@endora-commerce/contracts 0.100.0

package/dist/admin.d.ts

@@ -0,0 +1,243 @@
+import { z } from 'zod';
+/**
+ * Admin module contracts (US4) — AdminUser, AdminRole, Impersonation,
+ * AuditLogEntry. Source of truth per Principle V.
+ *
+ * Permission strings are screaming-snake or `module:action` (e.g.
+ * `catalog:write`, `orders:read`, `customers:impersonate`). The matrix is
+ * stored on AdminRole as a JSONB array.
+ */
+export declare const adminUserSchema: z.ZodObject<{
+    id: z.ZodString;
+    email: z.ZodString;
+    firstName: z.ZodString;
+    lastName: z.ZodString;
+    adminRoleId: z.ZodNullable<z.ZodString>;
+    twoFactorEnabled: z.ZodBoolean;
+    status: z.ZodEnum<{
+        active: "active";
+        inactive: "inactive";
+    }>;
+    lastLoginAt: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+export type AdminUser = z.infer<typeof adminUserSchema>;
+export declare const adminRoleSchema: z.ZodObject<{
+    id: z.ZodString;
+    code: z.ZodString;
+    name: z.ZodString;
+    permissions: z.ZodArray<z.ZodString>;
+    requiresTwoFactor: z.ZodBoolean;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+export type AdminRole = z.infer<typeof adminRoleSchema>;
+export declare const adminLoginRequestSchema: z.ZodObject<{
+    email: z.ZodString;
+    password: z.ZodString;
+}, z.core.$strip>;
+export declare const impersonationRequestSchema: z.ZodObject<{
+    customerAccountId: z.ZodString;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ImpersonationRequest = z.infer<typeof impersonationRequestSchema>;
+export declare const impersonationStartResponseSchema: z.ZodObject<{
+    impersonationSessionId: z.ZodString;
+    impersonatedCustomerAccount: z.ZodObject<{
+        id: z.ZodString;
+        email: z.ZodString;
+        firstName: z.ZodString;
+        lastName: z.ZodString;
+        role: z.ZodEnum<{
+            organization_admin: "organization_admin";
+            regular_user: "regular_user";
+        }>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type ImpersonationStartResponse = z.infer<typeof impersonationStartResponseSchema>;
+export declare const createAdminUserRequestSchema: z.ZodObject<{
+    email: z.ZodString;
+    password: z.ZodString;
+    firstName: z.ZodString;
+    lastName: z.ZodString;
+    adminRoleId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+export type CreateAdminUserRequest = z.infer<typeof createAdminUserRequestSchema>;
+export declare const updateAdminUserRequestSchema: z.ZodObject<{
+    firstName: z.ZodOptional<z.ZodString>;
+    lastName: z.ZodOptional<z.ZodString>;
+    adminRoleId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    status: z.ZodOptional<z.ZodEnum<{
+        active: "active";
+        inactive: "inactive";
+    }>>;
+}, z.core.$strict>;
+export type UpdateAdminUserRequest = z.infer<typeof updateAdminUserRequestSchema>;
+/**
+ * Self-update payload — every authenticated admin can edit their own
+ * first/last name and rotate their password without needing the
+ * `admin_users:manage` permission. Role and status are intentionally
+ * NOT exposed here.
+ */
+export declare const updateAdminUserSelfRequestSchema: z.ZodObject<{
+    firstName: z.ZodOptional<z.ZodString>;
+    lastName: z.ZodOptional<z.ZodString>;
+    password: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type UpdateAdminUserSelfRequest = z.infer<typeof updateAdminUserSelfRequestSchema>;
+/**
+ * Peer password reset (issue #252) — one operator sets another operator's
+ * password. Deliberately its own payload rather than a `password` field on
+ * `updateAdminUserRequestSchema`: setting a password is not an edit to a field
+ * alongside a name change. It has its own audit action and its own side effect
+ * (every session the target holds is revoked), and a request that renamed and
+ * reset in one call would have to answer for both.
+ *
+ * The bound matches `createAdminUserRequestSchema` — the same password, made
+ * by the same operator, on the same account.
+ */
+export declare const resetAdminUserPasswordRequestSchema: z.ZodObject<{
+    password: z.ZodString;
+}, z.core.$strict>;
+export type ResetAdminUserPasswordRequest = z.infer<typeof resetAdminUserPasswordRequestSchema>;
+export declare const upsertAdminRoleRequestSchema: z.ZodObject<{
+    code: z.ZodString;
+    name: z.ZodString;
+    permissions: z.ZodArray<z.ZodString>;
+    requiresTwoFactor: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export type UpsertAdminRoleRequest = z.infer<typeof upsertAdminRoleRequestSchema>;
+/** Optional per-module permission declaration on `ModuleManifest.permissions`. */
+export declare const modulePermissionDeclarationSchema: z.ZodObject<{
+    code: z.ZodString;
+    module: z.ZodOptional<z.ZodString>;
+    label: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    requires: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type ModulePermissionDeclaration = z.infer<typeof modulePermissionDeclarationSchema>;
+/**
+ * Row shape returned by `GET /admin/permissions`.
+ *
+ * `module` and `owners` are **not the same string**, and the whole of D-175's
+ * "make the ownership model visible" is that only the first used to be on the
+ * wire. `module` is a display grouping — `_lifecycle` files its codes under
+ * `module: 'module_lifecycle'`, which is no module id at all — while `owners`
+ * is the presence question: the modules whose effective state decides whether
+ * this row is offered. They differ whenever a code is shared, and a reader who
+ * takes `module` for the owner gets it wrong in exactly the way D-173 did.
+ */
+export declare const permissionCatalogueEntrySchema: z.ZodObject<{
+    code: z.ZodString;
+    module: z.ZodString;
+    label: z.ZodString;
+    owners: z.ZodArray<z.ZodString>;
+    requires: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type PermissionCatalogueEntry = z.infer<typeof permissionCatalogueEntrySchema>;
+/**
+ * The codes a role holding `granted` is advised to add — D-175, feature 080
+ * T057.
+ *
+ * **Advisory, and it lives here so that there is one of it.** The role editor
+ * renders the shortfall and the permission inventory sweeps the declarations
+ * that produce it; D-175's second caution is precisely that the benchmark's
+ * per-module tests hand-assemble their own cross-module catalogue, so the answer
+ * is computed over the rows the platform already merged and nowhere else.
+ *
+ * Two narrowings, both of them the fail-safe direction:
+ *
+ * - a requirement naming a code **not among `catalogue`** is skipped. For the
+ *   role editor that is a code with no checkbox — offering one an operator
+ *   cannot tick is the single thing the panel must not do — and a requirement
+ *   naming a code the *platform* does not know is a defect reported to its
+ *   author by the inventory, not to the operator.
+ * - a `'*'` role holds everything, so it is advised nothing.
+ *
+ * Nothing here refuses anything: the caller renders a suggestion, and a role
+ * saved without it is saved.
+ */
+export declare function missingPermissionRequirements(granted: Iterable<string>, catalogue: readonly PermissionCatalogueEntry[]): string[];
+/**
+ * Canonical permission catalogue exposed by `GET /admin/permissions`.
+ * The matrix UI groups by `module`; the wildcard `*` is intentionally not
+ * in the catalogue (it's only granted to the bootstrap "platform_admin").
+ */
+export declare const PERMISSION_CATALOGUE: readonly [{
+    readonly code: "catalog:read";
+    readonly module: "catalog";
+    readonly label: "View catalog";
+}, {
+    readonly code: "catalog:write";
+    readonly module: "catalog";
+    readonly label: "Edit catalog";
+}, {
+    readonly code: "orders:read";
+    readonly module: "orders";
+    readonly label: "View orders";
+}, {
+    readonly code: "orders:write";
+    readonly module: "orders";
+    readonly label: "Edit orders / change status";
+}, {
+    readonly code: "rfqs:handle";
+    readonly module: "quote_requests";
+    readonly label: "Handle quote requests";
+}, {
+    readonly code: "customers:read";
+    readonly module: "customers";
+    readonly label: "View customers";
+}, {
+    readonly code: "customers:impersonate";
+    readonly module: "customers";
+    readonly label: "Impersonate customers";
+}, {
+    readonly code: "integrations:manage";
+    readonly module: "api_keys";
+    readonly label: "Manage API keys + webhooks";
+}, {
+    readonly code: "audit_log:read";
+    readonly module: "audit_logs";
+    readonly label: "View audit log";
+}, {
+    readonly code: "admin_users:manage";
+    readonly module: "admin_users";
+    readonly label: "Manage admin users + roles";
+}, {
+    readonly code: "credit_limits:manage";
+    readonly module: "credit_limits";
+    readonly label: "Grant + adjust credit limits";
+}, {
+    readonly code: "customers:manage";
+    readonly module: "customers";
+    readonly label: "Manage customer organizations";
+}, {
+    readonly code: "organizations:rollup";
+    readonly module: "organizations";
+    readonly label: "Act across organization descendants";
+}, {
+    readonly code: "blog.read";
+    readonly module: "blog";
+    readonly label: "View blog content";
+}, {
+    readonly code: "blog.write";
+    readonly module: "blog";
+    readonly label: "Author + publish blog content";
+}];
+export declare const auditLogEntrySchema: z.ZodObject<{
+    id: z.ZodString;
+    actorAdminUserId: z.ZodNullable<z.ZodString>;
+    impersonatedCustomerAccountId: z.ZodNullable<z.ZodString>;
+    actedAt: z.ZodString;
+    action: z.ZodString;
+    objectType: z.ZodString;
+    objectId: z.ZodString;
+    stateBefore: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    stateAfter: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    ipAddress: z.ZodNullable<z.ZodString>;
+    userAgent: z.ZodNullable<z.ZodString>;
+    requestId: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type AuditLogEntry = z.infer<typeof auditLogEntrySchema>;
+//# sourceMappingURL=admin.d.ts.map

package/dist/admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../src/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;;;GAOG;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;iBAW1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,eAAe;;;;;;;;iBAQ1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,uBAAuB;;;iBAGlC,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;iBAGrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,gCAAgC;;;;;;;;;;;;iBAS3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAI1F,eAAO,MAAM,4BAA4B;;;;;;iBAMvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,eAAO,MAAM,4BAA4B;;;;;;;;kBAO9B,CAAC;AACZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC;;;;kBAMlC,CAAC;AACZ,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F;;;;;;;;;;GAUG;AACH,eAAO,MAAM,mCAAmC;;kBAIrC,CAAC;AACZ,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAIhG,eAAO,MAAM,4BAA4B;;;;;iBAKvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,kFAAkF;AAClF,eAAO,MAAM,iCAAiC;;;;;;iBAgC5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F;;;;;;;;;;GAUG;AACH,eAAO,MAAM,8BAA8B;;;;;;iBAWzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,EACzB,SAAS,EAAE,SAAS,wBAAwB,EAAE,GAC7C,MAAM,EAAE,CAaV;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2BvB,CAAC;AAIX,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;iBAa9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/admin.js

@@ -0,0 +1,246 @@
+import { z } from 'zod';
+import { isoDateTimeSchema, uuidSchema } from './common.js';
+/**
+ * Admin module contracts (US4) — AdminUser, AdminRole, Impersonation,
+ * AuditLogEntry. Source of truth per Principle V.
+ *
+ * Permission strings are screaming-snake or `module:action` (e.g.
+ * `catalog:write`, `orders:read`, `customers:impersonate`). The matrix is
+ * stored on AdminRole as a JSONB array.
+ */
+export const adminUserSchema = z.object({
+    id: uuidSchema,
+    email: z.string().email(),
+    firstName: z.string(),
+    lastName: z.string(),
+    adminRoleId: uuidSchema.nullable(),
+    twoFactorEnabled: z.boolean(),
+    status: z.enum(['active', 'inactive']),
+    lastLoginAt: isoDateTimeSchema.nullable(),
+    createdAt: isoDateTimeSchema,
+    updatedAt: isoDateTimeSchema,
+});
+export const adminRoleSchema = z.object({
+    id: uuidSchema,
+    code: z.string(),
+    name: z.string(),
+    permissions: z.array(z.string()),
+    requiresTwoFactor: z.boolean(),
+    createdAt: isoDateTimeSchema,
+    updatedAt: isoDateTimeSchema,
+});
+export const adminLoginRequestSchema = z.object({
+    email: z.string().email(),
+    password: z.string(),
+});
+export const impersonationRequestSchema = z.object({
+    customerAccountId: uuidSchema,
+    reason: z.string().max(2000).optional(),
+});
+export const impersonationStartResponseSchema = z.object({
+    impersonationSessionId: uuidSchema,
+    impersonatedCustomerAccount: z.object({
+        id: uuidSchema,
+        email: z.string().email(),
+        firstName: z.string(),
+        lastName: z.string(),
+        role: z.enum(['organization_admin', 'regular_user']),
+    }),
+});
+// --- Admin user CRUD --------------------------------------------------------
+export const createAdminUserRequestSchema = z.object({
+    email: z.string().email(),
+    password: z.string().min(12).max(256),
+    firstName: z.string().min(1).max(120),
+    lastName: z.string().min(1).max(120),
+    adminRoleId: uuidSchema.nullable().optional(),
+});
+export const updateAdminUserRequestSchema = z
+    .object({
+    firstName: z.string().min(1).max(120).optional(),
+    lastName: z.string().min(1).max(120).optional(),
+    adminRoleId: uuidSchema.nullable().optional(),
+    status: z.enum(['active', 'inactive']).optional(),
+})
+    .strict();
+/**
+ * Self-update payload — every authenticated admin can edit their own
+ * first/last name and rotate their password without needing the
+ * `admin_users:manage` permission. Role and status are intentionally
+ * NOT exposed here.
+ */
+export const updateAdminUserSelfRequestSchema = z
+    .object({
+    firstName: z.string().min(1).max(120).optional(),
+    lastName: z.string().min(1).max(120).optional(),
+    password: z.string().min(12).max(120).optional(),
+})
+    .strict();
+/**
+ * Peer password reset (issue #252) — one operator sets another operator's
+ * password. Deliberately its own payload rather than a `password` field on
+ * `updateAdminUserRequestSchema`: setting a password is not an edit to a field
+ * alongside a name change. It has its own audit action and its own side effect
+ * (every session the target holds is revoked), and a request that renamed and
+ * reset in one call would have to answer for both.
+ *
+ * The bound matches `createAdminUserRequestSchema` — the same password, made
+ * by the same operator, on the same account.
+ */
+export const resetAdminUserPasswordRequestSchema = z
+    .object({
+    password: z.string().min(12).max(256),
+})
+    .strict();
+// --- Admin role CRUD --------------------------------------------------------
+export const upsertAdminRoleRequestSchema = z.object({
+    code: z.string().min(1).max(64),
+    name: z.string().min(1).max(160),
+    permissions: z.array(z.string().min(1).max(120)),
+    requiresTwoFactor: z.boolean().optional(),
+});
+/** Optional per-module permission declaration on `ModuleManifest.permissions`. */
+export const modulePermissionDeclarationSchema = z.object({
+    code: z.string().min(1).max(120),
+    module: z.string().min(1).max(64).optional(),
+    label: z.string().min(1).max(160),
+    description: z.string().max(500).optional(),
+    /**
+     * Other codes a role holding this one needs before the surface it opens is
+     * whole — D-175, feature 080 T057.
+     *
+     * **It is advisory and costs nothing at runtime.** No guard reads it, no
+     * upsert is refused for a missing requirement, and it does not put the named
+     * code's owner in this module's `dependencies`: a lifecycle edge would make
+     * the orchestrator refuse to switch that owner off, which is D-173's inverted
+     * Principle XVII and the repair to reach for last. What it does is put the
+     * sentence an operator needs where the operator can read it — the role editor
+     * says *"this role grants `rfqs:handle`, which also needs `price_lists:read`"*
+     * with a one-click add.
+     *
+     * **Do not write a fact the platform already derives here.** The edge this
+     * field carries is *"a role holding A but not B gets an incomplete screen"*,
+     * and nothing in this repository can decide it: the coupling runs from an
+     * admin screen's own fetches to another module's route, and whether the
+     * degradation is a defect or an accepted fallback is a judgement. A module
+     * enforcing a code another module owns is a **different** fact, it *is*
+     * derived — `test/helpers/foreign-gates.ts`, D-173 — and declaring that one
+     * here would be two answers to one question waiting to disagree.
+     *
+     * A code more than one module declares takes the **union** of its declarers'
+     * requirements: a shared code opens more than one surface, each with its own
+     * needs, and advising more is the direction that cannot strand anybody.
+     */
+    requires: z.array(z.string().min(1).max(120)).optional(),
+});
+/**
+ * Row shape returned by `GET /admin/permissions`.
+ *
+ * `module` and `owners` are **not the same string**, and the whole of D-175's
+ * "make the ownership model visible" is that only the first used to be on the
+ * wire. `module` is a display grouping — `_lifecycle` files its codes under
+ * `module: 'module_lifecycle'`, which is no module id at all — while `owners`
+ * is the presence question: the modules whose effective state decides whether
+ * this row is offered. They differ whenever a code is shared, and a reader who
+ * takes `module` for the owner gets it wrong in exactly the way D-173 did.
+ */
+export const permissionCatalogueEntrySchema = z.object({
+    code: z.string().min(1).max(120),
+    module: z.string().min(1).max(64),
+    label: z.string().min(1).max(160),
+    /**
+     * The modules whose presence keeps this code grantable — a set, because a
+     * shared code survives while **any** of its owners is present.
+     */
+    owners: z.array(z.string().min(1).max(64)).min(1),
+    /** {@link modulePermissionDeclarationSchema}'s `requires`, merged. */
+    requires: z.array(z.string().min(1).max(120)).optional(),
+});
+/**
+ * The codes a role holding `granted` is advised to add — D-175, feature 080
+ * T057.
+ *
+ * **Advisory, and it lives here so that there is one of it.** The role editor
+ * renders the shortfall and the permission inventory sweeps the declarations
+ * that produce it; D-175's second caution is precisely that the benchmark's
+ * per-module tests hand-assemble their own cross-module catalogue, so the answer
+ * is computed over the rows the platform already merged and nowhere else.
+ *
+ * Two narrowings, both of them the fail-safe direction:
+ *
+ * - a requirement naming a code **not among `catalogue`** is skipped. For the
+ *   role editor that is a code with no checkbox — offering one an operator
+ *   cannot tick is the single thing the panel must not do — and a requirement
+ *   naming a code the *platform* does not know is a defect reported to its
+ *   author by the inventory, not to the operator.
+ * - a `'*'` role holds everything, so it is advised nothing.
+ *
+ * Nothing here refuses anything: the caller renders a suggestion, and a role
+ * saved without it is saved.
+ */
+export function missingPermissionRequirements(granted, catalogue) {
+    const held = new Set(granted);
+    if (held.has('*'))
+        return [];
+    const offered = new Set(catalogue.map((row) => row.code));
+    const missing = new Set();
+    for (const row of catalogue) {
+        if (!held.has(row.code))
+            continue;
+        for (const requirement of row.requires ?? []) {
+            if (held.has(requirement) || !offered.has(requirement))
+                continue;
+            missing.add(requirement);
+        }
+    }
+    return [...missing].sort();
+}
+/**
+ * Canonical permission catalogue exposed by `GET /admin/permissions`.
+ * The matrix UI groups by `module`; the wildcard `*` is intentionally not
+ * in the catalogue (it's only granted to the bootstrap "platform_admin").
+ */
+export const PERMISSION_CATALOGUE = [
+    { code: 'catalog:read', module: 'catalog', label: 'View catalog' },
+    { code: 'catalog:write', module: 'catalog', label: 'Edit catalog' },
+    { code: 'orders:read', module: 'orders', label: 'View orders' },
+    { code: 'orders:write', module: 'orders', label: 'Edit orders / change status' },
+    { code: 'rfqs:handle', module: 'quote_requests', label: 'Handle quote requests' },
+    { code: 'customers:read', module: 'customers', label: 'View customers' },
+    { code: 'customers:impersonate', module: 'customers', label: 'Impersonate customers' },
+    // Shared gate for the API-keys and webhooks admin surfaces. The name predates
+    // the removal of the `integrations` module; renaming it would need a data
+    // migration on every admin role's permission list.
+    { code: 'integrations:manage', module: 'api_keys', label: 'Manage API keys + webhooks' },
+    // Feature 072, T017 — the module id is `audit_logs`. It said `audit_log`,
+    // which matches no module, so the role matrix grouped this permission under a
+    // phantom module. The CODE keeps its historical spelling: it is persisted in
+    // every admin role's permission list and renaming it would need a data migration.
+    { code: 'audit_log:read', module: 'audit_logs', label: 'View audit log' },
+    { code: 'admin_users:manage', module: 'admin_users', label: 'Manage admin users + roles' },
+    { code: 'credit_limits:manage', module: 'credit_limits', label: 'Grant + adjust credit limits' },
+    { code: 'customers:manage', module: 'customers', label: 'Manage customer organizations' },
+    {
+        code: 'organizations:rollup',
+        module: 'organizations',
+        label: 'Act across organization descendants',
+    },
+    { code: 'blog.read', module: 'blog', label: 'View blog content' },
+    { code: 'blog.write', module: 'blog', label: 'Author + publish blog content' },
+];
+// --- Audit log --------------------------------------------------------------
+export const auditLogEntrySchema = z.object({
+    id: uuidSchema,
+    actorAdminUserId: uuidSchema.nullable(),
+    impersonatedCustomerAccountId: uuidSchema.nullable(),
+    actedAt: isoDateTimeSchema,
+    action: z.string(),
+    objectType: z.string(),
+    objectId: z.string(),
+    stateBefore: z.record(z.string(), z.unknown()).nullable(),
+    stateAfter: z.record(z.string(), z.unknown()).nullable(),
+    ipAddress: z.string().nullable(),
+    userAgent: z.string().nullable(),
+    requestId: z.string().nullable(),
+});
+//# sourceMappingURL=admin.js.map

package/dist/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../src/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE5D;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,WAAW,EAAE,UAAU,CAAC,QAAQ,EAAE;IAClC,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACtC,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACzC,SAAS,EAAE,iBAAiB;IAC5B,SAAS,EAAE,iBAAiB;CAC7B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAChC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9B,SAAS,EAAE,iBAAiB;IAC5B,SAAS,EAAE,iBAAiB;CAC7B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,iBAAiB,EAAE,UAAU;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,sBAAsB,EAAE,UAAU;IAClC,2BAA2B,EAAE,CAAC,CAAC,MAAM,CAAC;QACpC,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;KACrD,CAAC;CACH,CAAC,CAAC;AAGH,+EAA+E;AAE/E,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,WAAW,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAChD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC/C,WAAW,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC;KAC9C,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAChD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC/C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC;KACjD,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,+EAA+E;AAE/E,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChD,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAGH,kFAAkF;AAClF,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAC;AAGH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjC;;;OAGG;IACH,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,sEAAsE;IACtE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAC;AAGH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAAyB,EACzB,SAA8C;IAE9C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAClC,KAAK,MAAM,WAAW,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,SAAS;YACjE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE;IAClE,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE;IACnE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE;IAC/D,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,6BAA6B,EAAE;IAChF,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,uBAAuB,EAAE;IACjF,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE;IACxE,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,uBAAuB,EAAE;IACtF,8EAA8E;IAC9E,0EAA0E;IAC1E,mDAAmD;IACnD,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,4BAA4B,EAAE;IACxF,0EAA0E;IAC1E,8EAA8E;IAC9E,6EAA6E;IAC7E,kFAAkF;IAClF,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,gBAAgB,EAAE;IACzE,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,4BAA4B,EAAE;IAC1F,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,8BAA8B,EAAE;IAChG,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,+BAA+B,EAAE;IACzF;QACE,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,eAAe;QACvB,KAAK,EAAE,qCAAqC;KAC7C;IACD,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE;IACjE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,+BAA+B,EAAE;CACtE,CAAC;AAEX,+EAA+E;AAE/E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,UAAU;IACd,gBAAgB,EAAE,UAAU,CAAC,QAAQ,EAAE;IACvC,6BAA6B,EAAE,UAAU,CAAC,QAAQ,EAAE;IACpD,OAAO,EAAE,iBAAiB;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC"}

package/dist/analytics.d.ts

@@ -0,0 +1,123 @@
+import { z } from 'zod';
+/**
+ * Analytics event contracts (US10 / FR-110, FR-111).
+ *
+ * Storefront and admin emit a small, fixed set of event types into the
+ * platform; backend persists them and exposes aggregated read paths for the
+ * admin dashboard. Forwarding to an external analytics tool (e.g. GA4) is
+ * a separate config-flagged path that consumes the same events.
+ */
+export declare const analyticsEventTypeSchema: z.ZodEnum<{
+    "product.viewed": "product.viewed";
+    "product.added_to_cart": "product.added_to_cart";
+    "cart.abandoned": "cart.abandoned";
+    "order.placed": "order.placed";
+    "search.performed": "search.performed";
+    "filter.clicked": "filter.clicked";
+    "category.viewed": "category.viewed";
+}>;
+export type AnalyticsEventType = z.infer<typeof analyticsEventTypeSchema>;
+/**
+ * A single inbound analytics event. The shape is intentionally permissive
+ * inside `properties` — the storefront chooses what to send per event type.
+ */
+export declare const ingestAnalyticsEventSchema: z.ZodObject<{
+    type: z.ZodEnum<{
+        "product.viewed": "product.viewed";
+        "product.added_to_cart": "product.added_to_cart";
+        "cart.abandoned": "cart.abandoned";
+        "order.placed": "order.placed";
+        "search.performed": "search.performed";
+        "filter.clicked": "filter.clicked";
+        "category.viewed": "category.viewed";
+    }>;
+    occurredAt: z.ZodOptional<z.ZodString>;
+    salesChannelId: z.ZodOptional<z.ZodString>;
+    customerAccountId: z.ZodOptional<z.ZodString>;
+    organizationId: z.ZodOptional<z.ZodString>;
+    sessionId: z.ZodOptional<z.ZodString>;
+    properties: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export type IngestAnalyticsEvent = z.infer<typeof ingestAnalyticsEventSchema>;
+/**
+ * Storefront sends events in batches to amortise HTTP overhead.
+ */
+export declare const ingestAnalyticsBatchRequestSchema: z.ZodObject<{
+    events: z.ZodArray<z.ZodObject<{
+        type: z.ZodEnum<{
+            "product.viewed": "product.viewed";
+            "product.added_to_cart": "product.added_to_cart";
+            "cart.abandoned": "cart.abandoned";
+            "order.placed": "order.placed";
+            "search.performed": "search.performed";
+            "filter.clicked": "filter.clicked";
+            "category.viewed": "category.viewed";
+        }>;
+        occurredAt: z.ZodOptional<z.ZodString>;
+        salesChannelId: z.ZodOptional<z.ZodString>;
+        customerAccountId: z.ZodOptional<z.ZodString>;
+        organizationId: z.ZodOptional<z.ZodString>;
+        sessionId: z.ZodOptional<z.ZodString>;
+        properties: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type IngestAnalyticsBatchRequest = z.infer<typeof ingestAnalyticsBatchRequestSchema>;
+export declare const ingestAnalyticsBatchResponseSchema: z.ZodObject<{
+    accepted: z.ZodNumber;
+    rejected: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        index: z.ZodNumber;
+        reason: z.ZodString;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type IngestAnalyticsBatchResponse = z.infer<typeof ingestAnalyticsBatchResponseSchema>;
+/**
+ * Admin aggregation read paths.
+ */
+export declare const analyticsSummaryQuerySchema: z.ZodObject<{
+    from: z.ZodString;
+    to: z.ZodString;
+    salesChannelId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type AnalyticsSummaryQuery = z.infer<typeof analyticsSummaryQuerySchema>;
+export declare const analyticsDailyPointSchema: z.ZodObject<{
+    day: z.ZodString;
+    type: z.ZodEnum<{
+        "product.viewed": "product.viewed";
+        "product.added_to_cart": "product.added_to_cart";
+        "cart.abandoned": "cart.abandoned";
+        "order.placed": "order.placed";
+        "search.performed": "search.performed";
+        "filter.clicked": "filter.clicked";
+        "category.viewed": "category.viewed";
+    }>;
+    count: z.ZodNumber;
+}, z.core.$strip>;
+export declare const analyticsSummaryResponseSchema: z.ZodObject<{
+    totalsByType: z.ZodArray<z.ZodObject<{
+        type: z.ZodEnum<{
+            "product.viewed": "product.viewed";
+            "product.added_to_cart": "product.added_to_cart";
+            "cart.abandoned": "cart.abandoned";
+            "order.placed": "order.placed";
+            "search.performed": "search.performed";
+            "filter.clicked": "filter.clicked";
+            "category.viewed": "category.viewed";
+        }>;
+        count: z.ZodNumber;
+    }, z.core.$strip>>;
+    daily: z.ZodArray<z.ZodObject<{
+        day: z.ZodString;
+        type: z.ZodEnum<{
+            "product.viewed": "product.viewed";
+            "product.added_to_cart": "product.added_to_cart";
+            "cart.abandoned": "cart.abandoned";
+            "order.placed": "order.placed";
+            "search.performed": "search.performed";
+            "filter.clicked": "filter.clicked";
+            "category.viewed": "category.viewed";
+        }>;
+        count: z.ZodNumber;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type AnalyticsSummaryResponse = z.infer<typeof analyticsSummaryResponseSchema>;
+//# sourceMappingURL=analytics.d.ts.map

package/dist/analytics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.d.ts","sourceRoot":"","sources":["../src/analytics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;;;GAOG;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;EAQnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;iBAQrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E;;GAEG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;iBAE5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F,eAAO,MAAM,kCAAkC;;;;;;iBAU7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F;;GAEG;AACH,eAAO,MAAM,2BAA2B;;;;iBAItC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,yBAAyB;;;;;;;;;;;;iBAIpC,CAAC;AAEH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC"}