@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.11

package/dist/settings/registry/user-settings-namespace.js

@@ -0,0 +1,108 @@
+"use strict";
+// =============================================================================
+// User settings namespace registry (issue #677, PP-1.5)
+// =============================================================================
+//
+// The OPTIONAL namespaces of `user_settings.value` (`dataTables`, `navigation`,
+// `notifications`, `ai`, and any an app adds), each declared once beside the
+// module that owns it as one `UserSettingsNamespace`. `theme` and `profile` are
+// core fields, not namespaces: the DTO files and `composed.ts` place them
+// ahead of every namespace.
+//
+// ABSENT IS INFORMATION. A user namespace is always `.optional()` in the
+// stored shape and never `.default()` anywhere (registration refuses one): an
+// absent namespace means "use the built-in defaults", and materialising it
+// would freeze a user at today's defaults (see the header of
+// `common/schemas/user-settings-namespaces.schema.ts`).
+//
+// Framework-free: zod and the registry primitive only. Moved from the
+// reference app into `@marinoscar/platform-api/settings` by #733. Recipe: the
+// slice README (../README.md).
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.userSettingsNamespaceRegistry = exports.RESERVED_USER_SETTINGS_KEYS = void 0;
+exports.registerUserSettingsNamespaces = registerUserSettingsNamespaces;
+const index_1 = require("../../core/index");
+const secret_fields_1 = require("./secret-fields");
+const schema_walk_1 = require("./schema-walk");
+const system_settings_namespace_1 = require("./system-settings-namespace");
+/**
+ * Top-level keys the stored value or the response reserve for core fields.
+ *
+ * @stability stable
+ */
+exports.RESERVED_USER_SETTINGS_KEYS = ['theme', 'profile', 'updatedAt', 'version'];
+function validateUserNamespace(ns) {
+    if (typeof ns.description !== 'string' || ns.description.trim() === '') {
+        throw new Error('description is required');
+    }
+    for (const field of ['schema', 'patchSchema']) {
+        if (!(0, schema_walk_1.isZodSchema)(ns[field]))
+            throw new Error(`${field} must be a zod schema`);
+    }
+    for (const field of ['putSchema', 'wirePatchSchema']) {
+        if (ns[field] !== undefined && !(0, schema_walk_1.isZodSchema)(ns[field]))
+            throw new Error(`${field} must be a zod schema when set`);
+    }
+    if (ns.responseSchema !== undefined && ns.responseSchema !== null && !(0, schema_walk_1.isZodSchema)(ns.responseSchema)) {
+        throw new Error('responseSchema must be a zod schema, null, or left out');
+    }
+    if (typeof ns.merge !== 'function')
+        throw new Error('merge is required');
+    if (ns.assertLimits !== undefined && typeof ns.assertLimits !== 'function') {
+        throw new Error('assertLimits must be a function');
+    }
+    if (exports.RESERVED_USER_SETTINGS_KEYS.includes(ns.key)) {
+        throw new Error(`"${ns.key}" is a core field of user settings, not a namespace`);
+    }
+    if (ns.forbiddenKeys !== undefined && (!Array.isArray(ns.forbiddenKeys) || ns.forbiddenKeys.some((k) => typeof k !== 'string'))) {
+        throw new Error('forbiddenKeys must be an array of field names');
+    }
+    const denied = [...secret_fields_1.SETTINGS_SECRET_FIELD_NAMES, ...(ns.forbiddenKeys ?? [])];
+    for (const field of ['schema', 'patchSchema', 'putSchema', 'wirePatchSchema', 'responseSchema']) {
+        const defaults = (0, schema_walk_1.findDefaultPaths)(ns[field]);
+        if (defaults.length > 0) {
+            throw new Error(`${field} carries .default() at ${defaults.join(', ')}; a user namespace must stay absent until the user chooses (see user-settings-namespaces.schema.ts)`);
+        }
+        const secrets = (0, schema_walk_1.findSecretFieldPaths)(ns[field], denied);
+        if (secrets.length > 0)
+            throw new Error((0, secret_fields_1.secretFieldMessage)(field, secrets, 'user'));
+    }
+}
+/**
+ * The optional user settings namespaces, in registration order: the order of
+ * every composed user-settings schema and of the OpenAPI document. Filled by
+ * the app at import time (the reference app's
+ * `settings/registry/user-settings.manifest.ts`), before
+ * `SettingsModule.forRoot()` composes the request bodies from it.
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+exports.userSettingsNamespaceRegistry = (0, index_1.defineRegistry)({
+    name: 'user-settings-namespaces',
+    idOf: (ns) => ns.key,
+    idPattern: system_settings_namespace_1.SETTINGS_NAMESPACE_KEY_PATTERN,
+    validate: (ns) => validateUserNamespace(ns),
+    describeDuplicate: (_existing, incoming) => `User settings namespace "${incoming.key}" is already registered. Extend it with extendUserSettingsNamespace instead of registering it twice.`,
+});
+/**
+ * Registers user namespaces, all or nothing. Registration order is the
+ * composed schemas' key order and the OpenAPI document's: append, never insert.
+ *
+ * @param namespaces - the declarations, in order.
+ * @throws RegistryError naming the entry when one is invalid (a duplicate or
+ *   reserved key, a `.default()`, a secret-named field).
+ *
+ * @example
+ * ```ts
+ * registerUserSettingsNamespaces([DATA_TABLES_USER_SETTINGS, NAVIGATION_USER_SETTINGS]);
+ * ```
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+function registerUserSettingsNamespaces(namespaces) {
+    exports.userSettingsNamespaceRegistry.registerAll(namespaces);
+}
+//# sourceMappingURL=user-settings-namespace.js.map

package/dist/settings/registry/user-settings-namespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-settings-namespace.js","sourceRoot":"","sources":["../../../src/settings/registry/user-settings-namespace.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,wDAAwD;AACxD,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,6EAA6E;AAC7E,gFAAgF;AAChF,0EAA0E;AAC1E,4BAA4B;AAC5B,EAAE;AACF,yEAAyE;AACzE,8EAA8E;AAC9E,2EAA2E;AAC3E,6DAA6D;AAC7D,wDAAwD;AACxD,EAAE;AACF,sEAAsE;AACtE,8EAA8E;AAC9E,+BAA+B;AAC/B,gFAAgF;;;AAoJhF,wEAEC;AAlJD,4CAAkD;AAClD,mDAAkF;AAClF,+CAAoF;AACpF,2EAA6E;AA8D7E;;;;GAIG;AACU,QAAA,2BAA2B,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,CAAU,CAAC;AAEjG,SAAS,qBAAqB,CAAC,EAAyB;IACtD,IAAI,OAAO,EAAE,CAAC,WAAW,KAAK,QAAQ,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAU,EAAE,CAAC;QACvD,IAAI,CAAC,IAAA,yBAAW,EAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;IAChF,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAU,EAAE,CAAC;QAC9D,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,CAAC,IAAA,yBAAW,EAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IACpH,CAAC;IACD,IAAI,EAAE,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,IAAA,yBAAW,EAAC,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;QACrG,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,EAAE,CAAC,KAAK,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACzE,IAAI,EAAE,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,EAAE,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,IAAK,mCAAiD,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,qDAAqD,CAAC,CAAC;IACnF,CAAC;IAED,IAAI,EAAE,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,EAAE,CAAC;QAChI,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,2CAA2B,EAAE,GAAG,CAAC,EAAE,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7E,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,iBAAiB,EAAE,gBAAgB,CAAU,EAAE,CAAC;QACzG,MAAM,QAAQ,GAAG,IAAA,8BAAgB,EAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,0BAA0B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,qGAAqG,CAC3J,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAA,kCAAoB,EAAC,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QACxD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,IAAA,kCAAkB,EAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACU,QAAA,6BAA6B,GAAG,IAAA,sBAAc,EAAwB;IACjF,IAAI,EAAE,0BAA0B;IAChC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG;IACpB,SAAS,EAAE,0DAA8B;IACzC,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,qBAAqB,CAAC,EAAE,CAAC;IAC3C,iBAAiB,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,CACzC,4BAA4B,QAAQ,CAAC,GAAG,sGAAsG;CACjJ,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,8BAA8B,CAAC,UAA4C;IACzF,qCAA6B,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;AACxD,CAAC"}

package/dist/settings/row-store.d.ts

@@ -0,0 +1,85 @@
+import { z } from 'zod';
+import type { SettingsPrisma } from './data/settings-db';
+import { type ResolvedSettingsModuleOptions } from './settings.options';
+/**
+ * One row read through the store.
+ *
+ * @typeParam T - the row's value type.
+ *
+ * @stability experimental
+ */
+export interface SystemSettingsRowSnapshot<T> {
+    /** The value (validated, or the defaults). */
+    value: T;
+    /** The row version; `0` while the row does not exist. */
+    version: number;
+    /** When the row last changed, or `null` while it does not exist. */
+    updatedAt: Date | null;
+    /** Who last changed it, or `null`. */
+    updatedByUserId: string | null;
+}
+/**
+ * How a write is attributed and guarded.
+ *
+ * @stability experimental
+ */
+export interface SystemSettingsRowWriteOptions<T> {
+    /** The acting user; `null` for system work. */
+    actorId: string | null;
+    /** The expected version (`If-Match`); omit to write unconditionally. `0` matches a missing row. */
+    ifMatch?: number;
+    /** The schema the value must satisfy; it is parsed (and stripped) before the write. */
+    schema: z.ZodType<T>;
+    /** The audit action; default `system_settings:<key>:write`. */
+    auditAction?: string;
+    /**
+     * Extra, NON-SECRET fields for the audit event's `meta`, merged under the
+     * store's own `key` and `version` (issue #737: the email slice records the
+     * new value and which credentials changed, never their material).
+     */
+    auditMeta?: Record<string, unknown>;
+}
+/**
+ * Reads and writes a slice's own `system_settings` row by key. Exported by
+ * `SettingsModule`.
+ *
+ * @example
+ * ```ts
+ * const { value, version } = await rows.read('email', emailSettingsSchema, EMAIL_DEFAULTS);
+ * await rows.write('email', next, { actorId: userId, ifMatch: version, schema: emailSettingsSchema });
+ * ```
+ *
+ * @extensionPoint token
+ * @stability experimental
+ */
+export declare class SystemSettingsRowStore {
+    private readonly prisma;
+    private readonly mainRowKey;
+    constructor(prisma: SettingsPrisma, options?: ResolvedSettingsModuleOptions);
+    /**
+     * Reads the row `key`. Never creates it. A missing row, or a stored value
+     * that fails `schema`, reads as `defaults` (an object schema degrades field
+     * by field: a field that fails keeps its default, the others survive).
+     *
+     * @param key - the row's key (not the main row's).
+     * @param schema - the value's schema.
+     * @param defaults - what a missing or unusable value reads as.
+     * @returns the value and the row's version metadata.
+     */
+    read<T>(key: string, schema: z.ZodType<T>, defaults: T): Promise<SystemSettingsRowSnapshot<T>>;
+    /**
+     * Writes the row `key` (creating it at version 1), after validating `value`
+     * against `options.schema`, and audits the write.
+     *
+     * @param key - the row's key (not the main row's).
+     * @param value - the new value.
+     * @param options - the actor, the `If-Match` version and the schema.
+     * @returns the written value and version metadata.
+     * @throws BadRequestException when the value fails the schema or names a secret field.
+     * @throws ConflictException on a stale `ifMatch`.
+     */
+    write<T>(key: string, value: T, options: SystemSettingsRowWriteOptions<T>): Promise<SystemSettingsRowSnapshot<T>>;
+    private assertKey;
+    private salvage;
+}
+//# sourceMappingURL=row-store.d.ts.map

package/dist/settings/row-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"row-store.d.ts","sourceRoot":"","sources":["../../src/settings/row-store.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,cAAc,EAA6B,MAAM,oBAAoB,CAAC;AAIpF,OAAO,EAA8C,KAAK,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AAEpH;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB,CAAC,CAAC;IAC1C,8CAA8C;IAC9C,KAAK,EAAE,CAAC,CAAC;IACT,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,sCAAsC;IACtC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;;;;GAIG;AACH,MAAM,WAAW,6BAA6B,CAAC,CAAC;IAC9C,+CAA+C;IAC/C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,mGAAmG;IACnG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uFAAuF;IACvF,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACrB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAOD;;;;;;;;;;;;GAYG;AACH,qBACa,sBAAsB;IAIN,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHlD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAGQ,MAAM,EAAE,cAAc,EAC1B,OAAO,CAAC,EAAE,6BAA6B;IAK/E;;;;;;;;;OASG;IACG,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;IAWpG;;;;;;;;;;OAUG;IACG,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,6BAA6B,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;IA4CvH,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,OAAO;CAchB"}

package/dist/settings/row-store.js

@@ -0,0 +1,168 @@
+"use strict";
+// =============================================================================
+// SystemSettingsRowStore: a slice's own `system_settings` row (issue #733)
+// =============================================================================
+//
+// Some configuration has its own lifecycle, provenance or secrets and does not
+// belong in the namespaces document: the email transport (`key = 'email'`),
+// the telemetry store's connection (`telemetry_connection`), and the rows a
+// slice adds later. Each lives in a `system_settings` row of its own, so it
+// cannot be clobbered by the main row, keeps its fields out of
+// `GET /api/system-settings`, and has its own version counter for `If-Match`
+// (docs/API.md, "Optimistic Concurrency": a missing row is version 0).
+//
+// The store validates on the way in and degrades on the way out (a value
+// that fails its schema reads as the defaults, field by field for an object
+// schema), refuses the main row's key, and audits every write. It holds no
+// secret: put the secret half in `CredentialsService` and store only the
+// non-secret half here. Which pages share which row's version is the slice's
+// decision; the store does not change it.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SystemSettingsRowStore = void 0;
+const common_1 = require("@nestjs/common");
+const zod_1 = require("zod");
+const index_1 = require("../core/index");
+const org_layer_1 = require("./org-settings/org-layer");
+const secret_fields_1 = require("./registry/secret-fields");
+const schema_walk_1 = require("./registry/schema-walk");
+const settings_options_1 = require("./settings.options");
+// Lower snake_case or lower camelCase: the Web Push row has been `webPush`
+// since #355, and a persisted row key is never renamed (#738 moved its writes
+// onto this store).
+const ROW_KEY = /^[a-z][a-zA-Z0-9_]{0,62}$/;
+/**
+ * Reads and writes a slice's own `system_settings` row by key. Exported by
+ * `SettingsModule`.
+ *
+ * @example
+ * ```ts
+ * const { value, version } = await rows.read('email', emailSettingsSchema, EMAIL_DEFAULTS);
+ * await rows.write('email', next, { actorId: userId, ifMatch: version, schema: emailSettingsSchema });
+ * ```
+ *
+ * @extensionPoint token
+ * @stability experimental
+ */
+let SystemSettingsRowStore = class SystemSettingsRowStore {
+    prisma;
+    mainRowKey;
+    constructor(prisma, options) {
+        this.prisma = prisma;
+        this.mainRowKey = (options ?? settings_options_1.DEFAULT_SETTINGS_OPTIONS).systemRowKey;
+    }
+    /**
+     * Reads the row `key`. Never creates it. A missing row, or a stored value
+     * that fails `schema`, reads as `defaults` (an object schema degrades field
+     * by field: a field that fails keeps its default, the others survive).
+     *
+     * @param key - the row's key (not the main row's).
+     * @param schema - the value's schema.
+     * @param defaults - what a missing or unusable value reads as.
+     * @returns the value and the row's version metadata.
+     */
+    async read(key, schema, defaults) {
+        this.assertKey(key);
+        const row = await this.prisma.systemSettings.findUnique({ where: { key } });
+        return {
+            value: row ? this.salvage(row.value, schema, defaults) : structuredClone(defaults),
+            version: row?.version ?? 0,
+            updatedAt: row?.updatedAt ?? null,
+            updatedByUserId: row?.updatedByUserId ?? null,
+        };
+    }
+    /**
+     * Writes the row `key` (creating it at version 1), after validating `value`
+     * against `options.schema`, and audits the write.
+     *
+     * @param key - the row's key (not the main row's).
+     * @param value - the new value.
+     * @param options - the actor, the `If-Match` version and the schema.
+     * @returns the written value and version metadata.
+     * @throws BadRequestException when the value fails the schema or names a secret field.
+     * @throws ConflictException on a stale `ifMatch`.
+     */
+    async write(key, value, options) {
+        this.assertKey(key);
+        const secrets = (0, schema_walk_1.findSecretFieldPaths)(options.schema, secret_fields_1.SETTINGS_SECRET_FIELD_NAMES);
+        if (secrets.length > 0) {
+            throw new common_1.BadRequestException(`The "${key}" row schema declares secret-named field(s) ${secrets.join(', ')}; store secrets with CredentialsService.`);
+        }
+        const parsed = options.schema.safeParse(value);
+        if (!parsed.success) {
+            throw new common_1.BadRequestException(`Invalid "${key}" settings: ${parsed.error.issues.map((issue) => `${issue.path.join('.')}: ${issue.message}`).join('; ')}`);
+        }
+        const existing = await this.prisma.systemSettings.findUnique({
+            where: { key },
+            select: { version: true },
+        });
+        const currentVersion = existing?.version ?? 0;
+        if (options.ifMatch !== undefined && options.ifMatch !== currentVersion) {
+            throw new common_1.ConflictException(`Settings "${key}" version mismatch. Expected ${options.ifMatch}, found ${currentVersion}`);
+        }
+        const row = await this.prisma.systemSettings.upsert({
+            where: { key },
+            update: { value: parsed.data, updatedByUserId: options.actorId, version: { increment: 1 } },
+            create: { key, value: parsed.data, updatedByUserId: options.actorId },
+        });
+        await this.prisma.auditEvent.create({
+            data: {
+                actorUserId: options.actorId,
+                action: options.auditAction ?? `system_settings:${key}:write`,
+                targetType: 'system_settings',
+                targetId: row.id,
+                meta: { ...(options.auditMeta ?? {}), key, version: row.version },
+            },
+        });
+        return {
+            value: parsed.data,
+            version: row.version,
+            updatedAt: row.updatedAt,
+            updatedByUserId: row.updatedByUserId,
+        };
+    }
+    assertKey(key) {
+        if (!ROW_KEY.test(key))
+            throw new Error(`SystemSettingsRowStore: ${JSON.stringify(key)} is not a row key.`);
+        if (key === this.mainRowKey) {
+            throw new Error(`SystemSettingsRowStore: "${key}" is the main settings row; register a namespace (registerSystemSettingsNamespaces) instead of writing it as a row.`);
+        }
+    }
+    salvage(stored, schema, defaults) {
+        const whole = schema.safeParse(stored);
+        if (whole.success)
+            return whole.data;
+        if (!(schema instanceof zod_1.z.ZodObject))
+            return structuredClone(defaults);
+        const source = (0, org_layer_1.asPlainObject)(stored) ?? {};
+        const fallback = ((0, org_layer_1.asPlainObject)(defaults) ?? {});
+        const value = {};
+        for (const [field, fieldSchema] of Object.entries(schema.shape)) {
+            const parsed = fieldSchema.safeParse(source[field]);
+            value[field] = parsed.success ? parsed.data : structuredClone(fallback[field]);
+        }
+        const again = schema.safeParse(value);
+        return again.success ? again.data : structuredClone(defaults);
+    }
+};
+exports.SystemSettingsRowStore = SystemSettingsRowStore;
+exports.SystemSettingsRowStore = SystemSettingsRowStore = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(index_1.PLATFORM_PRISMA)),
+    __param(1, (0, common_1.Optional)()),
+    __param(1, (0, common_1.Inject)(settings_options_1.SETTINGS_OPTIONS)),
+    __metadata("design:paramtypes", [Object, Object])
+], SystemSettingsRowStore);
+//# sourceMappingURL=row-store.js.map

package/dist/settings/row-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"row-store.js","sourceRoot":"","sources":["../../src/settings/row-store.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,2EAA2E;AAC3E,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,4EAA4E;AAC5E,4EAA4E;AAC5E,4EAA4E;AAC5E,+DAA+D;AAC/D,6EAA6E;AAC7E,uEAAuE;AACvE,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,2EAA2E;AAC3E,yEAAyE;AACzE,6EAA6E;AAC7E,0CAA0C;AAC1C,gFAAgF;;;;;;;;;;;;;;;AAEhF,2CAAsG;AACtG,6BAAwB;AAExB,yCAAgD;AAEhD,wDAAyD;AACzD,4DAAuE;AACvE,wDAA8D;AAC9D,yDAAoH;AA0CpH,2EAA2E;AAC3E,8EAA8E;AAC9E,oBAAoB;AACpB,MAAM,OAAO,GAAG,2BAA2B,CAAC;AAE5C;;;;;;;;;;;;GAYG;AAEI,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IAIW;IAH3B,UAAU,CAAS;IAEpC,YAC4C,MAAsB,EAC1B,OAAuC;QADnC,WAAM,GAAN,MAAM,CAAgB;QAGhE,IAAI,CAAC,UAAU,GAAG,CAAC,OAAO,IAAI,2CAAwB,CAAC,CAAC,YAAY,CAAC;IACvE,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,IAAI,CAAI,GAAW,EAAE,MAAoB,EAAE,QAAW;QAC1D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACpB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,CAA4B,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACvG,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC;YAClF,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,CAAC;YAC1B,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;YACjC,eAAe,EAAE,GAAG,EAAE,eAAe,IAAI,IAAI;SAC9C,CAAC;IACJ,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,KAAK,CAAI,GAAW,EAAE,KAAQ,EAAE,OAAyC;QAC7E,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACpB,MAAM,OAAO,GAAG,IAAA,kCAAoB,EAAC,OAAO,CAAC,MAAM,EAAE,2CAA2B,CAAC,CAAC;QAClF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,4BAAmB,CAC3B,QAAQ,GAAG,+CAA+C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,0CAA0C,CACvH,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,4BAAmB,CAC3B,YAAY,GAAG,eAAe,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3H,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAsB;YAChF,KAAK,EAAE,EAAE,GAAG,EAAE;YACd,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,QAAQ,EAAE,OAAO,IAAI,CAAC,CAAC;QAC9C,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,KAAK,cAAc,EAAE,CAAC;YACxE,MAAM,IAAI,0BAAiB,CAAC,aAAa,GAAG,gCAAgC,OAAO,CAAC,OAAO,WAAW,cAAc,EAAE,CAAC,CAAC;QAC1H,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAA4B;YAC7E,KAAK,EAAE,EAAE,GAAG,EAAE;YACd,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,IAAa,EAAE,eAAe,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;YACpG,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,IAAa,EAAE,eAAe,EAAE,OAAO,CAAC,OAAO,EAAE;SAC/E,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YAClC,IAAI,EAAE;gBACJ,WAAW,EAAE,OAAO,CAAC,OAAO;gBAC5B,MAAM,EAAE,OAAO,CAAC,WAAW,IAAI,mBAAmB,GAAG,QAAQ;gBAC7D,UAAU,EAAE,iBAAiB;gBAC7B,QAAQ,EAAE,GAAG,CAAC,EAAE;gBAChB,IAAI,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAW;aAC3E;SACF,CAAC,CAAC;QACH,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,IAAI;YAClB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,eAAe,EAAE,GAAG,CAAC,eAAe;SACrC,CAAC;IACJ,CAAC;IAEO,SAAS,CAAC,GAAW;QAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAC5G,IAAI,GAAG,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,4BAA4B,GAAG,qHAAqH,CACrJ,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,OAAO,CAAI,MAAe,EAAE,MAAoB,EAAE,QAAW;QACnE,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC;QACrC,IAAI,CAAC,CAAC,MAAM,YAAY,OAAC,CAAC,SAAS,CAAC;YAAE,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,IAAA,yBAAa,EAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,CAAC,IAAA,yBAAa,EAAC,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC5E,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAkC,CAAC,EAAE,CAAC;YAC7F,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACpD,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAE,KAAK,CAAC,IAAU,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IACvE,CAAC;CACF,CAAA;AA7GY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;IACvB,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,mCAAgB,CAAC,CAAA;;GAL5B,sBAAsB,CA6GlC"}

package/dist/settings/settings-resolver.d.ts

@@ -0,0 +1,48 @@
+import type { SettingsPrisma } from './data/settings-db';
+import { OrgSettingsService } from './org-settings/org-settings.service';
+import { SystemSettingsService } from './system-settings/system-settings.service';
+/**
+ * Resolves a setting through the layers: system, then organization, then
+ * user. Injected from `SettingsModule` (exported).
+ *
+ * @example
+ * ```ts
+ * const ai = await this.settings.resolveSystem<SystemAiValue>('ai', { orgId: principal.activeOrgId });
+ * const tables = await this.settings.resolveUser<DataTablesValue>('dataTables', userId);
+ * ```
+ *
+ * @extensionPoint token
+ * @stability stable
+ */
+export declare class SettingsResolver {
+    private readonly systemSettings;
+    private readonly orgSettings;
+    private readonly prisma;
+    constructor(systemSettings: SystemSettingsService, orgSettings: OrgSettingsService, prisma: SettingsPrisma);
+    /**
+     * The value of a system namespace, merged with the organization layer when
+     * the namespace declares one and `scope.orgId` is set.
+     *
+     * @param key - a registered system namespace key.
+     * @param scope - the organization, when the caller acts inside one.
+     * @returns the effective value.
+     * @throws Error when `key` is not a registered system namespace.
+     */
+    resolveSystem<T>(key: string, scope?: {
+        orgId?: string;
+    }): Promise<T>;
+    /**
+     * One user's value of a user namespace (or of a core field, `theme` or
+     * `profile`). An absent namespace resolves to `undefined`, which means
+     * "apply the built-in defaults", exactly as `GET /api/user-settings` omits
+     * it; a stored value that no longer validates resolves to `undefined` too.
+     * A missing row resolves the core fields to their defaults.
+     *
+     * @param key - a registered user namespace key, `theme` or `profile`.
+     * @param userId - the user.
+     * @returns the stored value, or `undefined`.
+     * @throws Error when `key` is neither a core field nor a registered user namespace.
+     */
+    resolveUser<T>(key: string, userId: string): Promise<T | undefined>;
+}
+//# sourceMappingURL=settings-resolver.d.ts.map

package/dist/settings/settings-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-resolver.d.ts","sourceRoot":"","sources":["../../src/settings/settings-resolver.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAIzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAGlF;;;;;;;;;;;;GAYG;AACH,qBACa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,WAAW;IACH,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAF/B,cAAc,EAAE,qBAAqB,EACrC,WAAW,EAAE,kBAAkB,EACN,MAAM,EAAE,cAAc;IAGlE;;;;;;;;OAQG;IACG,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAQ/E;;;;;;;;;;;OAWG;IACG,WAAW,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;CAe1E"}

package/dist/settings/settings-resolver.js

@@ -0,0 +1,127 @@
+"use strict";
+// =============================================================================
+// SettingsResolver: system, then org, then user (issue #733, PP-8.1)
+// =============================================================================
+//
+// The ONE read every slice should use for "what is this setting, here?":
+//
+//   resolveSystem(key, { orgId })  the deployment-wide value of a system
+//                                  namespace, with the organization's
+//                                  overrides applied when the namespace
+//                                  declares an `org` block and the
+//                                  organization stored some
+//   resolveUser(key, userId)       one user's value of a user namespace (or
+//                                  a core field: `theme`, `profile`)
+//
+// Neither creates a row (a read path never writes), and both degrade a
+// damaged stored value exactly as the services do: the system document field
+// by field to the namespace defaults, an org override field by field (a field
+// that no longer validates is ignored), a user namespace to absent.
+//
+// SINGLE-ORG MODE. With `orgLayer: 'auto'` (the default) the org layer applies
+// wherever an organization has a row. A single-org deployment that never wrote
+// one resolves exactly to `SystemSettingsService`'s output (pinned by the
+// parity test of the slice's conformance suite).
+//
+// NO CACHE: one read per call, as before the move. A cache would have to be
+// invalidated on every write across replicas (the event bus); add one only
+// with a test that shows a regression.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SettingsResolver = void 0;
+const common_1 = require("@nestjs/common");
+const index_1 = require("../core/index");
+const org_settings_service_1 = require("./org-settings/org-settings.service");
+const org_layer_1 = require("./org-settings/org-layer");
+const system_settings_namespace_1 = require("./registry/system-settings-namespace");
+const user_settings_namespace_1 = require("./registry/user-settings-namespace");
+const system_settings_service_1 = require("./system-settings/system-settings.service");
+const user_settings_service_1 = require("./user-settings/user-settings.service");
+/**
+ * Resolves a setting through the layers: system, then organization, then
+ * user. Injected from `SettingsModule` (exported).
+ *
+ * @example
+ * ```ts
+ * const ai = await this.settings.resolveSystem<SystemAiValue>('ai', { orgId: principal.activeOrgId });
+ * const tables = await this.settings.resolveUser<DataTablesValue>('dataTables', userId);
+ * ```
+ *
+ * @extensionPoint token
+ * @stability stable
+ */
+let SettingsResolver = class SettingsResolver {
+    systemSettings;
+    orgSettings;
+    prisma;
+    constructor(systemSettings, orgSettings, prisma) {
+        this.systemSettings = systemSettings;
+        this.orgSettings = orgSettings;
+        this.prisma = prisma;
+    }
+    /**
+     * The value of a system namespace, merged with the organization layer when
+     * the namespace declares one and `scope.orgId` is set.
+     *
+     * @param key - a registered system namespace key.
+     * @param scope - the organization, when the caller acts inside one.
+     * @returns the effective value.
+     * @throws Error when `key` is not a registered system namespace.
+     */
+    async resolveSystem(key, scope = {}) {
+        const ns = system_settings_namespace_1.systemSettingsNamespaceRegistry.require(key);
+        const system = (await this.systemSettings.readNamespaceValue(key));
+        if (!ns.org || !scope.orgId || !this.orgSettings.isEnabled())
+            return system;
+        const orgFields = await this.orgSettings.getNamespace(scope.orgId, key);
+        return (0, org_layer_1.applyOrgLayer)(ns, system, orgFields).value;
+    }
+    /**
+     * One user's value of a user namespace (or of a core field, `theme` or
+     * `profile`). An absent namespace resolves to `undefined`, which means
+     * "apply the built-in defaults", exactly as `GET /api/user-settings` omits
+     * it; a stored value that no longer validates resolves to `undefined` too.
+     * A missing row resolves the core fields to their defaults.
+     *
+     * @param key - a registered user namespace key, `theme` or `profile`.
+     * @param userId - the user.
+     * @returns the stored value, or `undefined`.
+     * @throws Error when `key` is neither a core field nor a registered user namespace.
+     */
+    async resolveUser(key, userId) {
+        const isCore = key === 'theme' || key === 'profile';
+        const ns = isCore ? undefined : user_settings_namespace_1.userSettingsNamespaceRegistry.require(key);
+        const row = await this.prisma.userSettings.findUnique({
+            where: { userId },
+            select: { value: true },
+        });
+        const stored = (0, org_layer_1.asPlainObject)(row?.value)?.[key];
+        if (isCore) {
+            return (stored ?? user_settings_service_1.DEFAULT_USER_SETTINGS[key]);
+        }
+        if (stored === undefined)
+            return undefined;
+        const parsed = ns.schema.safeParse(stored);
+        return parsed.success ? parsed.data : undefined;
+    }
+};
+exports.SettingsResolver = SettingsResolver;
+exports.SettingsResolver = SettingsResolver = __decorate([
+    (0, common_1.Injectable)(),
+    __param(2, (0, common_1.Inject)(index_1.PLATFORM_PRISMA)),
+    __metadata("design:paramtypes", [system_settings_service_1.SystemSettingsService,
+        org_settings_service_1.OrgSettingsService, Object])
+], SettingsResolver);
+//# sourceMappingURL=settings-resolver.js.map

package/dist/settings/settings-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-resolver.js","sourceRoot":"","sources":["../../src/settings/settings-resolver.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,qEAAqE;AACrE,gFAAgF;AAChF,EAAE;AACF,yEAAyE;AACzE,EAAE;AACF,yEAAyE;AACzE,sEAAsE;AACtE,wEAAwE;AACxE,mEAAmE;AACnE,4DAA4D;AAC5D,4EAA4E;AAC5E,qEAAqE;AACrE,EAAE;AACF,uEAAuE;AACvE,6EAA6E;AAC7E,8EAA8E;AAC9E,oEAAoE;AACpE,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,0EAA0E;AAC1E,iDAAiD;AACjD,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,uCAAuC;AACvC,gFAAgF;;;;;;;;;;;;;;;AAEhF,2CAAoD;AAEpD,yCAAgD;AAEhD,8EAAyE;AACzE,wDAAwE;AACxE,oFAAuF;AACvF,gFAAmF;AACnF,uFAAkF;AAClF,iFAA8E;AAE9E;;;;;;;;;;;;GAYG;AAEI,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAER;IACA;IACyB;IAH5C,YACmB,cAAqC,EACrC,WAA+B,EACN,MAAsB;QAF/C,mBAAc,GAAd,cAAc,CAAuB;QACrC,gBAAW,GAAX,WAAW,CAAoB;QACN,WAAM,GAAN,MAAM,CAAgB;IAC/D,CAAC;IAEJ;;;;;;;;OAQG;IACH,KAAK,CAAC,aAAa,CAAI,GAAW,EAAE,QAA4B,EAAE;QAChE,MAAM,EAAE,GAAG,2DAA+B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAM,CAAC;QACxE,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE;YAAE,OAAO,MAAM,CAAC;QAC5E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACxE,OAAO,IAAA,yBAAa,EAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC;IACpD,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,WAAW,CAAI,GAAW,EAAE,MAAc;QAC9C,MAAM,MAAM,GAAG,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,SAAS,CAAC;QACpD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uDAA6B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAqB;YACxE,KAAK,EAAE,EAAE,MAAM,EAAE;YACjB,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,yBAAa,EAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,IAAK,6CAA4D,CAAC,GAAG,CAAC,CAAM,CAAC;QAC7F,CAAC;QACD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,MAAM,MAAM,GAAG,EAAG,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,MAAM,CAAC,IAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,CAAC;CACF,CAAA;AAnDY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;qCAFS,+CAAqB;QACxB,yCAAkB;GAHvC,gBAAgB,CAmD5B"}

package/dist/settings/settings.module.d.ts

@@ -0,0 +1,35 @@
+import { DynamicModule } from '@nestjs/common';
+import { type SettingsModuleOptions } from './settings.options';
+/**
+ * The settings slice: the deployment-wide settings document
+ * (`/api/system-settings`), each user's own settings (`/api/user-settings`),
+ * each organization's overrides (`/api/org-settings`), the namespace
+ * registries they are composed from, the system then org then user
+ * `SettingsResolver` and the `SystemSettingsRowStore` for slices that own a
+ * row of their own.
+ *
+ * @stability experimental
+ */
+export declare class SettingsModule {
+    /**
+     * The slice for one app. Call once, after the app's namespace manifests
+     * ran.
+     *
+     * @param options - see {@link SettingsModuleOptions}.
+     * @returns the dynamic module (global). It provides and exports
+     *   `SystemSettingsService`, `UserSettingsService`, `OrgSettingsService`,
+     *   `SettingsResolver`, `SystemSettingsRowStore` and `SETTINGS_OPTIONS`.
+     * @throws Error when an option is invalid.
+     *
+     * @example
+     * ```ts
+     * import './settings/registry'; // the app's manifests: registers every namespace
+     * export const settingsModule = SettingsModule.forRoot({ imports: [SettingsHostModule] });
+     * ```
+     *
+     * @extensionPoint option
+     * @stability experimental
+     */
+    static forRoot(options?: SettingsModuleOptions): DynamicModule;
+}
+//# sourceMappingURL=settings.module.d.ts.map

package/dist/settings/settings.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.module.d.ts","sourceRoot":"","sources":["../../src/settings/settings.module.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,aAAa,EAAU,MAAM,gBAAgB,CAAC;AAOvD,OAAO,EAAkD,KAAK,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAchH;;;;;;;;;GASG;AACH,qBACa,cAAc;IACzB;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,CAAC,OAAO,CAAC,OAAO,GAAE,qBAA0B,GAAG,aAAa;CAsBnE"}