@open-mercato/core 0.6.7-develop.6863.1.61001cf9a8 → 0.6.7

package/src/modules/workflows/data/validators.ts

@@ -202,20 +202,6 @@ export const activityRetryPolicySchema = z.object({
   maxIntervalMs: z.number().int().min(0),
 })
 
-/**
- * Config fields each activity executor requires to run (see
- * `lib/activity-executor.ts`). WAIT is handled separately below because it
- * takes "duration" OR "until" rather than a fixed key set.
- */
-const REQUIRED_ACTIVITY_CONFIG_KEYS: Partial<Record<ActivityType, readonly string[]>> = {
-  SEND_EMAIL: ['to', 'subject'],
-  CALL_API: ['endpoint'],
-  CALL_WEBHOOK: ['url'],
-  UPDATE_ENTITY: ['commandId', 'input'],
-  EMIT_EVENT: ['eventName'],
-  EXECUTE_FUNCTION: ['functionName'],
-}
-
 // Activity definition (embedded in transitions)
 export const activityDefinitionSchema = z.object({
   activityId: z.string().min(1).max(100).regex(/^[a-z0-9_-]+$/, 'Activity ID must contain only lowercase letters, numbers, hyphens, and underscores'),
@@ -224,49 +210,12 @@ export const activityDefinitionSchema = z.object({
   config: z.record(z.string(), z.any()),
   async: z.boolean().default(false).optional(), // For Phase 8.3
   retryPolicy: activityRetryPolicySchema.optional(),
-  /**
-   * Per-activity timeout in milliseconds. This is what the editor writes and
-   * what `executeActivity` reads; it was missing from the schema, so
-   * `z.object()` stripped it on save and UI-configured timeouts silently did
-   * nothing (#4424).
-   */
-  timeoutMs: z.number().int().positive().optional(),
-  /**
-   * @deprecated Use `timeoutMs`. Accepted for definitions already stored with
-   * an ISO 8601 duration string; the executor normalizes it to milliseconds.
-   */
-  timeout: z.string().optional(),
+  timeout: z.string().optional(), // ISO 8601 duration
   compensation: z.object({
     activityId: z.string().min(1), // ID of compensation activity
     automatic: z.boolean().default(true).optional() // Auto-trigger on failure
   }).optional(), // Compensation configuration (Phase 8.2)
 }).superRefine((activity, ctx) => {
-  // Config keys each activity executor requires at runtime. Without this, an
-  // activity missing e.g. CALL_API's `endpoint` saved cleanly from the visual
-  // editor and only failed once an instance ran it — the "edit silently
-  // disappeared / nothing told me why" report in #4232 (and the class of bug
-  // #4322 was an instance of). Validating here surfaces the exact missing field
-  // at edit time, since both the editor's save path and the API route parse
-  // through this schema.
-  const requiredConfigKeys = REQUIRED_ACTIVITY_CONFIG_KEYS[activity.activityType]
-  if (requiredConfigKeys) {
-    const config = activity.config || {}
-    for (const key of requiredConfigKeys) {
-      const value = config[key]
-      const isEmpty =
-        value == null ||
-        (typeof value === 'string' && value.trim() === '') ||
-        (key === 'input' && typeof value !== 'object')
-      if (isEmpty) {
-        ctx.addIssue({
-          code: 'custom',
-          path: ['config', key],
-          message: `${activity.activityType} activity requires "${key}"`,
-        })
-      }
-    }
-  }
-
   if (activity.activityType !== 'WAIT') return
   const config = activity.config || {}
   const hasDuration = config.duration != null && config.duration !== ''

package/src/modules/workflows/events.ts

@@ -30,7 +30,6 @@ const events = [
   { id: 'workflows.activity.started', label: 'Activity Started', category: 'lifecycle' },
   { id: 'workflows.activity.completed', label: 'Activity Completed', category: 'lifecycle' },
   { id: 'workflows.activity.failed', label: 'Activity Failed', category: 'lifecycle' },
-  { id: 'workflows.task.assigned', label: 'Task Assigned', entity: 'task', category: 'lifecycle' },
 
   // Event Triggers
   { id: 'workflows.trigger.created', label: 'Trigger Created', entity: 'trigger', category: 'crud' },

package/src/modules/workflows/i18n/de.json

@@ -80,8 +80,6 @@
   "workflows.activities.async": "Asynchron",
   "workflows.activities.compensation": "Kompensation",
   "workflows.activities.config": "Konfiguration",
-  "workflows.activities.configInvalidJson": "Ungültiges JSON",
-  "workflows.activities.configMustBeObject": "Konfiguration muss ein JSON-Objekt sein",
   "workflows.activities.deleteActivity": "Aktivität löschen",
   "workflows.activities.editActivity": "Aktivität bearbeiten",
   "workflows.activities.plural": "Aktivitäten",
@@ -935,7 +933,6 @@
   "workflows.orderApproval.decisionLabel": "Entscheidung",
   "workflows.orderApproval.groupDescription": "Bestellung prüfen und genehmigen oder ablehnen.",
   "workflows.orderApproval.groupLabel": "Bestellgenehmigung",
-  "workflows.orderApproval.missingOrderId": "Der Genehmigungsworkflow kann erst gestartet werden, wenn die Bestellung geladen ist.",
   "workflows.orderApproval.missingStatuses": "Fehlende Bestellstatus. Stellen Sie sicher, dass pending_approval, approved und rejected vorhanden sind.",
   "workflows.orderApproval.noWorkflowActive": "Kein Genehmigungsworkflow für diese Bestellung aktiv.",
   "workflows.orderApproval.pendingDescription": "Diese Bestellung erfordert eine Genehmigung.",

package/src/modules/workflows/i18n/en.json

@@ -80,8 +80,6 @@
   "workflows.activities.async": "Asynchronous",
   "workflows.activities.compensation": "Compensation",
   "workflows.activities.config": "Configuration",
-  "workflows.activities.configInvalidJson": "Invalid JSON",
-  "workflows.activities.configMustBeObject": "Config must be a JSON object",
   "workflows.activities.deleteActivity": "Delete Activity",
   "workflows.activities.editActivity": "Edit Activity",
   "workflows.activities.plural": "Activities",
@@ -935,7 +933,6 @@
   "workflows.orderApproval.decisionLabel": "Decision",
   "workflows.orderApproval.groupDescription": "Review and approve or reject this order.",
   "workflows.orderApproval.groupLabel": "Order Approval",
-  "workflows.orderApproval.missingOrderId": "Cannot start the approval workflow before the order has loaded.",
   "workflows.orderApproval.missingStatuses": "Missing order status entries. Please ensure pending_approval, approved, and rejected statuses exist.",
   "workflows.orderApproval.noWorkflowActive": "No approval workflow is active for this order.",
   "workflows.orderApproval.pendingDescription": "This order requires approval before processing.",

package/src/modules/workflows/i18n/es.json

@@ -80,8 +80,6 @@
   "workflows.activities.async": "Asincrona",
   "workflows.activities.compensation": "Compensacion",
   "workflows.activities.config": "Configuracion",
-  "workflows.activities.configInvalidJson": "JSON no válido",
-  "workflows.activities.configMustBeObject": "La configuración debe ser un objeto JSON",
   "workflows.activities.deleteActivity": "Eliminar actividad",
   "workflows.activities.editActivity": "Editar actividad",
   "workflows.activities.plural": "Actividades",
@@ -935,7 +933,6 @@
   "workflows.orderApproval.decisionLabel": "Decisión",
   "workflows.orderApproval.groupDescription": "Revise y apruebe o rechace este pedido.",
   "workflows.orderApproval.groupLabel": "Aprobación de pedido",
-  "workflows.orderApproval.missingOrderId": "No se puede iniciar el flujo de aprobación antes de que el pedido se haya cargado.",
   "workflows.orderApproval.missingStatuses": "Faltan entradas de estado del pedido. Asegúrese de que existan los estados pending_approval, approved y rejected.",
   "workflows.orderApproval.noWorkflowActive": "No hay un flujo de aprobación activo para este pedido.",
   "workflows.orderApproval.pendingDescription": "Este pedido requiere aprobación antes de procesarse.",

package/src/modules/workflows/i18n/pl.json

@@ -80,8 +80,6 @@
   "workflows.activities.async": "Asynchroniczne",
   "workflows.activities.compensation": "Kompensacja",
   "workflows.activities.config": "Konfiguracja",
-  "workflows.activities.configInvalidJson": "Nieprawidłowy JSON",
-  "workflows.activities.configMustBeObject": "Konfiguracja musi być obiektem JSON",
   "workflows.activities.deleteActivity": "Usuń Działanie",
   "workflows.activities.editActivity": "Edytuj Działanie",
   "workflows.activities.plural": "Działania",
@@ -935,7 +933,6 @@
   "workflows.orderApproval.decisionLabel": "Decyzja",
   "workflows.orderApproval.groupDescription": "Przejrzyj i zatwierdź lub odrzuć to zamówienie.",
   "workflows.orderApproval.groupLabel": "Zatwierdzanie zamówienia",
-  "workflows.orderApproval.missingOrderId": "Nie można rozpocząć procesu zatwierdzania, zanim zamówienie się nie wczyta.",
   "workflows.orderApproval.missingStatuses": "Brakuje wpisów statusów zamówienia. Upewnij się, że istnieją statusy pending_approval, approved i rejected.",
   "workflows.orderApproval.noWorkflowActive": "Brak aktywnego przepływu zatwierdzania dla tego zamówienia.",
   "workflows.orderApproval.pendingDescription": "To zamówienie wymaga zatwierdzenia przed realizacją.",

package/src/modules/workflows/lib/activity-executor.ts

@@ -22,6 +22,7 @@ import {
   type HostLookup,
 } from '@open-mercato/shared/lib/url-safety'
 import { parseBooleanWithDefault } from '@open-mercato/shared/lib/boolean'
+import { hasAllFeatures } from '@open-mercato/shared/security/features'
 import { callWebhookConfigSchema } from '../data/validators'
 import { WorkflowActivityJob, WORKFLOW_ACTIVITIES_QUEUE_NAME } from './activity-queue-types'
 import { logWorkflowEvent } from './event-logger'
@@ -106,42 +107,9 @@ export interface ActivityDefinition {
   async?: boolean // Flag to execute activity asynchronously via queue
   retryPolicy?: RetryPolicy
   timeoutMs?: number
-  /**
-   * @deprecated Use `timeoutMs`. Legacy ISO 8601 duration string accepted by
-   * the definition schema before #4424; normalized by `resolveActivityTimeoutMs`.
-   */
-  timeout?: string
   compensate?: boolean // Flag to execute compensation on failure
 }
 
-/**
- * Effective timeout for an activity, in milliseconds.
- *
- * The editor and this executor both speak `timeoutMs`, but the definition
- * schema historically accepted only an ISO 8601 `timeout` string — so stored
- * definitions can carry either. Prefer `timeoutMs`; fall back to parsing
- * `timeout`, ignoring a malformed value rather than throwing mid-execution
- * (an unparseable timeout must not fail an activity that would otherwise
- * succeed). Returns undefined when no usable timeout is configured (#4424).
- */
-export function resolveActivityTimeoutMs(activity: {
-  timeoutMs?: number
-  timeout?: string
-}): number | undefined {
-  if (typeof activity.timeoutMs === 'number' && activity.timeoutMs > 0) {
-    return activity.timeoutMs
-  }
-  if (typeof activity.timeout === 'string' && activity.timeout.trim().length > 0) {
-    try {
-      const parsed = parseDuration(activity.timeout.trim())
-      if (Number.isFinite(parsed) && parsed > 0) return parsed
-    } catch {
-      return undefined
-    }
-  }
-  return undefined
-}
-
 export interface RetryPolicy {
   maxAttempts: number
   initialIntervalMs: number
@@ -162,29 +130,27 @@ export interface ActivityContext {
 }
 
 type RbacFeatureResolver = {
-  userHasAllFeatures: (
+  getGrantedFeatures: (
     userId: string,
-    required: string[],
     opts: { tenantId: string | null; organizationId: string | null }
-  ) => Promise<boolean>
+  ) => Promise<string[]>
 }
 
-async function workflowUserHasAllFeatures(
+async function resolveWorkflowUserFeatures(
   container: AwilixContainer,
   userId: string,
-  required: readonly string[],
   tenantId: string | null,
   organizationId: string | null
-): Promise<boolean> {
+): Promise<string[]> {
   try {
     const rbac = container.resolve('rbacService') as RbacFeatureResolver | undefined
-    if (rbac?.userHasAllFeatures) {
-      return await rbac.userHasAllFeatures(userId, [...required], { tenantId, organizationId })
+    if (rbac?.getGrantedFeatures) {
+      return await rbac.getGrantedFeatures(userId, { tenantId, organizationId })
     }
   } catch {
     // Fail closed below when the workflow executor cannot prove the actor's grants.
   }
-  return false
+  return []
 }
 
 export interface ActivityExecutionResult {
@@ -366,13 +332,11 @@ export async function executeActivity(
     try {
       const startTime = Date.now()
 
-      // Execute with timeout if specified (timeoutMs, or a legacy ISO 8601
-      // `timeout` string normalized to ms — see resolveActivityTimeoutMs).
-      const timeoutMs = resolveActivityTimeoutMs(activity)
-      const result = timeoutMs
+      // Execute with timeout if specified
+      const result = activity.timeoutMs
         ? await executeWithTimeout(
-            (signal) => executeActivityByType(em, container, activity, context, signal),
-            timeoutMs
+            () => executeActivityByType(em, container, activity, context),
+            activity.timeoutMs
           )
         : await executeActivityByType(em, container, activity, context)
 
@@ -511,8 +475,7 @@ async function executeActivityByType(
   em: EntityManager,
   container: AwilixContainer,
   activity: ActivityDefinition,
-  context: ActivityContext,
-  signal?: AbortSignal
+  context: ActivityContext
 ): Promise<any> {
   // Interpolate config variables from context (including workflow metadata)
   const interpolatedConfig = interpolateVariables(activity.config, context.workflowContext, context.workflowInstance)
@@ -522,7 +485,7 @@ async function executeActivityByType(
       return await executeSendEmail(interpolatedConfig, context, container)
 
     case 'CALL_API':
-      return await executeCallApi(em, interpolatedConfig, context, container, signal)
+      return await executeCallApi(em, interpolatedConfig, context, container)
 
     case 'EMIT_EVENT':
       return await executeEmitEvent(interpolatedConfig, context, container)
@@ -531,7 +494,7 @@ async function executeActivityByType(
       return await executeUpdateEntity(em, interpolatedConfig, context, container)
 
     case 'CALL_WEBHOOK':
-      return await executeCallWebhook(interpolatedConfig, context, { signal })
+      return await executeCallWebhook(interpolatedConfig, context)
 
     case 'EXECUTE_FUNCTION':
       return await executeFunction(interpolatedConfig, context, container)
@@ -603,17 +566,6 @@ export async function executeEmitEvent(
     throw new Error('EMIT_EVENT requires "eventName" field')
   }
 
-  // Emissions are fire-and-forget and no subscriber validates the payload shape,
-  // so an unresolved `{{context.x}}` here is even quieter than on the command
-  // path — it ships the literal template to every consumer. Fail loudly instead.
-  const unresolvedPayloadKeys = findUnresolvedTemplateKeys(payload)
-  if (unresolvedPayloadKeys.length > 0) {
-    throw new Error(
-      `EMIT_EVENT payload contains unresolved template variables for: ${unresolvedPayloadKeys.join(', ')}. ` +
-        `Check that the workflow context provides these keys.`
-    )
-  }
-
   // Get event bus from container
   const eventBus = container.resolve<{ emitEvent: (event: string, payload: unknown, options?: unknown) => Promise<unknown> | unknown }>('eventBus')
 
@@ -640,23 +592,6 @@ export async function executeEmitEvent(
   return { emitted: true, eventName, payload: enrichedPayload }
 }
 
-const UNRESOLVED_TEMPLATE_PATTERN = /\{\{[^}]+\}\}/
-
-function findUnresolvedTemplateKeys(value: unknown, path = ''): string[] {
-  if (typeof value === 'string') {
-    return UNRESOLVED_TEMPLATE_PATTERN.test(value) ? [path] : []
-  }
-  if (Array.isArray(value)) {
-    return value.flatMap((item, index) => findUnresolvedTemplateKeys(item, `${path}[${index}]`))
-  }
-  if (value && typeof value === 'object') {
-    return Object.entries(value).flatMap(([key, nested]) =>
-      findUnresolvedTemplateKeys(nested, path ? `${path}.${key}` : key)
-    )
-  }
-  return []
-}
-
 /**
  * UPDATE_ENTITY activity handler
  *
@@ -679,14 +614,11 @@ function findUnresolvedTemplateKeys(value: unknown, path = ''): string[] {
  *   "commandId": "sales.orders.update",
  *   "statusDictionary": "sales.order_status",
  *   "input": {
- *     "id": "{{context.orderId}}",
+ *     "id": "{{context.id}}",
  *     "statusValue": "pending_approval"
  *   }
  * }
  * ```
- *
- * Every `{{...}}` reference in `input` must resolve against the workflow context —
- * an unresolved reference is rejected rather than forwarded to the command bus.
  */
 export async function executeUpdateEntity(
   em: EntityManager,
@@ -714,14 +646,13 @@ export async function executeUpdateEntity(
     throw new Error('UPDATE_ENTITY requires an authenticated workflow user')
   }
 
-  const authorized = await workflowUserHasAllFeatures(
+  const userFeatures = await resolveWorkflowUserFeatures(
     container,
     actorUserId,
-    workflowSafeCommand.requiredFeatures,
     context.workflowInstance.tenantId,
     context.workflowInstance.organizationId
   )
-  if (!authorized) {
+  if (!hasAllFeatures(userFeatures, workflowSafeCommand.requiredFeatures)) {
     throw new Error('UPDATE_ENTITY command is not authorized')
   }
 
@@ -732,14 +663,6 @@ export async function executeUpdateEntity(
     throw new Error('CommandBus not available in container')
   }
 
-  const unresolvedKeys = findUnresolvedTemplateKeys(input)
-  if (unresolvedKeys.length > 0) {
-    throw new Error(
-      `UPDATE_ENTITY input contains unresolved template variables for: ${unresolvedKeys.join(', ')}. ` +
-        `Check that the workflow context provides these keys.`
-    )
-  }
-
   // Prepare final input, resolving statusValue if provided
   let finalInput = { ...input }
 
@@ -1496,21 +1419,19 @@ function sleep(ms: number): Promise<void> {
  * Execute a promise with timeout
  */
 async function executeWithTimeout<T>(
-  executor: (signal: AbortSignal) => Promise<T>,
+  executor: () => Promise<T>,
   timeoutMs: number
 ): Promise<T> {
   let timeoutId: NodeJS.Timeout
-  const abortController = new AbortController()
 
   const timeoutPromise = new Promise<never>((_, reject) => {
     timeoutId = setTimeout(() => {
-      abortController.abort()
       reject(new Error(`Activity execution timeout after ${timeoutMs}ms`))
     }, timeoutMs)
   })
 
   try {
-    return await Promise.race([executor(abortController.signal), timeoutPromise])
+    return await Promise.race([executor(), timeoutPromise])
   } finally {
     clearTimeout(timeoutId!)
   }

package/src/modules/workflows/lib/format-validation-error.ts

@@ -8,66 +8,6 @@ type ApiErrorBody = {
   details?: ZodIssueLite[]
 }
 
-// Collection segments in a definition path, mapped to the label an operator
-// recognizes from the editor. Indexes are rendered 1-based.
-const COLLECTION_LABELS: Record<string, string> = {
-  steps: 'step',
-  transitions: 'transition',
-  activities: 'activity',
-  triggers: 'trigger',
-  preConditions: 'pre-condition',
-}
-
-/**
- * Turn a raw Zod path into something an operator can act on:
- * `steps.2.activities.0.config.endpoint` → `step 3 › activity 1 › config.endpoint`.
- *
- * The raw dotted path reads as internal JSON and gives no hint which node to
- * open in the visual editor (#4232).
- */
-export function humanizeDefinitionIssuePath(path: ReadonlyArray<PropertyKey>): string {
-  if (!path.length) return 'definition'
-  const parts: string[] = []
-  let pending: string | null = null
-
-  for (const rawSegment of path) {
-    // Zod types issue paths as PropertyKey; symbols can't appear in JSON data
-    // but narrow defensively rather than casting.
-    const segment = typeof rawSegment === 'symbol' ? rawSegment.toString() : rawSegment
-    if (typeof segment === 'number') {
-      parts.push(pending ? `${pending} ${segment + 1}` : `#${segment + 1}`)
-      pending = null
-      continue
-    }
-    const label = COLLECTION_LABELS[segment]
-    if (label) {
-      if (pending) parts.push(pending)
-      pending = label
-      continue
-    }
-    if (pending) {
-      parts.push(pending)
-      pending = null
-    }
-    parts.push(segment)
-  }
-  if (pending) parts.push(pending)
-
-  const [head, ...rest] = parts
-  if (!rest.length) return head
-  // Keep trailing field names dotted (config.endpoint), collections chevroned.
-  const grouped: string[] = [head]
-  for (const part of rest) {
-    const isIndexed = /\s\d+$/.test(part) || part.startsWith('#')
-    if (!isIndexed && grouped.length > 0 && !/\s\d+$/.test(grouped[grouped.length - 1]) && !grouped[grouped.length - 1].startsWith('#')) {
-      grouped[grouped.length - 1] = `${grouped[grouped.length - 1]}.${part}`
-      continue
-    }
-    grouped.push(part)
-  }
-  return grouped.join(' › ')
-}
-
 /**
  * Format an API validation error body into a user-readable message.
  *

package/src/modules/workflows/widgets/injection/order-approval/widget.client.tsx

@@ -10,8 +10,6 @@ import { Spinner } from '@open-mercato/ui/primitives/spinner'
 import { Textarea } from '@open-mercato/ui/primitives/textarea'
 import { Badge } from '@open-mercato/ui/primitives/badge'
 import { emitSalesDocumentDataRefresh } from '@open-mercato/core/modules/sales/lib/frontend/documentDataEvents'
-import { fetchAllDictionaryEntries } from '@open-mercato/core/modules/dictionaries/lib/fetchAllEntries'
-import type { OrderApprovalInitialContext } from './context-keys'
 
 type OrderRecord = {
   id: string
@@ -167,18 +165,12 @@ export default function OrderApprovalWidget({ data }: InjectionWidgetComponentPr
   // Fetch order status dictionary entries using the dictionary ID
   const { data: statusEntriesData } = useQuery({
     queryKey: ['dictionary-entries', orderStatusDictionaryId],
-    queryFn: async (): Promise<{ items: DictionaryEntry[] }> => {
+    queryFn: async () => {
       if (!orderStatusDictionaryId) return { items: [] }
-      const result = await fetchAllDictionaryEntries(orderStatusDictionaryId)
-      if (!result.ok) return { items: [] }
-      const items = result.items.flatMap((entry) => {
-        const id = typeof entry.id === 'string' ? entry.id : null
-        const value = typeof entry.value === 'string' ? entry.value : null
-        if (!id || !value) return []
-        const label = typeof entry.label === 'string' && entry.label.trim().length ? entry.label : value
-        return [{ id, value, label }]
-      })
-      return { items }
+      const result = await apiCall<{ items: DictionaryEntry[] }>(
+        `/api/dictionaries/${orderStatusDictionaryId}/entries`
+      )
+      return result.ok ? result.result : { items: [] }
     },
     enabled: Boolean(orderStatusDictionaryId),
     staleTime: 60_000,
@@ -200,28 +192,20 @@ export default function OrderApprovalWidget({ data }: InjectionWidgetComponentPr
       const approvedStatusId = findStatusId('approved')
       const rejectedStatusId = findStatusId('rejected')
 
-      if (!orderId) {
-        throw new Error(t('workflows.orderApproval.missingOrderId', 'Cannot start the approval workflow before the order has loaded.'))
-      }
-
       if (!pendingApprovalStatusId || !approvedStatusId || !rejectedStatusId) {
         throw new Error(t('workflows.orderApproval.missingStatuses', 'Missing order status entries. Please ensure pending_approval, approved, and rejected statuses exist in the sales.order_status dictionary.'))
       }
 
-      // Typed against the shared key list so a definition that references a new
-      // {{context.*}} key cannot compile until this seed provides it.
-      const initialContext: OrderApprovalInitialContext = {
-        orderId,
-        pendingApprovalStatusId,
-        approvedStatusId,
-        rejectedStatusId,
-      }
-
       const result = await apiCall<{ data: WorkflowInstance }>('/api/workflows/instances', {
         method: 'POST',
         body: JSON.stringify({
           workflowId: WORKFLOW_ID,
-          initialContext,
+          initialContext: {
+            orderId,
+            pendingApprovalStatusId,
+            approvedStatusId,
+            rejectedStatusId,
+          },
           metadata: {
             entityType: 'SalesOrder',
             entityId: orderId,

package/dist/generated/entities/attachment_quota_reservation/index.js

@@ -1,33 +0,0 @@
-const id = "id";
-const tenant_id = "tenant_id";
-const organization_id = "organization_id";
-const reserved_bytes = "reserved_bytes";
-const actual_bytes = "actual_bytes";
-const status = "status";
-const source = "source";
-const storage_driver = "storage_driver";
-const partition_code = "partition_code";
-const storage_path = "storage_path";
-const lease_token = "lease_token";
-const upload_token_hash = "upload_token_hash";
-const expires_at = "expires_at";
-const created_at = "created_at";
-const updated_at = "updated_at";
-export {
-  actual_bytes,
-  created_at,
-  expires_at,
-  id,
-  lease_token,
-  organization_id,
-  partition_code,
-  reserved_bytes,
-  source,
-  status,
-  storage_driver,
-  storage_path,
-  tenant_id,
-  updated_at,
-  upload_token_hash
-};
-//# sourceMappingURL=index.js.map

package/dist/generated/entities/attachment_quota_reservation/index.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../generated/entities/attachment_quota_reservation/index.ts"],
-  "sourcesContent": ["export const id = \"id\";\nexport const tenant_id = \"tenant_id\";\nexport const organization_id = \"organization_id\";\nexport const reserved_bytes = \"reserved_bytes\";\nexport const actual_bytes = \"actual_bytes\";\nexport const status = \"status\";\nexport const source = \"source\";\nexport const storage_driver = \"storage_driver\";\nexport const partition_code = \"partition_code\";\nexport const storage_path = \"storage_path\";\nexport const lease_token = \"lease_token\";\nexport const upload_token_hash = \"upload_token_hash\";\nexport const expires_at = \"expires_at\";\nexport const created_at = \"created_at\";\nexport const updated_at = \"updated_at\";\n"],
-  "mappings": "AAAO,MAAM,KAAK;AACX,MAAM,YAAY;AAClB,MAAM,kBAAkB;AACxB,MAAM,iBAAiB;AACvB,MAAM,eAAe;AACrB,MAAM,SAAS;AACf,MAAM,SAAS;AACf,MAAM,iBAAiB;AACvB,MAAM,iBAAiB;AACvB,MAAM,eAAe;AACrB,MAAM,cAAc;AACpB,MAAM,oBAAoB;AAC1B,MAAM,aAAa;AACnB,MAAM,aAAa;AACnB,MAAM,aAAa;",
-  "names": []
-}

package/dist/modules/api_keys/extension-points.js

@@ -1,16 +0,0 @@
-import { dataTableExtensionHost, defineModuleExtensionPoints } from "@open-mercato/shared/modules/widgets/extension-points";
-const extensionPoints = defineModuleExtensionPoints({
-  moduleId: "api_keys",
-  hosts: {
-    apiKeysTable: dataTableExtensionHost({
-      tableId: "api_keys.list",
-      source: "backend/api-keys/page.tsx"
-    })
-  }
-});
-var extension_points_default = extensionPoints;
-export {
-  extension_points_default as default,
-  extensionPoints
-};
-//# sourceMappingURL=extension-points.js.map

package/dist/modules/api_keys/extension-points.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/modules/api_keys/extension-points.ts"],
-  "sourcesContent": ["import { dataTableExtensionHost, defineModuleExtensionPoints } from '@open-mercato/shared/modules/widgets/extension-points'\n\nexport const extensionPoints = defineModuleExtensionPoints({\n  moduleId: 'api_keys',\n  hosts: {\n    apiKeysTable: dataTableExtensionHost({\n      tableId: 'api_keys.list',\n      source: 'backend/api-keys/page.tsx',\n    }),\n  },\n})\n\nexport default extensionPoints\n"],
-  "mappings": "AAAA,SAAS,wBAAwB,mCAAmC;AAE7D,MAAM,kBAAkB,4BAA4B;AAAA,EACzD,UAAU;AAAA,EACV,OAAO;AAAA,IACL,cAAc,uBAAuB;AAAA,MACnC,SAAS;AAAA,MACT,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AACF,CAAC;AAED,IAAO,2BAAQ;",
-  "names": []
-}

package/dist/modules/attachments/lib/quota-recovery-queue.js

@@ -1,9 +0,0 @@
-import { createModuleQueue } from "@open-mercato/queue";
-const queue = createModuleQueue("attachments-quota-recovery", { concurrency: 2 });
-async function scheduleAttachmentQuotaRecovery(payload, delayMs) {
-  await queue.enqueue(payload, { delayMs: Math.max(1e3, delayMs) });
-}
-export {
-  scheduleAttachmentQuotaRecovery
-};
-//# sourceMappingURL=quota-recovery-queue.js.map

package/dist/modules/attachments/lib/quota-recovery-queue.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/attachments/lib/quota-recovery-queue.ts"],
-  "sourcesContent": ["import { createModuleQueue } from '@open-mercato/queue'\n\nexport type AttachmentQuotaRecoveryJob = {\n  reservationId: string\n  tenantId: string\n  organizationId: string\n}\n\nconst queue = createModuleQueue<AttachmentQuotaRecoveryJob>('attachments-quota-recovery', { concurrency: 2 })\n\nexport async function scheduleAttachmentQuotaRecovery(\n  payload: AttachmentQuotaRecoveryJob,\n  delayMs: number,\n): Promise<void> {\n  await queue.enqueue(payload, { delayMs: Math.max(1_000, delayMs) })\n}\n"],
-  "mappings": "AAAA,SAAS,yBAAyB;AAQlC,MAAM,QAAQ,kBAA8C,8BAA8B,EAAE,aAAa,EAAE,CAAC;AAE5G,eAAsB,gCACpB,SACA,SACe;AACf,QAAM,MAAM,QAAQ,SAAS,EAAE,SAAS,KAAK,IAAI,KAAO,OAAO,EAAE,CAAC;AACpE;",
-  "names": []
-}