@open-mercato/shared 0.6.2-develop.3467.1.2a1818709d → 0.6.2

package/dist/lib/crud/interceptor-registry.js

@@ -1,3 +1,4 @@
+import { applyApiInterceptorOverridesToEntries } from "../../modules/overrides.js";
 let _interceptorEntries = null;
 const GLOBAL_INTERCEPTOR_KEY = "__openMercatoApiInterceptors__";
 function readGlobalInterceptors() {
@@ -16,8 +17,9 @@ function writeGlobalInterceptors(entries) {
   }
 }
 function registerApiInterceptors(entries) {
+  const finalEntries = applyApiInterceptorOverridesToEntries(entries);
   const flat = [];
-  entries.forEach((entry, moduleOrder) => {
+  finalEntries.forEach((entry, moduleOrder) => {
     entry.interceptors.forEach((interceptor, interceptorOrder) => {
       flat.push({
         moduleId: entry.moduleId,

package/dist/lib/crud/interceptor-registry.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/crud/interceptor-registry.ts"],
-  "sourcesContent": ["import type { ApiInterceptor, ApiInterceptorMethod, ApiInterceptorRegistryEntry } from './api-interceptor'\n\nlet _interceptorEntries: ApiInterceptorRegistryEntry[] | null = null\nconst GLOBAL_INTERCEPTOR_KEY = '__openMercatoApiInterceptors__'\n\nfunction readGlobalInterceptors(): ApiInterceptorRegistryEntry[] | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_INTERCEPTOR_KEY]\n    return Array.isArray(value) ? (value as ApiInterceptorRegistryEntry[]) : null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalInterceptors(entries: ApiInterceptorRegistryEntry[]) {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_INTERCEPTOR_KEY] = entries\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\nexport function registerApiInterceptors(entries: Array<{ moduleId: string; interceptors: ApiInterceptor[] }>) {\n  const flat: ApiInterceptorRegistryEntry[] = []\n  entries.forEach((entry, moduleOrder) => {\n    entry.interceptors.forEach((interceptor, interceptorOrder) => {\n      flat.push({\n        moduleId: entry.moduleId,\n        interceptor,\n        moduleOrder,\n        interceptorOrder,\n      })\n    })\n  })\n  _interceptorEntries = flat\n  writeGlobalInterceptors(flat)\n}\n\nexport function getAllApiInterceptors(): ApiInterceptorRegistryEntry[] {\n  const globalEntries = readGlobalInterceptors()\n  if (globalEntries) return globalEntries\n  if (!_interceptorEntries) return []\n  return _interceptorEntries\n}\n\nfunction routeMatches(targetRoute: string, routePath: string): boolean {\n  if (targetRoute === '*') return true\n  if (targetRoute.endsWith('/*')) {\n    const prefix = targetRoute.slice(0, -2)\n    return routePath === prefix || routePath.startsWith(`${prefix}/`)\n  }\n  return targetRoute === routePath\n}\n\nconst collisionWarnings = new Set<string>()\n\nexport function getApiInterceptorsForRoute(routePath: string, method: ApiInterceptorMethod): ApiInterceptorRegistryEntry[] {\n  const matching = getAllApiInterceptors().filter((entry) => {\n    const methods = entry.interceptor.methods ?? []\n    return methods.includes(method) && routeMatches(entry.interceptor.targetRoute, routePath)\n  })\n\n  const sorted = matching.sort((a, b) => {\n    const byPriority = (b.interceptor.priority ?? 0) - (a.interceptor.priority ?? 0)\n    if (byPriority !== 0) return byPriority\n    const byModule = a.moduleOrder - b.moduleOrder\n    if (byModule !== 0) return byModule\n    return a.interceptorOrder - b.interceptorOrder\n  })\n\n  if (process.env.NODE_ENV !== 'production') {\n    for (let i = 1; i < sorted.length; i++) {\n      const prev = sorted[i - 1]\n      const current = sorted[i]\n      const prevPriority = prev.interceptor.priority ?? 0\n      const currentPriority = current.interceptor.priority ?? 0\n      if (prevPriority !== currentPriority) continue\n      const warningKey = `${routePath}:${method}:${prev.interceptor.id}:${current.interceptor.id}:${currentPriority}`\n      if (collisionWarnings.has(warningKey)) continue\n      collisionWarnings.add(warningKey)\n      console.warn(\n        `[UMES] Interceptors \"${prev.interceptor.id}\" and \"${current.interceptor.id}\" have the same priority (${currentPriority}) for route \"${routePath}\". Execution order is based on module registration order.`\n      )\n    }\n  }\n\n  return sorted\n}\n"],
-  "mappings": "AAEA,IAAI,sBAA4D;AAChE,MAAM,yBAAyB;AAE/B,SAAS,yBAA+D;AACtE,MAAI;AACF,UAAM,QAAS,WAAuC,sBAAsB;AAC5E,WAAO,MAAM,QAAQ,KAAK,IAAK,QAA0C;AAAA,EAC3E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,wBAAwB,SAAwC;AACvE,MAAI;AACF;AAAC,IAAC,WAAuC,sBAAsB,IAAI;AAAA,EACrE,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,wBAAwB,SAAsE;AAC5G,QAAM,OAAsC,CAAC;AAC7C,UAAQ,QAAQ,CAAC,OAAO,gBAAgB;AACtC,UAAM,aAAa,QAAQ,CAAC,aAAa,qBAAqB;AAC5D,WAAK,KAAK;AAAA,QACR,UAAU,MAAM;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH,CAAC;AACD,wBAAsB;AACtB,0BAAwB,IAAI;AAC9B;AAEO,SAAS,wBAAuD;AACrE,QAAM,gBAAgB,uBAAuB;AAC7C,MAAI,cAAe,QAAO;AAC1B,MAAI,CAAC,oBAAqB,QAAO,CAAC;AAClC,SAAO;AACT;AAEA,SAAS,aAAa,aAAqB,WAA4B;AACrE,MAAI,gBAAgB,IAAK,QAAO;AAChC,MAAI,YAAY,SAAS,IAAI,GAAG;AAC9B,UAAM,SAAS,YAAY,MAAM,GAAG,EAAE;AACtC,WAAO,cAAc,UAAU,UAAU,WAAW,GAAG,MAAM,GAAG;AAAA,EAClE;AACA,SAAO,gBAAgB;AACzB;AAEA,MAAM,oBAAoB,oBAAI,IAAY;AAEnC,SAAS,2BAA2B,WAAmB,QAA6D;AACzH,QAAM,WAAW,sBAAsB,EAAE,OAAO,CAAC,UAAU;AACzD,UAAM,UAAU,MAAM,YAAY,WAAW,CAAC;AAC9C,WAAO,QAAQ,SAAS,MAAM,KAAK,aAAa,MAAM,YAAY,aAAa,SAAS;AAAA,EAC1F,CAAC;AAED,QAAM,SAAS,SAAS,KAAK,CAAC,GAAG,MAAM;AACrC,UAAM,cAAc,EAAE,YAAY,YAAY,MAAM,EAAE,YAAY,YAAY;AAC9E,QAAI,eAAe,EAAG,QAAO;AAC7B,UAAM,WAAW,EAAE,cAAc,EAAE;AACnC,QAAI,aAAa,EAAG,QAAO;AAC3B,WAAO,EAAE,mBAAmB,EAAE;AAAA,EAChC,CAAC;AAED,MAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,aAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,YAAM,OAAO,OAAO,IAAI,CAAC;AACzB,YAAM,UAAU,OAAO,CAAC;AACxB,YAAM,eAAe,KAAK,YAAY,YAAY;AAClD,YAAM,kBAAkB,QAAQ,YAAY,YAAY;AACxD,UAAI,iBAAiB,gBAAiB;AACtC,YAAM,aAAa,GAAG,SAAS,IAAI,MAAM,IAAI,KAAK,YAAY,EAAE,IAAI,QAAQ,YAAY,EAAE,IAAI,eAAe;AAC7G,UAAI,kBAAkB,IAAI,UAAU,EAAG;AACvC,wBAAkB,IAAI,UAAU;AAChC,cAAQ;AAAA,QACN,wBAAwB,KAAK,YAAY,EAAE,UAAU,QAAQ,YAAY,EAAE,6BAA6B,eAAe,gBAAgB,SAAS;AAAA,MAClJ;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;",
+  "sourcesContent": ["import type { ApiInterceptor, ApiInterceptorMethod, ApiInterceptorRegistryEntry } from './api-interceptor'\nimport { applyApiInterceptorOverridesToEntries } from '../../modules/overrides'\n\nlet _interceptorEntries: ApiInterceptorRegistryEntry[] | null = null\nconst GLOBAL_INTERCEPTOR_KEY = '__openMercatoApiInterceptors__'\n\nfunction readGlobalInterceptors(): ApiInterceptorRegistryEntry[] | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_INTERCEPTOR_KEY]\n    return Array.isArray(value) ? (value as ApiInterceptorRegistryEntry[]) : null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalInterceptors(entries: ApiInterceptorRegistryEntry[]) {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_INTERCEPTOR_KEY] = entries\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\nexport function registerApiInterceptors(entries: Array<{ moduleId: string; interceptors: ApiInterceptor[] }>) {\n  const finalEntries = applyApiInterceptorOverridesToEntries(entries)\n  const flat: ApiInterceptorRegistryEntry[] = []\n  finalEntries.forEach((entry, moduleOrder) => {\n    entry.interceptors.forEach((interceptor, interceptorOrder) => {\n      flat.push({\n        moduleId: entry.moduleId,\n        interceptor,\n        moduleOrder,\n        interceptorOrder,\n      })\n    })\n  })\n  _interceptorEntries = flat\n  writeGlobalInterceptors(flat)\n}\n\nexport function getAllApiInterceptors(): ApiInterceptorRegistryEntry[] {\n  const globalEntries = readGlobalInterceptors()\n  if (globalEntries) return globalEntries\n  if (!_interceptorEntries) return []\n  return _interceptorEntries\n}\n\nfunction routeMatches(targetRoute: string, routePath: string): boolean {\n  if (targetRoute === '*') return true\n  if (targetRoute.endsWith('/*')) {\n    const prefix = targetRoute.slice(0, -2)\n    return routePath === prefix || routePath.startsWith(`${prefix}/`)\n  }\n  return targetRoute === routePath\n}\n\nconst collisionWarnings = new Set<string>()\n\nexport function getApiInterceptorsForRoute(routePath: string, method: ApiInterceptorMethod): ApiInterceptorRegistryEntry[] {\n  const matching = getAllApiInterceptors().filter((entry) => {\n    const methods = entry.interceptor.methods ?? []\n    return methods.includes(method) && routeMatches(entry.interceptor.targetRoute, routePath)\n  })\n\n  const sorted = matching.sort((a, b) => {\n    const byPriority = (b.interceptor.priority ?? 0) - (a.interceptor.priority ?? 0)\n    if (byPriority !== 0) return byPriority\n    const byModule = a.moduleOrder - b.moduleOrder\n    if (byModule !== 0) return byModule\n    return a.interceptorOrder - b.interceptorOrder\n  })\n\n  if (process.env.NODE_ENV !== 'production') {\n    for (let i = 1; i < sorted.length; i++) {\n      const prev = sorted[i - 1]\n      const current = sorted[i]\n      const prevPriority = prev.interceptor.priority ?? 0\n      const currentPriority = current.interceptor.priority ?? 0\n      if (prevPriority !== currentPriority) continue\n      const warningKey = `${routePath}:${method}:${prev.interceptor.id}:${current.interceptor.id}:${currentPriority}`\n      if (collisionWarnings.has(warningKey)) continue\n      collisionWarnings.add(warningKey)\n      console.warn(\n        `[UMES] Interceptors \"${prev.interceptor.id}\" and \"${current.interceptor.id}\" have the same priority (${currentPriority}) for route \"${routePath}\". Execution order is based on module registration order.`\n      )\n    }\n  }\n\n  return sorted\n}\n"],
+  "mappings": "AACA,SAAS,6CAA6C;AAEtD,IAAI,sBAA4D;AAChE,MAAM,yBAAyB;AAE/B,SAAS,yBAA+D;AACtE,MAAI;AACF,UAAM,QAAS,WAAuC,sBAAsB;AAC5E,WAAO,MAAM,QAAQ,KAAK,IAAK,QAA0C;AAAA,EAC3E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,wBAAwB,SAAwC;AACvE,MAAI;AACF;AAAC,IAAC,WAAuC,sBAAsB,IAAI;AAAA,EACrE,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,wBAAwB,SAAsE;AAC5G,QAAM,eAAe,sCAAsC,OAAO;AAClE,QAAM,OAAsC,CAAC;AAC7C,eAAa,QAAQ,CAAC,OAAO,gBAAgB;AAC3C,UAAM,aAAa,QAAQ,CAAC,aAAa,qBAAqB;AAC5D,WAAK,KAAK;AAAA,QACR,UAAU,MAAM;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH,CAAC;AACD,wBAAsB;AACtB,0BAAwB,IAAI;AAC9B;AAEO,SAAS,wBAAuD;AACrE,QAAM,gBAAgB,uBAAuB;AAC7C,MAAI,cAAe,QAAO;AAC1B,MAAI,CAAC,oBAAqB,QAAO,CAAC;AAClC,SAAO;AACT;AAEA,SAAS,aAAa,aAAqB,WAA4B;AACrE,MAAI,gBAAgB,IAAK,QAAO;AAChC,MAAI,YAAY,SAAS,IAAI,GAAG;AAC9B,UAAM,SAAS,YAAY,MAAM,GAAG,EAAE;AACtC,WAAO,cAAc,UAAU,UAAU,WAAW,GAAG,MAAM,GAAG;AAAA,EAClE;AACA,SAAO,gBAAgB;AACzB;AAEA,MAAM,oBAAoB,oBAAI,IAAY;AAEnC,SAAS,2BAA2B,WAAmB,QAA6D;AACzH,QAAM,WAAW,sBAAsB,EAAE,OAAO,CAAC,UAAU;AACzD,UAAM,UAAU,MAAM,YAAY,WAAW,CAAC;AAC9C,WAAO,QAAQ,SAAS,MAAM,KAAK,aAAa,MAAM,YAAY,aAAa,SAAS;AAAA,EAC1F,CAAC;AAED,QAAM,SAAS,SAAS,KAAK,CAAC,GAAG,MAAM;AACrC,UAAM,cAAc,EAAE,YAAY,YAAY,MAAM,EAAE,YAAY,YAAY;AAC9E,QAAI,eAAe,EAAG,QAAO;AAC7B,UAAM,WAAW,EAAE,cAAc,EAAE;AACnC,QAAI,aAAa,EAAG,QAAO;AAC3B,WAAO,EAAE,mBAAmB,EAAE;AAAA,EAChC,CAAC;AAED,MAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,aAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,YAAM,OAAO,OAAO,IAAI,CAAC;AACzB,YAAM,UAAU,OAAO,CAAC;AACxB,YAAM,eAAe,KAAK,YAAY,YAAY;AAClD,YAAM,kBAAkB,QAAQ,YAAY,YAAY;AACxD,UAAI,iBAAiB,gBAAiB;AACtC,YAAM,aAAa,GAAG,SAAS,IAAI,MAAM,IAAI,KAAK,YAAY,EAAE,IAAI,QAAQ,YAAY,EAAE,IAAI,eAAe;AAC7G,UAAI,kBAAkB,IAAI,UAAU,EAAG;AACvC,wBAAkB,IAAI,UAAU;AAChC,cAAQ;AAAA,QACN,wBAAwB,KAAK,YAAY,EAAE,UAAU,QAAQ,YAAY,EAAE,6BAA6B,eAAe,gBAAgB,SAAS;AAAA,MAClJ;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;",
   "names": []
 }

package/dist/lib/crud/sync-event-runner.js

@@ -1,12 +1,6 @@
-function escapeRegex(input) {
-  return input.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
+import { matchWildcardPattern } from "@open-mercato/shared/lib/patterns/wildcard";
 function matchesEventPattern(pattern, eventId) {
-  if (pattern === eventId) return true;
-  if (pattern === "*") return true;
-  const escaped = escapeRegex(pattern).replace(/\\\*/g, ".*");
-  const regex = new RegExp("^" + escaped + "$");
-  return regex.test(eventId);
+  return matchWildcardPattern(eventId, pattern);
 }
 function collectSyncSubscribers(allSyncSubscribers, eventId) {
   return allSyncSubscribers.filter((s) => matchesEventPattern(s.metadata.event, eventId)).sort((a, b) => (a.metadata.priority ?? 50) - (b.metadata.priority ?? 50));

package/dist/lib/crud/sync-event-runner.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/crud/sync-event-runner.ts"],
-  "sourcesContent": ["import type { SyncCrudEventPayload } from './sync-event-types'\nimport type { SyncSubscriberEntry } from './sync-subscriber-store'\n\n// ---------------------------------------------------------------------------\n// Event pattern matching\n// ---------------------------------------------------------------------------\n\nfunction escapeRegex(input: string): string {\n  // Escape all characters with special meaning in regular expressions\n  return input.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n}\n\nexport function matchesEventPattern(pattern: string, eventId: string): boolean {\n  if (pattern === eventId) return true\n  if (pattern === '*') return true\n  // Escape the pattern for literal use in a RegExp, then turn \"\\*\" into \".*\" for wildcard support\n  const escaped = escapeRegex(pattern).replace(/\\\\\\*/g, '.*')\n  const regex = new RegExp('^' + escaped + '$')\n  return regex.test(eventId)\n}\n\n// ---------------------------------------------------------------------------\n// Collect matching subscribers\n// ---------------------------------------------------------------------------\n\nexport function collectSyncSubscribers(\n  allSyncSubscribers: SyncSubscriberEntry[],\n  eventId: string,\n): SyncSubscriberEntry[] {\n  return allSyncSubscribers\n    .filter((s) => matchesEventPattern(s.metadata.event, eventId))\n    .sort((a, b) => (a.metadata.priority ?? 50) - (b.metadata.priority ?? 50))\n}\n\n// ---------------------------------------------------------------------------\n// Run sync before-event subscribers\n// ---------------------------------------------------------------------------\n\nexport async function runSyncBeforeEvent(\n  subscribers: SyncSubscriberEntry[],\n  payload: SyncCrudEventPayload,\n  ctx: { resolve: <T = unknown>(name: string) => T },\n): Promise<{ ok: boolean; errorBody?: Record<string, unknown>; errorStatus?: number; modifiedPayload?: Record<string, unknown> }> {\n  let currentPayload = payload.payload\n\n  for (const subscriber of subscribers) {\n    const result = await subscriber.handler({ ...payload, payload: currentPayload }, ctx)\n\n    if (result?.ok === false) {\n      const body = result.body ?? { error: result.message ?? 'Operation blocked', subscriberId: subscriber.metadata.id }\n      return { ok: false, errorBody: body, errorStatus: result.status ?? 422 }\n    }\n\n    if (result?.modifiedPayload) {\n      currentPayload = { ...currentPayload, ...result.modifiedPayload }\n    }\n  }\n\n  return { ok: true, modifiedPayload: currentPayload !== payload.payload ? currentPayload : undefined }\n}\n\n// ---------------------------------------------------------------------------\n// Run sync after-event subscribers\n// ---------------------------------------------------------------------------\n\nexport async function runSyncAfterEvent(\n  subscribers: SyncSubscriberEntry[],\n  payload: SyncCrudEventPayload,\n  ctx: { resolve: <T = unknown>(name: string) => T },\n): Promise<void> {\n  for (const subscriber of subscribers) {\n    try {\n      await subscriber.handler(payload, ctx)\n    } catch (error) {\n      console.error(`[sync-event] after-subscriber failed: ${subscriber.metadata.id}`, error)\n    }\n  }\n}\n"],
-  "mappings": "AAOA,SAAS,YAAY,OAAuB;AAE1C,SAAO,MAAM,QAAQ,uBAAuB,MAAM;AACpD;AAEO,SAAS,oBAAoB,SAAiB,SAA0B;AAC7E,MAAI,YAAY,QAAS,QAAO;AAChC,MAAI,YAAY,IAAK,QAAO;AAE5B,QAAM,UAAU,YAAY,OAAO,EAAE,QAAQ,SAAS,IAAI;AAC1D,QAAM,QAAQ,IAAI,OAAO,MAAM,UAAU,GAAG;AAC5C,SAAO,MAAM,KAAK,OAAO;AAC3B;AAMO,SAAS,uBACd,oBACA,SACuB;AACvB,SAAO,mBACJ,OAAO,CAAC,MAAM,oBAAoB,EAAE,SAAS,OAAO,OAAO,CAAC,EAC5D,KAAK,CAAC,GAAG,OAAO,EAAE,SAAS,YAAY,OAAO,EAAE,SAAS,YAAY,GAAG;AAC7E;AAMA,eAAsB,mBACpB,aACA,SACA,KACgI;AAChI,MAAI,iBAAiB,QAAQ;AAE7B,aAAW,cAAc,aAAa;AACpC,UAAM,SAAS,MAAM,WAAW,QAAQ,EAAE,GAAG,SAAS,SAAS,eAAe,GAAG,GAAG;AAEpF,QAAI,QAAQ,OAAO,OAAO;AACxB,YAAM,OAAO,OAAO,QAAQ,EAAE,OAAO,OAAO,WAAW,qBAAqB,cAAc,WAAW,SAAS,GAAG;AACjH,aAAO,EAAE,IAAI,OAAO,WAAW,MAAM,aAAa,OAAO,UAAU,IAAI;AAAA,IACzE;AAEA,QAAI,QAAQ,iBAAiB;AAC3B,uBAAiB,EAAE,GAAG,gBAAgB,GAAG,OAAO,gBAAgB;AAAA,IAClE;AAAA,EACF;AAEA,SAAO,EAAE,IAAI,MAAM,iBAAiB,mBAAmB,QAAQ,UAAU,iBAAiB,OAAU;AACtG;AAMA,eAAsB,kBACpB,aACA,SACA,KACe;AACf,aAAW,cAAc,aAAa;AACpC,QAAI;AACF,YAAM,WAAW,QAAQ,SAAS,GAAG;AAAA,IACvC,SAAS,OAAO;AACd,cAAQ,MAAM,yCAAyC,WAAW,SAAS,EAAE,IAAI,KAAK;AAAA,IACxF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { SyncCrudEventPayload } from './sync-event-types'\nimport type { SyncSubscriberEntry } from './sync-subscriber-store'\nimport { matchWildcardPattern } from '@open-mercato/shared/lib/patterns/wildcard'\n\n// ---------------------------------------------------------------------------\n// Event pattern matching\n// ---------------------------------------------------------------------------\n\nexport function matchesEventPattern(pattern: string, eventId: string): boolean {\n  return matchWildcardPattern(eventId, pattern)\n}\n\n// ---------------------------------------------------------------------------\n// Collect matching subscribers\n// ---------------------------------------------------------------------------\n\nexport function collectSyncSubscribers(\n  allSyncSubscribers: SyncSubscriberEntry[],\n  eventId: string,\n): SyncSubscriberEntry[] {\n  return allSyncSubscribers\n    .filter((s) => matchesEventPattern(s.metadata.event, eventId))\n    .sort((a, b) => (a.metadata.priority ?? 50) - (b.metadata.priority ?? 50))\n}\n\n// ---------------------------------------------------------------------------\n// Run sync before-event subscribers\n// ---------------------------------------------------------------------------\n\nexport async function runSyncBeforeEvent(\n  subscribers: SyncSubscriberEntry[],\n  payload: SyncCrudEventPayload,\n  ctx: { resolve: <T = unknown>(name: string) => T },\n): Promise<{ ok: boolean; errorBody?: Record<string, unknown>; errorStatus?: number; modifiedPayload?: Record<string, unknown> }> {\n  let currentPayload = payload.payload\n\n  for (const subscriber of subscribers) {\n    const result = await subscriber.handler({ ...payload, payload: currentPayload }, ctx)\n\n    if (result?.ok === false) {\n      const body = result.body ?? { error: result.message ?? 'Operation blocked', subscriberId: subscriber.metadata.id }\n      return { ok: false, errorBody: body, errorStatus: result.status ?? 422 }\n    }\n\n    if (result?.modifiedPayload) {\n      currentPayload = { ...currentPayload, ...result.modifiedPayload }\n    }\n  }\n\n  return { ok: true, modifiedPayload: currentPayload !== payload.payload ? currentPayload : undefined }\n}\n\n// ---------------------------------------------------------------------------\n// Run sync after-event subscribers\n// ---------------------------------------------------------------------------\n\nexport async function runSyncAfterEvent(\n  subscribers: SyncSubscriberEntry[],\n  payload: SyncCrudEventPayload,\n  ctx: { resolve: <T = unknown>(name: string) => T },\n): Promise<void> {\n  for (const subscriber of subscribers) {\n    try {\n      await subscriber.handler(payload, ctx)\n    } catch (error) {\n      console.error(`[sync-event] after-subscriber failed: ${subscriber.metadata.id}`, error)\n    }\n  }\n}\n"],
+  "mappings": "AAEA,SAAS,4BAA4B;AAM9B,SAAS,oBAAoB,SAAiB,SAA0B;AAC7E,SAAO,qBAAqB,SAAS,OAAO;AAC9C;AAMO,SAAS,uBACd,oBACA,SACuB;AACvB,SAAO,mBACJ,OAAO,CAAC,MAAM,oBAAoB,EAAE,SAAS,OAAO,OAAO,CAAC,EAC5D,KAAK,CAAC,GAAG,OAAO,EAAE,SAAS,YAAY,OAAO,EAAE,SAAS,YAAY,GAAG;AAC7E;AAMA,eAAsB,mBACpB,aACA,SACA,KACgI;AAChI,MAAI,iBAAiB,QAAQ;AAE7B,aAAW,cAAc,aAAa;AACpC,UAAM,SAAS,MAAM,WAAW,QAAQ,EAAE,GAAG,SAAS,SAAS,eAAe,GAAG,GAAG;AAEpF,QAAI,QAAQ,OAAO,OAAO;AACxB,YAAM,OAAO,OAAO,QAAQ,EAAE,OAAO,OAAO,WAAW,qBAAqB,cAAc,WAAW,SAAS,GAAG;AACjH,aAAO,EAAE,IAAI,OAAO,WAAW,MAAM,aAAa,OAAO,UAAU,IAAI;AAAA,IACzE;AAEA,QAAI,QAAQ,iBAAiB;AAC3B,uBAAiB,EAAE,GAAG,gBAAgB,GAAG,OAAO,gBAAgB;AAAA,IAClE;AAAA,EACF;AAEA,SAAO,EAAE,IAAI,MAAM,iBAAiB,mBAAmB,QAAQ,UAAU,iBAAiB,OAAU;AACtG;AAMA,eAAsB,kBACpB,aACA,SACA,KACe;AACf,aAAW,cAAc,aAAa;AACpC,QAAI;AACF,YAAM,WAAW,QAAQ,SAAS,GAAG;AAAA,IACvC,SAAS,OAAO;AACd,cAAQ,MAAM,yCAAyC,WAAW,SAAS,EAAE,IAAI,KAAK;AAAA,IACxF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/lib/db/mikro.js

@@ -44,6 +44,17 @@ async function getOrm() {
   const idleInTransactionTimeoutMs = Number.isFinite(idleInTxTimeoutEnv) ? idleInTxTimeoutEnv : process.env.NODE_ENV === "production" ? void 0 : 12e4;
   const connectionOptions = idleSessionTimeoutMs && idleSessionTimeoutMs > 0 ? `-c idle_session_timeout=${idleSessionTimeoutMs}` : void 0;
   const sslConfig = getSslConfig();
+  if (process.env.OM_DB_POOL_DEBUG === "1" || process.env.OM_INTEGRATION_TEST === "true") {
+    console.log("[orm] pool config", {
+      poolMin,
+      poolMax,
+      poolIdleTimeout,
+      poolAcquireTimeout,
+      idleSessionTimeoutMs,
+      idleInTransactionTimeoutMs,
+      nodeEnv: process.env.NODE_ENV
+    });
+  }
   ormInstance = await MikroORM.init({
     driver: PostgreSqlDriver,
     clientUrl,
@@ -56,18 +67,31 @@ async function getOrm() {
     metadataProvider: ReflectMetadataProvider,
     // MikroORM v7 pool shape (min/max/idleTimeoutMillis). Knex-era `acquireTimeoutMillis` /
     // `destroyTimeoutMillis` were removed; acquire wait maps to pg `connectionTimeoutMillis`
-    // below under `driverOptions`.
+    // below under `driverOptions`. Mirror `connectionTimeoutMillis` here too — older Mikro
+    // versions read it from `pool`; v7 reads from `driverOptions` but accepting both
+    // costs nothing and protects us from upstream config-merge regressions.
     pool: {
       min: poolMin,
       max: poolMax,
-      idleTimeoutMillis: poolIdleTimeout
+      idleTimeoutMillis: poolIdleTimeout,
+      acquireTimeoutMillis: poolAcquireTimeout
     },
     // Driver options are merged into pg.PoolConfig (ClientConfig + pg-pool).
     driverOptions: {
       connectionTimeoutMillis: poolAcquireTimeout,
       idle_in_transaction_session_timeout: idleInTransactionTimeoutMs,
       options: connectionOptions,
-      ssl: sslConfig
+      ssl: sslConfig,
+      onPoolCreated: (pool) => {
+        if (process.env.OM_DB_POOL_DEBUG === "1" || process.env.OM_INTEGRATION_TEST === "true") {
+          console.log("[orm] pg pool created with options", {
+            max: pool.options?.max,
+            min: pool.options?.min,
+            idleTimeoutMillis: pool.options?.idleTimeoutMillis,
+            connectionTimeoutMillis: pool.options?.connectionTimeoutMillis
+          });
+        }
+      }
     }
   });
   return ormInstance;

package/dist/lib/db/mikro.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/db/mikro.ts"],
-  "sourcesContent": ["import 'dotenv/config'\nimport 'reflect-metadata'\nimport { MikroORM } from '@mikro-orm/core'\nimport { ReflectMetadataProvider } from '@mikro-orm/decorators/legacy'\nimport { PostgreSqlDriver, type EntityManager as PostgreSqlEntityManager } from '@mikro-orm/postgresql'\nimport { getSslConfig } from './ssl'\n\nexport type AppMikroORM = MikroORM<PostgreSqlDriver, PostgreSqlEntityManager<PostgreSqlDriver>>\n\nlet ormInstance: AppMikroORM | null = null\n\n// Use globalThis so standalone apps survive duplicated shared package module instances.\nconst GLOBAL_ENTITIES_KEY = '__openMercatoOrmEntities__'\n\nfunction getRegisteredEntities(): any[] | null {\n  return (globalThis as Record<string, unknown>)[GLOBAL_ENTITIES_KEY] as any[] | null ?? null\n}\n\nfunction setRegisteredEntities(entities: any[]): void {\n  (globalThis as Record<string, unknown>)[GLOBAL_ENTITIES_KEY] = entities\n}\n\nexport function registerOrmEntities(entities: any[]) {\n  if (getRegisteredEntities() !== null && process.env.NODE_ENV === 'development') {\n    console.debug('[Bootstrap] ORM entities re-registered (this may occur during HMR)')\n  }\n  setRegisteredEntities(entities)\n}\n\nexport function getOrmEntities(): any[] {\n  const entities = getRegisteredEntities()\n  if (!entities) {\n    throw new Error('[Bootstrap] ORM entities not registered. Call registerOrmEntities() at bootstrap.')\n  }\n  return entities\n}\n\nexport async function getOrm() {\n  if (ormInstance) {\n    return ormInstance\n  }\n\n  const entities = getOrmEntities()\n  const clientUrl = process.env.DATABASE_URL\n  if (!clientUrl) {\n    throw new Error('DATABASE_URL is not set')\n  }\n\n  // Parse connection pool settings from environment\n  const poolMin = parseInt(process.env.DB_POOL_MIN || '2')\n  const poolMax = parseInt(process.env.DB_POOL_MAX || '20')\n  const poolIdleTimeout = parseInt(process.env.DB_POOL_IDLE_TIMEOUT || '3000')\n  const poolAcquireTimeout = parseInt(process.env.DB_POOL_ACQUIRE_TIMEOUT || '6000')\n  const idleSessionTimeoutEnv = parseInt(process.env.DB_IDLE_SESSION_TIMEOUT_MS || '')\n  const idleInTxTimeoutEnv = parseInt(process.env.DB_IDLE_IN_TRANSACTION_TIMEOUT_MS || '')\n  const idleSessionTimeoutMs = Number.isFinite(idleSessionTimeoutEnv)\n    ? idleSessionTimeoutEnv\n    : process.env.NODE_ENV === 'production'\n      ? undefined\n      : 600_000\n  const idleInTransactionTimeoutMs = Number.isFinite(idleInTxTimeoutEnv)\n    ? idleInTxTimeoutEnv\n    : process.env.NODE_ENV === 'production'\n      ? undefined\n      : 120_000\n  const connectionOptions =\n    idleSessionTimeoutMs && idleSessionTimeoutMs > 0\n      ? `-c idle_session_timeout=${idleSessionTimeoutMs}`\n      : undefined\n\n  const sslConfig = getSslConfig()\n\n  ormInstance = await MikroORM.init<PostgreSqlDriver, PostgreSqlEntityManager<PostgreSqlDriver>>({\n    driver: PostgreSqlDriver,\n    clientUrl,\n    entities,\n    debug: false,\n    // v7 no longer defaults to ReflectMetadataProvider. Entities in this repo use\n    // `@mikro-orm/decorators/legacy`, which relies on TypeScript `emitDecoratorMetadata`\n    // + reflect-metadata for type inference (nullability, column types). Without this,\n    // inferred types are silently wrong at runtime.\n    metadataProvider: ReflectMetadataProvider,\n    // MikroORM v7 pool shape (min/max/idleTimeoutMillis). Knex-era `acquireTimeoutMillis` /\n    // `destroyTimeoutMillis` were removed; acquire wait maps to pg `connectionTimeoutMillis`\n    // below under `driverOptions`.\n    pool: {\n      min: poolMin,\n      max: poolMax,\n      idleTimeoutMillis: poolIdleTimeout,\n    },\n    // Driver options are merged into pg.PoolConfig (ClientConfig + pg-pool).\n    driverOptions: {\n      connectionTimeoutMillis: poolAcquireTimeout,\n      idle_in_transaction_session_timeout: idleInTransactionTimeoutMs,\n      options: connectionOptions,\n      ssl: sslConfig,\n    },\n  })\n\n  return ormInstance\n}\n\n\nasync function closeOrmIfLoaded(): Promise<void> {\n  if (ormInstance) {\n    await ormInstance.close(true)\n    ormInstance = null\n  }\n}\n\n// In dev mode, handle reloads cleanly without leaving dangling connections.\nif (process.env.NODE_ENV !== 'production') {\n  void closeOrmIfLoaded()\n}\n"],
-  "mappings": "AAAA,OAAO;AACP,OAAO;AACP,SAAS,gBAAgB;AACzB,SAAS,+BAA+B;AACxC,SAAS,wBAAuE;AAChF,SAAS,oBAAoB;AAI7B,IAAI,cAAkC;AAGtC,MAAM,sBAAsB;AAE5B,SAAS,wBAAsC;AAC7C,SAAQ,WAAuC,mBAAmB,KAAqB;AACzF;AAEA,SAAS,sBAAsB,UAAuB;AACpD,EAAC,WAAuC,mBAAmB,IAAI;AACjE;AAEO,SAAS,oBAAoB,UAAiB;AACnD,MAAI,sBAAsB,MAAM,QAAQ,QAAQ,IAAI,aAAa,eAAe;AAC9E,YAAQ,MAAM,oEAAoE;AAAA,EACpF;AACA,wBAAsB,QAAQ;AAChC;AAEO,SAAS,iBAAwB;AACtC,QAAM,WAAW,sBAAsB;AACvC,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,mFAAmF;AAAA,EACrG;AACA,SAAO;AACT;AAEA,eAAsB,SAAS;AAC7B,MAAI,aAAa;AACf,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,eAAe;AAChC,QAAM,YAAY,QAAQ,IAAI;AAC9B,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AAGA,QAAM,UAAU,SAAS,QAAQ,IAAI,eAAe,GAAG;AACvD,QAAM,UAAU,SAAS,QAAQ,IAAI,eAAe,IAAI;AACxD,QAAM,kBAAkB,SAAS,QAAQ,IAAI,wBAAwB,MAAM;AAC3E,QAAM,qBAAqB,SAAS,QAAQ,IAAI,2BAA2B,MAAM;AACjF,QAAM,wBAAwB,SAAS,QAAQ,IAAI,8BAA8B,EAAE;AACnF,QAAM,qBAAqB,SAAS,QAAQ,IAAI,qCAAqC,EAAE;AACvF,QAAM,uBAAuB,OAAO,SAAS,qBAAqB,IAC9D,wBACA,QAAQ,IAAI,aAAa,eACvB,SACA;AACN,QAAM,6BAA6B,OAAO,SAAS,kBAAkB,IACjE,qBACA,QAAQ,IAAI,aAAa,eACvB,SACA;AACN,QAAM,oBACJ,wBAAwB,uBAAuB,IAC3C,2BAA2B,oBAAoB,KAC/C;AAEN,QAAM,YAAY,aAAa;AAE/B,gBAAc,MAAM,SAAS,KAAkE;AAAA,IAC7F,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,IAKP,kBAAkB;AAAA;AAAA;AAAA;AAAA,IAIlB,MAAM;AAAA,MACJ,KAAK;AAAA,MACL,KAAK;AAAA,MACL,mBAAmB;AAAA,IACrB;AAAA;AAAA,IAEA,eAAe;AAAA,MACb,yBAAyB;AAAA,MACzB,qCAAqC;AAAA,MACrC,SAAS;AAAA,MACT,KAAK;AAAA,IACP;AAAA,EACF,CAAC;AAED,SAAO;AACT;AAGA,eAAe,mBAAkC;AAC/C,MAAI,aAAa;AACf,UAAM,YAAY,MAAM,IAAI;AAC5B,kBAAc;AAAA,EAChB;AACF;AAGA,IAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,OAAK,iBAAiB;AACxB;",
+  "sourcesContent": ["import 'dotenv/config'\nimport 'reflect-metadata'\nimport { MikroORM } from '@mikro-orm/core'\nimport { ReflectMetadataProvider } from '@mikro-orm/decorators/legacy'\nimport { PostgreSqlDriver, type EntityManager as PostgreSqlEntityManager } from '@mikro-orm/postgresql'\nimport { getSslConfig } from './ssl'\n\nexport type AppMikroORM = MikroORM<PostgreSqlDriver, PostgreSqlEntityManager<PostgreSqlDriver>>\n\nlet ormInstance: AppMikroORM | null = null\n\n// Use globalThis so standalone apps survive duplicated shared package module instances.\nconst GLOBAL_ENTITIES_KEY = '__openMercatoOrmEntities__'\n\nfunction getRegisteredEntities(): any[] | null {\n  return (globalThis as Record<string, unknown>)[GLOBAL_ENTITIES_KEY] as any[] | null ?? null\n}\n\nfunction setRegisteredEntities(entities: any[]): void {\n  (globalThis as Record<string, unknown>)[GLOBAL_ENTITIES_KEY] = entities\n}\n\nexport function registerOrmEntities(entities: any[]) {\n  if (getRegisteredEntities() !== null && process.env.NODE_ENV === 'development') {\n    console.debug('[Bootstrap] ORM entities re-registered (this may occur during HMR)')\n  }\n  setRegisteredEntities(entities)\n}\n\nexport function getOrmEntities(): any[] {\n  const entities = getRegisteredEntities()\n  if (!entities) {\n    throw new Error('[Bootstrap] ORM entities not registered. Call registerOrmEntities() at bootstrap.')\n  }\n  return entities\n}\n\nexport async function getOrm() {\n  if (ormInstance) {\n    return ormInstance\n  }\n\n  const entities = getOrmEntities()\n  const clientUrl = process.env.DATABASE_URL\n  if (!clientUrl) {\n    throw new Error('DATABASE_URL is not set')\n  }\n\n  // Parse connection pool settings from environment\n  const poolMin = parseInt(process.env.DB_POOL_MIN || '2')\n  const poolMax = parseInt(process.env.DB_POOL_MAX || '20')\n  const poolIdleTimeout = parseInt(process.env.DB_POOL_IDLE_TIMEOUT || '3000')\n  const poolAcquireTimeout = parseInt(process.env.DB_POOL_ACQUIRE_TIMEOUT || '6000')\n  const idleSessionTimeoutEnv = parseInt(process.env.DB_IDLE_SESSION_TIMEOUT_MS || '')\n  const idleInTxTimeoutEnv = parseInt(process.env.DB_IDLE_IN_TRANSACTION_TIMEOUT_MS || '')\n  const idleSessionTimeoutMs = Number.isFinite(idleSessionTimeoutEnv)\n    ? idleSessionTimeoutEnv\n    : process.env.NODE_ENV === 'production'\n      ? undefined\n      : 600_000\n  const idleInTransactionTimeoutMs = Number.isFinite(idleInTxTimeoutEnv)\n    ? idleInTxTimeoutEnv\n    : process.env.NODE_ENV === 'production'\n      ? undefined\n      : 120_000\n  const connectionOptions =\n    idleSessionTimeoutMs && idleSessionTimeoutMs > 0\n      ? `-c idle_session_timeout=${idleSessionTimeoutMs}`\n      : undefined\n\n  const sslConfig = getSslConfig()\n\n  if (process.env.OM_DB_POOL_DEBUG === '1' || process.env.OM_INTEGRATION_TEST === 'true') {\n    console.log('[orm] pool config', {\n      poolMin,\n      poolMax,\n      poolIdleTimeout,\n      poolAcquireTimeout,\n      idleSessionTimeoutMs,\n      idleInTransactionTimeoutMs,\n      nodeEnv: process.env.NODE_ENV,\n    })\n  }\n\n  ormInstance = await MikroORM.init<PostgreSqlDriver, PostgreSqlEntityManager<PostgreSqlDriver>>({\n    driver: PostgreSqlDriver,\n    clientUrl,\n    entities,\n    debug: false,\n    // v7 no longer defaults to ReflectMetadataProvider. Entities in this repo use\n    // `@mikro-orm/decorators/legacy`, which relies on TypeScript `emitDecoratorMetadata`\n    // + reflect-metadata for type inference (nullability, column types). Without this,\n    // inferred types are silently wrong at runtime.\n    metadataProvider: ReflectMetadataProvider,\n    // MikroORM v7 pool shape (min/max/idleTimeoutMillis). Knex-era `acquireTimeoutMillis` /\n    // `destroyTimeoutMillis` were removed; acquire wait maps to pg `connectionTimeoutMillis`\n    // below under `driverOptions`. Mirror `connectionTimeoutMillis` here too \u2014 older Mikro\n    // versions read it from `pool`; v7 reads from `driverOptions` but accepting both\n    // costs nothing and protects us from upstream config-merge regressions.\n    pool: {\n      min: poolMin,\n      max: poolMax,\n      idleTimeoutMillis: poolIdleTimeout,\n      acquireTimeoutMillis: poolAcquireTimeout,\n    } as any,\n    // Driver options are merged into pg.PoolConfig (ClientConfig + pg-pool).\n    driverOptions: {\n      connectionTimeoutMillis: poolAcquireTimeout,\n      idle_in_transaction_session_timeout: idleInTransactionTimeoutMs,\n      options: connectionOptions,\n      ssl: sslConfig,\n      onPoolCreated: (pool: any) => {\n        if (process.env.OM_DB_POOL_DEBUG === '1' || process.env.OM_INTEGRATION_TEST === 'true') {\n          console.log('[orm] pg pool created with options', {\n            max: pool.options?.max,\n            min: pool.options?.min,\n            idleTimeoutMillis: pool.options?.idleTimeoutMillis,\n            connectionTimeoutMillis: pool.options?.connectionTimeoutMillis,\n          })\n        }\n      },\n    },\n  })\n\n  return ormInstance\n}\n\n\nasync function closeOrmIfLoaded(): Promise<void> {\n  if (ormInstance) {\n    await ormInstance.close(true)\n    ormInstance = null\n  }\n}\n\n// In dev mode, handle reloads cleanly without leaving dangling connections.\nif (process.env.NODE_ENV !== 'production') {\n  void closeOrmIfLoaded()\n}\n"],
+  "mappings": "AAAA,OAAO;AACP,OAAO;AACP,SAAS,gBAAgB;AACzB,SAAS,+BAA+B;AACxC,SAAS,wBAAuE;AAChF,SAAS,oBAAoB;AAI7B,IAAI,cAAkC;AAGtC,MAAM,sBAAsB;AAE5B,SAAS,wBAAsC;AAC7C,SAAQ,WAAuC,mBAAmB,KAAqB;AACzF;AAEA,SAAS,sBAAsB,UAAuB;AACpD,EAAC,WAAuC,mBAAmB,IAAI;AACjE;AAEO,SAAS,oBAAoB,UAAiB;AACnD,MAAI,sBAAsB,MAAM,QAAQ,QAAQ,IAAI,aAAa,eAAe;AAC9E,YAAQ,MAAM,oEAAoE;AAAA,EACpF;AACA,wBAAsB,QAAQ;AAChC;AAEO,SAAS,iBAAwB;AACtC,QAAM,WAAW,sBAAsB;AACvC,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,mFAAmF;AAAA,EACrG;AACA,SAAO;AACT;AAEA,eAAsB,SAAS;AAC7B,MAAI,aAAa;AACf,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,eAAe;AAChC,QAAM,YAAY,QAAQ,IAAI;AAC9B,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AAGA,QAAM,UAAU,SAAS,QAAQ,IAAI,eAAe,GAAG;AACvD,QAAM,UAAU,SAAS,QAAQ,IAAI,eAAe,IAAI;AACxD,QAAM,kBAAkB,SAAS,QAAQ,IAAI,wBAAwB,MAAM;AAC3E,QAAM,qBAAqB,SAAS,QAAQ,IAAI,2BAA2B,MAAM;AACjF,QAAM,wBAAwB,SAAS,QAAQ,IAAI,8BAA8B,EAAE;AACnF,QAAM,qBAAqB,SAAS,QAAQ,IAAI,qCAAqC,EAAE;AACvF,QAAM,uBAAuB,OAAO,SAAS,qBAAqB,IAC9D,wBACA,QAAQ,IAAI,aAAa,eACvB,SACA;AACN,QAAM,6BAA6B,OAAO,SAAS,kBAAkB,IACjE,qBACA,QAAQ,IAAI,aAAa,eACvB,SACA;AACN,QAAM,oBACJ,wBAAwB,uBAAuB,IAC3C,2BAA2B,oBAAoB,KAC/C;AAEN,QAAM,YAAY,aAAa;AAE/B,MAAI,QAAQ,IAAI,qBAAqB,OAAO,QAAQ,IAAI,wBAAwB,QAAQ;AACtF,YAAQ,IAAI,qBAAqB;AAAA,MAC/B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,QAAQ,IAAI;AAAA,IACvB,CAAC;AAAA,EACH;AAEA,gBAAc,MAAM,SAAS,KAAkE;AAAA,IAC7F,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,IAKP,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMlB,MAAM;AAAA,MACJ,KAAK;AAAA,MACL,KAAK;AAAA,MACL,mBAAmB;AAAA,MACnB,sBAAsB;AAAA,IACxB;AAAA;AAAA,IAEA,eAAe;AAAA,MACb,yBAAyB;AAAA,MACzB,qCAAqC;AAAA,MACrC,SAAS;AAAA,MACT,KAAK;AAAA,MACL,eAAe,CAAC,SAAc;AAC5B,YAAI,QAAQ,IAAI,qBAAqB,OAAO,QAAQ,IAAI,wBAAwB,QAAQ;AACtF,kBAAQ,IAAI,sCAAsC;AAAA,YAChD,KAAK,KAAK,SAAS;AAAA,YACnB,KAAK,KAAK,SAAS;AAAA,YACnB,mBAAmB,KAAK,SAAS;AAAA,YACjC,yBAAyB,KAAK,SAAS;AAAA,UACzC,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO;AACT;AAGA,eAAe,mBAAkC;AAC/C,MAAI,aAAa;AACf,UAAM,YAAY,MAAM,IAAI;AAC5B,kBAAc;AAAA,EAChB;AACF;AAGA,IAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,OAAK,iBAAiB;AACxB;",
   "names": []
 }

package/dist/lib/di/container.js

@@ -4,6 +4,7 @@ import { getOrm } from "@open-mercato/shared/lib/db/mikro";
 import { BasicQueryEngine } from "@open-mercato/shared/lib/query/engine";
 import { DefaultDataEngine } from "@open-mercato/shared/lib/data/engine";
 import { commandRegistry, CommandBus } from "@open-mercato/shared/lib/commands";
+import { applyDiOverridesToContainer } from "@open-mercato/shared/modules/overrides";
 const GLOBAL_KEY = "__openMercatoDiRegistrars__";
 function getGlobalRegistrars() {
   return globalThis[GLOBAL_KEY] ?? null;
@@ -25,6 +26,17 @@ function getDiRegistrars() {
   }
   return registrars;
 }
+function isAwilixResolver(value) {
+  return Boolean(value && typeof value === "object" && typeof value.resolve === "function");
+}
+function toAwilixRegistrations(registrations) {
+  return Object.fromEntries(
+    Object.entries(registrations).map(([key, value]) => [
+      key,
+      isAwilixResolver(value) ? value : asValue(value)
+    ])
+  );
+}
 async function createRequestContainer() {
   const diRegistrars = getDiRegistrars();
   const orm = await getOrm();
@@ -71,6 +83,10 @@ async function createRequestContainer() {
     }
   } catch {
   }
+  applyDiOverridesToContainer({
+    register: (registrations) => container.register(toAwilixRegistrations(registrations)),
+    unregister: (key) => container.register({ [key]: asValue(void 0) })
+  });
   try {
     const emForEnc = container.resolve("em");
     const tenantEncryptionService = container.hasRegistration("tenantEncryptionService") ? container.resolve("tenantEncryptionService") : null;

package/dist/lib/di/container.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/di/container.ts"],
-  "sourcesContent": ["import { createContainer, asValue, AwilixContainer, InjectionMode } from 'awilix'\nimport { RequestContext } from '@mikro-orm/core'\nimport { getOrm } from '@open-mercato/shared/lib/db/mikro'\nimport { EntityManager } from '@mikro-orm/postgresql'\nimport { BasicQueryEngine } from '@open-mercato/shared/lib/query/engine'\nimport { DefaultDataEngine } from '@open-mercato/shared/lib/data/engine'\nimport { commandRegistry, CommandBus } from '@open-mercato/shared/lib/commands'\n\nexport type AppContainer = AwilixContainer\nexport type DiRegistrar = (container: AwilixContainer) => void\n\n// Registration pattern for publishable packages\n// Use globalThis to survive tsx/esbuild module duplication issue where the same\n// file can be loaded as multiple module instances when mixing dynamic and static imports\nconst GLOBAL_KEY = '__openMercatoDiRegistrars__'\n\nfunction getGlobalRegistrars(): DiRegistrar[] | null {\n  return (globalThis as any)[GLOBAL_KEY] ?? null\n}\n\nfunction setGlobalRegistrars(registrars: DiRegistrar[]): void {\n  (globalThis as any)[GLOBAL_KEY] = registrars\n}\n\nexport function registerDiRegistrars(registrars: DiRegistrar[]) {\n  const existing = getGlobalRegistrars()\n  if (existing !== null && process.env.NODE_ENV === 'development') {\n    console.debug('[Bootstrap] DI registrars re-registered (this may occur during HMR)')\n  }\n  setGlobalRegistrars(registrars)\n}\n\nexport function getDiRegistrars(): DiRegistrar[] {\n  const registrars = getGlobalRegistrars()\n  if (!registrars) {\n    throw new Error('[Bootstrap] DI registrars not registered. Call registerDiRegistrars() at bootstrap.')\n  }\n  return registrars\n}\n\nexport async function createRequestContainer(): Promise<AppContainer> {\n  const diRegistrars = getDiRegistrars()\n  const orm = await getOrm()\n  // Use a fresh event manager so request-level subscribers (e.g., encryption) don't pile up globally\n  const baseEm = (RequestContext.getEntityManager() as any) ?? orm.em\n  const em = baseEm.fork({ clear: true, freshEventManager: true, useContext: true }) as unknown as EntityManager\n  const container = createContainer({ injectionMode: InjectionMode.CLASSIC })\n  // Core registrations\n  container.register({\n    em: asValue(em),\n    queryEngine: asValue(new BasicQueryEngine(em, undefined, () => {\n      try { return container.resolve('tenantEncryptionService') as any } catch { return null }\n    })),\n    dataEngine: asValue(new DefaultDataEngine(em, container as any)),\n    commandRegistry: asValue(commandRegistry),\n    commandBus: asValue(new CommandBus()),\n  })\n  // Allow modules to override/extend\n  for (const reg of diRegistrars) {\n    try { reg?.(container) } catch {}\n  }\n  // Core bootstrap (cache, event bus, encryption subscriber/KMS, module subscribers)\n  try {\n    const { bootstrap } = await import('@open-mercato/core/bootstrap') as any\n    if (bootstrap && typeof bootstrap === 'function') {\n      // Avoid double bootstrap if caller already wired it\n      const alreadyBootstrapped = !!container.registrations?.eventBus\n      if (!alreadyBootstrapped) {\n        await bootstrap(container)\n      }\n    }\n  } catch { /* optional */ }\n  // App-level DI override (last chance)\n  // This import path resolves only in the app context, not in packages\n  try {\n    // @ts-ignore - @/di only exists in app context, not in packages\n    const appDi = await import('@/di') as any\n    if (appDi?.register) {\n      try {\n        const maybe = appDi.register(container)\n        if (maybe && typeof maybe.then === 'function') await maybe\n      } catch {}\n    }\n  } catch {}\n  // Ensure tenant encryption subscriber is always registered on the fresh request-scoped EM\n  try {\n    const emForEnc = container.resolve('em') as any\n    const tenantEncryptionService = container.hasRegistration('tenantEncryptionService')\n      ? (container.resolve('tenantEncryptionService') as any)\n      : null\n    if (emForEnc && tenantEncryptionService?.isEnabled?.()) {\n      const { registerTenantEncryptionSubscriber } = await import('@open-mercato/shared/lib/encryption/subscriber')\n      registerTenantEncryptionSubscriber(emForEnc, tenantEncryptionService)\n    }\n  } catch {\n    // best-effort; do not block container creation\n  }\n  return container\n}\ntry {\n  // eslint-disable-next-line @typescript-eslint/no-var-requires\n  require('server-only')\n} catch {\n  // allow CLI/generator usage where Next server-only is not present\n}\n"],
-  "mappings": "AAAA,SAAS,iBAAiB,SAA0B,qBAAqB;AACzE,SAAS,sBAAsB;AAC/B,SAAS,cAAc;AAEvB,SAAS,wBAAwB;AACjC,SAAS,yBAAyB;AAClC,SAAS,iBAAiB,kBAAkB;AAQ5C,MAAM,aAAa;AAEnB,SAAS,sBAA4C;AACnD,SAAQ,WAAmB,UAAU,KAAK;AAC5C;AAEA,SAAS,oBAAoB,YAAiC;AAC5D,EAAC,WAAmB,UAAU,IAAI;AACpC;AAEO,SAAS,qBAAqB,YAA2B;AAC9D,QAAM,WAAW,oBAAoB;AACrC,MAAI,aAAa,QAAQ,QAAQ,IAAI,aAAa,eAAe;AAC/D,YAAQ,MAAM,qEAAqE;AAAA,EACrF;AACA,sBAAoB,UAAU;AAChC;AAEO,SAAS,kBAAiC;AAC/C,QAAM,aAAa,oBAAoB;AACvC,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,MAAM,qFAAqF;AAAA,EACvG;AACA,SAAO;AACT;AAEA,eAAsB,yBAAgD;AACpE,QAAM,eAAe,gBAAgB;AACrC,QAAM,MAAM,MAAM,OAAO;AAEzB,QAAM,SAAU,eAAe,iBAAiB,KAAa,IAAI;AACjE,QAAM,KAAK,OAAO,KAAK,EAAE,OAAO,MAAM,mBAAmB,MAAM,YAAY,KAAK,CAAC;AACjF,QAAM,YAAY,gBAAgB,EAAE,eAAe,cAAc,QAAQ,CAAC;AAE1E,YAAU,SAAS;AAAA,IACjB,IAAI,QAAQ,EAAE;AAAA,IACd,aAAa,QAAQ,IAAI,iBAAiB,IAAI,QAAW,MAAM;AAC7D,UAAI;AAAE,eAAO,UAAU,QAAQ,yBAAyB;AAAA,MAAS,QAAQ;AAAE,eAAO;AAAA,MAAK;AAAA,IACzF,CAAC,CAAC;AAAA,IACF,YAAY,QAAQ,IAAI,kBAAkB,IAAI,SAAgB,CAAC;AAAA,IAC/D,iBAAiB,QAAQ,eAAe;AAAA,IACxC,YAAY,QAAQ,IAAI,WAAW,CAAC;AAAA,EACtC,CAAC;AAED,aAAW,OAAO,cAAc;AAC9B,QAAI;AAAE,YAAM,SAAS;AAAA,IAAE,QAAQ;AAAA,IAAC;AAAA,EAClC;AAEA,MAAI;AACF,UAAM,EAAE,UAAU,IAAI,MAAM,OAAO,8BAA8B;AACjE,QAAI,aAAa,OAAO,cAAc,YAAY;AAEhD,YAAM,sBAAsB,CAAC,CAAC,UAAU,eAAe;AACvD,UAAI,CAAC,qBAAqB;AACxB,cAAM,UAAU,SAAS;AAAA,MAC3B;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAAiB;AAGzB,MAAI;AAEF,UAAM,QAAQ,MAAM,OAAO,MAAM;AACjC,QAAI,OAAO,UAAU;AACnB,UAAI;AACF,cAAM,QAAQ,MAAM,SAAS,SAAS;AACtC,YAAI,SAAS,OAAO,MAAM,SAAS,WAAY,OAAM;AAAA,MACvD,QAAQ;AAAA,MAAC;AAAA,IACX;AAAA,EACF,QAAQ;AAAA,EAAC;AAET,MAAI;AACF,UAAM,WAAW,UAAU,QAAQ,IAAI;AACvC,UAAM,0BAA0B,UAAU,gBAAgB,yBAAyB,IAC9E,UAAU,QAAQ,yBAAyB,IAC5C;AACJ,QAAI,YAAY,yBAAyB,YAAY,GAAG;AACtD,YAAM,EAAE,mCAAmC,IAAI,MAAM,OAAO,gDAAgD;AAC5G,yCAAmC,UAAU,uBAAuB;AAAA,IACtE;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AACA,IAAI;AAEF,UAAQ,aAAa;AACvB,QAAQ;AAER;",
+  "sourcesContent": ["import { createContainer, asValue, AwilixContainer, InjectionMode, type Resolver } from 'awilix'\nimport { RequestContext } from '@mikro-orm/core'\nimport { getOrm } from '@open-mercato/shared/lib/db/mikro'\nimport { EntityManager } from '@mikro-orm/postgresql'\nimport { BasicQueryEngine } from '@open-mercato/shared/lib/query/engine'\nimport { DefaultDataEngine } from '@open-mercato/shared/lib/data/engine'\nimport { commandRegistry, CommandBus } from '@open-mercato/shared/lib/commands'\nimport { applyDiOverridesToContainer } from '@open-mercato/shared/modules/overrides'\n\ntype DynamicCradle = Record<string, any>\n\nexport type AppContainer = AwilixContainer<DynamicCradle>\nexport type DiRegistrar = (container: AppContainer) => void\n\n// Registration pattern for publishable packages\n// Use globalThis to survive tsx/esbuild module duplication issue where the same\n// file can be loaded as multiple module instances when mixing dynamic and static imports\nconst GLOBAL_KEY = '__openMercatoDiRegistrars__'\n\nfunction getGlobalRegistrars(): DiRegistrar[] | null {\n  return (globalThis as any)[GLOBAL_KEY] ?? null\n}\n\nfunction setGlobalRegistrars(registrars: DiRegistrar[]): void {\n  (globalThis as any)[GLOBAL_KEY] = registrars\n}\n\nexport function registerDiRegistrars(registrars: DiRegistrar[]) {\n  const existing = getGlobalRegistrars()\n  if (existing !== null && process.env.NODE_ENV === 'development') {\n    console.debug('[Bootstrap] DI registrars re-registered (this may occur during HMR)')\n  }\n  setGlobalRegistrars(registrars)\n}\n\nexport function getDiRegistrars(): DiRegistrar[] {\n  const registrars = getGlobalRegistrars()\n  if (!registrars) {\n    throw new Error('[Bootstrap] DI registrars not registered. Call registerDiRegistrars() at bootstrap.')\n  }\n  return registrars\n}\n\nfunction isAwilixResolver(value: unknown): value is Resolver<unknown> {\n  return Boolean(value && typeof value === 'object' && typeof (value as { resolve?: unknown }).resolve === 'function')\n}\n\nfunction toAwilixRegistrations(registrations: Record<string, unknown>): Record<string, Resolver<any>> {\n  return Object.fromEntries(\n    Object.entries(registrations).map(([key, value]) => [\n      key,\n      isAwilixResolver(value) ? value : asValue(value),\n    ]),\n  )\n}\n\nexport async function createRequestContainer(): Promise<AppContainer> {\n  const diRegistrars = getDiRegistrars()\n  const orm = await getOrm()\n  // Use a fresh event manager so request-level subscribers (e.g., encryption) don't pile up globally\n  const baseEm = (RequestContext.getEntityManager() as any) ?? orm.em\n  const em = baseEm.fork({ clear: true, freshEventManager: true, useContext: true }) as unknown as EntityManager\n  const container = createContainer<DynamicCradle>({ injectionMode: InjectionMode.CLASSIC })\n  // Core registrations\n  container.register({\n    em: asValue(em),\n    queryEngine: asValue(new BasicQueryEngine(em, undefined, () => {\n      try { return container.resolve('tenantEncryptionService') as any } catch { return null }\n    })),\n    dataEngine: asValue(new DefaultDataEngine(em, container as any)),\n    commandRegistry: asValue(commandRegistry),\n    commandBus: asValue(new CommandBus()),\n  })\n  // Allow modules to override/extend\n  for (const reg of diRegistrars) {\n    try { reg?.(container) } catch {}\n  }\n  // Core bootstrap (cache, event bus, encryption subscriber/KMS, module subscribers)\n  try {\n    const { bootstrap } = await import('@open-mercato/core/bootstrap') as any\n    if (bootstrap && typeof bootstrap === 'function') {\n      // Avoid double bootstrap if caller already wired it\n      const alreadyBootstrapped = !!container.registrations?.eventBus\n      if (!alreadyBootstrapped) {\n        await bootstrap(container)\n      }\n    }\n  } catch { /* optional */ }\n  // App-level DI override (last chance)\n  // This import path resolves only in the app context, not in packages\n  try {\n    // @ts-ignore - @/di only exists in app context, not in packages\n    const appDi = await import('@/di') as any\n    if (appDi?.register) {\n      try {\n        const maybe = appDi.register(container)\n        if (maybe && typeof maybe.then === 'function') await maybe\n      } catch {}\n    }\n  } catch {}\n  applyDiOverridesToContainer({\n    register: (registrations) => container.register(toAwilixRegistrations(registrations)),\n    unregister: (key) => container.register({ [key]: asValue(undefined) }),\n  })\n  // Ensure tenant encryption subscriber is always registered on the fresh request-scoped EM\n  try {\n    const emForEnc = container.resolve('em') as any\n    const tenantEncryptionService = container.hasRegistration('tenantEncryptionService')\n      ? (container.resolve('tenantEncryptionService') as any)\n      : null\n    if (emForEnc && tenantEncryptionService?.isEnabled?.()) {\n      const { registerTenantEncryptionSubscriber } = await import('@open-mercato/shared/lib/encryption/subscriber')\n      registerTenantEncryptionSubscriber(emForEnc, tenantEncryptionService)\n    }\n  } catch {\n    // best-effort; do not block container creation\n  }\n  return container\n}\ntry {\n  // eslint-disable-next-line @typescript-eslint/no-var-requires\n  require('server-only')\n} catch {\n  // allow CLI/generator usage where Next server-only is not present\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB,SAA0B,qBAAoC;AACxF,SAAS,sBAAsB;AAC/B,SAAS,cAAc;AAEvB,SAAS,wBAAwB;AACjC,SAAS,yBAAyB;AAClC,SAAS,iBAAiB,kBAAkB;AAC5C,SAAS,mCAAmC;AAU5C,MAAM,aAAa;AAEnB,SAAS,sBAA4C;AACnD,SAAQ,WAAmB,UAAU,KAAK;AAC5C;AAEA,SAAS,oBAAoB,YAAiC;AAC5D,EAAC,WAAmB,UAAU,IAAI;AACpC;AAEO,SAAS,qBAAqB,YAA2B;AAC9D,QAAM,WAAW,oBAAoB;AACrC,MAAI,aAAa,QAAQ,QAAQ,IAAI,aAAa,eAAe;AAC/D,YAAQ,MAAM,qEAAqE;AAAA,EACrF;AACA,sBAAoB,UAAU;AAChC;AAEO,SAAS,kBAAiC;AAC/C,QAAM,aAAa,oBAAoB;AACvC,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,MAAM,qFAAqF;AAAA,EACvG;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,OAA4C;AACpE,SAAO,QAAQ,SAAS,OAAO,UAAU,YAAY,OAAQ,MAAgC,YAAY,UAAU;AACrH;AAEA,SAAS,sBAAsB,eAAuE;AACpG,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQ,aAAa,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM;AAAA,MAClD;AAAA,MACA,iBAAiB,KAAK,IAAI,QAAQ,QAAQ,KAAK;AAAA,IACjD,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,yBAAgD;AACpE,QAAM,eAAe,gBAAgB;AACrC,QAAM,MAAM,MAAM,OAAO;AAEzB,QAAM,SAAU,eAAe,iBAAiB,KAAa,IAAI;AACjE,QAAM,KAAK,OAAO,KAAK,EAAE,OAAO,MAAM,mBAAmB,MAAM,YAAY,KAAK,CAAC;AACjF,QAAM,YAAY,gBAA+B,EAAE,eAAe,cAAc,QAAQ,CAAC;AAEzF,YAAU,SAAS;AAAA,IACjB,IAAI,QAAQ,EAAE;AAAA,IACd,aAAa,QAAQ,IAAI,iBAAiB,IAAI,QAAW,MAAM;AAC7D,UAAI;AAAE,eAAO,UAAU,QAAQ,yBAAyB;AAAA,MAAS,QAAQ;AAAE,eAAO;AAAA,MAAK;AAAA,IACzF,CAAC,CAAC;AAAA,IACF,YAAY,QAAQ,IAAI,kBAAkB,IAAI,SAAgB,CAAC;AAAA,IAC/D,iBAAiB,QAAQ,eAAe;AAAA,IACxC,YAAY,QAAQ,IAAI,WAAW,CAAC;AAAA,EACtC,CAAC;AAED,aAAW,OAAO,cAAc;AAC9B,QAAI;AAAE,YAAM,SAAS;AAAA,IAAE,QAAQ;AAAA,IAAC;AAAA,EAClC;AAEA,MAAI;AACF,UAAM,EAAE,UAAU,IAAI,MAAM,OAAO,8BAA8B;AACjE,QAAI,aAAa,OAAO,cAAc,YAAY;AAEhD,YAAM,sBAAsB,CAAC,CAAC,UAAU,eAAe;AACvD,UAAI,CAAC,qBAAqB;AACxB,cAAM,UAAU,SAAS;AAAA,MAC3B;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAAiB;AAGzB,MAAI;AAEF,UAAM,QAAQ,MAAM,OAAO,MAAM;AACjC,QAAI,OAAO,UAAU;AACnB,UAAI;AACF,cAAM,QAAQ,MAAM,SAAS,SAAS;AACtC,YAAI,SAAS,OAAO,MAAM,SAAS,WAAY,OAAM;AAAA,MACvD,QAAQ;AAAA,MAAC;AAAA,IACX;AAAA,EACF,QAAQ;AAAA,EAAC;AACT,8BAA4B;AAAA,IAC1B,UAAU,CAAC,kBAAkB,UAAU,SAAS,sBAAsB,aAAa,CAAC;AAAA,IACpF,YAAY,CAAC,QAAQ,UAAU,SAAS,EAAE,CAAC,GAAG,GAAG,QAAQ,MAAS,EAAE,CAAC;AAAA,EACvE,CAAC;AAED,MAAI;AACF,UAAM,WAAW,UAAU,QAAQ,IAAI;AACvC,UAAM,0BAA0B,UAAU,gBAAgB,yBAAyB,IAC9E,UAAU,QAAQ,yBAAyB,IAC5C;AACJ,QAAI,YAAY,yBAAyB,YAAY,GAAG;AACtD,YAAM,EAAE,mCAAmC,IAAI,MAAM,OAAO,gDAAgD;AAC5G,yCAAmC,UAAU,uBAAuB;AAAA,IACtE;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AACA,IAAI;AAEF,UAAQ,aAAa;AACvB,QAAQ;AAER;",
   "names": []
 }

package/dist/lib/events/patterns.js

@@ -1,12 +1,4 @@
-const singleSegmentPatternCache = /* @__PURE__ */ new Map();
-function getSingleSegmentPatternRegex(pattern) {
-  const existing = singleSegmentPatternCache.get(pattern);
-  if (existing) return existing;
-  const regexPattern = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, "[^.]+");
-  const compiled = new RegExp(`^${regexPattern}$`);
-  singleSegmentPatternCache.set(pattern, compiled);
-  return compiled;
-}
+import { matchWildcardPattern } from "@open-mercato/shared/lib/patterns/wildcard";
 function matchEventPattern(eventName, pattern, options) {
   const mode = options?.mode ?? "single-segment";
   if (pattern === "*") return true;
@@ -23,7 +15,7 @@ function matchEventPattern(eventName, pattern, options) {
     }
     return false;
   }
-  return getSingleSegmentPatternRegex(pattern).test(eventName);
+  return matchWildcardPattern(eventName, pattern, { singleSegmentWildcard: true });
 }
 function matchAnyEventPattern(eventName, patterns, options) {
   for (const pattern of patterns) {

package/dist/lib/events/patterns.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/events/patterns.ts"],
-  "sourcesContent": ["export type EventPatternMode = 'single-segment' | 'prefix'\n\ntype MatchEventPatternOptions = {\n  mode?: EventPatternMode\n}\n\nconst singleSegmentPatternCache = new Map<string, RegExp>()\n\nfunction getSingleSegmentPatternRegex(pattern: string): RegExp {\n  const existing = singleSegmentPatternCache.get(pattern)\n  if (existing) return existing\n\n  const regexPattern = pattern\n    .replace(/[.+^${}()|[\\]\\\\]/g, '\\\\$&')\n    .replace(/\\*/g, '[^.]+')\n\n  const compiled = new RegExp(`^${regexPattern}$`)\n  singleSegmentPatternCache.set(pattern, compiled)\n  return compiled\n}\n\nexport function matchEventPattern(\n  eventName: string,\n  pattern: string,\n  options?: MatchEventPatternOptions,\n): boolean {\n  const mode = options?.mode ?? 'single-segment'\n\n  if (pattern === '*') return true\n  if (pattern === eventName) return true\n  if (!pattern.includes('*')) return false\n\n  if (mode === 'prefix') {\n    if (pattern.endsWith('.*')) {\n      const prefix = pattern.slice(0, -2)\n      return eventName.startsWith(prefix + '.')\n    }\n\n    if (pattern.endsWith('*')) {\n      const prefix = pattern.slice(0, -1)\n      return eventName.startsWith(prefix)\n    }\n\n    return false\n  }\n\n  return getSingleSegmentPatternRegex(pattern).test(eventName)\n}\n\nexport function matchAnyEventPattern(\n  eventName: string,\n  patterns: Iterable<string>,\n  options?: MatchEventPatternOptions,\n): boolean {\n  for (const pattern of patterns) {\n    if (matchEventPattern(eventName, pattern, options)) {\n      return true\n    }\n  }\n\n  return false\n}\n\nexport function matchWebhookEventPattern(eventName: string, pattern: string): boolean {\n  return matchEventPattern(eventName, pattern, { mode: 'prefix' })\n}\n\nexport function matchAnyWebhookEventPattern(eventName: string, patterns: Iterable<string>): boolean {\n  return matchAnyEventPattern(eventName, patterns, { mode: 'prefix' })\n}\n"],
-  "mappings": "AAMA,MAAM,4BAA4B,oBAAI,IAAoB;AAE1D,SAAS,6BAA6B,SAAyB;AAC7D,QAAM,WAAW,0BAA0B,IAAI,OAAO;AACtD,MAAI,SAAU,QAAO;AAErB,QAAM,eAAe,QAClB,QAAQ,qBAAqB,MAAM,EACnC,QAAQ,OAAO,OAAO;AAEzB,QAAM,WAAW,IAAI,OAAO,IAAI,YAAY,GAAG;AAC/C,4BAA0B,IAAI,SAAS,QAAQ;AAC/C,SAAO;AACT;AAEO,SAAS,kBACd,WACA,SACA,SACS;AACT,QAAM,OAAO,SAAS,QAAQ;AAE9B,MAAI,YAAY,IAAK,QAAO;AAC5B,MAAI,YAAY,UAAW,QAAO;AAClC,MAAI,CAAC,QAAQ,SAAS,GAAG,EAAG,QAAO;AAEnC,MAAI,SAAS,UAAU;AACrB,QAAI,QAAQ,SAAS,IAAI,GAAG;AAC1B,YAAM,SAAS,QAAQ,MAAM,GAAG,EAAE;AAClC,aAAO,UAAU,WAAW,SAAS,GAAG;AAAA,IAC1C;AAEA,QAAI,QAAQ,SAAS,GAAG,GAAG;AACzB,YAAM,SAAS,QAAQ,MAAM,GAAG,EAAE;AAClC,aAAO,UAAU,WAAW,MAAM;AAAA,IACpC;AAEA,WAAO;AAAA,EACT;AAEA,SAAO,6BAA6B,OAAO,EAAE,KAAK,SAAS;AAC7D;AAEO,SAAS,qBACd,WACA,UACA,SACS;AACT,aAAW,WAAW,UAAU;AAC9B,QAAI,kBAAkB,WAAW,SAAS,OAAO,GAAG;AAClD,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;AAEO,SAAS,yBAAyB,WAAmB,SAA0B;AACpF,SAAO,kBAAkB,WAAW,SAAS,EAAE,MAAM,SAAS,CAAC;AACjE;AAEO,SAAS,4BAA4B,WAAmB,UAAqC;AAClG,SAAO,qBAAqB,WAAW,UAAU,EAAE,MAAM,SAAS,CAAC;AACrE;",
+  "sourcesContent": ["import { matchWildcardPattern } from '@open-mercato/shared/lib/patterns/wildcard'\n\nexport type EventPatternMode = 'single-segment' | 'prefix'\n\ntype MatchEventPatternOptions = {\n  mode?: EventPatternMode\n}\n\nexport function matchEventPattern(\n  eventName: string,\n  pattern: string,\n  options?: MatchEventPatternOptions,\n): boolean {\n  const mode = options?.mode ?? 'single-segment'\n\n  if (pattern === '*') return true\n  if (pattern === eventName) return true\n  if (!pattern.includes('*')) return false\n\n  if (mode === 'prefix') {\n    if (pattern.endsWith('.*')) {\n      const prefix = pattern.slice(0, -2)\n      return eventName.startsWith(prefix + '.')\n    }\n\n    if (pattern.endsWith('*')) {\n      const prefix = pattern.slice(0, -1)\n      return eventName.startsWith(prefix)\n    }\n\n    return false\n  }\n\n  return matchWildcardPattern(eventName, pattern, { singleSegmentWildcard: true })\n}\n\nexport function matchAnyEventPattern(\n  eventName: string,\n  patterns: Iterable<string>,\n  options?: MatchEventPatternOptions,\n): boolean {\n  for (const pattern of patterns) {\n    if (matchEventPattern(eventName, pattern, options)) {\n      return true\n    }\n  }\n\n  return false\n}\n\nexport function matchWebhookEventPattern(eventName: string, pattern: string): boolean {\n  return matchEventPattern(eventName, pattern, { mode: 'prefix' })\n}\n\nexport function matchAnyWebhookEventPattern(eventName: string, patterns: Iterable<string>): boolean {\n  return matchAnyEventPattern(eventName, patterns, { mode: 'prefix' })\n}\n"],
+  "mappings": "AAAA,SAAS,4BAA4B;AAQ9B,SAAS,kBACd,WACA,SACA,SACS;AACT,QAAM,OAAO,SAAS,QAAQ;AAE9B,MAAI,YAAY,IAAK,QAAO;AAC5B,MAAI,YAAY,UAAW,QAAO;AAClC,MAAI,CAAC,QAAQ,SAAS,GAAG,EAAG,QAAO;AAEnC,MAAI,SAAS,UAAU;AACrB,QAAI,QAAQ,SAAS,IAAI,GAAG;AAC1B,YAAM,SAAS,QAAQ,MAAM,GAAG,EAAE;AAClC,aAAO,UAAU,WAAW,SAAS,GAAG;AAAA,IAC1C;AAEA,QAAI,QAAQ,SAAS,GAAG,GAAG;AACzB,YAAM,SAAS,QAAQ,MAAM,GAAG,EAAE;AAClC,aAAO,UAAU,WAAW,MAAM;AAAA,IACpC;AAEA,WAAO;AAAA,EACT;AAEA,SAAO,qBAAqB,WAAW,SAAS,EAAE,uBAAuB,KAAK,CAAC;AACjF;AAEO,SAAS,qBACd,WACA,UACA,SACS;AACT,aAAW,WAAW,UAAU;AAC9B,QAAI,kBAAkB,WAAW,SAAS,OAAO,GAAG;AAClD,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;AAEO,SAAS,yBAAyB,WAAmB,SAA0B;AACpF,SAAO,kBAAkB,WAAW,SAAS,EAAE,MAAM,SAAS,CAAC;AACjE;AAEO,SAAS,4BAA4B,WAAmB,UAAqC;AAClG,SAAO,qBAAqB,WAAW,UAAU,EAAE,MAAM,SAAS,CAAC;AACrE;",
   "names": []
 }

package/dist/lib/middleware/page-executor.js

@@ -1,4 +1,5 @@
 import { CONTINUE_PAGE_MIDDLEWARE, matchPageMiddlewareTarget } from "@open-mercato/shared/modules/middleware/page";
+import { applyPageGuardOverridesToEntries } from "@open-mercato/shared/modules/overrides";
 const DEFAULT_PRIORITY = 100;
 function shouldRunMiddleware(middleware, mode, pathname) {
   if (middleware.mode && middleware.mode !== mode) return false;
@@ -10,7 +11,7 @@ function compareMiddleware(a, b) {
   return a.id.localeCompare(b.id);
 }
 function flattenAndSortMiddleware(entries, mode, pathname) {
-  return entries.flatMap((entry) => entry.middleware).filter((middleware) => shouldRunMiddleware(middleware, mode, pathname)).sort(compareMiddleware);
+  return applyPageGuardOverridesToEntries(entries).flatMap((entry) => entry.middleware).filter((middleware) => shouldRunMiddleware(middleware, mode, pathname)).sort(compareMiddleware);
 }
 async function executePageMiddleware(args) {
   const { entries, context, onError } = args;

package/dist/lib/middleware/page-executor.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/middleware/page-executor.ts"],
-  "sourcesContent": ["import type {\n  PageMiddlewareContext,\n  PageMiddlewareMode,\n  PageMiddlewareRegistryEntry,\n  PageMiddlewareResult,\n  PageRouteMiddleware,\n} from '@open-mercato/shared/modules/middleware/page'\nimport { CONTINUE_PAGE_MIDDLEWARE, matchPageMiddlewareTarget } from '@open-mercato/shared/modules/middleware/page'\n\ntype ExecutePageMiddlewareArgs = {\n  entries: PageMiddlewareRegistryEntry[]\n  context: PageMiddlewareContext\n  onError?: (error: unknown, middleware: Pick<PageRouteMiddleware, 'id' | 'priority'>) => void\n}\n\nconst DEFAULT_PRIORITY = 100\n\nfunction shouldRunMiddleware(middleware: PageRouteMiddleware, mode: PageMiddlewareMode, pathname: string): boolean {\n  if (middleware.mode && middleware.mode !== mode) return false\n  return matchPageMiddlewareTarget(pathname, middleware.target)\n}\n\nfunction compareMiddleware(a: PageRouteMiddleware, b: PageRouteMiddleware): number {\n  const priorityDiff = (a.priority ?? DEFAULT_PRIORITY) - (b.priority ?? DEFAULT_PRIORITY)\n  if (priorityDiff !== 0) return priorityDiff\n  return a.id.localeCompare(b.id)\n}\n\nfunction flattenAndSortMiddleware(\n  entries: PageMiddlewareRegistryEntry[],\n  mode: PageMiddlewareMode,\n  pathname: string\n): PageRouteMiddleware[] {\n  return entries\n    .flatMap((entry) => entry.middleware)\n    .filter((middleware) => shouldRunMiddleware(middleware, mode, pathname))\n    .sort(compareMiddleware)\n}\n\nexport async function executePageMiddleware(args: ExecutePageMiddlewareArgs): Promise<PageMiddlewareResult> {\n  const { entries, context, onError } = args\n  const matchedMiddleware = flattenAndSortMiddleware(entries, context.mode, context.pathname)\n  for (const middleware of matchedMiddleware) {\n    try {\n      const result = await middleware.run(context)\n      if (result.action === 'redirect') return result\n    } catch (error) {\n      if (onError) {\n        onError(error, { id: middleware.id, priority: middleware.priority })\n      } else {\n        console.error('[middleware:page] execution failed', { id: middleware.id, error })\n      }\n      throw error\n    }\n  }\n  return CONTINUE_PAGE_MIDDLEWARE\n}\n\nexport async function resolvePageMiddlewareRedirect(args: ExecutePageMiddlewareArgs): Promise<string | null> {\n  const result = await executePageMiddleware(args)\n  if (result.action !== 'redirect') return null\n  return result.location\n}\n"],
-  "mappings": "AAOA,SAAS,0BAA0B,iCAAiC;AAQpE,MAAM,mBAAmB;AAEzB,SAAS,oBAAoB,YAAiC,MAA0B,UAA2B;AACjH,MAAI,WAAW,QAAQ,WAAW,SAAS,KAAM,QAAO;AACxD,SAAO,0BAA0B,UAAU,WAAW,MAAM;AAC9D;AAEA,SAAS,kBAAkB,GAAwB,GAAgC;AACjF,QAAM,gBAAgB,EAAE,YAAY,qBAAqB,EAAE,YAAY;AACvE,MAAI,iBAAiB,EAAG,QAAO;AAC/B,SAAO,EAAE,GAAG,cAAc,EAAE,EAAE;AAChC;AAEA,SAAS,yBACP,SACA,MACA,UACuB;AACvB,SAAO,QACJ,QAAQ,CAAC,UAAU,MAAM,UAAU,EACnC,OAAO,CAAC,eAAe,oBAAoB,YAAY,MAAM,QAAQ,CAAC,EACtE,KAAK,iBAAiB;AAC3B;AAEA,eAAsB,sBAAsB,MAAgE;AAC1G,QAAM,EAAE,SAAS,SAAS,QAAQ,IAAI;AACtC,QAAM,oBAAoB,yBAAyB,SAAS,QAAQ,MAAM,QAAQ,QAAQ;AAC1F,aAAW,cAAc,mBAAmB;AAC1C,QAAI;AACF,YAAM,SAAS,MAAM,WAAW,IAAI,OAAO;AAC3C,UAAI,OAAO,WAAW,WAAY,QAAO;AAAA,IAC3C,SAAS,OAAO;AACd,UAAI,SAAS;AACX,gBAAQ,OAAO,EAAE,IAAI,WAAW,IAAI,UAAU,WAAW,SAAS,CAAC;AAAA,MACrE,OAAO;AACL,gBAAQ,MAAM,sCAAsC,EAAE,IAAI,WAAW,IAAI,MAAM,CAAC;AAAA,MAClF;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,8BAA8B,MAAyD;AAC3G,QAAM,SAAS,MAAM,sBAAsB,IAAI;AAC/C,MAAI,OAAO,WAAW,WAAY,QAAO;AACzC,SAAO,OAAO;AAChB;",
+  "sourcesContent": ["import type {\n  PageMiddlewareContext,\n  PageMiddlewareMode,\n  PageMiddlewareRegistryEntry,\n  PageMiddlewareResult,\n  PageRouteMiddleware,\n} from '@open-mercato/shared/modules/middleware/page'\nimport { CONTINUE_PAGE_MIDDLEWARE, matchPageMiddlewareTarget } from '@open-mercato/shared/modules/middleware/page'\nimport { applyPageGuardOverridesToEntries } from '@open-mercato/shared/modules/overrides'\n\ntype ExecutePageMiddlewareArgs = {\n  entries: PageMiddlewareRegistryEntry[]\n  context: PageMiddlewareContext\n  onError?: (error: unknown, middleware: Pick<PageRouteMiddleware, 'id' | 'priority'>) => void\n}\n\nconst DEFAULT_PRIORITY = 100\n\nfunction shouldRunMiddleware(middleware: PageRouteMiddleware, mode: PageMiddlewareMode, pathname: string): boolean {\n  if (middleware.mode && middleware.mode !== mode) return false\n  return matchPageMiddlewareTarget(pathname, middleware.target)\n}\n\nfunction compareMiddleware(a: PageRouteMiddleware, b: PageRouteMiddleware): number {\n  const priorityDiff = (a.priority ?? DEFAULT_PRIORITY) - (b.priority ?? DEFAULT_PRIORITY)\n  if (priorityDiff !== 0) return priorityDiff\n  return a.id.localeCompare(b.id)\n}\n\nfunction flattenAndSortMiddleware(\n  entries: PageMiddlewareRegistryEntry[],\n  mode: PageMiddlewareMode,\n  pathname: string\n): PageRouteMiddleware[] {\n  return applyPageGuardOverridesToEntries(entries)\n    .flatMap((entry) => entry.middleware)\n    .filter((middleware) => shouldRunMiddleware(middleware, mode, pathname))\n    .sort(compareMiddleware)\n}\n\nexport async function executePageMiddleware(args: ExecutePageMiddlewareArgs): Promise<PageMiddlewareResult> {\n  const { entries, context, onError } = args\n  const matchedMiddleware = flattenAndSortMiddleware(entries, context.mode, context.pathname)\n  for (const middleware of matchedMiddleware) {\n    try {\n      const result = await middleware.run(context)\n      if (result.action === 'redirect') return result\n    } catch (error) {\n      if (onError) {\n        onError(error, { id: middleware.id, priority: middleware.priority })\n      } else {\n        console.error('[middleware:page] execution failed', { id: middleware.id, error })\n      }\n      throw error\n    }\n  }\n  return CONTINUE_PAGE_MIDDLEWARE\n}\n\nexport async function resolvePageMiddlewareRedirect(args: ExecutePageMiddlewareArgs): Promise<string | null> {\n  const result = await executePageMiddleware(args)\n  if (result.action !== 'redirect') return null\n  return result.location\n}\n"],
+  "mappings": "AAOA,SAAS,0BAA0B,iCAAiC;AACpE,SAAS,wCAAwC;AAQjD,MAAM,mBAAmB;AAEzB,SAAS,oBAAoB,YAAiC,MAA0B,UAA2B;AACjH,MAAI,WAAW,QAAQ,WAAW,SAAS,KAAM,QAAO;AACxD,SAAO,0BAA0B,UAAU,WAAW,MAAM;AAC9D;AAEA,SAAS,kBAAkB,GAAwB,GAAgC;AACjF,QAAM,gBAAgB,EAAE,YAAY,qBAAqB,EAAE,YAAY;AACvE,MAAI,iBAAiB,EAAG,QAAO;AAC/B,SAAO,EAAE,GAAG,cAAc,EAAE,EAAE;AAChC;AAEA,SAAS,yBACP,SACA,MACA,UACuB;AACvB,SAAO,iCAAiC,OAAO,EAC5C,QAAQ,CAAC,UAAU,MAAM,UAAU,EACnC,OAAO,CAAC,eAAe,oBAAoB,YAAY,MAAM,QAAQ,CAAC,EACtE,KAAK,iBAAiB;AAC3B;AAEA,eAAsB,sBAAsB,MAAgE;AAC1G,QAAM,EAAE,SAAS,SAAS,QAAQ,IAAI;AACtC,QAAM,oBAAoB,yBAAyB,SAAS,QAAQ,MAAM,QAAQ,QAAQ;AAC1F,aAAW,cAAc,mBAAmB;AAC1C,QAAI;AACF,YAAM,SAAS,MAAM,WAAW,IAAI,OAAO;AAC3C,UAAI,OAAO,WAAW,WAAY,QAAO;AAAA,IAC3C,SAAS,OAAO;AACd,UAAI,SAAS;AACX,gBAAQ,OAAO,EAAE,IAAI,WAAW,IAAI,UAAU,WAAW,SAAS,CAAC;AAAA,MACrE,OAAO;AACL,gBAAQ,MAAM,sCAAsC,EAAE,IAAI,WAAW,IAAI,MAAM,CAAC;AAAA,MAClF;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,8BAA8B,MAAyD;AAC3G,QAAM,SAAS,MAAM,sBAAsB,IAAI;AAC/C,MAAI,OAAO,WAAW,WAAY,QAAO;AACzC,SAAO,OAAO;AAChB;",
   "names": []
 }

package/dist/lib/modules/registry.js

@@ -1,9 +1,10 @@
+import { applyModuleOverridesToModules } from "@open-mercato/shared/modules/overrides";
 let _modules = null;
 function registerModules(modules) {
   if (_modules !== null && process.env.NODE_ENV === "development") {
     console.debug("[Bootstrap] Modules re-registered (this may occur during HMR)");
   }
-  _modules = modules;
+  _modules = applyModuleOverridesToModules(modules);
 }
 function getModules() {
   if (!_modules) {

package/dist/lib/modules/registry.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/modules/registry.ts"],
-  "sourcesContent": ["import type { Module } from '@open-mercato/shared/modules/registry'\n\n// Registration pattern for publishable packages\nlet _modules: Module[] | null = null\n\nexport function registerModules(modules: Module[]) {\n  if (_modules !== null && process.env.NODE_ENV === 'development') {\n    console.debug('[Bootstrap] Modules re-registered (this may occur during HMR)')\n  }\n  _modules = modules\n}\n\nexport function getModules(): Module[] {\n  if (!_modules) {\n    throw new Error('[Bootstrap] Modules not registered. Call registerModules() at bootstrap.')\n  }\n  return _modules\n}\n"],
-  "mappings": "AAGA,IAAI,WAA4B;AAEzB,SAAS,gBAAgB,SAAmB;AACjD,MAAI,aAAa,QAAQ,QAAQ,IAAI,aAAa,eAAe;AAC/D,YAAQ,MAAM,+DAA+D;AAAA,EAC/E;AACA,aAAW;AACb;AAEO,SAAS,aAAuB;AACrC,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,0EAA0E;AAAA,EAC5F;AACA,SAAO;AACT;",
+  "sourcesContent": ["import type { Module } from '@open-mercato/shared/modules/registry'\nimport { applyModuleOverridesToModules } from '@open-mercato/shared/modules/overrides'\n\n// Registration pattern for publishable packages\nlet _modules: Module[] | null = null\n\nexport function registerModules(modules: Module[]) {\n  if (_modules !== null && process.env.NODE_ENV === 'development') {\n    console.debug('[Bootstrap] Modules re-registered (this may occur during HMR)')\n  }\n  _modules = applyModuleOverridesToModules(modules)\n}\n\nexport function getModules(): Module[] {\n  if (!_modules) {\n    throw new Error('[Bootstrap] Modules not registered. Call registerModules() at bootstrap.')\n  }\n  return _modules\n}\n"],
+  "mappings": "AACA,SAAS,qCAAqC;AAG9C,IAAI,WAA4B;AAEzB,SAAS,gBAAgB,SAAmB;AACjD,MAAI,aAAa,QAAQ,QAAQ,IAAI,aAAa,eAAe;AAC/D,YAAQ,MAAM,+DAA+D;AAAA,EAC/E;AACA,aAAW,8BAA8B,OAAO;AAClD;AAEO,SAAS,aAAuB;AACrC,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,0EAA0E;AAAA,EAC5F;AACA,SAAO;AACT;",
   "names": []
 }

package/dist/lib/notifications/handler-registry.js

@@ -1,3 +1,4 @@
+import { applyNotificationHandlerOverridesToEntries } from "@open-mercato/shared/modules/overrides";
 const GLOBAL_NOTIFICATION_HANDLERS_KEY = "__openMercatoNotificationHandlers__";
 let _handlerEntries = null;
 function readGlobalEntries() {
@@ -16,8 +17,9 @@ function writeGlobalEntries(entries) {
   }
 }
 function registerNotificationHandlers(entries) {
+  const finalEntries = applyNotificationHandlerOverridesToEntries(entries);
   const flat = [];
-  for (const entry of entries) {
+  for (const entry of finalEntries) {
     for (const handler of entry.handlers ?? []) {
       flat.push({ moduleId: entry.moduleId, handler });
     }

package/dist/lib/notifications/handler-registry.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/notifications/handler-registry.ts"],
-  "sourcesContent": ["import type { NotificationHandler } from '@open-mercato/shared/modules/notifications/handler'\n\nconst GLOBAL_NOTIFICATION_HANDLERS_KEY = '__openMercatoNotificationHandlers__'\n\ntype NotificationHandlerRegistryEntry = {\n  moduleId: string\n  handler: NotificationHandler\n}\n\nlet _handlerEntries: NotificationHandlerRegistryEntry[] | null = null\n\nfunction readGlobalEntries(): NotificationHandlerRegistryEntry[] | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_NOTIFICATION_HANDLERS_KEY]\n    return Array.isArray(value) ? (value as NotificationHandlerRegistryEntry[]) : null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalEntries(entries: NotificationHandlerRegistryEntry[]) {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_NOTIFICATION_HANDLERS_KEY] = entries\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\nexport function registerNotificationHandlers(\n  entries: Array<{ moduleId: string; handlers: NotificationHandler[] }>,\n) {\n  const flat: NotificationHandlerRegistryEntry[] = []\n  for (const entry of entries) {\n    for (const handler of entry.handlers ?? []) {\n      flat.push({ moduleId: entry.moduleId, handler })\n    }\n  }\n  flat.sort((a, b) => (b.handler.priority ?? 50) - (a.handler.priority ?? 50))\n  _handlerEntries = flat\n  writeGlobalEntries(flat)\n}\n\nexport function getNotificationHandlerEntries(): NotificationHandlerRegistryEntry[] {\n  const globalEntries = readGlobalEntries()\n  if (globalEntries) return globalEntries\n  if (!_handlerEntries) return []\n  return _handlerEntries\n}\n"],
-  "mappings": "AAEA,MAAM,mCAAmC;AAOzC,IAAI,kBAA6D;AAEjE,SAAS,oBAA+D;AACtE,MAAI;AACF,UAAM,QAAS,WAAuC,gCAAgC;AACtF,WAAO,MAAM,QAAQ,KAAK,IAAK,QAA+C;AAAA,EAChF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,mBAAmB,SAA6C;AACvE,MAAI;AACF;AAAC,IAAC,WAAuC,gCAAgC,IAAI;AAAA,EAC/E,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,6BACd,SACA;AACA,QAAM,OAA2C,CAAC;AAClD,aAAW,SAAS,SAAS;AAC3B,eAAW,WAAW,MAAM,YAAY,CAAC,GAAG;AAC1C,WAAK,KAAK,EAAE,UAAU,MAAM,UAAU,QAAQ,CAAC;AAAA,IACjD;AAAA,EACF;AACA,OAAK,KAAK,CAAC,GAAG,OAAO,EAAE,QAAQ,YAAY,OAAO,EAAE,QAAQ,YAAY,GAAG;AAC3E,oBAAkB;AAClB,qBAAmB,IAAI;AACzB;AAEO,SAAS,gCAAoE;AAClF,QAAM,gBAAgB,kBAAkB;AACxC,MAAI,cAAe,QAAO;AAC1B,MAAI,CAAC,gBAAiB,QAAO,CAAC;AAC9B,SAAO;AACT;",
+  "sourcesContent": ["import type { NotificationHandler } from '@open-mercato/shared/modules/notifications/handler'\nimport { applyNotificationHandlerOverridesToEntries } from '@open-mercato/shared/modules/overrides'\n\nconst GLOBAL_NOTIFICATION_HANDLERS_KEY = '__openMercatoNotificationHandlers__'\n\ntype NotificationHandlerRegistryEntry = {\n  moduleId: string\n  handler: NotificationHandler\n}\n\nlet _handlerEntries: NotificationHandlerRegistryEntry[] | null = null\n\nfunction readGlobalEntries(): NotificationHandlerRegistryEntry[] | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_NOTIFICATION_HANDLERS_KEY]\n    return Array.isArray(value) ? (value as NotificationHandlerRegistryEntry[]) : null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalEntries(entries: NotificationHandlerRegistryEntry[]) {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_NOTIFICATION_HANDLERS_KEY] = entries\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\nexport function registerNotificationHandlers(\n  entries: Array<{ moduleId: string; handlers: NotificationHandler[] }>,\n) {\n  const finalEntries = applyNotificationHandlerOverridesToEntries(entries)\n  const flat: NotificationHandlerRegistryEntry[] = []\n  for (const entry of finalEntries) {\n    for (const handler of entry.handlers ?? []) {\n      flat.push({ moduleId: entry.moduleId, handler })\n    }\n  }\n  flat.sort((a, b) => (b.handler.priority ?? 50) - (a.handler.priority ?? 50))\n  _handlerEntries = flat\n  writeGlobalEntries(flat)\n}\n\nexport function getNotificationHandlerEntries(): NotificationHandlerRegistryEntry[] {\n  const globalEntries = readGlobalEntries()\n  if (globalEntries) return globalEntries\n  if (!_handlerEntries) return []\n  return _handlerEntries\n}\n"],
+  "mappings": "AACA,SAAS,kDAAkD;AAE3D,MAAM,mCAAmC;AAOzC,IAAI,kBAA6D;AAEjE,SAAS,oBAA+D;AACtE,MAAI;AACF,UAAM,QAAS,WAAuC,gCAAgC;AACtF,WAAO,MAAM,QAAQ,KAAK,IAAK,QAA+C;AAAA,EAChF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,mBAAmB,SAA6C;AACvE,MAAI;AACF;AAAC,IAAC,WAAuC,gCAAgC,IAAI;AAAA,EAC/E,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,6BACd,SACA;AACA,QAAM,eAAe,2CAA2C,OAAO;AACvE,QAAM,OAA2C,CAAC;AAClD,aAAW,SAAS,cAAc;AAChC,eAAW,WAAW,MAAM,YAAY,CAAC,GAAG;AAC1C,WAAK,KAAK,EAAE,UAAU,MAAM,UAAU,QAAQ,CAAC;AAAA,IACjD;AAAA,EACF;AACA,OAAK,KAAK,CAAC,GAAG,OAAO,EAAE,QAAQ,YAAY,OAAO,EAAE,QAAQ,YAAY,GAAG;AAC3E,oBAAkB;AAClB,qBAAmB,IAAI;AACzB;AAEO,SAAS,gCAAoE;AAClF,QAAM,gBAAgB,kBAAkB;AACxC,MAAI,cAAe,QAAO;AAC1B,MAAI,CAAC,gBAAiB,QAAO,CAAC;AAC9B,SAAO;AACT;",
   "names": []
 }

package/dist/lib/patterns/wildcard.js

@@ -0,0 +1,42 @@
+function matchWildcardSegment(pattern, value, options) {
+  let patternIndex = 0;
+  let valueIndex = 0;
+  let starIndex = -1;
+  let valueRetryIndex = 0;
+  while (valueIndex < value.length) {
+    const patternChar = pattern[patternIndex];
+    const valueChar = value[valueIndex];
+    if (patternChar === "*") {
+      starIndex = patternIndex;
+      valueRetryIndex = valueIndex;
+      patternIndex += 1;
+      continue;
+    }
+    if (patternChar === valueChar) {
+      patternIndex += 1;
+      valueIndex += 1;
+      continue;
+    }
+    if (starIndex !== -1 && (!options.singleSegmentWildcard || value[valueRetryIndex] !== ".")) {
+      patternIndex = starIndex + 1;
+      valueRetryIndex += 1;
+      valueIndex = valueRetryIndex;
+      continue;
+    }
+    return false;
+  }
+  while (pattern[patternIndex] === "*") {
+    patternIndex += 1;
+  }
+  return patternIndex === pattern.length;
+}
+function matchWildcardPattern(value, pattern, options = {}) {
+  if (pattern === value) return true;
+  if (pattern === "*") return true;
+  if (!pattern.includes("*")) return false;
+  return matchWildcardSegment(pattern, value, options);
+}
+export {
+  matchWildcardPattern
+};
+//# sourceMappingURL=wildcard.js.map

package/dist/lib/patterns/wildcard.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/lib/patterns/wildcard.ts"],
+  "sourcesContent": ["export type WildcardMatchOptions = {\n  singleSegmentWildcard?: boolean\n}\n\nfunction matchWildcardSegment(pattern: string, value: string, options: WildcardMatchOptions): boolean {\n  let patternIndex = 0\n  let valueIndex = 0\n  let starIndex = -1\n  let valueRetryIndex = 0\n\n  while (valueIndex < value.length) {\n    const patternChar = pattern[patternIndex]\n    const valueChar = value[valueIndex]\n\n    if (patternChar === '*') {\n      starIndex = patternIndex\n      valueRetryIndex = valueIndex\n      patternIndex += 1\n      continue\n    }\n\n    if (patternChar === valueChar) {\n      patternIndex += 1\n      valueIndex += 1\n      continue\n    }\n\n    if (\n      starIndex !== -1\n      && (!options.singleSegmentWildcard || value[valueRetryIndex] !== '.')\n    ) {\n      patternIndex = starIndex + 1\n      valueRetryIndex += 1\n      valueIndex = valueRetryIndex\n      continue\n    }\n\n    return false\n  }\n\n  while (pattern[patternIndex] === '*') {\n    patternIndex += 1\n  }\n\n  return patternIndex === pattern.length\n}\n\nexport function matchWildcardPattern(\n  value: string,\n  pattern: string,\n  options: WildcardMatchOptions = {},\n): boolean {\n  if (pattern === value) return true\n  if (pattern === '*') return true\n  if (!pattern.includes('*')) return false\n\n  return matchWildcardSegment(pattern, value, options)\n}\n\n"],
+  "mappings": "AAIA,SAAS,qBAAqB,SAAiB,OAAe,SAAwC;AACpG,MAAI,eAAe;AACnB,MAAI,aAAa;AACjB,MAAI,YAAY;AAChB,MAAI,kBAAkB;AAEtB,SAAO,aAAa,MAAM,QAAQ;AAChC,UAAM,cAAc,QAAQ,YAAY;AACxC,UAAM,YAAY,MAAM,UAAU;AAElC,QAAI,gBAAgB,KAAK;AACvB,kBAAY;AACZ,wBAAkB;AAClB,sBAAgB;AAChB;AAAA,IACF;AAEA,QAAI,gBAAgB,WAAW;AAC7B,sBAAgB;AAChB,oBAAc;AACd;AAAA,IACF;AAEA,QACE,cAAc,OACV,CAAC,QAAQ,yBAAyB,MAAM,eAAe,MAAM,MACjE;AACA,qBAAe,YAAY;AAC3B,yBAAmB;AACnB,mBAAa;AACb;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAEA,SAAO,QAAQ,YAAY,MAAM,KAAK;AACpC,oBAAgB;AAAA,EAClB;AAEA,SAAO,iBAAiB,QAAQ;AAClC;AAEO,SAAS,qBACd,OACA,SACA,UAAgC,CAAC,GACxB;AACT,MAAI,YAAY,MAAO,QAAO;AAC9B,MAAI,YAAY,IAAK,QAAO;AAC5B,MAAI,CAAC,QAAQ,SAAS,GAAG,EAAG,QAAO;AAEnC,SAAO,qBAAqB,SAAS,OAAO,OAAO;AACrD;",
+  "names": []
+}

package/dist/lib/regex/linear.js

@@ -0,0 +1,31 @@
+import { RE2JS } from "re2js";
+const DEFAULT_MAX_PATTERN_LENGTH = 500;
+const DEFAULT_MAX_INPUT_LENGTH = 1e4;
+const MAX_REGEX_CACHE_SIZE = 256;
+const compiledRegexCache = /* @__PURE__ */ new Map();
+function getCachedRegex(pattern) {
+  const cached = compiledRegexCache.get(pattern);
+  if (cached) return cached;
+  const compiled = RE2JS.compile(pattern);
+  if (compiledRegexCache.size >= MAX_REGEX_CACHE_SIZE) {
+    const oldestKey = compiledRegexCache.keys().next().value;
+    if (oldestKey) compiledRegexCache.delete(oldestKey);
+  }
+  compiledRegexCache.set(pattern, compiled);
+  return compiled;
+}
+function testLinearRegex(pattern, input, options = {}) {
+  const maxPatternLength = options.maxPatternLength ?? DEFAULT_MAX_PATTERN_LENGTH;
+  const maxInputLength = options.maxInputLength ?? DEFAULT_MAX_INPUT_LENGTH;
+  if (pattern.length > maxPatternLength) return { ok: false, reason: "pattern_too_long" };
+  if (input.length > maxInputLength) return { ok: false, reason: "input_too_long" };
+  try {
+    return { ok: true, matched: getCachedRegex(pattern).test(input) };
+  } catch {
+    return { ok: false, reason: "invalid_pattern" };
+  }
+}
+export {
+  testLinearRegex
+};
+//# sourceMappingURL=linear.js.map

package/dist/lib/regex/linear.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/lib/regex/linear.ts"],
+  "sourcesContent": ["import { RE2JS } from 're2js'\n\nconst DEFAULT_MAX_PATTERN_LENGTH = 500\nconst DEFAULT_MAX_INPUT_LENGTH = 10_000\nconst MAX_REGEX_CACHE_SIZE = 256\n\nconst compiledRegexCache = new Map<string, RE2JS>()\n\nexport type LinearRegexTestOptions = {\n  maxPatternLength?: number\n  maxInputLength?: number\n}\n\nexport type LinearRegexTestResult =\n  | { ok: true; matched: boolean }\n  | { ok: false; reason: 'pattern_too_long' | 'input_too_long' | 'invalid_pattern' }\n\nfunction getCachedRegex(pattern: string): RE2JS {\n  const cached = compiledRegexCache.get(pattern)\n  if (cached) return cached\n\n  const compiled = RE2JS.compile(pattern)\n  if (compiledRegexCache.size >= MAX_REGEX_CACHE_SIZE) {\n    const oldestKey = compiledRegexCache.keys().next().value\n    if (oldestKey) compiledRegexCache.delete(oldestKey)\n  }\n  compiledRegexCache.set(pattern, compiled)\n  return compiled\n}\n\nexport function testLinearRegex(\n  pattern: string,\n  input: string,\n  options: LinearRegexTestOptions = {},\n): LinearRegexTestResult {\n  const maxPatternLength = options.maxPatternLength ?? DEFAULT_MAX_PATTERN_LENGTH\n  const maxInputLength = options.maxInputLength ?? DEFAULT_MAX_INPUT_LENGTH\n\n  if (pattern.length > maxPatternLength) return { ok: false, reason: 'pattern_too_long' }\n  if (input.length > maxInputLength) return { ok: false, reason: 'input_too_long' }\n\n  try {\n    return { ok: true, matched: getCachedRegex(pattern).test(input) }\n  } catch {\n    return { ok: false, reason: 'invalid_pattern' }\n  }\n}\n\n"],
+  "mappings": "AAAA,SAAS,aAAa;AAEtB,MAAM,6BAA6B;AACnC,MAAM,2BAA2B;AACjC,MAAM,uBAAuB;AAE7B,MAAM,qBAAqB,oBAAI,IAAmB;AAWlD,SAAS,eAAe,SAAwB;AAC9C,QAAM,SAAS,mBAAmB,IAAI,OAAO;AAC7C,MAAI,OAAQ,QAAO;AAEnB,QAAM,WAAW,MAAM,QAAQ,OAAO;AACtC,MAAI,mBAAmB,QAAQ,sBAAsB;AACnD,UAAM,YAAY,mBAAmB,KAAK,EAAE,KAAK,EAAE;AACnD,QAAI,UAAW,oBAAmB,OAAO,SAAS;AAAA,EACpD;AACA,qBAAmB,IAAI,SAAS,QAAQ;AACxC,SAAO;AACT;AAEO,SAAS,gBACd,SACA,OACA,UAAkC,CAAC,GACZ;AACvB,QAAM,mBAAmB,QAAQ,oBAAoB;AACrD,QAAM,iBAAiB,QAAQ,kBAAkB;AAEjD,MAAI,QAAQ,SAAS,iBAAkB,QAAO,EAAE,IAAI,OAAO,QAAQ,mBAAmB;AACtF,MAAI,MAAM,SAAS,eAAgB,QAAO,EAAE,IAAI,OAAO,QAAQ,iBAAiB;AAEhF,MAAI;AACF,WAAO,EAAE,IAAI,MAAM,SAAS,eAAe,OAAO,EAAE,KAAK,KAAK,EAAE;AAAA,EAClE,QAAQ;AACN,WAAO,EAAE,IAAI,OAAO,QAAQ,kBAAkB;AAAA,EAChD;AACF;",
+  "names": []
+}

package/dist/lib/version.js

@@ -1,4 +1,4 @@
-const APP_VERSION = "0.6.2-develop.3467.1.2a1818709d";
+const APP_VERSION = "0.6.2";
 const appVersion = APP_VERSION;
 export {
   APP_VERSION,

package/dist/lib/version.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/lib/version.ts"],
-  "sourcesContent": ["// Build-time generated version\nexport const APP_VERSION = '0.6.2-develop.3467.1.2a1818709d'\nexport const appVersion = APP_VERSION\n"],
+  "sourcesContent": ["// Build-time generated version\nexport const APP_VERSION = '0.6.2'\nexport const appVersion = APP_VERSION\n"],
   "mappings": "AACO,MAAM,cAAc;AACpB,MAAM,aAAa;",
   "names": []
 }

package/dist/modules/entities/validation.js

@@ -1,4 +1,7 @@
 import { z } from "zod";
+import { testLinearRegex } from "../../lib/regex/linear.js";
+const MAX_CUSTOM_FIELD_REGEX_PATTERN_LENGTH = 500;
+const MAX_CUSTOM_FIELD_REGEX_INPUT_LENGTH = 1e4;
 const VALIDATION_RULES = [
   "required",
   "date",
@@ -23,7 +26,11 @@ const validationRuleSchema = z.discriminatedUnion("rule", [
   z.object({ rule: z.literal("gte"), param: z.number(), message: z.string().min(1) }),
   z.object({ rule: z.literal("eq"), param: z.any(), message: z.string().min(1) }),
   z.object({ rule: z.literal("ne"), param: z.any(), message: z.string().min(1) }),
-  z.object({ rule: z.literal("regex"), param: z.string().min(1), message: z.string().min(1) })
+  z.object({
+    rule: z.literal("regex"),
+    param: z.string().min(1),
+    message: z.string().min(1)
+  })
 ]);
 const validationRulesArraySchema = z.array(validationRuleSchema).max(32);
 function evalRule(rule, value, kind) {
@@ -66,12 +73,11 @@ function evalRule(rule, value, kind) {
       return value !== rule.param ? null : rule.message;
     case "regex":
       if (isEmpty(value)) return null;
-      try {
-        const re = new RegExp(rule.param);
-        return re.test(String(value)) ? null : rule.message;
-      } catch {
-        return rule.message;
-      }
+      const regexResult = testLinearRegex(String(rule.param), String(value), {
+        maxPatternLength: MAX_CUSTOM_FIELD_REGEX_PATTERN_LENGTH,
+        maxInputLength: MAX_CUSTOM_FIELD_REGEX_INPUT_LENGTH
+      });
+      return regexResult.ok && regexResult.matched ? null : rule.message;
     default:
       return null;
   }
@@ -94,6 +100,8 @@ function validateValuesAgainstDefs(values, defs) {
   return { ok: Object.keys(errors).length === 0, fieldErrors: errors };
 }
 export {
+  MAX_CUSTOM_FIELD_REGEX_INPUT_LENGTH,
+  MAX_CUSTOM_FIELD_REGEX_PATTERN_LENGTH,
   VALIDATION_RULES,
   validateValuesAgainstDefs,
   validationRuleSchema,