@endora-commerce/contracts 0.100.0

package/dist/admin-actions.d.ts

@@ -0,0 +1,367 @@
+import { z } from 'zod';
+export declare const KnownIconNameSchema: z.ZodEnum<{
+    Plus: "Plus";
+    Sparkles: "Sparkles";
+    Settings: "Settings";
+    Search: "Search";
+    Boxes: "Boxes";
+    Layers: "Layers";
+    Menu: "Menu";
+    PlusCircle: "PlusCircle";
+    PlusSquare: "PlusSquare";
+    FilePlus: "FilePlus";
+    FolderPlus: "FolderPlus";
+    Upload: "Upload";
+    FileUp: "FileUp";
+    CloudUpload: "CloudUpload";
+    Download: "Download";
+    FileDown: "FileDown";
+    FileText: "FileText";
+    BookOpen: "BookOpen";
+    Rss: "Rss";
+    Package: "Package";
+    Tag: "Tag";
+    ShoppingCart: "ShoppingCart";
+    Receipt: "Receipt";
+    CreditCard: "CreditCard";
+    Users: "Users";
+    UserPlus: "UserPlus";
+    Inbox: "Inbox";
+    ListChecks: "ListChecks";
+    ClipboardList: "ClipboardList";
+    Image: "Image";
+    Video: "Video";
+    LayoutDashboard: "LayoutDashboard";
+    PanelLeft: "PanelLeft";
+    KeyRound: "KeyRound";
+    ShieldCheck: "ShieldCheck";
+    Edit: "Edit";
+    Archive: "Archive";
+    Box: "Box";
+    Truck: "Truck";
+    CircleDollarSign: "CircleDollarSign";
+    Activity: "Activity";
+    LineChart: "LineChart";
+    Smartphone: "Smartphone";
+    Webhook: "Webhook";
+    Scale: "Scale";
+    PlugZap: "PlugZap";
+    PercentDiamond: "PercentDiamond";
+    Newspaper: "Newspaper";
+    Languages: "Languages";
+    Eraser: "Eraser";
+    Warehouse: "Warehouse";
+    TrendingDown: "TrendingDown";
+    Bell: "Bell";
+    PackageOpen: "PackageOpen";
+    Building2: "Building2";
+    Store: "Store";
+    ClipboardCheck: "ClipboardCheck";
+}>;
+export type KnownIconName = z.infer<typeof KnownIconNameSchema>;
+export declare const ModuleActionSchema: z.ZodObject<{
+    id: z.ZodString;
+    labelKey: z.ZodString;
+    descriptionKey: z.ZodOptional<z.ZodString>;
+    icon: z.ZodEnum<{
+        Plus: "Plus";
+        Sparkles: "Sparkles";
+        Settings: "Settings";
+        Search: "Search";
+        Boxes: "Boxes";
+        Layers: "Layers";
+        Menu: "Menu";
+        PlusCircle: "PlusCircle";
+        PlusSquare: "PlusSquare";
+        FilePlus: "FilePlus";
+        FolderPlus: "FolderPlus";
+        Upload: "Upload";
+        FileUp: "FileUp";
+        CloudUpload: "CloudUpload";
+        Download: "Download";
+        FileDown: "FileDown";
+        FileText: "FileText";
+        BookOpen: "BookOpen";
+        Rss: "Rss";
+        Package: "Package";
+        Tag: "Tag";
+        ShoppingCart: "ShoppingCart";
+        Receipt: "Receipt";
+        CreditCard: "CreditCard";
+        Users: "Users";
+        UserPlus: "UserPlus";
+        Inbox: "Inbox";
+        ListChecks: "ListChecks";
+        ClipboardList: "ClipboardList";
+        Image: "Image";
+        Video: "Video";
+        LayoutDashboard: "LayoutDashboard";
+        PanelLeft: "PanelLeft";
+        KeyRound: "KeyRound";
+        ShieldCheck: "ShieldCheck";
+        Edit: "Edit";
+        Archive: "Archive";
+        Box: "Box";
+        Truck: "Truck";
+        CircleDollarSign: "CircleDollarSign";
+        Activity: "Activity";
+        LineChart: "LineChart";
+        Smartphone: "Smartphone";
+        Webhook: "Webhook";
+        Scale: "Scale";
+        PlugZap: "PlugZap";
+        PercentDiamond: "PercentDiamond";
+        Newspaper: "Newspaper";
+        Languages: "Languages";
+        Eraser: "Eraser";
+        Warehouse: "Warehouse";
+        TrendingDown: "TrendingDown";
+        Bell: "Bell";
+        PackageOpen: "PackageOpen";
+        Building2: "Building2";
+        Store: "Store";
+        ClipboardCheck: "ClipboardCheck";
+    }>;
+    targetRoute: z.ZodString;
+    requiredPermission: z.ZodOptional<z.ZodString>;
+    keywords: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    weight: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export type ModuleAction = z.infer<typeof ModuleActionSchema>;
+/**
+ * Top-level `actions` array on a module's manifest. Enforces
+ * within-module id uniqueness — duplicates fail the install with a
+ * clear, indexed error rather than silently dropping one (FR-005).
+ */
+export declare const ModuleActionsManifestSchema: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    labelKey: z.ZodString;
+    descriptionKey: z.ZodOptional<z.ZodString>;
+    icon: z.ZodEnum<{
+        Plus: "Plus";
+        Sparkles: "Sparkles";
+        Settings: "Settings";
+        Search: "Search";
+        Boxes: "Boxes";
+        Layers: "Layers";
+        Menu: "Menu";
+        PlusCircle: "PlusCircle";
+        PlusSquare: "PlusSquare";
+        FilePlus: "FilePlus";
+        FolderPlus: "FolderPlus";
+        Upload: "Upload";
+        FileUp: "FileUp";
+        CloudUpload: "CloudUpload";
+        Download: "Download";
+        FileDown: "FileDown";
+        FileText: "FileText";
+        BookOpen: "BookOpen";
+        Rss: "Rss";
+        Package: "Package";
+        Tag: "Tag";
+        ShoppingCart: "ShoppingCart";
+        Receipt: "Receipt";
+        CreditCard: "CreditCard";
+        Users: "Users";
+        UserPlus: "UserPlus";
+        Inbox: "Inbox";
+        ListChecks: "ListChecks";
+        ClipboardList: "ClipboardList";
+        Image: "Image";
+        Video: "Video";
+        LayoutDashboard: "LayoutDashboard";
+        PanelLeft: "PanelLeft";
+        KeyRound: "KeyRound";
+        ShieldCheck: "ShieldCheck";
+        Edit: "Edit";
+        Archive: "Archive";
+        Box: "Box";
+        Truck: "Truck";
+        CircleDollarSign: "CircleDollarSign";
+        Activity: "Activity";
+        LineChart: "LineChart";
+        Smartphone: "Smartphone";
+        Webhook: "Webhook";
+        Scale: "Scale";
+        PlugZap: "PlugZap";
+        PercentDiamond: "PercentDiamond";
+        Newspaper: "Newspaper";
+        Languages: "Languages";
+        Eraser: "Eraser";
+        Warehouse: "Warehouse";
+        TrendingDown: "TrendingDown";
+        Bell: "Bell";
+        PackageOpen: "PackageOpen";
+        Building2: "Building2";
+        Store: "Store";
+        ClipboardCheck: "ClipboardCheck";
+    }>;
+    targetRoute: z.ZodString;
+    requiredPermission: z.ZodOptional<z.ZodString>;
+    keywords: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    weight: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>>;
+export type ModuleActionsManifest = z.infer<typeof ModuleActionsManifestSchema>;
+export declare const GetAdminActionsQuerySchema: z.ZodObject<{
+    language: z.ZodEnum<{
+        en: "en";
+        pl: "pl";
+    }>;
+}, z.core.$strip>;
+export type GetAdminActionsQuery = z.infer<typeof GetAdminActionsQuerySchema>;
+/**
+ * Per-row view returned by the endpoint. Labels and descriptions are
+ * already resolved into the requested language by the server; the
+ * admin renders them verbatim. `keywords` is the raw list as declared
+ * in the manifest — the admin applies its own diacritic-insensitive
+ * normalize at filter time.
+ */
+export declare const AdminActionViewSchema: z.ZodObject<{
+    moduleId: z.ZodString;
+    actionId: z.ZodString;
+    label: z.ZodString;
+    description: z.ZodNullable<z.ZodString>;
+    icon: z.ZodEnum<{
+        Plus: "Plus";
+        Sparkles: "Sparkles";
+        Settings: "Settings";
+        Search: "Search";
+        Boxes: "Boxes";
+        Layers: "Layers";
+        Menu: "Menu";
+        PlusCircle: "PlusCircle";
+        PlusSquare: "PlusSquare";
+        FilePlus: "FilePlus";
+        FolderPlus: "FolderPlus";
+        Upload: "Upload";
+        FileUp: "FileUp";
+        CloudUpload: "CloudUpload";
+        Download: "Download";
+        FileDown: "FileDown";
+        FileText: "FileText";
+        BookOpen: "BookOpen";
+        Rss: "Rss";
+        Package: "Package";
+        Tag: "Tag";
+        ShoppingCart: "ShoppingCart";
+        Receipt: "Receipt";
+        CreditCard: "CreditCard";
+        Users: "Users";
+        UserPlus: "UserPlus";
+        Inbox: "Inbox";
+        ListChecks: "ListChecks";
+        ClipboardList: "ClipboardList";
+        Image: "Image";
+        Video: "Video";
+        LayoutDashboard: "LayoutDashboard";
+        PanelLeft: "PanelLeft";
+        KeyRound: "KeyRound";
+        ShieldCheck: "ShieldCheck";
+        Edit: "Edit";
+        Archive: "Archive";
+        Box: "Box";
+        Truck: "Truck";
+        CircleDollarSign: "CircleDollarSign";
+        Activity: "Activity";
+        LineChart: "LineChart";
+        Smartphone: "Smartphone";
+        Webhook: "Webhook";
+        Scale: "Scale";
+        PlugZap: "PlugZap";
+        PercentDiamond: "PercentDiamond";
+        Newspaper: "Newspaper";
+        Languages: "Languages";
+        Eraser: "Eraser";
+        Warehouse: "Warehouse";
+        TrendingDown: "TrendingDown";
+        Bell: "Bell";
+        PackageOpen: "PackageOpen";
+        Building2: "Building2";
+        Store: "Store";
+        ClipboardCheck: "ClipboardCheck";
+    }>;
+    targetRoute: z.ZodString;
+    keywords: z.ZodArray<z.ZodString>;
+    weight: z.ZodNumber;
+}, z.core.$strip>;
+export type AdminActionView = z.infer<typeof AdminActionViewSchema>;
+export declare const GetAdminActionsResponseSchema: z.ZodObject<{
+    data: z.ZodArray<z.ZodObject<{
+        moduleId: z.ZodString;
+        actionId: z.ZodString;
+        label: z.ZodString;
+        description: z.ZodNullable<z.ZodString>;
+        icon: z.ZodEnum<{
+            Plus: "Plus";
+            Sparkles: "Sparkles";
+            Settings: "Settings";
+            Search: "Search";
+            Boxes: "Boxes";
+            Layers: "Layers";
+            Menu: "Menu";
+            PlusCircle: "PlusCircle";
+            PlusSquare: "PlusSquare";
+            FilePlus: "FilePlus";
+            FolderPlus: "FolderPlus";
+            Upload: "Upload";
+            FileUp: "FileUp";
+            CloudUpload: "CloudUpload";
+            Download: "Download";
+            FileDown: "FileDown";
+            FileText: "FileText";
+            BookOpen: "BookOpen";
+            Rss: "Rss";
+            Package: "Package";
+            Tag: "Tag";
+            ShoppingCart: "ShoppingCart";
+            Receipt: "Receipt";
+            CreditCard: "CreditCard";
+            Users: "Users";
+            UserPlus: "UserPlus";
+            Inbox: "Inbox";
+            ListChecks: "ListChecks";
+            ClipboardList: "ClipboardList";
+            Image: "Image";
+            Video: "Video";
+            LayoutDashboard: "LayoutDashboard";
+            PanelLeft: "PanelLeft";
+            KeyRound: "KeyRound";
+            ShieldCheck: "ShieldCheck";
+            Edit: "Edit";
+            Archive: "Archive";
+            Box: "Box";
+            Truck: "Truck";
+            CircleDollarSign: "CircleDollarSign";
+            Activity: "Activity";
+            LineChart: "LineChart";
+            Smartphone: "Smartphone";
+            Webhook: "Webhook";
+            Scale: "Scale";
+            PlugZap: "PlugZap";
+            PercentDiamond: "PercentDiamond";
+            Newspaper: "Newspaper";
+            Languages: "Languages";
+            Eraser: "Eraser";
+            Warehouse: "Warehouse";
+            TrendingDown: "TrendingDown";
+            Bell: "Bell";
+            PackageOpen: "PackageOpen";
+            Building2: "Building2";
+            Store: "Store";
+            ClipboardCheck: "ClipboardCheck";
+        }>;
+        targetRoute: z.ZodString;
+        keywords: z.ZodArray<z.ZodString>;
+        weight: z.ZodNumber;
+    }, z.core.$strip>>;
+    meta: z.ZodObject<{
+        language: z.ZodEnum<{
+            en: "en";
+            pl: "pl";
+        }>;
+        total: z.ZodNumber;
+        registryVersion: z.ZodNumber;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type GetAdminActionsResponse = z.infer<typeof GetAdminActionsResponseSchema>;
+//# sourceMappingURL=admin-actions.d.ts.map

package/dist/admin-actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-actions.d.ts","sourceRoot":"","sources":["../src/admin-actions.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgK9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAchE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0B7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;GAIG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAoBpC,CAAC;AACL,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAYhF,eAAO,MAAM,0BAA0B;;;;;iBAErC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAShC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC"}

package/dist/admin-actions.js

@@ -0,0 +1,287 @@
+// Module-Contributed Admin Actions — feature 020 contract surface.
+//
+// Modules declare zero-or-more actions inline in their manifest's
+// `actions` field. Each action becomes a row in the platform's
+// command-palette Actions group at install time. This file defines:
+//
+//   1. The closed allowlist of icon names a module may reference (kept
+//      small on purpose — adding a new icon is a one-line PR reviewed
+//      alongside the action that needs it).
+//   2. The Zod schema for a single declared action.
+//   3. The `actions` array shape attached to ModuleManifestSchema, with
+//      a `superRefine` rejecting duplicate ids within a single module.
+//   4. The HTTP query and response envelope for
+//      `GET /api/v1/admin/admin-actions`.
+//
+// Permission codes are NOT format-constrained — the codebase uses a mix
+// of colon (`catalog:write`) and dot (`cms.write`) notation; this
+// feature passes whatever the module declares verbatim to the existing
+// hasPermission() check (research §R8).
+import { z } from 'zod';
+// ---------------------------------------------------------------------------
+// Closed allowlist of icon names. Each entry corresponds 1:1 to a
+// lucide-react component name. The admin shell maps strings to
+// components in admin/src/lib/admin-actions/icon-map.ts.
+// ---------------------------------------------------------------------------
+export const KnownIconNameSchema = z.enum([
+    // generic
+    'Plus',
+    'Sparkles',
+    'Settings',
+    'Search',
+    'Boxes',
+    'Layers',
+    'Menu',
+    // create / write
+    'PlusCircle',
+    'PlusSquare',
+    'FilePlus',
+    'FolderPlus',
+    // import / upload
+    'Upload',
+    'FileUp',
+    'CloudUpload',
+    // export / download
+    'Download',
+    'FileDown',
+    // documents
+    'FileText',
+    'BookOpen',
+    // syndication
+    'Rss',
+    // commerce
+    'Package',
+    'Tag',
+    'ShoppingCart',
+    'Receipt',
+    // Feature 076 (D-83 item 8) — `payment_methods`' landing action. The same
+    // icon the sidebar already renders for `/payment-methods`.
+    'CreditCard',
+    // people
+    'Users',
+    'UserPlus',
+    // workflows
+    'Inbox',
+    'ListChecks',
+    'ClipboardList',
+    // media
+    'Image',
+    'Video',
+    // navigation
+    'LayoutDashboard',
+    'PanelLeft',
+    // security
+    'KeyRound',
+    // Feature 091 (Phase 4, batch four) — `admin_roles`' sidebar entry and
+    // palette action, which became module declarations and therefore have to name
+    // their icon rather than import it. The allowlist is what a nav entry's
+    // `icon` is validated against too, so the glyph `AppShell.tsx` rendered by
+    // hand joins it here instead of the entry silently changing to a name that
+    // happened to be on the list.
+    'ShieldCheck',
+    // Feature 080 (D-163.1) — the six icons the dashboard's recent-activity
+    // renderings used before they became manifest declarations. They were
+    // lucide imports inside `admin/src/modules/home/activity-render.ts`, which
+    // is the hand-maintained table that ruling retires; a declared icon has to
+    // come from this allowlist like every other, so they join it here.
+    'Edit',
+    'Archive',
+    'Box',
+    'Truck',
+    'CircleDollarSign',
+    'Activity',
+    // Feature 091 (Phase 4, batch two) — `analytics`' sidebar entry, which became
+    // a module declaration and therefore has to name its icon rather than import
+    // it. The allowlist is what a nav entry's `icon` is validated against too, so
+    // the glyph `AppShell.tsx` rendered by hand joins it here instead of the
+    // entry silently changing to a name that happened to be on the list.
+    'LineChart',
+    // Feature 091 (Phase 4, batch six) — `pwa`' sidebar entry, which became a
+    // module declaration and therefore has to name its icon rather than import
+    // it. Same rule as the two entries above and the same reason for adding a
+    // name rather than reusing one: the entry keeps the glyph `AppShell.tsx`
+    // drew for it, so nothing an operator sees moves with the declaration.
+    'Smartphone',
+    // Feature 091 (Phase 4, the plan's batch 6) — `webhooks`' and `comparisons`'
+    // sidebar entries and palette actions, for the same reason: the two glyphs
+    // `AppShell.tsx` imported from `lucide-react` by hand have to be nameable now
+    // that the declarations are the modules' own. `api_keys` needed nothing —
+    // `KeyRound` is already above, because `credentials`' row renders it too.
+    //
+    // The batch numbers collide and the members do not: !1214 shipped `pwa` as
+    // "batch six" while `plan.md`'s batch 6 is this set. Both entries stand.
+    'Webhook',
+    'Scale',
+    // Feature 092 (`specs/092-pimcore-pim-sync/`) — `pim_pimcore`'s sidebar entry.
+    // The glyph `pim_ergonode`'s hand-written NAV row already renders for the
+    // connector directly above it; a module declaration has to name its icon
+    // rather than import it, so the name joins the allowlist here instead of the
+    // entry degrading to one that happens to be on it already.
+    'PlugZap',
+    // Feature 091 (Phase 4, the plan's batch 7) — `promotions`' two sidebar
+    // entries and its two palette rows, which become module declarations here and
+    // therefore have to name their icon rather than import it. Both rows drew the
+    // same glyph by hand in `AppShell.tsx`, so one name keeps both exactly as they
+    // were; the alternative is the entry degrading to a name that happens to be on
+    // the list already. `payment_methods`, `customer_accounts` and `product_feeds`
+    // need nothing — `CreditCard`, `Users` and `Rss` are all above, each added by
+    // an earlier palette action of that same module.
+    'PercentDiamond',
+    // Feature 091 (Phase 4, batch 8) — `megamenu`'s sidebar entry, which becomes a
+    // module declaration here and therefore has to name its icon rather than
+    // import it. `AppShell.tsx` drew `Newspaper` for it by hand, beside the four
+    // `/cms/*` rows and the three `/blog/*` ones; keeping the glyph means adding
+    // the name, and the alternative is the entry silently degrading to a name that
+    // happens to be on the list. The batch's other five need nothing — `Search`,
+    // `Receipt`, `Truck`, `CreditCard` and `Package` are all above.
+    'Newspaper',
+    // Feature 091 (Phase 4, batch 10) — `dictionaries`' two sidebar entries and
+    // the two palette actions that replace its hand-written *Navigate* rows, and
+    // `settings`' cache row. All three glyphs were imported into `AppShell.tsx`
+    // from `lucide-react` by hand; a module declaration has to name its icon
+    // rather than import it, so the names join the allowlist here instead of the
+    // entries degrading to names that happen to be on it already. The batch's
+    // other rows need nothing — `Languages` covers `/dictionary`, `ListChecks` is
+    // already above for `catalog`'s bulk-operations row, and `Settings` and
+    // `KeyRound` have been there since the first palette actions of the two
+    // modules that render them.
+    'Languages',
+    'Eraser',
+    // Feature 091 (Phase 4, batch 13) — four of `inventory`'s five sidebar
+    // entries. `AppShell.tsx` imported all four from `lucide-react` by hand
+    // (`Warehouse as WarehouseIcon`, `TrendingDown`, `Bell as BellOutline`,
+    // `PackageOpen`), and a module declaration has to *name* its icon rather than
+    // import it, so the names join the allowlist here instead of four rows
+    // silently degrading to names that happen to be on it already — which for
+    // this batch would have been four operator-visible glyph changes bought for
+    // nothing. The batch's other rows need nothing: `Box` covers the stock
+    // roster, `CircleDollarSign` `/price-lists`, and `PlugZap` `/pim-ergonode` —
+    // `pim_pimcore` added that last one for the row directly below it.
+    'Warehouse',
+    'TrendingDown',
+    'Bell',
+    'PackageOpen',
+    // Feature 091 (Phase 4, batch 14) — `organizations`' sidebar entry and the
+    // palette action that replaces its hand-written *Navigate* row, and
+    // `sales_channels`' sidebar entry and the palette action that replaces its
+    // row. `AppShell.tsx` imported both glyphs from `lucide-react` by hand, and a
+    // module declaration has to *name* its icon rather than import it, so the
+    // names join the allowlist here instead of four declarations degrading to
+    // names that happen to be on it already — which would be two operator-visible
+    // glyph changes bought for nothing. `customers`' two rows and its two
+    // existing actions need nothing: `Users` has been above since the first
+    // palette actions of that module.
+    'Building2',
+    'Store',
+    // Feature 091 (Phase 4, batch 15) — `orders`' three sidebar entries.
+    // `AppShell.tsx` imported the glyph from `lucide-react` by hand, and a module
+    // declaration has to *name* its icon rather than import it, so the name joins
+    // the allowlist here instead of three declarations degrading to one that
+    // happens to be on it already — `ShoppingCart`, which this module's own
+    // `open-orders` action names, is a different glyph the sidebar has never
+    // rendered. The batch's other seven rows need nothing: `Package`, `Boxes`,
+    // `Tag` and `FileText` cover `catalog`'s five, and `ListChecks` — the
+    // bulk-operations glyph — has been above since feature 020.
+    'ClipboardCheck',
+]);
+// ---------------------------------------------------------------------------
+// Field-level patterns
+// ---------------------------------------------------------------------------
+const actionIdRe = /^[a-z][a-z0-9-]*$/;
+const translationKeyRe = /^[a-z][a-zA-Z0-9_]*(\.[a-z][a-zA-Z0-9_]*)*$/;
+const adminRouteRe = /^\/[A-Za-z0-9/_-]*$/;
+// ---------------------------------------------------------------------------
+// Manifest-side action declaration
+// ---------------------------------------------------------------------------
+export const ModuleActionSchema = z.object({
+    id: z
+        .string()
+        .min(2)
+        .max(64)
+        .regex(actionIdRe, 'Action id must be lowercase slug (letters, digits, dashes; leading letter)'),
+    labelKey: z.string().min(1).max(255).regex(translationKeyRe, 'Translation key must be dot-separated camelCase namespaces'),
+    descriptionKey: z
+        .string()
+        .min(1)
+        .max(255)
+        .regex(translationKeyRe, 'Translation key must be dot-separated camelCase namespaces')
+        .optional(),
+    icon: KnownIconNameSchema,
+    targetRoute: z
+        .string()
+        .min(2)
+        .max(255)
+        .regex(adminRouteRe, 'Admin route must be a leading-slash ASCII path'),
+    /**
+     * Permission code passed verbatim to the admin's hasPermission(). The
+     * codebase mixes colon and dot notation; both are accepted by design.
+     */
+    requiredPermission: z.string().min(1).max(64).optional(),
+    keywords: z.array(z.string().trim().min(1).max(64)).max(10).default([]),
+    weight: z.number().int().min(0).max(9999).default(100),
+});
+/**
+ * Top-level `actions` array on a module's manifest. Enforces
+ * within-module id uniqueness — duplicates fail the install with a
+ * clear, indexed error rather than silently dropping one (FR-005).
+ */
+export const ModuleActionsManifestSchema = z
+    .array(ModuleActionSchema)
+    .max(50, 'A single module cannot declare more than 50 actions')
+    .superRefine((actions, ctx) => {
+    const seen = new Map();
+    for (let i = 0; i < actions.length; i++) {
+        const action = actions[i];
+        if (!action)
+            continue;
+        const id = action.id;
+        const prev = seen.get(id);
+        if (prev !== undefined) {
+            ctx.addIssue({
+                code: 'custom',
+                path: [i, 'id'],
+                message: `Duplicate action id "${id}" — first seen at index ${prev}`,
+            });
+        }
+        else {
+            seen.set(id, i);
+        }
+    }
+});
+// ---------------------------------------------------------------------------
+// HTTP — GET /api/v1/admin/admin-actions
+// ---------------------------------------------------------------------------
+// Imported via re-export from admin-i18n.ts to avoid a circular import.
+// The HTTP handler validates the language enum the same way the i18n
+// endpoint does (feature 019).
+import { SupportedAdminLanguageSchema } from './admin-i18n.js';
+export const GetAdminActionsQuerySchema = z.object({
+    language: SupportedAdminLanguageSchema,
+});
+/**
+ * Per-row view returned by the endpoint. Labels and descriptions are
+ * already resolved into the requested language by the server; the
+ * admin renders them verbatim. `keywords` is the raw list as declared
+ * in the manifest — the admin applies its own diacritic-insensitive
+ * normalize at filter time.
+ */
+export const AdminActionViewSchema = z.object({
+    moduleId: z.string(),
+    actionId: z.string(),
+    label: z.string(),
+    description: z.string().nullable(),
+    icon: KnownIconNameSchema,
+    targetRoute: z.string(),
+    keywords: z.array(z.string()),
+    weight: z.number().int(),
+});
+export const GetAdminActionsResponseSchema = z.object({
+    data: z.array(AdminActionViewSchema),
+    meta: z.object({
+        language: SupportedAdminLanguageSchema,
+        total: z.number().int().nonnegative(),
+        /** MAX(version) across the visible rows; 0 when `data` is empty. */
+        registryVersion: z.number().int().nonnegative(),
+    }),
+});
+//# sourceMappingURL=admin-actions.js.map

package/dist/admin-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-actions.js","sourceRoot":"","sources":["../src/admin-actions.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,EAAE;AACF,kEAAkE;AAClE,+DAA+D;AAC/D,oEAAoE;AACpE,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,4CAA4C;AAC5C,oDAAoD;AACpD,wEAAwE;AACxE,uEAAuE;AACvE,gDAAgD;AAChD,0CAA0C;AAC1C,EAAE;AACF,wEAAwE;AACxE,kEAAkE;AAClE,uEAAuE;AACvE,wCAAwC;AAExC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,8EAA8E;AAC9E,kEAAkE;AAClE,+DAA+D;AAC/D,yDAAyD;AACzD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC;IACxC,UAAU;IACV,MAAM;IACN,UAAU;IACV,UAAU;IACV,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,MAAM;IACN,iBAAiB;IACjB,YAAY;IACZ,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,kBAAkB;IAClB,QAAQ;IACR,QAAQ;IACR,aAAa;IACb,oBAAoB;IACpB,UAAU;IACV,UAAU;IACV,YAAY;IACZ,UAAU;IACV,UAAU;IACV,cAAc;IACd,KAAK;IACL,WAAW;IACX,SAAS;IACT,KAAK;IACL,cAAc;IACd,SAAS;IACT,0EAA0E;IAC1E,2DAA2D;IAC3D,YAAY;IACZ,SAAS;IACT,OAAO;IACP,UAAU;IACV,YAAY;IACZ,OAAO;IACP,YAAY;IACZ,eAAe;IACf,QAAQ;IACR,OAAO;IACP,OAAO;IACP,aAAa;IACb,iBAAiB;IACjB,WAAW;IACX,WAAW;IACX,UAAU;IACV,uEAAuE;IACvE,8EAA8E;IAC9E,wEAAwE;IACxE,2EAA2E;IAC3E,2EAA2E;IAC3E,8BAA8B;IAC9B,aAAa;IACb,wEAAwE;IACxE,sEAAsE;IACtE,2EAA2E;IAC3E,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM;IACN,SAAS;IACT,KAAK;IACL,OAAO;IACP,kBAAkB;IAClB,UAAU;IACV,8EAA8E;IAC9E,6EAA6E;IAC7E,8EAA8E;IAC9E,yEAAyE;IACzE,qEAAqE;IACrE,WAAW;IACX,0EAA0E;IAC1E,2EAA2E;IAC3E,0EAA0E;IAC1E,yEAAyE;IACzE,uEAAuE;IACvE,YAAY;IACZ,6EAA6E;IAC7E,2EAA2E;IAC3E,8EAA8E;IAC9E,0EAA0E;IAC1E,0EAA0E;IAC1E,EAAE;IACF,2EAA2E;IAC3E,yEAAyE;IACzE,SAAS;IACT,OAAO;IACP,+EAA+E;IAC/E,0EAA0E;IAC1E,yEAAyE;IACzE,6EAA6E;IAC7E,2DAA2D;IAC3D,SAAS;IACT,wEAAwE;IACxE,8EAA8E;IAC9E,8EAA8E;IAC9E,+EAA+E;IAC/E,+EAA+E;IAC/E,+EAA+E;IAC/E,8EAA8E;IAC9E,iDAAiD;IACjD,gBAAgB;IAChB,+EAA+E;IAC/E,yEAAyE;IACzE,6EAA6E;IAC7E,6EAA6E;IAC7E,+EAA+E;IAC/E,6EAA6E;IAC7E,gEAAgE;IAChE,WAAW;IACX,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,0EAA0E;IAC1E,8EAA8E;IAC9E,wEAAwE;IACxE,wEAAwE;IACxE,4BAA4B;IAC5B,WAAW;IACX,QAAQ;IACR,uEAAuE;IACvE,wEAAwE;IACxE,wEAAwE;IACxE,8EAA8E;IAC9E,uEAAuE;IACvE,0EAA0E;IAC1E,4EAA4E;IAC5E,uEAAuE;IACvE,6EAA6E;IAC7E,mEAAmE;IACnE,WAAW;IACX,cAAc;IACd,MAAM;IACN,aAAa;IACb,2EAA2E;IAC3E,oEAAoE;IACpE,2EAA2E;IAC3E,8EAA8E;IAC9E,0EAA0E;IAC1E,0EAA0E;IAC1E,8EAA8E;IAC9E,sEAAsE;IACtE,wEAAwE;IACxE,kCAAkC;IAClC,WAAW;IACX,OAAO;IACP,qEAAqE;IACrE,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtE,4DAA4D;IAC5D,gBAAgB;CACjB,CAAC,CAAC;AAGH,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,MAAM,UAAU,GAAG,mBAAmB,CAAC;AACvC,MAAM,gBAAgB,GAAG,6CAA6C,CAAC;AACvE,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAE3C,8EAA8E;AAC9E,mCAAmC;AACnC,8EAA8E;AAE9E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,CAAC;SACF,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,KAAK,CAAC,UAAU,EAAE,4EAA4E,CAAC;IAClG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,gBAAgB,EAAE,4DAA4D,CAAC;IAC1H,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,gBAAgB,EAAE,4DAA4D,CAAC;SACrF,QAAQ,EAAE;IACb,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,YAAY,EAAE,gDAAgD,CAAC;IACxE;;;OAGG;IACH,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;CACvD,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,KAAK,CAAC,kBAAkB,CAAC;KACzB,GAAG,CAAC,EAAE,EAAE,qDAAqD,CAAC;KAC9D,WAAW,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;gBACf,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,IAAI,EAAE;aACrE,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAGL,8EAA8E;AAC9E,yCAAyC;AACzC,8EAA8E;AAE9E,wEAAwE;AACxE,qEAAqE;AACrE,+BAA+B;AAE/B,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAE/D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,4BAA4B;CACvC,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CACzB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,QAAQ,EAAE,4BAA4B;QACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACrC,oEAAoE;QACpE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;KAChD,CAAC;CACH,CAAC,CAAC"}