@open-mercato/shared 0.4.9-develop-fefbbe0979 → 0.4.9-develop-db9ecc46fc

package/dist/lib/middleware/page-executor.js

@@ -0,0 +1,42 @@
+import { CONTINUE_PAGE_MIDDLEWARE, matchPageMiddlewareTarget } from "@open-mercato/shared/modules/middleware/page";
+const DEFAULT_PRIORITY = 100;
+function shouldRunMiddleware(middleware, mode, pathname) {
+  if (middleware.mode && middleware.mode !== mode) return false;
+  return matchPageMiddlewareTarget(pathname, middleware.target);
+}
+function compareMiddleware(a, b) {
+  const priorityDiff = (a.priority ?? DEFAULT_PRIORITY) - (b.priority ?? DEFAULT_PRIORITY);
+  if (priorityDiff !== 0) return priorityDiff;
+  return a.id.localeCompare(b.id);
+}
+function flattenAndSortMiddleware(entries, mode, pathname) {
+  return entries.flatMap((entry) => entry.middleware).filter((middleware) => shouldRunMiddleware(middleware, mode, pathname)).sort(compareMiddleware);
+}
+async function executePageMiddleware(args) {
+  const { entries, context, onError } = args;
+  const matchedMiddleware = flattenAndSortMiddleware(entries, context.mode, context.pathname);
+  for (const middleware of matchedMiddleware) {
+    try {
+      const result = await middleware.run(context);
+      if (result.action === "redirect") return result;
+    } catch (error) {
+      if (onError) {
+        onError(error, { id: middleware.id, priority: middleware.priority });
+      } else {
+        console.error("[middleware:page] execution failed", { id: middleware.id, error });
+      }
+      throw error;
+    }
+  }
+  return CONTINUE_PAGE_MIDDLEWARE;
+}
+async function resolvePageMiddlewareRedirect(args) {
+  const result = await executePageMiddleware(args);
+  if (result.action !== "redirect") return null;
+  return result.location;
+}
+export {
+  executePageMiddleware,
+  resolvePageMiddlewareRedirect
+};
+//# sourceMappingURL=page-executor.js.map

package/dist/lib/middleware/page-executor.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/lib/middleware/page-executor.ts"],
+  "sourcesContent": ["import type {\n  PageMiddlewareContext,\n  PageMiddlewareMode,\n  PageMiddlewareRegistryEntry,\n  PageMiddlewareResult,\n  PageRouteMiddleware,\n} from '@open-mercato/shared/modules/middleware/page'\nimport { CONTINUE_PAGE_MIDDLEWARE, matchPageMiddlewareTarget } from '@open-mercato/shared/modules/middleware/page'\n\ntype ExecutePageMiddlewareArgs = {\n  entries: PageMiddlewareRegistryEntry[]\n  context: PageMiddlewareContext\n  onError?: (error: unknown, middleware: Pick<PageRouteMiddleware, 'id' | 'priority'>) => void\n}\n\nconst DEFAULT_PRIORITY = 100\n\nfunction shouldRunMiddleware(middleware: PageRouteMiddleware, mode: PageMiddlewareMode, pathname: string): boolean {\n  if (middleware.mode && middleware.mode !== mode) return false\n  return matchPageMiddlewareTarget(pathname, middleware.target)\n}\n\nfunction compareMiddleware(a: PageRouteMiddleware, b: PageRouteMiddleware): number {\n  const priorityDiff = (a.priority ?? DEFAULT_PRIORITY) - (b.priority ?? DEFAULT_PRIORITY)\n  if (priorityDiff !== 0) return priorityDiff\n  return a.id.localeCompare(b.id)\n}\n\nfunction flattenAndSortMiddleware(\n  entries: PageMiddlewareRegistryEntry[],\n  mode: PageMiddlewareMode,\n  pathname: string\n): PageRouteMiddleware[] {\n  return entries\n    .flatMap((entry) => entry.middleware)\n    .filter((middleware) => shouldRunMiddleware(middleware, mode, pathname))\n    .sort(compareMiddleware)\n}\n\nexport async function executePageMiddleware(args: ExecutePageMiddlewareArgs): Promise<PageMiddlewareResult> {\n  const { entries, context, onError } = args\n  const matchedMiddleware = flattenAndSortMiddleware(entries, context.mode, context.pathname)\n  for (const middleware of matchedMiddleware) {\n    try {\n      const result = await middleware.run(context)\n      if (result.action === 'redirect') return result\n    } catch (error) {\n      if (onError) {\n        onError(error, { id: middleware.id, priority: middleware.priority })\n      } else {\n        console.error('[middleware:page] execution failed', { id: middleware.id, error })\n      }\n      throw error\n    }\n  }\n  return CONTINUE_PAGE_MIDDLEWARE\n}\n\nexport async function resolvePageMiddlewareRedirect(args: ExecutePageMiddlewareArgs): Promise<string | null> {\n  const result = await executePageMiddleware(args)\n  if (result.action !== 'redirect') return null\n  return result.location\n}\n"],
+  "mappings": "AAOA,SAAS,0BAA0B,iCAAiC;AAQpE,MAAM,mBAAmB;AAEzB,SAAS,oBAAoB,YAAiC,MAA0B,UAA2B;AACjH,MAAI,WAAW,QAAQ,WAAW,SAAS,KAAM,QAAO;AACxD,SAAO,0BAA0B,UAAU,WAAW,MAAM;AAC9D;AAEA,SAAS,kBAAkB,GAAwB,GAAgC;AACjF,QAAM,gBAAgB,EAAE,YAAY,qBAAqB,EAAE,YAAY;AACvE,MAAI,iBAAiB,EAAG,QAAO;AAC/B,SAAO,EAAE,GAAG,cAAc,EAAE,EAAE;AAChC;AAEA,SAAS,yBACP,SACA,MACA,UACuB;AACvB,SAAO,QACJ,QAAQ,CAAC,UAAU,MAAM,UAAU,EACnC,OAAO,CAAC,eAAe,oBAAoB,YAAY,MAAM,QAAQ,CAAC,EACtE,KAAK,iBAAiB;AAC3B;AAEA,eAAsB,sBAAsB,MAAgE;AAC1G,QAAM,EAAE,SAAS,SAAS,QAAQ,IAAI;AACtC,QAAM,oBAAoB,yBAAyB,SAAS,QAAQ,MAAM,QAAQ,QAAQ;AAC1F,aAAW,cAAc,mBAAmB;AAC1C,QAAI;AACF,YAAM,SAAS,MAAM,WAAW,IAAI,OAAO;AAC3C,UAAI,OAAO,WAAW,WAAY,QAAO;AAAA,IAC3C,SAAS,OAAO;AACd,UAAI,SAAS;AACX,gBAAQ,OAAO,EAAE,IAAI,WAAW,IAAI,UAAU,WAAW,SAAS,CAAC;AAAA,MACrE,OAAO;AACL,gBAAQ,MAAM,sCAAsC,EAAE,IAAI,WAAW,IAAI,MAAM,CAAC;AAAA,MAClF;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,8BAA8B,MAAyD;AAC3G,QAAM,SAAS,MAAM,sBAAsB,IAAI;AAC/C,MAAI,OAAO,WAAW,WAAY,QAAO;AACzC,SAAO,OAAO;AAChB;",
+  "names": []
+}

package/dist/lib/version.js

@@ -1,4 +1,4 @@
-const APP_VERSION = "0.4.9-develop-fefbbe0979";
+const APP_VERSION = "0.4.9-develop-db9ecc46fc";
 const appVersion = APP_VERSION;
 export {
   APP_VERSION,

package/dist/lib/version.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/lib/version.ts"],
-  "sourcesContent": ["// Build-time generated version\nexport const APP_VERSION = '0.4.9-develop-fefbbe0979'\nexport const appVersion = APP_VERSION\n"],
+  "sourcesContent": ["// Build-time generated version\nexport const APP_VERSION = '0.4.9-develop-db9ecc46fc'\nexport const appVersion = APP_VERSION\n"],
   "mappings": "AACO,MAAM,cAAc;AACpB,MAAM,aAAa;",
   "names": []
 }

package/dist/modules/generators/index.js

@@ -0,0 +1 @@
+//# sourceMappingURL=index.js.map

package/dist/modules/generators/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/modules/generators/types.js

@@ -0,0 +1 @@
+//# sourceMappingURL=types.js.map

package/dist/modules/generators/types.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/modules/middleware/page.js

@@ -0,0 +1,15 @@
+function matchPageMiddlewareTarget(pathname, target) {
+  if (target instanceof RegExp) {
+    return target.test(pathname);
+  }
+  if (target.endsWith("*")) {
+    return pathname.startsWith(target.slice(0, -1));
+  }
+  return pathname === target;
+}
+const CONTINUE_PAGE_MIDDLEWARE = { action: "continue" };
+export {
+  CONTINUE_PAGE_MIDDLEWARE,
+  matchPageMiddlewareTarget
+};
+//# sourceMappingURL=page.js.map

package/dist/modules/middleware/page.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/middleware/page.ts"],
+  "sourcesContent": ["import type { AuthContext } from '@open-mercato/shared/lib/auth/server'\n\nexport type PageMiddlewareMode = 'frontend' | 'backend'\n\nexport type PageRouteMeta = {\n  requireAuth?: boolean\n  requireRoles?: string[]\n  requireFeatures?: string[]\n}\n\nexport type PageMiddlewareContainer = {\n  resolve: (name: string) => unknown\n}\n\nexport type PageMiddlewareContext = {\n  pathname: string\n  mode: PageMiddlewareMode\n  routeMeta: PageRouteMeta\n  auth: AuthContext\n  ensureContainer: () => Promise<PageMiddlewareContainer>\n}\n\nexport type PageMiddlewareResult =\n  | { action: 'continue' }\n  | { action: 'redirect'; location: string }\n\nexport type PageMiddlewareTarget = string | RegExp\n\nexport type PageRouteMiddleware = {\n  id: string\n  mode?: PageMiddlewareMode\n  target: PageMiddlewareTarget\n  priority?: number\n  run: (ctx: PageMiddlewareContext) => Promise<PageMiddlewareResult> | PageMiddlewareResult\n}\n\nexport type PageMiddlewareRegistryEntry = {\n  moduleId: string\n  middleware: PageRouteMiddleware[]\n}\n\nexport function matchPageMiddlewareTarget(pathname: string, target: PageMiddlewareTarget): boolean {\n  if (target instanceof RegExp) {\n    return target.test(pathname)\n  }\n  if (target.endsWith('*')) {\n    return pathname.startsWith(target.slice(0, -1))\n  }\n  return pathname === target\n}\n\nexport const CONTINUE_PAGE_MIDDLEWARE: PageMiddlewareResult = { action: 'continue' }\n"],
+  "mappings": "AAyCO,SAAS,0BAA0B,UAAkB,QAAuC;AACjG,MAAI,kBAAkB,QAAQ;AAC5B,WAAO,OAAO,KAAK,QAAQ;AAAA,EAC7B;AACA,MAAI,OAAO,SAAS,GAAG,GAAG;AACxB,WAAO,SAAS,WAAW,OAAO,MAAM,GAAG,EAAE,CAAC;AAAA,EAChD;AACA,SAAO,aAAa;AACtB;AAEO,MAAM,2BAAiD,EAAE,QAAQ,WAAW;",
+  "names": []
+}

package/dist/modules/widgets/component-registry.js

@@ -1,6 +1,16 @@
 import * as React from "react";
 import { hasAllFeatures } from "../../security/features.js";
 const GLOBAL_COMPONENT_REGISTRY_KEY = "__openMercatoComponentRegistry__";
+function isComponentOverride(value) {
+  if (!value || typeof value !== "object") {
+    return false;
+  }
+  const target = value.target;
+  if (!target || typeof target !== "object") {
+    return false;
+  }
+  return typeof target.componentId === "string" && target.componentId.length > 0;
+}
 function getState() {
   const globalValue = globalThis[GLOBAL_COMPONENT_REGISTRY_KEY];
   if (globalValue && typeof globalValue === "object") {
@@ -22,7 +32,7 @@ function registerComponent(entry) {
 }
 function registerComponentOverrides(overrides) {
   const state = getState();
-  state.overrides = [...overrides];
+  state.overrides = overrides.filter(isComponentOverride);
 }
 function getComponentEntry(componentId) {
   const state = getState();
@@ -31,6 +41,7 @@ function getComponentEntry(componentId) {
 function getComponentOverrides(componentId, userFeatures) {
   const state = getState();
   const relevant = state.overrides.filter((override) => {
+    if (!isComponentOverride(override)) return false;
     if (override.target.componentId !== componentId) return false;
     if (override.features && override.features.length > 0) {
       if (!hasAllFeatures(userFeatures, override.features)) return false;

package/dist/modules/widgets/component-registry.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/widgets/component-registry.ts"],
-  "sourcesContent": ["import * as React from 'react'\nimport type { ComponentType, LazyExoticComponent } from 'react'\nimport type { ZodType } from 'zod'\nimport { hasAllFeatures } from '../../security/features'\n\nexport type ComponentRegistryEntry<TProps = unknown> = {\n  id: string\n  component: ComponentType<TProps>\n  metadata: {\n    module: string\n    description?: string\n    propsSchema?: ZodType<TProps>\n  }\n}\n\nexport type ComponentOverride<TProps = unknown> = {\n  target: { componentId: string }\n  priority: number\n  features?: string[]\n  metadata?: {\n    module?: string\n  }\n} & (\n  | {\n      replacement: LazyExoticComponent<ComponentType<TProps>> | ComponentType<TProps>\n      propsSchema: ZodType<TProps>\n    }\n  | {\n      wrapper: (Original: ComponentType<TProps>) => ComponentType<TProps>\n    }\n  | {\n      propsTransform: (props: TProps) => TProps\n    }\n)\n\ntype RuntimeState = {\n  components: Map<string, ComponentRegistryEntry>\n  overrides: ComponentOverride[]\n}\n\nconst GLOBAL_COMPONENT_REGISTRY_KEY = '__openMercatoComponentRegistry__'\n\nfunction getState(): RuntimeState {\n  const globalValue = (globalThis as Record<string, unknown>)[GLOBAL_COMPONENT_REGISTRY_KEY]\n  if (globalValue && typeof globalValue === 'object') {\n    const typed = globalValue as RuntimeState\n    if (typed.components instanceof Map && Array.isArray(typed.overrides)) {\n      return typed\n    }\n  }\n  const initial: RuntimeState = {\n    components: new Map<string, ComponentRegistryEntry>(),\n    overrides: [],\n  }\n  ;(globalThis as Record<string, unknown>)[GLOBAL_COMPONENT_REGISTRY_KEY] = initial\n  return initial\n}\n\nexport function registerComponent<TProps = unknown>(entry: ComponentRegistryEntry<TProps>) {\n  const state = getState()\n  state.components.set(entry.id, entry as ComponentRegistryEntry)\n}\n\nexport function registerComponentOverrides(overrides: ComponentOverride[]) {\n  const state = getState()\n  state.overrides = [...overrides]\n}\n\nexport function getComponentEntry(componentId: string): ComponentRegistryEntry | null {\n  const state = getState()\n  return state.components.get(componentId) ?? null\n}\n\nexport function getComponentOverrides(componentId: string, userFeatures?: readonly string[]): ComponentOverride[] {\n  const state = getState()\n  const relevant = state.overrides.filter((override) => {\n    if (override.target.componentId !== componentId) return false\n    if (override.features && override.features.length > 0) {\n      if (!hasAllFeatures(userFeatures, override.features)) return false\n    }\n    return true\n  })\n  return relevant.sort((a, b) => a.priority - b.priority)\n}\n\nexport function resolveRegisteredComponent<TProps>(\n  componentId: string,\n  fallback: ComponentType<TProps>,\n  userFeatures?: readonly string[],\n): ComponentType<TProps> {\n  const overrides = getComponentOverrides(componentId, userFeatures)\n  let resolved: ComponentType<TProps> = fallback\n  for (const override of overrides) {\n    if ('replacement' in override) {\n      resolved = override.replacement as ComponentType<TProps>\n      continue\n    }\n    if ('wrapper' in override) {\n      resolved = override.wrapper(resolved as ComponentType<unknown>) as ComponentType<TProps>\n      continue\n    }\n    if ('propsTransform' in override) {\n      const transform = override.propsTransform as (props: TProps) => TProps\n      const Current = resolved\n      resolved = ((props: TProps) => {\n        const transformed = transform(props)\n        return React.createElement(Current as ComponentType<Record<string, unknown>>, transformed as Record<string, unknown>)\n      }) as ComponentType<TProps>\n    }\n  }\n  return resolved\n}\n\nexport const ComponentReplacementHandles = {\n  page: (path: string) => `page:${path}`,\n  dataTable: (tableId: string) => `data-table:${tableId}`,\n  crudForm: (entityId: string) => `crud-form:${entityId}`,\n  section: (scope: string, sectionId: string) => `section:${scope}.${sectionId}`,\n} as const\n"],
-  "mappings": "AAAA,YAAY,WAAW;AAGvB,SAAS,sBAAsB;AAqC/B,MAAM,gCAAgC;AAEtC,SAAS,WAAyB;AAChC,QAAM,cAAe,WAAuC,6BAA6B;AACzF,MAAI,eAAe,OAAO,gBAAgB,UAAU;AAClD,UAAM,QAAQ;AACd,QAAI,MAAM,sBAAsB,OAAO,MAAM,QAAQ,MAAM,SAAS,GAAG;AACrE,aAAO;AAAA,IACT;AAAA,EACF;AACA,QAAM,UAAwB;AAAA,IAC5B,YAAY,oBAAI,IAAoC;AAAA,IACpD,WAAW,CAAC;AAAA,EACd;AACC,EAAC,WAAuC,6BAA6B,IAAI;AAC1E,SAAO;AACT;AAEO,SAAS,kBAAoC,OAAuC;AACzF,QAAM,QAAQ,SAAS;AACvB,QAAM,WAAW,IAAI,MAAM,IAAI,KAA+B;AAChE;AAEO,SAAS,2BAA2B,WAAgC;AACzE,QAAM,QAAQ,SAAS;AACvB,QAAM,YAAY,CAAC,GAAG,SAAS;AACjC;AAEO,SAAS,kBAAkB,aAAoD;AACpF,QAAM,QAAQ,SAAS;AACvB,SAAO,MAAM,WAAW,IAAI,WAAW,KAAK;AAC9C;AAEO,SAAS,sBAAsB,aAAqB,cAAuD;AAChH,QAAM,QAAQ,SAAS;AACvB,QAAM,WAAW,MAAM,UAAU,OAAO,CAAC,aAAa;AACpD,QAAI,SAAS,OAAO,gBAAgB,YAAa,QAAO;AACxD,QAAI,SAAS,YAAY,SAAS,SAAS,SAAS,GAAG;AACrD,UAAI,CAAC,eAAe,cAAc,SAAS,QAAQ,EAAG,QAAO;AAAA,IAC/D;AACA,WAAO;AAAA,EACT,CAAC;AACD,SAAO,SAAS,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AACxD;AAEO,SAAS,2BACd,aACA,UACA,cACuB;AACvB,QAAM,YAAY,sBAAsB,aAAa,YAAY;AACjE,MAAI,WAAkC;AACtC,aAAW,YAAY,WAAW;AAChC,QAAI,iBAAiB,UAAU;AAC7B,iBAAW,SAAS;AACpB;AAAA,IACF;AACA,QAAI,aAAa,UAAU;AACzB,iBAAW,SAAS,QAAQ,QAAkC;AAC9D;AAAA,IACF;AACA,QAAI,oBAAoB,UAAU;AAChC,YAAM,YAAY,SAAS;AAC3B,YAAM,UAAU;AAChB,kBAAY,CAAC,UAAkB;AAC7B,cAAM,cAAc,UAAU,KAAK;AACnC,eAAO,MAAM,cAAc,SAAmD,WAAsC;AAAA,MACtH;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,MAAM,8BAA8B;AAAA,EACzC,MAAM,CAAC,SAAiB,QAAQ,IAAI;AAAA,EACpC,WAAW,CAAC,YAAoB,cAAc,OAAO;AAAA,EACrD,UAAU,CAAC,aAAqB,aAAa,QAAQ;AAAA,EACrD,SAAS,CAAC,OAAe,cAAsB,WAAW,KAAK,IAAI,SAAS;AAC9E;",
+  "sourcesContent": ["import * as React from 'react'\nimport type { ComponentType, LazyExoticComponent } from 'react'\nimport type { ZodType } from 'zod'\nimport { hasAllFeatures } from '../../security/features'\n\nexport type ComponentRegistryEntry<TProps = unknown> = {\n  id: string\n  component: ComponentType<TProps>\n  metadata: {\n    module: string\n    description?: string\n    propsSchema?: ZodType<TProps>\n  }\n}\n\nexport type ComponentOverride<TProps = unknown> = {\n  target: { componentId: string }\n  priority: number\n  features?: string[]\n  metadata?: {\n    module?: string\n  }\n} & (\n  | {\n      replacement: LazyExoticComponent<ComponentType<TProps>> | ComponentType<TProps>\n      propsSchema: ZodType<TProps>\n    }\n  | {\n      wrapper: (Original: ComponentType<TProps>) => ComponentType<TProps>\n    }\n  | {\n      propsTransform: (props: TProps) => TProps\n    }\n)\n\ntype RuntimeState = {\n  components: Map<string, ComponentRegistryEntry>\n  overrides: ComponentOverride[]\n}\n\nconst GLOBAL_COMPONENT_REGISTRY_KEY = '__openMercatoComponentRegistry__'\n\nfunction isComponentOverride(value: unknown): value is ComponentOverride {\n  if (!value || typeof value !== 'object') {\n    return false\n  }\n\n  const target = (value as { target?: { componentId?: unknown } }).target\n  if (!target || typeof target !== 'object') {\n    return false\n  }\n\n  return typeof target.componentId === 'string' && target.componentId.length > 0\n}\n\nfunction getState(): RuntimeState {\n  const globalValue = (globalThis as Record<string, unknown>)[GLOBAL_COMPONENT_REGISTRY_KEY]\n  if (globalValue && typeof globalValue === 'object') {\n    const typed = globalValue as RuntimeState\n    if (typed.components instanceof Map && Array.isArray(typed.overrides)) {\n      return typed\n    }\n  }\n  const initial: RuntimeState = {\n    components: new Map<string, ComponentRegistryEntry>(),\n    overrides: [],\n  }\n  ;(globalThis as Record<string, unknown>)[GLOBAL_COMPONENT_REGISTRY_KEY] = initial\n  return initial\n}\n\nexport function registerComponent<TProps = unknown>(entry: ComponentRegistryEntry<TProps>) {\n  const state = getState()\n  state.components.set(entry.id, entry as ComponentRegistryEntry)\n}\n\nexport function registerComponentOverrides(overrides: ComponentOverride[]) {\n  const state = getState()\n  state.overrides = overrides.filter(isComponentOverride)\n}\n\nexport function getComponentEntry(componentId: string): ComponentRegistryEntry | null {\n  const state = getState()\n  return state.components.get(componentId) ?? null\n}\n\nexport function getComponentOverrides(componentId: string, userFeatures?: readonly string[]): ComponentOverride[] {\n  const state = getState()\n  const relevant = state.overrides.filter((override) => {\n    if (!isComponentOverride(override)) return false\n    if (override.target.componentId !== componentId) return false\n    if (override.features && override.features.length > 0) {\n      if (!hasAllFeatures(userFeatures, override.features)) return false\n    }\n    return true\n  })\n  return relevant.sort((a, b) => a.priority - b.priority)\n}\n\nexport function resolveRegisteredComponent<TProps>(\n  componentId: string,\n  fallback: ComponentType<TProps>,\n  userFeatures?: readonly string[],\n): ComponentType<TProps> {\n  const overrides = getComponentOverrides(componentId, userFeatures)\n  let resolved: ComponentType<TProps> = fallback\n  for (const override of overrides) {\n    if ('replacement' in override) {\n      resolved = override.replacement as ComponentType<TProps>\n      continue\n    }\n    if ('wrapper' in override) {\n      resolved = override.wrapper(resolved as ComponentType<unknown>) as ComponentType<TProps>\n      continue\n    }\n    if ('propsTransform' in override) {\n      const transform = override.propsTransform as (props: TProps) => TProps\n      const Current = resolved\n      resolved = ((props: TProps) => {\n        const transformed = transform(props)\n        return React.createElement(Current as ComponentType<Record<string, unknown>>, transformed as Record<string, unknown>)\n      }) as ComponentType<TProps>\n    }\n  }\n  return resolved\n}\n\nexport const ComponentReplacementHandles = {\n  page: (path: string) => `page:${path}`,\n  dataTable: (tableId: string) => `data-table:${tableId}`,\n  crudForm: (entityId: string) => `crud-form:${entityId}`,\n  section: (scope: string, sectionId: string) => `section:${scope}.${sectionId}`,\n} as const\n"],
+  "mappings": "AAAA,YAAY,WAAW;AAGvB,SAAS,sBAAsB;AAqC/B,MAAM,gCAAgC;AAEtC,SAAS,oBAAoB,OAA4C;AACvE,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,WAAO;AAAA,EACT;AAEA,QAAM,SAAU,MAAiD;AACjE,MAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,WAAO;AAAA,EACT;AAEA,SAAO,OAAO,OAAO,gBAAgB,YAAY,OAAO,YAAY,SAAS;AAC/E;AAEA,SAAS,WAAyB;AAChC,QAAM,cAAe,WAAuC,6BAA6B;AACzF,MAAI,eAAe,OAAO,gBAAgB,UAAU;AAClD,UAAM,QAAQ;AACd,QAAI,MAAM,sBAAsB,OAAO,MAAM,QAAQ,MAAM,SAAS,GAAG;AACrE,aAAO;AAAA,IACT;AAAA,EACF;AACA,QAAM,UAAwB;AAAA,IAC5B,YAAY,oBAAI,IAAoC;AAAA,IACpD,WAAW,CAAC;AAAA,EACd;AACC,EAAC,WAAuC,6BAA6B,IAAI;AAC1E,SAAO;AACT;AAEO,SAAS,kBAAoC,OAAuC;AACzF,QAAM,QAAQ,SAAS;AACvB,QAAM,WAAW,IAAI,MAAM,IAAI,KAA+B;AAChE;AAEO,SAAS,2BAA2B,WAAgC;AACzE,QAAM,QAAQ,SAAS;AACvB,QAAM,YAAY,UAAU,OAAO,mBAAmB;AACxD;AAEO,SAAS,kBAAkB,aAAoD;AACpF,QAAM,QAAQ,SAAS;AACvB,SAAO,MAAM,WAAW,IAAI,WAAW,KAAK;AAC9C;AAEO,SAAS,sBAAsB,aAAqB,cAAuD;AAChH,QAAM,QAAQ,SAAS;AACvB,QAAM,WAAW,MAAM,UAAU,OAAO,CAAC,aAAa;AACpD,QAAI,CAAC,oBAAoB,QAAQ,EAAG,QAAO;AAC3C,QAAI,SAAS,OAAO,gBAAgB,YAAa,QAAO;AACxD,QAAI,SAAS,YAAY,SAAS,SAAS,SAAS,GAAG;AACrD,UAAI,CAAC,eAAe,cAAc,SAAS,QAAQ,EAAG,QAAO;AAAA,IAC/D;AACA,WAAO;AAAA,EACT,CAAC;AACD,SAAO,SAAS,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AACxD;AAEO,SAAS,2BACd,aACA,UACA,cACuB;AACvB,QAAM,YAAY,sBAAsB,aAAa,YAAY;AACjE,MAAI,WAAkC;AACtC,aAAW,YAAY,WAAW;AAChC,QAAI,iBAAiB,UAAU;AAC7B,iBAAW,SAAS;AACpB;AAAA,IACF;AACA,QAAI,aAAa,UAAU;AACzB,iBAAW,SAAS,QAAQ,QAAkC;AAC9D;AAAA,IACF;AACA,QAAI,oBAAoB,UAAU;AAChC,YAAM,YAAY,SAAS;AAC3B,YAAM,UAAU;AAChB,kBAAY,CAAC,UAAkB;AAC7B,cAAM,cAAc,UAAU,KAAK;AACnC,eAAO,MAAM,cAAc,SAAmD,WAAsC;AAAA,MACtH;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,MAAM,8BAA8B;AAAA,EACzC,MAAM,CAAC,SAAiB,QAAQ,IAAI;AAAA,EACpC,WAAW,CAAC,YAAoB,cAAc,OAAO;AAAA,EACrD,UAAU,CAAC,aAAqB,aAAa,QAAQ;AAAA,EACrD,SAAS,CAAC,OAAe,cAAsB,WAAW,KAAK,IAAI,SAAS;AAC9E;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/shared",
-  "version": "0.4.9-develop-fefbbe0979",
+  "version": "0.4.9-develop-db9ecc46fc",
   "type": "module",
   "main": "./dist/index.js",
   "scripts": {
@@ -39,6 +39,10 @@
       "types": "./src/lib/bootstrap/dynamicLoader.ts",
       "default": "./dist/lib/bootstrap/dynamicLoader.js"
     },
+    "./modules/generators": {
+      "types": "./src/modules/generators/index.ts",
+      "default": "./dist/modules/generators/index.js"
+    },
     "./*.ts": {
       "types": "./src/*.ts",
       "default": "./dist/*.js"

package/src/lib/auth/server.ts

@@ -1,4 +1,4 @@
-import { cookies } from 'next/headers'
+import { cookies } from 'next/headers.js'
 import type { EntityManager } from '@mikro-orm/postgresql'
 import { verifyJwt } from './jwt'
 

package/src/lib/crud/__tests__/custom-route-interceptor.test.ts

@@ -0,0 +1,180 @@
+import { registerApiInterceptors } from '@open-mercato/shared/lib/crud/interceptor-registry'
+import { runCustomRouteAfterInterceptors } from '@open-mercato/shared/lib/crud/custom-route-interceptor'
+import type { InterceptorContext } from '@open-mercato/shared/lib/crud/api-interceptor'
+
+function buildArgs() {
+  return {
+    routePath: 'auth/login',
+    method: 'POST' as const,
+    request: {
+      method: 'POST' as const,
+      url: 'http://localhost/api/auth/login',
+      headers: {},
+      body: { email: 'user@example.com' },
+    },
+    response: {
+      statusCode: 200,
+      body: { ok: true, token: 'token-1', redirect: '/backend' },
+      headers: { 'x-test': '1' },
+    },
+    context: {
+      em: {} as InterceptorContext['em'],
+      container: { resolve: jest.fn() } as unknown as InterceptorContext['container'],
+    },
+  }
+}
+
+describe('runCustomRouteAfterInterceptors', () => {
+  beforeEach(() => {
+    registerApiInterceptors([])
+    jest.clearAllMocks()
+  })
+
+  test('returns unchanged response when no interceptor matches', async () => {
+    const result = await runCustomRouteAfterInterceptors(buildArgs())
+
+    expect(result).toEqual({
+      ok: true,
+      statusCode: 200,
+      body: { ok: true, token: 'token-1', redirect: '/backend' },
+      headers: { 'x-test': '1' },
+    })
+  })
+
+  test('supports merge result from matching after interceptor', async () => {
+    registerApiInterceptors([
+      {
+        moduleId: 'example',
+        interceptors: [
+          {
+            id: 'example.auth.login.merge',
+            targetRoute: 'auth/login',
+            methods: ['POST'],
+            async after() {
+              return { merge: { mfa_required: true } }
+            },
+          },
+        ],
+      },
+    ])
+
+    const result = await runCustomRouteAfterInterceptors(buildArgs())
+    expect(result.ok).toBe(true)
+    expect(result.body).toEqual({
+      ok: true,
+      token: 'token-1',
+      redirect: '/backend',
+      mfa_required: true,
+    })
+  })
+
+  test('supports replace result from matching after interceptor', async () => {
+    registerApiInterceptors([
+      {
+        moduleId: 'example',
+        interceptors: [
+          {
+            id: 'example.auth.login.replace',
+            targetRoute: 'auth/login',
+            methods: ['POST'],
+            async after() {
+              return { replace: { ok: true, mfa_required: true, challenge_id: 'c-1', token: 'pending' } }
+            },
+          },
+        ],
+      },
+    ])
+
+    const result = await runCustomRouteAfterInterceptors(buildArgs())
+    expect(result.ok).toBe(true)
+    expect(result.body).toEqual({
+      ok: true,
+      mfa_required: true,
+      challenge_id: 'c-1',
+      token: 'pending',
+    })
+  })
+
+  test('propagates timeout failures from interceptor runner', async () => {
+    registerApiInterceptors([
+      {
+        moduleId: 'example',
+        interceptors: [
+          {
+            id: 'example.auth.login.timeout',
+            targetRoute: 'auth/login',
+            methods: ['POST'],
+            timeoutMs: 5,
+            async after() {
+              await new Promise((resolve) => setTimeout(resolve, 20))
+              return {}
+            },
+          },
+        ],
+      },
+    ])
+
+    const result = await runCustomRouteAfterInterceptors(buildArgs())
+    expect(result.ok).toBe(false)
+    expect(result.statusCode).toBe(504)
+  })
+
+  test('supports unauthenticated execution context defaults', async () => {
+    const capturedContexts: Array<{ userId: string; organizationId: string; tenantId: string; userFeatures?: string[] }> = []
+    registerApiInterceptors([
+      {
+        moduleId: 'example',
+        interceptors: [
+          {
+            id: 'example.auth.login.capture-context',
+            targetRoute: 'auth/login',
+            methods: ['POST'],
+            async after(_request, _response, context) {
+              capturedContexts.push({
+                userId: context.userId,
+                organizationId: context.organizationId,
+                tenantId: context.tenantId,
+                userFeatures: context.userFeatures,
+              })
+              return {}
+            },
+          },
+        ],
+      },
+    ])
+
+    const result = await runCustomRouteAfterInterceptors(buildArgs())
+    expect(result.ok).toBe(true)
+    expect(capturedContexts).toEqual([
+      {
+        userId: '',
+        organizationId: '',
+        tenantId: '',
+        userFeatures: [],
+      },
+    ])
+  })
+
+  test('propagates interceptor exceptions as failed responses', async () => {
+    registerApiInterceptors([
+      {
+        moduleId: 'example',
+        interceptors: [
+          {
+            id: 'example.auth.login.throw',
+            targetRoute: 'auth/login',
+            methods: ['POST'],
+            async after() {
+              throw new Error('boom')
+            },
+          },
+        ],
+      },
+    ])
+
+    const result = await runCustomRouteAfterInterceptors(buildArgs())
+    expect(result.ok).toBe(false)
+    expect(result.statusCode).toBe(500)
+    expect(result.body.error).toBe('Internal interceptor error')
+  })
+})

package/src/lib/crud/custom-route-interceptor.ts

@@ -0,0 +1,47 @@
+import type { InterceptorContext, InterceptorRequest, InterceptorResponse, ApiInterceptorMethod } from './api-interceptor'
+import { runApiInterceptorsAfter, type RunInterceptorsAfterResult } from './interceptor-runner'
+
+export type CustomRouteAfterInterceptorContext = {
+  em: InterceptorContext['em']
+  container: InterceptorContext['container']
+  userId?: string | null
+  organizationId?: string | null
+  tenantId?: string | null
+  userFeatures?: string[]
+  extensionHeaders?: InterceptorContext['extensionHeaders']
+}
+
+type RunCustomRouteAfterInterceptorsArgs = {
+  routePath: string
+  method: ApiInterceptorMethod
+  request: InterceptorRequest
+  response: InterceptorResponse
+  context: CustomRouteAfterInterceptorContext
+  metadataByInterceptor?: Record<string, Record<string, unknown> | undefined>
+}
+
+function normalizeIdentity(value: string | null | undefined): string {
+  if (!value) return ''
+  return value
+}
+
+export async function runCustomRouteAfterInterceptors(
+  args: RunCustomRouteAfterInterceptorsArgs,
+): Promise<RunInterceptorsAfterResult> {
+  return runApiInterceptorsAfter({
+    routePath: args.routePath,
+    method: args.method,
+    request: args.request,
+    response: args.response,
+    context: {
+      em: args.context.em,
+      container: args.context.container,
+      userId: normalizeIdentity(args.context.userId),
+      organizationId: normalizeIdentity(args.context.organizationId),
+      tenantId: normalizeIdentity(args.context.tenantId),
+      userFeatures: args.context.userFeatures ?? [],
+      extensionHeaders: args.context.extensionHeaders,
+    },
+    metadataByInterceptor: args.metadataByInterceptor,
+  })
+}

package/src/lib/crud/errors.ts

@@ -1,4 +1,9 @@
+// Use Symbol.for so the marker survives module duplication across bundle boundaries
+// (same behaviour as globalThis-based registries used for DI registrars)
+const CRUD_HTTP_ERROR_MARKER = Symbol.for('@open-mercato/CrudHttpError')
+
 export class CrudHttpError extends Error {
+  readonly [CRUD_HTTP_ERROR_MARKER] = true
   status: number
   body: Record<string, any>
 
@@ -10,6 +15,15 @@ export class CrudHttpError extends Error {
   }
 }
 
+/**
+ * Type-safe check for CrudHttpError that works across module/bundle boundaries.
+ * Prefer this over `instanceof CrudHttpError` whenever the error may originate
+ * from a different module bundle (e.g. enterprise packages, dynamic imports).
+ */
+export function isCrudHttpError(err: unknown): err is CrudHttpError {
+  return !!err && typeof err === 'object' && (err as Record<symbol, unknown>)[CRUD_HTTP_ERROR_MARKER] === true
+}
+
 export function badRequest(message: string): CrudHttpError {
   return new CrudHttpError(400, { error: message })
 }

package/src/lib/crud/factory.ts

@@ -33,7 +33,7 @@ import {
   loadCustomFieldDefinitionIndex,
 } from './custom-fields'
 import { serializeExport, normalizeExportFormat, defaultExportFilename, ensureColumns, type CrudExportFormat, type PreparedExport } from './exporters'
-import { CrudHttpError } from './errors'
+import { CrudHttpError, isCrudHttpError } from './errors'
 import type { CommandBus, CommandLogMetadata } from '@open-mercato/shared/lib/commands'
 import type { EntityId } from '@open-mercato/shared/modules/entities'
 import type { EntityManager } from '@mikro-orm/postgresql'
@@ -446,7 +446,7 @@ function attachOperationHeader(res: Response, logEntry: any) {
 
 function handleError(err: unknown): Response {
   if (err instanceof Response) return err
-  if (err instanceof CrudHttpError) return json(err.body, { status: err.status })
+  if (isCrudHttpError(err)) return json(err.body, { status: err.status })
   if (err instanceof z.ZodError) return json({ error: 'Invalid input', details: err.issues }, { status: 400 })
 
   const message = err instanceof Error ? err.message : undefined

package/src/lib/middleware/__tests__/page-executor.test.ts

@@ -0,0 +1,161 @@
+import {
+  executePageMiddleware,
+  resolvePageMiddlewareRedirect,
+} from '@open-mercato/shared/lib/middleware/page-executor'
+import {
+  CONTINUE_PAGE_MIDDLEWARE,
+  matchPageMiddlewareTarget,
+  type PageMiddlewareContext,
+  type PageMiddlewareRegistryEntry,
+} from '@open-mercato/shared/modules/middleware/page'
+
+function buildContext(overrides?: Partial<PageMiddlewareContext>): PageMiddlewareContext {
+  return {
+    pathname: '/backend/customers/people',
+    mode: 'backend',
+    routeMeta: { requireAuth: true },
+    auth: {
+      sub: 'user-1',
+      tenantId: 'tenant-1',
+      orgId: 'org-1',
+      roles: ['admin'],
+    },
+    ensureContainer: async () => ({ resolve: () => null }),
+    ...overrides,
+  }
+}
+
+describe('matchPageMiddlewareTarget', () => {
+  it('matches exact string targets', () => {
+    expect(matchPageMiddlewareTarget('/backend', '/backend')).toBe(true)
+    expect(matchPageMiddlewareTarget('/backend/customers', '/backend')).toBe(false)
+  })
+
+  it('matches wildcard prefix targets', () => {
+    expect(matchPageMiddlewareTarget('/backend/customers', '/backend/*')).toBe(true)
+    expect(matchPageMiddlewareTarget('/frontend/home', '/backend/*')).toBe(false)
+  })
+
+  it('matches regexp targets', () => {
+    expect(matchPageMiddlewareTarget('/backend/customers', /^\/backend\/.+$/)).toBe(true)
+    expect(matchPageMiddlewareTarget('/backend', /^\/backend\/.+$/)).toBe(false)
+  })
+})
+
+describe('executePageMiddleware', () => {
+  it('returns continue when no middleware matches', async () => {
+    const entries: PageMiddlewareRegistryEntry[] = [
+      {
+        moduleId: 'security',
+        middleware: [
+          {
+            id: 'security.frontend',
+            mode: 'frontend',
+            target: '/frontend/*',
+            run: async () => CONTINUE_PAGE_MIDDLEWARE,
+          },
+        ],
+      },
+    ]
+
+    await expect(executePageMiddleware({ entries, context: buildContext() })).resolves.toEqual(
+      CONTINUE_PAGE_MIDDLEWARE,
+    )
+  })
+
+  it('applies deterministic priority ordering and short-circuits on redirect', async () => {
+    const calls: string[] = []
+    const entries: PageMiddlewareRegistryEntry[] = [
+      {
+        moduleId: 'mod-a',
+        middleware: [
+          {
+            id: 'mod-a.first',
+            mode: 'backend',
+            target: '/backend/*',
+            priority: 20,
+            run: async () => {
+              calls.push('mod-a.first')
+              return CONTINUE_PAGE_MIDDLEWARE
+            },
+          },
+          {
+            id: 'mod-a.third',
+            mode: 'backend',
+            target: '/backend/*',
+            priority: 30,
+            run: async () => {
+              calls.push('mod-a.third')
+              return CONTINUE_PAGE_MIDDLEWARE
+            },
+          },
+        ],
+      },
+      {
+        moduleId: 'mod-b',
+        middleware: [
+          {
+            id: 'mod-b.second',
+            mode: 'backend',
+            target: '/backend/*',
+            priority: 25,
+            run: async () => {
+              calls.push('mod-b.second')
+              return { action: 'redirect', location: '/backend/profile/security/mfa' } as const
+            },
+          },
+        ],
+      },
+    ]
+
+    await expect(
+      executePageMiddleware({ entries, context: buildContext() }),
+    ).resolves.toEqual({ action: 'redirect', location: '/backend/profile/security/mfa' })
+    expect(calls).toEqual(['mod-a.first', 'mod-b.second'])
+  })
+
+  it('throws and emits error callback on middleware failure', async () => {
+    const onError = jest.fn()
+    const entries: PageMiddlewareRegistryEntry[] = [
+      {
+        moduleId: 'mod-a',
+        middleware: [
+          {
+            id: 'mod-a.fail',
+            mode: 'backend',
+            target: '/backend/*',
+            run: async () => {
+              throw new Error('boom')
+            },
+          },
+        ],
+      },
+    ]
+
+    await expect(
+      executePageMiddleware({ entries, context: buildContext(), onError }),
+    ).rejects.toThrow('boom')
+    expect(onError).toHaveBeenCalledWith(expect.any(Error), { id: 'mod-a.fail', priority: undefined })
+  })
+})
+
+describe('resolvePageMiddlewareRedirect', () => {
+  it('returns redirect location for first terminal middleware', async () => {
+    const entries: PageMiddlewareRegistryEntry[] = [
+      {
+        moduleId: 'mod-a',
+        middleware: [
+          {
+            id: 'mod-a.redirect',
+            target: '/backend/*',
+            run: async () => ({ action: 'redirect', location: '/backend/profile/security/mfa' }),
+          },
+        ],
+      },
+    ]
+
+    await expect(resolvePageMiddlewareRedirect({ entries, context: buildContext() })).resolves.toBe(
+      '/backend/profile/security/mfa',
+    )
+  })
+})