@open-mercato/core 0.6.8-develop.6983.1.e4f794099e → 0.6.8-develop.6985.1.fb93574faa

package/dist/modules/devices/commands/register.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/devices/commands/register.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { registerCommand, type CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { ensureTenantScope } from '@open-mercato/shared/lib/commands/scope'\nimport { extractUndoPayload } from '@open-mercato/shared/lib/commands/undo'\nimport { emitCrudSideEffects, emitCrudUndoSideEffects } from '@open-mercato/shared/lib/commands/helpers'\nimport { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport { UserDevice } from '../data/entities'\nimport { registerDeviceCommandSchema, type RegisterDeviceCommandInput } from '../data/validators'\nimport { emitDevicesEvent } from '../events'\nimport {\n  applySnapshot,\n  deviceEvents,\n  deviceIndexer,\n  isDeviceUniqueViolation,\n  loadExistingDevice,\n  serializeDevice,\n  type DeviceSnapshot,\n  type DeviceUndoPayload,\n} from './shared'\n\nconst registerDeviceCommand: CommandHandler<RegisterDeviceCommandInput, { id: string; deviceId: string; revived: boolean }> = {\n  id: 'devices.user_devices.register',\n  async prepare(rawInput, ctx) {\n    const parsed = registerDeviceCommandSchema.parse(rawInput)\n    // Enforce tenant scope before any DB access so prepare() can't probe across tenants.\n    ensureTenantScope(ctx, parsed.tenantId)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const existing = await loadExistingDevice(em, {\n      tenantId: parsed.tenantId,\n      organizationId: parsed.organizationId ?? null,\n      userId: parsed.userId,\n      deviceId: parsed.deviceId,\n    })\n    return existing ? { before: serializeDevice(existing) } : {}\n  },\n  async execute(rawInput, ctx) {\n    const parsed = registerDeviceCommandSchema.parse(rawInput)\n    ensureTenantScope(ctx, parsed.tenantId)\n\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const existing = await loadExistingDevice(em, {\n      tenantId: parsed.tenantId,\n      organizationId: parsed.organizationId ?? null,\n      userId: parsed.userId,\n      deviceId: parsed.deviceId,\n    })\n    const now = new Date()\n    const hasPushToken = parsed.pushToken !== undefined && parsed.pushToken !== null\n    const wasActive = existing ? existing.deletedAt == null : false\n\n    let device!: UserDevice\n    try {\n      await withAtomicFlush(\n        em,\n        [\n          () => {\n            if (existing) {\n              device = existing\n              device.platform = parsed.platform\n              device.organizationId = parsed.organizationId ?? device.organizationId ?? null\n              if (parsed.clientAppVersion !== undefined) device.clientAppVersion = parsed.clientAppVersion ?? null\n              if (parsed.osVersion !== undefined) device.osVersion = parsed.osVersion ?? null\n              if (parsed.locale !== undefined) device.locale = parsed.locale ?? null\n              if (hasPushToken) {\n                device.pushToken = parsed.pushToken ?? null\n                device.pushProvider = parsed.pushProvider ?? device.pushProvider ?? null\n                device.pushTokenUpdatedAt = now\n              }\n              device.lastSeenAt = now\n              device.deletedAt = null\n            } else {\n              device = em.create(UserDevice, {\n                tenantId: parsed.tenantId,\n                organizationId: parsed.organizationId ?? null,\n                userId: parsed.userId,\n                deviceId: parsed.deviceId,\n                platform: parsed.platform,\n                clientAppVersion: parsed.clientAppVersion ?? null,\n                osVersion: parsed.osVersion ?? null,\n                locale: parsed.locale ?? null,\n                pushToken: hasPushToken ? parsed.pushToken ?? null : null,\n                pushProvider: hasPushToken ? parsed.pushProvider ?? null : null,\n                pushTokenUpdatedAt: hasPushToken ? now : null,\n                lastSeenAt: now,\n              })\n              em.persist(device)\n            }\n          },\n        ],\n        { transaction: true },\n      )\n    } catch (err) {\n      if (isDeviceUniqueViolation(err)) {\n        // Default English message is a fallback; device routes translate by `code` (see route POST\n        // handlers), matching the customers dictionaries conflict pattern.\n        throw new CrudHttpError(409, {\n          code: 'device_already_registered',\n          error: 'This device is already registered',\n        })\n      }\n      throw err\n    }\n\n    const revived = Boolean(existing) && !wasActive\n    const de = ctx.container.resolve('dataEngine') as DataEngine\n    await emitCrudSideEffects({\n      dataEngine: de,\n      action: existing ? 'updated' : 'created',\n      entity: device,\n      identifiers: {\n        id: device.id,\n        tenantId: device.tenantId,\n        organizationId: device.organizationId ?? null,\n      },\n      indexer: deviceIndexer,\n      events: deviceEvents,\n    })\n    await emitDevicesEvent(\n      'devices.user_device.registered',\n      {\n        id: device.id,\n        tenantId: device.tenantId,\n        organizationId: device.organizationId ?? null,\n        userId: device.userId,\n        deviceId: device.deviceId,\n        platform: device.platform,\n        revived,\n      },\n      { persistent: true },\n    )\n\n    return { id: device.id, deviceId: device.deviceId, revived }\n  },\n  captureAfter: async (_input, result, ctx) => {\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const device = await findOneWithDecryption(em, UserDevice, { id: result.id })\n    return device ? serializeDevice(device) : null\n  },\n  buildLog: async ({ result, snapshots }) => {\n    const before = (snapshots.before as DeviceSnapshot | undefined) ?? null\n    const after = (snapshots.after as DeviceSnapshot | undefined) ?? null\n    return {\n      actionLabel: before ? 'Update device' : 'Register device',\n      resourceKind: 'devices.user_device',\n      resourceId: result.id,\n      tenantId: after?.tenantId ?? before?.tenantId ?? null,\n      organizationId: after?.organizationId ?? before?.organizationId ?? null,\n      snapshotBefore: before,\n      snapshotAfter: after,\n      payload: {\n        undo: { before, after } satisfies DeviceUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<DeviceUndoPayload>(logEntry)\n    const after = payload?.after\n    if (!after) return\n    const before = payload?.before ?? null\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const device = await findOneWithDecryption(em, UserDevice, { id: after.id })\n    if (!device) return\n\n    await withAtomicFlush(\n      em,\n      [\n        () => {\n          if (before) {\n            // Upsert/revive: restore the prior row state.\n            applySnapshot(device, before)\n          } else {\n            // Fresh registration: undo by soft-deleting the created row.\n            device.deletedAt = new Date()\n          }\n        },\n      ],\n      { transaction: true },\n    )\n\n    const de = ctx.container.resolve('dataEngine') as DataEngine\n    await emitCrudUndoSideEffects({\n      dataEngine: de,\n      action: before ? 'updated' : 'deleted',\n      entity: device,\n      identifiers: {\n        id: device.id,\n        tenantId: device.tenantId,\n        organizationId: device.organizationId ?? null,\n      },\n      indexer: deviceIndexer,\n      events: deviceEvents,\n    })\n  },\n}\n\nregisterCommand(registerDeviceCommand)\n"],
+  "mappings": "AACA,SAAS,uBAA4C;AACrD,SAAS,yBAAyB;AAClC,SAAS,0BAA0B;AACnC,SAAS,qBAAqB,+BAA+B;AAC7D,SAAS,uBAAuB;AAChC,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AAEtC,SAAS,kBAAkB;AAC3B,SAAS,mCAAoE;AAC7E,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAEP,MAAM,wBAAwH;AAAA,EAC5H,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,4BAA4B,MAAM,QAAQ;AAEzD,sBAAkB,KAAK,OAAO,QAAQ;AACtC,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,mBAAmB,IAAI;AAAA,MAC5C,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO,kBAAkB;AAAA,MACzC,QAAQ,OAAO;AAAA,MACf,UAAU,OAAO;AAAA,IACnB,CAAC;AACD,WAAO,WAAW,EAAE,QAAQ,gBAAgB,QAAQ,EAAE,IAAI,CAAC;AAAA,EAC7D;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,4BAA4B,MAAM,QAAQ;AACzD,sBAAkB,KAAK,OAAO,QAAQ;AAEtC,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,mBAAmB,IAAI;AAAA,MAC5C,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO,kBAAkB;AAAA,MACzC,QAAQ,OAAO;AAAA,MACf,UAAU,OAAO;AAAA,IACnB,CAAC;AACD,UAAM,MAAM,oBAAI,KAAK;AACrB,UAAM,eAAe,OAAO,cAAc,UAAa,OAAO,cAAc;AAC5E,UAAM,YAAY,WAAW,SAAS,aAAa,OAAO;AAE1D,QAAI;AACJ,QAAI;AACF,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE,MAAM;AACJ,gBAAI,UAAU;AACZ,uBAAS;AACT,qBAAO,WAAW,OAAO;AACzB,qBAAO,iBAAiB,OAAO,kBAAkB,OAAO,kBAAkB;AAC1E,kBAAI,OAAO,qBAAqB,OAAW,QAAO,mBAAmB,OAAO,oBAAoB;AAChG,kBAAI,OAAO,cAAc,OAAW,QAAO,YAAY,OAAO,aAAa;AAC3E,kBAAI,OAAO,WAAW,OAAW,QAAO,SAAS,OAAO,UAAU;AAClE,kBAAI,cAAc;AAChB,uBAAO,YAAY,OAAO,aAAa;AACvC,uBAAO,eAAe,OAAO,gBAAgB,OAAO,gBAAgB;AACpE,uBAAO,qBAAqB;AAAA,cAC9B;AACA,qBAAO,aAAa;AACpB,qBAAO,YAAY;AAAA,YACrB,OAAO;AACL,uBAAS,GAAG,OAAO,YAAY;AAAA,gBAC7B,UAAU,OAAO;AAAA,gBACjB,gBAAgB,OAAO,kBAAkB;AAAA,gBACzC,QAAQ,OAAO;AAAA,gBACf,UAAU,OAAO;AAAA,gBACjB,UAAU,OAAO;AAAA,gBACjB,kBAAkB,OAAO,oBAAoB;AAAA,gBAC7C,WAAW,OAAO,aAAa;AAAA,gBAC/B,QAAQ,OAAO,UAAU;AAAA,gBACzB,WAAW,eAAe,OAAO,aAAa,OAAO;AAAA,gBACrD,cAAc,eAAe,OAAO,gBAAgB,OAAO;AAAA,gBAC3D,oBAAoB,eAAe,MAAM;AAAA,gBACzC,YAAY;AAAA,cACd,CAAC;AACD,iBAAG,QAAQ,MAAM;AAAA,YACnB;AAAA,UACF;AAAA,QACF;AAAA,QACA,EAAE,aAAa,KAAK;AAAA,MACtB;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,wBAAwB,GAAG,GAAG;AAGhC,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,MAAM;AAAA,UACN,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AACA,YAAM;AAAA,IACR;AAEA,UAAM,UAAU,QAAQ,QAAQ,KAAK,CAAC;AACtC,UAAM,KAAK,IAAI,UAAU,QAAQ,YAAY;AAC7C,UAAM,oBAAoB;AAAA,MACxB,YAAY;AAAA,MACZ,QAAQ,WAAW,YAAY;AAAA,MAC/B,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,OAAO;AAAA,QACX,UAAU,OAAO;AAAA,QACjB,gBAAgB,OAAO,kBAAkB;AAAA,MAC3C;AAAA,MACA,SAAS;AAAA,MACT,QAAQ;AAAA,IACV,CAAC;AACD,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,IAAI,OAAO;AAAA,QACX,UAAU,OAAO;AAAA,QACjB,gBAAgB,OAAO,kBAAkB;AAAA,QACzC,QAAQ,OAAO;AAAA,QACf,UAAU,OAAO;AAAA,QACjB,UAAU,OAAO;AAAA,QACjB;AAAA,MACF;AAAA,MACA,EAAE,YAAY,KAAK;AAAA,IACrB;AAEA,WAAO,EAAE,IAAI,OAAO,IAAI,UAAU,OAAO,UAAU,QAAQ;AAAA,EAC7D;AAAA,EACA,cAAc,OAAO,QAAQ,QAAQ,QAAQ;AAC3C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,SAAS,MAAM,sBAAsB,IAAI,YAAY,EAAE,IAAI,OAAO,GAAG,CAAC;AAC5E,WAAO,SAAS,gBAAgB,MAAM,IAAI;AAAA,EAC5C;AAAA,EACA,UAAU,OAAO,EAAE,QAAQ,UAAU,MAAM;AACzC,UAAM,SAAU,UAAU,UAAyC;AACnE,UAAM,QAAS,UAAU,SAAwC;AACjE,WAAO;AAAA,MACL,aAAa,SAAS,kBAAkB;AAAA,MACxC,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO,YAAY,QAAQ,YAAY;AAAA,MACjD,gBAAgB,OAAO,kBAAkB,QAAQ,kBAAkB;AAAA,MACnE,gBAAgB;AAAA,MAChB,eAAe;AAAA,MACf,SAAS;AAAA,QACP,MAAM,EAAE,QAAQ,MAAM;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAsC,QAAQ;AAC9D,UAAM,QAAQ,SAAS;AACvB,QAAI,CAAC,MAAO;AACZ,UAAM,SAAS,SAAS,UAAU;AAClC,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,SAAS,MAAM,sBAAsB,IAAI,YAAY,EAAE,IAAI,MAAM,GAAG,CAAC;AAC3E,QAAI,CAAC,OAAQ;AAEb,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AACJ,cAAI,QAAQ;AAEV,0BAAc,QAAQ,MAAM;AAAA,UAC9B,OAAO;AAEL,mBAAO,YAAY,oBAAI,KAAK;AAAA,UAC9B;AAAA,QACF;AAAA,MACF;AAAA,MACA,EAAE,aAAa,KAAK;AAAA,IACtB;AAEA,UAAM,KAAK,IAAI,UAAU,QAAQ,YAAY;AAC7C,UAAM,wBAAwB;AAAA,MAC5B,YAAY;AAAA,MACZ,QAAQ,SAAS,YAAY;AAAA,MAC7B,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,OAAO;AAAA,QACX,UAAU,OAAO;AAAA,QACjB,gBAAgB,OAAO,kBAAkB;AAAA,MAC3C;AAAA,MACA,SAAS;AAAA,MACT,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AACF;AAEA,gBAAgB,qBAAqB;",
+  "names": []
+}

package/dist/modules/devices/commands/shared.js

@@ -0,0 +1,74 @@
+import { UniqueConstraintViolationException } from "@mikro-orm/core";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { E } from "../../../generated/entities.ids.generated.js";
+import { UserDevice } from "../data/entities.js";
+const deviceIndexer = {
+  entityType: E.devices.user_device
+};
+const deviceEvents = {
+  module: "devices",
+  entity: "user_device",
+  persistent: true,
+  buildPayload: (ctx) => ({
+    id: ctx.identifiers.id,
+    tenantId: ctx.identifiers.tenantId,
+    organizationId: ctx.identifiers.organizationId
+  })
+};
+function toDate(value) {
+  if (!value) return null;
+  const date = new Date(value);
+  return Number.isNaN(date.getTime()) ? null : date;
+}
+function fingerprintPushToken(token) {
+  return token ? token.slice(-8) : null;
+}
+function serializeDevice(device) {
+  return {
+    id: device.id,
+    tenantId: device.tenantId,
+    organizationId: device.organizationId ?? null,
+    userId: device.userId,
+    deviceId: device.deviceId,
+    platform: device.platform,
+    clientAppVersion: device.clientAppVersion ?? null,
+    osVersion: device.osVersion ?? null,
+    locale: device.locale ?? null,
+    pushTokenFingerprint: fingerprintPushToken(device.pushToken ?? null),
+    pushProvider: device.pushProvider ?? null,
+    pushTokenUpdatedAt: device.pushTokenUpdatedAt ? device.pushTokenUpdatedAt.toISOString() : null,
+    lastSeenAt: device.lastSeenAt.toISOString(),
+    deletedAt: device.deletedAt ? device.deletedAt.toISOString() : null
+  };
+}
+function applySnapshot(device, snapshot) {
+  device.platform = snapshot.platform;
+  device.clientAppVersion = snapshot.clientAppVersion;
+  device.osVersion = snapshot.osVersion;
+  device.locale = snapshot.locale;
+  device.lastSeenAt = toDate(snapshot.lastSeenAt) ?? /* @__PURE__ */ new Date();
+  device.deletedAt = toDate(snapshot.deletedAt);
+}
+async function loadExistingDevice(em, scope) {
+  const dscope = { tenantId: scope.tenantId, organizationId: scope.organizationId };
+  const active = await findOneWithDecryption(em, UserDevice, { ...scope, deletedAt: null }, void 0, dscope);
+  if (active) return active;
+  return findOneWithDecryption(em, UserDevice, scope, { orderBy: { createdAt: "desc" } }, dscope);
+}
+const PG_UNIQUE_VIOLATION = "23505";
+function isDeviceUniqueViolation(error) {
+  if (error instanceof UniqueConstraintViolationException) return true;
+  if (!error || typeof error !== "object") return false;
+  if (error.code === PG_UNIQUE_VIOLATION) return true;
+  const message = error.message;
+  return typeof message === "string" && message.toLowerCase().includes("duplicate key");
+}
+export {
+  applySnapshot,
+  deviceEvents,
+  deviceIndexer,
+  isDeviceUniqueViolation,
+  loadExistingDevice,
+  serializeDevice
+};
+//# sourceMappingURL=shared.js.map

package/dist/modules/devices/commands/shared.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/devices/commands/shared.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { UniqueConstraintViolationException } from '@mikro-orm/core'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { CrudEventsConfig, CrudIndexerConfig } from '@open-mercato/shared/lib/crud/types'\nimport { E } from '#generated/entities.ids.generated'\nimport { UserDevice } from '../data/entities'\n\nexport type DeviceSnapshot = {\n  id: string\n  tenantId: string\n  organizationId: string | null\n  userId: string\n  deviceId: string\n  platform: string\n  clientAppVersion: string | null\n  osVersion: string | null\n  locale: string | null\n  // Last-8 fingerprint of the push token \u2014 NEVER the plaintext. Audit snapshots and the undo payload\n  // both persist to `action_logs` (no TTL, never purged, and `persistLog` permits a null tenantId the\n  // encryption subscriber skips), so storing the real token there would leak a device credential\n  // forever. The live encrypted column is the single source of truth; undo re-reads it (see applySnapshot).\n  pushTokenFingerprint: string | null\n  pushProvider: string | null\n  pushTokenUpdatedAt: string | null\n  lastSeenAt: string\n  deletedAt: string | null\n}\n\nexport type DeviceUndoPayload = {\n  before?: DeviceSnapshot | null\n  after?: DeviceSnapshot | null\n}\n\nexport const deviceIndexer: CrudIndexerConfig<UserDevice> = {\n  entityType: E.devices.user_device,\n}\n\nexport const deviceEvents: CrudEventsConfig<UserDevice> = {\n  module: 'devices',\n  entity: 'user_device',\n  persistent: true,\n  buildPayload: (ctx) => ({\n    id: ctx.identifiers.id,\n    tenantId: ctx.identifiers.tenantId,\n    organizationId: ctx.identifiers.organizationId,\n  }),\n}\n\nfunction toDate(value: string | null | undefined): Date | null {\n  if (!value) return null\n  const date = new Date(value)\n  return Number.isNaN(date.getTime()) ? null : date\n}\n\n// Persist at most the last 8 chars of the (long) provider token \u2014 never the full secret. Mirrors the\n// delivery log's `token_snapshot` (push-fanout.ts) so audit/undo carry a stable, non-sensitive fingerprint.\nfunction fingerprintPushToken(token: string | null): string | null {\n  return token ? token.slice(-8) : null\n}\n\nexport function serializeDevice(device: UserDevice): DeviceSnapshot {\n  return {\n    id: device.id,\n    tenantId: device.tenantId,\n    organizationId: device.organizationId ?? null,\n    userId: device.userId,\n    deviceId: device.deviceId,\n    platform: device.platform,\n    clientAppVersion: device.clientAppVersion ?? null,\n    osVersion: device.osVersion ?? null,\n    locale: device.locale ?? null,\n    pushTokenFingerprint: fingerprintPushToken(device.pushToken ?? null),\n    pushProvider: device.pushProvider ?? null,\n    pushTokenUpdatedAt: device.pushTokenUpdatedAt ? device.pushTokenUpdatedAt.toISOString() : null,\n    lastSeenAt: device.lastSeenAt.toISOString(),\n    deletedAt: device.deletedAt ? device.deletedAt.toISOString() : null,\n  }\n}\n\nexport function applySnapshot(device: UserDevice, snapshot: DeviceSnapshot): void {\n  device.platform = snapshot.platform as UserDevice['platform']\n  device.clientAppVersion = snapshot.clientAppVersion\n  device.osVersion = snapshot.osVersion\n  device.locale = snapshot.locale\n  // The push credential triple (token, provider, token_updated_at) is deliberately NOT restored from a\n  // snapshot. The snapshot carries only a fingerprint, and the token is a device-issued credential whose\n  // live encrypted column is authoritative \u2014 undo preserves whatever token the device currently holds.\n  // Restoring a stale token, or the redacted/undecryptable placeholder a snapshot could otherwise carry,\n  // would unrecoverably brick delivery. Reverting metadata is safe; reverting the secret is not.\n  device.lastSeenAt = toDate(snapshot.lastSeenAt) ?? new Date()\n  device.deletedAt = toDate(snapshot.deletedAt)\n}\n\nexport async function loadExistingDevice(\n  em: EntityManager,\n  // organizationId is part of the device identity (a null value matches IS NULL, mirroring the\n  // coalesce(...) bucket in the unique index), so a device is looked up per (tenant, org, user, device).\n  scope: { tenantId: string; organizationId: string | null; userId: string; deviceId: string },\n): Promise<UserDevice | null> {\n  // push_token is encrypted at rest; decrypt on read so snapshots/undo payloads keep the plaintext.\n  const dscope = { tenantId: scope.tenantId, organizationId: scope.organizationId }\n  const active = await findOneWithDecryption(em, UserDevice, { ...scope, deletedAt: null }, undefined, dscope)\n  if (active) return active\n  return findOneWithDecryption(em, UserDevice, scope, { orderBy: { createdAt: 'desc' } }, dscope)\n}\n\n// Postgres SQLSTATE for unique_violation. MikroORM doesn't re-export pg error codes, so name it here.\nconst PG_UNIQUE_VIOLATION = '23505'\n\n// A concurrent first-registration of the same (tenant, org, user, device_id) loses the race against the\n// partial unique index. Surface it as a 409 conflict instead of a raw 500 \u2014 the endpoint is an\n// idempotent upsert, so the caller can simply re-issue the request to land on the existing row.\nexport function isDeviceUniqueViolation(error: unknown): boolean {\n  if (error instanceof UniqueConstraintViolationException) return true\n  if (!error || typeof error !== 'object') return false\n  if ((error as { code?: string }).code === PG_UNIQUE_VIOLATION) return true\n  const message = (error as { message?: string }).message\n  return typeof message === 'string' && message.toLowerCase().includes('duplicate key')\n}\n"],
+  "mappings": "AACA,SAAS,0CAA0C;AACnD,SAAS,6BAA6B;AAEtC,SAAS,SAAS;AAClB,SAAS,kBAAkB;AA4BpB,MAAM,gBAA+C;AAAA,EAC1D,YAAY,EAAE,QAAQ;AACxB;AAEO,MAAM,eAA6C;AAAA,EACxD,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,cAAc,CAAC,SAAS;AAAA,IACtB,IAAI,IAAI,YAAY;AAAA,IACpB,UAAU,IAAI,YAAY;AAAA,IAC1B,gBAAgB,IAAI,YAAY;AAAA,EAClC;AACF;AAEA,SAAS,OAAO,OAA+C;AAC7D,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO;AAC/C;AAIA,SAAS,qBAAqB,OAAqC;AACjE,SAAO,QAAQ,MAAM,MAAM,EAAE,IAAI;AACnC;AAEO,SAAS,gBAAgB,QAAoC;AAClE,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,UAAU,OAAO;AAAA,IACjB,gBAAgB,OAAO,kBAAkB;AAAA,IACzC,QAAQ,OAAO;AAAA,IACf,UAAU,OAAO;AAAA,IACjB,UAAU,OAAO;AAAA,IACjB,kBAAkB,OAAO,oBAAoB;AAAA,IAC7C,WAAW,OAAO,aAAa;AAAA,IAC/B,QAAQ,OAAO,UAAU;AAAA,IACzB,sBAAsB,qBAAqB,OAAO,aAAa,IAAI;AAAA,IACnE,cAAc,OAAO,gBAAgB;AAAA,IACrC,oBAAoB,OAAO,qBAAqB,OAAO,mBAAmB,YAAY,IAAI;AAAA,IAC1F,YAAY,OAAO,WAAW,YAAY;AAAA,IAC1C,WAAW,OAAO,YAAY,OAAO,UAAU,YAAY,IAAI;AAAA,EACjE;AACF;AAEO,SAAS,cAAc,QAAoB,UAAgC;AAChF,SAAO,WAAW,SAAS;AAC3B,SAAO,mBAAmB,SAAS;AACnC,SAAO,YAAY,SAAS;AAC5B,SAAO,SAAS,SAAS;AAMzB,SAAO,aAAa,OAAO,SAAS,UAAU,KAAK,oBAAI,KAAK;AAC5D,SAAO,YAAY,OAAO,SAAS,SAAS;AAC9C;AAEA,eAAsB,mBACpB,IAGA,OAC4B;AAE5B,QAAM,SAAS,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAChF,QAAM,SAAS,MAAM,sBAAsB,IAAI,YAAY,EAAE,GAAG,OAAO,WAAW,KAAK,GAAG,QAAW,MAAM;AAC3G,MAAI,OAAQ,QAAO;AACnB,SAAO,sBAAsB,IAAI,YAAY,OAAO,EAAE,SAAS,EAAE,WAAW,OAAO,EAAE,GAAG,MAAM;AAChG;AAGA,MAAM,sBAAsB;AAKrB,SAAS,wBAAwB,OAAyB;AAC/D,MAAI,iBAAiB,mCAAoC,QAAO;AAChE,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,MAAK,MAA4B,SAAS,oBAAqB,QAAO;AACtE,QAAM,UAAW,MAA+B;AAChD,SAAO,OAAO,YAAY,YAAY,QAAQ,YAAY,EAAE,SAAS,eAAe;AACtF;",
+  "names": []
+}

package/dist/modules/devices/commands/update.js

@@ -0,0 +1,126 @@
+import { registerCommand } from "@open-mercato/shared/lib/commands";
+import { ensureTenantScope } from "@open-mercato/shared/lib/commands/scope";
+import { extractUndoPayload } from "@open-mercato/shared/lib/commands/undo";
+import { emitCrudSideEffects, emitCrudUndoSideEffects } from "@open-mercato/shared/lib/commands/helpers";
+import { withAtomicFlush } from "@open-mercato/shared/lib/commands/flush";
+import { assertFound } from "@open-mercato/shared/lib/crud/errors";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { UserDevice } from "../data/entities.js";
+import { updateDeviceCommandSchema } from "../data/validators.js";
+import {
+  applySnapshot,
+  deviceEvents,
+  deviceIndexer,
+  serializeDevice
+} from "./shared.js";
+const updateDeviceCommand = {
+  id: "devices.user_devices.update",
+  async prepare(rawInput, ctx) {
+    const parsed = updateDeviceCommandSchema.parse(rawInput);
+    ensureTenantScope(ctx, parsed.tenantId);
+    const em = ctx.container.resolve("em").fork();
+    const device = await findOneWithDecryption(
+      em,
+      UserDevice,
+      { id: parsed.id, tenantId: parsed.tenantId, deletedAt: null }
+    );
+    return device ? { before: serializeDevice(device) } : {};
+  },
+  async execute(rawInput, ctx) {
+    const parsed = updateDeviceCommandSchema.parse(rawInput);
+    const em = ctx.container.resolve("em").fork();
+    const device = assertFound(
+      await findOneWithDecryption(em, UserDevice, { id: parsed.id, deletedAt: null }),
+      "Device not found"
+    );
+    ensureTenantScope(ctx, device.tenantId);
+    const now = /* @__PURE__ */ new Date();
+    await withAtomicFlush(
+      em,
+      [
+        () => {
+          if (Object.prototype.hasOwnProperty.call(parsed, "clientAppVersion")) {
+            device.clientAppVersion = parsed.clientAppVersion ?? null;
+          }
+          if (Object.prototype.hasOwnProperty.call(parsed, "osVersion")) {
+            device.osVersion = parsed.osVersion ?? null;
+          }
+          if (Object.prototype.hasOwnProperty.call(parsed, "locale")) {
+            device.locale = parsed.locale ?? null;
+          }
+          if (Object.prototype.hasOwnProperty.call(parsed, "pushToken")) {
+            device.pushToken = parsed.pushToken ?? null;
+            device.pushTokenUpdatedAt = now;
+          }
+          if (Object.prototype.hasOwnProperty.call(parsed, "pushProvider")) {
+            device.pushProvider = parsed.pushProvider ?? null;
+          }
+          if (Object.prototype.hasOwnProperty.call(parsed, "lastSeenAt") && parsed.lastSeenAt) {
+            device.lastSeenAt = parsed.lastSeenAt;
+          }
+        }
+      ],
+      { transaction: true }
+    );
+    const de = ctx.container.resolve("dataEngine");
+    await emitCrudSideEffects({
+      dataEngine: de,
+      action: "updated",
+      entity: device,
+      identifiers: {
+        id: device.id,
+        tenantId: device.tenantId,
+        organizationId: device.organizationId ?? null
+      },
+      indexer: deviceIndexer,
+      events: deviceEvents
+    });
+    return { id: device.id };
+  },
+  captureAfter: async (_input, result, ctx) => {
+    const em = ctx.container.resolve("em").fork();
+    const device = await findOneWithDecryption(em, UserDevice, { id: result.id });
+    return device ? serializeDevice(device) : null;
+  },
+  buildLog: async ({ snapshots }) => {
+    const before = snapshots.before ?? null;
+    if (!before) return null;
+    const after = snapshots.after ?? null;
+    return {
+      actionLabel: "Update device",
+      resourceKind: "devices.user_device",
+      resourceId: before.id,
+      tenantId: before.tenantId,
+      organizationId: before.organizationId,
+      snapshotBefore: before,
+      snapshotAfter: after,
+      payload: {
+        undo: { before, after }
+      }
+    };
+  },
+  undo: async ({ logEntry, ctx }) => {
+    const payload = extractUndoPayload(logEntry);
+    const before = payload?.before;
+    if (!before) return;
+    const em = ctx.container.resolve("em").fork();
+    const device = await findOneWithDecryption(em, UserDevice, { id: before.id });
+    if (!device) return;
+    await withAtomicFlush(em, [() => applySnapshot(device, before)], { transaction: true });
+    const de = ctx.container.resolve("dataEngine");
+    await emitCrudUndoSideEffects({
+      dataEngine: de,
+      action: "updated",
+      entity: device,
+      identifiers: {
+        id: device.id,
+        tenantId: device.tenantId,
+        organizationId: device.organizationId ?? null
+      },
+      indexer: deviceIndexer,
+      events: deviceEvents
+    });
+  }
+};
+registerCommand(updateDeviceCommand);
+//# sourceMappingURL=update.js.map

package/dist/modules/devices/commands/update.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/devices/commands/update.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { registerCommand, type CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { ensureTenantScope } from '@open-mercato/shared/lib/commands/scope'\nimport { extractUndoPayload } from '@open-mercato/shared/lib/commands/undo'\nimport { emitCrudSideEffects, emitCrudUndoSideEffects } from '@open-mercato/shared/lib/commands/helpers'\nimport { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'\nimport { assertFound } from '@open-mercato/shared/lib/crud/errors'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport { UserDevice } from '../data/entities'\nimport { updateDeviceCommandSchema, type UpdateDeviceCommandInput } from '../data/validators'\nimport {\n  applySnapshot,\n  deviceEvents,\n  deviceIndexer,\n  serializeDevice,\n  type DeviceSnapshot,\n  type DeviceUndoPayload,\n} from './shared'\n\nconst updateDeviceCommand: CommandHandler<UpdateDeviceCommandInput, { id: string }> = {\n  id: 'devices.user_devices.update',\n  async prepare(rawInput, ctx) {\n    const parsed = updateDeviceCommandSchema.parse(rawInput)\n    // Enforce tenant scope and constrain the snapshot lookup to the caller's tenant.\n    ensureTenantScope(ctx, parsed.tenantId)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    // No fallback decryption scope: `UserDevice` always carries its own organization_id, which\n    // `decryptEntitiesWithFallbackScope` resolves first \u2014 matching the scope-less lookup in execute().\n    const device = await findOneWithDecryption(\n      em,\n      UserDevice,\n      { id: parsed.id, tenantId: parsed.tenantId, deletedAt: null },\n    )\n    return device ? { before: serializeDevice(device) } : {}\n  },\n  async execute(rawInput, ctx) {\n    const parsed = updateDeviceCommandSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const device = assertFound(\n      await findOneWithDecryption(em, UserDevice, { id: parsed.id, deletedAt: null }),\n      'Device not found',\n    )\n    ensureTenantScope(ctx, device.tenantId)\n\n    const now = new Date()\n    await withAtomicFlush(\n      em,\n      [\n        () => {\n          if (Object.prototype.hasOwnProperty.call(parsed, 'clientAppVersion')) {\n            device.clientAppVersion = parsed.clientAppVersion ?? null\n          }\n          if (Object.prototype.hasOwnProperty.call(parsed, 'osVersion')) {\n            device.osVersion = parsed.osVersion ?? null\n          }\n          if (Object.prototype.hasOwnProperty.call(parsed, 'locale')) {\n            device.locale = parsed.locale ?? null\n          }\n          if (Object.prototype.hasOwnProperty.call(parsed, 'pushToken')) {\n            device.pushToken = parsed.pushToken ?? null\n            device.pushTokenUpdatedAt = now\n          }\n          if (Object.prototype.hasOwnProperty.call(parsed, 'pushProvider')) {\n            device.pushProvider = parsed.pushProvider ?? null\n          }\n          // Only a client-supplied lastSeenAt advances presence. Metadata-only edits (e.g. an admin\n          // changing push_provider) must NOT bump last_seen_at \u2014 device presence is maintained by the\n          // register heartbeat, not by edits.\n          if (Object.prototype.hasOwnProperty.call(parsed, 'lastSeenAt') && parsed.lastSeenAt) {\n            device.lastSeenAt = parsed.lastSeenAt\n          }\n        },\n      ],\n      { transaction: true },\n    )\n\n    const de = ctx.container.resolve('dataEngine') as DataEngine\n    await emitCrudSideEffects({\n      dataEngine: de,\n      action: 'updated',\n      entity: device,\n      identifiers: {\n        id: device.id,\n        tenantId: device.tenantId,\n        organizationId: device.organizationId ?? null,\n      },\n      indexer: deviceIndexer,\n      events: deviceEvents,\n    })\n\n    return { id: device.id }\n  },\n  captureAfter: async (_input, result, ctx) => {\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const device = await findOneWithDecryption(em, UserDevice, { id: result.id })\n    return device ? serializeDevice(device) : null\n  },\n  buildLog: async ({ snapshots }) => {\n    const before = (snapshots.before as DeviceSnapshot | undefined) ?? null\n    if (!before) return null\n    const after = (snapshots.after as DeviceSnapshot | undefined) ?? null\n    return {\n      actionLabel: 'Update device',\n      resourceKind: 'devices.user_device',\n      resourceId: before.id,\n      tenantId: before.tenantId,\n      organizationId: before.organizationId,\n      snapshotBefore: before,\n      snapshotAfter: after,\n      payload: {\n        undo: { before, after } satisfies DeviceUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const payload = extractUndoPayload<DeviceUndoPayload>(logEntry)\n    const before = payload?.before\n    if (!before) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const device = await findOneWithDecryption(em, UserDevice, { id: before.id })\n    if (!device) return\n\n    await withAtomicFlush(em, [() => applySnapshot(device, before)], { transaction: true })\n\n    const de = ctx.container.resolve('dataEngine') as DataEngine\n    await emitCrudUndoSideEffects({\n      dataEngine: de,\n      action: 'updated',\n      entity: device,\n      identifiers: {\n        id: device.id,\n        tenantId: device.tenantId,\n        organizationId: device.organizationId ?? null,\n      },\n      indexer: deviceIndexer,\n      events: deviceEvents,\n    })\n  },\n}\n\nregisterCommand(updateDeviceCommand)\n"],
+  "mappings": "AACA,SAAS,uBAA4C;AACrD,SAAS,yBAAyB;AAClC,SAAS,0BAA0B;AACnC,SAAS,qBAAqB,+BAA+B;AAC7D,SAAS,uBAAuB;AAChC,SAAS,mBAAmB;AAC5B,SAAS,6BAA6B;AAEtC,SAAS,kBAAkB;AAC3B,SAAS,iCAAgE;AACzE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAEP,MAAM,sBAAgF;AAAA,EACpF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,0BAA0B,MAAM,QAAQ;AAEvD,sBAAkB,KAAK,OAAO,QAAQ;AACtC,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAG/D,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,OAAO,IAAI,UAAU,OAAO,UAAU,WAAW,KAAK;AAAA,IAC9D;AACA,WAAO,SAAS,EAAE,QAAQ,gBAAgB,MAAM,EAAE,IAAI,CAAC;AAAA,EACzD;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,SAAS,0BAA0B,MAAM,QAAQ;AACvD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,SAAS;AAAA,MACb,MAAM,sBAAsB,IAAI,YAAY,EAAE,IAAI,OAAO,IAAI,WAAW,KAAK,CAAC;AAAA,MAC9E;AAAA,IACF;AACA,sBAAkB,KAAK,OAAO,QAAQ;AAEtC,UAAM,MAAM,oBAAI,KAAK;AACrB,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AACJ,cAAI,OAAO,UAAU,eAAe,KAAK,QAAQ,kBAAkB,GAAG;AACpE,mBAAO,mBAAmB,OAAO,oBAAoB;AAAA,UACvD;AACA,cAAI,OAAO,UAAU,eAAe,KAAK,QAAQ,WAAW,GAAG;AAC7D,mBAAO,YAAY,OAAO,aAAa;AAAA,UACzC;AACA,cAAI,OAAO,UAAU,eAAe,KAAK,QAAQ,QAAQ,GAAG;AAC1D,mBAAO,SAAS,OAAO,UAAU;AAAA,UACnC;AACA,cAAI,OAAO,UAAU,eAAe,KAAK,QAAQ,WAAW,GAAG;AAC7D,mBAAO,YAAY,OAAO,aAAa;AACvC,mBAAO,qBAAqB;AAAA,UAC9B;AACA,cAAI,OAAO,UAAU,eAAe,KAAK,QAAQ,cAAc,GAAG;AAChE,mBAAO,eAAe,OAAO,gBAAgB;AAAA,UAC/C;AAIA,cAAI,OAAO,UAAU,eAAe,KAAK,QAAQ,YAAY,KAAK,OAAO,YAAY;AACnF,mBAAO,aAAa,OAAO;AAAA,UAC7B;AAAA,QACF;AAAA,MACF;AAAA,MACA,EAAE,aAAa,KAAK;AAAA,IACtB;AAEA,UAAM,KAAK,IAAI,UAAU,QAAQ,YAAY;AAC7C,UAAM,oBAAoB;AAAA,MACxB,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,OAAO;AAAA,QACX,UAAU,OAAO;AAAA,QACjB,gBAAgB,OAAO,kBAAkB;AAAA,MAC3C;AAAA,MACA,SAAS;AAAA,MACT,QAAQ;AAAA,IACV,CAAC;AAED,WAAO,EAAE,IAAI,OAAO,GAAG;AAAA,EACzB;AAAA,EACA,cAAc,OAAO,QAAQ,QAAQ,QAAQ;AAC3C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,SAAS,MAAM,sBAAsB,IAAI,YAAY,EAAE,IAAI,OAAO,GAAG,CAAC;AAC5E,WAAO,SAAS,gBAAgB,MAAM,IAAI;AAAA,EAC5C;AAAA,EACA,UAAU,OAAO,EAAE,UAAU,MAAM;AACjC,UAAM,SAAU,UAAU,UAAyC;AACnE,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,QAAS,UAAU,SAAwC;AACjE,WAAO;AAAA,MACL,aAAa;AAAA,MACb,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,MACvB,gBAAgB;AAAA,MAChB,eAAe;AAAA,MACf,SAAS;AAAA,QACP,MAAM,EAAE,QAAQ,MAAM;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,UAAU,mBAAsC,QAAQ;AAC9D,UAAM,SAAS,SAAS;AACxB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,SAAS,MAAM,sBAAsB,IAAI,YAAY,EAAE,IAAI,OAAO,GAAG,CAAC;AAC5E,QAAI,CAAC,OAAQ;AAEb,UAAM,gBAAgB,IAAI,CAAC,MAAM,cAAc,QAAQ,MAAM,CAAC,GAAG,EAAE,aAAa,KAAK,CAAC;AAEtF,UAAM,KAAK,IAAI,UAAU,QAAQ,YAAY;AAC7C,UAAM,wBAAwB;AAAA,MAC5B,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,OAAO;AAAA,QACX,UAAU,OAAO;AAAA,QACjB,gBAAgB,OAAO,kBAAkB;AAAA,MAC3C;AAAA,MACA,SAAS;AAAA,MACT,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AACF;AAEA,gBAAgB,mBAAmB;",
+  "names": []
+}

package/dist/modules/devices/data/entities.js

@@ -0,0 +1,83 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __decorateClass = (decorators, target, key, kind) => {
+  var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc(target, key) : target;
+  for (var i = decorators.length - 1, decorator; i >= 0; i--)
+    if (decorator = decorators[i])
+      result = (kind ? decorator(target, key, result) : decorator(result)) || result;
+  if (kind && result) __defProp(target, key, result);
+  return result;
+};
+import { OptionalProps } from "@mikro-orm/core";
+import { Entity, Index, PrimaryKey, Property } from "@mikro-orm/decorators/legacy";
+OptionalProps;
+let UserDevice = class {
+  constructor() {
+    this.lastSeenAt = /* @__PURE__ */ new Date();
+    this.createdAt = /* @__PURE__ */ new Date();
+    this.updatedAt = /* @__PURE__ */ new Date();
+  }
+};
+__decorateClass([
+  PrimaryKey({ type: "uuid", defaultRaw: "gen_random_uuid()" })
+], UserDevice.prototype, "id", 2);
+__decorateClass([
+  Property({ name: "tenant_id", type: "uuid" })
+], UserDevice.prototype, "tenantId", 2);
+__decorateClass([
+  Property({ name: "organization_id", type: "uuid", nullable: true })
+], UserDevice.prototype, "organizationId", 2);
+__decorateClass([
+  Property({ name: "user_id", type: "uuid" })
+], UserDevice.prototype, "userId", 2);
+__decorateClass([
+  Property({ name: "device_id", type: "text" })
+], UserDevice.prototype, "deviceId", 2);
+__decorateClass([
+  Property({ name: "platform", type: "text" })
+], UserDevice.prototype, "platform", 2);
+__decorateClass([
+  Property({ name: "client_app_version", type: "text", nullable: true })
+], UserDevice.prototype, "clientAppVersion", 2);
+__decorateClass([
+  Property({ name: "os_version", type: "text", nullable: true })
+], UserDevice.prototype, "osVersion", 2);
+__decorateClass([
+  Property({ name: "locale", type: "text", nullable: true })
+], UserDevice.prototype, "locale", 2);
+__decorateClass([
+  Property({ name: "push_token", type: "text", nullable: true })
+], UserDevice.prototype, "pushToken", 2);
+__decorateClass([
+  Property({ name: "push_provider", type: "text", nullable: true })
+], UserDevice.prototype, "pushProvider", 2);
+__decorateClass([
+  Property({ name: "push_token_updated_at", type: Date, nullable: true })
+], UserDevice.prototype, "pushTokenUpdatedAt", 2);
+__decorateClass([
+  Property({ name: "last_seen_at", type: Date, onCreate: () => /* @__PURE__ */ new Date() })
+], UserDevice.prototype, "lastSeenAt", 2);
+__decorateClass([
+  Property({ name: "created_at", type: Date, onCreate: () => /* @__PURE__ */ new Date() })
+], UserDevice.prototype, "createdAt", 2);
+__decorateClass([
+  Property({ name: "updated_at", type: Date, onCreate: () => /* @__PURE__ */ new Date(), onUpdate: () => /* @__PURE__ */ new Date() })
+], UserDevice.prototype, "updatedAt", 2);
+__decorateClass([
+  Property({ name: "deleted_at", type: Date, nullable: true })
+], UserDevice.prototype, "deletedAt", 2);
+UserDevice = __decorateClass([
+  Entity({ tableName: "user_devices" }),
+  Index({ name: "user_devices_tenant_user_idx", properties: ["tenantId", "userId"] }),
+  Index({
+    // Device identity is scoped per organization: (tenant, org, user, device). organization_id is
+    // nullable, so the index is declared NULLS NOT DISTINCT — otherwise Postgres treats NULLs as
+    // distinct and would allow duplicate null-org rows for the same (tenant, user, device).
+    name: "user_devices_tenant_org_user_device_active_unique",
+    expression: 'create unique index "user_devices_tenant_org_user_device_active_unique" on "user_devices" ("tenant_id", "organization_id", "user_id", "device_id") nulls not distinct where deleted_at is null'
+  })
+], UserDevice);
+export {
+  UserDevice
+};
+//# sourceMappingURL=entities.js.map

package/dist/modules/devices/data/entities.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/devices/data/entities.ts"],
+  "sourcesContent": ["import { OptionalProps } from '@mikro-orm/core'\nimport { Entity, Index, PrimaryKey, Property } from '@mikro-orm/decorators/legacy'\n\nexport type DevicePlatform = 'ios' | 'android' | 'web'\n\n@Entity({ tableName: 'user_devices' })\n@Index({ name: 'user_devices_tenant_user_idx', properties: ['tenantId', 'userId'] })\n@Index({\n  // Device identity is scoped per organization: (tenant, org, user, device). organization_id is\n  // nullable, so the index is declared NULLS NOT DISTINCT \u2014 otherwise Postgres treats NULLs as\n  // distinct and would allow duplicate null-org rows for the same (tenant, user, device).\n  name: 'user_devices_tenant_org_user_device_active_unique',\n  expression:\n    'create unique index \"user_devices_tenant_org_user_device_active_unique\" on \"user_devices\" (\"tenant_id\", \"organization_id\", \"user_id\", \"device_id\") nulls not distinct where deleted_at is null',\n})\nexport class UserDevice {\n  [OptionalProps]?:\n    | 'organizationId'\n    | 'clientAppVersion'\n    | 'osVersion'\n    | 'locale'\n    | 'pushToken'\n    | 'pushProvider'\n    | 'pushTokenUpdatedAt'\n    | 'lastSeenAt'\n    | 'createdAt'\n    | 'updatedAt'\n    | 'deletedAt'\n\n  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })\n  id!: string\n\n  @Property({ name: 'tenant_id', type: 'uuid' })\n  tenantId!: string\n\n  @Property({ name: 'organization_id', type: 'uuid', nullable: true })\n  organizationId?: string | null\n\n  @Property({ name: 'user_id', type: 'uuid' })\n  userId!: string\n\n  @Property({ name: 'device_id', type: 'text' })\n  deviceId!: string\n\n  @Property({ name: 'platform', type: 'text' })\n  platform!: DevicePlatform\n\n  @Property({ name: 'client_app_version', type: 'text', nullable: true })\n  clientAppVersion?: string | null\n\n  @Property({ name: 'os_version', type: 'text', nullable: true })\n  osVersion?: string | null\n\n  // Per-device language the client app picked (BCP-47, e.g. `en` / `en-US`). Normalized to a\n  // supported locale at push send time to translate the notification copy; null \u21D2 default locale.\n  @Property({ name: 'locale', type: 'text', nullable: true })\n  locale?: string | null\n\n  @Property({ name: 'push_token', type: 'text', nullable: true })\n  pushToken?: string | null\n\n  @Property({ name: 'push_provider', type: 'text', nullable: true })\n  pushProvider?: string | null\n\n  @Property({ name: 'push_token_updated_at', type: Date, nullable: true })\n  pushTokenUpdatedAt?: Date | null\n\n  @Property({ name: 'last_seen_at', type: Date, onCreate: () => new Date() })\n  lastSeenAt: Date = new Date()\n\n  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })\n  createdAt: Date = new Date()\n\n  @Property({ name: 'updated_at', type: Date, onCreate: () => new Date(), onUpdate: () => new Date() })\n  updatedAt: Date = new Date()\n\n  @Property({ name: 'deleted_at', type: Date, nullable: true })\n  deletedAt?: Date | null\n}\n"],
+  "mappings": ";;;;;;;;;;AAAA,SAAS,qBAAqB;AAC9B,SAAS,QAAQ,OAAO,YAAY,gBAAgB;AAejD;AADI,IAAM,aAAN,MAAiB;AAAA,EAAjB;AAqDL,sBAAmB,oBAAI,KAAK;AAG5B,qBAAkB,oBAAI,KAAK;AAG3B,qBAAkB,oBAAI,KAAK;AAAA;AAI7B;AAhDE;AAAA,EADC,WAAW,EAAE,MAAM,QAAQ,YAAY,oBAAoB,CAAC;AAAA,GAdlD,WAeX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GAjBlC,WAkBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,mBAAmB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GApBxD,WAqBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,WAAW,MAAM,OAAO,CAAC;AAAA,GAvBhC,WAwBX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,GA1BlC,WA2BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,YAAY,MAAM,OAAO,CAAC;AAAA,GA7BjC,WA8BX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,sBAAsB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAhC3D,WAiCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAnCnD,WAoCX;AAKA;AAAA,EADC,SAAS,EAAE,MAAM,UAAU,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GAxC/C,WAyCX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA3CnD,WA4CX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,iBAAiB,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,GA9CtD,WA+CX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,yBAAyB,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GAjD5D,WAkDX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,gBAAgB,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GApD/D,WAqDX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GAvD7D,WAwDX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,MAAM,oBAAI,KAAK,GAAG,UAAU,MAAM,oBAAI,KAAK,EAAE,CAAC;AAAA,GA1DzF,WA2DX;AAGA;AAAA,EADC,SAAS,EAAE,MAAM,cAAc,MAAM,MAAM,UAAU,KAAK,CAAC;AAAA,GA7DjD,WA8DX;AA9DW,aAAN;AAAA,EAVN,OAAO,EAAE,WAAW,eAAe,CAAC;AAAA,EACpC,MAAM,EAAE,MAAM,gCAAgC,YAAY,CAAC,YAAY,QAAQ,EAAE,CAAC;AAAA,EAClF,MAAM;AAAA;AAAA;AAAA;AAAA,IAIL,MAAM;AAAA,IACN,YACE;AAAA,EACJ,CAAC;AAAA,GACY;",
+  "names": []
+}

package/dist/modules/devices/data/validators.js

@@ -0,0 +1,49 @@
+import { z } from "zod";
+const devicePlatformSchema = z.enum(["ios", "android", "web"]);
+const registerDeviceSchema = z.object({
+  deviceId: z.string().trim().min(1).max(255),
+  platform: devicePlatformSchema,
+  clientAppVersion: z.string().trim().max(64).nullish(),
+  osVersion: z.string().trim().max(64).nullish(),
+  locale: z.string().trim().min(2).max(35).nullish(),
+  pushToken: z.string().trim().min(1).max(4096).nullish(),
+  pushProvider: z.string().trim().min(1).max(32).nullish()
+}).strict();
+const registerDeviceAdminSchema = registerDeviceSchema.extend({
+  userId: z.string().uuid()
+});
+const updateDeviceSchema = z.object({
+  clientAppVersion: z.string().trim().max(64).nullable().optional(),
+  osVersion: z.string().trim().max(64).nullable().optional(),
+  locale: z.string().trim().min(2).max(35).nullable().optional(),
+  pushToken: z.string().trim().min(1).max(4096).nullable().optional(),
+  pushProvider: z.string().trim().min(1).max(32).nullable().optional(),
+  lastSeenAt: z.coerce.date().optional()
+}).strict();
+const registerDeviceCommandSchema = registerDeviceSchema.extend({
+  tenantId: z.string().uuid(),
+  organizationId: z.string().uuid().nullable().optional(),
+  userId: z.string().uuid()
+});
+const updateDeviceCommandSchema = updateDeviceSchema.extend({
+  id: z.string().uuid(),
+  tenantId: z.string().uuid(),
+  userId: z.string().uuid(),
+  organizationId: z.string().uuid().nullable().optional()
+});
+const deactivateDeviceCommandSchema = z.object({
+  id: z.string().uuid(),
+  tenantId: z.string().uuid(),
+  userId: z.string().uuid(),
+  organizationId: z.string().uuid().nullable().optional()
+});
+export {
+  deactivateDeviceCommandSchema,
+  devicePlatformSchema,
+  registerDeviceAdminSchema,
+  registerDeviceCommandSchema,
+  registerDeviceSchema,
+  updateDeviceCommandSchema,
+  updateDeviceSchema
+};
+//# sourceMappingURL=validators.js.map

package/dist/modules/devices/data/validators.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/devices/data/validators.ts"],
+  "sourcesContent": ["import { z } from 'zod'\n\nexport const devicePlatformSchema = z.enum(['ios', 'android', 'web'])\nexport type DevicePlatformInput = z.infer<typeof devicePlatformSchema>\n\n// POST /api/devices \u2014 register/upsert. pushToken/pushProvider optional on first register.\nexport const registerDeviceSchema = z\n  .object({\n    deviceId: z.string().trim().min(1).max(255),\n    platform: devicePlatformSchema,\n    clientAppVersion: z.string().trim().max(64).nullish(),\n    osVersion: z.string().trim().max(64).nullish(),\n    locale: z.string().trim().min(2).max(35).nullish(),\n    pushToken: z.string().trim().min(1).max(4096).nullish(),\n    pushProvider: z.string().trim().min(1).max(32).nullish(),\n  })\n  .strict()\nexport type RegisterDeviceInput = z.infer<typeof registerDeviceSchema>\n\n// POST /api/devices/admin/devices \u2014 admin registers a device on behalf of any user in the tenant.\n// Same shape as self-register plus an explicit target userId (self-register derives it from auth).\nexport const registerDeviceAdminSchema = registerDeviceSchema.extend({\n  userId: z.string().uuid(),\n})\nexport type RegisterDeviceAdminInput = z.infer<typeof registerDeviceAdminSchema>\n\n// PUT /api/devices/:id \u2014 partial update.\n// pushToken/pushProvider are tri-state: absent (leave unchanged) vs explicit null (clear).\n// `.nullable().optional()` distinguishes `undefined` from `null`; the command relies on\n// own-property presence to decide whether to touch the column.\nexport const updateDeviceSchema = z\n  .object({\n    clientAppVersion: z.string().trim().max(64).nullable().optional(),\n    osVersion: z.string().trim().max(64).nullable().optional(),\n    locale: z.string().trim().min(2).max(35).nullable().optional(),\n    pushToken: z.string().trim().min(1).max(4096).nullable().optional(),\n    pushProvider: z.string().trim().min(1).max(32).nullable().optional(),\n    lastSeenAt: z.coerce.date().optional(),\n  })\n  .strict()\nexport type UpdateDeviceInput = z.infer<typeof updateDeviceSchema>\n\n// Command-side schemas append the resolved scope. Scope fields are never accepted from the client body.\nexport const registerDeviceCommandSchema = registerDeviceSchema.extend({\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid().nullable().optional(),\n  userId: z.string().uuid(),\n})\nexport type RegisterDeviceCommandInput = z.infer<typeof registerDeviceCommandSchema>\n\nexport const updateDeviceCommandSchema = updateDeviceSchema.extend({\n  id: z.string().uuid(),\n  tenantId: z.string().uuid(),\n  userId: z.string().uuid(),\n  organizationId: z.string().uuid().nullable().optional(),\n})\nexport type UpdateDeviceCommandInput = z.infer<typeof updateDeviceCommandSchema>\n\nexport const deactivateDeviceCommandSchema = z.object({\n  id: z.string().uuid(),\n  tenantId: z.string().uuid(),\n  userId: z.string().uuid(),\n  organizationId: z.string().uuid().nullable().optional(),\n})\nexport type DeactivateDeviceCommandInput = z.infer<typeof deactivateDeviceCommandSchema>\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAEX,MAAM,uBAAuB,EAAE,KAAK,CAAC,OAAO,WAAW,KAAK,CAAC;AAI7D,MAAM,uBAAuB,EACjC,OAAO;AAAA,EACN,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC1C,UAAU;AAAA,EACV,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,QAAQ;AAAA,EACpD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,QAAQ;AAAA,EAC7C,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ;AAAA,EACjD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,QAAQ;AAAA,EACtD,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ;AACzD,CAAC,EACA,OAAO;AAKH,MAAM,4BAA4B,qBAAqB,OAAO;AAAA,EACnE,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AAOM,MAAM,qBAAqB,EAC/B,OAAO;AAAA,EACN,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;AAAA,EAChE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;AAAA,EACzD,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7D,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EAClE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;AAAA,EACnE,YAAY,EAAE,OAAO,KAAK,EAAE,SAAS;AACvC,CAAC,EACA,OAAO;AAIH,MAAM,8BAA8B,qBAAqB,OAAO;AAAA,EACrE,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACtD,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AAGM,MAAM,4BAA4B,mBAAmB,OAAO;AAAA,EACjE,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AACxD,CAAC;AAGM,MAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AACxD,CAAC;",
+  "names": []
+}

package/dist/modules/devices/di.js

@@ -0,0 +1,11 @@
+import { asValue } from "awilix";
+import { UserDevice } from "./data/entities.js";
+function register(container) {
+  container.register({
+    UserDevice: asValue(UserDevice)
+  });
+}
+export {
+  register
+};
+//# sourceMappingURL=di.js.map

package/dist/modules/devices/di.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/devices/di.ts"],
+  "sourcesContent": ["import { asValue } from 'awilix'\nimport type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport { UserDevice } from './data/entities'\n\nexport function register(container: AppContainer) {\n  container.register({\n    UserDevice: asValue(UserDevice),\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,eAAe;AAExB,SAAS,kBAAkB;AAEpB,SAAS,SAAS,WAAyB;AAChD,YAAU,SAAS;AAAA,IACjB,YAAY,QAAQ,UAAU;AAAA,EAChC,CAAC;AACH;",
+  "names": []
+}

package/dist/modules/devices/encryption.js

@@ -0,0 +1,12 @@
+const defaultEncryptionMaps = [
+  {
+    entityId: "devices:user_device",
+    fields: [{ field: "push_token" }]
+  }
+];
+var encryption_default = defaultEncryptionMaps;
+export {
+  encryption_default as default,
+  defaultEncryptionMaps
+};
+//# sourceMappingURL=encryption.js.map

package/dist/modules/devices/encryption.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/devices/encryption.ts"],
+  "sourcesContent": ["import type { ModuleEncryptionMap } from '@open-mercato/shared/modules/encryption'\n\n// `push_token` is a long-lived provider secret. It is never exposed via the API (only a last-8\n// snapshot is persisted on delivery rows) and is redacted from audit-log snapshots, so it is\n// encrypted at rest. Reads route through `findWithDecryption`/`findOneWithDecryption` per the\n// `packages/core/AGENTS.md` Encryption section. No blind-index column is needed: the push delivery\n// path looks devices up by id/user, never by token value.\nexport const defaultEncryptionMaps: ModuleEncryptionMap[] = [\n  {\n    entityId: 'devices:user_device',\n    fields: [{ field: 'push_token' }],\n  },\n]\n\nexport default defaultEncryptionMaps\n"],
+  "mappings": "AAOO,MAAM,wBAA+C;AAAA,EAC1D;AAAA,IACE,UAAU;AAAA,IACV,QAAQ,CAAC,EAAE,OAAO,aAAa,CAAC;AAAA,EAClC;AACF;AAEA,IAAO,qBAAQ;",
+  "names": []
+}

package/dist/modules/devices/events.js

@@ -0,0 +1,19 @@
+import { createModuleEvents } from "@open-mercato/shared/modules/events";
+const events = [
+  // Domain events (spec contract): emitted explicitly from commands.
+  { id: "devices.user_device.registered", label: "User Device Registered", entity: "user_device", category: "crud" },
+  { id: "devices.user_device.deactivated", label: "User Device Deactivated", entity: "user_device", category: "crud" },
+  // CRUD lifecycle events emitted by emitCrudSideEffects (keep declared to avoid undeclared-event warnings).
+  { id: "devices.user_device.created", label: "User Device Created", entity: "user_device", category: "crud" },
+  { id: "devices.user_device.updated", label: "User Device Updated", entity: "user_device", category: "crud" },
+  { id: "devices.user_device.deleted", label: "User Device Deleted", entity: "user_device", category: "crud" }
+];
+const eventsConfig = createModuleEvents({ moduleId: "devices", events });
+const emitDevicesEvent = eventsConfig.emit;
+var events_default = eventsConfig;
+export {
+  events_default as default,
+  emitDevicesEvent,
+  eventsConfig
+};
+//# sourceMappingURL=events.js.map

package/dist/modules/devices/events.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/devices/events.ts"],
+  "sourcesContent": ["import { createModuleEvents } from '@open-mercato/shared/modules/events'\n\nconst events = [\n  // Domain events (spec contract): emitted explicitly from commands.\n  { id: 'devices.user_device.registered', label: 'User Device Registered', entity: 'user_device', category: 'crud' },\n  { id: 'devices.user_device.deactivated', label: 'User Device Deactivated', entity: 'user_device', category: 'crud' },\n  // CRUD lifecycle events emitted by emitCrudSideEffects (keep declared to avoid undeclared-event warnings).\n  { id: 'devices.user_device.created', label: 'User Device Created', entity: 'user_device', category: 'crud' },\n  { id: 'devices.user_device.updated', label: 'User Device Updated', entity: 'user_device', category: 'crud' },\n  { id: 'devices.user_device.deleted', label: 'User Device Deleted', entity: 'user_device', category: 'crud' },\n] as const\n\nexport const eventsConfig = createModuleEvents({ moduleId: 'devices', events })\nexport const emitDevicesEvent = eventsConfig.emit\nexport type DevicesEventId = typeof events[number]['id']\nexport default eventsConfig\n"],
+  "mappings": "AAAA,SAAS,0BAA0B;AAEnC,MAAM,SAAS;AAAA;AAAA,EAEb,EAAE,IAAI,kCAAkC,OAAO,0BAA0B,QAAQ,eAAe,UAAU,OAAO;AAAA,EACjH,EAAE,IAAI,mCAAmC,OAAO,2BAA2B,QAAQ,eAAe,UAAU,OAAO;AAAA;AAAA,EAEnH,EAAE,IAAI,+BAA+B,OAAO,uBAAuB,QAAQ,eAAe,UAAU,OAAO;AAAA,EAC3G,EAAE,IAAI,+BAA+B,OAAO,uBAAuB,QAAQ,eAAe,UAAU,OAAO;AAAA,EAC3G,EAAE,IAAI,+BAA+B,OAAO,uBAAuB,QAAQ,eAAe,UAAU,OAAO;AAC7G;AAEO,MAAM,eAAe,mBAAmB,EAAE,UAAU,WAAW,OAAO,CAAC;AACvE,MAAM,mBAAmB,aAAa;AAE7C,IAAO,iBAAQ;",
+  "names": []
+}

package/dist/modules/devices/index.js

@@ -0,0 +1,17 @@
+import "./commands/index.js";
+const metadata = {
+  name: "devices",
+  title: "Devices",
+  version: "0.1.0",
+  description: "Per-tenant user device registry (platform, app/OS metadata, push token storage).",
+  author: "Open Mercato Team",
+  license: "MIT",
+  requires: ["auth"],
+  ejectable: true
+};
+import { features } from "./acl.js";
+export {
+  features,
+  metadata
+};
+//# sourceMappingURL=index.js.map

package/dist/modules/devices/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/devices/index.ts"],
+  "sourcesContent": ["import type { ModuleInfo } from '@open-mercato/shared/modules/registry'\nimport './commands'\n\nexport const metadata: ModuleInfo = {\n  name: 'devices',\n  title: 'Devices',\n  version: '0.1.0',\n  description: 'Per-tenant user device registry (platform, app/OS metadata, push token storage).',\n  author: 'Open Mercato Team',\n  license: 'MIT',\n  requires: ['auth'],\n  ejectable: true,\n}\n\nexport { features } from './acl'\n"],
+  "mappings": "AACA,OAAO;AAEA,MAAM,WAAuB;AAAA,EAClC,MAAM;AAAA,EACN,OAAO;AAAA,EACP,SAAS;AAAA,EACT,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,UAAU,CAAC,MAAM;AAAA,EACjB,WAAW;AACb;AAEA,SAAS,gBAAgB;",
+  "names": []
+}

package/dist/modules/devices/lib/operationMetadata.js

@@ -0,0 +1,20 @@
+import { serializeOperationMetadata } from "@open-mercato/shared/lib/commands/operationMetadata";
+function attachOperationMetadataHeader(response, logEntry, fallback) {
+  if (!logEntry?.undoToken || !logEntry.id || !logEntry.commandId) return;
+  response.headers.set(
+    "x-om-operation",
+    serializeOperationMetadata({
+      id: logEntry.id,
+      undoToken: logEntry.undoToken,
+      commandId: logEntry.commandId,
+      actionLabel: logEntry.actionLabel ?? null,
+      resourceKind: logEntry.resourceKind ?? fallback.resourceKind,
+      resourceId: logEntry.resourceId ?? fallback.resourceId,
+      executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : (/* @__PURE__ */ new Date()).toISOString()
+    })
+  );
+}
+export {
+  attachOperationMetadataHeader
+};
+//# sourceMappingURL=operationMetadata.js.map

package/dist/modules/devices/lib/operationMetadata.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/devices/lib/operationMetadata.ts"],
+  "sourcesContent": ["import { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\n\ntype OperationLogEntry = {\n  id?: string | null\n  undoToken?: string | null\n  commandId?: string | null\n  actionLabel?: string | null\n  resourceKind?: string | null\n  resourceId?: string | null\n  createdAt?: Date | null\n}\n\n/**\n * Attaches the `x-om-operation` undo header to a response when the command produced an\n * undoable log entry. No-op otherwise.\n */\nexport function attachOperationMetadataHeader(\n  response: Response,\n  logEntry: OperationLogEntry | null | undefined,\n  fallback: { resourceKind: string; resourceId: string },\n): void {\n  if (!logEntry?.undoToken || !logEntry.id || !logEntry.commandId) return\n  response.headers.set(\n    'x-om-operation',\n    serializeOperationMetadata({\n      id: logEntry.id,\n      undoToken: logEntry.undoToken,\n      commandId: logEntry.commandId,\n      actionLabel: logEntry.actionLabel ?? null,\n      resourceKind: logEntry.resourceKind ?? fallback.resourceKind,\n      resourceId: logEntry.resourceId ?? fallback.resourceId,\n      executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : new Date().toISOString(),\n    }),\n  )\n}\n"],
+  "mappings": "AAAA,SAAS,kCAAkC;AAgBpC,SAAS,8BACd,UACA,UACA,UACM;AACN,MAAI,CAAC,UAAU,aAAa,CAAC,SAAS,MAAM,CAAC,SAAS,UAAW;AACjE,WAAS,QAAQ;AAAA,IACf;AAAA,IACA,2BAA2B;AAAA,MACzB,IAAI,SAAS;AAAA,MACb,WAAW,SAAS;AAAA,MACpB,WAAW,SAAS;AAAA,MACpB,aAAa,SAAS,eAAe;AAAA,MACrC,cAAc,SAAS,gBAAgB,SAAS;AAAA,MAChD,YAAY,SAAS,cAAc,SAAS;AAAA,MAC5C,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,IAC7G,CAAC;AAAA,EACH;AACF;",
+  "names": []
+}

package/dist/modules/devices/migrations/Migration20260602120000.js

@@ -0,0 +1,15 @@
+import { Migration } from "@mikro-orm/migrations";
+class Migration20260602120000 extends Migration {
+  async up() {
+    this.addSql(`create table "user_devices" ("id" uuid not null default gen_random_uuid(), "tenant_id" uuid not null, "organization_id" uuid null, "user_id" uuid not null, "device_id" text not null, "platform" text not null, "client_app_version" text null, "os_version" text null, "push_token" text null, "push_provider" text null, "push_token_updated_at" timestamptz null, "last_seen_at" timestamptz not null, "created_at" timestamptz not null, "updated_at" timestamptz not null, "deleted_at" timestamptz null, constraint "user_devices_pkey" primary key ("id"));`);
+    this.addSql(`create index "user_devices_tenant_user_idx" on "user_devices" ("tenant_id", "user_id");`);
+    this.addSql(`create unique index "user_devices_tenant_user_device_active_unique" on "user_devices" ("tenant_id", "user_id", "device_id") where deleted_at is null;`);
+  }
+  async down() {
+    this.addSql(`drop table if exists "user_devices" cascade;`);
+  }
+}
+export {
+  Migration20260602120000
+};
+//# sourceMappingURL=Migration20260602120000.js.map

package/dist/modules/devices/migrations/Migration20260602120000.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/devices/migrations/Migration20260602120000.ts"],
+  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\nexport class Migration20260602120000 extends Migration {\n\n  override async up(): Promise<void> {\n    this.addSql(`create table \"user_devices\" (\"id\" uuid not null default gen_random_uuid(), \"tenant_id\" uuid not null, \"organization_id\" uuid null, \"user_id\" uuid not null, \"device_id\" text not null, \"platform\" text not null, \"client_app_version\" text null, \"os_version\" text null, \"push_token\" text null, \"push_provider\" text null, \"push_token_updated_at\" timestamptz null, \"last_seen_at\" timestamptz not null, \"created_at\" timestamptz not null, \"updated_at\" timestamptz not null, \"deleted_at\" timestamptz null, constraint \"user_devices_pkey\" primary key (\"id\"));`);\n    this.addSql(`create index \"user_devices_tenant_user_idx\" on \"user_devices\" (\"tenant_id\", \"user_id\");`);\n    this.addSql(`create unique index \"user_devices_tenant_user_device_active_unique\" on \"user_devices\" (\"tenant_id\", \"user_id\", \"device_id\") where deleted_at is null;`);\n  }\n\n  override async down(): Promise<void> {\n    this.addSql(`drop table if exists \"user_devices\" cascade;`);\n  }\n\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAEnB,MAAM,gCAAgC,UAAU;AAAA,EAErD,MAAe,KAAoB;AACjC,SAAK,OAAO,qiBAAqiB;AACjjB,SAAK,OAAO,yFAAyF;AACrG,SAAK,OAAO,uJAAuJ;AAAA,EACrK;AAAA,EAEA,MAAe,OAAsB;AACnC,SAAK,OAAO,8CAA8C;AAAA,EAC5D;AAEF;",
+  "names": []
+}