@vtex/faststore-plugin-buyer-portal 2.0.19 → 2.0.21

package/CHANGELOG.md

@@ -7,6 +7,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.0.21] - 2026-08-13
+
+### Changed
+- Replaced hardcoded, user-facing strings in the `contracts` feature (multi-contract/SUMA drawers, list, selection bar, listing/information layouts) and in `RolesMultiSelect` with `useLocalization()`/`t()` calls, adding the corresponding keys to the CMS message catalog
+
+## [2.0.20] - 2026-08-12
+
+### Added
+
+- Analytics events now include a derived `metadata.actor_type` (`internal` | `external`) based on the logged-in user's email domain (`@vtex.com` → internal), with no email or identity fields in the payload ([B2BTEAM-3639](https://vtex-dev.atlassian.net/browse/B2BTEAM-3639))
+
 ## [2.0.19] - 2026-08-04
 
 ### Changed
@@ -821,7 +832,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Add CHANGELOG file
 - Add README file
 
-[unreleased]: https://github.com/vtex/faststore-plugin-buyer-portal/compare/v2.0.19...HEAD
+[unreleased]: https://github.com/vtex/faststore-plugin-buyer-portal/compare/v2.0.21...HEAD
 [1.3.55]: https://github.com/vtex/faststore-plugin-buyer-portal/compare/v1.3.54...v1.3.55
 [1.3.54]: https://github.com/vtex/faststore-plugin-buyer-portal/compare/v1.3.53...v1.3.54
 [1.3.53]: https://github.com/vtex/faststore-plugin-buyer-portal/compare/v1.3.52...v1.3.53
@@ -919,6 +930,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 [2.0.10]: https://github.com/vtex/faststore-plugin-buyer-portal/compare/v2.0.9...v2.0.10
 [2.0.9]: https://github.com/vtex/faststore-plugin-buyer-portal/releases/tag/2.0.9
 
+[2.0.21]: https://github.com/vtex/faststore-plugin-buyer-portal/compare/v2.0.20...v2.0.21
+[2.0.20]: https://github.com/vtex/faststore-plugin-buyer-portal/compare/v2.0.19...v2.0.20
 [2.0.19]: https://github.com/vtex/faststore-plugin-buyer-portal/compare/v2.0.18...v2.0.19
 [2.0.18]: https://github.com/vtex/faststore-plugin-buyer-portal/compare/v2.0.17...v2.0.18
 [2.0.17]: https://github.com/vtex/faststore-plugin-buyer-portal/compare/v2.0.16...v2.0.17

package/docs/i18n/locales.json

@@ -14,6 +14,7 @@
   "shared.buttons.create": "Create",
   "shared.buttons.tryAgain": "Try again",
   "shared.buttons.loadMore": "Load More",
+  "shared.buttons.gotIt": "Got it",
   "shared.labels.loading": "Loading...",
   "shared.labels.name": "Name",
   "shared.labels.email": "Email",
@@ -377,6 +378,8 @@
   "users.dropdown.resetPassword": "Reset password",
   "users.dropdown.changeOrganizationalUnit": "Change organizational unit",
   "users.components.UsersCard.manageUsers": "Manage users",
+  "users.rolesMultiSelect.customTag": "Custom",
+  "users.rolesMultiSelect.noMatchingRoles": "No matching roles",
   "budgets.titles.budgets": "Budgets",
   "budgets.titles.financeAndCompliance": "Finance and Compliance",
   "budgets.labels.remainingBalance": "Remaining balance",
@@ -692,6 +695,42 @@
   "contracts.actions.viewContracts": "View contracts",
   "contracts.dropdown.open": "Open",
   "contracts.dropdown.edit": "Edit",
+  "contracts.labels.contract": "contract",
+  "contracts.labels.contracts": "contracts",
+  "contracts.labels.selectAllCount": "Select all ({0})",
+  "contracts.labels.selectedCount": "{0} selected",
+  "contracts.actions.setAsDefault": "Set as default",
+  "contracts.addDrawer.title": "Add contracts",
+  "contracts.addDrawer.description": "Add available contracts to {0}",
+  "contracts.addDrawer.paginationRange": "{0}–{1} of {2}",
+  "contracts.addDrawer.loading": "Loading contracts…",
+  "contracts.addDrawer.noSearchResults": "No contracts match your search.",
+  "contracts.addDrawer.noneAvailable": "No contracts available to add.",
+  "contracts.removeDrawer.title": "Remove {0}",
+  "contracts.removeDrawer.question": "Are you sure you want to remove {0} {1} from {2}?",
+  "contracts.removeDrawer.warning": "Removed contracts can be added again later, but any specific configurations for these contracts within this organizational unit will be lost. This will prevent users in this organization unit from accessing these contracts during store navigation and checkout.",
+  "contracts.removeDrawer.unableTitle": "Unable to remove contracts",
+  "contracts.removeDrawer.error": "An error occurred while removing the contract. Please try again.",
+  "contracts.removeDrawer.minimumContractWarning": "Every organizational unit must have at least one contract available. This ensures that users within {0} can always access store features like navigation and checkout.",
+  "contracts.removeDrawer.deselectHint": "To proceed, deselect at least one contract to keep it in this organizational unit.",
+  "contracts.removeDrawer.unableDeselectHint": "To proceed, deselect at least one contract to keep it in this {0}. When an organizational unit has only one contract, it is automatically set as the default.",
+  "contracts.listing.emptyState": "No contracts found for this organizational unit.",
+  "contracts.listing.interval": "{0} — {1} of {2}",
+  "contracts.listing.infoTooltip": "Contracts define the commercial rules applied during purchasing, such as addresses, payment methods, credit cards and other checkout settings.",
+  "contracts.nav.basicInformation": "Basic information",
+  "contracts.nav.assortment": "Assortment",
+  "contracts.nav.costCenters": "Cost centers",
+  "contracts.nav.departments": "Departments",
+  "contracts.nav.poNumbers": "PO numbers",
+  "contracts.details.createdDate": "Created date",
+  "contracts.toasts.addError": "Failed to add contracts. Please try again.",
+  "contracts.toasts.switchError": "Failed to switch contract. Please try again.",
+  "contracts.toasts.setDefaultSuccess": "Default contract updated successfully",
+  "contracts.toasts.setDefaultError": "Failed to set default contract. Please try again.",
+  "contracts.toasts.removeSuccess": "{0} contract{1} removed successfully",
+  "contracts.toasts.removeError": "Failed to remove contracts. Please try again.",
+  "contracts.toasts.refreshError": "Contracts removed, but we couldn't refresh your active contract. Please reload the page.",
+  "contracts.toasts.loadError": "Failed to load contract information.",
   "profile.titles.profile": "Profile",
   "profile.titles.details": "Details",
   "profile.labels.creationDate": "Creation Date",

package/docs/i18n/migration-inventory.md

@@ -487,6 +487,9 @@ Strings defined in `src/features/shared/` — canonical source for all `shared.*
 | `shared.buttons.delete` | "Delete" | `src/features/users/components/UserDropdownMenu/UserDropdownMenu.tsx` | 100 |
 | `users.components.UsersCard.manageUsers` | "Manage users" | `src/features/users/components/UsersCard/UsersCard.tsx` | 32 |
 | `users.titles.users` | "Users" | `src/features/users/components/UsersCard/UsersCard.tsx` | 35 |
+| `users.forms.roles` | "Roles" | `src/features/users/components/RolesMultiSelect/RolesMultiSelect.tsx` | 244 |
+| `users.rolesMultiSelect.customTag` | "Custom" | `src/features/users/components/RolesMultiSelect/RolesMultiSelect.tsx` | 302 |
+| `users.rolesMultiSelect.noMatchingRoles` | "No matching roles" | `src/features/users/components/RolesMultiSelect/RolesMultiSelect.tsx` | 258 |
 
 ---
 
@@ -914,6 +917,81 @@ Strings defined in `src/features/shared/` — canonical source for all `shared.*
 | `contracts.actions.viewContracts` | "View contracts" | `src/features/contracts/components/ContractsCard/ContractsCard.tsx` | 36 |
 | `contracts.dropdown.open` | "Open" | `src/features/contracts/components/ContractsCard/ContractsCard.tsx` | 81 |
 | `contracts.dropdown.edit` | "Edit" | `src/features/contracts/components/ContractsCard/ContractsCard.tsx` | 90 |
+| `contracts.toasts.addError` | "Failed to add contracts. Please try again." | `src/features/contracts/components/AddContractsDrawer/AddContractsDrawer.tsx` | 53 |
+| `contracts.addDrawer.title` | "Add contracts" | `src/features/contracts/components/AddContractsDrawer/AddContractsDrawer.tsx` | 145 |
+| `contracts.addDrawer.description` | "Add available contracts to {0}" | `src/features/contracts/components/AddContractsDrawer/AddContractsDrawer.tsx` | 151 |
+| `shared.placeholders.search` | "Search" | `src/features/contracts/components/AddContractsDrawer/AddContractsDrawer.tsx` | 161 |
+| `contracts.addDrawer.paginationRange` | "{0}–{1} of {2}" | `src/features/contracts/components/AddContractsDrawer/AddContractsDrawer.tsx` | 190 |
+| `contracts.addDrawer.loading` | "Loading contracts…" | `src/features/contracts/components/AddContractsDrawer/AddContractsDrawer.tsx` | 218 |
+| `contracts.addDrawer.noSearchResults` | "No contracts match your search." | `src/features/contracts/components/AddContractsDrawer/AddContractsDrawer.tsx` | 224 |
+| `contracts.addDrawer.noneAvailable` | "No contracts available to add." | `src/features/contracts/components/AddContractsDrawer/AddContractsDrawer.tsx` | 225 |
+| `contracts.labels.selectAllCount` | "Select all ({0})" | `src/features/contracts/components/AddContractsDrawer/AddContractsDrawer.tsx` | 251 |
+| `contracts.labels.selectedCount` | "{0} selected" | `src/features/contracts/components/AddContractsDrawer/AddContractsDrawer.tsx` | 299 |
+| `shared.buttons.cancel` | "Cancel" | `src/features/contracts/components/AddContractsDrawer/AddContractsDrawer.tsx` | 309 |
+| `shared.buttons.add` | "Add" | `src/features/contracts/components/AddContractsDrawer/AddContractsDrawer.tsx` | 318 |
+| `contracts.labels.contract` | "contract" | `src/features/contracts/components/ConfirmRemoveDrawer/ConfirmRemoveDrawer.tsx` | 17 |
+| `contracts.labels.contracts` | "contracts" | `src/features/contracts/components/ConfirmRemoveDrawer/ConfirmRemoveDrawer.tsx` | 17 |
+| `contracts.removeDrawer.title` | "Remove {0}" | `src/features/contracts/components/ConfirmRemoveDrawer/ConfirmRemoveDrawer.tsx` | 22 |
+| `contracts.removeDrawer.question` | "Are you sure you want to remove {0} {1} from {2}?" | `src/features/contracts/components/ConfirmRemoveDrawer/ConfirmRemoveDrawer.tsx` | 27 |
+| `contracts.removeDrawer.warning` | "Removed contracts can be added again later, but any specific configurations for these contracts within this organizational unit will be lost..." | `src/features/contracts/components/ConfirmRemoveDrawer/ConfirmRemoveDrawer.tsx` | 31 |
+| `shared.buttons.cancel` | "Cancel" | `src/features/contracts/components/ConfirmRemoveDrawer/ConfirmRemoveDrawer.tsx` | 44 |
+| `shared.buttons.remove` | "Remove" | `src/features/contracts/components/ConfirmRemoveDrawer/ConfirmRemoveDrawer.tsx` | 53 |
+| `contracts.toasts.switchError` | "Failed to switch contract. Please try again." | `src/features/contracts/components/ContractListItem/ContractListItem.tsx` | 42 |
+| `contracts.actions.setAsDefault` | "Set as default" | `src/features/contracts/components/ContractListItem/ContractListItem.tsx` | 95 |
+| `contracts.actions.setAsDefault` | "Set as default" | `src/features/contracts/components/ContractListItem/ContractListItem.tsx` | 100 |
+| `shared.buttons.remove` | "Remove" | `src/features/contracts/components/ContractListItem/ContractListItem.tsx` | 109 |
+| `contracts.labels.selectAllCount` | "Select all ({0})" | `src/features/contracts/components/ContractSelectAllRow/ContractSelectAllRow.tsx` | 34 |
+| `contracts.labels.selectedCount` | "{0} selected" | `src/features/contracts/components/ContractSelectionBar/ContractSelectionBar.tsx` | 32 |
+| `shared.buttons.remove` | "Remove" | `src/features/contracts/components/ContractSelectionBar/ContractSelectionBar.tsx` | 42 |
+| `contracts.listing.emptyState` | "No contracts found for this organizational unit." | `src/features/contracts/components/ContractSelectionList/ContractSelectionList.tsx` | 27 |
+| `layouts.tabs.contract` | "Contract" | `src/features/contracts/components/ContractSwitchOverlay/ContractSwitchOverlay.tsx` | 29 |
+| `layouts.titles.profile` | "Profile" | `src/features/contracts/components/ContractSwitchOverlay/ContractSwitchOverlay.tsx` | 32 |
+| `contracts.listing.interval` | "{0} — {1} of {2}" | `src/features/contracts/components/ContractsListHeader/ContractsListHeader.tsx` | 35 |
+| `contracts.removeDrawer.unableTitle` | "Unable to remove contracts" | `src/features/contracts/components/ErrorRemoveDrawer/ErrorRemoveDrawer.tsx` | 16 |
+| `contracts.removeDrawer.error` | "An error occurred while removing the contract. Please try again." | `src/features/contracts/components/ErrorRemoveDrawer/ErrorRemoveDrawer.tsx` | 22 |
+| `contracts.removeDrawer.minimumContractWarning` | "Every organizational unit must have at least one contract available..." | `src/features/contracts/components/ErrorRemoveDrawer/ErrorRemoveDrawer.tsx` | 27 |
+| `contracts.removeDrawer.deselectHint` | "To proceed, deselect at least one contract to keep it in this organizational unit." | `src/features/contracts/components/ErrorRemoveDrawer/ErrorRemoveDrawer.tsx` | 33 |
+| `shared.buttons.cancel` | "Cancel" | `src/features/contracts/components/ErrorRemoveDrawer/ErrorRemoveDrawer.tsx` | 47 |
+| `shared.buttons.tryAgain` | "Try again" | `src/features/contracts/components/ErrorRemoveDrawer/ErrorRemoveDrawer.tsx` | 54 |
+| `shared.buttons.gotIt` | "Got it" | `src/features/contracts/components/ErrorRemoveDrawer/ErrorRemoveDrawer.tsx` | 63 |
+| `contracts.removeDrawer.unableTitle` | "Unable to remove contracts" | `src/features/contracts/components/UnableToRemoveContractsDrawer/UnableToRemoveContractsDrawer.tsx` | 23 |
+| `contracts.removeDrawer.minimumContractWarning` | "Every organizational unit must have at least one contract available..." | `src/features/contracts/components/UnableToRemoveContractsDrawer/UnableToRemoveContractsDrawer.tsx` | 31 |
+| `contracts.removeDrawer.unableDeselectHint` | "To proceed, deselect at least one contract to keep it in this {0}..." | `src/features/contracts/components/UnableToRemoveContractsDrawer/UnableToRemoveContractsDrawer.tsx` | 36 |
+| `shared.buttons.gotIt` | "Got it" | `src/features/contracts/components/UnableToRemoveContractsDrawer/UnableToRemoveContractsDrawer.tsx` | 47 |
+| `contracts.nav.basicInformation` | "Basic information" | `src/features/contracts/layouts/ContractInformationLayout/ContractInformationLayout.tsx` | 46 |
+| `layouts.navigation.addresses` | "Addresses" | `src/features/contracts/layouts/ContractInformationLayout/ContractInformationLayout.tsx` | 52 |
+| `layouts.navigation.paymentMethods` | "Payment methods" | `src/features/contracts/layouts/ContractInformationLayout/ContractInformationLayout.tsx` | 56 |
+| `layouts.navigation.creditCards` | "Credit cards" | `src/features/contracts/layouts/ContractInformationLayout/ContractInformationLayout.tsx` | 61 |
+| `contracts.nav.assortment` | "Assortment" | `src/features/contracts/layouts/ContractInformationLayout/ContractInformationLayout.tsx` | 66 |
+| `layouts.navigation.accountingFields` | "Accounting fields" | `src/features/contracts/layouts/ContractInformationLayout/ContractInformationLayout.tsx` | 72 |
+| `contracts.nav.costCenters` | "Cost centers" | `src/features/contracts/layouts/ContractInformationLayout/ContractInformationLayout.tsx` | 82 |
+| `contracts.nav.departments` | "Departments" | `src/features/contracts/layouts/ContractInformationLayout/ContractInformationLayout.tsx` | 90 |
+| `contracts.nav.poNumbers` | "PO numbers" | `src/features/contracts/layouts/ContractInformationLayout/ContractInformationLayout.tsx` | 100 |
+| `contracts.toasts.setDefaultSuccess` | "Default contract updated successfully" | `src/features/contracts/layouts/ContractInformationLayout/ContractInformationLayout.tsx` | 168 |
+| `contracts.toasts.setDefaultError` | "Failed to set default contract. Please try again." | `src/features/contracts/layouts/ContractInformationLayout/ContractInformationLayout.tsx` | 182 |
+| `layouts.navigation.contracts` | "Contracts" | `src/features/contracts/layouts/ContractInformationLayout/ContractInformationLayout.tsx` | 217 |
+| `contracts.actions.setAsDefault` | "Set as default" | `src/features/contracts/layouts/ContractInformationLayout/ContractInformationLayout.tsx` | 235 |
+| `contracts.actions.setAsDefault` | "Set as default" | `src/features/contracts/layouts/ContractInformationLayout/ContractInformationLayout.tsx` | 243 |
+| `shared.buttons.remove` | "Remove" | `src/features/contracts/layouts/ContractInformationLayout/ContractInformationLayout.tsx` | 251 |
+| `contracts.nav.basicInformation` | "Basic information" | `src/features/contracts/layouts/ContractInformationLayout/ContractInformationLayout.tsx` | 267 |
+| `shared.labels.name` | "Name" | `src/features/contracts/layouts/ContractInformationLayout/ContractInformationLayout.tsx` | 271 |
+| `shared.labels.email` | "Email" | `src/features/contracts/layouts/ContractInformationLayout/ContractInformationLayout.tsx` | 277 |
+| `contracts.details.createdDate` | "Created date" | `src/features/contracts/layouts/ContractInformationLayout/ContractInformationLayout.tsx` | 283 |
+| `contracts.listing.infoTooltip` | "Contracts define the commercial rules applied during purchasing..." | `src/features/contracts/layouts/ContractListingLayout/ContractListingLayout.tsx` | 59 |
+| `contracts.toasts.refreshError` | "Contracts removed, but we couldn't refresh your active contract. Please reload the page." | `src/features/contracts/layouts/ContractListingLayout/ContractListingLayout.tsx` | 149 |
+| `contracts.toasts.removeSuccess` | "{0} contract{1} removed successfully" | `src/features/contracts/layouts/ContractListingLayout/ContractListingLayout.tsx` | 162 |
+| `contracts.toasts.removeError` | "Failed to remove contracts. Please try again." | `src/features/contracts/layouts/ContractListingLayout/ContractListingLayout.tsx` | 178 |
+| `contracts.toasts.setDefaultSuccess` | "Default contract updated successfully" | `src/features/contracts/layouts/ContractListingLayout/ContractListingLayout.tsx` | 209 |
+| `contracts.toasts.setDefaultError` | "Failed to set default contract. Please try again." | `src/features/contracts/layouts/ContractListingLayout/ContractListingLayout.tsx` | 224 |
+| `contracts.toasts.loadError` | "Failed to load contract information." | `src/features/contracts/layouts/ContractListingLayout/ContractListingLayout.tsx` | 246 |
+| `contracts.titles.contracts` | "Contracts" | `src/features/contracts/layouts/ContractListingLayout/ContractListingLayout.tsx` | 328 |
+| `orgUnitDetails.links.manageContractSettings` | "Manage contract settings" | `src/features/contracts/layouts/ContractListingLayout/ContractListingLayout.tsx` | 343 |
+| `contracts.nav.basicInformation` | "Basic information" | `src/features/contracts/layouts/ContractListingLayout/ContractSettingsNav.tsx` | 34 |
+| `layouts.navigation.addresses` | "Addresses" | `src/features/contracts/layouts/ContractListingLayout/ContractSettingsNav.tsx` | 38 |
+| `layouts.navigation.paymentMethods` | "Payment methods" | `src/features/contracts/layouts/ContractListingLayout/ContractSettingsNav.tsx` | 42 |
+| `layouts.navigation.creditCards` | "Credit cards" | `src/features/contracts/layouts/ContractListingLayout/ContractSettingsNav.tsx` | 46 |
+| `contracts.nav.assortment` | "Assortment" | `src/features/contracts/layouts/ContractListingLayout/ContractSettingsNav.tsx` | 50 |
+| `layouts.navigation.accountingFields` | "Accounting fields" | `src/features/contracts/layouts/ContractListingLayout/ContractSettingsNav.tsx` | 54 |
 
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vtex/faststore-plugin-buyer-portal",
-  "version": "2.0.19",
+  "version": "2.0.21",
   "description": "A plugin for faststore with buyer portal",
   "main": "index.js",
   "scripts": {

package/specs/analytics-actor-type.md

@@ -0,0 +1,243 @@
+# Analytics Actor Type (Internal vs External)
+
+> **Status**: Done
+> **Created**: 2026-07-28
+> **Jira**: [B2BTEAM-3639](https://vtex-dev.atlassian.net/browse/B2BTEAM-3639)
+> **Epic**: [B2BTEAM-3596](https://vtex-dev.atlassian.net/browse/B2BTEAM-3596) — Melhoria 1
+> **Sibling task**: [B2BTEAM-3640](https://vtex-dev.atlassian.net/browse/B2BTEAM-3640) (Redshift column + QuickSight segmentation)
+
+## 1. Business Context
+
+### Problem Statement
+
+Organization Account already emits usage analytics (create/edit/delete, timing, errors) via `useAnalytics` into the VTEX Data Ingestion API, Redshift, and QuickSight. Those numbers mix real customer usage with traffic from VTEX employees testing and supporting accounts.
+
+PMs cannot filter “real usage” without a reliable, PII-free signal on each event that says whether the actor was internal VTEX or external.
+
+### Goals
+
+1. Every Org Account analytics event includes a derived `actor_type` of `internal` or `external`.
+2. Usage metrics can exclude VTEX traffic without dropping error analysis options (filtering stays at the consumer; emission always sends the field).
+3. Zero PII in the analytics envelope: never send email, login, user id, or other identity — only the derived enum.
+
+### User Stories
+
+#### US-1: Emit actor_type on every analytics event
+
+- **Story**: As a PM analyzing Org Account usage, I want every event tagged as internal or external, so I can segment real customer usage from VTEX traffic.
+- **Acceptance Criteria**:
+  - **Given** a logged-in user whose email domain is `vtex.com`, **when** any analytics event is emitted through `useAnalytics` / `useDataIngestionApi`, **then** the payload includes `actor_type: "internal"`.
+  - **Given** a logged-in user whose email domain is not `vtex.com`, **when** any analytics event is emitted, **then** the payload includes `actor_type: "external"`.
+  - **Given** any successful emission path (`trackEvent`, `trackError`, `trackEntityCreated`, `trackEntityEdited`, `trackEntityCreateError`, `trackEntityEditError`), **when** the event is sent, **then** `actor_type` is present on the envelope (not only inside caller-supplied metadata).
+
+#### US-2: Never send identity or email in the event
+
+- **Story**: As a platform owner, I want the analytics envelope to stay free of PII, so we do not leak user identity into Redshift / QuickSight / Slack summaries.
+- **Acceptance Criteria**:
+  - **Given** a user with email `alice@vtex.com`, **when** an event is emitted, **then** the JSON body does not contain that email, login, `userId`, or session `sub`.
+  - **Given** derivation needs the email in memory, **when** building the payload, **then** only the enum `actor_type` is attached to the outgoing event.
+
+#### US-3: Safe default when identity is unavailable
+
+- **Story**: As an engineer, I want a deterministic fallback when email is missing, so every event still carries `actor_type` and the pipeline never breaks.
+- **Acceptance Criteria**:
+  - **Given** `currentUser` is null or `email` is empty/missing, **when** an event is emitted, **then** `actor_type` is `"external"`.
+  - **Given** derivation throws or email is malformed (no `@`), **when** an event is emitted, **then** `actor_type` is `"external"` and emission still succeeds.
+
+### Key Scenarios
+
+| Scenario | Pre-conditions | Steps | Expected Result |
+|---|---|---|---|
+| Happy path — VTEX employee | `currentUser.email` is `rodrigo.tavares@vtex.com` | User creates a budget; `trackEntityCreated` runs | Event has `actor_type: "internal"`; no email in payload |
+| Happy path — customer | `currentUser.email` is `buyer@acme.com` | User edits an address; `trackEntityEdited` runs | Event has `actor_type: "external"` |
+| Error case — Users API failed in loader | `currentUser` is `null` (e.g. `getUserByIdService` returned null) | User still triggers an analytics call from a mounted component | Event has `actor_type: "external"`; send does not throw |
+| Edge case — username login, email from API | Session `sub` is `everton.ataidetestdev` (not an email); Users API returns `email: "everton@vtex.com"` | Any event is emitted | Classification uses API email → `internal`; session `sub` is never sent |
+| Edge case — case / plus addressing | Email is `Name+qa@VTEX.COM` | Event emitted | Domain match is case-insensitive → `internal` |
+
+### Functional Requirements
+
+1. Derive `actor_type` at emission time from the logged-in user's email domain.
+2. Classification rule: domain equals `vtex.com` (case-insensitive) → `internal`; otherwise → `external`.
+3. Attach `actor_type` on every event sent through the shared analytics send path so callers do not need to pass it.
+4. Do not attach email, login, userId, session `sub`, or other identity fields to the event.
+5. Remain backward compatible with the existing schemaless ingestion pipeline (additive field only).
+
+### Non-Functional Requirements
+
+1. **Privacy**: envelope stays zero-PII for identity; derivation is local/ephemeral.
+2. **Reliability**: missing user context must not block or fail analytics emission.
+3. **Performance**: derivation is O(1) string work; no extra network calls at emit time.
+4. **Testability**: pure domain classifier is unit-tested; send path asserts field presence and absence of PII.
+
+### Out of Scope
+
+- Exposing `actor_type` as a Redshift column or QuickSight filter (sibling [B2BTEAM-3640](https://vtex-dev.atlassian.net/browse/B2BTEAM-3640)).
+- Melhoria 2 (`error_type` / stripping raw `error_message` / `error_stack`).
+- Rewriting the telemetry pipeline, DAG, or Slack weekly summary.
+- Classifying by session `sub` alone, account name, IP, or workspace.
+- Matching sibling domains (e.g. `vtex.com.br`) or subdomains (e.g. `corp.vtex.com`) — only exact `vtex.com`.
+
+---
+
+## 2. Arch Decisions
+
+### Proposed Solution
+
+Enrich the shared analytics send path so every event automatically receives `actor_type`, derived from `currentUser.email` already available in `BuyerPortalContext`.
+
+**Identity source (important):** the auth session JWT does **not** carry email. Example session claims:
+
+```json
+{
+  "sub": "everton.ataidetestdev",
+  "userId": "dd801513-ae2f-4ff8-b6de-dd3a2159a895",
+  "customerId": "…",
+  "unitId": "…",
+  "account": "b2bfaststoredev",
+  "type": "user"
+}
+```
+
+`sub` is a login/username, not an email. Email is loaded server-side in page loaders via `getUserByIdService` → Users API (`usersClient.getUserById`), then passed into `BuyerPortalProvider` as `currentUser.email`. Classification must use that email, never the session `sub`.
+
+```mermaid
+flowchart LR
+  Cookie["Auth cookie JWT\nuserId, sub, …"] --> Loader["Page loader\nwithAuthLoader"]
+  Loader --> UsersAPI["getUserByIdService\nUsers API"]
+  UsersAPI --> Ctx["BuyerPortalContext\ncurrentUser.email"]
+  Ctx --> Derive["deriveActorType(email)\ninternal | external"]
+  Derive --> Send["useDataIngestionApi.sendEvent\n+ actor_type"]
+  Send --> Ingest["VTEX schemaless-events"]
+```
+
+### Architecture Overview
+
+| Layer | Responsibility |
+|---|---|
+| `deriveActorType(email?)` | Pure helper: parse domain, return `internal` \| `external` |
+| `useDataIngestionApi` | Read `currentUser?.email` from `BuyerPortalContext` (optional context, like `useLogger`); merge `actor_type` into every `sendEvent` payload at top level alongside `account`, `locale`, `device`, `production` |
+| `useAnalytics` | Unchanged call sites; inherits enrichment via `sendEvent` |
+| Callers | No changes required to pass `actor_type` |
+
+### Alternatives Considered
+
+| Alternative | Pros | Cons | Verdict |
+|---|---|---|---|
+| Derive in each feature caller | Explicit per event | Easy to miss; duplicates logic | Rejected |
+| Derive only inside `useAnalytics.withDefaults` | Covers most UI tracking | Anything calling `useDataIngestionApi` / `dataIngestionApi` directly could skip it; harder to guarantee “every event” | Rejected as sole approach |
+| Classify from session `sub` | No dependency on Users API | `sub` is often not an email (e.g. `everton.ataidetestdev`); false `external` for VTEX staff | Rejected |
+| Put `actor_type` only inside `metadata` | Minimal type change | Sibling Redshift task wants a first-class column; top-level matches existing common fields | Rejected |
+| Centralize in `useDataIngestionApi` + pure helper | Single choke point; additive; testable | Hook must tolerate missing React context | **Accepted** |
+
+### Risks & Mitigations
+
+| Risk | Impact | Likelihood | Mitigation |
+|---|---|---|---|
+| `currentUser` null when analytics fires | Med (VTEX traffic mislabeled as external) | Med | Default `external`; ensure loaders keep loading user where events fire; document gap |
+| VTEX staff using non-`@vtex.com` email | Med (internal traffic still pollutes usage) | Low | Document rule; extend domain list only via explicit follow-up |
+| Customer email on `vtex.com` (unlikely) | Low | Low | Accept false `internal`; rule is domain-based by product decision |
+| Accidental PII leak via spread of user object | High | Low | Unit tests asserting outbound payload keys; helper never returns email |
+
+### Key Decisions
+
+#### Decision 1: Classification rule = exact `@vtex.com` domain
+
+- **Status**: Accepted
+- **Context**: Need a simple, privacy-safe heuristic for “VTEX employee”.
+- **Decision**: `internal` iff the email’s domain equals `vtex.com` (case-insensitive). Plus-tags (`user+tag@vtex.com`) still match. Domains like `vtex.com.br` or `*.vtex.com` are **not** internal in this iteration.
+- **Consequences**: Simple to implement and document; may miss regional VTEX domains until explicitly expanded.
+
+#### Decision 2: Fallback = `external` when email unavailable
+
+- **Status**: Accepted
+- **Context**: Ticket enum is only `internal \| external`; every event must carry the field.
+- **Decision**: Missing/invalid email → `external`.
+- **Consequences**: Some VTEX traffic without a loaded user profile remains in “external” usage until context is present; safer than inventing a third enum value for Melhoria 1.
+
+#### Decision 3: Identity source = `currentUser.email` from BuyerPortalContext
+
+- **Status**: Accepted
+- **Context**: Session JWT has `userId` / `sub` but not email; email already exists on `UserData` after loader fetch.
+- **Decision**: Read `currentUser?.email` from context at send time. Do not decode the auth cookie on the client for classification. Do not use `login` / `sub` unless it is later proven to be an email and product asks for it — out of scope for v1 (email-only).
+- **Consequences**: Correct for the common path where pages load the user; no extra network at emit time.
+
+#### Decision 4: Place `actor_type` at top level of the event envelope
+
+- **Status**: Accepted
+- **Context**: Sibling task needs a Redshift column; common context fields (`account`, `locale`, `device`, `production`) are already top-level.
+- **Decision**: Set `actor_type` as a top-level field on the object passed to `dataIngestionApi`, not buried only under `metadata`.
+- **Consequences**: Easier DAG mapping; additive and backward compatible for schemaless ingestion.
+
+### Implementation Plan
+
+1. Add `ActorType` type and pure `deriveActorType(email?: string | null): ActorType` under shared analytics (or shared utils) with unit tests.
+2. Extend `DataIngestionApiFields` / send path types with optional/required `actor_type`.
+3. Update `useDataIngestionApi` to read `BuyerPortalContext` (gracefully if undefined) and always set `actor_type` on `sendEvent`.
+4. Add tests that mock context email and assert outbound payload contains `actor_type` and does not contain email/login/userId.
+5. Manual smoke on a host store: one `@vtex.com` user and one external user; confirm events in the analytics pipeline / network tab.
+6. Hand off to [B2BTEAM-3640](https://vtex-dev.atlassian.net/browse/B2BTEAM-3640) for Redshift + QuickSight.
+
+---
+
+## 3. Technical Contract
+
+### Data Models
+
+```ts
+type ActorType = "internal" | "external";
+
+/** Pure classifier — never logs or returns the input email. */
+function deriveActorType(email?: string | null): ActorType;
+```
+
+**Rules for `deriveActorType`:**
+
+1. Trim and lowercase the email.
+2. If empty or no `@`, return `"external"`.
+3. Take the substring after the last `@` as the domain.
+4. If domain === `"vtex.com"`, return `"internal"`; else `"external"`.
+
+**Event envelope (additive):**
+
+| Field | Type | Required on emit | Notes |
+|---|---|---|---|
+| `actor_type` | `"internal" \| "external"` | Yes | Derived; top-level |
+| `email` / `login` / `userId` / `sub` | — | **Must not appear** | PII / identity ban |
+
+Existing fields (`name`, `account`, `locale`, `production`, `device`, `event_name`, `event_category`, `metadata`, …) unchanged.
+
+### Interfaces
+
+```ts
+// analytics types — additive
+interface DataIngestionApiFields {
+  // …existing fields…
+  actor_type?: ActorType; // set by send path; callers need not pass
+}
+
+// useDataIngestionApi sendEvent behavior
+sendEvent(fields: DataIngestionApiFields): void
+// always merges: { ...commonFields, ...fields, actor_type: deriveActorType(currentUser?.email) }
+// caller-supplied actor_type must not override the derived value (server of truth = derivation)
+```
+
+`useAnalytics` public API stays the same; no new required options on `UseAnalyticsConfig`.
+
+### Integration Points
+
+| System | Interaction |
+|---|---|
+| Auth cookie / session JWT | Provides `userId` only (indirectly); **not** used for domain classification |
+| Users API via `getUserByIdService` | Source of `currentUser.email` in loaders |
+| `BuyerPortalContext` | Runtime source of email for derivation in the client send hook |
+| VTEX Data Ingestion (`schemaless-events`) | Receives additive `actor_type`; no schema migration in this task |
+| Redshift / QuickSight | Consumer of the field in sibling task B2BTEAM-3640 |
+
+### Invariants & Constraints
+
+1. Every event leaving `useDataIngestionApi.sendEvent` includes `actor_type`.
+2. Outgoing analytics JSON must never include email, login, userId, or session `sub` as a result of this feature.
+3. Derivation does not perform network I/O.
+4. Callers cannot force a conflicting `actor_type` that bypasses derivation (derived value wins).
+5. Domains other than exact `vtex.com` are always `external` in this version.
+6. This feature does not change event names, categories, or existing metadata shapes beyond the additive field.

package/src/features/contracts/components/AddContractsDrawer/AddContractsDrawer.tsx

@@ -8,6 +8,7 @@ import {
   Icon,
   LetterHighlight,
 } from "../../../shared/components";
+import { useLocalization } from "../../../shared/localization/LocalizationContext";
 import { useAddContracts, useListAvailableContracts } from "../../hooks";
 import {
   buildRangeSet,
@@ -30,6 +31,7 @@ export const AddContractsDrawer = ({
   onSuccess,
   ...drawerProps
 }: AddContractsDrawerProps) => {
+  const { t } = useLocalization();
   const { pushToast } = useUI();
 
   const [selectedIds, setSelectedIds] = useState<Set<string>>(new Set());
@@ -50,7 +52,7 @@ export const AddContractsDrawer = ({
     onError: () => {
       drawerProps.onDismiss?.();
       pushToast({
-        message: "Failed to add contracts. Please try again.",
+        message: t("contracts.toasts.addError"),
         status: "ERROR",
       });
     },
@@ -142,23 +144,24 @@ export const AddContractsDrawer = ({
   return (
     <BasicDrawer size="large" {...drawerProps}>
       <BasicDrawer.Heading
-        title="Add contracts"
+        title={t("contracts.addDrawer.title")}
         onClose={isAddContractsLoading ? undefined : drawerProps.onDismiss}
       />
 
       <BasicDrawer.Body data-fs-bp-add-contracts-drawer-body>
         <p data-fs-bp-add-contracts-drawer-description>
-          Add available contracts to{" "}
-          <strong data-fs-bp-add-contracts-drawer-unit-name>
-            {orgUnitName}
-          </strong>
+          {t("contracts.addDrawer.description", [
+            <strong data-fs-bp-add-contracts-drawer-unit-name key="orgUnitName">
+              {orgUnitName}
+            </strong>,
+          ])}
         </p>
 
         <div data-fs-bp-add-contracts-drawer-toolbar>
           <div data-fs-bp-add-contracts-drawer-search>
             <input
               type="text"
-              placeholder="Search"
+              placeholder={t("shared.placeholders.search")}
               value={searchQuery}
               onChange={handleSearchChange}
               disabled={isDisabled}
@@ -187,7 +190,11 @@ export const AddContractsDrawer = ({
               aria-label="Pagination"
             >
               <span data-fs-bp-add-contracts-drawer-pagination-range>
-                {rangeStart}–{rangeEnd} of {filteredContracts.length}
+                {t("contracts.addDrawer.paginationRange", [
+                  rangeStart,
+                  rangeEnd,
+                  filteredContracts.length,
+                ])}
               </span>
               <button
                 type="button"
@@ -215,14 +222,14 @@ export const AddContractsDrawer = ({
 
         {availableContractsLoading ? (
           <div data-fs-bp-add-contracts-drawer-loading aria-busy="true">
-            Loading contracts…
+            {t("contracts.addDrawer.loading")}
           </div>
         ) : filteredContracts.length === 0 ? (
           <div data-fs-bp-add-contracts-drawer-empty>
             <p>
               {searchQuery
-                ? "No contracts match your search."
-                : "No contracts available to add."}
+                ? t("contracts.addDrawer.noSearchResults")
+                : t("contracts.addDrawer.noneAvailable")}
             </p>
           </div>
         ) : (
@@ -248,7 +255,11 @@ export const AddContractsDrawer = ({
                   <Icon name="Check" width={12} height={12} />
                 )}
               </div>
-              <span>Select all ({filteredContracts.length})</span>
+              <span>
+                {t("contracts.labels.selectAllCount", [
+                  filteredContracts.length,
+                ])}
+              </span>
             </div>
 
             {displayedContracts.map((contract) => {
@@ -296,7 +307,9 @@ export const AddContractsDrawer = ({
               >
                 <Icon name="X" width={14} height={14} />
               </button>
-              <span>{selectedIds.size} selected</span>
+              <span>
+                {t("contracts.labels.selectedCount", [selectedIds.size])}
+              </span>
             </>
           )}
         </div>
@@ -306,7 +319,7 @@ export const AddContractsDrawer = ({
           type="button"
           disabled={isDisabled}
         >
-          Cancel
+          {t("shared.buttons.cancel")}
         </BasicDrawer.Button>
         <BasicDrawer.Button
           variant="confirm"
@@ -315,7 +328,7 @@ export const AddContractsDrawer = ({
           disabled={selectedIds.size === 0 || isDisabled}
           isLoading={isAddContractsLoading}
         >
-          Add
+          {t("shared.buttons.add")}
         </BasicDrawer.Button>
       </BasicDrawer.Footer>
     </BasicDrawer>

package/src/features/contracts/components/ConfirmRemoveDrawer/ConfirmRemoveDrawer.tsx

@@ -1,4 +1,5 @@
 import { BasicDrawer, type BasicDrawerProps } from "../../../shared/components";
+import { useLocalization } from "../../../shared/localization/LocalizationContext";
 
 export type ConfirmRemoveDrawerProps = Omit<BasicDrawerProps, "children"> & {
   orgUnitName: string;
@@ -14,25 +15,27 @@ export const ConfirmRemoveDrawer = ({
   isLoading = false,
   ...drawerProps
 }: ConfirmRemoveDrawerProps) => {
-  const label = count === 1 ? "contract" : "contracts";
+  const { t } = useLocalization();
+  const label =
+    count === 1
+      ? t("contracts.labels.contract")
+      : t("contracts.labels.contracts");
 
   return (
     <BasicDrawer {...drawerProps}>
       <BasicDrawer.Heading
-        title={`Remove ${label}`}
+        title={t("contracts.removeDrawer.title", [label])}
         onClose={drawerProps.onDismiss}
       />
       <BasicDrawer.Body data-fs-bp-confirm-remove-drawer-body>
         <p>
-          Are you sure you want to remove <strong>{count}</strong> {label} from{" "}
-          <strong>{orgUnitName}</strong>?
-        </p>
-        <p>
-          Removed contracts can be added again later, but any specific
-          configurations for these contracts within this organizational unit
-          will be lost. This will prevent users in this organization unit from
-          accessing these contracts during store navigation and checkout.
+          {t("contracts.removeDrawer.question", [
+            <strong key="count">{count}</strong>,
+            label,
+            <strong key="orgUnitName">{orgUnitName}</strong>,
+          ])}
         </p>
+        <p>{t("contracts.removeDrawer.warning")}</p>
       </BasicDrawer.Body>
       <BasicDrawer.Footer>
         <BasicDrawer.Button
@@ -41,7 +44,7 @@ export const ConfirmRemoveDrawer = ({
           type="button"
           disabled={isLoading}
         >
-          Cancel
+          {t("shared.buttons.cancel")}
         </BasicDrawer.Button>
         <BasicDrawer.Button
           variant="danger"
@@ -50,7 +53,7 @@ export const ConfirmRemoveDrawer = ({
           isLoading={isLoading}
           disabled={isLoading}
         >
-          Remove
+          {t("shared.buttons.remove")}
         </BasicDrawer.Button>
       </BasicDrawer.Footer>
     </BasicDrawer>