@open-mercato/core 0.6.7 → 0.6.8-develop.6875.1.871a4afc94

package/src/modules/sales/i18n/pl.json

@@ -927,8 +927,27 @@
   "sales.documents.form.submit": "Utwórz",
   "sales.documents.form.success": "Dokument sprzedaży utworzony.",
   "sales.documents.form.title": "Utwórz dokument sprzedaży",
+  "sales.documents.history.actor.system": "System",
+  "sales.documents.history.changedFields": "Zmienione pola: {fields}",
   "sales.documents.history.empty": "Brak wpisów w historii.",
   "sales.documents.history.error": "Nie udało się załadować historii.",
+  "sales.documents.history.fields.comment": "Komentarz",
+  "sales.documents.history.fields.configuration": "Konfiguracja",
+  "sales.documents.history.fields.currency": "Waluta",
+  "sales.documents.history.fields.customFields": "Pola niestandardowe",
+  "sales.documents.history.fields.description": "Opis",
+  "sales.documents.history.fields.discountAmount": "Kwota rabatu",
+  "sales.documents.history.fields.discountPercent": "Procent rabatu",
+  "sales.documents.history.fields.name": "Nazwa",
+  "sales.documents.history.fields.product": "Produkt",
+  "sales.documents.history.fields.promotionCode": "Kod promocyjny",
+  "sales.documents.history.fields.quantity": "Ilość",
+  "sales.documents.history.fields.quantityUnit": "Jednostka ilości",
+  "sales.documents.history.fields.status": "Status",
+  "sales.documents.history.fields.taxRate": "Klasa podatkowa",
+  "sales.documents.history.fields.unitPriceGross": "Cena jednostkowa brutto",
+  "sales.documents.history.fields.unitPriceNet": "Cena jednostkowa netto",
+  "sales.documents.history.fields.variant": "Wariant",
   "sales.documents.history.filter.actions": "Akcje",
   "sales.documents.history.filter.all": "Wszystkie",
   "sales.documents.history.filter.comments": "Komentarze",
@@ -948,8 +967,10 @@
   "sales.documents.items.deletedCatalogReference.title": "Ten produkt katalogowy został usunięty",
   "sales.documents.items.editTitle": "Edytuj pozycję",
   "sales.documents.items.empty": "Brak pozycji.",
+  "sales.documents.items.errorAddToFulfilled": "Nie można dodać nowej pozycji do zrealizowanego zamówienia. Najpierw zmień status zamówienia.",
   "sales.documents.items.errorCurrency": "Waluta jest wymagana.",
   "sales.documents.items.errorDelete": "Nie udało się usunąć pozycji.",
+  "sales.documents.items.errorDeleteLast": "Zamówienie musi zawierać co najmniej jedną pozycję.",
   "sales.documents.items.errorDeleteShipped": "Nie można usunąć pozycji, która ma wysłane sztuki.",
   "sales.documents.items.errorLoad": "Nie udało się załadować pozycji.",
   "sales.documents.items.errorNameRequired": "Nazwa jest wymagana dla niestandardowych pozycji.",
@@ -1226,6 +1247,7 @@
   "sales.orders.form.shipments": "Wysyłki",
   "sales.orders.lines.delete": "Usuń pozycję zamówienia",
   "sales.orders.lines.upsert": "Zaktualizuj pozycję zamówienia",
+  "sales.orders.linesRequired": "Dodaj co najmniej jedną pozycję przed utworzeniem zamówienia.",
   "sales.orders.list.title": "Zamówienia",
   "sales.orders.status_change.actor_api_key": "Klucz API {name}",
   "sales.orders.status_change.actor_unknown": "Nieznany użytkownik",

package/src/modules/sales/lib/historyHelpers.ts

@@ -1,4 +1,5 @@
 import type { ActionLog } from '@open-mercato/core/modules/audit_logs/data/entities'
+import { isRecord } from '@open-mercato/shared/lib/utils'
 import type { SalesNote } from '../data/entities'
 
 export type HistoryEntry = {
@@ -13,9 +14,90 @@ export type HistoryEntry = {
     statusTo?: string | null
     documentKind?: 'order' | 'quote'
     commandId?: string
+    changedFields?: string[]
   }
 }
 
+const DOCUMENT_LINE_UPSERT_COMMANDS = new Set([
+  'sales.orders.lines.upsert',
+  'sales.quotes.lines.upsert',
+])
+
+const USER_EDITABLE_LINE_FIELDS = [
+  'productId',
+  'productVariantId',
+  'name',
+  'description',
+  'comment',
+  'quantity',
+  'quantityUnit',
+  'currencyCode',
+  'unitPriceNet',
+  'unitPriceGross',
+  'discountAmount',
+  'discountPercent',
+  'taxRate',
+  'configuration',
+  'promotionCode',
+  'customFields',
+  'statusEntryId',
+] as const
+
+function readSnapshotLines(snapshot: unknown): Array<Record<string, unknown>> {
+  if (!isRecord(snapshot) || !Array.isArray(snapshot.lines)) return []
+  return snapshot.lines.filter(isRecord)
+}
+
+function historyValuesEqual(left: unknown, right: unknown): boolean {
+  if (Object.is(left, right)) return true
+  try {
+    return JSON.stringify(left) === JSON.stringify(right)
+  } catch {
+    return false
+  }
+}
+
+/**
+ * Derives a concise, user-editable field list for document line updates.
+ * Calculated totals and normalized UoM fields are intentionally excluded so
+ * the timeline describes the user's edit rather than downstream recalculation.
+ */
+function deriveDocumentLineChangedFields(log: ActionLog): string[] {
+  if (!DOCUMENT_LINE_UPSERT_COMMANDS.has(log.commandId)) return []
+
+  const beforeById = new Map(
+    readSnapshotLines(log.snapshotBefore)
+      .filter((line) => typeof line.id === 'string')
+      .map((line) => [line.id as string, line]),
+  )
+  const afterLines = readSnapshotLines(log.snapshotAfter)
+
+  const changedFields = new Set<string>()
+  for (const afterLine of afterLines) {
+    if (typeof afterLine.id !== 'string') continue
+    const beforeLine = beforeById.get(afterLine.id)
+    if (!beforeLine) continue
+
+    for (const field of USER_EDITABLE_LINE_FIELDS) {
+      if (!historyValuesEqual(beforeLine[field], afterLine[field])) {
+        changedFields.add(field)
+      }
+    }
+  }
+
+  return USER_EDITABLE_LINE_FIELDS.filter((field) => changedFields.has(field))
+}
+
+export function deriveHistoryChangedFields(log: ActionLog): string[] {
+  if (DOCUMENT_LINE_UPSERT_COMMANDS.has(log.commandId)) {
+    return deriveDocumentLineChangedFields(log)
+  }
+  const persisted = Array.isArray(log.changedFields)
+    ? log.changedFields.filter((field): field is string => typeof field === 'string' && field.trim().length > 0)
+    : []
+  return Array.from(new Set(persisted))
+}
+
 function extractStatusFromSnapshot(snapshot: unknown): string | null {
   if (!snapshot || typeof snapshot !== 'object') return null
   const s = snapshot as Record<string, unknown>
@@ -64,9 +146,14 @@ export function normalizeActionLogToHistoryEntry(
   displayUsers?: Record<string, string>,
 ): HistoryEntry {
   const statusChange = detectStatusChange(log)
+  const changedFields = deriveHistoryChangedFields(log)
   let entryKind: 'status' | 'action' = 'action'
   let action = log.actionLabel || log.commandId
-  let metadata: HistoryEntry['metadata'] = { documentKind: kind, commandId: log.commandId }
+  let metadata: HistoryEntry['metadata'] = {
+    documentKind: kind,
+    commandId: log.commandId,
+    ...(changedFields.length > 0 ? { changedFields } : {}),
+  }
   if (statusChange) {
     const hasStatusValues = statusChange.statusFrom != null || statusChange.statusTo != null
     if (hasStatusValues) {

package/src/modules/sales/services/paymentOrderTotalResolver.ts

@@ -0,0 +1,67 @@
+import type { EntityManager } from '@mikro-orm/postgresql'
+import { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'
+import type {
+  PaymentGatewayScope,
+  PaymentOrderTotal,
+  PaymentOrderTotalResolver,
+} from '@open-mercato/shared/modules/payment_gateways/types'
+import { SalesOrder } from '../data/entities'
+
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i
+
+function toAmount(value: string | number | null | undefined): number {
+  const parsed = typeof value === 'number' ? value : Number(value ?? 0)
+  return Number.isFinite(parsed) ? parsed : 0
+}
+
+/**
+ * The amount a gateway session may legitimately charge for an order: what is
+ * still due. `outstanding_amount` is recomputed from payments and refunds, so
+ * it is the authoritative value once either exists. Orders that were never
+ * paid fall back to the grand total, which also covers rows written before
+ * outstanding totals were tracked.
+ */
+export function resolveOrderAmountDue(order: Pick<
+  SalesOrder,
+  'outstandingAmount' | 'paidTotalAmount' | 'refundedTotalAmount' | 'grandTotalGrossAmount'
+>): number {
+  const outstanding = toAmount(order.outstandingAmount)
+  const paid = toAmount(order.paidTotalAmount)
+  const refunded = toAmount(order.refundedTotalAmount)
+  if (outstanding > 0 || paid > 0 || refunded > 0) return outstanding
+  return toAmount(order.grandTotalGrossAmount)
+}
+
+export function createSalesPaymentOrderTotalResolver(deps: { em: EntityManager }): PaymentOrderTotalResolver {
+  return {
+    async resolveOrderTotal(orderId: string, scope: PaymentGatewayScope): Promise<PaymentOrderTotal | null> {
+      if (!UUID_PATTERN.test(orderId) || !scope.tenantId || !scope.organizationId) return null
+      const order = await findOneWithDecryption(
+        deps.em,
+        SalesOrder,
+        {
+          id: orderId,
+          tenantId: scope.tenantId,
+          organizationId: scope.organizationId,
+          deletedAt: null,
+        },
+        {
+          fields: [
+            'currencyCode',
+            'outstandingAmount',
+            'paidTotalAmount',
+            'refundedTotalAmount',
+            'grandTotalGrossAmount',
+          ] as const,
+        },
+        scope,
+      )
+      if (!order) return null
+      return {
+        orderId,
+        currencyCode: order.currencyCode,
+        amountDue: resolveOrderAmountDue(order),
+      }
+    },
+  }
+}

package/src/modules/sales/widgets/injection/document-history/widget.client.tsx

@@ -2,7 +2,7 @@
 
 import * as React from "react"
 import { Spinner } from "@open-mercato/ui/primitives/spinner"
-import { useT } from "@open-mercato/shared/lib/i18n/context"
+import { useT, type TranslateFn } from "@open-mercato/shared/lib/i18n/context"
 import { apiCall } from "@open-mercato/ui/backend/utils/apiCall"
 import { formatRelativeTime, formatDateTime } from "@open-mercato/shared/lib/time"
 import { cn } from "@open-mercato/shared/lib/utils"
@@ -21,6 +21,7 @@ export type TimelineEntry = {
     statusTo?: string | null
     documentKind?: "order" | "quote"
     commandId?: string
+    changedFields?: string[]
   }
 }
 
@@ -65,6 +66,49 @@ const KIND_BG_COLORS = {
   comment: 'bg-muted',
 }
 
+const CHANGED_FIELD_LABELS: Record<string, { key: string; fallback: string }> = {
+  productId: { key: 'sales.documents.history.fields.product', fallback: 'Product' },
+  productVariantId: { key: 'sales.documents.history.fields.variant', fallback: 'Variant' },
+  name: { key: 'sales.documents.history.fields.name', fallback: 'Name' },
+  description: { key: 'sales.documents.history.fields.description', fallback: 'Description' },
+  comment: { key: 'sales.documents.history.fields.comment', fallback: 'Comment' },
+  quantity: { key: 'sales.documents.history.fields.quantity', fallback: 'Quantity' },
+  quantityUnit: { key: 'sales.documents.history.fields.quantityUnit', fallback: 'Quantity unit' },
+  currencyCode: { key: 'sales.documents.history.fields.currency', fallback: 'Currency' },
+  unitPriceNet: { key: 'sales.documents.history.fields.unitPriceNet', fallback: 'Net unit price' },
+  unitPriceGross: { key: 'sales.documents.history.fields.unitPriceGross', fallback: 'Gross unit price' },
+  discountAmount: { key: 'sales.documents.history.fields.discountAmount', fallback: 'Discount amount' },
+  discountPercent: { key: 'sales.documents.history.fields.discountPercent', fallback: 'Discount percent' },
+  taxRate: { key: 'sales.documents.history.fields.taxRate', fallback: 'Tax class' },
+  configuration: { key: 'sales.documents.history.fields.configuration', fallback: 'Configuration' },
+  promotionCode: { key: 'sales.documents.history.fields.promotionCode', fallback: 'Promotion code' },
+  customFields: { key: 'sales.documents.history.fields.customFields', fallback: 'Custom fields' },
+  statusEntryId: { key: 'sales.documents.history.fields.status', fallback: 'Status' },
+}
+
+function normalizeChangedField(field: string): string {
+  const segment = field.split('.').pop() ?? field
+  return segment.replace(/_([a-z])/g, (_, letter: string) => letter.toUpperCase())
+}
+
+function humanizeChangedField(field: string): string {
+  const normalized = normalizeChangedField(field)
+  const spaced = normalized.replace(/([a-z0-9])([A-Z])/g, '$1 $2').trim()
+  return spaced.length > 0 ? `${spaced[0].toUpperCase()}${spaced.slice(1)}` : field
+}
+
+function translateChangedField(t: TranslateFn, field: string): string {
+  const normalized = normalizeChangedField(field)
+  const translation = CHANGED_FIELD_LABELS[normalized]
+  return translation ? t(translation.key, translation.fallback) : humanizeChangedField(field)
+}
+
+function translateAction(t: TranslateFn, entry: TimelineEntry): string {
+  const commandId = entry.metadata?.commandId
+  if (!commandId?.startsWith('sales.')) return entry.action
+  return t(`sales.audit.${commandId.slice('sales.'.length)}`, entry.action)
+}
+
 function StatusDot({ color, className }: { color: string | null | undefined; className?: string }) {
   if (!color) return <span className={cn('h-2.5 w-2.5 rounded-full bg-muted-foreground/40 border border-border inline-flex', className)} />
   return (
@@ -118,11 +162,19 @@ function TimelineItem({
   statusMap: Record<string, StatusOption>
   isLast: boolean
 }) {
+  const t = useT()
   const KindIcon = KIND_ICONS[entry.kind]
   const relativeTime = formatRelativeTime(entry.occurredAt)
   const absoluteTime = formatDateTime(entry.occurredAt)
 
   const isStatusChange = entry.kind === 'status' && entry.metadata?.statusTo
+  const action = translateAction(t, entry)
+  const actorLabel = entry.actor.id
+    ? entry.actor.label
+    : t('sales.documents.history.actor.system', 'System')
+  const changedFieldLabels = Array.from(
+    new Set((entry.metadata?.changedFields ?? []).map((field) => translateChangedField(t, field))),
+  )
 
   return (
     <div data-testid="timeline-entry" className="relative flex gap-3">
@@ -148,7 +200,7 @@ function TimelineItem({
           <div className="flex items-center justify-between gap-2 flex-wrap">
             <span className="inline-flex items-center gap-1.5 text-xs font-medium text-foreground">
               <User className="h-3 w-3 text-muted-foreground" aria-hidden />
-              {entry.actor.label}
+              {actorLabel}
             </span>
             <span
               className="text-xs text-muted-foreground"
@@ -166,7 +218,16 @@ function TimelineItem({
               statusMap={statusMap}
             />
           ) : (
-            <div className="text-sm text-foreground">{entry.action}</div>
+            <div className="space-y-0.5">
+              <div className="text-sm text-foreground">{action}</div>
+              {entry.kind === 'action' && changedFieldLabels.length > 0 ? (
+                <div className="text-xs text-muted-foreground">
+                  {t('sales.documents.history.changedFields', 'Changed fields: {fields}', {
+                    fields: changedFieldLabels.join(', '),
+                  })}
+                </div>
+              ) : null}
+            </div>
           )}
         </div>
       </div>

package/src/modules/sales/workflows.ts

@@ -57,7 +57,7 @@ const orderApproval = defineWorkflow({
           config: {
             commandId: 'sales.orders.update',
             statusDictionary: 'sales.order_status',
-            input: { id: '{{context.id}}', statusValue: 'pending_approval' },
+            input: { id: '{{context.orderId}}', statusValue: 'pending_approval' },
           },
           retryPolicy: { maxAttempts: 3, initialIntervalMs: 1000, backoffCoefficient: 2, maxIntervalMs: 10000 },
         },
@@ -68,7 +68,7 @@ const orderApproval = defineWorkflow({
           async: true,
           config: {
             eventName: 'sales.order.approval.requested',
-            payload: { orderId: '{{context.id}}', workflowInstanceId: '{{workflow.instanceId}}' },
+            payload: { orderId: '{{context.orderId}}', workflowInstanceId: '{{workflow.instanceId}}' },
           },
         },
       ],
@@ -91,7 +91,7 @@ const orderApproval = defineWorkflow({
           config: {
             commandId: 'sales.orders.update',
             statusDictionary: 'sales.order_status',
-            input: { id: '{{context.id}}', statusValue: 'approved' },
+            input: { id: '{{context.orderId}}', statusValue: 'approved' },
           },
           retryPolicy: { maxAttempts: 3, initialIntervalMs: 1000, backoffCoefficient: 2, maxIntervalMs: 10000 },
         },
@@ -103,7 +103,7 @@ const orderApproval = defineWorkflow({
           config: {
             eventName: 'sales.order.approval.approved',
             payload: {
-              orderId: '{{context.id}}',
+              orderId: '{{context.orderId}}',
               workflowInstanceId: '{{workflow.instanceId}}',
               approvedBy: '{{context.completedBy}}',
               comments: '{{context.comments}}',
@@ -130,7 +130,7 @@ const orderApproval = defineWorkflow({
           config: {
             commandId: 'sales.orders.update',
             statusDictionary: 'sales.order_status',
-            input: { id: '{{context.id}}', statusValue: 'rejected' },
+            input: { id: '{{context.orderId}}', statusValue: 'rejected' },
           },
           retryPolicy: { maxAttempts: 3, initialIntervalMs: 1000, backoffCoefficient: 2, maxIntervalMs: 10000 },
         },
@@ -142,7 +142,7 @@ const orderApproval = defineWorkflow({
           config: {
             eventName: 'sales.order.approval.rejected',
             payload: {
-              orderId: '{{context.id}}',
+              orderId: '{{context.orderId}}',
               workflowInstanceId: '{{workflow.instanceId}}',
               rejectedBy: '{{context.completedBy}}',
               comments: '{{context.comments}}',
@@ -175,7 +175,10 @@ const orderApproval = defineWorkflow({
     name: 'Order Approval Trigger',
     description: 'Triggers when a new sales order is created',
     eventPattern: 'sales.order.created',
-    config: { entityType: 'SalesOrder' },
+    config: {
+      entityType: 'SalesOrder',
+      contextMapping: [{ targetKey: 'orderId', sourceExpression: 'id' }],
+    },
     enabled: true,
     priority: 0,
   }],

package/src/modules/shipping_carriers/api/webhook/[provider]/route.ts

@@ -11,6 +11,7 @@ import { getShippingAdapter } from '../../../lib/adapter-registry'
 import { getShippingCarrierQueue } from '../../../lib/queue'
 import { shippingCarriersTag } from '../../openapi'
 import { createLogger } from '@open-mercato/shared/lib/logger'
+import { readBoundedRequestBody, WebhookBodyTooLargeError } from '@open-mercato/shared/lib/webhooks'
 
 const logger = createLogger('shipping_carriers').child({ component: 'webhook' })
 
@@ -51,7 +52,15 @@ export async function POST(req: Request, { params }: { params: Promise<{ provide
   const rateLimitResponse = await checkProviderWebhookRateLimit(container, req, providerKey)
   if (rateLimitResponse) return rateLimitResponse
 
-  const rawBody = await req.text()
+  let rawBody: string
+  try {
+    rawBody = await readBoundedRequestBody(req)
+  } catch (error) {
+    if (error instanceof WebhookBodyTooLargeError) {
+      return NextResponse.json({ error: 'Webhook payload too large' }, { status: 413 })
+    }
+    throw error
+  }
   const headers: Record<string, string> = {}
   req.headers.forEach((value, key) => {
     headers[key] = value
@@ -156,6 +165,7 @@ export const openApi = {
       responses: [
         { status: 202, description: 'Webhook accepted for async processing' },
         { status: 401, description: 'Signature verification failed' },
+        { status: 413, description: 'Webhook payload too large' },
         { status: 404, description: 'Unknown provider' },
       ],
     },

package/src/modules/shipping_carriers/i18n/ko.json

@@ -0,0 +1,85 @@
+{
+  "shipping_carriers.action.createShipment": "배송 생성",
+  "shipping_carriers.column.shippingStatus": "배송 상태",
+  "shipping_carriers.column.trackingStatus": "추적 상태",
+  "shipping_carriers.create.action.clearPoint": "지우기",
+  "shipping_carriers.create.action.editConfiguration": "구성 편집",
+  "shipping_carriers.create.action.searchPoints": "검색",
+  "shipping_carriers.create.back": "뒤로",
+  "shipping_carriers.create.c2cSendingMethod.any_point": "임의 지점",
+  "shipping_carriers.create.c2cSendingMethod.default": "발송 주문 (기본값)",
+  "shipping_carriers.create.c2cSendingMethod.parcel_locker": "택배함",
+  "shipping_carriers.create.c2cSendingMethod.pop": "POP (소포 픽업 지점)",
+  "shipping_carriers.create.dropOffPoints.noResults": "이 검색에 대한 접수처를 찾을 수 없습니다.",
+  "shipping_carriers.create.error.create": "배송 생성에 실패했습니다.",
+  "shipping_carriers.create.error.fetchDropOffPoints": "접수처를 가져오지 못했습니다.",
+  "shipping_carriers.create.error.fetchRates": "배송 요금을 가져오지 못했습니다.",
+  "shipping_carriers.create.error.idempotencyConflict": "이 배송 건은 이미 제출되었습니다. 다시 시도하기 전에 페이지를 새로고침하세요.",
+  "shipping_carriers.create.error.invalidEmail": "잘못된 이메일 주소입니다.",
+  "shipping_carriers.create.error.invalidPhone": "잘못된 전화번호입니다.",
+  "shipping_carriers.create.error.loadProviders": "배송 제공업체를 불러오지 못했습니다.",
+  "shipping_carriers.create.estimatedDays": "{days}일",
+  "shipping_carriers.create.fetchingRates": "요금을 가져오는 중...",
+  "shipping_carriers.create.field.addressLine1": "주소 1",
+  "shipping_carriers.create.field.addressLine2": "주소 2",
+  "shipping_carriers.create.field.c2cSendingMethod": "발송 방법 (courier_c2c 서비스에만 적용)",
+  "shipping_carriers.create.field.city": "도시",
+  "shipping_carriers.create.field.countryCode": "국가 코드 (ISO)",
+  "shipping_carriers.create.field.dropOffSearch": "우편번호 (예: 30-624) 또는 지점명 (예: KRA012)",
+  "shipping_carriers.create.field.email": "이메일",
+  "shipping_carriers.create.field.phone": "전화번호",
+  "shipping_carriers.create.field.postalCode": "우편번호",
+  "shipping_carriers.create.field.selectedPoint": "선택됨:",
+  "shipping_carriers.create.field.targetPoint": "택배함 ID (락커 서비스에 필요)",
+  "shipping_carriers.create.getQuotes": "견적 받기",
+  "shipping_carriers.create.noProviders": "구성된 배송 제공업체가 없습니다. 먼저 배송사 통합을 활성화하세요.",
+  "shipping_carriers.create.noRates": "이 경로와 패키지 구성에 대해 이용 가능한 요금이 없습니다.",
+  "shipping_carriers.create.package.add": "+ 패키지 추가",
+  "shipping_carriers.create.package.heightCm": "높이 (cm)",
+  "shipping_carriers.create.package.label": "패키지",
+  "shipping_carriers.create.package.lengthCm": "길이 (cm)",
+  "shipping_carriers.create.package.remove": "제거",
+  "shipping_carriers.create.package.weightKg": "무게 (kg)",
+  "shipping_carriers.create.package.widthCm": "너비 (cm)",
+  "shipping_carriers.create.section.c2cSendingMethod": "C2C 발송 방법",
+  "shipping_carriers.create.section.destination": "도착지 주소",
+  "shipping_carriers.create.section.dropOffPoint": "접수처 / 택배함",
+  "shipping_carriers.create.section.labelFormat": "라벨 형식",
+  "shipping_carriers.create.section.lockerPoint": "택배함",
+  "shipping_carriers.create.section.origin": "출발지 주소",
+  "shipping_carriers.create.section.packages": "패키지",
+  "shipping_carriers.create.section.receiverContact": "수신인 연락처",
+  "shipping_carriers.create.section.selectRate": "서비스 선택",
+  "shipping_carriers.create.section.senderContact": "발신인 연락처",
+  "shipping_carriers.create.section.summary": "요약",
+  "shipping_carriers.create.step.configure": "배송 구성",
+  "shipping_carriers.create.step.confirm": "서비스 선택 및 확인",
+  "shipping_carriers.create.step.provider": "배송사 선택",
+  "shipping_carriers.create.submit": "배송 생성",
+  "shipping_carriers.create.submitting": "배송 생성 중...",
+  "shipping_carriers.create.success": "배송이 성공적으로 생성되었습니다.",
+  "shipping_carriers.create.summary.c2cSendingMethod": "C2C 발송 방법",
+  "shipping_carriers.create.summary.carrier": "배송사",
+  "shipping_carriers.create.summary.from": "출발",
+  "shipping_carriers.create.summary.labelFormat": "라벨 형식",
+  "shipping_carriers.create.summary.packages": "패키지",
+  "shipping_carriers.create.summary.receiverContact": "수신인 연락처",
+  "shipping_carriers.create.summary.senderContact": "발신인 연락처",
+  "shipping_carriers.create.summary.service": "서비스",
+  "shipping_carriers.create.summary.targetPoint": "택배함",
+  "shipping_carriers.create.summary.to": "도착",
+  "shipping_carriers.create.title": "배송사 배송 생성",
+  "shipping_carriers.errors.upstreamFailed": "배송사 요청에 실패했습니다. 나중에 다시 시도하세요.",
+  "shipping_carriers.feature.manage": "배송사 운영 관리",
+  "shipping_carriers.feature.view": "배송사 배송 보기",
+  "shipping_carriers.status.cancelled": "취소됨",
+  "shipping_carriers.status.delivered": "배송 완료",
+  "shipping_carriers.status.failed_delivery": "배송 실패",
+  "shipping_carriers.status.in_transit": "배송 중",
+  "shipping_carriers.status.label_created": "라벨 생성됨",
+  "shipping_carriers.status.out_for_delivery": "배송 출발",
+  "shipping_carriers.status.pending": "대기 중",
+  "shipping_carriers.status.picked_up": "수거됨",
+  "shipping_carriers.status.returned": "반송됨",
+  "shipping_carriers.status.unknown": "알 수 없음"
+}

package/src/modules/shipping_carriers/lib/shipment-wizard/components/PackageEditor.tsx

@@ -47,7 +47,7 @@ export const PackageEditor = (props: PackageEditorProps) => {
                 type="button"
                 variant="ghost"
                 size="sm"
-                className="h-auto px-2 py-0.5 text-xs text-red-600 hover:text-red-700"
+                className="h-auto px-2 py-0.5 text-xs text-destructive hover:text-destructive/80"
                 onClick={() => removePackage(index)}
                 disabled={disabled}
               >

package/src/modules/staff/api/interceptors.ts

@@ -1,5 +1,5 @@
 import type { ApiInterceptor, InterceptorContext } from '@open-mercato/shared/lib/crud/api-interceptor'
-import { hasFeature } from '@open-mercato/shared/security/features'
+import { authorizeFeatures } from '@open-mercato/shared/security/featurePolicy'
 import { getStaffMemberByUserId } from '../lib/staffMemberResolver'
 
 type RbacServiceLike = {
@@ -21,7 +21,6 @@ type RbacServiceLike = {
  * from `rbacService.userHasAllFeatures`, which is cached and wildcard-aware.
  */
 async function hasManageAllFeature(context: InterceptorContext): Promise<boolean> {
-  if (hasFeature(context.userFeatures, 'staff.timesheets.manage_all')) return true
   try {
     const rbac = context.container.resolve('rbacService') as RbacServiceLike | undefined
     if (rbac?.userHasAllFeatures) {
@@ -32,9 +31,12 @@ async function hasManageAllFeature(context: InterceptorContext): Promise<boolean
       )
     }
   } catch {
-    // rbacService not available — fall through to deny
+    // Fall back to the already-loaded snapshot below.
   }
-  return false
+  return authorizeFeatures(
+    ['staff.timesheets.manage_all'],
+    { grantedFeatures: context.userFeatures ?? [] },
+  )
 }
 
 export const interceptors: ApiInterceptor[] = [