@endora-commerce/mod-admin-actions 0.100.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Endora sp. z o.o. and the Endora Commerce contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,51 @@
+<!-- Generated by `pnpm --filter backend run manifests:generate`. Delete this line to take the file over; a README without it is never regenerated. -->
+
+# @endora-commerce/mod-admin-actions
+
+Module-contributed action registry that surfaces declared actions in the admin command palette.
+
+## What this is
+
+An **Endora Commerce module package**. Its module id is `admin_actions` — the identity of record in the platform's registries, in its migrations and in its setting, permission and translation codes.
+
+A module is not imported by application code. The platform discovers the extension packages an instance has installed, reads the manifest on the root subpath and composes the module from it, so installing this package and starting the instance is the whole integration.
+
+## Entry points
+
+| Import | Contents |
+| --- | --- |
+| `@endora-commerce/mod-admin-actions` | the module manifest — its id, version, dependencies, settings and activation |
+| `@endora-commerce/mod-admin-actions/backend` | the composition root the platform calls, with the entities, services, routes and workers it registers |
+| `@endora-commerce/mod-admin-actions/migrations` | the module’s own schema migrations, in the order the platform runs them |
+
+## Depends on
+
+Everything below is a **peer** dependency, so the application resolves exactly one copy of each — two copies of a host or of React are a runtime failure rather than a type error. An entry marked *optional* is needed only by the layers that use it.
+
+**Endora packages**
+
+- `@endora-commerce/contracts`
+- `@endora-commerce/platform`
+
+**Third-party**
+
+- `@mikro-orm/core` ^6
+- `@mikro-orm/migrations` ^6
+- `@mikro-orm/postgresql` ^6
+- `fastify` ^5
+
+## What the tarball carries
+
+- `dist/` — the compiled JavaScript and its type declarations
+- `i18n/` — the translation bundles this package ships (`en`, `pl`), loaded by the platform
+- `docs/` — the package’s own pages in the Endora Commerce documentation site
+
+## Install
+
+```bash
+pnpm add @endora-commerce/mod-admin-actions
+```
+
+## Licence
+
+MIT — the text is in `LICENSE`, beside this file.

package/dist/backend/entities/module-action.entity.d.ts

@@ -0,0 +1,30 @@
+import { OptionalProps } from '@mikro-orm/core';
+import type { KnownIconName } from '@endora-commerce/contracts';
+/**
+ * Module Action — feature 020 / data-model.md.
+ *
+ * One row per `(module_id, action_id)`. Written by the lifecycle install
+ * hook from each module's manifest `actions` array; never edited by
+ * hand. The `version` column defaults to `nextval(module_actions_version_seq)`
+ * so every UPSERT bumps the vector — useful for cache diagnostics.
+ *
+ * No FK on `module_id` for the same reason as `translation_bundles`
+ * (feature 019): modules are filesystem-driven and lifecycle ordering
+ * already owns cleanup on hard-uninstall.
+ */
+export declare class ModuleAction {
+    [OptionalProps]?: 'descriptionKey' | 'requiredPermission' | 'keywords' | 'weight' | 'version' | 'installedAt' | 'updatedAt';
+    moduleId: string;
+    actionId: string;
+    labelKey: string;
+    descriptionKey: string | null;
+    icon: KnownIconName;
+    targetRoute: string;
+    requiredPermission: string | null;
+    keywords: string[];
+    weight: number;
+    version: number;
+    installedAt: Date;
+    updatedAt: Date;
+}
+//# sourceMappingURL=module-action.entity.d.ts.map

package/dist/backend/entities/module-action.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-action.entity.d.ts","sourceRoot":"","sources":["../../../src/backend/entities/module-action.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,aAAa,EAAwB,MAAM,iBAAiB,CAAC;AAErF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAEhE;;;;;;;;;;;GAWG;AACH,qBAMa,YAAY;IACvB,CAAC,aAAa,CAAC,CAAC,EACZ,gBAAgB,GAChB,oBAAoB,GACpB,UAAU,GACV,QAAQ,GACR,SAAS,GACT,aAAa,GACb,WAAW,CAAC;IAGhB,QAAQ,EAAG,MAAM,CAAC;IAGlB,QAAQ,EAAG,MAAM,CAAC;IAGlB,QAAQ,EAAG,MAAM,CAAC;IAGlB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAQ;IAGrC,IAAI,EAAG,aAAa,CAAC;IAGrB,WAAW,EAAG,MAAM,CAAC;IAGrB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAQ;IAGzC,QAAQ,EAAE,MAAM,EAAE,CAAM;IAGxB,MAAM,EAAE,MAAM,CAAO;IAOrB,OAAO,EAAG,MAAM,CAAC;IAGjB,WAAW,EAAE,IAAI,CAAc;IAG/B,SAAS,EAAE,IAAI,CAAc;CAC9B"}

package/dist/backend/entities/module-action.entity.js

@@ -0,0 +1,100 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Entity, Index, OptionalProps, PrimaryKey, Property } from '@mikro-orm/core';
+import { GlobalEntity } from '@endora-commerce/platform/tenancy';
+/**
+ * Module Action — feature 020 / data-model.md.
+ *
+ * One row per `(module_id, action_id)`. Written by the lifecycle install
+ * hook from each module's manifest `actions` array; never edited by
+ * hand. The `version` column defaults to `nextval(module_actions_version_seq)`
+ * so every UPSERT bumps the vector — useful for cache diagnostics.
+ *
+ * No FK on `module_id` for the same reason as `translation_bundles`
+ * (feature 019): modules are filesystem-driven and lifecycle ordering
+ * already owns cleanup on hard-uninstall.
+ */
+let ModuleAction = class ModuleAction {
+    [OptionalProps];
+    moduleId;
+    actionId;
+    labelKey;
+    descriptionKey = null;
+    icon;
+    targetRoute;
+    requiredPermission = null;
+    keywords = [];
+    weight = 100;
+    version;
+    installedAt = new Date();
+    updatedAt = new Date();
+};
+__decorate([
+    PrimaryKey({ type: 'string', length: 64 }),
+    __metadata("design:type", String)
+], ModuleAction.prototype, "moduleId", void 0);
+__decorate([
+    PrimaryKey({ type: 'string', length: 64 }),
+    __metadata("design:type", String)
+], ModuleAction.prototype, "actionId", void 0);
+__decorate([
+    Property({ type: 'string', length: 255 }),
+    __metadata("design:type", String)
+], ModuleAction.prototype, "labelKey", void 0);
+__decorate([
+    Property({ type: 'string', length: 255, nullable: true }),
+    __metadata("design:type", Object)
+], ModuleAction.prototype, "descriptionKey", void 0);
+__decorate([
+    Property({ type: 'string', length: 64 }),
+    __metadata("design:type", String)
+], ModuleAction.prototype, "icon", void 0);
+__decorate([
+    Property({ type: 'string', length: 255 }),
+    __metadata("design:type", String)
+], ModuleAction.prototype, "targetRoute", void 0);
+__decorate([
+    Property({ type: 'string', length: 64, nullable: true }),
+    __metadata("design:type", Object)
+], ModuleAction.prototype, "requiredPermission", void 0);
+__decorate([
+    Property({ type: 'json', columnType: 'jsonb' }),
+    __metadata("design:type", Array)
+], ModuleAction.prototype, "keywords", void 0);
+__decorate([
+    Property({ type: 'integer' }),
+    __metadata("design:type", Number)
+], ModuleAction.prototype, "weight", void 0);
+__decorate([
+    Property({
+        type: 'bigint',
+        columnType: 'bigint',
+        defaultRaw: "nextval('module_actions_version_seq')",
+    }),
+    __metadata("design:type", Number)
+], ModuleAction.prototype, "version", void 0);
+__decorate([
+    Property({ type: 'Date' }),
+    __metadata("design:type", Date)
+], ModuleAction.prototype, "installedAt", void 0);
+__decorate([
+    Property({ type: 'Date', onUpdate: () => new Date() }),
+    __metadata("design:type", Date)
+], ModuleAction.prototype, "updatedAt", void 0);
+ModuleAction = __decorate([
+    GlobalEntity(),
+    Entity({ tableName: 'module_actions' }),
+    Index({
+        properties: ['weight', 'labelKey'],
+        name: 'idx_module_actions_weight_label_key',
+    })
+], ModuleAction);
+export { ModuleAction };
+//# sourceMappingURL=module-action.entity.js.map

package/dist/backend/entities/module-action.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-action.entity.js","sourceRoot":"","sources":["../../../src/backend/entities/module-action.entity.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAGjE;;;;;;;;;;;GAWG;AAOI,IAAM,YAAY,GAAlB,MAAM,YAAY;IACvB,CAAC,aAAa,CAAC,CAOC;IAGhB,QAAQ,CAAU;IAGlB,QAAQ,CAAU;IAGlB,QAAQ,CAAU;IAGlB,cAAc,GAAkB,IAAI,CAAC;IAGrC,IAAI,CAAiB;IAGrB,WAAW,CAAU;IAGrB,kBAAkB,GAAkB,IAAI,CAAC;IAGzC,QAAQ,GAAa,EAAE,CAAC;IAGxB,MAAM,GAAW,GAAG,CAAC;IAOrB,OAAO,CAAU;IAGjB,WAAW,GAAS,IAAI,IAAI,EAAE,CAAC;IAG/B,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;CAC9B,CAAA;AAtCC;IADC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;;8CACzB;AAGlB;IADC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;;8CACzB;AAGlB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;;8CACxB;AAGlB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oDACrB;AAGrC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;;0CACpB;AAGrB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;;iDACrB;AAGrB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;wDAChB;AAGzC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;;8CACxB;AAGxB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;4CACT;AAOrB;IALC,QAAQ,CAAC;QACR,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,QAAQ;QACpB,UAAU,EAAE,uCAAuC;KACpD,CAAC;;6CACe;AAGjB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;8BACd,IAAI;iDAAc;AAG/B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;8BAC5C,IAAI;+CAAc;AAhDlB,YAAY;IANxB,YAAY,EAAE;IACd,MAAM,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;IACvC,KAAK,CAAC;QACL,UAAU,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC;QAClC,IAAI,EAAE,qCAAqC;KAC5C,CAAC;GACW,YAAY,CAiDxB"}

package/dist/backend/index.d.ts

@@ -0,0 +1,85 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { FastifyRequest } from 'fastify';
+import type { AdminI18nTranslatePort, PermissionReadPort } from '@endora-commerce/contracts';
+import type { ModuleContext } from '@endora-commerce/platform/kernel';
+import type { RequireAdminFactory } from '@endora-commerce/platform/kernel';
+import type { ModulePresenceProbe } from './services/admin-actions-service.js';
+import { ModuleAction } from './entities/module-action.entity.js';
+import { type AdminActionsManifestRegistryView, type AdminActionsModuleHandle } from './plugin.js';
+/**
+ * `admin_actions` — the second module whose reconcile must not move (feature
+ * 072, wave 2, T099).
+ *
+ * This is `_i18n`'s shape repeated, and it is worth naming rather than
+ * rediscovering. The module walks the lifecycle manifest registry to refresh
+ * every module's palette actions, and reaches that registry through the same
+ * lazy accessor, for the same chicken-and-egg reason — `_lifecycle`'s
+ * orchestrator is constructed after it. The reconcile therefore runs at
+ * **plugin attach**, the point at which every root has finished composing and
+ * the accessor is guaranteed to answer, and it stays there.
+ *
+ * It stays there for `_i18n`'s reason too: neither reconciler treats an absent
+ * registry as an error — this one simply walks nothing — so an accessor that
+ * answers `undefined` fails silently. Every module's palette actions would stop
+ * being refreshed at boot and the first symptom would be a stale ⌘K entry
+ * pointing at a route that moved. Moving the reconcile is a change that has to
+ * carry its own evidence; uniformity with the other conversions is not it.
+ *
+ * **The presence probe stops being optional**, and its absent form is the
+ * permissive one. The option's own comment says what that costs: *"Without it
+ * the palette keeps offering a deactivated module's actions, which lead to a
+ * 503."* An operator switches a module off, its entries stay in ⌘K, and the
+ * admin who picks one gets an error rather than an absence. Both roots pass it,
+ * so nothing is live; eleventh removal of this shape.
+ *
+ * Issue #225 — it carries the presence **version** alongside the reading, in
+ * one value, because the service memoises what the reading produced and needs
+ * to know when the reading moved. A root that supplied one without the other
+ * would give the palette a snapshot it can never drop.
+ *
+ * `adminActionsReconciler` is a **port**, and since feature 080's T036a it is
+ * one with no consumer here: the lifecycle orchestrator reaches this module's
+ * reconcile through the `lifecycleParticipant` declared in `manifest.ts`. See
+ * the note on `AdminActionsModuleHandle.reconciler` in `plugin.ts`.
+ */
+export interface AdminActionsCradle {
+    readonly emFactory: () => EntityManager;
+    readonly orm: import('@mikro-orm/postgresql').MikroORM;
+    readonly requireAdmin: RequireAdminFactory;
+    readonly adminContextResolver: (req: FastifyRequest) => {
+        adminUserId: string;
+    };
+    readonly adminI18nService: AdminI18nTranslatePort;
+    readonly permissionService: PermissionReadPort;
+    /** Reads the lifecycle registry lazily; `undefined` until `_lifecycle` exists. */
+    readonly lifecycleManifestRegistry: () => AdminActionsManifestRegistryView | undefined;
+    /**
+     * Both presence axes and their generation, so the palette hides an absent
+     * module — uninstalled or deactivated — and stops serving a snapshot built
+     * before it became one.
+     */
+    readonly modulePresenceProbe: ModulePresenceProbe;
+    readonly adminActions: {
+        handle: AdminActionsModuleHandle;
+        plugin: unknown;
+    };
+    readonly adminActionsReconciler: AdminActionsModuleHandle['reconciler'];
+}
+export declare function registerModule(ctx: ModuleContext): void;
+/**
+ * The module's persisted entity classes, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table->owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ *
+ * The order is the one `db/entities-registry.generated.ts` declared before this
+ * module became a package, so the registered set is the same list in the same
+ * sequence.
+ */
+export declare const entities: (typeof ModuleAction)[];
+//# sourceMappingURL=index.d.ts.map

package/dist/backend/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAC7F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAEtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,EAEL,KAAK,gCAAgC,EACrC,KAAK,wBAAwB,EAC9B,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,aAAa,CAAC;IACxC,QAAQ,CAAC,GAAG,EAAE,OAAO,uBAAuB,EAAE,QAAQ,CAAC;IACvD,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAChF,QAAQ,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;IAClD,QAAQ,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IAC/C,kFAAkF;IAClF,QAAQ,CAAC,yBAAyB,EAAE,MAAM,gCAAgC,GAAG,SAAS,CAAC;IACvF;;;;OAIG;IACH,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAClD,QAAQ,CAAC,YAAY,EAAE;QAAE,MAAM,EAAE,wBAAwB,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IAC7E,QAAQ,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,YAAY,CAAC,CAAC;CACzE;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CA+CvD;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,QAAQ,yBAEpB,CAAC"}

package/dist/backend/index.js

@@ -0,0 +1,57 @@
+import { lazyPort } from '@endora-commerce/platform/kernel';
+import { ModuleAction } from './entities/module-action.entity.js';
+import { adminActionsModule, } from './plugin.js';
+export function registerModule(ctx) {
+    ctx.di.register({
+        adminActions: ctx
+            .asFunction(({ orm, emFactory }) => adminActionsModule({
+            orm,
+            emFactory,
+            // Feature 075, Phase C — `admin_roles`' published permission read,
+            // resolved per call so a switched-off `admin_roles` answers 503 at
+            // the call rather than through a gate frozen at composition time.
+            permissionService: lazyPort(ctx, 'permissionService'),
+            // The registry accessor, threaded straight through: the module's own
+            // reconcile reads it at plugin attach, which is the whole point.
+            registry: () => ctx.cradle().lifecycleManifestRegistry(),
+            // Feature 075, Phase C — `_i18n`'s published resolver. One method of
+            // it: the palette renders a label and a description per action.
+            i18nService: lazyPort(ctx, 'adminI18nService'),
+            requireAdmin: (permission) => async (req, reply) => ctx.cradle().requireAdmin(permission)(req, reply),
+            resolveAdminContext: (req) => ctx.cradle().adminContextResolver(req),
+            presence: {
+                isPlatformAvailable: (moduleId) => ctx.cradle().modulePresenceProbe.isPlatformAvailable(moduleId),
+                isActivated: (moduleId) => ctx.cradle().modulePresenceProbe.isActivated(moduleId),
+                version: () => ctx.cradle().modulePresenceProbe.version(),
+            },
+        }))
+            .singleton(),
+    });
+    ctx.di.providePort('adminActionsReconciler', ctx
+        .asFunction(({ adminActions }) => adminActions.handle.reconciler)
+        .singleton());
+    ctx.routes(async (app) => {
+        const plugin = ctx.cradle().adminActions.plugin;
+        // Plugin attach, not `onBoot` — see the note at the top of this file.
+        await plugin(app);
+    });
+}
+/**
+ * The module's persisted entity classes, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table->owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ *
+ * The order is the one `db/entities-registry.generated.ts` declared before this
+ * module became a package, so the registered set is the same list in the same
+ * sequence.
+ */
+export const entities = [
+    ModuleAction,
+];
+//# sourceMappingURL=index.js.map

package/dist/backend/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAG5D,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,EACL,kBAAkB,GAGnB,MAAM,aAAa,CAAC;AA0DrB,MAAM,UAAU,cAAc,CAAC,GAAkB;IAC/C,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC;QACd,YAAY,EAAE,GAAG;aACd,UAAU,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAsB,EAAE,EAAE,CACrD,kBAAkB,CAAC;YACjB,GAAG;YACH,SAAS;YACT,mEAAmE;YACnE,mEAAmE;YACnE,kEAAkE;YAClE,iBAAiB,EAAE,QAAQ,CAAqB,GAAG,EAAE,mBAAmB,CAAC;YACzE,qEAAqE;YACrE,iEAAiE;YACjE,QAAQ,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAsB,CAAC,yBAAyB,EAAE;YAC5E,qEAAqE;YACrE,gEAAgE;YAChE,WAAW,EAAE,QAAQ,CAAyB,GAAG,EAAE,kBAAkB,CAAC;YACtE,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CACjD,GAAG,CAAC,MAAM,EAAsB,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC;YACvE,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE,CAC3B,GAAG,CAAC,MAAM,EAAsB,CAAC,oBAAoB,CAAC,GAAG,CAAC;YAC5D,QAAQ,EAAE;gBACR,mBAAmB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAChC,GAAG,CAAC,MAAM,EAAsB,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,QAAQ,CAAC;gBACpF,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE,CACxB,GAAG,CAAC,MAAM,EAAsB,CAAC,mBAAmB,CAAC,WAAW,CAAC,QAAQ,CAAC;gBAC5E,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAsB,CAAC,mBAAmB,CAAC,OAAO,EAAE;aAC9E;SACF,CAAC,CACH;aACA,SAAS,EAAE;KACf,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,WAAW,CAChB,wBAAwB,EACxB,GAAG;SACA,UAAU,CAAC,CAAC,EAAE,YAAY,EAAsB,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC;SACpF,SAAS,EAAE,CACf,CAAC;IAEF,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,EAAsB,CAAC,YAAY,CAAC,MAE3C,CAAC;QACnB,sEAAsE;QACtE,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,YAAY;CACb,CAAC"}

package/dist/backend/plugin.d.ts

@@ -0,0 +1,110 @@
+import type { EntityManager, MikroORM } from '@mikro-orm/postgresql';
+import type { AdminI18nTranslatePort, ModuleAction, PermissionReadPort } from '@endora-commerce/contracts';
+import { AdminActionsService, type ModulePresenceProbe } from './services/admin-actions-service.js';
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+import type { RequireAdminFactory } from '@endora-commerce/platform/kernel';
+/**
+ * The attach function this module hands its composition root.
+ *
+ * Typed on `fastify`'s own `FastifyInstance` rather than on the platform's
+ * `ModulePlugin`, which `contracts/host-package.md` §1.4g classifies **A**: the
+ * host does not publish it, so a packaged module cannot name it. The
+ * already-packaged `quote_requests` types its attach function the same way.
+ */
+type ModuleAttach = (app: FastifyInstance) => Promise<void>;
+/**
+ * Admin Actions module composition root — feature 020.
+ *
+ * Boot-time responsibilities:
+ *
+ *   1. Build the `AdminActionsService` (visibility + cache + pubsub).
+ *   2. Build the `AdminActionsReconciler` (UPSERT + prune at install,
+ *      DELETE at hard-uninstall).
+ *   3. Run an idempotent reconcile pass — for every module whose
+ *      manifest declares `actions`, refresh the `module_actions` rows
+ *      from the manifest. Mirrors feature 019's i18n boot reconciler so
+ *      the registry catches up after a redeploy without requiring a
+ *      module:install of every module.
+ *   4. Register the admin HTTP route.
+ */
+/**
+ * One module's manifest, as the palette reconcile reads it: the id the
+ * `module_actions` rows are keyed by, and the actions the manifest declares.
+ *
+ * Stated here rather than imported from `_lifecycle` (feature 075, Phase C),
+ * for the reason `_i18n`'s `I18nManifestRegistryView` records. Which modules a
+ * deployment ships is a **composition root's** input — `lifecycleManifestRegistry`
+ * is a name a root supplies, not a port a module resolves — and `_lifecycle`'s
+ * own `LoadedManifestRegistry` additionally carries a dependency graph and each
+ * module's install hooks, none of which a palette reconcile has any business
+ * seeing. Stating the demand is what keeps the two apart.
+ */
+export interface AdminActionsReconcileEntry {
+    manifest: {
+        id: string;
+        actions?: readonly ModuleAction[] | undefined;
+    };
+}
+/** The slice of the lifecycle registry the palette reconcile walks. */
+export interface AdminActionsManifestRegistryView {
+    modules: {
+        values(): Iterable<AdminActionsReconcileEntry>;
+    };
+}
+export interface AdminActionsModuleDeps {
+    orm: MikroORM;
+    emFactory: () => EntityManager;
+    /** Lazy accessor — same chicken-and-egg pattern feature 019 uses. */
+    registry?: AdminActionsManifestRegistryView | (() => AdminActionsManifestRegistryView | undefined);
+    i18nService: AdminI18nTranslatePort;
+    permissionService: PermissionReadPort;
+    requireAdmin: RequireAdminFactory;
+    resolveAdminContext: (req: FastifyRequest) => {
+        adminUserId: string;
+    };
+    log?: {
+        info(msg: string): void;
+        warn(msg: string): void;
+    };
+    /**
+     * Feature 073 / issue #225 — the operator presence axis and its generation,
+     * passed straight through to the service. See
+     * `AdminActionsServiceDeps.presence` for why it is injected rather than read
+     * from the lifecycle singleton, and why the two halves are one value.
+     */
+    presence: ModulePresenceProbe;
+}
+export interface AdminActionsModuleHandle {
+    service: AdminActionsService;
+    /**
+     * Lifecycle-orchestrator-shaped reconciler, published as the
+     * `adminActionsReconciler` port.
+     *
+     * It no longer has a consumer in this repository (feature 080, T036a): the
+     * lifecycle orchestrator used to resolve it on every module's install, and
+     * now collects this module's `lifecycleParticipant` from the manifest
+     * registry instead — the one shape that also reaches a `module:*` command,
+     * which composes no container to resolve a port from. The port stays
+     * published because it is a legitimate seam for a caller that has a
+     * container; withdrawing it is a contract decision of its own.
+     */
+    reconciler: {
+        install(args: {
+            moduleId: string;
+            actions: readonly ModuleAction[];
+        }): Promise<{
+            upserted: number;
+            pruned: number;
+        }>;
+        remove(moduleId: string): Promise<{
+            removed: number;
+        }>;
+    };
+}
+export interface AdminActionsModule {
+    handle: AdminActionsModuleHandle;
+    plugin: ModuleAttach;
+}
+export declare function adminActionsModule(deps: AdminActionsModuleDeps): AdminActionsModule;
+export {};
+//# sourceMappingURL=plugin.d.ts.map

package/dist/backend/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/backend/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,KAAK,EACV,sBAAsB,EACtB,YAAY,EACZ,kBAAkB,EACnB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,mBAAmB,EACnB,KAAK,mBAAmB,EACzB,MAAM,qCAAqC,CAAC;AAI7C,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE5E;;;;;;;GAOG;AACH,KAAK,YAAY,GAAG,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAE5D;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,SAAS,YAAY,EAAE,GAAG,SAAS,CAAA;KAAE,CAAC;CACzE;AAED,uEAAuE;AACvE,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE;QAAE,MAAM,IAAI,QAAQ,CAAC,0BAA0B,CAAC,CAAA;KAAE,CAAC;CAC7D;AAED,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,QAAQ,CAAC;IACd,SAAS,EAAE,MAAM,aAAa,CAAC;IAC/B,qEAAqE;IACrE,QAAQ,CAAC,EACL,gCAAgC,GAChC,CAAC,MAAM,gCAAgC,GAAG,SAAS,CAAC,CAAC;IACzD,WAAW,EAAE,sBAAsB,CAAC;IACpC,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,YAAY,EAAE,mBAAmB,CAAC;IAClC,mBAAmB,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IACtE,GAAG,CAAC,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC3D;;;;;OAKG;IACH,QAAQ,EAAE,mBAAmB,CAAC;CAC/B;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,mBAAmB,CAAC;IAC7B;;;;;;;;;;;OAWG;IACH,UAAU,EAAE;QACV,OAAO,CAAC,IAAI,EAAE;YACZ,QAAQ,EAAE,MAAM,CAAC;YACjB,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;SAClC,GAAG,OAAO,CAAC;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACxD,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,wBAAwB,CAAC;IACjC,MAAM,EAAE,YAAY,CAAC;CACtB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,kBAAkB,CAmCnF"}

package/dist/backend/plugin.js

@@ -0,0 +1,77 @@
+import { AdminActionsReconciler } from './services/admin-actions-reconciler.js';
+import { AdminActionsService, } from './services/admin-actions-service.js';
+import { registerAdminActionsRoutes, } from './routes.admin.js';
+export function adminActionsModule(deps) {
+    const log = deps.log ?? { info: () => { }, warn: (m) => console.warn(m) };
+    const reconciler = new AdminActionsReconciler({ em: deps.emFactory });
+    const service = new AdminActionsService({
+        em: deps.emFactory,
+        i18nService: deps.i18nService,
+        permissionService: deps.permissionService,
+        ...(deps.presence ? { presence: deps.presence } : {}),
+        log,
+    });
+    const plugin = async (app) => {
+        const registry = typeof deps.registry === 'function' ? deps.registry() : deps.registry;
+        if (registry) {
+            await reconcileActions(registry, reconciler, log);
+        }
+        await registerAdminActionsRoutes(app, {
+            adminActionsService: service,
+            requireAdmin: deps.requireAdmin,
+            resolveAdminContext: deps.resolveAdminContext,
+        });
+    };
+    return {
+        handle: {
+            service,
+            reconciler: {
+                install: async ({ moduleId, actions }) => reconciler.installForModule({ moduleId, actions }),
+                remove: async (moduleId) => reconciler.removeForModule({ moduleId }),
+            },
+        },
+        plugin,
+    };
+}
+/**
+ * Idempotent reconciler — for every manifest with declared actions,
+ * UPSERT them and prune any rows the manifest no longer declares.
+ * Errors on a single module are logged but do NOT abort boot.
+ */
+async function reconcileActions(registry, reconciler, log) {
+    let installed = 0;
+    let skipped = 0;
+    let failed = 0;
+    for (const entry of registry.modules.values()) {
+        const actions = entry.manifest.actions;
+        if (!actions || actions.length === 0) {
+            skipped += 1;
+            // Even when no actions are declared, prune any rows that may
+            // remain from a previous version that did declare them. This is
+            // the cheapest way to keep the table aligned with the current
+            // manifest set.
+            try {
+                await reconciler.installForModule({ moduleId: entry.manifest.id, actions: [] });
+            }
+            catch (err) {
+                // Pruning a non-existent row is a no-op; failure here means a
+                // larger DB problem worth surfacing.
+                log.warn(`[admin_actions] prune for "${entry.manifest.id}" failed: ${err.message}`);
+            }
+            continue;
+        }
+        try {
+            await reconciler.installForModule({
+                moduleId: entry.manifest.id,
+                actions,
+            });
+            installed += 1;
+        }
+        catch (err) {
+            failed += 1;
+            log.warn(`[admin_actions] reconcile: module "${entry.manifest.id}" failed: ${err.message}`);
+        }
+    }
+    log.info(`[admin_actions] reconcile complete — installed=${installed} skipped=${skipped} failed=${failed}`);
+}
+//# sourceMappingURL=plugin.js.map

package/dist/backend/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/backend/plugin.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EACL,mBAAmB,GAEpB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAoG3B,MAAM,UAAU,kBAAkB,CAAC,IAA4B;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,UAAU,GAAG,IAAI,sBAAsB,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC;QACtC,EAAE,EAAE,IAAI,CAAC,SAAS;QAClB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG;KACJ,CAAC,CAAC;IAEH,MAAM,MAAM,GAAiB,KAAK,EAAE,GAAG,EAAE,EAAE;QACzC,MAAM,QAAQ,GACZ,OAAO,IAAI,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;QACxE,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,0BAA0B,CAAC,GAAG,EAAE;YACpC,mBAAmB,EAAE,OAAO;YAC5B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;SAC9C,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO;QACL,MAAM,EAAE;YACN,OAAO;YACP,UAAU,EAAE;gBACV,OAAO,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CACvC,UAAU,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;gBACpD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,CAAC;aACrE;SACF;QACD,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAC7B,QAA0C,EAC1C,UAAkC,EAClC,GAAyD;IAEzD,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QACvC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,CAAC;YACb,6DAA6D;YAC7D,gEAAgE;YAChE,8DAA8D;YAC9D,gBAAgB;YAChB,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;YAClF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,8DAA8D;gBAC9D,qCAAqC;gBACrC,GAAG,CAAC,IAAI,CACN,8BAA8B,KAAK,CAAC,QAAQ,CAAC,EAAE,aAAc,GAAa,CAAC,OAAO,EAAE,CACrF,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,gBAAgB,CAAC;gBAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;gBAC3B,OAAO;aACR,CAAC,CAAC;YACH,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,CAAC;YACZ,GAAG,CAAC,IAAI,CACN,sCAAsC,KAAK,CAAC,QAAQ,CAAC,EAAE,aAAc,GAAa,CAAC,OAAO,EAAE,CAC7F,CAAC;QACJ,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CACN,kDAAkD,SAAS,YAAY,OAAO,WAAW,MAAM,EAAE,CAClG,CAAC;AACJ,CAAC"}

package/dist/backend/routes.admin.d.ts

@@ -0,0 +1,19 @@
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+import type { AdminActionsService } from './services/admin-actions-service.js';
+import type { RequireAdminFactory } from '@endora-commerce/platform/kernel';
+export interface AdminActionsRouteDeps {
+    adminActionsService: AdminActionsService;
+    requireAdmin: RequireAdminFactory;
+    resolveAdminContext: (req: FastifyRequest) => {
+        adminUserId: string;
+    };
+}
+/**
+ * GET /api/v1/admin/admin-actions?language=…
+ *
+ * Returns the operator-visible action list for the requested language
+ * — already filtered by enabled-module + permission, already resolved
+ * to localized labels, already sorted by `(weight, label)`.
+ */
+export declare function registerAdminActionsRoutes(app: FastifyInstance, deps: AdminActionsRouteDeps): Promise<void>;
+//# sourceMappingURL=routes.admin.d.ts.map

package/dist/backend/routes.admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.d.ts","sourceRoot":"","sources":["../../src/backend/routes.admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAM/D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE5E,MAAM,WAAW,qBAAqB;IACpC,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,YAAY,EAAE,mBAAmB,CAAC;IAClC,mBAAmB,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CACvE;AAED;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,IAAI,CAAC,CA0Bf"}

package/dist/backend/routes.admin.js

@@ -0,0 +1,32 @@
+import { GetAdminActionsQuerySchema, GetAdminActionsResponseSchema, } from '@endora-commerce/contracts';
+/**
+ * GET /api/v1/admin/admin-actions?language=…
+ *
+ * Returns the operator-visible action list for the requested language
+ * — already filtered by enabled-module + permission, already resolved
+ * to localized labels, already sorted by `(weight, label)`.
+ */
+export async function registerAdminActionsRoutes(app, deps) {
+    app.get('/api/v1/admin/admin-actions', {
+        preHandler: deps.requireAdmin(),
+        schema: { querystring: GetAdminActionsQuerySchema },
+    }, async (request, reply) => {
+        const { language } = GetAdminActionsQuerySchema.parse(request.query);
+        const ctx = deps.resolveAdminContext(request);
+        const result = await deps.adminActionsService.listVisibleForOperator({
+            language,
+            adminUserId: ctx.adminUserId,
+        });
+        const payload = {
+            data: result.actions,
+            meta: {
+                language,
+                total: result.actions.length,
+                registryVersion: result.registryVersion,
+            },
+        };
+        reply.header('Cache-Control', 'private, max-age=0, must-revalidate');
+        return { data: GetAdminActionsResponseSchema.parse(payload) };
+    });
+}
+//# sourceMappingURL=routes.admin.js.map

package/dist/backend/routes.admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.js","sourceRoot":"","sources":["../../src/backend/routes.admin.ts"],"names":[],"mappings":"AACA,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,GAE9B,MAAM,4BAA4B,CAAC;AAUpC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,GAAoB,EACpB,IAA2B;IAE3B,GAAG,CAAC,GAAG,CACL,6BAA6B,EAC7B;QACE,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE;QAC/B,MAAM,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE;KACpD,EACD,KAAK,EAAE,OAAO,EAAE,KAAK,EAA8C,EAAE;QACnE,MAAM,EAAE,QAAQ,EAAE,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,sBAAsB,CAAC;YACnE,QAAQ;YACR,WAAW,EAAE,GAAG,CAAC,WAAW;SAC7B,CAAC,CAAC;QACH,MAAM,OAAO,GAA4B;YACvC,IAAI,EAAE,MAAM,CAAC,OAAO;YACpB,IAAI,EAAE;gBACJ,QAAQ;gBACR,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;gBAC5B,eAAe,EAAE,MAAM,CAAC,eAAe;aACxC;SACF,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,qCAAqC,CAAC,CAAC;QACrE,OAAO,EAAE,IAAI,EAAE,6BAA6B,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IAChE,CAAC,CACF,CAAC;AACJ,CAAC"}