@open-mercato/core 0.4.8-develop-15259be22b → 0.4.8-develop-280c02b529

package/dist/modules/inbox_ops/api/proposals/[id]/actions/[actionId]/reject/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../../src/modules/inbox_ops/api/proposals/%5Bid%5D/actions/%5BactionId%5D/reject/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { rejectAction } from '../../../../../../lib/executionEngine'\nimport {\n  resolveRequestContext,\n  resolveActionAndProposal,\n  toExecutionContext,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../../../routeHelpers'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const resolved = await resolveActionAndProposal(new URL(req.url), ctx)\n    if (isErrorResponse(resolved)) return resolved\n\n    if (resolved.action.status !== 'pending' && resolved.action.status !== 'failed') {\n      return NextResponse.json({ error: 'Action already processed' }, { status: 409 })\n    }\n\n    await rejectAction(resolved.action, toExecutionContext(ctx))\n\n    return NextResponse.json({ ok: true })\n  } catch (err) {\n    return handleRouteError(err, 'reject action')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Reject action',\n  methods: {\n    POST: {\n      summary: 'Reject a proposal action',\n      responses: [\n        { status: 200, description: 'Action rejected' },\n        { status: 404, description: 'Action not found' },\n        { status: 409, description: 'Action already processed' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,WAAW,MAAM,yBAAyB,IAAI,IAAI,IAAI,GAAG,GAAG,GAAG;AACrE,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,QAAI,SAAS,OAAO,WAAW,aAAa,SAAS,OAAO,WAAW,UAAU;AAC/E,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,aAAa,SAAS,QAAQ,mBAAmB,GAAG,CAAC;AAE3D,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,eAAe;AAAA,EAC9C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,QAC9C,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,2BAA2B;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport { rejectAction } from '../../../../../../lib/executionEngine'\nimport { resolveCache, invalidateCountsCache } from '../../../../../../lib/cache'\nimport {\n  resolveRequestContext,\n  resolveActionAndProposal,\n  toExecutionContext,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../../../routeHelpers'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const resolved = await resolveActionAndProposal(new URL(req.url), ctx)\n    if (isErrorResponse(resolved)) return resolved\n\n    if (resolved.action.status !== 'pending' && resolved.action.status !== 'failed') {\n      return NextResponse.json({ error: 'Action already processed' }, { status: 409 })\n    }\n\n    await rejectAction(resolved.action, toExecutionContext(ctx))\n\n    const cache = resolveCache(ctx.container)\n    await runWithCacheTenant(ctx.tenantId, () => invalidateCountsCache(cache, ctx.tenantId))\n\n    return NextResponse.json({ ok: true })\n  } catch (err) {\n    return handleRouteError(err, 'reject action')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Reject action',\n  methods: {\n    POST: {\n      summary: 'Reject a proposal action',\n      responses: [\n        { status: 200, description: 'Action rejected' },\n        { status: 404, description: 'Action not found' },\n        { status: 409, description: 'Action already processed' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAC7B,SAAS,cAAc,6BAA6B;AACpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,WAAW,MAAM,yBAAyB,IAAI,IAAI,IAAI,GAAG,GAAG,GAAG;AACrE,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,QAAI,SAAS,OAAO,WAAW,aAAa,SAAS,OAAO,WAAW,UAAU;AAC/E,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,aAAa,SAAS,QAAQ,mBAAmB,GAAG,CAAC;AAE3D,UAAM,QAAQ,aAAa,IAAI,SAAS;AACxC,UAAM,mBAAmB,IAAI,UAAU,MAAM,sBAAsB,OAAO,IAAI,QAAQ,CAAC;AAEvF,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,eAAe;AAAA,EAC9C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,QAC9C,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,2BAA2B;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/proposals/[id]/actions/[actionId]/route.js

@@ -1,6 +1,8 @@
 import { NextResponse } from "next/server";
+import { runWithCacheTenant } from "@open-mercato/cache";
 import { actionEditSchema, validateActionPayloadForType } from "../../../../../data/validators.js";
 import { emitInboxOpsEvent } from "../../../../../events.js";
+import { resolveCache, invalidateCountsCache } from "../../../../../lib/cache.js";
 import {
   resolveRequestContext,
   resolveActionAndProposal,
@@ -31,6 +33,8 @@ async function PATCH(req) {
     }
     action.payload = mergedPayload;
     await ctx.em.flush();
+    const cache = resolveCache(ctx.container);
+    await runWithCacheTenant(ctx.tenantId, () => invalidateCountsCache(cache, ctx.tenantId));
     try {
       await emitInboxOpsEvent("inbox_ops.action.edited", {
         actionId: action.id,

package/dist/modules/inbox_ops/api/proposals/[id]/actions/[actionId]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/inbox_ops/api/proposals/%5Bid%5D/actions/%5BactionId%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { actionEditSchema, validateActionPayloadForType } from '../../../../../data/validators'\nimport { emitInboxOpsEvent } from '../../../../../events'\nimport {\n  resolveRequestContext,\n  resolveActionAndProposal,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../../routeHelpers'\n\nexport const metadata = {\n  PATCH: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function PATCH(req: Request) {\n  try {\n    const body = await req.json()\n    const parsed = actionEditSchema.safeParse(body)\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid payload', details: parsed.error.issues }, { status: 400 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n    const resolved = await resolveActionAndProposal(new URL(req.url), ctx)\n    if (isErrorResponse(resolved)) return resolved\n\n    const { action } = resolved\n\n    if (action.status !== 'pending' && action.status !== 'failed') {\n      return NextResponse.json({ error: 'Action already processed' }, { status: 409 })\n    }\n\n    const mergedPayload = { ...action.payload as Record<string, unknown>, ...parsed.data.payload }\n    const payloadValidation = validateActionPayloadForType(action.actionType, mergedPayload)\n    if (!payloadValidation.success) {\n      return NextResponse.json({ error: payloadValidation.error }, { status: 400 })\n    }\n\n    action.payload = mergedPayload\n    await ctx.em.flush()\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.action.edited', {\n        actionId: action.id,\n        proposalId: action.proposalId,\n        actionType: action.actionType,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n    } catch (eventError) {\n      console.error('[inbox_ops:action:edit] Failed to emit event:', eventError)\n    }\n\n    return NextResponse.json({ ok: true, action })\n  } catch (err) {\n    return handleRouteError(err, 'edit action')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Edit action',\n  methods: {\n    PATCH: {\n      summary: 'Edit action payload before accepting',\n      responses: [\n        { status: 200, description: 'Action updated' },\n        { status: 404, description: 'Action not found' },\n        { status: 409, description: 'Action already processed' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,kBAAkB,oCAAoC;AAC/D,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,OAAO,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC9E;AAEA,eAAsB,MAAM,KAAc;AACxC,MAAI;AACF,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,SAAS,iBAAiB,UAAU,IAAI;AAC9C,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtG;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,WAAW,MAAM,yBAAyB,IAAI,IAAI,IAAI,GAAG,GAAG,GAAG;AACrE,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,EAAE,OAAO,IAAI;AAEnB,QAAI,OAAO,WAAW,aAAa,OAAO,WAAW,UAAU;AAC7D,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,gBAAgB,EAAE,GAAG,OAAO,SAAoC,GAAG,OAAO,KAAK,QAAQ;AAC7F,UAAM,oBAAoB,6BAA6B,OAAO,YAAY,aAAa;AACvF,QAAI,CAAC,kBAAkB,SAAS;AAC9B,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,MAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9E;AAEA,WAAO,UAAU;AACjB,UAAM,IAAI,GAAG,MAAM;AAEnB,QAAI;AACF,YAAM,kBAAkB,2BAA2B;AAAA,QACjD,UAAU,OAAO;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,YAAY,OAAO;AAAA,QACnB,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,cAAQ,MAAM,iDAAiD,UAAU;AAAA,IAC3E;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,OAAO,CAAC;AAAA,EAC/C,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,aAAa;AAAA,EAC5C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,OAAO;AAAA,MACL,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,QAC7C,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,2BAA2B;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport { actionEditSchema, validateActionPayloadForType } from '../../../../../data/validators'\nimport { emitInboxOpsEvent } from '../../../../../events'\nimport { resolveCache, invalidateCountsCache } from '../../../../../lib/cache'\nimport {\n  resolveRequestContext,\n  resolveActionAndProposal,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../../routeHelpers'\n\nexport const metadata = {\n  PATCH: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function PATCH(req: Request) {\n  try {\n    const body = await req.json()\n    const parsed = actionEditSchema.safeParse(body)\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid payload', details: parsed.error.issues }, { status: 400 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n    const resolved = await resolveActionAndProposal(new URL(req.url), ctx)\n    if (isErrorResponse(resolved)) return resolved\n\n    const { action } = resolved\n\n    if (action.status !== 'pending' && action.status !== 'failed') {\n      return NextResponse.json({ error: 'Action already processed' }, { status: 409 })\n    }\n\n    const mergedPayload = { ...action.payload as Record<string, unknown>, ...parsed.data.payload }\n    const payloadValidation = validateActionPayloadForType(action.actionType, mergedPayload)\n    if (!payloadValidation.success) {\n      return NextResponse.json({ error: payloadValidation.error }, { status: 400 })\n    }\n\n    action.payload = mergedPayload\n    await ctx.em.flush()\n\n    const cache = resolveCache(ctx.container)\n    await runWithCacheTenant(ctx.tenantId, () => invalidateCountsCache(cache, ctx.tenantId))\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.action.edited', {\n        actionId: action.id,\n        proposalId: action.proposalId,\n        actionType: action.actionType,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n    } catch (eventError) {\n      console.error('[inbox_ops:action:edit] Failed to emit event:', eventError)\n    }\n\n    return NextResponse.json({ ok: true, action })\n  } catch (err) {\n    return handleRouteError(err, 'edit action')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Edit action',\n  methods: {\n    PATCH: {\n      summary: 'Edit action payload before accepting',\n      responses: [\n        { status: 200, description: 'Action updated' },\n        { status: 404, description: 'Action not found' },\n        { status: 409, description: 'Action already processed' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC,SAAS,kBAAkB,oCAAoC;AAC/D,SAAS,yBAAyB;AAClC,SAAS,cAAc,6BAA6B;AACpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,OAAO,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC9E;AAEA,eAAsB,MAAM,KAAc;AACxC,MAAI;AACF,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,SAAS,iBAAiB,UAAU,IAAI;AAC9C,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtG;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,WAAW,MAAM,yBAAyB,IAAI,IAAI,IAAI,GAAG,GAAG,GAAG;AACrE,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,EAAE,OAAO,IAAI;AAEnB,QAAI,OAAO,WAAW,aAAa,OAAO,WAAW,UAAU;AAC7D,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AAEA,UAAM,gBAAgB,EAAE,GAAG,OAAO,SAAoC,GAAG,OAAO,KAAK,QAAQ;AAC7F,UAAM,oBAAoB,6BAA6B,OAAO,YAAY,aAAa;AACvF,QAAI,CAAC,kBAAkB,SAAS;AAC9B,aAAO,aAAa,KAAK,EAAE,OAAO,kBAAkB,MAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9E;AAEA,WAAO,UAAU;AACjB,UAAM,IAAI,GAAG,MAAM;AAEnB,UAAM,QAAQ,aAAa,IAAI,SAAS;AACxC,UAAM,mBAAmB,IAAI,UAAU,MAAM,sBAAsB,OAAO,IAAI,QAAQ,CAAC;AAEvF,QAAI;AACF,YAAM,kBAAkB,2BAA2B;AAAA,QACjD,UAAU,OAAO;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,YAAY,OAAO;AAAA,QACnB,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,cAAQ,MAAM,iDAAiD,UAAU;AAAA,IAC3E;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,OAAO,CAAC;AAAA,EAC/C,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,aAAa;AAAA,EAC5C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,OAAO;AAAA,MACL,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,QAC7C,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,2BAA2B;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/proposals/[id]/categorize/route.js

@@ -0,0 +1,59 @@
+import { NextResponse } from "next/server";
+import { runWithCacheTenant } from "@open-mercato/cache";
+import { categorizeProposalSchema } from "../../../../data/validators.js";
+import { resolveCache, invalidateCountsCache } from "../../../../lib/cache.js";
+import {
+  resolveRequestContext,
+  resolveProposal,
+  handleRouteError,
+  isErrorResponse
+} from "../../../routeHelpers.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["inbox_ops.proposals.manage"] }
+};
+async function POST(req) {
+  try {
+    const ctx = await resolveRequestContext(req);
+    const proposal = await resolveProposal(new URL(req.url), ctx);
+    if (isErrorResponse(proposal)) return proposal;
+    const body = await req.json();
+    const parsed = categorizeProposalSchema.safeParse(body);
+    if (!parsed.success) {
+      const issues = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
+      return NextResponse.json({ error: `Invalid category: ${issues}` }, { status: 400 });
+    }
+    const previousCategory = proposal.category || null;
+    proposal.category = parsed.data.category;
+    await ctx.em.flush();
+    const cache = resolveCache(ctx.container);
+    await runWithCacheTenant(ctx.tenantId, () => invalidateCountsCache(cache, ctx.tenantId));
+    return NextResponse.json({
+      ok: true,
+      category: parsed.data.category,
+      previousCategory
+    });
+  } catch (err) {
+    return handleRouteError(err, "categorize proposal");
+  }
+}
+const openApi = {
+  tag: "InboxOps",
+  summary: "Categorize proposal",
+  methods: {
+    POST: {
+      summary: "Set or change the category of a proposal",
+      description: "Assigns a category to a proposal. Returns the new and previous category for undo support.",
+      responses: [
+        { status: 200, description: "Category updated" },
+        { status: 400, description: "Invalid category value" },
+        { status: 404, description: "Proposal not found" }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/inbox_ops/api/proposals/[id]/categorize/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/inbox_ops/api/proposals/%5Bid%5D/categorize/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport { categorizeProposalSchema } from '../../../../data/validators'\nimport { resolveCache, invalidateCountsCache } from '../../../../lib/cache'\nimport {\n  resolveRequestContext,\n  resolveProposal,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../routeHelpers'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const proposal = await resolveProposal(new URL(req.url), ctx)\n    if (isErrorResponse(proposal)) return proposal\n\n    const body = await req.json()\n    const parsed = categorizeProposalSchema.safeParse(body)\n    if (!parsed.success) {\n      const issues = parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ')\n      return NextResponse.json({ error: `Invalid category: ${issues}` }, { status: 400 })\n    }\n\n    const previousCategory = proposal.category || null\n    proposal.category = parsed.data.category\n    await ctx.em.flush()\n\n    const cache = resolveCache(ctx.container)\n    await runWithCacheTenant(ctx.tenantId, () => invalidateCountsCache(cache, ctx.tenantId))\n\n    return NextResponse.json({\n      ok: true,\n      category: parsed.data.category,\n      previousCategory,\n    })\n  } catch (err) {\n    return handleRouteError(err, 'categorize proposal')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Categorize proposal',\n  methods: {\n    POST: {\n      summary: 'Set or change the category of a proposal',\n      description: 'Assigns a category to a proposal. Returns the new and previous category for undo support.',\n      responses: [\n        { status: 200, description: 'Category updated' },\n        { status: 400, description: 'Invalid category value' },\n        { status: 404, description: 'Proposal not found' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC,SAAS,gCAAgC;AACzC,SAAS,cAAc,6BAA6B;AACpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,WAAW,MAAM,gBAAgB,IAAI,IAAI,IAAI,GAAG,GAAG,GAAG;AAC5D,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,SAAS,yBAAyB,UAAU,IAAI;AACtD,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,SAAS,OAAO,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI;AAC5F,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,MAAM,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpF;AAEA,UAAM,mBAAmB,SAAS,YAAY;AAC9C,aAAS,WAAW,OAAO,KAAK;AAChC,UAAM,IAAI,GAAG,MAAM;AAEnB,UAAM,QAAQ,aAAa,IAAI,SAAS;AACxC,UAAM,mBAAmB,IAAI,UAAU,MAAM,sBAAsB,OAAO,IAAI,QAAQ,CAAC;AAEvF,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,UAAU,OAAO,KAAK;AAAA,MACtB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,qBAAqB;AAAA,EACpD;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,yBAAyB;AAAA,QACrD,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,MACnD;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/inbox_ops/api/proposals/[id]/reject/route.js

@@ -1,5 +1,7 @@
 import { NextResponse } from "next/server";
+import { runWithCacheTenant } from "@open-mercato/cache";
 import { rejectProposal } from "../../../../lib/executionEngine.js";
+import { resolveCache, invalidateCountsCache } from "../../../../lib/cache.js";
 import {
   resolveRequestContext,
   resolveProposal,
@@ -16,6 +18,8 @@ async function POST(req) {
     const proposal = await resolveProposal(new URL(req.url), ctx);
     if (isErrorResponse(proposal)) return proposal;
     await rejectProposal(proposal.id, toExecutionContext(ctx));
+    const cache = resolveCache(ctx.container);
+    await runWithCacheTenant(ctx.tenantId, () => invalidateCountsCache(cache, ctx.tenantId));
     return NextResponse.json({ ok: true });
   } catch (err) {
     return handleRouteError(err, "reject proposal");

package/dist/modules/inbox_ops/api/proposals/[id]/reject/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/inbox_ops/api/proposals/%5Bid%5D/reject/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { rejectProposal } from '../../../../lib/executionEngine'\nimport {\n  resolveRequestContext,\n  resolveProposal,\n  toExecutionContext,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../routeHelpers'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const proposal = await resolveProposal(new URL(req.url), ctx)\n    if (isErrorResponse(proposal)) return proposal\n\n    await rejectProposal(proposal.id, toExecutionContext(ctx))\n\n    return NextResponse.json({ ok: true })\n  } catch (err) {\n    return handleRouteError(err, 'reject proposal')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Reject proposal',\n  methods: {\n    POST: {\n      summary: 'Reject entire proposal (all pending actions)',\n      responses: [\n        { status: 200, description: 'Proposal rejected' },\n        { status: 404, description: 'Proposal not found' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,sBAAsB;AAC/B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,WAAW,MAAM,gBAAgB,IAAI,IAAI,IAAI,GAAG,GAAG,GAAG;AAC5D,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,eAAe,SAAS,IAAI,mBAAmB,GAAG,CAAC;AAEzD,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,iBAAiB;AAAA,EAChD;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,MACnD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport { rejectProposal } from '../../../../lib/executionEngine'\nimport { resolveCache, invalidateCountsCache } from '../../../../lib/cache'\nimport {\n  resolveRequestContext,\n  resolveProposal,\n  toExecutionContext,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../routeHelpers'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.manage'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const proposal = await resolveProposal(new URL(req.url), ctx)\n    if (isErrorResponse(proposal)) return proposal\n\n    await rejectProposal(proposal.id, toExecutionContext(ctx))\n\n    const cache = resolveCache(ctx.container)\n    await runWithCacheTenant(ctx.tenantId, () => invalidateCountsCache(cache, ctx.tenantId))\n\n    return NextResponse.json({ ok: true })\n  } catch (err) {\n    return handleRouteError(err, 'reject proposal')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Reject proposal',\n  methods: {\n    POST: {\n      summary: 'Reject entire proposal (all pending actions)',\n      responses: [\n        { status: 200, description: 'Proposal rejected' },\n        { status: 404, description: 'Proposal not found' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC,SAAS,sBAAsB;AAC/B,SAAS,cAAc,6BAA6B;AACpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,WAAW,MAAM,gBAAgB,IAAI,IAAI,IAAI,GAAG,GAAG,GAAG;AAC5D,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,eAAe,SAAS,IAAI,mBAAmB,GAAG,CAAC;AAEzD,UAAM,QAAQ,aAAa,IAAI,SAAS;AACxC,UAAM,mBAAmB,IAAI,UAAU,MAAM,sBAAsB,OAAO,IAAI,QAAQ,CAAC;AAEvF,WAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACvC,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,iBAAiB;AAAA,EAChD;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB;AAAA,QAChD,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,MACnD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/proposals/[id]/replies/[replyId]/send/route.js

@@ -5,6 +5,7 @@ import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find"
 import { InboxProposalAction, InboxEmail } from "../../../../../../data/entities.js";
 import { draftReplyPayloadSchema } from "../../../../../../data/validators.js";
 import { emitInboxOpsEvent } from "../../../../../../events.js";
+import { createMessageRecordForReply } from "../../../../../../lib/messagesIntegration.js";
 import {
   resolveRequestContext,
   resolveProposal,
@@ -17,14 +18,6 @@ const metadata = {
 };
 async function POST(req) {
   try {
-    const apiKey = process.env.RESEND_API_KEY;
-    if (!apiKey) {
-      return NextResponse.json({ error: "Email service not configured" }, { status: 503 });
-    }
-    const emailDisabled = parseBooleanWithDefault(process.env.OM_DISABLE_EMAIL_DELIVERY, false) || parseBooleanWithDefault(process.env.OM_TEST_MODE, false);
-    if (emailDisabled) {
-      return NextResponse.json({ error: "Email delivery is disabled" }, { status: 503 });
-    }
     const ctx = await resolveRequestContext(req);
     const url = new URL(req.url);
     const proposal = await resolveProposal(url, ctx);
@@ -67,7 +60,16 @@ async function POST(req) {
     if (!payloadResult.success) {
       return NextResponse.json({ error: "Reply payload missing required fields (to, subject, body)" }, { status: 400 });
     }
-    const { to: toAddress, subject, body, inReplyToMessageId, references: payloadReferences } = payloadResult.data;
+    const { to: toAddress, toName, subject, body } = payloadResult.data;
+    const apiKey = process.env.RESEND_API_KEY;
+    if (!apiKey) {
+      return NextResponse.json({ error: "Email service not configured" }, { status: 503 });
+    }
+    const emailDisabled = parseBooleanWithDefault(process.env.OM_DISABLE_EMAIL_DELIVERY, false) || parseBooleanWithDefault(process.env.OM_TEST_MODE, false);
+    if (emailDisabled) {
+      return NextResponse.json({ error: "Email delivery is disabled" }, { status: 503 });
+    }
+    const { inReplyToMessageId, references: payloadReferences } = payloadResult.data;
     const fromAddress = process.env.EMAIL_FROM || `inbox@${process.env.INBOX_OPS_DOMAIN || "inbox.mercato.local"}`;
     const headers = {};
     const inReplyTo = inReplyToMessageId || email?.messageId;
@@ -91,10 +93,23 @@ async function POST(req) {
       return NextResponse.json({ error: `Failed to send email: ${errorMessage}` }, { status: 502 });
     }
     const sentMessageId = sendData?.id || null;
+    const messagesResult = await createMessageRecordForReply(
+      { to: toAddress, toName, subject, body },
+      proposal.inboxEmailId,
+      {
+        container: ctx.container,
+        scope: {
+          tenantId: ctx.tenantId,
+          organizationId: ctx.organizationId,
+          userId: ctx.userId
+        }
+      }
+    );
     action.metadata = {
       ...action.metadata && typeof action.metadata === "object" ? action.metadata : {},
       replySentAt: (/* @__PURE__ */ new Date()).toISOString(),
-      sentMessageId
+      sentMessageId,
+      ...messagesResult ? { messageRecordId: messagesResult.messageId } : {}
     };
     await ctx.em.flush();
     try {
@@ -104,12 +119,17 @@ async function POST(req) {
         tenantId: ctx.tenantId,
         organizationId: ctx.organizationId,
         toAddress,
-        sentMessageId
+        sentMessageId,
+        messageRecordId: messagesResult?.messageId ?? null
       });
     } catch (eventError) {
       console.error("[inbox_ops:reply:send] Failed to emit event:", eventError);
     }
-    return NextResponse.json({ ok: true, sentMessageId });
+    return NextResponse.json({
+      ok: true,
+      sentMessageId,
+      ...messagesResult ? { messageRecordId: messagesResult.messageId } : {}
+    });
   } catch (err) {
     return handleRouteError(err, "send reply");
   }
@@ -119,8 +139,8 @@ const openApi = {
   summary: "Send draft reply",
   methods: {
     POST: {
-      summary: "Send a draft reply email via the configured email provider",
-      description: "Sends the draft_reply action payload as an email. Sets In-Reply-To and References headers for threading.",
+      summary: "Send a draft reply email and register it in messages when available",
+      description: "Sends the draft_reply action payload via the configured email provider. When the messages module is available, also records the sent reply as an internal message record. Sets In-Reply-To and References headers for threading.",
       responses: [
         { status: 200, description: "Reply sent successfully" },
         { status: 400, description: "Missing required payload fields" },

package/dist/modules/inbox_ops/api/proposals/[id]/replies/[replyId]/send/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../../src/modules/inbox_ops/api/proposals/%5Bid%5D/replies/%5BreplyId%5D/send/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { Resend } from 'resend'\nimport { parseBooleanWithDefault } from '@open-mercato/shared/lib/boolean'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { InboxProposalAction, InboxEmail } from '../../../../../../data/entities'\nimport { draftReplyPayloadSchema } from '../../../../../../data/validators'\nimport { emitInboxOpsEvent } from '../../../../../../events'\nimport {\n  resolveRequestContext,\n  resolveProposal,\n  extractPathSegment,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../../../routeHelpers'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.replies.send'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const apiKey = process.env.RESEND_API_KEY\n    if (!apiKey) {\n      return NextResponse.json({ error: 'Email service not configured' }, { status: 503 })\n    }\n\n    const emailDisabled =\n      parseBooleanWithDefault(process.env.OM_DISABLE_EMAIL_DELIVERY, false) ||\n      parseBooleanWithDefault(process.env.OM_TEST_MODE, false)\n    if (emailDisabled) {\n      return NextResponse.json({ error: 'Email delivery is disabled' }, { status: 503 })\n    }\n\n    const ctx = await resolveRequestContext(req)\n    const url = new URL(req.url)\n    const proposal = await resolveProposal(url, ctx)\n    if (isErrorResponse(proposal)) return proposal\n\n    const replyId = extractPathSegment(url, 'replies')\n    if (!replyId) {\n      return NextResponse.json({ error: 'Missing reply ID' }, { status: 400 })\n    }\n\n    const action = await findOneWithDecryption(\n      ctx.em,\n      InboxProposalAction,\n      {\n        id: replyId,\n        proposalId: proposal.id,\n        actionType: 'draft_reply',\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    if (!action) {\n      return NextResponse.json({ error: 'Reply action not found' }, { status: 404 })\n    }\n\n    if (action.status !== 'executed') {\n      return NextResponse.json(\n        { error: `Cannot send reply \u2014 action must be accepted first (current status: \"${action.status}\")` },\n        { status: 409 },\n      )\n    }\n\n    const email = await findOneWithDecryption(\n      ctx.em,\n      InboxEmail,\n      { id: proposal.inboxEmailId, deletedAt: null },\n      undefined,\n      ctx.scope,\n    )\n\n    const payloadResult = draftReplyPayloadSchema.safeParse(action.payload)\n    if (!payloadResult.success) {\n      return NextResponse.json({ error: 'Reply payload missing required fields (to, subject, body)' }, { status: 400 })\n    }\n    const { to: toAddress, subject, body, inReplyToMessageId, references: payloadReferences } = payloadResult.data\n\n    const fromAddress = process.env.EMAIL_FROM || `inbox@${process.env.INBOX_OPS_DOMAIN || 'inbox.mercato.local'}`\n\n    const headers: Record<string, string> = {}\n    const inReplyTo = inReplyToMessageId || email?.messageId\n    if (inReplyTo) {\n      headers['In-Reply-To'] = inReplyTo\n    }\n    const references = payloadReferences || (email?.emailReferences as string[])\n    if (references && references.length > 0) {\n      headers['References'] = references.join(' ')\n    }\n\n    const resend = new Resend(apiKey)\n    const { data: sendData, error: sendError } = await resend.emails.send({\n      to: toAddress,\n      from: fromAddress,\n      subject,\n      text: body,\n      ...(Object.keys(headers).length > 0 ? { headers } : {}),\n    })\n\n    if (sendError) {\n      const errorMessage = sendError.message || 'Unknown error'\n      return NextResponse.json({ error: `Failed to send email: ${errorMessage}` }, { status: 502 })\n    }\n\n    const sentMessageId = sendData?.id || null\n\n    action.metadata = {\n      ...(action.metadata && typeof action.metadata === 'object' ? action.metadata : {}),\n      replySentAt: new Date().toISOString(),\n      sentMessageId,\n    }\n    await ctx.em.flush()\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.reply.sent', {\n        proposalId: proposal.id,\n        actionId: replyId,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        toAddress,\n        sentMessageId,\n      })\n    } catch (eventError) {\n      console.error('[inbox_ops:reply:send] Failed to emit event:', eventError)\n    }\n\n    return NextResponse.json({ ok: true, sentMessageId })\n  } catch (err) {\n    return handleRouteError(err, 'send reply')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Send draft reply',\n  methods: {\n    POST: {\n      summary: 'Send a draft reply email via the configured email provider',\n      description: 'Sends the draft_reply action payload as an email. Sets In-Reply-To and References headers for threading.',\n      responses: [\n        { status: 200, description: 'Reply sent successfully' },\n        { status: 400, description: 'Missing required payload fields' },\n        { status: 404, description: 'Reply action not found' },\n        { status: 409, description: 'Action in invalid state for sending' },\n        { status: 502, description: 'Email delivery failed' },\n        { status: 503, description: 'Email service not configured or disabled' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,cAAc;AACvB,SAAS,+BAA+B;AAExC,SAAS,6BAA6B;AACtC,SAAS,qBAAqB,kBAAkB;AAChD,SAAS,+BAA+B;AACxC,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACzE;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,SAAS,QAAQ,IAAI;AAC3B,QAAI,CAAC,QAAQ;AACX,aAAO,aAAa,KAAK,EAAE,OAAO,+BAA+B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrF;AAEA,UAAM,gBACJ,wBAAwB,QAAQ,IAAI,2BAA2B,KAAK,KACpE,wBAAwB,QAAQ,IAAI,cAAc,KAAK;AACzD,QAAI,eAAe;AACjB,aAAO,aAAa,KAAK,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnF;AAEA,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,WAAW,MAAM,gBAAgB,KAAK,GAAG;AAC/C,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,UAAU,mBAAmB,KAAK,SAAS;AACjD,QAAI,CAAC,SAAS;AACZ,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzE;AAEA,UAAM,SAAS,MAAM;AAAA,MACnB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,YAAY,SAAS;AAAA,QACrB,YAAY;AAAA,QACZ,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,QAAI,CAAC,QAAQ;AACX,aAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAEA,QAAI,OAAO,WAAW,YAAY;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,4EAAuE,OAAO,MAAM,KAAK;AAAA,QAClG,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,QAAQ,MAAM;AAAA,MAClB,IAAI;AAAA,MACJ;AAAA,MACA,EAAE,IAAI,SAAS,cAAc,WAAW,KAAK;AAAA,MAC7C;AAAA,MACA,IAAI;AAAA,IACN;AAEA,UAAM,gBAAgB,wBAAwB,UAAU,OAAO,OAAO;AACtE,QAAI,CAAC,cAAc,SAAS;AAC1B,aAAO,aAAa,KAAK,EAAE,OAAO,4DAA4D,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClH;AACA,UAAM,EAAE,IAAI,WAAW,SAAS,MAAM,oBAAoB,YAAY,kBAAkB,IAAI,cAAc;AAE1G,UAAM,cAAc,QAAQ,IAAI,cAAc,SAAS,QAAQ,IAAI,oBAAoB,qBAAqB;AAE5G,UAAM,UAAkC,CAAC;AACzC,UAAM,YAAY,sBAAsB,OAAO;AAC/C,QAAI,WAAW;AACb,cAAQ,aAAa,IAAI;AAAA,IAC3B;AACA,UAAM,aAAa,qBAAsB,OAAO;AAChD,QAAI,cAAc,WAAW,SAAS,GAAG;AACvC,cAAQ,YAAY,IAAI,WAAW,KAAK,GAAG;AAAA,IAC7C;AAEA,UAAM,SAAS,IAAI,OAAO,MAAM;AAChC,UAAM,EAAE,MAAM,UAAU,OAAO,UAAU,IAAI,MAAM,OAAO,OAAO,KAAK;AAAA,MACpE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN;AAAA,MACA,MAAM;AAAA,MACN,GAAI,OAAO,KAAK,OAAO,EAAE,SAAS,IAAI,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvD,CAAC;AAED,QAAI,WAAW;AACb,YAAM,eAAe,UAAU,WAAW;AAC1C,aAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,YAAY,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9F;AAEA,UAAM,gBAAgB,UAAU,MAAM;AAEtC,WAAO,WAAW;AAAA,MAChB,GAAI,OAAO,YAAY,OAAO,OAAO,aAAa,WAAW,OAAO,WAAW,CAAC;AAAA,MAChF,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC;AAAA,IACF;AACA,UAAM,IAAI,GAAG,MAAM;AAEnB,QAAI;AACF,YAAM,kBAAkB,wBAAwB;AAAA,QAC9C,YAAY,SAAS;AAAA,QACrB,UAAU;AAAA,QACV,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,cAAQ,MAAM,gDAAgD,UAAU;AAAA,IAC1E;AAEA,WAAO,aAAa,KAAK,EAAE,IAAI,MAAM,cAAc,CAAC;AAAA,EACtD,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,YAAY;AAAA,EAC3C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,0BAA0B;AAAA,QACtD,EAAE,QAAQ,KAAK,aAAa,kCAAkC;AAAA,QAC9D,EAAE,QAAQ,KAAK,aAAa,yBAAyB;AAAA,QACrD,EAAE,QAAQ,KAAK,aAAa,sCAAsC;AAAA,QAClE,EAAE,QAAQ,KAAK,aAAa,wBAAwB;AAAA,QACpD,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { Resend } from 'resend'\nimport { parseBooleanWithDefault } from '@open-mercato/shared/lib/boolean'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { InboxProposalAction, InboxEmail } from '../../../../../../data/entities'\nimport { draftReplyPayloadSchema } from '../../../../../../data/validators'\nimport { emitInboxOpsEvent } from '../../../../../../events'\nimport { createMessageRecordForReply } from '../../../../../../lib/messagesIntegration'\nimport {\n  resolveRequestContext,\n  resolveProposal,\n  extractPathSegment,\n  handleRouteError,\n  isErrorResponse,\n} from '../../../../../routeHelpers'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['inbox_ops.replies.send'] },\n}\n\nexport async function POST(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const url = new URL(req.url)\n    const proposal = await resolveProposal(url, ctx)\n    if (isErrorResponse(proposal)) return proposal\n\n    const replyId = extractPathSegment(url, 'replies')\n    if (!replyId) {\n      return NextResponse.json({ error: 'Missing reply ID' }, { status: 400 })\n    }\n\n    const action = await findOneWithDecryption(\n      ctx.em,\n      InboxProposalAction,\n      {\n        id: replyId,\n        proposalId: proposal.id,\n        actionType: 'draft_reply',\n        organizationId: ctx.organizationId,\n        tenantId: ctx.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      ctx.scope,\n    )\n\n    if (!action) {\n      return NextResponse.json({ error: 'Reply action not found' }, { status: 404 })\n    }\n\n    if (action.status !== 'executed') {\n      return NextResponse.json(\n        { error: `Cannot send reply \u2014 action must be accepted first (current status: \"${action.status}\")` },\n        { status: 409 },\n      )\n    }\n\n    const email = await findOneWithDecryption(\n      ctx.em,\n      InboxEmail,\n      { id: proposal.inboxEmailId, deletedAt: null },\n      undefined,\n      ctx.scope,\n    )\n\n    const payloadResult = draftReplyPayloadSchema.safeParse(action.payload)\n    if (!payloadResult.success) {\n      return NextResponse.json({ error: 'Reply payload missing required fields (to, subject, body)' }, { status: 400 })\n    }\n    const { to: toAddress, toName, subject, body } = payloadResult.data\n\n    const apiKey = process.env.RESEND_API_KEY\n    if (!apiKey) {\n      return NextResponse.json({ error: 'Email service not configured' }, { status: 503 })\n    }\n\n    const emailDisabled =\n      parseBooleanWithDefault(process.env.OM_DISABLE_EMAIL_DELIVERY, false) ||\n      parseBooleanWithDefault(process.env.OM_TEST_MODE, false)\n    if (emailDisabled) {\n      return NextResponse.json({ error: 'Email delivery is disabled' }, { status: 503 })\n    }\n\n    const { inReplyToMessageId, references: payloadReferences } = payloadResult.data\n    const fromAddress = process.env.EMAIL_FROM || `inbox@${process.env.INBOX_OPS_DOMAIN || 'inbox.mercato.local'}`\n\n    const headers: Record<string, string> = {}\n    const inReplyTo = inReplyToMessageId || email?.messageId\n    if (inReplyTo) {\n      headers['In-Reply-To'] = inReplyTo\n    }\n    const references = payloadReferences || (email?.emailReferences as string[])\n    if (references && references.length > 0) {\n      headers['References'] = references.join(' ')\n    }\n\n    const resend = new Resend(apiKey)\n    const { data: sendData, error: sendError } = await resend.emails.send({\n      to: toAddress,\n      from: fromAddress,\n      subject,\n      text: body,\n      ...(Object.keys(headers).length > 0 ? { headers } : {}),\n    })\n\n    if (sendError) {\n      const errorMessage = sendError.message || 'Unknown error'\n      return NextResponse.json({ error: `Failed to send email: ${errorMessage}` }, { status: 502 })\n    }\n\n    const sentMessageId = sendData?.id || null\n    const messagesResult = await createMessageRecordForReply(\n      { to: toAddress, toName, subject, body },\n      proposal.inboxEmailId,\n      {\n        container: ctx.container,\n        scope: {\n          tenantId: ctx.tenantId,\n          organizationId: ctx.organizationId,\n          userId: ctx.userId,\n        },\n      },\n    )\n\n    action.metadata = {\n      ...(action.metadata && typeof action.metadata === 'object' ? action.metadata : {}),\n      replySentAt: new Date().toISOString(),\n      sentMessageId,\n      ...(messagesResult ? { messageRecordId: messagesResult.messageId } : {}),\n    }\n    await ctx.em.flush()\n\n    try {\n      await emitInboxOpsEvent('inbox_ops.reply.sent', {\n        proposalId: proposal.id,\n        actionId: replyId,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        toAddress,\n        sentMessageId,\n        messageRecordId: messagesResult?.messageId ?? null,\n      })\n    } catch (eventError) {\n      console.error('[inbox_ops:reply:send] Failed to emit event:', eventError)\n    }\n\n    return NextResponse.json({\n      ok: true,\n      sentMessageId,\n      ...(messagesResult ? { messageRecordId: messagesResult.messageId } : {}),\n    })\n  } catch (err) {\n    return handleRouteError(err, 'send reply')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Send draft reply',\n  methods: {\n    POST: {\n      summary: 'Send a draft reply email and register it in messages when available',\n      description: 'Sends the draft_reply action payload via the configured email provider. When the messages module is available, also records the sent reply as an internal message record. Sets In-Reply-To and References headers for threading.',\n      responses: [\n        { status: 200, description: 'Reply sent successfully' },\n        { status: 400, description: 'Missing required payload fields' },\n        { status: 404, description: 'Reply action not found' },\n        { status: 409, description: 'Action in invalid state for sending' },\n        { status: 502, description: 'Email delivery failed' },\n        { status: 503, description: 'Email service not configured or disabled' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,cAAc;AACvB,SAAS,+BAA+B;AAExC,SAAS,6BAA6B;AACtC,SAAS,qBAAqB,kBAAkB;AAChD,SAAS,+BAA+B;AACxC,SAAS,yBAAyB;AAClC,SAAS,mCAAmC;AAC5C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACzE;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,WAAW,MAAM,gBAAgB,KAAK,GAAG;AAC/C,QAAI,gBAAgB,QAAQ,EAAG,QAAO;AAEtC,UAAM,UAAU,mBAAmB,KAAK,SAAS;AACjD,QAAI,CAAC,SAAS;AACZ,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzE;AAEA,UAAM,SAAS,MAAM;AAAA,MACnB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,YAAY,SAAS;AAAA,QACrB,YAAY;AAAA,QACZ,gBAAgB,IAAI;AAAA,QACpB,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,IAAI;AAAA,IACN;AAEA,QAAI,CAAC,QAAQ;AACX,aAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAEA,QAAI,OAAO,WAAW,YAAY;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,4EAAuE,OAAO,MAAM,KAAK;AAAA,QAClG,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,QAAQ,MAAM;AAAA,MAClB,IAAI;AAAA,MACJ;AAAA,MACA,EAAE,IAAI,SAAS,cAAc,WAAW,KAAK;AAAA,MAC7C;AAAA,MACA,IAAI;AAAA,IACN;AAEA,UAAM,gBAAgB,wBAAwB,UAAU,OAAO,OAAO;AACtE,QAAI,CAAC,cAAc,SAAS;AAC1B,aAAO,aAAa,KAAK,EAAE,OAAO,4DAA4D,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClH;AACA,UAAM,EAAE,IAAI,WAAW,QAAQ,SAAS,KAAK,IAAI,cAAc;AAE/D,UAAM,SAAS,QAAQ,IAAI;AAC3B,QAAI,CAAC,QAAQ;AACX,aAAO,aAAa,KAAK,EAAE,OAAO,+BAA+B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrF;AAEA,UAAM,gBACJ,wBAAwB,QAAQ,IAAI,2BAA2B,KAAK,KACpE,wBAAwB,QAAQ,IAAI,cAAc,KAAK;AACzD,QAAI,eAAe;AACjB,aAAO,aAAa,KAAK,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnF;AAEA,UAAM,EAAE,oBAAoB,YAAY,kBAAkB,IAAI,cAAc;AAC5E,UAAM,cAAc,QAAQ,IAAI,cAAc,SAAS,QAAQ,IAAI,oBAAoB,qBAAqB;AAE5G,UAAM,UAAkC,CAAC;AACzC,UAAM,YAAY,sBAAsB,OAAO;AAC/C,QAAI,WAAW;AACb,cAAQ,aAAa,IAAI;AAAA,IAC3B;AACA,UAAM,aAAa,qBAAsB,OAAO;AAChD,QAAI,cAAc,WAAW,SAAS,GAAG;AACvC,cAAQ,YAAY,IAAI,WAAW,KAAK,GAAG;AAAA,IAC7C;AAEA,UAAM,SAAS,IAAI,OAAO,MAAM;AAChC,UAAM,EAAE,MAAM,UAAU,OAAO,UAAU,IAAI,MAAM,OAAO,OAAO,KAAK;AAAA,MACpE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN;AAAA,MACA,MAAM;AAAA,MACN,GAAI,OAAO,KAAK,OAAO,EAAE,SAAS,IAAI,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvD,CAAC;AAED,QAAI,WAAW;AACb,YAAM,eAAe,UAAU,WAAW;AAC1C,aAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,YAAY,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9F;AAEA,UAAM,gBAAgB,UAAU,MAAM;AACtC,UAAM,iBAAiB,MAAM;AAAA,MAC3B,EAAE,IAAI,WAAW,QAAQ,SAAS,KAAK;AAAA,MACvC,SAAS;AAAA,MACT;AAAA,QACE,WAAW,IAAI;AAAA,QACf,OAAO;AAAA,UACL,UAAU,IAAI;AAAA,UACd,gBAAgB,IAAI;AAAA,UACpB,QAAQ,IAAI;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO,WAAW;AAAA,MAChB,GAAI,OAAO,YAAY,OAAO,OAAO,aAAa,WAAW,OAAO,WAAW,CAAC;AAAA,MAChF,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC;AAAA,MACA,GAAI,iBAAiB,EAAE,iBAAiB,eAAe,UAAU,IAAI,CAAC;AAAA,IACxE;AACA,UAAM,IAAI,GAAG,MAAM;AAEnB,QAAI;AACF,YAAM,kBAAkB,wBAAwB;AAAA,QAC9C,YAAY,SAAS;AAAA,QACrB,UAAU;AAAA,QACV,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB;AAAA,QACA;AAAA,QACA,iBAAiB,gBAAgB,aAAa;AAAA,MAChD,CAAC;AAAA,IACH,SAAS,YAAY;AACnB,cAAQ,MAAM,gDAAgD,UAAU;AAAA,IAC1E;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ;AAAA,MACA,GAAI,iBAAiB,EAAE,iBAAiB,eAAe,UAAU,IAAI,CAAC;AAAA,IACxE,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,iBAAiB,KAAK,YAAY;AAAA,EAC3C;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,0BAA0B;AAAA,QACtD,EAAE,QAAQ,KAAK,aAAa,kCAAkC;AAAA,QAC9D,EAAE,QAAQ,KAAK,aAAa,yBAAyB;AAAA,QACrD,EAAE,QAAQ,KAAK,aAAa,sCAAsC;AAAA,QAClE,EAAE,QAAQ,KAAK,aAAa,wBAAwB;AAAA,QACpD,EAAE,QAAQ,KAAK,aAAa,2CAA2C;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/proposals/counts/route.js

@@ -1,12 +1,28 @@
 import { NextResponse } from "next/server";
+import { runWithCacheTenant } from "@open-mercato/cache";
 import { InboxProposal } from "../../../data/entities.js";
+import { ALL_CATEGORIES } from "../../../data/validators.js";
 import { resolveRequestContext, UnauthorizedError } from "../../routeHelpers.js";
+import {
+  resolveCache,
+  createCountsCacheKey,
+  createCountsCacheTag,
+  COUNTS_CACHE_TTL_MS
+} from "../../../lib/cache.js";
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["inbox_ops.proposals.view"] }
 };
 async function GET(req) {
   try {
     const ctx = await resolveRequestContext(req);
+    const cache = resolveCache(ctx.container);
+    if (cache) {
+      const cacheKey = createCountsCacheKey(ctx.tenantId);
+      const cached = await runWithCacheTenant(ctx.tenantId, () => cache.get(cacheKey));
+      if (cached) {
+        return NextResponse.json(cached);
+      }
+    }
     const scope = {
       organizationId: ctx.organizationId,
       tenantId: ctx.tenantId,
@@ -19,7 +35,36 @@ async function GET(req) {
       ctx.em.count(InboxProposal, { ...scope, status: "accepted" }),
       ctx.em.count(InboxProposal, { ...scope, status: "rejected" })
     ]);
-    return NextResponse.json({ pending, partial, accepted, rejected });
+    const knex = ctx.em.getKnex();
+    const categoryRows = await knex("inbox_proposals").select("category").count("* as count").where({
+      organization_id: ctx.organizationId,
+      tenant_id: ctx.tenantId,
+      is_active: true
+    }).whereNull("deleted_at").groupBy("category");
+    const byCategory = {};
+    for (const cat of ALL_CATEGORIES) {
+      byCategory[cat] = 0;
+    }
+    for (const row of categoryRows) {
+      const cat = row.category;
+      if (cat && cat in byCategory) {
+        byCategory[cat] = Number(row.count);
+      }
+    }
+    const responseBody = { pending, partial, accepted, rejected, byCategory };
+    if (cache) {
+      const cacheKey = createCountsCacheKey(ctx.tenantId);
+      const tag = createCountsCacheTag(ctx.tenantId);
+      try {
+        await runWithCacheTenant(
+          ctx.tenantId,
+          () => cache.set(cacheKey, responseBody, { ttl: COUNTS_CACHE_TTL_MS, tags: [tag] })
+        );
+      } catch (err) {
+        console.warn("[inbox_ops:proposals:counts] Failed to set cache", err);
+      }
+    }
+    return NextResponse.json(responseBody);
   } catch (err) {
     if (err instanceof UnauthorizedError) {
       return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
@@ -33,10 +78,10 @@ const openApi = {
   summary: "Proposal counts",
   methods: {
     GET: {
-      summary: "Get proposal status counts",
-      description: "Returns counts by status for tab badges",
+      summary: "Get proposal status and category counts",
+      description: "Returns counts by status and by category for tab badges and filter dropdowns",
       responses: [
-        { status: 200, description: "Status counts object" }
+        { status: 200, description: "Status and category counts object" }
       ]
     }
   }

package/dist/modules/inbox_ops/api/proposals/counts/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/inbox_ops/api/proposals/counts/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { InboxProposal } from '../../../data/entities'\nimport { resolveRequestContext, UnauthorizedError } from '../../routeHelpers'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n\n    const scope = {\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      deletedAt: null,\n      isActive: true,\n    }\n\n    // em.count() is safe here \u2014 filter fields (status, organizationId, tenantId,\n    // deletedAt, isActive) are not encrypted, so decryption helpers are not needed.\n    const [pending, partial, accepted, rejected] = await Promise.all([\n      ctx.em.count(InboxProposal, { ...scope, status: 'pending' }),\n      ctx.em.count(InboxProposal, { ...scope, status: 'partial' }),\n      ctx.em.count(InboxProposal, { ...scope, status: 'accepted' }),\n      ctx.em.count(InboxProposal, { ...scope, status: 'rejected' }),\n    ])\n\n    return NextResponse.json({ pending, partial, accepted, rejected })\n  } catch (err) {\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    console.error('[inbox_ops:proposals:counts] Error:', err)\n    return NextResponse.json({ error: 'Failed to get counts' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Proposal counts',\n  methods: {\n    GET: {\n      summary: 'Get proposal status counts',\n      description: 'Returns counts by status for tab badges',\n      responses: [\n        { status: 200, description: 'Status counts object' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,qBAAqB;AAC9B,SAAS,uBAAuB,yBAAyB;AAElD,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,EAAE;AAC1E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,QAAQ;AAAA,MACZ,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,WAAW;AAAA,MACX,UAAU;AAAA,IACZ;AAIA,UAAM,CAAC,SAAS,SAAS,UAAU,QAAQ,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC/D,IAAI,GAAG,MAAM,eAAe,EAAE,GAAG,OAAO,QAAQ,UAAU,CAAC;AAAA,MAC3D,IAAI,GAAG,MAAM,eAAe,EAAE,GAAG,OAAO,QAAQ,UAAU,CAAC;AAAA,MAC3D,IAAI,GAAG,MAAM,eAAe,EAAE,GAAG,OAAO,QAAQ,WAAW,CAAC;AAAA,MAC5D,IAAI,GAAG,MAAM,eAAe,EAAE,GAAG,OAAO,QAAQ,WAAW,CAAC;AAAA,IAC9D,CAAC;AAED,WAAO,aAAa,KAAK,EAAE,SAAS,SAAS,UAAU,SAAS,CAAC;AAAA,EACnE,SAAS,KAAK;AACZ,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,YAAQ,MAAM,uCAAuC,GAAG;AACxD,WAAO,aAAa,KAAK,EAAE,OAAO,uBAAuB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC7E;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,uBAAuB;AAAA,MACrD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport { InboxProposal } from '../../../data/entities'\nimport { ALL_CATEGORIES } from '../../../data/validators'\nimport { resolveRequestContext, UnauthorizedError } from '../../routeHelpers'\nimport {\n  resolveCache,\n  createCountsCacheKey,\n  createCountsCacheTag,\n  COUNTS_CACHE_TTL_MS,\n} from '../../../lib/cache'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const cache = resolveCache(ctx.container)\n\n    if (cache) {\n      const cacheKey = createCountsCacheKey(ctx.tenantId)\n      const cached = await runWithCacheTenant(ctx.tenantId, () => cache.get(cacheKey))\n      if (cached) {\n        return NextResponse.json(cached)\n      }\n    }\n\n    const scope = {\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      deletedAt: null,\n      isActive: true,\n    }\n\n    // em.count() is safe here \u2014 filter fields (status, organizationId, tenantId,\n    // deletedAt, isActive, category) are not encrypted, so decryption helpers are not needed.\n    const [pending, partial, accepted, rejected] = await Promise.all([\n      ctx.em.count(InboxProposal, { ...scope, status: 'pending' }),\n      ctx.em.count(InboxProposal, { ...scope, status: 'partial' }),\n      ctx.em.count(InboxProposal, { ...scope, status: 'accepted' }),\n      ctx.em.count(InboxProposal, { ...scope, status: 'rejected' }),\n    ])\n\n    // Single GROUP BY query for category counts \u2014 O(1) queries\n    const knex = ctx.em.getKnex()\n    const categoryRows = await knex('inbox_proposals')\n      .select('category')\n      .count('* as count')\n      .where({\n        organization_id: ctx.organizationId,\n        tenant_id: ctx.tenantId,\n        is_active: true,\n      })\n      .whereNull('deleted_at')\n      .groupBy('category')\n\n    const byCategory: Record<string, number> = {}\n    for (const cat of ALL_CATEGORIES) {\n      byCategory[cat] = 0\n    }\n    for (const row of categoryRows) {\n      const cat = row.category as string | null\n      if (cat && cat in byCategory) {\n        byCategory[cat] = Number(row.count)\n      }\n    }\n\n    const responseBody = { pending, partial, accepted, rejected, byCategory }\n\n    if (cache) {\n      const cacheKey = createCountsCacheKey(ctx.tenantId)\n      const tag = createCountsCacheTag(ctx.tenantId)\n      try {\n        await runWithCacheTenant(ctx.tenantId, () =>\n          cache.set(cacheKey, responseBody, { ttl: COUNTS_CACHE_TTL_MS, tags: [tag] }),\n        )\n      } catch (err) {\n        console.warn('[inbox_ops:proposals:counts] Failed to set cache', err)\n      }\n    }\n\n    return NextResponse.json(responseBody)\n  } catch (err) {\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    console.error('[inbox_ops:proposals:counts] Error:', err)\n    return NextResponse.json({ error: 'Failed to get counts' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Proposal counts',\n  methods: {\n    GET: {\n      summary: 'Get proposal status and category counts',\n      description: 'Returns counts by status and by category for tab badges and filter dropdowns',\n      responses: [\n        { status: 200, description: 'Status and category counts object' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,0BAA0B;AACnC,SAAS,qBAAqB;AAC9B,SAAS,sBAAsB;AAC/B,SAAS,uBAAuB,yBAAyB;AACzD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,EAAE;AAC1E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,QAAQ,aAAa,IAAI,SAAS;AAExC,QAAI,OAAO;AACT,YAAM,WAAW,qBAAqB,IAAI,QAAQ;AAClD,YAAM,SAAS,MAAM,mBAAmB,IAAI,UAAU,MAAM,MAAM,IAAI,QAAQ,CAAC;AAC/E,UAAI,QAAQ;AACV,eAAO,aAAa,KAAK,MAAM;AAAA,MACjC;AAAA,IACF;AAEA,UAAM,QAAQ;AAAA,MACZ,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,WAAW;AAAA,MACX,UAAU;AAAA,IACZ;AAIA,UAAM,CAAC,SAAS,SAAS,UAAU,QAAQ,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC/D,IAAI,GAAG,MAAM,eAAe,EAAE,GAAG,OAAO,QAAQ,UAAU,CAAC;AAAA,MAC3D,IAAI,GAAG,MAAM,eAAe,EAAE,GAAG,OAAO,QAAQ,UAAU,CAAC;AAAA,MAC3D,IAAI,GAAG,MAAM,eAAe,EAAE,GAAG,OAAO,QAAQ,WAAW,CAAC;AAAA,MAC5D,IAAI,GAAG,MAAM,eAAe,EAAE,GAAG,OAAO,QAAQ,WAAW,CAAC;AAAA,IAC9D,CAAC;AAGD,UAAM,OAAO,IAAI,GAAG,QAAQ;AAC5B,UAAM,eAAe,MAAM,KAAK,iBAAiB,EAC9C,OAAO,UAAU,EACjB,MAAM,YAAY,EAClB,MAAM;AAAA,MACL,iBAAiB,IAAI;AAAA,MACrB,WAAW,IAAI;AAAA,MACf,WAAW;AAAA,IACb,CAAC,EACA,UAAU,YAAY,EACtB,QAAQ,UAAU;AAErB,UAAM,aAAqC,CAAC;AAC5C,eAAW,OAAO,gBAAgB;AAChC,iBAAW,GAAG,IAAI;AAAA,IACpB;AACA,eAAW,OAAO,cAAc;AAC9B,YAAM,MAAM,IAAI;AAChB,UAAI,OAAO,OAAO,YAAY;AAC5B,mBAAW,GAAG,IAAI,OAAO,IAAI,KAAK;AAAA,MACpC;AAAA,IACF;AAEA,UAAM,eAAe,EAAE,SAAS,SAAS,UAAU,UAAU,WAAW;AAExE,QAAI,OAAO;AACT,YAAM,WAAW,qBAAqB,IAAI,QAAQ;AAClD,YAAM,MAAM,qBAAqB,IAAI,QAAQ;AAC7C,UAAI;AACF,cAAM;AAAA,UAAmB,IAAI;AAAA,UAAU,MACrC,MAAM,IAAI,UAAU,cAAc,EAAE,KAAK,qBAAqB,MAAM,CAAC,GAAG,EAAE,CAAC;AAAA,QAC7E;AAAA,MACF,SAAS,KAAK;AACZ,gBAAQ,KAAK,oDAAoD,GAAG;AAAA,MACtE;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,YAAY;AAAA,EACvC,SAAS,KAAK;AACZ,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,YAAQ,MAAM,uCAAuC,GAAG;AACxD,WAAO,aAAa,KAAK,EAAE,OAAO,uBAAuB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC7E;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,oCAAoC;AAAA,MAClE;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/proposals/route.js

@@ -1,4 +1,5 @@
 import { NextResponse } from "next/server";
+import { ZodError } from "zod";
 import { findAndCountWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { escapeLikePattern } from "@open-mercato/shared/lib/db/escapeLikePattern";
 import { InboxProposal, InboxEmail, InboxProposalAction, InboxDiscrepancy } from "../../data/entities.js";
@@ -12,6 +13,7 @@ async function GET(req) {
     const url = new URL(req.url);
     const query = proposalListQuerySchema.parse({
       status: url.searchParams.get("status") || void 0,
+      category: url.searchParams.get("category") || void 0,
       search: url.searchParams.get("search") || void 0,
       page: url.searchParams.get("page") || void 0,
       pageSize: url.searchParams.get("pageSize") || void 0
@@ -26,6 +28,14 @@ async function GET(req) {
     if (query.status) {
       where.status = query.status;
     }
+    if (query.category) {
+      const categories = query.category.split(",").map((c) => c.trim()).filter(Boolean);
+      if (categories.length === 1) {
+        where.category = categories[0];
+      } else if (categories.length > 1) {
+        where.category = { $in: categories };
+      }
+    }
     if (query.search) {
       where.summary = { $ilike: `%${escapeLikePattern(query.search)}%` };
     }
@@ -71,6 +81,9 @@ async function GET(req) {
       totalPages: Math.ceil(total / query.pageSize)
     });
   } catch (err) {
+    if (err instanceof ZodError) {
+      return NextResponse.json({ error: "Invalid query parameters" }, { status: 400 });
+    }
     if (err instanceof UnauthorizedError) {
       return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
     }

package/dist/modules/inbox_ops/api/proposals/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/inbox_ops/api/proposals/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { FilterQuery } from '@mikro-orm/postgresql'\nimport { findAndCountWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { InboxProposal, InboxEmail, InboxProposalAction, InboxDiscrepancy } from '../../data/entities'\nimport { proposalListQuerySchema } from '../../data/validators'\nimport { resolveRequestContext, UnauthorizedError } from '../routeHelpers'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const query = proposalListQuerySchema.parse({\n      status: url.searchParams.get('status') || undefined,\n      search: url.searchParams.get('search') || undefined,\n      page: url.searchParams.get('page') || undefined,\n      pageSize: url.searchParams.get('pageSize') || undefined,\n    })\n\n    const ctx = await resolveRequestContext(req)\n\n    const where: FilterQuery<InboxProposal> = {\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      deletedAt: null,\n      isActive: true,\n    }\n\n    if (query.status) {\n      where.status = query.status\n    }\n    if (query.search) {\n      where.summary = { $ilike: `%${escapeLikePattern(query.search)}%` }\n    }\n\n    const offset = (query.page - 1) * query.pageSize\n\n    const [items, total] = await findAndCountWithDecryption(\n      ctx.em,\n      InboxProposal,\n      where,\n      {\n        limit: query.pageSize,\n        offset,\n        orderBy: { createdAt: 'DESC' },\n      },\n      ctx.scope,\n    )\n\n    // Enrich proposals with email, action, and discrepancy data\n    const proposalIds = items.map((p) => p.id)\n    const emailIds = [...new Set(items.map((p) => p.inboxEmailId).filter(Boolean))]\n\n    const [emails, allActions, allDiscrepancies] = await Promise.all([\n      emailIds.length > 0\n        ? findWithDecryption(ctx.em, InboxEmail, { id: { $in: emailIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId }, {}, ctx.scope)\n        : Promise.resolve([] as InboxEmail[]),\n      proposalIds.length > 0\n        ? findWithDecryption(ctx.em, InboxProposalAction, { proposalId: { $in: proposalIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId, deletedAt: null }, {}, ctx.scope)\n        : Promise.resolve([] as InboxProposalAction[]),\n      proposalIds.length > 0\n        ? findWithDecryption(ctx.em, InboxDiscrepancy, { proposalId: { $in: proposalIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId, resolved: false }, {}, ctx.scope)\n        : Promise.resolve([] as InboxDiscrepancy[]),\n    ])\n\n    const emailMap = new Map(emails.map((e) => [e.id, e]))\n\n    const enrichedItems = items.map((proposal) => {\n      const email = emailMap.get(proposal.inboxEmailId)\n      const proposalActions = allActions.filter((a) => a.proposalId === proposal.id)\n      const proposalDiscrepancies = allDiscrepancies.filter((d) => d.proposalId === proposal.id)\n\n      return {\n        ...proposal,\n        actionCount: proposalActions.length,\n        pendingActionCount: proposalActions.filter((a) => a.status === 'pending').length,\n        discrepancyCount: proposalDiscrepancies.length,\n        emailSubject: email?.subject || null,\n        emailFrom: email?.forwardedByName || email?.forwardedByAddress || null,\n        receivedAt: email?.receivedAt || proposal.createdAt,\n      }\n    })\n\n    return NextResponse.json({\n      items: enrichedItems,\n      total,\n      page: query.page,\n      pageSize: query.pageSize,\n      totalPages: Math.ceil(total / query.pageSize),\n    })\n  } catch (err) {\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    console.error('[inbox_ops:proposals] Error listing proposals:', err)\n    return NextResponse.json({ error: 'Failed to list proposals' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Proposals',\n  methods: {\n    GET: {\n      summary: 'List proposals',\n      description: 'List inbox proposals with optional status filter and pagination',\n      responses: [\n        { status: 200, description: 'Paginated list of proposals' },\n        { status: 401, description: 'Unauthorized' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAG7B,SAAS,4BAA4B,0BAA0B;AAC/D,SAAS,yBAAyB;AAClC,SAAS,eAAe,YAAY,qBAAqB,wBAAwB;AACjF,SAAS,+BAA+B;AACxC,SAAS,uBAAuB,yBAAyB;AAElD,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,EAAE;AAC1E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,wBAAwB,MAAM;AAAA,MAC1C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,MACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAChD,CAAC;AAED,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,QAAoC;AAAA,MACxC,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,WAAW;AAAA,MACX,UAAU;AAAA,IACZ;AAEA,QAAI,MAAM,QAAQ;AAChB,YAAM,SAAS,MAAM;AAAA,IACvB;AACA,QAAI,MAAM,QAAQ;AAChB,YAAM,UAAU,EAAE,QAAQ,IAAI,kBAAkB,MAAM,MAAM,CAAC,IAAI;AAAA,IACnE;AAEA,UAAM,UAAU,MAAM,OAAO,KAAK,MAAM;AAExC,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,MAC3B,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,QACE,OAAO,MAAM;AAAA,QACb;AAAA,QACA,SAAS,EAAE,WAAW,OAAO;AAAA,MAC/B;AAAA,MACA,IAAI;AAAA,IACN;AAGA,UAAM,cAAc,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE;AACzC,UAAM,WAAW,CAAC,GAAG,IAAI,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,OAAO,CAAC,CAAC;AAE9E,UAAM,CAAC,QAAQ,YAAY,gBAAgB,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC/D,SAAS,SAAS,IACd,mBAAmB,IAAI,IAAI,YAAY,EAAE,IAAI,EAAE,KAAK,SAAS,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS,GAAG,CAAC,GAAG,IAAI,KAAK,IAC3I,QAAQ,QAAQ,CAAC,CAAiB;AAAA,MACtC,YAAY,SAAS,IACjB,mBAAmB,IAAI,IAAI,qBAAqB,EAAE,YAAY,EAAE,KAAK,YAAY,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,UAAU,WAAW,KAAK,GAAG,CAAC,GAAG,IAAI,KAAK,IAChL,QAAQ,QAAQ,CAAC,CAA0B;AAAA,MAC/C,YAAY,SAAS,IACjB,mBAAmB,IAAI,IAAI,kBAAkB,EAAE,YAAY,EAAE,KAAK,YAAY,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,UAAU,UAAU,MAAM,GAAG,CAAC,GAAG,IAAI,KAAK,IAC7K,QAAQ,QAAQ,CAAC,CAAuB;AAAA,IAC9C,CAAC;AAED,UAAM,WAAW,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAErD,UAAM,gBAAgB,MAAM,IAAI,CAAC,aAAa;AAC5C,YAAM,QAAQ,SAAS,IAAI,SAAS,YAAY;AAChD,YAAM,kBAAkB,WAAW,OAAO,CAAC,MAAM,EAAE,eAAe,SAAS,EAAE;AAC7E,YAAM,wBAAwB,iBAAiB,OAAO,CAAC,MAAM,EAAE,eAAe,SAAS,EAAE;AAEzF,aAAO;AAAA,QACL,GAAG;AAAA,QACH,aAAa,gBAAgB;AAAA,QAC7B,oBAAoB,gBAAgB,OAAO,CAAC,MAAM,EAAE,WAAW,SAAS,EAAE;AAAA,QAC1E,kBAAkB,sBAAsB;AAAA,QACxC,cAAc,OAAO,WAAW;AAAA,QAChC,WAAW,OAAO,mBAAmB,OAAO,sBAAsB;AAAA,QAClE,YAAY,OAAO,cAAc,SAAS;AAAA,MAC5C;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,MACP;AAAA,MACA,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,IAC9C,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,YAAQ,MAAM,kDAAkD,GAAG;AACnE,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,8BAA8B;AAAA,QAC1D,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { ZodError } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { FilterQuery } from '@mikro-orm/postgresql'\nimport { findAndCountWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { InboxProposal, InboxEmail, InboxProposalAction, InboxDiscrepancy, type InboxProposalCategory } from '../../data/entities'\nimport { proposalListQuerySchema } from '../../data/validators'\nimport { resolveRequestContext, UnauthorizedError } from '../routeHelpers'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['inbox_ops.proposals.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const url = new URL(req.url)\n    const query = proposalListQuerySchema.parse({\n      status: url.searchParams.get('status') || undefined,\n      category: url.searchParams.get('category') || undefined,\n      search: url.searchParams.get('search') || undefined,\n      page: url.searchParams.get('page') || undefined,\n      pageSize: url.searchParams.get('pageSize') || undefined,\n    })\n\n    const ctx = await resolveRequestContext(req)\n\n    const where: FilterQuery<InboxProposal> = {\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      deletedAt: null,\n      isActive: true,\n    }\n\n    if (query.status) {\n      where.status = query.status\n    }\n    if (query.category) {\n      const categories = query.category.split(',').map((c) => c.trim()).filter(Boolean) as InboxProposalCategory[]\n      if (categories.length === 1) {\n        where.category = categories[0]\n      } else if (categories.length > 1) {\n        where.category = { $in: categories }\n      }\n    }\n    if (query.search) {\n      where.summary = { $ilike: `%${escapeLikePattern(query.search)}%` }\n    }\n\n    const offset = (query.page - 1) * query.pageSize\n\n    const [items, total] = await findAndCountWithDecryption(\n      ctx.em,\n      InboxProposal,\n      where,\n      {\n        limit: query.pageSize,\n        offset,\n        orderBy: { createdAt: 'DESC' },\n      },\n      ctx.scope,\n    )\n\n    // Enrich proposals with email, action, and discrepancy data\n    const proposalIds = items.map((p) => p.id)\n    const emailIds = [...new Set(items.map((p) => p.inboxEmailId).filter(Boolean))]\n\n    const [emails, allActions, allDiscrepancies] = await Promise.all([\n      emailIds.length > 0\n        ? findWithDecryption(ctx.em, InboxEmail, { id: { $in: emailIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId }, {}, ctx.scope)\n        : Promise.resolve([] as InboxEmail[]),\n      proposalIds.length > 0\n        ? findWithDecryption(ctx.em, InboxProposalAction, { proposalId: { $in: proposalIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId, deletedAt: null }, {}, ctx.scope)\n        : Promise.resolve([] as InboxProposalAction[]),\n      proposalIds.length > 0\n        ? findWithDecryption(ctx.em, InboxDiscrepancy, { proposalId: { $in: proposalIds }, organizationId: ctx.organizationId, tenantId: ctx.tenantId, resolved: false }, {}, ctx.scope)\n        : Promise.resolve([] as InboxDiscrepancy[]),\n    ])\n\n    const emailMap = new Map(emails.map((e) => [e.id, e]))\n\n    const enrichedItems = items.map((proposal) => {\n      const email = emailMap.get(proposal.inboxEmailId)\n      const proposalActions = allActions.filter((a) => a.proposalId === proposal.id)\n      const proposalDiscrepancies = allDiscrepancies.filter((d) => d.proposalId === proposal.id)\n\n      return {\n        ...proposal,\n        actionCount: proposalActions.length,\n        pendingActionCount: proposalActions.filter((a) => a.status === 'pending').length,\n        discrepancyCount: proposalDiscrepancies.length,\n        emailSubject: email?.subject || null,\n        emailFrom: email?.forwardedByName || email?.forwardedByAddress || null,\n        receivedAt: email?.receivedAt || proposal.createdAt,\n      }\n    })\n\n    return NextResponse.json({\n      items: enrichedItems,\n      total,\n      page: query.page,\n      pageSize: query.pageSize,\n      totalPages: Math.ceil(total / query.pageSize),\n    })\n  } catch (err) {\n    if (err instanceof ZodError) {\n      return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n    }\n    if (err instanceof UnauthorizedError) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    console.error('[inbox_ops:proposals] Error listing proposals:', err)\n    return NextResponse.json({ error: 'Failed to list proposals' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'InboxOps',\n  summary: 'Proposals',\n  methods: {\n    GET: {\n      summary: 'List proposals',\n      description: 'List inbox proposals with optional status filter and pagination',\n      responses: [\n        { status: 200, description: 'Paginated list of proposals' },\n        { status: 401, description: 'Unauthorized' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB;AAGzB,SAAS,4BAA4B,0BAA0B;AAC/D,SAAS,yBAAyB;AAClC,SAAS,eAAe,YAAY,qBAAqB,wBAAoD;AAC7G,SAAS,+BAA+B;AACxC,SAAS,uBAAuB,yBAAyB;AAElD,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,EAAE;AAC1E;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,wBAAwB,MAAM;AAAA,MAC1C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,MAC9C,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAAA,MAC1C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,MACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,IAChD,CAAC;AAED,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAE3C,UAAM,QAAoC;AAAA,MACxC,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,WAAW;AAAA,MACX,UAAU;AAAA,IACZ;AAEA,QAAI,MAAM,QAAQ;AAChB,YAAM,SAAS,MAAM;AAAA,IACvB;AACA,QAAI,MAAM,UAAU;AAClB,YAAM,aAAa,MAAM,SAAS,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AAChF,UAAI,WAAW,WAAW,GAAG;AAC3B,cAAM,WAAW,WAAW,CAAC;AAAA,MAC/B,WAAW,WAAW,SAAS,GAAG;AAChC,cAAM,WAAW,EAAE,KAAK,WAAW;AAAA,MACrC;AAAA,IACF;AACA,QAAI,MAAM,QAAQ;AAChB,YAAM,UAAU,EAAE,QAAQ,IAAI,kBAAkB,MAAM,MAAM,CAAC,IAAI;AAAA,IACnE;AAEA,UAAM,UAAU,MAAM,OAAO,KAAK,MAAM;AAExC,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,MAC3B,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,QACE,OAAO,MAAM;AAAA,QACb;AAAA,QACA,SAAS,EAAE,WAAW,OAAO;AAAA,MAC/B;AAAA,MACA,IAAI;AAAA,IACN;AAGA,UAAM,cAAc,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE;AACzC,UAAM,WAAW,CAAC,GAAG,IAAI,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,OAAO,CAAC,CAAC;AAE9E,UAAM,CAAC,QAAQ,YAAY,gBAAgB,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC/D,SAAS,SAAS,IACd,mBAAmB,IAAI,IAAI,YAAY,EAAE,IAAI,EAAE,KAAK,SAAS,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,SAAS,GAAG,CAAC,GAAG,IAAI,KAAK,IAC3I,QAAQ,QAAQ,CAAC,CAAiB;AAAA,MACtC,YAAY,SAAS,IACjB,mBAAmB,IAAI,IAAI,qBAAqB,EAAE,YAAY,EAAE,KAAK,YAAY,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,UAAU,WAAW,KAAK,GAAG,CAAC,GAAG,IAAI,KAAK,IAChL,QAAQ,QAAQ,CAAC,CAA0B;AAAA,MAC/C,YAAY,SAAS,IACjB,mBAAmB,IAAI,IAAI,kBAAkB,EAAE,YAAY,EAAE,KAAK,YAAY,GAAG,gBAAgB,IAAI,gBAAgB,UAAU,IAAI,UAAU,UAAU,MAAM,GAAG,CAAC,GAAG,IAAI,KAAK,IAC7K,QAAQ,QAAQ,CAAC,CAAuB;AAAA,IAC9C,CAAC;AAED,UAAM,WAAW,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAErD,UAAM,gBAAgB,MAAM,IAAI,CAAC,aAAa;AAC5C,YAAM,QAAQ,SAAS,IAAI,SAAS,YAAY;AAChD,YAAM,kBAAkB,WAAW,OAAO,CAAC,MAAM,EAAE,eAAe,SAAS,EAAE;AAC7E,YAAM,wBAAwB,iBAAiB,OAAO,CAAC,MAAM,EAAE,eAAe,SAAS,EAAE;AAEzF,aAAO;AAAA,QACL,GAAG;AAAA,QACH,aAAa,gBAAgB;AAAA,QAC7B,oBAAoB,gBAAgB,OAAO,CAAC,MAAM,EAAE,WAAW,SAAS,EAAE;AAAA,QAC1E,kBAAkB,sBAAsB;AAAA,QACxC,cAAc,OAAO,WAAW;AAAA,QAChC,WAAW,OAAO,mBAAmB,OAAO,sBAAsB;AAAA,QAClE,YAAY,OAAO,cAAc,SAAS;AAAA,MAC5C;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,MACP;AAAA,MACA,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,YAAY,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,IAC9C,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,eAAe,UAAU;AAC3B,aAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjF;AACA,QAAI,eAAe,mBAAmB;AACpC,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,YAAQ,MAAM,kDAAkD,GAAG;AACnE,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,8BAA8B;AAAA,QAC1D,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/inbox_ops/api/settings/route.js

@@ -1,8 +1,16 @@
 import { NextResponse } from "next/server";
+import { runWithCacheTenant } from "@open-mercato/cache";
 import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { InboxSettings } from "../../data/entities.js";
 import { updateSettingsSchema } from "../../data/validators.js";
 import { resolveRequestContext, handleRouteError } from "../routeHelpers.js";
+import {
+  resolveCache,
+  createSettingsCacheKey,
+  createSettingsCacheTag,
+  invalidateSettingsCache,
+  SETTINGS_CACHE_TTL_MS
+} from "../../lib/cache.js";
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["inbox_ops.settings.manage"] },
   PATCH: { requireAuth: true, requireFeatures: ["inbox_ops.settings.manage"] }
@@ -10,6 +18,14 @@ const metadata = {
 async function GET(req) {
   try {
     const ctx = await resolveRequestContext(req);
+    const cache = resolveCache(ctx.container);
+    if (cache) {
+      const cacheKey = createSettingsCacheKey(ctx.tenantId);
+      const cached = await runWithCacheTenant(ctx.tenantId, () => cache.get(cacheKey));
+      if (cached) {
+        return NextResponse.json(cached);
+      }
+    }
     const settings = await findOneWithDecryption(
       ctx.em,
       InboxSettings,
@@ -21,14 +37,27 @@ async function GET(req) {
       void 0,
       ctx.scope
     );
-    return NextResponse.json({
+    const responseBody = {
       settings: settings ? {
         id: settings.id,
         inboxAddress: settings.inboxAddress,
         isActive: settings.isActive,
         workingLanguage: settings.workingLanguage
       } : null
-    });
+    };
+    if (cache) {
+      const cacheKey = createSettingsCacheKey(ctx.tenantId);
+      const tag = createSettingsCacheTag(ctx.tenantId);
+      try {
+        await runWithCacheTenant(
+          ctx.tenantId,
+          () => cache.set(cacheKey, responseBody, { ttl: SETTINGS_CACHE_TTL_MS, tags: [tag] })
+        );
+      } catch (err) {
+        console.warn("[inbox_ops:settings] Failed to set cache", err);
+      }
+    }
+    return NextResponse.json(responseBody);
   } catch (err) {
     return handleRouteError(err, "load settings");
   }
@@ -62,6 +91,8 @@ async function PATCH(req) {
       settings.isActive = parsed.data.isActive;
     }
     await ctx.em.flush();
+    const cache = resolveCache(ctx.container);
+    await runWithCacheTenant(ctx.tenantId, () => invalidateSettingsCache(cache, ctx.tenantId));
     return NextResponse.json({
       ok: true,
       settings: {