@open-mercato/core 0.6.8-develop.6983.1.e4f794099e → 0.6.8-develop.6985.1.fb93574faa

package/dist/modules/devices/api/deviceOps.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/devices/api/deviceOps.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport type { UserDevice } from '../data/entities'\nimport type {\n  RegisterDeviceCommandInput,\n  UpdateDeviceCommandInput,\n  DeactivateDeviceCommandInput,\n} from '../data/validators'\nimport { attachOperationMetadataHeader } from '../lib/operationMetadata'\n\nconst RESOURCE_KIND = 'devices.user_device'\n\n// push_token is a secret. The mutation guard forwards mutationPayload into record-lock conflict\n// details that are returned to clients, so strip the token before it reaches the guard.\nexport function redactMutationPayload(\n  payload: Record<string, unknown> | undefined,\n): Record<string, unknown> | undefined {\n  if (!payload || !('pushToken' in payload)) return payload\n  const { pushToken: _pushToken, ...rest } = payload\n  return rest\n}\n\ntype RequestContainer = Awaited<ReturnType<typeof createRequestContainer>>\ntype OrganizationScope = Awaited<ReturnType<typeof resolveOrganizationScopeForRequest>>\n\n// Shared mutation context for device write ops. `actorUserId` is the authenticated caller (used for\n// the mutation guard / audit), independent of which user *owns* the device being mutated.\nexport type DeviceMutationContext = {\n  container: RequestContainer\n  auth: NonNullable<AuthContext>\n  scope: OrganizationScope\n  organizationId: string | null\n  actorUserId: string\n  request: Request\n}\n\nfunction commandCtx(mctx: DeviceMutationContext) {\n  return {\n    container: mctx.container,\n    auth: mctx.auth,\n    organizationScope: mctx.scope ?? null,\n    selectedOrganizationId: mctx.organizationId,\n    organizationIds: mctx.scope?.filterIds ?? (mctx.auth.orgId ? [mctx.auth.orgId] : null),\n    request: mctx.request,\n  }\n}\n\nasync function runGuards(\n  mctx: DeviceMutationContext,\n  operation: 'create' | 'update' | 'delete',\n  resourceId: string,\n  mutationPayload?: Record<string, unknown>,\n) {\n  return validateCrudMutationGuard(mctx.container, {\n    tenantId: mctx.auth.tenantId!,\n    organizationId: mctx.organizationId,\n    userId: mctx.actorUserId,\n    resourceKind: RESOURCE_KIND,\n    resourceId,\n    operation,\n    requestMethod: mctx.request.method,\n    requestHeaders: mctx.request.headers,\n    mutationPayload,\n  })\n}\n\nasync function runAfter(\n  mctx: DeviceMutationContext,\n  guardResult: Awaited<ReturnType<typeof validateCrudMutationGuard>>,\n  operation: 'create' | 'update' | 'delete',\n  resourceId: string,\n) {\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(mctx.container, {\n      tenantId: mctx.auth.tenantId!,\n      organizationId: mctx.organizationId,\n      userId: mctx.actorUserId,\n      resourceKind: RESOURCE_KIND,\n      resourceId,\n      operation,\n      requestMethod: mctx.request.method,\n      requestHeaders: mctx.request.headers,\n      metadata: (guardResult.metadata as Record<string, unknown> | null | undefined) ?? null,\n    })\n  }\n}\n\nexport async function executeRegister(\n  mctx: DeviceMutationContext,\n  commandInput: RegisterDeviceCommandInput,\n): Promise<NextResponse> {\n  // Register is an upsert, so the device row id isn't known until execution. Key the mutation guard\n  // by the stable, tenant-unique upsert tuple so validate and after-success agree (record locks are\n  // keyed by resourceId); deviceId alone is not unique across users.\n  const guardResourceId = `${commandInput.userId}:${commandInput.deviceId}`\n  const guardResult = await runGuards(mctx, 'create', guardResourceId, redactMutationPayload(commandInput))\n  if (guardResult && !guardResult.ok) return NextResponse.json(guardResult.body, { status: guardResult.status })\n\n  const commandBus = mctx.container.resolve('commandBus') as CommandBus\n  const { result, logEntry } = await commandBus.execute<\n    RegisterDeviceCommandInput,\n    { id: string; deviceId: string; revived: boolean }\n  >('devices.user_devices.register', { input: commandInput, ctx: commandCtx(mctx) })\n\n  await runAfter(mctx, guardResult, 'create', guardResourceId)\n\n  const response = NextResponse.json(\n    { id: result.id, deviceId: result.deviceId, revived: result.revived },\n    { status: 201 },\n  )\n  attachOperationMetadataHeader(response, logEntry, { resourceKind: RESOURCE_KIND, resourceId: result.id })\n  return response\n}\n\nexport async function executeUpdate(\n  mctx: DeviceMutationContext,\n  device: UserDevice,\n  body: Omit<UpdateDeviceCommandInput, 'id' | 'tenantId' | 'userId' | 'organizationId'>,\n): Promise<NextResponse> {\n  // Device metadata edits carry lost-update risk (unlike the idempotent soft-delete deactivate), so\n  // enforce OSS optimistic locking when the caller sends the expected-version header. No-ops when the\n  // header is absent (e.g. mobile self-update clients), keeping the contract backward-compatible.\n  enforceCommandOptimisticLock({\n    resourceKind: RESOURCE_KIND,\n    resourceId: device.id,\n    current: device.updatedAt,\n    request: mctx.request,\n  })\n\n  const guardResult = await runGuards(mctx, 'update', device.id, redactMutationPayload(body))\n  if (guardResult && !guardResult.ok) return NextResponse.json(guardResult.body, { status: guardResult.status })\n\n  const commandBus = mctx.container.resolve('commandBus') as CommandBus\n  const { logEntry } = await commandBus.execute<UpdateDeviceCommandInput, { id: string }>('devices.user_devices.update', {\n    input: {\n      ...body,\n      id: device.id,\n      tenantId: device.tenantId,\n      userId: device.userId,\n      organizationId: device.organizationId ?? null,\n    } satisfies UpdateDeviceCommandInput,\n    ctx: commandCtx(mctx),\n  })\n\n  await runAfter(mctx, guardResult, 'update', device.id)\n\n  const response = NextResponse.json({ ok: true, id: device.id })\n  attachOperationMetadataHeader(response, logEntry, { resourceKind: RESOURCE_KIND, resourceId: device.id })\n  return response\n}\n\nexport async function executeDeactivate(\n  mctx: DeviceMutationContext,\n  device: UserDevice,\n): Promise<NextResponse> {\n  const guardResult = await runGuards(mctx, 'delete', device.id)\n  if (guardResult && !guardResult.ok) return NextResponse.json(guardResult.body, { status: guardResult.status })\n\n  const commandBus = mctx.container.resolve('commandBus') as CommandBus\n  const { logEntry } = await commandBus.execute<DeactivateDeviceCommandInput, { id: string }>(\n    'devices.user_devices.deactivate',\n    {\n      input: {\n        id: device.id,\n        tenantId: device.tenantId,\n        userId: device.userId,\n        organizationId: device.organizationId ?? null,\n      } satisfies DeactivateDeviceCommandInput,\n      ctx: commandCtx(mctx),\n    },\n  )\n\n  await runAfter(mctx, guardResult, 'delete', device.id)\n\n  const response = NextResponse.json({ ok: true })\n  attachOperationMetadataHeader(response, logEntry, { resourceKind: RESOURCE_KIND, resourceId: device.id })\n  return response\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAI7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,oCAAoC;AAQ7C,SAAS,qCAAqC;AAE9C,MAAM,gBAAgB;AAIf,SAAS,sBACd,SACqC;AACrC,MAAI,CAAC,WAAW,EAAE,eAAe,SAAU,QAAO;AAClD,QAAM,EAAE,WAAW,YAAY,GAAG,KAAK,IAAI;AAC3C,SAAO;AACT;AAgBA,SAAS,WAAW,MAA6B;AAC/C,SAAO;AAAA,IACL,WAAW,KAAK;AAAA,IAChB,MAAM,KAAK;AAAA,IACX,mBAAmB,KAAK,SAAS;AAAA,IACjC,wBAAwB,KAAK;AAAA,IAC7B,iBAAiB,KAAK,OAAO,cAAc,KAAK,KAAK,QAAQ,CAAC,KAAK,KAAK,KAAK,IAAI;AAAA,IACjF,SAAS,KAAK;AAAA,EAChB;AACF;AAEA,eAAe,UACb,MACA,WACA,YACA,iBACA;AACA,SAAO,0BAA0B,KAAK,WAAW;AAAA,IAC/C,UAAU,KAAK,KAAK;AAAA,IACpB,gBAAgB,KAAK;AAAA,IACrB,QAAQ,KAAK;AAAA,IACb,cAAc;AAAA,IACd;AAAA,IACA;AAAA,IACA,eAAe,KAAK,QAAQ;AAAA,IAC5B,gBAAgB,KAAK,QAAQ;AAAA,IAC7B;AAAA,EACF,CAAC;AACH;AAEA,eAAe,SACb,MACA,aACA,WACA,YACA;AACA,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,KAAK,WAAW;AAAA,MACrD,UAAU,KAAK,KAAK;AAAA,MACpB,gBAAgB,KAAK;AAAA,MACrB,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd;AAAA,MACA;AAAA,MACA,eAAe,KAAK,QAAQ;AAAA,MAC5B,gBAAgB,KAAK,QAAQ;AAAA,MAC7B,UAAW,YAAY,YAA2D;AAAA,IACpF,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,gBACpB,MACA,cACuB;AAIvB,QAAM,kBAAkB,GAAG,aAAa,MAAM,IAAI,aAAa,QAAQ;AACvE,QAAM,cAAc,MAAM,UAAU,MAAM,UAAU,iBAAiB,sBAAsB,YAAY,CAAC;AACxG,MAAI,eAAe,CAAC,YAAY,GAAI,QAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAE7G,QAAM,aAAa,KAAK,UAAU,QAAQ,YAAY;AACtD,QAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAG5C,iCAAiC,EAAE,OAAO,cAAc,KAAK,WAAW,IAAI,EAAE,CAAC;AAEjF,QAAM,SAAS,MAAM,aAAa,UAAU,eAAe;AAE3D,QAAM,WAAW,aAAa;AAAA,IAC5B,EAAE,IAAI,OAAO,IAAI,UAAU,OAAO,UAAU,SAAS,OAAO,QAAQ;AAAA,IACpE,EAAE,QAAQ,IAAI;AAAA,EAChB;AACA,gCAA8B,UAAU,UAAU,EAAE,cAAc,eAAe,YAAY,OAAO,GAAG,CAAC;AACxG,SAAO;AACT;AAEA,eAAsB,cACpB,MACA,QACA,MACuB;AAIvB,+BAA6B;AAAA,IAC3B,cAAc;AAAA,IACd,YAAY,OAAO;AAAA,IACnB,SAAS,OAAO;AAAA,IAChB,SAAS,KAAK;AAAA,EAChB,CAAC;AAED,QAAM,cAAc,MAAM,UAAU,MAAM,UAAU,OAAO,IAAI,sBAAsB,IAAI,CAAC;AAC1F,MAAI,eAAe,CAAC,YAAY,GAAI,QAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAE7G,QAAM,aAAa,KAAK,UAAU,QAAQ,YAAY;AACtD,QAAM,EAAE,SAAS,IAAI,MAAM,WAAW,QAAkD,+BAA+B;AAAA,IACrH,OAAO;AAAA,MACL,GAAG;AAAA,MACH,IAAI,OAAO;AAAA,MACX,UAAU,OAAO;AAAA,MACjB,QAAQ,OAAO;AAAA,MACf,gBAAgB,OAAO,kBAAkB;AAAA,IAC3C;AAAA,IACA,KAAK,WAAW,IAAI;AAAA,EACtB,CAAC;AAED,QAAM,SAAS,MAAM,aAAa,UAAU,OAAO,EAAE;AAErD,QAAM,WAAW,aAAa,KAAK,EAAE,IAAI,MAAM,IAAI,OAAO,GAAG,CAAC;AAC9D,gCAA8B,UAAU,UAAU,EAAE,cAAc,eAAe,YAAY,OAAO,GAAG,CAAC;AACxG,SAAO;AACT;AAEA,eAAsB,kBACpB,MACA,QACuB;AACvB,QAAM,cAAc,MAAM,UAAU,MAAM,UAAU,OAAO,EAAE;AAC7D,MAAI,eAAe,CAAC,YAAY,GAAI,QAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAE7G,QAAM,aAAa,KAAK,UAAU,QAAQ,YAAY;AACtD,QAAM,EAAE,SAAS,IAAI,MAAM,WAAW;AAAA,IACpC;AAAA,IACA;AAAA,MACE,OAAO;AAAA,QACL,IAAI,OAAO;AAAA,QACX,UAAU,OAAO;AAAA,QACjB,QAAQ,OAAO;AAAA,QACf,gBAAgB,OAAO,kBAAkB;AAAA,MAC3C;AAAA,MACA,KAAK,WAAW,IAAI;AAAA,IACtB;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,aAAa,UAAU,OAAO,EAAE;AAErD,QAAM,WAAW,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAC/C,gCAA8B,UAAU,UAAU,EAAE,cAAc,eAAe,YAAY,OAAO,GAAG,CAAC;AACxG,SAAO;AACT;",
+  "names": []
+}

package/dist/modules/devices/api/openapi.js

@@ -0,0 +1,19 @@
+import {
+  createCrudOpenApiFactory,
+  createPagedListResponseSchema as createSharedPagedListResponseSchema
+} from "@open-mercato/shared/lib/openapi/crud";
+function createPagedListResponseSchema(itemSchema) {
+  return createSharedPagedListResponseSchema(itemSchema, { paginationMetaOptional: true });
+}
+const buildDevicesCrudOpenApi = createCrudOpenApiFactory({
+  defaultTag: "Devices",
+  makeListDescription: ({ pluralLower }) => `Returns the authenticated user's registered ${pluralLower} (admins may list across users).`
+});
+function createDevicesCrudOpenApi(options) {
+  return buildDevicesCrudOpenApi(options);
+}
+export {
+  createDevicesCrudOpenApi,
+  createPagedListResponseSchema
+};
+//# sourceMappingURL=openapi.js.map

package/dist/modules/devices/api/openapi.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/devices/api/openapi.ts"],
+  "sourcesContent": ["import { type ZodTypeAny } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  createCrudOpenApiFactory,\n  createPagedListResponseSchema as createSharedPagedListResponseSchema,\n  type CrudOpenApiOptions,\n} from '@open-mercato/shared/lib/openapi/crud'\n\nexport function createPagedListResponseSchema(itemSchema: ZodTypeAny) {\n  return createSharedPagedListResponseSchema(itemSchema, { paginationMetaOptional: true })\n}\n\n// createCrudOpenApiFactory already falls back to the shared default create/ok response schemas\n// when omitted, so there is nothing module-specific to re-pass or re-export here.\nconst buildDevicesCrudOpenApi = createCrudOpenApiFactory({\n  defaultTag: 'Devices',\n  makeListDescription: ({ pluralLower }) =>\n    `Returns the authenticated user's registered ${pluralLower} (admins may list across users).`,\n})\n\nexport function createDevicesCrudOpenApi(options: CrudOpenApiOptions): OpenApiRouteDoc {\n  return buildDevicesCrudOpenApi(options)\n}\n"],
+  "mappings": "AAEA;AAAA,EACE;AAAA,EACA,iCAAiC;AAAA,OAE5B;AAEA,SAAS,8BAA8B,YAAwB;AACpE,SAAO,oCAAoC,YAAY,EAAE,wBAAwB,KAAK,CAAC;AACzF;AAIA,MAAM,0BAA0B,yBAAyB;AAAA,EACvD,YAAY;AAAA,EACZ,qBAAqB,CAAC,EAAE,YAAY,MAClC,+CAA+C,WAAW;AAC9D,CAAC;AAEM,SAAS,yBAAyB,SAA8C;AACrF,SAAO,wBAAwB,OAAO;AACxC;",
+  "names": []
+}

package/dist/modules/devices/api/route.js

@@ -0,0 +1,143 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
+import { consumeAdvancedFilterState, mergeAdvancedFilterTree } from "@open-mercato/shared/lib/crud/advanced-filter-integration";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { resolveLocaleFromAcceptLanguage } from "@open-mercato/shared/lib/i18n/locale";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { E } from "../../../generated/entities.ids.generated.js";
+import { UserDevice } from "../data/entities.js";
+import {
+  registerDeviceSchema,
+  registerDeviceCommandSchema
+} from "../data/validators.js";
+import { resolveDeviceActorUserId } from "./auth.js";
+import { createDevicesCrudOpenApi, createPagedListResponseSchema } from "./openapi.js";
+import { deviceListSchema, deviceListFields, deviceListSortFieldMap, deviceListItemSchema } from "./deviceList.js";
+import { executeRegister } from "./deviceOps.js";
+const logger = createLogger("devices");
+const routeMetadata = {
+  GET: { requireAuth: true, requireFeatures: ["devices.view"] },
+  POST: { requireAuth: true, requireFeatures: ["devices.manage"] }
+};
+const metadata = routeMetadata;
+const NO_MATCH_USER_ID = "00000000-0000-0000-0000-000000000000";
+const crud = makeCrudRoute({
+  metadata: routeMetadata,
+  orm: {
+    entity: UserDevice,
+    idField: "id",
+    // organization_id stays nullable, but scoping follows the standard org-scoped pattern (like every
+    // other module): the factory auto-filters by the caller's organization scope. The query engine's
+    // org scope is null-aware — callers whose scope includes null (or who have no org restriction) also
+    // see null-org rows; a caller pinned to a specific org does not.
+    orgField: "organizationId",
+    tenantField: "tenantId",
+    softDeleteField: "deletedAt"
+  },
+  indexer: { entityType: E.devices.user_device },
+  // Align the CRUD cache resource tag with the command's resourceKind ('devices.user_device') so
+  // writes through the device commands invalidate this list cache. Without this, the factory falls
+  // back to the ORM entity name and the cache is never busted (stale list under ENABLE_CRUD_API_CACHE).
+  // The factory does not own the write methods here (custom POST + command bus), so no events are emitted.
+  events: { module: "devices", entity: "user_device" },
+  list: {
+    schema: deviceListSchema,
+    entityId: E.devices.user_device,
+    // push_token is a secret and is never exposed via the list API.
+    fields: deviceListFields,
+    sortFieldMap: deviceListSortFieldMap,
+    // Exports are off for the self-serve list. The factory enables them for every list that does not
+    // declare `export` (resolveAvailableExportFormats falls back to csv/json/xml/markdown), and its
+    // full-export branch replaces the filters with `{}` instead of calling `buildFilters`
+    // (`baseFilters = exportFullRequested ? {} : buildFilters(...)`). On this route `buildFilters` is
+    // the only user-level boundary — automatic scoping covers tenant and organization, not the acting
+    // user — so `?format=json&exportScope=full` would return every device in the caller's org scope.
+    // With no available formats, `exportRequested` is never true and that branch is unreachable. Bulk
+    // device data belongs to the admin tree (api/admin/devices), which gates cross-user listing.
+    export: { enabled: false },
+    // Self-serve: always scoped to the acting user. Cross-user listing lives in api/admin/devices.
+    buildFilters: async (query, ctx) => {
+      const advancedFilterTree = consumeAdvancedFilterState(query);
+      const filters = {};
+      const actorUserId = resolveDeviceActorUserId(ctx.auth);
+      filters.user_id = { $eq: actorUserId ?? NO_MATCH_USER_ID };
+      if (query.platform) filters.platform = { $eq: query.platform };
+      return mergeAdvancedFilterTree(filters, advancedFilterTree);
+    }
+  }
+});
+const GET = crud.GET;
+async function POST(req) {
+  const { translate } = await resolveTranslations();
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    const actorUserId = resolveDeviceActorUserId(auth);
+    if (!auth || !auth.tenantId || !actorUserId) {
+      return NextResponse.json({ error: translate("devices.errors.unauthorized", "Unauthorized") }, { status: 401 });
+    }
+    const body = registerDeviceSchema.parse(await readJsonSafe(req, {}));
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+    const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+    const headerLocale = resolveLocaleFromAcceptLanguage(req.headers.get("accept-language"));
+    const commandInput = registerDeviceCommandSchema.parse({
+      ...body,
+      locale: body.locale ?? headerLocale ?? void 0,
+      tenantId: auth.tenantId,
+      organizationId,
+      userId: actorUserId
+    });
+    const mctx = { container, auth, scope, organizationId, actorUserId, request: req };
+    return await executeRegister(mctx, commandInput);
+  } catch (err) {
+    if (err instanceof z.ZodError) {
+      return NextResponse.json(
+        { error: translate("devices.errors.invalid_payload", "Invalid device payload"), details: err.flatten() },
+        { status: 400 }
+      );
+    }
+    if (isCrudHttpError(err) && err.body?.code === "device_already_registered") {
+      return NextResponse.json(
+        { error: translate("devices.errors.already_registered", "This device is already registered") },
+        { status: 409 }
+      );
+    }
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    logger.error("devices.POST failed", { err });
+    return NextResponse.json(
+      { error: translate("devices.errors.register_failed", "Failed to register device") },
+      { status: 500 }
+    );
+  }
+}
+const registerResponseSchema = z.object({
+  id: z.string().uuid(),
+  deviceId: z.string(),
+  revived: z.boolean()
+});
+const openApi = createDevicesCrudOpenApi({
+  resourceName: "Device",
+  pluralName: "Devices",
+  querySchema: deviceListSchema,
+  listResponseSchema: createPagedListResponseSchema(deviceListItemSchema),
+  create: {
+    schema: registerDeviceSchema,
+    responseSchema: registerResponseSchema,
+    description: "Registers (or idempotently upserts) the current user's device for the given deviceId. May include an initial push token."
+  }
+});
+export {
+  GET,
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/devices/api/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/devices/api/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { consumeAdvancedFilterState, mergeAdvancedFilterTree } from '@open-mercato/shared/lib/crud/advanced-filter-integration'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { resolveLocaleFromAcceptLanguage } from '@open-mercato/shared/lib/i18n/locale'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { E } from '#generated/entities.ids.generated'\nimport { UserDevice } from '../data/entities'\nimport {\n  registerDeviceSchema,\n  registerDeviceCommandSchema,\n  type RegisterDeviceCommandInput,\n} from '../data/validators'\nimport { resolveDeviceActorUserId } from './auth'\nimport { createDevicesCrudOpenApi, createPagedListResponseSchema } from './openapi'\nimport { deviceListSchema, deviceListFields, deviceListSortFieldMap, deviceListItemSchema } from './deviceList'\nimport { executeRegister, type DeviceMutationContext } from './deviceOps'\n\nconst logger = createLogger('devices')\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['devices.view'] },\n  POST: { requireAuth: true, requireFeatures: ['devices.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst NO_MATCH_USER_ID = '00000000-0000-0000-0000-000000000000'\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: UserDevice,\n    idField: 'id',\n    // organization_id stays nullable, but scoping follows the standard org-scoped pattern (like every\n    // other module): the factory auto-filters by the caller's organization scope. The query engine's\n    // org scope is null-aware \u2014 callers whose scope includes null (or who have no org restriction) also\n    // see null-org rows; a caller pinned to a specific org does not.\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  indexer: { entityType: E.devices.user_device },\n  // Align the CRUD cache resource tag with the command's resourceKind ('devices.user_device') so\n  // writes through the device commands invalidate this list cache. Without this, the factory falls\n  // back to the ORM entity name and the cache is never busted (stale list under ENABLE_CRUD_API_CACHE).\n  // The factory does not own the write methods here (custom POST + command bus), so no events are emitted.\n  events: { module: 'devices', entity: 'user_device' },\n  list: {\n    schema: deviceListSchema,\n    entityId: E.devices.user_device,\n    // push_token is a secret and is never exposed via the list API.\n    fields: deviceListFields,\n    sortFieldMap: deviceListSortFieldMap,\n    // Exports are off for the self-serve list. The factory enables them for every list that does not\n    // declare `export` (resolveAvailableExportFormats falls back to csv/json/xml/markdown), and its\n    // full-export branch replaces the filters with `{}` instead of calling `buildFilters`\n    // (`baseFilters = exportFullRequested ? {} : buildFilters(...)`). On this route `buildFilters` is\n    // the only user-level boundary \u2014 automatic scoping covers tenant and organization, not the acting\n    // user \u2014 so `?format=json&exportScope=full` would return every device in the caller's org scope.\n    // With no available formats, `exportRequested` is never true and that branch is unreachable. Bulk\n    // device data belongs to the admin tree (api/admin/devices), which gates cross-user listing.\n    export: { enabled: false },\n    // Self-serve: always scoped to the acting user. Cross-user listing lives in api/admin/devices.\n    buildFilters: async (query, ctx) => {\n      // Consume the client-supplied advanced filter here (this deletes every `filter[...]` key from\n      // `query`) so the CRUD factory's own merge step becomes a no-op. That step is\n      // `{ ...existingFilters, ...advancedWhere }` (advanced-filter-integration.ts), and condition\n      // field names are never validated \u2014 `filter[conditions][0][field]=user_id` or `=$and` would\n      // otherwise overwrite whatever key this route uses for its scope and widen the listing to other\n      // users. `mergeAdvancedFilterTree` instead AND-combines under `$and: [routeFilters, treeWhere]`,\n      // where the scope sits in its own array element and no client key can reach it. Same pattern as\n      // customers/people, companies and deals.\n      const advancedFilterTree = consumeAdvancedFilterState(query)\n      const filters: Record<string, unknown> = {}\n      const actorUserId = resolveDeviceActorUserId(ctx.auth)\n      // Self-serve visibility is strictly the acting user's own devices; cross-user listing lives in\n      // api/admin/devices. Fail closed when there is no resolvable acting user (e.g. API keys).\n      filters.user_id = { $eq: actorUserId ?? NO_MATCH_USER_ID }\n      if (query.platform) filters.platform = { $eq: query.platform }\n      return mergeAdvancedFilterTree(filters, advancedFilterTree)\n    },\n  },\n})\n\nexport const GET = crud.GET\n\nexport async function POST(req: Request) {\n  const { translate } = await resolveTranslations()\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const actorUserId = resolveDeviceActorUserId(auth)\n    if (!auth || !auth.tenantId || !actorUserId) {\n      return NextResponse.json({ error: translate('devices.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n    }\n\n    const body = registerDeviceSchema.parse(await readJsonSafe(req, {}))\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const organizationId = scope?.selectedId ?? auth.orgId ?? null\n\n    // When the app doesn't send an explicit per-device locale, fall back to the request's\n    // Accept-Language (the mobile client calls this with its own headers). Only on self-register \u2014\n    // PUT stays tri-state, and admin register uses the admin's browser headers, not the device's.\n    const headerLocale = resolveLocaleFromAcceptLanguage(req.headers.get('accept-language'))\n\n    const commandInput = registerDeviceCommandSchema.parse({\n      ...body,\n      locale: body.locale ?? headerLocale ?? undefined,\n      tenantId: auth.tenantId,\n      organizationId,\n      userId: actorUserId,\n    } satisfies RegisterDeviceCommandInput)\n\n    const mctx: DeviceMutationContext = { container, auth, scope, organizationId, actorUserId, request: req }\n    return await executeRegister(mctx, commandInput)\n  } catch (err) {\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        { error: translate('devices.errors.invalid_payload', 'Invalid device payload'), details: err.flatten() },\n        { status: 400 },\n      )\n    }\n    if (isCrudHttpError(err) && (err.body as { code?: string } | undefined)?.code === 'device_already_registered') {\n      return NextResponse.json(\n        { error: translate('devices.errors.already_registered', 'This device is already registered') },\n        { status: 409 },\n      )\n    }\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    logger.error('devices.POST failed', { err })\n    return NextResponse.json(\n      { error: translate('devices.errors.register_failed', 'Failed to register device') },\n      { status: 500 },\n    )\n  }\n}\n\nconst registerResponseSchema = z.object({\n  id: z.string().uuid(),\n  deviceId: z.string(),\n  revived: z.boolean(),\n})\n\nexport const openApi: OpenApiRouteDoc = createDevicesCrudOpenApi({\n  resourceName: 'Device',\n  pluralName: 'Devices',\n  querySchema: deviceListSchema,\n  listResponseSchema: createPagedListResponseSchema(deviceListItemSchema),\n  create: {\n    schema: registerDeviceSchema,\n    responseSchema: registerResponseSchema,\n    description:\n      'Registers (or idempotently upserts) the current user\\'s device for the given deviceId. May include an initial push token.',\n  },\n})\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,4BAA4B,+BAA+B;AACpE,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,uBAAuB;AAChC,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,uCAAuC;AAEhD,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,gCAAgC;AACzC,SAAS,0BAA0B,qCAAqC;AACxE,SAAS,kBAAkB,kBAAkB,wBAAwB,4BAA4B;AACjG,SAAS,uBAAmD;AAE5D,MAAM,SAAS,aAAa,SAAS;AAErC,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,cAAc,EAAE;AAAA,EAC5D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AACjE;AAEO,MAAM,WAAW;AAExB,MAAM,mBAAmB;AAEzB,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,IAKT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,SAAS,EAAE,YAAY,EAAE,QAAQ,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA,EAK7C,QAAQ,EAAE,QAAQ,WAAW,QAAQ,cAAc;AAAA,EACnD,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,EAAE,QAAQ;AAAA;AAAA,IAEpB,QAAQ;AAAA,IACR,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASd,QAAQ,EAAE,SAAS,MAAM;AAAA;AAAA,IAEzB,cAAc,OAAO,OAAO,QAAQ;AASlC,YAAM,qBAAqB,2BAA2B,KAAK;AAC3D,YAAM,UAAmC,CAAC;AAC1C,YAAM,cAAc,yBAAyB,IAAI,IAAI;AAGrD,cAAQ,UAAU,EAAE,KAAK,eAAe,iBAAiB;AACzD,UAAI,MAAM,SAAU,SAAQ,WAAW,EAAE,KAAK,MAAM,SAAS;AAC7D,aAAO,wBAAwB,SAAS,kBAAkB;AAAA,IAC5D;AAAA,EACF;AACF,CAAC;AAEM,MAAM,MAAM,KAAK;AAExB,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,cAAc,yBAAyB,IAAI;AACjD,QAAI,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,aAAa;AAC3C,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,+BAA+B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/G;AAEA,UAAM,OAAO,qBAAqB,MAAM,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AACnE,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAK1D,UAAM,eAAe,gCAAgC,IAAI,QAAQ,IAAI,iBAAiB,CAAC;AAEvF,UAAM,eAAe,4BAA4B,MAAM;AAAA,MACrD,GAAG;AAAA,MACH,QAAQ,KAAK,UAAU,gBAAgB;AAAA,MACvC,UAAU,KAAK;AAAA,MACf;AAAA,MACA,QAAQ;AAAA,IACV,CAAsC;AAEtC,UAAM,OAA8B,EAAE,WAAW,MAAM,OAAO,gBAAgB,aAAa,SAAS,IAAI;AACxG,WAAO,MAAM,gBAAgB,MAAM,YAAY;AAAA,EACjD,SAAS,KAAK;AACZ,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,kCAAkC,wBAAwB,GAAG,SAAS,IAAI,QAAQ,EAAE;AAAA,QACvG,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,QAAI,gBAAgB,GAAG,KAAM,IAAI,MAAwC,SAAS,6BAA6B;AAC7G,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,qCAAqC,mCAAmC,EAAE;AAAA,QAC7F,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,MAAM,uBAAuB,EAAE,IAAI,CAAC;AAC3C,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,kCAAkC,2BAA2B,EAAE;AAAA,MAClF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,UAAU,EAAE,OAAO;AAAA,EACnB,SAAS,EAAE,QAAQ;AACrB,CAAC;AAEM,MAAM,UAA2B,yBAAyB;AAAA,EAC/D,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB,8BAA8B,oBAAoB;AAAA,EACtE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EACJ;AACF,CAAC;",
+  "names": []
+}

package/dist/modules/devices/backend/devices/[id]/page.js

@@ -0,0 +1,135 @@
+"use client";
+import { jsx, jsxs } from "react/jsx-runtime";
+import * as React from "react";
+import Link from "next/link";
+import { useRouter } from "next/navigation";
+import { Page, PageBody } from "@open-mercato/ui/backend/Page";
+import { CrudForm } from "@open-mercato/ui/backend/CrudForm";
+import { updateCrud } from "@open-mercato/ui/backend/utils/crud";
+import { apiCall } from "@open-mercato/ui/backend/utils/apiCall";
+import { flash } from "@open-mercato/ui/backend/FlashMessages";
+import { LoadingMessage, ErrorMessage, RecordNotFoundState } from "@open-mercato/ui/backend/detail";
+import { useT } from "@open-mercato/shared/lib/i18n/context";
+function DeviceAdminEditPage({ params }) {
+  const router = useRouter();
+  const t = useT();
+  const id = typeof params?.id === "string" ? params.id : "";
+  const [device, setDevice] = React.useState(null);
+  const [isLoading, setIsLoading] = React.useState(true);
+  const [error, setError] = React.useState(null);
+  const [notFound, setNotFound] = React.useState(false);
+  const [userLabel, setUserLabel] = React.useState(null);
+  React.useEffect(() => {
+    let cancelled = false;
+    async function load() {
+      setIsLoading(true);
+      setError(null);
+      setNotFound(false);
+      const call = await apiCall(
+        `/api/devices/admin/devices/${encodeURIComponent(id)}`,
+        void 0,
+        { fallback: null }
+      );
+      if (cancelled) return;
+      if (call.ok && call.result?.item) {
+        setDevice(call.result.item);
+      } else if (call.status === 404 || call.ok && !call.result?.item) {
+        setNotFound(true);
+      } else {
+        setError(t("devices.form.error.loadFailed"));
+      }
+      setIsLoading(false);
+    }
+    if (id) load();
+    return () => {
+      cancelled = true;
+    };
+  }, [id, t]);
+  React.useEffect(() => {
+    const userId = device?.user_id;
+    if (!userId) return;
+    let cancelled = false;
+    void (async () => {
+      const call = await apiCall(
+        `/api/auth/users?id=${encodeURIComponent(userId)}`,
+        { headers: { "x-om-forbidden-redirect": "0" } },
+        { fallback: null }
+      ).catch(() => null);
+      if (cancelled || !call || !call.ok) return;
+      const found = call.result?.items?.find((u) => u.id === userId);
+      const label = found?.name?.trim() || found?.email?.trim() || null;
+      if (label) setUserLabel(label);
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, [device?.user_id]);
+  const fields = React.useMemo(() => [
+    { id: "clientAppVersion", label: t("devices.form.appVersion"), type: "text" },
+    { id: "osVersion", label: t("devices.form.osVersion"), type: "text" },
+    { id: "pushProvider", label: t("devices.form.pushProvider"), type: "text" }
+  ], [t]);
+  const groups = React.useMemo(() => [
+    { id: "details", title: t("devices.form.details"), column: 1, fields: ["clientAppVersion", "osVersion", "pushProvider"] }
+  ], [t]);
+  if (isLoading) {
+    return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx(LoadingMessage, { label: t("common.loading") }) }) });
+  }
+  if (notFound) {
+    return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx(
+      RecordNotFoundState,
+      {
+        label: t("devices.errors.not_found"),
+        backHref: "/backend/devices",
+        backLabel: t("devices.list.title")
+      }
+    ) }) });
+  }
+  if (error || !device) {
+    return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx(ErrorMessage, { label: error ?? t("devices.form.error.loadFailed") }) }) });
+  }
+  return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx(
+    CrudForm,
+    {
+      title: t("devices.form.editTitle"),
+      backHref: "/backend/devices",
+      contentHeader: /* @__PURE__ */ jsxs("dl", { className: "grid grid-cols-1 gap-3 rounded-md border bg-muted p-4 text-sm sm:grid-cols-3", children: [
+        /* @__PURE__ */ jsxs("div", { children: [
+          /* @__PURE__ */ jsx("dt", { className: "text-xs font-medium text-muted-foreground", children: t("devices.form.deviceId") }),
+          /* @__PURE__ */ jsx("dd", { className: "mt-1", children: /* @__PURE__ */ jsx("code", { className: "text-xs", children: device.device_id }) })
+        ] }),
+        /* @__PURE__ */ jsxs("div", { children: [
+          /* @__PURE__ */ jsx("dt", { className: "text-xs font-medium text-muted-foreground", children: t("devices.form.platform") }),
+          /* @__PURE__ */ jsx("dd", { className: "mt-1", children: device.platform })
+        ] }),
+        /* @__PURE__ */ jsxs("div", { children: [
+          /* @__PURE__ */ jsx("dt", { className: "text-xs font-medium text-muted-foreground", children: t("devices.form.userId") }),
+          /* @__PURE__ */ jsx("dd", { className: "mt-1", children: userLabel ? /* @__PURE__ */ jsx(Link, { href: `/backend/users/${encodeURIComponent(device.user_id)}/edit`, className: "text-primary hover:underline", children: userLabel }) : /* @__PURE__ */ jsx("code", { className: "text-xs", children: device.user_id }) })
+        ] })
+      ] }),
+      fields,
+      groups,
+      optimisticLockUpdatedAt: device.updated_at,
+      initialValues: {
+        clientAppVersion: device.client_app_version ?? "",
+        osVersion: device.os_version ?? "",
+        pushProvider: device.push_provider ?? ""
+      },
+      submitLabel: t("common.save"),
+      cancelHref: "/backend/devices",
+      onSubmit: async (values) => {
+        await updateCrud(`devices/admin/devices/${encodeURIComponent(id)}`, {
+          clientAppVersion: values.clientAppVersion.trim() || null,
+          osVersion: values.osVersion.trim() || null,
+          pushProvider: values.pushProvider.trim() || null
+        });
+        flash(t("devices.form.success.updated"), "success");
+        router.push("/backend/devices");
+      }
+    }
+  ) }) });
+}
+export {
+  DeviceAdminEditPage as default
+};
+//# sourceMappingURL=page.js.map

package/dist/modules/devices/backend/devices/[id]/page.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/devices/backend/devices/%5Bid%5D/page.tsx"],
+  "sourcesContent": ["\"use client\"\nimport * as React from 'react'\nimport Link from 'next/link'\nimport { useRouter } from 'next/navigation'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { CrudForm, type CrudField, type CrudFormGroup } from '@open-mercato/ui/backend/CrudForm'\nimport { updateCrud } from '@open-mercato/ui/backend/utils/crud'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { LoadingMessage, ErrorMessage, RecordNotFoundState } from '@open-mercato/ui/backend/detail'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\n\ntype DeviceDetail = {\n  id: string\n  user_id: string\n  device_id: string\n  platform: string\n  client_app_version: string | null\n  os_version: string | null\n  push_provider: string | null\n  updated_at: string | null\n}\n\ntype FormValues = {\n  clientAppVersion: string\n  osVersion: string\n  pushProvider: string\n}\n\nexport default function DeviceAdminEditPage({ params }: { params?: { id?: string } }) {\n  const router = useRouter()\n  const t = useT()\n  const id = typeof params?.id === 'string' ? params.id : ''\n  const [device, setDevice] = React.useState<DeviceDetail | null>(null)\n  const [isLoading, setIsLoading] = React.useState(true)\n  const [error, setError] = React.useState<string | null>(null)\n  const [notFound, setNotFound] = React.useState(false)\n  const [userLabel, setUserLabel] = React.useState<string | null>(null)\n\n  React.useEffect(() => {\n    let cancelled = false\n    async function load() {\n      setIsLoading(true)\n      setError(null)\n      setNotFound(false)\n      const call = await apiCall<{ item?: DeviceDetail }>(\n        `/api/devices/admin/devices/${encodeURIComponent(id)}`,\n        undefined,\n        { fallback: null },\n      )\n      if (cancelled) return\n      if (call.ok && call.result?.item) {\n        setDevice(call.result.item)\n      } else if (call.status === 404 || (call.ok && !call.result?.item)) {\n        setNotFound(true)\n      } else {\n        setError(t('devices.form.error.loadFailed'))\n      }\n      setIsLoading(false)\n    }\n    if (id) load()\n    return () => { cancelled = true }\n  }, [id, t])\n\n  // Resolve the owner's display name for a link to their profile. Devices admins may not hold\n  // auth.users.list, so fall back to the raw id (rendered without a link) instead of redirecting.\n  React.useEffect(() => {\n    const userId = device?.user_id\n    if (!userId) return\n    let cancelled = false\n    void (async () => {\n      const call = await apiCall<{ items?: { id: string; name?: string | null; email?: string | null }[] }>(\n        `/api/auth/users?id=${encodeURIComponent(userId)}`,\n        { headers: { 'x-om-forbidden-redirect': '0' } },\n        { fallback: null },\n      ).catch(() => null)\n      if (cancelled || !call || !call.ok) return\n      const found = call.result?.items?.find((u) => u.id === userId)\n      const label = found?.name?.trim() || found?.email?.trim() || null\n      if (label) setUserLabel(label)\n    })()\n    return () => { cancelled = true }\n  }, [device?.user_id])\n\n  const fields = React.useMemo<CrudField[]>(() => [\n    { id: 'clientAppVersion', label: t('devices.form.appVersion'), type: 'text' },\n    { id: 'osVersion', label: t('devices.form.osVersion'), type: 'text' },\n    { id: 'pushProvider', label: t('devices.form.pushProvider'), type: 'text' },\n  ], [t])\n\n  const groups = React.useMemo<CrudFormGroup[]>(() => ([\n    { id: 'details', title: t('devices.form.details'), column: 1, fields: ['clientAppVersion', 'osVersion', 'pushProvider'] },\n  ]), [t])\n\n  if (isLoading) {\n    return <Page><PageBody><LoadingMessage label={t('common.loading')} /></PageBody></Page>\n  }\n  if (notFound) {\n    return (\n      <Page>\n        <PageBody>\n          <RecordNotFoundState\n            label={t('devices.errors.not_found')}\n            backHref=\"/backend/devices\"\n            backLabel={t('devices.list.title')}\n          />\n        </PageBody>\n      </Page>\n    )\n  }\n  if (error || !device) {\n    return <Page><PageBody><ErrorMessage label={error ?? t('devices.form.error.loadFailed')} /></PageBody></Page>\n  }\n\n  return (\n    <Page>\n      <PageBody>\n        <CrudForm<FormValues>\n          title={t('devices.form.editTitle')}\n          backHref=\"/backend/devices\"\n          contentHeader={(\n            <dl className=\"grid grid-cols-1 gap-3 rounded-md border bg-muted p-4 text-sm sm:grid-cols-3\">\n              <div>\n                <dt className=\"text-xs font-medium text-muted-foreground\">{t('devices.form.deviceId')}</dt>\n                <dd className=\"mt-1\"><code className=\"text-xs\">{device.device_id}</code></dd>\n              </div>\n              <div>\n                <dt className=\"text-xs font-medium text-muted-foreground\">{t('devices.form.platform')}</dt>\n                <dd className=\"mt-1\">{device.platform}</dd>\n              </div>\n              <div>\n                <dt className=\"text-xs font-medium text-muted-foreground\">{t('devices.form.userId')}</dt>\n                <dd className=\"mt-1\">{userLabel ? (\n                  <Link href={`/backend/users/${encodeURIComponent(device.user_id)}/edit`} className=\"text-primary hover:underline\">{userLabel}</Link>\n                ) : (\n                  <code className=\"text-xs\">{device.user_id}</code>\n                )}</dd>\n              </div>\n            </dl>\n          )}\n          fields={fields}\n          groups={groups}\n          optimisticLockUpdatedAt={device.updated_at}\n          initialValues={{\n            clientAppVersion: device.client_app_version ?? '',\n            osVersion: device.os_version ?? '',\n            pushProvider: device.push_provider ?? '',\n          }}\n          submitLabel={t('common.save')}\n          cancelHref=\"/backend/devices\"\n          onSubmit={async (values) => {\n            await updateCrud(`devices/admin/devices/${encodeURIComponent(id)}`, {\n              clientAppVersion: values.clientAppVersion.trim() || null,\n              osVersion: values.osVersion.trim() || null,\n              pushProvider: values.pushProvider.trim() || null,\n            })\n            flash(t('devices.form.success.updated'), 'success')\n            router.push('/backend/devices')\n          }}\n        />\n      </PageBody>\n    </Page>\n  )\n}\n"],
+  "mappings": ";AA+F2B,cA2Bb,YA3Ba;AA9F3B,YAAY,WAAW;AACvB,OAAO,UAAU;AACjB,SAAS,iBAAiB;AAC1B,SAAS,MAAM,gBAAgB;AAC/B,SAAS,gBAAoD;AAC7D,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,aAAa;AACtB,SAAS,gBAAgB,cAAc,2BAA2B;AAClE,SAAS,YAAY;AAmBN,SAAR,oBAAqC,EAAE,OAAO,GAAiC;AACpF,QAAM,SAAS,UAAU;AACzB,QAAM,IAAI,KAAK;AACf,QAAM,KAAK,OAAO,QAAQ,OAAO,WAAW,OAAO,KAAK;AACxD,QAAM,CAAC,QAAQ,SAAS,IAAI,MAAM,SAA8B,IAAI;AACpE,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAS,IAAI;AACrD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAC5D,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,SAAS,KAAK;AACpD,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAwB,IAAI;AAEpE,QAAM,UAAU,MAAM;AACpB,QAAI,YAAY;AAChB,mBAAe,OAAO;AACpB,mBAAa,IAAI;AACjB,eAAS,IAAI;AACb,kBAAY,KAAK;AACjB,YAAM,OAAO,MAAM;AAAA,QACjB,8BAA8B,mBAAmB,EAAE,CAAC;AAAA,QACpD;AAAA,QACA,EAAE,UAAU,KAAK;AAAA,MACnB;AACA,UAAI,UAAW;AACf,UAAI,KAAK,MAAM,KAAK,QAAQ,MAAM;AAChC,kBAAU,KAAK,OAAO,IAAI;AAAA,MAC5B,WAAW,KAAK,WAAW,OAAQ,KAAK,MAAM,CAAC,KAAK,QAAQ,MAAO;AACjE,oBAAY,IAAI;AAAA,MAClB,OAAO;AACL,iBAAS,EAAE,+BAA+B,CAAC;AAAA,MAC7C;AACA,mBAAa,KAAK;AAAA,IACpB;AACA,QAAI,GAAI,MAAK;AACb,WAAO,MAAM;AAAE,kBAAY;AAAA,IAAK;AAAA,EAClC,GAAG,CAAC,IAAI,CAAC,CAAC;AAIV,QAAM,UAAU,MAAM;AACpB,UAAM,SAAS,QAAQ;AACvB,QAAI,CAAC,OAAQ;AACb,QAAI,YAAY;AAChB,UAAM,YAAY;AAChB,YAAM,OAAO,MAAM;AAAA,QACjB,sBAAsB,mBAAmB,MAAM,CAAC;AAAA,QAChD,EAAE,SAAS,EAAE,2BAA2B,IAAI,EAAE;AAAA,QAC9C,EAAE,UAAU,KAAK;AAAA,MACnB,EAAE,MAAM,MAAM,IAAI;AAClB,UAAI,aAAa,CAAC,QAAQ,CAAC,KAAK,GAAI;AACpC,YAAM,QAAQ,KAAK,QAAQ,OAAO,KAAK,CAAC,MAAM,EAAE,OAAO,MAAM;AAC7D,YAAM,QAAQ,OAAO,MAAM,KAAK,KAAK,OAAO,OAAO,KAAK,KAAK;AAC7D,UAAI,MAAO,cAAa,KAAK;AAAA,IAC/B,GAAG;AACH,WAAO,MAAM;AAAE,kBAAY;AAAA,IAAK;AAAA,EAClC,GAAG,CAAC,QAAQ,OAAO,CAAC;AAEpB,QAAM,SAAS,MAAM,QAAqB,MAAM;AAAA,IAC9C,EAAE,IAAI,oBAAoB,OAAO,EAAE,yBAAyB,GAAG,MAAM,OAAO;AAAA,IAC5E,EAAE,IAAI,aAAa,OAAO,EAAE,wBAAwB,GAAG,MAAM,OAAO;AAAA,IACpE,EAAE,IAAI,gBAAgB,OAAO,EAAE,2BAA2B,GAAG,MAAM,OAAO;AAAA,EAC5E,GAAG,CAAC,CAAC,CAAC;AAEN,QAAM,SAAS,MAAM,QAAyB,MAAO;AAAA,IACnD,EAAE,IAAI,WAAW,OAAO,EAAE,sBAAsB,GAAG,QAAQ,GAAG,QAAQ,CAAC,oBAAoB,aAAa,cAAc,EAAE;AAAA,EAC1H,GAAI,CAAC,CAAC,CAAC;AAEP,MAAI,WAAW;AACb,WAAO,oBAAC,QAAK,8BAAC,YAAS,8BAAC,kBAAe,OAAO,EAAE,gBAAgB,GAAG,GAAE,GAAW;AAAA,EAClF;AACA,MAAI,UAAU;AACZ,WACE,oBAAC,QACC,8BAAC,YACC;AAAA,MAAC;AAAA;AAAA,QACC,OAAO,EAAE,0BAA0B;AAAA,QACnC,UAAS;AAAA,QACT,WAAW,EAAE,oBAAoB;AAAA;AAAA,IACnC,GACF,GACF;AAAA,EAEJ;AACA,MAAI,SAAS,CAAC,QAAQ;AACpB,WAAO,oBAAC,QAAK,8BAAC,YAAS,8BAAC,gBAAa,OAAO,SAAS,EAAE,+BAA+B,GAAG,GAAE,GAAW;AAAA,EACxG;AAEA,SACE,oBAAC,QACC,8BAAC,YACC;AAAA,IAAC;AAAA;AAAA,MACC,OAAO,EAAE,wBAAwB;AAAA,MACjC,UAAS;AAAA,MACT,eACE,qBAAC,QAAG,WAAU,gFACZ;AAAA,6BAAC,SACC;AAAA,8BAAC,QAAG,WAAU,6CAA6C,YAAE,uBAAuB,GAAE;AAAA,UACtF,oBAAC,QAAG,WAAU,QAAO,8BAAC,UAAK,WAAU,WAAW,iBAAO,WAAU,GAAO;AAAA,WAC1E;AAAA,QACA,qBAAC,SACC;AAAA,8BAAC,QAAG,WAAU,6CAA6C,YAAE,uBAAuB,GAAE;AAAA,UACtF,oBAAC,QAAG,WAAU,QAAQ,iBAAO,UAAS;AAAA,WACxC;AAAA,QACA,qBAAC,SACC;AAAA,8BAAC,QAAG,WAAU,6CAA6C,YAAE,qBAAqB,GAAE;AAAA,UACpF,oBAAC,QAAG,WAAU,QAAQ,sBACpB,oBAAC,QAAK,MAAM,kBAAkB,mBAAmB,OAAO,OAAO,CAAC,SAAS,WAAU,gCAAgC,qBAAU,IAE7H,oBAAC,UAAK,WAAU,WAAW,iBAAO,SAAQ,GAC1C;AAAA,WACJ;AAAA,SACF;AAAA,MAEF;AAAA,MACA;AAAA,MACA,yBAAyB,OAAO;AAAA,MAChC,eAAe;AAAA,QACb,kBAAkB,OAAO,sBAAsB;AAAA,QAC/C,WAAW,OAAO,cAAc;AAAA,QAChC,cAAc,OAAO,iBAAiB;AAAA,MACxC;AAAA,MACA,aAAa,EAAE,aAAa;AAAA,MAC5B,YAAW;AAAA,MACX,UAAU,OAAO,WAAW;AAC1B,cAAM,WAAW,yBAAyB,mBAAmB,EAAE,CAAC,IAAI;AAAA,UAClE,kBAAkB,OAAO,iBAAiB,KAAK,KAAK;AAAA,UACpD,WAAW,OAAO,UAAU,KAAK,KAAK;AAAA,UACtC,cAAc,OAAO,aAAa,KAAK,KAAK;AAAA,QAC9C,CAAC;AACD,cAAM,EAAE,8BAA8B,GAAG,SAAS;AAClD,eAAO,KAAK,kBAAkB;AAAA,MAChC;AAAA;AAAA,EACF,GACF,GACF;AAEJ;",
+  "names": []
+}

package/dist/modules/devices/backend/devices/[id]/page.meta.js

@@ -0,0 +1,16 @@
+const metadata = {
+  requireAuth: true,
+  requireFeatures: ["devices.admin"],
+  pageTitle: "Edit device",
+  pageTitleKey: "devices.form.editTitle",
+  pageContext: "settings",
+  navHidden: true,
+  breadcrumb: [
+    { label: "Devices", labelKey: "devices.nav.devices", href: "/backend/devices" },
+    { label: "Edit device", labelKey: "devices.form.editTitle" }
+  ]
+};
+export {
+  metadata
+};
+//# sourceMappingURL=page.meta.js.map

package/dist/modules/devices/backend/devices/[id]/page.meta.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/devices/backend/devices/%5Bid%5D/page.meta.ts"],
+  "sourcesContent": ["export const metadata = {\n  requireAuth: true,\n  requireFeatures: ['devices.admin'],\n  pageTitle: 'Edit device',\n  pageTitleKey: 'devices.form.editTitle',\n  pageContext: 'settings' as const,\n  navHidden: true,\n  breadcrumb: [\n    { label: 'Devices', labelKey: 'devices.nav.devices', href: '/backend/devices' },\n    { label: 'Edit device', labelKey: 'devices.form.editTitle' },\n  ],\n}\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,eAAe;AAAA,EACjC,WAAW;AAAA,EACX,cAAc;AAAA,EACd,aAAa;AAAA,EACb,WAAW;AAAA,EACX,YAAY;AAAA,IACV,EAAE,OAAO,WAAW,UAAU,uBAAuB,MAAM,mBAAmB;AAAA,IAC9E,EAAE,OAAO,eAAe,UAAU,yBAAyB;AAAA,EAC7D;AACF;",
+  "names": []
+}

package/dist/modules/devices/backend/devices/create/page.js

@@ -0,0 +1,68 @@
+"use client";
+import { jsx } from "react/jsx-runtime";
+import * as React from "react";
+import { useRouter } from "next/navigation";
+import { Page, PageBody } from "@open-mercato/ui/backend/Page";
+import { CrudForm } from "@open-mercato/ui/backend/CrudForm";
+import { createCrud } from "@open-mercato/ui/backend/utils/crud";
+import { flash } from "@open-mercato/ui/backend/FlashMessages";
+import { useT } from "@open-mercato/shared/lib/i18n/context";
+function trimmedOrUndefined(value) {
+  const trimmed = value.trim();
+  return trimmed.length > 0 ? trimmed : void 0;
+}
+function DeviceAdminCreatePage() {
+  const router = useRouter();
+  const t = useT();
+  const fields = React.useMemo(() => [
+    { id: "userId", label: t("devices.form.userId"), type: "text", required: true, description: t("devices.form.userIdHint") },
+    { id: "deviceId", label: t("devices.form.deviceId"), type: "text", required: true },
+    {
+      id: "platform",
+      label: t("devices.form.platform"),
+      type: "select",
+      required: true,
+      options: [
+        { value: "ios", label: "iOS" },
+        { value: "android", label: "Android" },
+        { value: "web", label: "Web" }
+      ]
+    },
+    { id: "clientAppVersion", label: t("devices.form.appVersion"), type: "text" },
+    { id: "osVersion", label: t("devices.form.osVersion"), type: "text" },
+    { id: "pushToken", label: t("devices.form.pushToken"), type: "password", description: t("devices.form.pushTokenHint") },
+    { id: "pushProvider", label: t("devices.form.pushProvider"), type: "text" }
+  ], [t]);
+  const groups = React.useMemo(() => [
+    { id: "details", title: t("devices.form.details"), column: 1, fields: ["userId", "deviceId", "platform", "clientAppVersion", "osVersion", "pushToken", "pushProvider"] }
+  ], [t]);
+  return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx(
+    CrudForm,
+    {
+      title: t("devices.form.createTitle"),
+      backHref: "/backend/devices",
+      fields,
+      groups,
+      initialValues: { userId: "", deviceId: "", platform: "ios", clientAppVersion: "", osVersion: "", pushToken: "", pushProvider: "" },
+      submitLabel: t("common.create"),
+      cancelHref: "/backend/devices",
+      onSubmit: async (values) => {
+        await createCrud("devices/admin/devices", {
+          userId: values.userId.trim(),
+          deviceId: values.deviceId.trim(),
+          platform: values.platform,
+          clientAppVersion: trimmedOrUndefined(values.clientAppVersion),
+          osVersion: trimmedOrUndefined(values.osVersion),
+          pushToken: trimmedOrUndefined(values.pushToken),
+          pushProvider: trimmedOrUndefined(values.pushProvider)
+        });
+        flash(t("devices.form.success.created"), "success");
+        router.push("/backend/devices");
+      }
+    }
+  ) }) });
+}
+export {
+  DeviceAdminCreatePage as default
+};
+//# sourceMappingURL=page.js.map

package/dist/modules/devices/backend/devices/create/page.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/devices/backend/devices/create/page.tsx"],
+  "sourcesContent": ["\"use client\"\nimport * as React from 'react'\nimport { useRouter } from 'next/navigation'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { CrudForm, type CrudField, type CrudFormGroup } from '@open-mercato/ui/backend/CrudForm'\nimport { createCrud } from '@open-mercato/ui/backend/utils/crud'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\n\ntype FormValues = {\n  userId: string\n  deviceId: string\n  platform: 'ios' | 'android' | 'web'\n  clientAppVersion: string\n  osVersion: string\n  pushToken: string\n  pushProvider: string\n}\n\nfunction trimmedOrUndefined(value: string): string | undefined {\n  const trimmed = value.trim()\n  return trimmed.length > 0 ? trimmed : undefined\n}\n\nexport default function DeviceAdminCreatePage() {\n  const router = useRouter()\n  const t = useT()\n\n  const fields = React.useMemo<CrudField[]>(() => [\n    { id: 'userId', label: t('devices.form.userId'), type: 'text', required: true, description: t('devices.form.userIdHint') },\n    { id: 'deviceId', label: t('devices.form.deviceId'), type: 'text', required: true },\n    {\n      id: 'platform',\n      label: t('devices.form.platform'),\n      type: 'select',\n      required: true,\n      options: [\n        { value: 'ios', label: 'iOS' },\n        { value: 'android', label: 'Android' },\n        { value: 'web', label: 'Web' },\n      ],\n    },\n    { id: 'clientAppVersion', label: t('devices.form.appVersion'), type: 'text' },\n    { id: 'osVersion', label: t('devices.form.osVersion'), type: 'text' },\n    { id: 'pushToken', label: t('devices.form.pushToken'), type: 'password', description: t('devices.form.pushTokenHint') },\n    { id: 'pushProvider', label: t('devices.form.pushProvider'), type: 'text' },\n  ], [t])\n\n  const groups = React.useMemo<CrudFormGroup[]>(() => ([\n    { id: 'details', title: t('devices.form.details'), column: 1, fields: ['userId', 'deviceId', 'platform', 'clientAppVersion', 'osVersion', 'pushToken', 'pushProvider'] },\n  ]), [t])\n\n  return (\n    <Page>\n      <PageBody>\n        <CrudForm<FormValues>\n          title={t('devices.form.createTitle')}\n          backHref=\"/backend/devices\"\n          fields={fields}\n          groups={groups}\n          initialValues={{ userId: '', deviceId: '', platform: 'ios', clientAppVersion: '', osVersion: '', pushToken: '', pushProvider: '' }}\n          submitLabel={t('common.create')}\n          cancelHref=\"/backend/devices\"\n          onSubmit={async (values) => {\n            await createCrud('devices/admin/devices', {\n              userId: values.userId.trim(),\n              deviceId: values.deviceId.trim(),\n              platform: values.platform,\n              clientAppVersion: trimmedOrUndefined(values.clientAppVersion),\n              osVersion: trimmedOrUndefined(values.osVersion),\n              pushToken: trimmedOrUndefined(values.pushToken),\n              pushProvider: trimmedOrUndefined(values.pushProvider),\n            })\n            flash(t('devices.form.success.created'), 'success')\n            router.push('/backend/devices')\n          }}\n        />\n      </PageBody>\n    </Page>\n  )\n}\n"],
+  "mappings": ";AAuDQ;AAtDR,YAAY,WAAW;AACvB,SAAS,iBAAiB;AAC1B,SAAS,MAAM,gBAAgB;AAC/B,SAAS,gBAAoD;AAC7D,SAAS,kBAAkB;AAC3B,SAAS,aAAa;AACtB,SAAS,YAAY;AAYrB,SAAS,mBAAmB,OAAmC;AAC7D,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEe,SAAR,wBAAyC;AAC9C,QAAM,SAAS,UAAU;AACzB,QAAM,IAAI,KAAK;AAEf,QAAM,SAAS,MAAM,QAAqB,MAAM;AAAA,IAC9C,EAAE,IAAI,UAAU,OAAO,EAAE,qBAAqB,GAAG,MAAM,QAAQ,UAAU,MAAM,aAAa,EAAE,yBAAyB,EAAE;AAAA,IACzH,EAAE,IAAI,YAAY,OAAO,EAAE,uBAAuB,GAAG,MAAM,QAAQ,UAAU,KAAK;AAAA,IAClF;AAAA,MACE,IAAI;AAAA,MACJ,OAAO,EAAE,uBAAuB;AAAA,MAChC,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS;AAAA,QACP,EAAE,OAAO,OAAO,OAAO,MAAM;AAAA,QAC7B,EAAE,OAAO,WAAW,OAAO,UAAU;AAAA,QACrC,EAAE,OAAO,OAAO,OAAO,MAAM;AAAA,MAC/B;AAAA,IACF;AAAA,IACA,EAAE,IAAI,oBAAoB,OAAO,EAAE,yBAAyB,GAAG,MAAM,OAAO;AAAA,IAC5E,EAAE,IAAI,aAAa,OAAO,EAAE,wBAAwB,GAAG,MAAM,OAAO;AAAA,IACpE,EAAE,IAAI,aAAa,OAAO,EAAE,wBAAwB,GAAG,MAAM,YAAY,aAAa,EAAE,4BAA4B,EAAE;AAAA,IACtH,EAAE,IAAI,gBAAgB,OAAO,EAAE,2BAA2B,GAAG,MAAM,OAAO;AAAA,EAC5E,GAAG,CAAC,CAAC,CAAC;AAEN,QAAM,SAAS,MAAM,QAAyB,MAAO;AAAA,IACnD,EAAE,IAAI,WAAW,OAAO,EAAE,sBAAsB,GAAG,QAAQ,GAAG,QAAQ,CAAC,UAAU,YAAY,YAAY,oBAAoB,aAAa,aAAa,cAAc,EAAE;AAAA,EACzK,GAAI,CAAC,CAAC,CAAC;AAEP,SACE,oBAAC,QACC,8BAAC,YACC;AAAA,IAAC;AAAA;AAAA,MACC,OAAO,EAAE,0BAA0B;AAAA,MACnC,UAAS;AAAA,MACT;AAAA,MACA;AAAA,MACA,eAAe,EAAE,QAAQ,IAAI,UAAU,IAAI,UAAU,OAAO,kBAAkB,IAAI,WAAW,IAAI,WAAW,IAAI,cAAc,GAAG;AAAA,MACjI,aAAa,EAAE,eAAe;AAAA,MAC9B,YAAW;AAAA,MACX,UAAU,OAAO,WAAW;AAC1B,cAAM,WAAW,yBAAyB;AAAA,UACxC,QAAQ,OAAO,OAAO,KAAK;AAAA,UAC3B,UAAU,OAAO,SAAS,KAAK;AAAA,UAC/B,UAAU,OAAO;AAAA,UACjB,kBAAkB,mBAAmB,OAAO,gBAAgB;AAAA,UAC5D,WAAW,mBAAmB,OAAO,SAAS;AAAA,UAC9C,WAAW,mBAAmB,OAAO,SAAS;AAAA,UAC9C,cAAc,mBAAmB,OAAO,YAAY;AAAA,QACtD,CAAC;AACD,cAAM,EAAE,8BAA8B,GAAG,SAAS;AAClD,eAAO,KAAK,kBAAkB;AAAA,MAChC;AAAA;AAAA,EACF,GACF,GACF;AAEJ;",
+  "names": []
+}

package/dist/modules/devices/backend/devices/create/page.meta.js

@@ -0,0 +1,16 @@
+const metadata = {
+  requireAuth: true,
+  requireFeatures: ["devices.admin"],
+  pageTitle: "Register device",
+  pageTitleKey: "devices.form.createTitle",
+  pageContext: "settings",
+  navHidden: true,
+  breadcrumb: [
+    { label: "Devices", labelKey: "devices.nav.devices", href: "/backend/devices" },
+    { label: "Register device", labelKey: "devices.form.createTitle" }
+  ]
+};
+export {
+  metadata
+};
+//# sourceMappingURL=page.meta.js.map

package/dist/modules/devices/backend/devices/create/page.meta.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/devices/backend/devices/create/page.meta.ts"],
+  "sourcesContent": ["export const metadata = {\n  requireAuth: true,\n  requireFeatures: ['devices.admin'],\n  pageTitle: 'Register device',\n  pageTitleKey: 'devices.form.createTitle',\n  pageContext: 'settings' as const,\n  navHidden: true,\n  breadcrumb: [\n    { label: 'Devices', labelKey: 'devices.nav.devices', href: '/backend/devices' },\n    { label: 'Register device', labelKey: 'devices.form.createTitle' },\n  ],\n}\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,eAAe;AAAA,EACjC,WAAW;AAAA,EACX,cAAc;AAAA,EACd,aAAa;AAAA,EACb,WAAW;AAAA,EACX,YAAY;AAAA,IACV,EAAE,OAAO,WAAW,UAAU,uBAAuB,MAAM,mBAAmB;AAAA,IAC9E,EAAE,OAAO,mBAAmB,UAAU,2BAA2B;AAAA,EACnE;AACF;",
+  "names": []
+}