@open-mercato/core 0.6.4-develop.4382.1.6b4f656b77 → 0.6.4

package/dist/modules/communication_channels/commands/process-inbound-reaction.js

@@ -0,0 +1,198 @@
+import { z } from "zod";
+import { registerCommand } from "@open-mercato/shared/lib/commands";
+import { findOneWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { emitCommunicationChannelsEvent } from "../events.js";
+import {
+  CommunicationChannel,
+  ExternalMessage,
+  MessageChannelLink,
+  MessageReaction
+} from "../data/entities.js";
+import { inboundReactionEventSchema } from "../data/validators.js";
+import {
+  allowsMultipleReactionsPerUser,
+  resolveInboundAddMutation
+} from "../lib/reaction-semantics.js";
+import { isUniqueViolation } from "../lib/pg-errors.js";
+const processInboundReactionInputSchema = z.object({
+  channelId: z.string().uuid(),
+  providerKey: z.string().min(1),
+  channelType: z.string().min(1),
+  scope: z.object({
+    tenantId: z.string().uuid(),
+    organizationId: z.string().uuid().nullable()
+  }),
+  event: inboundReactionEventSchema
+});
+const COMMUNICATION_CHANNELS_PROCESS_INBOUND_REACTION_COMMAND_ID = "communication_channels.reaction.process_inbound";
+const processInboundReactionCommand = {
+  id: COMMUNICATION_CHANNELS_PROCESS_INBOUND_REACTION_COMMAND_ID,
+  async execute(rawInput, ctx) {
+    const input = processInboundReactionInputSchema.parse(rawInput);
+    const em = ctx.container.resolve("em").fork();
+    const dscope = {
+      tenantId: input.scope.tenantId,
+      organizationId: input.scope.organizationId ?? null
+    };
+    const externalMessage = await findOneWithDecryption(
+      em,
+      ExternalMessage,
+      {
+        channelId: input.channelId,
+        externalMessageId: input.event.externalMessageId,
+        tenantId: input.scope.tenantId,
+        organizationId: input.scope.organizationId ?? null
+      },
+      void 0,
+      dscope
+    );
+    if (!externalMessage) {
+      return { status: "no_message_link" };
+    }
+    const channelLink = await findOneWithDecryption(
+      em,
+      MessageChannelLink,
+      {
+        externalMessageId: externalMessage.id,
+        tenantId: input.scope.tenantId,
+        organizationId: input.scope.organizationId ?? null
+      },
+      void 0,
+      dscope
+    );
+    if (!channelLink) {
+      return { status: "no_message_link" };
+    }
+    const messageId = channelLink.messageId;
+    const channel = await findOneWithDecryption(
+      em,
+      CommunicationChannel,
+      {
+        id: input.channelId,
+        tenantId: input.scope.tenantId,
+        organizationId: input.scope.organizationId ?? null,
+        deletedAt: null
+      },
+      void 0,
+      dscope
+    );
+    const capabilities = channel?.capabilities ?? null;
+    if (input.event.action === "added") {
+      const mutation = resolveInboundAddMutation(capabilities);
+      let replaced = 0;
+      if (mutation === "replace") {
+        const existing = await findWithDecryption(
+          em,
+          MessageReaction,
+          {
+            messageId,
+            reactedByExternalId: input.event.userIdentifier,
+            tenantId: input.scope.tenantId,
+            organizationId: input.scope.organizationId ?? null
+          },
+          void 0,
+          dscope
+        );
+        replaced = existing.length;
+        for (const row of existing) em.remove(row);
+        await em.flush();
+      }
+      let reaction;
+      try {
+        reaction = em.create(MessageReaction, {
+          messageId,
+          emoji: input.event.emoji,
+          reactedByUserId: null,
+          reactedByExternalId: input.event.userIdentifier,
+          reactedByDisplayName: input.event.userDisplayName ?? null,
+          providerKey: input.providerKey,
+          externalReactionId: input.event.externalReactionId ?? null,
+          tenantId: input.scope.tenantId,
+          organizationId: input.scope.organizationId ?? null
+        });
+        em.persist(reaction);
+        await em.flush();
+      } catch (err) {
+        if (isUniqueViolation(err)) {
+          return { status: "noop" };
+        }
+        throw err;
+      }
+      await emitCommunicationChannelsEvent(
+        "communication_channels.reaction.added",
+        {
+          reactionId: reaction.id,
+          messageId,
+          channelLinkId: channelLink.id,
+          channelId: input.channelId,
+          providerKey: input.providerKey,
+          channelType: input.channelType,
+          emoji: input.event.emoji,
+          reactedByExternalId: input.event.userIdentifier,
+          reactedByDisplayName: input.event.userDisplayName ?? null,
+          allowsMultiplePerUser: allowsMultipleReactionsPerUser(capabilities),
+          tenantId: input.scope.tenantId,
+          organizationId: input.scope.organizationId ?? null
+        },
+        { persistent: true }
+      );
+      return {
+        status: "added",
+        reactionId: reaction.id,
+        messageId,
+        emoji: input.event.emoji,
+        replaced
+      };
+    }
+    const filter = {
+      messageId,
+      reactedByExternalId: input.event.userIdentifier,
+      emoji: input.event.emoji,
+      tenantId: input.scope.tenantId,
+      organizationId: input.scope.organizationId ?? null
+    };
+    if (input.event.externalReactionId) {
+      filter.externalReactionId = input.event.externalReactionId;
+    }
+    const toDelete = await findWithDecryption(
+      em,
+      MessageReaction,
+      filter,
+      void 0,
+      dscope
+    );
+    for (const row of toDelete) em.remove(row);
+    await em.flush();
+    if (toDelete.length > 0) {
+      await emitCommunicationChannelsEvent(
+        "communication_channels.reaction.removed",
+        {
+          messageId,
+          channelLinkId: channelLink.id,
+          channelId: input.channelId,
+          providerKey: input.providerKey,
+          channelType: input.channelType,
+          emoji: input.event.emoji,
+          reactedByExternalId: input.event.userIdentifier,
+          deletedCount: toDelete.length,
+          tenantId: input.scope.tenantId,
+          organizationId: input.scope.organizationId ?? null
+        },
+        { persistent: true }
+      );
+    }
+    return {
+      status: "removed",
+      messageId,
+      emoji: input.event.emoji,
+      deleted: toDelete.length
+    };
+  }
+};
+registerCommand(processInboundReactionCommand);
+var process_inbound_reaction_default = processInboundReactionCommand;
+export {
+  COMMUNICATION_CHANNELS_PROCESS_INBOUND_REACTION_COMMAND_ID,
+  process_inbound_reaction_default as default
+};
+//# sourceMappingURL=process-inbound-reaction.js.map

package/dist/modules/communication_channels/commands/process-inbound-reaction.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/commands/process-inbound-reaction.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { registerCommand } from '@open-mercato/shared/lib/commands'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { emitCommunicationChannelsEvent } from '../events'\nimport {\n  CommunicationChannel,\n  ExternalMessage,\n  MessageChannelLink,\n  MessageReaction,\n} from '../data/entities'\nimport { inboundReactionEventSchema } from '../data/validators'\nimport {\n  allowsMultipleReactionsPerUser,\n  resolveInboundAddMutation,\n} from '../lib/reaction-semantics'\nimport type { ChannelCapabilities } from '../lib/adapter'\nimport { isUniqueViolation } from '../lib/pg-errors'\n\nconst processInboundReactionInputSchema = z.object({\n  channelId: z.string().uuid(),\n  providerKey: z.string().min(1),\n  channelType: z.string().min(1),\n  scope: z.object({\n    tenantId: z.string().uuid(),\n    organizationId: z.string().uuid().nullable(),\n  }),\n  event: inboundReactionEventSchema,\n})\n\nexport type ProcessInboundReactionInput = z.infer<typeof processInboundReactionInputSchema>\n\nexport type ProcessInboundReactionResult =\n  | { status: 'no_message_link' }\n  | {\n      status: 'added'\n      reactionId: string\n      messageId: string\n      emoji: string\n      replaced: number\n    }\n  | {\n      status: 'removed'\n      messageId: string\n      emoji: string\n      deleted: number\n    }\n  | { status: 'noop' }\n\nexport const COMMUNICATION_CHANNELS_PROCESS_INBOUND_REACTION_COMMAND_ID =\n  'communication_channels.reaction.process_inbound'\n\n/**\n * Inbound reaction processor command.\n *\n * Per SPEC-045d \u00A75.2:\n *   1. Look up `MessageChannelLink` by `(channelId, externalMessageId)` via the\n *      `ExternalMessage` row (which has the unique constraint on that pair).\n *   2. For `added`: apply per-provider semantics\n *      - `multiReactionPerUser=true` (Slack): insert; existing reactions from the\n *        same reactor are preserved.\n *      - `multiReactionPerUser=false` (WhatsApp): delete all existing reactions\n *        from the same reactor for the same message, then insert the new one.\n *   3. For `removed`: delete matching `MessageReaction` rows for\n *      `(messageId, emoji, reactedByExternalId)`. If `externalReactionId` is\n *      provided, prefer that as the lookup key.\n *   4. Emit `communication_channels.reaction.added` or `.removed`.\n *\n * The command is idempotent: re-running it for the same `externalReactionId` will\n * be a no-op for `added` (unique constraint blocks duplicates) and harmless for\n * `removed` (delete-where-not-found returns 0).\n */\nconst processInboundReactionCommand: CommandHandler<\n  ProcessInboundReactionInput,\n  ProcessInboundReactionResult\n> = {\n  id: COMMUNICATION_CHANNELS_PROCESS_INBOUND_REACTION_COMMAND_ID,\n  async execute(rawInput, ctx) {\n    const input = processInboundReactionInputSchema.parse(rawInput) as ProcessInboundReactionInput\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const dscope = {\n      tenantId: input.scope.tenantId,\n      organizationId: input.scope.organizationId ?? null,\n    }\n\n    // (1) Find the platform Message via ExternalMessage \u2192 MessageChannelLink.\n    const externalMessage = await findOneWithDecryption(\n      em,\n      ExternalMessage,\n      {\n        channelId: input.channelId,\n        externalMessageId: input.event.externalMessageId,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n      },\n      undefined,\n      dscope,\n    )\n    if (!externalMessage) {\n      // The reaction targets a message we never ingested (e.g., reaction to a\n      // history-only message we skipped). Skip silently.\n      return { status: 'no_message_link' }\n    }\n\n    const channelLink = await findOneWithDecryption(\n      em,\n      MessageChannelLink,\n      {\n        externalMessageId: externalMessage.id,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n      },\n      undefined,\n      dscope,\n    )\n    if (!channelLink) {\n      return { status: 'no_message_link' }\n    }\n\n    const messageId = channelLink.messageId\n\n    // (2) Resolve channel capabilities for semantics decision.\n    const channel = await findOneWithDecryption(\n      em,\n      CommunicationChannel,\n      {\n        id: input.channelId,\n        tenantId: input.scope.tenantId,\n        organizationId: input.scope.organizationId ?? null,\n        deletedAt: null,\n      },\n      undefined,\n      dscope,\n    )\n    const capabilities = (channel?.capabilities as ChannelCapabilities | null) ?? null\n\n    if (input.event.action === 'added') {\n      const mutation = resolveInboundAddMutation(capabilities)\n      let replaced = 0\n\n      if (mutation === 'replace') {\n        // WhatsApp-style: delete prior reactions from the same reactor.\n        const existing = await findWithDecryption(\n          em,\n          MessageReaction,\n          {\n            messageId,\n            reactedByExternalId: input.event.userIdentifier,\n            tenantId: input.scope.tenantId,\n            organizationId: input.scope.organizationId ?? null,\n          },\n          undefined,\n          dscope,\n        )\n        replaced = existing.length\n        for (const row of existing) em.remove(row)\n        await em.flush()\n      }\n\n      // Insert the new reaction. On a partial actor unique-index conflict,\n      // treat as no-op \u2014 provider sent the same reaction twice.\n      let reaction: MessageReaction\n      try {\n        reaction = em.create(MessageReaction, {\n          messageId,\n          emoji: input.event.emoji,\n          reactedByUserId: null,\n          reactedByExternalId: input.event.userIdentifier,\n          reactedByDisplayName: input.event.userDisplayName ?? null,\n          providerKey: input.providerKey,\n          externalReactionId: input.event.externalReactionId ?? null,\n          tenantId: input.scope.tenantId,\n          organizationId: input.scope.organizationId ?? null,\n        })\n        em.persist(reaction)\n        await em.flush()\n      } catch (err) {\n        // Unique constraint violation \u2192 idempotent skip.\n        if (isUniqueViolation(err)) {\n          return { status: 'noop' }\n        }\n        throw err\n      }\n\n      await emitCommunicationChannelsEvent(\n        'communication_channels.reaction.added',\n        {\n          reactionId: reaction.id,\n          messageId,\n          channelLinkId: channelLink.id,\n          channelId: input.channelId,\n          providerKey: input.providerKey,\n          channelType: input.channelType,\n          emoji: input.event.emoji,\n          reactedByExternalId: input.event.userIdentifier,\n          reactedByDisplayName: input.event.userDisplayName ?? null,\n          allowsMultiplePerUser: allowsMultipleReactionsPerUser(capabilities),\n          tenantId: input.scope.tenantId,\n          organizationId: input.scope.organizationId ?? null,\n        },\n        { persistent: true },\n      )\n\n      return {\n        status: 'added',\n        reactionId: reaction.id,\n        messageId,\n        emoji: input.event.emoji,\n        replaced,\n      }\n    }\n\n    // input.event.action === 'removed'\n    const filter: Record<string, unknown> = {\n      messageId,\n      reactedByExternalId: input.event.userIdentifier,\n      emoji: input.event.emoji,\n      tenantId: input.scope.tenantId,\n      organizationId: input.scope.organizationId ?? null,\n    }\n    if (input.event.externalReactionId) {\n      filter.externalReactionId = input.event.externalReactionId\n    }\n    const toDelete = await findWithDecryption(\n      em,\n      MessageReaction,\n      filter,\n      undefined,\n      dscope,\n    )\n    for (const row of toDelete) em.remove(row)\n    await em.flush()\n\n    if (toDelete.length > 0) {\n      await emitCommunicationChannelsEvent(\n        'communication_channels.reaction.removed',\n        {\n          messageId,\n          channelLinkId: channelLink.id,\n          channelId: input.channelId,\n          providerKey: input.providerKey,\n          channelType: input.channelType,\n          emoji: input.event.emoji,\n          reactedByExternalId: input.event.userIdentifier,\n          deletedCount: toDelete.length,\n          tenantId: input.scope.tenantId,\n          organizationId: input.scope.organizationId ?? null,\n        },\n        { persistent: true },\n      )\n    }\n\n    return {\n      status: 'removed',\n      messageId,\n      emoji: input.event.emoji,\n      deleted: toDelete.length,\n    }\n  },\n}\n\nregisterCommand(processInboundReactionCommand)\n\nexport default processInboundReactionCommand\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAGlB,SAAS,uBAAuB;AAChC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,sCAAsC;AAC/C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kCAAkC;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,SAAS,yBAAyB;AAElC,MAAM,oCAAoC,EAAE,OAAO;AAAA,EACjD,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC7B,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC7B,OAAO,EAAE,OAAO;AAAA,IACd,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,IAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC7C,CAAC;AAAA,EACD,OAAO;AACT,CAAC;AAqBM,MAAM,6DACX;AAsBF,MAAM,gCAGF;AAAA,EACF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,kCAAkC,MAAM,QAAQ;AAC9D,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,SAAS;AAAA,MACb,UAAU,MAAM,MAAM;AAAA,MACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,IAChD;AAGA,UAAM,kBAAkB,MAAM;AAAA,MAC5B;AAAA,MACA;AAAA,MACA;AAAA,QACE,WAAW,MAAM;AAAA,QACjB,mBAAmB,MAAM,MAAM;AAAA,QAC/B,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,MAChD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,iBAAiB;AAGpB,aAAO,EAAE,QAAQ,kBAAkB;AAAA,IACrC;AAEA,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA;AAAA,QACE,mBAAmB,gBAAgB;AAAA,QACnC,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,MAChD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,aAAa;AAChB,aAAO,EAAE,QAAQ,kBAAkB;AAAA,IACrC;AAEA,UAAM,YAAY,YAAY;AAG9B,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI,MAAM;AAAA,QACV,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,QAC9C,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,UAAM,eAAgB,SAAS,gBAA+C;AAE9E,QAAI,MAAM,MAAM,WAAW,SAAS;AAClC,YAAM,WAAW,0BAA0B,YAAY;AACvD,UAAI,WAAW;AAEf,UAAI,aAAa,WAAW;AAE1B,cAAM,WAAW,MAAM;AAAA,UACrB;AAAA,UACA;AAAA,UACA;AAAA,YACE;AAAA,YACA,qBAAqB,MAAM,MAAM;AAAA,YACjC,UAAU,MAAM,MAAM;AAAA,YACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,UAChD;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,mBAAW,SAAS;AACpB,mBAAW,OAAO,SAAU,IAAG,OAAO,GAAG;AACzC,cAAM,GAAG,MAAM;AAAA,MACjB;AAIA,UAAI;AACJ,UAAI;AACF,mBAAW,GAAG,OAAO,iBAAiB;AAAA,UACpC;AAAA,UACA,OAAO,MAAM,MAAM;AAAA,UACnB,iBAAiB;AAAA,UACjB,qBAAqB,MAAM,MAAM;AAAA,UACjC,sBAAsB,MAAM,MAAM,mBAAmB;AAAA,UACrD,aAAa,MAAM;AAAA,UACnB,oBAAoB,MAAM,MAAM,sBAAsB;AAAA,UACtD,UAAU,MAAM,MAAM;AAAA,UACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,QAChD,CAAC;AACD,WAAG,QAAQ,QAAQ;AACnB,cAAM,GAAG,MAAM;AAAA,MACjB,SAAS,KAAK;AAEZ,YAAI,kBAAkB,GAAG,GAAG;AAC1B,iBAAO,EAAE,QAAQ,OAAO;AAAA,QAC1B;AACA,cAAM;AAAA,MACR;AAEA,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE,YAAY,SAAS;AAAA,UACrB;AAAA,UACA,eAAe,YAAY;AAAA,UAC3B,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,aAAa,MAAM;AAAA,UACnB,OAAO,MAAM,MAAM;AAAA,UACnB,qBAAqB,MAAM,MAAM;AAAA,UACjC,sBAAsB,MAAM,MAAM,mBAAmB;AAAA,UACrD,uBAAuB,+BAA+B,YAAY;AAAA,UAClE,UAAU,MAAM,MAAM;AAAA,UACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,QAChD;AAAA,QACA,EAAE,YAAY,KAAK;AAAA,MACrB;AAEA,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,YAAY,SAAS;AAAA,QACrB;AAAA,QACA,OAAO,MAAM,MAAM;AAAA,QACnB;AAAA,MACF;AAAA,IACF;AAGA,UAAM,SAAkC;AAAA,MACtC;AAAA,MACA,qBAAqB,MAAM,MAAM;AAAA,MACjC,OAAO,MAAM,MAAM;AAAA,MACnB,UAAU,MAAM,MAAM;AAAA,MACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,IAChD;AACA,QAAI,MAAM,MAAM,oBAAoB;AAClC,aAAO,qBAAqB,MAAM,MAAM;AAAA,IAC1C;AACA,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,eAAW,OAAO,SAAU,IAAG,OAAO,GAAG;AACzC,UAAM,GAAG,MAAM;AAEf,QAAI,SAAS,SAAS,GAAG;AACvB,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE;AAAA,UACA,eAAe,YAAY;AAAA,UAC3B,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,aAAa,MAAM;AAAA,UACnB,OAAO,MAAM,MAAM;AAAA,UACnB,qBAAqB,MAAM,MAAM;AAAA,UACjC,cAAc,SAAS;AAAA,UACvB,UAAU,MAAM,MAAM;AAAA,UACtB,gBAAgB,MAAM,MAAM,kBAAkB;AAAA,QAChD;AAAA,QACA,EAAE,YAAY,KAAK;AAAA,MACrB;AAAA,IACF;AAEA,WAAO;AAAA,MACL,QAAQ;AAAA,MACR;AAAA,MACA,OAAO,MAAM,MAAM;AAAA,MACnB,SAAS,SAAS;AAAA,IACpB;AAAA,EACF;AACF;AAEA,gBAAgB,6BAA6B;AAE7C,IAAO,mCAAQ;",
+  "names": []
+}

package/dist/modules/communication_channels/commands/push-register.js

@@ -0,0 +1,146 @@
+import { z } from "zod";
+import { createCrudFormError } from "@open-mercato/ui/backend/utils/serverErrors";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { CommunicationChannel } from "../data/entities.js";
+import { getChannelAdapterRegistry } from "../lib/adapter-registry-singleton.js";
+import { refreshCredentialsIfNeeded } from "../lib/credential-refresh.js";
+import { emitCommunicationChannelsEvent } from "../events.js";
+const pushRegisterSchema = z.object({
+  channelId: z.string().uuid()
+});
+async function pushRegister(params) {
+  const input = pushRegisterSchema.parse(params.input);
+  const { container, scope } = params;
+  const em = container.resolve("em").fork();
+  const dscope = { tenantId: scope.tenantId, organizationId: scope.organizationId };
+  const channel = await findOneWithDecryption(
+    em,
+    CommunicationChannel,
+    {
+      id: input.channelId,
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId,
+      deletedAt: null
+    },
+    void 0,
+    dscope
+  );
+  if (!channel) {
+    throw createCrudFormError(
+      "Channel not found",
+      { channelId: "Channel not found" },
+      { status: 404 }
+    );
+  }
+  if (!channel.isActive || channel.status !== "connected") {
+    throw createCrudFormError(
+      "Channel must be connected to register push",
+      { channelId: `Channel status is ${channel.status}` },
+      { status: 400 }
+    );
+  }
+  const adapter = getChannelAdapterRegistry().get(channel.providerKey);
+  if (!adapter) {
+    throw createCrudFormError(
+      "Channel provider is not available",
+      { channelId: `No adapter for provider "${channel.providerKey}"` },
+      { status: 400 }
+    );
+  }
+  if (typeof adapter.registerPush !== "function") {
+    throw createCrudFormError(
+      "Push delivery is not supported on this provider",
+      { channelId: `Provider "${channel.providerKey}" does not implement registerPush` },
+      { status: 409 }
+    );
+  }
+  let credentialsService = null;
+  try {
+    credentialsService = container.resolve("integrationCredentialsService");
+  } catch {
+    credentialsService = null;
+  }
+  const credentialsScope = {
+    tenantId: scope.tenantId,
+    organizationId: scope.organizationId,
+    userId: channel.userId ?? null
+  };
+  let credentials = {};
+  if (channel.credentialsRef && credentialsService) {
+    try {
+      credentials = await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope) ?? {};
+    } catch {
+      credentials = {};
+    }
+  }
+  const refreshed = await refreshCredentialsIfNeeded(
+    { adapter, channelId: channel.id, credentials, scope: credentialsScope },
+    { credentialsService }
+  );
+  credentials = refreshed.credentials;
+  let providerConfig;
+  let notificationUrl = "";
+  if (channel.providerKey === "gmail") {
+    const topic = process.env.OM_GMAIL_PUBSUB_TOPIC;
+    providerConfig = { pubsubTopic: topic ?? "" };
+    notificationUrl = "";
+  }
+  let registration;
+  try {
+    registration = await adapter.registerPush({
+      channelId: channel.id,
+      credentials,
+      scope: { tenantId: scope.tenantId, organizationId: scope.organizationId },
+      notificationUrl,
+      providerConfig
+    });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : "registerPush threw";
+    throw createCrudFormError(
+      "Push registration failed",
+      { channelId: message.slice(0, 500) },
+      { status: 502 }
+    );
+  }
+  const previousState = channel.channelState ?? {};
+  channel.channelState = { ...previousState, ...registration.channelStatePatch };
+  if (registration.status === "active" && typeof registration.recommendedPollIntervalSeconds === "number") {
+    channel.pollIntervalSeconds = registration.recommendedPollIntervalSeconds;
+  }
+  await em.flush();
+  if (registration.status === "active") {
+    await emitCommunicationChannelsEvent(
+      "communication_channels.push.registered",
+      {
+        channelId: channel.id,
+        providerKey: channel.providerKey,
+        tenantId: scope.tenantId,
+        organizationId: scope.organizationId
+      },
+      { persistent: true }
+    );
+  } else {
+    await emitCommunicationChannelsEvent(
+      "communication_channels.push.failed",
+      {
+        channelId: channel.id,
+        providerKey: channel.providerKey,
+        tenantId: scope.tenantId,
+        organizationId: scope.organizationId,
+        error: registration.error ?? null
+      },
+      { persistent: true }
+    );
+  }
+  return {
+    channelId: channel.id,
+    pushStatus: registration.status,
+    channelState: channel.channelState ?? {},
+    error: registration.error
+  };
+}
+export {
+  pushRegister,
+  pushRegisterSchema
+};
+//# sourceMappingURL=push-register.js.map

package/dist/modules/communication_channels/commands/push-register.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/commands/push-register.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport type { AwilixContainer } from 'awilix'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createCrudFormError } from '@open-mercato/ui/backend/utils/serverErrors'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../data/entities'\nimport { getChannelAdapterRegistry } from '../lib/adapter-registry-singleton'\nimport { refreshCredentialsIfNeeded } from '../lib/credential-refresh'\nimport { emitCommunicationChannelsEvent } from '../events'\nimport type { PushRegistration } from '../lib/adapter'\n\n/**\n * Spec C \u00A7 Phase C5 \u2014 Register provider push delivery for a channel.\n *\n * Resolves credentials + tenant OAuth client config, then calls\n * `adapter.registerPush(...)`. Applies the returned state patch to\n * `channel.channelState` and flips `pollIntervalSeconds` to the\n * adapter's recommendation (or leaves it as-is on failure so polling\n * fallback continues).\n *\n * Idempotent: calling on a channel that already has `pushStatus='active'`\n * is OK \u2014 the adapter re-issues the underlying registration and we update\n * the cursor / expiry to the new value.\n */\n\nexport const pushRegisterSchema = z.object({\n  channelId: z.string().uuid(),\n})\n\nexport interface PushRegisterScope {\n  tenantId: string\n  organizationId: string\n  userId?: string | null\n}\n\nexport interface PushRegisterResult {\n  channelId: string\n  pushStatus: 'active' | 'failed'\n  channelState: Record<string, unknown>\n  error?: { code: string; message: string }\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\nexport async function pushRegister(params: {\n  container: AwilixContainer\n  scope: PushRegisterScope\n  input: { channelId: string }\n}): Promise<PushRegisterResult> {\n  const input = pushRegisterSchema.parse(params.input)\n  const { container, scope } = params\n\n  const em = (container.resolve('em') as EntityManager).fork()\n  const dscope = { tenantId: scope.tenantId, organizationId: scope.organizationId }\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id: input.channelId,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      deletedAt: null,\n    },\n    undefined,\n    dscope,\n  )\n  if (!channel) {\n    throw createCrudFormError(\n      'Channel not found',\n      { channelId: 'Channel not found' },\n      { status: 404 },\n    )\n  }\n  if (!channel.isActive || channel.status !== 'connected') {\n    throw createCrudFormError(\n      'Channel must be connected to register push',\n      { channelId: `Channel status is ${channel.status}` },\n      { status: 400 },\n    )\n  }\n\n  const adapter = getChannelAdapterRegistry().get(channel.providerKey)\n  if (!adapter) {\n    throw createCrudFormError(\n      'Channel provider is not available',\n      { channelId: `No adapter for provider \"${channel.providerKey}\"` },\n      { status: 400 },\n    )\n  }\n  if (typeof adapter.registerPush !== 'function') {\n    throw createCrudFormError(\n      'Push delivery is not supported on this provider',\n      { channelId: `Provider \"${channel.providerKey}\" does not implement registerPush` },\n      { status: 409 },\n    )\n  }\n\n  // Credentials.\n  let credentialsService: CredentialsServiceLike | null = null\n  try {\n    credentialsService = container.resolve('integrationCredentialsService') as CredentialsServiceLike\n  } catch {\n    credentialsService = null\n  }\n  const credentialsScope = {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n    userId: channel.userId ?? null,\n  }\n  let credentials: Record<string, unknown> = {}\n  if (channel.credentialsRef && credentialsService) {\n    try {\n      credentials =\n        (await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope)) ?? {}\n    } catch {\n      credentials = {}\n    }\n  }\n  const refreshed = await refreshCredentialsIfNeeded(\n    { adapter, channelId: channel.id, credentials, scope: credentialsScope },\n    { credentialsService },\n  )\n  credentials = refreshed.credentials\n\n  // Per-provider provider config.\n  let providerConfig: Record<string, unknown> | undefined\n  let notificationUrl = ''\n\n  if (channel.providerKey === 'gmail') {\n    const topic = process.env.OM_GMAIL_PUBSUB_TOPIC\n    providerConfig = { pubsubTopic: topic ?? '' }\n    notificationUrl = '' // Gmail does not use a per-call URL; Pub/Sub subscription is preconfigured.\n  }\n\n  let registration: PushRegistration\n  try {\n    registration = await adapter.registerPush({\n      channelId: channel.id,\n      credentials,\n      scope: { tenantId: scope.tenantId, organizationId: scope.organizationId },\n      notificationUrl,\n      providerConfig,\n    })\n  } catch (err) {\n    const message = err instanceof Error ? err.message : 'registerPush threw'\n    throw createCrudFormError(\n      'Push registration failed',\n      { channelId: message.slice(0, 500) },\n      { status: 502 },\n    )\n  }\n\n  // Persist results.\n  const previousState = (channel.channelState as Record<string, unknown> | null) ?? {}\n  channel.channelState = { ...previousState, ...registration.channelStatePatch }\n  if (registration.status === 'active' && typeof registration.recommendedPollIntervalSeconds === 'number') {\n    channel.pollIntervalSeconds = registration.recommendedPollIntervalSeconds\n  }\n  await em.flush()\n\n  if (registration.status === 'active') {\n    await emitCommunicationChannelsEvent(\n      'communication_channels.push.registered',\n      {\n        channelId: channel.id,\n        providerKey: channel.providerKey,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      },\n      { persistent: true },\n    )\n  } else {\n    await emitCommunicationChannelsEvent(\n      'communication_channels.push.failed',\n      {\n        channelId: channel.id,\n        providerKey: channel.providerKey,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        error: registration.error ?? null,\n      },\n      { persistent: true },\n    )\n  }\n\n  return {\n    channelId: channel.id,\n    pushStatus: registration.status,\n    channelState: (channel.channelState as Record<string, unknown> | null) ?? {},\n    error: registration.error,\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAGlB,SAAS,2BAA2B;AACpC,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC,SAAS,iCAAiC;AAC1C,SAAS,kCAAkC;AAC3C,SAAS,sCAAsC;AAiBxC,MAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,WAAW,EAAE,OAAO,EAAE,KAAK;AAC7B,CAAC;AA2BD,eAAsB,aAAa,QAIH;AAC9B,QAAM,QAAQ,mBAAmB,MAAM,OAAO,KAAK;AACnD,QAAM,EAAE,WAAW,MAAM,IAAI;AAE7B,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,SAAS,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAEhF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,MAAM;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,UAAM;AAAA,MACJ;AAAA,MACA,EAAE,WAAW,oBAAoB;AAAA,MACjC,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,YAAY,QAAQ,WAAW,aAAa;AACvD,UAAM;AAAA,MACJ;AAAA,MACA,EAAE,WAAW,qBAAqB,QAAQ,MAAM,GAAG;AAAA,MACnD,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,UAAU,0BAA0B,EAAE,IAAI,QAAQ,WAAW;AACnE,MAAI,CAAC,SAAS;AACZ,UAAM;AAAA,MACJ;AAAA,MACA,EAAE,WAAW,4BAA4B,QAAQ,WAAW,IAAI;AAAA,MAChE,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,MAAI,OAAO,QAAQ,iBAAiB,YAAY;AAC9C,UAAM;AAAA,MACJ;AAAA,MACA,EAAE,WAAW,aAAa,QAAQ,WAAW,oCAAoC;AAAA,MACjF,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAGA,MAAI,qBAAoD;AACxD,MAAI;AACF,yBAAqB,UAAU,QAAQ,+BAA+B;AAAA,EACxE,QAAQ;AACN,yBAAqB;AAAA,EACvB;AACA,QAAM,mBAAmB;AAAA,IACvB,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,QAAQ,QAAQ,UAAU;AAAA,EAC5B;AACA,MAAI,cAAuC,CAAC;AAC5C,MAAI,QAAQ,kBAAkB,oBAAoB;AAChD,QAAI;AACF,oBACG,MAAM,mBAAmB,QAAQ,WAAW,QAAQ,WAAW,IAAI,gBAAgB,KAAM,CAAC;AAAA,IAC/F,QAAQ;AACN,oBAAc,CAAC;AAAA,IACjB;AAAA,EACF;AACA,QAAM,YAAY,MAAM;AAAA,IACtB,EAAE,SAAS,WAAW,QAAQ,IAAI,aAAa,OAAO,iBAAiB;AAAA,IACvE,EAAE,mBAAmB;AAAA,EACvB;AACA,gBAAc,UAAU;AAGxB,MAAI;AACJ,MAAI,kBAAkB;AAEtB,MAAI,QAAQ,gBAAgB,SAAS;AACnC,UAAM,QAAQ,QAAQ,IAAI;AAC1B,qBAAiB,EAAE,aAAa,SAAS,GAAG;AAC5C,sBAAkB;AAAA,EACpB;AAEA,MAAI;AACJ,MAAI;AACF,mBAAe,MAAM,QAAQ,aAAa;AAAA,MACxC,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,OAAO,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,MACxE;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,UAAM;AAAA,MACJ;AAAA,MACA,EAAE,WAAW,QAAQ,MAAM,GAAG,GAAG,EAAE;AAAA,MACnC,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAGA,QAAM,gBAAiB,QAAQ,gBAAmD,CAAC;AACnF,UAAQ,eAAe,EAAE,GAAG,eAAe,GAAG,aAAa,kBAAkB;AAC7E,MAAI,aAAa,WAAW,YAAY,OAAO,aAAa,mCAAmC,UAAU;AACvG,YAAQ,sBAAsB,aAAa;AAAA,EAC7C;AACA,QAAM,GAAG,MAAM;AAEf,MAAI,aAAa,WAAW,UAAU;AACpC,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,WAAW,QAAQ;AAAA,QACnB,aAAa,QAAQ;AAAA,QACrB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB;AAAA,MACA,EAAE,YAAY,KAAK;AAAA,IACrB;AAAA,EACF,OAAO;AACL,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,WAAW,QAAQ;AAAA,QACnB,aAAa,QAAQ;AAAA,QACrB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,OAAO,aAAa,SAAS;AAAA,MAC/B;AAAA,MACA,EAAE,YAAY,KAAK;AAAA,IACrB;AAAA,EACF;AAEA,SAAO;AAAA,IACL,WAAW,QAAQ;AAAA,IACnB,YAAY,aAAa;AAAA,IACzB,cAAe,QAAQ,gBAAmD,CAAC;AAAA,IAC3E,OAAO,aAAa;AAAA,EACtB;AACF;",
+  "names": []
+}

package/dist/modules/communication_channels/commands/push-renew.js

@@ -0,0 +1,23 @@
+import { z } from "zod";
+import { pushRegister } from "./push-register.js";
+const pushRenewSchema = z.object({
+  channelId: z.string().uuid()
+});
+async function pushRenew(params) {
+  const input = pushRenewSchema.parse(params.input);
+  const result = await pushRegister({
+    container: params.container,
+    scope: params.scope,
+    input: { channelId: input.channelId }
+  });
+  return {
+    channelId: result.channelId,
+    pushStatus: result.pushStatus,
+    error: result.error
+  };
+}
+export {
+  pushRenew,
+  pushRenewSchema
+};
+//# sourceMappingURL=push-renew.js.map

package/dist/modules/communication_channels/commands/push-renew.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/commands/push-renew.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport type { AwilixContainer } from 'awilix'\nimport { pushRegister } from './push-register'\n\n/**\n * Spec C \u00A7 Phase C4 \u2014 Renew a push registration.\n *\n * The renewal action is to call the same `registerPush` adapter method again \u2014\n * Gmail's `users.watch` is idempotent (it returns a fresh `expiration` and\n * `historyId`).\n *\n * Callers: the daily renewal cron worker (`gmail-renew-watch.ts`). The\n * operator-facing `POST /push/register` route invokes `pushRegister` directly\n * without needing this helper.\n */\n\nexport const pushRenewSchema = z.object({\n  channelId: z.string().uuid(),\n})\n\nexport interface PushRenewScope {\n  tenantId: string\n  organizationId: string\n  userId?: string | null\n}\n\nexport interface PushRenewResult {\n  channelId: string\n  pushStatus: 'active' | 'failed'\n  error?: { code: string; message: string }\n}\n\nexport async function pushRenew(params: {\n  container: AwilixContainer\n  scope: PushRenewScope\n  input: { channelId: string }\n}): Promise<PushRenewResult> {\n  const input = pushRenewSchema.parse(params.input)\n  const result = await pushRegister({\n    container: params.container,\n    scope: params.scope,\n    input: { channelId: input.channelId },\n  })\n  return {\n    channelId: result.channelId,\n    pushStatus: result.pushStatus,\n    error: result.error,\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,oBAAoB;AActB,MAAM,kBAAkB,EAAE,OAAO;AAAA,EACtC,WAAW,EAAE,OAAO,EAAE,KAAK;AAC7B,CAAC;AAcD,eAAsB,UAAU,QAIH;AAC3B,QAAM,QAAQ,gBAAgB,MAAM,OAAO,KAAK;AAChD,QAAM,SAAS,MAAM,aAAa;AAAA,IAChC,WAAW,OAAO;AAAA,IAClB,OAAO,OAAO;AAAA,IACd,OAAO,EAAE,WAAW,MAAM,UAAU;AAAA,EACtC,CAAC;AACD,SAAO;AAAA,IACL,WAAW,OAAO;AAAA,IAClB,YAAY,OAAO;AAAA,IACnB,OAAO,OAAO;AAAA,EAChB;AACF;",
+  "names": []
+}

package/dist/modules/communication_channels/commands/push-unregister.js

@@ -0,0 +1,108 @@
+import { z } from "zod";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { CommunicationChannel } from "../data/entities.js";
+import { getChannelAdapterRegistry } from "../lib/adapter-registry-singleton.js";
+import { refreshCredentialsIfNeeded } from "../lib/credential-refresh.js";
+import { POLLING_ONLY_DEFAULT_INTERVAL_SECONDS } from "../lib/connect-channel.js";
+import { emitCommunicationChannelsEvent } from "../events.js";
+const pushUnregisterSchema = z.object({
+  channelId: z.string().uuid()
+});
+async function pushUnregister(params) {
+  const input = pushUnregisterSchema.parse(params.input);
+  const { container, scope } = params;
+  const em = container.resolve("em").fork();
+  const dscope = { tenantId: scope.tenantId, organizationId: scope.organizationId };
+  const channel = await findOneWithDecryption(
+    em,
+    CommunicationChannel,
+    {
+      id: input.channelId,
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId
+    },
+    void 0,
+    dscope
+  );
+  if (!channel) {
+    return { channelId: input.channelId, status: "noop" };
+  }
+  const adapter = getChannelAdapterRegistry().get(channel.providerKey);
+  if (!adapter || typeof adapter.unregisterPush !== "function") {
+    return { channelId: channel.id, status: "noop" };
+  }
+  const channelState = channel.channelState ?? {};
+  const pushStatus = typeof channelState.pushStatus === "string" ? channelState.pushStatus : null;
+  if (!pushStatus || pushStatus === "inactive") {
+    return { channelId: channel.id, status: "noop" };
+  }
+  let credentialsService = null;
+  try {
+    credentialsService = container.resolve("integrationCredentialsService");
+  } catch {
+    credentialsService = null;
+  }
+  const credentialsScope = {
+    tenantId: scope.tenantId,
+    organizationId: scope.organizationId,
+    userId: channel.userId ?? null
+  };
+  let credentials = {};
+  if (channel.credentialsRef && credentialsService) {
+    try {
+      credentials = await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope) ?? {};
+    } catch {
+      credentials = {};
+    }
+  }
+  try {
+    const refreshed = await refreshCredentialsIfNeeded(
+      { adapter, channelId: channel.id, credentials, scope: credentialsScope },
+      { credentialsService }
+    );
+    credentials = refreshed.credentials;
+  } catch {
+  }
+  try {
+    await adapter.unregisterPush({
+      channelId: channel.id,
+      credentials,
+      scope: { tenantId: scope.tenantId, organizationId: scope.organizationId },
+      channelState
+    });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    console.warn(
+      `[push-unregister] adapter.unregisterPush failed for channel ${channel.id}: ${message}`
+    );
+    return {
+      channelId: channel.id,
+      status: "failed",
+      error: { code: "adapter_unregister_failed", message: message.slice(0, 500) }
+    };
+  }
+  channel.channelState = {
+    ...channelState,
+    pushStatus: "inactive",
+    watchExpirationMs: null
+  };
+  channel.pollIntervalSeconds = POLLING_ONLY_DEFAULT_INTERVAL_SECONDS;
+  await em.flush();
+  await emitCommunicationChannelsEvent(
+    "communication_channels.push.deactivated",
+    {
+      channelId: channel.id,
+      providerKey: channel.providerKey,
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId,
+      reason: "unregistered"
+    },
+    { persistent: true }
+  );
+  return { channelId: channel.id, status: "unregistered" };
+}
+export {
+  pushUnregister,
+  pushUnregisterSchema
+};
+//# sourceMappingURL=push-unregister.js.map

package/dist/modules/communication_channels/commands/push-unregister.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/commands/push-unregister.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport type { AwilixContainer } from 'awilix'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { CommunicationChannel } from '../data/entities'\nimport { getChannelAdapterRegistry } from '../lib/adapter-registry-singleton'\nimport { refreshCredentialsIfNeeded } from '../lib/credential-refresh'\nimport { POLLING_ONLY_DEFAULT_INTERVAL_SECONDS } from '../lib/connect-channel'\nimport { emitCommunicationChannelsEvent } from '../events'\n\n/**\n * Spec C \u00A7 Phase C5 \u2014 Tear down a previously-registered push delivery.\n *\n * Called from `disconnect-channel.ts` (per-user disconnect path) so the\n * provider-side `users.watch` subscription doesn't keep firing\n * notifications at a webhook that no longer recognises the channel.\n *\n * Idempotent + best-effort: a missing registration, a 404 from the provider,\n * or any adapter error is logged but never raised. The caller still proceeds\n * with the disconnect (the channel row is cleared regardless of whether the\n * provider-side teardown succeeded).\n *\n * Companion to `commands/push-register.ts` \u2014 same lib-style helper shape,\n * not a `registerCommand`-style command (push lifecycle has no undo).\n */\n\nexport const pushUnregisterSchema = z.object({\n  channelId: z.string().uuid(),\n})\n\nexport interface PushUnregisterScope {\n  tenantId: string\n  organizationId: string\n  userId?: string | null\n}\n\nexport interface PushUnregisterResult {\n  channelId: string\n  status: 'unregistered' | 'noop' | 'failed'\n  error?: { code: string; message: string }\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\nexport async function pushUnregister(params: {\n  container: AwilixContainer\n  scope: PushUnregisterScope\n  input: { channelId: string }\n}): Promise<PushUnregisterResult> {\n  const input = pushUnregisterSchema.parse(params.input)\n  const { container, scope } = params\n\n  const em = (container.resolve('em') as EntityManager).fork()\n  const dscope = { tenantId: scope.tenantId, organizationId: scope.organizationId }\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id: input.channelId,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    },\n    undefined,\n    dscope,\n  )\n  if (!channel) {\n    return { channelId: input.channelId, status: 'noop' }\n  }\n\n  const adapter = getChannelAdapterRegistry().get(channel.providerKey)\n  if (!adapter || typeof adapter.unregisterPush !== 'function') {\n    return { channelId: channel.id, status: 'noop' }\n  }\n\n  const channelState = (channel.channelState as Record<string, unknown> | null) ?? {}\n  const pushStatus = typeof channelState.pushStatus === 'string' ? channelState.pushStatus : null\n  if (!pushStatus || pushStatus === 'inactive') {\n    return { channelId: channel.id, status: 'noop' }\n  }\n\n  let credentialsService: CredentialsServiceLike | null = null\n  try {\n    credentialsService = container.resolve('integrationCredentialsService') as CredentialsServiceLike\n  } catch {\n    credentialsService = null\n  }\n  const credentialsScope = {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n    userId: channel.userId ?? null,\n  }\n  let credentials: Record<string, unknown> = {}\n  if (channel.credentialsRef && credentialsService) {\n    try {\n      credentials =\n        (await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope)) ?? {}\n    } catch {\n      credentials = {}\n    }\n  }\n  try {\n    const refreshed = await refreshCredentialsIfNeeded(\n      { adapter, channelId: channel.id, credentials, scope: credentialsScope },\n      { credentialsService },\n    )\n    credentials = refreshed.credentials\n  } catch {\n    // Refresh failure is non-fatal \u2014 unregister tolerates expired tokens\n    // because the provider will simply return 401, which the adapter swallows\n    // or we ignore below.\n  }\n\n  try {\n    await adapter.unregisterPush({\n      channelId: channel.id,\n      credentials,\n      scope: { tenantId: scope.tenantId, organizationId: scope.organizationId },\n      channelState,\n    })\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err)\n    console.warn(\n      `[push-unregister] adapter.unregisterPush failed for channel ${channel.id}: ${message}`,\n    )\n    return {\n      channelId: channel.id,\n      status: 'failed',\n      error: { code: 'adapter_unregister_failed', message: message.slice(0, 500) },\n    }\n  }\n\n  // Clear push markers from channel state so a subsequent reconnect starts\n  // fresh.\n  channel.channelState = {\n    ...channelState,\n    pushStatus: 'inactive',\n    watchExpirationMs: null,\n  }\n  // Restore the polling-only default cadence (matching connect) so the channel\n  // keeps working until disconnect itself flips `isActive: false`.\n  channel.pollIntervalSeconds = POLLING_ONLY_DEFAULT_INTERVAL_SECONDS\n  await em.flush()\n\n  await emitCommunicationChannelsEvent(\n    'communication_channels.push.deactivated',\n    {\n      channelId: channel.id,\n      providerKey: channel.providerKey,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      reason: 'unregistered',\n    },\n    { persistent: true },\n  )\n\n  return { channelId: channel.id, status: 'unregistered' }\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,6BAA6B;AAEtC,SAAS,4BAA4B;AACrC,SAAS,iCAAiC;AAC1C,SAAS,kCAAkC;AAC3C,SAAS,6CAA6C;AACtD,SAAS,sCAAsC;AAkBxC,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,WAAW,EAAE,OAAO,EAAE,KAAK;AAC7B,CAAC;AA0BD,eAAsB,eAAe,QAIH;AAChC,QAAM,QAAQ,qBAAqB,MAAM,OAAO,KAAK;AACrD,QAAM,EAAE,WAAW,MAAM,IAAI;AAE7B,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,SAAS,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAEhF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,MAAM;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,WAAW,MAAM,WAAW,QAAQ,OAAO;AAAA,EACtD;AAEA,QAAM,UAAU,0BAA0B,EAAE,IAAI,QAAQ,WAAW;AACnE,MAAI,CAAC,WAAW,OAAO,QAAQ,mBAAmB,YAAY;AAC5D,WAAO,EAAE,WAAW,QAAQ,IAAI,QAAQ,OAAO;AAAA,EACjD;AAEA,QAAM,eAAgB,QAAQ,gBAAmD,CAAC;AAClF,QAAM,aAAa,OAAO,aAAa,eAAe,WAAW,aAAa,aAAa;AAC3F,MAAI,CAAC,cAAc,eAAe,YAAY;AAC5C,WAAO,EAAE,WAAW,QAAQ,IAAI,QAAQ,OAAO;AAAA,EACjD;AAEA,MAAI,qBAAoD;AACxD,MAAI;AACF,yBAAqB,UAAU,QAAQ,+BAA+B;AAAA,EACxE,QAAQ;AACN,yBAAqB;AAAA,EACvB;AACA,QAAM,mBAAmB;AAAA,IACvB,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,QAAQ,QAAQ,UAAU;AAAA,EAC5B;AACA,MAAI,cAAuC,CAAC;AAC5C,MAAI,QAAQ,kBAAkB,oBAAoB;AAChD,QAAI;AACF,oBACG,MAAM,mBAAmB,QAAQ,WAAW,QAAQ,WAAW,IAAI,gBAAgB,KAAM,CAAC;AAAA,IAC/F,QAAQ;AACN,oBAAc,CAAC;AAAA,IACjB;AAAA,EACF;AACA,MAAI;AACF,UAAM,YAAY,MAAM;AAAA,MACtB,EAAE,SAAS,WAAW,QAAQ,IAAI,aAAa,OAAO,iBAAiB;AAAA,MACvE,EAAE,mBAAmB;AAAA,IACvB;AACA,kBAAc,UAAU;AAAA,EAC1B,QAAQ;AAAA,EAIR;AAEA,MAAI;AACF,UAAM,QAAQ,eAAe;AAAA,MAC3B,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,OAAO,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,MACxE;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,YAAQ;AAAA,MACN,+DAA+D,QAAQ,EAAE,KAAK,OAAO;AAAA,IACvF;AACA,WAAO;AAAA,MACL,WAAW,QAAQ;AAAA,MACnB,QAAQ;AAAA,MACR,OAAO,EAAE,MAAM,6BAA6B,SAAS,QAAQ,MAAM,GAAG,GAAG,EAAE;AAAA,IAC7E;AAAA,EACF;AAIA,UAAQ,eAAe;AAAA,IACrB,GAAG;AAAA,IACH,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AAGA,UAAQ,sBAAsB;AAC9B,QAAM,GAAG,MAAM;AAEf,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,MACE,WAAW,QAAQ;AAAA,MACnB,aAAa,QAAQ;AAAA,MACrB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ;AAAA,IACV;AAAA,IACA,EAAE,YAAY,KAAK;AAAA,EACrB;AAEA,SAAO,EAAE,WAAW,QAAQ,IAAI,QAAQ,eAAe;AACzD;",
+  "names": []
+}