@endora-commerce/mod-admin-users 0.100.0

package/dist/admin/permission-label.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-label.d.ts","sourceRoot":"","sources":["../../src/admin/permission-label.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAEtF,6DAA6D;AAC7D,eAAO,MAAM,uBAAuB,2BAA2B,CAAC;AAEhE,gFAAgF;AAChF,eAAO,MAAM,6BAA6B,SAAS,CAAC;AAEpD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASpF;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9C;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAYxE"}

package/dist/admin/permission-label.js

@@ -0,0 +1,67 @@
+/**
+ * Resolving a permission label — feature 091, Phase 3.
+ *
+ * `/admin-roles` renders one row per grantable code and translates it through
+ * `adminRoles.permission.<code>`. That key used to be looked up in exactly one
+ * namespace, the synthetic `core` that `_i18n`'s bundle is served under, and
+ * that is what made a module owning its own labels impossible: a module's
+ * bundle is served under the module's own id, so a label written there was
+ * **read by nobody**.
+ *
+ * It was not hypothetical. `mfa`, `pwa`, `stripe` and `prompt_actions` each
+ * shipped their permission labels in their own bundle *and* in `_i18n`'s, and
+ * the copy in their own bundle had never rendered — the screen took `core`'s.
+ * Four authors did the right thing and the platform silently ignored it.
+ *
+ * So the lookup is over the merged bundle rather than over one namespace:
+ * `core` first, because that is where the legacy block still lives and a
+ * migrating label must not flicker between two answers, then the module
+ * namespaces. The key carries the permission code, which is unique across the
+ * catalogue, so a namespace scan cannot collide two different labels — and
+ * which module may write one is a question for the ratchet in
+ * `backend/test/helpers/permission-labels.ts`, not for the renderer. Being
+ * permissive here and strict there is deliberate: the alternative is resolving
+ * by the catalogue row's `module` field, which is a **display grouping** and is
+ * `module_lifecycle` for a module whose id is `_lifecycle`.
+ */
+import { resolve } from '@endora-commerce/admin-kit/i18n';
+/** The key `/admin-roles` builds for every catalogue row. */
+export const PERMISSION_LABEL_PREFIX = 'adminRoles.permission.';
+/** The namespace `_i18n`'s bundle is served under — the legacy block's home. */
+export const LEGACY_PERMISSION_LABEL_SCOPE = 'core';
+/**
+ * The namespace that carries `key`, preferring the legacy block, or `null`.
+ *
+ * Sorted, so two bundles that both carried the key would resolve to the same
+ * one on every render rather than to whichever the server serialised first.
+ */
+export function scopeCarrying(bundle, key) {
+    if (bundle === undefined)
+        return null;
+    if (bundle[LEGACY_PERMISSION_LABEL_SCOPE]?.[key] != null) {
+        return LEGACY_PERMISSION_LABEL_SCOPE;
+    }
+    const carrying = Object.keys(bundle)
+        .filter((scope) => bundle[scope]?.[key] != null)
+        .sort();
+    return carrying[0] ?? null;
+}
+/**
+ * The label for one permission code: the operator's language, then English,
+ * then the manifest label the API already sent.
+ */
+export function resolvePermissionLabel(args) {
+    const key = `${PERMISSION_LABEL_PREFIX}${args.code}`;
+    const scope = scopeCarrying(args.bundle, key) ?? scopeCarrying(args.fallbackBundle, key);
+    if (scope === null)
+        return args.fallbackLabel;
+    const result = resolve({
+        scope,
+        key,
+        language: args.language,
+        bundle: args.bundle,
+        ...(args.fallbackBundle !== undefined ? { fallbackBundle: args.fallbackBundle } : {}),
+    });
+    return result.outcome === 'placeholder' ? args.fallbackLabel : result.value;
+}
+//# sourceMappingURL=permission-label.js.map

package/dist/admin/permission-label.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-label.js","sourceRoot":"","sources":["../../src/admin/permission-label.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC;AAG1D,6DAA6D;AAC7D,MAAM,CAAC,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AAEhE,gFAAgF;AAChF,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,MAA0B,EAAE,GAAW;IACnE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,MAAM,CAAC,6BAA6B,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACzD,OAAO,6BAA6B,CAAC;IACvC,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;SACjC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;SAC/C,IAAI,EAAE,CAAC;IACV,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC7B,CAAC;AAWD;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAyB;IAC9D,MAAM,GAAG,GAAG,GAAG,uBAAuB,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACzF,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC;QACrB,KAAK;QACL,GAAG;QACH,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtF,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;AAC9E,CAAC"}

package/dist/backend/cli/create-admin.d.ts

@@ -0,0 +1,16 @@
+import type { ModuleCliCommandContext } from '@endora-commerce/contracts';
+import { type ModuleContext } from '@endora-commerce/platform/kernel';
+interface ParsedArgs {
+    email: string;
+    password: string;
+    firstName: string;
+    lastName: string;
+    role: string;
+    skipRoleBootstrap: boolean;
+}
+export declare function parseArgs(argv: readonly string[]): ParsedArgs | {
+    error: string;
+};
+export declare function createAdmin({ ctx, argv, out, err, }: ModuleCliCommandContext<ModuleContext>): Promise<number>;
+export {};
+//# sourceMappingURL=create-admin.d.ts.map

package/dist/backend/cli/create-admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-admin.d.ts","sourceRoot":"","sources":["../../../src/backend/cli/create-admin.ts"],"names":[],"mappings":"AA0CA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAY,KAAK,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAIhF,UAAU,UAAU;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAOD,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CA0BjF;AAED,wBAAsB,WAAW,CAAC,EAChC,GAAG,EACH,IAAI,EACJ,GAAG,EACH,GAAG,GACJ,EAAE,uBAAuB,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAoE1D"}

package/dist/backend/cli/create-admin.js

@@ -0,0 +1,101 @@
+import { normalizeEmailAddress } from '@endora-commerce/contracts';
+import { lazyPort } from '@endora-commerce/platform/kernel';
+import { hashPassword } from '@endora-commerce/platform/kernel';
+import { AdminUser } from '../entities/admin-user.entity.js';
+export function parseArgs(argv) {
+    const map = new Map();
+    let skipRoleBootstrap = false;
+    for (const arg of argv) {
+        if (arg === '--skip-role-bootstrap') {
+            skipRoleBootstrap = true;
+            continue;
+        }
+        if (!arg.startsWith('--'))
+            continue;
+        const eq = arg.indexOf('=');
+        if (eq === -1)
+            continue;
+        map.set(arg.slice(2, eq), arg.slice(eq + 1));
+    }
+    for (const key of ['email', 'password', 'first-name', 'last-name']) {
+        if (!map.get(key)?.trim())
+            return { error: `Missing required flag: --${key}=...` };
+    }
+    const password = map.get('password').trim();
+    if (password.length < 12)
+        return { error: 'Password must be at least 12 characters.' };
+    return {
+        email: normalizeEmailAddress(map.get('email').trim()),
+        password,
+        firstName: map.get('first-name').trim(),
+        lastName: map.get('last-name').trim(),
+        role: map.get('role')?.trim() || 'platform_admin',
+        skipRoleBootstrap,
+    };
+}
+export async function createAdmin({ ctx, argv, out, err, }) {
+    // command-coverage-ignore: the bootstrap CLI that mints the first
+    // administrator. It runs with shell access to the deployment and, by
+    // construction, before any Admin User exists — so there is no acting
+    // principal for the Command Bus to attribute the write to. Every subsequent
+    // admin-user write goes through the audited admin_users surface; this one
+    // exists so that surface has somebody to sign in to it.
+    const args = parseArgs(argv);
+    if ('error' in args) {
+        err(args.error);
+        return 1;
+    }
+    const adminRoles = lazyPort(ctx, 'adminRolePort');
+    const em = ctx.cradle().emFactory();
+    // 1. Resolve or bootstrap the role — two methods of the port `admin_roles`
+    //    publishes, in place of a `findOne` + `em.create` over its entity.
+    let role = await adminRoles.findByCode(args.role);
+    if (!role) {
+        if (args.skipRoleBootstrap || args.role !== 'platform_admin') {
+            err(`Role "${args.role}" not found. Either create it via the admin panel or omit ` +
+                `--role to bootstrap the platform_admin role.`);
+            return 1;
+        }
+        role = await adminRoles.upsertByCode({
+            code: 'platform_admin',
+            name: 'Platform Admin',
+            permissions: ['*'],
+            requiresTwoFactor: false,
+        });
+        out(`Created bootstrap role: platform_admin (${role.id})`);
+    }
+    // 2. Upsert the admin user — this module's own table, written directly for
+    //    the reason the ignore marker above gives.
+    const passwordHash = await hashPassword(args.password);
+    const existing = await em.findOne(AdminUser, { email: args.email });
+    if (existing) {
+        existing.passwordHash = passwordHash;
+        existing.firstName = args.firstName;
+        existing.lastName = args.lastName;
+        existing.adminRoleId = role.id;
+        existing.status = 'active';
+        existing.deletedAt = null;
+        await em.flush();
+        out(`Updated existing admin: ${args.email}`);
+        out(`  id   : ${existing.id}`);
+        out(`  role : ${role.code} (${role.id})`);
+    }
+    else {
+        const created = em.create(AdminUser, {
+            email: args.email,
+            passwordHash,
+            firstName: args.firstName,
+            lastName: args.lastName,
+            adminRoleId: role.id,
+            status: 'active',
+        });
+        await em.persistAndFlush(created);
+        out(`Created admin: ${args.email}`);
+        out(`  id   : ${created.id}`);
+        out(`  role : ${role.code} (${role.id})`);
+    }
+    out('');
+    out('Sign in at the admin panel with the email + password above.');
+    return 0;
+}
+//# sourceMappingURL=create-admin.js.map

package/dist/backend/cli/create-admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-admin.js","sourceRoot":"","sources":["../../../src/backend/cli/create-admin.ts"],"names":[],"mappings":"AAyCA,OAAO,EAAE,qBAAqB,EAAsB,MAAM,4BAA4B,CAAC;AAEvF,OAAO,EAAE,QAAQ,EAAsB,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAgB7D,MAAM,UAAU,SAAS,CAAC,IAAuB;IAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,KAAK,uBAAuB,EAAE,CAAC;YACpC,iBAAiB,GAAG,IAAI,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACpC,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACxB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;YAAE,OAAO,EAAE,KAAK,EAAE,4BAA4B,GAAG,MAAM,EAAE,CAAC;IACrF,CAAC;IACD,MAAM,QAAQ,GAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAY,CAAC,IAAI,EAAE,CAAC;IACxD,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC;IACvF,OAAO;QACL,KAAK,EAAE,qBAAqB,CAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAY,CAAC,IAAI,EAAE,CAAC;QACjE,QAAQ;QACR,SAAS,EAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAY,CAAC,IAAI,EAAE;QACnD,QAAQ,EAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAY,CAAC,IAAI,EAAE;QACjD,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,gBAAgB;QACjD,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAChC,GAAG,EACH,IAAI,EACJ,GAAG,EACH,GAAG,GACoC;IACvC,kEAAkE;IAClE,qEAAqE;IACrE,qEAAqE;IACrE,4EAA4E;IAC5E,0EAA0E;IAC1E,wDAAwD;IACxD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACpB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAgB,GAAG,EAAE,eAAe,CAAC,CAAC;IACjE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,EAAqB,CAAC,SAAS,EAAE,CAAC;IAEvD,2EAA2E;IAC3E,uEAAuE;IACvE,IAAI,IAAI,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC7D,GAAG,CACD,SAAS,IAAI,CAAC,IAAI,4DAA4D;gBAC5E,8CAA8C,CACjD,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC;YACnC,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,gBAAgB;YACtB,WAAW,EAAE,CAAC,GAAG,CAAC;YAClB,iBAAiB,EAAE,KAAK;SACzB,CAAC,CAAC;QACH,GAAG,CAAC,2CAA2C,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED,2EAA2E;IAC3E,+CAA+C;IAC/C,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACpE,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,YAAY,GAAG,YAAY,CAAC;QACrC,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACpC,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAClC,QAAQ,CAAC,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC;QAC/B,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC;QAC3B,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC;QAC1B,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,GAAG,CAAC,2BAA2B,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7C,GAAG,CAAC,YAAY,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/B,GAAG,CAAC,YAAY,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE;YACnC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY;YACZ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI,CAAC,EAAE;YACpB,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAClC,GAAG,CAAC,kBAAkB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACpC,GAAG,CAAC,YAAY,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9B,GAAG,CAAC,YAAY,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IACD,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,6DAA6D,CAAC,CAAC;IACnE,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/backend/demo/reset.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Withdraw `admin_users`' demo data (feature 113, T222 — contract §2.5).
+ *
+ * By the fixed addresses `seed` assigns, never by a predicate over the table:
+ * an operator's own administrator is indistinguishable from a demo one by every
+ * other column, and this is the table the host's `truncate … cascade` emptied
+ * outright — including the account a developer had created for themselves.
+ *
+ * The role each account holds is unassigned first, by the composition: `reset`
+ * runs the composition's withdrawal before any module's (§5.5).
+ */
+import type { DemoResetResult, ModuleDemoContext } from '@endora-commerce/contracts';
+import type { ModuleContext } from '@endora-commerce/platform/kernel';
+export declare function resetDemo(context: ModuleDemoContext<ModuleContext>): Promise<DemoResetResult>;
+//# sourceMappingURL=reset.d.ts.map

package/dist/backend/demo/reset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset.d.ts","sourceRoot":"","sources":["../../../src/backend/demo/reset.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACrF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAStE,wBAAsB,SAAS,CAC7B,OAAO,EAAE,iBAAiB,CAAC,aAAa,CAAC,GACxC,OAAO,CAAC,eAAe,CAAC,CAS1B"}

package/dist/backend/demo/reset.js

@@ -0,0 +1,13 @@
+import { AdminUser } from '../entities/admin-user.entity.js';
+import { DEMO_ADMIN_USER_EMAILS } from './rows.js';
+export async function resetDemo(context) {
+    // command-coverage-ignore: the withdrawal half of the demo data above. Same
+    // entry point, same `mustBeNonProduction()` guard, same absence of an
+    // operator to attribute the write to (contract §2.7).
+    const em = context.ctx.cradle().emFactory();
+    const removed = await em.nativeDelete(AdminUser, {
+        email: { $in: [...DEMO_ADMIN_USER_EMAILS] },
+    });
+    return { removed: [{ entity: 'AdminUser', count: removed }] };
+}
+//# sourceMappingURL=reset.js.map

package/dist/backend/demo/reset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset.js","sourceRoot":"","sources":["../../../src/backend/demo/reset.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAMnD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAyC;IAEzC,4EAA4E;IAC5E,sEAAsE;IACtE,sDAAsD;IACtD,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAwB,CAAC,SAAS,EAAE,CAAC;IAClE,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE;QAC/C,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,sBAAsB,CAAC,EAAE;KAC5C,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAChE,CAAC"}

package/dist/backend/demo/rows.d.ts

@@ -0,0 +1,50 @@
+/**
+ * The administrator accounts this module's demo data creates (feature 113,
+ * T222).
+ *
+ * One place holding the data, imported by both bodies: `seed.ts` creates these
+ * accounts and `reset.ts` withdraws exactly them, by the `email` they are keyed
+ * on (contract §2.5). The values are the host seed's verbatim, moved rather
+ * than rewritten; the frozen copy the parity comparison read them against is
+ * deleted with that comparison (T226), and
+ * `test/integration/demo/demo-shop.test.ts`' recorded delta is what holds them
+ * now.
+ *
+ * ## The role each account holds is deliberately not here
+ *
+ * An `admin_users` row carrying an `admin_roles` id is two modules' rows in one
+ * statement, so the assignment is a composition step (§5.1). `roleCode` below is
+ * **not** written by this body: it records which role the demo shop means each
+ * account to hold, so that `reset` and this module's own test can say what the
+ * composition is expected to have done. `AdminUser.adminRoleId` is nullable —
+ * `[OptionalProps]` names it — which is what makes the split available at all,
+ * and it is the difference from the demo *buyer*, whose
+ * `customer_accounts.organization_id` is `NOT NULL` and who therefore has to be
+ * created by the composition outright.
+ *
+ * ## The password is a real one and is printed
+ *
+ * It is reported as a {@link DemoCredential} rather than logged, so the runner
+ * formats it once (§3.7). `mustBeNonProduction()` at the entry point is what
+ * makes shipping a known password defensible: the command refuses to run
+ * against a production database at all.
+ */
+/** One demo administrator, in `AdminUser`'s own field names plus its role. */
+export interface DemoAdminUserRow {
+    readonly email: string;
+    readonly firstName: string;
+    readonly lastName: string;
+    readonly status: 'active' | 'inactive';
+    /** The `admin_roles` code the composition assigns — never written here. */
+    readonly roleCode: string;
+    /** How the report announces this account. */
+    readonly credentialLabel: string;
+}
+/** The one password every demo administrator signs in with. */
+export declare const DEMO_ADMIN_PASSWORD = "ChangeMe!123";
+/** The platform administrator's address, which the demo's report leads with. */
+export declare const DEMO_ADMIN_EMAIL = "admin@demo.local";
+export declare const DEMO_ADMIN_USERS: readonly DemoAdminUserRow[];
+/** The addresses `reset` withdraws — derived from the rows, never a second list. */
+export declare const DEMO_ADMIN_USER_EMAILS: readonly string[];
+//# sourceMappingURL=rows.d.ts.map

package/dist/backend/demo/rows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rows.d.ts","sourceRoot":"","sources":["../../../src/backend/demo/rows.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAC;IACvC,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,6CAA6C;IAC7C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,+DAA+D;AAC/D,eAAO,MAAM,mBAAmB,iBAAiB,CAAC;AAElD,gFAAgF;AAChF,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD,eAAO,MAAM,gBAAgB,EAAE,SAAS,gBAAgB,EAkCvD,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAA6C,CAAC"}

package/dist/backend/demo/rows.js

@@ -0,0 +1,73 @@
+/**
+ * The administrator accounts this module's demo data creates (feature 113,
+ * T222).
+ *
+ * One place holding the data, imported by both bodies: `seed.ts` creates these
+ * accounts and `reset.ts` withdraws exactly them, by the `email` they are keyed
+ * on (contract §2.5). The values are the host seed's verbatim, moved rather
+ * than rewritten; the frozen copy the parity comparison read them against is
+ * deleted with that comparison (T226), and
+ * `test/integration/demo/demo-shop.test.ts`' recorded delta is what holds them
+ * now.
+ *
+ * ## The role each account holds is deliberately not here
+ *
+ * An `admin_users` row carrying an `admin_roles` id is two modules' rows in one
+ * statement, so the assignment is a composition step (§5.1). `roleCode` below is
+ * **not** written by this body: it records which role the demo shop means each
+ * account to hold, so that `reset` and this module's own test can say what the
+ * composition is expected to have done. `AdminUser.adminRoleId` is nullable —
+ * `[OptionalProps]` names it — which is what makes the split available at all,
+ * and it is the difference from the demo *buyer*, whose
+ * `customer_accounts.organization_id` is `NOT NULL` and who therefore has to be
+ * created by the composition outright.
+ *
+ * ## The password is a real one and is printed
+ *
+ * It is reported as a {@link DemoCredential} rather than logged, so the runner
+ * formats it once (§3.7). `mustBeNonProduction()` at the entry point is what
+ * makes shipping a known password defensible: the command refuses to run
+ * against a production database at all.
+ */
+/** The one password every demo administrator signs in with. */
+export const DEMO_ADMIN_PASSWORD = 'ChangeMe!123';
+/** The platform administrator's address, which the demo's report leads with. */
+export const DEMO_ADMIN_EMAIL = 'admin@demo.local';
+export const DEMO_ADMIN_USERS = [
+    {
+        email: DEMO_ADMIN_EMAIL,
+        firstName: 'Demo',
+        lastName: 'Admin',
+        status: 'active',
+        roleCode: 'platform_admin',
+        credentialLabel: 'Platform Administrator',
+    },
+    // Feature 008 — two accounts on the sales_representative role, so the
+    // quickstart can exercise assignment-scoped visibility: one representative
+    // sees their own organisations and the other's are invisible to them.
+    {
+        email: 'sales-rep@demo.local',
+        firstName: 'Anna',
+        // A Polish surname, and it stays one. `check:default-language-prose` reads
+        // a literal as prose at two word tokens, or at one in the prop-default
+        // position, and this is one token in neither — measured, not assumed. It is
+        // also not prose in the sense the rule is about: a person's name is not a
+        // sentence a reader is meant to understand, and translating it would be
+        // renaming somebody.
+        lastName: 'Wiśniewska',
+        status: 'active',
+        roleCode: 'sales_representative',
+        credentialLabel: 'Sales Representative',
+    },
+    {
+        email: 'sales-rep-other@demo.local',
+        firstName: 'Tomasz',
+        lastName: 'Nowak',
+        status: 'active',
+        roleCode: 'sales_representative',
+        credentialLabel: 'Sales Rep (other)',
+    },
+];
+/** The addresses `reset` withdraws — derived from the rows, never a second list. */
+export const DEMO_ADMIN_USER_EMAILS = DEMO_ADMIN_USERS.map((row) => row.email);
+//# sourceMappingURL=rows.js.map

package/dist/backend/demo/rows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rows.js","sourceRoot":"","sources":["../../../src/backend/demo/rows.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAcH,+DAA+D;AAC/D,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAElD,gFAAgF;AAChF,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAEnD,MAAM,CAAC,MAAM,gBAAgB,GAAgC;IAC3D;QACE,KAAK,EAAE,gBAAgB;QACvB,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,gBAAgB;QAC1B,eAAe,EAAE,wBAAwB;KAC1C;IACD,sEAAsE;IACtE,2EAA2E;IAC3E,sEAAsE;IACtE;QACE,KAAK,EAAE,sBAAsB;QAC7B,SAAS,EAAE,MAAM;QACjB,2EAA2E;QAC3E,uEAAuE;QACvE,4EAA4E;QAC5E,0EAA0E;QAC1E,wEAAwE;QACxE,qBAAqB;QACrB,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,sBAAsB;QAChC,eAAe,EAAE,sBAAsB;KACxC;IACD;QACE,KAAK,EAAE,4BAA4B;QACnC,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,sBAAsB;QAChC,eAAe,EAAE,mBAAmB;KACrC;CACF,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,sBAAsB,GAAsB,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC"}

package/dist/backend/demo/seed.d.ts

@@ -0,0 +1,24 @@
+/**
+ * `admin_users`' demo data (feature 113, T222 — contract §2).
+ *
+ * The three administrator accounts the quickstart signs in with, in the module
+ * that owns the table. It writes `admin_users` and nothing else (§2.1), reads no
+ * other module's table and resolves no port (§2.2), so declaring it added no
+ * entry to this module's manifest `dependencies` (§2.3).
+ *
+ * **It writes no `adminRoleId`, and that is the boundary the batch was cut on.**
+ * The host block these rows come from created each account with an
+ * `admin_roles` id in hand, which is two modules' rows in one statement — a
+ * composition step (§5.1). The column is nullable, so the account is this
+ * module's and the assignment is the instance's; the composition runs after
+ * every module's `seed` and finds both sides already there. Contrast the demo
+ * *buyer*, whose `customer_accounts.organization_id` is `NOT NULL`: there no
+ * split exists and the composition creates the row outright.
+ *
+ * Idempotent by an existence probe on the natural key (§2.4): a second run
+ * creates nothing, re-hashes nothing and reports the same count.
+ */
+import type { DemoSeedResult, ModuleDemoContext } from '@endora-commerce/contracts';
+import type { ModuleContext } from '@endora-commerce/platform/kernel';
+export declare function seedDemo(context: ModuleDemoContext<ModuleContext>): Promise<DemoSeedResult>;
+//# sourceMappingURL=seed.d.ts.map

package/dist/backend/demo/seed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed.d.ts","sourceRoot":"","sources":["../../../src/backend/demo/seed.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAEV,cAAc,EACd,iBAAiB,EAClB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAWtE,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,iBAAiB,CAAC,aAAa,CAAC,GACxC,OAAO,CAAC,cAAc,CAAC,CAwCzB"}

package/dist/backend/demo/seed.js

@@ -0,0 +1,43 @@
+import { hashPassword } from '@endora-commerce/platform/kernel';
+import { AdminUser } from '../entities/admin-user.entity.js';
+import { DEMO_ADMIN_PASSWORD, DEMO_ADMIN_USERS } from './rows.js';
+export async function seedDemo(context) {
+    // command-coverage-ignore: demo data, reached only by `endora demo seed`,
+    // whose entry point calls `mustBeNonProduction()` as its first statement and
+    // outside every `try` (contract §2.7, §3.3). The guard is the enforcement:
+    // this write has no operator, no tenant and no audit reader, and the command
+    // refuses to run against a production database at all — which is also what
+    // makes a known password in `rows.ts` defensible.
+    const em = context.ctx.cradle().emFactory();
+    // One hash for the three accounts, exactly as the host block did: Argon2 is
+    // deliberately slow and the demo's password is one value.
+    let passwordHash;
+    for (const row of DEMO_ADMIN_USERS) {
+        const existing = await em.findOne(AdminUser, { email: row.email });
+        // Present already: left exactly as it is, password included. An operator
+        // may have changed it, and overwriting it here would be this body deciding
+        // its own literal outranks their change — `reset`'s question, not `seed`'s.
+        if (existing)
+            continue;
+        passwordHash ??= await hashPassword(DEMO_ADMIN_PASSWORD);
+        em.create(AdminUser, {
+            email: row.email,
+            passwordHash,
+            firstName: row.firstName,
+            lastName: row.lastName,
+            status: row.status,
+        });
+    }
+    await em.flush();
+    const credentials = DEMO_ADMIN_USERS.map((row) => ({
+        label: row.credentialLabel,
+        value: `${row.email} / ${DEMO_ADMIN_PASSWORD}`,
+    }));
+    // The count is what the demo *holds* after the run, not what this call
+    // inserted: seeding twice must report the same counts (`DemoEntityCount`).
+    return {
+        created: [{ entity: 'AdminUser', count: DEMO_ADMIN_USERS.length }],
+        credentials,
+    };
+}
+//# sourceMappingURL=seed.js.map

package/dist/backend/demo/seed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed.js","sourceRoot":"","sources":["../../../src/backend/demo/seed.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAEhE,OAAO,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAOlE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAyC;IAEzC,0EAA0E;IAC1E,6EAA6E;IAC7E,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,kDAAkD;IAClD,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAwB,CAAC,SAAS,EAAE,CAAC;IAElE,4EAA4E;IAC5E,0DAA0D;IAC1D,IAAI,YAAgC,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACnE,yEAAyE;QACzE,2EAA2E;QAC3E,4EAA4E;QAC5E,IAAI,QAAQ;YAAE,SAAS;QACvB,YAAY,KAAK,MAAM,YAAY,CAAC,mBAAmB,CAAC,CAAC;QACzD,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE;YACnB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,YAAY;YACZ,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IAEjB,MAAM,WAAW,GAAqB,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnE,KAAK,EAAE,GAAG,CAAC,eAAe;QAC1B,KAAK,EAAE,GAAG,GAAG,CAAC,KAAK,MAAM,mBAAmB,EAAE;KAC/C,CAAC,CAAC,CAAC;IAEJ,uEAAuE;IACvE,2EAA2E;IAC3E,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,EAAE,CAAC;QAClE,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/backend/entities/admin-user.entity.d.ts

@@ -0,0 +1,44 @@
+import { OptionalProps } from '@mikro-orm/core';
+/**
+ * AdminUser — a Supplier employee with platform-side access. Distinct entity
+ * from CustomerAccount (FR-040 — different login surface, different sessions,
+ * own permission matrix via AdminRole).
+ */
+export declare class AdminUser {
+    [OptionalProps]?: 'id' | 'createdAt' | 'updatedAt' | 'status' | 'adminRoleId' | 'twoFactorConfirmedAt' | 'lastLoginAt' | 'deletedAt' | 'preferredLanguage';
+    id: string;
+    email: string;
+    passwordHash: string;
+    firstName: string;
+    lastName: string;
+    adminRoleId?: string | null;
+    status: 'active' | 'inactive';
+    /**
+     * Never written, and since 2026-08-28 never **read** either.
+     *
+     * This table has no writer for it at all, not even a broken one, so the
+     * published `twoFactorEnabled` derived from it was a provably constant
+     * `false`: `/admin-users` reported no second factor for an administrator who
+     * had enrolled an hour earlier. That field is now the live `mfa` enrolment,
+     * read through `mfaEnrolmentStatePort`, and nothing in the tree reads this
+     * column.
+     *
+     * It is dead schema kept for one more step: dropping it is a migration on
+     * this module's table and is deliberately not folded into the repair of the
+     * five derivation sites. Do not read it — the honest answer is `mfa`'s.
+     */
+    twoFactorConfirmedAt?: Date | null;
+    lastLoginAt?: Date | null;
+    /**
+     * Admin UI preferred language — feature 019. NULL means "no preference
+     * saved", which the resolver treats as the platform default (English).
+     * The column is bounded by the `SupportedAdminLanguageSchema` allowlist
+     * in `@endora-commerce/contracts/src/admin-i18n.ts`; the validation lives at the
+     * service / route boundary, not at the column level.
+     */
+    preferredLanguage?: string | null;
+    createdAt: Date;
+    updatedAt: Date;
+    deletedAt?: Date | null;
+}
+//# sourceMappingURL=admin-user.entity.d.ts.map

package/dist/backend/entities/admin-user.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-user.entity.d.ts","sourceRoot":"","sources":["../../../src/backend/entities/admin-user.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,aAAa,EAAgC,MAAM,iBAAiB,CAAC;AAI7F;;;;GAIG;AACH,qBAEa,SAAS;IACpB,CAAC,aAAa,CAAC,CAAC,EACZ,IAAI,GACJ,WAAW,GACX,WAAW,GACX,QAAQ,GACR,aAAa,GACb,sBAAsB,GACtB,aAAa,GACb,WAAW,GACX,mBAAmB,CAAC;IAGxB,EAAE,EAAE,MAAM,CAAgB;IAI1B,KAAK,EAAG,MAAM,CAAC;IAGf,YAAY,EAAG,MAAM,CAAC;IAGtB,SAAS,EAAG,MAAM,CAAC;IAGnB,QAAQ,EAAG,MAAM,CAAC;IAIlB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAI5B,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAY;IAEzC;;;;;;;;;;;;;OAaG;IAEH,oBAAoB,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAGnC,WAAW,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAE1B;;;;;;OAMG;IAEH,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGlC,SAAS,EAAE,IAAI,CAAc;IAG7B,SAAS,EAAE,IAAI,CAAc;IAG7B,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB"}

package/dist/backend/entities/admin-user.entity.js

@@ -0,0 +1,115 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Entity, Index, OptionalProps, PrimaryKey, Property, Unique } from '@mikro-orm/core';
+import { GlobalEntity } from '@endora-commerce/platform/tenancy';
+import { randomUUID } from 'crypto';
+/**
+ * AdminUser — a Supplier employee with platform-side access. Distinct entity
+ * from CustomerAccount (FR-040 — different login surface, different sessions,
+ * own permission matrix via AdminRole).
+ */
+let AdminUser = class AdminUser {
+    [OptionalProps];
+    id = randomUUID();
+    email;
+    passwordHash;
+    firstName;
+    lastName;
+    adminRoleId;
+    status = 'active';
+    /**
+     * Never written, and since 2026-08-28 never **read** either.
+     *
+     * This table has no writer for it at all, not even a broken one, so the
+     * published `twoFactorEnabled` derived from it was a provably constant
+     * `false`: `/admin-users` reported no second factor for an administrator who
+     * had enrolled an hour earlier. That field is now the live `mfa` enrolment,
+     * read through `mfaEnrolmentStatePort`, and nothing in the tree reads this
+     * column.
+     *
+     * It is dead schema kept for one more step: dropping it is a migration on
+     * this module's table and is deliberately not folded into the repair of the
+     * five derivation sites. Do not read it — the honest answer is `mfa`'s.
+     */
+    twoFactorConfirmedAt;
+    lastLoginAt;
+    /**
+     * Admin UI preferred language — feature 019. NULL means "no preference
+     * saved", which the resolver treats as the platform default (English).
+     * The column is bounded by the `SupportedAdminLanguageSchema` allowlist
+     * in `@endora-commerce/contracts/src/admin-i18n.ts`; the validation lives at the
+     * service / route boundary, not at the column level.
+     */
+    preferredLanguage;
+    createdAt = new Date();
+    updatedAt = new Date();
+    deletedAt;
+};
+__decorate([
+    PrimaryKey({ type: 'uuid' }),
+    __metadata("design:type", String)
+], AdminUser.prototype, "id", void 0);
+__decorate([
+    Property({ type: 'string', length: 320 }),
+    Unique(),
+    __metadata("design:type", String)
+], AdminUser.prototype, "email", void 0);
+__decorate([
+    Property({ type: 'string', length: 512 }),
+    __metadata("design:type", String)
+], AdminUser.prototype, "passwordHash", void 0);
+__decorate([
+    Property({ type: 'string', length: 120 }),
+    __metadata("design:type", String)
+], AdminUser.prototype, "firstName", void 0);
+__decorate([
+    Property({ type: 'string', length: 120 }),
+    __metadata("design:type", String)
+], AdminUser.prototype, "lastName", void 0);
+__decorate([
+    Property({ type: 'uuid', nullable: true }),
+    Index(),
+    __metadata("design:type", Object)
+], AdminUser.prototype, "adminRoleId", void 0);
+__decorate([
+    Property({ type: 'string', length: 16 }),
+    Index(),
+    __metadata("design:type", String)
+], AdminUser.prototype, "status", void 0);
+__decorate([
+    Property({ type: 'datetime', nullable: true }),
+    __metadata("design:type", Object)
+], AdminUser.prototype, "twoFactorConfirmedAt", void 0);
+__decorate([
+    Property({ type: 'datetime', nullable: true }),
+    __metadata("design:type", Object)
+], AdminUser.prototype, "lastLoginAt", void 0);
+__decorate([
+    Property({ type: 'string', length: 12, nullable: true }),
+    __metadata("design:type", Object)
+], AdminUser.prototype, "preferredLanguage", void 0);
+__decorate([
+    Property({ type: 'datetime', onCreate: () => new Date() }),
+    __metadata("design:type", Date)
+], AdminUser.prototype, "createdAt", void 0);
+__decorate([
+    Property({ type: 'datetime', onUpdate: () => new Date() }),
+    __metadata("design:type", Date)
+], AdminUser.prototype, "updatedAt", void 0);
+__decorate([
+    Property({ type: 'datetime', nullable: true }),
+    __metadata("design:type", Object)
+], AdminUser.prototype, "deletedAt", void 0);
+AdminUser = __decorate([
+    GlobalEntity(),
+    Entity({ tableName: 'admin_users' })
+], AdminUser);
+export { AdminUser };
+//# sourceMappingURL=admin-user.entity.js.map

package/dist/backend/entities/admin-user.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-user.entity.js","sourceRoot":"","sources":["../../../src/backend/entities/admin-user.entity.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC;;;;GAIG;AAGI,IAAM,SAAS,GAAf,MAAM,SAAS;IACpB,CAAC,aAAa,CAAC,CASS;IAGxB,EAAE,GAAW,UAAU,EAAE,CAAC;IAI1B,KAAK,CAAU;IAGf,YAAY,CAAU;IAGtB,SAAS,CAAU;IAGnB,QAAQ,CAAU;IAIlB,WAAW,CAAiB;IAI5B,MAAM,GAA0B,QAAQ,CAAC;IAEzC;;;;;;;;;;;;;OAaG;IAEH,oBAAoB,CAAe;IAGnC,WAAW,CAAe;IAE1B;;;;;;OAMG;IAEH,iBAAiB,CAAiB;IAGlC,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;IAG7B,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;IAG7B,SAAS,CAAe;CACzB,CAAA;AA7DC;IADC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;qCACH;AAI1B;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACzC,MAAM,EAAE;;wCACM;AAGf;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;;+CACpB;AAGtB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;;4CACvB;AAGnB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;;2CACxB;AAIlB;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1C,KAAK,EAAE;;8CACoB;AAI5B;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACxC,KAAK,EAAE;;yCACiC;AAiBzC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;uDACZ;AAGnC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;8CACrB;AAU1B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oDACvB;AAGlC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;8BAChD,IAAI;4CAAc;AAG7B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;8BAChD,IAAI;4CAAc;AAG7B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;4CACvB;AAzEb,SAAS;IAFrB,YAAY,EAAE;IACd,MAAM,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;GACxB,SAAS,CA0ErB"}