@endora-commerce/mod-settings 0.100.0

package/dist/backend/services/cache-admin.service.js

@@ -0,0 +1,148 @@
+import { inProcessCaches, } from '@endora-commerce/platform/kernel';
+import { SETTINGS_CACHE_KEY_PREFIX, SETTINGS_CACHE_NAMESPACE, } from '@endora-commerce/platform/kernel';
+import { SALES_CHANNELS_CACHE_KEY_PREFIX, SALES_CHANNELS_CACHE_NAMESPACE, } from '@endora-commerce/platform/kernel';
+export const CACHE_NAMESPACES = [
+    {
+        key: SETTINGS_CACHE_NAMESPACE,
+        label: 'Settings',
+        description: 'Resolved platform / per-channel setting values.',
+        patterns: [`${SETTINGS_CACHE_KEY_PREFIX}*`],
+    },
+    {
+        key: SALES_CHANNELS_CACHE_NAMESPACE,
+        label: 'Sales channels',
+        description: 'Resolved sales-channel configuration.',
+        patterns: [`${SALES_CHANNELS_CACHE_KEY_PREFIX}*`],
+    },
+    {
+        key: 'blog',
+        label: 'Blog',
+        description: 'Storefront blog index, posts, categories and tag pages.',
+        patterns: ['blog:v1:*'],
+    },
+    {
+        key: 'cms',
+        label: 'CMS',
+        description: 'Storefront CMS pages, blocks and hook content.',
+        patterns: ['cms:v1:*'],
+    },
+    {
+        key: 'megamenu',
+        label: 'Mega menu',
+        description: 'Resolved storefront mega-menu trees.',
+        patterns: ['megamenu:v1:*'],
+    },
+    {
+        key: 'dictionaries',
+        label: 'Dictionaries',
+        description: 'Resolved dictionary registries and entries (countries, etc.).',
+        patterns: ['dictionary:*'],
+    },
+    {
+        key: 'carts',
+        label: 'Cart pricing',
+        description: 'Cached cart re-pricing snapshots.',
+        patterns: ['b2b:cart:recompute:*'],
+    },
+    // No `modules` entry. It cleared `b2b:module:enabled-set`, which no code path
+    // ever read: module presence is held in memory and refreshed from PostgreSQL
+    // on a `b2b:module:state-changed` notification. The mirror is gone (feature
+    // 073, T140), and offering an operator a button that clears a key nobody
+    // reads is worse than offering nothing — it is where they look first when
+    // presence is wrong.
+];
+/**
+ * Admin-facing cache maintenance. Lets an operator flush selected cache
+ * namespaces so freshly-published content / changed settings show up without
+ * waiting for TTL expiry.
+ *
+ * Six of the eight namespaces live only in Redis, so SCAN+DEL over their key
+ * patterns is a complete clear. Two — `settings` and `sales_channels` — keep a
+ * per-process layer in front of Redis, and for those the clear goes through
+ * the cache that owns both layers (see {@link InProcessCacheRegistry}), which
+ * is also the only way to get the ordering right: shared layer first, prefix
+ * marked for the whole operation.
+ *
+ * The cost of that ordering is worth naming. Immediately after a clear both
+ * layers are cold and the marked prefix sends reads through to PostgreSQL, so
+ * a platform-wide burst of setting reads lands on the database. The queries are
+ * trivial (small table, unique index on `code`), but the connection pool is
+ * not: it is the scarce resource. That is acceptable for a rare,
+ * operator-initiated action and unacceptable in a loop, which is why the route
+ * carries its own rate limit (`routes.cache.ts`).
+ */
+export class CacheAdminService {
+    redis;
+    caches;
+    constructor(redis, 
+    /** Injectable so a test does not clear this process's real caches. */
+    caches = inProcessCaches) {
+        this.redis = redis;
+        this.caches = caches;
+    }
+    get enabled() {
+        return this.redis !== undefined;
+    }
+    listNamespaces() {
+        return CACHE_NAMESPACES.map((n) => ({
+            key: n.key,
+            label: n.label,
+            description: n.description,
+        }));
+    }
+    /**
+     * Clear the given namespaces (or every namespace when passed `'all'`).
+     * Unknown keys are ignored. Returns the per-namespace deleted-key counts.
+     */
+    async clear(namespaces) {
+        const wanted = namespaces === 'all'
+            ? CACHE_NAMESPACES
+            : CACHE_NAMESPACES.filter((n) => namespaces.includes(n.key));
+        const cleared = [];
+        let totalDeletedKeys = 0;
+        for (const ns of wanted) {
+            const deleted = await this.clearNamespace(ns);
+            cleared.push({ key: ns.key, deletedKeysCount: deleted });
+            totalDeletedKeys += deleted;
+        }
+        return { cleared, totalDeletedKeys };
+    }
+    /**
+     * Prefer the owning cache when this process has one: it drops the shared
+     * layer and its own in-memory layer as one marked operation. A process that
+     * registered none — the `cache:clear` CLI, a worker without the module —
+     * has no in-memory layer to be stale, so clearing the Redis keys is the
+     * whole job.
+     */
+    async clearNamespace(ns) {
+        if (this.caches.has(ns.key)) {
+            return (await this.caches.clear(ns.key)) ?? 0;
+        }
+        if (!this.redis)
+            return 0;
+        let deleted = 0;
+        for (const pattern of ns.patterns) {
+            deleted += await this.scanDelete(pattern);
+        }
+        return deleted;
+    }
+    async scanDelete(pattern) {
+        const redis = this.redis;
+        if (!redis)
+            return 0;
+        // A glob-free pattern is a single literal key — delete it directly.
+        if (!/[*?[\]]/.test(pattern)) {
+            return redis.del(pattern);
+        }
+        let cursor = '0';
+        let deleted = 0;
+        do {
+            const [next, keys] = await redis.scan(cursor, 'MATCH', pattern, 'COUNT', 200);
+            cursor = next;
+            if (keys.length > 0)
+                deleted += await redis.del(...keys);
+        } while (cursor !== '0');
+        return deleted;
+    }
+}
+//# sourceMappingURL=cache-admin.service.js.map

package/dist/backend/services/cache-admin.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-admin.service.js","sourceRoot":"","sources":["../../../src/backend/services/cache-admin.service.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,eAAe,GAEhB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,GAC/B,MAAM,kCAAkC,CAAC;AA6B1C,MAAM,CAAC,MAAM,gBAAgB,GAA8B;IACzD;QACE,GAAG,EAAE,wBAAwB;QAC7B,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,iDAAiD;QAC9D,QAAQ,EAAE,CAAC,GAAG,yBAAyB,GAAG,CAAC;KAC5C;IACD;QACE,GAAG,EAAE,8BAA8B;QACnC,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,uCAAuC;QACpD,QAAQ,EAAE,CAAC,GAAG,+BAA+B,GAAG,CAAC;KAClD;IACD;QACE,GAAG,EAAE,MAAM;QACX,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,yDAAyD;QACtE,QAAQ,EAAE,CAAC,WAAW,CAAC;KACxB;IACD;QACE,GAAG,EAAE,KAAK;QACV,KAAK,EAAE,KAAK;QACZ,WAAW,EAAE,gDAAgD;QAC7D,QAAQ,EAAE,CAAC,UAAU,CAAC;KACvB;IACD;QACE,GAAG,EAAE,UAAU;QACf,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,sCAAsC;QACnD,QAAQ,EAAE,CAAC,eAAe,CAAC;KAC5B;IACD;QACE,GAAG,EAAE,cAAc;QACnB,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,+DAA+D;QAC5E,QAAQ,EAAE,CAAC,cAAc,CAAC;KAC3B;IACD;QACE,GAAG,EAAE,OAAO;QACZ,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,mCAAmC;QAChD,QAAQ,EAAE,CAAC,sBAAsB,CAAC;KACnC;IACD,8EAA8E;IAC9E,6EAA6E;IAC7E,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,qBAAqB;CACb,CAAC;AAOX;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,iBAAiB;IAET;IAEA;IAHnB,YACmB,KAAa;IAC9B,sEAAsE;IACrD,SAAiC,eAAe;QAFhD,UAAK,GAAL,KAAK,CAAQ;QAEb,WAAM,GAAN,MAAM,CAA0C;IAChE,CAAC;IAEJ,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC;IAClC,CAAC;IAED,cAAc;QACZ,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClC,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CACT,UAA4B;QAE5B,MAAM,MAAM,GACV,UAAU,KAAK,KAAK;YAClB,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAEjE,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,IAAI,gBAAgB,GAAG,CAAC,CAAC;QACzB,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;YACzD,gBAAgB,IAAI,OAAO,CAAC;QAC9B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,cAAc,CAAC,EAAkB;QAC7C,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC;QAC1B,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,OAAO,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;YAClC,OAAO,IAAI,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,OAAe;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC;QACrB,oEAAoE;QACpE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,MAAM,GAAG,GAAG,CAAC;QACjB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,GAAG,CAAC;YACF,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YAC9E,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,IAAI,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3D,CAAC,QAAQ,MAAM,KAAK,GAAG,EAAE;QACzB,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/backend/services/homepage-resolver.d.ts

@@ -0,0 +1,25 @@
+import type { HomepageConfig } from '@endora-commerce/contracts';
+import type { SettingsReadPort } from '@endora-commerce/platform/kernel';
+/**
+ * Resolves the storefront home-page configuration for a sales channel from the
+ * `homepage_cms_page_slug` setting. An unset / not-registered / out-of-scope
+ * setting resolves to `{ cmsPageSlug: null }` so the storefront falls back to
+ * its built-in landing page and a missing setting never 500s a public page.
+ *
+ * There is no "missing channel" arm any more (feature 075 / D-87): the channel
+ * arrives resolved, and the resolver middleware has already refused an unknown
+ * or inactive one before a handler runs.
+ */
+export declare class HomepageResolver {
+    private readonly settingsService;
+    constructor(settingsService: SettingsReadPort);
+    /**
+     * Feature 075 / D-87 — the resolved request channel's id, passed in by the
+     * route. It used to be the channel *code*, looked back up here with a raw
+     * `select id from sales_channels`: a re-resolution of a channel the resolver
+     * middleware had already resolved (feature 053, FR-011), across a boundary
+     * no import specifier named.
+     */
+    resolve(salesChannelId: string): Promise<HomepageConfig>;
+}
+//# sourceMappingURL=homepage-resolver.d.ts.map

package/dist/backend/services/homepage-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"homepage-resolver.d.ts","sourceRoot":"","sources":["../../../src/backend/services/homepage-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAIzE;;;;;;;;;GASG;AACH,qBAAa,gBAAgB;IACf,OAAO,CAAC,QAAQ,CAAC,eAAe;gBAAf,eAAe,EAAE,gBAAgB;IAE9D;;;;;;OAMG;IACG,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;CAM/D"}

package/dist/backend/services/homepage-resolver.js

@@ -0,0 +1,31 @@
+const HOMEPAGE_SETTING_CODE = 'homepage_cms_page_slug';
+/**
+ * Resolves the storefront home-page configuration for a sales channel from the
+ * `homepage_cms_page_slug` setting. An unset / not-registered / out-of-scope
+ * setting resolves to `{ cmsPageSlug: null }` so the storefront falls back to
+ * its built-in landing page and a missing setting never 500s a public page.
+ *
+ * There is no "missing channel" arm any more (feature 075 / D-87): the channel
+ * arrives resolved, and the resolver middleware has already refused an unknown
+ * or inactive one before a handler runs.
+ */
+export class HomepageResolver {
+    settingsService;
+    constructor(settingsService) {
+        this.settingsService = settingsService;
+    }
+    /**
+     * Feature 075 / D-87 — the resolved request channel's id, passed in by the
+     * route. It used to be the channel *code*, looked back up here with a raw
+     * `select id from sales_channels`: a re-resolution of a channel the resolver
+     * middleware had already resolved (feature 053, FR-011), across a boundary
+     * no import specifier named.
+     */
+    async resolve(salesChannelId) {
+        const resolved = await this.settingsService.getMany([HOMEPAGE_SETTING_CODE], salesChannelId);
+        const r = resolved.get(HOMEPAGE_SETTING_CODE);
+        const slug = r && r.ok && typeof r.value === 'string' ? r.value.trim() : '';
+        return { cmsPageSlug: slug === '' ? null : slug };
+    }
+}
+//# sourceMappingURL=homepage-resolver.js.map

package/dist/backend/services/homepage-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"homepage-resolver.js","sourceRoot":"","sources":["../../../src/backend/services/homepage-resolver.ts"],"names":[],"mappings":"AAGA,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAEvD;;;;;;;;;GASG;AACH,MAAM,OAAO,gBAAgB;IACE;IAA7B,YAA6B,eAAiC;QAAjC,oBAAe,GAAf,eAAe,CAAkB;IAAG,CAAC;IAElE;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,cAAsB;QAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,EAAE,cAAc,CAAC,CAAC;QAC7F,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,WAAW,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,CAAC;CACF"}

package/dist/backend/services/product-card-buttons-resolver.d.ts

@@ -0,0 +1,25 @@
+import type { SettingsReadPort } from '@endora-commerce/platform/kernel';
+export interface ProductCardButtonsConfig {
+    showAddToCart: boolean;
+    showAddToShoppingList: boolean;
+    showAddToQuote: boolean;
+}
+/**
+ * Resolves the storefront product-card button visibility toggles for a sales
+ * channel. Each flag defaults to `true` (button shown) when its setting is
+ * unset / not-registered / out-of-scope, so a settings hiccup never hides a
+ * storefront affordance and never 500s a public page.
+ */
+export declare class ProductCardButtonsResolver {
+    private readonly settingsService;
+    constructor(settingsService: SettingsReadPort);
+    /**
+     * Feature 075 / D-87 — the resolved request channel's id, passed in by the
+     * route. It used to be the channel *code*, looked back up here with a raw
+     * `select id from sales_channels`: a re-resolution of a channel the resolver
+     * middleware had already resolved (feature 053, FR-011), across a boundary
+     * no import specifier named.
+     */
+    resolve(salesChannelId: string): Promise<ProductCardButtonsConfig>;
+}
+//# sourceMappingURL=product-card-buttons-resolver.d.ts.map

package/dist/backend/services/product-card-buttons-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"product-card-buttons-resolver.d.ts","sourceRoot":"","sources":["../../../src/backend/services/product-card-buttons-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAQzE,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,OAAO,CAAC;IACvB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,cAAc,EAAE,OAAO,CAAC;CACzB;AAED;;;;;GAKG;AACH,qBAAa,0BAA0B;IACzB,OAAO,CAAC,QAAQ,CAAC,eAAe;gBAAf,eAAe,EAAE,gBAAgB;IAE9D;;;;;;OAMG;IACG,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAezE"}

package/dist/backend/services/product-card-buttons-resolver.js

@@ -0,0 +1,37 @@
+const ADD_TO_CART_CODE = 'storefront.product_card.show_add_to_cart';
+const ADD_TO_SHOPPING_LIST_CODE = 'storefront.product_card.show_add_to_shopping_list';
+// Owned by the quote_requests module's manifest; read here by code so the
+// three product-card button toggles resolve through one endpoint.
+const ADD_TO_QUOTE_CODE = 'quote_requests.show_add_to_quote_on_card';
+/**
+ * Resolves the storefront product-card button visibility toggles for a sales
+ * channel. Each flag defaults to `true` (button shown) when its setting is
+ * unset / not-registered / out-of-scope, so a settings hiccup never hides a
+ * storefront affordance and never 500s a public page.
+ */
+export class ProductCardButtonsResolver {
+    settingsService;
+    constructor(settingsService) {
+        this.settingsService = settingsService;
+    }
+    /**
+     * Feature 075 / D-87 — the resolved request channel's id, passed in by the
+     * route. It used to be the channel *code*, looked back up here with a raw
+     * `select id from sales_channels`: a re-resolution of a channel the resolver
+     * middleware had already resolved (feature 053, FR-011), across a boundary
+     * no import specifier named.
+     */
+    async resolve(salesChannelId) {
+        const resolved = await this.settingsService.getMany([ADD_TO_CART_CODE, ADD_TO_SHOPPING_LIST_CODE, ADD_TO_QUOTE_CODE], salesChannelId);
+        const flag = (code) => {
+            const r = resolved.get(code);
+            return r && r.ok && typeof r.value === 'boolean' ? r.value : true;
+        };
+        return {
+            showAddToCart: flag(ADD_TO_CART_CODE),
+            showAddToShoppingList: flag(ADD_TO_SHOPPING_LIST_CODE),
+            showAddToQuote: flag(ADD_TO_QUOTE_CODE),
+        };
+    }
+}
+//# sourceMappingURL=product-card-buttons-resolver.js.map

package/dist/backend/services/product-card-buttons-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"product-card-buttons-resolver.js","sourceRoot":"","sources":["../../../src/backend/services/product-card-buttons-resolver.ts"],"names":[],"mappings":"AAEA,MAAM,gBAAgB,GAAG,0CAA0C,CAAC;AACpE,MAAM,yBAAyB,GAAG,mDAAmD,CAAC;AACtF,0EAA0E;AAC1E,kEAAkE;AAClE,MAAM,iBAAiB,GAAG,0CAA0C,CAAC;AAQrE;;;;;GAKG;AACH,MAAM,OAAO,0BAA0B;IACR;IAA7B,YAA6B,eAAiC;QAAjC,oBAAe,GAAf,eAAe,CAAkB;IAAG,CAAC;IAElE;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,cAAsB;QAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CACjD,CAAC,gBAAgB,EAAE,yBAAyB,EAAE,iBAAiB,CAAC,EAChE,cAAc,CACf,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAW,EAAE;YACrC,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE,CAAC,CAAC;QACF,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC;YACrC,qBAAqB,EAAE,IAAI,CAAC,yBAAyB,CAAC;YACtD,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC;SACxC,CAAC;IACJ,CAAC;CACF"}

package/dist/backend/services/registered-settings-manifests.d.ts

@@ -0,0 +1,45 @@
+import type { ModuleSettingsManifest, SettingsManifestCollectionPort, SettingsManifestSource } from '@endora-commerce/contracts';
+/**
+ * Every settings manifest the boot-time {@link ManifestReconciler} must walk,
+ * derived from the module registry rather than hand-listed.
+ *
+ * This used to be a literal array in `composition.ts`, and a module could
+ * declare `settings: defineModuleSettingsManifest(...)` in its manifest yet be
+ * forgotten there. When that happened the module's `setting_groups` /
+ * `settings` rows were never created, so `/settings` silently omitted the whole
+ * group and `GET /api/v1/admin/settings/<code>` answered 404
+ * `SETTING_NOT_REGISTERED`. Eight modules had drifted that way — `ksef`, `mfa`,
+ * `carts`, `customers`, `orders`, `organizations`, `quick_order`, `returns` —
+ * and nothing caught it, not least because the test harness kept its own
+ * (differently stale) copy of the list.
+ *
+ * Deriving from the registry makes registration the single act that wires a
+ * module in, matching how permissions, i18n bundles, and command-palette
+ * actions already work.
+ *
+ * **The registry arrives as an argument (feature 075, Phase C).** It used to be
+ * imported from `_lifecycle`, which made `settings` name another module's file
+ * for a fact it does not own: which modules a deployment ships — core plus that
+ * deployment's overlay modules — is a composition-root input by nature, and it
+ * is why `resolvedModuleRegistry` is a platform-owned container name rather
+ * than a port. Both roots call this function and both already hold the
+ * registry, so the caller passes what it already has. Nothing is gated here on
+ * purpose: a module that is switched off keeps its settings rows and keeps its
+ * group on `/settings`, because a deactivation is not an uninstall
+ * (Constitution XVII) and the operator has to be able to switch it back on.
+ */
+export declare function collectRegisteredSettingsManifests(registry: ReadonlyArray<SettingsManifestSource>): ModuleSettingsManifest[];
+/**
+ * The published face of the derivation above — feature 080 (T040b).
+ *
+ * Both composition roots called the function by importing this file, which is
+ * a root value import of a module's source and stops having a spelling the day
+ * `settings` becomes a package (D-160.6.1). The rule is unchanged and stays
+ * here, where the settings module's own manifest is: the roots keep supplying
+ * the registry, because which modules a deployment ships is theirs to say, and
+ * resolve the assembly from the container they already composed.
+ */
+export declare class SettingsManifestCollectionService implements SettingsManifestCollectionPort {
+    collect(registry: ReadonlyArray<SettingsManifestSource>): ModuleSettingsManifest[];
+}
+//# sourceMappingURL=registered-settings-manifests.d.ts.map

package/dist/backend/services/registered-settings-manifests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registered-settings-manifests.d.ts","sourceRoot":"","sources":["../../../src/backend/services/registered-settings-manifests.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,sBAAsB,EACtB,8BAA8B,EAC9B,sBAAsB,EACvB,MAAM,4BAA4B,CAAC;AAGpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,aAAa,CAAC,sBAAsB,CAAC,GAC9C,sBAAsB,EAAE,CAU1B;AAED;;;;;;;;;GASG;AACH,qBAAa,iCAAkC,YAAW,8BAA8B;IACtF,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,sBAAsB,CAAC,GAAG,sBAAsB,EAAE;CAGnF"}

package/dist/backend/services/registered-settings-manifests.js

@@ -0,0 +1,55 @@
+import { settingsManifestWithRecentActivity } from '@endora-commerce/contracts';
+import { settingsManifest as settingsModuleManifest } from '../../manifest.js';
+/**
+ * Every settings manifest the boot-time {@link ManifestReconciler} must walk,
+ * derived from the module registry rather than hand-listed.
+ *
+ * This used to be a literal array in `composition.ts`, and a module could
+ * declare `settings: defineModuleSettingsManifest(...)` in its manifest yet be
+ * forgotten there. When that happened the module's `setting_groups` /
+ * `settings` rows were never created, so `/settings` silently omitted the whole
+ * group and `GET /api/v1/admin/settings/<code>` answered 404
+ * `SETTING_NOT_REGISTERED`. Eight modules had drifted that way — `ksef`, `mfa`,
+ * `carts`, `customers`, `orders`, `organizations`, `quick_order`, `returns` —
+ * and nothing caught it, not least because the test harness kept its own
+ * (differently stale) copy of the list.
+ *
+ * Deriving from the registry makes registration the single act that wires a
+ * module in, matching how permissions, i18n bundles, and command-palette
+ * actions already work.
+ *
+ * **The registry arrives as an argument (feature 075, Phase C).** It used to be
+ * imported from `_lifecycle`, which made `settings` name another module's file
+ * for a fact it does not own: which modules a deployment ships — core plus that
+ * deployment's overlay modules — is a composition-root input by nature, and it
+ * is why `resolvedModuleRegistry` is a platform-owned container name rather
+ * than a port. Both roots call this function and both already hold the
+ * registry, so the caller passes what it already has. Nothing is gated here on
+ * purpose: a module that is switched off keeps its settings rows and keeps its
+ * group on `/settings`, because a deactivation is not an uninstall
+ * (Constitution XVII) and the operator has to be able to switch it back on.
+ */
+export function collectRegisteredSettingsManifests(registry) {
+    // The settings module goes first: every other manifest's settings fall back
+    // to its `general` group, which must exist before they are inserted.
+    const rest = registry
+        .map((entry) => settingsManifestWithRecentActivity(entry.manifest, entry.recentActivity))
+        .filter((manifest) => manifest !== undefined && manifest.moduleCode !== settingsModuleManifest.moduleCode);
+    return [settingsModuleManifest, ...rest];
+}
+/**
+ * The published face of the derivation above — feature 080 (T040b).
+ *
+ * Both composition roots called the function by importing this file, which is
+ * a root value import of a module's source and stops having a spelling the day
+ * `settings` becomes a package (D-160.6.1). The rule is unchanged and stays
+ * here, where the settings module's own manifest is: the roots keep supplying
+ * the registry, because which modules a deployment ships is theirs to say, and
+ * resolve the assembly from the container they already composed.
+ */
+export class SettingsManifestCollectionService {
+    collect(registry) {
+        return collectRegisteredSettingsManifests(registry);
+    }
+}
+//# sourceMappingURL=registered-settings-manifests.js.map

package/dist/backend/services/registered-settings-manifests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registered-settings-manifests.js","sourceRoot":"","sources":["../../../src/backend/services/registered-settings-manifests.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kCAAkC,EAAE,MAAM,4BAA4B,CAAC;AAMhF,OAAO,EAAE,gBAAgB,IAAI,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,kCAAkC,CAChD,QAA+C;IAE/C,4EAA4E;IAC5E,qEAAqE;IACrE,MAAM,IAAI,GAAG,QAAQ;SAClB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kCAAkC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;SACxF,MAAM,CACL,CAAC,QAAQ,EAAsC,EAAE,CAC/C,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,UAAU,KAAK,sBAAsB,CAAC,UAAU,CACtF,CAAC;IACJ,OAAO,CAAC,sBAAsB,EAAE,GAAG,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,iCAAiC;IAC5C,OAAO,CAAC,QAA+C;QACrD,OAAO,kCAAkC,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;CACF"}

package/dist/backend/services/setting-write-validators.d.ts

@@ -0,0 +1,43 @@
+import type { SettingWriteValidator, SettingWriteValidatorRegistryPort } from '@endora-commerce/contracts';
+import type { ModulePresencePort } from './settings-admin.service.js';
+/**
+ * Where a module says whether the value another module is about to store is
+ * legal — feature 078, D-95.2.
+ *
+ * The division of labour is the whole point of the seam:
+ *
+ * > `settings` answers "what would every channel's value be after this write".
+ * > The module that declared the setting answers "is that legal".
+ *
+ * `settings` owns three-tier resolution and keeps owning it; it never learns
+ * what an invoice number is. `invoices` never re-derives the resolution.
+ *
+ * **Absent-contributor policy: `skip`.** A validator whose contributing module
+ * is not effectively present is not enumerated, so its refusal does not answer
+ * for a module an operator switched off.
+ *
+ * That filter is redundant today, and it is written anyway. `assertWritable`
+ * already refuses every write to a switched-off module's settings before
+ * validation runs — but that refusal has one exception, a module's own
+ * activation control, and a second exception added later must not silently let
+ * an absent module's validator answer for a code.
+ */
+export declare class SettingWriteValidatorRegistry implements SettingWriteValidatorRegistryPort {
+    /**
+     * Absent in a composition with no lifecycle (unit tests): every contributor
+     * then counts as present, which is the pre-073 behaviour rather than a
+     * fall-open — there is no activation axis to resolve at all.
+     */
+    private readonly presence?;
+    private readonly validators;
+    constructor(
+    /**
+     * Absent in a composition with no lifecycle (unit tests): every contributor
+     * then counts as present, which is the pre-073 behaviour rather than a
+     * fall-open — there is no activation axis to resolve at all.
+     */
+    presence?: ModulePresencePort | undefined);
+    register(validator: SettingWriteValidator): void;
+    forCode(code: string): readonly SettingWriteValidator[];
+}
+//# sourceMappingURL=setting-write-validators.d.ts.map

package/dist/backend/services/setting-write-validators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setting-write-validators.d.ts","sourceRoot":"","sources":["../../../src/backend/services/setting-write-validators.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,qBAAqB,EACrB,iCAAiC,EAClC,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,6BAA8B,YAAW,iCAAiC;IAInF;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAR5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;;IAGxD;;;;OAIG;IACc,QAAQ,CAAC,EAAE,kBAAkB,YAAA;IAGhD,QAAQ,CAAC,SAAS,EAAE,qBAAqB,GAAG,IAAI;IAIhD,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,qBAAqB,EAAE;CAOxD"}

package/dist/backend/services/setting-write-validators.js

@@ -0,0 +1,43 @@
+/**
+ * Where a module says whether the value another module is about to store is
+ * legal — feature 078, D-95.2.
+ *
+ * The division of labour is the whole point of the seam:
+ *
+ * > `settings` answers "what would every channel's value be after this write".
+ * > The module that declared the setting answers "is that legal".
+ *
+ * `settings` owns three-tier resolution and keeps owning it; it never learns
+ * what an invoice number is. `invoices` never re-derives the resolution.
+ *
+ * **Absent-contributor policy: `skip`.** A validator whose contributing module
+ * is not effectively present is not enumerated, so its refusal does not answer
+ * for a module an operator switched off.
+ *
+ * That filter is redundant today, and it is written anyway. `assertWritable`
+ * already refuses every write to a switched-off module's settings before
+ * validation runs — but that refusal has one exception, a module's own
+ * activation control, and a second exception added later must not silently let
+ * an absent module's validator answer for a code.
+ */
+export class SettingWriteValidatorRegistry {
+    presence;
+    validators = [];
+    constructor(
+    /**
+     * Absent in a composition with no lifecycle (unit tests): every contributor
+     * then counts as present, which is the pre-073 behaviour rather than a
+     * fall-open — there is no activation axis to resolve at all.
+     */
+    presence) {
+        this.presence = presence;
+    }
+    register(validator) {
+        this.validators.push(validator);
+    }
+    forCode(code) {
+        return this.validators.filter((validator) => validator.codes.includes(code) &&
+            (this.presence?.presenceOf(validator.contributorModuleId) ?? true));
+    }
+}
+//# sourceMappingURL=setting-write-validators.js.map

package/dist/backend/services/setting-write-validators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setting-write-validators.js","sourceRoot":"","sources":["../../../src/backend/services/setting-write-validators.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,6BAA6B;IASrB;IARF,UAAU,GAA4B,EAAE,CAAC;IAE1D;IACE;;;;OAIG;IACc,QAA6B;QAA7B,aAAQ,GAAR,QAAQ,CAAqB;IAC7C,CAAC;IAEJ,QAAQ,CAAC,SAAgC;QACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAC3B,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC9B,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,SAAS,CAAC,mBAAmB,CAAC,IAAI,IAAI,CAAC,CACrE,CAAC;IACJ,CAAC;CACF"}