.3b1ec9b1ea → 0.6.7-develop.6622.1.4d29ddaca4

package/src/modules/catalog/api/categories/route.ts

@@ -6,6 +6,7 @@ import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'
 import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
 import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
 import { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'
+import { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'
 import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
 import { loadCustomFieldValues } from '@open-mercato/shared/lib/crud/custom-fields'
 import { E } from '#generated/entities.ids.generated'
@@ -100,7 +101,7 @@ type ManageCategoryRow = {
   descendantCount: number
   isActive: boolean
   updatedAt: string | null
-  organizationId: string
+  organizationId: string | null
   tenantId: string
 }
 
@@ -159,20 +160,17 @@ export async function GET(req: Request) {
     )
   }
 
-  const allowed = scope?.filterIds ?? scope?.allowedIds ?? (auth.orgId ? [auth.orgId] : null)
-  const preferredOrg = scope?.selectedId ?? auth.orgId ?? null
-  const organizationId = preferredOrg ?? (Array.isArray(allowed) && allowed.length ? allowed[0]! : null)
-
-  if (!organizationId || (Array.isArray(allowed) && allowed.length && !allowed.includes(organizationId))) {
-    return NextResponse.json(
-      { items: [], error: translate('catalog.errors.organization_required', 'Organization context is required.') },
-      { status: 400 }
-    )
-  }
+  // Scope by the caller's visible organizations. Under "All organizations"
+  // (super-admin) `where` is empty, so the tree scopes by tenant only instead
+  // of 400-ing; restricted callers get their `filterIds` `$in` guard.
+  const orgFilter = resolveOrganizationScopeFilter(scope, auth)
+  // Caller's resolved org echoed at the top level; null under "All organizations"
+  // where the tree spans orgs and each row carries its own org instead.
+  const responseOrganizationId = orgFilter.rbacOrganizationId ?? null
 
   const categories = await em.find(
     CatalogProductCategory,
-    { organizationId, tenantId, deletedAt: null },
+    { ...orgFilter.where, tenantId, deletedAt: null },
     { orderBy: { name: 'ASC' } }
   )
   const categoryMap = new Map(categories.map((cat) => [String(cat.id), cat]))
@@ -233,7 +231,7 @@ export async function GET(req: Request) {
   const organizationIdByRecord: Record<string, string | null> = {}
   for (const id of recordIds) {
     tenantIdByRecord[id] = tenantId
-    organizationIdByRecord[id] = organizationId
+    organizationIdByRecord[id] = categoryMap.get(id)?.organizationId ?? null
   }
   const cfValues = recordIds.length
     ? await loadCustomFieldValues({
@@ -264,7 +262,7 @@ export async function GET(req: Request) {
       descendantCount: node.descendantIds.length,
       isActive: node.isActive,
       updatedAt: category?.updatedAt ? new Date(category.updatedAt).toISOString() : null,
-      organizationId,
+      organizationId: category?.organizationId ?? null,
       tenantId,
       ...(cfValues[recordId] ?? {}),
     }
@@ -277,7 +275,7 @@ export async function GET(req: Request) {
     page,
     pageSize,
     totalPages,
-    organizationId,
+    organizationId: responseOrganizationId,
     tenantId,
   })
 }
@@ -300,7 +298,7 @@ const categoryListItemSchema = z.object({
   descendantCount: z.number(),
   isActive: z.boolean(),
   updatedAt: z.string().nullable().optional(),
-  organizationId: z.string().uuid(),
+  organizationId: z.string().uuid().nullable(),
   tenantId: z.string().uuid(),
 })
 

package/src/modules/catalog/api/tags/route.ts

@@ -4,6 +4,7 @@ import type { EntityManager } from '@mikro-orm/postgresql'
 import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
 import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
 import { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'
+import { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'
 import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
 import { CatalogProductTag } from '../../data/entities'
 import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
@@ -54,18 +55,13 @@ export async function GET(req: Request) {
     )
   }
 
-  const allowed = scope?.filterIds ?? scope?.allowedIds ?? (auth.orgId ? [auth.orgId] : null)
-  const preferredOrg = scope?.selectedId ?? auth.orgId ?? null
-  const organizationId = preferredOrg ?? (Array.isArray(allowed) && allowed.length ? allowed[0]! : null)
-  if (!organizationId || (Array.isArray(allowed) && allowed.length && !allowed.includes(organizationId))) {
-    return NextResponse.json(
-      { items: [], error: translate('catalog.errors.organization_required', 'Organization context is required.') },
-      { status: 400 }
-    )
-  }
+  // Scope by the caller's visible organizations. Under "All organizations"
+  // (super-admin) `where` is empty, so the list scopes by tenant only instead
+  // of 400-ing; restricted callers get their `filterIds` `$in` guard.
+  const orgFilter = resolveOrganizationScopeFilter(scope, auth)
 
   const where: Record<string, unknown> = {
-    organizationId,
+    ...orgFilter.where,
     tenantId,
   }
   const search = query.search?.trim()

package/src/modules/catalog/i18n/pl.json

@@ -86,13 +86,13 @@
   "catalog.errors.id_required": "Wymagany jest identyfikator rekordu.",
   "catalog.errors.organization_required": "Wymagany jest kontekst organizacji.",
   "catalog.errors.tenant_required": "Wymagany jest kontekst dzierżawy.",
-  "catalog.merchandising_assistant.context.filteredByCategory": "Filtered by category",
-  "catalog.merchandising_assistant.context.tags": "{count} tags",
-  "catalog.merchandising_assistant.dock.subtitle": "Catalog",
-  "catalog.merchandising_assistant.popover.heading": "AI assistants",
+  "catalog.merchandising_assistant.context.filteredByCategory": "Filtrowane po kategorii",
+  "catalog.merchandising_assistant.context.tags": "Tagi: {count}",
+  "catalog.merchandising_assistant.dock.subtitle": "Katalog",
+  "catalog.merchandising_assistant.popover.heading": "Asystenci AI",
   "catalog.merchandising_assistant.sheet.composerPlaceholder": "Poproś o opisy, atrybuty, tytuły lub propozycje cen…",
   "catalog.merchandising_assistant.sheet.description": "Demo tylko do odczytu. Proponuje opisy, atrybuty, tytuły i korekty cen dla bieżącego wyboru. Na tym etapie żadne zmiany nie są zapisywane.",
-  "catalog.merchandising_assistant.sheet.dock": "Dock to side",
+  "catalog.merchandising_assistant.sheet.dock": "Przypnij z boku",
   "catalog.merchandising_assistant.sheet.selectionPill": "Działa na {count} produktach",
   "catalog.merchandising_assistant.sheet.title": "Asystent merchandisingu katalogu",
   "catalog.merchandising_assistant.trigger.ariaLabel": "Otwórz asystenta merchandisingu AI",
@@ -220,7 +220,7 @@
   "catalog.products.create.actions.usePlain": "Użyj zwykłego tekstu",
   "catalog.products.create.attachments.help": "Przeciągnij i upuść obrazy tutaj lub kliknij, aby je przesłać.",
   "catalog.products.create.attachments.remove": "Usuń",
-  "catalog.products.create.attachments.title": "Media",
+  "catalog.products.create.attachments.title": "Multimedia",
   "catalog.products.create.currency.add": "Dodaj walutę",
   "catalog.products.create.currency.addPrompt": "Podaj kod waluty.",
   "catalog.products.create.currency.cancel": "Anuluj",
@@ -476,7 +476,7 @@
   "catalog.products.edit.weight.unit": "Jednostka wagi",
   "catalog.products.edit.weight.value": "Waga",
   "catalog.products.errors.handleExists": "Handle jest już używany.",
-  "catalog.products.errors.notFound": "Catalog product not found.",
+  "catalog.products.errors.notFound": "Nie znaleziono produktu w katalogu.",
   "catalog.products.errors.skuExists": "SKU jest już używany.",
   "catalog.products.errors.taxClassNotFound": "Nie znaleziono klasy podatkowej.",
   "catalog.products.filters.active": "Aktywne",
@@ -520,7 +520,7 @@
   "catalog.products.media.errors.deleteFailed": "Nie udało się usunąć medium.",
   "catalog.products.media.errors.imagesOnly": "Obsługiwane są tylko pliki graficzne.",
   "catalog.products.media.errors.uploadFailed": "Nie udało się przesłać pliku.",
-  "catalog.products.media.label": "Media",
+  "catalog.products.media.label": "Multimedia",
   "catalog.products.media.uploading": "Przesyłam…",
   "catalog.products.page.title": "Produkty i usługi",
   "catalog.products.table.actions.delete": "Usuń",
@@ -671,7 +671,7 @@
   "catalog.variants.form.isDefaultHint": "Używany w sklepach",
   "catalog.variants.form.isDefaultLabel": "Domyślny wariant",
   "catalog.variants.form.loading": "Ładowanie formularza...",
-  "catalog.variants.form.media": "Media",
+  "catalog.variants.form.media": "Multimedia",
   "catalog.variants.form.nameLabel": "Nazwa",
   "catalog.variants.form.namePlaceholder": "np. Niebieski / Mały",
   "catalog.variants.form.nameRequired": "Podaj nazwę wariantu.",

package/src/modules/customer_accounts/i18n/pl.json

@@ -33,10 +33,10 @@
   "customer_accounts.admin.detail.actions.revoke": "Unieważnij",
   "customer_accounts.admin.detail.actions.save": "Zapisz zmiany",
   "customer_accounts.admin.detail.actions.saving": "Zapisywanie...",
-  "customer_accounts.admin.detail.actions.unlink": "Unlink",
+  "customer_accounts.admin.detail.actions.unlink": "Odłącz",
   "customer_accounts.admin.detail.actions.viewCompany": "Zobacz firmę",
   "customer_accounts.admin.detail.actions.viewPerson": "Zobacz osobę",
-  "customer_accounts.admin.detail.crmLinks.hint": "Changes to CRM links are saved when you click Save Changes below.",
+  "customer_accounts.admin.detail.crmLinks.hint": "Zmiany powiązań CRM zapiszą się po kliknięciu Zapisz zmiany poniżej.",
   "customer_accounts.admin.detail.error.load": "Nie udało się załadować użytkownika",
   "customer_accounts.admin.detail.error.notFound": "Nie znaleziono użytkownika",
   "customer_accounts.admin.detail.error.revokeSession": "Nie udało się unieważnić sesji",
@@ -51,16 +51,16 @@
   "customer_accounts.admin.detail.fields.lastUsed": "Ostatnio używana",
   "customer_accounts.admin.detail.fields.personEntity": "Osoba",
   "customer_accounts.admin.detail.fields.roles": "Role",
-  "customer_accounts.admin.detail.fields.searchCompany": "Search companies by name...",
-  "customer_accounts.admin.detail.fields.searchPerson": "Search people by name...",
+  "customer_accounts.admin.detail.fields.searchCompany": "Szukaj firm po nazwie...",
+  "customer_accounts.admin.detail.fields.searchPerson": "Szukaj osób po nazwisku...",
   "customer_accounts.admin.detail.flash.saved": "Użytkownik zaktualizowany",
   "customer_accounts.admin.detail.flash.sessionRevoked": "Sesja unieważniona",
   "customer_accounts.admin.detail.loading": "Ładowanie użytkownika...",
   "customer_accounts.admin.detail.noRolesAvailable": "Brak dostępnych ról",
   "customer_accounts.admin.detail.noSessions": "Brak aktywnych sesji",
-  "customer_accounts.admin.detail.portalAccess.description": "This user can access the customer portal at the URL below. The portal provides self-service access to orders, invoices, quotes, and account management.",
-  "customer_accounts.admin.detail.portalAccess.title": "Customer Portal Access",
-  "customer_accounts.admin.detail.portalAccess.url": "Portal URL: {url}",
+  "customer_accounts.admin.detail.portalAccess.description": "Ten użytkownik ma dostęp do portalu klienta pod poniższym adresem. Portal daje samoobsługowy dostęp do zamówień, faktur, ofert i zarządzania kontem.",
+  "customer_accounts.admin.detail.portalAccess.title": "Dostęp do portalu klienta",
+  "customer_accounts.admin.detail.portalAccess.url": "Adres portalu: {url}",
   "customer_accounts.admin.detail.resetPassword.actions.cancel": "Anuluj",
   "customer_accounts.admin.detail.resetPassword.actions.open": "Zresetuj hasło",
   "customer_accounts.admin.detail.resetPassword.actions.reset": "Zresetuj hasło",
@@ -76,15 +76,15 @@
   "customer_accounts.admin.detail.sections.security": "Bezpieczeństwo",
   "customer_accounts.admin.detail.sections.sessions": "Aktywne sesje",
   "customer_accounts.admin.detail.sections.settings": "Ustawienia konta",
-  "customer_accounts.admin.detail.sendResetLink.actions.copy": "Copy",
-  "customer_accounts.admin.detail.sendResetLink.actions.send": "Send Reset Link",
-  "customer_accounts.admin.detail.sendResetLink.actions.sending": "Generating...",
-  "customer_accounts.admin.detail.sendResetLink.actions.start": "Generate Reset Link",
-  "customer_accounts.admin.detail.sendResetLink.error": "Failed to generate reset link",
-  "customer_accounts.admin.detail.sendResetLink.flash.copied": "Link copied to clipboard",
-  "customer_accounts.admin.detail.sendResetLink.flash.success": "Reset link generated",
-  "customer_accounts.admin.detail.sendResetLink.hint": "Share this link with the customer to let them set a new password.",
-  "customer_accounts.admin.detail.sendResetLink.linkLabel": "Password reset link (valid for 60 minutes):",
+  "customer_accounts.admin.detail.sendResetLink.actions.copy": "Kopiuj",
+  "customer_accounts.admin.detail.sendResetLink.actions.send": "Wyślij link resetujący",
+  "customer_accounts.admin.detail.sendResetLink.actions.sending": "Generowanie...",
+  "customer_accounts.admin.detail.sendResetLink.actions.start": "Wygeneruj link resetujący",
+  "customer_accounts.admin.detail.sendResetLink.error": "Nie udało się wygenerować linku resetującego",
+  "customer_accounts.admin.detail.sendResetLink.flash.copied": "Skopiowano link do schowka",
+  "customer_accounts.admin.detail.sendResetLink.flash.success": "Wygenerowano link resetujący",
+  "customer_accounts.admin.detail.sendResetLink.hint": "Przekaż ten link klientowi, aby mógł ustawić nowe hasło.",
+  "customer_accounts.admin.detail.sendResetLink.linkLabel": "Link do resetu hasła (ważny 60 minut):",
   "customer_accounts.admin.detail.unknownDevice": "Nieznane urządzenie",
   "customer_accounts.admin.detail.unknownIp": "Nieznany IP",
   "customer_accounts.admin.detail.verifyEmail.actions.verify": "Oznacz jako zweryfikowany",
@@ -133,20 +133,20 @@
   "customer_accounts.admin.portalFeatures.users.manage.description": "Umożliwia edycję ról i usuwanie członków zespołu",
   "customer_accounts.admin.portalFeatures.users.view": "Wyświetlanie członków zespołu",
   "customer_accounts.admin.portalFeatures.users.view.description": "Umożliwia przeglądanie innych członków zespołu w organizacji",
-  "customer_accounts.admin.portalInfo.credentials": "Demo credentials: alice.johnson@example.com / Password123!",
-  "customer_accounts.admin.portalInfo.description": "Manage customer portal accounts. Customers can self-register, log in, and access orders, quotes, and invoices through the portal.",
-  "customer_accounts.admin.portalInfo.open": "Open Portal",
-  "customer_accounts.admin.portalInfo.openConfiguration": "Open Configuration",
-  "customer_accounts.admin.portalInfo.title": "Customer Portal",
-  "customer_accounts.admin.portalInfo.url": "Portal URL: {url}",
+  "customer_accounts.admin.portalInfo.credentials": "Dane demonstracyjne: alice.johnson@example.com / Password123!",
+  "customer_accounts.admin.portalInfo.description": "Zarządzaj kontami portalu klienta. Klienci mogą sami się rejestrować, logować oraz przeglądać zamówienia, oferty i faktury w portalu.",
+  "customer_accounts.admin.portalInfo.open": "Otwórz portal",
+  "customer_accounts.admin.portalInfo.openConfiguration": "Otwórz konfigurację",
+  "customer_accounts.admin.portalInfo.title": "Portal klienta",
+  "customer_accounts.admin.portalInfo.url": "Adres portalu: {url}",
   "customer_accounts.admin.roleCreate.actions.cancel": "Anuluj",
   "customer_accounts.admin.roleCreate.actions.create": "Utwórz rolę",
   "customer_accounts.admin.roleCreate.actions.saving": "Tworzenie...",
-  "customer_accounts.admin.roleCreate.error.nameRequired": "Name is required",
+  "customer_accounts.admin.roleCreate.error.nameRequired": "Nazwa jest wymagana",
   "customer_accounts.admin.roleCreate.error.required": "Nazwa i slug są wymagane",
   "customer_accounts.admin.roleCreate.error.save": "Nie udało się utworzyć roli",
-  "customer_accounts.admin.roleCreate.error.slugFormat": "Slug must contain only lowercase letters, numbers, hyphens, and underscores",
-  "customer_accounts.admin.roleCreate.error.slugRequired": "Slug is required",
+  "customer_accounts.admin.roleCreate.error.slugFormat": "Slug może zawierać wyłącznie małe litery, cyfry, myślniki i podkreślenia",
+  "customer_accounts.admin.roleCreate.error.slugRequired": "Slug jest wymagany",
   "customer_accounts.admin.roleCreate.fields.customerAssignable": "Klienci mogą się samoprzypisywać",
   "customer_accounts.admin.roleCreate.fields.description": "Opis",
   "customer_accounts.admin.roleCreate.fields.isDefault": "Domyślna rola (automatycznie przypisywana nowym użytkownikom)",
@@ -204,94 +204,94 @@
   "customer_accounts.admin.unverified": "Nie",
   "customer_accounts.admin.users": "Użytkownicy",
   "customer_accounts.admin.verified": "Tak",
-  "customer_accounts.domainMapping.aRecordInstruction": "For an apex domain, add an A record for {hostname} pointing to {target}",
-  "customer_accounts.domainMapping.alreadyClaimed": "This domain is not available. Please choose a different hostname.",
-  "customer_accounts.domainMapping.autoVerify.checking": "Automatically checking every 5 minutes",
-  "customer_accounts.domainMapping.autoVerify.lastChecked": "Last checked: {time}",
-  "customer_accounts.domainMapping.autoVerify.nextCheck": "Next check in ~{minutes} minutes",
-  "customer_accounts.domainMapping.changeDomain": "Change Domain",
-  "customer_accounts.domainMapping.changeDomain.description": "Your current domain ({hostname}) will stay active until the new domain is fully set up. No downtime for your customers.",
-  "customer_accounts.domainMapping.changeDomain.replacing": "Replacing {oldHostname} — old domain stays live until this one is ready",
-  "customer_accounts.domainMapping.cnameInstruction": "Add a CNAME record for {hostname} pointing to {target} in your DNS provider",
-  "customer_accounts.domainMapping.copyTarget": "Copy",
-  "customer_accounts.domainMapping.copyTarget.copied": "Copied",
-  "customer_accounts.domainMapping.description": "Map your own domain to the customer portal",
-  "customer_accounts.domainMapping.diagnostics.detectedRecords": "Detected DNS records:",
-  "customer_accounts.domainMapping.diagnostics.noRecord": "No CNAME or A record found for {hostname}",
-  "customer_accounts.domainMapping.diagnostics.proxyDetected": "Your DNS uses a proxy ({proxy}). Either disable the proxy or configure it to forward traffic to our platform.",
-  "customer_accounts.domainMapping.diagnostics.suggestion": "Suggested fix:",
-  "customer_accounts.domainMapping.diagnostics.timeout": "DNS lookup timed out — this may be a temporary issue",
-  "customer_accounts.domainMapping.diagnostics.wrongARecordTarget": "Your A record points to {detected} instead of {expected}",
-  "customer_accounts.domainMapping.diagnostics.wrongCnameTarget": "Your CNAME record points to {detected} instead of {expected}",
-  "customer_accounts.domainMapping.dialog.cancel": "Cancel",
-  "customer_accounts.domainMapping.dialog.change.submit": "Start replacement",
-  "customer_accounts.domainMapping.dialog.change.title": "Change custom domain",
-  "customer_accounts.domainMapping.dialog.register.submit": "Register",
-  "customer_accounts.domainMapping.dialog.register.title": "Register custom domain",
-  "customer_accounts.domainMapping.dns.diagnostics.detected": "Detected target",
-  "customer_accounts.domainMapping.dns.diagnostics.expected": "Expected target",
-  "customer_accounts.domainMapping.dns.diagnostics.title": "DNS configuration issue",
-  "customer_accounts.domainMapping.dns.recheckButton": "Re-check DNS",
-  "customer_accounts.domainMapping.dnsProviderHelp": "Need help? See instructions for:",
+  "customer_accounts.domainMapping.aRecordInstruction": "Dla domeny głównej dodaj rekord A dla {hostname} wskazujący na {target}",
+  "customer_accounts.domainMapping.alreadyClaimed": "Ta domena jest niedostępna. Wybierz inną nazwę hosta.",
+  "customer_accounts.domainMapping.autoVerify.checking": "Automatyczne sprawdzanie co 5 minut",
+  "customer_accounts.domainMapping.autoVerify.lastChecked": "Ostatnie sprawdzenie: {time}",
+  "customer_accounts.domainMapping.autoVerify.nextCheck": "Następne sprawdzenie za ok. {minutes} min",
+  "customer_accounts.domainMapping.changeDomain": "Zmień domenę",
+  "customer_accounts.domainMapping.changeDomain.description": "Twoja obecna domena ({hostname}) pozostanie aktywna do czasu pełnego skonfigurowania nowej. Klienci nie odczują przerwy w działaniu.",
+  "customer_accounts.domainMapping.changeDomain.replacing": "Zastępuje {oldHostname} — stara domena działa, dopóki nowa nie będzie gotowa",
+  "customer_accounts.domainMapping.cnameInstruction": "Dodaj rekord CNAME dla {hostname} wskazujący na {target} u swojego dostawcy DNS",
+  "customer_accounts.domainMapping.copyTarget": "Kopiuj",
+  "customer_accounts.domainMapping.copyTarget.copied": "Skopiowano",
+  "customer_accounts.domainMapping.description": "Podepnij własną domenę do portalu klienta",
+  "customer_accounts.domainMapping.diagnostics.detectedRecords": "Wykryte rekordy DNS:",
+  "customer_accounts.domainMapping.diagnostics.noRecord": "Nie znaleziono rekordu CNAME ani A dla {hostname}",
+  "customer_accounts.domainMapping.diagnostics.proxyDetected": "Twój DNS korzysta z proxy ({proxy}). Wyłącz proxy albo skonfiguruj je tak, aby przekazywało ruch do naszej platformy.",
+  "customer_accounts.domainMapping.diagnostics.suggestion": "Proponowane rozwiązanie:",
+  "customer_accounts.domainMapping.diagnostics.timeout": "Przekroczono czas zapytania DNS — to może być problem przejściowy",
+  "customer_accounts.domainMapping.diagnostics.wrongARecordTarget": "Twój rekord A wskazuje na {detected} zamiast na {expected}",
+  "customer_accounts.domainMapping.diagnostics.wrongCnameTarget": "Twój rekord CNAME wskazuje na {detected} zamiast na {expected}",
+  "customer_accounts.domainMapping.dialog.cancel": "Anuluj",
+  "customer_accounts.domainMapping.dialog.change.submit": "Rozpocznij zamianę",
+  "customer_accounts.domainMapping.dialog.change.title": "Zmień domenę własną",
+  "customer_accounts.domainMapping.dialog.register.submit": "Zarejestruj",
+  "customer_accounts.domainMapping.dialog.register.title": "Zarejestruj domenę własną",
+  "customer_accounts.domainMapping.dns.diagnostics.detected": "Wykryty cel",
+  "customer_accounts.domainMapping.dns.diagnostics.expected": "Oczekiwany cel",
+  "customer_accounts.domainMapping.dns.diagnostics.title": "Problem z konfiguracją DNS",
+  "customer_accounts.domainMapping.dns.recheckButton": "Sprawdź DNS ponownie",
+  "customer_accounts.domainMapping.dnsProviderHelp": "Potrzebujesz pomocy? Zobacz instrukcje dla:",
   "customer_accounts.domainMapping.dnsProviderHelp.cloudflare": "Cloudflare",
   "customer_accounts.domainMapping.dnsProviderHelp.godaddy": "GoDaddy",
   "customer_accounts.domainMapping.dnsProviderHelp.googleDomains": "Google Domains",
   "customer_accounts.domainMapping.dnsProviderHelp.namecheap": "Namecheap",
-  "customer_accounts.domainMapping.dnsProviderHelp.other": "Other providers",
-  "customer_accounts.domainMapping.empty.cta": "Register Domain",
-  "customer_accounts.domainMapping.empty.description": "Connect your own domain so customers can reach the portal at a branded URL.",
-  "customer_accounts.domainMapping.empty.title": "No custom domain yet",
-  "customer_accounts.domainMapping.error.load": "Could not load custom-domain configuration",
-  "customer_accounts.domainMapping.errors.required": "Domain is required",
-  "customer_accounts.domainMapping.hostname.label": "Domain",
-  "customer_accounts.domainMapping.hostname.placeholder": "e.g., shop.yourdomain.com",
-  "customer_accounts.domainMapping.hostname.validation.invalid": "Enter a valid domain name (no protocol, path, or port)",
-  "customer_accounts.domainMapping.loading": "Loading domain configuration…",
-  "customer_accounts.domainMapping.orgSwitcher.label": "Organization",
-  "customer_accounts.domainMapping.preview": "Test Domain",
-  "customer_accounts.domainMapping.preview.description": "Opens your portal on the custom domain in a new tab to verify it's working correctly",
-  "customer_accounts.domainMapping.preview.notReady": "Domain is not yet active. Complete the setup steps first.",
-  "customer_accounts.domainMapping.propagationNote": "DNS changes can take up to 48 hours to propagate. The system checks automatically — you'll be notified when it's ready.",
-  "customer_accounts.domainMapping.registered": "Domain registered successfully",
-  "customer_accounts.domainMapping.removeConfirm": "Are you sure? Customers using this domain will no longer be able to reach your portal.",
-  "customer_accounts.domainMapping.removeConfirm.hasReplacement": "This will also cancel the pending replacement domain ({hostname}).",
-  "customer_accounts.domainMapping.removeConfirm.title": "Remove custom domain?",
-  "customer_accounts.domainMapping.removeDomain": "Remove Domain",
-  "customer_accounts.domainMapping.removed": "Domain removed",
-  "customer_accounts.domainMapping.replacement.label": "Replacement (waiting to activate)",
-  "customer_accounts.domainMapping.status.active": "Active",
-  "customer_accounts.domainMapping.status.dns_failed": "DNS issue — see details below",
-  "customer_accounts.domainMapping.status.pending": "Checking DNS...",
-  "customer_accounts.domainMapping.status.tls_failed": "SSL certificate issue — we're retrying",
-  "customer_accounts.domainMapping.status.verified": "Setting up SSL certificate...",
-  "customer_accounts.domainMapping.stepper.step1": "Register Domain",
-  "customer_accounts.domainMapping.stepper.step2": "Configure DNS",
-  "customer_accounts.domainMapping.stepper.step3": "SSL Certificate",
-  "customer_accounts.domainMapping.stepper.step4": "Live",
-  "customer_accounts.domainMapping.title": "Custom Domain",
-  "customer_accounts.domainMapping.tls.diagnostics.operatorNote": "We are retrying automatically. If this persists, contact platform support — your DNS is fine, this is on our side.",
-  "customer_accounts.domainMapping.tls.diagnostics.retryCount": "Retry attempts: {count}",
-  "customer_accounts.domainMapping.tls.diagnostics.title": "SSL certificate issue",
-  "customer_accounts.domainMapping.tls.retryButton": "Retry SSL",
-  "customer_accounts.domainMapping.verifyNow": "Check Now",
+  "customer_accounts.domainMapping.dnsProviderHelp.other": "Inni dostawcy",
+  "customer_accounts.domainMapping.empty.cta": "Zarejestruj domenę",
+  "customer_accounts.domainMapping.empty.description": "Podłącz własną domenę, aby klienci trafiali do portalu pod adresem z Twoją marką.",
+  "customer_accounts.domainMapping.empty.title": "Brak domeny własnej",
+  "customer_accounts.domainMapping.error.load": "Nie udało się załadować konfiguracji domeny własnej",
+  "customer_accounts.domainMapping.errors.required": "Domena jest wymagana",
+  "customer_accounts.domainMapping.hostname.label": "Domena",
+  "customer_accounts.domainMapping.hostname.placeholder": "np. sklep.twojadomena.pl",
+  "customer_accounts.domainMapping.hostname.validation.invalid": "Podaj poprawną nazwę domeny (bez protokołu, ścieżki i portu)",
+  "customer_accounts.domainMapping.loading": "Ładowanie konfiguracji domeny…",
+  "customer_accounts.domainMapping.orgSwitcher.label": "Organizacja",
+  "customer_accounts.domainMapping.preview": "Przetestuj domenę",
+  "customer_accounts.domainMapping.preview.description": "Otwiera portal na domenie własnej w nowej karcie, aby sprawdzić, czy działa poprawnie",
+  "customer_accounts.domainMapping.preview.notReady": "Domena nie jest jeszcze aktywna. Najpierw dokończ kroki konfiguracji.",
+  "customer_accounts.domainMapping.propagationNote": "Propagacja zmian DNS może potrwać do 48 godzin. System sprawdza to automatycznie — powiadomimy Cię, gdy domena będzie gotowa.",
+  "customer_accounts.domainMapping.registered": "Zarejestrowano domenę",
+  "customer_accounts.domainMapping.removeConfirm": "Czy na pewno? Klienci korzystający z tej domeny nie będą już mogli wejść do portalu.",
+  "customer_accounts.domainMapping.removeConfirm.hasReplacement": "Spowoduje to również anulowanie oczekującej domeny zastępczej ({hostname}).",
+  "customer_accounts.domainMapping.removeConfirm.title": "Usunąć domenę własną?",
+  "customer_accounts.domainMapping.removeDomain": "Usuń domenę",
+  "customer_accounts.domainMapping.removed": "Usunięto domenę",
+  "customer_accounts.domainMapping.replacement.label": "Domena zastępcza (czeka na aktywację)",
+  "customer_accounts.domainMapping.status.active": "Aktywna",
+  "customer_accounts.domainMapping.status.dns_failed": "Problem z DNS — szczegóły poniżej",
+  "customer_accounts.domainMapping.status.pending": "Sprawdzanie DNS...",
+  "customer_accounts.domainMapping.status.tls_failed": "Problem z certyfikatem SSL — ponawiamy próbę",
+  "customer_accounts.domainMapping.status.verified": "Konfigurowanie certyfikatu SSL...",
+  "customer_accounts.domainMapping.stepper.step1": "Rejestracja domeny",
+  "customer_accounts.domainMapping.stepper.step2": "Konfiguracja DNS",
+  "customer_accounts.domainMapping.stepper.step3": "Certyfikat SSL",
+  "customer_accounts.domainMapping.stepper.step4": "Działa",
+  "customer_accounts.domainMapping.title": "Domena własna",
+  "customer_accounts.domainMapping.tls.diagnostics.operatorNote": "Ponawiamy próby automatycznie. Jeśli problem się utrzymuje, skontaktuj się ze wsparciem platformy — Twój DNS jest poprawny, problem jest po naszej stronie.",
+  "customer_accounts.domainMapping.tls.diagnostics.retryCount": "Liczba prób: {count}",
+  "customer_accounts.domainMapping.tls.diagnostics.title": "Problem z certyfikatem SSL",
+  "customer_accounts.domainMapping.tls.retryButton": "Ponów SSL",
+  "customer_accounts.domainMapping.verifyNow": "Sprawdź teraz",
   "customer_accounts.nav.group": "Klienci",
   "customer_accounts.nav.role_create": "Utwórz rolę",
   "customer_accounts.nav.role_detail": "Szczegóły roli",
   "customer_accounts.nav.roles": "Role klientów",
   "customer_accounts.nav.user_detail": "Szczegóły użytkownika",
   "customer_accounts.nav.users": "Użytkownicy klientów",
-  "customer_accounts.notifications.domain_mapping.activated.body": "Your custom domain is now active and serving traffic.",
-  "customer_accounts.notifications.domain_mapping.activated.title": "Custom domain is live",
-  "customer_accounts.notifications.domain_mapping.dns_failed.body": "DNS verification failed for your custom domain. {reason}",
-  "customer_accounts.notifications.domain_mapping.dns_failed.title": "DNS verification failed",
-  "customer_accounts.notifications.domain_mapping.tls_failed.body": "SSL certificate provisioning is having trouble for your custom domain. We're retrying — no action needed yet.",
-  "customer_accounts.notifications.domain_mapping.tls_failed.title": "SSL provisioning issue",
-  "customer_accounts.notifications.domain_mapping.verified.body": "Your custom domain has been verified. SSL certificate is being provisioned.",
-  "customer_accounts.notifications.domain_mapping.verified.title": "Custom domain verified",
-  "customer_accounts.notifications.user.locked.body": "Customer account was locked due to too many failed login attempts.",
-  "customer_accounts.notifications.user.locked.title": "Customer account locked",
-  "customer_accounts.notifications.user.signup.body": "A new customer account was created.",
-  "customer_accounts.notifications.user.signup.title": "New customer signup",
+  "customer_accounts.notifications.domain_mapping.activated.body": "Twoja domena własna jest już aktywna i obsługuje ruch.",
+  "customer_accounts.notifications.domain_mapping.activated.title": "Domena własna działa",
+  "customer_accounts.notifications.domain_mapping.dns_failed.body": "Weryfikacja DNS Twojej domeny własnej nie powiodła się. {reason}",
+  "customer_accounts.notifications.domain_mapping.dns_failed.title": "Weryfikacja DNS nie powiodła się",
+  "customer_accounts.notifications.domain_mapping.tls_failed.body": "Wystawianie certyfikatu SSL dla Twojej domeny własnej napotyka problemy. Ponawiamy próby — na razie nie musisz nic robić.",
+  "customer_accounts.notifications.domain_mapping.tls_failed.title": "Problem z wystawieniem SSL",
+  "customer_accounts.notifications.domain_mapping.verified.body": "Twoja domena własna została zweryfikowana. Trwa wystawianie certyfikatu SSL.",
+  "customer_accounts.notifications.domain_mapping.verified.title": "Domena własna zweryfikowana",
+  "customer_accounts.notifications.user.locked.body": "Konto klienta zostało zablokowane z powodu zbyt wielu nieudanych prób logowania.",
+  "customer_accounts.notifications.user.locked.title": "Konto klienta zablokowane",
+  "customer_accounts.notifications.user.signup.body": "Utworzono nowe konto klienta.",
+  "customer_accounts.notifications.user.signup.title": "Nowa rejestracja klienta",
   "customer_accounts.portal_ai_assistant.sheet.composerPlaceholder": "Zapytaj o swoje konto...",
   "customer_accounts.portal_ai_assistant.sheet.description": "Asystent tylko do odczytu dla klientów portalu. Zapytaj o swoje konto i ostatnią aktywność.",
   "customer_accounts.portal_ai_assistant.sheet.title": "Asystent AI portalu",
@@ -300,34 +300,34 @@
   "customer_accounts.search.badge.customerRole": "Rola klienta",
   "customer_accounts.search.badge.customerUser": "Użytkownik klienta",
   "customer_accounts.settings.back": "Użytkownicy klientów",
-  "customer_accounts.settings.demo_credentials.email": "Email",
-  "customer_accounts.settings.demo_credentials.note": "These credentials are only available if example data was seeded during setup.",
-  "customer_accounts.settings.demo_credentials.password": "Password",
-  "customer_accounts.settings.demo_credentials.role": "Role",
-  "customer_accounts.settings.demo_credentials.title": "Demo Credentials",
-  "customer_accounts.settings.portal_access.manage_orgs": "Manage Organizations",
-  "customer_accounts.settings.portal_access.open_portal": "Open Portal",
-  "customer_accounts.settings.portal_access.slug_note": "The organization slug is auto-generated from the organization name. You can view and manage organizations in Directory → Organizations.",
-  "customer_accounts.settings.portal_access.title": "Portal Access",
-  "customer_accounts.settings.portal_access.url_label": "Portal URL pattern:",
-  "customer_accounts.settings.quick_links.manage_roles": "Manage customer roles",
-  "customer_accounts.settings.quick_links.manage_users": "Manage customer users",
-  "customer_accounts.settings.quick_links.portal_docs": "Portal documentation",
-  "customer_accounts.settings.quick_links.title": "Quick Links",
+  "customer_accounts.settings.demo_credentials.email": "E-mail",
+  "customer_accounts.settings.demo_credentials.note": "Te dane są dostępne tylko wtedy, gdy podczas konfiguracji zaseedowano dane przykładowe.",
+  "customer_accounts.settings.demo_credentials.password": "Hasło",
+  "customer_accounts.settings.demo_credentials.role": "Rola",
+  "customer_accounts.settings.demo_credentials.title": "Dane demonstracyjne",
+  "customer_accounts.settings.portal_access.manage_orgs": "Zarządzaj organizacjami",
+  "customer_accounts.settings.portal_access.open_portal": "Otwórz portal",
+  "customer_accounts.settings.portal_access.slug_note": "Slug organizacji jest generowany automatycznie z jej nazwy. Organizacje możesz przeglądać i zmieniać w Katalog → Organizacje.",
+  "customer_accounts.settings.portal_access.title": "Dostęp do portalu",
+  "customer_accounts.settings.portal_access.url_label": "Wzorzec adresu portalu:",
+  "customer_accounts.settings.quick_links.manage_roles": "Zarządzaj rolami klientów",
+  "customer_accounts.settings.quick_links.manage_users": "Zarządzaj użytkownikami klientów",
+  "customer_accounts.settings.quick_links.portal_docs": "Dokumentacja portalu",
+  "customer_accounts.settings.quick_links.title": "Szybkie linki",
   "customer_accounts.settings.section": "Portal klienta",
   "customer_accounts.settings.title": "Ustawienia portalu",
-  "customer_accounts.signup.created.body": "Your account request was accepted. Confirm your email address to finish setting up portal access.",
-  "customer_accounts.signup.created.cta": "Verify email address",
-  "customer_accounts.signup.created.hint": "This verification link expires in 24 hours. If you did not request this, you can ignore this email.",
-  "customer_accounts.signup.created.preview": "Verify your portal account to finish sign-up.",
-  "customer_accounts.signup.created.subject": "Verify your portal account",
-  "customer_accounts.signup.created.title": "Verify your portal account",
-  "customer_accounts.signup.existing.body": "A sign-up request was made for this email address. You can sign in with your existing account. If you forgot your password, use the password reset option on the sign-in page.",
-  "customer_accounts.signup.existing.cta": "Open sign-in page",
-  "customer_accounts.signup.existing.hint": "If this was not you, you can ignore this message. No new portal account was created.",
-  "customer_accounts.signup.existing.preview": "A sign-up attempt was made for an email that already has a portal account.",
-  "customer_accounts.signup.existing.subject": "You already have a portal account",
-  "customer_accounts.signup.existing.title": "You already have a portal account",
+  "customer_accounts.signup.created.body": "Twoja prośba o konto została przyjęta. Potwierdź adres e-mail, aby dokończyć konfigurację dostępu do portalu.",
+  "customer_accounts.signup.created.cta": "Potwierdź adres e-mail",
+  "customer_accounts.signup.created.hint": "Ten link weryfikacyjny wygasa po 24 godzinach. Jeśli to nie Ty wysłałeś zgłoszenie, zignoruj tę wiadomość.",
+  "customer_accounts.signup.created.preview": "Potwierdź konto w portalu, aby dokończyć rejestrację.",
+  "customer_accounts.signup.created.subject": "Potwierdź swoje konto w portalu",
+  "customer_accounts.signup.created.title": "Potwierdź swoje konto w portalu",
+  "customer_accounts.signup.existing.body": "Dla tego adresu e-mail wysłano zgłoszenie rejestracyjne. Możesz zalogować się na istniejące konto. Jeśli nie pamiętasz hasła, skorzystaj z opcji resetu hasła na stronie logowania.",
+  "customer_accounts.signup.existing.cta": "Otwórz stronę logowania",
+  "customer_accounts.signup.existing.hint": "Jeśli to nie Ty, zignoruj tę wiadomość. Nie utworzono nowego konta w portalu.",
+  "customer_accounts.signup.existing.preview": "Podjęto próbę rejestracji na adres, który ma już konto w portalu.",
+  "customer_accounts.signup.existing.subject": "Masz już konto w portalu",
+  "customer_accounts.signup.existing.title": "Masz już konto w portalu",
   "customer_accounts.widgets.accountStatus": "Status konta",
   "customer_accounts.widgets.accountStatus.description": "Pokazuje status konta w portalu klienta na szczegółach osoby CRM",
   "customer_accounts.widgets.emailVerified": "E-mail zweryfikowany",