create-mercato-app 0.7.1-develop.7150.1.c1941e0c22 → 0.7.1-develop.7152.1.a69e92f9c9

package/dist/agentic/guides/modules/feature_toggles/index.md

@@ -1,5 +1,5 @@
 # feature_toggles — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/feature_toggles
 
 ## Sections

package/dist/agentic/guides/modules/gateway_stripe/index.md

@@ -1,5 +1,5 @@
 # gateway_stripe — module facts (generated, do not edit)
-<!-- generated from @open-mercato/gateway-stripe 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/gateway-stripe 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/gateway-stripe/src/modules/gateway_stripe
 
 ## Sections

package/dist/agentic/guides/modules/generators/index.md

@@ -1,5 +1,5 @@
 # generators — module facts (generated, do not edit)
-<!-- generated from @open-mercato/shared 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/shared 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/shared/src/modules/generators
 
 ## Sections

package/dist/agentic/guides/modules/inbox_ops/index.md

@@ -1,5 +1,5 @@
 # inbox_ops — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/inbox_ops
 
 ## Sections

package/dist/agentic/guides/modules/integrations/index.md

@@ -1,5 +1,5 @@
 # integrations — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/integrations
 
 ## Sections

package/dist/agentic/guides/modules/messages/index.md

@@ -1,5 +1,5 @@
 # messages — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/messages
 
 ## Sections

package/dist/agentic/guides/modules/notifications/index.md

@@ -1,5 +1,5 @@
 # notifications — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/notifications
 
 ## Sections

package/dist/agentic/guides/modules/onboarding/index.md

@@ -1,5 +1,5 @@
 # onboarding — module facts (generated, do not edit)
-<!-- generated from @open-mercato/onboarding 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/onboarding 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/onboarding/src/modules/onboarding
 
 ## Sections

package/dist/agentic/guides/modules/payment_gateways/index.md

@@ -1,5 +1,5 @@
 # payment_gateways — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/payment_gateways
 
 ## Sections

package/dist/agentic/guides/modules/perspectives/index.md

@@ -1,5 +1,5 @@
 # perspectives — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/perspectives
 
 ## Sections

package/dist/agentic/guides/modules/planner/index.md

@@ -1,5 +1,5 @@
 # planner — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/planner
 
 ## Sections

package/dist/agentic/guides/modules/portal/index.md

@@ -1,5 +1,5 @@
 # portal — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/portal
 
 ## Sections

package/dist/agentic/guides/modules/progress/index.md

@@ -1,5 +1,5 @@
 # progress — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/progress
 
 ## Sections

package/dist/agentic/guides/modules/push_notifications/index.md

@@ -1,5 +1,5 @@
 # push_notifications — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/push_notifications
 
 ## Sections

package/dist/agentic/guides/modules/query_index/index.md

@@ -1,5 +1,5 @@
 # query_index — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/query_index
 
 ## Sections

package/dist/agentic/guides/modules/record_locks/index.md

@@ -1,5 +1,5 @@
 # record_locks — module facts (generated, do not edit)
-<!-- generated from @open-mercato/enterprise 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/enterprise 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/enterprise/src/modules/record_locks
 
 ## Sections

package/dist/agentic/guides/modules/resources/index.md

@@ -1,5 +1,5 @@
 # resources — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/resources
 
 ## Sections

package/dist/agentic/guides/modules/sales/index.md

@@ -1,5 +1,5 @@
 # sales — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/sales
 
 ## Sections

package/dist/agentic/guides/modules/scheduler/index.md

@@ -1,5 +1,5 @@
 # scheduler — module facts (generated, do not edit)
-<!-- generated from @open-mercato/scheduler 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/scheduler 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/scheduler/src/modules/scheduler
 
 ## Sections

package/dist/agentic/guides/modules/search/index.md

@@ -1,5 +1,5 @@
 # search — module facts (generated, do not edit)
-<!-- generated from @open-mercato/search 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/search 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/search/src/modules/search
 
 ## Sections

package/dist/agentic/guides/modules/security/index.md

@@ -1,5 +1,5 @@
 # security — module facts (generated, do not edit)
-<!-- generated from @open-mercato/enterprise 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/enterprise 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/enterprise/src/modules/security
 
 ## Sections

package/dist/agentic/guides/modules/shipping_carriers/index.md

@@ -1,5 +1,5 @@
 # shipping_carriers — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/shipping_carriers
 
 ## Sections

package/dist/agentic/guides/modules/sso/index.md

@@ -1,5 +1,5 @@
 # sso — module facts (generated, do not edit)
-<!-- generated from @open-mercato/enterprise 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/enterprise 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/enterprise/src/modules/sso
 
 ## Sections

package/dist/agentic/guides/modules/staff/index.md

@@ -1,5 +1,5 @@
 # staff — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/staff
 
 ## Sections

package/dist/agentic/guides/modules/storage_s3/index.md

@@ -1,5 +1,5 @@
 # storage_s3 — module facts (generated, do not edit)
-<!-- generated from @open-mercato/storage-s3 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/storage-s3 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/storage-s3/src/modules/storage_s3
 
 ## Sections

package/dist/agentic/guides/modules/sync_akeneo/index.md

@@ -1,5 +1,5 @@
 # sync_akeneo — module facts (generated, do not edit)
-<!-- generated from @open-mercato/sync-akeneo 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/sync-akeneo 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/sync-akeneo/src/modules/sync_akeneo
 
 ## Sections

package/dist/agentic/guides/modules/sync_excel/index.md

@@ -1,5 +1,5 @@
 # sync_excel — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/sync_excel
 
 ## Sections

package/dist/agentic/guides/modules/system_status_overlays/index.md

@@ -1,5 +1,5 @@
 # system_status_overlays — module facts (generated, do not edit)
-<!-- generated from @open-mercato/enterprise 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/enterprise 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/enterprise/src/modules/system_status_overlays
 
 ## Sections

package/dist/agentic/guides/modules/translations/index.md

@@ -1,5 +1,5 @@
 # translations — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/translations
 
 ## Sections

package/dist/agentic/guides/modules/warranty_claims/index.md

@@ -1,5 +1,5 @@
 # warranty_claims — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/warranty_claims
 
 ## Sections

package/dist/agentic/guides/modules/webhooks/index.md

@@ -1,5 +1,5 @@
 # webhooks — module facts (generated, do not edit)
-<!-- generated from @open-mercato/webhooks 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/webhooks 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/webhooks/src/modules/webhooks
 
 ## Sections

package/dist/agentic/guides/modules/wms/index.md

@@ -1,5 +1,5 @@
 # wms — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/wms
 
 ## Sections

package/dist/agentic/guides/modules/workflows/index.md

@@ -1,5 +1,5 @@
 # workflows — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.7.1-develop.7150.1.c1941e0c22; core 0.7.1-develop.7150.1.c1941e0c22 — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.7.1-develop.7152.1.a69e92f9c9; core 0.7.1-develop.7152.1.a69e92f9c9 — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/workflows
 
 ## Sections

package/dist/agentic/guides/reference-module-facts.json

@@ -1185,7 +1185,7 @@
     "facts": {
       "title": "Example Module",
       "description": "Demonstrates pages, APIs, entities and DI.",
-      "coreVersion": "0.7.1-develop.7150.1.c1941e0c22",
+      "coreVersion": "0.7.1-develop.7152.1.a69e92f9c9",
       "sourcePackage": null,
       "sourceVersion": null,
       "sourceRoot": "src/modules/example",

package/dist/agentic/guides/upstream/manifest.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "generator": "create-mercato-app@0.7.1-develop.7150.1.c1941e0c22",
+  "generator": "create-mercato-app@0.7.1-develop.7152.1.a69e92f9c9",
   "files": {
     "AGENTS.md": "1f54610cebc4fd7e42b56d1c18859edc7ed7d3165c9af72c4530b6feaf76e457",
     "BACKWARD_COMPATIBILITY.md": "b2e5b812cd677d610787e37be079ef1e686cce171a9b11b0278ff7f0fb34ba2b"

package/dist/agentic/shared/ai/harness/cases.json

@@ -3055,7 +3055,7 @@
     "mode": "one-shot",
     "evaluationKind": "routing",
     "risk": "high",
-    "prompt": "In a freshly scaffolded standalone Open Mercato app, first distinguish outbound transactional email from a connected Gmail/IMAP mailbox, then build the selected app-local provider with encrypted credentials, health, retry, redacted structured createLogger logs, and activation. A mailbox must use the installed communication_channels module and canonical ChannelAdapter contract with integration.ts hub metadata plus DI/setup registration, following installed channel_gmail/channel_imap precedent; transactional delivery must not pretend to be a mailbox adapter. Do not invent a packages workspace; separately published packaging requires an explicit reuse decision. Generated module facts are sufficient for routing; invoke framework context during implementation only after naming one missing exact-version symbol.",
+    "prompt": "In a freshly scaffolded standalone Open Mercato app, first distinguish outbound transactional email from a connected Gmail/IMAP mailbox and inspect the installed Resend/SES provider facts before proposing app-local code. Reuse an installed transactional provider when it matches; otherwise build the selected app-local provider with encrypted credentials, health, retry, redacted structured createLogger logs, and activation. A mailbox must use the installed communication_channels module and canonical ChannelAdapter contract with integration.ts hub metadata plus DI/setup registration, following installed channel_gmail/channel_imap precedent; transactional delivery must not pretend to be a mailbox adapter. Do not invent a packages workspace; separately published packaging requires an explicit reuse decision. Generated module facts are sufficient for routing; invoke framework context during implementation only after naming one missing exact-version symbol.",
     "tags": [
       "integration",
       "encrypted-credentials",
@@ -3089,7 +3089,9 @@
         ".ai/skills/om-integration-builder/SKILL.md",
         ".ai/guides/modules/communication_channels/index.md",
         ".ai/guides/modules/channel_gmail/index.md",
-        ".ai/guides/modules/channel_imap/index.md"
+        ".ai/guides/modules/channel_imap/index.md",
+        ".ai/guides/modules/channel_resend/index.md",
+        ".ai/guides/modules/channel_ses/index.md"
       ],
       "allowedExtra": [
         ".ai/guides/modules/integrations/index.md",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-mercato-app",
-  "version": "0.7.1-develop.7150.1.c1941e0c22",
+  "version": "0.7.1-develop.7152.1.a69e92f9c9",
   "type": "module",
   "description": "Create a new Open Mercato application",
   "main": "./dist/index.js",
@@ -28,8 +28,8 @@
     "ts-morph": "^28.0.0"
   },
   "devDependencies": {
-    "@open-mercato/cli": "0.7.1-develop.7150.1.c1941e0c22",
-    "@open-mercato/shared": "0.7.1-develop.7150.1.c1941e0c22",
+    "@open-mercato/cli": "0.7.1-develop.7152.1.a69e92f9c9",
+    "@open-mercato/shared": "0.7.1-develop.7152.1.a69e92f9c9",
     "@types/node": "^26.1.2",
     "esbuild": "^0.28.1",
     "tsx": "^4.23.1",

package/template/.env.example

@@ -41,8 +41,26 @@ NEXTAUTH_SECRET=
 # or
 # EVENTS_REDIS_URL=redis://localhost:6379
 
-# Email provider (optional)
+# Outbound system email provider (communications hub)
+# A provider key alone seeds nothing: the env preset also needs a from-address from
+# NOTIFICATIONS_EMAIL_FROM / EMAIL_FROM / ADMIN_EMAIL further down this file. With the key but no
+# from-address the app logs a warning and sends no mail.
+# SYSTEM_EMAIL_PROVIDER=resend
 # RESEND_API_KEY=
+#
+# Amazon SES outbound email. Only the region, sender and configuration set are per tenant — the AWS
+# identity itself comes from this instance's default AWS credential chain (AWS_ACCESS_KEY_ID /
+# AWS_SECRET_ACCESS_KEY below, or the container's IAM role), so every tenant sends from one AWS
+# account. Use Resend when each tenant must bring its own provider account.
+# SYSTEM_EMAIL_PROVIDER=ses
+# AWS_SES_REGION=eu-west-2
+# AWS_REGION=eu-west-2
+# AWS_SES_CONFIGURATION_SET=
+#
+# Optional: pin every tenant-scoped send to one communication channel id instead of resolving the
+# tenant's own. The channel must belong to the sending organization or be tenant-wide
+# (organization_id IS NULL); a pinned channel never falls back to the env credentials above.
+# SYSTEM_EMAIL_CHANNEL_ID=
 
 # Public URL used in emails and onboarding flows
 APP_URL=http://localhost:3000
@@ -244,6 +262,33 @@ AUTO_SPAWN_WORKERS=true
 # OM_WATCH_PACKAGES=core,ui,shared   # used when OM_WATCH_SCOPE=env
 # OM_WATCH_POPULAR_LIMIT=6           # cap for OM_WATCH_SCOPE=popular
 
+# Dev runtime diagnostics (development only; never enabled in a production build).
+# The `yarn dev` supervisor collects process, log, warmup, probe and browser
+# signals into one structured runtime state, shows it on the dev splash, and
+# mirrors it into an in-app banner through a token-protected local bridge.
+#   OM_DEV_RUNTIME_MODE   direct|proxy. `direct` (default) keeps the existing
+#                         topology: Next.js owns the public port and the splash
+#                         runs on OM_DEV_SPLASH_PORT. `proxy` puts an opt-in
+#                         local gateway on the public port instead.
+#   OM_DEV_UPSTREAM_PORT  Internal port for the managed Next.js runtime in proxy
+#                         mode. Defaults to an auto-selected free loopback port;
+#                         must not equal the public application port.
+# OM_DEV_RUNTIME_MODE=direct
+# OM_DEV_UPSTREAM_PORT=3111
+#
+# Continuous post-READY health probe against the local `/api/healthz` contract.
+# The probe never re-runs the login warmup and never logs a success.
+# OM_DEV_RUNTIME_PROBE_INTERVAL_MS=5000
+# OM_DEV_RUNTIME_PROBE_TIMEOUT_MS=1500        # must be lower than the interval
+# OM_DEV_RUNTIME_PROBE_FAILURE_THRESHOLD=3    # consecutive failures -> degraded
+# OM_DEV_RUNTIME_PROBE_RECOVERY_THRESHOLD=2   # consecutive successes -> ready
+#
+# Collection and presentation toggles. Both follow the dev splash by default and
+# stay off in CI. Turning diagnostics off also disables the in-app banner, and
+# with it the dev-only status/diagnostics/recovery-action routes.
+# OM_DEV_RUNTIME_DIAGNOSTICS=true
+# OM_DEV_RUNTIME_BANNER=true
+
 # Base directory for local file-backed queues (default: ./.mercato/queue)
 QUEUE_BASE_DIR=./.mercato/queue
 

package/template/package.json.template

@@ -59,6 +59,8 @@
     "@open-mercato/channel-apns": "{{PACKAGE_VERSION}}",
     "@open-mercato/channel-expo": "{{PACKAGE_VERSION}}",
     "@open-mercato/channel-fcm": "{{PACKAGE_VERSION}}",
+    "@open-mercato/channel-resend": "{{PACKAGE_VERSION}}",
+    "@open-mercato/channel-ses": "{{PACKAGE_VERSION}}",
     "@open-mercato/checkout": "{{PACKAGE_VERSION}}",
     "@open-mercato/cli": "{{PACKAGE_VERSION}}",
     "@open-mercato/content": "{{PACKAGE_VERSION}}",

package/template/scripts/dev-runtime-actions.mjs

@@ -0,0 +1,99 @@
+import { RUNTIME_RECOVERY_ACTIONS } from './dev-runtime-state.mjs'
+
+export const DEFAULT_ACTION_TIMEOUT_MS = 10 * 60 * 1000
+export const MAX_ACTION_OUTPUT_LINES = 40
+
+function conflict(code, message, status = 409) {
+  return { ok: false, status, code, message }
+}
+
+/**
+ * Runs the fixed recovery allowlist against handlers the supervisor already
+ * owns. User input selects an enum member and nothing else: it can never name a
+ * binary, append a flag, or change a working directory.
+ *
+ * Exactly one mutating action may run per generation, and a completion from an
+ * older generation can never overwrite the current state.
+ */
+export function createDevRuntimeActionRunner(options = {}) {
+  const handlers = options.handlers ?? {}
+  const state = options.state
+  const now = typeof options.now === 'function' ? options.now : () => new Date()
+  const timeoutMs = Number.isInteger(options.timeoutMs) ? options.timeoutMs : DEFAULT_ACTION_TIMEOUT_MS
+  const logger = options.logger ?? console
+
+  let sequence = 0
+  let active = null
+
+  function describeActive() {
+    return active ? { ...active } : null
+  }
+
+  async function run(action) {
+    if (!RUNTIME_RECOVERY_ACTIONS.includes(action)) {
+      return { ok: false, status: 400, code: 'unknown_action', message: 'Unknown recovery action.' }
+    }
+    if (!state) {
+      return conflict('supervisor_unavailable', 'The supervisor is no longer available.', 503)
+    }
+    const handler = handlers[action]
+    if (typeof handler !== 'function') {
+      return conflict('action_unsupported', `The "${action}" action is not available in this runtime mode.`, 503)
+    }
+    if (active) {
+      return conflict('action_busy', `The "${active.action}" action is still running.`)
+    }
+
+    const generation = state.getGeneration()
+    sequence += 1
+    const actionId = `${generation}-${sequence}`
+    active = { actionId, action, generation, startedAt: now().toISOString() }
+    state.beginRecovery(action)
+
+    // The await chain is intentionally detached: the caller gets a 202 while the
+    // action keeps running under the supervisor's lifecycle.
+    void (async () => {
+      let exitCode = 1
+      try {
+        exitCode = await withTimeout(handler(), timeoutMs)
+      } catch (error) {
+        logger?.error?.(`❌ Dev runtime action "${action}" failed: ${error instanceof Error ? error.message : String(error)}`)
+        state.recordSignal({
+          source: 'process',
+          generation,
+          code: 'recovery_action_failed',
+          title: 'Recovery action failed',
+          detail: `The "${action}" action did not complete successfully`,
+          message: error instanceof Error ? error.message : String(error),
+          failureStage: `Recovery: ${action}`,
+        })
+      } finally {
+        active = null
+        // A stale completion must not clear a recovery that a newer generation
+        // started.
+        state.completeRecovery(Number.isInteger(exitCode) ? exitCode : 1, { generation })
+      }
+    })()
+
+    return { ok: true, actionId, generation }
+  }
+
+  return { run, describeActive, isBusy: () => active !== null }
+}
+
+function withTimeout(promise, timeoutMs) {
+  return new Promise((resolve, reject) => {
+    const timer = setTimeout(() => reject(new Error(`recovery action timed out after ${timeoutMs}ms`)), timeoutMs)
+    timer.unref?.()
+    Promise.resolve(promise).then(
+      (value) => {
+        clearTimeout(timer)
+        resolve(value)
+      },
+      (error) => {
+        clearTimeout(timer)
+        reject(error)
+      },
+    )
+  })
+}

package/template/scripts/dev-runtime-config.mjs

@@ -0,0 +1,89 @@
+export const DEFAULT_PROBE_INTERVAL_MS = 5000
+export const DEFAULT_PROBE_TIMEOUT_MS = 1500
+export const DEFAULT_PROBE_FAILURE_THRESHOLD = 3
+export const DEFAULT_PROBE_RECOVERY_THRESHOLD = 2
+
+export class DevRuntimeConfigError extends Error {
+  constructor(message) {
+    super(message)
+    this.name = 'DevRuntimeConfigError'
+  }
+}
+
+function readRawEnv(env, key) {
+  const raw = env?.[key]
+  if (typeof raw !== 'string') return ''
+  return raw.trim()
+}
+
+function parseBoundedInteger(env, key, fallback, { min = 1, max = Number.MAX_SAFE_INTEGER } = {}) {
+  const raw = readRawEnv(env, key)
+  if (!raw) return fallback
+  const parsed = Number(raw)
+  if (!Number.isInteger(parsed) || parsed < min || parsed > max) {
+    throw new DevRuntimeConfigError(`${key} must be an integer between ${min} and ${max}; received "${raw}".`)
+  }
+  return parsed
+}
+
+function parseEnabledFlag(env, key, fallback) {
+  const raw = readRawEnv(env, key).toLowerCase()
+  if (!raw) return fallback
+  if (['1', 'true', 'on', 'yes', 'enabled'].includes(raw)) return true
+  if (['0', 'false', 'off', 'no', 'disabled'].includes(raw)) return false
+  throw new DevRuntimeConfigError(`${key} must be a boolean flag; received "${raw}".`)
+}
+
+export function resolveDevRuntimeMode(env = process.env) {
+  const raw = readRawEnv(env, 'OM_DEV_RUNTIME_MODE').toLowerCase()
+  if (!raw) return 'direct'
+  if (raw === 'direct' || raw === 'proxy') return raw
+  throw new DevRuntimeConfigError(`OM_DEV_RUNTIME_MODE must be "direct" or "proxy"; received "${raw}".`)
+}
+
+export function resolveUpstreamPort(env = process.env, publicPort = null) {
+  const raw = readRawEnv(env, 'OM_DEV_UPSTREAM_PORT')
+  if (!raw) return null
+  const parsed = Number(raw)
+  if (!Number.isInteger(parsed) || parsed < 1 || parsed > 65535) {
+    throw new DevRuntimeConfigError(`OM_DEV_UPSTREAM_PORT must be an integer between 1 and 65535; received "${raw}".`)
+  }
+  if (Number.isInteger(publicPort) && parsed === publicPort) {
+    throw new DevRuntimeConfigError(`OM_DEV_UPSTREAM_PORT (${parsed}) must not equal the public application port.`)
+  }
+  return parsed
+}
+
+export function resolveProbeConfig(env = process.env) {
+  const intervalMs = parseBoundedInteger(env, 'OM_DEV_RUNTIME_PROBE_INTERVAL_MS', DEFAULT_PROBE_INTERVAL_MS, { min: 250, max: 600_000 })
+  const timeoutMs = parseBoundedInteger(env, 'OM_DEV_RUNTIME_PROBE_TIMEOUT_MS', DEFAULT_PROBE_TIMEOUT_MS, { min: 100, max: 600_000 })
+  if (timeoutMs >= intervalMs) {
+    throw new DevRuntimeConfigError(`OM_DEV_RUNTIME_PROBE_TIMEOUT_MS (${timeoutMs}) must be less than OM_DEV_RUNTIME_PROBE_INTERVAL_MS (${intervalMs}).`)
+  }
+  return {
+    intervalMs,
+    timeoutMs,
+    failureThreshold: parseBoundedInteger(env, 'OM_DEV_RUNTIME_PROBE_FAILURE_THRESHOLD', DEFAULT_PROBE_FAILURE_THRESHOLD, { min: 1, max: 100 }),
+    recoveryThreshold: parseBoundedInteger(env, 'OM_DEV_RUNTIME_PROBE_RECOVERY_THRESHOLD', DEFAULT_PROBE_RECOVERY_THRESHOLD, { min: 1, max: 100 }),
+  }
+}
+
+// Diagnostics follow the dev splash: enabled when the splash is enabled and the
+// process is not a CI run, unless explicitly overridden.
+export function resolveDiagnosticsConfig(env = process.env, { splashEnabled = true } = {}) {
+  const defaultEnabled = splashEnabled && env?.CI !== 'true'
+  const diagnosticsEnabled = parseEnabledFlag(env, 'OM_DEV_RUNTIME_DIAGNOSTICS', defaultEnabled)
+  return {
+    diagnosticsEnabled,
+    bannerEnabled: parseEnabledFlag(env, 'OM_DEV_RUNTIME_BANNER', diagnosticsEnabled) && diagnosticsEnabled,
+  }
+}
+
+export function resolveDevRuntimeConfig(env = process.env, { splashEnabled = true, publicPort = null } = {}) {
+  return {
+    mode: resolveDevRuntimeMode(env),
+    upstreamPort: resolveUpstreamPort(env, publicPort),
+    probe: resolveProbeConfig(env),
+    ...resolveDiagnosticsConfig(env, { splashEnabled }),
+  }
+}