@endora-commerce/mod-credentials 0.100.0

package/dist/admin/pages/CredentialsPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CredentialsPage.js","sourceRoot":"","sources":["../../../src/admin/pages/CredentialsPage.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAkB,MAAM,OAAO,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAO/C,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAyB,MAAM,uCAAuC,CAAC;AAC/F,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAgBxF,MAAM,UAAU,eAAe,CAAC,EAAE,WAAW,GAAG,MAAM,KAA2B,EAAE;IACjF,MAAM,CAAC,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgC,EAAE,CAAC,CAAC;IACtE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAqB,EAAE,CAAC,CAAC;IAC3D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAA0B,WAAW,CAAC,CAAC;IACvE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAA0B,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAA0B,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAChE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAEhE,MAAM,UAAU,GAAG,WAAW,CAC5B,CAAC,GAAY,EAAU,EAAE;QACvB,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YACrC,wEAAwE;YACxE,kEAAkE;YAClE,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,OAEtB,CAAC;gBACd,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,YAAY,IAAI,EAAE,CAAC;qBAC5C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;qBAC7F,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO,SAAS;oBACd,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;oBAC/C,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YACvB,CAAC;YACD,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,GAAG;gBAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QACpC,CAAC;QACD,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC;IAC5B,CAAC,EACD,CAAC,CAAC,CAAC,CACJ,CAAC;IAEF,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,IAAmB,EAAE;QACnD,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAChG,QAAQ,CAAC,EAAE,CAAC,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAEjB,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,MAAM,EAAE,CAAC;IAChB,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,2EAA2E;IAC3E,yEAAyE;IACzE,MAAM,UAAU,GAAG,WAAW,CAAC,GAAS,EAAE;QACxC,OAAO,CAAC,MAAM,CAAC,CAAC;QAChB,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,WAAW,KAAK,KAAK;YAAE,QAAQ,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE5B,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAyB,EAAiB,EAAE;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACrC,UAAU,EAAE,CAAC;YACb,MAAM,MAAM,EAAE,CAAC;QACjB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAY,EAAE,IAAyB,EAAiB,EAAE;QAChF,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC3C,UAAU,EAAE,CAAC;YACb,MAAM,MAAM,EAAE,CAAC;QACjB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAqB,EAAiB,EAAE;QAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;YAAE,OAAO;QACrD,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,MAAM,EAAE,CAAC;QACjB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,GAAyC;QACpD,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;QAC7E,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,eAAM,SAAS,EAAC,SAAS,YAAE,CAAC,CAAC,IAAI,GAAQ,EAAE;QACjG;YACE,EAAE,EAAE,MAAM;YACV,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC;YACvB,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CACZ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAAE,CAAC,CAAC,QAAQ,GAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC;SAC5F;QACD;YACE,EAAE,EAAE,UAAU;YACd,MAAM,EAAE,CAAC,CAAC,gBAAgB,CAAC;YAC3B,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,YAAY;SACjD;KACF,CAAC;IAEF,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,CACL,0BACE,KAAC,UAAU,IAAC,KAAK,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAI,EACtE,KAAC,iBAAiB,IAChB,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAC1C,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,UAAU,EACpB,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,SAAS,GAChB,IACE,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,0BACE,KAAC,UAAU,IACT,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC,EACtB,WAAW,EAAE,CAAC,CAAC,eAAe,CAAC,EAC/B,OAAO,EACL,KAAC,MAAM,IACL,OAAO,EAAE,GAAG,EAAE;wBACZ,UAAU,CAAC,IAAI,CAAC,CAAC;wBACjB,YAAY,CAAC,IAAI,CAAC,CAAC;wBACnB,OAAO,CAAC,KAAK,CAAC,CAAC;oBACjB,CAAC,EACD,QAAQ,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,YAE3B,CAAC,CAAC,UAAU,CAAC,GACP,GAEX,EAED,SAAS,CAAC,CAAC,CAAC,YAAG,SAAS,EAAC,+BAA+B,YAAE,SAAS,GAAK,CAAC,CAAC,CAAC,IAAI,EAE/E,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAChB,KAAC,eAAe,IACd,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,KAAK,EACX,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EACzB,UAAU,EAAE,YAAG,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,YAAY,CAAC,GAAK,EAC9E,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CACpB,eAAK,SAAS,EAAC,wBAAwB,aACrC,KAAC,MAAM,IAAC,OAAO,EAAC,SAAS,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,YAC7D,CAAC,CAAC,gBAAgB,CAAC,GACb,EACT,KAAC,MAAM,IACL,OAAO,EAAC,SAAS,EACjB,IAAI,EAAC,IAAI,EACT,QAAQ,EAAE,CAAC,CAAC,KAAK,EACjB,OAAO,EAAE,GAAG,EAAE;gCACZ,UAAU,CAAC,CAAC,CAAC,CAAC;gCACd,YAAY,CAAC,IAAI,CAAC,CAAC;gCACnB,OAAO,CAAC,MAAM,CAAC,CAAC;4BAClB,CAAC,YAEA,CAAC,CAAC,aAAa,CAAC,GACV,EACT,KAAC,MAAM,IAAC,OAAO,EAAC,aAAa,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,YACpE,CAAC,CAAC,eAAe,CAAC,GACZ,IACL,CACP,GACD,CACH,EAED,KAAC,yBAAyB,IACxB,IAAI,EAAE,OAAO,KAAK,IAAI,EACtB,aAAa,EAAE,OAAO,EACtB,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAC/B,IACE,CACP,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,iBAAiB,GAA2B;IAChD,oBAAoB,EAAE,gBAAgB;IACtC,qBAAqB,EAAE,iBAAiB;IACxC,uBAAuB,EAAE,mBAAmB;IAC5C,4BAA4B,EAAE,wBAAwB;IACtD,iBAAiB,EAAE,aAAa;IAChC,yBAAyB,EAAE,qBAAqB;CACjD,CAAC;AAEF;;;;GAIG;AACH,eAAe,eAAe,CAAC"}

package/dist/admin-ui/ConfigurationPreviewModal.d.ts

@@ -0,0 +1,16 @@
+import { type ReactNode } from 'react';
+import type { ConfigurationDto } from '@endora-commerce/contracts';
+/**
+ * Read-only preview of a credential configuration (feature 058 US1).
+ *
+ * Hand-rolled overlay mirroring the `OrdersBulkStatusDialog` convention (no
+ * shared Dialog primitive exists). Secrets are shown only as "set / not set" —
+ * never a value (SC-003).
+ */
+export interface ConfigurationPreviewModalProps {
+    open: boolean;
+    configuration: ConfigurationDto | null;
+    onClose: () => void;
+}
+export declare function ConfigurationPreviewModal({ open, configuration, onClose, }: ConfigurationPreviewModalProps): ReactNode;
+//# sourceMappingURL=ConfigurationPreviewModal.d.ts.map

package/dist/admin-ui/ConfigurationPreviewModal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigurationPreviewModal.d.ts","sourceRoot":"","sources":["../../src/admin-ui/ConfigurationPreviewModal.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAGnE;;;;;;GAMG;AACH,MAAM,WAAW,8BAA8B;IAC7C,IAAI,EAAE,OAAO,CAAC;IACd,aAAa,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACvC,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,wBAAgB,yBAAyB,CAAC,EACxC,IAAI,EACJ,aAAa,EACb,OAAO,GACR,EAAE,8BAA8B,GAAG,SAAS,CA4C5C"}

package/dist/admin-ui/ConfigurationPreviewModal.js

@@ -0,0 +1,15 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import {} from 'react';
+import { Button } from '@endora-commerce/admin-kit/ui';
+import { useTranslation } from '@endora-commerce/admin-kit/i18n';
+export function ConfigurationPreviewModal({ open, configuration, onClose, }) {
+    const t = useTranslation('credentials');
+    if (!open || !configuration)
+        return null;
+    return (_jsx("div", { className: "fixed inset-0 z-50 flex items-center justify-center bg-black/40 p-4", role: "dialog", "aria-modal": "true", children: _jsxs("div", { className: "w-full max-w-md rounded-lg bg-background p-6 shadow-lg", children: [_jsx("h2", { className: "mb-1 text-lg font-semibold", children: t('preview.title') }), _jsxs("p", { className: "mb-4 text-sm text-muted-foreground", children: [configuration.name, " \u00B7 ", configuration.typeLabel ?? configuration.typeCode, " /", ' ', configuration.providerLabel ?? configuration.providerCode] }), configuration.inert ? (_jsx("p", { className: "mb-4 text-sm text-destructive", children: t('form.inert') })) : (_jsx("dl", { className: "space-y-2", children: configuration.fields.map((f) => (_jsxs("div", { className: "flex items-center justify-between gap-4 text-sm", children: [_jsx("dt", { className: "text-muted-foreground", children: f.key }), _jsx("dd", { className: "font-medium", children: f.secret
+                                    ? f.isSet
+                                        ? t('preview.secret')
+                                        : t('preview.notSet')
+                                    : String(f.value ?? '') })] }, f.key))) })), _jsx("div", { className: "mt-6 flex justify-end", children: _jsx(Button, { variant: "outline", onClick: onClose, children: t('action.cancel') }) })] }) }));
+}
+//# sourceMappingURL=ConfigurationPreviewModal.js.map

package/dist/admin-ui/ConfigurationPreviewModal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigurationPreviewModal.js","sourceRoot":"","sources":["../../src/admin-ui/ConfigurationPreviewModal.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAkB,MAAM,OAAO,CAAC;AAEvC,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAcjE,MAAM,UAAU,yBAAyB,CAAC,EACxC,IAAI,EACJ,aAAa,EACb,OAAO,GACwB;IAC/B,MAAM,CAAC,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAEzC,OAAO,CACL,cACE,SAAS,EAAC,qEAAqE,EAC/E,IAAI,EAAC,QAAQ,gBACF,MAAM,YAEjB,eAAK,SAAS,EAAC,wDAAwD,aACrE,aAAI,SAAS,EAAC,4BAA4B,YAAE,CAAC,CAAC,eAAe,CAAC,GAAM,EACpE,aAAG,SAAS,EAAC,oCAAoC,aAC9C,aAAa,CAAC,IAAI,cAAK,aAAa,CAAC,SAAS,IAAI,aAAa,CAAC,QAAQ,QAAI,GAAG,EAC/E,aAAa,CAAC,aAAa,IAAI,aAAa,CAAC,YAAY,IACxD,EAEH,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CACrB,YAAG,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,YAAY,CAAC,GAAK,CACnE,CAAC,CAAC,CAAC,CACF,aAAI,SAAS,EAAC,WAAW,YACtB,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAC/B,eAAiB,SAAS,EAAC,iDAAiD,aAC1E,aAAI,SAAS,EAAC,uBAAuB,YAAE,CAAC,CAAC,GAAG,GAAM,EAClD,aAAI,SAAS,EAAC,aAAa,YACxB,CAAC,CAAC,MAAM;oCACP,CAAC,CAAC,CAAC,CAAC,KAAK;wCACP,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC;wCACrB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC;oCACvB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,GACtB,KARG,CAAC,CAAC,GAAG,CAST,CACP,CAAC,GACC,CACN,EAED,cAAK,SAAS,EAAC,uBAAuB,YACpC,KAAC,MAAM,IAAC,OAAO,EAAC,SAAS,EAAC,OAAO,EAAE,OAAO,YACvC,CAAC,CAAC,eAAe,CAAC,GACZ,GACL,IACF,GACF,CACP,CAAC;AACJ,CAAC"}

package/dist/admin-ui/index.d.ts

@@ -0,0 +1,57 @@
+/**
+ * `credentials`' published component surface — D-191's `./admin-ui` exit,
+ * arriving with its first and only user (feature 091, Phase 4, batch 10;
+ * `contracts/admin-component-contribution.md` Z9…Z12, and R9 of
+ * `specs/084-small-f4-package-layout/contracts/module-package-layout.md`).
+ *
+ * ## Why this subpath exists at all, and why the kit was refused
+ *
+ * `settings`' `ConfigurationReferenceInput` — the editor for the
+ * `credential_ref` setting value type — renders this modal when the operator
+ * asks to see what a referenced configuration holds. The reach was
+ * `backend/scripts/ledgers/cross-module-imports/settings.ts`' only key, and
+ * `admin-component-contribution.md` Z1 decides its exit from the **signature**
+ * rather than from taste: `(open, configuration, onClose)` is a value in and a
+ * value back, which is Z1 question 1, so it is a **published component** and
+ * not a zone contribution. A zone has zero-or-many contributors and there is no
+ * honest answer for a modal that resolved to two `onClose`s.
+ *
+ * Z1.1 then asks the kit first, and the kit refuses this one: the modal calls
+ * `useTranslation('credentials')`, and R-1's §9.2 ruled that a module's
+ * translation namespace **is** module knowledge — the bundle behind it ships in
+ * a package `@endora-commerce/admin-kit` does not and may not depend on, is
+ * resolved at runtime by string, and a renamed key renders itself into the
+ * operator's screen as a label. Every string it shows is this module's
+ * vocabulary (*"Configuration preview"*, *"Set (hidden)"*, *"Unavailable —
+ * configuration type is no longer registered"*), so the R-1 remedy that
+ * retired `AssetPicker`, `AssetUploader` and `CategoryTreePicker` — move the
+ * copy to `core` and publish into the kit — would put credential vocabulary in
+ * the shared bundle. This is the one reach in the repository that takes the
+ * other exit, which is what `admin-component-contribution.md` §1.1 measured
+ * over all 69 ledgered admin reaches.
+ *
+ * ## The reach stays counted (Z11)
+ *
+ * `check:module-boundary`'s D-171 designation is derived from the artefact — a
+ * subpath is contract surface **iff** its emitted module exports no runtime
+ * binding — and this one exports a React component. So `settings`' ledger entry
+ * is **re-keyed, not retired**: the coupling is real, it now has a supported
+ * spelling, and a supported spelling is not an uncounted one. Do not widen that
+ * derivation for this subpath and do not add a field to the `endora` block;
+ * D-191 refuses both by name.
+ *
+ * ## Presence (Z12)
+ *
+ * A statically imported component is filtered by nothing, and `credentials`
+ * declares an activation control, so the **consumer** gates the render — see
+ * `useSurfaceVisibility()({ module: 'credentials' })` in
+ * `packages/modules/settings/src/admin/components/ConfigurationReferenceInput.tsx`.
+ * Gating here would be the wrong place: the component cannot know whether its
+ * absence should collapse the field or the whole row.
+ *
+ * **This entry re-exports and declares nothing of its own**, which is `./admin`
+ * R2's rule one directory over: the surface is the set of files listed here.
+ */
+export { ConfigurationPreviewModal } from './ConfigurationPreviewModal.js';
+export type { ConfigurationPreviewModalProps } from './ConfigurationPreviewModal.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/admin-ui/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/admin-ui/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,YAAY,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC"}

package/dist/admin-ui/index.js

@@ -0,0 +1,56 @@
+/**
+ * `credentials`' published component surface — D-191's `./admin-ui` exit,
+ * arriving with its first and only user (feature 091, Phase 4, batch 10;
+ * `contracts/admin-component-contribution.md` Z9…Z12, and R9 of
+ * `specs/084-small-f4-package-layout/contracts/module-package-layout.md`).
+ *
+ * ## Why this subpath exists at all, and why the kit was refused
+ *
+ * `settings`' `ConfigurationReferenceInput` — the editor for the
+ * `credential_ref` setting value type — renders this modal when the operator
+ * asks to see what a referenced configuration holds. The reach was
+ * `backend/scripts/ledgers/cross-module-imports/settings.ts`' only key, and
+ * `admin-component-contribution.md` Z1 decides its exit from the **signature**
+ * rather than from taste: `(open, configuration, onClose)` is a value in and a
+ * value back, which is Z1 question 1, so it is a **published component** and
+ * not a zone contribution. A zone has zero-or-many contributors and there is no
+ * honest answer for a modal that resolved to two `onClose`s.
+ *
+ * Z1.1 then asks the kit first, and the kit refuses this one: the modal calls
+ * `useTranslation('credentials')`, and R-1's §9.2 ruled that a module's
+ * translation namespace **is** module knowledge — the bundle behind it ships in
+ * a package `@endora-commerce/admin-kit` does not and may not depend on, is
+ * resolved at runtime by string, and a renamed key renders itself into the
+ * operator's screen as a label. Every string it shows is this module's
+ * vocabulary (*"Configuration preview"*, *"Set (hidden)"*, *"Unavailable —
+ * configuration type is no longer registered"*), so the R-1 remedy that
+ * retired `AssetPicker`, `AssetUploader` and `CategoryTreePicker` — move the
+ * copy to `core` and publish into the kit — would put credential vocabulary in
+ * the shared bundle. This is the one reach in the repository that takes the
+ * other exit, which is what `admin-component-contribution.md` §1.1 measured
+ * over all 69 ledgered admin reaches.
+ *
+ * ## The reach stays counted (Z11)
+ *
+ * `check:module-boundary`'s D-171 designation is derived from the artefact — a
+ * subpath is contract surface **iff** its emitted module exports no runtime
+ * binding — and this one exports a React component. So `settings`' ledger entry
+ * is **re-keyed, not retired**: the coupling is real, it now has a supported
+ * spelling, and a supported spelling is not an uncounted one. Do not widen that
+ * derivation for this subpath and do not add a field to the `endora` block;
+ * D-191 refuses both by name.
+ *
+ * ## Presence (Z12)
+ *
+ * A statically imported component is filtered by nothing, and `credentials`
+ * declares an activation control, so the **consumer** gates the render — see
+ * `useSurfaceVisibility()({ module: 'credentials' })` in
+ * `packages/modules/settings/src/admin/components/ConfigurationReferenceInput.tsx`.
+ * Gating here would be the wrong place: the component cannot know whether its
+ * absence should collapse the field or the whole row.
+ *
+ * **This entry re-exports and declares nothing of its own**, which is `./admin`
+ * R2's rule one directory over: the surface is the set of files listed here.
+ */
+export { ConfigurationPreviewModal } from './ConfigurationPreviewModal.js';
+//# sourceMappingURL=index.js.map

package/dist/admin-ui/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/admin-ui/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC"}

package/dist/backend/commands/create-configuration.command.d.ts

@@ -0,0 +1,20 @@
+import { type CreateConfiguration } from '@endora-commerce/contracts';
+import type { Command } from '@endora-commerce/platform/commands';
+import { CredentialConfiguration } from '../entities/credential-configuration.entity.js';
+import type { ConfigurationTypeRegistry } from '../services/configuration-type-registry.js';
+import { providerVariantFor } from '../services/field-validator.js';
+/**
+ * `credential.create` (feature 058 US1, Principle XIII).
+ *
+ * Validates the submitted values against the selected type/provider descriptor,
+ * encrypts secret fields, and persists a new configuration. Secrets are redacted
+ * in the audit `after` state. Irreversible (undoing a secret change is
+ * high-risk).
+ */
+export declare function makeCreateConfigurationCommand(input: {
+    data: CreateConfiguration;
+    registry: ConfigurationTypeRegistry;
+    secretEncryptionKey: string | undefined;
+}): Command<CredentialConfiguration>;
+export { providerVariantFor };
+//# sourceMappingURL=create-configuration.command.d.ts.map

package/dist/backend/commands/create-configuration.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-configuration.command.d.ts","sourceRoot":"","sources":["../../../src/backend/commands/create-configuration.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACnF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oCAAoC,CAAC;AAElE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AAE5F,OAAO,EAEL,kBAAkB,EAEnB,MAAM,gCAAgC,CAAC;AAExC;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACpD,IAAI,EAAE,mBAAmB,CAAC;IAC1B,QAAQ,EAAE,yBAAyB,CAAC;IACpC,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAkEnC;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/backend/commands/create-configuration.command.js

@@ -0,0 +1,70 @@
+import { ERROR_CODES } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { CredentialConfiguration } from '../entities/credential-configuration.entity.js';
+import { ConfigurationTypeUnknown } from '../services/configuration-type-registry.js';
+import { buildPersistableValues, providerVariantFor, redactSecretsForAudit, } from '../services/field-validator.js';
+/**
+ * `credential.create` (feature 058 US1, Principle XIII).
+ *
+ * Validates the submitted values against the selected type/provider descriptor,
+ * encrypts secret fields, and persists a new configuration. Secrets are redacted
+ * in the audit `after` state. Irreversible (undoing a secret change is
+ * high-risk).
+ */
+export function makeCreateConfigurationCommand(input) {
+    const { data, registry, secretEncryptionKey } = input;
+    return {
+        action: 'credential.create',
+        objectType: 'credential_configuration',
+        objectId: data.code,
+        run: async ({ em }) => {
+            let descriptor;
+            try {
+                descriptor = registry.resolve(data.typeCode);
+            }
+            catch (err) {
+                if (err instanceof ConfigurationTypeUnknown) {
+                    throw new HttpError(400, ERROR_CODES.CREDENTIAL_TYPE_UNKNOWN, `Unknown configuration type "${data.typeCode}".`);
+                }
+                throw err;
+            }
+            const variant = descriptor.providers.find((p) => p.code === data.providerCode);
+            if (!variant) {
+                throw new HttpError(400, ERROR_CODES.CREDENTIAL_TYPE_UNKNOWN, `Unknown provider "${data.providerCode}" for type "${data.typeCode}".`);
+            }
+            const existing = await em.findOne(CredentialConfiguration, { code: data.code });
+            if (existing) {
+                throw new HttpError(409, ERROR_CODES.CREDENTIAL_CODE_TAKEN, `Code "${data.code}" is already in use.`);
+            }
+            const { values, errors } = buildPersistableValues({
+                fields: variant.fields,
+                submitted: data.values,
+                existing: {},
+                secretEncryptionKey,
+            });
+            if (errors.length > 0) {
+                throw new HttpError(422, ERROR_CODES.CREDENTIAL_VALIDATION_FAILED, 'Some fields are invalid.', errors.map((e) => ({ path: e.field, issue: e.message })));
+            }
+            const entity = em.create(CredentialConfiguration, {
+                code: data.code,
+                name: data.name,
+                typeCode: data.typeCode,
+                providerCode: data.providerCode,
+                values,
+            });
+            await em.persistAndFlush(entity);
+            return {
+                result: entity,
+                after: {
+                    code: entity.code,
+                    name: entity.name,
+                    typeCode: entity.typeCode,
+                    providerCode: entity.providerCode,
+                    values: redactSecretsForAudit(values, variant.fields),
+                },
+            };
+        },
+    };
+}
+export { providerVariantFor };
+//# sourceMappingURL=create-configuration.command.js.map

package/dist/backend/commands/create-configuration.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-configuration.command.js","sourceRoot":"","sources":["../../../src/backend/commands/create-configuration.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA4B,MAAM,4BAA4B,CAAC;AAEnF,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAEzF,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,gCAAgC,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAI9C;IACC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,mBAAmB,EAAE,GAAG,KAAK,CAAC;IACtD,OAAO;QACL,MAAM,EAAE,mBAAmB;QAC3B,UAAU,EAAE,0BAA0B;QACtC,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;YACpB,IAAI,UAAU,CAAC;YACf,IAAI,CAAC;gBACH,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;oBAC5C,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,uBAAuB,EAAE,+BAA+B,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAClH,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,YAAY,CAAC,CAAC;YAC/E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,uBAAuB,EACnC,qBAAqB,IAAI,CAAC,YAAY,eAAe,IAAI,CAAC,QAAQ,IAAI,CACvE,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAChF,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,qBAAqB,EAAE,SAAS,IAAI,CAAC,IAAI,sBAAsB,CAAC,CAAC;YACxG,CAAC;YAED,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,sBAAsB,CAAC;gBAChD,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,IAAI,CAAC,MAAM;gBACtB,QAAQ,EAAE,EAAE;gBACZ,mBAAmB;aACpB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,4BAA4B,EACxC,0BAA0B,EAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CACzD,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,uBAAuB,EAAE;gBAChD,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,MAAM;aACP,CAAC,CAAC;YACH,MAAM,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAEjC,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,MAAM,EAAE,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC;iBACtD;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/backend/commands/delete-configuration.command.d.ts

@@ -0,0 +1,16 @@
+import type { Command } from '@endora-commerce/platform/commands';
+import type { ConfigurationTypeRegistry } from '../services/configuration-type-registry.js';
+/**
+ * `credential.delete` (feature 058 US1, Principle XIII).
+ *
+ * Unconditional delete for US1 — the referencing-setting guard (`CREDENTIAL_IN_USE`)
+ * is added in US2 (T043). Captures the before-state with secrets redacted.
+ * Irreversible.
+ */
+export declare function makeDeleteConfigurationCommand(input: {
+    code: string;
+    registry: ConfigurationTypeRegistry;
+}): Command<{
+    code: string;
+}>;
+//# sourceMappingURL=delete-configuration.command.d.ts.map

package/dist/backend/commands/delete-configuration.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-configuration.command.d.ts","sourceRoot":"","sources":["../../../src/backend/commands/delete-configuration.command.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAc,OAAO,EAAE,MAAM,oCAAoC,CAAC;AAG9E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AAG5F;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,yBAAyB,CAAC;CACrC,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAoC5B"}

package/dist/backend/commands/delete-configuration.command.js

@@ -0,0 +1,48 @@
+import { ERROR_CODES } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { CredentialConfiguration } from '../entities/credential-configuration.entity.js';
+import { redactSecretsForAudit } from '../services/field-validator.js';
+/**
+ * `credential.delete` (feature 058 US1, Principle XIII).
+ *
+ * Unconditional delete for US1 — the referencing-setting guard (`CREDENTIAL_IN_USE`)
+ * is added in US2 (T043). Captures the before-state with secrets redacted.
+ * Irreversible.
+ */
+export function makeDeleteConfigurationCommand(input) {
+    const { code, registry } = input;
+    // The registry's diagnostic read (issue #129): the audit snapshot has to know
+    // which value was a secret whatever the contributing module's state, or a
+    // deletion while that module is off records the credential without recording
+    // that it held one.
+    const variantFields = (entity) => {
+        const descriptor = registry.entry(entity.typeCode);
+        return descriptor?.providers.find((p) => p.code === entity.providerCode)?.fields ?? [];
+    };
+    return {
+        action: 'credential.delete',
+        objectType: 'credential_configuration',
+        objectId: code,
+        capture: async ({ em }) => {
+            const entity = await em.findOne(CredentialConfiguration, { code });
+            if (!entity)
+                return null;
+            return {
+                code: entity.code,
+                name: entity.name,
+                typeCode: entity.typeCode,
+                providerCode: entity.providerCode,
+                values: redactSecretsForAudit(entity.values, variantFields(entity)),
+            };
+        },
+        run: async ({ em }) => {
+            const entity = await em.findOne(CredentialConfiguration, { code });
+            if (!entity) {
+                throw new HttpError(404, ERROR_CODES.CREDENTIAL_NOT_FOUND, `Configuration "${code}" not found.`);
+            }
+            await em.removeAndFlush(entity);
+            return { result: { code }, after: null };
+        },
+    };
+}
+//# sourceMappingURL=delete-configuration.command.js.map

package/dist/backend/commands/delete-configuration.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-configuration.command.js","sourceRoot":"","sources":["../../../src/backend/commands/delete-configuration.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAEzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAEvE;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAG9C;IACC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAEjC,8EAA8E;IAC9E,0EAA0E;IAC1E,6EAA6E;IAC7E,oBAAoB;IACpB,MAAM,aAAa,GAAG,CAAC,MAA+B,EAAE,EAAE;QACxD,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnD,OAAO,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC;IACzF,CAAC,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,mBAAmB;QAC3B,UAAU,EAAE,0BAA0B;QACtC,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAuB,EAAE;YAC7C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,MAAM,EAAE,qBAAqB,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;aACpE,CAAC;QACJ,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;YACpB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,oBAAoB,EAAE,kBAAkB,IAAI,cAAc,CAAC,CAAC;YACnG,CAAC;YACD,MAAM,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAChC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC3C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/backend/commands/update-configuration.command.d.ts

@@ -0,0 +1,20 @@
+import { type UpdateConfiguration } from '@endora-commerce/contracts';
+import type { Command } from '@endora-commerce/platform/commands';
+import { CredentialConfiguration } from '../entities/credential-configuration.entity.js';
+import type { ConfigurationTypeRegistry } from '../services/configuration-type-registry.js';
+/**
+ * `credential.update` (feature 058 US1, Principle XIII).
+ *
+ * Write-only secret preservation: a secret submitted blank / omitted / equal to
+ * the `[redacted]` mask keeps the stored envelope; a non-empty secret is
+ * re-encrypted. `typeCode`/`providerCode` are immutable (rejected upstream in
+ * the route). Honors `expectedVersion` (optimistic lock). Secrets redacted in
+ * both audit states. Irreversible.
+ */
+export declare function makeUpdateConfigurationCommand(input: {
+    code: string;
+    data: UpdateConfiguration;
+    registry: ConfigurationTypeRegistry;
+    secretEncryptionKey: string | undefined;
+}): Command<CredentialConfiguration>;
+//# sourceMappingURL=update-configuration.command.d.ts.map

package/dist/backend/commands/update-configuration.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-configuration.command.d.ts","sourceRoot":"","sources":["../../../src/backend/commands/update-configuration.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACnF,OAAO,KAAK,EAAc,OAAO,EAAE,MAAM,oCAAoC,CAAC;AAG9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AAM5F;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,mBAAmB,CAAC;IAC1B,QAAQ,EAAE,yBAAyB,CAAC;IACpC,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAkGnC"}

package/dist/backend/commands/update-configuration.command.js

@@ -0,0 +1,94 @@
+import { ERROR_CODES } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { ModuleDisabledError } from '@endora-commerce/platform/kernel';
+import { CredentialConfiguration } from '../entities/credential-configuration.entity.js';
+import { buildPersistableValues, redactSecretsForAudit, } from '../services/field-validator.js';
+/**
+ * `credential.update` (feature 058 US1, Principle XIII).
+ *
+ * Write-only secret preservation: a secret submitted blank / omitted / equal to
+ * the `[redacted]` mask keeps the stored envelope; a non-empty secret is
+ * re-encrypted. `typeCode`/`providerCode` are immutable (rejected upstream in
+ * the route). Honors `expectedVersion` (optimistic lock). Secrets redacted in
+ * both audit states. Irreversible.
+ */
+export function makeUpdateConfigurationCommand(input) {
+    const { code, data, registry, secretEncryptionKey } = input;
+    // The registry's diagnostic read (issue #129), for the same reason as in the
+    // delete command: an audit snapshot must know which value was a secret
+    // whatever the contributing module's state. The write itself reads the acting
+    // side and refuses — see `run`.
+    const loadVariantFields = (entity) => {
+        const descriptor = registry.entry(entity.typeCode);
+        const variant = descriptor?.providers.find((p) => p.code === entity.providerCode);
+        return variant?.fields ?? [];
+    };
+    return {
+        action: 'credential.update',
+        objectType: 'credential_configuration',
+        objectId: code,
+        capture: async ({ em }) => {
+            const entity = await em.findOne(CredentialConfiguration, { code });
+            if (!entity)
+                return null;
+            return {
+                code: entity.code,
+                name: entity.name,
+                typeCode: entity.typeCode,
+                providerCode: entity.providerCode,
+                values: redactSecretsForAudit(entity.values, loadVariantFields(entity)),
+            };
+        },
+        run: async ({ em }) => {
+            const entity = await em.findOne(CredentialConfiguration, { code });
+            if (!entity) {
+                throw new HttpError(404, ERROR_CODES.CREDENTIAL_NOT_FOUND, `Configuration "${code}" not found.`);
+            }
+            if (data.expectedVersion !== undefined && entity.version !== data.expectedVersion) {
+                throw new HttpError(409, ERROR_CODES.VERSION_CONFLICT, 'The configuration was modified by someone else. Reload and try again.');
+            }
+            // The acting read, and the two "no descriptor" answers kept apart: a type
+            // nobody registers is the inert row FR-016 describes, while a type whose
+            // contributing module is switched off comes straight back with that module
+            // — so it refuses with the 503 envelope naming it, rather than telling an
+            // operator their configuration has lost its type.
+            const owner = registry.ownerOf(entity.typeCode);
+            if (owner !== null && !registry.isAvailable(entity.typeCode)) {
+                throw new ModuleDisabledError(owner);
+            }
+            const descriptor = registry.get(entity.typeCode);
+            const variant = descriptor?.providers.find((p) => p.code === entity.providerCode);
+            if (!variant) {
+                // Inert: the type/provider is no longer registered — refuse to edit
+                // rather than validate against an unknown shape (FR-016).
+                throw new HttpError(400, ERROR_CODES.CREDENTIAL_TYPE_UNKNOWN, `Configuration type "${entity.typeCode}" is no longer registered.`);
+            }
+            if (data.name !== undefined)
+                entity.name = data.name;
+            if (data.values !== undefined) {
+                const { values, errors } = buildPersistableValues({
+                    fields: variant.fields,
+                    submitted: data.values,
+                    existing: entity.values,
+                    secretEncryptionKey,
+                });
+                if (errors.length > 0) {
+                    throw new HttpError(422, ERROR_CODES.CREDENTIAL_VALIDATION_FAILED, 'Some fields are invalid.', errors.map((e) => ({ path: e.field, issue: e.message })));
+                }
+                entity.values = values;
+            }
+            await em.flush();
+            return {
+                result: entity,
+                after: {
+                    code: entity.code,
+                    name: entity.name,
+                    typeCode: entity.typeCode,
+                    providerCode: entity.providerCode,
+                    values: redactSecretsForAudit(entity.values, variant.fields),
+                },
+            };
+        },
+    };
+}
+//# sourceMappingURL=update-configuration.command.js.map

package/dist/backend/commands/update-configuration.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-configuration.command.js","sourceRoot":"","sources":["../../../src/backend/commands/update-configuration.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA4B,MAAM,4BAA4B,CAAC;AAEnF,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAEzF,OAAO,EACL,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,gCAAgC,CAAC;AAExC;;;;;;;;GAQG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAK9C;IACC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,mBAAmB,EAAE,GAAG,KAAK,CAAC;IAE5D,6EAA6E;IAC7E,uEAAuE;IACvE,8EAA8E;IAC9E,gCAAgC;IAChC,MAAM,iBAAiB,GAAG,CAAC,MAA+B,EAAE,EAAE;QAC5D,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,YAAY,CAAC,CAAC;QAClF,OAAO,OAAO,EAAE,MAAM,IAAI,EAAE,CAAC;IAC/B,CAAC,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,mBAAmB;QAC3B,UAAU,EAAE,0BAA0B;QACtC,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAuB,EAAE;YAC7C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,MAAM,EAAE,qBAAqB,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;aACxE,CAAC;QACJ,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;YACpB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,oBAAoB,EAAE,kBAAkB,IAAI,cAAc,CAAC,CAAC;YACnG,CAAC;YAED,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;gBAClF,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,gBAAgB,EAC5B,uEAAuE,CACxE,CAAC;YACJ,CAAC;YAED,0EAA0E;YAC1E,yEAAyE;YACzE,2EAA2E;YAC3E,0EAA0E;YAC1E,kDAAkD;YAClD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChD,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACvC,CAAC;YAED,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,YAAY,CAAC,CAAC;YAClF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,oEAAoE;gBACpE,0DAA0D;gBAC1D,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,uBAAuB,EACnC,uBAAuB,MAAM,CAAC,QAAQ,4BAA4B,CACnE,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YAErD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,sBAAsB,CAAC;oBAChD,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,SAAS,EAAE,IAAI,CAAC,MAAM;oBACtB,QAAQ,EAAE,MAAM,CAAC,MAAM;oBACvB,mBAAmB;iBACpB,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtB,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,4BAA4B,EACxC,0BAA0B,EAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CACzD,CAAC;gBACJ,CAAC;gBACD,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;YACzB,CAAC;YAED,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YAEjB,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,MAAM,EAAE,qBAAqB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC;iBAC7D;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/backend/entities/credential-configuration.entity.d.ts

@@ -0,0 +1,30 @@
+import { OptionalProps } from '@mikro-orm/core';
+/**
+ * CredentialConfiguration — feature 058 / data-model.md §1.
+ *
+ * A reusable, named instance of a code-registered configuration type (e.g.
+ * `llm`, `email_adapter`). The credentials core is type-agnostic: `typeCode` /
+ * `providerCode` are resolved against the in-process `ConfigurationTypeRegistry`
+ * at read/write time, never enforced by DB constraints.
+ *
+ * Platform-global (`@GlobalEntity()`, Principle XI) — like `SettingValue`, this
+ * carries no tenant key and is administered platform-wide.
+ *
+ * `values` is a field-value bag keyed by `FieldDefinition.key`: secret fields
+ * hold AES-256-GCM envelopes (`{ v, alg, iv, ct, tag }`), non-secret fields hold
+ * plain JSON scalars. `version` powers the optimistic lock guarding concurrent
+ * edits.
+ */
+export declare class CredentialConfiguration {
+    [OptionalProps]?: 'id' | 'version' | 'createdAt' | 'updatedAt';
+    id: string;
+    code: string;
+    name: string;
+    typeCode: string;
+    providerCode: string;
+    values: Record<string, unknown>;
+    version: number;
+    createdAt: Date;
+    updatedAt: Date;
+}
+//# sourceMappingURL=credential-configuration.entity.d.ts.map

package/dist/backend/entities/credential-configuration.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-configuration.entity.d.ts","sourceRoot":"","sources":["../../../src/backend/entities/credential-configuration.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,aAAa,EAAgC,MAAM,iBAAiB,CAAC;AAI7F;;;;;;;;;;;;;;;GAeG;AACH,qBAEa,uBAAuB;IAClC,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,CAAC;IAG/D,EAAE,EAAE,MAAM,CAAgB;IAI1B,IAAI,EAAG,MAAM,CAAC;IAGd,IAAI,EAAG,MAAM,CAAC;IAId,QAAQ,EAAG,MAAM,CAAC;IAGlB,YAAY,EAAG,MAAM,CAAC;IAGtB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAM;IAGrC,OAAO,EAAG,MAAM,CAAC;IAGjB,SAAS,EAAE,IAAI,CAAc;IAG7B,SAAS,EAAE,IAAI,CAAc;CAC9B"}

package/dist/backend/entities/credential-configuration.entity.js

@@ -0,0 +1,84 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Entity, Index, OptionalProps, PrimaryKey, Property, Unique } from '@mikro-orm/core';
+import { randomUUID } from 'crypto';
+import { GlobalEntity } from '@endora-commerce/platform/tenancy';
+/**
+ * CredentialConfiguration — feature 058 / data-model.md §1.
+ *
+ * A reusable, named instance of a code-registered configuration type (e.g.
+ * `llm`, `email_adapter`). The credentials core is type-agnostic: `typeCode` /
+ * `providerCode` are resolved against the in-process `ConfigurationTypeRegistry`
+ * at read/write time, never enforced by DB constraints.
+ *
+ * Platform-global (`@GlobalEntity()`, Principle XI) — like `SettingValue`, this
+ * carries no tenant key and is administered platform-wide.
+ *
+ * `values` is a field-value bag keyed by `FieldDefinition.key`: secret fields
+ * hold AES-256-GCM envelopes (`{ v, alg, iv, ct, tag }`), non-secret fields hold
+ * plain JSON scalars. `version` powers the optimistic lock guarding concurrent
+ * edits.
+ */
+let CredentialConfiguration = class CredentialConfiguration {
+    [OptionalProps];
+    id = randomUUID();
+    code;
+    name;
+    typeCode;
+    providerCode;
+    values = {};
+    version;
+    createdAt = new Date();
+    updatedAt = new Date();
+};
+__decorate([
+    PrimaryKey({ type: 'uuid' }),
+    __metadata("design:type", String)
+], CredentialConfiguration.prototype, "id", void 0);
+__decorate([
+    Property({ type: 'varchar', length: 128, fieldName: 'code' }),
+    Unique(),
+    __metadata("design:type", String)
+], CredentialConfiguration.prototype, "code", void 0);
+__decorate([
+    Property({ type: 'varchar', length: 255, fieldName: 'name' }),
+    __metadata("design:type", String)
+], CredentialConfiguration.prototype, "name", void 0);
+__decorate([
+    Property({ type: 'varchar', length: 64, fieldName: 'type_code' }),
+    Index(),
+    __metadata("design:type", String)
+], CredentialConfiguration.prototype, "typeCode", void 0);
+__decorate([
+    Property({ type: 'varchar', length: 64, fieldName: 'provider_code' }),
+    __metadata("design:type", String)
+], CredentialConfiguration.prototype, "providerCode", void 0);
+__decorate([
+    Property({ type: 'json', fieldName: 'values' }),
+    __metadata("design:type", Object)
+], CredentialConfiguration.prototype, "values", void 0);
+__decorate([
+    Property({ type: 'integer', version: true, fieldName: 'version' }),
+    __metadata("design:type", Number)
+], CredentialConfiguration.prototype, "version", void 0);
+__decorate([
+    Property({ type: 'datetime', onCreate: () => new Date(), fieldName: 'created_at' }),
+    __metadata("design:type", Date)
+], CredentialConfiguration.prototype, "createdAt", void 0);
+__decorate([
+    Property({ type: 'datetime', onCreate: () => new Date(), onUpdate: () => new Date(), fieldName: 'updated_at' }),
+    __metadata("design:type", Date)
+], CredentialConfiguration.prototype, "updatedAt", void 0);
+CredentialConfiguration = __decorate([
+    GlobalEntity(),
+    Entity({ tableName: 'credential_configurations' })
+], CredentialConfiguration);
+export { CredentialConfiguration };
+//# sourceMappingURL=credential-configuration.entity.js.map

package/dist/backend/entities/credential-configuration.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-configuration.entity.js","sourceRoot":"","sources":["../../../src/backend/entities/credential-configuration.entity.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC7F,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAEjE;;;;;;;;;;;;;;;GAeG;AAGI,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAClC,CAAC,aAAa,CAAC,CAAgD;IAG/D,EAAE,GAAW,UAAU,EAAE,CAAC;IAI1B,IAAI,CAAU;IAGd,IAAI,CAAU;IAId,QAAQ,CAAU;IAGlB,YAAY,CAAU;IAGtB,MAAM,GAA4B,EAAE,CAAC;IAGrC,OAAO,CAAU;IAGjB,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;IAG7B,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;CAC9B,CAAA;AA3BC;IADC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;mDACH;AAI1B;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAC7D,MAAM,EAAE;;qDACK;AAGd;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;;qDAChD;AAId;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACjE,KAAK,EAAE;;yDACU;AAGlB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;;6DAChD;AAGtB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;;uDACX;AAGrC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;;wDAClD;AAGjB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;8BACzE,IAAI;0DAAc;AAG7B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;8BACrG,IAAI;0DAAc;AA9BlB,uBAAuB;IAFnC,YAAY,EAAE;IACd,MAAM,CAAC,EAAE,SAAS,EAAE,2BAA2B,EAAE,CAAC;GACtC,uBAAuB,CA+BnC"}