@bytebrand/export-cars 1.26.39 → 1.26.41

package/docs/autouncle/AUDIT.md

@@ -41,7 +41,7 @@ Dry-run is the default and writes `resources/autouncle-dryrun/`, which no Cronic
 
 | Key | Source | Before | Now | Open |
 |---|---|---|---|---|
-| back_link | CBD `_id` | `https://www.<domain>/search/vehicle/<_id>?source=classifieds&medium=cpc&campaign=autouncle` | same; stable across runs | UTM pattern = Confluence 2.7.2; others existed (ACF-3650/6172) → Q8 |
+| back_link | CBD `_id` | `https://www.<domain>/search/vehicle/<_id>?source=classifieds&medium=cpc&campaign=autouncle` | stable across runs; since 1.26.41 (ADV-324) `?source=autouncle&medium=listing&campaign=listing&utm_source=autouncle&utm_medium=listing&utm_campaign=listing` | pending AutoUncle approval → Q8 |
 | make / model_name / model_variant | mainData.make / model / subModel | raw | same | `SONSTIGE` placeholder models are exported (data) → Q9 |
 | fuel / body / gear_type | consumption.fuel / mainData.category / driveSuspension.gearbox | fixed maps; an unmapped or null selector made the key **disappear** from JSON | unmapped/null → `Other` / `other` | enum values → Q6 |
 | doors | mainData.doors | string | same | |
@@ -58,8 +58,9 @@ Dry-run is the default and writes `resources/autouncle-dryrun/`, which no Cronic
 | seller_region / city / street_address / postcode | UPA businessAddress, else mainAddress; region from the postal code table | if the table did not know the place, street/city/zip were **blanked** (664/1044 DEV cars) | dealer's own values kept, region `Deutschland` | |
 | description | offer.offerDescription | raw | same; 192/1002 empty on DEV, some contain literal `\\` line breaks (dealer data) | → Q10 |
 | images | Imbo images | default profile: `/large` (format negotiated, can be WebP), padded with **3 noimage placeholders** below 17 photos (2820 placeholder URLs on DEV) | `[{url}]`, ADV-336 clean profile, explicit `large-cached.jpeg`, every URL checked (200 + image/jpeg|png); no valid 3/4 hero → car not sent | limits → ADV-323 gate |
-| fuel_economy / co2_emission | consumption.consumptionCombined / environmentEmissions.co2 | raw | same | |
-| co2_effiency_class / euro_emission_class / enviromental_sticker | environmentEmissions.* | raw selector keys (`selector_energyEfficiencyClass_d`) | same (no schema to translate to) | → Q6 |
+| fuel_economy / co2_emission | consumption.consumptionCombined / environmentEmissions.co2 | raw legacy fields; a BEV sent its kWh (CBD mirrors it into consumptionCombined) as fuel economy | since 1.26.41: the Google feed's EnVKV picks as plain numbers (WLTP first, legacy only as fallback; confirmed plug-in weighted); BEV: fuel `""`, CO₂ `0`; estimated values withheld by the publication gate (enforce) | units → Q6 |
+| co2_effiency_class | environmentEmissions.wltpEnergyEfficiencyClass (ADV-187) | raw | same; `""` when the CO₂ value is withheld (the class is derived from CO₂) | → Q6 |
+| euro_emission_class / enviromental_sticker | environmentEmissions.* | raw selector keys | same (no schema to translate to) | → Q6 |
 
 Car-level exclusions (new, counted in the report): `duplicate_id`, `filtered`, `no_id`, `no_dealer`,
 `reserved_or_sold` (offer.offerAvailability reserved/sold), `no_valid_price`, `no_valid_image`.
@@ -76,6 +77,9 @@ Car-level exclusions (new, counted in the report): `duplicate_id`, `filtered`, `
 8. Fail-closed: no `emptyDir`; empty / partial / stale snapshot, empty result or a drop > 20 % against the
    last good run → run blocked (exit 1, `3.1` copy does not run), last good file stays. Lock per state dir.
 9. Dry-run default; live only with `autouncleDryRun=false`.
+10. (1.26.41, 10.11) EnVKV: WLTP picks + EnVKV C8 publication gate (same params as the Google job). A live run
+    refuses to start without `publicationGate=enforce`. The run report has `envkv.estimated` per attribute.
+11. (1.26.41, 10.11) `back_link` parameters per ADV-324 (partner in `source`, identical utm pair).
 
 ## 5. Evidence
 

package/docs/autouncle/PARTNER-QUESTIONS.md

@@ -33,7 +33,9 @@ ingestion contract and is not used as one.
    registration date "new"?
 8. **Unique key and links.** Which field is the unique ad key on your side — `back_link`, or should we add a
    stable vehicle id? Which UTM parameters do you want on `back_link` (historic:
-   `source=classifieds&medium=cpc&campaign=autouncle`)? Do you need a click id passed through?
+   `source=classifieds&medium=cpc&campaign=autouncle`; proposed and on DEV since 1.26.41:
+   `source=autouncle&medium=listing&campaign=listing` plus the same values as `utm_*`)? Do you need a click id
+   passed through?
 9. How do you treat ads whose model is unknown (our placeholder "SONSTIGE")? Exclude or send?
 10. Optional fields: do you use `leasing`, `has_4wd`, `description` (German text), and do you support
     structured financing offers (rate, duration, deposit, balloon, mileage, APR with legal disclosures) instead

package/docs/autouncle/RUNBOOK.md

@@ -15,6 +15,8 @@ Not activated. Nothing below has been done on any Cronicle host.
 | `feedGuardMaxSourceAgeHours` | 26 | newest base export chunk must be younger |
 | `feedGuardMaxStaleHours` | 48 | last good file reported STALE after this |
 | `feedGuardAcceptDrop` | off | `true` for ONE run after a real stock drop |
+| `publicationGate` | off | `audit` counts estimated EnVKV values, `enforce` sends them empty. **A live run needs `enforce`** (config error otherwise). enforce fails the run if the enrichment log cannot be read |
+| `publicationGateBqProject` / `…Dataset` / `…Table` | — | CBD enrichment log table, same values as the Google job; required for audit / enforce |
 
 `String` / `Number` rules stay as they are (PROD: dealer allow-list + `metaData.imagesCount:2`).
 

package/docs/criteo/RUNBOOK.md

@@ -0,0 +1,86 @@
+# Criteo catalog feed — runbook (ADV-319)
+
+Status 06.11.2026, `@bytebrand/export-cars` 1.26.40. DEV only; PROD events `4.0` / `4.1` are disabled
+and no Criteo account, contract or importer test exists yet. Nothing here allows a live upload.
+
+## What the job does
+
+`4.0 export criteo - part 1` (`exportType=criteo`) reads the base export snapshot
+(`resources/cars-export/cars.<n>.json`) and writes the legacy Criteo RSS/XML file
+`resources/criteo-export/api_export_cars_criteo.xml`. The chained `4.1 Export criteo - part 2` uploads that
+file. Format, enums and field order are the legacy ones (decision 20.10.2026: restore as before).
+
+Per car, in this order (first match wins, counted in `excluded`):
+
+| Reason | Rule |
+|---|---|
+| `no_id` | empty `_id` |
+| `duplicate_id` | `_id` already seen in this run (first one is kept) |
+| `filtered` | shared partner filter: `metaData.imagesCount > 0` and the Cronicle rule params |
+| `reserved_or_sold` | `offer.offerAvailability` is reserved or sold (Criteo 16.10: only marketable stock) |
+| `no_valid_price` | `price.currentSalesPrice` missing, not a number or ≤ 0 |
+| `no_marketing_image` | no generated `criteo-<id>.jpg`; no noimage placeholder is ever sent |
+
+A car that went offline is not in the snapshot, so it is missing from the next full file; Criteo's next
+full import removes it. `published-ids.json` keeps the ids of the last published file, and the report
+lists `ids.added` / `ids.removed` / `ids.kept` (+ up to 20 removed ids) for each run.
+
+Item fields: `installment` and `custom_label_0` only when the car has a real rate (months and amount > 0);
+`energy_efficiency_class` only for a known WLTP class.
+
+## Fail-closed guard
+
+Shared `FeedGuard` (same as meinestadt / AutoUncle / OpenAI). The new XML is written to
+`api_export_cars_criteo.xml.tmp` and renamed over the published file only after all checks passed; the
+previous file is kept as `.prev`. A blocked run keeps the published file, moves the temp file to
+`.rejected`, and **fails the job** (Cronicle code 1), so `4.1` does not upload anything.
+
+| Code | Meaning | Action |
+|---|---|---|
+| `source_empty` | no snapshot chunk files (base export failed / wiped) | fix the base export, re-run |
+| `source_partial` | chunk files with gaps | re-run the base export |
+| `source_stale` | newest chunk older than `feedGuardMaxSourceAgeHours` (26) | base export did not run |
+| `source_too_small` | snapshot below `feedGuardMinSourceItems` (1000) | check the base export |
+| `published_too_small` | fewer items than `feedGuardMinPublishedItems` (500), e.g. all reserved/sold | check stock / images |
+| `count_drop` | source or items dropped by more than `feedGuardMaxDropPercent` (20 %) vs last good | if the stock really dropped: re-run once with `feedGuardAcceptDrop=true` |
+| `locked` | another run holds `resources/criteo-state/run.lock` (stale after 6 h) | wait / check the other job |
+
+Stale fallback: each report carries `lastGoodAgeHours`; after `feedGuardMaxStaleHours` (48) without a
+successful run, `stale: true` and the log line `criteo feed STALE`. The job itself already failed on every
+blocked run, which is the alert. Whether Criteo should then get an empty file (to stop advertising
+old stock) is an open partner question, not built.
+
+All thresholds are Cronicle params of the `4.0` event (`feedGuardMinSourceItems`,
+`feedGuardMinPublishedItems`, `feedGuardMaxDropPercent`, `feedGuardMaxSourceAgeHours`,
+`feedGuardMaxStaleHours`, `feedGuardAcceptDrop`).
+
+## Files
+
+| Path (relative to `/opt/cronicle`) | Content |
+|---|---|
+| `resources/criteo-export/api_export_cars_criteo.xml` | published file (what `4.1` uploads) |
+| `resources/criteo-export/api_export_cars_criteo.xml.prev` | file before the last publish |
+| `resources/criteo-export/api_export_cars_criteo.xml.rejected` | output of the last blocked run |
+| `resources/criteo-state/last-good.json` | counts + time of the last publish |
+| `resources/criteo-state/last-run-report.json` | report of the last run (also printed as `criteo feed report: {...}`) |
+| `resources/criteo-state/published-ids.json` | ids of the published file |
+
+Report metrics: source chunk age (`source.ageHours`), run time (`durationMs`), source cars, items,
+exclusions by reason, items with a rate, items without energy class, id changes, last good age.
+Criteo's accepted / rejected records come from the Criteo importer, not from this job.
+
+## Rollback
+
+1. Code: `sudo npm --prefix /opt/cronicle install @bytebrand/export-cars@<previous> --prefer-online`
+   (DEV before this release: 1.26.39). Only the export-cars package changes; back up
+   `/opt/cronicle/package.json` and `package-lock.json` first.
+2. File: `cp resources/criteo-export/api_export_cars_criteo.xml.prev resources/criteo-export/api_export_cars_criteo.xml`.
+3. State: `resources/criteo-state/` can be deleted; the next run then has no last good counts (no drop check
+   once) and reports all ids as added.
+
+## Tests
+
+`test/criteo-mapping.test.ts` (item mapping) and `test/criteo-feed-run.test.ts`: 20 anonymized DEV cars
+(`test/fixtures/criteo-20-cases.json`, synthetic ids, mapping fields only) plus sold, reserved, offline,
+no image, price change, invalid price, duplicate id, missing id, source outage, partial / stale snapshot,
+count drop + acceptDrop, empty stock, lock, stale last good, atomic publish. Run: `npm test`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bytebrand/export-cars",
-  "version": "1.26.39",
+  "version": "1.26.41",
   "description": "",
   "author": "bytebrand",
   "license": "UNLICENSED",
@@ -11,7 +11,7 @@
     "format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\"",
     "lint": "eslint -c .eslintrc.js --ext .ts src/",
     "start:dev": "nest start --watch",
-    "test": "ts-node --transpile-only test/google-feed-envkv.test.ts && ts-node --transpile-only test/google-feed-item-row.test.ts && ts-node --transpile-only test/publication-gate.test.ts && ts-node --transpile-only test/images-regression.test.ts && ts-node --transpile-only test/clean-images.test.ts && ts-node --transpile-only test/image-url-validator.test.ts && ts-node --transpile-only test/openai-image-fields.test.ts && ts-node --transpile-only test/openai-ads-mapping.test.ts && ts-node --transpile-only test/openai-ads-feed-run.test.ts && ts-node --transpile-only test/openai-ads-finance.test.ts && ts-node --transpile-only test/openai-ads-price-cap.test.ts && ts-node --transpile-only test/meinstadt-mapping.test.ts && ts-node --transpile-only test/meinstadt-feed-run.test.ts && ts-node --transpile-only test/autouncle-mapping.test.ts && ts-node --transpile-only test/autouncle-feed-run.test.ts && ts-node --transpile-only test/criteo-images.test.ts && ts-node --transpile-only test/criteo-mapping.test.ts"
+    "test": "ts-node --transpile-only test/google-feed-envkv.test.ts && ts-node --transpile-only test/google-feed-item-row.test.ts && ts-node --transpile-only test/publication-gate.test.ts && ts-node --transpile-only test/images-regression.test.ts && ts-node --transpile-only test/clean-images.test.ts && ts-node --transpile-only test/image-url-validator.test.ts && ts-node --transpile-only test/openai-image-fields.test.ts && ts-node --transpile-only test/openai-ads-mapping.test.ts && ts-node --transpile-only test/openai-ads-feed-run.test.ts && ts-node --transpile-only test/openai-ads-finance.test.ts && ts-node --transpile-only test/openai-ads-price-cap.test.ts && ts-node --transpile-only test/meinstadt-mapping.test.ts && ts-node --transpile-only test/meinstadt-feed-run.test.ts && ts-node --transpile-only test/autouncle-mapping.test.ts && ts-node --transpile-only test/autouncle-feed-run.test.ts && ts-node --transpile-only test/criteo-images.test.ts && ts-node --transpile-only test/criteo-mapping.test.ts && ts-node --transpile-only test/criteo-feed-run.test.ts"
   },
   "dependencies": {
     "@bytebrand/autode-request": "^1.19.2",

package/src/configs/autouncle.config.ts

@@ -1,7 +1,7 @@
 import { toNumber } from 'lodash';
 
 import { ExportType, FileType, ImageType } from '../enums';
-import { Params } from '../interfaces/params.interface';
+import { Params, PublicationGateConfig } from '../interfaces/params.interface';
 import { FeedGuardOptions } from '../services/feed-guard';
 import { Config } from './config';
 
@@ -55,8 +55,33 @@ export class AutouncleConfig extends Config {
       maxStaleHours: positiveNumber(params.feedGuardMaxStaleHours, AUTOUNCLE_DEFAULTS.maxStaleHours),
       acceptDrop: text(params.feedGuardAcceptDrop).toLowerCase() === 'true',
     };
+    this.publicationGate = parsePublicationGate(params);
+    // ADV-322 "do not guess emissions": a live file never goes out with unchecked EnVKV estimates.
+    if (!this.dryRun && this.publicationGate?.mode !== 'enforce') {
+      throw new Error('a live AutoUncle run (autouncleDryRun=false) needs publicationGate=enforce');
+    }
     this.outputFiles = [
       `${this.pathesConfig.localConvertedDirectory}/api_export_cars_${ExportType.AUTOUNCLE}.${FileType.JSON}`,
     ];
   }
 }
+
+// Same params and rules as the Google job (GoogleConfig): off by default; audit / enforce need the
+// enrichment log table (publicationGateBqProject / Dataset / Table).
+function parsePublicationGate(params: Params): PublicationGateConfig | undefined {
+  const mode = text(params.publicationGate).toLowerCase();
+  if (!mode || mode === 'off') return undefined;
+  if (mode !== 'audit' && mode !== 'enforce') {
+    throw new Error(`publicationGate must be off, audit or enforce, got "${mode}"`);
+  }
+  const gate = {
+    mode: mode as PublicationGateConfig['mode'],
+    project: text(params.publicationGateBqProject),
+    dataset: text(params.publicationGateBqDataset),
+    table: text(params.publicationGateBqTable),
+  };
+  if (!gate.project || !gate.dataset || !gate.table) {
+    throw new Error(`publicationGate=${mode} needs publicationGateBqProject, publicationGateBqDataset and publicationGateBqTable`);
+  }
+  return gate;
+}

package/src/configs/criteo.config.ts

@@ -1,14 +1,51 @@
+import { toNumber } from 'lodash';
+
 import { ExportType, FileType, ImageType } from 'src/enums';
 import { Params } from '../interfaces/params.interface';
+import { FeedGuardOptions } from '../services/feed-guard';
 import { Config } from './config';
 
+const text = (value: unknown): string => (typeof value === 'string' ? value.trim() : '');
+
+const positiveNumber = (value: unknown, fallback: number): number => {
+  const parsed = toNumber(text(value));
+  return text(value) && Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
+};
+
+// Same guard defaults as the meinestadt / OpenAI feeds; a job can override them via the
+// feedGuard* Cronicle params.
+export const CRITEO_DEFAULTS = {
+  minSourceItems: 1000,
+  minPublishedItems: 500,
+  maxDropPercent: 20,
+  maxSourceAgeHours: 26,
+  maxStaleHours: 48,
+};
+
+/**
+ * Criteo catalog (ADV-319): legacy RSS/XML file at the same path as before, which the chained
+ * `4.1 Export criteo - part 2` step uploads. Guard state lives in resources/criteo-state.
+ */
 export class CriteoConfig extends Config {
+  stateDir: string;
+  feedGuard: FeedGuardOptions;
+
   constructor(params: Params) {
     super(params);
     this.campaign = ExportType.CRITEO;
     this.pathesConfig.localConvertedDirectory = `resources/${ExportType.CRITEO}-export`;
+    this.stateDir = `resources/${ExportType.CRITEO}-state`;
     this.imageType = ImageType.marketing;
     this.marketingImageConfigId = this.environmentConfig[params.environment].criteoMarketingImagesConfigId;
+    this.feedGuard = {
+      stateDir: this.stateDir,
+      minSourceItems: positiveNumber(params.feedGuardMinSourceItems, CRITEO_DEFAULTS.minSourceItems),
+      minPublishedItems: positiveNumber(params.feedGuardMinPublishedItems, CRITEO_DEFAULTS.minPublishedItems),
+      maxDropPercent: positiveNumber(params.feedGuardMaxDropPercent, CRITEO_DEFAULTS.maxDropPercent),
+      maxSourceAgeHours: positiveNumber(params.feedGuardMaxSourceAgeHours, CRITEO_DEFAULTS.maxSourceAgeHours),
+      maxStaleHours: positiveNumber(params.feedGuardMaxStaleHours, CRITEO_DEFAULTS.maxStaleHours),
+      acceptDrop: text(params.feedGuardAcceptDrop).toLowerCase() === 'true',
+    };
     this.outputFiles = [
       `${this.pathesConfig.localConvertedDirectory}/api_export_cars_${ExportType.CRITEO}.${FileType.XML}`,
     ];

package/src/exporters/autouncle.exporter.ts

@@ -9,6 +9,7 @@ import { resolveOpenAiImageFields } from '../transformers/openai-image-fields';
 import { CarService, RulesService, LoaderService, ConfigService, ImagesService } from '../services';
 import { ImageUrlValidator } from '../services/image-url-validator.service';
 import { FeedGuard } from '../services/feed-guard';
+import { PublicationGate, loadPublicationGate } from '../services/publication-gate';
 import { AutouncleFeedRun, AutouncleSourceCar } from '../services/autouncle-feed-run';
 import { AutouncleConfig } from '../configs/autouncle.config';
 import { Exporter } from '../interfaces/exporter.interface';
@@ -36,6 +37,16 @@ export class AutouncleExporter implements Exporter {
     const transformer = await this.moduleRef.create(AutouncleTransformer);
     const addresses = new Map<string, Promise<AutouncleAddress | null>>();
 
+    // EnVKV C8 (ADV-322): estimated values are withheld (enforce) or only counted (audit). enforce fails
+    // the job when the enrichment log cannot be read, so the last published file stays.
+    let gate: PublicationGate;
+    try {
+      gate = await loadPublicationGate(config.publicationGate);
+    } catch (error) {
+      LoggerService.exitError(`autouncle feed not published: ${error?.message ?? error}`);
+      process.exit(1);
+    }
+
     const run = new AutouncleFeedRun(
       {
         forEachChunk: fn => this.loaderService.process((chunk: FsChunkInterface) => fn(chunk.data as AutouncleSourceCar[])),
@@ -55,6 +66,7 @@ export class AutouncleExporter implements Exporter {
         imageStats: () => validator.stats,
         translate: key => transformer.translate(key),
         guard: new FeedGuard(config.feedGuard),
+        gate,
       },
       {
         runId: config.runId,

package/src/exporters/criteo.exporter.ts

@@ -1,14 +1,21 @@
 import { Injectable } from '@nestjs/common';
 import { ModuleRef } from '@nestjs/core';
 
-import { CronicleUtils } from '@bytebrand/cronicle-helper';
 import { FsChunkInterface } from '@bytebrand/chunkable';
+import { LoggerService } from '@bytebrand/cronicle-helper';
 
 import { CarService, ConfigService, LoaderService, RulesService } from '../services';
-import { GoogleXmlBuilder } from '../formats/google-xml.builder';
+import { FeedGuard } from '../services/feed-guard';
+import { CriteoFeedRun, CriteoSourceCar } from '../services/criteo-feed-run';
 import { Exporter } from '../interfaces/exporter.interface';
+import { CriteoConfig } from '../configs/criteo.config';
 import { CriteoTransformer } from 'src/transformers/criteo.transformer';
 
+/**
+ * ExportType.CRITEO (ADV-319). Wires the Cronicle/Nest services into CriteoFeedRun, which holds the
+ * logic. The output directory is no longer emptied: the new XML replaces the old one only after the
+ * fail-closed guard passed.
+ */
 @Injectable()
 export class CriteoExporter implements Exporter {
 	constructor(
@@ -20,32 +27,37 @@ export class CriteoExporter implements Exporter {
 	) { }
 
 	async export(): Promise<void> {
-		const [fileName] = this.configService.config.outputFiles;
-		await CronicleUtils.ensureDir(this.configService.config.pathesConfig.localConvertedDirectory);
-		await CronicleUtils.emptyDir(this.configService.config.pathesConfig.localConvertedDirectory);
-
-		const googleXmlBuilder = new GoogleXmlBuilder(fileName);
-		await googleXmlBuilder.buildStart(this.configService.config.domain);
-
-		const criteoTransformer = await this.moduleRef.create(CriteoTransformer);
-		let withoutImage = 0;
-
-		await this.loaderService.process(async (chunk: FsChunkInterface) => {
-			chunk.data = chunk.data.filter(car => this.carService.filterCar(car, this.rulesService.rules));
-
-			for (const data of chunk.data) {
-				const car = await criteoTransformer.transform(data);
-				if (car) {
-					await googleXmlBuilder.addItem(car);
-				} else {
-					withoutImage += 1;
-				}
-				this.carService.counter.countCar(data.images);
+		const config = this.configService.config as CriteoConfig;
+		const [xmlFile] = config.outputFiles;
+		const transformer = await this.moduleRef.create(CriteoTransformer);
+
+		const run = new CriteoFeedRun(
+			{
+				forEachChunk: fn => this.loaderService.process((chunk: FsChunkInterface) => fn(chunk.data as CriteoSourceCar[])),
+				filterCar: source => this.carService.filterCar(source, this.rulesService.rules),
+				transform: source => transformer.transform(source),
+				guard: new FeedGuard(config.feedGuard),
+			},
+			{
+				runId: config.runId,
+				domain: config.domain,
+				sourceDirectory: config.pathesConfig.localDirectory,
+				sourceBaseFileName: config.pathesConfig.baseFileName,
+				xmlFile,
+				stateDir: config.stateDir,
+			},
+		);
+
+		try {
+			const report = await run.run();
+			if (report.stale) {
+				console.log(`criteo feed STALE: last good file ${report.lastGoodAgeHours?.toFixed(1)} h old`);
 			}
-		});
-
-		await googleXmlBuilder.buildEnd();
-		console.log(this.carService.counter.getCountedCars());
-		console.log(`criteo: ${withoutImage} cars skipped without a marketing image`);
+		} catch (error) {
+			// main.ts would report a rejected run as {"complete":1,"code":0}; fail the job so the chained
+			// upload step does not run (report + lock already handled by the run).
+			LoggerService.exitError(`criteo feed not published: ${error?.message ?? error}`);
+			process.exit(1);
+		}
 	}
 }

package/src/services/autouncle-feed-run.ts

@@ -6,6 +6,7 @@ import { DataSchemes } from '@bytebrand/car-schema';
 import { AutouncleJsonBuilder } from '../formats/autouncle-json.builder';
 import { AutouncleAddress, AutouncleExclusion, getAutouncleExclusion, mapAutouncleItem } from '../transformers/autouncle.transformer';
 import { FeedGuard, FeedGuardError, LastGood, inspectSourceSnapshot } from './feed-guard';
+import { PublicationGate } from './publication-gate';
 
 export interface AutouncleSourceCar {
   car: DataSchemes.Car;
@@ -26,6 +27,8 @@ export interface AutouncleRunDeps {
   imageStats: () => Record<string, number>;
   translate: (key: string) => string;
   guard: FeedGuard;
+  // EnVKV C8 publication gate (CBD enrichment log); absent = off
+  gate?: Pick<PublicationGate, 'mode' | 'estimatedAttributes'>;
 }
 
 export interface AutouncleRunOptions {
@@ -54,6 +57,8 @@ export interface AutouncleRunReport {
   excluded: Record<string, number>;
   imagesPerItem: { min: number | null; max: number | null; total: number };
   images: Record<string, number>;
+  // published items with an estimated EnVKV value per attribute; with gate enforce those were sent empty
+  envkv: { gate: 'off' | 'audit' | 'enforce'; estimated: Record<string, number> };
   lastGood: LastGood | null;
   lastGoodAgeHours: number | null;
   stale: boolean;
@@ -93,6 +98,7 @@ export class AutouncleFeedRun {
       excluded: {},
       imagesPerItem: { min: null, max: null, total: 0 },
       images: {},
+      envkv: { gate: this.deps.gate?.mode ?? 'off', estimated: {} },
       lastGood,
       lastGoodAgeHours: guard.staleHours(lastGood, startedAt),
       stale: guard.isStale(lastGood, startedAt),
@@ -141,11 +147,19 @@ export class AutouncleFeedRun {
             continue;
           }
           const images = await this.deps.resolveImages(source);
-          const mapped = mapAutouncleItem(source.car, { domain: this.options.domain, address, images, translate: this.deps.translate });
+          const estimated = this.deps.gate ? this.deps.gate.estimatedAttributes(source.car) : [];
+          const mapped = mapAutouncleItem(source.car, {
+            domain: this.options.domain,
+            address,
+            images,
+            translate: this.deps.translate,
+            withheldEnvkv: this.deps.gate?.mode === 'enforce' ? estimated : [],
+          });
           if (mapped.ok === false) {
             increment(report.excluded, mapped.reason);
             continue;
           }
+          estimated.forEach(attribute => increment(report.envkv.estimated, attribute));
           await builder.addItem(mapped.item, first);
           first = false;
           dealers.add(ownerId);