@endora-commerce/platform 0.100.0

package/dist/kernel/module-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-context.js","sourceRoot":"","sources":["../../src/kernel/module-context.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,UAAU,EACV,OAAO,EACP,QAAQ,GAKT,MAAM,QAAQ,CAAC;AAOhB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GAEnB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,YAAY,EAAuB,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,yBAAyB,EACzB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AA6BjC;;;;;;;;;;;GAWG;AACH,SAAS,sBAAsB,CAAC,QAA2B;IACzD,OAAO,QAAQ,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC;AACzE,CAAC;AAgCD,8EAA8E;AAC9E,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAExC;IACA;IACA;IAHX,YACW,gBAAwB,EACxB,KAAa,EACb,QAAgB;QAEzB,KAAK,CACH,qBAAqB,KAAK,UAAU,QAAQ,oBAAoB,gBAAgB,KAAK;YACnF,uEAAuE;YACvE,8EAA8E;YAC9E,0CAA0C,QAAQ,uBAAuB;YACzE,iCAAiC,KAAK,uCAAuC;YAC7E,oFAAoF;YACpF,mFAAmF;YACnF,gBAAgB,KAAK,iEAAiE;YACtF,gCAAgC,gBAAgB,uBAAuB,KAAK,IAAI;YAChF,4EAA4E,CAC/E,CAAC;QAfO,qBAAgB,GAAhB,gBAAgB,CAAQ;QACxB,UAAK,GAAL,KAAK,CAAQ;QACb,aAAQ,GAAR,QAAQ,CAAQ;QAczB,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAEtC;IACA;IAFX,YACW,gBAAwB,EACxB,QAAgB;QAEzB,KAAK,CACH,oBAAoB,QAAQ,sBAAsB,gBAAgB,mBAAmB;YACnF,kFAAkF;YAClF,kFAAkF;YAClF,oFAAoF;YACpF,oFAAoF;YACpF,qFAAqF;YACrF,6EAA6E;YAC7E,qFAAqF;YACrF,+EAA+E;YAC/E,sFAAsF;YACtF,8EAA8E;YAC9E,oBAAoB,gBAAgB,gDAAgD,CACvF,CAAC;QAhBO,qBAAgB,GAAhB,gBAAgB,CAAQ;QACxB,aAAQ,GAAR,QAAQ,CAAQ;QAgBzB,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,yEAAyE;AACzE,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAElC;IACA;IAFX,YACW,QAAgB,EAChB,gBAAwB;QAEjC,KAAK,CACH,oBAAoB,QAAQ,eAAe,gBAAgB,uBAAuB;YAChF,8EAA8E;YAC9E,kFAAkF;YAClF,8EAA8E;YAC9E,qEAAqE,CACxE,CAAC;QATO,aAAQ,GAAR,QAAQ,CAAQ;QAChB,qBAAgB,GAAhB,gBAAgB,CAAQ;QASjC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAoBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAEtC;IACA;IAFX,YACW,gBAAwB,EACxB,OAA0B,EACnC,MAAc;QAEd,KAAK,CACH,oBAAoB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB;YAC7E,IAAI,gBAAgB,UAAU,MAAM,+CAA+C;YACnF,qFAAqF;YACrF,2EAA2E;YAC3E,kEAAkE;YAClE,2BAA2B,gBAAgB,MAAM;YACjD,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;YACjD,sFAAsF;YACtF,gFAAgF;YAChF,yDAAyD;YACzD,mFAAmF;YACnF,qFAAqF;YACrF,6EAA6E;YAC7E,sDAAsD;YACtD,iDAAiD,CACpD,CAAC;QApBO,qBAAgB,GAAhB,gBAAgB,CAAQ;QACxB,YAAO,GAAP,OAAO,CAAmB;QAoBnC,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAEpC;IACA;IAEA;IAJX,YACW,gBAAwB,EACxB,QAAgB;IACzB,oFAAoF;IAC3E,KAAyB;QAElC,MAAM,KAAK,GACT,KAAK,KAAK,SAAS;YACjB,CAAC,CAAC,uDAAuD;YACzD,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC;QAChC,KAAK,CACH,oBAAoB,QAAQ,sBAAsB,gBAAgB,MAAM,KAAK,IAAI;YAC/E,4EAA4E;YAC5E,kFAAkF;YAClF,iFAAiF;YACjF,+EAA+E;YAC/E,kBAAkB,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,MAAM;YACnF,mEAAmE;YACnE,oEAAoE;YACpE,gFAAgF;YAChF,uEAAuE;YACvE,qEAAqE;YACrE,sCAAsC;YACtC,8EAA8E;YAC9E,gFAAgF;YAChF,uDAAuD;YACvD,iDAAiD,CACpD,CAAC;QA1BO,qBAAgB,GAAhB,gBAAgB,CAAQ;QACxB,aAAQ,GAAR,QAAQ,CAAQ;QAEhB,UAAK,GAAL,KAAK,CAAoB;QAwBlC,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,OAAO,gCAAiC,SAAQ,KAAK;IAE9C;IACA;IAEA;IAJX,YACW,gBAAwB,EACxB,QAAgB;IACzB,yCAAyC;IAChC,KAAa;QAEtB,KAAK,CACH,oBAAoB,QAAQ,sBAAsB,gBAAgB,OAAO,KAAK,UAAU;YACtF,iFAAiF;YACjF,qFAAqF;YACrF,sFAAsF;YACtF,+EAA+E;YAC/E,sFAAsF;YACtF,mEAAmE,KAAK,UAAU;YAClF,sFAAsF;YACtF,uFAAuF;YACvF,uFAAuF;YACvF,0EAA0E;YAC1E,4BAA4B,KAAK,mCAAmC;YACpE,qFAAqF;YACrF,kEAAkE;YAClE,iDAAiD,CACpD,CAAC;QArBO,qBAAgB,GAAhB,gBAAgB,CAAQ;QACxB,aAAQ,GAAR,QAAQ,CAAQ;QAEhB,UAAK,GAAL,KAAK,CAAQ;QAmBtB,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;IACjD,CAAC;CACF;AAuCD,MAAM,UAAU,qBAAqB;IACnC,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,OAAO;QACL,OAAO;QACP,OAAO,CAAC,KAAK;YACX,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC;AAsBD,MAAM,UAAU,sBAAsB,CACpC,kBAA+D,EAAE;IAEjE,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,OAAO;QACL,OAAO;QAEP,YAAY,CAAC,IAAI;YACf,OAAO,IAAI,CAAC,CAAC;YACb,OAAO,GAAG,IAAI,gBAAgB,OAAO,EAAE,CAAC;QAC1C,CAAC;QAED,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK;YAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAC7D,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAExE,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC;gBAC/C,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC1D,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;gBAEvC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,MAAM,IAAI,wBAAwB,CAAC,IAAI,EAAE,OAAO,EAAE,8BAA8B,CAAC,CAAC;gBACpF,CAAC;gBAED,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC/D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,MAAM,IAAI,wBAAwB,CAChC,IAAI,EACJ,OAAO,EACP,4BAA4B,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACzE,CAAC;gBACJ,CAAC;gBAED,qEAAqE;gBACrE,qCAAqC;gBACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3C,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAW,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAW,CAAC,EAAE,CAAC;wBACxF,MAAM,IAAI,wBAAwB,CAChC,IAAI,EACJ,OAAO,EACP,6BAA6B,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU;4BAC/E,4BAA4B,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAC7E,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,KAAK,GAAqB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,OAAO;QACL,KAAK,CAAC,IAAI,EAAE,QAAQ;YAClB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9C,MAAM,IAAI,0BAA0B,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;KACpC,CAAC;AACJ,CAAC;AAkLD,MAAM,UAAU,4BAA4B;IAC1C,OAAO;QACL,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,EAAE;QACf,OAAO,EAAE,EAAE;QACX,YAAY,EAAE,EAAE;QAChB,SAAS,EAAE,EAAE;KACd,CAAC;AACJ,CAAC;AAiED,MAAM,UAAU,mBAAmB,CAAC,OAA6B;IAC/D,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,mBAAmB,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAC3F,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,GAAY,EAAE,CAAC,KAAK,CAAC,CAAC;IACtE,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC;IACrD,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IAChD,MAAM,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,IAAI,IAAI,GAAG,EAAU,CAAC;IACzF;;;;;;;;;;OAUG;IACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,sBAAsB,EAAE,CAAC;IAEpE;;;;;;;;;OASG;IACH,MAAM,OAAO,GAAG,CAAC,IAAY,EAAsB,EAAE,CACnD,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEnF;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAQ,EAAE;QAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC;IAEF;;;;;OAKG;IACH,MAAM,WAAW,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,EAAE;QAC5E,GAAG,CAAC,OAAO,EAAE,QAAQ;YACnB,yEAAyE;YACzE,uEAAuE;YACvE,IAAI,OAAO,QAAQ,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YACnD,IAAI,aAAa,EAAE;gBAAE,MAAM,IAAI,oBAAoB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACzE,wEAAwE;YACxE,kEAAkE;YAClE,uEAAuE;YACvE,0EAA0E;YAC1E,sEAAsE;YACtE,sDAAsD;YACtD,EAAE;YACF,oEAAoE;YACpE,sEAAsE;YACtE,uEAAuE;YACvE,6DAA6D;YAC7D,uEAAuE;YACvE,oEAAoE;YACpE,IACE,sBAAsB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC;gBAC3C,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,EACpC,CAAC;gBACD,OAAO,yBAAyB,CAAC;YACnC,CAAC;YACD,OAAO,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;QACD,GAAG,CAAC,OAAO,EAAE,QAAQ;YACnB,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC7E,CAAC;KACF,CAAC,CAAC;IAEH,OAAO;QACL,MAAM;QAEN,EAAE,EAAE;YACF,QAAQ,CAAC,aAAa;gBACpB,sEAAsE;gBACtE,yDAAyD;gBACzD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;oBAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBACvE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;oBAC9C,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;oBAClC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC7B,CAAC;gBACD,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;YACpC,CAAC;YAED,WAAW,CAAC,IAAI,EAAE,YAAY;gBAC5B,sEAAsE;gBACtE,kDAAkD;gBAClD,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBACxB,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;gBAClC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC3B,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;YACzD,CAAC;YAED;;;;;;;;;;;;;;;;;;;;;;;;eAwBG;YACH,QAAQ,CAAI,IAAY,EAAE,IAA2C;gBACnE,MAAM,KAAK,GAAG,GAAS,EAAE;oBACvB,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;wBACrC,MAAM,IAAI,KAAK,CACb,oBAAoB,MAAM,CAAC,EAAE,sBAAsB,IAAI,2BAA2B;4BAChF,0EAA0E;4BAC1E,6EAA6E;4BAC7E,6EAA6E;4BAC7E,6CAA6C,CAChD,CAAC;oBACJ,CAAC;oBACD,oEAAoE;oBACpE,oEAAoE;oBACpE,0DAA0D;oBAC1D,EAAE;oBACF,4DAA4D;oBAC5D,mEAAmE;oBACnE,qEAAqE;oBACrE,iEAAiE;oBACjE,kEAAkE;oBAClE,EAAE;oBACF,qEAAqE;oBACrE,sEAAsE;oBACtE,qEAAqE;oBACrE,oEAAoE;oBACpE,uEAAuE;oBACvE,kEAAkE;oBAClE,sEAAsE;oBACtE,kEAAkE;oBAClE,kEAAkE;oBAClE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC5B,IAAI,KAAK,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC;wBACxB,6DAA6D;wBAC7D,kEAAkE;wBAClE,+DAA+D;wBAC/D,kEAAkE;wBAClE,+CAA+C;wBAC/C,6DAA6D;wBAC7D,yCAAyC;wBACzC,IAAI,KAAK,KAAK,SAAS,IAAI,yBAAyB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;4BAChE,MAAM,IAAI,gCAAgC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;wBACrE,CAAC;wBACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;4BACzB,MAAM,IAAI,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;wBAC3D,CAAC;oBACH,CAAC;oBACD,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;oBAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,CAAgB,CAAC;oBAC7D,sEAAsE;oBACtE,uEAAuE;oBACvE,qEAAqE;oBACrE,iEAAiE;oBACjE,qEAAqE;oBACrE,sEAAsE;oBACtE,oEAAoE;oBACpE,MAAM,SAAS,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;oBACjD,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;oBAC3C,SAAS,CAAC,QAAQ,CAAC;wBACjB,iEAAiE;wBACjE,gEAAgE;wBAChE,EAAE;wBACF,gEAAgE;wBAChE,8DAA8D;wBAC9D,gEAAgE;wBAChE,6DAA6D;wBAC7D,6DAA6D;wBAC7D,oEAAoE;wBACpE,kEAAkE;wBAClE,gEAAgE;wBAChE,oEAAoE;wBACpE,qEAAqE;wBACrE,EAAE;wBACF,mEAAmE;wBACnE,mEAAmE;wBACnE,oEAAoE;wBACpE,kEAAkE;wBAClE,mEAAmE;wBACnE,kEAAkE;wBAClE,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAC,KAAK,CAAC;4BACnC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAoB,EAAE,EAAE,CAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAM,EAAE,MAAM,CAAC,CACrC,CAAC,SAAS,EAAE;4BACf,CAAC,CAAC,UAAU,CAAC,CAAC,MAAoB,EAAE,EAAE,CAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAM,EAAE,MAAM,CAAC,CACrC,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,CAAC;qBACxD,CAAC,CAAC;gBACL,CAAC,CAAC;gBAEF,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;oBAClC,KAAK,EAAE,CAAC;oBACR,OAAO;gBACT,CAAC;gBACD,eAAe,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAChE,CAAC;SACF;QAED,OAAO,EAAE,CAAK,IAAoB,EAA0B,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAC5E,UAAU,EAAE,CAAsB,EAAoB,EAA0B,EAAE,CAChF,UAAU,CAAC,EAA+B,CAAC;QAC7C,OAAO,EAAE,CAAK,KAAQ,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAoB;QAE7E,MAAM,EAAE,GAAwC,EAAE,CAAC,WAAgB;QAEnE,MAAM,CAAC,QAAQ;YACb,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC7D,CAAC;QAED,aAAa,CAAC,MAAM,EAAE,QAAQ;YAC5B,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CACb,oBAAoB,MAAM,CAAC,EAAE,gDAAgD;oBAC3E,8EAA8E;oBAC9E,iFAAiF;oBACjF,gFAAgF;oBAChF,+BAA+B,CAClC,CAAC;YACJ,CAAC;YACD,uEAAuE;YACvE,yEAAyE;YACzE,mCAAmC;YACnC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,GAAoB,EAAE,EAAE;gBAC/C,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;oBAClC,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACzB,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAED,UAAU,CAAC,MAAM,EAAE,MAAM;YACvB,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CACb,oBAAoB,MAAM,CAAC,EAAE,+CAA+C;oBAC1E,6EAA6E;oBAC7E,qEAAqE,CACxE,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAED,MAAM,CAAC,MAAM,EAAE,aAAa;YAC1B,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;YACxE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9B,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,SAAS,CAAC,KAAK,EAAE,OAAO;YACtB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;QAClF,CAAC;QAED,YAAY,CAAC,OAAO;YAClB,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CACb,oBAAoB,MAAM,CAAC,EAAE,wDAAwD;oBACnF,sCAAsC,CACzC,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,mBAAmB,CAAC,QAAQ,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAA6B,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;QAED,MAAM,CAAC,IAAI;YACT,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAED,0EAA0E;QAC1E,4EAA4E;QAC5E,mEAAmE;QACnE,0EAA0E;QAC1E,mBAAmB;QACnB,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC;KAClC,CAAC;AACJ,CAAC"}

package/dist/kernel/ports/audit.d.ts

@@ -0,0 +1,115 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { AuditLogEntry } from '../audit/audit-log-entry.entity.js';
+/**
+ * Kernel port — the append-only audit log (D-160.10).
+ *
+ * The **container name is `auditLogService`**, and it is a composition-root
+ * registration rather than a module's: it is on `PLATFORM_OWNED_NAMES`
+ * (`backend/scripts/check-port-dependencies.ts`), so a consumer declares no
+ * manifest dependency for it and there is no owner to switch off. A module
+ * reads it off its own cradle, as it always has; what changes here is only the
+ * type it reads it as.
+ *
+ * **Why the class is not published, and why that is not a stylistic
+ * preference.** `contracts/host-package.md` §1.3 row 4 measured 39 modules
+ * naming `AuditLogService` in a constructor signature across 147 specifiers,
+ * and recorded the tension as its Q3: Principle XIII routes a domain write
+ * through `CommandBus.run` precisely so that the audit row and the write commit
+ * together, which makes the bus — not the writer — the caller of the audit log.
+ * Publishing the class as the platform's contract would freeze the shape the
+ * principle routes *around* into something the host owes third-party module
+ * packages a major version to change. D-160.10 answered it: publish the seam,
+ * keep the implementation the host's.
+ *
+ * The port is therefore written here rather than derived from the class. A
+ * `Pick<AuditLogService, …>`, a `ReturnType<>` or an `InstanceType<>` would each
+ * import the class into every consumer's type graph, which is the coupling the
+ * ruling removes; and each would silently re-widen the surface the day somebody
+ * adds a method.
+ *
+ * **Not in `@endora-commerce/contracts`.** Two of these four signatures name types that
+ * package cannot have: `recordWithin` takes the caller's MikroORM
+ * `EntityManager` — that *is* the co-transactional guarantee, not an
+ * implementation detail — and every method answers in `AuditLogEntry`, a kernel
+ * entity. `@endora-commerce/contracts` depends on `zod` alone and is consumed by the admin
+ * SPA and the storefront; giving it an ORM dependency to hold a backend-only
+ * seam would be a new runtime dependency (Constitution IV) on the one package
+ * three applications share. `kernel/ports/settings.ts` and
+ * `kernel/ports/sales-channel.ts` are the standing precedent: a platform port
+ * lives beside the platform, and §1.3 rows 3, 16, 27 and 53 already classify
+ * `kernel/ports/*` as published.
+ */
+export interface AuditPort {
+    /**
+     * Append one entry on the port's **own** EntityManager, flushed immediately.
+     *
+     * What a caller reaches for when it has one row and no unit of work of its
+     * own to join. A write that is part of a domain transaction wants
+     * {@link AuditPort.recordWithin} — or, better, wants to be a Command
+     * (Principle XIII), which writes the row through the bus and gets undo with
+     * it.
+     */
+    record(input: RecordAuditInput): Promise<AuditLogEntry>;
+    /**
+     * Append one entry on the **caller's** transactional EntityManager, with no
+     * fork and no flush (feature 054, FR-003).
+     *
+     * The caller's `em.transactional(...)` commits it atomically with the domain
+     * write, so the audit row and the write live or die together. Passing an `em`
+     * that has no transaction open is not an error and not a guarantee: the entry
+     * is persisted into that unit of work and lands whenever it flushes.
+     */
+    recordWithin(em: EntityManager, input: RecordAuditInput): AuditLogEntry;
+    /**
+     * Entries matching a filter, newest first, capped (default 100, max 500).
+     *
+     * The admin audit viewer's read. An empty filter is every entry, which is why
+     * the cap is not optional.
+     */
+    query(filter?: AuditLogFilter): Promise<AuditLogEntry[]>;
+    /**
+     * Every entry recorded under one action for a **set** of objects, oldest
+     * first (issue #284).
+     *
+     * Deliberately uncapped, and that is the contract rather than an oversight: a
+     * limit over a set does not bound the work evenly, it drops whichever objects
+     * sort last, and an object whose history was silently truncated reads as an
+     * object with no history. The caller bounds the population by passing the ids
+     * on one page.
+     */
+    findByObjectIds(input: {
+        action: string;
+        objectType: string;
+        objectIds: readonly string[];
+    }): Promise<AuditLogEntry[]>;
+}
+/**
+ * One entry, as the caller states it.
+ *
+ * The actor fields are the caller's to fill and are not derived here — a worker
+ * or a system sweep legitimately has none. `recordAuditFromContext`
+ * (`src/commands/`) is the helper that fills them from the ambient tenant
+ * context for a request-shaped write.
+ */
+export interface RecordAuditInput {
+    actorAdminUserId?: string | null;
+    impersonatedCustomerAccountId?: string | null;
+    action: string;
+    objectType: string;
+    objectId: string;
+    stateBefore?: Record<string, unknown> | null;
+    stateAfter?: Record<string, unknown> | null;
+    ipAddress?: string | null;
+    userAgent?: string | null;
+    requestId?: string | null;
+}
+/** The filter {@link AuditPort.query} takes. Every field is an equality match. */
+export interface AuditLogFilter {
+    actorAdminUserId?: string;
+    impersonatedCustomerAccountId?: string;
+    action?: string;
+    objectType?: string;
+    objectId?: string;
+    limit?: number;
+}
+//# sourceMappingURL=audit.d.ts.map

package/dist/kernel/ports/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../src/kernel/ports/audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AAExE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,WAAW,SAAS;IACxB;;;;;;;;OAQG;IACH,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAExD;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,gBAAgB,GAAG,aAAa,CAAC;IAExE;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAEzD;;;;;;;;;OASG;IACH,eAAe,CAAC,KAAK,EAAE;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;KAC9B,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,6BAA6B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5C,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,kFAAkF;AAClF,MAAM,WAAW,cAAc;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/kernel/ports/audit.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=audit.js.map

package/dist/kernel/ports/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/kernel/ports/audit.ts"],"names":[],"mappings":""}

package/dist/kernel/ports/organizations.d.ts

@@ -0,0 +1,56 @@
+import type { OrganizationStatus } from '@endora-commerce/contracts';
+/**
+ * Kernel port — organisation read (feature 072, D-32; retyped by D-55).
+ *
+ * The Organization is the one tenant concept (Constitution XI), so almost every
+ * module needs to read one. The **owner is the `organizations` module**, which
+ * registers the default (`OrganizationContextService`) and keeps the entity, its
+ * table and its eight migrations.
+ *
+ * The kernel owns only the shape, and until D-55 that was not true here: all
+ * three methods were typed with the module-owned `Organization` entity class, so
+ * `@endora-commerce/kernel` reached `@endora-commerce/mod-organizations` — the
+ * package cycle F4 cannot start with. {@link OrganizationSnapshot} is the shape
+ * the port actually advertises, measured against every caller: `promotions`
+ * reads `status`, `carts` and `orders` discard the return value and want the
+ * throw, and `loadCartApprovalPolicy` never named an entity at all.
+ *
+ * `OrganizationStatus` comes from `@endora-commerce/contracts`, which already declares the
+ * union the entity re-declares — the second name is the existing one, not a new
+ * one. Nothing else moves: TypeScript is structural, so `OrganizationContextService`
+ * satisfies this port returning its entity, with no mapping layer and no
+ * implementation change.
+ *
+ * **This is the settled shape, not an interim one.** The entity stays in
+ * `organizations` permanently: the Organization's logic belongs to a module, and
+ * relocating the class would buy nothing measurable (the mapping layer is nil,
+ * the blast radius one file) at the price of splitting six migrations, renaming
+ * eight applied classes and a coordinated database rebuild. `src/tenancy` is the
+ * precedent that makes it right rather than merely cheap — it enforces
+ * Principle XI knowing the Organization as a UUID in a column and never as a
+ * class, which is exactly the grip a platform layer needs on the one tenant
+ * concept. A consumer that needs a field outside `{id, status}` grows the
+ * snapshot by a line; that is what a structural type is for.
+ */
+export interface OrganizationSnapshot {
+    readonly id: string;
+    readonly status: OrganizationStatus;
+}
+export interface OrganizationReadPort {
+    /** The Organization, or `null` when it does not exist or is soft-deleted. */
+    loadEffectiveOrganization(organizationId: string): Promise<OrganizationSnapshot | null>;
+    /**
+     * Resolve the Organization and refuse when it may not transact.
+     *
+     * Returning the organisation it just validated is information this port
+     * legitimately advertises; that both current callers discard it is a fact
+     * about two call sites, not about the contract.
+     *
+     * @throws `OrganizationNotFoundError` when the organisation does not exist.
+     * @throws `OrganizationCannotTransactError` when its status is not `active`.
+     */
+    assertCanTransact(organizationId: string): Promise<OrganizationSnapshot>;
+    /** Per-organisation cart-approval policy; `false` for a customer with no organisation. */
+    loadCartApprovalPolicy(organizationId: string | null): Promise<boolean>;
+}
+//# sourceMappingURL=organizations.d.ts.map

package/dist/kernel/ports/organizations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../../../src/kernel/ports/organizations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACnC,6EAA6E;IAC7E,yBAAyB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IAExF;;;;;;;;;OASG;IACH,iBAAiB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEzE,0FAA0F;IAC1F,sBAAsB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzE"}

package/dist/kernel/ports/organizations.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=organizations.js.map

package/dist/kernel/ports/organizations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations.js","sourceRoot":"","sources":["../../../src/kernel/ports/organizations.ts"],"names":[],"mappings":""}

package/dist/kernel/ports/provide.d.ts

@@ -0,0 +1,14 @@
+import { type Resolver } from 'awilix';
+import type { KernelContainer } from '../container.js';
+/**
+ * Register `name` as a port owned by `moduleId`.
+ *
+ * The gate is a **transient** wrapper over the original resolver, which keeps
+ * its own lifetime. That split is load-bearing: a singleton port registered
+ * with the check inside its factory would run the check exactly once — at first
+ * resolution — and every later resolution would return the cached instance
+ * without asking, so switching the module off would stop nothing that had
+ * already been resolved once.
+ */
+export declare function registerPort<T>(container: KernelContainer, moduleId: string, name: string, resolver: Resolver<T>): void;
+//# sourceMappingURL=provide.d.ts.map

package/dist/kernel/ports/provide.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provide.d.ts","sourceRoot":"","sources":["../../../src/kernel/ports/provide.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAG7D,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,iBAAiB,CAAC;AA6BrE;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAC5B,SAAS,EAAE,eAAe,EAC1B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GACpB,IAAI,CASN"}

package/dist/kernel/ports/provide.js

@@ -0,0 +1,50 @@
+import { asFunction, Lifetime } from 'awilix';
+import { ModuleDisabledError } from '../lifecycle/plugin-helpers.js';
+import { effectiveState } from '../lifecycle/effective-state.js';
+/**
+ * Registering a **port** — a name the owning module publishes for other modules
+ * to resolve (feature 072, T059; `contracts/module-context.md` §Ports).
+ *
+ * An ordinary registration and a port differ in exactly one way, and it is not
+ * cosmetic: a port is resolved by *another* module, so its availability is a
+ * cross-module question and the answer has to be the module's **effective**
+ * state (Constitution XVII). Resolving a port from a module that is not
+ * effectively present throws {@link ModuleDisabledError} — 503
+ * `MODULE_DISABLED` with `Retry-After` — instead of handing back a live service
+ * belonging to a module the operator switched off.
+ *
+ * Fail closed, because the alternative is a half-executed operation: a consumer
+ * that gets the service anyway writes rows, emits events and charges cards on
+ * behalf of a capability that is supposed to be absent.
+ *
+ * Kernel-owned ports (`settingsReadPort`, the sales-channel ports) are **not**
+ * registered through here and never gate: the kernel is the part every
+ * deployment has, so there is no state in which it is absent, and a gate that
+ * can never close is a gate nobody can reason about.
+ */
+/** The private name the ungated resolver keeps, so the gate wraps rather than replaces. */
+function ungatedNameFor(name) {
+    return `${name}$ungated$`;
+}
+/**
+ * Register `name` as a port owned by `moduleId`.
+ *
+ * The gate is a **transient** wrapper over the original resolver, which keeps
+ * its own lifetime. That split is load-bearing: a singleton port registered
+ * with the check inside its factory would run the check exactly once — at first
+ * resolution — and every later resolution would return the cached instance
+ * without asking, so switching the module off would stop nothing that had
+ * already been resolved once.
+ */
+export function registerPort(container, moduleId, name, resolver) {
+    const ungated = ungatedNameFor(name);
+    container.register({ [ungated]: resolver });
+    container.register({
+        [name]: asFunction((cradle) => {
+            if (!effectiveState.isPresent(moduleId))
+                throw new ModuleDisabledError(moduleId);
+            return cradle[ungated];
+        }).setLifetime(Lifetime.TRANSIENT),
+    });
+}
+//# sourceMappingURL=provide.js.map

package/dist/kernel/ports/provide.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provide.js","sourceRoot":"","sources":["../../../src/kernel/ports/provide.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAiB,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAGjE;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,2FAA2F;AAC3F,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,GAAG,IAAI,WAAW,CAAC;AAC5B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAC1B,SAA0B,EAC1B,QAAgB,EAChB,IAAY,EACZ,QAAqB;IAErB,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACrC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5C,SAAS,CAAC,QAAQ,CAAC;QACjB,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC,MAAoB,EAAK,EAAE;YAC7C,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YACjF,OAAO,MAAM,CAAC,OAAO,CAAM,CAAC;QAC9B,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC;KACnC,CAAC,CAAC;AACL,CAAC"}

package/dist/kernel/ports/require-admin.d.ts

@@ -0,0 +1,61 @@
+import type { FastifyReply, FastifyRequest } from 'fastify';
+/**
+ * Kernel port — the admin guard (feature 072, D-32).
+ *
+ * Before this file the repository carried **17 byte-identical declarations** of
+ * `RequireAdminFactory`, one per module that happened to need it, and 53 files
+ * imported `catalog`'s copy — an infrastructure dependency on a domain module.
+ * This is the one declaration; every route surface imports it from here.
+ *
+ * The kernel owns the **type**. The `auth` module owns the **implementation**
+ * (`modules/auth/require-admin.ts`) because promoting an admin actor needs the
+ * auth plugin's per-request decorations, and checking a permission needs
+ * `admin_roles` — which `auth`'s manifest declares as a dependency.
+ */
+export type RequireAdminFactory = (permission?: string) => (req: FastifyRequest, reply: FastifyReply) => Promise<void>;
+/**
+ * The admin gate that succeeds when the actor holds **any** of the listed
+ * permission codes. Lives beside the single-permission factory so both shapes
+ * have one declaration.
+ */
+export type RequireAdminAnyFactory = (codes: readonly string[]) => (req: FastifyRequest, reply: FastifyReply) => Promise<void>;
+/**
+ * The slice of `admin_roles`' `PermissionService` the guard needs. Declared
+ * structurally so the kernel does not import a module's service class.
+ */
+export interface AdminPermissionChecker {
+    hasPermission(adminUserId: string, code: string): Promise<boolean>;
+}
+/**
+ * Kernel port — **actor promotion**, registered by `auth` under the container
+ * name `promoteAdminActor`.
+ *
+ * The same split as the two factories above: the kernel owns the type, `auth`
+ * owns the implementation, because promotion reads `request.adminActor` and
+ * writes `request.actor` — two decorations that module's plugin applies and no
+ * platform file may reason about.
+ *
+ * It is here rather than in `@endora-commerce/contracts` for the reason
+ * {@link RequireCustomerGuard} is: the shape is a `FastifyRequest`, and that
+ * package declares no dependency on Fastify. It is deliberately **not** on the
+ * `./kernel` barrel — no module resolves it (the guards `auth` publishes are
+ * what a route surface takes), so `host-package.md` §1.3 classifies it
+ * *unreached* and publishing it would put a host-only name into the platform's
+ * module-facing contract.
+ *
+ * **Why a port at all**, when `auth` also exports the function from its own
+ * `./backend` subpath: `specs/117-instance-bring-up/` FR-030. The production
+ * composition root called the exported function, and
+ * `specs/110-instance-repository/` T118 moves that call site into
+ * `@endora-commerce/platform`, where importing a module is D-52/D-53's
+ * refusal. The container name is the spelling that survives the move, and it is
+ * the drain condition `auth`'s own barrel and
+ * `test/contract/kernel/harness-parity.test.ts` both named — *"actor promotion
+ * published as a port, resolved from the container"*.
+ *
+ * `void` rather than a returned actor, because it mutates the request in place:
+ * every caller reads `request.actor` afterwards, and a return value would be a
+ * second answer to the question the decoration already answers.
+ */
+export type AdminActorPromotion = (req: FastifyRequest) => void;
+//# sourceMappingURL=require-admin.d.ts.map

package/dist/kernel/ports/require-admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-admin.d.ts","sourceRoot":"","sources":["../../../src/kernel/ports/require-admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE5D;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAChC,UAAU,CAAC,EAAE,MAAM,KAChB,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEjE;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG,CACnC,KAAK,EAAE,SAAS,MAAM,EAAE,KACrB,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEjE;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC"}

package/dist/kernel/ports/require-admin.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=require-admin.js.map

package/dist/kernel/ports/require-admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-admin.js","sourceRoot":"","sources":["../../../src/kernel/ports/require-admin.ts"],"names":[],"mappings":""}

package/dist/kernel/ports/require-customer.d.ts

@@ -0,0 +1,17 @@
+import type { FastifyRequest } from 'fastify';
+/**
+ * Kernel port — the customer guard (issue #43), the customer-side twin of
+ * {@link import('./require-admin.js').RequireAdminFactory}.
+ *
+ * The kernel owns the **type**; the `auth` module owns the **implementation**
+ * (`modules/auth/require-customer.ts`), because deciding whether a request
+ * carries a customer session means reading the actor its plugin decorates.
+ *
+ * A guard rather than a factory: there is no permission code to bind, so there
+ * is nothing for a factory to close over. Declared over the request alone so it
+ * is assignable at every `preHandler` site — Fastify passes a reply the guard
+ * has no use for, and a two-parameter type would not be assignable to the
+ * one-parameter shapes several modules already declare.
+ */
+export type RequireCustomerGuard = (req: FastifyRequest) => Promise<void>;
+//# sourceMappingURL=require-customer.d.ts.map

package/dist/kernel/ports/require-customer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-customer.d.ts","sourceRoot":"","sources":["../../../src/kernel/ports/require-customer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/kernel/ports/require-customer.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=require-customer.js.map

package/dist/kernel/ports/require-customer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-customer.js","sourceRoot":"","sources":["../../../src/kernel/ports/require-customer.ts"],"names":[],"mappings":""}

package/dist/kernel/ports/sales-channel.d.ts

@@ -0,0 +1,84 @@
+import type { ChannelMemberEntityType } from '@endora-commerce/contracts';
+import type { CachedChannel } from '../sales-channels/sales-channels-cache.js';
+import type { MembershipMutationOptions, MembershipMutationResult } from '../sales-channels/sales-channel-membership.service.js';
+import type { SalesChannel } from '../sales-channels/sales-channel.entity.js';
+/**
+ * Kernel port — sales-channel resolution and the membership/bridge accessors
+ * (feature 072, D-32; Constitution XII).
+ *
+ * Channel resolution is a platform concern: 49 call sites read the resolved
+ * channel, and the resolution order is a refusal contract, not a module
+ * preference. The resolver, its cache and the bridge accessors move into the
+ * kernel; `sales-channels.service.ts` (the admin CRUD surface, zero external
+ * importers) and `routes.admin.ts` stay in the module.
+ *
+ * Resolution order and refusal behaviour are unchanged by this port: bound
+ * API-key binding → `X-Sales-Channel` header → `?salesChannel=` (ignored on
+ * `/api/v1/admin/*`) → host map → system default. An unknown or inactive channel
+ * refuses and never falls back.
+ */
+export interface SalesChannelResolutionPort {
+    /** Lookup by code; `null` when the code is unknown. */
+    getByCode(code: string): Promise<CachedChannel | null>;
+    /** Every channel, ordered by code. */
+    listAll(): Promise<CachedChannel[]>;
+    /** Lookup by id — a bound API key pins its channel by id, not code. */
+    getById(id: string): Promise<CachedChannel | null>;
+    /** Resolve a code to an *active* channel, distinguishing unknown from inactive. */
+    resolveActive(code: string): Promise<{
+        ok: true;
+        channel: CachedChannel;
+    } | {
+        ok: false;
+        error: 'unknown_sales_channel' | 'inactive_sales_channel';
+        code: string;
+    }>;
+    /**
+     * The system-default channel, used as the storefront/integration fallback.
+     * Never `null` (D-48): exactly one row holds the flag on a booted deployment,
+     * so a caller has nothing to branch on. Throws `NoSystemDefaultChannel` when
+     * the registry has none, which means composition has not run the reconciler.
+     */
+    getSystemDefault(): Promise<CachedChannel>;
+    /** Map a `Host` header onto a channel code via the env-configured host map. */
+    resolveHost(host: string | undefined): string | null;
+}
+/**
+ * The membership bridge tables (`sales_channel_<entity>`). Every module that
+ * scopes its own rows to a channel goes through this rather than writing the
+ * bridge table itself — the sanctioned bridge accessor of Constitution XII.
+ */
+export interface SalesChannelMembershipPort {
+    addToChannel(channelId: string, entityType: ChannelMemberEntityType, entityId: string, options?: MembershipMutationOptions): Promise<MembershipMutationResult>;
+    removeFromChannel(channelId: string, entityType: ChannelMemberEntityType, entityId: string, options?: MembershipMutationOptions): Promise<MembershipMutationResult>;
+    /** Bind an entity to the system-default channel when it belongs to none (FR-008). */
+    bindToDefaultIfEmpty(entityType: ChannelMemberEntityType, entityId: string): Promise<MembershipMutationResult>;
+    /**
+     * Replace an entity's complete channel membership set atomically.
+     * Complete-record integrations use this instead of composing add/remove.
+     */
+    replaceChannelsForEntity(entityType: ChannelMemberEntityType, entityId: string, channelIds: readonly [string, ...string[]], options?: MembershipMutationOptions): Promise<MembershipMutationResult>;
+    /**
+     * Give the target every channel the source belongs to, one audited add per
+     * membership (issue #185). `catalog`'s product duplication is the caller.
+     */
+    copyMemberships(entityType: ChannelMemberEntityType, sourceEntityId: string, targetEntityId: string, options?: MembershipMutationOptions): Promise<{
+        copied: number;
+    }>;
+    /**
+     * Narrow a known set of entity ids to those bound to `channelId`. The
+     * intersection, not the enumeration — see the service's note on why this is
+     * a separate method from {@link listEntityIdsForChannel}.
+     */
+    filterEntityIdsInChannel(channelId: string, entityType: ChannelMemberEntityType, entityIds: readonly string[]): Promise<string[]>;
+    /** Channels an entity currently belongs to. */
+    listChannelsForEntity(entityType: ChannelMemberEntityType, entityId: string): Promise<SalesChannel[]>;
+    /** Entity ids of `entityType` that currently belong to `channelId`. */
+    listEntityIdsForChannel(channelId: string, entityType: ChannelMemberEntityType, page?: number, pageSize?: number): Promise<{
+        entityIds: string[];
+        total: number;
+    }>;
+}
+/** The channel resolved for the current scoped execution, or `null` outside HTTP. */
+export type ResolvedChannel = CachedChannel;
+//# sourceMappingURL=sales-channel.d.ts.map

package/dist/kernel/ports/sales-channel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sales-channel.d.ts","sourceRoot":"","sources":["../../../src/kernel/ports/sales-channel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,KAAK,EACV,yBAAyB,EACzB,wBAAwB,EACzB,MAAM,uDAAuD,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AAE9E;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,0BAA0B;IACzC,uDAAuD;IACvD,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAEvD,sCAAsC;IACtC,OAAO,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAEpC,uEAAuE;IACvE,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAEnD,mFAAmF;IACnF,aAAa,CACX,IAAI,EAAE,MAAM,GACX,OAAO,CACN;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,aAAa,CAAA;KAAE,GACpC;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,uBAAuB,GAAG,wBAAwB,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CACzF,CAAC;IAEF;;;;;OAKG;IACH,gBAAgB,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;IAE3C,+EAA+E;IAC/E,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAAC;CACtD;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,YAAY,CACV,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,uBAAuB,EACnC,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,yBAAyB,GAClC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAErC,iBAAiB,CACf,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,uBAAuB,EACnC,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,yBAAyB,GAClC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAErC,qFAAqF;IACrF,oBAAoB,CAClB,UAAU,EAAE,uBAAuB,EACnC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAErC;;;OAGG;IACH,wBAAwB,CACtB,UAAU,EAAE,uBAAuB,EACnC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,EAC1C,OAAO,CAAC,EAAE,yBAAyB,GAClC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAErC;;;OAGG;IACH,eAAe,CACb,UAAU,EAAE,uBAAuB,EACnC,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,EACtB,OAAO,CAAC,EAAE,yBAAyB,GAClC,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAE/B;;;;OAIG;IACH,wBAAwB,CACtB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,uBAAuB,EACnC,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAErB,+CAA+C;IAC/C,qBAAqB,CACnB,UAAU,EAAE,uBAAuB,EACnC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAE3B,uEAAuE;IACvE,uBAAuB,CACrB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,uBAAuB,EACnC,IAAI,CAAC,EAAE,MAAM,EACb,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpD;AAED,qFAAqF;AACrF,MAAM,MAAM,eAAe,GAAG,aAAa,CAAC"}

package/dist/kernel/ports/sales-channel.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sales-channel.js.map

package/dist/kernel/ports/sales-channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sales-channel.js","sourceRoot":"","sources":["../../../src/kernel/ports/sales-channel.ts"],"names":[],"mappings":""}

package/dist/kernel/ports/settings.d.ts

@@ -0,0 +1,59 @@
+import type { z } from 'zod';
+/**
+ * Kernel port — settings read (feature 072, D-32).
+ *
+ * The settings **store** (entities, resolver, cache, secret codec and the
+ * manifest reconciler) is kernel-owned: boot and lifecycle gating both need it.
+ * The admin service, its routes and the storefront resolvers stay in the
+ * `settings` module.
+ *
+ * **Why this port is read-only, against `tasks.md` T014's "read/write".** There
+ * are exactly two writers of a setting value in the tree and neither belongs
+ * behind a kernel port:
+ *
+ *  - `settings/services/settings-admin.service.ts` — the audited, optimistically
+ *    locked, channel-subset-aware admin write. It carries an `AdminAuditContext`
+ *    and the module-activation policy, so it is module-owned by D-32 and stays
+ *    on the module's own surface.
+ *  - `kernel/settings/manifest-reconciler.ts` — kernel-internal since T018, and
+ *    a component does not reach itself through a port.
+ *
+ * Inventing a third, portable write shape would be a speculative abstraction
+ * with no caller. When a cross-module write appears, it goes here.
+ */
+export interface SettingsReadPort {
+    /**
+     * Read one setting and validate it against the caller's schema.
+     *
+     * `salesChannelId` is a channel uuid for a channel-scoped read, or **`null`
+     * for a platform-wide read** — `settings.global_value ?? default_value`,
+     * skipping `setting_values` entirely (feature 072, D-41). `null` is not a
+     * degraded mode: it is what a reader that is not per-storefront says, and
+     * giving that tier a spelling is what removed the sentinels three modules had
+     * invented for it.
+     *
+     * @throws `SettingNotRegistered` when no setting carries `code`.
+     * @throws `SettingOutOfScopeForChannel` when the setting is scoped to other
+     *   channels — including a platform-wide read of a channel-subset setting.
+     * @throws `SettingValueShapeMismatch` when the stored value fails `schema`.
+     * @throws `SettingsChannelIdInvalid` when `salesChannelId` is a non-null
+     *   string that is not a channel uuid.
+     */
+    get<T>(code: string, salesChannelId: string | null, schema: z.ZodType<T>): Promise<T>;
+    /**
+     * Batch read. Every code resolves independently, so one missing code does not
+     * poison the batch — per-code failures come back as `{ ok: false, error }`.
+     * A malformed `salesChannelId` is not a per-code failure and propagates.
+     */
+    getMany(codes: string[], salesChannelId: string | null): Promise<Map<string, SettingsReadResult<unknown>>>;
+}
+/** One entry of a {@link SettingsReadPort.getMany} result. */
+export type SettingsReadResult<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    error: 'not_registered' | 'out_of_scope' | 'shape_mismatch';
+    details?: unknown;
+};
+//# sourceMappingURL=settings.d.ts.map

package/dist/kernel/ports/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../../src/kernel/ports/settings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;;;;;;;;OAgBG;IACH,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAEtF;;;;OAIG;IACH,OAAO,CACL,KAAK,EAAE,MAAM,EAAE,EACf,cAAc,EAAE,MAAM,GAAG,IAAI,GAC5B,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CACtD;AAED,8DAA8D;AAC9D,MAAM,MAAM,kBAAkB,CAAC,CAAC,IAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACtB;IACE,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,gBAAgB,GAAG,cAAc,GAAG,gBAAgB,CAAC;IAC5D,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC"}

package/dist/kernel/ports/settings.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=settings.js.map

package/dist/kernel/ports/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../../src/kernel/ports/settings.ts"],"names":[],"mappings":""}