@open-mercato/core 0.6.5-develop.4384.1.ce2ec6eaaa → 0.6.5-develop.4393.1.de282b5dfd

package/dist/modules/communication_channels/workers/poll-channel.js

@@ -0,0 +1,240 @@
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { CommunicationChannel } from "../data/entities.js";
+import {
+  COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID
+} from "../commands/ingest-inbound-message.js";
+import { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from "../lib/queue.js";
+import { preservePushState } from "../lib/push-state.js";
+import { writeIngestDeadLetter } from "../lib/dead-letter.js";
+import { classifyOutboundError, computeBackoffMs, isReauthError } from "../lib/error-classification.js";
+import { refreshCredentialsIfNeeded } from "../lib/credential-refresh.js";
+import { emitCommunicationChannelsEvent } from "../events.js";
+const POLL_CHANNEL_MAX_ATTEMPTS = 3;
+const MAX_DRAIN_PAGES = 100;
+const metadata = {
+  queue: COMMUNICATION_CHANNELS_QUEUES.poll,
+  id: "communication_channels:poll-channel",
+  concurrency: 10
+};
+async function handle(job, ctx) {
+  const { channelId, scope, attempt = 1, drainPage = 0 } = job.payload;
+  const em = ctx.resolve("em").fork();
+  const adapterRegistry = ctx.resolve("channelAdapterRegistry");
+  const channel = await findOneWithDecryption(
+    em,
+    CommunicationChannel,
+    {
+      id: channelId,
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId ?? null,
+      deletedAt: null
+    },
+    void 0,
+    scope
+  );
+  if (!channel) {
+    console.warn(
+      `[communication_channels:poll-channel] channel ${channelId} not found (skipping)`
+    );
+    return;
+  }
+  if (!channel.isActive) return;
+  if (channel.status !== "connected" && channel.status !== "error") return;
+  const adapter = adapterRegistry?.get(channel.providerKey);
+  if (!adapter) {
+    console.warn(
+      `[communication_channels:poll-channel] no adapter for provider '${channel.providerKey}' (channel ${channelId})`
+    );
+    return;
+  }
+  const capabilities = channel.capabilities ?? null;
+  if (capabilities?.realtimePush !== false) {
+    return;
+  }
+  if (typeof adapter.fetchHistory !== "function") {
+    return;
+  }
+  let credentialsService = null;
+  try {
+    credentialsService = ctx.resolve("integrationCredentialsService");
+  } catch {
+    credentialsService = null;
+  }
+  const credentialsScope = {
+    tenantId: scope.tenantId,
+    organizationId: scope.organizationId ?? scope.tenantId,
+    userId: channel.userId ?? null
+  };
+  let credentials = {};
+  if (channel.credentialsRef && credentialsService) {
+    try {
+      credentials = await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope) ?? {};
+    } catch {
+      credentials = {};
+    }
+  }
+  const refreshed = await refreshCredentialsIfNeeded(
+    {
+      adapter,
+      channelId: channel.id,
+      credentials,
+      scope: credentialsScope
+    },
+    { credentialsService }
+  );
+  credentials = refreshed.credentials;
+  let normalized = [];
+  let nextCursor;
+  let hasMore = false;
+  try {
+    const result = await adapter.fetchHistory({
+      conversationId: channel.externalIdentifier ?? channel.id,
+      credentials,
+      cursor: channel.lastPolledAt ? channel.lastPolledAt.toISOString() : void 0,
+      channelState: channel.channelState ?? void 0,
+      scope: {
+        tenantId: scope.tenantId,
+        organizationId: scope.organizationId ?? scope.tenantId
+      },
+      // `contactFilter.sinceDays` is a hint to provider adapters about how far
+      // back to look on first-poll bootstrap. For UID-incremental polls (every
+      // tick after the first), adapters ignore this and just fetch new mail
+      // since the persisted cursor.
+      contactFilter: { addresses: [], sinceDays: 7 }
+    });
+    normalized = Array.isArray(result?.messages) ? result.messages : [];
+    nextCursor = result?.nextCursor;
+    hasMore = result?.hasMore === true;
+  } catch (err) {
+    await handlePollError(err, em, channel, scope, attempt, job.payload);
+    return;
+  }
+  const commandBus = ctx.resolve("commandBus");
+  const containerProxy = { resolve: ctx.resolve.bind(ctx) };
+  const commandCtx = {
+    container: containerProxy,
+    auth: null,
+    organizationScope: null,
+    selectedOrganizationId: scope.organizationId ?? null,
+    organizationIds: scope.organizationId ? [scope.organizationId] : null
+  };
+  let transientIngestAbort = false;
+  for (const message of normalized) {
+    try {
+      const input = {
+        channelId: channel.id,
+        providerKey: channel.providerKey,
+        channelType: channel.channelType,
+        scope: {
+          tenantId: scope.tenantId,
+          organizationId: scope.organizationId ?? null
+        },
+        message
+      };
+      await commandBus.execute(COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID, {
+        input,
+        ctx: commandCtx
+      });
+    } catch (err) {
+      const classification = classifyOutboundError(err);
+      if (classification.transient) {
+        console.warn(
+          `[communication_channels:poll-channel] transient ingest failure for channel ${channel.id}; aborting page so cursor is NOT advanced. Reason: ${classification.message}`
+        );
+        transientIngestAbort = true;
+        break;
+      }
+      await writeIngestDeadLetter({
+        em,
+        scope,
+        channel,
+        message,
+        err,
+        errorMessage: classification.message
+      });
+      console.warn(
+        `[communication_channels:poll-channel] permanent ingest failure for channel ${channel.id}; recorded in dead-letter and advancing cursor past message ${message.externalMessageId}. Reason: ${classification.message}`
+      );
+    }
+  }
+  if (transientIngestAbort) {
+    channel.lastError = "transient_ingest_failure";
+    await em.flush();
+    return;
+  }
+  channel.lastPolledAt = /* @__PURE__ */ new Date();
+  if (channel.lastError) channel.lastError = null;
+  if (channel.status === "error") {
+    channel.status = "connected";
+  }
+  if (typeof nextCursor === "string" && nextCursor.length > 0) {
+    const decoded = decodeChannelStateCursor(nextCursor);
+    if (decoded) {
+      channel.channelState = preservePushState(channel.channelState, decoded);
+    }
+  }
+  await em.flush();
+  if (hasMore) {
+    if (drainPage < MAX_DRAIN_PAGES) {
+      const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.poll);
+      await queue.enqueue(
+        { channelId: channel.id, scope, attempt: 1, drainPage: drainPage + 1 },
+        { delayMs: 250 }
+      );
+    } else {
+      console.warn(
+        `[communication_channels:poll-channel] drain page cap (${MAX_DRAIN_PAGES}) reached for channel ${channel.id}; stopping re-enqueue until the next scheduled tick`
+      );
+    }
+  }
+}
+function decodeChannelStateCursor(cursor) {
+  try {
+    const decoded = Buffer.from(cursor, "base64").toString("utf8");
+    const parsed = JSON.parse(decoded);
+    if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+      return parsed;
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+async function handlePollError(err, em, channel, scope, attempt, payload) {
+  const classification = classifyOutboundError(err);
+  channel.lastError = classification.message;
+  if (isReauthError(classification)) {
+    channel.status = "requires_reauth";
+    await em.flush();
+    await emitCommunicationChannelsEvent(
+      "communication_channels.channel.requires_reauth",
+      {
+        channelId: channel.id,
+        providerKey: channel.providerKey,
+        channelType: channel.channelType,
+        reason: classification.message,
+        tenantId: scope.tenantId,
+        organizationId: scope.organizationId ?? null
+      },
+      { persistent: true }
+    );
+    return;
+  }
+  if (classification.transient && attempt < POLL_CHANNEL_MAX_ATTEMPTS) {
+    await em.flush();
+    const next = { ...payload, attempt: attempt + 1 };
+    const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.poll);
+    await queue.enqueue(next, {
+      delayMs: computeBackoffMs(attempt)
+    });
+    return;
+  }
+  channel.status = "error";
+  await em.flush();
+}
+export {
+  POLL_CHANNEL_MAX_ATTEMPTS,
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=poll-channel.js.map

package/dist/modules/communication_channels/workers/poll-channel.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/workers/poll-channel.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../data/entities'\nimport {\n  COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID,\n  type IngestInboundMessageInput,\n} from '../commands/ingest-inbound-message'\nimport { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from '../lib/queue'\nimport { preservePushState } from '../lib/push-state'\nimport { writeIngestDeadLetter } from '../lib/dead-letter'\nimport { classifyOutboundError, computeBackoffMs, isReauthError } from '../lib/error-classification'\nimport { refreshCredentialsIfNeeded } from '../lib/credential-refresh'\nimport { emitCommunicationChannelsEvent } from '../events'\nimport type { ChannelAdapterRegistry } from '../lib/registry'\nimport type { NormalizedInboundMessage } from '../lib/adapter'\n\n/**\n * Job payload for the `communication-channels-poll` queue.\n *\n * One job per channel per scheduler tick. The poll-tick worker (sibling file)\n * enumerates due channels and enqueues these jobs.\n */\nexport type PollChannelJobPayload = {\n  channelId: string\n  scope: {\n    tenantId: string\n    organizationId: string | null\n  }\n  /** Attempt count, 1-based; used for retry-backoff decisions. */\n  attempt?: number\n  /** Self-re-enqueue drain counter (bounds the multi-page `hasMore` drain loop). */\n  drainPage?: number\n}\n\nexport const POLL_CHANNEL_MAX_ATTEMPTS = 3\n\n/**\n * Hard cap on `hasMore` self-re-enqueue drain pages \u2014 guards against an adapter\n * that returns `hasMore: true` with a non-advancing (pinned) cursor, which would\n * otherwise spin a tight, unthrottled re-enqueue loop. Mirrors the same guard in\n * `gmail-history-sync`.\n */\nconst MAX_DRAIN_PAGES = 100\n\nexport const metadata: WorkerMeta = {\n  queue: COMMUNICATION_CHANNELS_QUEUES.poll,\n  id: 'communication_channels:poll-channel',\n  concurrency: 10,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n  save?: (\n    integrationId: string,\n    credentials: Record<string, unknown>,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<void>\n}\n\n/**\n * Poll a single channel for inbound messages.\n *\n * Per SPEC-045d \u00A7 6 (with email-spec \u00A7 Hub Deltas \u2192 Delta 6 polling extensions):\n *   1. Load the channel; skip when `is_active === false` or `status !== 'connected'`.\n *   2. Skip when the adapter declares `realtimePush !== false` (it doesn't want polling).\n *   3. Refresh credentials if OAuth and within the expiry window.\n *   4. Call `adapter.fetchHistory({ channelId, credentials, since: lastPolledAt })`.\n *   5. For each normalized message, dispatch `ingest_inbound_message` (idempotent on\n *      `(channel_id, external_message_id)`).\n *   6. Update `channel.lastPolledAt = NOW()` on success.\n *   7. On error: classify, set `channel.status` accordingly, set `last_error`, emit\n *      `channel.requires_reauth` on 401, retry transient failures up to MAX.\n *\n * The hub doesn't drain a remote mailbox indefinitely \u2014 `fetchHistory` returns a\n * single page (provider decides the size). If the provider has more, the next tick\n * picks it up after the configured `poll_interval_seconds`.\n */\nexport default async function handle(\n  job: QueuedJob<PollChannelJobPayload>,\n  ctx: HandlerContext,\n): Promise<void> {\n  const { channelId, scope, attempt = 1, drainPage = 0 } = job.payload\n  const em = (ctx.resolve('em') as EntityManager).fork()\n  const adapterRegistry = ctx.resolve<ChannelAdapterRegistry>('channelAdapterRegistry')\n\n  const channel = await findOneWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      id: channelId,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId ?? null,\n      deletedAt: null,\n    },\n    undefined,\n    scope,\n  )\n  if (!channel) {\n    console.warn(\n      `[communication_channels:poll-channel] channel ${channelId} not found (skipping)`,\n    )\n    return\n  }\n  if (!channel.isActive) return\n  // Allow `connected` (normal poll) and `error` (Spec B \u00A7 B5 auto-recovery\n  // sweep enqueues these intentionally \u2014 on a successful poll below we\n  // flip them back to `connected`). `requires_reauth` and `disconnected`\n  // are owned by the credential-refresh and disconnect flows.\n  if (channel.status !== 'connected' && channel.status !== 'error') return\n\n  const adapter = adapterRegistry?.get(channel.providerKey)\n  if (!adapter) {\n    console.warn(\n      `[communication_channels:poll-channel] no adapter for provider '${channel.providerKey}' (channel ${channelId})`,\n    )\n    return\n  }\n  // Adapter opted out of polling \u2014 webhook providers.\n  const capabilities = (channel.capabilities as { realtimePush?: boolean } | null) ?? null\n  if (capabilities?.realtimePush !== false) {\n    // realtimePush is `true` (default for back-compat) \u2014 don't poll push providers.\n    return\n  }\n  if (typeof adapter.fetchHistory !== 'function') {\n    // Adapter doesn't implement history fetching \u2014 nothing we can do.\n    return\n  }\n\n  // Credentials.\n  let credentialsService: CredentialsServiceLike | null = null\n  try {\n    credentialsService = ctx.resolve<CredentialsServiceLike>('integrationCredentialsService')\n  } catch {\n    credentialsService = null\n  }\n  // Per-user credentials scope: pass `channel.userId` so the credentials\n  // service returns this user's row, not whoever connected the provider last.\n  // See review R2-C1 / N1 (2026-05-26).\n  const credentialsScope = {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId ?? scope.tenantId,\n    userId: channel.userId ?? null,\n  }\n  let credentials: Record<string, unknown> = {}\n  if (channel.credentialsRef && credentialsService) {\n    try {\n      credentials =\n        (await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope)) ?? {}\n    } catch {\n      credentials = {}\n    }\n  }\n  const refreshed = await refreshCredentialsIfNeeded(\n    {\n      adapter,\n      channelId: channel.id,\n      credentials,\n      scope: credentialsScope,\n    },\n    { credentialsService },\n  )\n  credentials = refreshed.credentials\n\n  // Fetch a single page of history.\n  // `channelState` is the provider-specific resumption cursor \u2014 Gmail historyId,\n  // IMAP UIDVALIDITY+UIDNEXT, etc. We persist it across\n  // ticks on `channel.channelState` so each poll resumes from the prior one\n  // instead of running a full mailbox resync. Empty / NULL = \"first poll;\n  // bootstrap the cursor from the provider\".\n  let normalized: NormalizedInboundMessage[] = []\n  let nextCursor: string | undefined\n  let hasMore = false\n  try {\n    const result = await adapter.fetchHistory({\n      conversationId: channel.externalIdentifier ?? channel.id,\n      credentials,\n      cursor: channel.lastPolledAt ? channel.lastPolledAt.toISOString() : undefined,\n      channelState: (channel.channelState as Record<string, unknown> | null) ?? undefined,\n      scope: {\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId ?? scope.tenantId,\n      },\n      // `contactFilter.sinceDays` is a hint to provider adapters about how far\n      // back to look on first-poll bootstrap. For UID-incremental polls (every\n      // tick after the first), adapters ignore this and just fetch new mail\n      // since the persisted cursor.\n      contactFilter: { addresses: [], sinceDays: 7 },\n    })\n    normalized = Array.isArray(result?.messages) ? result.messages : []\n    nextCursor = result?.nextCursor\n    hasMore = result?.hasMore === true\n  } catch (err) {\n    await handlePollError(err, em, channel, scope, attempt, job.payload)\n    return\n  }\n\n  // Dispatch ingest commands for each message.\n  const commandBus = ctx.resolve<CommandBus>('commandBus')\n  const containerProxy = { resolve: ctx.resolve.bind(ctx) }\n  const commandCtx = {\n    container: containerProxy as never,\n    auth: null,\n    organizationScope: null,\n    selectedOrganizationId: scope.organizationId ?? null,\n    organizationIds: scope.organizationId ? [scope.organizationId] : null,\n  }\n  // Spec B \u00A7 Per-message commit + dead-letter:\n  //   - Permanent failure (malformed MIME, schema, contract violation):\n  //     write to channel_ingest_dead_letter, log, advance cursor anyway so\n  //     the bad blob never stalls the channel again.\n  //   - Transient failure (DB drop, network blip): abort the loop without\n  //     advancing the cursor. The next tick re-fetches the same page;\n  //     idempotency via the (channel_id, external_message_id) unique\n  //     constraint means already-ingested messages no-op on the retry.\n  let transientIngestAbort = false\n  for (const message of normalized) {\n    try {\n      const input: IngestInboundMessageInput = {\n        channelId: channel.id,\n        providerKey: channel.providerKey,\n        channelType: channel.channelType,\n        scope: {\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId ?? null,\n        },\n        message,\n      }\n      await commandBus.execute(COMMUNICATION_CHANNELS_INGEST_INBOUND_COMMAND_ID, {\n        input,\n        ctx: commandCtx as never,\n      })\n    } catch (err) {\n      const classification = classifyOutboundError(err)\n      if (classification.transient) {\n        console.warn(\n          `[communication_channels:poll-channel] transient ingest failure for channel ${channel.id}; aborting page so cursor is NOT advanced. Reason: ${classification.message}`,\n        )\n        transientIngestAbort = true\n        break\n      }\n      // Permanent \u2014 write to dead-letter so an operator can replay later.\n      // The shared helper is best-effort (never throws) and idempotent on\n      // `(channelId, externalMessageId)`, so a replayed page that fails the\n      // same message again does not insert a duplicate row.\n      await writeIngestDeadLetter({\n        em,\n        scope,\n        channel,\n        message,\n        err,\n        errorMessage: classification.message,\n      })\n      console.warn(\n        `[communication_channels:poll-channel] permanent ingest failure for channel ${channel.id}; recorded in dead-letter and advancing cursor past message ${message.externalMessageId}. Reason: ${classification.message}`,\n      )\n    }\n  }\n\n  // Transient abort: keep prior cursor + lastPolledAt so the next tick\n  // re-fetches the same page (idempotent at the DB layer).\n  if (transientIngestAbort) {\n    channel.lastError = 'transient_ingest_failure'\n    await em.flush()\n    return\n  }\n\n  // Update poll cursor + clear any stale error state.\n  channel.lastPolledAt = new Date()\n  if (channel.lastError) channel.lastError = null\n  // Recover the channel from any prior non-fatal error state. The previous\n  // poll(s) may have set status='error' after exhausting transient-retry\n  // attempts, but a fresh successful poll means the upstream is healthy\n  // again \u2014 flip it back to 'connected' so the scheduler keeps it in\n  // rotation and the user doesn't have to manually reconnect.\n  // We DON'T touch 'requires_reauth' here (that lifecycle state is owned\n  // by the credential-refresh / OAuth flow) or 'disconnected' (owned by\n  // the cascade-on-user-delete subscriber).\n  if (channel.status === 'error') {\n    channel.status = 'connected'\n  }\n  // Providers encode their cursor as base64-encoded JSON in `nextCursor`; we\n  // decode it back to an object so the next tick can pass it straight into\n  // `fetchHistory` as `channelState`. Decode failures fall back to the prior\n  // state (next tick bootstraps from there).\n  //\n  // Push-delivery state (Spec C) \u2014 watch/subscription identifiers and expiry \u2014 is\n  // owned by the push register/renew commands, not the sync cursor. A provider's\n  // `fetchHistory` returns only sync-cursor fields, so persisting the decoded\n  // cursor as a full replace would silently wipe push state and stop\n  // `gmail-renew-watch` from renewing it. Carry\n  // the hub-owned push keys forward whenever the new cursor omits them.\n  if (typeof nextCursor === 'string' && nextCursor.length > 0) {\n    const decoded = decodeChannelStateCursor(nextCursor)\n    if (decoded) {\n      channel.channelState = preservePushState(channel.channelState, decoded)\n    }\n  }\n  await em.flush()\n\n  // Drain contract (review H1, 2026-05-26): adapters that have additional\n  // pages beyond this tick's batch (large mailboxes, mid-deltaLink walks,\n  // UID overflows) signal `hasMore: true`. The persisted `channelState`\n  // already encodes the mid-drain resumption token (Gmail `pendingHistoryPageToken`,\n  // IMAP non-terminal `uidNext`). Re-enqueue with\n  // a small delay so we keep draining without overrunning rate limits.\n  if (hasMore) {\n    // Bound the drain: an adapter that returns `hasMore: true` with a\n    // non-advancing cursor (e.g. a persistently-failing message that pins the\n    // Gmail cursor via `hardFailed`) must not spin an unthrottled loop. Stop\n    // at MAX_DRAIN_PAGES; the next scheduled poll tick re-checks the channel.\n    if (drainPage < MAX_DRAIN_PAGES) {\n      const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.poll)\n      await queue.enqueue(\n        { channelId: channel.id, scope, attempt: 1, drainPage: drainPage + 1 } as unknown as Record<string, unknown>,\n        { delayMs: 250 },\n      )\n    } else {\n      console.warn(\n        `[communication_channels:poll-channel] drain page cap (${MAX_DRAIN_PAGES}) reached for channel ${channel.id}; stopping re-enqueue until the next scheduled tick`,\n      )\n    }\n  }\n}\n\nfunction decodeChannelStateCursor(cursor: string): Record<string, unknown> | null {\n  try {\n    const decoded = Buffer.from(cursor, 'base64').toString('utf8')\n    const parsed = JSON.parse(decoded) as unknown\n    if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {\n      return parsed as Record<string, unknown>\n    }\n    return null\n  } catch {\n    return null\n  }\n}\n\nasync function handlePollError(\n  err: unknown,\n  em: EntityManager,\n  channel: CommunicationChannel,\n  scope: PollChannelJobPayload['scope'],\n  attempt: number,\n  payload: PollChannelJobPayload,\n): Promise<void> {\n  const classification = classifyOutboundError(err)\n  channel.lastError = classification.message\n\n  if (isReauthError(classification)) {\n    channel.status = 'requires_reauth'\n    await em.flush()\n    await emitCommunicationChannelsEvent(\n      'communication_channels.channel.requires_reauth',\n      {\n        channelId: channel.id,\n        providerKey: channel.providerKey,\n        channelType: channel.channelType,\n        reason: classification.message,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId ?? null,\n      },\n      { persistent: true },\n    )\n    return\n  }\n\n  if (classification.transient && attempt < POLL_CHANNEL_MAX_ATTEMPTS) {\n    // Transient error \u2014 re-enqueue with backoff. Channel status stays\n    // `connected` so the scheduler keeps it in rotation.\n    await em.flush()\n    const next: PollChannelJobPayload = { ...payload, attempt: attempt + 1 }\n    const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.poll)\n    await queue.enqueue(next as unknown as Record<string, unknown>, {\n      delayMs: computeBackoffMs(attempt),\n    })\n    return\n  }\n\n  // Permanent or attempts exhausted \u2014 mark channel as error and stop the loop.\n  channel.status = 'error'\n  await em.flush()\n}\n"],
+  "mappings": "AAGA,SAAS,6BAA6B;AACtC,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,+BAA+B,qCAAqC;AAC7E,SAAS,yBAAyB;AAClC,SAAS,6BAA6B;AACtC,SAAS,uBAAuB,kBAAkB,qBAAqB;AACvE,SAAS,kCAAkC;AAC3C,SAAS,sCAAsC;AAsBxC,MAAM,4BAA4B;AAQzC,MAAM,kBAAkB;AAEjB,MAAM,WAAuB;AAAA,EAClC,OAAO,8BAA8B;AAAA,EACrC,IAAI;AAAA,EACJ,aAAa;AACf;AAoCA,eAAO,OACL,KACA,KACe;AACf,QAAM,EAAE,WAAW,OAAO,UAAU,GAAG,YAAY,EAAE,IAAI,IAAI;AAC7D,QAAM,KAAM,IAAI,QAAQ,IAAI,EAAoB,KAAK;AACrD,QAAM,kBAAkB,IAAI,QAAgC,wBAAwB;AAEpF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM,kBAAkB;AAAA,MACxC,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,YAAQ;AAAA,MACN,iDAAiD,SAAS;AAAA,IAC5D;AACA;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,SAAU;AAKvB,MAAI,QAAQ,WAAW,eAAe,QAAQ,WAAW,QAAS;AAElE,QAAM,UAAU,iBAAiB,IAAI,QAAQ,WAAW;AACxD,MAAI,CAAC,SAAS;AACZ,YAAQ;AAAA,MACN,kEAAkE,QAAQ,WAAW,cAAc,SAAS;AAAA,IAC9G;AACA;AAAA,EACF;AAEA,QAAM,eAAgB,QAAQ,gBAAsD;AACpF,MAAI,cAAc,iBAAiB,OAAO;AAExC;AAAA,EACF;AACA,MAAI,OAAO,QAAQ,iBAAiB,YAAY;AAE9C;AAAA,EACF;AAGA,MAAI,qBAAoD;AACxD,MAAI;AACF,yBAAqB,IAAI,QAAgC,+BAA+B;AAAA,EAC1F,QAAQ;AACN,yBAAqB;AAAA,EACvB;AAIA,QAAM,mBAAmB;AAAA,IACvB,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM,kBAAkB,MAAM;AAAA,IAC9C,QAAQ,QAAQ,UAAU;AAAA,EAC5B;AACA,MAAI,cAAuC,CAAC;AAC5C,MAAI,QAAQ,kBAAkB,oBAAoB;AAChD,QAAI;AACF,oBACG,MAAM,mBAAmB,QAAQ,WAAW,QAAQ,WAAW,IAAI,gBAAgB,KAAM,CAAC;AAAA,IAC/F,QAAQ;AACN,oBAAc,CAAC;AAAA,IACjB;AAAA,EACF;AACA,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,MACE;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,OAAO;AAAA,IACT;AAAA,IACA,EAAE,mBAAmB;AAAA,EACvB;AACA,gBAAc,UAAU;AAQxB,MAAI,aAAyC,CAAC;AAC9C,MAAI;AACJ,MAAI,UAAU;AACd,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ,aAAa;AAAA,MACxC,gBAAgB,QAAQ,sBAAsB,QAAQ;AAAA,MACtD;AAAA,MACA,QAAQ,QAAQ,eAAe,QAAQ,aAAa,YAAY,IAAI;AAAA,MACpE,cAAe,QAAQ,gBAAmD;AAAA,MAC1E,OAAO;AAAA,QACL,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM,kBAAkB,MAAM;AAAA,MAChD;AAAA;AAAA;AAAA;AAAA;AAAA,MAKA,eAAe,EAAE,WAAW,CAAC,GAAG,WAAW,EAAE;AAAA,IAC/C,CAAC;AACD,iBAAa,MAAM,QAAQ,QAAQ,QAAQ,IAAI,OAAO,WAAW,CAAC;AAClE,iBAAa,QAAQ;AACrB,cAAU,QAAQ,YAAY;AAAA,EAChC,SAAS,KAAK;AACZ,UAAM,gBAAgB,KAAK,IAAI,SAAS,OAAO,SAAS,IAAI,OAAO;AACnE;AAAA,EACF;AAGA,QAAM,aAAa,IAAI,QAAoB,YAAY;AACvD,QAAM,iBAAiB,EAAE,SAAS,IAAI,QAAQ,KAAK,GAAG,EAAE;AACxD,QAAM,aAAa;AAAA,IACjB,WAAW;AAAA,IACX,MAAM;AAAA,IACN,mBAAmB;AAAA,IACnB,wBAAwB,MAAM,kBAAkB;AAAA,IAChD,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,EACnE;AASA,MAAI,uBAAuB;AAC3B,aAAW,WAAW,YAAY;AAChC,QAAI;AACF,YAAM,QAAmC;AAAA,QACvC,WAAW,QAAQ;AAAA,QACnB,aAAa,QAAQ;AAAA,QACrB,aAAa,QAAQ;AAAA,QACrB,OAAO;AAAA,UACL,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM,kBAAkB;AAAA,QAC1C;AAAA,QACA;AAAA,MACF;AACA,YAAM,WAAW,QAAQ,kDAAkD;AAAA,QACzE;AAAA,QACA,KAAK;AAAA,MACP,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,YAAM,iBAAiB,sBAAsB,GAAG;AAChD,UAAI,eAAe,WAAW;AAC5B,gBAAQ;AAAA,UACN,8EAA8E,QAAQ,EAAE,sDAAsD,eAAe,OAAO;AAAA,QACtK;AACA,+BAAuB;AACvB;AAAA,MACF;AAKA,YAAM,sBAAsB;AAAA,QAC1B;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,cAAc,eAAe;AAAA,MAC/B,CAAC;AACD,cAAQ;AAAA,QACN,8EAA8E,QAAQ,EAAE,+DAA+D,QAAQ,iBAAiB,aAAa,eAAe,OAAO;AAAA,MACrN;AAAA,IACF;AAAA,EACF;AAIA,MAAI,sBAAsB;AACxB,YAAQ,YAAY;AACpB,UAAM,GAAG,MAAM;AACf;AAAA,EACF;AAGA,UAAQ,eAAe,oBAAI,KAAK;AAChC,MAAI,QAAQ,UAAW,SAAQ,YAAY;AAS3C,MAAI,QAAQ,WAAW,SAAS;AAC9B,YAAQ,SAAS;AAAA,EACnB;AAYA,MAAI,OAAO,eAAe,YAAY,WAAW,SAAS,GAAG;AAC3D,UAAM,UAAU,yBAAyB,UAAU;AACnD,QAAI,SAAS;AACX,cAAQ,eAAe,kBAAkB,QAAQ,cAAc,OAAO;AAAA,IACxE;AAAA,EACF;AACA,QAAM,GAAG,MAAM;AAQf,MAAI,SAAS;AAKX,QAAI,YAAY,iBAAiB;AAC/B,YAAM,QAAQ,8BAA8B,8BAA8B,IAAI;AAC9E,YAAM,MAAM;AAAA,QACV,EAAE,WAAW,QAAQ,IAAI,OAAO,SAAS,GAAG,WAAW,YAAY,EAAE;AAAA,QACrE,EAAE,SAAS,IAAI;AAAA,MACjB;AAAA,IACF,OAAO;AACL,cAAQ;AAAA,QACN,yDAAyD,eAAe,yBAAyB,QAAQ,EAAE;AAAA,MAC7G;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,yBAAyB,QAAgD;AAChF,MAAI;AACF,UAAM,UAAU,OAAO,KAAK,QAAQ,QAAQ,EAAE,SAAS,MAAM;AAC7D,UAAM,SAAS,KAAK,MAAM,OAAO;AACjC,QAAI,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,GAAG;AAClE,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,gBACb,KACA,IACA,SACA,OACA,SACA,SACe;AACf,QAAM,iBAAiB,sBAAsB,GAAG;AAChD,UAAQ,YAAY,eAAe;AAEnC,MAAI,cAAc,cAAc,GAAG;AACjC,YAAQ,SAAS;AACjB,UAAM,GAAG,MAAM;AACf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,WAAW,QAAQ;AAAA,QACnB,aAAa,QAAQ;AAAA,QACrB,aAAa,QAAQ;AAAA,QACrB,QAAQ,eAAe;AAAA,QACvB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM,kBAAkB;AAAA,MAC1C;AAAA,MACA,EAAE,YAAY,KAAK;AAAA,IACrB;AACA;AAAA,EACF;AAEA,MAAI,eAAe,aAAa,UAAU,2BAA2B;AAGnE,UAAM,GAAG,MAAM;AACf,UAAM,OAA8B,EAAE,GAAG,SAAS,SAAS,UAAU,EAAE;AACvE,UAAM,QAAQ,8BAA8B,8BAA8B,IAAI;AAC9E,UAAM,MAAM,QAAQ,MAA4C;AAAA,MAC9D,SAAS,iBAAiB,OAAO;AAAA,IACnC,CAAC;AACD;AAAA,EACF;AAGA,UAAQ,SAAS;AACjB,QAAM,GAAG,MAAM;AACjB;",
+  "names": []
+}

package/dist/modules/communication_channels/workers/poll-tick.js

@@ -0,0 +1,132 @@
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { CommunicationChannel } from "../data/entities.js";
+import { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from "../lib/queue.js";
+const POLL_ENUMERATION_CAP = Math.max(
+  1,
+  Number.parseInt(process.env.COMMUNICATION_CHANNELS_POLL_ENUMERATION_CAP ?? "500", 10) || 500
+);
+const metadata = {
+  queue: COMMUNICATION_CHANNELS_QUEUES.pollTick,
+  id: "communication_channels:poll-tick",
+  concurrency: 1
+  // single-flight per tenant — one tick at a time
+};
+async function handle(job, ctx) {
+  const raw = job?.payload ?? {};
+  const tenantId = raw.scope?.tenantId ?? raw.tenantId ?? null;
+  const organizationId = raw.scope?.organizationId ?? raw.organizationId ?? null;
+  if (!tenantId) {
+    console.warn(
+      "[communication_channels:poll-tick] skipping tick \u2014 payload has no tenantId",
+      { payload: raw }
+    );
+    return;
+  }
+  const scope = { tenantId, organizationId };
+  const em = ctx.resolve("em").fork();
+  const now = /* @__PURE__ */ new Date();
+  const connectedCandidates = await findWithDecryption(
+    em,
+    CommunicationChannel,
+    {
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId ?? null,
+      isActive: true,
+      deletedAt: null,
+      status: "connected",
+      pollIntervalSeconds: { $ne: null }
+    },
+    {
+      limit: POLL_ENUMERATION_CAP,
+      orderBy: { lastPolledAt: "asc" }
+    },
+    scope
+  );
+  const recoverMinutesRaw = Number.parseInt(
+    process.env.OM_CHANNEL_AUTO_RECOVER_MINUTES ?? "",
+    10
+  );
+  const recoverMinutes = Number.isFinite(recoverMinutesRaw) && recoverMinutesRaw >= 0 ? recoverMinutesRaw : 30;
+  const recoverCutoff = new Date(now.getTime() - recoverMinutes * 60 * 1e3);
+  const errorCandidates = await findWithDecryption(
+    em,
+    CommunicationChannel,
+    {
+      tenantId: scope.tenantId,
+      organizationId: scope.organizationId ?? null,
+      isActive: true,
+      deletedAt: null,
+      status: "error",
+      // Polling channels only. Push-only channels (Gmail) have
+      // `pollIntervalSeconds = null` and are intentionally excluded: poll-channel
+      // returns early for push providers, so their recovery is owner-driven
+      // (re-register push / reconnect), not this poll-recovery sweep.
+      pollIntervalSeconds: { $ne: null },
+      // `lastPolledAt` advances only on a SUCCESSFUL poll (poll-channel does
+      // not touch it in `handlePollError`). To keep recovery to one retry per
+      // window — rather than re-enqueuing a persistently-failing channel every
+      // tick — the recovery-enqueue loop below bumps `lastPolledAt` to `now`
+      // when it schedules a recovery job, so the channel only re-enters this
+      // pool after another `recoverMinutes` have elapsed.
+      //
+      // A channel that fails its FIRST poll (before any success) still has
+      // `lastPolledAt = null`; a bare `$lt` would exclude it forever (SQL
+      // `NULL < ts` is NULL, not true), stranding it in `error`. Include the
+      // null case so never-polled error channels get their first recovery
+      // attempt on the next tick (the enqueue bump below then throttles it).
+      $or: [{ lastPolledAt: null }, { lastPolledAt: { $lt: recoverCutoff } }]
+    },
+    {
+      limit: POLL_ENUMERATION_CAP,
+      orderBy: { lastPolledAt: "asc" }
+    },
+    scope
+  );
+  const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.poll);
+  let enqueued = 0;
+  let recovered = 0;
+  for (const channel of connectedCandidates) {
+    const intervalSeconds = channel.pollIntervalSeconds;
+    if (!intervalSeconds || intervalSeconds <= 0) continue;
+    if (!isDue(channel.lastPolledAt ?? null, intervalSeconds, now)) continue;
+    const payload = {
+      channelId: channel.id,
+      scope: {
+        tenantId: channel.tenantId,
+        organizationId: channel.organizationId ?? scope.organizationId ?? null
+      },
+      attempt: 1
+    };
+    await queue.enqueue(payload);
+    enqueued += 1;
+  }
+  for (const channel of errorCandidates) {
+    const payload = {
+      channelId: channel.id,
+      scope: {
+        tenantId: channel.tenantId,
+        organizationId: channel.organizationId ?? scope.organizationId ?? null
+      },
+      attempt: 1
+    };
+    await queue.enqueue(payload);
+    channel.lastPolledAt = now;
+    recovered += 1;
+  }
+  if (recovered > 0) await em.flush();
+  if (enqueued > 0 || recovered > 0) {
+    console.log(
+      `[communication_channels:poll-tick] enqueued ${enqueued} normal + ${recovered} auto-recover poll job(s) for tenant ${scope.tenantId}`
+    );
+  }
+}
+function isDue(lastPolledAt, intervalSeconds, now) {
+  if (!lastPolledAt) return true;
+  const dueAt = new Date(lastPolledAt.getTime() + intervalSeconds * 1e3);
+  return now >= dueAt;
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=poll-tick.js.map

package/dist/modules/communication_channels/workers/poll-tick.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/communication_channels/workers/poll-tick.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CommunicationChannel } from '../data/entities'\nimport { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from '../lib/queue'\nimport type { PollChannelJobPayload } from './poll-channel'\n\n/**\n * Scheduler tick payload. Fired by the `@open-mercato/scheduler` cron entry\n * registered in the hub's `setup.ts` (`communication_channels:poll-tick` schedule).\n */\nexport type PollTickPayload = {\n  scope: {\n    tenantId: string\n    organizationId: string | null\n  }\n}\n\nconst POLL_ENUMERATION_CAP = Math.max(\n  1,\n  Number.parseInt(process.env.COMMUNICATION_CHANNELS_POLL_ENUMERATION_CAP ?? '500', 10) || 500,\n)\n\nexport const metadata: WorkerMeta = {\n  queue: COMMUNICATION_CHANNELS_QUEUES.pollTick,\n  id: 'communication_channels:poll-tick',\n  concurrency: 1, // single-flight per tenant \u2014 one tick at a time\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\n/**\n * Enumerate channels due for polling and enqueue per-channel jobs.\n *\n * Per email integration spec \u00A7 Hub Deltas \u2192 Delta 6:\n *   SELECT id FROM communication_channels\n *   WHERE is_active = true\n *     AND deleted_at IS NULL\n *     AND status = 'connected'\n *     AND poll_interval_seconds IS NOT NULL\n *     AND (last_polled_at IS NULL\n *          OR last_polled_at + poll_interval_seconds * '1 sec' <= NOW())\n *   ORDER BY last_polled_at NULLS FIRST\n *   LIMIT 500\n *\n * Implementation note: MikroORM's QueryBuilder is the canonical entry point;\n * the raw SQL above is the conceptual query. We use the entity-level filter to\n * keep things portable and let MikroORM compile it.\n */\nexport default async function handle(\n  job: QueuedJob<PollTickPayload>,\n  ctx: HandlerContext,\n): Promise<void> {\n  // The scheduler module (`@open-mercato/scheduler`) spreads the configured\n  // `targetPayload` and then adds `tenantId` / `organizationId` at the TOP\n  // level of the enqueued payload (see\n  // packages/scheduler/.../execute-schedule.worker.ts). Our setup.ts originally\n  // stored `{ scope: { tenantId, organizationId } }` under targetPayload, so\n  // at runtime the payload looks like:\n  //   { scope: { tenantId, organizationId }, tenantId, organizationId, _idempotencyKey }\n  // Accept either path so the handler is robust to both how operators originally\n  // configured the schedule (nested `scope`) and how the scheduler flattens it.\n  const raw = (job?.payload ?? {}) as Partial<PollTickPayload> & {\n    tenantId?: string | null\n    organizationId?: string | null\n  }\n  const tenantId = raw.scope?.tenantId ?? raw.tenantId ?? null\n  const organizationId =\n    raw.scope?.organizationId ?? raw.organizationId ?? null\n  if (!tenantId) {\n    console.warn(\n      '[communication_channels:poll-tick] skipping tick \u2014 payload has no tenantId',\n      { payload: raw },\n    )\n    return\n  }\n  const scope = { tenantId, organizationId }\n  const em = (ctx.resolve('em') as EntityManager).fork()\n\n  const now = new Date()\n  // Find candidate channels \u2014 we enumerate two pools:\n  //   (1) status='connected' channels due for their normal poll cycle.\n  //   (2) Spec B \u00A7 Auto-recovery sweep: status='error' channels whose\n  //       `lastPolledAt` is older than OM_CHANNEL_AUTO_RECOVER_MINUTES\n  //       (default 30 min). At most one retry per recovery window per\n  //       channel \u2014 when we enqueue a recovery job below we bump that\n  //       channel's `lastPolledAt` to `now` so it falls back under the\n  //       cutoff and is NOT re-selected on the immediately-following ticks\n  //       (poll-channel only advances `lastPolledAt` on a SUCCESSFUL poll,\n  //       so without this a persistently-failing channel would re-enqueue\n  //       every tick). On success `poll-channel` flips the status back to\n  //       'connected' so the channel rejoins the normal pool.\n  //\n  // Due-ness for (1) is computed in JS to avoid cross-DB interval\n  // arithmetic; the (2) cutoff is a single timestamp compare.\n  const connectedCandidates = await findWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId ?? null,\n      isActive: true,\n      deletedAt: null,\n      status: 'connected',\n      pollIntervalSeconds: { $ne: null },\n    },\n    {\n      limit: POLL_ENUMERATION_CAP,\n      orderBy: { lastPolledAt: 'asc' },\n    },\n    scope,\n  )\n\n  const recoverMinutesRaw = Number.parseInt(\n    process.env.OM_CHANNEL_AUTO_RECOVER_MINUTES ?? '',\n    10,\n  )\n  // `0` is a valid override meaning \"recover on the very next tick\" (used by\n  // TC-CHANNEL-EMAIL-027 and operators who want aggressive recovery). Only a\n  // negative or non-numeric value falls back to the 30-minute default.\n  const recoverMinutes =\n    Number.isFinite(recoverMinutesRaw) && recoverMinutesRaw >= 0 ? recoverMinutesRaw : 30\n  const recoverCutoff = new Date(now.getTime() - recoverMinutes * 60 * 1000)\n  const errorCandidates = await findWithDecryption(\n    em,\n    CommunicationChannel,\n    {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId ?? null,\n      isActive: true,\n      deletedAt: null,\n      status: 'error',\n      // Polling channels only. Push-only channels (Gmail) have\n      // `pollIntervalSeconds = null` and are intentionally excluded: poll-channel\n      // returns early for push providers, so their recovery is owner-driven\n      // (re-register push / reconnect), not this poll-recovery sweep.\n      pollIntervalSeconds: { $ne: null },\n      // `lastPolledAt` advances only on a SUCCESSFUL poll (poll-channel does\n      // not touch it in `handlePollError`). To keep recovery to one retry per\n      // window \u2014 rather than re-enqueuing a persistently-failing channel every\n      // tick \u2014 the recovery-enqueue loop below bumps `lastPolledAt` to `now`\n      // when it schedules a recovery job, so the channel only re-enters this\n      // pool after another `recoverMinutes` have elapsed.\n      //\n      // A channel that fails its FIRST poll (before any success) still has\n      // `lastPolledAt = null`; a bare `$lt` would exclude it forever (SQL\n      // `NULL < ts` is NULL, not true), stranding it in `error`. Include the\n      // null case so never-polled error channels get their first recovery\n      // attempt on the next tick (the enqueue bump below then throttles it).\n      $or: [{ lastPolledAt: null }, { lastPolledAt: { $lt: recoverCutoff } }],\n    },\n    {\n      limit: POLL_ENUMERATION_CAP,\n      orderBy: { lastPolledAt: 'asc' },\n    },\n    scope,\n  )\n\n  const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.poll)\n  let enqueued = 0\n  let recovered = 0\n  for (const channel of connectedCandidates as CommunicationChannel[]) {\n    const intervalSeconds = channel.pollIntervalSeconds\n    if (!intervalSeconds || intervalSeconds <= 0) continue\n    if (!isDue(channel.lastPolledAt ?? null, intervalSeconds, now)) continue\n    const payload: PollChannelJobPayload = {\n      channelId: channel.id,\n      scope: {\n        tenantId: channel.tenantId,\n        organizationId: channel.organizationId ?? scope.organizationId ?? null,\n      },\n      attempt: 1,\n    }\n    await queue.enqueue(payload as unknown as Record<string, unknown>)\n    enqueued += 1\n  }\n  // Auto-recovery: at most one retry per recovery window per error-state\n  // channel. We bump `lastPolledAt` to `now` as we enqueue so the same channel\n  // drops back under `recoverCutoff` and is NOT re-selected on the next ticks\n  // (poll-channel leaves `lastPolledAt` untouched on failure, so without this a\n  // persistently-failing channel would be re-enqueued every tick).\n  for (const channel of errorCandidates as CommunicationChannel[]) {\n    const payload: PollChannelJobPayload = {\n      channelId: channel.id,\n      scope: {\n        tenantId: channel.tenantId,\n        organizationId: channel.organizationId ?? scope.organizationId ?? null,\n      },\n      attempt: 1,\n    }\n    await queue.enqueue(payload as unknown as Record<string, unknown>)\n    channel.lastPolledAt = now\n    recovered += 1\n  }\n  if (recovered > 0) await em.flush()\n\n  if (enqueued > 0 || recovered > 0) {\n    console.log(\n      `[communication_channels:poll-tick] enqueued ${enqueued} normal + ${recovered} auto-recover poll job(s) for tenant ${scope.tenantId}`,\n    )\n  }\n}\n\nfunction isDue(lastPolledAt: Date | null, intervalSeconds: number, now: Date): boolean {\n  if (!lastPolledAt) return true\n  const dueAt = new Date(lastPolledAt.getTime() + intervalSeconds * 1000)\n  return now >= dueAt\n}\n"],
+  "mappings": "AAEA,SAAS,0BAA0B;AACnC,SAAS,4BAA4B;AACrC,SAAS,+BAA+B,qCAAqC;AAc7E,MAAM,uBAAuB,KAAK;AAAA,EAChC;AAAA,EACA,OAAO,SAAS,QAAQ,IAAI,+CAA+C,OAAO,EAAE,KAAK;AAC3F;AAEO,MAAM,WAAuB;AAAA,EAClC,OAAO,8BAA8B;AAAA,EACrC,IAAI;AAAA,EACJ,aAAa;AAAA;AACf;AAwBA,eAAO,OACL,KACA,KACe;AAUf,QAAM,MAAO,KAAK,WAAW,CAAC;AAI9B,QAAM,WAAW,IAAI,OAAO,YAAY,IAAI,YAAY;AACxD,QAAM,iBACJ,IAAI,OAAO,kBAAkB,IAAI,kBAAkB;AACrD,MAAI,CAAC,UAAU;AACb,YAAQ;AAAA,MACN;AAAA,MACA,EAAE,SAAS,IAAI;AAAA,IACjB;AACA;AAAA,EACF;AACA,QAAM,QAAQ,EAAE,UAAU,eAAe;AACzC,QAAM,KAAM,IAAI,QAAQ,IAAI,EAAoB,KAAK;AAErD,QAAM,MAAM,oBAAI,KAAK;AAgBrB,QAAM,sBAAsB,MAAM;AAAA,IAChC;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM,kBAAkB;AAAA,MACxC,UAAU;AAAA,MACV,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,qBAAqB,EAAE,KAAK,KAAK;AAAA,IACnC;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,SAAS,EAAE,cAAc,MAAM;AAAA,IACjC;AAAA,IACA;AAAA,EACF;AAEA,QAAM,oBAAoB,OAAO;AAAA,IAC/B,QAAQ,IAAI,mCAAmC;AAAA,IAC/C;AAAA,EACF;AAIA,QAAM,iBACJ,OAAO,SAAS,iBAAiB,KAAK,qBAAqB,IAAI,oBAAoB;AACrF,QAAM,gBAAgB,IAAI,KAAK,IAAI,QAAQ,IAAI,iBAAiB,KAAK,GAAI;AACzE,QAAM,kBAAkB,MAAM;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM,kBAAkB;AAAA,MACxC,UAAU;AAAA,MACV,WAAW;AAAA,MACX,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,MAKR,qBAAqB,EAAE,KAAK,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAajC,KAAK,CAAC,EAAE,cAAc,KAAK,GAAG,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,CAAC;AAAA,IACxE;AAAA,IACA;AAAA,MACE,OAAO;AAAA,MACP,SAAS,EAAE,cAAc,MAAM;AAAA,IACjC;AAAA,IACA;AAAA,EACF;AAEA,QAAM,QAAQ,8BAA8B,8BAA8B,IAAI;AAC9E,MAAI,WAAW;AACf,MAAI,YAAY;AAChB,aAAW,WAAW,qBAA+C;AACnE,UAAM,kBAAkB,QAAQ;AAChC,QAAI,CAAC,mBAAmB,mBAAmB,EAAG;AAC9C,QAAI,CAAC,MAAM,QAAQ,gBAAgB,MAAM,iBAAiB,GAAG,EAAG;AAChE,UAAM,UAAiC;AAAA,MACrC,WAAW,QAAQ;AAAA,MACnB,OAAO;AAAA,QACL,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ,kBAAkB,MAAM,kBAAkB;AAAA,MACpE;AAAA,MACA,SAAS;AAAA,IACX;AACA,UAAM,MAAM,QAAQ,OAA6C;AACjE,gBAAY;AAAA,EACd;AAMA,aAAW,WAAW,iBAA2C;AAC/D,UAAM,UAAiC;AAAA,MACrC,WAAW,QAAQ;AAAA,MACnB,OAAO;AAAA,QACL,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ,kBAAkB,MAAM,kBAAkB;AAAA,MACpE;AAAA,MACA,SAAS;AAAA,IACX;AACA,UAAM,MAAM,QAAQ,OAA6C;AACjE,YAAQ,eAAe;AACvB,iBAAa;AAAA,EACf;AACA,MAAI,YAAY,EAAG,OAAM,GAAG,MAAM;AAElC,MAAI,WAAW,KAAK,YAAY,GAAG;AACjC,YAAQ;AAAA,MACN,+CAA+C,QAAQ,aAAa,SAAS,wCAAwC,MAAM,QAAQ;AAAA,IACrI;AAAA,EACF;AACF;AAEA,SAAS,MAAM,cAA2B,iBAAyB,KAAoB;AACrF,MAAI,CAAC,aAAc,QAAO;AAC1B,QAAM,QAAQ,IAAI,KAAK,aAAa,QAAQ,IAAI,kBAAkB,GAAI;AACtE,SAAO,OAAO;AAChB;",
+  "names": []
+}

package/dist/modules/communication_channels/workers/reaction-processor.js

@@ -0,0 +1,192 @@
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import {
+  COMMUNICATION_CHANNELS_PROCESS_INBOUND_REACTION_COMMAND_ID
+} from "../commands/process-inbound-reaction.js";
+import { COMMUNICATION_CHANNELS_QUEUES, getCommunicationChannelsQueue } from "../lib/queue.js";
+import { classifyOutboundError, computeBackoffMs } from "../lib/error-classification.js";
+import { CommunicationChannel } from "../data/entities.js";
+import {
+  REACTION_PROCESSOR_MAX_ATTEMPTS
+} from "../lib/reaction-processor-types.js";
+import { refreshCredentialsIfNeeded } from "../lib/credential-refresh.js";
+const metadata = {
+  queue: COMMUNICATION_CHANNELS_QUEUES.reactions,
+  id: "communication_channels:reaction-processor",
+  concurrency: 10
+};
+async function handle(job, ctx) {
+  switch (job.payload.kind) {
+    case "inbound":
+      await handleInbound(job.payload, ctx);
+      return;
+    case "outbound_send":
+      await handleOutboundSend(job.payload, ctx);
+      return;
+    case "outbound_remove":
+      await handleOutboundRemove(job.payload, ctx);
+      return;
+    default: {
+      const exhaustive = job.payload;
+      throw new Error(`Unknown reaction job kind: ${JSON.stringify(exhaustive)}`);
+    }
+  }
+}
+async function handleInbound(payload, ctx) {
+  const commandBus = ctx.resolve("commandBus");
+  const containerProxy = { resolve: ctx.resolve.bind(ctx) };
+  const commandCtx = {
+    container: containerProxy,
+    auth: null,
+    organizationScope: null,
+    selectedOrganizationId: payload.scope.organizationId ?? null,
+    organizationIds: payload.scope.organizationId ? [payload.scope.organizationId] : null
+  };
+  const input = {
+    channelId: payload.channelId,
+    providerKey: payload.providerKey,
+    channelType: payload.channelType,
+    scope: payload.scope,
+    event: payload.event
+  };
+  await commandBus.execute(
+    COMMUNICATION_CHANNELS_PROCESS_INBOUND_REACTION_COMMAND_ID,
+    { input, ctx: commandCtx }
+  );
+}
+async function handleOutboundSend(payload, ctx) {
+  const result = await callAdapterOutbound(payload, ctx, "send");
+  await maybeRetry(result, payload, ctx);
+}
+async function handleOutboundRemove(payload, ctx) {
+  const result = await callAdapterOutbound(payload, ctx, "remove");
+  await maybeRetry(result, payload, ctx);
+}
+async function callAdapterOutbound(payload, ctx, action) {
+  const adapterRegistry = ctx.resolve("channelAdapterRegistry");
+  const adapter = adapterRegistry?.get(payload.providerKey);
+  if (!adapter) {
+    return { status: "no_adapter", message: `No adapter for provider '${payload.providerKey}'` };
+  }
+  const em = ctx.resolve("em").fork();
+  const channel = await findOneWithDecryption(
+    em,
+    CommunicationChannel,
+    {
+      id: payload.channelId,
+      tenantId: payload.scope.tenantId,
+      organizationId: payload.scope.organizationId ?? null,
+      deletedAt: null
+    },
+    void 0,
+    payload.scope
+  );
+  if (!channel) {
+    return { status: "no_adapter", message: `Channel ${payload.channelId} not found` };
+  }
+  if (!channel.isActive) {
+    return { status: "channel_inactive", message: `Channel ${payload.channelId} is inactive` };
+  }
+  let credentials = {};
+  let credentialsService = null;
+  try {
+    credentialsService = ctx.resolve("integrationCredentialsService");
+  } catch {
+    credentialsService = null;
+  }
+  const credentialsScope = {
+    tenantId: payload.scope.tenantId,
+    organizationId: payload.scope.organizationId ?? payload.scope.tenantId,
+    userId: channel.userId ?? null
+  };
+  if (channel.credentialsRef && credentialsService) {
+    try {
+      credentials = await credentialsService.resolve(`channel_${channel.providerKey}`, credentialsScope) ?? {};
+    } catch {
+      credentials = {};
+    }
+  }
+  const refreshed = await refreshCredentialsIfNeeded(
+    {
+      adapter,
+      channelId: channel.id,
+      credentials,
+      scope: credentialsScope
+    },
+    { credentialsService }
+  );
+  credentials = refreshed.credentials;
+  try {
+    if (action === "send") {
+      if (typeof adapter.sendReaction !== "function") {
+        return { status: "no_adapter", message: `Adapter '${adapter.providerKey}' has no sendReaction` };
+      }
+      const sendPayload = payload;
+      await adapter.sendReaction({
+        externalMessageId: sendPayload.messageId,
+        // platform message id; the adapter maps to provider id via its own channel-link lookup if needed
+        conversationId: sendPayload.conversationId ?? "",
+        emoji: sendPayload.emoji,
+        credentials,
+        scope: {
+          tenantId: payload.scope.tenantId,
+          organizationId: payload.scope.organizationId ?? payload.scope.tenantId
+        }
+      });
+    } else {
+      if (typeof adapter.removeReaction !== "function") {
+        return { status: "no_adapter", message: `Adapter '${adapter.providerKey}' has no removeReaction` };
+      }
+      const removePayload = payload;
+      await adapter.removeReaction({
+        externalMessageId: removePayload.externalReactionId ?? removePayload.messageId,
+        conversationId: removePayload.conversationId ?? "",
+        emoji: removePayload.emoji,
+        credentials,
+        scope: {
+          tenantId: payload.scope.tenantId,
+          organizationId: payload.scope.organizationId ?? payload.scope.tenantId
+        }
+      });
+    }
+    return { status: "ok" };
+  } catch (err) {
+    const classification = classifyOutboundError(err);
+    return {
+      status: "failed",
+      transient: classification.transient,
+      message: classification.message
+    };
+  }
+}
+async function maybeRetry(result, payload, ctx) {
+  if (result.status === "ok") return;
+  if (result.status === "no_adapter" || result.status === "channel_inactive") {
+    console.error(
+      `[communication_channels:reaction-processor] ${result.status}: ${result.message}`
+    );
+    return;
+  }
+  if (!result.transient) {
+    console.error(
+      `[communication_channels:reaction-processor] permanent failure: ${result.message}`
+    );
+    return;
+  }
+  const attempt = payload.attempt ?? 1;
+  if (attempt >= REACTION_PROCESSOR_MAX_ATTEMPTS) {
+    console.error(
+      `[communication_channels:reaction-processor] giving up after attempt ${attempt}: ${result.message}`
+    );
+    return;
+  }
+  const next = { ...payload, attempt: attempt + 1 };
+  const queue = getCommunicationChannelsQueue(COMMUNICATION_CHANNELS_QUEUES.reactions);
+  await queue.enqueue(next, {
+    delayMs: computeBackoffMs(attempt)
+  });
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=reaction-processor.js.map