@open-mercato/shared 0.9.1-develop.7574.1.837288eec1 → 0.10.1-develop.7576.1.21d5b50435

package/dist/modules/payment_gateways/types.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/payment_gateways/types.ts"],
-  "sourcesContent": ["import { DEFAULT_WEBHOOK_BODY_LIMIT_BYTES } from '../../lib/webhooks/body'\n\n// \u2500\u2500 Unified Payment Status \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport type UnifiedPaymentStatus =\n  | 'pending'\n  | 'authorized'\n  | 'captured'\n  | 'partially_captured'\n  | 'refunded'\n  | 'partially_refunded'\n  | 'cancelled'\n  | 'failed'\n  | 'expired'\n  | 'unknown'\n\n// \u2500\u2500 GatewayAdapter Interface \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport interface GatewayAdapter {\n  readonly providerKey: string\n\n  /** Create a payment session / payment intent */\n  createSession(input: CreateSessionInput): Promise<CreateSessionResult>\n\n  /** Capture an authorized payment */\n  capture(input: CaptureInput): Promise<CaptureResult>\n\n  /** Refund a captured payment (full or partial) */\n  refund(input: RefundInput): Promise<RefundResult>\n\n  /** Cancel / void an authorized payment before capture */\n  cancel(input: CancelInput): Promise<CancelResult>\n\n  /** Get current payment status from provider */\n  getStatus(input: GetStatusInput): Promise<GatewayPaymentStatus>\n\n  /** Verify and parse an inbound webhook event */\n  verifyWebhook(input: VerifyWebhookInput): Promise<WebhookEvent>\n\n  /** Map provider status to unified status */\n  mapStatus(providerStatus: string, eventType?: string): UnifiedPaymentStatus\n}\n\nexport type PaymentGatewayDescriptorFieldType =\n  | 'text'\n  | 'number'\n  | 'select'\n  | 'multiselect'\n  | 'boolean'\n  | 'textarea'\n  | 'secret'\n  | 'url'\n\nexport interface PaymentGatewayDescriptorField {\n  key: string\n  label: string\n  type: PaymentGatewayDescriptorFieldType\n  description?: string\n  required?: boolean\n  options?: Array<{ value: string; label: string }>\n}\n\nexport type PaymentGatewayRendererType = 'embedded' | 'redirect'\n\nexport interface PaymentGatewayRendererDescriptor {\n  key: string\n  label: string\n  type: PaymentGatewayRendererType\n  description?: string\n  supportedPaymentTypes?: '*' | string[]\n  settingsFields?: PaymentGatewayDescriptorField[]\n}\n\nexport interface PaymentGatewayPresentationRequest {\n  mode?: 'auto' | PaymentGatewayRendererType\n  rendererKey?: string\n  rendererSettings?: Record<string, unknown>\n}\n\nexport interface PaymentGatewayDescriptor {\n  providerKey: string\n  label: string\n  sessionConfig?: {\n    fields?: PaymentGatewayDescriptorField[]\n    supportedCurrencies?: '*' | string[]\n    supportedPaymentTypes?: Array<{ value: string; label: string }>\n    defaultRendererKey?: string\n    renderers?: PaymentGatewayRendererDescriptor[]\n    /**\n     * @deprecated Use `renderers` and `defaultRendererKey`.\n     */\n    presentation?: 'embedded' | 'redirect' | 'either'\n    /**\n     * @deprecated Use `renderers`.\n     */\n    embeddedRenderers?: string[]\n  }\n}\n\nexport interface EmbeddedPaymentGatewayClientSession {\n  type: 'embedded'\n  rendererKey: string\n  payload?: Record<string, unknown>\n  settings?: Record<string, unknown>\n}\n\nexport interface RedirectPaymentGatewayClientSession {\n  type: 'redirect'\n  redirectUrl: string\n  target?: 'self' | 'top'\n}\n\nexport type PaymentGatewayClientSession =\n  | EmbeddedPaymentGatewayClientSession\n  | RedirectPaymentGatewayClientSession\n\n// \u2500\u2500 Order Amount Reconciliation \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport interface PaymentGatewayScope {\n  organizationId: string\n  tenantId: string\n}\n\nexport interface PaymentOrderTotal {\n  orderId: string\n  currencyCode: string\n  amountDue: number\n}\n\n/**\n * Contract a module that owns orders implements so `payment_gateways` can\n * reconcile a caller-supplied session amount against the authoritative amount\n * due, without depending on that module. Implementations MUST scope the lookup\n * by tenant and organization and MUST return `null` for anything outside the\n * caller's scope, so an out-of-scope order is indistinguishable from a missing\n * one. The `sales` module registers the default implementation under the\n * `paymentOrderTotalResolver` DI name.\n */\nexport interface PaymentOrderTotalResolver {\n  resolveOrderTotal(orderId: string, scope: PaymentGatewayScope): Promise<PaymentOrderTotal | null>\n}\n\n// \u2500\u2500 Input / Output Types \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport interface CreateSessionInput {\n  orderId?: string\n  paymentId: string\n  /** Stable operation key for provider-native session creation idempotency. */\n  idempotencyKey?: string\n  tenantId: string\n  organizationId: string\n  amount: number\n  currencyCode: string\n  captureMethod?: 'automatic' | 'manual'\n  paymentTypes?: string[]\n  description?: string\n  successUrl?: string\n  cancelUrl?: string\n  metadata?: Record<string, unknown>\n  credentials: Record<string, unknown>\n  lineItems?: SessionLineItem[]\n  presentation?: PaymentGatewayPresentationRequest\n}\n\nexport interface SessionLineItem {\n  name: string\n  quantity: number\n  unitAmount: number\n  currencyCode: string\n}\n\nexport interface CreateSessionResult {\n  sessionId: string\n  clientSecret?: string\n  redirectUrl?: string\n  status: UnifiedPaymentStatus\n  providerData?: Record<string, unknown>\n  clientSession?: PaymentGatewayClientSession\n}\n\nexport interface CaptureInput {\n  sessionId: string\n  amount?: number\n  credentials: Record<string, unknown>\n  metadata?: Record<string, unknown>\n  idempotencyKey?: string\n}\n\nexport interface CaptureResult {\n  status: UnifiedPaymentStatus\n  capturedAmount: number\n  providerData?: Record<string, unknown>\n}\n\nexport interface RefundInput {\n  sessionId: string\n  amount?: number\n  reason?: string\n  credentials: Record<string, unknown>\n  metadata?: Record<string, unknown>\n  idempotencyKey?: string\n}\n\nexport interface RefundResult {\n  refundId: string\n  status: UnifiedPaymentStatus\n  refundedAmount: number\n  providerData?: Record<string, unknown>\n}\n\nexport interface CancelInput {\n  sessionId: string\n  reason?: string\n  credentials: Record<string, unknown>\n  idempotencyKey?: string\n}\n\nexport interface CancelResult {\n  status: UnifiedPaymentStatus\n  providerData?: Record<string, unknown>\n}\n\nexport interface GetStatusInput {\n  sessionId: string\n  credentials: Record<string, unknown>\n}\n\nexport interface GatewayPaymentStatus {\n  status: UnifiedPaymentStatus\n  amount: number\n  amountReceived: number\n  currencyCode: string\n  providerData?: Record<string, unknown>\n}\n\nexport interface VerifyWebhookInput {\n  rawBody: string | Buffer\n  headers: Record<string, string | string[] | undefined>\n  credentials: Record<string, unknown>\n  /** Platform-resolved payment the webhook is expected to concern, when a locator found one. */\n  candidate?: WebhookCandidateSnapshot\n}\n\n/** Raw request material handed to webhook locator hints. */\nexport interface WebhookLocatorContext {\n  rawBody: string | Buffer\n  headers: Record<string, string | string[] | undefined>\n}\n\nexport interface WebhookCandidateSnapshot {\n  transactionId: string\n  paymentId: string\n  providerSessionId: string | null\n  amount: string\n  currencyCode: string\n}\n\nexport type WebhookResponseOutcome =\n  | 'accepted'\n  | 'no_candidate'\n  | 'verification_failed'\n  | 'verification_unavailable'\n  | 'processing_failed'\n  | 'payload_too_large'\n  | 'rate_limited'\n\nexport interface WebhookHttpResponse {\n  status: number\n  body: string | Record<string, unknown>\n  contentType?: string\n}\n\n/** Thrown by a webhook handler when verification cannot be performed (for example a provider outage). */\nexport class WebhookVerificationUnavailableError extends Error {\n  constructor(message = 'Webhook verification is unavailable') {\n    super(message)\n    this.name = 'WebhookVerificationUnavailableError'\n  }\n}\n\nexport interface WebhookEvent {\n  eventType: string\n  eventId: string\n  data: Record<string, unknown>\n  idempotencyKey: string\n  timestamp: Date\n}\n\n// \u2500\u2500 Webhook Handler \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport interface WebhookHandlerRegistration {\n  handler: (input: VerifyWebhookInput) => Promise<WebhookEvent>\n  queue?: string\n  readSessionIdHint?: (payload: Record<string, unknown> | null, context?: WebhookLocatorContext) => string | null\n  readPaymentIdHint?: (payload: Record<string, unknown> | null, context?: WebhookLocatorContext) => string | null\n  maxBodyBytes?: number\n  rawBody?: WebhookRawBodyMode\n  formatResponse?: (outcome: WebhookResponseOutcome) => WebhookHttpResponse\n}\n\nexport type WebhookRawBodyMode = 'text' | 'bytes'\n\n// \u2500\u2500 Adapter Registry Options \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport interface RegisterAdapterOptions {\n  version?: string\n}\n\n// \u2500\u2500 Registries \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nconst ADAPTER_REGISTRY_KEY = '__openMercatoPaymentGatewayAdapters__'\nconst WEBHOOK_REGISTRY_KEY = '__openMercatoPaymentGatewayWebhookHandlers__'\nconst DESCRIPTOR_REGISTRY_KEY = '__openMercatoPaymentGatewayDescriptors__'\n\nfunction getAdapterRegistry(): Map<string, GatewayAdapter> {\n  const globalState = globalThis as typeof globalThis & {\n    [ADAPTER_REGISTRY_KEY]?: Map<string, GatewayAdapter>\n  }\n  if (!globalState[ADAPTER_REGISTRY_KEY]) {\n    globalState[ADAPTER_REGISTRY_KEY] = new Map<string, GatewayAdapter>()\n  }\n  return globalState[ADAPTER_REGISTRY_KEY]\n}\n\nfunction getWebhookHandlerRegistry(): Map<string, WebhookHandlerRegistration> {\n  const globalState = globalThis as typeof globalThis & {\n    [WEBHOOK_REGISTRY_KEY]?: Map<string, WebhookHandlerRegistration>\n  }\n  if (!globalState[WEBHOOK_REGISTRY_KEY]) {\n    globalState[WEBHOOK_REGISTRY_KEY] = new Map<string, WebhookHandlerRegistration>()\n  }\n  return globalState[WEBHOOK_REGISTRY_KEY]\n}\n\nfunction getDescriptorRegistry(): Map<string, PaymentGatewayDescriptor> {\n  const globalState = globalThis as typeof globalThis & {\n    [DESCRIPTOR_REGISTRY_KEY]?: Map<string, PaymentGatewayDescriptor>\n  }\n  if (!globalState[DESCRIPTOR_REGISTRY_KEY]) {\n    globalState[DESCRIPTOR_REGISTRY_KEY] = new Map<string, PaymentGatewayDescriptor>()\n  }\n  return globalState[DESCRIPTOR_REGISTRY_KEY]\n}\n\nfunction adapterKey(providerKey: string, version?: string): string {\n  return version ? `${providerKey}:${version}` : providerKey\n}\n\nexport function registerGatewayAdapter(adapter: GatewayAdapter, options?: RegisterAdapterOptions): () => void {\n  const adapterRegistry = getAdapterRegistry()\n  const key = adapterKey(adapter.providerKey, options?.version)\n  adapterRegistry.set(key, adapter)\n  if (options?.version) {\n    // Also register as default if no default exists\n    if (!adapterRegistry.has(adapter.providerKey)) {\n      adapterRegistry.set(adapter.providerKey, adapter)\n    }\n  }\n  return () => {\n    adapterRegistry.delete(key)\n  }\n}\n\nexport function getGatewayAdapter(providerKey: string, version?: string): GatewayAdapter | undefined {\n  const adapterRegistry = getAdapterRegistry()\n  if (version) {\n    return adapterRegistry.get(adapterKey(providerKey, version)) ?? adapterRegistry.get(providerKey)\n  }\n  return adapterRegistry.get(providerKey)\n}\n\nexport function listGatewayAdapters(): GatewayAdapter[] {\n  const adapterRegistry = getAdapterRegistry()\n  const seen = new Set<string>()\n  const result: GatewayAdapter[] = []\n  for (const [key, adapter] of adapterRegistry) {\n    if (!key.includes(':') && !seen.has(adapter.providerKey)) {\n      seen.add(adapter.providerKey)\n      result.push(adapter)\n    }\n  }\n  return result\n}\n\nexport function clearGatewayAdapters(): void {\n  getAdapterRegistry().clear()\n}\n\nexport function registerWebhookHandler(\n  providerKey: string,\n  handler: (input: VerifyWebhookInput) => Promise<WebhookEvent>,\n  options?: Omit<WebhookHandlerRegistration, 'handler'>,\n): () => void {\n  if (options?.rawBody !== undefined && options.rawBody !== 'text' && options.rawBody !== 'bytes') {\n    throw new Error(\"[internal] Payment gateway webhook rawBody must be 'text' or 'bytes'\")\n  }\n  if (\n    options?.maxBodyBytes !== undefined\n    && (!Number.isSafeInteger(options.maxBodyBytes)\n      || options.maxBodyBytes <= 0\n      || options.maxBodyBytes > DEFAULT_WEBHOOK_BODY_LIMIT_BYTES)\n  ) {\n    throw new Error(\n      `[internal] Payment gateway webhook maxBodyBytes must be a positive safe integer no greater than ${DEFAULT_WEBHOOK_BODY_LIMIT_BYTES}`,\n    )\n  }\n  const webhookHandlerRegistry = getWebhookHandlerRegistry()\n  webhookHandlerRegistry.set(providerKey, {\n    handler,\n    queue: options?.queue,\n    readSessionIdHint: options?.readSessionIdHint,\n    readPaymentIdHint: options?.readPaymentIdHint,\n    maxBodyBytes: options?.maxBodyBytes,\n    rawBody: options?.rawBody,\n    formatResponse: options?.formatResponse,\n  })\n  return () => {\n    webhookHandlerRegistry.delete(providerKey)\n  }\n}\n\nexport function getWebhookHandler(providerKey: string): WebhookHandlerRegistration | undefined {\n  return getWebhookHandlerRegistry().get(providerKey)\n}\n\nexport function clearWebhookHandlers(): void {\n  getWebhookHandlerRegistry().clear()\n}\n\nexport function registerPaymentGatewayDescriptor(descriptor: PaymentGatewayDescriptor): () => void {\n  const descriptorRegistry = getDescriptorRegistry()\n  descriptorRegistry.set(descriptor.providerKey, descriptor)\n  return () => {\n    descriptorRegistry.delete(descriptor.providerKey)\n  }\n}\n\nexport function getPaymentGatewayDescriptor(providerKey: string): PaymentGatewayDescriptor | undefined {\n  return getDescriptorRegistry().get(providerKey)\n}\n\nexport function listPaymentGatewayDescriptors(): PaymentGatewayDescriptor[] {\n  return Array.from(getDescriptorRegistry().values()).sort((left, right) => left.label.localeCompare(right.label))\n}\n\nexport function clearPaymentGatewayDescriptors(): void {\n  getDescriptorRegistry().clear()\n}\n"],
-  "mappings": "AAAA,SAAS,wCAAwC;AAiR1C,MAAM,4CAA4C,MAAM;AAAA,EAC7D,YAAY,UAAU,uCAAuC;AAC3D,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAgCA,MAAM,uBAAuB;AAC7B,MAAM,uBAAuB;AAC7B,MAAM,0BAA0B;AAEhC,SAAS,qBAAkD;AACzD,QAAM,cAAc;AAGpB,MAAI,CAAC,YAAY,oBAAoB,GAAG;AACtC,gBAAY,oBAAoB,IAAI,oBAAI,IAA4B;AAAA,EACtE;AACA,SAAO,YAAY,oBAAoB;AACzC;AAEA,SAAS,4BAAqE;AAC5E,QAAM,cAAc;AAGpB,MAAI,CAAC,YAAY,oBAAoB,GAAG;AACtC,gBAAY,oBAAoB,IAAI,oBAAI,IAAwC;AAAA,EAClF;AACA,SAAO,YAAY,oBAAoB;AACzC;AAEA,SAAS,wBAA+D;AACtE,QAAM,cAAc;AAGpB,MAAI,CAAC,YAAY,uBAAuB,GAAG;AACzC,gBAAY,uBAAuB,IAAI,oBAAI,IAAsC;AAAA,EACnF;AACA,SAAO,YAAY,uBAAuB;AAC5C;AAEA,SAAS,WAAW,aAAqB,SAA0B;AACjE,SAAO,UAAU,GAAG,WAAW,IAAI,OAAO,KAAK;AACjD;AAEO,SAAS,uBAAuB,SAAyB,SAA8C;AAC5G,QAAM,kBAAkB,mBAAmB;AAC3C,QAAM,MAAM,WAAW,QAAQ,aAAa,SAAS,OAAO;AAC5D,kBAAgB,IAAI,KAAK,OAAO;AAChC,MAAI,SAAS,SAAS;AAEpB,QAAI,CAAC,gBAAgB,IAAI,QAAQ,WAAW,GAAG;AAC7C,sBAAgB,IAAI,QAAQ,aAAa,OAAO;AAAA,IAClD;AAAA,EACF;AACA,SAAO,MAAM;AACX,oBAAgB,OAAO,GAAG;AAAA,EAC5B;AACF;AAEO,SAAS,kBAAkB,aAAqB,SAA8C;AACnG,QAAM,kBAAkB,mBAAmB;AAC3C,MAAI,SAAS;AACX,WAAO,gBAAgB,IAAI,WAAW,aAAa,OAAO,CAAC,KAAK,gBAAgB,IAAI,WAAW;AAAA,EACjG;AACA,SAAO,gBAAgB,IAAI,WAAW;AACxC;AAEO,SAAS,sBAAwC;AACtD,QAAM,kBAAkB,mBAAmB;AAC3C,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,SAA2B,CAAC;AAClC,aAAW,CAAC,KAAK,OAAO,KAAK,iBAAiB;AAC5C,QAAI,CAAC,IAAI,SAAS,GAAG,KAAK,CAAC,KAAK,IAAI,QAAQ,WAAW,GAAG;AACxD,WAAK,IAAI,QAAQ,WAAW;AAC5B,aAAO,KAAK,OAAO;AAAA,IACrB;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,uBAA6B;AAC3C,qBAAmB,EAAE,MAAM;AAC7B;AAEO,SAAS,uBACd,aACA,SACA,SACY;AACZ,MAAI,SAAS,YAAY,UAAa,QAAQ,YAAY,UAAU,QAAQ,YAAY,SAAS;AAC/F,UAAM,IAAI,MAAM,sEAAsE;AAAA,EACxF;AACA,MACE,SAAS,iBAAiB,WACtB,CAAC,OAAO,cAAc,QAAQ,YAAY,KACzC,QAAQ,gBAAgB,KACxB,QAAQ,eAAe,mCAC5B;AACA,UAAM,IAAI;AAAA,MACR,mGAAmG,gCAAgC;AAAA,IACrI;AAAA,EACF;AACA,QAAM,yBAAyB,0BAA0B;AACzD,yBAAuB,IAAI,aAAa;AAAA,IACtC;AAAA,IACA,OAAO,SAAS;AAAA,IAChB,mBAAmB,SAAS;AAAA,IAC5B,mBAAmB,SAAS;AAAA,IAC5B,cAAc,SAAS;AAAA,IACvB,SAAS,SAAS;AAAA,IAClB,gBAAgB,SAAS;AAAA,EAC3B,CAAC;AACD,SAAO,MAAM;AACX,2BAAuB,OAAO,WAAW;AAAA,EAC3C;AACF;AAEO,SAAS,kBAAkB,aAA6D;AAC7F,SAAO,0BAA0B,EAAE,IAAI,WAAW;AACpD;AAEO,SAAS,uBAA6B;AAC3C,4BAA0B,EAAE,MAAM;AACpC;AAEO,SAAS,iCAAiC,YAAkD;AACjG,QAAM,qBAAqB,sBAAsB;AACjD,qBAAmB,IAAI,WAAW,aAAa,UAAU;AACzD,SAAO,MAAM;AACX,uBAAmB,OAAO,WAAW,WAAW;AAAA,EAClD;AACF;AAEO,SAAS,4BAA4B,aAA2D;AACrG,SAAO,sBAAsB,EAAE,IAAI,WAAW;AAChD;AAEO,SAAS,gCAA4D;AAC1E,SAAO,MAAM,KAAK,sBAAsB,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,MAAM,cAAc,MAAM,KAAK,CAAC;AACjH;AAEO,SAAS,iCAAuC;AACrD,wBAAsB,EAAE,MAAM;AAChC;",
+  "sourcesContent": ["import { DEFAULT_WEBHOOK_BODY_LIMIT_BYTES } from '../../lib/webhooks/body'\n\n// \u2500\u2500 Unified Payment Status \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport type UnifiedPaymentStatus =\n  | 'pending'\n  | 'authorized'\n  | 'captured'\n  | 'partially_captured'\n  | 'refunded'\n  | 'partially_refunded'\n  | 'cancelled'\n  | 'failed'\n  | 'expired'\n  | 'unknown'\n\n// \u2500\u2500 GatewayAdapter Interface \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport interface GatewayAdapter {\n  readonly providerKey: string\n\n  /** Create a payment session / payment intent */\n  createSession(input: CreateSessionInput): Promise<CreateSessionResult>\n\n  /** Capture an authorized payment */\n  capture(input: CaptureInput): Promise<CaptureResult>\n\n  /** Refund a captured payment (full or partial) */\n  refund(input: RefundInput): Promise<RefundResult>\n\n  /** Cancel / void an authorized payment before capture */\n  cancel(input: CancelInput): Promise<CancelResult>\n\n  /** Get current payment status from provider */\n  getStatus(input: GetStatusInput): Promise<GatewayPaymentStatus>\n\n  /** Verify and parse an inbound webhook event */\n  verifyWebhook(input: VerifyWebhookInput): Promise<WebhookEvent>\n\n  /** Map provider status to unified status */\n  mapStatus(providerStatus: string, eventType?: string): UnifiedPaymentStatus\n}\n\nexport type PaymentGatewayDescriptorFieldType =\n  | 'text'\n  | 'number'\n  | 'select'\n  | 'multiselect'\n  | 'boolean'\n  | 'textarea'\n  | 'secret'\n  | 'url'\n\nexport interface PaymentGatewayDescriptorField {\n  key: string\n  label: string\n  type: PaymentGatewayDescriptorFieldType\n  description?: string\n  required?: boolean\n  options?: Array<{ value: string; label: string }>\n}\n\nexport type PaymentGatewayRendererType = 'embedded' | 'redirect'\n\nexport interface PaymentGatewayRendererDescriptor {\n  key: string\n  label: string\n  type: PaymentGatewayRendererType\n  description?: string\n  supportedPaymentTypes?: '*' | string[]\n  settingsFields?: PaymentGatewayDescriptorField[]\n}\n\nexport interface PaymentGatewayPresentationRequest {\n  mode?: 'auto' | PaymentGatewayRendererType\n  rendererKey?: string\n  rendererSettings?: Record<string, unknown>\n}\n\nexport interface PaymentGatewayDescriptor {\n  providerKey: string\n  label: string\n  sessionConfig?: {\n    fields?: PaymentGatewayDescriptorField[]\n    supportedCurrencies?: '*' | string[]\n    supportedPaymentTypes?: Array<{ value: string; label: string }>\n    defaultRendererKey?: string\n    renderers?: PaymentGatewayRendererDescriptor[]\n    /**\n     * @deprecated Use `renderers` and `defaultRendererKey`.\n     */\n    presentation?: 'embedded' | 'redirect' | 'either'\n    /**\n     * @deprecated Use `renderers`.\n     */\n    embeddedRenderers?: string[]\n  }\n}\n\nexport interface EmbeddedPaymentGatewayClientSession {\n  type: 'embedded'\n  rendererKey: string\n  payload?: Record<string, unknown>\n  settings?: Record<string, unknown>\n}\n\nexport interface RedirectPaymentGatewayClientSession {\n  type: 'redirect'\n  redirectUrl: string\n  target?: 'self' | 'top'\n}\n\nexport type PaymentGatewayClientSession =\n  | EmbeddedPaymentGatewayClientSession\n  | RedirectPaymentGatewayClientSession\n\n// \u2500\u2500 Order Amount Reconciliation \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport interface PaymentGatewayScope {\n  organizationId: string\n  tenantId: string\n}\n\nexport interface PaymentOrderTotal {\n  orderId: string\n  currencyCode: string\n  amountDue: number\n}\n\n/**\n * Contract a module that owns orders implements so `payment_gateways` can\n * reconcile a caller-supplied session amount against the authoritative amount\n * due, without depending on that module. Implementations MUST scope the lookup\n * by tenant and organization and MUST return `null` for anything outside the\n * caller's scope, so an out-of-scope order is indistinguishable from a missing\n * one. The `sales` module registers the default implementation under the\n * `paymentOrderTotalResolver` DI name.\n */\nexport interface PaymentOrderTotalResolver {\n  resolveOrderTotal(orderId: string, scope: PaymentGatewayScope): Promise<PaymentOrderTotal | null>\n}\n\n// \u2500\u2500 Input / Output Types \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport interface CreateSessionInput {\n  orderId?: string\n  paymentId: string\n  /** Stable operation key for provider-native session creation idempotency. */\n  idempotencyKey?: string\n  tenantId: string\n  organizationId: string\n  amount: number\n  currencyCode: string\n  captureMethod?: 'automatic' | 'manual'\n  paymentTypes?: string[]\n  description?: string\n  successUrl?: string\n  cancelUrl?: string\n  metadata?: Record<string, unknown>\n  credentials: Record<string, unknown>\n  lineItems?: SessionLineItem[]\n  presentation?: PaymentGatewayPresentationRequest\n}\n\nexport interface SessionLineItem {\n  name: string\n  quantity: number\n  unitAmount: number\n  currencyCode: string\n}\n\nexport interface CreateSessionResult {\n  sessionId: string\n  clientSecret?: string\n  redirectUrl?: string\n  status: UnifiedPaymentStatus\n  providerData?: Record<string, unknown>\n  clientSession?: PaymentGatewayClientSession\n}\n\nexport interface CaptureInput {\n  sessionId: string\n  amount?: number\n  credentials: Record<string, unknown>\n  metadata?: Record<string, unknown>\n  idempotencyKey?: string\n}\n\nexport interface CaptureResult {\n  status: UnifiedPaymentStatus\n  capturedAmount: number\n  providerData?: Record<string, unknown>\n}\n\nexport interface RefundInput {\n  sessionId: string\n  amount?: number\n  reason?: string\n  credentials: Record<string, unknown>\n  metadata?: Record<string, unknown>\n  idempotencyKey?: string\n}\n\nexport interface RefundResult {\n  refundId: string\n  status: UnifiedPaymentStatus\n  refundedAmount: number\n  providerData?: Record<string, unknown>\n}\n\nexport interface CancelInput {\n  sessionId: string\n  reason?: string\n  credentials: Record<string, unknown>\n  idempotencyKey?: string\n}\n\nexport interface CancelResult {\n  status: UnifiedPaymentStatus\n  providerData?: Record<string, unknown>\n}\n\nexport interface GetStatusInput {\n  sessionId: string\n  credentials: Record<string, unknown>\n}\n\nexport interface GatewayPaymentStatus {\n  status: UnifiedPaymentStatus\n  amount: number\n  amountReceived: number\n  currencyCode: string\n  providerData?: Record<string, unknown>\n}\n\nexport interface VerifyWebhookInput {\n  rawBody: string | Buffer\n  headers: Record<string, string | string[] | undefined>\n  credentials: Record<string, unknown>\n}\n\nexport interface WebhookEvent {\n  eventType: string\n  eventId: string\n  data: Record<string, unknown>\n  idempotencyKey: string\n  timestamp: Date\n}\n\n// \u2500\u2500 Webhook Handler \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport interface WebhookHandlerRegistration {\n  handler: (input: VerifyWebhookInput) => Promise<WebhookEvent>\n  queue?: string\n  readSessionIdHint?: (payload: Record<string, unknown> | null) => string | null\n  maxBodyBytes?: number\n}\n\n// \u2500\u2500 Adapter Registry Options \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport interface RegisterAdapterOptions {\n  version?: string\n}\n\n// \u2500\u2500 Registries \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nconst ADAPTER_REGISTRY_KEY = '__openMercatoPaymentGatewayAdapters__'\nconst WEBHOOK_REGISTRY_KEY = '__openMercatoPaymentGatewayWebhookHandlers__'\nconst DESCRIPTOR_REGISTRY_KEY = '__openMercatoPaymentGatewayDescriptors__'\n\nfunction getAdapterRegistry(): Map<string, GatewayAdapter> {\n  const globalState = globalThis as typeof globalThis & {\n    [ADAPTER_REGISTRY_KEY]?: Map<string, GatewayAdapter>\n  }\n  if (!globalState[ADAPTER_REGISTRY_KEY]) {\n    globalState[ADAPTER_REGISTRY_KEY] = new Map<string, GatewayAdapter>()\n  }\n  return globalState[ADAPTER_REGISTRY_KEY]\n}\n\nfunction getWebhookHandlerRegistry(): Map<string, WebhookHandlerRegistration> {\n  const globalState = globalThis as typeof globalThis & {\n    [WEBHOOK_REGISTRY_KEY]?: Map<string, WebhookHandlerRegistration>\n  }\n  if (!globalState[WEBHOOK_REGISTRY_KEY]) {\n    globalState[WEBHOOK_REGISTRY_KEY] = new Map<string, WebhookHandlerRegistration>()\n  }\n  return globalState[WEBHOOK_REGISTRY_KEY]\n}\n\nfunction getDescriptorRegistry(): Map<string, PaymentGatewayDescriptor> {\n  const globalState = globalThis as typeof globalThis & {\n    [DESCRIPTOR_REGISTRY_KEY]?: Map<string, PaymentGatewayDescriptor>\n  }\n  if (!globalState[DESCRIPTOR_REGISTRY_KEY]) {\n    globalState[DESCRIPTOR_REGISTRY_KEY] = new Map<string, PaymentGatewayDescriptor>()\n  }\n  return globalState[DESCRIPTOR_REGISTRY_KEY]\n}\n\nfunction adapterKey(providerKey: string, version?: string): string {\n  return version ? `${providerKey}:${version}` : providerKey\n}\n\nexport function registerGatewayAdapter(adapter: GatewayAdapter, options?: RegisterAdapterOptions): () => void {\n  const adapterRegistry = getAdapterRegistry()\n  const key = adapterKey(adapter.providerKey, options?.version)\n  adapterRegistry.set(key, adapter)\n  if (options?.version) {\n    // Also register as default if no default exists\n    if (!adapterRegistry.has(adapter.providerKey)) {\n      adapterRegistry.set(adapter.providerKey, adapter)\n    }\n  }\n  return () => {\n    adapterRegistry.delete(key)\n  }\n}\n\nexport function getGatewayAdapter(providerKey: string, version?: string): GatewayAdapter | undefined {\n  const adapterRegistry = getAdapterRegistry()\n  if (version) {\n    return adapterRegistry.get(adapterKey(providerKey, version)) ?? adapterRegistry.get(providerKey)\n  }\n  return adapterRegistry.get(providerKey)\n}\n\nexport function listGatewayAdapters(): GatewayAdapter[] {\n  const adapterRegistry = getAdapterRegistry()\n  const seen = new Set<string>()\n  const result: GatewayAdapter[] = []\n  for (const [key, adapter] of adapterRegistry) {\n    if (!key.includes(':') && !seen.has(adapter.providerKey)) {\n      seen.add(adapter.providerKey)\n      result.push(adapter)\n    }\n  }\n  return result\n}\n\nexport function clearGatewayAdapters(): void {\n  getAdapterRegistry().clear()\n}\n\nexport function registerWebhookHandler(\n  providerKey: string,\n  handler: (input: VerifyWebhookInput) => Promise<WebhookEvent>,\n  options?: {\n    queue?: string\n    readSessionIdHint?: (payload: Record<string, unknown> | null) => string | null\n    maxBodyBytes?: number\n  },\n): () => void {\n  if (\n    options?.maxBodyBytes !== undefined\n    && (!Number.isSafeInteger(options.maxBodyBytes)\n      || options.maxBodyBytes <= 0\n      || options.maxBodyBytes > DEFAULT_WEBHOOK_BODY_LIMIT_BYTES)\n  ) {\n    throw new Error(\n      `[internal] Payment gateway webhook maxBodyBytes must be a positive safe integer no greater than ${DEFAULT_WEBHOOK_BODY_LIMIT_BYTES}`,\n    )\n  }\n  const webhookHandlerRegistry = getWebhookHandlerRegistry()\n  webhookHandlerRegistry.set(providerKey, {\n    handler,\n    queue: options?.queue,\n    readSessionIdHint: options?.readSessionIdHint,\n    maxBodyBytes: options?.maxBodyBytes,\n  })\n  return () => {\n    webhookHandlerRegistry.delete(providerKey)\n  }\n}\n\nexport function getWebhookHandler(providerKey: string): WebhookHandlerRegistration | undefined {\n  return getWebhookHandlerRegistry().get(providerKey)\n}\n\nexport function clearWebhookHandlers(): void {\n  getWebhookHandlerRegistry().clear()\n}\n\nexport function registerPaymentGatewayDescriptor(descriptor: PaymentGatewayDescriptor): () => void {\n  const descriptorRegistry = getDescriptorRegistry()\n  descriptorRegistry.set(descriptor.providerKey, descriptor)\n  return () => {\n    descriptorRegistry.delete(descriptor.providerKey)\n  }\n}\n\nexport function getPaymentGatewayDescriptor(providerKey: string): PaymentGatewayDescriptor | undefined {\n  return getDescriptorRegistry().get(providerKey)\n}\n\nexport function listPaymentGatewayDescriptors(): PaymentGatewayDescriptor[] {\n  return Array.from(getDescriptorRegistry().values()).sort((left, right) => left.label.localeCompare(right.label))\n}\n\nexport function clearPaymentGatewayDescriptors(): void {\n  getDescriptorRegistry().clear()\n}\n"],
+  "mappings": "AAAA,SAAS,wCAAwC;AA0QjD,MAAM,uBAAuB;AAC7B,MAAM,uBAAuB;AAC7B,MAAM,0BAA0B;AAEhC,SAAS,qBAAkD;AACzD,QAAM,cAAc;AAGpB,MAAI,CAAC,YAAY,oBAAoB,GAAG;AACtC,gBAAY,oBAAoB,IAAI,oBAAI,IAA4B;AAAA,EACtE;AACA,SAAO,YAAY,oBAAoB;AACzC;AAEA,SAAS,4BAAqE;AAC5E,QAAM,cAAc;AAGpB,MAAI,CAAC,YAAY,oBAAoB,GAAG;AACtC,gBAAY,oBAAoB,IAAI,oBAAI,IAAwC;AAAA,EAClF;AACA,SAAO,YAAY,oBAAoB;AACzC;AAEA,SAAS,wBAA+D;AACtE,QAAM,cAAc;AAGpB,MAAI,CAAC,YAAY,uBAAuB,GAAG;AACzC,gBAAY,uBAAuB,IAAI,oBAAI,IAAsC;AAAA,EACnF;AACA,SAAO,YAAY,uBAAuB;AAC5C;AAEA,SAAS,WAAW,aAAqB,SAA0B;AACjE,SAAO,UAAU,GAAG,WAAW,IAAI,OAAO,KAAK;AACjD;AAEO,SAAS,uBAAuB,SAAyB,SAA8C;AAC5G,QAAM,kBAAkB,mBAAmB;AAC3C,QAAM,MAAM,WAAW,QAAQ,aAAa,SAAS,OAAO;AAC5D,kBAAgB,IAAI,KAAK,OAAO;AAChC,MAAI,SAAS,SAAS;AAEpB,QAAI,CAAC,gBAAgB,IAAI,QAAQ,WAAW,GAAG;AAC7C,sBAAgB,IAAI,QAAQ,aAAa,OAAO;AAAA,IAClD;AAAA,EACF;AACA,SAAO,MAAM;AACX,oBAAgB,OAAO,GAAG;AAAA,EAC5B;AACF;AAEO,SAAS,kBAAkB,aAAqB,SAA8C;AACnG,QAAM,kBAAkB,mBAAmB;AAC3C,MAAI,SAAS;AACX,WAAO,gBAAgB,IAAI,WAAW,aAAa,OAAO,CAAC,KAAK,gBAAgB,IAAI,WAAW;AAAA,EACjG;AACA,SAAO,gBAAgB,IAAI,WAAW;AACxC;AAEO,SAAS,sBAAwC;AACtD,QAAM,kBAAkB,mBAAmB;AAC3C,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,SAA2B,CAAC;AAClC,aAAW,CAAC,KAAK,OAAO,KAAK,iBAAiB;AAC5C,QAAI,CAAC,IAAI,SAAS,GAAG,KAAK,CAAC,KAAK,IAAI,QAAQ,WAAW,GAAG;AACxD,WAAK,IAAI,QAAQ,WAAW;AAC5B,aAAO,KAAK,OAAO;AAAA,IACrB;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,uBAA6B;AAC3C,qBAAmB,EAAE,MAAM;AAC7B;AAEO,SAAS,uBACd,aACA,SACA,SAKY;AACZ,MACE,SAAS,iBAAiB,WACtB,CAAC,OAAO,cAAc,QAAQ,YAAY,KACzC,QAAQ,gBAAgB,KACxB,QAAQ,eAAe,mCAC5B;AACA,UAAM,IAAI;AAAA,MACR,mGAAmG,gCAAgC;AAAA,IACrI;AAAA,EACF;AACA,QAAM,yBAAyB,0BAA0B;AACzD,yBAAuB,IAAI,aAAa;AAAA,IACtC;AAAA,IACA,OAAO,SAAS;AAAA,IAChB,mBAAmB,SAAS;AAAA,IAC5B,cAAc,SAAS;AAAA,EACzB,CAAC;AACD,SAAO,MAAM;AACX,2BAAuB,OAAO,WAAW;AAAA,EAC3C;AACF;AAEO,SAAS,kBAAkB,aAA6D;AAC7F,SAAO,0BAA0B,EAAE,IAAI,WAAW;AACpD;AAEO,SAAS,uBAA6B;AAC3C,4BAA0B,EAAE,MAAM;AACpC;AAEO,SAAS,iCAAiC,YAAkD;AACjG,QAAM,qBAAqB,sBAAsB;AACjD,qBAAmB,IAAI,WAAW,aAAa,UAAU;AACzD,SAAO,MAAM;AACX,uBAAmB,OAAO,WAAW,WAAW;AAAA,EAClD;AACF;AAEO,SAAS,4BAA4B,aAA2D;AACrG,SAAO,sBAAsB,EAAE,IAAI,WAAW;AAChD;AAEO,SAAS,gCAA4D;AAC1E,SAAO,MAAM,KAAK,sBAAsB,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,MAAM,cAAc,MAAM,KAAK,CAAC;AACjH;AAEO,SAAS,iCAAuC;AACrD,wBAAsB,EAAE,MAAM;AAChC;",
   "names": []
 }

package/dist/modules/registry.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/modules/registry.ts"],
-  "sourcesContent": ["import type { ReactNode } from 'react'\nimport type { OpenApiRouteDoc, OpenApiMethodDoc } from '@open-mercato/shared/lib/openapi/types'\nimport type { SyncCrudEventResult } from '../lib/crud/sync-event-types'\nimport type { DashboardWidgetModule } from './dashboard/widgets'\nimport type { InjectionAnyWidgetModule, ModuleInjectionTable } from './widgets/injection'\nimport type { IntegrationBundle, IntegrationDefinition } from './integrations/types'\nimport { createLogger } from '../lib/logger'\nimport {\n  applyApiOverridesToManifests,\n  applyModuleOverridesToModules,\n  applyPageOverridesToManifests,\n  composeApiRouteOverrides,\n  composePageRouteOverrides,\n} from './overrides'\nimport { bindMatchedApiRoutePath } from '../lib/modules/api-route-identity'\n\nconst logger = createLogger('shared').child({ component: 'cli-registry' })\n\n// Context passed to dynamic metadata guards\nexport type RouteVisibilityContext = { path?: string; auth?: any }\n\n/**\n * Portal sidebar navigation hint. When declared on a portal page's metadata,\n * the page is auto-listed in the portal sidebar (subject to RBAC) by the\n * `/api/customer_accounts/portal/nav` endpoint.\n *\n * Absence of `nav` means the page is routable but not auto-listed (useful for\n * detail pages, create forms, etc.).\n */\nexport type PortalNavMetadata = {\n  label: string\n  labelKey?: string\n  group?: 'main' | 'account'\n  order?: number\n  icon?: string\n}\n\n// Metadata you can export from page.meta.ts or directly from a server page\nexport type PageMetadata = {\n  requireAuth?: boolean\n  /** @deprecated Use `requireFeatures` instead \u2014 role names are mutable and can be spoofed */\n  requireRoles?: readonly string[]\n  // Optional fine-grained feature requirements\n  requireFeatures?: readonly string[]\n  // Portal: require customer (portal user) authentication instead of staff auth\n  requireCustomerAuth?: boolean\n  // Portal: require customer-specific features (checked against CustomerRbacService)\n  requireCustomerFeatures?: readonly string[]\n  // Portal: optional sidebar presentation hint (auto-listed by portal nav endpoint)\n  nav?: PortalNavMetadata\n  // Titles and grouping (aliases supported)\n  title?: string\n  titleKey?: string\n  pageTitle?: string\n  pageTitleKey?: string\n  group?: string\n  groupKey?: string\n  pageGroup?: string\n  pageGroupKey?: string\n  // Ordering and visuals\n  order?: number\n  pageOrder?: number\n  priority?: number\n  pagePriority?: number\n  icon?: ReactNode\n  navHidden?: boolean\n  // Dynamic flags\n  visible?: (ctx: RouteVisibilityContext) => boolean | Promise<boolean>\n  enabled?: (ctx: RouteVisibilityContext) => boolean | Promise<boolean>\n  // Optional static breadcrumb trail for header\n  breadcrumb?: Array<{ label: string; labelKey?: string; href?: string }>\n  // Navigation context for tiered navigation:\n  // - 'main' (default): Main sidebar business operations\n  // - 'admin': Collapsible \"Settings & Admin\" section at bottom of sidebar\n  // - 'settings': Hidden from sidebar, only accessible via Settings hub page\n  // - 'profile': Profile dropdown items\n  pageContext?: 'main' | 'admin' | 'settings' | 'profile'\n  placement?: {\n    section: string\n    sectionLabel?: string\n    sectionLabelKey?: string\n    order?: number\n  }\n}\n\nexport type HttpMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE'\n\nexport type ApiHandler = (req: Request, ctx?: any) => Promise<Response> | Response\n\nexport type ModuleSubscriberHandler = (\n  payload: any,\n  ctx: any\n) => Promise<void | SyncCrudEventResult> | void | SyncCrudEventResult\n\nexport type ModuleWorkerHandler = (job: unknown, ctx: unknown) => Promise<void> | void\n\nexport type ModuleRoute = {\n  pattern?: string\n  path?: string\n  requireAuth?: boolean\n  /** @deprecated Use `requireFeatures` instead \u2014 role names are mutable and can be spoofed */\n  requireRoles?: string[]\n  // Optional fine-grained feature requirements\n  requireFeatures?: string[]\n  // Portal: require customer (portal user) authentication instead of staff auth\n  requireCustomerAuth?: boolean\n  // Portal: require customer-specific features (checked against CustomerRbacService)\n  requireCustomerFeatures?: string[]\n  // Portal: optional sidebar presentation hint (auto-listed by portal nav endpoint)\n  nav?: PortalNavMetadata\n  title?: string\n  titleKey?: string\n  group?: string\n  groupKey?: string\n  icon?: ReactNode\n  order?: number\n  priority?: number\n  navHidden?: boolean\n  visible?: (ctx: RouteVisibilityContext) => boolean | Promise<boolean>\n  enabled?: (ctx: RouteVisibilityContext) => boolean | Promise<boolean>\n  breadcrumb?: Array<{ label: string; labelKey?: string; href?: string }>\n  pageContext?: 'main' | 'admin' | 'settings' | 'profile'\n  placement?: {\n    section: string\n    sectionLabel?: string\n    sectionLabelKey?: string\n    order?: number\n  }\n  Component: (props: any) => ReactNode | Promise<ReactNode>\n}\n\nexport type ModuleRouteMetadata = Omit<ModuleRoute, 'Component'>\n\nexport type ModuleApiLegacy = {\n  method: HttpMethod\n  path: string\n  handler: ApiHandler\n  metadata?: Record<string, unknown>\n  docs?: OpenApiMethodDoc\n}\n\nexport type ModuleApiRouteFile = {\n  path: string\n  handlers: Partial<Record<HttpMethod, ApiHandler>>\n  requireAuth?: boolean\n  /** @deprecated Use `requireFeatures` instead \u2014 role names are mutable and can be spoofed */\n  requireRoles?: string[]\n  // Optional fine-grained feature requirements for the entire route file\n  // Note: per-method feature requirements should be expressed inside metadata\n  requireFeatures?: string[]\n  docs?: OpenApiRouteDoc\n  metadata?: Partial<Record<HttpMethod, unknown>>\n}\n\nexport type ModuleApi = ModuleApiLegacy | ModuleApiRouteFile\n\nexport type RouteMatchParams = Record<string, string | string[]>\n\nexport type FrontendRouteManifestEntry = Omit<ModuleRoute, 'Component'> & {\n  moduleId: string\n  load: () => Promise<ModuleRoute['Component']>\n}\n\nexport type BackendRouteManifestEntry = Omit<ModuleRoute, 'Component'> & {\n  moduleId: string\n  load: () => Promise<ModuleRoute['Component']>\n}\n\nexport type ApiRouteManifestEntry = {\n  moduleId: string\n  kind: 'route-file' | 'legacy'\n  path: string\n  methods: HttpMethod[]\n  method?: HttpMethod\n  load: () => Promise<Record<string, unknown>>\n}\n\nexport type ModuleCli = {\n  command: string\n  run: (argv: string[]) => Promise<void> | void\n  // Usage text printed by the `mercato` dispatcher when the command is invoked with --help/-h.\n  help?: string\n  // Set when the command parses --help/-h itself; the dispatcher then forwards the flag\n  // instead of intercepting it, so the command can print its own richer usage text.\n  handlesHelp?: boolean\n}\n\nexport type ModuleSubscriber = {\n  id: string\n  moduleId?: string\n  event: string\n  persistent?: boolean\n  sync?: boolean\n  priority?: number\n  handler: ModuleSubscriberHandler\n}\n\nexport type ModuleWorker = {\n  id: string\n  moduleId?: string\n  queue: string\n  concurrency: number\n  lockDuration?: number\n  maxStalledCount?: number\n  /**\n   * Reports a job the queue abandoned without running the handler.\n   *\n   * Present only for workers whose metadata declares it; the generator emits it as a lazy import\n   * beside the handler, because the registry serializes metadata as literals and a function cannot\n   * survive that.\n   */\n  onJobAbandoned?: (payload: unknown, info: { jobId: string | null; reason: string }) => void | Promise<void>\n  handler: ModuleWorkerHandler\n  /** Opt-in flag exposing this queue as a user-facing scheduler target (issue #5213). */\n  schedulerSafe?: boolean\n  /** Creator features required beyond scheduler.jobs.manage when schedulerSafe is set. */\n  schedulerRequiredFeatures?: string[]\n}\n\nexport type ModuleInfo = {\n  name?: string\n  title?: string\n  version?: string\n  description?: string\n  author?: string\n  license?: string\n  homepage?: string\n  copyright?: string\n  // Optional hard dependencies: module ids that must be enabled\n  requires?: string[]\n  // Whether this module can be ejected into the app's src/modules/ for customization\n  ejectable?: boolean\n}\n\nexport type ModuleDashboardWidgetEntry = {\n  moduleId: string\n  key: string\n  source: 'app' | 'package'\n  loader: () => Promise<DashboardWidgetModule<any>>\n}\n\nexport type ModuleInjectionWidgetEntry = {\n  moduleId: string\n  key: string\n  source: 'app' | 'package'\n  widgetId?: string\n  loader: () => Promise<InjectionAnyWidgetModule<any, any>>\n}\n\nexport type Module = {\n  id: string\n  info?: ModuleInfo\n  backendRoutes?: ModuleRoute[]\n  frontendRoutes?: ModuleRoute[]\n  apis?: ModuleApi[]\n  cli?: ModuleCli[]\n  translations?: Record<string, Record<string, string>>\n  // Optional: per-module feature declarations discovered from acl.ts (module root)\n  features?: Array<{ id: string; title: string; module: string }>\n  // Auto-discovered event subscribers\n  subscribers?: ModuleSubscriber[]\n  // Auto-discovered queue workers\n  workers?: ModuleWorker[]\n  // Optional: per-module declared entity extensions and custom fields (static)\n  // Extensions discovered from data/extensions.ts; Custom fields discovered from ce.ts (entities[].fields)\n  entityExtensions?: import('./entities').EntityExtension[]\n  customFieldSets?: import('./entities').CustomFieldSet[]\n  // Optional: per-module declared custom entities (virtual/logical entities)\n  // Discovered from ce.ts (module root). Each entry represents an entityId with optional label/description.\n  customEntities?: Array<{ id: string; label?: string; description?: string }>\n  dashboardWidgets?: ModuleDashboardWidgetEntry[]\n  injectionWidgets?: ModuleInjectionWidgetEntry[]\n  injectionTable?: ModuleInjectionTable\n  // Optional: per-module vector search configuration (discovered from vector.ts)\n  vector?: import('./vector').VectorModuleConfig\n  // Optional: module-specific tenant setup configuration (from setup.ts)\n  setup?: import('./setup').ModuleSetupConfig\n  // Optional: a long-lived process-wide runtime the module starts itself (from runtime.ts).\n  // Invoked once per process by `mercato server start` and `mercato queue worker`.\n  runtime?: import('./runtime').ModuleRuntime\n  // Optional: default encryption maps owned by the module (from encryption.ts)\n  defaultEncryptionMaps?: import('./encryption').ModuleEncryptionMap[]\n  // Optional: integration marketplace declarations discovered from integration.ts\n  integrations?: IntegrationDefinition[]\n  bundles?: IntegrationBundle[]\n}\n\nfunction normPath(s: string) {\n  return (s.startsWith('/') ? s : '/' + s).replace(/\\/+$/, '') || '/'\n}\n\n// 0 = literal (most specific), 1 = dynamic [param], 2 = catch-all [...param] or [[...param]]\nfunction segmentSpecificity(seg: string): 0 | 1 | 2 {\n  if (seg.startsWith('[[...') || seg.startsWith('[...')) return 2\n  if (seg.startsWith('[')) return 1\n  return 0\n}\n\nfunction compareRouteSpecificity(aPattern: string, bPattern: string): number {\n  const aSegs = aPattern.split('/')\n  const bSegs = bPattern.split('/')\n  const len = Math.max(aSegs.length, bSegs.length)\n  for (let i = 0; i < len; i++) {\n    const av = i < aSegs.length ? segmentSpecificity(aSegs[i]) : -1\n    const bv = i < bSegs.length ? segmentSpecificity(bSegs[i]) : -1\n    if (av !== bv) return av - bv\n  }\n  return 0\n}\n\nexport function sortRoutesBySpecificity<T extends { pattern?: string; path?: string }>(routes: T[]): T[] {\n  return [...routes].sort((a, b) =>\n    compareRouteSpecificity(a.pattern ?? a.path ?? '/', b.pattern ?? b.path ?? '/'),\n  )\n}\n\n// Memoized per-array sorted view, so direct callers (e.g., the Next.js catch-all\n// routes that import generated `frontendRoutes`/`backendRoutes`/`apiRoutes`\n// arrays) match against a specificity-sorted view even if they never call\n// `register*RouteManifests`. Keyed by array reference; generated arrays are\n// module-level constants so this caches once per process.\nconst sortedRoutesCache = new WeakMap<object, readonly unknown[]>()\n\nfunction ensureSortedRoutes<T extends { pattern?: string; path?: string }>(routes: readonly T[]): readonly T[] {\n  const cached = sortedRoutesCache.get(routes) as readonly T[] | undefined\n  if (cached) return cached\n  const sorted = sortRoutesBySpecificity([...routes])\n  sortedRoutesCache.set(routes, sorted)\n  return sorted\n}\n\nexport function matchRoutePattern(pattern: string, pathname: string): RouteMatchParams | undefined {\n  const p = normPath(pattern)\n  const u = normPath(pathname)\n  const pSegs = p.split('/').slice(1)\n  const uSegs = u.split('/').slice(1)\n  const params: Record<string, string | string[]> = {}\n  let i = 0\n  for (let j = 0; j < pSegs.length; j++, i++) {\n    const seg = pSegs[j]\n    const mCatchAll = seg.match(/^\\[\\.\\.\\.(.+)\\]$/)\n    const mOptCatch = seg.match(/^\\[\\[\\.\\.\\.(.+)\\]\\]$/)\n    const mDyn = seg.match(/^\\[(.+)\\]$/)\n    if (mCatchAll) {\n      const key = mCatchAll[1]\n      if (i >= uSegs.length) return undefined\n      params[key] = uSegs.slice(i)\n      return params\n    } else if (mOptCatch) {\n      const key = mOptCatch[1]\n      params[key] = i < uSegs.length ? uSegs.slice(i) : []\n      return params\n    } else if (mDyn) {\n      if (i >= uSegs.length) return undefined\n      params[mDyn[1]] = uSegs[i]\n    } else {\n      if (i >= uSegs.length || uSegs[i].toLowerCase() !== seg.toLowerCase()) return undefined\n    }\n  }\n  if (i !== uSegs.length) return undefined\n  return params\n}\n\nfunction getPattern(r: ModuleRoute) {\n  return r.pattern ?? r.path ?? '/'\n}\n\nexport function findFrontendMatch(modules: Module[], pathname: string): { route: ModuleRoute; params: Record<string, string | string[]> } | undefined {\n  for (const m of modules) {\n    const routes = m.frontendRoutes ?? []\n    for (const r of routes) {\n      const params = matchRoutePattern(getPattern(r), pathname)\n      if (params) return { route: r, params }\n    }\n  }\n}\n\nexport function findBackendMatch(modules: Module[], pathname: string): { route: ModuleRoute; params: Record<string, string | string[]> } | undefined {\n  for (const m of modules) {\n    const routes = m.backendRoutes ?? []\n    for (const r of routes) {\n      const params = matchRoutePattern(getPattern(r), pathname)\n      if (params) return { route: r, params }\n    }\n  }\n}\n\nexport function findApi(modules: Module[], method: HttpMethod, pathname: string): { handler: ApiHandler; params: Record<string, string | string[]>; requireAuth?: boolean; requireRoles?: string[]; metadata?: any } | undefined {\n  for (const m of modules) {\n    const apis = m.apis ?? []\n    for (const a of apis) {\n      if ('handlers' in a) {\n        const params = matchRoutePattern(a.path, pathname)\n        const handler = (a.handlers as any)[method]\n        if (params && handler) return { handler, params, requireAuth: a.requireAuth, requireRoles: (a as any).requireRoles, metadata: (a as any).metadata }\n      } else {\n        const al = a as ModuleApiLegacy\n        if (al.method !== method) continue\n        const params = matchRoutePattern(al.path, pathname)\n        if (params) {\n          return { handler: al.handler, params, metadata: al.metadata }\n        }\n      }\n    }\n  }\n}\n\nexport function findRouteManifestMatch<T extends { pattern?: string; path?: string }>(\n  routes: T[],\n  pathname: string\n): { route: T; params: RouteMatchParams } | undefined {\n  for (const route of ensureSortedRoutes(routes)) {\n    const params = matchRoutePattern(route.pattern ?? route.path ?? '/', pathname)\n    if (params) {\n      return { route, params }\n    }\n  }\n}\n\nexport function findApiRouteManifestMatch<T extends { path: string; methods: HttpMethod[] }>(\n  routes: T[],\n  method: HttpMethod,\n  pathname: string,\n  request?: Request,\n): { route: T; params: RouteMatchParams } | undefined {\n  for (const route of ensureSortedRoutes(routes)) {\n    if (!route.methods.includes(method)) continue\n    const params = matchRoutePattern(route.path, pathname)\n    if (params) {\n      if (request && !bindMatchedApiRoutePath(request, route.path, params)) return undefined\n      return { route, params }\n    }\n  }\n}\n\nexport { resolvePageRouteMetadata } from './pageRouteMetadata'\n\nlet _backendRouteManifests: BackendRouteManifestEntry[] | null = null\n\nexport function registerBackendRouteManifests(routes: BackendRouteManifestEntry[]) {\n  const pageOverrides = composePageRouteOverrides()\n  const finalRoutes = Object.keys(pageOverrides).length === 0\n    ? routes\n    : applyPageOverridesToManifests(routes, pageOverrides, 'backend')\n  _backendRouteManifests = sortRoutesBySpecificity(finalRoutes)\n}\n\nexport function getBackendRouteManifests(): BackendRouteManifestEntry[] {\n  return _backendRouteManifests ?? []\n}\n\nlet _frontendRouteManifests: FrontendRouteManifestEntry[] | null = null\n\nexport function registerFrontendRouteManifests(routes: FrontendRouteManifestEntry[]) {\n  const pageOverrides = composePageRouteOverrides()\n  const finalRoutes = Object.keys(pageOverrides).length === 0\n    ? routes\n    : applyPageOverridesToManifests(routes, pageOverrides, 'frontend')\n  _frontendRouteManifests = sortRoutesBySpecificity(finalRoutes)\n}\n\nexport function getFrontendRouteManifests(): FrontendRouteManifestEntry[] {\n  return _frontendRouteManifests ?? []\n}\n\nlet _apiRouteManifests: ApiRouteManifestEntry[] | null = null\n\nexport function registerApiRouteManifests(routes: ApiRouteManifestEntry[]) {\n  // Apply any `entry.overrides.routes.api` overrides registered through the\n  // unified `modules.ts` dispatcher or programmatic API before storing the\n  // manifest. The composer is cheap and returns an empty object when no\n  // overrides exist, so this is a no-op for apps that do not opt in.\n  const routeOverrides = composeApiRouteOverrides()\n  const finalRoutes = Object.keys(routeOverrides).length === 0\n    ? routes\n    : applyApiOverridesToManifests(routes, routeOverrides)\n  _apiRouteManifests = sortRoutesBySpecificity(finalRoutes)\n}\n\nexport function getApiRouteManifests(): ApiRouteManifestEntry[] {\n  return _apiRouteManifests ?? []\n}\n\n// CLI modules registry - populated ONLY by the `mercato` bin (packages/cli/src/bin.ts\n// plus the `init` and `seed:defaults` commands). Runtime code MUST NOT read it: it\n// fails open (see getCliModules below), so outside a CLI process a reader gets an\n// empty list and silently does nothing. The events worker made exactly that mistake\n// and dropped every persistent subscriber. Runtime code uses the app registry\n// (`getModules` from ../lib/modules/registry) or a DI-resolved service.\n// Enforced by src/modules/__tests__/cli-registry-boundary.test.ts.\nlet _cliModules: Module[] | null = null\n\nexport function registerCliModules(modules: Module[]) {\n  if (_cliModules !== null && process.env.NODE_ENV === 'development') {\n    logger.debug('CLI modules re-registered (this may occur during HMR)')\n  }\n  _cliModules = applyModuleOverridesToModules(modules)\n}\n\nexport function getCliModules(): Module[] {\n  // Return empty array if not registered - allows generate command to work without bootstrap\n  return _cliModules ?? []\n}\n\nexport function hasCliModules(): boolean {\n  return _cliModules !== null && _cliModules.length > 0\n}\n\nexport function getDefaultEncryptionMaps(modules: Module[]): import('./encryption').ModuleEncryptionMap[] {\n  const byEntityId = new Map<string, { moduleId: string; map: import('./encryption').ModuleEncryptionMap }>()\n\n  for (const mod of modules) {\n    for (const entry of mod.defaultEncryptionMaps ?? []) {\n      const previous = byEntityId.get(entry.entityId)\n      if (previous) {\n        throw new Error(\n          `[registry] Duplicate default encryption map for \"${entry.entityId}\" declared by \"${previous.moduleId}\" and \"${mod.id}\"`\n        )\n      }\n      byEntityId.set(entry.entityId, {\n        moduleId: mod.id,\n        map: {\n          entityId: entry.entityId,\n          ...(entry.keyScope ? { keyScope: entry.keyScope } : {}),\n          fields: entry.fields.map((field) => ({\n            field: field.field,\n            hashField: field.hashField ?? null,\n          })),\n        },\n      })\n    }\n  }\n\n  return Array.from(byEntityId.values(), ({ map }) => map)\n}\n\nfunction ensureLazyHandler<T extends (...args: any[]) => any>(\n  loaded: unknown,\n  kind: 'subscriber' | 'worker',\n  id: string\n): T {\n  const handler = typeof loaded === 'function'\n    ? loaded\n    : loaded && typeof loaded === 'object' && 'default' in loaded\n      ? (loaded as Record<string, unknown>).default\n      : null\n  if (typeof handler !== 'function') {\n    throw new Error(`[registry] Invalid ${kind} module \"${id}\" (missing default export handler)`)\n  }\n  return handler as T\n}\n\nexport function createLazyModuleSubscriber(\n  loadModule: () => Promise<unknown>,\n  id: string\n): ModuleSubscriberHandler {\n  let handlerPromise: Promise<ModuleSubscriberHandler> | null = null\n  return async (payload, ctx) => {\n    handlerPromise ??= loadModule().then((loaded) =>\n      ensureLazyHandler<ModuleSubscriberHandler>(loaded, 'subscriber', id)\n    )\n    const handler = await handlerPromise\n    return handler(payload, ctx)\n  }\n}\n\nexport function createLazyModuleWorker(\n  loadModule: () => Promise<unknown>,\n  id: string\n): ModuleWorkerHandler {\n  let handlerPromise: Promise<ModuleWorkerHandler> | null = null\n  return async (job, ctx) => {\n    handlerPromise ??= loadModule().then((loaded) =>\n      ensureLazyHandler<ModuleWorkerHandler>(loaded, 'worker', id)\n    )\n    const handler = await handlerPromise\n    return handler(job, ctx)\n  }\n}\n\n/**\n * Resolves a worker's `metadata.onJobAbandoned` on first use.\n *\n * The generator serializes worker metadata as literals, so a function declared there cannot be\n * emitted inline the way `concurrency` or `lockDuration` are. It is emitted as this thunk instead \u2014\n * the same lazy-import treatment the handler already gets \u2014 and only for workers whose metadata\n * declares the callback, so no other queue acquires one (and with it, a sweep) by accident.\n */\nexport function createLazyModuleWorkerAbandonHook(\n  loadModule: () => Promise<unknown>,\n  id: string\n): (payload: unknown, info: { jobId: string | null; reason: string }) => Promise<void> {\n  let hookPromise: Promise<((payload: unknown, info: { jobId: string | null; reason: string }) => unknown) | null> | null = null\n  return async (payload, info) => {\n    hookPromise ??= loadModule().then((loaded) => {\n      const metadata = (loaded as { metadata?: { onJobAbandoned?: unknown } } | null)?.metadata\n      return typeof metadata?.onJobAbandoned === 'function'\n        ? (metadata.onJobAbandoned as (payload: unknown, info: { jobId: string | null; reason: string }) => unknown)\n        : null\n    })\n    const hook = await hookPromise\n    if (!hook) {\n      throw new Error(`[registry] Worker \"${id}\" was registered with an abandoned-job hook but its metadata no longer declares one`)\n    }\n    await hook(payload, info)\n  }\n}\n"],
-  "mappings": "AAMA,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AAExC,MAAM,SAAS,aAAa,QAAQ,EAAE,MAAM,EAAE,WAAW,eAAe,CAAC;AA+QzE,SAAS,SAAS,GAAW;AAC3B,UAAQ,EAAE,WAAW,GAAG,IAAI,IAAI,MAAM,GAAG,QAAQ,QAAQ,EAAE,KAAK;AAClE;AAGA,SAAS,mBAAmB,KAAwB;AAClD,MAAI,IAAI,WAAW,OAAO,KAAK,IAAI,WAAW,MAAM,EAAG,QAAO;AAC9D,MAAI,IAAI,WAAW,GAAG,EAAG,QAAO;AAChC,SAAO;AACT;AAEA,SAAS,wBAAwB,UAAkB,UAA0B;AAC3E,QAAM,QAAQ,SAAS,MAAM,GAAG;AAChC,QAAM,QAAQ,SAAS,MAAM,GAAG;AAChC,QAAM,MAAM,KAAK,IAAI,MAAM,QAAQ,MAAM,MAAM;AAC/C,WAAS,IAAI,GAAG,IAAI,KAAK,KAAK;AAC5B,UAAM,KAAK,IAAI,MAAM,SAAS,mBAAmB,MAAM,CAAC,CAAC,IAAI;AAC7D,UAAM,KAAK,IAAI,MAAM,SAAS,mBAAmB,MAAM,CAAC,CAAC,IAAI;AAC7D,QAAI,OAAO,GAAI,QAAO,KAAK;AAAA,EAC7B;AACA,SAAO;AACT;AAEO,SAAS,wBAAuE,QAAkB;AACvG,SAAO,CAAC,GAAG,MAAM,EAAE;AAAA,IAAK,CAAC,GAAG,MAC1B,wBAAwB,EAAE,WAAW,EAAE,QAAQ,KAAK,EAAE,WAAW,EAAE,QAAQ,GAAG;AAAA,EAChF;AACF;AAOA,MAAM,oBAAoB,oBAAI,QAAoC;AAElE,SAAS,mBAAkE,QAAoC;AAC7G,QAAM,SAAS,kBAAkB,IAAI,MAAM;AAC3C,MAAI,OAAQ,QAAO;AACnB,QAAM,SAAS,wBAAwB,CAAC,GAAG,MAAM,CAAC;AAClD,oBAAkB,IAAI,QAAQ,MAAM;AACpC,SAAO;AACT;AAEO,SAAS,kBAAkB,SAAiB,UAAgD;AACjG,QAAM,IAAI,SAAS,OAAO;AAC1B,QAAM,IAAI,SAAS,QAAQ;AAC3B,QAAM,QAAQ,EAAE,MAAM,GAAG,EAAE,MAAM,CAAC;AAClC,QAAM,QAAQ,EAAE,MAAM,GAAG,EAAE,MAAM,CAAC;AAClC,QAAM,SAA4C,CAAC;AACnD,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,KAAK;AAC1C,UAAM,MAAM,MAAM,CAAC;AACnB,UAAM,YAAY,IAAI,MAAM,kBAAkB;AAC9C,UAAM,YAAY,IAAI,MAAM,sBAAsB;AAClD,UAAM,OAAO,IAAI,MAAM,YAAY;AACnC,QAAI,WAAW;AACb,YAAM,MAAM,UAAU,CAAC;AACvB,UAAI,KAAK,MAAM,OAAQ,QAAO;AAC9B,aAAO,GAAG,IAAI,MAAM,MAAM,CAAC;AAC3B,aAAO;AAAA,IACT,WAAW,WAAW;AACpB,YAAM,MAAM,UAAU,CAAC;AACvB,aAAO,GAAG,IAAI,IAAI,MAAM,SAAS,MAAM,MAAM,CAAC,IAAI,CAAC;AACnD,aAAO;AAAA,IACT,WAAW,MAAM;AACf,UAAI,KAAK,MAAM,OAAQ,QAAO;AAC9B,aAAO,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC;AAAA,IAC3B,OAAO;AACL,UAAI,KAAK,MAAM,UAAU,MAAM,CAAC,EAAE,YAAY,MAAM,IAAI,YAAY,EAAG,QAAO;AAAA,IAChF;AAAA,EACF;AACA,MAAI,MAAM,MAAM,OAAQ,QAAO;AAC/B,SAAO;AACT;AAEA,SAAS,WAAW,GAAgB;AAClC,SAAO,EAAE,WAAW,EAAE,QAAQ;AAChC;AAEO,SAAS,kBAAkB,SAAmB,UAAiG;AACpJ,aAAW,KAAK,SAAS;AACvB,UAAM,SAAS,EAAE,kBAAkB,CAAC;AACpC,eAAW,KAAK,QAAQ;AACtB,YAAM,SAAS,kBAAkB,WAAW,CAAC,GAAG,QAAQ;AACxD,UAAI,OAAQ,QAAO,EAAE,OAAO,GAAG,OAAO;AAAA,IACxC;AAAA,EACF;AACF;AAEO,SAAS,iBAAiB,SAAmB,UAAiG;AACnJ,aAAW,KAAK,SAAS;AACvB,UAAM,SAAS,EAAE,iBAAiB,CAAC;AACnC,eAAW,KAAK,QAAQ;AACtB,YAAM,SAAS,kBAAkB,WAAW,CAAC,GAAG,QAAQ;AACxD,UAAI,OAAQ,QAAO,EAAE,OAAO,GAAG,OAAO;AAAA,IACxC;AAAA,EACF;AACF;AAEO,SAAS,QAAQ,SAAmB,QAAoB,UAAkK;AAC/N,aAAW,KAAK,SAAS;AACvB,UAAM,OAAO,EAAE,QAAQ,CAAC;AACxB,eAAW,KAAK,MAAM;AACpB,UAAI,cAAc,GAAG;AACnB,cAAM,SAAS,kBAAkB,EAAE,MAAM,QAAQ;AACjD,cAAM,UAAW,EAAE,SAAiB,MAAM;AAC1C,YAAI,UAAU,QAAS,QAAO,EAAE,SAAS,QAAQ,aAAa,EAAE,aAAa,cAAe,EAAU,cAAc,UAAW,EAAU,SAAS;AAAA,MACpJ,OAAO;AACL,cAAM,KAAK;AACX,YAAI,GAAG,WAAW,OAAQ;AAC1B,cAAM,SAAS,kBAAkB,GAAG,MAAM,QAAQ;AAClD,YAAI,QAAQ;AACV,iBAAO,EAAE,SAAS,GAAG,SAAS,QAAQ,UAAU,GAAG,SAAS;AAAA,QAC9D;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,uBACd,QACA,UACoD;AACpD,aAAW,SAAS,mBAAmB,MAAM,GAAG;AAC9C,UAAM,SAAS,kBAAkB,MAAM,WAAW,MAAM,QAAQ,KAAK,QAAQ;AAC7E,QAAI,QAAQ;AACV,aAAO,EAAE,OAAO,OAAO;AAAA,IACzB;AAAA,EACF;AACF;AAEO,SAAS,0BACd,QACA,QACA,UACA,SACoD;AACpD,aAAW,SAAS,mBAAmB,MAAM,GAAG;AAC9C,QAAI,CAAC,MAAM,QAAQ,SAAS,MAAM,EAAG;AACrC,UAAM,SAAS,kBAAkB,MAAM,MAAM,QAAQ;AACrD,QAAI,QAAQ;AACV,UAAI,WAAW,CAAC,wBAAwB,SAAS,MAAM,MAAM,MAAM,EAAG,QAAO;AAC7E,aAAO,EAAE,OAAO,OAAO;AAAA,IACzB;AAAA,EACF;AACF;AAEA,SAAS,gCAAgC;AAEzC,IAAI,yBAA6D;AAE1D,SAAS,8BAA8B,QAAqC;AACjF,QAAM,gBAAgB,0BAA0B;AAChD,QAAM,cAAc,OAAO,KAAK,aAAa,EAAE,WAAW,IACtD,SACA,8BAA8B,QAAQ,eAAe,SAAS;AAClE,2BAAyB,wBAAwB,WAAW;AAC9D;AAEO,SAAS,2BAAwD;AACtE,SAAO,0BAA0B,CAAC;AACpC;AAEA,IAAI,0BAA+D;AAE5D,SAAS,+BAA+B,QAAsC;AACnF,QAAM,gBAAgB,0BAA0B;AAChD,QAAM,cAAc,OAAO,KAAK,aAAa,EAAE,WAAW,IACtD,SACA,8BAA8B,QAAQ,eAAe,UAAU;AACnE,4BAA0B,wBAAwB,WAAW;AAC/D;AAEO,SAAS,4BAA0D;AACxE,SAAO,2BAA2B,CAAC;AACrC;AAEA,IAAI,qBAAqD;AAElD,SAAS,0BAA0B,QAAiC;AAKzE,QAAM,iBAAiB,yBAAyB;AAChD,QAAM,cAAc,OAAO,KAAK,cAAc,EAAE,WAAW,IACvD,SACA,6BAA6B,QAAQ,cAAc;AACvD,uBAAqB,wBAAwB,WAAW;AAC1D;AAEO,SAAS,uBAAgD;AAC9D,SAAO,sBAAsB,CAAC;AAChC;AASA,IAAI,cAA+B;AAE5B,SAAS,mBAAmB,SAAmB;AACpD,MAAI,gBAAgB,QAAQ,QAAQ,IAAI,aAAa,eAAe;AAClE,WAAO,MAAM,uDAAuD;AAAA,EACtE;AACA,gBAAc,8BAA8B,OAAO;AACrD;AAEO,SAAS,gBAA0B;AAExC,SAAO,eAAe,CAAC;AACzB;AAEO,SAAS,gBAAyB;AACvC,SAAO,gBAAgB,QAAQ,YAAY,SAAS;AACtD;AAEO,SAAS,yBAAyB,SAAiE;AACxG,QAAM,aAAa,oBAAI,IAAmF;AAE1G,aAAW,OAAO,SAAS;AACzB,eAAW,SAAS,IAAI,yBAAyB,CAAC,GAAG;AACnD,YAAM,WAAW,WAAW,IAAI,MAAM,QAAQ;AAC9C,UAAI,UAAU;AACZ,cAAM,IAAI;AAAA,UACR,oDAAoD,MAAM,QAAQ,kBAAkB,SAAS,QAAQ,UAAU,IAAI,EAAE;AAAA,QACvH;AAAA,MACF;AACA,iBAAW,IAAI,MAAM,UAAU;AAAA,QAC7B,UAAU,IAAI;AAAA,QACd,KAAK;AAAA,UACH,UAAU,MAAM;AAAA,UAChB,GAAI,MAAM,WAAW,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;AAAA,UACrD,QAAQ,MAAM,OAAO,IAAI,CAAC,WAAW;AAAA,YACnC,OAAO,MAAM;AAAA,YACb,WAAW,MAAM,aAAa;AAAA,UAChC,EAAE;AAAA,QACJ;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,MAAM,KAAK,WAAW,OAAO,GAAG,CAAC,EAAE,IAAI,MAAM,GAAG;AACzD;AAEA,SAAS,kBACP,QACA,MACA,IACG;AACH,QAAM,UAAU,OAAO,WAAW,aAC9B,SACA,UAAU,OAAO,WAAW,YAAY,aAAa,SAClD,OAAmC,UACpC;AACN,MAAI,OAAO,YAAY,YAAY;AACjC,UAAM,IAAI,MAAM,sBAAsB,IAAI,YAAY,EAAE,oCAAoC;AAAA,EAC9F;AACA,SAAO;AACT;AAEO,SAAS,2BACd,YACA,IACyB;AACzB,MAAI,iBAA0D;AAC9D,SAAO,OAAO,SAAS,QAAQ;AAC7B,uBAAmB,WAAW,EAAE;AAAA,MAAK,CAAC,WACpC,kBAA2C,QAAQ,cAAc,EAAE;AAAA,IACrE;AACA,UAAM,UAAU,MAAM;AACtB,WAAO,QAAQ,SAAS,GAAG;AAAA,EAC7B;AACF;AAEO,SAAS,uBACd,YACA,IACqB;AACrB,MAAI,iBAAsD;AAC1D,SAAO,OAAO,KAAK,QAAQ;AACzB,uBAAmB,WAAW,EAAE;AAAA,MAAK,CAAC,WACpC,kBAAuC,QAAQ,UAAU,EAAE;AAAA,IAC7D;AACA,UAAM,UAAU,MAAM;AACtB,WAAO,QAAQ,KAAK,GAAG;AAAA,EACzB;AACF;AAUO,SAAS,kCACd,YACA,IACqF;AACrF,MAAI,cAAsH;AAC1H,SAAO,OAAO,SAAS,SAAS;AAC9B,oBAAgB,WAAW,EAAE,KAAK,CAAC,WAAW;AAC5C,YAAM,WAAY,QAA+D;AACjF,aAAO,OAAO,UAAU,mBAAmB,aACtC,SAAS,iBACV;AAAA,IACN,CAAC;AACD,UAAM,OAAO,MAAM;AACnB,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,MAAM,sBAAsB,EAAE,qFAAqF;AAAA,IAC/H;AACA,UAAM,KAAK,SAAS,IAAI;AAAA,EAC1B;AACF;",
+  "sourcesContent": ["import type { ReactNode } from 'react'\nimport type { OpenApiRouteDoc, OpenApiMethodDoc } from '@open-mercato/shared/lib/openapi/types'\nimport type { SyncCrudEventResult } from '../lib/crud/sync-event-types'\nimport type { DashboardWidgetModule } from './dashboard/widgets'\nimport type { InjectionAnyWidgetModule, ModuleInjectionTable } from './widgets/injection'\nimport type { IntegrationBundle, IntegrationDefinition } from './integrations/types'\nimport { createLogger } from '../lib/logger'\nimport {\n  applyApiOverridesToManifests,\n  applyModuleOverridesToModules,\n  applyPageOverridesToManifests,\n  composeApiRouteOverrides,\n  composePageRouteOverrides,\n} from './overrides'\nimport { bindMatchedApiRoutePath } from '../lib/modules/api-route-identity'\n\nconst logger = createLogger('shared').child({ component: 'cli-registry' })\n\n// Context passed to dynamic metadata guards\nexport type RouteVisibilityContext = { path?: string; auth?: any }\n\n/**\n * Portal sidebar navigation hint. When declared on a portal page's metadata,\n * the page is auto-listed in the portal sidebar (subject to RBAC) by the\n * `/api/customer_accounts/portal/nav` endpoint.\n *\n * Absence of `nav` means the page is routable but not auto-listed (useful for\n * detail pages, create forms, etc.).\n */\nexport type PortalNavMetadata = {\n  label: string\n  labelKey?: string\n  group?: 'main' | 'account'\n  order?: number\n  icon?: string\n}\n\n// Metadata you can export from page.meta.ts or directly from a server page\nexport type PageMetadata = {\n  requireAuth?: boolean\n  /** @deprecated Use `requireFeatures` instead \u2014 role names are mutable and can be spoofed */\n  requireRoles?: readonly string[]\n  // Optional fine-grained feature requirements\n  requireFeatures?: readonly string[]\n  // Portal: require customer (portal user) authentication instead of staff auth\n  requireCustomerAuth?: boolean\n  // Portal: require customer-specific features (checked against CustomerRbacService)\n  requireCustomerFeatures?: readonly string[]\n  // Portal: optional sidebar presentation hint (auto-listed by portal nav endpoint)\n  nav?: PortalNavMetadata\n  // Titles and grouping (aliases supported)\n  title?: string\n  titleKey?: string\n  pageTitle?: string\n  pageTitleKey?: string\n  group?: string\n  groupKey?: string\n  pageGroup?: string\n  pageGroupKey?: string\n  // Ordering and visuals\n  order?: number\n  pageOrder?: number\n  priority?: number\n  pagePriority?: number\n  icon?: ReactNode\n  navHidden?: boolean\n  // Dynamic flags\n  visible?: (ctx: RouteVisibilityContext) => boolean | Promise<boolean>\n  enabled?: (ctx: RouteVisibilityContext) => boolean | Promise<boolean>\n  // Optional static breadcrumb trail for header\n  breadcrumb?: Array<{ label: string; labelKey?: string; href?: string }>\n  // Navigation context for tiered navigation:\n  // - 'main' (default): Main sidebar business operations\n  // - 'admin': Collapsible \"Settings & Admin\" section at bottom of sidebar\n  // - 'settings': Hidden from sidebar, only accessible via Settings hub page\n  // - 'profile': Profile dropdown items\n  pageContext?: 'main' | 'admin' | 'settings' | 'profile'\n  placement?: {\n    section: string\n    sectionLabel?: string\n    sectionLabelKey?: string\n    order?: number\n  }\n}\n\nexport type HttpMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE'\n\nexport type ApiHandler = (req: Request, ctx?: any) => Promise<Response> | Response\n\nexport type ModuleSubscriberHandler = (\n  payload: any,\n  ctx: any\n) => Promise<void | SyncCrudEventResult> | void | SyncCrudEventResult\n\nexport type ModuleWorkerHandler = (job: unknown, ctx: unknown) => Promise<void> | void\n\nexport type ModuleRoute = {\n  pattern?: string\n  path?: string\n  requireAuth?: boolean\n  /** @deprecated Use `requireFeatures` instead \u2014 role names are mutable and can be spoofed */\n  requireRoles?: string[]\n  // Optional fine-grained feature requirements\n  requireFeatures?: string[]\n  // Portal: require customer (portal user) authentication instead of staff auth\n  requireCustomerAuth?: boolean\n  // Portal: require customer-specific features (checked against CustomerRbacService)\n  requireCustomerFeatures?: string[]\n  // Portal: optional sidebar presentation hint (auto-listed by portal nav endpoint)\n  nav?: PortalNavMetadata\n  title?: string\n  titleKey?: string\n  group?: string\n  groupKey?: string\n  icon?: ReactNode\n  order?: number\n  priority?: number\n  navHidden?: boolean\n  visible?: (ctx: RouteVisibilityContext) => boolean | Promise<boolean>\n  enabled?: (ctx: RouteVisibilityContext) => boolean | Promise<boolean>\n  breadcrumb?: Array<{ label: string; labelKey?: string; href?: string }>\n  pageContext?: 'main' | 'admin' | 'settings' | 'profile'\n  placement?: {\n    section: string\n    sectionLabel?: string\n    sectionLabelKey?: string\n    order?: number\n  }\n  Component: (props: any) => ReactNode | Promise<ReactNode>\n}\n\nexport type ModuleRouteMetadata = Omit<ModuleRoute, 'Component'>\n\nexport type ModuleApiLegacy = {\n  method: HttpMethod\n  path: string\n  handler: ApiHandler\n  metadata?: Record<string, unknown>\n  docs?: OpenApiMethodDoc\n}\n\nexport type ModuleApiRouteFile = {\n  path: string\n  handlers: Partial<Record<HttpMethod, ApiHandler>>\n  requireAuth?: boolean\n  /** @deprecated Use `requireFeatures` instead \u2014 role names are mutable and can be spoofed */\n  requireRoles?: string[]\n  // Optional fine-grained feature requirements for the entire route file\n  // Note: per-method feature requirements should be expressed inside metadata\n  requireFeatures?: string[]\n  docs?: OpenApiRouteDoc\n  metadata?: Partial<Record<HttpMethod, unknown>>\n}\n\nexport type ModuleApi = ModuleApiLegacy | ModuleApiRouteFile\n\nexport type RouteMatchParams = Record<string, string | string[]>\n\nexport type FrontendRouteManifestEntry = Omit<ModuleRoute, 'Component'> & {\n  moduleId: string\n  load: () => Promise<ModuleRoute['Component']>\n}\n\nexport type BackendRouteManifestEntry = Omit<ModuleRoute, 'Component'> & {\n  moduleId: string\n  load: () => Promise<ModuleRoute['Component']>\n}\n\nexport type ApiRouteManifestEntry = {\n  moduleId: string\n  kind: 'route-file' | 'legacy'\n  path: string\n  methods: HttpMethod[]\n  method?: HttpMethod\n  load: () => Promise<Record<string, unknown>>\n}\n\nexport type ModuleCli = {\n  command: string\n  run: (argv: string[]) => Promise<void> | void\n}\n\nexport type ModuleSubscriber = {\n  id: string\n  moduleId?: string\n  event: string\n  persistent?: boolean\n  sync?: boolean\n  priority?: number\n  handler: ModuleSubscriberHandler\n}\n\nexport type ModuleWorker = {\n  id: string\n  moduleId?: string\n  queue: string\n  concurrency: number\n  lockDuration?: number\n  maxStalledCount?: number\n  /**\n   * Reports a job the queue abandoned without running the handler.\n   *\n   * Present only for workers whose metadata declares it; the generator emits it as a lazy import\n   * beside the handler, because the registry serializes metadata as literals and a function cannot\n   * survive that.\n   */\n  onJobAbandoned?: (payload: unknown, info: { jobId: string | null; reason: string }) => void | Promise<void>\n  handler: ModuleWorkerHandler\n  /** Opt-in flag exposing this queue as a user-facing scheduler target (issue #5213). */\n  schedulerSafe?: boolean\n  /** Creator features required beyond scheduler.jobs.manage when schedulerSafe is set. */\n  schedulerRequiredFeatures?: string[]\n}\n\nexport type ModuleInfo = {\n  name?: string\n  title?: string\n  version?: string\n  description?: string\n  author?: string\n  license?: string\n  homepage?: string\n  copyright?: string\n  // Optional hard dependencies: module ids that must be enabled\n  requires?: string[]\n  // Whether this module can be ejected into the app's src/modules/ for customization\n  ejectable?: boolean\n}\n\nexport type ModuleDashboardWidgetEntry = {\n  moduleId: string\n  key: string\n  source: 'app' | 'package'\n  loader: () => Promise<DashboardWidgetModule<any>>\n}\n\nexport type ModuleInjectionWidgetEntry = {\n  moduleId: string\n  key: string\n  source: 'app' | 'package'\n  widgetId?: string\n  loader: () => Promise<InjectionAnyWidgetModule<any, any>>\n}\n\nexport type Module = {\n  id: string\n  info?: ModuleInfo\n  backendRoutes?: ModuleRoute[]\n  frontendRoutes?: ModuleRoute[]\n  apis?: ModuleApi[]\n  cli?: ModuleCli[]\n  translations?: Record<string, Record<string, string>>\n  // Optional: per-module feature declarations discovered from acl.ts (module root)\n  features?: Array<{ id: string; title: string; module: string }>\n  // Auto-discovered event subscribers\n  subscribers?: ModuleSubscriber[]\n  // Auto-discovered queue workers\n  workers?: ModuleWorker[]\n  // Optional: per-module declared entity extensions and custom fields (static)\n  // Extensions discovered from data/extensions.ts; Custom fields discovered from ce.ts (entities[].fields)\n  entityExtensions?: import('./entities').EntityExtension[]\n  customFieldSets?: import('./entities').CustomFieldSet[]\n  // Optional: per-module declared custom entities (virtual/logical entities)\n  // Discovered from ce.ts (module root). Each entry represents an entityId with optional label/description.\n  customEntities?: Array<{ id: string; label?: string; description?: string }>\n  dashboardWidgets?: ModuleDashboardWidgetEntry[]\n  injectionWidgets?: ModuleInjectionWidgetEntry[]\n  injectionTable?: ModuleInjectionTable\n  // Optional: per-module vector search configuration (discovered from vector.ts)\n  vector?: import('./vector').VectorModuleConfig\n  // Optional: module-specific tenant setup configuration (from setup.ts)\n  setup?: import('./setup').ModuleSetupConfig\n  // Optional: a long-lived process-wide runtime the module starts itself (from runtime.ts).\n  // Invoked once per process by `mercato server start` and `mercato queue worker`.\n  runtime?: import('./runtime').ModuleRuntime\n  // Optional: default encryption maps owned by the module (from encryption.ts)\n  defaultEncryptionMaps?: import('./encryption').ModuleEncryptionMap[]\n  // Optional: integration marketplace declarations discovered from integration.ts\n  integrations?: IntegrationDefinition[]\n  bundles?: IntegrationBundle[]\n}\n\nfunction normPath(s: string) {\n  return (s.startsWith('/') ? s : '/' + s).replace(/\\/+$/, '') || '/'\n}\n\n// 0 = literal (most specific), 1 = dynamic [param], 2 = catch-all [...param] or [[...param]]\nfunction segmentSpecificity(seg: string): 0 | 1 | 2 {\n  if (seg.startsWith('[[...') || seg.startsWith('[...')) return 2\n  if (seg.startsWith('[')) return 1\n  return 0\n}\n\nfunction compareRouteSpecificity(aPattern: string, bPattern: string): number {\n  const aSegs = aPattern.split('/')\n  const bSegs = bPattern.split('/')\n  const len = Math.max(aSegs.length, bSegs.length)\n  for (let i = 0; i < len; i++) {\n    const av = i < aSegs.length ? segmentSpecificity(aSegs[i]) : -1\n    const bv = i < bSegs.length ? segmentSpecificity(bSegs[i]) : -1\n    if (av !== bv) return av - bv\n  }\n  return 0\n}\n\nexport function sortRoutesBySpecificity<T extends { pattern?: string; path?: string }>(routes: T[]): T[] {\n  return [...routes].sort((a, b) =>\n    compareRouteSpecificity(a.pattern ?? a.path ?? '/', b.pattern ?? b.path ?? '/'),\n  )\n}\n\n// Memoized per-array sorted view, so direct callers (e.g., the Next.js catch-all\n// routes that import generated `frontendRoutes`/`backendRoutes`/`apiRoutes`\n// arrays) match against a specificity-sorted view even if they never call\n// `register*RouteManifests`. Keyed by array reference; generated arrays are\n// module-level constants so this caches once per process.\nconst sortedRoutesCache = new WeakMap<object, readonly unknown[]>()\n\nfunction ensureSortedRoutes<T extends { pattern?: string; path?: string }>(routes: readonly T[]): readonly T[] {\n  const cached = sortedRoutesCache.get(routes) as readonly T[] | undefined\n  if (cached) return cached\n  const sorted = sortRoutesBySpecificity([...routes])\n  sortedRoutesCache.set(routes, sorted)\n  return sorted\n}\n\nexport function matchRoutePattern(pattern: string, pathname: string): RouteMatchParams | undefined {\n  const p = normPath(pattern)\n  const u = normPath(pathname)\n  const pSegs = p.split('/').slice(1)\n  const uSegs = u.split('/').slice(1)\n  const params: Record<string, string | string[]> = {}\n  let i = 0\n  for (let j = 0; j < pSegs.length; j++, i++) {\n    const seg = pSegs[j]\n    const mCatchAll = seg.match(/^\\[\\.\\.\\.(.+)\\]$/)\n    const mOptCatch = seg.match(/^\\[\\[\\.\\.\\.(.+)\\]\\]$/)\n    const mDyn = seg.match(/^\\[(.+)\\]$/)\n    if (mCatchAll) {\n      const key = mCatchAll[1]\n      if (i >= uSegs.length) return undefined\n      params[key] = uSegs.slice(i)\n      return params\n    } else if (mOptCatch) {\n      const key = mOptCatch[1]\n      params[key] = i < uSegs.length ? uSegs.slice(i) : []\n      return params\n    } else if (mDyn) {\n      if (i >= uSegs.length) return undefined\n      params[mDyn[1]] = uSegs[i]\n    } else {\n      if (i >= uSegs.length || uSegs[i].toLowerCase() !== seg.toLowerCase()) return undefined\n    }\n  }\n  if (i !== uSegs.length) return undefined\n  return params\n}\n\nfunction getPattern(r: ModuleRoute) {\n  return r.pattern ?? r.path ?? '/'\n}\n\nexport function findFrontendMatch(modules: Module[], pathname: string): { route: ModuleRoute; params: Record<string, string | string[]> } | undefined {\n  for (const m of modules) {\n    const routes = m.frontendRoutes ?? []\n    for (const r of routes) {\n      const params = matchRoutePattern(getPattern(r), pathname)\n      if (params) return { route: r, params }\n    }\n  }\n}\n\nexport function findBackendMatch(modules: Module[], pathname: string): { route: ModuleRoute; params: Record<string, string | string[]> } | undefined {\n  for (const m of modules) {\n    const routes = m.backendRoutes ?? []\n    for (const r of routes) {\n      const params = matchRoutePattern(getPattern(r), pathname)\n      if (params) return { route: r, params }\n    }\n  }\n}\n\nexport function findApi(modules: Module[], method: HttpMethod, pathname: string): { handler: ApiHandler; params: Record<string, string | string[]>; requireAuth?: boolean; requireRoles?: string[]; metadata?: any } | undefined {\n  for (const m of modules) {\n    const apis = m.apis ?? []\n    for (const a of apis) {\n      if ('handlers' in a) {\n        const params = matchRoutePattern(a.path, pathname)\n        const handler = (a.handlers as any)[method]\n        if (params && handler) return { handler, params, requireAuth: a.requireAuth, requireRoles: (a as any).requireRoles, metadata: (a as any).metadata }\n      } else {\n        const al = a as ModuleApiLegacy\n        if (al.method !== method) continue\n        const params = matchRoutePattern(al.path, pathname)\n        if (params) {\n          return { handler: al.handler, params, metadata: al.metadata }\n        }\n      }\n    }\n  }\n}\n\nexport function findRouteManifestMatch<T extends { pattern?: string; path?: string }>(\n  routes: T[],\n  pathname: string\n): { route: T; params: RouteMatchParams } | undefined {\n  for (const route of ensureSortedRoutes(routes)) {\n    const params = matchRoutePattern(route.pattern ?? route.path ?? '/', pathname)\n    if (params) {\n      return { route, params }\n    }\n  }\n}\n\nexport function findApiRouteManifestMatch<T extends { path: string; methods: HttpMethod[] }>(\n  routes: T[],\n  method: HttpMethod,\n  pathname: string,\n  request?: Request,\n): { route: T; params: RouteMatchParams } | undefined {\n  for (const route of ensureSortedRoutes(routes)) {\n    if (!route.methods.includes(method)) continue\n    const params = matchRoutePattern(route.path, pathname)\n    if (params) {\n      if (request && !bindMatchedApiRoutePath(request, route.path, params)) return undefined\n      return { route, params }\n    }\n  }\n}\n\nexport { resolvePageRouteMetadata } from './pageRouteMetadata'\n\nlet _backendRouteManifests: BackendRouteManifestEntry[] | null = null\n\nexport function registerBackendRouteManifests(routes: BackendRouteManifestEntry[]) {\n  const pageOverrides = composePageRouteOverrides()\n  const finalRoutes = Object.keys(pageOverrides).length === 0\n    ? routes\n    : applyPageOverridesToManifests(routes, pageOverrides, 'backend')\n  _backendRouteManifests = sortRoutesBySpecificity(finalRoutes)\n}\n\nexport function getBackendRouteManifests(): BackendRouteManifestEntry[] {\n  return _backendRouteManifests ?? []\n}\n\nlet _frontendRouteManifests: FrontendRouteManifestEntry[] | null = null\n\nexport function registerFrontendRouteManifests(routes: FrontendRouteManifestEntry[]) {\n  const pageOverrides = composePageRouteOverrides()\n  const finalRoutes = Object.keys(pageOverrides).length === 0\n    ? routes\n    : applyPageOverridesToManifests(routes, pageOverrides, 'frontend')\n  _frontendRouteManifests = sortRoutesBySpecificity(finalRoutes)\n}\n\nexport function getFrontendRouteManifests(): FrontendRouteManifestEntry[] {\n  return _frontendRouteManifests ?? []\n}\n\nlet _apiRouteManifests: ApiRouteManifestEntry[] | null = null\n\nexport function registerApiRouteManifests(routes: ApiRouteManifestEntry[]) {\n  // Apply any `entry.overrides.routes.api` overrides registered through the\n  // unified `modules.ts` dispatcher or programmatic API before storing the\n  // manifest. The composer is cheap and returns an empty object when no\n  // overrides exist, so this is a no-op for apps that do not opt in.\n  const routeOverrides = composeApiRouteOverrides()\n  const finalRoutes = Object.keys(routeOverrides).length === 0\n    ? routes\n    : applyApiOverridesToManifests(routes, routeOverrides)\n  _apiRouteManifests = sortRoutesBySpecificity(finalRoutes)\n}\n\nexport function getApiRouteManifests(): ApiRouteManifestEntry[] {\n  return _apiRouteManifests ?? []\n}\n\n// CLI modules registry - populated ONLY by the `mercato` bin (packages/cli/src/bin.ts\n// plus the `init` and `seed:defaults` commands). Runtime code MUST NOT read it: it\n// fails open (see getCliModules below), so outside a CLI process a reader gets an\n// empty list and silently does nothing. The events worker made exactly that mistake\n// and dropped every persistent subscriber. Runtime code uses the app registry\n// (`getModules` from ../lib/modules/registry) or a DI-resolved service.\n// Enforced by src/modules/__tests__/cli-registry-boundary.test.ts.\nlet _cliModules: Module[] | null = null\n\nexport function registerCliModules(modules: Module[]) {\n  if (_cliModules !== null && process.env.NODE_ENV === 'development') {\n    logger.debug('CLI modules re-registered (this may occur during HMR)')\n  }\n  _cliModules = applyModuleOverridesToModules(modules)\n}\n\nexport function getCliModules(): Module[] {\n  // Return empty array if not registered - allows generate command to work without bootstrap\n  return _cliModules ?? []\n}\n\nexport function hasCliModules(): boolean {\n  return _cliModules !== null && _cliModules.length > 0\n}\n\nexport function getDefaultEncryptionMaps(modules: Module[]): import('./encryption').ModuleEncryptionMap[] {\n  const byEntityId = new Map<string, { moduleId: string; map: import('./encryption').ModuleEncryptionMap }>()\n\n  for (const mod of modules) {\n    for (const entry of mod.defaultEncryptionMaps ?? []) {\n      const previous = byEntityId.get(entry.entityId)\n      if (previous) {\n        throw new Error(\n          `[registry] Duplicate default encryption map for \"${entry.entityId}\" declared by \"${previous.moduleId}\" and \"${mod.id}\"`\n        )\n      }\n      byEntityId.set(entry.entityId, {\n        moduleId: mod.id,\n        map: {\n          entityId: entry.entityId,\n          ...(entry.keyScope ? { keyScope: entry.keyScope } : {}),\n          fields: entry.fields.map((field) => ({\n            field: field.field,\n            hashField: field.hashField ?? null,\n          })),\n        },\n      })\n    }\n  }\n\n  return Array.from(byEntityId.values(), ({ map }) => map)\n}\n\nfunction ensureLazyHandler<T extends (...args: any[]) => any>(\n  loaded: unknown,\n  kind: 'subscriber' | 'worker',\n  id: string\n): T {\n  const handler = typeof loaded === 'function'\n    ? loaded\n    : loaded && typeof loaded === 'object' && 'default' in loaded\n      ? (loaded as Record<string, unknown>).default\n      : null\n  if (typeof handler !== 'function') {\n    throw new Error(`[registry] Invalid ${kind} module \"${id}\" (missing default export handler)`)\n  }\n  return handler as T\n}\n\nexport function createLazyModuleSubscriber(\n  loadModule: () => Promise<unknown>,\n  id: string\n): ModuleSubscriberHandler {\n  let handlerPromise: Promise<ModuleSubscriberHandler> | null = null\n  return async (payload, ctx) => {\n    handlerPromise ??= loadModule().then((loaded) =>\n      ensureLazyHandler<ModuleSubscriberHandler>(loaded, 'subscriber', id)\n    )\n    const handler = await handlerPromise\n    return handler(payload, ctx)\n  }\n}\n\nexport function createLazyModuleWorker(\n  loadModule: () => Promise<unknown>,\n  id: string\n): ModuleWorkerHandler {\n  let handlerPromise: Promise<ModuleWorkerHandler> | null = null\n  return async (job, ctx) => {\n    handlerPromise ??= loadModule().then((loaded) =>\n      ensureLazyHandler<ModuleWorkerHandler>(loaded, 'worker', id)\n    )\n    const handler = await handlerPromise\n    return handler(job, ctx)\n  }\n}\n\n/**\n * Resolves a worker's `metadata.onJobAbandoned` on first use.\n *\n * The generator serializes worker metadata as literals, so a function declared there cannot be\n * emitted inline the way `concurrency` or `lockDuration` are. It is emitted as this thunk instead \u2014\n * the same lazy-import treatment the handler already gets \u2014 and only for workers whose metadata\n * declares the callback, so no other queue acquires one (and with it, a sweep) by accident.\n */\nexport function createLazyModuleWorkerAbandonHook(\n  loadModule: () => Promise<unknown>,\n  id: string\n): (payload: unknown, info: { jobId: string | null; reason: string }) => Promise<void> {\n  let hookPromise: Promise<((payload: unknown, info: { jobId: string | null; reason: string }) => unknown) | null> | null = null\n  return async (payload, info) => {\n    hookPromise ??= loadModule().then((loaded) => {\n      const metadata = (loaded as { metadata?: { onJobAbandoned?: unknown } } | null)?.metadata\n      return typeof metadata?.onJobAbandoned === 'function'\n        ? (metadata.onJobAbandoned as (payload: unknown, info: { jobId: string | null; reason: string }) => unknown)\n        : null\n    })\n    const hook = await hookPromise\n    if (!hook) {\n      throw new Error(`[registry] Worker \"${id}\" was registered with an abandoned-job hook but its metadata no longer declares one`)\n    }\n    await hook(payload, info)\n  }\n}\n"],
+  "mappings": "AAMA,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AAExC,MAAM,SAAS,aAAa,QAAQ,EAAE,MAAM,EAAE,WAAW,eAAe,CAAC;AA0QzE,SAAS,SAAS,GAAW;AAC3B,UAAQ,EAAE,WAAW,GAAG,IAAI,IAAI,MAAM,GAAG,QAAQ,QAAQ,EAAE,KAAK;AAClE;AAGA,SAAS,mBAAmB,KAAwB;AAClD,MAAI,IAAI,WAAW,OAAO,KAAK,IAAI,WAAW,MAAM,EAAG,QAAO;AAC9D,MAAI,IAAI,WAAW,GAAG,EAAG,QAAO;AAChC,SAAO;AACT;AAEA,SAAS,wBAAwB,UAAkB,UAA0B;AAC3E,QAAM,QAAQ,SAAS,MAAM,GAAG;AAChC,QAAM,QAAQ,SAAS,MAAM,GAAG;AAChC,QAAM,MAAM,KAAK,IAAI,MAAM,QAAQ,MAAM,MAAM;AAC/C,WAAS,IAAI,GAAG,IAAI,KAAK,KAAK;AAC5B,UAAM,KAAK,IAAI,MAAM,SAAS,mBAAmB,MAAM,CAAC,CAAC,IAAI;AAC7D,UAAM,KAAK,IAAI,MAAM,SAAS,mBAAmB,MAAM,CAAC,CAAC,IAAI;AAC7D,QAAI,OAAO,GAAI,QAAO,KAAK;AAAA,EAC7B;AACA,SAAO;AACT;AAEO,SAAS,wBAAuE,QAAkB;AACvG,SAAO,CAAC,GAAG,MAAM,EAAE;AAAA,IAAK,CAAC,GAAG,MAC1B,wBAAwB,EAAE,WAAW,EAAE,QAAQ,KAAK,EAAE,WAAW,EAAE,QAAQ,GAAG;AAAA,EAChF;AACF;AAOA,MAAM,oBAAoB,oBAAI,QAAoC;AAElE,SAAS,mBAAkE,QAAoC;AAC7G,QAAM,SAAS,kBAAkB,IAAI,MAAM;AAC3C,MAAI,OAAQ,QAAO;AACnB,QAAM,SAAS,wBAAwB,CAAC,GAAG,MAAM,CAAC;AAClD,oBAAkB,IAAI,QAAQ,MAAM;AACpC,SAAO;AACT;AAEO,SAAS,kBAAkB,SAAiB,UAAgD;AACjG,QAAM,IAAI,SAAS,OAAO;AAC1B,QAAM,IAAI,SAAS,QAAQ;AAC3B,QAAM,QAAQ,EAAE,MAAM,GAAG,EAAE,MAAM,CAAC;AAClC,QAAM,QAAQ,EAAE,MAAM,GAAG,EAAE,MAAM,CAAC;AAClC,QAAM,SAA4C,CAAC;AACnD,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,KAAK;AAC1C,UAAM,MAAM,MAAM,CAAC;AACnB,UAAM,YAAY,IAAI,MAAM,kBAAkB;AAC9C,UAAM,YAAY,IAAI,MAAM,sBAAsB;AAClD,UAAM,OAAO,IAAI,MAAM,YAAY;AACnC,QAAI,WAAW;AACb,YAAM,MAAM,UAAU,CAAC;AACvB,UAAI,KAAK,MAAM,OAAQ,QAAO;AAC9B,aAAO,GAAG,IAAI,MAAM,MAAM,CAAC;AAC3B,aAAO;AAAA,IACT,WAAW,WAAW;AACpB,YAAM,MAAM,UAAU,CAAC;AACvB,aAAO,GAAG,IAAI,IAAI,MAAM,SAAS,MAAM,MAAM,CAAC,IAAI,CAAC;AACnD,aAAO;AAAA,IACT,WAAW,MAAM;AACf,UAAI,KAAK,MAAM,OAAQ,QAAO;AAC9B,aAAO,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC;AAAA,IAC3B,OAAO;AACL,UAAI,KAAK,MAAM,UAAU,MAAM,CAAC,EAAE,YAAY,MAAM,IAAI,YAAY,EAAG,QAAO;AAAA,IAChF;AAAA,EACF;AACA,MAAI,MAAM,MAAM,OAAQ,QAAO;AAC/B,SAAO;AACT;AAEA,SAAS,WAAW,GAAgB;AAClC,SAAO,EAAE,WAAW,EAAE,QAAQ;AAChC;AAEO,SAAS,kBAAkB,SAAmB,UAAiG;AACpJ,aAAW,KAAK,SAAS;AACvB,UAAM,SAAS,EAAE,kBAAkB,CAAC;AACpC,eAAW,KAAK,QAAQ;AACtB,YAAM,SAAS,kBAAkB,WAAW,CAAC,GAAG,QAAQ;AACxD,UAAI,OAAQ,QAAO,EAAE,OAAO,GAAG,OAAO;AAAA,IACxC;AAAA,EACF;AACF;AAEO,SAAS,iBAAiB,SAAmB,UAAiG;AACnJ,aAAW,KAAK,SAAS;AACvB,UAAM,SAAS,EAAE,iBAAiB,CAAC;AACnC,eAAW,KAAK,QAAQ;AACtB,YAAM,SAAS,kBAAkB,WAAW,CAAC,GAAG,QAAQ;AACxD,UAAI,OAAQ,QAAO,EAAE,OAAO,GAAG,OAAO;AAAA,IACxC;AAAA,EACF;AACF;AAEO,SAAS,QAAQ,SAAmB,QAAoB,UAAkK;AAC/N,aAAW,KAAK,SAAS;AACvB,UAAM,OAAO,EAAE,QAAQ,CAAC;AACxB,eAAW,KAAK,MAAM;AACpB,UAAI,cAAc,GAAG;AACnB,cAAM,SAAS,kBAAkB,EAAE,MAAM,QAAQ;AACjD,cAAM,UAAW,EAAE,SAAiB,MAAM;AAC1C,YAAI,UAAU,QAAS,QAAO,EAAE,SAAS,QAAQ,aAAa,EAAE,aAAa,cAAe,EAAU,cAAc,UAAW,EAAU,SAAS;AAAA,MACpJ,OAAO;AACL,cAAM,KAAK;AACX,YAAI,GAAG,WAAW,OAAQ;AAC1B,cAAM,SAAS,kBAAkB,GAAG,MAAM,QAAQ;AAClD,YAAI,QAAQ;AACV,iBAAO,EAAE,SAAS,GAAG,SAAS,QAAQ,UAAU,GAAG,SAAS;AAAA,QAC9D;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,uBACd,QACA,UACoD;AACpD,aAAW,SAAS,mBAAmB,MAAM,GAAG;AAC9C,UAAM,SAAS,kBAAkB,MAAM,WAAW,MAAM,QAAQ,KAAK,QAAQ;AAC7E,QAAI,QAAQ;AACV,aAAO,EAAE,OAAO,OAAO;AAAA,IACzB;AAAA,EACF;AACF;AAEO,SAAS,0BACd,QACA,QACA,UACA,SACoD;AACpD,aAAW,SAAS,mBAAmB,MAAM,GAAG;AAC9C,QAAI,CAAC,MAAM,QAAQ,SAAS,MAAM,EAAG;AACrC,UAAM,SAAS,kBAAkB,MAAM,MAAM,QAAQ;AACrD,QAAI,QAAQ;AACV,UAAI,WAAW,CAAC,wBAAwB,SAAS,MAAM,MAAM,MAAM,EAAG,QAAO;AAC7E,aAAO,EAAE,OAAO,OAAO;AAAA,IACzB;AAAA,EACF;AACF;AAEA,SAAS,gCAAgC;AAEzC,IAAI,yBAA6D;AAE1D,SAAS,8BAA8B,QAAqC;AACjF,QAAM,gBAAgB,0BAA0B;AAChD,QAAM,cAAc,OAAO,KAAK,aAAa,EAAE,WAAW,IACtD,SACA,8BAA8B,QAAQ,eAAe,SAAS;AAClE,2BAAyB,wBAAwB,WAAW;AAC9D;AAEO,SAAS,2BAAwD;AACtE,SAAO,0BAA0B,CAAC;AACpC;AAEA,IAAI,0BAA+D;AAE5D,SAAS,+BAA+B,QAAsC;AACnF,QAAM,gBAAgB,0BAA0B;AAChD,QAAM,cAAc,OAAO,KAAK,aAAa,EAAE,WAAW,IACtD,SACA,8BAA8B,QAAQ,eAAe,UAAU;AACnE,4BAA0B,wBAAwB,WAAW;AAC/D;AAEO,SAAS,4BAA0D;AACxE,SAAO,2BAA2B,CAAC;AACrC;AAEA,IAAI,qBAAqD;AAElD,SAAS,0BAA0B,QAAiC;AAKzE,QAAM,iBAAiB,yBAAyB;AAChD,QAAM,cAAc,OAAO,KAAK,cAAc,EAAE,WAAW,IACvD,SACA,6BAA6B,QAAQ,cAAc;AACvD,uBAAqB,wBAAwB,WAAW;AAC1D;AAEO,SAAS,uBAAgD;AAC9D,SAAO,sBAAsB,CAAC;AAChC;AASA,IAAI,cAA+B;AAE5B,SAAS,mBAAmB,SAAmB;AACpD,MAAI,gBAAgB,QAAQ,QAAQ,IAAI,aAAa,eAAe;AAClE,WAAO,MAAM,uDAAuD;AAAA,EACtE;AACA,gBAAc,8BAA8B,OAAO;AACrD;AAEO,SAAS,gBAA0B;AAExC,SAAO,eAAe,CAAC;AACzB;AAEO,SAAS,gBAAyB;AACvC,SAAO,gBAAgB,QAAQ,YAAY,SAAS;AACtD;AAEO,SAAS,yBAAyB,SAAiE;AACxG,QAAM,aAAa,oBAAI,IAAmF;AAE1G,aAAW,OAAO,SAAS;AACzB,eAAW,SAAS,IAAI,yBAAyB,CAAC,GAAG;AACnD,YAAM,WAAW,WAAW,IAAI,MAAM,QAAQ;AAC9C,UAAI,UAAU;AACZ,cAAM,IAAI;AAAA,UACR,oDAAoD,MAAM,QAAQ,kBAAkB,SAAS,QAAQ,UAAU,IAAI,EAAE;AAAA,QACvH;AAAA,MACF;AACA,iBAAW,IAAI,MAAM,UAAU;AAAA,QAC7B,UAAU,IAAI;AAAA,QACd,KAAK;AAAA,UACH,UAAU,MAAM;AAAA,UAChB,GAAI,MAAM,WAAW,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;AAAA,UACrD,QAAQ,MAAM,OAAO,IAAI,CAAC,WAAW;AAAA,YACnC,OAAO,MAAM;AAAA,YACb,WAAW,MAAM,aAAa;AAAA,UAChC,EAAE;AAAA,QACJ;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,MAAM,KAAK,WAAW,OAAO,GAAG,CAAC,EAAE,IAAI,MAAM,GAAG;AACzD;AAEA,SAAS,kBACP,QACA,MACA,IACG;AACH,QAAM,UAAU,OAAO,WAAW,aAC9B,SACA,UAAU,OAAO,WAAW,YAAY,aAAa,SAClD,OAAmC,UACpC;AACN,MAAI,OAAO,YAAY,YAAY;AACjC,UAAM,IAAI,MAAM,sBAAsB,IAAI,YAAY,EAAE,oCAAoC;AAAA,EAC9F;AACA,SAAO;AACT;AAEO,SAAS,2BACd,YACA,IACyB;AACzB,MAAI,iBAA0D;AAC9D,SAAO,OAAO,SAAS,QAAQ;AAC7B,uBAAmB,WAAW,EAAE;AAAA,MAAK,CAAC,WACpC,kBAA2C,QAAQ,cAAc,EAAE;AAAA,IACrE;AACA,UAAM,UAAU,MAAM;AACtB,WAAO,QAAQ,SAAS,GAAG;AAAA,EAC7B;AACF;AAEO,SAAS,uBACd,YACA,IACqB;AACrB,MAAI,iBAAsD;AAC1D,SAAO,OAAO,KAAK,QAAQ;AACzB,uBAAmB,WAAW,EAAE;AAAA,MAAK,CAAC,WACpC,kBAAuC,QAAQ,UAAU,EAAE;AAAA,IAC7D;AACA,UAAM,UAAU,MAAM;AACtB,WAAO,QAAQ,KAAK,GAAG;AAAA,EACzB;AACF;AAUO,SAAS,kCACd,YACA,IACqF;AACrF,MAAI,cAAsH;AAC1H,SAAO,OAAO,SAAS,SAAS;AAC9B,oBAAgB,WAAW,EAAE,KAAK,CAAC,WAAW;AAC5C,YAAM,WAAY,QAA+D;AACjF,aAAO,OAAO,UAAU,mBAAmB,aACtC,SAAS,iBACV;AAAA,IACN,CAAC;AACD,UAAM,OAAO,MAAM;AACnB,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,MAAM,sBAAsB,EAAE,qFAAqF;AAAA,IAC/H;AACA,UAAM,KAAK,SAAS,IAAI;AAAA,EAC1B;AACF;",
   "names": []
 }

package/dist/modules/search.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/modules/search.ts"],
-  "sourcesContent": ["import type { EntityId } from './entities'\nimport { createLogger } from '../lib/logger'\n\nconst logger = createLogger('shared').child({ component: 'search-registry' })\n\n// =============================================================================\n// Strategy Identifiers\n// =============================================================================\n\n/**\n * Built-in strategy identifiers plus extensible string for third-party strategies.\n */\nexport type SearchStrategyId = 'tokens' | 'vector' | 'fulltext' | (string & Record<string, never>)\n\n// =============================================================================\n// Result Types\n// =============================================================================\n\n/**\n * Presenter metadata for displaying search results in UI (Cmd+K, global search).\n */\nexport type SearchResultPresenter = {\n  title: string\n  subtitle?: string\n  icon?: string\n  badge?: string\n}\n\n/**\n * Deep link rendered next to a search result.\n */\nexport type SearchResultLink = {\n  href: string\n  label: string\n  kind?: 'primary' | 'secondary'\n}\n\n/**\n * A single search result returned by a strategy.\n */\nexport type SearchResult = {\n  /** Entity type identifier, e.g., 'customers:customer_person_profile' */\n  entityId: EntityId\n  /** Record primary key */\n  recordId: string\n  /** Relevance score (normalized 0-1 range preferred, but RRF scores may exceed 1) */\n  score: number\n  /** Which strategy produced this result */\n  source: SearchStrategyId\n  /** Optional presenter for quick display */\n  presenter?: SearchResultPresenter\n  /** Primary URL when result is clicked */\n  url?: string\n  /** Additional action links */\n  links?: SearchResultLink[]\n  /** Extra metadata from the strategy */\n  metadata?: Record<string, unknown>\n  /** Organization scope of the result, when known by the strategy. */\n  organizationId?: string | null\n}\n\n// =============================================================================\n// Search Options\n// =============================================================================\n\n/**\n * Options passed to SearchService.search()\n */\nexport type SearchOptions = {\n  /** Tenant isolation - required */\n  tenantId: string\n  /**\n   * Optional organization filter.\n   * - `string` restricts results to that organization only.\n   * - `undefined` or `null` means no organization filter (tenant-wide).\n   */\n  organizationId?: string | null\n  /**\n   * Optional organization allowlist.\n   * - Non-empty array restricts results to one of those organizations.\n   * - Empty array means no organizations are visible and should return no results.\n   * - `undefined` or `null` means no organization filter (tenant-wide).\n   *\n   * `organizationId` takes precedence when both are provided.\n   */\n  organizationIds?: string[] | null\n  /** Filter to specific entity types */\n  entityTypes?: EntityId[]\n  /** Use only specific strategies (defaults to all available) */\n  strategies?: SearchStrategyId[]\n  /** Maximum results per strategy before merging */\n  limit?: number\n  /** Offset for pagination */\n  offset?: number\n  /** How to combine results: 'or' merges all, 'and' requires match in all strategies */\n  combineMode?: 'or' | 'and'\n  /**\n   * Restricts results to records whose query-index row (`entity_indexes`) matches this predicate,\n   * evaluated inside the strategy's ranking query so a restrictive filter never starves the result\n   * set (additive, 2026-10-06). Only strategies with `supportsIndexDocFilter: true` receive a\n   * filtered search; any other strategy returns no results for it rather than unfiltered ones.\n   */\n  indexDocFilter?: SearchIndexDocFilter\n}\n\n/**\n * One condition over a record's query-index document (`entity_indexes.doc`), with the query\n * engine's index-document semantics:\n * - `exists`: the key is present and not JSON `null`;\n * - `eq`: the key's text value equals `value` (booleans and numbers compare by their JSON text);\n * - `overlap`: the key holds an array sharing at least one entry with `values`; empty `values`\n *   matches nothing;\n * - `noverlap`: the key holds an array sharing no entry with `values`; a missing key never matches;\n * - `recordIdNotIn`: the record id is none of `values`.\n */\nexport type SearchIndexDocCondition =\n  | { op: 'exists'; key: string }\n  | { op: 'eq'; key: string; value: string | number | boolean }\n  | { op: 'overlap'; key: string; values: string[] }\n  | { op: 'noverlap'; key: string; values: string[] }\n  | { op: 'recordIdNotIn'; values: string[] }\n\n/**\n * A predicate over a record's `entity_indexes` row in disjunctive normal form: the record matches\n * when its index row is not deleted and every condition of at least one `anyOf` branch holds.\n * An empty `anyOf` matches nothing; an empty branch matches every indexed record.\n */\nexport type SearchIndexDocFilter = {\n  anyOf: SearchIndexDocCondition[][]\n}\n\n// =============================================================================\n// Indexable Record\n// =============================================================================\n\n/**\n * A record prepared for indexing across all strategies.\n */\nexport type IndexableRecord = {\n  /** Entity type identifier */\n  entityId: EntityId\n  /** Record primary key */\n  recordId: string\n  /** Tenant for isolation */\n  tenantId: string\n  /** Optional organization for additional filtering */\n  organizationId?: string | null\n  /** All fields from the record (strategies will filter based on their needs) */\n  fields: Record<string, unknown>\n  /** Optional presenter for result display */\n  presenter?: SearchResultPresenter\n  /** Primary URL for the record */\n  url?: string\n  /** Additional action links */\n  links?: SearchResultLink[]\n  /** Text content for embedding (from buildSource, used by vector strategy) */\n  text?: string | string[]\n  /** Source object for checksum calculation (change detection) */\n  checksumSource?: unknown\n}\n\n// =============================================================================\n// Strategy Interface\n// =============================================================================\n\n/**\n * Interface that all search strategies must implement.\n * Following the cache module's strategy pattern.\n */\nexport interface SearchStrategy {\n  /** Unique strategy identifier */\n  readonly id: SearchStrategyId\n\n  /** Human-readable name for debugging/logging */\n  readonly name: string\n\n  /** Priority for result merging (higher = more prominent in results) */\n  readonly priority: number\n\n  /**\n   * Whether `search()` applies `SearchOptions.indexDocFilter` inside its ranking query. Absent or\n   * `false` means the strategy is skipped for filtered searches (fail closed).\n   */\n  readonly supportsIndexDocFilter?: boolean\n\n  /** Check if strategy is available and configured */\n  isAvailable(): Promise<boolean>\n\n  /** Initialize strategy resources (lazy, called on first use) */\n  ensureReady(): Promise<void>\n\n  /** Execute a search query */\n  search(query: string, options: SearchOptions): Promise<SearchResult[]>\n\n  /** Index a record */\n  index(record: IndexableRecord): Promise<void>\n\n  /** Delete a record from the index */\n  delete(entityId: EntityId, recordId: string, tenantId: string): Promise<void>\n\n  /** Bulk index multiple records (optional optimization) */\n  bulkIndex?(records: IndexableRecord[]): Promise<void>\n\n  /** Purge all records for an entity type (optional) */\n  purge?(entityId: EntityId, tenantId: string, organizationId?: string | null): Promise<void>\n}\n\n// =============================================================================\n// Service Configuration\n// =============================================================================\n\n/**\n * Configuration for result merging across strategies.\n */\nexport type ResultMergeConfig = {\n  /** How to handle duplicate results: 'highest_score' | 'first' | 'merge_scores' */\n  duplicateHandling: 'highest_score' | 'first' | 'merge_scores'\n  /** Weight multipliers per strategy (e.g., { fulltext: 1.2, tokens: 0.8 }) */\n  strategyWeights?: Record<SearchStrategyId, number>\n  /** Minimum score threshold to include in results */\n  minScore?: number\n}\n\n/**\n * Callback function to enrich search results with presenter data.\n * Used to load presenter from database when not available from search strategy.\n */\nexport type PresenterEnricherFn = (\n  results: SearchResult[],\n  tenantId: string,\n  organizationId?: string | null,\n) => Promise<SearchResult[]>\n\n/**\n * Options for creating a SearchService instance.\n */\nexport type SearchServiceOptions = {\n  /** Array of strategy instances */\n  strategies?: SearchStrategy[]\n  /** Default strategies to use when not specified in search options */\n  defaultStrategies?: SearchStrategyId[]\n  /** Fallback strategy when others fail */\n  fallbackStrategy?: SearchStrategyId\n  /** Configuration for merging results from multiple strategies */\n  mergeConfig?: ResultMergeConfig\n  /** Callback to enrich results with presenter data from database */\n  presenterEnricher?: PresenterEnricherFn\n  /** TTL (ms) for the per-strategy availability cache. Defaults to 2_000. */\n  availabilityCacheTtlMs?: number\n}\n\n// =============================================================================\n// Module Configuration (for modules defining searchable entities)\n// =============================================================================\n\n/**\n * Context passed to buildSource, formatResult, resolveUrl, and resolveLinks.\n */\nexport type SearchBuildContext = {\n  /** The record being indexed */\n  record: Record<string, unknown>\n  /** Custom fields for the record */\n  customFields: Record<string, unknown>\n  /** Organization ID if applicable */\n  organizationId?: string | null\n  /** Tenant ID */\n  tenantId?: string | null\n  /** DI container for resolving dependencies */\n  container?: unknown\n  /** Query engine for loading related records (optional, used by buildSource for entity hydration) */\n  queryEngine?: unknown\n}\n\n/**\n * Source data for indexing a record.\n */\nexport type SearchIndexSource = {\n  /** Text content for keyword/fuzzy search (single string or array of chunks) */\n  text: string | string[]\n  /** Optional structured fields for filtering */\n  fields?: Record<string, unknown>\n  /** Presenter for quick display in search results */\n  presenter?: SearchResultPresenter\n  /** Deep links for the result */\n  links?: SearchResultLink[]\n  /** Source object used for checksum calculation (change detection) */\n  checksumSource?: unknown\n}\n\n/**\n * Policy defining how fields should be handled for search indexing.\n */\nexport type SearchFieldPolicy = {\n  /** Fields safe to send to external providers (fuzzy searchable) */\n  searchable?: string[]\n  /** Fields for hash-based search only (encrypted/sensitive) */\n  hashOnly?: string[]\n  /** Fields to exclude from all search */\n  excluded?: string[]\n}\n\n/**\n * Configuration for a single searchable entity within a module.\n */\nexport type SearchEntityConfig = {\n  /** Entity identifier, e.g., 'customers:customer_person_profile' */\n  entityId: EntityId\n  /** Enable/disable search for this entity (default: true) */\n  enabled?: boolean\n  /** Override strategies for this specific entity */\n  strategies?: SearchStrategyId[]\n  /** Priority for result ordering (higher = more prominent) */\n  priority?: number\n  /** Build searchable content from record */\n  buildSource?: (ctx: SearchBuildContext) => Promise<SearchIndexSource | null> | SearchIndexSource | null\n  /** Format result for display in Cmd+K */\n  formatResult?: (ctx: SearchBuildContext) => Promise<SearchResultPresenter | null> | SearchResultPresenter | null\n  /** Resolve primary URL when result is clicked */\n  resolveUrl?: (ctx: SearchBuildContext) => Promise<string | null> | string | null\n  /** Resolve additional action links */\n  resolveLinks?: (ctx: SearchBuildContext) => Promise<SearchResultLink[] | null> | SearchResultLink[] | null\n  /** Define which fields are searchable vs hash-only */\n  fieldPolicy?: SearchFieldPolicy\n  /**\n   * Per-entity view feature(s) required to read this entity's records through\n   * data-returning surfaces (e.g. the `search_get` / `search_aggregate` AI tools).\n   * These tools must NOT rely on the search-administration `search.view` feature\n   * to gate record reads \u2014 callers must additionally hold the owning module's\n   * `<entity>.view` feature(s) declared here. When omitted, those tools fail\n   * closed (deny) so an entity is never exposed without an explicit grant.\n   */\n  aclFeatures?: string[]\n}\n\n/**\n * Module-level search configuration (defined in search.ts files).\n */\nexport type SearchModuleConfig = {\n  /** Default strategies for all entities in this module */\n  defaultStrategies?: SearchStrategyId[]\n  /** Entity configurations */\n  entities: SearchEntityConfig[]\n}\n\n// =============================================================================\n// Event Payloads (for indexer events)\n// =============================================================================\n\n/**\n * Payload for search.index_record events.\n */\nexport type SearchIndexPayload = {\n  entityId: EntityId\n  recordId: string\n  tenantId: string\n  organizationId?: string | null\n  record: Record<string, unknown>\n  customFields?: Record<string, unknown>\n}\n\n/**\n * Payload for search.delete_record events.\n */\nexport type SearchDeletePayload = {\n  entityId: EntityId\n  recordId: string\n  tenantId: string\n}\n\n// =============================================================================\n// Global Registry for Search Module Configs\n// =============================================================================\n\nlet _searchModuleConfigs: SearchModuleConfig[] | null = null\n\n/**\n * Register search module configurations globally.\n * Called during app bootstrap with configs from search.generated.ts.\n */\nexport function registerSearchModuleConfigs(configs: SearchModuleConfig[]): void {\n  if (_searchModuleConfigs !== null && process.env.NODE_ENV === 'development') {\n    logger.debug('Search module configs re-registered (this may occur during HMR)')\n  }\n  _searchModuleConfigs = configs\n}\n\n/**\n * Get registered search module configurations.\n * Returns empty array if not registered (search module may not be enabled).\n */\nexport function getSearchModuleConfigs(): SearchModuleConfig[] {\n  return _searchModuleConfigs ?? []\n}\n"],
-  "mappings": "AACA,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,QAAQ,EAAE,MAAM,EAAE,WAAW,kBAAkB,CAAC;AAkX5E,IAAI,uBAAoD;AAMjD,SAAS,4BAA4B,SAAqC;AAC/E,MAAI,yBAAyB,QAAQ,QAAQ,IAAI,aAAa,eAAe;AAC3E,WAAO,MAAM,iEAAiE;AAAA,EAChF;AACA,yBAAuB;AACzB;AAMO,SAAS,yBAA+C;AAC7D,SAAO,wBAAwB,CAAC;AAClC;",
+  "sourcesContent": ["import type { EntityId } from './entities'\nimport { createLogger } from '../lib/logger'\n\nconst logger = createLogger('shared').child({ component: 'search-registry' })\n\n// =============================================================================\n// Strategy Identifiers\n// =============================================================================\n\n/**\n * Built-in strategy identifiers plus extensible string for third-party strategies.\n */\nexport type SearchStrategyId = 'tokens' | 'vector' | 'fulltext' | (string & Record<string, never>)\n\n// =============================================================================\n// Result Types\n// =============================================================================\n\n/**\n * Presenter metadata for displaying search results in UI (Cmd+K, global search).\n */\nexport type SearchResultPresenter = {\n  title: string\n  subtitle?: string\n  icon?: string\n  badge?: string\n}\n\n/**\n * Deep link rendered next to a search result.\n */\nexport type SearchResultLink = {\n  href: string\n  label: string\n  kind?: 'primary' | 'secondary'\n}\n\n/**\n * A single search result returned by a strategy.\n */\nexport type SearchResult = {\n  /** Entity type identifier, e.g., 'customers:customer_person_profile' */\n  entityId: EntityId\n  /** Record primary key */\n  recordId: string\n  /** Relevance score (normalized 0-1 range preferred, but RRF scores may exceed 1) */\n  score: number\n  /** Which strategy produced this result */\n  source: SearchStrategyId\n  /** Optional presenter for quick display */\n  presenter?: SearchResultPresenter\n  /** Primary URL when result is clicked */\n  url?: string\n  /** Additional action links */\n  links?: SearchResultLink[]\n  /** Extra metadata from the strategy */\n  metadata?: Record<string, unknown>\n  /** Organization scope of the result, when known by the strategy. */\n  organizationId?: string | null\n}\n\n// =============================================================================\n// Search Options\n// =============================================================================\n\n/**\n * Options passed to SearchService.search()\n */\nexport type SearchOptions = {\n  /** Tenant isolation - required */\n  tenantId: string\n  /**\n   * Optional organization filter.\n   * - `string` restricts results to that organization only.\n   * - `undefined` or `null` means no organization filter (tenant-wide).\n   */\n  organizationId?: string | null\n  /**\n   * Optional organization allowlist.\n   * - Non-empty array restricts results to one of those organizations.\n   * - Empty array means no organizations are visible and should return no results.\n   * - `undefined` or `null` means no organization filter (tenant-wide).\n   *\n   * `organizationId` takes precedence when both are provided.\n   */\n  organizationIds?: string[] | null\n  /** Filter to specific entity types */\n  entityTypes?: EntityId[]\n  /** Use only specific strategies (defaults to all available) */\n  strategies?: SearchStrategyId[]\n  /** Maximum results per strategy before merging */\n  limit?: number\n  /** Offset for pagination */\n  offset?: number\n  /** How to combine results: 'or' merges all, 'and' requires match in all strategies */\n  combineMode?: 'or' | 'and'\n}\n\n// =============================================================================\n// Indexable Record\n// =============================================================================\n\n/**\n * A record prepared for indexing across all strategies.\n */\nexport type IndexableRecord = {\n  /** Entity type identifier */\n  entityId: EntityId\n  /** Record primary key */\n  recordId: string\n  /** Tenant for isolation */\n  tenantId: string\n  /** Optional organization for additional filtering */\n  organizationId?: string | null\n  /** All fields from the record (strategies will filter based on their needs) */\n  fields: Record<string, unknown>\n  /** Optional presenter for result display */\n  presenter?: SearchResultPresenter\n  /** Primary URL for the record */\n  url?: string\n  /** Additional action links */\n  links?: SearchResultLink[]\n  /** Text content for embedding (from buildSource, used by vector strategy) */\n  text?: string | string[]\n  /** Source object for checksum calculation (change detection) */\n  checksumSource?: unknown\n}\n\n// =============================================================================\n// Strategy Interface\n// =============================================================================\n\n/**\n * Interface that all search strategies must implement.\n * Following the cache module's strategy pattern.\n */\nexport interface SearchStrategy {\n  /** Unique strategy identifier */\n  readonly id: SearchStrategyId\n\n  /** Human-readable name for debugging/logging */\n  readonly name: string\n\n  /** Priority for result merging (higher = more prominent in results) */\n  readonly priority: number\n\n  /** Check if strategy is available and configured */\n  isAvailable(): Promise<boolean>\n\n  /** Initialize strategy resources (lazy, called on first use) */\n  ensureReady(): Promise<void>\n\n  /** Execute a search query */\n  search(query: string, options: SearchOptions): Promise<SearchResult[]>\n\n  /** Index a record */\n  index(record: IndexableRecord): Promise<void>\n\n  /** Delete a record from the index */\n  delete(entityId: EntityId, recordId: string, tenantId: string): Promise<void>\n\n  /** Bulk index multiple records (optional optimization) */\n  bulkIndex?(records: IndexableRecord[]): Promise<void>\n\n  /** Purge all records for an entity type (optional) */\n  purge?(entityId: EntityId, tenantId: string, organizationId?: string | null): Promise<void>\n}\n\n// =============================================================================\n// Service Configuration\n// =============================================================================\n\n/**\n * Configuration for result merging across strategies.\n */\nexport type ResultMergeConfig = {\n  /** How to handle duplicate results: 'highest_score' | 'first' | 'merge_scores' */\n  duplicateHandling: 'highest_score' | 'first' | 'merge_scores'\n  /** Weight multipliers per strategy (e.g., { fulltext: 1.2, tokens: 0.8 }) */\n  strategyWeights?: Record<SearchStrategyId, number>\n  /** Minimum score threshold to include in results */\n  minScore?: number\n}\n\n/**\n * Callback function to enrich search results with presenter data.\n * Used to load presenter from database when not available from search strategy.\n */\nexport type PresenterEnricherFn = (\n  results: SearchResult[],\n  tenantId: string,\n  organizationId?: string | null,\n) => Promise<SearchResult[]>\n\n/**\n * Options for creating a SearchService instance.\n */\nexport type SearchServiceOptions = {\n  /** Array of strategy instances */\n  strategies?: SearchStrategy[]\n  /** Default strategies to use when not specified in search options */\n  defaultStrategies?: SearchStrategyId[]\n  /** Fallback strategy when others fail */\n  fallbackStrategy?: SearchStrategyId\n  /** Configuration for merging results from multiple strategies */\n  mergeConfig?: ResultMergeConfig\n  /** Callback to enrich results with presenter data from database */\n  presenterEnricher?: PresenterEnricherFn\n  /** TTL (ms) for the per-strategy availability cache. Defaults to 2_000. */\n  availabilityCacheTtlMs?: number\n}\n\n// =============================================================================\n// Module Configuration (for modules defining searchable entities)\n// =============================================================================\n\n/**\n * Context passed to buildSource, formatResult, resolveUrl, and resolveLinks.\n */\nexport type SearchBuildContext = {\n  /** The record being indexed */\n  record: Record<string, unknown>\n  /** Custom fields for the record */\n  customFields: Record<string, unknown>\n  /** Organization ID if applicable */\n  organizationId?: string | null\n  /** Tenant ID */\n  tenantId?: string | null\n  /** DI container for resolving dependencies */\n  container?: unknown\n  /** Query engine for loading related records (optional, used by buildSource for entity hydration) */\n  queryEngine?: unknown\n}\n\n/**\n * Source data for indexing a record.\n */\nexport type SearchIndexSource = {\n  /** Text content for keyword/fuzzy search (single string or array of chunks) */\n  text: string | string[]\n  /** Optional structured fields for filtering */\n  fields?: Record<string, unknown>\n  /** Presenter for quick display in search results */\n  presenter?: SearchResultPresenter\n  /** Deep links for the result */\n  links?: SearchResultLink[]\n  /** Source object used for checksum calculation (change detection) */\n  checksumSource?: unknown\n}\n\n/**\n * Policy defining how fields should be handled for search indexing.\n */\nexport type SearchFieldPolicy = {\n  /** Fields safe to send to external providers (fuzzy searchable) */\n  searchable?: string[]\n  /** Fields for hash-based search only (encrypted/sensitive) */\n  hashOnly?: string[]\n  /** Fields to exclude from all search */\n  excluded?: string[]\n}\n\n/**\n * Configuration for a single searchable entity within a module.\n */\nexport type SearchEntityConfig = {\n  /** Entity identifier, e.g., 'customers:customer_person_profile' */\n  entityId: EntityId\n  /** Enable/disable search for this entity (default: true) */\n  enabled?: boolean\n  /** Override strategies for this specific entity */\n  strategies?: SearchStrategyId[]\n  /** Priority for result ordering (higher = more prominent) */\n  priority?: number\n  /** Build searchable content from record */\n  buildSource?: (ctx: SearchBuildContext) => Promise<SearchIndexSource | null> | SearchIndexSource | null\n  /** Format result for display in Cmd+K */\n  formatResult?: (ctx: SearchBuildContext) => Promise<SearchResultPresenter | null> | SearchResultPresenter | null\n  /** Resolve primary URL when result is clicked */\n  resolveUrl?: (ctx: SearchBuildContext) => Promise<string | null> | string | null\n  /** Resolve additional action links */\n  resolveLinks?: (ctx: SearchBuildContext) => Promise<SearchResultLink[] | null> | SearchResultLink[] | null\n  /** Define which fields are searchable vs hash-only */\n  fieldPolicy?: SearchFieldPolicy\n  /**\n   * Per-entity view feature(s) required to read this entity's records through\n   * data-returning surfaces (e.g. the `search_get` / `search_aggregate` AI tools).\n   * These tools must NOT rely on the search-administration `search.view` feature\n   * to gate record reads \u2014 callers must additionally hold the owning module's\n   * `<entity>.view` feature(s) declared here. When omitted, those tools fail\n   * closed (deny) so an entity is never exposed without an explicit grant.\n   */\n  aclFeatures?: string[]\n}\n\n/**\n * Module-level search configuration (defined in search.ts files).\n */\nexport type SearchModuleConfig = {\n  /** Default strategies for all entities in this module */\n  defaultStrategies?: SearchStrategyId[]\n  /** Entity configurations */\n  entities: SearchEntityConfig[]\n}\n\n// =============================================================================\n// Event Payloads (for indexer events)\n// =============================================================================\n\n/**\n * Payload for search.index_record events.\n */\nexport type SearchIndexPayload = {\n  entityId: EntityId\n  recordId: string\n  tenantId: string\n  organizationId?: string | null\n  record: Record<string, unknown>\n  customFields?: Record<string, unknown>\n}\n\n/**\n * Payload for search.delete_record events.\n */\nexport type SearchDeletePayload = {\n  entityId: EntityId\n  recordId: string\n  tenantId: string\n}\n\n// =============================================================================\n// Global Registry for Search Module Configs\n// =============================================================================\n\nlet _searchModuleConfigs: SearchModuleConfig[] | null = null\n\n/**\n * Register search module configurations globally.\n * Called during app bootstrap with configs from search.generated.ts.\n */\nexport function registerSearchModuleConfigs(configs: SearchModuleConfig[]): void {\n  if (_searchModuleConfigs !== null && process.env.NODE_ENV === 'development') {\n    logger.debug('Search module configs re-registered (this may occur during HMR)')\n  }\n  _searchModuleConfigs = configs\n}\n\n/**\n * Get registered search module configurations.\n * Returns empty array if not registered (search module may not be enabled).\n */\nexport function getSearchModuleConfigs(): SearchModuleConfig[] {\n  return _searchModuleConfigs ?? []\n}\n"],
+  "mappings": "AACA,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,QAAQ,EAAE,MAAM,EAAE,WAAW,kBAAkB,CAAC;AA2U5E,IAAI,uBAAoD;AAMjD,SAAS,4BAA4B,SAAqC;AAC/E,MAAI,yBAAyB,QAAQ,QAAQ,IAAI,aAAa,eAAe;AAC3E,WAAO,MAAM,iEAAiE;AAAA,EAChF;AACA,yBAAuB;AACzB;AAMO,SAAS,yBAA+C;AAC7D,SAAO,wBAAwB,CAAC;AAClC;",
   "names": []
 }

package/dist/modules/widgets/injection-loader.js

@@ -84,22 +84,11 @@ function notifyInjectionRegistryChanged() {
     detail: { version: _injectionRegistryVersion }
   }));
 }
-function registerCoreInjectionWidgets(entries, options = {}) {
-  if (_coreInjectionWidgetEntries !== null && process.env.NODE_ENV === "development" && options.mode !== "merge") {
+function registerCoreInjectionWidgets(entries) {
+  if (_coreInjectionWidgetEntries !== null && process.env.NODE_ENV === "development") {
     logger.debug("Core injection widgets re-registered (this may occur during HMR)");
   }
-  const incoming = applyInjectionWidgetOverridesToEntries(entries);
-  if (options.mode !== "merge") {
-    _coreInjectionWidgetEntries = incoming;
-    writeGlobalInjectionWidgets(incoming);
-    notifyInjectionRegistryChanged();
-    return;
-  }
-  const existing = readGlobalInjectionWidgets() ?? _coreInjectionWidgetEntries ?? [];
-  const known = new Set(existing.map((entry) => entry.key));
-  const added = incoming.filter((entry) => !known.has(entry.key));
-  if (!added.length) return;
-  const finalEntries = [...existing, ...added];
+  const finalEntries = applyInjectionWidgetOverridesToEntries(entries);
   _coreInjectionWidgetEntries = finalEntries;
   writeGlobalInjectionWidgets(finalEntries);
   notifyInjectionRegistryChanged();

package/dist/modules/widgets/injection-loader.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/widgets/injection-loader.ts"],
-  "sourcesContent": ["import type { ModuleInjectionWidgetEntry } from '../registry'\nimport { matchWildcardPattern } from '@open-mercato/shared/lib/patterns/wildcard'\nimport type {\n  InjectionAnyWidgetModule,\n  InjectionDataWidgetModule,\n  InjectionWidgetMetadata,\n  InjectionWidgetModule,\n  InjectionSpotId,\n  ModuleInjectionSlot,\n  ModuleInjectionTable,\n  InjectionWidgetPlacement,\n} from './injection'\nimport { createLogger } from '../../lib/logger'\nimport {\n  applyInjectionWidgetOverridesToEntries,\n  applyInjectionWidgetOverridesToTables,\n} from '../overrides'\n\nconst logger = createLogger('widgets').child({ component: 'injection-loader' })\n\ntype LoadedWidgetModule = InjectionWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }\ntype LoadedDataWidgetModule = InjectionDataWidgetModule & { metadata: InjectionWidgetMetadata }\n\nexport type LoadedInjectionWidget = LoadedWidgetModule & {\n  moduleId: string\n  key: string\n  placement?: {\n    groupId?: string\n    groupLabel?: string\n    groupDescription?: string\n    column?: 1 | 2\n    kind?: 'tab' | 'group' | 'stack'\n    [k: string]: unknown\n  }\n}\n\nexport type LoadedInjectionDataWidget = LoadedDataWidgetModule & {\n  moduleId: string\n  key: string\n  placement?: {\n    groupId?: string\n    groupLabel?: string\n    groupDescription?: string\n    column?: 1 | 2\n    kind?: 'tab' | 'group' | 'stack'\n    [k: string]: unknown\n  }\n}\n\ntype WidgetEntry = ModuleInjectionWidgetEntry & { moduleId: string }\n\n// Registration pattern for publishable packages\nlet _coreInjectionWidgetEntries: ModuleInjectionWidgetEntry[] | null = null\nlet _coreInjectionTables: Array<{ moduleId: string; table: ModuleInjectionTable }> | null = null\nlet _enabledModuleIds: ReadonlySet<string> | null = null\nlet _injectionRegistryVersion = 0\nconst GLOBAL_INJECTION_WIDGETS_KEY = '__openMercatoCoreInjectionWidgetEntries__'\nconst GLOBAL_INJECTION_TABLES_KEY = '__openMercatoCoreInjectionTables__'\nconst GLOBAL_ENABLED_MODULE_IDS_KEY = '__openMercatoEnabledModuleIds__'\nconst GLOBAL_INJECTION_REGISTRY_VERSION_KEY = '__openMercatoCoreInjectionRegistryVersion__'\nconst INJECTION_REGISTRY_CHANGED_EVENT = '__openMercatoInjectionRegistryChanged__'\n\nfunction readGlobalInjectionWidgets(): ModuleInjectionWidgetEntry[] | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_INJECTION_WIDGETS_KEY]\n    return Array.isArray(value) ? (value as ModuleInjectionWidgetEntry[]) : null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalInjectionWidgets(entries: ModuleInjectionWidgetEntry[]) {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_INJECTION_WIDGETS_KEY] = entries\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\nfunction readGlobalEnabledModuleIds(): ReadonlySet<string> | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_ENABLED_MODULE_IDS_KEY]\n    if (value instanceof Set) return value as ReadonlySet<string>\n    return null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalEnabledModuleIds(ids: ReadonlySet<string>) {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_ENABLED_MODULE_IDS_KEY] = ids\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\nfunction readGlobalInjectionTables(): Array<{ moduleId: string; table: ModuleInjectionTable }> | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_INJECTION_TABLES_KEY]\n    return Array.isArray(value) ? (value as Array<{ moduleId: string; table: ModuleInjectionTable }>) : null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalInjectionTables(tables: Array<{ moduleId: string; table: ModuleInjectionTable }>) {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_INJECTION_TABLES_KEY] = tables\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\nfunction readGlobalInjectionRegistryVersion(): number | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_INJECTION_REGISTRY_VERSION_KEY]\n    return typeof value === 'number' ? value : null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalInjectionRegistryVersion(version: number) {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_INJECTION_REGISTRY_VERSION_KEY] = version\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\nfunction notifyInjectionRegistryChanged() {\n  _injectionRegistryVersion += 1\n  writeGlobalInjectionRegistryVersion(_injectionRegistryVersion)\n  invalidateInjectionWidgetCache()\n\n  if (typeof window === 'undefined') return\n\n  window.dispatchEvent(new CustomEvent(INJECTION_REGISTRY_CHANGED_EVENT, {\n    detail: { version: _injectionRegistryVersion },\n  }))\n}\n\nexport type RegisterCoreInjectionWidgetsOptions = {\n  /**\n   * `replace` (default) publishes `entries` as the whole registry.\n   *\n   * `merge` adds only the entries the registry does not already carry, keeping whatever a\n   * previous bootstrap published. A process may run more than one bootstrap partition (the\n   * API-only one and the full page one share a Node process in a mixed web host), and the\n   * partition that registers second must not shrink the registry the first one populated.\n   */\n  mode?: 'replace' | 'merge'\n}\n\nexport function registerCoreInjectionWidgets(\n  entries: ModuleInjectionWidgetEntry[],\n  options: RegisterCoreInjectionWidgetsOptions = {},\n) {\n  if (_coreInjectionWidgetEntries !== null && process.env.NODE_ENV === 'development' && options.mode !== 'merge') {\n    logger.debug('Core injection widgets re-registered (this may occur during HMR)')\n  }\n  const incoming = applyInjectionWidgetOverridesToEntries(entries)\n  if (options.mode !== 'merge') {\n    _coreInjectionWidgetEntries = incoming\n    writeGlobalInjectionWidgets(incoming)\n    notifyInjectionRegistryChanged()\n    return\n  }\n\n  const existing = readGlobalInjectionWidgets() ?? _coreInjectionWidgetEntries ?? []\n  const known = new Set(existing.map((entry) => entry.key))\n  const added = incoming.filter((entry) => !known.has(entry.key))\n  // Nothing to contribute: leave the registry exactly as it was. Publishing an empty array here\n  // would turn \"never registered\" into \"registered with no widgets\", which downgrades the loud\n  // bootstrap error into silently missing contributions.\n  if (!added.length) return\n  const finalEntries = [...existing, ...added]\n  _coreInjectionWidgetEntries = finalEntries\n  writeGlobalInjectionWidgets(finalEntries)\n  notifyInjectionRegistryChanged()\n}\n\nexport function getCoreInjectionWidgets(): ModuleInjectionWidgetEntry[] {\n  const globalEntries = readGlobalInjectionWidgets()\n  if (globalEntries) return globalEntries\n  if (!_coreInjectionWidgetEntries) {\n    // On client-side, bootstrap doesn't run - return empty array gracefully\n    if (typeof window !== 'undefined') {\n      return []\n    }\n    throw new Error('[Bootstrap] Core injection widgets not registered. Call registerCoreInjectionWidgets() at bootstrap.')\n  }\n  return _coreInjectionWidgetEntries\n}\n\n/**\n * `widgetEntries` is optional and carries the *unfiltered* generated entries so a\n * `key`-spelled injection-widget override can be resolved to the `widgetId` the table\n * slots reference (#5152). Bootstraps that skip core widget registration have no other\n * source for that mapping, since the registered entries are already override-filtered.\n */\nexport function registerCoreInjectionTables(\n  tables: Array<{ moduleId: string; table: ModuleInjectionTable }>,\n  widgetEntries?: readonly ModuleInjectionWidgetEntry[],\n) {\n  if (_coreInjectionTables !== null && process.env.NODE_ENV === 'development') {\n    logger.debug('Core injection tables re-registered (this may occur during HMR)')\n  }\n  const finalTables = applyInjectionWidgetOverridesToTables(tables, undefined, widgetEntries)\n  _coreInjectionTables = finalTables\n  writeGlobalInjectionTables(finalTables)\n  notifyInjectionRegistryChanged()\n}\n\n/**\n * Register the canonical set of enabled module IDs for the running app.\n *\n * This is the authoritative signal used by `requiredModules` widget gating \u2014\n * deriving \"enabled\" from injection tables or widget entries is unreliable\n * because modules without injection widgets (for example `ai_assistant`) do\n * not contribute entries to either source. Bootstrap callers should pass\n * every module ID present in the app's module registry.\n */\nexport function registerEnabledModuleIds(moduleIds: Iterable<string>) {\n  const next = new Set<string>()\n  for (const moduleId of moduleIds) {\n    if (typeof moduleId === 'string' && moduleId.length > 0) next.add(moduleId)\n  }\n  if (_enabledModuleIds !== null && process.env.NODE_ENV === 'development') {\n    logger.debug('Enabled module IDs re-registered (this may occur during HMR)')\n  }\n  _enabledModuleIds = next\n  writeGlobalEnabledModuleIds(next)\n  notifyInjectionRegistryChanged()\n}\n\nexport function getEnabledModuleIds(): ReadonlySet<string> | null {\n  return readGlobalEnabledModuleIds() ?? _enabledModuleIds\n}\n\nexport function getInjectionRegistryVersion(): number {\n  const globalVersion = readGlobalInjectionRegistryVersion()\n  if (globalVersion !== null) return globalVersion\n  return _injectionRegistryVersion\n}\n\nconst injectionRegistryChangeSubscribers = new Set<() => void>()\nlet injectionRegistryDomListenerAttached = false\n\nfunction dispatchInjectionRegistryChangeToSubscribers() {\n  // Snapshot so a subscriber that unsubscribes during fan-out does not skip others.\n  for (const subscriber of Array.from(injectionRegistryChangeSubscribers)) {\n    subscriber()\n  }\n}\n\n/**\n * Subscribe to injection-registry version changes.\n *\n * All subscribers share a single browser-level DOM listener: the first\n * subscriber attaches the `window` listener and the last one to unsubscribe\n * detaches it. Registry-change notifications fan out to every subscriber\n * through an internal callback set so mounting many widget surfaces does not\n * register one DOM listener per surface (#3320).\n */\nexport function subscribeToInjectionRegistryChanges(listener: () => void): () => void {\n  if (typeof window === 'undefined') {\n    return () => {}\n  }\n\n  injectionRegistryChangeSubscribers.add(listener)\n  if (!injectionRegistryDomListenerAttached) {\n    window.addEventListener(INJECTION_REGISTRY_CHANGED_EVENT, dispatchInjectionRegistryChangeToSubscribers)\n    injectionRegistryDomListenerAttached = true\n  }\n\n  return () => {\n    injectionRegistryChangeSubscribers.delete(listener)\n    if (injectionRegistryChangeSubscribers.size === 0 && injectionRegistryDomListenerAttached) {\n      window.removeEventListener(INJECTION_REGISTRY_CHANGED_EVENT, dispatchInjectionRegistryChangeToSubscribers)\n      injectionRegistryDomListenerAttached = false\n    }\n  }\n}\n\nexport function getCoreInjectionTables(): Array<{ moduleId: string; table: ModuleInjectionTable }> {\n  const globalTables = readGlobalInjectionTables()\n  if (globalTables) return globalTables\n  if (!_coreInjectionTables) {\n    // On client-side, bootstrap doesn't run - return empty array gracefully\n    if (typeof window !== 'undefined') {\n      return []\n    }\n    throw new Error('[Bootstrap] Core injection tables not registered. Call registerCoreInjectionTables() at bootstrap.')\n  }\n  return _coreInjectionTables\n}\n\nlet widgetEntriesPromise: Promise<WidgetEntry[]> | null = null\ntype TableEntry = {\n  widgetId: string\n  moduleId: string\n  priority: number\n  placement?: ModuleInjectionSlot extends infer S\n    ? S extends { widgetId: string }\n      ? Omit<S, 'widgetId' | 'priority'>\n      : never\n    : never\n}\nlet injectionTablePromise: Promise<Map<InjectionSpotId, TableEntry[]>> | null = null\ntype WidgetLookupIndex = {\n  widgetsById: Map<string, LoadedInjectionWidget>\n  dataWidgetsById: Map<string, LoadedInjectionDataWidget>\n}\nlet widgetLookupIndexPromise: { version: number; promise: Promise<WidgetLookupIndex> } | null = null\n\nfunction isInjectionSlotObject(value: ModuleInjectionSlot): value is InjectionWidgetPlacement & { widgetId: string; priority?: number } {\n  return typeof value === 'object' && value !== null && 'widgetId' in value\n}\n\n/**\n * Invalidate the widget entries and widget module cache.\n * Call this when the generated registry is updated or modules are reloaded.\n */\nexport function invalidateInjectionWidgetCache() {\n  widgetEntriesPromise = null\n  injectionTablePromise = null\n  widgetLookupIndexPromise = null\n  widgetCache.clear()\n  warnedRequiredModuleSkips.clear()\n}\n\nasync function loadWidgetEntries(): Promise<WidgetEntry[]> {\n  if (!widgetEntriesPromise) {\n    const promise = Promise.resolve().then(() =>\n      getCoreInjectionWidgets().map((entry) => ({\n        ...entry,\n        moduleId: entry.moduleId || 'unknown',\n      }))\n    )\n    widgetEntriesPromise = promise.catch((err) => {\n      if (widgetEntriesPromise === promise) {\n        widgetEntriesPromise = null\n      }\n      throw err\n    })\n  }\n  return widgetEntriesPromise\n}\n\nasync function loadInjectionTable(): Promise<Map<InjectionSpotId, TableEntry[]>> {\n  if (!injectionTablePromise) {\n    const promise = Promise.resolve().then(() => {\n      const list = getCoreInjectionTables()\n      const table = new Map<InjectionSpotId, TableEntry[]>()\n\n      for (const entry of list) {\n        const injectionTable = entry.table ?? {}\n        for (const [spotId, widgetIds] of Object.entries(injectionTable)) {\n          const widgets = Array.isArray(widgetIds) ? widgetIds : [widgetIds]\n          const existing = table.get(spotId) ?? []\n          for (const widgetEntry of widgets) {\n            if (typeof widgetEntry === 'string') {\n              existing.push({ widgetId: widgetEntry, moduleId: entry.moduleId, priority: 0 })\n              continue\n            }\n            if (isInjectionSlotObject(widgetEntry)) {\n              const { widgetId, priority = 0, ...placement } = widgetEntry\n              existing.push({\n                widgetId,\n                moduleId: entry.moduleId,\n                priority: typeof priority === 'number' ? priority : 0,\n                placement,\n              })\n              continue\n            }\n          }\n          table.set(spotId, existing)\n        }\n      }\n\n      for (const [spotId, widgets] of table.entries()) {\n        table.set(spotId, widgets.sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0)))\n      }\n\n      return table\n    })\n    injectionTablePromise = promise.catch((err) => {\n      if (injectionTablePromise === promise) {\n        injectionTablePromise = null\n      }\n      throw err\n    })\n  }\n  return injectionTablePromise\n}\n\nconst widgetCache = new Map<string, Promise<InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }>>()\n\nfunction isDataWidgetModule(widget: Record<string, unknown>): widget is LoadedDataWidgetModule {\n  const keys = [\n    'columns',\n    'rowActions',\n    'bulkActions',\n    'filters',\n    'fields',\n    'steps',\n    'badge',\n    'menuItems',\n  ]\n  return keys.some((key) => key in widget)\n}\n\nfunction ensureValidInjectionModule(mod: unknown, key: string, moduleId: string): (InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }) {\n  if (!mod || typeof mod !== 'object') {\n    throw new Error(`Invalid injection widget module \"${key}\" from \"${moduleId}\" (expected object export)`)\n  }\n  const widget = (mod as { default?: InjectionAnyWidgetModule<any, any> }).default ?? (mod as InjectionAnyWidgetModule<any, any>)\n  if (!widget || typeof widget !== 'object') {\n    throw new Error(`Invalid injection widget export \"${key}\" from \"${moduleId}\" (missing default export)`) \n  }\n  if (!('metadata' in widget) || !widget.metadata || typeof widget.metadata !== 'object') {\n    throw new Error(`Injection widget \"${key}\" from \"${moduleId}\" is missing metadata`)\n  }\n  const metadata = widget.metadata\n  if (typeof metadata.id !== 'string' || metadata.id.length === 0) {\n    throw new Error(`Injection widget \"${key}\" from \"${moduleId}\" metadata.id must be a non-empty string`)\n  }\n  const normalized = {\n    ...widget,\n    metadata,\n  }\n\n  if ('Widget' in normalized && typeof normalized.Widget === 'function') {\n    if (typeof metadata.title !== 'string' || metadata.title.length === 0) {\n      throw new Error(`Injection widget \"${metadata.id}\" from \"${moduleId}\" must have a title`)\n    }\n    return normalized\n  }\n\n  if (!isDataWidgetModule(normalized as Record<string, unknown>)) {\n    throw new Error(\n      `Injection widget \"${metadata.id}\" from \"${moduleId}\" must export either Widget component or a declarative data payload`\n    )\n  }\n\n  return normalized\n}\n\nfunction isLoadedInjectionWidget(\n  module: InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }\n): module is LoadedWidgetModule {\n  return 'Widget' in module && typeof module.Widget === 'function'\n}\n\nfunction isLoadedInjectionDataWidget(\n  module: InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }\n): module is LoadedDataWidgetModule {\n  return !isLoadedInjectionWidget(module)\n}\n\nasync function loadEntry(entry: WidgetEntry): Promise<InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }> {\n  if (!widgetCache.has(entry.key)) {\n    const promise = Promise.resolve()\n      .then(() => entry.loader())\n      .then((mod) => ensureValidInjectionModule(mod, entry.key, entry.moduleId))\n    widgetCache.set(entry.key, promise)\n  }\n  return widgetCache.get(entry.key)!\n}\n\nasync function loadWidgetLookupIndex(): Promise<WidgetLookupIndex> {\n  const version = getInjectionRegistryVersion()\n  if (!widgetLookupIndexPromise || widgetLookupIndexPromise.version !== version) {\n    const promise = Promise.resolve().then(async () => {\n      const widgetEntries = await loadWidgetEntries()\n      const settled = await Promise.allSettled(widgetEntries.map((entry) => loadEntry(entry)))\n      const widgetsById = new Map<string, LoadedInjectionWidget>()\n      const dataWidgetsById = new Map<string, LoadedInjectionDataWidget>()\n\n      settled.forEach((result, index) => {\n        if (result.status !== 'fulfilled') return\n        const entry = widgetEntries[index]\n        const module = result.value\n        if (isLoadedInjectionWidget(module)) {\n          if (!widgetsById.has(module.metadata.id)) {\n            widgetsById.set(module.metadata.id, { ...module, moduleId: entry.moduleId, key: entry.key })\n          }\n          return\n        }\n        if (!dataWidgetsById.has(module.metadata.id)) {\n          dataWidgetsById.set(module.metadata.id, { ...module, moduleId: entry.moduleId, key: entry.key })\n        }\n      })\n\n      return { widgetsById, dataWidgetsById }\n    })\n    widgetLookupIndexPromise = { version, promise }\n  }\n  return widgetLookupIndexPromise.promise\n}\n\nfunction applyRequiredModuleGate<T extends LoadedInjectionWidget | LoadedInjectionDataWidget>(\n  widget: T,\n  enabledModuleIds: ReadonlySet<string>,\n): T | null {\n  const missing = widgetMissingRequiredModules(widget.metadata, enabledModuleIds)\n  if (missing.length > 0) {\n    warnSkippedWidget(widget.metadata.id, missing)\n    return null\n  }\n  return widget\n}\n\ntype HintedLookupResult<T> =\n  | { resolved: true; widget: T | null }\n  | { resolved: false }\n\nasync function tryLoadHintedWidgetById<T extends LoadedInjectionWidget | LoadedInjectionDataWidget>(\n  widgetId: string,\n  isExpectedKind: (module: InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }) => boolean,\n  enabledModuleIds: ReadonlySet<string>,\n): Promise<HintedLookupResult<T>> {\n  const widgetEntries = await loadWidgetEntries()\n  const entry = widgetEntries.find((candidate) => candidate.widgetId === widgetId)\n  if (!entry) return { resolved: false }\n\n  const module = await loadEntry(entry).catch(() => null)\n  if (!module || module.metadata.id !== widgetId || !isExpectedKind(module)) {\n    return { resolved: false }\n  }\n\n  const widget = { ...module, moduleId: entry.moduleId, key: entry.key } as T\n  return { resolved: true, widget: applyRequiredModuleGate(widget, enabledModuleIds) }\n}\n\nfunction getEnabledModuleIdsForInjection(): ReadonlySet<string> {\n  // Prefer the explicit enabled-modules registry populated by bootstrap.\n  // This is the only signal that includes modules without injection widgets\n  // (for example `ai_assistant`), so it is required for `requiredModules`\n  // gating to be sound.\n  const explicit = readGlobalEnabledModuleIds() ?? _enabledModuleIds\n  if (explicit) return explicit\n\n  // Fallback: derive from injection tables and widget entries. This keeps\n  // older bootstrap paths (and callers that have not yet wired\n  // `registerEnabledModuleIds`) working \u2014 at the cost of mis-classifying\n  // dependency modules that ship no widgets. New apps MUST call\n  // `registerEnabledModuleIds` to get accurate gating.\n  const enabled = new Set<string>()\n  const tables = readGlobalInjectionTables() ?? _coreInjectionTables ?? []\n  for (const entry of tables) {\n    if (entry?.moduleId) enabled.add(entry.moduleId)\n  }\n  const entries = readGlobalInjectionWidgets() ?? _coreInjectionWidgetEntries ?? []\n  for (const entry of entries) {\n    if (entry?.moduleId) enabled.add(entry.moduleId)\n  }\n  return enabled\n}\n\nfunction widgetMissingRequiredModules(\n  metadata: InjectionWidgetMetadata,\n  enabledModuleIds: ReadonlySet<string>,\n): string[] {\n  const required = metadata.requiredModules\n  if (!Array.isArray(required) || required.length === 0) return []\n  const missing: string[] = []\n  for (const moduleId of required) {\n    if (typeof moduleId !== 'string' || moduleId.length === 0) continue\n    if (!enabledModuleIds.has(moduleId)) missing.push(moduleId)\n  }\n  return missing\n}\n\nconst warnedRequiredModuleSkips = new Set<string>()\n\nfunction warnSkippedWidget(metadataId: string, missingModules: string[]) {\n  const key = `${metadataId}:${missingModules.join(',')}`\n  if (warnedRequiredModuleSkips.has(key)) return\n  warnedRequiredModuleSkips.add(key)\n  if (process.env.NODE_ENV === 'development') {\n    logger.debug('Skipping widget \u2014 required module(s) not enabled', { metadataId, missingModules })\n  }\n}\n\nasync function getResolvedEntriesForSpot(spotId: InjectionSpotId): Promise<TableEntry[]> {\n  const table = await loadInjectionTable()\n  const exactEntries = table.get(spotId) ?? []\n  const wildcardEntries: TableEntry[] = []\n\n  for (const [candidateSpotId, candidateEntries] of table.entries()) {\n    if (candidateSpotId === spotId) continue\n    if (!candidateSpotId.includes('*')) continue\n    if (!matchWildcardPattern(spotId, candidateSpotId)) continue\n    wildcardEntries.push(...candidateEntries)\n  }\n\n  const dedupedEntries = new Map<string, TableEntry>()\n  for (const entry of [...exactEntries, ...wildcardEntries]) {\n    const cacheKey = `${entry.moduleId}:${entry.widgetId}`\n    const previous = dedupedEntries.get(cacheKey)\n    if (!previous || (entry.priority ?? 0) > (previous.priority ?? 0)) {\n      dedupedEntries.set(cacheKey, entry)\n    }\n  }\n\n  return Array.from(dedupedEntries.values()).sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0))\n}\n\nexport async function loadAllInjectionWidgets(): Promise<LoadedInjectionWidget[]> {\n  const widgetEntries = await loadWidgetEntries()\n  const enabledModuleIds = getEnabledModuleIdsForInjection()\n  const loaded = await Promise.all(\n    widgetEntries.map(async (entry) => {\n      const module = await loadEntry(entry)\n      if (!isLoadedInjectionWidget(module)) return null\n      const missing = widgetMissingRequiredModules(module.metadata, enabledModuleIds)\n      if (missing.length > 0) {\n        warnSkippedWidget(module.metadata.id, missing)\n        return null\n      }\n      return { ...module, moduleId: entry.moduleId, key: entry.key }\n    })\n  )\n  const byId = new Map<string, LoadedInjectionWidget>()\n  for (const widget of loaded) {\n    if (!widget) continue\n    if (!byId.has(widget.metadata.id)) {\n      byId.set(widget.metadata.id, widget)\n    }\n  }\n  return Array.from(byId.values())\n}\n\nexport async function loadInjectionWidgetById(widgetId: string): Promise<LoadedInjectionWidget | null> {\n  const enabledModuleIds = getEnabledModuleIdsForInjection()\n  const hinted = await tryLoadHintedWidgetById<LoadedInjectionWidget>(widgetId, isLoadedInjectionWidget, enabledModuleIds)\n  if (hinted.resolved) return hinted.widget\n\n  const index = await loadWidgetLookupIndex()\n  const widget = index.widgetsById.get(widgetId)\n  return widget ? applyRequiredModuleGate(widget, enabledModuleIds) : null\n}\n\nexport async function loadInjectionDataWidgetById(widgetId: string): Promise<LoadedInjectionDataWidget | null> {\n  const enabledModuleIds = getEnabledModuleIdsForInjection()\n  const hinted = await tryLoadHintedWidgetById<LoadedInjectionDataWidget>(widgetId, isLoadedInjectionDataWidget, enabledModuleIds)\n  if (hinted.resolved) return hinted.widget\n\n  const index = await loadWidgetLookupIndex()\n  const widget = index.dataWidgetsById.get(widgetId)\n  return widget ? applyRequiredModuleGate(widget, enabledModuleIds) : null\n}\n\nexport async function loadInjectionWidgetsForSpot(spotId: InjectionSpotId): Promise<LoadedInjectionWidget[]> {\n  const entries = await getResolvedEntriesForSpot(spotId)\n  const widgets: LoadedInjectionWidget[] = []\n  for (const { widgetId, placement, priority } of entries) {\n    const widget = await loadInjectionWidgetById(widgetId)\n    if (!widget) continue\n    const combinedPlacement = placement\n      ? { ...placement, priority: typeof priority === 'number' ? priority : 0 }\n      : { priority: typeof priority === 'number' ? priority : 0 }\n    widgets.push({ ...widget, placement: combinedPlacement })\n  }\n  return widgets\n}\n\nexport async function loadInjectionDataWidgetsForSpot(spotId: InjectionSpotId): Promise<LoadedInjectionDataWidget[]> {\n  const entries = await getResolvedEntriesForSpot(spotId)\n  const widgets: LoadedInjectionDataWidget[] = []\n  for (const { widgetId, placement, priority } of entries) {\n    const widget = await loadInjectionDataWidgetById(widgetId)\n    if (!widget) continue\n    const combinedPlacement = placement\n      ? { ...placement, priority: typeof priority === 'number' ? priority : 0 }\n      : { priority: typeof priority === 'number' ? priority : 0 }\n    widgets.push({ ...widget, placement: combinedPlacement })\n  }\n  return widgets\n}\n"],
-  "mappings": "AACA,SAAS,4BAA4B;AAWrC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,SAAS,EAAE,MAAM,EAAE,WAAW,mBAAmB,CAAC;AAkC9E,IAAI,8BAAmE;AACvE,IAAI,uBAAwF;AAC5F,IAAI,oBAAgD;AACpD,IAAI,4BAA4B;AAChC,MAAM,+BAA+B;AACrC,MAAM,8BAA8B;AACpC,MAAM,gCAAgC;AACtC,MAAM,wCAAwC;AAC9C,MAAM,mCAAmC;AAEzC,SAAS,6BAAkE;AACzE,MAAI;AACF,UAAM,QAAS,WAAuC,4BAA4B;AAClF,WAAO,MAAM,QAAQ,KAAK,IAAK,QAAyC;AAAA,EAC1E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,4BAA4B,SAAuC;AAC1E,MAAI;AACF;AAAC,IAAC,WAAuC,4BAA4B,IAAI;AAAA,EAC3E,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,6BAAyD;AAChE,MAAI;AACF,UAAM,QAAS,WAAuC,6BAA6B;AACnF,QAAI,iBAAiB,IAAK,QAAO;AACjC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,4BAA4B,KAA0B;AAC7D,MAAI;AACF;AAAC,IAAC,WAAuC,6BAA6B,IAAI;AAAA,EAC5E,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,4BAA6F;AACpG,MAAI;AACF,UAAM,QAAS,WAAuC,2BAA2B;AACjF,WAAO,MAAM,QAAQ,KAAK,IAAK,QAAqE;AAAA,EACtG,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,2BAA2B,QAAkE;AACpG,MAAI;AACF;AAAC,IAAC,WAAuC,2BAA2B,IAAI;AAAA,EAC1E,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,qCAAoD;AAC3D,MAAI;AACF,UAAM,QAAS,WAAuC,qCAAqC;AAC3F,WAAO,OAAO,UAAU,WAAW,QAAQ;AAAA,EAC7C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,oCAAoC,SAAiB;AAC5D,MAAI;AACF;AAAC,IAAC,WAAuC,qCAAqC,IAAI;AAAA,EACpF,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,iCAAiC;AACxC,+BAA6B;AAC7B,sCAAoC,yBAAyB;AAC7D,iCAA+B;AAE/B,MAAI,OAAO,WAAW,YAAa;AAEnC,SAAO,cAAc,IAAI,YAAY,kCAAkC;AAAA,IACrE,QAAQ,EAAE,SAAS,0BAA0B;AAAA,EAC/C,CAAC,CAAC;AACJ;AAcO,SAAS,6BACd,SACA,UAA+C,CAAC,GAChD;AACA,MAAI,gCAAgC,QAAQ,QAAQ,IAAI,aAAa,iBAAiB,QAAQ,SAAS,SAAS;AAC9G,WAAO,MAAM,kEAAkE;AAAA,EACjF;AACA,QAAM,WAAW,uCAAuC,OAAO;AAC/D,MAAI,QAAQ,SAAS,SAAS;AAC5B,kCAA8B;AAC9B,gCAA4B,QAAQ;AACpC,mCAA+B;AAC/B;AAAA,EACF;AAEA,QAAM,WAAW,2BAA2B,KAAK,+BAA+B,CAAC;AACjF,QAAM,QAAQ,IAAI,IAAI,SAAS,IAAI,CAAC,UAAU,MAAM,GAAG,CAAC;AACxD,QAAM,QAAQ,SAAS,OAAO,CAAC,UAAU,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC;AAI9D,MAAI,CAAC,MAAM,OAAQ;AACnB,QAAM,eAAe,CAAC,GAAG,UAAU,GAAG,KAAK;AAC3C,gCAA8B;AAC9B,8BAA4B,YAAY;AACxC,iCAA+B;AACjC;AAEO,SAAS,0BAAwD;AACtE,QAAM,gBAAgB,2BAA2B;AACjD,MAAI,cAAe,QAAO;AAC1B,MAAI,CAAC,6BAA6B;AAEhC,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,CAAC;AAAA,IACV;AACA,UAAM,IAAI,MAAM,sGAAsG;AAAA,EACxH;AACA,SAAO;AACT;AAQO,SAAS,4BACd,QACA,eACA;AACA,MAAI,yBAAyB,QAAQ,QAAQ,IAAI,aAAa,eAAe;AAC3E,WAAO,MAAM,iEAAiE;AAAA,EAChF;AACA,QAAM,cAAc,sCAAsC,QAAQ,QAAW,aAAa;AAC1F,yBAAuB;AACvB,6BAA2B,WAAW;AACtC,iCAA+B;AACjC;AAWO,SAAS,yBAAyB,WAA6B;AACpE,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,YAAY,WAAW;AAChC,QAAI,OAAO,aAAa,YAAY,SAAS,SAAS,EAAG,MAAK,IAAI,QAAQ;AAAA,EAC5E;AACA,MAAI,sBAAsB,QAAQ,QAAQ,IAAI,aAAa,eAAe;AACxE,WAAO,MAAM,8DAA8D;AAAA,EAC7E;AACA,sBAAoB;AACpB,8BAA4B,IAAI;AAChC,iCAA+B;AACjC;AAEO,SAAS,sBAAkD;AAChE,SAAO,2BAA2B,KAAK;AACzC;AAEO,SAAS,8BAAsC;AACpD,QAAM,gBAAgB,mCAAmC;AACzD,MAAI,kBAAkB,KAAM,QAAO;AACnC,SAAO;AACT;AAEA,MAAM,qCAAqC,oBAAI,IAAgB;AAC/D,IAAI,uCAAuC;AAE3C,SAAS,+CAA+C;AAEtD,aAAW,cAAc,MAAM,KAAK,kCAAkC,GAAG;AACvE,eAAW;AAAA,EACb;AACF;AAWO,SAAS,oCAAoC,UAAkC;AACpF,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO,MAAM;AAAA,IAAC;AAAA,EAChB;AAEA,qCAAmC,IAAI,QAAQ;AAC/C,MAAI,CAAC,sCAAsC;AACzC,WAAO,iBAAiB,kCAAkC,4CAA4C;AACtG,2CAAuC;AAAA,EACzC;AAEA,SAAO,MAAM;AACX,uCAAmC,OAAO,QAAQ;AAClD,QAAI,mCAAmC,SAAS,KAAK,sCAAsC;AACzF,aAAO,oBAAoB,kCAAkC,4CAA4C;AACzG,6CAAuC;AAAA,IACzC;AAAA,EACF;AACF;AAEO,SAAS,yBAAmF;AACjG,QAAM,eAAe,0BAA0B;AAC/C,MAAI,aAAc,QAAO;AACzB,MAAI,CAAC,sBAAsB;AAEzB,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,CAAC;AAAA,IACV;AACA,UAAM,IAAI,MAAM,oGAAoG;AAAA,EACtH;AACA,SAAO;AACT;AAEA,IAAI,uBAAsD;AAW1D,IAAI,wBAA4E;AAKhF,IAAI,2BAA4F;AAEhG,SAAS,sBAAsB,OAAyG;AACtI,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,cAAc;AACtE;AAMO,SAAS,iCAAiC;AAC/C,yBAAuB;AACvB,0BAAwB;AACxB,6BAA2B;AAC3B,cAAY,MAAM;AAClB,4BAA0B,MAAM;AAClC;AAEA,eAAe,oBAA4C;AACzD,MAAI,CAAC,sBAAsB;AACzB,UAAM,UAAU,QAAQ,QAAQ,EAAE;AAAA,MAAK,MACrC,wBAAwB,EAAE,IAAI,CAAC,WAAW;AAAA,QACxC,GAAG;AAAA,QACH,UAAU,MAAM,YAAY;AAAA,MAC9B,EAAE;AAAA,IACJ;AACA,2BAAuB,QAAQ,MAAM,CAAC,QAAQ;AAC5C,UAAI,yBAAyB,SAAS;AACpC,+BAAuB;AAAA,MACzB;AACA,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAEA,eAAe,qBAAkE;AAC/E,MAAI,CAAC,uBAAuB;AAC1B,UAAM,UAAU,QAAQ,QAAQ,EAAE,KAAK,MAAM;AAC3C,YAAM,OAAO,uBAAuB;AACpC,YAAM,QAAQ,oBAAI,IAAmC;AAErD,iBAAW,SAAS,MAAM;AACxB,cAAM,iBAAiB,MAAM,SAAS,CAAC;AACvC,mBAAW,CAAC,QAAQ,SAAS,KAAK,OAAO,QAAQ,cAAc,GAAG;AAChE,gBAAM,UAAU,MAAM,QAAQ,SAAS,IAAI,YAAY,CAAC,SAAS;AACjE,gBAAM,WAAW,MAAM,IAAI,MAAM,KAAK,CAAC;AACvC,qBAAW,eAAe,SAAS;AACjC,gBAAI,OAAO,gBAAgB,UAAU;AACnC,uBAAS,KAAK,EAAE,UAAU,aAAa,UAAU,MAAM,UAAU,UAAU,EAAE,CAAC;AAC9E;AAAA,YACF;AACA,gBAAI,sBAAsB,WAAW,GAAG;AACtC,oBAAM,EAAE,UAAU,WAAW,GAAG,GAAG,UAAU,IAAI;AACjD,uBAAS,KAAK;AAAA,gBACZ;AAAA,gBACA,UAAU,MAAM;AAAA,gBAChB,UAAU,OAAO,aAAa,WAAW,WAAW;AAAA,gBACpD;AAAA,cACF,CAAC;AACD;AAAA,YACF;AAAA,UACF;AACA,gBAAM,IAAI,QAAQ,QAAQ;AAAA,QAC5B;AAAA,MACF;AAEA,iBAAW,CAAC,QAAQ,OAAO,KAAK,MAAM,QAAQ,GAAG;AAC/C,cAAM,IAAI,QAAQ,QAAQ,KAAK,CAAC,GAAG,OAAO,EAAE,YAAY,MAAM,EAAE,YAAY,EAAE,CAAC;AAAA,MACjF;AAEA,aAAO;AAAA,IACT,CAAC;AACD,4BAAwB,QAAQ,MAAM,CAAC,QAAQ;AAC7C,UAAI,0BAA0B,SAAS;AACrC,gCAAwB;AAAA,MAC1B;AACA,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAEA,MAAM,cAAc,oBAAI,IAAiG;AAEzH,SAAS,mBAAmB,QAAmE;AAC7F,QAAM,OAAO;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,SAAO,KAAK,KAAK,CAAC,QAAQ,OAAO,MAAM;AACzC;AAEA,SAAS,2BAA2B,KAAc,KAAa,UAAgG;AAC7J,MAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,UAAM,IAAI,MAAM,oCAAoC,GAAG,WAAW,QAAQ,4BAA4B;AAAA,EACxG;AACA,QAAM,SAAU,IAAyD,WAAY;AACrF,MAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,UAAM,IAAI,MAAM,oCAAoC,GAAG,WAAW,QAAQ,4BAA4B;AAAA,EACxG;AACA,MAAI,EAAE,cAAc,WAAW,CAAC,OAAO,YAAY,OAAO,OAAO,aAAa,UAAU;AACtF,UAAM,IAAI,MAAM,qBAAqB,GAAG,WAAW,QAAQ,uBAAuB;AAAA,EACpF;AACA,QAAM,WAAW,OAAO;AACxB,MAAI,OAAO,SAAS,OAAO,YAAY,SAAS,GAAG,WAAW,GAAG;AAC/D,UAAM,IAAI,MAAM,qBAAqB,GAAG,WAAW,QAAQ,0CAA0C;AAAA,EACvG;AACA,QAAM,aAAa;AAAA,IACjB,GAAG;AAAA,IACH;AAAA,EACF;AAEA,MAAI,YAAY,cAAc,OAAO,WAAW,WAAW,YAAY;AACrE,QAAI,OAAO,SAAS,UAAU,YAAY,SAAS,MAAM,WAAW,GAAG;AACrE,YAAM,IAAI,MAAM,qBAAqB,SAAS,EAAE,WAAW,QAAQ,qBAAqB;AAAA,IAC1F;AACA,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,mBAAmB,UAAqC,GAAG;AAC9D,UAAM,IAAI;AAAA,MACR,qBAAqB,SAAS,EAAE,WAAW,QAAQ;AAAA,IACrD;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,wBACP,QAC8B;AAC9B,SAAO,YAAY,UAAU,OAAO,OAAO,WAAW;AACxD;AAEA,SAAS,4BACP,QACkC;AAClC,SAAO,CAAC,wBAAwB,MAAM;AACxC;AAEA,eAAe,UAAU,OAAyG;AAChI,MAAI,CAAC,YAAY,IAAI,MAAM,GAAG,GAAG;AAC/B,UAAM,UAAU,QAAQ,QAAQ,EAC7B,KAAK,MAAM,MAAM,OAAO,CAAC,EACzB,KAAK,CAAC,QAAQ,2BAA2B,KAAK,MAAM,KAAK,MAAM,QAAQ,CAAC;AAC3E,gBAAY,IAAI,MAAM,KAAK,OAAO;AAAA,EACpC;AACA,SAAO,YAAY,IAAI,MAAM,GAAG;AAClC;AAEA,eAAe,wBAAoD;AACjE,QAAM,UAAU,4BAA4B;AAC5C,MAAI,CAAC,4BAA4B,yBAAyB,YAAY,SAAS;AAC7E,UAAM,UAAU,QAAQ,QAAQ,EAAE,KAAK,YAAY;AACjD,YAAM,gBAAgB,MAAM,kBAAkB;AAC9C,YAAM,UAAU,MAAM,QAAQ,WAAW,cAAc,IAAI,CAAC,UAAU,UAAU,KAAK,CAAC,CAAC;AACvF,YAAM,cAAc,oBAAI,IAAmC;AAC3D,YAAM,kBAAkB,oBAAI,IAAuC;AAEnE,cAAQ,QAAQ,CAAC,QAAQ,UAAU;AACjC,YAAI,OAAO,WAAW,YAAa;AACnC,cAAM,QAAQ,cAAc,KAAK;AACjC,cAAM,SAAS,OAAO;AACtB,YAAI,wBAAwB,MAAM,GAAG;AACnC,cAAI,CAAC,YAAY,IAAI,OAAO,SAAS,EAAE,GAAG;AACxC,wBAAY,IAAI,OAAO,SAAS,IAAI,EAAE,GAAG,QAAQ,UAAU,MAAM,UAAU,KAAK,MAAM,IAAI,CAAC;AAAA,UAC7F;AACA;AAAA,QACF;AACA,YAAI,CAAC,gBAAgB,IAAI,OAAO,SAAS,EAAE,GAAG;AAC5C,0BAAgB,IAAI,OAAO,SAAS,IAAI,EAAE,GAAG,QAAQ,UAAU,MAAM,UAAU,KAAK,MAAM,IAAI,CAAC;AAAA,QACjG;AAAA,MACF,CAAC;AAED,aAAO,EAAE,aAAa,gBAAgB;AAAA,IACxC,CAAC;AACD,+BAA2B,EAAE,SAAS,QAAQ;AAAA,EAChD;AACA,SAAO,yBAAyB;AAClC;AAEA,SAAS,wBACP,QACA,kBACU;AACV,QAAM,UAAU,6BAA6B,OAAO,UAAU,gBAAgB;AAC9E,MAAI,QAAQ,SAAS,GAAG;AACtB,sBAAkB,OAAO,SAAS,IAAI,OAAO;AAC7C,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAMA,eAAe,wBACb,UACA,gBACA,kBACgC;AAChC,QAAM,gBAAgB,MAAM,kBAAkB;AAC9C,QAAM,QAAQ,cAAc,KAAK,CAAC,cAAc,UAAU,aAAa,QAAQ;AAC/E,MAAI,CAAC,MAAO,QAAO,EAAE,UAAU,MAAM;AAErC,QAAM,SAAS,MAAM,UAAU,KAAK,EAAE,MAAM,MAAM,IAAI;AACtD,MAAI,CAAC,UAAU,OAAO,SAAS,OAAO,YAAY,CAAC,eAAe,MAAM,GAAG;AACzE,WAAO,EAAE,UAAU,MAAM;AAAA,EAC3B;AAEA,QAAM,SAAS,EAAE,GAAG,QAAQ,UAAU,MAAM,UAAU,KAAK,MAAM,IAAI;AACrE,SAAO,EAAE,UAAU,MAAM,QAAQ,wBAAwB,QAAQ,gBAAgB,EAAE;AACrF;AAEA,SAAS,kCAAuD;AAK9D,QAAM,WAAW,2BAA2B,KAAK;AACjD,MAAI,SAAU,QAAO;AAOrB,QAAM,UAAU,oBAAI,IAAY;AAChC,QAAM,SAAS,0BAA0B,KAAK,wBAAwB,CAAC;AACvE,aAAW,SAAS,QAAQ;AAC1B,QAAI,OAAO,SAAU,SAAQ,IAAI,MAAM,QAAQ;AAAA,EACjD;AACA,QAAM,UAAU,2BAA2B,KAAK,+BAA+B,CAAC;AAChF,aAAW,SAAS,SAAS;AAC3B,QAAI,OAAO,SAAU,SAAQ,IAAI,MAAM,QAAQ;AAAA,EACjD;AACA,SAAO;AACT;AAEA,SAAS,6BACP,UACA,kBACU;AACV,QAAM,WAAW,SAAS;AAC1B,MAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,WAAW,EAAG,QAAO,CAAC;AAC/D,QAAM,UAAoB,CAAC;AAC3B,aAAW,YAAY,UAAU;AAC/B,QAAI,OAAO,aAAa,YAAY,SAAS,WAAW,EAAG;AAC3D,QAAI,CAAC,iBAAiB,IAAI,QAAQ,EAAG,SAAQ,KAAK,QAAQ;AAAA,EAC5D;AACA,SAAO;AACT;AAEA,MAAM,4BAA4B,oBAAI,IAAY;AAElD,SAAS,kBAAkB,YAAoB,gBAA0B;AACvE,QAAM,MAAM,GAAG,UAAU,IAAI,eAAe,KAAK,GAAG,CAAC;AACrD,MAAI,0BAA0B,IAAI,GAAG,EAAG;AACxC,4BAA0B,IAAI,GAAG;AACjC,MAAI,QAAQ,IAAI,aAAa,eAAe;AAC1C,WAAO,MAAM,yDAAoD,EAAE,YAAY,eAAe,CAAC;AAAA,EACjG;AACF;AAEA,eAAe,0BAA0B,QAAgD;AACvF,QAAM,QAAQ,MAAM,mBAAmB;AACvC,QAAM,eAAe,MAAM,IAAI,MAAM,KAAK,CAAC;AAC3C,QAAM,kBAAgC,CAAC;AAEvC,aAAW,CAAC,iBAAiB,gBAAgB,KAAK,MAAM,QAAQ,GAAG;AACjE,QAAI,oBAAoB,OAAQ;AAChC,QAAI,CAAC,gBAAgB,SAAS,GAAG,EAAG;AACpC,QAAI,CAAC,qBAAqB,QAAQ,eAAe,EAAG;AACpD,oBAAgB,KAAK,GAAG,gBAAgB;AAAA,EAC1C;AAEA,QAAM,iBAAiB,oBAAI,IAAwB;AACnD,aAAW,SAAS,CAAC,GAAG,cAAc,GAAG,eAAe,GAAG;AACzD,UAAM,WAAW,GAAG,MAAM,QAAQ,IAAI,MAAM,QAAQ;AACpD,UAAM,WAAW,eAAe,IAAI,QAAQ;AAC5C,QAAI,CAAC,aAAa,MAAM,YAAY,MAAM,SAAS,YAAY,IAAI;AACjE,qBAAe,IAAI,UAAU,KAAK;AAAA,IACpC;AAAA,EACF;AAEA,SAAO,MAAM,KAAK,eAAe,OAAO,CAAC,EAAE,KAAK,CAAC,GAAG,OAAO,EAAE,YAAY,MAAM,EAAE,YAAY,EAAE;AACjG;AAEA,eAAsB,0BAA4D;AAChF,QAAM,gBAAgB,MAAM,kBAAkB;AAC9C,QAAM,mBAAmB,gCAAgC;AACzD,QAAM,SAAS,MAAM,QAAQ;AAAA,IAC3B,cAAc,IAAI,OAAO,UAAU;AACjC,YAAM,SAAS,MAAM,UAAU,KAAK;AACpC,UAAI,CAAC,wBAAwB,MAAM,EAAG,QAAO;AAC7C,YAAM,UAAU,6BAA6B,OAAO,UAAU,gBAAgB;AAC9E,UAAI,QAAQ,SAAS,GAAG;AACtB,0BAAkB,OAAO,SAAS,IAAI,OAAO;AAC7C,eAAO;AAAA,MACT;AACA,aAAO,EAAE,GAAG,QAAQ,UAAU,MAAM,UAAU,KAAK,MAAM,IAAI;AAAA,IAC/D,CAAC;AAAA,EACH;AACA,QAAM,OAAO,oBAAI,IAAmC;AACpD,aAAW,UAAU,QAAQ;AAC3B,QAAI,CAAC,OAAQ;AACb,QAAI,CAAC,KAAK,IAAI,OAAO,SAAS,EAAE,GAAG;AACjC,WAAK,IAAI,OAAO,SAAS,IAAI,MAAM;AAAA,IACrC;AAAA,EACF;AACA,SAAO,MAAM,KAAK,KAAK,OAAO,CAAC;AACjC;AAEA,eAAsB,wBAAwB,UAAyD;AACrG,QAAM,mBAAmB,gCAAgC;AACzD,QAAM,SAAS,MAAM,wBAA+C,UAAU,yBAAyB,gBAAgB;AACvH,MAAI,OAAO,SAAU,QAAO,OAAO;AAEnC,QAAM,QAAQ,MAAM,sBAAsB;AAC1C,QAAM,SAAS,MAAM,YAAY,IAAI,QAAQ;AAC7C,SAAO,SAAS,wBAAwB,QAAQ,gBAAgB,IAAI;AACtE;AAEA,eAAsB,4BAA4B,UAA6D;AAC7G,QAAM,mBAAmB,gCAAgC;AACzD,QAAM,SAAS,MAAM,wBAAmD,UAAU,6BAA6B,gBAAgB;AAC/H,MAAI,OAAO,SAAU,QAAO,OAAO;AAEnC,QAAM,QAAQ,MAAM,sBAAsB;AAC1C,QAAM,SAAS,MAAM,gBAAgB,IAAI,QAAQ;AACjD,SAAO,SAAS,wBAAwB,QAAQ,gBAAgB,IAAI;AACtE;AAEA,eAAsB,4BAA4B,QAA2D;AAC3G,QAAM,UAAU,MAAM,0BAA0B,MAAM;AACtD,QAAM,UAAmC,CAAC;AAC1C,aAAW,EAAE,UAAU,WAAW,SAAS,KAAK,SAAS;AACvD,UAAM,SAAS,MAAM,wBAAwB,QAAQ;AACrD,QAAI,CAAC,OAAQ;AACb,UAAM,oBAAoB,YACtB,EAAE,GAAG,WAAW,UAAU,OAAO,aAAa,WAAW,WAAW,EAAE,IACtE,EAAE,UAAU,OAAO,aAAa,WAAW,WAAW,EAAE;AAC5D,YAAQ,KAAK,EAAE,GAAG,QAAQ,WAAW,kBAAkB,CAAC;AAAA,EAC1D;AACA,SAAO;AACT;AAEA,eAAsB,gCAAgC,QAA+D;AACnH,QAAM,UAAU,MAAM,0BAA0B,MAAM;AACtD,QAAM,UAAuC,CAAC;AAC9C,aAAW,EAAE,UAAU,WAAW,SAAS,KAAK,SAAS;AACvD,UAAM,SAAS,MAAM,4BAA4B,QAAQ;AACzD,QAAI,CAAC,OAAQ;AACb,UAAM,oBAAoB,YACtB,EAAE,GAAG,WAAW,UAAU,OAAO,aAAa,WAAW,WAAW,EAAE,IACtE,EAAE,UAAU,OAAO,aAAa,WAAW,WAAW,EAAE;AAC5D,YAAQ,KAAK,EAAE,GAAG,QAAQ,WAAW,kBAAkB,CAAC;AAAA,EAC1D;AACA,SAAO;AACT;",
+  "sourcesContent": ["import type { ModuleInjectionWidgetEntry } from '../registry'\nimport { matchWildcardPattern } from '@open-mercato/shared/lib/patterns/wildcard'\nimport type {\n  InjectionAnyWidgetModule,\n  InjectionDataWidgetModule,\n  InjectionWidgetMetadata,\n  InjectionWidgetModule,\n  InjectionSpotId,\n  ModuleInjectionSlot,\n  ModuleInjectionTable,\n  InjectionWidgetPlacement,\n} from './injection'\nimport { createLogger } from '../../lib/logger'\nimport {\n  applyInjectionWidgetOverridesToEntries,\n  applyInjectionWidgetOverridesToTables,\n} from '../overrides'\n\nconst logger = createLogger('widgets').child({ component: 'injection-loader' })\n\ntype LoadedWidgetModule = InjectionWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }\ntype LoadedDataWidgetModule = InjectionDataWidgetModule & { metadata: InjectionWidgetMetadata }\n\nexport type LoadedInjectionWidget = LoadedWidgetModule & {\n  moduleId: string\n  key: string\n  placement?: {\n    groupId?: string\n    groupLabel?: string\n    groupDescription?: string\n    column?: 1 | 2\n    kind?: 'tab' | 'group' | 'stack'\n    [k: string]: unknown\n  }\n}\n\nexport type LoadedInjectionDataWidget = LoadedDataWidgetModule & {\n  moduleId: string\n  key: string\n  placement?: {\n    groupId?: string\n    groupLabel?: string\n    groupDescription?: string\n    column?: 1 | 2\n    kind?: 'tab' | 'group' | 'stack'\n    [k: string]: unknown\n  }\n}\n\ntype WidgetEntry = ModuleInjectionWidgetEntry & { moduleId: string }\n\n// Registration pattern for publishable packages\nlet _coreInjectionWidgetEntries: ModuleInjectionWidgetEntry[] | null = null\nlet _coreInjectionTables: Array<{ moduleId: string; table: ModuleInjectionTable }> | null = null\nlet _enabledModuleIds: ReadonlySet<string> | null = null\nlet _injectionRegistryVersion = 0\nconst GLOBAL_INJECTION_WIDGETS_KEY = '__openMercatoCoreInjectionWidgetEntries__'\nconst GLOBAL_INJECTION_TABLES_KEY = '__openMercatoCoreInjectionTables__'\nconst GLOBAL_ENABLED_MODULE_IDS_KEY = '__openMercatoEnabledModuleIds__'\nconst GLOBAL_INJECTION_REGISTRY_VERSION_KEY = '__openMercatoCoreInjectionRegistryVersion__'\nconst INJECTION_REGISTRY_CHANGED_EVENT = '__openMercatoInjectionRegistryChanged__'\n\nfunction readGlobalInjectionWidgets(): ModuleInjectionWidgetEntry[] | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_INJECTION_WIDGETS_KEY]\n    return Array.isArray(value) ? (value as ModuleInjectionWidgetEntry[]) : null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalInjectionWidgets(entries: ModuleInjectionWidgetEntry[]) {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_INJECTION_WIDGETS_KEY] = entries\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\nfunction readGlobalEnabledModuleIds(): ReadonlySet<string> | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_ENABLED_MODULE_IDS_KEY]\n    if (value instanceof Set) return value as ReadonlySet<string>\n    return null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalEnabledModuleIds(ids: ReadonlySet<string>) {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_ENABLED_MODULE_IDS_KEY] = ids\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\nfunction readGlobalInjectionTables(): Array<{ moduleId: string; table: ModuleInjectionTable }> | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_INJECTION_TABLES_KEY]\n    return Array.isArray(value) ? (value as Array<{ moduleId: string; table: ModuleInjectionTable }>) : null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalInjectionTables(tables: Array<{ moduleId: string; table: ModuleInjectionTable }>) {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_INJECTION_TABLES_KEY] = tables\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\nfunction readGlobalInjectionRegistryVersion(): number | null {\n  try {\n    const value = (globalThis as Record<string, unknown>)[GLOBAL_INJECTION_REGISTRY_VERSION_KEY]\n    return typeof value === 'number' ? value : null\n  } catch {\n    return null\n  }\n}\n\nfunction writeGlobalInjectionRegistryVersion(version: number) {\n  try {\n    ;(globalThis as Record<string, unknown>)[GLOBAL_INJECTION_REGISTRY_VERSION_KEY] = version\n  } catch {\n    // ignore global assignment failures\n  }\n}\n\nfunction notifyInjectionRegistryChanged() {\n  _injectionRegistryVersion += 1\n  writeGlobalInjectionRegistryVersion(_injectionRegistryVersion)\n  invalidateInjectionWidgetCache()\n\n  if (typeof window === 'undefined') return\n\n  window.dispatchEvent(new CustomEvent(INJECTION_REGISTRY_CHANGED_EVENT, {\n    detail: { version: _injectionRegistryVersion },\n  }))\n}\n\nexport function registerCoreInjectionWidgets(entries: ModuleInjectionWidgetEntry[]) {\n  if (_coreInjectionWidgetEntries !== null && process.env.NODE_ENV === 'development') {\n    logger.debug('Core injection widgets re-registered (this may occur during HMR)')\n  }\n  const finalEntries = applyInjectionWidgetOverridesToEntries(entries)\n  _coreInjectionWidgetEntries = finalEntries\n  writeGlobalInjectionWidgets(finalEntries)\n  notifyInjectionRegistryChanged()\n}\n\nexport function getCoreInjectionWidgets(): ModuleInjectionWidgetEntry[] {\n  const globalEntries = readGlobalInjectionWidgets()\n  if (globalEntries) return globalEntries\n  if (!_coreInjectionWidgetEntries) {\n    // On client-side, bootstrap doesn't run - return empty array gracefully\n    if (typeof window !== 'undefined') {\n      return []\n    }\n    throw new Error('[Bootstrap] Core injection widgets not registered. Call registerCoreInjectionWidgets() at bootstrap.')\n  }\n  return _coreInjectionWidgetEntries\n}\n\n/**\n * `widgetEntries` is optional and carries the *unfiltered* generated entries so a\n * `key`-spelled injection-widget override can be resolved to the `widgetId` the table\n * slots reference (#5152). Bootstraps that skip core widget registration have no other\n * source for that mapping, since the registered entries are already override-filtered.\n */\nexport function registerCoreInjectionTables(\n  tables: Array<{ moduleId: string; table: ModuleInjectionTable }>,\n  widgetEntries?: readonly ModuleInjectionWidgetEntry[],\n) {\n  if (_coreInjectionTables !== null && process.env.NODE_ENV === 'development') {\n    logger.debug('Core injection tables re-registered (this may occur during HMR)')\n  }\n  const finalTables = applyInjectionWidgetOverridesToTables(tables, undefined, widgetEntries)\n  _coreInjectionTables = finalTables\n  writeGlobalInjectionTables(finalTables)\n  notifyInjectionRegistryChanged()\n}\n\n/**\n * Register the canonical set of enabled module IDs for the running app.\n *\n * This is the authoritative signal used by `requiredModules` widget gating \u2014\n * deriving \"enabled\" from injection tables or widget entries is unreliable\n * because modules without injection widgets (for example `ai_assistant`) do\n * not contribute entries to either source. Bootstrap callers should pass\n * every module ID present in the app's module registry.\n */\nexport function registerEnabledModuleIds(moduleIds: Iterable<string>) {\n  const next = new Set<string>()\n  for (const moduleId of moduleIds) {\n    if (typeof moduleId === 'string' && moduleId.length > 0) next.add(moduleId)\n  }\n  if (_enabledModuleIds !== null && process.env.NODE_ENV === 'development') {\n    logger.debug('Enabled module IDs re-registered (this may occur during HMR)')\n  }\n  _enabledModuleIds = next\n  writeGlobalEnabledModuleIds(next)\n  notifyInjectionRegistryChanged()\n}\n\nexport function getEnabledModuleIds(): ReadonlySet<string> | null {\n  return readGlobalEnabledModuleIds() ?? _enabledModuleIds\n}\n\nexport function getInjectionRegistryVersion(): number {\n  const globalVersion = readGlobalInjectionRegistryVersion()\n  if (globalVersion !== null) return globalVersion\n  return _injectionRegistryVersion\n}\n\nconst injectionRegistryChangeSubscribers = new Set<() => void>()\nlet injectionRegistryDomListenerAttached = false\n\nfunction dispatchInjectionRegistryChangeToSubscribers() {\n  // Snapshot so a subscriber that unsubscribes during fan-out does not skip others.\n  for (const subscriber of Array.from(injectionRegistryChangeSubscribers)) {\n    subscriber()\n  }\n}\n\n/**\n * Subscribe to injection-registry version changes.\n *\n * All subscribers share a single browser-level DOM listener: the first\n * subscriber attaches the `window` listener and the last one to unsubscribe\n * detaches it. Registry-change notifications fan out to every subscriber\n * through an internal callback set so mounting many widget surfaces does not\n * register one DOM listener per surface (#3320).\n */\nexport function subscribeToInjectionRegistryChanges(listener: () => void): () => void {\n  if (typeof window === 'undefined') {\n    return () => {}\n  }\n\n  injectionRegistryChangeSubscribers.add(listener)\n  if (!injectionRegistryDomListenerAttached) {\n    window.addEventListener(INJECTION_REGISTRY_CHANGED_EVENT, dispatchInjectionRegistryChangeToSubscribers)\n    injectionRegistryDomListenerAttached = true\n  }\n\n  return () => {\n    injectionRegistryChangeSubscribers.delete(listener)\n    if (injectionRegistryChangeSubscribers.size === 0 && injectionRegistryDomListenerAttached) {\n      window.removeEventListener(INJECTION_REGISTRY_CHANGED_EVENT, dispatchInjectionRegistryChangeToSubscribers)\n      injectionRegistryDomListenerAttached = false\n    }\n  }\n}\n\nexport function getCoreInjectionTables(): Array<{ moduleId: string; table: ModuleInjectionTable }> {\n  const globalTables = readGlobalInjectionTables()\n  if (globalTables) return globalTables\n  if (!_coreInjectionTables) {\n    // On client-side, bootstrap doesn't run - return empty array gracefully\n    if (typeof window !== 'undefined') {\n      return []\n    }\n    throw new Error('[Bootstrap] Core injection tables not registered. Call registerCoreInjectionTables() at bootstrap.')\n  }\n  return _coreInjectionTables\n}\n\nlet widgetEntriesPromise: Promise<WidgetEntry[]> | null = null\ntype TableEntry = {\n  widgetId: string\n  moduleId: string\n  priority: number\n  placement?: ModuleInjectionSlot extends infer S\n    ? S extends { widgetId: string }\n      ? Omit<S, 'widgetId' | 'priority'>\n      : never\n    : never\n}\nlet injectionTablePromise: Promise<Map<InjectionSpotId, TableEntry[]>> | null = null\ntype WidgetLookupIndex = {\n  widgetsById: Map<string, LoadedInjectionWidget>\n  dataWidgetsById: Map<string, LoadedInjectionDataWidget>\n}\nlet widgetLookupIndexPromise: { version: number; promise: Promise<WidgetLookupIndex> } | null = null\n\nfunction isInjectionSlotObject(value: ModuleInjectionSlot): value is InjectionWidgetPlacement & { widgetId: string; priority?: number } {\n  return typeof value === 'object' && value !== null && 'widgetId' in value\n}\n\n/**\n * Invalidate the widget entries and widget module cache.\n * Call this when the generated registry is updated or modules are reloaded.\n */\nexport function invalidateInjectionWidgetCache() {\n  widgetEntriesPromise = null\n  injectionTablePromise = null\n  widgetLookupIndexPromise = null\n  widgetCache.clear()\n  warnedRequiredModuleSkips.clear()\n}\n\nasync function loadWidgetEntries(): Promise<WidgetEntry[]> {\n  if (!widgetEntriesPromise) {\n    const promise = Promise.resolve().then(() =>\n      getCoreInjectionWidgets().map((entry) => ({\n        ...entry,\n        moduleId: entry.moduleId || 'unknown',\n      }))\n    )\n    widgetEntriesPromise = promise.catch((err) => {\n      if (widgetEntriesPromise === promise) {\n        widgetEntriesPromise = null\n      }\n      throw err\n    })\n  }\n  return widgetEntriesPromise\n}\n\nasync function loadInjectionTable(): Promise<Map<InjectionSpotId, TableEntry[]>> {\n  if (!injectionTablePromise) {\n    const promise = Promise.resolve().then(() => {\n      const list = getCoreInjectionTables()\n      const table = new Map<InjectionSpotId, TableEntry[]>()\n\n      for (const entry of list) {\n        const injectionTable = entry.table ?? {}\n        for (const [spotId, widgetIds] of Object.entries(injectionTable)) {\n          const widgets = Array.isArray(widgetIds) ? widgetIds : [widgetIds]\n          const existing = table.get(spotId) ?? []\n          for (const widgetEntry of widgets) {\n            if (typeof widgetEntry === 'string') {\n              existing.push({ widgetId: widgetEntry, moduleId: entry.moduleId, priority: 0 })\n              continue\n            }\n            if (isInjectionSlotObject(widgetEntry)) {\n              const { widgetId, priority = 0, ...placement } = widgetEntry\n              existing.push({\n                widgetId,\n                moduleId: entry.moduleId,\n                priority: typeof priority === 'number' ? priority : 0,\n                placement,\n              })\n              continue\n            }\n          }\n          table.set(spotId, existing)\n        }\n      }\n\n      for (const [spotId, widgets] of table.entries()) {\n        table.set(spotId, widgets.sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0)))\n      }\n\n      return table\n    })\n    injectionTablePromise = promise.catch((err) => {\n      if (injectionTablePromise === promise) {\n        injectionTablePromise = null\n      }\n      throw err\n    })\n  }\n  return injectionTablePromise\n}\n\nconst widgetCache = new Map<string, Promise<InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }>>()\n\nfunction isDataWidgetModule(widget: Record<string, unknown>): widget is LoadedDataWidgetModule {\n  const keys = [\n    'columns',\n    'rowActions',\n    'bulkActions',\n    'filters',\n    'fields',\n    'steps',\n    'badge',\n    'menuItems',\n  ]\n  return keys.some((key) => key in widget)\n}\n\nfunction ensureValidInjectionModule(mod: unknown, key: string, moduleId: string): (InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }) {\n  if (!mod || typeof mod !== 'object') {\n    throw new Error(`Invalid injection widget module \"${key}\" from \"${moduleId}\" (expected object export)`)\n  }\n  const widget = (mod as { default?: InjectionAnyWidgetModule<any, any> }).default ?? (mod as InjectionAnyWidgetModule<any, any>)\n  if (!widget || typeof widget !== 'object') {\n    throw new Error(`Invalid injection widget export \"${key}\" from \"${moduleId}\" (missing default export)`) \n  }\n  if (!('metadata' in widget) || !widget.metadata || typeof widget.metadata !== 'object') {\n    throw new Error(`Injection widget \"${key}\" from \"${moduleId}\" is missing metadata`)\n  }\n  const metadata = widget.metadata\n  if (typeof metadata.id !== 'string' || metadata.id.length === 0) {\n    throw new Error(`Injection widget \"${key}\" from \"${moduleId}\" metadata.id must be a non-empty string`)\n  }\n  const normalized = {\n    ...widget,\n    metadata,\n  }\n\n  if ('Widget' in normalized && typeof normalized.Widget === 'function') {\n    if (typeof metadata.title !== 'string' || metadata.title.length === 0) {\n      throw new Error(`Injection widget \"${metadata.id}\" from \"${moduleId}\" must have a title`)\n    }\n    return normalized\n  }\n\n  if (!isDataWidgetModule(normalized as Record<string, unknown>)) {\n    throw new Error(\n      `Injection widget \"${metadata.id}\" from \"${moduleId}\" must export either Widget component or a declarative data payload`\n    )\n  }\n\n  return normalized\n}\n\nfunction isLoadedInjectionWidget(\n  module: InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }\n): module is LoadedWidgetModule {\n  return 'Widget' in module && typeof module.Widget === 'function'\n}\n\nfunction isLoadedInjectionDataWidget(\n  module: InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }\n): module is LoadedDataWidgetModule {\n  return !isLoadedInjectionWidget(module)\n}\n\nasync function loadEntry(entry: WidgetEntry): Promise<InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }> {\n  if (!widgetCache.has(entry.key)) {\n    const promise = Promise.resolve()\n      .then(() => entry.loader())\n      .then((mod) => ensureValidInjectionModule(mod, entry.key, entry.moduleId))\n    widgetCache.set(entry.key, promise)\n  }\n  return widgetCache.get(entry.key)!\n}\n\nasync function loadWidgetLookupIndex(): Promise<WidgetLookupIndex> {\n  const version = getInjectionRegistryVersion()\n  if (!widgetLookupIndexPromise || widgetLookupIndexPromise.version !== version) {\n    const promise = Promise.resolve().then(async () => {\n      const widgetEntries = await loadWidgetEntries()\n      const settled = await Promise.allSettled(widgetEntries.map((entry) => loadEntry(entry)))\n      const widgetsById = new Map<string, LoadedInjectionWidget>()\n      const dataWidgetsById = new Map<string, LoadedInjectionDataWidget>()\n\n      settled.forEach((result, index) => {\n        if (result.status !== 'fulfilled') return\n        const entry = widgetEntries[index]\n        const module = result.value\n        if (isLoadedInjectionWidget(module)) {\n          if (!widgetsById.has(module.metadata.id)) {\n            widgetsById.set(module.metadata.id, { ...module, moduleId: entry.moduleId, key: entry.key })\n          }\n          return\n        }\n        if (!dataWidgetsById.has(module.metadata.id)) {\n          dataWidgetsById.set(module.metadata.id, { ...module, moduleId: entry.moduleId, key: entry.key })\n        }\n      })\n\n      return { widgetsById, dataWidgetsById }\n    })\n    widgetLookupIndexPromise = { version, promise }\n  }\n  return widgetLookupIndexPromise.promise\n}\n\nfunction applyRequiredModuleGate<T extends LoadedInjectionWidget | LoadedInjectionDataWidget>(\n  widget: T,\n  enabledModuleIds: ReadonlySet<string>,\n): T | null {\n  const missing = widgetMissingRequiredModules(widget.metadata, enabledModuleIds)\n  if (missing.length > 0) {\n    warnSkippedWidget(widget.metadata.id, missing)\n    return null\n  }\n  return widget\n}\n\ntype HintedLookupResult<T> =\n  | { resolved: true; widget: T | null }\n  | { resolved: false }\n\nasync function tryLoadHintedWidgetById<T extends LoadedInjectionWidget | LoadedInjectionDataWidget>(\n  widgetId: string,\n  isExpectedKind: (module: InjectionAnyWidgetModule<any, any> & { metadata: InjectionWidgetMetadata }) => boolean,\n  enabledModuleIds: ReadonlySet<string>,\n): Promise<HintedLookupResult<T>> {\n  const widgetEntries = await loadWidgetEntries()\n  const entry = widgetEntries.find((candidate) => candidate.widgetId === widgetId)\n  if (!entry) return { resolved: false }\n\n  const module = await loadEntry(entry).catch(() => null)\n  if (!module || module.metadata.id !== widgetId || !isExpectedKind(module)) {\n    return { resolved: false }\n  }\n\n  const widget = { ...module, moduleId: entry.moduleId, key: entry.key } as T\n  return { resolved: true, widget: applyRequiredModuleGate(widget, enabledModuleIds) }\n}\n\nfunction getEnabledModuleIdsForInjection(): ReadonlySet<string> {\n  // Prefer the explicit enabled-modules registry populated by bootstrap.\n  // This is the only signal that includes modules without injection widgets\n  // (for example `ai_assistant`), so it is required for `requiredModules`\n  // gating to be sound.\n  const explicit = readGlobalEnabledModuleIds() ?? _enabledModuleIds\n  if (explicit) return explicit\n\n  // Fallback: derive from injection tables and widget entries. This keeps\n  // older bootstrap paths (and callers that have not yet wired\n  // `registerEnabledModuleIds`) working \u2014 at the cost of mis-classifying\n  // dependency modules that ship no widgets. New apps MUST call\n  // `registerEnabledModuleIds` to get accurate gating.\n  const enabled = new Set<string>()\n  const tables = readGlobalInjectionTables() ?? _coreInjectionTables ?? []\n  for (const entry of tables) {\n    if (entry?.moduleId) enabled.add(entry.moduleId)\n  }\n  const entries = readGlobalInjectionWidgets() ?? _coreInjectionWidgetEntries ?? []\n  for (const entry of entries) {\n    if (entry?.moduleId) enabled.add(entry.moduleId)\n  }\n  return enabled\n}\n\nfunction widgetMissingRequiredModules(\n  metadata: InjectionWidgetMetadata,\n  enabledModuleIds: ReadonlySet<string>,\n): string[] {\n  const required = metadata.requiredModules\n  if (!Array.isArray(required) || required.length === 0) return []\n  const missing: string[] = []\n  for (const moduleId of required) {\n    if (typeof moduleId !== 'string' || moduleId.length === 0) continue\n    if (!enabledModuleIds.has(moduleId)) missing.push(moduleId)\n  }\n  return missing\n}\n\nconst warnedRequiredModuleSkips = new Set<string>()\n\nfunction warnSkippedWidget(metadataId: string, missingModules: string[]) {\n  const key = `${metadataId}:${missingModules.join(',')}`\n  if (warnedRequiredModuleSkips.has(key)) return\n  warnedRequiredModuleSkips.add(key)\n  if (process.env.NODE_ENV === 'development') {\n    logger.debug('Skipping widget \u2014 required module(s) not enabled', { metadataId, missingModules })\n  }\n}\n\nasync function getResolvedEntriesForSpot(spotId: InjectionSpotId): Promise<TableEntry[]> {\n  const table = await loadInjectionTable()\n  const exactEntries = table.get(spotId) ?? []\n  const wildcardEntries: TableEntry[] = []\n\n  for (const [candidateSpotId, candidateEntries] of table.entries()) {\n    if (candidateSpotId === spotId) continue\n    if (!candidateSpotId.includes('*')) continue\n    if (!matchWildcardPattern(spotId, candidateSpotId)) continue\n    wildcardEntries.push(...candidateEntries)\n  }\n\n  const dedupedEntries = new Map<string, TableEntry>()\n  for (const entry of [...exactEntries, ...wildcardEntries]) {\n    const cacheKey = `${entry.moduleId}:${entry.widgetId}`\n    const previous = dedupedEntries.get(cacheKey)\n    if (!previous || (entry.priority ?? 0) > (previous.priority ?? 0)) {\n      dedupedEntries.set(cacheKey, entry)\n    }\n  }\n\n  return Array.from(dedupedEntries.values()).sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0))\n}\n\nexport async function loadAllInjectionWidgets(): Promise<LoadedInjectionWidget[]> {\n  const widgetEntries = await loadWidgetEntries()\n  const enabledModuleIds = getEnabledModuleIdsForInjection()\n  const loaded = await Promise.all(\n    widgetEntries.map(async (entry) => {\n      const module = await loadEntry(entry)\n      if (!isLoadedInjectionWidget(module)) return null\n      const missing = widgetMissingRequiredModules(module.metadata, enabledModuleIds)\n      if (missing.length > 0) {\n        warnSkippedWidget(module.metadata.id, missing)\n        return null\n      }\n      return { ...module, moduleId: entry.moduleId, key: entry.key }\n    })\n  )\n  const byId = new Map<string, LoadedInjectionWidget>()\n  for (const widget of loaded) {\n    if (!widget) continue\n    if (!byId.has(widget.metadata.id)) {\n      byId.set(widget.metadata.id, widget)\n    }\n  }\n  return Array.from(byId.values())\n}\n\nexport async function loadInjectionWidgetById(widgetId: string): Promise<LoadedInjectionWidget | null> {\n  const enabledModuleIds = getEnabledModuleIdsForInjection()\n  const hinted = await tryLoadHintedWidgetById<LoadedInjectionWidget>(widgetId, isLoadedInjectionWidget, enabledModuleIds)\n  if (hinted.resolved) return hinted.widget\n\n  const index = await loadWidgetLookupIndex()\n  const widget = index.widgetsById.get(widgetId)\n  return widget ? applyRequiredModuleGate(widget, enabledModuleIds) : null\n}\n\nexport async function loadInjectionDataWidgetById(widgetId: string): Promise<LoadedInjectionDataWidget | null> {\n  const enabledModuleIds = getEnabledModuleIdsForInjection()\n  const hinted = await tryLoadHintedWidgetById<LoadedInjectionDataWidget>(widgetId, isLoadedInjectionDataWidget, enabledModuleIds)\n  if (hinted.resolved) return hinted.widget\n\n  const index = await loadWidgetLookupIndex()\n  const widget = index.dataWidgetsById.get(widgetId)\n  return widget ? applyRequiredModuleGate(widget, enabledModuleIds) : null\n}\n\nexport async function loadInjectionWidgetsForSpot(spotId: InjectionSpotId): Promise<LoadedInjectionWidget[]> {\n  const entries = await getResolvedEntriesForSpot(spotId)\n  const widgets: LoadedInjectionWidget[] = []\n  for (const { widgetId, placement, priority } of entries) {\n    const widget = await loadInjectionWidgetById(widgetId)\n    if (!widget) continue\n    const combinedPlacement = placement\n      ? { ...placement, priority: typeof priority === 'number' ? priority : 0 }\n      : { priority: typeof priority === 'number' ? priority : 0 }\n    widgets.push({ ...widget, placement: combinedPlacement })\n  }\n  return widgets\n}\n\nexport async function loadInjectionDataWidgetsForSpot(spotId: InjectionSpotId): Promise<LoadedInjectionDataWidget[]> {\n  const entries = await getResolvedEntriesForSpot(spotId)\n  const widgets: LoadedInjectionDataWidget[] = []\n  for (const { widgetId, placement, priority } of entries) {\n    const widget = await loadInjectionDataWidgetById(widgetId)\n    if (!widget) continue\n    const combinedPlacement = placement\n      ? { ...placement, priority: typeof priority === 'number' ? priority : 0 }\n      : { priority: typeof priority === 'number' ? priority : 0 }\n    widgets.push({ ...widget, placement: combinedPlacement })\n  }\n  return widgets\n}\n"],
+  "mappings": "AACA,SAAS,4BAA4B;AAWrC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,SAAS,EAAE,MAAM,EAAE,WAAW,mBAAmB,CAAC;AAkC9E,IAAI,8BAAmE;AACvE,IAAI,uBAAwF;AAC5F,IAAI,oBAAgD;AACpD,IAAI,4BAA4B;AAChC,MAAM,+BAA+B;AACrC,MAAM,8BAA8B;AACpC,MAAM,gCAAgC;AACtC,MAAM,wCAAwC;AAC9C,MAAM,mCAAmC;AAEzC,SAAS,6BAAkE;AACzE,MAAI;AACF,UAAM,QAAS,WAAuC,4BAA4B;AAClF,WAAO,MAAM,QAAQ,KAAK,IAAK,QAAyC;AAAA,EAC1E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,4BAA4B,SAAuC;AAC1E,MAAI;AACF;AAAC,IAAC,WAAuC,4BAA4B,IAAI;AAAA,EAC3E,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,6BAAyD;AAChE,MAAI;AACF,UAAM,QAAS,WAAuC,6BAA6B;AACnF,QAAI,iBAAiB,IAAK,QAAO;AACjC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,4BAA4B,KAA0B;AAC7D,MAAI;AACF;AAAC,IAAC,WAAuC,6BAA6B,IAAI;AAAA,EAC5E,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,4BAA6F;AACpG,MAAI;AACF,UAAM,QAAS,WAAuC,2BAA2B;AACjF,WAAO,MAAM,QAAQ,KAAK,IAAK,QAAqE;AAAA,EACtG,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,2BAA2B,QAAkE;AACpG,MAAI;AACF;AAAC,IAAC,WAAuC,2BAA2B,IAAI;AAAA,EAC1E,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,qCAAoD;AAC3D,MAAI;AACF,UAAM,QAAS,WAAuC,qCAAqC;AAC3F,WAAO,OAAO,UAAU,WAAW,QAAQ;AAAA,EAC7C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,oCAAoC,SAAiB;AAC5D,MAAI;AACF;AAAC,IAAC,WAAuC,qCAAqC,IAAI;AAAA,EACpF,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,iCAAiC;AACxC,+BAA6B;AAC7B,sCAAoC,yBAAyB;AAC7D,iCAA+B;AAE/B,MAAI,OAAO,WAAW,YAAa;AAEnC,SAAO,cAAc,IAAI,YAAY,kCAAkC;AAAA,IACrE,QAAQ,EAAE,SAAS,0BAA0B;AAAA,EAC/C,CAAC,CAAC;AACJ;AAEO,SAAS,6BAA6B,SAAuC;AAClF,MAAI,gCAAgC,QAAQ,QAAQ,IAAI,aAAa,eAAe;AAClF,WAAO,MAAM,kEAAkE;AAAA,EACjF;AACA,QAAM,eAAe,uCAAuC,OAAO;AACnE,gCAA8B;AAC9B,8BAA4B,YAAY;AACxC,iCAA+B;AACjC;AAEO,SAAS,0BAAwD;AACtE,QAAM,gBAAgB,2BAA2B;AACjD,MAAI,cAAe,QAAO;AAC1B,MAAI,CAAC,6BAA6B;AAEhC,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,CAAC;AAAA,IACV;AACA,UAAM,IAAI,MAAM,sGAAsG;AAAA,EACxH;AACA,SAAO;AACT;AAQO,SAAS,4BACd,QACA,eACA;AACA,MAAI,yBAAyB,QAAQ,QAAQ,IAAI,aAAa,eAAe;AAC3E,WAAO,MAAM,iEAAiE;AAAA,EAChF;AACA,QAAM,cAAc,sCAAsC,QAAQ,QAAW,aAAa;AAC1F,yBAAuB;AACvB,6BAA2B,WAAW;AACtC,iCAA+B;AACjC;AAWO,SAAS,yBAAyB,WAA6B;AACpE,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,YAAY,WAAW;AAChC,QAAI,OAAO,aAAa,YAAY,SAAS,SAAS,EAAG,MAAK,IAAI,QAAQ;AAAA,EAC5E;AACA,MAAI,sBAAsB,QAAQ,QAAQ,IAAI,aAAa,eAAe;AACxE,WAAO,MAAM,8DAA8D;AAAA,EAC7E;AACA,sBAAoB;AACpB,8BAA4B,IAAI;AAChC,iCAA+B;AACjC;AAEO,SAAS,sBAAkD;AAChE,SAAO,2BAA2B,KAAK;AACzC;AAEO,SAAS,8BAAsC;AACpD,QAAM,gBAAgB,mCAAmC;AACzD,MAAI,kBAAkB,KAAM,QAAO;AACnC,SAAO;AACT;AAEA,MAAM,qCAAqC,oBAAI,IAAgB;AAC/D,IAAI,uCAAuC;AAE3C,SAAS,+CAA+C;AAEtD,aAAW,cAAc,MAAM,KAAK,kCAAkC,GAAG;AACvE,eAAW;AAAA,EACb;AACF;AAWO,SAAS,oCAAoC,UAAkC;AACpF,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO,MAAM;AAAA,IAAC;AAAA,EAChB;AAEA,qCAAmC,IAAI,QAAQ;AAC/C,MAAI,CAAC,sCAAsC;AACzC,WAAO,iBAAiB,kCAAkC,4CAA4C;AACtG,2CAAuC;AAAA,EACzC;AAEA,SAAO,MAAM;AACX,uCAAmC,OAAO,QAAQ;AAClD,QAAI,mCAAmC,SAAS,KAAK,sCAAsC;AACzF,aAAO,oBAAoB,kCAAkC,4CAA4C;AACzG,6CAAuC;AAAA,IACzC;AAAA,EACF;AACF;AAEO,SAAS,yBAAmF;AACjG,QAAM,eAAe,0BAA0B;AAC/C,MAAI,aAAc,QAAO;AACzB,MAAI,CAAC,sBAAsB;AAEzB,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,CAAC;AAAA,IACV;AACA,UAAM,IAAI,MAAM,oGAAoG;AAAA,EACtH;AACA,SAAO;AACT;AAEA,IAAI,uBAAsD;AAW1D,IAAI,wBAA4E;AAKhF,IAAI,2BAA4F;AAEhG,SAAS,sBAAsB,OAAyG;AACtI,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,cAAc;AACtE;AAMO,SAAS,iCAAiC;AAC/C,yBAAuB;AACvB,0BAAwB;AACxB,6BAA2B;AAC3B,cAAY,MAAM;AAClB,4BAA0B,MAAM;AAClC;AAEA,eAAe,oBAA4C;AACzD,MAAI,CAAC,sBAAsB;AACzB,UAAM,UAAU,QAAQ,QAAQ,EAAE;AAAA,MAAK,MACrC,wBAAwB,EAAE,IAAI,CAAC,WAAW;AAAA,QACxC,GAAG;AAAA,QACH,UAAU,MAAM,YAAY;AAAA,MAC9B,EAAE;AAAA,IACJ;AACA,2BAAuB,QAAQ,MAAM,CAAC,QAAQ;AAC5C,UAAI,yBAAyB,SAAS;AACpC,+BAAuB;AAAA,MACzB;AACA,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAEA,eAAe,qBAAkE;AAC/E,MAAI,CAAC,uBAAuB;AAC1B,UAAM,UAAU,QAAQ,QAAQ,EAAE,KAAK,MAAM;AAC3C,YAAM,OAAO,uBAAuB;AACpC,YAAM,QAAQ,oBAAI,IAAmC;AAErD,iBAAW,SAAS,MAAM;AACxB,cAAM,iBAAiB,MAAM,SAAS,CAAC;AACvC,mBAAW,CAAC,QAAQ,SAAS,KAAK,OAAO,QAAQ,cAAc,GAAG;AAChE,gBAAM,UAAU,MAAM,QAAQ,SAAS,IAAI,YAAY,CAAC,SAAS;AACjE,gBAAM,WAAW,MAAM,IAAI,MAAM,KAAK,CAAC;AACvC,qBAAW,eAAe,SAAS;AACjC,gBAAI,OAAO,gBAAgB,UAAU;AACnC,uBAAS,KAAK,EAAE,UAAU,aAAa,UAAU,MAAM,UAAU,UAAU,EAAE,CAAC;AAC9E;AAAA,YACF;AACA,gBAAI,sBAAsB,WAAW,GAAG;AACtC,oBAAM,EAAE,UAAU,WAAW,GAAG,GAAG,UAAU,IAAI;AACjD,uBAAS,KAAK;AAAA,gBACZ;AAAA,gBACA,UAAU,MAAM;AAAA,gBAChB,UAAU,OAAO,aAAa,WAAW,WAAW;AAAA,gBACpD;AAAA,cACF,CAAC;AACD;AAAA,YACF;AAAA,UACF;AACA,gBAAM,IAAI,QAAQ,QAAQ;AAAA,QAC5B;AAAA,MACF;AAEA,iBAAW,CAAC,QAAQ,OAAO,KAAK,MAAM,QAAQ,GAAG;AAC/C,cAAM,IAAI,QAAQ,QAAQ,KAAK,CAAC,GAAG,OAAO,EAAE,YAAY,MAAM,EAAE,YAAY,EAAE,CAAC;AAAA,MACjF;AAEA,aAAO;AAAA,IACT,CAAC;AACD,4BAAwB,QAAQ,MAAM,CAAC,QAAQ;AAC7C,UAAI,0BAA0B,SAAS;AACrC,gCAAwB;AAAA,MAC1B;AACA,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAEA,MAAM,cAAc,oBAAI,IAAiG;AAEzH,SAAS,mBAAmB,QAAmE;AAC7F,QAAM,OAAO;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,SAAO,KAAK,KAAK,CAAC,QAAQ,OAAO,MAAM;AACzC;AAEA,SAAS,2BAA2B,KAAc,KAAa,UAAgG;AAC7J,MAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,UAAM,IAAI,MAAM,oCAAoC,GAAG,WAAW,QAAQ,4BAA4B;AAAA,EACxG;AACA,QAAM,SAAU,IAAyD,WAAY;AACrF,MAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,UAAM,IAAI,MAAM,oCAAoC,GAAG,WAAW,QAAQ,4BAA4B;AAAA,EACxG;AACA,MAAI,EAAE,cAAc,WAAW,CAAC,OAAO,YAAY,OAAO,OAAO,aAAa,UAAU;AACtF,UAAM,IAAI,MAAM,qBAAqB,GAAG,WAAW,QAAQ,uBAAuB;AAAA,EACpF;AACA,QAAM,WAAW,OAAO;AACxB,MAAI,OAAO,SAAS,OAAO,YAAY,SAAS,GAAG,WAAW,GAAG;AAC/D,UAAM,IAAI,MAAM,qBAAqB,GAAG,WAAW,QAAQ,0CAA0C;AAAA,EACvG;AACA,QAAM,aAAa;AAAA,IACjB,GAAG;AAAA,IACH;AAAA,EACF;AAEA,MAAI,YAAY,cAAc,OAAO,WAAW,WAAW,YAAY;AACrE,QAAI,OAAO,SAAS,UAAU,YAAY,SAAS,MAAM,WAAW,GAAG;AACrE,YAAM,IAAI,MAAM,qBAAqB,SAAS,EAAE,WAAW,QAAQ,qBAAqB;AAAA,IAC1F;AACA,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,mBAAmB,UAAqC,GAAG;AAC9D,UAAM,IAAI;AAAA,MACR,qBAAqB,SAAS,EAAE,WAAW,QAAQ;AAAA,IACrD;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,wBACP,QAC8B;AAC9B,SAAO,YAAY,UAAU,OAAO,OAAO,WAAW;AACxD;AAEA,SAAS,4BACP,QACkC;AAClC,SAAO,CAAC,wBAAwB,MAAM;AACxC;AAEA,eAAe,UAAU,OAAyG;AAChI,MAAI,CAAC,YAAY,IAAI,MAAM,GAAG,GAAG;AAC/B,UAAM,UAAU,QAAQ,QAAQ,EAC7B,KAAK,MAAM,MAAM,OAAO,CAAC,EACzB,KAAK,CAAC,QAAQ,2BAA2B,KAAK,MAAM,KAAK,MAAM,QAAQ,CAAC;AAC3E,gBAAY,IAAI,MAAM,KAAK,OAAO;AAAA,EACpC;AACA,SAAO,YAAY,IAAI,MAAM,GAAG;AAClC;AAEA,eAAe,wBAAoD;AACjE,QAAM,UAAU,4BAA4B;AAC5C,MAAI,CAAC,4BAA4B,yBAAyB,YAAY,SAAS;AAC7E,UAAM,UAAU,QAAQ,QAAQ,EAAE,KAAK,YAAY;AACjD,YAAM,gBAAgB,MAAM,kBAAkB;AAC9C,YAAM,UAAU,MAAM,QAAQ,WAAW,cAAc,IAAI,CAAC,UAAU,UAAU,KAAK,CAAC,CAAC;AACvF,YAAM,cAAc,oBAAI,IAAmC;AAC3D,YAAM,kBAAkB,oBAAI,IAAuC;AAEnE,cAAQ,QAAQ,CAAC,QAAQ,UAAU;AACjC,YAAI,OAAO,WAAW,YAAa;AACnC,cAAM,QAAQ,cAAc,KAAK;AACjC,cAAM,SAAS,OAAO;AACtB,YAAI,wBAAwB,MAAM,GAAG;AACnC,cAAI,CAAC,YAAY,IAAI,OAAO,SAAS,EAAE,GAAG;AACxC,wBAAY,IAAI,OAAO,SAAS,IAAI,EAAE,GAAG,QAAQ,UAAU,MAAM,UAAU,KAAK,MAAM,IAAI,CAAC;AAAA,UAC7F;AACA;AAAA,QACF;AACA,YAAI,CAAC,gBAAgB,IAAI,OAAO,SAAS,EAAE,GAAG;AAC5C,0BAAgB,IAAI,OAAO,SAAS,IAAI,EAAE,GAAG,QAAQ,UAAU,MAAM,UAAU,KAAK,MAAM,IAAI,CAAC;AAAA,QACjG;AAAA,MACF,CAAC;AAED,aAAO,EAAE,aAAa,gBAAgB;AAAA,IACxC,CAAC;AACD,+BAA2B,EAAE,SAAS,QAAQ;AAAA,EAChD;AACA,SAAO,yBAAyB;AAClC;AAEA,SAAS,wBACP,QACA,kBACU;AACV,QAAM,UAAU,6BAA6B,OAAO,UAAU,gBAAgB;AAC9E,MAAI,QAAQ,SAAS,GAAG;AACtB,sBAAkB,OAAO,SAAS,IAAI,OAAO;AAC7C,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAMA,eAAe,wBACb,UACA,gBACA,kBACgC;AAChC,QAAM,gBAAgB,MAAM,kBAAkB;AAC9C,QAAM,QAAQ,cAAc,KAAK,CAAC,cAAc,UAAU,aAAa,QAAQ;AAC/E,MAAI,CAAC,MAAO,QAAO,EAAE,UAAU,MAAM;AAErC,QAAM,SAAS,MAAM,UAAU,KAAK,EAAE,MAAM,MAAM,IAAI;AACtD,MAAI,CAAC,UAAU,OAAO,SAAS,OAAO,YAAY,CAAC,eAAe,MAAM,GAAG;AACzE,WAAO,EAAE,UAAU,MAAM;AAAA,EAC3B;AAEA,QAAM,SAAS,EAAE,GAAG,QAAQ,UAAU,MAAM,UAAU,KAAK,MAAM,IAAI;AACrE,SAAO,EAAE,UAAU,MAAM,QAAQ,wBAAwB,QAAQ,gBAAgB,EAAE;AACrF;AAEA,SAAS,kCAAuD;AAK9D,QAAM,WAAW,2BAA2B,KAAK;AACjD,MAAI,SAAU,QAAO;AAOrB,QAAM,UAAU,oBAAI,IAAY;AAChC,QAAM,SAAS,0BAA0B,KAAK,wBAAwB,CAAC;AACvE,aAAW,SAAS,QAAQ;AAC1B,QAAI,OAAO,SAAU,SAAQ,IAAI,MAAM,QAAQ;AAAA,EACjD;AACA,QAAM,UAAU,2BAA2B,KAAK,+BAA+B,CAAC;AAChF,aAAW,SAAS,SAAS;AAC3B,QAAI,OAAO,SAAU,SAAQ,IAAI,MAAM,QAAQ;AAAA,EACjD;AACA,SAAO;AACT;AAEA,SAAS,6BACP,UACA,kBACU;AACV,QAAM,WAAW,SAAS;AAC1B,MAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,WAAW,EAAG,QAAO,CAAC;AAC/D,QAAM,UAAoB,CAAC;AAC3B,aAAW,YAAY,UAAU;AAC/B,QAAI,OAAO,aAAa,YAAY,SAAS,WAAW,EAAG;AAC3D,QAAI,CAAC,iBAAiB,IAAI,QAAQ,EAAG,SAAQ,KAAK,QAAQ;AAAA,EAC5D;AACA,SAAO;AACT;AAEA,MAAM,4BAA4B,oBAAI,IAAY;AAElD,SAAS,kBAAkB,YAAoB,gBAA0B;AACvE,QAAM,MAAM,GAAG,UAAU,IAAI,eAAe,KAAK,GAAG,CAAC;AACrD,MAAI,0BAA0B,IAAI,GAAG,EAAG;AACxC,4BAA0B,IAAI,GAAG;AACjC,MAAI,QAAQ,IAAI,aAAa,eAAe;AAC1C,WAAO,MAAM,yDAAoD,EAAE,YAAY,eAAe,CAAC;AAAA,EACjG;AACF;AAEA,eAAe,0BAA0B,QAAgD;AACvF,QAAM,QAAQ,MAAM,mBAAmB;AACvC,QAAM,eAAe,MAAM,IAAI,MAAM,KAAK,CAAC;AAC3C,QAAM,kBAAgC,CAAC;AAEvC,aAAW,CAAC,iBAAiB,gBAAgB,KAAK,MAAM,QAAQ,GAAG;AACjE,QAAI,oBAAoB,OAAQ;AAChC,QAAI,CAAC,gBAAgB,SAAS,GAAG,EAAG;AACpC,QAAI,CAAC,qBAAqB,QAAQ,eAAe,EAAG;AACpD,oBAAgB,KAAK,GAAG,gBAAgB;AAAA,EAC1C;AAEA,QAAM,iBAAiB,oBAAI,IAAwB;AACnD,aAAW,SAAS,CAAC,GAAG,cAAc,GAAG,eAAe,GAAG;AACzD,UAAM,WAAW,GAAG,MAAM,QAAQ,IAAI,MAAM,QAAQ;AACpD,UAAM,WAAW,eAAe,IAAI,QAAQ;AAC5C,QAAI,CAAC,aAAa,MAAM,YAAY,MAAM,SAAS,YAAY,IAAI;AACjE,qBAAe,IAAI,UAAU,KAAK;AAAA,IACpC;AAAA,EACF;AAEA,SAAO,MAAM,KAAK,eAAe,OAAO,CAAC,EAAE,KAAK,CAAC,GAAG,OAAO,EAAE,YAAY,MAAM,EAAE,YAAY,EAAE;AACjG;AAEA,eAAsB,0BAA4D;AAChF,QAAM,gBAAgB,MAAM,kBAAkB;AAC9C,QAAM,mBAAmB,gCAAgC;AACzD,QAAM,SAAS,MAAM,QAAQ;AAAA,IAC3B,cAAc,IAAI,OAAO,UAAU;AACjC,YAAM,SAAS,MAAM,UAAU,KAAK;AACpC,UAAI,CAAC,wBAAwB,MAAM,EAAG,QAAO;AAC7C,YAAM,UAAU,6BAA6B,OAAO,UAAU,gBAAgB;AAC9E,UAAI,QAAQ,SAAS,GAAG;AACtB,0BAAkB,OAAO,SAAS,IAAI,OAAO;AAC7C,eAAO;AAAA,MACT;AACA,aAAO,EAAE,GAAG,QAAQ,UAAU,MAAM,UAAU,KAAK,MAAM,IAAI;AAAA,IAC/D,CAAC;AAAA,EACH;AACA,QAAM,OAAO,oBAAI,IAAmC;AACpD,aAAW,UAAU,QAAQ;AAC3B,QAAI,CAAC,OAAQ;AACb,QAAI,CAAC,KAAK,IAAI,OAAO,SAAS,EAAE,GAAG;AACjC,WAAK,IAAI,OAAO,SAAS,IAAI,MAAM;AAAA,IACrC;AAAA,EACF;AACA,SAAO,MAAM,KAAK,KAAK,OAAO,CAAC;AACjC;AAEA,eAAsB,wBAAwB,UAAyD;AACrG,QAAM,mBAAmB,gCAAgC;AACzD,QAAM,SAAS,MAAM,wBAA+C,UAAU,yBAAyB,gBAAgB;AACvH,MAAI,OAAO,SAAU,QAAO,OAAO;AAEnC,QAAM,QAAQ,MAAM,sBAAsB;AAC1C,QAAM,SAAS,MAAM,YAAY,IAAI,QAAQ;AAC7C,SAAO,SAAS,wBAAwB,QAAQ,gBAAgB,IAAI;AACtE;AAEA,eAAsB,4BAA4B,UAA6D;AAC7G,QAAM,mBAAmB,gCAAgC;AACzD,QAAM,SAAS,MAAM,wBAAmD,UAAU,6BAA6B,gBAAgB;AAC/H,MAAI,OAAO,SAAU,QAAO,OAAO;AAEnC,QAAM,QAAQ,MAAM,sBAAsB;AAC1C,QAAM,SAAS,MAAM,gBAAgB,IAAI,QAAQ;AACjD,SAAO,SAAS,wBAAwB,QAAQ,gBAAgB,IAAI;AACtE;AAEA,eAAsB,4BAA4B,QAA2D;AAC3G,QAAM,UAAU,MAAM,0BAA0B,MAAM;AACtD,QAAM,UAAmC,CAAC;AAC1C,aAAW,EAAE,UAAU,WAAW,SAAS,KAAK,SAAS;AACvD,UAAM,SAAS,MAAM,wBAAwB,QAAQ;AACrD,QAAI,CAAC,OAAQ;AACb,UAAM,oBAAoB,YACtB,EAAE,GAAG,WAAW,UAAU,OAAO,aAAa,WAAW,WAAW,EAAE,IACtE,EAAE,UAAU,OAAO,aAAa,WAAW,WAAW,EAAE;AAC5D,YAAQ,KAAK,EAAE,GAAG,QAAQ,WAAW,kBAAkB,CAAC;AAAA,EAC1D;AACA,SAAO;AACT;AAEA,eAAsB,gCAAgC,QAA+D;AACnH,QAAM,UAAU,MAAM,0BAA0B,MAAM;AACtD,QAAM,UAAuC,CAAC;AAC9C,aAAW,EAAE,UAAU,WAAW,SAAS,KAAK,SAAS;AACvD,UAAM,SAAS,MAAM,4BAA4B,QAAQ;AACzD,QAAI,CAAC,OAAQ;AACb,UAAM,oBAAoB,YACtB,EAAE,GAAG,WAAW,UAAU,OAAO,aAAa,WAAW,WAAW,EAAE,IACtE,EAAE,UAAU,OAAO,aAAa,WAAW,WAAW,EAAE;AAC5D,YAAQ,KAAK,EAAE,GAAG,QAAQ,WAAW,kBAAkB,CAAC;AAAA,EAC1D;AACA,SAAO;AACT;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/shared",
-  "version": "0.9.1-develop.7574.1.837288eec1",
+  "version": "0.10.1-develop.7576.1.21d5b50435",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -8,7 +8,6 @@
     "build": "node build.mjs",
     "watch": "node watch.mjs",
     "test": "jest --config jest.config.cjs",
-    "test:pg-integration": "cross-env OM_PG_INTEGRATION=1 jest --config jest.config.cjs --runInBand 'src/lib/db/__tests__/advisoryLock\\.integration\\.test\\.ts$'",
     "typecheck": "tsc --noEmit"
   },
   "exports": {
@@ -65,10 +64,6 @@
       "types": "./src/lib/db/duplicateEntityClassNames.ts",
       "default": "./dist/lib/db/duplicateEntityClassNames.js"
     },
-    "./lib/db/advisoryLock": {
-      "types": "./src/lib/db/advisoryLock.ts",
-      "default": "./dist/lib/db/advisoryLock.js"
-    },
     "./lib/data/consistency": {
       "types": "./src/lib/data/consistency.ts",
       "default": "./dist/lib/data/consistency.js"
@@ -126,7 +121,7 @@
     "@mikro-orm/core": "^7.1.14",
     "@mikro-orm/decorators": "^7.1.14",
     "@mikro-orm/postgresql": "^7.1.14",
-    "@open-mercato/cache": "0.9.1-develop.7574.1.837288eec1",
+    "@open-mercato/cache": "0.10.1-develop.7576.1.21d5b50435",
     "@types/html-to-text": "^9.0.4",
     "@types/sanitize-html": "^2.16.1",
     "dotenv": "^17.4.2",
@@ -141,10 +136,8 @@
   },
   "devDependencies": {
     "@types/jest": "^30.0.0",
-    "cross-env": "^10.1.0",
     "jest": "^30.4.2",
     "language-subtag-registry": "^0.3.20",
-    "testcontainers": "^12.0.3",
     "ts-jest": "^29.4.12",
     "ts-morph": "^28.0.0",
     "typescript": "7.0.2"
@@ -157,5 +150,5 @@
     "url": "https://github.com/open-mercato/open-mercato",
     "directory": "packages/shared"
   },
-  "stableVersion": "0.9.0"
+  "stableVersion": "0.10.0"
 }