@open-mercato/core 0.6.4-develop.4382.1.6b4f656b77 → 0.6.4

package/dist/modules/communication_channels/workers/inbound-processor.js

@@ -0,0 +1,56 @@
+import {
+  COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID
+} from "../commands/ingest-inbound-message.js";
+import { COMMUNICATION_CHANNELS_QUEUES } from "../lib/queue.js";
+const metadata = {
+  queue: COMMUNICATION_CHANNELS_QUEUES.inbound,
+  id: "communication_channels:inbound-processor",
+  concurrency: 10
+};
+async function handle(job, ctx) {
+  const { providerKey, channelId, channelType, raw, scope } = job.payload;
+  const adapterRegistry = ctx.resolve("channelAdapterRegistry");
+  const adapter = adapterRegistry?.get(providerKey);
+  if (!adapter) {
+    throw new Error(
+      `No ChannelAdapter registered for providerKey '${providerKey}' (worker job ${job.id}). Check that the provider package is enabled in modules.ts.`
+    );
+  }
+  const normalized = await adapter.normalizeInbound(raw);
+  if (!normalized?.externalMessageId || !normalized?.externalConversationId) {
+    throw new Error(
+      `Adapter '${providerKey}' returned a normalized message missing required fields (externalMessageId, externalConversationId) for worker job ${job.id}`
+    );
+  }
+  const commandBus = ctx.resolve("commandBus");
+  const containerProxy = { resolve: ctx.resolve.bind(ctx) };
+  const commandCtx = {
+    container: containerProxy,
+    auth: null,
+    organizationScope: null,
+    selectedOrganizationId: scope.organizationId ?? null,
+    organizationIds: scope.organizationId ? [scope.organizationId] : null
+  };
+  const input = {
+    channelId,
+    providerKey,
+    channelType,
+    scope,
+    message: normalized
+  };
+  const { result } = await commandBus.execute(
+    COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID,
+    {
+      input,
+      ctx: commandCtx
+    }
+  );
+  if (result.status === "duplicate") {
+    return;
+  }
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=inbound-processor.js.map

package/dist/modules/communication_channels/workers/inbound-processor.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/workers/inbound-processor.ts"],
+  "sourcesContent": ["import type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport type { ChannelAdapterRegistry } from '../lib/registry'\nimport type { InboundMessage, NormalizedInboundMessage } from '../lib/adapter'\nimport {\n  COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID,\n  type IngestInboundMessageInput,\n  type IngestInboundMessageResult,\n} from '../commands/ingest-inbound-message'\nimport { COMMUNICATION_CHANNELS_QUEUES } from '../lib/queue'\n\n/**\n * Job payload enqueued by the webhook route after successful signature verification.\n *\n * The route does the cheap signature-verification step synchronously and immediately\n * returns 200. Normalization (`adapter.normalizeInbound`) + DB writes run here, in\n * the worker, so a slow database or a long contact-resolution path can't time-out\n * the provider's webhook.\n */\nexport type InboundProcessorPayload = {\n  providerKey: string\n  channelId: string\n  channelType: string\n  raw: InboundMessage\n  scope: {\n    tenantId: string\n    organizationId: string | null\n  }\n}\n\nexport const metadata: WorkerMeta = {\n  queue: COMMUNICATION_CHANNELS_QUEUES.inbound,\n  id: 'communication_channels:inbound-processor',\n  concurrency: 10,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\n/**\n * Inbound channel message processor.\n *\n * Per SPEC-045d \u00A76:\n *   - Resolves the channel adapter for the inbound providerKey.\n *   - Calls `adapter.normalizeInbound(raw)` to produce a `NormalizedInboundMessage`.\n *   - Hands off to the `communication_channels.message.ingest_inbound` command,\n *     which idempotently creates ExternalConversation, ChannelThreadMapping,\n *     ExternalMessage, MessageChannelLink, and composes the platform Message.\n *\n * Idempotency: handled by the command (dedup on `(channel_id, external_message_id)`).\n * The worker can safely retry on transient failures.\n */\nexport default async function handle(\n  job: QueuedJob<InboundProcessorPayload>,\n  ctx: HandlerContext,\n): Promise<void> {\n  const { providerKey, channelId, channelType, raw, scope } = job.payload\n\n  const adapterRegistry = ctx.resolve<ChannelAdapterRegistry>('channelAdapterRegistry')\n  const adapter = adapterRegistry?.get(providerKey)\n  if (!adapter) {\n    throw new Error(\n      `No ChannelAdapter registered for providerKey '${providerKey}' (worker job ${job.id}). ` +\n        'Check that the provider package is enabled in modules.ts.',\n    )\n  }\n\n  // Normalize the raw inbound payload into the hub's canonical shape.\n  const normalized: NormalizedInboundMessage = await adapter.normalizeInbound(raw)\n  if (!normalized?.externalMessageId || !normalized?.externalConversationId) {\n    throw new Error(\n      `Adapter '${providerKey}' returned a normalized message missing required fields ` +\n        `(externalMessageId, externalConversationId) for worker job ${job.id}`,\n    )\n  }\n\n  const commandBus = ctx.resolve<CommandBus>('commandBus')\n\n  // The worker's JobContext exposes `.resolve(name)` \u2014 duck-type-compatible with the\n  // shape CommandBus uses (`container.resolve(...)`). We cast to AwilixContainer because\n  // CommandRuntimeContext requires that exact type; in practice CommandBus only touches\n  // `.resolve`, mirroring the pattern in `inbox_ops/lib/messagesIntegration.ts:148`.\n  const containerProxy = { resolve: ctx.resolve.bind(ctx) }\n  const commandCtx = {\n    container: containerProxy as never,\n    auth: null,\n    organizationScope: null,\n    selectedOrganizationId: scope.organizationId ?? null,\n    organizationIds: scope.organizationId ? [scope.organizationId] : null,\n  }\n\n  const input: IngestInboundMessageInput = {\n    channelId,\n    providerKey,\n    channelType,\n    scope,\n    message: normalized,\n  }\n\n  const { result } = await commandBus.execute<IngestInboundMessageInput, IngestInboundMessageResult>(\n    COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID,\n    {\n      input,\n      ctx: commandCtx as never,\n    },\n  )\n\n  if (result.status === 'duplicate') {\n    // Idempotent skip \u2014 provider sent the same webhook twice (common with at-least-once\n    // delivery semantics). Nothing to do; we already ingested this message earlier.\n    return\n  }\n}\n"],
+  "mappings": "AAIA;AAAA,EACE;AAAA,OAGK;AACP,SAAS,qCAAqC;AAqBvC,MAAM,WAAuB;AAAA,EAClC,OAAO,8BAA8B;AAAA,EACrC,IAAI;AAAA,EACJ,aAAa;AACf;AAmBA,eAAO,OACL,KACA,KACe;AACf,QAAM,EAAE,aAAa,WAAW,aAAa,KAAK,MAAM,IAAI,IAAI;AAEhE,QAAM,kBAAkB,IAAI,QAAgC,wBAAwB;AACpF,QAAM,UAAU,iBAAiB,IAAI,WAAW;AAChD,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI;AAAA,MACR,iDAAiD,WAAW,iBAAiB,IAAI,EAAE;AAAA,IAErF;AAAA,EACF;AAGA,QAAM,aAAuC,MAAM,QAAQ,iBAAiB,GAAG;AAC/E,MAAI,CAAC,YAAY,qBAAqB,CAAC,YAAY,wBAAwB;AACzE,UAAM,IAAI;AAAA,MACR,YAAY,WAAW,sHACyC,IAAI,EAAE;AAAA,IACxE;AAAA,EACF;AAEA,QAAM,aAAa,IAAI,QAAoB,YAAY;AAMvD,QAAM,iBAAiB,EAAE,SAAS,IAAI,QAAQ,KAAK,GAAG,EAAE;AACxD,QAAM,aAAa;AAAA,IACjB,WAAW;AAAA,IACX,MAAM;AAAA,IACN,mBAAmB;AAAA,IACnB,wBAAwB,MAAM,kBAAkB;AAAA,IAChD,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,EACnE;AAEA,QAAM,QAAmC;AAAA,IACvC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,EACX;AAEA,QAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,IAClC;AAAA,IACA;AAAA,MACE;AAAA,MACA,KAAK;AAAA,IACP;AAAA,EACF;AAEA,MAAI,OAAO,WAAW,aAAa;AAGjC;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/communication_channels/workers/outbound-delivery.js

@@ -0,0 +1,85 @@
+import {
+  COMMUNICATION_CHANNELS_DELIVER_OUTBOUND_COMMAND_ID
+} from "../commands/deliver-outbound-message.js";
+import { computeBackoffMs } from "../lib/error-classification.js";
+import { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from "../lib/queue.js";
+const OUTBOUND_DELIVERY_MAX_ATTEMPTS = 3;
+const metadata = {
+  queue: COMMUNICATION_CHANNELS_QUEUES.outbound,
+  id: "communication_channels:outbound-delivery",
+  concurrency: 10
+};
+async function handle(job, ctx) {
+  const { messageId, scope, attempt = 1, forceCredentialRefresh } = job.payload;
+  const commandBus = ctx.resolve("commandBus");
+  const containerProxy = { resolve: ctx.resolve.bind(ctx) };
+  const commandCtx = {
+    container: containerProxy,
+    auth: null,
+    organizationScope: null,
+    selectedOrganizationId: scope.organizationId ?? null,
+    organizationIds: scope.organizationId ? [scope.organizationId] : null
+  };
+  let outcome;
+  try {
+    const { result } = await commandBus.execute(
+      COMMUNICATION_CHANNELS_DELIVER_OUTBOUND_COMMAND_ID,
+      {
+        input: { messageId, scope, forceCredentialRefresh },
+        ctx: commandCtx
+      }
+    );
+    outcome = result;
+  } catch (err) {
+    const errorMessage = err instanceof Error ? err.message : String(err);
+    console.warn(
+      `[communication_channels:outbound-delivery] command threw on attempt ${attempt} for message ${messageId}: ${errorMessage}`
+    );
+    if (attempt < OUTBOUND_DELIVERY_MAX_ATTEMPTS) {
+      await reenqueue(job.payload, attempt);
+      return;
+    }
+    throw err;
+  }
+  switch (outcome.status) {
+    case "delivered":
+    case "already_delivered":
+    case "no_channel_link":
+      return;
+    case "failed": {
+      if (outcome.requiresReauth && !forceCredentialRefresh && attempt < OUTBOUND_DELIVERY_MAX_ATTEMPTS) {
+        console.warn(
+          `[communication_channels:outbound-delivery] reauth failure on attempt ${attempt} for message ${messageId} (${outcome.providerKey}): ${outcome.error}. Retrying once with a forced credential refresh.`
+        );
+        await reenqueue({ ...job.payload, forceCredentialRefresh: true }, attempt);
+        return;
+      }
+      if (outcome.transient && attempt < OUTBOUND_DELIVERY_MAX_ATTEMPTS) {
+        console.warn(
+          `[communication_channels:outbound-delivery] transient failure on attempt ${attempt} for message ${messageId} (${outcome.providerKey}): ${outcome.error}. Re-enqueueing.`
+        );
+        await reenqueue(job.payload, attempt);
+        return;
+      }
+      console.error(
+        `[communication_channels:outbound-delivery] giving up on message ${messageId} after attempt ${attempt} (${outcome.providerKey}): ${outcome.error}`
+      );
+      return;
+    }
+  }
+}
+async function reenqueue(payload, attempt) {
+  const next = {
+    ...payload,
+    attempt: attempt + 1
+  };
+  const delayMs = computeBackoffMs(attempt);
+  const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.outbound);
+  await queue.enqueue(next, { delayMs });
+}
+export {
+  OUTBOUND_DELIVERY_MAX_ATTEMPTS,
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=outbound-delivery.js.map

package/dist/modules/communication_channels/workers/outbound-delivery.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/workers/outbound-delivery.ts"],
+  "sourcesContent": ["import type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport {\n  COMMUNICATION_CHANNELS_DELIVER_OUTBOUND_COMMAND_ID,\n  type DeliverOutboundMessageInput,\n  type DeliverOutboundMessageResult,\n} from '../commands/deliver-outbound-message'\nimport { computeBackoffMs } from '../lib/error-classification'\nimport { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from '../lib/queue'\n\n/**\n * Worker payload \u2014 the subscriber enqueues `{ messageId, scope, attempt? }`.\n *\n * `attempt` starts at 1 on first enqueue. The worker increments it when\n * re-enqueueing for retry, until `MAX_ATTEMPTS` is reached.\n */\nexport type OutboundDeliveryPayload = {\n  messageId: string\n  scope: {\n    tenantId: string\n    organizationId: string | null\n  }\n  /** Attempt number, 1-based. Set by the subscriber for the first try; the worker increments on retry. */\n  attempt?: number\n  /** Force credential refresh on this attempt \u2014 used after a 401 from the provider. */\n  forceCredentialRefresh?: boolean\n}\n\nexport const OUTBOUND_DELIVERY_MAX_ATTEMPTS = 3\n\nexport const metadata: WorkerMeta = {\n  queue: COMMUNICATION_CHANNELS_QUEUES.outbound,\n  id: 'communication_channels:outbound-delivery',\n  concurrency: 10,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\n/**\n * Outbound delivery worker.\n *\n * Dispatches the `deliver_outbound_message` command which performs the actual\n * send. The command returns a classified result:\n *   - `delivered` / `already_delivered` / `no_channel_link` \u2192 success, return.\n *   - `failed` with `transient: true` \u2192 re-enqueue with exponential backoff,\n *      incremented attempt, up to `OUTBOUND_DELIVERY_MAX_ATTEMPTS`.\n *   - `failed` with `transient: false` \u2192 permanent failure, no retry.\n *\n * The command already wrote the failure record + emitted `.delivery_failed`,\n * so the worker just decides whether to schedule another attempt.\n *\n * We DO NOT throw on a recorded delivery-failure outcome \u2014 that would let the\n * queue apply its own retry policy on top of ours, double-retrying. Explicit\n * re-enqueue with delayMs is the portable, controllable pattern. The one\n * exception is an *unexpected* exception from the command itself (e.g. a DB blip\n * that stopped it from recording anything): we re-enqueue up to our max and then\n * rethrow so the infrastructure failure surfaces to the queue's dead-letter\n * instead of vanishing. The command's idempotency prevents a double-send.\n */\nexport default async function handle(\n  job: QueuedJob<OutboundDeliveryPayload>,\n  ctx: HandlerContext,\n): Promise<void> {\n  const { messageId, scope, attempt = 1, forceCredentialRefresh } = job.payload\n\n  const commandBus = ctx.resolve<CommandBus>('commandBus')\n  const containerProxy = { resolve: ctx.resolve.bind(ctx) }\n  const commandCtx = {\n    container: containerProxy as never,\n    auth: null,\n    organizationScope: null,\n    selectedOrganizationId: scope.organizationId ?? null,\n    organizationIds: scope.organizationId ? [scope.organizationId] : null,\n  }\n\n  let outcome: DeliverOutboundMessageResult\n  try {\n    const { result } = await commandBus.execute<\n      DeliverOutboundMessageInput,\n      DeliverOutboundMessageResult\n    >(\n      COMMUNICATION_CHANNELS_DELIVER_OUTBOUND_COMMAND_ID,\n      {\n        input: { messageId, scope, forceCredentialRefresh },\n        ctx: commandCtx as never,\n      },\n    )\n    outcome = result\n  } catch (err) {\n    // Unexpected error inside the command itself (e.g. DB blip). Re-enqueue\n    // up to MAX_ATTEMPTS so we don't lose deliveries due to infrastructure flakes.\n    const errorMessage = err instanceof Error ? err.message : String(err)\n    console.warn(\n      `[communication_channels:outbound-delivery] command threw on attempt ${attempt} for message ${messageId}: ${errorMessage}`,\n    )\n    if (attempt < OUTBOUND_DELIVERY_MAX_ATTEMPTS) {\n      await reenqueue(job.payload, attempt)\n      return\n    }\n    // Attempts exhausted on an unexpected command exception \u2014 rethrow so the\n    // failure reaches the queue's dead-letter / observability (see header note).\n    throw err\n  }\n\n  switch (outcome.status) {\n    case 'delivered':\n    case 'already_delivered':\n    case 'no_channel_link':\n      return\n    case 'failed': {\n      // Reauth (401 / invalid_grant): the command already flipped the channel to\n      // `requires_reauth`. Give the credentials exactly one forced-refresh retry\n      // before giving up \u2014 a near-expiry access token whose proactive refresh\n      // was skipped can still recover here. If we already forced a refresh and\n      // still got a reauth error, the token is unrecoverable: stop (the operator\n      // must reconnect).\n      if (\n        outcome.requiresReauth &&\n        !forceCredentialRefresh &&\n        attempt < OUTBOUND_DELIVERY_MAX_ATTEMPTS\n      ) {\n        console.warn(\n          `[communication_channels:outbound-delivery] reauth failure on attempt ${attempt} for message ${messageId} (${outcome.providerKey}): ${outcome.error}. Retrying once with a forced credential refresh.`,\n        )\n        await reenqueue({ ...job.payload, forceCredentialRefresh: true }, attempt)\n        return\n      }\n      if (outcome.transient && attempt < OUTBOUND_DELIVERY_MAX_ATTEMPTS) {\n        console.warn(\n          `[communication_channels:outbound-delivery] transient failure on attempt ${attempt} for message ${messageId} (${outcome.providerKey}): ${outcome.error}. Re-enqueueing.`,\n        )\n        await reenqueue(job.payload, attempt)\n        return\n      }\n      // Permanent or attempts exhausted \u2014 `.delivery_failed` was already emitted\n      // by the command, so we stop here.\n      console.error(\n        `[communication_channels:outbound-delivery] giving up on message ${messageId} after attempt ${attempt} (${outcome.providerKey}): ${outcome.error}`,\n      )\n      return\n    }\n  }\n}\n\nasync function reenqueue(payload: OutboundDeliveryPayload, attempt: number): Promise<void> {\n  const next: OutboundDeliveryPayload = {\n    ...payload,\n    attempt: attempt + 1,\n  }\n  const delayMs = computeBackoffMs(attempt)\n  const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.outbound)\n  await queue.enqueue(next as unknown as Record<string, unknown>, { delayMs })\n}\n"],
+  "mappings": "AAEA;AAAA,EACE;AAAA,OAGK;AACP,SAAS,wBAAwB;AACjC,SAAS,+BAA+B,qCAAqC;AAoBtE,MAAM,iCAAiC;AAEvC,MAAM,WAAuB;AAAA,EAClC,OAAO,8BAA8B;AAAA,EACrC,IAAI;AAAA,EACJ,aAAa;AACf;AA2BA,eAAO,OACL,KACA,KACe;AACf,QAAM,EAAE,WAAW,OAAO,UAAU,GAAG,uBAAuB,IAAI,IAAI;AAEtE,QAAM,aAAa,IAAI,QAAoB,YAAY;AACvD,QAAM,iBAAiB,EAAE,SAAS,IAAI,QAAQ,KAAK,GAAG,EAAE;AACxD,QAAM,aAAa;AAAA,IACjB,WAAW;AAAA,IACX,MAAM;AAAA,IACN,mBAAmB;AAAA,IACnB,wBAAwB,MAAM,kBAAkB;AAAA,IAChD,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,EACnE;AAEA,MAAI;AACJ,MAAI;AACF,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,MAIlC;AAAA,MACA;AAAA,QACE,OAAO,EAAE,WAAW,OAAO,uBAAuB;AAAA,QAClD,KAAK;AAAA,MACP;AAAA,IACF;AACA,cAAU;AAAA,EACZ,SAAS,KAAK;AAGZ,UAAM,eAAe,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACpE,YAAQ;AAAA,MACN,uEAAuE,OAAO,gBAAgB,SAAS,KAAK,YAAY;AAAA,IAC1H;AACA,QAAI,UAAU,gCAAgC;AAC5C,YAAM,UAAU,IAAI,SAAS,OAAO;AACpC;AAAA,IACF;AAGA,UAAM;AAAA,EACR;AAEA,UAAQ,QAAQ,QAAQ;AAAA,IACtB,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH;AAAA,IACF,KAAK,UAAU;AAOb,UACE,QAAQ,kBACR,CAAC,0BACD,UAAU,gCACV;AACA,gBAAQ;AAAA,UACN,wEAAwE,OAAO,gBAAgB,SAAS,KAAK,QAAQ,WAAW,MAAM,QAAQ,KAAK;AAAA,QACrJ;AACA,cAAM,UAAU,EAAE,GAAG,IAAI,SAAS,wBAAwB,KAAK,GAAG,OAAO;AACzE;AAAA,MACF;AACA,UAAI,QAAQ,aAAa,UAAU,gCAAgC;AACjE,gBAAQ;AAAA,UACN,2EAA2E,OAAO,gBAAgB,SAAS,KAAK,QAAQ,WAAW,MAAM,QAAQ,KAAK;AAAA,QACxJ;AACA,cAAM,UAAU,IAAI,SAAS,OAAO;AACpC;AAAA,MACF;AAGA,cAAQ;AAAA,QACN,mEAAmE,SAAS,kBAAkB,OAAO,KAAK,QAAQ,WAAW,MAAM,QAAQ,KAAK;AAAA,MAClJ;AACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAe,UAAU,SAAkC,SAAgC;AACzF,QAAM,OAAgC;AAAA,IACpC,GAAG;AAAA,IACH,SAAS,UAAU;AAAA,EACrB;AACA,QAAM,UAAU,iBAAiB,OAAO;AACxC,QAAM,QAAQ,8BAA8B,8BAA8B,QAAQ;AAClF,QAAM,MAAM,QAAQ,MAA4C,EAAE,QAAQ,CAAC;AAC7E;",
+  "names": []
+}

package/dist/modules/communication_channels/workers/poll-channel.js

@@ -0,0 +1,240 @@
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { CommunicationChannel } from "../data/entities.js";
+import {
+  COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID
+} from "../commands/ingest-inbound-message.js";
+import { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from "../lib/queue.js";
+import { preservePushState } from "../lib/push-state.js";
+import { writeIngestDeadLetter } from "../lib/dead-letter.js";
+import { classifyOutboundError, computeBackoffMs, isReauthError } from "../lib/error-classification.js";
+import { refreshCredentialsIfNeeded } from "../lib/credential-refresh.js";
+import { emitCommunicationChannelsEvent } from "../events.js";
+const POLL_CHANNEL_MAX_ATTEMPTS = 3;
+const MAX_DRAIN_PAGES = 100;
+const metadata = {
+  queue: COMMUNICATION_CHANNELS_QUEUES.poll,
+  id: "communication_channels:poll-channel",
+  concurrency: 10
+};
+async function handle(job, ctx) {
+  const { channelId, scope, attempt = 1, drainPage = 0 } = job.payload;
+  const em = ctx.resolve("em").fork();
+  const adapterRegistry = ctx.resolve("channelAdapterRegistry");
+  const channel = await findOneWithDecryption(
+    em,
+    CommunicationChannel,
+    {
+      id: channelId,
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId ?? null,
+      deletedAt: null
+    },
+    void 0,
+    scope
+  );
+  if (!channel) {
+    console.warn(
+      `[communication_channels:poll-channel] channel ${channelId} not found (skipping)`
+    );
+    return;
+  }
+  if (!channel.isActive) return;
+  if (channel.status !== "connected" && channel.status !== "error") return;
+  const adapter = adapterRegistry?.get(channel.providerKey);
+  if (!adapter) {
+    console.warn(
+      `[communication_channels:poll-channel] no adapter for provider '${channel.providerKey}' (channel ${channelId})`
+    );
+    return;
+  }
+  const capabilities = channel.capabilities ?? null;
+  if (capabilities?.realtimePush !== false) {
+    return;
+  }
+  if (typeof adapter.fetchHistory !== "function") {
+    return;
+  }
+  let credentialsService = null;
+  try {
+    credentialsService = ctx.resolve("integrationCredentialsService");
+  } catch {
+    credentialsService = null;
+  }
+  const credentialsScope = {
+    tenantId: scope.tenantId,
+    organizationId: scope.organizationId ?? scope.tenantId,
+    userId: channel.userId ?? null
+  };
+  let credentials = {};
+  if (channel.credentialsRef && credentialsService) {
+    try {
+      credentials = await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope) ?? {};
+    } catch {
+      credentials = {};
+    }
+  }
+  const refreshed = await refreshCredentialsIfNeeded(
+    {
+      adapter,
+      channelId: channel.id,
+      credentials,
+      scope: credentialsScope
+    },
+    { credentialsService }
+  );
+  credentials = refreshed.credentials;
+  let normalized = [];
+  let nextCursor;
+  let hasMore = false;
+  try {
+    const result = await adapter.fetchHistory({
+      conversationId: channel.externalIdentifier ?? channel.id,
+      credentials,
+      cursor: channel.lastPolledAt ? channel.lastPolledAt.toISOString() : void 0,
+      channelState: channel.channelState ?? void 0,
+      scope: {
+        tenantId: scope.tenantId,
+        organizationId: scope.organizationId ?? scope.tenantId
+      },
+      // `contactFilter.sinceDays` is a hint to provider adapters about how far
+      // back to look on first-poll bootstrap. For UID-incremental polls (every
+      // tick after the first), adapters ignore this and just fetch new mail
+      // since the persisted cursor.
+      contactFilter: { addresses: [], sinceDays: 7 }
+    });
+    normalized = Array.isArray(result?.messages) ? result.messages : [];
+    nextCursor = result?.nextCursor;
+    hasMore = result?.hasMore === true;
+  } catch (err) {
+    await handlePollError(err, em, channel, scope, attempt, job.payload);
+    return;
+  }
+  const commandBus = ctx.resolve("commandBus");
+  const containerProxy = { resolve: ctx.resolve.bind(ctx) };
+  const commandCtx = {
+    container: containerProxy,
+    auth: null,
+    organizationScope: null,
+    selectedOrganizationId: scope.organizationId ?? null,
+    organizationIds: scope.organizationId ? [scope.organizationId] : null
+  };
+  let transientIngestAbort = false;
+  for (const message of normalized) {
+    try {
+      const input = {
+        channelId: channel.id,
+        providerKey: channel.providerKey,
+        channelType: channel.channelType,
+        scope: {
+          tenantId: scope.tenantId,
+          organizationId: scope.organizationId ?? null
+        },
+        message
+      };
+      await commandBus.execute(COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID, {
+        input,
+        ctx: commandCtx
+      });
+    } catch (err) {
+      const classification = classifyOutboundError(err);
+      if (classification.transient) {
+        console.warn(
+          `[communication_channels:poll-channel] transient ingest failure for channel ${channel.id}; aborting page so cursor is NOT advanced. Reason: ${classification.message}`
+        );
+        transientIngestAbort = true;
+        break;
+      }
+      await writeIngestDeadLetter({
+        em,
+        scope,
+        channel,
+        message,
+        err,
+        errorMessage: classification.message
+      });
+      console.warn(
+        `[communication_channels:poll-channel] permanent ingest failure for channel ${channel.id}; recorded in dead-letter and advancing cursor past message ${message.externalMessageId}. Reason: ${classification.message}`
+      );
+    }
+  }
+  if (transientIngestAbort) {
+    channel.lastError = "transient_ingest_failure";
+    await em.flush();
+    return;
+  }
+  channel.lastPolledAt = /* @__PURE__ */ new Date();
+  if (channel.lastError) channel.lastError = null;
+  if (channel.status === "error") {
+    channel.status = "connected";
+  }
+  if (typeof nextCursor === "string" && nextCursor.length > 0) {
+    const decoded = decodeChannelStateCursor(nextCursor);
+    if (decoded) {
+      channel.channelState = preservePushState(channel.channelState, decoded);
+    }
+  }
+  await em.flush();
+  if (hasMore) {
+    if (drainPage < MAX_DRAIN_PAGES) {
+      const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.poll);
+      await queue.enqueue(
+        { channelId: channel.id, scope, attempt: 1, drainPage: drainPage + 1 },
+        { delayMs: 250 }
+      );
+    } else {
+      console.warn(
+        `[communication_channels:poll-channel] drain page cap (${MAX_DRAIN_PAGES}) reached for channel ${channel.id}; stopping re-enqueue until the next scheduled tick`
+      );
+    }
+  }
+}
+function decodeChannelStateCursor(cursor) {
+  try {
+    const decoded = Buffer.from(cursor, "base64").toString("utf8");
+    const parsed = JSON.parse(decoded);
+    if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+      return parsed;
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+async function handlePollError(err, em, channel, scope, attempt, payload) {
+  const classification = classifyOutboundError(err);
+  channel.lastError = classification.message;
+  if (isReauthError(classification)) {
+    channel.status = "requires_reauth";
+    await em.flush();
+    await emitCommunicationChannelsEvent(
+      "communication_channels.channel.requires_reauth",
+      {
+        channelId: channel.id,
+        providerKey: channel.providerKey,
+        channelType: channel.channelType,
+        reason: classification.message,
+        tenantId: scope.tenantId,
+        organizationId: scope.organizationId ?? null
+      },
+      { persistent: true }
+    );
+    return;
+  }
+  if (classification.transient && attempt < POLL_CHANNEL_MAX_ATTEMPTS) {
+    await em.flush();
+    const next = { ...payload, attempt: attempt + 1 };
+    const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.poll);
+    await queue.enqueue(next, {
+      delayMs: computeBackoffMs(attempt)
+    });
+    return;
+  }
+  channel.status = "error";
+  await em.flush();
+}
+export {
+  POLL_CHANNEL_MAX_ATTEMPTS,
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=poll-channel.js.map

package/dist/modules/communication_channels/workers/poll-channel.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/workers/poll-channel.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../data/entities'\nimport {\n  COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID,\n  type IngestInboundMessageInput,\n} from '../commands/ingest-inbound-message'\nimport { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from '../lib/queue'\nimport { preservePushState } from '../lib/push-state'\nimport { writeIngestDeadLetter } from '../lib/dead-letter'\nimport { classifyOutboundError, computeBackoffMs, isReauthError } from '../lib/error-classification'\nimport { refreshCredentialsIfNeeded } from '../lib/credential-refresh'\nimport { emitCommunicationChannelsEvent } from '../events'\nimport type { ChannelAdapterRegistry } from '../lib/registry'\nimport type { NormalizedInboundMessage } from '../lib/adapter'\n\n/**\n * Job payload for the `communication-channels-poll` queue.\n *\n * One job per channel per scheduler tick. The poll-tick worker (sibling file)\n * enumerates due channels and enqueues these jobs.\n */\nexport type PollChannelJobPayload = {\n  channelId: string\n  scope: {\n    tenantId: string\n    organizationId: string | null\n  }\n  /** Attempt count, 1-based; used for retry-backoff decisions. */\n  attempt?: number\n  /** Self-re-enqueue drain counter (bounds the multi-page `hasMore` drain loop). */\n  drainPage?: number\n}\n\nexport const POLL_CHANNEL_MAX_ATTEMPTS = 3\n\n/**\n * Hard cap on `hasMore` self-re-enqueue drain pages \u2014 guards against an adapter\n * that returns `hasMore: true` with a non-advancing (pinned) cursor, which would\n * otherwise spin a tight, unthrottled re-enqueue loop. Mirrors the same guard in\n * `gmail-history-sync`.\n */\nconst MAX_DRAIN_PAGES = 100\n\nexport const metadata: WorkerMeta = {\n  queue: COMMUNICATION_CHANNELS_QUEUES.poll,\n  id: 'communication_channels:poll-channel',\n  concurrency: 10,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\n/**\n * Poll a single channel for inbound messages.\n *\n * Per SPEC-045d \u00A7 6 (with email-spec \u00A7 Hub Deltas \u2192 Delta 6 polling extensions):\n *   1. Load the channel; skip when `is_active === false` or `status !== 'connected'`.\n *   2. Skip when the adapter declares `realtimePush !== false` (it doesn't want polling).\n *   3. Refresh credentials if OAuth and within the expiry window.\n *   4. Call `adapter.fetchHistory({ channelId, credentials, since: lastPolledAt })`.\n *   5. For each normalized message, dispatch `ingest_inbound_message` (idempotent on\n *      `(channel_id, external_message_id)`).\n *   6. Update `channel.lastPolledAt = NOW()` on success.\n *   7. On error: classify, set `channel.status` accordingly, set `last_error`, emit\n *      `channel.requires_reauth` on 401, retry transient failures up to MAX.\n *\n * The hub doesn't drain a remote mailbox indefinitely \u2014 `fetchHistory` returns a\n * single page (provider decides the size). If the provider has more, the next tick\n * picks it up after the configured `poll_interval_seconds`.\n */\nexport default async function handle(\n  job: QueuedJob<PollChannelJobPayload>,\n  ctx: HandlerContext,\n): Promise<void> {\n  const { channelId, scope, attempt = 1, drainPage = 0 } = job.payload\n  const em = (ctx.resolve('em') as EntityManager).fork()\n  const adapterRegistry = ctx.resolve<ChannelAdapterRegistry>('channelAdapterRegistry')\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id: channelId,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId ?? null,\n      deletedAt: null,\n    },\n    undefined,\n    scope,\n  )\n  if (!channel) {\n    console.warn(\n      `[communication_channels:poll-channel] channel ${channelId} not found (skipping)`,\n    )\n    return\n  }\n  if (!channel.isActive) return\n  // Allow `connected` (normal poll) and `error` (Spec B \u00A7 B5 auto-recovery\n  // sweep enqueues these intentionally \u2014 on a successful poll below we\n  // flip them back to `connected`). `requires_reauth` and `disconnected`\n  // are owned by the credential-refresh and disconnect flows.\n  if (channel.status !== 'connected' && channel.status !== 'error') return\n\n  const adapter = adapterRegistry?.get(channel.providerKey)\n  if (!adapter) {\n    console.warn(\n      `[communication_channels:poll-channel] no adapter for provider '${channel.providerKey}' (channel ${channelId})`,\n    )\n    return\n  }\n  // Adapter opted out of polling \u2014 webhook providers.\n  const capabilities = (channel.capabilities as { realtimePush?: boolean } | null) ?? null\n  if (capabilities?.realtimePush !== false) {\n    // realtimePush is `true` (default for back-compat) \u2014 don't poll push providers.\n    return\n  }\n  if (typeof adapter.fetchHistory !== 'function') {\n    // Adapter doesn't implement history fetching \u2014 nothing we can do.\n    return\n  }\n\n  // Credentials.\n  let credentialsService: CredentialsServiceLike | null = null\n  try {\n    credentialsService = ctx.resolve<CredentialsServiceLike>('integrationCredentialsService')\n  } catch {\n    credentialsService = null\n  }\n  // Per-user credentials scope: pass `channel.userId` so the credentials\n  // service returns this user's row, not whoever connected the provider last.\n  // See review R2-C1 / N1 (2026-05-26).\n  const credentialsScope = {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId ?? scope.tenantId,\n    userId: channel.userId ?? null,\n  }\n  let credentials: Record<string, unknown> = {}\n  if (channel.credentialsRef && credentialsService) {\n    try {\n      credentials =\n        (await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope)) ?? {}\n    } catch {\n      credentials = {}\n    }\n  }\n  const refreshed = await refreshCredentialsIfNeeded(\n    {\n      adapter,\n      channelId: channel.id,\n      credentials,\n      scope: credentialsScope,\n    },\n    { credentialsService },\n  )\n  credentials = refreshed.credentials\n\n  // Fetch a single page of history.\n  // `channelState` is the provider-specific resumption cursor \u2014 Gmail historyId,\n  // IMAP UIDVALIDITY+UIDNEXT, etc. We persist it across\n  // ticks on `channel.channelState` so each poll resumes from the prior one\n  // instead of running a full mailbox resync. Empty / NULL = \"first poll;\n  // bootstrap the cursor from the provider\".\n  let normalized: NormalizedInboundMessage[] = []\n  let nextCursor: string | undefined\n  let hasMore = false\n  try {\n    const result = await adapter.fetchHistory({\n      conversationId: channel.externalIdentifier ?? channel.id,\n      credentials,\n      cursor: channel.lastPolledAt ? channel.lastPolledAt.toISOString() : undefined,\n      channelState: (channel.channelState as Record<string, unknown> | null) ?? undefined,\n      scope: {\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId ?? scope.tenantId,\n      },\n      // `contactFilter.sinceDays` is a hint to provider adapters about how far\n      // back to look on first-poll bootstrap. For UID-incremental polls (every\n      // tick after the first), adapters ignore this and just fetch new mail\n      // since the persisted cursor.\n      contactFilter: { addresses: [], sinceDays: 7 },\n    })\n    normalized = Array.isArray(result?.messages) ? result.messages : []\n    nextCursor = result?.nextCursor\n    hasMore = result?.hasMore === true\n  } catch (err) {\n    await handlePollError(err, em, channel, scope, attempt, job.payload)\n    return\n  }\n\n  // Dispatch ingest commands for each message.\n  const commandBus = ctx.resolve<CommandBus>('commandBus')\n  const containerProxy = { resolve: ctx.resolve.bind(ctx) }\n  const commandCtx = {\n    container: containerProxy as never,\n    auth: null,\n    organizationScope: null,\n    selectedOrganizationId: scope.organizationId ?? null,\n    organizationIds: scope.organizationId ? [scope.organizationId] : null,\n  }\n  // Spec B \u00A7 Per-message commit + dead-letter:\n  //   - Permanent failure (malformed MIME, schema, contract violation):\n  //     write to channel_ingest_dead_letter, log, advance cursor anyway so\n  //     the bad blob never stalls the channel again.\n  //   - Transient failure (DB drop, network blip): abort the loop without\n  //     advancing the cursor. The next tick re-fetches the same page;\n  //     idempotency via the (channel_id, external_message_id) unique\n  //     constraint means already-ingested messages no-op on the retry.\n  let transientIngestAbort = false\n  for (const message of normalized) {\n    try {\n      const input: IngestInboundMessageInput = {\n        channelId: channel.id,\n        providerKey: channel.providerKey,\n        channelType: channel.channelType,\n        scope: {\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId ?? null,\n        },\n        message,\n      }\n      await commandBus.execute(COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID, {\n        input,\n        ctx: commandCtx as never,\n      })\n    } catch (err) {\n      const classification = classifyOutboundError(err)\n      if (classification.transient) {\n        console.warn(\n          `[communication_channels:poll-channel] transient ingest failure for channel ${channel.id}; aborting page so cursor is NOT advanced. Reason: ${classification.message}`,\n        )\n        transientIngestAbort = true\n        break\n      }\n      // Permanent \u2014 write to dead-letter so an operator can replay later.\n      // The shared helper is best-effort (never throws) and idempotent on\n      // `(channelId, externalMessageId)`, so a replayed page that fails the\n      // same message again does not insert a duplicate row.\n      await writeIngestDeadLetter({\n        em,\n        scope,\n        channel,\n        message,\n        err,\n        errorMessage: classification.message,\n      })\n      console.warn(\n        `[communication_channels:poll-channel] permanent ingest failure for channel ${channel.id}; recorded in dead-letter and advancing cursor past message ${message.externalMessageId}. Reason: ${classification.message}`,\n      )\n    }\n  }\n\n  // Transient abort: keep prior cursor + lastPolledAt so the next tick\n  // re-fetches the same page (idempotent at the DB layer).\n  if (transientIngestAbort) {\n    channel.lastError = 'transient_ingest_failure'\n    await em.flush()\n    return\n  }\n\n  // Update poll cursor + clear any stale error state.\n  channel.lastPolledAt = new Date()\n  if (channel.lastError) channel.lastError = null\n  // Recover the channel from any prior non-fatal error state. The previous\n  // poll(s) may have set status='error' after exhausting transient-retry\n  // attempts, but a fresh successful poll means the upstream is healthy\n  // again \u2014 flip it back to 'connected' so the scheduler keeps it in\n  // rotation and the user doesn't have to manually reconnect.\n  // We DON'T touch 'requires_reauth' here (that lifecycle state is owned\n  // by the credential-refresh / OAuth flow) or 'disconnected' (owned by\n  // the cascade-on-user-delete subscriber).\n  if (channel.status === 'error') {\n    channel.status = 'connected'\n  }\n  // Providers encode their cursor as base64-encoded JSON in `nextCursor`; we\n  // decode it back to an object so the next tick can pass it straight into\n  // `fetchHistory` as `channelState`. Decode failures fall back to the prior\n  // state (next tick bootstraps from there).\n  //\n  // Push-delivery state (Spec C) \u2014 watch/subscription identifiers and expiry \u2014 is\n  // owned by the push register/renew commands, not the sync cursor. A provider's\n  // `fetchHistory` returns only sync-cursor fields, so persisting the decoded\n  // cursor as a full replace would silently wipe push state and stop\n  // `gmail-renew-watch` from renewing it. Carry\n  // the hub-owned push keys forward whenever the new cursor omits them.\n  if (typeof nextCursor === 'string' && nextCursor.length > 0) {\n    const decoded = decodeChannelStateCursor(nextCursor)\n    if (decoded) {\n      channel.channelState = preservePushState(channel.channelState, decoded)\n    }\n  }\n  await em.flush()\n\n  // Drain contract (review H1, 2026-05-26): adapters that have additional\n  // pages beyond this tick's batch (large mailboxes, mid-deltaLink walks,\n  // UID overflows) signal `hasMore: true`. The persisted `channelState`\n  // already encodes the mid-drain resumption token (Gmail `pendingHistoryPageToken`,\n  // IMAP non-terminal `uidNext`). Re-enqueue with\n  // a small delay so we keep draining without overrunning rate limits.\n  if (hasMore) {\n    // Bound the drain: an adapter that returns `hasMore: true` with a\n    // non-advancing cursor (e.g. a persistently-failing message that pins the\n    // Gmail cursor via `hardFailed`) must not spin an unthrottled loop. Stop\n    // at MAX_DRAIN_PAGES; the next scheduled poll tick re-checks the channel.\n    if (drainPage < MAX_DRAIN_PAGES) {\n      const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.poll)\n      await queue.enqueue(\n        { channelId: channel.id, scope, attempt: 1, drainPage: drainPage + 1 } as unknown as Record<string, unknown>,\n        { delayMs: 250 },\n      )\n    } else {\n      console.warn(\n        `[communication_channels:poll-channel] drain page cap (${MAX_DRAIN_PAGES}) reached for channel ${channel.id}; stopping re-enqueue until the next scheduled tick`,\n      )\n    }\n  }\n}\n\nfunction decodeChannelStateCursor(cursor: string): Record<string, unknown> | null {\n  try {\n    const decoded = Buffer.from(cursor, 'base64').toString('utf8')\n    const parsed = JSON.parse(decoded) as unknown\n    if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {\n      return parsed as Record<string, unknown>\n    }\n    return null\n  } catch {\n    return null\n  }\n}\n\nasync function handlePollError(\n  err: unknown,\n  em: EntityManager,\n  channel: CommunicationChannel,\n  scope: PollChannelJobPayload['scope'],\n  attempt: number,\n  payload: PollChannelJobPayload,\n): Promise<void> {\n  const classification = classifyOutboundError(err)\n  channel.lastError = classification.message\n\n  if (isReauthError(classification)) {\n    channel.status = 'requires_reauth'\n    await em.flush()\n    await emitCommunicationChannelsEvent(\n      'communication_channels.channel.requires_reauth',\n      {\n        channelId: channel.id,\n        providerKey: channel.providerKey,\n        channelType: channel.channelType,\n        reason: classification.message,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId ?? null,\n      },\n      { persistent: true },\n    )\n    return\n  }\n\n  if (classification.transient && attempt < POLL_CHANNEL_MAX_ATTEMPTS) {\n    // Transient error \u2014 re-enqueue with backoff. Channel status stays\n    // `connected` so the scheduler keeps it in rotation.\n    await em.flush()\n    const next: PollChannelJobPayload = { ...payload, attempt: attempt + 1 }\n    const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.poll)\n    await queue.enqueue(next as unknown as Record<string, unknown>, {\n      delayMs: computeBackoffMs(attempt),\n    })\n    return\n  }\n\n  // Permanent or attempts exhausted \u2014 mark channel as error and stop the loop.\n  channel.status = 'error'\n  await em.flush()\n}\n"],
+  "mappings": "AAGA,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,+BAA+B,qCAAqC;AAC7E,SAAS,yBAAyB;AAClC,SAAS,6BAA6B;AACtC,SAAS,uBAAuB,kBAAkB,qBAAqB;AACvE,SAAS,kCAAkC;AAC3C,SAAS,sCAAsC;AAsBxC,MAAM,4BAA4B;AAQzC,MAAM,kBAAkB;AAEjB,MAAM,WAAuB;AAAA,EAClC,OAAO,8BAA8B;AAAA,EACrC,IAAI;AAAA,EACJ,aAAa;AACf;AAoCA,eAAO,OACL,KACA,KACe;AACf,QAAM,EAAE,WAAW,OAAO,UAAU,GAAG,YAAY,EAAE,IAAI,IAAI;AAC7D,QAAM,KAAM,IAAI,QAAQ,IAAI,EAAoB,KAAK;AACrD,QAAM,kBAAkB,IAAI,QAAgC,wBAAwB;AAEpF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM,kBAAkB;AAAA,MACxC,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,YAAQ;AAAA,MACN,iDAAiD,SAAS;AAAA,IAC5D;AACA;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,SAAU;AAKvB,MAAI,QAAQ,WAAW,eAAe,QAAQ,WAAW,QAAS;AAElE,QAAM,UAAU,iBAAiB,IAAI,QAAQ,WAAW;AACxD,MAAI,CAAC,SAAS;AACZ,YAAQ;AAAA,MACN,kEAAkE,QAAQ,WAAW,cAAc,SAAS;AAAA,IAC9G;AACA;AAAA,EACF;AAEA,QAAM,eAAgB,QAAQ,gBAAsD;AACpF,MAAI,cAAc,iBAAiB,OAAO;AAExC;AAAA,EACF;AACA,MAAI,OAAO,QAAQ,iBAAiB,YAAY;AAE9C;AAAA,EACF;AAGA,MAAI,qBAAoD;AACxD,MAAI;AACF,yBAAqB,IAAI,QAAgC,+BAA+B;AAAA,EAC1F,QAAQ;AACN,yBAAqB;AAAA,EACvB;AAIA,QAAM,mBAAmB;AAAA,IACvB,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM,kBAAkB,MAAM;AAAA,IAC9C,QAAQ,QAAQ,UAAU;AAAA,EAC5B;AACA,MAAI,cAAuC,CAAC;AAC5C,MAAI,QAAQ,kBAAkB,oBAAoB;AAChD,QAAI;AACF,oBACG,MAAM,mBAAmB,QAAQ,WAAW,QAAQ,WAAW,IAAI,gBAAgB,KAAM,CAAC;AAAA,IAC/F,QAAQ;AACN,oBAAc,CAAC;AAAA,IACjB;AAAA,EACF;AACA,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,MACE;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,OAAO;AAAA,IACT;AAAA,IACA,EAAE,mBAAmB;AAAA,EACvB;AACA,gBAAc,UAAU;AAQxB,MAAI,aAAyC,CAAC;AAC9C,MAAI;AACJ,MAAI,UAAU;AACd,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ,aAAa;AAAA,MACxC,gBAAgB,QAAQ,sBAAsB,QAAQ;AAAA,MACtD;AAAA,MACA,QAAQ,QAAQ,eAAe,QAAQ,aAAa,YAAY,IAAI;AAAA,MACpE,cAAe,QAAQ,gBAAmD;AAAA,MAC1E,OAAO;AAAA,QACL,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM,kBAAkB,MAAM;AAAA,MAChD;AAAA;AAAA;AAAA;AAAA;AAAA,MAKA,eAAe,EAAE,WAAW,CAAC,GAAG,WAAW,EAAE;AAAA,IAC/C,CAAC;AACD,iBAAa,MAAM,QAAQ,QAAQ,QAAQ,IAAI,OAAO,WAAW,CAAC;AAClE,iBAAa,QAAQ;AACrB,cAAU,QAAQ,YAAY;AAAA,EAChC,SAAS,KAAK;AACZ,UAAM,gBAAgB,KAAK,IAAI,SAAS,OAAO,SAAS,IAAI,OAAO;AACnE;AAAA,EACF;AAGA,QAAM,aAAa,IAAI,QAAoB,YAAY;AACvD,QAAM,iBAAiB,EAAE,SAAS,IAAI,QAAQ,KAAK,GAAG,EAAE;AACxD,QAAM,aAAa;AAAA,IACjB,WAAW;AAAA,IACX,MAAM;AAAA,IACN,mBAAmB;AAAA,IACnB,wBAAwB,MAAM,kBAAkB;AAAA,IAChD,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,EACnE;AASA,MAAI,uBAAuB;AAC3B,aAAW,WAAW,YAAY;AAChC,QAAI;AACF,YAAM,QAAmC;AAAA,QACvC,WAAW,QAAQ;AAAA,QACnB,aAAa,QAAQ;AAAA,QACrB,aAAa,QAAQ;AAAA,QACrB,OAAO;AAAA,UACL,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM,kBAAkB;AAAA,QAC1C;AAAA,QACA;AAAA,MACF;AACA,YAAM,WAAW,QAAQ,kDAAkD;AAAA,QACzE;AAAA,QACA,KAAK;AAAA,MACP,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,YAAM,iBAAiB,sBAAsB,GAAG;AAChD,UAAI,eAAe,WAAW;AAC5B,gBAAQ;AAAA,UACN,8EAA8E,QAAQ,EAAE,sDAAsD,eAAe,OAAO;AAAA,QACtK;AACA,+BAAuB;AACvB;AAAA,MACF;AAKA,YAAM,sBAAsB;AAAA,QAC1B;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,cAAc,eAAe;AAAA,MAC/B,CAAC;AACD,cAAQ;AAAA,QACN,8EAA8E,QAAQ,EAAE,+DAA+D,QAAQ,iBAAiB,aAAa,eAAe,OAAO;AAAA,MACrN;AAAA,IACF;AAAA,EACF;AAIA,MAAI,sBAAsB;AACxB,YAAQ,YAAY;AACpB,UAAM,GAAG,MAAM;AACf;AAAA,EACF;AAGA,UAAQ,eAAe,oBAAI,KAAK;AAChC,MAAI,QAAQ,UAAW,SAAQ,YAAY;AAS3C,MAAI,QAAQ,WAAW,SAAS;AAC9B,YAAQ,SAAS;AAAA,EACnB;AAYA,MAAI,OAAO,eAAe,YAAY,WAAW,SAAS,GAAG;AAC3D,UAAM,UAAU,yBAAyB,UAAU;AACnD,QAAI,SAAS;AACX,cAAQ,eAAe,kBAAkB,QAAQ,cAAc,OAAO;AAAA,IACxE;AAAA,EACF;AACA,QAAM,GAAG,MAAM;AAQf,MAAI,SAAS;AAKX,QAAI,YAAY,iBAAiB;AAC/B,YAAM,QAAQ,8BAA8B,8BAA8B,IAAI;AAC9E,YAAM,MAAM;AAAA,QACV,EAAE,WAAW,QAAQ,IAAI,OAAO,SAAS,GAAG,WAAW,YAAY,EAAE;AAAA,QACrE,EAAE,SAAS,IAAI;AAAA,MACjB;AAAA,IACF,OAAO;AACL,cAAQ;AAAA,QACN,yDAAyD,eAAe,yBAAyB,QAAQ,EAAE;AAAA,MAC7G;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,yBAAyB,QAAgD;AAChF,MAAI;AACF,UAAM,UAAU,OAAO,KAAK,QAAQ,QAAQ,EAAE,SAAS,MAAM;AAC7D,UAAM,SAAS,KAAK,MAAM,OAAO;AACjC,QAAI,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,GAAG;AAClE,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,gBACb,KACA,IACA,SACA,OACA,SACA,SACe;AACf,QAAM,iBAAiB,sBAAsB,GAAG;AAChD,UAAQ,YAAY,eAAe;AAEnC,MAAI,cAAc,cAAc,GAAG;AACjC,YAAQ,SAAS;AACjB,UAAM,GAAG,MAAM;AACf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,WAAW,QAAQ;AAAA,QACnB,aAAa,QAAQ;AAAA,QACrB,aAAa,QAAQ;AAAA,QACrB,QAAQ,eAAe;AAAA,QACvB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM,kBAAkB;AAAA,MAC1C;AAAA,MACA,EAAE,YAAY,KAAK;AAAA,IACrB;AACA;AAAA,EACF;AAEA,MAAI,eAAe,aAAa,UAAU,2BAA2B;AAGnE,UAAM,GAAG,MAAM;AACf,UAAM,OAA8B,EAAE,GAAG,SAAS,SAAS,UAAU,EAAE;AACvE,UAAM,QAAQ,8BAA8B,8BAA8B,IAAI;AAC9E,UAAM,MAAM,QAAQ,MAA4C;AAAA,MAC9D,SAAS,iBAAiB,OAAO;AAAA,IACnC,CAAC;AACD;AAAA,EACF;AAGA,UAAQ,SAAS;AACjB,QAAM,GAAG,MAAM;AACjB;",
+  "names": []
+}

package/dist/modules/communication_channels/workers/poll-tick.js

@@ -0,0 +1,132 @@
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { CommunicationChannel } from "../data/entities.js";
+import { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from "../lib/queue.js";
+const POLL_ENUMERATION_CAP = Math.max(
+  1,
+  Number.parseInt(process.env.COMMUNICATION_CHANNELS_POLL_ENUMERATION_CAP ?? "500", 10) || 500
+);
+const metadata = {
+  queue: COMMUNICATION_CHANNELS_QUEUES.pollTick,
+  id: "communication_channels:poll-tick",
+  concurrency: 1
+  // single-flight per tenant — one tick at a time
+};
+async function handle(job, ctx) {
+  const raw = job?.payload ?? {};
+  const tenantId = raw.scope?.tenantId ?? raw.tenantId ?? null;
+  const organizationId = raw.scope?.organizationId ?? raw.organizationId ?? null;
+  if (!tenantId) {
+    console.warn(
+      "[communication_channels:poll-tick] skipping tick \u2014 payload has no tenantId",
+      { payload: raw }
+    );
+    return;
+  }
+  const scope = { tenantId, organizationId };
+  const em = ctx.resolve("em").fork();
+  const now = /* @__PURE__ */ new Date();
+  const connectedCandidates = await findWithDecryption(
+    em,
+    CommunicationChannel,
+    {
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId ?? null,
+      isActive: true,
+      deletedAt: null,
+      status: "connected",
+      pollIntervalSeconds: { $ne: null }
+    },
+    {
+      limit: POLL_ENUMERATION_CAP,
+      orderBy: { lastPolledAt: "asc" }
+    },
+    scope
+  );
+  const recoverMinutesRaw = Number.parseInt(
+    process.env.OM_CHANNEL_AUTO_RECOVER_MINUTES ?? "",
+    10
+  );
+  const recoverMinutes = Number.isFinite(recoverMinutesRaw) && recoverMinutesRaw >= 0 ? recoverMinutesRaw : 30;
+  const recoverCutoff = new Date(now.getTime() - recoverMinutes * 60 * 1e3);
+  const errorCandidates = await findWithDecryption(
+    em,
+    CommunicationChannel,
+    {
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId ?? null,
+      isActive: true,
+      deletedAt: null,
+      status: "error",
+      // Polling channels only. Push-only channels (Gmail) have
+      // `pollIntervalSeconds = null` and are intentionally excluded: poll-channel
+      // returns early for push providers, so their recovery is owner-driven
+      // (re-register push / reconnect), not this poll-recovery sweep.
+      pollIntervalSeconds: { $ne: null },
+      // `lastPolledAt` advances only on a SUCCESSFUL poll (poll-channel does
+      // not touch it in `handlePollError`). To keep recovery to one retry per
+      // window — rather than re-enqueuing a persistently-failing channel every
+      // tick — the recovery-enqueue loop below bumps `lastPolledAt` to `now`
+      // when it schedules a recovery job, so the channel only re-enters this
+      // pool after another `recoverMinutes` have elapsed.
+      //
+      // A channel that fails its FIRST poll (before any success) still has
+      // `lastPolledAt = null`; a bare `$lt` would exclude it forever (SQL
+      // `NULL < ts` is NULL, not true), stranding it in `error`. Include the
+      // null case so never-polled error channels get their first recovery
+      // attempt on the next tick (the enqueue bump below then throttles it).
+      $or: [{ lastPolledAt: null }, { lastPolledAt: { $lt: recoverCutoff } }]
+    },
+    {
+      limit: POLL_ENUMERATION_CAP,
+      orderBy: { lastPolledAt: "asc" }
+    },
+    scope
+  );
+  const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.poll);
+  let enqueued = 0;
+  let recovered = 0;
+  for (const channel of connectedCandidates) {
+    const intervalSeconds = channel.pollIntervalSeconds;
+    if (!intervalSeconds || intervalSeconds <= 0) continue;
+    if (!isDue(channel.lastPolledAt ?? null, intervalSeconds, now)) continue;
+    const payload = {
+      channelId: channel.id,
+      scope: {
+        tenantId: channel.tenantId,
+        organizationId: channel.organizationId ?? scope.organizationId ?? null
+      },
+      attempt: 1
+    };
+    await queue.enqueue(payload);
+    enqueued += 1;
+  }
+  for (const channel of errorCandidates) {
+    const payload = {
+      channelId: channel.id,
+      scope: {
+        tenantId: channel.tenantId,
+        organizationId: channel.organizationId ?? scope.organizationId ?? null
+      },
+      attempt: 1
+    };
+    await queue.enqueue(payload);
+    channel.lastPolledAt = now;
+    recovered += 1;
+  }
+  if (recovered > 0) await em.flush();
+  if (enqueued > 0 || recovered > 0) {
+    console.log(
+      `[communication_channels:poll-tick] enqueued ${enqueued} normal + ${recovered} auto-recover poll job(s) for tenant ${scope.tenantId}`
+    );
+  }
+}
+function isDue(lastPolledAt, intervalSeconds, now) {
+  if (!lastPolledAt) return true;
+  const dueAt = new Date(lastPolledAt.getTime() + intervalSeconds * 1e3);
+  return now >= dueAt;
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=poll-tick.js.map

package/dist/modules/communication_channels/workers/poll-tick.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/workers/poll-tick.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../data/entities'\nimport { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from '../lib/queue'\nimport type { PollChannelJobPayload } from './poll-channel'\n\n/**\n * Scheduler tick payload. Fired by the `@open-mercato/scheduler` cron entry\n * registered in the hub's `setup.ts` (`communication_channels:poll-tick` schedule).\n */\nexport type PollTickPayload = {\n  scope: {\n    tenantId: string\n    organizationId: string | null\n  }\n}\n\nconst POLL_ENUMERATION_CAP = Math.max(\n  1,\n  Number.parseInt(process.env.COMMUNICATION_CHANNELS_POLL_ENUMERATION_CAP ?? '500', 10) || 500,\n)\n\nexport const metadata: WorkerMeta = {\n  queue: COMMUNICATION_CHANNELS_QUEUES.pollTick,\n  id: 'communication_channels:poll-tick',\n  concurrency: 1, // single-flight per tenant \u2014 one tick at a time\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\n/**\n * Enumerate channels due for polling and enqueue per-channel jobs.\n *\n * Per email integration spec \u00A7 Hub Deltas \u2192 Delta 6:\n *   SELECT id FROM communication_channels\n *   WHERE is_active = true\n *     AND deleted_at IS NULL\n *     AND status = 'connected'\n *     AND poll_interval_seconds IS NOT NULL\n *     AND (last_polled_at IS NULL\n *          OR last_polled_at + poll_interval_seconds * '1 sec' <= NOW())\n *   ORDER BY last_polled_at NULLS FIRST\n *   LIMIT 500\n *\n * Implementation note: MikroORM's QueryBuilder is the canonical entry point;\n * the raw SQL above is the conceptual query. We use the entity-level filter to\n * keep things portable and let MikroORM compile it.\n */\nexport default async function handle(\n  job: QueuedJob<PollTickPayload>,\n  ctx: HandlerContext,\n): Promise<void> {\n  // The scheduler module (`@open-mercato/scheduler`) spreads the configured\n  // `targetPayload` and then adds `tenantId` / `organizationId` at the TOP\n  // level of the enqueued payload (see\n  // packages/scheduler/.../execute-schedule.worker.ts). Our setup.ts originally\n  // stored `{ scope: { tenantId, organizationId } }` under targetPayload, so\n  // at runtime the payload looks like:\n  //   { scope: { tenantId, organizationId }, tenantId, organizationId, _idempotencyKey }\n  // Accept either path so the handler is robust to both how operators originally\n  // configured the schedule (nested `scope`) and how the scheduler flattens it.\n  const raw = (job?.payload ?? {}) as Partial<PollTickPayload> & {\n    tenantId?: string | null\n    organizationId?: string | null\n  }\n  const tenantId = raw.scope?.tenantId ?? raw.tenantId ?? null\n  const organizationId =\n    raw.scope?.organizationId ?? raw.organizationId ?? null\n  if (!tenantId) {\n    console.warn(\n      '[communication_channels:poll-tick] skipping tick \u2014 payload has no tenantId',\n      { payload: raw },\n    )\n    return\n  }\n  const scope = { tenantId, organizationId }\n  const em = (ctx.resolve('em') as EntityManager).fork()\n\n  const now = new Date()\n  // Find candidate channels \u2014 we enumerate two pools:\n  //   (1) status='connected' channels due for their normal poll cycle.\n  //   (2) Spec B \u00A7 Auto-recovery sweep: status='error' channels whose\n  //       `lastPolledAt` is older than OM_CHANNEL_AUTO_RECOVER_MINUTES\n  //       (default 30 min). At most one retry per recovery window per\n  //       channel \u2014 when we enqueue a recovery job below we bump that\n  //       channel's `lastPolledAt` to `now` so it falls back under the\n  //       cutoff and is NOT re-selected on the immediately-following ticks\n  //       (poll-channel only advances `lastPolledAt` on a SUCCESSFUL poll,\n  //       so without this a persistently-failing channel would re-enqueue\n  //       every tick). On success `poll-channel` flips the status back to\n  //       'connected' so the channel rejoins the normal pool.\n  //\n  // Due-ness for (1) is computed in JS to avoid cross-DB interval\n  // arithmetic; the (2) cutoff is a single timestamp compare.\n  const connectedCandidates = await findWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId ?? null,\n      isActive: true,\n      deletedAt: null,\n      status: 'connected',\n      pollIntervalSeconds: { $ne: null },\n    },\n    {\n      limit: POLL_ENUMERATION_CAP,\n      orderBy: { lastPolledAt: 'asc' },\n    },\n    scope,\n  )\n\n  const recoverMinutesRaw = Number.parseInt(\n    process.env.OM_CHANNEL_AUTO_RECOVER_MINUTES ?? '',\n    10,\n  )\n  // `0` is a valid override meaning \"recover on the very next tick\" (used by\n  // TC-CHANNEL-EMAIL-027 and operators who want aggressive recovery). Only a\n  // negative or non-numeric value falls back to the 30-minute default.\n  const recoverMinutes =\n    Number.isFinite(recoverMinutesRaw) && recoverMinutesRaw >= 0 ? recoverMinutesRaw : 30\n  const recoverCutoff = new Date(now.getTime() - recoverMinutes * 60 * 1000)\n  const errorCandidates = await findWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId ?? null,\n      isActive: true,\n      deletedAt: null,\n      status: 'error',\n      // Polling channels only. Push-only channels (Gmail) have\n      // `pollIntervalSeconds = null` and are intentionally excluded: poll-channel\n      // returns early for push providers, so their recovery is owner-driven\n      // (re-register push / reconnect), not this poll-recovery sweep.\n      pollIntervalSeconds: { $ne: null },\n      // `lastPolledAt` advances only on a SUCCESSFUL poll (poll-channel does\n      // not touch it in `handlePollError`). To keep recovery to one retry per\n      // window \u2014 rather than re-enqueuing a persistently-failing channel every\n      // tick \u2014 the recovery-enqueue loop below bumps `lastPolledAt` to `now`\n      // when it schedules a recovery job, so the channel only re-enters this\n      // pool after another `recoverMinutes` have elapsed.\n      //\n      // A channel that fails its FIRST poll (before any success) still has\n      // `lastPolledAt = null`; a bare `$lt` would exclude it forever (SQL\n      // `NULL < ts` is NULL, not true), stranding it in `error`. Include the\n      // null case so never-polled error channels get their first recovery\n      // attempt on the next tick (the enqueue bump below then throttles it).\n      $or: [{ lastPolledAt: null }, { lastPolledAt: { $lt: recoverCutoff } }],\n    },\n    {\n      limit: POLL_ENUMERATION_CAP,\n      orderBy: { lastPolledAt: 'asc' },\n    },\n    scope,\n  )\n\n  const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.poll)\n  let enqueued = 0\n  let recovered = 0\n  for (const channel of connectedCandidates as CommunicationChannel[]) {\n    const intervalSeconds = channel.pollIntervalSeconds\n    if (!intervalSeconds || intervalSeconds <= 0) continue\n    if (!isDue(channel.lastPolledAt ?? null, intervalSeconds, now)) continue\n    const payload: PollChannelJobPayload = {\n      channelId: channel.id,\n      scope: {\n        tenantId: channel.tenantId,\n        organizationId: channel.organizationId ?? scope.organizationId ?? null,\n      },\n      attempt: 1,\n    }\n    await queue.enqueue(payload as unknown as Record<string, unknown>)\n    enqueued += 1\n  }\n  // Auto-recovery: at most one retry per recovery window per error-state\n  // channel. We bump `lastPolledAt` to `now` as we enqueue so the same channel\n  // drops back under `recoverCutoff` and is NOT re-selected on the next ticks\n  // (poll-channel leaves `lastPolledAt` untouched on failure, so without this a\n  // persistently-failing channel would be re-enqueued every tick).\n  for (const channel of errorCandidates as CommunicationChannel[]) {\n    const payload: PollChannelJobPayload = {\n      channelId: channel.id,\n      scope: {\n        tenantId: channel.tenantId,\n        organizationId: channel.organizationId ?? scope.organizationId ?? null,\n      },\n      attempt: 1,\n    }\n    await queue.enqueue(payload as unknown as Record<string, unknown>)\n    channel.lastPolledAt = now\n    recovered += 1\n  }\n  if (recovered > 0) await em.flush()\n\n  if (enqueued > 0 || recovered > 0) {\n    console.log(\n      `[communication_channels:poll-tick] enqueued ${enqueued} normal + ${recovered} auto-recover poll job(s) for tenant ${scope.tenantId}`,\n    )\n  }\n}\n\nfunction isDue(lastPolledAt: Date | null, intervalSeconds: number, now: Date): boolean {\n  if (!lastPolledAt) return true\n  const dueAt = new Date(lastPolledAt.getTime() + intervalSeconds * 1000)\n  return now >= dueAt\n}\n"],
+  "mappings": "AAEA,SAAS,0BAA0B;AACnC,SAAS,4BAA4B;AACrC,SAAS,+BAA+B,qCAAqC;AAc7E,MAAM,uBAAuB,KAAK;AAAA,EAChC;AAAA,EACA,OAAO,SAAS,QAAQ,IAAI,+CAA+C,OAAO,EAAE,KAAK;AAC3F;AAEO,MAAM,WAAuB;AAAA,EAClC,OAAO,8BAA8B;AAAA,EACrC,IAAI;AAAA,EACJ,aAAa;AAAA;AACf;AAwBA,eAAO,OACL,KACA,KACe;AAUf,QAAM,MAAO,KAAK,WAAW,CAAC;AAI9B,QAAM,WAAW,IAAI,OAAO,YAAY,IAAI,YAAY;AACxD,QAAM,iBACJ,IAAI,OAAO,kBAAkB,IAAI,kBAAkB;AACrD,MAAI,CAAC,UAAU;AACb,YAAQ;AAAA,MACN;AAAA,MACA,EAAE,SAAS,IAAI;AAAA,IACjB;AACA;AAAA,EACF;AACA,QAAM,QAAQ,EAAE,UAAU,eAAe;AACzC,QAAM,KAAM,IAAI,QAAQ,IAAI,EAAoB,KAAK;AAErD,QAAM,MAAM,oBAAI,KAAK;AAgBrB,QAAM,sBAAsB,MAAM;AAAA,IAChC;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM,kBAAkB;AAAA,MACxC,UAAU;AAAA,MACV,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,qBAAqB,EAAE,KAAK,KAAK;AAAA,IACnC;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,SAAS,EAAE,cAAc,MAAM;AAAA,IACjC;AAAA,IACA;AAAA,EACF;AAEA,QAAM,oBAAoB,OAAO;AAAA,IAC/B,QAAQ,IAAI,mCAAmC;AAAA,IAC/C;AAAA,EACF;AAIA,QAAM,iBACJ,OAAO,SAAS,iBAAiB,KAAK,qBAAqB,IAAI,oBAAoB;AACrF,QAAM,gBAAgB,IAAI,KAAK,IAAI,QAAQ,IAAI,iBAAiB,KAAK,GAAI;AACzE,QAAM,kBAAkB,MAAM;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM,kBAAkB;AAAA,MACxC,UAAU;AAAA,MACV,WAAW;AAAA,MACX,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,MAKR,qBAAqB,EAAE,KAAK,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAajC,KAAK,CAAC,EAAE,cAAc,KAAK,GAAG,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,CAAC;AAAA,IACxE;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,SAAS,EAAE,cAAc,MAAM;AAAA,IACjC;AAAA,IACA;AAAA,EACF;AAEA,QAAM,QAAQ,8BAA8B,8BAA8B,IAAI;AAC9E,MAAI,WAAW;AACf,MAAI,YAAY;AAChB,aAAW,WAAW,qBAA+C;AACnE,UAAM,kBAAkB,QAAQ;AAChC,QAAI,CAAC,mBAAmB,mBAAmB,EAAG;AAC9C,QAAI,CAAC,MAAM,QAAQ,gBAAgB,MAAM,iBAAiB,GAAG,EAAG;AAChE,UAAM,UAAiC;AAAA,MACrC,WAAW,QAAQ;AAAA,MACnB,OAAO;AAAA,QACL,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ,kBAAkB,MAAM,kBAAkB;AAAA,MACpE;AAAA,MACA,SAAS;AAAA,IACX;AACA,UAAM,MAAM,QAAQ,OAA6C;AACjE,gBAAY;AAAA,EACd;AAMA,aAAW,WAAW,iBAA2C;AAC/D,UAAM,UAAiC;AAAA,MACrC,WAAW,QAAQ;AAAA,MACnB,OAAO;AAAA,QACL,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ,kBAAkB,MAAM,kBAAkB;AAAA,MACpE;AAAA,MACA,SAAS;AAAA,IACX;AACA,UAAM,MAAM,QAAQ,OAA6C;AACjE,YAAQ,eAAe;AACvB,iBAAa;AAAA,EACf;AACA,MAAI,YAAY,EAAG,OAAM,GAAG,MAAM;AAElC,MAAI,WAAW,KAAK,YAAY,GAAG;AACjC,YAAQ;AAAA,MACN,+CAA+C,QAAQ,aAAa,SAAS,wCAAwC,MAAM,QAAQ;AAAA,IACrI;AAAA,EACF;AACF;AAEA,SAAS,MAAM,cAA2B,iBAAyB,KAAoB;AACrF,MAAI,CAAC,aAAc,QAAO;AAC1B,QAAM,QAAQ,IAAI,KAAK,aAAa,QAAQ,IAAI,kBAAkB,GAAI;AACtE,SAAO,OAAO;AAChB;",
+  "names": []
+}