@endora-commerce/platform 0.100.0

package/dist/kernel/lifecycle/capability-registry.js

@@ -0,0 +1,170 @@
+/**
+ * Two modules claim to own one capability (R3.4).
+ *
+ * A distinct error type, per D-101's closing rule about the refusals that share a
+ * manifest declaration and share nothing else: this refuses a **deployment that
+ * was assembled wrong**, from the manifests, before the first module registers —
+ * not a transition an operator asked for, and not something to answer with an
+ * HTTP envelope.
+ *
+ * It fails closed rather than picking a claimant, because a contested capability
+ * routes to neither: the refusal code, the lock row and the admin page all belong
+ * to "the owner", and with two of them every one of those three answers is
+ * arbitrary. `check:error-translations` reaches the same verdict about a code with
+ * two declarers, and for the same reason.
+ */
+export class ContestedCapabilityError extends Error {
+    findings;
+    constructor(findings) {
+        super(refusalMessage(findings));
+        this.name = 'ContestedCapabilityError';
+        this.findings = findings;
+    }
+}
+function refusalMessage(findings) {
+    const lines = [
+        'This deployment will not start: a capability is claimed by more than one owner.',
+        '',
+    ];
+    for (const finding of findings) {
+        lines.push(`  ${finding.key} — claimed by ${finding.ownerModuleIds.join(', ')}`, '      Each of them declares it in `exclusiveCapabilities`, so the refusal code, the', '      activation lock and the claim-holder page would all have two owners and the', '      exclusion would route to neither.', '');
+    }
+    lines.push('Exactly one installed module may own a capability. A module that merely *belongs* to the', 'family declares it in `capabilities` instead; ownership is the declaration that the family', 'is mutually exclusive and mints the code an operator meets.');
+    return lines.join('\n');
+}
+/**
+ * A member of an **exclusive** capability declares `activation.default: true`
+ * (R3.6, spec FR-016).
+ *
+ * ## Why this is a refusal and not a runtime tolerance
+ *
+ * `resolveActivation` returns `Map<string, boolean>` and carries **no provenance**:
+ * nothing downstream can tell "the operator wrote this row" from "no row exists and
+ * the manifest said `true`". So a mutual exclusion resolved on the activation axis
+ * cannot ask the question it needs to ask, and a default-activated member holds a
+ * claim nobody made — which is what an operator meets as a refusal naming a
+ * connector they never configured.
+ *
+ * The tempting repair is to add provenance and have the exclusion require an
+ * **explicit** choice. It is unsafe, and `research.md` D6 records why: member `A`
+ * default-activated and member `B` explicitly activated would then **both** be
+ * active, because the test that was supposed to refuse `B` now ignores `A`. A mutual
+ * exclusion may not fail open. Refusing the manifest makes the state unreachable
+ * rather than tolerated, which is the difference between a guard and a repair.
+ *
+ * ## Why it is weaker-looking than the defect it prevents, and is not
+ *
+ * The exclusion is a `pre` interceptor on the activation route, so it guards the
+ * **transition** and not the **existing state**: two default-activated members are
+ * both present from the first boot and no transition ever happens to be refused.
+ * Nothing surfaces it. That is not a hypothetical — it was measured on a freshly
+ * migrated database, three connectors deep, before this refusal existed.
+ *
+ * ## Why not `defineModuleManifest`
+ *
+ * Same reason {@link ContestedCapabilityError} is not there: that function sees one
+ * manifest and cannot see whether the key is **exclusive**, which is the owner's
+ * declaration. Both facts are in hand only here. `check:port-dependencies` carries
+ * the same assertion as an earlier instrument for this repository's own modules
+ * (R3.7); the two layers cover what the other cannot — the check sees a member merged
+ * here before anybody boots, and this sees a connector installed from npm, which no
+ * check in this repository walks.
+ */
+export class DefaultActivatedMemberError extends Error {
+    findings;
+    constructor(findings) {
+        super(defaultActivatedMessage(findings));
+        this.name = 'DefaultActivatedMemberError';
+        this.findings = findings;
+    }
+}
+function defaultActivatedMessage(findings) {
+    const lines = [
+        'This deployment will not start: a module ships activated into a capability that ' +
+            'permits one active member.',
+        '',
+    ];
+    for (const finding of findings) {
+        lines.push(`  ${finding.moduleId} — declares \`capabilities: ['${finding.key}']\` and ` +
+            `\`activation.default: true\``, `      remedy: set \`default: false\` on \`${finding.settingCode}\` in ` +
+            `${finding.moduleId}'s manifest.`, '');
+    }
+    lines.push('An exclusion resolved on the activation axis cannot tell an operator\'s recorded choice', 'from a manifest default — the resolver returns booleans and carries no provenance — so a', 'member that ships activated holds a claim nobody made. Two such members are both active', 'from the first boot, and the exclusion guards the *transition* rather than the existing', 'state, so nothing ever refuses it and nothing reports it.', '', 'Shipping off is not a smaller default: it is the only one an operator can be asked to', 'choose from. A member the deployment wants running is switched on once, on', '/platform/modules, and that choice is recorded and survives every upgrade.');
+    return lines.join('\n');
+}
+/**
+ * Distil the capability registry from a manifest list.
+ *
+ * A module that declares nothing is omitted, and so is one whose `capabilities`
+ * is present but empty: an empty array says nothing a missing field does not, and
+ * carrying it would put a member with no family into every family read.
+ *
+ * **A member of a key that no installed module owns is not an error** (R3.5). The
+ * capability is simply not exclusive in that deployment and the member works.
+ * Refusing would turn a shared layer into an undeclared hard dependency, which is
+ * what `dependencies` is for and which the member already declares if it genuinely
+ * needs it.
+ *
+ * Order is manifest order, deliberately: every message derived from this reads in
+ * the order the deployment composes, which is the order the author is looking at.
+ */
+export function capabilityRegistryFrom(manifests) {
+    const declarations = [];
+    const exclusive = [];
+    const claimants = new Map();
+    for (const manifest of manifests) {
+        const capabilities = manifest.capabilities ?? [];
+        if (capabilities.length > 0) {
+            declarations.push({ moduleId: manifest.id, capabilities: [...capabilities] });
+        }
+        for (const entry of manifest.exclusiveCapabilities ?? []) {
+            exclusive.push({
+                key: entry.key,
+                ownerModuleId: manifest.id,
+                errorCode: entry.errorCode,
+            });
+            const claimed = claimants.get(entry.key) ?? [];
+            claimed.push(manifest.id);
+            claimants.set(entry.key, claimed);
+        }
+    }
+    const contested = [];
+    for (const [key, ownerModuleIds] of claimants) {
+        if (ownerModuleIds.length > 1)
+            contested.push({ key, ownerModuleIds });
+    }
+    // Ordering is deliberate: whether a member's default is illegal depends on the key
+    // being exclusive, and a key with two claimants is exclusive on nobody's authority.
+    // The mis-assembly has to be read first.
+    if (contested.length > 0)
+        throw new ContestedCapabilityError(contested);
+    // R3.6 / FR-016 — reported per (module, key) pair, so the message says which of a
+    // member's keys is the one that cannot tolerate the default. Only an **exclusive**
+    // key counts: a key no installed module owns is not exclusive in this deployment, so
+    // there is no claim for a default to pre-empt (R3.5).
+    const exclusiveKeys = new Set(exclusive.map((entry) => entry.key));
+    const defaultActivated = [];
+    for (const manifest of manifests) {
+        const activation = manifest.activation;
+        // A `nonDeactivatable` module declares no control and is not resolved on this axis
+        // — every family owner in this tree is one. A member with no `activation` at all is
+        // already refused by `defineModuleManifest` (R4.1) and cannot reach here.
+        if (activation === undefined || 'nonDeactivatable' in activation)
+            continue;
+        if (activation.default !== true)
+            continue;
+        for (const key of manifest.capabilities ?? []) {
+            if (!exclusiveKeys.has(key))
+                continue;
+            defaultActivated.push({
+                moduleId: manifest.id,
+                key,
+                settingCode: activation.settingCode,
+            });
+        }
+    }
+    if (defaultActivated.length > 0)
+        throw new DefaultActivatedMemberError(defaultActivated);
+    return { declarations, exclusive };
+}
+//# sourceMappingURL=capability-registry.js.map

package/dist/kernel/lifecycle/capability-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-registry.js","sourceRoot":"","sources":["../../../src/kernel/lifecycle/capability-registry.ts"],"names":[],"mappings":"AAiEA;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,QAAQ,CAAwC;IAEzD,YAAY,QAA+C;QACzD,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED,SAAS,cAAc,CAAC,QAA+C;IACrE,MAAM,KAAK,GAAa;QACtB,iFAAiF;QACjF,EAAE;KACH,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CACR,KAAK,OAAO,CAAC,GAAG,iBAAiB,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EACpE,qFAAqF,EACrF,mFAAmF,EACnF,yCAAyC,EACzC,EAAE,CACH,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CACR,0FAA0F,EAC1F,4FAA4F,EAC5F,6DAA6D,CAC9D,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAUD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAC3C,QAAQ,CAA2C;IAE5D,YAAY,QAAkD;QAC5D,KAAK,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED,SAAS,uBAAuB,CAC9B,QAAkD;IAElD,MAAM,KAAK,GAAa;QACtB,kFAAkF;YAChF,4BAA4B;QAC9B,EAAE;KACH,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CACR,KAAK,OAAO,CAAC,QAAQ,iCAAiC,OAAO,CAAC,GAAG,WAAW;YAC1E,8BAA8B,EAChC,6CAA6C,OAAO,CAAC,WAAW,QAAQ;YACtE,GAAG,OAAO,CAAC,QAAQ,cAAc,EACnC,EAAE,CACH,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CACR,yFAAyF,EACzF,0FAA0F,EAC1F,yFAAyF,EACzF,yFAAyF,EACzF,2DAA2D,EAC3D,EAAE,EACF,uFAAuF,EACvF,4EAA4E,EAC5E,4EAA4E,CAC7E,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAAoC;IAEpC,MAAM,YAAY,GAAkC,EAAE,CAAC;IACvD,MAAM,SAAS,GAAqC,EAAE,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE9C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC;QACjD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,YAAY,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,qBAAqB,IAAI,EAAE,EAAE,CAAC;YACzD,SAAS,CAAC,IAAI,CAAC;gBACb,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,aAAa,EAAE,QAAQ,CAAC,EAAE;gBAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC1B,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAiC,EAAE,CAAC;IACnD,KAAK,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,IAAI,SAAS,EAAE,CAAC;QAC9C,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,mFAAmF;IACnF,oFAAoF;IACpF,yCAAyC;IACzC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAExE,kFAAkF;IAClF,mFAAmF;IACnF,qFAAqF;IACrF,sDAAsD;IACtD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACnE,MAAM,gBAAgB,GAAoC,EAAE,CAAC;IAC7D,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;QACvC,mFAAmF;QACnF,oFAAoF;QACpF,0EAA0E;QAC1E,IAAI,UAAU,KAAK,SAAS,IAAI,kBAAkB,IAAI,UAAU;YAAE,SAAS;QAC3E,IAAI,UAAU,CAAC,OAAO,KAAK,IAAI;YAAE,SAAS;QAC1C,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;YAC9C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACtC,gBAAgB,CAAC,IAAI,CAAC;gBACpB,QAAQ,EAAE,QAAQ,CAAC,EAAE;gBACrB,GAAG;gBACH,WAAW,EAAE,UAAU,CAAC,WAAW;aACpC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,2BAA2B,CAAC,gBAAgB,CAAC,CAAC;IAEzF,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AACrC,CAAC"}

package/dist/kernel/lifecycle/effective-state.d.ts

@@ -0,0 +1,126 @@
+import type { ModulePresence, RegistryState } from '@endora-commerce/contracts';
+import { type ModuleRegistryCache } from './registry-cache.js';
+import type { ExclusiveCapabilityDeclaration } from './capability-registry.js';
+/**
+ * Effective module state — the conjunction of the two presence axes
+ * (Constitution XVII, feature 073, data-model §2.1).
+ *
+ * Platform availability is owned by whoever operates the deployment and lives
+ * in `module_registrations`. Operator activation is owned by the business and
+ * lives in a Setting the module declares. A module is present only when both
+ * are true, and every gating seam resolves *this* value rather than one axis.
+ *
+ * This is deliberately the only place the two are combined: no caller — not
+ * the four wrappers, not the Admin UI, not the storefront — recombines them,
+ * which is what makes "off means absent" one decision instead of several
+ * implementations that can disagree.
+ */
+/** Per-module view of both axes, kept separate because the Admin UI must
+ *  render "not installed here" differently from "we turned it off". */
+export interface ModulePresenceState {
+    readonly moduleId: string;
+    readonly platformAvailable: boolean;
+    readonly platformState: RegistryState | 'not-installed';
+    readonly operatorActivated: boolean;
+    readonly deactivatable: boolean;
+    readonly nonDeactivatableReason: string | null;
+}
+export interface EffectiveModuleState {
+    /** The hot path. Synchronous, in-memory, called on every gated request. */
+    isPresent(moduleId: string): boolean;
+    presence(moduleId: string): ModulePresenceState | undefined;
+    all(): readonly ModulePresenceState[];
+    isDegraded(): boolean;
+    /**
+     * Issue #225 — the generation of the presence every read above answers from.
+     * It changes when a refresh installs presence that differs from the presence
+     * before it, and it is what a consumer caching a projection of presence
+     * compares against so its cache cannot outlive the refresh that followed the
+     * state change it was rebuilt for.
+     */
+    presenceVersion(): number;
+    /**
+     * The module whose activation control is stored under `settingCode`, or
+     * `undefined` when the code is an ordinary setting. The settings write path
+     * asks this so an activation code cannot be flipped through the generic
+     * screen, bypassing the audited Command (FR-009).
+     */
+    activationControlOwner(settingCode: string): string | undefined;
+    /** The Setting that holds `moduleId`'s activation, if it declares one. */
+    activationSettingCode(moduleId: string): string | null;
+    /**
+     * Tri-state presence, for the callers that must tell "this module is absent"
+     * from "this is not a module at all".
+     *
+     * `isPresent` collapses both into `false`, which is right for a gating seam:
+     * an unknown id gets nothing. It is wrong for a caller that classifies
+     * *existing rows* by their owner — a `settings` row may be owned by a
+     * hand-created group or by a string that was never a module id, and locking
+     * those rows as "belonging to a switched-off module" would take an operator's
+     * configuration away for a module that does not exist.
+     */
+    presenceOf(moduleId: string): boolean | undefined;
+    /**
+     * The members of capability `key` whose **effective** presence is true — the
+     * conjunction of both axes, never the activation Setting alone (feature 132,
+     * spec FR-012).
+     *
+     * This is the read a family owner's mutual-exclusion registry asks, and the
+     * conjunction is the behaviour change: `findActiveSibling` reads
+     * `presence(id)?.operatorActivated` today, which answers `true` for a module
+     * whose platform axis is off — so a connector the deployment never installed
+     * holds a claim that refuses another (Principle XVII).
+     *
+     * Synchronous and in-memory, on the same budget {@link isPresent} has.
+     */
+    membersOfCapability(key: string): readonly string[];
+    /** Every **declared** member of `key`, present or not — for diagnostics and the admin panel. */
+    declaredMembersOfCapability(key: string): readonly string[];
+    /** The owner and refusal code for an exclusive key, or `undefined` if it is not exclusive here. */
+    exclusiveCapability(key: string): ExclusiveCapabilityDeclaration | undefined;
+}
+export declare class ModuleEffectiveState implements EffectiveModuleState {
+    private readonly cache;
+    constructor(cache: ModuleRegistryCache);
+    /**
+     * FR-004: no I/O, no await, no database read. Two in-memory lookups.
+     *
+     * Fail-closed falls out of the conjunction rather than from a special case:
+     * a cold cache has an empty platform set, so nothing is present until the
+     * first successful refresh.
+     */
+    isPresent(moduleId: string): boolean;
+    presence(moduleId: string): ModulePresenceState | undefined;
+    all(): readonly ModulePresenceState[];
+    isDegraded(): boolean;
+    presenceVersion(): number;
+    activationControlOwner(settingCode: string): string | undefined;
+    activationSettingCode(moduleId: string): string | null;
+    presenceOf(moduleId: string): boolean | undefined;
+    membersOfCapability(key: string): readonly string[];
+    declaredMembersOfCapability(key: string): readonly string[];
+    exclusiveCapability(key: string): ExclusiveCapabilityDeclaration | undefined;
+    /**
+     * The operator axis, with the two rules that keep it from eating itself:
+     *
+     *  - a module that declared itself non-deactivatable is activated whatever
+     *    is stored, so resolving presence never has to ask "is `settings` on?";
+     *  - a module that has declared no control at all cannot be switched off by
+     *    an operator, so it is governed by the platform axis alone until its
+     *    batch converts it. This is not a fall-open: there is no control to
+     *    resolve, and the ratchet fails CI for a converted module that omits one.
+     */
+    private operatorActivated;
+}
+/**
+ * The wire projection of one module's presence.
+ *
+ * It lives here rather than beside the `/admin/module-presence` handler because
+ * a second surface now reports a module's presence as the reason something else
+ * is unavailable — the payment-method admin list, issue #96 — and two copies of
+ * this mapping are two ways for "off" to mean different things on two screens.
+ */
+export declare function toModulePresenceDto(state: ModulePresenceState): ModulePresence;
+/** Process singleton read by the four lifecycle wrappers. */
+export declare const effectiveState: ModuleEffectiveState;
+//# sourceMappingURL=effective-state.d.ts.map

package/dist/kernel/lifecycle/effective-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"effective-state.d.ts","sourceRoot":"","sources":["../../../src/kernel/lifecycle/effective-state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChF,OAAO,EAAiB,KAAK,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAE/E;;;;;;;;;;;;;GAaG;AAEH;uEACuE;AACvE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,eAAe,CAAC;IACxD,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;CAChD;AAED,MAAM,WAAW,oBAAoB;IACnC,2EAA2E;IAC3E,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAAC;IAC5D,GAAG,IAAI,SAAS,mBAAmB,EAAE,CAAC;IACtC,UAAU,IAAI,OAAO,CAAC;IACtB;;;;;;OAMG;IACH,eAAe,IAAI,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAChE,0EAA0E;IAC1E,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACvD;;;;;;;;;;OAUG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IAClD;;;;;;;;;;;;OAYG;IACH,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;IACpD,gGAAgG;IAChG,2BAA2B,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;IAC5D,mGAAmG;IACnG,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,8BAA8B,GAAG,SAAS,CAAC;CAC9E;AAED,qBAAa,oBAAqB,YAAW,oBAAoB;IACnD,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,mBAAmB;IAEvD;;;;;;OAMG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;IAgB3D,GAAG,IAAI,SAAS,mBAAmB,EAAE;IASrC,UAAU,IAAI,OAAO;IAIrB,eAAe,IAAI,MAAM;IAIzB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAI/D,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAItD,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAMjD,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE;IAMnD,2BAA2B,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE;IAI3D,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,8BAA8B,GAAG,SAAS;IAI5E;;;;;;;;;OASG;IACH,OAAO,CAAC,iBAAiB;CAO1B;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,mBAAmB,GAAG,cAAc,CAS9E;AAED,6DAA6D;AAC7D,eAAO,MAAM,cAAc,sBAA0C,CAAC"}

package/dist/kernel/lifecycle/effective-state.js

@@ -0,0 +1,111 @@
+import { registryCache } from './registry-cache.js';
+export class ModuleEffectiveState {
+    cache;
+    constructor(cache) {
+        this.cache = cache;
+    }
+    /**
+     * FR-004: no I/O, no await, no database read. Two in-memory lookups.
+     *
+     * Fail-closed falls out of the conjunction rather than from a special case:
+     * a cold cache has an empty platform set, so nothing is present until the
+     * first successful refresh.
+     */
+    isPresent(moduleId) {
+        return this.cache.isEnabled(moduleId) && this.operatorActivated(moduleId);
+    }
+    presence(moduleId) {
+        const declaration = this.cache.activationDeclaration(moduleId);
+        const platformState = this.cache.platformStateOf(moduleId);
+        // Unknown to both the registry and the manifests ⇒ we say nothing about
+        // it. `isPresent` already answers `false` for such an id.
+        if (!declaration && platformState === 'not-installed')
+            return undefined;
+        return {
+            moduleId,
+            platformAvailable: this.cache.isEnabled(moduleId),
+            platformState,
+            operatorActivated: this.operatorActivated(moduleId),
+            deactivatable: declaration?.settingCode != null,
+            nonDeactivatableReason: declaration?.nonDeactivatableReason ?? null,
+        };
+    }
+    all() {
+        const states = [];
+        for (const moduleId of this.cache.knownModuleIds()) {
+            const presence = this.presence(moduleId);
+            if (presence)
+                states.push(presence);
+        }
+        return states;
+    }
+    isDegraded() {
+        return this.cache.isDegraded();
+    }
+    presenceVersion() {
+        return this.cache.presenceVersion();
+    }
+    activationControlOwner(settingCode) {
+        return this.cache.activationDeclarationByCode(settingCode)?.moduleId;
+    }
+    activationSettingCode(moduleId) {
+        return this.cache.activationDeclaration(moduleId)?.settingCode ?? null;
+    }
+    presenceOf(moduleId) {
+        const presence = this.presence(moduleId);
+        if (!presence)
+            return undefined;
+        return presence.platformAvailable && presence.operatorActivated;
+    }
+    membersOfCapability(key) {
+        return this.cache
+            .declaredCapabilityMembers(key)
+            .filter((moduleId) => this.isPresent(moduleId));
+    }
+    declaredMembersOfCapability(key) {
+        return this.cache.declaredCapabilityMembers(key);
+    }
+    exclusiveCapability(key) {
+        return this.cache.exclusiveCapability(key);
+    }
+    /**
+     * The operator axis, with the two rules that keep it from eating itself:
+     *
+     *  - a module that declared itself non-deactivatable is activated whatever
+     *    is stored, so resolving presence never has to ask "is `settings` on?";
+     *  - a module that has declared no control at all cannot be switched off by
+     *    an operator, so it is governed by the platform axis alone until its
+     *    batch converts it. This is not a fall-open: there is no control to
+     *    resolve, and the ratchet fails CI for a converted module that omits one.
+     */
+    operatorActivated(moduleId) {
+        const declaration = this.cache.activationDeclaration(moduleId);
+        if (declaration && declaration.settingCode === null)
+            return true;
+        const stored = this.cache.activationValue(moduleId);
+        if (stored !== undefined)
+            return stored;
+        return declaration?.default ?? true;
+    }
+}
+/**
+ * The wire projection of one module's presence.
+ *
+ * It lives here rather than beside the `/admin/module-presence` handler because
+ * a second surface now reports a module's presence as the reason something else
+ * is unavailable — the payment-method admin list, issue #96 — and two copies of
+ * this mapping are two ways for "off" to mean different things on two screens.
+ */
+export function toModulePresenceDto(state) {
+    return {
+        id: state.moduleId,
+        present: state.platformAvailable && state.operatorActivated,
+        platformState: state.platformState,
+        activated: state.operatorActivated,
+        deactivatable: state.deactivatable,
+        nonDeactivatableReason: state.nonDeactivatableReason,
+    };
+}
+/** Process singleton read by the four lifecycle wrappers. */
+export const effectiveState = new ModuleEffectiveState(registryCache);
+//# sourceMappingURL=effective-state.js.map

package/dist/kernel/lifecycle/effective-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"effective-state.js","sourceRoot":"","sources":["../../../src/kernel/lifecycle/effective-state.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAA4B,MAAM,qBAAqB,CAAC;AAoF9E,MAAM,OAAO,oBAAoB;IACF;IAA7B,YAA6B,KAA0B;QAA1B,UAAK,GAAL,KAAK,CAAqB;IAAG,CAAC;IAE3D;;;;;;OAMG;IACH,SAAS,CAAC,QAAgB;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC5E,CAAC;IAED,QAAQ,CAAC,QAAgB;QACvB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC3D,wEAAwE;QACxE,0DAA0D;QAC1D,IAAI,CAAC,WAAW,IAAI,aAAa,KAAK,eAAe;YAAE,OAAO,SAAS,CAAC;QACxE,OAAO;YACL,QAAQ;YACR,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC;YACjD,aAAa;YACb,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC;YACnD,aAAa,EAAE,WAAW,EAAE,WAAW,IAAI,IAAI;YAC/C,sBAAsB,EAAE,WAAW,EAAE,sBAAsB,IAAI,IAAI;SACpE,CAAC;IACJ,CAAC;IAED,GAAG;QACD,MAAM,MAAM,GAA0B,EAAE,CAAC;QACzC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,QAAQ;gBAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;IACjC,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;IACtC,CAAC;IAED,sBAAsB,CAAC,WAAmB;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC;IACvE,CAAC;IAED,qBAAqB,CAAC,QAAgB;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,WAAW,IAAI,IAAI,CAAC;IACzE,CAAC;IAED,UAAU,CAAC,QAAgB;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChC,OAAO,QAAQ,CAAC,iBAAiB,IAAI,QAAQ,CAAC,iBAAiB,CAAC;IAClE,CAAC;IAED,mBAAmB,CAAC,GAAW;QAC7B,OAAO,IAAI,CAAC,KAAK;aACd,yBAAyB,CAAC,GAAG,CAAC;aAC9B,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,2BAA2B,CAAC,GAAW;QACrC,OAAO,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC;IACnD,CAAC;IAED,mBAAmB,CAAC,GAAW;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;;;;OASG;IACK,iBAAiB,CAAC,QAAgB;QACxC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,WAAW,IAAI,WAAW,CAAC,WAAW,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,OAAO,WAAW,EAAE,OAAO,IAAI,IAAI,CAAC;IACtC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAA0B;IAC5D,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,QAAQ;QAClB,OAAO,EAAE,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,iBAAiB;QAC3D,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,SAAS,EAAE,KAAK,CAAC,iBAAiB;QAClC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;KACrD,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,oBAAoB,CAAC,aAAa,CAAC,CAAC"}

package/dist/kernel/lifecycle/module-registration.entity.d.ts

@@ -0,0 +1,57 @@
+import { OptionalProps } from '@mikro-orm/core';
+import type { RegistryState } from '@endora-commerce/contracts';
+/**
+ * Module Registration — feature 018 / data-model.md.
+ *
+ * One row per module the system has ever installed. The PK is the module
+ * id (matches `manifest.id`). State follows the four-state FSM enforced
+ * by a CHECK constraint on the column. Hard-uninstall deletes the row;
+ * soft-uninstall leaves it in `state = 'uninstalled'` so a later
+ * re-install can detect the prior version and skip already-applied
+ * migrations.
+ */
+export declare class ModuleRegistration {
+    [OptionalProps]?: 'lastInstallFailedAt' | 'lastInstallError' | 'bootConvergedAt' | 'createdAt' | 'updatedAt';
+    moduleId: string;
+    state: RegistryState;
+    version: string;
+    installedAt: Date;
+    lastStateChangeAt: Date;
+    lastInstallFailedAt?: Date | null;
+    lastInstallError?: string | null;
+    /**
+     * *"This row was written by boot convergence, and no install has run."*
+     *
+     * `reconcileExistingModules` inserts `state='installed'` for every shipped
+     * manifest with no row, from `composeApp`, and runs no install hook — it
+     * cannot, and D-157.6(b) is why it must not. Before this column,
+     * `install` could not tell such a row from one it had written itself, so it
+     * answered `already-installed` and the module's `installHook` never ran and
+     * never would: no migration, no settings reconcile, no participant pass, and
+     * nothing said so. The marker is the one datum that distinguishes the two,
+     * and it is what makes `module:install --all` the command that **repairs** a
+     * boot-first database.
+     *
+     * Written only by the reconciler and cleared only by `install`'s step 4. Any
+     * other writer would be claiming an install did not happen when it did, which
+     * is the opposite of what this field says.
+     *
+     * **No backfill, and it is provable rather than chosen.** The migration adds
+     * the column `null` everywhere. No `installed` row predating it can have
+     * skipped a hook, because until feature 134's W7 the tree had **no
+     * `installHook` at all** — `custom_fields`' `uninstallHook` was the only
+     * lifecycle hook in it. A blanket backfill would make every existing row claim
+     * *"no install has run"* when one had, which would stop the field meaning what
+     * it says and would be the wrong datum for a future boot refusal to read.
+     *
+     * **One residual it does not reach**, recorded rather than discovered: a
+     * database converged *before* this column existed holds `null`, so a module
+     * that gains its first `installHook` afterwards is still answered
+     * `already-installed` there. `db:fresh` plus the `setup` script is the dev
+     * remedy, and `module:uninstall <id> && module:install <id>` the surgical one.
+     */
+    bootConvergedAt?: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+//# sourceMappingURL=module-registration.entity.d.ts.map

package/dist/kernel/lifecycle/module-registration.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-registration.entity.d.ts","sourceRoot":"","sources":["../../../src/kernel/lifecycle/module-registration.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,aAAa,EAAwB,MAAM,iBAAiB,CAAC;AAE9E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAEhE;;;;;;;;;GASG;AACH,qBAEa,kBAAkB;IAC7B,CAAC,aAAa,CAAC,CAAC,EACZ,qBAAqB,GACrB,kBAAkB,GAClB,iBAAiB,GACjB,WAAW,GACX,WAAW,CAAC;IAGhB,QAAQ,EAAG,MAAM,CAAC;IAGlB,KAAK,EAAG,aAAa,CAAC;IAGtB,OAAO,EAAG,MAAM,CAAC;IAGjB,WAAW,EAAG,IAAI,CAAC;IAGnB,iBAAiB,EAAG,IAAI,CAAC;IAGzB,mBAAmB,CAAC,EAAE,IAAI,GAAG,IAAI,CAAQ;IAGzC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAQ;IAExC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IAEH,eAAe,CAAC,EAAE,IAAI,GAAG,IAAI,CAAQ;IAGrC,SAAS,EAAE,IAAI,CAAc;IAG7B,SAAS,EAAE,IAAI,CAAc;CAC9B"}

package/dist/kernel/lifecycle/module-registration.entity.js

@@ -0,0 +1,111 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Entity, OptionalProps, PrimaryKey, Property } from '@mikro-orm/core';
+import { GlobalEntity } from '../../tenancy/org-scoped.decorator.js';
+/**
+ * Module Registration — feature 018 / data-model.md.
+ *
+ * One row per module the system has ever installed. The PK is the module
+ * id (matches `manifest.id`). State follows the four-state FSM enforced
+ * by a CHECK constraint on the column. Hard-uninstall deletes the row;
+ * soft-uninstall leaves it in `state = 'uninstalled'` so a later
+ * re-install can detect the prior version and skip already-applied
+ * migrations.
+ */
+let ModuleRegistration = class ModuleRegistration {
+    [OptionalProps];
+    moduleId;
+    state;
+    version;
+    installedAt;
+    lastStateChangeAt;
+    lastInstallFailedAt = null;
+    lastInstallError = null;
+    /**
+     * *"This row was written by boot convergence, and no install has run."*
+     *
+     * `reconcileExistingModules` inserts `state='installed'` for every shipped
+     * manifest with no row, from `composeApp`, and runs no install hook — it
+     * cannot, and D-157.6(b) is why it must not. Before this column,
+     * `install` could not tell such a row from one it had written itself, so it
+     * answered `already-installed` and the module's `installHook` never ran and
+     * never would: no migration, no settings reconcile, no participant pass, and
+     * nothing said so. The marker is the one datum that distinguishes the two,
+     * and it is what makes `module:install --all` the command that **repairs** a
+     * boot-first database.
+     *
+     * Written only by the reconciler and cleared only by `install`'s step 4. Any
+     * other writer would be claiming an install did not happen when it did, which
+     * is the opposite of what this field says.
+     *
+     * **No backfill, and it is provable rather than chosen.** The migration adds
+     * the column `null` everywhere. No `installed` row predating it can have
+     * skipped a hook, because until feature 134's W7 the tree had **no
+     * `installHook` at all** — `custom_fields`' `uninstallHook` was the only
+     * lifecycle hook in it. A blanket backfill would make every existing row claim
+     * *"no install has run"* when one had, which would stop the field meaning what
+     * it says and would be the wrong datum for a future boot refusal to read.
+     *
+     * **One residual it does not reach**, recorded rather than discovered: a
+     * database converged *before* this column existed holds `null`, so a module
+     * that gains its first `installHook` afterwards is still answered
+     * `already-installed` there. `db:fresh` plus the `setup` script is the dev
+     * remedy, and `module:uninstall <id> && module:install <id>` the surgical one.
+     */
+    bootConvergedAt = null;
+    createdAt = new Date();
+    updatedAt = new Date();
+};
+__decorate([
+    PrimaryKey({ type: 'string', length: 80 }),
+    __metadata("design:type", String)
+], ModuleRegistration.prototype, "moduleId", void 0);
+__decorate([
+    Property({ type: 'string', length: 16 }),
+    __metadata("design:type", String)
+], ModuleRegistration.prototype, "state", void 0);
+__decorate([
+    Property({ type: 'string', length: 32 }),
+    __metadata("design:type", String)
+], ModuleRegistration.prototype, "version", void 0);
+__decorate([
+    Property({ type: 'Date' }),
+    __metadata("design:type", Date)
+], ModuleRegistration.prototype, "installedAt", void 0);
+__decorate([
+    Property({ type: 'Date' }),
+    __metadata("design:type", Date)
+], ModuleRegistration.prototype, "lastStateChangeAt", void 0);
+__decorate([
+    Property({ type: 'Date', nullable: true }),
+    __metadata("design:type", Object)
+], ModuleRegistration.prototype, "lastInstallFailedAt", void 0);
+__decorate([
+    Property({ type: 'text', nullable: true }),
+    __metadata("design:type", Object)
+], ModuleRegistration.prototype, "lastInstallError", void 0);
+__decorate([
+    Property({ type: 'Date', nullable: true }),
+    __metadata("design:type", Object)
+], ModuleRegistration.prototype, "bootConvergedAt", void 0);
+__decorate([
+    Property({ type: 'Date' }),
+    __metadata("design:type", Date)
+], ModuleRegistration.prototype, "createdAt", void 0);
+__decorate([
+    Property({ type: 'Date', onUpdate: () => new Date() }),
+    __metadata("design:type", Date)
+], ModuleRegistration.prototype, "updatedAt", void 0);
+ModuleRegistration = __decorate([
+    GlobalEntity(),
+    Entity({ tableName: 'module_registrations' })
+], ModuleRegistration);
+export { ModuleRegistration };
+//# sourceMappingURL=module-registration.entity.js.map

package/dist/kernel/lifecycle/module-registration.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-registration.entity.js","sourceRoot":"","sources":["../../../src/kernel/lifecycle/module-registration.entity.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAGrE;;;;;;;;;GASG;AAGI,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC7B,CAAC,aAAa,CAAC,CAKC;IAGhB,QAAQ,CAAU;IAGlB,KAAK,CAAiB;IAGtB,OAAO,CAAU;IAGjB,WAAW,CAAQ;IAGnB,iBAAiB,CAAQ;IAGzB,mBAAmB,GAAiB,IAAI,CAAC;IAGzC,gBAAgB,GAAmB,IAAI,CAAC;IAExC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IAEH,eAAe,GAAiB,IAAI,CAAC;IAGrC,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;IAG7B,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;CAC9B,CAAA;AA3DC;IADC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;;oDACzB;AAGlB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;;iDACnB;AAGtB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;;mDACxB;AAGjB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;8BACb,IAAI;uDAAC;AAGnB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;8BACP,IAAI;6DAAC;AAGzB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+DACF;AAGzC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;4DACH;AAkCxC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;2DACN;AAGrC;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;8BAChB,IAAI;qDAAc;AAG7B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;8BAC5C,IAAI;qDAAc;AAnElB,kBAAkB;IAF9B,YAAY,EAAE;IACd,MAAM,CAAC,EAAE,SAAS,EAAE,sBAAsB,EAAE,CAAC;GACjC,kBAAkB,CAoE9B"}