@open-mercato/shared 0.7.1-develop.7193.1.910a5b0a1e → 0.7.1-develop.7195.1.b5efd1d51a

package/dist/lib/openapi/index.js

@@ -1,5 +1,5 @@
 export * from "./types.js";
-import { buildOpenApiDocument, generateMarkdownFromOpenApi } from "./generator.js";
+import { buildOpenApiDocument, generateMarkdownFromOpenApi, zodToJsonSchema } from "./generator.js";
 export * from "./crud.js";
 import { sanitizeOpenApiDocument } from "./sanitize.js";
 import { attachOpenApiDocsToModules } from "./attach-docs.js";
@@ -7,6 +7,7 @@ export {
   attachOpenApiDocsToModules,
   buildOpenApiDocument,
   generateMarkdownFromOpenApi,
-  sanitizeOpenApiDocument
+  sanitizeOpenApiDocument,
+  zodToJsonSchema
 };
 //# sourceMappingURL=index.js.map

package/dist/lib/openapi/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/openapi/index.ts"],
-  "sourcesContent": ["export * from './types'\nexport { buildOpenApiDocument, generateMarkdownFromOpenApi } from './generator'\nexport * from './crud'\nexport { sanitizeOpenApiDocument } from './sanitize'\nexport { attachOpenApiDocsToModules } from './attach-docs'\n"],
-  "mappings": "AAAA,cAAc;AACd,SAAS,sBAAsB,mCAAmC;AAClE,cAAc;AACd,SAAS,+BAA+B;AACxC,SAAS,kCAAkC;",
+  "sourcesContent": ["export * from './types'\nexport { buildOpenApiDocument, generateMarkdownFromOpenApi, zodToJsonSchema, type JsonSchema } from './generator'\nexport * from './crud'\nexport { sanitizeOpenApiDocument } from './sanitize'\nexport { attachOpenApiDocsToModules } from './attach-docs'\n"],
+  "mappings": "AAAA,cAAc;AACd,SAAS,sBAAsB,6BAA6B,uBAAwC;AACpG,cAAc;AACd,SAAS,+BAA+B;AACxC,SAAS,kCAAkC;",
   "names": []
 }

package/dist/lib/seed/crypto.js

@@ -0,0 +1,73 @@
+import crypto from "node:crypto";
+import { decryptWithAesGcm, encryptWithAesGcm } from "../encryption/aes.js";
+import {
+  ENCRYPTED_SEED_ALGORITHM,
+  ENCRYPTED_SEED_FORMAT,
+  ENCRYPTED_SEED_VERSION,
+  encryptedSeedEnvelopeSchema,
+  seedDocumentSchema
+} from "./types.js";
+const SEED_KEY_ENV = "OM_SEED_KEY";
+const SEED_KEY_BYTES = 32;
+function normalizeKey(value) {
+  return value.trim().replace(/(?:^['"]|['"]$)/g, "");
+}
+function generateSeedKey() {
+  return crypto.randomBytes(SEED_KEY_BYTES).toString("base64");
+}
+function resolveSeedKey(explicit) {
+  const raw = normalizeKey(explicit ?? process.env[SEED_KEY_ENV] ?? "");
+  if (!raw) {
+    throw new Error(
+      `[internal] Seed key missing: set ${SEED_KEY_ENV} (base64, 32 bytes) or pass --key. Generate one with "mercato seeds keygen".`
+    );
+  }
+  let decoded;
+  try {
+    decoded = Buffer.from(raw, "base64");
+  } catch {
+    throw new Error(`[internal] ${SEED_KEY_ENV} must be base64-encoded.`);
+  }
+  if (decoded.length !== SEED_KEY_BYTES) {
+    throw new Error(
+      `[internal] ${SEED_KEY_ENV} must decode to ${SEED_KEY_BYTES} bytes (got ${decoded.length}). Generate one with "mercato seeds keygen".`
+    );
+  }
+  return raw;
+}
+function encryptSeedDocument(document, key) {
+  const doc = seedDocumentSchema.parse(document);
+  const json = JSON.stringify(doc);
+  const { value } = encryptWithAesGcm(json, key);
+  if (!value) {
+    throw new Error("[internal] Seed encryption produced no payload.");
+  }
+  return {
+    format: ENCRYPTED_SEED_FORMAT,
+    version: ENCRYPTED_SEED_VERSION,
+    algorithm: ENCRYPTED_SEED_ALGORITHM,
+    payload: value
+  };
+}
+function decryptSeedEnvelope(envelope, key) {
+  const parsed = encryptedSeedEnvelopeSchema.parse(envelope);
+  const json = decryptWithAesGcm(parsed.payload, key);
+  if (json === null) {
+    throw new Error("[internal] Seed decryption failed \u2014 wrong key or corrupted payload.");
+  }
+  let raw;
+  try {
+    raw = JSON.parse(json);
+  } catch {
+    throw new Error("[internal] Decrypted seed is not valid JSON.");
+  }
+  return seedDocumentSchema.parse(raw);
+}
+export {
+  SEED_KEY_ENV,
+  decryptSeedEnvelope,
+  encryptSeedDocument,
+  generateSeedKey,
+  resolveSeedKey
+};
+//# sourceMappingURL=crypto.js.map

package/dist/lib/seed/crypto.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/lib/seed/crypto.ts"],
+  "sourcesContent": ["import crypto from 'node:crypto'\nimport { decryptWithAesGcm, encryptWithAesGcm } from '../encryption/aes'\nimport {\n  ENCRYPTED_SEED_ALGORITHM,\n  ENCRYPTED_SEED_FORMAT,\n  ENCRYPTED_SEED_VERSION,\n  encryptedSeedEnvelopeSchema,\n  seedDocumentSchema,\n  type EncryptedSeedEnvelope,\n  type SeedDocument,\n} from './types'\n\n/**\n * Distribution-layer key for encrypting seed blobs committed to the repo. This is\n * deliberately separate from the platform's per-tenant field-encryption keys\n * (Vault / TENANT_DATA_ENCRYPTION_*): rotating or sharing the seed key never\n * touches data-at-rest encryption.\n */\nexport const SEED_KEY_ENV = 'OM_SEED_KEY'\n\nconst SEED_KEY_BYTES = 32\n\nfunction normalizeKey(value: string): string {\n  return value.trim().replace(/(?:^['\"]|['\"]$)/g, '')\n}\n\n/** Generate a fresh base64-encoded 32-byte seed key. */\nexport function generateSeedKey(): string {\n  return crypto.randomBytes(SEED_KEY_BYTES).toString('base64')\n}\n\n/**\n * Resolve and validate the seed key from an explicit value or `OM_SEED_KEY`.\n * Throws a clear, actionable error when missing or malformed.\n */\nexport function resolveSeedKey(explicit?: string | null): string {\n  const raw = normalizeKey(explicit ?? process.env[SEED_KEY_ENV] ?? '')\n  if (!raw) {\n    throw new Error(\n      `[internal] Seed key missing: set ${SEED_KEY_ENV} (base64, 32 bytes) or pass --key. Generate one with \"mercato seeds keygen\".`,\n    )\n  }\n  let decoded: Buffer\n  try {\n    decoded = Buffer.from(raw, 'base64')\n  } catch {\n    throw new Error(`[internal] ${SEED_KEY_ENV} must be base64-encoded.`)\n  }\n  if (decoded.length !== SEED_KEY_BYTES) {\n    throw new Error(\n      `[internal] ${SEED_KEY_ENV} must decode to ${SEED_KEY_BYTES} bytes (got ${decoded.length}). Generate one with \"mercato seeds keygen\".`,\n    )\n  }\n  return raw\n}\n\n/** Encrypt a validated seed document into the opaque, committable envelope. */\nexport function encryptSeedDocument(document: SeedDocument, key: string): EncryptedSeedEnvelope {\n  const doc = seedDocumentSchema.parse(document)\n  const json = JSON.stringify(doc)\n  const { value } = encryptWithAesGcm(json, key)\n  if (!value) {\n    throw new Error('[internal] Seed encryption produced no payload.')\n  }\n  return {\n    format: ENCRYPTED_SEED_FORMAT,\n    version: ENCRYPTED_SEED_VERSION,\n    algorithm: ENCRYPTED_SEED_ALGORITHM,\n    payload: value,\n  }\n}\n\n/** Decrypt and validate an envelope back into a seed document. */\nexport function decryptSeedEnvelope(envelope: unknown, key: string): SeedDocument {\n  const parsed = encryptedSeedEnvelopeSchema.parse(envelope)\n  const json = decryptWithAesGcm(parsed.payload, key)\n  if (json === null) {\n    throw new Error('[internal] Seed decryption failed \u2014 wrong key or corrupted payload.')\n  }\n  let raw: unknown\n  try {\n    raw = JSON.parse(json)\n  } catch {\n    throw new Error('[internal] Decrypted seed is not valid JSON.')\n  }\n  return seedDocumentSchema.parse(raw)\n}\n"],
+  "mappings": "AAAA,OAAO,YAAY;AACnB,SAAS,mBAAmB,yBAAyB;AACrD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAQA,MAAM,eAAe;AAE5B,MAAM,iBAAiB;AAEvB,SAAS,aAAa,OAAuB;AAC3C,SAAO,MAAM,KAAK,EAAE,QAAQ,oBAAoB,EAAE;AACpD;AAGO,SAAS,kBAA0B;AACxC,SAAO,OAAO,YAAY,cAAc,EAAE,SAAS,QAAQ;AAC7D;AAMO,SAAS,eAAe,UAAkC;AAC/D,QAAM,MAAM,aAAa,YAAY,QAAQ,IAAI,YAAY,KAAK,EAAE;AACpE,MAAI,CAAC,KAAK;AACR,UAAM,IAAI;AAAA,MACR,oCAAoC,YAAY;AAAA,IAClD;AAAA,EACF;AACA,MAAI;AACJ,MAAI;AACF,cAAU,OAAO,KAAK,KAAK,QAAQ;AAAA,EACrC,QAAQ;AACN,UAAM,IAAI,MAAM,cAAc,YAAY,0BAA0B;AAAA,EACtE;AACA,MAAI,QAAQ,WAAW,gBAAgB;AACrC,UAAM,IAAI;AAAA,MACR,cAAc,YAAY,mBAAmB,cAAc,eAAe,QAAQ,MAAM;AAAA,IAC1F;AAAA,EACF;AACA,SAAO;AACT;AAGO,SAAS,oBAAoB,UAAwB,KAAoC;AAC9F,QAAM,MAAM,mBAAmB,MAAM,QAAQ;AAC7C,QAAM,OAAO,KAAK,UAAU,GAAG;AAC/B,QAAM,EAAE,MAAM,IAAI,kBAAkB,MAAM,GAAG;AAC7C,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,WAAW;AAAA,IACX,SAAS;AAAA,EACX;AACF;AAGO,SAAS,oBAAoB,UAAmB,KAA2B;AAChF,QAAM,SAAS,4BAA4B,MAAM,QAAQ;AACzD,QAAM,OAAO,kBAAkB,OAAO,SAAS,GAAG;AAClD,MAAI,SAAS,MAAM;AACjB,UAAM,IAAI,MAAM,0EAAqE;AAAA,EACvF;AACA,MAAI;AACJ,MAAI;AACF,UAAM,KAAK,MAAM,IAAI;AAAA,EACvB,QAAQ;AACN,UAAM,IAAI,MAAM,8CAA8C;AAAA,EAChE;AACA,SAAO,mBAAmB,MAAM,GAAG;AACrC;",
+  "names": []
+}

package/dist/lib/seed/index.js

@@ -0,0 +1,4 @@
+export * from "./types.js";
+export * from "./crypto.js";
+export * from "./loader.js";
+//# sourceMappingURL=index.js.map

package/dist/lib/seed/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/lib/seed/index.ts"],
+  "sourcesContent": ["export * from './types'\nexport * from './crypto'\nexport * from './loader'\n"],
+  "mappings": "AAAA,cAAc;AACd,cAAc;AACd,cAAc;",
+  "names": []
+}

package/dist/lib/seed/loader.js

@@ -0,0 +1,73 @@
+import { resolveEntityIdFromMetadata } from "../encryption/entityIds.js";
+import { seedDocumentSchema } from "./types.js";
+class SeedDryRunRollback extends Error {
+}
+function resolveEntityClass(meta) {
+  return meta.class ?? meta.className ?? meta.name;
+}
+function buildEntityIdIndex(em) {
+  const storage = em.getMetadata();
+  const all = (typeof storage.getAll === "function" ? storage.getAll() : storage.metadata) ?? {};
+  const list = all instanceof Map ? [...all.values()] : Array.isArray(all) ? all : Object.values(all);
+  const index = /* @__PURE__ */ new Map();
+  for (const meta of list) {
+    if (!meta || meta.abstract) continue;
+    const entityId = resolveEntityIdFromMetadata(meta);
+    if (!entityId) continue;
+    if (!index.has(entityId)) index.set(entityId, meta);
+  }
+  return index;
+}
+function hasProperty(meta, name) {
+  return Boolean(meta.properties && meta.properties[name]);
+}
+async function loadSeedDocument(em, document, scope, options = {}) {
+  const doc = seedDocumentSchema.parse(document);
+  const index = buildEntityIdIndex(em);
+  const total = doc.records.length;
+  let created = 0;
+  let skipped = 0;
+  const run = async (tem) => {
+    for (let i = 0; i < doc.records.length; i += 1) {
+      const record = doc.records[i];
+      const meta = index.get(record.entity);
+      if (!meta) {
+        throw new Error(
+          `[internal] Unknown seed entity "${record.entity}" at record ${i}: not a registered entity id.`
+        );
+      }
+      const entityClass = resolveEntityClass(meta);
+      const data = { ...record.data };
+      if (hasProperty(meta, "tenantId")) data.tenantId = scope.tenantId;
+      if (hasProperty(meta, "organizationId")) data.organizationId = scope.organizationId;
+      if (record.match && record.match.length) {
+        const where = {};
+        for (const field of record.match) where[field] = data[field];
+        if (hasProperty(meta, "tenantId")) where.tenantId = scope.tenantId;
+        if (hasProperty(meta, "organizationId")) where.organizationId = scope.organizationId;
+        const existing = await tem.findOne(entityClass, where);
+        if (existing) {
+          skipped += 1;
+          options.onProgress?.({ index: i, total, entity: record.entity, action: "skipped" });
+          continue;
+        }
+      }
+      const entity = tem.create(entityClass, data);
+      tem.persist(entity);
+      await tem.flush();
+      created += 1;
+      options.onProgress?.({ index: i, total, entity: record.entity, action: "created" });
+    }
+    if (options.dryRun) throw new SeedDryRunRollback();
+  };
+  try {
+    await em.transactional(run);
+  } catch (err) {
+    if (!(err instanceof SeedDryRunRollback)) throw err;
+  }
+  return { total, created, skipped };
+}
+export {
+  loadSeedDocument
+};
+//# sourceMappingURL=loader.js.map

package/dist/lib/seed/loader.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/lib/seed/loader.ts"],
+  "sourcesContent": ["import type { EntityManager, EntityMetadata } from '@mikro-orm/postgresql'\nimport { resolveEntityIdFromMetadata } from '../encryption/entityIds'\nimport { seedDocumentSchema, type SeedDocument } from './types'\n\nexport type SeedLoadScope = {\n  tenantId: string\n  organizationId: string\n}\n\nexport type SeedLoadProgress = {\n  index: number\n  total: number\n  entity: string\n  action: 'created' | 'skipped'\n}\n\nexport type SeedLoadOptions = {\n  /** Apply inside a transaction and roll it back; reports what would happen. */\n  dryRun?: boolean\n  onProgress?: (progress: SeedLoadProgress) => void\n}\n\nexport type SeedLoadResult = {\n  total: number\n  created: number\n  skipped: number\n}\n\nclass SeedDryRunRollback extends Error {}\n\nfunction resolveEntityClass(meta: EntityMetadata<any>): unknown {\n  return (meta as any).class ?? meta.className ?? meta.name\n}\n\nfunction buildEntityIdIndex(em: EntityManager): Map<string, EntityMetadata<any>> {\n  const storage = em.getMetadata() as unknown as {\n    getAll?: () =>\n      | Map<unknown, EntityMetadata<any>>\n      | Record<string, EntityMetadata<any>>\n      | EntityMetadata<any>[]\n    metadata?: Record<string, EntityMetadata<any>>\n  }\n  const all = (typeof storage.getAll === 'function' ? storage.getAll() : storage.metadata) ?? {}\n  // MikroORM v7's instance getAll() returns a Map; older shapes returned a plain\n  // object or array. Normalize all three to a flat list.\n  const list: EntityMetadata<any>[] =\n    all instanceof Map ? [...all.values()] : Array.isArray(all) ? all : Object.values(all)\n  const index = new Map<string, EntityMetadata<any>>()\n  for (const meta of list) {\n    if (!meta || (meta as any).abstract) continue\n    const entityId = resolveEntityIdFromMetadata(meta)\n    if (!entityId) continue\n    if (!index.has(entityId)) index.set(entityId, meta)\n  }\n  return index\n}\n\nfunction hasProperty(meta: EntityMetadata<any>, name: string): boolean {\n  return Boolean(meta.properties && (meta.properties as Record<string, unknown>)[name])\n}\n\n/**\n * Insert seed records through the ORM so the tenant-data-encryption subscriber\n * encrypts marked fields at rest automatically. Records are applied in order;\n * `tenantId`/`organizationId` are injected from `scope` for every entity that\n * declares them. Records with a `match` list are skipped when an existing row\n * matches (idempotent re-runs); match fields MUST be non-encrypted natural keys.\n */\nexport async function loadSeedDocument(\n  em: EntityManager,\n  document: SeedDocument,\n  scope: SeedLoadScope,\n  options: SeedLoadOptions = {},\n): Promise<SeedLoadResult> {\n  const doc = seedDocumentSchema.parse(document)\n  const index = buildEntityIdIndex(em)\n  const total = doc.records.length\n  let created = 0\n  let skipped = 0\n\n  const run = async (tem: EntityManager) => {\n    for (let i = 0; i < doc.records.length; i += 1) {\n      const record = doc.records[i]\n      const meta = index.get(record.entity)\n      if (!meta) {\n        throw new Error(\n          `[internal] Unknown seed entity \"${record.entity}\" at record ${i}: not a registered entity id.`,\n        )\n      }\n      const entityClass = resolveEntityClass(meta)\n      const data: Record<string, unknown> = { ...record.data }\n      if (hasProperty(meta, 'tenantId')) data.tenantId = scope.tenantId\n      if (hasProperty(meta, 'organizationId')) data.organizationId = scope.organizationId\n\n      if (record.match && record.match.length) {\n        const where: Record<string, unknown> = {}\n        for (const field of record.match) where[field] = data[field]\n        if (hasProperty(meta, 'tenantId')) where.tenantId = scope.tenantId\n        if (hasProperty(meta, 'organizationId')) where.organizationId = scope.organizationId\n        const existing = await tem.findOne(entityClass as any, where as any)\n        if (existing) {\n          skipped += 1\n          options.onProgress?.({ index: i, total, entity: record.entity, action: 'skipped' })\n          continue\n        }\n      }\n\n      const entity = tem.create(entityClass as any, data as any)\n      tem.persist(entity)\n      await tem.flush()\n      created += 1\n      options.onProgress?.({ index: i, total, entity: record.entity, action: 'created' })\n    }\n    if (options.dryRun) throw new SeedDryRunRollback()\n  }\n\n  try {\n    await em.transactional(run)\n  } catch (err) {\n    if (!(err instanceof SeedDryRunRollback)) throw err\n  }\n\n  return { total, created, skipped }\n}\n"],
+  "mappings": "AACA,SAAS,mCAAmC;AAC5C,SAAS,0BAA6C;AA0BtD,MAAM,2BAA2B,MAAM;AAAC;AAExC,SAAS,mBAAmB,MAAoC;AAC9D,SAAQ,KAAa,SAAS,KAAK,aAAa,KAAK;AACvD;AAEA,SAAS,mBAAmB,IAAqD;AAC/E,QAAM,UAAU,GAAG,YAAY;AAO/B,QAAM,OAAO,OAAO,QAAQ,WAAW,aAAa,QAAQ,OAAO,IAAI,QAAQ,aAAa,CAAC;AAG7F,QAAM,OACJ,eAAe,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,MAAM,QAAQ,GAAG,IAAI,MAAM,OAAO,OAAO,GAAG;AACvF,QAAM,QAAQ,oBAAI,IAAiC;AACnD,aAAW,QAAQ,MAAM;AACvB,QAAI,CAAC,QAAS,KAAa,SAAU;AACrC,UAAM,WAAW,4BAA4B,IAAI;AACjD,QAAI,CAAC,SAAU;AACf,QAAI,CAAC,MAAM,IAAI,QAAQ,EAAG,OAAM,IAAI,UAAU,IAAI;AAAA,EACpD;AACA,SAAO;AACT;AAEA,SAAS,YAAY,MAA2B,MAAuB;AACrE,SAAO,QAAQ,KAAK,cAAe,KAAK,WAAuC,IAAI,CAAC;AACtF;AASA,eAAsB,iBACpB,IACA,UACA,OACA,UAA2B,CAAC,GACH;AACzB,QAAM,MAAM,mBAAmB,MAAM,QAAQ;AAC7C,QAAM,QAAQ,mBAAmB,EAAE;AACnC,QAAM,QAAQ,IAAI,QAAQ;AAC1B,MAAI,UAAU;AACd,MAAI,UAAU;AAEd,QAAM,MAAM,OAAO,QAAuB;AACxC,aAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,QAAQ,KAAK,GAAG;AAC9C,YAAM,SAAS,IAAI,QAAQ,CAAC;AAC5B,YAAM,OAAO,MAAM,IAAI,OAAO,MAAM;AACpC,UAAI,CAAC,MAAM;AACT,cAAM,IAAI;AAAA,UACR,mCAAmC,OAAO,MAAM,eAAe,CAAC;AAAA,QAClE;AAAA,MACF;AACA,YAAM,cAAc,mBAAmB,IAAI;AAC3C,YAAM,OAAgC,EAAE,GAAG,OAAO,KAAK;AACvD,UAAI,YAAY,MAAM,UAAU,EAAG,MAAK,WAAW,MAAM;AACzD,UAAI,YAAY,MAAM,gBAAgB,EAAG,MAAK,iBAAiB,MAAM;AAErE,UAAI,OAAO,SAAS,OAAO,MAAM,QAAQ;AACvC,cAAM,QAAiC,CAAC;AACxC,mBAAW,SAAS,OAAO,MAAO,OAAM,KAAK,IAAI,KAAK,KAAK;AAC3D,YAAI,YAAY,MAAM,UAAU,EAAG,OAAM,WAAW,MAAM;AAC1D,YAAI,YAAY,MAAM,gBAAgB,EAAG,OAAM,iBAAiB,MAAM;AACtE,cAAM,WAAW,MAAM,IAAI,QAAQ,aAAoB,KAAY;AACnE,YAAI,UAAU;AACZ,qBAAW;AACX,kBAAQ,aAAa,EAAE,OAAO,GAAG,OAAO,QAAQ,OAAO,QAAQ,QAAQ,UAAU,CAAC;AAClF;AAAA,QACF;AAAA,MACF;AAEA,YAAM,SAAS,IAAI,OAAO,aAAoB,IAAW;AACzD,UAAI,QAAQ,MAAM;AAClB,YAAM,IAAI,MAAM;AAChB,iBAAW;AACX,cAAQ,aAAa,EAAE,OAAO,GAAG,OAAO,QAAQ,OAAO,QAAQ,QAAQ,UAAU,CAAC;AAAA,IACpF;AACA,QAAI,QAAQ,OAAQ,OAAM,IAAI,mBAAmB;AAAA,EACnD;AAEA,MAAI;AACF,UAAM,GAAG,cAAc,GAAG;AAAA,EAC5B,SAAS,KAAK;AACZ,QAAI,EAAE,eAAe,oBAAqB,OAAM;AAAA,EAClD;AAEA,SAAO,EAAE,OAAO,SAAS,QAAQ;AACnC;",
+  "names": []
+}

package/dist/lib/seed/types.js

@@ -0,0 +1,33 @@
+import { z } from "zod";
+const SEED_DOCUMENT_FORMAT = "om-seed";
+const SEED_DOCUMENT_VERSION = 1;
+const ENCRYPTED_SEED_FORMAT = "om-encrypted-seed";
+const ENCRYPTED_SEED_VERSION = 1;
+const ENCRYPTED_SEED_ALGORITHM = "aes-256-gcm";
+const seedRecordSchema = z.object({
+  entity: z.string().min(1),
+  match: z.array(z.string().min(1)).optional(),
+  data: z.record(z.string(), z.unknown())
+});
+const seedDocumentSchema = z.object({
+  format: z.literal(SEED_DOCUMENT_FORMAT),
+  version: z.literal(SEED_DOCUMENT_VERSION),
+  records: z.array(seedRecordSchema)
+});
+const encryptedSeedEnvelopeSchema = z.object({
+  format: z.literal(ENCRYPTED_SEED_FORMAT),
+  version: z.literal(ENCRYPTED_SEED_VERSION),
+  algorithm: z.literal(ENCRYPTED_SEED_ALGORITHM),
+  payload: z.string().min(1)
+});
+export {
+  ENCRYPTED_SEED_ALGORITHM,
+  ENCRYPTED_SEED_FORMAT,
+  ENCRYPTED_SEED_VERSION,
+  SEED_DOCUMENT_FORMAT,
+  SEED_DOCUMENT_VERSION,
+  encryptedSeedEnvelopeSchema,
+  seedDocumentSchema,
+  seedRecordSchema
+};
+//# sourceMappingURL=types.js.map

package/dist/lib/seed/types.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/lib/seed/types.ts"],
+  "sourcesContent": ["import { z } from 'zod'\n\nexport const SEED_DOCUMENT_FORMAT = 'om-seed'\nexport const SEED_DOCUMENT_VERSION = 1\n\nexport const ENCRYPTED_SEED_FORMAT = 'om-encrypted-seed'\nexport const ENCRYPTED_SEED_VERSION = 1\nexport const ENCRYPTED_SEED_ALGORITHM = 'aes-256-gcm'\n\n/**\n * A single record to seed. `entity` is the platform entity id (`module:entity`,\n * e.g. `customers:customer_entity`). `data` keys are the entity's own property\n * names (camelCase, as declared on the MikroORM entity). `match`, when present,\n * lists property names used for an idempotent existence check before insert \u2014\n * these MUST be non-encrypted natural keys (id, slug, code, *_hash); encrypted\n * fields cannot be matched because their ciphertext is non-deterministic.\n */\nexport const seedRecordSchema = z.object({\n  entity: z.string().min(1),\n  match: z.array(z.string().min(1)).optional(),\n  data: z.record(z.string(), z.unknown()),\n})\nexport type SeedRecord = z.infer<typeof seedRecordSchema>\n\n/**\n * The plaintext seed document. Records are applied in array order so authors can\n * satisfy foreign-key dependencies (create the parent before the child). The\n * document MUST NOT hard-code `tenantId`/`organizationId` \u2014 the loader injects\n * the target scope at load time so the same document seeds any tenant.\n */\nexport const seedDocumentSchema = z.object({\n  format: z.literal(SEED_DOCUMENT_FORMAT),\n  version: z.literal(SEED_DOCUMENT_VERSION),\n  records: z.array(seedRecordSchema),\n})\nexport type SeedDocument = z.infer<typeof seedDocumentSchema>\n\n/**\n * The committed-to-repo, opaque envelope. `payload` is the encrypted seed\n * document in the shared AES-GCM `iv:ct:tag:v1` wire format.\n */\nexport const encryptedSeedEnvelopeSchema = z.object({\n  format: z.literal(ENCRYPTED_SEED_FORMAT),\n  version: z.literal(ENCRYPTED_SEED_VERSION),\n  algorithm: z.literal(ENCRYPTED_SEED_ALGORITHM),\n  payload: z.string().min(1),\n})\nexport type EncryptedSeedEnvelope = z.infer<typeof encryptedSeedEnvelopeSchema>\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAEX,MAAM,uBAAuB;AAC7B,MAAM,wBAAwB;AAE9B,MAAM,wBAAwB;AAC9B,MAAM,yBAAyB;AAC/B,MAAM,2BAA2B;AAUjC,MAAM,mBAAmB,EAAE,OAAO;AAAA,EACvC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS;AAAA,EAC3C,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AACxC,CAAC;AASM,MAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,QAAQ,EAAE,QAAQ,oBAAoB;AAAA,EACtC,SAAS,EAAE,QAAQ,qBAAqB;AAAA,EACxC,SAAS,EAAE,MAAM,gBAAgB;AACnC,CAAC;AAOM,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAClD,QAAQ,EAAE,QAAQ,qBAAqB;AAAA,EACvC,SAAS,EAAE,QAAQ,sBAAsB;AAAA,EACzC,WAAW,EAAE,QAAQ,wBAAwB;AAAA,EAC7C,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;",
+  "names": []
+}

package/dist/lib/version.js

@@ -1,4 +1,4 @@
-const APP_VERSION = "0.7.1-develop.7193.1.910a5b0a1e";
+const APP_VERSION = "0.7.1-develop.7195.1.b5efd1d51a";
 const appVersion = APP_VERSION;
 export {
   APP_VERSION,

package/dist/lib/version.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/lib/version.ts"],
-  "sourcesContent": ["// Build-time generated version\nexport const APP_VERSION = '0.7.1-develop.7193.1.910a5b0a1e';\nexport const appVersion = APP_VERSION;\n"],
+  "sourcesContent": ["// Build-time generated version\nexport const APP_VERSION = '0.7.1-develop.7195.1.b5efd1d51a';\nexport const appVersion = APP_VERSION;\n"],
   "mappings": "AACO,MAAM,cAAc;AACpB,MAAM,aAAa;",
   "names": []
 }

package/dist/modules/events/factory.js

@@ -42,16 +42,32 @@ function getEventRegistryState() {
     return fallbackEventRegistryState;
   }
 }
+const CRUD_AFTER_EVENT_SUFFIXES = [".created", ".updated", ".deleted"];
+const DEFAULT_CRUD_PAYLOAD_SCHEMA = {
+  fields: [
+    { path: "id", type: "text" },
+    { path: "organizationId", type: "text", optional: true },
+    { path: "tenantId", type: "text", optional: true },
+    { path: "syncOrigin", type: "text", optional: true }
+  ]
+};
+function applyDefaultCrudPayloadSchema(event) {
+  if (event.payloadSchema) return event;
+  if (event.category !== "crud") return event;
+  if (!CRUD_AFTER_EVENT_SUFFIXES.some((suffix) => event.id.endsWith(suffix))) return event;
+  return { ...event, payloadSchema: DEFAULT_CRUD_PAYLOAD_SCHEMA };
+}
 function addDeclaredEvent(event) {
+  const declared = applyDefaultCrudPayloadSchema(event);
   const state = getEventRegistryState();
-  state.declaredEventIds.add(event.id);
-  const existingIndex = state.declaredEvents.findIndex((candidate) => candidate.id === event.id);
+  state.declaredEventIds.add(declared.id);
+  const existingIndex = state.declaredEvents.findIndex((candidate) => candidate.id === declared.id);
   if (existingIndex < 0) {
-    state.declaredEvents.push(event);
+    state.declaredEvents.push(declared);
     return;
   }
-  if (state.declaredEvents[existingIndex]?.module === event.module) {
-    state.declaredEvents[existingIndex] = event;
+  if (state.declaredEvents[existingIndex]?.module === declared.module) {
+    state.declaredEvents[existingIndex] = declared;
   }
 }
 function isEventDeclared(eventId) {
@@ -102,10 +118,12 @@ function getEventModuleConfigs() {
 function createModuleEvents(options) {
   const { moduleId, events, strict = false } = options;
   const validEventIds = new Set(events.map((e) => e.id));
-  const fullEvents = events.map((e) => ({
-    ...e,
-    module: moduleId
-  }));
+  const fullEvents = events.map(
+    (e) => applyDefaultCrudPayloadSchema({
+      ...e,
+      module: moduleId
+    })
+  );
   for (const event of fullEvents) {
     addDeclaredEvent(event);
   }
@@ -144,6 +162,7 @@ function createModuleEvents(options) {
   };
 }
 export {
+  DEFAULT_CRUD_PAYLOAD_SCHEMA,
   createModuleEvents,
   getAllDeclaredEventIds,
   getDeclaredEvents,

package/dist/modules/events/factory.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/events/factory.ts"],
-  "sourcesContent": ["/**\n * Event Module Factory\n *\n * Provides factory functions for creating type-safe event configurations.\n */\n\nimport { createLogger } from '../../lib/logger'\nimport type {\n  EventDefinition,\n  EventModuleConfig,\n  EventPayload,\n  EmitOptions,\n  CreateModuleEventsOptions,\n  ModuleEventEmitter,\n} from './types'\n\nconst logger = createLogger('events').child({ component: 'factory' })\n\n// =============================================================================\n// Global Event Bus Reference\n// =============================================================================\n\n/**\n * Type for the global event bus interface\n */\ninterface GlobalEventBus {\n  emit(event: string, payload: unknown, options?: EmitOptions): Promise<void>\n}\n\nconst GLOBAL_EVENT_BUS_KEY = '__openMercatoGlobalEventBus__'\n\n// Global event bus reference (set during bootstrap)\nlet globalEventBus: GlobalEventBus | null = null\n\n/**\n * Set the global event bus instance.\n * Called during app bootstrap to wire up event emission.\n */\nexport function setGlobalEventBus(bus: GlobalEventBus): void {\n  globalEventBus = bus\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_EVENT_BUS_KEY] = bus\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\n/**\n * Get the global event bus instance.\n * Returns null if not yet bootstrapped.\n */\nexport function getGlobalEventBus(): GlobalEventBus | null {\n  try {\n    const sharedBus = (globalThis as Record<string, unknown>)[GLOBAL_EVENT_BUS_KEY]\n    if (sharedBus && typeof sharedBus === 'object' && typeof (sharedBus as GlobalEventBus).emit === 'function') {\n      return sharedBus as GlobalEventBus\n    }\n  } catch {\n    // ignore global read failures\n  }\n  return globalEventBus\n}\n\n// =============================================================================\n// Event Registry for Validation\n// =============================================================================\n\ntype EventRegistryState = {\n  declaredEventIds: Set<string>\n  declaredEvents: EventDefinition[]\n  registeredEventConfigs: EventModuleConfig[] | null\n}\n\nconst GLOBAL_EVENT_REGISTRY_KEY = '__openMercatoEventDefinitionRegistry__'\n\nconst fallbackEventRegistryState: EventRegistryState = {\n  declaredEventIds: new Set<string>(),\n  declaredEvents: [],\n  registeredEventConfigs: null,\n}\n\nfunction isEventRegistryState(value: unknown): value is EventRegistryState {\n  if (!value || typeof value !== 'object') return false\n  const candidate = value as Partial<EventRegistryState>\n  return candidate.declaredEventIds instanceof Set\n    && Array.isArray(candidate.declaredEvents)\n    && (candidate.registeredEventConfigs === null || Array.isArray(candidate.registeredEventConfigs))\n}\n\nfunction getEventRegistryState(): EventRegistryState {\n  try {\n    const globalScope = globalThis as Record<string, unknown>\n    const existing = globalScope[GLOBAL_EVENT_REGISTRY_KEY]\n    if (isEventRegistryState(existing)) return existing\n    globalScope[GLOBAL_EVENT_REGISTRY_KEY] = fallbackEventRegistryState\n    return fallbackEventRegistryState\n  } catch {\n    // Restricted runtimes may deny global access. Keep the previous\n    // module-local behavior as a safe fallback.\n    return fallbackEventRegistryState\n  }\n}\n\nfunction addDeclaredEvent(event: EventDefinition): void {\n  const state = getEventRegistryState()\n  state.declaredEventIds.add(event.id)\n  const existingIndex = state.declaredEvents.findIndex((candidate) => candidate.id === event.id)\n  if (existingIndex < 0) {\n    state.declaredEvents.push(event)\n    return\n  }\n  // Refresh a module's own definition in place during HMR without allowing a\n  // duplicate declaration from another module to take over the event id.\n  if (state.declaredEvents[existingIndex]?.module === event.module) {\n    state.declaredEvents[existingIndex] = event\n  }\n}\n\n/**\n * Check if an event ID has been declared by any module.\n * Used for runtime validation to ensure only declared events are emitted.\n */\nexport function isEventDeclared(eventId: string): boolean {\n  return getEventRegistryState().declaredEventIds.has(eventId)\n}\n\n/**\n * Get all declared event IDs.\n * Useful for debugging and introspection.\n */\nexport function getAllDeclaredEventIds(): string[] {\n  return Array.from(getEventRegistryState().declaredEventIds)\n}\n\n/**\n * Get all declared events with their full definitions.\n * Used by the API to return available events for workflow triggers.\n */\nexport function getDeclaredEvents(): EventDefinition[] {\n  return [...getEventRegistryState().declaredEvents]\n}\n\n/**\n * Check if an event has clientBroadcast enabled.\n * Used by the SSE endpoint to filter events for the DOM Event Bridge.\n */\nexport function isBroadcastEvent(eventId: string): boolean {\n  const event = getEventRegistryState().declaredEvents.find(e => e.id === eventId)\n  return event?.clientBroadcast === true\n}\n\n/**\n * Check if an event should be published over the server-to-server event bridge.\n * Browser-broadcast events remain eligible for backward compatibility, while\n * crossProcessBroadcast supports private process coordination without SSE.\n */\nexport function isCrossProcessBroadcastEvent(eventId: string): boolean {\n  const event = getEventRegistryState().declaredEvents.find(e => e.id === eventId)\n  return event?.clientBroadcast === true || event?.crossProcessBroadcast === true\n}\n\n/**\n * Check whether an event is reserved for private server-to-server\n * coordination. Workflow-authored EMIT_EVENT activities must not emit these\n * events because their payload and event id are tenant-managed input.\n */\nexport function isPrivateCrossProcessBroadcastEvent(eventId: string): boolean {\n  const event = getEventRegistryState().declaredEvents.find(e => e.id === eventId)\n  return event?.crossProcessBroadcast === true && event?.clientBroadcast !== true\n}\n\n/**\n * Verify provenance for a private cross-process event. The module id is\n * stamped by a declared module emitter or another trusted server-side seam;\n * tenant-managed event payloads never participate in this decision.\n */\nexport function isPrivateCrossProcessEventEmitter(\n  eventId: string,\n  emitterModuleId: string | undefined,\n): boolean {\n  const event = getEventRegistryState().declaredEvents.find(e => e.id === eventId)\n  if (event?.crossProcessBroadcast !== true) return true\n  return typeof event.module === 'string'\n    && event.module.length > 0\n    && event.module === emitterModuleId\n}\n\n/**\n * Check if an event has portalBroadcast enabled.\n * Used by the portal SSE endpoint to filter events for the Portal Event Bridge.\n */\nexport function isPortalBroadcastEvent(eventId: string): boolean {\n  const event = getEventRegistryState().declaredEvents.find(e => e.id === eventId)\n  return event?.portalBroadcast === true\n}\n\n// =============================================================================\n// Bootstrap Registration (similar to searchModuleConfigs pattern)\n// =============================================================================\n\n/**\n * Register event module configurations globally.\n * Called during app bootstrap with configs from events.generated.ts.\n */\nexport function registerEventModuleConfigs(configs: EventModuleConfig[]): void {\n  const state = getEventRegistryState()\n  if (state.registeredEventConfigs !== null && process.env.NODE_ENV === 'development') {\n    logger.debug('Event module configs re-registered (this may occur during HMR)')\n  }\n  state.registeredEventConfigs = configs\n  for (const config of configs) {\n    for (const event of config.events) {\n      addDeclaredEvent(event)\n    }\n  }\n}\n\n/**\n * Get registered event module configurations.\n * Returns empty array if not registered.\n */\nexport function getEventModuleConfigs(): EventModuleConfig[] {\n  return getEventRegistryState().registeredEventConfigs ?? []\n}\n\n// =============================================================================\n// Factory Function\n// =============================================================================\n\n/**\n * Creates a type-safe event configuration for a module.\n *\n * Usage in module events.ts:\n * ```typescript\n * import { createModuleEvents } from '@open-mercato/shared/modules/events'\n *\n * const events = [\n *   { id: 'customers.people.created', label: 'Person Created', category: 'crud' },\n *   { id: 'customers.people.updated', label: 'Person Updated', category: 'crud' },\n * ] as const\n *\n * export const eventsConfig = createModuleEvents({\n *   moduleId: 'customers',\n *   events,\n * })\n *\n * // Export the typed emit function for use in commands\n * export const emitCustomersEvent = eventsConfig.emit\n *\n * // Export event IDs as a type for external use\n * export type CustomersEventId = typeof events[number]['id']\n *\n * export default eventsConfig\n * ```\n *\n * TypeScript will enforce that only declared event IDs can be emitted:\n * ```typescript\n * // \u2705 This compiles - event is declared\n * emitCustomersEvent('customers.people.created', { id: '123', tenantId: 'abc' })\n *\n * // \u274C TypeScript error - event not declared\n * emitCustomersEvent('customers.people.exploded', { id: '123' })\n * ```\n */\nexport function createModuleEvents<\n  const TEvents extends readonly { id: string }[],\n  TEventIds extends TEvents[number]['id'] = TEvents[number]['id']\n>(options: CreateModuleEventsOptions<TEventIds>): EventModuleConfig<TEventIds> {\n  const { moduleId, events, strict = false } = options\n\n  // Build set of valid event IDs for runtime validation\n  const validEventIds = new Set(events.map(e => e.id))\n\n  // Build full event definitions with module added\n  const fullEvents: EventDefinition[] = events.map(e => ({\n    ...e,\n    module: moduleId,\n  }))\n\n  // Register all event IDs and definitions in the global registry.\n  for (const event of fullEvents) {\n    addDeclaredEvent(event)\n  }\n\n  /**\n   * The emit function - validates events and delegates to the global event bus\n   */\n  const emit = async (\n    eventId: TEventIds,\n    payload: EventPayload,\n    emitOptions?: EmitOptions\n  ): Promise<void> => {\n    // Runtime validation - event must be declared\n    if (!validEventIds.has(eventId)) {\n      const message =\n        `[events] Module \"${moduleId}\" tried to emit undeclared event \"${eventId}\". ` +\n        `Add it to the module's events.ts file first.`\n\n      if (strict) {\n        throw new Error(message)\n      } else {\n        logger.error('Module tried to emit undeclared event \u2014 add it to the module events.ts first', { moduleId, eventId })\n        // In non-strict mode, still emit but with warning\n      }\n    }\n\n    // Get event bus from global reference\n    const eventBus = getGlobalEventBus()\n    if (!eventBus) {\n      logger.warn('Event bus not available, cannot emit event', { eventId })\n      return\n    }\n\n    const eventDefinition = fullEvents.find((event) => event.id === eventId)\n    const isClientBroadcast = eventDefinition?.clientBroadcast === true\n    const trustedOptions = eventDefinition?.crossProcessBroadcast === true || isClientBroadcast\n      ? {\n          ...emitOptions,\n          // Browser-broadcast module emitters historically accepted scope in\n          // their typed payload. Preserve that contract at the trusted module\n          // boundary while the event bus itself relies only on options.\n          ...(isClientBroadcast && emitOptions?.tenantId === undefined\n            ? { tenantId: payload.tenantId ?? null }\n            : {}),\n          ...(isClientBroadcast && emitOptions?.organizationId === undefined\n            ? { organizationId: payload.organizationId ?? null }\n            : {}),\n          ...(isClientBroadcast && emitOptions?.organizationIds === undefined && Array.isArray(payload.organizationIds)\n            ? { organizationIds: payload.organizationIds.filter((value): value is string => typeof value === 'string') }\n            : {}),\n          emitterModuleId: moduleId,\n        }\n      : emitOptions\n    await eventBus.emit(eventId, payload, trustedOptions)\n  }\n\n  return {\n    moduleId,\n    events: fullEvents,\n    emit: emit as unknown as ModuleEventEmitter<TEventIds>,\n  }\n}\n"],
-  "mappings": "AAMA,SAAS,oBAAoB;AAU7B,MAAM,SAAS,aAAa,QAAQ,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAapE,MAAM,uBAAuB;AAG7B,IAAI,iBAAwC;AAMrC,SAAS,kBAAkB,KAA2B;AAC3D,mBAAiB;AACjB,MAAI;AACF;AAAC,IAAC,WAAuC,oBAAoB,IAAI;AAAA,EACnE,QAAQ;AAAA,EAER;AACF;AAMO,SAAS,oBAA2C;AACzD,MAAI;AACF,UAAM,YAAa,WAAuC,oBAAoB;AAC9E,QAAI,aAAa,OAAO,cAAc,YAAY,OAAQ,UAA6B,SAAS,YAAY;AAC1G,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAYA,MAAM,4BAA4B;AAElC,MAAM,6BAAiD;AAAA,EACrD,kBAAkB,oBAAI,IAAY;AAAA,EAClC,gBAAgB,CAAC;AAAA,EACjB,wBAAwB;AAC1B;AAEA,SAAS,qBAAqB,OAA6C;AACzE,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,YAAY;AAClB,SAAO,UAAU,4BAA4B,OACxC,MAAM,QAAQ,UAAU,cAAc,MACrC,UAAU,2BAA2B,QAAQ,MAAM,QAAQ,UAAU,sBAAsB;AACnG;AAEA,SAAS,wBAA4C;AACnD,MAAI;AACF,UAAM,cAAc;AACpB,UAAM,WAAW,YAAY,yBAAyB;AACtD,QAAI,qBAAqB,QAAQ,EAAG,QAAO;AAC3C,gBAAY,yBAAyB,IAAI;AACzC,WAAO;AAAA,EACT,QAAQ;AAGN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,iBAAiB,OAA8B;AACtD,QAAM,QAAQ,sBAAsB;AACpC,QAAM,iBAAiB,IAAI,MAAM,EAAE;AACnC,QAAM,gBAAgB,MAAM,eAAe,UAAU,CAAC,cAAc,UAAU,OAAO,MAAM,EAAE;AAC7F,MAAI,gBAAgB,GAAG;AACrB,UAAM,eAAe,KAAK,KAAK;AAC/B;AAAA,EACF;AAGA,MAAI,MAAM,eAAe,aAAa,GAAG,WAAW,MAAM,QAAQ;AAChE,UAAM,eAAe,aAAa,IAAI;AAAA,EACxC;AACF;AAMO,SAAS,gBAAgB,SAA0B;AACxD,SAAO,sBAAsB,EAAE,iBAAiB,IAAI,OAAO;AAC7D;AAMO,SAAS,yBAAmC;AACjD,SAAO,MAAM,KAAK,sBAAsB,EAAE,gBAAgB;AAC5D;AAMO,SAAS,oBAAuC;AACrD,SAAO,CAAC,GAAG,sBAAsB,EAAE,cAAc;AACnD;AAMO,SAAS,iBAAiB,SAA0B;AACzD,QAAM,QAAQ,sBAAsB,EAAE,eAAe,KAAK,OAAK,EAAE,OAAO,OAAO;AAC/E,SAAO,OAAO,oBAAoB;AACpC;AAOO,SAAS,6BAA6B,SAA0B;AACrE,QAAM,QAAQ,sBAAsB,EAAE,eAAe,KAAK,OAAK,EAAE,OAAO,OAAO;AAC/E,SAAO,OAAO,oBAAoB,QAAQ,OAAO,0BAA0B;AAC7E;AAOO,SAAS,oCAAoC,SAA0B;AAC5E,QAAM,QAAQ,sBAAsB,EAAE,eAAe,KAAK,OAAK,EAAE,OAAO,OAAO;AAC/E,SAAO,OAAO,0BAA0B,QAAQ,OAAO,oBAAoB;AAC7E;AAOO,SAAS,kCACd,SACA,iBACS;AACT,QAAM,QAAQ,sBAAsB,EAAE,eAAe,KAAK,OAAK,EAAE,OAAO,OAAO;AAC/E,MAAI,OAAO,0BAA0B,KAAM,QAAO;AAClD,SAAO,OAAO,MAAM,WAAW,YAC1B,MAAM,OAAO,SAAS,KACtB,MAAM,WAAW;AACxB;AAMO,SAAS,uBAAuB,SAA0B;AAC/D,QAAM,QAAQ,sBAAsB,EAAE,eAAe,KAAK,OAAK,EAAE,OAAO,OAAO;AAC/E,SAAO,OAAO,oBAAoB;AACpC;AAUO,SAAS,2BAA2B,SAAoC;AAC7E,QAAM,QAAQ,sBAAsB;AACpC,MAAI,MAAM,2BAA2B,QAAQ,QAAQ,IAAI,aAAa,eAAe;AACnF,WAAO,MAAM,gEAAgE;AAAA,EAC/E;AACA,QAAM,yBAAyB;AAC/B,aAAW,UAAU,SAAS;AAC5B,eAAW,SAAS,OAAO,QAAQ;AACjC,uBAAiB,KAAK;AAAA,IACxB;AAAA,EACF;AACF;AAMO,SAAS,wBAA6C;AAC3D,SAAO,sBAAsB,EAAE,0BAA0B,CAAC;AAC5D;AAyCO,SAAS,mBAGd,SAA6E;AAC7E,QAAM,EAAE,UAAU,QAAQ,SAAS,MAAM,IAAI;AAG7C,QAAM,gBAAgB,IAAI,IAAI,OAAO,IAAI,OAAK,EAAE,EAAE,CAAC;AAGnD,QAAM,aAAgC,OAAO,IAAI,QAAM;AAAA,IACrD,GAAG;AAAA,IACH,QAAQ;AAAA,EACV,EAAE;AAGF,aAAW,SAAS,YAAY;AAC9B,qBAAiB,KAAK;AAAA,EACxB;AAKA,QAAM,OAAO,OACX,SACA,SACA,gBACkB;AAElB,QAAI,CAAC,cAAc,IAAI,OAAO,GAAG;AAC/B,YAAM,UACJ,oBAAoB,QAAQ,qCAAqC,OAAO;AAG1E,UAAI,QAAQ;AACV,cAAM,IAAI,MAAM,OAAO;AAAA,MACzB,OAAO;AACL,eAAO,MAAM,qFAAgF,EAAE,UAAU,QAAQ,CAAC;AAAA,MAEpH;AAAA,IACF;AAGA,UAAM,WAAW,kBAAkB;AACnC,QAAI,CAAC,UAAU;AACb,aAAO,KAAK,8CAA8C,EAAE,QAAQ,CAAC;AACrE;AAAA,IACF;AAEA,UAAM,kBAAkB,WAAW,KAAK,CAAC,UAAU,MAAM,OAAO,OAAO;AACvE,UAAM,oBAAoB,iBAAiB,oBAAoB;AAC/D,UAAM,iBAAiB,iBAAiB,0BAA0B,QAAQ,oBACtE;AAAA,MACE,GAAG;AAAA;AAAA;AAAA;AAAA,MAIH,GAAI,qBAAqB,aAAa,aAAa,SAC/C,EAAE,UAAU,QAAQ,YAAY,KAAK,IACrC,CAAC;AAAA,MACL,GAAI,qBAAqB,aAAa,mBAAmB,SACrD,EAAE,gBAAgB,QAAQ,kBAAkB,KAAK,IACjD,CAAC;AAAA,MACL,GAAI,qBAAqB,aAAa,oBAAoB,UAAa,MAAM,QAAQ,QAAQ,eAAe,IACxG,EAAE,iBAAiB,QAAQ,gBAAgB,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ,EAAE,IACzG,CAAC;AAAA,MACL,iBAAiB;AAAA,IACnB,IACA;AACJ,UAAM,SAAS,KAAK,SAAS,SAAS,cAAc;AAAA,EACtD;AAEA,SAAO;AAAA,IACL;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * Event Module Factory\n *\n * Provides factory functions for creating type-safe event configurations.\n */\n\nimport { createLogger } from '../../lib/logger'\nimport type {\n  EventDefinition,\n  EventModuleConfig,\n  EventPayload,\n  EventPayloadSchema,\n  EmitOptions,\n  CreateModuleEventsOptions,\n  ModuleEventEmitter,\n} from './types'\n\nconst logger = createLogger('events').child({ component: 'factory' })\n\n// =============================================================================\n// Global Event Bus Reference\n// =============================================================================\n\n/**\n * Type for the global event bus interface\n */\ninterface GlobalEventBus {\n  emit(event: string, payload: unknown, options?: EmitOptions): Promise<void>\n}\n\nconst GLOBAL_EVENT_BUS_KEY = '__openMercatoGlobalEventBus__'\n\n// Global event bus reference (set during bootstrap)\nlet globalEventBus: GlobalEventBus | null = null\n\n/**\n * Set the global event bus instance.\n * Called during app bootstrap to wire up event emission.\n */\nexport function setGlobalEventBus(bus: GlobalEventBus): void {\n  globalEventBus = bus\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_EVENT_BUS_KEY] = bus\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\n/**\n * Get the global event bus instance.\n * Returns null if not yet bootstrapped.\n */\nexport function getGlobalEventBus(): GlobalEventBus | null {\n  try {\n    const sharedBus = (globalThis as Record<string, unknown>)[GLOBAL_EVENT_BUS_KEY]\n    if (sharedBus && typeof sharedBus === 'object' && typeof (sharedBus as GlobalEventBus).emit === 'function') {\n      return sharedBus as GlobalEventBus\n    }\n  } catch {\n    // ignore global read failures\n  }\n  return globalEventBus\n}\n\n// =============================================================================\n// Event Registry for Validation\n// =============================================================================\n\ntype EventRegistryState = {\n  declaredEventIds: Set<string>\n  declaredEvents: EventDefinition[]\n  registeredEventConfigs: EventModuleConfig[] | null\n}\n\nconst GLOBAL_EVENT_REGISTRY_KEY = '__openMercatoEventDefinitionRegistry__'\n\nconst fallbackEventRegistryState: EventRegistryState = {\n  declaredEventIds: new Set<string>(),\n  declaredEvents: [],\n  registeredEventConfigs: null,\n}\n\nfunction isEventRegistryState(value: unknown): value is EventRegistryState {\n  if (!value || typeof value !== 'object') return false\n  const candidate = value as Partial<EventRegistryState>\n  return candidate.declaredEventIds instanceof Set\n    && Array.isArray(candidate.declaredEvents)\n    && (candidate.registeredEventConfigs === null || Array.isArray(candidate.registeredEventConfigs))\n}\n\nfunction getEventRegistryState(): EventRegistryState {\n  try {\n    const globalScope = globalThis as Record<string, unknown>\n    const existing = globalScope[GLOBAL_EVENT_REGISTRY_KEY]\n    if (isEventRegistryState(existing)) return existing\n    globalScope[GLOBAL_EVENT_REGISTRY_KEY] = fallbackEventRegistryState\n    return fallbackEventRegistryState\n  } catch {\n    // Restricted runtimes may deny global access. Keep the previous\n    // module-local behavior as a safe fallback.\n    return fallbackEventRegistryState\n  }\n}\n\nconst CRUD_AFTER_EVENT_SUFFIXES = ['.created', '.updated', '.deleted'] as const\n\n/**\n * Generated payload schema for platform-emitted CRUD after-events. Mirrors the\n * default payload built by the data engine's `emitOrmEntityEvent` when no\n * `buildPayload` override is configured: `{ id, organizationId, tenantId }`\n * plus `syncOrigin` when the write originated from a sync. organizationId and\n * tenantId keys are always present but may be null, so they are `optional`.\n */\nexport const DEFAULT_CRUD_PAYLOAD_SCHEMA: EventPayloadSchema = {\n  fields: [\n    { path: 'id', type: 'text' },\n    { path: 'organizationId', type: 'text', optional: true },\n    { path: 'tenantId', type: 'text', optional: true },\n    { path: 'syncOrigin', type: 'text', optional: true },\n  ],\n}\n\nfunction applyDefaultCrudPayloadSchema(event: EventDefinition): EventDefinition {\n  if (event.payloadSchema) return event\n  if (event.category !== 'crud') return event\n  if (!CRUD_AFTER_EVENT_SUFFIXES.some(suffix => event.id.endsWith(suffix))) return event\n  return { ...event, payloadSchema: DEFAULT_CRUD_PAYLOAD_SCHEMA }\n}\n\nfunction addDeclaredEvent(event: EventDefinition): void {\n  const declared = applyDefaultCrudPayloadSchema(event)\n  const state = getEventRegistryState()\n  state.declaredEventIds.add(declared.id)\n  const existingIndex = state.declaredEvents.findIndex((candidate) => candidate.id === declared.id)\n  if (existingIndex < 0) {\n    state.declaredEvents.push(declared)\n    return\n  }\n  // Refresh a module's own definition in place during HMR without allowing a\n  // duplicate declaration from another module to take over the event id.\n  if (state.declaredEvents[existingIndex]?.module === declared.module) {\n    state.declaredEvents[existingIndex] = declared\n  }\n}\n\n/**\n * Check if an event ID has been declared by any module.\n * Used for runtime validation to ensure only declared events are emitted.\n */\nexport function isEventDeclared(eventId: string): boolean {\n  return getEventRegistryState().declaredEventIds.has(eventId)\n}\n\n/**\n * Get all declared event IDs.\n * Useful for debugging and introspection.\n */\nexport function getAllDeclaredEventIds(): string[] {\n  return Array.from(getEventRegistryState().declaredEventIds)\n}\n\n/**\n * Get all declared events with their full definitions.\n * Used by the API to return available events for workflow triggers.\n */\nexport function getDeclaredEvents(): EventDefinition[] {\n  return [...getEventRegistryState().declaredEvents]\n}\n\n/**\n * Check if an event has clientBroadcast enabled.\n * Used by the SSE endpoint to filter events for the DOM Event Bridge.\n */\nexport function isBroadcastEvent(eventId: string): boolean {\n  const event = getEventRegistryState().declaredEvents.find(e => e.id === eventId)\n  return event?.clientBroadcast === true\n}\n\n/**\n * Check if an event should be published over the server-to-server event bridge.\n * Browser-broadcast events remain eligible for backward compatibility, while\n * crossProcessBroadcast supports private process coordination without SSE.\n */\nexport function isCrossProcessBroadcastEvent(eventId: string): boolean {\n  const event = getEventRegistryState().declaredEvents.find(e => e.id === eventId)\n  return event?.clientBroadcast === true || event?.crossProcessBroadcast === true\n}\n\n/**\n * Check whether an event is reserved for private server-to-server\n * coordination. Workflow-authored EMIT_EVENT activities must not emit these\n * events because their payload and event id are tenant-managed input.\n */\nexport function isPrivateCrossProcessBroadcastEvent(eventId: string): boolean {\n  const event = getEventRegistryState().declaredEvents.find(e => e.id === eventId)\n  return event?.crossProcessBroadcast === true && event?.clientBroadcast !== true\n}\n\n/**\n * Verify provenance for a private cross-process event. The module id is\n * stamped by a declared module emitter or another trusted server-side seam;\n * tenant-managed event payloads never participate in this decision.\n */\nexport function isPrivateCrossProcessEventEmitter(\n  eventId: string,\n  emitterModuleId: string | undefined,\n): boolean {\n  const event = getEventRegistryState().declaredEvents.find(e => e.id === eventId)\n  if (event?.crossProcessBroadcast !== true) return true\n  return typeof event.module === 'string'\n    && event.module.length > 0\n    && event.module === emitterModuleId\n}\n\n/**\n * Check if an event has portalBroadcast enabled.\n * Used by the portal SSE endpoint to filter events for the Portal Event Bridge.\n */\nexport function isPortalBroadcastEvent(eventId: string): boolean {\n  const event = getEventRegistryState().declaredEvents.find(e => e.id === eventId)\n  return event?.portalBroadcast === true\n}\n\n// =============================================================================\n// Bootstrap Registration (similar to searchModuleConfigs pattern)\n// =============================================================================\n\n/**\n * Register event module configurations globally.\n * Called during app bootstrap with configs from events.generated.ts.\n */\nexport function registerEventModuleConfigs(configs: EventModuleConfig[]): void {\n  const state = getEventRegistryState()\n  if (state.registeredEventConfigs !== null && process.env.NODE_ENV === 'development') {\n    logger.debug('Event module configs re-registered (this may occur during HMR)')\n  }\n  state.registeredEventConfigs = configs\n  for (const config of configs) {\n    for (const event of config.events) {\n      addDeclaredEvent(event)\n    }\n  }\n}\n\n/**\n * Get registered event module configurations.\n * Returns empty array if not registered.\n */\nexport function getEventModuleConfigs(): EventModuleConfig[] {\n  return getEventRegistryState().registeredEventConfigs ?? []\n}\n\n// =============================================================================\n// Factory Function\n// =============================================================================\n\n/**\n * Creates a type-safe event configuration for a module.\n *\n * Usage in module events.ts:\n * ```typescript\n * import { createModuleEvents } from '@open-mercato/shared/modules/events'\n *\n * const events = [\n *   { id: 'customers.people.created', label: 'Person Created', category: 'crud' },\n *   { id: 'customers.people.updated', label: 'Person Updated', category: 'crud' },\n * ] as const\n *\n * export const eventsConfig = createModuleEvents({\n *   moduleId: 'customers',\n *   events,\n * })\n *\n * // Export the typed emit function for use in commands\n * export const emitCustomersEvent = eventsConfig.emit\n *\n * // Export event IDs as a type for external use\n * export type CustomersEventId = typeof events[number]['id']\n *\n * export default eventsConfig\n * ```\n *\n * TypeScript will enforce that only declared event IDs can be emitted:\n * ```typescript\n * // \u2705 This compiles - event is declared\n * emitCustomersEvent('customers.people.created', { id: '123', tenantId: 'abc' })\n *\n * // \u274C TypeScript error - event not declared\n * emitCustomersEvent('customers.people.exploded', { id: '123' })\n * ```\n */\nexport function createModuleEvents<\n  const TEvents extends readonly { id: string }[],\n  TEventIds extends TEvents[number]['id'] = TEvents[number]['id']\n>(options: CreateModuleEventsOptions<TEventIds>): EventModuleConfig<TEventIds> {\n  const { moduleId, events, strict = false } = options\n\n  // Build set of valid event IDs for runtime validation\n  const validEventIds = new Set(events.map(e => e.id))\n\n  // Build full event definitions with module added and the generated CRUD\n  // payload-schema default applied, so config consumers and the global\n  // registry see the same definitions.\n  const fullEvents: EventDefinition[] = events.map(e =>\n    applyDefaultCrudPayloadSchema({\n      ...e,\n      module: moduleId,\n    }),\n  )\n\n  // Register all event IDs and definitions in the global registry.\n  for (const event of fullEvents) {\n    addDeclaredEvent(event)\n  }\n\n  /**\n   * The emit function - validates events and delegates to the global event bus\n   */\n  const emit = async (\n    eventId: TEventIds,\n    payload: EventPayload,\n    emitOptions?: EmitOptions\n  ): Promise<void> => {\n    // Runtime validation - event must be declared\n    if (!validEventIds.has(eventId)) {\n      const message =\n        `[events] Module \"${moduleId}\" tried to emit undeclared event \"${eventId}\". ` +\n        `Add it to the module's events.ts file first.`\n\n      if (strict) {\n        throw new Error(message)\n      } else {\n        logger.error('Module tried to emit undeclared event \u2014 add it to the module events.ts first', { moduleId, eventId })\n        // In non-strict mode, still emit but with warning\n      }\n    }\n\n    // Get event bus from global reference\n    const eventBus = getGlobalEventBus()\n    if (!eventBus) {\n      logger.warn('Event bus not available, cannot emit event', { eventId })\n      return\n    }\n\n    const eventDefinition = fullEvents.find((event) => event.id === eventId)\n    const isClientBroadcast = eventDefinition?.clientBroadcast === true\n    const trustedOptions = eventDefinition?.crossProcessBroadcast === true || isClientBroadcast\n      ? {\n          ...emitOptions,\n          // Browser-broadcast module emitters historically accepted scope in\n          // their typed payload. Preserve that contract at the trusted module\n          // boundary while the event bus itself relies only on options.\n          ...(isClientBroadcast && emitOptions?.tenantId === undefined\n            ? { tenantId: payload.tenantId ?? null }\n            : {}),\n          ...(isClientBroadcast && emitOptions?.organizationId === undefined\n            ? { organizationId: payload.organizationId ?? null }\n            : {}),\n          ...(isClientBroadcast && emitOptions?.organizationIds === undefined && Array.isArray(payload.organizationIds)\n            ? { organizationIds: payload.organizationIds.filter((value): value is string => typeof value === 'string') }\n            : {}),\n          emitterModuleId: moduleId,\n        }\n      : emitOptions\n    await eventBus.emit(eventId, payload, trustedOptions)\n  }\n\n  return {\n    moduleId,\n    events: fullEvents,\n    emit: emit as unknown as ModuleEventEmitter<TEventIds>,\n  }\n}\n"],
+  "mappings": "AAMA,SAAS,oBAAoB;AAW7B,MAAM,SAAS,aAAa,QAAQ,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAapE,MAAM,uBAAuB;AAG7B,IAAI,iBAAwC;AAMrC,SAAS,kBAAkB,KAA2B;AAC3D,mBAAiB;AACjB,MAAI;AACF;AAAC,IAAC,WAAuC,oBAAoB,IAAI;AAAA,EACnE,QAAQ;AAAA,EAER;AACF;AAMO,SAAS,oBAA2C;AACzD,MAAI;AACF,UAAM,YAAa,WAAuC,oBAAoB;AAC9E,QAAI,aAAa,OAAO,cAAc,YAAY,OAAQ,UAA6B,SAAS,YAAY;AAC1G,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAYA,MAAM,4BAA4B;AAElC,MAAM,6BAAiD;AAAA,EACrD,kBAAkB,oBAAI,IAAY;AAAA,EAClC,gBAAgB,CAAC;AAAA,EACjB,wBAAwB;AAC1B;AAEA,SAAS,qBAAqB,OAA6C;AACzE,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,YAAY;AAClB,SAAO,UAAU,4BAA4B,OACxC,MAAM,QAAQ,UAAU,cAAc,MACrC,UAAU,2BAA2B,QAAQ,MAAM,QAAQ,UAAU,sBAAsB;AACnG;AAEA,SAAS,wBAA4C;AACnD,MAAI;AACF,UAAM,cAAc;AACpB,UAAM,WAAW,YAAY,yBAAyB;AACtD,QAAI,qBAAqB,QAAQ,EAAG,QAAO;AAC3C,gBAAY,yBAAyB,IAAI;AACzC,WAAO;AAAA,EACT,QAAQ;AAGN,WAAO;AAAA,EACT;AACF;AAEA,MAAM,4BAA4B,CAAC,YAAY,YAAY,UAAU;AAS9D,MAAM,8BAAkD;AAAA,EAC7D,QAAQ;AAAA,IACN,EAAE,MAAM,MAAM,MAAM,OAAO;AAAA,IAC3B,EAAE,MAAM,kBAAkB,MAAM,QAAQ,UAAU,KAAK;AAAA,IACvD,EAAE,MAAM,YAAY,MAAM,QAAQ,UAAU,KAAK;AAAA,IACjD,EAAE,MAAM,cAAc,MAAM,QAAQ,UAAU,KAAK;AAAA,EACrD;AACF;AAEA,SAAS,8BAA8B,OAAyC;AAC9E,MAAI,MAAM,cAAe,QAAO;AAChC,MAAI,MAAM,aAAa,OAAQ,QAAO;AACtC,MAAI,CAAC,0BAA0B,KAAK,YAAU,MAAM,GAAG,SAAS,MAAM,CAAC,EAAG,QAAO;AACjF,SAAO,EAAE,GAAG,OAAO,eAAe,4BAA4B;AAChE;AAEA,SAAS,iBAAiB,OAA8B;AACtD,QAAM,WAAW,8BAA8B,KAAK;AACpD,QAAM,QAAQ,sBAAsB;AACpC,QAAM,iBAAiB,IAAI,SAAS,EAAE;AACtC,QAAM,gBAAgB,MAAM,eAAe,UAAU,CAAC,cAAc,UAAU,OAAO,SAAS,EAAE;AAChG,MAAI,gBAAgB,GAAG;AACrB,UAAM,eAAe,KAAK,QAAQ;AAClC;AAAA,EACF;AAGA,MAAI,MAAM,eAAe,aAAa,GAAG,WAAW,SAAS,QAAQ;AACnE,UAAM,eAAe,aAAa,IAAI;AAAA,EACxC;AACF;AAMO,SAAS,gBAAgB,SAA0B;AACxD,SAAO,sBAAsB,EAAE,iBAAiB,IAAI,OAAO;AAC7D;AAMO,SAAS,yBAAmC;AACjD,SAAO,MAAM,KAAK,sBAAsB,EAAE,gBAAgB;AAC5D;AAMO,SAAS,oBAAuC;AACrD,SAAO,CAAC,GAAG,sBAAsB,EAAE,cAAc;AACnD;AAMO,SAAS,iBAAiB,SAA0B;AACzD,QAAM,QAAQ,sBAAsB,EAAE,eAAe,KAAK,OAAK,EAAE,OAAO,OAAO;AAC/E,SAAO,OAAO,oBAAoB;AACpC;AAOO,SAAS,6BAA6B,SAA0B;AACrE,QAAM,QAAQ,sBAAsB,EAAE,eAAe,KAAK,OAAK,EAAE,OAAO,OAAO;AAC/E,SAAO,OAAO,oBAAoB,QAAQ,OAAO,0BAA0B;AAC7E;AAOO,SAAS,oCAAoC,SAA0B;AAC5E,QAAM,QAAQ,sBAAsB,EAAE,eAAe,KAAK,OAAK,EAAE,OAAO,OAAO;AAC/E,SAAO,OAAO,0BAA0B,QAAQ,OAAO,oBAAoB;AAC7E;AAOO,SAAS,kCACd,SACA,iBACS;AACT,QAAM,QAAQ,sBAAsB,EAAE,eAAe,KAAK,OAAK,EAAE,OAAO,OAAO;AAC/E,MAAI,OAAO,0BAA0B,KAAM,QAAO;AAClD,SAAO,OAAO,MAAM,WAAW,YAC1B,MAAM,OAAO,SAAS,KACtB,MAAM,WAAW;AACxB;AAMO,SAAS,uBAAuB,SAA0B;AAC/D,QAAM,QAAQ,sBAAsB,EAAE,eAAe,KAAK,OAAK,EAAE,OAAO,OAAO;AAC/E,SAAO,OAAO,oBAAoB;AACpC;AAUO,SAAS,2BAA2B,SAAoC;AAC7E,QAAM,QAAQ,sBAAsB;AACpC,MAAI,MAAM,2BAA2B,QAAQ,QAAQ,IAAI,aAAa,eAAe;AACnF,WAAO,MAAM,gEAAgE;AAAA,EAC/E;AACA,QAAM,yBAAyB;AAC/B,aAAW,UAAU,SAAS;AAC5B,eAAW,SAAS,OAAO,QAAQ;AACjC,uBAAiB,KAAK;AAAA,IACxB;AAAA,EACF;AACF;AAMO,SAAS,wBAA6C;AAC3D,SAAO,sBAAsB,EAAE,0BAA0B,CAAC;AAC5D;AAyCO,SAAS,mBAGd,SAA6E;AAC7E,QAAM,EAAE,UAAU,QAAQ,SAAS,MAAM,IAAI;AAG7C,QAAM,gBAAgB,IAAI,IAAI,OAAO,IAAI,OAAK,EAAE,EAAE,CAAC;AAKnD,QAAM,aAAgC,OAAO;AAAA,IAAI,OAC/C,8BAA8B;AAAA,MAC5B,GAAG;AAAA,MACH,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AAGA,aAAW,SAAS,YAAY;AAC9B,qBAAiB,KAAK;AAAA,EACxB;AAKA,QAAM,OAAO,OACX,SACA,SACA,gBACkB;AAElB,QAAI,CAAC,cAAc,IAAI,OAAO,GAAG;AAC/B,YAAM,UACJ,oBAAoB,QAAQ,qCAAqC,OAAO;AAG1E,UAAI,QAAQ;AACV,cAAM,IAAI,MAAM,OAAO;AAAA,MACzB,OAAO;AACL,eAAO,MAAM,qFAAgF,EAAE,UAAU,QAAQ,CAAC;AAAA,MAEpH;AAAA,IACF;AAGA,UAAM,WAAW,kBAAkB;AACnC,QAAI,CAAC,UAAU;AACb,aAAO,KAAK,8CAA8C,EAAE,QAAQ,CAAC;AACrE;AAAA,IACF;AAEA,UAAM,kBAAkB,WAAW,KAAK,CAAC,UAAU,MAAM,OAAO,OAAO;AACvE,UAAM,oBAAoB,iBAAiB,oBAAoB;AAC/D,UAAM,iBAAiB,iBAAiB,0BAA0B,QAAQ,oBACtE;AAAA,MACE,GAAG;AAAA;AAAA;AAAA;AAAA,MAIH,GAAI,qBAAqB,aAAa,aAAa,SAC/C,EAAE,UAAU,QAAQ,YAAY,KAAK,IACrC,CAAC;AAAA,MACL,GAAI,qBAAqB,aAAa,mBAAmB,SACrD,EAAE,gBAAgB,QAAQ,kBAAkB,KAAK,IACjD,CAAC;AAAA,MACL,GAAI,qBAAqB,aAAa,oBAAoB,UAAa,MAAM,QAAQ,QAAQ,eAAe,IACxG,EAAE,iBAAiB,QAAQ,gBAAgB,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ,EAAE,IACzG,CAAC;AAAA,MACL,iBAAiB;AAAA,IACnB,IACA;AACJ,UAAM,SAAS,KAAK,SAAS,SAAS,cAAc;AAAA,EACtD;AAEA,SAAO;AAAA,IACL;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,EACF;AACF;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/shared",
-  "version": "0.7.1-develop.7193.1.910a5b0a1e",
+  "version": "0.7.1-develop.7195.1.b5efd1d51a",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -113,10 +113,11 @@
     "@mikro-orm/core": "^7.1.14",
     "@mikro-orm/decorators": "^7.1.14",
     "@mikro-orm/postgresql": "^7.1.14",
-    "@open-mercato/cache": "0.7.1-develop.7193.1.910a5b0a1e",
+    "@open-mercato/cache": "0.7.1-develop.7195.1.b5efd1d51a",
     "@types/html-to-text": "^9.0.4",
     "@types/sanitize-html": "^2.16.1",
     "dotenv": "^17.4.2",
+    "gpt-tokenizer": "^3.4.0",
     "html-to-text": "^10.0.0",
     "pino": "^10.3.1",
     "rate-limiter-flexible": "^11.2.0",

package/src/lib/ai/__tests__/opencode-tool-parts.test.ts

@@ -0,0 +1,81 @@
+import { normalizeOpenCodeToolPart } from '../opencode-tool-parts'
+
+describe('normalizeOpenCodeToolPart', () => {
+  it('opens a native tool part on a non-terminal state', () => {
+    const update = normalizeOpenCodeToolPart({
+      type: 'tool',
+      id: 'prt-1',
+      callID: 'call-1',
+      tool: 'load_skill',
+      state: { status: 'running', input: { skillId: 'x' } },
+    })
+    expect(update).toEqual({ phase: 'progress', callId: 'call-1', toolName: 'load_skill', input: { skillId: 'x' } })
+  })
+
+  it('finishes a native tool part on completed, carrying the output', () => {
+    const update = normalizeOpenCodeToolPart({
+      type: 'tool',
+      callID: 'call-1',
+      tool: 'load_skill',
+      state: { status: 'completed', input: { skillId: 'x' }, output: { ok: true } },
+    })
+    expect(update).toEqual({
+      phase: 'finish',
+      callId: 'call-1',
+      toolName: 'load_skill',
+      input: { skillId: 'x' },
+      output: { ok: true },
+      status: 'ok',
+    })
+  })
+
+  it('maps an errored native tool part to status error, preferring state.error', () => {
+    const update = normalizeOpenCodeToolPart({
+      type: 'tool',
+      callID: 'call-2',
+      tool: 'run_skill_script',
+      state: { status: 'error', error: 'boom' },
+    })
+    expect(update).toEqual({
+      phase: 'finish',
+      callId: 'call-2',
+      toolName: 'run_skill_script',
+      input: undefined,
+      output: 'boom',
+      status: 'error',
+    })
+  })
+
+  it('falls back to part.id when callID is absent', () => {
+    const update = normalizeOpenCodeToolPart({
+      type: 'tool',
+      id: 'prt-9',
+      tool: 'search',
+      state: { status: 'running' },
+    })
+    expect(update).toMatchObject({ phase: 'progress', callId: 'prt-9', toolName: 'search' })
+  })
+
+  it('handles the legacy tool_use / tool_result shape', () => {
+    expect(normalizeOpenCodeToolPart({ type: 'tool_use', id: 'tc-1', name: 'load_skill', input: { a: 1 } })).toEqual({
+      phase: 'progress',
+      callId: 'tc-1',
+      toolName: 'load_skill',
+      input: { a: 1 },
+    })
+    expect(normalizeOpenCodeToolPart({ type: 'tool_result', tool_use_id: 'tc-1', content: { ok: true } })).toEqual({
+      phase: 'finish',
+      callId: 'tc-1',
+      output: { ok: true },
+      status: 'ok',
+    })
+  })
+
+  it('ignores non-tool and malformed parts', () => {
+    expect(normalizeOpenCodeToolPart({ type: 'text', text: 'hi' })).toBeNull()
+    expect(normalizeOpenCodeToolPart({ type: 'thinking' })).toBeNull()
+    expect(normalizeOpenCodeToolPart({ type: 'tool' })).toBeNull() // no callID/tool
+    expect(normalizeOpenCodeToolPart(null)).toBeNull()
+    expect(normalizeOpenCodeToolPart('nope')).toBeNull()
+  })
+})

package/src/lib/ai/__tests__/token-count.test.ts

@@ -0,0 +1,20 @@
+import { countTokens, TOKEN_ENCODING } from '../token-count'
+
+describe('countTokens', () => {
+  it('returns 0 for empty / nullish input', () => {
+    expect(countTokens('')).toBe(0)
+    expect(countTokens(null)).toBe(0)
+    expect(countTokens(undefined)).toBe(0)
+  })
+
+  it('counts more tokens for longer text', () => {
+    const short = countTokens('hello')
+    const long = countTokens('hello world, this is a noticeably longer sentence.')
+    expect(short).toBeGreaterThan(0)
+    expect(long).toBeGreaterThan(short)
+  })
+
+  it('exposes the encoding label', () => {
+    expect(TOKEN_ENCODING).toBe('o200k_base')
+  })
+})