@endora-commerce/mod-pwa 0.100.0

package/dist/backend/plugin.js

@@ -0,0 +1,109 @@
+import { z } from 'zod';
+import { PwaConfigResolver } from './services/pwa-config-resolver.js';
+import { PwaIconService } from './services/pwa-icon-service.js';
+import { PushSubscriptionService } from './services/push-subscription-service.js';
+import { PushMessageService } from './services/push-message-service.js';
+import { PushProviderRegistry } from './services/push-provider-registry.js';
+import { WebPushProvider } from './services/providers/web-push-provider.js';
+import { createPushEventHandlers, } from './services/push-event-subscriber.js';
+import { createPushDeliveryQueue, createPushDeliveryWorker, } from './services/push-delivery-queue.js';
+import { makePushDeliveryProcessor } from './workers/push-delivery-worker.js';
+import { registerPwaStorefrontRoutes, } from './routes.storefront.js';
+import { registerPwaAdminRoutes, } from './routes.admin.js';
+const BoolSchema = z.boolean();
+export function pwaModule(options) {
+    const configResolver = new PwaConfigResolver(options.settings, options.emFactory);
+    const iconService = new PwaIconService(options.emFactory, options.assetUpload);
+    // Feature 087 Group B / D-187 — the subscription registry stamps the
+    // organisation an owned device belongs to, derived from the owning account
+    // through the gated port this module already resolves. Passed rather than
+    // optional: `push_subscriptions_organization_attribution_chk` refuses a row
+    // this service could not attribute, so a composition with no way to answer
+    // the question cannot write the table at all.
+    const subscriptionService = new PushSubscriptionService(options.emFactory, options.customerAccounts);
+    const providerRegistry = new PushProviderRegistry();
+    providerRegistry.register(new WebPushProvider(options.settings, options.vapidSubject));
+    const deliveryQueue = createPushDeliveryQueue(options.redis);
+    const messageService = new PushMessageService(options.emFactory, deliveryQueue, options.customerAccounts, options.organizationDetails);
+    // Where the two auto-triggers write a skipped or failed push. Composition
+    // runs before `buildServer`, so `options.log` is the best a root can offer at
+    // construction time; `app.log` is the log the platform actually collects, and
+    // the plugin below moves the holder onto it. Nothing can emit an in-process
+    // event before that plugin has run, so the fallback is a type obligation
+    // rather than a path.
+    let eventLogger = options.log;
+    // Auto-triggered push (FR-024) — producer only; enqueues, never sends inline.
+    // `backend.ts` registers these two through `ctx.subscribe`, so they stop with
+    // the module (issue #107).
+    const pushEventHandlers = createPushEventHandlers({
+        messageService,
+        log: () => eventLogger,
+        resolveOrderTarget: options.resolveOrderTarget,
+        ...(options.resolveQuoteTarget ? { resolveQuoteTarget: options.resolveQuoteTarget } : {}),
+        isPushEnabled: async (salesChannelId) => {
+            try {
+                return await options.settings.get('pwa.push_enabled', salesChannelId, BoolSchema);
+            }
+            catch {
+                return false;
+            }
+        },
+    });
+    // Push-delivery consumer (Principle X). Separable entrypoint; co-located by
+    // default given low push volume, split-out-able under load via BACKEND_ROLE.
+    //
+    // It is **handed to `backend.ts`** rather than started here, and that is the
+    // Constitution XVII repair rather than tidiness: this line used to read
+    // `createPushDeliveryWorker(options.redis, processor);`, the value dropped on
+    // the floor. A worker outside `ctx.worker` is in no per-module registry, so
+    // `pauseWorkersFor('pwa')` reached nothing and the presence reconcile had
+    // nothing to reconcile — an operator who switched `pwa` off went on having
+    // push notifications delivered to their customers' devices, on both axes,
+    // while the module's own admin and storefront surfaces refused. That is what
+    // made it invisible, and it is the same shape issue #107 found for
+    // subscribers; `check:subscribe-seam` now refuses it.
+    const workers = options.runWorkers
+        ? [
+            createPushDeliveryWorker(options.redis, makePushDeliveryProcessor({
+                emFactory: options.emFactory,
+                registry: providerRegistry,
+            })),
+        ]
+        : [];
+    const handle = {
+        pushEventHandlers,
+        configResolver,
+        iconService,
+        subscriptionService,
+        messageService,
+        providerRegistry,
+        deliveryQueue,
+    };
+    const plugin = async (app) => {
+        eventLogger = app.log;
+        await registerPwaStorefrontRoutes(app, {
+            configResolver,
+            iconService,
+            subscriptionService,
+            resolveAssetUrl: options.resolveAssetUrl,
+        });
+        await registerPwaAdminRoutes(app, {
+            requireAdmin: options.requireAdmin,
+            emFactory: options.emFactory,
+            configResolver,
+            iconService,
+            subscriptionService,
+            messageService,
+            settingsWrite: options.settingsWrite,
+            customerAccounts: options.customerAccounts,
+            organizationDetails: options.organizationDetails,
+            customerGroups: options.customerGroups,
+            settingsRead: options.settings,
+            resolveScopeChannelId: async (salesChannelId) => salesChannelId ?? (await options.defaultChannelId()),
+            channelCodeForId: options.channelCodeForId,
+            resolveAuditContext: options.resolveAuditContext,
+        });
+    };
+    return { plugin, handle, workers };
+}
+//# sourceMappingURL=plugin.js.map

package/dist/backend/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/backend/plugin.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,OAAO,EAAE,iBAAiB,EAAyB,MAAM,mCAAmC,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAwB,MAAM,gCAAgC,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AAC5E,OAAO,EACL,uBAAuB,GAGxB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GAEzB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EACL,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,sBAAsB,GAGvB,MAAM,mBAAmB,CAAC;AAG3B,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;AAyG/B,MAAM,UAAU,SAAS,CAAC,OAAyB;IACjD,MAAM,cAAc,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/E,qEAAqE;IACrE,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,2EAA2E;IAC3E,8CAA8C;IAC9C,MAAM,mBAAmB,GAAG,IAAI,uBAAuB,CACrD,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,gBAAgB,CACzB,CAAC;IAEF,MAAM,gBAAgB,GAAG,IAAI,oBAAoB,EAAE,CAAC;IACpD,gBAAgB,CAAC,QAAQ,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAEvF,MAAM,aAAa,GAAG,uBAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAG,IAAI,kBAAkB,CAC3C,OAAO,CAAC,SAAS,EACjB,aAAa,EACb,OAAO,CAAC,gBAAgB,EACxB,OAAO,CAAC,mBAAmB,CAC5B,CAAC;IAEF,0EAA0E;IAC1E,8EAA8E;IAC9E,8EAA8E;IAC9E,4EAA4E;IAC5E,yEAAyE;IACzE,sBAAsB;IACtB,IAAI,WAAW,GAAoB,OAAO,CAAC,GAAG,CAAC;IAE/C,8EAA8E;IAC9E,8EAA8E;IAC9E,2BAA2B;IAC3B,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;QAChD,cAAc;QACd,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW;QACtB,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;YACtC,IAAI,CAAC;gBACH,OAAO,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;YACpF,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,4EAA4E;IAC5E,6EAA6E;IAC7E,EAAE;IACF,6EAA6E;IAC7E,wEAAwE;IACxE,8EAA8E;IAC9E,4EAA4E;IAC5E,0EAA0E;IAC1E,2EAA2E;IAC3E,0EAA0E;IAC1E,6EAA6E;IAC7E,mEAAmE;IACnE,sDAAsD;IACtD,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU;QAChC,CAAC,CAAC;YACE,wBAAwB,CACtB,OAAO,CAAC,KAAK,EACb,yBAAyB,CAAC;gBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,QAAQ,EAAE,gBAAgB;aAC3B,CAAC,CACH;SACF;QACH,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,MAAM,GAAoB;QAC9B,iBAAiB;QACjB,cAAc;QACd,WAAW;QACX,mBAAmB;QACnB,cAAc;QACd,gBAAgB;QAChB,aAAa;KACd,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,EAAE,GAAoB,EAAiB,EAAE;QAC3D,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC;QACtB,MAAM,2BAA2B,CAAC,GAAG,EAAE;YACrC,cAAc;YACd,WAAW;YACX,mBAAmB;YACnB,eAAe,EAAE,OAAO,CAAC,eAAe;SACzC,CAAC,CAAC;QACH,MAAM,sBAAsB,CAAC,GAAG,EAAE;YAChC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,cAAc;YACd,WAAW;YACX,mBAAmB;YACnB,cAAc;YACd,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;YAChD,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,YAAY,EAAE,OAAO,CAAC,QAAQ;YAC9B,qBAAqB,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAC9C,cAAc,IAAI,CAAC,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC;YACtD,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;SACjD,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACrC,CAAC"}

package/dist/backend/request-actor.d.ts

@@ -0,0 +1,24 @@
+import type { FastifyRequest } from 'fastify';
+import '@endora-commerce/platform/http';
+/**
+ * The signed-in customer behind a storefront request, or `null`.
+ *
+ * A push subscription is legitimately anonymous — the same browser can register
+ * a device with nobody signed in — so this narrows rather than refuses, and it
+ * is deliberately **not** the platform's `customerAccountIdResolver`, which
+ * throws 401 for a caller who is not a customer. Feature 087 Group B / D-187
+ * turns the answer into the row's attribution: an owned device carries its
+ * account and that account's organisation, and an ownerless one carries
+ * neither.
+ *
+ * It reads `request.actor` directly, which is the drain of a
+ * `resolveCustomerAccountId` option both composition roots supplied
+ * (`specs/110-instance-repository/` T118c). That option was the older shape,
+ * from when the augmentation was `auth`'s and a packaged module could not name
+ * it; a knob a root fills on a module's behalf is a knob that drifts between the
+ * two roots, and this one had — production read `request.actor` and the harness
+ * `request.testActor`. `registerTestAuth` mirrors each resolved actor onto both
+ * properties, so one read answers correctly under either composition.
+ */
+export declare function callingCustomerAccountId(request: FastifyRequest): string | null;
+//# sourceMappingURL=request-actor.d.ts.map

package/dist/backend/request-actor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-actor.d.ts","sourceRoot":"","sources":["../../src/backend/request-actor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAK9C,OAAO,gCAAgC,CAAC;AAExC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,GAAG,IAAI,CAE/E"}

package/dist/backend/request-actor.js

@@ -0,0 +1,29 @@
+// The `request.actor` augmentation, which is the platform's own since
+// `specs/110-instance-repository/` T118b — a side-effect import of the `./http`
+// barrel is how the `declare module 'fastify'` block reaches this package's
+// program, and reaching a published barrel is not a `whole-file-reach`.
+import '@endora-commerce/platform/http';
+/**
+ * The signed-in customer behind a storefront request, or `null`.
+ *
+ * A push subscription is legitimately anonymous — the same browser can register
+ * a device with nobody signed in — so this narrows rather than refuses, and it
+ * is deliberately **not** the platform's `customerAccountIdResolver`, which
+ * throws 401 for a caller who is not a customer. Feature 087 Group B / D-187
+ * turns the answer into the row's attribution: an owned device carries its
+ * account and that account's organisation, and an ownerless one carries
+ * neither.
+ *
+ * It reads `request.actor` directly, which is the drain of a
+ * `resolveCustomerAccountId` option both composition roots supplied
+ * (`specs/110-instance-repository/` T118c). That option was the older shape,
+ * from when the augmentation was `auth`'s and a packaged module could not name
+ * it; a knob a root fills on a module's behalf is a knob that drifts between the
+ * two roots, and this one had — production read `request.actor` and the harness
+ * `request.testActor`. `registerTestAuth` mirrors each resolved actor onto both
+ * properties, so one read answers correctly under either composition.
+ */
+export function callingCustomerAccountId(request) {
+    return request.actor.kind === 'customer' ? request.actor.customerAccountId : null;
+}
+//# sourceMappingURL=request-actor.js.map

package/dist/backend/request-actor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-actor.js","sourceRoot":"","sources":["../../src/backend/request-actor.ts"],"names":[],"mappings":"AACA,sEAAsE;AACtE,gFAAgF;AAChF,4EAA4E;AAC5E,wEAAwE;AACxE,OAAO,gCAAgC,CAAC;AAExC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAuB;IAC9D,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC;AACpF,CAAC"}

package/dist/backend/routes.admin.d.ts

@@ -0,0 +1,52 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+import { z } from 'zod';
+import type { CustomerAccountReadPort, CustomerGroupReadPort, OrganizationDetailsPort } from '@endora-commerce/contracts';
+import type { PwaConfigResolver } from './services/pwa-config-resolver.js';
+import { type PwaIconService } from './services/pwa-icon-service.js';
+import type { PushSubscriptionService } from './services/push-subscription-service.js';
+import type { PushMessageService } from './services/push-message-service.js';
+import type { RequireAdminFactory } from '@endora-commerce/platform/kernel';
+export interface AdminAuditContext {
+    actorAdminUserId: string | null;
+}
+/** Write port over SettingsAdminService (global vs per-channel value writes). */
+export interface SettingsWritePort {
+    setValueForAllChannels(code: string, rawValue: unknown, expectedVersion: string | null, actor: AdminAuditContext): Promise<unknown>;
+    setValueForSubset(code: string, channelCodes: string[], rawValue: unknown, expectedVersion: string | null, actor: AdminAuditContext): Promise<unknown>;
+    /** Remove per-channel override rows so the channel inherits the global value. */
+    resetValues(code: string, channelCodes: string[] | undefined, actor: AdminAuditContext): Promise<unknown>;
+}
+export interface PwaAdminRoutesDeps {
+    requireAdmin: RequireAdminFactory;
+    emFactory: () => EntityManager;
+    configResolver: PwaConfigResolver;
+    iconService: PwaIconService;
+    subscriptionService: PushSubscriptionService;
+    messageService: PushMessageService;
+    settingsWrite: SettingsWritePort;
+    /**
+     * The three Rule Builder pickers' rows, asked of the modules that own them
+     * (feature 075, Phase C). Each is gated at its owner's registration seam, so
+     * a picker over a switched-off module answers 503 `MODULE_DISABLED` instead
+     * of listing targets the operator can no longer reach.
+     */
+    customerAccounts: CustomerAccountReadPort;
+    organizationDetails: OrganizationDetailsPort;
+    customerGroups: CustomerGroupReadPort;
+    settingsRead: {
+        get<T>(code: string, channelId: string | null, schema: z.ZodType<T>): Promise<T>;
+    };
+    /**
+     * Resolve a salesChannelId query value (or null) to the channel to read/write.
+     * Answers `null` when the deployment has no channel at all, which is a
+     * platform-wide read rather than the `'default'` sentinel it used to be
+     * (feature 072, D-41).
+     */
+    resolveScopeChannelId: (salesChannelId: string | null) => Promise<string | null>;
+    /** Map a channel id to its code (subset writes are keyed by code). */
+    channelCodeForId: (channelId: string) => Promise<string | null>;
+    resolveAuditContext: (request: FastifyRequest) => AdminAuditContext;
+}
+export declare function registerPwaAdminRoutes(app: FastifyInstance, deps: PwaAdminRoutesDeps): Promise<void>;
+//# sourceMappingURL=routes.admin.d.ts.map

package/dist/backend/routes.admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.d.ts","sourceRoot":"","sources":["../../src/backend/routes.admin.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE/D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,KAAK,EACV,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACxB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AACvF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE5E,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,iFAAiF;AACjF,MAAM,WAAW,iBAAiB;IAChC,sBAAsB,CACpB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,OAAO,EACjB,eAAe,EAAE,MAAM,GAAG,IAAI,EAC9B,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,iBAAiB,CACf,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EAAE,EACtB,QAAQ,EAAE,OAAO,EACjB,eAAe,EAAE,MAAM,GAAG,IAAI,EAC9B,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,iFAAiF;IACjF,WAAW,CACT,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EAAE,GAAG,SAAS,EAClC,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB;AAKD,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,mBAAmB,CAAC;IAClC,SAAS,EAAE,MAAM,aAAa,CAAC;IAC/B,cAAc,EAAE,iBAAiB,CAAC;IAClC,WAAW,EAAE,cAAc,CAAC;IAC5B,mBAAmB,EAAE,uBAAuB,CAAC;IAC7C,cAAc,EAAE,kBAAkB,CAAC;IACnC,aAAa,EAAE,iBAAiB,CAAC;IACjC;;;;;OAKG;IACH,gBAAgB,EAAE,uBAAuB,CAAC;IAC1C,mBAAmB,EAAE,uBAAuB,CAAC;IAC7C,cAAc,EAAE,qBAAqB,CAAC;IACtC,YAAY,EAAE;QACZ,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;KAClF,CAAC;IACF;;;;;OAKG;IACH,qBAAqB,EAAE,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACjF,sEAAsE;IACtE,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAChE,mBAAmB,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,iBAAiB,CAAC;CACrE;AAED,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,IAAI,CAAC,CA8Of"}

package/dist/backend/routes.admin.js

@@ -0,0 +1,222 @@
+import webpush from 'web-push';
+import { z } from 'zod';
+import { PWA_PERMISSIONS, PWA_SETTING_CODES, CreatePushMessageRequestSchema, UpdatePwaConfigRequestSchema, } from '@endora-commerce/contracts';
+import { SalesChannel } from '@endora-commerce/platform/kernel';
+import { PwaIconInvalid } from './services/pwa-icon-service.js';
+const StringSchema = z.string();
+const BoolSchema = z.boolean();
+export async function registerPwaAdminRoutes(app, deps) {
+    const readGate = deps.requireAdmin(PWA_PERMISSIONS.READ);
+    const writeGate = deps.requireAdmin(PWA_PERMISSIONS.WRITE);
+    const sendGate = deps.requireAdmin(PWA_PERMISSIONS.SEND_PUSH);
+    const safeGet = async (code, channelId, fallback = '') => {
+        try {
+            return await deps.settingsRead.get(code, channelId, StringSchema);
+        }
+        catch {
+            return fallback;
+        }
+    };
+    const safeBool = async (code, channelId) => {
+        try {
+            return await deps.settingsRead.get(code, channelId, BoolSchema);
+        }
+        catch {
+            return false;
+        }
+    };
+    // GET /admin/pwa/config — effective config + secret isSet flags.
+    app.get('/api/v1/admin/pwa/config', { preHandler: readGate }, async (request, reply) => {
+        const salesChannelId = request.query.salesChannelId ?? null;
+        const channelId = await deps.resolveScopeChannelId(salesChannelId);
+        const [appName, shortName, themeColor, backgroundColor, displayMode, iconAssetId, vapidPublicKey, vapidPrivate, fcm] = await Promise.all([
+            safeGet(PWA_SETTING_CODES.APP_NAME, channelId, 'B2B Platform'),
+            safeGet(PWA_SETTING_CODES.SHORT_NAME, channelId, 'B2B'),
+            safeGet(PWA_SETTING_CODES.THEME_COLOR, channelId, '#1d4ed8'),
+            safeGet(PWA_SETTING_CODES.BACKGROUND_COLOR, channelId, '#fafafa'),
+            safeGet(PWA_SETTING_CODES.DISPLAY_MODE, channelId, 'standalone'),
+            safeGet(PWA_SETTING_CODES.ICON_ASSET_ID, channelId, ''),
+            safeGet(PWA_SETTING_CODES.VAPID_PUBLIC_KEY, channelId, ''),
+            safeGet(PWA_SETTING_CODES.VAPID_PRIVATE_KEY, channelId, ''),
+            safeGet(PWA_SETTING_CODES.FCM_SERVICE_ACCOUNT, channelId, ''),
+        ]);
+        const [cachingEnabled, pushEnabled] = await Promise.all([
+            safeBool(PWA_SETTING_CODES.CACHING_ENABLED, channelId),
+            safeBool(PWA_SETTING_CODES.PUSH_ENABLED, channelId),
+        ]);
+        return reply.send({
+            salesChannelId,
+            appName,
+            shortName,
+            themeColor,
+            backgroundColor,
+            displayMode,
+            iconAssetId,
+            cachingEnabled,
+            pushEnabled,
+            vapidPublicKey,
+            vapidPrivateKeyIsSet: vapidPrivate.length > 0,
+            fcmServiceAccountIsSet: fcm.length > 0,
+        });
+    });
+    // PUT /admin/pwa/config — write a subset of settings for global or a channel.
+    app.put('/api/v1/admin/pwa/config', { preHandler: writeGate }, async (request, reply) => {
+        const body = UpdatePwaConfigRequestSchema.parse(request.body);
+        const actor = deps.resolveAuditContext(request);
+        const salesChannelId = body.salesChannelId ?? null;
+        const writes = [];
+        if (body.appName !== undefined)
+            writes.push({ code: PWA_SETTING_CODES.APP_NAME, value: body.appName });
+        if (body.shortName !== undefined)
+            writes.push({ code: PWA_SETTING_CODES.SHORT_NAME, value: body.shortName });
+        if (body.themeColor !== undefined)
+            writes.push({ code: PWA_SETTING_CODES.THEME_COLOR, value: body.themeColor });
+        if (body.backgroundColor !== undefined)
+            writes.push({ code: PWA_SETTING_CODES.BACKGROUND_COLOR, value: body.backgroundColor });
+        if (body.displayMode !== undefined)
+            writes.push({ code: PWA_SETTING_CODES.DISPLAY_MODE, value: body.displayMode });
+        if (body.cachingEnabled !== undefined)
+            writes.push({ code: PWA_SETTING_CODES.CACHING_ENABLED, value: body.cachingEnabled });
+        if (body.pushEnabled !== undefined)
+            writes.push({ code: PWA_SETTING_CODES.PUSH_ENABLED, value: body.pushEnabled });
+        if (body.vapidPublicKey !== undefined)
+            writes.push({ code: PWA_SETTING_CODES.VAPID_PUBLIC_KEY, value: body.vapidPublicKey });
+        if (body.vapidPrivateKey !== undefined)
+            writes.push({ code: PWA_SETTING_CODES.VAPID_PRIVATE_KEY, value: body.vapidPrivateKey });
+        if (body.fcmServiceAccount !== undefined)
+            writes.push({ code: PWA_SETTING_CODES.FCM_SERVICE_ACCOUNT, value: body.fcmServiceAccount });
+        const channelCode = salesChannelId ? await deps.channelCodeForId(salesChannelId) : null;
+        for (const w of writes) {
+            if (channelCode) {
+                await deps.settingsWrite.setValueForSubset(w.code, [channelCode], w.value, null, actor);
+            }
+            else {
+                await deps.settingsWrite.setValueForAllChannels(w.code, w.value, null, actor);
+            }
+        }
+        return reply.send({ updated: writes.length });
+    });
+    // POST /admin/pwa/config/reset — drop a channel's per-channel overrides so it
+    // inherits the global PWA config again. Only meaningful for a concrete channel.
+    app.post('/api/v1/admin/pwa/config/reset', { preHandler: writeGate }, async (request, reply) => {
+        const body = z.object({ salesChannelId: z.string().uuid() }).parse(request.body);
+        const channelCode = await deps.channelCodeForId(body.salesChannelId);
+        if (!channelCode) {
+            return reply.code(400).send({
+                error: { code: 'PWA_CHANNEL_UNKNOWN', message: 'Unknown sales channel.' },
+            });
+        }
+        const actor = deps.resolveAuditContext(request);
+        const codes = Object.values(PWA_SETTING_CODES);
+        for (const code of codes) {
+            await deps.settingsWrite.resetValues(code, [channelCode], actor);
+        }
+        return reply.send({ reset: codes.length });
+    });
+    // POST /admin/pwa/vapid/generate — generate + persist a VAPID key pair.
+    app.post('/api/v1/admin/pwa/vapid/generate', { preHandler: writeGate }, async (request, reply) => {
+        const actor = deps.resolveAuditContext(request);
+        const keys = webpush.generateVAPIDKeys();
+        await deps.settingsWrite.setValueForAllChannels(PWA_SETTING_CODES.VAPID_PUBLIC_KEY, keys.publicKey, null, actor);
+        await deps.settingsWrite.setValueForAllChannels(PWA_SETTING_CODES.VAPID_PRIVATE_KEY, keys.privateKey, null, actor);
+        return reply.send({ publicKey: keys.publicKey });
+    });
+    // POST /admin/pwa/icon — multipart source upload + sharp rendition derivation.
+    app.post('/api/v1/admin/pwa/icon', { preHandler: writeGate }, async (request, reply) => {
+        if (!request.isMultipart()) {
+            return reply.code(400).send({ error: { code: 'PWA_ICON_INVALID', message: 'Upload requires multipart/form-data with a `file` part.' } });
+        }
+        const file = await request.file();
+        if (!file) {
+            return reply.code(400).send({ error: { code: 'PWA_ICON_INVALID', message: 'Missing `file` part.' } });
+        }
+        const buffer = await file.toBuffer();
+        const salesChannelId = request.query.salesChannelId ?? null;
+        try {
+            const result = await deps.iconService.ingest({
+                salesChannelId,
+                declaredMime: file.mimetype,
+                buffer,
+            });
+            // Record the source asset id on the channel/global config.
+            const actor = deps.resolveAuditContext(request);
+            const channelCode = salesChannelId ? await deps.channelCodeForId(salesChannelId) : null;
+            if (channelCode) {
+                await deps.settingsWrite.setValueForSubset(PWA_SETTING_CODES.ICON_ASSET_ID, [channelCode], result.sourceAssetId, null, actor);
+            }
+            else {
+                await deps.settingsWrite.setValueForAllChannels(PWA_SETTING_CODES.ICON_ASSET_ID, result.sourceAssetId, null, actor);
+            }
+            return reply.code(201).send(result);
+        }
+        catch (err) {
+            if (err instanceof PwaIconInvalid) {
+                return reply.code(400).send({ error: { code: err.code, message: err.message } });
+            }
+            throw err;
+        }
+    });
+    // GET /admin/pwa/subscriptions — subscriber counts for a channel.
+    app.get('/api/v1/admin/pwa/subscriptions', { preHandler: readGate }, async (request, reply) => {
+        const channelId = await deps.resolveScopeChannelId(request.query.salesChannelId ?? null);
+        const stats = await deps.subscriptionService.statsForChannel(channelId);
+        return reply.send(stats);
+    });
+    // POST /admin/pwa/messages — admin-initiated send (FR-024).
+    app.post('/api/v1/admin/pwa/messages', { preHandler: sendGate }, async (request, reply) => {
+        const body = CreatePushMessageRequestSchema.parse(request.body);
+        const config = await deps.configResolver.getPublicConfig(body.salesChannelId);
+        if (!config.pushEnabled || !config.vapidPublicKey) {
+            return reply.code(503).send({ error: { code: 'PWA_PUSH_UNCONFIGURED', message: 'Push is not configured for this channel.' } });
+        }
+        const actor = deps.resolveAuditContext(request);
+        const result = await deps.messageService.createAndEnqueue({
+            salesChannelId: body.salesChannelId,
+            title: body.title,
+            body: body.body,
+            url: body.url ?? null,
+            iconUrl: body.iconUrl ?? null,
+            audience: body.audience,
+            trigger: 'admin',
+            createdByAdminUserId: actor.actorAdminUserId,
+        });
+        return reply.code(202).send(result);
+    });
+    // ---- Audience Rule Builder pickers (targeting criteria) -----------------
+    // Lists feeding the admin Rule Builder when composing a targeted send.
+    // Gated by the page's base read permission so a read-only viewer can still
+    // see the available targets.
+    app.get('/api/v1/admin/pwa/rule-targets/sales-channels', { preHandler: readGate }, async () => {
+        const em = deps.emFactory();
+        const rows = await em.find(SalesChannel, {}, { orderBy: { code: 'asc' } });
+        return { data: { items: rows.map((r) => ({ id: r.id, code: r.code, name: r.name })) } };
+    });
+    app.get('/api/v1/admin/pwa/rule-targets/customer-groups', { preHandler: readGate }, async () => {
+        const rows = await deps.customerGroups.listAll();
+        return { data: { items: rows.map((r) => ({ id: r.id, code: r.code, name: r.name })) } };
+    });
+    app.get('/api/v1/admin/pwa/rule-targets/organizations', { preHandler: readGate }, async (request) => {
+        const limit = Math.min(200, Math.max(1, Number(request.query.limit ?? '100')));
+        const search = (request.query.search ?? '').trim();
+        // `searchByName` matches the diacritic-folded `name_search` column the
+        // owner maintains, so "lodz" now finds "Łódź" — the local `$ilike` on
+        // `name` never did.
+        const rows = await deps.organizationDetails.searchByName(search, limit);
+        return { data: { items: rows.map((r) => ({ id: r.id, name: r.name, taxId: r.taxId })) } };
+    });
+    app.get('/api/v1/admin/pwa/rule-targets/customers', { preHandler: readGate }, async (request) => {
+        const limit = Math.min(200, Math.max(1, Number(request.query.limit ?? '100')));
+        const search = (request.query.search ?? '').trim();
+        const rows = await deps.customerAccounts.searchByEmail(search, limit);
+        return {
+            data: {
+                items: rows.map((r) => ({
+                    id: r.id,
+                    email: r.email,
+                    organizationId: r.organizationId ?? null,
+                })),
+            },
+        };
+    });
+}
+//# sourceMappingURL=routes.admin.js.map

package/dist/backend/routes.admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.js","sourceRoot":"","sources":["../../src/backend/routes.admin.ts"],"names":[],"mappings":"AAUA,OAAO,OAAO,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,8BAA8B,EAC9B,4BAA4B,GAC7B,MAAM,4BAA4B,CAAC;AAMpC,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAEhE,OAAO,EAAE,cAAc,EAAuB,MAAM,gCAAgC,CAAC;AAgCrF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;AAChC,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;AAkC/B,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAoB,EACpB,IAAwB;IAExB,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IAE9D,MAAM,OAAO,GAAG,KAAK,EACnB,IAAY,EACZ,SAAwB,EACxB,QAAQ,GAAG,EAAE,EACI,EAAE;QACnB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAY,EAAE,SAAwB,EAAoB,EAAE;QAClF,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IAEF,iEAAiE;IACjE,GAAG,CAAC,GAAG,CACL,0BAA0B,EAC1B,EAAE,UAAU,EAAE,QAAQ,EAAE,EACxB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,IAAI,IAAI,CAAC;QAC5D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC;QACnE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,GAAG,CAAC,GAClH,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,OAAO,CAAC,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EAAE,cAAc,CAAC;YAC9D,OAAO,CAAC,iBAAiB,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC;YACvD,OAAO,CAAC,iBAAiB,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC;YAC5D,OAAO,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,SAAS,EAAE,SAAS,CAAC;YACjE,OAAO,CAAC,iBAAiB,CAAC,YAAY,EAAE,SAAS,EAAE,YAAY,CAAC;YAChE,OAAO,CAAC,iBAAiB,CAAC,aAAa,EAAE,SAAS,EAAE,EAAE,CAAC;YACvD,OAAO,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,SAAS,EAAE,EAAE,CAAC;YAC1D,OAAO,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,SAAS,EAAE,EAAE,CAAC;YAC3D,OAAO,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,SAAS,EAAE,EAAE,CAAC;SAC9D,CAAC,CAAC;QACL,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtD,QAAQ,CAAC,iBAAiB,CAAC,eAAe,EAAE,SAAS,CAAC;YACtD,QAAQ,CAAC,iBAAiB,CAAC,YAAY,EAAE,SAAS,CAAC;SACpD,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,IAAI,CAAC;YAChB,cAAc;YACd,OAAO;YACP,SAAS;YACT,UAAU;YACV,eAAe;YACf,WAAW;YACX,WAAW;YACX,cAAc;YACd,WAAW;YACX,cAAc;YACd,oBAAoB,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC;YAC7C,sBAAsB,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC;SACvC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,8EAA8E;IAC9E,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACtF,MAAM,IAAI,GAAG,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC;QAEnD,MAAM,MAAM,GAA4C,EAAE,CAAC;QAC3D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACvG,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7G,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAChH,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;QAC/H,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACnH,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,eAAe,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QAC5H,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACnH,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QAC7H,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;QAChI,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,mBAAmB,EAAE,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;QAEtI,MAAM,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxF,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1F,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,gFAAgF;IAChF,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC7F,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACrE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,wBAAwB,EAAE;aAC1E,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC/C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC/F,MAAM,KAAK,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACzC,MAAM,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACjH,MAAM,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACnH,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,GAAG,CAAC,IAAI,CACN,wBAAwB,EACxB,EAAE,UAAU,EAAE,SAAS,EAAE,EACzB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,yDAAyD,EAAE,EAAE,CAAC,CAAC;QAC3I,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,CAAC,CAAC;QACxG,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,IAAI,IAAI,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;gBAC3C,cAAc;gBACd,YAAY,EAAE,IAAI,CAAC,QAAQ;gBAC3B,MAAM;aACP,CAAC,CAAC;YACH,2DAA2D;YAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACxF,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,aAAa,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAChI,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACtH,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;gBAClC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,kEAAkE;IAClE,GAAG,CAAC,GAAG,CACL,iCAAiC,EACjC,EAAE,UAAU,EAAE,QAAQ,EAAE,EACxB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC;QACzF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QACxE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CACF,CAAC;IAEF,4DAA4D;IAC5D,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACxF,MAAM,IAAI,GAAG,8BAA8B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,0CAA0C,EAAE,EAAE,CAAC,CAAC;QACjI,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC;YACxD,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;YAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,OAAO;YAChB,oBAAoB,EAAE,KAAK,CAAC,gBAAgB;SAC7C,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,uEAAuE;IACvE,2EAA2E;IAC3E,6BAA6B;IAE7B,GAAG,CAAC,GAAG,CAAC,+CAA+C,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3E,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,gDAAgD,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;QACjD,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CACL,8CAA8C,EAC9C,EAAE,UAAU,EAAE,QAAQ,EAAE,EACxB,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,uEAAuE;QACvE,sEAAsE;QACtE,oBAAoB;QACpB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IAC5F,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,0CAA0C,EAC1C,EAAE,UAAU,EAAE,QAAQ,EAAE,EACxB,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtE,OAAO;YACL,IAAI,EAAE;gBACJ,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACtB,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI;iBACzC,CAAC,CAAC;aACJ;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/backend/routes.storefront.d.ts

@@ -0,0 +1,29 @@
+import type { FastifyInstance } from 'fastify';
+import type { PwaConfigResolver } from './services/pwa-config-resolver.js';
+import type { PwaIconService } from './services/pwa-icon-service.js';
+import type { PushSubscriptionService } from './services/push-subscription-service.js';
+export interface PwaStorefrontRoutesDeps {
+    configResolver: PwaConfigResolver;
+    iconService: PwaIconService;
+    subscriptionService: PushSubscriptionService;
+    /**
+     * A stored asset id to a servable URL, over `assets_library`' published
+     * `assetsLibraryPort` (`specs/110-instance-repository/` T118c). Absolute:
+     * `assets_library` resolves the origin itself (D-223).
+     */
+    resolveAssetUrl: (assetId: string) => Promise<string | null>;
+}
+/**
+ * **`resolveChannelId` is gone, and it was never called.**
+ *
+ * Both composition roots built a `resolveChannelIdByCode` closure — a
+ * `getByCode` with a system-default fallback — `plugin.ts` threaded it here as
+ * `resolveChannelId`, and the three routes below read `getResolvedChannel`
+ * instead, which is the platform's resolved request channel and the sanctioned
+ * accessor (Constitution XII). So the option was dead the whole way down: two
+ * closures, one option, one dependency field, and no call site. It was one of
+ * the eight members of `PwaBridge`, and the only one T118c deleted rather than
+ * drained.
+ */
+export declare function registerPwaStorefrontRoutes(app: FastifyInstance, deps: PwaStorefrontRoutesDeps): Promise<void>;
+//# sourceMappingURL=routes.storefront.d.ts.map

package/dist/backend/routes.storefront.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.storefront.d.ts","sourceRoot":"","sources":["../../src/backend/routes.storefront.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAM/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAIvF,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,iBAAiB,CAAC;IAClC,WAAW,EAAE,cAAc,CAAC;IAC5B,mBAAmB,EAAE,uBAAuB,CAAC;IAC7C;;;;OAIG;IACH,eAAe,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC9D;AAED;;;;;;;;;;;GAWG;AAEH,wBAAsB,2BAA2B,CAC/C,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAoDf"}

package/dist/backend/routes.storefront.js

@@ -0,0 +1,66 @@
+import { PushSubscriptionInputSchema, PushSubscriptionDeleteSchema, } from '@endora-commerce/contracts';
+import { getResolvedChannel } from '@endora-commerce/platform/kernel';
+import { callingCustomerAccountId } from './request-actor.js';
+/**
+ * **`resolveChannelId` is gone, and it was never called.**
+ *
+ * Both composition roots built a `resolveChannelIdByCode` closure — a
+ * `getByCode` with a system-default fallback — `plugin.ts` threaded it here as
+ * `resolveChannelId`, and the three routes below read `getResolvedChannel`
+ * instead, which is the platform's resolved request channel and the sanctioned
+ * accessor (Constitution XII). So the option was dead the whole way down: two
+ * closures, one option, one dependency field, and no call site. It was one of
+ * the eight members of `PwaBridge`, and the only one T118c deleted rather than
+ * drained.
+ */
+export async function registerPwaStorefrontRoutes(app, deps) {
+    // GET config — manifest identity + toggles + public VAPID key (FR-001/011).
+    app.get('/api/v1/storefront/pwa/config', async (request, reply) => {
+        const channelId = getResolvedChannel(request).id;
+        const config = await deps.configResolver.getPublicConfig(channelId);
+        reply.header('Cache-Control', 'public, max-age=60');
+        return reply.send(config);
+    });
+    // GET icon rendition — redirect to the stored asset URL (FR-005).
+    app.get('/api/v1/storefront/pwa/icons/:spec', async (request, reply) => {
+        const match = /^(\d+)-(any|maskable)\.png$/.exec(request.params.spec);
+        if (!match)
+            return reply.code(404).send();
+        const size = Number(match[1]);
+        const purpose = match[2];
+        const channelId = getResolvedChannel(request).id;
+        const assetId = await deps.iconService.resolveRenditionAssetId(channelId, size, purpose);
+        if (!assetId)
+            return reply.code(404).send();
+        const url = await deps.resolveAssetUrl(assetId);
+        if (!url)
+            return reply.code(404).send();
+        return reply.redirect(url, 302);
+    });
+    // POST subscribe — register (upsert) a Web-Push subscription (FR-017).
+    app.post('/api/v1/storefront/pwa/subscriptions', async (request, reply) => {
+        const channelId = getResolvedChannel(request).id;
+        const config = await deps.configResolver.getPublicConfig(channelId);
+        if (!config.pushEnabled) {
+            return reply.code(403).send({ error: { code: 'PWA_PUSH_DISABLED', message: 'Push is disabled for this channel.' } });
+        }
+        if (!config.vapidPublicKey) {
+            return reply.code(503).send({ error: { code: 'PWA_PUSH_UNCONFIGURED', message: 'Push is not configured.' } });
+        }
+        const body = PushSubscriptionInputSchema.parse(request.body);
+        const customerAccountId = callingCustomerAccountId(request);
+        const result = await deps.subscriptionService.register({
+            ...body,
+            salesChannelId: channelId,
+            customerAccountId,
+        });
+        return reply.code(result.created ? 201 : 200).send({ id: result.id, status: result.status });
+    });
+    // DELETE subscribe — revoke (FR-018). Idempotent.
+    app.delete('/api/v1/storefront/pwa/subscriptions', async (request, reply) => {
+        const body = PushSubscriptionDeleteSchema.parse(request.body);
+        await deps.subscriptionService.revoke(body.endpoint);
+        return reply.code(204).send();
+    });
+}
+//# sourceMappingURL=routes.storefront.js.map

package/dist/backend/routes.storefront.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.storefront.js","sourceRoot":"","sources":["../../src/backend/routes.storefront.ts"],"names":[],"mappings":"AACA,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,GAE7B,MAAM,4BAA4B,CAAC;AAIpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAc9D;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,GAAoB,EACpB,IAA6B;IAE7B,4EAA4E;IAC5E,GAAG,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAChE,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QACpE,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC;QACpD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,GAAG,CAAC,GAAG,CACL,oCAAoC,EACpC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,KAAK,GAAG,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAmB,CAAC;QAC3C,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACzF,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC,CACF,CAAC;IAEF,uEAAuE;IACvE,GAAG,CAAC,IAAI,CAAC,sCAAsC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACxE,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,oCAAoC,EAAE,EAAE,CAAC,CAAC;QACvH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,IAAI,GAAG,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC;YACrD,GAAG,IAAI;YACP,cAAc,EAAE,SAAS;YACzB,iBAAiB;SAClB,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,kDAAkD;IAClD,GAAG,CAAC,MAAM,CAAC,sCAAsC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC1E,MAAM,IAAI,GAAG,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC"}