@endora-commerce/mod-audit-logs 0.100.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Endora sp. z o.o. and the Endora Commerce contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,55 @@
+<!-- Generated by `pnpm --filter backend run manifests:generate`. Delete this line to take the file over; a README without it is never regenerated. -->
+
+# @endora-commerce/mod-audit-logs
+
+Append-only audit log for sensitive admin and customer actions.
+
+## What this is
+
+An **Endora Commerce module package**. Its module id is `audit_logs` — the identity of record in the platform's registries, in its migrations and in its setting, permission and translation codes.
+
+A module is not imported by application code. The platform discovers the extension packages an instance has installed, reads the manifest on the root subpath and composes the module from it, so installing this package and starting the instance is the whole integration.
+
+## Entry points
+
+| Import | Contents |
+| --- | --- |
+| `@endora-commerce/mod-audit-logs` | the module manifest — its id, version, dependencies, settings and activation |
+| `@endora-commerce/mod-audit-logs/admin` | the Admin UI contribution: the screens, navigation and palette actions it adds |
+| `@endora-commerce/mod-audit-logs/backend` | the composition root the platform calls, with the entities, services, routes and workers it registers |
+| `@endora-commerce/mod-audit-logs/tailwind.css` | the Tailwind source declaration for the admin code above |
+
+## Depends on
+
+Everything below is a **peer** dependency, so the application resolves exactly one copy of each — two copies of a host or of React are a runtime failure rather than a type error. An entry marked *optional* is needed only by the layers that use it.
+
+**Endora packages**
+
+- `@endora-commerce/admin-kit` — *optional*
+- `@endora-commerce/contracts`
+- `@endora-commerce/platform`
+
+**Third-party**
+
+- `@mikro-orm/postgresql` ^6
+- `fastify` ^5
+- `react` ^19 — *optional*
+- `react-router-dom` ^7 — *optional*
+- `zod` ^4
+
+## What the tarball carries
+
+- `dist/` — the compiled JavaScript and its type declarations
+- `i18n/` — the translation bundles this package ships (`en`, `pl`), loaded by the platform
+- `docs/` — the package’s own pages in the Endora Commerce documentation site
+- `tailwind.css` — the Tailwind source declaration
+
+## Install
+
+```bash
+pnpm add @endora-commerce/mod-audit-logs
+```
+
+## Licence
+
+MIT — the text is in `LICENSE`, beside this file.

package/dist/admin/index.d.ts

@@ -0,0 +1,34 @@
+/**
+ * `audit_logs`' admin surface — one route and one sidebar entry, declared by
+ * the module that owns them (feature 091, Phase 4, batch four;
+ * `specs/091-module-owned-admin-surfaces/contracts/admin-contribution.md`).
+ *
+ * **The locked-with-nav shape, and the module batch one rejected by name.**
+ * `plan.md`'s Ruling 2 retires the ground: `specs/deferred-defects.md` scopes
+ * Constitution XVII item 6 to the modules that declare an
+ * `activation.settingCode` *without* `nonDeactivatable`, so a locked module is
+ * outside that population by the owner's own measurement rather than by an
+ * exception anyone grants. Its off-state test asserts the axis it has — the
+ * permission one, which `useSurfaceVisibility` gates identically — and asserts
+ * the missing axis as a fact about the module read from the manifest, which is
+ * a stronger statement than a skipped file.
+ *
+ * **`audit_log:read` is the code, singular, and it is read from the route.**
+ * `GET /api/v1/admin/audit-log` enforces it
+ * (`packages/modules/audit_logs/src/backend/routes.admin.ts`). The module's
+ * other admin routes — the dashboard's recent-activity feed and the two
+ * module-activation endpoints under
+ * `routes.admin.recent-activity.ts` — are not this screen's, and two of them
+ * enforce `platform.modules.activate`, so copying the neighbourhood would have
+ * gated the viewer on a code that has nothing to do with reading an audit
+ * trail.
+ *
+ * **This entry exports data and nothing else** (R2), like every `./admin`
+ * layer: `check:module-boundary`'s D-171 rule designates a subpath as contract
+ * surface when it emits no runtime binding, and `./admin` deliberately does not
+ * qualify, so a consumer reaching into another module's `./admin` stays a
+ * counted boundary reach.
+ */
+import type { AdminContributions } from '@endora-commerce/admin-kit/contributions';
+export declare const contributions: AdminContributions;
+//# sourceMappingURL=index.d.ts.map

package/dist/admin/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/admin/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAKnF,eAAO,MAAM,aAAa,EAAE,kBAmC3B,CAAC"}

package/dist/admin/index.js

@@ -0,0 +1,39 @@
+/** The module's only admin route: the append-only audit-log viewer. */
+const ROUTE_PATH = '/audit-log';
+export const contributions = {
+    routes: [
+        {
+            path: ROUTE_PATH,
+            component: () => import('./pages/AuditLogViewer.js'),
+            requiredPermission: 'audit_log:read',
+            index: true,
+        },
+    ],
+    nav: [
+        {
+            to: ROUTE_PATH,
+            // Module-relative (R8), resolved in this module's own namespace out of
+            // `packages/modules/audit_logs/i18n/`. It was `appShell.nav.auditLog` in
+            // the shared `_i18n` bundle, one of the four shared files a module author
+            // had to edit.
+            labelKey: 'nav.auditLog.label',
+            // The icon the hand-written NAV entry carried.
+            icon: 'ListChecks',
+            section: 'system',
+            // **The *System* section still holds host-declared entries**, unlike the
+            // *Analytics & Ads* section batch three emptied, so this weight orders
+            // the entry only against the other converted modules — the host block
+            // renders first whatever any weight says, and that is the batch's one
+            // operator-visible change. The scale is the hand-written table's own
+            // position times a hundred, so the three entries this batch converts keep
+            // the relative order they had (`/admin-users` 200, `/admin-roles` 300,
+            // `/audit-log` 600) and the eight System entries still to convert have a
+            // slot each waiting for them.
+            weight: 600,
+            // The code that opens the screen: the sidebar advertises a destination,
+            // so it gates on what the landing route enforces.
+            requiredPermission: 'audit_log:read',
+        },
+    ],
+};
+//# sourceMappingURL=index.js.map

package/dist/admin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/admin/index.ts"],"names":[],"mappings":"AAiCA,uEAAuE;AACvE,MAAM,UAAU,GAAG,YAAY,CAAC;AAEhC,MAAM,CAAC,MAAM,aAAa,GAAuB;IAC/C,MAAM,EAAE;QACN;YACE,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,2BAA2B,CAAC;YACpD,kBAAkB,EAAE,gBAAgB;YACpC,KAAK,EAAE,IAAI;SACZ;KACF;IACD,GAAG,EAAE;QACH;YACE,EAAE,EAAE,UAAU;YACd,uEAAuE;YACvE,yEAAyE;YACzE,0EAA0E;YAC1E,eAAe;YACf,QAAQ,EAAE,oBAAoB;YAC9B,+CAA+C;YAC/C,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,QAAQ;YACjB,yEAAyE;YACzE,uEAAuE;YACvE,sEAAsE;YACtE,sEAAsE;YACtE,qEAAqE;YACrE,0EAA0E;YAC1E,uEAAuE;YACvE,yEAAyE;YACzE,8BAA8B;YAC9B,MAAM,EAAE,GAAG;YACX,wEAAwE;YACxE,kDAAkD;YAClD,kBAAkB,EAAE,gBAAgB;SACrC;KACF;CACF,CAAC"}

package/dist/admin/pages/AuditLogViewer.d.ts

@@ -0,0 +1,3 @@
+import { type ReactNode } from 'react';
+export default function AuditLogViewer(): ReactNode;
+//# sourceMappingURL=AuditLogViewer.d.ts.map

package/dist/admin/pages/AuditLogViewer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuditLogViewer.d.ts","sourceRoot":"","sources":["../../../src/admin/pages/AuditLogViewer.tsx"],"names":[],"mappings":"AAAA,OAAO,EAA8D,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAiDnG,MAAM,CAAC,OAAO,UAAU,cAAc,IAAI,SAAS,CA8MlD"}

package/dist/admin/pages/AuditLogViewer.js

@@ -0,0 +1,112 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { Fragment, useCallback, useEffect, useState } from 'react';
+import { Link } from 'react-router-dom';
+import { ApiError, apiClient, formatDateTime } from '@endora-commerce/admin-kit/lib';
+import { Alert, AlertDescription, Button, Card, CardContent, Input, Label, PageHeader, Table, TableBody, TableCell, TableHead, TableHeader, TableRow, } from '@endora-commerce/admin-kit/ui';
+import { AdminUserPicker, CustomerPicker } from '@endora-commerce/admin-kit/components';
+import { useTranslation, useTranslationContext } from '@endora-commerce/admin-kit/i18n';
+export default function AuditLogViewer() {
+    const t = useTranslation('core');
+    const { t: translate } = useTranslationContext();
+    const [rows, setRows] = useState([]);
+    const [loading, setLoading] = useState(true);
+    const [error, setError] = useState(null);
+    const [actor, setActor] = useState('');
+    const [action, setAction] = useState('');
+    const [objectType, setObjectType] = useState('');
+    const [objectId, setObjectId] = useState('');
+    const [impersonated, setImpersonated] = useState('');
+    const [expandedId, setExpandedId] = useState(null);
+    const refresh = useCallback(async () => {
+        setLoading(true);
+        setError(null);
+        try {
+            const params = new URLSearchParams();
+            if (actor)
+                params.set('filter[actor]', actor);
+            if (action)
+                params.set('filter[action]', action);
+            if (objectType)
+                params.set('filter[objectType]', objectType);
+            if (objectId)
+                params.set('filter[objectId]', objectId);
+            if (impersonated)
+                params.set('filter[customer]', impersonated);
+            const path = '/api/v1/admin/audit-log' + (params.toString() ? `?${params.toString()}` : '');
+            const res = await apiClient.get(path);
+            setRows(res.data);
+        }
+        catch (err) {
+            setError(err instanceof ApiError ? err.envelope.error.message : t('auditLog.error.load'));
+        }
+        finally {
+            setLoading(false);
+        }
+    }, [actor, action, objectType, objectId, impersonated]);
+    useEffect(() => {
+        void refresh();
+    }, [refresh]);
+    return (_jsxs(_Fragment, { children: [_jsx(PageHeader, { title: t('auditLog.page.title'), description: t('auditLog.page.description') }), error ? (_jsx(Alert, { variant: "destructive", className: "mb-4", children: _jsx(AlertDescription, { children: error }) })) : null, _jsx(Card, { className: "mb-4", children: _jsx(CardContent, { className: "pt-6", children: _jsxs("form", { onSubmit: (e) => {
+                            e.preventDefault();
+                            void refresh();
+                        }, className: "space-y-4", children: [_jsxs("div", { className: "grid gap-4 md:grid-cols-3", children: [_jsxs("div", { className: "space-y-2", children: [_jsx(Label, { htmlFor: "f-action", children: t('auditLog.filter.action') }), _jsx(Input, { id: "f-action", placeholder: "product.update", value: action, onChange: (e) => setAction(e.target.value.trim()) })] }), _jsxs("div", { className: "space-y-2", children: [_jsx(Label, { htmlFor: "f-otype", children: t('auditLog.filter.objectType') }), _jsx(Input, { id: "f-otype", placeholder: "product", value: objectType, onChange: (e) => setObjectType(e.target.value.trim()) })] }), _jsxs("div", { className: "space-y-2", children: [_jsx(Label, { htmlFor: "f-oid", children: t('auditLog.filter.objectId') }), _jsx(Input, { id: "f-oid", placeholder: "UUID", value: objectId, onChange: (e) => setObjectId(e.target.value.trim()) })] }), _jsxs("div", { className: "space-y-2", children: [_jsx(Label, { htmlFor: "f-actor", children: t('auditLog.filter.actor') }), _jsx(AdminUserPicker, { id: "f-actor", value: actor || null, onChange: (v) => setActor(v ?? '') })] }), _jsxs("div", { className: "space-y-2", children: [_jsx(Label, { htmlFor: "f-customer", children: t('auditLog.filter.impersonatedCustomer') }), _jsx(CustomerPicker, { id: "f-customer", value: impersonated || null, onChange: (v) => setImpersonated(v ?? '') })] })] }), _jsxs("div", { className: "flex gap-2", children: [_jsx(Button, { type: "submit", children: t('auditLog.filter.apply') }), _jsx(Button, { type: "button", variant: "outline", onClick: () => {
+                                            setActor('');
+                                            setAction('');
+                                            setObjectType('');
+                                            setObjectId('');
+                                            setImpersonated('');
+                                        }, children: t('auditLog.filter.clear') })] })] }) }) }), _jsx(Card, { children: _jsx(CardContent, { className: "pt-6", children: loading ? (_jsx("p", { className: "text-sm text-muted-foreground", children: t('common.state.loading') })) : rows.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: t('auditLog.empty') })) : (_jsxs(Table, { children: [_jsx(TableHeader, { children: _jsxs(TableRow, { children: [_jsx(TableHead, { children: t('auditLog.column.when') }), _jsx(TableHead, { children: t('auditLog.column.actor') }), _jsx(TableHead, { children: t('auditLog.column.action') }), _jsx(TableHead, { children: t('auditLog.column.object') }), _jsx(TableHead, {})] }) }), _jsx(TableBody, { children: rows.map((r) => (_jsxs(Fragment, { children: [_jsxs(TableRow, { children: [_jsx(TableCell, { children: formatDateTime(r.actedAt) }), _jsx(TableCell, { children: _jsx(ActorCell, { row: r }) }), _jsx(TableCell, { children: translateAuditAction(translate, r) }), _jsxs(TableCell, { children: [r.objectType, _jsx("br", {}), _jsx(ObjectIdCell, { objectType: r.objectType, objectId: r.objectId })] }), _jsx(TableCell, { children: _jsx(Button, { variant: "outline", size: "sm", onClick: () => setExpandedId(expandedId === r.id ? null : r.id), children: expandedId === r.id ? t('auditLog.action.hide') : t('auditLog.action.detail') }) })] }), expandedId === r.id ? (_jsx(TableRow, { children: _jsxs(TableCell, { colSpan: 5, children: [_jsxs("div", { className: "grid gap-4 md:grid-cols-2", children: [_jsxs("div", { children: [_jsx("strong", { children: t('auditLog.detail.before') }), _jsx("pre", { className: "mt-1 max-h-80 overflow-auto rounded-md bg-muted p-3 text-xs", children: JSON.stringify(r.stateBefore ?? null, null, 2) })] }), _jsxs("div", { children: [_jsx("strong", { children: t('auditLog.detail.after') }), _jsx("pre", { className: "mt-1 max-h-80 overflow-auto rounded-md bg-muted p-3 text-xs", children: JSON.stringify(r.stateAfter ?? null, null, 2) })] })] }), _jsxs("div", { className: "mt-2 text-xs text-muted-foreground", children: [t('auditLog.detail.ip'), " ", r.ipAddress ?? '—', " \u00B7 ", t('auditLog.detail.userAgent'), ' ', r.userAgent ? r.userAgent.slice(0, 60) : '—', " \u00B7 ", t('auditLog.detail.request'), ' ', r.requestId ?? '—', r.impersonatedCustomerAccountId ? (_jsxs(_Fragment, { children: [' ', "\u00B7 ", t('auditLog.detail.impersonatedCustomer'), ' ', r.impersonatedCustomerAccountId.slice(0, 8)] })) : null] })] }) })) : null] }, r.id))) })] })) }) })] }));
+}
+/**
+ * Maps an audit-log `objectType` to its admin detail route, when one exists.
+ * Only id-addressable detail pages are listed — object types without a
+ * standalone page (or whose route keys on a code/slug rather than the audit
+ * `objectId`) are intentionally omitted so we never produce a broken link.
+ */
+const OBJECT_ROUTE = {
+    product: (id) => `/catalog/products/${id}`,
+    order: (id) => `/orders/${id}`,
+    organization: (id) => `/organizations/${id}`,
+    customer_account: (id) => `/customers/${id}`,
+    price_list: (id) => `/price-lists/${id}`,
+    warehouse: (id) => `/warehouses/${id}`,
+    cart: (id) => `/carts/${id}`,
+    bulk_operation: (id) => `/catalog/bulk-operations/${id}`,
+    admin_user: (id) => `/admin-users#admin-user-${id}`,
+};
+/**
+ * Renders the object id, linked to the object's admin detail page when its
+ * type has one; otherwise a plain truncated id.
+ */
+function ObjectIdCell({ objectType, objectId, }) {
+    const build = OBJECT_ROUTE[objectType];
+    const short = objectId.slice(0, 8);
+    if (!build) {
+        return _jsx("span", { className: "text-xs text-muted-foreground", children: short });
+    }
+    return (_jsx(Link, { to: build(objectId), className: "text-xs text-muted-foreground underline underline-offset-2", title: objectId, children: short }));
+}
+/**
+ * Renders the actor column: an admin user's name + email (linked to the
+ * users admin page) when resolvable, the bare id as a fallback, or the
+ * "system" label when there is no actor.
+ */
+function ActorCell({ row }) {
+    const t = useTranslation('core');
+    if (!row.actorAdminUserId) {
+        return _jsx("span", { className: "text-muted-foreground", children: t('auditLog.actor.system') });
+    }
+    const name = row.actorName?.trim();
+    if (!name) {
+        // Unknown / deleted admin user — keep the id so the row is still traceable.
+        return _jsx("span", { className: "font-mono text-xs", children: row.actorAdminUserId.slice(0, 8) });
+    }
+    return (_jsxs(Link, { to: `/admin-users#admin-user-${row.actorAdminUserId}`, className: "underline underline-offset-2", children: [name, row.actorEmail ? (_jsxs("span", { className: "text-muted-foreground", children: [" (", row.actorEmail, ")"] })) : null] }));
+}
+function translateAuditAction(translate, row) {
+    const moduleId = row.actionModuleId ?? 'core';
+    const key = `auditLog.${row.action}`;
+    const label = translate(moduleId, key);
+    return label === `${moduleId}.${key}` ? row.action : label;
+}
+//# sourceMappingURL=AuditLogViewer.js.map

package/dist/admin/pages/AuditLogViewer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuditLogViewer.js","sourceRoot":"","sources":["../../../src/admin/pages/AuditLogViewer.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAkC,MAAM,OAAO,CAAC;AACnG,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrF,OAAO,EACL,KAAK,EACL,gBAAgB,EAChB,MAAM,EACN,IAAI,EACJ,WAAW,EACX,KAAK,EACL,KAAK,EACL,UAAU,EACV,KAAK,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,WAAW,EACX,QAAQ,GACT,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AA6BxF,MAAM,CAAC,OAAO,UAAU,cAAc;IACpC,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,qBAAqB,EAAE,CAAC;IACjD,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAgB,EAAE,CAAC,CAAC;IACpD,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzC,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACjD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC7C,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrD,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAElE,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAmB,EAAE;QACpD,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YACrC,IAAI,KAAK;gBAAE,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;YAC9C,IAAI,MAAM;gBAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;YACjD,IAAI,UAAU;gBAAE,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC;YAC7D,IAAI,QAAQ;gBAAE,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;YACvD,IAAI,YAAY;gBAAE,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,yBAAyB,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5F,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAA0B,IAAI,CAAC,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC5F,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;IAExD,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,OAAO,EAAE,CAAC;IACjB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEd,OAAO,CACL,8BACE,KAAC,UAAU,IACT,KAAK,EAAE,CAAC,CAAC,qBAAqB,CAAC,EAC/B,WAAW,EAAE,CAAC,CAAC,2BAA2B,CAAC,GAC3C,EAED,KAAK,CAAC,CAAC,CAAC,CACP,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,EAAC,SAAS,EAAC,MAAM,YAC3C,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,CAAC,CAAC,CAAC,IAAI,EAER,KAAC,IAAI,IAAC,SAAS,EAAC,MAAM,YACpB,KAAC,WAAW,IAAC,SAAS,EAAC,MAAM,YAC3B,gBACE,QAAQ,EAAE,CAAC,CAAY,EAAQ,EAAE;4BAC/B,CAAC,CAAC,cAAc,EAAE,CAAC;4BACnB,KAAK,OAAO,EAAE,CAAC;wBACjB,CAAC,EACD,SAAS,EAAC,WAAW,aAErB,eAAK,SAAS,EAAC,2BAA2B,aACxC,eAAK,SAAS,EAAC,WAAW,aACxB,KAAC,KAAK,IAAC,OAAO,EAAC,UAAU,YAAE,CAAC,CAAC,wBAAwB,CAAC,GAAS,EAC/D,KAAC,KAAK,IACJ,EAAE,EAAC,UAAU,EACb,WAAW,EAAC,gBAAgB,EAC5B,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,CAAC,EAAQ,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GACvD,IACE,EACN,eAAK,SAAS,EAAC,WAAW,aACxB,KAAC,KAAK,IAAC,OAAO,EAAC,SAAS,YAAE,CAAC,CAAC,4BAA4B,CAAC,GAAS,EAClE,KAAC,KAAK,IACJ,EAAE,EAAC,SAAS,EACZ,WAAW,EAAC,SAAS,EACrB,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,CAAC,CAAC,EAAQ,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAC3D,IACE,EACN,eAAK,SAAS,EAAC,WAAW,aACxB,KAAC,KAAK,IAAC,OAAO,EAAC,OAAO,YAAE,CAAC,CAAC,0BAA0B,CAAC,GAAS,EAC9D,KAAC,KAAK,IACJ,EAAE,EAAC,OAAO,EACV,WAAW,EAAC,MAAM,EAClB,KAAK,EAAE,QAAQ,EACf,QAAQ,EAAE,CAAC,CAAC,EAAQ,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GACzD,IACE,EACN,eAAK,SAAS,EAAC,WAAW,aACxB,KAAC,KAAK,IAAC,OAAO,EAAC,SAAS,YAAE,CAAC,CAAC,uBAAuB,CAAC,GAAS,EAC7D,KAAC,eAAe,IACd,EAAE,EAAC,SAAS,EACZ,KAAK,EAAE,KAAK,IAAI,IAAI,EACpB,QAAQ,EAAE,CAAC,CAAC,EAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,GACxC,IACE,EACN,eAAK,SAAS,EAAC,WAAW,aACxB,KAAC,KAAK,IAAC,OAAO,EAAC,YAAY,YAAE,CAAC,CAAC,sCAAsC,CAAC,GAAS,EAC/E,KAAC,cAAc,IACb,EAAE,EAAC,YAAY,EACf,KAAK,EAAE,YAAY,IAAI,IAAI,EAC3B,QAAQ,EAAE,CAAC,CAAC,EAAQ,EAAE,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,GAC/C,IACE,IACF,EACN,eAAK,SAAS,EAAC,YAAY,aACzB,KAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,YAAE,CAAC,CAAC,uBAAuB,CAAC,GAAU,EAC3D,KAAC,MAAM,IACL,IAAI,EAAC,QAAQ,EACb,OAAO,EAAC,SAAS,EACjB,OAAO,EAAE,GAAS,EAAE;4CAClB,QAAQ,CAAC,EAAE,CAAC,CAAC;4CACb,SAAS,CAAC,EAAE,CAAC,CAAC;4CACd,aAAa,CAAC,EAAE,CAAC,CAAC;4CAClB,WAAW,CAAC,EAAE,CAAC,CAAC;4CAChB,eAAe,CAAC,EAAE,CAAC,CAAC;wCACtB,CAAC,YAEA,CAAC,CAAC,uBAAuB,CAAC,GACpB,IACL,IACD,GACK,GACT,EAEP,KAAC,IAAI,cACH,KAAC,WAAW,IAAC,SAAS,EAAC,MAAM,YAC1B,OAAO,CAAC,CAAC,CAAC,CACT,YAAG,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,sBAAsB,CAAC,GAAK,CAC7E,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CACtB,YAAG,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,gBAAgB,CAAC,GAAK,CACvE,CAAC,CAAC,CAAC,CACF,MAAC,KAAK,eACJ,KAAC,WAAW,cACV,MAAC,QAAQ,eACP,KAAC,SAAS,cAAE,CAAC,CAAC,sBAAsB,CAAC,GAAa,EAClD,KAAC,SAAS,cAAE,CAAC,CAAC,uBAAuB,CAAC,GAAa,EACnD,KAAC,SAAS,cAAE,CAAC,CAAC,wBAAwB,CAAC,GAAa,EACpD,KAAC,SAAS,cAAE,CAAC,CAAC,wBAAwB,CAAC,GAAa,EACpD,KAAC,SAAS,KAAG,IACJ,GACC,EACd,KAAC,SAAS,cACP,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CACf,MAAC,QAAQ,eACP,MAAC,QAAQ,eACP,KAAC,SAAS,cAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,GAAa,EAClD,KAAC,SAAS,cACR,KAAC,SAAS,IAAC,GAAG,EAAE,CAAC,GAAI,GACX,EACZ,KAAC,SAAS,cAAE,oBAAoB,CAAC,SAAS,EAAE,CAAC,CAAC,GAAa,EAC3D,MAAC,SAAS,eACP,CAAC,CAAC,UAAU,EACb,cAAM,EACN,KAAC,YAAY,IAAC,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,GAAI,IACtD,EACZ,KAAC,SAAS,cACR,KAAC,MAAM,IACL,OAAO,EAAC,SAAS,EACjB,IAAI,EAAC,IAAI,EACT,OAAO,EAAE,GAAS,EAAE,CAAC,aAAa,CAAC,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAEpE,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,GACvE,GACC,IACH,EACV,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CACrB,KAAC,QAAQ,cACP,MAAC,SAAS,IAAC,OAAO,EAAE,CAAC,aACnB,eAAK,SAAS,EAAC,2BAA2B,aACxC,0BACE,2BAAS,CAAC,CAAC,wBAAwB,CAAC,GAAU,EAC9C,cAAK,SAAS,EAAC,6DAA6D,YACzE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAC3C,IACF,EACN,0BACE,2BAAS,CAAC,CAAC,uBAAuB,CAAC,GAAU,EAC7C,cAAK,SAAS,EAAC,6DAA6D,YACzE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAC1C,IACF,IACF,EACN,eAAK,SAAS,EAAC,oCAAoC,aAChD,CAAC,CAAC,oBAAoB,CAAC,OAAG,CAAC,CAAC,SAAS,IAAI,GAAG,cAAK,CAAC,CAAC,2BAA2B,CAAC,EAAE,GAAG,EACpF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,cAAK,CAAC,CAAC,yBAAyB,CAAC,EAAE,GAAG,EAClF,CAAC,CAAC,SAAS,IAAI,GAAG,EAClB,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,CACjC,8BACG,GAAG,aACD,CAAC,CAAC,sCAAsC,CAAC,EAAE,GAAG,EAChD,CAAC,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAC3C,CACJ,CAAC,CAAC,CAAC,IAAI,IACJ,IACI,GACH,CACZ,CAAC,CAAC,CAAC,IAAI,KArDK,CAAC,CAAC,EAAE,CAsDR,CACZ,CAAC,GACQ,IACN,CACT,GACW,GACT,IACN,CACJ,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,YAAY,GAA2C;IAC3D,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,qBAAqB,EAAE,EAAE;IAC1C,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE;IAC9B,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,kBAAkB,EAAE,EAAE;IAC5C,gBAAgB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,cAAc,EAAE,EAAE;IAC5C,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,gBAAgB,EAAE,EAAE;IACxC,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,eAAe,EAAE,EAAE;IACtC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE;IAC5B,cAAc,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,4BAA4B,EAAE,EAAE;IACxD,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,2BAA2B,EAAE,EAAE;CACpD,CAAC;AAEF;;;GAGG;AACH,SAAS,YAAY,CAAC,EACpB,UAAU,EACV,QAAQ,GAIT;IACC,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,eAAM,SAAS,EAAC,+BAA+B,YAAE,KAAK,GAAQ,CAAC;IACxE,CAAC;IACD,OAAO,CACL,KAAC,IAAI,IACH,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,EACnB,SAAS,EAAC,4DAA4D,EACtE,KAAK,EAAE,QAAQ,YAEd,KAAK,GACD,CACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,EAAE,GAAG,EAAwB;IAC9C,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC1B,OAAO,eAAM,SAAS,EAAC,uBAAuB,YAAE,CAAC,CAAC,uBAAuB,CAAC,GAAQ,CAAC;IACrF,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,4EAA4E;QAC5E,OAAO,eAAM,SAAS,EAAC,mBAAmB,YAAE,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAQ,CAAC;IACvF,CAAC;IACD,OAAO,CACL,MAAC,IAAI,IACH,EAAE,EAAE,2BAA2B,GAAG,CAAC,gBAAgB,EAAE,EACrD,SAAS,EAAC,8BAA8B,aAEvC,IAAI,EACJ,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAChB,gBAAM,SAAS,EAAC,uBAAuB,mBAAI,GAAG,CAAC,UAAU,SAAS,CACnE,CAAC,CAAC,CAAC,IAAI,IACH,CACR,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,SAIW,EACX,GAAmD;IAEnD,MAAM,QAAQ,GAAG,GAAG,CAAC,cAAc,IAAI,MAAM,CAAC;IAC9C,MAAM,GAAG,GAAG,YAAY,GAAG,CAAC,MAAM,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACvC,OAAO,KAAK,KAAK,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7D,CAAC"}

package/dist/backend/cli/read.d.ts

@@ -0,0 +1,20 @@
+import { z } from 'zod';
+import type { ModuleCliCommandContext } from '@endora-commerce/contracts';
+import { AuditLogEntry } from '@endora-commerce/platform/kernel';
+import type { ModuleContext } from '@endora-commerce/platform/kernel';
+declare const ArgsSchema: z.ZodObject<{
+    actor: z.ZodOptional<z.ZodString>;
+    action: z.ZodOptional<z.ZodString>;
+    objectType: z.ZodOptional<z.ZodString>;
+    objectId: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodNumber>;
+    json: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+type Args = z.infer<typeof ArgsSchema>;
+export declare function parseArgv(argv: readonly string[]): Args | {
+    error: string;
+};
+export declare function formatTable(rows: readonly AuditLogEntry[]): string;
+export declare function read({ ctx, argv, out, err, }: ModuleCliCommandContext<ModuleContext>): Promise<number>;
+export {};
+//# sourceMappingURL=read.d.ts.map

package/dist/backend/cli/read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../src/backend/cli/read.ts"],"names":[],"mappings":"AAqDA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAYtE,QAAA,MAAM,UAAU;;;;;;;iBAOd,CAAC;AAEH,KAAK,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AASvC,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CA2B3E;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,SAAS,aAAa,EAAE,GAAG,MAAM,CAuBlE;AAOD,wBAAsB,IAAI,CAAC,EACzB,GAAG,EACH,IAAI,EACJ,GAAG,EACH,GAAG,GACJ,EAAE,uBAAuB,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAsB1D"}

package/dist/backend/cli/read.js

@@ -0,0 +1,94 @@
+import { z } from 'zod';
+import { AuditLogEntry } from '@endora-commerce/platform/kernel';
+/**
+ * The full `--help` text is the command's `help` declaration in `manifest.ts`,
+ * printed by the host before it composes (D-102 — the credential is host
+ * access, not a working connection string). This is the one line the error path
+ * needs, so a refused argument still says where to look.
+ */
+const USAGE_LINE = 'usage: audit_logs read [--actor] [--action] [--object-type] [--object-id] ' +
+    '[--limit] [--json] — run with --help for the filters';
+const ArgsSchema = z.object({
+    actor: z.string().uuid().optional(),
+    action: z.string().min(1).optional(),
+    objectType: z.string().min(1).optional(),
+    objectId: z.string().min(1).optional(),
+    limit: z.number().int().min(1).max(500).default(100),
+    json: z.boolean().default(false),
+});
+const FLAGS = {
+    '--actor': 'actor',
+    '--action': 'action',
+    '--object-type': 'objectType',
+    '--object-id': 'objectId',
+};
+export function parseArgv(argv) {
+    const candidate = {};
+    for (const arg of argv) {
+        if (arg === '--json') {
+            candidate['json'] = true;
+            continue;
+        }
+        const eq = arg.indexOf('=');
+        const [flag, value] = eq === -1 ? [arg, undefined] : [arg.slice(0, eq), arg.slice(eq + 1)];
+        const key = FLAGS[flag];
+        if (key !== undefined) {
+            if (value === undefined)
+                return { error: `${flag} needs a value` };
+            candidate[key] = value;
+            continue;
+        }
+        if (flag === '--limit') {
+            if (value === undefined)
+                return { error: '--limit needs a value' };
+            candidate['limit'] = Number.parseInt(value, 10);
+            continue;
+        }
+        return { error: `unknown argument: ${arg}` };
+    }
+    const parsed = ArgsSchema.safeParse(candidate);
+    if (!parsed.success) {
+        return { error: parsed.error.issues.map((issue) => issue.message).join('; ') };
+    }
+    return parsed.data;
+}
+export function formatTable(rows) {
+    if (rows.length === 0)
+        return '(no entries match)';
+    const width = (pick, header) => Math.max(header.length, ...rows.map((row) => pick(row).length));
+    const actor = (row) => row.actorAdminUserId ?? '—';
+    const object = (row) => `${row.objectType}/${row.objectId}`;
+    const widths = {
+        at: 24,
+        actor: width(actor, 'ACTOR'),
+        action: width((row) => row.action, 'ACTION'),
+        object: width(object, 'OBJECT'),
+    };
+    const pad = (value, to) => value.padEnd(to);
+    const lines = [
+        `${pad('ACTED AT', widths.at)}  ${pad('ACTOR', widths.actor)}  ` +
+            `${pad('ACTION', widths.action)}  ${pad('OBJECT', widths.object)}`,
+        ...rows.map((row) => `${pad(row.actedAt.toISOString(), widths.at)}  ${pad(actor(row), widths.actor)}  ` +
+            `${pad(row.action, widths.action)}  ${pad(object(row), widths.object)}`),
+    ];
+    return lines.join('\n');
+}
+export async function read({ ctx, argv, out, err, }) {
+    const parsed = parseArgv(argv);
+    if ('error' in parsed) {
+        err(`${USAGE_LINE}\n\nerror: ${parsed.error}`);
+        return 1;
+    }
+    const em = ctx.cradle().emFactory();
+    // A read, and only a read: no `em.create`, no `persist`, no `flush`. The
+    // trail is append-only and the Command Bus is its one writer.
+    const rows = await em.find(AuditLogEntry, {
+        ...(parsed.actor ? { actorAdminUserId: parsed.actor } : {}),
+        ...(parsed.action ? { action: parsed.action } : {}),
+        ...(parsed.objectType ? { objectType: parsed.objectType } : {}),
+        ...(parsed.objectId ? { objectId: parsed.objectId } : {}),
+    }, { orderBy: { actedAt: 'desc' }, limit: parsed.limit });
+    out(parsed.json ? JSON.stringify(rows, null, 2) : formatTable(rows));
+    return 0;
+}
+//# sourceMappingURL=read.js.map

package/dist/backend/cli/read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../src/backend/cli/read.ts"],"names":[],"mappings":"AAqDA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAGjE;;;;;GAKG;AACH,MAAM,UAAU,GACd,4EAA4E;IAC5E,sDAAsD,CAAC;AAEzD,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACjC,CAAC,CAAC;AAIH,MAAM,KAAK,GAAyC;IAClD,SAAS,EAAE,OAAO;IAClB,UAAU,EAAE,QAAQ;IACpB,eAAe,EAAE,YAAY;IAC7B,aAAa,EAAE,UAAU;CAC1B,CAAC;AAEF,MAAM,UAAU,SAAS,CAAC,IAAuB;IAC/C,MAAM,SAAS,GAA4B,EAAE,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;YACzB,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3F,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACnE,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACvB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;YACnE,SAAS,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAChD,SAAS;QACX,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,qBAAqB,GAAG,EAAE,EAAE,CAAC;IAC/C,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAA8B;IACxD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,oBAAoB,CAAC;IACnD,MAAM,KAAK,GAAG,CAAC,IAAoC,EAAE,MAAc,EAAU,EAAE,CAC7E,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,CAAC,GAAkB,EAAU,EAAE,CAAC,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC;IAC1E,MAAM,MAAM,GAAG,CAAC,GAAkB,EAAU,EAAE,CAAC,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;IACnF,MAAM,MAAM,GAAG;QACb,EAAE,EAAE,EAAE;QACN,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC;QAC5B,MAAM,EAAE,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC;QAC5C,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC;KAChC,CAAC;IACF,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,EAAU,EAAU,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG;QACZ,GAAG,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;YAC9D,GAAG,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;QACpE,GAAG,IAAI,CAAC,GAAG,CACT,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;YAClF,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAC1E;KACF,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,EACzB,GAAG,EACH,IAAI,EACJ,GAAG,EACH,GAAG,GACoC;IACvC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,UAAU,cAAc,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,EAAmB,CAAC,SAAS,EAAE,CAAC;IACrD,yEAAyE;IACzE,8DAA8D;IAC9D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CACxB,aAAa,EACb;QACE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,EACD,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CACtD,CAAC;IACF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/backend/commands/recent-activity-visibility.commands.d.ts

@@ -0,0 +1,31 @@
+import type { Command } from '@endora-commerce/platform/commands';
+import type { RecentActivityCatalog } from '../services/recent-activity-catalog.js';
+/**
+ * The operator's dashboard-visibility flip — feature 080, T042j / D-163.1,
+ * Constitution XIII.
+ *
+ * A Command rather than a settings write for the reason the activation flip is
+ * one (`_lifecycle/commands/activation.commands.ts`): there is no `setting.*`
+ * Command to reuse, and `SettingsAdminService.setValue` audits by hand after
+ * `em.flush()` and outside any transaction. The Setting is `hidden`, so it does
+ * not render on the generic Settings screen at all — this is its only door, the
+ * same asymmetry activation has.
+ *
+ * The refusal is taken **before** the Command opens a transaction, and it is a
+ * refusal rather than a no-op: a control that silently does nothing is worse
+ * than an absent one, because the operator believes they switched something.
+ */
+export interface SetRecentActivityVisibilityInput {
+    moduleId: string;
+    visible: boolean;
+}
+/**
+ * Refuse a module that declares no eligibility, naming the difference between
+ * the two axes so the message is actionable.
+ */
+export declare function assertRecentActivityVisibilityWritable(catalog: RecentActivityCatalog, moduleId: string): string;
+export declare function makeSetRecentActivityVisibilityCommand(catalog: RecentActivityCatalog, input: SetRecentActivityVisibilityInput): Command<{
+    moduleId: string;
+    visible: boolean;
+}>;
+//# sourceMappingURL=recent-activity-visibility.commands.d.ts.map

package/dist/backend/commands/recent-activity-visibility.commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recent-activity-visibility.commands.d.ts","sourceRoot":"","sources":["../../../src/backend/commands/recent-activity-visibility.commands.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oCAAoC,CAAC;AAGlE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAEpF;;;;;;;;;;;;;;GAcG;AAEH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAgB,sCAAsC,CACpD,OAAO,EAAE,qBAAqB,EAC9B,QAAQ,EAAE,MAAM,GACf,MAAM,CAYR;AAED,wBAAgB,sCAAsC,CACpD,OAAO,EAAE,qBAAqB,EAC9B,KAAK,EAAE,gCAAgC,GACtC,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CA0CjD"}

package/dist/backend/commands/recent-activity-visibility.commands.js

@@ -0,0 +1,55 @@
+import { ERROR_CODES } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { Setting } from '@endora-commerce/platform/kernel';
+/**
+ * Refuse a module that declares no eligibility, naming the difference between
+ * the two axes so the message is actionable.
+ */
+export function assertRecentActivityVisibilityWritable(catalog, moduleId) {
+    const entry = catalog.eligibleModules().find((m) => m.moduleId === moduleId);
+    if (!entry) {
+        throw new HttpError(404, ERROR_CODES.MODULE_NOT_FOUND, `Module "${moduleId}" declares no recent-activity eligibility, so it contributes ` +
+            `nothing to the dashboard card and there is nothing to show or hide. Eligibility is ` +
+            `the module author's declaration; only what to do with it is yours.`);
+    }
+    return entry.settingCode;
+}
+export function makeSetRecentActivityVisibilityCommand(catalog, input) {
+    const settingCode = assertRecentActivityVisibilityWritable(catalog, input.moduleId);
+    return {
+        action: 'module.recent_activity_visibility.set',
+        objectType: 'module',
+        objectId: input.moduleId,
+        capture: async ({ em }) => {
+            const setting = await em.findOne(Setting, { code: settingCode });
+            const stored = setting?.globalValue ?? setting?.defaultValue;
+            return {
+                moduleId: input.moduleId,
+                settingCode,
+                // The **resolved** answer, not the raw jsonb: `global_value` is `null`
+                // both for "the operator never chose" and for a literal JSON null, so
+                // recording it would leave two consecutive audit rows unable to say
+                // what the module's visibility actually was at either moment. The same
+                // reasoning the activation command records for itself.
+                visible: typeof stored === 'boolean' ? stored : true,
+            };
+        },
+        run: async ({ em }) => {
+            const setting = await em.findOne(Setting, { code: settingCode });
+            if (!setting) {
+                // The row is reconciled from the derived settings manifest — at boot
+                // for a module this build ships, by `install` for a package. Its
+                // absence is a platform state, not an operator error.
+                throw new HttpError(500, ERROR_CODES.SETTING_NOT_REGISTERED, `Module "${input.moduleId}" is eligible for the dashboard card, but its ` +
+                    `visibility setting "${settingCode}" is not registered.`);
+            }
+            setting.globalValue = input.visible;
+            await em.flush();
+            return {
+                result: { moduleId: input.moduleId, visible: input.visible },
+                after: { moduleId: input.moduleId, settingCode, visible: input.visible },
+            };
+        },
+    };
+}
+//# sourceMappingURL=recent-activity-visibility.commands.js.map

package/dist/backend/commands/recent-activity-visibility.commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recent-activity-visibility.commands.js","sourceRoot":"","sources":["../../../src/backend/commands/recent-activity-visibility.commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,kCAAkC,CAAC;AAwB3D;;;GAGG;AACH,MAAM,UAAU,sCAAsC,CACpD,OAA8B,EAC9B,QAAgB;IAEhB,MAAM,KAAK,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IAC7E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,gBAAgB,EAC5B,WAAW,QAAQ,+DAA+D;YAChF,qFAAqF;YACrF,oEAAoE,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,WAAW,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,sCAAsC,CACpD,OAA8B,EAC9B,KAAuC;IAEvC,MAAM,WAAW,GAAG,sCAAsC,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAEpF,OAAO;QACL,MAAM,EAAE,uCAAuC;QAC/C,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;YACxB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,OAAO,EAAE,WAAW,IAAI,OAAO,EAAE,YAAY,CAAC;YAC7D,OAAO;gBACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,WAAW;gBACX,uEAAuE;gBACvE,sEAAsE;gBACtE,oEAAoE;gBACpE,uEAAuE;gBACvE,uDAAuD;gBACvD,OAAO,EAAE,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;aACrD,CAAC;QACJ,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;YACpB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,qEAAqE;gBACrE,iEAAiE;gBACjE,sDAAsD;gBACtD,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,sBAAsB,EAClC,WAAW,KAAK,CAAC,QAAQ,gDAAgD;oBACvE,uBAAuB,WAAW,sBAAsB,CAC3D,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC;YACpC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO;gBACL,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;gBAC5D,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;aACzE,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/backend/index.d.ts

@@ -0,0 +1,91 @@
+import type { AuditReferenceRegistryPort } from '@endora-commerce/contracts';
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { CommandBus } from '@endora-commerce/platform/commands';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+import type { ModuleContext } from '@endora-commerce/platform/kernel';
+import type { RequireAdminFactory } from '@endora-commerce/platform/kernel';
+import type { AuditActorIdentity } from './routes.admin.js';
+import { RecentActivityCatalog, type RecentActivityDeclarationSource } from './services/recent-activity-catalog.js';
+import { RecentActivityService } from './services/recent-activity-service.js';
+import { RecentActivityVisibility } from './services/recent-activity-visibility.js';
+/**
+ * `audit_logs` — the compliance surface that was a passenger (feature 072,
+ * wave 1, T084).
+ *
+ * The module owned two route files and a service and registered none of them.
+ * `admin_users/plugin.ts` imported both route modules, constructed
+ * `RecentActivityService` itself and mounted the lot inside its own plugin, so
+ * the audit log existed for exactly as long as the admin-users module happened
+ * to be composed. Its service and entity moved to the kernel in T016 —
+ * `AuditPort` is what every module writes through — and what is left here
+ * is the *reading* half, which is this module's own.
+ *
+ * **`auditActorResolver` is a contribution, not a dependency**, and the
+ * distinction is the whole design of this file. Turning a bare actor id into a
+ * name and an e-mail needs `admin_users`, but needing it for a *column* is not
+ * the same as needing it to function. So the name is owned and defaulted here,
+ * a composition root that ships `admin_users` overrides it, and the manifest
+ * declares no edge — because a `dependencies` entry would make the lifecycle
+ * refuse to disable `admin_users` while the audit log is on, which is precisely
+ * backwards.
+ *
+ * **What that buys, exactly — D-102.** The enrichment degrades and the *record*
+ * does not: with `admin_users` absent the audit rows still render, with raw
+ * actor ids in the actor column. That is a claim about this module's own
+ * handler and it stops there. The **route** is guarded by `requireAdmin`, whose
+ * permission check reads `adminUserReadPort` since feature 075 Phase C, so on a
+ * deployment that does not ship `admin_users` no admin-authenticated request
+ * reaches this handler at all. Reading the trail when the admin identity
+ * subsystem is itself absent needs a surface that is not an admin-authenticated
+ * HTTP route: `pnpm --filter backend run audit:read`, whose credential is
+ * access to the host rather than a session.
+ *
+ * This paragraph used to say that "an operator investigating an incident wants
+ * the record more, not less, when part of the platform is off". The sentiment
+ * is right and the module could not deliver it over HTTP; the withdrawal is
+ * recorded rather than quietly narrowed, because the interesting content of
+ * that sentence was the part that turned out to be false.
+ *
+ * The root registers a **gated** resolver, since deciding what "`admin_users`
+ * is present" means is a composition-root question, not one this module should
+ * answer by hard-coding another module's id. When `admin_users` converts it
+ * publishes the resolver itself and the root's entry disappears.
+ */
+export interface AuditLogsCradle {
+    readonly emFactory: () => EntityManager;
+    readonly auditLogService: AuditPort;
+    readonly requireAdmin: RequireAdminFactory;
+    readonly auditActorResolver: ((ids: string[]) => Promise<AuditActorIdentity[]>) | undefined;
+    readonly auditReferenceRegistry: AuditReferenceRegistryPort;
+    readonly recentActivityService: RecentActivityService;
+    readonly recentActivityCatalog: RecentActivityCatalog;
+    readonly recentActivityVisibility: RecentActivityVisibility;
+    /**
+     * Which modules this composition ships, and what each declares — a
+     * composition-root input by nature and therefore a platform-owned container
+     * name, never a port (Constitution I: a module may not decide which modules a
+     * deployment has). It is the input the four retired action tables are derived
+     * from, and reading it here rather than importing `_lifecycle`'s registry is
+     * what keeps the derivation free of a cross-module reach.
+     */
+    readonly resolvedModuleRegistry: ReadonlyArray<RecentActivityDeclarationSource>;
+    /** Absent in a composition with no Command Bus; the card still reads. */
+    readonly commandBus: CommandBus | undefined;
+}
+export declare function registerModule(ctx: ModuleContext): void;
+/**
+ * This module owns **no persisted entity**, and says so with an empty array
+ * rather than by omission (D-168).
+ *
+ * The two are not the same thing to the platform. When the package is
+ * *installed*, `src/packages/package-runtime.ts` reads `exported['entities']`
+ * and answers a missing export with `[]` — so "this module has no table" and
+ * "somebody forgot the array" arrive at the host as the same silence, and the
+ * only symptom of the second is a query against a table nobody created. The
+ * declaration is what makes the first case a statement.
+ *
+ * A first entity added here goes in this array in the same merge request, and
+ * `test/unit/packages/module-package-entity-surface.test.ts` is what says so.
+ */
+export declare const entities: readonly never[];
+//# sourceMappingURL=index.d.ts.map