@endora-commerce/mod-customers 0.100.0

package/dist/backend/services/customer-presence-service.d.ts

@@ -0,0 +1,44 @@
+import type { AuthSessionReadPort, CustomerAccountReadPort, OnlineCustomer } from '@endora-commerce/contracts';
+/**
+ * CustomerPresenceService — the admin "online customers" view (feature 040,
+ * US7 / FR-034). A customer is online if a session of theirs was active within
+ * the configurable freshness window.
+ */
+export interface RecentActivityPort {
+    listRecentlyActiveCustomers(windowMinutes: number): Promise<string[]>;
+}
+export declare class CustomerPresenceService {
+    private readonly sessions;
+    /**
+     * Feature 075 — `auth`'s published read, where this service ran
+     * `em.find(Session, …)` over that module's table to work out when each
+     * account was last seen. The port answers the same question and carries no
+     * `Session` entity, so the "who is online" panel no longer needs an
+     * `EntityManager` at all.
+     */
+    private readonly sessionReads;
+    private readonly resolveFreshnessMinutes;
+    /**
+     * Feature 075 — `customer_accounts`' published read, where this service ran
+     * `em.find(CustomerAccount, …)` over that module's table. The four fields
+     * it renders are all on the record.
+     */
+    private readonly accounts;
+    constructor(sessions: RecentActivityPort, 
+    /**
+     * Feature 075 — `auth`'s published read, where this service ran
+     * `em.find(Session, …)` over that module's table to work out when each
+     * account was last seen. The port answers the same question and carries no
+     * `Session` entity, so the "who is online" panel no longer needs an
+     * `EntityManager` at all.
+     */
+    sessionReads: AuthSessionReadPort, resolveFreshnessMinutes: () => Promise<number>, 
+    /**
+     * Feature 075 — `customer_accounts`' published read, where this service ran
+     * `em.find(CustomerAccount, …)` over that module's table. The four fields
+     * it renders are all on the record.
+     */
+    accounts: CustomerAccountReadPort);
+    listOnline(): Promise<OnlineCustomer[]>;
+}
+//# sourceMappingURL=customer-presence-service.d.ts.map

package/dist/backend/services/customer-presence-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-presence-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/customer-presence-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACf,MAAM,4BAA4B,CAAC;AAEpC;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,2BAA2B,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACvE;AAED,qBAAa,uBAAuB;IAEhC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACxC;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAfR,QAAQ,EAAE,kBAAkB;IAC7C;;;;;;OAMG;IACc,YAAY,EAAE,mBAAmB,EACjC,uBAAuB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC;IAC/D;;;;OAIG;IACc,QAAQ,EAAE,uBAAuB;IAG9C,UAAU,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;CAqB9C"}

package/dist/backend/services/customer-presence-service.js

@@ -0,0 +1,47 @@
+export class CustomerPresenceService {
+    sessions;
+    sessionReads;
+    resolveFreshnessMinutes;
+    accounts;
+    constructor(sessions, 
+    /**
+     * Feature 075 — `auth`'s published read, where this service ran
+     * `em.find(Session, …)` over that module's table to work out when each
+     * account was last seen. The port answers the same question and carries no
+     * `Session` entity, so the "who is online" panel no longer needs an
+     * `EntityManager` at all.
+     */
+    sessionReads, resolveFreshnessMinutes, 
+    /**
+     * Feature 075 — `customer_accounts`' published read, where this service ran
+     * `em.find(CustomerAccount, …)` over that module's table. The four fields
+     * it renders are all on the record.
+     */
+    accounts) {
+        this.sessions = sessions;
+        this.sessionReads = sessionReads;
+        this.resolveFreshnessMinutes = resolveFreshnessMinutes;
+        this.accounts = accounts;
+    }
+    async listOnline() {
+        const windowMinutes = await this.resolveFreshnessMinutes();
+        const ids = await this.sessions.listRecentlyActiveCustomers(windowMinutes);
+        if (ids.length === 0)
+            return [];
+        const customers = await this.accounts.findByIds(ids, { activeOnly: true });
+        // Latest activity per customer, for the displayed timestamp.
+        const cutoff = new Date(Date.now() - windowMinutes * 60 * 1000);
+        const lastSeen = new Map();
+        for (const row of await this.sessionReads.lastSeenByCustomerAccount(ids, cutoff)) {
+            lastSeen.set(row.customerAccountId, row.lastSeenAt);
+        }
+        return customers.map((c) => ({
+            id: c.id,
+            email: c.email,
+            firstName: c.firstName,
+            lastName: c.lastName,
+            lastSeenAt: (lastSeen.get(c.id) ?? new Date()).toISOString(),
+        }));
+    }
+}
+//# sourceMappingURL=customer-presence-service.js.map

package/dist/backend/services/customer-presence-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-presence-service.js","sourceRoot":"","sources":["../../../src/backend/services/customer-presence-service.ts"],"names":[],"mappings":"AAeA,MAAM,OAAO,uBAAuB;IAEf;IAQA;IACA;IAMA;IAhBnB,YACmB,QAA4B;IAC7C;;;;;;OAMG;IACc,YAAiC,EACjC,uBAA8C;IAC/D;;;;OAIG;IACc,QAAiC;QAfjC,aAAQ,GAAR,QAAQ,CAAoB;QAQ5B,iBAAY,GAAZ,YAAY,CAAqB;QACjC,4BAAuB,GAAvB,uBAAuB,CAAuB;QAM9C,aAAQ,GAAR,QAAQ,CAAyB;IACjD,CAAC;IAEJ,KAAK,CAAC,UAAU;QACd,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,2BAA2B,CAAC,aAAa,CAAC,CAAC;QAC3E,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEhC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,6DAA6D;QAC7D,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAgB,CAAC;QACzC,KAAK,MAAM,GAAG,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;YACjF,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,UAAU,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;SAC7D,CAAC,CAAC,CAAC;IACN,CAAC;CACF"}

package/dist/backend/services/customer-registration-service.d.ts

@@ -0,0 +1,56 @@
+import { type AuthSessionPort, type CustomerAccountLifecycleWritePort, type CustomerAccountRecord } from '@endora-commerce/contracts';
+/**
+ * CustomerRegistrationService — standalone (org-less) sign-up (feature 040,
+ * US1 / FR-002/FR-004).
+ *
+ * Gated by the `customers.allow_registration_without_organization` setting:
+ * when disabled, registration is refused with a clear, actionable error so
+ * the storefront can steer the visitor toward Organization registration.
+ *
+ * On success the new account and the individual's single-member personal
+ * organization are written in one transaction by `customer_accounts` (D-178),
+ * and an auto-login session is minted (parity with the Organization
+ * registration flow, which also logs the first user straight in).
+ *
+ * **Feature 075, Phase C — this service writes no table.** It used to create
+ * `customer_accounts`' entity itself, hash the password with `auth`'s hasher,
+ * and hand its own `EntityManager` to `organizations`' provisioner. All three
+ * are owner-side now: the account and its audit row come from
+ * `customerAccountLifecycleWritePort`, the hashing goes with them (a caller
+ * that hashes is a caller that has to be told which algorithm the owner uses),
+ * and the organisation is provisioned inside that same write (D-178). What is left
+ * here is the policy — whether a registration outside a company organization is
+ * allowed at all — which is this module's setting.
+ */
+export interface CustomerRegistrationDeps {
+    /** `customer_accounts`' account lifecycle. Creates the row and audits it. */
+    accounts: CustomerAccountLifecycleWritePort;
+    /**
+     * `auth`'s published session port (D-98.2), not the `SessionService` class
+     * this used to import: the only method reached here is `createSession`, the
+     * port declares it, and `authSessionPort` is the name the contract
+     * publishes.
+     */
+    sessionService: AuthSessionPort;
+    /** Reads `customers.allow_registration_without_organization` (the per-channel B2C gate). */
+    resolveAllowRegistrationWithoutOrganization: () => Promise<boolean>;
+}
+export interface RegisterStandaloneInput {
+    email: string;
+    password: string;
+    firstName: string;
+    lastName: string;
+    ip?: string;
+    userAgent?: string;
+}
+export interface RegisterStandaloneResult {
+    customerAccount: CustomerAccountRecord;
+    sessionCookieValue: string;
+    sessionExpiresAt: Date;
+}
+export declare class CustomerRegistrationService {
+    private readonly deps;
+    constructor(deps: CustomerRegistrationDeps);
+    registerStandalone(input: RegisterStandaloneInput): Promise<RegisterStandaloneResult>;
+}
+//# sourceMappingURL=customer-registration-service.d.ts.map

package/dist/backend/services/customer-registration-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-registration-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/customer-registration-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,iCAAiC,EACtC,KAAK,qBAAqB,EAC3B,MAAM,4BAA4B,CAAC;AAGpC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,WAAW,wBAAwB;IACvC,6EAA6E;IAC7E,QAAQ,EAAE,iCAAiC,CAAC;IAC5C;;;;;OAKG;IACH,cAAc,EAAE,eAAe,CAAC;IAChC,4FAA4F;IAC5F,2CAA2C,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACvC,eAAe,EAAE,qBAAqB,CAAC;IACvC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,IAAI,CAAC;CACxB;AAED,qBAAa,2BAA2B;IAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,wBAAwB;IAErD,kBAAkB,CACtB,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,wBAAwB,CAAC;CA0CrC"}

package/dist/backend/services/customer-registration-service.js

@@ -0,0 +1,43 @@
+import { ERROR_CODES, } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+export class CustomerRegistrationService {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    async registerStandalone(input) {
+        const allowed = await this.deps.resolveAllowRegistrationWithoutOrganization();
+        if (!allowed) {
+            throw new HttpError(403, ERROR_CODES.REGISTRATION_REQUIRES_ORGANIZATION, 'Registration without an Organization is currently disabled. Please register your Organization instead.');
+        }
+        // The duplicate-address refusal is inside the write, so a registration
+        // racing its own pre-check still answers 409 rather than a 500 off the
+        // unique index.
+        //
+        // D-178 — the personal organization feature 051 requires is provisioned
+        // inside that call, in the same transaction as the account, so the record
+        // that comes back already carries it. This service used to call
+        // `personalOrganizationPort.ensureForCustomerAccount` on the next line, and
+        // that second unit of work is exactly what left a committed account with no
+        // organization whenever it failed: the visitor had no session to retry from
+        // and nothing anywhere re-ran the provisioning.
+        const customerAccount = await this.deps.accounts.createStandalone({
+            email: input.email,
+            password: input.password,
+            firstName: input.firstName,
+            lastName: input.lastName,
+        });
+        const session = await this.deps.sessionService.createSession({
+            kind: 'customer',
+            customerAccountId: customerAccount.id,
+            ...(input.ip !== undefined ? { ipAddress: input.ip } : {}),
+            ...(input.userAgent !== undefined ? { userAgent: input.userAgent } : {}),
+        });
+        return {
+            customerAccount,
+            sessionCookieValue: session.cookieValue,
+            sessionExpiresAt: session.expiresAt,
+        };
+    }
+}
+//# sourceMappingURL=customer-registration-service.js.map

package/dist/backend/services/customer-registration-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-registration-service.js","sourceRoot":"","sources":["../../../src/backend/services/customer-registration-service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,GAIZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAsD3D,MAAM,OAAO,2BAA2B;IACT;IAA7B,YAA6B,IAA8B;QAA9B,SAAI,GAAJ,IAAI,CAA0B;IAAG,CAAC;IAE/D,KAAK,CAAC,kBAAkB,CACtB,KAA8B;QAE9B,MAAM,OAAO,GACX,MAAM,IAAI,CAAC,IAAI,CAAC,2CAA2C,EAAE,CAAC;QAChE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,kCAAkC,EAC9C,wGAAwG,CACzG,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,uEAAuE;QACvE,gBAAgB;QAChB,EAAE;QACF,wEAAwE;QACxE,0EAA0E;QAC1E,gEAAgE;QAChE,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,gDAAgD;QAChD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAChE,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;YAC3D,IAAI,EAAE,UAAU;YAChB,iBAAiB,EAAE,eAAe,CAAC,EAAE;YACrC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC,CAAC;QAEH,OAAO;YACL,eAAe;YACf,kBAAkB,EAAE,OAAO,CAAC,WAAW;YACvC,gBAAgB,EAAE,OAAO,CAAC,SAAS;SACpC,CAAC;IACJ,CAAC;CACF"}

package/dist/backend/workers/anonymization-sweep-worker.d.ts

@@ -0,0 +1,15 @@
+import type { CustomerDeletionService } from '../services/customer-deletion-service.js';
+/**
+ * AnonymizationSweepWorker — repeatable job that permanently anonymizes
+ * soft-deleted customer accounts once their retention window has elapsed
+ * (feature 040, US7 / FR-040). Mirrors the carts abandonment-sweep pattern:
+ * a thin class exposing `sweep()` so it can be driven by a scheduler or a CLI
+ * entry point. Returns the number of accounts anonymized.
+ */
+export declare class AnonymizationSweepWorker {
+    private readonly deletion;
+    private readonly resolveRetentionDays;
+    constructor(deletion: CustomerDeletionService, resolveRetentionDays: () => Promise<number>);
+    sweep(now?: Date): Promise<number>;
+}
+//# sourceMappingURL=anonymization-sweep-worker.d.ts.map

package/dist/backend/workers/anonymization-sweep-worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anonymization-sweep-worker.d.ts","sourceRoot":"","sources":["../../../src/backend/workers/anonymization-sweep-worker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AAExF;;;;;;GAMG;AACH,qBAAa,wBAAwB;IAEjC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,oBAAoB;gBADpB,QAAQ,EAAE,uBAAuB,EACjC,oBAAoB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC;IAGxD,KAAK,CAAC,GAAG,GAAE,IAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;CAIrD"}

package/dist/backend/workers/anonymization-sweep-worker.js

@@ -0,0 +1,20 @@
+/**
+ * AnonymizationSweepWorker — repeatable job that permanently anonymizes
+ * soft-deleted customer accounts once their retention window has elapsed
+ * (feature 040, US7 / FR-040). Mirrors the carts abandonment-sweep pattern:
+ * a thin class exposing `sweep()` so it can be driven by a scheduler or a CLI
+ * entry point. Returns the number of accounts anonymized.
+ */
+export class AnonymizationSweepWorker {
+    deletion;
+    resolveRetentionDays;
+    constructor(deletion, resolveRetentionDays) {
+        this.deletion = deletion;
+        this.resolveRetentionDays = resolveRetentionDays;
+    }
+    async sweep(now = new Date()) {
+        const retentionDays = await this.resolveRetentionDays();
+        return this.deletion.sweep(retentionDays, now);
+    }
+}
+//# sourceMappingURL=anonymization-sweep-worker.js.map

package/dist/backend/workers/anonymization-sweep-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anonymization-sweep-worker.js","sourceRoot":"","sources":["../../../src/backend/workers/anonymization-sweep-worker.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,OAAO,wBAAwB;IAEhB;IACA;IAFnB,YACmB,QAAiC,EACjC,oBAA2C;QAD3C,aAAQ,GAAR,QAAQ,CAAyB;QACjC,yBAAoB,GAApB,oBAAoB,CAAuB;IAC3D,CAAC;IAEJ,KAAK,CAAC,KAAK,CAAC,MAAY,IAAI,IAAI,EAAE;QAChC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACxD,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;CACF"}

package/dist/manifest.d.ts

@@ -0,0 +1,181 @@
+/**
+ * Customers (Klienci) module — feature 040.
+ *
+ * Owns the customer-lifecycle business logic and the admin + storefront
+ * surfaces on top of the `customer_accounts` data module: standalone
+ * registration, self-service (addresses, defaults, history), and admin
+ * oversight (block/unblock, impersonation, detail view, customer groups,
+ * password reset, soft-delete + restore, online presence).
+ *
+ * Three platform-wide settings are registered here and seeded by the
+ * module-lifecycle ManifestReconciler on boot.
+ */
+export declare const CUSTOMERS_SETTING_CODES: {
+    /** Gate standalone (org-less) registration (FR-001/FR-004). */
+    readonly ALLOW_REGISTRATION_WITHOUT_ORGANIZATION: "customers.allow_registration_without_organization";
+    /** Restore window (days) before permanent anonymization (FR-041). */
+    readonly DELETION_RETENTION_DAYS: "customers.deletion_retention_days";
+    /** "Online" threshold (minutes) for the admin presence view. */
+    readonly PRESENCE_FRESHNESS_MINUTES: "customers.presence_freshness_minutes";
+};
+export declare const manifest: {
+    id: string;
+    name: string;
+    version: string;
+    dependencies: string[];
+    description?: string | undefined;
+    acknowledgedDependencies?: {
+        moduleId: string;
+        port: string;
+        reason: string;
+    }[] | undefined;
+    nonBindingDependencies?: {
+        moduleId: string;
+        name: string;
+        kind: "contributes-to" | "degrades-without" | "refuses-without";
+        reason: string;
+        whenAbsent?: string | undefined;
+    }[] | undefined;
+    activation?: {
+        settingCode: string;
+        default: boolean;
+    } | {
+        nonDeactivatable: true;
+        reason: string;
+    } | undefined;
+    settings?: {
+        moduleCode: string;
+        groups: {
+            code: string;
+            name: string;
+            salesChannelCodes?: string[] | undefined;
+            isSystemProtected?: boolean | undefined;
+        }[];
+        settings: {
+            code: string;
+            name: string;
+            valueType: "string" | "number" | "boolean" | "json" | "string_list" | "secret" | "credential_ref";
+            defaultValue: unknown;
+            description?: string | undefined;
+            groupCode?: string | undefined;
+            previousDefaultValues?: unknown[] | undefined;
+            salesChannelCodes?: string[] | undefined;
+            enumOptions?: string[] | undefined;
+            configurationType?: string | undefined;
+            hidden?: boolean | undefined;
+        }[];
+    } | undefined;
+    i18n?: {
+        bundlesDir: string;
+    } | undefined;
+    docs?: false | {
+        dir: string;
+    } | undefined;
+    demo?: false | {
+        summary: string;
+        seed: (context: import("@endora-commerce/contracts").ModuleDemoContext<never>) => Promise<import("@endora-commerce/contracts").DemoSeedResult>;
+        reset: (context: import("@endora-commerce/contracts").ModuleDemoContext<never>) => Promise<import("@endora-commerce/contracts").DemoResetResult>;
+        after?: readonly string[] | undefined;
+        package?: string | undefined;
+    } | undefined;
+    actions?: {
+        id: string;
+        labelKey: string;
+        icon: "Plus" | "Sparkles" | "Settings" | "Search" | "Boxes" | "Layers" | "Menu" | "PlusCircle" | "PlusSquare" | "FilePlus" | "FolderPlus" | "Upload" | "FileUp" | "CloudUpload" | "Download" | "FileDown" | "FileText" | "BookOpen" | "Rss" | "Package" | "Tag" | "ShoppingCart" | "Receipt" | "CreditCard" | "Users" | "UserPlus" | "Inbox" | "ListChecks" | "ClipboardList" | "Image" | "Video" | "LayoutDashboard" | "PanelLeft" | "KeyRound" | "ShieldCheck" | "Edit" | "Archive" | "Box" | "Truck" | "CircleDollarSign" | "Activity" | "LineChart" | "Smartphone" | "Webhook" | "Scale" | "PlugZap" | "PercentDiamond" | "Newspaper" | "Languages" | "Eraser" | "Warehouse" | "TrendingDown" | "Bell" | "PackageOpen" | "Building2" | "Store" | "ClipboardCheck";
+        targetRoute: string;
+        keywords: string[];
+        weight: number;
+        descriptionKey?: string | undefined;
+        requiredPermission?: string | undefined;
+    }[] | undefined;
+    permissions?: {
+        code: string;
+        label: string;
+        module?: string | undefined;
+        description?: string | undefined;
+        requires?: string[] | undefined;
+    }[] | undefined;
+    transactionalEmails?: {
+        code: string;
+        name: string;
+        variables: {
+            key: string;
+            label: string;
+            sampleValue?: string | undefined;
+            description?: string | undefined;
+        }[];
+        description?: string | undefined;
+        group?: string | undefined;
+    }[] | undefined;
+    capabilities?: string[] | undefined;
+    exclusiveCapabilities?: {
+        key: string;
+        errorCode: string;
+    }[] | undefined;
+    errorCodes?: {
+        code: string;
+        tokens?: string[] | undefined;
+    }[] | undefined;
+    blocks?: {
+        name: string;
+        labelKey: string;
+        category: string;
+        contexts: ("email" | "invoice" | "cms" | "newsletter")[];
+        fields: Record<string, {
+            type: "number" | "object" | "array" | "text" | "textarea" | "select" | "radio" | "external" | "uuid" | "richtext";
+            label?: string | undefined;
+            required?: boolean | undefined;
+            options?: {
+                label: string;
+                value: string | number;
+            }[] | undefined;
+            refKind?: string | undefined;
+        }>;
+        descriptionKey?: string | undefined;
+        defaultProps?: Record<string, unknown> | undefined;
+        responsiveFields?: string[] | undefined;
+        previewIcon?: string | undefined;
+        weight?: number | undefined;
+    }[] | undefined;
+    blockCategories?: {
+        key: string;
+        titleKey: string;
+        contexts: ("email" | "invoice" | "cms" | "newsletter")[];
+        weight?: number | undefined;
+        visible?: boolean | undefined;
+    }[] | undefined;
+    env?: {
+        name: string;
+        describes: {
+            en: string;
+            pl: string;
+        };
+        requirement: {
+            kind: "required";
+        } | {
+            kind: "requiredWhen";
+            input: string;
+            equals: string;
+        } | {
+            kind: "optional";
+            without: {
+                en: string;
+                pl: string;
+            };
+        };
+        secret: boolean;
+        generable: boolean;
+        owner: {
+            kind: "platform";
+        } | {
+            kind: "application";
+            application: "admin" | "backend" | "storefront";
+        } | {
+            kind: "module";
+            moduleId: string;
+        };
+        consumers: ("admin" | "backend" | "storefront")[];
+        addressOf: "admin" | "backend" | "storefront" | null;
+    }[] | undefined;
+};
+//# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,uBAAuB;IAClC,+DAA+D;;IAG/D,qEAAqE;;IAErE,gEAAgE;;CAExD,CAAC;AAoCX,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4InB,CAAC"}

package/dist/manifest.js

@@ -0,0 +1,192 @@
+import { defineModuleManifest, defineModuleSettingsManifest, } from '@endora-commerce/contracts';
+/**
+ * Customers (Klienci) module — feature 040.
+ *
+ * Owns the customer-lifecycle business logic and the admin + storefront
+ * surfaces on top of the `customer_accounts` data module: standalone
+ * registration, self-service (addresses, defaults, history), and admin
+ * oversight (block/unblock, impersonation, detail view, customer groups,
+ * password reset, soft-delete + restore, online presence).
+ *
+ * Three platform-wide settings are registered here and seeded by the
+ * module-lifecycle ManifestReconciler on boot.
+ */
+export const CUSTOMERS_SETTING_CODES = {
+    /** Gate standalone (org-less) registration (FR-001/FR-004). */
+    ALLOW_REGISTRATION_WITHOUT_ORGANIZATION: 'customers.allow_registration_without_organization',
+    /** Restore window (days) before permanent anonymization (FR-041). */
+    DELETION_RETENTION_DAYS: 'customers.deletion_retention_days',
+    /** "Online" threshold (minutes) for the admin presence view. */
+    PRESENCE_FRESHNESS_MINUTES: 'customers.presence_freshness_minutes',
+};
+const settings = defineModuleSettingsManifest({
+    moduleCode: 'customers',
+    groups: [{ code: 'customers', name: 'Customers' }],
+    settings: [
+        {
+            code: CUSTOMERS_SETTING_CODES.ALLOW_REGISTRATION_WITHOUT_ORGANIZATION,
+            name: 'Allow registration without organization',
+            description: 'When enabled, visitors may register a standalone Customer account that is not attached to any Organization. When disabled, registration requires Organization context.',
+            groupCode: 'customers',
+            valueType: 'boolean',
+            defaultValue: false,
+        },
+        {
+            code: CUSTOMERS_SETTING_CODES.DELETION_RETENTION_DAYS,
+            name: 'Customer deletion retention window (days)',
+            description: 'Number of days a deleted Customer account can be restored before its personal data is permanently anonymized. Default 365 (1 year).',
+            groupCode: 'customers',
+            valueType: 'number',
+            defaultValue: 365,
+        },
+        {
+            code: CUSTOMERS_SETTING_CODES.PRESENCE_FRESHNESS_MINUTES,
+            name: 'Online customers freshness (minutes)',
+            description: 'A Customer counts as "online" if their session was active within this many minutes. Default 10.',
+            groupCode: 'customers',
+            valueType: 'number',
+            defaultValue: 10,
+        },
+    ],
+});
+export const manifest = defineModuleManifest({
+    id: 'customers',
+    name: 'Customers',
+    description: 'Customer lifecycle business logic: registration, self-service, blocking, impersonation, groups, deletion, and presence.',
+    version: '1.0.0',
+    // Feature 072 (T140) — the edges the module actually resolves. `auth`
+    // (sessions), `email` (the set-password mail), `quote_requests` (the RFQ
+    // history surface) and `custom_fields` were all reached through options a
+    // root passed down, which is why none of them appeared here.
+    // Feature 073 (Constitution XVII) — the operator's activation control. This
+    // is the *management* surface over customer accounts: the admin CRM screens,
+    // moderation, self-service profile and deletion. The accounts themselves live
+    // in `customer_accounts`, which is non-deactivatable, so switching this off
+    // removes screens and self-service rather than the ability to log in.
+    activation: { settingCode: 'customers.enabled', default: true },
+    //
+    // Issue #216 adds `quick_order`: the customer-detail screen and the
+    // self-service profile render and edit a buyer's default payment and
+    // delivery method, and those live in `quick_order`'s preference store. This
+    // module used to build a second instance of that module's service instead of
+    // resolving the port published for it, so the edge existed and was declared
+    // nowhere. Binding rather than `degrades-without`, because that is what
+    // `DefaultPreferencePort`'s contract says its seam does when the owner is
+    // off, and because a half-written set of ordering defaults is worse than a
+    // refusal.
+    //
+    // Feature 075's Phase-C cut adds `addresses`: the self-service and admin
+    // address panels list the buyer's **organisation's** shared addresses beside
+    // their personal ones, and this module used to query that module's table
+    // itself. It reads `addressReadPort` now. Binding, and unremarkably so —
+    // `addresses` is non-deactivatable, so the edge has no absent state to
+    // declare a degrade for.
+    //
+    // Feature 075's cut adds three more, each replacing a second instance this
+    // module built from an import of the owner's directory or a query against its
+    // table: `admin_users` (the impersonation seam behind the "view as this
+    // customer" control), `carts` (the reporting read behind the customer-detail
+    // cart panel) and `orders` (the list behind both order-history panels).
+    //
+    // All three are binding, and unremarkably so: every one of them declares
+    // `nonDeactivatable`, so none has an absent state for a degrade to describe.
+    // The `orders` edge in particular used to be a `degrades-without` whose
+    // reason argued that declaring it "would make `orders` undeactivatable" — a
+    // sentence about a module that has never had an activation control, kept
+    // alive by a presence probe that could not fire. It is a declared dependency
+    // now, and the panels read the gated port directly.
+    dependencies: [
+        'addresses',
+        // `specs/117-instance-bring-up/` Phase 6 — `customerModerationActorResolver`
+        // is this module's own since FR-033, and it reads the moderating admin's
+        // role through `adminRolePort` beside the `adminUserReadPort` already
+        // declared below. The production root asked the same question in
+        // `knex.raw` over both tables; a port needs the edge and the SQL never
+        // declared one. `admin_roles` declares `activation.nonDeactivatable`, so
+        // the edge costs no operator an activation control.
+        'admin_roles',
+        'admin_users',
+        'auth',
+        'carts',
+        'custom_fields',
+        'customer_accounts',
+        'email',
+        'orders',
+        'organizations',
+        'quick_order',
+        'quote_requests',
+        'settings',
+    ],
+    settings,
+    i18n: { bundlesDir: 'i18n' },
+    docs: { dir: 'docs' },
+    /**
+     * Two codes from the platform block — D-129's remaining sweep, Tier A
+     * (`specs/090-module-owned-error-codes/d129-sweep.md` §5.2, Appendix A;
+     * MR 3).
+     *
+     * Both were declared by `_i18n` until this merge request, not because
+     * anybody judged them the platform's but because the deleted prefix chain
+     * had no rule for them and its last line was `return 'core'`.
+     *
+     * **`CUSTOMER_ADDRESS_NOT_FOUND` is here and the four `CUSTOMER_*` record
+     * codes are not, and that split is a ruling rather than a reading.** D-186
+     * §1 (`specs/080-f4-real-scope/rulings.md`) settles the noun "customer":
+     * `customer_accounts` owns the **record**, this module owns
+     * **`CustomerAddress`**. So `CUSTOMER_NOT_FOUND`,
+     * `CUSTOMER_ALREADY_DELETED`, `CUSTOMER_NOT_DELETED` and
+     * `CUSTOMER_RESTORE_WINDOW_ELAPSED` go to `customer_accounts` in a later
+     * batch — two of them raised from *this* module, which is the consequence
+     * the ruling accepts in terms and the shape D-95.2 already ruled for
+     * `INVOICE_NOT_READY`: the owner of a noun is not required to be the module
+     * that throws about it. The prefix is the same in all five; the noun is not,
+     * and the noun is what decides.
+     *
+     * **`REGISTRATION_REQUIRES_ORGANIZATION` is T2, not T1.** Its noun is a
+     * registration and an Organization, and `organizations` owns the second — so
+     * T1 has two claimants and does not decide it. T2 does: the code names a
+     * *mechanism*, the storefront's standalone self-registration path, which
+     * this module implements in `customer-registration-service.ts` and is the
+     * only thing in the tree that raises. What it refuses is this module's own
+     * setting being off, not a judgement `organizations` makes.
+     *
+     * **No sentence moves with them.** Neither has a sentence in either language
+     * anywhere in the tree; both were already on `UNTRANSLATED_ERROR_CODES`
+     * under `_i18n` and move to this module's group there, so the bundle this
+     * module already ships gains no key. The storefront's registration page
+     * carries its own copy for the refusal
+     * (`storefront/app/(auth)/register-customer/page.tsx`), which is a surface
+     * string and not the envelope's sentence.
+     *
+     * **`tokens` is derived from the raise sites, not from the bundle**
+     * (runbook §5), and there are none: both raises are a bare
+     * `HttpError(status, code, message)` with no `details`.
+     */
+    errorCodes: [
+        { code: 'CUSTOMER_ADDRESS_NOT_FOUND' },
+        { code: 'REGISTRATION_REQUIRES_ORGANIZATION' },
+    ],
+    actions: [
+        {
+            id: 'open-customers',
+            labelKey: 'actions.openCustomers.label',
+            descriptionKey: 'actions.openCustomers.description',
+            icon: 'Users',
+            targetRoute: '/customers',
+            requiredPermission: 'customers:read',
+            keywords: ['customers', 'clients', 'klienci', 'klient'],
+            weight: 210,
+        },
+        {
+            id: 'online-customers',
+            labelKey: 'actions.onlineCustomers.label',
+            descriptionKey: 'actions.onlineCustomers.description',
+            icon: 'Users',
+            targetRoute: '/customers/online',
+            requiredPermission: 'customers:read',
+            keywords: ['online', 'presence', 'aktywni', 'online klienci'],
+            weight: 205,
+        },
+    ],
+});
+//# sourceMappingURL=manifest.js.map

package/dist/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,+DAA+D;IAC/D,uCAAuC,EACrC,mDAAmD;IACrD,qEAAqE;IACrE,uBAAuB,EAAE,mCAAmC;IAC5D,gEAAgE;IAChE,0BAA0B,EAAE,sCAAsC;CAC1D,CAAC;AAEX,MAAM,QAAQ,GAAG,4BAA4B,CAAC;IAC5C,UAAU,EAAE,WAAW;IACvB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAClD,QAAQ,EAAE;QACR;YACE,IAAI,EAAE,uBAAuB,CAAC,uCAAuC;YACrE,IAAI,EAAE,yCAAyC;YAC/C,WAAW,EACT,wKAAwK;YAC1K,SAAS,EAAE,WAAW;YACtB,SAAS,EAAE,SAAS;YACpB,YAAY,EAAE,KAAK;SACpB;QACD;YACE,IAAI,EAAE,uBAAuB,CAAC,uBAAuB;YACrD,IAAI,EAAE,2CAA2C;YACjD,WAAW,EACT,qIAAqI;YACvI,SAAS,EAAE,WAAW;YACtB,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,GAAG;SAClB;QACD;YACE,IAAI,EAAE,uBAAuB,CAAC,0BAA0B;YACxD,IAAI,EAAE,sCAAsC;YAC5C,WAAW,EACT,iGAAiG;YACnG,SAAS,EAAE,WAAW;YACtB,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,EAAE;SACjB;KACF;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;IAC3C,EAAE,EAAE,WAAW;IACf,IAAI,EAAE,WAAW;IACjB,WAAW,EACT,yHAAyH;IAC3H,OAAO,EAAE,OAAO;IAChB,sEAAsE;IACtE,yEAAyE;IACzE,0EAA0E;IAC1E,6DAA6D;IAC7D,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,sEAAsE;IACtE,UAAU,EAAE,EAAE,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE;IAC/D,EAAE;IACF,oEAAoE;IACpE,qEAAqE;IACrE,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,WAAW;IACX,EAAE;IACF,yEAAyE;IACzE,6EAA6E;IAC7E,yEAAyE;IACzE,yEAAyE;IACzE,uEAAuE;IACvE,yBAAyB;IACzB,EAAE;IACF,2EAA2E;IAC3E,8EAA8E;IAC9E,wEAAwE;IACxE,6EAA6E;IAC7E,wEAAwE;IACxE,EAAE;IACF,yEAAyE;IACzE,6EAA6E;IAC7E,wEAAwE;IACxE,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,oDAAoD;IACpD,YAAY,EAAE;QACZ,WAAW;QACX,6EAA6E;QAC7E,yEAAyE;QACzE,sEAAsE;QACtE,iEAAiE;QACjE,uEAAuE;QACvE,yEAAyE;QACzE,oDAAoD;QACpD,aAAa;QACb,aAAa;QACb,MAAM;QACN,OAAO;QACP,eAAe;QACf,mBAAmB;QACnB,OAAO;QACP,QAAQ;QACR,eAAe;QACf,aAAa;QACb,gBAAgB;QAChB,UAAU;KACX;IACD,QAAQ;IACR,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE;IAC5B,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;IACrB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAyCG;IACH,UAAU,EAAE;QACV,EAAE,IAAI,EAAE,4BAA4B,EAAE;QACtC,EAAE,IAAI,EAAE,oCAAoC,EAAE;KAC/C;IACD,OAAO,EAAE;QACP;YACE,EAAE,EAAE,gBAAgB;YACpB,QAAQ,EAAE,6BAA6B;YACvC,cAAc,EAAE,mCAAmC;YACnD,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,YAAY;YACzB,kBAAkB,EAAE,gBAAgB;YACpC,QAAQ,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;YACvD,MAAM,EAAE,GAAG;SACZ;QACD;YACE,EAAE,EAAE,kBAAkB;YACtB,QAAQ,EAAE,+BAA+B;YACzC,cAAc,EAAE,qCAAqC;YACrD,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,mBAAmB;YAChC,kBAAkB,EAAE,gBAAgB;YACpC,QAAQ,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,CAAC;YAC7D,MAAM,EAAE,GAAG;SACZ;KACF;CACF,CAAC,CAAC"}