@open-mercato/core 0.7.1-develop.7193.1.910a5b0a1e → 0.7.1-develop.7194.1.ab4fc81f82

package/src/modules/customer_accounts/i18n/en.json

@@ -112,6 +112,7 @@
   "customer_accounts.admin.portalFeatures.groups.orders": "Orders",
   "customer_accounts.admin.portalFeatures.groups.profile": "Profile",
   "customer_accounts.admin.portalFeatures.groups.quotes": "Quotes",
+  "customer_accounts.admin.portalFeatures.groups.tasks": "Tasks",
   "customer_accounts.admin.portalFeatures.groups.users": "Users",
   "customer_accounts.admin.portalFeatures.invoices.view": "View invoices",
   "customer_accounts.admin.portalFeatures.invoices.view.description": "Allows viewing invoices and payment history",
@@ -127,6 +128,10 @@
   "customer_accounts.admin.portalFeatures.quotes.request.description": "Allows requesting new quotes from the company",
   "customer_accounts.admin.portalFeatures.quotes.view": "View quotes",
   "customer_accounts.admin.portalFeatures.quotes.view.description": "Allows viewing received quotes and their details",
+  "customer_accounts.admin.portalFeatures.tasks.complete": "Complete tasks",
+  "customer_accounts.admin.portalFeatures.tasks.complete.description": "Allows submitting and completing assigned workflow tasks",
+  "customer_accounts.admin.portalFeatures.tasks.view": "View tasks",
+  "customer_accounts.admin.portalFeatures.tasks.view.description": "Allows viewing workflow tasks assigned to this customer",
   "customer_accounts.admin.portalFeatures.users.invite": "Invite team members",
   "customer_accounts.admin.portalFeatures.users.invite.description": "Allows sending portal invitations to new team members",
   "customer_accounts.admin.portalFeatures.users.manage": "Manage team members",

package/src/modules/customer_accounts/i18n/es.json

@@ -112,6 +112,7 @@
   "customer_accounts.admin.portalFeatures.groups.orders": "Pedidos",
   "customer_accounts.admin.portalFeatures.groups.profile": "Perfil",
   "customer_accounts.admin.portalFeatures.groups.quotes": "Presupuestos",
+  "customer_accounts.admin.portalFeatures.groups.tasks": "Tareas",
   "customer_accounts.admin.portalFeatures.groups.users": "Usuarios",
   "customer_accounts.admin.portalFeatures.invoices.view": "Ver facturas",
   "customer_accounts.admin.portalFeatures.invoices.view.description": "Permite ver las facturas y el historial de pagos",
@@ -127,6 +128,10 @@
   "customer_accounts.admin.portalFeatures.quotes.request.description": "Permite solicitar nuevos presupuestos a la empresa",
   "customer_accounts.admin.portalFeatures.quotes.view": "Ver presupuestos",
   "customer_accounts.admin.portalFeatures.quotes.view.description": "Permite ver los presupuestos recibidos y sus detalles",
+  "customer_accounts.admin.portalFeatures.tasks.complete": "Completar tareas",
+  "customer_accounts.admin.portalFeatures.tasks.complete.description": "Permite enviar y completar las tareas de flujo de trabajo asignadas",
+  "customer_accounts.admin.portalFeatures.tasks.view": "Ver tareas",
+  "customer_accounts.admin.portalFeatures.tasks.view.description": "Permite ver las tareas de flujo de trabajo asignadas a este cliente",
   "customer_accounts.admin.portalFeatures.users.invite": "Invitar a miembros del equipo",
   "customer_accounts.admin.portalFeatures.users.invite.description": "Permite enviar invitaciones al portal a nuevos miembros del equipo",
   "customer_accounts.admin.portalFeatures.users.manage": "Gestionar miembros del equipo",

package/src/modules/customer_accounts/i18n/ko.json

@@ -112,6 +112,7 @@
   "customer_accounts.admin.portalFeatures.groups.orders": "주문",
   "customer_accounts.admin.portalFeatures.groups.profile": "프로필",
   "customer_accounts.admin.portalFeatures.groups.quotes": "견적",
+  "customer_accounts.admin.portalFeatures.groups.tasks": "Tasks",
   "customer_accounts.admin.portalFeatures.groups.users": "사용자",
   "customer_accounts.admin.portalFeatures.invoices.view": "인보이스 보기",
   "customer_accounts.admin.portalFeatures.invoices.view.description": "청구서 및 지불 내역을 볼 수 있습니다.",
@@ -127,6 +128,10 @@
   "customer_accounts.admin.portalFeatures.quotes.request.description": "회사에 새로운 견적을 요청할 수 있습니다.",
   "customer_accounts.admin.portalFeatures.quotes.view": "견적 보기",
   "customer_accounts.admin.portalFeatures.quotes.view.description": "받은 견적 및 세부정보를 볼 수 있습니다.",
+  "customer_accounts.admin.portalFeatures.tasks.complete": "Complete tasks",
+  "customer_accounts.admin.portalFeatures.tasks.complete.description": "Allows submitting and completing assigned workflow tasks",
+  "customer_accounts.admin.portalFeatures.tasks.view": "View tasks",
+  "customer_accounts.admin.portalFeatures.tasks.view.description": "Allows viewing workflow tasks assigned to this customer",
   "customer_accounts.admin.portalFeatures.users.invite": "팀원 초대",
   "customer_accounts.admin.portalFeatures.users.invite.description": "새로운 팀 구성원에게 포털 초대장을 보낼 수 있습니다.",
   "customer_accounts.admin.portalFeatures.users.manage": "팀원 관리",

package/src/modules/customer_accounts/i18n/pl.json

@@ -112,6 +112,7 @@
   "customer_accounts.admin.portalFeatures.groups.orders": "Zamówienia",
   "customer_accounts.admin.portalFeatures.groups.profile": "Profil",
   "customer_accounts.admin.portalFeatures.groups.quotes": "Oferty",
+  "customer_accounts.admin.portalFeatures.groups.tasks": "Zadania",
   "customer_accounts.admin.portalFeatures.groups.users": "Użytkownicy",
   "customer_accounts.admin.portalFeatures.invoices.view": "Wyświetlanie faktur",
   "customer_accounts.admin.portalFeatures.invoices.view.description": "Umożliwia przeglądanie faktur i historii płatności",
@@ -127,6 +128,10 @@
   "customer_accounts.admin.portalFeatures.quotes.request.description": "Umożliwia zamawianie nowych ofert od firmy",
   "customer_accounts.admin.portalFeatures.quotes.view": "Wyświetlanie ofert",
   "customer_accounts.admin.portalFeatures.quotes.view.description": "Umożliwia przeglądanie otrzymanych ofert i ich szczegółów",
+  "customer_accounts.admin.portalFeatures.tasks.complete": "Kończenie zadań",
+  "customer_accounts.admin.portalFeatures.tasks.complete.description": "Umożliwia przesyłanie i kończenie przypisanych zadań przepływu",
+  "customer_accounts.admin.portalFeatures.tasks.view": "Podgląd zadań",
+  "customer_accounts.admin.portalFeatures.tasks.view.description": "Umożliwia przeglądanie zadań przepływu przypisanych do tego klienta",
   "customer_accounts.admin.portalFeatures.users.invite": "Zapraszanie członków zespołu",
   "customer_accounts.admin.portalFeatures.users.invite.description": "Umożliwia wysyłanie zaproszeń do portalu nowym członkom zespołu",
   "customer_accounts.admin.portalFeatures.users.manage": "Zarządzanie członkami zespołu",

package/src/modules/customer_accounts/lib/customerRoleAclSync.ts

@@ -0,0 +1,92 @@
+import type { EntityManager } from '@mikro-orm/postgresql'
+import type { Module } from '@open-mercato/shared/modules/registry'
+import { hasFeature } from '@open-mercato/shared/security/features'
+import { z } from 'zod'
+import {
+  CustomerRole,
+  CustomerRoleAcl,
+} from '@open-mercato/core/modules/customer_accounts/data/entities'
+
+const declaredCustomerRoleFeaturesSchema = z.record(
+  z.string().trim().min(1),
+  z.array(z.string().trim().min(1)),
+)
+
+export type CustomerRoleAclSyncEntry = {
+  roleSlug: string
+  roleName: string
+  addedFeatures: string[]
+}
+
+/**
+ * Collects `defaultCustomerRoleFeatures` from every enabled module, keyed by
+ * customer role slug. Third-party modules can declare anything, so the shape is
+ * validated rather than trusted; a malformed declaration is skipped instead of
+ * poisoning the whole sync.
+ */
+export function collectDefaultCustomerRoleFeatures(modules: Module[]): Record<string, string[]> {
+  const featuresByRole: Record<string, string[]> = {}
+  for (const mod of modules) {
+    const declared = mod.setup?.defaultCustomerRoleFeatures
+    if (!declared) continue
+    const parsed = declaredCustomerRoleFeaturesSchema.safeParse(declared)
+    if (!parsed.success) continue
+    for (const [roleSlug, features] of Object.entries(parsed.data)) {
+      if (!features.length) continue
+      const bucket = featuresByRole[roleSlug] ?? []
+      bucket.push(...features)
+      featuresByRole[roleSlug] = bucket
+    }
+  }
+  for (const roleSlug of Object.keys(featuresByRole)) {
+    featuresByRole[roleSlug] = Array.from(new Set(featuresByRole[roleSlug]))
+  }
+  return featuresByRole
+}
+
+/**
+ * Merges the modules' declared `defaultCustomerRoleFeatures` into the matching
+ * `CustomerRoleAcl` rows of a single tenant.
+ *
+ * Contract, relied on by both tenant setup and `mercato customer_accounts
+ * sync-customer-role-acls`:
+ * - additive only — a feature an operator added by hand is never removed;
+ * - never creates a `CustomerRole` or a `CustomerRoleAcl`, so a slug with no
+ *   matching seeded role is a no-op;
+ * - wildcard-aware — a role already holding `portal.*` (or `*`) does not gain a
+ *   redundant concrete grant;
+ * - idempotent — a second run finds nothing left to add and writes nothing.
+ */
+export async function syncDefaultCustomerRoleAcls(
+  em: EntityManager,
+  tenantId: string,
+  modules: Module[],
+): Promise<CustomerRoleAclSyncEntry[]> {
+  const featuresByRole = collectDefaultCustomerRoleFeatures(modules)
+  const roleSlugs = Object.keys(featuresByRole)
+  if (!roleSlugs.length) return []
+
+  const applied: CustomerRoleAclSyncEntry[] = []
+  for (const roleSlug of roleSlugs) {
+    const role = await em.findOne(CustomerRole, { tenantId, slug: roleSlug, deletedAt: null })
+    if (!role) continue
+    const acl = await em.findOne(CustomerRoleAcl, { role, tenantId })
+    if (!acl) continue
+
+    const currentFeatures = Array.isArray(acl.featuresJson) ? acl.featuresJson : []
+    const addedFeatures: string[] = []
+    for (const feature of featuresByRole[roleSlug]) {
+      if (hasFeature(currentFeatures, feature)) continue
+      if (hasFeature(addedFeatures, feature)) continue
+      addedFeatures.push(feature)
+    }
+    if (!addedFeatures.length) continue
+
+    acl.featuresJson = [...currentFeatures, ...addedFeatures]
+    em.persist(acl)
+    applied.push({ roleSlug, roleName: role.name, addedFeatures })
+  }
+
+  if (applied.length) await em.flush()
+  return applied
+}

package/src/modules/customer_accounts/setup.ts

@@ -1,4 +1,4 @@
-import type { ModuleSetupConfig, DefaultCustomerRoleFeatures } from '@open-mercato/shared/modules/setup'
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
 import type { EntityManager } from '@mikro-orm/postgresql'
 import { hash } from 'bcryptjs'
 import { ensureDefaultCustomerRoleAcls } from '@open-mercato/core/modules/customer_accounts/lib/customerRoleAcls'
@@ -10,6 +10,7 @@ import {
   CustomerUser,
   CustomerUserRole,
 } from '@open-mercato/core/modules/customer_accounts/data/entities'
+import { syncDefaultCustomerRoleAcls } from './lib/customerRoleAclSync'
 
 interface SeedScope {
   tenantId: string
@@ -86,6 +87,15 @@ async function registerDomainSchedules(
   })
 }
 
+/**
+ * The customer roles this module seeds, and therefore the ONLY slugs another
+ * module's `defaultCustomerRoleFeatures` can target: the merge below skips a
+ * slug with no matching role (`if (!role) continue`), so a typo is a silent
+ * no-op rather than an error. Exported so a contributing module can assert its
+ * keys against the real list instead of hoping.
+ */
+export const DEFAULT_CUSTOMER_ROLE_SLUGS = ['portal_admin', 'buyer', 'viewer'] as const
+
 const DEFAULT_ROLES = [
   {
     name: 'Portal Admin',
@@ -191,11 +201,13 @@ export const setup: ModuleSetupConfig = {
 
   async seedDefaults({ em, tenantId, organizationId, container }) {
     await seedDefaultRoles(em, { tenantId, organizationId })
-    // Merge defaultCustomerRoleFeatures from all enabled modules
+    // Merge defaultCustomerRoleFeatures from all enabled modules. Existing
+    // tenants replay the same merge via `mercato customer_accounts
+    // sync-customer-role-acls`.
     try {
       const { getModules } = await import('@open-mercato/shared/lib/modules/registry')
       const allModules = getModules()
-      await ensureDefaultCustomerRoleAcls(em, tenantId, allModules)
+      await syncDefaultCustomerRoleAcls(em, tenantId, allModules)
     } catch {
       // Modules may not be registered yet during initial setup
     }

package/src/modules/customers/commands/deals.ts

@@ -1,3 +1,4 @@
+import { z } from 'zod'
 import { registerCommand } from '@open-mercato/shared/lib/commands'
 import type { CommandHandler } from '@open-mercato/shared/lib/commands'
 import {
@@ -56,6 +57,8 @@ import { createLogger } from '@open-mercato/shared/lib/logger'
 
 const logger = createLogger('customers')
 
+const dealCommandOutputSchema = z.object({ dealId: z.string().uuid() })
+
 const DEAL_ENTITY_ID = 'customers:customer_deal'
 const dealCrudIndexer: CrudIndexerConfig<CustomerDeal> = {
   entityType: E.customers.customer_deal,
@@ -537,6 +540,7 @@ async function syncDealCompanies(
 
 const createDealCommand: CommandHandler<DealCreateInput, { dealId: string }> = {
   id: 'customers.deals.create',
+  outputSchema: dealCommandOutputSchema,
   async execute(rawInput, ctx) {
     const { parsed, custom } = parseWithCustomFields(dealCreateSchema, rawInput)
     ensureTenantScope(ctx, parsed.tenantId)
@@ -740,6 +744,7 @@ const createDealCommand: CommandHandler<DealCreateInput, { dealId: string }> = {
 
 const updateDealCommand: CommandHandler<DealUpdateInput, { dealId: string }> = {
   id: 'customers.deals.update',
+  outputSchema: dealCommandOutputSchema,
   async prepare(rawInput, ctx) {
     const { parsed } = parseWithCustomFields(dealUpdateSchema, rawInput)
     const em = (ctx.container.resolve('em') as EntityManager).fork()

package/src/modules/customers/components/detail/ChangelogEntryRow.tsx

@@ -7,7 +7,7 @@ import { Settings2, SquarePen, Plus, Trash2, UserRoundPlus, ArrowRight } from 'l
 import { useT } from '@open-mercato/shared/lib/i18n/context'
 
 type ChangelogActionType = 'create' | 'edit' | 'delete' | 'assign' | 'system'
-type ChangelogSource = 'ui' | 'api' | 'system'
+type ChangelogSource = 'ui' | 'api' | 'system' | 'agent'
 
 type ChangelogEntryRowProps = {
   entry: {
@@ -74,7 +74,9 @@ export function ChangelogEntryRow({ entry }: ChangelogEntryRowProps) {
     ? t('customers.changelog.source.api', 'API')
     : entry.source === 'system'
       ? t('customers.changelog.source.system', 'System')
-      : t('customers.changelog.source.ui', 'UI')
+      : entry.source === 'agent'
+        ? t('customers.changelog.source.agent', 'Agent')
+        : t('customers.changelog.source.ui', 'UI')
 
   return (
     <div className="grid grid-cols-[92px_190px_120px_1fr_80px] gap-3 px-5 py-3 text-sm">

package/src/modules/customers/components/detail/utils.ts

@@ -3,6 +3,7 @@
 import type { DictionarySelectLabels } from '@open-mercato/core/modules/dictionaries/components/DictionaryEntrySelect'
 import type { CustomerDictionaryKind } from '../../lib/dictionaries'
 import { CUSTOMER_INTERACTION_TASK_SOURCE, CUSTOMER_INTERACTION_TASK_TYPE } from '../../lib/interactionCompatibility'
+import { WORKFLOW_TASK_TODO_SOURCE, workflowTaskHref } from '../../lib/workflowTaskLink'
 
 
 /**
@@ -47,6 +48,7 @@ export function resolveTodoHref(source: string, todoId: string | null | undefine
   if (module === 'example') {
     return `/backend/todos/${encodeURIComponent(todoId)}/edit`
   }
+  if (source === WORKFLOW_TASK_TODO_SOURCE) return workflowTaskHref(todoId)
   return `/backend/${module}/todos/${encodeURIComponent(todoId)}/edit`
 }
 

package/src/modules/customers/events.ts

@@ -1,10 +1,28 @@
-import { createModuleEvents } from '@open-mercato/shared/modules/events'
+import { createModuleEvents, type EventPayloadSchema } from '@open-mercato/shared/modules/events'
 
 /**
  * Customers Module Events
  *
  * Declares all events that can be emitted by the customers module.
  */
+
+/**
+ * Payload emitted by `commands/deals.ts` for deal closure lifecycle events
+ * (`customers.deal.won` / `customers.deal.lost`). Fields mirror the emit call
+ * exactly; nullable fields are marked optional.
+ */
+const dealClosurePayloadSchema: EventPayloadSchema = {
+  fields: [
+    { path: 'id', type: 'text' },
+    { path: 'tenantId', type: 'text' },
+    { path: 'organizationId', type: 'text' },
+    { path: 'ownerUserId', type: 'text', optional: true },
+    { path: 'title', type: 'text' },
+    { path: 'valueAmount', type: 'text', optional: true },
+    { path: 'valueCurrency', type: 'text', optional: true },
+  ],
+}
+
 const events = [
   // People
   { id: 'customers.person.created', label: 'Customer (Person) Created', entity: 'person', category: 'crud' },
@@ -20,8 +38,8 @@ const events = [
   { id: 'customers.deal.created', label: 'Deal Created', entity: 'deal', category: 'crud' },
   { id: 'customers.deal.updated', label: 'Deal Updated', entity: 'deal', category: 'crud' },
   { id: 'customers.deal.deleted', label: 'Deal Deleted', entity: 'deal', category: 'crud' },
-  { id: 'customers.deal.won', label: 'Deal Won', entity: 'deal', category: 'lifecycle' },
-  { id: 'customers.deal.lost', label: 'Deal Lost', entity: 'deal', category: 'lifecycle' },
+  { id: 'customers.deal.won', label: 'Deal Won', entity: 'deal', category: 'lifecycle', payloadSchema: dealClosurePayloadSchema },
+  { id: 'customers.deal.lost', label: 'Deal Lost', entity: 'deal', category: 'lifecycle', payloadSchema: dealClosurePayloadSchema },
 
   // Comments
   { id: 'customers.comment.created', label: 'Comment Created', entity: 'comment', category: 'crud' },

package/src/modules/customers/i18n/de.json

@@ -458,6 +458,7 @@
   "customers.changelog.previous": "Zurück",
   "customers.changelog.showing": "Showing {{shown}} of {{total}} entries",
   "customers.changelog.showingWithPeriod": "Showing {{shown}} of {{total}} entries · last {{days}} days",
+  "customers.changelog.source.agent": "Agent",
   "customers.changelog.source.api": "API",
   "customers.changelog.source.system": "System",
   "customers.changelog.source.ui": "UI",
@@ -2874,5 +2875,8 @@
   "customers.workPlan.customerTodos.table.state.empty": "Noch keine Kundenaufgaben.",
   "customers.workPlan.customerTodos.table.state.noMatches": "Keine Aufgaben entsprechen den Filtern.",
   "customers.workPlan.customerTodos.table.title": "Kundenbezogene Aufgaben",
+  "customers.workflows.commands.companies.update": "Unternehmen aktualisieren",
+  "customers.workflows.commands.deals.update": "Deal aktualisieren",
+  "customers.workflows.commands.people.update": "Person aktualisieren",
   "notifications.categories.customers": "Kunden"
 }

package/src/modules/customers/i18n/en.json

@@ -458,6 +458,7 @@
   "customers.changelog.previous": "Previous",
   "customers.changelog.showing": "Showing {{shown}} of {{total}} entries",
   "customers.changelog.showingWithPeriod": "Showing {{shown}} of {{total}} entries · last {{days}} days",
+  "customers.changelog.source.agent": "Agent",
   "customers.changelog.source.api": "API",
   "customers.changelog.source.system": "System",
   "customers.changelog.source.ui": "UI",
@@ -2874,5 +2875,8 @@
   "customers.workPlan.customerTodos.table.state.empty": "No customer tasks yet.",
   "customers.workPlan.customerTodos.table.state.noMatches": "No tasks match your filters.",
   "customers.workPlan.customerTodos.table.title": "Customer related tasks",
+  "customers.workflows.commands.companies.update": "Update company",
+  "customers.workflows.commands.deals.update": "Update deal",
+  "customers.workflows.commands.people.update": "Update person",
   "notifications.categories.customers": "Customers"
 }

package/src/modules/customers/i18n/es.json

@@ -458,6 +458,7 @@
   "customers.changelog.previous": "Anterior",
   "customers.changelog.showing": "Showing {{shown}} of {{total}} entries",
   "customers.changelog.showingWithPeriod": "Showing {{shown}} of {{total}} entries · last {{days}} days",
+  "customers.changelog.source.agent": "Agente",
   "customers.changelog.source.api": "API",
   "customers.changelog.source.system": "System",
   "customers.changelog.source.ui": "UI",
@@ -2874,5 +2875,8 @@
   "customers.workPlan.customerTodos.table.state.empty": "Aún no hay tareas de clientes.",
   "customers.workPlan.customerTodos.table.state.noMatches": "Ninguna tarea coincide con tus filtros.",
   "customers.workPlan.customerTodos.table.title": "Tareas relacionadas con clientes",
+  "customers.workflows.commands.companies.update": "Actualizar empresa",
+  "customers.workflows.commands.deals.update": "Actualizar oportunidad",
+  "customers.workflows.commands.people.update": "Actualizar persona",
   "notifications.categories.customers": "Clientes"
 }

package/src/modules/customers/i18n/ko.json

@@ -458,6 +458,7 @@
   "customers.changelog.previous": "이전",
   "customers.changelog.showing": "전체 {{total}}건 중 {{shown}}건 표시",
   "customers.changelog.showingWithPeriod": "전체 {{total}}건 중 {{shown}}건 표시 · 최근 {{days}}일",
+  "customers.changelog.source.agent": "Agent",
   "customers.changelog.source.api": "API",
   "customers.changelog.source.system": "시스템",
   "customers.changelog.source.ui": "UI",
@@ -2874,5 +2875,8 @@
   "customers.workPlan.customerTodos.table.state.empty": "고객 관련 작업이 아직 없습니다.",
   "customers.workPlan.customerTodos.table.state.noMatches": "필터와 일치하는 작업이 없습니다.",
   "customers.workPlan.customerTodos.table.title": "고객 관련 작업",
+  "customers.workflows.commands.companies.update": "Update company",
+  "customers.workflows.commands.deals.update": "Update deal",
+  "customers.workflows.commands.people.update": "Update person",
   "notifications.categories.customers": "고객"
 }

package/src/modules/customers/i18n/pl.json

@@ -458,6 +458,7 @@
   "customers.changelog.previous": "Poprzednie",
   "customers.changelog.showing": "Pokazano {{shown}} z {{total}} wpisów",
   "customers.changelog.showingWithPeriod": "Pokazano {{shown}} z {{total}} wpisów · ostatnie {{days}} dni",
+  "customers.changelog.source.agent": "Agent",
   "customers.changelog.source.api": "API",
   "customers.changelog.source.system": "System",
   "customers.changelog.source.ui": "UI",
@@ -2874,5 +2875,8 @@
   "customers.workPlan.customerTodos.table.state.empty": "Brak zadań klientów.",
   "customers.workPlan.customerTodos.table.state.noMatches": "Brak zadań spełniających filtry.",
   "customers.workPlan.customerTodos.table.title": "Zadania związane z klientami",
+  "customers.workflows.commands.companies.update": "Aktualizuj firmę",
+  "customers.workflows.commands.deals.update": "Aktualizuj szansę sprzedaży",
+  "customers.workflows.commands.people.update": "Aktualizuj osobę",
   "notifications.categories.customers": "Klienci"
 }

package/src/modules/customers/lib/link-workflow-task-handler.ts

@@ -0,0 +1,136 @@
+import type { EntityManager } from '@mikro-orm/postgresql'
+import { CustomerEntity, CustomerTodoLink } from '../data/entities'
+import { WORKFLOW_TASK_TODO_SOURCE } from './workflowTaskLink'
+
+export { WORKFLOW_TASK_TODO_SOURCE }
+
+/**
+ * Surface a customer-bound workflow task on the customer's own Tasks section
+ * (spec §2.3: *"workflow tasks bound to a customer surface through the same
+ * link mechanism (`todoSource: 'workflows:user_task'`)"*).
+ *
+ * **Direction matters.** The customers module owns `CustomerTodoLink`, so
+ * customers is the one that writes it — workflows only announces that a task
+ * exists and which records it is about. Workflows never imports a customers
+ * entity, no cross-module ORM relationship is created, and a deployment
+ * without the customers module simply has no subscriber (root AGENTS.md →
+ * Architecture; core AGENTS.md → Cross-Module Coupling).
+ *
+ * The link row is the cheap half of §2.3: it uses the existing entity and its
+ * existing unique key `(entity, todoId, todoSource)`, so no new entity and no
+ * migration are needed — which is exactly why the C3 `Task` entity stays
+ * deferred.
+ */
+
+/** Postgres unique violation — a redelivered event must be a no-op, not a failure. */
+const POSTGRES_UNIQUE_VIOLATION = '23505'
+
+/**
+ * Binding types that address a `CustomerEntity`.
+ *
+ * Deals are deliberately absent: `CustomerTodoLink.entity` is a foreign key to
+ * `customer_entities`, and a deal lives in `customer_deals`. A deal-bound task
+ * surfaces through the record-page widget instead of through this link.
+ */
+const CUSTOMER_ENTITY_BINDING_TYPES = new Set([
+  'customers:person',
+  'customers:company',
+  'customers:customer_entity',
+])
+
+/**
+ * `customers.person` and `customers:person` are the same record type — entity
+ * ids use `:`, record-detail injection contexts use `.`. Normalized locally
+ * rather than imported from workflows so this module stays independent of it
+ * (a subscriber for an absent module's event simply never fires).
+ */
+function normalizeBindingType(entityType: string): string {
+  return entityType.trim().toLowerCase().replace(/\./g, ':')
+}
+
+export type WorkflowTaskAssignedBinding = {
+  entityType?: unknown
+  entityId?: unknown
+}
+
+export type WorkflowTaskAssignedPayload = {
+  taskId?: unknown
+  tenantId?: unknown
+  organizationId?: unknown
+  entityBindings?: unknown
+}
+
+type SubscriberContext = {
+  resolve: <T = unknown>(name: string) => T
+}
+
+/**
+ * Ids of the customer records a task is about, de-duplicated and narrowed to
+ * the binding types that actually address a `CustomerEntity`.
+ *
+ * Pure — the whole "which bindings count" decision is assertable without a
+ * database.
+ */
+export function collectCustomerEntityIds(bindings: unknown): string[] {
+  if (!Array.isArray(bindings)) return []
+  const ids = new Set<string>()
+  for (const binding of bindings) {
+    if (!binding || typeof binding !== 'object' || Array.isArray(binding)) continue
+    const { entityType, entityId } = binding as WorkflowTaskAssignedBinding
+    if (typeof entityType !== 'string' || typeof entityId !== 'string' || !entityId.length) continue
+    if (!CUSTOMER_ENTITY_BINDING_TYPES.has(normalizeBindingType(entityType))) continue
+    ids.add(entityId)
+  }
+  return [...ids]
+}
+
+export default async function handler(
+  payload: WorkflowTaskAssignedPayload,
+  ctx: SubscriberContext,
+): Promise<void> {
+  const taskId = payload?.taskId
+  const tenantId = payload?.tenantId
+  const organizationId = payload?.organizationId
+  if (typeof taskId !== 'string' || !taskId.length) return
+  // Fail closed: an unscoped write could attach a task to another tenant's
+  // customer.
+  if (typeof tenantId !== 'string' || !tenantId.length) return
+  if (typeof organizationId !== 'string' || !organizationId.length) return
+
+  const entityIds = collectCustomerEntityIds(payload.entityBindings)
+  if (!entityIds.length) return
+
+  const em = ctx.resolve<EntityManager>('em')
+
+  for (const entityId of entityIds) {
+    // The binding id is authored free text resolved from run context, so it is
+    // only assumed to be a customer once the scoped lookup says so.
+    const entity = await em.findOne(CustomerEntity, { id: entityId, tenantId, organizationId })
+    if (!entity) continue
+
+    const existing = await em.findOne(CustomerTodoLink, {
+      entity,
+      todoId: taskId,
+      todoSource: WORKFLOW_TASK_TODO_SOURCE,
+    })
+    if (existing) continue
+
+    const link = em.create(CustomerTodoLink, {
+      entity,
+      todoId: taskId,
+      todoSource: WORKFLOW_TASK_TODO_SOURCE,
+      tenantId,
+      organizationId,
+    })
+
+    try {
+      await em.persist(link).flush()
+    } catch (error) {
+      // At-least-once delivery: losing the race against a concurrent delivery
+      // is the unique key doing its job, not a failure.
+      const code = (error as { code?: unknown })?.code
+      if (code === POSTGRES_UNIQUE_VIOLATION) continue
+      throw error
+    }
+  }
+}

package/src/modules/customers/lib/todoCompatibility.ts

@@ -98,7 +98,10 @@ function resolveLegacyTodoSource(source: string | null | undefined): string {
 }
 
 function extractTodoTitle(record: Record<string, unknown>): string | null {
-  const candidates = ['title', 'subject', 'name', 'summary', 'text', 'description']
+  // `task_name` / `taskName` carry a workflow user task's name; the query engine
+  // returns the raw column on the ORM path and the camelCase property on the
+  // indexed one, so both spellings are read.
+  const candidates = ['title', 'subject', 'name', 'task_name', 'taskName', 'summary', 'text', 'description']
   for (const key of candidates) {
     const value = record[key]
     if (typeof value === 'string' && value.trim().length > 0) {

package/src/modules/customers/lib/workflowTaskLink.ts

@@ -0,0 +1,23 @@
+/**
+ * The `CustomerTodoLink.todoSource` a workflow-created user task is stored under,
+ * and the backend page that task actually opens on.
+ *
+ * Lives in its own module because both a server subscriber
+ * (`link-workflow-task-handler`) and a `"use client"` renderer
+ * (`components/detail/utils`) need the value, and the subscriber pulls in ORM
+ * entities that must not reach the browser bundle.
+ *
+ * The value is an ENTITY id, not a module name: `resolveLegacyTodoDetails` hands
+ * `todoSource` to the query engine to load each linked task's title, and a bare
+ * module name resolves to no entity at all.
+ */
+export const WORKFLOW_TASK_TODO_SOURCE = 'workflows:user_task'
+
+/**
+ * A workflow user task is completed on its own task screen — the one carrying
+ * the form the USER_TASK step declared — not through the `/todos/:id/edit`
+ * convention the other todo sources follow.
+ */
+export function workflowTaskHref(taskId: string): string {
+  return `/backend/workflows/tasks/${encodeURIComponent(taskId)}`
+}

package/src/modules/customers/subscribers/link-workflow-task.ts

@@ -0,0 +1,19 @@
+/**
+ * Persistent subscriber for `workflows.task.assigned`.
+ *
+ * Writes a `CustomerTodoLink` with `todoSource: 'workflows:user_task'` for every customer
+ * record a freshly created workflow task is bound to, so the task shows up on
+ * that customer's Tasks section (spec §2.3 phase-in).
+ *
+ * Logic lives in `../lib/link-workflow-task-handler.ts`, mirroring the
+ * link-channel-message subscribers.
+ */
+import linkWorkflowTaskHandler from '../lib/link-workflow-task-handler'
+
+export const metadata = {
+  event: 'workflows.task.assigned',
+  persistent: true,
+  id: 'customers:link-workflow-task',
+}
+
+export default linkWorkflowTaskHandler