@endora-commerce/contracts 0.100.0

package/dist/assets-library.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets-library.d.ts","sourceRoot":"","sources":["../src/assets-library.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,eAAO,MAAM,qBAAqB;;;EAAgC,CAAC;AACnE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;EAA2C,CAAC;AACjF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,uFAAuF;AACvF,eAAO,MAAM,wBAAwB;;;;;;;;;;EAUnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;iBAI/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMlE,eAAO,MAAM,iBAAiB;;;;;;;;iBAQ5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,yBAAyB;;;;;;;;;;iBAEpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,yBAAyB;;;iBAGpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,wBAAwB;;;;iBAQjC,CAAC;AACL,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,yBAAyB;;;;;;iBAEpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,0BAA0B;;;;;iBAKrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAM9E;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;iBAc7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,wFAAwF;AACxF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAG5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,qBAAqB;;;;;;;;;;;iBAQhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;iBAGnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAwC,CAAC;AAC5E,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,yBAAyB;;;;;iBAKpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAM5E,eAAO,MAAM,uBAAuB;;;;;;;;;iBAQuD,CAAC;AAC5F,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,sBAAsB;;iBAAgD,CAAC;AACpF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,2BAA2B;;;iBAGtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,4BAA4B;;;;iBAEvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAMlF,eAAO,MAAM,8BAA8B;;;;;;;;;;iBAMzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;iBAOrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAM9E,eAAO,MAAM,kBAAkB;;;;;;;;iBAMf,CAAC;AACjB,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,wFAAwF;AACxF,eAAO,MAAM,0BAA0B;;;;;;;;;iBAMrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAU9E;;;;;GAKG;AACH;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,OAAO,GAAG,KAAK,GAAG,aAAa,GAAG,OAAO,CAAC;AAElF,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IACvC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,eAAe,CAAC;IAC5B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,cAAc,EAAE,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,QAAQ,CAAC;IAClD,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,YAAY,EAAE,IAAI,GAAG,IAAI,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;CACxB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACpF,SAAS,CACP,GAAG,EAAE,SAAS,MAAM,EAAE,EACtB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAC/B,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAE1B;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,iBAAiB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAE7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4CG;IACH,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;CAC7D;AAED,2EAA2E;AAC3E,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;CAC/D;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,EAAE,wBAAwB,GAAG,IAAI,CAAC;IACrD,qFAAqF;IACrF,MAAM,IAAI,SAAS,MAAM,EAAE,CAAC;IAC5B,yEAAyE;IACzE,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3D;;;;;OAKG;IACH,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;CAChF;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;CACzC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,iBAAiB;IAChC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,qBAAqB,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;CACtE;AAED,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,qFAAqF;IACrF,YAAY,EAAE,MAAM,CAAC;IACrB,wDAAwD;IACxD,MAAM,EAAE,iBAAiB,CAAC;IAC1B,6DAA6D;IAC7D,YAAY,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,yCAAyC;IACzC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,eAAe,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAChD,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1E,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,IAAI,CAAC;QAAC,YAAY,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;CAC/E;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,eAAe;IAC9B,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,qBAAqB,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;CACtE;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,wBAAwB,GAAG,OAAO,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;AAE7E,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,eAAe,CAAC;IAC5B,6BAA6B;IAC7B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qEAAqE;AACrE,MAAM,WAAW,WAAW;IAC1B,kFAAkF;IAClF,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,GAAG,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,WAAW,iBAAiB;IAChC,4CAA4C;IAC5C,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAClC;;;;;OAKG;IACH,aAAa,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACxE"}

package/dist/assets-library.js

@@ -0,0 +1,181 @@
+// Assets Library — feature 013 contract surface.
+// Replaces the legacy `assets` module's wire surface and adds folders, visibility,
+// labels, and pluggable storage backends. Three logical sections in one file:
+//   (1) Domain types — visibility, storage backend code, asset reference kinds.
+//   (2) HTTP request/response Zod schemas for /api/v1/admin/assets/** and /assets/file/:id.
+//   (3) Cross-module SPI shapes — StorageAdapter, AssetReferenceDescriptor, CMS body embed.
+//
+// See specs/013-assets-library/contracts/ for the per-surface contracts these schemas back.
+import { z } from 'zod';
+import { isoDateTimeSchema, uuidSchema, multilingualStringSchema } from './common.js';
+// ────────────────────────────────────────────────────────────────────────────
+// (1) Domain types
+// ────────────────────────────────────────────────────────────────────────────
+export const assetVisibilitySchema = z.enum(['public', 'private']);
+/**
+ * Storage-backend identifier persisted on every Asset row so that switching the
+ * platform's *active* adapter does not orphan files uploaded under a previous
+ * adapter. `'legacy'` is a runtime-only escape hatch for rows whose pre-013
+ * `storage_url` is an absolute URL — see specs/013-assets-library/research.md R11.
+ */
+export const storageBackendCodeSchema = z.enum(['local', 's3', 'gcs', 'legacy']);
+/** What kind of consumer pointed at a given Asset (used in delete-blocked dialogs). */
+export const assetReferenceKindSchema = z.enum([
+    'product_gallery',
+    'product_attachment',
+    'product_virtual_download',
+    'category_main_image',
+    'cms_body_embed',
+    'megamenu_item_target',
+    'blog_category_main_image',
+    'blog_post_content',
+    'blog_category_description',
+]);
+export const assetReferenceSchema = z.object({
+    kind: assetReferenceKindSchema,
+    entityId: uuidSchema,
+    label: z.string(),
+});
+// ────────────────────────────────────────────────────────────────────────────
+// (2) HTTP — folders
+// ────────────────────────────────────────────────────────────────────────────
+export const assetFolderSchema = z.object({
+    id: uuidSchema,
+    parentId: uuidSchema.nullable(),
+    name: z.string().min(1).max(160),
+    position: z.number().int().nonnegative(),
+    childIds: z.array(uuidSchema),
+    createdAt: isoDateTimeSchema,
+    updatedAt: isoDateTimeSchema,
+});
+export const listFoldersResponseSchema = z.object({
+    data: z.array(assetFolderSchema),
+});
+export const createFolderRequestSchema = z.object({
+    parentId: uuidSchema.nullable(),
+    name: z.string().min(1).max(160),
+});
+export const patchFolderRequestSchema = z
+    .object({
+    name: z.string().min(1).max(160).optional(),
+    parentId: uuidSchema.nullable().optional(),
+    position: z.number().int().nonnegative().optional(),
+})
+    .refine((x) => x.name !== undefined || x.parentId !== undefined || x.position !== undefined, {
+    message: 'At least one of {name, parentId, position} is required.',
+});
+export const deleteFolderRequestSchema = z.object({
+    ifNonEmpty: z.enum(['cancel', 'moveContentsToParent', 'deleteRecursively']).default('cancel'),
+});
+export const deleteFolderResponseSchema = z.object({
+    data: z.object({
+        deletedFolderId: uuidSchema,
+        softDeletedAssetIds: z.array(uuidSchema).optional(),
+    }),
+});
+// ────────────────────────────────────────────────────────────────────────────
+// (2) HTTP — assets list / detail
+// ────────────────────────────────────────────────────────────────────────────
+/**
+ * Public asset summary — appears in the Library list, the picker, and embedded
+ * inside Catalog/CMS storefront responses. `url` is freshly produced by the
+ * active adapter on every read; for `private` assets it is a short-lived
+ * signed URL whose TTL is governed by the `assets.privateUrlTtlSec` setting.
+ */
+export const assetSummarySchema = z.object({
+    id: uuidSchema,
+    folderId: uuidSchema.nullable(),
+    filename: z.string().min(1).max(255),
+    label: z.string().nullable(),
+    mimeType: z.string().min(1).max(127),
+    sizeBytes: z.number().int().nonnegative(),
+    visibility: assetVisibilitySchema,
+    storageBackend: storageBackendCodeSchema,
+    url: z.string(),
+    createdAt: isoDateTimeSchema,
+    updatedAt: isoDateTimeSchema,
+    deletedAt: isoDateTimeSchema.nullable(),
+    pendingCleanup: z.boolean(),
+});
+/** Detail extends summary with multilingual alt text + the deletion-protection list. */
+export const assetDetailSchema = assetSummarySchema.extend({
+    altText: multilingualStringSchema.nullable(),
+    references: z.array(assetReferenceSchema),
+});
+export const listAssetsQuerySchema = z.object({
+    folderId: uuidSchema.nullable().optional(),
+    q: z.string().optional(),
+    mime: z.string().optional(),
+    visibility: assetVisibilitySchema.optional(),
+    includeDeleted: z.coerce.boolean().default(false),
+    cursor: z.string().optional(),
+    limit: z.coerce.number().int().min(1).max(100).default(50),
+});
+export const listAssetsResponseSchema = z.object({
+    data: z.array(assetSummarySchema),
+    nextCursor: z.string().nullable(),
+});
+export const getAssetResponseSchema = z.object({ data: assetDetailSchema });
+export const getAssetUrlResponseSchema = z.object({
+    data: z.object({
+        url: z.string(),
+        expiresAt: isoDateTimeSchema.nullable(),
+    }),
+});
+// ────────────────────────────────────────────────────────────────────────────
+// (2) HTTP — asset mutation
+// ────────────────────────────────────────────────────────────────────────────
+export const patchAssetRequestSchema = z
+    .object({
+    filename: z.string().min(1).max(255).optional(),
+    label: z.string().nullable().optional(),
+    mimeType: z.string().min(1).max(127).optional(),
+    visibility: assetVisibilitySchema.optional(),
+    folderId: uuidSchema.nullable().optional(),
+})
+    .refine((x) => Object.keys(x).length > 0, { message: 'At least one field is required.' });
+export const moveAssetRequestSchema = z.object({ folderId: uuidSchema.nullable() });
+export const moveManyAssetsRequestSchema = z.object({
+    assetIds: z.array(uuidSchema).min(1).max(200),
+    folderId: uuidSchema.nullable(),
+});
+export const moveManyAssetsResponseSchema = z.object({
+    data: z.object({ movedCount: z.number().int().nonnegative() }),
+});
+// ────────────────────────────────────────────────────────────────────────────
+// (2) HTTP — storage administration
+// ────────────────────────────────────────────────────────────────────────────
+export const storageSelfCheckResponseSchema = z.object({
+    data: z.object({
+        adapter: storageBackendCodeSchema.exclude(['legacy']),
+        ok: z.boolean(),
+        reason: z.string().optional(),
+    }),
+});
+export const storageStateResponseSchema = z.object({
+    data: z.object({
+        activeAdapter: storageBackendCodeSchema.exclude(['legacy']),
+        selfCheck: z.object({ ok: z.boolean(), reason: z.string().optional() }),
+        pendingCleanupCount: z.number().int().nonnegative(),
+        softDeletedCount: z.number().int().nonnegative(),
+    }),
+});
+// ────────────────────────────────────────────────────────────────────────────
+// (3) CMS body embed (FR-029)
+// ────────────────────────────────────────────────────────────────────────────
+export const assetRefNodeSchema = z
+    .object({
+    type: z.literal('asset_ref'),
+    assetId: uuidSchema,
+    rendering: z.enum(['image', 'link', 'embed']).optional(),
+})
+    .passthrough();
+/** Resolved view of an embedded asset, returned alongside the body in CMS responses. */
+export const assetEmbedResolutionSchema = z.object({
+    url: z.string(),
+    mimeType: z.string(),
+    filename: z.string(),
+    label: z.string().nullable(),
+    visibility: assetVisibilitySchema,
+});
+//# sourceMappingURL=assets-library.js.map

package/dist/assets-library.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets-library.js","sourceRoot":"","sources":["../src/assets-library.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,mFAAmF;AACnF,8EAA8E;AAC9E,gFAAgF;AAChF,4FAA4F;AAC5F,4FAA4F;AAC5F,EAAE;AACF,4FAA4F;AAE5F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAEtF,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAGnE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAGjF,uFAAuF;AACvF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC7C,iBAAiB;IACjB,oBAAoB;IACpB,0BAA0B;IAC1B,qBAAqB;IACrB,gBAAgB;IAChB,sBAAsB;IACtB,0BAA0B;IAC1B,mBAAmB;IACnB,2BAA2B;CAC5B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,wBAAwB;IAC9B,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AAGH,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,UAAU;IACd,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;IAC7B,SAAS,EAAE,iBAAiB;IAC5B,SAAS,EAAE,iBAAiB;CAC7B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;CACjC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACjC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACpD,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,EAAE;IAC3F,OAAO,EAAE,yDAAyD;CACnE,CAAC,CAAC;AAGL,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,sBAAsB,EAAE,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;CAC9F,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,eAAe,EAAE,UAAU;QAC3B,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;KACpD,CAAC;CACH,CAAC,CAAC;AAGH,+EAA+E;AAC/E,kCAAkC;AAClC,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,UAAU;IACd,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,UAAU,EAAE,qBAAqB;IACjC,cAAc,EAAE,wBAAwB;IACxC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,SAAS,EAAE,iBAAiB;IAC5B,SAAS,EAAE,iBAAiB;IAC5B,SAAS,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE;CAC5B,CAAC,CAAC;AAGH,wFAAwF;AACxF,MAAM,CAAC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,MAAM,CAAC;IACzD,OAAO,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAC5C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;CAC1C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1C,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,UAAU,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC5C,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC3D,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAG5E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;QACf,SAAS,EAAE,iBAAiB,CAAC,QAAQ,EAAE;KACxC,CAAC;CACH,CAAC,CAAC;AAGH,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC/C,UAAU,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAC;AAG5F,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAGpF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7C,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;CAC/D,CAAC,CAAC;AAGH,+EAA+E;AAC/E,oCAAoC;AACpC,+EAA+E;AAE/E,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,OAAO,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrD,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;QACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,aAAa,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;QACvE,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACnD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;KACjD,CAAC;CACH,CAAC,CAAC;AAGH,+EAA+E;AAC/E,8BAA8B;AAC9B,+EAA+E;AAE/E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC5B,OAAO,EAAE,UAAU;IACnB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC;KACD,WAAW,EAAE,CAAC;AAGjB,wFAAwF;AACxF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,UAAU,EAAE,qBAAqB;CAClC,CAAC,CAAC"}

package/dist/audit-logs.d.ts

@@ -0,0 +1,141 @@
+import { z } from 'zod';
+/**
+ * Audit-log reference labels — "what is this row about, and where does it live?"
+ * (feature 075, D-87 drain).
+ *
+ * The dashboard's Recent Activity card renders an audit row as a sentence: who
+ * acted, on what, and a link to the thing acted on. The audit row itself holds
+ * only an `objectType` and an `objectId`, so the label and the link have to come
+ * from the module that owns the object — and `audit_logs` used to fetch them by
+ * hand-writing SQL against five other modules' tables, invisible to every
+ * import-level boundary check because raw SQL names no specifier.
+ *
+ * The direction is what was wrong, not just the SQL. `audit_logs` is a
+ * cross-cutting *reader*: it is declared `nonDeactivatable`, so a `dependencies`
+ * entry from it onto `catalog`, `inventory` or `price_lists` would make each of
+ * those undeactivatable too — the lifecycle refuses to disable a module a
+ * non-deactivatable one depends on. Five read ports would have bought five
+ * edges pointing the wrong way and taken an operator's switch away from
+ * `inventory` to render a warehouse name. So the question is inverted: each
+ * owner pushes a resolver for its own object type, and the reader walks them.
+ */
+/** One resolved object: what to call it, and where the admin app shows it. */
+export interface AuditReferenceLabel {
+    /** The `objectId` this answers for. */
+    readonly id: string;
+    /**
+     * The owner's display name for the row — a product name, a warehouse name, an
+     * organisation name. Never empty: a resolver that has no name for a row omits
+     * the row instead, and the reader falls back to the audit snapshot.
+     */
+    readonly label: string;
+    /**
+     * Admin deep link for the row, or `null` where the owner has no detail screen
+     * for it.
+     *
+     * It travels on the descriptor because it is the owner's own admin route.
+     * `audit_logs` used to spell `/catalog/products/{id}`, `/warehouses/{id}` and
+     * `/price-lists/{id}` into its own switch statement, so three modules' route
+     * shapes were pinned by a fourth module's dashboard.
+     */
+    readonly url: string | null;
+}
+/**
+ * One contributed "turn these ids into labels" resolver.
+ *
+ * A module that owns rows an audit entry can point at registers one of these
+ * per `referenceType`, from its own `ctx.onBoot`. It queries its **own** tables
+ * and nothing else.
+ *
+ * `resolve` is bulk and is never called with an empty list: the reader buckets
+ * a page of audit rows by type first, so a dashboard render costs one round trip
+ * per type present rather than one per row. A resolver omits an id it cannot
+ * find — the row was deleted, and the reader says so by falling back to the
+ * audit snapshot and rendering no link.
+ *
+ * `ownerModuleId` is required and is the whole mechanism (D-39): without it the
+ * registry could not state a policy for an absent owner at all.
+ */
+export interface AuditReferenceResolver {
+    readonly ownerModuleId: string;
+    /**
+     * The audit row's `objectType` for a target, or the synthetic key the reader
+     * uses for an actor bucket (`customer_account`). One resolver answers for one
+     * type; two modules may not claim the same one.
+     */
+    readonly referenceType: string;
+    resolve(ids: readonly string[]): Promise<AuditReferenceLabel[]>;
+}
+/**
+ * Container name: `auditReferenceRegistry`. Owner: `audit_logs`.
+ *
+ * A **contribution seam**: contributors push from a boot hook and read nothing
+ * back, so the registration is a plain `ctx.di.register` rather than a
+ * `providePort` — a boot hook that resolved a gate would stop the backend from
+ * starting whenever the registry's owner was switched off.
+ *
+ * **Enumeration policy: an absent contributor's resolver is skipped.** That is
+ * D-39's default and it is also the right answer here, on two grounds that
+ * differ from the dictionary registries' (which honour, for referential
+ * integrity). First, this is a *surface*: the descriptor supplies a deep link
+ * into an admin screen, and a screen a module that is not present does not
+ * contribute is one no link should point at. Second, resolving would mean
+ * reading a switched-off module's tables on its behalf, and a module that is off
+ * behaves as if never installed (Constitution XVII).
+ *
+ * Skipping is a degrade, not a refusal, and it is the one this module's manifest
+ * already commits to for actor names: the audit row still renders, with the
+ * snapshot label the entry carries or the raw id, and no link. The record
+ * outlives the directory.
+ *
+ * `owners()` stays presence-blind, for diagnostics and for the composition
+ * tests that assert who contributed.
+ */
+export interface AuditReferenceRegistryPort {
+    register(resolver: AuditReferenceResolver): void;
+    /** The contributing module of every registered resolver, in registration order. */
+    owners(): readonly string[];
+    /**
+     * Labels for these ids of this type, keyed by id. Ids the owner has no row for
+     * are absent from the map, and so is every id of a type whose contributor is
+     * not effectively present.
+     */
+    resolve(referenceType: string, ids: readonly string[]): Promise<ReadonlyMap<string, AuditReferenceLabel>>;
+}
+/**
+ * One eligible module's row on the visibility surface.
+ *
+ * `moduleId` is any composed module's id, deliberately **not** an enum: the
+ * closed union of four core ids this replaces (`RecentActivityModule`) is
+ * exactly why a packaged module's activity was silently absent from the card
+ * rather than refused (D-163).
+ */
+export declare const RecentActivityModuleVisibilitySchema: z.ZodObject<{
+    moduleId: z.ZodString;
+    moduleName: z.ZodString;
+    visible: z.ZodBoolean;
+}, z.core.$strip>;
+export type RecentActivityModuleVisibility = z.infer<typeof RecentActivityModuleVisibilitySchema>;
+/** `GET /api/v1/admin/audit-log/recent-activity/visibility`. */
+export declare const RecentActivityVisibilityListSchema: z.ZodObject<{
+    modules: z.ZodArray<z.ZodObject<{
+        moduleId: z.ZodString;
+        moduleName: z.ZodString;
+        visible: z.ZodBoolean;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type RecentActivityVisibilityList = z.infer<typeof RecentActivityVisibilityListSchema>;
+/** `POST /api/v1/admin/audit-log/recent-activity/visibility/:moduleId`. */
+export declare const RecentActivityVisibilityRequestSchema: z.ZodObject<{
+    visible: z.ZodBoolean;
+}, z.core.$strip>;
+export type RecentActivityVisibilityRequest = z.infer<typeof RecentActivityVisibilityRequestSchema>;
+export declare const RecentActivityVisibilityResponseSchema: z.ZodObject<{
+    module: z.ZodObject<{
+        moduleId: z.ZodString;
+        moduleName: z.ZodString;
+        visible: z.ZodBoolean;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type RecentActivityVisibilityResponse = z.infer<typeof RecentActivityVisibilityResponseSchema>;
+//# sourceMappingURL=audit-logs.d.ts.map

package/dist/audit-logs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-logs.d.ts","sourceRoot":"","sources":["../src/audit-logs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,8EAA8E;AAC9E,MAAM,WAAW,mBAAmB;IAClC,uCAAuC;IACvC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;;;;;OAQG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,OAAO,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;CACjE;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACjD,mFAAmF;IACnF,MAAM,IAAI,SAAS,MAAM,EAAE,CAAC;IAC5B;;;;OAIG;IACH,OAAO,CACL,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,SAAS,MAAM,EAAE,GACrB,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC;CACtD;AAMD;;;;;;;GAOG;AACH,eAAO,MAAM,oCAAoC;;;;iBAM/C,CAAC;AACH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAClD,OAAO,oCAAoC,CAC5C,CAAC;AAEF,gEAAgE;AAChE,eAAO,MAAM,kCAAkC;;;;;;iBAE7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAChD,OAAO,kCAAkC,CAC1C,CAAC;AAEF,2EAA2E;AAC3E,eAAO,MAAM,qCAAqC;;iBAEhD,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CACnD,OAAO,qCAAqC,CAC7C,CAAC;AAEF,eAAO,MAAM,sCAAsC;;;;;;iBAEjD,CAAC;AACH,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CACpD,OAAO,sCAAsC,CAC9C,CAAC"}

package/dist/audit-logs.js

@@ -0,0 +1,31 @@
+import { z } from 'zod';
+// ---------------------------------------------------------------------------
+// Recent-activity visibility — the operator axis of D-163.1 (feature 080)
+// ---------------------------------------------------------------------------
+/**
+ * One eligible module's row on the visibility surface.
+ *
+ * `moduleId` is any composed module's id, deliberately **not** an enum: the
+ * closed union of four core ids this replaces (`RecentActivityModule`) is
+ * exactly why a packaged module's activity was silently absent from the card
+ * rather than refused (D-163).
+ */
+export const RecentActivityModuleVisibilitySchema = z.object({
+    moduleId: z.string().min(1),
+    /** The module's manifest `name` — what the operator reads on the control. */
+    moduleName: z.string().min(1),
+    /** The operator's answer. `true` when they have never chosen (D-163.1). */
+    visible: z.boolean(),
+});
+/** `GET /api/v1/admin/audit-log/recent-activity/visibility`. */
+export const RecentActivityVisibilityListSchema = z.object({
+    modules: z.array(RecentActivityModuleVisibilitySchema),
+});
+/** `POST /api/v1/admin/audit-log/recent-activity/visibility/:moduleId`. */
+export const RecentActivityVisibilityRequestSchema = z.object({
+    visible: z.boolean(),
+});
+export const RecentActivityVisibilityResponseSchema = z.object({
+    module: RecentActivityModuleVisibilitySchema,
+});
+//# sourceMappingURL=audit-logs.js.map

package/dist/audit-logs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-logs.js","sourceRoot":"","sources":["../src/audit-logs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgHxB,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,6EAA6E;IAC7E,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,2EAA2E;IAC3E,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAKH,gEAAgE;AAChE,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,oCAAoC,CAAC;CACvD,CAAC,CAAC;AAKH,2EAA2E;AAC3E,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAKH,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7D,MAAM,EAAE,oCAAoC;CAC7C,CAAC,CAAC"}

package/dist/auth.d.ts

@@ -0,0 +1,174 @@
+/**
+ * `auth` module contracts — the in-process port surface (feature 075, Phase P).
+ *
+ * `auth` publishes no HTTP shape of its own worth a Zod schema: it owns the
+ * session table, the session cookie names and the seam the `mfa` module plugs
+ * into. What every other module needs from it is behaviour, so this file is
+ * plain TypeScript interfaces, following `PaymentAdapter` in
+ * `payment-methods.ts` and `DictionaryValidator` in `dictionary.ts`.
+ *
+ * Nothing here imports from `backend/src/` (FR-034).
+ *
+ * **Not here on purpose:** `hashPassword` / `verifyPassword`. They are pure
+ * functions over their argument, so a gated port answering 503
+ * `MODULE_DISABLED` to "hash this string" would be a bug, not a degrade
+ * (FR-013, R-09). They relocated to `backend/src/kernel/crypto/password-hasher.ts`.
+ */
+/**
+ * The storefront session cookie. Published here because it is a **constant**,
+ * not behaviour: five modules set or clear it, and switching `auth` off does
+ * not change its spelling. `auth/plugin.ts` re-exports these two so its own
+ * default-argument reads keep working.
+ */
+export declare const SESSION_COOKIE_NAME = "b2b_session";
+/** The admin session cookie. Same reasoning as {@link SESSION_COOKIE_NAME}. */
+export declare const ADMIN_SESSION_COOKIE_NAME = "b2b_admin_session";
+export type AuthSessionKind = 'customer' | 'admin' | 'impersonation';
+/**
+ * A session row as it crosses the module boundary — a plain shape, never the
+ * `Session` ORM entity (FR-011). `tokenHash` is deliberately absent: no
+ * consumer reads it and it is the one field that must not travel.
+ */
+export interface AuthSessionRecord {
+    id: string;
+    kind: AuthSessionKind;
+    customerAccountId: string | null;
+    adminUserId: string | null;
+    impersonatorAdminUserId: string | null;
+    expiresAt: Date;
+    createdAt: Date;
+    updatedAt: Date;
+    lastSeenAt: Date | null;
+    ipAddress: string | null;
+    userAgent: string | null;
+}
+export interface AuthCreateSessionInput {
+    kind: AuthSessionKind;
+    customerAccountId?: string;
+    adminUserId?: string;
+    impersonatorAdminUserId?: string;
+    ipAddress?: string;
+    userAgent?: string;
+}
+/** What a caller needs to set the cookie: the value, its expiry, and the row. */
+export interface AuthSessionCookiePayload {
+    cookieValue: string;
+    expiresAt: Date;
+    session: AuthSessionRecord;
+}
+export interface AuthResolvedSession {
+    session: AuthSessionRecord;
+    kind: AuthSessionKind;
+}
+/**
+ * Container name: `authSessionPort`. Owner: `auth`.
+ *
+ * When `auth` is off every method throws `ModuleDisabledError` (503
+ * `MODULE_DISABLED`) at the resolution seam — which is the correct answer: a
+ * platform that cannot mint or validate a session must refuse the login rather
+ * than issue one nothing can check.
+ *
+ * Whether `auth` has an off state at all is its manifest's `activation` to
+ * say, not this line's: a module declaring `nonDeactivatable` never enters one.
+ */
+export interface AuthSessionPort {
+    createSession(input: AuthCreateSessionInput): Promise<AuthSessionCookiePayload>;
+    loadSession(cookieValue: string): Promise<AuthResolvedSession | null>;
+    destroySession(sessionId: string): Promise<void>;
+    destroyAllForCustomer(customerAccountId: string): Promise<void>;
+    /**
+     * Revoke every session an admin user holds — the ones they signed in with
+     * and the impersonations they started. Called when their password is set by
+     * somebody other than the current session, so a credential the reset was
+     * meant to withdraw cannot outlive it (issue #252).
+     */
+    destroyAllForAdmin(adminUserId: string): Promise<void>;
+    touchLastSeen(sessionId: string): Promise<void>;
+    /** Customer-account ids seen inside the window. Feature 040's "online" view. */
+    listRecentlyActiveCustomers(windowMinutes: number): Promise<string[]>;
+}
+/** One customer's most recent session activity. */
+export interface AuthCustomerLastSeen {
+    customerAccountId: string;
+    lastSeenAt: Date;
+}
+/**
+ * Container name: `authSessionReadPort`. Owner: `auth`.
+ *
+ * The read model over the session table for the one module that *reports* on
+ * sessions rather than managing them: `customers`' online-customers view reads
+ * `Session` directly today to work out when each account was last active.
+ *
+ * The surface is that single question and nothing more — publishing the table
+ * would be publishing nothing (contracts/port-publication.md §1.1).
+ *
+ * When `auth` is off the call fails closed, which is right: an "online now"
+ * view assembled from no session data would be a list of everybody, at an
+ * invented timestamp.
+ *
+ * Whether `auth` has an off state at all is its manifest's `activation` to
+ * say, not this line's: a module declaring `nonDeactivatable` never enters one.
+ */
+export interface AuthSessionReadPort {
+    /**
+     * The newest `lastSeenAt` per customer account, restricted to the given
+     * accounts and to activity at or after `since`. Accounts with no matching
+     * session are absent from the result rather than present with a null.
+     */
+    lastSeenByCustomerAccount(customerAccountIds: readonly string[], since: Date): Promise<AuthCustomerLastSeen[]>;
+}
+export interface MfaSubjectRef {
+    subjectType: 'customer' | 'admin';
+    subjectId: string;
+}
+export interface MfaLoginContext {
+    /** Resolved storefront channel id, or null for admin / channel-less reads. */
+    salesChannelId: string | null;
+    /** The customer's organization id (null for admin or org-less customers). */
+    organizationId?: string | null;
+}
+/**
+ * Decision returned after the first factor (password / provider) succeeds:
+ *   - `proceed`   — no active 2FA and not enforced → issue the session now;
+ *   - `challenge` — an active enrolment exists → require the second step;
+ *   - `setup`     — 2FA is enforced for this scope but the subject has not
+ *                   enrolled → route into mandatory setup before access.
+ */
+export type MfaLoginDecision = {
+    kind: 'proceed';
+} | {
+    kind: 'challenge';
+    challengeId: string;
+} | {
+    kind: 'setup';
+    setupTicket: string;
+};
+/**
+ * Container name: `mfaLoginPort`. Owner: `mfa` (the shape is `auth`'s).
+ *
+ * One question: *what does the second factor say about this login?* Asked by
+ * `admin_users` and `customer_accounts`, each after the password has verified.
+ *
+ * **The registration is gated and it throws.** `mfa` publishes this name with
+ * `ctx.di.providePort`, so resolving it while the module is not effectively
+ * present raises `ModuleDisabledError`. This port performs no degrade of its
+ * own, and no caller may catch that error.
+ *
+ * **The consumer answers for absence, by not resolving** (D-96). Both login
+ * services probe `effectiveState.isPresent('mfa')` and pass `undefined` into
+ * the `if (mfaPort)` branch they already have, which issues the session on the
+ * password alone — the password-only fallback of feature 042 FR-033, and what
+ * Constitution XVII means by "a module that is off behaves as if never
+ * installed". Each consumer declares the edge in its manifest as
+ * `nonBindingDependencies: [{ moduleId: 'mfa', kind: 'degrades-without' }]`,
+ * whose `whenAbsent` sentence is what the operator reads before flipping the
+ * switch and what the off-state test is held to.
+ *
+ * This doc block used to describe the degrade as something the port would
+ * perform. It never could, and the tree did the opposite: every admin and
+ * customer login answered 503 while `mfa` was switched off.
+ */
+export interface MfaLoginPort {
+    beginLogin(subject: MfaSubjectRef, ctx: MfaLoginContext): Promise<MfaLoginDecision>;
+}
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,gBAAgB,CAAC;AAEjD,+EAA+E;AAC/E,eAAO,MAAM,yBAAyB,sBAAsB,CAAC;AAI7D,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,OAAO,GAAG,eAAe,CAAC;AAErE;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,eAAe,CAAC;IACtB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,eAAe,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,iFAAiF;AACjF,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;IAChB,OAAO,EAAE,iBAAiB,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,IAAI,EAAE,eAAe,CAAC;CACvB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,eAAe;IAC9B,aAAa,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAChF,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IACtE,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,qBAAqB,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE;;;;;OAKG;IACH,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,gFAAgF;IAChF,2BAA2B,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACvE;AAED,mDAAmD;AACnD,MAAM,WAAW,oBAAoB;IACnC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,IAAI,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,yBAAyB,CACvB,kBAAkB,EAAE,SAAS,MAAM,EAAE,EACrC,KAAK,EAAE,IAAI,GACV,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;CACpC;AASD,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,UAAU,GAAG,OAAO,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,8EAA8E;IAC9E,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACrF"}

package/dist/auth.js

@@ -0,0 +1,27 @@
+/**
+ * `auth` module contracts — the in-process port surface (feature 075, Phase P).
+ *
+ * `auth` publishes no HTTP shape of its own worth a Zod schema: it owns the
+ * session table, the session cookie names and the seam the `mfa` module plugs
+ * into. What every other module needs from it is behaviour, so this file is
+ * plain TypeScript interfaces, following `PaymentAdapter` in
+ * `payment-methods.ts` and `DictionaryValidator` in `dictionary.ts`.
+ *
+ * Nothing here imports from `backend/src/` (FR-034).
+ *
+ * **Not here on purpose:** `hashPassword` / `verifyPassword`. They are pure
+ * functions over their argument, so a gated port answering 503
+ * `MODULE_DISABLED` to "hash this string" would be a bug, not a degrade
+ * (FR-013, R-09). They relocated to `backend/src/kernel/crypto/password-hasher.ts`.
+ */
+// --- session cookie names ----------------------------------------------------
+/**
+ * The storefront session cookie. Published here because it is a **constant**,
+ * not behaviour: five modules set or clear it, and switching `auth` off does
+ * not change its spelling. `auth/plugin.ts` re-exports these two so its own
+ * default-argument reads keep working.
+ */
+export const SESSION_COOKIE_NAME = 'b2b_session';
+/** The admin session cookie. Same reasoning as {@link SESSION_COOKIE_NAME}. */
+export const ADMIN_SESSION_COOKIE_NAME = 'b2b_admin_session';
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAEjD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,yBAAyB,GAAG,mBAAmB,CAAC"}