@open-mercato/core 0.6.7-develop.6785.1.1dd7cfac55 → 0.6.7-develop.6795.1.8a3f27921c

package/src/modules/design_system/i18n/es.json

@@ -0,0 +1,46 @@
+{
+  "design_system.entries.button.description": "Disparador de acción principal con toda la escala de variantes y tamaños del DS.",
+  "design_system.entries.buttonGroup.description": "Grupo unido de botones de acción relacionados que comparten un borde.",
+  "design_system.entries.fancyButton.description": "Botón con degradado, de estilo promocional, para acciones destacadas.",
+  "design_system.entries.iconButton.description": "Botón cuadrado solo con icono; siempre requiere un aria-label.",
+  "design_system.entries.linkButton.description": "Enlace de texto con estilo de control del DS.",
+  "design_system.entries.socialButton.description": "Botón de autenticación con colores de marca para inicio de sesión social.",
+  "design_system.families.banners": "Avisos y llamadas",
+  "design_system.families.buttons": "Botones",
+  "design_system.families.charts": "Gráficos",
+  "design_system.families.dates": "Fechas y hora",
+  "design_system.families.detail": "Secciones de detalle",
+  "design_system.families.display": "Visualización de datos",
+  "design_system.families.feedback": "Retroalimentación",
+  "design_system.families.filters": "Filtros",
+  "design_system.families.foundations": "Fundamentos",
+  "design_system.families.icons": "Iconos",
+  "design_system.families.inputs": "Campos de formulario",
+  "design_system.families.messages": "Mensajes",
+  "design_system.families.navigation": "Navegación",
+  "design_system.families.notifications": "Notificaciones",
+  "design_system.families.overlays": "Superposiciones",
+  "design_system.families.scaffolding": "Estructura de página",
+  "design_system.families.schedule": "Agenda",
+  "design_system.gallery.copied": "Fragmento copiado al portapapeles",
+  "design_system.gallery.copy": "Copiar código",
+  "design_system.gallery.copyFailed": "No se pudo copiar el fragmento",
+  "design_system.gallery.familiesGroup": "Familias",
+  "design_system.gallery.familyContents": "Componentes de esta familia",
+  "design_system.gallery.iconCopied": "Copiado: {snippet}",
+  "design_system.gallery.iconCopyJsx": "Copiar JSX (lucide-react)",
+  "design_system.gallery.iconCopyMeta": "Copiar nombre para page.meta icon",
+  "design_system.gallery.iconCountAll": "{total} iconos",
+  "design_system.gallery.iconCountFiltered": "{visible} de {total} iconos",
+  "design_system.gallery.iconSearchPlaceholder": "Filtrar iconos…",
+  "design_system.gallery.loadFailed": "No se pudo cargar esta familia",
+  "design_system.gallery.noResults": "Ningún componente coincide con la búsqueda",
+  "design_system.gallery.openInFigma": "Abrir en Figma",
+  "design_system.gallery.retry": "Reintentar",
+  "design_system.gallery.searchPlaceholder": "Buscar componentes…",
+  "design_system.gallery.usageDo": "Haz",
+  "design_system.gallery.usageDont": "Evita",
+  "design_system.gallery.viewDocs": "Ver documentación",
+  "design_system.nav.group": "Desarrollador",
+  "design_system.nav.title": "Sistema de diseño"
+}

package/src/modules/design_system/i18n/pl.json

@@ -0,0 +1,46 @@
+{
+  "design_system.entries.button.description": "Podstawowy przycisk akcji z pełną skalą wariantów i rozmiarów DS.",
+  "design_system.entries.buttonGroup.description": "Połączona grupa powiązanych przycisków akcji ze wspólnym obramowaniem.",
+  "design_system.entries.fancyButton.description": "Gradientowy przycisk o marketingowym charakterze dla wyróżnionych akcji.",
+  "design_system.entries.iconButton.description": "Kwadratowy przycisk z samą ikoną; zawsze wymaga aria-label.",
+  "design_system.entries.linkButton.description": "Tekstowy odnośnik w stylu kontrolki DS.",
+  "design_system.entries.socialButton.description": "Przycisk logowania w kolorach marki dla logowania społecznościowego.",
+  "design_system.families.banners": "Banery i wskazówki",
+  "design_system.families.buttons": "Przyciski",
+  "design_system.families.charts": "Wykresy",
+  "design_system.families.dates": "Daty i czas",
+  "design_system.families.detail": "Sekcje szczegółów",
+  "design_system.families.display": "Prezentacja danych",
+  "design_system.families.feedback": "Informacje zwrotne",
+  "design_system.families.filters": "Filtry",
+  "design_system.families.foundations": "Fundamenty",
+  "design_system.families.icons": "Ikony",
+  "design_system.families.inputs": "Pola formularzy",
+  "design_system.families.messages": "Wiadomości",
+  "design_system.families.navigation": "Nawigacja",
+  "design_system.families.notifications": "Powiadomienia",
+  "design_system.families.overlays": "Nakładki",
+  "design_system.families.scaffolding": "Szkielet strony",
+  "design_system.families.schedule": "Harmonogram",
+  "design_system.gallery.copied": "Fragment skopiowany do schowka",
+  "design_system.gallery.copy": "Kopiuj kod",
+  "design_system.gallery.copyFailed": "Nie udało się skopiować fragmentu",
+  "design_system.gallery.familiesGroup": "Rodziny",
+  "design_system.gallery.familyContents": "Komponenty w tej rodzinie",
+  "design_system.gallery.iconCopied": "Skopiowano: {snippet}",
+  "design_system.gallery.iconCopyJsx": "Kopiuj JSX (lucide-react)",
+  "design_system.gallery.iconCopyMeta": "Kopiuj nazwę do page.meta icon",
+  "design_system.gallery.iconCountAll": "Ikony: {total}",
+  "design_system.gallery.iconCountFiltered": "{visible} z {total} ikon",
+  "design_system.gallery.iconSearchPlaceholder": "Filtruj ikony…",
+  "design_system.gallery.loadFailed": "Nie udało się załadować tej rodziny",
+  "design_system.gallery.noResults": "Żaden komponent nie pasuje do wyszukiwania",
+  "design_system.gallery.openInFigma": "Otwórz w Figmie",
+  "design_system.gallery.retry": "Spróbuj ponownie",
+  "design_system.gallery.searchPlaceholder": "Szukaj komponentów…",
+  "design_system.gallery.usageDo": "Rób",
+  "design_system.gallery.usageDont": "Unikaj",
+  "design_system.gallery.viewDocs": "Zobacz dokumentację",
+  "design_system.nav.group": "Deweloper",
+  "design_system.nav.title": "Design system"
+}

package/src/modules/design_system/index.ts

@@ -0,0 +1,7 @@
+import type { ModuleInfo } from '@open-mercato/shared/modules/registry'
+
+export const metadata: ModuleInfo = {
+  name: 'design_system',
+  title: 'Design system gallery',
+  description: 'Live, in-app component gallery for the Open Mercato design system.',
+}

package/src/modules/design_system/setup.ts

@@ -0,0 +1,12 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+
+export const setup: ModuleSetupConfig = {
+  defaultRoleFeatures: {
+    // View-only module: the gallery reads no tenant data, so the grant is safe
+    // to hand out broadly. Superadmin is covered by wildcard grants.
+    admin: ['design_system.view'],
+    employee: ['design_system.view'],
+  },
+}
+
+export default setup

package/src/modules/inbox_ops/i18n/de.json

@@ -162,6 +162,9 @@
   "inbox_ops.reply.send": "Antwort senden",
   "inbox_ops.reply.sending": "Wird gesendet...",
   "inbox_ops.reply.sent_success": "Antwort erfolgreich gesendet",
+  "inbox_ops.search.fallback.title": "Posteingang-Vorschlag",
+  "inbox_ops.search.subtitle.template": "Konfidenz: {{confidence}} · Status: {{status}}",
+  "inbox_ops.search.subtitle.templateWithCategory": "Konfidenz: {{confidence}} · Status: {{status}} · Kategorie: {{category}}",
   "inbox_ops.sender_unknown": "Unbekannt",
   "inbox_ops.settings.active": "Aktiv",
   "inbox_ops.settings.copied": "Kopiert",

package/src/modules/inbox_ops/i18n/en.json

@@ -162,6 +162,9 @@
   "inbox_ops.reply.send": "Send Reply",
   "inbox_ops.reply.sending": "Sending...",
   "inbox_ops.reply.sent_success": "Reply sent successfully",
+  "inbox_ops.search.fallback.title": "Inbox Proposal",
+  "inbox_ops.search.subtitle.template": "Confidence: {{confidence}} · Status: {{status}}",
+  "inbox_ops.search.subtitle.templateWithCategory": "Confidence: {{confidence}} · Status: {{status}} · Category: {{category}}",
   "inbox_ops.sender_unknown": "Unknown",
   "inbox_ops.settings.active": "Active",
   "inbox_ops.settings.copied": "Copied",

package/src/modules/inbox_ops/i18n/es.json

@@ -162,6 +162,9 @@
   "inbox_ops.reply.send": "Enviar respuesta",
   "inbox_ops.reply.sending": "Enviando...",
   "inbox_ops.reply.sent_success": "Respuesta enviada correctamente",
+  "inbox_ops.search.fallback.title": "Propuesta de bandeja",
+  "inbox_ops.search.subtitle.template": "Confianza: {{confidence}} · Estado: {{status}}",
+  "inbox_ops.search.subtitle.templateWithCategory": "Confianza: {{confidence}} · Estado: {{status}} · Categoría: {{category}}",
   "inbox_ops.sender_unknown": "Desconocido",
   "inbox_ops.settings.active": "Activo",
   "inbox_ops.settings.copied": "Copiado",

package/src/modules/inbox_ops/i18n/pl.json

@@ -162,6 +162,9 @@
   "inbox_ops.reply.send": "Wy\u015blij odpowied\u017a",
   "inbox_ops.reply.sending": "Wysy\u0142anie...",
   "inbox_ops.reply.sent_success": "Odpowied\u017a wys\u0142ana pomy\u015blnie",
+  "inbox_ops.search.fallback.title": "Propozycja skrzynki",
+  "inbox_ops.search.subtitle.template": "Pewność: {{confidence}} · Status: {{status}}",
+  "inbox_ops.search.subtitle.templateWithCategory": "Pewność: {{confidence}} · Status: {{status}} · Kategoria: {{category}}",
   "inbox_ops.sender_unknown": "Nieznany",
   "inbox_ops.settings.active": "Aktywny",
   "inbox_ops.settings.copied": "Skopiowano",

package/src/modules/inbox_ops/search.ts

@@ -4,6 +4,7 @@ import type {
   SearchResultPresenter,
   SearchIndexSource,
 } from '@open-mercato/shared/modules/search'
+import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
 
 type SearchContext = SearchBuildContext & {
   tenantId: string
@@ -30,6 +31,14 @@ export const searchConfig: SearchModuleConfig = {
         const record = ctx.record
         if (!record.summary) return null
 
+        const { t } = await resolveTranslations()
+        const confidence = String(record.confidence ?? '')
+        const status = String(record.status ?? '')
+        const category = record.category ? String(record.category) : ''
+        const subtitle = category
+          ? t('inbox_ops.search.subtitle.templateWithCategory', 'Confidence: {{confidence}} · Status: {{status}} · Category: {{category}}', { confidence, status, category })
+          : t('inbox_ops.search.subtitle.template', 'Confidence: {{confidence}} · Status: {{status}}', { confidence, status })
+
         return {
           text: String(record.summary || ''),
           fields: {
@@ -39,8 +48,8 @@ export const searchConfig: SearchModuleConfig = {
             detected_language: record.detected_language,
           },
           presenter: {
-            title: String(record.summary || 'Inbox Proposal').slice(0, 80),
-            subtitle: `Confidence: ${record.confidence} - Status: ${record.status}${record.category ? ` - Category: ${record.category}` : ''}`,
+            title: String(record.summary || t('inbox_ops.search.fallback.title', 'Inbox Proposal')).slice(0, 80),
+            subtitle,
             icon: 'inbox',
           },
           checksumSource: {
@@ -53,9 +62,16 @@ export const searchConfig: SearchModuleConfig = {
         }
       },
       formatResult: async (ctx: SearchBuildContext): Promise<SearchResultPresenter | null> => {
+        const { t } = await resolveTranslations()
+        const confidence = String(ctx.record.confidence ?? '')
+        const status = String(ctx.record.status ?? '')
+        const category = ctx.record.category ? String(ctx.record.category) : ''
+        const subtitle = category
+          ? t('inbox_ops.search.subtitle.templateWithCategory', 'Confidence: {{confidence}} · Status: {{status}} · Category: {{category}}', { confidence, status, category })
+          : t('inbox_ops.search.subtitle.template', 'Confidence: {{confidence}} · Status: {{status}}', { confidence, status })
         return {
-          title: String(ctx.record.summary || 'Inbox Proposal').slice(0, 80),
-          subtitle: `Confidence: ${ctx.record.confidence} - Status: ${ctx.record.status}${ctx.record.category ? ` - Category: ${ctx.record.category}` : ''}`,
+          title: String(ctx.record.summary || t('inbox_ops.search.fallback.title', 'Inbox Proposal')).slice(0, 80),
+          subtitle,
           icon: 'inbox',
         }
       },

package/src/modules/integrations/api/[id]/credentials/route.ts

@@ -21,7 +21,7 @@ import {
   runIntegrationMutationGuardAfterSuccess,
   runIntegrationMutationGuards,
 } from '../../guards'
-import { resolveIntegrationsOrganizationId } from '../../../lib/organization-scope'
+import { organizationScopeRequiredResponse, resolveActiveOrganizationId } from '@open-mercato/shared/lib/auth/organizationScope'
 
 const idParamsSchema = z.object({ id: z.string().min(1) })
 
@@ -45,10 +45,13 @@ function resolveParams(ctx: { params?: Promise<{ id?: string }> | { id?: string
 
 export async function GET(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {
   const auth = await getAuthFromRequest(req)
-  const organizationId = resolveIntegrationsOrganizationId(auth)
-  if (!auth?.tenantId || !organizationId) {
+  if (!auth?.tenantId) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
   }
+  const organizationId = resolveActiveOrganizationId(auth)
+  if (!organizationId) {
+    return organizationScopeRequiredResponse()
+  }
 
   const rawParams = await resolveParams(ctx)
   const parsedParams = idParamsSchema.safeParse(rawParams)
@@ -91,10 +94,13 @@ export async function GET(req: Request, ctx: { params?: Promise<{ id?: string }>
 
 export async function PUT(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {
   const auth = await getAuthFromRequest(req)
-  const organizationId = resolveIntegrationsOrganizationId(auth)
-  if (!auth?.tenantId || !organizationId) {
+  if (!auth?.tenantId) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
   }
+  const organizationId = resolveActiveOrganizationId(auth)
+  if (!organizationId) {
+    return organizationScopeRequiredResponse()
+  }
 
   const rawParams = await resolveParams(ctx)
   const parsedParams = idParamsSchema.safeParse(rawParams)

package/src/modules/integrations/api/[id]/health/route.ts

@@ -9,7 +9,7 @@ import {
   runIntegrationMutationGuardAfterSuccess,
   runIntegrationMutationGuards,
 } from '../../guards'
-import { resolveIntegrationsOrganizationId } from '../../../lib/organization-scope'
+import { organizationScopeRequiredResponse, resolveActiveOrganizationId } from '@open-mercato/shared/lib/auth/organizationScope'
 
 const idParamsSchema = z.object({ id: z.string().min(1) })
 
@@ -24,10 +24,13 @@ export const openApi = {
 
 export async function POST(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {
   const auth = await getAuthFromRequest(req)
-  const organizationId = resolveIntegrationsOrganizationId(auth)
-  if (!auth?.tenantId || !organizationId) {
+  if (!auth?.tenantId) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
   }
+  const organizationId = resolveActiveOrganizationId(auth)
+  if (!organizationId) {
+    return organizationScopeRequiredResponse()
+  }
 
   const rawParams = (ctx.params && typeof (ctx.params as Promise<unknown>).then === 'function')
     ? await (ctx.params as Promise<{ id?: string }>)

package/src/modules/integrations/api/[id]/route.ts

@@ -12,7 +12,7 @@ import {
   integrationApiRoutePaths,
   runIntegrationsReadBeforeInterceptors,
 } from '../umes-read'
-import { resolveIntegrationsOrganizationId } from '../../lib/organization-scope'
+import { organizationScopeRequiredResponse, resolveActiveOrganizationId } from '@open-mercato/shared/lib/auth/organizationScope'
 
 const idParamsSchema = z.object({ id: z.string().min(1) })
 
@@ -27,10 +27,13 @@ export const openApi = {
 
 export async function GET(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {
   const auth = await getAuthFromRequest(req)
-  const organizationId = resolveIntegrationsOrganizationId(auth)
-  if (!auth?.tenantId || !organizationId) {
+  if (!auth?.tenantId) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
   }
+  const organizationId = resolveActiveOrganizationId(auth)
+  if (!organizationId) {
+    return organizationScopeRequiredResponse()
+  }
 
   const rawParams = (ctx.params && typeof (ctx.params as Promise<unknown>).then === 'function')
     ? await (ctx.params as Promise<{ id?: string }>)

package/src/modules/integrations/api/[id]/state/route.ts

@@ -13,7 +13,7 @@ import {
   runIntegrationMutationGuardAfterSuccess,
   runIntegrationMutationGuards,
 } from '../../guards'
-import { resolveIntegrationsOrganizationId } from '../../../lib/organization-scope'
+import { organizationScopeRequiredResponse, resolveActiveOrganizationId } from '@open-mercato/shared/lib/auth/organizationScope'
 
 const idParamsSchema = z.object({ id: z.string().min(1) })
 
@@ -28,10 +28,13 @@ export const openApi = {
 
 export async function PUT(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {
   const auth = await getAuthFromRequest(req)
-  const organizationId = resolveIntegrationsOrganizationId(auth)
-  if (!auth?.tenantId || !organizationId) {
+  if (!auth?.tenantId) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
   }
+  const organizationId = resolveActiveOrganizationId(auth)
+  if (!organizationId) {
+    return organizationScopeRequiredResponse()
+  }
 
   const rawParams = (ctx.params && typeof (ctx.params as Promise<unknown>).then === 'function')
     ? await (ctx.params as Promise<{ id?: string }>)

package/src/modules/integrations/api/[id]/version/route.ts

@@ -14,7 +14,7 @@ import {
   runIntegrationMutationGuardAfterSuccess,
   runIntegrationMutationGuards,
 } from '../../guards'
-import { resolveIntegrationsOrganizationId } from '../../../lib/organization-scope'
+import { organizationScopeRequiredResponse, resolveActiveOrganizationId } from '@open-mercato/shared/lib/auth/organizationScope'
 
 const idParamsSchema = z.object({ id: z.string().min(1) })
 
@@ -29,10 +29,13 @@ export const openApi = {
 
 export async function PUT(req: Request, ctx: { params?: Promise<{ id?: string }> | { id?: string } }) {
   const auth = await getAuthFromRequest(req)
-  const organizationId = resolveIntegrationsOrganizationId(auth)
-  if (!auth?.tenantId || !organizationId) {
+  if (!auth?.tenantId) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
   }
+  const organizationId = resolveActiveOrganizationId(auth)
+  if (!organizationId) {
+    return organizationScopeRequiredResponse()
+  }
 
   const rawParams = (ctx.params && typeof (ctx.params as Promise<unknown>).then === 'function')
     ? await (ctx.params as Promise<{ id?: string }>)

package/src/modules/integrations/api/logs/route.ts

@@ -8,7 +8,7 @@ import {
   integrationApiRoutePaths,
   runIntegrationsReadBeforeInterceptors,
 } from '../umes-read'
-import { resolveIntegrationsOrganizationId } from '../../lib/organization-scope'
+import { organizationScopeRequiredResponse, resolveActiveOrganizationId } from '@open-mercato/shared/lib/auth/organizationScope'
 
 export const metadata = {
   GET: { requireAuth: true, requireFeatures: ['integrations.manage'] },
@@ -21,10 +21,13 @@ export const openApi = {
 
 export async function GET(req: Request) {
   const auth = await getAuthFromRequest(req)
-  const organizationId = resolveIntegrationsOrganizationId(auth)
-  if (!auth?.tenantId || !organizationId) {
+  if (!auth?.tenantId) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
   }
+  const organizationId = resolveActiveOrganizationId(auth)
+  if (!organizationId) {
+    return organizationScopeRequiredResponse()
+  }
 
   const container = await createRequestContainer()
   const beforeInterceptors = await runIntegrationsReadBeforeInterceptors({

package/src/modules/integrations/api/route.ts

@@ -14,7 +14,7 @@ import {
   integrationApiRoutePaths,
   runIntegrationsReadBeforeInterceptors,
 } from './umes-read'
-import { resolveIntegrationsOrganizationId } from '../lib/organization-scope'
+import { organizationScopeRequiredResponse, resolveActiveOrganizationId } from '@open-mercato/shared/lib/auth/organizationScope'
 
 export const metadata = {
   GET: { requireAuth: true, requireFeatures: ['integrations.view'] },
@@ -47,10 +47,13 @@ function matchesSearchQuery(
 
 export async function GET(req: Request) {
   const auth = await getAuthFromRequest(req)
-  const organizationId = resolveIntegrationsOrganizationId(auth)
-  if (!auth?.tenantId || !organizationId) {
+  if (!auth?.tenantId) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
   }
+  const organizationId = resolveActiveOrganizationId(auth)
+  if (!organizationId) {
+    return organizationScopeRequiredResponse()
+  }
 
   const url = new URL(req.url)
   const parsedQuery = listIntegrationsQuerySchema.safeParse(Object.fromEntries(url.searchParams.entries()))

package/src/modules/integrations/api/umes-read.ts

@@ -4,7 +4,7 @@ import type { AwilixContainer } from 'awilix'
 import { runApiInterceptorsAfter, runApiInterceptorsBefore, type RunInterceptorsBeforeResult } from '@open-mercato/shared/lib/crud/interceptor-runner'
 import { applyResponseEnrichers, applyResponseEnricherToRecord } from '@open-mercato/shared/lib/crud/enricher-runner'
 import type { ApiInterceptorMethod, InterceptorRequest } from '@open-mercato/shared/lib/crud/api-interceptor'
-import { resolveIntegrationsOrganizationId } from '../lib/organization-scope'
+import { resolveActiveOrganizationId } from '@open-mercato/shared/lib/auth/organizationScope'
 
 export const integrationApiRoutePaths = {
   list: 'integrations',
@@ -67,7 +67,7 @@ function mergeAdditiveBody(
 
 function getEnricherContext(input: ReadRouteContext) {
   return {
-    organizationId: resolveIntegrationsOrganizationId(input.auth) as string,
+    organizationId: resolveActiveOrganizationId(input.auth) as string,
     tenantId: input.auth.tenantId as string,
     userId: input.auth.sub ?? '',
     em: input.container.resolve('em') as EntityManager,

package/src/modules/integrations/lib/organization-scope.ts

@@ -1,27 +1,7 @@
-type OrganizationScopedAuth = {
-  orgId?: string | null
-  actorOrgId?: unknown
-} | null | undefined
-
 /**
- * Resolves the organization an integrations request is scoped to.
- *
- * Integrations are configured per organization — `integration_credentials` and
- * `integration_states` both require a non-null `organization_id` — so there is no
- * meaningful "all organizations" view of this module. When an operator selects that
- * option the super-admin cookie override clears `auth.orgId` and preserves the actor's
- * own organization in `actorOrgId`; fall back to it so the module keeps showing the
- * operator's own configuration instead of failing.
- *
- * Answering 401 for that case is not merely wrong but self-perpetuating: `apiFetch`
- * reads 401 as an expired session and redirects through `/api/auth/session/refresh`,
- * which succeeds and returns to the same page, reloading forever.
+ * @deprecated Moved to `@open-mercato/shared/lib/auth/organizationScope` as
+ * `resolveActiveOrganizationId`, because `data_sync` needs the same resolution and
+ * `integrations` is not the right owner for it. This alias stays for third-party
+ * modules that already import from here.
  */
-export function resolveIntegrationsOrganizationId(auth: OrganizationScopedAuth): string | null {
-  if (!auth) return null
-  const selected = auth.orgId
-  if (typeof selected === 'string' && selected.trim().length > 0) return selected
-  const actorOrgId = auth.actorOrgId
-  if (typeof actorOrgId === 'string' && actorOrgId.trim().length > 0) return actorOrgId
-  return null
-}
+export { resolveActiveOrganizationId as resolveIntegrationsOrganizationId } from '@open-mercato/shared/lib/auth/organizationScope'

package/src/modules/messages/i18n/de.json

@@ -213,6 +213,8 @@
   "messages.replyBody": "Antwort",
   "messages.saveDraft": "Entwurf speichern",
   "messages.savingDraft": "Entwurf wird gespeichert...",
+  "messages.search.badge.message": "Nachricht",
+  "messages.search.fallback.title": "Nachricht",
   "messages.searchPlaceholder": "Nachrichten suchen",
   "messages.send": "Senden",
   "messages.sendViaEmail": "Auch per E-Mail senden",

package/src/modules/messages/i18n/en.json

@@ -213,6 +213,8 @@
   "messages.replyBody": "Reply",
   "messages.saveDraft": "Save draft",
   "messages.savingDraft": "Saving draft...",
+  "messages.search.badge.message": "Message",
+  "messages.search.fallback.title": "Message",
   "messages.searchPlaceholder": "Search messages",
   "messages.send": "Send",
   "messages.sendViaEmail": "Also send via email",

package/src/modules/messages/i18n/es.json

@@ -213,6 +213,8 @@
   "messages.replyBody": "Respuesta",
   "messages.saveDraft": "Guardar borrador",
   "messages.savingDraft": "Guardando borrador...",
+  "messages.search.badge.message": "Mensaje",
+  "messages.search.fallback.title": "Mensaje",
   "messages.searchPlaceholder": "Buscar mensajes",
   "messages.send": "Enviar",
   "messages.sendViaEmail": "Enviar también por correo",

package/src/modules/messages/i18n/pl.json

@@ -213,6 +213,8 @@
   "messages.replyBody": "Odpowiedź",
   "messages.saveDraft": "Zapisz szkic",
   "messages.savingDraft": "Zapisywanie szkicu...",
+  "messages.search.badge.message": "Wiadomość",
+  "messages.search.fallback.title": "Wiadomość",
   "messages.searchPlaceholder": "Szukaj wiadomości",
   "messages.send": "Wyślij",
   "messages.sendViaEmail": "Wyślij także e-mailem",

package/src/modules/messages/search.ts

@@ -4,6 +4,8 @@ import type {
   SearchIndexSource,
   SearchResultPresenter,
 } from '@open-mercato/shared/modules/search'
+import type { TranslateFn } from '@open-mercato/shared/lib/i18n/context'
+import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
 
 function appendLine(lines: string[], label: string, value: unknown) {
   if (value === null || value === undefined) return
@@ -31,8 +33,8 @@ function snippet(value: unknown, max = 140): string | undefined {
   return `${trimmed.slice(0, max - 3)}...`
 }
 
-function buildMessagePresenter(record: Record<string, unknown>): SearchResultPresenter {
-  const title = pickString(record.subject) ?? 'Message'
+function buildMessagePresenter(translate: TranslateFn, record: Record<string, unknown>): SearchResultPresenter {
+  const title = pickString(record.subject) ?? translate('messages.search.fallback.title', 'Message')
   const body = snippet(record.body)
   const externalName = pickString(record.external_name, record.externalName)
   const subtitle = [externalName, body].filter(Boolean).join(' · ') || undefined
@@ -40,7 +42,7 @@ function buildMessagePresenter(record: Record<string, unknown>): SearchResultPre
     title: String(title),
     subtitle,
     icon: 'mail',
-    badge: 'Message',
+    badge: translate('messages.search.badge.message', 'Message'),
   }
 }
 
@@ -51,6 +53,7 @@ export const searchConfig: SearchModuleConfig = {
       enabled: true,
       priority: 5,
       buildSource: async (ctx: SearchBuildContext): Promise<SearchIndexSource | null> => {
+        const { t } = await resolveTranslations()
         const record = ctx.record
         const lines: string[] = []
         appendLine(lines, 'Subject', record.subject)
@@ -59,7 +62,7 @@ export const searchConfig: SearchModuleConfig = {
         if (!lines.length) return null
         return {
           text: lines,
-          presenter: buildMessagePresenter(record),
+          presenter: buildMessagePresenter(t, record),
           checksumSource: {
             record: {
               subject: record.subject,
@@ -70,7 +73,10 @@ export const searchConfig: SearchModuleConfig = {
           },
         }
       },
-      formatResult: async (ctx) => buildMessagePresenter(ctx.record),
+      formatResult: async (ctx) => {
+        const { t } = await resolveTranslations()
+        return buildMessagePresenter(t, ctx.record)
+      },
       resolveUrl: async (ctx) => {
         const id = pickString(ctx.record.id)
         return id ? `/backend/messages/${encodeURIComponent(id)}` : null

package/src/modules/query_index/data/entities.ts

@@ -255,6 +255,13 @@ export class IndexerStatusLog {
 @Index({ name: 'search_tokens_lookup_idx', properties: ['entityType', 'field', 'tokenHash', 'tenantId', 'organizationId'] })
 @Index({ name: 'search_tokens_entity_idx', properties: ['entityType', 'entityId'] })
 @Index({ name: 'search_tokens_tenant_token_hash_idx', properties: ['tenantId', 'tokenHash'] })
+// Serves the availability probe ("does this scope have any tokens?") as a pure
+// B-tree prefix seek, making the MISS as cheap as the hit — neither existing
+// index can (lookup_idx buries tenant_id behind field/token_hash), which is how
+// the probe degraded to a seq scan on large tables (#4723). Requires the
+// index-usable `= / IS NULL` predicates the availability resolver emits; see
+// .ai/specs/2026-07-31-search-token-probe-index.md.
+@Index({ name: 'search_tokens_presence_idx', properties: ['entityType', 'tenantId', 'organizationId'] })
 export class SearchToken {
   @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })
   id!: string