@endora-commerce/mod-audit-logs 0.100.0

package/dist/backend/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAEtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAI5E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAI5D,OAAO,EACL,qBAAqB,EACrB,KAAK,+BAA+B,EACrC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AAEpF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,aAAa,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,kBAAkB,EACvB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,GAClD,SAAS,CAAC;IACd,QAAQ,CAAC,sBAAsB,EAAE,0BAA0B,CAAC;IAC5D,QAAQ,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;IACtD,QAAQ,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;IACtD,QAAQ,CAAC,wBAAwB,EAAE,wBAAwB,CAAC;IAC5D;;;;;;;OAOG;IACH,QAAQ,CAAC,sBAAsB,EAAE,aAAa,CAAC,+BAA+B,CAAC,CAAC;IAChF,yEAAyE;IACzE,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,SAAS,CAAC;CAC7C;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAiIvD;AAGD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,QAAQ,EAAE,SAAS,KAAK,EAAO,CAAC"}

package/dist/backend/index.js

@@ -0,0 +1,117 @@
+import { lazyPort } from '@endora-commerce/platform/kernel';
+import { effectiveState } from '@endora-commerce/platform/kernel';
+import { ModuleDisabledError } from '@endora-commerce/platform/kernel';
+import { registerAuditLogAdminRoutes } from './routes.admin.js';
+import { registerRecentActivityRoutes } from './routes.admin.recent-activity.js';
+import { AuditReferenceRegistry } from './services/audit-reference-registry.js';
+import { RecentActivityCatalog, } from './services/recent-activity-catalog.js';
+import { RecentActivityService } from './services/recent-activity-service.js';
+import { RecentActivityVisibility } from './services/recent-activity-visibility.js';
+export function registerModule(ctx) {
+    /**
+     * Turning an actor id into a name, through the contribution point above.
+     *
+     * One closure, two readers — the audit-log list and the dashboard card — so
+     * there is exactly one place that decides what an absent directory means, and
+     * exactly one `catch` for a reviewer to check. The dashboard card used to
+     * decide it for itself, by running `select … from admin_users` (feature 075,
+     * D-87).
+     */
+    const resolveActors = async (ids) => {
+        const resolve = ctx.cradle().auditActorResolver;
+        if (resolve === undefined)
+            return [];
+        try {
+            return await resolve(ids);
+        }
+        catch (error) {
+            // The enrichment is optional; the record is not. Anything else is
+            // a real failure and must not be swallowed into a blank column.
+            if (error instanceof ModuleDisabledError)
+                return [];
+            throw error;
+        }
+    };
+    ctx.di.register({
+        /**
+         * Who can turn one of *their* ids into a name and a link (feature 075,
+         * D-87). A **contribution seam**, so a plain `ctx.di.register`: contributors
+         * push from their own boot hooks, and a gate here would refuse them at a
+         * point in the boot where there is nothing to answer.
+         *
+         * The presence predicate is this module's enumeration policy — skip — and it
+         * is asked per read rather than per registration, so an operator's flip
+         * takes effect without a restart.
+         */
+        auditReferenceRegistry: ctx
+            .asFunction(() => new AuditReferenceRegistry((moduleId) => effectiveState.isPresent(moduleId)))
+            .singleton(),
+        /**
+         * The four host-owned action tables, as one derivation (D-163.1).
+         *
+         * A singleton, and legitimately so: the composed manifest set does not
+         * change while the process runs — an installed package is discovered before
+         * the first module registers — so what is captured here is a fact about the
+         * build. The *operator's* half is captured nowhere and is asked per request,
+         * which is the half that moves.
+         */
+        recentActivityCatalog: ctx
+            .asFunction(({ resolvedModuleRegistry }) => new RecentActivityCatalog(resolvedModuleRegistry))
+            .singleton(),
+        /**
+         * The operator's half, and the reason `settingsReadPort` arrives as a
+         * `lazyPort` rather than off the cradle: this registration is a singleton,
+         * and a cradle parameter would resolve the settings reader **once**, when
+         * the registration is first constructed. Awilix's strict mode refuses that
+         * capture and `check:port-dependencies` reports it — rightly, since a
+         * captured reader is a preference frozen at composition, which is exactly
+         * what an operator flipping a switch must not meet.
+         */
+        recentActivityVisibility: ctx
+            .asFunction(({ recentActivityCatalog }) => new RecentActivityVisibility(recentActivityCatalog, lazyPort(ctx, 'settingsReadPort')))
+            .singleton(),
+        recentActivityService: ctx
+            .asFunction(({ emFactory, auditReferenceRegistry, recentActivityCatalog, recentActivityVisibility, }) => new RecentActivityService(emFactory, recentActivityCatalog, recentActivityVisibility, resolveActors, auditReferenceRegistry))
+            .singleton(),
+        // Contribution point, defaulted to absent by its owner. A deployment
+        // without `admin_users` reads the audit log with raw actor ids rather than
+        // failing to read it.
+        auditActorResolver: ctx
+            .asFunction(() => undefined)
+            .singleton(),
+    });
+    ctx.routes(async (app) => {
+        const { auditLogService, recentActivityService, recentActivityCatalog, recentActivityVisibility, requireAdmin, commandBus, } = ctx.cradle();
+        await registerAuditLogAdminRoutes(app, {
+            auditLogService,
+            requireAdmin,
+            // Resolved per request, and per request is what makes the degradation
+            // work: a contributor captured once would keep naming actors long after
+            // its module went away.
+            resolveActors,
+        });
+        await registerRecentActivityRoutes(app, {
+            recentActivityService,
+            recentActivityCatalog,
+            recentActivityVisibility,
+            requireAdmin,
+            ...(commandBus ? { commandBus } : {}),
+        });
+    });
+}
+/**
+ * This module owns **no persisted entity**, and says so with an empty array
+ * rather than by omission (D-168).
+ *
+ * The two are not the same thing to the platform. When the package is
+ * *installed*, `src/packages/package-runtime.ts` reads `exported['entities']`
+ * and answers a missing export with `[]` — so "this module has no table" and
+ * "somebody forgot the array" arrive at the host as the same silence, and the
+ * only symptom of the second is a query against a table nobody created. The
+ * declaration is what makes the first case a statement.
+ *
+ * A first entity added here goes in this array in the same merge request, and
+ * `test/unit/packages/module-package-entity-surface.test.ts` is what says so.
+ */
+export const entities = [];
+//# sourceMappingURL=index.js.map

package/dist/backend/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAG5D,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAEvE,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EACL,qBAAqB,GAEtB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AAsEpF,MAAM,UAAU,cAAc,CAAC,GAAkB;IAC/C;;;;;;;;OAQG;IACH,MAAM,aAAa,GAAG,KAAK,EAAE,GAAa,EAAiC,EAAE;QAC3E,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,EAAmB,CAAC,kBAAkB,CAAC;QACjE,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kEAAkE;YAClE,gEAAgE;YAChE,IAAI,KAAK,YAAY,mBAAmB;gBAAE,OAAO,EAAE,CAAC;YACpD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC;QACd;;;;;;;;;WASG;QACH,sBAAsB,EAAE,GAAG;aACxB,UAAU,CACT,GAA+B,EAAE,CAC/B,IAAI,sBAAsB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAC/E;aACA,SAAS,EAAE;QAEd;;;;;;;;WAQG;QACH,qBAAqB,EAAE,GAAG;aACvB,UAAU,CACT,CAAC,EAAE,sBAAsB,EAAmB,EAAE,EAAE,CAC9C,IAAI,qBAAqB,CAAC,sBAAsB,CAAC,CACpD;aACA,SAAS,EAAE;QAEd;;;;;;;;WAQG;QACH,wBAAwB,EAAE,GAAG;aAC1B,UAAU,CACT,CAAC,EAAE,qBAAqB,EAAmB,EAAE,EAAE,CAC7C,IAAI,wBAAwB,CAC1B,qBAAqB,EACrB,QAAQ,CAAmB,GAAG,EAAE,kBAAkB,CAAC,CACpD,CACJ;aACA,SAAS,EAAE;QAEd,qBAAqB,EAAE,GAAG;aACvB,UAAU,CACT,CAAC,EACC,SAAS,EACT,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,GACR,EAAE,EAAE,CACpB,IAAI,qBAAqB,CACvB,SAAS,EACT,qBAAqB,EACrB,wBAAwB,EACxB,aAAa,EACb,sBAAsB,CACvB,CACJ;aACA,SAAS,EAAE;QAEd,qEAAqE;QACrE,2EAA2E;QAC3E,sBAAsB;QACtB,kBAAkB,EAAE,GAAG;aACpB,UAAU,CAAC,GAAmE,EAAE,CAAC,SAAS,CAAC;aAC3F,SAAS,EAAE;KACf,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,EACJ,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,YAAY,EACZ,UAAU,GACX,GAAG,GAAG,CAAC,MAAM,EAAmB,CAAC;QAElC,MAAM,2BAA2B,CAAC,GAAG,EAAE;YACrC,eAAe;YACf,YAAY;YACZ,sEAAsE;YACtE,wEAAwE;YACxE,wBAAwB;YACxB,aAAa;SACd,CAAC,CAAC;QAEH,MAAM,4BAA4B,CAAC,GAAG,EAAE;YACtC,qBAAqB;YACrB,qBAAqB;YACrB,wBAAwB;YACxB,YAAY;YACZ,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAGD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAqB,EAAE,CAAC"}

package/dist/backend/routes.admin.d.ts

@@ -0,0 +1,29 @@
+import type { FastifyInstance } from 'fastify';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+import type { RequireAdminFactory } from '@endora-commerce/platform/kernel';
+/**
+ * Admin Audit Log query route (T195 / FR-084).
+ *
+ * Always reads — never mutates — the append-only audit log. Filters are
+ * accepted as query params (`filter[actor]`, `filter[action]`, …); a
+ * default `limit=100` keeps the page lightweight, capped at 500.
+ */
+/** Minimal actor identity used to enrich the audit-log actor column. */
+export interface AuditActorIdentity {
+    id: string;
+    firstName: string;
+    lastName: string;
+    email: string;
+}
+export interface AuditLogAdminDeps {
+    auditLogService: AuditPort;
+    requireAdmin: RequireAdminFactory;
+    /**
+     * Resolves admin-user identities for the actor column (name + email instead
+     * of a bare id). Unknown ids may be omitted. Optional — when absent the
+     * column falls back to the raw id.
+     */
+    resolveActors?: (ids: string[]) => Promise<AuditActorIdentity[]>;
+}
+export declare function registerAuditLogAdminRoutes(app: FastifyInstance, deps: AuditLogAdminDeps): Promise<void>;
+//# sourceMappingURL=routes.admin.d.ts.map

package/dist/backend/routes.admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.d.ts","sourceRoot":"","sources":["../../src/backend/routes.admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAElE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE5E;;;;;;GAMG;AAEH,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,eAAe,EAAE,SAAS,CAAC;IAC3B,YAAY,EAAE,mBAAmB,CAAC;IAClC;;;;OAIG;IACH,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;CAClE;AAED,wBAAsB,2BAA2B,CAC/C,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,IAAI,CAAC,CA+Bf"}

package/dist/backend/routes.admin.js

@@ -0,0 +1,85 @@
+export async function registerAuditLogAdminRoutes(app, deps) {
+    const { auditLogService, requireAdmin, resolveActors } = deps;
+    app.get('/api/v1/admin/audit-log', { preHandler: requireAdmin('audit_log:read') }, async (request) => {
+        const q = (request.query ?? {});
+        const limitNum = q['limit'] ? Number.parseInt(q['limit'], 10) : undefined;
+        const entries = await auditLogService.query({
+            ...(q['filter[actor]'] ? { actorAdminUserId: q['filter[actor]'] } : {}),
+            ...(q['filter[customer]']
+                ? { impersonatedCustomerAccountId: q['filter[customer]'] }
+                : {}),
+            ...(q['filter[action]'] ? { action: q['filter[action]'] } : {}),
+            ...(q['filter[objectType]'] ? { objectType: q['filter[objectType]'] } : {}),
+            ...(q['filter[objectId]'] ? { objectId: q['filter[objectId]'] } : {}),
+            ...(limitNum !== undefined && Number.isFinite(limitNum) ? { limit: limitNum } : {}),
+        });
+        // Enrich the actor column with name + email (one batched lookup).
+        const actorIds = entries
+            .map((e) => e.actorAdminUserId)
+            .filter((id) => Boolean(id));
+        const actors = resolveActors ? await resolveActors(actorIds) : [];
+        const actorById = new Map(actors.map((a) => [a.id, a]));
+        return {
+            data: entries.map((e) => serialize(e, actorById)),
+            pagination: { cursor: null, hasMore: false, limit: entries.length },
+        };
+    });
+}
+function serialize(e, actorById) {
+    const actor = e.actorAdminUserId ? actorById.get(e.actorAdminUserId) : undefined;
+    return {
+        id: e.id,
+        actorAdminUserId: e.actorAdminUserId ?? null,
+        actorName: actor ? `${actor.firstName} ${actor.lastName}`.trim() : null,
+        actorEmail: actor?.email ?? null,
+        impersonatedCustomerAccountId: e.impersonatedCustomerAccountId ?? null,
+        actedAt: e.actedAt.toISOString(),
+        action: e.action,
+        actionModuleId: moduleIdForAuditAction(e.action),
+        objectType: e.objectType,
+        objectId: e.objectId,
+        stateBefore: e.stateBefore ?? null,
+        stateAfter: e.stateAfter ?? null,
+        ipAddress: e.ipAddress ?? null,
+        userAgent: e.userAgent ?? null,
+        requestId: e.requestId ?? null,
+    };
+}
+function moduleIdForAuditAction(action) {
+    if (action.startsWith('setting.'))
+        return 'settings';
+    if (action.startsWith('setting_group.'))
+        return 'settings';
+    if (action.startsWith('module.'))
+        return 'core';
+    if (action.startsWith('product.'))
+        return 'catalog';
+    if (action.startsWith('attribute_set.'))
+        return 'catalog';
+    if (action.startsWith('gallery.'))
+        return 'catalog';
+    if (action.startsWith('attachment.'))
+        return 'catalog';
+    if (action.startsWith('attachment_type.'))
+        return 'catalog';
+    if (action.startsWith('product_link.'))
+        return 'catalog';
+    if (action.startsWith('grouped_item.'))
+        return 'catalog';
+    if (action.startsWith('bundle_slot.'))
+        return 'catalog';
+    if (action.startsWith('bundle_slot_option.'))
+        return 'catalog';
+    if (action.startsWith('sales_channel.'))
+        return 'sales_channels';
+    if (action.startsWith('api_key.'))
+        return 'core';
+    if (action.startsWith('impersonation.'))
+        return 'core';
+    if (action.startsWith('order.'))
+        return 'core';
+    if (action.startsWith('organization.'))
+        return 'core';
+    return 'core';
+}
+//# sourceMappingURL=routes.admin.js.map

package/dist/backend/routes.admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.js","sourceRoot":"","sources":["../../src/backend/routes.admin.ts"],"names":[],"mappings":"AAgCA,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,GAAoB,EACpB,IAAuB;IAEvB,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAE9D,GAAG,CAAC,GAAG,CACL,yBAAyB,EACzB,EAAE,UAAU,EAAE,YAAY,CAAC,gBAAgB,CAAC,EAAE,EAC9C,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAuC,CAAC;QACtE,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC;YAC1C,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,eAAe,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC;gBACvB,CAAC,CAAC,EAAE,6BAA6B,EAAE,CAAC,CAAC,kBAAkB,CAAE,EAAE;gBAC3D,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,gBAAgB,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,oBAAoB,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,kBAAkB,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpF,CAAC,CAAC;QACH,kEAAkE;QAClE,MAAM,QAAQ,GAAG,OAAO;aACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;aAC9B,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,OAAO;YACL,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACjD,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE;SACpE,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,CAAgB,EAAE,SAA0C;IAC7E,MAAM,KAAK,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,IAAI,IAAI;QAC5C,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;QACvE,UAAU,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI;QAChC,6BAA6B,EAAE,CAAC,CAAC,6BAA6B,IAAI,IAAI;QACtE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE;QAChC,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,cAAc,EAAE,sBAAsB,CAAC,CAAC,CAAC,MAAM,CAAC;QAChD,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;QAClC,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;QAChC,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;QAC9B,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;QAC9B,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;KAC/B,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAc;IAC5C,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IACrD,IAAI,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,UAAU,CAAC;IAC3D,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,MAAM,CAAC;IAChD,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAC;IACvD,IAAI,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,SAAS,CAAC;IACzD,IAAI,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,SAAS,CAAC;IACzD,IAAI,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,SAAS,CAAC;IACxD,IAAI,MAAM,CAAC,UAAU,CAAC,qBAAqB,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/D,IAAI,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACjE,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,MAAM,CAAC;IACjD,IAAI,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,MAAM,CAAC;IACvD,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAC;IAC/C,IAAI,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,MAAM,CAAC;IACtD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/backend/routes.admin.recent-activity.d.ts

@@ -0,0 +1,126 @@
+import type { FastifyInstance } from 'fastify';
+import { z } from 'zod';
+import type { CommandBus } from '@endora-commerce/platform/commands';
+import type { RecentActivityCatalog } from './services/recent-activity-catalog.js';
+import type { RecentActivityService } from './services/recent-activity-service.js';
+import type { RecentActivityVisibility } from './services/recent-activity-visibility.js';
+import type { RequireAdminFactory } from '@endora-commerce/platform/kernel';
+/**
+ * Feature 024 — `GET /api/v1/admin/audit-log/recent-activity`, and since
+ * feature 080's T042j the two routes behind the operator's control over it.
+ *
+ * **The response schema is derived** (D-163.1). `action` and `module` used to
+ * be `z.enum` over two host-written arrays — the second three members long,
+ * against a server that could emit four — so the contract and the server
+ * disagreed about `prompt_action.execute` for as long as feature 043 had
+ * shipped. Both enums are built from the composed modules' `recentActivity`
+ * declarations now, which is the same input the query's `$in` is built from, so
+ * they cannot disagree with it and a packaged module is in both.
+ *
+ * The **declaration** axis decides the schema and the **operator** axis decides
+ * the data, deliberately: a schema that narrowed to the currently-visible set
+ * would change shape when an operator flipped a switch, and a client holding
+ * the OpenAPI document would see a breaking change in a display preference.
+ *
+ * Permission: the same `audit_log:read` scope as the wider audit-log read
+ * endpoint for the card itself; `platform.modules.activate` for the visibility
+ * surface, which is the code that already governs this operator's per-module
+ * switches on the screen the control renders on.
+ */
+export interface RecentActivityAdminDeps {
+    recentActivityService: RecentActivityService;
+    recentActivityCatalog: RecentActivityCatalog;
+    recentActivityVisibility: RecentActivityVisibility;
+    requireAdmin: RequireAdminFactory;
+    /**
+     * Omitted in a composition with no Command Bus — the card still renders,
+     * because reading the dashboard must not depend on being able to reconfigure
+     * it. The same shape `_lifecycle`'s activation write uses.
+     */
+    commandBus?: CommandBus;
+}
+export declare function buildRecentActivityResponseSchema(catalog: RecentActivityCatalog): z.ZodObject<{
+    data: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        actedAt: z.ZodString;
+        action: z.ZodType<string, unknown, z.core.$ZodTypeInternals<string, unknown>>;
+        module: z.ZodType<string, unknown, z.core.$ZodTypeInternals<string, unknown>>;
+        icon: z.ZodEnum<{
+            Plus: "Plus";
+            Sparkles: "Sparkles";
+            Settings: "Settings";
+            Search: "Search";
+            Boxes: "Boxes";
+            Layers: "Layers";
+            Menu: "Menu";
+            PlusCircle: "PlusCircle";
+            PlusSquare: "PlusSquare";
+            FilePlus: "FilePlus";
+            FolderPlus: "FolderPlus";
+            Upload: "Upload";
+            FileUp: "FileUp";
+            CloudUpload: "CloudUpload";
+            Download: "Download";
+            FileDown: "FileDown";
+            FileText: "FileText";
+            BookOpen: "BookOpen";
+            Rss: "Rss";
+            Package: "Package";
+            Tag: "Tag";
+            ShoppingCart: "ShoppingCart";
+            Receipt: "Receipt";
+            CreditCard: "CreditCard";
+            Users: "Users";
+            UserPlus: "UserPlus";
+            Inbox: "Inbox";
+            ListChecks: "ListChecks";
+            ClipboardList: "ClipboardList";
+            Image: "Image";
+            Video: "Video";
+            LayoutDashboard: "LayoutDashboard";
+            PanelLeft: "PanelLeft";
+            KeyRound: "KeyRound";
+            ShieldCheck: "ShieldCheck";
+            Edit: "Edit";
+            Archive: "Archive";
+            Box: "Box";
+            Truck: "Truck";
+            CircleDollarSign: "CircleDollarSign";
+            Activity: "Activity";
+            LineChart: "LineChart";
+            Smartphone: "Smartphone";
+            Webhook: "Webhook";
+            Scale: "Scale";
+            PlugZap: "PlugZap";
+            PercentDiamond: "PercentDiamond";
+            Newspaper: "Newspaper";
+            Languages: "Languages";
+            Eraser: "Eraser";
+            Warehouse: "Warehouse";
+            TrendingDown: "TrendingDown";
+            Bell: "Bell";
+            PackageOpen: "PackageOpen";
+            Building2: "Building2";
+            Store: "Store";
+            ClipboardCheck: "ClipboardCheck";
+        }>;
+        labelKey: z.ZodString;
+        actorDisplayName: z.ZodString;
+        actorKind: z.ZodEnum<{
+            admin: "admin";
+            system: "system";
+        }>;
+        targetType: z.ZodString;
+        targetId: z.ZodString;
+        targetDisplayName: z.ZodString;
+        targetUrl: z.ZodNullable<z.ZodString>;
+        summary: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+    pagination: z.ZodObject<{
+        limit: z.ZodNumber;
+        fetchedAt: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type RecentActivityRouteResponse = z.infer<ReturnType<typeof buildRecentActivityResponseSchema>>;
+export declare function registerRecentActivityRoutes(app: FastifyInstance, deps: RecentActivityAdminDeps): Promise<void>;
+//# sourceMappingURL=routes.admin.recent-activity.d.ts.map

package/dist/backend/routes.admin.recent-activity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.recent-activity.d.ts","sourceRoot":"","sources":["../../src/backend/routes.admin.recent-activity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAGrE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,WAAW,uBAAuB;IACtC,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C,wBAAwB,EAAE,wBAAwB,CAAC;IACnD,YAAY,EAAE,mBAAmB,CAAC;IAClC;;;;OAIG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAmBD,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAwB/E;AAED,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAC/C,UAAU,CAAC,OAAO,iCAAiC,CAAC,CACrD,CAAC;AAEF,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAuFf"}

package/dist/backend/routes.admin.recent-activity.js

@@ -0,0 +1,106 @@
+import { z } from 'zod';
+import { KnownIconNameSchema, RecentActivityVisibilityListSchema, RecentActivityVisibilityRequestSchema, RecentActivityVisibilityResponseSchema, } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { makeSetRecentActivityVisibilityCommand } from './commands/recent-activity-visibility.commands.js';
+const querySchema = z.object({
+    limit: z.coerce.number().int().min(1).max(12).optional(),
+});
+/**
+ * A closed enum where the composition declares something, a plain string where
+ * it declares nothing.
+ *
+ * `z.enum([])` is not a schema, and a bare-core build with every declaring
+ * module removed is a legitimate composition. The fallback describes the shape
+ * honestly rather than pretending to a closed set of nothing.
+ */
+function tokenSchema(values) {
+    if (values.length === 0)
+        return z.string().min(1);
+    return z.enum(values);
+}
+export function buildRecentActivityResponseSchema(catalog) {
+    const itemSchema = z.object({
+        id: z.string().uuid(),
+        actedAt: z.string(),
+        action: tokenSchema(catalog.actions()),
+        module: tokenSchema(catalog.moduleIds()),
+        icon: KnownIconNameSchema,
+        labelKey: z.string().min(1),
+        actorDisplayName: z.string().min(1),
+        actorKind: z.enum(['admin', 'system']),
+        targetType: z.string().min(1),
+        targetId: z.string().min(1),
+        targetDisplayName: z.string().min(1),
+        targetUrl: z.string().nullable(),
+        summary: z.record(z.string(), z.unknown()).nullable(),
+    });
+    return z.object({
+        data: z.array(itemSchema),
+        pagination: z.object({
+            limit: z.number().int().min(1).max(12),
+            fetchedAt: z.string(),
+        }),
+    });
+}
+export async function registerRecentActivityRoutes(app, deps) {
+    const { recentActivityService, recentActivityCatalog, recentActivityVisibility, requireAdmin, } = deps;
+    app.get('/api/v1/admin/audit-log/recent-activity', { preHandler: requireAdmin('audit_log:read') }, async (request, reply) => {
+        const parsed = querySchema.safeParse(request.query ?? {});
+        if (!parsed.success) {
+            return reply.status(400).send({
+                error: {
+                    code: 'validation_error',
+                    message: 'Invalid query parameters',
+                    details: parsed.error.flatten(),
+                },
+            });
+        }
+        const input = {};
+        if (parsed.data.limit !== undefined)
+            input.limit = parsed.data.limit;
+        return recentActivityService.list(input);
+    });
+    /**
+     * The operator axis of D-163.1, read.
+     *
+     * Gated on `platform.modules.activate` rather than on `audit_log:read`: this
+     * is a per-module operator switch, it renders beside the activation control
+     * on `/platform/modules`, and whoever may switch a module off may certainly
+     * decide whether its rows reach a dashboard. Declaring a second code for the
+     * same operator on the same screen would be a checkbox that grants nothing
+     * anybody would grant separately.
+     */
+    app.get('/api/v1/admin/audit-log/recent-activity/visibility', {
+        preHandler: requireAdmin('platform.modules.activate'),
+        schema: { response: { 200: RecentActivityVisibilityListSchema } },
+    }, async () => ({
+        modules: await recentActivityVisibility.list(),
+    }));
+    const commandBus = deps.commandBus;
+    if (!commandBus)
+        return;
+    app.post('/api/v1/admin/audit-log/recent-activity/visibility/:moduleId', {
+        preHandler: requireAdmin('platform.modules.activate'),
+        schema: {
+            body: RecentActivityVisibilityRequestSchema,
+            response: { 200: RecentActivityVisibilityResponseSchema },
+        },
+    }, async (request) => {
+        const body = RecentActivityVisibilityRequestSchema.parse(request.body);
+        const { moduleId } = request.params;
+        const result = await commandBus.run(makeSetRecentActivityVisibilityCommand(recentActivityCatalog, {
+            moduleId,
+            visible: body.visible,
+        }));
+        // Re-read rather than echo, for the reason the activation control does
+        // not update optimistically: what the operator sees is what the platform
+        // resolved, not what this handler assumed.
+        const row = (await recentActivityVisibility.list()).find((entry) => entry.moduleId === result.moduleId);
+        if (!row) {
+            throw new HttpError(500, 'INTERNAL', `Module "${result.moduleId}" vanished from the recent-activity catalog after its ` +
+                `dashboard visibility was written.`);
+        }
+        return { module: row };
+    });
+}
+//# sourceMappingURL=routes.admin.recent-activity.js.map

package/dist/backend/routes.admin.recent-activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.recent-activity.js","sourceRoot":"","sources":["../../src/backend/routes.admin.recent-activity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,kCAAkC,EAClC,qCAAqC,EACrC,sCAAsC,GAGvC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,sCAAsC,EAAE,MAAM,mDAAmD,CAAC;AA0C3G,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,MAAyB;IAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO,CAAC,CAAC,IAAI,CAAC,MAA+B,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,OAA8B;IAC9E,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;QAC1B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;QACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACtC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACxC,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;KACtD,CAAC,CAAC;IAEH,OAAO,CAAC,CAAC,MAAM,CAAC;QACd,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;QACzB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;YACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;SACtB,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,GAAoB,EACpB,IAA6B;IAE7B,MAAM,EACJ,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,YAAY,GACb,GAAG,IAAI,CAAC;IAET,GAAG,CAAC,GAAG,CACL,yCAAyC,EACzC,EAAE,UAAU,EAAE,YAAY,CAAC,gBAAgB,CAAC,EAAE,EAC9C,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,KAAK,EAAE;oBACL,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,0BAA0B;oBACnC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;iBAChC;aACF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,GAAuB,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QACrE,OAAO,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CACF,CAAC;IAEF;;;;;;;;;OASG;IACH,GAAG,CAAC,GAAG,CACL,oDAAoD,EACpD;QACE,UAAU,EAAE,YAAY,CAAC,2BAA2B,CAAC;QACrD,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,kCAAkC,EAAE,EAAE;KAClE,EACD,KAAK,IAA2C,EAAE,CAAC,CAAC;QAClD,OAAO,EAAE,MAAM,wBAAwB,CAAC,IAAI,EAAE;KAC/C,CAAC,CACH,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACnC,IAAI,CAAC,UAAU;QAAE,OAAO;IAExB,GAAG,CAAC,IAAI,CACN,8DAA8D,EAC9D;QACE,UAAU,EAAE,YAAY,CAAC,2BAA2B,CAAC;QACrD,MAAM,EAAE;YACN,IAAI,EAAE,qCAAqC;YAC3C,QAAQ,EAAE,EAAE,GAAG,EAAE,sCAAsC,EAAE;SAC1D;KACF,EACD,KAAK,EAAE,OAAO,EAA6C,EAAE;QAC3D,MAAM,IAAI,GAAG,qCAAqC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CACjC,sCAAsC,CAAC,qBAAqB,EAAE;YAC5D,QAAQ;YACR,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CACH,CAAC;QACF,uEAAuE;QACvE,yEAAyE;QACzE,2CAA2C;QAC3C,MAAM,GAAG,GAAG,CAAC,MAAM,wBAAwB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CACtD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAC9C,CAAC;QACF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,UAAU,EACV,WAAW,MAAM,CAAC,QAAQ,wDAAwD;gBAChF,mCAAmC,CACtC,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACzB,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/backend/services/audit-reference-registry.d.ts

@@ -0,0 +1,28 @@
+import type { AuditReferenceLabel, AuditReferenceRegistryPort, AuditReferenceResolver } from '@endora-commerce/contracts';
+/**
+ * In-process registry of "what is this audit row about, and where does it live?"
+ * resolvers (feature 075, D-87 drain).
+ *
+ * Registered under `auditReferenceRegistry` and contributed to from other
+ * modules' boot hooks. `RecentActivityService` is the only reader today.
+ *
+ * **Enumeration policy: an absent contributor's resolver is skipped.** The
+ * reasoning is at `AuditReferenceRegistryPort` in `@endora-commerce/contracts`, and the
+ * short of it is that the descriptor carries a deep link into the contributor's
+ * own admin screen: a module that is not present contributes no screen, so
+ * nothing may link to one. The audit row still renders — with the label the
+ * entry's own snapshot carries, or the raw id, and no link.
+ *
+ * The predicate is injected rather than read from `effectiveState` here, because
+ * a registry that answers a presence question is exactly the thing a unit test
+ * has to be able to put in either state.
+ */
+export declare class AuditReferenceRegistry implements AuditReferenceRegistryPort {
+    private readonly isModulePresent;
+    private readonly resolvers;
+    constructor(isModulePresent: (moduleId: string) => boolean);
+    register(resolver: AuditReferenceResolver): void;
+    owners(): readonly string[];
+    resolve(referenceType: string, ids: readonly string[]): Promise<ReadonlyMap<string, AuditReferenceLabel>>;
+}
+//# sourceMappingURL=audit-reference-registry.d.ts.map

package/dist/backend/services/audit-reference-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-reference-registry.d.ts","sourceRoot":"","sources":["../../../src/backend/services/audit-reference-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,0BAA0B,EAC1B,sBAAsB,EACvB,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,sBAAuB,YAAW,0BAA0B;IAG3D,OAAO,CAAC,QAAQ,CAAC,eAAe;IAF5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgC;gBAE7B,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO;IAE3E,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,GAAG,IAAI;IAehD,MAAM,IAAI,SAAS,MAAM,EAAE;IAIrB,OAAO,CACX,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,SAAS,MAAM,EAAE,GACrB,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CAcrD"}

package/dist/backend/services/audit-reference-registry.js

@@ -0,0 +1,57 @@
+/**
+ * In-process registry of "what is this audit row about, and where does it live?"
+ * resolvers (feature 075, D-87 drain).
+ *
+ * Registered under `auditReferenceRegistry` and contributed to from other
+ * modules' boot hooks. `RecentActivityService` is the only reader today.
+ *
+ * **Enumeration policy: an absent contributor's resolver is skipped.** The
+ * reasoning is at `AuditReferenceRegistryPort` in `@endora-commerce/contracts`, and the
+ * short of it is that the descriptor carries a deep link into the contributor's
+ * own admin screen: a module that is not present contributes no screen, so
+ * nothing may link to one. The audit row still renders — with the label the
+ * entry's own snapshot carries, or the raw id, and no link.
+ *
+ * The predicate is injected rather than read from `effectiveState` here, because
+ * a registry that answers a presence question is exactly the thing a unit test
+ * has to be able to put in either state.
+ */
+export class AuditReferenceRegistry {
+    isModulePresent;
+    resolvers = [];
+    constructor(isModulePresent) {
+        this.isModulePresent = isModulePresent;
+    }
+    register(resolver) {
+        if (this.resolvers.includes(resolver))
+            return;
+        const claimed = this.resolvers.find((r) => r.referenceType === resolver.referenceType);
+        if (claimed) {
+            // Two answers for one type is not a degrade to pick a winner from: one of
+            // the two modules is wrong about what it owns, and the reader would be
+            // rendering whichever boot hook happened to run first.
+            throw new Error(`Audit reference type '${resolver.referenceType}' is already resolved by ` +
+                `'${claimed.ownerModuleId}'; '${resolver.ownerModuleId}' may not claim it too.`);
+        }
+        this.resolvers.push(resolver);
+    }
+    owners() {
+        return this.resolvers.map((r) => r.ownerModuleId);
+    }
+    async resolve(referenceType, ids) {
+        const out = new Map();
+        if (ids.length === 0)
+            return out;
+        const resolver = this.resolvers.find((r) => r.referenceType === referenceType);
+        // Enumeration policy, applied at the read rather than at registration: an
+        // operator's flip has to take effect without a restart.
+        if (!resolver || !this.isModulePresent(resolver.ownerModuleId))
+            return out;
+        for (const row of await resolver.resolve(ids)) {
+            if (row.label.length > 0)
+                out.set(row.id, row);
+        }
+        return out;
+    }
+}
+//# sourceMappingURL=audit-reference-registry.js.map

package/dist/backend/services/audit-reference-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-reference-registry.js","sourceRoot":"","sources":["../../../src/backend/services/audit-reference-registry.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,sBAAsB;IAGJ;IAFZ,SAAS,GAA6B,EAAE,CAAC;IAE1D,YAA6B,eAA8C;QAA9C,oBAAe,GAAf,eAAe,CAA+B;IAAG,CAAC;IAE/E,QAAQ,CAAC,QAAgC;QACvC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa,CAAC,CAAC;QACvF,IAAI,OAAO,EAAE,CAAC;YACZ,0EAA0E;YAC1E,uEAAuE;YACvE,uDAAuD;YACvD,MAAM,IAAI,KAAK,CACb,yBAAyB,QAAQ,CAAC,aAAa,2BAA2B;gBACxE,IAAI,OAAO,CAAC,aAAa,OAAO,QAAQ,CAAC,aAAa,yBAAyB,CAClF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,OAAO,CACX,aAAqB,EACrB,GAAsB;QAEtB,MAAM,GAAG,GAAG,IAAI,GAAG,EAA+B,CAAC;QACnD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC;QAEjC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,aAAa,CAAC,CAAC;QAC/E,0EAA0E;QAC1E,wDAAwD;QACxD,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC;YAAE,OAAO,GAAG,CAAC;QAE3E,KAAK,MAAM,GAAG,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}