@endora-commerce/platform 0.100.0

package/dist/http/interceptors/types.d.ts

@@ -0,0 +1,101 @@
+import type { FastifyBaseLogger, FastifyRequest } from 'fastify';
+/**
+ * API Interceptor mechanism (feature 060).
+ *
+ * Modules register pre/post interceptors against HTTP endpoints owned by
+ * other modules, identified by the stable `"<METHOD> <route pattern>"`
+ * endpoint identity (the same key the OpenAPI auto-registration dedupes on).
+ *
+ * Contract: specs/060-api-interceptor/contracts/interceptor-registry.md
+ * Docs:     docs/docs/architecture/api-interceptor.md
+ */
+export type InterceptorPhase = 'pre' | 'post';
+/** Read-only view of the intercepted request, shared by both phases. */
+export interface InterceptorRequestInfo {
+    /** Concrete HTTP method of this request (uppercase). */
+    readonly method: string;
+    /** Concrete request URL (with real params, query string included). */
+    readonly url: string;
+    /** The endpoint identity that matched, e.g. `POST /api/v1/orders`. */
+    readonly identity: string;
+    readonly headers: FastifyRequest['headers'];
+    /** Child logger pre-bound with `{interceptorModule, interceptorId, phase}` attribution. */
+    readonly log: FastifyBaseLogger;
+    /**
+     * The underlying Fastify request — exposes `request.actor` and whatever else
+     * the composition decorates it with. The resolved sales channel is NOT among
+     * them since feature 072: it lives on the request scope, read through
+     * `getResolvedChannel()`.
+     * Treat as read-only: interceptors adjust request data ONLY through the
+     * pre-phase `body` mechanism, never by mutating the raw request.
+     */
+    readonly raw: FastifyRequest;
+}
+export interface PreInterceptorContext {
+    readonly request: InterceptorRequestInfo;
+    /** The VALIDATED request body (post-Zod). Mutate it or return a replacement. */
+    body: unknown;
+    readonly query: unknown;
+    readonly params: unknown;
+}
+export interface PostInterceptorContext {
+    readonly request: InterceptorRequestInfo;
+    /** Always < 400 — post interceptors never run on error responses. */
+    readonly statusCode: number;
+    /** The un-serialized response payload produced by the endpoint (or a previous interceptor). */
+    readonly payload: unknown;
+}
+/**
+ * Pre-phase handler. Runs after the route's own preHandler guards
+ * (auth/authz) and after schema validation, immediately before the handler.
+ * Veto by throwing `HttpError` with a registered `ErrorCode`; any other
+ * throw is a failure and yields 500 INTERNAL (fail-closed).
+ */
+export type PreInterceptorHandler = (ctx: PreInterceptorContext) => void | {
+    body?: unknown;
+} | Promise<void | {
+    body?: unknown;
+}>;
+/**
+ * Post-phase handler. Runs at preSerialization for successful responses.
+ * Return the replacement payload, or `undefined` to leave it unchanged.
+ * MUST be side-effect-free with respect to persistence — the endpoint's
+ * own write may already be committed when a post interceptor runs.
+ */
+export type PostInterceptorHandler = (ctx: PostInterceptorContext) => unknown | Promise<unknown>;
+interface InterceptorRegistrationBase {
+    /** Owning module id — execution is lifecycle-gated on this module's enabled state. */
+    module: string;
+    /** Unique within the module (kebab-case by convention). */
+    id: string;
+    /** One or more endpoint identities, `"<METHOD> <route pattern>"`. */
+    target: string | string[];
+    /** Ascending execution order; default 0. Ties break on (module, id) lexicographic. */
+    order?: number;
+}
+export type InterceptorRegistration = (InterceptorRegistrationBase & {
+    phase: 'pre';
+    handler: PreInterceptorHandler;
+}) | (InterceptorRegistrationBase & {
+    phase: 'post';
+    handler: PostInterceptorHandler;
+});
+/** A registration normalized by the registry (targets resolved, order defaulted). */
+export interface ResolvedRegistration {
+    readonly module: string;
+    readonly id: string;
+    readonly phase: InterceptorPhase;
+    readonly order: number;
+    readonly targets: readonly string[];
+    readonly handler: PreInterceptorHandler | PostInterceptorHandler;
+}
+/** One row of the execution plan exposed by `ApiInterceptorRegistry.list()`. */
+export interface InterceptorListItem {
+    readonly target: string;
+    readonly phase: InterceptorPhase;
+    readonly order: number;
+    readonly module: string;
+    readonly id: string;
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/http/interceptors/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/http/interceptors/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEjE;;;;;;;;;GASG;AAEH,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,MAAM,CAAC;AAE9C,wEAAwE;AACxE,MAAM,WAAW,sBAAsB;IACrC,wDAAwD;IACxD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,sEAAsE;IACtE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IAC5C,2FAA2F;IAC3F,QAAQ,CAAC,GAAG,EAAE,iBAAiB,CAAC;IAChC;;;;;;;OAOG;IACH,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,gFAAgF;IAChF,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,qEAAqE;IACrE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+FAA+F;IAC/F,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAClC,GAAG,EAAE,qBAAqB,KACvB,IAAI,GAAG;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,GAAG;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AAEpE;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE,sBAAsB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEjG,UAAU,2BAA2B;IACnC,sFAAsF;IACtF,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,EAAE,EAAE,MAAM,CAAC;IACX,qEAAqE;IACrE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC1B,sFAAsF;IACtF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,uBAAuB,GAC/B,CAAC,2BAA2B,GAAG;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,qBAAqB,CAAA;CAAE,CAAC,GAChF,CAAC,2BAA2B,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,sBAAsB,CAAA;CAAE,CAAC,CAAC;AAEvF,qFAAqF;AACrF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,GAAG,sBAAsB,CAAC;CAClE;AAED,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB"}

package/dist/http/interceptors/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/http/interceptors/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/http/interceptors/types.ts"],"names":[],"mappings":""}

package/dist/http/interceptors/validation.d.ts

@@ -0,0 +1,22 @@
+import type { ApiInterceptorRegistry } from './registry.js';
+import type { RouteTable } from './route-table.js';
+/**
+ * Boot-time validation of interceptor targets (feature 060, FR-010/SC-007).
+ * Runs in `buildServer`'s onReady hook, after every module has registered its
+ * routes and before any traffic is served. Fail-closed: a typo'd target
+ * refuses startup instead of silently never firing (Constitution XV).
+ *
+ * This used to cite the overlay pattern's `UnknownOverrideTargetError` as the
+ * precedent. That refusal is retired with the file-shadowing mechanism it
+ * guarded (D-201, feature 103) — and it was the wrong precedent by then
+ * anyway: it had been unreachable since the core module index emptied, so what
+ * it cited was a promise nothing kept. The stance is right on its own terms; a
+ * mechanism that cannot fire is not a mechanism a second one should model
+ * itself on.
+ *
+ * A target owned by a currently-disabled module is NOT an error: the route is
+ * still mounted (it 503s via defineModuleRoutes gating) and the interceptor
+ * is simply inert until the module is enabled.
+ */
+export declare function validateRegistrations(registry: ApiInterceptorRegistry, routeTable: RouteTable): void;
+//# sourceMappingURL=validation.d.ts.map

package/dist/http/interceptors/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../src/http/interceptors/validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,sBAAsB,EAChC,UAAU,EAAE,UAAU,GACrB,IAAI,CAyBN"}

package/dist/http/interceptors/validation.js

@@ -0,0 +1,39 @@
+/**
+ * Boot-time validation of interceptor targets (feature 060, FR-010/SC-007).
+ * Runs in `buildServer`'s onReady hook, after every module has registered its
+ * routes and before any traffic is served. Fail-closed: a typo'd target
+ * refuses startup instead of silently never firing (Constitution XV).
+ *
+ * This used to cite the overlay pattern's `UnknownOverrideTargetError` as the
+ * precedent. That refusal is retired with the file-shadowing mechanism it
+ * guarded (D-201, feature 103) — and it was the wrong precedent by then
+ * anyway: it had been unreachable since the core module index emptied, so what
+ * it cited was a promise nothing kept. The stance is right on its own terms; a
+ * mechanism that cannot fire is not a mechanism a second one should model
+ * itself on.
+ *
+ * A target owned by a currently-disabled module is NOT an error: the route is
+ * still mounted (it 503s via defineModuleRoutes gating) and the interceptor
+ * is simply inert until the module is enabled.
+ */
+export function validateRegistrations(registry, routeTable) {
+    const problems = [];
+    for (const reg of registry.registrations()) {
+        for (const target of reg.targets) {
+            const route = routeTable.get(target);
+            if (!route) {
+                problems.push(`module '${reg.module}' interceptor '${reg.id}' targets unknown endpoint '${target}' — ` +
+                    `no such route is mounted in this deployment.`);
+                continue;
+            }
+            if (reg.phase === 'post' && route.streamingResponse) {
+                problems.push(`module '${reg.module}' interceptor '${reg.id}' declares phase 'post' on streaming endpoint ` +
+                    `'${target}' — streaming/binary payloads bypass serialization and cannot be reshaped.`);
+            }
+        }
+    }
+    if (problems.length > 0) {
+        throw new Error(`[api-interceptor] boot validation failed:\n  - ${problems.join('\n  - ')}`);
+    }
+}
+//# sourceMappingURL=validation.js.map

package/dist/http/interceptors/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../src/http/interceptors/validation.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAgC,EAChC,UAAsB;IAEtB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC;QAC3C,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,QAAQ,CAAC,IAAI,CACX,WAAW,GAAG,CAAC,MAAM,kBAAkB,GAAG,CAAC,EAAE,+BAA+B,MAAM,MAAM;oBACtF,8CAA8C,CACjD,CAAC;gBACF,SAAS;YACX,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBACpD,QAAQ,CAAC,IAAI,CACX,WAAW,GAAG,CAAC,MAAM,kBAAkB,GAAG,CAAC,EAAE,gDAAgD;oBAC3F,IAAI,MAAM,4EAA4E,CACzF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,kDAAkD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/http/logger.d.ts

@@ -0,0 +1,9 @@
+import { type Logger as PinoLogger } from 'pino';
+export type Logger = PinoLogger;
+export interface CreateLoggerOptions {
+    level?: string;
+    /** When true (development), pretty-prints the output. */
+    pretty?: boolean;
+}
+export declare function createLogger(options?: CreateLoggerOptions): Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/http/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/http/logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,MAAM,IAAI,UAAU,EAAsB,MAAM,MAAM,CAAC;AAE3E,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC;AAEhC,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,MAAM,CAwBtE"}

package/dist/http/logger.js

@@ -0,0 +1,25 @@
+import { pino } from 'pino';
+export function createLogger(options = {}) {
+    const level = options.level ?? process.env['LOG_LEVEL'] ?? 'info';
+    const pretty = options.pretty ?? process.env['NODE_ENV'] !== 'production';
+    const loggerOptions = {
+        level,
+        base: { pid: process.pid },
+        timestamp: pino.stdTimeFunctions.isoTime,
+        redact: {
+            paths: ['req.headers.authorization', 'req.headers.cookie', '*.password', '*.passwordHash', '*.secret'],
+            censor: '[REDACTED]',
+        },
+    };
+    if (pretty) {
+        return pino({
+            ...loggerOptions,
+            transport: {
+                target: 'pino-pretty',
+                options: { colorize: true, translateTime: 'SYS:HH:MM:ss.l', ignore: 'pid,hostname' },
+            },
+        });
+    }
+    return pino(loggerOptions);
+}
+//# sourceMappingURL=logger.js.map

package/dist/http/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/http/logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAiD,MAAM,MAAM,CAAC;AAU3E,MAAM,UAAU,YAAY,CAAC,UAA+B,EAAE;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,YAAY,CAAC;IAE1E,MAAM,aAAa,GAAkB;QACnC,KAAK;QACL,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAC1B,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO;QACxC,MAAM,EAAE;YACN,KAAK,EAAE,CAAC,2BAA2B,EAAE,oBAAoB,EAAE,YAAY,EAAE,gBAAgB,EAAE,UAAU,CAAC;YACtG,MAAM,EAAE,YAAY;SACrB;KACF,CAAC;IAEF,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;YACV,GAAG,aAAa;YAChB,SAAS,EAAE;gBACT,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,EAAE,cAAc,EAAE;aACrF;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;AAC7B,CAAC"}

package/dist/http/openapi.d.ts

@@ -0,0 +1,21 @@
+import type { FastifyInstance } from 'fastify';
+import { OpenAPIRegistry } from '@asteasolutions/zod-to-openapi';
+/**
+ * Shared OpenAPI registry. Modules call `openApiRegistry.register(...)` during bootstrap
+ * so the live OpenAPI document served at /api/v1/_openapi.json is always generated from
+ * the same Zod schemas the Fastify routes validate against (R-05, Principle V).
+ */
+export declare const openApiRegistry: OpenAPIRegistry;
+/**
+ * Registers an `onRoute` hook so every Fastify route auto-publishes into the OpenAPI
+ * registry. Avoids per-module registerPath boilerplate while still letting a module opt
+ * into a richer schema by calling `openApiRegistry.registerPath` directly.
+ */
+export declare function attachOpenApiAutoRegistration(app: FastifyInstance): void;
+export interface OpenApiMetadata {
+    title: string;
+    version: string;
+    serverUrl: string;
+}
+export declare function registerOpenApiRoutes(app: FastifyInstance, meta: OpenApiMetadata): void;
+//# sourceMappingURL=openapi.d.ts.map

package/dist/http/openapi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openapi.d.ts","sourceRoot":"","sources":["../../src/http/openapi.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAuB,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAGtF;;;;GAIG;AACH,eAAO,MAAM,eAAe,iBAAwB,CAAC;AAiBrD;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CAgCxE;AAMD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAkBD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,GAAG,IAAI,CA0CvF"}

package/dist/http/openapi.js

@@ -0,0 +1,114 @@
+import { OpenApiGeneratorV31, OpenAPIRegistry } from '@asteasolutions/zod-to-openapi';
+/**
+ * Shared OpenAPI registry. Modules call `openApiRegistry.register(...)` during bootstrap
+ * so the live OpenAPI document served at /api/v1/_openapi.json is always generated from
+ * the same Zod schemas the Fastify routes validate against (R-05, Principle V).
+ */
+export const openApiRegistry = new OpenAPIRegistry();
+const HTTP_METHODS = new Set([
+    'get',
+    'post',
+    'put',
+    'delete',
+    'patch',
+    'head',
+    'options',
+    'trace',
+]);
+const seenRoutes = new Set();
+/**
+ * Registers an `onRoute` hook so every Fastify route auto-publishes into the OpenAPI
+ * registry. Avoids per-module registerPath boilerplate while still letting a module opt
+ * into a richer schema by calling `openApiRegistry.registerPath` directly.
+ */
+export function attachOpenApiAutoRegistration(app) {
+    app.addHook('onRoute', (route) => {
+        const rawMethod = route.method;
+        const methods = Array.isArray(rawMethod) ? rawMethod : [rawMethod];
+        const path = toOpenApiPath(route.url);
+        if (path === '/api/v1/_openapi.json' || path === '/api/v1/_docs')
+            return;
+        for (const m of methods) {
+            const method = m.toLowerCase();
+            if (!HTTP_METHODS.has(method))
+                continue;
+            // Fastify auto-registers HEAD for every GET; skip the duplicate.
+            if (method === 'head')
+                continue;
+            const key = `${method} ${path}`;
+            if (seenRoutes.has(key))
+                continue;
+            seenRoutes.add(key);
+            try {
+                openApiRegistry.registerPath({
+                    method: method,
+                    path,
+                    responses: {
+                        '200': { description: 'OK' },
+                    },
+                });
+            }
+            catch {
+                // Swallow — auto-registration is best-effort; a route that can't be expressed
+                // here should opt into manual registration via openApiRegistry.registerPath.
+            }
+        }
+    });
+}
+function toOpenApiPath(url) {
+    return url.replace(/:([A-Za-z0-9_]+)/g, '{$1}');
+}
+function buildDocument(meta) {
+    const generator = new OpenApiGeneratorV31(openApiRegistry.definitions);
+    const doc = generator.generateDocument({
+        openapi: '3.1.0',
+        info: {
+            title: meta.title,
+            version: meta.version,
+            description: 'B2B Platform API. Generated at runtime from the Zod schemas in @endora-commerce/contracts. ' +
+                'Source of truth: specs/001-b2b-platform-foundation/contracts/.',
+        },
+        servers: [{ url: meta.serverUrl }],
+    });
+    return doc;
+}
+export function registerOpenApiRoutes(app, meta) {
+    // Build the document lazily on first request — by then every module has registered
+    // its routes via the onRoute hook installed in attachOpenApiAutoRegistration().
+    let cached;
+    const getDoc = () => {
+        if (!cached) {
+            cached = buildDocument(meta);
+        }
+        return cached;
+    };
+    app.get('/api/v1/_openapi.json', async (_req, reply) => {
+        // Return the payload rather than calling `reply.send()` and then resolving
+        // the async handler with `undefined` — Fastify 5 treats the latter as a
+        // second send and raises ERR_HTTP_HEADERS_SENT.
+        reply.header('Content-Type', 'application/json');
+        return getDoc();
+    });
+    app.get('/api/v1/_docs', async (_req, reply) => {
+        // Minimal HTML shell rendering the spec via Swagger UI hosted on a CDN.
+        // Intentionally not adding a swagger-ui dependency (Principle IV) since this is dev-only.
+        reply
+            .header('Content-Type', 'text/html; charset=utf-8')
+            .send(`<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8"/>
+  <title>B2B Platform API</title>
+  <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/swagger-ui-dist/swagger-ui.css"/>
+</head>
+<body>
+  <div id="swagger-ui"></div>
+  <script src="https://cdn.jsdelivr.net/npm/swagger-ui-dist/swagger-ui-bundle.js"></script>
+  <script>
+    window.onload = () => SwaggerUIBundle({ url: '/api/v1/_openapi.json', dom_id: '#swagger-ui' });
+  </script>
+</body>
+</html>`);
+    });
+}
+//# sourceMappingURL=openapi.js.map

package/dist/http/openapi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openapi.js","sourceRoot":"","sources":["../../src/http/openapi.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAGtF;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;AAErD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,KAAK;IACL,MAAM;IACN,KAAK;IACL,QAAQ;IACR,OAAO;IACP,MAAM;IACN,SAAS;IACT,OAAO;CACC,CAAC,CAAC;AAIZ,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;AAErC;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,GAAoB;IAChE,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;QAC/B,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC;QAC/B,MAAM,OAAO,GAAa,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEtC,IAAI,IAAI,KAAK,uBAAuB,IAAI,IAAI,KAAK,eAAe;YAAE,OAAO;QAEzE,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAoB,CAAC;gBAAE,SAAS;YACtD,iEAAiE;YACjE,IAAI,MAAM,KAAK,MAAM;gBAAE,SAAS;YAEhC,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;YAChC,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAEpB,IAAI,CAAC;gBACH,eAAe,CAAC,YAAY,CAAC;oBAC3B,MAAM,EAAE,MAAoB;oBAC5B,IAAI;oBACJ,SAAS,EAAE;wBACT,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;qBAC7B;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,8EAA8E;gBAC9E,6EAA6E;YAC/E,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAQD,SAAS,aAAa,CAAC,IAAqB;IAC1C,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,SAAS,CAAC,gBAAgB,CAAC;QACrC,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EACT,6FAA6F;gBAC7F,gEAAgE;SACnE;QACD,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;KACnC,CAAC,CAAC;IACH,OAAO,GAAsC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAoB,EAAE,IAAqB;IAC/E,mFAAmF;IACnF,gFAAgF;IAChF,IAAI,MAAwC,CAAC;IAC7C,MAAM,MAAM,GAAG,GAAyB,EAAE;QACxC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACrD,2EAA2E;QAC3E,wEAAwE;QACxE,gDAAgD;QAChD,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QACjD,OAAO,MAAM,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QAC7C,wEAAwE;QACxE,0FAA0F;QAC1F,KAAK;aACF,MAAM,CAAC,cAAc,EAAE,0BAA0B,CAAC;aAClD,IAAI,CACH;;;;;;;;;;;;;;QAcA,CACD,CAAC;IACN,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/http/product-audience.d.ts

@@ -0,0 +1,78 @@
+import type { FastifyReply, FastifyRequest } from 'fastify';
+import { type ProductAudience } from '@endora-commerce/contracts';
+/**
+ * The {@link ProductAudience} of a request, off the actor the auth plugin
+ * resolved (issue #227).
+ *
+ * It lives beside {@link testAdminUserId} rather than in `catalog`, for the
+ * reason that helper does: it reads a `FastifyRequest` decoration and nothing
+ * else, and six modules serve a product to a buyer. A copy per module is six
+ * chances to answer "is an unbound API key authenticated?" differently, and the
+ * answer is not obvious enough to be re-derived six times.
+ *
+ * Three actor kinds can reach a catalogue read, and each answers differently:
+ *
+ *  - **`customer`** — a signed-in buyer. `organizationId` is stamped on the
+ *    actor by the auth plugin and is `null` for the guest-style accounts
+ *    feature 026 allows, which is exactly the caller `logged_in_only` exists
+ *    to distinguish from the public.
+ *  - **`api_key`** — an integration. A *bound* distributor key carries the
+ *    organisation it acts for and gets that organisation's answer; an unbound
+ *    key carries none. Both are authenticated: an unbound key is a caller the
+ *    platform has identified, so it sees `logged_in_only` rows and no
+ *    allow-listed ones. That is the same answer the buyer whose session has no
+ *    Organization gets, and it is deliberate — a key that should see a
+ *    distributor's restricted assortment is a key that should be bound to that
+ *    distributor.
+ *  - **`admin`** and **`anonymous`** — the public answer. An admin reading the
+ *    *storefront* API is shopping, not administering; the surfaces whose job is
+ *    to show every product are the `/api/v1/admin/*` ones, and they are gated
+ *    by `requireAdmin` rather than by this.
+ *
+ * A request with no actor at all — a composition that mounted these routes
+ * without the auth plugin — reads as anonymous, which is the fail-closed end.
+ *
+ * The actor used to be read through a **local** inline shape rather than off the
+ * `fastify` module augmentation, because that augmentation was declared in
+ * `modules/auth/plugin.ts` — so a platform file depending on it depended on a
+ * module (D-52/D-53), and it did not compile at all once these directories were
+ * compiled as `@endora-commerce/platform`, where no module is in the program.
+ * T118b moved the declaration here (`./request-actor.js`) and the shape to
+ * `@endora-commerce/contracts`, so the restatement is gone and this reads the
+ * type every other consumer reads.
+ *
+ * The **widening** stays and is this site's own: `request.actor` is decorated
+ * by `auth`'s `onRequest` hook, and these routes can be mounted by a
+ * composition that never mounted the plugin. `undefined` was already the
+ * answer for such a request and is still the fail-closed one.
+ */
+export declare function productAudienceOf(request: FastifyRequest): ProductAudience;
+/**
+ * Marks a response whose prices were resolved for a specific buying
+ * organisation as private and unstorable.
+ *
+ * The catalogue's public reads are the platform's most cacheable responses:
+ * before this existed, `GET /api/v1/catalog/products` and the product detail
+ * carried **no** `Cache-Control` at all, and their representation was a pure
+ * function of `(channel, currency, locale)`. Making the price depend on the
+ * caller makes the priced part of that response *private*, and a shared cache
+ * holding one would hand one buyer's negotiated figure to the next caller of
+ * the same URL — a worse defect than quoting everybody the channel price.
+ *
+ * So the header is set on **exactly** the responses that changed, and the
+ * anonymous one is left byte-for-byte and header-for-header as it was: it is
+ * still the canonical answer a crawler indexes and the one the storefront's ISR
+ * window caches (Principle VII). `no-store` rather than `private, max-age=0`
+ * because there is no revalidation story here worth the ambiguity — a
+ * personalised price is re-resolved per request, and `price_lists`' own
+ * in-process LRU is what keeps that cheap.
+ *
+ * `Vary` is deliberately not set. The credential here is a cookie, and `Vary:
+ * Cookie` is not a usable cache key (every unrelated cookie changes it); the
+ * leak direction — a personalised representation entering a shared cache — is
+ * closed by `no-store` alone, and the remaining direction, a shared cache
+ * answering a signed-in buyer with the stored *public* price, discloses nothing
+ * and is exactly the behaviour that shipped before this change.
+ */
+export declare function markPersonalisedPricing(reply: FastifyReply, audience: ProductAudience): void;
+//# sourceMappingURL=product-audience.d.ts.map

package/dist/http/product-audience.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"product-audience.d.ts","sourceRoot":"","sources":["../../src/http/product-audience.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,cAAc,GAAG,eAAe,CAU1E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,eAAe,GACxB,IAAI,CAGN"}

package/dist/http/product-audience.js

@@ -0,0 +1,92 @@
+import { ANONYMOUS_PRODUCT_AUDIENCE, } from '@endora-commerce/contracts';
+/**
+ * The {@link ProductAudience} of a request, off the actor the auth plugin
+ * resolved (issue #227).
+ *
+ * It lives beside {@link testAdminUserId} rather than in `catalog`, for the
+ * reason that helper does: it reads a `FastifyRequest` decoration and nothing
+ * else, and six modules serve a product to a buyer. A copy per module is six
+ * chances to answer "is an unbound API key authenticated?" differently, and the
+ * answer is not obvious enough to be re-derived six times.
+ *
+ * Three actor kinds can reach a catalogue read, and each answers differently:
+ *
+ *  - **`customer`** — a signed-in buyer. `organizationId` is stamped on the
+ *    actor by the auth plugin and is `null` for the guest-style accounts
+ *    feature 026 allows, which is exactly the caller `logged_in_only` exists
+ *    to distinguish from the public.
+ *  - **`api_key`** — an integration. A *bound* distributor key carries the
+ *    organisation it acts for and gets that organisation's answer; an unbound
+ *    key carries none. Both are authenticated: an unbound key is a caller the
+ *    platform has identified, so it sees `logged_in_only` rows and no
+ *    allow-listed ones. That is the same answer the buyer whose session has no
+ *    Organization gets, and it is deliberate — a key that should see a
+ *    distributor's restricted assortment is a key that should be bound to that
+ *    distributor.
+ *  - **`admin`** and **`anonymous`** — the public answer. An admin reading the
+ *    *storefront* API is shopping, not administering; the surfaces whose job is
+ *    to show every product are the `/api/v1/admin/*` ones, and they are gated
+ *    by `requireAdmin` rather than by this.
+ *
+ * A request with no actor at all — a composition that mounted these routes
+ * without the auth plugin — reads as anonymous, which is the fail-closed end.
+ *
+ * The actor used to be read through a **local** inline shape rather than off the
+ * `fastify` module augmentation, because that augmentation was declared in
+ * `modules/auth/plugin.ts` — so a platform file depending on it depended on a
+ * module (D-52/D-53), and it did not compile at all once these directories were
+ * compiled as `@endora-commerce/platform`, where no module is in the program.
+ * T118b moved the declaration here (`./request-actor.js`) and the shape to
+ * `@endora-commerce/contracts`, so the restatement is gone and this reads the
+ * type every other consumer reads.
+ *
+ * The **widening** stays and is this site's own: `request.actor` is decorated
+ * by `auth`'s `onRequest` hook, and these routes can be mounted by a
+ * composition that never mounted the plugin. `undefined` was already the
+ * answer for such a request and is still the fail-closed one.
+ */
+export function productAudienceOf(request) {
+    const actor = request.actor;
+    if (!actor)
+        return ANONYMOUS_PRODUCT_AUDIENCE;
+    if (actor.kind === 'customer') {
+        return { organizationId: actor.organizationId ?? null, authenticated: true };
+    }
+    if (actor.kind === 'api_key') {
+        return { organizationId: actor.organizationId ?? null, authenticated: true };
+    }
+    return ANONYMOUS_PRODUCT_AUDIENCE;
+}
+/**
+ * Marks a response whose prices were resolved for a specific buying
+ * organisation as private and unstorable.
+ *
+ * The catalogue's public reads are the platform's most cacheable responses:
+ * before this existed, `GET /api/v1/catalog/products` and the product detail
+ * carried **no** `Cache-Control` at all, and their representation was a pure
+ * function of `(channel, currency, locale)`. Making the price depend on the
+ * caller makes the priced part of that response *private*, and a shared cache
+ * holding one would hand one buyer's negotiated figure to the next caller of
+ * the same URL — a worse defect than quoting everybody the channel price.
+ *
+ * So the header is set on **exactly** the responses that changed, and the
+ * anonymous one is left byte-for-byte and header-for-header as it was: it is
+ * still the canonical answer a crawler indexes and the one the storefront's ISR
+ * window caches (Principle VII). `no-store` rather than `private, max-age=0`
+ * because there is no revalidation story here worth the ambiguity — a
+ * personalised price is re-resolved per request, and `price_lists`' own
+ * in-process LRU is what keeps that cheap.
+ *
+ * `Vary` is deliberately not set. The credential here is a cookie, and `Vary:
+ * Cookie` is not a usable cache key (every unrelated cookie changes it); the
+ * leak direction — a personalised representation entering a shared cache — is
+ * closed by `no-store` alone, and the remaining direction, a shared cache
+ * answering a signed-in buyer with the stored *public* price, discloses nothing
+ * and is exactly the behaviour that shipped before this change.
+ */
+export function markPersonalisedPricing(reply, audience) {
+    if (audience.organizationId === null)
+        return;
+    reply.header('cache-control', 'private, no-store');
+}
+//# sourceMappingURL=product-audience.js.map

package/dist/http/product-audience.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"product-audience.js","sourceRoot":"","sources":["../../src/http/product-audience.ts"],"names":[],"mappings":"AACA,OAAO,EACL,0BAA0B,GAG3B,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAuB;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,KAA0B,CAAC;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO,0BAA0B,CAAC;IAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAC/E,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAC/E,CAAC;IACD,OAAO,0BAA0B,CAAC;AACpC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAmB,EACnB,QAAyB;IAEzB,IAAI,QAAQ,CAAC,cAAc,KAAK,IAAI;QAAE,OAAO;IAC7C,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;AACrD,CAAC"}

package/dist/http/request-actor.d.ts

@@ -0,0 +1,82 @@
+import type { Actor, ActorAdmin } from '@endora-commerce/contracts';
+/**
+ * `request.actor` and `request.adminActor`, declared once
+ * (`specs/110-instance-repository/` T118b).
+ *
+ * ## What this file is, and why it is the platform's
+ *
+ * An ambient augmentation reaches a consumer's program only if the file
+ * declaring it is *in* that program. This block used to live in
+ * `packages/modules/auth/src/backend/plugin.ts`, which made "may I read
+ * `request.actor`?" a question about whether the reader could name a **module**
+ * — and the four answers the tree gave were all bad ones:
+ *
+ *  - `backend/src/composition.ts` kept a type-only import of
+ *    `@endora-commerce/mod-auth/backend` whose only job was to drag the
+ *    augmentation into its program. It had been arriving incidentally through a
+ *    *value* import until feature 117 retired that, at which point thirty reads
+ *    of `request.actor` stopped compiling at once.
+ *  - Three platform files restated the shape structurally, because D-52/D-53
+ *    refuses the kernel an import of a module — `request-language.ts`'
+ *    `ActorSlice`, `product-audience.ts`' inline cast and
+ *    `sales-channel-resolver.middleware.ts`' `ApiKeyActorSlice`. Each carried a
+ *    comment naming the prohibition as the reason. They are the same shape
+ *    written three times and checked against nothing.
+ *  - A packaged module wrote a cast of its own, one per module, because `auth`
+ *    publishes nothing a package's own program can name.
+ *
+ * The vocabulary itself is `@endora-commerce/contracts`' {@link Actor}; what is
+ * here is the Fastify half, because that package declares no dependency on
+ * Fastify. It is the same split, and the same reason, as
+ * `RequireCustomerGuard` and `AdminActorPromotion` in the platform's
+ * `kernel/ports/require-admin.ts`.
+ *
+ * ## `auth` still resolves it
+ *
+ * Only the *declaration* moved. `auth` owns the session table, the cookies, the
+ * `onRequest` hook that decides which of the four kinds a request carries, and
+ * the two `decorateRequest` slots these names read from. A composition that
+ * mounts no auth plugin leaves both undecorated — see the note on
+ * {@link FastifyRequest.actor} below, which is the one thing a platform-side
+ * reader has to know that a module-side one did not.
+ *
+ * ## It is carried by the `./http` barrel and exports nothing
+ *
+ * `http/index.ts` imports this file for its side effect. That is what puts the
+ * augmentation in the program of every consumer of `@endora-commerce/platform/http`
+ * without any of them naming it — a module writing
+ * `import '@endora-commerce/platform/http/request-actor.js'` would be a
+ * `whole-file-reach` under `check:platform-surface`, and there is no subpath to
+ * write it with anyway.
+ */
+declare module 'fastify' {
+    interface FastifyRequest {
+        /**
+         * Who is asking, resolved by `auth`'s `onRequest` hook.
+         *
+         * **Typed non-optional and decorated only where `auth` is composed.** The
+         * hook seeds `{ kind: 'anonymous' }` before any branch runs, so within a
+         * composition that mounts the auth plugin this is total and every consumer
+         * may read it as written. Outside one — a composition that mounts a
+         * module's routes without the plugin, or a reply Fastify is serialising
+         * before the hook has run — the decoration is simply absent, and a platform
+         * file that runs in that window says so at its own site rather than by
+         * widening this declaration. `request-language.ts` and
+         * `product-audience.ts` are the two that do; both answer the anonymous
+         * result, which is the fail-closed end.
+         */
+        actor: Actor;
+        /**
+         * The admin session resolved from the dedicated admin cookie, independently
+         * of {@link actor}, so an admin signed in to the Admin UI and a customer
+         * signed in to the storefront can coexist in one browser. `null` when the
+         * request carries no admin cookie.
+         *
+         * `promoteAdminActor` — `auth`'s implementation of the platform's
+         * `AdminActorPromotion` port — is what moves this into {@link actor} for an
+         * admin route whose ambient actor is a customer.
+         */
+        adminActor: ActorAdmin | null;
+    }
+}
+//# sourceMappingURL=request-actor.d.ts.map

package/dist/http/request-actor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-actor.d.ts","sourceRoot":"","sources":["../../src/http/request-actor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,cAAc;QACtB;;;;;;;;;;;;;WAaG;QACH,KAAK,EAAE,KAAK,CAAC;QACb;;;;;;;;;WASG;QACH,UAAU,EAAE,UAAU,GAAG,IAAI,CAAC;KAC/B;CACF"}