@endora-commerce/mod-audit-logs 0.100.0

package/dist/backend/services/recent-activity-catalog.d.ts

@@ -0,0 +1,92 @@
+import { type KnownIconName, type ModuleManifest, type ModuleRecentActivity } from '@endora-commerce/contracts';
+/**
+ * The recent-activity catalog — feature 080, T042j / D-163.1.
+ *
+ * **This file is what replaced four hand-maintained tables**, and it is worth
+ * saying which four, because their shapes were different and only one of them
+ * looked like a list:
+ *
+ *  1. `action-catalog.ts`'s `RECENT_ACTIVITY_ACTIONS` — 23 tokens, the
+ *     dashboard query's `$in`. A token missing from it was **silently absent**
+ *     from the card rather than refused, which is the whole of D-163's finding:
+ *     a package could never appear there.
+ *  2. The same file's `PREFIX_TO_MODULE` plus `RecentActivityModule`, a **closed
+ *     union of four core module ids**. A closed union is a list written down,
+ *     and a package's id could not be in it.
+ *  3. `routes.admin.recent-activity.ts`'s `module: z.enum([...])`, three members.
+ *  4. The admin's `ACTIVITY_RENDERING`, 22 entries mapping a token to a
+ *     lucide icon and an i18n key.
+ *
+ * All four are computed from one input now: the `recentActivity` export of each
+ * composed module's `manifest.ts`. The **drift already standing inside core**
+ * is repaired by that rather than by a fifth entry — `prompt_action.execute`
+ * was in (1) and (2) and absent from (3) and (4), so a prompt-assistant row was
+ * fetched, classified, and then rendered as an unknown verb against a response
+ * schema that did not list the `module` value the server emitted.
+ *
+ * What this class does **not** decide is whether a declared module's rows
+ * appear. That is the operator's axis (see {@link RecentActivityVisibility}),
+ * read per request from the module's own Setting and defaulting to visible.
+ * Neither axis is derivable from the other, which is Constitution XVII's shape
+ * applied to a narrower object.
+ */
+/** The two properties of a resolved registry entry this derivation reads. */
+export interface RecentActivityDeclarationSource {
+    readonly manifest: Pick<ModuleManifest, 'id' | 'name'>;
+    readonly recentActivity?: ModuleRecentActivity | undefined;
+}
+/** One declared action, with everything the card and the route need about it. */
+export interface RecentActivityDescriptor {
+    /** The `audit_log_entries.action` token. */
+    readonly action: string;
+    /** The module that declared it — what used to be `RecentActivityModule`. */
+    readonly moduleId: string;
+    /** Operator-facing module name, for the visibility screen. */
+    readonly moduleName: string;
+    readonly icon: KnownIconName;
+    /** Relative to `moduleId`'s i18n namespace — the admin resolves it there. */
+    readonly labelKey: string;
+}
+/** One eligible module, and the Setting that decides whether it is shown. */
+export interface RecentActivityModuleEntry {
+    readonly moduleId: string;
+    readonly moduleName: string;
+    readonly settingCode: string;
+    readonly actions: readonly string[];
+}
+/**
+ * Two modules declaring one action token.
+ *
+ * Refused rather than resolved by declaration order, for the reason a package
+ * claiming a taken module id is refused (D-155.7): the token decides which
+ * module's visibility Setting governs a row and which namespace its verb is
+ * looked up in, so picking a winner silently attributes one module's activity
+ * to another, and an operator switching the loser off would change nothing.
+ */
+export declare class RecentActivityActionConflict extends Error {
+    readonly name = "RecentActivityActionConflict";
+}
+export declare class RecentActivityCatalog {
+    private readonly byAction;
+    private readonly modules;
+    constructor(sources: ReadonlyArray<RecentActivityDeclarationSource>);
+    /** Every declared action token, sorted so the derived route enum is stable. */
+    actions(): string[];
+    /** Every declaring module's id — what `RecentActivityModule` used to enumerate. */
+    moduleIds(): string[];
+    /** Every eligible module, in composition order. */
+    eligibleModules(): readonly RecentActivityModuleEntry[];
+    /**
+     * The descriptor for an action token, or `undefined` for one nobody declared.
+     *
+     * `undefined` rather than a throw, unlike the `moduleForAction` this replaced:
+     * that function's own comment called an unmapped token "defensive:
+     * unreachable as long as the allowlist and the prefix table stay aligned",
+     * and they were not aligned. A row can only get here by being in the query's
+     * `$in`, which is built from this same map — but an operator flipping a
+     * module off between the two is a real interleaving, and taking the dashboard
+     * down for it would be worse than omitting a row.
+     */
+    descriptorFor(action: string): RecentActivityDescriptor | undefined;
+}
+//# sourceMappingURL=recent-activity-catalog.d.ts.map

package/dist/backend/services/recent-activity-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recent-activity-catalog.d.ts","sourceRoot":"","sources":["../../../src/backend/services/recent-activity-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EAC1B,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,6EAA6E;AAC7E,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC;IACvD,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;CAC5D;AAED,iFAAiF;AACjF,MAAM,WAAW,wBAAwB;IACvC,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,6EAA6E;AAC7E,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;;;;;;;GAQG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,SAAkB,IAAI,kCAAkC;CACzD;AAED,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgD;IACzE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuC;gBAEnD,OAAO,EAAE,aAAa,CAAC,+BAA+B,CAAC;IAwCnE,+EAA+E;IAC/E,OAAO,IAAI,MAAM,EAAE;IAInB,mFAAmF;IACnF,SAAS,IAAI,MAAM,EAAE;IAIrB,mDAAmD;IACnD,eAAe,IAAI,SAAS,yBAAyB,EAAE;IAIvD;;;;;;;;;;OAUG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS;CAGpE"}

package/dist/backend/services/recent-activity-catalog.js

@@ -0,0 +1,82 @@
+import { recentActivityVisibilitySettingCode, } from '@endora-commerce/contracts';
+/**
+ * Two modules declaring one action token.
+ *
+ * Refused rather than resolved by declaration order, for the reason a package
+ * claiming a taken module id is refused (D-155.7): the token decides which
+ * module's visibility Setting governs a row and which namespace its verb is
+ * looked up in, so picking a winner silently attributes one module's activity
+ * to another, and an operator switching the loser off would change nothing.
+ */
+export class RecentActivityActionConflict extends Error {
+    name = 'RecentActivityActionConflict';
+}
+export class RecentActivityCatalog {
+    byAction;
+    modules;
+    constructor(sources) {
+        const byAction = new Map();
+        const modules = [];
+        for (const source of sources) {
+            const declaration = source.recentActivity;
+            if (!declaration)
+                continue;
+            const moduleId = source.manifest.id;
+            const moduleName = source.manifest.name;
+            const actions = [];
+            for (const entry of declaration.entries) {
+                const claimed = byAction.get(entry.action);
+                if (claimed) {
+                    throw new RecentActivityActionConflict(`[audit_logs] modules "${claimed.moduleId}" and "${moduleId}" both declare the ` +
+                        `recent-activity action "${entry.action}". The token decides whose visibility ` +
+                        `Setting governs the row and in whose i18n namespace its verb is resolved, so ` +
+                        `there is no winner to pick: one of the two declarations is wrong.`);
+                }
+                byAction.set(entry.action, {
+                    action: entry.action,
+                    moduleId,
+                    moduleName,
+                    icon: entry.icon,
+                    labelKey: entry.labelKey,
+                });
+                actions.push(entry.action);
+            }
+            modules.push({
+                moduleId,
+                moduleName,
+                // Derived, never declared — see the contracts helper's note.
+                settingCode: recentActivityVisibilitySettingCode(moduleId),
+                actions,
+            });
+        }
+        this.byAction = byAction;
+        this.modules = modules;
+    }
+    /** Every declared action token, sorted so the derived route enum is stable. */
+    actions() {
+        return [...this.byAction.keys()].sort();
+    }
+    /** Every declaring module's id — what `RecentActivityModule` used to enumerate. */
+    moduleIds() {
+        return this.modules.map((entry) => entry.moduleId).sort();
+    }
+    /** Every eligible module, in composition order. */
+    eligibleModules() {
+        return this.modules;
+    }
+    /**
+     * The descriptor for an action token, or `undefined` for one nobody declared.
+     *
+     * `undefined` rather than a throw, unlike the `moduleForAction` this replaced:
+     * that function's own comment called an unmapped token "defensive:
+     * unreachable as long as the allowlist and the prefix table stay aligned",
+     * and they were not aligned. A row can only get here by being in the query's
+     * `$in`, which is built from this same map — but an operator flipping a
+     * module off between the two is a real interleaving, and taking the dashboard
+     * down for it would be worse than omitting a row.
+     */
+    descriptorFor(action) {
+        return this.byAction.get(action);
+    }
+}
+//# sourceMappingURL=recent-activity-catalog.js.map

package/dist/backend/services/recent-activity-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recent-activity-catalog.js","sourceRoot":"","sources":["../../../src/backend/services/recent-activity-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mCAAmC,GAIpC,MAAM,4BAA4B,CAAC;AA6DpC;;;;;;;;GAQG;AACH,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACnC,IAAI,GAAG,8BAA8B,CAAC;CACzD;AAED,MAAM,OAAO,qBAAqB;IACf,QAAQ,CAAgD;IACxD,OAAO,CAAuC;IAE/D,YAAY,OAAuD;QACjE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoC,CAAC;QAC7D,MAAM,OAAO,GAAgC,EAAE,CAAC;QAChD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,CAAC;YAC1C,IAAI,CAAC,WAAW;gBAAE,SAAS;YAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YACxC,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;gBACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC3C,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,IAAI,4BAA4B,CACpC,yBAAyB,OAAO,CAAC,QAAQ,UAAU,QAAQ,qBAAqB;wBAC9E,2BAA2B,KAAK,CAAC,MAAM,wCAAwC;wBAC/E,+EAA+E;wBAC/E,mEAAmE,CACtE,CAAC;gBACJ,CAAC;gBACD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE;oBACzB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ;oBACR,UAAU;oBACV,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;iBACzB,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ;gBACR,UAAU;gBACV,6DAA6D;gBAC7D,WAAW,EAAE,mCAAmC,CAAC,QAAQ,CAAC;gBAC1D,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,+EAA+E;IAC/E,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED,mFAAmF;IACnF,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,CAAC;IAED,mDAAmD;IACnD,eAAe;QACb,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;;;;;;;OAUG;IACH,aAAa,CAAC,MAAc;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;CACF"}

package/dist/backend/services/recent-activity-service.d.ts

@@ -0,0 +1,105 @@
+import type { AuditReferenceRegistryPort, KnownIconName } from '@endora-commerce/contracts';
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { AuditActorIdentity } from '../routes.admin.js';
+import type { RecentActivityCatalog } from './recent-activity-catalog.js';
+import type { RecentActivityVisibility } from './recent-activity-visibility.js';
+/**
+ * Feature 024 — Dashboard "Recent Activity" read service.
+ *
+ * Curated read view over `audit_log_entries` that powers the admin home
+ * dashboard's Recent Activity card. Server-enforced allowlist of action
+ * tokens; bulk-resolves actor + target display labels in at most a small
+ * fixed number of round-trips (one per object-type bucket).
+ *
+ * **Where the action list comes from — feature 080, T042j / D-163.1.** It used
+ * to come from `action-catalog.ts`: a 23-token array a host maintained by hand,
+ * a prefix table beside it, and a `RecentActivityModule` union closed over four
+ * core module ids. A module the host had not written could not appear in any of
+ * the three, so a package's audit row was **silently absent** from this card
+ * rather than refused. Both are derived from the composed manifests now, and
+ * what a row's `module` is comes from the module that declared its token.
+ *
+ * The declaration is only half of it. Whether a declared module's rows appear
+ * is the operator's, read per request through {@link RecentActivityVisibility}
+ * — per request, because a flip must take effect without a restart, and because
+ * a captured answer is a preference frozen at boot.
+ *
+ * **Where the labels come from — feature 075, D-87.** They used to come from
+ * five hand-written SQL statements naming `admin_users`, `products`,
+ * `warehouses`, `price_lists`, `customer_accounts` and `organizations`, and the
+ * deep-link URLs from a template map spelling three other modules' admin routes.
+ * Both are inverted now: the actor name is `auditActorResolver`, the
+ * contribution point this module has owned since feature 072, and everything
+ * else is `auditReferenceRegistry`, where each owner pushes a resolver for its
+ * own object type and supplies its own route. This service knows the audit row
+ * and nothing else about anybody's schema.
+ */
+export interface RecentActivityItem {
+    id: string;
+    actedAt: string;
+    action: string;
+    /** The module that declared this action token. Any composed module's id. */
+    module: string;
+    /**
+     * What the card renders for this row, from the declaring module's manifest.
+     *
+     * They travel on the item because the admin's `ACTIVITY_RENDERING` — the
+     * fourth hand-maintained table — was the only thing that knew them, and it
+     * knew nothing about a module the SPA was not built with. `labelKey` is
+     * relative to `module`'s i18n namespace, so the card resolves it as
+     * `t(module, labelKey)` and a package's verb arrives in the operator's
+     * language from the package's own bundle.
+     */
+    icon: KnownIconName;
+    labelKey: string;
+    actorDisplayName: string;
+    actorKind: 'admin' | 'system';
+    targetType: string;
+    targetId: string;
+    targetDisplayName: string;
+    targetUrl: string | null;
+    summary: Record<string, unknown> | null;
+}
+export interface RecentActivityResponse {
+    data: RecentActivityItem[];
+    pagination: {
+        limit: number;
+        fetchedAt: string;
+    };
+}
+export interface ListRecentActivityInput {
+    /** Caller-supplied limit. Clamped to [1, 12] server-side. Defaults to 8. */
+    limit?: number;
+}
+export declare class RecentActivityService {
+    private readonly emFactory;
+    /** Every declared action token, derived from the composed manifests. */
+    private readonly catalog;
+    /** The operator's half of D-163.1, asked per request. */
+    private readonly visibility;
+    /**
+     * The contribution point this module owns and defaults absent. Called per
+     * request, never captured: a resolver held once would go on naming actors
+     * after the directory behind it went away.
+     */
+    private readonly resolveActors;
+    private readonly references;
+    constructor(emFactory: () => EntityManager, 
+    /** Every declared action token, derived from the composed manifests. */
+    catalog: RecentActivityCatalog, 
+    /** The operator's half of D-163.1, asked per request. */
+    visibility: RecentActivityVisibility, 
+    /**
+     * The contribution point this module owns and defaults absent. Called per
+     * request, never captured: a resolver held once would go on naming actors
+     * after the directory behind it went away.
+     */
+    resolveActors: (ids: string[]) => Promise<AuditActorIdentity[]>, references: AuditReferenceRegistryPort);
+    list(input?: ListRecentActivityInput): Promise<RecentActivityResponse>;
+    /**
+     * Bulk-resolve actor + target labels for the given rows in at most one
+     * SQL round-trip per object-type bucket. Never N+1.
+     */
+    private enrich;
+}
+//# sourceMappingURL=recent-activity-service.d.ts.map

package/dist/backend/services/recent-activity-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recent-activity-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/recent-activity-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,0BAA0B,EAC1B,aAAa,EACd,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;;OASG;IACH,IAAI,EAAE,aAAa,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAC3B,UAAU,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CAClD;AAED,MAAM,WAAW,uBAAuB;IACtC,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAKD,qBAAa,qBAAqB;IAE9B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,wEAAwE;IACxE,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,yDAAyD;IACzD,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAXV,SAAS,EAAE,MAAM,aAAa;IAC/C,wEAAwE;IACvD,OAAO,EAAE,qBAAqB;IAC/C,yDAAyD;IACxC,UAAU,EAAE,wBAAwB;IACrD;;;;OAIG;IACc,aAAa,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,kBAAkB,EAAE,CAAC,EAC/D,UAAU,EAAE,0BAA0B;IAGnD,IAAI,CAAC,KAAK,GAAE,uBAA4B,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAkChF;;;OAGG;YACW,MAAM;CA8BrB"}

package/dist/backend/services/recent-activity-service.js

@@ -0,0 +1,308 @@
+import { AuditLogEntry } from '@endora-commerce/platform/kernel';
+const DEFAULT_LIMIT = 8;
+const MAX_LIMIT = 12;
+export class RecentActivityService {
+    emFactory;
+    catalog;
+    visibility;
+    resolveActors;
+    references;
+    constructor(emFactory, 
+    /** Every declared action token, derived from the composed manifests. */
+    catalog, 
+    /** The operator's half of D-163.1, asked per request. */
+    visibility, 
+    /**
+     * The contribution point this module owns and defaults absent. Called per
+     * request, never captured: a resolver held once would go on naming actors
+     * after the directory behind it went away.
+     */
+    resolveActors, references) {
+        this.emFactory = emFactory;
+        this.catalog = catalog;
+        this.visibility = visibility;
+        this.resolveActors = resolveActors;
+        this.references = references;
+    }
+    async list(input = {}) {
+        const limit = clampLimit(input.limit);
+        // The conjunction of the two axes. Empty is answered here rather than by
+        // an unfiltered query: with every eligible module hidden, `$in: []` and
+        // "no filter" differ by the whole audit trail.
+        const actions = await this.visibility.visibleActions();
+        if (actions.length === 0) {
+            return { data: [], pagination: { limit, fetchedAt: new Date().toISOString() } };
+        }
+        const em = this.emFactory();
+        // The existing `actedAt DESC` index handles the sort; the secondary `id DESC`
+        // tiebreak (research §R2) gives the dashboard deterministic ordering when
+        // two admins act inside the same second. Row count is bounded by `limit`,
+        // so the extra sort key has negligible cost at our volumes.
+        const rows = await em.find(AuditLogEntry, { action: { $in: actions } }, {
+            orderBy: { actedAt: 'desc', id: 'desc' },
+            limit,
+        });
+        const enriched = await this.enrich(rows);
+        return {
+            data: enriched,
+            pagination: { limit, fetchedAt: new Date().toISOString() },
+        };
+    }
+    /**
+     * Bulk-resolve actor + target labels for the given rows in at most one
+     * SQL round-trip per object-type bucket. Never N+1.
+     */
+    async enrich(rows) {
+        if (rows.length === 0)
+            return [];
+        // --- Actor labels: this module's own contribution point. ---
+        const adminIds = uniqueNonNull(rows.map((r) => r.actorAdminUserId ?? null));
+        const adminNames = adminIds.length > 0 ? abbreviate(await this.resolveActors(adminIds)) : new Map();
+        // --- Every other label: one bucket per reference type, one round trip each. ---
+        const [customerNames, ...targetBuckets] = await Promise.all([
+            this.references.resolve('customer_account', uniqueNonNull(rows.map((r) => r.impersonatedCustomerAccountId ?? null))),
+            ...TARGET_REFERENCE_TYPES.map((type) => this.references.resolve(type, uniqueByType(rows, type))),
+        ]);
+        // Ids are UUIDs, so one map across the target types collides with nothing
+        // and keeps `resolveTarget` reading the row it was handed.
+        const targets = new Map();
+        for (const bucket of targetBuckets) {
+            for (const [id, label] of bucket)
+                targets.set(id, label);
+        }
+        return rows
+            .map((r) => buildItem(r, this.catalog, { adminNames, customerNames, targets }))
+            .filter((item) => item !== null);
+    }
+}
+/**
+ * The audit `objectType` values an owner module can put a name and a link on.
+ *
+ * A type nobody claims resolves to an empty bucket, which is the same answer as
+ * a deleted row: the snapshot label, and no link.
+ */
+const TARGET_REFERENCE_TYPES = ['product', 'warehouse', 'price_list'];
+/**
+ * "Jan Kowalski" → "Jan K.". The abbreviation is the dashboard card's, which is
+ * why it lives here and not in the module that owns the directory: `admin_users`
+ * answers who somebody is, and how much of that fits on one line of a widget is
+ * this surface's question.
+ */
+function abbreviate(identities) {
+    const map = new Map();
+    for (const identity of identities) {
+        const first = (identity.firstName ?? '').trim();
+        const last = (identity.lastName ?? '').trim();
+        const initial = last.length > 0 ? `${last.slice(0, 1)}.` : '';
+        const display = [first, initial].filter((s) => s.length > 0).join(' ').trim() || identity.id;
+        map.set(identity.id, display);
+    }
+    return map;
+}
+function clampLimit(value) {
+    if (value === undefined || !Number.isFinite(value))
+        return DEFAULT_LIMIT;
+    const n = Math.floor(value);
+    if (n < 1)
+        return 1;
+    if (n > MAX_LIMIT)
+        return MAX_LIMIT;
+    return n;
+}
+function uniqueNonNull(arr) {
+    const set = new Set();
+    for (const v of arr)
+        if (v !== null && v !== undefined)
+            set.add(v);
+    return [...set];
+}
+function uniqueByType(rows, objectType) {
+    const set = new Set();
+    for (const r of rows)
+        if (r.objectType === objectType && r.objectId)
+            set.add(r.objectId);
+    return [...set];
+}
+/**
+ * `null` for a token no composed module declares.
+ *
+ * The row can only be here by having matched the `$in` built from the same
+ * catalog, so this is unreachable in a stable composition — but the alternative
+ * is `moduleForAction`'s, which threw with a comment calling itself
+ * "defensive: unreachable as long as the allowlist and the prefix table stay
+ * aligned". They were not aligned, and a throw here would take the whole card
+ * down for one row.
+ */
+function buildItem(r, catalog, lookups) {
+    const action = r.action;
+    const descriptor = catalog.descriptorFor(action);
+    if (!descriptor)
+        return null;
+    // --- Actor ---
+    const actorKind = r.actorAdminUserId ? 'admin' : 'system';
+    let actorDisplayName;
+    if (r.actorAdminUserId) {
+        actorDisplayName = lookups.adminNames.get(r.actorAdminUserId) ?? 'Admin';
+    }
+    else {
+        actorDisplayName = 'System';
+    }
+    if (r.impersonatedCustomerAccountId) {
+        const customerLabel = lookups.customerNames.get(r.impersonatedCustomerAccountId)?.label ??
+            r.impersonatedCustomerAccountId;
+        actorDisplayName = `${actorDisplayName} (as ${customerLabel})`;
+    }
+    // --- Target display + URL ---
+    const { targetDisplayName, targetUrl } = resolveTarget(r, lookups);
+    return {
+        id: r.id,
+        actedAt: r.actedAt.toISOString(),
+        action,
+        module: descriptor.moduleId,
+        icon: descriptor.icon,
+        labelKey: descriptor.labelKey,
+        actorDisplayName,
+        actorKind,
+        targetType: r.objectType,
+        targetId: r.objectId,
+        targetDisplayName,
+        targetUrl,
+        summary: extractSummary(r),
+    };
+}
+function resolveTarget(r, lookups) {
+    const before = (r.stateBefore ?? null);
+    const after = (r.stateAfter ?? null);
+    switch (r.objectType) {
+        case 'product': {
+            // The snapshot wins over the live row, and always has: the card reports
+            // what the action did, so a rename shows the name the actor typed.
+            const fromSnapshot = pickProductLabel(after) ?? pickProductLabel(before);
+            const live = lookups.targets.get(r.objectId);
+            return {
+                targetDisplayName: fromSnapshot ?? live?.label ?? r.objectId,
+                targetUrl: live?.url ?? null,
+            };
+        }
+        case 'warehouse':
+        case 'price_list': {
+            const live = lookups.targets.get(r.objectId);
+            const fromSnapshot = pickStr(after, 'name') ?? pickStr(before, 'name');
+            const fromSnapshotCode = pickStr(after, 'code') ?? pickStr(before, 'code');
+            return {
+                targetDisplayName: fromSnapshot ?? live?.label ?? fromSnapshotCode ?? r.objectId,
+                targetUrl: live?.url ?? null,
+            };
+        }
+        case 'stock_level': {
+            // Composite id "<productId>:<warehouseId>"; snapshot carries the
+            // human-readable parts.
+            const productSku = pickStr(after, 'productSku') ?? pickStr(before, 'productSku');
+            const warehouseCode = pickStr(after, 'warehouseCode') ?? pickStr(before, 'warehouseCode');
+            const display = productSku && warehouseCode
+                ? `${productSku} @ ${warehouseCode}`
+                : productSku ?? warehouseCode ?? r.objectId;
+            const productId = pickStr(after, 'productId') ?? pickStr(before, 'productId');
+            const url = productId ? `/catalog/products/${productId}` : null;
+            return { targetDisplayName: display, targetUrl: url };
+        }
+        case 'low_stock_threshold': {
+            const display = pickStr(after, 'productSku') ?? pickStr(before, 'productSku') ?? 'threshold';
+            const productId = pickStr(after, 'productId') ?? pickStr(before, 'productId');
+            const url = productId ? `/catalog/products/${productId}` : '/inventory/low-stock';
+            return { targetDisplayName: display, targetUrl: url };
+        }
+        case 'prompt_action_request': {
+            // Feature 043 — prompt-assistant execution summary. The snapshot
+            // carries the original prompt; surface a trimmed form of it.
+            const prompt = pickStr(after, 'prompt');
+            const display = prompt
+                ? prompt.length > 80
+                    ? `${prompt.slice(0, 77)}…`
+                    : prompt
+                : 'prompt action';
+            // No standalone detail page in v1 — outcomes live in the palette.
+            return { targetDisplayName: display, targetUrl: null };
+        }
+        case 'bulk_operation': {
+            const fileName = pickStr(after, 'fileName');
+            const warehouseCode = pickStr(after, 'warehouseCode') ?? pickStr(before, 'warehouseCode');
+            // The last fallback used to test `r.action === 'product.bulk_update'` and
+            // render the untranslated English string "bulk product update" for it.
+            // Two things wrong with one line, and both are D-163's shape one layer
+            // down: a host file naming another module's action token, and a
+            // user-visible sentence with no `pl`. The id is what every other
+            // unlabelled row falls back to, including this switch's own `default`.
+            const display = fileName && warehouseCode ? `${fileName} → ${warehouseCode}` : fileName ?? r.objectId;
+            // Bulk operations don't have a single canonical detail page in v1.
+            return { targetDisplayName: display, targetUrl: null };
+        }
+        default:
+            return { targetDisplayName: r.objectId, targetUrl: null };
+    }
+}
+function pickProductLabel(snapshot) {
+    if (!snapshot)
+        return null;
+    const name = snapshot['name'];
+    if (typeof name === 'string' && name.length > 0)
+        return name;
+    if (name && typeof name === 'object') {
+        const byLang = name;
+        // Try common language fallbacks before iterating.
+        for (const key of ['en', 'en-US', 'pl', 'pl-PL']) {
+            const v = byLang[key];
+            if (typeof v === 'string' && v.length > 0)
+                return v;
+        }
+        for (const v of Object.values(byLang)) {
+            if (typeof v === 'string' && v.length > 0)
+                return v;
+        }
+    }
+    const sku = snapshot['sku'];
+    if (typeof sku === 'string' && sku.length > 0)
+        return sku;
+    return null;
+}
+function pickStr(snapshot, key) {
+    if (!snapshot)
+        return null;
+    const v = snapshot[key];
+    return typeof v === 'string' && v.length > 0 ? v : null;
+}
+function extractSummary(r) {
+    // Surface only a compact summary for bulk-style rows. Never the full
+    // stateBefore/stateAfter blobs (FR-030).
+    //
+    // **The key list is the filter**, and it always was. There used to be a
+    // pre-test above it — `objectType !== 'bulk_operation' && action !==
+    // 'price_list.products_replace'` — which is a second, hand-written answer to
+    // "which rows are bulk-shaped", drifting against the very list below it and
+    // naming another module's action token in this host file (D-163's shape, one
+    // layer down from the four tables T042j retired). FR-030 is satisfied by the
+    // allow-list: a row that carries none of these keys still returns `null`,
+    // and a row that carries one is bulk-shaped by the only evidence there is.
+    const after = r.stateAfter;
+    if (!after)
+        return null;
+    const keys = [
+        'fileName',
+        'warehouseId',
+        'warehouseCode',
+        'rowsProcessed',
+        'rowsSkipped',
+        'rowsErrored',
+        'added',
+        'removed',
+        'kept',
+        'touchedFields',
+    ];
+    const out = {};
+    for (const k of keys) {
+        if (k in after)
+            out[k] = after[k];
+    }
+    return Object.keys(out).length > 0 ? out : null;
+}
+//# sourceMappingURL=recent-activity-service.js.map

package/dist/backend/services/recent-activity-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recent-activity-service.js","sourceRoot":"","sources":["../../../src/backend/services/recent-activity-service.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AA0EjE,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB,MAAM,OAAO,qBAAqB;IAEb;IAEA;IAEA;IAMA;IACA;IAZnB,YACmB,SAA8B;IAC/C,wEAAwE;IACvD,OAA8B;IAC/C,yDAAyD;IACxC,UAAoC;IACrD;;;;OAIG;IACc,aAA+D,EAC/D,UAAsC;QAXtC,cAAS,GAAT,SAAS,CAAqB;QAE9B,YAAO,GAAP,OAAO,CAAuB;QAE9B,eAAU,GAAV,UAAU,CAA0B;QAMpC,kBAAa,GAAb,aAAa,CAAkD;QAC/D,eAAU,GAAV,UAAU,CAA4B;IACtD,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,QAAiC,EAAE;QAC5C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEtC,yEAAyE;QACzE,wEAAwE;QACxE,+CAA+C;QAC/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;QACvD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC;QAClF,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAE5B,8EAA8E;QAC9E,0EAA0E;QAC1E,0EAA0E;QAC1E,4DAA4D;QAC5D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CACxB,aAAa,EACb,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAC5B;YACE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE;YACxC,KAAK;SACN,CACF,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEzC,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;SAC3D,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,MAAM,CAAC,IAAqB;QACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEjC,8DAA8D;QAC9D,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,IAAI,IAAI,CAAC,CAAC,CAAC;QAC5E,MAAM,UAAU,GACd,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;QAEnF,iFAAiF;QACjF,MAAM,CAAC,aAAa,EAAE,GAAG,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1D,IAAI,CAAC,UAAU,CAAC,OAAO,CACrB,kBAAkB,EAClB,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,6BAA6B,IAAI,IAAI,CAAC,CAAC,CACxE;YACD,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACrC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CACxD;SACF,CAAC,CAAC;QAEH,0EAA0E;QAC1E,2DAA2D;QAC3D,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;QACvD,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;YACnC,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,IAAI;aACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;aAC9E,MAAM,CAAC,CAAC,IAAI,EAA8B,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACjE,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,sBAAsB,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,CAAU,CAAC;AAE/E;;;;;GAKG;AACH,SAAS,UAAU,CAAC,UAAgC;IAClD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,EAAE,CAAC;QAC7F,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC;IACzE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACpB,IAAI,CAAC,GAAG,SAAS;QAAE,OAAO,SAAS,CAAC;IACpC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAI,GAAgC;IACxD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAK,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,GAAG;QAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,IAAqB,EAAE,UAAkB;IAC7D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAQD;;;;;;;;;GASG;AACH,SAAS,SAAS,CAChB,CAAgB,EAChB,OAA8B,EAC9B,OAAgB;IAEhB,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACxB,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,gBAAgB;IAChB,MAAM,SAAS,GAAuB,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9E,IAAI,gBAAwB,CAAC;IAC7B,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACvB,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC;IAC3E,CAAC;SAAM,CAAC;QACN,gBAAgB,GAAG,QAAQ,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,CAAC,6BAA6B,EAAE,CAAC;QACpC,MAAM,aAAa,GACjB,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,6BAA6B,CAAC,EAAE,KAAK;YACjE,CAAC,CAAC,6BAA6B,CAAC;QAClC,gBAAgB,GAAG,GAAG,gBAAgB,QAAQ,aAAa,GAAG,CAAC;IACjE,CAAC;IAED,+BAA+B;IAC/B,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAEnE,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE;QAChC,MAAM;QACN,MAAM,EAAE,UAAU,CAAC,QAAQ;QAC3B,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,gBAAgB;QAChB,SAAS;QACT,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,iBAAiB;QACjB,SAAS;QACT,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,CAAgB,EAChB,OAAgB;IAEhB,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,CAAmC,CAAC;IACzE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAmC,CAAC;IAEvE,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;QACrB,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,wEAAwE;YACxE,mEAAmE;YACnE,MAAM,YAAY,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACzE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC7C,OAAO;gBACL,iBAAiB,EAAE,YAAY,IAAI,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,QAAQ;gBAC5D,SAAS,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI;aAC7B,CAAC;QACJ,CAAC;QACD,KAAK,WAAW,CAAC;QACjB,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACvE,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC3E,OAAO;gBACL,iBAAiB,EAAE,YAAY,IAAI,IAAI,EAAE,KAAK,IAAI,gBAAgB,IAAI,CAAC,CAAC,QAAQ;gBAChF,SAAS,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI;aAC7B,CAAC;QACJ,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,iEAAiE;YACjE,wBAAwB;YACxB,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YACjF,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;YAC1F,MAAM,OAAO,GACX,UAAU,IAAI,aAAa;gBACzB,CAAC,CAAC,GAAG,UAAU,MAAM,aAAa,EAAE;gBACpC,CAAC,CAAC,UAAU,IAAI,aAAa,IAAI,CAAC,CAAC,QAAQ,CAAC;YAChD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAC9E,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,qBAAqB,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAChE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACxD,CAAC;QACD,KAAK,qBAAqB,CAAC,CAAC,CAAC;YAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,WAAW,CAAC;YAC7F,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAC9E,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,qBAAqB,SAAS,EAAE,CAAC,CAAC,CAAC,sBAAsB,CAAC;YAClF,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACxD,CAAC;QACD,KAAK,uBAAuB,CAAC,CAAC,CAAC;YAC7B,iEAAiE;YACjE,6DAA6D;YAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM;gBACpB,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE;oBAClB,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG;oBAC3B,CAAC,CAAC,MAAM;gBACV,CAAC,CAAC,eAAe,CAAC;YACpB,kEAAkE;YAClE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACzD,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAC5C,MAAM,aAAa,GACjB,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;YACtE,0EAA0E;YAC1E,uEAAuE;YACvE,uEAAuE;YACvE,gEAAgE;YAChE,iEAAiE;YACjE,uEAAuE;YACvE,MAAM,OAAO,GACX,QAAQ,IAAI,aAAa,CAAC,CAAC,CAAC,GAAG,QAAQ,MAAM,aAAa,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC;YACxF,mEAAmE;YACnE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACzD,CAAC;QACD;YACE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAwC;IAChE,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAA+B,CAAC;QAC/C,kDAAkD;QAClD,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,CAAC;QACtD,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,QAAwC,EAAE,GAAW;IACpE,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED,SAAS,cAAc,CAAC,CAAgB;IACtC,qEAAqE;IACrE,yCAAyC;IACzC,EAAE;IACF,wEAAwE;IACxE,qEAAqE;IACrE,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,2EAA2E;IAC3E,MAAM,KAAK,GAAG,CAAC,CAAC,UAAwD,CAAC;IACzE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG;QACX,UAAU;QACV,aAAa;QACb,eAAe;QACf,eAAe;QACf,aAAa;QACb,aAAa;QACb,OAAO;QACP,SAAS;QACT,MAAM;QACN,eAAe;KACP,CAAC;IACX,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,KAAK;YAAE,GAAG,CAAC,CAAC,CAAC,GAAI,KAAiC,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC"}

package/dist/backend/services/recent-activity-visibility.d.ts

@@ -0,0 +1,37 @@
+import type { SettingsReadPort } from '@endora-commerce/platform/kernel';
+import type { RecentActivityCatalog } from './recent-activity-catalog.js';
+/** One module's answer, for the admin screen. */
+export interface RecentActivityModuleVisibility {
+    moduleId: string;
+    moduleName: string;
+    visible: boolean;
+}
+export declare class RecentActivityVisibility {
+    private readonly catalog;
+    private readonly settings;
+    constructor(catalog: RecentActivityCatalog, settings: SettingsReadPort);
+    /**
+     * Every eligible module with the operator's current answer.
+     *
+     * One batch read, `salesChannelId: null` — the choice is platform-wide, for
+     * the reason activation is (FR-009): a home dashboard is not per-storefront,
+     * and joining `setting_values` would reintroduce channel dependence through
+     * the back door (Constitution XII).
+     *
+     * A code the settings store does not know resolves to **visible**, not to
+     * hidden. The row is created by the boot reconcile for a shipped module and
+     * by `install` for a package, so its absence means one has not run yet — a
+     * platform mid-install, not an operator's decision — and the ruling's default
+     * is the honest answer to "nobody has chosen".
+     */
+    list(): Promise<RecentActivityModuleVisibility[]>;
+    /**
+     * The action tokens the card may query — the conjunction of the two axes.
+     *
+     * Empty when every eligible module is hidden, and the caller must not turn
+     * that into "no filter": an unfiltered query would put every audited write on
+     * the dashboard, which is the opposite of what the operator asked for.
+     */
+    visibleActions(): Promise<string[]>;
+}
+//# sourceMappingURL=recent-activity-visibility.d.ts.map