@open-mercato/shared 0.6.1-develop.3187.1.4c96d17341 → 0.6.1-develop.3188.1.499d530779

package/dist/lib/bootstrap/factory.js

@@ -80,6 +80,9 @@ async function registerWidgetsAndOptionalPackages(data, options) {
     injectionRegistry.registerInjectionWidgets(data.injectionWidgetEntries);
     coreInjection.registerCoreInjectionWidgets(data.injectionWidgetEntries);
     coreInjection.registerCoreInjectionTables(data.injectionTables);
+    coreInjection.registerEnabledModuleIds(
+      data.modules.map((module) => module.id).filter((id) => typeof id === "string" && id.length > 0)
+    );
   } catch {
   }
 }

package/dist/lib/bootstrap/factory.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/bootstrap/factory.ts"],
-  "sourcesContent": ["import type { BootstrapData, BootstrapOptions } from './types'\nimport { registerOrmEntities } from '../db/mikro'\nimport { registerDiRegistrars } from '../di/container'\nimport { registerModules } from '../modules/registry'\nimport { registerEntityIds } from '../encryption/entityIds'\nimport { registerEntityFields } from '../encryption/entityFields'\nimport { registerSearchModuleConfigs } from '../../modules/search'\nimport { registerAnalyticsModuleConfigs } from '../../modules/analytics'\nimport { registerResponseEnrichers } from '../crud/enricher-registry'\nimport { registerApiInterceptors } from '../crud/interceptor-registry'\nimport { registerComponentOverrides } from '../../modules/widgets/component-registry'\nimport { registerMutationGuards } from '../crud/mutation-guard-store'\nimport { registerCommandInterceptors } from '../commands/command-interceptor-store'\nimport { registerNotificationHandlers } from '../notifications/handler-registry'\nimport { clearRegisteredIntegrations, registerBundles, registerIntegrations } from '../../modules/integrations/types'\n\nlet _bootstrapped = false\n\n// Store the async registration promise so callers can await it if needed\nlet _asyncRegistrationPromise: Promise<void> | null = null\n\n/**\n * Creates a bootstrap function that registers all application dependencies.\n *\n * The returned function should be called once at application startup.\n * In development mode, it can be called multiple times (for HMR).\n *\n * @param data - All generated registry data from .mercato/generated/\n * @param options - Optional configuration\n * @returns A bootstrap function to call at app startup\n */\nexport function createBootstrap(data: BootstrapData, options: BootstrapOptions = {}) {\n  return function bootstrap(): void {\n    // In development, always re-run registrations to handle HMR\n    // (Module state may be reset when Turbopack reloads packages)\n    if (_bootstrapped && process.env.NODE_ENV !== 'development') return\n    _bootstrapped = true\n\n    // === 1. Foundation: ORM entities and DI registrars ===\n    registerOrmEntities(data.entities)\n    registerDiRegistrars(data.diRegistrars.filter((r): r is NonNullable<typeof r> => r != null))\n\n    // === 2. Modules registry (required by i18n, query engine, dashboards, CLI) ===\n    registerModules(data.modules)\n    clearRegisteredIntegrations()\n    for (const module of data.modules) {\n      if (module.integrations?.length) {\n        registerIntegrations(module.integrations)\n      }\n      if (module.bundles?.length) {\n        registerBundles(module.bundles)\n      }\n    }\n\n    // === 3. Entity IDs (required by encryption, indexing, entity links) ===\n    registerEntityIds(data.entityIds)\n\n    // === 4. Entity fields registry (for encryption manager, Turbopack compatibility) ===\n    if (data.entityFieldsRegistry) {\n      registerEntityFields(data.entityFieldsRegistry)\n    }\n\n    // === 5. Search module configs (for search service registration in DI) ===\n    if (data.searchModuleConfigs) {\n      registerSearchModuleConfigs(data.searchModuleConfigs)\n    }\n\n    // === 6. Analytics module configs (for dashboard widgets and analytics API) ===\n    if (data.analyticsModuleConfigs) {\n      registerAnalyticsModuleConfigs(data.analyticsModuleConfigs)\n    }\n\n    // === 6b. Response enrichers (for CRUD response enrichment) ===\n    if (data.enricherEntries) {\n      registerResponseEnrichers(data.enricherEntries)\n    }\n\n    // === 6c. API interceptors (for CRUD route interception) ===\n    if (data.interceptorEntries) {\n      registerApiInterceptors(data.interceptorEntries)\n    }\n\n    // === 6d. Component overrides (for page/component replacement) ===\n    if (data.componentOverrideEntries) {\n      const allOverrides = data.componentOverrideEntries.flatMap((entry) => entry.componentOverrides ?? [])\n      registerComponentOverrides(allOverrides)\n    }\n\n    // === 6e. Mutation guards (for CRUD mutation lifecycle) ===\n    if (data.guardEntries) {\n      registerMutationGuards(data.guardEntries)\n    }\n\n    // === 6f. Command interceptors (for command bus lifecycle) ===\n    if (data.commandInterceptorEntries) {\n      registerCommandInterceptors(data.commandInterceptorEntries)\n    }\n\n    // === 6g. Notification handlers (reactive notification side-effects) ===\n    if (data.notificationHandlerEntries) {\n      registerNotificationHandlers(data.notificationHandlerEntries)\n    }\n\n    // === 7-8. UI Widgets and Optional packages (async to avoid circular deps) ===\n    // Store the promise so CLI context can await it\n    _asyncRegistrationPromise = registerWidgetsAndOptionalPackages(data, options)\n    void _asyncRegistrationPromise\n\n    options.onRegistrationComplete?.()\n  }\n}\n\n/**\n * Wait for async registrations (CLI modules, widgets, etc.) to complete.\n * Call this after bootstrap() in CLI context where you need modules immediately.\n */\nexport async function waitForAsyncRegistration(): Promise<void> {\n  if (_asyncRegistrationPromise) {\n    await _asyncRegistrationPromise\n  }\n}\n\nasync function registerWidgetsAndOptionalPackages(data: BootstrapData, options: BootstrapOptions): Promise<void> {\n  // Register UI widgets (dynamic imports to avoid circular deps with ui/core packages)\n  try {\n    const [dashboardRegistry, injectionRegistry, coreInjection] = await Promise.all([\n      import('@open-mercato/ui/backend/dashboard/widgetRegistry'),\n      import('@open-mercato/ui/backend/injection/widgetRegistry'),\n      import('@open-mercato/core/modules/widgets/lib/injection'),\n    ])\n\n    dashboardRegistry.registerDashboardWidgets(data.dashboardWidgetEntries)\n    injectionRegistry.registerInjectionWidgets(data.injectionWidgetEntries)\n    coreInjection.registerCoreInjectionWidgets(data.injectionWidgetEntries)\n    coreInjection.registerCoreInjectionTables(data.injectionTables)\n  } catch {\n    // UI packages may not be available in all contexts\n  }\n\n  // Note: Search module configs are registered synchronously in the main bootstrap.\n  // The actual registerSearchModule() call happens in core/bootstrap.ts when the\n  // DI container is created, using getSearchModuleConfigs() from the global registry.\n\n  // Note: CLI module registration is handled separately in CLI context\n  // via bootstrapFromAppRoot in dynamicLoader. We don't import CLI here\n  // to avoid Turbopack tracing through the CLI package in Next.js context.\n}\n\n/**\n * Check if bootstrap has been called.\n */\nexport function isBootstrapped(): boolean {\n  return _bootstrapped\n}\n\n/**\n * Reset bootstrap state. Useful for testing.\n */\nexport function resetBootstrapState(): void {\n  _bootstrapped = false\n}\n"],
-  "mappings": "AACA,SAAS,2BAA2B;AACpC,SAAS,4BAA4B;AACrC,SAAS,uBAAuB;AAChC,SAAS,yBAAyB;AAClC,SAAS,4BAA4B;AACrC,SAAS,mCAAmC;AAC5C,SAAS,sCAAsC;AAC/C,SAAS,iCAAiC;AAC1C,SAAS,+BAA+B;AACxC,SAAS,kCAAkC;AAC3C,SAAS,8BAA8B;AACvC,SAAS,mCAAmC;AAC5C,SAAS,oCAAoC;AAC7C,SAAS,6BAA6B,iBAAiB,4BAA4B;AAEnF,IAAI,gBAAgB;AAGpB,IAAI,4BAAkD;AAY/C,SAAS,gBAAgB,MAAqB,UAA4B,CAAC,GAAG;AACnF,SAAO,SAAS,YAAkB;AAGhC,QAAI,iBAAiB,QAAQ,IAAI,aAAa,cAAe;AAC7D,oBAAgB;AAGhB,wBAAoB,KAAK,QAAQ;AACjC,yBAAqB,KAAK,aAAa,OAAO,CAAC,MAAkC,KAAK,IAAI,CAAC;AAG3F,oBAAgB,KAAK,OAAO;AAC5B,gCAA4B;AAC5B,eAAW,UAAU,KAAK,SAAS;AACjC,UAAI,OAAO,cAAc,QAAQ;AAC/B,6BAAqB,OAAO,YAAY;AAAA,MAC1C;AACA,UAAI,OAAO,SAAS,QAAQ;AAC1B,wBAAgB,OAAO,OAAO;AAAA,MAChC;AAAA,IACF;AAGA,sBAAkB,KAAK,SAAS;AAGhC,QAAI,KAAK,sBAAsB;AAC7B,2BAAqB,KAAK,oBAAoB;AAAA,IAChD;AAGA,QAAI,KAAK,qBAAqB;AAC5B,kCAA4B,KAAK,mBAAmB;AAAA,IACtD;AAGA,QAAI,KAAK,wBAAwB;AAC/B,qCAA+B,KAAK,sBAAsB;AAAA,IAC5D;AAGA,QAAI,KAAK,iBAAiB;AACxB,gCAA0B,KAAK,eAAe;AAAA,IAChD;AAGA,QAAI,KAAK,oBAAoB;AAC3B,8BAAwB,KAAK,kBAAkB;AAAA,IACjD;AAGA,QAAI,KAAK,0BAA0B;AACjC,YAAM,eAAe,KAAK,yBAAyB,QAAQ,CAAC,UAAU,MAAM,sBAAsB,CAAC,CAAC;AACpG,iCAA2B,YAAY;AAAA,IACzC;AAGA,QAAI,KAAK,cAAc;AACrB,6BAAuB,KAAK,YAAY;AAAA,IAC1C;AAGA,QAAI,KAAK,2BAA2B;AAClC,kCAA4B,KAAK,yBAAyB;AAAA,IAC5D;AAGA,QAAI,KAAK,4BAA4B;AACnC,mCAA6B,KAAK,0BAA0B;AAAA,IAC9D;AAIA,gCAA4B,mCAAmC,MAAM,OAAO;AAC5E,SAAK;AAEL,YAAQ,yBAAyB;AAAA,EACnC;AACF;AAMA,eAAsB,2BAA0C;AAC9D,MAAI,2BAA2B;AAC7B,UAAM;AAAA,EACR;AACF;AAEA,eAAe,mCAAmC,MAAqB,SAA0C;AAE/G,MAAI;AACF,UAAM,CAAC,mBAAmB,mBAAmB,aAAa,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC9E,OAAO,mDAAmD;AAAA,MAC1D,OAAO,mDAAmD;AAAA,MAC1D,OAAO,kDAAkD;AAAA,IAC3D,CAAC;AAED,sBAAkB,yBAAyB,KAAK,sBAAsB;AACtE,sBAAkB,yBAAyB,KAAK,sBAAsB;AACtE,kBAAc,6BAA6B,KAAK,sBAAsB;AACtE,kBAAc,4BAA4B,KAAK,eAAe;AAAA,EAChE,QAAQ;AAAA,EAER;AASF;AAKO,SAAS,iBAA0B;AACxC,SAAO;AACT;AAKO,SAAS,sBAA4B;AAC1C,kBAAgB;AAClB;",
+  "sourcesContent": ["import type { BootstrapData, BootstrapOptions } from './types'\nimport { registerOrmEntities } from '../db/mikro'\nimport { registerDiRegistrars } from '../di/container'\nimport { registerModules } from '../modules/registry'\nimport { registerEntityIds } from '../encryption/entityIds'\nimport { registerEntityFields } from '../encryption/entityFields'\nimport { registerSearchModuleConfigs } from '../../modules/search'\nimport { registerAnalyticsModuleConfigs } from '../../modules/analytics'\nimport { registerResponseEnrichers } from '../crud/enricher-registry'\nimport { registerApiInterceptors } from '../crud/interceptor-registry'\nimport { registerComponentOverrides } from '../../modules/widgets/component-registry'\nimport { registerMutationGuards } from '../crud/mutation-guard-store'\nimport { registerCommandInterceptors } from '../commands/command-interceptor-store'\nimport { registerNotificationHandlers } from '../notifications/handler-registry'\nimport { clearRegisteredIntegrations, registerBundles, registerIntegrations } from '../../modules/integrations/types'\n\nlet _bootstrapped = false\n\n// Store the async registration promise so callers can await it if needed\nlet _asyncRegistrationPromise: Promise<void> | null = null\n\n/**\n * Creates a bootstrap function that registers all application dependencies.\n *\n * The returned function should be called once at application startup.\n * In development mode, it can be called multiple times (for HMR).\n *\n * @param data - All generated registry data from .mercato/generated/\n * @param options - Optional configuration\n * @returns A bootstrap function to call at app startup\n */\nexport function createBootstrap(data: BootstrapData, options: BootstrapOptions = {}) {\n  return function bootstrap(): void {\n    // In development, always re-run registrations to handle HMR\n    // (Module state may be reset when Turbopack reloads packages)\n    if (_bootstrapped && process.env.NODE_ENV !== 'development') return\n    _bootstrapped = true\n\n    // === 1. Foundation: ORM entities and DI registrars ===\n    registerOrmEntities(data.entities)\n    registerDiRegistrars(data.diRegistrars.filter((r): r is NonNullable<typeof r> => r != null))\n\n    // === 2. Modules registry (required by i18n, query engine, dashboards, CLI) ===\n    registerModules(data.modules)\n    clearRegisteredIntegrations()\n    for (const module of data.modules) {\n      if (module.integrations?.length) {\n        registerIntegrations(module.integrations)\n      }\n      if (module.bundles?.length) {\n        registerBundles(module.bundles)\n      }\n    }\n\n    // === 3. Entity IDs (required by encryption, indexing, entity links) ===\n    registerEntityIds(data.entityIds)\n\n    // === 4. Entity fields registry (for encryption manager, Turbopack compatibility) ===\n    if (data.entityFieldsRegistry) {\n      registerEntityFields(data.entityFieldsRegistry)\n    }\n\n    // === 5. Search module configs (for search service registration in DI) ===\n    if (data.searchModuleConfigs) {\n      registerSearchModuleConfigs(data.searchModuleConfigs)\n    }\n\n    // === 6. Analytics module configs (for dashboard widgets and analytics API) ===\n    if (data.analyticsModuleConfigs) {\n      registerAnalyticsModuleConfigs(data.analyticsModuleConfigs)\n    }\n\n    // === 6b. Response enrichers (for CRUD response enrichment) ===\n    if (data.enricherEntries) {\n      registerResponseEnrichers(data.enricherEntries)\n    }\n\n    // === 6c. API interceptors (for CRUD route interception) ===\n    if (data.interceptorEntries) {\n      registerApiInterceptors(data.interceptorEntries)\n    }\n\n    // === 6d. Component overrides (for page/component replacement) ===\n    if (data.componentOverrideEntries) {\n      const allOverrides = data.componentOverrideEntries.flatMap((entry) => entry.componentOverrides ?? [])\n      registerComponentOverrides(allOverrides)\n    }\n\n    // === 6e. Mutation guards (for CRUD mutation lifecycle) ===\n    if (data.guardEntries) {\n      registerMutationGuards(data.guardEntries)\n    }\n\n    // === 6f. Command interceptors (for command bus lifecycle) ===\n    if (data.commandInterceptorEntries) {\n      registerCommandInterceptors(data.commandInterceptorEntries)\n    }\n\n    // === 6g. Notification handlers (reactive notification side-effects) ===\n    if (data.notificationHandlerEntries) {\n      registerNotificationHandlers(data.notificationHandlerEntries)\n    }\n\n    // === 7-8. UI Widgets and Optional packages (async to avoid circular deps) ===\n    // Store the promise so CLI context can await it\n    _asyncRegistrationPromise = registerWidgetsAndOptionalPackages(data, options)\n    void _asyncRegistrationPromise\n\n    options.onRegistrationComplete?.()\n  }\n}\n\n/**\n * Wait for async registrations (CLI modules, widgets, etc.) to complete.\n * Call this after bootstrap() in CLI context where you need modules immediately.\n */\nexport async function waitForAsyncRegistration(): Promise<void> {\n  if (_asyncRegistrationPromise) {\n    await _asyncRegistrationPromise\n  }\n}\n\nasync function registerWidgetsAndOptionalPackages(data: BootstrapData, options: BootstrapOptions): Promise<void> {\n  // Register UI widgets (dynamic imports to avoid circular deps with ui/core packages)\n  try {\n    const [dashboardRegistry, injectionRegistry, coreInjection] = await Promise.all([\n      import('@open-mercato/ui/backend/dashboard/widgetRegistry'),\n      import('@open-mercato/ui/backend/injection/widgetRegistry'),\n      import('@open-mercato/core/modules/widgets/lib/injection'),\n    ])\n\n    dashboardRegistry.registerDashboardWidgets(data.dashboardWidgetEntries)\n    injectionRegistry.registerInjectionWidgets(data.injectionWidgetEntries)\n    coreInjection.registerCoreInjectionWidgets(data.injectionWidgetEntries)\n    coreInjection.registerCoreInjectionTables(data.injectionTables)\n    coreInjection.registerEnabledModuleIds(\n      data.modules.map((module) => module.id).filter((id): id is string => typeof id === 'string' && id.length > 0),\n    )\n  } catch {\n    // UI packages may not be available in all contexts\n  }\n\n  // Note: Search module configs are registered synchronously in the main bootstrap.\n  // The actual registerSearchModule() call happens in core/bootstrap.ts when the\n  // DI container is created, using getSearchModuleConfigs() from the global registry.\n\n  // Note: CLI module registration is handled separately in CLI context\n  // via bootstrapFromAppRoot in dynamicLoader. We don't import CLI here\n  // to avoid Turbopack tracing through the CLI package in Next.js context.\n}\n\n/**\n * Check if bootstrap has been called.\n */\nexport function isBootstrapped(): boolean {\n  return _bootstrapped\n}\n\n/**\n * Reset bootstrap state. Useful for testing.\n */\nexport function resetBootstrapState(): void {\n  _bootstrapped = false\n}\n"],
+  "mappings": "AACA,SAAS,2BAA2B;AACpC,SAAS,4BAA4B;AACrC,SAAS,uBAAuB;AAChC,SAAS,yBAAyB;AAClC,SAAS,4BAA4B;AACrC,SAAS,mCAAmC;AAC5C,SAAS,sCAAsC;AAC/C,SAAS,iCAAiC;AAC1C,SAAS,+BAA+B;AACxC,SAAS,kCAAkC;AAC3C,SAAS,8BAA8B;AACvC,SAAS,mCAAmC;AAC5C,SAAS,oCAAoC;AAC7C,SAAS,6BAA6B,iBAAiB,4BAA4B;AAEnF,IAAI,gBAAgB;AAGpB,IAAI,4BAAkD;AAY/C,SAAS,gBAAgB,MAAqB,UAA4B,CAAC,GAAG;AACnF,SAAO,SAAS,YAAkB;AAGhC,QAAI,iBAAiB,QAAQ,IAAI,aAAa,cAAe;AAC7D,oBAAgB;AAGhB,wBAAoB,KAAK,QAAQ;AACjC,yBAAqB,KAAK,aAAa,OAAO,CAAC,MAAkC,KAAK,IAAI,CAAC;AAG3F,oBAAgB,KAAK,OAAO;AAC5B,gCAA4B;AAC5B,eAAW,UAAU,KAAK,SAAS;AACjC,UAAI,OAAO,cAAc,QAAQ;AAC/B,6BAAqB,OAAO,YAAY;AAAA,MAC1C;AACA,UAAI,OAAO,SAAS,QAAQ;AAC1B,wBAAgB,OAAO,OAAO;AAAA,MAChC;AAAA,IACF;AAGA,sBAAkB,KAAK,SAAS;AAGhC,QAAI,KAAK,sBAAsB;AAC7B,2BAAqB,KAAK,oBAAoB;AAAA,IAChD;AAGA,QAAI,KAAK,qBAAqB;AAC5B,kCAA4B,KAAK,mBAAmB;AAAA,IACtD;AAGA,QAAI,KAAK,wBAAwB;AAC/B,qCAA+B,KAAK,sBAAsB;AAAA,IAC5D;AAGA,QAAI,KAAK,iBAAiB;AACxB,gCAA0B,KAAK,eAAe;AAAA,IAChD;AAGA,QAAI,KAAK,oBAAoB;AAC3B,8BAAwB,KAAK,kBAAkB;AAAA,IACjD;AAGA,QAAI,KAAK,0BAA0B;AACjC,YAAM,eAAe,KAAK,yBAAyB,QAAQ,CAAC,UAAU,MAAM,sBAAsB,CAAC,CAAC;AACpG,iCAA2B,YAAY;AAAA,IACzC;AAGA,QAAI,KAAK,cAAc;AACrB,6BAAuB,KAAK,YAAY;AAAA,IAC1C;AAGA,QAAI,KAAK,2BAA2B;AAClC,kCAA4B,KAAK,yBAAyB;AAAA,IAC5D;AAGA,QAAI,KAAK,4BAA4B;AACnC,mCAA6B,KAAK,0BAA0B;AAAA,IAC9D;AAIA,gCAA4B,mCAAmC,MAAM,OAAO;AAC5E,SAAK;AAEL,YAAQ,yBAAyB;AAAA,EACnC;AACF;AAMA,eAAsB,2BAA0C;AAC9D,MAAI,2BAA2B;AAC7B,UAAM;AAAA,EACR;AACF;AAEA,eAAe,mCAAmC,MAAqB,SAA0C;AAE/G,MAAI;AACF,UAAM,CAAC,mBAAmB,mBAAmB,aAAa,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC9E,OAAO,mDAAmD;AAAA,MAC1D,OAAO,mDAAmD;AAAA,MAC1D,OAAO,kDAAkD;AAAA,IAC3D,CAAC;AAED,sBAAkB,yBAAyB,KAAK,sBAAsB;AACtE,sBAAkB,yBAAyB,KAAK,sBAAsB;AACtE,kBAAc,6BAA6B,KAAK,sBAAsB;AACtE,kBAAc,4BAA4B,KAAK,eAAe;AAC9D,kBAAc;AAAA,MACZ,KAAK,QAAQ,IAAI,CAAC,WAAW,OAAO,EAAE,EAAE,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAAA,IAC9G;AAAA,EACF,QAAQ;AAAA,EAER;AASF;AAKO,SAAS,iBAA0B;AACxC,SAAO;AACT;AAKO,SAAS,sBAA4B;AAC1C,kBAAgB;AAClB;",
   "names": []
 }

package/dist/lib/version.js

@@ -1,4 +1,4 @@
-const APP_VERSION = "0.6.1-develop.3187.1.4c96d17341";
+const APP_VERSION = "0.6.1-develop.3188.1.499d530779";
 const appVersion = APP_VERSION;
 export {
   APP_VERSION,

package/dist/lib/version.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/lib/version.ts"],
-  "sourcesContent": ["// Build-time generated version\nexport const APP_VERSION = '0.6.1-develop.3187.1.4c96d17341'\nexport const appVersion = APP_VERSION\n"],
+  "sourcesContent": ["// Build-time generated version\nexport const APP_VERSION = '0.6.1-develop.3188.1.499d530779'\nexport const appVersion = APP_VERSION\n"],
   "mappings": "AACO,MAAM,cAAc;AACpB,MAAM,aAAa;",
   "names": []
 }

package/dist/modules/widgets/injection-loader.js

@@ -1,8 +1,10 @@
 let _coreInjectionWidgetEntries = null;
 let _coreInjectionTables = null;
+let _enabledModuleIds = null;
 let _injectionRegistryVersion = 0;
 const GLOBAL_INJECTION_WIDGETS_KEY = "__openMercatoCoreInjectionWidgetEntries__";
 const GLOBAL_INJECTION_TABLES_KEY = "__openMercatoCoreInjectionTables__";
+const GLOBAL_ENABLED_MODULE_IDS_KEY = "__openMercatoEnabledModuleIds__";
 const GLOBAL_INJECTION_REGISTRY_VERSION_KEY = "__openMercatoCoreInjectionRegistryVersion__";
 const INJECTION_REGISTRY_CHANGED_EVENT = "__openMercatoInjectionRegistryChanged__";
 function readGlobalInjectionWidgets() {
@@ -20,6 +22,22 @@ function writeGlobalInjectionWidgets(entries) {
   } catch {
   }
 }
+function readGlobalEnabledModuleIds() {
+  try {
+    const value = globalThis[GLOBAL_ENABLED_MODULE_IDS_KEY];
+    if (value instanceof Set) return value;
+    return null;
+  } catch {
+    return null;
+  }
+}
+function writeGlobalEnabledModuleIds(ids) {
+  try {
+    ;
+    globalThis[GLOBAL_ENABLED_MODULE_IDS_KEY] = ids;
+  } catch {
+  }
+}
 function readGlobalInjectionTables() {
   try {
     const value = globalThis[GLOBAL_INJECTION_TABLES_KEY];
@@ -86,6 +104,21 @@ function registerCoreInjectionTables(tables) {
   writeGlobalInjectionTables(tables);
   notifyInjectionRegistryChanged();
 }
+function registerEnabledModuleIds(moduleIds) {
+  const next = /* @__PURE__ */ new Set();
+  for (const moduleId of moduleIds) {
+    if (typeof moduleId === "string" && moduleId.length > 0) next.add(moduleId);
+  }
+  if (_enabledModuleIds !== null && process.env.NODE_ENV === "development") {
+    console.debug("[Bootstrap] Enabled module IDs re-registered (this may occur during HMR)");
+  }
+  _enabledModuleIds = next;
+  writeGlobalEnabledModuleIds(next);
+  notifyInjectionRegistryChanged();
+}
+function getEnabledModuleIds() {
+  return readGlobalEnabledModuleIds() ?? _enabledModuleIds;
+}
 function getInjectionRegistryVersion() {
   const globalVersion = readGlobalInjectionRegistryVersion();
   if (globalVersion !== null) return globalVersion;
@@ -122,6 +155,7 @@ function invalidateInjectionWidgetCache() {
   widgetEntriesPromise = null;
   injectionTablePromise = null;
   widgetCache.clear();
+  warnedRequiredModuleSkips.clear();
 }
 async function loadWidgetEntries() {
   if (!widgetEntriesPromise) {
@@ -242,6 +276,41 @@ async function loadEntry(entry) {
   }
   return widgetCache.get(entry.key);
 }
+function getEnabledModuleIdsForInjection() {
+  const explicit = readGlobalEnabledModuleIds() ?? _enabledModuleIds;
+  if (explicit) return explicit;
+  const enabled = /* @__PURE__ */ new Set();
+  const tables = readGlobalInjectionTables() ?? _coreInjectionTables ?? [];
+  for (const entry of tables) {
+    if (entry?.moduleId) enabled.add(entry.moduleId);
+  }
+  const entries = readGlobalInjectionWidgets() ?? _coreInjectionWidgetEntries ?? [];
+  for (const entry of entries) {
+    if (entry?.moduleId) enabled.add(entry.moduleId);
+  }
+  return enabled;
+}
+function widgetMissingRequiredModules(metadata, enabledModuleIds) {
+  const required = metadata.requiredModules;
+  if (!Array.isArray(required) || required.length === 0) return [];
+  const missing = [];
+  for (const moduleId of required) {
+    if (typeof moduleId !== "string" || moduleId.length === 0) continue;
+    if (!enabledModuleIds.has(moduleId)) missing.push(moduleId);
+  }
+  return missing;
+}
+const warnedRequiredModuleSkips = /* @__PURE__ */ new Set();
+function warnSkippedWidget(metadataId, missingModules) {
+  const key = `${metadataId}:${missingModules.join(",")}`;
+  if (warnedRequiredModuleSkips.has(key)) return;
+  warnedRequiredModuleSkips.add(key);
+  if (process.env.NODE_ENV === "development") {
+    console.debug(
+      `[InjectionLoader] Skipping widget "${metadataId}" \u2014 required module(s) not enabled: ${missingModules.join(", ")}`
+    );
+  }
+}
 async function getResolvedEntriesForSpot(spotId) {
   const table = await loadInjectionTable();
   const exactEntries = table.get(spotId) ?? [];
@@ -265,10 +334,16 @@ async function getResolvedEntriesForSpot(spotId) {
 }
 async function loadAllInjectionWidgets() {
   const widgetEntries = await loadWidgetEntries();
+  const enabledModuleIds = getEnabledModuleIdsForInjection();
   const loaded = await Promise.all(
     widgetEntries.map(async (entry) => {
       const module = await loadEntry(entry);
       if (!isLoadedInjectionWidget(module)) return null;
+      const missing = widgetMissingRequiredModules(module.metadata, enabledModuleIds);
+      if (missing.length > 0) {
+        warnSkippedWidget(module.metadata.id, missing);
+        return null;
+      }
       return { ...module, moduleId: entry.moduleId, key: entry.key };
     })
   );
@@ -283,10 +358,16 @@ async function loadAllInjectionWidgets() {
 }
 async function loadInjectionWidgetById(widgetId) {
   const widgetEntries = await loadWidgetEntries();
+  const enabledModuleIds = getEnabledModuleIdsForInjection();
   for (const entry of widgetEntries) {
     const module = await loadEntry(entry);
     if (!isLoadedInjectionWidget(module)) continue;
     if (module.metadata.id === widgetId) {
+      const missing = widgetMissingRequiredModules(module.metadata, enabledModuleIds);
+      if (missing.length > 0) {
+        warnSkippedWidget(module.metadata.id, missing);
+        return null;
+      }
       return { ...module, moduleId: entry.moduleId, key: entry.key };
     }
   }
@@ -294,10 +375,16 @@ async function loadInjectionWidgetById(widgetId) {
 }
 async function loadInjectionDataWidgetById(widgetId) {
   const widgetEntries = await loadWidgetEntries();
+  const enabledModuleIds = getEnabledModuleIdsForInjection();
   for (const entry of widgetEntries) {
     const module = await loadEntry(entry);
     if (!isLoadedInjectionDataWidget(module)) continue;
     if (module.metadata.id === widgetId) {
+      const missing = widgetMissingRequiredModules(module.metadata, enabledModuleIds);
+      if (missing.length > 0) {
+        warnSkippedWidget(module.metadata.id, missing);
+        return null;
+      }
       return { ...module, moduleId: entry.moduleId, key: entry.key };
     }
   }
@@ -328,6 +415,7 @@ async function loadInjectionDataWidgetsForSpot(spotId) {
 export {
   getCoreInjectionTables,
   getCoreInjectionWidgets,
+  getEnabledModuleIds,
   getInjectionRegistryVersion,
   invalidateInjectionWidgetCache,
   loadAllInjectionWidgets,
@@ -337,6 +425,7 @@ export {
   loadInjectionWidgetsForSpot,
   registerCoreInjectionTables,
   registerCoreInjectionWidgets,
+  registerEnabledModuleIds,
   subscribeToInjectionRegistryChanges
 };
 //# sourceMappingURL=injection-loader.js.map

package/dist/modules/widgets/injection-loader.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/widgets/injection-loader.ts"],
-  "sourcesContent": ["import type { ModuleInjectionWidgetEntry } from '../registry'\nimport type {\n  InjectionAnyWidgetModule,\n  InjectionDataWidgetModule,\n  InjectionWidgetMetadata,\n  InjectionWidgetModule,\n  InjectionSpotId,\n  ModuleInjectionSlot,\n  ModuleInjectionTable,\n  InjectionWidgetPlacement,\n} from './injection'\n\ntype LoadedWidgetModule = InjectionWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }\ntype LoadedDataWidgetModule = InjectionDataWidgetModule & { metadata: InjectionWidgetMetadata }\n\nexport type LoadedInjectionWidget = LoadedWidgetModule & {\n  moduleId: string\n  key: string\n  placement?: {\n    groupId?: string\n    groupLabel?: string\n    groupDescription?: string\n    column?: 1 | 2\n    kind?: 'tab' | 'group' | 'stack'\n    [k: string]: unknown\n  }\n}\n\nexport type LoadedInjectionDataWidget = LoadedDataWidgetModule & {\n  moduleId: string\n  key: string\n  placement?: {\n    groupId?: string\n    groupLabel?: string\n    groupDescription?: string\n    column?: 1 | 2\n    kind?: 'tab' | 'group' | 'stack'\n    [k: string]: unknown\n  }\n}\n\ntype WidgetEntry = ModuleInjectionWidgetEntry & { moduleId: string }\n\n// Registration pattern for publishable packages\nlet _coreInjectionWidgetEntries: ModuleInjectionWidgetEntry[] | null = null\nlet _coreInjectionTables: Array<{ moduleId: string; table: ModuleInjectionTable }> | null = null\nlet _injectionRegistryVersion = 0\nconst GLOBAL_INJECTION_WIDGETS_KEY = '__openMercatoCoreInjectionWidgetEntries__'\nconst GLOBAL_INJECTION_TABLES_KEY = '__openMercatoCoreInjectionTables__'\nconst GLOBAL_INJECTION_REGISTRY_VERSION_KEY = '__openMercatoCoreInjectionRegistryVersion__'\nconst INJECTION_REGISTRY_CHANGED_EVENT = '__openMercatoInjectionRegistryChanged__'\n\nfunction readGlobalInjectionWidgets(): ModuleInjectionWidgetEntry[] | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_INJECTION_WIDGETS_KEY]\n    return Array.isArray(value) ? (value as ModuleInjectionWidgetEntry[]) : null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalInjectionWidgets(entries: ModuleInjectionWidgetEntry[]) {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_INJECTION_WIDGETS_KEY] = entries\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\nfunction readGlobalInjectionTables(): Array<{ moduleId: string; table: ModuleInjectionTable }> | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_INJECTION_TABLES_KEY]\n    return Array.isArray(value) ? (value as Array<{ moduleId: string; table: ModuleInjectionTable }>) : null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalInjectionTables(tables: Array<{ moduleId: string; table: ModuleInjectionTable }>) {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_INJECTION_TABLES_KEY] = tables\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\nfunction readGlobalInjectionRegistryVersion(): number | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_INJECTION_REGISTRY_VERSION_KEY]\n    return typeof value === 'number' ? value : null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalInjectionRegistryVersion(version: number) {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_INJECTION_REGISTRY_VERSION_KEY] = version\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\nfunction notifyInjectionRegistryChanged() {\n  _injectionRegistryVersion += 1\n  writeGlobalInjectionRegistryVersion(_injectionRegistryVersion)\n  invalidateInjectionWidgetCache()\n\n  if (typeof window === 'undefined') return\n\n  window.dispatchEvent(new CustomEvent(INJECTION_REGISTRY_CHANGED_EVENT, {\n    detail: { version: _injectionRegistryVersion },\n  }))\n}\n\nexport function registerCoreInjectionWidgets(entries: ModuleInjectionWidgetEntry[]) {\n  if (_coreInjectionWidgetEntries !== null && process.env.NODE_ENV === 'development') {\n    console.debug('[Bootstrap] Core injection widgets re-registered (this may occur during HMR)')\n  }\n  _coreInjectionWidgetEntries = entries\n  writeGlobalInjectionWidgets(entries)\n  notifyInjectionRegistryChanged()\n}\n\nexport function getCoreInjectionWidgets(): ModuleInjectionWidgetEntry[] {\n  const globalEntries = readGlobalInjectionWidgets()\n  if (globalEntries) return globalEntries\n  if (!_coreInjectionWidgetEntries) {\n    // On client-side, bootstrap doesn't run - return empty array gracefully\n    if (typeof window !== 'undefined') {\n      return []\n    }\n    throw new Error('[Bootstrap] Core injection widgets not registered. Call registerCoreInjectionWidgets() at bootstrap.')\n  }\n  return _coreInjectionWidgetEntries\n}\n\nexport function registerCoreInjectionTables(tables: Array<{ moduleId: string; table: ModuleInjectionTable }>) {\n  if (_coreInjectionTables !== null && process.env.NODE_ENV === 'development') {\n    console.debug('[Bootstrap] Core injection tables re-registered (this may occur during HMR)')\n  }\n  _coreInjectionTables = tables\n  writeGlobalInjectionTables(tables)\n  notifyInjectionRegistryChanged()\n}\n\nexport function getInjectionRegistryVersion(): number {\n  const globalVersion = readGlobalInjectionRegistryVersion()\n  if (globalVersion !== null) return globalVersion\n  return _injectionRegistryVersion\n}\n\nexport function subscribeToInjectionRegistryChanges(listener: () => void): () => void {\n  if (typeof window === 'undefined') {\n    return () => {}\n  }\n\n  const handler = () => listener()\n  window.addEventListener(INJECTION_REGISTRY_CHANGED_EVENT, handler)\n  return () => {\n    window.removeEventListener(INJECTION_REGISTRY_CHANGED_EVENT, handler)\n  }\n}\n\nexport function getCoreInjectionTables(): Array<{ moduleId: string; table: ModuleInjectionTable }> {\n  const globalTables = readGlobalInjectionTables()\n  if (globalTables) return globalTables\n  if (!_coreInjectionTables) {\n    // On client-side, bootstrap doesn't run - return empty array gracefully\n    if (typeof window !== 'undefined') {\n      return []\n    }\n    throw new Error('[Bootstrap] Core injection tables not registered. Call registerCoreInjectionTables() at bootstrap.')\n  }\n  return _coreInjectionTables\n}\n\nlet widgetEntriesPromise: Promise<WidgetEntry[]> | null = null\ntype TableEntry = {\n  widgetId: string\n  moduleId: string\n  priority: number\n  placement?: ModuleInjectionSlot extends infer S\n    ? S extends { widgetId: string }\n      ? Omit<S, 'widgetId' | 'priority'>\n      : never\n    : never\n}\nlet injectionTablePromise: Promise<Map<InjectionSpotId, TableEntry[]>> | null = null\n\nfunction isInjectionSlotObject(value: ModuleInjectionSlot): value is InjectionWidgetPlacement & { widgetId: string; priority?: number } {\n  return typeof value === 'object' && value !== null && 'widgetId' in value\n}\n\n/**\n * Invalidate the widget entries and widget module cache.\n * Call this when the generated registry is updated or modules are reloaded.\n */\nexport function invalidateInjectionWidgetCache() {\n  widgetEntriesPromise = null\n  injectionTablePromise = null\n  widgetCache.clear()\n}\n\nasync function loadWidgetEntries(): Promise<WidgetEntry[]> {\n  if (!widgetEntriesPromise) {\n    const promise = Promise.resolve().then(() =>\n      getCoreInjectionWidgets().map((entry) => ({\n        ...entry,\n        moduleId: entry.moduleId || 'unknown',\n      }))\n    )\n    widgetEntriesPromise = promise.catch((err) => {\n      if (widgetEntriesPromise === promise) {\n        widgetEntriesPromise = null\n      }\n      throw err\n    })\n  }\n  return widgetEntriesPromise\n}\n\nasync function loadInjectionTable(): Promise<Map<InjectionSpotId, TableEntry[]>> {\n  if (!injectionTablePromise) {\n    const promise = Promise.resolve().then(() => {\n      const list = getCoreInjectionTables()\n      const table = new Map<InjectionSpotId, TableEntry[]>()\n\n      for (const entry of list) {\n        const injectionTable = entry.table ?? {}\n        for (const [spotId, widgetIds] of Object.entries(injectionTable)) {\n          const widgets = Array.isArray(widgetIds) ? widgetIds : [widgetIds]\n          const existing = table.get(spotId) ?? []\n          for (const widgetEntry of widgets) {\n            if (typeof widgetEntry === 'string') {\n              existing.push({ widgetId: widgetEntry, moduleId: entry.moduleId, priority: 0 })\n              continue\n            }\n            if (isInjectionSlotObject(widgetEntry)) {\n              const { widgetId, priority = 0, ...placement } = widgetEntry\n              existing.push({\n                widgetId,\n                moduleId: entry.moduleId,\n                priority: typeof priority === 'number' ? priority : 0,\n                placement,\n              })\n              continue\n            }\n          }\n          table.set(spotId, existing)\n        }\n      }\n\n      for (const [spotId, widgets] of table.entries()) {\n        table.set(spotId, widgets.sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0)))\n      }\n\n      return table\n    })\n    injectionTablePromise = promise.catch((err) => {\n      if (injectionTablePromise === promise) {\n        injectionTablePromise = null\n      }\n      throw err\n    })\n  }\n  return injectionTablePromise\n}\n\nconst widgetCache = new Map<string, Promise<InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }>>()\n\nfunction isDataWidgetModule(widget: Record<string, unknown>): widget is LoadedDataWidgetModule {\n  const keys = [\n    'columns',\n    'rowActions',\n    'bulkActions',\n    'filters',\n    'fields',\n    'steps',\n    'badge',\n    'menuItems',\n  ]\n  return keys.some((key) => key in widget)\n}\n\nfunction ensureValidInjectionModule(mod: unknown, key: string, moduleId: string): (InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }) {\n  if (!mod || typeof mod !== 'object') {\n    throw new Error(`Invalid injection widget module \"${key}\" from \"${moduleId}\" (expected object export)`)\n  }\n  const widget = (mod as { default?: InjectionAnyWidgetModule<any, any> }).default ?? (mod as InjectionAnyWidgetModule<any, any>)\n  if (!widget || typeof widget !== 'object') {\n    throw new Error(`Invalid injection widget export \"${key}\" from \"${moduleId}\" (missing default export)`) \n  }\n  if (!('metadata' in widget) || !widget.metadata || typeof widget.metadata !== 'object') {\n    throw new Error(`Injection widget \"${key}\" from \"${moduleId}\" is missing metadata`)\n  }\n  const metadata = widget.metadata\n  if (typeof metadata.id !== 'string' || metadata.id.length === 0) {\n    throw new Error(`Injection widget \"${key}\" from \"${moduleId}\" metadata.id must be a non-empty string`)\n  }\n  const normalized = {\n    ...widget,\n    metadata,\n  }\n\n  if ('Widget' in normalized && typeof normalized.Widget === 'function') {\n    if (typeof metadata.title !== 'string' || metadata.title.length === 0) {\n      throw new Error(`Injection widget \"${metadata.id}\" from \"${moduleId}\" must have a title`)\n    }\n    return normalized\n  }\n\n  if (!isDataWidgetModule(normalized as Record<string, unknown>)) {\n    throw new Error(\n      `Injection widget \"${metadata.id}\" from \"${moduleId}\" must export either Widget component or a declarative data payload`\n    )\n  }\n\n  return normalized\n}\n\nfunction isLoadedInjectionWidget(\n  module: InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }\n): module is LoadedWidgetModule {\n  return 'Widget' in module && typeof module.Widget === 'function'\n}\n\nfunction isLoadedInjectionDataWidget(\n  module: InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }\n): module is LoadedDataWidgetModule {\n  return !isLoadedInjectionWidget(module)\n}\n\nasync function loadEntry(entry: WidgetEntry): Promise<InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }> {\n  if (!widgetCache.has(entry.key)) {\n    const promise = entry.loader().then((mod) => ensureValidInjectionModule(mod, entry.key, entry.moduleId))\n    widgetCache.set(entry.key, promise)\n  }\n  return widgetCache.get(entry.key)!\n}\n\nasync function getResolvedEntriesForSpot(spotId: InjectionSpotId): Promise<TableEntry[]> {\n  const table = await loadInjectionTable()\n  const exactEntries = table.get(spotId) ?? []\n  const wildcardEntries: TableEntry[] = []\n\n  for (const [candidateSpotId, candidateEntries] of table.entries()) {\n    if (candidateSpotId === spotId) continue\n    if (!candidateSpotId.includes('*')) continue\n    const pattern = new RegExp(`^${candidateSpotId.replace(/[.+?^${}()|[\\]\\\\]/g, '\\\\$&').replace(/\\*/g, '.*')}$`)\n    if (!pattern.test(spotId)) continue\n    wildcardEntries.push(...candidateEntries)\n  }\n\n  const dedupedEntries = new Map<string, TableEntry>()\n  for (const entry of [...exactEntries, ...wildcardEntries]) {\n    const cacheKey = `${entry.moduleId}:${entry.widgetId}`\n    const previous = dedupedEntries.get(cacheKey)\n    if (!previous || (entry.priority ?? 0) > (previous.priority ?? 0)) {\n      dedupedEntries.set(cacheKey, entry)\n    }\n  }\n\n  return Array.from(dedupedEntries.values()).sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0))\n}\n\nexport async function loadAllInjectionWidgets(): Promise<LoadedInjectionWidget[]> {\n  const widgetEntries = await loadWidgetEntries()\n  const loaded = await Promise.all(\n    widgetEntries.map(async (entry) => {\n      const module = await loadEntry(entry)\n      if (!isLoadedInjectionWidget(module)) return null\n      return { ...module, moduleId: entry.moduleId, key: entry.key }\n    })\n  )\n  const byId = new Map<string, LoadedInjectionWidget>()\n  for (const widget of loaded) {\n    if (!widget) continue\n    if (!byId.has(widget.metadata.id)) {\n      byId.set(widget.metadata.id, widget)\n    }\n  }\n  return Array.from(byId.values())\n}\n\nexport async function loadInjectionWidgetById(widgetId: string): Promise<LoadedInjectionWidget | null> {\n  const widgetEntries = await loadWidgetEntries()\n  for (const entry of widgetEntries) {\n    const module = await loadEntry(entry)\n    if (!isLoadedInjectionWidget(module)) continue\n    if (module.metadata.id === widgetId) {\n      return { ...module, moduleId: entry.moduleId, key: entry.key }\n    }\n  }\n  return null\n}\n\nexport async function loadInjectionDataWidgetById(widgetId: string): Promise<LoadedInjectionDataWidget | null> {\n  const widgetEntries = await loadWidgetEntries()\n  for (const entry of widgetEntries) {\n    const module = await loadEntry(entry)\n    if (!isLoadedInjectionDataWidget(module)) continue\n    if (module.metadata.id === widgetId) {\n      return { ...module, moduleId: entry.moduleId, key: entry.key }\n    }\n  }\n  return null\n}\n\nexport async function loadInjectionWidgetsForSpot(spotId: InjectionSpotId): Promise<LoadedInjectionWidget[]> {\n  const entries = await getResolvedEntriesForSpot(spotId)\n  const widgets: LoadedInjectionWidget[] = []\n  for (const { widgetId, placement, priority } of entries) {\n    const widget = await loadInjectionWidgetById(widgetId)\n    if (!widget) continue\n    const combinedPlacement = placement\n      ? { ...placement, priority: typeof priority === 'number' ? priority : 0 }\n      : { priority: typeof priority === 'number' ? priority : 0 }\n    widgets.push({ ...widget, placement: combinedPlacement })\n  }\n  return widgets\n}\n\nexport async function loadInjectionDataWidgetsForSpot(spotId: InjectionSpotId): Promise<LoadedInjectionDataWidget[]> {\n  const entries = await getResolvedEntriesForSpot(spotId)\n  const widgets: LoadedInjectionDataWidget[] = []\n  for (const { widgetId, placement, priority } of entries) {\n    const widget = await loadInjectionDataWidgetById(widgetId)\n    if (!widget) continue\n    const combinedPlacement = placement\n      ? { ...placement, priority: typeof priority === 'number' ? priority : 0 }\n      : { priority: typeof priority === 'number' ? priority : 0 }\n    widgets.push({ ...widget, placement: combinedPlacement })\n  }\n  return widgets\n}\n"],
-  "mappings": "AA4CA,IAAI,8BAAmE;AACvE,IAAI,uBAAwF;AAC5F,IAAI,4BAA4B;AAChC,MAAM,+BAA+B;AACrC,MAAM,8BAA8B;AACpC,MAAM,wCAAwC;AAC9C,MAAM,mCAAmC;AAEzC,SAAS,6BAAkE;AACzE,MAAI;AACF,UAAM,QAAS,WAAuC,4BAA4B;AAClF,WAAO,MAAM,QAAQ,KAAK,IAAK,QAAyC;AAAA,EAC1E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,4BAA4B,SAAuC;AAC1E,MAAI;AACF;AAAC,IAAC,WAAuC,4BAA4B,IAAI;AAAA,EAC3E,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,4BAA6F;AACpG,MAAI;AACF,UAAM,QAAS,WAAuC,2BAA2B;AACjF,WAAO,MAAM,QAAQ,KAAK,IAAK,QAAqE;AAAA,EACtG,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,2BAA2B,QAAkE;AACpG,MAAI;AACF;AAAC,IAAC,WAAuC,2BAA2B,IAAI;AAAA,EAC1E,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,qCAAoD;AAC3D,MAAI;AACF,UAAM,QAAS,WAAuC,qCAAqC;AAC3F,WAAO,OAAO,UAAU,WAAW,QAAQ;AAAA,EAC7C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,oCAAoC,SAAiB;AAC5D,MAAI;AACF;AAAC,IAAC,WAAuC,qCAAqC,IAAI;AAAA,EACpF,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,iCAAiC;AACxC,+BAA6B;AAC7B,sCAAoC,yBAAyB;AAC7D,iCAA+B;AAE/B,MAAI,OAAO,WAAW,YAAa;AAEnC,SAAO,cAAc,IAAI,YAAY,kCAAkC;AAAA,IACrE,QAAQ,EAAE,SAAS,0BAA0B;AAAA,EAC/C,CAAC,CAAC;AACJ;AAEO,SAAS,6BAA6B,SAAuC;AAClF,MAAI,gCAAgC,QAAQ,QAAQ,IAAI,aAAa,eAAe;AAClF,YAAQ,MAAM,8EAA8E;AAAA,EAC9F;AACA,gCAA8B;AAC9B,8BAA4B,OAAO;AACnC,iCAA+B;AACjC;AAEO,SAAS,0BAAwD;AACtE,QAAM,gBAAgB,2BAA2B;AACjD,MAAI,cAAe,QAAO;AAC1B,MAAI,CAAC,6BAA6B;AAEhC,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,CAAC;AAAA,IACV;AACA,UAAM,IAAI,MAAM,sGAAsG;AAAA,EACxH;AACA,SAAO;AACT;AAEO,SAAS,4BAA4B,QAAkE;AAC5G,MAAI,yBAAyB,QAAQ,QAAQ,IAAI,aAAa,eAAe;AAC3E,YAAQ,MAAM,6EAA6E;AAAA,EAC7F;AACA,yBAAuB;AACvB,6BAA2B,MAAM;AACjC,iCAA+B;AACjC;AAEO,SAAS,8BAAsC;AACpD,QAAM,gBAAgB,mCAAmC;AACzD,MAAI,kBAAkB,KAAM,QAAO;AACnC,SAAO;AACT;AAEO,SAAS,oCAAoC,UAAkC;AACpF,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO,MAAM;AAAA,IAAC;AAAA,EAChB;AAEA,QAAM,UAAU,MAAM,SAAS;AAC/B,SAAO,iBAAiB,kCAAkC,OAAO;AACjE,SAAO,MAAM;AACX,WAAO,oBAAoB,kCAAkC,OAAO;AAAA,EACtE;AACF;AAEO,SAAS,yBAAmF;AACjG,QAAM,eAAe,0BAA0B;AAC/C,MAAI,aAAc,QAAO;AACzB,MAAI,CAAC,sBAAsB;AAEzB,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,CAAC;AAAA,IACV;AACA,UAAM,IAAI,MAAM,oGAAoG;AAAA,EACtH;AACA,SAAO;AACT;AAEA,IAAI,uBAAsD;AAW1D,IAAI,wBAA4E;AAEhF,SAAS,sBAAsB,OAAyG;AACtI,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,cAAc;AACtE;AAMO,SAAS,iCAAiC;AAC/C,yBAAuB;AACvB,0BAAwB;AACxB,cAAY,MAAM;AACpB;AAEA,eAAe,oBAA4C;AACzD,MAAI,CAAC,sBAAsB;AACzB,UAAM,UAAU,QAAQ,QAAQ,EAAE;AAAA,MAAK,MACrC,wBAAwB,EAAE,IAAI,CAAC,WAAW;AAAA,QACxC,GAAG;AAAA,QACH,UAAU,MAAM,YAAY;AAAA,MAC9B,EAAE;AAAA,IACJ;AACA,2BAAuB,QAAQ,MAAM,CAAC,QAAQ;AAC5C,UAAI,yBAAyB,SAAS;AACpC,+BAAuB;AAAA,MACzB;AACA,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAEA,eAAe,qBAAkE;AAC/E,MAAI,CAAC,uBAAuB;AAC1B,UAAM,UAAU,QAAQ,QAAQ,EAAE,KAAK,MAAM;AAC3C,YAAM,OAAO,uBAAuB;AACpC,YAAM,QAAQ,oBAAI,IAAmC;AAErD,iBAAW,SAAS,MAAM;AACxB,cAAM,iBAAiB,MAAM,SAAS,CAAC;AACvC,mBAAW,CAAC,QAAQ,SAAS,KAAK,OAAO,QAAQ,cAAc,GAAG;AAChE,gBAAM,UAAU,MAAM,QAAQ,SAAS,IAAI,YAAY,CAAC,SAAS;AACjE,gBAAM,WAAW,MAAM,IAAI,MAAM,KAAK,CAAC;AACvC,qBAAW,eAAe,SAAS;AACjC,gBAAI,OAAO,gBAAgB,UAAU;AACnC,uBAAS,KAAK,EAAE,UAAU,aAAa,UAAU,MAAM,UAAU,UAAU,EAAE,CAAC;AAC9E;AAAA,YACF;AACA,gBAAI,sBAAsB,WAAW,GAAG;AACtC,oBAAM,EAAE,UAAU,WAAW,GAAG,GAAG,UAAU,IAAI;AACjD,uBAAS,KAAK;AAAA,gBACZ;AAAA,gBACA,UAAU,MAAM;AAAA,gBAChB,UAAU,OAAO,aAAa,WAAW,WAAW;AAAA,gBACpD;AAAA,cACF,CAAC;AACD;AAAA,YACF;AAAA,UACF;AACA,gBAAM,IAAI,QAAQ,QAAQ;AAAA,QAC5B;AAAA,MACF;AAEA,iBAAW,CAAC,QAAQ,OAAO,KAAK,MAAM,QAAQ,GAAG;AAC/C,cAAM,IAAI,QAAQ,QAAQ,KAAK,CAAC,GAAG,OAAO,EAAE,YAAY,MAAM,EAAE,YAAY,EAAE,CAAC;AAAA,MACjF;AAEA,aAAO;AAAA,IACT,CAAC;AACD,4BAAwB,QAAQ,MAAM,CAAC,QAAQ;AAC7C,UAAI,0BAA0B,SAAS;AACrC,gCAAwB;AAAA,MAC1B;AACA,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAEA,MAAM,cAAc,oBAAI,IAAiG;AAEzH,SAAS,mBAAmB,QAAmE;AAC7F,QAAM,OAAO;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,SAAO,KAAK,KAAK,CAAC,QAAQ,OAAO,MAAM;AACzC;AAEA,SAAS,2BAA2B,KAAc,KAAa,UAAgG;AAC7J,MAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,UAAM,IAAI,MAAM,oCAAoC,GAAG,WAAW,QAAQ,4BAA4B;AAAA,EACxG;AACA,QAAM,SAAU,IAAyD,WAAY;AACrF,MAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,UAAM,IAAI,MAAM,oCAAoC,GAAG,WAAW,QAAQ,4BAA4B;AAAA,EACxG;AACA,MAAI,EAAE,cAAc,WAAW,CAAC,OAAO,YAAY,OAAO,OAAO,aAAa,UAAU;AACtF,UAAM,IAAI,MAAM,qBAAqB,GAAG,WAAW,QAAQ,uBAAuB;AAAA,EACpF;AACA,QAAM,WAAW,OAAO;AACxB,MAAI,OAAO,SAAS,OAAO,YAAY,SAAS,GAAG,WAAW,GAAG;AAC/D,UAAM,IAAI,MAAM,qBAAqB,GAAG,WAAW,QAAQ,0CAA0C;AAAA,EACvG;AACA,QAAM,aAAa;AAAA,IACjB,GAAG;AAAA,IACH;AAAA,EACF;AAEA,MAAI,YAAY,cAAc,OAAO,WAAW,WAAW,YAAY;AACrE,QAAI,OAAO,SAAS,UAAU,YAAY,SAAS,MAAM,WAAW,GAAG;AACrE,YAAM,IAAI,MAAM,qBAAqB,SAAS,EAAE,WAAW,QAAQ,qBAAqB;AAAA,IAC1F;AACA,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,mBAAmB,UAAqC,GAAG;AAC9D,UAAM,IAAI;AAAA,MACR,qBAAqB,SAAS,EAAE,WAAW,QAAQ;AAAA,IACrD;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,wBACP,QAC8B;AAC9B,SAAO,YAAY,UAAU,OAAO,OAAO,WAAW;AACxD;AAEA,SAAS,4BACP,QACkC;AAClC,SAAO,CAAC,wBAAwB,MAAM;AACxC;AAEA,eAAe,UAAU,OAAyG;AAChI,MAAI,CAAC,YAAY,IAAI,MAAM,GAAG,GAAG;AAC/B,UAAM,UAAU,MAAM,OAAO,EAAE,KAAK,CAAC,QAAQ,2BAA2B,KAAK,MAAM,KAAK,MAAM,QAAQ,CAAC;AACvG,gBAAY,IAAI,MAAM,KAAK,OAAO;AAAA,EACpC;AACA,SAAO,YAAY,IAAI,MAAM,GAAG;AAClC;AAEA,eAAe,0BAA0B,QAAgD;AACvF,QAAM,QAAQ,MAAM,mBAAmB;AACvC,QAAM,eAAe,MAAM,IAAI,MAAM,KAAK,CAAC;AAC3C,QAAM,kBAAgC,CAAC;AAEvC,aAAW,CAAC,iBAAiB,gBAAgB,KAAK,MAAM,QAAQ,GAAG;AACjE,QAAI,oBAAoB,OAAQ;AAChC,QAAI,CAAC,gBAAgB,SAAS,GAAG,EAAG;AACpC,UAAM,UAAU,IAAI,OAAO,IAAI,gBAAgB,QAAQ,sBAAsB,MAAM,EAAE,QAAQ,OAAO,IAAI,CAAC,GAAG;AAC5G,QAAI,CAAC,QAAQ,KAAK,MAAM,EAAG;AAC3B,oBAAgB,KAAK,GAAG,gBAAgB;AAAA,EAC1C;AAEA,QAAM,iBAAiB,oBAAI,IAAwB;AACnD,aAAW,SAAS,CAAC,GAAG,cAAc,GAAG,eAAe,GAAG;AACzD,UAAM,WAAW,GAAG,MAAM,QAAQ,IAAI,MAAM,QAAQ;AACpD,UAAM,WAAW,eAAe,IAAI,QAAQ;AAC5C,QAAI,CAAC,aAAa,MAAM,YAAY,MAAM,SAAS,YAAY,IAAI;AACjE,qBAAe,IAAI,UAAU,KAAK;AAAA,IACpC;AAAA,EACF;AAEA,SAAO,MAAM,KAAK,eAAe,OAAO,CAAC,EAAE,KAAK,CAAC,GAAG,OAAO,EAAE,YAAY,MAAM,EAAE,YAAY,EAAE;AACjG;AAEA,eAAsB,0BAA4D;AAChF,QAAM,gBAAgB,MAAM,kBAAkB;AAC9C,QAAM,SAAS,MAAM,QAAQ;AAAA,IAC3B,cAAc,IAAI,OAAO,UAAU;AACjC,YAAM,SAAS,MAAM,UAAU,KAAK;AACpC,UAAI,CAAC,wBAAwB,MAAM,EAAG,QAAO;AAC7C,aAAO,EAAE,GAAG,QAAQ,UAAU,MAAM,UAAU,KAAK,MAAM,IAAI;AAAA,IAC/D,CAAC;AAAA,EACH;AACA,QAAM,OAAO,oBAAI,IAAmC;AACpD,aAAW,UAAU,QAAQ;AAC3B,QAAI,CAAC,OAAQ;AACb,QAAI,CAAC,KAAK,IAAI,OAAO,SAAS,EAAE,GAAG;AACjC,WAAK,IAAI,OAAO,SAAS,IAAI,MAAM;AAAA,IACrC;AAAA,EACF;AACA,SAAO,MAAM,KAAK,KAAK,OAAO,CAAC;AACjC;AAEA,eAAsB,wBAAwB,UAAyD;AACrG,QAAM,gBAAgB,MAAM,kBAAkB;AAC9C,aAAW,SAAS,eAAe;AACjC,UAAM,SAAS,MAAM,UAAU,KAAK;AACpC,QAAI,CAAC,wBAAwB,MAAM,EAAG;AACtC,QAAI,OAAO,SAAS,OAAO,UAAU;AACnC,aAAO,EAAE,GAAG,QAAQ,UAAU,MAAM,UAAU,KAAK,MAAM,IAAI;AAAA,IAC/D;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,4BAA4B,UAA6D;AAC7G,QAAM,gBAAgB,MAAM,kBAAkB;AAC9C,aAAW,SAAS,eAAe;AACjC,UAAM,SAAS,MAAM,UAAU,KAAK;AACpC,QAAI,CAAC,4BAA4B,MAAM,EAAG;AAC1C,QAAI,OAAO,SAAS,OAAO,UAAU;AACnC,aAAO,EAAE,GAAG,QAAQ,UAAU,MAAM,UAAU,KAAK,MAAM,IAAI;AAAA,IAC/D;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,4BAA4B,QAA2D;AAC3G,QAAM,UAAU,MAAM,0BAA0B,MAAM;AACtD,QAAM,UAAmC,CAAC;AAC1C,aAAW,EAAE,UAAU,WAAW,SAAS,KAAK,SAAS;AACvD,UAAM,SAAS,MAAM,wBAAwB,QAAQ;AACrD,QAAI,CAAC,OAAQ;AACb,UAAM,oBAAoB,YACtB,EAAE,GAAG,WAAW,UAAU,OAAO,aAAa,WAAW,WAAW,EAAE,IACtE,EAAE,UAAU,OAAO,aAAa,WAAW,WAAW,EAAE;AAC5D,YAAQ,KAAK,EAAE,GAAG,QAAQ,WAAW,kBAAkB,CAAC;AAAA,EAC1D;AACA,SAAO;AACT;AAEA,eAAsB,gCAAgC,QAA+D;AACnH,QAAM,UAAU,MAAM,0BAA0B,MAAM;AACtD,QAAM,UAAuC,CAAC;AAC9C,aAAW,EAAE,UAAU,WAAW,SAAS,KAAK,SAAS;AACvD,UAAM,SAAS,MAAM,4BAA4B,QAAQ;AACzD,QAAI,CAAC,OAAQ;AACb,UAAM,oBAAoB,YACtB,EAAE,GAAG,WAAW,UAAU,OAAO,aAAa,WAAW,WAAW,EAAE,IACtE,EAAE,UAAU,OAAO,aAAa,WAAW,WAAW,EAAE;AAC5D,YAAQ,KAAK,EAAE,GAAG,QAAQ,WAAW,kBAAkB,CAAC;AAAA,EAC1D;AACA,SAAO;AACT;",
+  "sourcesContent": ["import type { ModuleInjectionWidgetEntry } from '../registry'\nimport type {\n  InjectionAnyWidgetModule,\n  InjectionDataWidgetModule,\n  InjectionWidgetMetadata,\n  InjectionWidgetModule,\n  InjectionSpotId,\n  ModuleInjectionSlot,\n  ModuleInjectionTable,\n  InjectionWidgetPlacement,\n} from './injection'\n\ntype LoadedWidgetModule = InjectionWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }\ntype LoadedDataWidgetModule = InjectionDataWidgetModule & { metadata: InjectionWidgetMetadata }\n\nexport type LoadedInjectionWidget = LoadedWidgetModule & {\n  moduleId: string\n  key: string\n  placement?: {\n    groupId?: string\n    groupLabel?: string\n    groupDescription?: string\n    column?: 1 | 2\n    kind?: 'tab' | 'group' | 'stack'\n    [k: string]: unknown\n  }\n}\n\nexport type LoadedInjectionDataWidget = LoadedDataWidgetModule & {\n  moduleId: string\n  key: string\n  placement?: {\n    groupId?: string\n    groupLabel?: string\n    groupDescription?: string\n    column?: 1 | 2\n    kind?: 'tab' | 'group' | 'stack'\n    [k: string]: unknown\n  }\n}\n\ntype WidgetEntry = ModuleInjectionWidgetEntry & { moduleId: string }\n\n// Registration pattern for publishable packages\nlet _coreInjectionWidgetEntries: ModuleInjectionWidgetEntry[] | null = null\nlet _coreInjectionTables: Array<{ moduleId: string; table: ModuleInjectionTable }> | null = null\nlet _enabledModuleIds: ReadonlySet<string> | null = null\nlet _injectionRegistryVersion = 0\nconst GLOBAL_INJECTION_WIDGETS_KEY = '__openMercatoCoreInjectionWidgetEntries__'\nconst GLOBAL_INJECTION_TABLES_KEY = '__openMercatoCoreInjectionTables__'\nconst GLOBAL_ENABLED_MODULE_IDS_KEY = '__openMercatoEnabledModuleIds__'\nconst GLOBAL_INJECTION_REGISTRY_VERSION_KEY = '__openMercatoCoreInjectionRegistryVersion__'\nconst INJECTION_REGISTRY_CHANGED_EVENT = '__openMercatoInjectionRegistryChanged__'\n\nfunction readGlobalInjectionWidgets(): ModuleInjectionWidgetEntry[] | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_INJECTION_WIDGETS_KEY]\n    return Array.isArray(value) ? (value as ModuleInjectionWidgetEntry[]) : null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalInjectionWidgets(entries: ModuleInjectionWidgetEntry[]) {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_INJECTION_WIDGETS_KEY] = entries\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\nfunction readGlobalEnabledModuleIds(): ReadonlySet<string> | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_ENABLED_MODULE_IDS_KEY]\n    if (value instanceof Set) return value as ReadonlySet<string>\n    return null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalEnabledModuleIds(ids: ReadonlySet<string>) {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_ENABLED_MODULE_IDS_KEY] = ids\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\nfunction readGlobalInjectionTables(): Array<{ moduleId: string; table: ModuleInjectionTable }> | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_INJECTION_TABLES_KEY]\n    return Array.isArray(value) ? (value as Array<{ moduleId: string; table: ModuleInjectionTable }>) : null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalInjectionTables(tables: Array<{ moduleId: string; table: ModuleInjectionTable }>) {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_INJECTION_TABLES_KEY] = tables\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\nfunction readGlobalInjectionRegistryVersion(): number | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_INJECTION_REGISTRY_VERSION_KEY]\n    return typeof value === 'number' ? value : null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalInjectionRegistryVersion(version: number) {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_INJECTION_REGISTRY_VERSION_KEY] = version\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\nfunction notifyInjectionRegistryChanged() {\n  _injectionRegistryVersion += 1\n  writeGlobalInjectionRegistryVersion(_injectionRegistryVersion)\n  invalidateInjectionWidgetCache()\n\n  if (typeof window === 'undefined') return\n\n  window.dispatchEvent(new CustomEvent(INJECTION_REGISTRY_CHANGED_EVENT, {\n    detail: { version: _injectionRegistryVersion },\n  }))\n}\n\nexport function registerCoreInjectionWidgets(entries: ModuleInjectionWidgetEntry[]) {\n  if (_coreInjectionWidgetEntries !== null && process.env.NODE_ENV === 'development') {\n    console.debug('[Bootstrap] Core injection widgets re-registered (this may occur during HMR)')\n  }\n  _coreInjectionWidgetEntries = entries\n  writeGlobalInjectionWidgets(entries)\n  notifyInjectionRegistryChanged()\n}\n\nexport function getCoreInjectionWidgets(): ModuleInjectionWidgetEntry[] {\n  const globalEntries = readGlobalInjectionWidgets()\n  if (globalEntries) return globalEntries\n  if (!_coreInjectionWidgetEntries) {\n    // On client-side, bootstrap doesn't run - return empty array gracefully\n    if (typeof window !== 'undefined') {\n      return []\n    }\n    throw new Error('[Bootstrap] Core injection widgets not registered. Call registerCoreInjectionWidgets() at bootstrap.')\n  }\n  return _coreInjectionWidgetEntries\n}\n\nexport function registerCoreInjectionTables(tables: Array<{ moduleId: string; table: ModuleInjectionTable }>) {\n  if (_coreInjectionTables !== null && process.env.NODE_ENV === 'development') {\n    console.debug('[Bootstrap] Core injection tables re-registered (this may occur during HMR)')\n  }\n  _coreInjectionTables = tables\n  writeGlobalInjectionTables(tables)\n  notifyInjectionRegistryChanged()\n}\n\n/**\n * Register the canonical set of enabled module IDs for the running app.\n *\n * This is the authoritative signal used by `requiredModules` widget gating \u2014\n * deriving \"enabled\" from injection tables or widget entries is unreliable\n * because modules without injection widgets (for example `ai_assistant`) do\n * not contribute entries to either source. Bootstrap callers should pass\n * every module ID present in the app's module registry.\n */\nexport function registerEnabledModuleIds(moduleIds: Iterable<string>) {\n  const next = new Set<string>()\n  for (const moduleId of moduleIds) {\n    if (typeof moduleId === 'string' && moduleId.length > 0) next.add(moduleId)\n  }\n  if (_enabledModuleIds !== null && process.env.NODE_ENV === 'development') {\n    console.debug('[Bootstrap] Enabled module IDs re-registered (this may occur during HMR)')\n  }\n  _enabledModuleIds = next\n  writeGlobalEnabledModuleIds(next)\n  notifyInjectionRegistryChanged()\n}\n\nexport function getEnabledModuleIds(): ReadonlySet<string> | null {\n  return readGlobalEnabledModuleIds() ?? _enabledModuleIds\n}\n\nexport function getInjectionRegistryVersion(): number {\n  const globalVersion = readGlobalInjectionRegistryVersion()\n  if (globalVersion !== null) return globalVersion\n  return _injectionRegistryVersion\n}\n\nexport function subscribeToInjectionRegistryChanges(listener: () => void): () => void {\n  if (typeof window === 'undefined') {\n    return () => {}\n  }\n\n  const handler = () => listener()\n  window.addEventListener(INJECTION_REGISTRY_CHANGED_EVENT, handler)\n  return () => {\n    window.removeEventListener(INJECTION_REGISTRY_CHANGED_EVENT, handler)\n  }\n}\n\nexport function getCoreInjectionTables(): Array<{ moduleId: string; table: ModuleInjectionTable }> {\n  const globalTables = readGlobalInjectionTables()\n  if (globalTables) return globalTables\n  if (!_coreInjectionTables) {\n    // On client-side, bootstrap doesn't run - return empty array gracefully\n    if (typeof window !== 'undefined') {\n      return []\n    }\n    throw new Error('[Bootstrap] Core injection tables not registered. Call registerCoreInjectionTables() at bootstrap.')\n  }\n  return _coreInjectionTables\n}\n\nlet widgetEntriesPromise: Promise<WidgetEntry[]> | null = null\ntype TableEntry = {\n  widgetId: string\n  moduleId: string\n  priority: number\n  placement?: ModuleInjectionSlot extends infer S\n    ? S extends { widgetId: string }\n      ? Omit<S, 'widgetId' | 'priority'>\n      : never\n    : never\n}\nlet injectionTablePromise: Promise<Map<InjectionSpotId, TableEntry[]>> | null = null\n\nfunction isInjectionSlotObject(value: ModuleInjectionSlot): value is InjectionWidgetPlacement & { widgetId: string; priority?: number } {\n  return typeof value === 'object' && value !== null && 'widgetId' in value\n}\n\n/**\n * Invalidate the widget entries and widget module cache.\n * Call this when the generated registry is updated or modules are reloaded.\n */\nexport function invalidateInjectionWidgetCache() {\n  widgetEntriesPromise = null\n  injectionTablePromise = null\n  widgetCache.clear()\n  warnedRequiredModuleSkips.clear()\n}\n\nasync function loadWidgetEntries(): Promise<WidgetEntry[]> {\n  if (!widgetEntriesPromise) {\n    const promise = Promise.resolve().then(() =>\n      getCoreInjectionWidgets().map((entry) => ({\n        ...entry,\n        moduleId: entry.moduleId || 'unknown',\n      }))\n    )\n    widgetEntriesPromise = promise.catch((err) => {\n      if (widgetEntriesPromise === promise) {\n        widgetEntriesPromise = null\n      }\n      throw err\n    })\n  }\n  return widgetEntriesPromise\n}\n\nasync function loadInjectionTable(): Promise<Map<InjectionSpotId, TableEntry[]>> {\n  if (!injectionTablePromise) {\n    const promise = Promise.resolve().then(() => {\n      const list = getCoreInjectionTables()\n      const table = new Map<InjectionSpotId, TableEntry[]>()\n\n      for (const entry of list) {\n        const injectionTable = entry.table ?? {}\n        for (const [spotId, widgetIds] of Object.entries(injectionTable)) {\n          const widgets = Array.isArray(widgetIds) ? widgetIds : [widgetIds]\n          const existing = table.get(spotId) ?? []\n          for (const widgetEntry of widgets) {\n            if (typeof widgetEntry === 'string') {\n              existing.push({ widgetId: widgetEntry, moduleId: entry.moduleId, priority: 0 })\n              continue\n            }\n            if (isInjectionSlotObject(widgetEntry)) {\n              const { widgetId, priority = 0, ...placement } = widgetEntry\n              existing.push({\n                widgetId,\n                moduleId: entry.moduleId,\n                priority: typeof priority === 'number' ? priority : 0,\n                placement,\n              })\n              continue\n            }\n          }\n          table.set(spotId, existing)\n        }\n      }\n\n      for (const [spotId, widgets] of table.entries()) {\n        table.set(spotId, widgets.sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0)))\n      }\n\n      return table\n    })\n    injectionTablePromise = promise.catch((err) => {\n      if (injectionTablePromise === promise) {\n        injectionTablePromise = null\n      }\n      throw err\n    })\n  }\n  return injectionTablePromise\n}\n\nconst widgetCache = new Map<string, Promise<InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }>>()\n\nfunction isDataWidgetModule(widget: Record<string, unknown>): widget is LoadedDataWidgetModule {\n  const keys = [\n    'columns',\n    'rowActions',\n    'bulkActions',\n    'filters',\n    'fields',\n    'steps',\n    'badge',\n    'menuItems',\n  ]\n  return keys.some((key) => key in widget)\n}\n\nfunction ensureValidInjectionModule(mod: unknown, key: string, moduleId: string): (InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }) {\n  if (!mod || typeof mod !== 'object') {\n    throw new Error(`Invalid injection widget module \"${key}\" from \"${moduleId}\" (expected object export)`)\n  }\n  const widget = (mod as { default?: InjectionAnyWidgetModule<any, any> }).default ?? (mod as InjectionAnyWidgetModule<any, any>)\n  if (!widget || typeof widget !== 'object') {\n    throw new Error(`Invalid injection widget export \"${key}\" from \"${moduleId}\" (missing default export)`) \n  }\n  if (!('metadata' in widget) || !widget.metadata || typeof widget.metadata !== 'object') {\n    throw new Error(`Injection widget \"${key}\" from \"${moduleId}\" is missing metadata`)\n  }\n  const metadata = widget.metadata\n  if (typeof metadata.id !== 'string' || metadata.id.length === 0) {\n    throw new Error(`Injection widget \"${key}\" from \"${moduleId}\" metadata.id must be a non-empty string`)\n  }\n  const normalized = {\n    ...widget,\n    metadata,\n  }\n\n  if ('Widget' in normalized && typeof normalized.Widget === 'function') {\n    if (typeof metadata.title !== 'string' || metadata.title.length === 0) {\n      throw new Error(`Injection widget \"${metadata.id}\" from \"${moduleId}\" must have a title`)\n    }\n    return normalized\n  }\n\n  if (!isDataWidgetModule(normalized as Record<string, unknown>)) {\n    throw new Error(\n      `Injection widget \"${metadata.id}\" from \"${moduleId}\" must export either Widget component or a declarative data payload`\n    )\n  }\n\n  return normalized\n}\n\nfunction isLoadedInjectionWidget(\n  module: InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }\n): module is LoadedWidgetModule {\n  return 'Widget' in module && typeof module.Widget === 'function'\n}\n\nfunction isLoadedInjectionDataWidget(\n  module: InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }\n): module is LoadedDataWidgetModule {\n  return !isLoadedInjectionWidget(module)\n}\n\nasync function loadEntry(entry: WidgetEntry): Promise<InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }> {\n  if (!widgetCache.has(entry.key)) {\n    const promise = entry.loader().then((mod) => ensureValidInjectionModule(mod, entry.key, entry.moduleId))\n    widgetCache.set(entry.key, promise)\n  }\n  return widgetCache.get(entry.key)!\n}\n\nfunction getEnabledModuleIdsForInjection(): ReadonlySet<string> {\n  // Prefer the explicit enabled-modules registry populated by bootstrap.\n  // This is the only signal that includes modules without injection widgets\n  // (for example `ai_assistant`), so it is required for `requiredModules`\n  // gating to be sound.\n  const explicit = readGlobalEnabledModuleIds() ?? _enabledModuleIds\n  if (explicit) return explicit\n\n  // Fallback: derive from injection tables and widget entries. This keeps\n  // older bootstrap paths (and callers that have not yet wired\n  // `registerEnabledModuleIds`) working \u2014 at the cost of mis-classifying\n  // dependency modules that ship no widgets. New apps MUST call\n  // `registerEnabledModuleIds` to get accurate gating.\n  const enabled = new Set<string>()\n  const tables = readGlobalInjectionTables() ?? _coreInjectionTables ?? []\n  for (const entry of tables) {\n    if (entry?.moduleId) enabled.add(entry.moduleId)\n  }\n  const entries = readGlobalInjectionWidgets() ?? _coreInjectionWidgetEntries ?? []\n  for (const entry of entries) {\n    if (entry?.moduleId) enabled.add(entry.moduleId)\n  }\n  return enabled\n}\n\nfunction widgetMissingRequiredModules(\n  metadata: InjectionWidgetMetadata,\n  enabledModuleIds: ReadonlySet<string>,\n): string[] {\n  const required = metadata.requiredModules\n  if (!Array.isArray(required) || required.length === 0) return []\n  const missing: string[] = []\n  for (const moduleId of required) {\n    if (typeof moduleId !== 'string' || moduleId.length === 0) continue\n    if (!enabledModuleIds.has(moduleId)) missing.push(moduleId)\n  }\n  return missing\n}\n\nconst warnedRequiredModuleSkips = new Set<string>()\n\nfunction warnSkippedWidget(metadataId: string, missingModules: string[]) {\n  const key = `${metadataId}:${missingModules.join(',')}`\n  if (warnedRequiredModuleSkips.has(key)) return\n  warnedRequiredModuleSkips.add(key)\n  if (process.env.NODE_ENV === 'development') {\n    console.debug(\n      `[InjectionLoader] Skipping widget \"${metadataId}\" \u2014 required module(s) not enabled: ${missingModules.join(', ')}`,\n    )\n  }\n}\n\nasync function getResolvedEntriesForSpot(spotId: InjectionSpotId): Promise<TableEntry[]> {\n  const table = await loadInjectionTable()\n  const exactEntries = table.get(spotId) ?? []\n  const wildcardEntries: TableEntry[] = []\n\n  for (const [candidateSpotId, candidateEntries] of table.entries()) {\n    if (candidateSpotId === spotId) continue\n    if (!candidateSpotId.includes('*')) continue\n    const pattern = new RegExp(`^${candidateSpotId.replace(/[.+?^${}()|[\\]\\\\]/g, '\\\\$&').replace(/\\*/g, '.*')}$`)\n    if (!pattern.test(spotId)) continue\n    wildcardEntries.push(...candidateEntries)\n  }\n\n  const dedupedEntries = new Map<string, TableEntry>()\n  for (const entry of [...exactEntries, ...wildcardEntries]) {\n    const cacheKey = `${entry.moduleId}:${entry.widgetId}`\n    const previous = dedupedEntries.get(cacheKey)\n    if (!previous || (entry.priority ?? 0) > (previous.priority ?? 0)) {\n      dedupedEntries.set(cacheKey, entry)\n    }\n  }\n\n  return Array.from(dedupedEntries.values()).sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0))\n}\n\nexport async function loadAllInjectionWidgets(): Promise<LoadedInjectionWidget[]> {\n  const widgetEntries = await loadWidgetEntries()\n  const enabledModuleIds = getEnabledModuleIdsForInjection()\n  const loaded = await Promise.all(\n    widgetEntries.map(async (entry) => {\n      const module = await loadEntry(entry)\n      if (!isLoadedInjectionWidget(module)) return null\n      const missing = widgetMissingRequiredModules(module.metadata, enabledModuleIds)\n      if (missing.length > 0) {\n        warnSkippedWidget(module.metadata.id, missing)\n        return null\n      }\n      return { ...module, moduleId: entry.moduleId, key: entry.key }\n    })\n  )\n  const byId = new Map<string, LoadedInjectionWidget>()\n  for (const widget of loaded) {\n    if (!widget) continue\n    if (!byId.has(widget.metadata.id)) {\n      byId.set(widget.metadata.id, widget)\n    }\n  }\n  return Array.from(byId.values())\n}\n\nexport async function loadInjectionWidgetById(widgetId: string): Promise<LoadedInjectionWidget | null> {\n  const widgetEntries = await loadWidgetEntries()\n  const enabledModuleIds = getEnabledModuleIdsForInjection()\n  for (const entry of widgetEntries) {\n    const module = await loadEntry(entry)\n    if (!isLoadedInjectionWidget(module)) continue\n    if (module.metadata.id === widgetId) {\n      const missing = widgetMissingRequiredModules(module.metadata, enabledModuleIds)\n      if (missing.length > 0) {\n        warnSkippedWidget(module.metadata.id, missing)\n        return null\n      }\n      return { ...module, moduleId: entry.moduleId, key: entry.key }\n    }\n  }\n  return null\n}\n\nexport async function loadInjectionDataWidgetById(widgetId: string): Promise<LoadedInjectionDataWidget | null> {\n  const widgetEntries = await loadWidgetEntries()\n  const enabledModuleIds = getEnabledModuleIdsForInjection()\n  for (const entry of widgetEntries) {\n    const module = await loadEntry(entry)\n    if (!isLoadedInjectionDataWidget(module)) continue\n    if (module.metadata.id === widgetId) {\n      const missing = widgetMissingRequiredModules(module.metadata, enabledModuleIds)\n      if (missing.length > 0) {\n        warnSkippedWidget(module.metadata.id, missing)\n        return null\n      }\n      return { ...module, moduleId: entry.moduleId, key: entry.key }\n    }\n  }\n  return null\n}\n\nexport async function loadInjectionWidgetsForSpot(spotId: InjectionSpotId): Promise<LoadedInjectionWidget[]> {\n  const entries = await getResolvedEntriesForSpot(spotId)\n  const widgets: LoadedInjectionWidget[] = []\n  for (const { widgetId, placement, priority } of entries) {\n    const widget = await loadInjectionWidgetById(widgetId)\n    if (!widget) continue\n    const combinedPlacement = placement\n      ? { ...placement, priority: typeof priority === 'number' ? priority : 0 }\n      : { priority: typeof priority === 'number' ? priority : 0 }\n    widgets.push({ ...widget, placement: combinedPlacement })\n  }\n  return widgets\n}\n\nexport async function loadInjectionDataWidgetsForSpot(spotId: InjectionSpotId): Promise<LoadedInjectionDataWidget[]> {\n  const entries = await getResolvedEntriesForSpot(spotId)\n  const widgets: LoadedInjectionDataWidget[] = []\n  for (const { widgetId, placement, priority } of entries) {\n    const widget = await loadInjectionDataWidgetById(widgetId)\n    if (!widget) continue\n    const combinedPlacement = placement\n      ? { ...placement, priority: typeof priority === 'number' ? priority : 0 }\n      : { priority: typeof priority === 'number' ? priority : 0 }\n    widgets.push({ ...widget, placement: combinedPlacement })\n  }\n  return widgets\n}\n"],
+  "mappings": "AA4CA,IAAI,8BAAmE;AACvE,IAAI,uBAAwF;AAC5F,IAAI,oBAAgD;AACpD,IAAI,4BAA4B;AAChC,MAAM,+BAA+B;AACrC,MAAM,8BAA8B;AACpC,MAAM,gCAAgC;AACtC,MAAM,wCAAwC;AAC9C,MAAM,mCAAmC;AAEzC,SAAS,6BAAkE;AACzE,MAAI;AACF,UAAM,QAAS,WAAuC,4BAA4B;AAClF,WAAO,MAAM,QAAQ,KAAK,IAAK,QAAyC;AAAA,EAC1E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,4BAA4B,SAAuC;AAC1E,MAAI;AACF;AAAC,IAAC,WAAuC,4BAA4B,IAAI;AAAA,EAC3E,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,6BAAyD;AAChE,MAAI;AACF,UAAM,QAAS,WAAuC,6BAA6B;AACnF,QAAI,iBAAiB,IAAK,QAAO;AACjC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,4BAA4B,KAA0B;AAC7D,MAAI;AACF;AAAC,IAAC,WAAuC,6BAA6B,IAAI;AAAA,EAC5E,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,4BAA6F;AACpG,MAAI;AACF,UAAM,QAAS,WAAuC,2BAA2B;AACjF,WAAO,MAAM,QAAQ,KAAK,IAAK,QAAqE;AAAA,EACtG,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,2BAA2B,QAAkE;AACpG,MAAI;AACF;AAAC,IAAC,WAAuC,2BAA2B,IAAI;AAAA,EAC1E,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,qCAAoD;AAC3D,MAAI;AACF,UAAM,QAAS,WAAuC,qCAAqC;AAC3F,WAAO,OAAO,UAAU,WAAW,QAAQ;AAAA,EAC7C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,oCAAoC,SAAiB;AAC5D,MAAI;AACF;AAAC,IAAC,WAAuC,qCAAqC,IAAI;AAAA,EACpF,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,iCAAiC;AACxC,+BAA6B;AAC7B,sCAAoC,yBAAyB;AAC7D,iCAA+B;AAE/B,MAAI,OAAO,WAAW,YAAa;AAEnC,SAAO,cAAc,IAAI,YAAY,kCAAkC;AAAA,IACrE,QAAQ,EAAE,SAAS,0BAA0B;AAAA,EAC/C,CAAC,CAAC;AACJ;AAEO,SAAS,6BAA6B,SAAuC;AAClF,MAAI,gCAAgC,QAAQ,QAAQ,IAAI,aAAa,eAAe;AAClF,YAAQ,MAAM,8EAA8E;AAAA,EAC9F;AACA,gCAA8B;AAC9B,8BAA4B,OAAO;AACnC,iCAA+B;AACjC;AAEO,SAAS,0BAAwD;AACtE,QAAM,gBAAgB,2BAA2B;AACjD,MAAI,cAAe,QAAO;AAC1B,MAAI,CAAC,6BAA6B;AAEhC,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,CAAC;AAAA,IACV;AACA,UAAM,IAAI,MAAM,sGAAsG;AAAA,EACxH;AACA,SAAO;AACT;AAEO,SAAS,4BAA4B,QAAkE;AAC5G,MAAI,yBAAyB,QAAQ,QAAQ,IAAI,aAAa,eAAe;AAC3E,YAAQ,MAAM,6EAA6E;AAAA,EAC7F;AACA,yBAAuB;AACvB,6BAA2B,MAAM;AACjC,iCAA+B;AACjC;AAWO,SAAS,yBAAyB,WAA6B;AACpE,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,YAAY,WAAW;AAChC,QAAI,OAAO,aAAa,YAAY,SAAS,SAAS,EAAG,MAAK,IAAI,QAAQ;AAAA,EAC5E;AACA,MAAI,sBAAsB,QAAQ,QAAQ,IAAI,aAAa,eAAe;AACxE,YAAQ,MAAM,0EAA0E;AAAA,EAC1F;AACA,sBAAoB;AACpB,8BAA4B,IAAI;AAChC,iCAA+B;AACjC;AAEO,SAAS,sBAAkD;AAChE,SAAO,2BAA2B,KAAK;AACzC;AAEO,SAAS,8BAAsC;AACpD,QAAM,gBAAgB,mCAAmC;AACzD,MAAI,kBAAkB,KAAM,QAAO;AACnC,SAAO;AACT;AAEO,SAAS,oCAAoC,UAAkC;AACpF,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO,MAAM;AAAA,IAAC;AAAA,EAChB;AAEA,QAAM,UAAU,MAAM,SAAS;AAC/B,SAAO,iBAAiB,kCAAkC,OAAO;AACjE,SAAO,MAAM;AACX,WAAO,oBAAoB,kCAAkC,OAAO;AAAA,EACtE;AACF;AAEO,SAAS,yBAAmF;AACjG,QAAM,eAAe,0BAA0B;AAC/C,MAAI,aAAc,QAAO;AACzB,MAAI,CAAC,sBAAsB;AAEzB,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,CAAC;AAAA,IACV;AACA,UAAM,IAAI,MAAM,oGAAoG;AAAA,EACtH;AACA,SAAO;AACT;AAEA,IAAI,uBAAsD;AAW1D,IAAI,wBAA4E;AAEhF,SAAS,sBAAsB,OAAyG;AACtI,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,cAAc;AACtE;AAMO,SAAS,iCAAiC;AAC/C,yBAAuB;AACvB,0BAAwB;AACxB,cAAY,MAAM;AAClB,4BAA0B,MAAM;AAClC;AAEA,eAAe,oBAA4C;AACzD,MAAI,CAAC,sBAAsB;AACzB,UAAM,UAAU,QAAQ,QAAQ,EAAE;AAAA,MAAK,MACrC,wBAAwB,EAAE,IAAI,CAAC,WAAW;AAAA,QACxC,GAAG;AAAA,QACH,UAAU,MAAM,YAAY;AAAA,MAC9B,EAAE;AAAA,IACJ;AACA,2BAAuB,QAAQ,MAAM,CAAC,QAAQ;AAC5C,UAAI,yBAAyB,SAAS;AACpC,+BAAuB;AAAA,MACzB;AACA,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAEA,eAAe,qBAAkE;AAC/E,MAAI,CAAC,uBAAuB;AAC1B,UAAM,UAAU,QAAQ,QAAQ,EAAE,KAAK,MAAM;AAC3C,YAAM,OAAO,uBAAuB;AACpC,YAAM,QAAQ,oBAAI,IAAmC;AAErD,iBAAW,SAAS,MAAM;AACxB,cAAM,iBAAiB,MAAM,SAAS,CAAC;AACvC,mBAAW,CAAC,QAAQ,SAAS,KAAK,OAAO,QAAQ,cAAc,GAAG;AAChE,gBAAM,UAAU,MAAM,QAAQ,SAAS,IAAI,YAAY,CAAC,SAAS;AACjE,gBAAM,WAAW,MAAM,IAAI,MAAM,KAAK,CAAC;AACvC,qBAAW,eAAe,SAAS;AACjC,gBAAI,OAAO,gBAAgB,UAAU;AACnC,uBAAS,KAAK,EAAE,UAAU,aAAa,UAAU,MAAM,UAAU,UAAU,EAAE,CAAC;AAC9E;AAAA,YACF;AACA,gBAAI,sBAAsB,WAAW,GAAG;AACtC,oBAAM,EAAE,UAAU,WAAW,GAAG,GAAG,UAAU,IAAI;AACjD,uBAAS,KAAK;AAAA,gBACZ;AAAA,gBACA,UAAU,MAAM;AAAA,gBAChB,UAAU,OAAO,aAAa,WAAW,WAAW;AAAA,gBACpD;AAAA,cACF,CAAC;AACD;AAAA,YACF;AAAA,UACF;AACA,gBAAM,IAAI,QAAQ,QAAQ;AAAA,QAC5B;AAAA,MACF;AAEA,iBAAW,CAAC,QAAQ,OAAO,KAAK,MAAM,QAAQ,GAAG;AAC/C,cAAM,IAAI,QAAQ,QAAQ,KAAK,CAAC,GAAG,OAAO,EAAE,YAAY,MAAM,EAAE,YAAY,EAAE,CAAC;AAAA,MACjF;AAEA,aAAO;AAAA,IACT,CAAC;AACD,4BAAwB,QAAQ,MAAM,CAAC,QAAQ;AAC7C,UAAI,0BAA0B,SAAS;AACrC,gCAAwB;AAAA,MAC1B;AACA,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAEA,MAAM,cAAc,oBAAI,IAAiG;AAEzH,SAAS,mBAAmB,QAAmE;AAC7F,QAAM,OAAO;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,SAAO,KAAK,KAAK,CAAC,QAAQ,OAAO,MAAM;AACzC;AAEA,SAAS,2BAA2B,KAAc,KAAa,UAAgG;AAC7J,MAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,UAAM,IAAI,MAAM,oCAAoC,GAAG,WAAW,QAAQ,4BAA4B;AAAA,EACxG;AACA,QAAM,SAAU,IAAyD,WAAY;AACrF,MAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,UAAM,IAAI,MAAM,oCAAoC,GAAG,WAAW,QAAQ,4BAA4B;AAAA,EACxG;AACA,MAAI,EAAE,cAAc,WAAW,CAAC,OAAO,YAAY,OAAO,OAAO,aAAa,UAAU;AACtF,UAAM,IAAI,MAAM,qBAAqB,GAAG,WAAW,QAAQ,uBAAuB;AAAA,EACpF;AACA,QAAM,WAAW,OAAO;AACxB,MAAI,OAAO,SAAS,OAAO,YAAY,SAAS,GAAG,WAAW,GAAG;AAC/D,UAAM,IAAI,MAAM,qBAAqB,GAAG,WAAW,QAAQ,0CAA0C;AAAA,EACvG;AACA,QAAM,aAAa;AAAA,IACjB,GAAG;AAAA,IACH;AAAA,EACF;AAEA,MAAI,YAAY,cAAc,OAAO,WAAW,WAAW,YAAY;AACrE,QAAI,OAAO,SAAS,UAAU,YAAY,SAAS,MAAM,WAAW,GAAG;AACrE,YAAM,IAAI,MAAM,qBAAqB,SAAS,EAAE,WAAW,QAAQ,qBAAqB;AAAA,IAC1F;AACA,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,mBAAmB,UAAqC,GAAG;AAC9D,UAAM,IAAI;AAAA,MACR,qBAAqB,SAAS,EAAE,WAAW,QAAQ;AAAA,IACrD;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,wBACP,QAC8B;AAC9B,SAAO,YAAY,UAAU,OAAO,OAAO,WAAW;AACxD;AAEA,SAAS,4BACP,QACkC;AAClC,SAAO,CAAC,wBAAwB,MAAM;AACxC;AAEA,eAAe,UAAU,OAAyG;AAChI,MAAI,CAAC,YAAY,IAAI,MAAM,GAAG,GAAG;AAC/B,UAAM,UAAU,MAAM,OAAO,EAAE,KAAK,CAAC,QAAQ,2BAA2B,KAAK,MAAM,KAAK,MAAM,QAAQ,CAAC;AACvG,gBAAY,IAAI,MAAM,KAAK,OAAO;AAAA,EACpC;AACA,SAAO,YAAY,IAAI,MAAM,GAAG;AAClC;AAEA,SAAS,kCAAuD;AAK9D,QAAM,WAAW,2BAA2B,KAAK;AACjD,MAAI,SAAU,QAAO;AAOrB,QAAM,UAAU,oBAAI,IAAY;AAChC,QAAM,SAAS,0BAA0B,KAAK,wBAAwB,CAAC;AACvE,aAAW,SAAS,QAAQ;AAC1B,QAAI,OAAO,SAAU,SAAQ,IAAI,MAAM,QAAQ;AAAA,EACjD;AACA,QAAM,UAAU,2BAA2B,KAAK,+BAA+B,CAAC;AAChF,aAAW,SAAS,SAAS;AAC3B,QAAI,OAAO,SAAU,SAAQ,IAAI,MAAM,QAAQ;AAAA,EACjD;AACA,SAAO;AACT;AAEA,SAAS,6BACP,UACA,kBACU;AACV,QAAM,WAAW,SAAS;AAC1B,MAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,WAAW,EAAG,QAAO,CAAC;AAC/D,QAAM,UAAoB,CAAC;AAC3B,aAAW,YAAY,UAAU;AAC/B,QAAI,OAAO,aAAa,YAAY,SAAS,WAAW,EAAG;AAC3D,QAAI,CAAC,iBAAiB,IAAI,QAAQ,EAAG,SAAQ,KAAK,QAAQ;AAAA,EAC5D;AACA,SAAO;AACT;AAEA,MAAM,4BAA4B,oBAAI,IAAY;AAElD,SAAS,kBAAkB,YAAoB,gBAA0B;AACvE,QAAM,MAAM,GAAG,UAAU,IAAI,eAAe,KAAK,GAAG,CAAC;AACrD,MAAI,0BAA0B,IAAI,GAAG,EAAG;AACxC,4BAA0B,IAAI,GAAG;AACjC,MAAI,QAAQ,IAAI,aAAa,eAAe;AAC1C,YAAQ;AAAA,MACN,sCAAsC,UAAU,4CAAuC,eAAe,KAAK,IAAI,CAAC;AAAA,IAClH;AAAA,EACF;AACF;AAEA,eAAe,0BAA0B,QAAgD;AACvF,QAAM,QAAQ,MAAM,mBAAmB;AACvC,QAAM,eAAe,MAAM,IAAI,MAAM,KAAK,CAAC;AAC3C,QAAM,kBAAgC,CAAC;AAEvC,aAAW,CAAC,iBAAiB,gBAAgB,KAAK,MAAM,QAAQ,GAAG;AACjE,QAAI,oBAAoB,OAAQ;AAChC,QAAI,CAAC,gBAAgB,SAAS,GAAG,EAAG;AACpC,UAAM,UAAU,IAAI,OAAO,IAAI,gBAAgB,QAAQ,sBAAsB,MAAM,EAAE,QAAQ,OAAO,IAAI,CAAC,GAAG;AAC5G,QAAI,CAAC,QAAQ,KAAK,MAAM,EAAG;AAC3B,oBAAgB,KAAK,GAAG,gBAAgB;AAAA,EAC1C;AAEA,QAAM,iBAAiB,oBAAI,IAAwB;AACnD,aAAW,SAAS,CAAC,GAAG,cAAc,GAAG,eAAe,GAAG;AACzD,UAAM,WAAW,GAAG,MAAM,QAAQ,IAAI,MAAM,QAAQ;AACpD,UAAM,WAAW,eAAe,IAAI,QAAQ;AAC5C,QAAI,CAAC,aAAa,MAAM,YAAY,MAAM,SAAS,YAAY,IAAI;AACjE,qBAAe,IAAI,UAAU,KAAK;AAAA,IACpC;AAAA,EACF;AAEA,SAAO,MAAM,KAAK,eAAe,OAAO,CAAC,EAAE,KAAK,CAAC,GAAG,OAAO,EAAE,YAAY,MAAM,EAAE,YAAY,EAAE;AACjG;AAEA,eAAsB,0BAA4D;AAChF,QAAM,gBAAgB,MAAM,kBAAkB;AAC9C,QAAM,mBAAmB,gCAAgC;AACzD,QAAM,SAAS,MAAM,QAAQ;AAAA,IAC3B,cAAc,IAAI,OAAO,UAAU;AACjC,YAAM,SAAS,MAAM,UAAU,KAAK;AACpC,UAAI,CAAC,wBAAwB,MAAM,EAAG,QAAO;AAC7C,YAAM,UAAU,6BAA6B,OAAO,UAAU,gBAAgB;AAC9E,UAAI,QAAQ,SAAS,GAAG;AACtB,0BAAkB,OAAO,SAAS,IAAI,OAAO;AAC7C,eAAO;AAAA,MACT;AACA,aAAO,EAAE,GAAG,QAAQ,UAAU,MAAM,UAAU,KAAK,MAAM,IAAI;AAAA,IAC/D,CAAC;AAAA,EACH;AACA,QAAM,OAAO,oBAAI,IAAmC;AACpD,aAAW,UAAU,QAAQ;AAC3B,QAAI,CAAC,OAAQ;AACb,QAAI,CAAC,KAAK,IAAI,OAAO,SAAS,EAAE,GAAG;AACjC,WAAK,IAAI,OAAO,SAAS,IAAI,MAAM;AAAA,IACrC;AAAA,EACF;AACA,SAAO,MAAM,KAAK,KAAK,OAAO,CAAC;AACjC;AAEA,eAAsB,wBAAwB,UAAyD;AACrG,QAAM,gBAAgB,MAAM,kBAAkB;AAC9C,QAAM,mBAAmB,gCAAgC;AACzD,aAAW,SAAS,eAAe;AACjC,UAAM,SAAS,MAAM,UAAU,KAAK;AACpC,QAAI,CAAC,wBAAwB,MAAM,EAAG;AACtC,QAAI,OAAO,SAAS,OAAO,UAAU;AACnC,YAAM,UAAU,6BAA6B,OAAO,UAAU,gBAAgB;AAC9E,UAAI,QAAQ,SAAS,GAAG;AACtB,0BAAkB,OAAO,SAAS,IAAI,OAAO;AAC7C,eAAO;AAAA,MACT;AACA,aAAO,EAAE,GAAG,QAAQ,UAAU,MAAM,UAAU,KAAK,MAAM,IAAI;AAAA,IAC/D;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,4BAA4B,UAA6D;AAC7G,QAAM,gBAAgB,MAAM,kBAAkB;AAC9C,QAAM,mBAAmB,gCAAgC;AACzD,aAAW,SAAS,eAAe;AACjC,UAAM,SAAS,MAAM,UAAU,KAAK;AACpC,QAAI,CAAC,4BAA4B,MAAM,EAAG;AAC1C,QAAI,OAAO,SAAS,OAAO,UAAU;AACnC,YAAM,UAAU,6BAA6B,OAAO,UAAU,gBAAgB;AAC9E,UAAI,QAAQ,SAAS,GAAG;AACtB,0BAAkB,OAAO,SAAS,IAAI,OAAO;AAC7C,eAAO;AAAA,MACT;AACA,aAAO,EAAE,GAAG,QAAQ,UAAU,MAAM,UAAU,KAAK,MAAM,IAAI;AAAA,IAC/D;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,4BAA4B,QAA2D;AAC3G,QAAM,UAAU,MAAM,0BAA0B,MAAM;AACtD,QAAM,UAAmC,CAAC;AAC1C,aAAW,EAAE,UAAU,WAAW,SAAS,KAAK,SAAS;AACvD,UAAM,SAAS,MAAM,wBAAwB,QAAQ;AACrD,QAAI,CAAC,OAAQ;AACb,UAAM,oBAAoB,YACtB,EAAE,GAAG,WAAW,UAAU,OAAO,aAAa,WAAW,WAAW,EAAE,IACtE,EAAE,UAAU,OAAO,aAAa,WAAW,WAAW,EAAE;AAC5D,YAAQ,KAAK,EAAE,GAAG,QAAQ,WAAW,kBAAkB,CAAC;AAAA,EAC1D;AACA,SAAO;AACT;AAEA,eAAsB,gCAAgC,QAA+D;AACnH,QAAM,UAAU,MAAM,0BAA0B,MAAM;AACtD,QAAM,UAAuC,CAAC;AAC9C,aAAW,EAAE,UAAU,WAAW,SAAS,KAAK,SAAS;AACvD,UAAM,SAAS,MAAM,4BAA4B,QAAQ;AACzD,QAAI,CAAC,OAAQ;AACb,UAAM,oBAAoB,YACtB,EAAE,GAAG,WAAW,UAAU,OAAO,aAAa,WAAW,WAAW,EAAE,IACtE,EAAE,UAAU,OAAO,aAAa,WAAW,WAAW,EAAE;AAC5D,YAAQ,KAAK,EAAE,GAAG,QAAQ,WAAW,kBAAkB,CAAC;AAAA,EAC1D;AACA,SAAO;AACT;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/shared",
-  "version": "0.6.1-develop.3187.1.4c96d17341",
+  "version": "0.6.1-develop.3188.1.499d530779",
   "type": "module",
   "main": "./dist/index.js",
   "scripts": {
@@ -92,7 +92,7 @@
     "@mikro-orm/core": "^7.0.14",
     "@mikro-orm/decorators": "^7.0.14",
     "@mikro-orm/postgresql": "^7.0.14",
-    "@open-mercato/cache": "0.6.1-develop.3187.1.4c96d17341",
+    "@open-mercato/cache": "0.6.1-develop.3188.1.499d530779",
     "dotenv": "^17.4.2",
     "rate-limiter-flexible": "^11.0.1",
     "reflect-metadata": "^0.2.2",

package/src/lib/bootstrap/factory.ts

@@ -133,6 +133,9 @@ async function registerWidgetsAndOptionalPackages(data: BootstrapData, options:
     injectionRegistry.registerInjectionWidgets(data.injectionWidgetEntries)
     coreInjection.registerCoreInjectionWidgets(data.injectionWidgetEntries)
     coreInjection.registerCoreInjectionTables(data.injectionTables)
+    coreInjection.registerEnabledModuleIds(
+      data.modules.map((module) => module.id).filter((id): id is string => typeof id === 'string' && id.length > 0),
+    )
   } catch {
     // UI packages may not be available in all contexts
   }

package/src/modules/widgets/__tests__/injection-loader.required-modules.test.ts

@@ -0,0 +1,176 @@
+/**
+ * @jest-environment jsdom
+ *
+ * Regression coverage for issue #1849 — widgets that integrate with another
+ * module (for example a customers AI trigger that calls
+ * `/api/ai_assistant/...`) must be skipped at load time when the dependency
+ * module is not enabled in `modules.ts`. Feature gates alone are insufficient
+ * because superadmin / wildcard grants pass them even when the dependency
+ * module is absent.
+ */
+import { describe, it, expect, beforeEach } from '@jest/globals'
+import type {
+  InjectionWidgetModule,
+  ModuleInjectionTable,
+} from '@open-mercato/shared/modules/widgets/injection'
+import type { ModuleInjectionWidgetEntry } from '@open-mercato/shared/modules/registry'
+import {
+  invalidateInjectionWidgetCache,
+  loadInjectionWidgetById,
+  loadInjectionWidgetsForSpot,
+  registerCoreInjectionTables,
+  registerCoreInjectionWidgets,
+  registerEnabledModuleIds,
+} from '@open-mercato/shared/modules/widgets/injection-loader'
+
+const HOST_SPOT_ID = 'data-table:host.list:search-trailing'
+const ALWAYS_AVAILABLE_WIDGET_ID = 'host.injection.always-available'
+const REQUIRES_AI_WIDGET_ID = 'host.injection.requires-ai-assistant'
+
+const PlaceholderComponent = () => null
+
+const alwaysAvailableWidget: InjectionWidgetModule<Record<string, unknown>, Record<string, unknown>> = {
+  metadata: {
+    id: ALWAYS_AVAILABLE_WIDGET_ID,
+    title: 'Always Available',
+    description: 'Has no module dependencies and must always load.',
+    priority: 50,
+    enabled: true,
+  },
+  Widget: PlaceholderComponent,
+}
+
+const requiresAiAssistantWidget: InjectionWidgetModule<Record<string, unknown>, Record<string, unknown>> = {
+  metadata: {
+    id: REQUIRES_AI_WIDGET_ID,
+    title: 'Requires AI Assistant',
+    description: 'Calls /api/ai_assistant — must be skipped when ai_assistant is disabled.',
+    requiredModules: ['ai_assistant'],
+    priority: 100,
+    enabled: true,
+  },
+  Widget: PlaceholderComponent,
+}
+
+function makeWidgetEntry(
+  moduleId: string,
+  key: string,
+  loader: () => Promise<InjectionWidgetModule<any, any>>,
+): ModuleInjectionWidgetEntry {
+  return {
+    moduleId,
+    key,
+    source: 'package',
+    loader,
+  }
+}
+
+function registerHostFixtures(includeAiAssistantModule: boolean) {
+  invalidateInjectionWidgetCache()
+  const widgetEntries: ModuleInjectionWidgetEntry[] = [
+    makeWidgetEntry('host', 'host/widgets/injection/always-available/widget.ts', async () => alwaysAvailableWidget),
+    makeWidgetEntry('host', 'host/widgets/injection/requires-ai/widget.ts', async () => requiresAiAssistantWidget),
+  ]
+  registerCoreInjectionWidgets(widgetEntries)
+
+  const tables: Array<{ moduleId: string; table: ModuleInjectionTable }> = [
+    {
+      moduleId: 'host',
+      table: {
+        [HOST_SPOT_ID]: [
+          { widgetId: ALWAYS_AVAILABLE_WIDGET_ID, priority: 50 },
+          { widgetId: REQUIRES_AI_WIDGET_ID, priority: 100 },
+        ],
+      },
+    },
+  ]
+  if (includeAiAssistantModule) {
+    tables.push({ moduleId: 'ai_assistant', table: {} })
+  }
+  registerCoreInjectionTables(tables)
+
+  const enabledIds = ['host']
+  if (includeAiAssistantModule) enabledIds.push('ai_assistant')
+  registerEnabledModuleIds(enabledIds)
+}
+
+function registerHostFixturesUsingExplicitRegistryOnly(includeAiAssistantModule: boolean) {
+  // Simulates the real generator output: a dependency module (ai_assistant)
+  // is enabled in modules.ts but ships NO widgets/injection-table.ts, so it
+  // does not appear in injectionTables. The explicit enabled-modules registry
+  // is the only signal that proves it is enabled.
+  invalidateInjectionWidgetCache()
+  const widgetEntries: ModuleInjectionWidgetEntry[] = [
+    makeWidgetEntry('host', 'host/widgets/injection/always-available/widget.ts', async () => alwaysAvailableWidget),
+    makeWidgetEntry('host', 'host/widgets/injection/requires-ai/widget.ts', async () => requiresAiAssistantWidget),
+  ]
+  registerCoreInjectionWidgets(widgetEntries)
+
+  registerCoreInjectionTables([
+    {
+      moduleId: 'host',
+      table: {
+        [HOST_SPOT_ID]: [
+          { widgetId: ALWAYS_AVAILABLE_WIDGET_ID, priority: 50 },
+          { widgetId: REQUIRES_AI_WIDGET_ID, priority: 100 },
+        ],
+      },
+    },
+  ])
+
+  const enabledIds = ['host']
+  if (includeAiAssistantModule) enabledIds.push('ai_assistant')
+  registerEnabledModuleIds(enabledIds)
+}
+
+describe('Injection loader — requiredModules gating (#1849)', () => {
+  beforeEach(() => {
+    invalidateInjectionWidgetCache()
+  })
+
+  it('loads a widget that requires a module that IS enabled', async () => {
+    registerHostFixtures(true)
+    const loaded = await loadInjectionWidgetsForSpot(HOST_SPOT_ID)
+    const ids = loaded.map((widget) => widget.metadata.id).sort()
+    expect(ids).toEqual([REQUIRES_AI_WIDGET_ID, ALWAYS_AVAILABLE_WIDGET_ID].sort())
+  })
+
+  it('skips a widget whose required module is NOT enabled', async () => {
+    registerHostFixtures(false)
+    const loaded = await loadInjectionWidgetsForSpot(HOST_SPOT_ID)
+    const ids = loaded.map((widget) => widget.metadata.id)
+    expect(ids).toContain(ALWAYS_AVAILABLE_WIDGET_ID)
+    expect(ids).not.toContain(REQUIRES_AI_WIDGET_ID)
+  })
+
+  it('returns null from loadInjectionWidgetById when required module is missing', async () => {
+    registerHostFixtures(false)
+    const widget = await loadInjectionWidgetById(REQUIRES_AI_WIDGET_ID)
+    expect(widget).toBeNull()
+  })
+
+  it('returns the widget from loadInjectionWidgetById when required module is enabled', async () => {
+    registerHostFixtures(true)
+    const widget = await loadInjectionWidgetById(REQUIRES_AI_WIDGET_ID)
+    expect(widget).not.toBeNull()
+    expect(widget?.metadata.id).toBe(REQUIRES_AI_WIDGET_ID)
+  })
+
+  it('loads a widget when its required module ships NO injection table but is in the enabled-modules registry', async () => {
+    // Regression: dependency modules without widgets/injection-table.ts
+    // (for example `ai_assistant`) must still satisfy `requiredModules`
+    // checks once they are registered as enabled at bootstrap.
+    registerHostFixturesUsingExplicitRegistryOnly(true)
+    const loaded = await loadInjectionWidgetsForSpot(HOST_SPOT_ID)
+    const ids = loaded.map((widget) => widget.metadata.id).sort()
+    expect(ids).toEqual([REQUIRES_AI_WIDGET_ID, ALWAYS_AVAILABLE_WIDGET_ID].sort())
+  })
+
+  it('skips a widget when its required module is absent from the explicit enabled-modules registry', async () => {
+    registerHostFixturesUsingExplicitRegistryOnly(false)
+    const loaded = await loadInjectionWidgetsForSpot(HOST_SPOT_ID)
+    const ids = loaded.map((widget) => widget.metadata.id)
+    expect(ids).toContain(ALWAYS_AVAILABLE_WIDGET_ID)
+    expect(ids).not.toContain(REQUIRES_AI_WIDGET_ID)
+  })
+})

package/src/modules/widgets/injection-loader.ts

@@ -44,9 +44,11 @@ type WidgetEntry = ModuleInjectionWidgetEntry & { moduleId: string }
 // Registration pattern for publishable packages
 let _coreInjectionWidgetEntries: ModuleInjectionWidgetEntry[] | null = null
 let _coreInjectionTables: Array<{ moduleId: string; table: ModuleInjectionTable }> | null = null
+let _enabledModuleIds: ReadonlySet<string> | null = null
 let _injectionRegistryVersion = 0
 const GLOBAL_INJECTION_WIDGETS_KEY = '__openMercatoCoreInjectionWidgetEntries__'
 const GLOBAL_INJECTION_TABLES_KEY = '__openMercatoCoreInjectionTables__'
+const GLOBAL_ENABLED_MODULE_IDS_KEY = '__openMercatoEnabledModuleIds__'
 const GLOBAL_INJECTION_REGISTRY_VERSION_KEY = '__openMercatoCoreInjectionRegistryVersion__'
 const INJECTION_REGISTRY_CHANGED_EVENT = '__openMercatoInjectionRegistryChanged__'
 
@@ -67,6 +69,24 @@ function writeGlobalInjectionWidgets(entries: ModuleInjectionWidgetEntry[]) {
   }
 }
 
+function readGlobalEnabledModuleIds(): ReadonlySet<string> | null {
+  try {
+    const value = (globalThis as Record<string, unknown>)[GLOBAL_ENABLED_MODULE_IDS_KEY]
+    if (value instanceof Set) return value as ReadonlySet<string>
+    return null
+  } catch {
+    return null
+  }
+}
+
+function writeGlobalEnabledModuleIds(ids: ReadonlySet<string>) {
+  try {
+    ;(globalThis as Record<string, unknown>)[GLOBAL_ENABLED_MODULE_IDS_KEY] = ids
+  } catch {
+    // ignore global assignment failures
+  }
+}
+
 function readGlobalInjectionTables(): Array<{ moduleId: string; table: ModuleInjectionTable }> | null {
   try {
     const value = (globalThis as Record<string, unknown>)[GLOBAL_INJECTION_TABLES_KEY]
@@ -144,6 +164,32 @@ export function registerCoreInjectionTables(tables: Array<{ moduleId: string; ta
   notifyInjectionRegistryChanged()
 }
 
+/**
+ * Register the canonical set of enabled module IDs for the running app.
+ *
+ * This is the authoritative signal used by `requiredModules` widget gating —
+ * deriving "enabled" from injection tables or widget entries is unreliable
+ * because modules without injection widgets (for example `ai_assistant`) do
+ * not contribute entries to either source. Bootstrap callers should pass
+ * every module ID present in the app's module registry.
+ */
+export function registerEnabledModuleIds(moduleIds: Iterable<string>) {
+  const next = new Set<string>()
+  for (const moduleId of moduleIds) {
+    if (typeof moduleId === 'string' && moduleId.length > 0) next.add(moduleId)
+  }
+  if (_enabledModuleIds !== null && process.env.NODE_ENV === 'development') {
+    console.debug('[Bootstrap] Enabled module IDs re-registered (this may occur during HMR)')
+  }
+  _enabledModuleIds = next
+  writeGlobalEnabledModuleIds(next)
+  notifyInjectionRegistryChanged()
+}
+
+export function getEnabledModuleIds(): ReadonlySet<string> | null {
+  return readGlobalEnabledModuleIds() ?? _enabledModuleIds
+}
+
 export function getInjectionRegistryVersion(): number {
   const globalVersion = readGlobalInjectionRegistryVersion()
   if (globalVersion !== null) return globalVersion
@@ -200,6 +246,7 @@ export function invalidateInjectionWidgetCache() {
   widgetEntriesPromise = null
   injectionTablePromise = null
   widgetCache.clear()
+  warnedRequiredModuleSkips.clear()
 }
 
 async function loadWidgetEntries(): Promise<WidgetEntry[]> {
@@ -339,6 +386,58 @@ async function loadEntry(entry: WidgetEntry): Promise<InjectionAnyWidgetModule<a
   return widgetCache.get(entry.key)!
 }
 
+function getEnabledModuleIdsForInjection(): ReadonlySet<string> {
+  // Prefer the explicit enabled-modules registry populated by bootstrap.
+  // This is the only signal that includes modules without injection widgets
+  // (for example `ai_assistant`), so it is required for `requiredModules`
+  // gating to be sound.
+  const explicit = readGlobalEnabledModuleIds() ?? _enabledModuleIds
+  if (explicit) return explicit
+
+  // Fallback: derive from injection tables and widget entries. This keeps
+  // older bootstrap paths (and callers that have not yet wired
+  // `registerEnabledModuleIds`) working — at the cost of mis-classifying
+  // dependency modules that ship no widgets. New apps MUST call
+  // `registerEnabledModuleIds` to get accurate gating.
+  const enabled = new Set<string>()
+  const tables = readGlobalInjectionTables() ?? _coreInjectionTables ?? []
+  for (const entry of tables) {
+    if (entry?.moduleId) enabled.add(entry.moduleId)
+  }
+  const entries = readGlobalInjectionWidgets() ?? _coreInjectionWidgetEntries ?? []
+  for (const entry of entries) {
+    if (entry?.moduleId) enabled.add(entry.moduleId)
+  }
+  return enabled
+}
+
+function widgetMissingRequiredModules(
+  metadata: InjectionWidgetMetadata,
+  enabledModuleIds: ReadonlySet<string>,
+): string[] {
+  const required = metadata.requiredModules
+  if (!Array.isArray(required) || required.length === 0) return []
+  const missing: string[] = []
+  for (const moduleId of required) {
+    if (typeof moduleId !== 'string' || moduleId.length === 0) continue
+    if (!enabledModuleIds.has(moduleId)) missing.push(moduleId)
+  }
+  return missing
+}
+
+const warnedRequiredModuleSkips = new Set<string>()
+
+function warnSkippedWidget(metadataId: string, missingModules: string[]) {
+  const key = `${metadataId}:${missingModules.join(',')}`
+  if (warnedRequiredModuleSkips.has(key)) return
+  warnedRequiredModuleSkips.add(key)
+  if (process.env.NODE_ENV === 'development') {
+    console.debug(
+      `[InjectionLoader] Skipping widget "${metadataId}" — required module(s) not enabled: ${missingModules.join(', ')}`,
+    )
+  }
+}
+
 async function getResolvedEntriesForSpot(spotId: InjectionSpotId): Promise<TableEntry[]> {
   const table = await loadInjectionTable()
   const exactEntries = table.get(spotId) ?? []
@@ -366,10 +465,16 @@ async function getResolvedEntriesForSpot(spotId: InjectionSpotId): Promise<Table
 
 export async function loadAllInjectionWidgets(): Promise<LoadedInjectionWidget[]> {
   const widgetEntries = await loadWidgetEntries()
+  const enabledModuleIds = getEnabledModuleIdsForInjection()
   const loaded = await Promise.all(
     widgetEntries.map(async (entry) => {
       const module = await loadEntry(entry)
       if (!isLoadedInjectionWidget(module)) return null
+      const missing = widgetMissingRequiredModules(module.metadata, enabledModuleIds)
+      if (missing.length > 0) {
+        warnSkippedWidget(module.metadata.id, missing)
+        return null
+      }
       return { ...module, moduleId: entry.moduleId, key: entry.key }
     })
   )
@@ -385,10 +490,16 @@ export async function loadAllInjectionWidgets(): Promise<LoadedInjectionWidget[]
 
 export async function loadInjectionWidgetById(widgetId: string): Promise<LoadedInjectionWidget | null> {
   const widgetEntries = await loadWidgetEntries()
+  const enabledModuleIds = getEnabledModuleIdsForInjection()
   for (const entry of widgetEntries) {
     const module = await loadEntry(entry)
     if (!isLoadedInjectionWidget(module)) continue
     if (module.metadata.id === widgetId) {
+      const missing = widgetMissingRequiredModules(module.metadata, enabledModuleIds)
+      if (missing.length > 0) {
+        warnSkippedWidget(module.metadata.id, missing)
+        return null
+      }
       return { ...module, moduleId: entry.moduleId, key: entry.key }
     }
   }
@@ -397,10 +508,16 @@ export async function loadInjectionWidgetById(widgetId: string): Promise<LoadedI
 
 export async function loadInjectionDataWidgetById(widgetId: string): Promise<LoadedInjectionDataWidget | null> {
   const widgetEntries = await loadWidgetEntries()
+  const enabledModuleIds = getEnabledModuleIdsForInjection()
   for (const entry of widgetEntries) {
     const module = await loadEntry(entry)
     if (!isLoadedInjectionDataWidget(module)) continue
     if (module.metadata.id === widgetId) {
+      const missing = widgetMissingRequiredModules(module.metadata, enabledModuleIds)
+      if (missing.length > 0) {
+        warnSkippedWidget(module.metadata.id, missing)
+        return null
+      }
       return { ...module, moduleId: entry.moduleId, key: entry.key }
     }
   }

package/src/modules/widgets/injection.ts

@@ -164,6 +164,17 @@ export type InjectionWidgetMetadata = {
   features?: string[]
   priority?: number
   enabled?: boolean
+  /**
+   * Module IDs that MUST be enabled in `modules.ts` for this widget to be loaded.
+   * When any listed module is missing from the enabled module set, the widget is
+   * skipped at load time — its component is never imported and never rendered.
+   *
+   * Use this when a widget integrates with another module's runtime surface
+   * (for example a customers AI trigger that calls `/api/ai_assistant/...`).
+   * Feature flags alone are insufficient because a superadmin / wildcard grant
+   * may still pass the feature gate even when the dependency module is absent.
+   */
+  requiredModules?: string[]
 }
 
 /**