@endora-commerce/mod-credentials 0.100.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Endora sp. z o.o. and the Endora Commerce contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,59 @@
+<!-- Generated by `pnpm --filter backend run manifests:generate`. Delete this line to take the file over; a README without it is never regenerated. -->
+
+# @endora-commerce/mod-credentials
+
+Reusable credential configurations (LLM, email adapter, …) referenced by settings and resolved by consumers; secrets encrypted at rest and write-only at the boundary.
+
+## What this is
+
+An **Endora Commerce module package**. Its module id is `credentials` — the identity of record in the platform's registries, in its migrations and in its setting, permission and translation codes.
+
+A module is not imported by application code. The platform discovers the extension packages an instance has installed, reads the manifest on the root subpath and composes the module from it, so installing this package and starting the instance is the whole integration.
+
+## Entry points
+
+| Import | Contents |
+| --- | --- |
+| `@endora-commerce/mod-credentials` | the module manifest — its id, version, dependencies, settings and activation |
+| `@endora-commerce/mod-credentials/admin` | the Admin UI contribution: the screens, navigation and palette actions it adds |
+| `@endora-commerce/mod-credentials/admin-ui` | React components this module publishes for another module’s admin screens |
+| `@endora-commerce/mod-credentials/backend` | the composition root the platform calls, with the entities, services, routes and workers it registers |
+| `@endora-commerce/mod-credentials/migrations` | the module’s own schema migrations, in the order the platform runs them |
+| `@endora-commerce/mod-credentials/tailwind.css` | the Tailwind source declaration for the admin code above |
+
+## Depends on
+
+Everything below is a **peer** dependency, so the application resolves exactly one copy of each — two copies of a host or of React are a runtime failure rather than a type error. An entry marked *optional* is needed only by the layers that use it.
+
+**Endora packages**
+
+- `@endora-commerce/admin-kit` — *optional*
+- `@endora-commerce/contracts`
+- `@endora-commerce/platform`
+
+**Third-party**
+
+- `@mikro-orm/core` ^6
+- `@mikro-orm/migrations` ^6
+- `@mikro-orm/postgresql` ^6
+- `fastify` ^5
+- `react` ^19 — *optional*
+- `react-router-dom` ^7 — *optional*
+- `zod` ^4
+
+## What the tarball carries
+
+- `dist/` — the compiled JavaScript and its type declarations
+- `i18n/` — the translation bundles this package ships (`en`, `pl`), loaded by the platform
+- `docs/` — the package’s own pages in the Endora Commerce documentation site
+- `tailwind.css` — the Tailwind source declaration
+
+## Install
+
+```bash
+pnpm add @endora-commerce/mod-credentials
+```
+
+## Licence
+
+MIT — the text is in `LICENSE`, beside this file.

package/dist/admin/api/credentials-client.d.ts

@@ -0,0 +1,11 @@
+import type { ConfigurationDto, ConfigurationTypeDescriptor, CreateConfiguration, UpdateConfiguration } from '@endora-commerce/contracts';
+export declare const credentialsClient: {
+    listTypes(): Promise<ConfigurationTypeDescriptor[]>;
+    list(type?: string): Promise<ConfigurationDto[]>;
+    get(code: string): Promise<ConfigurationDto>;
+    preview(code: string): Promise<ConfigurationDto>;
+    create(body: CreateConfiguration): Promise<ConfigurationDto>;
+    update(code: string, body: UpdateConfiguration): Promise<ConfigurationDto>;
+    delete(code: string): Promise<void>;
+};
+//# sourceMappingURL=credentials-client.d.ts.map

package/dist/admin/api/credentials-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials-client.d.ts","sourceRoot":"","sources":["../../../src/admin/api/credentials-client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,gBAAgB,EAChB,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,4BAA4B,CAAC;AAWpC,eAAO,MAAM,iBAAiB;iBACf,OAAO,CAAC,2BAA2B,EAAE,CAAC;gBAMvC,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;cAOtC,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;kBAI9B,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;iBAInC,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC;iBAI/C,MAAM,QAAQ,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC;iBAI7D,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGpC,CAAC"}

package/dist/admin/api/credentials-client.js

@@ -0,0 +1,38 @@
+import { apiClient } from '@endora-commerce/admin-kit/lib';
+/**
+ * Admin API client for the credentials module (feature 058).
+ *
+ * Thin wrapper over `apiClient` calls to `/api/v1/admin/credentials/...`; every
+ * shape comes from `@endora-commerce/contracts`. Secrets are never returned in plaintext —
+ * a `ConfigurationDto` field carries only `isSet` for secret fields.
+ */
+const BASE = '/api/v1/admin/credentials';
+export const credentialsClient = {
+    listTypes() {
+        return apiClient
+            .get(`${BASE}/types`)
+            .then((r) => r.types);
+    },
+    list(type) {
+        const q = type ? `?type=${encodeURIComponent(type)}` : '';
+        return apiClient
+            .get(`${BASE}${q}`)
+            .then((r) => r.configurations);
+    },
+    get(code) {
+        return apiClient.get(`${BASE}/${encodeURIComponent(code)}`);
+    },
+    preview(code) {
+        return apiClient.get(`${BASE}/${encodeURIComponent(code)}/preview`);
+    },
+    create(body) {
+        return apiClient.post(BASE, body);
+    },
+    update(code, body) {
+        return apiClient.put(`${BASE}/${encodeURIComponent(code)}`, body);
+    },
+    delete(code) {
+        return apiClient.delete(`${BASE}/${encodeURIComponent(code)}`);
+    },
+};
+//# sourceMappingURL=credentials-client.js.map

package/dist/admin/api/credentials-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials-client.js","sourceRoot":"","sources":["../../../src/admin/api/credentials-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAQ3D;;;;;;GAMG;AACH,MAAM,IAAI,GAAG,2BAA2B,CAAC;AAEzC,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,SAAS;QACP,OAAO,SAAS;aACb,GAAG,CAA2C,GAAG,IAAI,QAAQ,CAAC;aAC9D,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,CAAC,IAAa;QAChB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,OAAO,SAAS;aACb,GAAG,CAAyC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;aAC1D,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;IACnC,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,SAAS,CAAC,GAAG,CAAmB,GAAG,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,OAAO,SAAS,CAAC,GAAG,CAAmB,GAAG,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,CAAC,IAAyB;QAC9B,OAAO,SAAS,CAAC,IAAI,CAAmB,IAAI,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,CAAC,IAAY,EAAE,IAAyB;QAC5C,OAAO,SAAS,CAAC,GAAG,CAAmB,GAAG,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,OAAO,SAAS,CAAC,MAAM,CAAO,GAAG,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;CACF,CAAC"}

package/dist/admin/components/ConfigurationForm.d.ts

@@ -0,0 +1,22 @@
+import { type ReactNode } from 'react';
+import type { ConfigurationDto, ConfigurationTypeDescriptor, CreateConfiguration, UpdateConfiguration } from '@endora-commerce/contracts';
+/**
+ * Dynamic create/edit form for a credential configuration (feature 058 US1).
+ *
+ * The type + provider pickers drive which fields render (from the descriptor's
+ * `FieldDefinition[]`). Secret fields are write-only password inputs showing an
+ * is-Set placeholder; a blank secret on edit preserves the stored value. Type,
+ * provider and code are immutable once created.
+ */
+export interface ConfigurationFormProps {
+    types: ConfigurationTypeDescriptor[];
+    /** Present when editing an existing configuration. */
+    existing?: ConfigurationDto | null;
+    onCreate: (body: CreateConfiguration) => Promise<void>;
+    onUpdate: (code: string, body: UpdateConfiguration) => Promise<void>;
+    onCancel: () => void;
+    busy?: boolean;
+    error?: string | null;
+}
+export declare function ConfigurationForm({ types, existing, onCreate, onUpdate, onCancel, busy, error, }: ConfigurationFormProps): ReactNode;
+//# sourceMappingURL=ConfigurationForm.d.ts.map

package/dist/admin/components/ConfigurationForm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigurationForm.d.ts","sourceRoot":"","sources":["../../../src/admin/components/ConfigurationForm.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAC1D,OAAO,KAAK,EACV,gBAAgB,EAChB,2BAA2B,EAC3B,mBAAmB,EAEnB,mBAAmB,EACpB,MAAM,4BAA4B,CAAC;AAGpC;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,2BAA2B,EAAE,CAAC;IACrC,sDAAsD;IACtD,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACnC,QAAQ,EAAE,CAAC,IAAI,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,QAAQ,EAAE,MAAM,IAAI,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,wBAAgB,iBAAiB,CAAC,EAChC,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,IAAI,EACJ,KAAK,GACN,EAAE,sBAAsB,GAAG,SAAS,CA2IpC"}

package/dist/admin/components/ConfigurationForm.js

@@ -0,0 +1,89 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useMemo, useState } from 'react';
+import { Button, Input, Label, Select } from '@endora-commerce/admin-kit/ui';
+import { useTranslation } from '@endora-commerce/admin-kit/i18n';
+export function ConfigurationForm({ types, existing, onCreate, onUpdate, onCancel, busy, error, }) {
+    const t = useTranslation('credentials');
+    const isEdit = Boolean(existing);
+    const [name, setName] = useState(existing?.name ?? '');
+    const [code, setCode] = useState(existing?.code ?? '');
+    const [typeCode, setTypeCode] = useState(existing?.typeCode ?? types[0]?.code ?? '');
+    const descriptor = types.find((ty) => ty.code === typeCode);
+    const [providerCode, setProviderCode] = useState(existing?.providerCode ?? descriptor?.providers[0]?.code ?? '');
+    const provider = descriptor?.providers.find((p) => p.code === providerCode);
+    // Field values keyed by field key. Secret fields start blank (write-only);
+    // non-secret fields prefill from the existing DTO.
+    const initialValues = useMemo(() => {
+        const out = {};
+        for (const f of provider?.fields ?? []) {
+            if (f.secret)
+                continue;
+            const dtoField = existing?.fields.find((x) => x.key === f.key);
+            if (dtoField && 'value' in dtoField && dtoField.value !== undefined && dtoField.value !== null) {
+                out[f.key] = String(dtoField.value);
+            }
+        }
+        return out;
+        // Recompute when the provider changes.
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [providerCode, typeCode]);
+    const [values, setValues] = useState(initialValues);
+    const secretIsSet = (key) => existing?.fields.find((x) => x.key === key)?.isSet === true;
+    const setValue = (key, v) => setValues((prev) => ({ ...prev, [key]: v }));
+    const submit = async () => {
+        const payloadValues = {};
+        for (const f of provider?.fields ?? []) {
+            const raw = values[f.key];
+            if (f.secret) {
+                // Only send a secret when the operator typed a new one (write-only).
+                if (raw && raw.length > 0)
+                    payloadValues[f.key] = raw;
+                continue;
+            }
+            if (raw === undefined)
+                continue;
+            payloadValues[f.key] = coerce(f, raw);
+        }
+        if (isEdit && existing) {
+            await onUpdate(existing.code, { name, values: payloadValues, expectedVersion: existing.version });
+        }
+        else {
+            await onCreate({ code, name, typeCode, providerCode, values: payloadValues });
+        }
+    };
+    return (_jsxs("div", { className: "space-y-4 rounded-lg border p-4", children: [error ? _jsx("p", { className: "text-sm text-destructive", children: error }) : null, _jsxs("div", { className: "grid gap-4 sm:grid-cols-2", children: [_jsxs("div", { className: "space-y-1", children: [_jsx(Label, { htmlFor: "cred-name", children: t('form.name') }), _jsx(Input, { id: "cred-name", value: name, onChange: (e) => setName(e.target.value) })] }), _jsxs("div", { className: "space-y-1", children: [_jsx(Label, { htmlFor: "cred-code", children: t('form.code') }), _jsx(Input, { id: "cred-code", value: code, onChange: (e) => setCode(e.target.value), disabled: isEdit })] }), _jsxs("div", { className: "space-y-1", children: [_jsx(Label, { htmlFor: "cred-type", children: t('form.type') }), _jsx(Select, { id: "cred-type", value: typeCode, disabled: isEdit, onChange: (e) => {
+                                    const next = e.target.value;
+                                    setTypeCode(next);
+                                    const nextProvider = types.find((ty) => ty.code === next)?.providers[0]?.code ?? '';
+                                    setProviderCode(nextProvider);
+                                    setValues({});
+                                }, children: types.map((ty) => (_jsx("option", { value: ty.code, children: ty.label }, ty.code))) })] }), _jsxs("div", { className: "space-y-1", children: [_jsx(Label, { htmlFor: "cred-provider", children: t('form.provider') }), _jsx(Select, { id: "cred-provider", value: providerCode, disabled: isEdit, onChange: (e) => {
+                                    setProviderCode(e.target.value);
+                                    setValues({});
+                                }, children: (descriptor?.providers ?? []).map((p) => (_jsx("option", { value: p.code, children: p.label }, p.code))) })] })] }), _jsx("div", { className: "space-y-3", children: (provider?.fields ?? []).map((f) => (_jsxs("div", { className: "space-y-1", children: [_jsxs(Label, { htmlFor: `cred-field-${f.key}`, children: [f.label, f.required ? _jsx("span", { className: "text-destructive", children: " *" }) : null] }), renderField(f, values[f.key] ?? '', (v) => setValue(f.key, v), {
+                            secretPlaceholder: secretIsSet(f.key) ? t('form.secretSet') : t('form.secretUnset'),
+                            fieldId: `cred-field-${f.key}`,
+                        })] }, f.key))) }), _jsxs("div", { className: "flex justify-end gap-2", children: [_jsx(Button, { variant: "outline", onClick: onCancel, disabled: busy, children: t('action.cancel') }), _jsx(Button, { onClick: () => void submit(), disabled: busy, children: t('action.save') })] })] }));
+}
+function coerce(field, raw) {
+    if (field.kind === 'number') {
+        const n = Number(raw);
+        return Number.isNaN(n) ? raw : n;
+    }
+    if (field.kind === 'boolean')
+        return raw === 'true';
+    return raw;
+}
+function renderField(field, value, onChange, opts) {
+    if (field.secret) {
+        return (_jsx(Input, { id: opts.fieldId, type: "password", autoComplete: "new-password", value: value, placeholder: opts.secretPlaceholder, onChange: (e) => onChange(e.target.value) }));
+    }
+    if (field.kind === 'boolean') {
+        return (_jsxs(Select, { id: opts.fieldId, value: value || 'false', onChange: (e) => onChange(e.target.value), children: [_jsx("option", { value: "false", children: "false" }), _jsx("option", { value: "true", children: "true" })] }));
+    }
+    if (field.kind === 'select') {
+        return (_jsxs(Select, { id: opts.fieldId, value: value, onChange: (e) => onChange(e.target.value), children: [_jsx("option", { value: "", children: "\u2014" }), (field.options ?? []).map((o) => (_jsx("option", { value: o.value, children: o.label }, o.value)))] }));
+    }
+    return (_jsx(Input, { id: opts.fieldId, type: field.kind === 'number' ? 'number' : 'text', value: value, placeholder: field.placeholder ?? '', onChange: (e) => onChange(e.target.value) }));
+}
+//# sourceMappingURL=ConfigurationForm.js.map

package/dist/admin/components/ConfigurationForm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigurationForm.js","sourceRoot":"","sources":["../../../src/admin/components/ConfigurationForm.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAkB,MAAM,OAAO,CAAC;AAQ1D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAoBjE,MAAM,UAAU,iBAAiB,CAAC,EAChC,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,IAAI,EACJ,KAAK,GACkB;IACvB,MAAM,CAAC,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEjC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACrF,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC5D,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAC9C,QAAQ,EAAE,YAAY,IAAI,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAC/D,CAAC;IACF,MAAM,QAAQ,GAAG,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IAE5E,2EAA2E;IAC3E,mDAAmD;IACnD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE;QACjC,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,CAAC,MAAM;gBAAE,SAAS;YACvB,MAAM,QAAQ,GAAG,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;YAC/D,IAAI,QAAQ,IAAI,OAAO,IAAI,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC/F,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;QACX,uCAAuC;QACvC,uDAAuD;IACzD,CAAC,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7B,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAyB,aAAa,CAAC,CAAC;IAE5E,MAAM,WAAW,GAAG,CAAC,GAAW,EAAW,EAAE,CAC3C,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC;IAE9D,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,CAAS,EAAQ,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAEhG,MAAM,MAAM,GAAG,KAAK,IAAmB,EAAE;QACvC,MAAM,aAAa,GAA4B,EAAE,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;YACvC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;gBACb,qEAAqE;gBACrE,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;oBAAE,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;gBACtD,SAAS;YACX,CAAC;YACD,IAAI,GAAG,KAAK,SAAS;gBAAE,SAAS;YAChC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAC;YACvB,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QACpG,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CACL,eAAK,SAAS,EAAC,iCAAiC,aAC7C,KAAK,CAAC,CAAC,CAAC,YAAG,SAAS,EAAC,0BAA0B,YAAE,KAAK,GAAK,CAAC,CAAC,CAAC,IAAI,EAEnE,eAAK,SAAS,EAAC,2BAA2B,aACxC,eAAK,SAAS,EAAC,WAAW,aACxB,KAAC,KAAK,IAAC,OAAO,EAAC,WAAW,YAAE,CAAC,CAAC,WAAW,CAAC,GAAS,EACnD,KAAC,KAAK,IAAC,EAAE,EAAC,WAAW,EAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAI,IAC3E,EACN,eAAK,SAAS,EAAC,WAAW,aACxB,KAAC,KAAK,IAAC,OAAO,EAAC,WAAW,YAAE,CAAC,CAAC,WAAW,CAAC,GAAS,EACnD,KAAC,KAAK,IACJ,EAAE,EAAC,WAAW,EACd,KAAK,EAAE,IAAI,EACX,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACxC,QAAQ,EAAE,MAAM,GAChB,IACE,EACN,eAAK,SAAS,EAAC,WAAW,aACxB,KAAC,KAAK,IAAC,OAAO,EAAC,WAAW,YAAE,CAAC,CAAC,WAAW,CAAC,GAAS,EACnD,KAAC,MAAM,IACL,EAAE,EAAC,WAAW,EACd,KAAK,EAAE,QAAQ,EACf,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;oCACd,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oCAC5B,WAAW,CAAC,IAAI,CAAC,CAAC;oCAClB,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;oCACpF,eAAe,CAAC,YAAY,CAAC,CAAC;oCAC9B,SAAS,CAAC,EAAE,CAAC,CAAC;gCAChB,CAAC,YAEA,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CACjB,iBAAsB,KAAK,EAAE,EAAE,CAAC,IAAI,YACjC,EAAE,CAAC,KAAK,IADE,EAAE,CAAC,IAAI,CAEX,CACV,CAAC,GACK,IACL,EACN,eAAK,SAAS,EAAC,WAAW,aACxB,KAAC,KAAK,IAAC,OAAO,EAAC,eAAe,YAAE,CAAC,CAAC,eAAe,CAAC,GAAS,EAC3D,KAAC,MAAM,IACL,EAAE,EAAC,eAAe,EAClB,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;oCACd,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oCAChC,SAAS,CAAC,EAAE,CAAC,CAAC;gCAChB,CAAC,YAEA,CAAC,UAAU,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CACxC,iBAAqB,KAAK,EAAE,CAAC,CAAC,IAAI,YAC/B,CAAC,CAAC,KAAK,IADG,CAAC,CAAC,IAAI,CAEV,CACV,CAAC,GACK,IACL,IACF,EAEN,cAAK,SAAS,EAAC,WAAW,YACvB,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CACnC,eAAiB,SAAS,EAAC,WAAW,aACpC,MAAC,KAAK,IAAC,OAAO,EAAE,cAAc,CAAC,CAAC,GAAG,EAAE,aAClC,CAAC,CAAC,KAAK,EACP,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAM,SAAS,EAAC,kBAAkB,mBAAU,CAAC,CAAC,CAAC,IAAI,IAC3D,EACP,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE;4BAC9D,iBAAiB,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC;4BACnF,OAAO,EAAE,cAAc,CAAC,CAAC,GAAG,EAAE;yBAC/B,CAAC,KARM,CAAC,CAAC,GAAG,CAST,CACP,CAAC,GACE,EAEN,eAAK,SAAS,EAAC,wBAAwB,aACrC,KAAC,MAAM,IAAC,OAAO,EAAC,SAAS,EAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,YACxD,CAAC,CAAC,eAAe,CAAC,GACZ,EACT,KAAC,MAAM,IAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,YACjD,CAAC,CAAC,aAAa,CAAC,GACV,IACL,IACF,CACP,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,KAAsB,EAAE,GAAW;IACjD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,GAAG,KAAK,MAAM,CAAC;IACpD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAClB,KAAsB,EACtB,KAAa,EACb,QAA6B,EAC7B,IAAoD;IAEpD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO,CACL,KAAC,KAAK,IACJ,EAAE,EAAE,IAAI,CAAC,OAAO,EAChB,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,cAAc,EAC3B,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,IAAI,CAAC,iBAAiB,EACnC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GACzC,CACH,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CACL,MAAC,MAAM,IAAC,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,aAC1F,iBAAQ,KAAK,EAAC,OAAO,sBAAe,EACpC,iBAAQ,KAAK,EAAC,MAAM,qBAAc,IAC3B,CACV,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,CACL,MAAC,MAAM,IAAC,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,aAC/E,iBAAQ,KAAK,EAAC,EAAE,uBAAW,EAC1B,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAChC,iBAAsB,KAAK,EAAE,CAAC,CAAC,KAAK,YACjC,CAAC,CAAC,KAAK,IADG,CAAC,CAAC,KAAK,CAEX,CACV,CAAC,IACK,CACV,CAAC;IACJ,CAAC;IACD,OAAO,CACL,KAAC,KAAK,IACJ,EAAE,EAAE,IAAI,CAAC,OAAO,EAChB,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EACjD,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE,EACpC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GACzC,CACH,CAAC;AACJ,CAAC"}

package/dist/admin/index.d.ts

@@ -0,0 +1,47 @@
+/**
+ * `credentials`' admin surface — two routes and one sidebar entry, declared by
+ * the module that owns them (feature 091, Phase 4, batch 10;
+ * `specs/091-module-owned-admin-surfaces/contracts/admin-contribution.md`).
+ *
+ * **This is the batch's paying half.** `credentials` was 2-in / 0-out in the
+ * re-derived table and both incoming reaches were one file — `settings`'
+ * `ConfigurationReferenceInput.tsx`, which imported this module's admin API
+ * client *and* its `ConfigurationPreviewModal`. P6 took the client half (the
+ * caller builds `GET /api/v1/admin/credentials?type=…` from the published
+ * `apiClient` and `ConfigurationListResponse`), and this batch takes the
+ * component half, which is why `settings` and `credentials` move together: the
+ * repair's two endpoints are both inside it, so neither module pays a reach
+ * whose other end it is not moving.
+ *
+ * **The component half is `./admin-ui`, not the kit and not a zone.**
+ * `admin-component-contribution.md` Z1 decides it from the signature —
+ * `(open, configuration, onClose)` is a value in and a value back, question 1,
+ * therefore a published component — and Z1.1's kit test refuses it because the
+ * modal renders out of this module's own translation namespace. The reasoning
+ * in full, including why the R-1 §9.2 remedy is wrong for this one, is in
+ * `../admin-ui/index.ts`.
+ *
+ * **`/credentials/new` is a file rather than a prop.** `App.tsx` wrote
+ * `element={<CredentialsPage initialMode="new" />}`; a route contribution's
+ * `component` is a factory returning a module and the registry reads its
+ * `default`, so there is nowhere to put an argument. `CredentialsNewPage` is
+ * those two lines, held by the module instead of by the host, and it is the
+ * `new-credential` palette action's destination.
+ *
+ * **Both routes leave `App.tsx` ungated and arrive gated**, which is batch
+ * five's operator-visible repair arriving again: a host `<Route>` is the whole
+ * of what `App.tsx` declares, so before this batch a deep link to
+ * `/credentials` rendered the screen for any signed-in admin — and did so with
+ * the module switched **off** — leaving the API to answer 403 or 503 field by
+ * field. `ModuleRoute` gates both axes at the URL now.
+ *
+ * **This entry exports data and nothing else** (R2), like every `./admin`
+ * layer: `check:module-boundary`'s D-171 rule designates a subpath as contract
+ * surface when it emits no runtime binding, and `./admin` deliberately does not
+ * qualify, so a consumer reaching into another module's `./admin` stays a
+ * counted boundary reach. `./admin-ui` does not qualify either, deliberately —
+ * see Z11.
+ */
+import type { AdminContributions } from '@endora-commerce/admin-kit/contributions';
+export declare const contributions: AdminContributions;
+//# sourceMappingURL=index.d.ts.map

package/dist/admin/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/admin/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AA6BnF,eAAO,MAAM,aAAa,EAAE,kBAuC3B,CAAC"}

package/dist/admin/index.js

@@ -0,0 +1,65 @@
+/** The module's landing route: the configuration list. */
+const ROUTE_PATH = '/credentials';
+/**
+ * The code that opens the screen.
+ *
+ * `GET /api/v1/admin/credentials` and `GET /api/v1/admin/credentials/types` are
+ * both `requireAdmin('credentials:read')`, and the list fetches both on mount.
+ * The screen writes too — create, edit, delete — behind `credentials:write`,
+ * which is a second code this module declares and which is **not** what gates
+ * the surface: an operator holding only the read code opens the list and sees
+ * the write affordances refuse.
+ */
+const READ_PERMISSION = 'credentials:read';
+/**
+ * The code the create route enforces.
+ *
+ * `POST /api/v1/admin/credentials` is `requireAdmin('credentials:write')`, and
+ * `/credentials/new` lands straight on the form — a screen whose only purpose
+ * is a write. The codes are opaque strings, so an operator holding the read
+ * code alone must not reach it; the module's own `new-credential` palette
+ * action declares the same code, which is what `check:action-route-permissions`
+ * holds the pair to.
+ */
+const WRITE_PERMISSION = 'credentials:write';
+export const contributions = {
+    routes: [
+        {
+            path: ROUTE_PATH,
+            component: () => import('./pages/CredentialsPage.js'),
+            requiredPermission: READ_PERMISSION,
+            index: true,
+        },
+        {
+            path: `${ROUTE_PATH}/new`,
+            component: () => import('./pages/CredentialsNewPage.js'),
+            requiredPermission: WRITE_PERMISSION,
+        },
+    ],
+    nav: [
+        {
+            to: ROUTE_PATH,
+            // Module-relative (R8), resolved in this module's own namespace out of
+            // `packages/modules/credentials/i18n/`. It was `appShell.nav.credentials`
+            // in the shared `_i18n` bundle, one of the four shared files a module
+            // author had to edit.
+            labelKey: 'nav.credentials.label',
+            // The glyph `AppShell.tsx` rendered by hand, and already on
+            // `KnownIconNameSchema` — this module's `open-credentials` action names
+            // it too.
+            icon: 'KeyRound',
+            section: 'system',
+            // The hand-written position in *System* times a hundred, which is batch
+            // four's convention: `/credentials` was the ninth row of that section,
+            // directly above the three `/settings*` rows this batch converts at 1000,
+            // 1100 and 1200 and below `/webhooks` at 800. *System* still holds
+            // host-declared entries (`/platform/modules`, `/catalog/bulk-operations`),
+            // so `composeNav` appends every registry row after both whatever the
+            // weight says; what the weight can still do is keep the converted rows in
+            // the order the operator already had.
+            weight: 900,
+            requiredPermission: READ_PERMISSION,
+        },
+    ],
+};
+//# sourceMappingURL=index.js.map

package/dist/admin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/admin/index.ts"],"names":[],"mappings":"AA8CA,0DAA0D;AAC1D,MAAM,UAAU,GAAG,cAAc,CAAC;AAElC;;;;;;;;;GASG;AACH,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAE3C;;;;;;;;;GASG;AACH,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAE7C,MAAM,CAAC,MAAM,aAAa,GAAuB;IAC/C,MAAM,EAAE;QACN;YACE,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,4BAA4B,CAAC;YACrD,kBAAkB,EAAE,eAAe;YACnC,KAAK,EAAE,IAAI;SACZ;QACD;YACE,IAAI,EAAE,GAAG,UAAU,MAAM;YACzB,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,+BAA+B,CAAC;YACxD,kBAAkB,EAAE,gBAAgB;SACrC;KACF;IACD,GAAG,EAAE;QACH;YACE,EAAE,EAAE,UAAU;YACd,uEAAuE;YACvE,0EAA0E;YAC1E,sEAAsE;YACtE,sBAAsB;YACtB,QAAQ,EAAE,uBAAuB;YACjC,4DAA4D;YAC5D,wEAAwE;YACxE,UAAU;YACV,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,QAAQ;YACjB,wEAAwE;YACxE,uEAAuE;YACvE,0EAA0E;YAC1E,mEAAmE;YACnE,2EAA2E;YAC3E,qEAAqE;YACrE,0EAA0E;YAC1E,sCAAsC;YACtC,MAAM,EAAE,GAAG;YACX,kBAAkB,EAAE,eAAe;SACpC;KACF;CACF,CAAC"}

package/dist/admin/pages/CredentialsNewPage.d.ts

@@ -0,0 +1,19 @@
+import type { ReactNode } from 'react';
+/**
+ * `/credentials/new` — the same screen, landing on the empty form (feature 058
+ * US1; feature 091, Phase 4, batch 10).
+ *
+ * A file rather than a prop on the declaration, because
+ * `AdminRouteContribution.component` is a factory returning a module and reads
+ * its `default`: there is nowhere in the declaration to put an argument, and
+ * adding one would be a props channel the registry has to interpret for every
+ * module. `App.tsx` wrote `element={<CredentialsPage initialMode="new" />}`
+ * here, which is the same two lines with the host holding them.
+ *
+ * It is the destination of this module's `new-credential` palette action, so
+ * the deep link an operator follows from ⌘K lands on the form rather than on
+ * the list with a button to press.
+ */
+export declare function CredentialsNewPage(): ReactNode;
+export default CredentialsNewPage;
+//# sourceMappingURL=CredentialsNewPage.d.ts.map

package/dist/admin/pages/CredentialsNewPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CredentialsNewPage.d.ts","sourceRoot":"","sources":["../../../src/admin/pages/CredentialsNewPage.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAGvC;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,IAAI,SAAS,CAE9C;AAED,eAAe,kBAAkB,CAAC"}

package/dist/admin/pages/CredentialsNewPage.js

@@ -0,0 +1,22 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { CredentialsPage } from './CredentialsPage.js';
+/**
+ * `/credentials/new` — the same screen, landing on the empty form (feature 058
+ * US1; feature 091, Phase 4, batch 10).
+ *
+ * A file rather than a prop on the declaration, because
+ * `AdminRouteContribution.component` is a factory returning a module and reads
+ * its `default`: there is nowhere in the declaration to put an argument, and
+ * adding one would be a props channel the registry has to interpret for every
+ * module. `App.tsx` wrote `element={<CredentialsPage initialMode="new" />}`
+ * here, which is the same two lines with the host holding them.
+ *
+ * It is the destination of this module's `new-credential` palette action, so
+ * the deep link an operator follows from ⌘K lands on the form rather than on
+ * the list with a button to press.
+ */
+export function CredentialsNewPage() {
+    return _jsx(CredentialsPage, { initialMode: "new" });
+}
+export default CredentialsNewPage;
+//# sourceMappingURL=CredentialsNewPage.js.map

package/dist/admin/pages/CredentialsNewPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CredentialsNewPage.js","sourceRoot":"","sources":["../../../src/admin/pages/CredentialsNewPage.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,KAAC,eAAe,IAAC,WAAW,EAAC,KAAK,GAAG,CAAC;AAC/C,CAAC;AAED,eAAe,kBAAkB,CAAC"}

package/dist/admin/pages/CredentialsPage.d.ts

@@ -0,0 +1,22 @@
+import { type ReactNode } from 'react';
+/**
+ * Credentials management page (feature 058 US1).
+ *
+ * Lists configurations (secrets masked), supports create/edit via the dynamic
+ * `ConfigurationForm`, delete via `window.confirm`, and a read-only preview.
+ * Inert configurations (unregistered type) render read-only.
+ *
+ * `initialMode` lets the `/credentials/new` route (the command-palette
+ * "New credential configuration" action) land straight on the empty form.
+ */
+export interface CredentialsPageProps {
+    initialMode?: 'list' | 'new';
+}
+export declare function CredentialsPage({ initialMode }?: CredentialsPageProps): ReactNode;
+/**
+ * The registry loads a route component through a dynamic-import factory and
+ * reads its default export (feature 091, FR-013). The named export stays: it is
+ * the spelling this module's own code and its tests use.
+ */
+export default CredentialsPage;
+//# sourceMappingURL=CredentialsPage.d.ts.map

package/dist/admin/pages/CredentialsPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CredentialsPage.d.ts","sourceRoot":"","sources":["../../../src/admin/pages/CredentialsPage.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAgBzE;;;;;;;;;GASG;AACH,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;CAC9B;AAED,wBAAgB,eAAe,CAAC,EAAE,WAAoB,EAAE,GAAE,oBAAyB,GAAG,SAAS,CAoM9F;AAYD;;;;GAIG;AACH,eAAe,eAAe,CAAC"}

package/dist/admin/pages/CredentialsPage.js

@@ -0,0 +1,154 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useEffect, useState } from 'react';
+import { useNavigate } from 'react-router-dom';
+import { Badge, Button, PageHeader } from '@endora-commerce/admin-kit/ui';
+import { ResponsiveTable } from '@endora-commerce/admin-kit/components';
+import { ApiError } from '@endora-commerce/admin-kit/lib';
+import { useTranslation } from '@endora-commerce/admin-kit/i18n';
+import { credentialsClient } from '../api/credentials-client.js';
+import { ConfigurationForm } from '../components/ConfigurationForm.js';
+import { ConfigurationPreviewModal } from '../../admin-ui/ConfigurationPreviewModal.js';
+export function CredentialsPage({ initialMode = 'list' } = {}) {
+    const t = useTranslation('credentials');
+    const navigate = useNavigate();
+    const [types, setTypes] = useState([]);
+    const [items, setItems] = useState([]);
+    const [loading, setLoading] = useState(true);
+    const [mode, setMode] = useState(initialMode);
+    const [editing, setEditing] = useState(null);
+    const [preview, setPreview] = useState(null);
+    const [busy, setBusy] = useState(false);
+    const [formError, setFormError] = useState(null);
+    const [listError, setListError] = useState(null);
+    const messageFor = useCallback((err) => {
+        if (err instanceof ApiError) {
+            const code = err.envelope.error.code;
+            // CREDENTIAL_IN_USE carries the referencing settings — list them so the
+            // operator knows exactly what to detach before deleting (FR-012).
+            if (code === 'CREDENTIAL_IN_USE') {
+                const details = err.envelope.error.details;
+                const referrers = (details?.referencedBy ?? [])
+                    .map((r) => (r.salesChannelCode ? `${r.settingCode} (${r.salesChannelCode})` : r.settingCode))
+                    .join(', ');
+                return referrers
+                    ? t('error.inUseWith', { settings: referrers })
+                    : t('error.inUse');
+            }
+            const key = ERROR_KEY_BY_CODE[code];
+            if (key)
+                return t(key);
+            return err.envelope.error.message;
+        }
+        return t('error.generic');
+    }, [t]);
+    const reload = useCallback(async () => {
+        setLoading(true);
+        setListError(null);
+        try {
+            const [ts, list] = await Promise.all([credentialsClient.listTypes(), credentialsClient.list()]);
+            setTypes(ts);
+            setItems(list);
+        }
+        catch (err) {
+            setListError(messageFor(err));
+        }
+        finally {
+            setLoading(false);
+        }
+    }, [messageFor]);
+    useEffect(() => {
+        void reload();
+    }, [reload]);
+    // Leaving the form. When the page was entered through the /credentials/new
+    // deep link, drop that segment too so a reload does not reopen the form.
+    const backToList = useCallback(() => {
+        setMode('list');
+        setEditing(null);
+        setFormError(null);
+        if (initialMode === 'new')
+            navigate('/credentials', { replace: true });
+    }, [initialMode, navigate]);
+    const onCreate = async (body) => {
+        setBusy(true);
+        setFormError(null);
+        try {
+            await credentialsClient.create(body);
+            backToList();
+            await reload();
+        }
+        catch (err) {
+            setFormError(messageFor(err));
+        }
+        finally {
+            setBusy(false);
+        }
+    };
+    const onUpdate = async (code, body) => {
+        setBusy(true);
+        setFormError(null);
+        try {
+            await credentialsClient.update(code, body);
+            backToList();
+            await reload();
+        }
+        catch (err) {
+            setFormError(messageFor(err));
+        }
+        finally {
+            setBusy(false);
+        }
+    };
+    const onDelete = async (row) => {
+        if (!window.confirm(t('page.deleteConfirm')))
+            return;
+        try {
+            await credentialsClient.delete(row.code);
+            await reload();
+        }
+        catch (err) {
+            setListError(messageFor(err));
+        }
+    };
+    const columns = [
+        { id: 'name', header: t('table.name'), primary: true, render: (r) => r.name },
+        { id: 'code', header: t('table.code'), render: (r) => _jsx("code", { className: "text-xs", children: r.code }) },
+        {
+            id: 'type',
+            header: t('table.type'),
+            render: (r) => r.inert ? _jsx(Badge, { variant: "destructive", children: r.typeCode }) : (r.typeLabel ?? r.typeCode),
+        },
+        {
+            id: 'provider',
+            header: t('table.provider'),
+            render: (r) => r.providerLabel ?? r.providerCode,
+        },
+    ];
+    if (mode !== 'list') {
+        return (_jsxs("div", { children: [_jsx(PageHeader, { title: mode === 'new' ? t('page.new') : t('page.edit') }), _jsx(ConfigurationForm, { types: types, existing: mode === 'edit' ? editing : null, onCreate: onCreate, onUpdate: onUpdate, onCancel: backToList, busy: busy, error: formError })] }));
+    }
+    return (_jsxs("div", { children: [_jsx(PageHeader, { title: t('page.title'), description: t('page.subtitle'), actions: _jsx(Button, { onClick: () => {
+                        setEditing(null);
+                        setFormError(null);
+                        setMode('new');
+                    }, disabled: types.length === 0, children: t('page.new') }) }), listError ? _jsx("p", { className: "mb-3 text-sm text-destructive", children: listError }) : null, loading ? null : (_jsx(ResponsiveTable, { columns: columns, data: items, keyExtractor: (r) => r.id, emptyState: _jsx("p", { className: "text-sm text-muted-foreground", children: t('page.empty') }), renderActions: (r) => (_jsxs("div", { className: "flex justify-end gap-2", children: [_jsx(Button, { variant: "outline", size: "sm", onClick: () => setPreview(r), children: t('action.preview') }), _jsx(Button, { variant: "outline", size: "sm", disabled: r.inert, onClick: () => {
+                                setEditing(r);
+                                setFormError(null);
+                                setMode('edit');
+                            }, children: t('action.edit') }), _jsx(Button, { variant: "destructive", size: "sm", onClick: () => void onDelete(r), children: t('action.delete') })] })) })), _jsx(ConfigurationPreviewModal, { open: preview !== null, configuration: preview, onClose: () => setPreview(null) })] }));
+}
+/** Map contract error codes to translation keys for user-facing messages. */
+const ERROR_KEY_BY_CODE = {
+    CREDENTIAL_NOT_FOUND: 'error.notFound',
+    CREDENTIAL_CODE_TAKEN: 'error.codeTaken',
+    CREDENTIAL_TYPE_UNKNOWN: 'error.typeUnknown',
+    CREDENTIAL_VALIDATION_FAILED: 'error.validationFailed',
+    CREDENTIAL_IN_USE: 'error.inUse',
+    CREDENTIAL_TYPE_IMMUTABLE: 'error.typeImmutable',
+};
+/**
+ * The registry loads a route component through a dynamic-import factory and
+ * reads its default export (feature 091, FR-013). The named export stays: it is
+ * the spelling this module's own code and its tests use.
+ */
+export default CredentialsPage;
+//# sourceMappingURL=CredentialsPage.js.map