@open-mercato/core 0.6.4-develop.4382.1.6b4f656b77 → 0.6.4

package/dist/modules/communication_channels/widgets/injection-table.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/widgets/injection-table.ts"],
+  "sourcesContent": ["import type { ModuleInjectionTable } from '@open-mercato/shared/modules/widgets/injection'\n\n/**\n * Hub widget \u2192 messages-module spot wiring (SPEC-045d \u00A79.3).\n *\n * The Messages module exposes 4 injection spots (registered in slice 2a). The\n * hub mounts its widgets here so channel-linked messages get channel-aware\n * rendering without modifying the Messages module's templates.\n *\n * Provider packages can register additional widgets at the same spots OR\n * replace these hub-default widgets via UMES component replacement (handles\n * like `widget:communication_channels.injection.channel-badge`).\n */\nexport const injectionTable: ModuleInjectionTable = {\n  'data-table:messages:columns': [\n    {\n      widgetId: 'communication_channels.injection.channel-badge',\n      priority: 100,\n    },\n  ],\n  'detail:messages:message:body:after': [\n    {\n      widgetId: 'communication_channels.injection.channel-payload-renderer',\n      priority: 100,\n    },\n    {\n      widgetId: 'communication_channels.injection.reaction-bar',\n      priority: 90,\n    },\n  ],\n  'detail:messages:message:sidebar': [\n    {\n      widgetId: 'communication_channels.injection.channel-info-panel',\n      priority: 100,\n    },\n  ],\n  // Profile dropdown (top-right avatar): a discoverable entry to the per-user\n  // channel-connect page, placed directly under \"Change Password\".\n  'menu:topbar:profile-dropdown': [\n    {\n      widgetId: 'communication_channels.injection.profile-channels-menu',\n      priority: 100,\n    },\n  ],\n}\n\nexport default injectionTable\n"],
+  "mappings": "AAaO,MAAM,iBAAuC;AAAA,EAClD,+BAA+B;AAAA,IAC7B;AAAA,MACE,UAAU;AAAA,MACV,UAAU;AAAA,IACZ;AAAA,EACF;AAAA,EACA,sCAAsC;AAAA,IACpC;AAAA,MACE,UAAU;AAAA,MACV,UAAU;AAAA,IACZ;AAAA,IACA;AAAA,MACE,UAAU;AAAA,MACV,UAAU;AAAA,IACZ;AAAA,EACF;AAAA,EACA,mCAAmC;AAAA,IACjC;AAAA,MACE,UAAU;AAAA,MACV,UAAU;AAAA,IACZ;AAAA,EACF;AAAA;AAAA;AAAA,EAGA,gCAAgC;AAAA,IAC9B;AAAA,MACE,UAAU;AAAA,MACV,UAAU;AAAA,IACZ;AAAA,EACF;AACF;AAEA,IAAO,0BAAQ;",
+  "names": []
+}

package/dist/modules/communication_channels/widgets/notifications/ChannelRequiresReauthRenderer.js

@@ -0,0 +1,25 @@
+"use client";
+import { jsx, jsxs } from "react/jsx-runtime";
+import { useT } from "@open-mercato/shared/lib/i18n/context";
+function ChannelRequiresReauthRenderer({ notification }) {
+  const t = useT();
+  const channelName = notification.metadata?.channelDisplayName ?? t("communication_channels.notifications.channel_requires_reauth.unknownChannel", "A channel");
+  const providerKey = notification.metadata?.providerKey ?? "";
+  return /* @__PURE__ */ jsxs("div", { className: "flex flex-col gap-1", children: [
+    /* @__PURE__ */ jsx("span", { className: "font-medium text-status-warning-text", children: notification.title ?? t(
+      "communication_channels.notifications.channel_requires_reauth.title",
+      "Channel needs reconnection"
+    ) }),
+    /* @__PURE__ */ jsx("span", { className: "text-sm text-muted-foreground", children: providerKey ? `${channelName} (${providerKey})` : channelName }),
+    /* @__PURE__ */ jsx("span", { className: "text-sm text-muted-foreground", children: notification.body ?? t(
+      "communication_channels.notifications.channel_requires_reauth.body",
+      "Authentication expired. Reconnect this channel to resume sending and receiving messages."
+    ) })
+  ] });
+}
+var ChannelRequiresReauthRenderer_default = ChannelRequiresReauthRenderer;
+export {
+  ChannelRequiresReauthRenderer,
+  ChannelRequiresReauthRenderer_default as default
+};
+//# sourceMappingURL=ChannelRequiresReauthRenderer.js.map

package/dist/modules/communication_channels/widgets/notifications/ChannelRequiresReauthRenderer.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/communication_channels/widgets/notifications/ChannelRequiresReauthRenderer.tsx"],
+  "sourcesContent": ["'use client'\n\nimport * as React from 'react'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\n\ntype NotificationRendererProps = {\n  notification: {\n    id: string\n    type: string\n    title?: string | null\n    body?: string | null\n    sourceEntityType?: string | null\n    sourceEntityId?: string | null\n    metadata?: Record<string, unknown> | null\n  }\n}\n\nexport function ChannelRequiresReauthRenderer({ notification }: NotificationRendererProps) {\n  const t = useT()\n  const channelName =\n    (notification.metadata?.channelDisplayName as string | undefined) ??\n    t('communication_channels.notifications.channel_requires_reauth.unknownChannel', 'A channel')\n  const providerKey = (notification.metadata?.providerKey as string | undefined) ?? ''\n\n  return (\n    <div className=\"flex flex-col gap-1\">\n      <span className=\"font-medium text-status-warning-text\">\n        {notification.title ??\n          t(\n            'communication_channels.notifications.channel_requires_reauth.title',\n            'Channel needs reconnection',\n          )}\n      </span>\n      <span className=\"text-sm text-muted-foreground\">\n        {providerKey ? `${channelName} (${providerKey})` : channelName}\n      </span>\n      <span className=\"text-sm text-muted-foreground\">\n        {notification.body ??\n          t(\n            'communication_channels.notifications.channel_requires_reauth.body',\n            'Authentication expired. Reconnect this channel to resume sending and receiving messages.',\n          )}\n      </span>\n    </div>\n  )\n}\n\nexport default ChannelRequiresReauthRenderer\n"],
+  "mappings": ";AAyBI,SACE,KADF;AAtBJ,SAAS,YAAY;AAcd,SAAS,8BAA8B,EAAE,aAAa,GAA8B;AACzF,QAAM,IAAI,KAAK;AACf,QAAM,cACH,aAAa,UAAU,sBACxB,EAAE,+EAA+E,WAAW;AAC9F,QAAM,cAAe,aAAa,UAAU,eAAsC;AAElF,SACE,qBAAC,SAAI,WAAU,uBACb;AAAA,wBAAC,UAAK,WAAU,wCACb,uBAAa,SACZ;AAAA,MACE;AAAA,MACA;AAAA,IACF,GACJ;AAAA,IACA,oBAAC,UAAK,WAAU,iCACb,wBAAc,GAAG,WAAW,KAAK,WAAW,MAAM,aACrD;AAAA,IACA,oBAAC,UAAK,WAAU,iCACb,uBAAa,QACZ;AAAA,MACE;AAAA,MACA;AAAA,IACF,GACJ;AAAA,KACF;AAEJ;AAEA,IAAO,wCAAQ;",
+  "names": []
+}

package/dist/modules/communication_channels/widgets/notifications/MessageReceivedRenderer.js

@@ -0,0 +1,19 @@
+"use client";
+import { jsx, jsxs } from "react/jsx-runtime";
+import { useT } from "@open-mercato/shared/lib/i18n/context";
+function MessageReceivedRenderer({ notification }) {
+  const t = useT();
+  const senderName = notification.metadata?.senderDisplayName ?? notification.metadata?.senderIdentifier ?? t("communication_channels.notifications.message_received.unknownSender", "Unknown sender");
+  const channelLabel = notification.metadata?.channelDisplayName ?? notification.metadata?.providerKey ?? "";
+  return /* @__PURE__ */ jsxs("div", { className: "flex flex-col gap-1", children: [
+    /* @__PURE__ */ jsx("span", { className: "font-medium text-foreground", children: notification.title ?? t("communication_channels.notifications.message_received.title", "New external message") }),
+    /* @__PURE__ */ jsx("span", { className: "text-sm text-muted-foreground", children: channelLabel ? `${senderName} \xB7 ${channelLabel}` : senderName }),
+    notification.body ? /* @__PURE__ */ jsx("span", { className: "text-sm text-muted-foreground line-clamp-2", children: notification.body }) : null
+  ] });
+}
+var MessageReceivedRenderer_default = MessageReceivedRenderer;
+export {
+  MessageReceivedRenderer,
+  MessageReceivedRenderer_default as default
+};
+//# sourceMappingURL=MessageReceivedRenderer.js.map

package/dist/modules/communication_channels/widgets/notifications/MessageReceivedRenderer.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/communication_channels/widgets/notifications/MessageReceivedRenderer.tsx"],
+  "sourcesContent": ["'use client'\n\nimport * as React from 'react'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\n\ntype NotificationRendererProps = {\n  notification: {\n    id: string\n    type: string\n    title?: string | null\n    body?: string | null\n    sourceEntityType?: string | null\n    sourceEntityId?: string | null\n    metadata?: Record<string, unknown> | null\n  }\n}\n\nexport function MessageReceivedRenderer({ notification }: NotificationRendererProps) {\n  const t = useT()\n  const senderName =\n    (notification.metadata?.senderDisplayName as string | undefined) ??\n    (notification.metadata?.senderIdentifier as string | undefined) ??\n    t('communication_channels.notifications.message_received.unknownSender', 'Unknown sender')\n  const channelLabel =\n    (notification.metadata?.channelDisplayName as string | undefined) ??\n    (notification.metadata?.providerKey as string | undefined) ??\n    ''\n\n  return (\n    <div className=\"flex flex-col gap-1\">\n      <span className=\"font-medium text-foreground\">\n        {notification.title ??\n          t('communication_channels.notifications.message_received.title', 'New external message')}\n      </span>\n      <span className=\"text-sm text-muted-foreground\">\n        {channelLabel ? `${senderName} \u00B7 ${channelLabel}` : senderName}\n      </span>\n      {notification.body ? (\n        <span className=\"text-sm text-muted-foreground line-clamp-2\">{notification.body}</span>\n      ) : null}\n    </div>\n  )\n}\n\nexport default MessageReceivedRenderer\n"],
+  "mappings": ";AA6BI,SACE,KADF;AA1BJ,SAAS,YAAY;AAcd,SAAS,wBAAwB,EAAE,aAAa,GAA8B;AACnF,QAAM,IAAI,KAAK;AACf,QAAM,aACH,aAAa,UAAU,qBACvB,aAAa,UAAU,oBACxB,EAAE,uEAAuE,gBAAgB;AAC3F,QAAM,eACH,aAAa,UAAU,sBACvB,aAAa,UAAU,eACxB;AAEF,SACE,qBAAC,SAAI,WAAU,uBACb;AAAA,wBAAC,UAAK,WAAU,+BACb,uBAAa,SACZ,EAAE,+DAA+D,sBAAsB,GAC3F;AAAA,IACA,oBAAC,UAAK,WAAU,iCACb,yBAAe,GAAG,UAAU,SAAM,YAAY,KAAK,YACtD;AAAA,IACC,aAAa,OACZ,oBAAC,UAAK,WAAU,8CAA8C,uBAAa,MAAK,IAC9E;AAAA,KACN;AAEJ;AAEA,IAAO,kCAAQ;",
+  "names": []
+}

package/dist/modules/communication_channels/widgets/notifications/index.js

@@ -0,0 +1,7 @@
+import { MessageReceivedRenderer } from "./MessageReceivedRenderer.js";
+import { ChannelRequiresReauthRenderer } from "./ChannelRequiresReauthRenderer.js";
+export {
+  ChannelRequiresReauthRenderer,
+  MessageReceivedRenderer
+};
+//# sourceMappingURL=index.js.map

package/dist/modules/communication_channels/widgets/notifications/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/communication_channels/widgets/notifications/index.ts"],
+  "sourcesContent": ["export { MessageReceivedRenderer } from './MessageReceivedRenderer'\nexport { ChannelRequiresReauthRenderer } from './ChannelRequiresReauthRenderer'\n"],
+  "mappings": "AAAA,SAAS,+BAA+B;AACxC,SAAS,qCAAqC;",
+  "names": []
+}

package/dist/modules/communication_channels/workers/channel-import-history.js

@@ -0,0 +1,185 @@
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { CommunicationChannel } from "../data/entities.js";
+import {
+  COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID
+} from "../commands/ingest-inbound-message.js";
+import { COMMUNICATION_CHANNELS_QUEUES } from "../lib/queue.js";
+import { refreshCredentialsIfNeeded } from "../lib/credential-refresh.js";
+import { classifyOutboundError } from "../lib/error-classification.js";
+const metadata = {
+  queue: COMMUNICATION_CHANNELS_QUEUES.importHistory,
+  id: "communication_channels:channel-import-history",
+  concurrency: 1
+};
+async function handle(job, ctx) {
+  const payload = job.payload;
+  const { progressJobId, channelId, sinceDays, contactEmails, maxMessages, scope } = payload;
+  const progressService = ctx.resolve("progressService");
+  const progressContext = {
+    tenantId: scope.tenantId,
+    organizationId: scope.organizationId
+  };
+  const em = ctx.resolve("em").fork();
+  const adapterRegistry = ctx.resolve("channelAdapterRegistry");
+  try {
+    await progressService.startJob(progressJobId, progressContext);
+    const channel = await findOneWithDecryption(
+      em,
+      CommunicationChannel,
+      {
+        id: channelId,
+        tenantId: scope.tenantId,
+        organizationId: scope.organizationId,
+        deletedAt: null
+      },
+      void 0,
+      scope
+    );
+    if (!channel) {
+      await progressService.failJob(
+        progressJobId,
+        { errorMessage: "Channel not found" },
+        progressContext
+      );
+      return;
+    }
+    if (!channel.isActive || channel.status !== "connected") {
+      await progressService.failJob(
+        progressJobId,
+        { errorMessage: `Channel is not connected (status=${channel.status})` },
+        progressContext
+      );
+      return;
+    }
+    const adapter = adapterRegistry?.get(channel.providerKey);
+    if (!adapter || typeof adapter.importHistory !== "function") {
+      await progressService.failJob(
+        progressJobId,
+        {
+          errorMessage: `Provider "${channel.providerKey}" does not support history import`
+        },
+        progressContext
+      );
+      return;
+    }
+    let credentialsService = null;
+    try {
+      credentialsService = ctx.resolve("integrationCredentialsService");
+    } catch {
+      credentialsService = null;
+    }
+    const credentialsScope = {
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId,
+      userId: channel.userId ?? null
+    };
+    let credentials = {};
+    if (channel.credentialsRef && credentialsService) {
+      try {
+        credentials = await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope) ?? {};
+      } catch {
+        credentials = {};
+      }
+    }
+    const refreshed = await refreshCredentialsIfNeeded(
+      { adapter, channelId: channel.id, credentials, scope: credentialsScope },
+      { credentialsService }
+    );
+    credentials = refreshed.credentials;
+    const commandBus = ctx.resolve("commandBus");
+    const containerProxy = { resolve: ctx.resolve.bind(ctx) };
+    const commandCtx = {
+      container: containerProxy,
+      auth: null,
+      organizationScope: null,
+      selectedOrganizationId: scope.organizationId,
+      organizationIds: [scope.organizationId]
+    };
+    let cursor;
+    let processedCount = 0;
+    let totalCount = maxMessages;
+    let firstPage = true;
+    const MAX_PAGES = 100;
+    for (let pageIndex = 0; pageIndex < MAX_PAGES; pageIndex += 1) {
+      if (await progressService.isCancellationRequested(progressJobId, scope.tenantId)) {
+        await progressService.markCancelled(progressJobId, progressContext);
+        return;
+      }
+      const page = await adapter.importHistory({
+        credentials,
+        scope: { tenantId: scope.tenantId, organizationId: scope.organizationId },
+        sinceDays,
+        contactEmails,
+        maxMessages,
+        cursor
+      });
+      if (firstPage && typeof page.totalCandidates === "number") {
+        totalCount = Math.min(maxMessages, page.totalCandidates);
+        await progressService.updateProgress(
+          progressJobId,
+          { totalCount, processedCount: 0 },
+          progressContext
+        );
+        firstPage = false;
+      }
+      for (const message of page.messages) {
+        if (processedCount >= maxMessages) break;
+        try {
+          const input = {
+            channelId: channel.id,
+            providerKey: channel.providerKey,
+            channelType: channel.channelType,
+            scope: { tenantId: scope.tenantId, organizationId: scope.organizationId },
+            message
+          };
+          await commandBus.execute(COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID, {
+            input,
+            ctx: commandCtx
+          });
+        } catch (err) {
+          const classification = classifyOutboundError(err);
+          if (classification.transient) {
+            throw err;
+          }
+          console.warn(
+            `[communication_channels:channel-import-history] permanent ingest failure on channel ${channel.id}; skipping message ${message.externalMessageId}. Reason: ${classification.message}`
+          );
+        }
+        processedCount += 1;
+      }
+      await progressService.updateProgress(
+        progressJobId,
+        { processedCount, totalCount },
+        progressContext
+      );
+      if (processedCount >= maxMessages) break;
+      if (!page.hasMore || !page.nextCursor) break;
+      cursor = page.nextCursor;
+    }
+    await progressService.completeJob(
+      progressJobId,
+      { resultSummary: { importedCount: processedCount, channelId } },
+      progressContext
+    );
+  } catch (err) {
+    const message = err instanceof Error ? err.message : "Import history job failed";
+    const stack = err instanceof Error ? err.stack : void 0;
+    try {
+      await progressService.failJob(
+        progressJobId,
+        { errorMessage: message.slice(0, 2e3), errorStack: stack?.slice(0, 1e4) },
+        progressContext
+      );
+    } catch (failErr) {
+      console.error(
+        `[communication_channels:channel-import-history] failed to mark progress job ${progressJobId} as failed: ${failErr instanceof Error ? failErr.message : String(failErr)}`
+      );
+    }
+    throw err;
+  }
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=channel-import-history.js.map

package/dist/modules/communication_channels/workers/channel-import-history.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/workers/channel-import-history.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../data/entities'\nimport {\n  COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID,\n  type IngestInboundMessageInput,\n} from '../commands/ingest-inbound-message'\nimport { COMMUNICATION_CHANNELS_QUEUES } from '../lib/queue'\nimport { refreshCredentialsIfNeeded } from '../lib/credential-refresh'\nimport { classifyOutboundError } from '../lib/error-classification'\nimport type { ChannelAdapterRegistry } from '../lib/registry'\nimport type {\n  ChannelImportHistoryJobPayload,\n} from '../commands/queue-import-history'\nimport type {\n  ProgressService,\n  ProgressServiceContext,\n} from '../../progress/lib/progressService'\n\n/**\n * Spec B \u00A7 Phase B6 \u2014 operator-triggered backlog import worker.\n *\n * Distinct from `poll-channel` (which runs every scheduler tick and ingests\n * *new* mail since the channel cursor). This worker reaches backward in time\n * by calling `adapter.importHistory` with explicit `sinceDays` / `contactEmails`\n * filters, paginating until the adapter signals `hasMore: false` or the\n * `maxMessages` cap is reached.\n *\n * Runs with `concurrency: 1` to avoid hammering the provider with multiple\n * historical sweeps in parallel; per-channel concurrency is additionally\n * enforced at enqueue time by `queueImportHistory`.\n */\nexport const metadata: WorkerMeta = {\n  queue: COMMUNICATION_CHANNELS_QUEUES.importHistory,\n  id: 'communication_channels:channel-import-history',\n  concurrency: 1,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\nexport default async function handle(\n  job: QueuedJob<ChannelImportHistoryJobPayload>,\n  ctx: HandlerContext,\n): Promise<void> {\n  const payload = job.payload\n  const { progressJobId, channelId, sinceDays, contactEmails, maxMessages, scope } = payload\n\n  const progressService = ctx.resolve<ProgressService>('progressService')\n  const progressContext: ProgressServiceContext = {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n  }\n\n  const em = (ctx.resolve('em') as EntityManager).fork()\n  const adapterRegistry = ctx.resolve<ChannelAdapterRegistry>('channelAdapterRegistry')\n\n  try {\n    await progressService.startJob(progressJobId, progressContext)\n\n    const channel = await findOneWithDecryption(\n      em,\n      CommunicationChannel,\n      {\n        id: channelId,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        deletedAt: null,\n      },\n      undefined,\n      scope,\n    )\n    if (!channel) {\n      await progressService.failJob(\n        progressJobId,\n        { errorMessage: 'Channel not found' },\n        progressContext,\n      )\n      return\n    }\n    if (!channel.isActive || channel.status !== 'connected') {\n      await progressService.failJob(\n        progressJobId,\n        { errorMessage: `Channel is not connected (status=${channel.status})` },\n        progressContext,\n      )\n      return\n    }\n\n    const adapter = adapterRegistry?.get(channel.providerKey)\n    if (!adapter || typeof adapter.importHistory !== 'function') {\n      await progressService.failJob(\n        progressJobId,\n        {\n          errorMessage: `Provider \"${channel.providerKey}\" does not support history import`,\n        },\n        progressContext,\n      )\n      return\n    }\n\n    // Resolve + refresh credentials. Same flow as poll-channel.\n    let credentialsService: CredentialsServiceLike | null = null\n    try {\n      credentialsService = ctx.resolve<CredentialsServiceLike>('integrationCredentialsService')\n    } catch {\n      credentialsService = null\n    }\n    const credentialsScope = {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      userId: channel.userId ?? null,\n    }\n    let credentials: Record<string, unknown> = {}\n    if (channel.credentialsRef && credentialsService) {\n      try {\n        credentials =\n          (await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope)) ?? {}\n      } catch {\n        credentials = {}\n      }\n    }\n    const refreshed = await refreshCredentialsIfNeeded(\n      { adapter, channelId: channel.id, credentials, scope: credentialsScope },\n      { credentialsService },\n    )\n    credentials = refreshed.credentials\n\n    const commandBus = ctx.resolve<CommandBus>('commandBus')\n    const containerProxy = { resolve: ctx.resolve.bind(ctx) }\n    const commandCtx = {\n      container: containerProxy as never,\n      auth: null,\n      organizationScope: null,\n      selectedOrganizationId: scope.organizationId,\n      organizationIds: [scope.organizationId],\n    }\n\n    let cursor: string | undefined\n    let processedCount = 0\n    let totalCount = maxMessages\n    let firstPage = true\n\n    // Bounded loop guards against a misbehaving adapter (infinite hasMore).\n    // 100 pages * HARD_CAP (default 200) = 20k messages \u2014 far above the 5k cap\n    // enforced by the schema, so this only trips on adapter bugs.\n    const MAX_PAGES = 100\n    for (let pageIndex = 0; pageIndex < MAX_PAGES; pageIndex += 1) {\n      if (await progressService.isCancellationRequested(progressJobId, scope.tenantId)) {\n        await progressService.markCancelled(progressJobId, progressContext)\n        return\n      }\n\n      const page = await adapter.importHistory!({\n        credentials,\n        scope: { tenantId: scope.tenantId, organizationId: scope.organizationId },\n        sinceDays,\n        contactEmails,\n        maxMessages,\n        cursor,\n      })\n\n      if (firstPage && typeof page.totalCandidates === 'number') {\n        totalCount = Math.min(maxMessages, page.totalCandidates)\n        await progressService.updateProgress(\n          progressJobId,\n          { totalCount, processedCount: 0 },\n          progressContext,\n        )\n        firstPage = false\n      }\n\n      for (const message of page.messages) {\n        if (processedCount >= maxMessages) break\n        try {\n          const input: IngestInboundMessageInput = {\n            channelId: channel.id,\n            providerKey: channel.providerKey,\n            channelType: channel.channelType,\n            scope: { tenantId: scope.tenantId, organizationId: scope.organizationId },\n            message,\n          }\n          await commandBus.execute(COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID, {\n            input,\n            ctx: commandCtx as never,\n          })\n        } catch (err) {\n          // Import-history is best-effort per-message. Same classification\n          // logic as poll-channel: a transient failure aborts the whole job\n          // (the operator can retry), permanent failures are logged and\n          // skipped (the bad message would loop forever otherwise).\n          const classification = classifyOutboundError(err)\n          if (classification.transient) {\n            throw err\n          }\n          console.warn(\n            `[communication_channels:channel-import-history] permanent ingest failure on channel ${channel.id}; skipping message ${message.externalMessageId}. Reason: ${classification.message}`,\n          )\n        }\n        processedCount += 1\n      }\n\n      await progressService.updateProgress(\n        progressJobId,\n        { processedCount, totalCount },\n        progressContext,\n      )\n\n      if (processedCount >= maxMessages) break\n      if (!page.hasMore || !page.nextCursor) break\n      cursor = page.nextCursor\n    }\n\n    await progressService.completeJob(\n      progressJobId,\n      { resultSummary: { importedCount: processedCount, channelId } },\n      progressContext,\n    )\n  } catch (err) {\n    const message = err instanceof Error ? err.message : 'Import history job failed'\n    const stack = err instanceof Error ? err.stack : undefined\n    try {\n      await progressService.failJob(\n        progressJobId,\n        { errorMessage: message.slice(0, 2000), errorStack: stack?.slice(0, 10000) },\n        progressContext,\n      )\n    } catch (failErr) {\n      console.error(\n        `[communication_channels:channel-import-history] failed to mark progress job ${progressJobId} as failed: ${\n          failErr instanceof Error ? failErr.message : String(failErr)\n        }`,\n      )\n    }\n    throw err\n  }\n}\n"],
+  "mappings": "AAGA,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,qCAAqC;AAC9C,SAAS,kCAAkC;AAC3C,SAAS,6BAA6B;AAuB/B,MAAM,WAAuB;AAAA,EAClC,OAAO,8BAA8B;AAAA,EACrC,IAAI;AAAA,EACJ,aAAa;AACf;AAkBA,eAAO,OACL,KACA,KACe;AACf,QAAM,UAAU,IAAI;AACpB,QAAM,EAAE,eAAe,WAAW,WAAW,eAAe,aAAa,MAAM,IAAI;AAEnF,QAAM,kBAAkB,IAAI,QAAyB,iBAAiB;AACtE,QAAM,kBAA0C;AAAA,IAC9C,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,EACxB;AAEA,QAAM,KAAM,IAAI,QAAQ,IAAI,EAAoB,KAAK;AACrD,QAAM,kBAAkB,IAAI,QAAgC,wBAAwB;AAEpF,MAAI;AACF,UAAM,gBAAgB,SAAS,eAAe,eAAe;AAE7D,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,SAAS;AACZ,YAAM,gBAAgB;AAAA,QACpB;AAAA,QACA,EAAE,cAAc,oBAAoB;AAAA,QACpC;AAAA,MACF;AACA;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,YAAY,QAAQ,WAAW,aAAa;AACvD,YAAM,gBAAgB;AAAA,QACpB;AAAA,QACA,EAAE,cAAc,oCAAoC,QAAQ,MAAM,IAAI;AAAA,QACtE;AAAA,MACF;AACA;AAAA,IACF;AAEA,UAAM,UAAU,iBAAiB,IAAI,QAAQ,WAAW;AACxD,QAAI,CAAC,WAAW,OAAO,QAAQ,kBAAkB,YAAY;AAC3D,YAAM,gBAAgB;AAAA,QACpB;AAAA,QACA;AAAA,UACE,cAAc,aAAa,QAAQ,WAAW;AAAA,QAChD;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AAGA,QAAI,qBAAoD;AACxD,QAAI;AACF,2BAAqB,IAAI,QAAgC,+BAA+B;AAAA,IAC1F,QAAQ;AACN,2BAAqB;AAAA,IACvB;AACA,UAAM,mBAAmB;AAAA,MACvB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ,QAAQ,UAAU;AAAA,IAC5B;AACA,QAAI,cAAuC,CAAC;AAC5C,QAAI,QAAQ,kBAAkB,oBAAoB;AAChD,UAAI;AACF,sBACG,MAAM,mBAAmB,QAAQ,WAAW,QAAQ,WAAW,IAAI,gBAAgB,KAAM,CAAC;AAAA,MAC/F,QAAQ;AACN,sBAAc,CAAC;AAAA,MACjB;AAAA,IACF;AACA,UAAM,YAAY,MAAM;AAAA,MACtB,EAAE,SAAS,WAAW,QAAQ,IAAI,aAAa,OAAO,iBAAiB;AAAA,MACvE,EAAE,mBAAmB;AAAA,IACvB;AACA,kBAAc,UAAU;AAExB,UAAM,aAAa,IAAI,QAAoB,YAAY;AACvD,UAAM,iBAAiB,EAAE,SAAS,IAAI,QAAQ,KAAK,GAAG,EAAE;AACxD,UAAM,aAAa;AAAA,MACjB,WAAW;AAAA,MACX,MAAM;AAAA,MACN,mBAAmB;AAAA,MACnB,wBAAwB,MAAM;AAAA,MAC9B,iBAAiB,CAAC,MAAM,cAAc;AAAA,IACxC;AAEA,QAAI;AACJ,QAAI,iBAAiB;AACrB,QAAI,aAAa;AACjB,QAAI,YAAY;AAKhB,UAAM,YAAY;AAClB,aAAS,YAAY,GAAG,YAAY,WAAW,aAAa,GAAG;AAC7D,UAAI,MAAM,gBAAgB,wBAAwB,eAAe,MAAM,QAAQ,GAAG;AAChF,cAAM,gBAAgB,cAAc,eAAe,eAAe;AAClE;AAAA,MACF;AAEA,YAAM,OAAO,MAAM,QAAQ,cAAe;AAAA,QACxC;AAAA,QACA,OAAO,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,QACxE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAED,UAAI,aAAa,OAAO,KAAK,oBAAoB,UAAU;AACzD,qBAAa,KAAK,IAAI,aAAa,KAAK,eAAe;AACvD,cAAM,gBAAgB;AAAA,UACpB;AAAA,UACA,EAAE,YAAY,gBAAgB,EAAE;AAAA,UAChC;AAAA,QACF;AACA,oBAAY;AAAA,MACd;AAEA,iBAAW,WAAW,KAAK,UAAU;AACnC,YAAI,kBAAkB,YAAa;AACnC,YAAI;AACF,gBAAM,QAAmC;AAAA,YACvC,WAAW,QAAQ;AAAA,YACnB,aAAa,QAAQ;AAAA,YACrB,aAAa,QAAQ;AAAA,YACrB,OAAO,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,YACxE;AAAA,UACF;AACA,gBAAM,WAAW,QAAQ,kDAAkD;AAAA,YACzE;AAAA,YACA,KAAK;AAAA,UACP,CAAC;AAAA,QACH,SAAS,KAAK;AAKZ,gBAAM,iBAAiB,sBAAsB,GAAG;AAChD,cAAI,eAAe,WAAW;AAC5B,kBAAM;AAAA,UACR;AACA,kBAAQ;AAAA,YACN,uFAAuF,QAAQ,EAAE,sBAAsB,QAAQ,iBAAiB,aAAa,eAAe,OAAO;AAAA,UACrL;AAAA,QACF;AACA,0BAAkB;AAAA,MACpB;AAEA,YAAM,gBAAgB;AAAA,QACpB;AAAA,QACA,EAAE,gBAAgB,WAAW;AAAA,QAC7B;AAAA,MACF;AAEA,UAAI,kBAAkB,YAAa;AACnC,UAAI,CAAC,KAAK,WAAW,CAAC,KAAK,WAAY;AACvC,eAAS,KAAK;AAAA,IAChB;AAEA,UAAM,gBAAgB;AAAA,MACpB;AAAA,MACA,EAAE,eAAe,EAAE,eAAe,gBAAgB,UAAU,EAAE;AAAA,MAC9D;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,UAAM,QAAQ,eAAe,QAAQ,IAAI,QAAQ;AACjD,QAAI;AACF,YAAM,gBAAgB;AAAA,QACpB;AAAA,QACA,EAAE,cAAc,QAAQ,MAAM,GAAG,GAAI,GAAG,YAAY,OAAO,MAAM,GAAG,GAAK,EAAE;AAAA,QAC3E;AAAA,MACF;AAAA,IACF,SAAS,SAAS;AAChB,cAAQ;AAAA,QACN,+EAA+E,aAAa,eAC1F,mBAAmB,QAAQ,QAAQ,UAAU,OAAO,OAAO,CAC7D;AAAA,MACF;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;",
+  "names": []
+}

package/dist/modules/communication_channels/workers/gmail-history-sync.js

@@ -0,0 +1,154 @@
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { CommunicationChannel } from "../data/entities.js";
+import {
+  COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID
+} from "../commands/ingest-inbound-message.js";
+import { COMMUNICATION_CHANNELS_QUEUES } from "../lib/queue.js";
+import { preservePushState } from "../lib/push-state.js";
+import { refreshCredentialsIfNeeded } from "../lib/credential-refresh.js";
+import { classifyOutboundError } from "../lib/error-classification.js";
+import { writeIngestDeadLetter } from "../lib/dead-letter.js";
+const MAX_DRAIN_PAGES = 100;
+const metadata = {
+  queue: COMMUNICATION_CHANNELS_QUEUES.gmailHistorySync,
+  id: "communication_channels:gmail-history-sync",
+  concurrency: 5
+};
+async function handle(job, ctx) {
+  const { channelId, scope } = job.payload;
+  const em = ctx.resolve("em").fork();
+  const adapterRegistry = ctx.resolve("channelAdapterRegistry");
+  const channel = await findOneWithDecryption(
+    em,
+    CommunicationChannel,
+    {
+      id: channelId,
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId ?? null,
+      deletedAt: null
+    },
+    void 0,
+    scope
+  );
+  if (!channel) {
+    console.warn(`[gmail-history-sync] channel ${channelId} not found (skip)`);
+    return;
+  }
+  if (!channel.isActive || channel.status !== "connected") return;
+  const adapter = adapterRegistry?.get(channel.providerKey);
+  if (!adapter || typeof adapter.applyPushNotification !== "function") {
+    console.warn(
+      `[gmail-history-sync] adapter for '${channel.providerKey}' does not support applyPushNotification`
+    );
+    return;
+  }
+  let credentialsService = null;
+  try {
+    credentialsService = ctx.resolve("integrationCredentialsService");
+  } catch {
+    credentialsService = null;
+  }
+  const credentialsScope = {
+    tenantId: scope.tenantId,
+    organizationId: scope.organizationId ?? scope.tenantId,
+    userId: channel.userId ?? null
+  };
+  let credentials = {};
+  if (channel.credentialsRef && credentialsService) {
+    try {
+      credentials = await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope) ?? {};
+    } catch {
+      credentials = {};
+    }
+  }
+  const refreshed = await refreshCredentialsIfNeeded(
+    { adapter, channelId: channel.id, credentials, scope: credentialsScope },
+    { credentialsService }
+  );
+  credentials = refreshed.credentials;
+  let page;
+  try {
+    page = await adapter.applyPushNotification({
+      credentials,
+      scope: { tenantId: scope.tenantId, organizationId: scope.organizationId ?? scope.tenantId },
+      channelState: channel.channelState ?? {},
+      notification: job.payload.notification
+    });
+  } catch (err) {
+    const classification = classifyOutboundError(err);
+    if (classification.transient) throw err;
+    console.warn(
+      `[gmail-history-sync] permanent failure applying push for channel ${channel.id}: ${classification.message}`
+    );
+    return;
+  }
+  const messages = Array.isArray(page?.messages) ? page.messages : [];
+  if (messages.length > 0) {
+    const commandBus = ctx.resolve("commandBus");
+    const containerProxy = { resolve: ctx.resolve.bind(ctx) };
+    const commandCtx = {
+      container: containerProxy,
+      auth: null,
+      organizationScope: null,
+      selectedOrganizationId: scope.organizationId ?? null,
+      organizationIds: scope.organizationId ? [scope.organizationId] : null
+    };
+    for (const message of messages) {
+      try {
+        const input = {
+          channelId: channel.id,
+          providerKey: channel.providerKey,
+          channelType: channel.channelType,
+          scope: { tenantId: scope.tenantId, organizationId: scope.organizationId ?? null },
+          message
+        };
+        await commandBus.execute(COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID, {
+          input,
+          ctx: commandCtx
+        });
+      } catch (err) {
+        const classification = classifyOutboundError(err);
+        if (classification.transient) {
+          throw err;
+        }
+        console.warn(
+          `[gmail-history-sync] permanent ingest failure for channel ${channel.id}: ${classification.message}`
+        );
+        await writeIngestDeadLetter({ em, scope, channel, message, err, errorMessage: classification.message });
+      }
+    }
+  }
+  if (page?.nextCursor) {
+    try {
+      const decoded = JSON.parse(Buffer.from(page.nextCursor, "base64").toString("utf-8"));
+      channel.channelState = preservePushState(channel.channelState, decoded);
+      channel.lastPolledAt = /* @__PURE__ */ new Date();
+      await em.flush();
+    } catch (err) {
+      console.warn(
+        `[gmail-history-sync] failed to persist next cursor for channel ${channel.id}: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+  }
+  if (page?.hasMore && page?.nextCursor) {
+    const drainPage = job.payload.drainPage ?? 0;
+    if (drainPage < MAX_DRAIN_PAGES) {
+      const queue = (await import("../lib/queue.js")).getCommunicationChannelsQueue(
+        COMMUNICATION_CHANNELS_QUEUES.gmailHistorySync
+      );
+      await queue.enqueue(
+        { ...job.payload, drainPage: drainPage + 1 },
+        { delayMs: 250 }
+      );
+    } else {
+      console.warn(
+        `[gmail-history-sync] drain page cap (${MAX_DRAIN_PAGES}) reached for channel ${channelId}; stopping re-enqueue`
+      );
+    }
+  }
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=gmail-history-sync.js.map

package/dist/modules/communication_channels/workers/gmail-history-sync.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/workers/gmail-history-sync.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../data/entities'\nimport {\n  COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID,\n  type IngestInboundMessageInput,\n} from '../commands/ingest-inbound-message'\nimport { COMMUNICATION_CHANNELS_QUEUES } from '../lib/queue'\nimport { preservePushState } from '../lib/push-state'\nimport { refreshCredentialsIfNeeded } from '../lib/credential-refresh'\nimport { classifyOutboundError } from '../lib/error-classification'\nimport { writeIngestDeadLetter } from '../lib/dead-letter'\nimport type { ChannelAdapterRegistry } from '../lib/registry'\n\n/**\n * Spec C \u00A7 Phase C2 \u2014 Gmail Pub/Sub push delivery worker.\n *\n * One job per verified webhook notification. Calls\n * `adapter.applyPushNotification(...)` to walk `users.history.list` from the\n * channel's stored `historyId`, then dispatches each message through\n * `ingest-inbound-message` (same path as the polling worker).\n *\n * Concurrency: bounded by the queue's default (10). Per-channel ordering is\n * NOT guaranteed across notifications \u2014 but the ingest command is idempotent\n * on `(channel_id, external_message_id)`, and Gmail's history cursor advances\n * monotonically per channel, so out-of-order replay is safe.\n */\nexport type GmailHistorySyncJobPayload = {\n  channelId: string\n  scope: { tenantId: string; organizationId: string | null }\n  notification: { emailAddress: string; historyId: string }\n  /** Self-re-enqueue drain counter (bounds the multi-page drain loop). */\n  drainPage?: number\n}\n\n/** Hard cap on self-re-enqueue drain pages \u2014 guards against an adapter that\n *  returns `hasMore` with a non-advancing cursor (a tight, unbounded loop). */\nconst MAX_DRAIN_PAGES = 100\n\nexport const metadata: WorkerMeta = {\n  queue: COMMUNICATION_CHANNELS_QUEUES.gmailHistorySync,\n  id: 'communication_channels:gmail-history-sync',\n  concurrency: 5,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\nexport default async function handle(\n  job: QueuedJob<GmailHistorySyncJobPayload>,\n  ctx: HandlerContext,\n): Promise<void> {\n  const { channelId, scope } = job.payload\n  const em = (ctx.resolve('em') as EntityManager).fork()\n  const adapterRegistry = ctx.resolve<ChannelAdapterRegistry>('channelAdapterRegistry')\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id: channelId,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId ?? null,\n      deletedAt: null,\n    },\n    undefined,\n    scope,\n  )\n  if (!channel) {\n    console.warn(`[gmail-history-sync] channel ${channelId} not found (skip)`)\n    return\n  }\n  if (!channel.isActive || channel.status !== 'connected') return\n\n  const adapter = adapterRegistry?.get(channel.providerKey)\n  if (!adapter || typeof adapter.applyPushNotification !== 'function') {\n    console.warn(\n      `[gmail-history-sync] adapter for '${channel.providerKey}' does not support applyPushNotification`,\n    )\n    return\n  }\n\n  let credentialsService: CredentialsServiceLike | null = null\n  try {\n    credentialsService = ctx.resolve<CredentialsServiceLike>('integrationCredentialsService')\n  } catch {\n    credentialsService = null\n  }\n  const credentialsScope = {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId ?? scope.tenantId,\n    userId: channel.userId ?? null,\n  }\n  let credentials: Record<string, unknown> = {}\n  if (channel.credentialsRef && credentialsService) {\n    try {\n      credentials =\n        (await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope)) ?? {}\n    } catch {\n      credentials = {}\n    }\n  }\n  const refreshed = await refreshCredentialsIfNeeded(\n    { adapter, channelId: channel.id, credentials, scope: credentialsScope },\n    { credentialsService },\n  )\n  credentials = refreshed.credentials\n\n  let page\n  try {\n    page = await adapter.applyPushNotification({\n      credentials,\n      scope: { tenantId: scope.tenantId, organizationId: scope.organizationId ?? scope.tenantId },\n      channelState: (channel.channelState as Record<string, unknown> | null) ?? {},\n      notification: job.payload.notification as unknown as Record<string, unknown>,\n    })\n  } catch (err) {\n    const classification = classifyOutboundError(err)\n    if (classification.transient) throw err\n    console.warn(\n      `[gmail-history-sync] permanent failure applying push for channel ${channel.id}: ${classification.message}`,\n    )\n    return\n  }\n\n  const messages = Array.isArray(page?.messages) ? page.messages : []\n  if (messages.length > 0) {\n    const commandBus = ctx.resolve<CommandBus>('commandBus')\n    const containerProxy = { resolve: ctx.resolve.bind(ctx) }\n    const commandCtx = {\n      container: containerProxy as never,\n      auth: null,\n      organizationScope: null,\n      selectedOrganizationId: scope.organizationId ?? null,\n      organizationIds: scope.organizationId ? [scope.organizationId] : null,\n    }\n    for (const message of messages) {\n      try {\n        const input: IngestInboundMessageInput = {\n          channelId: channel.id,\n          providerKey: channel.providerKey,\n          channelType: channel.channelType,\n          scope: { tenantId: scope.tenantId, organizationId: scope.organizationId ?? null },\n          message,\n        }\n        await commandBus.execute(COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID, {\n          input,\n          ctx: commandCtx as never,\n        })\n      } catch (err) {\n        const classification = classifyOutboundError(err)\n        if (classification.transient) {\n          // Per-message commit semantics from Spec B: re-throw so queue\n          // retry re-runs from a safe point.\n          throw err\n        }\n        console.warn(\n          `[gmail-history-sync] permanent ingest failure for channel ${channel.id}: ${classification.message}`,\n        )\n        await writeIngestDeadLetter({ em, scope, channel, message, err, errorMessage: classification.message })\n      }\n    }\n  }\n\n  // Persist the adapter's advanced cursor (encoded in nextCursor) back to\n  // channel.channelState. fetchHistory's nextCursor is a base64-JSON blob\n  // mirroring the new GmailChannelState \u2014 same as the polling worker writes.\n  if (page?.nextCursor) {\n    try {\n      const decoded = JSON.parse(Buffer.from(page.nextCursor, 'base64').toString('utf-8')) as Record<string, unknown>\n      // Carry the push keys forward via preservePushState rather than spreading\n      // the decoded cursor wholesale: a blind spread would retain a stale\n      // `pendingHistoryPageToken` after a completed drain and mis-route the next\n      // push notification.\n      channel.channelState = preservePushState(channel.channelState, decoded)\n      channel.lastPolledAt = new Date()\n      await em.flush()\n    } catch (err) {\n      console.warn(\n        `[gmail-history-sync] failed to persist next cursor for channel ${channel.id}: ${\n          err instanceof Error ? err.message : String(err)\n        }`,\n      )\n    }\n  }\n\n  if (page?.hasMore && page?.nextCursor) {\n    // Re-enqueue self so the drain continues. The Pub/Sub notification fired\n    // once, but `history.list` may need multiple pages on a busy mailbox.\n    // Bound the drain and add a small delay so an adapter that returns\n    // `hasMore: true` with a non-advancing cursor cannot spin a tight,\n    // unthrottled re-enqueue loop against the provider/queue.\n    const drainPage = job.payload.drainPage ?? 0\n    if (drainPage < MAX_DRAIN_PAGES) {\n      const queue = (await import('../lib/queue')).getCommunicationChannelsQueue(\n        COMMUNICATION_CHANNELS_QUEUES.gmailHistorySync,\n      )\n      await queue.enqueue(\n        { ...job.payload, drainPage: drainPage + 1 } as unknown as Record<string, unknown>,\n        { delayMs: 250 },\n      )\n    } else {\n      console.warn(\n        `[gmail-history-sync] drain page cap (${MAX_DRAIN_PAGES}) reached for channel ${channelId}; stopping re-enqueue`,\n      )\n    }\n  }\n}\n"],
+  "mappings": "AAGA,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,qCAAqC;AAC9C,SAAS,yBAAyB;AAClC,SAAS,kCAAkC;AAC3C,SAAS,6BAA6B;AACtC,SAAS,6BAA6B;AA0BtC,MAAM,kBAAkB;AAEjB,MAAM,WAAuB;AAAA,EAClC,OAAO,8BAA8B;AAAA,EACrC,IAAI;AAAA,EACJ,aAAa;AACf;AAkBA,eAAO,OACL,KACA,KACe;AACf,QAAM,EAAE,WAAW,MAAM,IAAI,IAAI;AACjC,QAAM,KAAM,IAAI,QAAQ,IAAI,EAAoB,KAAK;AACrD,QAAM,kBAAkB,IAAI,QAAgC,wBAAwB;AAEpF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM,kBAAkB;AAAA,MACxC,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,YAAQ,KAAK,gCAAgC,SAAS,mBAAmB;AACzE;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,YAAY,QAAQ,WAAW,YAAa;AAEzD,QAAM,UAAU,iBAAiB,IAAI,QAAQ,WAAW;AACxD,MAAI,CAAC,WAAW,OAAO,QAAQ,0BAA0B,YAAY;AACnE,YAAQ;AAAA,MACN,qCAAqC,QAAQ,WAAW;AAAA,IAC1D;AACA;AAAA,EACF;AAEA,MAAI,qBAAoD;AACxD,MAAI;AACF,yBAAqB,IAAI,QAAgC,+BAA+B;AAAA,EAC1F,QAAQ;AACN,yBAAqB;AAAA,EACvB;AACA,QAAM,mBAAmB;AAAA,IACvB,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM,kBAAkB,MAAM;AAAA,IAC9C,QAAQ,QAAQ,UAAU;AAAA,EAC5B;AACA,MAAI,cAAuC,CAAC;AAC5C,MAAI,QAAQ,kBAAkB,oBAAoB;AAChD,QAAI;AACF,oBACG,MAAM,mBAAmB,QAAQ,WAAW,QAAQ,WAAW,IAAI,gBAAgB,KAAM,CAAC;AAAA,IAC/F,QAAQ;AACN,oBAAc,CAAC;AAAA,IACjB;AAAA,EACF;AACA,QAAM,YAAY,MAAM;AAAA,IACtB,EAAE,SAAS,WAAW,QAAQ,IAAI,aAAa,OAAO,iBAAiB;AAAA,IACvE,EAAE,mBAAmB;AAAA,EACvB;AACA,gBAAc,UAAU;AAExB,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,QAAQ,sBAAsB;AAAA,MACzC;AAAA,MACA,OAAO,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,kBAAkB,MAAM,SAAS;AAAA,MAC1F,cAAe,QAAQ,gBAAmD,CAAC;AAAA,MAC3E,cAAc,IAAI,QAAQ;AAAA,IAC5B,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,iBAAiB,sBAAsB,GAAG;AAChD,QAAI,eAAe,UAAW,OAAM;AACpC,YAAQ;AAAA,MACN,oEAAoE,QAAQ,EAAE,KAAK,eAAe,OAAO;AAAA,IAC3G;AACA;AAAA,EACF;AAEA,QAAM,WAAW,MAAM,QAAQ,MAAM,QAAQ,IAAI,KAAK,WAAW,CAAC;AAClE,MAAI,SAAS,SAAS,GAAG;AACvB,UAAM,aAAa,IAAI,QAAoB,YAAY;AACvD,UAAM,iBAAiB,EAAE,SAAS,IAAI,QAAQ,KAAK,GAAG,EAAE;AACxD,UAAM,aAAa;AAAA,MACjB,WAAW;AAAA,MACX,MAAM;AAAA,MACN,mBAAmB;AAAA,MACnB,wBAAwB,MAAM,kBAAkB;AAAA,MAChD,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,IACnE;AACA,eAAW,WAAW,UAAU;AAC9B,UAAI;AACF,cAAM,QAAmC;AAAA,UACvC,WAAW,QAAQ;AAAA,UACnB,aAAa,QAAQ;AAAA,UACrB,aAAa,QAAQ;AAAA,UACrB,OAAO,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,kBAAkB,KAAK;AAAA,UAChF;AAAA,QACF;AACA,cAAM,WAAW,QAAQ,kDAAkD;AAAA,UACzE;AAAA,UACA,KAAK;AAAA,QACP,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,cAAM,iBAAiB,sBAAsB,GAAG;AAChD,YAAI,eAAe,WAAW;AAG5B,gBAAM;AAAA,QACR;AACA,gBAAQ;AAAA,UACN,6DAA6D,QAAQ,EAAE,KAAK,eAAe,OAAO;AAAA,QACpG;AACA,cAAM,sBAAsB,EAAE,IAAI,OAAO,SAAS,SAAS,KAAK,cAAc,eAAe,QAAQ,CAAC;AAAA,MACxG;AAAA,IACF;AAAA,EACF;AAKA,MAAI,MAAM,YAAY;AACpB,QAAI;AACF,YAAM,UAAU,KAAK,MAAM,OAAO,KAAK,KAAK,YAAY,QAAQ,EAAE,SAAS,OAAO,CAAC;AAKnF,cAAQ,eAAe,kBAAkB,QAAQ,cAAc,OAAO;AACtE,cAAQ,eAAe,oBAAI,KAAK;AAChC,YAAM,GAAG,MAAM;AAAA,IACjB,SAAS,KAAK;AACZ,cAAQ;AAAA,QACN,kEAAkE,QAAQ,EAAE,KAC1E,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CACjD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,MAAM,WAAW,MAAM,YAAY;AAMrC,UAAM,YAAY,IAAI,QAAQ,aAAa;AAC3C,QAAI,YAAY,iBAAiB;AAC/B,YAAM,SAAS,MAAM,OAAO,cAAc,GAAG;AAAA,QAC3C,8BAA8B;AAAA,MAChC;AACA,YAAM,MAAM;AAAA,QACV,EAAE,GAAG,IAAI,SAAS,WAAW,YAAY,EAAE;AAAA,QAC3C,EAAE,SAAS,IAAI;AAAA,MACjB;AAAA,IACF,OAAO;AACL,cAAQ;AAAA,QACN,wCAAwC,eAAe,yBAAyB,SAAS;AAAA,MAC3F;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/communication_channels/workers/gmail-renew-watch.js

@@ -0,0 +1,95 @@
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { CommunicationChannel } from "../data/entities.js";
+import { COMMUNICATION_CHANNELS_QUEUES } from "../lib/queue.js";
+import { pushRenew } from "../commands/push-renew.js";
+import { emitCommunicationChannelsEvent } from "../events.js";
+const metadata = {
+  queue: COMMUNICATION_CHANNELS_QUEUES.gmailRenewWatch,
+  id: "communication_channels:gmail-renew-watch",
+  concurrency: 1
+};
+const LEAD_HOURS = Math.max(
+  1,
+  Number.parseInt(process.env.OM_PUSH_RENEWAL_GMAIL_LEAD_HOURS ?? "24", 10) || 24
+);
+async function handle(job, ctx) {
+  const em = ctx.resolve("em").fork();
+  const cutoffMs = Date.now() + LEAD_HOURS * 60 * 60 * 1e3;
+  const scope = job?.payload?.scope ?? null;
+  const where = {
+    providerKey: "gmail",
+    isActive: true,
+    deletedAt: null
+  };
+  if (scope?.tenantId) where.tenantId = scope.tenantId;
+  if (scope?.organizationId) where.organizationId = scope.organizationId;
+  const channels = await findWithDecryption(
+    em,
+    CommunicationChannel,
+    where,
+    void 0,
+    scope ? { tenantId: scope.tenantId, organizationId: scope.organizationId ?? null } : void 0
+  );
+  const containerProxy = ctx.container;
+  let renewed = 0;
+  let failed = 0;
+  for (const channel of channels) {
+    const state = channel.channelState ?? null;
+    if (!state || state.pushStatus !== "active") continue;
+    if (typeof state.watchExpirationMs !== "number") continue;
+    if (state.watchExpirationMs > cutoffMs) continue;
+    const organizationId = channel.organizationId;
+    if (!organizationId) {
+      console.warn(
+        `[gmail-renew-watch] skipping channel ${channel.id} \u2014 no organizationId on row`
+      );
+      continue;
+    }
+    try {
+      const container = resolveContainer(containerProxy, ctx);
+      const result = await pushRenew({
+        container,
+        scope: {
+          tenantId: channel.tenantId,
+          organizationId,
+          userId: channel.userId ?? null
+        },
+        input: { channelId: channel.id }
+      });
+      if (result.pushStatus === "active") {
+        renewed += 1;
+        await emitCommunicationChannelsEvent(
+          "communication_channels.push.renewed",
+          {
+            channelId: channel.id,
+            providerKey: channel.providerKey,
+            tenantId: channel.tenantId,
+            organizationId
+          },
+          { persistent: false }
+        );
+      } else {
+        failed += 1;
+      }
+    } catch (err) {
+      failed += 1;
+      console.warn(
+        `[gmail-renew-watch] failed to renew channel ${channel.id}: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+  }
+  if (renewed > 0 || failed > 0) {
+    console.info(`[gmail-renew-watch] renewed=${renewed} failed=${failed}`);
+  }
+}
+function resolveContainer(containerProxy, ctx) {
+  if (containerProxy && typeof containerProxy === "object" && "resolve" in containerProxy) {
+    return containerProxy;
+  }
+  return { resolve: ctx.resolve.bind(ctx) };
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=gmail-renew-watch.js.map

package/dist/modules/communication_channels/workers/gmail-renew-watch.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/workers/gmail-renew-watch.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../data/entities'\nimport { COMMUNICATION_CHANNELS_QUEUES } from '../lib/queue'\nimport { pushRenew } from '../commands/push-renew'\nimport { emitCommunicationChannelsEvent } from '../events'\n\n/**\n * Spec C \u00A7 Phase C4 \u2014 Daily cron that re-issues `gmail.users.watch` for\n * channels whose `watchExpirationMs` is within the renewal lead window.\n *\n * Gmail watch expires after ~7 days. We renew with a lead time of\n * `OM_PUSH_RENEWAL_GMAIL_LEAD_HOURS` (default 24h) so a missed cron tick\n * doesn't drop us into the polling fallback.\n *\n * The actual renewal is delegated to `pushRenew` (which in turn calls\n * `pushRegister`) \u2014 Gmail's `users.watch` is idempotent, so re-calling it\n * just returns a fresh `historyId` + `expiration` and persists them.\n *\n * Scoped to `job.payload.scope` (the cron is registered per-org in\n * `setup.ts`); each per-org cron tick only walks channels for its own\n * `(tenantId, organizationId)`. A missing scope means the legacy global\n * sweep variant \u2014 supported for backwards compatibility, but new\n * registrations always carry a scope.\n */\nexport type GmailRenewWatchPayload = {\n  scope?: { tenantId: string; organizationId: string | null }\n}\n\nexport const metadata: WorkerMeta = {\n  queue: COMMUNICATION_CHANNELS_QUEUES.gmailRenewWatch,\n  id: 'communication_channels:gmail-renew-watch',\n  concurrency: 1,\n}\n\ntype HandlerContext = JobContext & { resolve: <T = unknown>(name: string) => T }\n\nconst LEAD_HOURS = Math.max(\n  1,\n  Number.parseInt(process.env.OM_PUSH_RENEWAL_GMAIL_LEAD_HOURS ?? '24', 10) || 24,\n)\n\nexport default async function handle(\n  job: QueuedJob<GmailRenewWatchPayload>,\n  ctx: HandlerContext,\n): Promise<void> {\n  const em = (ctx.resolve('em') as EntityManager).fork()\n  const cutoffMs = Date.now() + LEAD_HOURS * 60 * 60 * 1000\n  const scope = job?.payload?.scope ?? null\n\n  // Per-org cron: filter by the scope embedded in the payload. The unscoped\n  // fallback is preserved so a deploy that hand-enqueues a renewal sweep\n  // (e.g. an operator-triggered backfill) still works.\n  const where: Record<string, unknown> = {\n    providerKey: 'gmail',\n    isActive: true,\n    deletedAt: null,\n  }\n  if (scope?.tenantId) where.tenantId = scope.tenantId\n  if (scope?.organizationId) where.organizationId = scope.organizationId\n  const channels = await findWithDecryption(\n    em,\n    CommunicationChannel,\n    where,\n    undefined,\n    scope ? { tenantId: scope.tenantId, organizationId: scope.organizationId ?? null } : undefined,\n  )\n\n  const containerProxy = (ctx as unknown as { container?: unknown }).container\n  let renewed = 0\n  let failed = 0\n  for (const channel of channels) {\n    const state =\n      (channel.channelState as { watchExpirationMs?: number; pushStatus?: string } | null) ?? null\n    if (!state || state.pushStatus !== 'active') continue\n    if (typeof state.watchExpirationMs !== 'number') continue\n    if (state.watchExpirationMs > cutoffMs) continue\n\n    const organizationId = channel.organizationId\n    if (!organizationId) {\n      console.warn(\n        `[gmail-renew-watch] skipping channel ${channel.id} \u2014 no organizationId on row`,\n      )\n      continue\n    }\n\n    try {\n      const container = resolveContainer(containerProxy, ctx)\n      const result = await pushRenew({\n        container,\n        scope: {\n          tenantId: channel.tenantId,\n          organizationId,\n          userId: channel.userId ?? null,\n        },\n        input: { channelId: channel.id },\n      })\n      if (result.pushStatus === 'active') {\n        renewed += 1\n        await emitCommunicationChannelsEvent(\n          'communication_channels.push.renewed',\n          {\n            channelId: channel.id,\n            providerKey: channel.providerKey,\n            tenantId: channel.tenantId,\n            organizationId,\n          },\n          { persistent: false },\n        )\n      } else {\n        failed += 1\n      }\n    } catch (err) {\n      failed += 1\n      console.warn(\n        `[gmail-renew-watch] failed to renew channel ${channel.id}: ${\n          err instanceof Error ? err.message : String(err)\n        }`,\n      )\n    }\n  }\n  if (renewed > 0 || failed > 0) {\n    console.info(`[gmail-renew-watch] renewed=${renewed} failed=${failed}`)\n  }\n}\n\nfunction resolveContainer(\n  containerProxy: unknown,\n  ctx: { resolve: <T = unknown>(name: string) => T },\n): import('awilix').AwilixContainer {\n  // The queue runtime exposes container access via `ctx.container` in\n  // dedicated worker harnesses, but the bare-worker contract only provides\n  // `ctx.resolve(name)`. Both shapes appear in production (test harness,\n  // AUTO_SPAWN_WORKERS) so we accept either.\n  if (containerProxy && typeof containerProxy === 'object' && 'resolve' in containerProxy) {\n    return containerProxy as import('awilix').AwilixContainer\n  }\n  // Synthesize a minimal container shape from `resolve`.\n  return { resolve: ctx.resolve.bind(ctx) } as unknown as import('awilix').AwilixContainer\n}\n"],
+  "mappings": "AAEA,SAAS,0BAA0B;AACnC,SAAS,4BAA4B;AACrC,SAAS,qCAAqC;AAC9C,SAAS,iBAAiB;AAC1B,SAAS,sCAAsC;AAwBxC,MAAM,WAAuB;AAAA,EAClC,OAAO,8BAA8B;AAAA,EACrC,IAAI;AAAA,EACJ,aAAa;AACf;AAIA,MAAM,aAAa,KAAK;AAAA,EACtB;AAAA,EACA,OAAO,SAAS,QAAQ,IAAI,oCAAoC,MAAM,EAAE,KAAK;AAC/E;AAEA,eAAO,OACL,KACA,KACe;AACf,QAAM,KAAM,IAAI,QAAQ,IAAI,EAAoB,KAAK;AACrD,QAAM,WAAW,KAAK,IAAI,IAAI,aAAa,KAAK,KAAK;AACrD,QAAM,QAAQ,KAAK,SAAS,SAAS;AAKrC,QAAM,QAAiC;AAAA,IACrC,aAAa;AAAA,IACb,UAAU;AAAA,IACV,WAAW;AAAA,EACb;AACA,MAAI,OAAO,SAAU,OAAM,WAAW,MAAM;AAC5C,MAAI,OAAO,eAAgB,OAAM,iBAAiB,MAAM;AACxD,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,kBAAkB,KAAK,IAAI;AAAA,EACvF;AAEA,QAAM,iBAAkB,IAA2C;AACnE,MAAI,UAAU;AACd,MAAI,SAAS;AACb,aAAW,WAAW,UAAU;AAC9B,UAAM,QACH,QAAQ,gBAA+E;AAC1F,QAAI,CAAC,SAAS,MAAM,eAAe,SAAU;AAC7C,QAAI,OAAO,MAAM,sBAAsB,SAAU;AACjD,QAAI,MAAM,oBAAoB,SAAU;AAExC,UAAM,iBAAiB,QAAQ;AAC/B,QAAI,CAAC,gBAAgB;AACnB,cAAQ;AAAA,QACN,wCAAwC,QAAQ,EAAE;AAAA,MACpD;AACA;AAAA,IACF;AAEA,QAAI;AACF,YAAM,YAAY,iBAAiB,gBAAgB,GAAG;AACtD,YAAM,SAAS,MAAM,UAAU;AAAA,QAC7B;AAAA,QACA,OAAO;AAAA,UACL,UAAU,QAAQ;AAAA,UAClB;AAAA,UACA,QAAQ,QAAQ,UAAU;AAAA,QAC5B;AAAA,QACA,OAAO,EAAE,WAAW,QAAQ,GAAG;AAAA,MACjC,CAAC;AACD,UAAI,OAAO,eAAe,UAAU;AAClC,mBAAW;AACX,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,YACE,WAAW,QAAQ;AAAA,YACnB,aAAa,QAAQ;AAAA,YACrB,UAAU,QAAQ;AAAA,YAClB;AAAA,UACF;AAAA,UACA,EAAE,YAAY,MAAM;AAAA,QACtB;AAAA,MACF,OAAO;AACL,kBAAU;AAAA,MACZ;AAAA,IACF,SAAS,KAAK;AACZ,gBAAU;AACV,cAAQ;AAAA,QACN,+CAA+C,QAAQ,EAAE,KACvD,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CACjD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,MAAI,UAAU,KAAK,SAAS,GAAG;AAC7B,YAAQ,KAAK,+BAA+B,OAAO,WAAW,MAAM,EAAE;AAAA,EACxE;AACF;AAEA,SAAS,iBACP,gBACA,KACkC;AAKlC,MAAI,kBAAkB,OAAO,mBAAmB,YAAY,aAAa,gBAAgB;AACvF,WAAO;AAAA,EACT;AAEA,SAAO,EAAE,SAAS,IAAI,QAAQ,KAAK,GAAG,EAAE;AAC1C;",
+  "names": []
+}